avr-cli 0.5.0__tar.gz → 0.6.0__tar.gz

{avr_cli-0.5.0 → avr_cli-0.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: avr-cli
-Version: 0.5.0
+Version: 0.6.0
 Summary: Avrea command-line client
 Author-email: Avrea <support@avrea.com>
 License-Expression: Apache-2.0
@@ -11,6 +11,7 @@ Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: Topic :: Software Development :: Libraries
 Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: 3.15
 Requires-Python: >=3.14
 Description-Content-Type: text/markdown
 License-File: LICENSE
@@ -20,14 +21,16 @@ Requires-Dist: click>=8.3.1
 Requires-Dist: httpx>=0.28.1
 Requires-Dist: platformdirs>=4.0
 Requires-Dist: prettytable>=3.17.0
+Requires-Dist: segno>=1.6.6
 Requires-Dist: pydantic>=2.12.4
 Requires-Dist: typing-extensions>=4.15.0
 Requires-Dist: idna>=3.15
+Requires-Dist: websockets>=15
 Provides-Extra: dev
 Requires-Dist: pytest>=9.0.3; extra == "dev"
 Requires-Dist: pytest-asyncio>=1.3.0; extra == "dev"
 Requires-Dist: pytest-timeout>=2.4.0; extra == "dev"
-Requires-Dist: ruff==0.15.13; extra == "dev"
+Requires-Dist: ruff==0.17.3; extra == "dev"
 Requires-Dist: ty==0.0.15; extra == "dev"
 Dynamic: license-file
 
@@ -89,6 +92,19 @@ Browser-based login (recommended):
 avr auth login
 ```
 
+On a remote machine, VM, or terminal without a browser:
+
+```sh
+avr auth device-login
+```
+
+Open the displayed link on your laptop or phone, or scan the terminal QR code.
+Confirm the code and approve the request. The CLI waits for approval and saves
+the credential on the machine where you ran the command. Use `--no-qr` to hide
+the QR code; the sign-in link is always displayed. QR output is omitted when
+piped or when the terminal cannot display it. Device login requires support
+on your Avrea server; `avr auth login` keeps its existing browser flow.
+
 Show who you are and where you're pointing:
 
 ```sh
@@ -126,11 +142,12 @@ avr repo clone foo/faa my-checkout --depth 1 --branch main
 avr repo clone foo/faa --placement https://git.fi.a.avrea.io
 ```
 
-Avrea discovers the repository's placements and picks the first mirror that
-responds successfully from your machine. `--placement` accepts an advertised
-mirror URL or hostname to select one explicitly. Give the `owner/repository` name
-or an Avrea repository ID (`rep-...`).
-The repository must already have Git mirroring enabled and a usable placement.
+Avrea uses a single available placement directly. With multiple placements,
+it picks the first mirror that responds successfully from your machine.
+`--placement` accepts an advertised mirror URL or hostname to select one
+explicitly. Give the `owner/repository` name or an Avrea repository ID (`rep-...`).
+Requires Git 2.31 or newer. The repository must already have Git mirroring
+enabled and a usable placement.
 
 `origin` stays on the selected read-only mirror. The clone installs a
 repository-local credential helper so ordinary `git fetch` and `git pull`
@@ -189,6 +206,48 @@ avr run logs <run-id>                  # full log dump, paginated
 avr job logs <job-id> --follow         # tail one job in real time
 ```
 
+**Read recorded tests from a run or job**
+
+```sh
+avr tests <run-id> --job unit         # select one job by name
+avr tests <github-run-id>             # a single-job run needs no selector
+avr tests <job-id>                    # names, outcomes, timings and failures
+avr tests <job-id> --status failed
+avr tests <job-id> --test test_login
+avr tests <job-id> --suite Authentication --class TestLogin
+avr tests <job-id> --json '*'         # reporting state and pagination
+avr tests <job-id> --limit 500         # maximum matching occurrences to return
+avr tests <job-id> --cursor '<cursor>' # resume with the same filters
+```
+
+Accepts Avrea run IDs (`run-` or `awr-`), GitHub numeric run IDs, GitHub
+Actions run URLs, Avrea console run URLs, and Avrea job IDs (`job-` or
+`awj-`). `avr tests list <run-or-job>` is equivalent. A run selects one job,
+not all jobs together. `--job NAME` matches a case-insensitive substring and
+must identify one job; ambiguous names show the available jobs and IDs.
+A run containing one job selects it automatically. The job's repository is
+resolved automatically, or use `--repo owner/name`.
+
+The listing reads the job's latest confirmed execution, without substituting
+an older report. GitHub run URLs with `/attempts/N` select that run attempt;
+there is no separate test-execution selector. Test names match exactly and
+case-sensitively; test filters combine with AND. Outcomes are `passed`,
+`failed`, `skipped` and `errored`. Repeated matches stay separate, with their
+recorded failure messages shown directly. `--json FIELDS` and `--jq` also work.
+
+Each invocation returns at most 1,000 occurrences and reads at most 20 result
+pages. Filtering can produce empty pages with a continuation. If the search
+stops before the report ends, the command says so; resume with the same job,
+filters and `--cursor`. The retained count covers all tests, before filtering.
+Missing or expired reports are distinct from zero matches or a retained
+report containing zero tests. Complete describes collected reports, not
+whether every expected test ran.
+
+These commands require an API deployment supporting the corresponding reads.
+Filtering fails explicitly if the server does not acknowledge the selectors.
+File filters and test splitting are not supported. The commands do not rerun
+tests or change collection.
+
 **Trigger a workflow_dispatch**
 
 ```sh
@@ -210,7 +269,7 @@ avr job ssh <job-id> --print-command   # just print the ssh string
 **Live VM metrics while a job runs**
 
