Use asta-gateway for API requests

Author: rodneykinney

.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "asta",
       "source": "./",
       "description": "Paper search, citations, literature reports, and Semantic Scholar API tools",
-      "version": "0.6",
+      "version": "0.7.0",
       "author": {
         "name": "AI2 Asta Team"
       },

.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "asta",
-  "version": "0.6",
+  "version": "0.7.0",
   "description": "Asta science tools for Claude Code - paper search, citations, and more",
   "author": {
     "name": "AI2 Asta Team"

DEVELOPER.md

@@ -42,7 +42,7 @@ hooks/                         # Claude Code permission hooks
 
 ### Design Principles
 
-1. **Core is dependency-free**: `asta.core.client` and `asta.papers.client` use only stdlib (json, urllib, time, etc.)
+1. **Core clients are dependency-free**: `asta.literature.client` and `asta.papers.client` use only stdlib (json, urllib, time, etc.)
 2. **CLI layer is thin**: Click commands wrap the core clients
 3. **Generic passthrough architecture**: `asta.utils.passthrough` provides reusable utilities for external tool integration
    - `ensure_tool_installed()`: Checks for tool, auto-installs if missing
@@ -172,7 +172,7 @@ Add a new file in `src/asta/literature/` (or create a new subpackage):
 ```python
 # src/asta/literature/analyze.py
 import click
-from asta.core import AstaPaperFinder
+from asta.literature.client import AstaPaperFinder
 
 @click.command()
 @click.argument("widget_id")
@@ -213,10 +213,10 @@ Update README.md and this DEVELOPER.md with the new command.
 
 ### AstaPaperFinder
 
-The `AstaPaperFinder` client in `src/asta/core/client.py` handles paper finder API interactions.
+The `AstaPaperFinder` client in `src/asta/literature/client.py` handles paper finder API interactions.
 
 ```python
-from asta.core import AstaPaperFinder
+from asta.literature import AstaPaperFinder
 
 client = AstaPaperFinder()
 
@@ -494,13 +494,13 @@ Only add dependencies if absolutely necessary:
 3. Update tests to verify it works
 4. Document why it's needed
 
-Core (`asta.core`) should remain dependency-free.
+Core API clients (`asta.literature.client`, `asta.papers.client`) should remain dependency-free.
 
 ### Updating API Endpoints
 
 If Asta's API changes:
 
-1. Update `AstaPaperFinder` in `src/asta/core/client.py`
+1. Update `AstaPaperFinder` in `src/asta/literature/client.py`
 2. Add/update tests in `tests/test_client.py`
 3. Update documentation examples
 4. Consider backward compatibility

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "asta"
-version = "0.6"
+version = "0.7.0"
 description = "Asta CLI for scientific literature review"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -52,4 +52,7 @@ python_files = ["test_*.py"]
 asyncio_mode = "auto"
 filterwarnings = [
     "ignore::pyparsing.exceptions.PyparsingDeprecationWarning",
+    "ignore:builtin type SwigPyPacked has no __module__ attribute:DeprecationWarning",
+    "ignore:builtin type SwigPyObject has no __module__ attribute:DeprecationWarning",
+    "ignore:builtin type swigvarlink has no __module__ attribute:DeprecationWarning",
 ]

src/asta/__init__.py

@@ -1,3 +1,3 @@
 """Asta - Science literature research tools"""
 
-__version__ = "0.6"
+__version__ = "0.7.0"

src/asta/auth/device_flow.py

@@ -45,7 +45,7 @@ def __init__(
         domain: str,
         client_id: str,
         audience: str,
-        scopes: str = "openid profile email offline_access",
+        scopes: str = "openid profile email offline_access access:all",
     ):
         self.domain = domain
         self.client_id = client_id
@@ -55,11 +55,6 @@ def __init__(
         self.token_url = f"https://{domain}/oauth/token"
 
