authyouragent 0.3.2__tar.gz → 0.3.4__tar.gz

{authyouragent-0.3.2 → authyouragent-0.3.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: authyouragent
-Version: 0.3.2
+Version: 0.3.4
 Summary: Auth Your Agent SDK: let AI agents act for a user on websites, with the user's approval on their phone.
 License: MIT
 Project-URL: Homepage, https://authyouragent.com
@@ -40,7 +40,9 @@ authyouragent vault up --agent-id ag_xxxxx --key /path/to/agent-key.pem
 
 `vault up` starts the browser vault: the browser your agent uses, in a
 container on your machine. The agent drives it through the vault and never
-gets its cookies. It prints the `env` block for your MCP client. See
+gets its cookies. It prints the `env` block for your MCP client. If you skip
+it, the MCP server starts the vault itself the first time the agent needs the
+browser (`AYA_VAULT_AUTOSTART=0` turns that off). See
 [vault/README.md](https://github.com/kjames2001/authyouragent/blob/main/vault/README.md)
 for what protects what, and the known limits.
 
@@ -50,8 +52,9 @@ For just the SDK (no browser, no MCP): `pip install authyouragent`.
 
 The `authyouragent-mcp` command starts an MCP server with eleven tools:
 
-- **Browser:** `navigate`, `click`, `type_text`, `read_page`. Clicks that
-  submit, send, delete, pay or publish wait for your approval on your phone.
+- **Browser:** `navigate`, `click`, `type_text`, `read_page`. Only public
+  websites open. Clicks that submit a form, or whose button says create, send,
+  save, delete, pay and the like, wait for your approval on your phone.
 - **`check_login_wall`**: is the page asking for a password, a code or a
   sign-in approval?
 - **`request_takeover`** / **`wait_for_takeover`**: you take over the browser

{authyouragent-0.3.2 → authyouragent-0.3.4}/README.md

@@ -22,7 +22,9 @@ authyouragent vault up --agent-id ag_xxxxx --key /path/to/agent-key.pem
 
 `vault up` starts the browser vault: the browser your agent uses, in a
 container on your machine. The agent drives it through the vault and never
-gets its cookies. It prints the `env` block for your MCP client. See
+gets its cookies. It prints the `env` block for your MCP client. If you skip
+it, the MCP server starts the vault itself the first time the agent needs the
+browser (`AYA_VAULT_AUTOSTART=0` turns that off). See
 [vault/README.md](https://github.com/kjames2001/authyouragent/blob/main/vault/README.md)
 for what protects what, and the known limits.
 
@@ -32,8 +34,9 @@ For just the SDK (no browser, no MCP): `pip install authyouragent`.
 
 The `authyouragent-mcp` command starts an MCP server with eleven tools:
 
-- **Browser:** `navigate`, `click`, `type_text`, `read_page`. Clicks that
-  submit, send, delete, pay or publish wait for your approval on your phone.
+- **Browser:** `navigate`, `click`, `type_text`, `read_page`. Only public
+  websites open. Clicks that submit a form, or whose button says create, send,
+  save, delete, pay and the like, wait for your approval on your phone.
 - **`check_login_wall`**: is the page asking for a password, a code or a
   sign-in approval?
 - **`request_takeover`** / **`wait_for_takeover`**: you take over the browser

{authyouragent-0.3.2 → authyouragent-0.3.4}/authyouragent/__init__.py

@@ -30,5 +30,5 @@ from .site import SiteVerifier, AuthError, Auth
 
 __all__ = ["AgentClient", "AgentError", "keygen", "agent_jwk",
            "SiteVerifier", "AuthError", "Auth"]
-__version__ = "0.3.2"
+__version__ = "0.3.4"
 DEFAULT_CLOUD = "https://authyouragent.com"

{authyouragent-0.3.2 → authyouragent-0.3.4}/authyouragent/mcp_server.py

@@ -17,6 +17,8 @@ Environment:
   AYA_CLOUD             default https://authyouragent.com
   AYA_VAULT_URL         the vault broker (default http://127.0.0.1:7801)
   AYA_VAULT_TOKEN_FILE  file holding the vault's bearer token (or AYA_VAULT_TOKEN)
+  AYA_VAULT_AUTOSTART   default 1: start the local vault (Docker) on first use if
+                        it is not running. Set 0 to manage it with `authyouragent vault`.
 
