keyhole-cli

CLI for interacting with Keyhole-compatible runtimes.

Install

pip install keyhole-cli

Verify installation:

keyhole --help

Quick Example

Start the test runtime:

docker compose up

Run commands:

keyhole runtime health
keyhole runtime identity
keyhole runtime state
keyhole runtime realize sha256:abc123

Replay the same digest:

keyhole runtime realize sha256:abc123

The runtime returns ALREADY_REALIZED.

Commands

keyhole runtime health

Checks runtime liveness.

keyhole runtime health
# Equivalent to: GET /healthz

keyhole runtime identity

Returns runtime identity and capabilities.

keyhole runtime identity
# Equivalent to: GET /identity

keyhole runtime state

Displays the current runtime state.

keyhole runtime state
# Equivalent to: GET /state

keyhole runtime realize

Submits a realization request using a candidate digest.

keyhole runtime realize sha256:abc123
# Equivalent to: POST /realize {"candidate_digest": "sha256:abc123", "payload": {}}

Options:

• --payload-json '{"key": "value"}' — inline JSON payload
• --payload-file path/to/payload.json — JSON payload from file
• --base-url — override runtime URL

Configuration

The CLI defaults to http://localhost:8080.

Override via environment variable:

export KEYHOLE_RUNTIME_URL=http://your-runtime:8080
keyhole runtime health

Or per-command:

keyhole runtime health --base-url http://your-runtime:8080

Relationship to the SDK

The CLI is built on top of the keyhole-sdk Python package. The SDK provides the programmatic interface; the CLI wraps it for terminal use.

License

Apache 2.0 — see LICENSE.