actshield 0.9.0__tar.gz

actshield-0.9.0/MANIFEST.in

@@ -0,0 +1,2 @@
+include actshield/py.typed
+recursive-include actshield/static *

actshield-0.9.0/PKG-INFO

@@ -0,0 +1,57 @@
+Metadata-Version: 2.4
+Name: actshield
+Version: 0.9.0
+Summary: Enterprise Security Control Plane SDK for Autonomous and Multi-Agent AI Systems
+Author: ActShield Security Team
+License: Apache-2.0
+Project-URL: Homepage, https://github.com/agentguard/agentguard
+Project-URL: Documentation, https://agentguard.dev/docs
+Project-URL: Repository, https://github.com/agentguard/agentguard
+Project-URL: Issue Tracker, https://github.com/agentguard/agentguard/issues
+Project-URL: Changelog, https://github.com/agentguard/agentguard/blob/main/CHANGELOG.md
+Keywords: ai-security,multi-agent,provenance,causal-tracing,policy-enforcement,llm-security,taint-tracking,threat-modeling,sdk,cli,security-control-plane,agent-security
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: Intended Audience :: System Administrators
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Topic :: System :: Monitoring
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Operating System :: OS Independent
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Typing :: Typed
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+Requires-Dist: pydantic>=2.5.0
+Requires-Dist: typing-extensions>=4.8.0
+Provides-Extra: cli
+Requires-Dist: rich>=13.7.0; extra == "cli"
+Requires-Dist: typer>=0.12.0; extra == "cli"
+Requires-Dist: click>=8.1.0; extra == "cli"
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0.0; extra == "dev"
+Requires-Dist: pytest-asyncio>=0.23.0; extra == "dev"
+Requires-Dist: ruff>=0.4.0; extra == "dev"
+Requires-Dist: mypy>=1.10.0; extra == "dev"
+Requires-Dist: build>=1.0.0; extra == "dev"
+Provides-Extra: server
+Requires-Dist: fastapi>=0.110.0; extra == "server"
+Requires-Dist: uvicorn[standard]>=0.29.0; extra == "server"
+Requires-Dist: httpx>=0.27.0; extra == "server"
+Requires-Dist: pydantic-settings>=2.0.0; extra == "server"
+Provides-Extra: dashboard
+Requires-Dist: actshield[cli,server]; extra == "dashboard"
+Provides-Extra: openai
+Requires-Dist: openai>=1.30.0; extra == "openai"
+Provides-Extra: gemini
+Requires-Dist: google-generativeai>=0.7.0; extra == "gemini"
+Provides-Extra: anthropic
+Requires-Dist: anthropic>=0.28.0; extra == "anthropic"
+Provides-Extra: ollama
+Requires-Dist: httpx>=0.27.0; extra == "ollama"
+Provides-Extra: all
+Requires-Dist: actshield[anthropic,cli,gemini,ollama,openai,server]; extra == "all"

