conduct-cli 0.8.2__tar.gz → 0.8.4__tar.gz

{conduct_cli-0.8.2 → conduct_cli-0.8.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: conduct-cli
-Version: 0.8.2
+Version: 0.8.4
 Summary: CLI for Conduct AI — secure, govern, install agents, manage projects, run tests
 Author-email: Conduct AI <hello@conductai.ai>
 License: MIT

{conduct_cli-0.8.2 → conduct_cli-0.8.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "conduct-cli"
-version = "0.8.2"
+version = "0.8.4"
 description = "CLI for Conduct AI — secure, govern, install agents, manage projects, run tests"
 readme = "README.md"
 license = { text = "MIT" }
@@ -44,4 +44,4 @@ where = ["src"]
 include = ["conduct_cli*"]
 
 [tool.setuptools.package-data]
-conduct_cli = ["paxel.py"]
+conduct_cli = ["paxel.py", "guard_policy.md"]

{conduct_cli-0.8.2 → conduct_cli-0.8.4}/src/conduct_cli/guard.py

@@ -481,7 +481,6 @@ def _patch_copilot_mcp(agent_token: str, api_url: str) -> None:
         "type": "http",
         "url": f"{api_url}/guard/mcp",
         "headers": {"Authorization": f"Bearer {agent_token}"},
-        "tools": ["**"],
     }
     booster_entry = {"command": "booster", "args": ["serve"]} if shutil.which("booster") else None
 
@@ -522,21 +521,7 @@ def _write_mcp_file(
         cfg_path.write_text(json.dumps(cfg, indent=2))
 
 
-_GUARD_RULES_TEXT = (
-    "## ConductGuard — AI Governance Policy\n\n"
-    "A ConductGuard MCP server is connected to this session (server name: `conduct-guard`).\n"
-    "All Guard policies are enforced through it. You MUST follow these rules:\n\n"
-    "Before executing any shell command, file write, network request, API call, or code change:\n"
-    "1. Call the `guard_check` tool from the `conduct-guard` MCP server with the action and parameters.\n"
-    "2. If the response is BLOCKED: stop immediately and explain the policy rule to the user. Do not proceed.\n"
-    "3. If the response is WARNING: proceed but surface the warning message to the user.\n"
-    "4. If the response is ALLOWED: proceed normally.\n\n"
-    "Always-on rules (no guard_check needed, enforce unconditionally):\n"
-    "- Never write credentials, API keys, tokens, or secrets to any file or output.\n"
-    "- Never send PII (emails, names, payment data) to external endpoints.\n\n"
-    "Use `guard_status` (conduct-guard MCP) to show the user their current policy and team info.\n"
-    "Use `guard_activity` at the start of every session with a one-line summary of what you are doing."
-)
+_GUARD_RULES_TEXT = (Path(__file__).parent / "guard_policy.md").read_text().rstrip()
 
 
 def _patch_cursor_global_rules() -> None:
@@ -609,14 +594,16 @@ def _patch_tool_instruction_files(agent_token: str, api_url: str, dry_run: bool
         (repo_root / ".cursorrules"                        if repo_root else None, Path.home() / ".cursor"  / "rules" / "conduct.md",   ".cursorrules"),
         (repo_root / ".windsurfrules"                      if repo_root else None, Path.home() / ".windsurf"/ "rules" / "conduct.md",   ".windsurfrules"),
     ]
-    pattern = _re.compile(_re.escape(MARKER_START) + r".*?" + _re.escape(MARKER_END), _re.DOTALL)
+    # Tolerate legacy marker variants (e.g. ", do not edit this block") so re-sync
+    # replaces old blocks in place instead of appending a second one.
+    pattern = _re.compile(r"<!-- ConductGuard[^\n]*-->.*?<!-- /ConductGuard -->", _re.DOTALL)
 
     for repo_path, global_path, label in targets:
         path = repo_path if (repo_path and repo_path.exists()) else global_path
         if not path.exists() and repo_path:
             path = repo_path
         existing = path.read_text() if path.exists() else ""
-        if MARKER_START in existing:
+        if pattern.search(existing):
             updated = pattern.sub(guard_block, existing)
             if dry_run:
                 if updated == existing:

conduct_cli-0.8.4/src/conduct_cli/guard_policy.md

@@ -0,0 +1,16 @@
+At the start of every conversation:
+- Call `guard_activity` once with a one-line summary of the user's request.
+
+Before every shell command, file write, network request, API call, or code change:
+- Call `guard_check` with the proposed action and parameters.
+- If BLOCKED: stop and explain the policy rule.
+- If WARNING: proceed and surface the warning.
+- If ALLOWED: proceed normally.
+
+Example:
+1. User asks to fix a bug → call `guard_activity` once.
+2. Before reading files or running tests → call `guard_check`.
+3. Before editing code → call `guard_check` again.
+
+Never write secrets to files or output.
+Never send PII to external endpoints.

{conduct_cli-0.8.2 → conduct_cli-0.8.4}/src/conduct_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: conduct-cli
-Version: 0.8.2
+Version: 0.8.4
 Summary: CLI for Conduct AI — secure, govern, install agents, manage projects, run tests
 Author-email: Conduct AI <hello@conductai.ai>
 License: MIT

{conduct_cli-0.8.2 → conduct_cli-0.8.4}/src/conduct_cli.egg-info/SOURCES.txt

@@ -4,6 +4,7 @@ setup.py
 src/conduct_cli/__init__.py
 src/conduct_cli/api.py
 src/conduct_cli/guard.py
+src/conduct_cli/guard_policy.md
 src/conduct_cli/guardmcp.py
 src/conduct_cli/log_util.py
 src/conduct_cli/main.py