prism-proxy 0.2.0__tar.gz

prism_proxy-0.2.0/.env.example

@@ -0,0 +1,30 @@
+# Prism API Keys — copy to .env and fill in your keys
+# None are required — Prism works with any combination of providers
+
+# Anthropic (Claude)
+# ANTHROPIC_API_KEY=sk-ant-...
+
+# OpenAI (GPT-4o)
+# OPENAI_API_KEY=sk-...
+
+# Google AI Studio (Gemini)
+# GOOGLE_API_KEY=AI...
+
+# DeepSeek
+# DEEPSEEK_API_KEY=sk-...
+
+# Groq
+# GROQ_API_KEY=gsk_...
+
+# Mistral
+# MISTRAL_API_KEY=...
+
+# OpenRouter (one key = access to many free models)
+# Get free key: https://openrouter.ai/keys
+# OPENROUTER_API_KEY=sk-or-v1-...
+
+# Prism Configuration (optional)
+# PRISM_HOME=~/.prism
+# PRISM_LOG_LEVEL=WARNING
+# PRISM_BUDGET_DAILY=5.00
+# PRISM_BUDGET_MONTHLY=50.00

prism_proxy-0.2.0/.github/CODEOWNERS

@@ -0,0 +1,18 @@
+# Prism CLI — Code Owners
+# These owners will be requested for review on PRs that touch their areas.
+
+# Global fallback
+* @GoparapukethaN
+
+# Core modules
+/src/prism/config/ @GoparapukethaN
+/src/prism/router/ @GoparapukethaN
+/src/prism/security/ @GoparapukethaN
+/src/prism/auth/ @GoparapukethaN
+
+# CI/CD and packaging
+/.github/ @GoparapukethaN
+/pyproject.toml @GoparapukethaN
+
+# Documentation
+/*.md @GoparapukethaN

prism_proxy-0.2.0/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,47 @@
+---
+name: Bug Report
+about: Report a bug to help us improve Prism
+title: "[BUG] "
+labels: bug
+assignees: ""
+---
+
+## Description
+
+A clear and concise description of the bug.
+
+## Steps to Reproduce
+
+1. Run `prism ...`
+2. Enter '...'
+3. See error
+
+## Expected Behavior
+
+What you expected to happen.
+
+## Actual Behavior
+
+What actually happened. Include the full error message or traceback if available.
+
+## Environment
+
+- **Prism version**: (`prism --version`)
+- **Python version**: (`python --version`)
+- **OS**: (e.g., macOS 14.5, Ubuntu 22.04, Windows 11)
+- **Installation method**: (pip, pipx, source)
+
+## Logs
+
+<details>
+<summary>Relevant log output</summary>
+
+```
+Paste logs here (make sure to redact any API keys or secrets)
+```
+
+</details>
+
+## Additional Context
+
+Add any other context about the problem here.

prism_proxy-0.2.0/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,34 @@
+---
+name: Feature Request
+about: Suggest a new feature or improvement for Prism
+title: "[FEATURE] "
+labels: enhancement
+assignees: ""
+---
+
+## Problem Statement
+
+A clear description of the problem this feature would solve.
+Example: "I'm always frustrated when..."
+
+## Proposed Solution
+
+A clear description of what you'd like to happen.
+
+## Alternatives Considered
+
+A description of any alternative solutions or features you've considered.
+
+## Use Case
+
+Describe your specific use case for this feature. How would you use it day-to-day?
+
+## Additional Context
+
+Add any other context, screenshots, or mockups about the feature request here.
+
+## Willingness to Contribute
+
+- [ ] I would be willing to submit a PR for this feature
+- [ ] I can help test this feature
+- [ ] I can help with documentation for this feature

prism_proxy-0.2.0/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,35 @@
+## Summary
+
+<!-- Brief description of what this PR does and why -->
+
+## Changes
+
+<!-- List of specific changes -->
+-
+-
+-
+
+## Related Issues
+
+<!-- Link to related issues: Fixes #123, Closes #456 -->
+
+## Test Plan
+
+- [ ] Unit tests added/updated
+- [ ] Integration tests (if applicable)
+- [ ] Security tests (if applicable)
+- [ ] All existing tests pass (`pytest tests/`)
+- [ ] Coverage meets 90% threshold
+
+## Checklist
+
+- [ ] Code follows project conventions (CONVENTIONS.md)
+- [ ] No hardcoded secrets or API keys
+- [ ] All functions have type hints and docstrings
+- [ ] `ruff check src/ tests/` passes with no errors
+- [ ] `bandit -r src/prism/ -c pyproject.toml` passes
+- [ ] Documentation updated (if applicable)
+
+## Screenshots / Output
+
+<!-- If applicable, add screenshots or command output -->

