prismal-ai 3.0.0__tar.gz

prismal_ai-3.0.0/.codegraph/.gitignore

@@ -0,0 +1,16 @@
+# CodeGraph data files
+# These are local to each machine and should not be committed
+
+# Database
+*.db
+*.db-wal
+*.db-shm
+
+# Cache
+cache/
+
+# Logs
+*.log
+
+# Hook markers
+.dirty

prismal_ai-3.0.0/.gitignore

@@ -0,0 +1,76 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# Virtual environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Testing
+.pytest_cache/
+.coverage
+htmlcov/
+coverage.xml
+*.cover
+.hypothesis/
+
+# Mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Ruff
+.ruff_cache/
+
+# IDE
+.idea/
+.vscode/
+*.swp
+*.swo
+
+# Data (runtime)
+data/db/
+data/logs/
+data/workspace/
+data/documents/
+data/backups/
+
+# Skills (AI-generated, not committed)
+prismal/skills/custom/
+prismal/skills/active/
+
+# Secrets
+.env
+env.example
+!env.example
+*.html
+*.pdf
+dist/
+packaging/
+*.pptx
+*.ipynb
+.pypirc.tmp

prismal_ai-3.0.0/.gitleaks.toml

@@ -0,0 +1,69 @@
+# .gitleaks.toml
+# Prismal — Gitleaks configuration
+# ============================================================
+
+title = "Prismal Gitleaks Config"
+
+[extend]
+# Hereda todas las reglas por defecto de gitleaks
+useDefault = true
+
+# ----------------------------------------------------------
+# Allowlist global — patrones que NO son secretos reales
+# ----------------------------------------------------------
+[allowlist]
+description = "Valores de ejemplo y placeholders"
+
+regexes = [
+  # Placeholders comunes en documentacion y ejemplos
+  '''(?i)(example|placeholder|your[-_]?key|changeme|dummy|fake|test[-_]?key|xxxx+|1234+)''',
+  # Variables de entorno sin valor asignado (solo nombre)
+  '''^\s*[A-Z_]+=\s*$''',
+  # URLs de documentacion
+  '''https?://(docs\.|www\.)?''',
+]
+
+paths = [
+  # Archivos de ejemplo/plantilla
+  '''\.env\.example$''',
+  '''\.env\.template$''',
+  '''\.env\.sample$''',
+  # Tests y fixtures
+  '''tests?/.*''',
+  '''fixtures?/.*''',
+  # Ejemplos / demos — contienen credenciales falsas intencionales
+  # usadas como entrada de los subgraphs de code-review y security scan.
+  '''examples?/.*''',
+  # Documentacion
+  '''docs?/.*''',
+  '''README.*''',
+  '''CHANGELOG.*''',
+  # Lock files (no contienen secrets reales)
+  '''uv\.lock$''',
+  '''package-lock\.json$''',
+]
+
+# ----------------------------------------------------------
+# Reglas adicionales especificas de CuidaSalud
+# ----------------------------------------------------------
+
+# Detecta posibles tokens de Mercantil Seguros
+[[rules]]
+description = "Mercantil Seguros API Token"
+id = "mercantil-token"
+regex = '''(?i)mercantil.{0,20}(token|key|secret).{0,5}[=:].{0,5}["']?[A-Za-z0-9+/]{20,}'''
+tags = ["api-key", "mercantil"]
+
+# Detecta posibles credenciales de AWS hardcodeadas
+[[rules]]
+description = "AWS Access Key hardcoded"
+id = "aws-access-key-cuida"
+regex = '''(?i)aws.{0,20}(access.?key|secret).{0,5}[=:].{0,5}["']?[A-Za-z0-9/+]{20,}'''
+tags = ["aws", "credentials"]
+[rules.allowlist]
+regexes = [
+  # Permite referencias a variables de entorno
+  '''\$\{?[A-Z_]+\}?''',
+  '''os\.environ''',
+  '''os\.getenv''',
+]

prismal_ai-3.0.0/.pre-commit-config.yaml

@@ -0,0 +1,316 @@
+# .pre-commit-config.yaml
+# CuidaSalud — cuida-integrations (FastAPI + uv)
+# ============================================================
+# Gate local: lint, tipos, complejidad, SAST, secrets, deps
+# Tests y Trivy quedan en CI (demasiado lentos para pre-commit)
+#
+# Instalacion:
+#   uv add --dev pre-commit
+#   uv run pre-commit install
+#   uv run pre-commit install --hook-type commit-msg
+#   uv run pre-commit run --all-files   # primera ejecucion completa
+# ============================================================
+
+default_language_version:
+  python: python3.13
+
+# e2e runs on `git push` (pre-push), mutmut only on demand (manual). Install
+# the extra hook type once:  uv run pre-commit install --install-hooks
+default_install_hook_types: [pre-commit, pre-push, commit-msg]
+
+# Excluye globalmente: venv, migraciones, tests de hooks pesados,
+# plantillas Helm (Jinja, no YAML puro), datos y artefactos runtime.
+exclude: |
+  (?x)^(
+    \.venv/.*|
+    migrations/.*|
+    \.git/.*|
+    helm/.*|
+    data/.*|
+    dist/.*|
+    docs/.*|
+    chat_history/.*|
+    assets/.*|
+    node_modules/.*
+  )$
+
+
+repos:
+
+  # ----------------------------------------------------------
+  # 1. SECRETS — Gitleaks
+  # Detecta API keys, tokens, passwords, JWTs hardcodeados
+  # ----------------------------------------------------------
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.21.2
+    hooks:
+      - id: gitleaks
+        name: "secrets: Gitleaks"
+
+  # ----------------------------------------------------------
+  # 2. CALIDAD GENERAL
+  # Hooks estandar: whitespace, EOF, YAML, TOML, JSON, merge
+  # ----------------------------------------------------------
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v5.0.0
+    hooks:
+      - id: trailing-whitespace
+        name: "fmt: trailing whitespace"
+      - id: end-of-file-fixer
+        name: "fmt: end of file"
+      - id: check-yaml
+        name: "lint: YAML valido"
+        args: [--unsafe]         # permite tags custom en docker-compose
+      - id: check-toml
+        name: "lint: TOML valido"
+      - id: check-json
+        name: "lint: JSON valido"
+      - id: check-merge-conflict
+        name: "git: sin conflict markers"
+      - id: check-added-large-files
+        name: "git: archivos grandes (max 500KB)"
+        args: [--maxkb=500]
+      - id: detect-private-key
+        name: "secrets: private keys"
+        # file_manager.py docstring lists the PEM header literally as a pattern
+        # the agent must refuse to write -- excluded as false positive.
+        # Exclude both old path (monolith) and new path (extracted package).
+        exclude: ^(prismal/agents/file_manager\.py|packages/prismal/prismal/agents/file_manager\.py)$
+      - id: debug-statements
+        name: "python: sin breakpoint() / pdb / set_trace()"
+      - id: check-ast
+        name: "python: AST valido (sintaxis)"
+
+  # ----------------------------------------------------------
+  # 3. DOCKERFILE — Hadolint
+  # Malas practicas, instrucciones inseguras, :latest tags
+  # ----------------------------------------------------------
+  - repo: https://github.com/hadolint/hadolint
+    rev: v2.13.1-beta
+    hooks:
+      - id: hadolint-docker
+        name: "docker: Hadolint"
+        args:
+          - --failure-threshold=warning
+          - --ignore=DL3008     # apt-get sin pin version (ok en CI images)
+          - --ignore=DL3013     # pip install sin pin version (gestionado por uv.lock en este repo)
+          - --ignore=SC2015     # "A && B || C" idiom intencional en Dockerfile
+
+  # ----------------------------------------------------------
+  # 4. LINTING + COMPLEJIDAD CICLOMATICA — Ruff
+  # C901: max-complexity = 10 (configurado en pyproject.toml)
+  # Tambien aplica formato (reemplaza black + isort)
+  # ----------------------------------------------------------
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    # Mantener alineado con la version de ruff en uv.lock (la que usa el job
+    # `lint` de .github/workflows/ci.yml via `uv run ruff`). Si actualizas el
+    # lock, actualiza este rev para evitar drift entre pre-commit y CI.
