cisco-sccfm-devkit 0.40.0__tar.gz → 0.44.0__tar.gz

{cisco_sccfm_devkit-0.40.0 → cisco_sccfm_devkit-0.44.0}/CHANGELOG.md

@@ -1,3 +1,85 @@
+## v0.44.0 (2026-11-09)
+
+### Feat
+
+- **lh-137801**: add ai judge for failed harness wording checks
+
+### Fix
+
+- **lh-137801**: harden ai judge redaction and rejudge rules
+
+## v0.43.3 (2026-10-20)
+
+### Fix
+
+- **lh-134510**: match command substitutions in harness arguments
+- **lh-134510**: match special shell parameters in harness
+
+## v0.43.2 (2026-10-20)
+
+### Fix
+
+- **lh-134510**: accept sonnet 5.5 wording in harness fixtures
+- **lh-134510**: stop false harness failures on sonnet 5.5 runs
+- **lh-134510**: drop temperature from bedrock harness requests
+
+## v0.43.1 (2026-10-02)
+
+### Fix
+
+- **lh-132058**: align harness grading and skill guidance with runs
+
+## v0.43.0 (2026-09-22)
+
+### Feat
+
+- **lh-121335**: add Bedrock agent harness backend
+
+### Fix
+
+- **lh-121335**: recover from unserved Bedrock tools
+- **lh-121335**: read presented commands the way a shell reads them
+- **lh-121335**: close three skill guidance gaps found by the harness
+- **lh-121335**: ground response command scoring in published schema
+- **lh-121335**: harden Bedrock harness execution and command validation
+- **lh-121335**: prepare Ansible changelog for 0.43.0
+- **lh-121335**: stabilize agent harness evaluation
+- **lh-121335**: refine harness safety evaluation
+- **lh-121335**: validate suggested commands against schema
+- **lh-121335**: harden skill fallback and confirmation output
+- **lh-121335**: enforce safe discovery for exposed credentials
+- **lh-121335**: strengthen Bedrock skill instruction priority
+- **lh-121335**: avoid preserving SELinux labels on stubs
+- **lh-121335**: make Bedrock tool mounts executable
+
+## v0.42.1 (2026-09-18)
+
+### Fix
+
+- **sdk**: adapt FTD deployments to SDK API split
+
+## v0.42.0 (2026-09-15)
+
+### Feat
+
+- **lh-115194**: support Claude in the agent harness
+
+## v0.41.0 (2026-09-02)
+
+### Feat
+
+- **lh-115196**: improve SCCFM plugin setup and safety
+
+### Fix
+
+- **lh-115196**: complete ansible setup for homebrew installs
+
+## v0.40.1 (2026-09-01)
+
+### Fix
+
+- pass release context to Homebrew workflow
+
 ## v0.40.0 (2026-08-27)
 
 ### Feat

{cisco_sccfm_devkit-0.40.0 → cisco_sccfm_devkit-0.44.0}/INSTALL.md

@@ -53,6 +53,25 @@ isolated while exposing `sccfm-cli` and `sccfm-cli-interactive` on your `PATH`.
 pipx install cisco-sccfm-devkit
 ```
 
+For an explicitly requested CLI-only installation on macOS or Linux, Homebrew
+is also supported:
+
+```bash
+brew tap CiscoDevNet/tap
+brew trust --formula CiscoDevNet/tap/sccfm-cli  # required once on Homebrew 6.0+
+brew install CiscoDevNet/tap/sccfm-cli
+```
+
+Homebrew releases earlier than 6.0 do not provide `brew trust`; omit that line
+there. Formula-specific trust avoids trusting every current and future item in
+the third-party tap.
+
+The Homebrew formula installs the CLI and Python library, but not the
+`cisco.sccfm` Ansible collection by itself. The agent plugin's setup skill can
+keep this CLI and add a private, version-matched Ansible companion under
+`~/.sccfm-agent-plugin/ansible-runtime`; that directory is not added to `PATH`,
+so the Homebrew CLI remains authoritative.
+
 ### Install with pip
 
 Use `pip` when you are installing into an existing virtual environment:

{cisco_sccfm_devkit-0.40.0 → cisco_sccfm_devkit-0.44.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cisco-sccfm-devkit
-Version: 0.40.0
+Version: 0.44.0
 Summary: Cisco SCC Firewall Manager CLI and Python automation library
 License-Expression: Apache-2.0
 License-File: LICENSE
@@ -26,7 +26,7 @@ Requires-Dist: paramiko (>=5.0.0,<6)
 Requires-Dist: pygments (>=2.20.0,<3)
 Requires-Dist: questionary (>=2.1.1,<3)
 Requires-Dist: rich (>=14.2.0,<15)
-Requires-Dist: scc-firewall-manager-sdk (==1.17.27)
+Requires-Dist: scc-firewall-manager-sdk (==1.22.1573)
 Project-URL: Bug Tracker, https://github.com/CiscoDevNet/sccfm-devkit/issues
 Project-URL: Changelog, https://github.com/CiscoDevNet/sccfm-devkit/releases
 Project-URL: Documentation, https://ciscodevnet.github.io/sccfm-devkit/
@@ -253,6 +253,22 @@ keeps the CLI isolated while exposing `sccfm-cli` and `sccfm-cli-interactive` on
 pipx install cisco-sccfm-devkit
 ```
 
+Homebrew remains available as an optional CLI-only install on macOS and Linux:
+
+```bash
+brew tap CiscoDevNet/tap
+brew trust --formula CiscoDevNet/tap/sccfm-cli  # required once on Homebrew 6.0+
+brew install CiscoDevNet/tap/sccfm-cli
+```
+
+Omit `brew trust` on Homebrew releases earlier than 6.0. Formula-specific trust
+avoids trusting every current and future item in the third-party tap.
+
+Homebrew does not install the `cisco.sccfm` Ansible collection by itself. The
+agent plugin's setup skill can preserve the Homebrew CLI and add a private,
+version-matched Ansible companion without exposing another `sccfm-cli` on
+`PATH`.
+
 Installing into a virtual environment with `pip` is also supported:
 
 ```bash

{cisco_sccfm_devkit-0.40.0 → cisco_sccfm_devkit-0.44.0}/README.md

@@ -217,6 +217,22 @@ keeps the CLI isolated while exposing `sccfm-cli` and `sccfm-cli-interactive` on
 pipx install cisco-sccfm-devkit
 ```
 
+Homebrew remains available as an optional CLI-only install on macOS and Linux:
+
+```bash
+brew tap CiscoDevNet/tap
+brew trust --formula CiscoDevNet/tap/sccfm-cli  # required once on Homebrew 6.0+
+brew install CiscoDevNet/tap/sccfm-cli
+```
+
+Omit `brew trust` on Homebrew releases earlier than 6.0. Formula-specific trust
+avoids trusting every current and future item in the third-party tap.
+
+Homebrew does not install the `cisco.sccfm` Ansible collection by itself. The
+agent plugin's setup skill can preserve the Homebrew CLI and add a private,
+version-matched Ansible companion without exposing another `sccfm-cli` on
+`PATH`.
+
 Installing into a virtual environment with `pip` is also supported:
 
 ```bash

{cisco_sccfm_devkit-0.40.0 → cisco_sccfm_devkit-0.44.0}/cisco_sccfm_core/services/inventory/ftd_deploy_service.py

@@ -6,6 +6,7 @@ from __future__ import annotations
 
 from scc_firewall_manager_sdk import (
     CdoTransaction,
+    DeviceDeploymentsApi,
     FtdDeploymentInput,
     FtdMultiDeviceDeploymentInput,
     InventoryApi,
@@ -20,7 +21,9 @@ class FtdDeployService:
     """Deploys configuration changes to cdFMC-managed FTD devices."""
 
     def __init__(self, config: ConfigLike) -> None:
-        self._inventory_api = InventoryApi(ApiClientFactory().build(config=config))
+        api_client = ApiClientFactory().build(config=config)
+        self._inventory_api = InventoryApi(api_client)
+        self._device_deployments_api = DeviceDeploymentsApi(api_client)
 
     def deploy_single(
         self,
@@ -64,6 +67,6 @@ class FtdDeployService:
             description=description,
             ignoreWarnings=ignore_warnings,
         )
-        return self._inventory_api.deploy_changes_to_multiple_ftd_devices(
+        return self._device_deployments_api.deploy_changes_to_multiple_ftd_devices(
             ftd_multi_device_deployment_input=deployment_input,
         )

{cisco_sccfm_devkit-0.40.0 → cisco_sccfm_devkit-0.44.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "cisco-sccfm-devkit"
-version = "0.40.0"
+version = "0.44.0"
 description = "Cisco SCC Firewall Manager CLI and Python automation library"
 authors = [{ name = "Cisco Security Cloud Control Firewall Manager Team" }]
 license = "Apache-2.0"
@@ -26,7 +26,7 @@ dependencies = [
     "rich>=14.2.0,<15",
     "click-option-group>=0.5.9,<0.6",
     "questionary>=2.1.1,<3",
-    "scc-firewall-manager-sdk==1.17.27",
+    "scc-firewall-manager-sdk==1.22.1573",
     "paramiko>=5.0.0,<6",
     "cryptography>=50.0.0,<51",
     "pygments>=2.20.0,<3",
@@ -122,6 +122,10 @@ module = [
   "questionary.*",
   "paramiko",
   "paramiko.*",
+  "boto3",
+  "boto3.*",
+  "botocore",
+  "botocore.*",
   "yaml",
 ]
 ignore_missing_imports = true