agentsecure 0.1.3__tar.gz → 0.1.4__tar.gz

{agentsecure-0.1.3/agentsecure.egg-info → agentsecure-0.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentsecure
-Version: 0.1.3
+Version: 0.1.4
 Summary: Local-first security runtime for AI coding agents
 Home-page: https://github.com/ShellFrameAI/agentsecure-community
 Author: ShellFrame AI
@@ -76,12 +76,18 @@ Why:
 
 ## Quickstart In A Project
 
-Create a local config:
+Create a local config and repo guidance file:
 
 ```bash
 agentsecure init
 ```
 
+This creates `agentsecure.json`, local private state under `.agentsecure/`, and `AGENTSECURE.md`. Review the Markdown file before running agents:
+
+```bash
+agentsecure policy validate
+```
+
 Create a fake `.env` for testing:
 
 ```bash
@@ -166,7 +172,7 @@ Command-guard mode is a usability guard, not a hard sandbox. A determined proces
 
 ## Example Policy
 
-See [examples/agentsecure.community.json](examples/agentsecure.community.json) and [examples/.env.example](examples/.env.example).
+See [examples/agentsecure.community.json](examples/agentsecure.community.json), [examples/AGENTSECURE.md](examples/AGENTSECURE.md), and [examples/.env.example](examples/.env.example).
 
 Minimal policy shape:
 
@@ -195,6 +201,7 @@ Minimal policy shape:
 
 ```bash
 agentsecure init
+agentsecure policy validate
 agentsecure status
 agentsecure doctor
 agentsecure discover
@@ -269,6 +276,12 @@ python3 scripts/secret_scan.py .
 
 CI runs tests across supported Python versions and runs the local secret scan.
 
+## AGENTSECURE.md
+
+`AGENTSECURE.md` is a small repo-level policy guidance file for humans and AI coding agents. In the community release, AgentSecure creates it and validates that it does not contain raw secrets or unsupported raw-secret passthrough modes.
+
+Supported community secret modes in the Markdown guidance are `virtualize` and `deny`. Do not use `allow` or `allow_real` for secrets. The Markdown file is guidance plus local validation; it is not a full sandbox by itself.
+
 ## Public Release Boundary
 
 This community release does not include hosted backend integration, enterprise policy sync, billing/licensing, production secrets, internal endpoints, or sensitive commercial heuristics. See [OPEN_SOURCE_PLAN.md](OPEN_SOURCE_PLAN.md) and [OPEN_SOURCE_READINESS_REPORT.md](OPEN_SOURCE_READINESS_REPORT.md) for the public/private boundary.

{agentsecure-0.1.3 → agentsecure-0.1.4}/README.md

@@ -50,12 +50,18 @@ Why:
 
 ## Quickstart In A Project
 
-Create a local config:
+Create a local config and repo guidance file:
 
 ```bash
 agentsecure init
 ```
 
+This creates `agentsecure.json`, local private state under `.agentsecure/`, and `AGENTSECURE.md`. Review the Markdown file before running agents:
+
+```bash
+agentsecure policy validate
+```
+
 Create a fake `.env` for testing:
 
 ```bash
@@ -140,7 +146,7 @@ Command-guard mode is a usability guard, not a hard sandbox. A determined proces
 
 ## Example Policy
 
-See [examples/agentsecure.community.json](examples/agentsecure.community.json) and [examples/.env.example](examples/.env.example).
+See [examples/agentsecure.community.json](examples/agentsecure.community.json), [examples/AGENTSECURE.md](examples/AGENTSECURE.md), and [examples/.env.example](examples/.env.example).
 
 Minimal policy shape:
 
@@ -169,6 +175,7 @@ Minimal policy shape:
 
 ```bash
 agentsecure init
+agentsecure policy validate
 agentsecure status
 agentsecure doctor
 agentsecure discover
@@ -243,6 +250,12 @@ python3 scripts/secret_scan.py .
 
 CI runs tests across supported Python versions and runs the local secret scan.
 
