trustgraph-cli 2.4.6__tar.gz → 2.4.7__tar.gz

{trustgraph_cli-2.4.6 → trustgraph_cli-2.4.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: trustgraph-cli
-Version: 2.4.6
+Version: 2.4.7
 Summary: TrustGraph provides a means to run a pipeline of flexible AI processing components in a flexible means to achieve a processing pipeline.
 Author-email: "trustgraph.ai" <security@trustgraph.ai>
 Project-URL: Homepage, https://github.com/trustgraph-ai/trustgraph

{trustgraph_cli-2.4.6 → trustgraph_cli-2.4.7}/pyproject.toml

@@ -44,6 +44,8 @@ tg-bootstrap-iam = "trustgraph.cli.bootstrap_iam:main"
 tg-login = "trustgraph.cli.login:main"
 tg-create-user = "trustgraph.cli.create_user:main"
 tg-list-users = "trustgraph.cli.list_users:main"
+tg-whoami = "trustgraph.cli.whoami:main"
+tg-update-user = "trustgraph.cli.update_user:main"
 tg-disable-user = "trustgraph.cli.disable_user:main"
 tg-enable-user = "trustgraph.cli.enable_user:main"
 tg-delete-user = "trustgraph.cli.delete_user:main"

trustgraph_cli-2.4.7/trustgraph/cli/update_user.py

@@ -0,0 +1,125 @@
+"""
+Update a user's profile fields: name, email, roles, enabled flag,
+must-change-password flag.
+
+Username is immutable — create a new user and disable the old one
+to effect a username change.  Password changes go through
+``tg-change-password`` (self-service) or ``tg-reset-password``
+(admin-driven).
+
+Only the fields you supply are changed; omitted fields are left
+untouched on the user record.  An empty ``--roles`` is rejected by
+iam-svc (a user must have at least one role); to demote a user use
+``tg-disable-user``.
+"""
+
+import argparse
+import sys
+
+from ._iam import DEFAULT_URL, DEFAULT_TOKEN, call_iam, run_main
+
+
+def _parse_bool(s):
+    if s is None:
+        return None
+    s = s.strip().lower()
+    if s in ("yes", "y", "true", "t", "1"):
+        return True
+    if s in ("no", "n", "false", "f", "0"):
+        return False
+    raise argparse.ArgumentTypeError(
+        f"expected yes/no, got {s!r}"
+    )
+
+
+def do_update_user(args):
+    user = {}
+    if args.name is not None:
+        user["name"] = args.name
+    if args.email is not None:
+        user["email"] = args.email
+    if args.roles is not None:
+        user["roles"] = args.roles
+    if args.enabled is not None:
+        user["enabled"] = args.enabled
+    if args.must_change_password is not None:
+        user["must_change_password"] = args.must_change_password
+
+    if not user:
+        print(
+            "tg-update-user: nothing to change — supply at least "
+            "one of --name / --email / --roles / --enabled / "
+            "--must-change-password",
+            file=sys.stderr,
+        )
+        sys.exit(2)
+
+    req = {
+        "operation": "update-user",
+        "user_id": args.user_id,
+        "user": user,
+    }
+    if args.workspace:
+        req["workspace"] = args.workspace
+    resp = call_iam(args.api_url, args.token, req)
+
+    rec = resp.get("user", {})
+    print(f"id        : {rec.get('id', '')}")
+    print(f"username  : {rec.get('username', '')}")
+    print(f"name      : {rec.get('name', '')}")
+    print(f"email     : {rec.get('email', '')}")
+    print(f"workspace : {rec.get('workspace', '')}")
+    print(f"roles     : {', '.join(rec.get('roles', []))}")
+    print(f"enabled   : {'yes' if rec.get('enabled') else 'no'}")
+    print(
+        f"must-change-pw: "
+        f"{'yes' if rec.get('must_change_password') else 'no'}"
+    )
+
+
+def main():
+    parser = argparse.ArgumentParser(
+        prog="tg-update-user", description=__doc__,
+    )
+    parser.add_argument(
+        "-u", "--api-url", default=DEFAULT_URL,
+        help=f"API URL (default: {DEFAULT_URL})",
+    )
+    parser.add_argument(
+        "-t", "--token", default=DEFAULT_TOKEN,
+        help="Auth token (default: $TRUSTGRAPH_TOKEN)",
+    )
+    parser.add_argument(
+        "--user-id", required=True, help="Target user id",
+    )
+    parser.add_argument(
+        "--name", default=None, help="New display name",
+    )
+    parser.add_argument(
+        "--email", default=None, help="New email",
+    )
+    parser.add_argument(
+        "--roles", nargs="+", default=None,
+        help="Replacement role list (e.g. --roles reader writer)",
+    )
+    parser.add_argument(
+        "--enabled", type=_parse_bool, default=None,
+        help="Set enabled flag (yes/no)",
+    )
+    parser.add_argument(
+        "--must-change-password", type=_parse_bool, default=None,
+        help="Set must-change-password flag (yes/no)",
+    )
+    parser.add_argument(
+        "-w", "--workspace", default=None,
+        help=(
+            "Optional workspace integrity check — when supplied, "
+            "iam-svc verifies the target user's home workspace "
+            "matches"
+        ),
+    )
+    run_main(do_update_user, parser)
+
+
+if __name__ == "__main__":
+    main()

