[Kaap10]

Summary

• Detect non-interactive stdin (sys.stdin.isatty()) and handle (EOFError, KeyboardInterrupt) in vulnogram-api-setup, printing a clean error pointing to --pmc <project> instead of an unhandled traceback.
• Protect resolve_from_address() against EOFError when prompting for an ASF account in a non-interactive shell without --from-address.
• Prioritize --pmc <project> first in expired-token hints and documentation across skills and tool adapters.

Type of change

• Skill change (.claude/skills/<name>/) — eval fixtures updated below
• Tool / bridge contract (tools/<system>/*.md)
• Python package (tools/*/ with pyproject.toml)
• Groovy reference impl
• Cross-cutting (RFC, AGENTS.md, sandbox, privacy-LLM)
• Documentation (docs/, README.md, CONTRIBUTING.md)
• Project template (projects/_template/)
• CI / dev loop (prek, workflows, validators)
• Other:

Test plan

• Added unit tests in tools/cve-tool-vulnogram/oauth-api/tests/test_setup_session.py:
  • test_paste_prompt_without_tty_aborts_cleanly
  • test_paste_prompt_eof_aborts_cleanly
  • test_resolve_from_address_eof_aborts_cleanly
• pytest test_setup_session.py (30 passed)
• pytest test_issue_sync_rules.py (37 passed)
• pytest test_cve_allocate.py (95 passed)
• uv run ruff check and uv run ruff format --check passed cleanly

RFC-AI-0004 compliance

• HITL — any new mutation is gated on explicit user confirmation
• Sandbox — no new unrestricted host access; network reach declared in the adapter
• Vendor neutrality — placeholders (<PROJECT>, <tracker>, <upstream>, <security-list>) used in all skill / tool prose (the check-placeholders prek hook is the mechanical gate)
• Conversational + correctable — agentic-override path documented if behaviour is adopter-tunable
• Write-access discipline — no autonomous outbound messages; drafts only, sent on confirmation
• Privacy LLM — private content does not reach a non-approved LLM; redactor invoked where needed

Linked issues

Closes #1733

Notes for reviewers (optional)

Run from an agent shell escape (such as Claude Code's !), getpass raised EOFError because stdin lacked a controlling terminal. The browser-approval flow (--pmc <project>) works in the same environment. This PR intercepts the error, exits with status 1, and guides the operator to --pmc.

[potiuk]

Thanks @Kaap10, the EOF handling fixes #1733. I pushed one small fixup commit (4647683) instead of a review round trip:

• Dropped the sys.stdin.isatty() pre-check (and the autouse _interactive_stdin fixture and its test). getpass reads from /dev/tty first and falls back to stdin only when no terminal can be opened, so a non-tty stdin does not mean there is no terminal: the check rejected redirected runs that still had a working tty. The except EOFError already covers the #1733 case.
• The no-terminal hint no longer loops. With --pmc, the paste prompt is only reached when the server has no browser approval, so the hint now says to pass --token <token> there instead of re-running with --pmc. A new test covers that fallback.
• Ctrl-C exits as before. Catching KeyboardInterrupt reported "No terminal" for an interrupt at a working terminal, so both prompts now catch only EOFError.
• README: the "Re-running setup is a 30-second operation" sentence now leads with the --pmc <project> browser approval.

ruff and the oauth-api tests (177) pass locally.

---

This review was drafted by an AI-assisted tool and
confirmed by an Apache Magpie maintainer. The maintainer
approving this PR has read the findings and signed off. If
something feels off, please reply on the PR and a maintainer
will follow up.

More on how Apache Magpie handles maintainer review:
Contributing guide.