astronomer / astro-cli / 38994982026

61%

main: 45%

Build Type

push

github

Committed by web-flow

Commit Message

Merge main into v2 (#2325)

* Log "Using an Astro API Token" at debug level (#2316)

Log "Using an Astro API Token" at debug level instead of printing it on every command

Co-authored-by: Claude <noreply@anthropic.com>

* Stop astro otto before it runs in an organization the user is not a member of

Ports #2208 (AI-992, open against main) to v2. Otto's model gateway is
not permission-checked, so a login and an organization that do not
match (a stale ASTRO_ORGANIZATION, an organization chosen under another
login) went unnoticed until the first organization-scoped call, the
hosted skills, failed with a 403 that read like a skills bug.

Start now asks, after the login gate and before installing or spawning
Otto, whether the signed-in user can reach the organization Otto would
run in: the project's, else the login's, else an inherited
ASTRO_ORGANIZATION, which is what BuildEnv hands Otto. On a definite no
it prints which of the three the organization came from and how to fix
that, and returns ErrNotOrgMember, which launchOtto exits on quietly.

Changes from #2208:

- internal/otto may not import internal/platform, so the check is a
  MembershipCheck that cmd/otto.go builds on the v1 client and passes
  to Start; nil skips it, which is what the launch tests pass.
- It refuses only when the organization answers 403 or 404 AND the
  self-user lookup names a user. An API token reaches an organization
  by its own grants, so it is never refused here, and a refusal whose
  user cannot be looked up lets the launch go ahead. #2208 refused in
  both cases.
- The check runs under a 5s deadline, and not for --help or --version.
- The guidance names the organization's source rather than always
  suggesting unset ASTRO_ORGANIZATION.

Co-Authored-By: Claude <noreply@anthropic.com>

* Default the DAG integrity test's exceptions to empty when the file is missing (#2324)

test_file_imports only assigned exceptions inside the os.path.exists
branch, so a project without .as... (continued)

Coverage Stats

73 of 85 new or added lines in 6 files covered. (85.88%)

1 existing line in 1 file now uncovered.

40431 of 69729 relevant lines covered (57.98%)

278.98 hits per line