clearfront 2.5.0__tar.gz → 2.6.0__tar.gz

{clearfront-2.5.0 → clearfront-2.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: clearfront
-Version: 2.5.0
+Version: 2.6.0
 Summary: AI-powered OSINT agent, MCP server, and CLI. Interactive REPL + 30 tools. Anthropic Claude or local Ollama. For authorized security research use only.
 Author: Scott Martin Anderson
 License-Expression: MIT
@@ -23,50 +23,50 @@ Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: mcp>=1.28.1
-Requires-Dist: anthropic>=0.40.0
-Requires-Dist: requests>=2.31.0
+Requires-Dist: anthropic>=0.116.0
+Requires-Dist: requests>=2.34.2
 Requires-Dist: python-whois>=0.9.6
-Requires-Dist: rich>=13.0.0
-Requires-Dist: prompt_toolkit>=3.0.0
-Requires-Dist: python-dotenv>=1.0.0
+Requires-Dist: rich>=15.0.0
+Requires-Dist: prompt_toolkit>=3.0.52
+Requires-Dist: python-dotenv>=1.2.2
 Requires-Dist: aiohttp>=3.14.1
 Requires-Dist: dnspython>=2.8.0
-Requires-Dist: ddgs>=9.0.0
+Requires-Dist: ddgs>=9.14.4
 Requires-Dist: fastapi>=0.139.0
-Requires-Dist: uvicorn[standard]>=0.29.0
-Requires-Dist: httpx>=0.27.0
+Requires-Dist: uvicorn[standard]>=0.51.0
+Requires-Dist: httpx>=0.28.1
 Provides-Extra: dev
-Requires-Dist: pytest>=7.0; extra == "dev"
-Requires-Dist: pytest-asyncio>=0.21; extra == "dev"
+Requires-Dist: pytest>=9.1.1; extra == "dev"
+Requires-Dist: pytest-asyncio>=1.4.0; extra == "dev"
 Requires-Dist: pytest-cov>=7.1.0; extra == "dev"
 Requires-Dist: pytest-freezegun>=0.4.2; extra == "dev"
-Requires-Dist: ruff>=0.1.0; extra == "dev"
+Requires-Dist: ruff>=0.15.20; extra == "dev"
 Provides-Extra: shodan
 Requires-Dist: shodan>=1.31.0; extra == "shodan"
 Provides-Extra: ollama
-Requires-Dist: ollama>=0.3.0; extra == "ollama"
+Requires-Dist: ollama>=0.6.2; extra == "ollama"
 Provides-Extra: openai
-Requires-Dist: openai>=1.40.0; extra == "openai"
+Requires-Dist: openai>=2.44.0; extra == "openai"
 Provides-Extra: pdf
-Requires-Dist: reportlab>=4.0.0; extra == "pdf"
+Requires-Dist: reportlab>=5.0.0; extra == "pdf"
 Provides-Extra: censys
-Requires-Dist: censys-platform>=0.14.0; extra == "censys"
+Requires-Dist: censys-platform>=0.15.1; extra == "censys"
 Provides-Extra: web
 Requires-Dist: fastapi>=0.139.0; extra == "web"
-Requires-Dist: uvicorn[standard]>=0.29.0; extra == "web"
-Requires-Dist: sse-starlette>=1.8.0; extra == "web"
-Requires-Dist: python-dotenv>=1.0.0; extra == "web"
-Requires-Dist: anthropic>=0.25.0; extra == "web"
-Requires-Dist: playwright>=1.40.0; extra == "web"
+Requires-Dist: uvicorn[standard]>=0.51.0; extra == "web"
+Requires-Dist: sse-starlette>=3.4.5; extra == "web"
+Requires-Dist: python-dotenv>=1.2.2; extra == "web"
+Requires-Dist: anthropic>=0.116.0; extra == "web"
+Requires-Dist: playwright>=1.61.0; extra == "web"
 Provides-Extra: all
 Requires-Dist: shodan>=1.31.0; extra == "all"
-Requires-Dist: ollama>=0.3.0; extra == "all"
-Requires-Dist: openai>=1.40.0; extra == "all"
-Requires-Dist: reportlab>=4.0.0; extra == "all"
-Requires-Dist: censys-platform>=0.14.0; extra == "all"
+Requires-Dist: ollama>=0.6.2; extra == "all"
+Requires-Dist: openai>=2.44.0; extra == "all"
+Requires-Dist: reportlab>=5.0.0; extra == "all"
+Requires-Dist: censys-platform>=0.15.1; extra == "all"
 Requires-Dist: fastapi>=0.139.0; extra == "all"
-Requires-Dist: uvicorn[standard]>=0.29.0; extra == "all"
-Requires-Dist: sse-starlette>=1.8.0; extra == "all"
+Requires-Dist: uvicorn[standard]>=0.51.0; extra == "all"
+Requires-Dist: sse-starlette>=3.4.5; extra == "all"
 Dynamic: license-file
 
