dayhoff-tools 1.0.5__py3-none-any.whl → 1.0.7__py3-none-any.whl

dayhoff_tools/cli/cloud_commands.py

@@ -129,19 +129,25 @@ def _get_env_var(variable: str) -> Optional[str]:
 
 # --- GCP Functions ---
 def _is_gcp_user_authenticated() -> bool:
-    """Check if a user is authenticated with GCP (not a compute service account)."""
-    gcloud_path = _find_executable("gcloud")
-    cmd = [
-        gcloud_path,
-        "auth",
-        "list",
-        "--filter=status:ACTIVE",
-        "--format=value(account)",
-    ]
-    _, stdout, _ = _run_command(cmd, capture=True, check=False)
+    """Check if the current gcloud user authentication is valid and non-interactive.
 
-    account = stdout.strip()
-    return bool(account) and "compute@developer.gserviceaccount.com" not in account
+    Returns:
+        True if `gcloud auth print-access-token --quiet` succeeds (exit code 0),
+        False otherwise (indicating potential need for interactive login).
+    """
+    try:
+        gcloud_path = _find_executable("gcloud")
+        # Attempt to get a token silently. If this fails, login is likely expired or needs interaction.
+        returncode, _, _ = _run_command(
+            [gcloud_path, "auth", "print-access-token", "--quiet"],
+            capture=True,  # We don't need the token, just the exit code
+            check=False,  # Don't raise on failure
+            suppress_output=True,  # Hide any potential output/errors from this check
+        )
+        return returncode == 0
+    except FileNotFoundError:
+        # If gcloud isn't found, they are definitely not authenticated.
+        return False
 
 
 def _get_current_gcp_user() -> str:
@@ -350,49 +356,62 @@ def gcp_use_devcon(
     export: bool = typer.Option(
         False, "--export", "-x", help="Print export commands for the current shell."
     ),
-    auth_first: bool = typer.Option(
-        False, "--auth", "-a", help="Authenticate user first if needed."
-    ),
 ):
-    """Switch to devcon service account impersonation mode."""
+    """Configure gcloud CLI to impersonate the devcon SA by setting RC file variables.
+
+    NOTE: This command DOES NOT automatically update Application Default Credentials (ADC).
+    After running this, or after sourcing the export commands, you may need to run:
+    'gcloud auth application-default login --impersonate-service-account=...' manually
+    if you need libraries (like DVC) to use these credentials.
+
+    Ensures the primary user login is valid first to allow potential impersonation.
+    """
     if not _is_gcp_user_authenticated():
-        if auth_first:
-            print(
-                f"{YELLOW}You need to authenticate first. Running authentication...{NC}",
-                file=sys.stderr,
-            )
-            _run_gcloud_login()
-        else:
-            print(
-                f"{RED}Error: Not authenticated with GCP. Run 'dh gcp login' first or use --auth flag.{NC}",
-                file=sys.stderr,
-            )
-            sys.exit(1)
+        print(
+            f"{RED}Error: GCP user authentication is invalid or requires interactive login.{NC}",
+            file=sys.stderr,
+        )
+        print(
+            f"{YELLOW}Please run 'gcloud auth login' interactively first, then try this command again.{NC}",
+            file=sys.stderr,
+        )
+        sys.exit(1)
 
-    # Modify RC files to persist across sessions
+    # Set gcloud CLI impersonation (persisted to RC files)
     _modify_rc_files("CLOUDSDK_AUTH_IMPERSONATE_SERVICE_ACCOUNT", f"'{GCP_DEVCON_SA}'")
     _modify_rc_files("GOOGLE_CLOUD_PROJECT", f"'{GCP_PROJECT_ID}'")
 
     if export:
-        # Print export commands for the current shell to stdout
+        # Print export commands for the current shell (for gcloud CLI)
         print(f"export CLOUDSDK_AUTH_IMPERSONATE_SERVICE_ACCOUNT='{GCP_DEVCON_SA}'")
         print(f"export GOOGLE_CLOUD_PROJECT='{GCP_PROJECT_ID}'")
 
