fortifyos-langchain 0.1.0__py3-none-any.whl

fortifyos_langchain/__init__.py

@@ -0,0 +1,4 @@
+# fortifyos-langchain — runtime security for LangChain / LangGraph agents.
+# The auto-attach logic lives in _autoinstall.py; the callback handler in handler.py.
+
+__version__ = "0.1.0"

fortifyos_langchain/_autoinstall.py

@@ -0,0 +1,36 @@
+"""
+Auto-attach the FortifyOS handler to every LangChain run in this process.
+
+Loaded automatically by Python on interpreter startup via the
+fortifyos_langchain.pth file that ships with this package.
+"""
+
+import os
+import sys
+from contextvars import ContextVar
+from typing import Optional
+
+try:
+    from langchain_core.tracers.context import register_configure_hook
+    from .handler import FortifyHandler
+
+    _fortifyos_var: ContextVar[Optional[FortifyHandler]] = ContextVar(
+        "fortifyos", default=None
+    )
+
+    register_configure_hook(
+        context_var=_fortifyos_var,
+        inheritable=True,
+        handle_class=FortifyHandler,
+        env_var="FORTIFYOS_ENABLE",
+    )
+
+    if not os.environ.get("FORTIFYOS_DISABLE"):
+        _fortifyos_var.set(FortifyHandler())
+
+    if os.environ.get("FORTIFYOS_VERBOSE"):
+        print("  [FortifyOS] handler auto-attached to LangChain", file=sys.stderr)
+
+except Exception as e:
+    if os.environ.get("FORTIFYOS_VERBOSE"):
+        print(f"  [FortifyOS] auto-attach failed: {e}", file=sys.stderr)

fortifyos_langchain/handler.py

@@ -0,0 +1,128 @@
+"""
+FortifyOS callback handler — fires shell scripts on LangChain lifecycle events.
+
+Reads a mapping from ~/.fortifyos/langchain.json that looks like:
+
+    {
+      "pre_tool":  "pre_tool.sh",
+      "post_tool": "post_tool.sh",
+      "pre_llm":   "pre_llm.sh",
+      "post_llm":  "post_llm.sh"
+    }
+
+When LangChain fires an event, we look up the script name and run it from
+~/.fortifyos/hooks/langchain/.  Script gets the event payload as JSON on
+stdin.  Script exit code 0 = allow, non-zero = block (we raise).
+"""
+
+import json
+import os
+import shutil
+import subprocess
+
+from langchain_core.callbacks import BaseCallbackHandler
+
+HOOKS_DIR = os.path.expanduser("~/.fortifyos/hooks/langchain")
+CONFIG    = os.path.expanduser("~/.fortifyos/langchain.json")
+
+
+def _load_config():
+    try:
+        with open(CONFIG, "r") as f:
+            return json.load(f)
+    except (FileNotFoundError, json.JSONDecodeError):
+        return {}
+
+
+def _find_bash() -> str:
+    """
+    On Windows, `shutil.which('bash')` often returns WSL bash, which cannot
+    read Windows paths and will fail.  We must prefer Git Bash explicitly.
+    """
+    if os.name == "nt":
+        candidates = [
+            r"C:\Program Files\Git\bin\bash.exe",
+            r"C:\Program Files\Git\usr\bin\bash.exe",
+            r"C:\Program Files (x86)\Git\bin\bash.exe",
+        ]
+        for c in candidates:
+            if os.path.exists(c):
+                return c
+        path_bash = shutil.which("bash")
+        if path_bash and "System32" not in path_bash:
+            return path_bash
+    return shutil.which("bash") or "bash"
+
+
+def _resolve_runner(script_path: str):
+    if script_path.endswith(".sh"):
+        return [_find_bash(), script_path]
+    return [script_path]
+
+
+class FortifyHandler(BaseCallbackHandler):
+    # Let our exceptions propagate so blocking actually blocks
+    raise_error = True
+
+    def _run(self, event: str, payload: dict):
+        cfg = _load_config()
+        script_name = cfg.get(event)
+        if not script_name:
+            return
+
+        script_path = os.path.join(HOOKS_DIR, script_name)
+        if not os.path.exists(script_path):
+            return
+
+        try:
+            result = subprocess.run(
+                _resolve_runner(script_path),
+                input=json.dumps(payload, default=str),
+                text=True,
+                capture_output=True,
+                timeout=30,
+                encoding="utf-8",
+                errors="replace",
+            )
+        except Exception as e:
+            print(f"  [FortifyOS] hook runner failed: {e}")
+            return
+
+        if result.stdout:
+            print(result.stdout.rstrip())
+        if result.stderr:
+            print(result.stderr.rstrip())
+
+        if result.returncode != 0:
+            raise RuntimeError(
+                f"[FortifyOS] {event} blocked by policy (exit {result.returncode})"
+            )
+
+    # ── LangChain lifecycle hooks ──
+    def on_tool_start(self, serialized, input_str, **kwargs):
+        self._run("pre_tool", {
+            "tool": (serialized or {}).get("name", "unknown"),
+            "input": input_str,
+        })
+
+    def on_tool_end(self, output, **kwargs):
+        self._run("post_tool", {"output": str(output)})
+
+    def on_llm_start(self, serialized, prompts, **kwargs):
+        self._run("pre_llm", {
+            "model": (serialized or {}).get("name", "unknown"),
+            "prompts": prompts,
+        })
+
+    def on_llm_end(self, response, **kwargs):
+        self._run("post_llm", {"response_type": type(response).__name__})
+
+    def on_chat_model_start(self, serialized, messages, **kwargs):
+        flat = []
+        for batch in (messages or []):
+            for m in batch:
+                flat.append(getattr(m, "content", str(m)))
+        self._run("pre_llm", {
+            "model": (serialized or {}).get("name", "unknown"),
+            "messages": flat,
+        })

fortifyos_langchain-0.1.0.data/data/fortifyos_langchain.pth

@@ -0,0 +1 @@
+import sys, sysconfig; sys.path.insert(0, sysconfig.get_paths()['purelib']); import fortifyos_langchain._autoinstall

fortifyos_langchain-0.1.0.dist-info/METADATA

@@ -0,0 +1,164 @@
+Metadata-Version: 2.4
+Name: fortifyos-langchain
+Version: 0.1.0
+Summary: FortifyOS runtime protection for LangChain and LangGraph agents — zero code changes required.
+Author-email: FortifyAI <support@fortifyai.co>
+License: MIT
+Project-URL: Homepage, https://fortifyai.co
+Project-URL: Documentation, https://fortifyai.co/docs
+Project-URL: Repository, https://github.com/fortifyai/fortifyos-langchain
+Project-URL: Issues, https://github.com/fortifyai/fortifyos-langchain/issues
+Keywords: fortifyos,langchain,langgraph,security,ai-agent,hooks,policy,guardrails
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: langchain-core>=0.3
+Dynamic: license-file
+
+# fortifyos-langchain
+
+**Runtime security for LangChain and LangGraph agents — with zero code changes.**
+
+`fortifyos-langchain` auto-attaches the [FortifyOS](https://fortifyai.co) policy engine to every LangChain agent running in your Python environment. It intercepts LLM calls and tool invocations, runs your security policies as plain shell scripts, and allows or blocks the action based on the result.
+
+No imports. No callback wiring. No modifications to your agent code.
+
+---
+
+## How It Works
+
+```
+python my_agent.py
+       │
+       ▼
+Python auto-loads the .pth file shipped by this package
+       │
+       ▼
+FortifyHandler attaches globally to LangChain
+       │
+       ▼
+On every LLM call / tool call →  run matching policy script
+       │
+       ▼
+exit 0 = ALLOW    |    exit 1 = BLOCK
+```
+
+The trick is the same one used by Datadog, Sentry, and OpenTelemetry — a Python `.pth` file inside the installed package is auto-loaded by the interpreter on startup, before any user code runs.
+
+---
+
+## Installation
+
+```bash
+pip install fortifyos-langchain
+```
+
+Install it into the same Python environment (system Python or venv) that you use to run your agents. That's the only requirement.
+
+After install, every LangChain agent run by that Python is automatically protected.
+
+---
+
+## Policy Setup
+
+Policies live as plain shell scripts under `~/.fortifyos/hooks/langchain/` and are mapped to lifecycle events via `~/.fortifyos/langchain.json`.
+
+Example `~/.fortifyos/langchain.json`:
+
+```json
+{
+  "pre_tool":  "pre_tool.sh",
+  "post_tool": "post_tool.sh",
+  "pre_llm":   "pre_llm.sh",
+  "post_llm":  "post_llm.sh"
+}
+```
+
+Example `~/.fortifyos/hooks/langchain/pre_tool.sh`:
+
+```bash
+#!/bin/bash
+# Block any tool call whose input mentions a forbidden keyword
+payload="$(cat)"
+if echo "$payload" | grep -q "rm -rf"; then
+  echo "Blocked: dangerous shell input detected"
+  exit 1
+fi
+exit 0
+```
+
+The script receives the event payload as JSON on stdin. Exit code 0 allows the action; any non-zero exit code blocks it.
+
+---
+
+## Supported Events
+
+| Event name | Fires when |
+|---|---|
+| `pre_llm`   | Before an LLM / chat-model call |
+| `post_llm`  | After an LLM responds |
+| `pre_tool`  | Before a tool runs |
+| `post_tool` | After a tool returns |
+
+Additional lifecycle events (agent action, retriever calls, error hooks) are planned.
+
+---
+
+## Disabling Protection
+
+Set `FORTIFYOS_DISABLE=1` in the environment to skip the auto-attach for a single run — useful for debugging.
+
+```bash
+FORTIFYOS_DISABLE=1 python my_agent.py
+```
+
+---
+
+## Verifying The Install
+
+```bash
+FORTIFYOS_VERBOSE=1 python -c "print('ok')"
+```
+
+Expected output:
+```
+  [FortifyOS] handler auto-attached to LangChain
+ok
+```
+
+If the `[FortifyOS]` line does not appear, the `.pth` file did not land in `site-packages`. See the troubleshooting section in the docs.
+
+---
+
+## Requirements
+
+- Python 3.9 or newer
+- `langchain-core >= 0.3`
+- Bash (Git Bash on Windows) — required only to execute the shell-based policy scripts
+
+---
+
+## License
+
+MIT — see [LICENSE](./LICENSE).
+
+---
+
+## Links
+
+- Homepage: <https://fortifyai.co>
+- Docs: <https://fortifyai.co/docs>
+- Issues: <https://github.com/fortifyai/fortifyos-langchain/issues>

fortifyos_langchain-0.1.0.dist-info/RECORD

@@ -0,0 +1,9 @@
+fortifyos_langchain/__init__.py,sha256=uluwC7P9P2JldgS_qaLhFud5vt8RPwRQKhxtuQVnvyg,186
+fortifyos_langchain/_autoinstall.py,sha256=ySxBIairOiRRYwJsP4mtn0rs6m4wKOnoEfwoesKLh8k,1052
+fortifyos_langchain/handler.py,sha256=xh7zwC-nsuvjuNfXhwiUu8EtD2KqpP6XPzRx4PWVZwk,3910
+fortifyos_langchain-0.1.0.data/data/fortifyos_langchain.pth,sha256=OBE17a-Vy0UnN2Z_xND4uCBqtdYSSvix4A86xMF9AK8,117
+fortifyos_langchain-0.1.0.dist-info/licenses/LICENSE,sha256=VSWKDxUEjVmxfBcPpOJSO8yEZbGJIZzANkWMrNMP_lg,1066
+fortifyos_langchain-0.1.0.dist-info/METADATA,sha256=adzcKJZHn0pWKNo45NHvyc7lphhtq0hYnYuVEXPqDIY,4729
+fortifyos_langchain-0.1.0.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
+fortifyos_langchain-0.1.0.dist-info/top_level.txt,sha256=8ohJs-_kGkziitMRqI2mdCoe9Gkbhct58K9gu8s8wY8,20
+fortifyos_langchain-0.1.0.dist-info/RECORD,,

fortifyos_langchain-0.1.0.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (82.0.1)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

fortifyos_langchain-0.1.0.dist-info/licenses/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 FortifyAI
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

fortifyos_langchain-0.1.0.dist-info/top_level.txt

@@ -0,0 +1 @@
+fortifyos_langchain