+    rev: v0.15.11
+    hooks:
+      - id: ruff
+        name: "lint: Ruff (lint + C901)"
+        args: [--fix, --exit-non-zero-on-fix]
+      - id: ruff-format
+        name: "fmt: Ruff format"
+
+  # ----------------------------------------------------------
+  # 5. TYPE CHECKING — ty (Astral)
+  # Tipos, flujo de datos, None no manejado, retornos incorrectos
+  # Solo corre si hay cambios en app/
+  # ----------------------------------------------------------
+  - repo: local
+    hooks:
+      - id: ty-check
+        name: "types: ty (informational)"
+        language: system
+        # ty (Astral) aun en alpha v0.0.x — los errores actuales son informativos
+        # y no bloquean el commit. El type-check autoritativo es `mypy --strict`
+        # (ver CLAUDE.md > "Before Every Commit"). Migrar a `ty` cuando estabilice.
+        # Se invoca por path al venv para no depender de `uv` ni del PATH del IDE.
+        entry: .venv/bin/ty
+        args: [check, --exit-zero, --output-format=concise, prismal/]
+        pass_filenames: false
+        types: [python]
+        files: ^prismal/
+
+  # ----------------------------------------------------------
+  # 6. COMPLEJIDAD COGNITIVA — flake8 + CCR001
+  # Complementa Ruff C901 con la metrica cognitiva de SonarSource
+  # Umbral: 12 (mas estricto que ciclomatica por su naturaleza)
+  # ----------------------------------------------------------
+  - repo: https://github.com/PyCQA/flake8
+    rev: 7.3.0
+    hooks:
+      - id: flake8
+        name: "complexity: cognitive CCR001 (baseline=100)"
+        additional_dependencies:
+          - flake8-cognitive-complexity==0.1.0
+        args:
+          - --select=CCR001
+          # Umbral alineado con el peor caso actual (_repl_async: 98).
+          # TODO: bajar progresivamente a 12 conforme se refactoren
+          #   supervisor_node, _repl_async, react_loop, skill_manager_node.
+          - --max-cognitive-complexity=100
+        files: ^prismal/
+        exclude: ^tests/
+
+  # ----------------------------------------------------------
+  # 7. COMPLEJIDAD — Radon (reporte, no bloquea)
+  # Muestra funciones con CC >= C (10+) como informacion
+  # verbose: true para ver output aunque no falle
+  # ----------------------------------------------------------
+  - repo: local
+    hooks:
+      - id: radon-cc
+        name: "complexity: Radon CC report (warning)"
+        language: system
+        # Path al venv en vez de `uv run ...` para no depender de `uv` en el PATH del IDE.
+        entry: .venv/bin/radon
+        args: [cc, prismal/, -s, -n, C]
+        pass_filenames: false
+        files: ^prismal/
+        verbose: true
+
+  # ----------------------------------------------------------
+  # 8. COMPLEJIDAD — Lizard (bloquea)
+  # CCN <= 10 y cognitive <= 12 por funcion
+  # Tambien valida parametros (<= 5) y longitud (<= 60 lineas)
+  # ----------------------------------------------------------
+  - repo: local
+    hooks:
+      - id: lizard
+        name: "complexity: Lizard CCN+args+length (baseline)"
+        language: system
+        # Umbrales alineados con codebase actual. Meta: CCN=10 / args=5 / length=200.
+        # TODO: bajar progresivamente al refactorizar _repl_async, supervisor_node,
+        #   react_loop, skill_manager_node, cua_node, codeact _validate_imports.
+        # Path al venv en vez de `uv run ...` para no depender de `uv` en el PATH del IDE.
+        entry: .venv/bin/lizard
+        args: [prismal/, --CCN, "40", --arguments, "15", --length, "350", -w]
+        pass_filenames: false
+        files: ^prismal/
+        exclude: ^tests/
+
+  # ----------------------------------------------------------
+  # 9. SAST — Bandit
+  # Vulnerabilidades Python: eval, subprocess, shell=True,
+  # pickle inseguro, hardcoded passwords, assert en produccion
+  # ----------------------------------------------------------
+  - repo: https://github.com/PyCQA/bandit
+    rev: 1.9.4
+    hooks:
+      - id: bandit
+        name: "sast: Bandit (medium+)"
+        additional_dependencies: ["bandit[toml]"]
+        args:
+          - -r
+          - prismal/
+          - -c
+          - pyproject.toml
+          - --severity-level=medium
+          - -q
+        pass_filenames: false
+        files: ^prismal/
+        exclude: ^tests/
+
+  # ----------------------------------------------------------
+  # 10. SAST — Semgrep
+  # Deshabilitado en pre-commit: opentelemetry-instrumentation (dep. de semgrep)
+  # usa pkg_resources que no está disponible en Python 3.13.
+  # Semgrep se ejecuta en CI (Bitbucket Pipelines) con todas las reglas:
+  #   p/python, p/secrets, p/owasp-top-ten, p/fastapi
+  # ----------------------------------------------------------
+  # - repo: https://github.com/semgrep/semgrep
+  #   rev: v1.116.0
+  #   hooks:
+  #     - id: semgrep
+  #       name: "sast: Semgrep (python + secrets)"
+  #       args: [--config=p/python, --config=p/secrets, --error, --quiet, --exclude=tests]
+  #       pass_filenames: false
+
+  # ----------------------------------------------------------
+  # 11. SEGURIDAD DEPENDENCIAS — pip-audit
+  # Solo corre si cambia pyproject.toml o uv.lock
+  # CVEs en paquetes del entorno gestionado por uv
+  # ----------------------------------------------------------
+  - repo: local
+    hooks:
+      - id: pip-audit
+        name: "sca: pip-audit (CVEs en deps)"
+        language: system
+        # Triage activo de CVEs en `prismal doctor security-check` (Phase 30).
+        # Solo CVEs SIN fix upstream aplicable, espejo exacto de `.trivyignore`
+        # (ver justificacion + trigger por entrada alli) y de ci.yml
+        # (PIP_AUDIT_IGNORES). Remediacion 2026-06:
+        # specs/dependency-security-remediation/.
+        # Path al venv en vez de `uv run ...` para no depender de `uv` en el PATH del IDE.
+        entry: .venv/bin/pip-audit
+        args:
+          # ecdsa (won't-fix, Minerva) — GHSA + alias CVE
+          - --ignore-vuln=GHSA-wj6h-64fc-37mp
+          - --ignore-vuln=CVE-2024-23342
+          # transformers 4.57.6 (solo rama lock py>=3.14) — mitigado torch>=2.6
+          - --ignore-vuln=CVE-2026-1839
+          # pip 26.0.1: CVE-2026-3219 sin fix publicado aun
+          - --ignore-vuln=CVE-2026-3219
+          # chromadb 1.5.8: CVE-2026-45829 sin first_patched_version
+          - --ignore-vuln=CVE-2026-45829
+          - --skip-editable
+        pass_filenames: false
+        files: ^(pyproject\.toml|uv\.lock)$
+
+  # ----------------------------------------------------------
+  # 12. CONVENTIONAL COMMITS
+  # Formato: feat:, fix:, chore:, docs:, refactor:, test:, ci:
+  # Requiere: uv run pre-commit install --hook-type commit-msg
+  # ----------------------------------------------------------
+#   - repo: https://github.com/compilerla/conventional-pre-commit
+#     rev: v3.4.0
+#     hooks:
+#       - id: conventional-pre-commit
+#         name: "git: conventional commit message"
+#         stages: [commit-msg]
+#         args:
+#           - feat
+#           - fix
+#           - chore
+#           - docs
+#           - style
+#           - refactor
+#           - test
+#           - ci
+#           - perf
+#           - revert
+
+  # ----------------------------------------------------------
+  # 13. E2E TESTS — runs on `git push` (pre-push stage)
+  # Deterministic end-to-end run of the compiled graph with a mocked LLM.
+  # Kept off the per-commit path (tests live in CI) but gates pushes.
+  # ----------------------------------------------------------
+  - repo: local
+    hooks:
+      - id: pytest-e2e
+        name: "tests: e2e (compiled graph, mocked LLM)"
+        language: system
+        entry: .venv/bin/pytest
+        args: [tests/e2e, -m, e2e, -q]
+        pass_filenames: false
+        stages: [pre-push]
+        types: [python]
+
+  # ----------------------------------------------------------
+  # 14. MUTATION TESTING — mutmut, scoped to prismal/security/
+  # Manual stage only (slow). Run on demand:
+  #   uv run pre-commit run mutmut --hook-stage manual
+  #   (or directly: uv run mutmut run && uv run mutmut results)
+  # ----------------------------------------------------------
+  - repo: local
+    hooks:
+      - id: mutmut
+        name: "mutation: mutmut (prismal/security)"
+        language: system
+        entry: .venv/bin/mutmut
+        args: [run]
+        pass_filenames: false
+        stages: [manual]
+        types: [python]

