lightnow-cli 1.6.0__tar.gz → 1.7.0__tar.gz

{lightnow_cli-1.6.0 → lightnow_cli-1.7.0}/.github/workflows/ci.yml

@@ -73,8 +73,27 @@ jobs:
       - name: Build and check distributions
         run: make package
 
+      - name: Verify distribution provenance contract
+        run: python -m unittest discover -s ci -p 'test_*.py'
+
+      - name: Bind PR distribution provenance
+        if: github.event_name == 'pull_request'
+        env:
+          ARTIFACT_REPOSITORY: ${{ github.repository }}
+          ARTIFACT_PR_NUMBER: ${{ github.event.pull_request.number }}
+          ARTIFACT_HEAD_REVISION: ${{ github.event.pull_request.head.sha }}
+          ARTIFACT_RUN_ID: ${{ github.run_id }}
+          ARTIFACT_RUN_ATTEMPT: ${{ github.run_attempt }}
+        run: |
+          python ci/create_client_artifact.py --component cli \
+            --repository "$ARTIFACT_REPOSITORY" \
+            --pr-number "$ARTIFACT_PR_NUMBER" \
+            --head-revision "$ARTIFACT_HEAD_REVISION" \
+            --run-id "$ARTIFACT_RUN_ID" \
+            --run-attempt "$ARTIFACT_RUN_ATTEMPT"
+
       - name: Upload distributions
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: python-distributions
           path: dist/*

{lightnow_cli-1.6.0 → lightnow_cli-1.7.0}/.github/workflows/release.yml

@@ -51,7 +51,7 @@ jobs:
         run: make package
 
       - name: Upload distributions
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: python-distributions
           path: dist/*
@@ -66,7 +66,7 @@ jobs:
 
     steps:
       - name: Download distributions
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         with:
           name: python-distributions
           path: dist
@@ -89,7 +89,7 @@ jobs:
 
     steps:
       - name: Download distributions
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         with:
           name: python-distributions
           path: dist

lightnow_cli-1.7.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "1.7.0"
+}

{lightnow_cli-1.6.0 → lightnow_cli-1.7.0}/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to the LightNow CLI are documented here.
 
 This project follows semantic versioning.
 
+## [1.7.0](https://github.com/lightnow-ai/lightnow-cli/compare/v1.6.1...v1.7.0) (2026-11-13)
+
+
+### Features
+
+* support LibreChat local proxy configuration ([#47](https://github.com/lightnow-ai/lightnow-cli/issues/47)) ([fffb3ca](https://github.com/lightnow-ai/lightnow-cli/commit/fffb3ca2ac8c87f08e9938bfcb54e3952fcb23f7))
+
+## [1.6.1](https://github.com/lightnow-ai/lightnow-cli/compare/v1.6.0...v1.6.1) (2026-11-09)
+
+
+### Bug Fixes
+
+* **cli:** use active context for default favorites ([5399173](https://github.com/lightnow-ai/lightnow-cli/commit/539917321a8fbafedb05394841b5fadd0b5319e0))
+* **cli:** use active context for default favorites ([1ccba54](https://github.com/lightnow-ai/lightnow-cli/commit/1ccba543e34b236d449bdedeb644029c54f49f03))
+* **cli:** use active context for default favorites ([#45](https://github.com/lightnow-ai/lightnow-cli/issues/45)) ([5399173](https://github.com/lightnow-ai/lightnow-cli/commit/539917321a8fbafedb05394841b5fadd0b5319e0))
+
 ## [1.6.0](https://github.com/lightnow-ai/lightnow-cli/compare/v1.5.0...v1.6.0) (2026-10-09)
 
