podojo-cli 0.3.2__tar.gz → 0.4.0__tar.gz

{podojo_cli-0.3.2 → podojo_cli-0.4.0}/CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to the Podojo CLI will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com),
 and this project adheres to [Semantic Versioning](https://semver.org).
 
+## [0.4.0] - 2026-04-05
+
+### Changed
+- Store API key in OS credential store (Keychain/Credential Locker) via keyring instead of plaintext ~/.podojo.toml
+- `auth login` now prompts for key with hidden input instead of accepting it as a positional argument
+
 ## [0.3.2] - 2026-04-04
 
 ### Added

{podojo_cli-0.3.2 → podojo_cli-0.4.0}/PKG-INFO

@@ -1,12 +1,13 @@
 Metadata-Version: 2.4
 Name: podojo-cli
-Version: 0.3.2
+Version: 0.4.0
 Summary: CLI for the Podojo user research platform
 License-Expression: MIT
 Requires-Python: >=3.12
 Requires-Dist: google-api-python-client>=2.0
 Requires-Dist: google-auth>=2.0
 Requires-Dist: httpx>=0.28
+Requires-Dist: keyring>=25.0
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: rich>=13.0
 Requires-Dist: typer>=0.15

{podojo_cli-0.3.2 → podojo_cli-0.4.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "podojo-cli"
-version = "0.3.2"
+version = "0.4.0"
 description = "CLI for the Podojo user research platform"
 readme = "README.md"
 license = "MIT"
@@ -12,6 +12,7 @@ dependencies = [
     "pyyaml>=6.0",
     "google-auth>=2.0",
     "google-api-python-client>=2.0",
+    "keyring>=25.0",
 ]
 
 [project.scripts]

{podojo_cli-0.3.2 → podojo_cli-0.4.0}/src/podojo_cli/commands/auth.py

@@ -24,8 +24,14 @@ def _verify_key(api_key: str) -> bool:
 
 
 @app.command("login")
-def login(api_key: str = typer.Argument(help="Your Podojo API key")):
+def login(
+    api_key: str = typer.Option(
+        None, "--key", "-k", help="Your Podojo API key (prompted if omitted)"
+    ),
+):
     """Save your API key and verify it works."""
+    if not api_key:
+        api_key = typer.prompt("API Key", hide_input=True)
     console.print("Verifying key…", end=" ")
     if not _verify_key(api_key):
         console.print("[red]failed[/red]")

{podojo_cli-0.3.2 → podojo_cli-0.4.0}/src/podojo_cli/config.py

@@ -1,9 +1,11 @@
 import os
 from pathlib import Path
 
+import keyring
 import tomllib
 
-
+KEYRING_SERVICE = "podojo-cli"
+KEYRING_USERNAME = "api_key"
 CONFIG_PATH = Path.home() / ".podojo.toml"
 DEFAULT_BASE_URL = "https://podojo-fastapi-mcp.onrender.com"
 
@@ -13,21 +15,24 @@ def load_config() -> dict:
     if CONFIG_PATH.exists():
         config = tomllib.loads(CONFIG_PATH.read_text())
     config.setdefault("base_url", os.getenv("PODOJO_BASE_URL", DEFAULT_BASE_URL))
-    config.setdefault("api_key", os.getenv("PODOJO_API_KEY", ""))
+    api_key = (
+        os.getenv("PODOJO_API_KEY")
+        or keyring.get_password(KEYRING_SERVICE, KEYRING_USERNAME)
+        or ""
+    )
+    config.setdefault("api_key", api_key)
     return config
 
 
 def save_config(api_key: str):
-    config = {}
-    if CONFIG_PATH.exists():
-        config = tomllib.loads(CONFIG_PATH.read_text())
-    config["api_key"] = api_key
-    config.setdefault("base_url", DEFAULT_BASE_URL)
-    lines = "\n".join(f'{k} = "{v}"' for k, v in config.items())
-    CONFIG_PATH.write_text(lines + "\n")
+    keyring.set_password(KEYRING_SERVICE, KEYRING_USERNAME, api_key)
 
 
 def clear_api_key():
+    try:
+        keyring.delete_password(KEYRING_SERVICE, KEYRING_USERNAME)
+    except keyring.errors.PasswordDeleteError:
+        pass
     if not CONFIG_PATH.exists():
         return
     config = tomllib.loads(CONFIG_PATH.read_text())

podojo_cli-0.4.0/tests/conftest.py

@@ -0,0 +1,45 @@
+from pathlib import Path
+
+import keyring
+import pytest
+from typer.testing import CliRunner
+
+from podojo_cli.main import app
+
+
+class InMemoryKeyring(keyring.backend.KeyringBackend):
+    priority = 10
+
+    def __init__(self):
+        self._store = {}
+
+    def set_password(self, service, username, password):
+        self._store[(service, username)] = password
+
+    def get_password(self, service, username):
+        return self._store.get((service, username))
+
+    def delete_password(self, service, username):
+        try:
+            del self._store[(service, username)]
+        except KeyError:
+            raise keyring.errors.PasswordDeleteError()
+
+
+@pytest.fixture
+def runner():
+    return CliRunner()
+
+
+@pytest.fixture
+def mock_keyring():
+    backend = InMemoryKeyring()
+    keyring.set_keyring(backend)
+    return backend
+
+
+@pytest.fixture(autouse=True)
+def mock_config(monkeypatch):
+    monkeypatch.setenv("PODOJO_BASE_URL", "http://test.local")
+    monkeypatch.setenv("PODOJO_API_KEY", "test-key")
+    monkeypatch.setattr("podojo_cli.config.CONFIG_PATH", Path("/nonexistent/.podojo.toml"))

podojo_cli-0.4.0/tests/test_auth.py

@@ -0,0 +1,53 @@
+from unittest.mock import patch
+
+from podojo_cli.config import KEYRING_SERVICE, KEYRING_USERNAME
+from podojo_cli.main import app
+
+
+def test_login_valid_key(runner, httpx_mock, mock_keyring):
+    httpx_mock.add_response(
+        url="http://test.local/api/v1/projects?limit=1",
+        status_code=200,
+        json=[],
+    )
+
+    result = runner.invoke(app, ["auth", "login", "--key", "valid-key-abc"])
+
+    assert result.exit_code == 0
+    assert "Logged in successfully" in result.output
+    assert mock_keyring.get_password(KEYRING_SERVICE, KEYRING_USERNAME) == "valid-key-abc"
+
+
+def test_login_prompted(runner, httpx_mock, mock_keyring):
+    httpx_mock.add_response(
+        url="http://test.local/api/v1/projects?limit=1",
+        status_code=200,
+        json=[],
+    )
+
+    result = runner.invoke(app, ["auth", "login"], input="prompted-key\n")
+
+    assert result.exit_code == 0
+    assert "Logged in successfully" in result.output
+    assert mock_keyring.get_password(KEYRING_SERVICE, KEYRING_USERNAME) == "prompted-key"
+
+
+def test_login_invalid_key(runner, httpx_mock):
+    httpx_mock.add_response(
+        url="http://test.local/api/v1/projects?limit=1",
+        status_code=401,
+    )
+
+    result = runner.invoke(app, ["auth", "login", "--key", "bad-key"])
+
+    assert result.exit_code != 0
+    assert "Invalid API key" in result.output
+
+
+def test_logout(runner, mock_keyring):
+    mock_keyring.set_password(KEYRING_SERVICE, KEYRING_USERNAME, "some-key")
+
+    result = runner.invoke(app, ["auth", "logout"])
+
+    assert result.exit_code == 0
+    assert mock_keyring.get_password(KEYRING_SERVICE, KEYRING_USERNAME) is None

