uno-cli 0.1.0__tar.gz → 1.0.0__tar.gz

uno_cli-1.0.0/.gitignore

@@ -0,0 +1,22 @@
+.env
+.env.*
+!.env.example
+.venv/
+__pycache__/
+*.pyc
+*.db
+node_modules/
+.next/
+frontend/.next/
+frontend/node_modules/
+.DS_Store
+.idea/
+*.jpeg
+*.png
+*.db-shm
+*.db-wal
+deploy.sh
+data_export/
+data_export_prod/
+scripts/backup_prod*.json
+.mcp_auth/

uno_cli-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ClawdChat
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

uno_cli-1.0.0/PKG-INFO

@@ -0,0 +1,116 @@
+Metadata-Version: 2.4
+Name: uno-cli
+Version: 1.0.0
+Summary: Uno CLI — Agent tool gateway by ClawdChat. Access 2000+ real-world tools from the command line.
+Project-URL: Homepage, https://clawdtools.uno
+Project-URL: Documentation, https://clawdtools.uno/docs
+Project-URL: Repository, https://github.com/xray918/uno-mcp-cli
+Project-URL: Issues, https://github.com/xray918/uno-mcp-cli/issues
+Author-email: ClawdChat <dev@clawdchat.cn>
+License: MIT
+License-File: LICENSE
+Keywords: agent,clawdchat,cli,llm,mcp,tool-gateway,uno
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Topic :: Utilities
+Requires-Python: >=3.8
+Provides-Extra: dev
+Requires-Dist: pytest-mock>=3.14.0; extra == 'dev'
+Requires-Dist: pytest>=8.0.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# Uno CLI
+
+> **Agent tool gateway by ClawdChat** — access 2000+ real-world tools from the command line with one credential.
+
+[![PyPI](https://img.shields.io/pypi/v/uno-cli.svg)](https://pypi.org/project/uno-cli/)
+[![Python](https://img.shields.io/pypi/pyversions/uno-cli.svg)](https://pypi.org/project/uno-cli/)
+[![License](https://img.shields.io/pypi/l/uno-cli.svg)](https://github.com/xray918/uno-mcp-cli/blob/main/LICENSE)
+
+Zero runtime dependencies (Python 3.8+ stdlib only). Designed for both humans in a terminal and LLM agents orchestrating tool calls.
+
+## Install
+
+```bash
+pip install uno-cli
+```
+
+## Quick start
+
+```bash
+uno login                             # device-code auth via ClawdChat SSO
+uno search "weather"                  # find a tool
+uno call weather-cn.weatherArea --args '{"area":"Beijing"}'
+```
+
+Credentials are stored at `~/.uno/credentials.json` (mode `600`).
+
+## Core commands
+
+| Command | Purpose |
+|---|---|
+| `uno login` / `uno logout` / `uno use` | Device-code auth, multi-account switching |
+| `uno whoami` | Current user, credits, plan |
+| `uno search <query>` | Hybrid keyword + semantic tool search |
+| `uno tool get <slug>` | Full tool metadata |
+| `uno call <slug> --args '{...}'` | Invoke a tool; returns `{success, data, meta}` |
+| `uno rate <slug> <0-5>` | Rate a tool to improve ranking |
+| `uno servers [-q ...]` | Browse servers / categories |
+| `uno keys list / create / delete` | API key management |
+| `uno disconnect <server>` | Revoke 3rd-party OAuth / API key |
+| `uno health` | Liveness check |
+
+All commands output JSON. Add `--compact` for single-line output (fewer tokens for LLM agents).
+
+## Environment variables
+
+| Variable | Purpose |
+|---|---|
+| `UNO_API_KEY` | Override stored credentials (useful for CI). |
+| `UNO_API_URL` | Override API base URL (default `https://clawdtools.uno`). |
+| `UNO_OAUTH_SCOPE` | OAuth scope requested at `login --start` (default `mcp:*`). Single-purpose skills narrow this to `mcp:<tool>`. |
+| `UNO_ALLOWED_TOOLS` | Comma-separated glob whitelist enforced by `uno call`. Tools not matching any pattern are rejected with `tool_not_allowed`. Example: `gpt-image-2.*,time.*`. |
+| `UNO_CALLER_SKILL` | Identifier (e.g. `gpt-image2`) appended to the `User-Agent` for attribution. |
+
+### Scope enforcement for embedding skills
+
+Single-purpose Cursor / Claude skills (such as `gpt-image2`) embed `uno-cli` as a dependency but must only call the one tool they advertise. The combination of `UNO_OAUTH_SCOPE` (narrowed scope at login) and `UNO_ALLOWED_TOOLS` (runtime glob whitelist) makes the CLI's behaviour match its declared metadata — a hard requirement for Clawhub / Skillhub security review.
+
+```bash
+export UNO_OAUTH_SCOPE="mcp:gpt-image-2"
+export UNO_ALLOWED_TOOLS="gpt-image-2.*"
+uno call gpt-image-2.gpt_image2_submit --args '{"prompt":"..."}'
+```
+
+Attempting to call anything outside the whitelist returns:
+
+```json
+{
+  "error": "tool_not_allowed",
+  "tool": "github.create_issue",
+  "allowed": ["gpt-image-2.*"],
+  "hint": "This skill is scoped to a subset of Uno tools. Install uno-cli separately to access the full 2000+ tool catalog."
+}
+```
+
+## Python entry point
+
+Agents that bootstrap the CLI without relying on `PATH` can use the module form:
+
+```bash
+python -m uno_cli search "weather"
+```
+
+## License
+
+MIT © ClawdChat.

