agentguardproxy 0.9.0__tar.gz → 1.0.0__tar.gz

{agentguardproxy-0.9.0 → agentguardproxy-1.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentguardproxy
-Version: 0.9.0
+Version: 1.0.0
 Summary: Python SDK for AgentGuard — the firewall for AI agents
 Author-email: Cauã Ferraz <cauaferrazp@gmail.com>
 License-Expression: Apache-2.0

{agentguardproxy-0.9.0 → agentguardproxy-1.0.0}/agentguard/adapters/_common.py

@@ -21,19 +21,45 @@ def domain_from_url(url: Any) -> str:
         return ""
 
 
+# Filesystem-action verb groups. These MUST stay byte-identical to the Go
+# transports' gateclient.InferFilesystemAction (pkg/internal/gateclient/
+# gateclient.go): same verbs, same groups, same precedence (read, then
+# write, then delete). Parity is pinned by two mirrored test tables —
+# plugins/python/tests/test_action_parity.py and
+# pkg/internal/gateclient/gateclient_test.go. Edit both sides together.
+_READ_PREFIXES = ("read", "list", "get", "stat", "cat", "find", "glob")
+_WRITE_PREFIXES = ("write", "edit", "create", "append", "save", "copy", "move")
+_DELETE_PREFIXES = ("delete", "remove", "unlink", "rm")
+
+
 def infer_path_action(tool_name: Any) -> str:
     """Map a tool-name verb to the canonical filesystem action
-    ("read"/"write"/"delete"), or "" when no verb matches. Mirrors the
-    Go side's gateclient.InferFilesystemAction verb groups.
+    ("read"/"write"/"delete"), or "" when no verb matches.
+
+    Mirrors the Go transports' gateclient.InferFilesystemAction exactly:
+    a case-insensitive ``strings.HasPrefix`` (Python ``str.startswith``)
+    against these verb groups, checked in this order —
+
+        read   = read, list, get, stat, cat, find, glob
+        write  = write, edit, create, append, save, copy, move
+        delete = delete, remove, unlink, rm
+
+    Prefix (not substring) matching is deliberate: it avoids the false
+    positives substring matching produces that Go never makes — e.g.
+    "set_target" contains "get" but does not START with it, and
+    "undelete_x" contains "delete" but does not start with it. Both
+    correctly yield "" here, matching Go. Parity is pinned by
+    plugins/python/tests/test_action_parity.py, whose table mirrors
+    pkg/internal/gateclient/gateclient_test.go.
     """
     if not isinstance(tool_name, str):
         return ""
     name_lower = tool_name.lower()
-    if "read" in name_lower or "get" in name_lower:
+    if name_lower.startswith(_READ_PREFIXES):
         return "read"
-    if "write" in name_lower or "save" in name_lower or "create" in name_lower:
+    if name_lower.startswith(_WRITE_PREFIXES):
         return "write"
-    if "delete" in name_lower or "remove" in name_lower:
+    if name_lower.startswith(_DELETE_PREFIXES):
         return "delete"
     return ""
 

{agentguardproxy-0.9.0 → agentguardproxy-1.0.0}/agentguard/adapters/mcp.py

@@ -41,7 +41,7 @@ from agentguard.adapters._common import extract_check_params
 
 # MCP protocol constants
 MCP_PROTOCOL_VERSION = "2024-11-05"
-SDK_VERSION = "0.9.0"
+SDK_VERSION = "1.0.0"
 
 # Secret patterns mirrored from pkg/notify/notify.go's DefaultRedactor. The
 # MCP adapter forwards handler exception text back to the client as a

{agentguardproxy-0.9.0 → agentguardproxy-1.0.0}/agentguardproxy.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentguardproxy
-Version: 0.9.0
+Version: 1.0.0
 Summary: Python SDK for AgentGuard — the firewall for AI agents
 Author-email: Cauã Ferraz <cauaferrazp@gmail.com>
 License-Expression: Apache-2.0

{agentguardproxy-0.9.0 → agentguardproxy-1.0.0}/agentguardproxy.egg-info/SOURCES.txt

@@ -14,6 +14,7 @@ agentguardproxy.egg-info/SOURCES.txt
 agentguardproxy.egg-info/dependency_links.txt
 agentguardproxy.egg-info/requires.txt
 agentguardproxy.egg-info/top_level.txt
+tests/test_action_parity.py
 tests/test_adapters.py
 tests/test_adapters_extended.py
 tests/test_browseruse.py