+## AGENTSECURE.md
+
+`AGENTSECURE.md` is a small repo-level policy guidance file for humans and AI coding agents. In the community release, AgentSecure creates it and validates that it does not contain raw secrets or unsupported raw-secret passthrough modes.
+
+Supported community secret modes in the Markdown guidance are `virtualize` and `deny`. Do not use `allow` or `allow_real` for secrets. The Markdown file is guidance plus local validation; it is not a full sandbox by itself.
+
 ## Public Release Boundary
 
 This community release does not include hosted backend integration, enterprise policy sync, billing/licensing, production secrets, internal endpoints, or sensitive commercial heuristics. See [OPEN_SOURCE_PLAN.md](OPEN_SOURCE_PLAN.md) and [OPEN_SOURCE_READINESS_REPORT.md](OPEN_SOURCE_READINESS_REPORT.md) for the public/private boundary.

{agentsecure-0.1.3 → agentsecure-0.1.4}/agentsecure/__init__.py

@@ -1,3 +1,3 @@
 """AgentSecure local-first security runtime."""
 
-__version__ = "0.1.3"
+__version__ = "0.1.4"

{agentsecure-0.1.3 → agentsecure-0.1.4}/agentsecure/cli/main.py

@@ -14,6 +14,7 @@ import time
 from typing import Any, Dict, List, Optional
 from urllib.request import Request, urlopen
 
+from agentsecure import __version__
 from agentsecure.cloud import CloudError, CloudRuntimeService
 from agentsecure.api.server import LocalApiServer
 from agentsecure.api.services import ApiServices
@@ -49,6 +50,7 @@ from agentsecure.cli.settings import (
     handle_setup,
 )
 from agentsecure.client.wrappers import AgentWrapperInstaller, SUPPORTED_AGENTS
+from agentsecure.core.agentsecure_md import AGENTSECURE_MD, agentsecure_md_status
 from agentsecure.core.command_metadata import safe_command_metadata
 from agentsecure.core.config import ConfigError, JsonConfigLoader, JsonConfigWriter
 from agentsecure.core.config_profiles import (
@@ -145,6 +147,7 @@ def main(argv: Optional[List[str]] = None) -> int:
 
 def build_parser() -> argparse.ArgumentParser:
     parser = argparse.ArgumentParser(prog="agentsecure")
+    parser.add_argument("--version", action="version", version="agentsecure %s" % __version__)
     parser.add_argument(
         "--config",
         default="agentsecure.json",
@@ -264,6 +267,10 @@ def build_parser() -> argparse.ArgumentParser:
 
 
 def run_agent(args: argparse.Namespace) -> int:
+    policy_doc = agentsecure_md_status(AGENTSECURE_MD)
+    if policy_doc.get("exists"):
+        state = "valid" if policy_doc.get("ok") else "needs review"
+        print("AgentSecure policy guidance: %s (%s)" % (AGENTSECURE_MD, state), flush=True)
     cloud = CloudRuntimeService() if _cloud_features_enabled() else None
     if cloud:
         _apply_cloud_runtime_defaults(args, cloud)

{agentsecure-0.1.3 → agentsecure-0.1.4}/agentsecure/cli/policy.py

@@ -2,6 +2,7 @@ import argparse
 import json
 import sys
 
+from agentsecure.core.agentsecure_md import AGENTSECURE_MD, validate_agentsecure_md
 from agentsecure.core.config import ConfigError
 from agentsecure.core.policy_mutation import LocalPolicyMutationService
 
