conduct-cli 0.9.5__tar.gz → 0.9.7__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/PKG-INFO +1 -1
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/pyproject.toml +1 -1
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/guard.py +14 -2
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/main.py +22 -1
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli.egg-info/PKG-INFO +1 -1
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_proxy_env.py +39 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_switch.py +61 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/README.md +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/setup.cfg +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/setup.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/__init__.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/api.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/guard_policy.md +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/guardmcp.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/hooks/__init__.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/hooks/base.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/hooks/posttooluse.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/hooks/precompact.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/hooks/pretooluse.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/hooks/session_parser.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/hooks/session_report_push.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/hooks/session_start.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/hooks/stop.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/log_util.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/mcp_server.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/memory.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/paxel.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli/tool_groups.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli.egg-info/SOURCES.txt +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli.egg-info/dependency_links.txt +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli.egg-info/entry_points.txt +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli.egg-info/requires.txt +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/src/conduct_cli.egg-info/top_level.txt +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_advisory_and_hook.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_api_client.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_bash_operator_signature.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_bash_scan_target.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_blast_radius.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_cli_matrix.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_cmd_run.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_command_word_matcher.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_conductguard_mcp_stdio.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_drain_daemon_health.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_guard_approvals.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_guard_policy.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_guard_savings.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_hook_dispatch.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_instruction_files.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_journal_drain.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_log_util.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_proxy_coverage.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_report_tool_coverage.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_signed_policy.py +0 -0
- {conduct_cli-0.9.5 → conduct_cli-0.9.7}/tests/test_token_lifecycle.py +0 -0
|
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
|
|
|
4
4
|
|
|
5
5
|
[project]
|
|
6
6
|
name = "conduct-cli"
|
|
7
|
-
version = "0.9.
|
|
7
|
+
version = "0.9.7"
|
|
8
8
|
description = "CLI for Conduct AI — secure, govern, install agents, manage projects, run tests"
|
|
9
9
|
readme = "README.md"
|
|
10
10
|
license = { text = "MIT" }
|
|
@@ -1086,13 +1086,25 @@ def cmd_guard_join(args):
|
|
|
1086
1086
|
)
|
|
1087
1087
|
|
|
1088
1088
|
|
|
1089
|
+
def _read_conduct_env_var(name: str) -> str:
|
|
1090
|
+
# ponytail: fall back to ~/.conduct/env so proxy detection is truthful
|
|
1091
|
+
# right after `conduct login`, before the user sources the file.
|
|
1092
|
+
try:
|
|
1093
|
+
for line in (Path.home() / ".conduct" / "env").read_text().splitlines():
|
|
1094
|
+
if line.startswith(f"export {name}="):
|
|
1095
|
+
return line.split("=", 1)[1].strip().strip('"').strip("'")
|
|
1096
|
+
except Exception:
|
|
1097
|
+
pass
|
|
1098
|
+
return ""
|
|
1099
|
+
|
|
1100
|
+
|
|
1089
1101
|
def _is_anthropic_proxied() -> bool:
|
|
1090
|
-
url = os.environ.get("ANTHROPIC_BASE_URL", "")
|
|
1102
|
+
url = os.environ.get("ANTHROPIC_BASE_URL", "") or _read_conduct_env_var("ANTHROPIC_BASE_URL")
|
|
1091
1103
|
return "conductai.ai" in url or "conduct" in url.lower()
|
|
1092
1104
|
|
|
1093
1105
|
|
|
1094
1106
|
def _is_openai_proxied() -> bool:
|
|
1095
|
-
url = os.environ.get("OPENAI_BASE_URL", "")
|
|
1107
|
+
url = os.environ.get("OPENAI_BASE_URL", "") or _read_conduct_env_var("OPENAI_BASE_URL")
|
|
1096
1108
|
return "conductai.ai" in url or "conduct" in url.lower()
|
|
1097
1109
|
|
|
1098
1110
|
|
|
@@ -576,7 +576,19 @@ def cmd_login(args):
|
|
|
576
576
|
cfg.pop("api_key", None)
|
|
577
577
|
_atomic_write(CONFIG_PATH, cfg)
