lightnow-cli 1.0.0__tar.gz → 1.0.1__tar.gz

{lightnow_cli-1.0.0 → lightnow_cli-1.0.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lightnow-cli
-Version: 1.0.0
+Version: 1.0.1
 Summary: Official LightNow CLI for MCP registry discovery, client config sync, and local MCP runner workflows
 Project-URL: Homepage, https://github.com/lightnow-ai/lightnow-cli
 Project-URL: Repository, https://github.com/lightnow-ai/lightnow-cli
@@ -42,6 +42,8 @@ Description-Content-Type: text/markdown
 
 # LightNow CLI
 
+[![PyPI](https://img.shields.io/pypi/v/lightnow-cli.svg)](https://pypi.org/project/lightnow-cli/)
+
 The **LightNow CLI** connects your local MCP clients with LightNow.
 
 Use it to discover MCP servers, sync client configurations, and run

{lightnow_cli-1.0.0 → lightnow_cli-1.0.1}/README.md

@@ -1,5 +1,7 @@
 # LightNow CLI
 
+[![PyPI](https://img.shields.io/pypi/v/lightnow-cli.svg)](https://pypi.org/project/lightnow-cli/)
+
 The **LightNow CLI** connects your local MCP clients with LightNow.
 
 Use it to discover MCP servers, sync client configurations, and run

{lightnow_cli-1.0.0 → lightnow_cli-1.0.1}/docs/release.md

@@ -31,8 +31,8 @@ Before publishing a release:
    - Environment: `pypi`
 6. Create a signed or otherwise traceable Git tag:
    ```bash
-   git tag v1.0.0
-   git push origin v1.0.0
+   git tag vX.Y.Z
+   git push origin vX.Y.Z
    ```
 7. Verify the GitHub Actions `Release` workflow:
    - tests pass,

{lightnow_cli-1.0.0 → lightnow_cli-1.0.1}/lightnow_cli/__init__.py

@@ -1,3 +1,3 @@
 """LightNow CLI - A command-line tool for managing MCP servers."""
 
-__version__ = "1.0.0"
+__version__ = "1.0.1"

{lightnow_cli-1.0.0 → lightnow_cli-1.0.1}/lightnow_cli/commands/auth.py

@@ -25,6 +25,7 @@ from ..config import (
 console = Console()
 app = typer.Typer(help="Authentication commands")
 
+AUTH_HTTP_TIMEOUT = 30.0
 ACCESS_TOKEN_EXPIRED_MESSAGE = (
     "Access token has expired. Please run 'lightnow login' again."
 )
@@ -41,6 +42,14 @@ class AccessTokenExpired(AuthError):
     """The stored access token is expired and cannot be refreshed."""
 
 
+def describe_http_error(error: httpx.HTTPError) -> str:
+    """Return a useful message for httpx errors that may stringify empty."""
+    message = str(error).strip()
+    if message:
+        return message
+    return error.__class__.__name__
+
+
 def open_authorization_url(verification_uri: str) -> bool:
     """Open the device authorization URL in the user's browser."""
     return webbrowser.open(verification_uri, new=2, autoraise=True)
@@ -59,7 +68,7 @@ def pkce_challenge(verifier: str) -> str:
 
 async def discover_oidc_endpoints(issuer: str) -> Dict[str, str]:
     """Discover the OIDC endpoints required by the CLI."""
-    async with httpx.AsyncClient() as client:
+    async with httpx.AsyncClient(timeout=AUTH_HTTP_TIMEOUT) as client:
         try:
             discovery_response = await client.get(
                 f"{issuer}/.well-known/openid-configuration"
@@ -69,7 +78,9 @@ async def discover_oidc_endpoints(issuer: str) -> Dict[str, str]:
             if not isinstance(discovery, dict):
                 raise AuthError("OIDC discovery response is not a JSON object")
         except httpx.HTTPError as e:
-            raise AuthError(f"Failed to discover OIDC endpoints: {e}") from e
+            raise AuthError(
+                f"Failed to discover OIDC endpoints: {describe_http_error(e)}"
+            ) from e
 
     device_authorization_endpoint = discovery.get("device_authorization_endpoint")
     token_endpoint = discovery.get("token_endpoint")
@@ -91,7 +102,7 @@ async def device_code_flow(issuer: str, client_id: str) -> Dict[str, Any]:
     """Perform OIDC Device Code Flow authentication."""
     endpoints = await discover_oidc_endpoints(issuer)
     code_verifier = generate_pkce_verifier()
-    async with httpx.AsyncClient() as client:
+    async with httpx.AsyncClient(timeout=AUTH_HTTP_TIMEOUT) as client:
         # Start device authorization
         try:
             device_response = await client.post(
@@ -107,7 +118,9 @@ async def device_code_flow(issuer: str, client_id: str) -> Dict[str, Any]:
             device_data = device_response.json()
 
         except httpx.HTTPError as e:
-            raise AuthError(f"Failed to start device authorization: {e}")
+            raise AuthError(
+                f"Failed to start device authorization: {describe_http_error(e)}"
+            )
 
         # Show user instructions
         console.print("\n[bold blue]Device Authorization Required[/bold blue]")
@@ -165,7 +178,7 @@ async def device_code_flow(issuer: str, client_id: str) -> Dict[str, Any]:
                         raise AuthError(f"Authorization failed: {error}")
 
             except httpx.HTTPError as e:
-                raise AuthError(f"Failed to poll for token: {e}")
+                raise AuthError(f"Failed to poll for token: {describe_http_error(e)}")
 
         raise AuthError("Authorization timed out")
 
