localstack 4.14.0__tar.gz → 2026.3.0__tar.gz

{localstack-4.14.0 → localstack-2026.3.0}/.github/workflows/tests-cli.yml

@@ -64,8 +64,7 @@ jobs:
 
       - name: Pull Docker images
         run: |
-          docker pull localstack/localstack-pro || true
-          docker pull localstack/localstack
+          docker pull localstack/localstack-pro
 
       - name: Install dependencies
         run: |
@@ -82,7 +81,7 @@ jobs:
 
       - name: Run CLI tests
         env:
-          LOCALSTACK_AUTH_TOKEN: ${{ secrets.TEST_LOCALSTACK_AUTH_TOKEN }}
+          LOCALSTACK_AUTH_TOKEN: ${{ secrets.LOCALSTACK_AUTH_TOKEN }}
         run: |
           python -m pytest tests/cli/ \
             --log-cli-level=${{ env.PYTEST_LOGLEVEL }} \
@@ -90,7 +89,7 @@ jobs:
 
       - name: Run unit tests
         env:
-          LOCALSTACK_AUTH_TOKEN: ${{ secrets.TEST_LOCALSTACK_AUTH_TOKEN }}
+          LOCALSTACK_AUTH_TOKEN: ${{ secrets.LOCALSTACK_AUTH_TOKEN }}
         run: |
           python -m pytest tests/unit/ \
             --log-cli-level=${{ env.PYTEST_LOGLEVEL }} \

{localstack-4.14.0/localstack.egg-info → localstack-2026.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: localstack
-Version: 4.14.0
+Version: 2026.3.0
 Summary: The LocalStack Command Line Interface
 Author-email: LocalStack Contributors <info@localstack.cloud>
 License-Expression: Apache-2.0

{localstack-4.14.0 → localstack-2026.3.0/localstack.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: localstack
-Version: 4.14.0
+Version: 2026.3.0
 Summary: The LocalStack Command Line Interface
 Author-email: LocalStack Contributors <info@localstack.cloud>
 License-Expression: Apache-2.0

{localstack-4.14.0 → localstack-2026.3.0}/localstack.egg-info/SOURCES.txt

@@ -245,5 +245,6 @@ tests/unit/cli/__init__.py
 tests/unit/cli/test_profiles.py
 tests/unit/pro/__init__.py
 tests/unit/pro/test_cli.py
+tests/unit/pro/test_grace_period.py
 tests/unit/replicator/__init__.py
 tests/unit/replicator/test_profile_loading.py

{localstack-4.14.0 → localstack-2026.3.0}/localstack_cli/cli/localstack.py

@@ -523,16 +523,6 @@ def cmd_start(
         print_app()
         console.line()
 
-    # check if we are about to activate Pro, if not raise a warning about the upcoming changes
-    # LOCALSTACK_ACTIVATE_PRO is set by the Pro config if the auth token is cached or explicitly set in the env
-    if not config.is_env_true("LOCALSTACK_ACTIVATE_PRO"):
-        console.log(
-            "Warning: You are starting LocalStack without an auth token. "
-            "Starting in March 2026, LocalStack will require an auth token. "
-            "Go to this page for more infos: https://localstack.cloud/2026-updates",
-            style="bold red",
-        )
-
     from localstack_cli.utils import bootstrap
 
     if not no_banner:

{localstack-4.14.0 → localstack-2026.3.0}/localstack_cli/constants.py

@@ -64,9 +64,7 @@ DEFAULT_VOLUME_DIR = "/var/lib/localstack"
 PATH_USER_REQUEST = "_user_request_"
 
 # name of LocalStack Docker image
-DOCKER_IMAGE_NAME = "localstack/localstack"
 DOCKER_IMAGE_NAME_PRO = "localstack/localstack-pro"
-DOCKER_IMAGE_NAME_FULL = "localstack/localstack-full"
 
 # backdoor API path used to retrieve or update config variables
 CONFIG_UPDATE_PATH = "/?_config_"
@@ -142,6 +140,7 @@ TRACE_LOG_LEVELS = [LS_LOG_TRACE, LS_LOG_TRACE_INTERNAL]
 OFFICIAL_IMAGES = [
     "localstack/localstack",
     "localstack/localstack-pro",
+    "localstack/snowflake"
 ]
 
 # port for debug py

{localstack-4.14.0 → localstack-2026.3.0}/localstack_cli/pro/core/bootstrap/licensingv2.py

