flwr-nightly 1.26.0.dev20260120__tar.gz → 1.26.0.dev20260122__tar.gz

{flwr_nightly-1.26.0.dev20260120 → flwr_nightly-1.26.0.dev20260122}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: flwr-nightly
-Version: 1.26.0.dev20260120
+Version: 1.26.0.dev20260122
 Summary: Flower: A Friendly Federated AI Framework
 License: Apache-2.0
 Keywords: Artificial Intelligence,Federated AI,Federated Analytics,Federated Evaluation,Federated Learning,Flower,Machine Learning

{flwr_nightly-1.26.0.dev20260120 → flwr_nightly-1.26.0.dev20260122}/py/flwr/cli/app.py

@@ -14,6 +14,9 @@
 # ==============================================================================
 """Flower command line interface."""
 
+
+from typing import Any, TypedDict
+
 import typer
 from typer.main import get_command
 
@@ -37,6 +40,15 @@ from .supernode import ls as supernode_list
 from .supernode import register as supernode_register
 from .supernode import unregister as supernode_unregister
 
+
+class CommandKwargs(TypedDict):
+    """Keywords for typer command to make mypy happy."""
+
+    context_settings: dict[str, Any]
+
+
+ALLOW_EXTRAS: CommandKwargs = {"context_settings": {"allow_extra_args": True}}
+
 app = typer.Typer(
     help=typer.style(
         "flwr is the Flower command line interface.",
@@ -51,21 +63,21 @@ app.command()(new)
 app.command()(run)
 app.command()(build)
 app.command()(install)
-app.command()(log)
-app.command("list")(ls)
-app.command(hidden=True)(ls)
-app.command()(stop)
-app.command()(login)
-app.command()(pull)
+app.command(**ALLOW_EXTRAS)(log)
+app.command("list", **ALLOW_EXTRAS)(ls)
+app.command(hidden=True, **ALLOW_EXTRAS)(ls)
+app.command(**ALLOW_EXTRAS)(stop)
+app.command(**ALLOW_EXTRAS)(login)
+app.command(**ALLOW_EXTRAS)(pull)
 
 # Create supernode command group
 supernode_app = typer.Typer(help="Manage SuperNodes")
-supernode_app.command()(supernode_register)
-supernode_app.command()(supernode_unregister)
+supernode_app.command(**ALLOW_EXTRAS)(supernode_register)
+supernode_app.command(**ALLOW_EXTRAS)(supernode_unregister)
 # Make it appear as "list"
-supernode_app.command("list")(supernode_list)
+supernode_app.command("list", **ALLOW_EXTRAS)(supernode_list)
 # Hide "ls" command (left as alias)
-supernode_app.command(hidden=True)(supernode_list)
+supernode_app.command(hidden=True, **ALLOW_EXTRAS)(supernode_list)
 app.add_typer(supernode_app, name="supernode")
 
 # Create app command group
@@ -77,9 +89,9 @@ app.add_typer(app_app, name="app")
 # Create federation command group
 federation_app = typer.Typer(help="Manage Federations")
 # Make it appear as "list"
-federation_app.command("list")(federation_list)
+federation_app.command("list", **ALLOW_EXTRAS)(federation_list)
 # Hide "ls" command (left as alias)
-federation_app.command(hidden=True)(federation_list)
+federation_app.command(hidden=True, **ALLOW_EXTRAS)(federation_list)
 app.add_typer(federation_app, name="federation")
 
 # Create config command group

{flwr_nightly-1.26.0.dev20260120 → flwr_nightly-1.26.0.dev20260122}/py/flwr/cli/app_cmd/publish.py

