installgate 0.1.0__tar.gz → 0.1.2__tar.gz

{installgate-0.1.0 → installgate-0.1.2}/.gitignore

@@ -3,6 +3,7 @@
 .env.local
 .env.*.local
 .pypirc
+.cursor/mcp.json
 
 # Python
 .venv/

{installgate-0.1.0 → installgate-0.1.2}/AGENTS.md

@@ -175,7 +175,7 @@ substitute     remediate/                   closed set, pin, diff. Engine re-che
 
 `mcp_server/check.py` `check()` is the orchestrator and the only function that builds a `GateVerdict`. Every stage above is implemented except `remediate/sandbox.py` (T15, cut). Edit the module that already owns the job. Do not add a second module for the same job.
 
-Who is doing what, and what is already done: `docs/sprint.md`.
+Who is doing what: the table above. Task list: `docs/prd-ssd.md`, section 13.
 
 ## 7. Policy rules (`engine/policy.yaml`)
 

installgate-0.1.2/PKG-INFO

@@ -0,0 +1,96 @@
+Metadata-Version: 2.5
+Name: installgate
+Version: 0.1.2
+Summary: Pre-install trust gate for coding agents. Check pip/npm before install; never runs the package.
+Project-URL: Homepage, https://github.com/Seavleu/installgate
+Project-URL: Documentation, https://github.com/Seavleu/installgate#readme
+Project-URL: Source, https://github.com/Seavleu/installgate
+Project-URL: Issues, https://github.com/Seavleu/installgate/issues
+Author: InstallGate contributors
+License-Expression: Apache-2.0
+License-File: LICENSE
+Requires-Python: >=3.11
+Requires-Dist: fastapi
+Requires-Dist: httpx
+Requires-Dist: mcp
+Requires-Dist: openai
+Requires-Dist: packaging
+Requires-Dist: pydantic>=2
+Requires-Dist: pyyaml
+Requires-Dist: rapidfuzz
+Requires-Dist: typer
+Requires-Dist: uvicorn[standard]
+Provides-Extra: dev
+Requires-Dist: mypy; extra == 'dev'
+Requires-Dist: pre-commit; extra == 'dev'
+Requires-Dist: pytest; extra == 'dev'
+Requires-Dist: pytest-asyncio; extra == 'dev'
+Requires-Dist: respx; extra == 'dev'
+Requires-Dist: ruff; extra == 'dev'
+Requires-Dist: types-pyyaml; extra == 'dev'
+Provides-Extra: tavily
+Requires-Dist: tavily-python; extra == 'tavily'
+Description-Content-Type: text/markdown
+
+# InstallGate
+
+Pre-install trust gate for coding agents. You pass one `pip install` or `npm install` command. InstallGate reads **registry metadata only** (never installs), applies a YAML policy, and returns **ALLOW**, **REVIEW**, or **BLOCK**.
+
+A clean ALLOW is pinned (`name==version`) and skips the model. BLOCK needs hard deterministic evidence. The model may explain; it cannot override policy.
+
+## Install
+
+Python 3.11+.
+
+```bash
+uv tool install installgate
+uv tool update-shell
+```
+
+If you use pipx:
+
+```bash
+pipx install installgate
+```
+
+Then `ig` is on your PATH from any directory (same idea as installing Node, then typing `node`). If a previous `ig` is in the way:
+
+```bash
+uv tool install --force installgate
+```
+
+```bash
+ig --version
+```
+
+## Use
+
+`--no` means check only — it never runs pip/npm.
+
+```bash
+ig --no pip install requests         # ALLOW, pin, no model
+ig --no pip install reqeusts         # BLOCK typo; substitute is pinned requests
+ig --no pip install no-such-pkg-xyz  # BLOCK, no substitute
+```
+
+Exit codes: `0` ALLOW, `1` REVIEW, `2` BLOCK.
+
+Optional keys in the environment (or a `.env` in the current directory):
+
+- `NEBIUS_API_KEY` — explanations on REVIEW/BLOCK (NVIDIA Nemotron on Nebius Token Factory). ALLOW does not need it.
+- `TAVILY_API_KEY` — recent web evidence (untrusted, never a BLOCK).
+
+## MCP
+
+```bash
+uvx --from installgate python -m mcp_server.server
+```
+
+Tool: `check_install`. Argument: `command`.
+
+## Docs
+
+GitHub: [Seavleu/installgate](https://github.com/Seavleu/installgate) (full README, policy, demo).
+Live page: [installgate.installgate-ui.workers.dev](https://installgate.installgate-ui.workers.dev)
+
+License: Apache-2.0

