adminA 0.15.2__tar.gz → 0.15.4__tar.gz

{admina-0.15.2/admina.egg-info → admina-0.15.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: admina
-Version: 0.15.2
+Version: 0.15.4
 Summary: Admina — governed AI development framework
 Author-email: Stefano Noferi <info@admina.org>
 Maintainer-email: Stefano Noferi <info@admina.org>
@@ -19,6 +19,7 @@ Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Programming Language :: Rust
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Topic :: Security
@@ -42,7 +43,7 @@ Requires-Dist: redis<9,>=5.0; extra == "proxy"
 Requires-Dist: boto3<2,>=1.34; extra == "proxy"
 Requires-Dist: clickhouse-connect<2,>=0.7; extra == "proxy"
 Requires-Dist: typer<1,>=0.9; extra == "proxy"
-Requires-Dist: numpy<2,>=1.24; extra == "proxy"
+Requires-Dist: numpy<3,>=1.24; extra == "proxy"
 Requires-Dist: scikit-learn<2,>=1.3; extra == "proxy"
 Provides-Extra: proxy-minimal
 Requires-Dist: fastapi<1,>=0.104; extra == "proxy-minimal"
@@ -67,7 +68,7 @@ Requires-Dist: openai<4,>=1.0; extra == "openai"
 Provides-Extra: ollama
 Requires-Dist: ollama<1,>=0.3; extra == "ollama"
 Provides-Extra: anthropic
-Requires-Dist: anthropic<2,>=0.39; extra == "anthropic"
+Requires-Dist: anthropic<3,>=0.39; extra == "anthropic"
 Provides-Extra: mistral
 Requires-Dist: mistralai<4,>=1.0; extra == "mistral"
 Provides-Extra: gemini
@@ -1300,7 +1301,7 @@ domains:
 ```
 
 ```bash
-docker pull python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1
+docker pull python:3.12-slim@sha256:aa943ce411423c7582288f18707ff66eddcbaeb510502d747a72aeb34f30d159
 ```
 
 On `/mcp`, a `tools/call` of `python_exec` that the pipeline allows is
@@ -1903,6 +1904,29 @@ crew = Crew(agents=[agent], tasks=[task], task_callback=admina_task_callback)
 
 </details>
 
+<details>
+<summary><strong>Bifrost</strong> — the OpenAI-compatible gateway in front of the Bifrost LLM gateway</summary>
+
+<br>
+
+The gateway forwards governed chat completions to Bifrost, which selects the
+provider; requests the firewall blocks never reach it. Point the gateway at
+Bifrost and give it a Bifrost virtual key:
+
+```bash
+ADMINA_GATEWAY_UPSTREAM=http://bifrost:8080/v1
+ADMINA_GATEWAY_UPSTREAM_API_KEY_FILE=/run/secrets/bifrost_vk
+```
+
+Governed: `/v1/chat/completions` (requests, tool results in the messages,
+responses). Not governed: the other Bifrost endpoints, tools that Bifrost
+runs itself (Agent Mode) and response content in Bifrost's own logs. The
+[Bifrost guide](https://github.com/admina-org/admina/blob/main/docs/guides/bifrost.md)
+details the scope; [`examples/bifrost/`](https://github.com/admina-org/admina/tree/main/examples/bifrost) runs both with
+Docker Compose.
+
+</details>
+
 See [full integration docs](https://github.com/admina-org/admina/blob/main/docs/guides/integrations.md) for details.
 
 ## Performance — Hybrid Python + Rust engine

{admina-0.15.2 → admina-0.15.4}/README.md

@@ -1216,7 +1216,7 @@ domains:
 ```
 
 ```bash
-docker pull python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1
+docker pull python:3.12-slim@sha256:aa943ce411423c7582288f18707ff66eddcbaeb510502d747a72aeb34f30d159
 ```
 
 On `/mcp`, a `tools/call` of `python_exec` that the pipeline allows is
@@ -1819,6 +1819,29 @@ crew = Crew(agents=[agent], tasks=[task], task_callback=admina_task_callback)
 