prismal_ai-3.0.0/.python-version

@@ -0,0 +1 @@
+3.13

prismal_ai-3.0.0/.trivyignore

@@ -0,0 +1,61 @@
+# .trivyignore — Prismal
+# ============================================================
+# CVEs/GHSAs aceptadas/mitigadas en dependencias SIN fix upstream
+# aplicable. Cada entrada exige: razon, surface, referencia al spec
+# y TRIGGER de re-evaluacion.
+#
+# Mismos IDs que `pip-audit --ignore-vuln` en `.github/workflows/ci.yml`
+# y en `.pre-commit-config.yaml` -> hook `pip-audit`. Mantener los tres
+# espejados (regla de oro).
+#
+# Triage activo: `prismal doctor security-check` (Phase 30 maintenance).
+# Remediacion 2026-06: specs/dependency-security-remediation/ (18 alertas
+# Dependabot; las resueltas por el lock se retiraron de esta lista).
+# ============================================================
+
+# --- ecdsa 0.19.2 -> CVE-2024-23342 (Minerva timing attack) --
+# Transitiva (python-jose -> ecdsa). El mantenedor de python-ecdsa
+# declaro publicamente que NO habra fix (GHSA-wj6h-64fc-37mp): la
+# mitigacion completa requiere criptografia en C. Recomienda migrar
+# a `cryptography`. Ya usamos python-jose[cryptography] pero python-jose
+# arrastra `ecdsa` como dep regular. Surface: prismal no realiza firmas
+# ECDSA P-256 sensibles en caliente -> riesgo residual aceptado.
+# Spec: specs/dependency-security-remediation/SPEC.md (SEC-A05, alerta #1).
+# TRIGGER de re-evaluacion: migracion python-jose -> PyJWT (deuda
+# registrada en el spec) o fix upstream en python-ecdsa -> quitar ignore.
+CVE-2024-23342
+
+# --- transformers 4.57.6 (marker py>=3.14) -> CVE-2026-1839 --
+# RCE en Trainer._load_rng_state() via torch.load() sin weights_only
+# (GHSA-69w3-r845-3855, fix transformers 5.0.0rc3). MITIGADO:
+# (1) pyproject fija torch>=2.6 (lock: 2.11.0) -> safe_globals() de
+#     PyTorch >=2.6 neutraliza el vector de deserializacion;
+# (2) prismal no usa la clase Trainer (solo inferencia/embeddings via
+#     sentence-transformers);
+# (3) en py<3.14 el lock ya resuelve transformers 5.5.4 (>=5.0.0rc3);
+#     solo la rama del lock para py>=3.14 conserva 4.57.6.
+# Spec: specs/dependency-security-remediation/SPEC.md (SEC-A10, alerta #2).
+# TRIGGER de re-evaluacion: release estable de transformers 5.x soportado
+# por sentence-transformers en py>=3.14 -> subir y quitar este ignore.
+CVE-2026-1839
+
+# --- pip 26.0.1 -> CVE-2026-3219 (sin fix upstream aun) ------
+# pip 26.0.1 es el ultimo release publicado y CVE-2026-3219 no tiene
+# first_patched_version. Dependencia del toolchain (pip-audit), no del
+# runtime de prismal.
+# TRIGGER de re-evaluacion: pip publica release con fix -> quitar ignore.
+CVE-2026-3219
+
+# --- chromadb 1.5.8 -> CVE-2026-45829 (sin fix upstream) -----
+# CRITICAL — pre-authentication code injection (GHSA-f4j7-r4q5-qw2c). El rango
+# vulnerable es >=1.0.0,<=1.5.9 con first_patched=None: NO existe version
+# parcheada (1.5.9 sigue afectada) y el stack langchain-chroma no admite
+# downgrade a <1.0.0. ChromaDB se usa aqui como vector store local/embebido
+# (SQLite + Chroma), no como servidor HTTP expuesto, lo que limita la
+# explotabilidad pre-auth (verificado: solo `Chroma(persist_directory=...)`
+# en rag/vector_store.py, sin HttpClient ni `chroma run`). Mismo ignore en
+# pip-audit (.pre-commit-config.yaml + ci.yml).
+# Spec: specs/dependency-security-remediation/SPEC.md (SEC-A02, alerta #15).
+# TRIGGER de re-evaluacion: chromadb publica first_patched_version ->
+# quitar ignore y subir. Triage: `prismal doctor security-check`.
+CVE-2026-45829