@ornncompute/cli 1.0.72 → 1.0.75

package/vendor/capabilities/capabilities/admin-nodes-lifecycle.js

@@ -18,16 +18,10 @@ const rebootInput = z.object({
 const hardResetInput = rebootInput.extend({
     erase_local_data: z.literal(true),
 });
-const terminationInput = z.object({
-    ...commonInput,
-    delete_node_record: z.literal(true),
-    skip_cleanup: z.boolean().optional(),
-});
 const assignmentInput = z.object({
     ...commonInput,
     reservation_id: z.string().trim().min(1),
 });
-const managementInput = z.object(commonInput);
 function adminLifecycleHelp(command, outcome, human, automation, review) {
     return {
         audience: "admin",
@@ -83,7 +77,7 @@ export const adminNodeRebootCapability = defineCapability({
     http: { method: "POST", path: "/nodes/{id}/reboot" },
     cli: {
         command: ["admin", "nodes", "reboot"],
-        vnext: adminLifecycleHelp(["admin", "nodes", "reboot"], "Reboot one exact live machine while preserving local data and access configuration.", "ornn admin nodes reboot <node-ref> [--yes] [--no-wait] [--timeout SECONDS]", "Unsupported: reboot requires an eligible human terminal.", "Node and live-machine identities, supplier, facility, capacity assignment, and preserved access."),
+        vnext: adminLifecycleHelp(["admin", "nodes", "reboot"], "Reboot one exact live machine while preserving local data and access configuration.", "ornn admin nodes reboot <node-ref> [] [--no-wait] [--timeout SECONDS]", "Unsupported: reboot requires an eligible human terminal.", "Node and live-machine identities, supplier, facility, capacity assignment, and preserved access."),
     },
     mcp: false,
     slack: false,
@@ -99,102 +93,13 @@ export const adminNodeHardResetCapability = defineCapability({
     http: { method: "POST", path: "/nodes/{id}/reboot" },
     cli: {
         command: ["admin", "nodes", "hard-reset"],
-        vnext: adminLifecycleHelp(["admin", "nodes", "hard-reset"], "Erase local tenant data and hard reset one exact live machine.", "ornn admin nodes hard-reset <node-ref> --erase-local-data [--yes] [--no-wait] [--timeout SECONDS]", "Unsupported: hard reset requires an eligible human terminal.", "Node and live-machine identities, supplier, facility, capacity assignment, erased local data, and restored keys."),
+        vnext: adminLifecycleHelp(["admin", "nodes", "hard-reset"], "Erase local tenant data and hard reset one exact live machine.", "ornn admin nodes hard-reset <node-ref> --erase-local-data [] [--no-wait] [--timeout SECONDS]", "Unsupported: hard reset requires an eligible human terminal.", "Node and live-machine identities, supplier, facility, capacity assignment, erased local data, and restored keys."),
     },
     mcp: false,
     slack: false,
     input: hardResetInput,
     execute: (ctx, input) => reboot(ctx, input, "hard_reset"),
 });
-export const adminNodeSuspendManagementCapability = defineCapability({
-    id: "nodes.suspend_management",
-    domain: "fleet",
-    roles: ["admin"],
-    description: "Suspend Ornn management while leaving the exact host powered on.",
-    mutation: "preview-confirm",
-    http: { method: "POST", path: "/nodes/{id}/off-grid" },
-    cli: {
-        command: ["admin", "nodes", "suspend-management"],
-        vnext: adminLifecycleHelp(["admin", "nodes", "suspend-management"], "Remove Ornn management and managed access from one powered-on node.", "ornn admin nodes suspend-management <node-ref> [--reason TEXT] [--yes] [--no-wait]", "ornn admin nodes suspend-management <node-id> --yes --idempotency-key KEY --format json", "Node, supplier, facility, capacity assignment, management removal, and managed-access loss."),
-    },
-    mcp: false,
-    slack: false,
-    input: managementInput,
-    execute: async (ctx, input) => {
-        const parsed = managementInput.parse(input);
-        const id = nodeId(parsed);
-        const body = {
-            ...(parsed.idempotency_key ? { request_id: parsed.idempotency_key } : {}),
-            ...(parsed.reason ? { reason: parsed.reason } : {}),
-        };
-        if (!ctx.confirmed)
-            return preview("nodes.suspend_management", { node_id: id, ...body });
