agentguard-python-sdk 0.2.2__tar.gz → 0.2.4__tar.gz

{agentguard_python_sdk-0.2.2 → agentguard_python_sdk-0.2.4}/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 AgentGuard Team
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 AgentGuard Team
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

{agentguard_python_sdk-0.2.2/agentguard_python_sdk.egg-info → agentguard_python_sdk-0.2.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentguard-python-sdk
-Version: 0.2.2
+Version: 0.2.4
 Summary: A production-grade middleware for AI agents to perform on-chain payments and verifiable consent.
 Author: AgentGuard Team
 License-Expression: MIT

{agentguard_python_sdk-0.2.2 → agentguard_python_sdk-0.2.4}/agentguard/__init__.py

@@ -1,57 +1,57 @@
-from .client import AgentGuardClient
-from .config import AgentGuardConfig
-from .errors import (
-    AgentGuardError,
-    ValidationError,
-    TransportError,
-    AuthenticationError,
-    InvalidSignatureError,
-    ExpiredSignatureError,
-    PaymentError,
-    ReplayAttackError,
-    DuplicatePaymentError,
-    BudgetExceededError,
-    VerificationError,
-    SecurityError,
-    UnknownExecutionStateError,
-    AuthorizationRequiredError
-)
-from .types import (
-    AgentGuardReceipt,
-    AuditProof,
-    AuthorizationConstraints,
-    NonceContext,
-    AuthorizationMetadata,
-    DelegatedAuthorization,
-    AuthorizationReceipt,
-    RevocationReceipt
-)
-
-__version__ = "0.2.2"
-
-__all__ = [
-    "AgentGuardClient",
-    "AgentGuardConfig",
-    "AgentGuardError",
-    "ValidationError",
-    "TransportError",
-    "AuthenticationError",
-    "InvalidSignatureError",
-    "ExpiredSignatureError",
-    "PaymentError",
-    "ReplayAttackError",
-    "DuplicatePaymentError",
-    "BudgetExceededError",
-    "VerificationError",
-    "SecurityError",
-    "UnknownExecutionStateError",
-    "AuthorizationRequiredError",
-    "AgentGuardReceipt",
-    "AuditProof",
-    "AuthorizationConstraints",
-    "NonceContext",
-    "AuthorizationMetadata",
-    "DelegatedAuthorization",
-    "AuthorizationReceipt",
-    "RevocationReceipt",
-]
+from .client import AgentGuardClient
+from .config import AgentGuardConfig
+from .errors import (
+    AgentGuardError,
+    ValidationError,
+    TransportError,
+    AuthenticationError,
+    InvalidSignatureError,
+    ExpiredSignatureError,
+    PaymentError,
+    ReplayAttackError,
+    DuplicatePaymentError,
+    BudgetExceededError,
+    VerificationError,
+    SecurityError,
+    UnknownExecutionStateError,
+    AuthorizationRequiredError
+)
+from .types import (
+    AgentGuardReceipt,
+    AuditProof,
+    AuthorizationConstraints,
+    NonceContext,
+    AuthorizationMetadata,
+    DelegatedAuthorization,
+    AuthorizationReceipt,
+    RevocationReceipt
+)
+
+__version__ = "0.2.2"
+
+__all__ = [
+    "AgentGuardClient",
+    "AgentGuardConfig",
+    "AgentGuardError",
+    "ValidationError",
+    "TransportError",
+    "AuthenticationError",
+    "InvalidSignatureError",
+    "ExpiredSignatureError",
+    "PaymentError",
+    "ReplayAttackError",
+    "DuplicatePaymentError",
+    "BudgetExceededError",
+    "VerificationError",
+    "SecurityError",
+    "UnknownExecutionStateError",
+    "AuthorizationRequiredError",
+    "AgentGuardReceipt",
+    "AuditProof",
+    "AuthorizationConstraints",
+    "NonceContext",
+    "AuthorizationMetadata",
+    "DelegatedAuthorization",
+    "AuthorizationReceipt",
+    "RevocationReceipt",
+]

