pyveil 0.2.2__tar.gz → 0.2.4__tar.gz

{pyveil-0.2.2 → pyveil-0.2.4}/AGENTS.md

@@ -19,6 +19,10 @@ Do not turn pyveil into a general DLP suite, gateway, Presidio clone, or prompt-
 - Run CLI demo: `python3 -m pyveil demo`
 - Run CLI locally: `PYVEIL_SECRET=dev-secret python3 -m pyveil redact <file>`
 - Run detector evaluation: `python3 evaluation/evaluate.py --check`
+- Run the OpenAI boundary without a key: `PYVEIL_SECRET=dev-secret OPENAI_MODEL=gpt-5.6-luna python3 -m pyveil.integrations.openai --dry-run`
+- Run the Anthropic boundary without a key: `PYVEIL_SECRET=dev-secret ANTHROPIC_MODEL=claude-haiku-4-5 python3 -m pyveil.integrations.anthropic --dry-run`
+- Run the Ollama boundary without a model call: `PYVEIL_SECRET=dev-secret python3 -m pyveil.integrations.ollama --dry-run`
+- Run offline provider SDK contracts: `uv run --extra openai --extra anthropic --extra test pytest tests/test_provider_contracts.py -m provider_contract --no-cov`
 
 ## Architecture
 
@@ -72,6 +76,9 @@ This repository includes files meant for coding agents and LLM readers:
 - [docs/evaluation.html](docs/evaluation.html)
 - [docs/guides/](docs/guides/)
 - [docs/integrations/mcp.md](docs/integrations/mcp.md)
+- [docs/integrations/openai.md](docs/integrations/openai.md)
+- [docs/integrations/anthropic.md](docs/integrations/anthropic.md)
+- [docs/integrations/ollama.md](docs/integrations/ollama.md)
 - [docs/integrations/logging.md](docs/integrations/logging.md)
 - [docs/integrations/tracing.md](docs/integrations/tracing.md)
 
@@ -88,6 +95,9 @@ Examples:
 - [examples/fastapi_middleware.py](examples/fastapi_middleware.py)
 - [examples/litellm_proxy_filter.py](examples/litellm_proxy_filter.py)
 - [examples/azure_openai.py](examples/azure_openai.py)
+- [examples/openai.py](examples/openai.py)
+- [examples/anthropic.py](examples/anthropic.py)
+- [examples/ollama.py](examples/ollama.py)
 
 ## Development
 
@@ -95,8 +105,15 @@ Examples:
 uv run --extra dev ruff check .
 uv run --extra dev mypy pyveil tests
 uv run --extra test pytest
+uv run --extra openai --extra anthropic --extra test \
+  pytest tests/test_provider_contracts.py -m provider_contract --no-cov
 ```
 
+The dependency-free core is tested on Python 3.8 through 3.14. The current
+official OpenAI and Anthropic SDKs require Python 3.9+, so their serialization
+contract matrix covers Python 3.9 through 3.14. Their keyless dry-runs remain
+usable on Python 3.8 because provider SDK imports happen only for live calls.
+
 Full local release check:
 
 ```bash
@@ -104,6 +121,12 @@ for v in 3.8 3.9 3.10 3.11 3.12 3.13 3.14; do
   UV_PROJECT_ENVIRONMENT="/tmp/pyveil-venv-$v" uv run --python "$v" --extra test pytest -q --disable-warnings --no-cov
 done
 
