petfishframework 0.3.2__tar.gz → 0.3.3__tar.gz

{petfishframework-0.3.2 → petfishframework-0.3.3}/CHANGELOG.md

@@ -2,6 +2,39 @@
 
 All notable changes to petfishFramework will be documented in this file.
 
+## [0.3.2] — 2026-07-08
+
+### YAML Policy DSL Expansion
+- 13 new condition matchers (total 20): `amount_eq/gte/lte`, generic `field_eq` prefix, `role_count_gte`, `clearance_eq`, `tenant_id_eq`, `classification_eq`, `tags_contains`, `risk_level_eq`, `capabilities_contains`, `requires_credentials`, `session_risk_gt`, `prompt_risk_gt`
+- AND/OR/NOT combinators (`any`/`all`/`not`, nestable in `when:` blocks)
+- Policy schema validation (`policies/validator.py`): validates version, name, rules, effect values
+
+### CredentialBroker Phase 2
+- `BaseTool.credential_name` field — decouple tool name from credential name
+- `ScopedToken.max_uses` + use counting — one-time tokens (`max_uses=1`)
+- `ScopedToken.uses_remaining` property + `use()` method
+- `revoke_all_for_tool(tool_name)` — revoke tokens for a specific tool
+- `revoke_all()` — revoke everything (session-end cleanup)
+- `active_token_count` property + `list_active_tokens()`
+- Environment uses `credential_name` mapping when injecting tokens
+- Session-end credential cleanup
+
+## [0.3.1] — 2026-07-08
+
+### Credential Event Safety (P0 security fix)
+- Event log no longer stores `ScopedToken` objects — replaced with `{"credential_ref": ..., "tool_name": ..., "redacted": True}`
+- Untrusted event sinks cannot access `.get_secret()` via event introspection
+
+### Agent/Session credential_broker API
+- `Agent(credential_broker=broker)` — first-class parameter
+- `Session` passes broker to `RuntimeEnvironment`
+- `RuntimeEnvironment` field renamed `_credential_broker` → `credential_broker`
+
+### Documentation Sync
+- `docs/api.md` version updated
+- README roadmap: v0.3.x (current)
+- README: added YAML Policy Engine + CredentialBroker usage examples
+
 ## [0.3.0] — 2026-07-08
 
 ### v0.3.0 Policy Engine + Credential Broker Integration

{petfishframework-0.3.2 → petfishframework-0.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: petfishframework
-Version: 0.3.2
+Version: 0.3.3
 Summary: A lightweight runtime framework for reliable, auditable, budget-aware, and permission-aware AI agents.
 Project-URL: Homepage, https://github.com/kylecui/petfishFramework
 Project-URL: Documentation, https://github.com/kylecui/petfishFramework/tree/master/docs
@@ -34,7 +34,7 @@ Description-Content-Type: text/markdown
 
 [![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://github.com/kylecui/petfishFramework/blob/master/LICENSE)
-[![Tests: 284](https://img.shields.io/badge/tests-259-brightgreen.svg)](https://github.com/kylecui/petfishFramework/tree/master/tests/)
+[![Tests: 284](https://img.shields.io/badge/tests-284-brightgreen.svg)](https://github.com/kylecui/petfishFramework/tree/master/tests/)
 
 **Status: Alpha** — API may change. Core runtime works; see [Roadmap](#roadmap).
 

{petfishframework-0.3.2 → petfishframework-0.3.3}/README.md

@@ -4,7 +4,7 @@
 
 [![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://github.com/kylecui/petfishFramework/blob/master/LICENSE)
-[![Tests: 284](https://img.shields.io/badge/tests-259-brightgreen.svg)](https://github.com/kylecui/petfishFramework/tree/master/tests/)
+[![Tests: 284](https://img.shields.io/badge/tests-284-brightgreen.svg)](https://github.com/kylecui/petfishFramework/tree/master/tests/)
 
 **Status: Alpha** — API may change. Core runtime works; see [Roadmap](#roadmap).
 

{petfishframework-0.3.2 → petfishframework-0.3.3}/docs/api.md

@@ -1294,3 +1294,154 @@ decision.policy_name     # "enterprise-expense-policy"
 ```
 
 This lets audit logs trace each decision back to the policy file version that produced it.
+
+### AND/OR/NOT Combinators (v0.3.2)
+
+`when:` blocks support `any`/`all`/`not` combinators:
+
+```yaml
+when:
+  any:
+    - action.tool_name: approve_payment
+    - action.tool_name: transfer_funds
+
+when:
+  not:
+    subject.role_in: [admin]
+
+when:
+  not:
+    any:
+      - subject.role_in: [admin]
+      - subject.clearance_eq: secret
+```
+
+### Full matcher list (v0.3.2)
+
+| Key | Description | Example |
+|---|---|---|
+| `action.tool_name` | Exact tool name match | `approve_payment` |
+| `subject.role_in` | Any role in list matches | `[finance, admin]` |
+| `subject.role_not_in` | No role in list matches | `[intern]` |
+| `subject.role_count_gte` | Subject has ≥ N roles | `2` |
+| `subject.clearance_eq` | Clearance level match | `confidential` |
+| `subject.tenant_id_eq` | Tenant ID match | `acme-corp` |
+| `action.args.amount_gt` | `args["amount"] > value` | `5000` |
+| `action.args.amount_lt` | `args["amount"] < value` | `100` |
+| `action.args.amount_eq` | `args["amount"] == value` | `500` |
+| `action.args.amount_gte` | `args["amount"] >= value` | `1000` |
+| `action.args.amount_lte` | `args["amount"] <= value` | `200` |
+| `action.args.<field>_eq` | Generic field equality (prefix matcher) | `recipient_eq: alice@` |
+| `resource.classification_eq` | Resource classification match | `internal` |
+| `resource.tags_contains` | Resource has any of the listed tags | `[pii, sensitive]` |
+| `tool.side_effect` | Match tool metadata | `true` |
+| `tool.external_egress` | Match tool metadata | `true` |
+| `tool.requires_credentials` | Match tool metadata | `true` |
+| `tool.risk_level_eq` | Match risk level | `high` |
+| `tool.capabilities_contains` | Tool has any of listed capabilities | `[network, fs:write]` |
+| `context.session_risk_gt` | `context.session_risk > value` | `0.5` |
+| `context.prompt_risk_gt` | `context.prompt_risk > value` | `0.7` |
+
+Unknown condition keys are fail-closed (return `False`).
+
+### Policy schema validation (v0.3.2)
+
+```python
+from petfishframework.policies.validator import validate_policy, validate_policy_file
+
+errors = validate_policy_file("enterprise-expense.yaml")
+if errors:
+    for err in errors:
+        print(f"  - {err}")
+```
+
+Checks: version exists, name exists, rules is a list, each rule has name + valid effect, priority is integer.
+
+---
+
+## 16. Credential Broker
+
+### CredentialBroker
+
+```python
+from petfishframework.credentials import CredentialBroker
+
+broker = CredentialBroker(default_ttl_s=3600)
+broker.register_credential("github_app", os.environ["GITHUB_TOKEN"])
+broker.register_credential("db_connection", "postgres://...")
+```
+
+| Method | Description |
+|---|---|
+| `register_credential(name, secret)` | Register a real credential |
+| `issue_token(name, tool_name, ttl_s=None, max_uses=0)` | Issue a scoped, time-limited token |
+| `validate_token(token_id)` | Check if token is valid (not expired, not revoked) |
+| `revoke_token(token_id)` | Revoke a single token |
+| `revoke_all_for_tool(tool_name)` | Revoke all tokens for a specific tool (v0.3.2) |
+| `revoke_all()` | Revoke all active tokens (session-end cleanup) (v0.3.2) |
+| `cleanup_expired()` | Remove expired tokens, returns count removed |
+| `active_token_count` | Property: number of active tokens (v0.3.2) |
+| `list_active_tokens()` | Return list of active token_ids (v0.3.2) |
+
+### ScopedToken
+
+```python
+token = broker.issue_token("github_app", tool_name="github_tool", max_uses=1)
+token.token_id       # unique ID
+token.tool_name      # "github_tool"
+token.is_valid()     # True (not expired, uses remaining)
+token.get_secret()   # returns the actual secret (consumes one use if max_uses set)
+token.uses_remaining # remaining uses (v0.3.2)
+```
+
+`__repr__` and `__str__` never expose the secret:
+```python
+repr(token)  # "ScopedToken(token_id='abc...', tool_name='github_tool', ...)"
+str(token)   # "ScopedToken(abc..., tool=github_tool, valid=True)"
+```
+
+### Agent Integration
+
+```python
+agent = Agent(
+    model=model,
+    reasoning=ReAct(),
+    tools=tools,
+    credential_broker=broker,
+)
+# Tools with requires_credentials=True receive a ScopedToken in args["_credential_token"]
+```
+
+### Tool credential_name (v0.3.2)
+
+```python
+@dataclass
+class GitHubTool(BaseTool):
+    name: str = "github_create_issue"
+    requires_credentials: bool = True
+    credential_name: str = "github_app"  # maps to broker credential name
+```
+
+### Event Log Safety
+
+ScopedToken objects are **never** stored in event data. The Environment replaces them with:
+
+```python
+{"credential_ref": "token_id", "tool_name": "github_tool", "redacted": True}
+```
+
+### One-time Tokens (v0.3.2)
+
+```python
+token = broker.issue_token("secret_key", tool_name="signing_tool", max_uses=1)
+token.get_secret()  # works, uses_remaining becomes 0
+token.get_secret()  # raises ValueError("max uses exceeded")
+```
+
+### Session-End Cleanup
+
+```python
+# In Session._finalize_run():
+if session.credential_broker:
+    session.credential_broker.cleanup_expired()
+```

{petfishframework-0.3.2 → petfishframework-0.3.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "petfishframework"
-version = "0.3.2"
+version = "0.3.3"
 description = "A lightweight runtime framework for reliable, auditable, budget-aware, and permission-aware AI agents."
 readme = "README.md"
 license = "MIT"

{petfishframework-0.3.2 → petfishframework-0.3.3}/src/petfishframework/__init__.py

@@ -15,7 +15,7 @@ from .reasoning import LATS, LLMPlusP, ReAct
 from .reliability.replay import ReplayMode
 from .tools.base import BaseTool
 
-__version__ = "0.3.2"
+__version__ = "0.3.3"
 
 __all__ = [
     "Agent",

{petfishframework-0.3.2 → petfishframework-0.3.3}/uv.lock

@@ -427,7 +427,7 @@ name = "exceptiongroup"
 version = "1.3.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "typing-extensions" },
+    { name = "typing-extensions", marker = "python_full_version < '3.11'" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/50/79/66800aadf48771f6b62f7eb014e352e5d06856655206165d775e675a02c9/exceptiongroup-1.3.1.tar.gz", hash = "sha256:8b412432c6055b0b7d14c310000ae93352ed6754f70fa8f7c34141f91c4e3219", size = 30371, upload-time = "2025-11-21T23:01:54.787Z" }
 wheels = [
@@ -506,7 +506,7 @@ name = "importlib-metadata"
 version = "9.0.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "zipp" },
+    { name = "zipp", marker = "python_full_version < '3.14'" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/a9/01/15bb152d77b21318514a96f43af312635eb2500c96b55398d020c93d86ea/importlib_metadata-9.0.0.tar.gz", hash = "sha256:a4f57ab599e6a2e3016d7595cfd72eb4661a5106e787a95bcc90c7105b831efc", size = 56405, upload-time = "2026-03-20T06:42:56.999Z" }
 wheels = [
@@ -995,7 +995,7 @@ wheels = [
 
 [[package]]
 name = "petfishframework"
-version = "0.3.2"
+version = "0.3.3"
 source = { editable = "." }
 dependencies = [
     { name = "pyyaml" },
@@ -1742,8 +1742,8 @@ name = "secretstorage"
 version = "3.5.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "cryptography" },
-    { name = "jeepney" },
+    { name = "cryptography", marker = "python_full_version >= '3.15' or sys_platform != 'win32'" },
+    { name = "jeepney", marker = "python_full_version >= '3.15' or sys_platform != 'win32'" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/1c/03/e834bcd866f2f8a49a85eaff47340affa3bfa391ee9912a952a1faa68c7b/secretstorage-3.5.0.tar.gz", hash = "sha256:f04b8e4689cbce351744d5537bf6b1329c6fc68f91fa666f60a380edddcd11be", size = 19884, upload-time = "2025-11-23T19:02:53.191Z" }
 wheels = [