-        # Print confirmation to stderr so it doesn't affect eval
+        # Print confirmation and instructions for ADC to stderr
         print(
-            f"{GREEN}GCP service account impersonation for '{GCP_DEVCON_SA}' set up successfully.{NC}",
+            f"{GREEN}GCP gcloud CLI impersonation for '{GCP_DEVCON_SA}' exported.{NC}",
             file=sys.stderr,
         )
-        print(f"{GREEN}You now have standard devcon permissions.{NC}", file=sys.stderr)
-    else:
-        # Just print confirmation
         print(
-            f"{GREEN}Switched to devcon service account impersonation. You now have standard devcon permissions.{NC}"
+            f"{YELLOW}NOTE: ADC file not updated by export. To update ADC for libraries, run:{NC}",
+            file=sys.stderr,
         )
         print(
-            f"Changes will take effect in new shell sessions. To apply in current shell, run:"
+            f"{YELLOW}  gcloud auth application-default login --impersonate-service-account={GCP_DEVCON_SA}{NC}",
+            file=sys.stderr,
         )
+    else:
+        # Print confirmation
+        print(
+            f"{GREEN}RC files updated to use devcon SA for future gcloud CLI sessions.{NC}"
+        )
+        print(f"To apply gcloud CLI settings in current shell, run:")
         print(f'  {YELLOW}eval "$(dh gcp use-devcon --export)"{NC}')
+        print(
+            f"{YELLOW}NOTE: ADC file not updated. To update ADC for libraries, run:{NC}"
+        )
+        print(
+            f"{YELLOW}  gcloud auth application-default login --impersonate-service-account={GCP_DEVCON_SA}{NC}"
+        )
 
 
 @gcp_app.command("use-user")
@@ -400,48 +419,60 @@ def gcp_use_user(
     export: bool = typer.Option(
         False, "--export", "-x", help="Print export commands for the current shell."
     ),
-    auth_first: bool = typer.Option(
-        False, "--auth", "-a", help="Authenticate user first if needed."
-    ),
 ):
-    """Switch to personal account mode (no impersonation)."""
+    """Configure gcloud CLI to use the personal user account by setting RC file variables.
+
+    NOTE: This command DOES NOT automatically update Application Default Credentials (ADC).
+    After running this, or after sourcing the export commands, you may need to run:
+    'gcloud auth application-default login' manually
+    if you need libraries (like DVC) to use your personal credentials.
+
+    Ensures the primary user login is valid first.
+    """
     if not _is_gcp_user_authenticated():
-        if auth_first:
-            print(
-                f"{YELLOW}You need to authenticate first. Running authentication...{NC}",
-                file=sys.stderr,
-            )
-            _run_gcloud_login()
-        else:
-            print(
-                f"{RED}Error: Not authenticated with GCP. Run 'dh gcp login' first or use --auth flag.{NC}",
-                file=sys.stderr,
-            )
-            sys.exit(1)
+        print(
+            f"{RED}Error: GCP user authentication is invalid or requires interactive login.{NC}",
+            file=sys.stderr,
+        )
+        print(
+            f"{YELLOW}Please run 'gcloud auth login' interactively first, then try this command again.{NC}",
+            file=sys.stderr,
+        )
+        sys.exit(1)
 
-    # Modify RC files to persist across sessions
+    # Unset gcloud CLI impersonation (persisted to RC files)
     _modify_rc_files("CLOUDSDK_AUTH_IMPERSONATE_SERVICE_ACCOUNT", None)
     _modify_rc_files("GOOGLE_CLOUD_PROJECT", f"'{GCP_PROJECT_ID}'")
 
     if export:
-        # Print export commands for the current shell to stdout
+        # Print export commands for the current shell (for gcloud CLI)
         print(f"unset CLOUDSDK_AUTH_IMPERSONATE_SERVICE_ACCOUNT")
         print(f"export GOOGLE_CLOUD_PROJECT='{GCP_PROJECT_ID}'")
 
-        # Print confirmation to stderr so it doesn't affect eval
+        # Print confirmation and instructions for ADC to stderr
         print(
-            f"{GREEN}Switched to personal account mode. You are now using your own permissions.{NC}",
+            f"{GREEN}GCP gcloud CLI impersonation unset and exported.{NC}",
             file=sys.stderr,
         )
-    else:
-        # Just print confirmation
         print(
-            f"{GREEN}Switched to personal account mode. You are now using your own permissions.{NC}"
+            f"{YELLOW}NOTE: ADC file not updated by export. To update ADC for libraries, run:{NC}",
+            file=sys.stderr,
         )
         print(
-            f"Changes will take effect in new shell sessions. To apply in current shell, run:"
+            f"{YELLOW}  gcloud auth application-default login{NC}",
+            file=sys.stderr,
         )
+    else:
+        # Print confirmation
+        print(
+            f"{GREEN}RC files updated to use personal account for future gcloud CLI sessions.{NC}"
+        )
+        print(f"To apply gcloud CLI settings in current shell, run:")
         print(f'  {YELLOW}eval "$(dh gcp use-user --export)"{NC}')
+        print(
+            f"{YELLOW}NOTE: ADC file not updated. To update ADC for libraries, run:{NC}"
+        )
+        print(f"{YELLOW}  gcloud auth application-default login{NC}")
 
