agentwit 0.4.0__tar.gz → 0.7.0__tar.gz

agentwit-0.7.0/.claude/settings.local.json

@@ -0,0 +1,24 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(python:*)",
+      "Bash(pip install:*)",
+      "Bash(git add:*)",
+      "Bash(git commit:*)",
+      "Bash(gh auth:*)",
+      "Bash(sudo apt:*)",
+      "Bash(curl:*)",
+      "Bash(pip index:*)",
+      "Bash(git push:*)",
+      "Bash(git tag:*)",
+      "Bash(python3:*)",
+      "Bash(pytest tests/ -v)",
+      "Bash(grep:*)",
+      "Bash(npm install:*)",
+      "Bash(npx tsc:*)",
+      "Bash(echo \"EXIT:$?\")",
+      "Bash(npm run:*)",
+      "Bash(cargo test:*)"
+    ]
+  }
+}

agentwit-0.7.0/.github/workflows/build_gui.yml

@@ -0,0 +1,42 @@
+name: Build GUI
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+
+jobs:
+  build-linux:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+      - name: Install dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.1-dev \
+            libappindicator3-dev librsvg2-dev patchelf
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+      - run: cd gui && npm install && npx tauri build
+      - uses: actions/upload-artifact@v4
+        with:
+          name: linux-deb
+          path: gui/src-tauri/target/release/bundle/deb/*.deb
+
+  build-windows:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+      - run: cd gui && npm install && npx tauri build
+        shell: bash
+      - uses: actions/upload-artifact@v4
+        with:
+          name: windows-msi
+          path: gui/src-tauri/target/release/bundle/msi/*.msi