-        return ctx.fetch(`/nodes/${encodeURIComponent(id)}/off-grid`, {
-            method: "POST",
-            body,
-            headers: requestHeaders(parsed.idempotency_key),
-        });
-    },
-});
-export const adminNodeResumeManagementCapability = defineCapability({
-    id: "nodes.resume_management",
-    domain: "fleet",
-    roles: ["admin"],
-    description: "Resume Ornn management for one exact off-grid node.",
-    mutation: "preview-confirm",
-    http: { method: "POST", path: "/nodes/{id}/on-grid" },
-    cli: {
-        command: ["admin", "nodes", "resume-management"],
-        vnext: adminLifecycleHelp(["admin", "nodes", "resume-management"], "Restore Ornn management and managed access on one off-grid node.", "ornn admin nodes resume-management <node-ref> [--yes] [--no-wait]", "ornn admin nodes resume-management <node-id> --yes --idempotency-key KEY --format json", "Node, supplier, facility, capacity assignment, remote re-enrollment, and restored managed access."),
-    },
-    mcp: false,
-    slack: false,
-    input: managementInput,
-    execute: async (ctx, input) => {
-        const parsed = managementInput.parse(input);
-        const id = nodeId(parsed);
-        if (!ctx.confirmed)
-            return preview("nodes.resume_management", { node_id: id });
-        return ctx.fetch(`/nodes/${encodeURIComponent(id)}/on-grid`, {
-            method: "POST",
-            body: {
-                ...(parsed.idempotency_key ? { request_id: parsed.idempotency_key } : {}),
-            },
-            headers: requestHeaders(parsed.idempotency_key),
-        });
-    },
-});
-export const adminNodeTerminateCapability = defineCapability({
-    id: "nodes.terminate",
-    domain: "fleet",
-    roles: ["admin"],
-    description: "Delete one exact node record with explicit cleanup scope and consequence review.",
-    mutation: "preview-confirm",
-    http: { method: "POST", path: "/nodes/{id}/terminate" },
-    cli: {
-        command: ["admin", "nodes", "terminate"],
-        vnext: adminLifecycleHelp(["admin", "nodes", "terminate"], "End managed access and permanently delete one exact node record.", "ornn admin nodes terminate <node-ref> --delete-node-record [--skip-cleanup] [--reason TEXT] [--yes]", "ornn admin nodes terminate <node-id> --delete-node-record --yes --idempotency-key KEY --format json", "Node, supplier, facility, reservation/capacity, host cleanup, node-record deletion, and access loss."),
-    },
-    mcp: false,
-    slack: false,
-    input: terminationInput,
-    execute: async (ctx, input) => {
-        const parsed = terminationInput.parse(input);
-        const id = nodeId(parsed);
-        const body = {
-            force: parsed.skip_cleanup === true,
-            ...(parsed.idempotency_key ? { request_id: parsed.idempotency_key } : {}),
-            ...(parsed.reason ? { reason: parsed.reason } : {}),
-        };
-        if (!ctx.confirmed)
-            return preview("nodes.terminate", { node_id: id, ...body });
-        return ctx.fetch(`/nodes/${encodeURIComponent(id)}/terminate`, {
-            method: "POST",
-            body,
-            headers: requestHeaders(parsed.idempotency_key),
-        });
-    },
-});
 export const adminNodeAssignCapability = defineCapability({
     id: "nodes.assign",
     domain: "fleet",
@@ -204,7 +109,7 @@ export const adminNodeAssignCapability = defineCapability({
     http: { method: "POST", path: "/nodes/{id}/assign" },
     cli: {
         command: ["admin", "nodes", "assign"],
-        vnext: adminLifecycleHelp(["admin", "nodes", "assign"], "Assign one exact node to one exact capacity reservation.", "ornn admin nodes assign <node-ref> --reservation <reservation-id> [--yes] [--no-wait]", "ornn admin nodes assign <node-id> --reservation <reservation-id> --yes --idempotency-key KEY --format json", "Node, supplier, facility, previous and requested capacity assignments, and tenant access change."),
+        vnext: adminLifecycleHelp(["admin", "nodes", "assign"], "Assign one exact node to one exact capacity reservation.", "ornn admin nodes assign <node-ref> --reservation <reservation-id> [] [--no-wait]", "ornn admin nodes assign <node-id> --reservation <reservation-id>  --idempotency-key KEY --format json", "Node, supplier, facility, previous and requested capacity assignments, and tenant access change."),
