ea-agentgate 1.0.0__tar.gz

ea_agentgate-1.0.0/.gitignore

@@ -0,0 +1,241 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+/lib/
+/lib64/
+parts/
+sdist/
+var/
+wheels/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# PyInstaller
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+test_results/
+allure-results/
+allure-report/
+.allure-history/
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py,cover
+.hypothesis/
+.pytest_cache/
+cover/
+
+# Translations
+*.mo
+*.pot
+
+# Django stuff:
+*.log
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+
+# Flask stuff:
+instance/
+.webassets-cache
+
+# Scrapy stuff:
+.scrapy
+
+# Sphinx documentation
+docs/_build/
+
+# PyBuilder
+.pybuilder/
+target/
+
+# Jupyter Notebook
+.ipynb_checkpoints
+
+# IPython
+profile_default/
+ipython_config.py
+
+# pyenv
+.python-version
+
+# pipenv
+Pipfile.lock
+
+# poetry
+poetry.lock
+
+# pdm
+.pdm.toml
+.pdm-python
+.pdm-build/
+
+# PEP 582
+__pypackages__/
+
+# Celery stuff
+celerybeat-schedule
+celerybeat.pid
+
+# SageMath parsed files
+*.sage.py
+
+# Environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+server/.env
+
+# Spyder project settings
+.spyderproject
+.spyproject
+
+# Rope project settings
+.ropeproject
+
+# mkdocs documentation
+/site
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Pyre type checker
+.pyre/
+
+# pytype static type analyzer
+.pytype/
+
+# Cython debug symbols
+cython_debug/
+
+# IDE settings
+.idea/
+.vscode/
+*.swp
+*.swo
+*~
+
+# OS files
+.DS_Store
+.DS_Store?
+._*
+.Spotlight-V100
+.Trashes
+ehthumbs.db
+Thumbs.db
+
+# Project-specific
+*.jsonl
+audit_*.log
+codebase.txt
+code.txt
+
+# uv
+uv.lock
+
+# ruff
+.ruff_cache/
+
+# Node.js (dashboard)
+node_modules/
+.next/
+.turbo/
+out/
+*.tsbuildinfo
+
+# Dashboard environment
+dashboard/.env.local
+dashboard/.env.*.local
+
+# Database
+*.db
+*.sqlite
+
+# Docker
+.docker/
+
+# Secrets (never commit)
+*.pem
+*.key
+.secrets/
+secrets/
+secrets.yaml
+secrets.yml
+secrets.old/
+
+# Production environment
+.env.production
+.env.prod
+docker-compose.override.yml
+
+# Production data and backups
+data/
+backups/
+/var/backups/
+!tests/e2e/data/
+!tests/e2e/data/*.json
+
+# SSL certificates
+docker/nginx/ssl/*.pem
+docker/nginx/ssl/*.key
+docker/nginx/ssl/*.crt
+
+# Archive (dead scripts, artifacts)
+.archive/
+tests/artifacts/algorithm/formal_verification/history/
+tests/artifacts/workflow/
+tests/artifacts/reports/
+tests/artifacts/*.json
+
+# MCP config (generated per-developer by install script)
+.mcp.json
+
+# AgentGate CLI session
+.agentgate_session
+~/.agentgate/
+
+# Chaos verification run artifacts (large, regenerable)
+tests/artifacts/chaos_verification_run_*/
+tests/artifacts/chaos_latest
+tests/artifacts/chaos_latest_*
+tests/artifacts/chaos_verification_latest
+tests/artifacts/chaos_verification_latest_*
+tests/artifacts/algorithm/
+
+# Logs
+logs/
+*.log

ea_agentgate-1.0.0/CHANGELOG.md

@@ -0,0 +1,67 @@
+# Changelog
+
+All notable changes to AgentGate will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [1.0.0] - 2025-02-05
+
+### Added
+
+- **Core Security Gateway**: Enterprise-grade middleware for AI agent tool execution
+- **Authentication System**: JWT tokens, TOTP MFA, WebAuthn/Passkeys support
+- **Role-Based Access Control**: Admin, Approver, Auditor, Developer, Viewer roles
+- **Approval Workflows**: Human-in-the-loop controls for sensitive operations
+- **PII Protection**: Presidio-based detection with AES-256-GCM encrypted vault
+- **Audit Logging**: Immutable trails with HMAC-SHA256 chain verification
+- **Compliance Features**: HIPAA, SOC 2, and GDPR compliance controls
+- **Threat Detection**: Real-time detection of SQLi, XSS, path traversal attacks
+- **Rate Limiting**: Configurable per-endpoint limits with Redis or in-memory storage
+- **Observability**: Prometheus metrics, structured logging, OpenTelemetry support
+- **Cost Tracking**: Per-agent and per-tool cost analytics
+- **CLI**: `ea-agentgate serve` command for easy server startup
+- **Dashboard API**: Full REST API for dashboard integration
+
+### Security
+
+- Vendored Scalar API docs with nonce-based CSP (eliminates CDN supply-chain risk)
+- Production database validation (fails fast if SQLite used in production)
+- Strict Content-Security-Policy headers without unsafe-inline/unsafe-eval
+- Test routes (`/api/test/*`) excluded from production builds
+
+### Changed
+
+- Base `pip install ea-agentgate` now includes minimal runtime dependencies for CLI
+- Full server features available via `pip install ea-agentgate[server]`
+
+## [Unreleased]
+
+### Added
+
+- **Async Audit Event Pipeline**: Optional Redis Streams backend for audit
+  event processing (`AUDIT_PIPELINE=redis_stream`). Decouples audit persistence
+  from request latency via microsecond `XADD` publishes and batched background
+  DB writes. Includes dead-letter queue, pending message recovery, and
+  fail-open design. Default behavior (`sync`) is unchanged.
+- `server/audit/` package: `EventBus` protocol, `SyncEventBus`,
+  `RedisStreamEventBus`, `StreamConsumer`, and `emit_audit_event()` helper
+- 21 new tests for the audit pipeline and consumer (fakeredis-based)
+
+### Changed
+
+- All 28 audit `session.add(AuditEntry(...))` callsites across 10 router files
+  migrated to `await emit_audit_event(session, ...)` for bus-agnostic dispatch
+- Migrated production secret management from Google Cloud Secret Manager to
+  Azure Key Vault with `DefaultAzureCredential` authentication
+
+### Planned
+
+- GraphQL API support
+- Additional LLM provider integrations
+- Enhanced multi-region support
+- Kubernetes Helm charts
+
+---
+
+**Erick Aleman | AI Architect | AI Engineer | erick@eacognitive.com**

ea_agentgate-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Erick Aleman
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.