cycode 3.25.2.dev1__py3-none-any.whl → 3.25.2.dev3__py3-none-any.whl

cycode/cli/apps/ai_guardrails/install_command.py

@@ -1,7 +1,7 @@
 """Install command for AI guardrails hooks."""
 
 from pathlib import Path
-from typing import Annotated, Optional
+from typing import Annotated
 
 import typer
 
@@ -29,7 +29,7 @@ def install_command(
         ),
     ] = DEFAULT_IDE_NAME,
     repo_path: Annotated[
-        Optional[Path],
+        Path | None,
         typer.Option(
             '--repo-path',
             help='Repository path for repo-scoped installation (defaults to current directory).',
@@ -93,7 +93,7 @@ def install_command(
         raise typer.Exit(1)
 
 
-def _install_policy(scope: str, repo_path: Optional[Path]) -> None:
+def _install_policy(scope: str, repo_path: Path | None) -> None:
     policy_success, policy_message = create_policy_file(scope, repo_path)
     if policy_success:
         console.print(f'[green]✓[/] {policy_message}')

cycode/cli/apps/ai_guardrails/scan/guardrail_config.py

@@ -10,7 +10,6 @@ import json
 import time
 from dataclasses import dataclass, field
 from pathlib import Path
-from typing import Optional
 
 from cycode.cli.apps.ai_guardrails.consts import GuardrailCellMode, PolicyMode
 from cycode.cli.apps.ai_guardrails.scan.consts import DEFAULT_SENSITIVE_PATH_GLOBS
@@ -60,7 +59,7 @@ def _default_sensitive_globs() -> list:
 class GuardrailConfig:
     payload: dict
     fetched_at: float
-    tenant_id: Optional[str] = None
+    tenant_id: str | None = None
     _guardrails: dict = field(init=False, repr=False)
 
     def __post_init__(self) -> None:
@@ -77,7 +76,7 @@ class GuardrailConfig:
     def _agents(self, guardrail_key: str) -> dict:
         return (self._guardrails.get(guardrail_key) or {}).get('agents') or {}
 
-    def mode_for(self, guardrail_key: str, ide_name: Optional[str]) -> str:
+    def mode_for(self, guardrail_key: str, ide_name: str | None) -> str:
         """The platform keys the cells by our --ide names, so the lookup is direct."""
         agents = self._agents(guardrail_key)
         return str(agents.get((ide_name or '').lower(), default_mode_for(guardrail_key))).lower()
@@ -85,19 +84,19 @@ class GuardrailConfig:
     def is_off_for_every_agent(self, guardrail_key: str) -> bool:
         return all(str(mode).lower() == GuardrailCellMode.OFF for mode in self._agents(guardrail_key).values())
 
-    def _modes_for_event(self, event_name: str, ide_name: Optional[str]) -> list:
+    def _modes_for_event(self, event_name: str, ide_name: str | None) -> list:
         return [
             self.mode_for(key, ide_name)
             for key, guardrail in self._guardrails.items()
             if str(guardrail.get('event_type', '')).lower() == str(event_name).lower()
         ]
 
-    def is_event_off(self, event_name: str, ide_name: Optional[str]) -> bool:
+    def is_event_off(self, event_name: str, ide_name: str | None) -> bool:
         """Every guardrail for this event is Off - skip the scan entirely."""
         modes = self._modes_for_event(event_name, ide_name)
         return bool(modes) and all(mode == GuardrailCellMode.OFF for mode in modes)
 
-    def can_event_block(self, event_name: str, ide_name: Optional[str]) -> bool:
+    def can_event_block(self, event_name: str, ide_name: str | None) -> bool:
         """At least one guardrail for this event is in Block mode - the scan must stay synchronous."""
         return GuardrailCellMode.BLOCK in self._modes_for_event(event_name, ide_name)
 
@@ -109,12 +108,12 @@ class GuardrailConfig:
     def is_expired(self) -> bool:
         return time.time() - self.fetched_at > self.ttl_seconds
 
-    def needs_refresh(self, tenant_id: Optional[str]) -> bool:
+    def needs_refresh(self, tenant_id: str | None) -> bool:
         """Expired, or fetched for another tenant (the user switched tenants since)."""
         return self.is_expired() or self.tenant_id != tenant_id
 
 
-def apply_platform_config(policy: dict, config: Optional[GuardrailConfig], ide_name: Optional[str]) -> None:
+def apply_platform_config(policy: dict, config: GuardrailConfig | None, ide_name: str | None) -> None:
     """Overlay the platform-owned enforcement config onto the local knobs-only policy.
 