     },
     mcp: false,
     slack: false,
@@ -228,8 +133,5 @@ export const adminNodeAssignCapability = defineCapability({
 export const adminNodeLifecycleCapabilities = [
     adminNodeRebootCapability,
     adminNodeHardResetCapability,
-    adminNodeSuspendManagementCapability,
-    adminNodeResumeManagementCapability,
-    adminNodeTerminateCapability,
     adminNodeAssignCapability,
 ];

package/vendor/capabilities/capabilities/admin.js

@@ -36,9 +36,9 @@ function withAdminBinding(capability, help) {
         },
     };
 }
-export const adminUsersListCapability = withAdminBinding(usersListCapability, adminHelp(["admin", "users", "list"], "List users belonging to organizations in the Authorization directory.", "ornn admin users list [--query QUERY] [--organization UUID] [--limit 25] [--offset OFFSET] [--cursor CURSOR]", "ornn admin users list --query QUERY --limit 25 [--cursor CURSOR] --format json"));
-export const adminOrganizationsListCapability = withAdminBinding(organizationListCapability, adminHelp(["admin", "organizations", "list"], "List organizations in the Authorization directory.", "ornn admin organizations list [--query QUERY] [--role consumer|supplier] [--approved true|false] [--ids UUID,...] [--limit 25] [--offset OFFSET] [--cursor CURSOR]", "ornn admin organizations list --query QUERY --limit 25 [--cursor CURSOR] --format json"));
-export const adminSuppliersListCapability = withAdminBinding(listSuppliersCapability, adminHelp(["admin", "suppliers", "list"], "List supplier organizations visible to staff.", "ornn admin suppliers list [--limit 50] [--cursor CURSOR]", "ornn admin suppliers list --limit 50 --format json"));
+export const adminUsersListCapability = withAdminBinding(usersListCapability, adminHelp(["admin", "users", "list"], "List users in the Authorization directory; pass next_offset as --offset to continue.", "ornn admin users list [--query QUERY] [--organization UUID] [--limit 25] [--offset OFFSET]", "ornn admin users list --query QUERY --limit 25 [--offset OFFSET] --format json"));
+export const adminOrganizationsListCapability = withAdminBinding(organizationListCapability, adminHelp(["admin", "organizations", "list"], "List organizations in the Authorization directory; pass next_offset as --offset to continue.", "ornn admin organizations list [--query QUERY] [--role consumer|supplier] [--approved true|false] [--ids UUID,...] [--limit 25] [--offset OFFSET]", "ornn admin organizations list --query QUERY --limit 25 [--offset OFFSET] --format json"));
+export const adminSuppliersListCapability = withAdminBinding(listSuppliersCapability, adminHelp(["admin", "suppliers", "list"], "List supplier organizations visible to staff; pass next_offset as --offset to continue.", "ornn admin suppliers list [--limit 50] [--offset OFFSET]", "ornn admin suppliers list --limit 50 --offset OFFSET --format json"));
 export const adminFacilitiesListCapability = withAdminBinding(listFacilitiesCapability, adminHelp(["admin", "facilities", "list"], "List facilities visible to staff.", "ornn admin facilities list [--supplier UUID] [--limit 50] [--cursor CURSOR]", "ornn admin facilities list --limit 50 --format json"));
 export const adminNodesListCapability = withAdminBinding(listNodesCapability, adminHelp(["admin", "nodes", "list"], "List enrolled, ghost, and off-grid nodes.", "ornn admin nodes list [--supplier UUID] [--facility FACILITY] [--status STATUS] [--reservation UUID] [--limit 50] [--cursor CURSOR]", "ornn admin nodes list --limit 50 [--cursor CURSOR] --format json"));
 const nodeInput = z.object({ node_id: z.string().min(1) });

package/vendor/capabilities/capabilities/clusters.js

@@ -204,7 +204,7 @@ export const clusterCliCapabilities = [
         mutation: "preview-confirm",
         outcome: "Add one currently eligible machine, or rediscover that exact membership goal.",
         human: "ornn clusters add-node [<cluster-id>] [<machine-id-or-hostname>] [--guided] [--no-wait]",
-        automation: "ornn clusters add-node <cluster-id> <machine-id> --yes --idempotency-key <key> --format json",
