hexgate 0.2.2__tar.gz → 0.2.4__tar.gz

{hexgate-0.2.2/hexgate.egg-info → hexgate-0.2.4}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: hexgate
-Version: 0.2.2
-Summary: HexaGate — authorization infrastructure for AI agents (agent runtime + cloud client).
+Version: 0.2.4
+Summary: Hexgate — authorization infrastructure for AI agents (agent runtime + cloud client).
 License-Expression: MIT
 Requires-Python: >=3.13
 Description-Content-Type: text/markdown
@@ -39,29 +39,38 @@ Dynamic: license-file
 
 <div align="center">
 
-# HexaGate
+<img src="./icon.svg" alt="Hexgate" width="96" height="96" />
+
+# Hexgate
 
 **Authorization infrastructure for AI agents.**
 Policy enforcement, signed policy bundles, per-request user scope, audit trail — for OpenAI Agents, LangChain, Google ADK, Pydantic AI, or a native runtime.
 
+[**Website**](https://hexgate.ai) · [Docs](https://docs.hexgate.ai) · [PyPI](https://pypi.org/project/hexgate/) · [Discussions](https://github.com/HexamindOrganisation/hexgate/discussions)
+
 [![PyPI](https://img.shields.io/pypi/v/hexgate?color=blue&logo=pypi&logoColor=white)](https://pypi.org/project/hexgate/)
-[![Python](https://img.shields.io/pypi/pyversions/hexgate?logo=python&logoColor=white)](https://pypi.org/project/hexgate/)
 [![CI](https://github.com/HexamindOrganisation/hexgate/actions/workflows/tests.yml/badge.svg?branch=main)](https://github.com/HexamindOrganisation/hexgate/actions/workflows/tests.yml)
 [![Downloads](https://img.shields.io/pypi/dm/hexgate?color=blueviolet)](https://pypi.org/project/hexgate/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 
-[Quick Start](#-quick-start--local-cli) · [Two paths](#-which-path-do-i-pick) · [Framework adapters](#-framework-agent-wrapping) · [Policy bundles](#-policy-bundles--compile-sign-enforce-wasm) · [User scope](#-user-scope--roles) · [Platform](#-hexagate-platform)
+<br />
+
+<img src="./assets/hero.png" alt="Control what your agents do — not just what they say. Policy decisions streaming live from the PolicyEnforcer." />
+
+<br />
+
+[Quick Start](#-quick-start--local-cli) · [Two paths](#-which-path-do-i-pick) · [Framework adapters](#-framework-agent-wrapping) · [Policy bundles](#-policy-bundles--compile-sign-enforce-wasm) · [User scope](#-user-scope--roles) · [Platform](#-hexgate-platform)
 
 </div>
 
 ---
 
-## What is HexaGate?
+## What is Hexgate?
 
-HexaGate is two things that move together:
+Hexgate is two things that move together:
 
 - **`hexgate` — the SDK.** A Python runtime that gates every tool call through a typed `Decision` (allow / deny / approval-required), wraps your existing OpenAI / LangChain / Google ADK / Pydantic AI agent without rewriting it, and threads per-request user identity through tracing + audit.
-- **The HexaGate platform** *(optional)* — a FastAPI control plane + React dashboard for editing policy in a browser, minting per-project tokens, watching live decisions stream from a serving agent, and shipping signed WASM policy bundles to production.
+- **The Hexgate platform** *(optional)* — a FastAPI control plane + React dashboard for editing policy in a browser, minting per-project tokens, watching live decisions stream from a serving agent, and shipping signed WASM policy bundles to production.
 
 You can use the SDK with nothing else (single-process REPL, YAML on disk). Or plug in the platform when you want auditable decisions in ClickHouse, a shared Playground UI, and live policy edits.
 