 ```sh
-avr job metrics <job-id> --watch       # CPU/memory/IO gauges, refreshed every few seconds
+avr job metrics <job-id> --watch       # CPU/memory/IO gauges, streamed live
 avr job metrics <job-id>               # static post-mortem after the job ended
 ```
 
@@ -220,8 +279,8 @@ Durable, org-scoped VMs reachable over SSH (plus RDP/VNC for a desktop), separat
 
 ```sh
 avr vm create --name dev --os linux --size 2-vcpu \
-  --ssh-key @~/.ssh/id_ed25519.pub --ephemeral --wait      # boot, wait for SSH, print connect
-avr vm create --name ci --os linux --size 8-vcpu --ephemeral \
+  --ssh-key @~/.ssh/id_ed25519.pub --wait      # boot, wait for SSH, print connect
+avr vm create --name ci --os linux --size 8-vcpu \
   --repo org/project --disable-cache gha,packages          # attach a repo, narrow which caches it uses
 avr vm bootstrap <vm-id> --setup-github --install claude,codex \
   --repo https://github.com/org/project --env AWS_REGION=eu-north-1
@@ -229,10 +288,17 @@ avr vm ssh <vm-id>                                          # SSH session, host
 avr vm ssh <vm-id> --login -- claude -p 'summarize the repo' # one-off command in a login shell (sees forwarded env)
 avr vm ssh <vm-id> --session dev                            # persistent tmux session, survives a dropped connection
 avr vm ssh-config <vm-id> --append                          # add `ssh <alias>` (scp/rsync, VS Code Remote-SSH) to ~/.ssh/config
-avr vm list ; avr vm stop <vm-id>                           # lifecycle
+avr vm list ; avr vm pause <vm-id>                           # lifecycle
+avr vm resume <vm-id> --wait
+avr vm fork <paused-vm-id> --name experiment --wait
+avr vm capabilities
+avr vm create --os linux --arch arm64 --size 2-vcpu --https-port 3000 --https-port 8080
+avr vm metrics <vm-id> --watch
 ```
 
-`bootstrap` runs each step over SSH and streams it live, feeding secrets (GitHub token, env values, agent credentials) on stdin rather than argv. `--forward-agent-creds` carries your local `ANTHROPIC_API_KEY` / `OPENAI_API_KEY`, or a Claude subscription token — if none is set it offers to run `claude setup-token` and forwards the pasted `CLAUDE_CODE_OAUTH_TOKEN`. Disks are ephemeral, so re-run it after every `avr vm start`. `avr vm ssh` pins the VM's host key when its endpoint publishes one; if it doesn't, `avr` warns and falls back to trust-on-first-use — pass `--session <name>` to attach to (or create) a persistent tmux session that survives a dropped connection. A one-off `avr vm ssh -- <cmd>` runs in a non-login shell that sources no startup files, so pass `--login` when the command needs bootstrap-forwarded env (e.g. `claude`'s subscription token). `avr vm ssh-config` emits a host-key-pinned SSH config block so plain `ssh`, scp/rsync, and VS Code / Cursor Remote-SSH reach the VM without wrapping each tool — `--append` writes it into `~/.ssh/config` for you (idempotent: re-run after a restart to refresh the endpoint in place). For a desktop, `avr vm rdp` / `avr vm vnc` tunnel over the same SSH endpoint, and `avr vm port-forward` is the generic primitive (repeat `--port` to forward several ports over one connection). A VM created with `--repo` inherits that repository's build/CI caches; `--disable-cache <name>` narrows them per VM (it can turn an inherited cache off, never on).
+`bootstrap` runs each step over SSH and streams it live, feeding secrets (GitHub token, env values, agent credentials) on stdin rather than argv. `--forward-agent-creds` carries your local `ANTHROPIC_API_KEY` / `OPENAI_API_KEY`, or a Claude subscription token — if none is set it offers to run `claude setup-token` and forwards the pasted `CLAUDE_CODE_OAUTH_TOKEN`. Bootstrap changes survive pause and resume. `avr vm ssh` pins the VM's host key when its endpoint publishes one; if it doesn't, `avr` warns and falls back to trust-on-first-use — pass `--session <name>` to attach to (or create) a persistent tmux session that survives a dropped connection. A one-off `avr vm ssh -- <cmd>` runs in a non-login shell that sources no startup files, so pass `--login` when the command needs bootstrap-forwarded env (e.g. `claude`'s subscription token). `avr vm ssh-config` emits a host-key-pinned SSH config block so plain `ssh`, scp/rsync, and VS Code / Cursor Remote-SSH reach the VM without wrapping each tool — `--append` writes it into `~/.ssh/config` for you (idempotent: re-run after a resume to refresh the endpoint in place). For a desktop, `avr vm rdp` / `avr vm vnc` tunnel over the same SSH endpoint, and `avr vm port-forward` is the generic primitive (repeat `--port` to forward several ports over one connection). A VM created with `--repo` inherits that repository's build/CI caches; `--disable-cache <name>` narrows them per VM (it can turn an inherited cache off, never on).
+
+VM references accept IDs or display names. Names are generated when omitted. TTL expiry pauses the VM, or deletes it when pausing is unavailable. Agent sandboxes boot once and cannot be paused or resumed. HTTPS URLs are public to anyone who has them; the first configured port is the default. Port updates apply live on a running VM, otherwise at the next start or resume; `avr vm rotate-https-label` replaces leaked URLs. Metrics watch uses a WebSocket stream for both VM and job metrics; explicit `--start`/`--end` windows require single-shot mode.
 
 **Cancel or rerun a run**
 

{avr_cli-0.5.0 → avr_cli-0.6.0}/README.md

@@ -56,6 +56,19 @@ Browser-based login (recommended):
 avr auth login
 ```
 