|
|
578
578
|
|
|
579
|
-
|
|
579
|
+
# Fetch workspaces so we can display the current one by name and nudge
|
|
580
|
+
# the user if their account has more than one (cross-surface switch drift).
|
|
581
|
+
try:
|
|
582
|
+
_hdrs = {"Authorization": f"Bearer {result['agent_token']}", "Content-Type": "application/json"}
|
|
583
|
+
_workspaces = api.req("GET", f"{api_url}/projects", _hdrs) or []
|
|
584
|
+
except Exception:
|
|
585
|
+
_workspaces = []
|
|
586
|
+
_current = next((w for w in _workspaces if str(w.get("id")) == str(result["workspace_id"])), None)
|
|
587
|
+
_name = (_current or {}).get("name") or ""
|
|
588
|
+
if _name:
|
|
589
|
+
print(f"{GREEN}✓ Logged in{RESET} — workspace {BOLD}{_name}{RESET} {GRAY}({str(result['workspace_id'])[:8]}…){RESET}")
|
|
590
|
+
else:
|
|
591
|
+
print(f"{GREEN}✓ Logged in{RESET} — workspace {GRAY}{result['workspace_id']}{RESET}")
|
|
580
592
|
|
|
581
593
|
# Auto-sync: register hooks + pull policy
|
|
582
594
|
try:
|
|
@@ -588,6 +600,15 @@ def cmd_login(args):
|
|
|
588
600
|
except Exception:
|
|
589
601
|
pass
|
|
590
602
|
|
|
603
|
+
# Nudge if the account has multiple workspaces — the web UI and CLI hold
|
|
604
|
+
# workspace context independently, so users routinely forget which one
|
|
605
|
+
# the CLI is now targeting.
|
|
606
|
+
if len(_workspaces) > 1:
|
|
607
|
+
_others = [w.get("name","") for w in _workspaces if str(w.get("id")) != str(result["workspace_id"])]
|
|
608
|
+
_preview = ", ".join(o for o in _others[:3] if o)
|
|
609
|
+
print(f"\n {GRAY}You have {len(_workspaces)} workspaces. This CLI now targets:{RESET} {BOLD}{_name or result['workspace_id']}{RESET}")
|
|
610
|
+
print(f" {GRAY}Switch with:{RESET} {CYAN}conduct switch \"<name>\"{RESET} {GRAY}(others: {_preview}){RESET}")
|
|
611
|
+
|
|
591
612
|
|
|
592
613
|
def cmd_agents(args):
|
|
593
614
|
server, workspace_id, token = _require_auth(args)
|
|
@@ -170,3 +170,42 @@ def test_windows_prefers_ps7_profile_when_no_wps5_exists(tmp_path, monkeypatch):
|
|
|
170
170
|
assert rc == ps7
|
|
171
171
|
assert ps7.exists()
|
|
172
172
|
assert not wps5.exists()
|
|
173
|
+
|
|
174
|
+
|
|
175
|
+
# ---------------------------------------------------------------------------
|
|
176
|
+
# Regression: _is_anthropic_proxied / _is_openai_proxied must fall back to
|
|
177
|
+
# ~/.conduct/env when the env var is missing from the current process.
|
|
178
|
+
# `conduct login` writes the file but does not re-source itself, so the
|
|
179
|
+
# per-tool coverage table used to report `✗ Not routed` right after login
|
|
180
|
+
# even though future shells will route correctly.
|
|
181
|
+
# ---------------------------------------------------------------------------
|
|
182
|
+
|
|
183
|
+
@pytestmark_posix
|
|
184
|
+
def test_is_anthropic_proxied_falls_back_to_env_file(tmp_path, monkeypatch):
|
|
185
|
+
_redirect_home(tmp_path, monkeypatch)
|
|
186
|
+
monkeypatch.delenv("ANTHROPIC_BASE_URL", raising=False)
|
|
187
|
+
(tmp_path / ".conduct").mkdir(exist_ok=True)
|
|
188
|
+
(tmp_path / ".conduct" / "env").write_text(
|
|
189
|
+
'export ANTHROPIC_BASE_URL="https://api.conductai.ai/proxy"\n'
|
|
190
|
+
'export ANTHROPIC_API_KEY="cond_agt_test"\n'
|
|
191
|
+
)
|
|
192
|
+
assert guard._is_anthropic_proxied() is True
|
|
193
|
+
|
|
194
|
+
|
|
195
|
+
@pytestmark_posix
|
|
196
|
+
def test_is_openai_proxied_falls_back_to_env_file(tmp_path, monkeypatch):
|
|
197
|
+
_redirect_home(tmp_path, monkeypatch)
|
|
198
|
+
monkeypatch.delenv("OPENAI_BASE_URL", raising=False)
|
|
199
|
+
(tmp_path / ".conduct").mkdir(exist_ok=True)
|
|
200
|
+
(tmp_path / ".conduct" / "env").write_text(
|
|
201
|
+
'export OPENAI_BASE_URL="https://api.conductai.ai/proxy/openai"\n'
|
|
202
|
+
)
|
|
203
|
+
assert guard._is_openai_proxied() is True
|
|
204
|
+
|
|
205
|
+
|
|
206
|
+
@pytestmark_posix
|
|
207
|
+
def test_is_anthropic_proxied_false_when_no_env_and_no_file(tmp_path, monkeypatch):
|
|
208
|
+
_redirect_home(tmp_path, monkeypatch)
|
|
209
|
+
monkeypatch.delenv("ANTHROPIC_BASE_URL", raising=False)
|
|
210
|
+
# No ~/.conduct/env written
|
|
211
|
+
assert guard._is_anthropic_proxied() is False
|
|
@@ -227,3 +227,64 @@ def test_switch_accepts_api_url_key(tmp_path, capsys):
