datalegion-cli 1.2.1__tar.gz → 1.2.2__tar.gz

{datalegion_cli-1.2.1 → datalegion_cli-1.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: datalegion-cli
-Version: 1.2.1
+Version: 1.2.2
 Summary: CLI for the Data Legion API — agent-friendly, fully async
 Project-URL: Homepage, https://www.datalegion.ai
 Project-URL: Documentation, https://www.datalegion.ai/docs

{datalegion_cli-1.2.1 → datalegion_cli-1.2.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "datalegion-cli"
-version = "1.2.1"
+version = "1.2.2"
 description = "CLI for the Data Legion API — agent-friendly, fully async"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -57,6 +57,10 @@ build-backend = "hatchling.build"
 [tool.hatch.build.targets.wheel]
 packages = ["src/datalegion_cli"]
 
+# The sdist carries the source and tests, never repo tooling (.github/, .claude/, lefthook.yml).
+[tool.hatch.build.targets.sdist]
+only-include = ["src/datalegion_cli", "tests"]
+
 [dependency-groups]
 dev = [
     "pytest>=8.3.0",

{datalegion_cli-1.2.1 → datalegion_cli-1.2.2}/src/datalegion_cli/client.py

@@ -43,7 +43,7 @@ class LegionClient:
         timeout: float = 60.0,
     ):
         self._base_url = base_url or get_base_url()
-        self._api_key = api_key or get_api_key()
+        self._api_key = (api_key or "").strip() or get_api_key()
         self._timeout = timeout
         self._client: httpx.AsyncClient | None = None
         self.last_credits_used: str | None = None

{datalegion_cli-1.2.1 → datalegion_cli-1.2.2}/src/datalegion_cli/config.py

@@ -114,7 +114,8 @@ def save_config(cfg: dict[str, object]) -> None:
 
 def get_api_key() -> str:
     """Return the configured API key or raise."""
-    key = str(load_config().get("api_key", ""))
+    # Trimmed: a key from a file or a paste with a trailing newline is otherwise refused by httpx.
+    key = str(load_config().get("api_key", "")).strip()
     if not key:
         raise SystemExit(
             "No API key configured. Run `datalegion-cli config set api_key <your-key>` "

{datalegion_cli-1.2.1 → datalegion_cli-1.2.2}/tests/test_config.py

@@ -49,6 +49,22 @@ class TestSaveAndLoad:
         cfg = load_config()
         assert cfg["api_key"] == "legion_roundtrip"
 
+    def test_api_key_is_trimmed(self, tmp_config_dir, monkeypatch):
+        from datalegion_cli.config import get_api_key, save_config
+
+        monkeypatch.setenv("LEGION_API_KEY", "legion_fromenv\n")
+        assert get_api_key() == "legion_fromenv"
+        monkeypatch.delenv("LEGION_API_KEY")
+        save_config({"api_key": "  legion_fromfile  "})
+        assert get_api_key() == "legion_fromfile"
+
+    def test_whitespace_only_api_key_is_missing(self, tmp_config_dir, monkeypatch):
+        from datalegion_cli.config import get_api_key
+
+        monkeypatch.setenv("LEGION_API_KEY", " \n")
+        with pytest.raises(SystemExit):
+            get_api_key()
+
     def test_save_sets_file_permissions_600(self, tmp_config_dir):
         from datalegion_cli.config import CONFIG_FILE, save_config
 