@@ -14,11 +15,17 @@ def add_policy_subparser(subparsers) -> None:
     policy_preview_parser.add_argument("--json-file", help="Read mutation JSON from this file instead of stdin")
     policy_apply_parser = policy_subparsers.add_parser("apply-local", help="Apply local policy changes from JSON")
     policy_apply_parser.add_argument("--json-file", help="Read mutation JSON from this file instead of stdin")
+    validate_parser = policy_subparsers.add_parser("validate", help="Validate AGENTSECURE.md policy guidance")
+    validate_parser.add_argument("--file", default=AGENTSECURE_MD, help="AGENTSECURE.md path")
 
 
 def handle_policy(args: argparse.Namespace) -> int:
-    service = LocalPolicyMutationService(args.config)
     try:
+        if args.policy_command == "validate":
+            payload = validate_agentsecure_md(args.file)
+            print(json.dumps(payload, indent=2, sort_keys=True))
+            return 0 if payload["ok"] else 1
+        service = LocalPolicyMutationService(args.config)
         if args.policy_command == "review":
             payload = service.review()
         elif args.policy_command == "preview":

{agentsecure-0.1.3 → agentsecure-0.1.4}/agentsecure/cli/project.py

@@ -4,6 +4,7 @@ import os
 import shutil
 
 from agentsecure.cli.common import scanner
+from agentsecure.core.agentsecure_md import AGENTSECURE_MD
 from agentsecure.core.product import ProductService
 from agentsecure.workspace.materializer import make_tree_writable
 
@@ -32,6 +33,14 @@ def show_status(args: argparse.Namespace) -> int:
         return 0
     print("AgentSecure status")
     print("Config: %s (%s)" % (result["config_path"], "found" if result["config_exists"] else "missing"))
+    agentsecure_md = result.get("agentsecure_md", {})
+    print(
+        "AGENTSECURE.md: %s (%s)"
+        % (
+            agentsecure_md.get("path", AGENTSECURE_MD),
+            "valid" if agentsecure_md.get("exists") and agentsecure_md.get("ok") else "missing" if not agentsecure_md.get("exists") else "needs review",
+        )
+    )
     print("Configured secrets: %s" % result["configured_secrets"])
     print("Discovered secrets: %s" % result["discovered_secrets"])
     grants = result["grants"]