+        automation: "ornn clusters add-node <cluster-id> <machine-id>  --idempotency-key <key> --format json",
         acceptedReferences: [
             "canonical cluster ID",
             "canonical machine ID",
@@ -221,7 +221,7 @@ export const clusterCliCapabilities = [
         mutation: "preview-confirm",
         outcome: "Remove one exact member, or rediscover that exact membership goal.",
         human: "ornn clusters remove-node [<cluster-id>] [<machine-id-or-hostname>] [--guided] [--no-wait]",
-        automation: "ornn clusters remove-node <cluster-id> <machine-id> --yes --idempotency-key <key> --format json",
+        automation: "ornn clusters remove-node <cluster-id> <machine-id>  --idempotency-key <key> --format json",
         acceptedReferences: [
             "canonical cluster ID",
             "canonical machine ID",
@@ -238,7 +238,7 @@ export const clusterCliCapabilities = [
         mutation: "preview-confirm",
         outcome: "End cluster lifecycle while reporting partial member failures and continuing reservation charges.",
         human: "ornn clusters teardown [<cluster-id>] [--guided] [--no-wait]",
-        automation: "ornn clusters teardown <cluster-id> --yes --idempotency-key <key> --format json",
+        automation: "ornn clusters teardown <cluster-id>  --idempotency-key <key> --format json",
         acceptedReferences: ["canonical cluster ID", "invocation-local guided choice"],
         review: "The cluster and native access end; the capacity reservation and its charges remain.",
         related: ["clusters show", "reservations show"],

package/vendor/capabilities/capabilities/commerce-market.js

@@ -33,7 +33,7 @@ export const listingsListCapability = defineCapability({
     id: "listings.list",
     domain: "listings",
     roles: ["user"],
-    description: "List native capacity listings. Primary listings require organization approval. Returns capacityListingId, hardware, capacity and availability; read listings.terms separately for prices and durations.",
+    description: "List native capacity listings. Primary listings require organization approval. Returns capacityListingId, hardware, capacity and availability; when nextCursor is present, pass it back as cursor for the next page. Read listings.terms separately for prices and durations.",
     mutation: "read",
     http: { method: "GET", path: "/commerce/v2/listings" },
     input: listingsListInput,
@@ -142,13 +142,13 @@ export const listingRelistCapability = defineCapability({
     id: "listings.relist",
     domain: "listings",
     roles: ["user"],
-    description: "Relist whole nodes of a reservation's capacity using a native availability window, nodeCount and financial terms. Buyers run on nodes Ornn assigns when their rental starts. Requires confirm: true.",
+    description: "Relist whole nodes of a reservation's capacity using a native availability window, nodeCount and financial terms. Buyers run on nodes Ornn assigns when their rental starts..",
     mutation: "preview-confirm",
     http: { method: "POST", path: "/commerce/reservations/{reservationId}/relist" },
     input: listingRelistInput,
     cli: {
         command: ["capacity-offers", "relist"],
-        vnext: help(["capacity-offers", "relist"], "Relist reserved capacity with explicit financial terms.", "ornn capacity-offers relist --reservation-id UUID --node-count COUNT --starts-at TIME --ends-at TIME --terms JSON", "ornn capacity-offers relist --reservation-id UUID --node-count 1 --starts-at TIME --ends-at TIME --terms JSON --idempotency-key KEY --yes --format json", ["capacity-offers terms", "capacity-offers delist"], 24, ["reservation ID"]),
+        vnext: help(["capacity-offers", "relist"], "Relist reserved capacity with explicit financial terms.", "ornn capacity-offers relist --reservation-id UUID --node-count COUNT --starts-at TIME --ends-at TIME --terms JSON", "ornn capacity-offers relist --reservation-id UUID --node-count 1 --starts-at TIME --ends-at TIME --terms JSON --idempotency-key KEY  --format json", ["capacity-offers terms", "capacity-offers delist"], 24, ["reservation ID"]),
