agentshim 0.15.7__tar.gz → 0.17.0__tar.gz

{agentshim-0.15.7 → agentshim-0.17.0}/CHANGELOG.md

@@ -1,5 +1,53 @@
 # Changelog
 
+## 0.17.0 (2026-10-15)
+
+### Added
+
+- `host_auth_plan(profile, env=, home=)` returns the `AuthPlan` that reproduces how the
+  CLI logs in by itself on a host: the first present credential source of any kind, plus
+  the host's endpoint variables exactly as set, so a confined copy given only the plan
+  sends the same credential to the same place. A host base URL is reproduced, not
+  validated, and a credential goes to the host's endpoint whatever its kind (Claude Code
+  sends `CLAUDE_CODE_OAUTH_TOKEN` to a custom `ANTHROPIC_BASE_URL`). It raises
+  `HostAuthUnplannableError`, whose `reason` (`HostAuthGap`) is `UNCLASSIFIED`,
+  `NO_CREDENTIAL`, `EXTERNAL_CREDENTIAL` or `SETTINGS_ENV`, when no plan can reproduce
+  the host's login.
+- `ExternalCredential`, a `CredentialSource` for a way the CLI logs in that no plan can
+  hand over, detected by variables, paths or settings keys. Claude declares a cloud
+  provider (`CLAUDE_CODE_USE_BEDROCK`, `_VERTEX`, `_FOUNDRY`), `apiKeyHelper`, and
+  Anthropic profiles at their documented places in its precedence; Gemini declares an
+  auth type selected in settings or by variable, and `.gemini/.env`.
+- `ProviderProfile.settings` (`SettingsSpec`): the settings files a CLI reads at start
+  that can change how it logs in, and the key of the block it applies over its
+  environment (Claude's `env`).
+
+### Changed
+
+- `CredentialSource` is now `EnvCredential | FileCredential | ExternalCredential`;
+  code that matched on two variants must handle the third. `plan_auth` never chooses an
+  `ExternalCredential` and names a present one in `AuthPlan.withheld`.
+
+## 0.16.0 (2026-10-14)
+
+### Added
+
+- `plan_auth(profile, AuthPolicy, env=, home=)` chooses the one credential a CLI logs in
+  with and returns an `AuthPlan`: the exact variables and files to hand it, and the names
+  of the credentials it withheld. `AuthPolicy` names the allowed `CredentialKind`s
+  (`API_KEY`, `SUBSCRIPTION`) and an optional endpoint; with no endpoint, a base URL in
+  the environment is withheld. `AuthUnavailableError` names what is missing.
+- `ProviderProfile.credential_sources` (`EnvCredential`, `FileCredential`, in the CLI's
+  precedence order) and `ProviderProfile.endpoint` (`EndpointSpec`) declare each CLI's
+  credentials as data. opencode declares none, so no policy can be enforced for it.
+- `ProviderStatus.credential`: the kind of credential the CLI reports it is using (Claude
+  from `claude auth status`'s `authMethod`, Codex from `codex login status`), or `None`.
+
+### Changed
+
+- `auth_env_vars` lists `CLAUDE_CODE_OAUTH_TOKEN` (claude) and `CODEX_API_KEY` (codex),
+  which the CLIs and their readiness probes already honoured.
+
 ## 0.15.7 (2026-10-09)
 
 ### Added

{agentshim-0.15.7 → agentshim-0.17.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: agentshim
-Version: 0.15.7
+Version: 0.17.0
 Summary: Provider-agnostic coding-agent CLI shims
 License-Expression: MIT
 License-File: LICENSE

{agentshim-0.15.7 → agentshim-0.17.0}/agentshim/__init__.py

@@ -15,7 +15,10 @@ from .core import (
     ApprovalPolicy,
     ArgvContext,
     AssistantText,
+    AuthPlan,
+    AuthPolicy,
     AuthState,
+    AuthUnavailableError,
     Checkpoint,
     CheckpointStore,
     CliCheckError,
@@ -32,9 +35,17 @@ from .core import (
     ContinuityError,
     Conversation,
     ConversationSpec,
+    CredentialKind,
+    CredentialSource,
+    EndpointSpec,
+    EnvCredential,
     EventHandlerBase,
+    ExternalCredential,
     FailureKind,
+    FileCredential,
     FlagsInstallation,
+    HostAuthGap,
+    HostAuthUnplannableError,
     HttpMcpServer,
     IdAllocator,
     InMemoryCheckpointStore,
@@ -80,12 +91,14 @@ from .core import (
     SessionStarted,
     SessionState,
     SessionStateError,
+    SettingsSpec,
     SkillInvoked,
     SkillScope,
     SkillsDiscovered,
     SkillSignal,
     SkillSummary,
     SkillTracker,
+    StagedCredentialFile,
     Stderr,
     StdioMcpServer,
     SteerableConversation,
@@ -114,12 +127,14 @@ from .core import (
     cost_usd,
     default_pricing,
     dialect_problems,
+    host_auth_plan,
     install_config_file,
     interactive_env,
     materialize,
     normalize,
     normalized_usage,
     parse_json_object,
+    plan_auth,
     prepare_config_home,
     price_for,
 )
@@ -156,7 +171,7 @@ from .providers.opencode import OpencodeProvider
 from .runtime import Agent
 from .session import Session, Turn, TurnTicket, map_mcp_servers
 