{installgate-0.1.0 → installgate-0.1.2}/README.md

@@ -22,6 +22,62 @@ It does not install the package. It does not run the command it proposes. A bloc
 
 Built for the Nebius x NVIDIA hackathon. The explanation step uses NVIDIA Nemotron on Nebius Token Factory. The decision itself does not.
 
+## Install
+
+Python 3.11+. Package: [`installgate` on PyPI](https://pypi.org/project/installgate/).
+
+```bash
+uv tool install installgate
+uv tool update-shell          # once; then open a new terminal
+ig --version                  # installgate 0.1.2
+```
+
+`pipx install installgate` works if you have pipx. If `ig` already exists on your PATH:
+
+```bash
+uv tool install --force installgate
+```
+
+`--no` checks only. It never runs pip or npm. Press **n** if a prompt appears.
+
+Optional keys in the environment, or a `.env` in the current directory:
+
+```bash
+export NEBIUS_API_KEY=...     # explanations on REVIEW/BLOCK. ALLOW does not need it.
+export TAVILY_API_KEY=...     # optional web evidence; untrusted, never a BLOCK
+```
+
+## Usage
+
+```bash
+ig --no pip install requests              # ALLOW, pin, no model; rerun is cached
+ig --no pip install reqeusts              # BLOCK typo; substitute is pinned requests
+ig --no pip install no-such-pkg-xyz       # BLOCK, no substitute
+ig --no npm install lodash                # ALLOW (exists + pin)
+ig --no npm install totally-fake-npm-xyz  # BLOCK
+ig --no pip install requests numpy        # abort: one package per check
+```
+
+```bash
+ig pip install reqeusts       # same, may prompt [Y/n] on ALLOW
+ig reqeusts                   # same as pip install reqeusts
+ig --json --no pip install requests
+ig --help
+```
+
+Exit: `0` ALLOW, `1` REVIEW, `2` BLOCK.
+
+Wrap your real pip/npm in this shell (ALLOW then runs your pip; REVIEW/BLOCK stop):
+
+```bash
+eval "$(ig hook)"
+pip install reqeusts
+```
+
+From this repo instead of PyPI: `uv tool install --force .`
+
+Agent playbook: [`docs/playbook.md`](docs/playbook.md).
+
 ## What you get back
 
 Every entry point returns the same `GateVerdict`.
@@ -35,18 +91,6 @@ Every entry point returns the same `GateVerdict`.
 | `next_action` | `proceed`, `use_substitute`, `ask_human`, or `abort`. |
 | `receipt` | Tokens, cost, and the cost if every model call had been Ultra. |
 
-```text
-ig --no pip install requests              # ALLOW P9, pin, no model; rerun for ~12ms cache
-ig --no pip install numpy                 # ALLOW P9
-ig --no pip install reqeusts              # BLOCK P1 + substitute requests
-ig --no pip install no-such-pkg-xyz       # BLOCK P1, no substitute
-ig --no npm install lodash                # ALLOW P9
-ig --no npm install totally-fake-npm-xyz  # BLOCK P1
-ig --no npm install express               # ALLOW, or REVIEW if Tavily adds colour
-ig --no pip install requests numpy        # abort: one package
-ig --no uv add numpy                      # abort: unsupported
-```
-
 ## How a check works
 
 ```text
@@ -85,61 +129,21 @@ Every rule runs. The strictest match wins. Policy version `2026-10-30.1`.
 
 An allow requires a pin: version plus sha256, or a Hugging Face revision. Stage 1 attaches the registry pin, so `pip install numpy` can ALLOW. An unpinned package with no findings and no hash is a review. A fresh release of an established project is not P6; a brand-new name is. Release age alone never blocks. npm has no typosquat snapshot; a name that exists and pins still ALLOWs (P9). A name that does not exist BLOCKs (P1).
 
-## Quick start
-
-Requirements: Python 3.11, [uv](https://docs.astral.sh/uv/), and Node 22 with pnpm for the page.
+## Develop from source
 