actshield-0.9.0/actshield/__init__.py

@@ -0,0 +1,439 @@
+"""ActShield: Security Control Plane SDK for Autonomous and Multi-Agent AI Systems.
+
+Quick start::
+
+    from actshield import ActShield
+
+    guard = ActShield(mode="strict")
+
+    @guard.protect(tool="customer_db.read", sensitivity="critical")
+    async def read_customer_data():
+        ...
+
+    # Threat modeling
+    from actshield.threatmodel import ThreatAnalyzer
+    analyzer = ThreatAnalyzer()
+    result = analyzer.analyze()
+"""
+
+from actshield.agents.agent import Agent
+from actshield.agents.identity import AgentCapability, AgentIdentity, AgentStatus, AgentTrustLevel
+from actshield.client import ActShield
+from actshield.config import ActShieldConfig
+from actshield.context.context import Context
+from actshield.context.provenance import ContextSource, ContextTrustLevel, Provenance, ProvenanceHop, SanitizationRecord
+from actshield.context.taint import TaintState
+from actshield.decisions.decision import DecisionAction, SecurityDecision
+from actshield.delegation.authority import AuthorityGrant
+from actshield.delegation.delegation import Delegation, DelegationScope
+from actshield.approval.approval import (
+    ApprovalManager,
+    ApprovalRequest,
+    ApprovalStatus,
+)
+from actshield.gateway.http import HTTPGateway, HTTPInterceptedResponse
+from actshield.gateway.mcp import MCPGateway, MCPMessage
+
+from actshield.integrations.ai_secura import (
+    AISecuraClient,
+    LocalAISecuraAdapter,
+    SecurityAnalysis,
+    SecurityContext,
+    SecurityReasoner,
+)
+from actshield.providers.base import (
+    AnalysisResult,
+    HealthReport,
+    SecurityAIProvider,
+)
+from actshield.providers.registry import (
+    ProviderRegistry,
+    get_provider_registry,
+)
+from actshield.integrations.ai_secura_analysis import (
+    AISecuraAnalysis,
+    ThreatSeverity,
+    IntentAlignment,
+    AIRecommendation,
+    AttackTechnique,
+    EvidenceTriad,
+    AuthorityAnalysis,
+    TaintAnalysis,
+)
+from actshield.integrations.ollama_adapter import OllamaAISecuraAdapter
+from actshield.llm_config import LLMConfig
+from actshield.offensive import (
+    AttackCase,
+    AttackType,
+    ExpectedBehavior,
+    SafetyClass,
+    AttackTarget,
+    TargetEnvironment,
+    TargetRegistry,
+    target_registry,
+    SafetyValidationResult,
+    SafetyValidator,
+    safety_validator,
+    AttackStatus,
+    ExecutionEvidence,
+    OffensiveAttackResult,
+    AttackEvaluator,
+    MutationEngine,
+    MutationStrategy,
+    AttackCampaign,
+    CampaignSummary,
+    AttackCorpus,
+    attack_corpus,
+    AIAttackGenerator,
+    VulnerableDemoTarget,
+    OffensiveEngine,
+    SecurityAnalysisEvidence,
+    AdaptiveEngine,
+    CampaignMemory,
+)
+from actshield.integrations.apiris import (
+    APIAnalysis,
+    APIIntelligence,
+    APIRISClient,
+    LocalAPIRISAdapter,
+)
+from actshield.persistence.siem import SIEMExporter, SIEMFormat
+from actshield.persistence.storage import (
+    PostgresStorage,
+    SQLiteStorage,
+    StorageBackend,
+)
+from actshield.policy.evaluator import PolicyEvaluator
+from actshield.policy.intent import (
+    DeterministicIntentAnalyzer,
+    IntentAlignmentResult,
+    IntentAlignmentStatus,
+    IntentAnalyzer,
+)
+from actshield.policy.policy import Policy, PolicyRule, RuleCondition
+from actshield.risk.models import RiskAssessment, RiskFactorBreakdown, RiskLevel, RiskSignal
+from actshield.tasks.task import Task, TaskContext, TaskStatus
+from actshield.tools.interceptor import protected_tool
+from actshield.tools.tool import (
+    Resource,
+    SensitivityLevel,
+    ToolDefinition,
+    ToolRequest,
+    ToolResult,
+)
+from actshield.tracing.correlation import (
+    CorrelationContext,
+    SpanScope,
+    generate_id,
+    get_current_agent_id,
+    get_current_context,
+    get_current_delegation_id,
+    get_current_span_id,
+    get_current_task_id,
+    get_current_trace_id,
+)
+from actshield.tracing.events import EventType, SecurityEvent
+from actshield.tracing.tracer import CausalEdge, CausalGraph, CausalNode, TraceManager
+
+__version__ = "0.9.0"
+
+# Phase 6.5 — Forensic Intelligence + Product API
+from actshield.forensics.service import ForensicService
+from actshield.forensics.queries import ForensicQueryEngine
+from actshield.forensics.models import (
+    AgentAccessProfile,
+    ResourceAccessProfile,
+    AccessAttempt,
+    ActualAccess,
+    AccessSnapshot,
+    AccessDiff,
+    ForensicExplanation,
+    AttackForensicReport,
+    ForensicIncident,
+    IncidentType,
+    IncidentSeverity,
+    AccessMatrix,
+)
+from actshield.api.service import ApiService, SecurityPrincipal
+from actshield.api.models import (
+    AgentAccessResponse,
+    ResourceAccessResponse,
+    AccessMatrixResponse,
+    OverviewResponse,
+    AttackForensicsResponse,
+    IncidentResponse,
+    ErrorResponse,
+    HealthResponse,
+)
+
+# Phase 9 — Continuous Security Control Plane
+from actshield.posture import (
+    SecurityPostureSnapshot,
+    PostureRating,
+    FindingSeverity,
+    PostureFinding,
+    PostureDimensionMetrics,
+    PostureDiff,
+    PostureEngine,
+    PostureDiffEngine,
+    PostureRuleEvaluator,
+)
+from actshield.incidents import (
+    SecurityIncident,
+    IncidentState,
+    IncidentStateMachine,
+    IncidentTimelineEntry,
+    IncidentEngine,
+    IncidentCreationRule,
+)
+from actshield.response import (
+    ResponseActionType,
+    ResponseActionRecord,
+    AuthorityChangeEvent,
+    ResponseEngine,
+)
+from actshield.drift import (
+    DriftCategory,
+    DriftSeverity,