uno_cli-1.0.0/README.md

@@ -0,0 +1,85 @@
+# Uno CLI
+
+> **Agent tool gateway by ClawdChat** — access 2000+ real-world tools from the command line with one credential.
+
+[![PyPI](https://img.shields.io/pypi/v/uno-cli.svg)](https://pypi.org/project/uno-cli/)
+[![Python](https://img.shields.io/pypi/pyversions/uno-cli.svg)](https://pypi.org/project/uno-cli/)
+[![License](https://img.shields.io/pypi/l/uno-cli.svg)](https://github.com/xray918/uno-mcp-cli/blob/main/LICENSE)
+
+Zero runtime dependencies (Python 3.8+ stdlib only). Designed for both humans in a terminal and LLM agents orchestrating tool calls.
+
+## Install
+
+```bash
+pip install uno-cli
+```
+
+## Quick start
+
+```bash
+uno login                             # device-code auth via ClawdChat SSO
+uno search "weather"                  # find a tool
+uno call weather-cn.weatherArea --args '{"area":"Beijing"}'
+```
+
+Credentials are stored at `~/.uno/credentials.json` (mode `600`).
+
+## Core commands
+
+| Command | Purpose |
+|---|---|
+| `uno login` / `uno logout` / `uno use` | Device-code auth, multi-account switching |
+| `uno whoami` | Current user, credits, plan |
+| `uno search <query>` | Hybrid keyword + semantic tool search |
+| `uno tool get <slug>` | Full tool metadata |
+| `uno call <slug> --args '{...}'` | Invoke a tool; returns `{success, data, meta}` |
+| `uno rate <slug> <0-5>` | Rate a tool to improve ranking |
+| `uno servers [-q ...]` | Browse servers / categories |
+| `uno keys list / create / delete` | API key management |
+| `uno disconnect <server>` | Revoke 3rd-party OAuth / API key |
+| `uno health` | Liveness check |
+
+All commands output JSON. Add `--compact` for single-line output (fewer tokens for LLM agents).
+
+## Environment variables
+
+| Variable | Purpose |
+|---|---|
+| `UNO_API_KEY` | Override stored credentials (useful for CI). |
+| `UNO_API_URL` | Override API base URL (default `https://clawdtools.uno`). |
+| `UNO_OAUTH_SCOPE` | OAuth scope requested at `login --start` (default `mcp:*`). Single-purpose skills narrow this to `mcp:<tool>`. |
+| `UNO_ALLOWED_TOOLS` | Comma-separated glob whitelist enforced by `uno call`. Tools not matching any pattern are rejected with `tool_not_allowed`. Example: `gpt-image-2.*,time.*`. |
+| `UNO_CALLER_SKILL` | Identifier (e.g. `gpt-image2`) appended to the `User-Agent` for attribution. |
+
+### Scope enforcement for embedding skills
+
+Single-purpose Cursor / Claude skills (such as `gpt-image2`) embed `uno-cli` as a dependency but must only call the one tool they advertise. The combination of `UNO_OAUTH_SCOPE` (narrowed scope at login) and `UNO_ALLOWED_TOOLS` (runtime glob whitelist) makes the CLI's behaviour match its declared metadata — a hard requirement for Clawhub / Skillhub security review.
+
+```bash
+export UNO_OAUTH_SCOPE="mcp:gpt-image-2"
+export UNO_ALLOWED_TOOLS="gpt-image-2.*"
+uno call gpt-image-2.gpt_image2_submit --args '{"prompt":"..."}'
+```
+
+Attempting to call anything outside the whitelist returns:
+
+```json
+{
+  "error": "tool_not_allowed",
+  "tool": "github.create_issue",
+  "allowed": ["gpt-image-2.*"],
+  "hint": "This skill is scoped to a subset of Uno tools. Install uno-cli separately to access the full 2000+ tool catalog."
+}
+```
+
+## Python entry point
+
+Agents that bootstrap the CLI without relying on `PATH` can use the module form:
+
+```bash
+python -m uno_cli search "weather"
+```
+
+## License
+
+MIT © ClawdChat.

