agenthooksprotocol 0.7.0__tar.gz → 0.8.0__tar.gz

{agenthooksprotocol-0.7.0/src/agenthooksprotocol.egg-info → agenthooksprotocol-0.8.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenthooksprotocol
-Version: 0.7.0
+Version: 0.8.0
 Summary: Official non-normative Python SDK for the Agent Hooks Protocol
 Author: Agent Hooks Protocol maintainers
 License: 
@@ -343,6 +343,21 @@ The same remaining budget covers queue/readiness waits, provider waits, selected
 
 The default `auth.EnvironmentAuthProvider` resolves bearer `tokenEnv` or optional `resolve_credential` tokenRef callbacks at delivery time. OAuth bindings require an explicit provider. Missing configured secrets and unsupported mechanisms fail closed. Anonymous success stays anonymous; an explicit provider can authorize challenge discovery under host trust policy. Interception may replay at most once after an eligible 401 Bearer challenge, retaining request identity and serialized body; observations/uploads are never automatically replayed. Upload bindings are independent: event credentials are never an upload fallback. Transport-owned TLS/workload integration is not replaced by this provider.
 
+HTTP registrations accept `transport.headers`, for example:
+
+```json
+{"type":"http","url":"https://policy.example/hooks","headers":{"X-Tenant":"engineering","X-Api-Key":{"valueEnv":"POLICY_API_KEY"},"X-Gateway":{"valueRef":"vault/policy"}}}
+```
+
+All valid HTTP field names are supported, including `Authorization`, `Cookie`, `Origin`, and protocol headers. Literal API keys and cookies are supported. Values must be safe HTTP field values (no CR, LF, or NUL); this HTTPX transport supports Latin-1 header bytes, including non-ASCII values such as `café`. There is no additional SDK header-size limit. Duplicate names are compared case-insensitively: the last property in configuration iteration order wins.
+
+Transport defaults and authentication are applied first, then configured registration headers override them case-insensitively, including `Content-Type` and `Authorization`. Configured `Authorization`, whether literal or referenced, suppresses provider acquisition, discovery, challenges, and retries. A failed explicit secret lookup fails delivery; it never falls back to OAuth.
+
+`valueEnv` and `valueRef` reuse the bearer secret lookup helper and `Hooks(..., resolve_credential=callback)` callback. The optional contextual `header_resolver.resolve(context)` API remains available for harnesses needing backend, destination, purpose, cancellation, and deadline context. Values resolve once per event or upload operation, are reused on an allowed authentication retry, and rotate on subsequent operations. Errors redact values and references.
+
+Configured headers apply to both event POSTs and backend content uploads, overriding upload defaults and authentication as well. They are not installed globally on borrowed clients, discovery/token requests, or other backends. Existing transport redirect behavior is unchanged (SDK HTTP transports already disable automatic redirects). Custom injected transports retain responsibility for their transport contract.
+
+
 Registered stdio backends start with a minimal base environment rather than the full host environment. The base is an allowlist of host variables: `PATH`, `HOME`, `USER`, `LOGNAME`, `SHELL`, `LANG`, `LC_*`, `TZ`, `TMPDIR`, `TEMP` and `TMP`, plus `SYSTEMROOT`, `WINDIR`, `COMSPEC`, `PATHEXT`, `USERPROFILE`, `APPDATA`, `LOCALAPPDATA` and `PROGRAMDATA` on Windows, where names match case-insensitively. The registration's `transport.env` entries are applied on top as literal strings, with no interpolation, and override base values. `tokenEnv` is still resolved in the host environment and credentials are never copied into the child. Env values are never logged. `Hooks(..., inherit_environment=True)` is an SDK-level opt-out that starts from the full host environment instead. `transports.StdioTransport(..., env=..., inherit_environment=...)` exposes the same controls.
 
 ## Static host manifest

{agenthooksprotocol-0.7.0 → agenthooksprotocol-0.8.0}/README.md

@@ -119,6 +119,21 @@ The same remaining budget covers queue/readiness waits, provider waits, selected
 
 The default `auth.EnvironmentAuthProvider` resolves bearer `tokenEnv` or optional `resolve_credential` tokenRef callbacks at delivery time. OAuth bindings require an explicit provider. Missing configured secrets and unsupported mechanisms fail closed. Anonymous success stays anonymous; an explicit provider can authorize challenge discovery under host trust policy. Interception may replay at most once after an eligible 401 Bearer challenge, retaining request identity and serialized body; observations/uploads are never automatically replayed. Upload bindings are independent: event credentials are never an upload fallback. Transport-owned TLS/workload integration is not replaced by this provider.
 
