agentsentinel-cli 0.8.3__tar.gz → 0.9.0__tar.gz

{agentsentinel_cli-0.8.3 → agentsentinel_cli-0.9.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentsentinel-cli
-Version: 0.8.3
+Version: 0.9.0
 Summary: AI agent and MCP server security scanner — discovery, static analysis, supply chain audit, and multi-agent trust analysis
 Project-URL: Homepage, https://github.com/jaydenaung/agentsentinel-cli
 Project-URL: Repository, https://github.com/jaydenaung/agentsentinel-cli
@@ -221,6 +221,12 @@ sentinel scan ./agents/ --format json
 sentinel scan ./agents/ --ignore-rule DANGEROUS_GRANTS  # suppress accepted finding
 ```
 
+**Detects tools defined via:**
+- `@tool` decorator · `BaseTool` / `StructuredTool` subclasses
+- `StructuredTool.from_function(name=...)` · `Tool(name=...)`
+- `bind_tools([...])` · `create_react_agent(llm, tools)` · `create_agent(llm, tools)`
+- `AgentExecutor(tools=[...])` · direct Anthropic/OpenAI API `messages.create(tools=[...])`
+
 **Rules:**
 
 | Rule | Severity | Trigger |
@@ -283,7 +289,7 @@ With `ANTHROPIC_API_KEY` set, generates a plain English security summary.
 
 Builds a call graph from Python agent source and audits trust boundaries. Detects injection propagation across agent boundaries, unbounded spawning, and code-execution agents accepting unverified delegations.
 
-Supports **LangChain / LangGraph**, **AutoGen**, and **CrewAI**.
+Supports **LangChain / LangGraph**, **AutoGen**, **CrewAI**, and **MCP client → server connections**.
 
 ```bash
 sentinel a2a ./agents/
@@ -292,6 +298,12 @@ sentinel a2a . --fail-on HIGH
 sentinel a2a . --format json
 ```
 
+**Detected patterns:**
+- LangGraph `StateGraph.add_node` / `add_edge` / `add_conditional_edges`
+- AutoGen `initiate_chat`, `GroupChat`, `GroupChatManager`
+- CrewAI `Crew(agents=[...], process=Process.hierarchical)`
+- MCP client connections: `sse_client(url)`, `streamablehttp_client(url)` — surfaces agent → MCP server edges with URL resolution from constants
+
 **Rules:**
 
 | Rule | Severity | What it catches |

{agentsentinel_cli-0.8.3 → agentsentinel_cli-0.9.0}/README.md

@@ -187,6 +187,12 @@ sentinel scan ./agents/ --format json
 sentinel scan ./agents/ --ignore-rule DANGEROUS_GRANTS  # suppress accepted finding
 ```
 
+**Detects tools defined via:**
+- `@tool` decorator · `BaseTool` / `StructuredTool` subclasses
+- `StructuredTool.from_function(name=...)` · `Tool(name=...)`
+- `bind_tools([...])` · `create_react_agent(llm, tools)` · `create_agent(llm, tools)`
+- `AgentExecutor(tools=[...])` · direct Anthropic/OpenAI API `messages.create(tools=[...])`
+
 **Rules:**
 
 | Rule | Severity | Trigger |
@@ -249,7 +255,7 @@ With `ANTHROPIC_API_KEY` set, generates a plain English security summary.
 
 Builds a call graph from Python agent source and audits trust boundaries. Detects injection propagation across agent boundaries, unbounded spawning, and code-execution agents accepting unverified delegations.
 
