codna 0.1.4__tar.gz → 0.1.6__tar.gz

{codna-0.1.4 → codna-0.1.6}/MANIFEST.in

@@ -1,6 +1,7 @@
 exclude codna/_telys_runtime/libame_kernel.*
 exclude codna/_telys_runtime/manifest.json
-recursive-exclude codna/_telys_runtime libame_kernel.* manifest.json
+exclude codna/_telys_runtime/oem-license.jwt
+recursive-exclude codna/_telys_runtime libame_kernel.* manifest.json oem-license.jwt
 recursive-exclude .codna *
 recursive-exclude .codna-memory *
 global-exclude keys.txt .keys.txt .env .env.* *.log *.pem *.key *.jwt local-stack.json launcher.state

{codna-0.1.4 → codna-0.1.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codna
-Version: 0.1.4
+Version: 0.1.6
 Summary: Local-first repo intelligence and agent fixing for Codna.
 Author: Thyn
 Maintainer: Thyn
@@ -30,8 +30,10 @@ Classifier: Typing :: Typed
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 Requires-Dist: httpx>=0.28.0
+Requires-Dist: keyring>=24
 Requires-Dist: mcp>=1.2.0
 Requires-Dist: pyarrow>=15.0.0
+Requires-Dist: pyyaml>=6
 Provides-Extra: mcp
 Provides-Extra: memory
 Requires-Dist: telys>=0.1.0b1; extra == "memory"

{codna-0.1.4 → codna-0.1.6}/codna/__init__.py

@@ -5,4 +5,4 @@ This package is the `codna` CLI. Users never touch "algenta" directly — the en
 is an internal dependency reached over HTTP.
 """
 
-__version__ = "0.1.4"
+__version__ = "0.1.6"

codna-0.1.6/codna/byok_cli.py

@@ -0,0 +1,94 @@
+"""CLI glue for local BYOK — the on-device LLM provider key used by local `codna fix`.
+
+Thin layer over :mod:`codna.keystore`: the ``codna key {set,list,rm}`` command and the provider-key
+step folded into ``codna login``. The key stays on the device (OS keychain) and is never printed; the
+value is read via a no-echo prompt or ``--stdin`` (never argv, to avoid shell-history leaks). Split out
+of ``cli.py`` to keep that module under the modularity ceiling.
+"""
+from __future__ import annotations
+
+import json
+import sys
+from collections.abc import Mapping
+
+from . import keystore
+
+# LLM provider keys the local fixing agent needs (the engine key CODNA_API_KEY is not a model key).
+_PROVIDER_KEYS = tuple(k for k in keystore.MANAGED_KEYS if k != "CODNA_API_KEY")
+
+
+def provider_key_present(runtime_keys: Mapping[str, object]) -> bool:
+    """True if a NON-EMPTY LLM provider key resolves from env or the runtime key map.
+
+    Checks the resolved value, not mere key presence: a value-less ``keys.txt`` line (``ANTHROPIC_API_KEY=``)
+    is dropped by the engine's child-env builder, so treating it as "present" would skip onboarding and
+    leave the fixing agent with no usable key.
+    """
+    import os
+
+    if any((os.environ.get(name) or "").strip() for name in _PROVIDER_KEYS):
+        return True
+    return any(getattr(runtime_keys.get(name), "value", "").strip() for name in _PROVIDER_KEYS)
+
+
+def ensure_local_provider_key(*, interactive: bool, runtime_keys: Mapping[str, object]) -> str:
+    """Offer to store a provider key in the OS keychain if none is configured. Returns a status string.
+
+    Never prints the key. Interactive callers get a no-echo prompt; others get an actionable hint.
+    """
+    if provider_key_present(runtime_keys):
+        return "present"
+    if not interactive:
+        return "not-configured (run `codna key set <provider>`)"
+    try:
+        answer = input(
+            "\nNo local LLM provider key found. Add one now so `codna fix` runs on-device?\n"
+            "  Enter a provider (anthropic/openai/gemini/…) or press Enter to skip: "
+        ).strip()
+    except EOFError:
+        return "not-configured (run `codna key set <provider>`)"
+    if not answer:
+        return "skipped (run `codna key set <provider>` later)"
+    try:
+        import getpass
+
+        secret = getpass.getpass(f"  Paste the {answer} key (input hidden): ").strip()
+        if not secret:
+            return "skipped"
+        stored = keystore.set_key(answer, secret)
+    except keystore.KeystoreError as exc:
+        print(f"  could not store the key: {exc}", file=sys.stderr)
+        return "not-configured"
+    return f"stored:{stored}"
+
+
+def cmd_key(args) -> int:
+    """Manage the on-device LLM provider key(s) used by local `codna fix` (OS keychain; local BYOK)."""
+    action = getattr(args, "key_action", None)
+    try:
+        if action == "list":
+            print(json.dumps(
+                {"ok": True, "keys": keystore.stored_key_names(), "keychain": keystore.available()},
+                indent=2,
+            ))
+            return 0
+        if action == "rm":
+            existed = keystore.delete_key(args.provider)
+            print(json.dumps({"ok": True, "removed": existed, "provider": args.provider}, indent=2))
+            return 0
+        if action == "set":
+            # Read the secret WITHOUT echo / without argv (no shell-history leak). --stdin for CI.
+            if getattr(args, "stdin", False):
+                secret = sys.stdin.readline().strip()
+            else:
+                import getpass
+
+                secret = getpass.getpass(f"Paste the {args.provider} key (input hidden): ").strip()
+            stored = keystore.set_key(args.provider, secret)
+            print(json.dumps({"ok": True, "stored": stored}, indent=2))  # value never printed
+            return 0
+    except keystore.KeystoreError as exc:
+        print(json.dumps({"ok": False, "error": str(exc)}, indent=2), file=sys.stderr)
+        return 1
+    print(json.dumps({"ok": False, "error": "usage: codna key {set|list|rm} …"}, indent=2), file=sys.stderr)
+    return 2