grafos run

Direct run subcommand. Most users go through grafos deploy run instead.

grafos run

Launch the current grafOS program against a target. Refuses to run if the source hash doesn't match the last validation, or if tests failed, or if the target is disabled in [runnable_targets]

Usage: grafos run [OPTIONS] [TARGET] [-- <ARGS>...]

Arguments:
  [TARGET]
          Which target to run

          Possible values:
          - local
          - aws:    Project-aware AWS run. Uses the AWS connector preflight and, when `--scheduler` is set, threads the resolved provider (default `aws`) into the orchestrator
          - remote: Project-aware non-AWS provider run (e.g. `docker`). Requires `--provider <p>` and `--scheduler <url>`
          - gcp
          - azure

          [default: local]

  [ARGS]...
          Arguments forwarded to the program after `--`. Only used for `local` today; cloud targets ignore them (cloud runs take their input via the scheduler manifest)

Options:
      --fabric <FABRIC>
          Fabric address (host:port). Overrides GRAFOS_FABRIC env var

          [env: GRAFOS_FABRIC=]

      --mode <MODE>
          Cloud ownership mode when target is aws/gcp/azure. Ignored for local. Defaults to the mode recorded in the connector config

          Possible values:
          - tenura-managed: User pays Tenura (included credits or paid balance). Tenura controls the AWS account, launches cells, meters usage, and tears down. Minimizes user setup
          - customer-owned: User connects their own AWS account via an external-id IAM role + short-lived STS session. Tenura never stores long-lived AWS secrets; the per-run session expires automatically

      --json
          Output in JSON format for scripting

      --provider <PROVIDER>
          Explicit provider target for orchestrator placement. Required for `run remote`. For `run aws`, defaults to `aws` if unset (so the orchestrator only considers AWS-provider cells). Provider names are lowercase letters, digits, and `-`. There is no fallback: if no eligible cell matches, the request is refused with `no_eligible_provider_cells`

          [env: GRAFOS_PROVIDER=]

      --scheduler <SCHEDULER>
          Public/orchestrator scheduler URL for `run remote` and the `run aws` orchestrator path. When set on `run aws`, the CLI performs an orchestrator-side eligibility probe with the resolved provider after the AWS preflight passes; when unset, `run aws` keeps the existing fail-closed preflight semantics

          [env: GRAFOS_SCHEDULER=]

      --wide
          Show additional columns in table output

      --no-color
          Disable color output

      --tenant <TENANT>
          Tenant identity used in the orchestrator-side eligibility probe. Defaults to `default` when neither flag nor env is provided

          [env: GRAFOS_TENANT=]

      --pool <POOL>
          Pool name (default: "default")

          [default: default]

  -h, --help
          Print help (see a summary with '-h')

  -V, --version
          Print version