urun-cli 0.7.7__tar.gz → 0.8.0__tar.gz

{urun_cli-0.7.7 → urun_cli-0.8.0}/CHANGELOG.md

@@ -1,5 +1,51 @@
-## Unreleased
-
+## 0.8.0
+
+MVP launch release (URU-673). The CLI ships only its launch surface, gated by
+release feature flags (`src/urun/feature_flags.py`, conventions in
+[FLAGS.md](FLAGS.md)): `login`, `org`, `account`
+(`org`/`usage`/`credit`/`quota`), `member`, `api-key`, `credit-ledger`,
+`feedback`, and `open billing` register; every other command stays in the
+tree but unregistered, failing exactly like an unknown command (argparse's
+own invalid-choice error, exit 2 — no "not available" text, no flag names,
+and no mention of a gated surface in any launch `--help` or in `login`'s
+output). Hidden means nonexistent. Re-introducing a capability is a flag
+flip in `feature_flags.py` plus the launch-pin update in
+`tests/test_feature_flags.py` (see FLAGS.md, "Re-introducing a
+capability") — no re-implementation.
+
+Also in this release's code, but gated OFF in the launch surface (flipping
+their flags re-introduces them):
+
+- `urun release promote <release_id> [--environment main]` — make an existing
+  release current again (clean rollback, no marker commits). Server side it
+  takes the same path as a same-content `urun deploy`: the control plane
+  re-registers the release and republishes the release pointer.
+- Deploy deps collector: `@app.function(deps=...)` may now reference a
+  module-level `Dependencies(...)` constant imported from a file shipped with
+  the app (`from sense_deploy import SENSE_DEPS`) — resolved statically by the
+  same side-effect-free evaluator, including re-export chains and the
+  `import mod` + `mod.SYM` attribute form. An attached `deps=` that cannot be
+  statically resolved now FAILS THE DEPLOY LOUDLY naming `file:line`, the
+  import it came through, and the fix — previously it silently shipped an
+  EMPTY manifest (no python pins, no files) and the app's boot self-test died
+  with `No module named ...` after fleet rollout (sense, 2026-10-27/28).
+- `kubectl urun` — a kubectl plugin (the `urun.kubectl_plugin` module ships
+  in the wheel; the `kubectl-urun` entry point is NOT installed in this
+  release — restoring it takes the `feat-byo-nodes` flip plus re-registering
+  the entry point in `[project.scripts]` and updating
+  `test_launch_wheel_ships_no_kubectl_urun_entry_point`, per FLAGS.md's
+  re-introduction procedure) with four verbs over the
+  `gpu.urun.sh/v1alpha1` GPUWorker surface:
+  `logs` (the `logs.urun.sh/v1` log subresource, with `-f` follow
+  passthrough, `--since`, `--tail`, `-s <service>`), `cordon`/`uncordon`
+  (`spec.unschedulable`), `drain` (cordon, then wait for the `Draining`
+  condition to reach `False`/`Drained`, nonzero on `--timeout`), and
+  `describe` (node block, services, conditions, events, liveness lease,
+  claim summary). Claim-owned workers are cordoned through their OWNING
+  GPUWorkerClaim (resolved via `spec.claimRef`) because the claim
+  reconciler re-renders the worker's spec; the patched object is printed.
+  All verbs ride a bounded `kubectl proxy --port=0` child, so
+  `--kubeconfig`/`--context`/`-n` resolve exactly as kubectl resolves them.
 - Security (ENG-570 / pentest urun-cli-01, mirrored in urun-python
   `urun/core/store/repo.py`): `store.repo(...)` specs parsed from untrusted
   app source are validated before any git call. The `@<ref>` pin must be a

