agentgovern 2.7.0__tar.gz → 2.7.2__tar.gz

{agentgovern-2.7.0 → agentgovern-2.7.2}/CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## 2.7.2 — release date is the `sdk-v2.7.2` tag's (prepared 2026-10-19)
+
+**`agentgovern hook uninstall` now leaves Claude Code's settings exactly as they were before the install.** The bundled Claude Code hook (2.5.0), the dependencies and the Python requirement (3.10 or later) are unchanged from 2.7.1. There is no need to reinstall the hook.
+
+### Fix — the uninstall leaves nothing behind in settings.json (NAGT-391 F8)
+
+- **The install-mode marker (`_agentgovern_install_mode`) is removed with the hook entries.** It was left in `~/.claude/settings.json`.
+- **The backup the uninstall writes (`settings.json.bak`) is removed once the new settings are written.** Left behind, it was a copy of the settings that still registered the hook, and restoring it would have pointed Claude Code at a hook script the uninstall steps delete. If the write fails, the backup stays.
+- Found by the install rehearsal workflow (`.github/workflows/guard-install-rehearsal.yml`), which installs and uninstalls on clean Linux, macOS and Windows runners and compares the home folder before and after.
+
+## 2.7.1 — release date is the `sdk-v2.7.1` tag's (prepared 2026-10-16)
+
+**Documentation and package metadata only. The code, its dependencies and the bundled Claude Code hook (2.5.0) are unchanged from 2.7.0.** There is no need to reinstall the hook.
+
+### Fix — the links on PyPI work (NAGT-391 F2)
+
+- **The project's Repository and Issues links pointed at a GitHub repository that is not public,** so they returned "not found" for everyone outside Zirahn. They are replaced by a **Support** link, https://zirahn.com/contact. The README's own links are corrected the same way.
+
+### Fix — the README says which Python you need (NAGT-391 F2)
+
+- **The install line now needs Python 3.10 or later and asks for `agentgovern>=2.7.0`.** On Python 3.9, such as the macOS system Python, an unpinned `pip install agentgovern` installed 2.5.0 without a word; the pinned line fails with "No matching distribution found" instead.
+- **The Claude Code hook section says what each policy mode does,** and that a new organization starts with nothing in enforce mode. It said the hook enforces your policies, which read as if it always blocked.
+
 ## 2.7.0 — release date is the `sdk-v2.7.0` tag's (prepared 2026-10-16)
 
 **The Claude Code hook bundled with this release is hook 2.5.0** (it was 2.4.0). Install it with `agentgovern hook install --force` after upgrading; see "Upgrading an existing install" in the README. Until you do, the hook you have keeps working exactly as before, and the AgentGovern server shows it a once-per-session notice that a newer hook is available.

{agentgovern-2.7.0 → agentgovern-2.7.2}/PKG-INFO

@@ -1,10 +1,9 @@
 Metadata-Version: 2.5
 Name: agentgovern
-Version: 2.7.0
+Version: 2.7.2
 Summary: Compliance-as-code middleware for agentic AI workflows.
 Project-URL: Homepage, https://agentgovern.zirahn.com
-Project-URL: Repository, https://github.com/ahmedkhan-zirahn/agentgovern
-Project-URL: Issues, https://github.com/ahmedkhan-zirahn/agentgovern/issues
+Project-URL: Support, https://zirahn.com/contact
 Author-email: Ahmed Khan <ahmed.khan@zirahn.com>
 License: MIT
 License-File: LICENSE
@@ -44,14 +43,16 @@ Description-Content-Type: text/markdown
 
 **Compliance-as-code for agentic AI workflows.**
 
-> **Beta** — API may change before 1.0. [Report issues](https://github.com/ahmedkhan-zirahn/agentgovern/issues).
+> **Beta** — API may change before 1.0. Report issues through [zirahn.com/contact](https://zirahn.com/contact).
 
