lightnow-cli 1.7.0__tar.gz → 1.7.1__tar.gz

{lightnow_cli-1.7.0 → lightnow_cli-1.7.1}/.github/workflows/ci.yml

@@ -26,7 +26,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7
         with:
           python-version: ${{ matrix.python-version }}
           cache: pip
@@ -62,7 +62,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7
         with:
           python-version: "3.12"
           cache: pip

{lightnow_cli-1.7.0 → lightnow_cli-1.7.1}/.github/workflows/release.yml

@@ -18,7 +18,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7
         with:
           python-version: "3.12"
           cache: pip
@@ -39,7 +39,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Set up Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7
         with:
           python-version: "3.12"
           cache: pip
@@ -95,7 +95,7 @@ jobs:
           path: dist
 
       - name: Publish distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # release/v1
 
   update-homebrew:
     name: Update Homebrew formula

lightnow_cli-1.7.1/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "1.7.1"
+}

{lightnow_cli-1.7.0 → lightnow_cli-1.7.1}/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to the LightNow CLI are documented here.
 
 This project follows semantic versioning.
 
+## [1.7.1](https://github.com/lightnow-ai/lightnow-cli/compare/v1.7.0...v1.7.1) (2026-11-14)
+
+
+### Bug Fixes
+
+* honor profile revisions when importing MCP config ([#50](https://github.com/lightnow-ai/lightnow-cli/issues/50)) ([343ab0d](https://github.com/lightnow-ai/lightnow-cli/commit/343ab0d545c19d3c9a44fb9097ed06e5f00ca3fb))
+
 ## [1.7.0](https://github.com/lightnow-ai/lightnow-cli/compare/v1.6.1...v1.7.0) (2026-11-13)
 
 

{lightnow_cli-1.7.0 → lightnow_cli-1.7.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: lightnow-cli
-Version: 1.7.0
+Version: 1.7.1
 Summary: Official LightNow CLI for MCP registry discovery, client config sync, and local MCP runner workflows
 Project-URL: Homepage, https://github.com/lightnow-ai/lightnow-cli
 Project-URL: Repository, https://github.com/lightnow-ai/lightnow-cli

{lightnow_cli-1.7.0 → lightnow_cli-1.7.1}/lightnow_cli/__init__.py

@@ -1,3 +1,3 @@
 """LightNow CLI - A command-line tool for managing MCP servers."""
 
-__version__ = "1.7.0"  # x-release-please-version
+__version__ = "1.7.1"  # x-release-please-version

{lightnow_cli-1.7.0 → lightnow_cli-1.7.1}/lightnow_cli/commands/integrations.py

@@ -898,7 +898,9 @@ def import_config(
     ] = "default",
     tenant: Annotated[
         Optional[str],
-        typer.Option("--tenant", help="Tenant id or slug, sent as X-Tenant"),
+        typer.Option(
+            "--tenant", help="Organization ID; defaults to the selected context"
+        ),
     ] = None,
     config_path: Annotated[
         Optional[Path],
@@ -1699,7 +1701,34 @@ def import_profile_config(
 ) -> dict[str, Any]:
     """Import rendered client config into a LightNow runtime profile."""
     url = f"{api_url.rstrip('/')}/integrations/import"
+    headers = {"Accept": "application/json"}
     try:
+        if not dry_run:
+            current = request_with_refresh(
+                "GET",
+                f"{api_url.rstrip('/')}/integrations/profiles",
+                headers=headers,
+                token=token,
+                tenant=tenant,
+                timeout=30.0,
+            )
+            if current.status_code == 401:
+                raise authentication_error_from_response(current)
+            if current.status_code != 200:
+                raise ValueError(f"HTTP {current.status_code}: {redact(current.text)}")
+            etag = current.headers.get("ETag")
+            if (
+                etag is None
+                or re.fullmatch(r'"[\x21\x23-\x7e\x80-\xff]*"', etag) is None
+            ):
+                raise ValueError(
+                    "Could not read the current profile version. No import was applied."
+                )
+            headers["If-Match"] = etag
+            # The snapshot request may have refreshed an expired session.
+            authorization = current.request.headers.get("Authorization", "")
+            if authorization.startswith("Bearer "):
+                token = authorization.removeprefix("Bearer ")
         response = request_with_refresh(
             "POST",
             url,
@@ -1710,7 +1739,7 @@ def import_profile_config(
                 "profile": {"name": profile},
                 "replace": replace,
             },
-            headers={"Accept": "application/json"},
+            headers=headers,
             token=token,
             tenant=tenant,
             timeout=30.0,