datalegion_cli-1.2.2/tests/test_package_contents.py

@@ -0,0 +1,56 @@
+"""What the published wheel and sdist contain.
+
+Customers install the wheel: it must hold only the ``datalegion_cli`` package, and its only
+command is ``datalegion-cli``. The sdist carries the source and tests, never repo tooling.
+"""
+
+import subprocess
+import tarfile
+import zipfile
+from pathlib import Path
+
+import pytest
+
+ROOT = Path(__file__).resolve().parents[1]
+
+
+@pytest.fixture(scope="module")
+def dist(tmp_path_factory: pytest.TempPathFactory) -> Path:
+    out = tmp_path_factory.mktemp("dist")
+    # Each straight from the source tree: a default build makes the wheel from the sdist, which
+    # would hide a wheel misconfiguration behind the sdist's own include list.
+    for target in ("--sdist", "--wheel"):
+        subprocess.run(
+            ["uv", "build", target, "--quiet", "--out-dir", str(out)], cwd=ROOT, check=True
+        )
+    return out
+
+
+def test_wheel_ships_only_the_cli(dist: Path) -> None:
+    (wheel,) = dist.glob("*.whl")
+    with zipfile.ZipFile(wheel) as archive:
+        names = archive.namelist()
+        commands = next(
+            (archive.read(n).decode() for n in names if n.endswith("entry_points.txt")), ""
+        )
+    top_level = {n.split("/")[0] for n in names if not n.split("/")[0].endswith(".dist-info")}
+    assert top_level == {"datalegion_cli"}
+    assert commands.split() == [
+        "[console_scripts]",
+        "datalegion-cli",
+        "=",
+        "datalegion_cli.main:run",
+    ]
+
+
+def test_sdist_carries_no_repo_tooling(dist: Path) -> None:
+    (sdist,) = dist.glob("*.tar.gz")
+    with tarfile.open(sdist) as archive:
+        names = archive.getnames()
+    leaked = [
+        n
+        for n in names
+        if any(part in n.split("/") for part in (".claude", ".github", "scripts", "lefthook.yml"))
+    ]
+    assert leaked == []
+    assert any(n.endswith("src/datalegion_cli/main.py") for n in names)

datalegion_cli-1.2.1/.github/actionlint.yaml

@@ -1,5 +0,0 @@
-# actionlint (the `actionlint` job in .github/workflows/ci.yml) knows only GitHub-hosted
-# runner labels; Blacksmith's are custom.
-self-hosted-runner:
-  labels:
-    - blacksmith-*

datalegion_cli-1.2.1/.github/dependabot.yml

@@ -1,42 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: "uv"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-      day: "sunday"
-      time: "09:00"
-      timezone: "America/Los_Angeles"
-    cooldown:
-      default-days: 1
-    labels:
-      - "dependencies"
-      - "python"
-    commit-message:
-      prefix: "chore(deps)"
-    groups:
-      minor-patch:
-        patterns:
-          - "*"
-        update-types:
-          - "minor"
-          - "patch"
-
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-      day: "sunday"
-      time: "09:00"
-      timezone: "America/Los_Angeles"
-    cooldown:
-      default-days: 1
-    labels:
-      - "dependencies"
-      - "github-actions"
-    commit-message:
-      prefix: "chore(deps)"
-    groups:
-      actions:
-        patterns:
-          - "*"

datalegion_cli-1.2.1/.github/workflows/ci.yml

@@ -1,77 +0,0 @@
-name: CI
-
-on:
-  pull_request:
-    branches: [main]
-
-jobs:
-  lint:
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    steps:
-      - uses: actions/checkout@v7
-      - uses: astral-sh/setup-uv@v10.2.0
-        with:
-          enable-cache: true
-      # .python-version: the 3.11 floor
-      - run: uv sync --frozen --group dev
-      - run: uv run ruff check src/ tests/
-      - run: uv run ruff format --check src/ tests/
-
-  test-python:
-    name: test (Python ${{ matrix.python-version }})
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    strategy:
-      fail-fast: false
-      matrix:
-        # Every version pyproject.toml's classifiers claim.
-        python-version: ["3.11", "3.12", "3.13", "3.14"]
-    # Without this uv takes the interpreter from .python-version (the 3.11 floor)
-    # for every leg.
-    env:
-      UV_PYTHON: ${{ matrix.python-version }}
-    steps:
-      - uses: actions/checkout@v7
-      - uses: astral-sh/setup-uv@v10.2.0
-        with:
-          enable-cache: true
-      - run: uv python install ${{ matrix.python-version }}
-      - run: uv sync --frozen --group dev
-      - name: Check the interpreter is the matrix version
-        run: uv run python -c "import sys; v = '%d.%d' % sys.version_info[:2]; assert v == '${{ matrix.python-version }}', f'ran {sys.version}, matrix says ${{ matrix.python-version }}'; print(sys.version)"
-      - run: uv run pytest
-
-  # The main ruleset requires a check named `test`; it passes only when every
-  # Python leg did.
-  test:
-    needs: test-python
-    if: always()
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    steps:
-      - run: '[ "${{ needs.test-python.result }}" = "success" ]'
-
-  actionlint:
-    name: actionlint
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    timeout-minutes: 5
-    permissions:
-      contents: read
-    steps:
-      - uses: actions/checkout@v7
-      # Pinned and checksum-verified (the upgrade sweep moves the version and both digests).
-      # actionlint runs shellcheck on every `run:` script when shellcheck is on PATH, so
-      # install it rather than let those checks skip silently.
-      - name: Lint workflows (actionlint + shellcheck)
-        env:
-          ACTIONLINT_VERSION: 1.7.12
-        run: |
-          case "$(uname -m)" in
-            x86_64) arch=amd64; sha=8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8 ;;
-            aarch64) arch=arm64; sha=325e971b6ba9bfa504672e29be93c24981eeb1c07576d730e9f7c8805afff0c6 ;;
-            *) echo "unsupported arch $(uname -m)"; exit 1 ;;
-          esac
-          f="actionlint_${ACTIONLINT_VERSION}_linux_${arch}.tar.gz"
-          curl -fsSL -o "/tmp/$f" "https://github.com/rhysd/actionlint/releases/download/v${ACTIONLINT_VERSION}/$f"
-          echo "$sha  /tmp/$f" | sha256sum -c -
-          tar -xzf "/tmp/$f" -C /tmp actionlint
-          command -v shellcheck >/dev/null || { sudo apt-get update -qq && sudo apt-get install -y -qq shellcheck; }
-          /tmp/actionlint -color

