agent-first-data 0.7.3__tar.gz → 0.8.0__tar.gz

{agent_first_data-0.7.3 → agent_first_data-0.8.0}/PKG-INFO

@@ -1,9 +1,9 @@
 Metadata-Version: 2.4
 Name: agent-first-data
-Version: 0.7.3
+Version: 0.8.0
 Summary: Agent-First Data (AFDATA) — suffix-driven output formatting and protocol templates for AI agents
 License-Expression: MIT
-Project-URL: Repository, https://github.com/cmnspore/agent-first-data
+Project-URL: Repository, https://github.com/agentfirstkit/agent-first-data
 Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 
@@ -74,7 +74,7 @@ Plain: args.input_path=/data/backup.tar.gz code=log event=startup config.max_fil
 
 ## API Reference
 
-Total: **13 public APIs and 2 types** + **AFDATA logging** (3 protocol builders + 4 output functions + 1 internal + 1 utility + 4 CLI helpers + `OutputFormat` + `RedactionPolicy`)
+Total: **15 public APIs and 2 types** + **AFDATA logging** (3 protocol builders + 2 redacted value helpers + 4 output functions + 1 internal + 1 utility + 4 CLI helpers + `OutputFormat` + `RedactionPolicy`)
 
 ### Protocol Builders (returns dict)
 
@@ -91,6 +91,15 @@ build_json_error(message: str, hint: str = None, trace: Any = None) -> dict
 build_json(code: str, fields: Any, trace: Any = None) -> dict
 ```
 
+### Redacted Values (returns Any)
+
+Use these before raw HTTP/MCP/SSE serializers that do not call `output_json`.
+
+```python
+redacted_value(value: Any) -> Any
+redacted_value_with(value: Any, redaction_policy: RedactionPolicy) -> Any
+```
+
 **Use case:** structured protocol payloads (frameworks automatically serialize)
 
 **Example:**
@@ -144,6 +153,7 @@ output_plain(value: Any) -> str  # Single-line logfmt, keys stripped, values for
 class RedactionPolicy(enum.Enum):
     RedactionTraceOnly = "RedactionTraceOnly"
     RedactionNone = "RedactionNone"
+    RedactionStrict = "RedactionStrict"
 ```
 
 **Example:**
@@ -513,7 +523,7 @@ All formats automatically redact `_secret` fields.
 
 ## Repository
 
-This package is part of the [agent-first-data](https://github.com/cmnspore/agent-first-data) repository, which also contains:
+This package is part of the [agent-first-data](https://github.com/agentfirstkit/agent-first-data) repository, which also contains:
 
 - **`spec/`** — Full AFDATA specification with suffix definitions, protocol format rules, and cross-language test fixtures
 - **`skills/`** — AI coding agent skill for working with AFDATA conventions
@@ -521,7 +531,7 @@ This package is part of the [agent-first-data](https://github.com/cmnspore/agent
 To run tests, clone the full repository (tests use shared cross-language fixtures from `spec/fixtures/`):
 
 ```bash
-git clone https://github.com/cmnspore/agent-first-data
+git clone https://github.com/agentfirstkit/agent-first-data
 cd agent-first-data/python
 python -m pytest
 ```

{agent_first_data-0.7.3 → agent_first_data-0.8.0}/README.md

@@ -65,7 +65,7 @@ Plain: args.input_path=/data/backup.tar.gz code=log event=startup config.max_fil
 
 ## API Reference
 
-Total: **13 public APIs and 2 types** + **AFDATA logging** (3 protocol builders + 4 output functions + 1 internal + 1 utility + 4 CLI helpers + `OutputFormat` + `RedactionPolicy`)
+Total: **15 public APIs and 2 types** + **AFDATA logging** (3 protocol builders + 2 redacted value helpers + 4 output functions + 1 internal + 1 utility + 4 CLI helpers + `OutputFormat` + `RedactionPolicy`)
 