{lightnow_cli-1.7.0 → lightnow_cli-1.7.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "lightnow-cli"
-version = "1.7.0"
+version = "1.7.1"
 description = "Official LightNow CLI for MCP registry discovery, client config sync, and local MCP runner workflows"
 authors = [{name = "LightNow Team"}]
 license = {text = "Apache-2.0"}

lightnow_cli-1.7.1/tests/test_import_preconditions.py

@@ -0,0 +1,197 @@
+"""Import writes retain the API's optimistic concurrency and permission checks."""
+
+import json
+from unittest.mock import patch
+
+import httpx
+import pytest
+
+from lightnow_cli.commands.integrations import import_profile_config
+
+API = "https://registry.example.test/v0.1"
+CONTENT = '[mcp_servers.example]\ncommand = "example-mcp"\n'
+ETAG = '"owner-snapshot-1"'
+
+
+def import_config(
+    *, dry_run=False, tenant="organization-id", profile="team", replace=False
+):
+    return import_profile_config(
+        api_url=API,
+        token="test-access-token",
+        tenant=tenant,
+        source="codex",
+        content=CONTENT,
+        profile=profile,
+        dry_run=dry_run,
+        replace=replace,
+    )
+
+
+@pytest.mark.parametrize(
+    "tenant,profile", [(None, "default"), ("organization-id", "team")]
+)
+@pytest.mark.parametrize("replace", [False, True])
+def test_apply_reads_owner_snapshot_and_preserves_import_scope(
+    tenant, profile, replace
+):
+    requests = []
+
+    def handle(request):
+        requests.append(request)
+        assert request.headers["Authorization"] == "Bearer test-access-token"
+        assert request.headers.get("X-Tenant") == tenant
+        if request.method == "GET":
+            assert request.url == f"{API}/integrations/profiles"
+            assert not request.content
+            assert "If-Match" not in request.headers
+            return httpx.Response(200, headers={"ETag": ETAG}, json={"profiles": []})
+        assert request.method == "POST"
+        assert request.url == f"{API}/integrations/import?dry_run=false"
+        assert request.headers["If-Match"] == ETAG
+        assert json.loads(request.content) == {
+            "source": "codex",
+            "content": CONTENT,
+            "profile": {"name": profile},
+            "replace": replace,
+        }
+        return httpx.Response(200, json={"dry_run": False})
+
+    with (
+        httpx.Client(transport=httpx.MockTransport(handle)) as client,
+        patch(
+            "lightnow_cli.authenticated_http.httpx.request", side_effect=client.request
+        ),
+    ):
+        assert import_config(tenant=tenant, profile=profile, replace=replace) == {
+            "dry_run": False
+        }
+    assert [request.method for request in requests] == ["GET", "POST"]
+
+
+def test_preview_does_not_fetch_or_send_a_write_precondition():
+    requests = []
+
+    def handle(request):
+        requests.append(request)
+        assert request.method == "POST"
+        assert request.url.params["dry_run"] == "true"
+        assert "If-Match" not in request.headers
+        return httpx.Response(200, json={"dry_run": True})
+
+    with (
+        httpx.Client(transport=httpx.MockTransport(handle)) as client,
+        patch(
+            "lightnow_cli.authenticated_http.httpx.request", side_effect=client.request
+        ),
+    ):
+        assert import_config(dry_run=True) == {"dry_run": True}
+    assert len(requests) == 1
+
+
+@pytest.mark.parametrize(
+    "etag", [None, "", "*", 'W/"weak"', "unquoted", '"one", "two"']
+)
+def test_missing_or_invalid_snapshot_never_sends_import(etag):
+    requests = []
+
+    def handle(request):
+        requests.append(request)
