controlzero 1.13.6__tar.gz → 1.13.7__tar.gz

{controlzero-1.13.6 → controlzero-1.13.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: controlzero
-Version: 1.13.6
+Version: 1.13.7
 Summary: AI agent governance: policies, audit, and observability for tool calls. Works locally with no signup.
 Project-URL: Homepage, https://controlzero.ai
 Project-URL: Documentation, https://docs.controlzero.ai
@@ -28,6 +28,7 @@ Requires-Dist: httpx>=0.25.0
 Requires-Dist: loguru>=0.7.0
 Requires-Dist: pydantic>=2.0.0
 Requires-Dist: pyyaml>=6.0
+Requires-Dist: questionary<3,>=2.0.0
 Requires-Dist: rfc8785<0.2,>=0.1.4
 Requires-Dist: rich>=13.0.0
 Requires-Dist: zstandard>=0.23.0

{controlzero-1.13.6 → controlzero-1.13.7}/controlzero/__init__.py

@@ -41,7 +41,7 @@ from controlzero.hitl.grant_protocol import (
 from controlzero.policy_loader import load_policy
 from controlzero.secrets import SecretRef, SecretStr, secret_ref
 
-__version__ = "1.13.6"
+__version__ = "1.13.7"
 
 __all__ = [
     "Client",

{controlzero-1.13.6 → controlzero-1.13.7}/controlzero/audit_remote.py

@@ -18,6 +18,7 @@ Design constraints:
 """
 
 from __future__ import annotations
+from .hosted_policy import tls_verify
 
 import getpass
 import json
@@ -968,6 +969,7 @@ class RemoteAuditSink(_SpoolWiringMixin):
             content=body,
             headers=headers,
             timeout=FLUSH_TIMEOUT_S,
+            verify=tls_verify(),
         )
         if resp.status_code == 401:
             raise _AuthExpiredError("server returned 401")
@@ -1034,6 +1036,7 @@ class RemoteAuditSink(_SpoolWiringMixin):
                 content=body,
                 headers=headers,
                 timeout=FLUSH_TIMEOUT_S,
+                verify=tls_verify(),
             )
         return post
 
@@ -1192,6 +1195,7 @@ class BearerAuditSink(_SpoolWiringMixin):
             content=body,
             headers=headers,
             timeout=FLUSH_TIMEOUT_S,
+            verify=tls_verify(),
         )
         if resp.status_code == 401:
             raise _AuthExpiredError("server returned 401")
@@ -1244,6 +1248,7 @@ class BearerAuditSink(_SpoolWiringMixin):
                 content=body,
                 headers=headers,
                 timeout=FLUSH_TIMEOUT_S,
+                verify=tls_verify(),
             )
         return post
 

{controlzero-1.13.6 → controlzero-1.13.7}/controlzero/cli/main.py

@@ -270,6 +270,43 @@ def init(template: str, out: str, force: bool):
     click.echo(f"  4. Use it in code: Client(policy_file='{out_path}')")
 
 
+@cli.command("setup", hidden=True)
+@click.option("--api-url", default=None,
+              help="Self-hosted / air-gap backend URL or host (e.g. https://cz.internal). "
+                   "Presence selects self-hosted mode; persisted to config.yaml.")
+@click.option("--api-key", default=None,
+              help="Control Zero API key (cz_live_/cz_test_). Env: CONTROLZERO_API_KEY.")
+@click.option("--agent", "agents", multiple=True,
+              help="Coding agent to wire (repeatable): claude-code, codex-cli, gemini-cli, "
+                   "kiro, cursor, antigravity. Env: CONTROLZERO_SETUP_AGENTS (comma list).")
+@click.option("--tls-ca-bundle", default=None,
+              help="CA bundle path for a self-signed air-gap endpoint. Persisted to config.")
+@click.option("--email", default=None, help="Your work email (Approvals attribution).")
+@click.option("--yes", "assume_yes", is_flag=True,
+              help="Non-interactive: resolve from flags/env, never prompt.")
+@click.pass_context
+def setup(ctx, api_url, api_key, agents, tls_ca_bundle, email, assume_yes):
+    """Guided onboarding: pick SaaS vs self-hosted, validate, wire agent hooks.
+
+    Interactive in a TTY; degrades to flags/env (exit 2 on missing input) in
+    CI/non-TTY. Hidden/beta -- existing install commands are unchanged.
+    """
+    from controlzero.cli.setup_wizard import Flags, run_setup
+
+    code = run_setup(
+        ctx,
+        Flags(
+            api_url=api_url,
+            api_key=api_key,
+            agents=tuple(agents),
+            tls_ca_bundle=tls_ca_bundle,
+            email=email,
+            assume_yes=assume_yes,
+        ),
+    )
+    sys.exit(code)
+
+
 @cli.command()
 @click.argument("policy_file", type=click.Path(exists=True), default="controlzero.yaml")
 def validate(policy_file: str):
@@ -3608,6 +3645,45 @@ def _print_api_key_status(api_key: Optional[str]) -> None:
         click.echo("Tip: Pass --api-key cz_live_xxx to sync audit logs to the dashboard.")
 