{agentguard_python_sdk-0.2.2 → agentguard_python_sdk-0.2.4}/agentguard/auth.py

@@ -1,20 +1,20 @@
-import json
-import unicodedata
-import hashlib
-import base64
-import time
-from typing import Dict, Any
-import nacl.signing
-import nacl.encoding
-
-from agentguard_crypto.signing import sign_payload
-
-def sign_request(payload: Any, private_key_b64: str) -> str:
-    """
-    Signs a request using the shared cryptographic source of truth.
-    Payload MUST be a strictly typed canonical model.
-    """
-    if isinstance(payload, dict):
-        raise TypeError("Dictionary payloads are strictly prohibited. You must use a Canonical Payload model.")
-            
-    return sign_payload(payload, private_key_b64)
+import json
+import unicodedata
+import hashlib
+import base64
+import time
+from typing import Dict, Any
+import nacl.signing
+import nacl.encoding
+
+from agentguard_crypto.signing import sign_payload
+
+def sign_request(payload: Any, private_key_b64: str) -> str:
+    """
+    Signs a request using the shared cryptographic source of truth.
+    Payload MUST be a strictly typed canonical model.
+    """
+    if isinstance(payload, dict):
+        raise TypeError("Dictionary payloads are strictly prohibited. You must use a Canonical Payload model.")
+            
+    return sign_payload(payload, private_key_b64)

{agentguard_python_sdk-0.2.2 → agentguard_python_sdk-0.2.4}/agentguard/client.py

@@ -209,7 +209,8 @@ class AgentGuardClient:
             receiver=header_receiver,
             fiduciary_name=self.config.fiduciary_name,
             fiduciary_version=self.config.fiduciary_version,
-            hash_version=self.config.hash_version
+            hash_version=self.config.hash_version,
+            schema_version=1
         )
         
         # Phase 7: Strict Transport Contract — to_wire_dict() is the ONLY authority

{agentguard_python_sdk-0.2.2 → agentguard_python_sdk-0.2.4}/agentguard/config.py

@@ -25,7 +25,7 @@ class AgentGuardConfig(BaseSettings):
     tracing_enabled: bool = True
     
     # Validation Policy
-    strict_receiver_validation: bool = True
+    strict_receiver_validation: bool = False
     trusted_receiver: Optional[str] = None
     
     # Fiduciary Identity Config

{agentguard_python_sdk-0.2.2 → agentguard_python_sdk-0.2.4}/agentguard/observability.py