prism_proxy-0.2.0/.github/SECURITY.md

@@ -0,0 +1,59 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+|---------|--------------------|
+| 0.1.x   | :white_check_mark: |
+
+## Reporting a Vulnerability
+
+We take security seriously. If you discover a security vulnerability in Prism, please report it responsibly.
+
+### How to Report
+
+1. **Do NOT open a public GitHub issue** for security vulnerabilities.
+2. Email your report to the maintainers with the subject line: `[SECURITY] Prism vulnerability report`.
+3. Include:
+   - Description of the vulnerability
+   - Steps to reproduce
+   - Potential impact
+   - Suggested fix (if any)
+
+### What to Expect
+
+- **Acknowledgment**: Within 48 hours of your report.
+- **Assessment**: We will assess the severity within 1 week.
+- **Fix**: Critical vulnerabilities will be patched within 2 weeks. Non-critical issues will be addressed in the next release cycle.
+- **Disclosure**: We will coordinate disclosure with you. We request a 90-day disclosure window for critical issues.
+
+### Scope
+
+The following are in scope for security reports:
+
+- **API key exposure**: Any path where API keys could be logged, displayed, or leaked
+- **Path traversal**: File operations that escape the project root
+- **Command injection**: Unsanitized input reaching shell execution
+- **Credential storage**: Weaknesses in keyring/encrypted storage
+- **Dependency vulnerabilities**: Known CVEs in direct dependencies
+
+### Out of Scope
+
+- Issues in third-party AI provider APIs
+- Denial of service via resource exhaustion (CLI is single-user)
+- Social engineering attacks
+
+### Security Design
+
+Prism implements multiple security layers:
+
+- **Path traversal prevention**: All file paths are resolved and validated against the project root
+- **Secret filtering**: API keys are scrubbed from logs, error messages, and subprocess environments
+- **Command sandboxing**: Terminal commands run with timeouts, output limits, and filtered environment variables
+- **Sensitive file blocking**: Patterns like `.env`, `.ssh/`, and credential files are excluded from tool operations
+- **Audit logging**: Every tool execution is logged to `~/.prism/audit.log`
+- **Credential storage**: API keys are stored in the OS keyring (macOS Keychain, Windows Credential Locker, Linux Secret Service) with encrypted fallback
+
+## Acknowledgments
+
+We appreciate security researchers who help keep Prism safe. Contributors will be acknowledged in release notes (unless they prefer to remain anonymous).

prism_proxy-0.2.0/.github/workflows/ci.yml

@@ -0,0 +1,63 @@
+name: CI
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+    branches: [main, master]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Install dependencies
+        run: pip install -e ".[dev]"
+      - name: Ruff lint
+        run: ruff check src/ tests/
+      - name: Ruff format check
+        run: ruff format --check src/ tests/
+
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Install dependencies
+        run: pip install -e ".[dev]"
+      - name: Bandit security scan
+        run: bandit -r src/prism/ -c pyproject.toml
+
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.11", "3.12"]
+
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+      - name: Install dependencies
+        run: pip install -e ".[dev]"
+      - name: Run tests with coverage
+        run: pytest tests/ --cov=src/prism --cov-report=xml --cov-report=term-missing --cov-fail-under=90
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v4
+        if: matrix.python-version == '3.12'
+        with:
+          file: coverage.xml
+          flags: unittests
+          fail_ci_if_error: false

prism_proxy-0.2.0/.github/workflows/release.yml

@@ -0,0 +1,30 @@
+name: Release
+
+on:
+  push:
+    tags: ["v*"]
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Install build tools
+        run: pip install build twine
+      - name: Build package
+        run: python -m build
+      - name: Validate package
+        run: twine check dist/*
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          generate_release_notes: true
+          files: dist/*

prism_proxy-0.2.0/.gitignore

@@ -0,0 +1,60 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+*.egg-info/
+*.egg
+dist/
+build/
+.eggs/
+
+# Virtual environments
+.venv/
+venv/
+ENV/
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+.DS_Store
+
+# Testing
+.pytest_cache/
+.coverage
+coverage.xml
+htmlcov/
+.mypy_cache/
+.ruff_cache/
+
+# Environment and secrets
+.env
+.env.*
+!.env.example
+*.pem
+*.key
+*.p12
+*.pfx
+credentials.json
+service-account*.json
+
+# Prism data (user-specific)
+.prism/
+.prism.db
+audit.log
+secrets/
+
+# Build artifacts
+*.prof
+*.bin
+bandit-report.json
+
+# Claude Code
+.claude/
+
+# OS
+Thumbs.db
+.DS_Store

prism_proxy-0.2.0/.prism.md

@@ -0,0 +1,13 @@
+# Project: Multi-API Intelligent Router CLI
+
+## Stack
+<!-- Describe your tech stack here -->
+
+## Conventions
+<!-- Describe your coding conventions here -->
+
+## Architecture
+<!-- Describe your project structure here -->
+
+## Notes for AI
+<!-- Add any special instructions for Prism here -->