admina-framework 0.11.0__tar.gz → 0.11.1__tar.gz

{admina_framework-0.11.0/admina_framework.egg-info → admina_framework-0.11.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: admina-framework
-Version: 0.11.0
+Version: 0.11.1
 Summary: Admina — governed AI development framework
 Author-email: Stefano Noferi <info@admina.org>
 Maintainer-email: Stefano Noferi <info@admina.org>
@@ -30,7 +30,7 @@ License-File: NOTICE
 Requires-Dist: pyyaml<7,>=6.0
 Requires-Dist: click<9,>=8.1
 Requires-Dist: jinja2<4,>=3.1
-Requires-Dist: cryptography<50,>=41.0
+Requires-Dist: cryptography<51,>=41.0
 Provides-Extra: proxy
 Requires-Dist: fastapi<1,>=0.104; extra == "proxy"
 Requires-Dist: uvicorn[standard]<1,>=0.24; extra == "proxy"
@@ -331,16 +331,23 @@ from admina import GovernedModel, GovernedData, GovernedAgent, ComplianceKit
 
 | Interface | Builtin implementations |
 |-----------|------------------------|
-| Model Adapter | Ollama, OpenAI |
+| Model Adapter | Ollama, OpenAI, Anthropic, Gemini, Mistral, Bedrock, vLLM |
 | Data Connector | ChromaDB, Filesystem |
 | Governance Domain | GuardrailsAI (toxic, jailbreak, bias, PII) |
 | Compliance Template | EU AI Act |
 | Transport Adapter | MCP, HTTP REST |
 | Forensic Store | Filesystem, S3-compatible (boto3 — AWS S3, MinIO, R2, …) |
 | Auth Provider | API Key |
-| PII Engine | spaCy + Regex |
+| PII Engine | spaCy + Regex (default), Microsoft Presidio (`pip install admina-framework[presidio]`, `ADMINA_PII_ENGINE=presidio`) |
 | Alert Channel | Log, Webhook |
 
+Model adapters lazy-import their provider SDK, so install the ones you
+use: `pip install admina-framework[adapters]` for all of them, or a
+single provider (`[openai]`, `[ollama]`, `[anthropic]`, `[mistral]`,
+`[gemini]`, `[bedrock]`). vLLM has no extra of its own — it serves an
+OpenAI-compatible API and subclasses the OpenAI adapter, so install
+`[openai]` for it.
+
 ```bash
 admina plugin list                    # List registered plugins
 admina plugin install ./my-plugin     # Install a custom plugin

{admina_framework-0.11.0 → admina_framework-0.11.1}/README.md

@@ -254,16 +254,23 @@ from admina import GovernedModel, GovernedData, GovernedAgent, ComplianceKit
 
 | Interface | Builtin implementations |
 |-----------|------------------------|
-| Model Adapter | Ollama, OpenAI |
+| Model Adapter | Ollama, OpenAI, Anthropic, Gemini, Mistral, Bedrock, vLLM |
 | Data Connector | ChromaDB, Filesystem |
 | Governance Domain | GuardrailsAI (toxic, jailbreak, bias, PII) |
 | Compliance Template | EU AI Act |
 | Transport Adapter | MCP, HTTP REST |
 | Forensic Store | Filesystem, S3-compatible (boto3 — AWS S3, MinIO, R2, …) |
 | Auth Provider | API Key |
-| PII Engine | spaCy + Regex |
+| PII Engine | spaCy + Regex (default), Microsoft Presidio (`pip install admina-framework[presidio]`, `ADMINA_PII_ENGINE=presidio`) |
 | Alert Channel | Log, Webhook |
 
+Model adapters lazy-import their provider SDK, so install the ones you
+use: `pip install admina-framework[adapters]` for all of them, or a
+single provider (`[openai]`, `[ollama]`, `[anthropic]`, `[mistral]`,
+`[gemini]`, `[bedrock]`). vLLM has no extra of its own — it serves an
+OpenAI-compatible API and subclasses the OpenAI adapter, so install
+`[openai]` for it.
+
 ```bash
 admina plugin list                    # List registered plugins
 admina plugin install ./my-plugin     # Install a custom plugin

