release: v1.0.2 — Aodh PUT semantics + Keystone hex ID + version sync

Found during live Aodh lifecycle test on Infomaniak (2026-04-19, post
v1.0.1). All fixes validated against the real cloud.

- alarm set: Aodh requires the full alarm representation on PUT, not a
  partial. Fetch current, merge the user's updates, strip read-only
  fields (alarm_id, project_id, user_id, timestamp, state_timestamp,
  state_reason*), then PUT. Previously returned 400 "Mandatory field
  missing" for any set that didn't include name+type+rule.

- validate_id: accept 32-char bare hex IDs in addition to hyphenated
  UUIDs. Keystone projects/users/groups on many clouds (incl.
  Infomaniak) are exposed as hex-without-hyphens, making
  `alarm quota-set <project_id>` and similar commands unusable.

- __version__: read from installed package metadata
  (importlib.metadata.version) instead of hardcoded string that drifted
  from pyproject.toml. `orca --version` now reflects the installed
  distribution.

Co-Authored-By: Claude Opus 4.7 <[email protected]>

Author: Kevin Allioli

orca_cli/__init__.py

@@ -1,3 +1,13 @@
 """orca — OpenStack Rich Command-line Alternative."""
 
-__version__ = "0.1.0"
+from __future__ import annotations
+
+try:
+    from importlib.metadata import PackageNotFoundError, version
+except ImportError:  # pragma: no cover — py<3.8
+    from importlib_metadata import PackageNotFoundError, version  # type: ignore[no-redef]
+
+try:
+    __version__ = version("orca-openstackclient")
+except PackageNotFoundError:  # pragma: no cover — editable source w/o install
+    __version__ = "0.0.0+dev"

orca_cli/commands/alarm.py

@@ -194,36 +194,45 @@ def alarm_set(ctx, alarm_id, name, description, severity, enabled, repeat_action
               rule_json, alarm_actions, ok_actions, insufficient_data_actions):
     """Update an alarm."""
     client = ctx.find_object(OrcaContext).ensure_client()
-    # Fetch current alarm to know its type
-    current = client.get(f"{_url(client)}/v2/alarms/{alarm_id}")
-    body: dict = {}
+    updates: dict = {}
     if name is not None:
-        body["name"] = name
+        updates["name"] = name
     if description is not None:
-        body["description"] = description
+        updates["description"] = description
     if severity is not None:
-        body["severity"] = severity
+        updates["severity"] = severity
     if enabled is not None:
-        body["enabled"] = enabled
+        updates["enabled"] = enabled
     if repeat_actions is not None:
-        body["repeat_actions"] = repeat_actions
+        updates["repeat_actions"] = repeat_actions
     if alarm_actions:
-        body["alarm_actions"] = list(alarm_actions)
+        updates["alarm_actions"] = list(alarm_actions)
     if ok_actions:
-        body["ok_actions"] = list(ok_actions)
+        updates["ok_actions"] = list(ok_actions)
     if insufficient_data_actions:
-        body["insufficient_data_actions"] = list(insufficient_data_actions)
+        updates["insufficient_data_actions"] = list(insufficient_data_actions)
+    rule_update: dict | None = None
     if rule_json is not None:
         try:
-            rule = json.loads(rule_json)
+            rule_update = json.loads(rule_json)
         except json.JSONDecodeError as exc:
             raise click.BadParameter(f"Invalid JSON: {exc}", param_hint="--rule")
-        atype = current.get("type", "")
-        rule_key = "composite_rule" if atype == "composite" else f"{atype}_rule"
-        body[rule_key] = rule
-    if not body:
+    if not updates and rule_update is None:
         console.print("Nothing to update.")
         return
+
+    # Aodh PUT wants the full alarm representation — fetch, merge, send.
+    current = client.get(f"{_url(client)}/v2/alarms/{alarm_id}")
+    body = dict(current)
+    body.update(updates)
+    if rule_update is not None:
+        atype = current.get("type", "")
+        rule_key = "composite_rule" if atype == "composite" else f"{atype}_rule"
+        body[rule_key] = rule_update
+    # Aodh rejects read-only fields on PUT
+    for ro in ("alarm_id", "project_id", "user_id", "timestamp",
+               "state_timestamp", "state_reason", "state_reason_data"):
+        body.pop(ro, None)
     client.put(f"{_url(client)}/v2/alarms/{alarm_id}", json=body)
     console.print(f"Alarm [bold]{alarm_id}[/bold] updated.")
 