+    DriftEvent,
+    AgentBehaviorBaseline,
+    BehavioralBaselineTracker,
+    AuthorityDriftDetector,
+    AccessDriftDetector,
+    ContextDriftDetector,
+)
+from actshield.gates import (
+    GateStatus,
+    GateCheckRule,
+    SecurityGateResult,
+    SecurityGateEvaluator,
+    security_gate,
+)
+
+# Threat Modeling
+from actshield.threatmodel import (
+    ThreatAnalyzer,
+    ThreatReportRenderer,
+    ThreatModelExporter,
+    ThreatModel,
+    AnalysisResult as ThreatAnalysisResult,
+    ThreatSeverity,
+    ThreatCategory,
+    Asset,
+    AssetSensitivity,
+    ThreatActor,
+    ActorType,
+    TrustBoundary,
+    BoundaryType,
+    Threat,
+    AttackScenario,
+)
+
+__all__ = [
+    "ActShield",
+    "ActShieldConfig",
+    "Agent",
+    "AgentIdentity",
+    "AgentCapability",
+    "AgentTrustLevel",
+    "AgentStatus",
+    "Task",
+    "TaskContext",
+    "TaskStatus",
+    "Delegation",
+    "DelegationScope",
+    "AuthorityGrant",
+    "Context",
+    "ContextSource",
+    "ContextTrustLevel",
+    "Provenance",
+    "ProvenanceHop",
+    "SanitizationRecord",
+    "TaintState",
+    "ToolDefinition",
+    "Resource",
+    "SensitivityLevel",
+    "ToolRequest",
+    "ToolResult",
+    "protected_tool",
+    "Policy",
+    "PolicyRule",
+    "RuleCondition",
+    "PolicyEvaluator",
+    "IntentAnalyzer",
+    "DeterministicIntentAnalyzer",
+    "IntentAlignmentStatus",
+    "IntentAlignmentResult",
+    "RiskLevel",
+    "RiskSignal",
+    "RiskAssessment",
+    "RiskFactorBreakdown",
+    "DecisionAction",
+    "SecurityDecision",
+    "EventType",
+    "SecurityEvent",
+    "CorrelationContext",
+    "SpanScope",
+    "generate_id",
+    "get_current_context",
+    "get_current_trace_id",
+    "get_current_span_id",
+    "get_current_agent_id",
+    "get_current_task_id",
+    "get_current_delegation_id",
+    "CausalNode",
+    "CausalEdge",
+    "CausalGraph",
+    "TraceManager",
+    "SecurityReasoner",
+    "SecurityContext",
+    "SecurityAnalysis",
+    "SecurityAIProvider",
+    "AnalysisResult",
+    "HealthReport",
+    "ProviderRegistry",
+    "get_provider_registry",
+    "AISecuraClient",
+    "LocalAISecuraAdapter",
+    "APIIntelligence",
+    "APIAnalysis",
+    "APIRISClient",
+    "LocalAPIRISAdapter",
+    "MCPGateway",
+    "MCPMessage",
+    "HTTPGateway",
+    "HTTPInterceptedResponse",
+    "ApprovalManager",
+    "ApprovalRequest",
+    "ApprovalStatus",
+    "StorageBackend",
+    "SQLiteStorage",
+    "PostgresStorage",
+    "SIEMExporter",
+    "SIEMFormat",
+    "OllamaAISecuraAdapter",
+    "AISecuraAnalysis",
+    "ThreatSeverity",
+    "IntentAlignment",
+    "AIRecommendation",
+    "AttackTechnique",
+    "EvidenceTriad",
+    "AuthorityAnalysis",
+    "LLMConfig",
+    # Phase 4 Offensive Validation Engine
+    "AttackCase",
+    "AttackType",
+    "ExpectedBehavior",
+    "SafetyClass",
+    "AttackTarget",
+    "TargetEnvironment",
+    "TargetRegistry",
+    "target_registry",
+    "SafetyValidator",
+    "SafetyValidationResult",
+    "safety_validator",
+    "AttackStatus",
+    "ExecutionEvidence",
+    "OffensiveAttackResult",
+    "AttackEvaluator",
+    "MutationEngine",
+    "MutationStrategy",
+    "AttackCampaign",
+    "CampaignSummary",
+    "AttackCorpus",
+    "attack_corpus",
+    "AIAttackGenerator",
+    "VulnerableDemoTarget",
+    "OffensiveEngine",
+    # Phase 5 Adaptive Offensive Security Validation
+    "SecurityAnalysisEvidence",
+    "AdaptiveEngine",
+    "CampaignMemory",
+    # Phase 6.5 — Forensic Intelligence + Product API
+    "ForensicService",
+    "ForensicQueryEngine",
+    "AgentAccessProfile",
+    "ResourceAccessProfile",
+    "AccessAttempt",
+    "ActualAccess",
+    "AccessSnapshot",
+    "AccessDiff",
+    "ForensicExplanation",
+    "AttackForensicReport",
+    "ForensicIncident",
+    "IncidentType",
+    "IncidentSeverity",
+    "AccessMatrix",
+    "ApiService",
+    "SecurityPrincipal",
+    "AgentAccessResponse",
+    "ResourceAccessResponse",
+    "AccessMatrixResponse",
+    "OverviewResponse",
+    "AttackForensicsResponse",
+    "IncidentResponse",
+    "ErrorResponse",
+    "HealthResponse",
+    # Phase 9 — Continuous Security Control Plane
+    "SecurityPostureSnapshot",
+    "PostureRating",
+    "FindingSeverity",
+    "PostureFinding",
+    "PostureDimensionMetrics",
+    "PostureDiff",
+    "PostureEngine",
+    "PostureDiffEngine",
+    "PostureRuleEvaluator",
+    "SecurityIncident",
+    "IncidentState",
+    "IncidentStateMachine",
+    "IncidentTimelineEntry",
+    "IncidentEngine",
+    "IncidentCreationRule",
+    "ResponseActionType",
+    "ResponseActionRecord",
+    "AuthorityChangeEvent",
+    "ResponseEngine",
+    "DriftCategory",
+    "DriftSeverity",
+    "DriftEvent",
+    "AgentBehaviorBaseline",
+    "BehavioralBaselineTracker",
+    "AuthorityDriftDetector",
+    "AccessDriftDetector",
+    "ContextDriftDetector",
+    "GateStatus",
+    "GateCheckRule",
+    "SecurityGateResult",
+    "SecurityGateEvaluator",
+    "security_gate",
+    # Threat Modeling
+    "ThreatAnalyzer",
+    "ThreatReportRenderer",
+    "ThreatModelExporter",
+    "ThreatModel",
+    "ThreatAnalysisResult",
+    "ThreatSeverity",
+    "ThreatCategory",
+    "Asset",
+    "AssetSensitivity",
+    "ThreatActor",
+    "ActorType",
+    "TrustBoundary",
+    "BoundaryType",
+    "Threat",
+    "AttackScenario",
+    # Backward Compatibility Aliases
+    "AgentGuard",
+    "AgentGuardConfig",
+]
+
+# Backward compatibility aliases
+AgentGuard = ActShield
+AgentGuardConfig = ActShieldConfig
+
+
+
+
+
+