{admina_framework-0.11.0 → admina_framework-0.11.1}/admina/__init__.py

@@ -23,7 +23,7 @@ from __future__ import annotations
 
 from admina.sdk import ComplianceKit, GovernedAgent, GovernedData, GovernedModel
 
-__version__ = "0.11.0"
+__version__ = "0.11.1"
 
 __all__ = [
     "__version__",

{admina_framework-0.11.0 → admina_framework-0.11.1}/admina/proxy/api/dashboard.py

@@ -407,7 +407,11 @@ def create_dashboard_endpoints(
                     "used_memory_bytes": info.get("used_memory", 0),
                 }
             except (OSError, RuntimeError) as exc:
-                services["redis"] = {"status": "unhealthy", "error": str(exc)}
+                # The exception text can carry connection details (host, port,
+                # credentials embedded in a URL); log it server-side and return
+                # a generic reason, as the other dashboard queries already do.
+                logger.warning("Redis health check failed: %s", exc)
+                services["redis"] = {"status": "unhealthy", "error": "Health check failed"}
         else:
             services["redis"] = {"status": "not_configured"}
 
@@ -432,9 +436,10 @@ def create_dashboard_endpoints(
                     "event_count": row_count,
                 }
             except (OSError, RuntimeError, Exception) as exc:
+                logger.warning("ClickHouse health check failed: %s", exc)
                 services["clickhouse"] = {
                     "status": "unhealthy",
-                    "error": str(exc),
+                    "error": "Health check failed",
                 }
         else:
             services["clickhouse"] = {"status": "not_configured"}

{admina_framework-0.11.0 → admina_framework-0.11.1}/admina/proxy/api/integration.py

@@ -37,6 +37,25 @@ class _DefaultSettings:
     GOVERNANCE_MODE: str = "enforce"
 
 
+def _scrub_check_errors(checks: dict[str, Any]) -> dict[str, Any]:
+    """Replace guard exception text with a generic reason for external callers.
+
+    A guard that breaks its contract records the raw exception text under
+    ``checks["guard_<name>"]["error"]``. That detail is valuable in the
+    forensic record — which keeps it — but it can carry internal information
+    (file paths, hostnames, credentials embedded in a connection URL), so it
+    is not returned over the REST API. The check name and its ``ERROR``
+    action still tell a caller which guard failed.
+    """
+    scrubbed: dict[str, Any] = {}
+    for name, entry in checks.items():
+        if isinstance(entry, dict) and "error" in entry:
+            scrubbed[name] = {**entry, "error": "Guard error"}
+        else:
+            scrubbed[name] = entry
+    return scrubbed
+
+
 def create_integration_endpoints(
     *,
     get_firewall: Any,
@@ -125,7 +144,7 @@ def create_integration_endpoints(
         return {
             "action": action,
             "risk_level": gov.risk_level,
-            "checks": result.checks,
+            "checks": _scrub_check_errors(result.checks),
             "redacted_content": redacted_content if action == "REDACT" else None,
             "latency_ms": round(result.latency_ms, 2),
         }

{admina_framework-0.11.0 → admina_framework-0.11.1}/admina/proxy/config.py

@@ -112,7 +112,9 @@ class Settings(BaseSettings):
     #   "dry-run": same as observe but additionally tag the response so
     #              downstream tools know the request was analysed.
     # Restrictive default — opt out explicitly via ADMINA_GOVERNANCE_MODE=observe.
-    GOVERNANCE_MODE: str = "enforce"
+    # Read from ADMINA_GOVERNANCE_MODE (canonical name; the bare GOVERNANCE_MODE
+    # env var is not accepted).
+    GOVERNANCE_MODE: str = Field(default="enforce", validation_alias="ADMINA_GOVERNANCE_MODE")
 
     # Governance thresholds
     LOOP_WINDOW_SIZE: int = 10

{admina_framework-0.11.0 → admina_framework-0.11.1/admina_framework.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: admina-framework
-Version: 0.11.0
+Version: 0.11.1
 Summary: Admina — governed AI development framework
 Author-email: Stefano Noferi <info@admina.org>
 Maintainer-email: Stefano Noferi <info@admina.org>
@@ -30,7 +30,7 @@ License-File: NOTICE
 Requires-Dist: pyyaml<7,>=6.0
 Requires-Dist: click<9,>=8.1
 Requires-Dist: jinja2<4,>=3.1
-Requires-Dist: cryptography<50,>=41.0
+Requires-Dist: cryptography<51,>=41.0
 Provides-Extra: proxy
 Requires-Dist: fastapi<1,>=0.104; extra == "proxy"
 Requires-Dist: uvicorn[standard]<1,>=0.24; extra == "proxy"
@@ -331,16 +331,23 @@ from admina import GovernedModel, GovernedData, GovernedAgent, ComplianceKit
 
