Metadata-Version: 2.4
Name: tenantguard-cli
Version: 0.1.1
Summary: PyPI wrapper for TenantGuard, a tenant-isolation security-audit CLI for self-hosted multi-tenant AI-agent platforms. Downloads and runs the official prebuilt Go binary from GitHub Releases.
Project-URL: Homepage, https://github.com/RudrenduPaul/TenantGuard
Project-URL: Repository, https://github.com/RudrenduPaul/TenantGuard
Project-URL: Bug Tracker, https://github.com/RudrenduPaul/TenantGuard/issues
Project-URL: Changelog, https://github.com/RudrenduPaul/TenantGuard/blob/main/CHANGELOG.md
Project-URL: Author - Rudrendu Paul, https://github.com/RudrenduPaul
Author: Rudrendu Paul
License-Expression: Apache-2.0
License-File: LICENSE
Keywords: ai-agent,cli,hipaa,multi-tenant,opa,rego,sarif,security,tenant-isolation
Classifier: Development Status :: 4 - Beta
Classifier: Environment :: Console
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.9
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Security
Classifier: Topic :: Utilities
Requires-Python: >=3.9
Requires-Dist: sigstore<5,>=4.0
Provides-Extra: dev
Requires-Dist: build<2,>=1.0; extra == 'dev'
Requires-Dist: pytest<9,>=7.0; extra == 'dev'
Requires-Dist: twine<7,>=5.0; extra == 'dev'
Description-Content-Type: text/markdown

# tenantguard-cli (PyPI)

PyPI wrapper for [TenantGuard](https://github.com/RudrenduPaul/TenantGuard),
a tenant-isolation security-audit CLI for self-hosted multi-tenant AI-agent
platforms. This package does not reimplement TenantGuard in Python -- it
downloads the official prebuilt `tenantguard` binary for your platform from
TenantGuard's [GitHub Releases](https://github.com/RudrenduPaul/TenantGuard/releases)
(published by goreleaser), verifies its SHA-256 checksum, caches it locally,
and execs it.

## Install

```bash
pip install tenantguard-cli
```

or run without installing:

```bash
uvx tenantguard-cli scan --demo
```

## Usage

```bash
tenantguard scan --demo
tenantguard scan --format sarif
tenantguard scan --format json
```

See the main [TenantGuard README](https://github.com/RudrenduPaul/TenantGuard#readme)
for the full rule reference (TA01-TA16), SARIF/JSON output schema, and the
GitHub Action.

## How this differs from the npm package

The `tenantguard-cli` npm package ships six platform-specific
`optionalDependencies`, each embedding a cosign-verified binary at publish
time -- no network access happens on an end user's `npm install`. A single
pure-Python wheel can't embed six platform binaries the same way, so this
package instead downloads the matching release archive the first time you
run `tenantguard`, verifies its SHA-256 against the release's
`checksums.txt`, and caches the verified binary locally (per package
version) -- every run after that is offline. See `src/tenantguard_cli/cli.py`
for the exact verification logic.

Other distribution channels for TenantGuard: Homebrew, `go install`, and
GitHub Releases directly -- see the main README for details.

## License

Apache-2.0, matching the main TenantGuard repository.
