10xscale-agentflow-cli 0.2.6__tar.gz → 0.2.8__tar.gz

{10xscale_agentflow_cli-0.2.6 → 10xscale_agentflow_cli-0.2.8}/10xscale_agentflow_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: 10xscale-agentflow-cli
-Version: 0.2.6
+Version: 0.2.8
 Summary: CLI and API for 10xscale AgentFlow
 Author-email: 10xscale <contact@10xscale.ai>
 Maintainer-email: Shudipto Trafder <shudiptotrafder@gmail.com>
@@ -314,6 +314,107 @@ name = generator.generate_name()
 ```
 
 See the [Thread Name Generator Guide](./docs/thread-name-generator.md) for custom implementations.
+
+## Security
+
+AgentFlow CLI provides enterprise-grade security features for production deployments.
+
+### Security Features
+
+- ✅ **Authentication** - Built-in JWT and custom authentication backends
+- ✅ **Authorization** - Resource-based access control with extensible backends
+- ✅ **Request Limits** - DoS protection with configurable size limits (default 10MB)
+- ✅ **Error Sanitization** - Production-safe error messages preventing information disclosure
+- ✅ **Log Sanitization** - Automatic redaction of sensitive data (tokens, passwords, secrets)
+- ✅ **Security Warnings** - Startup validation for insecure configurations
+- ✅ **HTTPS Ready** - SSL/TLS support with secure headers
+
+### Production Security Checklist
+
+Before deploying to production, ensure:
+
+```bash
+# Required: Set production mode
+MODE=production
+
+# Required: Strong JWT secret (32+ characters)
+JWT_SECRET_KEY=<generate-with-secrets.token_urlsafe(32)>
+
+# Required: Disable debug mode
+IS_DEBUG=false
+
+# Required: Specific CORS origins (not *)
+ORIGINS=https://yourdomain.com
+
+# Required: Specific allowed hosts (not *)
+ALLOWED_HOST=yourdomain.com
+
+# Recommended: Disable API docs
+DOCS_PATH=
+REDOCS_PATH=
+
+# Recommended: Configure request size limit
+MAX_REQUEST_SIZE=10485760  # 10MB default
+```
+
+### Quick Security Setup
+
+**1. Enable JWT Authentication:**
+```json
+{
+  "auth": "jwt"
+}
+```
+
+**2. Implement Authorization:**
+```python
+# auth/rbac_backend.py
+from agentflow_cli.src.app.core.auth.authorization import AuthorizationBackend
+
+class RBACAuthorizationBackend(AuthorizationBackend):
+    async def authorize(self, user, resource, action, resource_id=None, **context):
+        role = user.get("role", "viewer")
+        # Implement your authorization logic
+        return role == "admin" or (role == "developer" and action == "read")
+```
+
+**3. Configure in agentflow.json:**
+```json
+{
+  "auth": "jwt",
+  "authorization": {
+    "path": "auth.rbac_backend:RBACAuthorizationBackend"
+  }
+}
+```
+
+### Security Validation
+
+AgentFlow automatically validates your configuration and warns about security issues:
+
+```
+⚠️  SECURITY WARNING: CORS ORIGINS='*' in production.
+   Set ORIGINS to specific domains.
+
+⚠️  SECURITY WARNING: DEBUG mode enabled in production!
+   Set IS_DEBUG=false
+```
+
+### Comprehensive Security Guide
+
+For detailed security documentation, threat model, best practices, and deployment guidelines, see:
+
+📖 **[SECURITY.md](./SECURITY.md)** - Complete Security Guide
+
+Topics covered:
+- Threat model and attack vectors
+- Authentication and authorization patterns
+- Production deployment checklist
+- Docker and Kubernetes security configurations
+- Security testing and monitoring
+- Incident response procedures
+- Vulnerability reporting
+
 ## Deployment
 
 See the [Deployment Guide](./docs/deployment.md) for complete deployment instructions.

{10xscale_agentflow_cli-0.2.6 → 10xscale_agentflow_cli-0.2.8}/10xscale_agentflow_cli.egg-info/SOURCES.txt

@@ -1,6 +1,6 @@
+ActionPlan.md
 MANIFEST.in
 README.md
-Task.md
 agentflow.json
 plan.md
 pyproject.toml
@@ -36,8 +36,10 @@ agentflow_cli/src/app/worker.py
 agentflow_cli/src/app/core/__init__.py
 agentflow_cli/src/app/core/auth/__init__.py
 agentflow_cli/src/app/core/auth/auth_backend.py
+agentflow_cli/src/app/core/auth/authorization.py
 agentflow_cli/src/app/core/auth/base_auth.py
 agentflow_cli/src/app/core/auth/jwt_auth.py
+agentflow_cli/src/app/core/auth/permissions.py
 agentflow_cli/src/app/core/config/__init__.py
 agentflow_cli/src/app/core/config/graph_config.py
 agentflow_cli/src/app/core/config/sentry_config.py
@@ -50,7 +52,14 @@ agentflow_cli/src/app/core/exceptions/general_exception.py
 agentflow_cli/src/app/core/exceptions/handle_errors.py
 agentflow_cli/src/app/core/exceptions/resources_exceptions.py
 agentflow_cli/src/app/core/exceptions/user_exception.py
+agentflow_cli/src/app/core/middleware/__init__.py
+agentflow_cli/src/app/core/middleware/request_limits.py
+agentflow_cli/src/app/core/middleware/security_headers.py
+agentflow_cli/src/app/core/utils/__init__.py
+agentflow_cli/src/app/core/utils/log_sanitizer.py
 agentflow_cli/src/app/routers/__init__.py
+agentflow_cli/src/app/routers/a2a.py
+agentflow_cli/src/app/routers/a2ui.py
 agentflow_cli/src/app/routers/setup_router.py
 agentflow_cli/src/app/routers/checkpointer/__init__.py
 agentflow_cli/src/app/routers/checkpointer/router.py