@@ -69,7 +69,7 @@ class LicensingError(Exception):
 
             - Please check that your credentials are set up correctly and that you have an active license.
               You can find your credentials in our webapp at https://app.localstack.cloud.
-            - If you want to continue using LocalStack without pro features you can set `ACTIVATE_PRO=0`.
+            - If you want to continue using LocalStack without pro features, set `LOCALSTACK_ACKNOWLEDGE_ACCOUNT_REQUIREMENT=1` during the grace period.
             """
         )
 

{localstack-4.14.0 → localstack-2026.3.0}/localstack_cli/pro/core/cli/replicator.py

@@ -11,6 +11,7 @@ from typing import TypedDict
 
 import click
 import requests
+
 from localstack_cli import config
 from localstack_cli.cli import console
 from localstack_cli.cli.exceptions import CLIError
@@ -255,10 +256,17 @@ At the moment only environment variables are recognized.
 )
 @click.option(
     "--replication-type",
-    type=click.Choice(["MOCK", "SINGLE_RESOURCE", "BATCH"]),
+    type=click.Choice(["SINGLE_RESOURCE", "BATCH"]),
     default="SINGLE_RESOURCE",
     show_default=True,
-    help="Type of replication job: MOCK, SINGLE_RESOURCE, BATCH",
+    help="Type of replication job: SINGLE_RESOURCE, BATCH",
+)
+@click.option(
+    "--explore-strategy",
+    type=click.Choice(["SIMPLE", "TREE"]),
+    default="SIMPLE",
+    show_default=True,
+    help="How we explore the resource tree. SIMPLE only replicates the resource requested.",
 )
 @click.option(
     "--resource-arn",
@@ -285,6 +293,7 @@ At the moment only environment variables are recognized.
 @click.option("--delay", help="Delay for the MOCK replication work")
 def start(
     replication_type: str,
+    explore_strategy: str,
     resource_arn: str | None = None,
     resource_type: str | None = None,
     resource_identifier: str | None = None,
@@ -314,6 +323,7 @@ def start(
 
     payload = {
         "replication_type": replication_type,
+        "explore_strategy": explore_strategy,
         "replication_job_config": replication_config,
         "source_aws_config": source_config,
         "target_aws_config": target_config,

{localstack-4.14.0 → localstack-2026.3.0}/localstack_cli/pro/core/config.py

@@ -368,10 +368,9 @@ def is_auth_token_configured() -> bool:
     return False
 
 
-# whether pro should be activated or not. this is set to true by default if using the pro image. if set to
-# true, localstack will fail to start if the key activation did not work. if set to false, then we will make
-# an attempt to start localstack community.
-ACTIVATE_PRO = localstack_config.is_env_not_false("ACTIVATE_PRO")
+# pro plugins should always run. If license activation failed this will be set to false to avoid loading
+# pro plugins after that.
+ACTIVATE_PRO = True
 
 # a comma-separated list of cloud pods to be automatically loaded at startup
 AUTO_LOAD_POD = os.environ.get("AUTO_LOAD_POD", "")
@@ -394,14 +393,6 @@ ENABLE_POD_RESOURCES = is_env_true("ENABLE_POD_RESOURCES")
 #   set of Cloud Pods.
 CLI_INJECT_POD_IDENTITY = localstack_config.is_env_not_false("CLI_INJECT_POD_IDENTITY")
 
-if is_env_true("LOCALSTACK_CLI"):
-    # when we're in the CLI, we only want to activate pro code if an API key is set. this is because we are
-    # always loading localstack/pro/core/config.py in the CLI, and we would otherwise always have ACTIVATE_PRO=1
-    # when running `localstack start`.
-    ACTIVATE_PRO = ACTIVATE_PRO and is_auth_token_configured()
-    # we also need to update the environment so `ACTIVATE_PRO` is disabled in the container
-    os.environ["LOCALSTACK_ACTIVATE_PRO"] = "1" if ACTIVATE_PRO else "0"
-
 # backend service ports
 DEFAULT_PORT_LOCAL_DAEMON = 4600
 DEFAULT_PORT_LOCAL_DAEMON_ROOT = 4601
@@ -471,8 +462,8 @@ APPINSPECTOR_ENABLE = is_env_true("APPINSPECTOR_ENABLE")
 
