grafos runs

List, inspect, and download artifacts from previous runs. Tenant-scoped — you only see your own runs.

grafos runs

Tenant-scoped run history and artifacts. `grafos runs`, `grafos runs show <id>`, and `grafos runs artifacts <id>` read from the scheduler's `/api/v1/runs[/<id>]` endpoints with auth-aware visibility (TenantUser sees only their own; observer/admin see all)

Usage: grafos runs [OPTIONS]
       grafos runs <COMMAND>

Commands:
  ls         List runs the auth context can see. Default: human table with run_id, status, provider, cell_id, tenant, started_at
  show       Show one run's full record: status, source_hash, provider/cell, lease info, cost metadata if present, finalized timestamps, and refusal reason if any
  logs       Print tasklet output/logs for one run
  artifacts  Download and verify artifacts for one run
  help       Print this message or the help of the given subcommand(s)

Options:
      --fabric <FABRIC>        Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --wide                   Show additional columns in table output
      --no-color               Disable color output
      --pool <POOL>            Pool name (default: "default") [default: default]
      --scheduler <SCHEDULER>  Orchestrator URL. Falls back to `GRAFOS_SCHEDULER`, then to the Tenura-hosted credentials when that context applies  [env: GRAFOS_SCHEDULER=]
      --bearer <BEARER>        FabricAdmin bearer token (alternative to --cert/--key/--ca when the orchestrator is in mtls+token / token mode) [env: GRAFOS_BEARER=]
      --cert <CERT>            Client certificate (PEM) for mTLS to the orchestrator. Pair with --key + --ca; same auth surface used by `grafos cloud connect` and `grafos admin` [env: GRAFOS_CERT=]
      --key <KEY>              Client private key (PEM) matching --cert [env: GRAFOS_KEY=]
      --ca <CA>                CA bundle (PEM) used to verify the orchestrator's TLS cert. Required when the orchestrator is signed by a fabric CA not in the public WebPKI set [env: GRAFOS_CA=]
      --status <STATUS>        Filter by status (`requested`/`assigned`/`running`/ `finalized`/`failed`/`refused`/`cancelled`). Repeatable for OR. Empty = no filter
      --provider <PROVIDER>    Filter by provider id. Repeatable for OR
      --limit <LIMIT>          Cap on rows printed. Default 50 [default: 50]
      --json
  -h, --help                   Print help
  -V, --version                Print version

grafos runs ls

List runs the auth context can see. Default: human table with run_id, status, provider, cell_id, tenant, started_at

Usage: grafos runs ls [OPTIONS]

Options:
      --fabric <FABRIC>        Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --scheduler <SCHEDULER>  Orchestrator URL. Falls back to `GRAFOS_SCHEDULER`, then to the Tenura-hosted credentials when that context applies  [env: GRAFOS_SCHEDULER=]
      --bearer <BEARER>        FabricAdmin bearer token (alternative to --cert/--key/--ca when the orchestrator is in mtls+token / token mode) [env: GRAFOS_BEARER=]
      --cert <CERT>            Client certificate (PEM) for mTLS to the orchestrator. Pair with --key + --ca; same auth surface used by `grafos cloud connect` and `grafos admin` [env: GRAFOS_CERT=]
      --wide                   Show additional columns in table output
      --key <KEY>              Client private key (PEM) matching --cert [env: GRAFOS_KEY=]
      --no-color               Disable color output
      --ca <CA>                CA bundle (PEM) used to verify the orchestrator's TLS cert. Required when the orchestrator is signed by a fabric CA not in the public WebPKI set [env: GRAFOS_CA=]
      --pool <POOL>            Pool name (default: "default") [default: default]
      --status <STATUS>        Filter by status (`requested`/`assigned`/`running`/ `finalized`/`failed`/`refused`/`cancelled`). Repeatable for OR. Empty = no filter
      --provider <PROVIDER>    Filter by provider id. Repeatable for OR
      --limit <LIMIT>          Cap on rows printed. Default 50 [default: 50]
      --json
  -h, --help                   Print help
  -V, --version                Print version

grafos runs show

Show one run's full record: status, source_hash, provider/cell, lease info, cost metadata if present, finalized timestamps, and refusal reason if any