@@ -1,52 +1,52 @@
-import time
-import json
-import uuid
-import logging
-from datetime import datetime
-from typing import Optional, Dict, Any
-
-# [PRIORITY 9] SDK OBSERVABILITY CORE
-
-class Span:
-    def __init__(self, name: str, trace_id: str, parent_id: Optional[str] = None):
-        self.name = name
-        self.trace_id = trace_id
-        self.span_id = str(uuid.uuid4())[:8]
-        self.parent_id = parent_id
-        self.start_time = time.time()
-        self.metadata = {}
-
-    def set_attribute(self, key: str, value: Any):
-        self.metadata[key] = value
-
-    def end(self, error: Optional[str] = None):
-        duration = (time.time() - self.start_time) * 1000
-        log_data = {
-            "timestamp": datetime.utcnow().isoformat() + "Z",
-            "level": "INFO" if not error else "ERROR",
-            "service": "agentguard-sdk",
-            "event": "span_end",
-            "span_name": self.name,
-            "span_id": self.span_id,
-            "parent_id": self.parent_id,
-            "trace_id": self.trace_id,
-            "duration_ms": duration,
-            "error": error,
-            "metadata": self.metadata
-        }
-        logging.getLogger("agentguard-sdk").info(json.dumps(log_data))
-
-def start_span(name: str, trace_id: str, parent_id: Optional[str] = None) -> Span:
-    span = Span(name, trace_id, parent_id)
-    log_data = {
-        "timestamp": datetime.utcnow().isoformat() + "Z",
-        "level": "INFO",
-        "service": "agentguard-sdk",
-        "event": "span_start",
-        "span_name": name,
-        "span_id": span.span_id,
-        "parent_id": parent_id,
-        "trace_id": trace_id
-    }
-    logging.getLogger("agentguard-sdk").info(json.dumps(log_data))
-    return span
+import time
+import json
+import uuid
+import logging
+from datetime import datetime
+from typing import Optional, Dict, Any
+
+# [PRIORITY 9] SDK OBSERVABILITY CORE
+
+class Span:
+    def __init__(self, name: str, trace_id: str, parent_id: Optional[str] = None):
+        self.name = name
+        self.trace_id = trace_id
+        self.span_id = str(uuid.uuid4())[:8]
+        self.parent_id = parent_id
+        self.start_time = time.time()
+        self.metadata = {}
+
+    def set_attribute(self, key: str, value: Any):
+        self.metadata[key] = value
+
+    def end(self, error: Optional[str] = None):
+        duration = (time.time() - self.start_time) * 1000
+        log_data = {
+            "timestamp": datetime.utcnow().isoformat() + "Z",
+            "level": "INFO" if not error else "ERROR",
+            "service": "agentguard-sdk",
+            "event": "span_end",
+            "span_name": self.name,
+            "span_id": self.span_id,
+            "parent_id": self.parent_id,
+            "trace_id": self.trace_id,
+            "duration_ms": duration,
+            "error": error,
+            "metadata": self.metadata
+        }
+        logging.getLogger("agentguard-sdk").info(json.dumps(log_data))
+
+def start_span(name: str, trace_id: str, parent_id: Optional[str] = None) -> Span:
+    span = Span(name, trace_id, parent_id)
+    log_data = {
+        "timestamp": datetime.utcnow().isoformat() + "Z",
+        "level": "INFO",
+        "service": "agentguard-sdk",
+        "event": "span_start",
+        "span_name": name,
+        "span_id": span.span_id,
+        "parent_id": parent_id,
+        "trace_id": trace_id
+    }
+    logging.getLogger("agentguard-sdk").info(json.dumps(log_data))
+    return span

{agentguard_python_sdk-0.2.2 → agentguard_python_sdk-0.2.4}/agentguard_crypto/__init__.py

@@ -1 +1 @@
-# Empty init for agentguard_crypto package
+# Empty init for agentguard_crypto package

{agentguard_python_sdk-0.2.2 → agentguard_python_sdk-0.2.4}/agentguard_crypto/canonical.py

