vesk-cli 0.1.2__tar.gz → 0.1.3__tar.gz

{vesk_cli-0.1.2 → vesk_cli-0.1.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: vesk-cli
-Version: 0.1.2
+Version: 0.1.3
 Summary: Vesk Verify: test LLM endpoints and produce compliance-mapped reports.
 Author: Vesk
 License-Expression: Apache-2.0
@@ -53,6 +53,8 @@ vesk scan                      # run probes, write results.json
 vesk report results.json -o report.md
 ```
 
+`api_key_env` holds the *name* of an environment variable (e.g. `VESK_API_KEY`), not a file path or the key. vesk does not read `.env` files; export the variable in your shell (or load your `.env` first, e.g. `set -a; . ./.env; set +a`). Omit `api_key_env` if the endpoint needs no key.
+
 ## Commands
 
 ### `vesk init`

{vesk_cli-0.1.2 → vesk_cli-0.1.3}/README.md

@@ -22,6 +22,8 @@ vesk scan                      # run probes, write results.json
 vesk report results.json -o report.md
 ```
 
+`api_key_env` holds the *name* of an environment variable (e.g. `VESK_API_KEY`), not a file path or the key. vesk does not read `.env` files; export the variable in your shell (or load your `.env` first, e.g. `set -a; . ./.env; set +a`). Omit `api_key_env` if the endpoint needs no key.
+
 ## Commands
 
 ### `vesk init`

{vesk_cli-0.1.2 → vesk_cli-0.1.3}/src/vesk/__init__.py

@@ -1,3 +1,3 @@
 """Vesk Verify: LLM endpoint testing with compliance-mapped reports."""
 
-__version__ = "0.1.2"
+__version__ = "0.1.3"

{vesk_cli-0.1.2 → vesk_cli-0.1.3}/src/vesk/config.py

@@ -56,9 +56,21 @@ class Config(_Strict):
         name = self.target.api_key_env
         if not name:
             return None
+        if not name.isidentifier():
+            raise ConfigError(
+                f"target.api_key_env is {name!r}, which is not an environment variable name. "
+                "Set it to the NAME of a variable (for example VESK_API_KEY), not a file or "
+                "the key itself, then export that variable: export VESK_API_KEY=<your key>"
+            )
         key = os.environ.get(name)
         if not key:
-            raise ConfigError(f"environment variable {name} (target.api_key_env) is not set")
+            raise ConfigError(
+                f"environment variable {name} is not set or is empty "
+                f"(named by target.api_key_env in your config). "
+                f"Export it in this shell first: export {name}=<your key>. "
+                "vesk does not read .env files. If the endpoint needs no key, "
+                "remove api_key_env from the config."
+            )
         return key
 
 

{vesk_cli-0.1.2 → vesk_cli-0.1.3}/tests/unit/test_scan.py

@@ -49,6 +49,12 @@ def test_api_key_comes_from_env(tmp_path, monkeypatch):
     assert cfg.api_key() == "abc"
 
 
+def test_api_key_env_must_be_a_variable_name(tmp_path):
+    cfg = load_config(write(tmp_path, MINIMAL + "  api_key_env: .env\n"))
+    with pytest.raises(ConfigError, match="not an environment variable name"):
+        cfg.api_key()
+
+
 def test_select_probes_unknown(tmp_path):
     cfg = load_config(write(tmp_path, MINIMAL))
     with pytest.raises(ConfigError, match="unknown probe"):