blockmachine 0.8.3__tar.gz → 0.8.4__tar.gz

{blockmachine-0.8.3 → blockmachine-0.8.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: blockmachine
-Version: 0.8.3
+Version: 0.8.4
 Summary: Blockmachine CLI - Miner and validator operator interface
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/taostat/blockmachine

{blockmachine-0.8.3 → blockmachine-0.8.4}/blockmachine.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: blockmachine
-Version: 0.8.3
+Version: 0.8.4
 Summary: Blockmachine CLI - Miner and validator operator interface
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/taostat/blockmachine

{blockmachine-0.8.3 → blockmachine-0.8.4}/commands/miner.py

@@ -457,13 +457,17 @@ def update(
     alias: str = typer.Argument(None, help="Node alias or ID"),
     new_alias: str = typer.Option(None, "--alias", "-a", help="New alias"),
     endpoint: str = typer.Option(None, "--endpoint", "-e", help="New endpoint"),
+    repin: bool = typer.Option(
+        False, "--repin", help="Re-detect and update TLS cert fingerprint"
+    ),
 ) -> None:
-    """Update a node's alias or endpoint."""
+    """Update a node's alias, endpoint, or TLS fingerprint."""
     alias = _get_alias(alias)
 
-    if not new_alias and not endpoint:
+    if not new_alias and not endpoint and not repin:
         console.print(
-            "[yellow]Nothing to update. Specify --alias or --endpoint[/yellow]"
+            "[yellow]Nothing to update."
+            " Specify --alias, --endpoint, or --repin[/yellow]"
         )
         return
 
@@ -476,6 +480,32 @@ def update(
 
     with RegistryClient(config) as client:
         node_id = _resolve_node(client, alias)
+
+        if repin:
+            node_resp = client.get(f"/nodes/{node_id}")
+            if node_resp.status_code != 200:
+                console.print(f"[red]Error fetching node:[/red] {node_resp.text}")
+                raise typer.Exit(1)
+            node_endpoint = endpoint or node_resp.json()["endpoint"]
+            if not is_ip_endpoint(node_endpoint):
+                console.print(
+                    "[yellow]--repin ignored:"
+                    " only applies to IP-based endpoints[/yellow]"
+                )
+            else:
+                fp = get_cert_fingerprint(node_endpoint)
+                if fp:
+                    update_data["cert_fingerprint"] = fp
+                    console.print(f"[dim]New TLS fingerprint: {fp}[/dim]")
+                else:
+                    console.print(
+                        "[red]Could not fetch TLS certificate from endpoint[/red]"
+                    )
+                    raise typer.Exit(1)
+
+        if not update_data:
+            return
+
         response = client.patch(f"/nodes/{node_id}", json=update_data)
 
     if response.status_code == 200:
@@ -522,6 +552,7 @@ def test(
     automatically. Use --endpoint and --secret for pre-registration
     testing.
     """
+    stored_fingerprint: Optional[str] = None
     if not endpoint:
         alias = _get_alias(alias)
         config = load_config()
@@ -533,6 +564,7 @@ def test(
                 raise typer.Exit(1)
             node = response.json()
             endpoint = node["endpoint"]
+            stored_fingerprint = node.get("cert_fingerprint")
             if not secret:
                 secret = _fetch_active_secret(client, node_id)
         console.print(f"[bold]Alias:[/bold]    {alias}")
@@ -555,12 +587,27 @@ def test(
     if tls_ok:
         is_ip = is_ip_endpoint(endpoint)
         mode = "pinned" if is_ip else "CA-verified"
-        fp_short = fingerprint[:16] + "..." if fingerprint else "none"
+        fp_short = _truncate(fingerprint, 16) if fingerprint else "none"
         console.print(f"[green]OK[/green] ({mode}, {fp_short})")
     else:
         console.print(f"[red]FAIL[/red] {tls_msg}")
         all_ok = False
 
+    if stored_fingerprint and fingerprint:
+        console.print("Cert pinning...  ", end="")
+        if stored_fingerprint == fingerprint:
+            console.print("[green]OK[/green] (matches registry)")
+        else:
+            console.print("[red]MISMATCH[/red]")
+            console.print(
+                f"[yellow]  ↳ Registry: {_truncate(stored_fingerprint, 16)}[/yellow]"
+            )
+            console.print(
+                f"[yellow]  ↳ Live:     {_truncate(fingerprint, 16)}[/yellow]"
+            )
+            console.print("[yellow]  ↳ Run 'bm miner update --repin' to fix[/yellow]")
+            all_ok = False
+
     # 2. Health
     console.print("Health check...  ", end="")
     health_ok, health_msg = test_health(hostname)

{blockmachine-0.8.3 → blockmachine-0.8.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "blockmachine"
-version = "0.8.3"
+version = "0.8.4"
 description = "Blockmachine CLI - Miner and validator operator interface"
 requires-python = ">=3.10"
 license = "MIT"