agentwit-0.7.0/.github/workflows/mcp_spec_watch.yml

@@ -0,0 +1,160 @@
+name: MCP Spec Watch
+
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+on:
+  schedule:
+    - cron: "0 0 1 * *"
+  workflow_dispatch:
+
+jobs:
+  check-spec:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      issues: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install dependencies
+        run: pip install pytest pytest-asyncio httpx
+
+      - name: Install agentwit
+        run: pip install -e ".[dev]"
+
+      - name: Get latest MCP spec tag
+        id: latest
+        run: |
+          LATEST_TAG=$(curl -s https://api.github.com/repos/modelcontextprotocol/specification/tags \
+            | jq -r '.[0].name')
+          echo "tag=${LATEST_TAG}" >> "$GITHUB_OUTPUT"
+
+      - name: Read previous tag
+        id: previous
+        run: |
+          PREV_TAG=$(jq -r '.tag' .github/mcp_spec_version.json)
+          echo "tag=${PREV_TAG}" >> "$GITHUB_OUTPUT"
+
+      - name: Check for changes
+        id: changed
+        run: |
+          if [ "${{ steps.latest.outputs.tag }}" != "${{ steps.previous.outputs.tag }}" ]; then
+            echo "changed=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Fetch CHANGELOG
+        if: steps.changed.outputs.changed == 'true'
+        id: changelog
+        run: |
+          CHANGELOG=$(curl -s \
+            "https://raw.githubusercontent.com/modelcontextprotocol/specification/${{ steps.latest.outputs.tag }}/CHANGELOG.md" \
+            | head -50 || echo "(no CHANGELOG)")
+          {
+            echo "content<<EOF"
+            echo "${CHANGELOG}"
+            echo "EOF"
+          } >> "$GITHUB_OUTPUT"
+
+      - name: Run tests
+        if: steps.changed.outputs.changed == 'true'
+        id: tests
+        run: |
+          if pytest tests/ -v; then
+            echo "passed=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "passed=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Create GitHub Issue (tests passed)
+        if: steps.changed.outputs.changed == 'true' && steps.tests.outputs.passed == 'true'
+        uses: actions/github-script@v7
+        with:
+          script: |
+            await github.rest.issues.create({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              title: `📋 MCP仕様変更検知: ${{ steps.latest.outputs.tag }}`,
+              body: [
+                `## MCP仕様が更新されました`,
+                ``,
+                `- **旧バージョン:** \`${{ steps.previous.outputs.tag }}\``,
+                `- **新バージョン:** \`${{ steps.latest.outputs.tag }}\``,
+                `- **テスト:** ✅ 全通過`,
+                ``,
+                `## CHANGELOG (先頭50行)`,
+                ``,
+                `\`\`\``,
+                `${{ steps.changelog.outputs.content }}`,
+                `\`\`\``,
+              ].join('\n'),
+              labels: ['mcp-spec-update'],
+            });
+
+      - name: Create GitHub Issue (tests failed)
+        if: steps.changed.outputs.changed == 'true' && steps.tests.outputs.passed == 'false'
+        uses: actions/github-script@v7
+        with:
+          script: |
+            await github.rest.issues.create({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              title: `🚨 MCP仕様変更検知・テスト失敗: ${{ steps.latest.outputs.tag }}`,
+              body: [
+                `## MCP仕様が更新されましたが、テストが失敗しました`,
+                ``,
+                `- **旧バージョン:** \`${{ steps.previous.outputs.tag }}\``,
+                `- **新バージョン:** \`${{ steps.latest.outputs.tag }}\``,
+                `- **テスト:** ❌ 失敗`,
+                ``,
+                `## CHANGELOG (先頭50行)`,
+                ``,
+                `\`\`\``,
+                `${{ steps.changelog.outputs.content }}`,
+                `\`\`\``,
+                ``,
+                `対応が必要です。`,
+              ].join('\n'),
+              labels: ['mcp-spec-update', 'test-failure'],
+            });
+
+      - name: Discord notification
+        if: steps.changed.outputs.changed == 'true' && env.MCP_SPEC_WEBHOOK != ''
+        env:
+          MCP_SPEC_WEBHOOK: ${{ secrets.MCP_SPEC_WEBHOOK }}
+        run: |
+          if [ "${{ steps.tests.outputs.passed }}" = "true" ]; then
+            EMOJI="📋"
+            STATUS="テスト ✅ 通過"
+          else
+            EMOJI="🚨"
+            STATUS="テスト ❌ 失敗"
+          fi
+          curl -s -X POST "$MCP_SPEC_WEBHOOK" \
+            -H "Content-Type: application/json" \
+            -d "{\"content\": \"${EMOJI} MCP仕様変更検知: \`${{ steps.latest.outputs.tag }}\` (旧: \`${{ steps.previous.outputs.tag }}\`) ${STATUS}\"}"
+
+      - name: Update mcp_spec_version.json
+        if: steps.changed.outputs.changed == 'true'
+        run: |
+          NOW=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+          echo "{\"tag\": \"${{ steps.latest.outputs.tag }}\", \"last_checked\": \"${NOW}\"}" \
+            > .github/mcp_spec_version.json
+
+      - name: Commit updated spec version
+        if: steps.changed.outputs.changed == 'true'
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add .github/mcp_spec_version.json
+          git commit -m "chore: update MCP spec version to ${{ steps.latest.outputs.tag }}"
+          git push