     },
     slack: false,
     execute: async (ctx, input) => {
@@ -179,7 +179,7 @@ export const listingUpdateCapability = defineCapability({
     id: "listings.update",
     domain: "listings",
     roles: ["admin"],
-    description: "Staff only: edit one advertised native financial term with its complete financial fields. Reuse idempotencyKey on retries. Requires confirm: true.",
+    description: "Staff only: edit one advertised native financial term with its complete financial fields. Reuse idempotencyKey on retries..",
     mutation: "preview-confirm",
     http: { method: "PATCH", path: "/commerce/v2/listings/{listingId}/terms/{listingTermsId}" },
     input: listingUpdateInput,
@@ -212,13 +212,13 @@ export const listingDelistCapability = defineCapability({
     id: "listings.delist",
     domain: "listings",
     roles: ["user"],
-    description: "Delist a listing you own. Its unsold time leaves the market, its spot asks are cancelled and running spot reservations on it end. Windows already bought stay sold. Requires confirm: true.",
+    description: "Delist a listing you own. Its unsold time leaves the market, its spot asks are cancelled and running spot reservations on it end. Windows already bought stay sold..",
     mutation: "preview-confirm",
     http: { method: "POST", path: "/commerce/v2/listings/{listingId}/delist" },
     input: listingDelistInput,
     cli: {
         command: ["capacity-offers", "delist"],
-        vnext: help(["capacity-offers", "delist"], "Delist a listing you relisted.", "ornn capacity-offers delist --listing-id <id>", "ornn capacity-offers delist --listing-id <id> --yes --format json", ["capacity-offers relist"], 26, ["listing ID"]),
+        vnext: help(["capacity-offers", "delist"], "Delist a listing you relisted.", "ornn capacity-offers delist --listing-id <id>", "ornn capacity-offers delist --listing-id <id>  --format json", ["capacity-offers relist"], 26, ["listing ID"]),
     },
     slack: false,
     execute: async (ctx, input) => {
@@ -256,7 +256,7 @@ export const reservationsListCapability = defineCapability({
     id: "reservations.list",
     domain: "reservations",
     roles: ["user"],
-    description: "List this organization's reservations, schedule and spot alike (a running spot reservation has no end time). With listingId, list the trades on a listing you own.",
+    description: "List this organization's reservations, schedule and spot alike (a running spot reservation has no end time). With listingId, list the trades on a listing you own. When nextCursor is present, pass it back as cursor for the next page.",
     mutation: "read",
     http: { method: "GET", path: "/commerce/reservations" },
     input: reservationsListInput,
@@ -348,13 +348,13 @@ export const reservationPurchaseCapability = defineCapability({
     id: "reservations.purchase",
     domain: "reservations",
     roles: ["user"],
-    description: "Book a window of a relisted (secondary) listing on one of its terms at the term's price. The GPUs are held for you until the window starts; then it becomes your reservation, with the booking's ID. Nothing is charged when you book. Primary listings take offers instead (offers.post). Requires confirm: true.",
+    description: "Book a window of a relisted (secondary) listing on one of its terms at the term's price. The GPUs are held for you until the window starts; then it becomes your reservation, with the booking's ID. Nothing is charged when you book. Primary listings take offers instead (offers.post)..",
     mutation: "preview-confirm",
     http: { method: "POST", path: "/v1/markets/bookings" },
     input: reservationPurchaseInput,
     cli: {
         command: ["reservations", "buy"],
-        vnext: help(["reservations", "buy"], "Book a window of relisted capacity at its term's price.", "ornn reservations buy --listing-id <id> --listing-term-id <id> --starts-at <time> --ends-at <time> --price-per-gpu-hour-micro-usd <n> [--node-count <n>]", "ornn reservations buy --listing-id <id> --listing-term-id <id> --starts-at <time> --ends-at <time> --price-per-gpu-hour-micro-usd 4000000 --idempotency-key <key> --yes --format json", ["capacity-offers availability", "capacity-offers terms", "reservations show"], 30, ["listingTermsId from capacity-offers terms"]),
