ct-toolkit 0.3.37__tar.gz → 0.3.39__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (64) hide show
  1. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/PKG-INFO +5 -4
  2. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/README.md +1 -1
  3. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/__init__.py +1 -1
  4. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/PKG-INFO +5 -4
  5. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/requires.txt +3 -2
  6. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/pyproject.toml +4 -3
  7. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/LICENSE +0 -0
  8. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/__main__.py +0 -0
  9. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/cli.py +0 -0
  10. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/core/__init__.py +0 -0
  11. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/core/async_wrapper.py +0 -0
  12. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/core/circuit_breaker.py +0 -0
  13. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/core/compatibility.py +0 -0
  14. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/core/compression_guard.py +0 -0
  15. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/core/exceptions.py +0 -0
  16. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/core/integrity.py +0 -0
  17. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/core/kernel.py +0 -0
  18. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/core/wrapper.py +0 -0
  19. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/divergence/__init__.py +0 -0
  20. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/divergence/analysis.py +0 -0
  21. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/divergence/engine.py +0 -0
  22. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/divergence/l2_judge.py +0 -0
  23. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/divergence/l3_icm.py +0 -0
  24. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/divergence/loss.py +0 -0
  25. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/divergence/scheduler.py +0 -0
  26. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/endorsement/__init__.py +0 -0
  27. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/endorsement/probes/__init__.py +0 -0
  28. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/endorsement/reflective.py +0 -0
  29. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/identity/__init__.py +0 -0
  30. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/identity/embedding.py +0 -0
  31. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/identity/templates/__init__.py +0 -0
  32. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/identity/templates/defense.yaml +0 -0
  33. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/identity/templates/finance.yaml +0 -0
  34. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/identity/templates/general.yaml +0 -0
  35. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/identity/templates/medical.yaml +0 -0
  36. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/kernels/__init__.py +0 -0
  37. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/kernels/default.yaml +0 -0
  38. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/kernels/defense.yaml +0 -0
  39. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/middleware/__init__.py +0 -0
  40. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/middleware/autogen.py +0 -0
  41. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/middleware/crewai.py +0 -0
  42. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/middleware/deepagents.py +0 -0
  43. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/middleware/langchain.py +0 -0
  44. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/middleware/litellm.py +0 -0
  45. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/profile_checksums.sha256 +0 -0
  46. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/provenance/__init__.py +0 -0
  47. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/provenance/log.py +0 -0
  48. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/provenance/vault/__init__.py +0 -0
  49. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/server.py +0 -0
  50. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/utils/__init__.py +0 -0
  51. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/utils/logger.py +0 -0
  52. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/utils/metrics.py +0 -0
  53. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/utils/sensitive_masker.py +0 -0
  54. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/SOURCES.txt +0 -0
  55. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/dependency_links.txt +0 -0
  56. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/entry_points.txt +0 -0
  57. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/top_level.txt +0 -0
  58. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/setup.cfg +0 -0
  59. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/tests/test_analysis.py +0 -0
  60. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/tests/test_cli.py +0 -0
  61. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/tests/test_cli_extended.py +0 -0
  62. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/tests/test_deep_agents_integration.py +0 -0
  63. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/tests/test_loss.py +0 -0
  64. {ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/tests/test_summarization_drift.py +0 -0
{ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: ct-toolkit
3
- Version: 0.3.37
3
+ Version: 0.3.39
4
4
  Summary: Computational Theseus Toolkit — Identity Continuity Guardrails for Agentic Systems
5
5
  Author: Hakan Damar
6
6
  License: Apache-2.0
@@ -9,7 +9,8 @@ Requires-Python: <3.14,>=3.11
9
9
  Description-Content-Type: text/markdown
10
10
  License-File: LICENSE
11
11
  Requires-Dist: instructor>=1.3.0
12
- Requires-Dist: litellm>=1.83.14
12
+ Requires-Dist: anyio>=4.14.2
13
+ Requires-Dist: litellm>=1.104.0
13
14
  Requires-Dist: aiohttp>=3.14.3
14
15
  Requires-Dist: pillow>=11.3.0
15
16
  Requires-Dist: numpy>=1.26.0
@@ -26,7 +27,7 @@ Requires-Dist: fastapi>=0.110.0
26
27
  Requires-Dist: starlette>=1.3.1
27
28
  Requires-Dist: uvicorn>=0.29.0
28
29
  Requires-Dist: langsmith>=0.8.18
29
- Requires-Dist: urllib3>=2.7.0
30
+ Requires-Dist: urllib3>=2.8.0
30
31
  Requires-Dist: idna>=3.15
31
32
  Provides-Extra: ollama
32
33
  Requires-Dist: ollama>=0.2.0; extra == "ollama"
@@ -143,7 +144,7 @@ The L2 judge does not evaluate Jinja2 expressions in user requests or model resp
143
144
  | :--------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
144
145
  | **Tests** | ✅ 397 passed, 3 skipped (100% success rate, 90% coverage) |
145
146
  | **Downloads** | [![PyPI Downloads](https://static.pepy.tech/personalized-badge/ct-toolkit?period=total&units=INTERNATIONAL_SYSTEM&left_color=BLACK&right_color=MAGENTA&left_text=downloads)](https://pepy.tech/projects/ct-toolkit) |
146
- | **Last Phase** | ✅ v0.3.37: DOM XSS fix in mkdocs-material search (Dependabot #66) |
147
+ | **Last Phase** | ✅ v0.3.39: urllib3 >=2.8.0 and LiteLLM >=1.104.0 fix Chunked Deflate infinite loop and authenticated SSRF / provider-credential exfiltration (Dependabot #69/#70) |
147
148
  | **Current Goal** | 🔶 Phase 7: Multi-Agent Synchronization (Integration) |
148
149
 
149
150
  ### Framework & Model Support
{ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/README.md RENAMED
@@ -95,7 +95,7 @@ The L2 judge does not evaluate Jinja2 expressions in user requests or model resp
95
95
  | :--------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
96
96
  | **Tests** | ✅ 397 passed, 3 skipped (100% success rate, 90% coverage) |
97
97
  | **Downloads** | [![PyPI Downloads](https://static.pepy.tech/personalized-badge/ct-toolkit?period=total&units=INTERNATIONAL_SYSTEM&left_color=BLACK&right_color=MAGENTA&left_text=downloads)](https://pepy.tech/projects/ct-toolkit) |
98
- | **Last Phase** | ✅ v0.3.37: DOM XSS fix in mkdocs-material search (Dependabot #66) |
98
+ | **Last Phase** | ✅ v0.3.39: urllib3 >=2.8.0 and LiteLLM >=1.104.0 fix Chunked Deflate infinite loop and authenticated SSRF / provider-credential exfiltration (Dependabot #69/#70) |
99
99
  | **Current Goal** | 🔶 Phase 7: Multi-Agent Synchronization (Integration) |
100
100
 
101
101
  ### Framework & Model Support
{ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit/__init__.py RENAMED
@@ -23,7 +23,7 @@ from ct_toolkit.core.exceptions import (
23
23
  ChainIntegrityError,
24
24
  )
25
25
 
26
- __version__ = "0.3.37"
26
+ __version__ = "0.3.39"
27
27
 
28
28
  __all__ = [
29
29
  "TheseusWrapper",
{ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: ct-toolkit
3
- Version: 0.3.37
3
+ Version: 0.3.39
4
4
  Summary: Computational Theseus Toolkit — Identity Continuity Guardrails for Agentic Systems
5
5
  Author: Hakan Damar
6
6
  License: Apache-2.0
@@ -9,7 +9,8 @@ Requires-Python: <3.14,>=3.11
9
9
  Description-Content-Type: text/markdown
10
10
  License-File: LICENSE
11
11
  Requires-Dist: instructor>=1.3.0
12
- Requires-Dist: litellm>=1.83.14
12
+ Requires-Dist: anyio>=4.14.2
13
+ Requires-Dist: litellm>=1.104.0
13
14
  Requires-Dist: aiohttp>=3.14.3
14
15
  Requires-Dist: pillow>=11.3.0
15
16
  Requires-Dist: numpy>=1.26.0
@@ -26,7 +27,7 @@ Requires-Dist: fastapi>=0.110.0
26
27
  Requires-Dist: starlette>=1.3.1
27
28
  Requires-Dist: uvicorn>=0.29.0
28
29
  Requires-Dist: langsmith>=0.8.18
29
- Requires-Dist: urllib3>=2.7.0
30
+ Requires-Dist: urllib3>=2.8.0
30
31
  Requires-Dist: idna>=3.15
31
32
  Provides-Extra: ollama
32
33
  Requires-Dist: ollama>=0.2.0; extra == "ollama"
@@ -143,7 +144,7 @@ The L2 judge does not evaluate Jinja2 expressions in user requests or model resp
143
144
  | :--------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
144
145
  | **Tests** | ✅ 397 passed, 3 skipped (100% success rate, 90% coverage) |
145
146
  | **Downloads** | [![PyPI Downloads](https://static.pepy.tech/personalized-badge/ct-toolkit?period=total&units=INTERNATIONAL_SYSTEM&left_color=BLACK&right_color=MAGENTA&left_text=downloads)](https://pepy.tech/projects/ct-toolkit) |
146
- | **Last Phase** | ✅ v0.3.37: DOM XSS fix in mkdocs-material search (Dependabot #66) |
147
+ | **Last Phase** | ✅ v0.3.39: urllib3 >=2.8.0 and LiteLLM >=1.104.0 fix Chunked Deflate infinite loop and authenticated SSRF / provider-credential exfiltration (Dependabot #69/#70) |
147
148
  | **Current Goal** | 🔶 Phase 7: Multi-Agent Synchronization (Integration) |
148
149
 
149
150
  ### Framework & Model Support
{ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/requires.txt RENAMED
@@ -1,5 +1,6 @@
1
1
  instructor>=1.3.0
2
- litellm>=1.83.14
2
+ anyio>=4.14.2
3
+ litellm>=1.104.0
3
4
  aiohttp>=3.14.3
4
5
  pillow>=11.3.0
5
6
  numpy>=1.26.0
@@ -16,7 +17,7 @@ fastapi>=0.110.0
16
17
  starlette>=1.3.1
17
18
  uvicorn>=0.29.0
18
19
  langsmith>=0.8.18
19
- urllib3>=2.7.0
20
+ urllib3>=2.8.0
20
21
  idna>=3.15
21
22
 
22
23
  [autogen]
{ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/pyproject.toml RENAMED
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
4
4
 
5
5
  [project]
6
6
  name = "ct-toolkit"
7
- version = "0.3.37"
7
+ version = "0.3.39"
8
8
  description = "Computational Theseus Toolkit — Identity Continuity Guardrails for Agentic Systems"
9
9
  readme = "README.md"
10
10
  requires-python = ">=3.11, <3.14"
@@ -14,7 +14,8 @@ keywords = ["llm", "ai-safety", "identity-continuity", "guardrails", "alignment"
14
14
 
15
15
  dependencies = [
16
16
  "instructor>=1.3.0",
17
- "litellm>=1.83.14", # SQL Injection (CVE-2026-35140) + Auth bypass (CVE-2026-35030) + Cmd exec + SSTI fix + Sandbox escape fix in 1.83.14
17
+ "anyio>=4.14.2", # Fix: process-pool stderr deadlock + TLS IDNA certificate spoofing (Dependabot #67, #68)
18
+ "litellm>=1.104.0", # SQL Injection (CVE-2026-35140) + Auth bypass (CVE-2026-35030) + Cmd exec + SSTI fix + Sandbox escape fix in 1.83.14 + Authenticated SSRF / provider-credential exfiltration via unvalidated request-body routing params fixed in 1.104.0 (Dependabot #70)
18
19
  "aiohttp>=3.14.3", # Fix: cross-origin redirect cookie leak + unsafe deserialization (Dependabot #35, #36) + WebSocket/HTTP smuggling/parser (Dependabot #62-64)
19
20
  "pillow>=11.3.0", # Fix: 15+ vulnerabilities incl JPEG2000 DoS, RankFilter OOB, bomb bypass, TGA leak, EPS DoS, etc (Dependabot #44-56)
20
21
  "numpy>=1.26.0",
@@ -31,7 +32,7 @@ dependencies = [
31
32
  "starlette>=1.3.1", # Fix: CVE-2026-54282/54283 form limits bypass & host header poisoning (Dependabot #39, #41)
32
33
  "uvicorn>=0.29.0",
33
34
  "langsmith>=0.8.18", # Fix: TracingMiddleware arbitrary file read (GHSA-f4xh-w4cj-qxq8, Dependabot #42)
34
- "urllib3>=2.7.0", # Fix: Decompression-bomb safeguards and sensitive header exposure (Dependabot #30, #31)
35
+ "urllib3>=2.8.0", # Fix: Decompression-bomb safeguards and sensitive header exposure (Dependabot #30, #31) + HTTPS proxy TLS config + unbounded chunk-size line + Chunked Deflate infinite loop GHSA-gh4c-6fx4-qh6g (Dependabot #69)
35
36
  "idna>=3.15", # Fix: CVE-2024-3651 DoS via idna.encode()
36
37
  ]
37
38
 
{ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/LICENSE RENAMED
File without changes
{ct_toolkit-0.3.37 → ct_toolkit-0.3.39}/setup.cfg RENAMED
File without changes