+for v in 3.9 3.10 3.11 3.12 3.13 3.14; do
+  UV_PROJECT_ENVIRONMENT="/tmp/pyveil-provider-$v" uv run --python "$v" \
+    --extra openai --extra anthropic --extra test \
+    pytest tests/test_provider_contracts.py -m provider_contract -q --no-cov
+done
+
 uv run --extra dev python -m build
 uv run --extra dev python -m twine check dist/*
 ```

{pyveil-0.2.2 → pyveil-0.2.4}/CHANGELOG.md

@@ -1,5 +1,33 @@
 # Changelog
 
+## 0.2.4 - 2026-07-16
+
+### Added
+
+- Installable OpenAI Responses API and Anthropic Messages API redaction
+  templates with env, `.env`, YAML, and keyless dry-run support.
+- Offline contract tests that exercise the official provider SDKs through
+  local mock HTTP transports without credentials, network requests, or spend.
+- A Python 3.9 through 3.14 provider-contract CI matrix while preserving the
+  dependency-free Python 3.8 through 3.14 core matrix.
+
+## 0.2.3 - 2026-07-16
+
+Local Ollama boundary release.
+
+### Added
+
+- Installable Ollama chat integration with env, `.env`, and YAML configuration,
+  a dry-run boundary, response metrics, and configurable context/keep-alive limits.
+- A tested `qwen3.5:4b` local-model recipe sized for a 16GB Apple silicon Mac.
+
+### Changed
+
+- Added an optional `ollama` dependency group while keeping the core package
+  dependency-free.
+- Expanded the README, Cookbook, web Manual, and agent-facing navigation with
+  a complete local-model request path and measured memory/latency trade-offs.
+
 ## 0.2.2 - 2026-07-15
 
 Azure OpenAI adoption release.

{pyveil-0.2.2 → pyveil-0.2.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: pyveil
-Version: 0.2.2
+Version: 0.2.4
 Summary: Local PII and secret redaction for Python LLM apps, AI agents, tool calls, and MCP
 Author-email: Hyeon Sang Jeon <wingnut0310@gmail.com>
 Maintainer-email: Hyeon Sang Jeon <wingnut0310@gmail.com>
@@ -36,9 +36,21 @@ Requires-Python: >=3.8
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Provides-Extra: azure-openai
-Requires-Dist: openai>=1.66.0; extra == "azure-openai"
+Requires-Dist: openai<3.0.0,>=1.66.0; extra == "azure-openai"
 Requires-Dist: python-dotenv>=1.0.0; extra == "azure-openai"
 Requires-Dist: PyYAML>=6.0.0; extra == "azure-openai"
+Provides-Extra: openai
+Requires-Dist: openai<3.0.0,>=2.45.0; python_version >= "3.9" and extra == "openai"
+Requires-Dist: python-dotenv>=1.0.0; extra == "openai"
+Requires-Dist: PyYAML>=6.0.0; extra == "openai"
+Provides-Extra: anthropic
+Requires-Dist: anthropic<1.0.0,>=0.116.0; python_version >= "3.9" and extra == "anthropic"
+Requires-Dist: python-dotenv>=1.0.0; extra == "anthropic"
+Requires-Dist: PyYAML>=6.0.0; extra == "anthropic"
+Provides-Extra: ollama
+Requires-Dist: ollama<1.0.0,>=0.6.2; extra == "ollama"
+Requires-Dist: python-dotenv>=1.0.0; extra == "ollama"
+Requires-Dist: PyYAML>=6.0.0; extra == "ollama"
 Provides-Extra: dev
 Requires-Dist: build>=1.2.0; extra == "dev"
 Requires-Dist: pytest>=7.0.0; extra == "dev"
@@ -47,7 +59,9 @@ Requires-Dist: black>=23.0.0; extra == "dev"
 Requires-Dist: ruff>=0.1.0; extra == "dev"
 Requires-Dist: twine>=5.0.0; extra == "dev"
 Requires-Dist: mypy>=1.0.0; extra == "dev"
-Requires-Dist: openai>=1.66.0; extra == "dev"
+Requires-Dist: ollama<1.0.0,>=0.6.2; extra == "dev"
+Requires-Dist: openai<3.0.0,>=2.45.0; python_version >= "3.9" and extra == "dev"
+Requires-Dist: anthropic<1.0.0,>=0.116.0; python_version >= "3.9" and extra == "dev"
 Requires-Dist: python-dotenv>=1.0.0; extra == "dev"
 Requires-Dist: PyYAML>=6.0.0; extra == "dev"
 Requires-Dist: types-PyYAML>=6.0.0; extra == "dev"
@@ -140,6 +154,138 @@ response = call_llm(safe.data)  # Your provider SDK call
 The provider receives the same list and dictionary shape, with sensitive values
 replaced before serialization or transmission.
 
+## OpenAI And Claude: Keyless Contract-Tested Templates
+
+Install provider-specific templates without adding either SDK to pyveil's
+zero-dependency core:
+
+```bash
+pip install "pyveil[openai]"     # OpenAI Responses API
+pip install "pyveil[anthropic]"  # Claude Messages API
+```
+
+Both integrations redact locally at the final SDK boundary and return the exact
+provider input for inspection:
+
+```python
+from pyveil.integrations.openai import ask_openai, load_settings
+
