gravi-cli 0.2.0__tar.gz → 0.2.2__tar.gz

{gravi_cli-0.2.0 → gravi_cli-0.2.2}/.bumpversion.toml

@@ -1,5 +1,5 @@
 [tool.bumpversion]
-current_version = "0.2.0"
+current_version = "0.2.2"
 parse = "(?P<major>\\d+)\\.(?P<minor>\\d+)\\.(?P<patch>\\d+)"
 serialize = ["{major}.{minor}.{patch}"]
 search = "{current_version}"

{gravi_cli-0.2.0 → gravi_cli-0.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gravi-cli
-Version: 0.2.0
+Version: 0.2.2
 Summary: CLI tool for Gravitate infrastructure management
 Project-URL: Homepage, https://github.com/gravitate/mom
 Project-URL: Documentation, https://github.com/gravitate/mom/tree/main/cli

{gravi_cli-0.2.0 → gravi_cli-0.2.2}/gravi_cli/__init__.py

@@ -6,4 +6,4 @@ allowing developers to authenticate, manage tokens, and access instance
 configurations and credentials.
 """
 
-__version__ = "0.2.0"
+__version__ = "0.2.2"

{gravi_cli-0.2.0 → gravi_cli-0.2.2}/gravi_cli/client.py

@@ -7,7 +7,7 @@ Handles all HTTP communication with the mom backend API.
 import requests
 from typing import Any
 
-from .exceptions import APIError, InvalidTokenError, RateLimitError
+from .exceptions import APIError, InvalidTokenError, PermissionDeniedError, RateLimitError
 
 
 class MomClient:
@@ -49,6 +49,7 @@ class MomClient:
             APIError: For non-2xx responses
             RateLimitError: For 429 rate limit responses
             InvalidTokenError: For 401 authentication failures
+            PermissionDeniedError: For 403 permission denied responses
         """
         url = f"{self.mom_url}/{endpoint}"
 
@@ -88,6 +89,16 @@ class MomClient:
                     response_data=response.json() if response.content else None
                 )
 
+            # Handle permission errors
+            if response.status_code == 403:
+                error_data = response.json() if response.content else {}
+                detail = error_data.get("detail", "")
+                raise PermissionDeniedError(
+                    f"You don't have permission to access this resource. {detail}".strip(),
+                    status_code=403,
+                    response_data=error_data
+                )
+
             # Handle other errors
             if not response.ok:
                 error_data = response.json() if response.content else {}

{gravi_cli-0.2.0 → gravi_cli-0.2.2}/gravi_cli/exceptions.py

@@ -26,6 +26,11 @@ class InvalidTokenError(APIError):
     pass
 
 
+class PermissionDeniedError(APIError):
+    """Raised when user doesn't have permission to access a resource."""
+    pass
+
+
 class RateLimitError(APIError):
     """Raised when rate limit is exceeded."""
     pass

{gravi_cli-0.2.0 → gravi_cli-0.2.2}/gravi_cli/tunnel.py

@@ -6,6 +6,7 @@ exposing them on local ports for tools like MongoDB Compass or redis-cli.
 """
 
 import asyncio
+import json
 import socket
 import signal
 import sys
@@ -81,10 +82,10 @@ class TunnelClient:
         self._shutdown_event = asyncio.Event()
 
     def _get_ws_url(self, service: str) -> str:
-        """Get WebSocket URL for a service tunnel."""
+        """Get WebSocket URL for a service tunnel (no token in URL)."""
         # Convert HTTP to WebSocket URL
         ws_url = self.mom_url.replace("https://", "wss://").replace("http://", "ws://")
-        return f"{ws_url}/burners/{self.burner_id}/tunnel/{service}?token={self.token}"
+        return f"{ws_url}/burners/{self.burner_id}/tunnel/{service}"
 
     async def _handle_client(
         self,
@@ -94,10 +95,13 @@ class TunnelClient:
     ) -> None:
         """Handle a single client connection by relaying to WebSocket."""
         ws_url = self._get_ws_url(service)
-        peer = writer.get_extra_info("peername")
 
         try:
             async with websockets.connect(ws_url) as ws:
+                # Send auth message first (token not in URL for security)
+                auth_message = json.dumps({"type": "auth", "token": self.token})
+                await ws.send(auth_message)
+
                 async def tcp_to_ws():
                     try:
                         while True:

{gravi_cli-0.2.0 → gravi_cli-0.2.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "gravi-cli"
-version = "0.2.0"
+version = "0.2.2"
 description = "CLI tool for Gravitate infrastructure management"
 readme = "README.md"
 requires-python = ">=3.10"