@@ -79,7 +88,7 @@ You can use the SDK with nothing else (single-process REPL, YAML on disk). Or pl
         ┌────────────────┐       ┌──────────────────┐       ┌────────────────┐
         │  Local policy  │       │ Signed WASM      │       │   Audit log    │
         │  (YAML / dir,  │       │ bundle from      │       │   (ClickHouse  │
-        │  hot reload)   │       │ HexaGate cloud   │       │   via REST)    │
+        │  hot reload)   │       │ Hexgate cloud   │       │   via REST)    │
         └────────────────┘       └──────────────────┘       └────────────────┘
 ```
 
@@ -103,7 +112,7 @@ You can use the SDK with nothing else (single-process REPL, YAML on disk). Or pl
 - [Environment](#-environment)
 - [Tests & dev tooling](#-tests--dev-tooling)
 - [CLI reference](#-cli-reference)
-- [HexaGate platform](#-hexagate-platform)
+- [Hexgate platform](#-hexgate-platform)
 - [User scope + roles](#-user-scope--roles)
 - [Stream results](#-stream-results)
 
@@ -177,7 +186,7 @@ Both commands accept either a plain agent id (`--agent researcher`) or a uvicorn
 
 ## 🚀 Quick Start — Platform
 
-To run the full HexaGate control plane locally (FastAPI backend + dashboard + your local agent serving over WebSocket), you need **three terminals**. The Makefile has a target that prints the recipe:
+To run the full Hexgate control plane locally (FastAPI backend + dashboard + your local agent serving over WebSocket), you need **three terminals**. The Makefile has a target that prints the recipe:
 
 ```bash
 make demo-platform     # prints the 3-terminal recipe below
@@ -214,6 +223,31 @@ make dashboard-install      # pnpm install inside platform/dashboard/
 
 Then open http://localhost:5173/playground — type a message, watch the live stream of tool calls and policy decisions from your local agent.
 
+### Control-plane database (SQLite / Postgres)
+
+`make platform-api` uses a local **SQLite** file — zero setup, fine for
+dev and the test suite. Set `DATABASE_URL` to run on **Postgres** instead
+(what deployments use); bare `postgres://` URLs are normalized to the
+`asyncpg` driver. A local Postgres is in the dev compose:
+
+```bash
+make platform-api-pg      # starts Postgres (Docker) + runs the API against it
+# equivalent to:
+make postgres-up          # start Postgres, wait until healthy
+DATABASE_URL=postgresql+asyncpg://hexgate:hexgate-dev-password@localhost:5433/hexgate make platform-api
+make postgres-reset       # wipe ONLY the Postgres data volume
+```
+
+No migration system: the schema is created with `create_all`, so a model
+change means resetting the volume (`make postgres-reset`), not migrating —
+data is treated as disposable. A managed Postgres (e.g. Scaleway) needs SSL
+in the DSN, e.g. `…/hexgate?ssl=require`.
+
+`DATABASE_URL` is read from the real environment or `platform/api/.env`
+(see `.env.sample`). The opt-in `tests/test_postgres_smoke.py` is the only
+test that exercises the Postgres path (the rest run on SQLite); it runs
+when `DATABASE_URL` points at Postgres.
+
 ### Audit log (ClickHouse)
 
 Policy decisions are written to a local ClickHouse instance for the audit dashboard. Requires Docker.
@@ -660,7 +694,7 @@ What happens under the hood:
 
 Working scripts in `examples/`:
 
-- `examples/customer_bot.py` — canonical HexaGate path: `create_agent(...)` + the dashboard register/serve loop end-to-end.
+- `examples/customer_bot.py` — canonical Hexgate path: `create_agent(...)` + the dashboard register/serve loop end-to-end.
 - `examples/openai_demo.py` — `HexgateRunner` (OpenAI Agents SDK) end-to-end.
 - `examples/google_demo.py` — `HexgateRunner` (Google ADK) end-to-end with `InMemorySessionService`.
 - `examples/pydantic_ai_demo.py` — `wrap_pydantic_agent` (Pydantic AI) end-to-end.
@@ -795,7 +829,7 @@ That means the same agent code can stay simple in development, while deployment
 
 ## 🧩 Policy Bundles — Compile, Sign, Enforce (WASM)
 
-HexaGate has **two policy enforcement engines** that return identical decisions (there's a parity test suite that proves it):
+Hexgate has **two policy enforcement engines** that return identical decisions (there's a parity test suite that proves it):
 
 - **pydantic** (default) — evaluates constraints in-process. Zero setup; this is what every example above uses.
 - **WASM** — compiles `policy.yaml` → Rego → a WebAssembly module evaluated via `wasmtime`. This is the path production ships: one compiled artifact, byte-for-byte reproducible, cryptographically signed by the platform.
@@ -1131,7 +1165,7 @@ hexgate chat --use examples/research_agents.py --agent update_researcher --appro
 
 ### `hexgate register` — push a manifest to the platform
 
-Register a code-defined agent's manifest with the HexaGate platform. `--agent`
+Register a code-defined agent's manifest with the Hexgate platform. `--agent`
 takes a Python import path of the form `module.path:attribute`, the same shape
 as ASGI/WSGI entrypoints. The CLI imports the module, grabs the agent object,
 and POSTs its manifest to `${HEXGATE_API_URL}/v1/agents` using
@@ -1170,7 +1204,7 @@ system prompt directly off the object. No flags needed.
 `--system-prompt` accepts either a literal string or a path to a `.md` /
 `.txt` / `.jinja` file (read as text at register time).
 
