insightfactory-cli 1.0.0.dev2__tar.gz → 1.0.1.dev5__tar.gz

{insightfactory_cli-1.0.0.dev2 → insightfactory_cli-1.0.1.dev5}/.github/workflows/claude.yml

@@ -16,10 +16,12 @@ on:
   pull_request_review_comment:
     types: [created]
 
-# Least privilege at the workflow level; the reusable workflow requests what it
-# needs for its own jobs.
-permissions:
-  contents: read
+# No `permissions:` block here on purpose. A called workflow may only reduce the
+# caller's grant, never raise it, and GitHub validates that at startup -- so
+# capping this to `contents: read` made every run fail with `startup_failure`
+# before any job ran. if_s_claude_review.yml declares the scopes it needs
+# (id-token/pull-requests/issues write, actions read); leaving the caller
+# unrestricted is what every other repo in the org that calls it does.
 
 jobs:
   claude:

{insightfactory_cli-1.0.0.dev2 → insightfactory_cli-1.0.1.dev5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: insightfactory-cli
-Version: 1.0.0.dev2
+Version: 1.0.1.dev5
 Summary: Profile-based authentication CLI for the InsightFactory Interfaces API
 Project-URL: Homepage, https://github.com/insightfactory-ai/insightfactory-cli
 Project-URL: Repository, https://github.com/insightfactory-ai/insightfactory-cli

{insightfactory_cli-1.0.0.dev2 → insightfactory_cli-1.0.1.dev5}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "insightfactory-cli"
-version = "1.0.0.dev2"
+version = "1.0.1.dev5"
 description = "Profile-based authentication CLI for the InsightFactory Interfaces API"
 readme = "README.md"
 requires-python = ">=3.10"

{insightfactory_cli-1.0.0.dev2 → insightfactory_cli-1.0.1.dev5}/tests/test_cli.py

@@ -2,6 +2,7 @@ from __future__ import annotations
 
 import json
 import shutil
+from importlib.metadata import version
 from pathlib import Path
 
 import pytest
@@ -112,7 +113,11 @@ def test_an_unknown_command_fails_with_the_command_reference():
 def test_version_prints_the_package_version():
     result = run_cli(["--version"])
     assert result.returncode == 0
-    assert result.stdout.strip() == "1.0.0"
+    # Compare against the installed metadata, which is the same source main.py
+    # reads, rather than a literal. The property under test is that --version
+    # reports the package's own version -- not what that version happens to be --
+    # so a release bump should not have to edit this test.
+    assert result.stdout.strip() == version("insightfactory-cli")
 
 
 def test_login_parses_profile_host_and_no_browser_flags():

{insightfactory_cli-1.0.0.dev2 → insightfactory_cli-1.0.1.dev5}/uv.lock

@@ -34,7 +34,7 @@ wheels = [
 
 [[package]]
 name = "insightfactory-cli"
-version = "1.0.0"
+version = "1.0.1"
 source = { editable = "." }
 
 [package.dev-dependencies]