-Supports **LangChain / LangGraph**, **AutoGen**, and **CrewAI**.
+Supports **LangChain / LangGraph**, **AutoGen**, **CrewAI**, and **MCP client → server connections**.
 
 ```bash
 sentinel a2a ./agents/
@@ -258,6 +264,12 @@ sentinel a2a . --fail-on HIGH
 sentinel a2a . --format json
 ```
 
+**Detected patterns:**
+- LangGraph `StateGraph.add_node` / `add_edge` / `add_conditional_edges`
+- AutoGen `initiate_chat`, `GroupChat`, `GroupChatManager`
+- CrewAI `Crew(agents=[...], process=Process.hierarchical)`
+- MCP client connections: `sse_client(url)`, `streamablehttp_client(url)` — surfaces agent → MCP server edges with URL resolution from constants
+
 **Rules:**
 
 | Rule | Severity | What it catches |

{agentsentinel_cli-0.8.3 → agentsentinel_cli-0.9.0}/agentsentinel_cli/cli.py

@@ -864,6 +864,76 @@ def a2a(
             sys.exit(1)
 
 
+# ── sentinel host ─────────────────────────────────────────────────────────────
+
+@main.command(name="host")
+@click.option("--format", "fmt", type=click.Choice(["text", "json"]), default="text",
+              help="Output format.")
+@click.option("--fail-on", type=click.Choice(["CRITICAL", "HIGH", "MEDIUM", "LOW"]),
+              default=None, help="Exit with code 1 if findings at or above this severity exist.")
+@click.option("--ignore-rule", "ignore_rules", multiple=True, metavar="RULE_ID",
+              help="Suppress a finding by rule ID. Repeatable. Also reads .sentinelignore.")
+def host(
+    fmt: str,
+    fail_on: str | None,
+    ignore_rules: tuple[str, ...],
+) -> None:
+    """Audit your local AI security posture.
+
+    Checks Claude Code and Desktop configurations, MCP server permissions,
+    shell credential exposure, macOS privacy permissions (Full Disk Access,
+    Screen Recording, Accessibility), system security (SIP, FileVault,
+    Gatekeeper), and AI processes exposed on the network.
+
+    No network calls — all checks are local and read-only.
+
+    \b
+    Examples:
+        sentinel host
+        sentinel host --format json
+        sentinel host --fail-on HIGH
+        sentinel host --ignore-rule HOST_LARGE_MEMORY
+    """
+    from agentsentinel_cli.host_scanner import scan_host
+    from agentsentinel_cli.host_rules import run_host_rules, host_posture_score
+    from agentsentinel_cli.host_report import print_host_result, as_host_json
+    from agentsentinel_cli import suppress as _suppress
+    from rich.progress import Progress, SpinnerColumn, TextColumn, TimeElapsedColumn
+
+    _ctx_holder: list = []
+
+    with Progress(
+        SpinnerColumn(),
+        TextColumn("[dim]{task.description}[/dim]"),
+        TimeElapsedColumn(),
+        console=console,
+        transient=True,
+    ) as progress:
+        progress.add_task("Scanning host AI security posture…", total=None)
+        _ctx_holder.append(scan_host())
+
+    ctx = _ctx_holder[0]
+    findings = run_host_rules(ctx)
+
+    sup_rules = _suppress.merge(_suppress.load_ignore_file(Path.cwd()), ignore_rules)
+    findings, suppressed = _suppress.apply(findings, sup_rules)
+    score = host_posture_score(findings)
+
+    if fmt == "json":
+        click.echo(as_host_json(ctx, findings, score))
+    else:
+        print_host_result(ctx, findings, score)
+        msg = _suppress.notice(suppressed)
+        if msg:
+            console.print(f"  {msg}\n")
+
+    if fail_on:
+        _rank = {"LOW": 1, "MEDIUM": 2, "HIGH": 3, "CRITICAL": 4}
+        threshold = _rank.get(fail_on, 0)
+        if any(_rank.get(f.severity, 0) >= threshold for f in findings):
+            sys.exit(1)
+
+
 def _parse_ports(ports_str: str) -> list[int]:
     """Parse '8000-9001' or '8000,8080,9000' into a list of ints."""
     ports: list[int] = []

