obsideo-cli 0.3.1__tar.gz → 0.5.0__tar.gz

obsideo_cli-0.5.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Regan Milne
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

{obsideo_cli-0.3.1 → obsideo_cli-0.5.0}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: obsideo-cli
-Version: 0.3.1
-Summary: Obsideo Cloud - encrypted storage we can't read, for people and AI agents. 12 GB free, no card. Save, browse, and sync from your terminal; agent integration contract at obsideo.io/agents.md
+Version: 0.5.0
+Summary: Obsideo Cloud CLI - client-side encrypted storage for people and AI agents: content is encrypted on your machine before upload. 12 GB free, no card. Save, browse, and sync from your terminal; agent integration contract at obsideo.io/agents.md
 License: MIT
 Project-URL: Homepage, https://obsideo.io
 Project-URL: Documentation, https://obsideo.io/docs/
@@ -9,20 +9,22 @@ Project-URL: Agent integration (AGENTS.md), https://obsideo.io/agents.md
 Keywords: encrypted storage,ai agents,agent storage,s3,backup,end-to-end encryption,object storage,free tier,cli,sync
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
+License-File: LICENSE
 Requires-Dist: boto3>=1.28
 Requires-Dist: cryptography>=41.0
 Requires-Dist: certifi
+Dynamic: license-file
 
 # obsideo-cli
 
-**Encrypted storage we can't read.** Save, browse, and sync whatever you want
+**Client-side encrypted storage: your content is encrypted on your machine before upload, so the platform cannot read it.** File and folder names are encrypted too, by default (AES-SIV, keyed off your data key), so the platform sees opaque tokens rather than your filenames. Save, browse, and sync whatever you want
 from your terminal. Files are encrypted on your machine before they leave, so
 Obsideo's gateway, coordinator, and storage providers only ever see ciphertext.
-Your data lands on three independent providers (RF=3).
+Your data lands on three providers (RF=3).
 
 ```
 pip install obsideo-cli
-obsideo login    # email -> 3 GB free
+obsideo login    # email -> 12 GB free
 obsideo          # open the shell
 ```
 
@@ -33,7 +35,7 @@ $ obsideo login
 Enter your email: you@example.com
 Check your email for a verification code.
 Enter verification code: 482913
-You're all set. 3 GB free.
+You're all set. 12 GB free.
 ```
 
 Login is handled by Obsideo's signup service at **`signup.obsideo.io`**: it emails
@@ -59,7 +61,7 @@ obsideo:/trip/ get cat.jpg ./downloaded.jpg
 
 | Command | Description |
 |---|---|
-| `obsideo login` | Sign up / log in with your email (3 GB free) |
+| `obsideo login` | Sign up / log in with your email (12 GB free) |
 | `ls [path]` | List files and folders |
 | `cd <path>` / `pwd` | Move around / show location |
 | `put <local> [name]` | Encrypt + upload a file, or a whole folder (recursive). `--no-encrypt` to store as-is |

{obsideo_cli-0.3.1 → obsideo_cli-0.5.0}/README.md

@@ -1,13 +1,13 @@
 # obsideo-cli
 
-**Encrypted storage we can't read.** Save, browse, and sync whatever you want
+**Client-side encrypted storage: your content is encrypted on your machine before upload, so the platform cannot read it.** File and folder names are encrypted too, by default (AES-SIV, keyed off your data key), so the platform sees opaque tokens rather than your filenames. Save, browse, and sync whatever you want
 from your terminal. Files are encrypted on your machine before they leave, so
 Obsideo's gateway, coordinator, and storage providers only ever see ciphertext.
-Your data lands on three independent providers (RF=3).
+Your data lands on three providers (RF=3).
 
