cycode 3.16.2.dev2__py3-none-any.whl → 3.16.3.dev2__py3-none-any.whl

cycode/__init__.py

@@ -5,4 +5,4 @@ import time as _time
 # end-to-end scan duration from the moment the user actually triggered it.
 _BOOT_WALL: float = _time.time()
 
-__version__ = '3.16.2.dev2'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
+__version__ = '3.16.3.dev2'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

cycode/cli/apps/ai_guardrails/session_start_command.py

@@ -1,8 +1,5 @@
 """Handle AI guardrails session start: auth, conversation creation, session context."""
 
-import os
-import platform
-import socket
 import sys
 from typing import TYPE_CHECKING, Annotated, Optional
 
@@ -15,6 +12,13 @@ from cycode.cli.apps.auth.auth_common import get_authorization_info
 from cycode.cli.apps.auth.auth_manager import AuthManager
 from cycode.cli.exceptions.handle_auth_errors import handle_auth_exception
 from cycode.cli.utils.get_api_client import get_ai_security_manager_client
+from cycode.cli.utils.host_info import (
+    get_hostname,
+    get_last_login_user,
+    get_os_version,
+    get_platform_name,
+    get_serial_number,
+)
 from cycode.logger import get_logger
 
 if TYPE_CHECKING:
@@ -23,14 +27,6 @@ if TYPE_CHECKING:
 logger = get_logger('AI Guardrails')
 
 
-def _get_logged_in_user() -> Optional[str]:
-    """Best-effort OS account name (whoami). None if it can't be resolved."""
-    try:
-        return os.getlogin()
-    except Exception:
-        return None
-
-
 def _report_session_context(ai_client: 'AISecurityManagerClient', ide: IDE, user_email: Optional[str]) -> None:
     """Report IDE session context to the AI security manager. Never raises."""
     try:
@@ -38,9 +34,11 @@ def _report_session_context(ai_client: 'AISecurityManagerClient', ide: IDE, user
         if not global_config_file and not enabled_plugins:
             return
         ai_client.report_session_context(
-            hostname=socket.gethostname(),
-            platform=platform.system(),
-            logged_in_user=_get_logged_in_user(),
+            hostname=get_hostname(),
+            platform_name=get_platform_name(),
+            os_version=get_os_version(),
+            serial_number=get_serial_number(),
+            last_login_user=get_last_login_user(),
             global_config_file=global_config_file,
             enabled_plugins=enabled_plugins,
             user_email=user_email,

cycode/cli/apps/configure/configure_command.py

@@ -1,7 +1,12 @@
 from typing import Optional
 
 from cycode.cli.apps.configure.consts import CONFIGURATION_MANAGER, CREDENTIALS_MANAGER
-from cycode.cli.apps.configure.messages import get_credentials_update_result_message, get_urls_update_result_message
+from cycode.cli.apps.configure.messages import (
+    get_credentials_environment_variables_override_warning,
+    get_credentials_update_result_message,
+    get_urls_environment_variables_override_warning,
+    get_urls_update_result_message,
+)
 from cycode.cli.apps.configure.prompts import (
     get_api_url_input,
     get_app_url_input,
@@ -73,3 +78,14 @@ def configure_command() -> None:
         console.print(get_urls_update_result_message())
     if credentials_updated or oidc_credentials_updated:
         console.print(get_credentials_update_result_message())
+
+    # Warn about environment variables that override the configured file values, regardless of whether anything was
+    # updated. The env vars take precedence on every subsequent call, so configuring the file alone has no effect while
+    # they are set.
+    urls_override_warning = get_urls_environment_variables_override_warning()
+    if urls_override_warning:
+        console.print(f'[yellow]Warning:[/] {urls_override_warning}')
+
+    credentials_override_warning = get_credentials_environment_variables_override_warning()
+    if credentials_override_warning:
+        console.print(f'[yellow]Warning:[/] {credentials_override_warning}')