 Tools: navigate, click, type_text, read_page, check_login_wall, request_takeover,
        wait_for_takeover, request_approval, end_session, check_agent_status,
@@ -30,6 +32,8 @@ import os
 import re
 import sys
 import time
+from pathlib import Path
+from urllib.parse import urlparse
 
 import httpx
 
@@ -44,11 +48,13 @@ DEFAULT_CLOUD = "https://authyouragent.com"
 WAIT_DEFAULT = 240          # stay under common MCP client call timeouts (300s)
 WAIT_MAX = 290
 HEARTBEAT_S = 20
+AUTOSTART_WAIT = 120        # the first start downloads the image (~500 MB)
 
 mcp = FastMCP("authyouragent")
 _agent = None
 _vault = None
 _hb = None
+_starting = None            # the background task starting the vault, if any
 
 
 def _log(*a):
@@ -67,6 +73,46 @@ def _get_agent():
     return _agent
 
 
+class NoVaultToken(RuntimeError):
+    pass
+
+
+def _autostart_ok():
+    """Start the vault ourselves only when it is the local one `vault up` would
+    create: default address, and the token file it writes (or none set)."""
+    if os.environ.get("AYA_VAULT_AUTOSTART", "1").strip().lower() in ("0", "false", "no", "off"):
+        return False
+    if os.environ.get("AYA_VAULT_TOKEN"):
+        return False
+    u = urlparse(os.environ.get("AYA_VAULT_URL", "http://127.0.0.1:7801"))
+    if u.hostname not in ("127.0.0.1", "localhost") or u.port != 7801:
+        return False
+    from . import vault_cli
+    tf = os.environ.get("AYA_VAULT_TOKEN_FILE")
+    return not tf or Path(tf).expanduser().resolve() == (vault_cli.HOME / "token").resolve()
+
+
+async def _ensure_vault():
+    """Start the local vault in the background and wait for it, up to
+    AUTOSTART_WAIT. If it is still starting, say so; the next call waits again."""
+    global _starting, _vault
+    from . import vault_cli
+    if _starting is None or (_starting.done() and (_starting.cancelled() or _starting.exception())):
+        _log("the browser vault is not running: starting it")
+        _starting = asyncio.create_task(asyncio.to_thread(
+            vault_cli.start, os.environ.get("AYA_AGENT_ID"), os.environ.get("AYA_KEY_FILE"),
+            cloud=os.environ.get("AYA_CLOUD", DEFAULT_CLOUD), log=_log))
+    done, _ = await asyncio.wait({_starting}, timeout=AUTOSTART_WAIT)
+    if not done:
+        raise RuntimeError("the browser vault is starting (the first start downloads about 500 MB). "
+                           "Call the tool again in a minute.")
+    if _starting.exception():
+        raise RuntimeError(f"could not start the browser vault: {_starting.exception()}")
+    if _vault is not None:          # the token may be new: connect again
+        await _vault.aclose()
+        _vault = None
+
+
 def _vault_client():
     global _vault
     if _vault is None:
@@ -79,7 +125,7 @@ def _vault_client():
             if os.path.exists(default):
                 token = open(default).read().strip()
         if not token:
-            raise RuntimeError("no vault token: run `authyouragent vault up`, or set AYA_VAULT_TOKEN_FILE")
+            raise NoVaultToken("no vault token: run `authyouragent vault up`, or set AYA_VAULT_TOKEN_FILE")
         _vault = httpx.AsyncClient(base_url=os.environ.get("AYA_VAULT_URL", "http://127.0.0.1:7801"),
                                    headers={"Authorization": f"Bearer {token}"},
                                    timeout=httpx.Timeout(60, read=WAIT_MAX + 30))
@@ -101,10 +147,21 @@ async def _call(method, path, **kw):
     global _hb
     if _hb is None or _hb.done():
         _hb = asyncio.create_task(_heartbeat())
-    try:
-        r = await _vault_client().request(method, path, **kw)
-    except httpx.HTTPError as e:
-        raise RuntimeError(f"cannot reach the browser vault ({type(e).__name__}); is it running?")
+    if _starting is not None and not _starting.done():
+        await _ensure_vault()       # a start is under way: wait for it, never race it
+    for attempt in (1, 2):
+        try:
+            r = await _vault_client().request(method, path, **kw)
+            break
+        except (httpx.ConnectError, NoVaultToken) as e:
+            if attempt == 2 or not _autostart_ok():
+                if isinstance(e, NoVaultToken):
+                    raise
+                raise RuntimeError("cannot reach the browser vault (not running). "
+                                   "Start it with `authyouragent vault up`.")
+            await _ensure_vault()
+        except httpx.HTTPError as e:
+            raise RuntimeError(f"cannot reach the browser vault ({type(e).__name__}); is it running?")
     data = r.json()
     if r.status_code == 409:
         raise RuntimeError(data.get("detail", "busy"))

{authyouragent-0.3.2 → authyouragent-0.3.4}/authyouragent/vault_cli.py

@@ -34,9 +34,12 @@ PORT = 7801
 VAULT_UID = 10001
 
 
+class VaultError(RuntimeError):
+    """Starting or reaching the vault failed; the message says why."""
+
+
 def _die(msg) -> NoReturn:
-    print(f"authyouragent vault: {msg}", file=sys.stderr)
-    sys.exit(1)
+    raise VaultError(msg)
 
 
 def _docker(*args, check=True, capture=True):
@@ -118,37 +121,57 @@ def _wait_ready(token, seconds=60):
     return False
 
 
-def up(a):
-    agent_id = a.agent_id or os.environ.get("AYA_AGENT_ID")
-    key = a.key or os.environ.get("AYA_KEY_FILE")
+def start(agent_id, key, cloud="https://authyouragent.com", image=IMAGE, gvisor="auto",
+          size="412x860", scale="2", pull=True, log=None):
+    """Start the vault, or wait for it if its container is already running.
+    Returns "started" or "running". Raises VaultError. Used by `vault up` and
+    by the MCP server when the vault is needed and not running; `log` gets
+    progress lines (the MCP server sends them to stderr, never stdout)."""
+    log = log or (lambda *a: None)
     if not agent_id or not key:
         _die("need --agent-id and --key (or AYA_AGENT_ID / AYA_KEY_FILE)")
     if _running():
-        print(f"already running ({NAME}). `authyouragent vault down` first to restart.")
-        return
+        # e.g. Docker is restarting it after a reboot: give it time to come up
+        if not _wait_ready(_token()):
+            _die(f"the vault container is running but not answering; see `docker logs {NAME}`")
+        return "running"
     _docker("rm", "-f", NAME, check=False)
     token = _token()
-    gvisor = {"auto": _has_gvisor(), "on": True, "off": False}[a.gvisor]
-    if a.gvisor == "on" and not _has_gvisor():
+    use_gvisor = {"auto": _has_gvisor(), "on": True, "off": False}[gvisor]
+    if gvisor == "on" and not _has_gvisor():
         _die("--gvisor on, but Docker has no 'runsc' runtime. See https://gvisor.dev/docs/user_guide/install/")
-    if not a.no_pull:
-        print(f"pulling {a.image} ...")
-        _docker("pull", "-q", a.image)
+    if pull:
+        log(f"pulling {image} ...")
+        r = _docker("pull", "-q", image, check=False)
+        if r.returncode != 0:
+            if _docker("image", "inspect", image, check=False).returncode != 0:
+                _die(f"docker pull failed: {(r.stderr or r.stdout).strip()[:400]}")
+            log("pull failed; using the copy already on this machine")
     args = ["run", "-d", "--name", NAME, "--restart", "unless-stopped",
             "--shm-size=1g", "--stop-timeout", "120",
             "--security-opt", f"seccomp={_seccomp()}",
             "--security-opt", "no-new-privileges", "--cap-drop", "ALL",
             "-e", f"VAULT_TOKEN={token}", "-e", f"AYA_AGENT_ID={agent_id}",
-            "-e", f"AYA_CLOUD={a.cloud}", "-e", f"VAULT_SIZE={a.size}", "-e", f"VAULT_SCALE={a.scale}",
+            "-e", f"AYA_CLOUD={cloud}", "-e", f"VAULT_SIZE={size}", "-e", f"VAULT_SCALE={scale}",
             "-v", f"{_key_copy(key)}:/run/secrets/agent.pem:ro",
             "-v", f"{_state_dir()}:/var/lib/vault",
             "-p", f"127.0.0.1:{PORT}:{PORT}"]
-    if gvisor:
+    if use_gvisor:
         args += ["--runtime", "runsc"]
-    _docker(*args, a.image)
+    _docker(*args, image)
     if not _wait_ready(token):
         _die(f"started but not answering; see `docker logs {NAME}`")
-    print(f"vault running on 127.0.0.1:{PORT}  (browser sandbox: on, gVisor: {'on' if gvisor else 'off'})")
+    log(f"vault running on 127.0.0.1:{PORT}  (browser sandbox: on, gVisor: {'on' if use_gvisor else 'off'})")
+    return "started"
+
+
+def up(a):
+    if _running():
+        print(f"already running ({NAME}). `authyouragent vault down` first to restart.")
+        return
+    start(a.agent_id or os.environ.get("AYA_AGENT_ID"), a.key or os.environ.get("AYA_KEY_FILE"),
+          cloud=a.cloud, image=a.image, gvisor=a.gvisor, size=a.size, scale=a.scale,
+          pull=not a.no_pull, log=print)
     print("MCP server env:")
     env(a, quiet=True)
 
@@ -210,5 +233,8 @@ def main(argv=None):
     a = ap.parse_args(argv)
     try:
         a.fn(a)
+    except VaultError as e:
+        print(f"authyouragent vault: {e}", file=sys.stderr)
+        sys.exit(1)
     except BrokenPipeError:        # output piped into e.g. `head`
         pass

{authyouragent-0.3.2 → authyouragent-0.3.4}/authyouragent.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: authyouragent
-Version: 0.3.2
+Version: 0.3.4
 Summary: Auth Your Agent SDK: let AI agents act for a user on websites, with the user's approval on their phone.
 License: MIT
 Project-URL: Homepage, https://authyouragent.com
@@ -40,7 +40,9 @@ authyouragent vault up --agent-id ag_xxxxx --key /path/to/agent-key.pem
 
 `vault up` starts the browser vault: the browser your agent uses, in a
 container on your machine. The agent drives it through the vault and never
-gets its cookies. It prints the `env` block for your MCP client. See
+gets its cookies. It prints the `env` block for your MCP client. If you skip
+it, the MCP server starts the vault itself the first time the agent needs the
+browser (`AYA_VAULT_AUTOSTART=0` turns that off). See
 [vault/README.md](https://github.com/kjames2001/authyouragent/blob/main/vault/README.md)
 for what protects what, and the known limits.
 
@@ -50,8 +52,9 @@ For just the SDK (no browser, no MCP): `pip install authyouragent`.
 
 The `authyouragent-mcp` command starts an MCP server with eleven tools:
 
-- **Browser:** `navigate`, `click`, `type_text`, `read_page`. Clicks that
-  submit, send, delete, pay or publish wait for your approval on your phone.
+- **Browser:** `navigate`, `click`, `type_text`, `read_page`. Only public
+  websites open. Clicks that submit a form, or whose button says create, send,
+  save, delete, pay and the like, wait for your approval on your phone.
 - **`check_login_wall`**: is the page asking for a password, a code or a
   sign-in approval?
 - **`request_takeover`** / **`wait_for_takeover`**: you take over the browser

{authyouragent-0.3.2 → authyouragent-0.3.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "authyouragent"
-version = "0.3.2"
+version = "0.3.4"
 description = "Auth Your Agent SDK: let AI agents act for a user on websites, with the user's approval on their phone."
 readme = "README.md"
 requires-python = ">=3.9"