uno_cli-1.0.0/pyproject.toml

@@ -0,0 +1,65 @@
+[project]
+name = "uno-cli"
+version = "1.0.0"
+description = "Uno CLI — Agent tool gateway by ClawdChat. Access 2000+ real-world tools from the command line."
+readme = "README.md"
+requires-python = ">=3.8"
+license = { text = "MIT" }
+authors = [
+    { name = "ClawdChat", email = "dev@clawdchat.cn" },
+]
+keywords = [
+    "agent",
+    "cli",
+    "mcp",
+    "tool-gateway",
+    "clawdchat",
+    "uno",
+    "llm",
+]
+classifiers = [
+    "Development Status :: 5 - Production/Stable",
+    "Environment :: Console",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: MIT License",
+    "Operating System :: OS Independent",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.8",
+    "Programming Language :: Python :: 3.9",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Topic :: Software Development :: Libraries :: Python Modules",
+    "Topic :: Utilities",
+]
+dependencies = []
+
+[project.urls]
+Homepage = "https://clawdtools.uno"
+Documentation = "https://clawdtools.uno/docs"
+Repository = "https://github.com/xray918/uno-mcp-cli"
+Issues = "https://github.com/xray918/uno-mcp-cli/issues"
+
+[project.scripts]
+uno = "uno_cli.cli:main"
+
+[project.optional-dependencies]
+dev = [
+    "pytest>=8.0.0",
+    "pytest-mock>=3.14.0",
+]
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["uno_cli"]
+
+[tool.hatch.build.targets.sdist]
+include = [
+    "uno_cli",
+    "README.md",
+    "LICENSE",
+    "tests",
+]