urun_cli-0.8.0/PKG-INFO

@@ -0,0 +1,164 @@
+Metadata-Version: 2.4
+Name: urun-cli
+Version: 0.8.0
+Summary: CLI for the urun platform — login, billing & usage. More capabilities coming soon.
+Project-URL: Homepage, https://urun.sh
+Project-URL: Repository, https://github.com/urun-sh/urun-cli
+Project-URL: Issues, https://github.com/urun-sh/urun-cli/issues
+Author: urun
+License-Expression: MIT
+License-File: LICENSE
+Keywords: cli,urun
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Requires-Python: >=3.11
+Provides-Extra: rust
+Requires-Dist: tree-sitter-rust==0.24.0; extra == 'rust'
+Requires-Dist: tree-sitter==0.25.2; extra == 'rust'
+Description-Content-Type: text/markdown
+
+# urun CLI
+
+Command-line access to your urun org: log in, inspect billing, usage, and
+cost information, and jump to the billing console. More capabilities are on
+the way — see [What's next](#whats-next).
+
+[![PyPI](https://img.shields.io/pypi/v/urun-cli.svg)](https://pypi.org/project/urun-cli/)
+[![Python](https://img.shields.io/pypi/pyversions/urun-cli.svg)](https://pypi.org/project/urun-cli/)
+
+## Install
+
+```bash
+uv tool install urun-cli
+# or
+pip install urun-cli
+```
+
+The package installs the `urun` command:
+
+```bash
+urun --version
+```
+
+For one-off `uvx` usage:
+
+```bash
+uvx --from urun-cli urun --version
+# or the package-matching command alias
+uvx urun-cli --version
+```
+
+## Log in
+
+Save an org-scoped API key locally with `urun login`:
+
+```bash
+urun login
+```
+
+If `URUN_API_KEY` is not already set, `urun login` opens the urun console API
+keys page, prompts you to paste the generated `urun_sk_...` key, verifies it
+with the urun API, and stores credentials for later commands.
+
+If you already have a key, you can pass it directly:
+
+```bash
+urun login --api-key urun_sk_<secret>
+```
+
+For CI or one-off commands, you can use the environment variable instead:
+
+```bash
+export URUN_API_KEY=urun_sk_<secret>
+```
+
+## Billing & usage
+
+Every command is org-scoped via your API key.
+
+Your org identity (use `--id` in scripts: `ORG=$(urun org --id)`):
+
+```bash
+urun org
+```
+
+Usage summary and credit balance:
+
+```bash
+urun account usage
+urun account credit
+urun account quota
+```
+
+The credit ledger — every credit grant and charge to your org, newest first:
+
+```bash
+urun credit-ledger list
+```
+
+Org config, members, and API keys:
+
+```bash
+urun account org
+urun member list
+urun api-key list
+```
+
+Open the billing page in the urun console:
+
+```bash
+urun open billing
+```
+
+`urun feedback` raises and tracks issues with the urun team from your
+terminal.
+
+## Common options
+
+| Option | Description |
+| --- | --- |
+| `--api-url` | Override the API URL; defaults to `URUN_API_URL`, saved login credentials, or `https://api.urun.sh/v1`. |
+| `--api-key` | API key; defaults to `URUN_API_KEY` or saved login credentials. |
+| `--json` | Machine-readable output, where supported. |
+
+## Troubleshooting
+
+| Error | Fix |
+| --- | --- |
+| `missing API key` | Run `urun login`, set `URUN_API_KEY`, or pass `--api-key`. |
+| `invalid API key format` | Use `urun_<32 lowercase hex chars>`. |
+
+## What's next
+
+This release focuses on account access: login, billing, usage, and cost
+information. Additional capabilities — deploy tooling, app management, and
+more — are in development and will arrive in upcoming releases.
+
+## Development
+
+Contributing and test instructions are in [CONTRIBUTING.md](CONTRIBUTING.md).
+The CLI gates unreleased surfaces behind release feature flags — see
+[FLAGS.md](FLAGS.md) for the conventions and how to exercise them from a
+source checkout.
+
+This repo has a Nix/direnv/devcontainer baseline:
+
+```bash
+direnv allow
+just sync
+just check
+```
+
+Use VS Code Dev Containers to open the repository with the same toolchain in a
+container. Copy `devcontainer.env.example` to `.devcontainer.env` if you need
+to pass local git identity or other non-secret development settings into the
+container.
+
+## License
+
+MIT.