     async def initiate(self) -> DeviceCodeResponse:
-        """
-        Step 1: Initiate device authorization flow.
-
-        Returns device code and user instructions.
-        """
         async with httpx.AsyncClient() as client:
             response = await client.post(
                 self.device_code_url,

src/asta/commands/auth.py

@@ -3,7 +3,9 @@
 """
 
 import asyncio
+import base64
 import datetime
+import json
 
 import click
 from rich.console import Console
@@ -183,3 +185,59 @@ def status():
             console.print(
                 "   You may need to run [cyan]asta auth login[/cyan] to re-authenticate."
             )
+
+
+@auth.command(name="print-token")
+@click.option("--raw", is_flag=True, help="Print raw base64-encoded token")
+def print_token(raw):
+    """Print the stored access token."""
+    storage = TokenStorage()
+    tokens = storage.load_tokens()
+
+    if not tokens or not tokens.get("access_token"):
+        console.print("❌ [red]No token found[/red]")
+        console.print("   Run [cyan]asta auth login[/cyan] to authenticate")
+        raise click.Abort()
+
+    access_token = tokens["access_token"]
+
+    if raw:
+        # Print raw base64-encoded token
+        click.echo(access_token)
+    else:
+        # Decode and pretty-print the JWT
+        try:
+            # JWT format: header.payload.signature
+            parts = access_token.split(".")
+            if len(parts) != 3:
+                console.print("❌ [red]Invalid JWT format[/red]")
+                raise click.Abort()
+
+            # Decode header and payload (add padding if needed)
+            def decode_base64url(data):
+                """Decode base64url, adding padding if necessary."""
+                # Add padding if needed
+                padding = 4 - (len(data) % 4)
+                if padding != 4:
+                    data += "=" * padding
+                # Replace URL-safe characters
+                data = data.replace("-", "+").replace("_", "/")
+                return base64.b64decode(data)
+
+            header = json.loads(decode_base64url(parts[0]))
+            payload = json.loads(decode_base64url(parts[1]))
+
+            # Pretty print the decoded token
+            console.print("[bold]JWT Header:[/bold]")
+            console.print(json.dumps(header, indent=2))
+            console.print()
+            console.print("[bold]JWT Payload:[/bold]")
+            console.print(json.dumps(payload, indent=2))
+
+        except Exception as e:
+            console.print(f"❌ [red]Failed to decode token: {e}[/red]")
+            console.print()
+            console.print(
+                "[yellow]Tip:[/yellow] Use [cyan]--raw[/cyan] to see the encoded token"
+            )
+            raise click.Abort()

src/asta/core/__init__.py

@@ -1 +1,5 @@
 """Literature research commands"""
+
+from .client import AstaPaperFinder
+
+__all__ = ["AstaPaperFinder"]

src/asta/literature/__init__.py

@@ -10,14 +10,38 @@
 from pathlib import Path
 from typing import Any
 
+from asta.utils.auth_helper import get_access_token
+from asta.utils.config import get_api_config, get_config_path
+
 
 class AstaPaperFinder:
     """Client for Asta Paper Finder API using headless endpoint"""
 
-    def __init__(self, base_url: str = "REDACTED_MABOOL_WORKERS_URL"):
+    def __init__(self, base_url: str | None = None, access_token: str | None = None):
+        # Load base URL from config if not provided
+        if base_url is None:
+            try:
+                config = get_api_config("paper_finder")
+                base_url = config.get("base_url")
+            except (KeyError, FileNotFoundError):
+                base_url = None
+
+        if not base_url:
+            raise ValueError(
+                f"No value for apis.paper_finder.base_url in {get_config_path()}"
+                "base_url is required. Either provide it as a parameter or configure it in asta.conf"
+            )
+
+        # Load access token from storage if not provided
+        # AuthenticationError will propagate with helpful message
+        if access_token is None:
+            access_token = get_access_token()
+
         self.base_url = base_url
+        self.access_token = access_token
         self.headers = {
             "Content-Type": "application/json",
+            "Authorization": f"Bearer {self.access_token}",
         }
 
     def _request(