abrade-cli 0.1.6__tar.gz → 0.1.7__tar.gz

{abrade_cli-0.1.6 → abrade_cli-0.1.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: abrade-cli
-Version: 0.1.6
+Version: 0.1.7
 Summary: Abrade's self-hosted CLI — run the same injection suite entirely offline, no SaaS required.
 Keywords: ai-agents,security-testing,prompt-injection,red-teaming,llm-security
 Author: Abrade

{abrade_cli-0.1.6 → abrade_cli-0.1.7}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "abrade-cli"
-version = "0.1.6"
+version = "0.1.7"
 description = "Abrade's self-hosted CLI — run the same injection suite entirely offline, no SaaS required."
 readme = "README.md"
 requires-python = ">=3.12"

{abrade_cli-0.1.6 → abrade_cli-0.1.7}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "abrade-cli"
-version = "0.1.6"
+version = "0.1.7"
 description = "Abrade's self-hosted CLI — run the same injection suite entirely offline, no SaaS required."
 readme = "README.md"
 # The project, not a personal handle. PyPI renders this as "Author" on

{abrade_cli-0.1.6 → abrade_cli-0.1.7}/src/abrade_cli/verify.py

@@ -226,14 +226,25 @@ def _probe(config) -> Check:  # noqa: ANN001
 
     from abrade_cli.upstream_errors import describe
 
-    key = os.environ.get(config.model_key_env, "").strip()
+    # The probe is the one check that actually SENDS the credential, so it
+    # is the one that most needs the CI trust boundary — and it was reading
+    # the repository's choice directly, straight past it. The ABR-007 fix
+    # covered `abrade run` and taught `verify` to *report* a refusal while
+    # `--probe` went ahead and fired anyway.
+    try:
+        key_env = resolve_trusted_key_env(config)
+        endpoint = resolve_trusted_endpoint(config)
+    except UntrustedConfigError as exc:
+        return Check("endpoint reachable", Level.FAIL, f"not probed — {exc}")
+
+    key = os.environ.get(key_env, "").strip()
     if not key:
         return Check(
             "endpoint reachable", Level.FAIL, "cannot probe without a credential"
         )
 
     try:
-        client = Anthropic(api_key=key, base_url=config.model_endpoint, timeout=30.0)
+        client = Anthropic(api_key=key, base_url=endpoint, timeout=30.0)
         client.messages.create(
             model=config.model,
             max_tokens=1,
@@ -243,7 +254,7 @@ def _probe(config) -> Check:  # noqa: ANN001
         return Check(
             "endpoint reachable",
             Level.FAIL,
-            f"HTTP {exc.status_code} from {config.model_endpoint} — "
+            f"HTTP {exc.status_code} from {endpoint} — "
             + (
                 "credential rejected"
                 if exc.status_code in (401, 403)
@@ -260,7 +271,7 @@ def _probe(config) -> Check:  # noqa: ANN001
         return Check(
             "endpoint reachable",
             Level.FAIL,
-            f"contacting {config.model_endpoint}: {describe(exc, secrets=(key,))}",
+            f"contacting {endpoint}: {describe(exc, secrets=(key,))}",
         )
     return Check("endpoint reachable", Level.OK, "answered a live request")