 AgentGovern intercepts AI agent actions, evaluates them against configurable compliance policies (the EU AI Act today; NIST AI RMF and ISO 42001 are on the roadmap — see the table below), and generates audit-ready evidence in near real-time. Tracking runs in a background thread and fails open. An `enforce`-mode block raises in your code (see *Enforcement modes* below for exactly what it stops). *(Corrected again 2026-10-03: the first correction said "the SDK blocks only if you enable Gate 2 `enforce` mode, where a block verdict raises `OutputBlocked`", which reads as if enforce mode halts an agent; through the integrations it does not — NAGT-380.)* This SDK auto-instruments LangChain and LangGraph; any other framework (CrewAI, OpenAI Agents and the rest) can report actions with `track_action()`. *(Corrected 2026-10-03: this said NIST AI RMF and ISO 42001 were supported, that the SDK never blocks, and that it instruments CrewAI and OpenAI Agents code.)*
 
 ## Install
 
+Needs **Python 3.10 or later**. The macOS system Python is 3.9, which is too old: install a newer one first, from python.org or with Homebrew (`brew install python@3.12`). On 3.9 this command fails with "No matching distribution found" rather than installing an old release.
+
 ```bash
-pip install "agentgovern[langchain]"
+python3 -m pip install "agentgovern[langchain]>=2.7.0"
 ```
 
 ## Quickstart — LangChain
@@ -212,19 +213,25 @@ Enable policy packs from the [AgentGovern dashboard](https://agentgovern.zirahn.
 **Policy engine address (2.4.0).** The default engine address is now the stable name
 `https://engine.zirahn.com`. Versions 2.3.0 and earlier call `https://agentgovern.onrender.com`
 directly. That address keeps working, so nothing breaks if you stay on an older version, but only
-the stable name can follow the engine if it moves. Upgrade with `pip install --upgrade agentgovern`.
+the stable name can follow the engine if it moves. Upgrade with `python3 -m pip install --upgrade "agentgovern>=2.7.0"`.
 If you set `policy_engine_url` or `AGENTGOVERN_POLICY_ENGINE_URL` yourself, it still takes precedence.
 
 ## Claude Code Hook
 
 The SDK ships a built-in CLI for installing the AgentGovern hook into Claude Code. The hook
-intercepts `PreToolUse` events for every tool call and enforces your tenant policies in real
-time — before the tool executes. A tool AgentGovern doesn't yet have a specific classification
-for is still captured and evaluated, tagged `action_type=unmapped_tool` rather than silently
-skipped.
+checks every tool call against your tenant's policies before the tool runs. A policy in
+**enforce** mode blocks the call and Claude Code shows the reason; **warn** lets it run and
+shows a warning; **log** only records it. A new organization starts with no policy in enforce
+mode. A tool AgentGovern doesn't yet have a specific classification for is still captured and
+evaluated, tagged `action_type=unmapped_tool` rather than silently skipped.
 
 ### Install
 
+**The simplest way is the dashboard:** on **Settings → Developers**, **Add Developer** gives an
+install snippet for bash and PowerShell that checks for Python 3.10 or later, installs this
+package into its own virtual environment, saves your two settings for new terminals, and runs
+the command below. To do it by hand:
+
 ```bash
 agentgovern hook install
 ```
@@ -242,7 +249,7 @@ reports it as already installed and changes nothing. Upgrade, read what is insta
 reinstall with `--force`:
 
 ```bash
-python3 -m pip install --upgrade agentgovern   # or the extra you installed with, e.g. "agentgovern[langchain]"
+python3 -m pip install --upgrade "agentgovern>=2.7.0"   # or the extra you installed with, e.g. "agentgovern[langchain]>=2.7.0"
 agentgovern hook status                        # note each line's cmd= value and the "Install mode" line
 agentgovern hook install --force               # plus the flags below, if status calls for them
 agentgovern hook status                        # reports no [DRIFT] lines once the hook is current
@@ -268,7 +275,7 @@ Your environment variables are not touched. Restart any running Claude Code sess
 
   ```bash
   python3 -m venv ~/.agentgovern-venv
-  ~/.agentgovern-venv/bin/python -m pip install --upgrade agentgovern
+  ~/.agentgovern-venv/bin/python -m pip install --upgrade "agentgovern>=2.7.0"
   ~/.agentgovern-venv/bin/agentgovern hook status
   ~/.agentgovern-venv/bin/agentgovern hook install --force   # plus the flags status called for
   ```
@@ -315,7 +322,7 @@ In PowerShell (the variable is removed again when claude exits):
 try { $env:AGENTGOVERN_HOOK_MODE='off'; claude } finally { Remove-Item Env:AGENTGOVERN_HOOK_MODE }
 ```
 
-See `packages/claude-hook/README.md` for the full option reference.
+`agentgovern hook install --help` lists the install options, and `agentgovern hook status` shows what is installed. The environment variables are in *Required env vars* and *Bypass* above.
 