 

lightnow_cli-1.7.0/PKG-INFO

@@ -0,0 +1,138 @@
+Metadata-Version: 2.5
+Name: lightnow-cli
+Version: 1.7.0
+Summary: Official LightNow CLI for MCP registry discovery, client config sync, and local MCP runner workflows
+Project-URL: Homepage, https://github.com/lightnow-ai/lightnow-cli
+Project-URL: Repository, https://github.com/lightnow-ai/lightnow-cli
+Author: LightNow Team
+License: Apache-2.0
+License-File: LICENSE
+Keywords: cli,lightnow,mcp,model-context-protocol,registry
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Build Tools
+Classifier: Topic :: Utilities
+Requires-Python: >=3.11
+Requires-Dist: filelock>=3.16.1
+Requires-Dist: httpx>=0.24.0
+Requires-Dist: jsonschema>=4.17.0
+Requires-Dist: packaging>=24.0
+Requires-Dist: pydantic>=2.0.0
+Requires-Dist: pyjwt>=2.8.0
+Requires-Dist: pyyaml>=6.0.0
+Requires-Dist: rich>=13.0.0
+Requires-Dist: truststore>=0.10.0
+Requires-Dist: typer>=0.9.0
+Provides-Extra: dev
+Requires-Dist: black>=23.0.0; extra == 'dev'
+Requires-Dist: build>=1.2.0; extra == 'dev'
+Requires-Dist: flake8>=6.0.0; extra == 'dev'
+Requires-Dist: isort>=5.12.0; extra == 'dev'
+Requires-Dist: mypy>=1.0.0; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.21.0; extra == 'dev'
+Requires-Dist: pytest-cov>=4.0.0; extra == 'dev'
+Requires-Dist: pytest-mock>=3.10.0; extra == 'dev'
+Requires-Dist: pytest>=7.0.0; extra == 'dev'
+Requires-Dist: responses>=0.23.0; extra == 'dev'
+Requires-Dist: twine>=5.0.0; extra == 'dev'
+Requires-Dist: types-jsonschema>=4.25.0; extra == 'dev'
+Requires-Dist: types-pyyaml>=6.0.12; extra == 'dev'
+Provides-Extra: keyring
+Requires-Dist: keyring>=25.6.0; extra == 'keyring'
+Description-Content-Type: text/markdown
+
+# LightNow CLI
+
+[![PyPI](https://img.shields.io/pypi/v/lightnow-cli.svg)](https://pypi.org/project/lightnow-cli/)
+
+Find MCP servers and connect your AI assistants to the tools you manage in LightNow.
+
+The CLI signs you in and configures your clients. [LightNow Proxy](https://github.com/lightnow-ai/lightnow-proxy)
+runs their connections to the servers in your Runtime profiles.
+
+## Get started
+
+You need a [LightNow account](https://lightnow.ai/), an AI client and a Runtime
+profile with the server connections you want to use.
+
+### 1. Install the CLI and proxy
+
+With Homebrew:
+
+```sh
+brew tap lightnow-ai/tap
+brew install lightnow-cli lightnow-proxy
+```
+
+Or with [uv](https://docs.astral.sh/uv/getting-started/installation/) and Python 3.11 or later:
+
+```sh
+uv tool install lightnow-cli
+uv tool install lightnow-proxy
+```
+
+[pipx](https://pipx.pypa.io/stable/installation/) is also supported.
+
+### 2. Sign in and connect a client
+
+If your client already has MCP servers, [review the import options](https://docs.lightnow.ai/how-to/import-existing-mcp-config)
+before syncing.
+
+```sh
+lightnow login
+lightnow sync --client codex --profile default --local-proxy
+```
+
+Replace `default` with your profile's name. Restart the client and check its MCP
+tools list. The CLI supports Codex, Claude Code, Claude Desktop, Cursor, VS Code,
+Antigravity, Gemini CLI and LibreChat.
+
+See [Connect AI assistants](https://docs.lightnow.ai/getting-started/sync-mcp-clients)
+for each client's setup and configuration paths.
+
+For LibreChat, run the CLI and proxy on its backend and select its configuration:
+
+```sh
+lightnow sync --client librechat --profile default --local-proxy --config-path /path/to/librechat.yaml
+```
+
+LibreChat users with access to this connection share the backend account's
+LightNow permissions. Reload LibreChat after changing its configuration.
+
+### 3. Check the connection
+
+```sh
+lightnow status
+lightnow config-status --client codex
+lightnow-proxy --config ~/.lightnow/lightnow-proxy/codex.yaml --health
+```
+
+For help, see [Troubleshoot the connection](https://docs.lightnow.ai/how-to/debug-local-proxy).
+
+## Useful commands
+
+| Task | Command |
+| --- | --- |
+| Find servers | `lightnow search sonarqube` |
+| View your favorites | `lightnow favorites` |
+| Use organization-managed client settings | `lightnow sync --client codex --from-settings` |
+| Check for updates | `lightnow update --check` |
+| Update the CLI and proxy | `lightnow update` |
+
+Use `lightnow --help` or `lightnow <command> --help` for available options.
+For profiles, organization connections and other workflows, see the
+[CLI reference](https://docs.lightnow.ai/reference/cli).
+
+## Contributing
+
+See [development setup](docs/development.md), [contributing](CONTRIBUTING.md),
+[release process](docs/release.md) and [security policy](SECURITY.md).
+
+## License
+
+[Apache License 2.0](LICENSE).

