hyperforge 1.0.0.post414__tar.gz → 1.0.0.post421__tar.gz

{hyperforge-1.0.0.post414 → hyperforge-1.0.0.post421}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: hyperforge
-Version: 1.0.0.post414
+Version: 1.0.0.post421
 Summary: Agentic Framework for Orchestrated Runtime, Governance, and Execution
 Author: AI Data Team
 Author-email: AI Data Team <learning@nuclia.com>
@@ -20,11 +20,12 @@ Requires-Dist: mcp>=1.29.1,<2
 Requires-Dist: prometheus-client
 Requires-Dist: mrflagly>=0.2.11
 Requires-Dist: aiodns
+Requires-Dist: anyio>=4.15.1
 Requires-Dist: httpx>=0.28.1,<0.29
 Requires-Dist: httpcore>=1.0.9,<1.1
 Requires-Dist: jinja2
 Requires-Dist: jsonschema
-Requires-Dist: restrictedpython
+Requires-Dist: restrictedpython>=8.5
 Requires-Dist: databases[asyncpg]
 Requires-Dist: sqlalchemy
 Requires-Dist: cryptography

{hyperforge-1.0.0.post414 → hyperforge-1.0.0.post421}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "hyperforge"
-version = "1.0.0.post414"
+version = "1.0.0.post421"
 description = "Agentic Framework for Orchestrated Runtime, Governance, and Execution"
 readme = "README.md"
 requires-python = ">=3.12"
@@ -27,11 +27,12 @@ dependencies = [
     "prometheus_client",
     "mrflagly>=0.2.11",
     "aiodns",
+    "anyio>=4.15.1",
     "httpx>=0.28.1,<0.29",
     "httpcore>=1.0.9,<1.1",
     "jinja2",
     "jsonschema",
-    "RestrictedPython",
+    "RestrictedPython>=8.5",
     "databases[asyncpg]",
     "sqlalchemy",
     "cryptography",

{hyperforge-1.0.0.post414 → hyperforge-1.0.0.post421}/pyproject.toml.orig

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "hyperforge"
-version = "1.0.0.post414"
+version = "1.0.0.post421"
 authors = [{ name = "AI Data Team", email = "learning@nuclia.com" }]
 description = "Agentic Framework for Orchestrated Runtime, Governance, and Execution"
 readme = "README.md"
@@ -28,11 +28,12 @@ dependencies = [
     "prometheus_client",
     "mrflagly>=0.2.11",
     "aiodns",
+    "anyio>=4.15.1",
     "httpx>=0.28.1,<0.29",
     "httpcore>=1.0.9,<1.1",
     "jinja2",
     "jsonschema",
-    "RestrictedPython",
+    "RestrictedPython>=8.5",
     "databases[asyncpg]",
     "sqlalchemy",
     "cryptography",

hyperforge-1.0.0.post421/src/hyperforge/errors.py

@@ -0,0 +1,105 @@
+import asyncio
+import re
+from collections.abc import Iterator
+
+_AUTH_CREDENTIAL = re.compile(r"(?i)\b(Bearer|Basic)\s+[^\s,;]+")
+_AUTHORIZATION_VALUE = re.compile(
+    r"(?i)\b(authorization)(\s*[:=]\s*)"
+    r"(?:\"[^\"]*\"|'[^']*'|(?:(?:Basic|Bearer)\s+)?[^\s,;]+)"
+)
+_COOKIE_VALUE = re.compile(r"(?i)\b(set-cookie|cookie)(\s*:\s*)[^\r\n]+")
+_SECRET_KEYS = (
+    r"api[_-]?key|access[_-]?token|auth[_-]?token|client[_-]?secret|"
+    r"credential|password|private[_-]?key|refresh[_-]?token|secret|session[_-]?id|"
+    r"oauth[_-]?token|token"
+)
+_QUOTED_SECRET_VALUE = re.compile(
+    rf"(?i)\b({_SECRET_KEYS})\b(\s*[\"']?\s*[:=]\s*)([\"'])[^\"']*\3"
+)
+_SECRET_VALUE = re.compile(
+    rf"(?i)\b({_SECRET_KEYS})\b(\s*[\"']?\s*[:=]\s*)([^\"',\s;&}}]+)"
+)
+_URL_CREDENTIALS = re.compile(r"(?i)(https?://)[^\s/:@]+:[^\s/@]+@")
+
+
+def _redact_secrets(detail: str) -> str:
+    detail = _URL_CREDENTIALS.sub(r"\1[REDACTED]:[REDACTED]@", detail)
+    detail = _AUTHORIZATION_VALUE.sub(r"\1\2[REDACTED]", detail)
+    detail = _AUTH_CREDENTIAL.sub(r"\1 [REDACTED]", detail)
+    detail = _COOKIE_VALUE.sub(r"\1\2[REDACTED]", detail)
+    detail = _QUOTED_SECRET_VALUE.sub(r"\1\2\3[REDACTED]\3", detail)
+    return _SECRET_VALUE.sub(r"\1\2[REDACTED]", detail)
+
+
+def _leaf_exceptions(exc: BaseException) -> Iterator[BaseException]:
+    if isinstance(exc, BaseExceptionGroup):
+        for nested in exc.exceptions:
+            yield from _leaf_exceptions(nested)
+        return
+
+    yield exc
+
+
+def actionable_exception_group(exc: BaseExceptionGroup) -> BaseExceptionGroup:
+    """Return regular exceptions while allowing only cancellation to be discarded."""
+    actionable, remainder = exc.split(Exception)
+    if actionable is None or (
+        remainder is not None
+        and any(
+            not isinstance(item, asyncio.CancelledError)
+            for item in _leaf_exceptions(remainder)
+        )
+    ):
+        raise exc
+    return actionable
+
+
+def _http_status(exc: BaseException) -> int | None:
+    response = getattr(exc, "response", None)
+    status = getattr(response, "status_code", None)
+    if isinstance(status, int):
+        return status
+
+    status = getattr(exc, "status", None)
+    return status if isinstance(status, int) else None
+
+
+def _exception_detail(exc: BaseException) -> str:
+    detail = _redact_secrets(str(exc).strip() or type(exc).__name__)
+    status = _http_status(exc)
+    if status == 401:
+        return f"Authentication failed (HTTP 401): {detail}"
+    if status == 403:
+        return f"Authorization failed (HTTP 403): {detail}"
+    return detail
+
+
+def _exception_priority(exc: BaseException) -> int:
+    status = _http_status(exc)
+    if status == 401:
+        return 0
+    if status == 403:
+        return 1
+    return 2
+
+
+def exception_detail(exc: BaseException) -> str:
+    """Return useful, bounded details from an exception or exception group."""
+    leaves = list(_leaf_exceptions(exc))
+    actionable = [
+        item for item in leaves if not isinstance(item, asyncio.CancelledError)
+    ]
+    if actionable:
+        leaves = actionable
+
+    leaves.sort(key=_exception_priority)
+    details = list(dict.fromkeys(_exception_detail(item) for item in leaves))
+    if len(details) == 1:
+        return details[0]
+
+    visible_details = details[:3]
+    if len(details) > len(visible_details):
+        visible_details.append(
+            f"and {len(details) - len(visible_details)} more error(s)"
+        )
+    return "Multiple errors: " + "; ".join(visible_details)

{hyperforge-1.0.0.post414 → hyperforge-1.0.0.post421}/src/hyperforge/server/session.py

@@ -19,6 +19,7 @@ from hyperforge.broker import Broker
 from hyperforge.configure import load_all_configurations, scan
 from hyperforge.db.agents import AgentManager
 from hyperforge.engine import State, get_state
+from hyperforge.errors import actionable_exception_group, exception_detail
 from hyperforge.interaction import (
     AnswerOperation,
     AragAnswer,
@@ -375,10 +376,16 @@ class SessionManager:
             async with asyncio.timeout(self.settings.question_timeout_seconds):
                 await state.agent(question_memory, state.manager)
 
+        except BaseExceptionGroup as exc:
+            error_group = actionable_exception_group(exc)
+            logger.exception("Answering exception")
+            errors.capture_exception(error_group)
+            error = ARAGException(detail=exception_detail(error_group))
+            observation.set_status("error")
         except Exception as e:
             logger.exception("Answering exception")
             errors.capture_exception(e)
-            error = ARAGException(detail=str(e))
+            error = ARAGException(detail=exception_detail(e))
             observation.set_status("error")
         finally:
             if state.manager is not None:
@@ -387,10 +394,9 @@ class SessionManager:
                 except Exception as e:
                     logger.exception("Error closing Manager")
                     errors.capture_exception(e)
-
-        observation.end()
-        answer_running.dec()
-        keepalive.cancel()
+            observation.end()
+            answer_running.dec()
+            keepalive.cancel()
 
         await self.callback(
             topic,