uno-cli 1.0.1__tar.gz → 1.0.2__tar.gz

{uno_cli-1.0.1 → uno_cli-1.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: uno-cli
-Version: 1.0.1
+Version: 1.0.2
 Summary: Uno CLI — Agent tool gateway by ClawdChat. Access 2000+ real-world tools from the command line.
 Project-URL: Homepage, https://clawdtools.uno
 Project-URL: Documentation, https://clawdtools.uno/docs

{uno_cli-1.0.1 → uno_cli-1.0.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "uno-cli"
-version = "1.0.1"
+version = "1.0.2"
 description = "Uno CLI — Agent tool gateway by ClawdChat. Access 2000+ real-world tools from the command line."
 readme = "README.md"
 requires-python = ">=3.8"

uno_cli-1.0.2/tests/test_dry_run.py

@@ -0,0 +1,138 @@
+"""--dry-run preview tests.
+
+``uno call --dry-run <tool>`` is the primary user-confirmation surface: it
+formats the planned invocation (tool + arguments) as JSON without reading any
+credential, opening any socket, or spending any credit. These tests are the
+safety net that guarantees the dry-run remains strictly local.
+"""
+
+from __future__ import annotations
+
+import argparse
+import json
+
+import pytest
+
+from uno_cli import cli
+
+
+# ── Shared fake API that explodes if ever called ───────────────────
+
+
+class _PanicAPI:
+    """Any method on this class raises — a dry-run must never hit it."""
+
+    def __init__(self, *a, **kw):
+        raise AssertionError(
+            "dry-run called the network client; it must not touch the network"
+        )
+
+
+# ── Parser surface ─────────────────────────────────────────────────
+
+
+class TestDryRunFlag:
+    def test_dry_run_flag_defaults_to_false(self):
+        parser = cli.build_parser()
+        args = parser.parse_args(["call", "weather.get", "--args", "{}"])
+        assert args.dry_run is False
+
+    def test_dry_run_flag_parsed_when_present(self):
+        parser = cli.build_parser()
+        args = parser.parse_args(["call", "--dry-run", "weather.get", "--args", "{}"])
+        assert args.dry_run is True
+
+    def test_dry_run_flag_trailing_position_also_works(self):
+        parser = cli.build_parser()
+        args = parser.parse_args(["call", "weather.get", "--args", "{}", "--dry-run"])
+        assert args.dry_run is True
+
+
+# ── cmd_call dry-run path ──────────────────────────────────────────
+
+
+class TestDryRunCall:
+    def _run_dry_run(self, monkeypatch, capsys, *, tool, args_json):
+        """Invoke cmd_call in dry-run mode; any network attempt explodes."""
+        # If _get_api / UnoAPI ever gets called, the test fails loudly.
+        monkeypatch.setattr(cli, "_get_api", lambda a: _PanicAPI())
+        monkeypatch.setattr(cli, "UnoAPI", _PanicAPI)
+
+        ns = argparse.Namespace(
+            tool=tool,
+            args=args_json,
+            timeout=60,
+            dry_run=True,
+            base_url="https://clawdtools.uno",
+        )
+        cli.cmd_call(ns)
+        return json.loads(capsys.readouterr().out)
+
+    def test_dry_run_returns_preview_without_network(self, monkeypatch, capsys):
+        out = self._run_dry_run(
+            monkeypatch,
+            capsys,
+            tool="weather-free.weather_now",
+            args_json='{"city": "Beijing"}',
+        )
+        assert out["success"] is True
+        assert out["dry_run"] is True
+        assert out["preview"]["tool"] == "weather-free.weather_now"
+        assert out["preview"]["arguments"] == {"city": "Beijing"}
+        assert out["preview"]["timeout_seconds"] == 60
+        assert "No network request" in out["note"]
+
+    def test_dry_run_with_empty_args_returns_empty_dict(self, monkeypatch, capsys):
+        out = self._run_dry_run(
+            monkeypatch, capsys, tool="time.get_current_time", args_json=None
+        )
+        assert out["preview"]["arguments"] == {}
+
+    def test_dry_run_without_credentials_still_works(self, monkeypatch, capsys):
+        """Dry-run must not call _get_api, so even unauthenticated users can
+        preview an invocation."""
+
+        def _panic(*a, **kw):
+            raise AssertionError("dry-run read credentials; it must not.")
+
+        monkeypatch.setattr(cli.AuthManager, "load_key", _panic)
+        self._run_dry_run(
+            monkeypatch,
+            capsys,
+            tool="weather-free.weather_now",
+            args_json='{"city": "Tokyo"}',
+        )
+
+    def test_dry_run_respects_scope_guard(self, monkeypatch, capsys):
+        """Dry-run should still be blocked by UNO_ALLOWED_TOOLS — a skill
+        scoped to gpt-image-2 should not be able to preview a call to github
+        even in dry-run mode."""
+        monkeypatch.setenv("UNO_ALLOWED_TOOLS", "gpt-image-2.*")
+        monkeypatch.setattr(cli, "_get_api", lambda a: _PanicAPI())
+
+        ns = argparse.Namespace(
+            tool="github.create_issue",
+            args='{"title": "x"}',
+            timeout=60,
+            dry_run=True,
+            base_url="https://clawdtools.uno",
+        )
+        with pytest.raises(SystemExit) as excinfo:
+            cli.cmd_call(ns)
+        assert excinfo.value.code == 1
+        out = json.loads(capsys.readouterr().out)
+        assert out["error"] == "tool_not_allowed"
+
+    def test_dry_run_preview_does_not_leak_secrets(self, monkeypatch, capsys):
+        """If the user passes an api_key-looking arg, the normal output
+        stripper should still redact it on the way out."""
+        out = self._run_dry_run(
+            monkeypatch,
+            capsys,
+            tool="some-tool.run",
+            args_json='{"api_key": "uno_should_be_masked_longlonglong"}',
+        )
+        # _out passes everything through _strip_secrets; the api_key field
+        # inside preview.arguments is a legitimate tool arg, but the masker
+        # errs on the side of caution by key-name.
+        assert "uno_should_be_masked_longlonglong" not in json.dumps(out)

