basedagents 0.1.0__tar.gz → 0.1.2__tar.gz

{basedagents-0.1.0 → basedagents-0.1.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: basedagents
-Version: 0.1.0
+Version: 0.1.2
 Summary: Python SDK for basedagents.ai — cryptographic identity and reputation registry for AI agents
 Author: basedagents.ai
 License: MIT

{basedagents-0.1.0 → basedagents-0.1.2}/basedagents/__init__.py

@@ -20,7 +20,7 @@ from .keypair import AgentKeypair, generate as generate_keypair, from_private_ke
 from .client import RegistryClient, BasedAgentsError
 from .auth import build_headers as build_auth_headers
 
-__version__ = "0.1.0"
+__version__ = "0.1.2"
 __all__ = [
     "AgentKeypair",
     "RegistryClient",

{basedagents-0.1.0 → basedagents-0.1.2}/basedagents/auth.py

@@ -36,7 +36,7 @@ def build_headers(
     Returns:
         Dict with 'Authorization' and 'X-Timestamp' headers.
     """
-    ts = timestamp or int(time.time())
+    ts = timestamp if timestamp is not None else int(time.time())
 
     if body is None:
         body_bytes = b""

{basedagents-0.1.0 → basedagents-0.1.2}/basedagents/cli.py

@@ -14,7 +14,7 @@ import sys
 from pathlib import Path
 
 API_URL = "https://api.basedagents.ai"
-VERSION = "0.1.0"
+VERSION = "0.1.2"
 
 
 def _print_err(msg: str) -> None:
@@ -72,6 +72,9 @@ def cmd_register(args: list[str]) -> None:
     if "--api" in args:
         idx = args.index("--api")
         api_url = args[idx + 1]
+        if not api_url.startswith("https://") and not api_url.startswith("http://localhost") and not api_url.startswith("http://127.0.0.1"):
+            _print_err(f"--api must use https:// (got {api_url!r}). AgentSig credentials must not be sent over plaintext.\nLocal development exception: http://localhost and http://127.0.0.1 are allowed.")
+            sys.exit(1)
 
     dry_run = "--dry-run" in args
 

{basedagents-0.1.0 → basedagents-0.1.2}/basedagents/client.py

@@ -5,6 +5,7 @@ from __future__ import annotations
 
 import base64
 import json
+import os
 import uuid
 from typing import Any, Callable
 
@@ -14,7 +15,10 @@ from .auth import build_headers
 from .keypair import AgentKeypair
 from .pow import solve
 
-DEFAULT_API_URL = "https://api.basedagents.ai"
+_DEFAULT_BASE = "https://api.basedagents.ai"
+# Allow override via env var — use staging URL during tests/development,
+# never point tests at production.
+DEFAULT_API_URL = os.environ.get("BASEDAGENTS_API", _DEFAULT_BASE)
 
 
 class BasedAgentsError(Exception):
@@ -109,6 +113,10 @@ class RegistryClient:
         challenge_id: str = init["challenge_id"]
 
         # Step 2: Solve PoW (difficulty from server — never hardcoded)
+        # Cap difficulty to prevent a malicious/MitM server from exhausting the nonce space
+        MAX_DIFFICULTY = 28
+        if difficulty > MAX_DIFFICULTY:
+            raise BasedAgentsError(0, f"Server requested PoW difficulty {difficulty} which exceeds client cap ({MAX_DIFFICULTY}). Aborting.")
         nonce = solve(keypair.public_key_bytes, difficulty, on_progress=on_progress)
 
         # Step 3: Sign challenge
@@ -171,16 +179,17 @@ class RegistryClient:
         return self._get(f"/v1/agents/search?{urlencode(params)}")
 
     def whois(self, name: str) -> dict[str, Any] | None:
-        """Look up an agent by name. Returns None if not found."""
-        result = self.search(q=name, limit=1)
+        """Look up an agent by exact name (case-insensitive). Returns None if not found.
+
+        Does NOT return partial/fuzzy matches — a squatter with a similar name
+        will not be returned instead of None.
+        """
+        result = self.search(q=name, limit=20)
         agents = result.get("agents", [])
-        if not agents:
-            return None
-        # Exact name match (case-insensitive)
         for agent in agents:
             if agent.get("name", "").lower() == name.lower():
                 return agent
-        return agents[0]
+        return None
 
     # ── Verification ──
 
@@ -214,7 +223,10 @@ class RegistryClient:
 
         nonce = str(uuid.uuid4())
 
-        # Build the signed payload (subset — no structured_report)
+        # Build the signed payload (subset — no structured_report).
+        # Note: structured_report is intentionally excluded from the inner Ed25519 signature.
+        # This mirrors the server's verification protocol (verify.ts line ~139).
+        # structured_report is protected by the outer AgentSig header on the HTTP request.
         signed_fields: dict[str, Any] = {
             "assignment_id": assignment_id,
             "target_id": target_id,

{basedagents-0.1.0 → basedagents-0.1.2}/basedagents/keypair.py

@@ -69,10 +69,22 @@ class AgentKeypair:
         }
 
     def save(self, path: Path) -> None:
-        """Save keypair to a JSON file with mode 600."""
-        path.parent.mkdir(parents=True, exist_ok=True)
-        path.write_text(json.dumps(self.to_dict(), indent=2))
-        os.chmod(path, 0o600)
+        """Save keypair to a JSON file.
+
+        The keys directory is created 0o700 (owner-only).
+        The file is opened with O_CREAT|O_TRUNC and mode 0o600 atomically —
+        no window where the plaintext key is world-readable.
+        """
+        path.parent.mkdir(parents=True, exist_ok=True, mode=0o700)
+        # Ensure the dir itself is 0o700 even if it pre-existed
+        os.chmod(path.parent, 0o700)
+        data = json.dumps(self.to_dict(), indent=2).encode()
+        # Atomic create with correct mode — no chmod-after-write race
+        fd = os.open(path, os.O_WRONLY | os.O_CREAT | os.O_TRUNC, 0o600)
+        try:
+            os.write(fd, data)
+        finally:
+            os.close(fd)
 
     @classmethod
     def load(cls, path: Path) -> "AgentKeypair":

{basedagents-0.1.0 → basedagents-0.1.2}/basedagents.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: basedagents
-Version: 0.1.0
+Version: 0.1.2
 Summary: Python SDK for basedagents.ai — cryptographic identity and reputation registry for AI agents
 Author: basedagents.ai
 License: MIT

{basedagents-0.1.0 → basedagents-0.1.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "basedagents"
-version = "0.1.0"
+version = "0.1.2"
 description = "Python SDK for basedagents.ai — cryptographic identity and reputation registry for AI agents"
 readme = "README.md"
 license = { text = "MIT" }