     The platform is the only mode source: no cache (cold start) means the built-in defaults -
@@ -149,7 +148,7 @@ def apply_platform_config(policy: dict, config: Optional[GuardrailConfig], ide_n
     mcp['server_action'] = action(BlockReason.UNAUTHORIZED_MCP_SERVER)
 
 
-def save_guardrail_config(payload: dict, tenant_id: Optional[str]) -> None:
+def save_guardrail_config(payload: dict, tenant_id: str | None) -> None:
     """Persist a fetched resolved config; a failed write just leaves the previous cache in place."""
     path = get_config_cache_path()
     content = {'fetched_at': time.time(), 'tenant_id': tenant_id, 'payload': payload}
@@ -160,7 +159,7 @@ def save_guardrail_config(payload: dict, tenant_id: Optional[str]) -> None:
         logger.debug('Failed to save guardrail config cache', exc_info=e)
 
 
-def load_guardrail_config() -> Optional[GuardrailConfig]:
+def load_guardrail_config() -> GuardrailConfig | None:
     """The cached platform config, or None when it is absent or corrupt (quarantined)."""
     path = get_config_cache_path()
     if not path.exists():
@@ -171,7 +170,7 @@ def load_guardrail_config() -> Optional[GuardrailConfig]:
             content = json.load(file)
         payload = content['payload']
         if not isinstance(payload, dict):
-            raise ValueError('payload is not an object')
+            raise TypeError('payload is not an object')
         return GuardrailConfig(
             payload=payload, fetched_at=float(content['fetched_at']), tenant_id=content.get('tenant_id')
         )

cycode/cli/apps/ai_guardrails/scan/handlers.py

@@ -11,8 +11,9 @@ touching any handler in this module.
 import json
 import os
 import threading
+from collections.abc import Callable
 from dataclasses import dataclass
-from typing import TYPE_CHECKING, Any, Callable, NamedTuple, Optional
+from typing import TYPE_CHECKING, Any, NamedTuple
 
 import typer
 
@@ -48,15 +49,15 @@ HandlerFn = Callable[[typer.Context, AIHookPayload, dict], HookDecision]
 class ScanOutcome(NamedTuple):
     """What one guardrail scan came back with; the verdict is the server's, which applied the tenant's floors."""
 
-    violation_summary: Optional[str] = None
-    scan_id: Optional[str] = None
-    verdict: Optional[GuardrailsMode] = None
+    violation_summary: str | None = None
+    scan_id: str | None = None
+    verdict: GuardrailsMode | None = None
 
 
 NO_SCAN = ScanOutcome()
 
 
-def _parse_verdict(verdict: Optional[str]) -> Optional[GuardrailsMode]:
+def _parse_verdict(verdict: str | None) -> GuardrailsMode | None:
     """The server spells the verdict "Block"/"Report" and omits it when the scan found nothing to decide on."""
     if not verdict:
         return None
@@ -105,7 +106,7 @@ def handle_before_submit_prompt(ctx: typer.Context, payload: AIHookPayload, poli
         )
         block_reason = BlockReason.SCAN_FAILURE
         error_message = str(e)
-        raise e
+        raise
     finally:
         ai_client.create_event(
             payload,
@@ -192,7 +193,7 @@ def handle_before_read_file(ctx: typer.Context, payload: AIHookPayload, policy:
         )
         block_reason = BlockReason.SCAN_FAILURE
         error_message = str(e)
-        raise e
+        raise
     finally:
         ai_client.create_event(
             payload,
@@ -236,7 +237,7 @@ def _handle_arg_scan(
     policy: dict,
     feature: _ArgScanFeature,
     scan_text: str,
-    pre_scan_finding: Optional[_PreScanFinding] = None,
+    pre_scan_finding: _PreScanFinding | None = None,
 ) -> HookDecision:
     """Shared scan + decision flow for MCP_EXECUTION and COMMAND_EXEC events.
 
@@ -297,7 +298,7 @@ def _handle_arg_scan(
         )
         block_reason = BlockReason.SCAN_FAILURE
         error_message = str(e)
-        raise e
+        raise
     finally:
         ai_client.create_event(
             payload,
@@ -309,7 +310,7 @@ def _handle_arg_scan(
         )
 
 
-def _check_mcp_server_authorization(payload: AIHookPayload, policy: dict) -> Optional[_PreScanFinding]:
+def _check_mcp_server_authorization(payload: AIHookPayload, policy: dict) -> _PreScanFinding | None:
     """Fails open: no server name or no cached statuses lets the call through."""
     mcp_config = get_policy_value(policy, 'mcp', default={})
     if not get_policy_value(mcp_config, 'check_server', default=False):
@@ -366,7 +367,7 @@ def handle_before_mcp_execution(ctx: typer.Context, payload: AIHookPayload, poli
     )
 
 
-def get_handler_for_event(event_type: str) -> Optional[HandlerFn]:
+def get_handler_for_event(event_type: str) -> HandlerFn | None:
     """Look up the handler for a canonical event type."""
     handlers: dict[str, HandlerFn] = {
         AiHookEventType.PROMPT.value: handle_before_submit_prompt,
@@ -383,10 +384,10 @@ def get_effective_mode(feature_config: dict, action_key: str = 'action') -> Guar
 
 
 def should_detach_scan(
-    config: Optional['GuardrailConfig'],
+    config: 'GuardrailConfig | None',
     policy: dict,
     event_name: str,
-    ide_name: Optional[str],
+    ide_name: str | None,
 ) -> bool:
     """Whether this event's scan is safe to run detached.
 
@@ -403,7 +404,7 @@ def should_detach_scan(
 
 def build_ai_guardrails_scan_parameters(
     ctx: typer.Context,
-    paths: Optional[tuple[str, ...]],
+    paths: tuple[str, ...] | None,
     payload: AIHookPayload,
     event_type: AiHookEventType,
 ) -> dict:

cycode/cli/apps/ai_guardrails/scan/mcp_server_status.py

@@ -7,7 +7,7 @@ import json
 import time
 from dataclasses import dataclass, field
 from pathlib import Path
-from typing import Any, Optional
+from typing import Any
 
 from marshmallow import EXCLUDE, Schema, fields, post_load
 
@@ -34,7 +34,7 @@ def get_mcp_server_statuses_cache_path() -> Path:
     return Path.home() / CYCODE_CONFIGURATION_DIRECTORY / MCP_SERVER_STATUSES_FILE_NAME
 
 
-def is_enforced(status: Optional[McpServerAuthorizationStatus]) -> bool:
+def is_enforced(status: McpServerAuthorizationStatus | None) -> bool:
     """``status`` is None when the platform never saw the server."""
     return status == McpServerAuthorizationStatus.UNAUTHORIZED
 
@@ -43,7 +43,7 @@ def is_enforced(status: Optional[McpServerAuthorizationStatus]) -> bool:
 class McpServerStatuses:
     servers: list[McpServerStatus]
     fetched_at: float
-    tenant_id: Optional[str] = None
+    tenant_id: str | None = None
     ttl_seconds: float = DEFAULT_TTL_SECONDS
     _by_alias: dict = field(init=False, repr=False)
 
@@ -58,7 +58,7 @@ class McpServerStatuses:
             if known is None or _RESTRICTIVENESS[server.status] > _RESTRICTIVENESS[known]:
                 self._by_alias[key] = server.status
 
-    def status_of(self, alias: str) -> Optional[McpServerAuthorizationStatus]:
+    def status_of(self, alias: str) -> McpServerAuthorizationStatus | None:
         return self._by_alias.get(alias.lower())
 
 
@@ -78,7 +78,7 @@ class McpServerStatusesSchema(Schema):
 
 
 def save_mcp_server_statuses(
-    servers: list[McpServerStatus], tenant_id: Optional[str], ttl_seconds: float = DEFAULT_TTL_SECONDS
+    servers: list[McpServerStatus], tenant_id: str | None, ttl_seconds: float = DEFAULT_TTL_SECONDS
 ) -> None:
     path = get_mcp_server_statuses_cache_path()
     statuses = McpServerStatuses(servers=servers, fetched_at=time.time(), tenant_id=tenant_id, ttl_seconds=ttl_seconds)
@@ -89,7 +89,7 @@ def save_mcp_server_statuses(
         logger.debug('Failed to save MCP server statuses cache', exc_info=e)
 