+        assert request.method == "GET"
+        return httpx.Response(
+            200,
+            headers={"ETag": etag} if etag is not None else {},
+            json={"profiles": []},
+        )
+
+    with (
+        httpx.Client(transport=httpx.MockTransport(handle)) as client,
+        patch(
+            "lightnow_cli.authenticated_http.httpx.request", side_effect=client.request
+        ),
+        pytest.raises(ValueError, match="current profile version"),
+    ):
+        import_config()
+    assert len(requests) == 1
+
+
+@pytest.mark.parametrize("status", [302, 403, 503])
+def test_failed_snapshot_read_never_sends_import(status):
+    requests = []
+
+    def handle(request):
+        requests.append(request)
+        assert request.method == "GET"
+        return httpx.Response(
+            status,
+            headers={"ETag": ETAG},
+            json={"error": {"message": "Cannot read profiles"}},
+        )
+
+    with (
+        httpx.Client(transport=httpx.MockTransport(handle)) as client,
+        patch(
+            "lightnow_cli.authenticated_http.httpx.request", side_effect=client.request
+        ),
+        pytest.raises(ValueError, match=f"HTTP {status}"),
+    ):
+        import_config()
+    assert len(requests) == 1
+
+
+def test_conflict_stops_without_refetch_or_reapply():
+    requests = []
+
+    def handle(request):
+        requests.append(request)
+        if request.method == "GET":
+            return httpx.Response(200, headers={"ETag": ETAG}, json={"profiles": []})
+        assert request.headers["If-Match"] == ETAG
+        return httpx.Response(412, json={"message": "Profile changed"})
+
+    with (
+        httpx.Client(transport=httpx.MockTransport(handle)) as client,
+        patch(
+            "lightnow_cli.authenticated_http.httpx.request", side_effect=client.request
+        ),
+        pytest.raises(ValueError, match="HTTP 412"),
+    ):
+        import_config()
+    assert [request.method for request in requests] == ["GET", "POST"]
+
+
+@pytest.mark.parametrize("expired_method", ["GET", "POST"])
+def test_existing_session_refresh_preserves_scope_and_write_snapshot(expired_method):
+    requests = []
+    expired = False
+
+    def handle(request):
+        nonlocal expired
+        requests.append(request)
+        assert request.headers["X-Tenant"] == "organization-id"
+        if request.method == "POST":
+            assert request.headers["If-Match"] == ETAG
+        if request.method == expired_method and not expired:
+            expired = True
+            return httpx.Response(401, json={"error": "token_expired"})
+        if expired:
+            assert request.headers["Authorization"] == "Bearer refreshed-test-token"
+        if request.method == "GET":
+            return httpx.Response(200, headers={"ETag": ETAG}, json={"profiles": []})
+        return httpx.Response(200, json={"dry_run": False})
+
+    with (
+        httpx.Client(transport=httpx.MockTransport(handle)) as client,
+        patch(
+            "lightnow_cli.authenticated_http.httpx.request", side_effect=client.request
+        ),
+        patch(
+            "lightnow_cli.authenticated_http.refresh_current_session",
+            return_value="refreshed-test-token",
+        ) as refresh,
+    ):
+        assert import_config() == {"dry_run": False}
+    assert refresh.call_count == 1
+    assert [request.method for request in requests] == (
+        ["GET", "GET", "POST"] if expired_method == "GET" else ["GET", "POST", "POST"]
+    )

lightnow_cli-1.7.0/.release-please-manifest.json

@@ -1,3 +0,0 @@
-{
-  ".": "1.7.0"
-}