menda-cli 0.2.3__tar.gz → 0.2.4__tar.gz

{menda_cli-0.2.3 → menda_cli-0.2.4}/.github/workflows/ci.yml

@@ -10,3 +10,6 @@ on:
 jobs:
   ci:
     uses: mendaml/menda-gh-actions/.github/workflows/python-ci.yml@v1
+    permissions:
+      contents: read
+      id-token: write

{menda_cli-0.2.3 → menda_cli-0.2.4}/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to this project will be documented in this file.
 
+## [0.2.4] - 2026-04-21
+
+### Features
+
+- Menda 622 fix device auth login issues (#18) ([59cb101](https://github.com/mendaml/menda-cli/commit/59cb1015bc7535c1bcaa0134b19d05d1ece7b44e))
+
 ## [0.2.3] - 2026-04-14
 
 ### Features

{menda_cli-0.2.3 → menda_cli-0.2.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: menda-cli
-Version: 0.2.3
+Version: 0.2.4
 Summary: A CLI for building, deploying and managing menda data products.
 Author-email: jpm2617 <jose.moreno@mendaml.com>
 Requires-Python: >=3.11

{menda_cli-0.2.3 → menda_cli-0.2.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "menda-cli"
-version = "0.2.3"
+version = "0.2.4"
 description = "A CLI for building, deploying and managing menda data products."
 readme = "README.md"
 authors = [

{menda_cli-0.2.3 → menda_cli-0.2.4}/src/menda/auth/api.py

@@ -6,7 +6,7 @@ AUTHORIZATION_PATH = "/auth/device/authorize"
 TOKEN_PATH = "/auth/device/token"  # noqa: S105
 WHOAMI_PATH = "/auth/whoami"
 OAUTH2_TOKEN_PATH = "/auth/oauth2/token"  # noqa: S105
-CONFIG_PATH = "/system/config"
+CONFIG_PATH = "/auth/discovery"
 
 
 class AuthRoutes:

menda_cli-0.2.4/src/menda/auth/http.py

@@ -0,0 +1,98 @@
+"""HTTP session factory for auth API calls."""
+
+import typing
+from functools import partial
+from urllib.parse import urlparse
+
+import requests
+
+from menda.cli.exceptions import NetworkError
+
+API_VERSION = "/api/v1"
+
+
+class CustomRequestsSession(requests.Session):
+    """Requests session with custom methods."""
+
+    def delete_with_payload(self, **kwargs: typing.Any) -> requests.Response:  # noqa: ANN401
+        """DELETE with request body support."""
+        return self.request(method="DELETE", **kwargs)
+
+
+def _translate_connection_error(err: requests.exceptions.RequestException, base_url: str) -> NetworkError:
+    """Convert a low-level requests exception into a user-friendly NetworkError."""
+    host = urlparse(base_url).hostname or base_url
+
+    if isinstance(err, requests.exceptions.SSLError):
+        return NetworkError(
+            message=f"TLS/SSL handshake failed when contacting '{host}'.",
+            context=f"network:ssl:{host}",
+            suggestion=(
+                "Check that the host URL in your mendacfg profile is correct "
+                "and that your system clock and CA certificates are up to date."
+            ),
+        )
+
+    if isinstance(err, requests.exceptions.ConnectTimeout):
+        return NetworkError(
+            message=f"Timed out while connecting to '{host}'.",
+            context=f"network:timeout:{host}",
+            suggestion="Check your network connection or try again in a moment.",
+        )
+
+    if isinstance(err, requests.exceptions.ReadTimeout):
+        return NetworkError(
+            message=f"Timed out while waiting for a response from '{host}'.",
+            context=f"network:timeout:{host}",
+            suggestion="The service may be slow or unavailable — please try again.",
+        )
+
+    if isinstance(err, requests.exceptions.ConnectionError):
+        cause = str(err.__cause__) if err.__cause__ else str(err)
+        is_dns = "resolve" in cause.lower() or "name or service" in cause.lower() or "nodename" in cause.lower()
+        if is_dns:
+            return NetworkError(
+                message=f"Could not resolve '{host}'.",
+                context=f"network:dns:{host}",
+                suggestion=(
+                    "Check the 'host' value in your mendacfg profile and confirm you have internet connectivity."
+                ),
+            )
+        return NetworkError(
+            message=f"Could not connect to '{host}'.",
+            context=f"network:connection:{host}",
+            suggestion=("Verify the host is reachable and that the 'host' value in your mendacfg profile is correct."),
+        )
+
+    return NetworkError(
+        message=f"Network error while contacting '{host}': {err}",
+        context=f"network:other:{host}",
+        suggestion="Check your network connection and profile configuration.",
+    )
+
+
+def requests_session(base_url: str) -> CustomRequestsSession:
+    """Create a requests session with a base URL prepended to all requests.
+
+    Connection-layer failures (DNS, TLS, timeouts, refused connections) are
+    translated into NetworkError so users see a concise, actionable message
+    instead of a requests/urllib3 traceback.
+    """
+
+    def new_request(
+        base_url: str,
+        f: typing.Callable,
+        method: str,
+        url: str,
+        *args: typing.Any,  # noqa: ANN401
+        **kwargs: typing.Any,  # noqa: ANN401
+    ) -> requests.Response:
+        try:
+            return f(method, base_url + API_VERSION + url, *args, **kwargs)
+        except requests.exceptions.RequestException as err:
+            raise _translate_connection_error(err, base_url) from err
+
+    base_url = "" if base_url is None else base_url.rstrip("/")
+    s = CustomRequestsSession()
+    s.request = partial(new_request, base_url, s.request)  # ty:ignore[invalid-assignment]
+    return s

{menda_cli-0.2.3 → menda_cli-0.2.4}/src/menda/auth/oauth2/client.py

@@ -24,9 +24,7 @@ def fetch_tenant_config(session: requests.Session, host: str) -> str:
 
     hostname = urlparse(host).hostname
     if not hostname:
-        raise AuthenticationError(
-            detail=f"Invalid host URL: {host}"
-        )
+        raise AuthenticationError(detail=f"Invalid host URL: {host}")
     response = AuthRoutes.config(session=session, hostname=hostname)
     try:
         body = response.json()

{menda_cli-0.2.3 → menda_cli-0.2.4}/src/menda/logging.py

@@ -10,6 +10,7 @@ the CLI package.
 """
 
 import structlog
+from structlog.dev import ConsoleRenderer, RichTracebackFormatter, plain_traceback
 from structlog.processors import ExceptionRenderer
 from structlog.typing import Processor
 
@@ -49,9 +50,14 @@ def configure_logging(log_level: str, json_output: bool = False, show_locals: bo
             structlog.processors.JSONRenderer(),
         ]
     else:
+        # structlog's default rich formatter has show_locals=True, which leaks
+        # internal state (config values, tokens, etc.) into end-user tracebacks.
+        # Opt into a formatter that honors our flag and defaults to off.
+        exception_formatter = RichTracebackFormatter(show_locals=True) if show_locals else plain_traceback
         renderers = [
-            structlog.dev.ConsoleRenderer(
+            ConsoleRenderer(
                 colors=True,
+                exception_formatter=exception_formatter,
                 level_styles={
                     "debug": "\033[36m",
                     "info": "\033[32m",

{menda_cli-0.2.3 → menda_cli-0.2.4}/uv.lock

@@ -415,7 +415,7 @@ wheels = [
 
 [[package]]
 name = "menda-cli"
-version = "0.2.3"
+version = "0.2.4"
 source = { editable = "." }
 dependencies = [
     { name = "click" },

menda_cli-0.2.3/src/menda/auth/http.py

@@ -1,35 +0,0 @@
-"""HTTP session factory for auth API calls."""
-
-import typing
-from functools import partial
-
-import requests
-
-API_VERSION = "/api/v1"
-
-
-class CustomRequestsSession(requests.Session):
-    """Requests session with custom methods."""
-
-    def delete_with_payload(self, **kwargs: typing.Any) -> requests.Response:  # noqa: ANN401
-        """DELETE with request body support."""
-        return self.request(method="DELETE", **kwargs)
-
-
-def requests_session(base_url: str) -> CustomRequestsSession:
-    """Create a requests session with a base URL prepended to all requests."""
-
-    def new_request(
-        base_url: str,
-        f: typing.Callable,
-        method: str,
-        url: str,
-        *args: typing.Any,  # noqa: ANN401
-        **kwargs: typing.Any,  # noqa: ANN401
-    ) -> requests.Response:
-        return f(method, base_url + API_VERSION + url, *args, **kwargs)
-
-    base_url = "" if base_url is None else base_url.rstrip("/")
-    s = CustomRequestsSession()
-    s.request = partial(new_request, base_url, s.request)  # ty:ignore[invalid-assignment]
-    return s