 | Interface | Builtin implementations |
 |-----------|------------------------|
-| Model Adapter | Ollama, OpenAI |
+| Model Adapter | Ollama, OpenAI, Anthropic, Gemini, Mistral, Bedrock, vLLM |
 | Data Connector | ChromaDB, Filesystem |
 | Governance Domain | GuardrailsAI (toxic, jailbreak, bias, PII) |
 | Compliance Template | EU AI Act |
 | Transport Adapter | MCP, HTTP REST |
 | Forensic Store | Filesystem, S3-compatible (boto3 — AWS S3, MinIO, R2, …) |
 | Auth Provider | API Key |
-| PII Engine | spaCy + Regex |
+| PII Engine | spaCy + Regex (default), Microsoft Presidio (`pip install admina-framework[presidio]`, `ADMINA_PII_ENGINE=presidio`) |
 | Alert Channel | Log, Webhook |
 
+Model adapters lazy-import their provider SDK, so install the ones you
+use: `pip install admina-framework[adapters]` for all of them, or a
+single provider (`[openai]`, `[ollama]`, `[anthropic]`, `[mistral]`,
+`[gemini]`, `[bedrock]`). vLLM has no extra of its own — it serves an
+OpenAI-compatible API and subclasses the OpenAI adapter, so install
+`[openai]` for it.
+
 ```bash
 admina plugin list                    # List registered plugins
 admina plugin install ./my-plugin     # Install a custom plugin

{admina_framework-0.11.0 → admina_framework-0.11.1}/admina_framework.egg-info/SOURCES.txt

@@ -132,6 +132,7 @@ tests/test_core_config.py
 tests/test_domains.py
 tests/test_domains_governance.py
 tests/test_engines.py
+tests/test_error_disclosure.py
 tests/test_firewall_parity.py
 tests/test_forensic_blackbox.py
 tests/test_gateway_config.py
@@ -144,6 +145,7 @@ tests/test_guard_fail_mode.py
 tests/test_mcp_transport.py
 tests/test_presidio_engine.py
 tests/test_proxy_forensic_would_action.py
+tests/test_proxy_governance_mode_config.py
 tests/test_proxy_guard_fail_mode.py
 tests/test_proxy_mcp_response_pii.py
 tests/test_proxy_plugins.py

{admina_framework-0.11.0 → admina_framework-0.11.1}/admina_framework.egg-info/requires.txt

@@ -1,7 +1,7 @@
 pyyaml<7,>=6.0
 click<9,>=8.1
 jinja2<4,>=3.1
-cryptography<50,>=41.0
+cryptography<51,>=41.0
 
 [adapters]
 admina-framework[anthropic,bedrock,gemini,mistral,ollama,openai]

{admina_framework-0.11.0 → admina_framework-0.11.1}/pyproject.toml

@@ -19,7 +19,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "admina-framework"
-version = "0.11.0"
+version = "0.11.1"
 description = "Admina — governed AI development framework"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -52,7 +52,7 @@ dependencies = [
     "pyyaml>=6.0,<7",
     "click>=8.1,<9",
     "jinja2>=3.1,<4",
-    "cryptography>=41.0,<50",
+    "cryptography>=41.0,<51",
 ]
 
 [project.urls]
@@ -161,7 +161,7 @@ dev = [
     # Documentation
     "mkdocs>=1.6,<2",
     "mkdocs-material>=9.5,<10",
-    "mkdocstrings[python]>=0.25,<1",
+    "mkdocstrings[python]>=0.25,<2",
 ]
 
 [tool.uv]

admina_framework-0.11.1/tests/test_error_disclosure.py

@@ -0,0 +1,72 @@
+# Copyright © 2025–2026 Stefano Noferi & Admina contributors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Exception text must not reach API responses (CodeQL py/stack-trace-exposure).
+
+Backend failures and guard crashes are logged server-side and recorded in the
+forensic log with full detail; the HTTP responses carry a generic reason. The
+raw text can embed hosts, ports and credentials from a connection URL.
+"""
+
+from __future__ import annotations
+
+from admina.proxy.api.integration import _scrub_check_errors
+
+# A secret-bearing message of the kind a real backend/guard failure produces.
+_LEAKY = "Connection refused: redis://admin:s3cr3t@internal-cache.corp:6379/0"
+
+
+class TestValidateResponseScrubsGuardErrors:
