superwise-sentinel-cli 0.2.2__tar.gz → 0.3.0__tar.gz

{superwise_sentinel_cli-0.2.2 → superwise_sentinel_cli-0.3.0}/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [0.2.3](https://gitlab.com/askboss/product/superwise/platform/sentinel-cli/compare/0.2.2...0.2.3) (2026-08-25)
+
+
+### <!-- 2. -->:bug: Bug Fixes
+
+* Windows PowerShell profile ([ac70dd7](https://gitlab.com/askboss/product/superwise/platform/sentinel-cli/commit/ac70dd79a40fe3509bea4d546e1516df59c46012))
+
+## [0.2.2](https://gitlab.com/askboss/product/superwise/platform/sentinel-cli/compare/0.2.1...0.2.2) (2026-08-10)
+
+
+### <!-- 2. -->:bug: Bug Fixes
+
+* add proxy status command ([084b8c5](https://gitlab.com/askboss/product/superwise/platform/sentinel-cli/commit/084b8c547f92ecb59f41e8e939676dd5216f1f37))
+
 ## [0.2.1](https://gitlab.com/askboss/product/superwise/platform/sentinel-cli/compare/0.2.0...0.2.1) (2026-07-26)
 
 

{superwise_sentinel_cli-0.2.2 → superwise_sentinel_cli-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: superwise-sentinel-cli
-Version: 0.2.2
+Version: 0.3.0
 Summary: Sentinel is an LLM proxy that intercepts traffic, enabling you to monitor, secure, and optimize your AI usage. This CLI tool helps you quickly set up traffic interception on this machine
 Requires-Python: <4.0,>=3.11
 Requires-Dist: click>=8.1
@@ -8,3 +8,4 @@ Requires-Dist: docker>=7.0
 Requires-Dist: pydantic-settings>=2.3
 Requires-Dist: pydantic>=2.0
 Requires-Dist: requests>=2.28
+Requires-Dist: tomlkit>=0.12

superwise_sentinel_cli-0.3.0/build.env

@@ -0,0 +1 @@
+RELEASED_VERSION=0.3.0

{superwise_sentinel_cli-0.2.2 → superwise_sentinel_cli-0.3.0}/poetry.lock

@@ -1,4 +1,4 @@
-# This file is automatically @generated by Poetry 2.1.3 and should not be changed by hand.
+# This file is automatically @generated by Poetry 2.4.2 and should not be changed by hand.
 
 [[package]]
 name = "annotated-types"
@@ -658,6 +658,18 @@ urllib3 = ">=1.26,<3"
 socks = ["PySocks (>=1.5.6,!=1.5.7)"]
 use-chardet-on-py3 = ["chardet (>=3.0.2,<8)"]
 
+[[package]]
+name = "tomlkit"
+version = "0.15.1"
+description = "Style preserving TOML library"
+optional = false
+python-versions = ">=3.9"
+groups = ["main"]
+files = [
+    {file = "tomlkit-0.15.1-py3-none-any.whl", hash = "sha256:177a05aece5a8ca5266fd3c448abb47b8d352f09d477d3ca8332db4d89b24304"},
+    {file = "tomlkit-0.15.1.tar.gz", hash = "sha256:e25bbf38843005246210a12982776f27f99cb9be67160e14434d0c0d21ee1e97"},
+]
+
 [[package]]
 name = "typing-extensions"
 version = "4.15.0"
@@ -706,4 +718,4 @@ zstd = ["backports-zstd (>=1.0.0) ; python_version < \"3.14\""]
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.11, <4.0"
-content-hash = "b2291011b34a3b81b2f9f32bc8d7fcc77aeeff74dc5ffd66b6bc16161dc97663"
+content-hash = "751107b15b6abe0656b8c15addf5e196359a9362417eefe9915131cfb47c60b2"

{superwise_sentinel_cli-0.2.2 → superwise_sentinel_cli-0.3.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "superwise-sentinel-cli"
-version = "0.2.2"
+version = "0.3.0"
 description = "Sentinel is an LLM proxy that intercepts traffic, enabling you to monitor, secure, and optimize your AI usage. This CLI tool helps you quickly set up traffic interception on this machine"
 requires-python = ">=3.11, <4.0"
 dependencies = [
@@ -13,6 +13,7 @@ dependencies = [
     "pydantic>=2.0",
     "pydantic-settings>=2.3",
     "requests>=2.28",
+    "tomlkit>=0.12",
 ]
 
 [project.scripts]

{superwise_sentinel_cli-0.2.2 → superwise_sentinel_cli-0.3.0}/src/superwise_sentinel_cli/cli.py

@@ -11,7 +11,9 @@ from superwise_sentinel_cli.auth import device_authorize
 from superwise_sentinel_cli.auth import device_poll
 from superwise_sentinel_cli.config import AppConfig
 from superwise_sentinel_cli.config import CustomProvider
+from superwise_sentinel_cli.config import VALID_APPS
 from superwise_sentinel_cli.config import VALID_PROVIDERS
+from superwise_sentinel_cli.controller import check_invalid_apps
 from superwise_sentinel_cli.controller import check_invalid_providers
 from superwise_sentinel_cli.controller import clear_env_vars
 from superwise_sentinel_cli.controller import get_activation_url
@@ -19,14 +21,19 @@ from superwise_sentinel_cli.controller import get_proxy_status
 from superwise_sentinel_cli.controller import get_running_gateway
 from superwise_sentinel_cli.controller import get_sentinel_url
 from superwise_sentinel_cli.controller import needs_auth
+from superwise_sentinel_cli.controller import parse_apps
 from superwise_sentinel_cli.controller import parse_providers
 from superwise_sentinel_cli.controller import provision_gateway
+from superwise_sentinel_cli.controller import remove_codex_config
+from superwise_sentinel_cli.controller import save_apps
 from superwise_sentinel_cli.controller import save_gateway_url
 from superwise_sentinel_cli.controller import save_providers
+from superwise_sentinel_cli.controller import save_timeout
 from superwise_sentinel_cli.controller import stop_gateway_container
 from superwise_sentinel_cli.controller import update_client_id_and_secret
 from superwise_sentinel_cli.controller import update_env_vars
 from superwise_sentinel_cli.controller import update_gateway_image
+from superwise_sentinel_cli.controller import write_codex_config
 from superwise_sentinel_cli.exceptions import AuthenticationError
 from superwise_sentinel_cli.exceptions import BaseCLIException
 
@@ -65,6 +72,20 @@ def _apply_providers(cfg: AppConfig, spec: str) -> None:
     save_providers(cfg, providers)
 
 
+def _apply_apps(cfg: AppConfig, spec: str) -> None:
+    apps = parse_apps(spec.split())
+    invalid = check_invalid_apps(apps)
+    if invalid:
+        raise click.ClickException(f"Unknown app(s): {', '.join(invalid)}. Valid choices: {', '.join(VALID_APPS)}")
+    save_apps(cfg, apps)
+
+
+def _apply_timeout(cfg: AppConfig, timeout_seconds: int) -> None:
+    if timeout_seconds <= 0:
+        raise click.ClickException(f"Timeout must be a positive number of seconds, got: {timeout_seconds}")
+    save_timeout(cfg, timeout_seconds)
+
+
 @click.group()
 @click.version_option(prog_name="superwise-sentinel-cli", help="Show the version and exit.")
 def main() -> None:
@@ -89,6 +110,7 @@ def quickstart_flow(ctx, new_sentinel: bool) -> None:
     else:
         ctx.invoke(config_url)
     ctx.invoke(config_providers)
+    ctx.invoke(config_apps)
     ctx.invoke(start_proxy)
     click.echo(
         "Sentinel proxy is ready to intercept traffic! Any new session you open will be protected by the Sentinel"
@@ -172,9 +194,21 @@ def gateway() -> None:
 @click.option(
     "--force", is_flag=True, default=False, help="If a local gateway is already running, stop it and start a new one."
 )
+@click.option(
+    "--timeout",
+    "timeout_seconds",
+    type=int,
+    default=None,
+    help="Set the upstream request timeout in seconds for this gateway.",
+)
 @click.pass_context
 def start_gateway(
-    ctx, sentinel_id: uuid.UUID | None, new_sentinel: bool, custom_providers: str | None, force: bool
+    ctx,
+    sentinel_id: uuid.UUID | None,
+    new_sentinel: bool,
+    custom_providers: str | None,
+    force: bool,
+    timeout_seconds: int | None,
 ) -> None:
     """Bootstrap & run a local Sentinel gateway container."""
     cfg = AppConfig.load()
@@ -185,6 +219,9 @@ def start_gateway(
         except Exception as exc:
             raise click.ClickException(f"Invalid --custom-providers: {exc}") from exc
 
+    if timeout_seconds is not None:
+        _apply_timeout(cfg, timeout_seconds)
+
     if force:
         stop_gateway_container()
     else:
@@ -226,6 +263,8 @@ def start_gateway(
         f"Gateway running on {url} with sentinel ID: {cfg.sentinel_id}. Configuration updated to match."
         f"\nTo view Sentinel configuration and metrics, please visit {get_sentinel_url(cfg)}"
     )
+    if timeout_seconds is not None:
+        click.echo(f"Timeout set to {timeout_seconds} seconds.")
     click.echo("Want to test it out? Run 'sentinel test --text \"Your text here\"' to see it in action.")
 
 
@@ -265,16 +304,23 @@ def update_gateway() -> None:
     default=None,
     help="Set providers non-interactively (space-separated, e.g. \"openai anthropic\", or 'all').",
 )
+@click.option(
+    "--apps",
+    "apps_value",
+    default=None,
+    help='Set which apps Sentinel auto-configures, non-interactively (space-separated, e.g. "codex"; '
+    '"" disables auto-configuration).',
+)
 @click.pass_context
-def config(ctx, url_value: str | None, providers_value: str | None) -> None:
-    """Configure gateway URL and LLM providers.
+def config(ctx, url_value: str | None, providers_value: str | None, apps_value: str | None) -> None:
+    """Configure gateway URL, LLM providers, and auto-configured apps.
 
-    Run with --url/--providers for a non-interactive one-liner, e.g.
-    'sentinel config --url https://gateway.example.com --providers "openai anthropic"'.
+    Run with --url/--providers/--apps for a non-interactive one-liner, e.g.
+    'sentinel config --url https://gateway.example.com --providers "openai anthropic" --apps codex'.
     """
     if ctx.invoked_subcommand is not None:
         return
-    if url_value is None and providers_value is None:
+    if url_value is None and providers_value is None and apps_value is None:
         click.echo(ctx.get_help())
         return
     cfg = AppConfig.load()
@@ -282,6 +328,8 @@ def config(ctx, url_value: str | None, providers_value: str | None) -> None:
         _apply_url(cfg, url_value)
     if providers_value is not None:
         _apply_providers(cfg, providers_value)
+    if apps_value is not None:
+        _apply_apps(cfg, apps_value)
     click.echo(f"Configuration updated.")
 
 
@@ -327,6 +375,43 @@ def config_providers(set_value: str | None) -> None:
     save_providers(cfg, providers)
 
 
+@config.command("apps")
+@click.option(
+    "--set",
+    "set_value",
+    default=None,
+    help='Set which apps Sentinel auto-configures, non-interactively (space-separated, e.g. "codex"; '
+    '"" disables auto-configuration).',
+)
+def config_apps(set_value: str | None) -> None:
+    """Set which apps Sentinel auto-configures to use the gateway.
+
+    Supported apps: codex
+
+    Some applications do not rely on env vars for sentinel configuration,
+    Auto-configuring an app means Sentinel edits that app's own config file to point it at the gateway,
+    instead of relying only on env vars. Use 'all' to select every supported app, or pass an empty
+    value ("") to disable auto-configuration entirely and manage each app's config yourself.
+    """
+    cfg = AppConfig.load()
+    if set_value is not None:
+        _apply_apps(cfg, set_value)
+        click.echo(f"Apps to auto-configure updated: {', '.join(cfg.apps) or '(none, auto-configuration disabled)'}")
+        return
+    while True:
+        raw = click.prompt(
+            "Choose the apps you want Sentinel to auto-configure (space separated, 'all', or empty to disable)",
+            default=" ".join(cfg.apps),
+            show_default=True,
+        )
+        try:
+            _apply_apps(cfg, raw)
+        except click.ClickException as exc:
+            echo_error(str(exc))
+            continue
+        break
+
+
 @main.group()
 def proxy() -> None:
     """Toggle traffic interception."""
@@ -344,11 +429,27 @@ def start_proxy(ctx) -> None:
     if not cfg.providers:
         ctx.invoke(config_providers)
 
-    pairs = update_env_vars(AppConfig.load())
+    cfg = AppConfig.load()
+    pairs = update_env_vars(cfg)
 
     for var, u in pairs:
         click.echo(f"  {var}={u}", err=True)
 
+    if write_codex_config(cfg):
+        click.echo("  Codex CLI config (~/.codex/config.toml) updated to route through the gateway.", err=True)
+    elif "openai" not in cfg.providers:
+        click.echo(
+            "  Codex CLI config unchanged: 'openai' isn't in your configured providers. "
+            "Run 'sentinel config providers --set \"openai ...\"' to include it.",
+            err=True,
+        )
+    else:
+        click.echo(
+            "  Codex CLI config unchanged: 'codex' isn't in your configured apps. "
+            "Run 'sentinel config apps --set codex' to enable auto-configuration.",
+            err=True,
+        )
+
 
 @proxy.command("off")
 def stop_proxy() -> None:
@@ -357,16 +458,19 @@ def stop_proxy() -> None:
     if removed:
         click.echo(f"Proxy off: {', '.join(removed)}", err=True)
 
+    if remove_codex_config():
+        click.echo("  Codex CLI config (~/.codex/config.toml) reverted.", err=True)
+
 
 @proxy.command("status")
 def proxy_status() -> None:
     """Show whether traffic interception is currently active."""
-    providers, stale = get_proxy_status()
+    providers, apps, stale = get_proxy_status()
     if not providers:
         click.echo("Proxy is off.")
         return
 
-    click.echo(f"Proxy is on, covering: {', '.join(providers)}")
+    click.echo(f"Proxy is on,\n covering providers: {', '.join(providers)}, \n covering apps: {', '.join(apps)}")
 
     if stale:
         click.echo(

superwise_sentinel_cli-0.3.0/src/superwise_sentinel_cli/codex_profile.py

@@ -0,0 +1,85 @@
+from __future__ import annotations
+
+import os
+from pathlib import Path
+
+import tomlkit
+from superwise_sentinel_cli.exceptions import CodexConfigError
+from tomlkit.exceptions import TOMLKitError
+
+_SENTINEL_PROVIDER_NAME = "sentinel"
+
+
+def _config_path() -> Path:
+    codex_home = Path(os.environ.get("CODEX_HOME", Path.home() / ".codex"))
+    return codex_home / "config.toml"
+
+
+def _load_doc(path: Path) -> tomlkit.TOMLDocument:
+    if not path.exists():
+        return tomlkit.document()
+    try:
+        text = path.read_text()
+    except OSError as exc:
+        raise CodexConfigError(f"Could not read Codex config at {path}: {exc}") from exc
+    try:
+        return tomlkit.parse(text)
+    except TOMLKitError as exc:
+        raise CodexConfigError(f"Could not parse Codex config at {path}: {exc}") from exc
+
+
+def _save_doc(path: Path, doc: tomlkit.TOMLDocument) -> None:
+    try:
+        path.write_text(tomlkit.dumps(doc))
+    except OSError as exc:
+        raise CodexConfigError(f"Could not write Codex config at {path}: {exc}") from exc
+
+
+def write_codex_config(base_url: str) -> None:
+    path = _config_path()
+    try:
+        path.parent.mkdir(parents=True, exist_ok=True)
+    except OSError as exc:
+        raise CodexConfigError(f"Could not create Codex config directory {path.parent}: {exc}") from exc
+    doc = _load_doc(path)
+
+    model_providers = doc.setdefault("model_providers", tomlkit.table())
+    model_providers[_SENTINEL_PROVIDER_NAME] = {
+        "name": _SENTINEL_PROVIDER_NAME,
+        "base_url": f"{base_url.rstrip('/')}/openai/v1",
+        "wire_api": "responses",
+        "requires_openai_auth": True,
+        "supports_websockets": False,
+    }
+    doc["model_provider"] = _SENTINEL_PROVIDER_NAME
+
+    _save_doc(path, doc)
+
+
+def is_codex_configured() -> bool:
+    path = _config_path()
+    if not path.exists():
+        return False
+    doc = _load_doc(path)
+    return doc.get("model_provider") == _SENTINEL_PROVIDER_NAME
+
+
+def remove_codex_config() -> bool:
+    path = _config_path()
+    if not path.exists():
+        return False
+    doc = _load_doc(path)
+    changed = False
+
+    model_providers = doc.get("model_providers")
+    if model_providers is not None and _SENTINEL_PROVIDER_NAME in model_providers:
+        del model_providers[_SENTINEL_PROVIDER_NAME]
+        changed = True
+
+    if doc.get("model_provider") == _SENTINEL_PROVIDER_NAME:
+        del doc["model_provider"]
+        changed = True
+
+    if changed:
+        _save_doc(path, doc)
+    return changed

{superwise_sentinel_cli-0.2.2 → superwise_sentinel_cli-0.3.0}/src/superwise_sentinel_cli/config.py

@@ -37,6 +37,8 @@ _PROVIDER_CONFIG: dict[str, tuple[str, str]] = {
 
 VALID_PROVIDERS = list(_PROVIDER_CONFIG.keys())
 
+VALID_APPS = ["codex"]
+
 
 class CustomProvider(BaseModel):
     provider_name: str
@@ -111,9 +113,11 @@ class AppConfig(BaseSettings):
     superwise_client_secret: str | None = None
     sentinel_id: str | None = None
     providers: list[str] = VALID_PROVIDERS
+    apps: list[str] = VALID_APPS
     sw_api_host: str = "https://api.superwise.ai"
     sw_auth_host: str = "https://authentication.superwise.ai"
     custom_providers: list[CustomProvider] = Field(default_factory=list)
+    upstream_timeout_seconds: int = 1800
 
     FRONTEGG_APP_CLIENT_ID: str = "c9f24fc8-051d-4ba4-84df-15cf7298435d"
     CONTAINER_IMAGE: str = "us-central1-docker.pkg.dev/admina33d6818/sentinel-public/sentinel"

{superwise_sentinel_cli-0.2.2 → superwise_sentinel_cli-0.3.0}/src/superwise_sentinel_cli/controller.py

@@ -5,8 +5,12 @@ import os
 
 import requests
 from superwise_sentinel_cli.auth import authenticate
+from superwise_sentinel_cli.codex_profile import is_codex_configured
+from superwise_sentinel_cli.codex_profile import remove_codex_config
+from superwise_sentinel_cli.codex_profile import write_codex_config as _write_codex_config
 from superwise_sentinel_cli.config import _PROVIDER_CONFIG
 from superwise_sentinel_cli.config import AppConfig
+from superwise_sentinel_cli.config import VALID_APPS
 from superwise_sentinel_cli.config import VALID_PROVIDERS
 from superwise_sentinel_cli.docker_manager import ensure_container_running
 from superwise_sentinel_cli.docker_manager import get_running_gateway_info
@@ -27,12 +31,22 @@ def check_invalid_providers(providers: list[str]) -> list[str]:
     return [p for p in providers if p not in VALID_PROVIDERS]
 
 
+def check_invalid_apps(apps: list[str]) -> list[str]:
+    return [a for a in apps if a not in VALID_APPS]
+
+
 def parse_providers(providers: list[str]) -> list[str]:
     if providers == ["all"]:
         return list(VALID_PROVIDERS)
     return providers
 
 
+def parse_apps(apps: list[str]) -> list[str]:
+    if apps == ["all"]:
+        return list(VALID_APPS)
+    return apps
+
+
 def needs_auth(cfg: AppConfig) -> bool:
     return not cfg.superwise_client_secret or not cfg.superwise_client_id
 
@@ -86,6 +100,7 @@ def get_or_create_local_endpoint(cfg: AppConfig) -> str:
         env["SW_AUTH_HOST"] = cfg.sw_auth_host
     if cfg.custom_providers:
         env["CUSTOM_PROVIDERS"] = json.dumps([p.model_dump() for p in cfg.custom_providers])
+    env["UPSTREAM_TIMEOUT_SECONDS"] = str(cfg.upstream_timeout_seconds)
     return ensure_container_running(environment=env).base_url
 
 
@@ -116,6 +131,16 @@ def save_providers(cfg: AppConfig, providers: list[str]) -> None:
     cfg.save()
 
 
+def save_apps(cfg: AppConfig, apps: list[str]) -> None:
+    cfg.apps = apps
+    cfg.save()
+
+
+def save_timeout(cfg: AppConfig, timeout_seconds: int) -> None:
+    cfg.upstream_timeout_seconds = timeout_seconds
+    cfg.save()
+
+
 def get_running_gateway() -> tuple[str, str | None] | None:
     info = get_running_gateway_info()
     if info is None:
@@ -131,14 +156,23 @@ def update_env_vars(cfg: AppConfig) -> list[tuple[str, str]]:
     return pairs
 
 
+def write_codex_config(cfg: AppConfig) -> bool:
+    if "openai" not in cfg.providers or "codex" not in cfg.apps:
+        return False
+    _write_codex_config(cfg.gateway_url)
+    return True
+
+
 _ENV_VAR_TO_PROVIDER = {env_var: provider for provider, (env_var, _) in _PROVIDER_CONFIG.items()}
+_APP_CONFIGURED_CHECKS = {"codex": is_codex_configured}
 
 
-def get_proxy_status() -> tuple[list[str], bool]:
+def get_proxy_status() -> tuple[list[str], list[str], bool]:
     pairs = read_env_vars()
     providers = [_ENV_VAR_TO_PROVIDER.get(var, var) for var, _ in pairs]
     stale = any(os.environ.get(var) != url for var, url in pairs)
-    return providers, stale
+    apps = [app for app, is_configured in _APP_CONFIGURED_CHECKS.items() if is_configured()]
+    return providers, apps, stale
 
 
 def get_sentinel_url(cfg: AppConfig) -> str:

{superwise_sentinel_cli-0.2.2 → superwise_sentinel_cli-0.3.0}/src/superwise_sentinel_cli/exceptions.py

@@ -19,3 +19,7 @@ class DockerError(BaseCLIException):
 class DockerUnavailableError(DockerError):
     def __init__(self) -> None:
         super().__init__("Cannot connect to Docker daemon — is Docker running?")
+
+
+class CodexConfigError(BaseCLIException):
+    """Raised when the Codex config file cannot be read, parsed, or written."""

{superwise_sentinel_cli-0.2.2 → superwise_sentinel_cli-0.3.0}/src/superwise_sentinel_cli/shell_profile.py

@@ -14,6 +14,30 @@ _STATE_FILE = CONFIG_DIR / "protected_vars.json"
 _SOURCE_MARKER = "# sentinel-env"
 
 
+def _detect_windows_user_profile() -> Path:
+    fallback = (
+        Path(os.environ.get("USERPROFILE", Path.home()))
+        / "Documents"
+        / "WindowsPowerShell"
+        / "Microsoft.PowerShell_profile.ps1"
+    )
+    try:
+        result = subprocess.run(
+            ["powershell", "-NoProfile", "-Command", "$PROFILE"],
+            capture_output=True,
+            text=True,
+            check=False,
+            timeout=5,
+        )
+    except (OSError, subprocess.SubprocessError):
+        return fallback
+
+    output = result.stdout.strip()
+    if result.returncode != 0 or not output:
+        return fallback
+    return Path(output)
+
+
 @dataclass(frozen=True)
 class ShellContext:
     env_file: Path
@@ -30,12 +54,7 @@ class ShellContext:
     def get_platform_context() -> ShellContext:
         if IS_WINDOWS:
             env_file = CONFIG_DIR / "env.ps1"
-            profile_file = (
-                Path(os.environ.get("USERPROFILE", Path.home()))
-                / "Documents"
-                / "WindowsPowerShell"
-                / "Microsoft.PowerShell_profile.ps1"
-            )
+            profile_file = _detect_windows_user_profile()
             source_line = f"{_SOURCE_MARKER}\nif (Test-Path '{env_file}') {{ . '{env_file}' }}"
             return _WindowsShellContext(env_file=env_file, profile_file=profile_file, source_line=source_line)
 

superwise_sentinel_cli-0.2.2/build.env

@@ -1 +0,0 @@
-RELEASED_VERSION=0.2.2