+On a remote machine, VM, or terminal without a browser:
+
+```sh
+avr auth device-login
+```
+
+Open the displayed link on your laptop or phone, or scan the terminal QR code.
+Confirm the code and approve the request. The CLI waits for approval and saves
+the credential on the machine where you ran the command. Use `--no-qr` to hide
+the QR code; the sign-in link is always displayed. QR output is omitted when
+piped or when the terminal cannot display it. Device login requires support
+on your Avrea server; `avr auth login` keeps its existing browser flow.
+
 Show who you are and where you're pointing:
 
 ```sh
@@ -93,11 +106,12 @@ avr repo clone foo/faa my-checkout --depth 1 --branch main
 avr repo clone foo/faa --placement https://git.fi.a.avrea.io
 ```
 
-Avrea discovers the repository's placements and picks the first mirror that
-responds successfully from your machine. `--placement` accepts an advertised
-mirror URL or hostname to select one explicitly. Give the `owner/repository` name
-or an Avrea repository ID (`rep-...`).
-The repository must already have Git mirroring enabled and a usable placement.
+Avrea uses a single available placement directly. With multiple placements,
+it picks the first mirror that responds successfully from your machine.
+`--placement` accepts an advertised mirror URL or hostname to select one
+explicitly. Give the `owner/repository` name or an Avrea repository ID (`rep-...`).
+Requires Git 2.31 or newer. The repository must already have Git mirroring
+enabled and a usable placement.
 
 `origin` stays on the selected read-only mirror. The clone installs a
 repository-local credential helper so ordinary `git fetch` and `git pull`
@@ -156,6 +170,48 @@ avr run logs <run-id>                  # full log dump, paginated
 avr job logs <job-id> --follow         # tail one job in real time
 ```
 
+**Read recorded tests from a run or job**
+
+```sh
+avr tests <run-id> --job unit         # select one job by name
+avr tests <github-run-id>             # a single-job run needs no selector
+avr tests <job-id>                    # names, outcomes, timings and failures
+avr tests <job-id> --status failed
+avr tests <job-id> --test test_login
+avr tests <job-id> --suite Authentication --class TestLogin
+avr tests <job-id> --json '*'         # reporting state and pagination
+avr tests <job-id> --limit 500         # maximum matching occurrences to return
+avr tests <job-id> --cursor '<cursor>' # resume with the same filters
+```
+
+Accepts Avrea run IDs (`run-` or `awr-`), GitHub numeric run IDs, GitHub
+Actions run URLs, Avrea console run URLs, and Avrea job IDs (`job-` or
+`awj-`). `avr tests list <run-or-job>` is equivalent. A run selects one job,
+not all jobs together. `--job NAME` matches a case-insensitive substring and
+must identify one job; ambiguous names show the available jobs and IDs.
+A run containing one job selects it automatically. The job's repository is
+resolved automatically, or use `--repo owner/name`.
+
+The listing reads the job's latest confirmed execution, without substituting
+an older report. GitHub run URLs with `/attempts/N` select that run attempt;
+there is no separate test-execution selector. Test names match exactly and
+case-sensitively; test filters combine with AND. Outcomes are `passed`,
+`failed`, `skipped` and `errored`. Repeated matches stay separate, with their
+recorded failure messages shown directly. `--json FIELDS` and `--jq` also work.
+
+Each invocation returns at most 1,000 occurrences and reads at most 20 result
+pages. Filtering can produce empty pages with a continuation. If the search
+stops before the report ends, the command says so; resume with the same job,
+filters and `--cursor`. The retained count covers all tests, before filtering.
+Missing or expired reports are distinct from zero matches or a retained
+report containing zero tests. Complete describes collected reports, not
+whether every expected test ran.
+
+These commands require an API deployment supporting the corresponding reads.
+Filtering fails explicitly if the server does not acknowledge the selectors.
+File filters and test splitting are not supported. The commands do not rerun
+tests or change collection.
+
 **Trigger a workflow_dispatch**
 
