@ornncompute/cli 1.0.72 → 1.0.97

package/vendor/capabilities/capabilities/users.js

@@ -1,159 +0,0 @@
-import { z } from "zod";
-import { defineCapability } from "../capability.js";
-const directoryLimit = z.number().int().min(1).max(100).default(25);
-const directoryOffset = z.number().int().nonnegative().optional();
-export const organizationListInput = z.object({
-    q: z.string().trim().optional().describe("Company name, contact/member name, or email."),
-    role: z.enum(["consumer", "supplier"]).optional(),
-    approved: z.boolean().optional(),
-    ids: z.array(z.uuid()).min(1).max(100).optional(),
-    limit: directoryLimit,
-    offset: directoryOffset,
-});
-export const usersListInput = z.object({
-    q: z.string().trim().optional().describe("Person name, email, or company name."),
-    organization_id: z.uuid().optional(),
-    limit: directoryLimit,
-    offset: directoryOffset,
-});
-function directoryPath(input) {
-    const params = [
-        `limit=${input.limit}`,
-        `offset=${input.offset}`,
-        "sort=name",
-        "direction=asc",
-    ];
-    if (input.q)
-        params.push(`q=${encodeURIComponent(input.q)}`);
-    if (input.role)
-        params.push(`role=${encodeURIComponent(input.role)}`);
-    if (input.approved !== undefined) {
-        params.push(`approved=${input.approved}`);
-    }
-    if (input.ids)
-        params.push(`ids=${encodeURIComponent(input.ids.join(","))}`);
-    return `/v1/organizations?${params.join("&")}`;
-}
-function directoryMembers(organization) {
-    return organization.members ?? [];
-}
-function organizationMatchesQuery(organization, query) {
-    return (organization.name.toLowerCase().includes(query) ||
-        organization.id.toLowerCase() === query ||
-        [
-            organization.company_profile?.company_name,
-            organization.company_profile?.contact_name,
-            organization.company_profile?.contact_email,
-            organization.company_profile?.work_email,
-        ].some((value) => value?.toLowerCase().includes(query)));
-}
-export const organizationListCapability = defineCapability({
-    id: "organization.list",
-    domain: "users",
-    roles: ["admin"],
-    description: "List organizations from the Authorization directory. Search by company name, contact/member name, or email; filter by role, approval, or UUIDs. Use the organization id as organizationId when recording downtime, and ask the user to choose if matches are ambiguous.",
-    mutation: "read",
-    http: { method: "GET", path: "/v1/organizations" },
-    slack: {
-        parameters: {
-            type: "object",
-            properties: {
-                q: {
-                    type: "string",
-                    description: "Company name, contact/member name, or email.",
-                },
-                role: { type: "string", enum: ["consumer", "supplier"] },
-                approved: { type: "boolean" },
-                ids: {
-                    type: "array",
-                    items: { type: "string", format: "uuid" },
-                    minItems: 1,
-                    maxItems: 100,
-                },
-                limit: { type: "integer", minimum: 1, maximum: 100, default: 25 },
-                offset: { type: "integer", minimum: 0 },
-            },
-        },
-    },
-    input: organizationListInput,
-    execute: async (ctx, input) => {
-        const parsed = organizationListInput.parse(input);
-        const limit = parsed.limit;
-        const offset = parsed.offset ?? 0;
-        const rows = (await ctx.fetch(directoryPath({ ...parsed, limit, offset }), { method: "GET" }));
-        return {
-            organizations: rows.map((organization) => ({
-                id: organization.id,
-                name: organization.name,
-                role: organization.role,
-                approved: organization.approved,
-                members: directoryMembers(organization).map((member) => ({
-                    user_id: member.user_id,
-                    email: member.email,
-                    name: member.name ?? null,
-                })),
-            })),
-            ...(rows.length === limit ? { next_offset: offset + rows.length } : {}),
-        };
-    },
-});
-export const usersListCapability = defineCapability({
-    id: "users.list",
-    domain: "users",
-    roles: ["admin"],
-    description: "List users who belong to an organization, from the Authorization directory. Search by person name, email, or company name; use organization_id to restrict results to one organization.",
-    mutation: "read",
-    http: { method: "GET", path: "/v1/organizations" },
-    slack: {
-        parameters: {
-            type: "object",
-            properties: {
-                q: { type: "string", description: "Person name, email, or company name." },
-                organization_id: { type: "string", format: "uuid" },
-                limit: {
-                    type: "integer",
-                    minimum: 1,
-                    maximum: 100,
-                    default: 25,
-                    description: "Maximum number of organizations to search.",
-                },
-                offset: { type: "integer", minimum: 0 },
-            },
-        },
-    },
-    input: usersListInput,
-    execute: async (ctx, input) => {
-        const parsed = usersListInput.parse(input);
-        const limit = parsed.limit;
-        const offset = parsed.offset ?? 0;
-        const rows = (await ctx.fetch(directoryPath({
-            limit,
-            offset,
-            q: parsed.q,
-            ids: parsed.organization_id ? [parsed.organization_id] : undefined,
-        }), { method: "GET" }));
-        const q = parsed.q?.toLowerCase();
-        const users = rows.flatMap((organization) => {
-            const members = directoryMembers(organization);
-            const matchesOrganization = q ? organizationMatchesQuery(organization, q) : false;
-            return members
-                .filter((member) => !q ||
-                matchesOrganization ||
-                (member.name ?? "").toLowerCase().includes(q) || member.email.toLowerCase().includes(q))
-                .map((member) => ({
-                user_id: member.user_id,
-                email: member.email,
-                name: member.name ?? null,
-                organization_id: organization.id,
-                organization_name: organization.name,
-                organization_role: organization.role,
-                approved: organization.approved,
-            }));
-        });
-        return {
-            users,
-            ...(rows.length === limit ? { next_offset: offset + rows.length } : {}),
-        };
-    },
-});
-export const userCapabilities = [organizationListCapability, usersListCapability];

package/vendor/capabilities/capabilities/volumes.js

@@ -1,178 +0,0 @@
-import { z } from "zod";
-import { defineCapability, } from "../capability.js";
-const storageCliInput = z
-    .object({
-    $positionals: z.array(z.string()).optional(),
-    contentType: z.string().optional(),
-    cursor: z.string().optional(),
-    idempotencyKey: z.string().optional(),
-    limit: z.union([z.string(), z.number()]).optional(),
-    name: z.string().optional(),
-    output: z.string().optional(),
-    overwrite: z.boolean().optional(),
-    path: z.string().optional(),
-    prefix: z.string().optional(),
-    source: z.string().optional(),
-    yes: z.boolean().optional(),
-})
-    .strict();
-function storageExecutor(context) {
-    const interaction = context.cli?.interaction;
-    if (!interaction?.storage) {
-        throw new Error("This capability must execute through the Ornn CLI storage runtime.");
-    }
-    return interaction.storage.bind(interaction);
-}
-function storageCapability({ id, command, description, mutation, outcome, human, automation, acceptedReferences = [], review, related = [], }) {
-    return defineCapability({
-        id,
-        domain: "storage",
-        roles: ["user"],
-        description,
-        mutation,
-        input: storageCliInput,
-        cli: {
-            command,
-            vnext: {
-                arguments: "semantic",
-                audience: "customer",
-                category: "resource",
-                outcome,
-                human,
-                automation,
-                acceptedReferences,
-                ...(review ? { review } : {}),
-                related,
-            },
-        },
-        mcp: false,
-        slack: false,
-        execute: async (context, input) => storageExecutor(context)(id, input),
-    });
-}
-export const volumeCapabilities = [
-    storageCapability({
-        id: "storage.volumes.list",
-        command: ["volumes", "list"],
-        description: "List managed volumes in one bounded page.",
-        mutation: "read",
-        outcome: "List durable managed volumes independently from their mounts.",
-        human: "ornn volumes list [--limit <1-100>] [--cursor <cursor>]",
-        automation: "ornn volumes list --limit 50 --format json",
-        related: ["volumes show", "volumes create"],
-    }),
-    storageCapability({
-        id: "storage.volumes.show",
-        command: ["volumes", "show"],
-        description: "Inspect one managed volume by canonical ID or exact unique name.",
-        mutation: "read",
-        outcome: "Inspect one durable volume without changing its lifecycle.",
-        human: "ornn volumes show <volume>",
-        automation: "ornn volumes show <volume-id> --format json",
-        acceptedReferences: ["canonical volume ID", "exact unique volume name"],
-        related: ["volumes files list", "volume-mounts show"],
-    }),
-    storageCapability({
-        id: "storage.volumes.create",
-        command: ["volumes", "create"],
-        description: "Create or rediscover a uniquely named managed volume.",
-        mutation: "preview-confirm",
-        outcome: "Create one durable volume or safely replay its normalized intent.",
-        human: "ornn volumes create --name <name> [--source <volume>] [--yes]",
-        automation: "ornn volumes create --name <name> [--source <volume-id>] --yes --idempotency-key <key> --format json",
-        acceptedReferences: ["canonical source volume ID", "exact unique source volume name"],
-        related: ["volumes show", "volumes files upload"],
-    }),
-    storageCapability({
-        id: "storage.volumes.refresh",
-        command: ["volumes", "refresh"],
-        description: "Refresh the owner-backed view of one managed volume.",
-        mutation: "read",
-        outcome: "Refresh and inspect the current durable volume state.",
-        human: "ornn volumes refresh <volume>",
-        automation: "ornn volumes refresh <volume-id> --format json",
-        acceptedReferences: ["canonical volume ID", "exact unique volume name"],
-        related: ["volumes show"],
-    }),
-    storageCapability({
-        id: "storage.volumes.clear",
-        command: ["volumes", "clear"],
-        description: "Erase every file in one volume after a live default-no confirmation.",
-        mutation: "preview-confirm",
-        outcome: "Permanently clear one volume only from a live interactive terminal.",
-        human: "ornn volumes clear <volume>",
-        automation: "Unsupported: this command requires a live interactive terminal.",
-        acceptedReferences: ["canonical volume ID", "exact unique volume name"],
-        review: "Every file and folder in the volume is permanently deleted.",
-        related: ["volumes files list", "volume-mounts detach"],
-    }),
-    storageCapability({
-        id: "storage.volumes.delete",
-        command: ["volumes", "delete"],
-        description: "Delete an explicitly selected, relationship-free managed volume.",
-        mutation: "preview-confirm",
-        outcome: "Delete one detached volume after explicit consent.",
-        human: "ornn volumes delete <volume>",
-        automation: "ornn volumes delete <volume-id> --yes --idempotency-key <key> --format json",
-        acceptedReferences: ["canonical volume ID", "exact unique volume name"],
-        review: "The volume and all of its data are permanently deleted.",
-        related: ["volume-mounts detach", "volumes show"],
-    }),
-    storageCapability({
-        id: "storage.volumes.files.list",
-        command: ["volumes", "files", "list"],
-        description: "List nested files in one volume in a bounded page.",
-        mutation: "read",
-        outcome: "List nested volume files by semantic remote path.",
-        human: "ornn volumes files list <volume> [--prefix <remote-path>] [--limit <1-500>] [--cursor <cursor>]",
-        automation: "ornn volumes files list <volume-id> --limit 50 --format json",
-        acceptedReferences: ["canonical volume ID", "exact unique volume name"],
-        related: ["volumes files upload", "volumes files download"],
-    }),
-    storageCapability({
-        id: "storage.volumes.files.upload",
-        command: ["volumes", "files", "upload"],
-        description: "Stage, upload, and finalize one local file at a nested volume path.",
-        mutation: "preview-confirm",
-        outcome: "Upload one file through a reconciled staged transfer.",
-        human: "ornn volumes files upload <volume> <local-file> [--path <remote-path>] [--content-type <type>] [--yes]",
-        automation: "ornn volumes files upload <volume-id> <local-file> --path <remote-path> --yes --idempotency-key <key> --format json",
-        acceptedReferences: ["canonical volume ID", "exact unique volume name"],
-        related: ["volumes files list", "volumes refresh"],
-    }),
-    storageCapability({
-        id: "storage.volumes.files.download",
-        command: ["volumes", "files", "download"],
-        description: "Download one nested volume file to an explicit local path atomically.",
-        mutation: "local",
-        outcome: "Download one file without partially replacing local data.",
-        human: "ornn volumes files download <volume> <remote-path> --output <local-path> [--overwrite]",
-        automation: "ornn volumes files download <volume-id> <remote-path> --output <local-path> --format json",
-        acceptedReferences: ["canonical volume ID", "exact unique volume name"],
-        related: ["volumes files list"],
-    }),
-    storageCapability({
-        id: "storage.volumes.files.delete",
-        command: ["volumes", "files", "delete"],
-        description: "Delete one nested file after a live default-no confirmation.",
-        mutation: "preview-confirm",
-        outcome: "Permanently delete one file only from a live interactive terminal.",
-        human: "ornn volumes files delete <volume> <remote-path>",
-        automation: "Unsupported: this command requires a live interactive terminal.",
-        acceptedReferences: ["canonical volume ID", "exact unique volume name"],
-        review: "The selected file is permanently deleted.",
-        related: ["volumes files list"],
-    }),
-    storageCapability({
-        id: "storage.volumes.folders.delete",
-        command: ["volumes", "folders", "delete"],
-        description: "Delete one nested folder after a live default-no confirmation.",
-        mutation: "preview-confirm",
-        outcome: "Permanently delete one folder tree only from a live interactive terminal.",
-        human: "ornn volumes folders delete <volume> <remote-path>",
-        automation: "Unsupported: this command requires a live interactive terminal.",
-        acceptedReferences: ["canonical volume ID", "exact unique volume name"],
-        review: "The selected folder and every nested file are permanently deleted.",
-        related: ["volumes files list"],
-    }),
-];

package/vendor/capabilities/capability.js

@@ -1,99 +0,0 @@
-import { namesFromId } from "./names.js";
-export const DOMAINS = [
-    "cli",
-    "identity",
-    "listings",
-    "fleet",
-    "users",
-    "reservations",
-    "markets",
-    "access",
-    "clusters",
-    "slurm",
-    "kubernetes",
-    "networks",
-    "storage",
-    "vpn",
-    "billing",
-    "downtime",
-    "observability",
-    "gtm",
-];
-/**
- * Build a preview-confirm capability's un-executed result.
- *
- * Previews used to return `{ ok: true, action, payload }`, which is
- * indistinguishable from a completed mutation to anyone skimming the JSON --
- * a human, or an LLM deciding whether its call took effect. ORN-3417 recorded
- * a live `node.off-grid` preview as a confirm-gate failure for exactly that
- * reason. `status: "preview"` states it outright, and carries no `ok`.
- */
-export function preview(action, payload) {
-    return { status: "preview", requiresConfirm: true, confirmed: false, action, payload };
-}
-/** CLI is opt-in; MCP and Slack retain derived names unless explicitly unbound. */
-export function defineCapability(spec) {
-    const names = namesFromId(spec.id);
-    const { cli, mcp, slack, ...rest } = spec;
-    return {
-        ...rest,
-        ...(cli !== false && cli !== undefined
-            ? {
-                cli: {
-                    command: cli.command ?? names.cli,
-                    ...(cli.vnext ? { vnext: cli.vnext } : {}),
-                },
-            }
-            : {}),
-        ...(mcp === false ? {} : { mcp: { name: mcp?.name ?? names.mcp } }),
-        ...(slack === false
-            ? {}
-            : {
-                slack: {
-                    name: slack?.name ?? names.slack,
-                    ...(slack?.parameters ? { parameters: slack.parameters } : {}),
-                },
-            }),
-    };
-}
-/**
- * Fill only the MCP name from `id`.
- *
- * `visibleToClient` gates Slack on `capability.slack != null` and CLI on
- * `capability.cli != null`, so omitting a binding is how the catalog already
- * says "not on that surface" — `defineCapability` just happens to set all
- * three unconditionally. Staff admin verbs need the MCP one only: Slack's
- * staff surface is a deliberately small, human-confirmed set, and `apps/cli`
- * writes each command by hand, so a CLI binding here would advertise a
- * command that does not exist.
- */
-export function defineStaffMcpCapability(spec) {
-    return { ...spec, mcp: { name: namesFromId(spec.id).mcp } };
-}
-export function visibleToClient(capability, client, role) {
-    if (!capability.roles.includes(role))
-        return false;
-    if (client === "slack")
-        return capability.slack != null;
-    if (client === "cli") {
-        const help = capability.cli?.vnext;
-        if (!help || !capability.cli)
-            return false;
-        return help.audience === "customer" ? role === "user" : role === "admin";
-    }
-    return capability.mcp != null;
-}
-export function forRole(catalog, role, client) {
-    return catalog.filter((capability) => visibleToClient(capability, client, role));
-}
-export function byMcpName(catalog, name) {
-    return catalog.find((capability) => capability.mcp?.name === name);
-}
-export function bySlackName(catalog, name) {
-    return catalog.find((capability) => capability.slack?.name === name);
-}
-export function byCliCommand(catalog, command) {
-    return catalog.find((capability) => capability.cli != null &&
-        capability.cli.command.length === command.length &&
-        capability.cli.command.every((part, index) => part === command[index]));
-}

package/vendor/capabilities/cli-catalog.js

@@ -1,73 +0,0 @@
-import { adminCapabilities, bindAdminCapabilities } from "./capabilities/admin.js";
-import { adminCapacityReservationCapabilities } from "./capabilities/admin-capacity-reservations.js";
-import { commerceMarketCapabilities } from "./capabilities/commerce-market.js";
-import { marketCapabilities } from "./capabilities/markets.js";
-import { adminEnrollmentCapabilities, bindAdminEnrollmentCapabilities, } from "./capabilities/admin-enrollment.js";
-import { adminNodeDiagnosticCapabilities } from "./capabilities/admin-node-diagnostics.js";
-import { adminNodeLifecycleCapabilities } from "./capabilities/admin-nodes-lifecycle.js";
-import { computeCapabilities } from "./capabilities/compute.js";
-import { creditGrantCapability } from "./capabilities/credits.js";
-import { cliShellCapabilities } from "./capabilities/cli.js";
-import { clusterCliCapabilities, kubernetesCapabilities, slurmCapabilities, } from "./capabilities/clusters.js";
-import { externalBucketCapabilities } from "./capabilities/external-buckets.js";
-import { evidenceCapabilities } from "./capabilities/evidence.js";
-import { fleetCapabilities } from "./capabilities/fleet.js";
-import { tokenCapabilities } from "./capabilities/tokens.js";
-import { mountCapabilities } from "./capabilities/mounts.js";
-import { identityCapabilities } from "./capabilities/identity.js";
-import { listingCapabilities } from "./capabilities/listings.js";
-import { observabilityCapabilities } from "./capabilities/observability.js";
-import { organizationInviteCapability } from "./capabilities/organization-invites.js";
-import { networkCapabilities } from "./capabilities/networks.js";
-import { reservationListCapability } from "./capabilities/reservation-list.js";
-import { volumeCapabilities } from "./capabilities/volumes.js";
-import { userCapabilities } from "./capabilities/users.js";
-function canonicalCliCatalog(capabilities) {
-    return capabilities.map((capability) => {
-        const help = capability.cli?.vnext;
-        if (!help) {
-            const { cli: _retiredCliBinding, ...withoutCli } = capability;
-            return withoutCli;
-        }
-        return {
-            ...capability,
-            cli: {
-                command: [...(help.command ?? capability.cli?.command ?? [])],
-                vnext: help,
-            },
-        };
-    });
-}
-/** Canonical operational catalog, without staff-only commerce or CRM modules. */
-export const catalog = [
-    ...canonicalCliCatalog([
-        ...bindAdminEnrollmentCapabilities(bindAdminCapabilities([
-            ...cliShellCapabilities,
-            ...identityCapabilities,
-            ...listingCapabilities.filter((capability) => capability.id !== "listings.create"),
-            ...commerceMarketCapabilities,
-            ...marketCapabilities,
-            ...computeCapabilities,
-            ...fleetCapabilities.filter((capability) => capability.id !== "node.exec"),
-            ...networkCapabilities,
-            ...clusterCliCapabilities,
-            ...tokenCapabilities,
-            ...userCapabilities,
-            ...volumeCapabilities,
-            ...mountCapabilities,
-            ...externalBucketCapabilities,
-            ...evidenceCapabilities,
-            ...observabilityCapabilities,
-            ...slurmCapabilities,
-            ...kubernetesCapabilities,
-            ...adminNodeLifecycleCapabilities,
-        ])),
-        ...adminCapabilities.filter((capability) => capability.id === "nodes.health"),
-        ...adminCapacityReservationCapabilities,
-        reservationListCapability,
-        ...adminNodeDiagnosticCapabilities,
-        ...adminEnrollmentCapabilities,
-        organizationInviteCapability,
-        creditGrantCapability,
-    ]),
-];