agentsecure-0.1.4/agentsecure/core/agentsecure_md.py

@@ -0,0 +1,188 @@
+import os
+import re
+from typing import Any, Dict, List
+
+
+AGENTSECURE_MD = "AGENTSECURE.md"
+AGENTSECURE_MD_TEMPLATE_VERSION = "0.1.4"
+
+AGENTSECURE_MD_TEMPLATE = """# AGENTSECURE.md
+
+## Start
+
+Run coding agents through AgentSecure:
+
+```bash
+agentsecure run --protect-all -- claude
+```
+
+## Secrets
+
+Do not paste real secrets, raw `.env` files, private keys, tokens, prompts, or request bodies into this file.
+
+```yaml
+DATABASE_URL_DEV:
+  mode: virtualize
+  note: use a local/dev-only value approved by the human
+
+DATABASE_URL_PROD:
+  mode: deny
+
+OPENAI_API_KEY:
+  mode: virtualize
+```
+
+## Commands
+
+Allowed:
+- npm test
+- npm run build
+
+Blocked:
+- printenv
+- env
+
+Require approval:
+- production deploys
+- database migrations
+
+## Network
+
+Allowed:
+- localhost
+- test-dev.example.internal
+
+Blocked:
+- prod.example.internal
+- unknown private IPs
+- credential-bearing requests to unapproved domains
+
+## When Policy Denies Access
+
+Do not retry the same credential.
+Use the suggested safe alternative when one exists.
+Ask the human before requesting broader access.
+
+## Local-First Trust
+
+Real secrets stay on the developer machine. Community AgentSecure validates this guidance locally. Team profile sync, assignment, and audit visibility are commercial ShellFrame Console features.
+"""
+
+
+SECRET_TOKEN_PATTERNS = [
+    re.compile(r"sk_(?:live|test)_[A-Za-z0-9]{10,}", re.IGNORECASE),
+    re.compile(r"sk-(?:live|test|proj)-[A-Za-z0-9_-]{10,}", re.IGNORECASE),
+    re.compile(r"rk_live_[A-Za-z0-9]{10,}", re.IGNORECASE),
+    re.compile(r"github_pat_[A-Za-z0-9_]{20,}", re.IGNORECASE),
+    re.compile(r"gh[pousr]_[A-Za-z0-9_]{20,}", re.IGNORECASE),
+    re.compile(r"xox[baprs]-[A-Za-z0-9-]{16,}", re.IGNORECASE),
+    re.compile(r"AKIA[0-9A-Z]{16}"),
+    re.compile(r"AIza[0-9A-Za-z_-]{20,}"),
+    re.compile(r"eyJ[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}"),
+]
+
+SECRET_ASSIGNMENT_RE = re.compile(
+    r"^\s*([A-Z0-9_]*(?:SECRET|TOKEN|PASSWORD|PASS|API_KEY|PRIVATE_KEY|DATABASE_URL|DB_URL|CREDENTIAL)[A-Z0-9_]*)\s*=\s*(.+?)\s*$",
+    re.IGNORECASE,
+)
+
+PRIVATE_KEY_RE = re.compile(r"-----BEGIN [A-Z ]*PRIVATE KEY-----")
+FORBIDDEN_MODE_RE = re.compile(r"^\s*mode:\s*(allow|allow[_-]?real)\s*$", re.IGNORECASE)
+ALLOW_PRODUCTION_SECRET_RE = re.compile(
+    r"\ballow\b.{0,40}\bproduction\b.{0,40}\b(secret|credential|key|token|password)\b",
+    re.IGNORECASE,
+)
+
+
+def ensure_agentsecure_md(path: str = AGENTSECURE_MD, force: bool = False) -> Dict[str, Any]:
+    exists = os.path.exists(path)
+    if exists and not force:
+        return {"path": path, "created": False, "overwritten": False}
+    with open(path, "w", encoding="utf-8") as handle:
+        handle.write(AGENTSECURE_MD_TEMPLATE)
+    return {"path": path, "created": not exists, "overwritten": exists}
+
+
+def validate_agentsecure_md(path: str = AGENTSECURE_MD) -> Dict[str, Any]:
+    errors: List[Dict[str, Any]] = []
+    warnings: List[Dict[str, Any]] = []
+    if not os.path.exists(path):
+        return {
+            "path": path,
+            "exists": False,
+            "ok": False,
+            "template_version": AGENTSECURE_MD_TEMPLATE_VERSION,
+            "errors": [{"line": 0, "code": "missing_file", "message": "AGENTSECURE.md was not found"}],
+            "warnings": [],
+        }
+    with open(path, "r", encoding="utf-8") as handle:
+        text = handle.read()
+    if "# AGENTSECURE.md" not in text:
+        warnings.append({"line": 0, "code": "missing_title", "message": "Expected '# AGENTSECURE.md' title"})
+    for index, line in enumerate(text.splitlines(), start=1):
+        _validate_line(line, index, errors)
+    return {
+        "path": path,
+        "exists": True,
+        "ok": not errors,
+        "template_version": AGENTSECURE_MD_TEMPLATE_VERSION,
+        "errors": errors,
+        "warnings": warnings,
+    }
+
+
+def agentsecure_md_status(path: str = AGENTSECURE_MD) -> Dict[str, Any]:
+    if os.path.exists(path):
+        return validate_agentsecure_md(path)
+    return {
+        "path": path,
+        "exists": False,
+        "ok": False,
+        "template_version": AGENTSECURE_MD_TEMPLATE_VERSION,
+        "errors": [],
+        "warnings": [],
+    }
+
+
+def _validate_line(line: str, line_number: int, errors: List[Dict[str, Any]]) -> None:
+    mode_match = FORBIDDEN_MODE_RE.search(line)
+    if mode_match:
+        code = "allow_real" if "real" in mode_match.group(1).lower() else "allow"
+        errors.append(_error(line_number, code, "Raw real-secret passthrough is not supported"))
+    if PRIVATE_KEY_RE.search(line):
+        errors.append(_error(line_number, "private_key", "Private keys must not be stored in AGENTSECURE.md"))
+    if ALLOW_PRODUCTION_SECRET_RE.search(line):
+        errors.append(_error(line_number, "allow_production_secret", "Production secrets must not be allowed directly"))
+    for pattern in SECRET_TOKEN_PATTERNS:
+        if pattern.search(line):
+            errors.append(_error(line_number, "raw_secret", "Secret-looking token found"))
+            break
+    assignment = SECRET_ASSIGNMENT_RE.match(line)
+    if assignment and _looks_like_raw_value(assignment.group(2)):
+        errors.append(_error(line_number, "raw_env_assignment", "Raw secret-looking .env assignment found"))
+
+
+def _looks_like_raw_value(value: str) -> bool:
+    cleaned = value.strip().strip("\"'")
+    if not cleaned:
+        return False
+    lowered = cleaned.lower()
+    safe_markers = [
+        "example",
+        "localhost",
+        "dev.local",
+        "test-dev",
+        "virt_",
+        "[removed",
+        "<",
+        "your-",
+        "placeholder",
+        "dummy",
+    ]
+    if any(marker in lowered for marker in safe_markers):
+        return False
+    return len(cleaned) >= 8
+
+
+def _error(line: int, code: str, message: str) -> Dict[str, Any]:
+    return {"line": line, "code": code, "message": message}