lightnow_cli-1.7.0/README.md

@@ -0,0 +1,90 @@
+# LightNow CLI
+
+[![PyPI](https://img.shields.io/pypi/v/lightnow-cli.svg)](https://pypi.org/project/lightnow-cli/)
+
+Find MCP servers and connect your AI assistants to the tools you manage in LightNow.
+
+The CLI signs you in and configures your clients. [LightNow Proxy](https://github.com/lightnow-ai/lightnow-proxy)
+runs their connections to the servers in your Runtime profiles.
+
+## Get started
+
+You need a [LightNow account](https://lightnow.ai/), an AI client and a Runtime
+profile with the server connections you want to use.
+
+### 1. Install the CLI and proxy
+
+With Homebrew:
+
+```sh
+brew tap lightnow-ai/tap
+brew install lightnow-cli lightnow-proxy
+```
+
+Or with [uv](https://docs.astral.sh/uv/getting-started/installation/) and Python 3.11 or later:
+
+```sh
+uv tool install lightnow-cli
+uv tool install lightnow-proxy
+```
+
+[pipx](https://pipx.pypa.io/stable/installation/) is also supported.
+
+### 2. Sign in and connect a client
+
+If your client already has MCP servers, [review the import options](https://docs.lightnow.ai/how-to/import-existing-mcp-config)
+before syncing.
+
+```sh
+lightnow login
+lightnow sync --client codex --profile default --local-proxy
+```
+
+Replace `default` with your profile's name. Restart the client and check its MCP
+tools list. The CLI supports Codex, Claude Code, Claude Desktop, Cursor, VS Code,
+Antigravity, Gemini CLI and LibreChat.
+
+See [Connect AI assistants](https://docs.lightnow.ai/getting-started/sync-mcp-clients)
+for each client's setup and configuration paths.
+
+For LibreChat, run the CLI and proxy on its backend and select its configuration:
+
+```sh
+lightnow sync --client librechat --profile default --local-proxy --config-path /path/to/librechat.yaml
+```
+
+LibreChat users with access to this connection share the backend account's
+LightNow permissions. Reload LibreChat after changing its configuration.
+
+### 3. Check the connection
+
+```sh
+lightnow status
+lightnow config-status --client codex
+lightnow-proxy --config ~/.lightnow/lightnow-proxy/codex.yaml --health
+```
+
+For help, see [Troubleshoot the connection](https://docs.lightnow.ai/how-to/debug-local-proxy).
+
+## Useful commands
+
+| Task | Command |
+| --- | --- |
+| Find servers | `lightnow search sonarqube` |
+| View your favorites | `lightnow favorites` |
+| Use organization-managed client settings | `lightnow sync --client codex --from-settings` |
+| Check for updates | `lightnow update --check` |
+| Update the CLI and proxy | `lightnow update` |
+
+Use `lightnow --help` or `lightnow <command> --help` for available options.
+For profiles, organization connections and other workflows, see the
+[CLI reference](https://docs.lightnow.ai/reference/cli).
+
+## Contributing
+
+See [development setup](docs/development.md), [contributing](CONTRIBUTING.md),
+[release process](docs/release.md) and [security policy](SECURITY.md).
+
+## License
+
+[Apache License 2.0](LICENSE).

