stackone-defender 0.7.1__tar.gz → 0.7.2__tar.gz

stackone_defender-0.7.2/.release-please-manifest.json

@@ -0,0 +1 @@
+{".":"0.7.2"}

{stackone_defender-0.7.1 → stackone_defender-0.7.2}/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [0.7.2](https://github.com/StackOneHQ/stackone-defender/compare/stackone-defender-v0.7.1...stackone-defender-v0.7.2) (2026-06-30)
+
+
+### Features
+
+* add Tier3Verdict.usage for TS 0.7.2 parity ([2e18269](https://github.com/StackOneHQ/stackone-defender/commit/2e182695c20e9b087041e55f7466cca9b659521a))
+* Tier3Verdict.usage parity with @stackone/defender 0.7.2 ([1c9c0c8](https://github.com/StackOneHQ/stackone-defender/commit/1c9c0c8026fd8c4dda2f78c31a1f500c01045d43))
+
 ## [0.7.1](https://github.com/StackOneHQ/stackone-defender/compare/stackone-defender-v0.7.0...stackone-defender-v0.7.1) (2026-06-16)
 
 

{stackone_defender-0.7.1 → stackone_defender-0.7.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: stackone-defender
-Version: 0.7.1
+Version: 0.7.2
 Summary: Indirect prompt injection defense for AI agents using tool calls
 Project-URL: Homepage, https://github.com/StackOneHQ/stackone-defender
 Project-URL: Repository, https://github.com/StackOneHQ/stackone-defender

{stackone_defender-0.7.1 → stackone_defender-0.7.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "stackone-defender"
-version = "0.7.1"
+version = "0.7.2"
 description = "Indirect prompt injection defense for AI agents using tool calls"
 readme = "README.md"
 requires-python = ">=3.11"

{stackone_defender-0.7.1 → stackone_defender-0.7.2}/src/stackone_defender/__init__.py

@@ -29,6 +29,7 @@ from .types import (
     RiskLevel,
     Tier1Result,
     Tier3Provider,
+    Tier3TokenUsage,
     Tier3Verdict,
 )
 from .utils.boundary import contains_boundary_patterns, generate_boundary_instructions
@@ -44,6 +45,7 @@ __all__ = [
     "SfePreprocessResult",
     "Tier1Result",
     "Tier3Provider",
+    "Tier3TokenUsage",
     "Tier3Verdict",
     "contains_boundary_patterns",
     "create_prompt_defense",

{stackone_defender-0.7.1 → stackone_defender-0.7.2}/src/stackone_defender/core/prompt_defense.py

@@ -30,6 +30,7 @@ from ..types import (
     Tier3Provider,
     Tier3Result,
     Tier3Skip,
+    Tier3TokenUsage,
     Tier3Verdict,
 )
 from .tool_result_sanitizer import ToolResultSanitizer, create_tool_result_sanitizer
@@ -292,6 +293,21 @@ class PromptDefense:
     def _resolve_tier3_provider(self) -> Tier3Provider | None:
         return self._tier3_custom_provider or get_default_tier3_provider()
 
+    @staticmethod
+    def _parse_tier3_usage(usage: Any) -> Tier3TokenUsage | None:
+        if usage is None or not isinstance(usage, dict):
+            return None
+        prompt_tokens = usage.get("prompt_tokens", usage.get("promptTokens"))
+        completion_tokens = usage.get("completion_tokens", usage.get("completionTokens"))
+        total_tokens = usage.get("total_tokens", usage.get("totalTokens"))
+        if not all(isinstance(value, int) for value in (prompt_tokens, completion_tokens, total_tokens)):
+            return None
+        return Tier3TokenUsage(
+            prompt_tokens=prompt_tokens,
+            completion_tokens=completion_tokens,
+            total_tokens=total_tokens,
+        )
+
     @staticmethod
     def _validate_tier3_verdict(verdict: Any) -> Tier3Verdict | Tier3Skip:
         if isinstance(verdict, Tier3Verdict):
@@ -317,6 +333,7 @@ class PromptDefense:
             score=verdict.get("score"),
             raw=verdict.get("raw"),
             latency_ms=verdict.get("latency_ms", verdict.get("latencyMs")),
+            usage=PromptDefense._parse_tier3_usage(verdict.get("usage")),
         )
 
     @staticmethod

{stackone_defender-0.7.1 → stackone_defender-0.7.2}/src/stackone_defender/types.py