agentsentinel_cli-0.9.0/agentsentinel_cli/host_report.py

@@ -0,0 +1,275 @@
+"""Rich terminal and JSON output for host AI security posture scans."""
+
+import json
+
+from rich.console import Console
+from rich.panel import Panel
+from rich.table import Table
+from rich import box
+from rich.text import Text
+
+from agentsentinel_cli.host_rules import HostFinding, host_posture_score
+from agentsentinel_cli.host_scanner import HostContext
+
+console = Console()
+
+_SEVERITY_COLOR = {
+    "CRITICAL": "bold red",
+    "HIGH":     "bold orange1",
+    "MEDIUM":   "bold yellow",
+    "LOW":      "bold cyan",
+}
+_STATUS_COLOR = {
+    "TRUSTED":  "bold green",
+    "WATCH":    "bold yellow",
+    "ALERT":    "bold orange1",
+    "CRITICAL": "bold red",
+}
+_CATEGORY_LABEL = {
+    "config":        "Configuration",
+    "data_exposure": "Data Exposure",
+    "permissions":   "Permissions",
+    "system":        "System Security",
+    "network":       "Network Exposure",
+}
+_CATEGORY_ORDER = ["config", "data_exposure", "permissions", "system", "network"]
+
+
+def _status_label(score: int) -> str:
+    if score >= 80:
+        return "TRUSTED"
+    if score >= 60:
+        return "WATCH"
+    if score >= 40:
+        return "ALERT"
+    return "CRITICAL"
+
+
+def _bool_tag(val: bool | None, true_label: str, false_label: str) -> str:
+    if val is True:
+        return f"[green]{true_label}[/green]"
+    if val is False:
+        return f"[red]{false_label}[/red]"
+    return "[dim]unknown[/dim]"
+
+
+def print_host_result(ctx: HostContext, findings: list[HostFinding], score: int) -> None:
+    """Render the full host posture report to the terminal."""
+    status = _status_label(score)
+    status_color = _STATUS_COLOR[status]
+
+    console.print()
+    console.print(Panel.fit(
+        "[bold white]AgentSentinel — Host AI Security Posture[/bold white]\n"
+        "[dim]Local AI tools · macOS privacy permissions · system security[/dim]",
+        border_style="bright_blue",
+        padding=(0, 2),
+    ))
+
+    # ── Discovery summary ─────────────────────────────────────────────────────
+    console.print()
+
+    if ctx.claude_code:
+        n_allowed = len(ctx.claude_code.allowed_tools)
+        n_hooks = len(ctx.claude_code.hooks)
+        n_mcp = len(ctx.claude_code.mcp_servers)
+        console.print(
+            f"  [bold white]Claude Code[/bold white]  [dim]{ctx.claude_code.path}[/dim]\n"
+            f"  [dim]  {n_allowed} allowed tool(s)  ·  "
+            f"{n_mcp} MCP server(s)  ·  {n_hooks} hook(s)[/dim]"
+        )
+        if ctx.claude_code.allowed_tools:
+            tools_str = ", ".join(ctx.claude_code.allowed_tools[:8])
+            console.print(f"  [dim]  allowedTools: {tools_str}[/dim]")
+    else:
+        console.print("  [dim]Claude Code settings not found (~/.claude/settings.json)[/dim]")
+
+    console.print()
+    if ctx.claude_desktop:
+        n_mcp = len(ctx.claude_desktop.mcp_servers)
+        console.print(
+            f"  [bold white]Claude Desktop[/bold white]  [dim]{ctx.claude_desktop.path}[/dim]\n"
+            f"  [dim]  {n_mcp} MCP server(s)[/dim]"
+        )
+    else:
+        console.print("  [dim]Claude Desktop config not found[/dim]")
+
+    # MCP servers table
+    all_servers = []
+    if ctx.claude_code:
+        all_servers.extend((s, "Claude Code") for s in ctx.claude_code.mcp_servers)
+    if ctx.claude_desktop:
+        all_servers.extend((s, "Desktop") for s in ctx.claude_desktop.mcp_servers)
+
+    if all_servers:
+        console.print()
