cortexhub 0.1.4__py3-none-any.whl → 0.1.7__py3-none-any.whl

cortexhub/adapters/claude_agents.py

@@ -73,6 +73,7 @@ class ClaudeAgentsAdapter(ToolAdapter):
     def __init__(self, cortex_hub: Any):
         super().__init__(cortex_hub)
         self._hook_spans: dict[str, Any] = {}
+        self._active_run_session_id: str | None = None
 
     def _get_framework_modules(self) -> list[str]:
         return ["claude_agent_sdk"]
@@ -93,13 +94,6 @@ class ClaudeAgentsAdapter(ToolAdapter):
                 return
             
             cortex_hub = self.cortex_hub
-            tools = self._discover_tools()
-            if tools:
-                cortex_hub.backend.register_tool_inventory(
-                    agent_id=cortex_hub.agent_id,
-                    framework=self.framework_name,
-                    tools=tools,
-                )
             
             # Store original decorator
             if not hasattr(claude_agent_sdk, _ORIGINAL_TOOL_ATTR):
@@ -206,6 +200,7 @@ class ClaudeAgentsAdapter(ToolAdapter):
         try:
             import claude_agent_sdk
             from claude_agent_sdk import ClaudeSDKClient, ResultMessage
+            adapter = self
 
             if getattr(claude_agent_sdk, _PATCHED_RUN_ATTR, False):
                 return
@@ -218,6 +213,7 @@ class ClaudeAgentsAdapter(ToolAdapter):
                 status = None
                 failed = False
                 cortex_hub.start_run(framework="claude_agents")
+                adapter._active_run_session_id = cortex_hub.session_id
                 try:
                     async for message in original_query(*args, **kwargs):
                         if isinstance(message, ResultMessage):
@@ -231,6 +227,7 @@ class ClaudeAgentsAdapter(ToolAdapter):
                         status = "failed"
                     if status:
                         cortex_hub.finish_run(framework="claude_agents", status=status)
+                    adapter._active_run_session_id = None
 
             claude_agent_sdk.query = patched_query
 
@@ -251,10 +248,12 @@ class ClaudeAgentsAdapter(ToolAdapter):
 
             async def patched_client_query(self, *args, **kwargs):
                 cortex_hub.start_run(framework="claude_agents")
+                adapter._active_run_session_id = cortex_hub.session_id
                 try:
                     return await original_client_query(self, *args, **kwargs)
                 except Exception:
                     cortex_hub.finish_run(framework="claude_agents", status="failed")
+                    adapter._active_run_session_id = None
                     raise
 
             async def patched_receive_response(self, *args, **kwargs):
@@ -273,6 +272,7 @@ class ClaudeAgentsAdapter(ToolAdapter):
                         status = "failed"
                     if status:
                         cortex_hub.finish_run(framework="claude_agents", status=status)
+                    adapter._active_run_session_id = None
 
             ClaudeSDKClient.query = patched_client_query
             ClaudeSDKClient.receive_response = patched_receive_response
@@ -303,6 +303,10 @@ class ClaudeAgentsAdapter(ToolAdapter):
         """
         cortex_hub = self.cortex_hub
         span_store = self._hook_spans
+        adapter = self
+
+        def _current_session_id() -> str:
+            return adapter._active_run_session_id or cortex_hub.session_id
 
         def _start_tool_span(
             *,
@@ -316,7 +320,7 @@ class ClaudeAgentsAdapter(ToolAdapter):
                 name="tool.invoke",
                 kind=SpanKind.INTERNAL,
             )
-            span.set_attribute("cortexhub.session.id", cortex_hub.session_id)
+            span.set_attribute("cortexhub.session.id", _current_session_id())
             span.set_attribute("cortexhub.agent.id", cortex_hub.agent_id)
             span.set_attribute("cortexhub.tool.name", tool_name)
             span.set_attribute("cortexhub.tool.framework", "claude_agents")

cortexhub/adapters/crewai.py

@@ -70,13 +70,6 @@ class CrewAIAdapter(ToolAdapter):
             from crewai.tools.structured_tool import CrewStructuredTool
             
             cortex_hub = self.cortex_hub
-            tools = self._discover_tools()
-            if tools:
-                cortex_hub.backend.register_tool_inventory(
-                    agent_id=cortex_hub.agent_id,
-                    framework=self.framework_name,
-                    tools=tools,
-                )
 
             # Patch CrewStructuredTool.invoke (primary execution path)
             if not getattr(CrewStructuredTool, _PATCHED_ATTR, False):

cortexhub/adapters/langgraph.py

@@ -411,12 +411,6 @@ class LangGraphAdapter(ToolAdapter):
             name = tool.get("name") or "unknown_tool"
             self._discovered_tools[name] = tool
 