+HTTP registrations accept `transport.headers`, for example:
+
+```json
+{"type":"http","url":"https://policy.example/hooks","headers":{"X-Tenant":"engineering","X-Api-Key":{"valueEnv":"POLICY_API_KEY"},"X-Gateway":{"valueRef":"vault/policy"}}}
+```
+
+All valid HTTP field names are supported, including `Authorization`, `Cookie`, `Origin`, and protocol headers. Literal API keys and cookies are supported. Values must be safe HTTP field values (no CR, LF, or NUL); this HTTPX transport supports Latin-1 header bytes, including non-ASCII values such as `café`. There is no additional SDK header-size limit. Duplicate names are compared case-insensitively: the last property in configuration iteration order wins.
+
+Transport defaults and authentication are applied first, then configured registration headers override them case-insensitively, including `Content-Type` and `Authorization`. Configured `Authorization`, whether literal or referenced, suppresses provider acquisition, discovery, challenges, and retries. A failed explicit secret lookup fails delivery; it never falls back to OAuth.
+
+`valueEnv` and `valueRef` reuse the bearer secret lookup helper and `Hooks(..., resolve_credential=callback)` callback. The optional contextual `header_resolver.resolve(context)` API remains available for harnesses needing backend, destination, purpose, cancellation, and deadline context. Values resolve once per event or upload operation, are reused on an allowed authentication retry, and rotate on subsequent operations. Errors redact values and references.
+
+Configured headers apply to both event POSTs and backend content uploads, overriding upload defaults and authentication as well. They are not installed globally on borrowed clients, discovery/token requests, or other backends. Existing transport redirect behavior is unchanged (SDK HTTP transports already disable automatic redirects). Custom injected transports retain responsibility for their transport contract.
+
+
 Registered stdio backends start with a minimal base environment rather than the full host environment. The base is an allowlist of host variables: `PATH`, `HOME`, `USER`, `LOGNAME`, `SHELL`, `LANG`, `LC_*`, `TZ`, `TMPDIR`, `TEMP` and `TMP`, plus `SYSTEMROOT`, `WINDIR`, `COMSPEC`, `PATHEXT`, `USERPROFILE`, `APPDATA`, `LOCALAPPDATA` and `PROGRAMDATA` on Windows, where names match case-insensitively. The registration's `transport.env` entries are applied on top as literal strings, with no interpolation, and override base values. `tokenEnv` is still resolved in the host environment and credentials are never copied into the child. Env values are never logged. `Hooks(..., inherit_environment=True)` is an SDK-level opt-out that starts from the full host environment instead. `transports.StdioTransport(..., env=..., inherit_environment=...)` exposes the same controls.
 
 ## Static host manifest

{agenthooksprotocol-0.7.0 → agenthooksprotocol-0.8.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agenthooksprotocol"
-version = "0.7.0"
+version = "0.8.0"
 description = "Official non-normative Python SDK for the Agent Hooks Protocol"
 readme = "README.md"
 requires-python = ">=3.11"

{agenthooksprotocol-0.7.0 → agenthooksprotocol-0.8.0}/src/agenthooksprotocol/_hooks.py

@@ -654,6 +654,7 @@ class Hooks(BoundaryMixin):
         transport: Any = None,
         resolve_credential: Any = None,
         auth_provider: Any = None,
+        header_resolver: Any = None,
         max_concurrent_uploads: int = 8,
         inherit_environment: bool = False,
     ) -> None:
@@ -672,6 +673,7 @@ class Hooks(BoundaryMixin):
             transport=transport,
             resolve_credential=resolve_credential,
             auth_provider=auth_provider,
+            header_resolver=header_resolver,
             max_concurrent_uploads=max_concurrent_uploads,
             inherit_environment=inherit_environment,
         )
@@ -687,6 +689,7 @@ class Hooks(BoundaryMixin):
         transport: Any = None,
         resolve_credential: Any = None,
         auth_provider: Any = None,
+        header_resolver: Any = None,
         max_concurrent_uploads: int = 8,
         inherit_environment: bool = False,
     ) -> None:
@@ -703,6 +706,17 @@ class Hooks(BoundaryMixin):
         self._upload_limiter = anyio.Semaphore(max_concurrent_uploads)
         self.validator = Validator()
         self._lineage = TaskLineage(self.validator)
+        from .headers import validate_headers
+
+        registered_backends = config.get("hooks", []) if isinstance(config, dict) else []
+        for backend in registered_backends if isinstance(registered_backends, list) else []:
+            transport_config = (
+                backend.get("transport", {}) if isinstance(backend, dict) else {}
+            )
+            if isinstance(transport_config, dict) and transport_config.get("type") == "http":
+                validate_headers(transport_config.get("headers", {}))
+        self._header_resolver = header_resolver
+        self._resolve_credential = resolve_credential
         self.validator.validate("registration", config)
         if (
             not isinstance(source, str)
@@ -863,6 +877,38 @@ class Hooks(BoundaryMixin):
                         if isinstance(self._injected, dict)
                         else self._injected
                     )
+                    from .transports.http import HTTPTransport
+
+                    config = backend["transport"]
+                    if (
+                        config["type"] == "http"
+                        and config.get("headers")
+                        and isinstance(transport, HTTPTransport)
+                    ):
+                        from .auth import AuthenticatedHTTPTransport
+
+                        # Keep borrowed client lifetime and programmatic metadata,
+                        # but do not bypass the registration's endpoint scope.
+                        if transport.url != config["url"]:
+                            raise ProtocolError("HTTP registration endpoint mismatch")
+                        transport = AuthenticatedHTTPTransport(
+                            config["url"],
+                            backend=backend,
+                            resolve_credential=(
+                                self._resolve_credential
+                                if self._resolve_credential is not None
+                                else getattr(transport, "resolve_credential", None)
+                            ),
+                            client=transport._ready(),
+                            headers=transport.headers,
+                            auth_provider=getattr(
+                                transport, "auth_provider", self._auth_provider
+                            ),
+                            header_resolver=self._header_resolver or getattr(
+                                transport, "header_resolver", None
+                            ),
+                            validator=self.validator,
+                        )
                 else:
                     config = backend["transport"]
                     if config["type"] == "stdio":
@@ -882,7 +928,9 @@ class Hooks(BoundaryMixin):
                         transport = AuthenticatedHTTPTransport(
                             config["url"],
                             backend=backend,
+                            resolve_credential=self._resolve_credential,
                             auth_provider=self._auth_provider,
+                            header_resolver=self._header_resolver,
                             validator=self.validator,
                         )
                     self._owned.append(transport)