cycode/cli/apps/configure/messages.py

@@ -1,3 +1,5 @@
+from typing import Optional
+
 from cycode.cli.apps.configure.consts import (
     CONFIGURATION_MANAGER,
     CREDENTIALS_ARE_SET_IN_ENVIRONMENT_VARIABLES_MESSAGE,
@@ -14,11 +16,14 @@ def _are_credentials_exist_in_environment_variables() -> bool:
 
 
 def get_credentials_update_result_message() -> str:
-    success_message = CREDENTIALS_UPDATED_SUCCESSFULLY_MESSAGE.format(filename=CREDENTIALS_MANAGER.get_filename())
+    return CREDENTIALS_UPDATED_SUCCESSFULLY_MESSAGE.format(filename=CREDENTIALS_MANAGER.get_filename())
+
+
+def get_credentials_environment_variables_override_warning() -> Optional[str]:
     if _are_credentials_exist_in_environment_variables():
-        return f'{success_message}. {CREDENTIALS_ARE_SET_IN_ENVIRONMENT_VARIABLES_MESSAGE}'
+        return CREDENTIALS_ARE_SET_IN_ENVIRONMENT_VARIABLES_MESSAGE
 
-    return success_message
+    return None
 
 
 def _are_urls_exist_in_environment_variables() -> bool:
@@ -28,10 +33,13 @@ def _are_urls_exist_in_environment_variables() -> bool:
 
 
 def get_urls_update_result_message() -> str:
-    success_message = URLS_UPDATED_SUCCESSFULLY_MESSAGE.format(
+    return URLS_UPDATED_SUCCESSFULLY_MESSAGE.format(
         filename=CONFIGURATION_MANAGER.global_config_file_manager.get_filename()
     )
+
+
+def get_urls_environment_variables_override_warning() -> Optional[str]:
     if _are_urls_exist_in_environment_variables():
-        return f'{success_message}. {URLS_ARE_SET_IN_ENVIRONMENT_VARIABLES_MESSAGE}'
+        return URLS_ARE_SET_IN_ENVIRONMENT_VARIABLES_MESSAGE
 