 ```
 pip install obsideo-cli
-obsideo login    # email -> 3 GB free
+obsideo login    # email -> 12 GB free
 obsideo          # open the shell
 ```
 
@@ -18,7 +18,7 @@ $ obsideo login
 Enter your email: you@example.com
 Check your email for a verification code.
 Enter verification code: 482913
-You're all set. 3 GB free.
+You're all set. 12 GB free.
 ```
 
 Login is handled by Obsideo's signup service at **`signup.obsideo.io`**: it emails
@@ -44,7 +44,7 @@ obsideo:/trip/ get cat.jpg ./downloaded.jpg
 
 | Command | Description |
 |---|---|
-| `obsideo login` | Sign up / log in with your email (3 GB free) |
+| `obsideo login` | Sign up / log in with your email (12 GB free) |
 | `ls [path]` | List files and folders |
 | `cd <path>` / `pwd` | Move around / show location |
 | `put <local> [name]` | Encrypt + upload a file, or a whole folder (recursive). `--no-encrypt` to store as-is |

{obsideo_cli-0.3.1 → obsideo_cli-0.5.0}/obsideo/cli.py

@@ -3,7 +3,7 @@
 Save, browse, and sync whatever you want - encrypted on your machine before it
 leaves, so Obsideo can't read it. An interactive shell plus one-shot commands.
 
-    obsideo login                 sign up / log in (email -> 3 GB free)
+    obsideo login                 sign up / log in (email -> 12 GB free)
     obsideo                       start the interactive shell
     obsideo ls / put / get ...    run a single command
 """
@@ -145,6 +145,35 @@ def show_banner() -> None:
     print(f"\033[36m{_BANNER}\033[0m", file=sys.stderr)
 
 
+# One-shots that print information and then leave the user at their system
+# prompt with nothing on screen saying what to type next. Found in first-run
+# testing: `obsideo account` printed a status block, exited, and the next thing
+# typed went to cmd.exe. Commands that act on files (put/get/ls) don't need it —
+# whoever ran them already knows what they're doing.
+_STRANDING_COMMANDS = {"account", "about", "faq", "messages", "refer", "config", "info"}
+
+
+def show_next_steps(command: str) -> None:
+    """One next-step line to stderr after an informational one-shot. TTY-gated,
+    so it never reaches an agent's stdout or a pipe."""
+    if not _chrome_enabled() or command.lower() not in _STRANDING_COMMANDS:
+        return
+    print("\033[2mNext:\033[0m obsideo ls  ·  obsideo put <file>  ·  "
+          "\033[36mobsideo\033[0m for the interactive shell", file=sys.stderr)
+
+
+def _announce_propagation_wait() -> None:
+    """Said once, when a brand-new account's first call reaches the gateway
+    before its credentials have. Always shown, TTY or not: a script that appears
+    to hang for a minute needs a reason on stderr just as much as a person does."""
+    print("  New credentials are still reaching the storage gateway "
+          "(this takes up to about half a minute on a new account). Retrying...",
+          file=sys.stderr)
+
+
+storage.propagation_notifier = _announce_propagation_wait
+
+
 def _usage_bar(pct: float, cells: int = 10) -> str:
     filled = min(cells, max(0, round(pct * cells)))
     return "#" * filled + "-" * (cells - filled)
@@ -290,35 +319,170 @@ def run_admin(argv: list) -> int:
     return 0
 
