buildai-cli 0.3.172__tar.gz → 0.3.174__tar.gz

{buildai_cli-0.3.172 → buildai_cli-0.3.174}/.gitignore

@@ -155,6 +155,13 @@ recording-cache/
 /datasets/golden-ego-exo/build/**/out/
 !/datasets/embedding-atlas/build/
 !/datasets/embedding-atlas/build/**
+!/datasets/delivery-1m-hour/build/
+!/datasets/delivery-1m-hour/build/**
+/datasets/delivery-1m-hour/build/**/out/
+/datasets/delivery-1m-hour/build/upload/fleet.local.env
+# Run-time copies from the delivery record: they name the customer, so they never enter the repo.
+/datasets/delivery-1m-hour/build/upload/RELEASE.json
+/datasets/delivery-1m-hour/build/upload/plans/
 !/datasets/buildai-1k-hour-figure-sample/build/
 /datasets/buildai-1k-hour-figure-sample/build/*
 !/datasets/buildai-1k-hour-figure-sample/build/validate_blocked_policies.py

{buildai_cli-0.3.172 → buildai_cli-0.3.174}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: buildai-cli
-Version: 0.3.172
+Version: 0.3.174
 Summary: Build AI CLI (Typer)
 Requires-Python: >=3.11
 Requires-Dist: google-crc32c>=1.7.1

{buildai_cli-0.3.172 → buildai_cli-0.3.174}/cli/auth_local.py

@@ -516,21 +516,6 @@ def inspect_local_auth_state() -> LocalAuthState:
     )
 
 
-def _development_lane_is_codified() -> tuple[bool, str]:
-    """Report whether the dev AlloyDB lane has repo-owned IAM user truth today."""
-
-    path = REPO_ROOT / "infra/production/database-dev/terragrunt.hcl"
-    if not path.exists():
-        return False, f"Missing {path}"
-    text = path.read_text(encoding="utf-8")
-    if "iam_users = []" in text:
-        return (
-            False,
-            "infra/production/database-dev/terragrunt.hcl still declares `iam_users = []`.",
-        )
-    return True, "Development lane IAM users are codified in repo truth."
-
-
 def bootstrap_commands(
     *,
     profile: ResolvedLocalAuthProfile | None = None,
@@ -572,27 +557,27 @@ def bootstrap_commands(
 
 
 def _engineers_dev_contract_is_modeled() -> tuple[bool, str]:
-    """Report whether the engineer-facing dev service account exists in repo truth."""
+    """Report whether the engineer-facing service account exists in repo truth.
+
+    Only the production cluster counts: the dev cluster (buildai-india-dev) was retired
+    on 30 Oct 2026, and local development uses the production cluster.
+    """
 
     iam_path = REPO_ROOT / "infra/production/iam/terragrunt.hcl"
-    db_paths = (
-        REPO_ROOT / "infra/production/database/terragrunt.hcl",
-        REPO_ROOT / "infra/production/database-dev/terragrunt.hcl",
-    )
+    db_path = REPO_ROOT / "infra/production/database/terragrunt.hcl"
     missing: list[str] = []
 
     if not iam_path.exists() or '"engineers-dev-sa"' not in iam_path.read_text(encoding="utf-8"):
         missing.append(str(iam_path))
-    for db_path in db_paths:
-        if not db_path.exists() or "engineers-dev-sa@" not in db_path.read_text(encoding="utf-8"):
-            missing.append(str(db_path))
+    if not db_path.exists() or "engineers-dev-sa@" not in db_path.read_text(encoding="utf-8"):
+        missing.append(str(db_path))
 
     if missing:
         return (
             False,
             "engineers-dev-sa is not fully modeled in repo truth yet: " + ", ".join(missing),
         )
-    return True, "engineers-dev-sa is modeled in IAM plus prod/dev DB repo truth."
+    return True, "engineers-dev-sa is modeled in IAM plus prod DB repo truth."
 
 
 def build_auth_report(
@@ -797,21 +782,7 @@ def build_auth_report(
             level="error",
             summary=summary,
             fix=(
-                "Model engineers-dev-sa in `infra/production/iam/terragrunt.hcl` and `infra/production/database-dev/terragrunt.hcl` before treating it as the default engineer path."
-                if not ok
-                else None
-            ),
-        )
-
-    if resolved_profile and resolved_profile.db_access and environment == "development":
-        ok, summary = _development_lane_is_codified()
-        add_check(
-            "development-lane-contract",
-            ok=ok,
-            level="error",
-            summary=summary,
-            fix=(
-                "Codify development-lane IAM users in `infra/production/database-dev/terragrunt.hcl` before treating dev auth as reliable."
+                "Model engineers-dev-sa in `infra/production/iam/terragrunt.hcl` and `infra/production/database/terragrunt.hcl` before treating it as the default engineer path."
                 if not ok
                 else None
             ),

{buildai_cli-0.3.172 → buildai_cli-0.3.174}/cli/commands/dev.py

@@ -19,11 +19,11 @@ app = typer.Typer(
 )
 db_app = typer.Typer(no_args_is_help=True, help="Database access recipes for local dev.")
 
