proxilion 0.0.1__py3-none-any.whl

proxilion/__init__.py

@@ -0,0 +1,136 @@
+"""
+Proxilion: Application-layer security SDK for LLM tool call authorization.
+
+Proxilion provides user-context authorization for agentic AI systems,
+ensuring that LLM tool calls are validated against user identity and
+business rules before execution.
+
+Basic Usage:
+    >>> from proxilion import Proxilion, Policy, UserContext
+    >>>
+    >>> # Initialize SDK
+    >>> auth = Proxilion(
+    ...     policy_engine="simple",
+    ...     audit_log_path="./logs/audit.jsonl"
+    ... )
+    >>>
+    >>> # Define a policy
+    >>> @auth.policy("database_query")
+    ... class DatabaseQueryPolicy(Policy):
+    ...     def can_execute(self, context):
+    ...         return "analyst" in self.user.roles
+    >>>
+    >>> # Protect a tool
+    >>> @auth.authorize("execute", resource="database_query")
+    ... async def database_query_tool(query: str, user: UserContext = None):
+    ...     return await execute_query(query)
+    >>>
+    >>> # Use it
+    >>> user = UserContext(user_id="alice", roles=["analyst"])
+    >>> result = await database_query_tool("SELECT * FROM data", user=user)
+
+For more information, see the documentation at:
+https://proxilion.com
+
+Source code: https://github.com/clay-good/proxilion-sdk
+"""
+
+__version__ = "0.1.0"
+
+# Core types - always available
+# Main Proxilion class
+from proxilion.core import (
+    Proxilion,
+    get_current_agent,
+    get_current_user,
+)
+
+# Decorators
+from proxilion.decorators import (
+    AlwaysApproveStrategy,
+    AlwaysDenyStrategy,
+    ApprovalStrategy,
+    CallbackApprovalStrategy,
+    QueueApprovalStrategy,
+    authorize_tool_call,
+    circuit_protected,
+    rate_limited,
+    require_approval,
+)
+
+# Exceptions - always available
+from proxilion.exceptions import (
+    AgentTrustError,
+    AuthorizationError,
+    BehavioralDriftError,
+    CircuitOpenError,
+    ConfigurationError,
+    ContextIntegrityError,
+    EmergencyHaltError,
+    IDORViolationError,
+    IntentHijackError,
+    PolicyNotFoundError,
+    PolicyViolation,
+    ProxilionError,
+    RateLimitExceeded,
+    SchemaValidationError,
+)
+
+# Policy base class
+from proxilion.policies.base import Policy
+from proxilion.types import (
+    AgentContext,
+    AuditEvent,
+    AuthorizationResult,
+    ToolCallRequest,
+    UserContext,
+)
+
+# Convenient type aliases
+authorize = authorize_tool_call  # Alias for backwards compatibility
+
+__all__ = [
+    # Version
+    "__version__",
+    # Main class
+    "Proxilion",
+    # Policy
+    "Policy",
+    # Core types
+    "UserContext",
+    "AgentContext",
+    "ToolCallRequest",
+    "AuthorizationResult",
+    "AuditEvent",
+    # Exceptions
+    "ProxilionError",
+    "AuthorizationError",
+    "PolicyViolation",
+    "SchemaValidationError",
+    "RateLimitExceeded",
+    "CircuitOpenError",
+    "ConfigurationError",
+    "PolicyNotFoundError",
+    "IDORViolationError",
+    # ASI Top 10 exceptions
+    "ContextIntegrityError",
+    "IntentHijackError",
+    "AgentTrustError",
+    "BehavioralDriftError",
+    "EmergencyHaltError",
+    # Decorators
+    "authorize_tool_call",
+    "authorize",
+    "require_approval",
+    "rate_limited",
+    "circuit_protected",
+    # Approval strategies
+    "ApprovalStrategy",
+    "AlwaysApproveStrategy",
+    "AlwaysDenyStrategy",
+    "CallbackApprovalStrategy",
+    "QueueApprovalStrategy",
+    # Context helpers
+    "get_current_user",
+    "get_current_agent",
+]

