blockmachine 0.8.3__tar.gz → 0.9.0__tar.gz

{blockmachine-0.8.3 → blockmachine-0.9.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: blockmachine
-Version: 0.8.3
+Version: 0.9.0
 Summary: Blockmachine CLI - Miner and validator operator interface
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/taostat/blockmachine

{blockmachine-0.8.3 → blockmachine-0.9.0}/blockmachine.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: blockmachine
-Version: 0.8.3
+Version: 0.9.0
 Summary: Blockmachine CLI - Miner and validator operator interface
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/taostat/blockmachine

{blockmachine-0.8.3 → blockmachine-0.9.0}/commands/auth.py

@@ -26,7 +26,7 @@ def device_login(
 
     Raises typer.Exit(1) on failure.
     """
-    client_id = client_id or settings.CLIENT_ID
+    client_id = client_id or settings.client_id()
     auth_url = auth_url or settings.auth_url()
 
     try:
@@ -157,7 +157,7 @@ def save_token(
 
     config = load_config()
     config.set_role(role)
-    config.client_id = client_id or settings.CLIENT_ID
+    config.client_id = client_id or settings.client_id()
     config.auth_url = auth_url or settings.auth_url()
     config.api_url = api_url or settings.api_url()
     config.access_token = access_token

{blockmachine-0.8.3 → blockmachine-0.9.0}/commands/miner.py

@@ -457,13 +457,17 @@ def update(
     alias: str = typer.Argument(None, help="Node alias or ID"),
     new_alias: str = typer.Option(None, "--alias", "-a", help="New alias"),
     endpoint: str = typer.Option(None, "--endpoint", "-e", help="New endpoint"),
+    repin: bool = typer.Option(
+        False, "--repin", help="Re-detect and update TLS cert fingerprint"
+    ),
 ) -> None:
-    """Update a node's alias or endpoint."""
+    """Update a node's alias, endpoint, or TLS fingerprint."""
     alias = _get_alias(alias)
 
-    if not new_alias and not endpoint:
+    if not new_alias and not endpoint and not repin:
         console.print(
-            "[yellow]Nothing to update. Specify --alias or --endpoint[/yellow]"
+            "[yellow]Nothing to update."
+            " Specify --alias, --endpoint, or --repin[/yellow]"
         )
         return
 
@@ -476,6 +480,32 @@ def update(
 
     with RegistryClient(config) as client:
         node_id = _resolve_node(client, alias)
+
+        if repin:
+            node_resp = client.get(f"/nodes/{node_id}")
+            if node_resp.status_code != 200:
+                console.print(f"[red]Error fetching node:[/red] {node_resp.text}")
+                raise typer.Exit(1)
+            node_endpoint = endpoint or node_resp.json()["endpoint"]
+            if not is_ip_endpoint(node_endpoint):
+                console.print(
+                    "[yellow]--repin ignored:"
+                    " only applies to IP-based endpoints[/yellow]"
+                )
+            else:
+                fp = get_cert_fingerprint(node_endpoint)
+                if fp:
+                    update_data["cert_fingerprint"] = fp
+                    console.print(f"[dim]New TLS fingerprint: {fp}[/dim]")
+                else:
+                    console.print(
+                        "[red]Could not fetch TLS certificate from endpoint[/red]"
+                    )
+                    raise typer.Exit(1)
+
+        if not update_data:
+            return
+
         response = client.patch(f"/nodes/{node_id}", json=update_data)
 
     if response.status_code == 200:
@@ -522,6 +552,7 @@ def test(
     automatically. Use --endpoint and --secret for pre-registration
     testing.
     """
+    stored_fingerprint: Optional[str] = None
     if not endpoint:
         alias = _get_alias(alias)
         config = load_config()
@@ -533,6 +564,7 @@ def test(
                 raise typer.Exit(1)
             node = response.json()
             endpoint = node["endpoint"]
+            stored_fingerprint = node.get("cert_fingerprint")
             if not secret:
                 secret = _fetch_active_secret(client, node_id)
         console.print(f"[bold]Alias:[/bold]    {alias}")
@@ -555,12 +587,27 @@ def test(
     if tls_ok:
         is_ip = is_ip_endpoint(endpoint)
         mode = "pinned" if is_ip else "CA-verified"
-        fp_short = fingerprint[:16] + "..." if fingerprint else "none"
+        fp_short = _truncate(fingerprint, 16) if fingerprint else "none"
         console.print(f"[green]OK[/green] ({mode}, {fp_short})")
     else:
         console.print(f"[red]FAIL[/red] {tls_msg}")
         all_ok = False
 
