8 Commits

Author SHA1 Message Date
Alberto Schiabel c4071feab4 fix(py): guard URL uploads and redact telemetry (#3823)
This PR:
- ports the TypeScript SDK's public-network guard to Python URL file
uploads
- rejects non-HTTP(S), private, loopback, link-local, reserved, and
mixed DNS targets before a request is made
- applies the guard to both `FileUploadable.from_url()` and Tool Router
session-file URL uploads
- redacts URL queries, Authorization credentials, and secret-like
key/value pairs before error telemetry leaves the process
- adds focused SSRF and redaction regressions alongside the existing
file-upload coverage

Validation:
- `uv run --frozen pytest tests/test_url_safety.py
tests/test_redaction.py tests/test_files.py -q`
- `uv run --frozen ruff check …`
- `uv run --frozen ruff format --check …`
2026-07-14 14:32:05 +04:00
Musthaq Ahamad e3f1f6c2a9 fix: send empty object for params in telemetry instead of full function call (#2824) 2026-03-04 10:10:05 -08:00
Musthaq Ahamad f97d191cc6 Add native tool execution support for tool router in python (#2266) 2025-12-12 22:17:10 +05:30
angrybayblade dcc1cb67aa fix: skip classmethods from the trace wrapper 2025-08-15 10:09:59 +05:30
angrybayblade 3b5585d126 fix: custom tool registry usage 2025-07-23 17:18:30 +05:30
angrybayblade 15d476df67 fix: send more event data for telemetry in python SDK 2025-06-18 15:29:15 +05:30
angrybayblade 26a1d56db2 feat: add telemetry on the python SDK 2025-06-17 16:55:19 +05:30
angrybayblade 860b1c444a chore: port python sdk to python/ 2025-06-17 12:58:00 +05:30