orca_cli/core/validators.py

@@ -6,13 +6,20 @@
 
 
 def validate_id(ctx: click.Context, param: click.Parameter, value: str) -> str:
-    """Validate that the given value looks like a valid resource ID (UUID or numeric)."""
+    """Validate that the given value looks like a valid resource ID.
+
+    Accepts:
+    - Hyphenated UUID: ``8-4-4-4-12`` hex (e.g. Nova/Neutron resource IDs).
+    - Bare hex UUID: 32 hex chars (e.g. Keystone project/user IDs).
+    - Numeric ID (e.g. flavor IDs on older clouds, quota resources).
+    """
     uuid_pattern = re.compile(
         r"^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$",
         re.IGNORECASE,
     )
+    hex_pattern = re.compile(r"^[0-9a-f]{32}$", re.IGNORECASE)
     numeric_pattern = re.compile(r"^\d+$")
-    if not (uuid_pattern.match(value) or numeric_pattern.match(value)):
+    if not (uuid_pattern.match(value) or hex_pattern.match(value) or numeric_pattern.match(value)):
         raise click.BadParameter(f"'{value}' is not a valid resource ID (expected UUID or numeric).")
     return value
 

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "poetry.core.masonry.api"
 
 [tool.poetry]
 name = "orca-openstackclient"
-version = "1.0.1"
+version = "1.0.2"
 description = "orca — OpenStack Rich Command-line Alternative"
 authors = ["Kevin Allioli"]
 license = "Apache-2.0"

tests/test_alarm.py

@@ -208,7 +208,22 @@ def test_set_name(self, invoke, mock_client):
         result = invoke(["alarm", "set", ALARM_ID, "--name", "renamed"])
         assert result.exit_code == 0
         body = mock_client.put.call_args[1]["json"]
+        # Aodh needs the full representation: the update carries the name
+        # override *and* the merged existing fields (type, rule, severity…).
         assert body["name"] == "renamed"
+        assert body["type"] == "gnocchi_resources_threshold"
+        assert body["severity"] == "low"
+        assert "gnocchi_resources_threshold_rule" in body
+
+    def test_set_strips_readonly_fields(self, invoke, mock_client):
+        _aodh(mock_client)
+        mock_client.get.return_value = _alarm()
+        result = invoke(["alarm", "set", ALARM_ID, "--name", "renamed"])
+        assert result.exit_code == 0
+        body = mock_client.put.call_args[1]["json"]
+        for ro in ("alarm_id", "project_id", "user_id",
+                   "timestamp", "state_timestamp"):
+            assert ro not in body
 
     def test_set_rule(self, invoke, mock_client):
         _aodh(mock_client)
@@ -220,7 +235,7 @@ def test_set_rule(self, invoke, mock_client):
         result = invoke(["alarm", "set", ALARM_ID, "--rule", new_rule])
         assert result.exit_code == 0
         body = mock_client.put.call_args[1]["json"]
-        assert "gnocchi_resources_threshold_rule" in body
+        assert body["gnocchi_resources_threshold_rule"]["threshold"] == 90.0
 
     def test_set_nothing(self, invoke, mock_client):
         _aodh(mock_client)

tests/test_validators.py

@@ -21,6 +21,15 @@ def test_accepts_uppercase_uuid(self):
     def test_accepts_numeric(self):
         assert validate_id(None, None, "42") == "42"
 
+    def test_accepts_bare_hex_uuid(self):
+        # Keystone project/user IDs are commonly hex-without-hyphens
+        uid = "120b4dbd14934ba6ba1975792ae6b789"
+        assert validate_id(None, None, uid) == uid
+
+    def test_rejects_hex_wrong_length(self):
+        with pytest.raises(click.BadParameter):
+            validate_id(None, None, "120b4dbd14934ba6")
+
     def test_rejects_arbitrary_string(self):
         with pytest.raises(click.BadParameter, match="not a valid resource ID"):
             validate_id(None, None, "not-a-uuid")