-    return success_message
+    return None

cycode/cli/utils/host_info.py

@@ -0,0 +1,127 @@
+import getpass
+import platform
+import re
+import socket
+import subprocess
+from typing import Optional
+
+from cycode.logger import get_logger
+
+logger = get_logger('HOST INFO')
+
+_SUBPROCESS_TIMEOUT_SEC = 5
+
+_PLATFORM_NAMES = {'Darwin': 'macOS', 'Windows': 'Windows', 'Linux': 'Linux'}
+
+
+def _run(command: list, timeout: int = _SUBPROCESS_TIMEOUT_SEC) -> Optional[str]:
+    """Run a command and return its stripped stdout. Never raises; returns None on any error."""
+    try:
+        result = subprocess.run(command, capture_output=True, text=True, timeout=timeout)  # noqa: S603
+        return result.stdout.strip() or None
+    except Exception as e:
+        logger.debug('Failed to run command %s', command, exc_info=e)
+        return None
+
+
+def _read_text_file(path: str) -> Optional[str]:
+    """Read and strip a text file. Never raises; returns None if it can't be read."""
+    try:
+        with open(path) as text_file:
+            return text_file.read().strip() or None
+    except OSError:
+        return None
+
+
+def get_hostname() -> Optional[str]:
+    try:
+        return socket.gethostname() or None
+    except Exception as e:
+        logger.debug('Failed to resolve hostname', exc_info=e)
+        return None
+
+
+def get_platform_name() -> Optional[str]:
+    try:
+        system = platform.system()
+        return _PLATFORM_NAMES.get(system, system or None)
+    except Exception as e:
+        logger.debug('Failed to resolve platform name', exc_info=e)
+        return None
+
+
+def get_os_version() -> Optional[str]:
+    try:
+        system = platform.system()
+        if system == 'Darwin':
+            return platform.mac_ver()[0] or None
+        if system == 'Windows':
+            return platform.win32_ver()[1] or platform.version() or None
+        if system == 'Linux':
+            return _get_linux_os_version()
+        return platform.release() or None
+    except Exception as e:
+        logger.debug('Failed to resolve OS version', exc_info=e)
+        return None
+
+
+def _get_linux_os_version() -> Optional[str]:
+    freedesktop_os_release = getattr(platform, 'freedesktop_os_release', None)  # Python 3.10+
+    if freedesktop_os_release is not None:
+        try:
+            version_id = freedesktop_os_release().get('VERSION_ID')
+            if version_id:
+                return version_id
+        except OSError:
+            pass
+
+    os_release = _read_text_file('/etc/os-release')  # Python 3.9 fallback: parse manually
+    if os_release:
+        for line in os_release.splitlines():
+            if line.startswith('VERSION_ID='):
+                return line.split('=', 1)[1].strip().strip('"') or None
+
+    return platform.release() or None
+
+
+def get_last_login_user() -> Optional[str]:
+    try:
+        return getpass.getuser() or None
+    except Exception as e:
+        logger.debug('Failed to resolve last login user', exc_info=e)
+        return None
+
+
+def get_serial_number() -> Optional[str]:
+    try:
+        system = platform.system()
+        if system == 'Darwin':
+            return _get_macos_serial_number()
+        if system == 'Windows':
+            return _get_windows_serial_number()
+    except Exception as e:
+        logger.debug('Failed to resolve serial number', exc_info=e)
+    return None
+
+
+def _get_macos_serial_number() -> Optional[str]:
+    output = _run(['ioreg', '-c', 'IOPlatformExpertDevice', '-d', '2'])
+    if not output:
+        return None
+    match = re.search(r'"IOPlatformSerialNumber"\s*=\s*"([^"]+)"', output)
+    return match.group(1) if match else None
+
+
+def _get_windows_serial_number() -> Optional[str]:
+    import pythoncom  # from pywin32
+    import win32com.client  # from pywin32
+
+    pythoncom.CoInitialize()
+    try:
+        wmi_service = win32com.client.GetObject('winmgmts:')
+        for bios in wmi_service.InstancesOf('Win32_BIOS'):
+            serial = bios.SerialNumber
+            return serial.strip() if serial else None
+    finally:
+        pythoncom.CoUninitialize()
+    return None

cycode/cyclient/ai_security_manager_client.py

@@ -94,8 +94,10 @@ class AISecurityManagerClient:
     def report_session_context(
         self,
         hostname: Optional[str] = None,
-        platform: Optional[str] = None,
-        logged_in_user: Optional[str] = None,
+        platform_name: Optional[str] = None,
+        os_version: Optional[str] = None,
+        serial_number: Optional[str] = None,
+        last_login_user: Optional[str] = None,
         global_config_file: Optional[dict] = None,
         enabled_plugins: Optional[dict] = None,
         user_email: Optional[str] = None,
@@ -103,8 +105,10 @@ class AISecurityManagerClient:
         """Report session context to the backend."""
         body: dict = {
             'hostname': hostname,
-            'platform': platform,
-            'logged_in_user': logged_in_user,
+            'platform_name': platform_name,
+            'os_version': os_version,
+            'serial_number': serial_number,
+            'last_login_user': last_login_user,
             'user_email': user_email,
             'global_config_file': global_config_file,
             'enabled_plugins': enabled_plugins,

{cycode-3.16.2.dev2.dist-info → cycode-3.16.3.dev2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cycode
-Version: 3.16.2.dev2
+Version: 3.16.3.dev2
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 License-Expression: MIT
 License-File: LICENCE