@@ -1,34 +1,34 @@
-import json
-import unicodedata
-from typing import Dict, Any
-
-def canonicalize_payload(payload: Dict[str, Any]) -> bytes:
-    """
-    Industry-Grade Deterministic Canonicalization.
-    1. Recursive NFC Normalization.
-    2. Recursive None-Stripping (Parity between null/unset).
-    3. Alphabetical Key Sorting.
-    4. Compact JSON (separators=(',', ':')).
-    5. UTF-8 Encoding.
-    """
-    def normalize_rec(obj):
-        if isinstance(obj, str):
-            # Strict NFC Normalization for inconsistent client environments
-            return unicodedata.normalize("NFC", obj)
-        if isinstance(obj, dict):
-            # Sort keys and discard None values for cryptographic parity
-            return {normalize_rec(k): normalize_rec(v) for k, v in obj.items() if v is not None}
-        if isinstance(obj, list):
-            return [normalize_rec(i) for i in obj]
-        return obj
-
-    norm_payload = normalize_rec(payload)
-    
-    # Deterministic JSON serialization
-    canonical_str = json.dumps(
-        norm_payload,
-        sort_keys=True,
-        separators=(",", ":"),
-        ensure_ascii=False
-    )
-    return canonical_str.encode("utf-8")
+import json
+import unicodedata
+from typing import Dict, Any
+
+def canonicalize_payload(payload: Dict[str, Any]) -> bytes:
+    """
+    Industry-Grade Deterministic Canonicalization.
+    1. Recursive NFC Normalization.
+    2. Recursive None-Stripping (Parity between null/unset).
+    3. Alphabetical Key Sorting.
+    4. Compact JSON (separators=(',', ':')).
+    5. UTF-8 Encoding.
+    """
+    def normalize_rec(obj):
+        if isinstance(obj, str):
+            # Strict NFC Normalization for inconsistent client environments
+            return unicodedata.normalize("NFC", obj)
+        if isinstance(obj, dict):
+            # Sort keys and discard None values for cryptographic parity
+            return {normalize_rec(k): normalize_rec(v) for k, v in obj.items() if v is not None}
+        if isinstance(obj, list):
+            return [normalize_rec(i) for i in obj]
+        return obj
+
+    norm_payload = normalize_rec(payload)
+    
+    # Deterministic JSON serialization
+    canonical_str = json.dumps(
+        norm_payload,
+        sort_keys=True,
+        separators=(",", ":"),
+        ensure_ascii=False
+    )
+    return canonical_str.encode("utf-8")

{agentguard_python_sdk-0.2.2 → agentguard_python_sdk-0.2.4}/agentguard_crypto/models.py