+        tbl = Table(box=box.SIMPLE, show_header=True, header_style="dim", padding=(0, 1))
+        tbl.add_column("MCP Server", style="bold white", min_width=18)
+        tbl.add_column("Source", style="dim", width=12)
+        tbl.add_column("Network", width=8)
+        tbl.add_column("FS Paths", style="dim", max_width=44)
+
+        for srv, src in all_servers:
+            net = Text("yes", style="yellow") if srv.has_network_access else Text("no", style="dim green")
+            paths = ", ".join(srv.filesystem_paths[:2]) if srv.filesystem_paths else "—"
+            tbl.add_row(srv.name, src, net, paths)
+        console.print(tbl)
+
+    # System security status
+    console.print(
+        f"  [bold white]macOS Security[/bold white]\n"
+        f"  [dim]  SIP:         [/dim]{_bool_tag(ctx.sip_enabled,       '✓ Enabled',  '✗ Disabled')}\n"
+        f"  [dim]  FileVault:   [/dim]{_bool_tag(ctx.filevault_enabled, '✓ On',       '✗ Off')}\n"
+        f"  [dim]  Gatekeeper:  [/dim]{_bool_tag(ctx.gatekeeper_enabled,'✓ Enabled',  '✗ Disabled')}"
+    )
+
+    # TCC permissions (granted only)
+    granted_tcc = [p for p in ctx.tcc_permissions if p.granted]
+    if granted_tcc:
+        console.print()
+        console.print("  [bold white]App Privacy Permissions (TCC)[/bold white]")
+        for p in granted_tcc:
+            service_label = p.service.replace("_", " ").title()
+            console.print(f"  [dim]  {p.app_name:28}  {service_label}[/dim]")
+
+    # Memory files
+    if ctx.memory_file_count > 0:
+        mb = ctx.memory_total_bytes / (1024 * 1024)
+        console.print(
+            f"\n  [dim]Memory (~/.claude/projects/):  "
+            f"{ctx.memory_file_count} files, {mb:.1f} MB[/dim]"
+        )
+
+    # Shell key findings
+    if ctx.shell_key_findings:
+        console.print()
+        console.print("  [bold yellow]⚠  AI API keys detected in shell config files[/bold yellow]")
+        for key_type, file_path, redacted in ctx.shell_key_findings[:4]:
+            console.print(f"  [dim]  {key_type} in {file_path}: {redacted}[/dim]")
+        if len(ctx.shell_key_findings) > 4:
+            console.print(f"  [dim]  … and {len(ctx.shell_key_findings) - 4} more[/dim]")
+
+    # Scan errors / info notes
+    if ctx.scan_errors:
+        console.print()
+        for err in ctx.scan_errors:
+            console.print(f"  [dim yellow]ℹ  {err}[/dim yellow]")
+
+    # ── Findings ──────────────────────────────────────────────────────────────
+    console.print()
+    if findings:
+        cats: dict[str, list[HostFinding]] = {}
+        for f in findings:
+            cats.setdefault(f.category, []).append(f)
+
+        for cat in _CATEGORY_ORDER:
+            if cat not in cats:
+                continue
+            label = _CATEGORY_LABEL.get(cat, cat.title())
+            console.rule(f"[dim]{label}[/dim]", style="dim")
+            for f in cats[cat]:
+                color = _SEVERITY_COLOR.get(f.severity, "white")
+                console.print(
+                    f"\n  [{color}]● {f.severity:<8}[/{color}]  [bold white]{f.rule_id}[/bold white]"
+                )
+                console.print(f"  [dim]           {f.message}[/dim]")
+                if f.detail:
+                    for line in f.detail.split("\n"):
+                        console.print(f"  [dim]           {line.strip()}[/dim]")
+                if f.remediation:
+                    console.print(f"  [dim cyan]           → {f.remediation}[/dim cyan]")
+        console.print()
+    else:
+        console.print("  [green]✓ No security findings[/green]\n")
+
