agentsecure 0.1.4__tar.gz → 0.1.5__tar.gz

{agentsecure-0.1.4/agentsecure.egg-info → agentsecure-0.1.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentsecure
-Version: 0.1.4
+Version: 0.1.5
 Summary: Local-first security runtime for AI coding agents
 Home-page: https://github.com/ShellFrameAI/agentsecure-community
 Author: ShellFrame AI
@@ -41,7 +41,17 @@ The community release is intentionally scoped to local CLI, local command guard,
 ## Install
 
 ```bash
-python3 -m pip install agentsecure
+python3 -m pip install --upgrade agentsecure
+python3 -m agentsecure demo
+```
+
+`python3 -m agentsecure` works even when `pip` installs the `agentsecure`
+executable into a user script directory that is not on your `PATH`. If you want
+the shorter `agentsecure` command, add Python's user script directory to your
+shell path:
+
+```bash
+export PATH="$(python3 -m site --user-base)/bin:$PATH"
 agentsecure demo
 ```
 
@@ -217,11 +227,15 @@ agentsecure receipts --proxy
 Run an agent or command through local command guard:
 
 ```bash
-agentsecure run --protect-all -- codex
-agentsecure run --protect-all -- claude
-agentsecure run --protect-all -- python3 -c 'import subprocess; print(subprocess.check_output(["cat", ".env"]).decode())'
+python3 -m agentsecure run --protect-all -- codex
+python3 -m agentsecure run --protect-all -- claude
+python3 -m agentsecure run --protect-all -- python3 -c 'import subprocess; print(subprocess.check_output(["cat", ".env"]).decode())'
 ```
 
+Bare interactive agent launches keep the terminal attached so tools such as
+Claude Code can open normally. Non-interactive commands are still output
+sanitized by AgentSecure.
+
 Use workspace copy mode when you want review-before-apply:
 
 ```bash

{agentsecure-0.1.4 → agentsecure-0.1.5}/README.md

@@ -15,7 +15,17 @@ The community release is intentionally scoped to local CLI, local command guard,
 ## Install
 
 ```bash
-python3 -m pip install agentsecure
+python3 -m pip install --upgrade agentsecure
+python3 -m agentsecure demo
+```
+
+`python3 -m agentsecure` works even when `pip` installs the `agentsecure`
+executable into a user script directory that is not on your `PATH`. If you want
+the shorter `agentsecure` command, add Python's user script directory to your
+shell path:
+
+```bash
+export PATH="$(python3 -m site --user-base)/bin:$PATH"
 agentsecure demo
 ```
 
@@ -191,11 +201,15 @@ agentsecure receipts --proxy
 Run an agent or command through local command guard:
 
 ```bash
-agentsecure run --protect-all -- codex
-agentsecure run --protect-all -- claude
-agentsecure run --protect-all -- python3 -c 'import subprocess; print(subprocess.check_output(["cat", ".env"]).decode())'
+python3 -m agentsecure run --protect-all -- codex
+python3 -m agentsecure run --protect-all -- claude
+python3 -m agentsecure run --protect-all -- python3 -c 'import subprocess; print(subprocess.check_output(["cat", ".env"]).decode())'
 ```
 
+Bare interactive agent launches keep the terminal attached so tools such as
+Claude Code can open normally. Non-interactive commands are still output
+sanitized by AgentSecure.
+
 Use workspace copy mode when you want review-before-apply:
 
 ```bash

{agentsecure-0.1.4 → agentsecure-0.1.5}/agentsecure/__init__.py

@@ -1,3 +1,3 @@
 """AgentSecure local-first security runtime."""
 
-__version__ = "0.1.4"
+__version__ = "0.1.5"

{agentsecure-0.1.4 → agentsecure-0.1.5}/agentsecure/cli/main.py

@@ -85,6 +85,19 @@ from agentsecure.workspace.diff import WorkspaceDiff
 from agentsecure.workspace.materializer import WorkspaceMaterializer, make_tree_writable
 
