agentonboard-sdk 0.1.0__tar.gz

agentonboard_sdk-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,42 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Set up Python ${{ matrix.python-version }}
+        run: uv python install ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: |
+          uv venv --python ${{ matrix.python-version }}
+          uv pip install -e ".[dev]"
+
+      - name: Run Ruff Lint
+        run: uv run ruff check .
+
+      - name: Run Ruff Format Check
+        run: uv run ruff format --check .
+
+      - name: Run Type Check (mypy)
+        run: uv run mypy src/
+
+      - name: Run Test Suite
+        run: uv run pytest -v

agentonboard_sdk-0.1.0/.github/workflows/publish.yml

@@ -0,0 +1,39 @@
+name: Publish to PyPI
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+jobs:
+  publish:
+    name: Build and publish to PyPI
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write # Required for PyPI Trusted Publishing
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Set up Python
+        run: uv python install 3.12
+
+      - name: Install dependencies
+        run: |
+          uv venv --python 3.12
+          uv pip install -e ".[dev]"
+
+      - name: Run Test Suite
+        run: uv run pytest -v
+
+      - name: Build distributions
+        run: uv build
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

agentonboard_sdk-0.1.0/.gitignore

@@ -0,0 +1,32 @@
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/

agentonboard_sdk-0.1.0/PKG-INFO

@@ -0,0 +1,111 @@
+Metadata-Version: 2.5
+Name: agentonboard-sdk
+Version: 0.1.0
+Summary: Universal identity layer for AI agents — Python Partner SDK for token verification and account creation
+Author-email: AgentOnboard <hello@agentonboard.xyz>
+License-Expression: MIT
+Keywords: agentonboard,ai-agents,authentication,fastapi,flask,identity,jwt
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Security
+Classifier: Typing :: Typed
+Requires-Python: >=3.10
+Requires-Dist: httpx>=0.25.0
+Requires-Dist: pyjwt[crypto]>=2.8.0
+Provides-Extra: all
+Requires-Dist: fastapi>=0.100.0; extra == 'all'
+Requires-Dist: flask>=2.0.0; extra == 'all'
+Requires-Dist: starlette>=0.27.0; extra == 'all'
+Provides-Extra: dev
+Requires-Dist: cryptography>=42.0.0; extra == 'dev'
+Requires-Dist: fastapi>=0.100.0; extra == 'dev'
+Requires-Dist: flask>=2.0.0; extra == 'dev'
+Requires-Dist: mypy>=1.9.0; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.23.0; extra == 'dev'
+Requires-Dist: pytest>=8.0.0; extra == 'dev'
+Requires-Dist: ruff>=0.4.0; extra == 'dev'
+Provides-Extra: fastapi
+Requires-Dist: fastapi>=0.100.0; extra == 'fastapi'
+Requires-Dist: starlette>=0.27.0; extra == 'fastapi'
+Provides-Extra: flask
+Requires-Dist: flask>=2.0.0; extra == 'flask'
+Description-Content-Type: text/markdown
+
+# agentonboard-sdk (Python Partner SDK)
+
+The Python partner SDK for [AgentOnboard](https://agentonboard.xyz) — verify ephemeral agent session tokens and safely resolve or provision partner accounts.
+
+## Installation
+
+```bash
+pip install agentonboard-sdk
+```
+
+Optional framework shortcuts:
+```bash
+pip install "agentonboard-sdk[fastapi]"
+pip install "agentonboard-sdk[flask]"
+```
+
+## Quickstart
+
+### Verify an Agent Token
+
+```python
+from agentonboard import verify_agent_token
+
+result = verify_agent_token(
+    token=bearer_token,
+    audience="notes.com",
+)
+
+if not result.ok:
+    print(f"Auth failed: {result.code} - {result.error}")
+else:
+    print(f"Authenticated human: {result.email}")
+```
+
+### Async Verification
+
+```python
+from agentonboard import verify_agent_token_async
+
+result = await verify_agent_token_async(
+    token=bearer_token,
+    audience="notes.com",
+)
+```
+
+### Account Resolution & Provisioning
+
+```python
+from agentonboard import verify_agent_account, create_agent_account, AgentIdentity
+
+def find_user_by_email(identity: AgentIdentity):
+    return db.query(User).filter(User.email == identity.email).first()
+
+def create_user_for_agent(identity: AgentIdentity):
+    return db.create_user(email=identity.email)
+
+# Read-only verification
+outcome = verify_agent_account(
+    token=bearer_token,
+    audience="notes.com",
+    resolver=find_user_by_email,
+)
+
+# Provisioning if account doesn't exist
+outcome = create_agent_account(
+    token=bearer_token,
+    audience="notes.com",
+    resolver=find_user_by_email,
+    creator=create_user_for_agent,
+)
+```