-        self.cortex_hub.backend.register_tool_inventory(
-            agent_id=self.cortex_hub.agent_id,
-            framework=self.framework_name,
-            tools=list(self._discovered_tools.values()),
-        )
-
     def _normalize_tools(self, tools: Any) -> list[dict[str, Any]]:
         """Convert tool objects to inventory payloads."""
         normalized: list[dict[str, Any]] = []

cortexhub/adapters/openai_agents.py

@@ -67,13 +67,6 @@ class OpenAIAgentsAdapter(ToolAdapter):
                 return
 
             cortex_hub = self.cortex_hub
-            tools = self._discover_tools()
-            if tools:
-                cortex_hub.backend.register_tool_inventory(
-                    agent_id=cortex_hub.agent_id,
-                    framework=self.framework_name,
-                    tools=tools,
-                )
             
             # Store original function_tool decorator
             if not hasattr(tool_module, _ORIGINAL_FUNCTION_TOOL_ATTR):

cortexhub/backend/client.py

@@ -7,7 +7,6 @@ import httpx
 from typing import Any
 from dataclasses import dataclass
 
-from cortexhub.version import __version__
 
 logger = structlog.get_logger(__name__)
 
@@ -92,7 +91,7 @@ class BackendClient:
                 timeout=10.0,
             )
     
-    def validate_api_key(self) -> tuple[bool, SDKConfig | None]:
+    def validate_api_key(self, *, agent_id: str | None = None) -> tuple[bool, SDKConfig | None]:
         """Validate API key with backend and get SDK configuration.
         
         Returns:
@@ -127,7 +126,46 @@ class BackendClient:
                 
                 # Convert policy objects to Cedar string if needed
                 raw_policies = policies_data.get("policies", [])
+                if agent_id:
+                    raw_policies = [
+                        policy for policy in raw_policies if policy.get("agent_id") == agent_id
+                    ]
                 guardrail_configs: dict[str, GuardrailConfig] = {}
+
+                def _merge_guardrail_config(
+                    existing: GuardrailConfig | None,
+                    incoming: GuardrailConfig,
+                ) -> GuardrailConfig:
+                    if not existing:
+                        return incoming
+                    priority = {"block": 3, "redact": 2, "allow": 1}
+                    action = (
+                        incoming.action
+                        if priority.get(incoming.action, 0) > priority.get(existing.action, 0)
+                        else existing.action
+                    )
+                    if existing.pii_types is None or incoming.pii_types is None:
+                        pii_types = None
+                    else:
+                        pii_types = sorted(set(existing.pii_types + incoming.pii_types))
+                    if existing.secret_types is None or incoming.secret_types is None:
+                        secret_types = None
+                    else:
+                        secret_types = sorted(set(existing.secret_types + incoming.secret_types))
+                    custom_patterns = (existing.custom_patterns or []) + (incoming.custom_patterns or [])
+                    if existing.redaction_scope == "both" or incoming.redaction_scope == "both":
+                        redaction_scope = "both"
+                    elif existing.redaction_scope != incoming.redaction_scope:
+                        redaction_scope = "both"
+                    else:
+                        redaction_scope = existing.redaction_scope
+                    return GuardrailConfig(
+                        action=action,
+                        pii_types=pii_types,
+                        secret_types=secret_types,
+                        custom_patterns=custom_patterns,
+                        redaction_scope=redaction_scope,
+                    )
                 
                 if isinstance(raw_policies, list):
                     # Backend returns list of policy objects - extract Cedar code
@@ -171,12 +209,16 @@ class BackendClient:
                                         description=cp.get("description"),
                                         enabled=cp.get("enabled", True),
                                     ))
-                                guardrail_configs["pii"] = GuardrailConfig(
-                                    action=gc.get("action", "redact"),
-                                    pii_types=gc.get("pii_types"),
-                                    custom_patterns=custom_patterns if custom_patterns else None,
-                                    redaction_scope=gc.get("redaction_scope", "both"),
+                                merged = _merge_guardrail_config(
+                                    guardrail_configs.get("pii"),
+                                    GuardrailConfig(
+                                        action=gc.get("action", "redact"),
+                                        pii_types=gc.get("pii_types"),
+                                        custom_patterns=custom_patterns if custom_patterns else None,
+                                        redaction_scope=gc.get("redaction_scope", "both"),
+                                    ),
                                 )
+                                guardrail_configs["pii"] = merged
                             elif "secrets" in policy_key:
                                 custom_patterns = []
                                 raw_patterns = gc.get("custom_patterns") or []
@@ -187,12 +229,16 @@ class BackendClient:
                                         description=cp.get("description"),
                                         enabled=cp.get("enabled", True),
                                     ))
-                                guardrail_configs["secrets"] = GuardrailConfig(
-                                    action=gc.get("action", "redact"),
-                                    secret_types=gc.get("secret_types"),
-                                    custom_patterns=custom_patterns if custom_patterns else None,
-                                    redaction_scope=gc.get("redaction_scope", "both"),
+                                merged = _merge_guardrail_config(
+                                    guardrail_configs.get("secrets"),
+                                    GuardrailConfig(
+                                        action=gc.get("action", "redact"),
+                                        secret_types=gc.get("secret_types"),
+                                        custom_patterns=custom_patterns if custom_patterns else None,
+                                        redaction_scope=gc.get("redaction_scope", "both"),
+                                    ),
                                 )
+                                guardrail_configs["secrets"] = merged
                     policies_str = "\n".join(cedar_parts)
                 else:
                     policies_str = raw_policies or ""
@@ -254,33 +300,6 @@ class BackendClient:
         if self._client:
             self._client.close()
 
-    def register_tool_inventory(
-        self,
-        *,
-        agent_id: str,
-        framework: str,
-        tools: list[dict],
-    ) -> dict[str, Any]:
-        """Register agent tool inventory on init. Overwrites previous."""
-
-        if not self._client:
-            return {"agent_id": agent_id, "tools_count": 0}
-
-        try:
-            response = self._client.post(
-                "/tool-inventory",
-                json={
-                    "agent_id": agent_id,
-                    "framework": framework,
-                    "sdk_version": __version__,
-                    "tools": tools,
-                },
-            )
-            return response.json()
-        except Exception as e:
-            logger.warning("Failed to register tool inventory", error=str(e))
-            return {"agent_id": agent_id, "tools_count": len(tools)}
-
     def create_approval(
         self,
         *,

cortexhub/client.py

@@ -159,7 +159,7 @@ class CortexHub:
 
         # Validate API key and get configuration (including policies)
         self.backend = BackendClient(self.api_key, self.api_base_url)
-        is_valid, sdk_config = self.backend.validate_api_key()
+        is_valid, sdk_config = self.backend.validate_api_key(agent_id=self.agent_id)
         
         if not is_valid:
             raise ConfigurationError(

cortexhub/version.py

@@ -1,3 +1,3 @@
 """Version information for CortexHub SDK."""
 
-__version__ = "0.1.0"
+__version__ = "0.1.5"

{cortexhub-0.1.4.dist-info → cortexhub-0.1.7.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cortexhub
-Version: 0.1.4
+Version: 0.1.7
 Summary: CortexHub Python SDK - Policy-as-Code for AI Agents
 Project-URL: Homepage, https://cortexhub.ai
 Project-URL: Documentation, https://docs.cortexhub.ai

{cortexhub-0.1.4.dist-info → cortexhub-0.1.7.dist-info}/RECORD

@@ -1,21 +1,21 @@
 cortexhub/__init__.py,sha256=hnwsiUy5BT3QaPNK5yXqex6zRzZlok43S04y-dkNWSE,4376
 cortexhub/auto_protect.py,sha256=yW-iW9cdGg-fM8EtR_Z9UkMczn51U8BKh5pOBgV1VqE,3951
-cortexhub/client.py,sha256=LNS63p8jFD3GASOKCQISZR4au52o4NmINF3hv1sTpxg,96968
+cortexhub/client.py,sha256=360lxIPd52r0k7ZuuUc68xsEZHPeibU_BoUBrkTotHE,96990
 cortexhub/config.py,sha256=kpwVMTRcSisJy8HHBL3ZBeQoMN3lE7zziRzEYaq92LI,941
 cortexhub/errors.py,sha256=hsknLHaVCqk5MkpXvahxYIUshDt2VGZfbBWRronFvVM,3697
 cortexhub/frameworks.py,sha256=WCPokPRVafLqe73MDbJasi8FyNHTM2T4wfaBg0LuWoM,2223
 cortexhub/pipeline.py,sha256=EvkrEz7dGnzc0tlv02B3Kx2KQfdX4gsTuhUxj-MwuFI,3256
-cortexhub/version.py,sha256=L1gsFyWfMZYvly7nYjyH0nlWRAsm65S61_B-imDPgXE,68
+cortexhub/version.py,sha256=5kkypMZTwNSkQR5pPfUn4kRFz3PtN8_HpqYKHbJkghg,68
 cortexhub/adapters/__init__.py,sha256=Lb6RquGPGs4exdfSB6Qb6q6HyGczozuLWSaLCtgZdyo,130
 cortexhub/adapters/base.py,sha256=_ODoJFLQLYnowse3MHQk8bN9KjE1oQr8QDNNlvPSwSs,4094
-cortexhub/adapters/claude_agents.py,sha256=etuDHQjWikItFB-rHVwDM9fFm-0WNderkOhIgOtRxjk,22499
-cortexhub/adapters/crewai.py,sha256=SuyMBF9bzrqDq58ZsGZV-3uAzaAtlLD3xEeyMB2Hgig,24899
-cortexhub/adapters/langgraph.py,sha256=X0UutdATOowXcZYRv_ImiJGSO97MKgYcuxFKV-jTxJA,20850
-cortexhub/adapters/openai_agents.py,sha256=63rNZ8HItZdoxERk1BTYzzpVe8Qq_8j56jfrEICzjpU,21511
+cortexhub/adapters/claude_agents.py,sha256=AfuySr-nl06U3L2nY3ie5fbA8tQNDEE5I3u47B4dp30,22761
+cortexhub/adapters/crewai.py,sha256=-8s27SU-_Z1c2D-jgVa1VfrtDbEDub3g6ahBcG5wy-U,24622
+cortexhub/adapters/langgraph.py,sha256=Dq3qoMQy2MT2C9KqggVUoZF9iYuoA72LBe4kV7JYGzU,20635
+cortexhub/adapters/openai_agents.py,sha256=vk9oZfS59TVCUmh5HxbWtesaZJo21wpu62Wu-upEz3E,21234
 cortexhub/audit/__init__.py,sha256=tKE9CdpAIpP04oeLOza96jwZs4er5G5bRBWGibvh4Xw,545
 cortexhub/audit/events.py,sha256=w1uHbYzwBTDRm8gKAY_TQlXHjUj2nZt-iXk0NcqzRak,5965
 cortexhub/backend/__init__.py,sha256=Yt5fcaW24l6YwPCLvKbcKAXhhrWTUjwgqJsLOIzgIAo,133
-cortexhub/backend/client.py,sha256=dYd2aWJORysrEfJ5T_QPLwvs0xUQLrhMVT4FWUVOg6c,13680
+cortexhub/backend/client.py,sha256=542TKmKoGCOG54RdFLj4ur675LOxwhACFmtCFQ4eWgw,15310
 cortexhub/context/__init__.py,sha256=BWoR2s4ogOs1YXPFBO7e8_UOZ_5AWYfMlv5PTVORN2Y,144
 cortexhub/context/enricher.py,sha256=cComyfE10EbaCAI8KLM0ED6j-wKYBc26MRnIn-dxhmU,5322
 cortexhub/guardrails/__init__.py,sha256=RH1u8w3FFLd6u7-OYgj42PqAJO9jXsl8-tcLiL24uOo,103
@@ -33,7 +33,7 @@ cortexhub/policy/models.py,sha256=81NPX36yru0AZ22Wivytv3uxlwir4VsTN4MZgq4bdiA,38
 cortexhub/policy/sync.py,sha256=7kAc3rd5WftipR8XKwvU8SwukIoY-0gcGW2fsf-ij_I,5999
 cortexhub/telemetry/__init__.py,sha256=RSY38hHnYtbRURLoWAhbYYxYMtCItVYZBNN6Bfny8uA,1049
 cortexhub/telemetry/otel.py,sha256=T2pC-K_S_KmrLvfcd3oHMbEwC5ibGZ-PXTZSY0xJgcQ,16633
-cortexhub-0.1.4.dist-info/METADATA,sha256=415eS3_LSI7Df293BxsVWLCm_7o7HSrF89GC4j2z7Jc,8539
-cortexhub-0.1.4.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
-cortexhub-0.1.4.dist-info/licenses/LICENSE,sha256=R-lPsEVN69q2o19ge2_O9Vt9cJuGM557oEYX3XdnvIk,1066
-cortexhub-0.1.4.dist-info/RECORD,,
+cortexhub-0.1.7.dist-info/METADATA,sha256=x54ffWpQLv-bKw22CYva6pzEabJUC82xJ1sVJBy-b0w,8539
+cortexhub-0.1.7.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+cortexhub-0.1.7.dist-info/licenses/LICENSE,sha256=R-lPsEVN69q2o19ge2_O9Vt9cJuGM557oEYX3XdnvIk,1066
+cortexhub-0.1.7.dist-info/RECORD,,

{cortexhub-0.1.4.dist-info → cortexhub-0.1.7.dist-info}/WHEEL

@@ -1,4 +1,4 @@
 Wheel-Version: 1.0
-Generator: hatchling 1.28.0
+Generator: hatchling 1.27.0
 Root-Is-Purelib: true
 Tag: py3-none-any