ragfly-cli 1.19.0__tar.gz → 1.19.1__tar.gz

{ragfly_cli-1.19.0/ragfly_cli.egg-info → ragfly_cli-1.19.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ragfly-cli
-Version: 1.19.0
+Version: 1.19.1
 Summary: RAGfly CLI — operate RAGfly from the terminal and CI (login + cloud API). Lightweight, no desktop dependencies.
 Author: CAB Ltda
 License: MIT
@@ -49,24 +49,24 @@ export RAGFLY_API_KEY=rf_xxxxxxxxxx
 `cloud group` and `cloud api-key` manage a person's session and credentials: they
 need `ragfly login`, and the server refuses them for an API key.
 
-## `RAGFLY_ROOT` (optional) — open original files on disk
+## Opening an original file on disk (optional)
 
-Searching, asking and citing need zero extra config. Only if a script or agent
-on this machine must open the **original file** on disk, set `RAGFLY_ROOT` once:
-it is the **parent folder** of the folder you selected when uploading your
-documents via the web app. RAGfly never reads it nor stores your absolute
-path — documents uploaded via browser carry a *relative* `ruta_archivo`, and
-the real path is `$RAGFLY_ROOT + ruta_archivo`.
+Searching and citing need no local path setup. A document result may include an
+`fs` object. For a local relative file, read `fs.home_var` and join that
+environment variable's value with `fs.relative_path`. Each root has its own
+variable; configure only the roots available on this machine.
 
 ```bash
-# Example: you uploaded /Users/ana/Dropbox/MisDocumentos → the PARENT is the root
-echo 'export RAGFLY_ROOT="/Users/ana/Dropbox"' >> ~/.zshrc
-# "/MisDocumentos/letras/cancion.txt" → /Users/ana/Dropbox/MisDocumentos/letras/cancion.txt
+export RAGFLY_HOME_442681="/Users/ana/Dropbox"
+export RAGFLY_HOME_991203="/Volumes/Archive"
 ```
 
-Not needed for documents loaded via RAGfly Desktop (their paths are already
-absolute). Step-by-step walkthrough:
-<https://ragfly.ai/build/mcp#setting-up-ragfly_root--once-per-machine-in-3-steps>
+If `fs.is_cloud_only` is true, use the authorized cloud provider. If
+`fs.is_public_url` is true, open its public URL. If `fs.is_absolute` is true,
+use the absolute path on the machine where it exists. If `fs.home_var` is null
+or unset, do not guess a local root. See the
+[MCP guide](https://ragfly.ai/build/mcp#opening-a-document-on-disk-fs-block)
+for the full order and examples.
 
 ## Command surface
 

{ragfly_cli-1.19.0 → ragfly_cli-1.19.1}/README.md

@@ -29,24 +29,24 @@ export RAGFLY_API_KEY=rf_xxxxxxxxxx
 `cloud group` and `cloud api-key` manage a person's session and credentials: they
 need `ragfly login`, and the server refuses them for an API key.
 
-## `RAGFLY_ROOT` (optional) — open original files on disk
+## Opening an original file on disk (optional)
 
-Searching, asking and citing need zero extra config. Only if a script or agent
-on this machine must open the **original file** on disk, set `RAGFLY_ROOT` once:
-it is the **parent folder** of the folder you selected when uploading your
-documents via the web app. RAGfly never reads it nor stores your absolute
-path — documents uploaded via browser carry a *relative* `ruta_archivo`, and
-the real path is `$RAGFLY_ROOT + ruta_archivo`.
+Searching and citing need no local path setup. A document result may include an
+`fs` object. For a local relative file, read `fs.home_var` and join that
+environment variable's value with `fs.relative_path`. Each root has its own
+variable; configure only the roots available on this machine.
 
 ```bash
-# Example: you uploaded /Users/ana/Dropbox/MisDocumentos → the PARENT is the root
-echo 'export RAGFLY_ROOT="/Users/ana/Dropbox"' >> ~/.zshrc
-# "/MisDocumentos/letras/cancion.txt" → /Users/ana/Dropbox/MisDocumentos/letras/cancion.txt
+export RAGFLY_HOME_442681="/Users/ana/Dropbox"
+export RAGFLY_HOME_991203="/Volumes/Archive"
 ```
 
