flock-core 0.3.4__py3-none-any.whl → 0.3.6__py3-none-any.whl

flock/core/context/context.py

@@ -7,7 +7,7 @@ from opentelemetry import trace
 
 from flock.core.context.context_vars import FLOCK_LAST_AGENT, FLOCK_LAST_RESULT
 from flock.core.logging.logging import get_logger
-from flock.core.util.serializable import Serializable
+from flock.core.serialization.serializable import Serializable
 
 logger = get_logger("context")
 tracer = trace.get_tracer(__name__)

flock/core/serialization/secure_serializer.py

@@ -0,0 +1,175 @@
+import cloudpickle
+
+
+class SecureSerializer:
+    """Security-focused serialization system with capability controls for Flock objects."""
+
+    # Define capability levels for different modules
+    MODULE_CAPABILITIES = {
+        # Core Python - unrestricted
+        "builtins": "unrestricted",
+        "datetime": "unrestricted",
+        "re": "unrestricted",
+        "math": "unrestricted",
+        "json": "unrestricted",
+        # Framework modules - unrestricted
+        "flock": "unrestricted",
+        # System modules - restricted but allowed
+        "os": "restricted",
+        "io": "restricted",
+        "sys": "restricted",
+        "subprocess": "high_risk",
+        # Network modules - high risk
+        "socket": "high_risk",
+        "requests": "high_risk",
+    }
+
+    # Functions that should never be serialized
+    BLOCKED_FUNCTIONS = {
+        "os.system",
+        "os.popen",
+        "os.spawn",
+        "os.exec",
+        "subprocess.call",
+        "subprocess.run",
+        "subprocess.Popen",
+        "eval",
+        "exec",
+        "__import__",
+    }
+
+    @staticmethod
+    def _get_module_capability(module_name):
+        """Get the capability level for a module."""
+        for prefix, level in SecureSerializer.MODULE_CAPABILITIES.items():
+            if module_name == prefix or module_name.startswith(f"{prefix}."):
+                return level
+        return "unknown"  # Default to unknown for unlisted modules
+
+    @staticmethod
+    def _is_safe_callable(obj):
+        """Check if a callable is safe to serialize."""
+        if not callable(obj) or isinstance(obj, type):
+            return True, "Not a callable function"
+
+        module = obj.__module__
+        func_name = (
+            f"{module}.{obj.__name__}"
+            if hasattr(obj, "__name__")
+            else "unknown"
+        )
+
+        # Check against blocked functions
+        if func_name in SecureSerializer.BLOCKED_FUNCTIONS:
+            return False, f"Function {func_name} is explicitly blocked"
+
+        # Check module capability level
+        capability = SecureSerializer._get_module_capability(module)
+        if capability == "unknown":
+            return False, f"Module {module} has unknown security capability"
+
+        return True, capability
+
+    @staticmethod
+    def serialize(obj, allow_restricted=True, allow_high_risk=False):
+        """Serialize an object with capability checks."""
+        if callable(obj) and not isinstance(obj, type):
+            is_safe, capability = SecureSerializer._is_safe_callable(obj)
+
+            if not is_safe:
+                raise ValueError(
+                    f"Cannot serialize unsafe callable: {capability}"
+                )
+
+            if capability == "high_risk" and not allow_high_risk:
+                raise ValueError(
+                    f"High risk callable {obj.__module__}.{obj.__name__} requires explicit permission"
+                )
+
+            if capability == "restricted" and not allow_restricted:
+                raise ValueError(
+                    f"Restricted callable {obj.__module__}.{obj.__name__} requires explicit permission"
+                )
+
+            # Store metadata about the callable for verification during deserialization
+            metadata = {
+                "module": obj.__module__,
+                "name": getattr(obj, "__name__", "unknown"),
+                "capability": capability,
+            }
+
+            return {
+                "__serialized_callable__": True,
+                "data": cloudpickle.dumps(obj).hex(),
+                "metadata": metadata,
+            }
+
+        if isinstance(obj, list):
+            return [
+                SecureSerializer.serialize(
+                    item, allow_restricted, allow_high_risk
+                )
+                for item in obj
+            ]
+
+        if isinstance(obj, dict):
+            return {
+                k: SecureSerializer.serialize(
+                    v, allow_restricted, allow_high_risk
+                )
+                for k, v in obj.items()
+            }
+
+        return obj
+
+    @staticmethod
+    def deserialize(obj, allow_restricted=True, allow_high_risk=False):
+        """Deserialize an object with capability enforcement."""
+        if isinstance(obj, dict) and obj.get("__serialized_callable__") is True:
+            # Validate the capability level during deserialization
+            metadata = obj.get("metadata", {})
+            capability = metadata.get("capability", "unknown")
+
+            if capability == "high_risk" and not allow_high_risk:
+                raise ValueError(
+                    f"Cannot deserialize high risk callable {metadata.get('module')}.{metadata.get('name')}"
+                )
+
+            if capability == "restricted" and not allow_restricted:
+                raise ValueError(
+                    f"Cannot deserialize restricted callable {metadata.get('module')}.{metadata.get('name')}"
+                )
+
+            try:
+                callable_obj = cloudpickle.loads(bytes.fromhex(obj["data"]))
+
+                # Additional verification that the deserialized object matches its metadata
+                if callable_obj.__module__ != metadata.get("module") or (
+                    hasattr(callable_obj, "__name__")
+                    and callable_obj.__name__ != metadata.get("name")
+                ):
+                    raise ValueError(
+                        "Callable metadata mismatch - possible tampering detected"
+                    )
+
+                return callable_obj
+            except Exception as e:
+                raise ValueError(f"Failed to deserialize callable: {e!s}")
+
+        if isinstance(obj, list):
+            return [
+                SecureSerializer.deserialize(
+                    item, allow_restricted, allow_high_risk
+                )
+                for item in obj
+            ]
+
+        if isinstance(obj, dict) and "__serialized_callable__" not in obj:
+            return {
+                k: SecureSerializer.deserialize(
+                    v, allow_restricted, allow_high_risk
+                )
+                for k, v in obj.items()
+            }
+
+        return obj