@@ -1,108 +1,108 @@
-from typing import Optional
-from pydantic import BaseModel, Field, StrictInt
-from .canonical import canonicalize_payload
-
-SCHEMA_VERSION = 1
-
-class CanonicalPayloadMixin:
-    """
-    PROTOCOL LAYER: Single Serialization Authority.
-    
-    ALL serialization MUST derive from _serialize().
-    Direct model_dump() calls are FORBIDDEN in protocol code.
-    
-    Invariant enforced by construction:
-        wire_payload == signed_payload == verified_payload
-    """
-
-    def _serialize(self) -> dict:
-        """SINGLE INTERNAL SERIALIZATION SOURCE.
-        Every external serialization method MUST derive from this.
-        Uses exclude_unset=True to prevent default injection drift."""
-        return self.model_dump(exclude_unset=True)
-
-    def to_canonical_bytes(self) -> bytes:
-        """Returns deterministic canonical bytes for signing/verification."""
-        return canonicalize_payload(self._serialize())
-
-    def to_wire_dict(self) -> dict:
-        """Returns the EXACT dict for HTTP transport.
-        Guaranteed identical field set to what is signed/verified."""
-        return self._serialize()
-
-    # Backward compatibility alias (used by signing.py, consent.py, payment.py)
-    get_canonical_bytes = to_canonical_bytes
-
-class CanonicalPaymentPayload(BaseModel, CanonicalPayloadMixin):
-    """
-    SINGLE SOURCE OF TRUTH (Phase 2).
-    Represents the exact fields that are signed and verified for Payment.
-    """
-    # Core Identity
-    principal_id: str
-    resource_url: str
-    purpose: str
-    microalgos: StrictInt = Field(gt=0)
-    
-    # Target
-    receiver_address: Optional[str] = None
-    receiver: Optional[str] = None
-    
-    # Cryptographic Nonces
-    nonce: str
-    timestamp: int
-    
-    # Authorization Context
-    authorization_id: Optional[str] = None
-    consent_hash: str
-    
-    # Correlation & Idempotency
-    idempotency_key: str
-    correlation_id: str
-    session_id: Optional[str] = None
-    
-    # Fiduciary Metadata (Phase A1)
-    fiduciary_name: Optional[str] = None
-    fiduciary_version: Optional[str] = None
-    hash_version: Optional[int] = 1
-    
-    # Versioning (Phase 5)
-    schema_version: int = Field(default=SCHEMA_VERSION)
-
-
-class CanonicalAuthorizationPayload(BaseModel, CanonicalPayloadMixin):
-    """
-    STRICTLY contains ONLY authorization lifecycle fields.
-    """
-    principal_id: str
-    logic_sig_b64: str
-    max_amount: StrictInt = Field(gt=0)
-    expires_at_unix: StrictInt
-    receiver: Optional[str] = None
-    purpose_hash: Optional[str] = None
-    authorization_id: Optional[str] = None
-    timestamp: int
-    nonce: str
-    schema_version: int = Field(default=SCHEMA_VERSION)
-
-
-class CanonicalRevokePayload(BaseModel, CanonicalPayloadMixin):
-    """
-    STRICTLY contains ONLY revocation fields.
-    """
-    principal_id: str
-    authorization_id: str
-    timestamp: int
-    nonce: str
-    schema_version: int = Field(default=SCHEMA_VERSION)
-
-
-class CanonicalRegistrationPayload(BaseModel, CanonicalPayloadMixin):
-    """
-    STRICTLY contains ONLY registration fields.
-    """
-    principal_id: str
-    budget_microalgos: Optional[StrictInt] = None
-    timestamp: int
-    nonce: str
-    schema_version: int = Field(default=SCHEMA_VERSION)