 
+INTERACTIVE_AGENT_COMMANDS = set(SUPPORTED_AGENTS)
+
+
+class LocalGatewayHandle:
+    def __init__(self, gateway: LocalGateway, thread: threading.Thread) -> None:
+        self.gateway = gateway
+        self.thread = thread
+
+    def shutdown(self) -> None:
+        self.gateway.shutdown()
+        self.thread.join(timeout=2)
+
+
 def main(argv: Optional[List[str]] = None) -> int:
     parser = build_parser()
     args = parser.parse_args(argv)
@@ -338,7 +351,7 @@ def run_agent(args: argparse.Namespace) -> int:
 
     daemon = _running_daemon()
     daemon_session = None
-    gateway_thread = None
+    gateway_handle = None
     if daemon:
         daemon_session = _daemon_create_session(
             daemon,
@@ -357,9 +370,9 @@ def run_agent(args: argparse.Namespace) -> int:
     else:
         gateway_host = container.config.gateway.host
         gateway_port = _available_gateway_port(gateway_host, container.config.gateway.port)
-        gateway_thread = _start_local_gateway_thread(container, gateway_host, gateway_port)
-        if isinstance(gateway_thread, int):
-            return gateway_thread
+        gateway_handle = _start_local_gateway_thread(container, gateway_host, gateway_port)
+        if isinstance(gateway_handle, int):
+            return gateway_handle
 
     env = os.environ.copy()
     for env_name in container.config.env_policy.rules:
@@ -411,7 +424,13 @@ def run_agent(args: argparse.Namespace) -> int:
     session_finished = False
     try:
         output_sanitizer = SecretOutputSanitizer.from_config_path(args.config)
-        process = _start_agent_process(argv, env, run_cwd, sanitize_output=True)
+        preserve_tty = _should_preserve_interactive_tty(argv)
+        if preserve_tty:
+            print(
+                "AgentSecure interactive terminal mode: command output is not post-processed.",
+                flush=True,
+            )
+        process = _start_agent_process(argv, env, run_cwd, sanitize_output=not preserve_tty)
         process_group_id = _process_group_id(process)
         if cloud_session and cloud and cloud.status().get("enrolled"):
             command_executor = _run_command_executor(
@@ -465,6 +484,8 @@ def run_agent(args: argparse.Namespace) -> int:
         cloud_stop.set()
         if cloud_thread:
             cloud_thread.join(timeout=2)
+        if gateway_handle:
+            gateway_handle.shutdown()
         if workspace_session and not args.workspace_keep:
             materializer.make_writable(workspace_session.workspace_root)
             shutil.rmtree(workspace_session.workspace_root, ignore_errors=True)
@@ -489,6 +510,19 @@ def _start_agent_process(argv: List[str], env, cwd: str, sanitize_output: bool =
     return subprocess.Popen(argv, env=env, cwd=cwd, stdout=stdout, stderr=stderr)
 
 
+def _should_preserve_interactive_tty(argv: List[str]) -> bool:
+    if not argv or not _stdio_is_tty():
+        return False
+    command = os.path.basename(argv[0])
+    if command not in INTERACTIVE_AGENT_COMMANDS:
+        return False
+    return len(argv) == 1
+
+
+def _stdio_is_tty() -> bool:
+    return sys.stdin.isatty() and sys.stdout.isatty() and sys.stderr.isatty()
+
+
 def _wait_for_agent_process(process, sanitizer: SecretOutputSanitizer) -> int:
     if process.stdout is None and process.stderr is None:
         return process.wait()
@@ -665,7 +699,7 @@ def _start_local_gateway_thread(container: Container, host: str, port: int):
     if isinstance(gateway_status, Exception):
         sys.stderr.write("agentsecure: gateway failed to start: %s\n" % gateway_status)
         return 1
-    return gateway_thread
+    return LocalGatewayHandle(gateway, gateway_thread)
 
 
 def _proxy_url(host: str, port: int, session_id: str = "") -> str:

{agentsecure-0.1.4 → agentsecure-0.1.5}/agentsecure/core/agentsecure_md.py

@@ -4,7 +4,7 @@ from typing import Any, Dict, List
 
 
 AGENTSECURE_MD = "AGENTSECURE.md"
-AGENTSECURE_MD_TEMPLATE_VERSION = "0.1.4"
+AGENTSECURE_MD_TEMPLATE_VERSION = "0.1.5"
 