 ```sh
@@ -177,7 +233,7 @@ avr job ssh <job-id> --print-command   # just print the ssh string
 **Live VM metrics while a job runs**
 
 ```sh
-avr job metrics <job-id> --watch       # CPU/memory/IO gauges, refreshed every few seconds
+avr job metrics <job-id> --watch       # CPU/memory/IO gauges, streamed live
 avr job metrics <job-id>               # static post-mortem after the job ended
 ```
 
@@ -187,8 +243,8 @@ Durable, org-scoped VMs reachable over SSH (plus RDP/VNC for a desktop), separat
 
 ```sh
 avr vm create --name dev --os linux --size 2-vcpu \
-  --ssh-key @~/.ssh/id_ed25519.pub --ephemeral --wait      # boot, wait for SSH, print connect
-avr vm create --name ci --os linux --size 8-vcpu --ephemeral \
+  --ssh-key @~/.ssh/id_ed25519.pub --wait      # boot, wait for SSH, print connect
+avr vm create --name ci --os linux --size 8-vcpu \
   --repo org/project --disable-cache gha,packages          # attach a repo, narrow which caches it uses
 avr vm bootstrap <vm-id> --setup-github --install claude,codex \
   --repo https://github.com/org/project --env AWS_REGION=eu-north-1
@@ -196,10 +252,17 @@ avr vm ssh <vm-id>                                          # SSH session, host
 avr vm ssh <vm-id> --login -- claude -p 'summarize the repo' # one-off command in a login shell (sees forwarded env)
 avr vm ssh <vm-id> --session dev                            # persistent tmux session, survives a dropped connection
 avr vm ssh-config <vm-id> --append                          # add `ssh <alias>` (scp/rsync, VS Code Remote-SSH) to ~/.ssh/config
-avr vm list ; avr vm stop <vm-id>                           # lifecycle
+avr vm list ; avr vm pause <vm-id>                           # lifecycle
+avr vm resume <vm-id> --wait
+avr vm fork <paused-vm-id> --name experiment --wait
+avr vm capabilities
+avr vm create --os linux --arch arm64 --size 2-vcpu --https-port 3000 --https-port 8080
+avr vm metrics <vm-id> --watch
 ```
 
-`bootstrap` runs each step over SSH and streams it live, feeding secrets (GitHub token, env values, agent credentials) on stdin rather than argv. `--forward-agent-creds` carries your local `ANTHROPIC_API_KEY` / `OPENAI_API_KEY`, or a Claude subscription token — if none is set it offers to run `claude setup-token` and forwards the pasted `CLAUDE_CODE_OAUTH_TOKEN`. Disks are ephemeral, so re-run it after every `avr vm start`. `avr vm ssh` pins the VM's host key when its endpoint publishes one; if it doesn't, `avr` warns and falls back to trust-on-first-use — pass `--session <name>` to attach to (or create) a persistent tmux session that survives a dropped connection. A one-off `avr vm ssh -- <cmd>` runs in a non-login shell that sources no startup files, so pass `--login` when the command needs bootstrap-forwarded env (e.g. `claude`'s subscription token). `avr vm ssh-config` emits a host-key-pinned SSH config block so plain `ssh`, scp/rsync, and VS Code / Cursor Remote-SSH reach the VM without wrapping each tool — `--append` writes it into `~/.ssh/config` for you (idempotent: re-run after a restart to refresh the endpoint in place). For a desktop, `avr vm rdp` / `avr vm vnc` tunnel over the same SSH endpoint, and `avr vm port-forward` is the generic primitive (repeat `--port` to forward several ports over one connection). A VM created with `--repo` inherits that repository's build/CI caches; `--disable-cache <name>` narrows them per VM (it can turn an inherited cache off, never on).
+`bootstrap` runs each step over SSH and streams it live, feeding secrets (GitHub token, env values, agent credentials) on stdin rather than argv. `--forward-agent-creds` carries your local `ANTHROPIC_API_KEY` / `OPENAI_API_KEY`, or a Claude subscription token — if none is set it offers to run `claude setup-token` and forwards the pasted `CLAUDE_CODE_OAUTH_TOKEN`. Bootstrap changes survive pause and resume. `avr vm ssh` pins the VM's host key when its endpoint publishes one; if it doesn't, `avr` warns and falls back to trust-on-first-use — pass `--session <name>` to attach to (or create) a persistent tmux session that survives a dropped connection. A one-off `avr vm ssh -- <cmd>` runs in a non-login shell that sources no startup files, so pass `--login` when the command needs bootstrap-forwarded env (e.g. `claude`'s subscription token). `avr vm ssh-config` emits a host-key-pinned SSH config block so plain `ssh`, scp/rsync, and VS Code / Cursor Remote-SSH reach the VM without wrapping each tool — `--append` writes it into `~/.ssh/config` for you (idempotent: re-run after a resume to refresh the endpoint in place). For a desktop, `avr vm rdp` / `avr vm vnc` tunnel over the same SSH endpoint, and `avr vm port-forward` is the generic primitive (repeat `--port` to forward several ports over one connection). A VM created with `--repo` inherits that repository's build/CI caches; `--disable-cache <name>` narrows them per VM (it can turn an inherited cache off, never on).
+
+VM references accept IDs or display names. Names are generated when omitted. TTL expiry pauses the VM, or deletes it when pausing is unavailable. Agent sandboxes boot once and cannot be paused or resumed. HTTPS URLs are public to anyone who has them; the first configured port is the default. Port updates apply live on a running VM, otherwise at the next start or resume; `avr vm rotate-https-label` replaces leaked URLs. Metrics watch uses a WebSocket stream for both VM and job metrics; explicit `--start`/`--end` windows require single-shot mode.
 
