abrade-cli 0.1.0__tar.gz → 0.1.1__tar.gz

{abrade_cli-0.1.0 → abrade_cli-0.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: abrade-cli
-Version: 0.1.0
+Version: 0.1.1
 Summary: Abrade's self-hosted CLI — run the same injection suite entirely offline, no SaaS required.
 Keywords: ai-agents,security-testing,prompt-injection,red-teaming,llm-security
 Author: pashax276
@@ -21,7 +21,8 @@ Requires-Dist: pyyaml>=6.0.3
 Requires-Dist: rich>=15.0.0
 Requires-Dist: typer>=0.27.0
 Requires-Python: >=3.12
-Project-URL: Repository, https://github.com/abradeai/abrade
+Project-URL: Homepage, https://abrade.ai
+Project-URL: Documentation, https://abrade.ai
 Description-Content-Type: text/markdown
 
 # abrade
@@ -126,36 +127,17 @@ a responsible-disclosure timeline and is not shipped here. Point
 There is no telemetry collection of any kind — not "off by default", it
 does not exist.
 
-## Docker
+## What leaves your machine
 
-```bash
-docker run --rm -v "$PWD":/work -w /work \
-  -e ABRADE_AUT_API_KEY -e ABRADE_JUDGE_API_KEY \
-  abrade-cli run --suite quick
-```
-
-Runs as a non-root user with no listening port. Mount your working
-directory so `agent-config.yaml` is read and `.abrade/` is written back.
-Each `--rm` run starts fresh, so terms acceptance does not persist unless
-you also mount a home volume:
+Nothing, by default. The only outbound calls are to your agent's own
+endpoint and to Anthropic for judging. `abrade push` is the single
+exception and runs only when you type it.
 
-```bash
-docker run --rm -v "$PWD":/work -w /work -v ~/.abrade-cli-home:/home/abrade \
-  -e ABRADE_AUT_API_KEY -e ABRADE_JUDGE_API_KEY \
-  abrade-cli run --suite quick
-```
-
-## Working on the CLI itself
-
-```bash
-git clone git@github.com:abradeai/abrade.git
-cd abrade/cli
-uv sync
-uv run abrade --help
-uv run pytest
-```
+Your agent's endpoint and credential are read from the environment for
+the duration of a run and written nowhere.
 
 ---
 
-Abrade never holds standing access to your infrastructure. Your agent's
-endpoint and credential are supplied per run and are never stored.
+More at [abrade.ai](https://abrade.ai). Security reports:
+[security@abrade.ai](mailto:security@abrade.ai) — see
+[security.txt](https://abrade.ai/.well-known/security.txt).

{abrade_cli-0.1.0 → abrade_cli-0.1.1}/README.md

@@ -100,36 +100,17 @@ a responsible-disclosure timeline and is not shipped here. Point
 There is no telemetry collection of any kind — not "off by default", it
 does not exist.
 
-## Docker
+## What leaves your machine
 
-```bash
-docker run --rm -v "$PWD":/work -w /work \
-  -e ABRADE_AUT_API_KEY -e ABRADE_JUDGE_API_KEY \
-  abrade-cli run --suite quick
-```
-
-Runs as a non-root user with no listening port. Mount your working
-directory so `agent-config.yaml` is read and `.abrade/` is written back.
-Each `--rm` run starts fresh, so terms acceptance does not persist unless
-you also mount a home volume:
+Nothing, by default. The only outbound calls are to your agent's own
+endpoint and to Anthropic for judging. `abrade push` is the single
+exception and runs only when you type it.
 
-```bash
-docker run --rm -v "$PWD":/work -w /work -v ~/.abrade-cli-home:/home/abrade \
-  -e ABRADE_AUT_API_KEY -e ABRADE_JUDGE_API_KEY \
-  abrade-cli run --suite quick
-```
-
-## Working on the CLI itself
-
-```bash
-git clone git@github.com:abradeai/abrade.git
-cd abrade/cli
-uv sync
-uv run abrade --help
-uv run pytest
-```
+Your agent's endpoint and credential are read from the environment for
+the duration of a run and written nowhere.
 
 ---
 
-Abrade never holds standing access to your infrastructure. Your agent's
-endpoint and credential are supplied per run and are never stored.
+More at [abrade.ai](https://abrade.ai). Security reports:
+[security@abrade.ai](mailto:security@abrade.ai) — see
+[security.txt](https://abrade.ai/.well-known/security.txt).

{abrade_cli-0.1.0 → abrade_cli-0.1.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "abrade-cli"
-version = "0.1.0"
+version = "0.1.1"
 description = "Abrade's self-hosted CLI — run the same injection suite entirely offline, no SaaS required."
 readme = "README.md"
 authors = [
@@ -47,7 +47,12 @@ dependencies = [
 abrade = "abrade_cli:main"
 
 [project.urls]
-Repository = "https://github.com/abradeai/abrade"
+# Only reachable links. This was Repository = the GitHub repo, which is
+# private — so PyPI rendered a prominent sidebar link that 404s for
+# every visitor. A broken link on a package page is a worse signal than
+# no link, especially for a security tool asking to be trusted.
+Homepage = "https://abrade.ai"
+Documentation = "https://abrade.ai"
 
 [build-system]
 requires = ["uv_build>=0.11.29,<0.12.0"]