+        vnext: help(["reservations", "buy"], "Book a window of relisted capacity at its term's price.", "ornn reservations buy --listing-id <id> --listing-term-id <id> --starts-at <time> --ends-at <time> --price-per-gpu-hour-micro-usd <n> [--node-count <n>]", "ornn reservations buy --listing-id <id> --listing-term-id <id> --starts-at <time> --ends-at <time> --price-per-gpu-hour-micro-usd 4000000 --idempotency-key <key>  --format json", ["capacity-offers availability", "capacity-offers terms", "reservations show"], 30, ["listingTermsId from capacity-offers terms"]),
     },
     slack: false,
     execute: async (ctx, input) => {

package/vendor/capabilities/capabilities/compute.js

@@ -140,7 +140,7 @@ export const launchCapability = cliOnly({
             order: 2,
             outcome: "Launch one reviewed VM, Bare Metal machine, Kubernetes cluster, or Slurm cluster from active reserved capacity, including a declared durable Bare Metal workspace.",
             human: "ornn launch [<capacity-reservation>] --mode vm|bare-metal|kubernetes|slurm [--key <ssh-key>]; Bare Metal may add --network shared --volume <managed-volume> --mount-access read-only|read-write; Kubernetes/Slurm prompt for missing --network public|private and --nodes <membership-count>, and may add running VMs with --vms <vm-ids>",
-            automation: "ornn launch <canonical-reservation-id> --mode vm|bare-metal|kubernetes|slurm --yes --idempotency-key <key> --format json; VM/Bare Metal/Slurm require --key <canonical-key-id>; Bare Metal may add --network shared --volume <canonical-volume-id> --mount-access read-only|read-write; Kubernetes/Slurm require --network public|private --nodes <membership-count> --machines <canonical-machine-ids>, and may add --vms <canonical-vm-ids> (with --nodes 0 for a cluster of VMs only)",
+            automation: "ornn launch <canonical-reservation-id> --mode vm|bare-metal|kubernetes|slurm  --idempotency-key <key> --format json; VM/Bare Metal/Slurm require --key <canonical-key-id>; Bare Metal may add --network shared --volume <canonical-volume-id> --mount-access read-only|read-write; Kubernetes/Slurm require --network public|private --nodes <membership-count> --machines <canonical-machine-ids>, and may add --vms <canonical-vm-ids> (with --nodes 0 for a cluster of VMs only)",
             acceptedReferences: [
                 "canonical capacity-reservation ID",
                 "canonical eligible machine IDs",
@@ -262,7 +262,7 @@ export const machineSwitchCapability = cliOnly({
             order: 463,
             outcome: "Change only the explicitly requested VM, Bare Metal, or network goal while retaining SSH-key intent.",
             human: "ornn machines switch <canonical-reservation-id> [--mode vm|bare-metal] [--network public|private] [--erase-local-data]",
-            automation: "ornn machines switch <canonical-reservation-id> [--mode vm|bare-metal] [--network public|private] [--erase-local-data] --yes --idempotency-key <key> --format json",
+            automation: "ornn machines switch <canonical-reservation-id> [--mode vm|bare-metal] [--network public|private] [--erase-local-data]  --idempotency-key <key> --format json",
             acceptedReferences: ["canonical capacity-reservation ID"],
             review: "exact reservation, current and requested access mode, network intent, retained SSH keys, access interruption, and permanent local-data erasure for cross-mode changes",
             resumableStates: ["switch accepted", "SSH ready"],
@@ -287,7 +287,7 @@ export const machineRebootCapability = cliOnly({
             order: 464,
             outcome: "Reboot one exact machine and normally wait for restored SSH readiness.",
             human: "ornn machines reboot <canonical-machine-id|exact-hostname> [--no-wait]",
-            automation: "ornn machines reboot <canonical-machine-id> --yes --idempotency-key <key> --format json",
+            automation: "ornn machines reboot <canonical-machine-id>  --idempotency-key <key> --format json",
             acceptedReferences: [
                 "canonical machine ID",