 
-def run_login(url: str | None = None) -> bool:
-    """Interactive email-OTP login. Returns True on success."""
+LOGIN_USAGE = """\
+Usage: obsideo login [options]
+
+  With no options, prompts for everything (the human path).
+
+Options:
+  --email <address>   account email; skips the email prompt
+  --code <123456>     the 6-digit code from that inbox; skips the code prompt
+  --source <label>    attribution recorded on the account (e.g. your tool name)
+  --referral <code>   a friend's referral code, +1 GB
+  --json              print a machine-readable receipt instead of prose
+  -h, --help          show this
+
+Driving it without a terminal (two calls, because the code arrives by email):
+  obsideo login --email you@example.com --source my-agent --json
+  obsideo login --email you@example.com --code 123456 --json
+
+With no terminal and a missing required value, this exits with an error naming
+the flag rather than blocking on a prompt nobody can answer."""
+
+_LOGIN_FLAGS = {"--email": "email", "--code": "code", "--source": "source",
+                "--referral": "referral"}
+
+
+def _parse_login_args(args: list[str]) -> tuple[dict, str | None]:
+    """Tiny hand-rolled parser. Returns (kwargs, error)."""
+    opts: dict = {}
+    i = 0
+    while i < len(args):
+        a = args[i]
+        if a in ("-h", "--help"):
+            opts["help"] = True
+            i += 1
+        elif a == "--json":
+            opts["json_out"] = True
+            i += 1
+        elif a in _LOGIN_FLAGS:
+            if i + 1 >= len(args) or args[i + 1].startswith("--"):
+                return {}, f"{a} needs a value."
+            opts[_LOGIN_FLAGS[a]] = args[i + 1]
+            i += 2
+        else:
+            return {}, f"Unknown option for login: {a}"
+    return opts, None
+
+
+class NonInteractive(Exception):
+    """A required value was missing and there is no terminal to ask on."""
+
+
+def _ask(prompt: str, provided: str | None, flag: str, *, required: bool = True) -> str:
+    """Return a supplied value, else prompt for it, else fail loudly.
+
+    An agent or CI job running `obsideo login` used to hit a bare input() and
+    either hang or die with a raw EOFError traceback. Failing with a message
+    naming the flag is always better than either.
+
+    isatty() is checked first as a fast path but is NOT trusted on its own:
+    on Windows shells it can report a terminal when stdin is redirected. The
+    EOFError catch is what actually makes this reliable everywhere.
+    """
+    if provided is not None:
+        return provided.strip()
+    if sys.stdin.isatty():
+        try:
+            # Prompt on stderr, not via input()'s own argument, which writes to
+            # stdout. Keeps stdout parseable for --json callers.
+            print(prompt, end="", flush=True, file=sys.stderr)
+            return input().strip()
+        except (EOFError, KeyboardInterrupt):
+            pass
+    elif required:
+        raise NonInteractive(f"{flag} is required when there is no terminal to prompt on")
+    else:
+        return ""
+    if required:
+        raise NonInteractive(f"{flag} is required when there is no terminal to prompt on")
+    return ""
+
+
+def run_login(url: str | None = None, *, email: str | None = None,
+              code: str | None = None, source: str | None = None,
+              referral: str | None = None, json_out: bool = False) -> bool:
+    """Email-OTP login. Interactive when run by a human, flag-driven for agents.
+
+    Fully interactive (no flags) behaves exactly as it always has. Supplying
+    --email alone performs step one only (send the code) and returns, because
+    the code arrives out of band; supplying --email and --code performs the
+    verification. That two-call shape is what lets a caller with no terminal
+    drive the whole flow.
+    """
     url = url or config.signup_url()
-    email = input("Enter your email: ").strip()
+    # In --json mode the human narration goes to stderr so stdout carries only
+    # the receipt and a caller can pipe it straight into a parser.
+    say = (lambda *a, **k: print(*a, **k, file=sys.stderr)) if json_out else print
+    try:
+        email = _ask("Enter your email: ", email, "--email")
+    except NonInteractive as e:
+        say(f"{e}. See `obsideo login --help`.")
+        return False
     if not email:
-        print("Email is required.")
+        say("Email is required.")
         return False
-    print("Sending a verification code...", end="", flush=True)
+    # Step one — unless the caller already holds a code, in which case this is
+    # the SECOND of the two non-interactive calls and step one already ran.
+    # Sending another code here invalidates the one they are holding, and inside
+    # the shim's 30 s resend limit it fails the login outright, so the documented
+    # two-call flow could never complete. `source` is recorded by auth/start on
+    # the first call, so skipping it here loses no attribution.
+    if not code:
+        say("Sending a verification code...", end="", flush=True)
+        try:
+            login.start(email, url, source=source)
+        except login.LoginError as e:
+            say(f"\nCouldn't start signup: {e}")
+            return False
+        say(" sent.")
+        say(f"Check {email} for a verification code (it may be in spam).")
     try:
-        login.start(email, url)
-    except login.LoginError as e:
-        print(f"\nCouldn't start signup: {e}")
-        return False
-    print(" sent.")
-    print(f"Check {email} for a verification code (it may be in spam).")
-    code = input("Enter verification code: ").strip()
-    # Optional friend's referral code -> +1 GB (4 GB instead of 3). Blank = skip.
-    referral_code = input("Referral code from a friend (optional, Enter to skip): ").strip()
-    print("Verifying + provisioning storage...", end="", flush=True)
+        code = _ask("Enter verification code: ", code, "--code")
+        # Optional friend's referral code -> +1 GB (13 GB instead of 12).
+        referral_code = _ask("Referral code from a friend (optional, Enter to skip): ",
+                             referral, "--referral", required=False)
+    except NonInteractive:
+        # There is no way to ask for the code here, and the code only arrives by
+        # email anyway. This is the normal path for a caller without a terminal:
+        # stop cleanly at step one, having actually sent the code, and tell the
+        # caller how to finish. Success, not failure.
+        if json_out:
+            print(json.dumps({"ok": True, "stage": "code_sent", "email": email,
+                              "next": f"obsideo login --email {email} --code <6-digit code>"},
+                             indent=2))
+        else:
+            print(f"\nCode sent. Finish with:\n  obsideo login --email {email} --code <code>")
+        return True
+    say("Verifying + provisioning storage...", end="", flush=True)
     try:
         creds = login.verify(email, code, url, referral_code=referral_code or None)
     except login.LoginError as e:
-        print(f"\nVerification failed: {e}")
+        say(f"\nVerification failed: {e}")
         return False
-    print(" done.")
+    say(" done.")
     storage.reset_client()
     # Make sure the data key exists + nudge the user to back it up.
     crypto.data_key()
-    print(f"\nYou're all set. {creds.get('quota_gb', 3)} GB free.")
+    if json_out:
+        # A receipt a caller can parse. Deliberately omits the secret key:
+        # it is already persisted to the credentials file, and printing it
+        # would put it in logs and terminal scrollback.
+        print(json.dumps({
+            "ok": True,
+            "stage": "provisioned",
+            "email": email,
+            "quota_gb": creds.get("quota_gb"),
+            "endpoint": creds.get("endpoint"),
+            "region": creds.get("region"),
+            "bucket": creds.get("bucket"),
+            "access_key": creds.get("access_key"),
+            "account_exists": creds.get("account_exists"),
+            "credentials_file": str(config.CREDENTIALS_FILE),
+            "data_key_file": str(crypto.DATA_KEY_FILE),
+        }, indent=2))
+        return True
+    print(f"\nYou're all set. {creds.get('quota_gb', 12)} GB free.")
     if referral_code:
         if creds.get("referral_applied"):
             print(f"Referral applied - enjoy the extra space! (code {referral_code.upper()})")
@@ -341,7 +505,7 @@ def run_login(url: str | None = None) -> bool:
 