 
 # --- AWS Commands ---

{dayhoff_tools-1.0.5.dist-info → dayhoff_tools-1.0.7.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: dayhoff-tools
-Version: 1.0.5
+Version: 1.0.7
 Summary: Common tools for all the repos at Dayhoff Labs
 Author: Daniel Martin-Alarcon
 Author-email: dma@dayhofflabs.com

{dayhoff_tools-1.0.5.dist-info → dayhoff_tools-1.0.7.dist-info}/RECORD

@@ -2,7 +2,7 @@ dayhoff_tools/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dayhoff_tools/chemistry/standardizer.py,sha256=uMn7VwHnx02nc404eO6fRuS4rsl4dvSPf2ElfZDXEpY,11188
 dayhoff_tools/chemistry/utils.py,sha256=jt-7JgF-GeeVC421acX-bobKbLU_X94KNOW24p_P-_M,2257
 dayhoff_tools/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-dayhoff_tools/cli/cloud_commands.py,sha256=rt8bcNo73zhCwNwcb8zTGmx2xxcGejhKEEl-d9HH2yM,20889
+dayhoff_tools/cli/cloud_commands.py,sha256=Z_zCtZYH0thljiOSkr1fjFZal7a8DZtY-dH7uZEa4YI,22571
 dayhoff_tools/cli/main.py,sha256=E1-3rZ26LMgJVKBz6CdJwsHs9fJsSGa2_9tot3hNgz4,3604
 dayhoff_tools/cli/swarm_commands.py,sha256=5EyKj8yietvT5lfoz8Zx0iQvVaNgc3SJX1z2zQR6o6M,5614
 dayhoff_tools/cli/utility_commands.py,sha256=AsZMpvUNP2xjn5cZ9_BrBNHggfuy6PLwlHw1WP0d7o0,9602
@@ -25,7 +25,7 @@ dayhoff_tools/sqlite.py,sha256=jV55ikF8VpTfeQqqlHSbY8OgfyfHj8zgHNpZjBLos_E,18672
 dayhoff_tools/structure.py,sha256=ufN3gAodQxhnt7psK1VTQeu9rKERmo_PhoxIbB4QKMw,27660
 dayhoff_tools/uniprot.py,sha256=BZYJQF63OtPcBBnQ7_P9gulxzJtqyorgyuDiPeOJqE4,16456
 dayhoff_tools/warehouse.py,sha256=TqV8nex1AluNaL4JuXH5zuu9P7qmE89lSo6f_oViy6U,14965
-dayhoff_tools-1.0.5.dist-info/METADATA,sha256=LE_AxsDAgFzG6oW_i2YL3sZOfbC0V1JDpAidC40Yfek,1930
-dayhoff_tools-1.0.5.dist-info/WHEEL,sha256=fGIA9gx4Qxk2KDKeNJCbOEwSrmLtjWCwzBz351GyrPQ,88
-dayhoff_tools-1.0.5.dist-info/entry_points.txt,sha256=iAf4jteNqW3cJm6CO6czLxjW3vxYKsyGLZ8WGmxamSc,49
-dayhoff_tools-1.0.5.dist-info/RECORD,,
+dayhoff_tools-1.0.7.dist-info/METADATA,sha256=bR_2zwNuqx_7L8WMJJUGgc-dvXrn69PAM8ppjBMh6-8,1930
+dayhoff_tools-1.0.7.dist-info/WHEEL,sha256=fGIA9gx4Qxk2KDKeNJCbOEwSrmLtjWCwzBz351GyrPQ,88
+dayhoff_tools-1.0.7.dist-info/entry_points.txt,sha256=iAf4jteNqW3cJm6CO6czLxjW3vxYKsyGLZ8WGmxamSc,49
+dayhoff_tools-1.0.7.dist-info/RECORD,,