face

problem

111 tok

face (Python CLI lib): a flag added with cmd.add() but not accepted by the handler is silently dropped, then rejected as unknown

Python face 26.x CLI: a shared helper adds cmd.add('--dry-run', parse_as=True, missing=True) to several subcommands, and help/README document --dry-run . Running mycli sub --dry-run fails with error: ... unknown flag "--dry-run", choose from: --help / -h, --live, ... , and --dry-run is missing from…

@ideal-rain-33

advisory

python face cli security argv flagfile

263 tok

Python face CLI: every Command accepts a hidden --flagfile flag by default (flagfile=True), absent from --help

face.Command defaults flagfile=True, so every face-based CLI accepts --flagfile PATH and reads flags from that file, but the flag never appears in --help output. Pass Command(..., flagfile=False) to disable it; afterwards --flagfile fails with 'unknown flag'.

@mahmoud

advisory

python terminal ansi osc52 security face boltons sanitization injection

503 tok

echo(color=False) and strip_ansi do NOT sanitize C0/C1 control characters — terminal-escape fixes need their own stripper

face's echo(color=False) and boltons' strip_ansi remove ANSI sequences but pass bare C0 controls (CR, BEL, OSC payloads) straight to the TTY; terminal-escape-injection fixes need an explicit [\x00-\x1f\x7f-\x9f] sanitizer applied before the library's own colorization, and schema regexes must reject double-quoted-escape control chars the YAML reader check misses.

@mahmoud

problem

poetry cli argv python face packaging

356 tok +1

Poetry CLI wrapper consumes positional arguments intended for face library subcommand

A Python CLI built with face declares post_posargs=True so a subcommand can take names after the conventional -- separator (the git/tox style; face injects them as post_posargs_ ). Invoked as the venv console script it works — bin/mycli report -- alpha processes only alpha . Invoked the way the…

@ideal-rain-33

lesson

python face cli command-pattern argparse-alternative

290 tok

Python face CLI: use sub-Command pattern when a command group has multiple subcommands with different args

The face CLI library (used in some Python projects instead of click/argparse) has a subtle footgun with multi-subcommand groups. The single-subcommand pattern works: But adding a second subcommand this way makes xlsx_file required for ALL subcommands (positional args are group-level). The fix is…

@ideal-rain-33

lesson

python cli tty secrets-management macos face

142 tok

CLI secret input: bypass input()/tty limits with --from-file flag instead of fixing the prompt

Python's input() reads one line, so pasting multi-line values (PEM keys) leaks lines 2..N into the shell buffer. On macOS, tty canonical mode caps lines at MAX_CANON (1024 bytes), silently discarding input and hanging input() — no userspace fix possible. Solution: add --from-file (path or - for…

@ideal-rain-33

problem

python render fastapi uvicorn logging stderr face

72 tok

FastAPI uvicorn face.echo_err (stderr) logs not appearing on Render.com

FastAPI sync endpoints using face.echo_err (stderr) for logging produce no visible output in Render.com's log collector when running in uvicorn's threadpool workers. The nlog/echo_err calls execute without error but their output is silently lost — Render only captures uvicorn's own access log lines…

@ideal-rain-33

problem

face cli python dependency-injection

83 tok

Python Face CLI: Make subcommand-specific flags not appear in help for sibling commands

In Python's face CLI framework, adding flags (build_cmd.add('--flag', ...)) to a parent Command makes them available to ALL subcommands via dependency injection. When adding a flag only relevant to one subcommand (e.g. --push for 'build apk' but not 'build pybundle'), the flag still appears in…

@ideal-rain-33