hcs-cli 0.1.347__tar.gz → 0.1.349__tar.gz

{hcs_cli-0.1.347 → hcs_cli-0.1.349}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: hcs-cli
-Version: 0.1.347
+Version: 0.1.349
 Summary: Horizon Cloud Service CLI.
 Project-URL: Homepage, https://github.com/euc-eng/hcs-cli
 Project-URL: Bug Tracker, https://github.com/euc-eng/hcs-cli/issues
@@ -14,9 +14,8 @@ Classifier: License :: OSI Approved :: MIT License
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
 Requires-Python: >=3.9
-Requires-Dist: hcs-core>=0.1.347
+Requires-Dist: hcs-core>=0.1.350
 Requires-Dist: inquirerpy>=0.3.4
-Requires-Dist: matplotlib>=3.8.0
 Requires-Dist: paho-mqtt>=2.1.0
 Requires-Dist: reportlab>=4.0.0
 Provides-Extra: dev

{hcs_cli-0.1.347 → hcs_cli-0.1.349}/hcs_cli/__init__.py

@@ -1,3 +1,3 @@
-__version__ = "0.1.347"
+__version__ = "0.1.349"
 
 from . import service as service  # noqa: F401

hcs_cli-0.1.349/hcs_cli/cmds/activity/__init__.py

@@ -0,0 +1,5 @@
+"""
+Copyright © 2025-2026 Omnissa, LLC.
+"""
+
+help = "Activity commands."

hcs_cli-0.1.349/hcs_cli/cmds/activity/get.py

@@ -0,0 +1,22 @@
+"""
+Copyright © 2025-2026 Omnissa, LLC.
+"""
+
+import click
+import hcs_core.sglib.cli_options as cli
+from hcs_core.ctxp import recent
+
+from hcs_cli.service import activity
+
+
+@click.command()
+@click.argument("id", type=str, required=False)
+@cli.org_id
+def get(id: str, org: str):
+    """Get activity by ID."""
+    cli.get_org_id(org)
+    id = recent.require("activity", id)
+    ret = activity.get(id)
+    if ret:
+        return ret
+    return ret, 1

hcs_cli-0.1.349/hcs_cli/cmds/activity/list.py

@@ -0,0 +1,126 @@
+"""
+Copyright © 2025-2026 Omnissa, LLC.
+"""
+
+from datetime import timezone
+
+import click
+import hcs_core.sglib.cli_options as cli
+import yumako
+from hcs_core.ctxp import recent
+
+from hcs_cli.service import activity
+
+_SEARCH_OPTS = (
+    ("edge", "edgeId"),
+    ("edge_name", "edgeName"),
+    ("site", "siteId"),
+    ("site_name", "siteName"),
+    ("type", "type"),
+    ("operation", "operation"),
+    ("resource", "resourceId"),
+    ("trace", "traceId"),
+    ("parent", "parentId"),
+    ("status", "status"),
+    ("severity", "severity"),
+)
+
+
+def _format_time(time: str) -> str:
+    dt = yumako.time.of(time, tz=timezone.utc)
+    return dt.strftime("%Y-%m-%dT%H:%M:%S.") + f"{dt.microsecond // 1000:03d}Z"
+
+
+def _build_search(**filters):
+    parts = []
+    for arg, field in _SEARCH_OPTS:
+        val = filters.get(arg)
+        if val:
+            parts.append(f"{field} $eq {val}")
+    return " AND ".join(parts) if parts else None
+
+
+@click.command()
+@click.option(
+    "--from",
+    "from_param",
+    type=str,
+    required=False,
+    default="-24h",
+    help="From date. E.g. '-1d', '-1h35m', '-1w', or '2023-12-04T00:19:22.854Z'.",
+)
+@click.option(
+    "--to",
+    type=str,
+    required=False,
+    default="now",
+    help="To date. E.g. 'now', '-1d', '-1h35m', '-1w', or '2023-12-04T00:19:22.854Z'.",
+)
+@click.option("--edge", type=str, required=False, help="Filter by edgeId.")
+@click.option("--edge-name", type=str, required=False, help="Filter by edgeName.")
+@click.option("--site", type=str, required=False, help="Filter by siteId.")
+@click.option("--site-name", type=str, required=False, help="Filter by siteName.")
+@click.option("--type", "type", type=str, required=False, help="Filter by type (AUDIT, SYSTEM).")
+@click.option("--operation", type=str, required=False, help="Filter by operation.")
+@click.option("--resource", type=str, required=False, help="Filter by resourceId.")
+@click.option("--trace", type=str, required=False, help="Filter by traceId.")
+@click.option("--parent", type=str, required=False, help="Filter by parentId.")
+@click.option("--status", type=str, required=False, help="Filter by status.")
+@click.option("--severity", type=str, required=False, help="Filter by severity.")
+@cli.limit(default=20)
+@cli.org_id
+@cli.formatter(
+    columns={
+        "id": "Id",
+        "utcTimestamp": "Time",
+        "type": "Type",
+        "operation": "Operation",
+        "status": "Status",
+        "severity": "Severity",
+        "resourceName": "Resource",
+        "edgeName": "Edge",
+        "siteName": "Site",
+    }
+)
+def list(
+    org: str,
+    from_param: str,
+    to: str,
+    edge: str,
+    edge_name: str,
+    site: str,
+    site_name: str,
+    type: str,
+    operation: str,
+    resource: str,
+    trace: str,
+    parent: str,
+    status: str,
+    severity: str,
+    limit: int,
+):
+    """List activities."""
+    org_id = cli.get_org_id(org)
+    search = _build_search(
+        edge=edge,
+        edge_name=edge_name,
+        site=site,
+        site_name=site_name,
+        type=type,
+        operation=operation,
+        resource=resource,
+        trace=trace,
+        parent=parent,
+        status=status,
+        severity=severity,
+    )
+    kwargs = {
+        "start_date": _format_time(from_param),
+        "end_date": _format_time(to),
+        "limit": limit,
+    }
+    if search:
+        kwargs["search"] = search
+    ret = activity.list(org_id, **kwargs)
+    recent.helper.default_list(ret, "activity")
+    return ret

