apizit-cli 0.2.0b1__tar.gz → 0.2.0b4__tar.gz

{apizit_cli-0.2.0b1 → apizit_cli-0.2.0b4}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: apizit-cli
-Version: 0.2.0b1
-Summary: Launch Python APIs with APIZIT from your terminal or CI.
+Version: 0.2.0b4
+Summary: Launch supported Python, JavaScript, TypeScript or Java APIs from your terminal or CI.
 Author: APIZIT
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
@@ -18,9 +18,13 @@ Requires-Dist: pathspec<2,>=1
 
 # APIZIT CLI
 
-Launch Python code as a managed public API, inspect logs and manage releases from your terminal.
+Launch supported Python, JavaScript, TypeScript or Java projects as managed public APIs, inspect logs and manage releases from your terminal.
 
-APIZIT is an advanced development beta. This client targets its managed dev service.
+Managed adapters cover Flask, FastAPI, Django, Express, NestJS and Spring Boot; APIZIT Linking
+provides declarative Python routes. Run a scan to confirm the project's version and structure.
+
+APIZIT is an advanced beta. This source version defaults to `https://api.apizit.com/v1`.
+Version `0.2.0b1` uses its original dev default; use `--endpoint` explicitly with that version.
 Check the official CLI documentation for package availability and current workspace capabilities.
 
 Install with `pipx install --pip-args=--pre apizit-cli`
@@ -30,6 +34,12 @@ The client requires no AWS account, AWS credentials, Docker or APIZIT backend ch
 Run `apizit --help` and `apizit docs` for the command reference.
 The package contains the HTTP client and shared configuration contracts only.
 
+Use `apizit --endpoint https://api-test.apizit.com/v1 login` to access the test installation.
+Keep that explicit endpoint on subsequent test commands, or set `APIZIT_API_URL` for the terminal
+or CI job. Accounts, saved workspaces and sessions are separate for each endpoint. Sign in again
+when choosing a new address; the CLI never copies an existing session to it. A project already
+linked to another endpoint requires that original explicit endpoint.
+
 ```sh
 apizit login
 apizit workspace list

{apizit_cli-0.2.0b1 → apizit_cli-0.2.0b4}/README.md

@@ -1,8 +1,12 @@
 # APIZIT CLI
 
-Launch Python code as a managed public API, inspect logs and manage releases from your terminal.
+Launch supported Python, JavaScript, TypeScript or Java projects as managed public APIs, inspect logs and manage releases from your terminal.
 
-APIZIT is an advanced development beta. This client targets its managed dev service.
+Managed adapters cover Flask, FastAPI, Django, Express, NestJS and Spring Boot; APIZIT Linking
+provides declarative Python routes. Run a scan to confirm the project's version and structure.
+
+APIZIT is an advanced beta. This source version defaults to `https://api.apizit.com/v1`.
+Version `0.2.0b1` uses its original dev default; use `--endpoint` explicitly with that version.
 Check the official CLI documentation for package availability and current workspace capabilities.
 
 Install with `pipx install --pip-args=--pre apizit-cli`
@@ -12,6 +16,12 @@ The client requires no AWS account, AWS credentials, Docker or APIZIT backend ch
 Run `apizit --help` and `apizit docs` for the command reference.
 The package contains the HTTP client and shared configuration contracts only.
 
+Use `apizit --endpoint https://api-test.apizit.com/v1 login` to access the test installation.
+Keep that explicit endpoint on subsequent test commands, or set `APIZIT_API_URL` for the terminal
+or CI job. Accounts, saved workspaces and sessions are separate for each endpoint. Sign in again
+when choosing a new address; the CLI never copies an existing session to it. A project already
+linked to another endpoint requires that original explicit endpoint.
+
 ```sh
 apizit login
 apizit workspace list

{apizit_cli-0.2.0b1 → apizit_cli-0.2.0b4}/pyproject.toml

@@ -4,8 +4,8 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "apizit-cli"
-version = "0.2.0b1"
-description = "Launch Python APIs with APIZIT from your terminal or CI."
+version = "0.2.0b4"
+description = "Launch supported Python, JavaScript, TypeScript or Java APIs from your terminal or CI."
 readme = "README.md"
 requires-python = ">=3.12"
 authors = [{name = "APIZIT"}]

{apizit_cli-0.2.0b1 → apizit_cli-0.2.0b4}/src/apizit_cli/__init__.py

@@ -1,3 +1,3 @@
 """The APIZIT HTTP client. Importing this package never initializes a session."""
 