lightnow_cli-1.7.0/ci/create_client_artifact.py

@@ -0,0 +1,126 @@
+"""Bind a PR build to its tested checkout and one universal Python wheel."""
+
+import argparse
+import hashlib
+import json
+import re
+import subprocess
+import tomllib
+import zipfile
+from email.parser import Parser
+from pathlib import Path
+
+SCHEMA_VERSION = "platform.lightnow.ai/feature-stack-client-artifact/v1"
+MANIFEST_FILENAME = "feature-stack-client-artifact.json"
+COMPONENTS = {"cli": "lightnow-cli", "proxy": "lightnow-proxy"}
+
+
+def build_manifest(
+    root: Path,
+    component: str,
+    repository: str,
+    pr_number: int,
+    head_revision: str,
+    checkout_revision: str,
+    run_id: int,
+    run_attempt: int,
+) -> dict:
+    """Validate wheel contents and runner identity before creating provenance."""
+    package_name = COMPONENTS.get(component)
+    if package_name is None or repository != f"lightnow-ai/{package_name}":
+        raise ValueError("Component and repository do not match")
+    if any(value <= 0 for value in (pr_number, run_id, run_attempt)):
+        raise ValueError("PR number, run ID and run attempt must be positive")
+    if any(
+        re.fullmatch(r"[0-9a-f]{40}", value) is None
+        for value in (head_revision, checkout_revision)
+    ):
+        raise ValueError("Head and checkout revisions must be full Git SHA-1 values")
+
+    with (root / "pyproject.toml").open("rb") as project_file:
+        project = tomllib.load(project_file)["project"]
+    if project["name"] != package_name:
+        raise ValueError("Repository package metadata does not match component")
+
+    wheels = sorted((root / "dist").glob("*.whl"))
+    if len(wheels) != 1 or wheels[0].is_symlink() or not wheels[0].is_file():
+        raise ValueError("Exactly one regular wheel is required")
+    wheel = wheels[0]
+    wheel_package = package_name.replace("-", "_")
+    expected_filename = f"{wheel_package}-{project['version']}-py3-none-any.whl"
+    if wheel.name != expected_filename:
+        raise ValueError("Expected the repository's universal py3-none-any wheel")
+
+    prefix = f"{wheel_package}-{project['version']}.dist-info/"
+    with zipfile.ZipFile(wheel) as archive:
+        for name in (f"{prefix}METADATA", f"{prefix}WHEEL"):
+            if archive.namelist().count(name) != 1:
+                raise ValueError("Wheel metadata must be unique and match its filename")
+        metadata_files = [
+            name for name in archive.namelist() if name.endswith(".dist-info/METADATA")
+        ]
+        if metadata_files != [f"{prefix}METADATA"]:
+            raise ValueError("Wheel must contain exactly one distribution's metadata")
+        metadata = Parser().parsestr(archive.read(f"{prefix}METADATA").decode("utf-8"))
+        wheel_metadata = Parser().parsestr(
+            archive.read(f"{prefix}WHEEL").decode("utf-8")
+        )
+    if metadata.get_all("Name") != [package_name] or metadata.get_all("Version") != [
+        project["version"]
+    ]:
+        raise ValueError("Wheel METADATA name/version do not match repository metadata")
+    if wheel_metadata.get_all("Tag") != ["py3-none-any"] or wheel_metadata.get_all(
+        "Root-Is-Purelib"
+    ) != ["true"]:
+        raise ValueError("Wheel must declare the universal pure-Python tag")
+
+    return {
+        "schemaVersion": SCHEMA_VERSION,
+        "component": component,
+        "repository": repository,
+        "packageName": metadata["Name"],
+        "packageVersion": metadata["Version"],
+        "filename": wheel.name,
+        "sha256": hashlib.sha256(wheel.read_bytes()).hexdigest(),
+        "source": {
+            "kind": "pull-request",
+            "number": pr_number,
+            "headRevision": head_revision,
+            "checkoutRevision": checkout_revision,
+            "runId": run_id,
+            "runAttempt": run_attempt,
+            "workflowPath": ".github/workflows/ci.yml",
+        },
+    }
+
+
+def main() -> None:
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--component", choices=tuple(COMPONENTS), required=True)
+    parser.add_argument("--repository", required=True)
+    parser.add_argument("--pr-number", type=int, required=True)
+    parser.add_argument("--head-revision", required=True)
+    parser.add_argument("--run-id", type=int, required=True)
+    parser.add_argument("--run-attempt", type=int, required=True)
+    args = parser.parse_args()
+    root = Path(__file__).resolve().parents[1]
+    checkout_revision = subprocess.check_output(
+        ["git", "rev-parse", "HEAD"], cwd=root, text=True
+    ).strip()
+    manifest = build_manifest(
+        root,
+        args.component,
+        args.repository,
+        args.pr_number,
+        args.head_revision,
+        checkout_revision,
+        args.run_id,
+        args.run_attempt,
+    )
+    (root / "dist" / MANIFEST_FILENAME).write_text(
+        json.dumps(manifest, indent=2) + "\n", encoding="utf-8"
+    )
+
+
+if __name__ == "__main__":
+    main()