{hcs_cli-0.1.347 → hcs_cli-0.1.349}/hcs_cli/cmds/dev/fs/helper/license_info.py

@@ -22,7 +22,10 @@ Hence we cannot add subscription to the feature stack, work around is to directl
 
 def createLicenseFeatures():
     current_profile = profile.current()
-    org_id = os.getenv("ORG_ID", current_profile.csp.orgId)
+    # Prefer the (freshly synced) profile over a raw ORG_ID env var, which can
+    # otherwise silently win with a stale value left over from a previous
+    # org's onboarding in the same shell.
+    org_id = current_profile.csp.orgId or os.getenv("ORG_ID")
     data = {
         "licenses": [
             {

{hcs_cli-0.1.347 → hcs_cli-0.1.349}/hcs_cli/cmds/dev/fs/helper/subscription_util.py

@@ -1,3 +1,4 @@
+import hashlib
 import os
 import uuid
 
@@ -46,6 +47,29 @@ def _get_client():
     return client, current_profile
 
 
+def _resolve_org_id(current_profile) -> str:
+    """Resolve the org id, preferring the (freshly synced) profile over a raw
+    ORG_ID env var. A shell-exported ORG_ID left over from a previous org's
+    onboarding would otherwise silently win here and target the wrong org.
+    """
+    org_id = current_profile.csp.orgId or os.getenv("ORG_ID")
+    log.trivial(f"Using org id: {org_id}")
+    return org_id
+
+
+def _derive_sid(org_id: str) -> str:
+    """Derive a stable, subscription-service-unique sid from the org id.
+
+    The subscription service enforces a unique index on `sid`, so a fixed
+    literal here would collide as soon as a second org is onboarded onto the
+    same feature stack. Deriving it from org_id keeps reruns for the same org
+    idempotent while giving each distinct org its own subscription.
+    """
+    digest = hashlib.sha256(org_id.encode()).hexdigest()
+    numeric = str(int(digest[:12], 16))[-9:].rjust(9, "0")
+    return f"M{numeric}"
+
+
 def create_subscription():
     """
     Step 8.1 – Create a subscription.
@@ -54,11 +78,12 @@ def create_subscription():
     """
     client, current_profile = _get_client()
     namespace = profile.name()
+    org_id = _resolve_org_id(current_profile)
 
