keboola-cli 0.96.1__tar.gz → 0.96.2__tar.gz

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: keboola-cli
-Version: 0.96.1
+Version: 0.96.2
 Summary: AI-friendly CLI for managing Keboola projects
 Author-email: Keboola <dev@keboola.com>
 License-Expression: Apache-2.0

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "keboola-cli"
-version = "0.96.1"
+version = "0.96.2"
 description = "AI-friendly CLI for managing Keboola projects"
 readme = "README.md"
 requires-python = ">=3.12"

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/src/keboola_agent_cli/changelog.py

@@ -26,6 +26,17 @@ from .constants import CHANGELOG_HEADLINE_MAX_CHARS
 
 # Ordered newest-first.  Each value is a list of brief one-line descriptions.
 CHANGELOG: dict[str, list[str]] = {
+    "0.96.2": [
+        "Fix (#825): the `data-app` commands now label the app link `Open the app:` and the "
+        "Keboola UI link `Configuration:`, so it is clear which link opens what. Before, the "
+        "labels were `App URL:` and `UI URL:`, or only `URL:` in `data-app detail` and "
+        "`data-app create`. In a terminal, `data-app password`, `create --wait` and "
+        "`deploy --wait` show the links in a panel that looks like the `auth login` device-code "
+        "panel. Outside a terminal, the output stays plain lines without a panel. The `--json` "
+        "output does not change.",
+        "Note (#819, #820, #822, #823): housekeeping with no user-facing change. Dependency "
+        "updates in the web UI and its backend (fast-uri, brace-expansion, fastify, dompurify).",
+    ],
     "0.96.1": [
         "BREAKING (#813): `kbagent data-app password` no longer prints the password unless "
         "you pass `--reveal`. When an AI agent ran the command, the password went into the model "

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/src/keboola_agent_cli/commands/_data_app_password.py

@@ -33,6 +33,7 @@ from typing import Annotated, Any, NoReturn
 import typer
 from rich.console import Console
 from rich.markup import escape
+from rich.panel import Panel
 from rich.text import Text
 
 from ..auth import environment
@@ -51,11 +52,12 @@ DELIVERED_TO_STDOUT = "stdout"
 _BROWSER_OPEN_WAIT_SECONDS = 2.0
 
 _COPY_PROMPT_TIMEOUT_SECONDS = 120.0
+_PANEL_TITLE = "Data app password"
 _COPY_PROMPT_HINT = "Press c to copy the password, Enter to finish"
 # Enter arrives as "\n" in cbreak mode on POSIX and as "\r" from msvcrt on Windows.
 _COPY_PROMPT_FINISH_KEYS = frozenset({"\n", "\r", "\x1b", "q"})
-# The terminal flow prints the UI URL itself, so its lines only refer to it.
-_UI_URL_SHOWS_IT = "The UI URL shows it under Open App after login."
+# The terminal flow prints the Configuration link itself, so its lines only refer to it.
+_UI_URL_SHOWS_IT = "The Configuration page shows it under Open App after login."
 
 # -- Shared options: one definition for `password`, `create` and `deploy` -------
 
@@ -206,29 +208,67 @@ def _non_interactive_message(
     )
 
 
-def _print_line(console: Console, *parts: str | tuple[str, str]) -> None:
+def _print_line(console: Console, *parts: str | Text | tuple[str, str]) -> None:
     """One line of plain text parts: no markup parsing, no highlighting, and a
     URL in it is never folded (non-TTY consoles wrap at 80 columns)."""
     console.print(Text.assemble(*parts), highlight=False, soft_wrap=True)
 
 
-def _print_links(console: Console, *, app_url: str, ui_url: str | None, app_opened: bool) -> None:
-    _print_line(console, ("  App URL:", "bold"), f" {app_url or '-'}")
-    _print_line(console, ("  UI URL:", "bold"), f"  {ui_url or '-'}")
+def _print_password_block(
+    console: Console,
+    status: Text,
+    *,
+    app_url: str,
+    ui_url: str | None,
+    app_opened: bool,
+    password: str | None = None,
+) -> None:
+    """The status line, the two links and (``--reveal``) the password.
+
+    In a terminal they go in a panel laid out like the device-login one: a
+    plain label, a blank line, the link. Anywhere else (a pipe, a CI log, an
+    agent) they stay plain lines, so a URL is never folded and never carries
+    a panel border.
+    """
+    app_link = (app_url, _url_copy.LINK_STYLE) if app_url else "-"
+    # The app link is the one to open, so only it gets the link color.
+    ui_link = (ui_url, "bold") if ui_url else "-"
+    password_part = (password or "", "bold yellow")
+    if console.is_terminal:
+        parts: list[str | Text | tuple[str, str]] = [
+            status,
+            "\n\nOpen the app:\n\n",
+            app_link,
+            "\n\nConfiguration:\n\n",
+            ui_link,
+        ]
+        if app_opened:
+            parts.append("\n\nOpened the app in the browser.")
+        if password is not None:
+            parts += ["\n\nPassword: ", password_part]
+        console.print(Panel(Text.assemble(*parts), title=_PANEL_TITLE, expand=False))
+        return
+    _print_line(console, status)
+    _print_line(console, ("  Open the app:", "bold"), "  ", app_link)
+    _print_line(console, ("  Configuration:", "bold"), " ", ui_link)
     if app_opened:
         console.print("  Opened the app in the browser.")
+    if password is not None:
+        _print_line(console, "\nPassword: ", password_part)
 
 
 def _print_result(console: Console, data: dict[str, Any]) -> None:
     label = (
         ("Success:", "bold green") if data["password_delivered_to"] else ("Warning:", "bold yellow")
     )
-    _print_line(console, label, f" {data['message']}")
-    _print_links(
-        console, app_url=data["app_url"], ui_url=data["ui_url"], app_opened=data["app_opened"]
+    _print_password_block(
+        console,
+        Text.assemble(label, f" {data['message']}"),
+        app_url=data["app_url"],
+        ui_url=data["ui_url"],
+        app_opened=data["app_opened"],
+        password=data.get("password"),
     )
-    if "password" in data:
-        _print_line(console, ("\nPassword:", "bold yellow"), f" {data['password']}")
 
 
 def _copy_on_keypress(console: Console, lookup: DataAppPassword, *, app_opened: bool) -> bool:
@@ -239,15 +279,19 @@ def _copy_on_keypress(console: Console, lookup: DataAppPassword, *, app_opened:
         hint=_COPY_PROMPT_HINT,
         finish_keys=_COPY_PROMPT_FINISH_KEYS,
     )
-    if not wait.enabled:
-        console.print(
-            f"[bold yellow]Warning:[/bold yellow] No clipboard tool was found, so the password "
-            f"of data app {escape(lookup.app_id)} cannot be copied. {_UI_URL_SHOWS_IT}"
+    if wait.enabled:
+        status = Text(f"The password of data app {lookup.app_id} is ready to copy.")
+    else:
+        status = Text.assemble(
+            ("Warning:", "bold yellow"),
+            f" No clipboard tool was found, so the password of data app {lookup.app_id} "
+            f"cannot be copied. {_UI_URL_SHOWS_IT}",
         )
-        _print_links(console, app_url=lookup.app_url, ui_url=lookup.ui_url, app_opened=app_opened)
+    _print_password_block(
+        console, status, app_url=lookup.app_url, ui_url=lookup.ui_url, app_opened=app_opened
+    )
+    if not wait.enabled:
         return False
-    console.print(f"The password of data app {escape(lookup.app_id)} is ready to copy.")
-    _print_links(console, app_url=lookup.app_url, ui_url=lookup.ui_url, app_opened=app_opened)
     wait.prompt_and_wait(lookup.password, _COPY_PROMPT_TIMEOUT_SECONDS)
     if wait.copied:
         return True

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/src/keboola_agent_cli/commands/_url_copy.py

@@ -28,6 +28,11 @@ from rich.console import Console
 
 _POSIX = sys.platform != "win32"
 
+# Rich style of the main link the user opens. The device-login panel
+# (commands/auth.py) and the data-app app link (commands/data_app.py,
+# commands/_data_app_password.py) share this one definition.
+LINK_STYLE = "bold cyan"
+
 # A clipboard command that hangs (e.g. xclip waiting on an unreachable X
 # display) must not hang the command that called it.
 _CLIPBOARD_TIMEOUT_SECONDS = 5.0

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/src/keboola_agent_cli/commands/auth.py

@@ -54,7 +54,7 @@ from ._helpers import (
     map_error_to_exit_code,
     read_password_stdin,
 )
-from ._url_copy import CopyableUrlWait
+from ._url_copy import LINK_STYLE, CopyableUrlWait
 
 auth_app = typer.Typer(
     help="Programmatic browser login (PKCE / device code) -- user-scoped sessions"
@@ -311,7 +311,7 @@ def _device_login_panel(authorization: DeviceAuthorization) -> Panel:
         lines = [
             "Open this link to finish signing in (code already filled in):",
             "",
-            f"[bold cyan]{escape(complete)}[/bold cyan]",
+            f"[{LINK_STYLE}]{escape(complete)}[/{LINK_STYLE}]",
             "",
             "Or enter the code by hand at this URL:",
             "",
@@ -323,7 +323,7 @@ def _device_login_panel(authorization: DeviceAuthorization) -> Panel:
         lines = [
             "Open this URL and enter the code to finish signing in:",
             "",
-            f"[bold cyan]{escape(authorization.verification_uri)}[/bold cyan]",
+            f"[{LINK_STYLE}]{escape(authorization.verification_uri)}[/{LINK_STYLE}]",
             "",
             f"Code: [bold yellow]{escape(authorization.user_code)}[/bold yellow]",
         ]

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/src/keboola_agent_cli/commands/context.py

@@ -1460,9 +1460,9 @@ git block, slug, runtime size, encrypted secrets) with the Data Science API
     Give the user the password of a password-protected app WITHOUT printing
     it (0.96.1+; older versions printed it and needed a Manage API token).
     Project token only (static or session), no Manage token. In a terminal
-    (human mode, stdin + stdout a TTY, not a background job) it shows the app
-    URL and `ui_url`, then waits: `c` copies the password, Enter / Esc / q
-    finishes, 120 s timeout.
+    (human mode, stdin + stdout a TTY, not a background job) it prints the
+    links `Open the app:` (`app_url`) and `Configuration:` (`ui_url`), then
+    waits: `c` copies the password, Enter / Esc / q finishes, 120 s timeout.
     Without a terminal or with --json there is no prompt: only --copy copies
     it (the clipboard tool gets it on stdin). Nothing copied -> exit 0 with
     `password_delivered_to: null`; `ui_url` is the Keboola UI page that shows

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/src/keboola_agent_cli/commands/data_app.py

@@ -41,6 +41,7 @@ from ._helpers import (
     get_service,
     map_error_to_exit_code,
 )
+from ._url_copy import LINK_STYLE
 
 # Canonical Keboola help-doc references appended to each --help epilog so
 # operators have a one-click path to the rule a flag enforces.
@@ -198,7 +199,12 @@ def data_app_detail(
             ),
             c.print(f"  [bold]Size:[/bold] {d.get('size', '')}"),
             c.print(f"  [bold]Auto-suspend:[/bold] {d.get('auto_suspend_after_seconds', '?')}s"),
-            c.print(f"  [bold]URL:[/bold] {d.get('url', '')}"),
+            c.print(
+                f"  [bold]Open the app:[/bold] "
+                f"[{LINK_STYLE}]{escape(d.get('url') or '')}[/{LINK_STYLE}]",
+                highlight=False,
+                soft_wrap=True,
+            ),
             c.print(f"  [bold]Last started:[/bold] {d.get('last_start_timestamp', '')}"),
             c.print(f"  [bold]Git:[/bold] {d.get('git', {})}"),
         ),
@@ -238,7 +244,12 @@ def _print_create_result(console: Console, result: dict[str, Any]) -> None:
                 "not be injected; an app that reads Storage will serve no data"
             )
         if result.get("url"):
-            console.print(f"  [bold]URL:[/bold] {result['url']}")
+            console.print(
+                f"  [bold]Open the app:[/bold] "
+                f"[{LINK_STYLE}]{escape(result['url'])}[/{LINK_STYLE}]",
+                highlight=False,
+                soft_wrap=True,
+            )
         console.print(
             f"  [bold]State:[/bold] {result.get('state', '?')} "
             f"(desired={result.get('desired_state', '?')})"

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/tests/conftest.py

@@ -1,9 +1,12 @@
 """Shared test fixtures for Keboola Agent CLI tests."""
 
 from pathlib import Path
+from typing import Any
 
 import pytest
+from rich.console import Console
 
+from keboola_agent_cli import output
 from keboola_agent_cli.config_store import ConfigStore
 from keboola_agent_cli.output import OutputFormatter
 
@@ -21,6 +24,23 @@ def _deterministic_console_width(monkeypatch: pytest.MonkeyPatch) -> None:
     monkeypatch.setenv("COLUMNS", "200")
 
 
+@pytest.fixture
+def force_colour(monkeypatch: pytest.MonkeyPatch) -> None:
+    """Make the CLI print ANSI colour codes under ``CliRunner``.
+
+    ``OutputFormatter`` turns the terminal off when stdout is not a TTY, and
+    ``CliRunner`` is not one, so a test that pins a Rich style would otherwise
+    only see plain text.
+    """
+    real_console = output.Console
+
+    def _colour_console(**kwargs: Any) -> Console:
+        kwargs.update(force_terminal=True, color_system="standard", no_color=False)
+        return real_console(**kwargs)
+
+    monkeypatch.setattr(output, "Console", _colour_console)
+
+
 @pytest.fixture(autouse=True)
 def _clear_updated_from(monkeypatch: pytest.MonkeyPatch) -> None:
     """Prevent auto-update changelog leaking between tests."""

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/tests/test_cli_auth.py

@@ -247,6 +247,32 @@ class TestLogin:
         assert "Or enter the code by hand at this URL:" in result.output
         assert "https://connection.keboola.com/device?user_code=ABCD-EFGH" in result.output
 
+    def test_device_login_panel_colours(self, tmp_path: Path, force_colour) -> None:
+        """The link is bold cyan, the plain URL bold, the code bold yellow.
+
+        `data-app` prints its app link in the same bold cyan (`LINK_STYLE`).
+        """
+        config_dir = tmp_path / "c"
+        config_dir.mkdir()
+        svc = MagicMock()
+        self._fire_device_prompt(
+            svc,
+            DeviceAuthorization(
+                deviceCode="device-code-1",
+                userCode="ABCD-EFGH",
+                verificationUri="https://connection.keboola.com/device",
+                verificationUriComplete=(
+                    "https://connection.keboola.com/device?user_code=ABCD-EFGH"
+                ),
+            ),
+        )
+        result = _invoke(config_dir, svc, ["auth", "login", "--device-code"])
+        assert result.exit_code == 0, result.output
+        link = "https://connection.keboola.com/device?user_code=ABCD-EFGH"
+        assert f"\x1b[1;36m{link}\x1b[0m" in result.output
+        assert "\x1b[1mhttps://connection.keboola.com/device\x1b[0m" in result.output
+        assert "\x1b[1;33mABCD-EFGH\x1b[0m" in result.output
+
     def test_device_login_panel_omits_one_click_link_when_absent(self, tmp_path: Path) -> None:
         config_dir = tmp_path / "c"
         config_dir.mkdir()

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/tests/test_data_app_cli.py

@@ -419,6 +419,86 @@ class TestDataAppCreateValidation:
         assert "DRY RUN" in result.output
 
 
+# ---------------------------------------------------------------------------
+# data-app detail / create -- the link to the running app
+# ---------------------------------------------------------------------------
+
+APP_URL = "https://x.hub.example.com"
+BOLD_CYAN = "\x1b[1;36m"  # the style of the `auth login --device-code` link
+RESET = "\x1b[0m"
+
+
+class TestDataAppLinkOutput:
+    def _detail(self, tmp_path: Path) -> Any:
+        config_dir = tmp_path / "config"
+        config_dir.mkdir()
+        store = _setup_config(config_dir, {"prod": {"token": TEST_TOKEN}})
+        mock = MagicMock()
+        mock.get_data_app.return_value = {
+            "project_alias": "prod",
+            "app_id": "42",
+            "name": "App",
+            "url": APP_URL,
+        }
+        return _invoke(
+            ["data-app", "detail", "--project", "prod", "--app-id", "42"],
+            store=store,
+            data_app_mock=mock,
+        )
+
+    def _create(self, tmp_path: Path) -> Any:
+        config_dir = tmp_path / "config"
+        config_dir.mkdir()
+        store = _setup_config(config_dir, {"prod": {"token": TEST_TOKEN}})
+        mock = MagicMock()
+        mock.create_data_app.return_value = {
+            "app_id": "42",
+            "config_id": "ulid",
+            "workspace": True,
+            "url": APP_URL,
+            "state": "created",
+            "desired_state": "stopped",
+            "message": "created",
+        }
+        return _invoke(
+            [
+                "data-app",
+                "create",
+                "--project",
+                "prod",
+                "--name",
+                "App",
+                "--slug",
+                "my-app",
+                "--git-repo",
+                "https://github.com/o/r",
+                "--git-public",
+                "--auth",
+                "public",
+                "--no-deploy",
+            ],
+            store=store,
+            data_app_mock=mock,
+        )
+
+    @pytest.mark.parametrize("command", ["_detail", "_create"])
+    def test_app_link_is_labelled_by_what_it_opens(self, tmp_path: Path, command: str) -> None:
+        result = getattr(self, command)(tmp_path)
+
+        assert result.exit_code == 0, result.output
+        assert f"Open the app: {APP_URL}" in result.output
+        assert "  URL:" not in result.output
+
+    @pytest.mark.parametrize("command", ["_detail", "_create"])
+    def test_app_link_is_bold_cyan_like_the_device_login_link(
+        self, tmp_path: Path, force_colour, command: str
+    ) -> None:
+        result = getattr(self, command)(tmp_path)
+
+        assert result.exit_code == 0, result.output
+        assert f"{BOLD_CYAN}{APP_URL}{RESET}" in result.output
+
+
 # ---------------------------------------------------------------------------
 # data-app deploy
 # ---------------------------------------------------------------------------

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/tests/test_data_app_password.py

@@ -20,6 +20,7 @@ from __future__ import annotations
 import json
 import logging
 import os
+import re
 import select
 import subprocess
 import sys
@@ -67,6 +68,14 @@ CONFIG_URL = "https://connection.keboola.com/v2/storage/components/keboola.data-
 APP_URL = "https://app-42.hub.keboola.com"
 UI_URL = "https://connection.keboola.com/admin/projects/258/branch/default/data-apps/cfg-1"
 
+# Rich styles of the `auth login --device-code` panel: its link, its plain
+# URL, its code value and its hint.
+BOLD_CYAN = "\x1b[1;36m"
+BOLD = "\x1b[1m"
+BOLD_YELLOW = "\x1b[1;33m"
+CYAN = "\x1b[36m"
+RESET = "\x1b[0m"
+
 
 class _Clipboard:
     """Fake copier returned by the patched ``detect_clipboard``."""
@@ -161,6 +170,14 @@ def _telemetry_payload(argv: list[str], result: Result, monkeypatch: pytest.Monk
     return repr(sent)
 
 
+def _assert_labelled_links(output: str) -> None:
+    """The app link and the configuration page, named by what each one opens."""
+    assert f"Open the app:  {APP_URL}" in output
+    assert f"Configuration: {UI_URL}" in output
+    assert "App URL" not in output
+    assert "UI URL" not in output
+
+
 def _assert_no_leak(
     argv: list[str],
     result: Result,
@@ -211,6 +228,17 @@ class TestWithoutTerminal:
             "message": data["message"],
         }
 
+    @pytest.mark.parametrize("flags", [(), ("--reveal",)])
+    def test_human_output_labels_the_two_links(
+        self, config_dir, httpx_mock, caplog, flags: tuple[str, ...]
+    ) -> None:
+        _mock_api(httpx_mock)
+
+        result = _run(_argv(config_dir, *flags, json_mode=False), caplog)
+
+        assert result.exit_code == 0, result.output
+        _assert_labelled_links(result.stdout)
+
     @pytest.mark.parametrize("json_mode", [True, False])
     def test_copy_puts_the_password_on_the_clipboard(
         self, config_dir, httpx_mock, caplog, monkeypatch, json_mode: bool
@@ -289,6 +317,16 @@ class TestTerminalPrompt:
         assert "not copied" not in result.stdout
         _assert_no_leak(argv, result, caplog, monkeypatch)
 
+    def test_prompt_labels_the_two_links(self, config_dir, httpx_mock, caplog, monkeypatch) -> None:
+        _mock_api(httpx_mock)
+        _clipboard(monkeypatch)
+        _terminal(monkeypatch, ["\n"])
+
+        result = _run(_argv(config_dir, json_mode=False), caplog)
+
+        assert result.exit_code == 0, result.output
+        _assert_labelled_links(result.stdout)
+
     @pytest.mark.parametrize("key", ["\n", "\r", "\x1b", "q"])
     def test_finish_key_ends_without_copying(
         self, config_dir, httpx_mock, caplog, monkeypatch, key: str
@@ -318,6 +356,7 @@ class TestTerminalPrompt:
         assert result.exit_code == 0, result.output
         assert clipboard.copied == []
         assert "No key pressed for 120 s. The password was not copied." in result.stdout
+        assert "The Configuration page shows it under Open App after login." in result.stdout
         _assert_no_leak(argv, result, caplog, monkeypatch)
 
     def test_failed_copy_says_so_and_points_to_the_ui(
@@ -334,6 +373,7 @@ class TestTerminalPrompt:
         assert clipboard.copied == [SENTINEL]
         assert "Copied to clipboard" not in result.stdout
         assert "The password was not copied." in result.stdout
+        assert "The Configuration page shows it under Open App after login." in result.stdout
         assert UI_URL in result.stdout
         _assert_no_leak(argv, result, caplog, monkeypatch)
 
@@ -349,7 +389,8 @@ class TestTerminalPrompt:
         assert result.exit_code == 0, result.output
         assert "Press c" not in result.stdout
         assert "cannot be copied" in result.stdout
-        assert UI_URL in result.stdout
+        assert "The Configuration page shows it under Open App after login." in result.stdout
+        _assert_labelled_links(result.stdout)
         _assert_no_leak(argv, result, caplog, monkeypatch)
 
     def test_copy_flag_in_a_terminal_copies_without_the_prompt(
@@ -488,6 +529,88 @@ class TestAuthHeaders:
             assert "X-KBC-ManageApiToken" not in request.headers
 
 
+# ---------------------------------------------------------------------------
+# Colours: the styles of the `auth login --device-code` panel
+# ---------------------------------------------------------------------------
+
+
+class TestColours:
+    def test_only_the_app_link_is_bold_cyan_like_the_device_login_link(
+        self, config_dir, httpx_mock, caplog, force_colour
+    ) -> None:
+        _mock_api(httpx_mock)
+
+        result = _run(_argv(config_dir, json_mode=False), caplog)
+
+        assert result.exit_code == 0, result.output
+        assert f"{BOLD_CYAN}{APP_URL}{RESET}" in result.stdout
+        assert f"{BOLD}{UI_URL}{RESET}" in result.stdout
+
+    def test_revealed_password_is_bold_yellow_like_the_device_login_code(
+        self, config_dir, httpx_mock, caplog, force_colour
+    ) -> None:
+        _mock_api(httpx_mock)
+
+        result = _run(_argv(config_dir, "--reveal", json_mode=False), caplog)
+
+        assert result.exit_code == 0, result.output
+        assert f"Password: {BOLD_YELLOW}{SENTINEL}{RESET}" in result.stdout
+
+    def test_prompt_hint_is_cyan_like_the_device_login_hint(
+        self, config_dir, httpx_mock, caplog, monkeypatch, force_colour
+    ) -> None:
+        _mock_api(httpx_mock)
+        _clipboard(monkeypatch)
+        _terminal(monkeypatch, ["\n"])
+
+        result = _run(_argv(config_dir, json_mode=False), caplog)
+
+        assert result.exit_code == 0, result.output
+        assert f"{CYAN}Press c to copy the password, Enter to finish{RESET}" in result.stdout
+
+
+# ---------------------------------------------------------------------------
+# Panel: in a terminal the block is laid out like the device-login panel
+# ---------------------------------------------------------------------------
+
+_ANSI = re.compile(r"\x1b\[[0-9;]*m")
+
+
+def _plain(output: str) -> str:
+    return _ANSI.sub("", output)
+
+
+class TestPanel:
+    @pytest.mark.parametrize("flags", [(), ("--reveal",)])
+    def test_terminal_output_is_one_panel(
+        self, config_dir, httpx_mock, caplog, monkeypatch, force_colour, flags
+    ) -> None:
+        monkeypatch.setenv("COLUMNS", "200")
+        _mock_api(httpx_mock)
+        if not flags:
+            _clipboard(monkeypatch)
+            _terminal(monkeypatch, ["\n"])
+
+        result = _run(_argv(config_dir, *flags, json_mode=False), caplog)
+
+        assert result.exit_code == 0, result.output
+        lines = _plain(result.stdout).splitlines()
+        assert "Data app password" in lines[0]
+        rows = [line[1:-1].strip() for line in lines if line.startswith("│")]
+        # Like the device-login panel: a plain label, a blank line, the link.
+        assert rows[1:9] == ["", "Open the app:", "", APP_URL, "", "Configuration:", "", UI_URL]
+        assert rows[9:] == (["", f"Password: {SENTINEL}"] if flags else [])
+
+    def test_no_panel_outside_a_terminal(self, config_dir, httpx_mock, caplog) -> None:
+        _mock_api(httpx_mock)
+
+        result = _run(_argv(config_dir, json_mode=False), caplog)
+
+        assert result.exit_code == 0, result.output
+        assert "╭" not in result.stdout
+        _assert_labelled_links(result.stdout)
+
+
 # ---------------------------------------------------------------------------
 # After `deploy --wait` / `create --wait`
 # ---------------------------------------------------------------------------
@@ -659,6 +782,23 @@ class TestAfterDeploy:
         assert "Press c to copy the password, Enter to finish" in result.stdout
         _assert_no_leak(argv, result, caplog, monkeypatch)
 
