systemlink-cli 1.11.2__tar.gz → 1.11.5__tar.gz

{systemlink_cli-1.11.2 → systemlink_cli-1.11.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: systemlink-cli
-Version: 1.11.2
+Version: 1.11.5
 Summary: SystemLink Integrator CLI - cross-platform CLI for SystemLink workflows and templates.
 License-File: LICENSE
 Author: Fred Visser
@@ -11,8 +11,10 @@ Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Requires-Dist: click (>=7.1.2)
+Requires-Dist: cryptography (>=46.0.7)
 Requires-Dist: keyring (>=25.6.0,<26.0.0)
 Requires-Dist: packaging (>=21.0)
+Requires-Dist: pygments (>=2.20.0)
 Requires-Dist: pyyaml (>=6.0.3,<7.0.0)
 Requires-Dist: questionary (>=2.1.1,<3.0.0)
 Requires-Dist: requests (>=2.32.4,<3.0.0)

{systemlink_cli-1.11.2 → systemlink_cli-1.11.5}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "systemlink-cli"
-version = "1.11.2"
+version = "1.11.5"
 description = "SystemLink Integrator CLI - cross-platform CLI for SystemLink workflows and templates."
 authors = ["Fred Visser <fred.visser@emerson.com>"]
 packages = [{ include = "slcli" }]
@@ -14,6 +14,7 @@ include = [
 [tool.poetry.scripts]
 slcli = "slcli.__main__:cli"
 slcli-mcp = "slcli.mcp_server:main"
+ni-python-styleguide = "scripts.styleguide:main"
 build-pyinstaller = "scripts.build_pyinstaller:main"
 update-version = "scripts.update_version:main"
 release-from-changes = "scripts.towncrier_release:main"
@@ -39,13 +40,25 @@ questionary = "^2.1.1"
 packaging = ">=21.0"
 rich = ">=13.7,<15"
 rich-click = ">=1.8,<2"
+cryptography = ">=46.0.7"
+pygments = ">=2.20.0"
 
 
 [tool.poetry.group.dev.dependencies]
 # Lint
-ni-python-styleguide = ">=0.4.3"
 cyclonedx-bom = "^7.0.0"
 setuptools = "<81"  # pin to retain pkg_resources used by flake8-import-order
+black = ">=26.3.1"
+flake8 = ">=7.3.0"
+flake8-black = ">=0.4.0"
+flake8-docstrings = ">=1.7.0"
+flake8-import-order = ">=0.19.2"
+isort = ">=6.0.1,<9"
+pep8-naming = ">=0.15.1"
+lxml = ">=6.1.0"
+pyjwt = ">=2.12.0"
+python-dotenv = ">=1.2.2"
+python-multipart = ">=0.0.26"
 
 # Type checking
 mypy = ">=1.0"
@@ -96,15 +109,6 @@ markers = [
 [tool.black]
 line-length = 100
 
-[tool.ni-python-styleguide]
-# D301 ("Use r""" if any backslashes in a docstring") is suppressed because
-# Click uses \b (backspace chr(8)) as a paragraph-formatting marker in docstrings
-# to prevent line-wrapping in --help output. This requires a regular """ string;
-# using r""" passes the literal two-char sequence \b which Click does not recognise.
-
-[tool.ni-python-styleguide.lint]
-extend_ignore = "D301"
-
 [tool.mypy]
 python_version = "3.13"
 files = "**/*.py"

{systemlink_cli-1.11.2 → systemlink_cli-1.11.5}/slcli/_version.py

@@ -1,4 +1,4 @@
 """Version information for slcli."""
 
