inspect-ranges 0.2.0__tar.gz

inspect_ranges-0.2.0/.gitignore

@@ -0,0 +1,240 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[codz]
+*$py.class
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# PyInstaller
+#  Usually these files are written by a python script from a template
+#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py.cover
+.hypothesis/
+.pytest_cache/
+cover/
+
+# Translations
+*.mo
+*.pot
+
+# Django stuff:
+*.log
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+
+# Flask stuff:
+instance/
+.webassets-cache
+
+# Scrapy stuff:
+.scrapy
+
+# Sphinx documentation
+docs/_build/
+
+# Jupyter Notebook
+.ipynb_checkpoints
+
+# IPython
+profile_default/
+ipython_config.py
+
+# pyenv
+#   For a library or package, you might want to ignore these files since the code is
+#   intended to run in multiple environments; otherwise, check them in:
+# .python-version
+
+# pipenv
+#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
+#   However, in case of collaboration, if having platform-specific dependencies or dependencies
+#   having no cross-platform support, pipenv may install dependencies that don't work, or not
+#   install all needed dependencies.
+#Pipfile.lock
+
+# UV
+#   Similar to Pipfile.lock, it is generally recommended to include uv.lock in version control.
+#   This is especially recommended for binary packages to ensure reproducibility, and is more
+#   commonly ignored for libraries.
+#uv.lock
+
+# poetry
+#   Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control.
+#   This is especially recommended for binary packages to ensure reproducibility, and is more
+#   commonly ignored for libraries.
+#   https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control
+#poetry.lock
+#poetry.toml
+
+# pdm
+#   Similar to Pipfile.lock, it is generally recommended to include pdm.lock in version control.
+#   pdm recommends including project-wide configuration in pdm.toml, but excluding .pdm-python.
+#   https://pdm-project.org/en/latest/usage/project/#working-with-version-control
+#pdm.lock
+#pdm.toml
+.pdm-python
+.pdm-build/
+
+# pixi
+#   Similar to Pipfile.lock, it is generally recommended to include pixi.lock in version control.
+#pixi.lock
+#   Pixi creates a virtual environment in the .pixi directory, just like venv module creates one
+#   in the .venv directory. It is recommended not to include this directory in version control.
+.pixi
+
+# PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm
+__pypackages__/
+
+# Celery stuff
+celerybeat-schedule
+celerybeat.pid
+
+# SageMath parsed files
+*.sage.py
+
+# Environments
+.env
+.envrc
+.venv*
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Spyder project settings
+.spyderproject
+.spyproject
+
+# Rope project settings
+.ropeproject
+
+# mkdocs documentation
+/site
+
+# pyright
+.pyright/
+
+# Pyre type checker
+.pyre/
+
+# pytype static type analyzer
+.pytype/
+
+# mypy type checker
+.mypy_cache/
+
+# Cython debug symbols
+cython_debug/
+
+# PyCharm
+#  JetBrains specific template is maintained in a separate JetBrains.gitignore that can
+#  be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
+#  and can be added to the global gitignore or merged into this file.  For a more nuclear
+#  option (not recommended) you can uncomment the following to ignore the entire idea folder.
+#.idea/
+
+# Abstra
+# Abstra is an AI-powered process automation framework.
+# Ignore directories containing user credentials, local state, and settings.
+# Learn more at https://abstra.io/docs
+.abstra/
+
+# Visual Studio Code
+#  Visual Studio Code specific template is maintained in a separate VisualStudioCode.gitignore
+#  that can be found at https://github.com/github/gitignore/blob/main/Global/VisualStudioCode.gitignore
+#  and can be added to the global gitignore or merged into this file. However, if you prefer,
+#  you could uncomment the following to ignore the entire vscode folder
+# .vscode/
+
+# Ruff stuff:
+.ruff_cache/
+
+# PyPI configuration file
+.pypirc
+
+# Cursor
+#  Cursor is an AI-powered code editor. `.cursorignore` specifies files/directories to
+#  exclude from AI features like autocomplete and code analysis. Recommended for sensitive data
+#  refer to https://docs.cursor.com/context/ignore-files
+.cursorignore
+.cursorindexingignore
+
+# Marimo
+marimo/_static/
+marimo/_lsp/
+__marimo__/
+
+# Dynamic version
+src/inspect_ranges/_version.py
+
+# Inspect logs and scans
+/logs/
+/logs-*/
+/runs/
+/scans/
+/transcripts/
+# eval logs and evidence stores written by runs started inside a range directory
+src/inspect_ranges/examples/*/logs/
+
+# MacOS
+.DS_Store
+
+# Claude Code
+**/.claude/settings.local.json
+.claude
+
+# Quarto Docs
+/.luarc.json
+
+
+# daemon build droppings (the artifact builder works in a temp name)
+.vsockd-build
+
+.quarto
+*.pdf
+/.quarto/
+**/*.quarto_ipynb
+
+# quarto preview output written in place under docs/
+docs/**/*.html
+docs/site_libs/
+docs/**/*_files/