 **Cancel or rerun a run**
 

{avr_cli-0.5.0 → avr_cli-0.6.0}/avr_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: avr-cli
-Version: 0.5.0
+Version: 0.6.0
 Summary: Avrea command-line client
 Author-email: Avrea <support@avrea.com>
 License-Expression: Apache-2.0
@@ -11,6 +11,7 @@ Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: Topic :: Software Development :: Libraries
 Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: 3.15
 Requires-Python: >=3.14
 Description-Content-Type: text/markdown
 License-File: LICENSE
@@ -20,14 +21,16 @@ Requires-Dist: click>=8.3.1
 Requires-Dist: httpx>=0.28.1
 Requires-Dist: platformdirs>=4.0
 Requires-Dist: prettytable>=3.17.0
+Requires-Dist: segno>=1.6.6
 Requires-Dist: pydantic>=2.12.4
 Requires-Dist: typing-extensions>=4.15.0
 Requires-Dist: idna>=3.15
+Requires-Dist: websockets>=15
 Provides-Extra: dev
 Requires-Dist: pytest>=9.0.3; extra == "dev"
 Requires-Dist: pytest-asyncio>=1.3.0; extra == "dev"
 Requires-Dist: pytest-timeout>=2.4.0; extra == "dev"
-Requires-Dist: ruff==0.15.13; extra == "dev"
+Requires-Dist: ruff==0.17.3; extra == "dev"
 Requires-Dist: ty==0.0.15; extra == "dev"
 Dynamic: license-file
 
@@ -89,6 +92,19 @@ Browser-based login (recommended):
 avr auth login
 ```
 
+On a remote machine, VM, or terminal without a browser:
+
+```sh
+avr auth device-login
+```
+
+Open the displayed link on your laptop or phone, or scan the terminal QR code.
+Confirm the code and approve the request. The CLI waits for approval and saves
+the credential on the machine where you ran the command. Use `--no-qr` to hide
+the QR code; the sign-in link is always displayed. QR output is omitted when
+piped or when the terminal cannot display it. Device login requires support
+on your Avrea server; `avr auth login` keeps its existing browser flow.
+
 Show who you are and where you're pointing:
 
 ```sh
@@ -126,11 +142,12 @@ avr repo clone foo/faa my-checkout --depth 1 --branch main
 avr repo clone foo/faa --placement https://git.fi.a.avrea.io
 ```
 
-Avrea discovers the repository's placements and picks the first mirror that
-responds successfully from your machine. `--placement` accepts an advertised
-mirror URL or hostname to select one explicitly. Give the `owner/repository` name
-or an Avrea repository ID (`rep-...`).
-The repository must already have Git mirroring enabled and a usable placement.
+Avrea uses a single available placement directly. With multiple placements,
+it picks the first mirror that responds successfully from your machine.
+`--placement` accepts an advertised mirror URL or hostname to select one
+explicitly. Give the `owner/repository` name or an Avrea repository ID (`rep-...`).
+Requires Git 2.31 or newer. The repository must already have Git mirroring
+enabled and a usable placement.
 
 `origin` stays on the selected read-only mirror. The clone installs a
 repository-local credential helper so ordinary `git fetch` and `git pull`
@@ -189,6 +206,48 @@ avr run logs <run-id>                  # full log dump, paginated
 avr job logs <job-id> --follow         # tail one job in real time
 ```
 