+from typing import Optional
+from pydantic import BaseModel, Field, StrictInt
+from .canonical import canonicalize_payload
+
+SCHEMA_VERSION = 1
+
+class CanonicalPayloadMixin:
+    """
+    PROTOCOL LAYER: Single Serialization Authority.
+    
+    ALL serialization MUST derive from _serialize().
+    Direct model_dump() calls are FORBIDDEN in protocol code.
+    
+    Invariant enforced by construction:
+        wire_payload == signed_payload == verified_payload
+    """
+
+    def _serialize(self) -> dict:
+        """SINGLE INTERNAL SERIALIZATION SOURCE.
+        Every external serialization method MUST derive from this.
+        Uses exclude_unset=True to prevent default injection drift."""
+        return self.model_dump(exclude_unset=True)
+
+    def to_canonical_bytes(self) -> bytes:
+        """Returns deterministic canonical bytes for signing/verification."""
+        return canonicalize_payload(self._serialize())
+
+    def to_wire_dict(self) -> dict:
+        """Returns the EXACT dict for HTTP transport.
+        Guaranteed identical field set to what is signed/verified."""
+        return self._serialize()
+
+    # Backward compatibility alias (used by signing.py, consent.py, payment.py)
+    get_canonical_bytes = to_canonical_bytes
+
+class CanonicalPaymentPayload(BaseModel, CanonicalPayloadMixin):
+    """
+    SINGLE SOURCE OF TRUTH (Phase 2).
+    Represents the exact fields that are signed and verified for Payment.
+    """
+    # Core Identity
+    principal_id: str
+    resource_url: str
+    purpose: str
+    microalgos: StrictInt = Field(gt=0)
+    
+    # Target
+    receiver_address: Optional[str] = None
+    receiver: Optional[str] = None
+    
+    # Cryptographic Nonces
+    nonce: str
+    timestamp: int
+    
+    # Authorization Context
+    authorization_id: Optional[str] = None
+    consent_hash: str
+    
+    # Correlation & Idempotency
+    idempotency_key: str
+    correlation_id: str
+    session_id: Optional[str] = None
+    
+    # Fiduciary Metadata (Phase A1)
+    fiduciary_name: Optional[str] = None
+    fiduciary_version: Optional[str] = None
+    hash_version: Optional[int] = 1
+    
+    # Versioning (Phase 5)
+    schema_version: int = Field(default=SCHEMA_VERSION)
+
+
+class CanonicalAuthorizationPayload(BaseModel, CanonicalPayloadMixin):
+    """
+    STRICTLY contains ONLY authorization lifecycle fields.
+    """
+    principal_id: str
+    logic_sig_b64: str
+    max_amount: StrictInt = Field(gt=0)
+    expires_at_unix: StrictInt
+    receiver: Optional[str] = None
+    purpose_hash: Optional[str] = None
+    authorization_id: Optional[str] = None
+    timestamp: int
+    nonce: str
+    schema_version: int = Field(default=SCHEMA_VERSION)
+
+
+class CanonicalRevokePayload(BaseModel, CanonicalPayloadMixin):
+    """
+    STRICTLY contains ONLY revocation fields.
+    """
+    principal_id: str
+    authorization_id: str
+    timestamp: int
+    nonce: str
+    schema_version: int = Field(default=SCHEMA_VERSION)
+
+
+class CanonicalRegistrationPayload(BaseModel, CanonicalPayloadMixin):
+    """
+    STRICTLY contains ONLY registration fields.
+    """
+    principal_id: str
+    budget_microalgos: Optional[StrictInt] = None
+    timestamp: int
+    nonce: str
+    schema_version: int = Field(default=SCHEMA_VERSION)