agentwit-0.7.0/CHANGELOG.md

@@ -0,0 +1,221 @@
+# Changelog
+
+All notable changes to agentwit are documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+---
+
+## [Unreleased]
+
+---
+
+## [1.0.0] - 2026-03-22
+
+### Added
+
+- **Plugin system** — third-party detection plugins via Python entry-points
+  (`agentwit.plugins` group). `PluginBase` ABC with `scan(event) → list[dict]`.
+  `load_plugins()` auto-discovers installed plugins at proxy startup.
+- **OWASP LLM Top 10 (2025) mapping** — `OWASPMapper` class maps 15 built-in
+  risk patterns to LLM01/02/06/08/10 categories. HTML reports now include an
+  OWASP summary card and per-event OWASP column.
+- **Proxy error handling**
+  - HTTP proxy: 3-attempt exponential backoff (1 s → 2 s → 4 s) on upstream
+    connection failure. Writes `connection_error` to `audit.jsonl` on exhaustion.
+  - SSE proxy: timeout + retry (up to 3 attempts). Writes `sse_timeout` to
+    `audit.jsonl` on exhaustion.
+  - stdio proxy: auto-restarts subprocess up to 3 times on non-zero exit.
+    Writes `process_crash` to `audit.jsonl` after all restarts fail.
+- **`--timeout` CLI option** for `agentwit proxy` (default: 30 s).
+- **LangChain callback enhancements** (`AgentwitCallback`)
+  - `on_agent_action`: extracts ReAct `Thought:` line and writes
+    `agent_thought` record to `audit.jsonl`.
+  - `on_agent_finish`: writes `agent_finish` record with final answer.
+  - `on_llm_start`: writes `llm_start` record with 100-char prompt preview.
+  - `on_llm_end`: writes `llm_end` record with 100-char response preview.
+- **GUI Export Report button** — amber button in the History tab opens a native
+  save dialog, calls `generate_report` Tauri command, and shows a toast on success.
+- **Docker SIEM stack** — `docker/docker-compose.siem.yml` + extended
+  `docker/fluent-bit.conf` with Splunk HEC, Elasticsearch, and Grafana Loki
+  outputs. Sensitive fields masked by `record_modifier`.
+- **GitHub Actions GUI build** (`.github/workflows/build_gui.yml`) — builds
+  Linux `.deb` and Windows `.msi` artifacts on version tags.
+- **Documentation** — `docs/quickstart.md`, `docs/architecture.md`,
+  `docs/api-reference.md`, `docs/plugin-guide.md`, `CONTRIBUTING.md`.
+
+### Changed
+
+- Version bumped to **1.0.0**.
+- `create_proxy_app()` now accepts `timeout: float` parameter.
+- `WitnessLogger.alog_event()` now accepts optional `risk_indicators` list to
+  merge plugin alerts alongside built-in scorer results.
+- HTML report: OWASP category column added to event timeline table.
+- GUI text contrast improved (`--text-md`, `--text-lo` CSS variables updated
+  for better readability on dark background).
+
+---
+
+## [0.7.0] - 2026-02-15
+
+### Added
+
+- **OWASP LLM Top 10 mapping** (initial) — `agentwit/analyzer/owasp_mapper.py`
+  with `map()`, `describe()`, `map_events()`, and `summary()` methods.
+- **HTML report OWASP card** — new summary section shows counts per OWASP
+  category with color-coded badges.
+- 33 new tests for `OWASPMapper` (`tests/test_owasp_mapper.py`).
+
+### Changed
+
+- Version bumped to **0.7.0**.
+- `html_reporter.py` imports and calls `OWASPMapper`; event timeline includes
+  OWASP column.
+
+---
+
+## [0.6.0] - 2026-01-20
+
+### Added
+
+- **Proxy error handling with retry** — HTTP proxy retries failed upstream
+  connections 3 times with exponential backoff.
+- **SSE proxy** fully implemented — previously raised `NotImplementedError`.
+  Now streams upstream SSE events with timeout and retry support.
+- **stdio proxy auto-restart** — subprocess automatically restarted up to 3
+  times on non-zero exit code.
+- **`--timeout` option** for `agentwit proxy`.
+- **`audit.jsonl` error records** — `connection_error`, `sse_timeout`, and
+  `process_crash` record types written to `~/.agentwit/audit.jsonl`.
+- **LangChain `AgentwitCallback` enhancements** — thought extraction, audit
+  log writing for `on_agent_action`, `on_agent_finish`, `on_llm_start`,
+  `on_llm_end`. 32 new tests in `tests/test_agent_monitor.py`.
+- **GUI Export Report** — Tauri `generate_report` command, `tauri-plugin-dialog`
+  save dialog, amber Export Report button in History tab with toast notification.
+
+### Changed
+
+- Version bumped to **0.6.0**.
+- `pyproject.toml` dev extras updated.
+
+---
+
+## [0.5.0] - 2025-12-10
+
+### Added
+
+- **ed25519 signing** — every witness log event is signed with a per-host
