deadpush 0.2.2__tar.gz → 0.2.3__tar.gz

{deadpush-0.2.2 → deadpush-0.2.3}/CHANGELOG.md

@@ -7,6 +7,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.2.3] - 2026-07-04
+
+### Fixed
+- **`protect`/`guard` now default to soft mode (critical first-run fix)**: the
+  default was hardened (`use_hardened = not soft`), so the documented one-liner
+  `pip install deadpush && deadpush protect --daemon` silently triggered a `sudo`
+  password prompt — and on a normal (non-editable) pip install it then failed
+  outright. Soft (same-UID) mode is now the default; hardened mode is opt-in via
+  `--hardened`. This matches the README and `SECURITY.md`.
+- **Hardened mode works from a pip/wheel install**: `_ensure_hardened_venv`
+  assumed a source checkout and looked for a `pyproject.toml` above the package,
+  raising `deadpush source not found at .../site-packages` for every
+  pip-installed user who ran `--hardened`. It now installs the matching version
+  from PyPI (`deadpush==<version>`) when there is no local source tree, and still
+  installs the working tree for dev checkouts.
+
 ## [0.2.2] - 2026-07-04
 
 First public release on PyPI (`0.2.1` was burned by PyPI's deleted-filename

{deadpush-0.2.2 → deadpush-0.2.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: deadpush
-Version: 0.2.2
+Version: 0.2.3
 Summary: Guardrails for the vibe coding era — real-time AI agent guardian with MCP write interception, git hooks, and quarantine
 Project-URL: Homepage, https://github.com/harris-ahmad/deadpush
 Project-URL: Source, https://github.com/harris-ahmad/deadpush

deadpush-0.2.3/deadpush/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.2.3"

{deadpush-0.2.2 → deadpush-0.2.3}/deadpush/cli.py

@@ -49,8 +49,8 @@ def main():
 @click.option("--no-intervention", is_flag=True, help="Warning mode only (no blocking/quarantine)")
 @click.option("--daemon", is_flag=True, help="Run as background daemon")
 @click.option("--strict", is_flag=True, help="Enable strict intervention mode")
-@click.option("--soft", is_flag=True, help="Dev-only: run as your UID (agent can kill guardian)")
-@click.option("--hardened", is_flag=True, help="Run as _deadpush user (default unless --soft)")
+@click.option("--soft", is_flag=True, help="Run as your own UID (this is the default)")
+@click.option("--hardened", is_flag=True, help="Opt into hardened mode: run under a root-owned _deadpush user (requires sudo)")
 def cmd_guard(repo, no_intervention, daemon, strict, soft, hardened):
     """
     Start the AI Agent Guardian.
@@ -60,12 +60,11 @@ def cmd_guard(repo, no_intervention, daemon, strict, soft, hardened):
     from .guard import run_guardian
     import os
     intervention = not no_intervention
-    use_hardened = not soft
-    if hardened:
-        use_hardened = True
     if soft and hardened:
         print_error("Cannot use --soft with --hardened")
         return
+    # Soft (same-UID) is the default; hardened (privilege separation, sudo) is opt-in.
+    use_hardened = bool(hardened)
     if repo:
         os.chdir(Path(repo).resolve())
     run_guardian(intervention=intervention, daemon=daemon, strict=strict, hardened=use_hardened)
@@ -74,8 +73,8 @@ def cmd_guard(repo, no_intervention, daemon, strict, soft, hardened):
 @main.command("protect")
 @click.option("--enable", is_flag=True, help="Enable persistent background guardian (auto-starts daemon after setup)")
 @click.option("--daemon", is_flag=True, help="Start the guardian as a persistent background daemon after performing full setup")
-@click.option("--soft", is_flag=True, help="Dev-only: same-UID guardian (agent can pkill it; not production-safe)")
-@click.option("--hardened", is_flag=True, help="Explicitly request hardened mode (default unless --soft)")
+@click.option("--soft", is_flag=True, help="Same-UID guardian at your own privileges (this is the default)")
+@click.option("--hardened", is_flag=True, help="Opt into hardened mode: privilege separation via a root-owned _deadpush user (requires sudo)")
 @click.option(
     "--allow-self-protect",
     is_flag=True,
@@ -109,12 +108,13 @@ def cmd_protect(enable, daemon, soft, hardened, allow_self_protect):
         return
 
     start_background = bool(enable or daemon)
-    use_hardened = not soft
-    if hardened:
-        use_hardened = True
     if soft and hardened:
         print_error("Cannot use --soft with --hardened")
         raise SystemExit(2)
+    # Soft (same-UID) is the default so the documented `pip install deadpush &&
+    # deadpush protect --daemon` one-liner never silently requires sudo. Hardened
+    # mode (privilege separation via a root-owned _deadpush user) is opt-in.
+    use_hardened = bool(hardened)
 
     # Track failures that make protection incomplete. A production install must
     # exit non-zero (and tell the user) rather than print a warning and pretend
@@ -135,7 +135,8 @@ def cmd_protect(enable, daemon, soft, hardened, allow_self_protect):
             print_error("or use `deadpush protect --soft` for a same-UID (dev-only) guardian.")
             raise SystemExit(1)
     elif start_background:
-        print_warning("Running in --soft mode: guardian uses your UID and can be killed by agents.")
+        print_warning("Running in soft mode (default): the guardian runs at your UID, so an "
+                      "agent could kill it. Use `--hardened` for a root-backed boundary (requires sudo).")
 
     print_header("deadpush Protect", "One-command setup for AI Agent Guardian (persistent background protection)")
 

{deadpush-0.2.2 → deadpush-0.2.3}/deadpush/guard.py

@@ -2647,15 +2647,26 @@ def _ensure_hardened_venv(_sudo, lines: list[str]) -> None:
 
     _sudo(["chown", "-R", "_deadpush:_deadpush", str(venv)])
 
+    # How we populate the hardened venv depends on how deadpush itself was installed:
+    #  - dev/source checkout (a pyproject.toml sits above the package): install the
+    #    working tree so hardened mode tracks local changes.
+    #  - normal pip/wheel install (site-packages has no pyproject.toml): install the
+    #    matching version from PyPI. Previously this path raised "source not found",
+    #    so `deadpush protect --hardened` was broken for every pip-installed user.
     source = _deadpush_source_root()
-    if not (source / "pyproject.toml").exists():
-        raise RuntimeError(f"deadpush source not found at {source}")
+    if (source / "pyproject.toml").exists():
+        target = str(source)
+        origin = f"source {source}"
+    else:
+        from . import __version__ as _dp_version
+        target = f"deadpush=={_dp_version}"
+        origin = f"PyPI ({target})"
 
     pip = str(venv / "bin" / "pip")
     _sudo([pip, "install", "--upgrade", "pip"], check=False)
-    _sudo([pip, "install", str(source)])
+    _sudo([pip, "install", target])
     _sudo(["chown", "-R", "_deadpush:_deadpush", str(venv)])
-    lines.append(f"Installed deadpush into hardened venv from {source}")
+    lines.append(f"Installed deadpush into hardened venv from {origin}")
 
 
 def _setup_hardened_policy(repo_root: Path, _sudo, lines: list[str]) -> None:

deadpush-0.2.2/deadpush/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.2.2"