-Supported frameworks: OpenAI Agents SDK, Google ADK, Pydantic AI, LangChain/LangGraph, HexaGate agents.
+Supported frameworks: OpenAI Agents SDK, Google ADK, Pydantic AI, LangChain/LangGraph, Hexgate agents.
 
 ### `hexgate serve` — bridge a local agent to the platform's relay
 
@@ -1207,7 +1241,7 @@ print(manifest.model_dump())
 ```
 
 `create_manifest` dispatches on the framework of `agent`. The supported
-types are the same set `hexgate register` accepts: HexaGate, OpenAI Agents
+types are the same set `hexgate register` accepts: Hexgate, OpenAI Agents
 SDK, Google ADK, Pydantic AI, and LangChain/LangGraph compiled graphs.
 For LangGraph you must pass `tools=` explicitly, and may pass `model=` /
 `system_prompt=`, since compiled graphs don't expose those fields after
@@ -1217,7 +1251,7 @@ The return value is an `AgentManifest` (a Pydantic model, also re-exported
 from `hexgate` for type annotations) — the same schema the platform
 stores and the dashboard renders.
 
-## 🌐 HexaGate Platform
+## 🌐 Hexgate Platform
 
 The `platform/` directory contains an optional control plane that hosts agent definitions, dev tokens, and a live debug surface. The SDK works fully without it (`load_local_agent`, `load_builtin_agent` keep their existing semantics) — but with it you get:
 
@@ -1336,7 +1370,7 @@ the name from the loaded agent's `.name` attribute — no env var needed.
 
 ## 👤 User Scope + Roles
 
-Real backends serve many users, and different users get different capabilities. HexaGate splits that into two pieces:
+Real backends serve many users, and different users get different capabilities. Hexgate splits that into two pieces:
 
 - **`User`** — the per-request scope. Marks "this invocation acts on behalf of alice, in role X." Async context manager; pushes a fact-bearing Biscuit through the agent runtime.
 - **Role policies** — one `policy.yaml` per role, optionally inheriting from a base mixin. The runtime picks the right one at call time based on the active `User.role`.
@@ -1486,3 +1520,7 @@ async for event in stream_agent(agent, handler, "latest AI breakthroughs"):
 - assistant text deltas
 - tool lifecycle
 - final run completion
+
+---
+
+If Hexgate looks useful, [give it a ⭐ on GitHub](https://github.com/HexamindOrganisation/hexgate) — it helps more than you'd think. Built by [Hexamind](https://hexgate.ai).

hexgate-0.2.2/PKG-INFO → hexgate-0.2.4/README.md

@@ -1,67 +1,37 @@
-Metadata-Version: 2.4
-Name: hexgate
-Version: 0.2.2
-Summary: HexaGate — authorization infrastructure for AI agents (agent runtime + cloud client).
-License-Expression: MIT
-Requires-Python: >=3.13
-Description-Content-Type: text/markdown
-License-File: LICENSE
-Requires-Dist: bashlex>=0.18
-Requires-Dist: biscuit-python>=0.4
-Requires-Dist: cryptography>=42
-Requires-Dist: httpx>=0.28.1
-Requires-Dist: langchain
-Requires-Dist: langchain-openai
-Requires-Dist: langchain-core
-Requires-Dist: langfuse
-Requires-Dist: pydantic>=2.12.4
-Requires-Dist: python-dotenv>=1.1.1
-Requires-Dist: pyyaml>=6.0.2
-Requires-Dist: rich>=13.9.4
-Requires-Dist: websockets>=13.0
-Requires-Dist: openai-agents>=0.0.10
-Requires-Dist: langgraph>=0.2
-Requires-Dist: nest_asyncio>=1.6
-Requires-Dist: openinference-instrumentation-openai-agents>=0.1
-Requires-Dist: google-adk>=1.0
-Requires-Dist: google-genai>=1.0
-Requires-Dist: litellm>=1.50
-Requires-Dist: openinference-instrumentation-google-adk>=0.1.11
-Requires-Dist: pydantic-ai-slim>=1.88.0
-Requires-Dist: wasmtime>=20.0
-Provides-Extra: dev
-Requires-Dist: ipykernel; extra == "dev"
-Requires-Dist: jupyter; extra == "dev"
-Requires-Dist: pytest>=8.4.1; extra == "dev"
-Requires-Dist: pytest-asyncio>=1.0.0; extra == "dev"
-Requires-Dist: ruff>=0.12.2; extra == "dev"
-Dynamic: license-file
-
 <div align="center">
 
-# HexaGate
+<img src="./icon.svg" alt="Hexgate" width="96" height="96" />