|
|
|
227
227
|
out = capsys.readouterr().out
|
|
228
228
|
assert "Not logged in" not in out
|
|
229
229
|
assert "Engineering" in out
|
|
230
|
+
|
|
231
|
+
|
|
232
|
+
# ---------------------------------------------------------------------------
|
|
233
|
+
# Regression: `conduct login` prints workspace name (not just UUID) and a
|
|
234
|
+
# switch-hint when the account has more than one workspace. Cross-surface
|
|
235
|
+
# workspace drift (web-UI-switched, CLI still on old) was invisible before.
|
|
236
|
+
# ---------------------------------------------------------------------------
|
|
237
|
+
|
|
238
|
+
def test_login_shows_name_and_nudges_when_multiple_workspaces(tmp_path, capsys):
|
|
239
|
+
from conduct_cli import main as m
|
|
240
|
+
|
|
241
|
+
cfg_path = tmp_path / "config.json"
|
|
242
|
+
cfg_path.write_text(json.dumps({}))
|
|
243
|
+
args = _make_args(server=None, token=None)
|
|
244
|
+
|
|
245
|
+
fake_result = {
|
|
246
|
+
"agent_token": "cond_agt_testkey",
|
|
247
|
+
"workspace_id": "ef0a7e36-0000-0000-0000-000000000001",
|
|
248
|
+
}
|
|
249
|
+
|
|
250
|
+
with (
|
|
251
|
+
patch.object(m, "CONFIG_PATH", cfg_path),
|
|
252
|
+
patch.object(m, "_web_login_flow", return_value=fake_result),
|
|
253
|
+
patch.object(m.api, "req", return_value=_fake_workspaces()),
|
|
254
|
+
patch("conduct_cli.guard.cmd_guard_sync", return_value=None),
|
|
255
|
+
):
|
|
256
|
+
m.cmd_login(args)
|
|
257
|
+
|
|
258
|
+
out = capsys.readouterr().out
|
|
259
|
+
# Current workspace displayed by name (not just UUID)
|
|
260
|
+
assert "Engineering" in out
|
|
261
|
+
# Nudge appears because account has >1 workspace
|
|
262
|
+
assert "conduct switch" in out
|
|
263
|
+
# Other workspace names surfaced in the preview
|
|
264
|
+
assert "Marketing" in out or "Eng Backup" in out
|
|
265
|
+
|
|
266
|
+
|
|
267
|
+
def test_login_omits_nudge_when_single_workspace(tmp_path, capsys):
|
|
268
|
+
from conduct_cli import main as m
|
|
269
|
+
|
|
270
|
+
cfg_path = tmp_path / "config.json"
|
|
271
|
+
cfg_path.write_text(json.dumps({}))
|
|
272
|
+
args = _make_args(server=None, token=None)
|
|
273
|
+
|
|
274
|
+
fake_result = {
|
|
275
|
+
"agent_token": "cond_agt_testkey",
|
|
276
|
+
"workspace_id": "ef0a7e36-0000-0000-0000-000000000001",
|
|
277
|
+
}
|
|
278
|
+
single_ws = [{"id": "ef0a7e36-0000-0000-0000-000000000001", "name": "Only", "owner_id": "u1", "workflow_count": 0}]
|
|
279
|
+
|
|
280
|
+
with (
|
|
281
|
+
patch.object(m, "CONFIG_PATH", cfg_path),
|
|
282
|
+
patch.object(m, "_web_login_flow", return_value=fake_result),
|
|
283
|
+
patch.object(m.api, "req", return_value=single_ws),
|
|
284
|
+
patch("conduct_cli.guard.cmd_guard_sync", return_value=None),
|
|
285
|
+
):
|
|
286
|
+
m.cmd_login(args)
|
|
287
|
+
|
|
288
|
+
out = capsys.readouterr().out
|
|
289
|
+
assert "Only" in out
|
|
290
|
+
assert "conduct switch" not in out
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|