runlayer 0.22.2__tar.gz → 0.22.3__tar.gz

{runlayer-0.22.2 → runlayer-0.22.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: runlayer
-Version: 0.22.2
+Version: 0.22.3
 Summary: A command-line interface for running MCP servers via HTTP transport
 Project-URL: Homepage, https://runlayer.com
 Project-URL: Documentation, https://docs.runlayer.com/
@@ -421,6 +421,8 @@ DATABASE_URL=postgres://localhost/db
 LOG_LEVEL=debug
 ```
 
+**Limits:** Each `env` value in `runlayer.yaml` must be 2000 chars or less. If a value is too long, deploy validation fails and names the offending env var.
+
 **Note:** Variables from `.env` files override values from `os.environ`. The `$$VAR` syntax (double dollar sign) is reserved for backend variable substitution and will not be replaced by the CLI.
 
 ### `deploy validate` - Validate Configuration

{runlayer-0.22.2 → runlayer-0.22.3}/README.md

@@ -186,6 +186,8 @@ DATABASE_URL=postgres://localhost/db
 LOG_LEVEL=debug
 ```
 
+**Limits:** Each `env` value in `runlayer.yaml` must be 2000 chars or less. If a value is too long, deploy validation fails and names the offending env var.
+
 **Note:** Variables from `.env` files override values from `os.environ`. The `$$VAR` syntax (double dollar sign) is reserved for backend variable substitution and will not be replaced by the CLI.
 
 ### `deploy validate` - Validate Configuration

{runlayer-0.22.2 → runlayer-0.22.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "runlayer"
-version = "0.22.2"
+version = "0.22.3"
 description = "A command-line interface for running MCP servers via HTTP transport"
 readme = "README.md"
 requires-python = ">=3.10"

{runlayer-0.22.2 → runlayer-0.22.3}/runlayer_cli/deploy/docker_builder.py

@@ -45,13 +45,31 @@ def check_docker_available() -> bool:
         return False
 
 
-def authenticate_ecr(credentials: ECRCredentials) -> None:
+def get_registry_hostname(registry_url: str) -> str:
+    """Normalize registry URLs to the hostname Docker expects."""
+    return registry_url.replace("https://", "").replace("http://", "")
+
+
+def get_registry_auth_config(credentials: ECRCredentials) -> dict[str, str]:
+    """Build request-scoped registry auth for Docker SDK calls."""
+    registry = get_registry_hostname(credentials.registry_url)
+    return {
+        "username": credentials.username,
+        "password": credentials.password,
+        "serveraddress": registry,
+    }
+
+
+def authenticate_ecr(credentials: ECRCredentials) -> dict[str, str]:
     """
     Authenticate Docker with ECR using provided credentials.
 
     Args:
         credentials: ECR credentials from backend
 
+    Returns:
+        Auth config that can be reused by later Docker SDK calls
+
     Raises:
         DockerException: If authentication fails
     """
@@ -73,11 +91,8 @@ def authenticate_ecr(credentials: ECRCredentials) -> None:
                 "Please get fresh credentials and try again."
             )
 
-        client = docker.from_env()
-
-        registry = credentials.registry_url.replace("https://", "").replace(
-            "http://", ""
-        )
+        registry = get_registry_hostname(credentials.registry_url)
+        auth_config = get_registry_auth_config(credentials)
 
         with Progress(
             SpinnerColumn(),
@@ -121,6 +136,7 @@ def authenticate_ecr(credentials: ECRCredentials) -> None:
                 console.print("[dim]Retrying with Docker SDK instead...[/dim]")
 
                 try:
+                    client = docker.from_env()
                     client.login(
                         username=credentials.username,
                         password=credentials.password,
@@ -133,6 +149,8 @@ def authenticate_ecr(credentials: ECRCredentials) -> None:
                 except Exception as sdk_error:
                     raise DockerException(f"Failed to authenticate: {sdk_error}")
 
+        return auth_config
+
     except APIError as e:
         raise DockerException(f"Failed to authenticate with ECR: {e}")
 
@@ -274,12 +292,13 @@ def tag_image(image_id: str, repository: str, tag: str) -> str:
         raise DockerException(f"Failed to tag image: {e}")
 
 
-def push_image(image_tag: str) -> str:
+def push_image(image_tag: str, auth_config: Optional[dict[str, str]] = None) -> str:
     """
     Push a Docker image to a registry and get its digest.
 
     Args:
         image_tag: Full image tag (e.g., "registry/repo:tag")
+        auth_config: Optional request-scoped auth for the registry
 
     Returns:
         Image digest (SHA256 hash) of the pushed image
@@ -302,7 +321,11 @@ def push_image(image_tag: str) -> str:
         ) as progress:
             task = progress.add_task(description="Starting push...", total=None)
 
-            for line in client.images.push(image_tag, stream=True, decode=True):
+            push_kwargs: dict[str, Any] = {"stream": True, "decode": True}
+            if auth_config:
+                push_kwargs["auth_config"] = auth_config
+
+            for line in client.images.push(image_tag, **push_kwargs):
                 if "error" in line:
                     error_msg = line.get("error", "Unknown error")
                     console.print(f"\n[red]ERROR: {error_msg}[/red]\n")
@@ -387,7 +410,7 @@ def build_and_push(
         DockerPushError: If push fails
     """
     # Authenticate with ECR
-    authenticate_ecr(credentials)
+    auth_config = authenticate_ecr(credentials)
 
     # Build the image with a local tag first
     local_tag = f"runlayer-build:{tag}"
@@ -404,6 +427,6 @@ def build_and_push(
     full_image_uri = tag_image(image_id, repository, tag)
 
     # Push to ECR and get digest
-    image_digest = push_image(full_image_uri)
+    image_digest = push_image(full_image_uri, auth_config=auth_config)
 
     return full_image_uri, image_digest

{runlayer-0.22.2 → runlayer-0.22.3}/runlayer_cli/deploy/service.py

@@ -293,11 +293,18 @@ def deploy_service(
     else:
         time_str = f"{seconds}s"
 
+    deployment_url = f"{host}/deploy/{deployment_id}"
+
     typer.secho(
         f"\n⏱️  Total deployment time: {time_str}",
         fg=typer.colors.CYAN,
         bold=True,
     )
+    typer.secho(
+        f"🔗 View deployment: {deployment_url}",
+        fg=typer.colors.CYAN,
+        bold=True,
+    )
 
 
 def _get_or_create_deployment(
@@ -485,9 +492,9 @@ def _push_to_ecr(
 
     typer.echo("Pushing image to ECR...\n")
     try:
-        authenticate_ecr(ecr_creds)
+        auth_config = authenticate_ecr(ecr_creds)
         full_image_uri = tag_image(image_id, repository, deployment_id)
-        image_digest = push_image(full_image_uri)
+        image_digest = push_image(full_image_uri, auth_config=auth_config)
 
         # Use digest-based reference for immutable deployments
         # This ensures ECS detects changes even with the same tag

{runlayer-0.22.2 → runlayer-0.22.3}/runlayer_cli/env_substitution.py

@@ -57,7 +57,7 @@ def load_env_vars(
     # Load .env file if found (overrides os.environ)
     if env_path:
         # Load .env file into a dict (doesn't modify os.environ)
-        dotenv_vars = dotenv_values(env_path)
+        dotenv_vars = dotenv_values(env_path, encoding="utf-8-sig")
 
         # Merge dotenv_vars into env_vars (dotenv file overrides os.environ)
         # Filter out None values (unset variables in .env file)

{runlayer-0.22.2 → runlayer-0.22.3}/tests/test_deploy_service.py

@@ -225,6 +225,11 @@ def test_push_to_ecr_success(mock_api_client):
         patch("runlayer_cli.deploy.service.push_image") as mock_push,
         patch("runlayer_cli.deploy.service.typer"),
     ):
+        mock_auth.return_value = {
+            "username": "AWS",
+            "password": "test-password",
+            "serveraddress": "123456789.dkr.ecr.us-east-1.amazonaws.com",
+        }
         mock_tag.return_value = (
             "123456789.dkr.ecr.us-east-1.amazonaws.com/my-repo:test-deployment-id"
         )
@@ -238,7 +243,10 @@ def test_push_to_ecr_success(mock_api_client):
         assert result == expected_uri
         mock_auth.assert_called_once()
         mock_tag.assert_called_once()
-        mock_push.assert_called_once()
+        mock_push.assert_called_once_with(
+            "123456789.dkr.ecr.us-east-1.amazonaws.com/my-repo:test-deployment-id",
+            auth_config=mock_auth.return_value,
+        )
 
 
 def test_update_deployment_config_success(mock_api_client):
@@ -504,6 +512,29 @@ def test_validate_runlayer_yaml_config_http_error(mock_api_client):
         assert exc_info.value.exit_code == 1
 
 
+def test_validate_runlayer_yaml_config_shows_backend_env_limit_error(mock_api_client):
+    """Test backend env limit error is surfaced unchanged."""
+    yaml_content = "name: test-service\nruntime: docker\nservice:\n  port: 8000\n"
+
+    mock_response = ValidateYAMLResponse(
+        valid=False,
+        error="Configuration error: env.API_KEY is too long (2001 chars, max 2000)",
+        parsed_config=None,
+    )
+    mock_api_client.validate_yaml.return_value = mock_response
+
+    with (
+        patch("runlayer_cli.deploy.service.typer.echo") as _mock_echo,
+        patch("runlayer_cli.deploy.service.typer.secho") as mock_secho,
+    ):
+        with pytest.raises(typer.Exit) as exc_info:
+            _validate_runlayer_yaml_config(mock_api_client, yaml_content)
+
+        assert exc_info.value.exit_code == 1
+        rendered_calls = [str(call) for call in mock_secho.call_args_list]
+        assert any("env.API_KEY is too long" in call for call in rendered_calls)
+
+
 def test_validate_service_success():
     """Test successful validation service call."""
     with tempfile.NamedTemporaryFile(mode="w", suffix=".yaml", delete=False) as f:

{runlayer-0.22.2 → runlayer-0.22.3}/tests/test_docker_builder.py

@@ -11,6 +11,7 @@ from runlayer_cli.deploy.docker_builder import (
     push_image,
     authenticate_ecr,
     DockerBuildError,
+    get_registry_auth_config,
 )
 from runlayer_cli.api import ECRCredentials
 import datetime
@@ -196,6 +197,38 @@ def test_push_image_success():
         mock_client.images.push.assert_called_once()
 
 
+def test_push_image_uses_request_scoped_auth():
+    """Push should forward explicit auth to a fresh Docker client."""
+    auth_config = {
+        "username": "AWS",
+        "password": "test-password",
+        "serveraddress": "123456789.dkr.ecr.us-east-1.amazonaws.com",
+    }
+
+    with (
+        patch("runlayer_cli.deploy.docker_builder.docker") as mock_docker,
+        patch("runlayer_cli.deploy.docker_builder.console"),
+    ):
+        mock_client = MagicMock()
+        mock_docker.from_env.return_value = mock_client
+        mock_client.images.push.return_value = iter(
+            [{"aux": {"Digest": "sha256:def789ghi012"}}]
+        )
+
+        result = push_image(
+            "123456789.dkr.ecr.us-east-1.amazonaws.com/my-repo:v1.0.0",
+            auth_config=auth_config,
+        )
+
+        assert result == "sha256:def789ghi012"
+        mock_client.images.push.assert_called_once_with(
+            "123456789.dkr.ecr.us-east-1.amazonaws.com/my-repo:v1.0.0",
+            stream=True,
+            decode=True,
+            auth_config=auth_config,
+        )
+
+
 def test_authenticate_ecr_success():
     """Test successful ECR authentication."""
     # Create valid credentials
@@ -241,3 +274,75 @@ def test_authenticate_ecr_success():
         call_args = mock_subprocess_run.call_args
         assert "docker" in call_args[0][0]
         assert "login" in call_args[0][0]
+
+
+def test_get_registry_auth_config_normalizes_registry_url():
+    """Auth config should use the hostname form Docker expects."""
+    expires_at = datetime.datetime.now(datetime.timezone.utc) + datetime.timedelta(
+        hours=1
+    )
+    credentials = ECRCredentials(
+        username="AWS",
+        password="test-password",
+        registry_url="https://123456789.dkr.ecr.us-east-1.amazonaws.com",
+        repository_url="123456789.dkr.ecr.us-east-1.amazonaws.com/my-repo",
+        expires_at=expires_at,
+    )
+
+    assert get_registry_auth_config(credentials) == {
+        "username": "AWS",
+        "password": "test-password",
+        "serveraddress": "123456789.dkr.ecr.us-east-1.amazonaws.com",
+    }
+
+
+def test_authenticate_ecr_sdk_fallback_returns_auth_for_later_push():
+    """SDK fallback should still return request-scoped auth for fresh clients."""
+    expires_at = datetime.datetime.now(datetime.timezone.utc) + datetime.timedelta(
+        hours=1
+    )
+    credentials = ECRCredentials(
+        username="AWS",
+        password="test-password",
+        registry_url="https://123456789.dkr.ecr.us-east-1.amazonaws.com",
+        repository_url="123456789.dkr.ecr.us-east-1.amazonaws.com/my-repo",
+        expires_at=expires_at,
+    )
+
+    with (
+        patch("subprocess.run") as mock_subprocess_run,
+        patch("runlayer_cli.deploy.docker_builder.docker") as mock_docker,
+        patch("runlayer_cli.deploy.docker_builder.console"),
+        patch("runlayer_cli.deploy.docker_builder.Progress") as mock_progress,
+    ):
+        mock_client = MagicMock()
+        mock_docker.from_env.return_value = mock_client
+
+        mock_result = MagicMock()
+        mock_result.returncode = 1
+        mock_result.stderr = b"Error saving credentials: The stub received bad data"
+        mock_result.stdout = b""
+        mock_subprocess_run.return_value = mock_result
+
+        mock_progress_instance = MagicMock()
+        mock_progress_instance.__enter__ = MagicMock(
+            return_value=mock_progress_instance
+        )
+        mock_progress_instance.__exit__ = MagicMock(return_value=False)
+        mock_progress_instance.add_task = MagicMock(return_value="task-id")
+        mock_progress_instance.update = MagicMock()
+        mock_progress.return_value = mock_progress_instance
+
+        auth_config = authenticate_ecr(credentials)
+
+        assert auth_config == {
+            "username": "AWS",
+            "password": "test-password",
+            "serveraddress": "123456789.dkr.ecr.us-east-1.amazonaws.com",
+        }
+        mock_client.login.assert_called_once_with(
+            username="AWS",
+            password="test-password",
+            registry="123456789.dkr.ecr.us-east-1.amazonaws.com",
+            reauth=True,
+        )

{runlayer-0.22.2 → runlayer-0.22.3}/tests/test_env_substitution.py

@@ -260,6 +260,20 @@ with_dash_default: ${ANOTHER_VAR-another_default}
     assert "with_dash_default: another_default" in result  # Uses default
 
 
+def test_load_env_vars_with_utf8_bom():
+    """Test that UTF-8 BOM is stripped from .env files (PowerShell default)."""
+    with tempfile.NamedTemporaryFile(mode="wb", suffix=".env", delete=False) as f:
+        f.write(b"\xef\xbb\xbfFIRST_VAR=first_value\nSECOND_VAR=second_value\n")
+        env_file_path = f.name
+
+    try:
+        env_vars = load_env_vars(env_file_path)
+        assert env_vars["FIRST_VAR"] == "first_value"
+        assert env_vars["SECOND_VAR"] == "second_value"
+    finally:
+        Path(env_file_path).unlink()
+
+
 def test_substitute_env_vars_no_substitution_needed():
     """Test YAML with no variable references."""
     yaml_content = "name: my-service\nversion: 1.0.0"