 <div align="center">
@@ -81,7 +81,7 @@ Dynamic: license-file
 [![Python](https://img.shields.io/badge/python-3.10%2B-blue?style=flat-square)](https://www.python.org/)
 [![License MIT](https://img.shields.io/badge/license-MIT-green?style=flat-square)](LICENSE)
 [![MCP](https://img.shields.io/badge/protocol-MCP-blueviolet?style=flat-square)](https://modelcontextprotocol.io/)
-[![Version](https://img.shields.io/badge/version-2.5.0-informational?style=flat-square)](CHANGELOG.md)
+[![Version](https://img.shields.io/badge/version-2.6.0-informational?style=flat-square)](CHANGELOG.md)
 
 **[clearfront.sh](https://clearfront.sh)** · [Disclaimer](./DISCLAIMER.md)
 

{clearfront-2.5.0 → clearfront-2.6.0}/README.md

@@ -10,7 +10,7 @@
 [![Python](https://img.shields.io/badge/python-3.10%2B-blue?style=flat-square)](https://www.python.org/)
 [![License MIT](https://img.shields.io/badge/license-MIT-green?style=flat-square)](LICENSE)
 [![MCP](https://img.shields.io/badge/protocol-MCP-blueviolet?style=flat-square)](https://modelcontextprotocol.io/)
-[![Version](https://img.shields.io/badge/version-2.5.0-informational?style=flat-square)](CHANGELOG.md)
+[![Version](https://img.shields.io/badge/version-2.6.0-informational?style=flat-square)](CHANGELOG.md)
 
 **[clearfront.sh](https://clearfront.sh)** · [Disclaimer](./DISCLAIMER.md)
 

{clearfront-2.5.0 → clearfront-2.6.0}/clearfront/agent.py

@@ -827,12 +827,26 @@ class OISAgent:
         )
         try:
             while True:
+                # Prompt caching: a breakpoint on the (single) system block caches the
+                # system prompt + all tool definitions together (tools render before
+                # system), so that large stable prefix is re-billed at ~0.1x on every
+                # round instead of full price. Top-level cache_control auto-places a
+                # second breakpoint on the last message block, so the growing tool-output
+                # history is cached incrementally across rounds. Caching changes billing
+                # only; the model sees identical content and produces identical output.
                 response = await self.client.messages.create(
                     model=self.model,
                     max_tokens=_MAX_TOKENS,
-                    system=SYSTEM_PROMPT,
+                    system=[
+                        {
+                            "type": "text",
+                            "text": SYSTEM_PROMPT,
+                            "cache_control": {"type": "ephemeral"},
+                        }
+                    ],
                     tools=TOOL_DEFINITIONS,  # type: ignore[arg-type]
                     messages=ctx.messages,  # type: ignore[arg-type]
+                    cache_control={"type": "ephemeral"},
                 )
                 if response.stop_reason == "end_turn":
                     text = _extract_first_text(response.content)

{clearfront-2.5.0 → clearfront-2.6.0}/clearfront/mcp_server.py

@@ -1,6 +1,6 @@
 # clearfront/mcp_server.py
 """
-Clearfront MCP Server, v2.5.0
+Clearfront MCP Server, v2.6.0
 
 Exposes all 30 OSINT tool capabilities plus multi-target investigation
 to MCP-compliant AI clients over standard I/O. Tools include:

{clearfront-2.5.0 → clearfront-2.6.0}/clearfront/web/index.html

@@ -514,15 +514,51 @@
 
   <!-- right: backend status readout + controls -->
   <div class="flex items-center gap-1.5 flex-none">
+    <!-- sweep-depth selector: no-noun chip, opens a level menu whose footer explains the cost -->
+    <div class="relative hidden sm:block" @keydown.escape.window="depthOpen = false">
+      <button @click="depthOpen = !depthOpen"
+              :aria-expanded="depthOpen"
+              aria-haspopup="true"
+              aria-label="Sweep depth"
+              title="Sweep depth: how far each investigation reaches. Trades time and API budget, never analyst quality."
+              class="flex items-center gap-1.5 font-mono text-xs px-2.5 py-1 rounded border border-app text-primary bg-transparent hover:border-strong transition-colors cursor-pointer whitespace-nowrap">
+        <span x-text="depthCurrent().name"></span>
+        <svg width="9" height="9" viewBox="0 0 10 10" fill="none" stroke="currentColor"
+             class="transition-transform" :class="depthOpen && 'rotate-180'">
+          <path d="M2.5 4 L5 6.5 L7.5 4" stroke-width="1.2" stroke-linecap="round" stroke-linejoin="round"/>
+        </svg>
+      </button>
+      <div x-show="depthOpen" x-cloak
+           x-transition:enter="transition ease-out duration-100" x-transition:enter-start="opacity-0" x-transition:enter-end="opacity-100"
+           @click.outside="depthOpen = false" @mouseleave="depthHover = null"
+           role="radiogroup" aria-label="Sweep depth"
+           class="absolute right-0 mt-2 w-60 p-1.5 rounded-lg border border-app bg-surface z-50"
+           style="box-shadow:0 8px 24px rgba(0,0,0,0.28);">
+        <template x-for="l in depthLevels" :key="l.v">
+          <button @click="setDepth(l.v)" @mouseenter="depthHover = l.v" @focus="depthHover = l.v"
+                  role="radio" :aria-checked="settings.depth === l.v"
+                  class="flex items-center justify-between gap-2 w-full text-left font-mono text-xs px-2.5 py-2 rounded transition-colors"
+                  :class="settings.depth === l.v ? 'bg-accent text-bg' : 'text-secondary hover:text-primary'">
+            <span x-text="l.name"></span>
+            <svg x-show="settings.depth === l.v" width="12" height="12" viewBox="0 0 12 12" fill="none" stroke="currentColor">
+              <path d="M2.5 6.5 L4.8 8.8 L9.5 3.5" stroke-width="1.4" stroke-linecap="round" stroke-linejoin="round"/>
+            </svg>
+          </button>
+        </template>
+        <div class="mt-1 pt-2 px-2 border-t border-app text-secondary"
+             style="font-size:12px;line-height:1.42;" x-text="depthExplained().desc"></div>
+      </div>
+    </div>
+    <div class="hidden sm:block w-px h-5 bg-border mx-0.5"></div>
     <!-- backend status readout -->
     <button @click="showSettings = true"
             :title="aiBackend === 'none' ? 'No AI backend configured, click to set up' : 'AI backend, click to change'"
             class="hidden sm:flex items-center gap-2 font-mono text-xs px-2.5 py-1 rounded border border-app text-secondary bg-transparent hover:text-primary hover:border-strong transition-colors cursor-pointer whitespace-nowrap">
       <span class="w-1.5 h-1.5 rounded-full flex-none"
-            :style="aiBackend === 'none' ? 'background-color:var(--red)' : 'background-color:var(--text-muted)'"></span>
-      <span x-show="aiBackend === 'claude'" x-text="claudeModelLabel"></span>
-      <span x-show="aiBackend === 'ollama'">Ollama <span x-text="settings.ollamaModel"></span></span>
-      <span x-show="aiBackend === 'openai'">OpenAI <span x-text="settings.openaiModel || 'model'"></span></span>
+            :style="aiBackend === 'none' ? 'background-color:var(--red)' : 'background-color:var(--accent)'"></span>
+      <span x-show="aiBackend !== 'none' && settings.chatModel === 'claude'" x-text="claudeModelLabel"></span>
+      <span x-show="aiBackend !== 'none' && settings.chatModel === 'ollama'">Ollama <span x-text="settings.ollamaModel || 'model'"></span></span>
+      <span x-show="aiBackend !== 'none' && settings.chatModel === 'openai'">OpenAI <span x-text="settings.openaiModel || 'model'"></span></span>
       <span x-show="aiBackend === 'none'">Not configured</span>
     </button>
     <div class="hidden sm:block w-px h-5 bg-border mx-0.5"></div>
@@ -884,7 +920,7 @@ OPEN-SOURCE INTELLIGENCE                                     AUTHORIZED USE · v
 <script>
 document.addEventListener('alpine:init', () => {
   Alpine.data('clearfront', () => ({
-    version: '2.5.0',
+    version: '2.6.0',
     booting: false,
     bootLines: [],
     bootAnim: false,
@@ -919,6 +955,16 @@ document.addEventListener('alpine:init', () => {
     setupData: {},
     isLight: false,
 
+    // Sweep depth: header control for how far each investigation fans out. Trades
+    // collection breadth (tool rounds), never analyst quality. Persisted in settings.
+    depthOpen: false,
+    depthHover: null,
+    depthLevels: [
+      { v: 'faster',   name: 'Faster',   desc: 'Checks fewer sources for a quick sweep. Finishes fast and uses less of your API budget.' },
+      { v: 'balanced', name: 'Balanced', desc: 'Covers the main sources. A middle ground on time and cost.' },
+      { v: 'deeper',   name: 'Deeper',   desc: 'Follows every lead for the most complete map, but takes longer and uses more of your API budget.' },
+    ],
+
     settings: {
       chatModel: 'claude',
       ollamaModel: 'llama3.2',
@@ -926,6 +972,7 @@ document.addEventListener('alpine:init', () => {
       openaiBaseUrl: '',
       openaiModel: '',
       openaiApiKey: '',
+      depth: 'deeper',
     },
 
     // one-click self-checks (no input needed), the thesis-core actions
@@ -1192,6 +1239,11 @@ document.addEventListener('alpine:init', () => {
       try { localStorage.setItem('clearfront_settings', JSON.stringify(this.settings)); } catch {}
     },
 
+    // sweep-depth control
+    depthCurrent() { return this.depthLevels.find(l => l.v === this.settings.depth) || this.depthLevels[2]; },
+    depthExplained() { return this.depthLevels.find(l => l.v === (this.depthHover || this.settings.depth)) || this.depthCurrent(); },
+    setDepth(v) { this.settings.depth = v; this.saveLocalSettings(); this.depthOpen = false; },
+
     // health / tools
     async fetchHealth() {
       try {
@@ -1281,6 +1333,7 @@ document.addEventListener('alpine:init', () => {
         openai_base_url: this.settings.openaiBaseUrl,
         openai_model: this.settings.openaiModel,
         openai_api_key: this.settings.openaiApiKey,
+        depth: this.settings.depth,
       };
 
       let fullText = '';

{clearfront-2.5.0 → clearfront-2.6.0}/clearfront/web_server.py

@@ -670,6 +670,7 @@ class ChatRequest(BaseModel):
     message: str
     history: list[dict] = []
     model: str = "claude"
+    depth: str = "deeper"
     ollama_model: str = "llama3.2"
     ollama_host: str = "http://localhost:11434"
     openai_base_url: str = ""
@@ -800,7 +801,64 @@ _GRAPH_SYSTEM_PROMPT = (
 )
 
 
-async def _stream_claude(messages: list[dict]) -> AsyncIterator[dict]:
+# ---------------------------------------------------------------------------
+# Sweep depth: how far the analyst fans out per investigation. It trades collection
+# breadth (number of tool rounds) and the matching enrichment instruction, never the
+# analyst's reasoning or output quality. "deeper" is the full default fan-out and is
+# byte-identical to the historical prompt (no mode preamble, unchanged enrichment
+# clause); "balanced" and "faster" run fewer rounds with a softened enrichment clause
+# so the report reads deliberate, not truncated at the cap. The Deeper ceiling stays
+# env-tunable via OIS_MAX_TOOL_ROUNDS; the lighter levels are capped relative to it.
+# ---------------------------------------------------------------------------
+_GRAPH_SUFFIX = (
+    "Do not emit any graph block yourself; the evidence graph is generated separately "
+    "after your report."
+)
+_DEPTH_ENRICH = {
+    "deeper": (
+        "- Enrich aggressively before finalising. The goal is a complete map of how the target's "
+        "footprint connects, not a minimal answer. Every time a pivot surfaces (an email, domain, "
+        "company, real name, phone, or an additional handle), expand it with the applicable tools, "
+        "then expand the new entities those reveal, chaining outward until the tool budget is "
+        "reached. Do not stop at one or two pivots. The more real, connected entities you surface, "
+        "the stronger the report and the denser the evidence graph. "
+    ),
+    "balanced": (
+        "- Enrich the strongest pivots before finalising. When a high-value pivot surfaces (a "
+        "confirmed email, domain, real name, or primary handle), expand it with the applicable "
+        "tools, then expand the entities those reveal. Prioritise the connections most likely to "
+        "be real over exhaustively chasing every lead, and deliver a solid map of the main "
+        "footprint within the tool budget. "
+    ),
+    "faster": (
+        "- This is a focused first-look sweep. Run the highest-signal tools for this target type, "
+        "expand only the single strongest pivot if one clearly surfaces, and do not chase secondary "
+        "leads. Deliver a tight, accurate report from what the priority sources return, and note "
+        "that a deeper sweep is available if the user wants the full map. "
+    ),
+}
+# Mode preamble is added ONLY for the lighter levels so the opening tasking line scales
+# its scope and completion estimate. Deeper gets no preamble, keeping its prompt unchanged.
+_DEPTH_MODE_LINE = {
+    "balanced": (
+        "COLLECTION MODE: Balanced. Run a moderate sweep of the main sources. Scale the opening "
+        "completion estimate down accordingly, not to the full deep-sweep timing."
+    ),
+    "faster": (
+        "COLLECTION MODE: Faster. Run a quick focused pass over priority sources. Keep the opening "
+        "completion estimate short and do not promise mapping every reachable data point."
+    ),
+}
+
+
+def _depth_rounds(depth: str) -> int:
+    """Tool-round ceiling for a depth level. Deeper stays env-tunable (default 12); the
+    lighter levels are capped below it and never exceed it."""
+    ceiling = int(os.environ.get("OIS_MAX_TOOL_ROUNDS", "12"))
+    return {"faster": min(4, ceiling), "balanced": min(8, ceiling)}.get(depth, ceiling)
+
+
+async def _stream_claude(messages: list[dict], depth: str = "deeper") -> AsyncIterator[dict]:
     """Yield SSE event dicts while running an agentic Claude loop with tool_use."""
     try:
         import anthropic as _anthropic
@@ -816,12 +874,13 @@ async def _stream_claude(messages: list[dict]) -> AsyncIterator[dict]:
         yield {"type": "error", "message": "ANTHROPIC_API_KEY not set."}
         return
 
+    depth = depth if depth in _DEPTH_ENRICH else "deeper"
     client = _anthropic.AsyncAnthropic(api_key=api_key)
     msgs = list(messages)
     # Tool-calling rounds drive how far the analyst fans out across pivots, which is what
     # makes the evidence graph dense (more enriched entities = more nodes and connectors).
-    # Env-tunable so depth vs speed/cost can be dialled without a code change.
-    _MAX_TOOL_ROUNDS = int(os.environ.get("OIS_MAX_TOOL_ROUNDS", "12"))
+    # Scaled by the selected sweep depth; the Deeper ceiling stays env-tunable.
+    _MAX_TOOL_ROUNDS = _depth_rounds(depth)
     _tool_rounds = 0
     tool_ran = False
     # Memoize (tool, args) for this one investigation so the multi-round loop does not
@@ -830,7 +889,9 @@ async def _stream_claude(messages: list[dict]) -> AsyncIterator[dict]:
     # Cross-tool corroboration for this one investigation (additive notes only).
     corroboration_ledger = CorroborationLedger()
 
-    system_prompt = (
+    # Deeper gets no preamble (prompt unchanged); lighter levels get a mode line up top.
+    _preamble = f"{_DEPTH_MODE_LINE[depth]}\n\n" if depth in _DEPTH_MODE_LINE else ""
+    system_prompt = _preamble + (
         "You are CLEARFRONT, an open-source intelligence (OSINT) analyst. You write to the analytic "
         "tradecraft of the intelligence community, the standard behind platforms like Palantir "
         "Gotham. When the user gives a target, use the available tools to gather intelligence, then "
@@ -899,13 +960,8 @@ async def _stream_claude(messages: list[dict]) -> AsyncIterator[dict]:
         "'- Sherlock: 8 accounts verified. Reliability: high.', "
         "'- Pastebin: unavailable (network error).'\n"
         "- Use '- ' for every bullet. Never leave a blank line between consecutive bullets.\n\n"
-        "- Enrich aggressively before finalising. The goal is a complete map of how the target's "
-        "footprint connects, not a minimal answer. Every time a pivot surfaces (an email, domain, "
-        "company, real name, phone, or an additional handle), expand it with the applicable tools, "
-        "then expand the new entities those reveal, chaining outward until the tool budget is "
-        "reached. Do not stop at one or two pivots. The more real, connected entities you surface, "
-        "the stronger the report and the denser the evidence graph. Do not emit any graph block "
-        "yourself; the evidence graph is generated separately after your report."
+        + _DEPTH_ENRICH[depth]
+        + _GRAPH_SUFFIX
     )
 
     while True:
@@ -1722,7 +1778,7 @@ def create_app(*, host_guard: bool = False) -> FastAPI:
             elif backend == "ollama":
                 gen = _stream_ollama(messages, req.ollama_host, req.ollama_model)
             else:
-                gen = _stream_claude(messages)
+                gen = _stream_claude(messages, depth=req.depth)
 
             async for event in gen:
                 yield f"data: {json.dumps(event)}\n\n"

{clearfront-2.5.0 → clearfront-2.6.0}/clearfront.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: clearfront
-Version: 2.5.0
+Version: 2.6.0
 Summary: AI-powered OSINT agent, MCP server, and CLI. Interactive REPL + 30 tools. Anthropic Claude or local Ollama. For authorized security research use only.
 Author: Scott Martin Anderson
 License-Expression: MIT
@@ -23,50 +23,50 @@ Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: mcp>=1.28.1
-Requires-Dist: anthropic>=0.40.0
-Requires-Dist: requests>=2.31.0
+Requires-Dist: anthropic>=0.116.0
+Requires-Dist: requests>=2.34.2
 Requires-Dist: python-whois>=0.9.6
-Requires-Dist: rich>=13.0.0
-Requires-Dist: prompt_toolkit>=3.0.0
-Requires-Dist: python-dotenv>=1.0.0
+Requires-Dist: rich>=15.0.0
+Requires-Dist: prompt_toolkit>=3.0.52
+Requires-Dist: python-dotenv>=1.2.2
 Requires-Dist: aiohttp>=3.14.1
 Requires-Dist: dnspython>=2.8.0
-Requires-Dist: ddgs>=9.0.0
+Requires-Dist: ddgs>=9.14.4
 Requires-Dist: fastapi>=0.139.0
-Requires-Dist: uvicorn[standard]>=0.29.0
-Requires-Dist: httpx>=0.27.0
+Requires-Dist: uvicorn[standard]>=0.51.0
+Requires-Dist: httpx>=0.28.1
 Provides-Extra: dev
-Requires-Dist: pytest>=7.0; extra == "dev"
-Requires-Dist: pytest-asyncio>=0.21; extra == "dev"
+Requires-Dist: pytest>=9.1.1; extra == "dev"
+Requires-Dist: pytest-asyncio>=1.4.0; extra == "dev"
 Requires-Dist: pytest-cov>=7.1.0; extra == "dev"
 Requires-Dist: pytest-freezegun>=0.4.2; extra == "dev"
-Requires-Dist: ruff>=0.1.0; extra == "dev"
+Requires-Dist: ruff>=0.15.20; extra == "dev"
 Provides-Extra: shodan
 Requires-Dist: shodan>=1.31.0; extra == "shodan"
 Provides-Extra: ollama
-Requires-Dist: ollama>=0.3.0; extra == "ollama"
+Requires-Dist: ollama>=0.6.2; extra == "ollama"
 Provides-Extra: openai
-Requires-Dist: openai>=1.40.0; extra == "openai"
+Requires-Dist: openai>=2.44.0; extra == "openai"
 Provides-Extra: pdf
-Requires-Dist: reportlab>=4.0.0; extra == "pdf"
+Requires-Dist: reportlab>=5.0.0; extra == "pdf"
 Provides-Extra: censys
-Requires-Dist: censys-platform>=0.14.0; extra == "censys"
+Requires-Dist: censys-platform>=0.15.1; extra == "censys"
 Provides-Extra: web
 Requires-Dist: fastapi>=0.139.0; extra == "web"
-Requires-Dist: uvicorn[standard]>=0.29.0; extra == "web"
-Requires-Dist: sse-starlette>=1.8.0; extra == "web"
-Requires-Dist: python-dotenv>=1.0.0; extra == "web"
-Requires-Dist: anthropic>=0.25.0; extra == "web"
-Requires-Dist: playwright>=1.40.0; extra == "web"
+Requires-Dist: uvicorn[standard]>=0.51.0; extra == "web"
+Requires-Dist: sse-starlette>=3.4.5; extra == "web"
+Requires-Dist: python-dotenv>=1.2.2; extra == "web"
+Requires-Dist: anthropic>=0.116.0; extra == "web"
+Requires-Dist: playwright>=1.61.0; extra == "web"
 Provides-Extra: all
 Requires-Dist: shodan>=1.31.0; extra == "all"
-Requires-Dist: ollama>=0.3.0; extra == "all"
-Requires-Dist: openai>=1.40.0; extra == "all"
-Requires-Dist: reportlab>=4.0.0; extra == "all"
-Requires-Dist: censys-platform>=0.14.0; extra == "all"
+Requires-Dist: ollama>=0.6.2; extra == "all"
+Requires-Dist: openai>=2.44.0; extra == "all"
+Requires-Dist: reportlab>=5.0.0; extra == "all"
+Requires-Dist: censys-platform>=0.15.1; extra == "all"
 Requires-Dist: fastapi>=0.139.0; extra == "all"
-Requires-Dist: uvicorn[standard]>=0.29.0; extra == "all"
-Requires-Dist: sse-starlette>=1.8.0; extra == "all"
+Requires-Dist: uvicorn[standard]>=0.51.0; extra == "all"
+Requires-Dist: sse-starlette>=3.4.5; extra == "all"
 Dynamic: license-file
 
 <div align="center">
@@ -81,7 +81,7 @@ Dynamic: license-file
 [![Python](https://img.shields.io/badge/python-3.10%2B-blue?style=flat-square)](https://www.python.org/)
 [![License MIT](https://img.shields.io/badge/license-MIT-green?style=flat-square)](LICENSE)
 [![MCP](https://img.shields.io/badge/protocol-MCP-blueviolet?style=flat-square)](https://modelcontextprotocol.io/)
-[![Version](https://img.shields.io/badge/version-2.5.0-informational?style=flat-square)](CHANGELOG.md)
+[![Version](https://img.shields.io/badge/version-2.6.0-informational?style=flat-square)](CHANGELOG.md)
 
 **[clearfront.sh](https://clearfront.sh)** · [Disclaimer](./DISCLAIMER.md)
 

clearfront-2.6.0/clearfront.egg-info/requires.txt

@@ -0,0 +1,53 @@
+mcp>=1.28.1
+anthropic>=0.116.0
+requests>=2.34.2
+python-whois>=0.9.6
+rich>=15.0.0
+prompt_toolkit>=3.0.52
+python-dotenv>=1.2.2
+aiohttp>=3.14.1
+dnspython>=2.8.0
+ddgs>=9.14.4
+fastapi>=0.139.0
+uvicorn[standard]>=0.51.0
+httpx>=0.28.1
+
+[all]
+shodan>=1.31.0
+ollama>=0.6.2
+openai>=2.44.0
+reportlab>=5.0.0
+censys-platform>=0.15.1
+fastapi>=0.139.0
+uvicorn[standard]>=0.51.0
+sse-starlette>=3.4.5
+
+[censys]
+censys-platform>=0.15.1
+
+[dev]
+pytest>=9.1.1
+pytest-asyncio>=1.4.0
+pytest-cov>=7.1.0
+pytest-freezegun>=0.4.2
+ruff>=0.15.20
+
+[ollama]
+ollama>=0.6.2
+
+[openai]
+openai>=2.44.0
+
+[pdf]
+reportlab>=5.0.0
+
+[shodan]
+shodan>=1.31.0
+
+[web]
+fastapi>=0.139.0
+uvicorn[standard]>=0.51.0
+sse-starlette>=3.4.5
+python-dotenv>=1.2.2
+anthropic>=0.116.0
+playwright>=1.61.0

{clearfront-2.5.0 → clearfront-2.6.0}/pyproject.toml

@@ -1,10 +1,10 @@
 [build-system]
-requires = ["setuptools>=61.0"]
+requires = ["setuptools>=83.0.0"]
 build-backend = "setuptools.build_meta"
 
 [project]
 name = "clearfront"
-version = "2.5.0"
+version = "2.6.0"
 description = "AI-powered OSINT agent, MCP server, and CLI. Interactive REPL + 30 tools. Anthropic Claude or local Ollama. For authorized security research use only."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -31,18 +31,18 @@ classifiers = [
 ]
 dependencies = [
     "mcp>=1.28.1",
-    "anthropic>=0.40.0",
-    "requests>=2.31.0",
+    "anthropic>=0.116.0",
+    "requests>=2.34.2",
     "python-whois>=0.9.6",
-    "rich>=13.0.0",
-    "prompt_toolkit>=3.0.0",
-    "python-dotenv>=1.0.0",
+    "rich>=15.0.0",
+    "prompt_toolkit>=3.0.52",
+    "python-dotenv>=1.2.2",
     "aiohttp>=3.14.1",
     "dnspython>=2.8.0",
-    "ddgs>=9.0.0",
+    "ddgs>=9.14.4",
     "fastapi>=0.139.0",
-    "uvicorn[standard]>=0.29.0",
-    "httpx>=0.27.0",
+    "uvicorn[standard]>=0.51.0",
+    "httpx>=0.28.1",
 ]
 
 [project.urls]
@@ -56,44 +56,44 @@ clearfront-mcp = "clearfront.mcp_server:main"
 
 [project.optional-dependencies]
 dev = [
-    "pytest>=7.0",
-    "pytest-asyncio>=0.21",
+    "pytest>=9.1.1",
+    "pytest-asyncio>=1.4.0",
     "pytest-cov>=7.1.0",
     "pytest-freezegun>=0.4.2",
-    "ruff>=0.1.0",
+    "ruff>=0.15.20",
 ]
 shodan = [
     "shodan>=1.31.0",
 ]
 ollama = [
-    "ollama>=0.3.0",
+    "ollama>=0.6.2",
 ]
 openai = [
-    "openai>=1.40.0",
+    "openai>=2.44.0",
 ]
 pdf = [
-    "reportlab>=4.0.0",
+    "reportlab>=5.0.0",
 ]
 censys = [
-    "censys-platform>=0.14.0",
+    "censys-platform>=0.15.1",
 ]
 web = [
     "fastapi>=0.139.0",
-    "uvicorn[standard]>=0.29.0",
-    "sse-starlette>=1.8.0",
-    "python-dotenv>=1.0.0",
-    "anthropic>=0.25.0",
-    "playwright>=1.40.0",
+    "uvicorn[standard]>=0.51.0",
+    "sse-starlette>=3.4.5",
+    "python-dotenv>=1.2.2",
+    "anthropic>=0.116.0",
+    "playwright>=1.61.0",
 ]
 all = [
     "shodan>=1.31.0",
-    "ollama>=0.3.0",
-    "openai>=1.40.0",
-    "reportlab>=4.0.0",
-    "censys-platform>=0.14.0",
+    "ollama>=0.6.2",
+    "openai>=2.44.0",
+    "reportlab>=5.0.0",
+    "censys-platform>=0.15.1",
     "fastapi>=0.139.0",
-    "uvicorn[standard]>=0.29.0",
-    "sse-starlette>=1.8.0",
+    "uvicorn[standard]>=0.51.0",
+    "sse-starlette>=3.4.5",
 ]
 
 [tool.setuptools.packages.find]

{clearfront-2.5.0 → clearfront-2.6.0}/tests/test_web_server.py

@@ -493,3 +493,54 @@ class TestRunToolSelfLookup:
         assert by_name["search_ip"]["input_schema"]["required"] == []
         assert by_name["search_exposure"]["input_schema"]["required"] == []
         assert by_name["search_shodan"]["input_schema"]["required"] == ["input"]
+
+
+# ---------------------------------------------------------------------------
+# Sweep-depth control
+# ---------------------------------------------------------------------------
+
+
+class TestSweepDepth:
+    def test_round_caps_per_level(self):
+        from clearfront.web_server import _depth_rounds
+
+        assert _depth_rounds("faster") == 4
+        assert _depth_rounds("balanced") == 8
+        assert _depth_rounds("deeper") == 12
+
+    def test_unknown_depth_falls_back_to_deeper(self):
+        from clearfront.web_server import _depth_rounds
+
+        assert _depth_rounds("bogus") == _depth_rounds("deeper")
+
+    def test_env_override_sets_deeper_ceiling_and_caps_lighter_levels(self, monkeypatch):
+        from clearfront.web_server import _depth_rounds
+
+        monkeypatch.setenv("OIS_MAX_TOOL_ROUNDS", "6")
+        assert _depth_rounds("deeper") == 6
+        # lighter levels are capped below the ceiling, never above it
+        assert _depth_rounds("balanced") == 6
+        assert _depth_rounds("faster") == 4
+
+    def test_deeper_prompt_unchanged(self):
+        # Deeper must stay byte-identical to the historical prompt: no mode preamble,
+        # and its enrichment clause plus the graph suffix reproduce the original paragraph.
+        from clearfront.web_server import _DEPTH_ENRICH, _DEPTH_MODE_LINE, _GRAPH_SUFFIX
+
+        assert "deeper" not in _DEPTH_MODE_LINE
+        original = (
+            "- Enrich aggressively before finalising. The goal is a complete map of how the "
+            "target's footprint connects, not a minimal answer. Every time a pivot surfaces "
+            "(an email, domain, company, real name, phone, or an additional handle), expand "
+            "it with the applicable tools, then expand the new entities those reveal, chaining "
+            "outward until the tool budget is reached. Do not stop at one or two pivots. The "
+            "more real, connected entities you surface, the stronger the report and the denser "
+            "the evidence graph. Do not emit any graph block yourself; the evidence graph is "
+            "generated separately after your report."
+        )
+        assert _DEPTH_ENRICH["deeper"] + _GRAPH_SUFFIX == original
+
+    def test_chat_request_defaults_to_deeper(self):
+        from clearfront.web_server import ChatRequest
+
+        assert ChatRequest(message="hi").depth == "deeper"

clearfront-2.5.0/clearfront.egg-info/requires.txt

@@ -1,53 +0,0 @@
-mcp>=1.28.1
-anthropic>=0.40.0
-requests>=2.31.0
-python-whois>=0.9.6
-rich>=13.0.0
-prompt_toolkit>=3.0.0
-python-dotenv>=1.0.0
-aiohttp>=3.14.1
-dnspython>=2.8.0
-ddgs>=9.0.0
-fastapi>=0.139.0
-uvicorn[standard]>=0.29.0
-httpx>=0.27.0
-
-[all]
-shodan>=1.31.0
-ollama>=0.3.0
-openai>=1.40.0
-reportlab>=4.0.0
-censys-platform>=0.14.0
-fastapi>=0.139.0
-uvicorn[standard]>=0.29.0
-sse-starlette>=1.8.0
-
-[censys]
-censys-platform>=0.14.0
-
-[dev]
-pytest>=7.0
-pytest-asyncio>=0.21
-pytest-cov>=7.1.0
-pytest-freezegun>=0.4.2
-ruff>=0.1.0
-
-[ollama]
-ollama>=0.3.0
-
-[openai]
-openai>=1.40.0
-
-[pdf]
-reportlab>=4.0.0
-
-[shodan]
-shodan>=1.31.0
-
-[web]
-fastapi>=0.139.0
-uvicorn[standard]>=0.29.0
-sse-starlette>=1.8.0
-python-dotenv>=1.0.0
-anthropic>=0.25.0
-playwright>=1.40.0