ct-toolkit 0.3.38__tar.gz → 0.3.39__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (64) hide show
  1. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/PKG-INFO +4 -4
  2. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/README.md +1 -1
  3. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/__init__.py +1 -1
  4. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/PKG-INFO +4 -4
  5. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/requires.txt +2 -2
  6. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/pyproject.toml +3 -3
  7. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/LICENSE +0 -0
  8. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/__main__.py +0 -0
  9. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/cli.py +0 -0
  10. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/core/__init__.py +0 -0
  11. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/core/async_wrapper.py +0 -0
  12. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/core/circuit_breaker.py +0 -0
  13. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/core/compatibility.py +0 -0
  14. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/core/compression_guard.py +0 -0
  15. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/core/exceptions.py +0 -0
  16. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/core/integrity.py +0 -0
  17. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/core/kernel.py +0 -0
  18. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/core/wrapper.py +0 -0
  19. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/divergence/__init__.py +0 -0
  20. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/divergence/analysis.py +0 -0
  21. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/divergence/engine.py +0 -0
  22. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/divergence/l2_judge.py +0 -0
  23. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/divergence/l3_icm.py +0 -0
  24. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/divergence/loss.py +0 -0
  25. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/divergence/scheduler.py +0 -0
  26. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/endorsement/__init__.py +0 -0
  27. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/endorsement/probes/__init__.py +0 -0
  28. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/endorsement/reflective.py +0 -0
  29. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/identity/__init__.py +0 -0
  30. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/identity/embedding.py +0 -0
  31. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/identity/templates/__init__.py +0 -0
  32. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/identity/templates/defense.yaml +0 -0
  33. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/identity/templates/finance.yaml +0 -0
  34. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/identity/templates/general.yaml +0 -0
  35. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/identity/templates/medical.yaml +0 -0
  36. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/kernels/__init__.py +0 -0
  37. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/kernels/default.yaml +0 -0
  38. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/kernels/defense.yaml +0 -0
  39. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/middleware/__init__.py +0 -0
  40. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/middleware/autogen.py +0 -0
  41. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/middleware/crewai.py +0 -0
  42. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/middleware/deepagents.py +0 -0
  43. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/middleware/langchain.py +0 -0
  44. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/middleware/litellm.py +0 -0
  45. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/profile_checksums.sha256 +0 -0
  46. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/provenance/__init__.py +0 -0
  47. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/provenance/log.py +0 -0
  48. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/provenance/vault/__init__.py +0 -0
  49. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/server.py +0 -0
  50. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/utils/__init__.py +0 -0
  51. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/utils/logger.py +0 -0
  52. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/utils/metrics.py +0 -0
  53. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/utils/sensitive_masker.py +0 -0
  54. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/SOURCES.txt +0 -0
  55. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/dependency_links.txt +0 -0
  56. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/entry_points.txt +0 -0
  57. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/top_level.txt +0 -0
  58. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/setup.cfg +0 -0
  59. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/tests/test_analysis.py +0 -0
  60. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/tests/test_cli.py +0 -0
  61. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/tests/test_cli_extended.py +0 -0
  62. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/tests/test_deep_agents_integration.py +0 -0
  63. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/tests/test_loss.py +0 -0
  64. {ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/tests/test_summarization_drift.py +0 -0
{ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: ct-toolkit
3
- Version: 0.3.38
3
+ Version: 0.3.39
4
4
  Summary: Computational Theseus Toolkit — Identity Continuity Guardrails for Agentic Systems
5
5
  Author: Hakan Damar
6
6
  License: Apache-2.0
@@ -10,7 +10,7 @@ Description-Content-Type: text/markdown
10
10
  License-File: LICENSE
11
11
  Requires-Dist: instructor>=1.3.0
12
12
  Requires-Dist: anyio>=4.14.2
13
- Requires-Dist: litellm>=1.83.14
13
+ Requires-Dist: litellm>=1.104.0
14
14
  Requires-Dist: aiohttp>=3.14.3
15
15
  Requires-Dist: pillow>=11.3.0
16
16
  Requires-Dist: numpy>=1.26.0
@@ -27,7 +27,7 @@ Requires-Dist: fastapi>=0.110.0
27
27
  Requires-Dist: starlette>=1.3.1
28
28
  Requires-Dist: uvicorn>=0.29.0
29
29
  Requires-Dist: langsmith>=0.8.18
30
- Requires-Dist: urllib3>=2.7.0
30
+ Requires-Dist: urllib3>=2.8.0
31
31
  Requires-Dist: idna>=3.15
32
32
  Provides-Extra: ollama
33
33
  Requires-Dist: ollama>=0.2.0; extra == "ollama"
@@ -144,7 +144,7 @@ The L2 judge does not evaluate Jinja2 expressions in user requests or model resp
144
144
  | :--------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
145
145
  | **Tests** | ✅ 397 passed, 3 skipped (100% success rate, 90% coverage) |
146
146
  | **Downloads** | [![PyPI Downloads](https://static.pepy.tech/personalized-badge/ct-toolkit?period=total&units=INTERNATIONAL_SYSTEM&left_color=BLACK&right_color=MAGENTA&left_text=downloads)](https://pepy.tech/projects/ct-toolkit) |
147
- | **Last Phase** | ✅ v0.3.38: AnyIO >=4.14.2 fixes process-pool stderr deadlock and TLS IDNA certificate spoofing (Dependabot #67/#68) |
147
+ | **Last Phase** | ✅ v0.3.39: urllib3 >=2.8.0 and LiteLLM >=1.104.0 fix Chunked Deflate infinite loop and authenticated SSRF / provider-credential exfiltration (Dependabot #69/#70) |
148
148
  | **Current Goal** | 🔶 Phase 7: Multi-Agent Synchronization (Integration) |
149
149
 