 AGENTSECURE_MD_TEMPLATE = """# AGENTSECURE.md
 

{agentsecure-0.1.4 → agentsecure-0.1.5}/agentsecure/gateway/proxy.py

@@ -568,6 +568,10 @@ class LocalGateway:
                 ready_callback()
             server.serve_forever()
 
+    def shutdown(self) -> None:
+        if self._server is not None:
+            self._server.shutdown()
+
     def _handler_class(self):
         class BoundGatewayRequestHandler(GatewayRequestHandler):
             pass
@@ -585,3 +589,6 @@ class LocalGateway:
 class ReusableThreadingTCPServer(socketserver.ThreadingTCPServer):
     allow_reuse_address = True
     daemon_threads = True
+
+    def handle_error(self, request, client_address) -> None:
+        return

{agentsecure-0.1.4 → agentsecure-0.1.5/agentsecure.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentsecure
-Version: 0.1.4
+Version: 0.1.5
 Summary: Local-first security runtime for AI coding agents
 Home-page: https://github.com/ShellFrameAI/agentsecure-community
 Author: ShellFrame AI
@@ -41,7 +41,17 @@ The community release is intentionally scoped to local CLI, local command guard,
 ## Install
 
 ```bash
-python3 -m pip install agentsecure
+python3 -m pip install --upgrade agentsecure
+python3 -m agentsecure demo
+```
+
+`python3 -m agentsecure` works even when `pip` installs the `agentsecure`
+executable into a user script directory that is not on your `PATH`. If you want
+the shorter `agentsecure` command, add Python's user script directory to your
+shell path:
+
+```bash
+export PATH="$(python3 -m site --user-base)/bin:$PATH"
 agentsecure demo
 ```
 
@@ -217,11 +227,15 @@ agentsecure receipts --proxy
 Run an agent or command through local command guard:
 
 ```bash
-agentsecure run --protect-all -- codex
-agentsecure run --protect-all -- claude
-agentsecure run --protect-all -- python3 -c 'import subprocess; print(subprocess.check_output(["cat", ".env"]).decode())'
+python3 -m agentsecure run --protect-all -- codex
+python3 -m agentsecure run --protect-all -- claude
+python3 -m agentsecure run --protect-all -- python3 -c 'import subprocess; print(subprocess.check_output(["cat", ".env"]).decode())'
 ```
 
+Bare interactive agent launches keep the terminal attached so tools such as
+Claude Code can open normally. Non-interactive commands are still output
+sanitized by AgentSecure.
+
 Use workspace copy mode when you want review-before-apply:
 
 ```bash

{agentsecure-0.1.4 → agentsecure-0.1.5}/setup.cfg

@@ -1,6 +1,6 @@
 [metadata]
 name = agentsecure
-version = 0.1.4
+version = 0.1.5
 description = Local-first security runtime for AI coding agents
 long_description = file: README.md
 long_description_content_type = text/markdown

{agentsecure-0.1.4 → agentsecure-0.1.5}/tests/test_cli.py

@@ -2,6 +2,7 @@ import unittest
 import socket
 from io import StringIO
 from contextlib import redirect_stdout
+from unittest.mock import patch
 
 from agentsecure.cli.main import (
     _apply_proxy_environment,
@@ -11,6 +12,7 @@ from agentsecure.cli.main import (
     build_parser,
     _merge_no_proxy,
     _proxy_url,
+    _should_preserve_interactive_tty,
 )
 from agentsecure.core.models import AgentSecureConfig, SecretBinding
 
@@ -117,6 +119,18 @@ class CliTest(unittest.TestCase):
         finally:
             sock.close()
 
+    def test_preserves_tty_for_bare_interactive_agent(self):
+        with patch("agentsecure.cli.main._stdio_is_tty", return_value=True):
+            self.assertTrue(_should_preserve_interactive_tty(["claude"]))
+
+    def test_does_not_preserve_tty_for_regular_commands(self):
+        with patch("agentsecure.cli.main._stdio_is_tty", return_value=True):
+            self.assertFalse(_should_preserve_interactive_tty(["cat", ".env"]))
+
+    def test_does_not_preserve_tty_when_agent_has_arguments(self):
+        with patch("agentsecure.cli.main._stdio_is_tty", return_value=True):
+            self.assertFalse(_should_preserve_interactive_tty(["claude", "--print", "hello"]))
+
 
 if __name__ == "__main__":
     unittest.main()