 ```bash
 uv sync --extra dev
 cp .env.example .env
+source .venv/bin/activate
 ```
 
-Put `NEBIUS_API_KEY` and, if you want web evidence, `TAVILY_API_KEY` in `.env`. The file is never committed. `ig` and `python -m router.smoke` read `.env` from the current directory. A variable already set in the environment wins. The API process does not read that file, so export it before uvicorn, or use Compose, which loads `.env` for the API service:
+`ig` is then on PATH from this venv. Keys in `.env` are read from the current directory. The API process does not load that file unless you export it:
 
 ```bash
 set -a && source .env && set +a
 uv run uvicorn mcp_server.api:app --port 8000
 ```
 
-A clean allow does not need the model key. A review or a block does, if you want an explanation.
-
-## Use it
-
-### Command line
-
-`ig` is not on your PATH until you install the tool (same idea as `node` after installing Node). From this repo:
-
-```bash
-uv tool install .
-export PATH="$HOME/.local/bin:$PATH"   # once; or: uv tool update-shell
-ig --no pip install requests
-```
-
-Anyone else, after we publish to PyPI: `uv tool install installgate` or `pipx install installgate`. Until then: `uv tool install git+https://github.com/Seavleu/installgate`.
-
-The command is `ig` (`installgate` still works). Type the install the way you would type it.
-
-```bash
-ig pip install reqeusts
-ig reqeusts                 # same as pip install reqeusts
-ig npm install lodash
-```
-
-To keep typing `pip install …` and still get a check, once per shell:
-
-```bash
-eval "$(ig hook)"
-pip install reqeusts                 # checked first; the real pip runs only on ALLOW
-```
-
-InstallGate never runs the install itself. The hook is a shell function: on ALLOW it calls your `pip`, on REVIEW or BLOCK it stops.
-
-Exit codes: `0` ALLOW, `1` REVIEW, `2` BLOCK. A pipe stays one JSON document:
-
-```bash
-ig pip install requests | jq .final_verdict
-```
-
 ### HTTP
 
 ```bash
@@ -168,6 +172,14 @@ Open [http://127.0.0.1:3000](http://127.0.0.1:3000). The page calls `/api/check`
 
 The tool name is `check_install`. It takes one `command` string (one package). The JSON is a `GateVerdict` plus `pinned_command` (copy-paste on ALLOW), `substitute_command`, and `decided_by`. Policy always wins. It speaks stdio, from the repo root, so `uv` can see the project:
 
+From PyPI:
+
+```bash
+uvx --from installgate python -m mcp_server.server
+```
+
+From this repo:
+
 ```bash
 uv run python -m mcp_server.server
 ```

{installgate-0.1.0 → installgate-0.1.2}/docs/collaboration.md

@@ -53,7 +53,7 @@ A pass is `7 passed`. These tests mock HTTP. They do not read `.env` and they do
 