lightnow_cli-1.7.0/ci/test_client_artifact.py

@@ -0,0 +1,124 @@
+"""Offline provenance contract checks; no installation or external services."""
+
+import hashlib
+import tempfile
+import unittest
+import zipfile
+from pathlib import Path
+
+from create_client_artifact import build_manifest
+
+
+class ClientArtifactTests(unittest.TestCase):
+    def setUp(self) -> None:
+        self.directory = tempfile.TemporaryDirectory()
+        self.addCleanup(self.directory.cleanup)
+        self.root = Path(self.directory.name)
+        (self.root / "dist").mkdir()
+        (self.root / "pyproject.toml").write_text(
+            '[project]\nname = "lightnow-cli"\nversion = "1.2.3"\n'
+        )
+        self.wheel = self.root / "dist/lightnow_cli-1.2.3-py3-none-any.whl"
+        self.write_wheel()
+
+    def write_wheel(
+        self,
+        name: str = "lightnow-cli",
+        version: str = "1.2.3",
+        tag: str = "py3-none-any",
+    ) -> None:
+        with zipfile.ZipFile(self.wheel, "w") as archive:
+            archive.writestr(
+                "lightnow_cli-1.2.3.dist-info/METADATA",
+                f"Metadata-Version: 2.3\nName: {name}\nVersion: {version}\n",
+            )
+            archive.writestr(
+                "lightnow_cli-1.2.3.dist-info/WHEEL",
+                f"Wheel-Version: 1.0\nRoot-Is-Purelib: true\nTag: {tag}\n",
+            )
+
+    def manifest(self, **overrides: object) -> dict:
+        arguments = dict(
+            root=self.root,
+            component="cli",
+            repository="lightnow-ai/lightnow-cli",
+            pr_number=42,
+            head_revision="a" * 40,
+            checkout_revision="b" * 40,
+            run_id=123,
+            run_attempt=2,
+        )
+        arguments.update(overrides)
+        return build_manifest(**arguments)
+
+    def test_exact_contract_keeps_head_and_tested_checkout_separate(self) -> None:
+        self.assertEqual(
+            self.manifest(),
+            {
+                "schemaVersion": "platform.lightnow.ai/feature-stack-client-artifact/v1",
+                "component": "cli",
+                "repository": "lightnow-ai/lightnow-cli",
+                "packageName": "lightnow-cli",
+                "packageVersion": "1.2.3",
+                "filename": self.wheel.name,
+                "sha256": hashlib.sha256(self.wheel.read_bytes()).hexdigest(),
+                "source": {
+                    "kind": "pull-request",
+                    "number": 42,
+                    "headRevision": "a" * 40,
+                    "checkoutRevision": "b" * 40,
+                    "runId": 123,
+                    "runAttempt": 2,
+                    "workflowPath": ".github/workflows/ci.yml",
+                },
+            },
+        )
+
+    def test_rejects_unbound_identity(self) -> None:
+        for arguments in (
+            {"repository": "other/lightnow-cli"},
+            {"component": "proxy"},
+            {"head_revision": "a" * 7},
+            {"checkout_revision": "not-a-revision"},
+            {"pr_number": 0},