@@ -175,7 +188,7 @@ async def refresh_access_token(
 ) -> Dict[str, Any]:
     """Refresh the access token using the stored refresh token."""
     endpoints = await discover_oidc_endpoints(issuer)
-    async with httpx.AsyncClient() as client:
+    async with httpx.AsyncClient(timeout=AUTH_HTTP_TIMEOUT) as client:
         try:
             token_response = await client.post(
                 endpoints["token_endpoint"],
@@ -186,7 +199,9 @@ async def refresh_access_token(
                 },
             )
         except httpx.HTTPError as e:
-            raise AuthError(f"Failed to refresh access token: {e}") from e
+            raise AuthError(
+                f"Failed to refresh access token: {describe_http_error(e)}"
+            ) from e
 
     if token_response.status_code == 200:
         token_data = token_response.json()
@@ -239,14 +254,16 @@ async def fetch_user_info(issuer: str, token: str) -> Dict[str, Any]:
     if not userinfo_endpoint:
         raise AuthError("OIDC provider does not expose a userinfo endpoint.")
 
-    async with httpx.AsyncClient() as client:
+    async with httpx.AsyncClient(timeout=AUTH_HTTP_TIMEOUT) as client:
         try:
             response = await client.get(
                 userinfo_endpoint,
                 headers={"Authorization": f"Bearer {token}"},
             )
         except httpx.HTTPError as exc:
-            raise AuthError(f"Failed to fetch user information: {exc}") from exc
+            raise AuthError(
+                f"Failed to fetch user information: {describe_http_error(exc)}"
+            ) from exc
 
     if response.status_code == 401:
         raise AccessTokenExpired(ACCESS_TOKEN_EXPIRED_MESSAGE)

{lightnow_cli-1.0.0 → lightnow_cli-1.0.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "lightnow-cli"
-version = "1.0.0"
+version = "1.0.1"
 description = "Official LightNow CLI for MCP registry discovery, client config sync, and local MCP runner workflows"
 authors = [{name = "LightNow Team"}]
 license = {text = "Apache-2.0"}

{lightnow_cli-1.0.0 → lightnow_cli-1.0.1}/tests/test_auth_flow.py

@@ -26,7 +26,8 @@ class FakeResponse:
 class FakeDeviceClient:
     """AsyncClient stub that completes device authorization after one poll."""
 
-    def __init__(self) -> None:
+    def __init__(self, *args: object, **kwargs: object) -> None:
+        assert kwargs.get("timeout") == auth.AUTH_HTTP_TIMEOUT
         self.polls = 0
 
     async def __aenter__(self) -> "FakeDeviceClient":
@@ -103,6 +104,11 @@ async def test_device_code_flow_opens_browser_and_returns_token(monkeypatch) ->
     assert opened == ["https://auth.lightnow.local/device?user_code=TEST"]
 
 
+def test_describe_http_error_names_empty_errors() -> None:
+    """HTTP errors with empty string output still produce useful messages."""
+    assert auth.describe_http_error(auth.httpx.ReadTimeout("")) == "ReadTimeout"
+
+
 def test_get_user_info_decodes_unverified_jwt_claims_for_refresh_hints() -> None:
     """The CLI can inspect local JWT metadata without treating it as identity."""
     token = (
@@ -135,6 +141,9 @@ async def test_fetch_user_info_uses_oidc_userinfo_endpoint(monkeypatch) -> None:
     """Identity is fetched from the issuer instead of trusting local JWT claims."""
 
     class FakeUserInfoClient:
+        def __init__(self, *args: object, **kwargs: object) -> None:
+            assert kwargs.get("timeout") == auth.AUTH_HTTP_TIMEOUT
+
         async def __aenter__(self) -> "FakeUserInfoClient":
             return self
 
@@ -209,7 +218,11 @@ async def test_refresh_access_token_returns_new_tokens(monkeypatch) -> None:
         }
 
     monkeypatch.setattr(auth, "discover_oidc_endpoints", endpoints)
-    monkeypatch.setattr(auth.httpx, "AsyncClient", lambda: fake)
+    monkeypatch.setattr(
+        auth.httpx,
+        "AsyncClient",
+        lambda *args, **kwargs: fake,
+    )
 
     token_data = await auth.refresh_access_token(
         "https://auth.lightnow.local/realms/lightnow",
@@ -234,7 +247,11 @@ async def test_refresh_access_token_invalid_grant_is_expired(monkeypatch) -> Non
         }
 
     monkeypatch.setattr(auth, "discover_oidc_endpoints", endpoints)
-    monkeypatch.setattr(auth.httpx, "AsyncClient", lambda: fake)
+    monkeypatch.setattr(
+        auth.httpx,
+        "AsyncClient",
+        lambda *args, **kwargs: fake,
+    )
 
     with pytest.raises(auth.AccessTokenExpired, match="Access token has expired"):
         await auth.refresh_access_token(

{lightnow_cli-1.0.0 → lightnow_cli-1.0.1}/tests/test_cli.py

@@ -51,7 +51,7 @@ def test_cli_version(runner):
     """Test CLI version command."""
     result = runner.invoke(app, ["--version"])
     assert result.exit_code == 0
-    assert "LightNow CLI 1.0.0" in result.stdout
+    assert "LightNow CLI 1.0.1" in result.stdout
 
 
 def test_cli_help(runner):