+    @pytest.mark.parametrize("command", ["deploy", "create"])
+    def test_wait_with_reveal_labels_the_two_links(
+        self, config_dir, httpx_mock, caplog, command: str
+    ) -> None:
+        if command == "create":
+            _mock_create(httpx_mock)
+        else:
+            _mock_deploy_patch(httpx_mock)
+        _mock_deployed_app(httpx_mock)
+        build = _create_argv if command == "create" else _deploy_argv
+
+        result = _run(build(config_dir, "--wait", "--reveal", json_mode=False), caplog)
+
+        assert result.exit_code == 0, result.output
+        assert "is in this output (--reveal)." in result.stdout
+        _assert_labelled_links(result.stdout)
+
     @pytest.mark.parametrize("json_mode", [True, False])
     @pytest.mark.parametrize("command", ["deploy", "create"])
     def test_no_flag_and_no_prompt_reads_nothing(

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/tests/test_url_copy.py

@@ -92,6 +92,16 @@ def test_on_prompt_prints_hint_when_enabled() -> None:
     assert "Press c to copy the link" in _output(console)
 
 
+def test_on_prompt_hint_is_cyan() -> None:
+    """The style of the `auth login --device-code` hint, also used by `data-app password`."""
+    console = Console(
+        file=io.StringIO(), force_terminal=True, color_system="standard", no_color=False, width=80
+    )
+    wait = CopyableUrlWait(console, copier=_Recorder(), interactive=True)
+    wait.on_prompt("https://example.com/x")
+    assert "\x1b[36mPress c to copy the link\x1b[0m" in _output(console)
+
+
 def test_on_prompt_silent_when_disabled(monkeypatch: pytest.MonkeyPatch) -> None:
     # Same staging as test_disabled_without_backend: no detectable backend.
     monkeypatch.setattr(_url_copy, "detect_clipboard", lambda: None)

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/web/frontend/package-lock.json

@@ -2376,9 +2376,9 @@
       "license": "MIT"
     },
     "node_modules/dompurify": {
-      "version": "3.4.13",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.13.tgz",
-      "integrity": "sha512-2vmYIoqjze2d+kakP8S/nS5shfsl587kzwEjcGlTdiksUVgFHnFCsLYDVj/JNqJVOQZGSYBTmuycv0PodwmnMQ==",
+      "version": "3.4.16",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.16.tgz",
+      "integrity": "sha512-sqo+pNp3qRhCIpbgRi1y8Tgk27Bo2Ry7w0dC1NBeNTdZChWjz9Xb/KOoZbRP/R6pQZ80Qw8YhXw13hWWBbMRnQ==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"

{keboola_cli-0.96.1 → keboola_cli-0.96.2}/web/frontend/package.json

@@ -32,6 +32,6 @@
     "vitest": "^4.1.11"
   },
   "overrides": {
-    "dompurify": "^3.4.13"
+    "dompurify": "^3.4.16"
   }
 }