aeo 0.1.0__tar.gz

aeo-0.1.0/.gitignore

@@ -0,0 +1,8 @@
+.env
+__pycache__/
+*.pyc
+.venv/
+dist/
+build/
+*.egg-info/
+.uv/

aeo-0.1.0/PKG-INFO

@@ -0,0 +1,59 @@
+Metadata-Version: 2.5
+Name: aeo
+Version: 0.1.0
+Summary: Internal answer-engine-optimization CLI + SDK for Agent Berlin staff.
+Requires-Python: >=3.10
+Requires-Dist: click>=8.1
+Requires-Dist: requests>=2.31
+Provides-Extra: dev
+Requires-Dist: black>=24.0.0; extra == 'dev'
+Requires-Dist: isort>=5.13.0; extra == 'dev'
+Requires-Dist: pytest>=8.0.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# aeo
+
+Internal answer-engine-optimization CLI + SDK for Agent Berlin staff
+(`admin_users`, role `admin`). Sibling of `backend/sdk-python` — same transport
+posture and the same OTP bootstrap, scoped to internal AEO work.
+
+**Status: scaffold.** This release establishes the package on PyPI. The CLI has
+only `aeo --version`; the SDK surface is not implemented yet.
+
+## Auth
+
+`aeo` authenticates with a **project-scoped token**, minted by exchanging a
+one-time OTP from the aeo MCP server's `get_otp` tool:
+
+```bash
+aeo configure --otp <OTP> --domain <project_domain> --title "<what this session is for>"
+```
+
+This reuses the customer MCP's bootstrap wholesale — the OTP is an
+`mcp_sessions` row and the exchange endpoint is the existing
+`POST /cli/exchange-otp`. There is no aeo-specific session table, exchange
+endpoint, or token type.
+
+Two consequences follow, and both differ from how a platform-wide internal tool
+would behave:
+
+- **`aeo` is project-scoped.** `--domain` is required; the OTP is bound to that
+  project when redeemed. An exchange without a domain cannot succeed.
+- **SDK usage is billed to the project's owning org**, not to us — the minted
+  token carries the customer's org claim.
+
+Access is gated to `admin_users.role='admin'`. That bound is set by
+`/cli/exchange-otp`, which authorizes via `IsAuthorizedForOrg` (admin, or an FDM
+assigned to that specific org) — `marketing` would receive an OTP that then
+fails at exchange, so the MCP refuses the role up front. Widening it means
+changing an endpoint shared with the customer MCP; it is not a local decision.
+
+## Release
+
+Publishing is automated — see `.github/workflows/aeo-publish.yml`. Any push to
+`main` touching `backend/aeo/**` bumps the minor version, commits the bump with
+an `[aeo-release]` marker, builds with `uv build`, and publishes to PyPI via
+Trusted Publishers (OIDC — no API token stored anywhere).
+
+Do not edit `version` in `pyproject.toml` or `__version__` in
+`src/aeo/__init__.py` by hand; the workflow rewrites both.

aeo-0.1.0/README.md

@@ -0,0 +1,46 @@
+# aeo
+
+Internal answer-engine-optimization CLI + SDK for Agent Berlin staff
+(`admin_users`, role `admin`). Sibling of `backend/sdk-python` — same transport
+posture and the same OTP bootstrap, scoped to internal AEO work.
+
+**Status: scaffold.** This release establishes the package on PyPI. The CLI has
+only `aeo --version`; the SDK surface is not implemented yet.
+
+## Auth
+
+`aeo` authenticates with a **project-scoped token**, minted by exchanging a
+one-time OTP from the aeo MCP server's `get_otp` tool:
+
+```bash
+aeo configure --otp <OTP> --domain <project_domain> --title "<what this session is for>"
+```
+
+This reuses the customer MCP's bootstrap wholesale — the OTP is an
+`mcp_sessions` row and the exchange endpoint is the existing
+`POST /cli/exchange-otp`. There is no aeo-specific session table, exchange
+endpoint, or token type.
+
+Two consequences follow, and both differ from how a platform-wide internal tool
+would behave:
+
+- **`aeo` is project-scoped.** `--domain` is required; the OTP is bound to that
+  project when redeemed. An exchange without a domain cannot succeed.
+- **SDK usage is billed to the project's owning org**, not to us — the minted
+  token carries the customer's org claim.
+
+Access is gated to `admin_users.role='admin'`. That bound is set by
+`/cli/exchange-otp`, which authorizes via `IsAuthorizedForOrg` (admin, or an FDM
+assigned to that specific org) — `marketing` would receive an OTP that then
+fails at exchange, so the MCP refuses the role up front. Widening it means
+changing an endpoint shared with the customer MCP; it is not a local decision.
+
+## Release
+
+Publishing is automated — see `.github/workflows/aeo-publish.yml`. Any push to
+`main` touching `backend/aeo/**` bumps the minor version, commits the bump with
+an `[aeo-release]` marker, builds with `uv build`, and publishes to PyPI via
+Trusted Publishers (OIDC — no API token stored anywhere).
+
+Do not edit `version` in `pyproject.toml` or `__version__` in
+`src/aeo/__init__.py` by hand; the workflow rewrites both.

aeo-0.1.0/pyproject.toml

@@ -0,0 +1,39 @@
+[project]
+name = "aeo"
+# Bumped automatically by .github/workflows/aeo-publish.yml before each build —
+# do not edit by hand. Starts at 0.0.0 so the first published artifact is 0.1.0.
+version = "0.1.0"
+description = "Internal answer-engine-optimization CLI + SDK for Agent Berlin staff."
+readme = "README.md"
+requires-python = ">=3.10"
+dependencies = [
+    "click>=8.1",
+    "requests>=2.31",
+]
+
+[project.scripts]
+aeo = "aeo.cli:main"
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/aeo"]
+
+[project.optional-dependencies]
+dev = [
+    "black>=24.0.0",
+    "isort>=5.13.0",
+    "pytest>=8.0.0",
+]
+
+[tool.black]
+line-length = 100
+
+[tool.isort]
+profile = "black"
+line_length = 100
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]

aeo-0.1.0/src/aeo/__init__.py

@@ -0,0 +1,15 @@
+"""aeo — internal answer-engine-optimization CLI + SDK for Agent Berlin staff.
+
+Access is restricted to `admin_users` staff with role 'admin'. A session starts
+in the aeo MCP server (`get_otp`), which mints a one-time password redeemed by
+`aeo configure` for a project-scoped token.
+
+The CLI and SDK surfaces are not implemented yet — this release exists to
+establish the package.
+"""
+
+# Bumped automatically by .github/workflows/aeo-publish.yml alongside
+# pyproject.toml — keep the two in sync; do not edit by hand.
+__version__ = "0.1.0"
+
+__all__ = ["__version__"]

aeo-0.1.0/src/aeo/cli.py

@@ -0,0 +1,20 @@
+"""aeo CLI entry point.
+
+Deliberately minimal: `--version` only. Commands land here as the CLI is built
+out — `configure` first, which POSTs the MCP-minted OTP to /cli/exchange-otp
+along with a project domain and title, and saves the returned token.
+"""
+
+import click
+
+from . import __version__
+
+
+@click.group(context_settings={"help_option_names": ["-h", "--help"]})
+@click.version_option(__version__, "-V", "--version", prog_name="aeo")
+def main() -> None:
+    """Internal answer-engine-optimization tooling for Agent Berlin staff."""
+
+
+if __name__ == "__main__":
+    main()