Usage: grafos runs show [OPTIONS] <RUN_ID>

Arguments:
  <RUN_ID>  The run id to look up (ULID-like string)

Options:
      --fabric <FABRIC>        Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --scheduler <SCHEDULER>  Orchestrator URL. Falls back to `GRAFOS_SCHEDULER`, then to the Tenura-hosted credentials when that context applies  [env: GRAFOS_SCHEDULER=]
      --bearer <BEARER>        FabricAdmin bearer token (alternative to --cert/--key/--ca when the orchestrator is in mtls+token / token mode) [env: GRAFOS_BEARER=]
      --cert <CERT>            Client certificate (PEM) for mTLS to the orchestrator. Pair with --key + --ca; same auth surface used by `grafos cloud connect` and `grafos admin` [env: GRAFOS_CERT=]
      --wide                   Show additional columns in table output
      --key <KEY>              Client private key (PEM) matching --cert [env: GRAFOS_KEY=]
      --no-color               Disable color output
      --ca <CA>                CA bundle (PEM) used to verify the orchestrator's TLS cert. Required when the orchestrator is signed by a fabric CA not in the public WebPKI set [env: GRAFOS_CA=]
      --pool <POOL>            Pool name (default: "default") [default: default]
      --json
  -h, --help                   Print help
  -V, --version                Print version

grafos runs logs

Print tasklet output/logs for one run

Usage: grafos runs logs [OPTIONS] <RUN_ID>

Arguments:
  <RUN_ID>  The run id whose tasklet output/log artifact should be printed

Options:
      --fabric <FABRIC>        Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --scheduler <SCHEDULER>  Orchestrator URL. Falls back to `GRAFOS_SCHEDULER`, then to the Tenura-hosted credentials when that context applies [env: GRAFOS_SCHEDULER=]
      --bearer <BEARER>        FabricAdmin bearer token (alternative to --cert/--key/--ca when the orchestrator is in mtls+token / token mode) [env: GRAFOS_BEARER=]
      --cert <CERT>            Client certificate (PEM) for mTLS to the orchestrator [env: GRAFOS_CERT=]
      --wide                   Show additional columns in table output
      --key <KEY>              Client private key (PEM) matching --cert [env: GRAFOS_KEY=]
      --no-color               Disable color output
      --ca <CA>                CA bundle (PEM) used to verify the orchestrator's TLS cert [env: GRAFOS_CA=]
      --pool <POOL>            Pool name (default: "default") [default: default]
      --json
  -h, --help                   Print help
  -V, --version                Print version

grafos runs artifacts

Download and verify artifacts for one run

Usage: grafos runs artifacts [OPTIONS] <RUN_ID>

Arguments:
  <RUN_ID>  The run id whose artifacts should be downloaded

Options:
      --fabric <FABRIC>        Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --out <OUT>              Output directory. Defaults to `.grafos/artifacts/<run-id>`
      --scheduler <SCHEDULER>  Orchestrator URL. Falls back to `GRAFOS_SCHEDULER`, then to the Tenura-hosted credentials when that context applies [env: GRAFOS_SCHEDULER=]
      --bearer <BEARER>        FabricAdmin bearer token (alternative to --cert/--key/--ca when the orchestrator is in mtls+token / token mode) [env: GRAFOS_BEARER=]
      --wide                   Show additional columns in table output
      --cert <CERT>            Client certificate (PEM) for mTLS to the orchestrator [env: GRAFOS_CERT=]
      --no-color               Disable color output
      --key <KEY>              Client private key (PEM) matching --cert [env: GRAFOS_KEY=]
      --pool <POOL>            Pool name (default: "default") [default: default]
      --ca <CA>                CA bundle (PEM) used to verify the orchestrator's TLS cert [env: GRAFOS_CA=]
      --json
  -h, --help                   Print help
  -V, --version                Print version