 ### 3. Commit the task files
 
-Leave out `.env`, `AGENTS.md`, and `docs/sprint.md` unless that task changed them.
+Leave out `.env` and `AGENTS.md` unless that task changed them.
 
 ```bash
 git add router/README.md router/prompts/explain.txt router/prompts/extract.txt \

{installgate-0.1.0 → installgate-0.1.2}/docs/playbook.md

@@ -83,13 +83,13 @@ No login. One contract for HTTP, MCP, and CLI.
 
 ### Demo host (public, now)
 
-| Use | URL |
-| --- | --- |
-| Page | `https://installgate.installgate-ui.workers.dev` |
-| Check | `POST /api/check` `{"command":"pip install requests"}` |
-| Stream | `POST /api/check/stream` NDJSON stages then the verdict |
-| MCP | `https://installgate.installgate-ui.workers.dev/api/mcp` |
-| Health | `GET /api/health` → `{"ok":true}` |
+| Use    | URL                                                      |
+| ------ | -------------------------------------------------------- |
+| Page   | `https://installgate.installgate-ui.workers.dev`         |
+| Check  | `POST /api/check` `{"command":"pip install requests"}`   |
+| Stream | `POST /api/check/stream` NDJSON stages then the verdict  |
+| MCP    | `https://installgate.installgate-ui.workers.dev/api/mcp` |
+| Health | `GET /api/health` → `{"ok":true}`                        |
 
 Cursor / Claude MCP (remote):
 

{installgate-0.1.0 → installgate-0.1.2}/docs/prd-ssd.md

@@ -1,5 +1,5 @@
 # Product spec
 
-See `AGENTS.md` for rules. Diagrams: `architecture.md`. Demo notes: `demo-script.md`.
+See `AGENTS.md` for rules. Diagrams: `architecture.md`. Demo notes: `playbook.md`.
 
 Paste the full exported PRD here when you have it.

installgate-0.1.2/docs/pypi.md

@@ -0,0 +1,62 @@
+# InstallGate
+
+Pre-install trust gate for coding agents. You pass one `pip install` or `npm install` command. InstallGate reads **registry metadata only** (never installs), applies a YAML policy, and returns **ALLOW**, **REVIEW**, or **BLOCK**.
+
+A clean ALLOW is pinned (`name==version`) and skips the model. BLOCK needs hard deterministic evidence. The model may explain; it cannot override policy.
+
+## Install
+
+Python 3.11+.
+
+```bash
+uv tool install installgate
+uv tool update-shell
+```
+
+If you use pipx:
+
+```bash
+pipx install installgate
+```
+
+Then `ig` is on your PATH from any directory (same idea as installing Node, then typing `node`). If a previous `ig` is in the way:
+
+```bash
+uv tool install --force installgate
+```
+
+```bash
+ig --version
+```
+
+## Use
+
+`--no` means check only — it never runs pip/npm.
+
+```bash
+ig --no pip install requests         # ALLOW, pin, no model
+ig --no pip install reqeusts         # BLOCK typo; substitute is pinned requests
+ig --no pip install no-such-pkg-xyz  # BLOCK, no substitute
+```
+
+Exit codes: `0` ALLOW, `1` REVIEW, `2` BLOCK.
+
+Optional keys in the environment (or a `.env` in the current directory):
+
+- `NEBIUS_API_KEY` — explanations on REVIEW/BLOCK (NVIDIA Nemotron on Nebius Token Factory). ALLOW does not need it.
+- `TAVILY_API_KEY` — recent web evidence (untrusted, never a BLOCK).
+
+## MCP
+
+```bash
+uvx --from installgate python -m mcp_server.server
+```
+
+Tool: `check_install`. Argument: `command`.
+
+## Docs
+
+GitHub: [Seavleu/installgate](https://github.com/Seavleu/installgate) (full README, policy, demo).
+Live page: [installgate.installgate-ui.workers.dev](https://installgate.installgate-ui.workers.dev)
+
+License: Apache-2.0

{installgate-0.1.0 → installgate-0.1.2}/mcp_server/cli.py

@@ -10,6 +10,7 @@ import subprocess
 import sys
 import tempfile
 import time
+from importlib.metadata import PackageNotFoundError, version
 from pathlib import Path
 
 from contracts.contracts import Ecosystem, GateVerdict, Verdict
@@ -26,6 +27,7 @@ Usage:
   ig -y pip install numpy        # run if ALLOW, no prompt
   ig --no pip install numpy      # check only
   ig --json pip install numpy
+  ig --version
 
   eval "$(ig hook)"              # `pip install` checks, then real pip on ALLOW
 
@@ -37,6 +39,13 @@ _INSTALLERS = frozenset(
 )
 
 
+def package_version() -> str:
+    try:
+        return version("installgate")
+    except PackageNotFoundError:
+        return "0.0.0+local"
+
+
 def command_from_argv(argv: list[str]) -> str:
     """Turn argv into one install command. A bare name means `pip install <name>`."""
     if not argv:
@@ -224,6 +233,9 @@ def run(argv: list[str]) -> int:
     if not argv or argv[0] in {"-h", "--help", "help"}:
         print(_HELP, end="")
         return 0 if argv else 2
+    if argv[0] in {"-V", "--version", "version"}:
+        print(f"installgate {package_version()}")
+        return 0
     if argv[0] == "hook":
         print(hook_script(), end="")
         return 0

{installgate-0.1.0 → installgate-0.1.2}/pyproject.toml

@@ -4,9 +4,9 @@ build-backend = "hatchling.build"
 
 [project]
 name = "installgate"
-version = "0.1.0"
-description = "Pre-install trust gate for coding agents"
-readme = "README.md"
+version = "0.1.2"
+description = "Pre-install trust gate for coding agents. Check pip/npm before install; never runs the package."
+readme = "docs/pypi.md"
 license = "Apache-2.0"
 requires-python = ">=3.11"
 authors = [{ name = "InstallGate contributors" }]
@@ -27,6 +27,9 @@ dependencies = [
 
 [project.urls]
 Homepage = "https://github.com/Seavleu/installgate"
+Documentation = "https://github.com/Seavleu/installgate#readme"
+Source = "https://github.com/Seavleu/installgate"
+Issues = "https://github.com/Seavleu/installgate/issues"
 
 [project.scripts]
 ig = "mcp_server.cli:main"

{installgate-0.1.0 → installgate-0.1.2}/remediate/README.md

@@ -7,7 +7,7 @@ Stage 4. Safe substitute. You never run the command.
 | `candidates.py` | Closed set only: alias map, top-n neighbours, HF safetensors sibling, patched docker tag |
 | `pinning.py` | Pin version + sha256 |
 | `diff.py` | `- bad` / `+ safe` command diff |
-| `sandbox.py` | Stretch (T15), cut. Not built: Nebius Sandboxes (`contree-sdk`) document no egress-off setting. See `docs/sprint.md`. |
+| `sandbox.py` | Stretch (T15), cut. Not built: Nebius Sandboxes (`contree-sdk`) document no egress-off setting. |
 
 The model picks a candidate **by id** (`C1`, `C2`, …). A package name it types is discarded and does not appear in the diff. The pick is shown only after the engine re-check ids are passed in. This folder does not run the command and does not call the engine.
 

{installgate-0.1.0 → installgate-0.1.2}/tests/test_cli.py

@@ -12,6 +12,7 @@ from mcp_server.cli import (
     confirm_run,
     exit_code,
     hook_script,
+    package_version,
     proposed_argv,
     run,
     take_flags,
@@ -48,6 +49,16 @@ def test_hook_wraps_pip_and_npm() -> None:
     assert "unalias pip" in text
 
 
+def test_version_prints_the_package_and_does_not_check() -> None:
+    assert run(["--version"]) == 0
+    assert run(["-V"]) == 0
+    assert run(["version"]) == 0
+
+
+def test_package_version_is_nonempty() -> None:
+    assert package_version()
+
+
 def test_take_flags_strips_leading_only() -> None:
     json, assume, rest = take_flags(["-y", "pip", "install", "numpy"])
     assert json is False and assume is True and rest == ["pip", "install", "numpy"]

installgate-0.1.0/.cursor/mcp.json

@@ -1,16 +0,0 @@
-{
-  "mcpServers": {
-    "nebius": {
-      "type": "stdio",
-      "command": "/opt/homebrew/bin/uvx",
-      "args": [
-        "--refresh-package",
-        "nebius-mcp-server",
-        "nebius-mcp-server@git+https://github.com/nebius/mcp-server@main"
-      ],
-      "env": {
-        "SAFE_MODE": "true"
-      }
-    }
-  }
-}