 # This file is auto-generated. Do not edit manually.
-__version__ = "1.11.2"
+__version__ = "1.11.5"

{systemlink_cli-1.11.2 → systemlink_cli-1.11.5}/slcli/main.py

@@ -1,6 +1,7 @@
 """slcli entry points."""
 
 import json
+import tomllib
 from pathlib import Path
 from types import ModuleType
 from typing import Optional
@@ -8,7 +9,6 @@ from typing import Optional
 import click as base_click
 import keyring
 import questionary
-import tomllib
 
 from .asset_click import register_asset_commands
 from .comment_click import register_comment_commands
@@ -21,13 +21,10 @@ from .file_click import register_file_commands
 from .function_click import register_function_commands
 from .mcp_click import register_mcp_commands
 from .notebook_click import register_notebook_commands
-from .platform import (
-    get_platform_info,
-)
+from .platform import get_platform_info
 from .policy_click import register_policy_commands
 from .profiles import set_profile_override
-from .rich_output import install_rich_output
-from .rich_output import render_table
+from .rich_output import install_rich_output, render_table
 from .routine_click import register_routine_commands
 from .skill_click import register_skill_commands
 from .spec_click import register_spec_commands

{systemlink_cli-1.11.2 → systemlink_cli-1.11.5}/slcli/notebook_click.py

@@ -33,7 +33,6 @@ from .utils import (
 )
 from .workspace_utils import get_effective_workspace, get_workspace_display_name
 
-
 # Predefined notebook interfaces - must be assigned exactly as shown
 PREDEFINED_NOTEBOOK_INTERFACES = [
     "Assets Grid",

{systemlink_cli-1.11.2 → systemlink_cli-1.11.5}/slcli/platform.py

@@ -16,7 +16,6 @@ import requests
 
 from .utils import ExitCodes, get_ssl_verify
 
-
 # Platform identifiers
 PLATFORM_SLE = "SLE"  # SystemLink Enterprise (cloud)
 PLATFORM_SLS = "SLS"  # SystemLink Server (on-premises)

{systemlink_cli-1.11.2 → systemlink_cli-1.11.5}/slcli/rich_output.py

@@ -20,7 +20,6 @@ from rich.table import Table
 from rich.text import Text
 from rich.theme import Theme
 
-
 _THEME = Theme(
     {
         "brand": "bold cyan",

{systemlink_cli-1.11.2 → systemlink_cli-1.11.5}/slcli/routine_click.py

@@ -28,7 +28,6 @@ from .workspace_utils import (
     resolve_workspace_filter,
 )
 
-
 # ---------------------------------------------------------------------------
 # Helpers
 # ---------------------------------------------------------------------------

{systemlink_cli-1.11.2 → systemlink_cli-1.11.5}/slcli/system_click.py

@@ -2797,6 +2797,7 @@ def register_system_commands(cli: Any) -> None:
                     filter_expr,
                     api_order_by,
                     _parse_simple_response,
+                    take=take,
                 )
                 mock_resp: Any = FilteredResponse({"jobs": jobs})
                 UniversalResponseHandler.handle_list_response(

{systemlink_cli-1.11.2 → systemlink_cli-1.11.5}/slcli/user_click.py

@@ -26,7 +26,6 @@ from .utils import (
 )
 from .workspace_utils import get_workspace_display_name, resolve_workspace_id
 
-
 USER_QUERY_PAGE_SIZE = 100
 USER_JSON_DEFAULT_TAKE = 1000
 AUTH_WILDCARD_VALUES = {"*", "*/*", "*:*"}

{systemlink_cli-1.11.2 → systemlink_cli-1.11.5}/slcli/web_editor.py

@@ -17,6 +17,48 @@ import requests
 from .utils import ExitCodes, get_base_url, get_headers, get_ssl_verify
 
