bashboy 0.2.0__tar.gz → 0.2.1__tar.gz

{bashboy-0.2.0 → bashboy-0.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: bashboy
-Version: 0.2.0
+Version: 0.2.1
 Summary: Classify shell commands as allow or deny before an agent runs them.
 Project-URL: Homepage, https://github.com/Mann10/bashboy
 Project-URL: Issues, https://github.com/Mann10/bashboy/issues
@@ -97,6 +97,15 @@ bashboy auth clear                  # delete after confirmation
 echo "$CLOCKED_API_KEY" | bashboy auth set --stdin --force
 ```
 
+On Windows, `getpass` reads raw keystrokes with echo off, and pasting into that
+prompt is unreliable — Ctrl+V can land nothing or drop characters. If the
+prompt seems to ignore your paste, put the key on the clipboard and pipe it
+instead (it never touches shell history):
+
+```powershell
+Get-Clipboard | bashboy auth set --stdin --force
+```
+
 `auth set` writes the file atomically, creates `~/.bashboy` with mode `0700` on
 POSIX, and sets the file itself to `0600`. The token is never accepted as a
 command-line argument — it would land in shell history and process listings — and

{bashboy-0.2.0 → bashboy-0.2.1}/README.md

@@ -80,6 +80,15 @@ bashboy auth clear                  # delete after confirmation
 echo "$CLOCKED_API_KEY" | bashboy auth set --stdin --force
 ```
 
+On Windows, `getpass` reads raw keystrokes with echo off, and pasting into that
+prompt is unreliable — Ctrl+V can land nothing or drop characters. If the
+prompt seems to ignore your paste, put the key on the clipboard and pipe it
+instead (it never touches shell history):
+
+```powershell
+Get-Clipboard | bashboy auth set --stdin --force
+```
+
 `auth set` writes the file atomically, creates `~/.bashboy` with mode `0700` on
 POSIX, and sets the file itself to `0600`. The token is never accepted as a
 command-line argument — it would land in shell history and process listings — and

{bashboy-0.2.0 → bashboy-0.2.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "bashboy"
-version = "0.2.0"
+version = "0.2.1"
 description = "Classify shell commands as allow or deny before an agent runs them."
 readme = "README.md"
 requires-python = ">=3.10"

{bashboy-0.2.0 → bashboy-0.2.1}/src/bashboy/__init__.py

@@ -1,5 +1,5 @@
 """BashBoy: a deny-only shell-command gate for coding agents."""
 
-__version__ = "0.2.0"
+__version__ = "0.2.1"
 
 __all__ = ["__version__"]

{bashboy-0.2.0 → bashboy-0.2.1}/src/bashboy/cli.py

@@ -143,9 +143,9 @@ def _cmd_auth_set(args: argparse.Namespace) -> int:
     if args.stdin:
         token = sys.stdin.read().strip()
     else:
-        token = _getpass("Clocked API key: ").strip()
+        token = _getpass("Clocked API key (input hidden): ").strip()
         if token:
-            confirm = _getpass("Repeat to confirm: ").strip()
+            confirm = _getpass("Repeat to confirm (input hidden): ").strip()
             if confirm != token:
                 print("bashboy: tokens did not match", file=sys.stderr)
                 return 2

{bashboy-0.2.0 → bashboy-0.2.1}/src/bashboy/provider.py

@@ -22,6 +22,7 @@ from collections import deque
 from dataclasses import dataclass
 from typing import Any, Callable
 
+from . import __version__
 from .config import ProviderConfig
 
 Transport = Callable[[str, bytes, dict[str, str], float], tuple[int, bytes]]
@@ -178,6 +179,10 @@ class Provider:
             "Authorization": f"Bearer {key}",
             "Content-Type": "application/json",
             "Idempotency-Key": str(uuid.uuid4()),
+            # The endpoint sits behind Cloudflare, which answers 403 (error 1010)
+            # to urllib's default `Python-urllib/3.x` signature. Any honest
+            # product UA gets through; omitting this breaks every request.
+            "User-Agent": f"bashboy/{__version__}",
         }
         timeout = max(int(self.cfg.timeout_ms), 0) / 1000.0
 

{bashboy-0.2.0 → bashboy-0.2.1}/tests/test_cli.py

@@ -9,7 +9,7 @@ from pathlib import Path
 import pytest
 
 import bashboy.provider as provider_module
-from bashboy import cli, credentials
+from bashboy import __version__, cli, credentials
 from bashboy.config import DEFAULT_CONFIG_TOML
 from bashboy.provider import ProviderError
 
@@ -105,7 +105,7 @@ def test_version(capsys: pytest.CaptureFixture[str]) -> None:
     code = run(["version"])
     out = capsys.readouterr().out
     assert code == 0
-    assert "bashboy 0.2.0" in out
+    assert f"bashboy {__version__}" in out
 
 
 def test_selftest_without_key(capsys: pytest.CaptureFixture[str]) -> None:

{bashboy-0.2.0 → bashboy-0.2.1}/tests/test_provider.py

@@ -81,6 +81,8 @@ def test_request_headers_and_timeout() -> None:
     assert headers["Authorization"] == "Bearer k"
     assert headers["Content-Type"] == "application/json"
     assert uuid.UUID(headers["Idempotency-Key"]).version == 4
+    # Cloudflare bans urllib's default signature with a 403 (error 1010).
+    assert headers["User-Agent"].startswith("bashboy/")
     assert timeout == 4.0
     decoded = json.loads(raw_body.decode("utf-8"))
     assert decoded["text"] == "cwd: /tmp\ncommand: git push"

{bashboy-0.2.0 → bashboy-0.2.1}/uv.lock

@@ -4,7 +4,7 @@ requires-python = ">=3.10"
 
 [[package]]
 name = "bashboy"
-version = "0.2.0"
+version = "0.2.1"
 source = { editable = "." }
 
 [package.dev-dependencies]