uno_cli-1.0.0/tests/test_auth.py

@@ -0,0 +1,140 @@
+"""Auth flow tests — file I/O + OAuth scope propagation, all mocked."""
+
+from __future__ import annotations
+
+import json
+import os
+
+import pytest
+
+from uno_cli import cli
+
+
+@pytest.fixture
+def isolated_cred_home(monkeypatch, tmp_path):
+    """Redirect the credentials file into a per-test temp directory."""
+    cred_dir = tmp_path / ".uno"
+    cred_file = cred_dir / "credentials.json"
+    monkeypatch.setattr(cli, "CRED_DIR", str(cred_dir))
+    monkeypatch.setattr(cli, "CRED_FILE", str(cred_file))
+    return cred_file
+
+
+class TestCredentialRoundtrip:
+    def test_save_then_load(self, isolated_cred_home):
+        auth = cli.AuthManager()
+        auth.save_account("uno_key_abc", "Alice", "alice@example.com", "u_1")
+        assert auth.load_key() == "uno_key_abc"
+
+        data = json.loads(isolated_cred_home.read_text())
+        assert data[0]["api_key"] == "uno_key_abc"
+        assert data[0]["email"] == "alice@example.com"
+        assert data[0]["active"] is True
+
+    def test_env_key_overrides_stored(self, isolated_cred_home, monkeypatch):
+        auth = cli.AuthManager()
+        auth.save_account("uno_stored", "Alice", "a@e.com")
+        monkeypatch.setenv("UNO_API_KEY", "uno_from_env")
+        assert auth.load_key() == "uno_from_env"
+
+    def test_multi_account_switch(self, isolated_cred_home):
+        auth = cli.AuthManager()
+        auth.save_account("key_a", "Alice", "a@e.com")
+        auth.save_account("key_b", "Bob", "b@e.com")
+        assert auth.load_key() == "key_b"  # newest becomes active
+
+        auth.switch("a@e.com")
+        assert auth.load_key() == "key_a"
+
+    def test_remove_account_all(self, isolated_cred_home):
+        auth = cli.AuthManager()
+        auth.save_account("key_a", "Alice", "a@e.com")
+        auth.save_account("key_b", "Bob", "b@e.com")
+        auth.remove_account(all_=True)
+        assert auth.load_key() == ""
+
+
+class TestDeviceCodeScope:
+    """``login_device_start`` must request whatever ``UNO_OAUTH_SCOPE`` is set to."""
+
+    def test_scope_from_env_is_sent(self, monkeypatch, isolated_cred_home):
+        monkeypatch.setenv("UNO_OAUTH_SCOPE", "mcp:gpt-image-2")
+
+        captured = {}
+
+        class _FakeAPI:
+            def __init__(self, *a, **kw):
+                pass
+
+            def post(self, path, data, timeout=60):
+                captured["path"] = path
+                captured["data"] = data
+                return {
+                    "device_code": "dc_xyz",
+                    "user_code": "USER-CODE",
+                    "verification_uri": "https://clawdtools.uno/device",
+                    "expires_in": 600,
+                    "interval": 5,
+                }
+
+        monkeypatch.setattr(cli, "UnoAPI", _FakeAPI)
+
+        result = cli.AuthManager().login_device_start()
+        assert captured["path"] == "/oauth/device/code"
+        assert captured["data"]["scope"] == "mcp:gpt-image-2"
+        assert result["scope"] == "mcp:gpt-image-2"
+        assert result["verification_uri_complete"].endswith("?code=USER-CODE")
+
+    def test_default_scope_is_wildcard(self, monkeypatch, isolated_cred_home):
+        monkeypatch.delenv("UNO_OAUTH_SCOPE", raising=False)
+        captured = {}
+
+        class _FakeAPI:
+            def __init__(self, *a, **kw):
+                pass
+
+            def post(self, path, data, timeout=60):
+                captured["data"] = data
+                return {
+                    "device_code": "dc",
+                    "user_code": "UC",
+                    "verification_uri": "https://clawdtools.uno/device",
+                    "expires_in": 600,
+                    "interval": 5,
+                }
+
+        monkeypatch.setattr(cli, "UnoAPI", _FakeAPI)
+        cli.AuthManager().login_device_start()
+        assert captured["data"]["scope"] == "mcp:*"
+
+
+class TestLoginWithKey:
+    def test_verifies_key_against_auth_me(self, monkeypatch, isolated_cred_home):
+        class _FakeAPI:
+            def __init__(self, *a, **kw):
+                pass
+
+            def get(self, path, params=None):
+                assert path == "/v1/auth/me"
+                return {"name": "Alice", "email": "a@e.com", "id": "u_1"}
+
+        monkeypatch.setattr(cli, "UnoAPI", _FakeAPI)
+        result = cli.AuthManager().login_with_key("uno_key_abc")
+        assert result == {"success": True, "name": "Alice", "email": "a@e.com"}
+        with open(cli.CRED_FILE) as f:
+            data = json.load(f)
+        assert data[0]["api_key"] == "uno_key_abc"
+
+    def test_invalid_key_returns_error(self, monkeypatch, isolated_cred_home):
+        class _FakeAPI:
+            def __init__(self, *a, **kw):
+                pass
+
+            def get(self, path, params=None):
+                raise cli.APIError(401, {"detail": "invalid api key"})
+
+        monkeypatch.setattr(cli, "UnoAPI", _FakeAPI)
+        result = cli.AuthManager().login_with_key("uno_bad")
+        assert "error" in result
+        # Make sure nothing was persisted
+        assert not os.path.exists(cli.CRED_FILE)