 </details>
 
+<details>
+<summary><strong>Bifrost</strong> — the OpenAI-compatible gateway in front of the Bifrost LLM gateway</summary>
+
+<br>
+
+The gateway forwards governed chat completions to Bifrost, which selects the
+provider; requests the firewall blocks never reach it. Point the gateway at
+Bifrost and give it a Bifrost virtual key:
+
+```bash
+ADMINA_GATEWAY_UPSTREAM=http://bifrost:8080/v1
+ADMINA_GATEWAY_UPSTREAM_API_KEY_FILE=/run/secrets/bifrost_vk
+```
+
+Governed: `/v1/chat/completions` (requests, tool results in the messages,
+responses). Not governed: the other Bifrost endpoints, tools that Bifrost
+runs itself (Agent Mode) and response content in Bifrost's own logs. The
+[Bifrost guide](https://github.com/admina-org/admina/blob/main/docs/guides/bifrost.md)
+details the scope; [`examples/bifrost/`](https://github.com/admina-org/admina/tree/main/examples/bifrost) runs both with
+Docker Compose.
+
+</details>
+
 See [full integration docs](https://github.com/admina-org/admina/blob/main/docs/guides/integrations.md) for details.
 
 ## Performance — Hybrid Python + Rust engine

{admina-0.15.2 → admina-0.15.4}/admina/__init__.py

@@ -23,7 +23,7 @@ from __future__ import annotations
 
 from admina.sdk import ComplianceKit, GovernedAgent, GovernedData, GovernedModel
 
-__version__ = "0.15.2"
+__version__ = "0.15.4"
 
 __all__ = [
     "__version__",

{admina-0.15.2 → admina-0.15.4}/admina/cli/main.py

@@ -1241,7 +1241,8 @@ def doctor() -> None:
             ("spacy", "spacy"),
         ],
         "telemetry": [
-            ("opentelemetry", "opentelemetry-api"),
+            # opentelemetry-api alone comes with FastAPI (0.160+).
+            ("opentelemetry.sdk", "opentelemetry-sdk"),
         ],
     }
     extras_status: dict[str, str] = {}

{admina-0.15.2 → admina-0.15.4}/admina/core/config.py

@@ -111,7 +111,7 @@ _HEX64 = re.compile(r"[0-9a-fA-F]{64}")
 #: (linux/amd64 and linux/arm64 among others). Pull it once before enabling
 #: the sandbox: nothing is pulled on the request path.
 SANDBOX_DEFAULT_IMAGE = (
-    "python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1"
+    "python:3.12-slim@sha256:aa943ce411423c7582288f18707ff66eddcbaeb510502d747a72aeb34f30d159"
 )
 
 #: How a sandboxed tool's arguments become a command

{admina-0.15.2 → admina-0.15.4}/admina/proxy/main.py

@@ -675,11 +675,24 @@ def _init_clickhouse_tables(client):
 
 
 # ── FastAPI App ──────────────────────────────────────────────
+# FastAPI 0.160+ traces requests, records metrics and logs validation
+# failures (with the input values) through the global OpenTelemetry
+# providers. The proxy exports its own governance spans, after redaction;
+# FastAPI's own telemetry is off. Older FastAPI versions ignore the argument.
+FASTAPI_TELEMETRY = {
+    "tracing": False,
+    "metrics": False,
+    "logs": False,
+    "operation_spans": False,
+    "auto_configure": False,
+}
+
 app = FastAPI(
     title="Admina Governance Proxy",
     description="AI Governance & Security for Autonomous Agents",
     version=__version__,
     lifespan=lifespan,
+    telemetry=FASTAPI_TELEMETRY,
     servers=[
         {"url": "http://localhost:3000", "description": "Dashboard (nginx proxy)"},
         {"url": "http://localhost:8080", "description": "Proxy (direct)"},

{admina-0.15.2 → admina-0.15.4/admina.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: admina
-Version: 0.15.2
+Version: 0.15.4
 Summary: Admina — governed AI development framework
 Author-email: Stefano Noferi <info@admina.org>
 Maintainer-email: Stefano Noferi <info@admina.org>
@@ -19,6 +19,7 @@ Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Programming Language :: Rust
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Topic :: Security
@@ -42,7 +43,7 @@ Requires-Dist: redis<9,>=5.0; extra == "proxy"
 Requires-Dist: boto3<2,>=1.34; extra == "proxy"
 Requires-Dist: clickhouse-connect<2,>=0.7; extra == "proxy"
 Requires-Dist: typer<1,>=0.9; extra == "proxy"
-Requires-Dist: numpy<2,>=1.24; extra == "proxy"
+Requires-Dist: numpy<3,>=1.24; extra == "proxy"
 Requires-Dist: scikit-learn<2,>=1.3; extra == "proxy"
 Provides-Extra: proxy-minimal
 Requires-Dist: fastapi<1,>=0.104; extra == "proxy-minimal"
@@ -67,7 +68,7 @@ Requires-Dist: openai<4,>=1.0; extra == "openai"
 Provides-Extra: ollama
 Requires-Dist: ollama<1,>=0.3; extra == "ollama"
 Provides-Extra: anthropic
-Requires-Dist: anthropic<2,>=0.39; extra == "anthropic"
+Requires-Dist: anthropic<3,>=0.39; extra == "anthropic"
 Provides-Extra: mistral
 Requires-Dist: mistralai<4,>=1.0; extra == "mistral"
 Provides-Extra: gemini
@@ -1300,7 +1301,7 @@ domains:
 ```
 