@@ -23,7 +23,6 @@ import requests
 import typer
 from requests import Response
 
-from flwr.common.constant import FAB_CONFIG_FILE
 from flwr.supercore.constant import (
     APP_PUBLISH_EXCLUDE_PATTERNS,
     APP_PUBLISH_INCLUDE_PATTERNS,
@@ -33,18 +32,17 @@ from flwr.supercore.constant import (
     MAX_TOTAL_BYTES,
     MIME_MAP,
     PLATFORM_API_URL,
+    SUPERGRID_ADDRESS,
     UTF8,
 )
 from flwr.supercore.version import package_version as flwr_version
 
 from ..auth_plugin.oidc_cli_plugin import OidcCliPlugin
-from ..config_utils import (
-    load_and_validate,
-    process_loaded_project_config,
-    validate_federation_in_project_config,
+from ..utils import (
+    build_pathspec,
+    load_cli_auth_plugin_from_connection,
+    load_gitignore_patterns,
 )
-from ..constant import FEDERATION_CONFIG_HELP_MESSAGE
-from ..utils import build_pathspec, load_cli_auth_plugin, load_gitignore_patterns
 
 
 # pylint: disable=too-many-locals
@@ -55,35 +53,13 @@ def publish(
             help="Project directory to upload (defaults to current directory)."
         ),
     ] = Path("."),
-    federation: Annotated[
-        str | None,
-        typer.Argument(
-            help="Name of the federation used for login before publishing app."
-        ),
-    ] = None,
-    federation_config_overrides: Annotated[
-        list[str] | None,
-        typer.Option(
-            "--federation-config",
-            help=FEDERATION_CONFIG_HELP_MESSAGE,
-        ),
-    ] = None,
 ) -> None:
     """Publish a Flower App to the Flower Platform.
 
     This command uploads your app project to the Flower Platform. Files are filtered
     based on .gitignore patterns and allowed file extensions.
     """
-    # Load configs
-    pyproject_path = app / FAB_CONFIG_FILE if app else None
-    config, errors, warnings = load_and_validate(pyproject_path, check_module=False)
-    config = process_loaded_project_config(config, errors, warnings)
-    federation, federation_config = validate_federation_in_project_config(
-        federation, config, federation_config_overrides
-    )
-
-    # Load the authentication plugin
-    auth_plugin = load_cli_auth_plugin(app, federation, federation_config)
+    auth_plugin = load_cli_auth_plugin_from_connection(SUPERGRID_ADDRESS)
     auth_plugin.load_tokens()
     if not isinstance(auth_plugin, OidcCliPlugin) or not auth_plugin.access_token:
         typer.secho(

{flwr_nightly-1.26.0.dev20260120 → flwr_nightly-1.26.0.dev20260122}/py/flwr/cli/app_cmd/review.py

@@ -28,8 +28,7 @@ from cryptography.hazmat.primitives.asymmetric import ed25519
 
 from flwr.common import now
 from flwr.common.config import get_flwr_dir
-from flwr.common.constant import FAB_CONFIG_FILE
-from flwr.supercore.constant import PLATFORM_API_URL
+from flwr.supercore.constant import PLATFORM_API_URL, SUPERGRID_ADDRESS
 from flwr.supercore.primitives.asymmetric_ed25519 import (
     create_message_to_sign,
     load_private_key,
@@ -39,14 +38,8 @@ from flwr.supercore.utils import parse_app_spec, request_download_link
 from flwr.supercore.version import package_version as flwr_version
 
 from ..auth_plugin.oidc_cli_plugin import OidcCliPlugin
-from ..config_utils import (
-    load_and_validate,
-    process_loaded_project_config,
-    validate_federation_in_project_config,
-)
-from ..constant import FEDERATION_CONFIG_HELP_MESSAGE
 from ..install import install_from_fab
-from ..utils import load_cli_auth_plugin
+from ..utils import load_cli_auth_plugin_from_connection
 
 TRY_AGAIN_MESSAGE = "Please try again or press CTRL+C to abort.\n"
 
@@ -60,38 +53,11 @@ def review(
             "Version is optional; defaults to the latest."
         ),
     ],
-    app_dir_login: Annotated[
-        Path,
-        typer.Argument(
-            help="Project directory to used for login before reviewing app."
-        ),
-    ] = Path("."),
-    federation: Annotated[
-        str | None,
-        typer.Argument(
-            help="Name of the federation used for login before reviewing app."
-        ),
-    ] = None,
-    federation_config_overrides: Annotated[
-        list[str] | None,
-        typer.Option(
-            "--federation-config",
-            help=FEDERATION_CONFIG_HELP_MESSAGE,
-        ),
-    ] = None,
 ) -> None:
     """Download a FAB for <APP-ID>, unpack it for manual review, and upon confirmation
     sign & submit the review to the Platform."""
-    # Load configs
-    pyproject_path = app_dir_login / FAB_CONFIG_FILE if app_dir_login else None
-    config, errors, warnings = load_and_validate(pyproject_path, check_module=False)
-    config = process_loaded_project_config(config, errors, warnings)
-    federation, federation_config = validate_federation_in_project_config(
-        federation, config, federation_config_overrides
-    )
+    auth_plugin = load_cli_auth_plugin_from_connection(SUPERGRID_ADDRESS)
 