 ## Design guarantees
 
@@ -327,8 +334,8 @@ See `packages/claude-hook/README.md` for the full option reference.
 ## Links
 
 - **Dashboard:** https://agentgovern.zirahn.com
-- **Documentation:** https://github.com/ahmedkhan-zirahn/agentgovern
-- **Issues:** https://github.com/ahmedkhan-zirahn/agentgovern/issues
+- **Documentation:** this README
+- **Support and issues:** https://zirahn.com/contact
 
 ## License
 

{agentgovern-2.7.0 → agentgovern-2.7.2}/README.md

@@ -2,14 +2,16 @@
 
 **Compliance-as-code for agentic AI workflows.**
 
-> **Beta** — API may change before 1.0. [Report issues](https://github.com/ahmedkhan-zirahn/agentgovern/issues).
+> **Beta** — API may change before 1.0. Report issues through [zirahn.com/contact](https://zirahn.com/contact).
 
 AgentGovern intercepts AI agent actions, evaluates them against configurable compliance policies (the EU AI Act today; NIST AI RMF and ISO 42001 are on the roadmap — see the table below), and generates audit-ready evidence in near real-time. Tracking runs in a background thread and fails open. An `enforce`-mode block raises in your code (see *Enforcement modes* below for exactly what it stops). *(Corrected again 2026-10-03: the first correction said "the SDK blocks only if you enable Gate 2 `enforce` mode, where a block verdict raises `OutputBlocked`", which reads as if enforce mode halts an agent; through the integrations it does not — NAGT-380.)* This SDK auto-instruments LangChain and LangGraph; any other framework (CrewAI, OpenAI Agents and the rest) can report actions with `track_action()`. *(Corrected 2026-10-03: this said NIST AI RMF and ISO 42001 were supported, that the SDK never blocks, and that it instruments CrewAI and OpenAI Agents code.)*
 
 ## Install
 
+Needs **Python 3.10 or later**. The macOS system Python is 3.9, which is too old: install a newer one first, from python.org or with Homebrew (`brew install python@3.12`). On 3.9 this command fails with "No matching distribution found" rather than installing an old release.
+
 ```bash
-pip install "agentgovern[langchain]"
+python3 -m pip install "agentgovern[langchain]>=2.7.0"
 ```
 
 ## Quickstart — LangChain
@@ -170,19 +172,25 @@ Enable policy packs from the [AgentGovern dashboard](https://agentgovern.zirahn.
 **Policy engine address (2.4.0).** The default engine address is now the stable name
 `https://engine.zirahn.com`. Versions 2.3.0 and earlier call `https://agentgovern.onrender.com`
 directly. That address keeps working, so nothing breaks if you stay on an older version, but only
-the stable name can follow the engine if it moves. Upgrade with `pip install --upgrade agentgovern`.
+the stable name can follow the engine if it moves. Upgrade with `python3 -m pip install --upgrade "agentgovern>=2.7.0"`.
 If you set `policy_engine_url` or `AGENTGOVERN_POLICY_ENGINE_URL` yourself, it still takes precedence.
 
 ## Claude Code Hook
 
 The SDK ships a built-in CLI for installing the AgentGovern hook into Claude Code. The hook
-intercepts `PreToolUse` events for every tool call and enforces your tenant policies in real
-time — before the tool executes. A tool AgentGovern doesn't yet have a specific classification
-for is still captured and evaluated, tagged `action_type=unmapped_tool` rather than silently
-skipped.
+checks every tool call against your tenant's policies before the tool runs. A policy in
+**enforce** mode blocks the call and Claude Code shows the reason; **warn** lets it run and
+shows a warning; **log** only records it. A new organization starts with no policy in enforce
+mode. A tool AgentGovern doesn't yet have a specific classification for is still captured and
+evaluated, tagged `action_type=unmapped_tool` rather than silently skipped.
 