150
150
  ### Framework & Model Support
{ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/README.md RENAMED
@@ -95,7 +95,7 @@ The L2 judge does not evaluate Jinja2 expressions in user requests or model resp
95
95
  | :--------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
96
96
  | **Tests** | ✅ 397 passed, 3 skipped (100% success rate, 90% coverage) |
97
97
  | **Downloads** | [![PyPI Downloads](https://static.pepy.tech/personalized-badge/ct-toolkit?period=total&units=INTERNATIONAL_SYSTEM&left_color=BLACK&right_color=MAGENTA&left_text=downloads)](https://pepy.tech/projects/ct-toolkit) |
98
- | **Last Phase** | ✅ v0.3.38: AnyIO >=4.14.2 fixes process-pool stderr deadlock and TLS IDNA certificate spoofing (Dependabot #67/#68) |
98
+ | **Last Phase** | ✅ v0.3.39: urllib3 >=2.8.0 and LiteLLM >=1.104.0 fix Chunked Deflate infinite loop and authenticated SSRF / provider-credential exfiltration (Dependabot #69/#70) |
99
99
  | **Current Goal** | 🔶 Phase 7: Multi-Agent Synchronization (Integration) |
100
100
 
101
101
  ### Framework & Model Support
{ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit/__init__.py RENAMED
@@ -23,7 +23,7 @@ from ct_toolkit.core.exceptions import (
23
23
  ChainIntegrityError,
24
24
  )
25
25
 
26
- __version__ = "0.3.38"
26
+ __version__ = "0.3.39"
27
27
 
28
28
  __all__ = [
29
29
  "TheseusWrapper",
{ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: ct-toolkit
3
- Version: 0.3.38
3
+ Version: 0.3.39
4
4
  Summary: Computational Theseus Toolkit — Identity Continuity Guardrails for Agentic Systems
5
5
  Author: Hakan Damar
6
6
  License: Apache-2.0
@@ -10,7 +10,7 @@ Description-Content-Type: text/markdown
10
10
  License-File: LICENSE
11
11
  Requires-Dist: instructor>=1.3.0
12
12
  Requires-Dist: anyio>=4.14.2
13
- Requires-Dist: litellm>=1.83.14
13
+ Requires-Dist: litellm>=1.104.0
14
14
  Requires-Dist: aiohttp>=3.14.3
15
15
  Requires-Dist: pillow>=11.3.0
16
16
  Requires-Dist: numpy>=1.26.0
@@ -27,7 +27,7 @@ Requires-Dist: fastapi>=0.110.0
27
27
  Requires-Dist: starlette>=1.3.1
28
28
  Requires-Dist: uvicorn>=0.29.0
29
29
  Requires-Dist: langsmith>=0.8.18
30
- Requires-Dist: urllib3>=2.7.0
30
+ Requires-Dist: urllib3>=2.8.0
31
31
  Requires-Dist: idna>=3.15
32
32
  Provides-Extra: ollama
33
33
  Requires-Dist: ollama>=0.2.0; extra == "ollama"
@@ -144,7 +144,7 @@ The L2 judge does not evaluate Jinja2 expressions in user requests or model resp
144
144
  | :--------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
145
145
  | **Tests** | ✅ 397 passed, 3 skipped (100% success rate, 90% coverage) |
146
146
  | **Downloads** | [![PyPI Downloads](https://static.pepy.tech/personalized-badge/ct-toolkit?period=total&units=INTERNATIONAL_SYSTEM&left_color=BLACK&right_color=MAGENTA&left_text=downloads)](https://pepy.tech/projects/ct-toolkit) |
147
- | **Last Phase** | ✅ v0.3.38: AnyIO >=4.14.2 fixes process-pool stderr deadlock and TLS IDNA certificate spoofing (Dependabot #67/#68) |
147
+ | **Last Phase** | ✅ v0.3.39: urllib3 >=2.8.0 and LiteLLM >=1.104.0 fix Chunked Deflate infinite loop and authenticated SSRF / provider-credential exfiltration (Dependabot #69/#70) |
148
148
  | **Current Goal** | 🔶 Phase 7: Multi-Agent Synchronization (Integration) |
149
149
 
150
150
  ### Framework & Model Support
{ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/ct_toolkit.egg-info/requires.txt RENAMED
@@ -1,6 +1,6 @@
1
1
  instructor>=1.3.0
2
2
  anyio>=4.14.2
3
- litellm>=1.83.14
3
+ litellm>=1.104.0
4
4
  aiohttp>=3.14.3
5
5
  pillow>=11.3.0
6
6
  numpy>=1.26.0
@@ -17,7 +17,7 @@ fastapi>=0.110.0
17
17
  starlette>=1.3.1
18
18
  uvicorn>=0.29.0
19
19
  langsmith>=0.8.18
20
- urllib3>=2.7.0
20
+ urllib3>=2.8.0
21
21
  idna>=3.15
22
22
 
23
23
  [autogen]
{ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/pyproject.toml RENAMED
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
4
4
 
5
5
  [project]
6
6
  name = "ct-toolkit"
7
- version = "0.3.38"
7
+ version = "0.3.39"
8
8
  description = "Computational Theseus Toolkit — Identity Continuity Guardrails for Agentic Systems"
9
9
  readme = "README.md"
10
10
  requires-python = ">=3.11, <3.14"
@@ -15,7 +15,7 @@ keywords = ["llm", "ai-safety", "identity-continuity", "guardrails", "alignment"
15
15
  dependencies = [
16
16
  "instructor>=1.3.0",
17
17
  "anyio>=4.14.2", # Fix: process-pool stderr deadlock + TLS IDNA certificate spoofing (Dependabot #67, #68)
18
- "litellm>=1.83.14", # SQL Injection (CVE-2026-35140) + Auth bypass (CVE-2026-35030) + Cmd exec + SSTI fix + Sandbox escape fix in 1.83.14
18
+ "litellm>=1.104.0", # SQL Injection (CVE-2026-35140) + Auth bypass (CVE-2026-35030) + Cmd exec + SSTI fix + Sandbox escape fix in 1.83.14 + Authenticated SSRF / provider-credential exfiltration via unvalidated request-body routing params fixed in 1.104.0 (Dependabot #70)
19
19
  "aiohttp>=3.14.3", # Fix: cross-origin redirect cookie leak + unsafe deserialization (Dependabot #35, #36) + WebSocket/HTTP smuggling/parser (Dependabot #62-64)
20
20
  "pillow>=11.3.0", # Fix: 15+ vulnerabilities incl JPEG2000 DoS, RankFilter OOB, bomb bypass, TGA leak, EPS DoS, etc (Dependabot #44-56)
21
21
  "numpy>=1.26.0",
@@ -32,7 +32,7 @@ dependencies = [
32
32
  "starlette>=1.3.1", # Fix: CVE-2026-54282/54283 form limits bypass & host header poisoning (Dependabot #39, #41)
33
33
  "uvicorn>=0.29.0",
34
34
  "langsmith>=0.8.18", # Fix: TracingMiddleware arbitrary file read (GHSA-f4xh-w4cj-qxq8, Dependabot #42)
35
- "urllib3>=2.7.0", # Fix: Decompression-bomb safeguards and sensitive header exposure (Dependabot #30, #31)
35
+ "urllib3>=2.8.0", # Fix: Decompression-bomb safeguards and sensitive header exposure (Dependabot #30, #31) + HTTPS proxy TLS config + unbounded chunk-size line + Chunked Deflate infinite loop GHSA-gh4c-6fx4-qh6g (Dependabot #69)
36
36
  "idna>=3.15", # Fix: CVE-2024-3651 DoS via idna.encode()
37
37
  ]
38
38
 
{ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/LICENSE RENAMED
File without changes
{ct_toolkit-0.3.38 → ct_toolkit-0.3.39}/setup.cfg RENAMED
File without changes