datalegion_cli-1.2.1/.github/workflows/release.yml

@@ -1,236 +0,0 @@
-name: Release
-
-on:
-  push:
-    tags:
-      - "v*"
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-jobs:
-  lint:
-    name: Lint & Build
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    timeout-minutes: 5
-    permissions:
-      contents: read
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-
-      - name: Install uv
-        uses: astral-sh/setup-uv@v10.2.0
-        with:
-          enable-cache: true
-          cache-dependency-glob: "uv.lock"
-
-      - name: Set up Python
-        run: uv python install 3.11
-
-      - name: Install dependencies
-        run: uv sync --frozen --group dev
-
-      - name: Run lint
-        run: uv run ruff check src/ tests/
-
-      - name: Check formatting
-        run: uv run ruff format --check src/ tests/
-
-      - name: Build
-        run: uv build
-
-      - name: Prune uv cache
-        if: always()
-        run: uv cache prune --ci
-
-  test:
-    name: Test (Python ${{ matrix.python-version }})
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    timeout-minutes: 10
-    permissions:
-      contents: read
-    # Without this uv takes the interpreter from .python-version (the 3.11 floor)
-    # for every leg.
-    env:
-      UV_PYTHON: ${{ matrix.python-version }}
-    strategy:
-      fail-fast: false
-      matrix:
-        python-version: ["3.11", "3.12", "3.13", "3.14"]
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-
-      - name: Install uv
-        uses: astral-sh/setup-uv@v10.2.0
-        with:
-          enable-cache: true
-          cache-dependency-glob: "uv.lock"
-
-      - name: Set up Python ${{ matrix.python-version }}
-        run: uv python install ${{ matrix.python-version }}
-
-      - name: Install dependencies
-        run: uv sync --frozen --group dev
-
-      - name: Check the interpreter is the matrix version
-        run: uv run python -c "import sys; v = '%d.%d' % sys.version_info[:2]; assert v == '${{ matrix.python-version }}', f'ran {sys.version}, matrix says ${{ matrix.python-version }}'; print(sys.version)"
-
-      - name: Run tests
-        run: uv run pytest tests/ -v --tb=short
-
-      - name: Prune uv cache
-        if: always()
-        run: uv cache prune --ci
-
-  publish-pypi:
-    name: Publish to PyPI
-    needs: [lint, test]
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    timeout-minutes: 5
-    permissions:
-      contents: read
-      id-token: write
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-
-      - name: Install uv
-        uses: astral-sh/setup-uv@v10.2.0
-
-      - name: Set up Python
-        run: uv python install 3.11
-
-      - name: Set version from tag
-        run: |
-          VERSION="${GITHUB_REF_NAME#v}"
-          sed -i "s/^version = .*/version = \"${VERSION}\"/" pyproject.toml
-
-      - name: Build
-        run: uv build
-
-      - name: Check if version exists on PyPI
-        id: pypi-check
-        run: |
-          VERSION="${GITHUB_REF_NAME#v}"
-          if curl -sSf "https://pypi.org/pypi/datalegion-cli/${VERSION}/json" > /dev/null 2>&1; then
-            echo "Version ${VERSION} already exists on PyPI, skipping publish"
-            echo "exists=true" >> "$GITHUB_OUTPUT"
-          else
-            echo "exists=false" >> "$GITHUB_OUTPUT"
-          fi
-
-      - name: Publish to PyPI
-        if: steps.pypi-check.outputs.exists != 'true'
-        run: uv publish --trusted-publishing always
-
-  update-homebrew:
-    name: Update Homebrew Tap
-    needs: [publish-pypi]
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    timeout-minutes: 10
-    permissions:
-      contents: read
-    steps:
-      - name: Wait for PyPI availability
