grafos costs
Inspect tenant-scoped invoice totals and per-resource line items for a billing window.
grafos costs
Tenant-scoped cost rollup. Reads the scheduler's `/api/v1/billing/invoice` endpoint with the resolved tenant auth context: a `tenant_user` credential sees its own invoice, an admin credential may pass `--tenant <name>` to inspect any tenant. JSON mode is byte-passthrough; table mode summarizes invoice header + per-resource line items
Usage: grafos costs [OPTIONS]
Options: --fabric <FABRIC> Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=] --scheduler <SCHEDULER> Scheduler URL. Falls back to `GRAFOS_SCHEDULER`, then to the Tenura-hosted credentials when that context applies [env: GRAFOS_SCHEDULER=] --bearer <BEARER> FabricAdmin bearer token (alternative to mTLS) [env: GRAFOS_BEARER=] --cert <CERT> Client certificate (PEM) for mTLS [env: GRAFOS_CERT=] --wide Show additional columns in table output --key <KEY> Client private key (PEM) matching `--cert` [env: GRAFOS_KEY=] --no-color Disable color output --ca <CA> CA bundle (PEM) used to verify the scheduler's TLS cert [env: GRAFOS_CA=] --pool <POOL> Pool name (default: "default") [default: default] --window <WINDOW> Billing window: `minute` / `hour` / `day` or a custom integer in seconds. Defaults to `hour` [default: hour] --start <START> Window start (Unix epoch seconds, inclusive). When set together with `--end`, takes precedence over `--window` --end <END> Window end (Unix epoch seconds, exclusive). Pairs with `--start` --tenant <TENANT> Tenant name filter. Tenant-user credentials are restricted to their own tenant by the scheduler regardless of this flag; admin credentials may set it to inspect any tenant --json Emit JSON. The body is byte-passthrough of the scheduler's invoice response so existing `jq` scripts keep working unchanged -h, --help Print help -V, --version Print version