+settings = load_settings()
+result = ask_openai(
+    "Write a follow-up for alice@example.com or 010-1234-5678.",
+    settings,
+)
+
+print(result.redacted_input)  # exact client.responses.create(...) input
+print(result.output_text)
+```
+
+```python
+from pyveil.integrations.anthropic import ask_anthropic, load_settings
+
+settings = load_settings()
+result = ask_anthropic(
+    "Write a follow-up for alice@example.com or 010-1234-5678.",
+    settings,
+)
+
+print(result.redacted_input)  # exact client.messages.create(...) content
+print(result.output_text)
+```
+
+No API key is needed to prove either boundary:
+
+```bash
+PYVEIL_SECRET=docs-demo-secret OPENAI_MODEL=gpt-5.6-luna \
+  python -m pyveil.integrations.openai --dry-run
+
+PYVEIL_SECRET=docs-demo-secret ANTHROPIC_MODEL=claude-haiku-4-5 \
+  python -m pyveil.integrations.anthropic --dry-run
+```
+
+```text
+sent-to-openai:    ... [EMAIL:17c25f8a4fe3] ... [PHONE:3f6dc5a3c9f3].
+sent-to-anthropic: ... [EMAIL:0b77abd1b26b] ... [PHONE:ec56e2456ba2].
+provider-response: skipped (--dry-run)
+```
+
+The repository also exercises the real official SDKs through local mock HTTP
+transports and asserts against the serialized `/v1/responses` and `/v1/messages`
+JSON bodies. These tests use no credentials, make no network requests, and
+cannot incur provider spend. A live paid API call has **not** been claimed.
+Historical provider models are not a free fallback and may be retired; keep the
+model ID configurable and use dry-run or mock contracts for cost-free checks.
+
+Current OpenAI and Anthropic SDKs require Python 3.9+. The pyveil core and both
+keyless dry-run paths remain compatible with Python 3.8 through 3.14. Use the
+checked-in [OpenAI guide](docs/integrations/openai.md) and
+[Anthropic / Claude guide](docs/integrations/anthropic.md) for configuration,
+offline verification, and boundary notes.
+
+## Ollama: Local End To End
+
+Run a local model behind the same redaction boundary. The optional integration
+uses Ollama's official Python client and defaults to `qwen3.5:4b`, a Q4_K_M
+4.7B model that fits comfortably on a 16GB Apple silicon Mac with a 4K context:
+
+```bash
+pip install "pyveil[ollama]"
+ollama pull qwen3.5:4b
+```
+
+```python
+from pyveil.integrations.ollama import ask_ollama, load_settings
+
+settings = load_settings()  # OLLAMA_* + PYVEIL_* environment variables
+result = ask_ollama(
+    "Write a follow-up for alice@example.com or 010-1234-5678.",
+    settings,
+)
+
+print(result.redacted_input)  # The exact prompt sent to Ollama
+print(result.output_text)     # The local model response
+```
+
+Prove the boundary without loading a model:
+
+```bash
+PYVEIL_SECRET=docs-demo-secret \
+  python -m pyveil.integrations.ollama --dry-run
+```
+
+```text
+mode: dry-run
+model: qwen3.5:4b
+host: http://127.0.0.1:11434
+sent-to-ollama: Write a one-sentence support follow-up for [EMAIL:71c6727a7fa2] or [PHONE:b4b889df07ce].
+findings: EMAIL=1, PHONE=1
+ollama-response: skipped (--dry-run)
+```
+
+For a live local call, set `PYVEIL_SECRET` and run the module. Configuration
+priority is process environment, `.env`, YAML, then defaults:
+
+```bash
+PYVEIL_SECRET=a-long-random-hmac-secret \
+  python -m pyveil.integrations.ollama
+
+python -m pyveil.integrations.ollama \
+  --config examples/ollama.example.yaml --env-file .env
+```
+
+The checked-in [`.env` template](examples/ollama.env.example) and
+[YAML template](examples/ollama.example.yaml) expose model, host, context,
+output length, temperature, timeout, and keep-alive. pyveil caps the default
+context at 4096 and uses `keep_alive=0`, so one-shot calls release model memory;
+set `OLLAMA_KEEP_ALIVE=5m` for faster repeated calls.
+
+Observed on this project's M1 Mac mini with 16GB memory and Ollama 0.31.2:
+`qwen3.5:4b` used about 3.2GB at a 4096-token context, a cold request took
+8.1 seconds, and a warm request took 1.3 seconds. These are local measurements,
+not portable performance guarantees. See the
+[Ollama integration guide](docs/integrations/ollama.md) for the full setup and
+memory trade-offs.
+
 ## Azure OpenAI: End To End
 
 Install the optional Azure example dependencies, then load configuration from
@@ -226,7 +372,7 @@ evaluator:
 python evaluation/evaluate.py --check
 ```
 
-For corpus v1, pyveil 0.2.2 matches all 36 expected findings across 39 cases
+For corpus v1, pyveil 0.2.4 matches all 36 expected findings across 39 cases
 (33 positive, 6 negative), with no corpus false positives, false negatives,
 labeled-value leaks, or non-empty `Finding.raw` values.
 
@@ -368,6 +514,8 @@ is parsed and traversed structurally.
 | --- | --- |
 | Any LLM provider | [Provider-neutral client wrapper](https://github.com/hyeonsangjeon/pyveil/blob/main/examples/llm_client_boundary.py) |
 | OpenAI Agents SDK | [Input guardrail example](https://github.com/hyeonsangjeon/pyveil/blob/main/examples/openai_agents_guardrail.py) |
+| OpenAI Responses API | [Installable integration](https://github.com/hyeonsangjeon/pyveil/blob/main/pyveil/integrations/openai.py) and [keyless contract guide](https://github.com/hyeonsangjeon/pyveil/blob/main/docs/integrations/openai.md) |
+| Anthropic / Claude | [Installable integration](https://github.com/hyeonsangjeon/pyveil/blob/main/pyveil/integrations/anthropic.py) and [keyless contract guide](https://github.com/hyeonsangjeon/pyveil/blob/main/docs/integrations/anthropic.md) |
 | Azure OpenAI | [Runnable env/YAML integration](https://github.com/hyeonsangjeon/pyveil/blob/main/pyveil/integrations/azure_openai.py) and [short example](https://github.com/hyeonsangjeon/pyveil/blob/main/examples/azure_openai.py) |
 | LiteLLM | [Proxy filter example](https://github.com/hyeonsangjeon/pyveil/blob/main/examples/litellm_proxy_filter.py) |
 | FastAPI | [Request middleware example](https://github.com/hyeonsangjeon/pyveil/blob/main/examples/fastapi_middleware.py) |

{pyveil-0.2.2 → pyveil-0.2.4}/README.md

@@ -81,6 +81,138 @@ response = call_llm(safe.data)  # Your provider SDK call
 The provider receives the same list and dictionary shape, with sensitive values
 replaced before serialization or transmission.
 
+## OpenAI And Claude: Keyless Contract-Tested Templates
+
+Install provider-specific templates without adding either SDK to pyveil's
+zero-dependency core:
+
+```bash
+pip install "pyveil[openai]"     # OpenAI Responses API
+pip install "pyveil[anthropic]"  # Claude Messages API
+```
+
+Both integrations redact locally at the final SDK boundary and return the exact
+provider input for inspection:
+
+```python
+from pyveil.integrations.openai import ask_openai, load_settings
+
+settings = load_settings()
+result = ask_openai(
+    "Write a follow-up for alice@example.com or 010-1234-5678.",
+    settings,
+)
+
+print(result.redacted_input)  # exact client.responses.create(...) input
+print(result.output_text)
+```
+
+```python
+from pyveil.integrations.anthropic import ask_anthropic, load_settings
+
+settings = load_settings()
+result = ask_anthropic(
+    "Write a follow-up for alice@example.com or 010-1234-5678.",
+    settings,
+)
+
+print(result.redacted_input)  # exact client.messages.create(...) content
+print(result.output_text)
+```
+
+No API key is needed to prove either boundary:
+
+```bash
+PYVEIL_SECRET=docs-demo-secret OPENAI_MODEL=gpt-5.6-luna \
+  python -m pyveil.integrations.openai --dry-run
+
+PYVEIL_SECRET=docs-demo-secret ANTHROPIC_MODEL=claude-haiku-4-5 \
+  python -m pyveil.integrations.anthropic --dry-run
+```
+
+```text
+sent-to-openai:    ... [EMAIL:17c25f8a4fe3] ... [PHONE:3f6dc5a3c9f3].
+sent-to-anthropic: ... [EMAIL:0b77abd1b26b] ... [PHONE:ec56e2456ba2].
+provider-response: skipped (--dry-run)
+```
+
+The repository also exercises the real official SDKs through local mock HTTP
+transports and asserts against the serialized `/v1/responses` and `/v1/messages`
+JSON bodies. These tests use no credentials, make no network requests, and
+cannot incur provider spend. A live paid API call has **not** been claimed.
+Historical provider models are not a free fallback and may be retired; keep the
+model ID configurable and use dry-run or mock contracts for cost-free checks.
+
+Current OpenAI and Anthropic SDKs require Python 3.9+. The pyveil core and both
+keyless dry-run paths remain compatible with Python 3.8 through 3.14. Use the
+checked-in [OpenAI guide](docs/integrations/openai.md) and
+[Anthropic / Claude guide](docs/integrations/anthropic.md) for configuration,
+offline verification, and boundary notes.
+
+## Ollama: Local End To End
+
+Run a local model behind the same redaction boundary. The optional integration
+uses Ollama's official Python client and defaults to `qwen3.5:4b`, a Q4_K_M
+4.7B model that fits comfortably on a 16GB Apple silicon Mac with a 4K context:
+
+```bash
+pip install "pyveil[ollama]"
+ollama pull qwen3.5:4b
+```
+
+```python
+from pyveil.integrations.ollama import ask_ollama, load_settings
+
+settings = load_settings()  # OLLAMA_* + PYVEIL_* environment variables
+result = ask_ollama(
+    "Write a follow-up for alice@example.com or 010-1234-5678.",
+    settings,
+)
+
+print(result.redacted_input)  # The exact prompt sent to Ollama
+print(result.output_text)     # The local model response
+```
+
+Prove the boundary without loading a model:
+
+```bash
+PYVEIL_SECRET=docs-demo-secret \
+  python -m pyveil.integrations.ollama --dry-run
+```
+
+```text
+mode: dry-run
+model: qwen3.5:4b
+host: http://127.0.0.1:11434
+sent-to-ollama: Write a one-sentence support follow-up for [EMAIL:71c6727a7fa2] or [PHONE:b4b889df07ce].
+findings: EMAIL=1, PHONE=1
+ollama-response: skipped (--dry-run)
+```
+
+For a live local call, set `PYVEIL_SECRET` and run the module. Configuration
+priority is process environment, `.env`, YAML, then defaults:
+
+```bash
+PYVEIL_SECRET=a-long-random-hmac-secret \
+  python -m pyveil.integrations.ollama
+
+python -m pyveil.integrations.ollama \
+  --config examples/ollama.example.yaml --env-file .env
+```
+
+The checked-in [`.env` template](examples/ollama.env.example) and
+[YAML template](examples/ollama.example.yaml) expose model, host, context,
+output length, temperature, timeout, and keep-alive. pyveil caps the default
+context at 4096 and uses `keep_alive=0`, so one-shot calls release model memory;
+set `OLLAMA_KEEP_ALIVE=5m` for faster repeated calls.
+
+Observed on this project's M1 Mac mini with 16GB memory and Ollama 0.31.2:
+`qwen3.5:4b` used about 3.2GB at a 4096-token context, a cold request took
+8.1 seconds, and a warm request took 1.3 seconds. These are local measurements,
+not portable performance guarantees. See the
+[Ollama integration guide](docs/integrations/ollama.md) for the full setup and
+memory trade-offs.
+
 ## Azure OpenAI: End To End
 
 Install the optional Azure example dependencies, then load configuration from
@@ -167,7 +299,7 @@ evaluator:
 python evaluation/evaluate.py --check
 ```
 
-For corpus v1, pyveil 0.2.2 matches all 36 expected findings across 39 cases
+For corpus v1, pyveil 0.2.4 matches all 36 expected findings across 39 cases
 (33 positive, 6 negative), with no corpus false positives, false negatives,
 labeled-value leaks, or non-empty `Finding.raw` values.
 
@@ -309,6 +441,8 @@ is parsed and traversed structurally.
 | --- | --- |
 | Any LLM provider | [Provider-neutral client wrapper](https://github.com/hyeonsangjeon/pyveil/blob/main/examples/llm_client_boundary.py) |
 | OpenAI Agents SDK | [Input guardrail example](https://github.com/hyeonsangjeon/pyveil/blob/main/examples/openai_agents_guardrail.py) |
+| OpenAI Responses API | [Installable integration](https://github.com/hyeonsangjeon/pyveil/blob/main/pyveil/integrations/openai.py) and [keyless contract guide](https://github.com/hyeonsangjeon/pyveil/blob/main/docs/integrations/openai.md) |
+| Anthropic / Claude | [Installable integration](https://github.com/hyeonsangjeon/pyveil/blob/main/pyveil/integrations/anthropic.py) and [keyless contract guide](https://github.com/hyeonsangjeon/pyveil/blob/main/docs/integrations/anthropic.md) |
 | Azure OpenAI | [Runnable env/YAML integration](https://github.com/hyeonsangjeon/pyveil/blob/main/pyveil/integrations/azure_openai.py) and [short example](https://github.com/hyeonsangjeon/pyveil/blob/main/examples/azure_openai.py) |
 | LiteLLM | [Proxy filter example](https://github.com/hyeonsangjeon/pyveil/blob/main/examples/litellm_proxy_filter.py) |
 | FastAPI | [Request middleware example](https://github.com/hyeonsangjeon/pyveil/blob/main/examples/fastapi_middleware.py) |

{pyveil-0.2.2 → pyveil-0.2.4}/docs/README.md

@@ -12,6 +12,9 @@ Start with:
 - [Threat model](threat-model.md)
 - [FAQ](faq.md)
 - [Cookbook](cookbook.md)
+- [OpenAI keyless and live integration](integrations/openai.md)
+- [Anthropic / Claude keyless and live integration](integrations/anthropic.md)
+- [Ollama local-model integration](integrations/ollama.md)
 - [Azure OpenAI env/YAML integration](../pyveil/integrations/azure_openai.py)
 - [Redaction reference](redaction-reference.md)
 - [Known limitations](known-limitations.md)