The CLI

The dorky CLI applies Dorkyfiles, inspects machines, stores their secrets, and manages the keys used to reach them. Its main commands are divided between machines you run and access you hold.

The working loop

Most changes use the same four commands:

dorky apply hello.dorky.toml --plan
dorky apply hello.dorky.toml
dorky status hello
dorky diff hello

apply --plan previews a Dorkyfile without changing a machine. apply provisions the machine when it is absent and converges later changes. status reports the machine's current run state and last apply. diff reports which configuration planes would change on the next apply.

Machines you run

Command	What it does
dorky ls	Lists machines across the configured substrates.
dorky new [name]	Writes a minimal Dorkyfile and applies it.
dorky apply <path>	Applies one Dorkyfile, or every *.dorky.toml file in a directory.
dorky status <machine>	Reports run state without waking a sleeping machine unless --wake is set.
dorky diff <machine> [file]	Compares a machine with a Dorkyfile. It exits with status 1 when changes would apply.
dorky dump <machine>	Prints the retained Dorkyfile for a machine. Secret values are not included.
dorky secret set <machine> NAME	Reads a secret value from standard input and stores it on the machine.
dorky secret rm <machine> NAME	Removes a stored secret.
dorky rm <machine>	Destroys the machine. The local Dorkyfile remains.

dorky logs appears in the command list as the intended log-streaming interface. It currently reports that the command is not built and exits with status 1.

Access you hold

Command	What it does
dorky login <provisioner-url>	Stores a provision grant at 0600 for later applies. The grant is read from hidden input or standard input.
dorky chat <machine>	Opens the machine's agent through a scoped session URL.
dorky connect [client]	Configures Pi, Cursor, or OpenCode to reach your machines.
dorky keys	Lists keys you hold and keys you issued.
dorky keys cut <machine>	Issues a scoped, expiring key and prints its URL.
dorky keys accept <url-or-token>	Stores a key someone issued to you.
dorky keys revoke <jti>	Revokes a key you issued.
dorky keys drop <name>	Forgets a key you hold.

The public account page that issues hosted provision grants is still being brought online. The login command and provision-grant storage are built.

Inspect the installed surface

The CLI describes its current command surface directly:

dorky --help
dorky help --more

The second command lists operational and recovery commands that sit outside the normal Dorkyfile workflow.