 # update variable names that need to be passed as arguments to Docker
 localstack_config.CONFIG_ENV_VARS += [
-    "ACTIVATE_PRO",
     "APPSYNC_JS_LIBS_VERSION",
+    "ACKNOWLEDGE_ACCOUNT_REQUIREMENT",
     "APIGW_ENABLE_NEXT_GEN_WEBSOCKETS",
     "APIGW_ENABLE_NEXT_GEN_WEBSOCKETS_INVOCATION",
     "AUTO_LOAD_POD",

localstack-2026.3.0/localstack_cli/pro/core/plugins.py

@@ -0,0 +1,169 @@
+"""
+Pro plugin hooks for the LocalStack CLI.
+
+These hooks are executed on the host machine when running CLI commands like `localstack start`.
+They handle license activation, container configuration, and extension developer mode.
+
+Note: This file was extracted from localstack-pro-core/localstack/pro/core/plugins.py
+and rewritten to contain only CLI-relevant functionality.
+"""
+
+from __future__ import annotations
+
+import logging
+import os
+
+import requests
+from localstack_cli import config as localstack_config
+from localstack_cli.config import HostAndPort
+from localstack_cli.constants import API_ENDPOINT
+from localstack_cli.pro.core import config as pro_config
+from localstack_cli.pro.core.bootstrap import licensingv2
+from localstack_cli.runtime import hooks
+from localstack_cli.runtime.exceptions import LocalstackExit
+from localstack_cli.utils.bootstrap import Container
+
+LOG = logging.getLogger(__name__)
+
+
+def modify_gateway_listen_config(cfg):
+    """
+    Modifies the localstack config to additionally listen to port 443.
+    Needs to be called before any edge URLs are resolved using the config.
+    """
+    if os.getenv("GATEWAY_LISTEN") is None:
+        host = "0.0.0.0" if localstack_config.in_docker() else "127.0.0.1"
+        cfg.GATEWAY_LISTEN.append(HostAndPort(host=host, port=443))
+
+
+@hooks.prepare_host(priority=200)
+def patch_community_pro_detection():
+    """This is currently needed to make localstack core aware of the `localstack auth set-token`
+    functionality, where we set the key into the ``~/.localstack/auth.json`` file that community does not
+    yet know about. ``is_api_key_configured`` is used in the LocalStack CLI to determine whether to start
+    the localstack or localstack-pro container image."""
+    from localstack_cli.utils import bootstrap
+
+    bootstrap.is_auth_token_configured = pro_config.is_auth_token_configured
+
+
+## ---------------------------------------------------------------------------
+## Grace period helpers (temporary, to be removed once grace period expires)
+## ---------------------------------------------------------------------------
+
+GRACE_PERIOD_ENDPOINT_PATH = "/license/grace-period-check"
+
+LICENSE_ERROR_MESSAGE = """\
+===============================================
+LocalStack requires an account to run.
+
+==> Have an account? Learn how to set LOCALSTACK_AUTH_TOKEN: https://app.localstack.cloud/settings/auth-tokens
+==> Need an account? Get started: https://www.localstack.cloud/pricing
+==> Want more time? Snooze until April 6, 2026 by setting LOCALSTACK_ACKNOWLEDGE_ACCOUNT_REQUIREMENT=1
+"""
+
+GRACE_PERIOD_EXPIRED_MESSAGE = """\
+===============================================
+LocalStack requires an account to run.
+
+==> Have an account? Learn how to set LOCALSTACK_AUTH_TOKEN: https://app.localstack.cloud/settings/auth-tokens
+==> Need an account? Get started: https://www.localstack.cloud/pricing
+"""
+
+
+def _check_grace_period_active(ack: bool) -> bool:
+    """Call the platform grace period endpoint.
+
+    Returns True if the grace period is active (200 response).
+    Returns False for any other response (including 404 when the endpoint is removed).
+    """
+    from localstack_cli.pro.core.bootstrap.licensingv2 import get_system_information_summary
+    from localstack_cli.pro.core.constants import VERSION