{cycode-3.16.2.dev2.dist-info → cycode-3.16.3.dev2.dist-info}/RECORD

@@ -1,4 +1,4 @@
-cycode/__init__.py,sha256=TPXx0wp6alM3cFNI8n6pfC8C_-Xb_SwK_vj3SNoR8jQ,396
+cycode/__init__.py,sha256=a02DIWGLRttTo50tdayCtRosK8xi_hs0uTrsl0YxH90,396
 cycode/__main__.py,sha256=Z3bD5yrA7yPvAChcADQrqCaZd0ChGI1gdiwALwbWJ6U,104
 cycode/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/app.py,sha256=AlR2durAEbsa47PDfIj7JtMvJDWA_Dq6wPtVuMJYSCs,10250
@@ -23,7 +23,7 @@ cycode/cli/apps/ai_guardrails/scan/policy.py,sha256=39s8hnxgjny1l6XAO59wsRcAlpW-
 cycode/cli/apps/ai_guardrails/scan/scan_command.py,sha256=-Gl7cHELF1wlwLGno6ZVukFtK6NI6Z3-dTpIOsz8ors,6079
 cycode/cli/apps/ai_guardrails/scan/types.py,sha256=lDttkYFBfOkdMEEaRbq1IT2QTK0R-7Ht3T8vZdyB3b4,1038
 cycode/cli/apps/ai_guardrails/scan/utils.py,sha256=KVfX-NrcM-QW4quLtoNqfmz4GF0FlDs-TkqUOu1hAWM,2057
-cycode/cli/apps/ai_guardrails/session_start_command.py,sha256=WzFE_12sxDq2lrVmMN_G2q_d9pfbsEO3CvjJXBcbFI0,3684
+cycode/cli/apps/ai_guardrails/session_start_command.py,sha256=vZKcThgD6qLpPrTlnE9dyakLUti-EcGgOw1zL35gZ5U,3682
 cycode/cli/apps/ai_guardrails/status_command.py,sha256=Uqss68TEPCYPXpLix6Bh-4J3g-khxWsAqlIGYH5x4bQ,3203
 cycode/cli/apps/ai_guardrails/uninstall_command.py,sha256=dOmePfZmlHAPy2zEJM1yMtSuDqvzDwtqgmLKYK-T9PI,2698
 cycode/cli/apps/ai_remediation/__init__.py,sha256=8vYthY9RQeJqEni3AIF5sryz8n-XJQ6VNqG4aEFBAdY,553
@@ -39,9 +39,9 @@ cycode/cli/apps/auth/auth_common.py,sha256=bfQXqfv5bcYmc7njWOnG1VGzRU-C7spBv48gx
 cycode/cli/apps/auth/auth_manager.py,sha256=ePRI1Nl8HVwcST77LAMuzu4tm4TTIX5b-MACB59LUrQ,4286
 cycode/cli/apps/auth/models.py,sha256=XVWq_9e6tQ9farEs_ks2Hv8B_qJdbuZciO7oe8wdgoY,96
 cycode/cli/apps/configure/__init__.py,sha256=J-XJyC3zFt8vP5LrMoHCExkR8MWFfegt-PE0T28cr40,539
-cycode/cli/apps/configure/configure_command.py,sha256=GzhdI4dmZuIxkhlf8pc579xm6YP4IqQz9PZONB-bwZw,3005
+cycode/cli/apps/configure/configure_command.py,sha256=IOklkJBONN3tG3FjM_m3T5AsPjUbGDuy1Wc0XGN_zOM,3773
 cycode/cli/apps/configure/consts.py,sha256=wm3FV5eHRrg77zQnCRExAvBMfqnWdxb33sIdJeTgOK0,1130
-cycode/cli/apps/configure/messages.py,sha256=hZ4gFyvzPsjXKkYADmdtWl_OcIdZQLIsUSzUrThWMW8,1455
+cycode/cli/apps/configure/messages.py,sha256=DYepPy8AuP6XJaPppmWeYg4M37SVi0YRpNDeHdlWDy0,1547
 cycode/cli/apps/configure/prompts.py,sha256=z1KZiVJOlFeWKawFE_RyMOitekzuZqKu9aV6KYGbuBU,1889
 cycode/cli/apps/ignore/__init__.py,sha256=hk1jyJ5ecDeNxHu7gbbbugNiMMS5Y0wmFhi2FiokSHo,220
 cycode/cli/apps/ignore/ignore_command.py,sha256=eHKR9AKvUqwLi_q1M4cM8iYqhW8yb-y37xPMyUI1qUc,5767
@@ -172,6 +172,7 @@ cycode/cli/utils/binary_utils.py,sha256=PxP-rVJ1lEiOam-DQ1XU68oWtfwup4sCFHXv54cf
 cycode/cli/utils/enum_utils.py,sha256=h_VTCfJ-0hnhwDsEznmx56rJrCb5FQ8u6PrI6p8MP3E,187
 cycode/cli/utils/get_api_client.py,sha256=wwHabfVCDbFjcIwOn5Raho8MEPiOAgkHlGUEfXKpl8U,3542
 cycode/cli/utils/git_proxy.py,sha256=FPHMBiyLFK9X9vKYpKySRKJH6Dc9Cb3nO241Q95dASE,2911
+cycode/cli/utils/host_info.py,sha256=yaLGifwoLTCzac5kG-Il_-KmKJALnzr8xpA_0Gy33Sk,3957
 cycode/cli/utils/ignore_utils.py,sha256=cODqhnOHA2kRo8rMY0YcmcKkmXNPOC9UTCmFu62RRqE,15567
 cycode/cli/utils/jwt_utils.py,sha256=EGI-0CKhCGY8hIcZ9b9diq9hqtOUf8Ha8ukeVJIf974,818
 cycode/cli/utils/path_utils.py,sha256=U5te1unzhs9pnU5d9BWExgFWElHQkgKvFxKiOF-lp-w,3245
@@ -186,7 +187,7 @@ cycode/cli/utils/version_checker.py,sha256=0f5PaTk02ZkDxzBqZOeMV9mU_CWcx6HKW80jU
 cycode/cli/utils/yaml_utils.py,sha256=R-tqzl0C-zoa42rS7nfWeHu3GJ0jpbQUyyqYYU2hleM,1818
 cycode/config.py,sha256=jHORGZQcAXkAGSf2XreC-RQoc8sdNWja69QKtPWTbWo,1044
 cycode/cyclient/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-cycode/cyclient/ai_security_manager_client.py,sha256=EhPzP_jia9c9hw98UgHBemwFKluuhg5AJVAfngXkWfM,4543
+cycode/cyclient/ai_security_manager_client.py,sha256=_LDU8B6_3DuMT-I-K5-Ok2E-NR30aJbD7L0f8UGDDPQ,4730
 cycode/cyclient/ai_security_manager_service_config.py,sha256=83pQzgOb93JW6E-dznJkI4c0NEXmQRlx9YZKMmjVwp8,808
 cycode/cyclient/auth_client.py,sha256=TwbmZ358Ancf-Q-IZolvfljZ8691_6botsqd0R0PLPk,2105
 cycode/cyclient/base_token_auth_client.py,sha256=mn5580d7A8Z2_zcdFKIJk78ADK7mViwTcV-4QCpRCGo,4369
@@ -207,8 +208,8 @@ cycode/cyclient/report_client.py,sha256=Scq30NeJPzgXv0hPLO1U05AdE9i_2iu6cIrSKpEJ
 cycode/cyclient/scan_client.py,sha256=6TK5FQkfrvV7PHqRnUzEn1PBNd2oPYVamvIixcUfe3c,16755
 cycode/cyclient/scan_config_base.py,sha256=mXsPZGYCtp85rv5GIige40yQZXuRcEKUW-VQJ0vgFzk,1201
 cycode/logger.py,sha256=EfZGRK6VC5rE_LAjIcRrHFiQCueylCDXoG6bvGkrIME,2111
-cycode-3.16.2.dev2.dist-info/METADATA,sha256=CC3YyBNUd9NwPhNpUcRppj6esmXMXe_WvYVu4i54C0g,89245
-cycode-3.16.2.dev2.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
-cycode-3.16.2.dev2.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
-cycode-3.16.2.dev2.dist-info/licenses/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
-cycode-3.16.2.dev2.dist-info/RECORD,,
+cycode-3.16.3.dev2.dist-info/METADATA,sha256=DBWx5RMjw0IZkbH7-ltfRf7zZxQ8NyjE6iczyICIUk0,89245
+cycode-3.16.3.dev2.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
+cycode-3.16.3.dev2.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
+cycode-3.16.3.dev2.dist-info/licenses/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
+cycode-3.16.3.dev2.dist-info/RECORD,,