+    # ── Footer ────────────────────────────────────────────────────────────────
+    bar_filled = int(score / 5)
+    bar = "█" * bar_filled + "░" * (20 - bar_filled)
+    console.print(
+        f"  Posture Score  [{status_color}]{score:>3}/100[/{status_color}]  "
+        f"[dim]{bar}[/dim]  [{status_color}]{status}[/{status_color}]"
+    )
+
+    n_critical = sum(1 for f in findings if f.severity == "CRITICAL")
+    n_high     = sum(1 for f in findings if f.severity == "HIGH")
+    total      = len(findings)
+
+    console.print()
+    console.rule(style="bright_blue")
+    parts = [f"[bold white]{total}[/bold white] finding{'s' if total != 1 else ''}"]
+    if n_critical:
+        parts.append(f"[bold red]{n_critical} CRITICAL[/bold red]")
+    if n_high:
+        parts.append(f"[bold orange1]{n_high} HIGH[/bold orange1]")
+    console.print("  " + " · ".join(parts))
+    console.print()
+
+
+def as_host_json(ctx: HostContext, findings: list[HostFinding], score: int) -> str:
+    """Serialize host posture results as JSON."""
+    all_mcp: list[dict] = []
+    if ctx.claude_code:
+        for s in ctx.claude_code.mcp_servers:
+            all_mcp.append({
+                "name": s.name, "source": "claude_code",
+                "has_network_access": s.has_network_access,
+                "filesystem_paths": s.filesystem_paths,
+                "env_keys": s.env_keys,
+            })
+    if ctx.claude_desktop:
+        for s in ctx.claude_desktop.mcp_servers:
+            all_mcp.append({
+                "name": s.name, "source": "claude_desktop",
+                "has_network_access": s.has_network_access,
+                "filesystem_paths": s.filesystem_paths,
+                "env_keys": s.env_keys,
+            })
+
+    return json.dumps({
+        "scan_type": "host",
+        "claude_code": {
+            "found": ctx.claude_code is not None,
+            "allowed_tools": ctx.claude_code.allowed_tools if ctx.claude_code else [],
+            "disallowed_tools": ctx.claude_code.disallowed_tools if ctx.claude_code else [],
+            "hook_count": len(ctx.claude_code.hooks) if ctx.claude_code else 0,
+        },
+        "claude_desktop": {
+            "found": ctx.claude_desktop is not None,
+        },
+        "mcp_servers": all_mcp,
+        "memory": {
+            "file_count": ctx.memory_file_count,
+            "total_bytes": ctx.memory_total_bytes,
+        },
+        "shell_key_findings": [
+            {"key_type": k, "file": f, "redacted": s}
+            for k, f, s in ctx.shell_key_findings
+        ],
+        "tcc_permissions": [
+            {"app": p.app_name, "bundle_id": p.bundle_id, "service": p.service, "granted": p.granted}
+            for p in ctx.tcc_permissions if p.granted
+        ],
+        "system_security": {
+            "sip_enabled": ctx.sip_enabled,
+            "filevault_enabled": ctx.filevault_enabled,
+            "gatekeeper_enabled": ctx.gatekeeper_enabled,
+        },
+        "exposed_processes": [
+            {"pid": p.pid, "name": p.name, "address": p.address, "port": p.port}
+            for p in ctx.exposed_processes
+        ],
+        "findings": [
+            {
+                "severity": f.severity,
+                "rule_id": f.rule_id,
+                "category": f.category,
+                "message": f.message,
+                "detail": f.detail,
+                "remediation": f.remediation,
+            }
+            for f in findings
+        ],
+        "posture_score": score,
+        "status": _status_label(score),
+        "scan_errors": ctx.scan_errors,
+    }, indent=2)