 ```bash
-docker pull python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1
+docker pull python:3.12-slim@sha256:aa943ce411423c7582288f18707ff66eddcbaeb510502d747a72aeb34f30d159
 ```
 
 On `/mcp`, a `tools/call` of `python_exec` that the pipeline allows is
@@ -1903,6 +1904,29 @@ crew = Crew(agents=[agent], tasks=[task], task_callback=admina_task_callback)
 
 </details>
 
+<details>
+<summary><strong>Bifrost</strong> — the OpenAI-compatible gateway in front of the Bifrost LLM gateway</summary>
+
+<br>
+
+The gateway forwards governed chat completions to Bifrost, which selects the
+provider; requests the firewall blocks never reach it. Point the gateway at
+Bifrost and give it a Bifrost virtual key:
+
+```bash
+ADMINA_GATEWAY_UPSTREAM=http://bifrost:8080/v1
+ADMINA_GATEWAY_UPSTREAM_API_KEY_FILE=/run/secrets/bifrost_vk
+```
+
+Governed: `/v1/chat/completions` (requests, tool results in the messages,
+responses). Not governed: the other Bifrost endpoints, tools that Bifrost
+runs itself (Agent Mode) and response content in Bifrost's own logs. The
+[Bifrost guide](https://github.com/admina-org/admina/blob/main/docs/guides/bifrost.md)
+details the scope; [`examples/bifrost/`](https://github.com/admina-org/admina/tree/main/examples/bifrost) runs both with
+Docker Compose.
+
+</details>
+
 See [full integration docs](https://github.com/admina-org/admina/blob/main/docs/guides/integrations.md) for details.
 
 ## Performance — Hybrid Python + Rust engine

{admina-0.15.2 → admina-0.15.4}/admina.egg-info/SOURCES.txt

@@ -213,6 +213,7 @@ tests/test_engines.py
 tests/test_entrypoint_script.py
 tests/test_error_disclosure.py
 tests/test_event_loop_lag_metric.py
+tests/test_fastapi_telemetry.py
 tests/test_fingerprint.py
 tests/test_firewall_heuristic_config.py
 tests/test_firewall_it_baseline.py

{admina-0.15.2 → admina-0.15.4}/admina.egg-info/requires.txt

@@ -10,7 +10,7 @@ admina[anthropic,bedrock,gemini,mistral,ollama,openai]
 admina[adapters,nlp,presidio,proxy,telemetry]
 
 [anthropic]
-anthropic<2,>=0.39
+anthropic<3,>=0.39
 
 [bedrock]
 boto3<2,>=1.34
@@ -47,7 +47,7 @@ redis<9,>=5.0
 boto3<2,>=1.34
 clickhouse-connect<2,>=0.7
 typer<1,>=0.9
-numpy<2,>=1.24
+numpy<3,>=1.24
 scikit-learn<2,>=1.3
 
 [proxy-minimal]

{admina-0.15.2 → admina-0.15.4}/pyproject.toml

@@ -19,7 +19,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "admina"
-version = "0.15.2"
+version = "0.15.4"
 description = "Admina — governed AI development framework"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -42,6 +42,7 @@ classifiers = [
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
     "Programming Language :: Rust",
     "Topic :: Software Development :: Libraries :: Python Modules",
     "Topic :: Security",
@@ -78,7 +79,7 @@ proxy = [
     "clickhouse-connect>=0.7,<2",
     "typer>=0.9,<1",
     # Required by the LoopBreaker (core proxy guardrail — not an NLP add-on).
-    "numpy>=1.24,<2",
+    "numpy>=1.24,<3",
     "scikit-learn>=1.3,<2",
 ]
 # The proxy without Redis, ClickHouse, S3 (boto3), typer and the scientific
@@ -146,7 +147,7 @@ full = ["admina[proxy,nlp,telemetry]"]
 # extra only controls whether the provider wheel is present.
 openai = ["openai>=1.0,<4"]
 ollama = ["ollama>=0.3,<1"]
-anthropic = ["anthropic>=0.39,<2"]
+anthropic = ["anthropic>=0.39,<3"]
 mistral = ["mistralai>=1.0,<4"]
 gemini = ["google-genai>=1.0,<3"]
 bedrock = ["boto3>=1.34,<2"]
@@ -168,13 +169,13 @@ dev = [
     # Async test support (asyncio backend)
     "anyio>=4.0,<5",
     # Coverage measurement and reporting
-    "pytest-cov>=5.0,<7",
+    "pytest-cov>=5.0,<8",
     # Python linter — replaces flake8 + isort + pyupgrade
     "ruff>=0.4,<1",
     # Security linter — detects common Python security issues