 ### Protocol Builders (returns dict)
 
@@ -82,6 +82,15 @@ build_json_error(message: str, hint: str = None, trace: Any = None) -> dict
 build_json(code: str, fields: Any, trace: Any = None) -> dict
 ```
 
+### Redacted Values (returns Any)
+
+Use these before raw HTTP/MCP/SSE serializers that do not call `output_json`.
+
+```python
+redacted_value(value: Any) -> Any
+redacted_value_with(value: Any, redaction_policy: RedactionPolicy) -> Any
+```
+
 **Use case:** structured protocol payloads (frameworks automatically serialize)
 
 **Example:**
@@ -135,6 +144,7 @@ output_plain(value: Any) -> str  # Single-line logfmt, keys stripped, values for
 class RedactionPolicy(enum.Enum):
     RedactionTraceOnly = "RedactionTraceOnly"
     RedactionNone = "RedactionNone"
+    RedactionStrict = "RedactionStrict"
 ```
 
 **Example:**
@@ -504,7 +514,7 @@ All formats automatically redact `_secret` fields.
 
 ## Repository
 
-This package is part of the [agent-first-data](https://github.com/cmnspore/agent-first-data) repository, which also contains:
+This package is part of the [agent-first-data](https://github.com/agentfirstkit/agent-first-data) repository, which also contains:
 
 - **`spec/`** — Full AFDATA specification with suffix definitions, protocol format rules, and cross-language test fixtures
 - **`skills/`** — AI coding agent skill for working with AFDATA conventions
@@ -512,7 +522,7 @@ This package is part of the [agent-first-data](https://github.com/cmnspore/agent
 To run tests, clone the full repository (tests use shared cross-language fixtures from `spec/fixtures/`):
 
 ```bash
-git clone https://github.com/cmnspore/agent-first-data
+git clone https://github.com/agentfirstkit/agent-first-data
 cd agent-first-data/python
 python -m pytest
 ```

{agent_first_data-0.7.3 → agent_first_data-0.8.0}/agent_first_data/__init__.py

@@ -10,6 +10,8 @@ from agent_first_data.format import (
     output_yaml,
     output_plain,
     internal_redact_secrets,
+    redacted_value,
+    redacted_value_with,
     parse_size,
 )
 
@@ -41,6 +43,8 @@ __all__ = [
     "output_yaml",
     "output_plain",
     "internal_redact_secrets",
+    "redacted_value",
+    "redacted_value_with",
     "parse_size",
     "AfdataHandler",
     "AfdataJsonHandler",

{agent_first_data-0.7.3 → agent_first_data-0.8.0}/agent_first_data/format.py

@@ -1,6 +1,7 @@
 """AFDATA output formatting and protocol templates.
 
-9 public APIs and 1 type: 3 protocol builders + 4 output formatters + 1 redaction + 1 utility + RedactionPolicy.
+11 public APIs and 1 type: protocol builders, redacted value helpers,
+output formatters, redaction, parse_size, and RedactionPolicy.
 """
 
 from __future__ import annotations
@@ -51,25 +52,22 @@ def build_json(code: str, fields: Any, trace: Any = None) -> dict:
 class RedactionPolicy(str, Enum):
     RedactionTraceOnly = "RedactionTraceOnly"
     RedactionNone = "RedactionNone"
+    RedactionStrict = "RedactionStrict"
 
 
 def output_json(value: Any) -> str:
     """Format as single-line JSON. Secrets redacted, original keys, raw values."""
-    v = _sanitize_for_json(value)
-    _redact_secrets(v)
-    return json.dumps(v, ensure_ascii=False, separators=(",", ":"))
+    return json.dumps(redacted_value(value), ensure_ascii=False, separators=(",", ":"))
 
 
 def output_json_with(value: Any, redaction_policy: RedactionPolicy) -> str:
     """Format as single-line JSON with explicit redaction policy."""
-    v = _sanitize_for_json(value)
-    _apply_redaction_policy(v, redaction_policy)
-    return json.dumps(v, ensure_ascii=False, separators=(",", ":"))
+    return json.dumps(redacted_value_with(value, redaction_policy), ensure_ascii=False, separators=(",", ":"))
 
 
 def output_yaml(value: Any) -> str:
     """Format as multi-line YAML. Keys stripped, values formatted, secrets redacted."""
-    value = _sanitize_for_json(value)
+    value = redacted_value(value)
     lines = ["---"]
     _render_yaml_processed(value, 0, lines)
     return "\n".join(lines)
@@ -77,16 +75,13 @@ def output_yaml(value: Any) -> str:
 
 def output_plain(value: Any) -> str:
     """Format as single-line logfmt. Keys stripped, values formatted, secrets redacted."""
-    value = _sanitize_for_json(value)
+    value = redacted_value(value)
     pairs: list[tuple[str, str]] = []
     _collect_plain_pairs(value, "", pairs)
     pairs.sort(key=lambda p: p[0].encode("utf-16-be"))
     parts = []
     for k, v in pairs:
-        if " " in v:
-            parts.append(f'{k}="{v}"')
-        else:
-            parts.append(f"{k}={v}")
+        parts.append(f"{k}={_quote_logfmt_value(v)}")
     return " ".join(parts)
 
 
@@ -100,6 +95,20 @@ def internal_redact_secrets(value: Any) -> None:
     _redact_secrets(value)
 
 
+def redacted_value(value: Any) -> Any:
+    """Return a JSON-safe copy with default _secret redaction applied."""
+    v = _sanitize_for_json(value)
+    _redact_secrets(v)
+    return v
+
+
+def redacted_value_with(value: Any, redaction_policy: RedactionPolicy) -> Any:
+    """Return a JSON-safe copy with an explicit redaction policy applied."""
+    v = _sanitize_for_json(value)
+    _apply_redaction_policy(v, redaction_policy)
+    return v
+
+
 def _apply_redaction_policy(value: Any, redaction_policy: RedactionPolicy) -> None:
     if redaction_policy == RedactionPolicy.RedactionTraceOnly:
         if isinstance(value, dict) and "trace" in value:
@@ -107,6 +116,9 @@ def _apply_redaction_policy(value: Any, redaction_policy: RedactionPolicy) -> No
         return
     if redaction_policy == RedactionPolicy.RedactionNone:
         return
+    if redaction_policy == RedactionPolicy.RedactionStrict:
+        _redact_secrets_strict(value)
+        return
     # Safety fallback for unknown values.
     _redact_secrets(value)
 
@@ -211,6 +223,18 @@ def _redact_secrets(value: Any) -> None:
             _redact_secrets(item)
 
 
+def _redact_secrets_strict(value: Any) -> None:
+    if isinstance(value, dict):
+        for k in list(value.keys()):
+            if k.endswith("_secret") or k.endswith("_SECRET"):
+                value[k] = "***"
+            else:
+                _redact_secrets_strict(value[k])
+    elif isinstance(value, list):
+        for item in value:
+            _redact_secrets_strict(item)
+
+
 # ═══════════════════════════════════════════
 # Suffix Processing
 # ═══════════════════════════════════════════
@@ -572,3 +596,19 @@ def _plain_scalar(value: Any) -> str:
     if isinstance(value, (int, float)):
         return str(value)
     return str(value)
+
+
+def _quote_logfmt_value(value: str) -> str:
+    if value == "":
+        return ""
+    needs_quote = any(c.isspace() or c in '="\\"' for c in value)
+    if not needs_quote:
+        return value
+    escaped = (
+        value.replace("\\", "\\\\")
+        .replace('"', '\\"')
+        .replace("\n", "\\n")
+        .replace("\r", "\\r")
+        .replace("\t", "\\t")
+    )
+    return f'"{escaped}"'

{agent_first_data-0.7.3 → agent_first_data-0.8.0}/agent_first_data.egg-info/PKG-INFO

@@ -1,9 +1,9 @@
 Metadata-Version: 2.4
 Name: agent-first-data
-Version: 0.7.3
+Version: 0.8.0
 Summary: Agent-First Data (AFDATA) — suffix-driven output formatting and protocol templates for AI agents
 License-Expression: MIT
-Project-URL: Repository, https://github.com/cmnspore/agent-first-data
+Project-URL: Repository, https://github.com/agentfirstkit/agent-first-data
 Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 
@@ -74,7 +74,7 @@ Plain: args.input_path=/data/backup.tar.gz code=log event=startup config.max_fil
 