agentonboard_sdk-0.1.0/README.md

@@ -0,0 +1,71 @@
+# agentonboard-sdk (Python Partner SDK)
+
+The Python partner SDK for [AgentOnboard](https://agentonboard.xyz) — verify ephemeral agent session tokens and safely resolve or provision partner accounts.
+
+## Installation
+
+```bash
+pip install agentonboard-sdk
+```
+
+Optional framework shortcuts:
+```bash
+pip install "agentonboard-sdk[fastapi]"
+pip install "agentonboard-sdk[flask]"
+```
+
+## Quickstart
+
+### Verify an Agent Token
+
+```python
+from agentonboard import verify_agent_token
+
+result = verify_agent_token(
+    token=bearer_token,
+    audience="notes.com",
+)
+
+if not result.ok:
+    print(f"Auth failed: {result.code} - {result.error}")
+else:
+    print(f"Authenticated human: {result.email}")
+```
+
+### Async Verification
+
+```python
+from agentonboard import verify_agent_token_async
+
+result = await verify_agent_token_async(
+    token=bearer_token,
+    audience="notes.com",
+)
+```
+
+### Account Resolution & Provisioning
+
+```python
+from agentonboard import verify_agent_account, create_agent_account, AgentIdentity
+
+def find_user_by_email(identity: AgentIdentity):
+    return db.query(User).filter(User.email == identity.email).first()
+
+def create_user_for_agent(identity: AgentIdentity):
+    return db.create_user(email=identity.email)
+
+# Read-only verification
+outcome = verify_agent_account(
+    token=bearer_token,
+    audience="notes.com",
+    resolver=find_user_by_email,
+)
+
+# Provisioning if account doesn't exist
+outcome = create_agent_account(
+    token=bearer_token,
+    audience="notes.com",
+    resolver=find_user_by_email,
+    creator=create_user_for_agent,
+)
+```

agentonboard_sdk-0.1.0/pyproject.toml

@@ -0,0 +1,79 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "agentonboard-sdk"
+version = "0.1.0"
+description = "Universal identity layer for AI agents — Python Partner SDK for token verification and account creation"
+readme = "README.md"
+requires-python = ">=3.10"
+license = "MIT"
+authors = [
+    { name = "AgentOnboard", email = "hello@agentonboard.xyz" }
+]
+keywords = ["agentonboard", "ai-agents", "authentication", "identity", "jwt", "fastapi", "flask"]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
+    "Topic :: Security",
+    "Typing :: Typed",
+]
+dependencies = [
+    "httpx>=0.25.0",
+    "pyjwt[crypto]>=2.8.0",
+]
+
+[project.optional-dependencies]
+fastapi = [
+    "fastapi>=0.100.0",
+    "starlette>=0.27.0",
+]
+flask = [
+    "flask>=2.0.0",
+]
+all = [
+    "agentonboard-sdk[fastapi,flask]",
+]
+dev = [
+    "pytest>=8.0.0",
+    "pytest-asyncio>=0.23.0",
+    "ruff>=0.4.0",
+    "mypy>=1.9.0",
+    "cryptography>=42.0.0",
+    "fastapi>=0.100.0",
+    "flask>=2.0.0",
+]
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/agentonboard"]
+
+[tool.pytest.ini_options]
+asyncio_mode = "auto"
+asyncio_default_fixture_loop_scope = "function"
+testpaths = ["tests"]
+
+[tool.ruff]
+line-length = 100
+target-version = "py310"
+
+[tool.ruff.lint]
+select = ["E", "F", "I", "UP", "B"]
+ignore = [
+    "B008",  # FastAPI Depends in parameter defaults is idiomatic
+    "E501",  # Line length handled by formatter
+]
+
+[tool.mypy]
+python_version = "3.10"
+strict = true
+warn_return_any = true
+warn_unused_configs = true
+disallow_untyped_defs = true

