conduct-cli 0.4.57__tar.gz → 0.4.58__tar.gz

{conduct_cli-0.4.57 → conduct_cli-0.4.58}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: conduct-cli
-Version: 0.4.57
+Version: 0.4.58
 Summary: CLI for Conduct AI — install agents, manage projects, run tests
 Author-email: Conduct AI <hello@conductai.ai>
 License: MIT

{conduct_cli-0.4.57 → conduct_cli-0.4.58}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "conduct-cli"
-version = "0.4.57"
+version = "0.4.58"
 description = "CLI for Conduct AI — install agents, manage projects, run tests"
 readme = "README.md"
 license = { text = "MIT" }

{conduct_cli-0.4.57 → conduct_cli-0.4.58}/src/conduct_cli/guard.py

@@ -241,7 +241,7 @@ def _post_usage(session_id, tool_name, tokens_input, tokens_output, duration_ms)
     )
 
 
-def _maybe_emit_security_finding(tool_response, session_id, tool_name):
+def _maybe_emit_security_finding(tool_response, session_id, tool_name, tool_input=None):
     """Classify tool_response for security findings; POST to /security-findings if flag ON. Never raises."""
     try:
         cfg = json.loads(CONFIG_PATH.read_text()) if CONFIG_PATH.exists() else {}
@@ -298,6 +298,12 @@ def _maybe_emit_security_finding(tool_response, session_id, tool_name):
     if not finding_type:
         return
 
+    ti = tool_input or {}
+    file_path = (
+        ti.get("file_path") or ti.get("path") or
+        (ti.get("command", "")[:120] if tool_name in ("bash", "terminal") else None)
+    ) or None
+
     payload = json.dumps({
         "tool": _detect_ai_tool(),
         "severity": severity,
@@ -305,6 +311,7 @@ def _maybe_emit_security_finding(tool_response, session_id, tool_name):
         "description": description,
         "source_run_id": session_id,
         "reporter_email": cfg.get("user_email") or "",
+        "file": file_path,
     })
     script = (
         "import urllib.request\\n"
@@ -489,7 +496,8 @@ def post_usage_main():
 
     # Security classifier runs regardless of transcript_path — scan every tool response
     tool_response = data.get("tool_response") or data.get("output") or ""
-    _maybe_emit_security_finding(str(tool_response), session_id, tool_name)
+    tool_input    = data.get("tool_input") or {}
+    _maybe_emit_security_finding(str(tool_response), session_id, tool_name, tool_input)
 
     sys.exit(0)
 

{conduct_cli-0.4.57 → conduct_cli-0.4.58}/src/conduct_cli/main.py

@@ -2217,7 +2217,7 @@ def cmd_run(args):
 # ── conduct sync / test-guard / test-security ────────────────────────────────
 
 def cmd_sync(args):
-    """Run guard sync + security policy sync in one shot."""
+    """Sync Guard policies (and Security Loop policies if installed)."""
     import conduct_cli.guard as _g
     print(f"\n{BOLD}▶ conduct sync{RESET}\n")
     _g.cmd_guard_sync(args)
@@ -2533,7 +2533,7 @@ def main():
     mcp_sub.add_parser("install", help="Register conduct-mcp in Claude Code and Codex")
 
     # conduct sync
-    sub.add_parser("sync", help="Sync Guard policies + Security Loop in one shot")
+    sub.add_parser("sync", help="Sync Guard policies (and Security Loop policies if installed)")
 
     # conduct test-guard / test-security
     sub.add_parser("test-guard",    help="Fire a synthetic event per guard policy rule and show decisions")

{conduct_cli-0.4.57 → conduct_cli-0.4.58}/src/conduct_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: conduct-cli
-Version: 0.4.57
+Version: 0.4.58
 Summary: CLI for Conduct AI — install agents, manage projects, run tests
 Author-email: Conduct AI <hello@conductai.ai>
 License: MIT