agentdiscover 2.9.1__tar.gz → 2.9.2__tar.gz

{agentdiscover-2.9.1 → agentdiscover-2.9.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentdiscover
-Version: 2.9.1
+Version: 2.9.2
 Summary: Discover every AI agent in your infrastructure. 5-layer detection: static analysis, network monitoring, eBPF/Kubernetes runtime, endpoint, and cloud audit (CloudTrail). Company-level correlation. AIBOM export. MCP server detection.
 Project-URL: Homepage, https://defendai.ai
 Project-URL: Documentation, https://github.com/Defend-AI-Tech-Inc/agent-discover-scanner/blob/main/README.md

{agentdiscover-2.9.1 → agentdiscover-2.9.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentdiscover"
-version = "2.9.1"
+version = "2.9.2"
 description = "Discover every AI agent in your infrastructure. 5-layer detection: static analysis, network monitoring, eBPF/Kubernetes runtime, endpoint, and cloud audit (CloudTrail). Company-level correlation. AIBOM export. MCP server detection."
 readme = "README.md"
 requires-python = ">=3.10"

{agentdiscover-2.9.1 → agentdiscover-2.9.2}/src/agent_discover_scanner/platform.py

@@ -215,14 +215,17 @@ def load_credentials() -> Optional[Dict[str, str]]:
         tenant_token = data.get("tenant_token") or data.get("tenant-token")
         wawsdb_url = data.get("wawsdb_url") or data.get("wawsdb-url")
 
-        if not (api_key and tenant_token and wawsdb_url):
+        # Only api_key is required; tenant_token and wawsdb_url are optional.
+        # A config with just api_key (and optionally wawsdb_url) is valid.
+        if not api_key:
             return None
 
-        return {
-            "api_key": str(api_key),
-            "tenant_token": str(tenant_token),
-            "wawsdb_url": str(wawsdb_url),
-        }
+        result: dict[str, str] = {"api_key": str(api_key)}
+        if tenant_token:
+            result["tenant_token"] = str(tenant_token)
+        if wawsdb_url:
+            result["wawsdb_url"] = str(wawsdb_url)
+        return result
     except Exception:
         # Never propagate errors from credential loading
         return None

{agentdiscover-2.9.1 → agentdiscover-2.9.2}/tests/test_platform_enrichment.py

@@ -7,6 +7,10 @@ Tests for platform.py enrichment functions added in v2.8.0 / v2.9.0:
   - format_agents_for_upload  (L5 enrichment + credential_files_found + L2 enrichment)
 """
 
+import json
+import os
+import tempfile
+
 import pytest
 
 from agent_discover_scanner.platform import (
@@ -15,6 +19,7 @@ from agent_discover_scanner.platform import (
     build_cloud_audit_summary,
     build_network_summary,
     format_agents_for_upload,
+    load_credentials,
 )
 
 
@@ -558,3 +563,102 @@ class TestFormatAgentsL2Enrichment:
         agent = self._fmt(report)[0]
         assert "evidence" in agent
         assert isinstance(agent["evidence"], list)
+
+
+# ── TestLoadCredentials ──────────────────────────────────────────────────────
+
+class TestLoadCredentials:
+    """
+    load_credentials() unit tests.
+
+    Verifies that:
+    - api_key alone (without tenant_token) is sufficient to return credentials
+    - tenant_token and wawsdb_url are optional fields
+    - Missing api_key always returns None
+    - Malformed / missing config file returns None cleanly
+    """
+
+    def _write_config(self, tmpdir: str, data: dict) -> str:
+        path = os.path.join(tmpdir, ".defendai", "config")
+        os.makedirs(os.path.dirname(path), exist_ok=True)
+        with open(path, "w") as f:
+            json.dump(data, f)
+        return path
+
+    def _load(self, config_path: str):
+        """Patch the expanduser path and call load_credentials()."""
+        import agent_discover_scanner.platform as plat
+        original = plat.os.path.expanduser
+        plat.os.path.expanduser = lambda p: config_path if "config" in p else original(p)
+        try:
+            return load_credentials()
+        finally:
+            plat.os.path.expanduser = original
+
+    def test_api_key_and_all_fields_returns_full_dict(self):
+        with tempfile.TemporaryDirectory() as tmp:
+            cfg = self._write_config(tmp, {
+                "api_key": "key-abc",
+                "tenant_token": "tok-xyz",
+                "wawsdb_url": "https://custom.example.com",
+            })
+            result = self._load(cfg)
+            assert result is not None
+            assert result["api_key"] == "key-abc"
+            assert result["tenant_token"] == "tok-xyz"
+            assert result["wawsdb_url"] == "https://custom.example.com"
+
+    def test_api_key_only_returns_credentials(self):
+        """tenant_token absence must NOT prevent credential loading."""
+        with tempfile.TemporaryDirectory() as tmp:
+            cfg = self._write_config(tmp, {"api_key": "key-abc"})
+            result = self._load(cfg)
+            assert result is not None
+            assert result["api_key"] == "key-abc"
+            assert "tenant_token" not in result
+
+    def test_api_key_and_url_no_tenant_token(self):
+        with tempfile.TemporaryDirectory() as tmp:
+            cfg = self._write_config(tmp, {
+                "api_key": "key-abc",
+                "wawsdb_url": "https://custom.example.com",
+            })
+            result = self._load(cfg)
+            assert result is not None
+            assert result["api_key"] == "key-abc"
+            assert result["wawsdb_url"] == "https://custom.example.com"
+            assert "tenant_token" not in result
+
+    def test_missing_api_key_returns_none(self):
+        with tempfile.TemporaryDirectory() as tmp:
+            cfg = self._write_config(tmp, {
+                "tenant_token": "tok-xyz",
+                "wawsdb_url": "https://custom.example.com",
+            })
+            result = self._load(cfg)
+            assert result is None
+
+    def test_empty_config_returns_none(self):
+        with tempfile.TemporaryDirectory() as tmp:
+            cfg = self._write_config(tmp, {})
+            result = self._load(cfg)
+            assert result is None
+
+    def test_api_key_hyphen_variant_accepted(self):
+        """Both api_key and api-key spellings should work."""
+        with tempfile.TemporaryDirectory() as tmp:
+            cfg = self._write_config(tmp, {"api-key": "key-hyphen"})
+            result = self._load(cfg)
+            assert result is not None
+            assert result["api_key"] == "key-hyphen"
+
+    def test_missing_config_file_returns_none(self):
+        """A path that doesn't exist must return None without raising."""
+        import agent_discover_scanner.platform as plat
+        original = plat.os.path.expanduser
+        plat.os.path.expanduser = lambda p: "/nonexistent/path/config"
+        try:
+            result = load_credentials()
+        finally:
+            plat.os.path.expanduser = original
+        assert result is None

{agentdiscover-2.9.1 → agentdiscover-2.9.2}/uv.lock

@@ -4,7 +4,7 @@ requires-python = ">=3.10"
 
 [[package]]
 name = "agentdiscover"
-version = "2.9.0"
+version = "2.9.2"
 source = { editable = "." }
 dependencies = [
     { name = "certifi" },