ct-toolkit 0.3.32__tar.gz → 0.3.34__tar.gz

{ct_toolkit-0.3.32 → ct_toolkit-0.3.34}/PKG-INFO

@@ -1,30 +1,31 @@
 Metadata-Version: 2.4
 Name: ct-toolkit
-Version: 0.3.32
+Version: 0.3.34
 Summary: Computational Theseus Toolkit — Identity Continuity Guardrails for Agentic Systems
 Author: Hakan Damar
 License: Apache-2.0
 Keywords: llm,ai-safety,identity-continuity,guardrails,alignment
-Requires-Python: >=3.11
+Requires-Python: <3.14,>=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: instructor>=1.3.0
 Requires-Dist: litellm>=1.83.14
-Requires-Dist: aiohttp>=3.14.0
+Requires-Dist: aiohttp>=3.14.3
+Requires-Dist: pillow>=11.3.0
 Requires-Dist: numpy>=1.26.0
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: pydantic>=2.5.0
-Requires-Dist: cryptography>=46.0.7
+Requires-Dist: cryptography>=48.0.1
 Requires-Dist: SQLAlchemy>=2.0.0
 Requires-Dist: httpx>=0.27.0
 Requires-Dist: rich>=13.0.0
 Requires-Dist: jinja2>=3.1.0
-Requires-Dist: pyasn1>=0.6.3
+Requires-Dist: pyasn1>=0.6.4
 Requires-Dist: typer[all]>=0.12.0
 Requires-Dist: fastapi>=0.110.0
-Requires-Dist: starlette>=1.0.1
+Requires-Dist: starlette>=1.3.1
 Requires-Dist: uvicorn>=0.29.0
-Requires-Dist: langsmith>=0.8.0
+Requires-Dist: langsmith>=0.8.18
 Requires-Dist: urllib3>=2.7.0
 Requires-Dist: idna>=3.15
 Provides-Extra: ollama
@@ -37,7 +38,7 @@ Provides-Extra: docs
 Requires-Dist: mkdocs-material>=9.5.0; extra == "docs"
 Requires-Dist: pymdown-extensions>=10.21.3; extra == "docs"
 Provides-Extra: ml
-Requires-Dist: torch>=2.0.0; extra == "ml"
+Requires-Dist: torch>=2.6.0; extra == "ml"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0; extra == "dev"
 Requires-Dist: pytest-asyncio>=0.23; extra == "dev"
@@ -133,7 +134,7 @@ For Deep Agents workflows, see [**ct-toolkit-deep-agents**](https://github.com/h
 | :--------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
 | **Tests**        | ✅ 397 passed, 3 skipped (100% success rate, 90% coverage)                                                                                                                                                          |
 | **Downloads**    | [![PyPI Downloads](https://static.pepy.tech/personalized-badge/ct-toolkit?period=total&units=INTERNATIONAL_SYSTEM&left_color=BLACK&right_color=MAGENTA&left_text=downloads)](https://pepy.tech/projects/ct-toolkit) |
-| **Last Phase**   | ✅ v0.3.32: Security patches for aiohttp and Starlette Dependabot alerts                                                                                                                                      |
+| **Last Phase**   | ✅ v0.3.34: Security patches for pillow, aiohttp, pyasn1, setuptools, torch — 20+ Dependabot alerts                                                                                                        |
 | **Current Goal** | 🔶 Phase 7: Multi-Agent Synchronization (Integration)                                                                                                                                                               |
 
 ### Framework & Model Support

{ct_toolkit-0.3.32 → ct_toolkit-0.3.34}/README.md

@@ -86,7 +86,7 @@ For Deep Agents workflows, see [**ct-toolkit-deep-agents**](https://github.com/h
 | :--------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
 | **Tests**        | ✅ 397 passed, 3 skipped (100% success rate, 90% coverage)                                                                                                                                                          |
 | **Downloads**    | [![PyPI Downloads](https://static.pepy.tech/personalized-badge/ct-toolkit?period=total&units=INTERNATIONAL_SYSTEM&left_color=BLACK&right_color=MAGENTA&left_text=downloads)](https://pepy.tech/projects/ct-toolkit) |
-| **Last Phase**   | ✅ v0.3.32: Security patches for aiohttp and Starlette Dependabot alerts                                                                                                                                      |
+| **Last Phase**   | ✅ v0.3.34: Security patches for pillow, aiohttp, pyasn1, setuptools, torch — 20+ Dependabot alerts                                                                                                        |
 | **Current Goal** | 🔶 Phase 7: Multi-Agent Synchronization (Integration)                                                                                                                                                               |
 
 ### Framework & Model Support

{ct_toolkit-0.3.32 → ct_toolkit-0.3.34}/ct_toolkit/__init__.py

@@ -23,7 +23,7 @@ from ct_toolkit.core.exceptions import (
     ChainIntegrityError,
 )
 
-__version__ = "0.3.32"
+__version__ = "0.3.34"
 
 __all__ = [
     "TheseusWrapper",

{ct_toolkit-0.3.32 → ct_toolkit-0.3.34}/ct_toolkit/core/async_wrapper.py

@@ -16,11 +16,10 @@ from __future__ import annotations
 import asyncio
 import time
 from typing import Any, Optional
-from pathlib import Path
 
 from ct_toolkit.core.wrapper import TheseusWrapper, CTResponse, WrapperConfig
 from ct_toolkit.core.circuit_breaker import CircuitBreaker, CircuitBreakerError, CircuitBreakerRegistry
-from ct_toolkit.utils.metrics import get_metrics_collector, MetricsCollector
+from ct_toolkit.utils.metrics import get_metrics_collector
 from ct_toolkit.utils.logger import get_logger
 
 logger = get_logger(__name__)

{ct_toolkit-0.3.32 → ct_toolkit-0.3.34}/ct_toolkit/core/circuit_breaker.py

@@ -20,8 +20,8 @@ from __future__ import annotations
 import time
 import threading
 from enum import Enum
-from typing import Callable, Any
-from dataclasses import dataclass, field
+from typing import Any
+from dataclasses import dataclass
 
 from ct_toolkit.utils.logger import get_logger
 

{ct_toolkit-0.3.32 → ct_toolkit-0.3.34}/ct_toolkit/core/kernel.py

@@ -10,7 +10,7 @@ import os
 import yaml
 from pathlib import Path
 from dataclasses import dataclass, field
-from typing import Any, Union, Protocol
+from typing import Any
 
 from ct_toolkit.core.exceptions import (
     AxiomaticViolationError,

{ct_toolkit-0.3.32 → ct_toolkit-0.3.34}/ct_toolkit/utils/metrics.py

@@ -17,11 +17,9 @@ Usage:
 from __future__ import annotations
 
 import time
-import math
 import threading
 from typing import Any
 from dataclasses import dataclass, field
-from collections import defaultdict
 
 
 @dataclass

{ct_toolkit-0.3.32 → ct_toolkit-0.3.34}/ct_toolkit.egg-info/PKG-INFO

@@ -1,30 +1,31 @@
 Metadata-Version: 2.4
 Name: ct-toolkit
-Version: 0.3.32
+Version: 0.3.34
 Summary: Computational Theseus Toolkit — Identity Continuity Guardrails for Agentic Systems
 Author: Hakan Damar
 License: Apache-2.0
 Keywords: llm,ai-safety,identity-continuity,guardrails,alignment
-Requires-Python: >=3.11
+Requires-Python: <3.14,>=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: instructor>=1.3.0
 Requires-Dist: litellm>=1.83.14
-Requires-Dist: aiohttp>=3.14.0
+Requires-Dist: aiohttp>=3.14.3
+Requires-Dist: pillow>=11.3.0
 Requires-Dist: numpy>=1.26.0
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: pydantic>=2.5.0
-Requires-Dist: cryptography>=46.0.7
+Requires-Dist: cryptography>=48.0.1
 Requires-Dist: SQLAlchemy>=2.0.0
 Requires-Dist: httpx>=0.27.0
 Requires-Dist: rich>=13.0.0
 Requires-Dist: jinja2>=3.1.0
-Requires-Dist: pyasn1>=0.6.3
+Requires-Dist: pyasn1>=0.6.4
 Requires-Dist: typer[all]>=0.12.0
 Requires-Dist: fastapi>=0.110.0
-Requires-Dist: starlette>=1.0.1
+Requires-Dist: starlette>=1.3.1
 Requires-Dist: uvicorn>=0.29.0
-Requires-Dist: langsmith>=0.8.0
+Requires-Dist: langsmith>=0.8.18
 Requires-Dist: urllib3>=2.7.0
 Requires-Dist: idna>=3.15
 Provides-Extra: ollama
@@ -37,7 +38,7 @@ Provides-Extra: docs
 Requires-Dist: mkdocs-material>=9.5.0; extra == "docs"
 Requires-Dist: pymdown-extensions>=10.21.3; extra == "docs"
 Provides-Extra: ml
-Requires-Dist: torch>=2.0.0; extra == "ml"
+Requires-Dist: torch>=2.6.0; extra == "ml"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0; extra == "dev"
 Requires-Dist: pytest-asyncio>=0.23; extra == "dev"
@@ -133,7 +134,7 @@ For Deep Agents workflows, see [**ct-toolkit-deep-agents**](https://github.com/h
 | :--------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
 | **Tests**        | ✅ 397 passed, 3 skipped (100% success rate, 90% coverage)                                                                                                                                                          |
 | **Downloads**    | [![PyPI Downloads](https://static.pepy.tech/personalized-badge/ct-toolkit?period=total&units=INTERNATIONAL_SYSTEM&left_color=BLACK&right_color=MAGENTA&left_text=downloads)](https://pepy.tech/projects/ct-toolkit) |
-| **Last Phase**   | ✅ v0.3.32: Security patches for aiohttp and Starlette Dependabot alerts                                                                                                                                      |
+| **Last Phase**   | ✅ v0.3.34: Security patches for pillow, aiohttp, pyasn1, setuptools, torch — 20+ Dependabot alerts                                                                                                        |
 | **Current Goal** | 🔶 Phase 7: Multi-Agent Synchronization (Integration)                                                                                                                                                               |
 
 ### Framework & Model Support

{ct_toolkit-0.3.32 → ct_toolkit-0.3.34}/ct_toolkit.egg-info/requires.txt

@@ -1,20 +1,21 @@
 instructor>=1.3.0
 litellm>=1.83.14
-aiohttp>=3.14.0
+aiohttp>=3.14.3
+pillow>=11.3.0
 numpy>=1.26.0
 pyyaml>=6.0
 pydantic>=2.5.0
-cryptography>=46.0.7
+cryptography>=48.0.1
 SQLAlchemy>=2.0.0
 httpx>=0.27.0
 rich>=13.0.0
 jinja2>=3.1.0
-pyasn1>=0.6.3
+pyasn1>=0.6.4
 typer[all]>=0.12.0
 fastapi>=0.110.0
-starlette>=1.0.1
+starlette>=1.3.1
 uvicorn>=0.29.0
-langsmith>=0.8.0
+langsmith>=0.8.18
 urllib3>=2.7.0
 idna>=3.15
 
@@ -35,7 +36,7 @@ pymdown-extensions>=10.21.3
 langchain-core>=1.3.3
 
 [ml]
-torch>=2.0.0
+torch>=2.6.0
 
 [ollama]
 ollama>=0.2.0

{ct_toolkit-0.3.32 → ct_toolkit-0.3.34}/pyproject.toml

@@ -1,13 +1,13 @@
 [build-system]
-requires = ["setuptools>=61.0", "wheel"]
+requires = ["setuptools>=78.0.0", "wheel"]
 build-backend = "setuptools.build_meta"
 
 [project]
 name = "ct-toolkit"
-version = "0.3.32"
+version = "0.3.34"
 description = "Computational Theseus Toolkit — Identity Continuity Guardrails for Agentic Systems"
 readme = "README.md"
-requires-python = ">=3.11"
+requires-python = ">=3.11, <3.14"
 license = { text = "Apache-2.0" }
 authors = [{ name = "Hakan Damar" }]
 keywords = ["llm", "ai-safety", "identity-continuity", "guardrails", "alignment"]
@@ -15,21 +15,22 @@ keywords = ["llm", "ai-safety", "identity-continuity", "guardrails", "alignment"
 dependencies = [
     "instructor>=1.3.0",
     "litellm>=1.83.14", # SQL Injection (CVE-2026-35140) + Auth bypass (CVE-2026-35030) + Cmd exec + SSTI fix + Sandbox escape fix in 1.83.14
-    "aiohttp>=3.14.0", # Fix: cross-origin redirect cookie leak + unsafe deserialization (Dependabot #35, #36)
+    "aiohttp>=3.14.3", # Fix: cross-origin redirect cookie leak + unsafe deserialization (Dependabot #35, #36) + WebSocket/HTTP smuggling/parser (Dependabot #62-64)
+    "pillow>=11.3.0",  # Fix: 15+ vulnerabilities incl JPEG2000 DoS, RankFilter OOB, bomb bypass, TGA leak, EPS DoS, etc (Dependabot #44-56)
     "numpy>=1.26.0",
     "pyyaml>=6.0",
     "pydantic>=2.5.0",
-    "cryptography>=46.0.7",
+    "cryptography>=48.0.1",
     "SQLAlchemy>=2.0.0",
     "httpx>=0.27.0",
     "rich>=13.0.0",          # For CLI reporting
     "jinja2>=3.1.0",
-    "pyasn1>=0.6.3",
+    "pyasn1>=0.6.4", # Fix: BER/CER/DER DoS + REAL resource consumption + OID quadratic complexity (Dependabot #58, #59, #61)
     "typer[all]>=0.12.0",
     "fastapi>=0.110.0",
-    "starlette>=1.0.1", # Fix: Host header validation poisoning request.url.path (Dependabot #37)
+    "starlette>=1.3.1", # Fix: CVE-2026-54282/54283 form limits bypass & host header poisoning (Dependabot #39, #41)
     "uvicorn>=0.29.0",
-    "langsmith>=0.8.0", # Security: block public prompt pull by default (CVE-like trust boundary issue)
+    "langsmith>=0.8.18", # Fix: TracingMiddleware arbitrary file read (GHSA-f4xh-w4cj-qxq8, Dependabot #42)
     "urllib3>=2.7.0",    # Fix: Decompression-bomb safeguards and sensitive header exposure (Dependabot #30, #31)
     "idna>=3.15",        # Fix: CVE-2024-3651 DoS via idna.encode()
 ]
@@ -44,7 +45,7 @@ langchain = ["langchain-core>=1.3.3"]
 # crewai   = ["crewai>=1.10.0"]
 autogen   = ["pyautogen>=0.4.0"]
 docs     = ["mkdocs-material>=9.5.0", "pymdown-extensions>=10.21.3"]  # Fix: path traversal bypass in pymdownx.snippets
-ml       = ["torch>=2.0.0"]
+ml       = ["torch>=2.6.0"]  # Fix: memory corruption via torch.jit.script (Dependabot Low)
 dev = [
     "pytest>=8.0",
     "pytest-asyncio>=0.23",