-Not needed for documents loaded via RAGfly Desktop (their paths are already
-absolute). Step-by-step walkthrough:
-<https://ragfly.ai/build/mcp#setting-up-ragfly_root--once-per-machine-in-3-steps>
+If `fs.is_cloud_only` is true, use the authorized cloud provider. If
+`fs.is_public_url` is true, open its public URL. If `fs.is_absolute` is true,
+use the absolute path on the machine where it exists. If `fs.home_var` is null
+or unset, do not guess a local root. See the
+[MCP guide](https://ragfly.ai/build/mcp#opening-a-document-on-disk-fs-block)
+for the full order and examples.
 
 ## Command surface
 

{ragfly_cli-1.19.0 → ragfly_cli-1.19.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ragfly-cli"
-version = "1.19.0"
+version = "1.19.1"
 description = "RAGfly CLI — operate RAGfly from the terminal and CI (login + cloud API). Lightweight, no desktop dependencies."
 readme = "README.md"
 requires-python = ">=3.10"

ragfly_cli-1.19.1/ragfly_cli/__init__.py

@@ -0,0 +1 @@
+__version__ = "1.19.1"

{ragfly_cli-1.19.0 → ragfly_cli-1.19.1}/ragfly_cli/_http.py

@@ -41,9 +41,8 @@ def default_headers(
     Returns:
         dict de headers listo para pasar a httpx.
 
-    El header `X-Override-Grupo` se envía cuando hay grupo activo configurado
-    o explícito. El backend lo respeta como override de sesión (mismo patrón
-    que el dropdown de grupo del frontend web).
+    El header `X-Override-Grupo` solo se envía para una sesión humana. Una API
+    key tiene un grupo fijo en el servidor y nunca hereda el grupo local del CLI.
     """
     from ragfly_cli import __version__ as _client_version
 
@@ -53,14 +52,17 @@ def default_headers(
     if content_type:
         headers["Content-Type"] = "application/json"
 
-    # Resolver grupo activo: explícito > config
-    grupo = grupo_override
-    if grupo is None:
-        try:
-            from .config import get_config
-            grupo = get_config().codigo_grupo or None
-        except Exception:
-            grupo = None
+    # El override pertenece a la sesión humana. Enviar el grupo guardado en
+    # otra sesión con una API key puede dar 403 y nunca debe cambiar su alcance.
+    grupo = None
+    if not (token and token.startswith(("rf_", "slm_live_"))):
+        grupo = grupo_override
+        if grupo is None:
+            try:
+                from .config import get_config
+                grupo = get_config().codigo_grupo or None
+            except Exception:
+                grupo = None
     if grupo:
         headers["X-Override-Grupo"] = grupo
 

{ragfly_cli-1.19.0 → ragfly_cli-1.19.1}/ragfly_cli/cli.py

@@ -236,6 +236,32 @@ def cloud_me(output: str):
             ("Active group", "group"), ("Active entity", "entity")])
 
 
+# ── cloud entity ────────────────────────────────────────────────────────────
+
+@cloud.group("entity")
+def cloud_entity():
+    """Active entity focus for the authenticated credential."""
+
+
+@cloud_entity.command("set")
+@click.argument("entity_code", required=False)
+@click.option("--release", is_flag=True, help="Release the focus and use all authorized entities.")
+@click.option("-o", "--output", type=OUTPUT_TABLE, default="table")
+def cloud_entity_set(entity_code: str | None, release: bool, output: str):
+    """Set ENTITY_CODE as active, or use --release to clear the focus."""
+    if release == (entity_code is not None):
+        raise click.UsageError("Pass exactly one of ENTITY_CODE or --release.")
+    data = _v1(
+        "POST", "/v1/session/active-entity",
+        body={"entity_code": None if release else entity_code},
+    )
+    if output == "json":
+        _emit_json(data)
+        return
+    active = data.get("active_entity") or "all authorized entities"
+    console.print(f"[green]✓ Active entity:[/green] [bold]{active}[/bold]")
+
+
 # ── cloud group (signed-in person only) ──────────────────────────────────────
 
 @cloud.group("group")

{ragfly_cli-1.19.0 → ragfly_cli-1.19.1}/ragfly_cli/grupo_activo.py

@@ -49,7 +49,7 @@ def set_grupo_activo(codigo_grupo: str) -> None:
     path = _config_path()
     if not path.exists():
         raise FileNotFoundError(
-            f"No existe {path}. Ejecuta `ragfly setup` primero."
+            f"{path} does not exist. Run `ragfly setup` first."
         )
 
     content = path.read_text()

{ragfly_cli-1.19.0 → ragfly_cli-1.19.1}/ragfly_cli/oop/cli_command.py

@@ -74,10 +74,10 @@ class CliCommand:
         except SystemExit:
             raise
         except KeyboardInterrupt:
-            self.aviso("Interrumpido.")
+            self.aviso("Interrupted.")
             raise SystemExit(130)
         except Exception as e:
-            self.error(f"Error inesperado: {e}")
+            self.error(f"Unexpected error: {e}")
             raise SystemExit(on_unexpected_exit_code)
 
     def salir(self, mensaje: str, exit_code: int = 1) -> NoReturn:

{ragfly_cli-1.19.0 → ragfly_cli-1.19.1}/ragfly_cli/oop/http_client.py

@@ -9,7 +9,7 @@ Encapsula el patrón repetido en `cloud_commands.py`:
     except httpx.HTTPStatusError as e:
         _manejar_http_error(e)
     except httpx.RequestError as e:
-        raise CloudError(f"Error de conexión: {e}", exit_code=2)
+        raise CloudError(f"Could not connect to the server: {e}", exit_code=2)
 
 Ejemplo:
     from ragfly_cli.oop import CloudHttpClient
@@ -99,7 +99,7 @@ class CloudHttpClient:
         except httpx.HTTPStatusError as e:
             _manejar_http_error(e)
         except httpx.RequestError as e:
-            raise CloudError(f"Error de conexión: {e}", exit_code=2)
+            raise CloudError(f"Could not connect to the server: {e}", exit_code=2)
 
     # ── Verbos HTTP ───────────────────────────────────────────────────────────
 

{ragfly_cli-1.19.0 → ragfly_cli-1.19.1}/ragfly_cli/version_check.py

@@ -88,9 +88,9 @@ def chequear_actualizacion(
 
     obligatoria = data.get("obligatoria", False)
     notas = data.get("notas") or ""
-    prefix = "⚠️  ACTUALIZACIÓN OBLIGATORIA" if obligatoria else "ℹ️  Hay una nueva versión disponible"
+    prefix = "⚠️  MANDATORY UPDATE" if obligatoria else "ℹ️  A new version is available"
 
-    msg = f"{prefix}: RAGfly Desktop v{latest} (tu versión: v{__version__})"
+    msg = f"{prefix}: RAGfly Desktop v{latest} (your version: v{__version__})"
     if notas:
         msg += f"\n   {notas}"
     return msg

{ragfly_cli-1.19.0 → ragfly_cli-1.19.1/ragfly_cli.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ragfly-cli
-Version: 1.19.0
+Version: 1.19.1
 Summary: RAGfly CLI — operate RAGfly from the terminal and CI (login + cloud API). Lightweight, no desktop dependencies.
 Author: CAB Ltda
 License: MIT
@@ -49,24 +49,24 @@ export RAGFLY_API_KEY=rf_xxxxxxxxxx
 `cloud group` and `cloud api-key` manage a person's session and credentials: they
 need `ragfly login`, and the server refuses them for an API key.
 
-## `RAGFLY_ROOT` (optional) — open original files on disk
+## Opening an original file on disk (optional)
 
-Searching, asking and citing need zero extra config. Only if a script or agent
-on this machine must open the **original file** on disk, set `RAGFLY_ROOT` once:
-it is the **parent folder** of the folder you selected when uploading your
-documents via the web app. RAGfly never reads it nor stores your absolute
-path — documents uploaded via browser carry a *relative* `ruta_archivo`, and
-the real path is `$RAGFLY_ROOT + ruta_archivo`.
+Searching and citing need no local path setup. A document result may include an
+`fs` object. For a local relative file, read `fs.home_var` and join that
+environment variable's value with `fs.relative_path`. Each root has its own
+variable; configure only the roots available on this machine.
 
 ```bash
-# Example: you uploaded /Users/ana/Dropbox/MisDocumentos → the PARENT is the root
-echo 'export RAGFLY_ROOT="/Users/ana/Dropbox"' >> ~/.zshrc
-# "/MisDocumentos/letras/cancion.txt" → /Users/ana/Dropbox/MisDocumentos/letras/cancion.txt
+export RAGFLY_HOME_442681="/Users/ana/Dropbox"
+export RAGFLY_HOME_991203="/Volumes/Archive"
 ```
 
-Not needed for documents loaded via RAGfly Desktop (their paths are already
-absolute). Step-by-step walkthrough:
-<https://ragfly.ai/build/mcp#setting-up-ragfly_root--once-per-machine-in-3-steps>
+If `fs.is_cloud_only` is true, use the authorized cloud provider. If
+`fs.is_public_url` is true, open its public URL. If `fs.is_absolute` is true,
+use the absolute path on the machine where it exists. If `fs.home_var` is null
+or unset, do not guess a local root. See the
+[MCP guide](https://ragfly.ai/build/mcp#opening-a-document-on-disk-fs-block)
+for the full order and examples.
 
 ## Command surface
 

{ragfly_cli-1.19.0 → ragfly_cli-1.19.1}/ragfly_cli.egg-info/SOURCES.txt

@@ -20,4 +20,5 @@ ragfly_cli.egg-info/top_level.txt
 ragfly_cli/oop/__init__.py
 ragfly_cli/oop/cli_command.py
 ragfly_cli/oop/http_client.py
-tests/test_agent_context_cli.py
+tests/test_agent_context_cli.py
+tests/test_api_key_group_override.py

{ragfly_cli-1.19.0 → ragfly_cli-1.19.1}/tests/test_agent_context_cli.py

@@ -47,6 +47,19 @@ def test_every_cloud_call_goes_to_v1_with_the_cli_surface(wire):
     assert call["headers"]["X-RAGfly-Client"] == "cli"
 
 
+def test_entity_set_and_release_use_the_single_public_session_operation(wire):
+    wire.reply = httpx.Response(200, json={"active_entity": "E1"})
+    result = run("cloud", "entity", "set", "E1", "-o", "json")
+    assert result.exit_code == 0, result.output
+    assert wire.calls[0]["url"].endswith("/v1/session/active-entity")
+    assert wire.calls[0]["json"] == {"entity_code": "E1"}
+
+    wire.reply = httpx.Response(200, json={"active_entity": None})
+    result = run("cloud", "entity", "set", "--release", "-o", "json")
+    assert result.exit_code == 0, result.output
+    assert wire.calls[1]["json"] == {"entity_code": None}
+
+
 def test_agent_context_and_tool(wire):
     wire.reply = httpx.Response(200, json={"function_profile": "support_chat", "system_prompt_hash": "abc", "tools": []})
     result = run("cloud", "agent", "context", "--profile", "support_chat")

ragfly_cli-1.19.1/tests/test_api_key_group_override.py

@@ -0,0 +1,18 @@
+from types import SimpleNamespace
+
+from ragfly_cli import config
+from ragfly_cli._http import default_headers
+
+
+def test_api_key_never_inherits_a_saved_group(monkeypatch):
+    monkeypatch.setattr(config, "get_config", lambda: SimpleNamespace(codigo_grupo="OTHER-GROUP"))
+    for token in ("rf_fixture", "slm_live_fixture"):
+        headers = default_headers(token=token)
+        assert headers["Authorization"] == f"Bearer {token}"
+        assert "X-Override-Grupo" not in headers
+
+
+def test_human_session_keeps_its_saved_group(monkeypatch):
+    monkeypatch.setattr(config, "get_config", lambda: SimpleNamespace(codigo_grupo="MY-GROUP"))
+    headers = default_headers(token="jwt.header.signature")
+    assert headers["X-Override-Grupo"] == "MY-GROUP"

ragfly_cli-1.19.0/ragfly_cli/__init__.py

@@ -1 +0,0 @@
-__version__ = "1.19.0"