stackone-defender 0.7.0__tar.gz → 0.7.2__tar.gz

stackone_defender-0.7.2/.release-please-manifest.json

@@ -0,0 +1 @@
+{".":"0.7.2"}

{stackone_defender-0.7.0 → stackone_defender-0.7.2}/CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## [0.7.2](https://github.com/StackOneHQ/stackone-defender/compare/stackone-defender-v0.7.1...stackone-defender-v0.7.2) (2026-06-30)
+
+
+### Features
+
+* add Tier3Verdict.usage for TS 0.7.2 parity ([2e18269](https://github.com/StackOneHQ/stackone-defender/commit/2e182695c20e9b087041e55f7466cca9b659521a))
+* Tier3Verdict.usage parity with @stackone/defender 0.7.2 ([1c9c0c8](https://github.com/StackOneHQ/stackone-defender/commit/1c9c0c8026fd8c4dda2f78c31a1f500c01045d43))
+
+## [0.7.1](https://github.com/StackOneHQ/stackone-defender/compare/stackone-defender-v0.7.0...stackone-defender-v0.7.1) (2026-06-16)
+
+
+### Features
+
+* add defend_tool_results_async for npm batch parity ([a05783c](https://github.com/StackOneHQ/stackone-defender/commit/a05783c5671548aa66dfead1f129584b249d8778))
+* Python parity with @stackone/defender 0.7.1 (Tier 3) ([c58a17c](https://github.com/StackOneHQ/stackone-defender/commit/c58a17c9ba1a902148cde9204666f7f1a916d09b))
+* Tier 3 provider interface and cascade orchestration (TS 0.7.1 parity) ([f2b4109](https://github.com/StackOneHQ/stackone-defender/commit/f2b41096db4ca65741b9d4ba62f3fad7591929ab))
+
+
+### Bug Fixes
+
+* address Copilot PR review on Tier 3 orchestration ([570f567](https://github.com/StackOneHQ/stackone-defender/commit/570f56753292700a15b73725a12db426316468c6))
+* tighten Tier3ClassifyResult type and batch doc wording ([2515772](https://github.com/StackOneHQ/stackone-defender/commit/2515772f894dd2cbdaa51e9d0b39e26f151d257f))
+
 ## [0.7.0](https://github.com/StackOneHQ/stackone-defender/compare/stackone-defender-v0.6.3...stackone-defender-v0.7.0) (2026-05-29)
 
 

{stackone_defender-0.7.0 → stackone_defender-0.7.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: stackone-defender
-Version: 0.7.0
+Version: 0.7.2
 Summary: Indirect prompt injection defense for AI agents using tool calls
 Project-URL: Homepage, https://github.com/StackOneHQ/stackone-defender
 Project-URL: Repository, https://github.com/StackOneHQ/stackone-defender
@@ -204,6 +204,8 @@ class DefenseResult:
 
 ### `defense.defend_tool_results(items)`
 
+Sync batch API. When `enable_tier3=True`, uses one `asyncio.run()` and defends items **concurrently** via `asyncio.gather` (same scheduling model as npm `defendToolResults`; blocking sync providers still run one at a time on the event-loop thread). From async code, prefer `defend_tool_results_async`.
+
 ```python
 results = defense.defend_tool_results([
     {"value": email_data, "tool_name": "gmail_get_message"},
@@ -215,6 +217,17 @@ for r in results:
         print("Blocked:", ", ".join(r.fields_sanitized))
 ```
 
+### `await defense.defend_tool_results_async(items)`
+
+Async batch API — runs `defend_tool_result_async` per item concurrently via `asyncio.gather`. Required when Tier 3 is enabled inside a running event loop (e.g. FastAPI).
+
+```python
+results = await defense.defend_tool_results_async([
+    {"value": email_data, "tool_name": "gmail_get_message"},
+    {"value": doc_data, "tool_name": "documents_get"},
+])
+```
+
 ### `defense.analyze(text)`
 
 Tier 1 only — useful for debugging pattern hits without full tool-result traversal.