     "bandit>=1.7,<2",
-    # Dependency vulnerability scanner
-    "safety>=3.0,<4",
+    # Dependency vulnerability scanner (PyPA, OSV database)
+    "pip-audit>=2.7,<3",
     # Documentation
     "mkdocs>=1.6,<2",
     "mkdocs-material>=9.5,<10",
@@ -247,6 +248,10 @@ exclude_lines = [
 line-length = 100
 target-version = "py311"
 
+[tool.ruff.format]
+# The Python examples in the Markdown docs keep their aligned comments.
+exclude = ["*.md"]
+
 [tool.ruff.lint]
 select = ["E", "F", "I", "UP"]
 ignore = [

{admina-0.15.2 → admina-0.15.4}/tests/test_enabled_surfaces.py

@@ -27,6 +27,7 @@ from __future__ import annotations
 import json
 import subprocess
 import sys
+from pathlib import Path
 
 import pytest
 
@@ -225,8 +226,9 @@ def test_surfaces_that_run_the_loop_breaker_build_it(proxy, surfaces):
 # ── Routes of disabled surfaces are not mounted ───────────────
 
 _ROUTES = (
-    "import json; from admina.proxy.main import app; "
-    "print(json.dumps({'routes': sorted({getattr(r, 'path', '') for r in app.routes}), "
+    f"import json, sys; sys.path.insert(0, {str(Path(__file__).parent)!r}); "
+    "from _routes import route_paths; from admina.proxy.main import app; "
+    "print(json.dumps({'routes': sorted(route_paths(app)), "
     "'openapi': sorted(app.openapi()['paths'])}))"
 )
 

admina-0.15.4/tests/test_fastapi_telemetry.py

@@ -0,0 +1,68 @@
+# Copyright © 2025–2026 Stefano Noferi & Admina contributors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""FastAPI's own OpenTelemetry instrumentation is off in the proxy app.
+
+FastAPI 0.160+ traces requests and logs validation failures, with the
+input values, through the global OpenTelemetry providers. The proxy sets
+a global tracer provider for its governance spans; requests must not
+produce FastAPI spans next to them. The check runs in a subprocess, so the
+global provider is the one it sets.
+"""
+
+from __future__ import annotations
+
+import json
+import subprocess
+import sys
+
+import pytest
+from _proxy_app import subprocess_env
+
+_SCRIPT = """
+import json
+from opentelemetry import trace
+from opentelemetry.sdk.trace import TracerProvider
+from opentelemetry.sdk.trace.export import SimpleSpanProcessor
+from opentelemetry.sdk.trace.export.in_memory_span_exporter import InMemorySpanExporter
+
+spans = InMemorySpanExporter()
+provider = TracerProvider()
+provider.add_span_processor(SimpleSpanProcessor(spans))
+trace.set_tracer_provider(provider)
+
+from fastapi.testclient import TestClient
+from admina.proxy.main import app
+
+with TestClient(app) as client:
+    statuses = [
+        client.get("/health").status_code,
+        client.post("/api/v1/validate", json={"content": 1}).status_code,
+    ]
+print(json.dumps({"statuses": statuses, "spans": [s.name for s in spans.get_finished_spans()]}))
+"""
+
+
+def test_requests_produce_no_fastapi_spans():
+    pytest.importorskip("opentelemetry.sdk.trace")
+    env = subprocess_env(
+        REDIS_URL="", CLICKHOUSE_HOST="", FORENSIC_BACKEND="memory", OTEL_ENABLED="false"
+    )
+    proc = subprocess.run(
+        [sys.executable, "-c", _SCRIPT], env=env, capture_output=True, text=True, timeout=120
+    )
+    assert proc.returncode == 0, proc.stderr
+    result = json.loads(proc.stdout.strip().splitlines()[-1])
+    assert result["statuses"][0] == 200
+    assert result["spans"] == []

{admina-0.15.2 → admina-0.15.4}/tests/test_gateway_scan_coverage.py

@@ -173,17 +173,32 @@ def _nested_lists(levels: int, leaf: object) -> object:
     return value
 
 
-# Deeper than the JSON parser reads on any supported Python version.
+# Far past the depth limit, and past what the JSON parser reads with the