urun_cli-0.8.0/README.md

@@ -0,0 +1,140 @@
+# urun CLI
+
+Command-line access to your urun org: log in, inspect billing, usage, and
+cost information, and jump to the billing console. More capabilities are on
+the way — see [What's next](#whats-next).
+
+[![PyPI](https://img.shields.io/pypi/v/urun-cli.svg)](https://pypi.org/project/urun-cli/)
+[![Python](https://img.shields.io/pypi/pyversions/urun-cli.svg)](https://pypi.org/project/urun-cli/)
+
+## Install
+
+```bash
+uv tool install urun-cli
+# or
+pip install urun-cli
+```
+
+The package installs the `urun` command:
+
+```bash
+urun --version
+```
+
+For one-off `uvx` usage:
+
+```bash
+uvx --from urun-cli urun --version
+# or the package-matching command alias
+uvx urun-cli --version
+```
+
+## Log in
+
+Save an org-scoped API key locally with `urun login`:
+
+```bash
+urun login
+```
+
+If `URUN_API_KEY` is not already set, `urun login` opens the urun console API
+keys page, prompts you to paste the generated `urun_sk_...` key, verifies it
+with the urun API, and stores credentials for later commands.
+
+If you already have a key, you can pass it directly:
+
+```bash
+urun login --api-key urun_sk_<secret>
+```
+
+For CI or one-off commands, you can use the environment variable instead:
+
+```bash
+export URUN_API_KEY=urun_sk_<secret>
+```
+
+## Billing & usage
+
+Every command is org-scoped via your API key.
+
+Your org identity (use `--id` in scripts: `ORG=$(urun org --id)`):
+
+```bash
+urun org
+```
+
+Usage summary and credit balance:
+
+```bash
+urun account usage
+urun account credit
+urun account quota
+```
+
+The credit ledger — every credit grant and charge to your org, newest first:
+
+```bash
+urun credit-ledger list
+```
+
+Org config, members, and API keys:
+
+```bash
+urun account org
+urun member list
+urun api-key list
+```
+
+Open the billing page in the urun console:
+
+```bash
+urun open billing
+```
+
+`urun feedback` raises and tracks issues with the urun team from your
+terminal.
+
+## Common options
+
+| Option | Description |
+| --- | --- |
+| `--api-url` | Override the API URL; defaults to `URUN_API_URL`, saved login credentials, or `https://api.urun.sh/v1`. |
+| `--api-key` | API key; defaults to `URUN_API_KEY` or saved login credentials. |
+| `--json` | Machine-readable output, where supported. |
+
+## Troubleshooting
+
+| Error | Fix |
+| --- | --- |
+| `missing API key` | Run `urun login`, set `URUN_API_KEY`, or pass `--api-key`. |
+| `invalid API key format` | Use `urun_<32 lowercase hex chars>`. |
+
+## What's next
+
+This release focuses on account access: login, billing, usage, and cost
+information. Additional capabilities — deploy tooling, app management, and
+more — are in development and will arrive in upcoming releases.
+
+## Development
+
+Contributing and test instructions are in [CONTRIBUTING.md](CONTRIBUTING.md).
+The CLI gates unreleased surfaces behind release feature flags — see
+[FLAGS.md](FLAGS.md) for the conventions and how to exercise them from a
+source checkout.
+
+This repo has a Nix/direnv/devcontainer baseline:
+
+```bash
+direnv allow
+just sync
+just check
+```
+
+Use VS Code Dev Containers to open the repository with the same toolchain in a
+container. Copy `devcontainer.env.example` to `.devcontainer.env` if you need
+to pass local git identity or other non-secret development settings into the
+container.
+
+## License
+
+MIT.