-__version__ = "0.15.7"
+__version__ = "0.17.0"
 
 __all__ = [
     "Agent",
@@ -168,7 +183,10 @@ __all__ = [
     "ApprovalPolicy",
     "ArgvContext",
     "AssistantText",
+    "AuthPlan",
+    "AuthPolicy",
     "AuthState",
+    "AuthUnavailableError",
     "CallbackCommandStreamSink",
     "Checkpoint",
     "CheckpointStore",
@@ -200,11 +218,19 @@ __all__ = [
     "Conversation",
     "ConversationSpec",
     "CopilotProvider",
+    "CredentialKind",
+    "CredentialSource",
     "DockerExecConfinement",
+    "EndpointSpec",
+    "EnvCredential",
     "EventHandlerBase",
+    "ExternalCredential",
     "FailureKind",
+    "FileCredential",
     "FlagsInstallation",
     "GeminiProvider",
+    "HostAuthGap",
+    "HostAuthUnplannableError",
     "HostCommandExecutor",
     "HostProcess",
     "HttpMcpServer",
@@ -260,6 +286,7 @@ __all__ = [
     "SessionStarted",
     "SessionState",
     "SessionStateError",
+    "SettingsSpec",
     "SkillInvoked",
     "SkillScope",
     "SkillSignal",
@@ -267,6 +294,7 @@ __all__ = [
     "SkillTracker",
     "SkillsDiscovered",
     "SpawnRequest",
+    "StagedCredentialFile",
     "Stderr",
     "StderrLine",
     "StdioMcpServer",
@@ -303,6 +331,7 @@ __all__ = [
     "default_pricing",
     "dialect_problems",
     "get_provider",
+    "host_auth_plan",
     "install_config_file",
     "interactive_env",
     "map_mcp_servers",
@@ -310,6 +339,7 @@ __all__ = [
     "normalize",
     "normalized_usage",
     "parse_json_object",
+    "plan_auth",
     "prepare_config_home",
     "price_for",
     "probe_provider",

{agentshim-0.15.7 → agentshim-0.17.0}/agentshim/core/__init__.py

@@ -7,6 +7,23 @@ this package may not do.
 
 from __future__ import annotations
 
+from .auth import (
+    AuthPlan,
+    AuthPolicy,
+    AuthUnavailableError,
+    CredentialKind,
+    CredentialSource,
+    EndpointSpec,
+    EnvCredential,
+    ExternalCredential,
+    FileCredential,
+    HostAuthGap,
+    HostAuthUnplannableError,
+    SettingsSpec,
+    StagedCredentialFile,
+    host_auth_plan,
+    plan_auth,
+)
 from .checkpoints import Checkpoint, CheckpointStore, InMemoryCheckpointStore
 from .clock import Clock, StopSignal, SystemClock
 from .conversation import (
@@ -116,7 +133,10 @@ __all__ = [
     "ApprovalPolicy",
     "ArgvContext",
     "AssistantText",
+    "AuthPlan",
+    "AuthPolicy",
     "AuthState",
+    "AuthUnavailableError",
     "Checkpoint",
     "CheckpointStore",
     "CliCheckError",
@@ -133,9 +153,17 @@ __all__ = [
     "ContinuityError",
     "Conversation",
     "ConversationSpec",
+    "CredentialKind",
+    "CredentialSource",
+    "EndpointSpec",
+    "EnvCredential",
     "EventHandlerBase",
+    "ExternalCredential",
     "FailureKind",
+    "FileCredential",
     "FlagsInstallation",
+    "HostAuthGap",
+    "HostAuthUnplannableError",
     "HttpMcpServer",
     "IdAllocator",
     "InMemoryCheckpointStore",
@@ -181,12 +209,14 @@ __all__ = [
     "SessionStarted",
     "SessionState",
     "SessionStateError",
+    "SettingsSpec",
     "SkillInvoked",
     "SkillScope",
     "SkillSignal",
     "SkillSummary",
     "SkillTracker",
     "SkillsDiscovered",
+    "StagedCredentialFile",
     "Stderr",
     "StdioMcpServer",
     "SteerConsumed",
@@ -215,12 +245,14 @@ __all__ = [
     "cost_usd",
     "default_pricing",
     "dialect_problems",
+    "host_auth_plan",
     "install_config_file",
     "interactive_env",
     "materialize",
     "normalize",
     "normalized_usage",
     "parse_json_object",
+    "plan_auth",
     "prepare_config_home",
     "price_for",
 ]