xenfra 0.2.6__py3-none-any.whl → 0.2.8__py3-none-any.whl

xenfra/main.py

@@ -17,9 +17,12 @@ from .commands.security_cmd import security
 
 console = Console()
 
+# Production-ready: API URL is hardcoded as https://api.xenfra.tech
+# No configuration needed - works out of the box after pip install
+
 
 @click.group()
-@click.version_option(version="0.2.3")
+@click.version_option(version="0.2.5")
 def cli():
     """
     Xenfra CLI: Deploy Python apps to DigitalOcean with zero configuration.

xenfra/utils/security.py

@@ -44,22 +44,15 @@ class SecurityConfig:
 
     def __init__(self):
         """Initialize security configuration from environment."""
-        # Environment detection - Solution 3
-        self.environment = os.getenv("XENFRA_ENV", "development").lower()
-
-        # Security settings (can be overridden by environment variables)
-        self.enforce_https = os.getenv("XENFRA_ENFORCE_HTTPS", "false").lower() == "true"
-        self.enforce_whitelist = os.getenv("XENFRA_ENFORCE_WHITELIST", "false").lower() == "true"
-        self.enable_cert_pinning = (
-            os.getenv("XENFRA_ENABLE_CERT_PINNING", "false").lower() == "true"
-        )
-        self.warn_on_http = os.getenv("XENFRA_WARN_ON_HTTP", "true").lower() == "true"
+        # PRODUCTION-ONLY: Default to production settings
+        # Environment variable only used for self-hosted instances
+        self.environment = "production"
 
-        # Auto-enable strict security in production
-        if self.environment == "production":
-            self.enforce_https = True
-            self.enforce_whitelist = True
-            self.enable_cert_pinning = True
+        # Security settings - ALWAYS enforced for production safety
+        self.enforce_https = True  # Always require HTTPS
+        self.enforce_whitelist = False  # Allow self-hosted instances
+        self.enable_cert_pinning = False  # Disabled (see future-enhancements.md #3)
+        self.warn_on_http = True  # Always warn on HTTP
 
     def is_production(self) -> bool:
         """Check if running in production environment."""
@@ -243,25 +236,19 @@ def validate_and_get_api_url(url: str = None) -> str:
     Comprehensive API URL validation (combines all 4 solutions).
 
     Args:
-        url: Optional URL override (defaults to XENFRA_API_URL env var)
+        url: Optional URL override (only for self-hosted instances)
 
     Returns:
-        Validated API URL
+        Validated API URL (defaults to https://api.xenfra.tech)
 
     Raises:
         ValueError: If URL fails validation
         click.Abort: If user cancels security prompts
     """
-    # Get URL from parameter or environment
+    # PRODUCTION DEFAULT: Use hardcoded production URL
+    # Only check environment variable for self-hosted overrides
     if url is None:
-        url = os.getenv("XENFRA_API_URL")
-
-        # Use production URL in production environment
-        if url is None and security_config.is_production():
-            url = PRODUCTION_API_URL
-        # Use localhost in development
-        elif url is None:
-            url = "http://localhost:8000"
+        url = os.getenv("XENFRA_API_URL", PRODUCTION_API_URL)
 
     try:
         # Solution 1: Validate URL format
@@ -316,41 +303,34 @@ def display_security_info():
 
 # Environment variable documentation
 """
-Security can be configured via environment variables:
-
-XENFRA_ENV=production|staging|development
-  - Controls default security settings
-  - production: All security features enabled
-  - development: Permissive mode (localhost allowed)
+PRODUCTION-FIRST DESIGN:
+The CLI defaults to production (api.xenfra.tech) with HTTPS enforcement.
+No configuration needed for normal users.
 
-XENFRA_ENFORCE_HTTPS=true|false
-  - Require HTTPS for all connections (except localhost)
-  - Default: false (dev), true (production)
-
-XENFRA_ENFORCE_WHITELIST=true|false
-  - Block connections to non-whitelisted domains
-  - Default: false (dev), true (production)
+Environment variables (for developers/self-hosted only):
 
-XENFRA_ENABLE_CERT_PINNING=true|false
-  - Enable certificate pinning for production domains
-  - Default: false (dev), true (production)
+XENFRA_ENV=development
+  - Enables local development mode
+  - Allows HTTP, relaxes security
+  - Default: production (safe by default)
 
-XENFRA_WARN_ON_HTTP=true|false
-  - Show warning when using HTTP (non-localhost)
-  - Default: true
+XENFRA_API_URL=https://your-instance.com
+  - Override API URL for self-hosted instances
+  - Default: https://api.xenfra.tech
 