{agentguardproxy-0.9.0 → agentguardproxy-1.0.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agentguardproxy"
-version = "0.9.0"
+version = "1.0.0"
 description = "Python SDK for AgentGuard — the firewall for AI agents"
 readme = "README.md"
 license = "Apache-2.0"

agentguardproxy-1.0.0/tests/test_action_parity.py

@@ -0,0 +1,113 @@
+"""Filesystem-action inference parity: Python SDK <-> Go transports.
+
+The Python adapters (infer_path_action in agentguard.adapters._common) and
+the Go transports (gateclient.InferFilesystemAction) must map a tool name to
+the SAME filesystem `action` ("read"/"write"/"delete"/""), otherwise an
+`action:`-keyed filesystem policy rule fires on one transport and not the
+other for the same tool call.
+
+The table below is the SAME (tool_name -> action) table pinned on the Go
+side in pkg/internal/gateclient/gateclient_test.go (TestInferFilesystemAction).
+When you add or change a verb in one place, change it in the other and update
+BOTH tables — this test and that Go test are the tripwire.
+
+This module imports ONLY agentguard.adapters._common, so it runs without
+langchain / crewai / mcp (or any framework dependency) installed.
+"""
+
+from agentguard.adapters._common import infer_path_action
+
+
+# Mirror of gateclient_test.go's TestInferFilesystemAction table. Keep in sync.
+GO_PARITY_TABLE = {
+    "read_file": "read",
+    "list_files": "read",
+    "get_file": "read",
+    "stat_file": "read",
+    "cat": "read",
+    "find_files": "read",
+    "glob": "read",
+    "write_file": "write",
+    "edit_file": "write",
+    "create_dir": "write",
+    "append_file": "write",
+    "delete_file": "delete",
+    "remove_dir": "delete",
+    "unlink": "delete",
+    "unknown": "",
+}
+
+# Extra regression cases for verbs the substring implementation used to miss
+# (edit/append/copy/move/unlink/rm*/list/stat/cat/find/glob). These are the
+# tool names that previously sent NO action through the Python SDK while the
+# Go transports DID send one.
+REGRESSION_TABLE = {
+    "edit_file": "write",
+    "append_file": "write",
+    "copy_file": "write",
+    "move_file": "write",
+    "unlink": "delete",
+    "rmdir": "delete",  # "rm" prefix
+    "rm": "delete",
+    "list_files": "read",
+    "stat_file": "read",
+    "cat": "read",
+    "find_files": "read",
+    "glob": "read",
+}
+
+# False-positive guards: substring matching (the old behavior) wrongly mapped
+# these; prefix matching (Go's HasPrefix, our str.startswith) does not.
+FALSE_POSITIVE_TABLE = {
+    "set_target": "",   # contains "get" but does not START with it
+    "undelete_x": "",   # contains "delete" but does not START with it
+    "forget": "",       # contains "get"
+    "overwrite": "",    # contains "write"
+}
+
+
+def test_go_parity_table():
+    """Every pinned Go case maps identically in Python."""
+    for tool_name, expected in GO_PARITY_TABLE.items():
+        assert infer_path_action(tool_name) == expected, (
+            f"infer_path_action({tool_name!r}) diverged from Go parity table"
+        )
+
+
+def test_regression_cases_previously_missed_by_substring():
+    for tool_name, expected in REGRESSION_TABLE.items():
+        assert infer_path_action(tool_name) == expected, (
+            f"infer_path_action({tool_name!r}) regressed"
+        )
+
+
+def test_false_positive_guards():
+    for tool_name, expected in FALSE_POSITIVE_TABLE.items():
+        assert infer_path_action(tool_name) == expected, (
+            f"infer_path_action({tool_name!r}) should be {expected!r} "
+            f"(prefix, not substring, matching)"
+        )
+
+
+def test_non_string_input_is_empty():
+    for bad in (None, 123, ["read_file"], {"name": "read_file"}, object()):
+        assert infer_path_action(bad) == ""
+
+
+def test_case_insensitive():
+    # HasPrefix is applied to strings.ToLower(toolName) on the Go side; we
+    # lowercase too, so mixed case still resolves.
+    assert infer_path_action("READ_File") == "read"
+    assert infer_path_action("Write_Thing") == "write"
+    assert infer_path_action("DELETE_it") == "delete"
+
+
+if __name__ == "__main__":
+    # Allow a framework-free smoke run without pytest installed.
+    for table in (GO_PARITY_TABLE, REGRESSION_TABLE, FALSE_POSITIVE_TABLE):
+        for name, want in table.items():
+            got = infer_path_action(name)
+            assert got == want, f"{name!r}: got {got!r}, want {want!r}"
+    for bad in (None, 123, ["x"], {"a": 1}):
+        assert infer_path_action(bad) == ""
+    print("action-parity smoke OK")