conduct-cli 0.6.12__tar.gz → 0.6.15__tar.gz

{conduct_cli-0.6.12 → conduct_cli-0.6.15}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: conduct-cli
-Version: 0.6.12
+Version: 0.6.15
 Summary: CLI for Conduct AI — install agents, manage projects, run tests
 Author-email: Conduct AI <hello@conductai.ai>
 License: MIT

{conduct_cli-0.6.12 → conduct_cli-0.6.15}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "conduct-cli"
-version = "0.6.12"
+version = "0.6.15"
 description = "CLI for Conduct AI — install agents, manage projects, run tests"
 readme = "README.md"
 license = { text = "MIT" }

{conduct_cli-0.6.12 → conduct_cli-0.6.15}/src/conduct_cli/guard.py

@@ -305,6 +305,9 @@ _MCP_TARGETS = [
     (Path.home() / ".cursor"   / "mcp.json",       "Cursor"),
     (Path.home() / ".windsurf" / "mcp.json",        "Windsurf"),
     (Path.home() / ".codex"    / "mcp.json",        "Codex"),
+    # Claude Desktop — only if already installed
+    (Path.home() / "Library" / "Application Support" / "Claude" / "claude_desktop_config.json", "Claude Desktop"),
+    (Path.home() / "AppData"  / "Roaming" / "Claude" / "claude_desktop_config.json",             "Claude Desktop"),
 ]
 
 
@@ -346,6 +349,82 @@ def _register_mcp(workspace_id: str, member_token: str, api_url: str) -> None:
     if not found_any:
         print(f"  {GRAY}No AI tool configs found for MCP registration{RESET}")
 
+    # Claude Desktop doesn't source shell env — patch apiBaseUrl directly in config
+    # so all LLM calls route through the Guard proxy (PII blocking, spend limits, audit).
+    _patch_claude_desktop_proxy(api_url, member_token)
+
+    # Cursor global rules — write Guard policies as user rules so they apply across all projects.
+    _patch_cursor_global_rules()
+
+
+def _patch_claude_desktop_proxy(api_url: str, member_token: str) -> None:
+    """Patch Claude Desktop config to route LLM calls through the Guard proxy.
+
+    Claude Desktop reads apiBaseUrl from its config JSON — it does not source
+    shell env vars, so ANTHROPIC_BASE_URL has no effect. We write the proxy
+    URL directly so PII blocking, spend limits, and audit apply to Desktop too.
+    """
+    proxy_url = f"{api_url}/proxy/anthropic"
+    candidates = [
+        Path.home() / "Library" / "Application Support" / "Claude" / "claude_desktop_config.json",
+        Path.home() / "AppData" / "Roaming" / "Claude" / "claude_desktop_config.json",
+    ]
+    for cfg_path in candidates:
+        if not cfg_path.exists():
+            continue
+        try:
+            cfg = json.loads(cfg_path.read_text())
+        except (json.JSONDecodeError, OSError):
+            cfg = {}
+        current = cfg.get("apiBaseUrl", "")
+        if current == proxy_url:
+            print(f"  {GRAY}Claude Desktop proxy already set → {proxy_url}{RESET}")
+            continue
+        cfg["apiBaseUrl"] = proxy_url
+        cfg_path.write_text(json.dumps(cfg, indent=2))
+        print(f"  {GREEN}Claude Desktop proxy set → {proxy_url}{RESET}")
+        print(f"  {YELLOW}Restart Claude Desktop for proxy routing to take effect{RESET}")
+
+
+def _patch_cursor_global_rules() -> None:
+    """Write ConductGuard policy rules into Cursor's global user rules setting.
+
+    Cursor IDE stores global rules in settings.json under cursor.rules.user —
+    a plain text string injected as system context for every conversation.
+    This is soft enforcement (prompt-level), not structural like Claude Code hooks,
+    but ensures Guard policies are visible to the model across all Cursor projects.
+    """
+    GUARD_RULES = (
+        "# ConductGuard — team AI policies (managed by conduct guard sync)\n"
+        "- ALWAYS call guard_check (via conductguard MCP) before running shell commands, "
+        "reading or writing files, accessing external APIs, or modifying code.\n"
+        "- NEVER write credentials, API keys, or secrets to files or output.\n"
+        "- NEVER send PII (emails, names, SSNs, payment data) to external endpoints.\n"
+        "- If guard_check returns BLOCKED: stop and explain the policy rule to the user.\n"
+        "- If guard_check returns WARNING: proceed but surface the warning.\n"
+        "- These rules are enforced by your team's ConductGuard policy. Do not bypass them."
+    )
+
+    candidates = [
+        Path.home() / "Library" / "Application Support" / "Cursor" / "User" / "settings.json",
+        Path.home() / ".config" / "Cursor" / "User" / "settings.json",
+        Path.home() / "AppData" / "Roaming" / "Cursor" / "User" / "settings.json",
+    ]
+    for settings_path in candidates:
+        if not settings_path.exists():
+            continue
+        try:
+            cfg = json.loads(settings_path.read_text())
+        except (json.JSONDecodeError, OSError):
+            cfg = {}
+        existing = cfg.get("cursor.rules.user", "")
+        if "ConductGuard" in existing:
+            print(f"  {GRAY}Cursor global rules already contain ConductGuard policy{RESET}")
+            continue
+        cfg["cursor.rules.user"] = (existing + "\n\n" + GUARD_RULES).strip()
+        settings_path.write_text(json.dumps(cfg, indent=2))
+        print(f"  {GREEN}Cursor global rules updated with ConductGuard policy{RESET}")
+
 
 def _install_codex_hook(hook_path: Path) -> None:
     """Register PreToolUse and PostToolUse hooks in ~/.codex/hooks.json."""
@@ -1091,7 +1170,7 @@ def cmd_guard_sync(args):
 CONDUCT_DIR        = Path.home() / ".conduct"
 PROXY_ENV_FILE     = CONDUCT_DIR / "env"
 PROXY_OVERRIDE     = CONDUCT_DIR / "env-override"
-DEFAULT_PROXY_URL  = "https://api.conductai.ai/proxy"
+DEFAULT_PROXY_URL  = "https://api.conductai.ai/proxy/anthropic"
 SHELL_RC_MARKER    = "# Conduct Guard Proxy — managed by `conduct guard sync`"
 SHELL_SOURCE_LINE  = "[ -f ~/.conduct/env ] && . ~/.conduct/env"
 
@@ -1679,7 +1758,7 @@ def register_guard_parser(sub):
     sync_p.add_argument("--cursor", action="store_true", help="Write active Guard policies to .cursorrules")
     sync_p.add_argument("--dry-run", action="store_true", help="Preview policy changes without writing anything")
     sync_p.add_argument("--proxy-url", default=None,
-                        help="Override the Guard proxy URL (default: https://api.conductai.ai/proxy)")
+                        help="Override the Guard proxy URL (default: https://api.conductai.ai/proxy/anthropic)")
     sync_p.add_argument("--no-local-audit", action="store_true",
                         help="Skip the local pre-existing API key scan")
 

{conduct_cli-0.6.12 → conduct_cli-0.6.15}/src/conduct_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: conduct-cli
-Version: 0.6.12
+Version: 0.6.15
 Summary: CLI for Conduct AI — install agents, manage projects, run tests
 Author-email: Conduct AI <hello@conductai.ai>
 License: MIT