dooers-cli 0.7.2__tar.gz → 0.7.3__tar.gz

{dooers_cli-0.7.2 → dooers_cli-0.7.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dooers-cli
-Version: 0.7.2
+Version: 0.7.3
 Summary: Dooers CLI — push agents to Dooers, manage agent records, authenticate from the terminal
 Project-URL: Repository, https://github.com/Dooers-ai/dooers-cli
 Author-email: Dooers <dev@dooers.ai>

{dooers_cli-0.7.2 → dooers_cli-0.7.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "dooers-cli"
-version = "0.7.2"
+version = "0.7.3"
 description = "Dooers CLI — push agents to Dooers, manage agent records, authenticate from the terminal"
 readme = "README.md"
 license = "MIT"

{dooers_cli-0.7.2 → dooers_cli-0.7.3}/src/dooers/cli/agent_store.py

@@ -54,6 +54,15 @@ class HTTPCoreAgentStore:
     def _h(self) -> dict[str, str]:
         return {"Authorization": f"Bearer {self.token}"}
 
+    def _post_json(self, url: str, body: dict | None = None) -> httpx.Response:
+        """POST with application/json — required to bypass core CSRF for Bearer-only clients."""
+        return httpx.post(
+            url,
+            headers={**self._h(), "Content-Type": "application/json"},
+            json=body if body is not None else {},
+            timeout=self._timeout,
+        )
+
     def create(self, req: CreateAgentRequest) -> AgentRecord:
         body = json.dumps({"organizationId": req.organization_id, "name": req.name})
         r = httpx.post(
@@ -82,9 +91,7 @@ class HTTPCoreAgentStore:
         return _record(_data(r))
 
     def archive(self, agent_id: str) -> None:
-        r = httpx.post(
-            f"{self.api}/agents/{agent_id}/archive", headers=self._h(), timeout=self._timeout
-        )
+        r = self._post_json(f"{self.api}/agents/{agent_id}/archive")
         _data(r)  # raises AgentStoreError on {success: false}; no record to parse
 
     def delete(self, agent_id: str) -> None:
@@ -94,9 +101,5 @@ class HTTPCoreAgentStore:
         _data(r)  # success body is {success, message} with no data key — do NOT call _record()
 
     def regenerate_runtime_api_key(self, agent_id: str) -> AgentRecord:
-        r = httpx.post(
-            f"{self.api}/agents/{agent_id}/runtime-api-key/regenerate",
-            headers=self._h(),
-            timeout=self._timeout,
-        )
+        r = self._post_json(f"{self.api}/agents/{agent_id}/runtime-api-key/regenerate")
         return _record(_data(r))

{dooers_cli-0.7.2 → dooers_cli-0.7.3}/src/dooers/cli/cli.py

@@ -1,5 +1,16 @@
 """Top-level Typer app — login/whoami/logout + agents group + push."""
 
+import warnings
+
+# Global `dooers-agents-server` installs `dooers.protocol.frames` with a legacy
+# `schema` field name that Pydantic warns on at import. The CLI does not use WS
+# frames; suppress so every command stays quiet when both packages share `dooers.*`.
+warnings.filterwarnings(
+    "ignore",
+    message=r'Field name "schema" in "SettingsPublicSchemaResultPayload" shadows an attribute in parent "BaseModel"',
+    category=UserWarning,
+)
+
 import typer
 
 from . import agents, auth, org, push, validate
@@ -28,7 +39,9 @@ app.command(name="login", help="Authenticate with Dooers (OTP via email).")(auth
 app.command(name="whoami", help="Show the currently authenticated user.")(auth.whoami)
 app.command(name="logout", help="Clear local credentials.")(auth.logout)
 app.add_typer(
-    agents.app, name="agents", help="Manage agents — subcommands: list | create | show | delete."
+    agents.app,
+    name="agents",
+    help="Manage agents — subcommands: list | create | rotate-key | show | delete.",
 )
 app.add_typer(org.app, name="org", help="Manage organization — subcommands: list | use.")
 app.command(

{dooers_cli-0.7.2 → dooers_cli-0.7.3}/src/dooers/cli/core_client.py

@@ -89,7 +89,10 @@ class CoreClient:
     def revoke(self) -> None:
         try:
             httpx.post(
-                f"{self.api}/identity/revoke", headers=self._headers(), timeout=self._timeout
+                f"{self.api}/identity/revoke",
+                headers={**self._headers(), "Content-Type": "application/json"},
+                json={},
+                timeout=self._timeout,
             )
         except httpx.HTTPError:
             pass  # best-effort

{dooers_cli-0.7.2 → dooers_cli-0.7.3}/tests/test_agent_store.py

@@ -75,6 +75,27 @@ def test_archive_posts_to_archive_route():
     )
     HTTPCoreAgentStore(BASE, "tok").archive(A)  # should not raise
     assert route.called
+    req = route.calls.last.request
+    assert req.headers["content-type"] == "application/json"
+    assert req.read() == b"{}"
+
+
+@respx.mock
+def test_regenerate_runtime_api_key_posts_json_body():
+    data = {
+        "agentId": A,
+        "name": "x",
+        "organizationId": "o1",
+        "runtimeApiKey": "new-secret-key",
+    }
+    route = respx.post(f"{BASE}/api/v2/agents/{A}/runtime-api-key/regenerate").mock(
+        return_value=httpx.Response(200, json={"success": True, "data": data})
+    )
+    rec = HTTPCoreAgentStore(BASE, "tok").regenerate_runtime_api_key(A)
+    assert rec.runtime_api_key == "new-secret-key"
+    req = route.calls.last.request
+    assert req.headers["content-type"] == "application/json"
+    assert req.read() == b"{}"
 
 
 @respx.mock

{dooers_cli-0.7.2 → dooers_cli-0.7.3}/uv.lock

@@ -232,7 +232,7 @@ toml = [
 
 [[package]]
 name = "dooers-cli"
-version = "0.7.2"
+version = "0.7.3"
 source = { editable = "." }
 dependencies = [
     { name = "dooers-protocol" },