                 "exact unique hostname",
@@ -316,7 +316,7 @@ export const machineResetCapability = cliOnly({
             order: 465,
             outcome: "Hard reset one exact machine only with explicit local-data erasure scope and final consent.",
             human: "ornn machines reset <canonical-machine-id|exact-hostname> --erase-local-data [--no-wait]",
-            automation: "ornn machines reset <canonical-machine-id> --erase-local-data --yes --idempotency-key <key> --format json",
+            automation: "ornn machines reset <canonical-machine-id> --erase-local-data  --idempotency-key <key> --format json",
             acceptedReferences: [
                 "canonical machine ID",
                 "exact unique hostname",
@@ -392,7 +392,7 @@ export const sshKeyDeleteCapability = cliOnly({
             order: 452,
             outcome: "Delete one exact organization SSH key without implying machine delivery.",
             human: "ornn ssh-keys delete <exact-key-id-or-label>",
-            automation: "ornn ssh-keys delete <canonical-key-id> --yes --idempotency-key <key> --format json",
+            automation: "ornn ssh-keys delete <canonical-key-id>  --idempotency-key <key> --format json",
             acceptedReferences: [
                 "canonical SSH-key ID",
                 "exact unique key label in an eligible terminal",
@@ -443,7 +443,7 @@ export const sshKeyAssignmentAssignCapability = cliOnly({
             order: 454,
             outcome: "Assign or replay one exact SSH-key relationship.",
             human: "ornn ssh-keys assignments assign <canonical-reservation-id> --key <exact-key-id-or-label>",
-            automation: "ornn ssh-keys assignments assign <canonical-reservation-id> --key <canonical-key-id> --yes --idempotency-key <key> --format json",
+            automation: "ornn ssh-keys assignments assign <canonical-reservation-id> --key <canonical-key-id>  --idempotency-key <key> --format json",
             acceptedReferences: [
                 "canonical capacity-reservation ID",
                 "canonical SSH-key ID",
@@ -472,7 +472,7 @@ export const sshKeyAssignmentSyncCapability = cliOnly({
             order: 455,
             outcome: "Queue idempotent SSH-key synchronization and report delayed delivery honestly.",
             human: "ornn ssh-keys assignments sync <canonical-reservation-id>",
-            automation: "ornn ssh-keys assignments sync <canonical-reservation-id> --yes --idempotency-key <key> --format json",
+            automation: "ornn ssh-keys assignments sync <canonical-reservation-id>  --idempotency-key <key> --format json",
             acceptedReferences: ["canonical capacity-reservation ID"],
             review: "reservation, assigned keys, and target machines",
             resumableStates: ["queued", "installed", "failed"],

package/vendor/capabilities/capabilities/credits.js

@@ -37,7 +37,7 @@ export const creditGrantCapability = defineCapability({
             category: "resource",
             command: ["admin", "organizations", "grant-credit"],
             outcome: "Grant Ornn credits to a customer organization.",
-            human: "ornn admin organizations grant-credit --organization UUID --amount-cents N --note TEXT --idempotency-key UUID [--yes]",
+            human: "ornn admin organizations grant-credit --organization UUID --amount-cents N --note TEXT --idempotency-key UUID []",
             automation: "Requires an eligible human terminal.",
             acceptedReferences: ["organization UUID from admin organizations list"],
             review: "Review the organization, USD amount, note, and grant UUID before default-no consent.",
@@ -53,6 +53,11 @@ export const creditGrantCapability = defineCapability({
                     format: "uuid",
                     description: "Exact customer organization UUID from organization_list.",
                 },
+                adjustmentId: {
+                    type: "string",
+                    format: "uuid",
+                    description: "a new UUID per grant, reused on retries",
+                },
                 amountCents: {
                     type: "integer",