{agentsecure-0.1.3 → agentsecure-0.1.4}/agentsecure/core/product.py

@@ -5,6 +5,7 @@ import socket
 import stat
 from typing import Any, Dict, List
 
+from agentsecure.core.agentsecure_md import AGENTSECURE_MD, agentsecure_md_status, ensure_agentsecure_md
 from agentsecure.core.config import JsonConfigWriter
 from agentsecure.core.config_profiles import profile_metadata
 from agentsecure.core.time import now_seconds
@@ -54,11 +55,18 @@ class ProductService:
                 handle.write("*\n!.gitignore\n")
             created.append(gitignore_path)
 
+        agentsecure_md = ensure_agentsecure_md(AGENTSECURE_MD, force)
+        if agentsecure_md["created"] or agentsecure_md["overwritten"]:
+            created.append(agentsecure_md["path"])
+
         return {
             "config_path": self.config_path,
             "config_created": config_created,
+            "agentsecure_md": agentsecure_md,
             "created": created,
             "next_steps": [
+                "review AGENTSECURE.md",
+                "agentsecure policy validate",
                 "agentsecure discover",
                 "agentsecure run --protect-all -- <agent-command>",
                 "agentsecure status",
@@ -85,6 +93,7 @@ class ProductService:
         return {
             "config_path": self.config_path,
             "config_exists": os.path.exists(self.config_path),
+            "agentsecure_md": agentsecure_md_status(AGENTSECURE_MD),
             "configured_secrets": len(config.get("secrets", [])) if config else 0,
             "discovered_secrets": len(discoveries),
             "grants": {
@@ -106,6 +115,13 @@ class ProductService:
     def doctor(self) -> Dict[str, Any]:
         checks = []
         checks.append(self._check("config_exists", os.path.exists(self.config_path), self.config_path))
+        agentsecure_md = agentsecure_md_status(AGENTSECURE_MD)
+        checks.append(self._check("agentsecure_md_exists", agentsecure_md["exists"], AGENTSECURE_MD))
+        if agentsecure_md["exists"]:
+            detail = "AGENTSECURE.md policy guidance is valid"
+            if not agentsecure_md["ok"]:
+                detail = "; ".join(error["message"] for error in agentsecure_md["errors"]) or AGENTSECURE_MD
+            checks.append(self._check("agentsecure_md_valid", agentsecure_md["ok"], detail))
         checks.append(self._check("agentsecure_dir_exists", os.path.isdir(".agentsecure"), ".agentsecure"))
         checks.append(
             self._check(

{agentsecure-0.1.3 → agentsecure-0.1.4/agentsecure.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentsecure
-Version: 0.1.3
+Version: 0.1.4
 Summary: Local-first security runtime for AI coding agents
 Home-page: https://github.com/ShellFrameAI/agentsecure-community
 Author: ShellFrame AI
@@ -76,12 +76,18 @@ Why:
 
 ## Quickstart In A Project
 
-Create a local config:
+Create a local config and repo guidance file:
 
 ```bash
 agentsecure init
 ```
 
+This creates `agentsecure.json`, local private state under `.agentsecure/`, and `AGENTSECURE.md`. Review the Markdown file before running agents:
+
+```bash
+agentsecure policy validate
+```
+
 Create a fake `.env` for testing:
 
 ```bash
@@ -166,7 +172,7 @@ Command-guard mode is a usability guard, not a hard sandbox. A determined proces
 
 ## Example Policy
 
-See [examples/agentsecure.community.json](examples/agentsecure.community.json) and [examples/.env.example](examples/.env.example).
+See [examples/agentsecure.community.json](examples/agentsecure.community.json), [examples/AGENTSECURE.md](examples/AGENTSECURE.md), and [examples/.env.example](examples/.env.example).
 
 Minimal policy shape:
 
@@ -195,6 +201,7 @@ Minimal policy shape:
 
 ```bash
 agentsecure init
+agentsecure policy validate
 agentsecure status
 agentsecure doctor
 agentsecure discover
@@ -269,6 +276,12 @@ python3 scripts/secret_scan.py .
 
 CI runs tests across supported Python versions and runs the local secret scan.
 
+## AGENTSECURE.md
+
+`AGENTSECURE.md` is a small repo-level policy guidance file for humans and AI coding agents. In the community release, AgentSecure creates it and validates that it does not contain raw secrets or unsupported raw-secret passthrough modes.
+
+Supported community secret modes in the Markdown guidance are `virtualize` and `deny`. Do not use `allow` or `allow_real` for secrets. The Markdown file is guidance plus local validation; it is not a full sandbox by itself.
+
 ## Public Release Boundary
 
 This community release does not include hosted backend integration, enterprise policy sync, billing/licensing, production secrets, internal endpoints, or sensitive commercial heuristics. See [OPEN_SOURCE_PLAN.md](OPEN_SOURCE_PLAN.md) and [OPEN_SOURCE_READINESS_REPORT.md](OPEN_SOURCE_READINESS_REPORT.md) for the public/private boundary.

{agentsecure-0.1.3 → agentsecure-0.1.4}/agentsecure.egg-info/SOURCES.txt

@@ -30,6 +30,7 @@ agentsecure/client/wrappers.py
 agentsecure/config/__init__.py
 agentsecure/config/default_agentsecure.json
 agentsecure/core/__init__.py
+agentsecure/core/agentsecure_md.py
 agentsecure/core/capabilities.py
 agentsecure/core/command_metadata.py
 agentsecure/core/config.py
@@ -85,6 +86,7 @@ agentsecure/workspace/diff.py
 agentsecure/workspace/materializer.py
 agentsecure/workspace/rewriter.py
 agentsecure/workspace/strategies.py
+tests/test_agentsecure_md.py
 tests/test_audit.py
 tests/test_cli.py
 tests/test_cli_demo.py

{agentsecure-0.1.3 → agentsecure-0.1.4}/setup.cfg

@@ -1,6 +1,6 @@
 [metadata]
 name = agentsecure
-version = 0.1.3
+version = 0.1.4
 description = Local-first security runtime for AI coding agents
 long_description = file: README.md
 long_description_content_type = text/markdown

agentsecure-0.1.4/tests/test_agentsecure_md.py

@@ -0,0 +1,66 @@
+import os
+import tempfile
+import unittest
+
+from agentsecure.core.agentsecure_md import ensure_agentsecure_md, validate_agentsecure_md
+
+
+class AgentSecureMdTest(unittest.TestCase):
+    def test_template_is_created_and_validates(self):
+        with tempfile.TemporaryDirectory() as temp_dir:
+            cwd = os.getcwd()
+            try:
+                os.chdir(temp_dir)
+                result = ensure_agentsecure_md()
+                self.assertTrue(result["created"])
+                validation = validate_agentsecure_md()
+                self.assertTrue(validation["ok"], validation)
+                self.assertEqual([], validation["errors"])
+            finally:
+                os.chdir(cwd)
+
+    def test_rejects_raw_secret_assignment(self):
+        with tempfile.TemporaryDirectory() as temp_dir:
+            path = os.path.join(temp_dir, "AGENTSECURE.md")
+            with open(path, "w", encoding="utf-8") as handle:
+                handle.write("# AGENTSECURE.md\nOPENAI_API_KEY=sk-live-secret-value\n")
+            validation = validate_agentsecure_md(path)
+            self.assertFalse(validation["ok"])
+            self.assertIn("raw_secret", {error["code"] for error in validation["errors"]})
+
+    def test_rejects_private_key_and_allow_real(self):
+        with tempfile.TemporaryDirectory() as temp_dir:
+            path = os.path.join(temp_dir, "AGENTSECURE.md")
+            with open(path, "w", encoding="utf-8") as handle:
+                handle.write(
+                    "# AGENTSECURE.md\n"
+                    "mode: allow_real\n"
+                    "-----BEGIN " + "PRIVATE KEY-----\n"
+                )
+            validation = validate_agentsecure_md(path)
+            codes = {error["code"] for error in validation["errors"]}
+            self.assertFalse(validation["ok"])
+            self.assertIn("allow_real", codes)
+            self.assertIn("private_key", codes)
+
+    def test_rejects_allow_mode(self):
+        with tempfile.TemporaryDirectory() as temp_dir:
+            path = os.path.join(temp_dir, "AGENTSECURE.md")
+            with open(path, "w", encoding="utf-8") as handle:
+                handle.write("# AGENTSECURE.md\nDATABASE_URL_DEV:\n  mode: allow\n")
+            validation = validate_agentsecure_md(path)
+            self.assertFalse(validation["ok"])
+            self.assertIn("allow", {error["code"] for error in validation["errors"]})
+
+    def test_rejects_production_secret_direct_allow_wording(self):
+        with tempfile.TemporaryDirectory() as temp_dir:
+            path = os.path.join(temp_dir, "AGENTSECURE.md")
+            with open(path, "w", encoding="utf-8") as handle:
+                handle.write("# AGENTSECURE.md\nallow production database credential\n")
+            validation = validate_agentsecure_md(path)
+            self.assertFalse(validation["ok"])
+            self.assertIn("allow_production_secret", {error["code"] for error in validation["errors"]})
+
+
+if __name__ == "__main__":
+    unittest.main()

{agentsecure-0.1.3 → agentsecure-0.1.4}/tests/test_product.py

@@ -16,7 +16,9 @@ class ProductServiceTest(unittest.TestCase):
                 service = ProductService("agentsecure.json", CompositeSecretScanner([]))
                 result = service.init_project()
                 self.assertTrue(result["config_created"])
+                self.assertTrue(result["agentsecure_md"]["created"])
                 self.assertTrue(os.path.exists("agentsecure.json"))
+                self.assertTrue(os.path.exists("AGENTSECURE.md"))
                 self.assertTrue(os.path.exists(os.path.join(".agentsecure", ".gitignore")))
                 with open("agentsecure.json", "r") as handle:
                     config = json.load(handle)

{agentsecure-0.1.3 → agentsecure-0.1.4}/tests/test_version.py

@@ -3,6 +3,7 @@ import os
 import unittest
 
 import agentsecure
+from agentsecure.cli.main import build_parser
 
 
 class VersionTest(unittest.TestCase):
@@ -12,6 +13,12 @@ class VersionTest(unittest.TestCase):
 
         self.assertEqual(parser["metadata"]["version"], agentsecure.__version__)
 
+    def test_cli_version_flag_uses_package_version(self):
+        parser = build_parser()
+        with self.assertRaises(SystemExit) as context:
+            parser.parse_args(["--version"])
+        self.assertEqual(0, context.exception.code)
+
 
 if __name__ == "__main__":
     unittest.main()