trustgraph_cli-2.4.7/trustgraph/cli/whoami.py

@@ -0,0 +1,52 @@
+"""
+Show the authenticated caller's own user record.
+"""
+
+import argparse
+
+import tabulate
+
+from ._iam import DEFAULT_URL, DEFAULT_TOKEN, call_iam, run_main
+
+
+def do_whoami(args):
+    resp = call_iam(args.api_url, args.token, {"operation": "whoami"})
+    user = resp.get("user")
+    if not user:
+        print("(no user record returned)")
+        return
+
+    rows = [
+        ["id", user.get("id", "")],
+        ["username", user.get("username", "")],
+        ["name", user.get("name", "")],
+        ["email", user.get("email", "")],
+        ["workspace", user.get("workspace", "")],
+        ["roles", ", ".join(user.get("roles", []))],
+        ["enabled", "yes" if user.get("enabled") else "no"],
+        [
+            "must change password",
+            "yes" if user.get("must_change_password") else "no",
+        ],
+        ["created", user.get("created", "")],
+    ]
+    print(tabulate.tabulate(rows, tablefmt="plain"))
+
+
+def main():
+    parser = argparse.ArgumentParser(
+        prog="tg-whoami", description=__doc__,
+    )
+    parser.add_argument(
+        "-u", "--api-url", default=DEFAULT_URL,
+        help=f"API URL (default: {DEFAULT_URL})",
+    )
+    parser.add_argument(
+        "-t", "--token", default=DEFAULT_TOKEN,
+        help="Auth token (default: $TRUSTGRAPH_TOKEN)",
+    )
+    run_main(do_whoami, parser)
+
+
+if __name__ == "__main__":
+    main()

trustgraph_cli-2.4.7/trustgraph/cli_version.py

@@ -0,0 +1 @@
+__version__ = "2.4.7"

{trustgraph_cli-2.4.6 → trustgraph_cli-2.4.7}/trustgraph_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: trustgraph-cli
-Version: 2.4.6
+Version: 2.4.7
 Summary: TrustGraph provides a means to run a pipeline of flexible AI processing components in a flexible means to achieve a processing pipeline.
 Author-email: "trustgraph.ai" <security@trustgraph.ai>
 Project-URL: Homepage, https://github.com/trustgraph-ai/trustgraph

{trustgraph_cli-2.4.6 → trustgraph_cli-2.4.7}/trustgraph_cli.egg-info/SOURCES.txt

@@ -91,7 +91,9 @@ trustgraph/cli/start_library_processing.py
 trustgraph/cli/stop_flow.py
 trustgraph/cli/stop_library_processing.py
 trustgraph/cli/unload_kg_core.py
+trustgraph/cli/update_user.py
 trustgraph/cli/verify_system_status.py
+trustgraph/cli/whoami.py
 trustgraph_cli.egg-info/PKG-INFO
 trustgraph_cli.egg-info/SOURCES.txt
 trustgraph_cli.egg-info/dependency_links.txt

{trustgraph_cli-2.4.6 → trustgraph_cli-2.4.7}/trustgraph_cli.egg-info/entry_points.txt

@@ -86,4 +86,6 @@ tg-start-library-processing = trustgraph.cli.start_library_processing:main
 tg-stop-flow = trustgraph.cli.stop_flow:main
 tg-stop-library-processing = trustgraph.cli.stop_library_processing:main
 tg-unload-kg-core = trustgraph.cli.unload_kg_core:main
+tg-update-user = trustgraph.cli.update_user:main
 tg-verify-system-status = trustgraph.cli.verify_system_status:main
+tg-whoami = trustgraph.cli.whoami:main

trustgraph_cli-2.4.6/trustgraph/cli_version.py

@@ -1 +0,0 @@
-__version__ = "2.4.6"