uno_cli-1.0.2/uno_cli/_version.py

@@ -0,0 +1 @@
+__version__ = "1.0.2"

{uno_cli-1.0.1 → uno_cli-1.0.2}/uno_cli/cli.py

@@ -655,11 +655,10 @@ def cmd_call(args):
             allowed=allowed_patterns,
             hint=(
                 "This skill is scoped to a subset of Uno tools. "
-                "Install uno-cli separately to access the full 2000+ tool catalog."
+                "Install uno-cli separately to access the full tool catalog."
             ),
         )
 
-    api = _get_api(args)
     arguments = {}
     raw_args = getattr(args, "args", None)
     if raw_args:
@@ -674,6 +673,30 @@ def cmd_call(args):
             _fail(f"Invalid JSON in --args: {e}")
 
     timeout = getattr(args, "timeout", 60) or 60
+
+    # Dry-run preview: format the planned invocation without authenticating,
+    # issuing any network request, or spending credits. This is the primary
+    # "user confirmation" surface — an agent is expected to dry-run a call,
+    # show the JSON to the human, and only re-run without --dry-run after
+    # explicit approval. Read-only and credentials-free by construction.
+    if getattr(args, "dry_run", False):
+        _out({
+            "success": True,
+            "dry_run": True,
+            "preview": {
+                "tool": tool_slug,
+                "arguments": arguments,
+                "timeout_seconds": timeout,
+            },
+            "note": (
+                "No network request was made, no credentials were read, and "
+                "no credits were spent. Re-run without --dry-run to actually "
+                "invoke the tool."
+            ),
+        })
+        return
+
+    api = _get_api(args)
     try:
         result = api.post("/v1/call", {"tool": tool_slug, "arguments": arguments}, timeout=timeout)
         if result.get("error"):
@@ -839,6 +862,7 @@ def build_parser():
             "Examples:\n"
             "  uno call time.get_current_time --args '{\"timezone\":\"Asia/Shanghai\"}'\n"
             "  uno call weather-cn.weatherArea --args '{\"area\":\"Beijing\"}'\n"
+            "  uno call --dry-run weather-cn.weatherArea --args '{\"area\":\"Beijing\"}'\n"
             "  uno call twelve-data.quote --args '{\"symbol\":\"AAPL\"}' --timeout 30\n\n"
             "Scope enforcement (for single-purpose skills):\n"
             "  UNO_ALLOWED_TOOLS='gpt-image-2.*,time.*'   # comma-separated glob whitelist"
@@ -847,6 +871,11 @@ def build_parser():
     )
     call_p.add_argument("tool", help="Tool slug (e.g. weather-cn.weatherArea)")
     call_p.add_argument("--args", help='JSON arguments (e.g. \'{"city":"Beijing"}\')')
+    call_p.add_argument(
+        "--dry-run",
+        action="store_true",
+        help="Preview the planned invocation without issuing any network request or spending credits.",
+    )
     call_p.add_argument("--timeout", type=int, default=60, help="Request timeout in seconds (default: 60)")
 
     rate_p = sub.add_parser("rate", help="Rate a tool (0-5)")

uno_cli-1.0.1/uno_cli/_version.py

@@ -1 +0,0 @@
-__version__ = "1.0.1"