 class ObsideoShell(cmd.Cmd):
     intro = (
-        "\n  Obsideo - encrypted storage we can't read.\n\n"
+        "\n  Obsideo - your content is encrypted before it leaves your machine.\n\n"
         "  Common commands:\n"
         "    put <file> / get <name>     upload / download\n"
         "    ls / cd / mkdir             browse your files\n"
@@ -381,9 +545,33 @@ class ObsideoShell(cmd.Cmd):
             return False
         return True
 
+    # ── help ────────────────────────────────────────────────────────────────
+    # Order the table reads in, roughly "get in, move around, move bytes, admin".
+    _HELP_ORDER = ["login", "ls", "cd", "pwd", "put", "get", "rm", "mkdir",
+                   "info", "account", "sync", "config", "refer", "messages",
+                   "about", "faq", "help", "exit"]
+
+    def do_help(self, arg):
+        """Show the command table, or 'help <command>' for one command."""
+        if arg:
+            return super().do_help(arg)
+        print("\n  Obsideo commands   (help <command> for detail)\n")
+        for name in self._HELP_ORDER:
+            fn = getattr(self, f"do_{name}", None)
+            if fn is None:
+                continue
+            # Summary = first sentence of the docstring, minus any "Usage:" tail,
+            # so the table can never drift from the per-command help.
+            doc = " ".join((fn.__doc__ or "").split())
+            summary = doc.split("Usage:")[0].split(". ")[0].strip().rstrip(".")
+            if len(summary) > 60:
+                summary = summary[:57].rstrip() + "..."
+            print(f"    {name:<9} {summary}")
+        print("\n    Aliases: upload = put, download = get, quit = exit\n")
+
     # ── login ───────────────────────────────────────────────────────────────
     def do_login(self, arg):
-        """Sign up / log in with your email (email -> 3 GB free)."""
+        """Sign up / log in with your email (email -> 12 GB free)."""
         run_login()
         self._cwd = ""
         self._refresh_prompt()
@@ -396,14 +584,25 @@ class ObsideoShell(cmd.Cmd):
         target = _unquote(arg.strip())
         prefix = self._resolve(target) if target else self._cwd
         try:
-            resp = storage.list_prefix(prefix)
+            # `ls` is what the post-login hint tells a new user to run, so it is
+            # often the first call a fresh credential ever makes.
+            resp = storage.with_propagation_retry(lambda: storage.list_prefix(prefix))
         except Exception as e:
             print(f"Error: {e}")
             return
+        # Names this account's key could not decrypt: written by another tool or
+        # under another data key. Mark them instead of showing a raw object key
+        # as though it were a filename.
+        opaque = resp.get("opaque") or set()
         for d in resp["folders"]:
-            print(f"  [dir]  {d}/")
+            print(f"  [dir]  {'?' if d in opaque else ' '}{d}/")
         for f in resp["files"]:
-            print(f"  [file] {f['name']}  {_human(f['size'])}")
+            mark = "?" if f["name"] in opaque else " "
+            print(f"  [file] {mark}{f['name']}  {_human(f['size'])}")
+        if opaque:
+            print("\n  ? = name could not be decrypted with this account's key "
+                  "(written by another tool,\n      or before the key changed). "
+                  "The raw object key is shown instead.")
         if not resp["folders"] and not resp["files"]:
             print("  (empty)")
 
@@ -583,7 +782,7 @@ class ObsideoShell(cmd.Cmd):
 
     # ── account ───────────────────────────────────────────────────────────────
     def do_account(self, arg):
-        """Show your account: plan, storage used, and where your files/keys live."""
+        """Show your plan, usage, and where your files and keys live."""
         if not self._require_login():
             return
         from obsideo import sync as sync_mod
@@ -610,8 +809,17 @@ class ObsideoShell(cmd.Cmd):
                 print(f"     Used:  {_human(used)}")
             if info.get("object_count"):
                 print(f"     Files: {info['object_count']} object(s)")
-            if info.get("days_remaining"):
-                print(f"     Renews/expires in {info['days_remaining']} day(s)")
+            days = info.get("days_remaining")
+            if days:
+                # A no-expiry account (the promo tier) comes back as a ~100-year
+                # day count, which rendered as "Renews/expires in 36437 day(s)".
+                # That reads like a bug to anyone evaluating us, so name it.
+                try:
+                    forever = int(days) > 3650
+                except (TypeError, ValueError):
+                    forever = False
+                print("     Expires: never"
+                      if forever else f"     Renews/expires in {days} day(s)")
         else:
             print("     Plan:  Free")
             try:
@@ -638,13 +846,13 @@ class ObsideoShell(cmd.Cmd):
     def do_about(self, arg):
         """What Obsideo is."""
         print("""
-  OBSIDEO DRIVE - encrypted storage we can't read.
+  OBSIDEO DRIVE - content encrypted on your machine before upload.
 