 ## API Reference
 
-Total: **13 public APIs and 2 types** + **AFDATA logging** (3 protocol builders + 4 output functions + 1 internal + 1 utility + 4 CLI helpers + `OutputFormat` + `RedactionPolicy`)
+Total: **15 public APIs and 2 types** + **AFDATA logging** (3 protocol builders + 2 redacted value helpers + 4 output functions + 1 internal + 1 utility + 4 CLI helpers + `OutputFormat` + `RedactionPolicy`)
 
 ### Protocol Builders (returns dict)
 
@@ -91,6 +91,15 @@ build_json_error(message: str, hint: str = None, trace: Any = None) -> dict
 build_json(code: str, fields: Any, trace: Any = None) -> dict
 ```
 
+### Redacted Values (returns Any)
+
+Use these before raw HTTP/MCP/SSE serializers that do not call `output_json`.
+
+```python
+redacted_value(value: Any) -> Any
+redacted_value_with(value: Any, redaction_policy: RedactionPolicy) -> Any
+```
+
 **Use case:** structured protocol payloads (frameworks automatically serialize)
 
 **Example:**
@@ -144,6 +153,7 @@ output_plain(value: Any) -> str  # Single-line logfmt, keys stripped, values for
 class RedactionPolicy(enum.Enum):
     RedactionTraceOnly = "RedactionTraceOnly"
     RedactionNone = "RedactionNone"
+    RedactionStrict = "RedactionStrict"
 ```
 
 **Example:**
@@ -513,7 +523,7 @@ All formats automatically redact `_secret` fields.
 
 ## Repository
 
-This package is part of the [agent-first-data](https://github.com/cmnspore/agent-first-data) repository, which also contains:
+This package is part of the [agent-first-data](https://github.com/agentfirstkit/agent-first-data) repository, which also contains:
 
 - **`spec/`** — Full AFDATA specification with suffix definitions, protocol format rules, and cross-language test fixtures
 - **`skills/`** — AI coding agent skill for working with AFDATA conventions
@@ -521,7 +531,7 @@ This package is part of the [agent-first-data](https://github.com/cmnspore/agent
 To run tests, clone the full repository (tests use shared cross-language fixtures from `spec/fixtures/`):
 
 ```bash
-git clone https://github.com/cmnspore/agent-first-data
+git clone https://github.com/agentfirstkit/agent-first-data
 cd agent-first-data/python
 python -m pytest
 ```

{agent_first_data-0.7.3 → agent_first_data-0.8.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "agent-first-data"
-version = "0.7.3"
+version = "0.8.0"
 description = "Agent-First Data (AFDATA) — suffix-driven output formatting and protocol templates for AI agents"
 license = "MIT"
 readme = "README.md"
@@ -8,7 +8,7 @@ requires-python = ">=3.9"
 dependencies = []
 
 [project.urls]
-Repository = "https://github.com/cmnspore/agent-first-data"
+Repository = "https://github.com/agentfirstkit/agent-first-data"
 
 [build-system]
 requires = ["setuptools>=68"]

{agent_first_data-0.7.3 → agent_first_data-0.8.0}/tests/test_format.py

@@ -9,6 +9,8 @@ from agent_first_data import (
     build_json,
     RedactionPolicy,
     internal_redact_secrets,
+    redacted_value,
+    redacted_value_with,
     output_json,
     output_json_with,
     output_yaml,
@@ -156,3 +158,20 @@ def test_output_json_with_none_keeps_secrets():
     )
     parsed = json.loads(out)
     assert parsed["api_key_secret"] == "sk-live-123"
+
+
+def test_redacted_value_returns_safe_copy():
+    inp = {"api_key_secret": "sk-live-123", "nested": {"token_secret": "tok"}}
+    got = redacted_value(inp)
+    assert got["api_key_secret"] == "***"
+    assert got["nested"]["token_secret"] == "***"
+    assert inp["api_key_secret"] == "sk-live-123"
+
+
+def test_redacted_value_with_strict_redacts_secret_subtree():
+    inp = {"db_secret": {"password_secret": "real", "host": "localhost"}}
+    default = redacted_value(inp)
+    strict = redacted_value_with(inp, RedactionPolicy.RedactionStrict)
+    assert default["db_secret"]["password_secret"] == "***"
+    assert default["db_secret"]["host"] == "localhost"
+    assert strict["db_secret"] == "***"