+            {"run_id": -1},
+            {"run_attempt": 0},
+        ):
+            with self.subTest(arguments=arguments), self.assertRaises(ValueError):
+                self.manifest(**arguments)
+
+    def test_rejects_metadata_or_platform_mismatch(self) -> None:
+        for arguments in (
+            {"name": "another-package"},
+            {"version": "9.0.0"},
+            {"tag": "cp312-cp312-linux_x86_64"},
+        ):
+            with self.subTest(arguments=arguments):
+                self.write_wheel(**arguments)
+                with self.assertRaises(ValueError):
+                    self.manifest()
+
+    def test_rejects_ambiguous_missing_or_symlinked_wheel(self) -> None:
+        extra = self.wheel.with_name("another.whl")
+        extra.write_bytes(self.wheel.read_bytes())
+        with self.assertRaises(ValueError):
+            self.manifest()
+        extra.unlink()
+        self.wheel.unlink()
+        with self.assertRaises(ValueError):
+            self.manifest()
+        self.wheel.symlink_to(self.root / "outside.whl")
+        with self.assertRaises(ValueError):
+            self.manifest()
+
+    def test_rejects_duplicate_distribution_metadata(self) -> None:
+        with zipfile.ZipFile(self.wheel, "a") as archive:
+            archive.writestr(
+                "other-1.0.dist-info/METADATA", "Name: other\nVersion: 1.0\n"
+            )
+        with self.assertRaises(ValueError):
+            self.manifest()
+
+
+if __name__ == "__main__":
+    unittest.main()

{lightnow_cli-1.6.0 → lightnow_cli-1.7.0}/docs/release.md

@@ -101,3 +101,26 @@ tag. If the project does not exist yet, use PyPI's pending publisher flow for
 ```bash
 python -m twine check dist/*
 ```
+
+## PR distribution provenance
+
+PR CI archives `feature-stack-client-artifact.json` alongside the wheel and
+source distribution in `python-distributions`. The manifest uses
+`platform.lightnow.ai/feature-stack-client-artifact/v1` and binds the universal
+wheel SHA-256 and its actual METADATA name/version to the PR number, head
+revision, tested checkout revision, workflow, run ID, and run attempt. The head
+and tested merge checkout are separate fields. Consumers must verify these
+bindings and the wheel checksum against the selected successful CI run before
+installing a candidate; the manifest itself is build metadata, not a signature
+or a runtime test result.
+
+The generator uses only Python's standard library. After a clean package build,
+run its focused offline contract checks with:
+
+```bash
+python -m unittest discover -s ci -p 'test_*.py'
+```
+
+Main CI does not fabricate PR metadata. Tagged release publishing is unchanged:
+release consumers qualify the exact Git tag and published PyPI wheel separately.
+The PR-only JSON never enters the existing PyPI release upload.

{lightnow_cli-1.6.0 → lightnow_cli-1.7.0}/lightnow_cli/__init__.py

@@ -1,3 +1,3 @@
 """LightNow CLI - A command-line tool for managing MCP servers."""
 
-__version__ = "1.6.0"  # x-release-please-version
+__version__ = "1.7.0"  # x-release-please-version