agentguardproxy 0.3.0__tar.gz → 0.4.0__tar.gz

{agentguardproxy-0.3.0 → agentguardproxy-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentguardproxy
-Version: 0.3.0
+Version: 0.4.0
 Summary: Python SDK for AgentGuard — the firewall for AI agents
 Author: AgentGuard Contributors
 License-Expression: Apache-2.0

{agentguardproxy-0.3.0 → agentguardproxy-0.4.0}/agentguard/__init__.py

@@ -68,10 +68,11 @@ class CheckResult:
 class Guard:
     """Client for the AgentGuard proxy."""
 
-    def __init__(self, base_url: str = "", agent_id: str = "", timeout: int = DEFAULT_TIMEOUT):
+    def __init__(self, base_url: str = "", agent_id: str = "", timeout: int = DEFAULT_TIMEOUT, api_key: str = ""):
         self.base_url = (base_url or os.environ.get("AGENTGUARD_URL", DEFAULT_BASE_URL)).rstrip("/")
         self.agent_id = agent_id
         self.timeout = timeout
+        self.api_key = api_key or os.environ.get("AGENTGUARD_API_KEY", "")
 
     def check(
         self,
@@ -140,10 +141,17 @@ class Guard:
                 reason=f"AgentGuard unreachable: {e}",
             )
 
+    def _auth_headers(self) -> dict:
+        """Return Authorization header if api_key is set."""
+        if self.api_key:
+            return {"Authorization": f"Bearer {self.api_key}"}
+        return {}
+
     def approve(self, approval_id: str) -> bool:
         """Approve a pending action."""
         req = request.Request(
             f"{self.base_url}{ENDPOINT_APPROVE}{approval_id}",
+            headers=self._auth_headers(),
             method="POST",
         )
         try:
@@ -156,6 +164,7 @@ class Guard:
         """Deny a pending action."""
         req = request.Request(
             f"{self.base_url}{ENDPOINT_DENY}{approval_id}",
+            headers=self._auth_headers(),
             method="POST",
         )
         try:

{agentguardproxy-0.3.0 → agentguardproxy-0.4.0}/agentguard/adapters/mcp.py

@@ -39,7 +39,7 @@ from agentguard import Guard, CheckResult, DEFAULT_BASE_URL
 
 # MCP protocol constants
 MCP_PROTOCOL_VERSION = "2024-11-05"
-SDK_VERSION = "0.3.0"
+SDK_VERSION = "0.4.0"
 
 
 class ToolDefinition:

{agentguardproxy-0.3.0 → agentguardproxy-0.4.0}/agentguardproxy.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentguardproxy
-Version: 0.3.0
+Version: 0.4.0
 Summary: Python SDK for AgentGuard — the firewall for AI agents
 Author: AgentGuard Contributors
 License-Expression: Apache-2.0

{agentguardproxy-0.3.0 → agentguardproxy-0.4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agentguardproxy"
-version = "0.3.0"
+version = "0.4.0"
 description = "Python SDK for AgentGuard — the firewall for AI agents"
 readme = "README.md"
 license = "Apache-2.0"

{agentguardproxy-0.3.0 → agentguardproxy-0.4.0}/tests/test_guard.py

@@ -169,3 +169,39 @@ class TestGuardActions:
     def test_deny_unreachable(self):
         g = Guard("http://127.0.0.1:1", timeout=1)
         assert g.deny("ap_123") is False
+
+
+# ---------------------------------------------------------------------------
+# Auth header tests (H9)
+# ---------------------------------------------------------------------------
+
+class TestGuardAuth:
+    def test_approve_sends_auth_header(self, mock_server):
+        g = Guard(mock_server, api_key="my-secret")
+        g.approve("ap_123")
+        assert MockAgentGuardHandler.last_request_headers is not None
+        assert MockAgentGuardHandler.last_request_headers.get("Authorization") == "Bearer my-secret"
+
+    def test_deny_sends_auth_header(self, mock_server):
+        g = Guard(mock_server, api_key="my-secret")
+        g.deny("ap_123")
+        assert MockAgentGuardHandler.last_request_headers is not None
+        assert MockAgentGuardHandler.last_request_headers.get("Authorization") == "Bearer my-secret"
+
+    def test_approve_no_auth_header_without_key(self, mock_server):
+        g = Guard(mock_server)
+        g.approve("ap_123")
+        assert MockAgentGuardHandler.last_request_headers is not None
+        assert MockAgentGuardHandler.last_request_headers.get("Authorization") is None
+
+    def test_api_key_from_env(self, mock_server, monkeypatch):
+        monkeypatch.setenv("AGENTGUARD_API_KEY", "env-secret")
+        g = Guard(mock_server)
+        g.approve("ap_123")
+        assert MockAgentGuardHandler.last_request_headers.get("Authorization") == "Bearer env-secret"
+
+    def test_explicit_key_overrides_env(self, mock_server, monkeypatch):
+        monkeypatch.setenv("AGENTGUARD_API_KEY", "env-secret")
+        g = Guard(mock_server, api_key="explicit-secret")
+        g.approve("ap_123")
+        assert MockAgentGuardHandler.last_request_headers.get("Authorization") == "Bearer explicit-secret"