+**Read recorded tests from a run or job**
+
+```sh
+avr tests <run-id> --job unit         # select one job by name
+avr tests <github-run-id>             # a single-job run needs no selector
+avr tests <job-id>                    # names, outcomes, timings and failures
+avr tests <job-id> --status failed
+avr tests <job-id> --test test_login
+avr tests <job-id> --suite Authentication --class TestLogin
+avr tests <job-id> --json '*'         # reporting state and pagination
+avr tests <job-id> --limit 500         # maximum matching occurrences to return
+avr tests <job-id> --cursor '<cursor>' # resume with the same filters
+```
+
+Accepts Avrea run IDs (`run-` or `awr-`), GitHub numeric run IDs, GitHub
+Actions run URLs, Avrea console run URLs, and Avrea job IDs (`job-` or
+`awj-`). `avr tests list <run-or-job>` is equivalent. A run selects one job,
+not all jobs together. `--job NAME` matches a case-insensitive substring and
+must identify one job; ambiguous names show the available jobs and IDs.
+A run containing one job selects it automatically. The job's repository is
+resolved automatically, or use `--repo owner/name`.
+
+The listing reads the job's latest confirmed execution, without substituting
+an older report. GitHub run URLs with `/attempts/N` select that run attempt;
+there is no separate test-execution selector. Test names match exactly and
+case-sensitively; test filters combine with AND. Outcomes are `passed`,
+`failed`, `skipped` and `errored`. Repeated matches stay separate, with their
+recorded failure messages shown directly. `--json FIELDS` and `--jq` also work.
+
+Each invocation returns at most 1,000 occurrences and reads at most 20 result
+pages. Filtering can produce empty pages with a continuation. If the search
+stops before the report ends, the command says so; resume with the same job,
+filters and `--cursor`. The retained count covers all tests, before filtering.
+Missing or expired reports are distinct from zero matches or a retained
+report containing zero tests. Complete describes collected reports, not
+whether every expected test ran.
+
+These commands require an API deployment supporting the corresponding reads.
+Filtering fails explicitly if the server does not acknowledge the selectors.
+File filters and test splitting are not supported. The commands do not rerun
+tests or change collection.
+
 **Trigger a workflow_dispatch**
 
 ```sh
@@ -210,7 +269,7 @@ avr job ssh <job-id> --print-command   # just print the ssh string
 **Live VM metrics while a job runs**
 
 ```sh
-avr job metrics <job-id> --watch       # CPU/memory/IO gauges, refreshed every few seconds
+avr job metrics <job-id> --watch       # CPU/memory/IO gauges, streamed live
 avr job metrics <job-id>               # static post-mortem after the job ended
 ```
 
@@ -220,8 +279,8 @@ Durable, org-scoped VMs reachable over SSH (plus RDP/VNC for a desktop), separat
 