   Your files are encrypted on your device (AES-256-GCM) before they ever leave
-  it, then stored across three independent providers (RF=3). Obsideo's servers
+  it, then stored across three providers (RF=3). Obsideo's servers
   only ever see ciphertext - never your filenames, never your data.
 
-  - Free: 3 GB, no card, no expiry.
+  - Free: 12 GB, no card, no expiry.
   - Your keys live only on your machine (~/.obsideo). Back up data.key - lose it
     and the data is unrecoverable by design. That's the point: not even we can read it.
   - Install / update:  pip install -U obsideo-cli      More:  https://obsideo.io
@@ -659,7 +867,7 @@ class ObsideoShell(cmd.Cmd):
   A: No. They're encrypted on your device before upload; we only store ciphertext.
 
   Q: What's free?
-  A: 3 GB, no credit card, no expiry.
+  A: 12 GB, no credit card, no expiry.
 
   Q: What if I lose my key?
   A: Your key is ~/.obsideo/data.key - back it up. Without it the data can't be
@@ -879,9 +1087,11 @@ def main():
         print(f"obsideo-cli {config.VERSION}")
         return
 
-    # Branded banner on every init (stderr, TTY-gated). Skip for `admin` so
-    # operator tooling output stays clean.
-    if not (argv and argv[0] == "admin"):
+    # Branded banner: interactive sessions and `login` only (stderr, TTY-gated).
+    # It used to print on every invocation, which meant six lines of ASCII art
+    # ahead of two lines of answer on `obsideo ls`. First-run testing found that
+    # reads as noise and pushes the actual output down the screen.
+    if not argv or argv[0] == "login":
         show_banner()
 
     # Standard --help / -h (cmd.Cmd would otherwise read "--help" as a command).
@@ -889,10 +1099,19 @@ def main():
         ObsideoShell().onecmd("help")
         return
 
-    # `obsideo login` is interactive and handled specially.
+    # `obsideo login` is handled specially: it is the one command that may
+    # prompt, and the one an agent most needs to drive without prompting.
     if argv and argv[0] == "login":
-        ok = run_login()
-        if ok:
+        opts, err = _parse_login_args(argv[1:])
+        if err:
+            print(err)
+            print(LOGIN_USAGE)
+            sys.exit(2)
+        if opts.pop("help", False):
+            print(LOGIN_USAGE)
+            sys.exit(0)
+        ok = run_login(**opts)
+        if ok and not opts.get("json_out"):
             show_status()
         sys.exit(0 if ok else 1)
 
@@ -909,6 +1128,7 @@ def main():
     # status line here — one-shots stay fast and scriptable.
     if argv:
         shell.onecmd(" ".join(argv))
+        show_next_steps(argv[0])
         return
 
     # Interactive session ("initialization"): offer an update if one's out.
@@ -916,7 +1136,7 @@ def main():
 
     # First-run nudge: not logged in -> offer login.
     if not config.is_logged_in():
-        print("Welcome to Obsideo - encrypted storage we can't read.")
+        print("Welcome to Obsideo - your content is encrypted before it leaves your machine.")
         if input("Log in / sign up now? (Y/n): ").strip().lower() in ("", "y", "yes"):
             if not run_login():
                 return

{obsideo_cli-0.3.1 → obsideo_cli-0.5.0}/obsideo_cli.egg-info/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: obsideo-cli
-Version: 0.3.1
-Summary: Obsideo Cloud - encrypted storage we can't read, for people and AI agents. 12 GB free, no card. Save, browse, and sync from your terminal; agent integration contract at obsideo.io/agents.md
+Version: 0.5.0
+Summary: Obsideo Cloud CLI - client-side encrypted storage for people and AI agents: content is encrypted on your machine before upload. 12 GB free, no card. Save, browse, and sync from your terminal; agent integration contract at obsideo.io/agents.md
 License: MIT
 Project-URL: Homepage, https://obsideo.io
 Project-URL: Documentation, https://obsideo.io/docs/
@@ -9,20 +9,22 @@ Project-URL: Agent integration (AGENTS.md), https://obsideo.io/agents.md
 Keywords: encrypted storage,ai agents,agent storage,s3,backup,end-to-end encryption,object storage,free tier,cli,sync
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
+License-File: LICENSE
 Requires-Dist: boto3>=1.28
 Requires-Dist: cryptography>=41.0
 Requires-Dist: certifi
+Dynamic: license-file
 