{stackone_defender-0.7.0 → stackone_defender-0.7.2}/README.md

@@ -178,6 +178,8 @@ class DefenseResult:
 
 ### `defense.defend_tool_results(items)`
 
+Sync batch API. When `enable_tier3=True`, uses one `asyncio.run()` and defends items **concurrently** via `asyncio.gather` (same scheduling model as npm `defendToolResults`; blocking sync providers still run one at a time on the event-loop thread). From async code, prefer `defend_tool_results_async`.
+
 ```python
 results = defense.defend_tool_results([
     {"value": email_data, "tool_name": "gmail_get_message"},
@@ -189,6 +191,17 @@ for r in results:
         print("Blocked:", ", ".join(r.fields_sanitized))
 ```
 
+### `await defense.defend_tool_results_async(items)`
+
+Async batch API — runs `defend_tool_result_async` per item concurrently via `asyncio.gather`. Required when Tier 3 is enabled inside a running event loop (e.g. FastAPI).
+
+```python
+results = await defense.defend_tool_results_async([
+    {"value": email_data, "tool_name": "gmail_get_message"},
+    {"value": doc_data, "tool_name": "documents_get"},
+])
+```
+
 ### `defense.analyze(text)`
 
 Tier 1 only — useful for debugging pattern hits without full tool-result traversal.

{stackone_defender-0.7.0 → stackone_defender-0.7.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "stackone-defender"
-version = "0.7.0"
+version = "0.7.2"
 description = "Indirect prompt injection defense for AI agents using tool calls"
 readme = "README.md"
 requires-python = ">=3.11"

{stackone_defender-0.7.0 → stackone_defender-0.7.2}/src/stackone_defender/__init__.py

@@ -12,6 +12,7 @@ Usage:
 """
 
 from .classifiers.onnx_classifier import get_default_model_path
+from .classifiers.tier3_orchestrator import get_default_tier3_provider, set_default_tier3_provider
 from .core.prompt_defense import PromptDefense, create_prompt_defense
 from .sfe.preprocess import (
     DropDecision,
@@ -21,10 +22,20 @@ from .sfe.preprocess import (
     get_default_sfe_model_path,
     sfe_preprocess,
 )
-from .types import DefenseResult, MultiheadConfig, RiskLevel, Tier1Result
+from .types import (
+    DefenderMode,
+    DefenseResult,
+    MultiheadConfig,
+    RiskLevel,
+    Tier1Result,
+    Tier3Provider,
+    Tier3TokenUsage,
+    Tier3Verdict,
+)
 from .utils.boundary import contains_boundary_patterns, generate_boundary_instructions
 
 __all__ = [
+    "DefenderMode",
     "DefenseResult",
     "DropDecision",
     "MultiheadConfig",
@@ -33,11 +44,16 @@ __all__ = [
     "SfePredictor",
     "SfePreprocessResult",
     "Tier1Result",
+    "Tier3Provider",
+    "Tier3TokenUsage",
+    "Tier3Verdict",
     "contains_boundary_patterns",
     "create_prompt_defense",
     "generate_boundary_instructions",
     "get_default_model_path",
     "get_default_predictor",
     "get_default_sfe_model_path",
+    "get_default_tier3_provider",
+    "set_default_tier3_provider",
     "sfe_preprocess",
 ]

stackone_defender-0.7.2/src/stackone_defender/classifiers/tier3_orchestrator.py

@@ -0,0 +1,27 @@
+"""Tier 3 provider registry.
+
+The defender package ships no Tier 3 implementations — proprietary model
+endpoints (SageMaker, OpenAI, etc.) live in consumer code. Consumers call
+``set_default_tier3_provider(provider)`` once at app startup; ``PromptDefense``
+picks the registered provider up when callers opt in via ``enable_tier3=True``.
+
+Module-level singleton because the defender is often instantiated per-request
+and we don't want to pipe a provider object through that boundary on every call.
+"""
+
+from __future__ import annotations
+
+from ..types import Tier3Provider
+
+_default_provider: Tier3Provider | None = None
+
+
+def set_default_tier3_provider(provider: Tier3Provider | None) -> None:
+    """Register the process-wide default Tier 3 provider. Pass ``None`` to clear."""
+    global _default_provider
+    _default_provider = provider
+
+
+def get_default_tier3_provider() -> Tier3Provider | None:
+    """Return the registered default Tier 3 provider, or ``None`` if unset."""
+    return _default_provider