{urun_cli-0.7.7 → urun_cli-0.8.0}/pyproject.toml

@@ -20,14 +20,14 @@ name = "urun-cli"
 # so every merge remains on the already-published version until this value is
 # advanced. Wiring semantic-release into CI remains separate work; this patch
 # bump is the minimal release unblock (post-v0.6.3 fixes + the Rust feature minor).
-version = "0.7.7"
-description = "End-user CLI for deploying apps to urun"
+version = "0.8.0"
+description = "CLI for the urun platform — login, billing & usage. More capabilities coming soon."
 readme = "README.md"
 requires-python = ">=3.11"
 license = "MIT"
 license-files = ["LICENSE"]
 authors = [{ name = "urun" }]
-keywords = ["urun", "deploy", "cli"]
+keywords = ["urun", "cli"]
 classifiers = [
   "Development Status :: 3 - Alpha",
   "Environment :: Console",
@@ -36,7 +36,6 @@ classifiers = [
   "Programming Language :: Python :: 3",
   "Programming Language :: Python :: 3.11",
   "Programming Language :: Python :: 3.12",
-  "Topic :: Software Development :: Build Tools",
 ]
 dependencies = []
 
@@ -48,6 +47,10 @@ Issues = "https://github.com/urun-sh/urun-cli/issues"
 [project.scripts]
 urun = "urun.cli:main"
 urun-cli = "urun.cli:main"
+# No kubectl-urun entry point at launch (URU-673): the GPUWorker surface is
+# flag-hidden (feat-byo-nodes, FLAGS.md) and the wheel must not install an
+# operator binary whose every verb errors. The module stays, gated; the entry
+# point returns when the flag flips on in a future release.
 
 [project.optional-dependencies]
 # Rust app discovery (urun/rust.py) parses with the pinned native

{urun_cli-0.7.7 → urun_cli-0.8.0}/src/urun/api.py

@@ -461,6 +461,18 @@ class ApiClient:
     def get_release(self, release_id: str) -> dict[str, Any]:
         return self._get(f"/cli/releases/{urllib.parse.quote(release_id, safe='')}")
 
+    def promote_release(self, release_id: str, environment: str) -> dict[str, Any]:
+        """Make an EXISTING release current for ``environment`` (rollback).
+
+        ``POST /cli/releases/<id>/promote`` re-fires the release's deploy event —
+        the same path a same-content ``urun deploy`` takes — so the control plane
+        re-registers it and republishes the release pointer.
+        """
+        return self._post(
+            f"/cli/releases/{urllib.parse.quote(release_id, safe='')}/promote",
+            {"environment": environment},
+        )
+
     def query_logs(self, params: dict[str, Any] | None = None) -> dict[str, Any]:
         return self._get("/cli/logs", params)
 

{urun_cli-0.7.7 → urun_cli-0.8.0}/src/urun/catalog.py

@@ -120,7 +120,7 @@ ENGINE_DEPS: dict[str, list[str]] = {
         "nvidia-cuda-crt==13.0.88",
         "nvidia-cuda-cccl==13.0.85",
         "nvidia-nvvm==13.0.88",
-        "nvidia-cuda-runtime==13.0.96",
+        "nvidia-cuda-runtime==13.0.*",
         "numpy<2",
         "pillow>=10.0.0",
         "orjson",
@@ -162,7 +162,7 @@ ENGINE_DEPS: dict[str, list[str]] = {
         "nvidia-cuda-crt==13.0.88",
         "nvidia-cuda-cccl==13.0.85",
         "nvidia-nvvm==13.0.88",
-        "nvidia-cuda-runtime==13.0.96",
+        "nvidia-cuda-runtime==13.0.*",
         "numpy<2",
         "pillow>=10.0.0",
         "orjson",
@@ -368,7 +368,7 @@ ENGINE_DEPS: dict[str, list[str]] = {
         "nvidia-cuda-crt==13.0.88",
         "nvidia-cuda-cccl==13.0.85",
         "nvidia-nvvm==13.0.88",
-        "nvidia-cuda-runtime==13.0.96",
+        "nvidia-cuda-runtime==13.0.*",
         "numpy<2",
         "pillow>=10.0.0",
         "orjson",
@@ -446,7 +446,7 @@ ENGINE_DEPS: dict[str, list[str]] = {
         "nvidia-cuda-crt==13.0.88",
         "nvidia-cuda-cccl==13.0.85",
         "nvidia-nvvm==13.0.88",
-        "nvidia-cuda-runtime==13.0.96",
+        "nvidia-cuda-runtime==13.0.*",
         "ninja",
         "pip",
         "nvidia-cutlass-dsl>=4.6.0.dev0,<5",