     data = {
         "customerName": f"{namespace}-dev",
         "customerType": "INTERNAL",
-        "sid": "M222222222",
+        "sid": _derive_sid(org_id),
         "eaId": "123456789",
         "status": "ACTIVE",
         "region": "NA",
@@ -110,7 +135,7 @@ def create_org_mapping(hcs_subscription_id: str):
     POST /subscription/v1/subscriptions/{{hcsSubscriptionId}}?action=createOrgMapping
     """
     client, current_profile = _get_client()
-    org_id = os.getenv("ORG_ID", current_profile.csp.orgId)
+    org_id = _resolve_org_id(current_profile)
     ws1_org_id = str(uuid.uuid4())
 
     data = {

{hcs_cli-0.1.347 → hcs_cli-0.1.349}/hcs_cli/cmds/dev/fs/init.py

@@ -64,15 +64,27 @@ ALL_DEPLOY_STEPS = list(DEPLOY_TARGET_STEPS.values())
 def init(org: str, env_source: str, env_file: str, deploy: str, step: str, fs_name: str, delete_temp_files: bool, **kwargs):
     """Initialize feature stack with common settings and infrastructure."""
 
-    if org:
-        os.environ["ORG_ID"] = org
-
     if not fs_name:
         fs_name = profile.name()
 
     if fs_name == "default":
         fail("Usage: hcs dev fs init <YOUR_FEATURE_STACK_ID>")
 
+    if org:
+        os.environ["ORG_ID"] = org
+        # Keep the profile itself in sync with an explicit --org, so every step
+        # (including single-step reruns via --step, which skip prepare_profile)
+        # reads the intended org from the profile rather than risking a stale
+        # ORG_ID left over in the shell from a previous org onboarding.
+        if profile.exists(fs_name):
+            if profile.name() != fs_name:
+                profile.use(fs_name)
+            current = profile.current()
+            if current.csp.orgId != org:
+                log.warn(f"Updating profile '{fs_name}' orgId to {org} (from --org).")
+                current.csp.orgId = org
+                profile.save()
+
     steps.set_delete_temp_files(delete_temp_files)
 
     if step is None:

{hcs_cli-0.1.347 → hcs_cli-0.1.349}/hcs_cli/cmds/inventory/list.py

@@ -61,14 +61,17 @@ from hcs_cli.support.vm_table import format_vm_table
     required=False,
     help="Filter by UEM enrollment status.",
 )
+@click.option("--include-sessions", "includeSessions", is_flag=True, required=False, help="Include sessions in the response.")
 @click.argument("template_id", type=str, required=False)
 @cli.formatter(format_vm_table)
-def list(org: str, template_id: str, **kwargs):
+def list(org: str, template_id: str, includeSessions: bool, **kwargs):
     """List template VMs"""
     template_id = recent.require("template", template_id)
     fields = _trick_capture_field_option()
     if fields:
         kwargs["fields"] = fields
+    if includeSessions:
+        kwargs["includeSessions"] = True
     ret = inventory.list(template_id, cli.get_org_id(org), **kwargs)
     recent.helper.default_list(ret, "vm")
     if not ret:

hcs_cli-0.1.349/hcs_cli/cmds/log.py

@@ -0,0 +1,82 @@
+"""
+Copyright © 2025 Omnissa, LLC.
+"""
+
+import click
+from hcs_core.sglib import cli_options as cli
+
+from hcs_cli.support.log import env
+from hcs_cli.support.log import search as log_search
+
+
+@click.command()
+@click.option(
+    "--from",
+    "from_param",
+    type=str,
+    required=False,
+    default="-24h",
+    help="Sepcify the from date. E.g. '-1d', or '-1h35m', or '-1w', or '2023-12-04T00:19:22.854Z'.",
+)
+@click.option(
+    "--to",
+    type=str,
+    required=False,
+    default="now",
+    help="Sepcify the to date. E.g. 'now', or '-1d', or '-1h35m', or '-1w', or '2023-12-04T00:19:22.854Z'.",
+)
+@click.option("--hdc", required=False, type=click.Choice(env.HDCS, case_sensitive=False), help="The HDC location.")
+@click.option(
+    "--region",
+    required=False,
+    type=click.Choice(env.REGIONS, case_sensitive=False),
+    help="Search log of regional cluster.",
+)
+@click.option(
+    "--service",
+    required=False,
+    help="Filter by kubernetes.pod_labels.app. If multiple apps, use comma to separate, e.g. --service inventory,lcm",
+)
+@click.option(
+    "--pod",
+    required=False,
+    help="Filter by kubernetes.pod_name. If multiple pods, use comma to separate, e.g. --pod clouddriver-statefulset-0,clouddriver-statefulset-1",
+)
+@click.option(
+    "--index",
+    required=False,
+    type=str,
+    help="Explicit ES index/index-pattern to query, overriding the --hdc-derived lookup. "
+    "E.g. --index 'prod110-r-japaneast-cp102-*' to search precisely for a single regional cluster.",
+)
+@cli.limit(default=20)
+@click.option("--raw", is_flag=True, default=False, help="If raw, output the raw result.")
+@click.argument("query", type=str, required=False)
+def log(
+    from_param: str,
+    to: str,
+    hdc: str,
+    region: str,
+    service: str,
+    pod: str,
+    index: str,
+    limit: int,
+    raw: bool,
+    query: str,
+):
+    """Search Kibana Log."""
+    try:
+        return log_search.search(
+            query=query,
+            from_time=from_param,
+            to=to,
+            hdc=hdc,
+            region=region,
+            service=service,
+            pod=pod,
+            index=index,
+            limit=limit,
+            raw=raw,
+        )
+    except log_search.Error as e:
+        return str(e), 1