+    from localstack_cli.utils.analytics.metadata import get_client_metadata
+    from localstack_cli.utils.http import get_proxies
+
+    metadata = get_client_metadata()
+    payload = {
+        "machine": {
+            "id": metadata.machine_id,
+            "ci": metadata.is_ci,
+            "system": get_system_information_summary(),
+        },
+        "version": VERSION,
+        "requesting_grace": ack,
+    }
+
+    url = f"{API_ENDPOINT}{GRACE_PERIOD_ENDPOINT_PATH}"
+    proxies = get_proxies()
+
+    try:
+        response = requests.post(
+            url,
+            json=payload,
+            verify=not localstack_config.is_env_true("SSL_NO_VERIFY"),
+            proxies=proxies,
+            timeout=10,
+        )
+        return response.ok
+    except requests.exceptions.RequestException:
+        LOG.debug("Failed to reach grace period endpoint at %s", url)
+        return False
+
+
+## ---------------------------------------------------------------------------
+
+
+@hooks.prepare_host(priority=100, should_load=pro_config.ACTIVATE_PRO)
+def activate_pro_key_on_host():
+    """Activate license on host (needed for DNS forward and EC2 daemon)."""
+    try:
+        licensingv2.get_licensed_environment().activate()
+    except licensingv2.LicensingError as e:
+        # license activation was unsuccessful (this can also be because no auth token was set)
+        # defensively set pro to False so that we don't load pro plugins
+        pro_config.ACTIVATE_PRO = False
+
+        # check also with LOCALSTACK_ prefix here because we don't have the handling from the docker entrypoint on the host
+        ack = localstack_config.is_env_true(
+            "LOCALSTACK_ACKNOWLEDGE_ACCOUNT_REQUIREMENT") or localstack_config.is_env_true(
+            "ACKNOWLEDGE_ACCOUNT_REQUIREMENT")
+        # Note: this can also fail because they've got their connection set up wrong.
+        active = _check_grace_period_active(ack)
+        if not ack and active:
+            # Grace period is active but unused. Prompt user to set up account or snooze.
+            raise LocalstackExit(reason=LICENSE_ERROR_MESSAGE, code=55)
+        if ack and active:
+            # Grace period is active, start in community mode (no pro features).
+            LOG.info("Grace period active: starting LocalStack in community mode")
+            return
+        if ack and not active:
+            # Grace period expired or endpoint unreachable
+            raise LocalstackExit(reason=GRACE_PERIOD_EXPIRED_MESSAGE, code=55)
+        raise LocalstackExit(reason=e.get_user_friendly(), code=55)
+
+
+@hooks.configure_localstack_container(priority=10, should_load=pro_config.ACTIVATE_PRO)
+def configure_pro_container(container: Container):
+    """Configure the LocalStack container for pro features."""
+    modify_gateway_listen_config(localstack_config)
+    container.configure(licensingv2.configure_container_licensing)
+
+
+@hooks.prepare_host(should_load=pro_config.ACTIVATE_PRO and pro_config.EXTENSION_DEV_MODE)
+def configure_extensions_dev_host():
+    """Load extension directories from ~/.localstack/extensions-dev.json."""
+    from localstack_cli.pro.core.bootstrap.extensions.bootstrap import run_on_configure_host_hook
+
+    run_on_configure_host_hook()
+
+
+@hooks.configure_localstack_container(
+    should_load=pro_config.ACTIVATE_PRO and pro_config.EXTENSION_DEV_MODE
+)
+def configure_extensions_dev_container(container: Container):
+    """Configure container for extension developer mode."""
+    from localstack_cli.pro.core.bootstrap.extensions.bootstrap import (
+        run_on_configure_localstack_container_hook,
+    )
+
+    run_on_configure_localstack_container_hook(container)

{localstack-4.14.0 → localstack-2026.3.0}/localstack_cli/utils/bootstrap.py

@@ -428,7 +428,7 @@ def validate_localstack_config(name: str):
     image_name = ls_service_details.get("image", "")
     if image_name.split(":")[0] not in constants.OFFICIAL_IMAGES:
         warns.append(
-            f'Using custom image "{image_name}", we recommend using an official image: {constants.OFFICIAL_IMAGES}'
+            f'Using custom image "{image_name}", we recommend using an officially supported image: {constants.OFFICIAL_IMAGES}'
         )
 
     # prepare config options
@@ -467,12 +467,7 @@ def validate_localstack_config(name: str):
 
 
 def get_docker_image_to_start():
-    image_name = os.environ.get("IMAGE_NAME")
-    if not image_name:
-        image_name = constants.DOCKER_IMAGE_NAME
-        if is_auth_token_configured():
-            image_name = constants.DOCKER_IMAGE_NAME_PRO
-    return image_name
+    return os.environ.get("IMAGE_NAME", constants.DOCKER_IMAGE_NAME_PRO)
 
 
 def extract_port_flags(user_flags, port_mappings: PortMappings):

{localstack-4.14.0 → localstack-2026.3.0}/localstack_cli/utils/container_networking.py

@@ -78,7 +78,7 @@ def get_endpoint_for_network(network: str | None = None) -> str:
             else:
                 # In a non-Linux host-mode environment, we need to determine the IP of the host by running a container
                 # (basically macOS host mode, i.e. this is a feature to improve the developer experience)
-                image_name = constants.DOCKER_IMAGE_NAME
+                image_name = constants.DOCKER_IMAGE_NAME_PRO
                 out, _ = DOCKER_CLIENT.run_container(
                     image_name,
                     remove=True,

{localstack-4.14.0 → localstack-2026.3.0}/localstack_cli/utils/docker_utils.py

@@ -4,7 +4,7 @@ import platform
 import random
 
 from localstack_cli import config
-from localstack_cli.constants import DEFAULT_VOLUME_DIR, DOCKER_IMAGE_NAME
+from localstack_cli.constants import DEFAULT_VOLUME_DIR, DOCKER_IMAGE_NAME_PRO
 from localstack_cli.utils.collections import ensure_list
 from localstack_cli.utils.container_utils.container_client import (
     ContainerClient,
@@ -266,7 +266,7 @@ def _get_ports_check_docker_image() -> str:
         return container["Config"]["Image"]
     except Exception:
         # fall back to using the default Docker image
-        return DOCKER_IMAGE_NAME
+        return DOCKER_IMAGE_NAME_PRO
 
 
 DOCKER_CLIENT: ContainerClient = create_docker_client()

{localstack-4.14.0 → localstack-2026.3.0}/localstack_cli/version.py

@@ -28,7 +28,7 @@ version_tuple: VERSION_TUPLE
 commit_id: COMMIT_ID
 __commit_id__: COMMIT_ID
 
-__version__ = version = '4.14.0'
-__version_tuple__ = version_tuple = (4, 14, 0)
+__version__ = version = '2026.3.0'
+__version_tuple__ = version_tuple = (2026, 3, 0)
 
-__commit_id__ = commit_id = 'ga77cc7d02'
+__commit_id__ = commit_id = 'g99b4cdb24'

{localstack-4.14.0 → localstack-2026.3.0}/tests/cli/test_cli.py

@@ -60,8 +60,8 @@ def backup_and_remove_image(monkeypatch, container_client: ContainerClient):
     up" - i.e. tag it with another tag, and restore it afterwards.
     """
 
-    source_image_name = f"{constants.DOCKER_IMAGE_NAME}:latest"
-    tagged_image_name = f"{constants.DOCKER_IMAGE_NAME}:backup"
+    source_image_name = f"{constants.DOCKER_IMAGE_NAME_PRO}:latest"
+    tagged_image_name = f"{constants.DOCKER_IMAGE_NAME_PRO}:backup"
     container_client.tag_image(source_image_name, tagged_image_name)
     container_client.remove_image(source_image_name, force=True)
     monkeypatch.setenv("IMAGE_NAME", source_image_name)
@@ -74,7 +74,7 @@ def backup_and_remove_image(monkeypatch, container_client: ContainerClient):
 @pytest.fixture
 def create_container(container_client: ContainerClient):
     """Creates (but does not start) a docker container with the name 'localstack-main'"""
-    container_client.create_container(image_name="localstack/localstack", name="localstack-main")
+    container_client.create_container(image_name="localstack/localstack-pro", name="localstack-main")
     yield
     container_client.remove_container("localstack-main", force=True)
 
@@ -106,7 +106,7 @@ class TestCliContainerLifecycle:
 
     @pytest.mark.usefixtures("backup_and_remove_image")
     def test_pulling_image_message(self, runner, container_client: ContainerClient):
-        image_name_and_tag = f"{constants.DOCKER_IMAGE_NAME}:latest"
+        image_name_and_tag = f"{constants.DOCKER_IMAGE_NAME_PRO}:latest"
         with pytest.raises(NoSuchImage):
             container_client.inspect_image(image_name_and_tag, pull=False)
 
@@ -245,34 +245,11 @@ class TestCliContainerLifecycle:
         output = container_client.exec_in_container(config.MAIN_CONTAINER_NAME, ["ps", "-fu", user])
         assert "localstack-supervisor" in to_str(output[0])
 
-    @pytest.mark.skip(reason="Test assumes localstack module name, not localstack_cli")
-    def test_start_cli_within_container(self, runner, container_client, tmp_path):
-        output = container_client.run_container(
-            # CAVEAT: Updates to the Docker image are not immediately reflected when using the latest image from
-            # DockerHub in the CI. Re-build the Docker image locally through
-            # `IMAGE_NAME="localstack/localstack" ./bin/docker-helper.sh build` for local testing.
-            "localstack/localstack",
-            remove=True,
-            entrypoint="",
-            command=["bin/localstack", "start", "-d"],
-            volumes=[
-                ("/var/run/docker.sock", "/var/run/docker.sock"),
-                (MODULE_MAIN_PATH, "/opt/code/localstack/localstack"),
-            ],
-            env_vars={"LOCALSTACK_VOLUME_DIR": f"{tmp_path}/ls-volume"},
-        )
-        stdout = to_str(output[0])
-        assert "starting LocalStack" in stdout
-        assert "detaching" in stdout
-
-        # assert that container is running
-        runner.invoke(cli, ["wait", "-t", "60"])
-
     def test_install_cli_in_container(self, container_client):
         """Test that the standalone CLI can be installed alongside the runtime in a container."""
         # Mount the CLI source code and install it, then run a simple command
         output = container_client.run_container(
-            "localstack/localstack",
+            "localstack/localstack-pro",
             remove=True,
             entrypoint="",
             command=[

{localstack-4.14.0 → localstack-2026.3.0}/tests/cli/test_cli_pro.py

@@ -153,30 +153,6 @@ class TestCliContainerLifecycle:
         output = container_client.exec_in_container(config.MAIN_CONTAINER_NAME, ["ps", "-fu", user])
         assert "localstack-supervisor" in to_str(output[0])
 
-    @pytest.mark.skip(reason="Test assumes localstack module name, not localstack_cli")
-    def test_start_cli_within_container(self, runner, container_client):
-        output = container_client.run_container(
-            # CAVEAT: Updates to the Docker image are not immediately reflected when using the latest image from
-            # DockerHub in the CI.
-            # Re-build the Docker image locally with `bin/docker-helper.sh build` in community for local testing.
-            "localstack/localstack",
-            remove=True,
-            entrypoint="",
-            command=["bin/localstack", "start", "-d"],
-            volumes=[
-                ("/var/run/docker.sock", "/var/run/docker.sock"),
-                (MODULE_MAIN_PATH, "/opt/code/localstack/localstack"),
-            ],
-            env_vars={"LOCALSTACK_VOLUME_DIR": "/tmp/ls-volume"},
-        )
-        stdout = to_str(output[0])
-        assert "starting LocalStack" in stdout
-        assert "detaching" in stdout
-
-        # assert that container is running
-        runner.invoke(cli, ["wait", "-t", "180"])
-
-
 @pytest.mark.skip(reason="TODO: fix test setup - extensions tests need investigation")
 class TestExtensionsCli:
     def test_extensions_install_with_IMAGE_NAME_installs_correct_venv_version(

{localstack-4.14.0 → localstack-2026.3.0}/tests/integration/cli/test_cli.py

@@ -156,7 +156,7 @@ def test_validate_config(runner, monkeypatch, tmp_path):
 services:
   localstack:
     container_name: "${LOCALSTACK_DOCKER_NAME-localstack-main}"
-    image: localstack/localstack
+    image: localstack/localstack-pro
     network_mode: bridge
     ports:
       - "127.0.0.1:53:53"

localstack-2026.3.0/tests/unit/pro/test_grace_period.py

@@ -0,0 +1,101 @@
+"""
+Tests for the grace period / LOCALSTACK_ACKNOWLEDGE_ACCOUNT_REQUIREMENT feature.
+
+Temporary — this entire file should be removed when the grace period expires.
+"""
+
+from unittest.mock import MagicMock
+
+import pytest
+from localstack_cli.pro.core import config as pro_config
+from localstack_cli.pro.core.bootstrap.licensingv2 import LicensingError
+from localstack_cli.pro.core.plugins import (
+    GRACE_PERIOD_EXPIRED_MESSAGE,
+    LICENSE_ERROR_MESSAGE,
+    activate_pro_key_on_host,
+)
+from localstack_cli.runtime.exceptions import LocalstackExit
+
+
+def _patch_licensing_failure(monkeypatch):
+    """Set up a mock licensed environment that fails activation."""
+    mock_env = MagicMock()
+    mock_env.activate.side_effect = LicensingError("no credentials")
+
+    import localstack_cli.pro.core.plugins as plugins_module
+
+    monkeypatch.setattr(plugins_module.licensingv2, "get_licensed_environment", lambda: mock_env)
+    monkeypatch.setattr(plugins_module.licensingv2, "LicensingError", LicensingError)
+
+
+def test_no_ack_grace_active_exits_with_license_message(monkeypatch):
+    """No LOCALSTACK_ACKNOWLEDGE_ACCOUNT_REQUIREMENT + grace active should exit with license error message."""
+    import localstack_cli.pro.core.plugins as plugins_module
+
+    _patch_licensing_failure(monkeypatch)
+    monkeypatch.delenv("LOCALSTACK_ACKNOWLEDGE_ACCOUNT_REQUIREMENT", raising=False)
+    monkeypatch.delenv("ACKNOWLEDGE_ACCOUNT_REQUIREMENT", raising=False)
+    monkeypatch.setattr(plugins_module, "_check_grace_period_active", lambda ack: True)
+
+    with pytest.raises(LocalstackExit) as exc_info:
+        activate_pro_key_on_host()
+
+    assert "LocalStack requires an account to run" in str(exc_info.value)
+    assert "LOCALSTACK_ACKNOWLEDGE_ACCOUNT_REQUIREMENT=1" in str(exc_info.value)
+
+
+def test_no_ack_grace_inactive_exits_with_licensing_error(monkeypatch):
+    """No LOCALSTACK_ACKNOWLEDGE_ACCOUNT_REQUIREMENT + grace inactive should exit with LicensingError message."""
+    import localstack_cli.pro.core.plugins as plugins_module
+
+    _patch_licensing_failure(monkeypatch)
+    monkeypatch.delenv("LOCALSTACK_ACKNOWLEDGE_ACCOUNT_REQUIREMENT", raising=False)
+    monkeypatch.delenv("ACKNOWLEDGE_ACCOUNT_REQUIREMENT", raising=False)
+    monkeypatch.setattr(plugins_module, "_check_grace_period_active", lambda ack: False)
+
+    with pytest.raises(LocalstackExit) as exc_info:
+        activate_pro_key_on_host()
+
+    assert "no credentials" in str(exc_info.value)
+
+
+ACK_ENV_VARS = [
+    "LOCALSTACK_ACKNOWLEDGE_ACCOUNT_REQUIREMENT",
+    "ACKNOWLEDGE_ACCOUNT_REQUIREMENT",
+]
+
+
+@pytest.mark.parametrize("ack_env_var", ACK_ENV_VARS)
+def test_ack_with_grace_active_starts_community(monkeypatch, ack_env_var):
+    """ACKNOWLEDGE_ACCOUNT_REQUIREMENT=1 + grace period active should run in community mode."""
+    import localstack_cli.pro.core.plugins as plugins_module
+
+    _patch_licensing_failure(monkeypatch)
+    for var in ACK_ENV_VARS:
+        monkeypatch.delenv(var, raising=False)
+    monkeypatch.setenv(ack_env_var, "1")
+    monkeypatch.setattr(plugins_module, "_check_grace_period_active", lambda ack: True)
+    monkeypatch.setattr(pro_config, "ACTIVATE_PRO", True)
+
+    activate_pro_key_on_host()
+
+    assert pro_config.ACTIVATE_PRO is False
+
+
+@pytest.mark.parametrize("ack_env_var", ACK_ENV_VARS)
+def test_ack_with_grace_expired_exits(monkeypatch, ack_env_var):
+    """ACKNOWLEDGE_ACCOUNT_REQUIREMENT=1 + grace period expired/404 should exit with licensing error."""
+    import localstack_cli.pro.core.plugins as plugins_module
+
+    _patch_licensing_failure(monkeypatch)
+    for var in ACK_ENV_VARS:
+        monkeypatch.delenv(var, raising=False)
+    monkeypatch.setenv(ack_env_var, "1")
+    monkeypatch.setattr(plugins_module, "_check_grace_period_active", lambda ack: False)
+    monkeypatch.setattr(pro_config, "ACTIVATE_PRO", True)
+
+    with pytest.raises(LocalstackExit) as exc_info:
+        activate_pro_key_on_host()
+
+    assert GRACE_PERIOD_EXPIRED_MESSAGE in str(exc_info.value)
+    assert pro_config.ACTIVATE_PRO is False