inspect_ranges-0.2.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Meridian Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

inspect_ranges-0.2.0/PKG-INFO

@@ -0,0 +1,29 @@
+Metadata-Version: 2.5
+Name: inspect_ranges
+Version: 0.2.0
+Summary: Inspect AI extension for ranges.
+Project-URL: Source Code, https://github.com/meridianlabs-ai/inspect_ranges
+Project-URL: Issue Tracker, https://github.com/meridianlabs-ai/inspect_ranges/issues
+Author: Meridian Labs
+License: MIT License
+License-File: LICENSE
+Requires-Python: >=3.12
+Requires-Dist: boto3[crt]>=1.40
+Requires-Dist: click>=8.0
+Requires-Dist: inspect-ai>=0.3.285
+Requires-Dist: inspect-scout>=0.6.0
+Requires-Dist: pydantic>=2
+Requires-Dist: pyyaml>=6
+Requires-Dist: tenacity>=8.2
+Description-Content-Type: text/markdown
+
+# Inspect Ranges
+
+Welcome to Inspect Ranges, an extension for [Inspect AI](https://inspect.aisi.org.uk).
+
+```bash
+git clone https://github.com/meridianlabs-ai/inspect_ranges.git
+cd inspect_ranges && pip install .
+```
+
+Learn more about using Inspect Ranges at <https://meridianlabs-ai.github.io/inspect_ranges>.

inspect_ranges-0.2.0/README.md

@@ -0,0 +1,10 @@
+# Inspect Ranges
+
+Welcome to Inspect Ranges, an extension for [Inspect AI](https://inspect.aisi.org.uk).
+
+```bash
+git clone https://github.com/meridianlabs-ai/inspect_ranges.git
+cd inspect_ranges && pip install .
+```
+
+Learn more about using Inspect Ranges at <https://meridianlabs-ai.github.io/inspect_ranges>.

inspect_ranges-0.2.0/pyproject.toml

@@ -0,0 +1,147 @@
+[project]
+name = "inspect_ranges"
+dynamic = ["version"]
+description = "Inspect AI extension for ranges."
+authors = [{ name = "Meridian Labs" }]
+readme = "README.md"
+requires-python = ">=3.12"
+license = { text = "MIT License" }
+dependencies = [
+    "inspect-ai>=0.3.285",
+    "boto3[crt]>=1.40",
+    "click>=8.0",
+    "pydantic>=2",
+    "pyyaml>=6",
+    "tenacity>=8.2",
+    "inspect-scout>=0.6.0",
+]
+
+[project.urls]
+"Source Code" = "https://github.com/meridianlabs-ai/inspect_ranges"
+"Issue Tracker" = "https://github.com/meridianlabs-ai/inspect_ranges/issues"
+
+[build-system]
+requires = ["hatchling", "hatch-vcs"]
+build-backend = "hatchling.build"
+
+[project.entry-points.inspect_ai]
+inspect_ranges = "inspect_ranges._registry"
+
+[project.scripts]
+inspect-ranges = "inspect_ranges._cli.main:main"
+
+
+[dependency-groups]
+dev = [
+    "ruff",
+    "pytest",
+    "pyright",
+    "pytest-xdist",
+    "pytest-dotenv",
+    "pytest-timeout>=2.4.0",
+    "anthropic>=1.11.0",
+    "pytest-cov>=7.1.0",
+    "types-PyYAML",
+]
+# Kept out of `dev` and the default groups: quarto-cli has no wheel and is
+# built from its sdist. Docs builds ask for it with `--group doc`.
+doc = [
+    "jupyter",
+    "panflute",
+    "markdown",
+    "griffe>=2",
+    "rich",
+    "pyyaml",
+    "quarto-cli>=1.9.36",
+]
+dist = ["twine", "build"]
+
+[tool.hatch.build]
+only-packages = true
+# the examples' vendored upstream/ trees are repo-only provenance: never
+# distributed (examples-into-package slice)
+exclude = ["docs/", "tests/", "src/inspect_ranges/examples/_*/upstream/"]
+artifacts = [
+    "src/**/*.yaml",
+    "src/**/*.md",
+    "src/**/*.txt",
+    "src/**/*.sh",
+    "src/**/py.typed",
+    # the examples ship their full data trees (recipes/, checks/, yaml, docs);
+    # artifacts bypass `exclude`, so upstream/ needs the negated pattern too
+    "src/inspect_ranges/examples/_*/**",
+    "!src/inspect_ranges/examples/_*/upstream/**",
+]
+
+[tool.hatch.version]
+source = "vcs"
+
+[tool.hatch.build.hooks.vcs]
+version-file = "src/inspect_ranges/_version.py"
+
+[tool.hatch.version.raw-options]
+local_scheme = "no-local-version" # Important for PyPI compatibility
+
+[tool.uv]
+managed = true
+# uv 0.12.22 is the first release that writes lock revision 5 (this uv.lock)
+required-version = ">=0.12.22"
+
+[tool.ruff]
+# explicit exclude list: ruff's DEFAULT excludes contain "_build", which
+# silently blinded the lint/format gate to src/inspect_ranges/_build (caught
+# by the slice-5 fresh-context review)
+exclude = [
+    ".git",
+    ".venv",
+    "docs",
+    "design",
+    # vendored upstream provenance under the examples is FROZEN: neither
+    # linted nor reformatted (linux-examples-v1 phase review round 1)
+    "src/inspect_ranges/examples/_*/upstream",
+]
+src = ["."]
+
+[tool.ruff.lint]
+select = [
+    "E",      # pycodestyle errors
+    "W",      # pycodestyle warnings
+    "F",      # flake8
+    "D",      # pydocstyle
+    "I",      # isort
+    "B",      # flake8-bugbear
+    "SIM101", # duplicate isinstance
+    # "RET", # flake8-return
+    # "RUF", # ruff rules
+]
+ignore = ["E203", "E501", "D10", "D212", "D415"]
+
+[tool.ruff.lint.pydocstyle]
+convention = "google"
+
+[tool.pytest.ini_options]
+pythonpath = ["src"]
+testpaths = ["tests"]
+addopts = "-n auto"
+
+[tool.pyright]
+include = ["src", "tests"]
+# vendored upstream provenance under the examples is FROZEN: never typechecked
+exclude = ["src/inspect_ranges/examples/*/upstream"]
+extraPaths = ["."]
+typeCheckingMode = "strict"
+pythonPlatform = "All"
+
+# tests may exercise private helpers directly
+[[tool.pyright.executionEnvironments]]
+root = "tests"
+reportPrivateUsage = false
+
+# the devbox CLI wraps boto3, whose responses are untyped-by-nature; its
+# correctness is operational, not statically checkable
+[[tool.pyright.executionEnvironments]]
+root = "src/inspect_ranges/_devbox"
+reportUnknownMemberType = false
+reportUnknownVariableType = false
+reportUnknownArgumentType = false
+reportMissingTypeStubs = false

inspect_ranges-0.2.0/src/inspect_ranges/__init__.py

@@ -0,0 +1,105 @@
+# __version__ resolves first: deep imports (the oracle's compiler/runtime
+# chain) read it during package initialization
+try:
+    from ._version import __version__
+except ImportError:
+    __version__ = "unknown"
+
+from ._challenges import (
+    PROBE_MAC_PREFIX,
+    AnswerGoal,
+    AvailabilityGoal,
+    Challenge,
+    Challenges,
+    ControlGoal,
+    DegradeGoal,
+    DetectionGoal,
+    EvadeGoal,
+    ExecuteGoal,
+    ExfiltrateGoal,
+    FlagGoal,
+    Goal,
+    GoalBase,
+    GoalResult,
+    GoalType,
+    HijackGoal,
+    JudgeGoal,
+    Observations,
+    ObserverKind,
+    OracleSetupError,
+    PatchGoal,
+    Primitive,
+    RangeOracle,
+    Scoring,
+    SeverityFilter,
+    TamperGoal,
+    challenge_dataset,
+    challenge_scorer,
+    challenge_setup,
+    guest_segment_ip,
+    load_challenges,
+    load_collectors,
+    range_oracle,
+    register_exploit,
+    register_goal_type,
+    source_bound_find,
+    validate_challenges,
+    verify_goal,
+)
+from ._terminal import terminal
+from .schema import (
+    load_range,
+    range_json_schema,
+    revalidate_range,
+    validate_range,
+)
+from .types import semantic_issues
+
+__all__ = [
+    "PROBE_MAC_PREFIX",
+    "AnswerGoal",
+    "AvailabilityGoal",
+    "Challenge",
+    "Challenges",
+    "ControlGoal",
+    "DegradeGoal",
+    "DetectionGoal",
+    "EvadeGoal",
+    "ExecuteGoal",
+    "ExfiltrateGoal",
+    "FlagGoal",
+    "Goal",
+    "GoalBase",
+    "GoalResult",
+    "GoalType",
+    "HijackGoal",
+    "JudgeGoal",
+    "Observations",
+    "ObserverKind",
+    "OracleSetupError",
+    "PatchGoal",
+    "Primitive",
+    "RangeOracle",
+    "Scoring",
+    "SeverityFilter",
+    "TamperGoal",
+    "__version__",
+    "challenge_dataset",
+    "challenge_scorer",
+    "challenge_setup",
+    "guest_segment_ip",
+    "load_challenges",
+    "load_collectors",
+    "load_range",
+    "range_json_schema",
+    "range_oracle",
+    "register_exploit",
+    "register_goal_type",
+    "revalidate_range",
+    "semantic_issues",
+    "source_bound_find",
+    "terminal",
+    "validate_challenges",
+    "validate_range",
+    "verify_goal",
+]

inspect_ranges-0.2.0/src/inspect_ranges/__main__.py

@@ -0,0 +1,6 @@
+"""`python -m inspect_ranges` — runs the CLI without needing the console script on `PATH`."""
+
+from ._cli.main import main
+
+if __name__ == "__main__":
+    main()

inspect_ranges-0.2.0/src/inspect_ranges/_attackbox/__init__.py

@@ -0,0 +1,48 @@
+"""The attack-box provider seam (`attack-box-v1.md`): an external supplier for one range's dedicated attack box.
+
+The range supplies an L2 attachment point on the foothold's segment (taps built inside the range netns, fds handed over) and routes the attacker's exec to the surface the provider returns; the provider supplies the box behind both and owns its lifecycle. Registration mirrors `INSPECT_RANGES_HOST`: the `INSPECT_RANGES_ATTACK_BOX` value is the registration, persisted as the project's attack-box origin so teardown re-resolves from disk. Selection is deployment knowledge, never `range.yaml`. Scope is dedicated attack boxes only: an assumed-breach foothold is a content guest this project builds and captures, excluded by construction.
+"""
+
+from .backend import (
+    ENV_VAR,
+    AttachedInterface,
+    AttackBoxBackend,
+    AttackBoxCapabilities,
+    AttackBoxContext,
+    AttackBoxFactory,
+    AttackBoxHandle,
+    AttackBoxProvider,
+    AttackBoxReclaimFn,
+    FootholdAttachment,
+    ParsedAttackBox,
+    attack_box_origin,
+    parse_attack_box,
+    resolve_attack_box,
+)
+from .record import (
+    AttackBoxRecord,
+    attack_box_record_path,
+    read_attack_box_record,
+    write_attack_box_record,
+)
+
+__all__ = [
+    "ENV_VAR",
+    "AttachedInterface",
+    "AttackBoxBackend",
+    "AttackBoxCapabilities",
+    "AttackBoxContext",
+    "AttackBoxFactory",
+    "AttackBoxHandle",
+    "AttackBoxProvider",
+    "AttackBoxReclaimFn",
+    "AttackBoxRecord",
+    "FootholdAttachment",
+    "ParsedAttackBox",
+    "attack_box_origin",
+    "attack_box_record_path",
+    "parse_attack_box",
+    "read_attack_box_record",
+    "resolve_attack_box",
+    "write_attack_box_record",
+]