 ```sh
 avr vm create --name dev --os linux --size 2-vcpu \
-  --ssh-key @~/.ssh/id_ed25519.pub --ephemeral --wait      # boot, wait for SSH, print connect
-avr vm create --name ci --os linux --size 8-vcpu --ephemeral \
+  --ssh-key @~/.ssh/id_ed25519.pub --wait      # boot, wait for SSH, print connect
+avr vm create --name ci --os linux --size 8-vcpu \
   --repo org/project --disable-cache gha,packages          # attach a repo, narrow which caches it uses
 avr vm bootstrap <vm-id> --setup-github --install claude,codex \
   --repo https://github.com/org/project --env AWS_REGION=eu-north-1
@@ -229,10 +288,17 @@ avr vm ssh <vm-id>                                          # SSH session, host
 avr vm ssh <vm-id> --login -- claude -p 'summarize the repo' # one-off command in a login shell (sees forwarded env)
 avr vm ssh <vm-id> --session dev                            # persistent tmux session, survives a dropped connection
 avr vm ssh-config <vm-id> --append                          # add `ssh <alias>` (scp/rsync, VS Code Remote-SSH) to ~/.ssh/config
-avr vm list ; avr vm stop <vm-id>                           # lifecycle
+avr vm list ; avr vm pause <vm-id>                           # lifecycle
+avr vm resume <vm-id> --wait
+avr vm fork <paused-vm-id> --name experiment --wait
+avr vm capabilities
+avr vm create --os linux --arch arm64 --size 2-vcpu --https-port 3000 --https-port 8080
+avr vm metrics <vm-id> --watch
 ```
 
-`bootstrap` runs each step over SSH and streams it live, feeding secrets (GitHub token, env values, agent credentials) on stdin rather than argv. `--forward-agent-creds` carries your local `ANTHROPIC_API_KEY` / `OPENAI_API_KEY`, or a Claude subscription token — if none is set it offers to run `claude setup-token` and forwards the pasted `CLAUDE_CODE_OAUTH_TOKEN`. Disks are ephemeral, so re-run it after every `avr vm start`. `avr vm ssh` pins the VM's host key when its endpoint publishes one; if it doesn't, `avr` warns and falls back to trust-on-first-use — pass `--session <name>` to attach to (or create) a persistent tmux session that survives a dropped connection. A one-off `avr vm ssh -- <cmd>` runs in a non-login shell that sources no startup files, so pass `--login` when the command needs bootstrap-forwarded env (e.g. `claude`'s subscription token). `avr vm ssh-config` emits a host-key-pinned SSH config block so plain `ssh`, scp/rsync, and VS Code / Cursor Remote-SSH reach the VM without wrapping each tool — `--append` writes it into `~/.ssh/config` for you (idempotent: re-run after a restart to refresh the endpoint in place). For a desktop, `avr vm rdp` / `avr vm vnc` tunnel over the same SSH endpoint, and `avr vm port-forward` is the generic primitive (repeat `--port` to forward several ports over one connection). A VM created with `--repo` inherits that repository's build/CI caches; `--disable-cache <name>` narrows them per VM (it can turn an inherited cache off, never on).
+`bootstrap` runs each step over SSH and streams it live, feeding secrets (GitHub token, env values, agent credentials) on stdin rather than argv. `--forward-agent-creds` carries your local `ANTHROPIC_API_KEY` / `OPENAI_API_KEY`, or a Claude subscription token — if none is set it offers to run `claude setup-token` and forwards the pasted `CLAUDE_CODE_OAUTH_TOKEN`. Bootstrap changes survive pause and resume. `avr vm ssh` pins the VM's host key when its endpoint publishes one; if it doesn't, `avr` warns and falls back to trust-on-first-use — pass `--session <name>` to attach to (or create) a persistent tmux session that survives a dropped connection. A one-off `avr vm ssh -- <cmd>` runs in a non-login shell that sources no startup files, so pass `--login` when the command needs bootstrap-forwarded env (e.g. `claude`'s subscription token). `avr vm ssh-config` emits a host-key-pinned SSH config block so plain `ssh`, scp/rsync, and VS Code / Cursor Remote-SSH reach the VM without wrapping each tool — `--append` writes it into `~/.ssh/config` for you (idempotent: re-run after a resume to refresh the endpoint in place). For a desktop, `avr vm rdp` / `avr vm vnc` tunnel over the same SSH endpoint, and `avr vm port-forward` is the generic primitive (repeat `--port` to forward several ports over one connection). A VM created with `--repo` inherits that repository's build/CI caches; `--disable-cache <name>` narrows them per VM (it can turn an inherited cache off, never on).
+
+VM references accept IDs or display names. Names are generated when omitted. TTL expiry pauses the VM, or deletes it when pausing is unavailable. Agent sandboxes boot once and cannot be paused or resumed. HTTPS URLs are public to anyone who has them; the first configured port is the default. Port updates apply live on a running VM, otherwise at the next start or resume; `avr vm rotate-https-label` replaces leaked URLs. Metrics watch uses a WebSocket stream for both VM and job metrics; explicit `--start`/`--end` windows require single-shot mode.
 
 **Cancel or rerun a run**
 

{avr_cli-0.5.0 → avr_cli-0.6.0}/avr_cli.egg-info/SOURCES.txt

@@ -15,6 +15,7 @@ avrea_cli/auth.py
 avrea_cli/billing.py
 avrea_cli/click_ext.py
 avrea_cli/config.py
+avrea_cli/device_auth.py
 avrea_cli/display.py
 avrea_cli/docs_gen.py
 avrea_cli/firewall.py
@@ -24,6 +25,8 @@ avrea_cli/json_output.py
 avrea_cli/log_display.py
 avrea_cli/main.py
 avrea_cli/metrics_display.py
+avrea_cli/metrics_stream.py
+avrea_cli/native_dispatch.py
 avrea_cli/output.py
 avrea_cli/paths.py
 avrea_cli/repo_context.py
@@ -34,6 +37,7 @@ avrea_cli/spawn_script.py
 avrea_cli/transport.py
 avrea_cli/version.py
 avrea_cli/vm.py
+avrea_cli/vm_state_stream.py
 avrea_cli/assets/logo_mark.svg
 avrea_cli/commands/__init__.py
 avrea_cli/commands/artifact.py
@@ -45,12 +49,14 @@ avrea_cli/commands/internal.py
 avrea_cli/commands/job.py
 avrea_cli/commands/log.py
 avrea_cli/commands/org.py
+avrea_cli/commands/org_install_runner.py
 avrea_cli/commands/pr.py
 avrea_cli/commands/repo.py
 avrea_cli/commands/run.py
 avrea_cli/commands/sbom.py
 avrea_cli/commands/settings.py