-__version__ = "0.2.0b1"
+__version__ = "0.2.0b4"

{apizit_cli-0.2.0b1 → apizit_cli-0.2.0b4}/src/apizit_cli/authentication.py

@@ -255,6 +255,8 @@ class NativeSession:
         )
         callback = urlsplit(configuration["redirect_uri"])
         outcome = {}
+        page_loaded = False
+        cleanup_nonce = secrets.token_urlsafe(24)
         deadline = time.monotonic() + timeout
 
         class Callback(BaseHTTPRequestHandler):
@@ -264,12 +266,22 @@ class NativeSession:
 
             def do_GET(self):
                 parsed = urlsplit(self.path)
+                if (
+                    parsed.path == "/complete"
+                    and not parsed.query
+                    and not parsed.scheme
+                    and not parsed.netloc
+                    and self.headers.get("Host") == callback.netloc
+                ):
+                    self._page("Return to the APIZIT terminal.", status=200)
+                    return
                 try:
                     query = parse_qs(parsed.query, max_num_fields=8, strict_parsing=True)
                 except ValueError:
                     query = {}
                 valid = (
                     parsed.path == callback.path
+                    and not outcome
                     and not parsed.scheme
                     and not parsed.netloc
                     and self.headers.get("Host") == callback.netloc
@@ -281,18 +293,71 @@ class NativeSession:
                         or (len(query.get("error", [])) == 1 and 0 < len(query["error"][0]) <= 256)
                     )
                 )
-                if valid and len(query.get("code", [])) == 1 and 0 < len(query["code"][0]) <= 4096:
-                    outcome["code"] = query["code"][0]
-                elif valid and "error" in query:
-                    outcome["error"] = True
-                self.send_response(200 if valid else 400)
-                self.send_header("Content-Type", "text/plain; charset=utf-8")
+                if not valid:
+                    self._page("Invalid login callback.", status=400)
+                    return
+                # Redirect before rendering: Chrome's global history retains an initial
+                # navigation even when JavaScript replaces its displayed URL afterward.
+                self.send_response(303)
+                self.send_header("Location", "/complete")
+                self.send_header("Content-Length", "0")
                 self.send_header("Cache-Control", "no-store")
-                self.send_header("Content-Security-Policy", "default-src 'none'")
+                self.send_header("Referrer-Policy", "no-referrer")
+                self.send_header("X-Content-Type-Options", "nosniff")
+                self.send_header(
+                    "Content-Security-Policy", "default-src 'none'; frame-ancestors 'none'"
+                )
                 self.end_headers()
-                self.wfile.write(
-                    b"Return to the APIZIT terminal." if valid else b"Invalid login callback."
+                self.wfile.flush()
+                # Keep serving until the clean landing page acknowledges or the grace ends.
+                if valid:
+                    outcome["received_at"] = time.monotonic()
+                    if "code" in query:
+                        outcome["code"] = query["code"][0]
+                    else:
+                        outcome["error"] = True
+
+            def _page(self, message, *, status):
+                body = (
+                    '<!doctype html><html lang="en"><head><meta charset="utf-8">'
+                    "<title>APIZIT sign-in</title>"
+                    f'<script nonce="{cleanup_nonce}">'
+                    'history.replaceState(null,"","/complete");'
+                    'fetch("/complete",{method:"POST",credentials:"omit",cache:"no-store",'
+                    f'headers:{{"X-APIZIT-Page":"{cleanup_nonce}"}}}}).catch(()=>{{}});'
+                    "</script></head><body><main><h1>APIZIT sign-in</h1>"
+                    f"<p>{message}</p></main></body></html>"
+                ).encode("utf-8")
+                self.send_response(status)
+                self.send_header("Content-Type", "text/html; charset=utf-8")
+                self.send_header("Content-Length", str(len(body)))
+                self.send_header("Cache-Control", "no-store")
+                self.send_header("Referrer-Policy", "no-referrer")
+                self.send_header("X-Content-Type-Options", "nosniff")
+                self.send_header(
+                    "Content-Security-Policy",
+                    f"default-src 'none'; script-src 'nonce-{cleanup_nonce}'; "
+                    "connect-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'",
                 )
+                self.end_headers()
+                self.wfile.write(body)
+                self.wfile.flush()
+
+            def do_POST(self):
+                nonlocal page_loaded
+                valid = (
+                    self.path == "/complete"
+                    and self.headers.get("Host") == callback.netloc
+                    and hmac.compare_digest(
+                        self.headers.get("X-APIZIT-Page", "").encode(), cleanup_nonce.encode()
+                    )
+                )
+                if valid and outcome:
+                    page_loaded = True
+                self.send_response(204 if valid else 400)
+                self.send_header("Cache-Control", "no-store")
+                self.send_header("Content-Length", "0")
+                self.end_headers()
 
             def log_message(self, *_args):
                 pass
@@ -327,6 +392,12 @@ class NativeSession:
             server.timeout = 1
             while not outcome and time.monotonic() < deadline:
                 server.handle_request()
+            # The browser acknowledges after replacing its current history entry. A bounded
+            # grace period also accommodates clients without JavaScript without blocking login.
+            cleanup_deadline = min(deadline, outcome.get("received_at", deadline) + 2)
+            while outcome and not page_loaded and time.monotonic() < cleanup_deadline:
+                server.timeout = min(0.2, max(0, cleanup_deadline - time.monotonic()))
+                server.handle_request()
         finally:
             server.server_close()
         if "code" not in outcome:

{apizit_cli-0.2.0b1 → apizit_cli-0.2.0b4}/src/apizit_cli/context.py

@@ -9,8 +9,7 @@ from pathlib import Path
 from urllib.parse import urlsplit
 
 from apizit_cli.errors import CliError, EXIT_USAGE
-
-DEFAULT_API_ORIGIN = "https://jxo6vbfwy0.execute-api.eu-central-1.amazonaws.com/v1"
+from apizit_cli.domains import DEFAULT_API_ORIGIN
 
 
 def normalize_origin(value: str) -> str:

apizit_cli-0.2.0b4/src/apizit_cli/domains.py

@@ -0,0 +1,8 @@
+"""Generated by infra/scripts/export_platform_domains.py --cli; do not edit."""
+
+DEFAULT_ENVIRONMENT = "beta"
+API_ORIGINS = {
+    "dev": "https://api-test.apizit.com/v1",
+    "beta": "https://api.apizit.com/v1",
+}
+DEFAULT_API_ORIGIN = API_ORIGINS[DEFAULT_ENVIRONMENT]

{apizit_cli-0.2.0b1 → apizit_cli-0.2.0b4}/src/apizit_cli/main.py

@@ -51,7 +51,15 @@ def build_parser():
     add_options(common, GLOBAL_OPTIONS, global_options=True)
     parser = Parser(
         prog="apizit",
-        description="Launch Python as a managed public API. APIZIT development beta.",
+        description=(
+            "Launch supported Python, JavaScript, TypeScript or Java projects as managed public "
+            "APIs. Framework support follows the APIZIT compatibility guide. APIZIT prelaunch beta."
+        ),
+        epilog=(
+            "Managed frameworks: Flask, FastAPI, Django, Express, NestJS and Spring Boot. "
+            "APIZIT Linking supports declarative Python routes. Run a scan to confirm that your "
+            "project's version and structure are compatible."
+        ),
         parents=[common],
         allow_abbrev=False,
     )

{apizit_cli-0.2.0b1 → apizit_cli-0.2.0b4}/src/apizit_cli.egg-info/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: apizit-cli
-Version: 0.2.0b1
-Summary: Launch Python APIs with APIZIT from your terminal or CI.
+Version: 0.2.0b4
+Summary: Launch supported Python, JavaScript, TypeScript or Java APIs from your terminal or CI.
 Author: APIZIT
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
@@ -18,9 +18,13 @@ Requires-Dist: pathspec<2,>=1
 
 # APIZIT CLI
 
-Launch Python code as a managed public API, inspect logs and manage releases from your terminal.
+Launch supported Python, JavaScript, TypeScript or Java projects as managed public APIs, inspect logs and manage releases from your terminal.
 
-APIZIT is an advanced development beta. This client targets its managed dev service.
+Managed adapters cover Flask, FastAPI, Django, Express, NestJS and Spring Boot; APIZIT Linking
+provides declarative Python routes. Run a scan to confirm the project's version and structure.
+
+APIZIT is an advanced beta. This source version defaults to `https://api.apizit.com/v1`.
+Version `0.2.0b1` uses its original dev default; use `--endpoint` explicitly with that version.
 Check the official CLI documentation for package availability and current workspace capabilities.
 
 Install with `pipx install --pip-args=--pre apizit-cli`
@@ -30,6 +34,12 @@ The client requires no AWS account, AWS credentials, Docker or APIZIT backend ch
 Run `apizit --help` and `apizit docs` for the command reference.
 The package contains the HTTP client and shared configuration contracts only.
 
+Use `apizit --endpoint https://api-test.apizit.com/v1 login` to access the test installation.
+Keep that explicit endpoint on subsequent test commands, or set `APIZIT_API_URL` for the terminal
+or CI job. Accounts, saved workspaces and sessions are separate for each endpoint. Sign in again
+when choosing a new address; the CLI never copies an existing session to it. A project already
+linked to another endpoint requires that original explicit endpoint.
+
 ```sh
 apizit login
 apizit workspace list

{apizit_cli-0.2.0b1 → apizit_cli-0.2.0b4}/src/apizit_cli.egg-info/SOURCES.txt

@@ -6,6 +6,7 @@ src/apizit_cli/commands.py
 src/apizit_cli/configuration.py
 src/apizit_cli/context.py
 src/apizit_cli/credential_store.py
+src/apizit_cli/domains.py
 src/apizit_cli/errors.py
 src/apizit_cli/http.py
 src/apizit_cli/main.py