 
+def _validated_proxy_origin(api_base: str) -> tuple[str, str]:
+    """Return a validated scheme and netloc for proxy requests.
+
+    Args:
+        api_base: Configured SystemLink base URL.
+
+    Returns:
+        Tuple of scheme and network location.
+
+    Raises:
+        ValueError: If the configured base URL is not a plain HTTP(S) origin.
+    """
+    parsed = urllib.parse.urlsplit(api_base)
+    if parsed.scheme not in {"http", "https"}:
+        raise ValueError("Editor proxy requires an HTTP(S) SystemLink base URL")
+    if not parsed.netloc or parsed.username or parsed.password:
+        raise ValueError("Editor proxy requires a base URL without embedded credentials")
+    if parsed.path not in {"", "/"} or parsed.query or parsed.fragment:
+        raise ValueError("Editor proxy requires a base URL without path, query, or fragment")
+    return parsed.scheme, parsed.netloc
+
+
+def _build_proxy_url(
+    origin_scheme: str,
+    origin_netloc: str,
+    target_path: str,
+    query: str = "",
+) -> str:
+    """Build a proxy URL from a validated origin and allowlisted path."""
+    return urllib.parse.urlunsplit((origin_scheme, origin_netloc, target_path, query, ""))
+
+
+def _validated_proxy_path(request_path: str) -> str:
+    """Return a decoded absolute proxy path without dot-segments."""
+    decoded_path = urllib.parse.unquote(request_path)
+    if not decoded_path.startswith("/"):
+        raise ValueError("Editor proxy requires an absolute request path")
+    if any(segment in {".", ".."} for segment in decoded_path.split("/")):
+        raise ValueError("Editor proxy rejects paths containing dot-segments")
+    return decoded_path
+
+
 class DFFWebEditor:
     """Web-based editor for custom fields configurations."""
 
@@ -132,6 +174,7 @@ class DFFWebEditor:
         editor_dir = self._editor_dir  # Capture for closure
         temp_path = self._temp_path  # Capture for closure
         api_base = get_base_url().rstrip("/")
+        api_scheme, api_netloc = _validated_proxy_origin(api_base)
         default_headers = get_headers()
         ssl_verify = get_ssl_verify()
         secret = self._secret
@@ -149,9 +192,14 @@ class DFFWebEditor:
 
             def _proxy_request(self, method: str) -> bool:
                 parsed = urllib.parse.urlparse(self.path)
+                try:
+                    request_path = _validated_proxy_path(parsed.path)
+                except ValueError as exc:
+                    self.send_error(400, str(exc))
+                    return True
 
                 # Serve slcli-config.json from temp directory
-                if parsed.path == "/slcli-config.json" and method == "GET":
+                if request_path == "/slcli-config.json" and method == "GET":
                     config_file = temp_path / "slcli-config.json"
                     if config_file.exists():
                         self.send_response(200)
@@ -164,7 +212,7 @@ class DFFWebEditor:
                         return True
 
                 # Serve config.json (the DFF configuration) from temp directory
-                if parsed.path == "/config.json" and method == "GET":
+                if request_path == "/config.json" and method == "GET":
                     config_file = temp_path / "config.json"
                     if config_file.exists():
                         self.send_response(200)
@@ -182,12 +230,12 @@ class DFFWebEditor:
                     "/api/dff/update-configurations": "/nidynamicformfields/v1/update-configurations",
                 }
 
-                if parsed.path in path_map:
-                    target_path = path_map[parsed.path]
-                elif parsed.path.startswith("/nidynamicformfields/v1/"):
-                    target_path = parsed.path
-                elif parsed.path.startswith("/niuser/v1/workspaces"):
-                    target_path = parsed.path
+                if request_path in path_map:
+                    target_path = path_map[request_path]
+                elif request_path.startswith("/nidynamicformfields/v1/"):
+                    target_path = request_path
+                elif request_path.startswith("/niuser/v1/workspaces"):
+                    target_path = request_path
                 else:
                     return False
 
@@ -197,9 +245,12 @@ class DFFWebEditor:
                     self.send_error(403, "Forbidden: Missing or invalid editor secret")
                     return True
 
-                target_url = f"{api_base}{target_path}"
-                if parsed.query:
-                    target_url = f"{target_url}?{parsed.query}"
+                target_url = _build_proxy_url(
+                    origin_scheme=api_scheme,
+                    origin_netloc=api_netloc,
+                    target_path=target_path,
+                    query=parsed.query,
+                )
 
                 headers = dict(default_headers)
                 data = None

{systemlink_cli-1.11.2 → systemlink_cli-1.11.5}/slcli/workitem_click.py

@@ -35,7 +35,6 @@ from .workspace_utils import (
     resolve_workspace_filter,
 )
 
-
 # ---------------------------------------------------------------------------
 # URL helpers
 # ---------------------------------------------------------------------------