{agentguard_python_sdk-0.2.2 → agentguard_python_sdk-0.2.4}/agentguard_crypto/signing.py

@@ -1,76 +1,76 @@
-import base64
-import nacl.signing
-import nacl.encoding
-from typing import Any
-from .models import CanonicalPaymentPayload
-
-def sign_payload(payload: Any, private_key_b64: str) -> str:
-    """
-    Signs a CanonicalPaymentPayload (Phase 4).
-    Expects private_key_b64 (32-byte seed in b64).
-    """
-    seed = base64.b64decode(private_key_b64)
-    if len(seed) > 32:
-        seed = seed[:32]
-        
-    signing_key = nacl.signing.SigningKey(seed)
-    canonical_bytes = payload.get_canonical_bytes()
-    
-    signature = signing_key.sign(canonical_bytes)
-    return base64.b64encode(signature.signature).decode("utf-8")
-
-def verify_signature(payload: Any, signature_b64: str, wallet_address: str) -> bool:
-    """
-    Verifies a CanonicalPaymentPayload signature (Phase 4).
-    wallet_address is used as the public key.
-    """
-    from algosdk import encoding
-    import nacl.exceptions
-    
-    # 1. Get canonical bytes
-    canonical_bytes = payload.get_canonical_bytes()
-    
-    # 2. Decode signature and key
-    sig_bytes = base64.b64decode(signature_b64)
-    pub_key_bytes = encoding.decode_address(wallet_address)
-    verify_key = nacl.signing.VerifyKey(pub_key_bytes)
-    
-    # 3. Verify
-    try:
-        verify_key.verify(canonical_bytes, sig_bytes)
-        return True
-    except nacl.exceptions.BadSignatureError:
-        return False
-
-
-def verify_raw_signature(raw_payload_dict: dict, signature_b64: str, wallet_address: str) -> bool:
-    """
-    PRODUCTION-GRADE: Verifies signature against raw transport payload.
-    
-    NO model reconstruction. Canonicalizes the raw wire dict directly.
-    This eliminates Pydantic hydration drift, default injection, and
-    triple-reconstruction attacks.
-    
-    Flow: raw_wire_dict → canonicalize → verify
-    
-    This is how Stripe, AWS SigV4, and WebAuthn verify signatures:
-    against exact transport bytes, never reconstructed model state.
-    """
-    from .canonical import canonicalize_payload
-    from algosdk import encoding
-    import nacl.exceptions
-    
-    # 1. Canonicalize raw transport payload directly
-    canonical_bytes = canonicalize_payload(raw_payload_dict)
-    
-    # 2. Decode signature and public key
-    sig_bytes = base64.b64decode(signature_b64)
-    pub_key_bytes = encoding.decode_address(wallet_address)
-    verify_key = nacl.signing.VerifyKey(pub_key_bytes)
-    
-    # 3. Verify
-    try:
-        verify_key.verify(canonical_bytes, sig_bytes)
-        return True
-    except nacl.exceptions.BadSignatureError:
-        return False
+import base64
+import nacl.signing
+import nacl.encoding
+from typing import Any
+from .models import CanonicalPaymentPayload
+
+def sign_payload(payload: Any, private_key_b64: str) -> str:
+    """
+    Signs a CanonicalPaymentPayload (Phase 4).
+    Expects private_key_b64 (32-byte seed in b64).
+    """
+    seed = base64.b64decode(private_key_b64)
+    if len(seed) > 32:
+        seed = seed[:32]
+        
+    signing_key = nacl.signing.SigningKey(seed)
+    canonical_bytes = payload.get_canonical_bytes()
+    
+    signature = signing_key.sign(canonical_bytes)
+    return base64.b64encode(signature.signature).decode("utf-8")
+
+def verify_signature(payload: Any, signature_b64: str, wallet_address: str) -> bool:
+    """
+    Verifies a CanonicalPaymentPayload signature (Phase 4).
+    wallet_address is used as the public key.
+    """
+    from algosdk import encoding
+    import nacl.exceptions
+    
+    # 1. Get canonical bytes
+    canonical_bytes = payload.get_canonical_bytes()
+    
+    # 2. Decode signature and key
+    sig_bytes = base64.b64decode(signature_b64)
+    pub_key_bytes = encoding.decode_address(wallet_address)
+    verify_key = nacl.signing.VerifyKey(pub_key_bytes)
+    
+    # 3. Verify
+    try:
+        verify_key.verify(canonical_bytes, sig_bytes)
+        return True
+    except nacl.exceptions.BadSignatureError:
+        return False
+
+
+def verify_raw_signature(raw_payload_dict: dict, signature_b64: str, wallet_address: str) -> bool:
+    """
+    PRODUCTION-GRADE: Verifies signature against raw transport payload.
+    
+    NO model reconstruction. Canonicalizes the raw wire dict directly.
+    This eliminates Pydantic hydration drift, default injection, and
+    triple-reconstruction attacks.
+    
+    Flow: raw_wire_dict → canonicalize → verify
+    
+    This is how Stripe, AWS SigV4, and WebAuthn verify signatures:
+    against exact transport bytes, never reconstructed model state.
+    """
+    from .canonical import canonicalize_payload
+    from algosdk import encoding
+    import nacl.exceptions
+    
+    # 1. Canonicalize raw transport payload directly
+    canonical_bytes = canonicalize_payload(raw_payload_dict)
+    
+    # 2. Decode signature and public key
+    sig_bytes = base64.b64decode(signature_b64)
+    pub_key_bytes = encoding.decode_address(wallet_address)
+    verify_key = nacl.signing.VerifyKey(pub_key_bytes)
+    
+    # 3. Verify
+    try:
+        verify_key.verify(canonical_bytes, sig_bytes)
+        return True
+    except nacl.exceptions.BadSignatureError:
+        return False

{agentguard_python_sdk-0.2.2 → agentguard_python_sdk-0.2.4/agentguard_python_sdk.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentguard-python-sdk
-Version: 0.2.2
+Version: 0.2.4
 Summary: A production-grade middleware for AI agents to perform on-chain payments and verifiable consent.
 Author: AgentGuard Team
 License-Expression: MIT

{agentguard_python_sdk-0.2.2 → agentguard_python_sdk-0.2.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agentguard-python-sdk"
-version = "0.2.2"
+version = "0.2.4"
 description = "A production-grade middleware for AI agents to perform on-chain payments and verifiable consent."
 readme = "README.md"
 requires-python = ">=3.9"