 avrea_cli/commands/status.py
+avrea_cli/commands/tests.py
 avrea_cli/commands/token.py
 avrea_cli/commands/workflow.py
 tests/test_api_client.py
@@ -58,15 +64,19 @@ tests/test_artifact.py
 tests/test_auth.py
 tests/test_auth_login.py
 tests/test_auth_sso.py
+tests/test_billing.py
 tests/test_cache.py
+tests/test_compatible_lazy_imports.py
 tests/test_config.py
 tests/test_config_cmd.py
+tests/test_device_auth.py
 tests/test_display.py
 tests/test_docs_gen.py
 tests/test_env_conventions.py
 tests/test_firewall.py
 tests/test_global_flags.py
 tests/test_helpers.py
+tests/test_job_gitlab.py
 tests/test_job_list.py
 tests/test_job_metrics_cmd.py
 tests/test_job_view_logs.py
@@ -74,7 +84,12 @@ tests/test_json_output.py
 tests/test_lazy_registry.py
 tests/test_log_display.py
 tests/test_metrics_display.py
+tests/test_metrics_stream.py
+tests/test_native_ci.py
+tests/test_native_workflow_dispatch.py
 tests/test_org_email_domain.py
+tests/test_org_install_runners.py
+tests/test_org_installations.py
 tests/test_org_saml.py
 tests/test_output.py
 tests/test_piped_output.py
@@ -93,11 +108,14 @@ tests/test_run_view.py
 tests/test_sbom.py
 tests/test_scoped_token.py
 tests/test_settings.py
+tests/test_tests.py
 tests/test_token.py
 tests/test_token_output.py
 tests/test_transport.py
 tests/test_vm.py
+tests/test_vm_alignment.py
 tests/test_vm_spawn_script.py
+tests/test_vm_state_stream.py
 tests/test_web_flag.py
 tests/test_workflow_actions.py
 tests/test_workflow_run.py

{avr_cli-0.5.0 → avr_cli-0.6.0}/avr_cli.egg-info/requires.txt

@@ -4,13 +4,15 @@ click>=8.3.1
 httpx>=0.28.1
 platformdirs>=4.0
 prettytable>=3.17.0
+segno>=1.6.6
 pydantic>=2.12.4
 typing-extensions>=4.15.0
 idna>=3.15
+websockets>=15
 
 [dev]
 pytest>=9.0.3
 pytest-asyncio>=1.3.0
 pytest-timeout>=2.4.0
-ruff==0.15.13
+ruff==0.17.3
 ty==0.0.15

{avr_cli-0.5.0 → avr_cli-0.6.0}/avrea_cli/_build_info.py

@@ -1,2 +1,2 @@
 # Auto-generated by .github/workflows/release.yml; do not edit.
-GIT_COMMIT = "620a47d50c11e7e1905980829c01fe2d974fe837"
+GIT_COMMIT = "c9e1e4b6a11db522d142ec0dfaeb8119917ec41c"

{avr_cli-0.5.0 → avr_cli-0.6.0}/avrea_cli/api_client.py

@@ -112,6 +112,7 @@ class ApiClient:
         content: str | bytes | None = None,
         params: dict[str, Any] | None = None,
         content_type: str | None = None,
+        idempotency_key: str | None = None,
     ) -> dict[str, Any]:
         """POST request to public API."""
         if json is not None and content is not None:
@@ -121,6 +122,8 @@ class ApiClient:
         headers = self.config.get_api_headers()
         if content_type is not None:
             headers = {**headers, "Content-Type": content_type}
+        if idempotency_key is not None:
+            headers = {**headers, "Idempotency-Key": idempotency_key}
         try:
             response = self._http.post(
                 url,
@@ -137,11 +140,16 @@ class ApiClient:
         response.raise_for_status()
         return response.json()
 
-    def public_put(self, path: str, json: dict[str, Any] | None = None) -> dict[str, Any]:
+    def public_put(self, path: str, json: dict[str, Any] | None = None, timeout: float | None = None) -> dict[str, Any]:
         """PUT request to public API."""
         url = f"{self.config.public_api_url}{path}"
         try:
-            response = self._http.put(url, headers=self.config.get_api_headers(), timeout=self.timeout, json=json)
+            response = self._http.put(
+                url,
+                headers=self.config.get_api_headers(),
+                timeout=timeout if timeout is not None else self.timeout,
+                json=json,
+            )
         except httpx.HTTPError as exc:
             self._log("PUT", url, type(exc).__name__)
             raise
@@ -149,7 +157,12 @@ class ApiClient:
         response.raise_for_status()
         return response.json()
 
-    def public_patch(self, path: str, json: dict[str, Any] | None = None) -> dict[str, Any] | None:
+    def public_patch(
+        self,
+        path: str,
+        json: dict[str, Any] | None = None,
+        timeout: float | None = None,
+    ) -> dict[str, Any] | None:
         """PATCH request to public API.
 
         Mirrors ``public_delete``'s empty-response handling: a 204 No
@@ -159,8 +172,14 @@ class ApiClient:
         non-JSON crash on the client would mask the actual outcome.
         """
         url = f"{self.config.public_api_url}{path}"
+        effective_timeout = timeout if timeout is not None else self.timeout
         try:
-            response = self._http.patch(url, headers=self.config.get_api_headers(), timeout=self.timeout, json=json)
+            response = self._http.patch(
+                url,
+                headers=self.config.get_api_headers(),
+                timeout=effective_timeout,
+                json=json,
+            )
         except httpx.HTTPError as exc:
             self._log("PATCH", url, type(exc).__name__)
             raise

{avr_cli-0.5.0 → avr_cli-0.6.0}/avrea_cli/auth.py

@@ -404,6 +404,8 @@ def _auth_url(public_api_url: str, callback_uri: str, *, provider: str, saml_log
         return f"{public_api_url}/oauth/google/login?final_redirect={callback_uri}"
     if provider == "github":
         return f"{public_api_url}/oauth/github/login?next={callback_uri}"
+    if provider == "gitlab":
+        return f"{public_api_url}/oauth/gitlab/login?next={callback_uri}"
     raise click.ClickException(f"Unsupported auth provider '{provider}'")
 
 

{avr_cli-0.5.0 → avr_cli-0.6.0}/avrea_cli/billing.py

@@ -401,8 +401,8 @@ def payment_methods_add(ctx, org_id, number, exp_month, exp_year, cvc):
         try:
             body = exc.response.json()
             detail = body.get("error", {}).get("message", "")
-        except Exception:
-            pass
+        except ValueError, AttributeError:
+            detail = ""
         click.echo(f"Error: Stripe rejected the card details.{f' ({detail})' if detail else ''}", err=True)
         raise click.Abort() from None
     except httpx.RequestError as e: