veil-proxy 0.3.1__tar.gz → 0.3.2__tar.gz

{veil_proxy-0.3.1 → veil_proxy-0.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: veil-proxy
-Version: 0.3.1
+Version: 0.3.2
 Summary: Privacy middleware for AI coding agents: the model sees consistent pseudonyms, your machine keeps the real values
 Keywords: privacy,pii,llm,proxy,pseudonymization,claude-code,coding-agent
 Requires-Python: >=3.11
@@ -47,10 +47,10 @@ Privacy middleware for AI coding agents. The model sees consistent pseudonyms
 and commands the agent runs locally get the real values back (shell- and SQL-safe).
 
 ```sh
-pip install "veil-proxy[postgres]"    # extras: postgres, mysql, mongo, redis, bedrock, ner, mssql, all
+pip install "veil-proxy[postgres]"    # extras: postgres, mysql, mongo, redis, bedrock, ner, mssql, snowflake, all
                                       # (installs the `veil` and `veil-hook` commands; import name `veil`)
 veil init ~/code/myapp                # seed from .env DB URLs, SQLite, fixtures; wire Claude Code
-veil service install                  # proxy as a LaunchAgent (macOS) / systemd user unit (Linux)
+veil service install                  # proxy as a LaunchAgent (macOS) / systemd user unit (Linux) / Startup item (Windows)
 veil status ~/code/myapp
 ```
 
@@ -63,7 +63,7 @@ https://github.com/lemonadesaltbagel/veil):
   pattern matching (1,000 labelled records).
 - **21/21** one-command bypass transforms are contained. Restored values are escaped for every
   language layer they pass through (shell, heredocs, `python -c`, `node -e`, SQL, `bash -c`...):
-  35/35 injection tests, and 55,000 fuzzed nested commands executed with 0 code executions.
+  35/35 injection tests, and 68,000 fuzzed nested commands executed with 0 code executions.
 - Prompt caching keeps working (74–89% cache hits); about 19 ms overhead per request at 40k seeded
   values, and 37 + 68 ms per 234 KB request at 1.2 million seeded values (1.1 GB).
 
@@ -71,6 +71,8 @@ One local proxy (default `127.0.0.1:8787`) serves every client, routed by path:
 Anthropic Messages (Claude Code, Agent SDK), Amazon Bedrock InvokeModel (binary eventstream),
 Google Vertex rawPredict, Microsoft Foundry (`/foundry`), Claude Platform on AWS (`/anthropic-aws`),
 OpenAI Chat Completions (Aider, Continue, OpenAI SDK) and OpenAI Responses (Codex CLI).
+DeepSeek Harness uses the [dsh-veil](https://github.com/lemonadesaltbagel/dsh-veil) plugin. Other
+agents' tools can get veil's restore rules with `veil proxy --tool-alias NAME=ROLE`.
 
 Seeds from Postgres, MySQL/MariaDB, SQLite, SQL Server (native sensitivity labels), MongoDB, Redis,
 Elasticsearch/OpenSearch and fixture files, plus personal fields declared in code (Prisma, Django,

{veil_proxy-0.3.1 → veil_proxy-0.3.2}/README.md

@@ -5,10 +5,10 @@ Privacy middleware for AI coding agents. The model sees consistent pseudonyms
 and commands the agent runs locally get the real values back (shell- and SQL-safe).
 
 ```sh
-pip install "veil-proxy[postgres]"    # extras: postgres, mysql, mongo, redis, bedrock, ner, mssql, all
+pip install "veil-proxy[postgres]"    # extras: postgres, mysql, mongo, redis, bedrock, ner, mssql, snowflake, all
                                       # (installs the `veil` and `veil-hook` commands; import name `veil`)
 veil init ~/code/myapp                # seed from .env DB URLs, SQLite, fixtures; wire Claude Code
-veil service install                  # proxy as a LaunchAgent (macOS) / systemd user unit (Linux)
+veil service install                  # proxy as a LaunchAgent (macOS) / systemd user unit (Linux) / Startup item (Windows)
 veil status ~/code/myapp
 ```
 
@@ -21,7 +21,7 @@ https://github.com/lemonadesaltbagel/veil):
   pattern matching (1,000 labelled records).
 - **21/21** one-command bypass transforms are contained. Restored values are escaped for every
   language layer they pass through (shell, heredocs, `python -c`, `node -e`, SQL, `bash -c`...):
-  35/35 injection tests, and 55,000 fuzzed nested commands executed with 0 code executions.
+  35/35 injection tests, and 68,000 fuzzed nested commands executed with 0 code executions.
 - Prompt caching keeps working (74–89% cache hits); about 19 ms overhead per request at 40k seeded
   values, and 37 + 68 ms per 234 KB request at 1.2 million seeded values (1.1 GB).
 
@@ -29,6 +29,8 @@ One local proxy (default `127.0.0.1:8787`) serves every client, routed by path:
 Anthropic Messages (Claude Code, Agent SDK), Amazon Bedrock InvokeModel (binary eventstream),
 Google Vertex rawPredict, Microsoft Foundry (`/foundry`), Claude Platform on AWS (`/anthropic-aws`),
 OpenAI Chat Completions (Aider, Continue, OpenAI SDK) and OpenAI Responses (Codex CLI).
+DeepSeek Harness uses the [dsh-veil](https://github.com/lemonadesaltbagel/dsh-veil) plugin. Other
+agents' tools can get veil's restore rules with `veil proxy --tool-alias NAME=ROLE`.
 
 Seeds from Postgres, MySQL/MariaDB, SQLite, SQL Server (native sensitivity labels), MongoDB, Redis,
 Elasticsearch/OpenSearch and fixture files, plus personal fields declared in code (Prisma, Django,

{veil_proxy-0.3.1 → veil_proxy-0.3.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "veil-proxy"
-version = "0.3.1"
+version = "0.3.2"
 description = "Privacy middleware for AI coding agents: the model sees consistent pseudonyms, your machine keeps the real values"
 readme = "README.md"
 license = "Apache-2.0"

{veil_proxy-0.3.1 → veil_proxy-0.3.2}/veil/cli.py

@@ -256,6 +256,8 @@ def _service(args) -> int:
 
 def main(argv: list[str] | None = None) -> int:
     argv = sys.argv[1:] if argv is None else argv
+    from .netenv import normalize_no_proxy
+    normalize_no_proxy()  # before any httpx client: one unparseable NO_PROXY entry makes them all raise
     if argv[:1] == ["audit"]:
         try:  # dev harness: only in a source checkout (prototype/veil_dev), never in the package
             import os

{veil_proxy-0.3.1 → veil_proxy-0.3.2}/veil/mcpdb.py

@@ -154,7 +154,7 @@ class SQLSource:
             self.conn = pymysql.connect(host=u.hostname or "127.0.0.1", port=u.port or 3306,
                                         user=unquote(u.username or "root"), password=unquote(u.password or ""),
                                         database=u.path.lstrip("/"), autocommit=True, charset="utf8mb4",
-                                        connect_timeout=10)
+                                        connect_timeout=10, read_timeout=60, write_timeout=60)
             with self.conn.cursor() as c:
                 c.execute("SET SESSION TRANSACTION READ ONLY")
                 for limit in ("SET SESSION MAX_EXECUTION_TIME = 30000",  # MySQL (ms)

veil_proxy-0.3.2/veil/netenv.py

@@ -0,0 +1,62 @@
+"""NO_PROXY entries that httpx can't parse.
+
+httpx turns each NO_PROXY entry into a URL pattern when a client is created, and one entry it
+can't parse makes every `httpx.Client()` raise, so veil would exit at startup. DeepSeek
+Harness, for one, adds `[::1]` (an IPv6 address in brackets, which httpx doesn't recognise as an
+address) for its child processes.
+"""
+
+from __future__ import annotations
+
+import ipaddress
+import os
+import re
+import sys
+from typing import MutableMapping
+
+KEYS = ("NO_PROXY", "no_proxy")
+_BRACKETED = re.compile(r"\[([0-9A-Fa-f:.%]+)\](?::\d+)?")
+
+
+def _pattern(host: str) -> str:
+    """The URL pattern httpx builds for one NO_PROXY entry (httpx._utils.get_environment_proxies)."""
+    if "://" in host:
+        return host
+    for cls, fmt in ((ipaddress.IPv4Address, "all://{}"), (ipaddress.IPv6Address, "all://[{}]")):
+        try:
+            cls(host.split("/")[0])
+            return fmt.format(host)
+        except ValueError:
+            pass
+    return f"all://{host}" if host.lower() == "localhost" else f"all://*{host}"
+
+
+def _parses(host: str) -> bool:
+    import httpx
+    try:
+        httpx.URL(_pattern(host))
+        return True
+    except Exception:
+        return False
+
+
+def normalize_no_proxy(environ: MutableMapping[str, str] = os.environ, log=sys.stderr) -> None:
+    """Rewrite `[::1]` and `[::1]:port` to `::1`, and drop entries httpx would still reject."""
+    for key in KEYS:
+        value = environ.get(key)
+        if not value:
+            continue
+        kept, dropped = [], []
+        for host in (h.strip() for h in value.split(",")):
+            if not host:
+                continue
+            m = _BRACKETED.fullmatch(host)
+            host = m.group(1) if m else host
+            if host == "*" or _parses(host):
+                if host not in kept:
+                    kept.append(host)
+            else:
+                dropped.append(host)
+        if dropped and log:
+            print(f"[veil] ignoring {key} entries that can't be parsed: {', '.join(dropped)}", file=log)
+        environ[key] = ",".join(kept)

{veil_proxy-0.3.1 → veil_proxy-0.3.2}/veil/proxy.py

@@ -414,6 +414,8 @@ def serve(veil: Veil, policy: Policy, port: int = 8787, upstream: str = "https:/
           capture: str | None = None, openai_upstream: str | None = None, bedrock_upstream: str | None = None,
           vertex_upstream: str | None = None, foundry_upstream: str | None = None,
           anthropic_aws_upstream: str | None = None):
+    from .netenv import normalize_no_proxy
+    normalize_no_proxy()
     client = httpx.Client(timeout=httpx.Timeout(600, connect=10))
     observer = capture_observer(capture) if capture else None
     server = LocalHTTPServer(("127.0.0.1", port), make_handler(veil, policy, upstream, client,

{veil_proxy-0.3.1 → veil_proxy-0.3.2}/veil/reseed.py

@@ -63,7 +63,8 @@ def fingerprint(source: str) -> str:
     if u.scheme in ("mysql", "mariadb"):
         import pymysql
         c = pymysql.connect(host=u.hostname or "127.0.0.1", port=u.port or 3306, user=unquote(u.username or "root"),
-                            password=unquote(u.password or ""), database=u.path.lstrip("/"), connect_timeout=5)
+                            password=unquote(u.password or ""), database=u.path.lstrip("/"), connect_timeout=5,
+                            read_timeout=5, write_timeout=5)  # connect_timeout doesn't cover the handshake
         try:
             with c.cursor() as cur:
                 try:

{veil_proxy-0.3.1 → veil_proxy-0.3.2}/veil/sources/sql.py

@@ -207,7 +207,8 @@ def seed_mysql(known: KnownValues, host: str, user: str, password: str, database
     import pymysql
 
     conn = pymysql.connect(host=host, port=port, user=user, password=password, database=database,
-                           cursorclass=pymysql.cursors.DictCursor, charset="utf8mb4", connect_timeout=10)
+                           cursorclass=pymysql.cursors.DictCursor, charset="utf8mb4", connect_timeout=10,
+                           read_timeout=300, write_timeout=300)
     with conn.cursor() as cur:
         cur.execute("SET SESSION TRANSACTION READ ONLY")
         cur.execute("""SELECT TABLE_NAME t, COLUMN_NAME c, DATA_TYPE d, COLUMN_KEY k, COLUMN_COMMENT m