-    # Load the authentication plugin
-    auth_plugin = load_cli_auth_plugin(app_dir_login, federation, federation_config)
     auth_plugin.load_tokens()
     if not isinstance(auth_plugin, OidcCliPlugin) or not auth_plugin.access_token:
         typer.secho(

{flwr_nightly-1.26.0.dev20260120 → flwr_nightly-1.26.0.dev20260122}/py/flwr/cli/auth_plugin/auth_plugin.py

@@ -17,7 +17,6 @@
 
 from abc import ABC, abstractmethod
 from collections.abc import Sequence
-from pathlib import Path
 
 from flwr.common.typing import AccountAuthCredentials, AccountAuthLoginDetails
 from flwr.proto.control_pb2_grpc import ControlStub
@@ -35,8 +34,8 @@ class CliAuthPlugin(ABC):
 
     Parameters
     ----------
-    credentials_path : Path
-        Path to the Flower account's authentication credentials file.
+    host : str
+        The address of the SuperLink Control API server.
     """
 
     @staticmethod
@@ -66,20 +65,16 @@ class CliAuthPlugin(ABC):
         """
 
     @abstractmethod
-    def __init__(self, credentials_path: Path):
+    def __init__(self, host: str):
         """Abstract constructor."""
 
     @abstractmethod
     def store_tokens(self, credentials: AccountAuthCredentials) -> None:
-        """Store authentication tokens to the `credentials_path`.
-
-        The credentials, including tokens, will be saved as a JSON file
-        at `credentials_path`.
-        """
+        """Store authentication tokens to the credential store."""
 
     @abstractmethod
     def load_tokens(self) -> None:
-        """Load authentication tokens from the `credentials_path`."""
+        """Load authentication tokens from the credential store."""
 
     @abstractmethod
     def write_tokens_to_metadata(

{flwr_nightly-1.26.0.dev20260120 → flwr_nightly-1.26.0.dev20260122}/py/flwr/cli/auth_plugin/noop_auth_plugin.py

@@ -16,7 +16,6 @@
 
 
 from collections.abc import Sequence
-from pathlib import Path
 
 from flwr.common.typing import AccountAuthCredentials, AccountAuthLoginDetails
 from flwr.proto.control_pb2_grpc import ControlStub
@@ -57,7 +56,7 @@ class NoOpCliAuthPlugin(CliAuthPlugin):
         """
         raise LoginError("Account authentication is not enabled on this SuperLink.")
 
-    def __init__(self, credentials_path: Path) -> None:
+    def __init__(self, host: str = "") -> None:
         pass
 
     def store_tokens(self, credentials: AccountAuthCredentials) -> None:

{flwr_nightly-1.26.0.dev20260120 → flwr_nightly-1.26.0.dev20260122}/py/flwr/cli/auth_plugin/oidc_cli_plugin.py

@@ -15,27 +15,25 @@
 """Flower CLI account auth plugin for OIDC."""
 
 
-import json
 import time
 import webbrowser
 from collections.abc import Sequence
-from pathlib import Path
-from typing import Any
 
 import typer
 
-from flwr.common.constant import (
-    ACCESS_TOKEN_KEY,
-    AUTHN_TYPE_JSON_KEY,
-    REFRESH_TOKEN_KEY,
-    AuthnType,
+from flwr.cli.constant import (
+    ACCESS_TOKEN_STORE_KEY,
+    AUTHN_TYPE_STORE_KEY,
+    REFRESH_TOKEN_STORE_KEY,
 )
+from flwr.common.constant import ACCESS_TOKEN_KEY, REFRESH_TOKEN_KEY, AuthnType
 from flwr.common.typing import AccountAuthCredentials, AccountAuthLoginDetails
 from flwr.proto.control_pb2 import (  # pylint: disable=E0611
     GetAuthTokensRequest,
     GetAuthTokensResponse,
 )
 from flwr.proto.control_pb2_grpc import ControlStub
+from flwr.supercore.credential_store import get_credential_store
 