 
+def _write_api_url_config(api_url: str) -> None:
+    """Persist ``api_url`` to ~/.controlzero/config.yaml (0600). The resolver
+    reads it (env > config > default), so a self-hosted / air-gap endpoint set
+    once at install reaches the agent hook WITHOUT exporting CONTROLZERO_API_URL
+    into every hook subprocess (the historical air-gap footgun). Scheme+host
+    only; the SDK strips a trailing slash and appends request paths itself."""
+    GLOBAL_POLICY_DIR.mkdir(parents=True, exist_ok=True)
+    try:
+        os.chmod(GLOBAL_POLICY_DIR, 0o700)
+    except OSError:
+        pass
+    config_data: dict = {}
+    if GLOBAL_CONFIG_PATH.exists():
+        try:
+            existing = yaml.safe_load(GLOBAL_CONFIG_PATH.read_text(encoding="utf-8"))
+            if isinstance(existing, dict):
+                config_data = existing
+        except Exception:  # noqa: BLE001
+            pass
+    config_data["api_url"] = api_url.rstrip("/")
+    GLOBAL_CONFIG_PATH.write_text(
+        yaml.safe_dump(config_data, default_flow_style=False),
+        encoding="utf-8",
+    )
+    try:
+        os.chmod(GLOBAL_CONFIG_PATH, 0o600)
+    except OSError:
+        pass
+
+
+def _api_url_install_callback(ctx, param, value):
+    """click callback for the shared --api-url install option. Persists the URL
+    at install time; expose_value=False keeps it off the command signature so no
+    install function needs an api_url parameter."""
+    if value:
+        _write_api_url_config(value)
+    return value
+
+
 def _bind_api_key_for_install(
     api_key: str,
     product: str,
@@ -3683,6 +3759,13 @@ def install():
     default=None,
     help="Your work email. Required for Approvals so the backend knows who's at the keyboard when the API key is shared across a team. Stored at ~/.controlzero/config.yaml.",
 )
+@click.option(
+    "--api-url",
+    default=None,
+    expose_value=False,
+    callback=_api_url_install_callback,
+    help="Base URL of a self-hosted / air-gap Control Zero backend (e.g. https://cz.internal). Persisted to ~/.controlzero/config.yaml so the hook targets it; overrides the SaaS default. env CONTROLZERO_API_URL still wins.",
+)
 def install_claude_code(force: bool, merge: bool, settings: Optional[str], api_key: Optional[str], email: Optional[str]):
     """Install controlzero as a Claude Code PreToolUse hook.
 
@@ -3873,6 +3956,13 @@ def install_claude_code(force: bool, merge: bool, settings: Optional[str], api_k
     default=None,
     help="Your work email. Required for Approvals so the backend knows who's at the keyboard when the API key is shared across a team.",
 )
+@click.option(
+    "--api-url",
+    default=None,
+    expose_value=False,
+    callback=_api_url_install_callback,
+    help="Base URL of a self-hosted / air-gap Control Zero backend (e.g. https://cz.internal). Persisted to ~/.controlzero/config.yaml so the hook targets it; overrides the SaaS default. env CONTROLZERO_API_URL still wins.",
+)
 def install_gemini_cli(force: bool, merge: bool, settings: Optional[str], api_key: Optional[str], email: Optional[str]):
     """Install controlzero as a Gemini CLI pre-tool-call hook.
 
@@ -4085,6 +4175,13 @@ def install_gemini_cli(force: bool, merge: bool, settings: Optional[str], api_ke
     default=None,
     help="Your work email. Required for Approvals so the backend knows who's at the keyboard when the API key is shared across a team.",
 )
+@click.option(
+    "--api-url",
+    default=None,
+    expose_value=False,
+    callback=_api_url_install_callback,
+    help="Base URL of a self-hosted / air-gap Control Zero backend (e.g. https://cz.internal). Persisted to ~/.controlzero/config.yaml so the hook targets it; overrides the SaaS default. env CONTROLZERO_API_URL still wins.",
+)
 def install_codex_cli(force: bool, merge: bool, config: Optional[str], api_key: Optional[str], email: Optional[str]):
     """Install controlzero as a Codex CLI tool approval hook.
 
@@ -4620,6 +4717,13 @@ def _cursor_enforcement_probe(installed_cmd: str) -> tuple:
     help="Your work email. Required for Approvals so the backend knows who is "
     "at the keyboard when the API key is shared across a team.",
 )
+@click.option(
+    "--api-url",
+    default=None,
+    expose_value=False,
+    callback=_api_url_install_callback,
+    help="Base URL of a self-hosted / air-gap Control Zero backend (e.g. https://cz.internal). Persisted to ~/.controlzero/config.yaml so the hook targets it; overrides the SaaS default. env CONTROLZERO_API_URL still wins.",
+)
 def install_cursor(
     force: bool,
     merge: bool,
@@ -4834,6 +4938,13 @@ def install_cursor(
     default=None,
     help="Your work email. Required for Approvals so the backend knows who's at the keyboard when the API key is shared across a team.",
 )
+@click.option(
+    "--api-url",
+    default=None,
+    expose_value=False,
+    callback=_api_url_install_callback,
+    help="Base URL of a self-hosted / air-gap Control Zero backend (e.g. https://cz.internal). Persisted to ~/.controlzero/config.yaml so the hook targets it; overrides the SaaS default. env CONTROLZERO_API_URL still wins.",
+)
 def install_antigravity(
     force: bool,
     merge: bool,
@@ -6264,6 +6375,13 @@ def _run_kiro_uninstall(
     is_flag=True,
     help="Print what would change without writing anything to disk.",
 )
+@click.option(
+    "--api-url",
+    default=None,
+    expose_value=False,
+    callback=_api_url_install_callback,
+    help="Base URL of a self-hosted / air-gap Control Zero backend (e.g. https://cz.internal). Persisted to ~/.controlzero/config.yaml so the hook targets it; overrides the SaaS default. env CONTROLZERO_API_URL still wins.",
+)
 def install_kiro(
     surface: str,
     workspace: Optional[str],