 
-def load_mcp_server_statuses() -> Optional[McpServerStatuses]:
+def load_mcp_server_statuses() -> McpServerStatuses | None:
     path = get_mcp_server_statuses_cache_path()
     if not path.exists():
         return None

cycode/cli/apps/ai_guardrails/scan/payload.py

@@ -7,7 +7,6 @@ respective IDE class.
 
 import uuid
 from dataclasses import dataclass, field
-from typing import Optional
 
 
 @dataclass
@@ -15,9 +14,9 @@ class AIHookPayload:
     """Unified payload that normalizes field names across IDEs."""
 
     # Event identification
-    event_name: Optional[str] = None  # Canonical event type from AiHookEventType
-    conversation_id: Optional[str] = None
-    generation_id: Optional[str] = None
+    event_name: str | None = None  # Canonical event type from AiHookEventType
+    conversation_id: str | None = None
+    generation_id: str | None = None
 
     # Minted here rather than by the server: the guardrail scan and the hook event are reported in two
     # separate requests, and both have to name the same event. A generation id can't stand in for it - the
@@ -25,16 +24,16 @@ class AIHookPayload:
     hook_event_id: str = field(default_factory=lambda: str(uuid.uuid4()))
 
     # User and IDE information
-    ide_user_email: Optional[str] = None
-    model: Optional[str] = None
-    ide_provider: Optional[str] = None  # Matches IDE.name (e.g. 'cursor', 'claude-code')
-    ide_version: Optional[str] = None
+    ide_user_email: str | None = None
+    model: str | None = None
+    ide_provider: str | None = None  # Matches IDE.name (e.g. 'cursor', 'claude-code')
+    ide_version: str | None = None
 
-    source: Optional[str] = None
+    source: str | None = None
 
     # Event-specific data
-    prompt: Optional[str] = None  # PROMPT events
-    file_path: Optional[str] = None  # FILE_READ events
-    mcp_server_name: Optional[str] = None  # MCP_EXECUTION events
-    mcp_tool_name: Optional[str] = None
-    mcp_arguments: Optional[dict] = None
+    prompt: str | None = None  # PROMPT events
+    file_path: str | None = None  # FILE_READ events
+    mcp_server_name: str | None = None  # MCP_EXECUTION events
+    mcp_tool_name: str | None = None
+    mcp_arguments: dict | None = None

cycode/cli/apps/ai_guardrails/scan/policy.py

@@ -15,7 +15,7 @@ import json
 import os
 import sys
 from pathlib import Path
-from typing import Any, Optional
+from typing import Any
 
 import yaml
 
@@ -71,7 +71,7 @@ def deep_merge(base: dict, override: dict) -> dict:
     return result
 
 
-def load_yaml_file(path: Path) -> Optional[dict]:
+def load_yaml_file(path: Path) -> dict | None:
     """Load a YAML or JSON config file."""
     if not path.exists():
         return None
@@ -101,7 +101,7 @@ def get_policy_value(policy: dict, *keys: str, default: Any = None) -> Any:
     return current
 
 
-def load_policy(workspace_root: Optional[str] = None) -> dict:
+def load_policy(workspace_root: str | None = None) -> dict:
     """
     Load policy by merging configs in order of precedence.
 

cycode/cli/apps/ai_guardrails/scan/scan_command.py

@@ -7,7 +7,7 @@ The handlers in ``handlers.py`` are agent-agnostic (they return
 ``HookDecision``); ``IDE.build_hook_response`` is the per-IDE translation step.
 """
 
-from typing import Annotated, Optional, Union
+from typing import Annotated
 from uuid import uuid4
 
 import click
@@ -46,9 +46,9 @@ def _get_auth_error_message(error: Exception) -> str:
 
 
 def _deny_for_event(
-    event_name: Optional[Union[str, AiHookEventType]],
+    event_name: str | AiHookEventType | None,
     user_message: str,
-    agent_message: Optional[str] = None,
+    agent_message: str | None = None,
 ) -> HookDecision:
     """Build a deny decision matched to ``event_name``'s response shape.
 
@@ -62,7 +62,7 @@ def _deny_for_event(
     return HookDecision.deny(target, user_message, agent_message)
 
 
-def _should_skip_payload(ide_integration: IDE, payload: Optional[dict]) -> bool:
+def _should_skip_payload(ide_integration: IDE, payload: dict | None) -> bool:
     """Fast exits that never scan: empty/foreign/synthetic payloads all answer a plain allow."""
     if not payload:
         logger.debug('Empty or invalid JSON payload received')

cycode/cli/apps/ai_guardrails/session_start_command.py

@@ -5,7 +5,7 @@ import json
 import sys
 import time
 from pathlib import Path
-from typing import TYPE_CHECKING, Annotated, Optional
+from typing import TYPE_CHECKING, Annotated
 
 import typer
 
@@ -56,14 +56,14 @@ def _session_context_digest(report: dict) -> str:
     return hashlib.sha256(canonical.encode('utf-8')).hexdigest()
 
 
-def _report_ttl_seconds(config: Optional[GuardrailConfig]) -> float:
+def _report_ttl_seconds(config: GuardrailConfig | None) -> float:
     """The response carries the MCP server statuses, so the guardrail's TTL applies while it is enabled."""
     if config is None or config.is_off_for_every_agent(BlockReason.UNAUTHORIZED_MCP_SERVER):
         return _SESSION_CONTEXT_TTL_SECONDS
     return config.ttl_seconds
 
 
-def _should_skip_report(digest: str, tenant_id: Optional[str], ttl_seconds: float) -> bool:
+def _should_skip_report(digest: str, tenant_id: str | None, ttl_seconds: float) -> bool:
     """Skip when the same payload was already sent for this tenant and the TTL hasn't expired."""
     try:
         cache = json.loads(_session_context_cache_path().read_text(encoding='utf-8'))
@@ -77,7 +77,7 @@ def _should_skip_report(digest: str, tenant_id: Optional[str], ttl_seconds: floa
         return False
 
 
-def _save_report_cache(digest: str, tenant_id: Optional[str]) -> None:
+def _save_report_cache(digest: str, tenant_id: str | None) -> None:
     try:
         cache_path = _session_context_cache_path()
         cache_path.parent.mkdir(parents=True, exist_ok=True)
@@ -90,9 +90,9 @@ def _save_report_cache(digest: str, tenant_id: Optional[str]) -> None:
 
 def _report_session_context(
     ai_client: 'AISecurityManagerClient',
-    user_email: Optional[str],
-    tenant_id: Optional[str],
-    config: Optional[GuardrailConfig],
+    user_email: str | None,
+    tenant_id: str | None,
+    config: GuardrailConfig | None,
 ) -> None:
     """Report the device + cross-IDE session context to the AI security manager. Never raises.
 
@@ -195,7 +195,7 @@ def session_start_command(
     _report_session_context(ai_client, session_payload.ide_user_email, auth_info.tenant_id, config)
 
 
-def _sync_guardrail_config(ai_client: 'AISecurityManagerClient', tenant_id: Optional[str]) -> Optional[GuardrailConfig]:
+def _sync_guardrail_config(ai_client: 'AISecurityManagerClient', tenant_id: str | None) -> GuardrailConfig | None:
     """Refresh the guardrail config cache when it is expired or belongs to another tenant.
 
     Every step here swallows its own failures - a broken cache or an unreachable platform

cycode/cli/apps/ai_guardrails/status_command.py

@@ -2,7 +2,7 @@
 
 import os
 from pathlib import Path
-from typing import Annotated, Optional
+from typing import Annotated
 
 import typer
 from rich.table import Table
@@ -30,7 +30,7 @@ def status_command(
         ),
     ] = DEFAULT_IDE_NAME,
     repo_path: Annotated[
-        Optional[Path],
+        Path | None,
         typer.Option(
             '--repo-path',
             help='Repository path for repo-scoped status (defaults to current directory).',

cycode/cli/apps/ai_guardrails/uninstall_command.py

@@ -1,7 +1,7 @@
 """Uninstall command for AI guardrails hooks."""
 
 from pathlib import Path
-from typing import Annotated, Optional
+from typing import Annotated
 
 import typer
 
@@ -28,7 +28,7 @@ def uninstall_command(
         ),
     ] = DEFAULT_IDE_NAME,
     repo_path: Annotated[
-        Optional[Path],
+        Path | None,
         typer.Option(
             '--repo-path',
             help='Repository path for repo-scoped uninstallation (defaults to current directory).',

cycode/cli/apps/api/__init__.py

@@ -5,7 +5,7 @@ The spec is fetched lazily — only when the user invokes `cycode platform ...`
 and cached locally for 24 hours.
 """
 
-from typing import Any, Optional
+from typing import Any
 
 import click
 
@@ -32,7 +32,7 @@ class PlatformGroup(click.Group):
         super().__init__(*args, **kwargs)
         self._loaded: bool = False
 
-    def _ensure_loaded(self, ctx: Optional[click.Context]) -> None:
+    def _ensure_loaded(self, ctx: click.Context | None) -> None:
         if self._loaded:
             return
         self._loaded = True  # set first to avoid re-entrancy on errors
@@ -59,7 +59,7 @@ class PlatformGroup(click.Group):
         self._ensure_loaded(ctx)
         return super().list_commands(ctx)
 
-    def get_command(self, ctx: click.Context, cmd_name: str) -> Optional[click.Command]:
+    def get_command(self, ctx: click.Context, cmd_name: str) -> click.Command | None:
         self._ensure_loaded(ctx)
         return super().get_command(ctx, cmd_name)
 

cycode/cli/apps/api/api_command.py

@@ -2,7 +2,7 @@
 
 import json
 import re
-from typing import Any, Optional
+from typing import Any
 
 import click
 
@@ -60,7 +60,7 @@ def _path_to_command_name(path: str, common_prefix: str, has_path_params: bool)
         /v4/violations/count  (prefix=/v4/violations) -> count
     """
     # Strip common prefix
-    relative = path[len(common_prefix) :] if path.startswith(common_prefix) else path
+    relative = path.removeprefix(common_prefix)
     relative = relative.strip('/')
 
     # Remove path parameter segments and empty parts
@@ -91,8 +91,8 @@ def _make_api_request(
     method: str,
     path_params: dict[str, str],
     query_params: dict[str, Any],
-    client_id: Optional[str] = None,
-    client_secret: Optional[str] = None,
+    client_id: str | None = None,
+    client_secret: str | None = None,
 ) -> dict:
     """Execute an API request using the CLI's standard auth client."""
     from urllib.parse import quote
@@ -115,8 +115,8 @@ def _make_api_request(
 
 
 def build_api_command_groups(
-    client_id: Optional[str] = None,
-    client_secret: Optional[str] = None,
+    client_id: str | None = None,
+    client_secret: str | None = None,
 ) -> list[tuple[click.Group, str]]:
     """Build Click command groups from the OpenAPI spec.
 

cycode/cli/apps/api/openapi_spec.py

@@ -4,7 +4,6 @@ import json
 import os
 import time
 from pathlib import Path
-from typing import Optional
 
 from cycode.cli.consts import CYCODE_CONFIGURATION_DIRECTORY
 from cycode.cli.user_settings.credentials_manager import CredentialsManager
@@ -20,7 +19,7 @@ _CACHE_TTL_SECONDS = int(os.getenv('CYCODE_SPEC_CACHE_TTL', str(24 * 60 * 60)))
 _OPENAPI_SPEC_PATH = '/v4/api-docs/cycode-api-swagger.json'
 
 
-def get_openapi_spec(client_id: Optional[str] = None, client_secret: Optional[str] = None) -> dict:
+def get_openapi_spec(client_id: str | None = None, client_secret: str | None = None) -> dict:
     """Get the OpenAPI spec, using cache if fresh, otherwise fetching from API.
 
     The spec is only fetched when the user actually invokes `cycode platform ...`.
@@ -45,7 +44,7 @@ def get_openapi_spec(client_id: Optional[str] = None, client_secret: Optional[st
     return _fetch_and_cache_spec(client_id, client_secret)
 
 
-def _load_cached_spec() -> Optional[dict]:
+def _load_cached_spec() -> dict | None:
     """Load spec from local cache if it exists and is fresh."""
     if not _CACHE_FILE.exists():
         return None
@@ -64,7 +63,7 @@ def _load_cached_spec() -> Optional[dict]:
         return None
 
 
-def resolve_credentials(client_id: Optional[str] = None, client_secret: Optional[str] = None) -> tuple[str, str]:
+def resolve_credentials(client_id: str | None = None, client_secret: str | None = None) -> tuple[str, str]:
     """Resolve credentials from args or the CLI's standard credential chain."""
     if not client_id or not client_secret:
         credentials_manager = CredentialsManager()
@@ -81,7 +80,7 @@ def resolve_credentials(client_id: Optional[str] = None, client_secret: Optional
     return client_id, client_secret
 
 
-def _fetch_and_cache_spec(client_id: Optional[str] = None, client_secret: Optional[str] = None) -> dict:
+def _fetch_and_cache_spec(client_id: str | None = None, client_secret: str | None = None) -> dict:
     """Fetch OpenAPI spec from API and cache to disk.
 
     Uses CycodeTokenBasedClient for auth and retries. The spec is served from the app URL,

cycode/cli/apps/auth/auth_common.py

@@ -1,4 +1,4 @@
-from typing import TYPE_CHECKING, Optional
+from typing import TYPE_CHECKING
 
 from cycode.cli.apps.auth.models import AuthInfo
 from cycode.cli.exceptions.custom_exceptions import HttpUnauthorizedError, RequestHttpError
@@ -11,7 +11,7 @@ if TYPE_CHECKING:
     from typer import Context
 
 
-def get_authorization_info(ctx: 'Context') -> Optional[AuthInfo]:
+def get_authorization_info(ctx: 'Context') -> AuthInfo | None:
     printer = ctx.obj.get('console_printer')
 
     client_id = ctx.obj.get('client_id')
@@ -50,8 +50,8 @@ def get_authorization_info(ctx: 'Context') -> Optional[AuthInfo]:
 
 
 def _try_oidc_authorization(
-    ctx: 'Context', printer: any, client_id: Optional[str], id_token: Optional[str]
-) -> Optional[AuthInfo]:
+    ctx: 'Context', printer: any, client_id: str | None, id_token: str | None
+) -> AuthInfo | None:
     if not client_id or not id_token:
         return None
 

cycode/cli/apps/configure/configure_command.py

@@ -1,5 +1,3 @@
-from typing import Optional
-
 from cycode.cli.apps.configure.consts import CONFIGURATION_MANAGER, CREDENTIALS_MANAGER
 from cycode.cli.apps.configure.messages import (
     get_credentials_environment_variables_override_warning,
@@ -18,8 +16,8 @@ from cycode.cli.console import console
 
 
 def _should_update_value(
-    old_value: Optional[str],
-    new_value: Optional[str],
+    old_value: str | None,
+    new_value: str | None,
 ) -> bool:
     if not new_value:
         return False

cycode/cli/apps/configure/messages.py

@@ -1,5 +1,3 @@
-from typing import Optional
-
 from cycode.cli.apps.configure.consts import (
     CONFIGURATION_MANAGER,
     CREDENTIALS_ARE_SET_IN_ENVIRONMENT_VARIABLES_MESSAGE,
@@ -19,7 +17,7 @@ def get_credentials_update_result_message() -> str:
     return CREDENTIALS_UPDATED_SUCCESSFULLY_MESSAGE.format(filename=CREDENTIALS_MANAGER.get_filename())
 
 
-def get_credentials_environment_variables_override_warning() -> Optional[str]:
+def get_credentials_environment_variables_override_warning() -> str | None:
     if _are_credentials_exist_in_environment_variables():
         return CREDENTIALS_ARE_SET_IN_ENVIRONMENT_VARIABLES_MESSAGE
 
@@ -38,7 +36,7 @@ def get_urls_update_result_message() -> str:
     )
 
 
-def get_urls_environment_variables_override_warning() -> Optional[str]:
+def get_urls_environment_variables_override_warning() -> str | None:
     if _are_urls_exist_in_environment_variables():
         return URLS_ARE_SET_IN_ENVIRONMENT_VARIABLES_MESSAGE