+
+# Hexgate
 
 **Authorization infrastructure for AI agents.**
 Policy enforcement, signed policy bundles, per-request user scope, audit trail — for OpenAI Agents, LangChain, Google ADK, Pydantic AI, or a native runtime.
 
+[**Website**](https://hexgate.ai) · [Docs](https://docs.hexgate.ai) · [PyPI](https://pypi.org/project/hexgate/) · [Discussions](https://github.com/HexamindOrganisation/hexgate/discussions)
+
 [![PyPI](https://img.shields.io/pypi/v/hexgate?color=blue&logo=pypi&logoColor=white)](https://pypi.org/project/hexgate/)
-[![Python](https://img.shields.io/pypi/pyversions/hexgate?logo=python&logoColor=white)](https://pypi.org/project/hexgate/)
 [![CI](https://github.com/HexamindOrganisation/hexgate/actions/workflows/tests.yml/badge.svg?branch=main)](https://github.com/HexamindOrganisation/hexgate/actions/workflows/tests.yml)
 [![Downloads](https://img.shields.io/pypi/dm/hexgate?color=blueviolet)](https://pypi.org/project/hexgate/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 
-[Quick Start](#-quick-start--local-cli) · [Two paths](#-which-path-do-i-pick) · [Framework adapters](#-framework-agent-wrapping) · [Policy bundles](#-policy-bundles--compile-sign-enforce-wasm) · [User scope](#-user-scope--roles) · [Platform](#-hexagate-platform)
+<br />
+
+<img src="./assets/hero.png" alt="Control what your agents do — not just what they say. Policy decisions streaming live from the PolicyEnforcer." />
+
+<br />
+
+[Quick Start](#-quick-start--local-cli) · [Two paths](#-which-path-do-i-pick) · [Framework adapters](#-framework-agent-wrapping) · [Policy bundles](#-policy-bundles--compile-sign-enforce-wasm) · [User scope](#-user-scope--roles) · [Platform](#-hexgate-platform)
 
 </div>
 
 ---
 
-## What is HexaGate?
+## What is Hexgate?
 
-HexaGate is two things that move together:
+Hexgate is two things that move together:
 
 - **`hexgate` — the SDK.** A Python runtime that gates every tool call through a typed `Decision` (allow / deny / approval-required), wraps your existing OpenAI / LangChain / Google ADK / Pydantic AI agent without rewriting it, and threads per-request user identity through tracing + audit.
-- **The HexaGate platform** *(optional)* — a FastAPI control plane + React dashboard for editing policy in a browser, minting per-project tokens, watching live decisions stream from a serving agent, and shipping signed WASM policy bundles to production.
+- **The Hexgate platform** *(optional)* — a FastAPI control plane + React dashboard for editing policy in a browser, minting per-project tokens, watching live decisions stream from a serving agent, and shipping signed WASM policy bundles to production.
 
 You can use the SDK with nothing else (single-process REPL, YAML on disk). Or plug in the platform when you want auditable decisions in ClickHouse, a shared Playground UI, and live policy edits.
 
@@ -79,7 +49,7 @@ You can use the SDK with nothing else (single-process REPL, YAML on disk). Or pl
         ┌────────────────┐       ┌──────────────────┐       ┌────────────────┐
         │  Local policy  │       │ Signed WASM      │       │   Audit log    │
         │  (YAML / dir,  │       │ bundle from      │       │   (ClickHouse  │
-        │  hot reload)   │       │ HexaGate cloud   │       │   via REST)    │
+        │  hot reload)   │       │ Hexgate cloud   │       │   via REST)    │
         └────────────────┘       └──────────────────┘       └────────────────┘
 ```
 
@@ -103,7 +73,7 @@ You can use the SDK with nothing else (single-process REPL, YAML on disk). Or pl
 - [Environment](#-environment)
 - [Tests & dev tooling](#-tests--dev-tooling)
 - [CLI reference](#-cli-reference)
-- [HexaGate platform](#-hexagate-platform)
+- [Hexgate platform](#-hexgate-platform)
 - [User scope + roles](#-user-scope--roles)
 - [Stream results](#-stream-results)
 
@@ -177,7 +147,7 @@ Both commands accept either a plain agent id (`--agent researcher`) or a uvicorn
 
 ## 🚀 Quick Start — Platform
 
-To run the full HexaGate control plane locally (FastAPI backend + dashboard + your local agent serving over WebSocket), you need **three terminals**. The Makefile has a target that prints the recipe:
+To run the full Hexgate control plane locally (FastAPI backend + dashboard + your local agent serving over WebSocket), you need **three terminals**. The Makefile has a target that prints the recipe:
 
 ```bash
 make demo-platform     # prints the 3-terminal recipe below
@@ -214,6 +184,31 @@ make dashboard-install      # pnpm install inside platform/dashboard/
 
 Then open http://localhost:5173/playground — type a message, watch the live stream of tool calls and policy decisions from your local agent.
 
+### Control-plane database (SQLite / Postgres)
+
+`make platform-api` uses a local **SQLite** file — zero setup, fine for
+dev and the test suite. Set `DATABASE_URL` to run on **Postgres** instead
+(what deployments use); bare `postgres://` URLs are normalized to the
+`asyncpg` driver. A local Postgres is in the dev compose:
+
+```bash
+make platform-api-pg      # starts Postgres (Docker) + runs the API against it
+# equivalent to:
+make postgres-up          # start Postgres, wait until healthy
+DATABASE_URL=postgresql+asyncpg://hexgate:hexgate-dev-password@localhost:5433/hexgate make platform-api
+make postgres-reset       # wipe ONLY the Postgres data volume
+```
+
+No migration system: the schema is created with `create_all`, so a model
+change means resetting the volume (`make postgres-reset`), not migrating —
+data is treated as disposable. A managed Postgres (e.g. Scaleway) needs SSL
+in the DSN, e.g. `…/hexgate?ssl=require`.
+
+`DATABASE_URL` is read from the real environment or `platform/api/.env`
+(see `.env.sample`). The opt-in `tests/test_postgres_smoke.py` is the only
+test that exercises the Postgres path (the rest run on SQLite); it runs
+when `DATABASE_URL` points at Postgres.
+
 ### Audit log (ClickHouse)
 
 Policy decisions are written to a local ClickHouse instance for the audit dashboard. Requires Docker.
@@ -660,7 +655,7 @@ What happens under the hood:
 
 Working scripts in `examples/`:
 
-- `examples/customer_bot.py` — canonical HexaGate path: `create_agent(...)` + the dashboard register/serve loop end-to-end.
+- `examples/customer_bot.py` — canonical Hexgate path: `create_agent(...)` + the dashboard register/serve loop end-to-end.
 - `examples/openai_demo.py` — `HexgateRunner` (OpenAI Agents SDK) end-to-end.
 - `examples/google_demo.py` — `HexgateRunner` (Google ADK) end-to-end with `InMemorySessionService`.
 - `examples/pydantic_ai_demo.py` — `wrap_pydantic_agent` (Pydantic AI) end-to-end.
@@ -795,7 +790,7 @@ That means the same agent code can stay simple in development, while deployment
 
 ## 🧩 Policy Bundles — Compile, Sign, Enforce (WASM)
 
-HexaGate has **two policy enforcement engines** that return identical decisions (there's a parity test suite that proves it):
+Hexgate has **two policy enforcement engines** that return identical decisions (there's a parity test suite that proves it):
 
 - **pydantic** (default) — evaluates constraints in-process. Zero setup; this is what every example above uses.
 - **WASM** — compiles `policy.yaml` → Rego → a WebAssembly module evaluated via `wasmtime`. This is the path production ships: one compiled artifact, byte-for-byte reproducible, cryptographically signed by the platform.
@@ -1131,7 +1126,7 @@ hexgate chat --use examples/research_agents.py --agent update_researcher --appro
 
 ### `hexgate register` — push a manifest to the platform
 
-Register a code-defined agent's manifest with the HexaGate platform. `--agent`
+Register a code-defined agent's manifest with the Hexgate platform. `--agent`
 takes a Python import path of the form `module.path:attribute`, the same shape
 as ASGI/WSGI entrypoints. The CLI imports the module, grabs the agent object,
 and POSTs its manifest to `${HEXGATE_API_URL}/v1/agents` using
@@ -1170,7 +1165,7 @@ system prompt directly off the object. No flags needed.
 `--system-prompt` accepts either a literal string or a path to a `.md` /
 `.txt` / `.jinja` file (read as text at register time).
 
-Supported frameworks: OpenAI Agents SDK, Google ADK, Pydantic AI, LangChain/LangGraph, HexaGate agents.
+Supported frameworks: OpenAI Agents SDK, Google ADK, Pydantic AI, LangChain/LangGraph, Hexgate agents.
 
 ### `hexgate serve` — bridge a local agent to the platform's relay
 
@@ -1207,7 +1202,7 @@ print(manifest.model_dump())
 ```
 
 `create_manifest` dispatches on the framework of `agent`. The supported
-types are the same set `hexgate register` accepts: HexaGate, OpenAI Agents
+types are the same set `hexgate register` accepts: Hexgate, OpenAI Agents
 SDK, Google ADK, Pydantic AI, and LangChain/LangGraph compiled graphs.
 For LangGraph you must pass `tools=` explicitly, and may pass `model=` /
 `system_prompt=`, since compiled graphs don't expose those fields after
@@ -1217,7 +1212,7 @@ The return value is an `AgentManifest` (a Pydantic model, also re-exported
 from `hexgate` for type annotations) — the same schema the platform
 stores and the dashboard renders.
 
-## 🌐 HexaGate Platform
+## 🌐 Hexgate Platform
 
 The `platform/` directory contains an optional control plane that hosts agent definitions, dev tokens, and a live debug surface. The SDK works fully without it (`load_local_agent`, `load_builtin_agent` keep their existing semantics) — but with it you get:
 
@@ -1336,7 +1331,7 @@ the name from the loaded agent's `.name` attribute — no env var needed.
 
 ## 👤 User Scope + Roles
 
-Real backends serve many users, and different users get different capabilities. HexaGate splits that into two pieces:
+Real backends serve many users, and different users get different capabilities. Hexgate splits that into two pieces:
 
 - **`User`** — the per-request scope. Marks "this invocation acts on behalf of alice, in role X." Async context manager; pushes a fact-bearing Biscuit through the agent runtime.
 - **Role policies** — one `policy.yaml` per role, optionally inheriting from a base mixin. The runtime picks the right one at call time based on the active `User.role`.
@@ -1486,3 +1481,7 @@ async for event in stream_agent(agent, handler, "latest AI breakthroughs"):
 - assistant text deltas
 - tool lifecycle
 - final run completion
+
+---
+
+If Hexgate looks useful, [give it a ⭐ on GitHub](https://github.com/HexamindOrganisation/hexgate) — it helps more than you'd think. Built by [Hexamind](https://hexgate.ai).

{hexgate-0.2.2 → hexgate-0.2.4}/hexgate/adapters/google/runner.py

@@ -21,7 +21,7 @@ from hexgate.runtime import User
 
 
 class HexgateRunner:
-    """Runner for Google ADK agents with HexaGate tool policy and observability."""
+    """Runner for Google ADK agents with Hexgate tool policy and observability."""
 
     def __init__(
         self,

{hexgate-0.2.2 → hexgate-0.2.4}/hexgate/adapters/langchain/agent.py

@@ -1,8 +1,8 @@
-"""Proxy around a pre-built ``CompiledStateGraph`` for HexaGate-aware calls."""
+"""Proxy around a pre-built ``CompiledStateGraph`` for Hexgate-aware calls."""
 
 from __future__ import annotations
 
-from typing import TYPE_CHECKING, Any, AsyncIterator, Iterator
+from typing import TYPE_CHECKING, Any, AsyncIterator, Iterator, Literal
 
 from langchain_core.runnables import RunnableConfig
 from langfuse import get_client, propagate_attributes
@@ -60,7 +60,7 @@ class HexgateLangchainAgent:
         }
 
     def _with_callbacks(self, config: RunnableConfig | None) -> RunnableConfig:
-        """Append the HexaGate callback handler to ``config['callbacks']``."""
+        """Append the Hexgate callback handler to ``config['callbacks']``."""
         merged: RunnableConfig = dict(config) if config else {}
         callbacks = list(merged.get("callbacks") or [])
         if self._callback_handler not in callbacks:
@@ -134,10 +134,10 @@ class HexgateLangchainAgent:
     async def astream_events(
         self,
         input: dict[str, Any],
-        version: str,
         *,
         user: User,
         config: RunnableConfig | None = None,
+        version: Literal["v1", "v2"] = "v2",
         **kwargs: Any,
     ) -> AsyncIterator[dict[str, Any]]:
         """Stream the agent events asynchronously inside a User scope."""
@@ -145,7 +145,10 @@ class HexgateLangchainAgent:
         async with user:
             with propagate_attributes(**self._propagate_kwargs(user, "astream_events")):
                 async for event in self._agent.astream_events(
-                    input, version, config=self._with_callbacks(config), **kwargs
+                    input,
+                    config=self._with_callbacks(config),
+                    version=version,
+                    **kwargs,
                 ):
                     yield event
 

{hexgate-0.2.2 → hexgate-0.2.4}/hexgate/adapters/langchain/wrapper.py

@@ -1,5 +1,5 @@
 """BYO-graph entry point: retrofit a pre-built ``CompiledStateGraph`` with
-HexaGate policy. Tools are mutated in place so the graph keeps its
+Hexgate policy. Tools are mutated in place so the graph keeps its
 references; the returned :class:`HexgateLangchainAgent` opens a User
 scope + Langfuse propagation per call. For the manifest-driven path,
 use :func:`hexgate.enforce_policy` instead.
@@ -28,7 +28,7 @@ def wrap_langchain_agent(
     tools: list[BaseTool],
     api_key: str | None = None,
 ) -> HexgateLangchainAgent:
-    """Wrap a pre-built LangGraph agent with HexaGate policy enforcement.
+    """Wrap a pre-built LangGraph agent with Hexgate policy enforcement.
 
     Mutates ``tools`` in place so the graph keeps its references.
     The returned proxy takes ``user`` per invocation; role resolves at

{hexgate-0.2.2 → hexgate-0.2.4}/hexgate/adapters/openai/runner.py

@@ -32,7 +32,7 @@ from hexgate.security.enforcer import build_enforcer
 
 
 class HexgateRunner:
-    """Runner for OpenAI agents with HexaGate tool policy and observability."""
+    """Runner for OpenAI agents with Hexgate tool policy and observability."""
 
     def __init__(self, api_key: str | None = None):
         self.api_key = api_key or os.getenv("HEXGATE_KEY")

{hexgate-0.2.2 → hexgate-0.2.4}/hexgate/adapters/pydantic_ai/agent.py

@@ -1,4 +1,4 @@
-"""Proxy around a pydantic_ai ``Agent`` for HexaGate-aware calls."""
+"""Proxy around a pydantic_ai ``Agent`` for Hexgate-aware calls."""
 
 from __future__ import annotations
 

{hexgate-0.2.2 → hexgate-0.2.4}/hexgate/adapters/pydantic_ai/wrapper.py

@@ -49,7 +49,7 @@ def wrap_pydantic_agent(
     agent: Agent,
     api_key: str | None = None,
 ) -> HexgatePydanticAgent:
-    """Wrap a pydantic_ai agent with HexaGate policy + observability.
+    """Wrap a pydantic_ai agent with Hexgate policy + observability.
 
     Returns a :class:`HexgatePydanticAgent` backed by a clone of the
     caller's ``agent``; the original is not mutated. The proxy takes

{hexgate-0.2.2 → hexgate-0.2.4}/hexgate/agents/factory.py

@@ -190,6 +190,13 @@ def extract_input_text(input: AgentInput) -> str:
     return _extract_query_from_messages(input)
 
 
+# One-shot dedupe for the "local agent with active User scope" warning
+# inside `_resolve_user_facts`. The dashboard playground hits this once
+# per turn (and the platform-served sessions never hit it at all), so
+# without a flag the warning floods the log on every chat message.
+_warned_local_agent_user_scope: bool = False
+
+
 def _resolve_user_facts(agent: HexgateAgent) -> dict[str, list[str | int]] | None:
     """Lazily attenuate when a :class:`User` scope is active.
 
@@ -206,14 +213,22 @@ def _resolve_user_facts(agent: HexgateAgent) -> dict[str, list[str | int]] | Non
     client = agent.hexgate_client
     if client is None:
         # Local agent or test stub — User scope is set but there's nothing to
-        # attenuate against. Surface a single warning so devs see why their
-        # `requires_user` predicate isn't firing on a local-loaded agent.
-        import logging
-
-        logging.getLogger(__name__).warning(
-            "User scope active but agent has no hexgate_client; "
-            "biscuit_facts will be empty (use load_hexgate_agent for attenuation)"
-        )
+        # attenuate against. Surface a *single* warning so devs see why their
+        # `requires_user` predicate isn't firing on a local-loaded agent, then
+        # stay quiet: every subsequent turn would re-fire the same message
+        # otherwise (3-5x per chat session in the dashboard playground was
+        # the symptom).
+        global _warned_local_agent_user_scope
+        if not _warned_local_agent_user_scope:
+            import logging
+
+            logging.getLogger(__name__).warning(
+                "User scope active but agent has no hexgate_client; "
+                "biscuit_facts will be empty (use load_hexgate_agent for "
+                "attenuation). Subsequent occurrences in this process are "
+                "suppressed."
+            )
+            _warned_local_agent_user_scope = True
         return None
     from hexgate.cloud.attenuate import attenuate_for_user
     from hexgate.cloud.biscuit import (

{hexgate-0.2.2 → hexgate-0.2.4}/hexgate/agents/loader.py

@@ -462,10 +462,10 @@ def load_hexgate_agent(
     approval_handler: ApprovalHandler | None = None,
     decision_observer: "DecisionObserver | None" = None,
 ) -> tuple[AgentGraph, CallbackHandler]:
-    """Fetch an agent from HexaGate and return it with policy enforcement applied.
+    """Fetch an agent from Hexgate and return it with policy enforcement applied.
 
     Mirrors `load_local_agent` but sources the three YAMLs (agent, policy, system)
-    from the HexaGate API instead of disk. Tool resolution and enforcement are
+    from the Hexgate API instead of disk. Tool resolution and enforcement are
     identical — only the bytes' origin differs.
 
     ``name`` is required. The Phase-7 env-var fallback chain
@@ -555,7 +555,7 @@ def load_agent(
     approval_handler: ApprovalHandler | None = None,
     decision_observer: "DecisionObserver | None" = None,
 ) -> tuple[AgentGraph, CallbackHandler]:
-    """Load an agent from HexaGate (when HEXGATE_KEY is set), local, or builtin.
+    """Load an agent from Hexgate (when HEXGATE_KEY is set), local, or builtin.
 
     ``name`` is required for every path post-Phase 7 — the
     HEXGATE_AGENT_NAME env-var fallback was removed when ``hexgate
@@ -584,7 +584,7 @@ def load_agent(
             decision_observer=decision_observer,
         )
     if name is None:
-        raise ValueError("load_agent() requires a name when not using HexaGate Cloud")
+        raise ValueError("load_agent() requires a name when not using Hexgate Cloud")
     source = resolve_agent_source(name, base_dir)
     if source == "local":
         return load_local_agent(

{hexgate-0.2.2 → hexgate-0.2.4}/hexgate/audit.py

@@ -149,7 +149,13 @@ class AuditSender:
         # latch onto the first loop that drives them and reject any other
         # (e.g. a second asyncio.run()). Build them eagerly so configure()
         # stays sync, but track the loop and rebuild if it rotates.
-        self._loop: asyncio.AbstractEventLoop | None = None
+        #
+        # Capture the build-time loop so emit() can reach it from an executor
+        # thread (a sync tool under run_in_executor has no loop of its own).
+        try:
+            self._loop: asyncio.AbstractEventLoop | None = asyncio.get_running_loop()
+        except RuntimeError:
+            self._loop = None
         self._semaphore = asyncio.Semaphore(max_in_flight)
         self._client: httpx.AsyncClient | None = self._new_client()
         self._tasks: set[asyncio.Task[None]] = set()
@@ -182,11 +188,31 @@ class AuditSender:
         try:
             loop = asyncio.get_running_loop()
         except RuntimeError:
-            if not self._warned_no_loop:
-                _log.warning("audit emit called without a running event loop; skipping")
-                self._warned_no_loop = True
+            # Called off-loop (sync tool on a run_in_executor thread): route
+            # to the build-time loop instead of dropping the event.
+            loop = self._loop
+            if loop is None or loop.is_closed():
+                if not self._warned_no_loop:
+                    _log.warning(
+                        "audit emit called with no running loop and no live "
+                        "bound loop; skipping"
+                    )
+                    self._warned_no_loop = True
+                return
+            try:
+                loop.call_soon_threadsafe(self._spawn_send, event)
+            except RuntimeError:
+                pass  # loop torn down between the is_closed() check and the call
             return
         self._ensure_loop_state(loop)
+        self._spawn_send(event)
+
+    def _spawn_send(self, event: AuditEvent) -> None:
+        """Create the send task. MUST run on the bound loop's thread —
+        ``create_task`` and the loop-bound semaphore require the running loop.
+        Reached on-loop from :meth:`emit`, or via ``call_soon_threadsafe``."""
+        if self._closing or self._client is None:
+            return
         if self._semaphore.locked():
             self._dropped += 1
             if self._dropped % 100 == 1: