rasa-pro 3.13.11__py3-none-any.whl → 3.14.0__py3-none-any.whl

rasa/validator.py

@@ -4,16 +4,16 @@ import string
 from collections import defaultdict
 from typing import Any, Dict, List, Optional, Set, Text, Tuple
 
+import jinja2.exceptions
 import structlog
 from jinja2 import Template
-from pypred import Predicate
 from pypred.ast import CompareOperator, Literal, NegateOperator
 
 import rasa.core.training.story_conflict
 import rasa.shared.nlu.constants
-import rasa.shared.utils.cli
-import rasa.shared.utils.io
+from rasa.agents.validation import validate_agent_names_not_conflicting_with_flows
 from rasa.core.channels import UserMessage
+from rasa.core.config.configuration import Configuration
 from rasa.dialogue_understanding.stack.frames import PatternFlowStackFrame
 from rasa.engine.language import Language
 from rasa.exceptions import ValidationError
@@ -70,10 +70,11 @@ from rasa.shared.core.training_data.structures import StoryGraph
 from rasa.shared.data import create_regex_pattern_reader
 from rasa.shared.exceptions import RasaException
 from rasa.shared.importers.importer import TrainingDataImporter
-from rasa.shared.nlu.constants import COMMANDS
+from rasa.shared.nlu.constants import COMMANDS, INTENT
 from rasa.shared.nlu.training_data.message import Message
 from rasa.shared.nlu.training_data.training_data import TrainingData
 from rasa.telemetry import track_validation_error_log
+from rasa.utils.pypred import Predicate
 
 logger = logging.getLogger(__name__)
 
@@ -130,7 +131,7 @@ class Validator:
         """Compares list of intents in domain with intents in NLU training data."""
         everything_is_alright = True
 
-        nlu_data_intents = {e.data["intent"] for e in self.intents.intent_examples}
+        nlu_data_intents = {e.data[INTENT] for e in self.intents.intent_examples}
 
         for intent in self._non_default_intents():
             if intent not in nlu_data_intents:
@@ -172,7 +173,7 @@ class Validator:
         duplication_hash = defaultdict(set)
         for example in self.intents.intent_examples:
             text = example.get(rasa.shared.nlu.constants.TEXT)
-            duplication_hash[text].add(example.get("intent"))
+            duplication_hash[text].add(example.get(INTENT))
 
         for text, intents in duplication_hash.items():
             if len(duplication_hash[text]) > 1:
@@ -629,11 +630,14 @@ class Validator:
         flow_id: str,
     ) -> bool:
         """Validates that a collect step can have either an action or an utterance.
+
         Also logs an error if neither an action nor an utterance is defined.
 
         Args:
             collect: the name of the slot to collect
             all_good: boolean value indicating the validation status
+            domain_slots: dictionary of domain slots
+            flow_id: the ID of the flow being validated
 
         Returns:
             False, if validation failed, true, otherwise
@@ -682,9 +686,10 @@ class Validator:
                 has_action_defined=has_action_defined,
                 flow=flow_id,
                 event_info=(
-                    f"The collect step '{collect.collect}' has neither an utterance "
-                    f"nor an action defined, or an initial value defined in the domain."
-                    f"You need to define either an utterance or an action."
+                    f"The collect step '{collect.collect}' has neither a response "
+                    f"nor an action defined, nor an initial value defined in the "
+                    f"domain. You can fix this by adding a response named "
+                    f"'{collect.utter}' used in the collect step."
                 ),
             )
             all_good = False
@@ -1179,23 +1184,27 @@ class Validator:
                         )
 
                 if isinstance(step, CollectInformationFlowStep):
-                    predicates = [predicate.if_ for predicate in step.rejections]
-                    for predicate in predicates:
+                    dumped_predicates = [predicate.if_ for predicate in step.rejections]
+                    for dumped_predicate in dumped_predicates:
                         all_good = self._verify_namespaces(
-                            predicate, step.id, flow.id, all_good
+                            dumped_predicate, step.id, flow.id, all_good
                         )
 
-                        pred, all_good = self._construct_predicate(
-                            predicate, step.id, context, is_step=True, all_good=all_good
+                        predicate, all_good = self._construct_predicate(
+                            dumped_predicate,
+                            step.id,
+                            context,
+                            is_step=True,
+                            all_good=all_good,
                         )
-                        if pred and not pred.is_valid():
+                        if predicate and not predicate.is_valid():
                             structlogger.error(
                                 "validator.verify_predicates.invalid_rejection",
                                 step=step.id,
                                 rejection=predicate,
                                 flow=flow.id,
                                 event_info=(
-                                    f"Detected invalid rejection '{predicate}' "
+                                    f"Detected invalid rejection '{dumped_predicate}' "
                                     f"at `collect` step '{step.id}' "
                                     f"for flow id '{flow.id}'. "
                                     f"Please make sure that all conditions are valid."
@@ -1280,6 +1289,41 @@ class Validator:
 
         return all_good
 
+    def validate_agent_flow_conflicts(self, sub_agents_path: str) -> bool:
+        """Validates that agent names don't conflict with flow names.
+
+        Args:
+            sub_agents_path: Path to the sub-agents directory.
+
+        Returns:
+            True if validation passes, False otherwise.
+        """
+        if self.flows.is_empty():
+            return True
+
+        try:
+            configuration = Configuration.get_instance()
+            available_agents = configuration.available_agents
+            flow_names = {flow.id for flow in self.flows.underlying_flows}
+
+            structlogger.debug(
+                "validator.agent_flow_conflicts.debug",
+                event_info="Checking conflicts between agents and flows",
+            )
+
+            validate_agent_names_not_conflicting_with_flows(
+                available_agents.agents, flow_names
+            )
+            return True
+        except Exception as e:
+            structlogger.error(
+                "validator.agent_flow_conflicts",
+                sub_agents_path=sub_agents_path,
+                error=str(e),
+                event_info=f"Agent-flow name conflict validation failed: {e}",
+            )
+            return False
+
     def _get_response_translation_warnings(self) -> list:
         """Collect warnings for responses missing translations.
 
@@ -1932,6 +1976,95 @@ class Validator:
 
         return all_good
 
+    def verify_prompt_templates(self) -> bool:
+        """Verify that all prompt templates have valid Jinja2 syntax.
+
+        Returns:
+            True if all templates are valid, False otherwise.
+        """
+        all_good = True
+
+        # Check the components in the pipeline and policies for prompt templates
+        pipeline = self.config.get(CONFIG_PIPELINE_KEY, [])
+        for component in pipeline:
+            if isinstance(component, dict):
+                component_name = component.get("name", "")
+                prompt_template = component.get("prompt_template")
+                if prompt_template:
+                    all_good = (
+                        self._validate_template_file(
+                            prompt_template, component_name, "pipeline component"
+                        )
+                        and all_good
+                    )
+
+        # Check policies for prompt templates
+        policies = self.config.get("policies") or []
+        for policy in policies:
+            if isinstance(policy, dict):
+                policy_name = policy.get("name", "")
+                prompt_template = policy.get("prompt_template")
+                if prompt_template:
+                    all_good = (
+                        self._validate_template_file(
+                            prompt_template, policy_name, "policy"
+                        )
+                        and all_good
+                    )
+
+        return all_good
+
+    def _validate_template_file(
+        self, prompt_template: str, component_name: str, component_type: str
+    ) -> bool:
+        """Validate a single prompt template file.
+
+        Args:
+            prompt_template: The template file path to validate
+            component_name: Name of the component using the template
+            component_type: Type of component (e.g., "policy", "pipeline component")
+
+        Returns:
+            True if template is valid, False otherwise.
+        """
+        try:
+            # Use a simple default template, as we're assuming
+            # that the default templates are valid
+            default_template = "{{ content }}"
+            template_content = rasa.shared.utils.llm.get_prompt_template(
+                prompt_template,
+                default_template,
+                log_source_component=f"validator.{component_name}",
+                log_source_method="init",
+            )
+
+            # Validate Jinja2 syntax using the shared validation function
+            rasa.shared.utils.llm.validate_jinja2_template(template_content)
+            return True
+        except jinja2.exceptions.TemplateSyntaxError as e:
+            structlogger.error(
+                "validator.verify_prompt_templates.syntax_error",
+                component=component_name,
+                component_type=component_type,
+                event_info=(
+                    f"Invalid Jinja2 template syntax in file {prompt_template} "
+                    f"at line {e.lineno}: {e.message}"
+                ),
+                error=str(e),
+                template_line=e.lineno,
+                template_file=prompt_template,
+            )
+            return False
+        except Exception as e:
+            structlogger.error(
+                "validator.verify_prompt_templates.error",
+                component=component_name,
+                component_type=component_type,
+                event_info=f"Error validating prompt template: {e}",
+                error=str(e),
+            )
+            return False
+
     def validate_conditional_response_variation_predicates(self) -> bool:
         """Validate the conditional response variation predicates."""
         context = {SLOTS: {slot.name: None for slot in self.domain.slots}}

rasa/version.py

@@ -1,3 +1,3 @@
 # this file will automatically be changed,
 # do not add anything but the version number here!
-__version__ = "3.13.11"
+__version__ = "3.14.0"

rasa_pro-3.14.0.dist-info/METADATA

@@ -0,0 +1,212 @@
+Metadata-Version: 2.3
+Name: rasa-pro
+Version: 3.14.0
+Summary: State-of-the-art open-core Conversational AI framework for Enterprises that natively leverages generative AI for effortless assistant development.
+Keywords: nlp,machine-learning,machine-learning-library,bot,bots,botkit,rasa conversational-agents,conversational-ai,chatbot,chatbot-framework,bot-framework
+Author: Rasa Technologies GmbH
+Author-email: hi@rasa.com
+Maintainer: Tom Bocklisch
+Maintainer-email: tom@rasa.com
+Requires-Python: >=3.10.0,<3.14
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Libraries
+Provides-Extra: channels
+Provides-Extra: full
+Provides-Extra: gh-release-notes
+Provides-Extra: jieba
+Provides-Extra: metal
+Provides-Extra: nlu
+Provides-Extra: pii
+Provides-Extra: spacy
+Provides-Extra: transformers
+Requires-Dist: CacheControl (>=0.14.2,<0.15.0)
+Requires-Dist: PyJWT[crypto] (>=2.8.0,<3.0.0)
+Requires-Dist: SQLAlchemy (>=2.0.42,<2.1.0)
+Requires-Dist: a2a-sdk (>=0.3.4,<0.4.0)
+Requires-Dist: absl-py (>=2.3.1,<2.4)
+Requires-Dist: aio-pika (>=8.2.3,<9.4.4)
+Requires-Dist: aiogram (>=3.22.0,<3.23.0) ; extra == "full" or extra == "channels"
+Requires-Dist: aiohttp (>=3.10,<3.11)
+Requires-Dist: aioshutil (>=1.5,<1.6)
+Requires-Dist: apscheduler (>=3.11,<3.12)
+Requires-Dist: attrs (>=23.1,<25.0)
+Requires-Dist: audioop-lts (>=0.2.2,<0.3.0) ; python_version >= "3.13"
+Requires-Dist: aws-msk-iam-sasl-signer-python (>=1.0.2,<1.1.0)
+Requires-Dist: azure-identity (>=1.24.0,<1.25.0)
+Requires-Dist: azure-storage-blob (>=12.26.0,<12.27.0)
+Requires-Dist: boto3 (>=1.40.21,<1.41.0)
+Requires-Dist: certifi (>=2025.10.5,<2025.11.0)
+Requires-Dist: colorama (>=0.4.6,<0.5.0) ; sys_platform == "win32"
+Requires-Dist: colorclass (>=2.2,<2.3)
+Requires-Dist: coloredlogs (>=15,<16)
+Requires-Dist: colorhash (>=2.0,<2.1.0)
+Requires-Dist: confluent-kafka (>=2.11.0,<3.0.0)
+Requires-Dist: cryptography (>=45.0.6,<45.1.0)
+Requires-Dist: cvg-python-sdk (>=0.5.1,<0.6.0) ; extra == "full" or extra == "channels"
+Requires-Dist: dask (>=2024.8.0,<2024.9.0)
+Requires-Dist: demoji (>=1.1.0,<2.0.0)
+Requires-Dist: diskcache (>=5.6.3,<5.7.0)
+Requires-Dist: dnspython (==2.6.1)
+Requires-Dist: faiss-cpu (>=1.11.0,<1.12.0)
+Requires-Dist: fbmessenger (>=6.0.0,<6.1.0) ; extra == "full" or extra == "channels"
+Requires-Dist: github3.py (>=3.2.0,<3.3.0) ; extra == "gh-release-notes"
+Requires-Dist: gitpython (>=3.1.41,<3.2.0) ; extra == "full"
+Requires-Dist: gliner (>=0.2.20,<0.3.0) ; extra == "full" or extra == "pii"
+Requires-Dist: google-auth (>=2.40.3,<2.41.0)
+Requires-Dist: google-cloud-storage (>=2.14.0,<2.15.0)
+Requires-Dist: hvac (>=2.3.0,<2.4.0)
+Requires-Dist: importlib-metadata (>=8.5.0,<8.6.0)
+Requires-Dist: importlib-resources (>=6.5.2,<7.0.0)
+Requires-Dist: jieba (>=0.42.1,<0.43) ; extra == "jieba" or extra == "full" or extra == "nlu"
+Requires-Dist: jinja2 (>=3.1.6,<3.2.0)
+Requires-Dist: jsonpatch (>=1.33,<2.0)
+Requires-Dist: jsonpickle (>=3.3.0,<3.4)
+Requires-Dist: jsonschema (>=4.22)
+Requires-Dist: keras (>=3.11.0)
+Requires-Dist: langchain (>=0.3.27,<0.4.0)
+Requires-Dist: langchain-community (>=0.3.29,<0.4.0)
+Requires-Dist: langcodes (>=3.5.0,<4.0.0)
+Requires-Dist: litellm (>=1.69.0,<1.70.0)
+Requires-Dist: matplotlib (>=3.9.4,<3.10.0)
+Requires-Dist: mattermostwrapper (>=2.2,<2.3) ; extra == "full" or extra == "channels"
+Requires-Dist: mcp (>=1.12.0,<1.13.0)
+Requires-Dist: mitie (>=0.7.36,<0.8.0) ; extra == "full" or extra == "nlu"
+Requires-Dist: networkx (>=3.1,<3.2)
+Requires-Dist: numpy (>=2.1.3,<2.2.0)
+Requires-Dist: onnxruntime (==1.22.1) ; extra == "full" or extra == "pii"
+Requires-Dist: openai (>=1.68.2,<1.69.0)
+Requires-Dist: openpyxl (>=3.1.5,<4.0.0)
+Requires-Dist: opentelemetry-api (>=1.33.0,<1.34.0)
+Requires-Dist: opentelemetry-exporter-otlp (>=1.33.0,<1.34.0)
+Requires-Dist: opentelemetry-sdk (>=1.33.0,<1.34.0)
+Requires-Dist: packaging (>=23.2,<23.3)
+Requires-Dist: pep440-version-utils (>=1.2.0,<1.3.0)
+Requires-Dist: pluggy (>=1.2.0,<2.0.0)
+Requires-Dist: portalocker (>=2.7.0,<3.0.0)
+Requires-Dist: prompt-toolkit (>=3.0.28,<3.0.29)
+Requires-Dist: protobuf (>=5.29.5,<5.30.0)
+Requires-Dist: psutil (>=5.9.5,<6.0.0)
+Requires-Dist: psycopg2-binary (>=2.9.10,<2.10.0)
+Requires-Dist: pydot (>=1.4,<1.5)
+Requires-Dist: pykwalify (>=1.8,<1.9)
+Requires-Dist: pymilvus (>=2.6.1,<3.0.0)
+Requires-Dist: pymongo (>=4.10.1,<4.11.0)
+Requires-Dist: pypred (>=0.4.0,<0.5.0)
+Requires-Dist: python-dateutil (>=2.8.2,<2.9.0)
+Requires-Dist: python-dotenv (>=1.0.1,<2.0.0)
+Requires-Dist: python-engineio (>=4.12.2,<4.13.0)
+Requires-Dist: python-keycloak (>=5.8.1,<5.9.0)
+Requires-Dist: python-socketio (>=5.13,<6)
+Requires-Dist: pytz (>=2022.7.1,<2023.0)
+Requires-Dist: pyyaml (>=6.0.2,<6.1.0)
+Requires-Dist: qdrant-client (>=1.9.1,<1.10.0)
+Requires-Dist: questionary (>=2.1.1,<2.2.0)
+Requires-Dist: randomname (>=0.2.1,<0.3.0)
+Requires-Dist: rasa-sdk (==3.14.0)
+Requires-Dist: redis (>=4.6.0,<6.0)
+Requires-Dist: regex (>=2024.7.24,<2024.8.0)
+Requires-Dist: requests (>=2.32.5,<2.33.0)
+Requires-Dist: rich (>=14.1.0,<14.2.0)
+Requires-Dist: rocketchat_API (>=1.32.0,<1.33.0) ; extra == "full" or extra == "channels"
+Requires-Dist: ruamel.yaml (>=0.17.21,<0.17.22)
+Requires-Dist: safetensors (>=0.4.5,<0.5.0)
+Requires-Dist: sanic (>=22.12,<22.13)
+Requires-Dist: sanic-cors (>=2.2.0,<2.3.0)
+Requires-Dist: sanic-jwt (>=1.8.0,<2.0.0)
+Requires-Dist: sanic-openapi (>=21.12.0,<22.0.0)
+Requires-Dist: sanic-routing (>=22.8.0,<23.0.0)
+Requires-Dist: scikit-learn (>=1.6.1,<1.7.0)
+Requires-Dist: scipy (>=1.13.1,<1.14.0) ; python_version < "3.12"
+Requires-Dist: scipy (>=1.14.0,<1.15.0) ; python_version >= "3.12"
+Requires-Dist: sentencepiece (>=0.1.99,<0.2.0) ; (python_version < "3.12") and (extra == "transformers" or extra == "full" or extra == "full" or extra == "nlu")
+Requires-Dist: sentry-sdk (>=2.8.0,<3)
+Requires-Dist: setuptools (>=78.1.1,<78.2.0)
+Requires-Dist: sklearn-crfsuite (>=0.5.0,<0.6.0) ; extra == "full" or extra == "nlu"
+Requires-Dist: skops (>=0.13.0,<0.14.0) ; extra == "full" or extra == "nlu"
+Requires-Dist: slack-sdk (>=3.36.0,<3.37.0) ; extra == "full" or extra == "channels"
+Requires-Dist: spacy (>=3.5.4,<4.0.0) ; extra == "spacy" or extra == "full" or extra == "nlu"
+Requires-Dist: structlog (>=25.4.0,<25.5.0)
+Requires-Dist: structlog-sentry (>=2.0.3,<2.1.0)
+Requires-Dist: tarsafe (>=0.0.5,<0.0.6)
+Requires-Dist: tenacity (>=8.4.1,<8.5.0)
+Requires-Dist: tensorflow (>=2.19.0,<3.0.0) ; (sys_platform != "darwin" or platform_machine != "arm64" and python_version < "3.12") and (extra == "full" or extra == "nlu")
+Requires-Dist: tensorflow-hub (>=0.16.0,<0.17.0) ; (python_version < "3.12") and (extra == "full" or extra == "nlu")
+Requires-Dist: tensorflow-io-gcs-filesystem (==0.31) ; (sys_platform == "win32" and python_version < "3.12") and (extra == "full" or extra == "nlu")
+Requires-Dist: tensorflow-io-gcs-filesystem (==0.34) ; (sys_platform == "darwin" and platform_machine != "arm64" and python_version < "3.12") and (extra == "full" or extra == "nlu")
+Requires-Dist: tensorflow-io-gcs-filesystem (==0.34) ; (sys_platform == "linux" and python_version < "3.12") and (extra == "full" or extra == "nlu")
+Requires-Dist: tensorflow-metal (>=1.2.0,<2.0.0) ; (sys_platform == "darwin" and platform_machine == "arm64" and python_version < "3.12") and (extra == "full" or extra == "metal" or extra == "nlu")
+Requires-Dist: tensorflow-text (>=2.19.0,<3.0.0) ; (sys_platform != "win32" and platform_machine != "arm64" and platform_machine != "aarch64" and python_version < "3.12") and (extra == "full" or extra == "nlu")
+Requires-Dist: terminaltables (>=3.1.10,<3.2.0)
+Requires-Dist: tf-keras (>=2.15.0,<3.0.0) ; (python_version < "3.12") and (extra == "full" or extra == "nlu")
+Requires-Dist: tiktoken (>=0.9.0,<0.10.0)
+Requires-Dist: tqdm (>=4.66.2,<5.0.0)
+Requires-Dist: transformers (>=4.38.2,<4.39.0) ; extra == "transformers" or extra == "full" or extra == "nlu"
+Requires-Dist: twilio (>=9.7.2,<9.8.0) ; extra == "full" or extra == "channels"
+Requires-Dist: types-cachetools (>=6.2.0.20250827,<6.3.0.0)
+Requires-Dist: types-protobuf (==4.25.0.20240417)
+Requires-Dist: typing-extensions (>=4.7.1,<5.0.0)
+Requires-Dist: typing-utils (>=0.1.0,<0.2.0)
+Requires-Dist: ujson (>=5.8,<6.0)
+Requires-Dist: webexteamssdk (>=1.6.1,<1.7.0) ; extra == "full" or extra == "channels"
+Requires-Dist: websockets (>=10.4,<11.0)
+Requires-Dist: werkzeug (>=3.1.3,<4.0.0)
+Requires-Dist: wheel (>=0.40.0)
+Project-URL: Documentation, https://rasa.com/docs
+Project-URL: Homepage, https://rasa.com
+Project-URL: Repository, https://github.com/rasahq/rasa
+Description-Content-Type: text/markdown
+
+<h1 align="center">Rasa</h1>
+
+<div align="center">
+
+[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=RasaHQ_rasa&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=RasaHQ_rasa)
+[![Documentation Status](https://img.shields.io/badge/docs-stable-brightgreen.svg)](https://rasa.com/docs/docs/pro/intro)
+![Python version support](https://img.shields.io/pypi/pyversions/rasa-pro)
+
+</div>
+
+<hr />
+
+Rasa is a framework for building scalable, dynamic conversational AI assistants that integrate large language models (LLMs) to enable more contextually aware and agentic interactions. Whether you’re new to conversational AI or an experienced developer, Rasa offers enhanced flexibility, control, and performance for mission-critical applications.
+
+**Key Features:**
+
+- **Flows for Business Logic:** Easily define business logic through Flows, a simplified way to describe how your AI assistant should handle conversations. Flows help streamline the development process, focusing on key tasks and reducing the complexity involved in managing conversations.
+- **Automatic Conversation Repair:** Ensure seamless interactions by automatically handling interruptions or unexpected inputs. Developers have full control to customize these repairs based on specific use cases.
+- **Customizable and Open:** Fully customizable code that allows developers to modify Rasa to meet specific requirements, ensuring flexibility and adaptability to various conversational AI needs.
+- **Robustness and Control:** Maintain strict adherence to business logic, preventing unwanted behaviors like prompt injection and hallucinations, leading to more reliable responses and secure interactions.
+- **Built-in Security:** Safeguard sensitive data, control access, and ensure secure deployment, essential for production environments that demand high levels of security and compliance. Secrets are managed through Pulumi's built-in secrets management system and can be integrated with HashiCorp Vault for enterprise-grade secret management.
+
+A [free developer license](https://rasa.com/docs/pro/intro/#who-rasa-pro-is-for) is available so you can explore and get to know Rasa. It allows you to take your assistant live in production a limited capacity. A paid license is required for larger-scale production use, but all code is visible and can be customized as needed.
+
+To get started right now, you can
+
+`pip install rasa-pro`
+
+Check out our
+
+- [Rasa Quickstart](https://rasa.com/docs/learn/quickstart/pro),
+- [Conversational AI with Language Models (CALM) conceptual rundown](https://rasa.com/docs/learn/concepts/calm),
+- [Rasa tutorial](https://rasa.com/docs/pro/tutorial), and
+- [Changelog](https://rasa.com/docs/reference/changelogs/rasa-pro-changelog)
+
+for more. Also feel free to reach out to us on the [Rasa forum](https://forum.rasa.com/).
+
+## Secrets Management
+
+This project uses a multi-layered approach to secrets management:
+
+- **Pulumi Secrets**: Primary secrets management through Pulumi's built-in configuration system (`pulumi.Config()`)
+- **Kubernetes Secrets**: Application secrets are stored as Kubernetes secrets in the cluster
+- **Vault Integration**: Optional HashiCorp Vault support for enterprise-grade secret management
+- **AWS Secrets Manager**: Used selectively for specific services (e.g., database credentials in integration tests)
+
+For infrastructure deployment, secrets are managed through Pulumi configuration files and environment variables, providing secure and flexible secret management across different deployment environments.
+