{podojo_cli-0.3.2 → podojo_cli-0.4.0}/uv.lock

@@ -363,6 +363,65 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/cb/b1/3846dd7f199d53cb17f49cba7e651e9ce294d8497c8c150530ed11865bb8/iniconfig-2.3.0-py3-none-any.whl", hash = "sha256:f631c04d2c48c52b84d0d0549c99ff3859c98df65b3101406327ecc7d53fbf12", size = 7484, upload-time = "2025-10-18T21:55:41.639Z" },
 ]
 
+[[package]]
+name = "jaraco-classes"
+version = "3.4.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "more-itertools" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/06/c0/ed4a27bc5571b99e3cff68f8a9fa5b56ff7df1c2251cc715a652ddd26402/jaraco.classes-3.4.0.tar.gz", hash = "sha256:47a024b51d0239c0dd8c8540c6c7f484be3b8fcf0b2d85c13825780d3b3f3acd", size = 11780, upload-time = "2024-03-31T07:27:36.643Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/7f/66/b15ce62552d84bbfcec9a4873ab79d993a1dd4edb922cbfccae192bd5b5f/jaraco.classes-3.4.0-py3-none-any.whl", hash = "sha256:f662826b6bed8cace05e7ff873ce0f9283b5c924470fe664fff1c2f00f581790", size = 6777, upload-time = "2024-03-31T07:27:34.792Z" },
+]
+
+[[package]]
+name = "jaraco-context"
+version = "6.1.2"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/af/50/4763cd07e722bb6285316d390a164bc7e479db9d90daa769f22578f698b4/jaraco_context-6.1.2.tar.gz", hash = "sha256:f1a6c9d391e661cc5b8d39861ff077a7dc24dc23833ccee564b234b81c82dfe3", size = 16801, upload-time = "2026-03-20T22:13:33.922Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/f2/58/bc8954bda5fcda97bd7c19be11b85f91973d67a706ed4a3aec33e7de22db/jaraco_context-6.1.2-py3-none-any.whl", hash = "sha256:bf8150b79a2d5d91ae48629d8b427a8f7ba0e1097dd6202a9059f29a36379535", size = 7871, upload-time = "2026-03-20T22:13:32.808Z" },
+]
+
+[[package]]
+name = "jaraco-functools"
+version = "4.4.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "more-itertools" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/0f/27/056e0638a86749374d6f57d0b0db39f29509cce9313cf91bdc0ac4d91084/jaraco_functools-4.4.0.tar.gz", hash = "sha256:da21933b0417b89515562656547a77b4931f98176eb173644c0d35032a33d6bb", size = 19943, upload-time = "2025-12-21T09:29:43.6Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/fd/c4/813bb09f0985cb21e959f21f2464169eca882656849adf727ac7bb7e1767/jaraco_functools-4.4.0-py3-none-any.whl", hash = "sha256:9eec1e36f45c818d9bf307c8948eb03b2b56cd44087b3cdc989abca1f20b9176", size = 10481, upload-time = "2025-12-21T09:29:42.27Z" },
+]
+
+[[package]]
+name = "jeepney"
+version = "0.9.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/7b/6f/357efd7602486741aa73ffc0617fb310a29b588ed0fd69c2399acbb85b0c/jeepney-0.9.0.tar.gz", hash = "sha256:cf0e9e845622b81e4a28df94c40345400256ec608d0e55bb8a3feaa9163f5732", size = 106758, upload-time = "2025-02-27T18:51:01.684Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/b2/a3/e137168c9c44d18eff0376253da9f1e9234d0239e0ee230d2fee6cea8e55/jeepney-0.9.0-py3-none-any.whl", hash = "sha256:97e5714520c16fc0a45695e5365a2e11b81ea79bba796e26f9f1d178cb182683", size = 49010, upload-time = "2025-02-27T18:51:00.104Z" },
+]
+
+[[package]]
+name = "keyring"
+version = "25.7.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "jaraco-classes" },
+    { name = "jaraco-context" },
+    { name = "jaraco-functools" },
+    { name = "jeepney", marker = "sys_platform == 'linux'" },
+    { name = "pywin32-ctypes", marker = "sys_platform == 'win32'" },
+    { name = "secretstorage", marker = "sys_platform == 'linux'" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/43/4b/674af6ef2f97d56f0ab5153bf0bfa28ccb6c3ed4d1babf4305449668807b/keyring-25.7.0.tar.gz", hash = "sha256:fe01bd85eb3f8fb3dd0405defdeac9a5b4f6f0439edbb3149577f244a2e8245b", size = 63516, upload-time = "2025-11-16T16:26:09.482Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/81/db/e655086b7f3a705df045bf0933bdd9c2f79bb3c97bfef1384598bb79a217/keyring-25.7.0-py3-none-any.whl", hash = "sha256:be4a0b195f149690c166e850609a477c532ddbfbaed96a404d4e43f8d5e2689f", size = 39160, upload-time = "2025-11-16T16:26:08.402Z" },
+]
+
 [[package]]
 name = "markdown-it-py"
 version = "4.0.0"
@@ -384,6 +443,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/b3/38/89ba8ad64ae25be8de66a6d463314cf1eb366222074cfda9ee839c56a4b4/mdurl-0.1.2-py3-none-any.whl", hash = "sha256:84008a41e51615a49fc9966191ff91509e3c40b939176e643fd50a5c2196b8f8", size = 9979, upload-time = "2022-08-14T12:40:09.779Z" },
 ]
 
+[[package]]
+name = "more-itertools"
+version = "11.0.1"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/24/24/e0acc4bf54cba50c1d432c70a72a3df96db4a321b2c4c68432a60759044f/more_itertools-11.0.1.tar.gz", hash = "sha256:fefaf25b7ab08f0b45fa9f1892cae93b9fc0089ef034d39213bce15f1cc9e199", size = 144739, upload-time = "2026-04-02T16:17:45.061Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/d8/f4/5e52c7319b8087acef603ed6e50dc325c02eaa999355414830468611f13c/more_itertools-11.0.1-py3-none-any.whl", hash = "sha256:eaf287826069452a8f61026c597eae2428b2d1ba2859083abbf240b46842ce6d", size = 72182, upload-time = "2026-04-02T16:17:43.724Z" },
+]
+
 [[package]]
 name = "packaging"
 version = "26.0"
@@ -404,12 +472,13 @@ wheels = [
 
 [[package]]
 name = "podojo-cli"
-version = "0.3.0"
+version = "0.3.2"
 source = { editable = "." }
 dependencies = [
     { name = "google-api-python-client" },
     { name = "google-auth" },
     { name = "httpx" },
+    { name = "keyring" },
     { name = "pyyaml" },
     { name = "rich" },
     { name = "typer" },
@@ -426,6 +495,7 @@ requires-dist = [
     { name = "google-api-python-client", specifier = ">=2.0" },
     { name = "google-auth", specifier = ">=2.0" },
     { name = "httpx", specifier = ">=0.28" },
+    { name = "keyring", specifier = ">=25.0" },
     { name = "pyyaml", specifier = ">=6.0" },
     { name = "rich", specifier = ">=13.0" },
     { name = "typer", specifier = ">=0.15" },
@@ -541,6 +611,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/e2/d2/1eb1ea9c84f0d2033eb0b49675afdc71aa4ea801b74615f00f3c33b725e3/pytest_httpx-0.36.0-py3-none-any.whl", hash = "sha256:bd4c120bb80e142df856e825ec9f17981effb84d159f9fa29ed97e2357c3a9c8", size = 20229, upload-time = "2025-12-02T16:34:56.45Z" },
 ]
 