 # obsideo-cli
 
-**Encrypted storage we can't read.** Save, browse, and sync whatever you want
+**Client-side encrypted storage: your content is encrypted on your machine before upload, so the platform cannot read it.** File and folder names are encrypted too, by default (AES-SIV, keyed off your data key), so the platform sees opaque tokens rather than your filenames. Save, browse, and sync whatever you want
 from your terminal. Files are encrypted on your machine before they leave, so
 Obsideo's gateway, coordinator, and storage providers only ever see ciphertext.
-Your data lands on three independent providers (RF=3).
+Your data lands on three providers (RF=3).
 
 ```
 pip install obsideo-cli
-obsideo login    # email -> 3 GB free
+obsideo login    # email -> 12 GB free
 obsideo          # open the shell
 ```
 
@@ -33,7 +35,7 @@ $ obsideo login
 Enter your email: you@example.com
 Check your email for a verification code.
 Enter verification code: 482913
-You're all set. 3 GB free.
+You're all set. 12 GB free.
 ```
 
 Login is handled by Obsideo's signup service at **`signup.obsideo.io`**: it emails
@@ -59,7 +61,7 @@ obsideo:/trip/ get cat.jpg ./downloaded.jpg
 
 | Command | Description |
 |---|---|
-| `obsideo login` | Sign up / log in with your email (3 GB free) |
+| `obsideo login` | Sign up / log in with your email (12 GB free) |
 | `ls [path]` | List files and folders |
 | `cd <path>` / `pwd` | Move around / show location |
 | `put <local> [name]` | Encrypt + upload a file, or a whole folder (recursive). `--no-encrypt` to store as-is |

{obsideo_cli-0.3.1 → obsideo_cli-0.5.0}/obsideo_cli.egg-info/SOURCES.txt

@@ -1,3 +1,4 @@
+LICENSE
 README.md
 pyproject.toml
 obsideo/__init__.py

{obsideo_cli-0.3.1 → obsideo_cli-0.5.0}/obsideo_core/config.py

@@ -11,7 +11,11 @@ import json
 import os
 from pathlib import Path
 
-CONFIG_DIR = Path.home() / ".obsideo"
+# OBSIDEO_CONFIG_DIR relocates the whole config directory. Without it there is
+# no way to exercise the login path without overwriting the real user's
+# credentials, which is exactly how a stubbed test clobbered a live account
+# once. Also lets a user keep a second account or a sandbox side by side.
+CONFIG_DIR = Path(os.environ.get("OBSIDEO_CONFIG_DIR") or (Path.home() / ".obsideo"))
 CREDENTIALS_FILE = CONFIG_DIR / "credentials"
 CONFIG_FILE = CONFIG_DIR / "config.json"
 

{obsideo_cli-0.3.1 → obsideo_cli-0.5.0}/obsideo_core/login.py

@@ -36,10 +36,16 @@ def _post_json(url: str, payload: dict) -> dict:
         raise LoginError(f"could not reach {url}: {e.reason}")
 
 
-def start(email: str, url: str | None = None) -> None:
-    """Request a verification code be emailed to `email`."""
+def start(email: str, url: str | None = None, source: str | None = None) -> None:
+    """Request a verification code be emailed to `email`.
+
+    `source` is optional free-text attribution recorded on the account ("where
+    did this signup come from"). It never gates signup. Defaults to "cli" so
+    terminal signups stop being indistinguishable from raw API calls.
+    """
     url = url or config.signup_url()
-    _post_json(f"{url}/v1/auth/start", {"email": email})
+    payload = {"email": email, "source": source or "cli"}
+    _post_json(f"{url}/v1/auth/start", payload)
 
 
 def verify(email: str, code: str, url: str | None = None,