agentonboard_sdk-0.1.0/scripts/sync-vectors.py

@@ -0,0 +1,40 @@
+#!/usr/bin/env python3
+"""
+Syncs or checks agent-token-v1.json fixture against the canonical AgentOnboard repo.
+"""
+
+import hashlib
+import sys
+from pathlib import Path
+
+CANONICAL_PATH = Path(__file__).resolve().parent.parent.parent / "agentonboard" / "packages" / "sdk" / "vectors" / "agent-token-v1.json"
+LOCAL_FIXTURE_PATH = Path(__file__).resolve().parent.parent / "tests" / "fixtures" / "agent-token-v1.json"
+
+
+def sha256_of(p: Path) -> str:
+    return hashlib.sha256(p.read_bytes()).hexdigest()
+
+
+def main():
+    if not CANONICAL_PATH.exists():
+        print(f"Canonical file not found at {CANONICAL_PATH}; skipping sync check.")
+        return 0
+
+    local_hash = sha256_of(LOCAL_FIXTURE_PATH)
+    canonical_hash = sha256_of(CANONICAL_PATH)
+
+    if local_hash == canonical_hash:
+        print("agent-token-v1.json is in sync with canonical repository.")
+        return 0
+
+    if "--check" in sys.argv:
+        print(f"ERROR: Local fixture {LOCAL_FIXTURE_PATH} differs from {CANONICAL_PATH}!", file=sys.stderr)
+        return 1
+
+    LOCAL_FIXTURE_PATH.write_bytes(CANONICAL_PATH.read_bytes())
+    print("Updated local agent-token-v1.json from canonical source.")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

agentonboard_sdk-0.1.0/src/agentonboard/__init__.py

@@ -0,0 +1,60 @@
+"""
+AgentOnboard Python SDK — Universal identity layer for AI agents.
+"""
+
+from agentonboard.account import (
+    AccountCreator,
+    AccountOutcome,
+    AccountResolver,
+    AgentIdentity,
+    AsyncAccountCreator,
+    AsyncAccountResolver,
+    create_agent_account,
+    create_agent_account_async,
+    normalize_email,
+    verify_agent_account,
+    verify_agent_account_async,
+)
+from agentonboard.codes import (
+    ACCOUNT_ERROR_DESCRIPTIONS,
+    VERIFY_ERROR_DESCRIPTIONS,
+    AccountErrorCode,
+    VerifyErrorCode,
+    status_from_code,
+)
+from agentonboard.verify import (
+    DEFAULT_CLOCK_TOLERANCE_SECONDS,
+    Verifier,
+    VerifyAgentTokenResult,
+    normalize_audience,
+    verify_agent_token,
+    verify_agent_token_async,
+)
+
+__version__ = "0.1.0"
+
+__all__ = [
+    "ACCOUNT_ERROR_DESCRIPTIONS",
+    "AccountCreator",
+    "AccountErrorCode",
+    "AccountOutcome",
+    "AccountResolver",
+    "AgentIdentity",
+    "AsyncAccountCreator",
+    "AsyncAccountResolver",
+    "DEFAULT_CLOCK_TOLERANCE_SECONDS",
+    "VERIFY_ERROR_DESCRIPTIONS",
+    "Verifier",
+    "VerifyAgentTokenResult",
+    "VerifyErrorCode",
+    "__version__",
+    "create_agent_account",
+    "create_agent_account_async",
+    "normalize_audience",
+    "normalize_email",
+    "status_from_code",
+    "verify_agent_account",
+    "verify_agent_account_async",
+    "verify_agent_token",
+    "verify_agent_token_async",
+]