buildai-cli 0.3.44__tar.gz → 0.3.45__tar.gz

{buildai_cli-0.3.44 → buildai_cli-0.3.45}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: buildai-cli
-Version: 0.3.44
+Version: 0.3.45
 Summary: Build AI CLI (Typer)
 Requires-Python: >=3.11
 Requires-Dist: python-dotenv>=1.0.0

{buildai_cli-0.3.44 → buildai_cli-0.3.45}/cli/auth_local.py

@@ -95,18 +95,12 @@ class ResolvedLocalAuthProfile:
                     f'export ALLOYDB_IAM_AUTH_{suffix}="true"',
                 ]
             )
-            if self.name == "engineers-dev":
-                exports.extend(
-                    [
-                        f'export ALLOYDB_USE_AUTH_PROXY_{suffix}="true"',
-                        'export ALLOYDB_AUTH_PROXY_HOST="127.0.0.1"',
-                        f'export ALLOYDB_AUTH_PROXY_PORT_{suffix}="5440"',
-                    ]
-                )
-            else:
-                exports.append(
-                    f'export ALLOYDB_RUNTIME_IMPERSONATE_SA_{suffix}="{self.target_service_account}"'
-                )
+            exports.extend(
+                [
+                    f'export ALLOYDB_RUNTIME_IMPERSONATE_SA_{suffix}="{self.target_service_account}"',
+                    f'export ALLOYDB_USE_AUTH_PROXY_{suffix}="false"',
+                ]
+            )
         elif self.name == "db-admin-local" and self.target_db_user and self.target_service_account:
             exports.extend(
                 [
@@ -200,10 +194,11 @@ def sanctioned_auth_profiles() -> tuple[LocalAuthProfile, ...]:
         LocalAuthProfile(
             name="engineers-dev",
             audience="engineers",
-            summary="Use the engineer-facing read-only DB and operator lane.",
+            summary="Use the engineer-facing read-only DB lane.",
             purpose=(
-                "Use this for direct CLI database reads, schema inspection, and desktop SQL "
-                "tooling. Local API runtime parity should use the service-runtime profiles instead."
+                "Use this for direct CLI database reads and schema inspection through the "
+                "engineer-facing service-account identity. Local API runtime parity should "
+                "use the service-runtime profiles instead."
             ),
         ),
         LocalAuthProfile(

{buildai_cli-0.3.44 → buildai_cli-0.3.45}/cli/ops_init.py

@@ -34,11 +34,12 @@ def _parse_env(value: str) -> str:
 
 
 def _auth_env_prefix(settings_app_env: object) -> str:
-    if str(settings_app_env) == "production":
+    normalized = str(getattr(settings_app_env, "value", settings_app_env)).strip().lower()
+    if normalized == "production":
         return "PROD"
-    if str(settings_app_env) == "development":
+    if normalized == "development":
         return "DEV"
-    if str(settings_app_env) == "test":
+    if normalized == "test":
         return "DEV"
     return "PREVIEW"
 
@@ -160,6 +161,7 @@ def init_ops_context(ctx: typer.Context):
         os.environ[f"ALLOYDB_RUNTIME_IMPERSONATE_SA_{env_prefix}"] = (
             "engineers-dev-sa@data-470400.iam.gserviceaccount.com"
         )
+        os.environ[f"ALLOYDB_USE_AUTH_PROXY_{env_prefix}"] = "false"
         auth_info.append("impersonate=engineers-dev-sa")
 
     # Reload settings with overrides

{buildai_cli-0.3.44 → buildai_cli-0.3.45}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "buildai-cli"
-version = "0.3.44"
+version = "0.3.45"
 description = "Build AI CLI (Typer)"
 requires-python = ">=3.11"
 dependencies = [