{flock_core-0.3.4.dist-info → flock_core-0.3.6.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: flock-core
-Version: 0.3.4
+Version: 0.3.6
 Summary: Declarative LLM Orchestration at Scale
 Author-email: Andre Ratzenberger <andre.ratzenberger@whiteduck.de>
 License-File: LICENSE
@@ -35,6 +35,7 @@ Requires-Dist: temporalio>=1.9.0
 Requires-Dist: tiktoken>=0.8.0
 Requires-Dist: toml>=0.10.2
 Requires-Dist: tqdm>=4.67.1
+Requires-Dist: uvicorn>=0.34.0
 Requires-Dist: zep-python>=2.0.2
 Provides-Extra: all-tools
 Requires-Dist: docling>=2.18.0; extra == 'all-tools'

{flock_core-0.3.4.dist-info → flock_core-0.3.6.dist-info}/RECORD

@@ -16,7 +16,7 @@ flock/core/flock_api.py,sha256=SKQVKgFCaNCqHtwvIcksnpqG6ajHodVhs3oaKUw-d8c,7192
 flock/core/flock_evaluator.py,sha256=j7riJj_KsWoBnKmLiGp-U0CRhxDyJbgEdLGN26tfKm8,1588
 flock/core/flock_factory.py,sha256=vyDq0eyFT4MyE_n2JyNU7YaFx2ljmjSDmZ07OIsmIOE,2694
 flock/core/flock_module.py,sha256=VWFlBiY2RHZLTlGYfcchuT41M3m_JrZcmzw07u7KayM,2581
-flock/core/context/context.py,sha256=fb7SsGAXmhQ1CvHV3_GihGiJG-4oLJ_DcexJ8vsrbHM,6371
+flock/core/context/context.py,sha256=AW0qKIAkgZucVroGsulrPVPc4WmWuqWIrVPHf2qaOLI,6380
 flock/core/context/context_manager.py,sha256=qMySVny_dbTNLh21RHK_YT0mNKIOrqJDZpi9ZVdBsxU,1103
 flock/core/context/context_vars.py,sha256=0Hn6fM2iNc0_jIIU0B7KX-K2o8qXqtZ5EYtwujETQ7U,272
 flock/core/execution/local_executor.py,sha256=rnIQvaJOs6zZORUcR3vvyS6LPREDJTjaygl_Db0M8ao,952
@@ -37,12 +37,13 @@ flock/core/logging/telemetry_exporter/sqlite_exporter.py,sha256=CDsiMb9QcqeXelZ6
 flock/core/mixin/dspy_integration.py,sha256=P5G4Y04nl5hFwFbJXCkQ-0TMR1L4skLL2IM_FlUjH_c,8364
 flock/core/mixin/prompt_parser.py,sha256=eOqI-FK3y17gVqpc_y5GF-WmK1Jv8mFlkZxTcgweoxI,5121
 flock/core/registry/agent_registry.py,sha256=TUClh9e3eA6YzZC1CMTlsTPvQeqb9jYHewi-zPpcWM8,4987
+flock/core/serialization/secure_serializer.py,sha256=n5-zRvvXddgJv1FFHsaQ2wuYdL3WUSGPvG_LGaffEJo,6144
+flock/core/serialization/serializable.py,sha256=SymJ0YrjBx48mOBItYSqoRpKuzIc4vKWRS6ScTzre7s,2573
 flock/core/tools/basic_tools.py,sha256=fI9r81_ktRiRhNLwT-jSJ9rkjl28LC1ZfL-njnno2iw,4761
 flock/core/tools/dev_tools/github.py,sha256=a2OTPXS7kWOVA4zrZHynQDcsmEi4Pac5MfSjQOLePzA,5308
 flock/core/util/cli_helper.py,sha256=IOl9r4cz_MJv_Bp5R8dhHX8f-unAqA9vDS6-0E90Vzk,49813
 flock/core/util/hydrator.py,sha256=6qNwOwCZB7r6y25BZ--0PGofrAlfMaXbDKFQeP5NLts,11196
 flock/core/util/input_resolver.py,sha256=g9vDPdY4OH-G7qjas5ksGEHueokHGFPMoLOvC-ngeLo,5984
-flock/core/util/serializable.py,sha256=SymJ0YrjBx48mOBItYSqoRpKuzIc4vKWRS6ScTzre7s,2573
 flock/evaluators/declarative/declarative_evaluator.py,sha256=f8ldgZZp94zC4CoGzBufKvbvtckCGBe9EHTOoAZfZK0,1695
 flock/evaluators/natural_language/natural_language_evaluator.py,sha256=6nVEeh8_uwv_h-d3FWlA0GbzDzRtdhvxCGKirHtyvOU,2012
 flock/evaluators/zep/zep_evaluator.py,sha256=hEHQdgIwGsbC4ci9RvtdA2k7f4M0yznIok4v4XltNwg,1885
@@ -396,8 +397,8 @@ flock/workflow/activities.py,sha256=2zcYyDoCuYs9oQbnhLjCzBUdEi7d5IEIemKJ7TV_B8w,
 flock/workflow/agent_activities.py,sha256=NhBZscflEf2IMfSRa_pBM_TRP7uVEF_O0ROvWZ33eDc,963
 flock/workflow/temporal_setup.py,sha256=VWBgmBgfTBjwM5ruS_dVpA5AVxx6EZ7oFPGw4j3m0l0,1091
 flock/workflow/workflow.py,sha256=I9MryXW_bqYVTHx-nl2epbTqeRy27CAWHHA7ZZA0nAk,1696
-flock_core-0.3.4.dist-info/METADATA,sha256=o10aq5iiMQPy1xhMv89xMcspa5pgX2c3lHZghImgWjo,20463
-flock_core-0.3.4.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-flock_core-0.3.4.dist-info/entry_points.txt,sha256=rWaS5KSpkTmWySURGFZk6PhbJ87TmvcFQDi2uzjlagQ,37
-flock_core-0.3.4.dist-info/licenses/LICENSE,sha256=iYEqWy0wjULzM9GAERaybP4LBiPeu7Z1NEliLUdJKSc,1072
-flock_core-0.3.4.dist-info/RECORD,,
+flock_core-0.3.6.dist-info/METADATA,sha256=-TPh-D8HF2et5uEyksY7uwhl9Fgc0b_RRf0PMe1B2hg,20494
+flock_core-0.3.6.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+flock_core-0.3.6.dist-info/entry_points.txt,sha256=rWaS5KSpkTmWySURGFZk6PhbJ87TmvcFQDi2uzjlagQ,37
+flock_core-0.3.6.dist-info/licenses/LICENSE,sha256=iYEqWy0wjULzM9GAERaybP4LBiPeu7Z1NEliLUdJKSc,1072
+flock_core-0.3.6.dist-info/RECORD,,