+  ed25519 key stored at `~/.agentwit/signing_key.pem`. Signature and public key
+  fingerprint are embedded in each event.
+- **Bypass detection** — `X-Agentwit-Proxy` header round-trip check. Requests
+  reaching the upstream that bypassed the proxy are flagged as
+  `proxy_bypass_detected`.
+- **Anomaly detection** (`CostGuard`) — emits `call_rate_anomaly` when >30
+  calls/min to the same tool; emits `session_cost_exceeded` on token cost
+  threshold.
+- `agentwit verify` CLI command — recomputes SHA-256 chain and re-verifies
+  ed25519 signatures for a session. Exit code 1 on any failure.
+- `agentwit diff` CLI command — compares tool call counts and risk profiles
+  between two sessions.
+- `agentwit replay` CLI command — replays all events from a session with
+  optional chain verification.
+- **Auto-backup** — completed sessions are copied to `~/.agentwit/backups/`.
+
+### Changed
+
+- Version bumped to **0.5.0**.
+- `witness.jsonl` format extended with `signature` and `signed_by` fields.
+
+---
+
+## [0.4.0] - 2025-10-28
+
+### Added
+
+- **Prompt injection detection** — built-in patterns for `instruction_override`,
+  `role_hijack`, `jailbreak`, `hidden_instruction` (Unicode control characters),
+  and `data_extraction`. All flagged CRITICAL.
+- **Tool monitoring** — `tool_schema_change` pattern detects when a tool is
+  added or its schema changes between sessions.
+- **Docker Compose audit stack** — `docker/docker-compose.yml` with agentwit
+  proxy + Grafana Loki + Fluent Bit + Grafana dashboard.
+- **Fluent Bit integration** — ships `audit.jsonl` and `witness.jsonl` to Loki
+  with automatic auth header masking.
+
+### Changed
+
+- Version bumped to **0.4.0**.
+- Risk severity labels unified to `low` / `medium` / `high` / `critical`.
+
+---
+
+## [0.3.0] - 2025-09-05
+
+### Added
+
+- **MCP Inspector GUI** — Tauri v2 + React desktop application with three-pane
+  layout: tool list, parameter editor, response viewer.
+- Session compare view — side-by-side diff of two sessions.
+- Cost tracking panel — token usage and estimated cost per session.
+- Pre-built `.deb` package for Linux available on the Releases page.
+
+### Changed
+
+- Version bumped to **0.3.0**.
+- CLI output: colored severity labels (CRITICAL=red, HIGH=yellow, etc.).
+
+---
+
+## [0.2.0] - 2025-07-18
+
+### Added
+
+- **HTML, Markdown, and JSON report generation** — `agentwit report` command
+  with `--format` and `--output` options.
+- **LangChain integration** (`AgentwitCallback`) — records agent thoughts, tool
+  calls, LLM prompts/responses to `audit.jsonl`.
+- **Slack and Discord webhook notifications** — `--webhook` and `--webhook-on`
+  options; auto-detected from webhook URL.
+- `agentwit report` HTML report includes dark-theme event timeline and risk
+  summary grid.
+
+### Changed
+
+- Version bumped to **0.2.0**.
+- `witness.jsonl` events include `input_hash` and `output_hash` (SHA-256 of
+  request params and response result).
+
+### Fixed
+
+- SSE streams no longer buffered; each chunk forwarded immediately.
+
+---
+
+## [0.1.0] - 2025-05-30
+
+### Added
+
+- Initial release.
+- **Transparent HTTP proxy** (`agentwit proxy --target URL --port PORT`).
+- **stdio proxy** (`agentwit proxy --stdio -- COMMAND`).
+- **SHA-256 chained witness log** — tamper-evident `witness.jsonl` per session.
+- **Built-in risk scorer** — 15 detection patterns covering shell execution,
+  credential access, privilege escalation, data exfiltration, lateral movement,
+  and persistence.
+- `agentwit verify` (basic chain check, pre-signing).
+- JSONL-format witness log with `witness_id` and `session_chain` fields.
+- `--actor` option to label events by agent identity.
+- `--log-dir` option to configure the session log directory.
+
+---
+
+[Unreleased]: https://github.com/tokotokokame/agentwit/compare/v1.0.0...HEAD
+[1.0.0]: https://github.com/tokotokokame/agentwit/compare/v0.7.0...v1.0.0
+[0.7.0]: https://github.com/tokotokokame/agentwit/compare/v0.6.0...v0.7.0
+[0.6.0]: https://github.com/tokotokokame/agentwit/compare/v0.5.0...v0.6.0
+[0.5.0]: https://github.com/tokotokokame/agentwit/compare/v0.4.0...v0.5.0
+[0.4.0]: https://github.com/tokotokokame/agentwit/compare/v0.3.0...v0.4.0
+[0.3.0]: https://github.com/tokotokokame/agentwit/compare/v0.2.0...v0.3.0
+[0.2.0]: https://github.com/tokotokokame/agentwit/compare/v0.1.0...v0.2.0
+[0.1.0]: https://github.com/tokotokokame/agentwit/releases/tag/v0.1.0