mirror of
https://github.com/crewAIInc/crewAI.git
synced 2026-09-23 11:20:13 +00:00
Two CodeRabbit findings on the credential-routing change. - _origin() accepted http://, so a trusted-but-cleartext AMP would still have received the bearer token in a header. The credential now also requires an encrypted connection: HTTPS, or plain HTTP to this machine (localhost, its subdomains, loopback), which is the rule TraceGrantClient already applies to collector grants. Anything else reads the run anonymously and says which of the two reasons applies. - A verdict's grades were checked with isinstance(grade, int), which accepts True and 6; both would have printed as real grades and let the command exit 0. A grade is now an exact int in 1..5, or null. Tests: a trusted http origin gets no credential, localhost does, the encryption rule itself over nine origins, and four more malformed verdicts (bool, 6, 0, 4.5). 56 passed. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
crewai-cli
CLI for CrewAI — scaffold, run, deploy and manage AI agent crews without installing the full framework.
Installation
pip install crewai-cli
This pulls in crewai-core (shared utilities) but not the crewai framework
itself, so commands that don't need a crew loaded — crewai version,
crewai login, crewai org list, crewai config *, crewai traces *,
crewai create, crewai template * — work standalone.
Commands that load a user's crew or flow (crewai run, crewai train,
crewai test, crewai chat, crewai replay, crewai reset-memories,
crewai deploy push, crewai tool publish) require crewai to be installed
in the project's environment. They print a clear error if it is missing.
To install both at once:
pip install crewai[cli]