warderbox 0.3.0__tar.gz

warderbox-0.3.0/.gitignore

@@ -0,0 +1,21 @@
+__pycache__/
+*.py[cod]
+*$py.class
+*.egg-info/
+dist/
+build/
+*.egg
+.eggs/
+venv/
+.venv/
+env/
+.env
+*.db
+*.sqlite3
+logs/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+*.whl
+*.tar.gz
+.DS_Store

warderbox-0.3.0/CHANGELOG.md

@@ -0,0 +1,75 @@
+# Changelog
+
+All notable changes to WarderBox (formerly OpShield) are documented here.
+
+## [0.3.0] - 2026-10-15
+
+### Changed — Rename
+- **Project renamed from OpShield to WarderBox** to avoid trademark conflict with GE Digital's OpShield
+- All imports: `from warderbox import WarderBox` (was `from opshield import OpShield`)
+- CLI command: `warderbox` (was `opshield`)
+- PyPI package: `pip install warderbox`
+
+## [0.2.0] - 2026-10-08
+
+### Added — Phase 7: Enterprise Safety
+- **Circuit Breaker** (`circuitbreaker.py`): CLOSED/OPEN/HALF_OPEN states, configurable failure threshold, reset timeout, success threshold for recovery, on_open/on_close callbacks
+- **Approval Workflows** (`approval.py`): Human-in-the-loop with configurable timeout, auto-deny, callback-based approve/deny, risk-based approval, escalation chains
+- **Agent Capabilities** (`capabilities.py`): Per-agent allowlist/denylist, argument constraints (args_deny/args_require), max cost per tool, max calls per hour, time-based schedules
+- **Compliance Reports** (`compliance.py`): Structured audit reports from SQLite logs, anomaly detection (high block/error rate, CRITICAL attempts), risk breakdown, JSON/HTML export
+
+### Added — Phase 8: Observability & Resilience
+- **Distributed Tracing** (`tracing.py`): OpenTelemetry-compatible spans with trace/span IDs, nested spans via context manager, JSON and OTLP export, trace grouping
+- **Chaos Engineering** (`chaos.py`): Fault injection (ERROR, LATENCY, TIMEOUT, CORRUPT_OUTPUT), probability control, conditional triggers, wildcard rules, max injection limits
+- **Cost Forecasting** (`forecast.py`): Burn rate analysis (per minute/hour), budget exhaustion prediction, trend detection (increasing/decreasing/stable), cost-by-tool breakdown
+- **Agent Scoring** (`scoring.py`): Safety/reliability/efficiency/risk dimensions (0-100), A-F grading, configurable weights, multi-agent pool ranking via PoolScorer
+
+### Added — Phase 9: Polish & Market Readiness
+- Full README rewrite covering all 32+ modules
+- Landing page (`site/index.html`) with feature showcase and market data
+- Comprehensive end-to-end demo (`examples/demo_full.py`)
+- This CHANGELOG
+
+### Changed
+- `shield.py`: Integrated circuit breaker, capabilities, chaos, and tracing into execution pipeline
+- `__init__.py`: Added exports for all new modules (ApprovalManager, CapabilityManager, CircuitBreaker, ChaosEngine, ComplianceReporter, CostForecaster, AgentScorer, PoolScorer, Tracer, FaultType, CircuitState)
+
+## [0.1.0] - 2026-10-08
+
+### Added — Phase 1: Core
+- `WarderBox` main class with tool decorator
+- Risk classification engine (LOW/MEDIUM/HIGH/CRITICAL)
+- Budget tracking with per-action cost
+- State snapshots and rollback
+- Test/simulation mode
+
+### Added — Phase 2: Infrastructure
+- Dict-based configuration system
+- SQLite-backed action logging
+- OpenAI Agents SDK integration
+- LangChain integration
+- CLI tool (stats, logs, export, validate, dashboard)
+- pip install support via pyproject.toml
+
+### Added — Phase 3: Rate Limiting & Events
+- Sliding-window rate limiter (global RPM/RPH, per-tool limits)
+- Webhook/event notification system (HTTP + callbacks)
+- Anthropic Claude SDK integration
+- AsyncOpShield with async_tool decorator
+
+### Added — Phase 4: Policy & Dashboard
+- Policy-as-code (JSON/YAML files)
+- Retry with exponential backoff and conditional retry
+- CrewAI integration
+- Web dashboard (dark theme, auto-refresh, stats cards)
+
+### Added — Phase 5: Multi-Agent & Metrics
+- AgentPool for multi-agent management with isolated budgets
+- Microsoft AutoGen integration
+- Prometheus-compatible metrics export (OpenMetrics text format)
+
+### Added — Phase 6: Privacy & Debug
+- DataMasker with 10 built-in PII/secret patterns
+- Custom masking patterns support
+- ActionReplayer for debugging/audit from SQLite logs
+- Dry-run and single-action replay

warderbox-0.3.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ali Çelik
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

warderbox-0.3.0/PKG-INFO

@@ -0,0 +1,482 @@
+Metadata-Version: 2.5
+Name: warderbox
+Version: 0.3.0
+Summary: AI agent safety platform: rollback, cost control, circuit breakers, tracing, compliance, and chaos testing.
+Project-URL: Homepage, https://alicelik-games.github.io/warderbox/
+Project-URL: Documentation, https://github.com/alicelik-games/warderbox#readme
+Project-URL: Issues, https://github.com/alicelik-games/warderbox/issues
+Project-URL: Changelog, https://github.com/alicelik-games/warderbox/blob/main/CHANGELOG.md
+Author-email: Ali Çelik <alicelik1980@gmail.com>
+License-Expression: MIT
+License-File: LICENSE
+Keywords: agent,ai,chaos-engineering,circuit-breaker,compliance,cost-control,guardrails,multi-agent,observability,rate-limiting,rollback,safety,testing,tracing
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Libraries
+Requires-Python: >=3.11
+Provides-Extra: all
+Requires-Dist: anthropic>=0.18; extra == 'all'
+Requires-Dist: crewai>=0.1; extra == 'all'
+Requires-Dist: langchain-core>=0.1; extra == 'all'
+Requires-Dist: openai>=1.0; extra == 'all'
+Requires-Dist: pyautogen>=0.2; extra == 'all'
+Requires-Dist: pyyaml>=6.0; extra == 'all'
+Provides-Extra: anthropic
+Requires-Dist: anthropic>=0.18; extra == 'anthropic'
+Provides-Extra: autogen
+Requires-Dist: pyautogen>=0.2; extra == 'autogen'
+Provides-Extra: crewai
+Requires-Dist: crewai>=0.1; extra == 'crewai'
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0; extra == 'dev'
+Requires-Dist: ruff>=0.1; extra == 'dev'
+Provides-Extra: langchain
+Requires-Dist: langchain-core>=0.1; extra == 'langchain'
+Provides-Extra: openai
+Requires-Dist: openai>=1.0; extra == 'openai'
+Provides-Extra: yaml
+Requires-Dist: pyyaml>=6.0; extra == 'yaml'
+Description-Content-Type: text/markdown
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/alicelik-games/warderbox/main/assets/logo.png" alt="WarderBox Logo" width="180"/>
+</p>
+
+<h1 align="center">WarderBox</h1>
+
+<p align="center">
+  <strong>The safety layer between AI agents and the real world.</strong>
+</p>
+
+<p align="center">
+  <a href="https://pypi.org/project/warderbox/"><img src="https://img.shields.io/pypi/v/warderbox?color=blue" alt="PyPI"/></a>
+  <a href="https://github.com/alicelik-games/warderbox/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-MIT-green" alt="License"/></a>
+  <a href="https://www.python.org/"><img src="https://img.shields.io/badge/python-3.11+-blue" alt="Python"/></a>
+  <a href="https://pypi.org/project/warderbox/"><img src="https://img.shields.io/pypi/dm/warderbox?color=orange" alt="Downloads"/></a>
+</p>
+
+WarderBox intercepts every tool call your AI agent makes and provides rollback, cost control, rate limiting, circuit breakers, approval workflows, distributed tracing, chaos testing, and compliance reporting — so agents can work autonomously without causing damage.
+
+**Zero mandatory dependencies. One `pip install`. Works with every major agent framework.**
+
+> **Market context:** With Guardrails AI acquired by Harvey (Sept 2026) and the AI agent safety market projected to grow from $610M to $6.85B at 41% CAGR, WarderBox fills the gap as a comprehensive, framework-agnostic agent operations platform.
+
+## Why WarderBox?
+
+| Problem | WarderBox Solution |
+|---------|---------------------|
+| Agent runs `DROP TABLE` | Auto-blocked by risk classification |
+| Agent overspends API budget | Budget limits + cost forecasting |
+| Want to test without side effects | Test mode simulates everything |
+| Agent made a mistake | One-call rollback via state snapshots |
+| Agent spams an API | Rate limiting (RPM/RPH per tool) |
+| Tool keeps failing | Circuit breaker auto-disables it |
+| Need human approval | Approval workflows with timeout/escalation |
+| Different agents, different rules | AgentPool with isolated budgets + capabilities |
+| Sensitive data in logs | Automatic PII/secret masking |
+| Need audit trail | SQLite logging + Prometheus + compliance reports |
+| Test agent resilience | Chaos engineering with fault injection |
+| Track every action | OpenTelemetry-compatible distributed tracing |
+| Evaluate agent quality | Safety/performance scoring (A-F grades) |
+
+## Install
+
+```bash
+pip install warderbox
+```
+
+With framework integrations:
+
+```bash
+pip install warderbox[openai]      # OpenAI Agents SDK
+pip install warderbox[anthropic]   # Anthropic Claude SDK
+pip install warderbox[langchain]   # LangChain
+pip install warderbox[crewai]      # CrewAI
+pip install warderbox[autogen]     # Microsoft AutoGen
+pip install warderbox[yaml]        # YAML policy files
+pip install warderbox[all]         # Everything
+```
+
+## Quick Start
+
+```python
+from warderbox import WarderBox
+
+shield = WarderBox(budget=5.00, auto_snapshot=True)
+
+@shield.tool(cost=0.03)
+def query_db(sql: str) -> str:
+    return db.execute(sql)
+
+# Normal execution
+result = query_db(sql="SELECT * FROM users")
+print(result.output)  # Works fine
+
+# Destructive SQL is auto-blocked
+result = query_db(sql="DROP TABLE users")
+print(result.blocked)       # True
+print(result.block_reason)  # "CRITICAL risk blocked: Destructive SQL detected"
+
+# Undo the last action
+shield.rollback()
+```
+
+## Core Features
+
+### Policy-as-Code
+
+Define rules in JSON or YAML files:
+
+```json
+{
+  "budget": 25.00,
+  "mode": "production",
+  "global_rpm": 120,
+  "tool_limits": {"send_email": {"rpm": 10, "rph": 100}},
+  "rules": [
+    {
+      "name": "no_prod_access",
+      "match": {"args_regex": "production|prod-db"},
+      "risk": "critical",
+      "reason": "Production database access blocked"
+    }
+  ],
+  "webhooks": [
+    {"url": "https://hooks.slack.com/...", "events": ["action_blocked"]}
+  ]
+}
+```
+
+```python
+from warderbox import load_policy
+shield = load_policy("policy.json")
+```
+
+### Multi-Agent Support
+
+```python
+from warderbox import AgentPool
+
+pool = AgentPool(default_budget=5.00)
+researcher = pool.register("researcher", budget=3.00)
+coder = pool.register("coder", budget=10.00)
+reviewer = pool.register("reviewer", budget=1.00, mode="test")
+
+pool.stats()        # Aggregated view across all agents
+pool.over_budget()  # ["researcher"] if over budget
+```
+
+### Rate Limiting
+
+```python
+from warderbox import WarderBox, ToolLimit
+
+shield = WarderBox(
+    budget=10.00,
+    global_rpm=60,                                    # 60 calls/min globally
+    tool_limits={"send_email": ToolLimit(rpm=5)},     # 5 emails/min
+)
+```
+
+### Retry with Backoff
+
+```python
+from warderbox import RetryPolicy
+
+policy = RetryPolicy(max_retries=3, backoff_base=1.0, jitter=0.5)
+
+@shield.tool(cost=0.05, retry=policy)
+def flaky_api(query: str) -> str:
+    return requests.get(f"https://api.example.com?q={query}").text
+```
+
+### Sensitive Data Masking
+
+```python
+from warderbox import DataMasker
+
+masker = DataMasker()
+shield.set_masker(masker)
+
+# Emails, API keys, credit cards, SSNs, JWTs are auto-masked in logs
+masker.add_pattern("project_id", r"PROJ-\d{6}", "PROJ-******")
+```
+
+## Enterprise Safety
+
+### Circuit Breaker
+
+Auto-disable tools that fail repeatedly (CLOSED -> OPEN -> HALF_OPEN):
+
+```python
+from warderbox import CircuitBreaker
+
+cb = CircuitBreaker(failure_threshold=5, reset_timeout=60.0)
+shield.set_circuit_breaker(cb)
+# After 5 consecutive failures, the tool is auto-disabled for 60s
+# Then one probe call is allowed (HALF_OPEN) to test recovery
+```
+
+### Human-in-the-Loop Approval
+
+```python
+from warderbox import ApprovalManager
+
+approver = ApprovalManager(default_timeout=30.0)
+approver.require_approval("send_email", timeout=60.0)
+approver.require_approval_for_risk("HIGH")
+shield.set_approval(approver)
+
+# From another thread or webhook handler:
+approver.approve(request_id, approver="admin@company.com")
+```
+
+### Agent Capabilities / Permissions
+
+Fine-grained tool access control per agent:
+
+```python
+from warderbox import CapabilityManager
+
+caps = CapabilityManager()
+caps.grant("researcher", allow=["search", "read_file"])
+caps.grant("intern_bot", deny=["delete_record", "send_email"])
+caps.add_constraint("coder", "run_sql", args_deny=["DROP", "TRUNCATE"])
+shield.set_capabilities(caps)
+```
+
+### Compliance & Audit Reports
+
+```python
+from warderbox import ComplianceReporter
+
+reporter = ComplianceReporter(db_path="audit.db")
+report = reporter.generate_report(start="2026-01-01", end="2026-12-31")
+print(report.summary)          # Text summary with anomaly detection
+reporter.export_json("audit.json")
+html = reporter.to_html()      # Full HTML report
+```
+
+## Observability
+
+### Distributed Tracing
+
+OpenTelemetry-compatible span system:
+
+```python
+from warderbox import Tracer
+
+tracer = Tracer(service_name="my-agent")
+shield.set_tracer(tracer)
+
+# Every tool call automatically generates spans
+# Nested spans for complex workflows:
+with tracer.span("data_pipeline") as parent:
+    with tracer.span("extract", parent=parent):
+        extract_data()
+    with tracer.span("transform", parent=parent):
+        transform_data()
+
+tracer.export_json("traces.json")  # JSON export
+tracer.export_otlp()               # OTLP-compatible dict
+```
+
+### Cost Forecasting
+
+```python
+from warderbox import CostForecaster
+
+forecaster = CostForecaster(shield)
+report = forecaster.forecast()
+print(report.burn_rate_per_hour)       # $/hour
+print(report.estimated_exhaustion)     # datetime
+print(report.estimated_actions_remaining)
+print(report.trend)                    # "increasing" / "stable" / "decreasing"
+```
+
+### Agent Scoring & Benchmarking
+
+```python
+from warderbox import AgentScorer, PoolScorer
+
+scorer = AgentScorer(shield, agent_name="my-bot")
+report = scorer.score()
+print(report.overall_score)    # 0-100
+print(report.grade)            # A/B/C/D/F
+print(report.safety_score)     # Safety dimension
+print(report.reliability_score)
+
+# Rank all agents in a pool
+pool_scorer = PoolScorer(pool)
+print(pool_scorer.summary())   # Ranked leaderboard
+```
+
+### Web Dashboard
+
+```bash
+warderbox --db audit.db dashboard --port 8080
+```
+
+Real-time web UI showing actions, blocks, budget, and rate limits.
+
+### Prometheus Metrics
+
+```python
+from warderbox.metrics import start_metrics_server
+start_metrics_server(shield, port=9090)
+# Scrape http://localhost:9090/metrics
+```
+
+Exports: `warderbox_actions_total`, `warderbox_actions_blocked_total`, `warderbox_budget_spent_dollars`, per-tool and per-agent labels.
+
+### Webhook Notifications
+
+```python
+shield.notifier.add_webhook(
+    url="https://hooks.slack.com/services/xxx",
+    events={"action_blocked", "budget_exceeded"},
+)
+
+shield.notifier.on("action_blocked", lambda event, data: print(f"Alert: {data}"))
+```
+
+## Resilience Testing
+
+### Chaos Engineering
+
+Test agent resilience with controlled fault injection:
+
+```python
+from warderbox import ChaosEngine, FaultType
+
+chaos = ChaosEngine()
+shield.set_chaos(chaos)
+
+# Random failures (20% of calls)
+chaos.add_fault("search_api", FaultType.ERROR, probability=0.2)
+
+# Latency injection
+chaos.add_fault("slow_api", FaultType.LATENCY, latency_ms=2000)
+
+# Conditional faults
+chaos.add_fault("db_query", FaultType.ERROR,
+                condition=lambda args: "prod" in str(args))
+
+# Wildcard — affect all tools
+chaos.add_fault("*", FaultType.LATENCY, latency_ms=500, probability=0.1)
+```
+
+### Action Replay
+
+```python
+from warderbox.replay import ActionReplayer
+
+replayer = ActionReplayer(db_path="audit.db", executors={"run_sql": my_fn})
+report = replayer.replay_all(shield)
+print(f"Match rate: {report.success_rate:.0%}")
+```
+
+### Async Support
+
+```python
+from warderbox import AsyncWarderBox
+
+shield = AsyncWarderBox(budget=5.00)
+
+@shield.async_tool(cost=0.05)
+async def async_query(sql: str) -> str:
+    return await db.execute(sql)
+```
+
+## Framework Integrations
+
+| Framework | Module | Pattern |
+|-----------|--------|---------|
+| OpenAI Agents SDK | `integrations.openai_agents` | Middleware |
+| Anthropic Claude | `integrations.anthropic_sdk` | Middleware |
+| LangChain | `integrations.langchain` | Tool wrapper |
+| CrewAI | `integrations.crewai` | Tool wrapper |
+| Microsoft AutoGen | `integrations.autogen` | Function wrapper |
+
+```python
+# OpenAI
+from warderbox.integrations.openai_agents import OpenAIShieldMiddleware
+middleware = OpenAIShieldMiddleware(shield=shield, executors={...})
+
+# Anthropic
+from warderbox.integrations.anthropic_sdk import AnthropicShieldMiddleware
+middleware = AnthropicShieldMiddleware(shield=shield, executors={...})
+
+# LangChain
+from warderbox.integrations.langchain import shield_langchain_tools
+
+# CrewAI
+from warderbox.integrations.crewai import shield_crewai_tools
+
+# AutoGen
+from warderbox.integrations.autogen import shield_autogen_functions
+```
+
+## CLI
+
+```bash
+warderbox stats                    # Action statistics
+warderbox logs                     # View action log
+warderbox logs --blocked           # Only blocked actions
+warderbox export audit.json        # Export to JSON
+warderbox validate policy.json     # Validate a policy file
+warderbox dashboard --port 8080    # Start web dashboard
+```
+
+## Risk Levels
+
+| Level | Behavior | Examples |
+|-------|----------|----------|
+| LOW | Execute normally | SELECT queries, file reads |
+| MEDIUM | Execute with logging | Outbound messages, moderate operations |
+| HIGH | Ask user for approval | Bulk operations (>100 items) |
+| CRITICAL | Auto-block | DROP TABLE, TRUNCATE, DELETE FROM |
+
+## Architecture
+
+```
+Agent -> WarderBox -> Tool
+         |-- Capability Check (permissions)
+         |-- Circuit Breaker (fail-fast)
+         |-- Risk Classification (rules engine)
+         |-- Approval Workflow (human-in-the-loop)
+         |-- Budget Check + Forecast
+         |-- Rate Limit Check
+         |-- Snapshot (for rollback)
+         |-- Chaos Injection (testing)
+         |-- Execute (or simulate in test mode)
+         |-- Retry (on failure, with backoff)
+         |-- Data Masking (for logs)
+         |-- Log to SQLite
+         |-- Emit webhook/callback events
+         |-- Record span (distributed tracing)
+         |-- Agent Scoring
+         |-- Prometheus metrics
+```
+
+## Stats
+
+- **32+ Python modules**, 107+ tests
+- **Zero mandatory dependencies**
+- **5 framework integrations**
+- Works with Python 3.11+
+
+## Author
+
+**Ali Celik** — [LinkedIn](https://linkedin.com/in/alicelik1980) · [Email](mailto:alicelik1980@gmail.com)
+
+## License
+
+MIT — see [LICENSE](LICENSE) for details.