uno_cli-1.0.0/tests/test_cli.py

@@ -0,0 +1,146 @@
+"""Argparse + output-shape + User-Agent tests for uno_cli.cli."""
+
+from __future__ import annotations
+
+import json
+
+import pytest
+
+from uno_cli import cli
+from uno_cli._version import __version__
+
+
+# ── Argv preprocessing ─────────────────────────────────────────────
+
+
+class TestPreprocessArgv:
+    def test_hoists_compact_flag_to_front(self):
+        assert cli._preprocess_argv(["search", "weather", "--compact"]) == [
+            "--compact",
+            "search",
+            "weather",
+        ]
+
+    def test_hoists_base_url_with_value(self):
+        out = cli._preprocess_argv(["search", "weather", "--base-url", "http://x"])
+        assert out == ["--base-url", "http://x", "search", "weather"]
+
+    def test_rewrites_poll_with_dash_prefix_value(self):
+        """Device codes can start with ``-``; argparse would misread them as flags."""
+        assert cli._preprocess_argv(["login", "--poll", "-abc"]) == [
+            "login",
+            "--poll=-abc",
+        ]
+
+    def test_keeps_already_valid_input_untouched(self):
+        assert cli._preprocess_argv(["--compact", "whoami"]) == ["--compact", "whoami"]
+
+
+# ── Parser structure ───────────────────────────────────────────────
+
+
+class TestParser:
+    def test_version_flag_matches_package(self, capsys):
+        parser = cli.build_parser()
+        with pytest.raises(SystemExit):
+            parser.parse_args(["--version"])
+        out = capsys.readouterr().out
+        assert __version__ in out
+
+    def test_subcommands_are_registered(self):
+        parser = cli.build_parser()
+        # Subparsers live at position 2 (after --compact, --base-url).
+        subparsers_action = next(
+            a for a in parser._actions if isinstance(a, cli.argparse._SubParsersAction)
+        )
+        expected = {
+            "login", "logout", "use", "whoami", "search", "tool",
+            "call", "rate", "servers", "keys", "health", "disconnect",
+        }
+        assert expected <= set(subparsers_action.choices.keys())
+
+
+# ── User-Agent header ──────────────────────────────────────────────
+
+
+class TestUserAgent:
+    def test_default_user_agent_shape(self, monkeypatch):
+        monkeypatch.delenv(cli.CALLER_SKILL_ENV, raising=False)
+        ua = cli._user_agent()
+        assert ua.startswith(f"uno-cli/{__version__}")
+        assert "skill/" not in ua
+
+    def test_caller_skill_is_appended(self, monkeypatch):
+        monkeypatch.setenv(cli.CALLER_SKILL_ENV, "gpt-image2")
+        ua = cli._user_agent()
+        assert "skill/gpt-image2" in ua
+
+    def test_caller_skill_is_sanitized(self, monkeypatch):
+        """Only alnum + ``-_.`` survive, truncated at 64 chars — no header smuggling."""
+        monkeypatch.setenv(cli.CALLER_SKILL_ENV, "bad\r\nheader: evil/slash")
+        ua = cli._user_agent()
+        assert "\r" not in ua and "\n" not in ua and ":" not in ua and "/evil" not in ua
+        assert "skill/badheaderevilslash" in ua
+
+    def test_caller_skill_truncated_at_64_chars(self, monkeypatch):
+        monkeypatch.setenv(cli.CALLER_SKILL_ENV, "a" * 200)
+        ua = cli._user_agent()
+        # The sanitiser truncates to at most 64 chars.
+        assert "skill/" + ("a" * 64) in ua
+        assert "skill/" + ("a" * 65) not in ua
+
+
+# ── Output helpers & hints ─────────────────────────────────────────
+
+
+class TestErrorHints:
+    @pytest.mark.parametrize("msg,expected", [
+        ("insufficient_credits", "Out of credits."),
+        ("unauthorized", "Login required."),
+        ("tool_not_found", "Try: uno search"),
+        ("tool_not_allowed", "outside this skill's declared scope."),
+        ("rate limit exceeded", "Rate limited."),
+        ("totally unrelated error text", ""),
+    ])
+    def test_match_hint(self, msg, expected):
+        hint = cli._match_hint(msg)
+        if expected:
+            assert expected in hint
+        else:
+            assert hint == ""
+
+    def test_format_api_error_passes_through_detail_list(self):
+        """FastAPI-style 422 validation errors arrive as ``{"detail": [...]}``."""
+        body = {"detail": [{"loc": ["body", "tool"], "msg": "field required"}]}
+        out = cli._format_api_error(422, body)
+        assert out["status"] == 422
+        assert "body → tool" in out["error"]
+        assert "field required" in out["error"]
+
+    def test_format_api_error_str_body(self):
+        out = cli._format_api_error(500, "server exploded")
+        assert out["error"] == "server exploded"
+
+
+# ── JSON output shape of _out ──────────────────────────────────────
+
+
+class TestOutShape:
+    def test_default_output_is_pretty(self, capsys):
+        # Ensure no lingering compact state from previous tests
+        if hasattr(cli._out, "compact"):
+            cli._out.compact = False
+        cli._out({"a": 1})
+        out = capsys.readouterr().out
+        assert "\n" in out  # pretty-printed has newlines
+        assert json.loads(out) == {"a": 1}
+
+    def test_compact_output_is_single_line(self, capsys):
+        cli._out.compact = True
+        try:
+            cli._out({"a": 1, "b": [1, 2]})
+            out = capsys.readouterr().out
+            assert out.count("\n") == 1  # one trailing newline from print
+            assert json.loads(out) == {"a": 1, "b": [1, 2]}
+        finally:
+            cli._out.compact = False