hcs_cli-0.1.349/hcs_cli/cmds/mcp.py

@@ -0,0 +1,14 @@
+"""
+Copyright © 2025-2026 Omnissa, LLC.
+"""
+
+import click
+
+
+@click.command("mcp", hidden=True)
+def mcp():
+    """Run HCS MCP server (stdio). Tools: log, <resource>_list, <resource>_get."""
+
+    from hcs_cli.mcp import server as mcp_server
+
+    mcp_server.run()

{hcs_cli-0.1.347 → hcs_cli-0.1.349}/hcs_cli/cmds/profile/init.py

@@ -18,7 +18,19 @@ import hcs_cli.support.profile as profile_support
 @click.option("--api-token", type=str, required=False, help="Set initial property")
 @click.option("--basic", type=str, required=False, help="Set initial property")
 @click.option("--copy", type=str, required=False, help="Copy an existing profile to a new profile with the given name.")
-def init(name: str, dev: bool, feature_stack: str, org: str, client_id: str, client_secret: str, api_token: str, basic: str, copy: str):
+@click.option("--readonly", is_flag=True, default=False, help="Set profile readonly=true.")
+def init(
+    name: str,
+    dev: bool,
+    feature_stack: str,
+    org: str,
+    client_id: str,
+    client_secret: str,
+    api_token: str,
+    basic: str,
+    copy: str,
+    readonly: bool,
+):
     """Init profile.
 
     Examples:
@@ -51,6 +63,8 @@ def init(name: str, dev: bool, feature_stack: str, org: str, client_id: str, cli
             csp["apiToken"] = api_token
         if basic:
             csp["basic"] = basic
+        if readonly:
+            data["readonly"] = True
         return data
 
     data = None

{hcs_cli-0.1.347 → hcs_cli-0.1.349}/hcs_cli/cmds/task.py

@@ -554,6 +554,9 @@ def get_logs(org: str, namespace: str, group: str, smart_path: str, last: bool,
     if state and last:
         return "--state cannot be used with --last.", 1
 
+    if search:
+        return "--search is not supported by the tsctl v2 task-logs API. Use --state instead.", 1
+
     if last and org is None:
         org_id = cli.get_org_id(org)
     elif org == "all" or org is None:
@@ -562,15 +565,6 @@ def get_logs(org: str, namespace: str, group: str, smart_path: str, last: bool,
         org_id = cli.get_org_id(org)
 
     state_list = _parse_state_values(state)
-    if state_list:
-        if search:
-            if search.find("state $") >= 0:
-                return "--state cannot be used with state criteria in --search together.", 1
-        state_search = "state $in " + ",".join(state_list)
-        if search:
-            search = f"({search}) AND ({state_search})"
-        else:
-            search = state_search
 
     if last:
         t = task.last(org_id, namespace, group, key)
@@ -579,7 +573,7 @@ def get_logs(org: str, namespace: str, group: str, smart_path: str, last: bool,
         else:
             return
     else:
-        return task.logs(org_id, namespace, group, key, search, **kwargs)
+        return task.logs(org_id, namespace, group, key, states=state_list, **kwargs)
 
 
 @task_cmd_group.command()
@@ -721,9 +715,7 @@ def duplicate(org: str, namespace: str, group: str, smart_path: str, at: str, **
             scheduled_ms = now_ms + int(delta_seconds * 1000)
 
         if scheduled_ms > now_ms:
-            new_task.schedule = task.Schedule(initialDelayMs=scheduled_ms)
-        else:
-            new_task.schedule = None  # run immediately
+            raise CtxpException("--at in the future is not supported: the tsctl v2 submit API has no delay/schedule parameter.")
 
     return task.create(org_id, namespace, new_task)
 

{hcs_cli-0.1.347 → hcs_cli-0.1.349}/hcs_cli/cmds/vm/actions.py

@@ -21,7 +21,8 @@ def poweron(vm_path: str, org: str, wait: str, **kwargs):
 
     data = vm.get()
     if not data:
-        return "VM not found", 1
+        return f"VM {vm_path} not found", 1
+
     state = data["powerState"]
     if state == "PoweredOn":
         return data
@@ -45,6 +46,9 @@ def poweroff(vm_path: str, org: str, wait: str, **kwargs):
     vm = VM(org_id, template_id, vm_id)
 
     data = vm.get()
+    if not data:
+        return f"VM {vm_path} not found", 1
+
     state = data["powerState"]
     if state == "PoweredOff":
         return data
@@ -68,7 +72,9 @@ def restart(vm_path: str, org: str, wait: str, **kwargs):
     org_id = cli.get_org_id(org)
     vm = VM(org_id, template_id, vm_id)
 
-    vm.restart()
+    ret = vm.restart()
+    if not ret:
+        return "", 1
 
     if wait != "0":
         return vm.wait_for_power_state("PoweredOn", timeout=wait)
@@ -85,7 +91,9 @@ def shutdown(vm_path: str, org: str, wait: str, **kwargs):
     org_id = cli.get_org_id(org)
     vm = VM(org_id, template_id, vm_id)
 
-    vm.shutdown()
+    ret = vm.shutdown()
+    if not ret:
+        return "", 1
 
     if wait != "0":
         return vm.wait_for_power_state("PoweredOff", timeout=wait)
@@ -102,7 +110,9 @@ def resize(vm_path: str, org: str, wait: str, **kwargs):
     org_id = cli.get_org_id(org)
     vm = VM(org_id, template_id, vm_id)
 
-    vm.resize()
+    ret = vm.resize()
+    if not ret:
+        return "", 1
 
     if wait != "0":
         print("TODO: wait")
@@ -120,7 +130,9 @@ def rebuild(vm_path: str, org: str, wait: str, **kwargs):
     org_id = cli.get_org_id(org)
     vm = VM(org_id, template_id, vm_id)
 
-    vm.rebuild()
+    ret = vm.rebuild()
+    if not ret:
+        return "", 1
 
     if wait != "0":
         print("TODO: wait")
@@ -137,7 +149,10 @@ def pair(vm_path: str, org: str, wait: str, **kwargs):
     org_id = cli.get_org_id(org)
     vm = VM(org_id, template_id, vm_id)
 
-    vm.pair()
+    ret = vm.pair()
+    if not ret:
+        return "", 1
+
     if wait != "0":
         print("TODO: wait")
 