-        run: |
-          VERSION="${GITHUB_REF_NAME#v}"
-          for i in $(seq 1 30); do
-            if curl -sSf "https://pypi.org/pypi/datalegion-cli/${VERSION}/json" > /dev/null 2>&1; then
-              echo "Version ${VERSION} available on PyPI"
-              exit 0
-            fi
-            echo "Waiting for PyPI... (attempt $i/30)"
-            sleep 10
-          done
-          echo "::error::Timed out waiting for PyPI availability"
-          exit 1
-
-      - name: Generate Homebrew formula
-        run: |
-          VERSION="${GITHUB_REF_NAME#v}"
-
-          # Get the actual sdist URL and digest from PyPI JSON API
-          PYPI_JSON=$(curl -sSf "https://pypi.org/pypi/datalegion-cli/${VERSION}/json")
-          URL=$(echo "$PYPI_JSON" | python3 -c "import sys,json; urls=json.load(sys.stdin)['urls']; print(next(u['url'] for u in urls if u['packagetype']=='sdist'))")
-          SHA256=$(echo "$PYPI_JSON" | python3 -c "import sys,json; urls=json.load(sys.stdin)['urls']; print(next(u['digests']['sha256'] for u in urls if u['packagetype']=='sdist'))")
-
-          cat > datalegion-cli.rb <<FORMULA
-          class DatalegionCli < Formula
-            desc "CLI for the Data Legion API - agent-friendly, fully async"
-            homepage "https://www.datalegion.ai"
-            url "${URL}"
-            sha256 "${SHA256}"
-            license "MIT"
-
-            depends_on "python@3.13"
-
-            def install
-              venv = libexec/"venv"
-              system Formula["python@3.13"].opt_bin/"python3.13", "-m", "venv", venv
-              system venv/"bin/pip", "install", "datalegion-cli==#{version}"
-              bin.install_symlink Dir[venv/"bin/datalegion-cli"]
-            end
-
-            test do
-              assert_match version.to_s, shell_output("#{bin}/datalegion-cli version")
-            end
-          end
-          FORMULA
-
-          # Remove leading whitespace from heredoc indentation
-          sed -i 's/^          //' datalegion-cli.rb
-
-      - name: Push formula to tap
-        env:
-          GH_PAT: ${{ secrets.GH_PAT }}
-        run: |
-          VERSION="${GITHUB_REF_NAME#v}"
-          git clone "https://x-access-token:${GH_PAT}@github.com/datalegion-ai/homebrew-tap.git" tap
-          mkdir -p tap/Formula
-          cp datalegion-cli.rb tap/Formula/datalegion-cli.rb
-          cd tap
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add Formula/datalegion-cli.rb
-          git diff --staged --quiet || git commit -m "datalegion-cli ${VERSION}"
-          git push
-
-  github-release:
-    name: Create GitHub Release
-    needs: [publish-pypi]
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    timeout-minutes: 5
-    permissions:
-      contents: write
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          ref: main
-          token: ${{ secrets.GH_PAT }}
-
-      - name: Update version in pyproject.toml
-        run: |
-          VERSION="${GITHUB_REF_NAME#v}"
-          sed -i "s/^version = .*/version = \"${VERSION}\"/" pyproject.toml
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add pyproject.toml
-          git diff --staged --quiet || git commit -m "chore: bump version to ${VERSION} [skip ci]"
-          git push
-
-      - name: Create Release
-        uses: actions/github-script@v9
-        with:
-          script: |
-            const tag = context.ref.replace('refs/tags/', '');
-            await github.rest.repos.createRelease({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              tag_name: tag,
-              name: tag,
-              generate_release_notes: true,
-            });

datalegion_cli-1.2.1/.python-version

@@ -1 +0,0 @@
-3.11