proxilion/audit/__init__.py

@@ -0,0 +1,133 @@
+"""
+Audit logging module for Proxilion.
+
+This module provides tamper-evident audit logging with hash chains
+and Merkle trees for cryptographic integrity verification.
+
+Features:
+    - Hash-chained audit events for tamper detection
+    - Merkle tree batching for efficient verification
+    - Multiple export formats (JSON Lines, console, streams)
+    - Sensitive data redaction
+    - Log rotation support
+
+Quick Start:
+    >>> from proxilion.audit import (
+    ...     AuditLogger,
+    ...     LoggerConfig,
+    ...     ConsoleExporter,
+    ... )
+    >>>
+    >>> # Create a logger
+    >>> config = LoggerConfig.default("./audit/events.jsonl")
+    >>> logger = AuditLogger(config)
+    >>>
+    >>> # Log an authorization decision
+    >>> event = logger.log_authorization(
+    ...     user_id="user_123",
+    ...     user_roles=["analyst"],
+    ...     tool_name="database_query",
+    ...     tool_arguments={"query": "SELECT *"},
+    ...     allowed=True,
+    ...     reason="User has analyst role",
+    ... )
+    >>>
+    >>> # Verify log integrity
+    >>> result = logger.verify()
+    >>> print(result.valid)  # True if chain is intact
+"""
+
+from proxilion.audit.base_exporters import (
+    CallbackExporter,
+    ConsoleExporter,
+    Exporter,
+    FileExporter,
+    MultiExporter,
+    StreamExporter,
+    read_jsonl_events,
+    verify_jsonl_chain,
+)
+from proxilion.audit.events import (
+    AuditEventData,
+    AuditEventV2,
+    EventType,
+    RedactionConfig,
+    create_authorization_event,
+    redact_sensitive_data,
+    reset_sequence,
+)
+from proxilion.audit.hash_chain import (
+    GENESIS_HASH,
+    BatchedHashChain,
+    ChainVerificationResult,
+    HashChain,
+    MerkleBatch,
+    MerkleTree,
+)
+from proxilion.audit.logger import (
+    AuditLogger,
+    InMemoryAuditLogger,
+    LoggerConfig,
+    RotationPolicy,
+)
+
+# Explainability (CA SB 53 compliance)
+from proxilion.audit.explainability import (
+    DecisionExplainer,
+    DecisionFactor,
+    DecisionType,
+    ExplainableDecision,
+    ExplainabilityLogger,
+    Explanation,
+    ExplanationFormat,
+    Outcome,
+    create_authorization_decision,
+    create_budget_decision,
+    create_guard_decision,
+    create_rate_limit_decision,
+)
+
+__all__ = [
+    # Events
+    "AuditEventData",
+    "AuditEventV2",
+    "EventType",
+    "RedactionConfig",
+    "create_authorization_event",
+    "redact_sensitive_data",
+    "reset_sequence",
+    # Hash chain
+    "BatchedHashChain",
+    "ChainVerificationResult",
+    "GENESIS_HASH",
+    "HashChain",
+    "MerkleBatch",
+    "MerkleTree",
+    # Logger
+    "AuditLogger",
+    "InMemoryAuditLogger",
+    "LoggerConfig",
+    "RotationPolicy",
+    # Exporters
+    "CallbackExporter",
+    "ConsoleExporter",
+    "Exporter",
+    "FileExporter",
+    "MultiExporter",
+    "StreamExporter",
+    "read_jsonl_events",
+    "verify_jsonl_chain",
+    # Explainability (CA SB 53 compliance)
+    "DecisionExplainer",
+    "DecisionFactor",
+    "DecisionType",
+    "ExplainableDecision",
+    "ExplainabilityLogger",
+    "Explanation",
+    "ExplanationFormat",
+    "Outcome",
+    "create_authorization_decision",
+    "create_budget_decision",
+    "create_guard_decision",
+    "create_rate_limit_decision",
+]