buildai-cli 0.3.45__tar.gz → 0.3.46__tar.gz

{buildai_cli-0.3.45 → buildai_cli-0.3.46}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: buildai-cli
-Version: 0.3.45
+Version: 0.3.46
 Summary: Build AI CLI (Typer)
 Requires-Python: >=3.11
 Requires-Dist: python-dotenv>=1.0.0

{buildai_cli-0.3.45 → buildai_cli-0.3.46}/cli/context.py

@@ -22,6 +22,7 @@ from dataclasses import dataclass
 from typing import TYPE_CHECKING, AsyncGenerator
 
 import asyncpg
+from dal import scopes as dal_scopes
 from infra.settings import Settings, get_settings
 
 from infra import Database, get_logger
@@ -34,6 +35,22 @@ logger = get_logger(__name__)
 # Environment variable to force local PostgreSQL (for test/CI)
 USE_LOCAL_DB = os.getenv("USE_LOCAL_DB", "false").lower() == "true"
 _ZERO_UUID = "00000000-0000-0000-0000-000000000000"
+_READ_SUFFIXES = (".read", ".search", ".query", ".introspection")
+_READ_PROFILE_SCOPES = frozenset(
+    scope
+    for scope in dal_scopes.ALL_SCOPES
+    if any(scope.endswith(suffix) for suffix in _READ_SUFFIXES)
+)
+_CLI_PROFILE_SCOPES: dict[str, frozenset[str]] = {
+    "internal_admin": frozenset(dal_scopes.ALL_SCOPES),
+    "internal_viewer": _READ_PROFILE_SCOPES,
+    "engineers-dev": _READ_PROFILE_SCOPES,
+    "developer": frozenset(dal_scopes.ALL_SCOPES),
+    "operator": frozenset(dal_scopes.ALL_SCOPES),
+    "ml_engineer": frozenset(dal_scopes.ALL_SCOPES),
+    "mcp": _READ_PROFILE_SCOPES,
+    "agent": frozenset(dal_scopes.ALL_SCOPES),
+}
 _UNRESTRICTED_CLI_PROFILES = frozenset(
     {
         "internal_admin",
@@ -47,6 +64,14 @@ _UNRESTRICTED_CLI_PROFILES = frozenset(
 )
 
 
+def scopes_for_cli_profile(profile: str) -> frozenset[str]:
+    """Resolve one sanctioned CLI profile to its DAL scope set."""
+    resolved = _CLI_PROFILE_SCOPES.get(profile)
+    if resolved is None:
+        raise ValueError(f"Unknown CLI profile: {profile}")
+    return resolved
+
+
 @dataclass(frozen=True)
 class AdminConnectionConfig:
     """Describe the canonical admin connection the ops-plane CLI should prefer.
@@ -281,7 +306,7 @@ async def get_cli_context(
         # Test/CI: wrap local connection in context
         async with _local_connection(settings) as conn:
             await _stamp_cli_session_contract(conn, profile=resolved_profile)
-            ctx = await Context.for_cli_profile(conn, profile=resolved_profile)
+            ctx = Context.for_cli(conn, scopes=scopes_for_cli_profile(resolved_profile))
             yield None, ctx
     else:
         # Development/Production: use infra.Database
@@ -289,7 +314,7 @@ async def get_cli_context(
         try:
             await db.connect()
             await _stamp_cli_session_contract(db.conn, profile=resolved_profile)
-            ctx = await Context.for_cli_profile(db, profile=resolved_profile)
+            ctx = Context.for_cli(db, scopes=scopes_for_cli_profile(resolved_profile))
             yield db, ctx
         finally:
             await db.close()

{buildai_cli-0.3.45 → buildai_cli-0.3.46}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "buildai-cli"
-version = "0.3.45"
+version = "0.3.46"
 description = "Build AI CLI (Typer)"
 requires-python = ">=3.11"
 dependencies = [