-_DEFAULT_DEV_INSTANCE_URI = (
-    "projects/data-470400/locations/asia-south1/clusters/buildai-india-dev/"
-    "instances/buildai-india-dev-primary"
+_NO_DEVELOPMENT_CLUSTER = (
+    "The development lane has no AlloyDB cluster: buildai-india-dev was retired on "
+    "30 Oct 2026. Set ALLOYDB_CLUSTER, ALLOYDB_INSTANCE, ALLOYDB_REGION and DB_NAME "
+    "for the database you mean, or pass --env with another lane."
 )
-_DEFAULT_DEV_DATABASE = "buildai_dev"
 _DEFAULT_STAGING_INSTANCE_URI = (
     "projects/data-470400/locations/asia-south1/clusters/buildai-india-staging/"
     "instances/buildai-india-staging-primary"
@@ -75,8 +75,8 @@ def _db_info_payload(
         instance_uri = settings.alloydb_instance_uri
     except RuntimeError:
         if resolved_env == Environment.DEVELOPMENT:
-            instance_uri = _DEFAULT_DEV_INSTANCE_URI
-        elif resolved_env == Environment.STAGING:
+            raise typer.BadParameter(_NO_DEVELOPMENT_CLUSTER) from None
+        if resolved_env == Environment.STAGING:
             instance_uri = _DEFAULT_STAGING_INSTANCE_URI
         else:
             raise
@@ -85,20 +85,14 @@ def _db_info_payload(
         database_name = settings.db_name
     except RuntimeError:
         if resolved_env == Environment.DEVELOPMENT:
-            database_name = _DEFAULT_DEV_DATABASE
-        elif resolved_env == Environment.STAGING:
+            raise typer.BadParameter(_NO_DEVELOPMENT_CLUSTER) from None
+        if resolved_env == Environment.STAGING:
             database_name = _DEFAULT_STAGING_DATABASE
         else:
             raise
 
     private_only_note = None
-    if resolved_env == Environment.DEVELOPMENT:
-        private_only_note = (
-            "The development AlloyDB cluster is private-only. "
-            "If you are outside its VPC, run the Auth Proxy through an approved "
-            "intermediary path such as ALL_PROXY / PSC / VPN."
-        )
-    elif resolved_env == Environment.STAGING:
+    if resolved_env == Environment.STAGING:
         private_only_note = (
             "The staging AlloyDB cluster is private-only. Run "
             "`buildai db --env staging tunnel`, then pass "

{buildai_cli-0.3.172 → buildai_cli-0.3.174}/cli/context.py

@@ -361,14 +361,15 @@ async def _local_connection(
     - DB_HOST (default: localhost)
     - DB_PORT (default: 5432)
     - DB_USER (falls back to settings.db_user)
-    - DB_PASSWORD (falls back to "postgres")
+    - DB_PASSWORD (falls back to the settings password; with neither set,
+      asyncpg's own PGPASSWORD / .pgpass lookup applies)
     - DB_NAME (falls back to settings.db_name)
     """
     conn = await asyncpg.connect(
         host=os.getenv("DB_HOST", "localhost"),
         port=int(os.getenv("DB_PORT", "5432")),
         user=os.getenv("DB_USER") or settings.effective_db_user,
-        password=os.getenv("DB_PASSWORD") or settings.effective_alloydb_password or "postgres",
+        password=os.getenv("DB_PASSWORD") or settings.effective_alloydb_password or None,
         database=os.getenv("DB_NAME", settings.db_name),  # Respect DB_NAME env var for CI
         statement_cache_size=0,
     )

{buildai_cli-0.3.172 → buildai_cli-0.3.174}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "buildai-cli"
-version = "0.3.172"
+version = "0.3.174"
 description = "Build AI CLI (Typer)"
 requires-python = ">=3.11"
 dependencies = [