+    """`/api/v1/validate` must not echo guard exception text to the caller."""
+
+    def test_guard_error_text_is_replaced(self):
+        scrubbed = _scrub_check_errors({"guard_boom": {"action": "ERROR", "error": _LEAKY}})
+        assert scrubbed["guard_boom"]["error"] == "Guard error"
+        assert "s3cr3t" not in str(scrubbed)
+        assert "internal-cache.corp" not in str(scrubbed)
+
+    def test_which_guard_failed_is_still_reported(self):
+        """Scrubbing keeps the diagnostic signal: name + ERROR action."""
+        scrubbed = _scrub_check_errors({"guard_boom": {"action": "ERROR", "error": _LEAKY}})
+        assert "guard_boom" in scrubbed
+        assert scrubbed["guard_boom"]["action"] == "ERROR"
+
+    def test_non_error_checks_pass_through_untouched(self):
+        checks = {
+            "injection_firewall": {"is_injection": False, "risk_level": "none"},
+            "pii_redaction": {"count": 2},
+        }
+        assert _scrub_check_errors(checks) == checks
+
+    def test_does_not_mutate_the_caller_dict(self):
+        """The forensic record shares this dict — it must keep the full text."""
+        original = {"guard_boom": {"action": "ERROR", "error": _LEAKY}}
+        _scrub_check_errors(original)
+        assert original["guard_boom"]["error"] == _LEAKY
+
+
+class TestDashboardHealthScrubsBackendErrors:
+    """The dashboard services endpoint reports failure without the exception."""
+
+    def test_source_returns_generic_reason_not_exception_text(self):
+        """Redis/ClickHouse handlers must not put `str(exc)` in the payload."""
+        import inspect
+
+        from admina.proxy.api import dashboard
+
+        source = inspect.getsource(dashboard)
+        # The health handlers build their payload with a fixed string; the
+        # exception itself goes to logger.warning instead.
+        assert '"status": "unhealthy", "error": "Health check failed"' in source
+        assert '"error": "Health check failed",' in source
+        assert '"error": str(exc)' not in source

admina_framework-0.11.1/tests/test_proxy_governance_mode_config.py

@@ -0,0 +1,56 @@
+# Copyright © 2025–2026 Stefano Noferi & Admina contributors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Settings reads the governance mode from the canonical ADMINA_ env var.
+
+Exercises the real ``Settings`` class (not a SimpleNamespace double) with a
+patched environment: ``Settings`` declares no ``env_prefix``, so without an
+explicit ``validation_alias`` the documented ``ADMINA_GOVERNANCE_MODE`` name
+was silently ignored (``extra="ignore"``).
+"""
+
+from __future__ import annotations
+
+import pytest
+
+
+class TestGovernanceModeConfig:
+    def test_default_is_enforce(self):
+        from admina.proxy.config import Settings
+
+        s = Settings(_env_file=None)
+        assert s.GOVERNANCE_MODE == "enforce"
+
+    def test_reads_canonical_env_var(self, monkeypatch):
+        monkeypatch.setenv("ADMINA_GOVERNANCE_MODE", "OBSERVE")
+        from admina.proxy.config import Settings
+
+        s = Settings(_env_file=None)
+        assert s.GOVERNANCE_MODE == "observe"
+
+    def test_dry_run_underscore_normalized(self, monkeypatch):
+        monkeypatch.setenv("ADMINA_GOVERNANCE_MODE", "dry_run")
+        from admina.proxy.config import Settings
+
+        s = Settings(_env_file=None)
+        assert s.GOVERNANCE_MODE == "dry-run"
+
+    def test_invalid_value_rejected(self, monkeypatch):
+        from pydantic import ValidationError
+
+        from admina.proxy.config import Settings
+
+        monkeypatch.setenv("ADMINA_GOVERNANCE_MODE", "maybe")
+        with pytest.raises(ValidationError):
+            Settings(_env_file=None)