insightfactory-cli 1.0.1.dev10__tar.gz → 1.0.2__tar.gz

insightfactory_cli-1.0.2/LICENSE

@@ -0,0 +1,5 @@
+Copyright 2026 insightfactory.ai. All rights reserved.
+
+This software is proprietary. No permission is granted to use, copy, modify,
+distribute, sublicense, or sell it except under a separate written agreement
+with insightfactory.ai.

{insightfactory_cli-1.0.1.dev10 → insightfactory_cli-1.0.2}/PKG-INFO

@@ -1,14 +1,16 @@
 Metadata-Version: 2.5
 Name: insightfactory-cli
-Version: 1.0.1.dev10
+Version: 1.0.2
 Summary: Profile-based authentication CLI for the InsightFactory Interfaces API
-Project-URL: Homepage, https://github.com/insightfactory-ai/insightfactory-cli
-Project-URL: Repository, https://github.com/insightfactory-ai/insightfactory-cli
+Project-URL: Homepage, https://insightfactory.ai
 Author-email: "insightfactory.ai Support" <support@insightfactory.ai>
+License-Expression: LicenseRef-Proprietary
+License-File: LICENSE
 Keywords: cli,insightfactory,oauth,pkce
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
+Classifier: License :: Other/Proprietary License
 Classifier: Programming Language :: Python :: 3 :: Only
 Classifier: Typing :: Typed
 Requires-Python: >=3.10
@@ -308,3 +310,8 @@ genuinely diverge:
 On-disk profile and token-cache paths, JSON shapes, and file permissions stay
 compatible with the Node CLI, so you can switch implementations without
 re-authenticating.
+
+## Licence
+
+Copyright 2026 insightfactory.ai. All rights reserved. This package is proprietary
+and may be used only under a separate written agreement with insightfactory.ai.

{insightfactory_cli-1.0.1.dev10 → insightfactory_cli-1.0.2}/README.md

@@ -292,3 +292,8 @@ genuinely diverge:
 On-disk profile and token-cache paths, JSON shapes, and file permissions stay
 compatible with the Node CLI, so you can switch implementations without
 re-authenticating.
+
+## Licence
+
+Copyright 2026 insightfactory.ai. All rights reserved. This package is proprietary
+and may be used only under a separate written agreement with insightfactory.ai.

{insightfactory_cli-1.0.1.dev10 → insightfactory_cli-1.0.2}/pyproject.toml

@@ -1,15 +1,18 @@
 [project]
 name = "insightfactory-cli"
-version = "1.0.1.dev10"
+version = "1.0.2"
 description = "Profile-based authentication CLI for the InsightFactory Interfaces API"
 readme = "README.md"
 requires-python = ">=3.10"
 authors = [{ name = "insightfactory.ai Support", email = "support@insightfactory.ai" }]
+license = "LicenseRef-Proprietary"
+license-files = ["LICENSE"]
 keywords = ["insightfactory", "cli", "oauth", "pkce"]
 classifiers = [
     "Development Status :: 5 - Production/Stable",
     "Environment :: Console",
     "Intended Audience :: Developers",
+    "License :: Other/Proprietary License",
     "Programming Language :: Python :: 3 :: Only",
     "Typing :: Typed",
 ]
@@ -18,8 +21,7 @@ classifiers = [
 if-cli = "if_cli.main:main"
 
 [project.urls]
-Homepage = "https://github.com/insightfactory-ai/insightfactory-cli"
-Repository = "https://github.com/insightfactory-ai/insightfactory-cli"
+Homepage = "https://insightfactory.ai"
 
 [build-system]
 requires = ["hatchling"]

{insightfactory_cli-1.0.1.dev10 → insightfactory_cli-1.0.2}/src/if_cli/http.py

@@ -188,7 +188,11 @@ def fetch_with_timeout(
     request = urllib.request.Request(url, data=data, headers=headers or {}, method=method)
     effective_timeout = resolve_request_timeout(timeout)
     try:
-        with urllib.request.urlopen(request, timeout=effective_timeout) as response:
+        # Callers pass endpoints validated by parse_http_url or derived from a
+        # validated factory origin. file: and other local schemes are rejected.
+        with urllib.request.urlopen(  # nosec B310
+            request, timeout=effective_timeout
+        ) as response:
             return HttpResponse(response.status, response.headers, response.read())
     except urllib.error.HTTPError as error:
         return HttpResponse(error.code, error.headers, error.read())

{insightfactory_cli-1.0.1.dev10 → insightfactory_cli-1.0.2}/src/if_cli/oauth.py

@@ -4,7 +4,7 @@ import base64
 import hashlib
 import json
 import secrets
-import subprocess
+import subprocess  # nosec B404
 import sys
 import time
 from http.server import BaseHTTPRequestHandler, HTTPServer
@@ -51,7 +51,8 @@ def open_browser(url: str, launcher: str | None = None) -> None:
     else:
         command, args = "xdg-open", [url]
     try:
-        subprocess.Popen(
+        # The executable is selected by platform and shell remains false.
+        subprocess.Popen(  # nosec B603
             [command, *args],
             stdout=subprocess.DEVNULL,
             stderr=subprocess.DEVNULL,

{insightfactory_cli-1.0.1.dev10 → insightfactory_cli-1.0.2}/uv.lock

@@ -34,7 +34,7 @@ wheels = [
 
 [[package]]
 name = "insightfactory-cli"
-version = "1.0.1"
+version = "1.0.2"
 source = { editable = "." }
 
 [package.dev-dependencies]