command-gate 0.2.4__py3-none-any.whl

command_gate-0.2.4.dist-info/METADATA

@@ -0,0 +1,204 @@
+Metadata-Version: 2.5
+Name: command-gate
+Version: 0.2.4
+Summary: Middleware and CLI between AI assistants and managed servers so AI proposes commands, humans approve them, and every action is audited.
+Project-URL: Homepage, https://github.com/wanderlp/command-gate-for-ai-agents
+Project-URL: Repository, https://github.com/wanderlp/command-gate-for-ai-agents
+Project-URL: Issues, https://github.com/wanderlp/command-gate-for-ai-agents/issues
+Project-URL: Changelog, https://github.com/wanderlp/command-gate-for-ai-agents/releases
+Author: wanderlp
+License: MIT
+License-File: LICENSE
+Keywords: ai-agents,audit,cli,human-in-the-loop,mcp,ssh,winrm
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Security
+Classifier: Topic :: System :: Systems Administration
+Classifier: Typing :: Typed
+Requires-Python: >=3.11
+Requires-Dist: keyring>=25.0
+Requires-Dist: mcp>=1.0
+Requires-Dist: packaging>=23.0
+Requires-Dist: paramiko>=3.0
+Requires-Dist: pydantic>=2.7
+Requires-Dist: pywinrm>=0.4
+Requires-Dist: requests>=2.31
+Requires-Dist: rich>=13.0
+Requires-Dist: sigstore>=4.5.0
+Requires-Dist: textual>=8.2.8
+Requires-Dist: typer>=0.12
+Requires-Dist: typing-extensions>=4.12
+Provides-Extra: dev
+Requires-Dist: basedpyright>=1.13; extra == 'dev'
+Requires-Dist: hatch-vcs>=0.5; extra == 'dev'
+Requires-Dist: pyinstaller>=6.0; extra == 'dev'
+Requires-Dist: pytest-cov>=5; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Requires-Dist: ruff>=0.6; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# command-gate-for-ai-agents (`cgate`)
+
+Give your AI agents hands — safely.
+
+AI agents can now write and run real shell commands against real servers. That's
+powerful, and also the kind of thing that goes badly the first time an agent
+misunderstands what you asked for. `cgate` sits between the agent and your
+infrastructure: the agent proposes a command, a human decides whether it runs, and
+every proposal, decision, and result is recorded.
+
+You stop choosing between "the agent can't actually do anything" and "the agent can do
+anything, unsupervised."
+
+> **⚠️ Beta.** `cgate` is under active development. Expect rough edges, breaking
+> changes between releases, and incoming revisions as it matures — feedback and bug
+> reports are welcome.
+
+## Why teams use it
+
+- **Agents propose, humans decide.** Every command an AI agent wants to run on a
+  connected server lands in an approval queue first. Nothing executes without a human
+  saying yes.
+- **A full audit trail.** Every proposal, approval, rejection, and execution result is
+  recorded — who approved it, when, and what happened.
+- **Drops into the AI tools you already use.** Registers itself as an MCP server for
+  Claude Code, opencode, Cursor, and other MCP-compatible clients.
+- **One binary, nothing to configure.** Ships as a single executable per platform —
+  download it and run it, done.
+
+## Modes: PROPOSE and AUTO
+
+`cgate` ships in two modes, and you pick per server which ones can ever run
+unattended. The default is the safe one.
+
+**PROPOSE** (default): every command an AI agent calls lands in the watch queue. You
+press `y` or `n` per command. Nothing runs without you.
+
+**AUTO**: when the agent calls `propose_command`, it runs immediately **only if the
+target server is on your allow-list**. Servers are off by default — you opt them in
+explicitly. Two switches need to land in the "go" position before anything runs
+unattended: the global mode is AUTO *and* that specific server is opted in.
+
+```text
+┌─────────────────────────────────────────────────────────────┐
+│ cgate watch          MODE: AUTO ⚡ | 1 servers auto-allowed  │
+├─────────────────────────────────────────────────────────────┤
+│ [Queue]            [Servers]                                │
+│ ▶ "deploy v2"      dev-1   LNX [✓]                         │
+│                    stage-2 LNX [ ]                          │
+│                    prod-db WIN [ ]                          │
+├─────────────────────────────────────────────────────────────┤
+│ [y]approve [n]reject [a]approve batch [m]ode [h]istory ...  │
+└─────────────────────────────────────────────────────────────┘
+```
+
+↑/↓ + Enter on the queue sidebar jumps straight to any pending batch — you're not
+forced to clear the queue in strict arrival order to get to the one you actually
+want to approve next.
+
+### Switching modes
+
+Press **`m`** in `cgate watch` to flip the global mode (one keystroke + `y` to
+confirm). Press **`s`** to open the server allow-list and toggle any connection on or
+off. Both modals need an explicit `y` or `Enter`; everything else cancels without
+writing. AI agents have no MCP tool that can change either setting — only your
+keystrokes can.
+
+### Why two switches?
+
+If you leave `MODE: AUTO` on by accident, the worst case is that nothing runs on
+servers that haven't been explicitly opted in. To actually run something
+unattended you must enable the mode **and** flip the per-server switch. Belt and
+suspenders, default-safe at every level.
+
+### A third switch: high-blast-radius commands never auto-run
+
+Even with both switches flipped, a command matching a known high-blast-radius
+pattern — a recursive force-delete, a raw disk write, deleting shadow copies or
+backups, disabling System Restore, and similar — always queues for a human. It
+shows a bold red `⚠ RISKY` warning in `cgate watch` (in **either** mode, so you
+notice it in PROPOSE too, not only when it changed what AUTO would have done),
+and the MCP response carries `effective_reason: "risky_command"` so the agent
+knows why. This is a regex-based heuristic, not a guarantee — it catches the
+common, obvious forms (see `src/cgate/risk.py`), not every possible obfuscation.
+Absence of the flag is not the same as "safe."
+
+### The audit trail still works
+
+Every command a batch ever queued shows an `⚙ auto` or `👤 <username>` badge next
+to it, so you always know whether a human or AUTO mode approved it — and once a
+batch resolves, it doesn't vanish: press **`h`** in `cgate watch` to browse every
+resolved batch, see the agent's stated `reason` for wanting the command, and view
+the full, untruncated result. Press **`/`** there to filter live against a batch's
+title, its commands, and their server aliases all at once -- `Esc` clears the
+filter first, then closes the screen on a second press.
+
+Need it outside the TUI — for a compliance report, or just to grep offline?
+
+```bash
+cgate history export                          # full audit trail as CSV, to stdout
+cgate history export --format json -o audit.json
+cgate history export --limit 100               # only the 100 most recently resolved batches
+```
+
+Human-only: this isn't exposed to AI agents over MCP. An agent that proposed a
+batch can already poll `check_status(batch_id)` for it at any time, resolved or
+not, so there's no reason to hand it a browse of everyone else's history too.
+
+Prefer raw SQL? The same data is still just a query away:
+
+```sql
+SELECT * FROM commands WHERE approved_by LIKE 'auto:%';
+```
+
+### What the AI sees (and what it can ask first)
+
+The MCP server exposes three read-only tools the AI can use to plan with full
+information, plus `propose_command` to act:
+
+- **`list_connections`** — every saved connection and its `auto_allowed` flag
+  (the AI knows up front which servers could auto-execute).
+- **`get_mode`** — the current global mode (`propose` or `auto`) and the list of
+  aliases opted into auto-execution. Read-only, safe to call any time.
+- **`check_status`** — what's pending in a given batch.
+
+With these, the AI never has to guess whether a command will auto-run or wait
+for you — it can call `get_mode` and `list_connections` first, plan accordingly,
+and only invoke `propose_command` when it knows what will happen.
+
+## Get started
+
+1. Download the binary for your platform from the
+   [latest release](https://github.com/wanderlp/command-gate-for-ai-agents/releases/latest).
+2. Run it (double-click it, or just `.\cgate-windows-amd64.exe` from the folder you
+   downloaded it to). On first run it installs itself into a per-user bin directory,
+   adds that directory to your `PATH`, and registers with any AI clients it finds —
+   no admin/sudo, no flags to remember.
+3. Open a new terminal and restart your AI client. Done.
+
+From there, `cgate watch` opens a live approval queue: agent proposals show up as they
+come in, you approve or reject with a keypress, and the result streams back to the
+agent.
+
+> First run on Windows or macOS may show a one-time "unrecognized publisher" warning —
+> these binaries aren't code-signed yet. See
+> [TECHNICAL.md](./TECHNICAL.md#first-run-warnings-binaries-are-not-code-signed) for
+> what to do about it.
+
+## Learn more
+
+Package-manager installs, architecture, development setup, and building from source
+live in [TECHNICAL.md](./TECHNICAL.md).
+
+## License
+
+[MIT](./LICENSE)

command_gate-0.2.4.dist-info/RECORD

@@ -0,0 +1,63 @@
+cgate/__init__.py,sha256=j2uYGJonOw5SJL8TzNmvBLX8X96YLlyicTIWeAJiIpA,1028
+cgate/__main__.py,sha256=_JRJpLo2Nk9U35g-q_UWIsjXOTpx7t3iENDAgIaOhBo,151
+cgate/_version.py,sha256=oIZQE-4i_2bThWVLsbnRskxqsRwrfcev8lVgZK6VSzM,520
+cgate/mcp_installer.py,sha256=j-N-kynR2TDQOQKjJeA0apEUj3D2DAKitF4VbO5DR4E,5855
+cgate/risk.py,sha256=n0rJCJrfH7OSOIiSazX22ae1gLzQeMtwCVbwS_Du3-s,5227
+cgate/update.py,sha256=jPmKnbfTY5o3-J2p9K3-JA3UuudGIrHZ4ZlLZt5x5HE,26807
+cgate/cli/__init__.py,sha256=U4S_2y3zgLZVfMenHRaJFBW8yqh2mUBuI291LGQVOJ8,35
+cgate/cli/_console.py,sha256=9z01vJcoeOfcQysiOX41hYZlk2WleOxwuFycK7OVh5E,527
+cgate/cli/connections.py,sha256=qeJtjiB9UjSi7O8mBLCslidBGPemTVLYPyDMte6w4UQ,8248
+cgate/cli/history.py,sha256=80S-U3pZzXdZX0C4byuvCQbvzdQ8tVxyoI7kT9bq1Nk,6176
+cgate/cli/install.py,sha256=bC4v6AMR1MD7VUVygaIwLpG3LfHdADW7joXTHP-dpM8,6903
+cgate/cli/main.py,sha256=Fri_KfkSFRa_3ePyyEC_PJ9Op4pVGJvym7hvTAvjdGs,3874
+cgate/cli/mcp.py,sha256=Gb8bJ4HDTlP17DtRm88KTW1lqs0R3t1f2urwz5074nw,6077
+cgate/cli/uninstall.py,sha256=JrlSTkvJdUuMo86tRDErd8qJK3P4k6g-N6wiftfovCc,15257
+cgate/cli/update.py,sha256=TNCT7gYvcYUYDCu7eJTLK4cy8E5f1B1nLuBuThRq95g,22034
+cgate/cli/watch.py,sha256=kT6KpdydhJdx_xyaQn7oJUDW8eXUr7qJIEO75xBzh1o,633
+cgate/connections/__init__.py,sha256=U4S_2y3zgLZVfMenHRaJFBW8yqh2mUBuI291LGQVOJ8,35
+cgate/connections/auth.py,sha256=KDdsDc91WMi-G23Yfkj9FyIZqdEYpzWANinJbajRF3k,2713
+cgate/connections/detect.py,sha256=f5A5hZQgmmFDDzz_2Mco3dQlr8RpeBHSZa6BDY9TOMk,2257
+cgate/connections/store.py,sha256=s96p8MxHm4UpjwvddKGQYTLzkrAfChlcmTdK9_5EFMs,3003
+cgate/core/__init__.py,sha256=U4S_2y3zgLZVfMenHRaJFBW8yqh2mUBuI291LGQVOJ8,35
+cgate/core/path_env.py,sha256=nfiKoEDKgAFU_1YChjuDZdWudBnSuNe4_ivlUsTVjYY,8434
+cgate/core/paths.py,sha256=U6cBTEEJU9aIu38juZ1Mh4uICxIAZfr9GPxxVNS-lqU,1063
+cgate/core/update_log.py,sha256=hpDDmiQ8FprxmXh_3uq_t1EyrwciXaXUmCmKiIFmziY,1340
+cgate/db/__init__.py,sha256=U4S_2y3zgLZVfMenHRaJFBW8yqh2mUBuI291LGQVOJ8,35
+cgate/db/batches.py,sha256=Xq1UFTZmiNhbSzGWI80y5ZhFENbJ_Y-Xbe9unTwicRY,4117
+cgate/db/commands.py,sha256=TsEK8-nPurqufhNooUKA3-5kyHEx_yIdQiP-h7IdqJw,7652
+cgate/db/connection.py,sha256=qjObNpj3HwlEDhXsXxxwcOQUcGNtDtBLtn2m5re-FgU,4065
+cgate/db/mode.py,sha256=AaSF5UhpoVIIlqiGlf0gNBQcCSmz_rINusulucgIp1A,2492
+cgate/db/rows.py,sha256=SRmO4KXP8CgJoCQjs4FHM0XOOhc-ckKffQbqyg8I1XM,3144
+cgate/db/schema.py,sha256=6e0XavNzmDays5_2FVyceJ7pyz3hhFUdyvIFoNWa9NI,1599
+cgate/db/server_settings.py,sha256=I-Cmry17oT1IBhQ7HhplE40Q3_Jv6_Ez-uXPqrQdFbQ,3799
+cgate/db/types.py,sha256=9BrIRI0pSSlzL03osxB8rJslCVLXZcsISg0rBP8qN18,1866
+cgate/executor/__init__.py,sha256=WhfPSo-O46l5DEuwr0b9VWVck_FugZTg-qxioZymNjo,328
+cgate/executor/base.py,sha256=PWPUbCJgWz-KB4x6agRhongtQ4xtxq231bFgD4-7lhU,2041
+cgate/executor/selector.py,sha256=uo_1Z2tIiaY2ioB4GLiiXlmpDV0YGECQhhyr-oH1uS4,2119
+cgate/executor/ssh.py,sha256=TQqk8PpQ7n-Zb4uzPdHCqqH9cwGLPMMrIpiKhh_QU60,5608
+cgate/executor/winrm.py,sha256=3qRAM1m6Jpf6-BrbGzRI4mw1qRRxPCHhRYfYv_PCdzg,5066
+cgate/helper/__init__.py,sha256=2QKg7XZo1jy3pLEDceecHC7ydOq1X6jZdMYzjIQcga4,451
+cgate/helper/__main__.py,sha256=LtCQn_2Jj5mnNYRo1G0F6yq5CqTCM-svMLosXS8gJkc,4299
+cgate/helper/waiter.py,sha256=dt30KFVi-9nHeNX4tsq6zrj9regq_xOPM91A4a3KkJ8,4633
+cgate/mcp_server/__init__.py,sha256=hgpeupqz73g6-PFfequOp7HZmyGtix_xLqBG-HwsgqQ,189
+cgate/mcp_server/__main__.py,sha256=4SGNpnD2Zai-RQOZGHUhKC4KUE821vAQ_ZsultAZDMk,149
+cgate/mcp_server/auto_resolution.py,sha256=i7iRX615JnWtlK0aPd8LGnJittz8rqZ5JWfTdwPg4WY,2980
+cgate/mcp_server/server.py,sha256=1UpfsYd6ohnyso70mKnGOGc_vFVoZe_kbTM5rvzgnkQ,10178
+cgate/mcp_server/tools.py,sha256=Axa4hNFj6zN2m4e7U_y1NN4ogR3dDyQ142ZDVFxaDZI,11824
+cgate/watch/__init__.py,sha256=dh1jr9CPf50HHtRAyyIKedUoIfmPn85ilau1kOCHBik,194
+cgate/watch/app.py,sha256=1W6cBE0hIJy5hoSq6yseSWSuBeLEoy9g6GJQh53s4R8,23105
+cgate/watch/approval.py,sha256=UKdTisgCrORdDw8FzX7ky0u2ktZAgVZqnCd9mhxeh3U,8154
+cgate/watch/command_detail_modal.py,sha256=g0gD3gjlqkR2r6vh6PcSDWW4mxUCnoYnWgEDRTKOnG8,2190
+cgate/watch/history_modal.py,sha256=3Tz77WecBuKeO6ZNvwnF56Hfc3j1aQjAITpqJ_LRzkQ,9933
+cgate/watch/mode_modal.py,sha256=LuksUIPOHJQfdhwGdpcR1rUqaKjiVUuavyaYALuyeR8,3965
+cgate/watch/queue.py,sha256=-Bol4-kPceV3MxEcnFp0qVq1mnGdtH_dkbbK3YZlgAk,4156
+cgate/watch/render.py,sha256=Lw_-pKVfTmnhhm4t_wfw8s2p8uS2jg94Gm2WAorsDJo,6309
+cgate/watch/server_settings_modal.py,sha256=gp1I3NuLmasc3Um-CELs_pz0NXO-Z7M2Lv6m4yyCylQ,7055
+cgate/watch/session.py,sha256=DYfQsYSPPr7DeWkyfdX_sel4vawrrl9zuk_O0l_zuYc,1309
+cgate/watch/theme.py,sha256=vf4m8-hhY3QjNfodl9zwUGGcuHUTpaeYWmUNgoiEDr0,1062
+cgate/watch/widgets.py,sha256=AGf06cjwHIwns1Ey1AEVSgfdmrnnTdZp3sf3yccqLRM,1051
+command_gate-0.2.4.dist-info/METADATA,sha256=baQxhQ7-eLnZhAS15Xeht4tQsviCaRANJ6JCQr2SK8Q,9883
+command_gate-0.2.4.dist-info/WHEEL,sha256=THafob7ofN-NsuMN7Mg4qZyHaQI7KkD-QlcQatYhXPo,87
+command_gate-0.2.4.dist-info/entry_points.txt,sha256=Z1vx-ws6uoKZdAGifcDYVNiRxnlGK8lDlHwFwq2qDwE,46
+command_gate-0.2.4.dist-info/licenses/LICENSE,sha256=lJZtUokrYiJzTLMawbBuLr14YKukTMEEF4YCKNz4n20,1065
+command_gate-0.2.4.dist-info/RECORD,,

command_gate-0.2.4.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.32.3
+Root-Is-Purelib: true
+Tag: py3-none-any

command_gate-0.2.4.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+cgate = cgate.cli.main:main

command_gate-0.2.4.dist-info/licenses/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 wanderlp
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.