 ### Install
 
+**The simplest way is the dashboard:** on **Settings → Developers**, **Add Developer** gives an
+install snippet for bash and PowerShell that checks for Python 3.10 or later, installs this
+package into its own virtual environment, saves your two settings for new terminals, and runs
+the command below. To do it by hand:
+
 ```bash
 agentgovern hook install
 ```
@@ -200,7 +208,7 @@ reports it as already installed and changes nothing. Upgrade, read what is insta
 reinstall with `--force`:
 
 ```bash
-python3 -m pip install --upgrade agentgovern   # or the extra you installed with, e.g. "agentgovern[langchain]"
+python3 -m pip install --upgrade "agentgovern>=2.7.0"   # or the extra you installed with, e.g. "agentgovern[langchain]>=2.7.0"
 agentgovern hook status                        # note each line's cmd= value and the "Install mode" line
 agentgovern hook install --force               # plus the flags below, if status calls for them
 agentgovern hook status                        # reports no [DRIFT] lines once the hook is current
@@ -226,7 +234,7 @@ Your environment variables are not touched. Restart any running Claude Code sess
 
   ```bash
   python3 -m venv ~/.agentgovern-venv
-  ~/.agentgovern-venv/bin/python -m pip install --upgrade agentgovern
+  ~/.agentgovern-venv/bin/python -m pip install --upgrade "agentgovern>=2.7.0"
   ~/.agentgovern-venv/bin/agentgovern hook status
   ~/.agentgovern-venv/bin/agentgovern hook install --force   # plus the flags status called for
   ```
@@ -273,7 +281,7 @@ In PowerShell (the variable is removed again when claude exits):
 try { $env:AGENTGOVERN_HOOK_MODE='off'; claude } finally { Remove-Item Env:AGENTGOVERN_HOOK_MODE }
 ```
 
-See `packages/claude-hook/README.md` for the full option reference.
+`agentgovern hook install --help` lists the install options, and `agentgovern hook status` shows what is installed. The environment variables are in *Required env vars* and *Bypass* above.
 
 ## Design guarantees
 
@@ -285,8 +293,8 @@ See `packages/claude-hook/README.md` for the full option reference.
 ## Links
 
 - **Dashboard:** https://agentgovern.zirahn.com
-- **Documentation:** https://github.com/ahmedkhan-zirahn/agentgovern
-- **Issues:** https://github.com/ahmedkhan-zirahn/agentgovern/issues
+- **Documentation:** this README
+- **Support and issues:** https://zirahn.com/contact
 
 ## License
 

{agentgovern-2.7.0 → agentgovern-2.7.2}/RELEASING.md

@@ -93,4 +93,12 @@ To re-run a publish after a failed run, trigger the workflow manually **from the
   - its bundled `hook.py` is hook 2.4.0, byte-identical to the tag commit's;
   - each file's PyPI attestation names publisher `ZirahnAI/agentgovern`, workflow `publish-sdk.yml`, environment `pypi`, with a subject digest equal to the file's;
   - an unpinned install resolves 2.6.0 on Python 3.12 and 2.5.0 on Python 3.9.6 (`/usr/bin/python3`, macOS 15.8.1).
+- **2026-10-16:** 2.7.0 was published by run `38849510745` from tag `sdk-v2.7.0` at `90a5d6db` (#947's merge). **The tag was pushed by Claude Code under Ahmed's explicit, one-time authorisation for this tag**; the push printed the tag ruleset's "Cannot create ref due to creations being restricted" line and created the tag (the admin bypass). Build 04:13:32–04:13:52Z, Publish 04:13:56–04:14:27Z; files uploaded 04:14:22Z and 04:14:23Z. Verified afterwards, read-only:
+  - the wheel and sdist sha256 match PyPI's digests (`57105511…`, `e266e7e9…`), compared with the run's own `dist` artifact;
+  - the wheel's `METADATA` says `Version: 2.7.0`, `Requires-Python: >=3.10`;
+  - its bundled `hook.py` is **hook 2.5.0**, sha256 `f43c3c95010120dd34e8a91982de11516d9d3c582b5e2fd4bb7791c8fa6ffec1`, byte-identical to the tag commit's;
+  - each file's PyPI attestation names publisher `ZirahnAI/agentgovern`, workflow `publish-sdk.yml`, environment `pypi`;
+  - a fresh Python 3.12 venv installing `agentgovern==2.7.0` from PyPI reports `__version__` 2.7.0, and `hook install` into a temporary HOME writes hook 2.5.0 with all four events OK (`hook test` not run: it calls production);
+  - Python 3.9.6 (`/usr/bin/python3`) resolves `agentgovern-2.5.0`;
+  - the hook version changed, so the released-hook manifest moved to 2.5.0 after the tag (NAGT-400 (c), #953, `b748b1f7`).
 