+# default 8 MB stack. The depth at which the parser raises RecursionError
+# depends on the platform and on the stack size (Python 3.14 measures the C
+# stack), so the tests force that outcome with the out_of_stack fixture.
 _TOO_DEEP_TO_READ = 100_000
 
 
 def _arguments_too_deep_to_read(leaf: str) -> str:
-    """JSON text of the string *leaf* inside more nested arrays than
-    ``json.loads`` reads: parsing it raises ``RecursionError``."""
-    arguments = "[" * _TOO_DEEP_TO_READ + leaf + "]" * _TOO_DEEP_TO_READ
-    with pytest.raises(RecursionError):
-        json.loads(arguments)
-    return arguments
+    """JSON text of the string *leaf* inside _TOO_DEEP_TO_READ nested arrays."""
+    return "[" * _TOO_DEEP_TO_READ + leaf + "]" * _TOO_DEEP_TO_READ
+
+
+@pytest.fixture()
+def out_of_stack(monkeypatch):
+    """The JSON parser of the scan policy raises RecursionError on text
+    nested _TOO_DEEP_TO_READ levels, as it does when the stack runs out."""
+    from admina.domains.agent_security import scan_policy
+
+    loads = scan_policy.json.loads
+
+    def limited(text, *args, **kwargs):
+        if isinstance(text, str) and text.startswith("[" * _TOO_DEEP_TO_READ):
+            raise RecursionError("maximum recursion depth exceeded")
+        return loads(text, *args, **kwargs)
+
+    monkeypatch.setattr(scan_policy.json, "loads", limited)
 
 
 def _escaped(text: str) -> str:
@@ -302,12 +317,16 @@ def test_arguments_nested_past_the_depth_limit_are_blocked():
     assert recorder.request["checks"]["scan_depth"] == SCAN_DEPTH
 
 
+@pytest.mark.parametrize("parser", ["as_on_this_platform", "out_of_stack"])
 @pytest.mark.parametrize(
     "leaf", [json.dumps(BENIGN), _escaped(OVERRIDE)], ids=["benign", "escaped_override"]
 )
-def test_arguments_too_deep_to_read_as_json_are_blocked(leaf):
-    # Nested past what the JSON parser reads, so past the depth limit too:
-    # the raw string is scanned and the request is blocked for its depth.
+def test_arguments_too_deep_to_read_as_json_are_blocked(leaf, parser, request):
+    # Nested far past the depth limit: whether the parser reads them (the
+    # walk stops at the limit) or runs out of stack (the raw string is
+    # scanned), the request is blocked for its depth.
+    if parser == "out_of_stack":
+        request.getfixturevalue("out_of_stack")
     arguments = _arguments_too_deep_to_read(leaf)
     body = {"model": "example-model", "messages": [QUESTION, _tool_call(arguments)]}
     resp, upstream, recorder = _send(body)
@@ -442,7 +461,7 @@ def test_request_texts_hold_arguments_that_are_not_json_as_they_are(arguments):
     assert scanned.truncated is False
 
 
-def test_request_texts_hold_arguments_too_deep_to_read_as_they_are_and_truncated():
+def test_request_texts_hold_arguments_too_deep_to_read_as_they_are_and_truncated(out_of_stack):
     from admina.domains.agent_security.scan_policy import request_texts
 
     arguments = _arguments_too_deep_to_read(json.dumps("leaf text"))

{admina-0.15.2 → admina-0.15.4}/tests/test_lazy_imports.py

@@ -76,7 +76,7 @@ _MINIMAL = textwrap.dedent(
 
     class Blocker:
         def find_spec(self, name, path=None, target=None):
-            if name.split(".")[0] in BLOCKED:
+            if any(name == b or name.startswith(b + ".") for b in BLOCKED):
                 raise ModuleNotFoundError(f"blocked: {{name}}")
             return None
 
@@ -132,7 +132,10 @@ NOT_IN_PROXY_MINIMAL = (
     "scipy",
     "sklearn",
     "spacy",
-    "opentelemetry",
+    # opentelemetry-api is a dependency of FastAPI from 0.160 on; the SDK and
+    # the exporters come with the telemetry extra.
+    "opentelemetry.sdk",
+    "opentelemetry.exporter",
     "typer",
     "admina_core",
 )