@@ -65,6 +65,15 @@ class Tier1Result:
     latency_ms: float
 
 
+@dataclass
+class Tier3TokenUsage:
+    """Token usage reported by a Tier 3 provider (e.g. vLLM or OpenAI ``usage``)."""
+
+    prompt_tokens: int
+    completion_tokens: int
+    total_tokens: int
+
+
 @dataclass
 class Tier3Verdict:
     """Authoritative block/allow decision from a Tier 3 provider."""
@@ -73,6 +82,7 @@ class Tier3Verdict:
     score: float | None = None
     raw: Any = None
     latency_ms: float | None = None
+    usage: Tier3TokenUsage | None = None
 
 
 @dataclass

{stackone_defender-0.7.1 → stackone_defender-0.7.2}/tests/test_tier3.py

@@ -3,7 +3,7 @@
 from __future__ import annotations
 
 import asyncio
-from unittest.mock import MagicMock, patch
+from unittest.mock import AsyncMock, MagicMock, patch
 
 import pytest
 
@@ -12,7 +12,7 @@ from stackone_defender import (
     get_default_tier3_provider,
     set_default_tier3_provider,
 )
-from stackone_defender.types import Tier3Skip, Tier3Verdict
+from stackone_defender.types import Tier3Skip, Tier3TokenUsage, Tier3Verdict
 
 
 def _make_provider(decision: str) -> MagicMock:
@@ -378,3 +378,82 @@ class TestDefendToolResultsAsync:
         results = defense.defend_tool_results(items)
         assert len(results) == 1
         assert isinstance(results[0].tier3, Tier3Verdict)
+
+
+class TestTier3UsagePropagation:
+    def test_passes_provider_reported_usage_through_to_result_tier3(self):
+        provider = MagicMock()
+        provider.classify = AsyncMock(
+            return_value={
+                "decision": "allow",
+                "latencyMs": 42,
+                "usage": {
+                    "promptTokens": 311,
+                    "completionTokens": 17,
+                    "totalTokens": 328,
+                },
+            }
+        )
+        defense = create_prompt_defense(
+            enable_tier1=False,
+            enable_tier2=False,
+            enable_tier3=True,
+            defender_mode="tier3_only",
+            tier3={"provider": provider},
+        )
+
+        result = asyncio.run(defense.defend_tool_result_async({"body": "test"}, "test_tool"))
+
+        assert isinstance(result.tier3, Tier3Verdict)
+        assert result.tier3.usage == Tier3TokenUsage(
+            prompt_tokens=311,
+            completion_tokens=17,
+            total_tokens=328,
+        )
+        assert result.tier3.latency_ms == 42
+
+    def test_passes_snake_case_usage_through_public_api(self):
+        provider = MagicMock()
+        provider.classify = AsyncMock(
+            return_value={
+                "decision": "allow",
+                "usage": {
+                    "prompt_tokens": 10,
+                    "completion_tokens": 5,
+                    "total_tokens": 15,
+                },
+            }
+        )
+        defense = create_prompt_defense(
+            enable_tier1=False,
+            enable_tier2=False,
+            enable_tier3=True,
+            defender_mode="tier3_only",
+            tier3={"provider": provider},
+        )
+
+        result = asyncio.run(defense.defend_tool_result_async({"body": "test"}, "test_tool"))
+
+        assert isinstance(result.tier3, Tier3Verdict)
+        assert result.tier3.usage == Tier3TokenUsage(
+            prompt_tokens=10,
+            completion_tokens=5,
+            total_tokens=15,
+        )
+
+    def test_preserves_usage_when_provider_returns_tier3_verdict_instance(self):
+        usage = Tier3TokenUsage(prompt_tokens=1, completion_tokens=2, total_tokens=3)
+        provider = MagicMock()
+        provider.classify = AsyncMock(return_value=Tier3Verdict(decision="allow", usage=usage))
+        defense = create_prompt_defense(
+            enable_tier1=False,
+            enable_tier2=False,
+            enable_tier3=True,
+            defender_mode="tier3_only",
+            tier3={"provider": provider},
+        )
+
+        result = asyncio.run(defense.defend_tool_result_async({"body": "test"}, "test_tool"))
+
+        assert isinstance(result.tier3, Tier3Verdict)
+        assert result.tier3.usage == usage

{stackone_defender-0.7.1 → stackone_defender-0.7.2}/uv.lock

@@ -493,7 +493,7 @@ wheels = [
 
 [[package]]
 name = "stackone-defender"
-version = "0.7.0"
+version = "0.7.1"
 source = { editable = "." }
 
 [package.optional-dependencies]

stackone_defender-0.7.1/.release-please-manifest.json

@@ -1 +0,0 @@
-{".":"0.7.1"}