agentgovern-2.7.2/agentgovern/_version.py

@@ -0,0 +1 @@
+__version__ = "2.7.2"

{agentgovern-2.7.0 → agentgovern-2.7.2}/agentgovern/hook/installer.py

@@ -703,6 +703,10 @@ def uninstall() -> int:
         print("AgentGovern hook is not installed (no entry found in settings.json).")
         return 0
 
+    # NAGT-391 F8: the install-mode marker is Guard's own key, written by the
+    # install; it goes with the hook, so the settings are left as they were.
+    new_settings.pop(INSTALL_MODE_KEY, None)
+
     if settings_path.exists():
         backup(settings_path)
 
@@ -712,6 +716,12 @@ def uninstall() -> int:
         print(f"Error: {exc}", file=sys.stderr)
         return 1
 
+    # NAGT-391 F8: the backup only guards the write above, which succeeded. Left
+    # behind, it is a copy of the settings that still registers Guard's hook, and
+    # restoring it would point Claude Code at a hook script the uninstall
+    # snippet then deletes. (Found by the install rehearsal workflow.)
+    settings_path.with_suffix(".json.bak").unlink(missing_ok=True)
+
     print(f"AgentGovern hook removed from {settings_path} (all event types).")
     print(f"The hook script at {hook_target} was not deleted.")
     return 0

{agentgovern-2.7.0 → agentgovern-2.7.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "agentgovern"
-version = "2.7.0"
+version = "2.7.2"
 description = "Compliance-as-code middleware for agentic AI workflows."
 readme = "README.md"
 license = { text = "MIT" }
@@ -64,8 +64,7 @@ agentgovern = "agentgovern.__main__:main"
 
 [project.urls]
 Homepage = "https://agentgovern.zirahn.com"
-Repository = "https://github.com/ahmedkhan-zirahn/agentgovern"
-Issues = "https://github.com/ahmedkhan-zirahn/agentgovern/issues"
+Support = "https://zirahn.com/contact"
 
 [build-system]
 requires = ["hatchling"]

{agentgovern-2.7.0 → agentgovern-2.7.2}/tests/hook/test_installer.py

@@ -601,6 +601,37 @@ def test_uninstall_preserves_other_config(tmp_path: Path, monkeypatch: pytest.Mo
     assert cfg.get("theme") == "dark"
 
 
+def test_uninstall_leaves_the_settings_exactly_as_before_the_install(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    """NAGT-391 F8: no install-mode marker and no backup are left behind."""
+    home = _fake_home(tmp_path, monkeypatch)
+    before = {"theme": "dark", "permissions": {"allow": ["Bash(ls:*)"]}}
+    _write_json(_settings_path(home), before)
+    installer.install(_default_args())
+    assert _MARKER_KEY in json.loads(_settings_path(home).read_text())
+    assert _settings_path(home).with_suffix(".json.bak").exists()
+    assert installer.uninstall() == 0
+    assert json.loads(_settings_path(home).read_text()) == before
+    assert not _settings_path(home).with_suffix(".json.bak").exists()
+
+
+def test_uninstall_keeps_the_backup_when_the_write_fails(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    """The backup is removed only after a successful write."""
+    home = _fake_home(tmp_path, monkeypatch)
+    _write_json(_settings_path(home), {"theme": "dark"})
+    installer.install(_default_args())
+
+    def refuse(*_args, **_kwargs):  # type: ignore[no-untyped-def]
+        raise PermissionError("read-only")
+
+    monkeypatch.setattr(installer, "atomic_write", refuse)
+    assert installer.uninstall() == 1
+    assert _settings_path(home).with_suffix(".json.bak").exists()
+
+
 def test_uninstall_not_installed_exits_zero(
     tmp_path: Path, monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture
 ) -> None:

agentgovern-2.7.0/agentgovern/_version.py

@@ -1 +0,0 @@
-__version__ = "2.7.0"