+    if stored_fingerprint and fingerprint:
+        console.print("Cert pinning...  ", end="")
+        if stored_fingerprint == fingerprint:
+            console.print("[green]OK[/green] (matches registry)")
+        else:
+            console.print("[red]MISMATCH[/red]")
+            console.print(
+                f"[yellow]  ↳ Registry: {_truncate(stored_fingerprint, 16)}[/yellow]"
+            )
+            console.print(
+                f"[yellow]  ↳ Live:     {_truncate(fingerprint, 16)}[/yellow]"
+            )
+            console.print("[yellow]  ↳ Run 'bm miner update --repin' to fix[/yellow]")
+            all_ok = False
+
     # 2. Health
     console.print("Health check...  ", end="")
     health_ok, health_msg = test_health(hostname)

{blockmachine-0.8.3 → blockmachine-0.9.0}/commands/validator.py

@@ -20,7 +20,7 @@ def login(
     ),
 ) -> None:
     """Login with validator scopes for the verification gateway."""
-    resolved_client_id = client_id or settings.CLIENT_ID
+    resolved_client_id = client_id or settings.client_id()
     resolved_auth_url = auth_url or settings.auth_url()
 
     token_data = device_login(

{blockmachine-0.8.3 → blockmachine-0.9.0}/config.py

@@ -126,7 +126,7 @@ class CLIConfig:
 
     @property
     def client_id(self) -> str:
-        return self._net().client_id or settings.CLIENT_ID
+        return self._net().client_id or settings.client_id()
 
     @client_id.setter
     def client_id(self, value: Optional[str]) -> None:

{blockmachine-0.8.3 → blockmachine-0.9.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "blockmachine"
-version = "0.8.3"
+version = "0.9.0"
 description = "Blockmachine CLI - Miner and validator operator interface"
 requires-python = ">=3.10"
 license = "MIT"

{blockmachine-0.8.3 → blockmachine-0.9.0}/settings.py

@@ -15,18 +15,21 @@ class NetworkConfig:
     auth_url: str
     api_url: str
     netuid: int
+    client_id: str
 
 
 MAINNET = NetworkConfig(
     auth_url="https://auth.taostats.io",
     api_url="https://api.blockmachine.io",
     netuid=19,
+    client_id="35cc50f5-6bf5-432b-8892-84c3b0e856b2",
 )
 
 TESTNET = NetworkConfig(
     auth_url="https://test-auth.taostats.io",
     api_url="https://testnet-registry.blockmachine.io",
     netuid=417,
+    client_id="07f5c729-5ca7-412a-b5e7-4966e132548e",
 )
 
 # Active network — set by --testnet flag via main.py callback
@@ -57,10 +60,13 @@ def netuid() -> int:
     return _network.netuid
 
 
-CLIENT_ID = os.environ.get("BM_CLIENT_ID", "07f5c729-5ca7-412a-b5e7-4966e132548e")
 AUDIENCE = "bittensor-apps"
 
 
+def client_id() -> str:
+    return os.environ.get("BM_CLIENT_ID", _network.client_id)
+
+
 def jwks_uri() -> str:
     return f"{auth_url()}/.well-known/jwks.json"
 

{blockmachine-0.8.3 → blockmachine-0.9.0}/tests/test_cli_config.py

@@ -71,7 +71,7 @@ class TestSettings:
             s.set_network(s.MAINNET)
             assert s.auth_url() == "https://auth.taostats.io"
             assert s.api_url() == "https://api.blockmachine.io"
-            assert s.CLIENT_ID == "07f5c729-5ca7-412a-b5e7-4966e132548e"
+            assert s.client_id() == "35cc50f5-6bf5-432b-8892-84c3b0e856b2"
             assert s.jwks_uri() == ("https://auth.taostats.io/.well-known/jwks.json")
             assert s.miner_scopes() == ["subnet:19:miner"]
             assert s.validator_scopes() == ["subnet:19:validator"]
@@ -101,7 +101,8 @@ class TestSettings:
 
             assert s.auth_url() == "https://custom-auth.example.com"
             assert s.api_url() == "https://custom-api.example.com"
-            assert s.CLIENT_ID == "custom-client-id"
+            s.set_network(s.MAINNET)
+            assert s.client_id() == "custom-client-id"
             assert s.jwks_uri() == (
                 "https://custom-auth.example.com/.well-known/jwks.json"
             )