+[[package]]
+name = "pywin32-ctypes"
+version = "0.2.3"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/85/9f/01a1a99704853cb63f253eea009390c88e7131c67e66a0a02099a8c917cb/pywin32-ctypes-0.2.3.tar.gz", hash = "sha256:d162dc04946d704503b2edc4d55f3dba5c1d539ead017afa00142c38b9885755", size = 29471, upload-time = "2024-08-14T10:15:34.626Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/de/3d/8161f7711c017e01ac9f008dfddd9410dff3674334c233bde66e7ba65bbf/pywin32_ctypes-0.2.3-py3-none-any.whl", hash = "sha256:8a1513379d709975552d202d942d9837758905c8d01eb82b8bcc30918929e7b8", size = 30756, upload-time = "2024-08-14T10:15:33.187Z" },
+]
+
 [[package]]
 name = "pyyaml"
 version = "6.0.3"
@@ -627,6 +706,19 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/64/8d/0133e4eb4beed9e425d9a98ed6e081a55d195481b7632472be1af08d2f6b/rsa-4.9.1-py3-none-any.whl", hash = "sha256:68635866661c6836b8d39430f97a996acbd61bfa49406748ea243539fe239762", size = 34696, upload-time = "2025-04-16T09:51:17.142Z" },
 ]
 
+[[package]]
+name = "secretstorage"
+version = "3.5.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "cryptography" },
+    { name = "jeepney" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/1c/03/e834bcd866f2f8a49a85eaff47340affa3bfa391ee9912a952a1faa68c7b/secretstorage-3.5.0.tar.gz", hash = "sha256:f04b8e4689cbce351744d5537bf6b1329c6fc68f91fa666f60a380edddcd11be", size = 19884, upload-time = "2025-11-23T19:02:53.191Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/b7/46/f5af3402b579fd5e11573ce652019a67074317e18c1935cc0b4ba9b35552/secretstorage-3.5.0-py3-none-any.whl", hash = "sha256:0ce65888c0725fcb2c5bc0fdb8e5438eece02c523557ea40ce0703c266248137", size = 15554, upload-time = "2025-11-23T19:02:51.545Z" },
+]
+
 [[package]]
 name = "shellingham"
 version = "1.5.4"

podojo_cli-0.3.2/tests/conftest.py

@@ -1,18 +0,0 @@
-from pathlib import Path
-
-import pytest
-from typer.testing import CliRunner
-
-from podojo_cli.main import app
-
-
-@pytest.fixture
-def runner():
-    return CliRunner()
-
-
-@pytest.fixture(autouse=True)
-def mock_config(monkeypatch):
-    monkeypatch.setenv("PODOJO_BASE_URL", "http://test.local")
-    monkeypatch.setenv("PODOJO_API_KEY", "test-key")
-    monkeypatch.setattr("podojo_cli.config.CONFIG_PATH", Path("/nonexistent/.podojo.toml"))

podojo_cli-0.3.2/tests/test_auth.py

@@ -1,42 +0,0 @@
-from unittest.mock import patch
-
-from podojo_cli.main import app
-
-
-def test_login_valid_key(runner, httpx_mock, tmp_path):
-    httpx_mock.add_response(
-        url="http://test.local/api/v1/projects?limit=1",
-        status_code=200,
-        json=[],
-    )
-
-    config_path = tmp_path / ".podojo.toml"
-    with patch("podojo_cli.config.CONFIG_PATH", config_path):
-        result = runner.invoke(app, ["auth", "login", "valid-key-abc"])
-
-    assert result.exit_code == 0
-    assert "Logged in successfully" in result.output
-    assert 'api_key = "valid-key-abc"' in config_path.read_text()
-
-
-def test_login_invalid_key(runner, httpx_mock):
-    httpx_mock.add_response(
-        url="http://test.local/api/v1/projects?limit=1",
-        status_code=401,
-    )
-
-    result = runner.invoke(app, ["auth", "login", "bad-key"])
-
-    assert result.exit_code != 0
-    assert "Invalid API key" in result.output
-
-
-def test_logout(runner, tmp_path):
-    config_path = tmp_path / ".podojo.toml"
-    config_path.write_text('api_key = "some-key"\n')
-
-    with patch("podojo_cli.config.CONFIG_PATH", config_path):
-        result = runner.invoke(app, ["auth", "logout"])
-
-    assert result.exit_code == 0
-    assert "api_key" not in config_path.read_text() if config_path.exists() else True