                     minimum: 1,
@@ -64,7 +69,7 @@ export const creditGrantCapability = defineCapability({
                     description: "Reason for the credit grant, at most 500 UTF-8 bytes.",
                 },
             },
-            required: ["organizationId", "amountCents", "note"],
+            required: ["organizationId", "adjustmentId", "amountCents", "note"],
         },
     },
     input: creditGrantInput,

package/vendor/capabilities/capabilities/external-buckets.js

@@ -131,7 +131,7 @@ export const externalBucketCapabilities = [
         input: connectInput,
         outcome: "Create or rediscover one external bucket connection with verification kept separate.",
         human: "ornn external-buckets connect <gcs|s3|r2> --bucket <bucket> [--name <name>] [--prefix <prefix>] [--region <region>] [--account-id <id>|--endpoint-url <url>] [--access-key-id <id> --secret-access-key-file <path>] [--read-only|--read-write]",
-        automation: "ornn external-buckets connect <gcs|s3|r2> --bucket <bucket> <provider-inputs> --yes --idempotency-key <key> --format json",
+        automation: "ornn external-buckets connect <gcs|s3|r2> --bucket <bucket> <provider-inputs>  --idempotency-key <key> --format json",
         review: `Review the exact source, access mode, and credential presence before connecting it. ${gcsImportGuidance}`,
         related: ["external-buckets verify", "external-buckets import"],
     }),
@@ -143,7 +143,7 @@ export const externalBucketCapabilities = [
         input: credentialInput,
         outcome: "Update one connection's credentials and require a separate verification.",
         human: "ornn external-buckets update-credentials <external-bucket> --access-key-id <id> --secret-access-key-file <path>",
-        automation: "ornn external-buckets update-credentials <external-bucket-id> --access-key-id <id> --secret-access-key-file <path> --yes --idempotency-key <key> --format json",
+        automation: "ornn external-buckets update-credentials <external-bucket-id> --access-key-id <id> --secret-access-key-file <path>  --idempotency-key <key> --format json",
         acceptedReferences: ["canonical external bucket ID", "exact unique external bucket name"],
         review: "Credential changes invalidate the prior verification and require renewed review.",
         related: ["external-buckets verify"],
@@ -169,7 +169,7 @@ export const externalBucketCapabilities = [
         input: importInput,
         outcome: "Create or replay exactly one managed working copy with source writeback disabled.",
         human: "ornn external-buckets import <gcs|s3|r2> <external-bucket> --reservation <canonical-reservation-id> [--no-wait] [--timeout <duration>]",
-        automation: "ornn external-buckets import <gcs|s3> <external-bucket-id> --reservation <canonical-reservation-id> --yes --idempotency-key <key> [--wait --timeout <duration>] --format json",
+        automation: "ornn external-buckets import <gcs|s3> <external-bucket-id> --reservation <canonical-reservation-id>  --idempotency-key <key> [--wait --timeout <duration>] --format json",
         acceptedReferences: ["canonical external bucket ID", "exact unique external bucket name"],
         review: `Review the isolated destination and explicit no-writeback guarantee before importing. ${gcsImportGuidance}`,
         resumableStates: ["pending", "working", "partial", "failed", "interrupted"],
@@ -183,7 +183,7 @@ export const externalBucketCapabilities = [
         input: disconnectInput,
         outcome: "Remove one external source connection without writing to its source bucket.",
         human: "ornn external-buckets disconnect <external-bucket>",
-        automation: "ornn external-buckets disconnect <external-bucket-id> --yes --idempotency-key <key> --format json",
+        automation: "ornn external-buckets disconnect <external-bucket-id>  --idempotency-key <key> --format json",
         acceptedReferences: ["canonical external bucket ID", "exact unique external bucket name"],
         review: "Disconnecting reduces access to the source and is blocked while mounts remain.",
         related: ["storage detach", "external-buckets show"],