-XENFRA_API_URL=https://api.example.com
-  - Override default API URL
-  - Subject to all security validations
+XENFRA_ENFORCE_HTTPS=true|false
+  - Require HTTPS for all connections
+  - Default: true (production), false (development)
 
 Example usage:
 
-# Development (permissive):
-XENFRA_API_URL=http://localhost:8000 xenfra login
+# Production users (zero config):
+xenfra auth login
+xenfra deploy
 
-# Self-hosted instance (disable whitelist):
-XENFRA_API_URL=https://xenfra.mycompany.com XENFRA_ENFORCE_WHITELIST=false xenfra login
+# Local development:
+XENFRA_ENV=development xenfra auth login
 
-# Production (strict):
-XENFRA_ENV=production XENFRA_API_URL=https://api.xenfra.tech xenfra login
+# Self-hosted instance:
+XENFRA_API_URL=https://xenfra.mycompany.com xenfra login
 """

{xenfra-0.2.6.dist-info → xenfra-0.2.8.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: xenfra
-Version: 0.2.6
+Version: 0.2.8
 Summary: A 'Zen Mode' infrastructure engine for Python developers.
 Author: xenfra-cloud
 Author-email: xenfra-cloud <xenfracloud@gmail.com>

{xenfra-0.2.6.dist-info → xenfra-0.2.8.dist-info}/RECORD

@@ -5,14 +5,14 @@ xenfra/commands/deployments.py,sha256=-185BevHVrUT-LAU2k_uZNpKJPCcwpCDEHOFPfD0Wm
 xenfra/commands/intelligence.py,sha256=w8GxwGu63KQ5fwhPpTNTDeW1Xg5g3aFzzIBuP_CeRQo,13541
 xenfra/commands/projects.py,sha256=O2tG--iDWN5oCcHOv1jp88kl9bAK61oGRCLJ60M0b7E,6492
 xenfra/commands/security_cmd.py,sha256=MJxbjQksKrtRn21FSAhTY3ESn_S_tUCGfdNRWL7kNsc,7094
-xenfra/main.py,sha256=bv6EslYtRMXShmHfcSuzecNjJWbCvPCi2LKI4kwL_oQ,1790
+xenfra/main.py,sha256=GJvPsEDifQok1uX_PY8WH_p2eq9OZ-lCiapoExIO0HU,1926
 xenfra/utils/__init__.py,sha256=57o8j7Tibrhyid84zTFLHjFmRP5sCnNbtLEfpRqIpMk,42
 xenfra/utils/auth.py,sha256=oDxDiIWC9851fu_gL-7TVJ60uJT3sZ_DvMIy69SUAEM,8308
 xenfra/utils/codebase.py,sha256=vx-1pMpnefPJ_Xy1UoH7wgHJ2c5ZAsVX1g1IXAfkI28,4018
 xenfra/utils/config.py,sha256=6A6WAggaH2Rco4RJydALxcKteOzXLCKDV0ZxjHhAJHk,11584
-xenfra/utils/security.py,sha256=IR_Hzgfc4KeT-qr2LVBxSvBTO4AP4MCkIlU47_yKN_0,11947
+xenfra/utils/security.py,sha256=V0CqA47ZYt-8AesWb7FPRzzygqEY_g2WF1Duvs5BZ_Y,11143
 xenfra/utils/validation.py,sha256=6mGC5CqAbx-CBp06omWLBpKjnEWXsEzlYWq71wjDeX8,6678
-xenfra-0.2.6.dist-info/WHEEL,sha256=ZyFSCYkV2BrxH6-HRVRg3R9Fo7MALzer9KiPYqNxSbo,79
-xenfra-0.2.6.dist-info/entry_points.txt,sha256=a_2cGhYK__X6eW05Ba8uB6RIM_61c2sHtXsPY8N0mic,45
-xenfra-0.2.6.dist-info/METADATA,sha256=s0oMORzsqWGrFAFqp5_OOwJwRBIi8drY-BUEF6EujTk,3751
-xenfra-0.2.6.dist-info/RECORD,,
+xenfra-0.2.8.dist-info/WHEEL,sha256=ZyFSCYkV2BrxH6-HRVRg3R9Fo7MALzer9KiPYqNxSbo,79
+xenfra-0.2.8.dist-info/entry_points.txt,sha256=a_2cGhYK__X6eW05Ba8uB6RIM_61c2sHtXsPY8N0mic,45
+xenfra-0.2.8.dist-info/METADATA,sha256=IGNwf_5QKQpwjo2zlmKeAlLwXtI4Y0s97Ox1dZ5GOsI,3751
+xenfra-0.2.8.dist-info/RECORD,,