 from .auth_plugin import CliAuthPlugin, LoginError
 
@@ -47,10 +45,11 @@ class OidcCliPlugin(CliAuthPlugin):
     access to Flower SuperLink.
     """
 
-    def __init__(self, credentials_path: Path):
+    def __init__(self, host: str):
         self.access_token: str | None = None
         self.refresh_token: str | None = None
-        self.credentials_path = credentials_path
+        self.host = host
+        self.store = get_credential_store()
 
     @staticmethod
     def login(
@@ -109,32 +108,29 @@ class OidcCliPlugin(CliAuthPlugin):
         raise LoginError("Process timed out.")
 
     def store_tokens(self, credentials: AccountAuthCredentials) -> None:
-        """Store authentication tokens to the `credentials_path`.
+        """Store authentication tokens to the credential store."""
+        host = self.host
+        # Retrieve tokens
+        access_token = credentials.access_token
+        refresh_token = credentials.refresh_token
 
-        The credentials, including tokens, will be saved as a JSON file
-        at `credentials_path`.
-        """
-        self.access_token = credentials.access_token
-        self.refresh_token = credentials.refresh_token
-        json_dict = {
-            AUTHN_TYPE_JSON_KEY: AuthnType.OIDC,
-            ACCESS_TOKEN_KEY: credentials.access_token,
-            REFRESH_TOKEN_KEY: credentials.refresh_token,
-        }
+        # Store tokens in the credential store
+        self.store.set(AUTHN_TYPE_STORE_KEY % host, AuthnType.OIDC.encode("utf-8"))
+        self.store.set(ACCESS_TOKEN_STORE_KEY % host, access_token.encode("utf-8"))
+        self.store.set(REFRESH_TOKEN_STORE_KEY % host, refresh_token.encode("utf-8"))
 
-        with open(self.credentials_path, "w", encoding="utf-8") as file:
-            json.dump(json_dict, file, indent=4)
+        # Update internal state
+        self.access_token = access_token
+        self.refresh_token = refresh_token
 
     def load_tokens(self) -> None:
-        """Load authentication tokens from the `credentials_path`."""
-        with open(self.credentials_path, encoding="utf-8") as file:
-            json_dict: dict[str, Any] = json.load(file)
-            access_token = json_dict.get(ACCESS_TOKEN_KEY)
-            refresh_token = json_dict.get(REFRESH_TOKEN_KEY)
+        """Load authentication tokens from the credential store."""
+        access_token_bytes = self.store.get(ACCESS_TOKEN_STORE_KEY % self.host)
+        refresh_token_bytes = self.store.get(REFRESH_TOKEN_STORE_KEY % self.host)
 
-        if isinstance(access_token, str) and isinstance(refresh_token, str):
-            self.access_token = access_token
-            self.refresh_token = refresh_token
+        if access_token_bytes is not None and refresh_token_bytes is not None:
+            self.access_token = access_token_bytes.decode("utf-8")
+            self.refresh_token = refresh_token_bytes.decode("utf-8")
 
     def write_tokens_to_metadata(
         self, metadata: Sequence[tuple[str, str | bytes]]

{flwr_nightly-1.26.0.dev20260120 → flwr_nightly-1.26.0.dev20260122}/py/flwr/cli/config_migration.py

@@ -57,21 +57,21 @@ CLI_NOTICE = (
 )
 
 
-def _is_legacy_usage(superlink: str | None, args: list[str]) -> bool:
+def _is_legacy_usage(positional_arg_1: str | None, args: list[str]) -> bool:
     """Check if legacy usage is detected in the given arguments."""
-    if superlink is None:
+    if positional_arg_1 is None:
         return False
 
     # If one and only one extra argument is given, assume legacy usage
     if len(args) == 1:
         return True
 
-    # If the `superlink` looks like a path, assume legacy usage
-    pth = Path(superlink)
-    if pth.is_absolute() or len(pth.parts) > 1 or superlink in (".", ".."):
+    # If the first positional argument looks like a path, assume legacy usage
+    pth = Path(positional_arg_1)
+    if pth.is_absolute() or len(pth.parts) > 1 or positional_arg_1 in (".", ".."):
         return True
 
-    # Lastly, check if a pyproject.toml file exists at the given superlink
+    # Lastly, check if a pyproject.toml file exists at the given path
     if (pth / "pyproject.toml").exists():
         return True
 
@@ -172,7 +172,7 @@ def _comment_out_legacy_toml_config(app: Path) -> None:
 
 
 def migrate(
-    superlink: str | None,
+    positional_arg_1: str | None,
     args: list[str],
     ignore_legacy_usage: bool = False,
 ) -> None:
@@ -182,13 +182,13 @@ def migrate(
     pyproject.toml to the new Flower config format when legacy usage is detected
     or the migration is applicable.
 
-    `flwr run` should call `migrate(superlink, [], ignore_legacy_usage=True)` to skip
+    `flwr run` should call `migrate(app, [], ignore_legacy_usage=True)` to skip
     legacy usage check. Other CLI commands should call `migrate(superlink, ctx.args)`.
 
     Parameters
     ----------
-    superlink : str | None
-        Value of the `[SUPERLINK]` argument provided to the CLI command.
+    positional_arg_1 : str | None
+        The first positional argument.
     args : list[str]
         Additional arguments. In legacy usage, this is the TOML federation name.
     ignore_legacy_usage : bool (default: False)
@@ -224,12 +224,13 @@ def migrate(
         raise click.UsageError(f"Got unexpected extra arguments ({' '.join(args[1:])})")
 
     # Determine app path for migration
-    app = Path(superlink) if superlink else Path(".")
+    arg1 = positional_arg_1
+    app = Path(arg1) if arg1 else Path(".")
     app = app.resolve()
 
     # Check if migration is applicable and if legacy usage is detected
     is_migratable, reason = _is_migratable(app)
-    is_legacy = _is_legacy_usage(superlink, args) if not ignore_legacy_usage else False
+    is_legacy = _is_legacy_usage(arg1, args) if not ignore_legacy_usage else False
 
     # Print notice once if legacy usage detected or migration is applicable
     if is_legacy or is_migratable:
@@ -276,3 +277,24 @@ def migrate(
 
         # Abort if legacy usage is detected to force user to adapt to new usage
         raise typer.Exit(code=1)
+
+
+def warn_if_federation_config_overrides(
+    federation_config_overrides: list[str] | None,
+) -> None:
+    """Warn if federation config overrides are provided.
+
+    Parameters
+    ----------
+    federation_config_overrides : list[str] | None
+        List of federation config override strings.
+    """
+    if federation_config_overrides is None:
+        return
+
+    typer.secho(
+        "⚠️ Warning: `--federation-config` option is deprecated and will be ignored.\n"
+        "Use Flower configuration files to set SuperLink connections.",
+        fg=typer.colors.YELLOW,
+        bold=True,
+    )

{flwr_nightly-1.26.0.dev20260120 → flwr_nightly-1.26.0.dev20260122}/py/flwr/cli/constant.py

@@ -14,6 +14,7 @@
 # ==============================================================================
 """Constants for CLI commands."""
 
+from flwr.supercore.constant import SUPERGRID_ADDRESS
 
 # General help message for config overrides
 CONFIG_HELP_MESSAGE = (
@@ -96,11 +97,11 @@ class SimulationBackendConfigTomlKey:
 FLOWER_CONFIG_FILE = "config.toml"
 
 # The default configuration for the Flower config file
-DEFAULT_FLOWER_CONFIG_TOML = """[superlink]
+DEFAULT_FLOWER_CONFIG_TOML = f"""[superlink]
 default = "local"
 
 [superlink.supergrid]
-address = "supergrid.flower.ai"
+address = "{SUPERGRID_ADDRESS}"
 enable-account-auth = true
 federation = "YOUR-FEDERATION-HERE"
 
@@ -109,3 +110,8 @@ options.num-supernodes = 10
 options.backend.client-resources.num-cpus = 1
 options.backend.client-resources.num-gpus = 0
 """
+
+# Keys for storing account auth credentials in the credential store
+AUTHN_TYPE_STORE_KEY = "flower.account-auth.%s.authn-type"
+ACCESS_TOKEN_STORE_KEY = "flower.account-auth.%s.oidc-access-token"
+REFRESH_TOKEN_STORE_KEY = "flower.account-auth.%s.oidc-refresh-token"

{flwr_nightly-1.26.0.dev20260120 → flwr_nightly-1.26.0.dev20260122}/py/flwr/cli/federation/ls.py

@@ -16,22 +16,17 @@
 
 
 import io
-from pathlib import Path
-from typing import Annotated, Any, cast
+from typing import Annotated, Any
 
 import typer
 from rich.console import Console
 from rich.table import Table
 from rich.text import Text
 
-from flwr.cli.config_utils import (
-    exit_if_no_address,
-    load_and_validate,
-    process_loaded_project_config,
-    validate_federation_in_project_config,
-)
+from flwr.cli.config_migration import migrate
+from flwr.cli.flower_config import read_superlink_connection
 from flwr.cli.ls import _get_status_style
-from flwr.common.constant import FAB_CONFIG_FILE, NOOP_ACCOUNT_NAME, CliOutputFormat
+from flwr.common.constant import NOOP_ACCOUNT_NAME, CliOutputFormat
 from flwr.common.logger import print_json_error, redirect_output, restore_output
 from flwr.common.serde import run_from_proto
 from flwr.proto.control_pb2 import (  # pylint: disable=E0611
@@ -46,18 +41,14 @@ from flwr.proto.node_pb2 import NodeInfo  # pylint: disable=E0611
 from flwr.supercore.utils import humanize_duration
 
 from ..run_utils import RunRow, format_runs
-from ..utils import flwr_cli_grpc_exc_handler, init_channel, load_cli_auth_plugin
+from ..utils import flwr_cli_grpc_exc_handler, init_channel_from_connection
 
 
 def ls(  # pylint: disable=R0914, R0913, R0917, R0912
     ctx: typer.Context,
-    app: Annotated[
-        Path,
-        typer.Argument(help="Path of the Flower project"),
-    ] = Path("."),
-    toml_federation: Annotated[
+    superlink: Annotated[
         str | None,
-        typer.Argument(help="Name of the federation"),
+        typer.Argument(help="Name of the SuperLink connection."),
     ] = None,
     output_format: Annotated[
         str,
@@ -77,29 +68,22 @@ def ls(  # pylint: disable=R0914, R0913, R0917, R0912
     ] = None,
 ) -> None:
     """List available federations."""
-    # Resolve command used (list or ls)
-    command_name = cast(str, ctx.command.name) if ctx.command else "ls"
-
     suppress_output = output_format == CliOutputFormat.JSON
     captured_output = io.StringIO()
+
+    if suppress_output:
+        redirect_output(captured_output)
+
+    # Migrate legacy usage if any
+    migrate(superlink, args=ctx.args)
+
+    # Read superlink connection configuration
+    superlink_connection = read_superlink_connection(superlink)
+    channel = None
+
     try:
-        if suppress_output:
-            redirect_output(captured_output)
-        typer.secho("Loading project configuration... ", fg=typer.colors.BLUE)
-
-        pyproject_path = app / FAB_CONFIG_FILE if app else None
-        config, errors, warnings = load_and_validate(pyproject_path, check_module=False)
-        config = process_loaded_project_config(config, errors, warnings)
-        toml_federation_name, federation_config = validate_federation_in_project_config(
-            toml_federation, config
-        )
-        exit_if_no_address(federation_config, f"federation {command_name}")
-        channel = None
         try:
-            auth_plugin = load_cli_auth_plugin(
-                app, toml_federation_name, federation_config
-            )
-            channel = init_channel(app, federation_config, auth_plugin)
+            channel = init_channel_from_connection(superlink_connection)
             stub = ControlStub(channel)
 
             if federation: