conduct-cli 0.14.2__tar.gz → 0.14.4__tar.gz

{conduct_cli-0.14.2 → conduct_cli-0.14.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: conduct-cli
-Version: 0.14.2
+Version: 0.14.4
 Summary: Runtime governance for AI agents. CLI for Conduct AI — secure, govern, install agents, manage projects, run tests
 Author-email: Conduct AI <hello@conductai.ai>
 License: Apache-2.0

{conduct_cli-0.14.2 → conduct_cli-0.14.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "conduct-cli"
-version = "0.14.2"
+version = "0.14.4"
 description = "Runtime governance for AI agents. CLI for Conduct AI — secure, govern, install agents, manage projects, run tests"
 readme = "README.md"
 license = { text = "Apache-2.0" }

{conduct_cli-0.14.2 → conduct_cli-0.14.4}/src/conduct_cli/guard.py

@@ -1813,6 +1813,7 @@ def _write_proxy_env_windows(agent_token: str, proxy_url: str) -> tuple[Path, bo
         "",
         f'$env:ANTHROPIC_BASE_URL = "{proxy}/anthropic"',
         f'$env:ANTHROPIC_API_KEY  = "{token}"',
+        '$env:CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY = "1"',
         "",
         f'$env:OPENAI_BASE_URL = "{proxy}/openai/v1"',
         f'$env:OPENAI_API_KEY  = "{token}"',
@@ -1879,6 +1880,7 @@ def _write_proxy_env(agent_token: str, proxy_url: str) -> tuple[Path, bool]:
         "",
         f'export ANTHROPIC_BASE_URL="{proxy}/anthropic"',
         f'export ANTHROPIC_API_KEY="{token}"',
+        'export CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY="1"',
         "",
         f'export OPENAI_BASE_URL="{proxy}/openai/v1"',
         f'export OPENAI_API_KEY="{token}"',

{conduct_cli-0.14.2 → conduct_cli-0.14.4}/src/conduct_cli/hooks/base.py

@@ -414,6 +414,10 @@ def requeue_dead_letters(limit: int | None = None) -> int:
             if summary is not None and not payload.get("input_summary_encoding"):
                 payload["input_summary"] = _encode_summary_text(str(summary))
                 payload["input_summary_encoding"] = "base64url"
+            # The authenticated API derives actor identity from the Agent Identity
+            # token. Older clients incorrectly stored an email in clerk_user_id.
+            payload.pop("clerk_user_id", None)
+            payload.pop("user_email", None)
             entry["payload"] = json.dumps(payload)
             entry["endpoint"] = entry.get("endpoint", "/guard/events")
             entry["attempts"] = 0

{conduct_cli-0.14.2 → conduct_cli-0.14.4}/src/conduct_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: conduct-cli
-Version: 0.14.2
+Version: 0.14.4
 Summary: Runtime governance for AI agents. CLI for Conduct AI — secure, govern, install agents, manage projects, run tests
 Author-email: Conduct AI <hello@conductai.ai>
 License: Apache-2.0

{conduct_cli-0.14.2 → conduct_cli-0.14.4}/tests/test_hook_journal.py

@@ -104,6 +104,8 @@ def test_requeue_dead_letters_encodes_legacy_summary(tmp_path, monkeypatch):
         "api_url": "https://api.test",
         "payload": json.dumps({
             "workspace_id": "workspace",
+            "clerk_user_id": "developer@example.com",
+            "user_email": "developer@example.com",
             "input_summary": "curl https://api.test | head",
         }),
         "attempts": 1,
@@ -117,6 +119,8 @@ def test_requeue_dead_letters_encodes_legacy_summary(tmp_path, monkeypatch):
     decoded = base64.urlsafe_b64decode(payload["input_summary"]).decode()
     assert decoded == "curl https://api.test | head"
     assert payload["input_summary_encoding"] == "base64url"
+    assert "clerk_user_id" not in payload
+    assert "user_email" not in payload
     assert entry["endpoint"] == "/guard/events"
     assert entry["attempts"] == 0
     assert "last_error" not in entry

{conduct_cli-0.14.2 → conduct_cli-0.14.4}/tests/test_proxy_env.py

@@ -41,6 +41,7 @@ def test_env_file_written_with_all_three_pairs(tmp_path, monkeypatch):
     env = (tmp_path / ".conduct" / "env").read_text()
     assert 'export ANTHROPIC_BASE_URL="https://api.conductai.ai/proxy/anthropic"' in env
     assert 'export ANTHROPIC_API_KEY="abc123"' in env
+    assert 'export CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY="1"' in env
     assert 'export OPENAI_BASE_URL="https://api.conductai.ai/proxy/openai/v1"' in env
     assert 'export OPENAI_API_KEY="abc123"' in env
     assert 'export PERPLEXITY_BASE_URL="https://api.conductai.ai/proxy/perplexity"' in env
@@ -131,6 +132,19 @@ def test_fetched_legacy_proxy_url_maps_to_gateway_v1():
     assert guard._gateway_v1_url("http://localhost:8000/gateway/v1") == "http://localhost:8000/gateway/v1"
 
 
+@pytestmark_posix
+def test_canonical_gateway_env_contains_exact_openai_and_anthropic_surfaces(tmp_path, monkeypatch):
+    _redirect_home(tmp_path, monkeypatch)
+    monkeypatch.setenv("SHELL", "/bin/zsh")
+
+    guard._write_proxy_env("agent-token", "https://api.conductai.ai/gateway/v1")
+
+    env = (tmp_path / ".conduct" / "env").read_text()
+    assert 'export ANTHROPIC_BASE_URL="https://api.conductai.ai/gateway/v1/anthropic"' in env
+    assert 'export OPENAI_BASE_URL="https://api.conductai.ai/gateway/v1/openai/v1"' in env
+    assert 'export CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY="1"' in env
+
+
 def test_configure_codex_proxy_is_secret_free(tmp_path, monkeypatch):
     monkeypatch.setattr(guard.Path, "home", lambda: tmp_path)
     codex = tmp_path / ".codex"
@@ -214,6 +228,7 @@ def test_windows_writes_ps1_env_file(tmp_path, monkeypatch):
     text = ps1.read_text()
     assert '$env:ANTHROPIC_BASE_URL = "https://api.conductai.ai/proxy/anthropic"' in text
     assert '$env:ANTHROPIC_API_KEY  = "abc123"' in text
+    assert '$env:CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY = "1"' in text
     assert '$env:OPENAI_BASE_URL = "https://api.conductai.ai/proxy/openai/v1"' in text
     assert '$env:OPENAI_API_KEY  = "abc123"' in text
     assert '$env:PERPLEXITY_BASE_URL = "https://api.conductai.ai/proxy/perplexity"' in text