{hcs_cli-0.1.347 → hcs_cli-0.1.349}/hcs_cli/config/hcs-deployments.yaml

@@ -5,6 +5,7 @@
 
 prod:
   description: Production
+  readonly: false
   azure-region: WestUS2
   env: prod-na-cp102
   portal-url:
@@ -12,8 +13,6 @@ prod:
     - https://cloud.omnissahorizon.com/
   hcs:
     url: https://cloud-sg.horizon.omnissa.com
-    edgehub:
-      url: https://hv2-cloud-us-2.horizon.omnissa.com
     hdcs:
       US:
         url: https://cloud-sg-us.horizon.omnissa.com
@@ -108,8 +107,6 @@ stg:
     - https://staging1-cp102.horizon.omnissa.com/
   hcs:
     url: https://staging1-northcentralus-cp102.horizon.omnissa.com/
-    edgehub:
-      url: https://test-hv2-cloud-us-2.horizon.omnissa.com
     hdcs:
       US:
         url: https://staging1-northcentralus-cp102.horizon.omnissa.com/
@@ -142,8 +139,6 @@ bat:
   portal-url: []
   hcs:
     url: https://dev1b-westus2-cp102.azcp.horizon.omnissa.com/
-    edgehub:
-      url: https://dev-westus2-cp101.azcp.horizon.omnissa.com
     hdcs:
       US:
         url: https://dev1b-westus2-cp102.azcp.horizon.omnissa.com/
@@ -161,8 +156,6 @@ int:
   portal-url: []
   hcs:
     url: https://dev1b-westus2-cp103.azcp.horizon.omnissa.com/
-    edgehub:
-      url: https://dev-westus2-cp101.azcp.horizon.omnissa.com
     hdcs:
       US:
         url: https://dev1b-westus2-cp103.azcp.horizon.omnissa.com/
@@ -180,8 +173,6 @@ chaos:
   portal-url: []
   hcs:
     url: https://dev1b-westus2-cp104.azcp.horizon.omnissa.com/
-    edgehub:
-      url: https://dev-westus2-cp101.azcp.horizon.omnissa.com
     hdcs:
       US:
         url: https://dev1b-westus2-cp104.azcp.horizon.omnissa.com/
@@ -199,8 +190,6 @@ stress:
   portal-url: []
   hcs:
     url: https://stress1b-westus2-cp102.azcp.horizon.omnissa.com/
-    edgehub:
-      url: https://stress1-westus2-cp101.azcp.horizon.omnissa.com
     hdcs:
       US:
         url: https://stress1b-westus2-cp102.azcp.horizon.omnissa.com/
@@ -221,8 +210,6 @@ sg-master:
   portal-url: []
   hcs:
     url: https://horizonv2-sg.devframe.cp.horizon.omnissa.com/
-    edgehub:
-      url: https://horizonv2-em.devframe.cp.horizon.omnissa.com/
     hdcs:
       US:
         url: https://horizonv2-sg.devframe.cp.horizon.omnissa.com/
@@ -240,8 +227,6 @@ hm-master:
   portal-url: []
   hcs:
     url: https://horizonv2-monitoring.devframe.cp.horizon.omnissa.com/
-    edgehub:
-      url: https://horizonv2-em.devframe.cp.horizon.omnissa.com/
     hdcs:
       US:
         url: https://horizonv2-monitoring.devframe.cp.horizon.omnissa.com/
@@ -252,6 +237,23 @@ hm-master:
             mqtt:
         edgehub:
           url: https://horizonv2-em.devframe.cp.horizon.omnissa.com/
+cps-admin:
+  description: Component Stack - Admin
+  hcs:
+    url: https://admin-component-nightly-tests-component-nightly.devframe.cp.horizon.omnissa.com
+cps-agentmanager:
+  description: Component Stack - Agent Manager
+  hcs:
+    url: https://agentmanager-stack-component-nightly.devframe.cp.horizon.omnissa.com
+cps-connect:
+  description: Component Stack - Connect
+  hcs:
+    url: https://conect-new-test-component-nightly.devframe.cp.horizon.omnissa.com
+cps-lcm:
+  description: Component Stack - LCM
+  hcs:
+    url: https://lcm-stack-component-nightly.devframe.cp.horizon.omnissa.com
+
 hoc:
   es:
     us:

{hcs_cli-0.1.347 → hcs_cli-0.1.349}/hcs_cli/main.py

@@ -82,12 +82,29 @@ def cli(profile: str, hdc: str, no_upgrade_check: bool, no_telemetry: bool, **kw
 
         profile_support.ensure_default_production_profile()
 
+    _apply_readonly()
+
+
+def _apply_readonly():
+    data = ctxp.profile.current(exit_on_failure=False)
+    if not data:
+        return
+    is_readonly = data.get("readonly")
+    if isinstance(is_readonly, str):
+        is_readonly = is_readonly.strip().lower() in ("1", "true", "yes")
+    else:
+        is_readonly = bool(is_readonly)
+    if is_readonly:
+        from hcs_cli.support import readonly as readonly_support
+
+        ez_client.set_readonly(True, readonly_support.ALLOW_PATHS)
+
 
 def _check_upgrade():
     check_flag_from_env = env.bool("HCS_CLI_CHECK_UPGRADE", True)
     if not check_flag_from_env:
         return
-    if len(sys.argv) > 1 and sys.argv[1] == "upgrade":
+    if len(sys.argv) > 1 and sys.argv[1] in ("upgrade", "mcp"):
         return
     from hcs_core.util.versions import check_upgrade