levain-cli 0.1.11__tar.gz → 0.1.14__tar.gz

{levain_cli-0.1.11 → levain_cli-0.1.14}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: levain-cli
-Version: 0.1.11
+Version: 0.1.14
 Summary: Levain recipe toolchain: PlusCal validator, TLC model checking, and GraphState codegen for agent recipes
 License-Expression: Apache-2.0
 License-File: LICENSE
@@ -9,7 +9,7 @@ Requires-Dist: httpx==0.28.1
 Requires-Dist: pydantic==2.13.4
 Requires-Dist: tree-sitter-tlaplus==1.5.0
 Requires-Dist: tree-sitter==0.26.0
-Requires-Dist: typer==0.27.2
+Requires-Dist: typer==0.27.3
 Provides-Extra: mcp
 Requires-Dist: fastmcp==4.0.5; extra == 'mcp'
 Description-Content-Type: text/markdown

{levain_cli-0.1.11 → levain_cli-0.1.14}/levain_recipe/cli.py

@@ -337,14 +337,28 @@ def git_credential_cmd(
         raise typer.Exit(1)
     scope, slug = repo
 
+    # A ``workspace-<slug>`` repo in a workspace org is an agent's
+    # durable workspace, minted on a dedicated route. An agent whose
+    # own slug carries the prefix shadows it, so the recipe route is
+    # tried first and the workspace route is the 404 fallback.
+    mint_paths = [f"{api_base()}/api/v1/{scope}/{slug}/git-credential"]
+    if scope == "agents" and slug.startswith("workspace-"):
+        mint_paths.append(
+            f"{api_base()}/api/v1/agents/"
+            f"{slug.removeprefix('workspace-')}/workspace/git-credential"
+        )
+
     api = api_base()
     try:
         with _client() as client:
             token = access_token(api, client)
-            resp = client.post(
-                f"{api}/api/v1/{scope}/{slug}/git-credential",
-                headers={"Authorization": f"Bearer {token}"},
-            )
+            for mint_path in mint_paths:
+                resp = client.post(
+                    mint_path,
+                    headers={"Authorization": f"Bearer {token}"},
+                )
+                if resp.status_code != 404:
+                    break
     except AuthError as exc:
         print(f"levain git-credential: {exc}", file=sys.stderr)
         raise typer.Exit(1) from None
@@ -378,3 +392,70 @@ def _repo_from_git_path(path: str) -> tuple[str, str] | None:
     else:
         return None
     return scope, repo.removesuffix(".git")
+
+
+# ── Inbound webhooks ──────────────────────────────────────
+
+
+webhook_app = typer.Typer(
+    name="webhook",
+    help="Manage an agent's inbound webhook.",
+    add_completion=False,
+)
+app.add_typer(webhook_app)
+
+
+def _webhook_request(method: str, path: str) -> None:
+    from .auth import AuthError, access_token, api_base
+
+    api = api_base()
+    try:
+        with _client() as client:
+            token = access_token(api, client)
+            resp = client.request(
+                method,
+                f"{api}{path}",
+                headers={"Authorization": f"Bearer {token}"},
+            )
+    except AuthError as exc:
+        print(f"Error: {exc}", file=sys.stderr)
+        raise typer.Exit(1) from None
+    if resp.status_code >= 400:
+        try:
+            detail = resp.json().get("detail")
+        except ValueError:
+            detail = None
+        suffix = f" — {detail}" if detail else ""
+        print(f"Error: HTTP {resp.status_code}{suffix}", file=sys.stderr)
+        raise typer.Exit(1)
+    print(json.dumps(resp.json(), indent=2))
+
+
+@webhook_app.command("create")
+def webhook_create_cmd(
+    agent: Annotated[str, typer.Argument(help="Agent id or slug.")],
+) -> None:
+    """Create the agent's inbound webhook.
+
+    Prints the webhook once, including the URL with its embedded
+    secret — store it; it cannot be retrieved later. POST a JSON body
+    to the URL to dispatch a run of the agent, or include a top-level
+    ``session_id`` to take a turn on an existing session.
+    """
+    _webhook_request("POST", f"/api/v1/agents/{agent}/webhooks")
+
+
+@webhook_app.command("rotate")
+def webhook_rotate_cmd(
+    agent: Annotated[str, typer.Argument(help="Agent id or slug.")],
+) -> None:
+    """Rotate the webhook secret and print the fresh URL (shown once)."""
+    _webhook_request("POST", f"/api/v1/agents/{agent}/webhooks/rotate")
+
+
+@webhook_app.command("delete")
+def webhook_delete_cmd(
+    agent: Annotated[str, typer.Argument(help="Agent id or slug.")],
+) -> None:
+    """Delete the agent's inbound webhook."""
+    _webhook_request("DELETE", f"/api/v1/agents/{agent}/webhooks")

{levain_cli-0.1.11 → levain_cli-0.1.14}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "levain-cli"
-version = "0.1.11"
+version = "0.1.14"
 description = "Levain recipe toolchain: PlusCal validator, TLC model checking, and GraphState codegen for agent recipes"
 readme = "README.md"
 license = "Apache-2.0"
@@ -27,7 +27,7 @@ dependencies = [
     "tree-sitter==0.26.0",
     "tree-sitter-tlaplus==1.5.0",
     "pydantic==2.13.4",
-    "typer==0.27.2",
+    "typer==0.27.3",
     # Sign-in and credential minting. Imported lazily so validation
     # never pays for it.
     "httpx==0.28.1",