actshield-0.9.0/actshield/__main__.py

@@ -0,0 +1,46 @@
+"""ActShield package __main__ entrypoint."""
+from __future__ import annotations
+
+from typing import Any, Optional
+from actshield.cli.main import app, main
+from actshield.offensive import attack_corpus, OffensiveEngine
+
+
+def cli_attack_list() -> int:
+    """Compatibility handler for Phase 4 test suite."""
+    attacks = attack_corpus.get_all_attacks()
+    return 0 if len(attacks) > 0 else 1
+
+
+def cli_attack_run(args: Any) -> int:
+    """Compatibility handler for running attack cases."""
+    engine = OffensiveEngine()
+    limit = getattr(args, "limit", 5) or 5
+    atype = getattr(args, "type", None)
+    attacks = attack_corpus.get_all_attacks()
+    if atype:
+        attacks = [c for c in attacks if c.attack_type.value == atype or c.attack_type == atype]
+    attacks = attacks[:limit]
+    for c in attacks:
+        engine.execute_attack(c)
+    return 0
+
+
+def cli_attack_replay(attack_id: str) -> int:
+    """Compatibility handler for attack replay."""
+    engine = OffensiveEngine()
+    case = attack_corpus.get_attack(attack_id)
+    if case:
+        engine.execute_attack(case)
+    return 0
+
+
+def cli_attack_report() -> int:
+    """Compatibility handler for attack reporting."""
+    return 0
+
+
+if __name__ == "__main__":
+    main()
+
+

actshield-0.9.0/actshield/agents/__init__.py

@@ -0,0 +1,12 @@
+"""Agents package exposing Agent, AgentIdentity, AgentCapability, and AgentTrustLevel."""
+
+from actshield.agents.agent import Agent
+from actshield.agents.identity import AgentCapability, AgentIdentity, AgentTrustLevel
+
+__all__ = [
+    "Agent",
+    "AgentIdentity",
+    "AgentCapability",
+    "AgentTrustLevel",
+]
+