booking-agent-cli 0.2.0__tar.gz → 0.4.0__tar.gz

{booking_agent_cli-0.2.0 → booking_agent_cli-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: booking-agent-cli
-Version: 0.2.0
+Version: 0.4.0
 Summary: The Booking Agent CLI: a stateful USP booking flow with hard gates, plus its USP protocol library.
 Project-URL: Homepage, https://github.com/wix/booking-agent
 Project-URL: Documentation, https://github.com/wix/booking-agent/blob/master/booking-agent/README.md
@@ -27,6 +27,7 @@ Requires-Dist: click>=8.2
 Requires-Dist: cryptography>=42.0
 Requires-Dist: httpx>=0.27
 Requires-Dist: pydantic>=2.6
+Requires-Dist: pypi-attestations>=0.0.30
 Requires-Dist: python-dotenv>=1.0
 Requires-Dist: rich>=13.7
 Requires-Dist: starlette>=0.37
@@ -63,9 +64,31 @@ pipx install booking-agent-cli
 booking-agent --help
 ```
 
-Agents use the CLI through the Booking Agent skill:
+Every release carries a PEP 740 attestation from the `wix/booking-agent` release
+workflow. Check a downloaded wheel with
+`uvx pypi-attestations verify pypi --repository https://github.com/wix/booking-agent <wheel>`.
+`booking-agent update` installs only verified wheels, and the CLI checks its own installed
+files against the attested release before it books or pays.
+
+Agents use the CLI through the Booking Agent skill, installed with
+`npx skills add wix/booking-agent --skill booking-agent`, or taken from the canonical raw URL:
 https://raw.githubusercontent.com/wix/booking-agent/master/booking-agent/skills/booking-agent/SKILL.md
 
+Each release also publishes that skill at an immutable `skill-v<version>` tag and signs it with
+the release workflow, so a harness can pin and verify the exact text it follows:
+
+```bash
+curl -fsSLO https://raw.githubusercontent.com/wix/booking-agent/skill-v0.50.0/booking-agent/skills/booking-agent/SKILL.md
+gh attestation verify SKILL.md --repo wix/booking-agent \
+  --signer-workflow wix/booking-agent/.github/workflows/release.yml
+```
+
+`flow init --skill-path <path>` then checks the file the agent actually loaded against the signed
+copy inside the wheel; a modified file claiming the same version fails `skill_unverified` and
+blocks booking and payment until `booking-agent skill print --output <path>` restores it. A copy
+written to evade the check can omit `--skill-path`, so the first read is what the attestation and
+the harness cover.
+
 The skill also needs `link-cli` for buyer identity and payment approval; see the
 skill for details.
 

booking_agent_cli-0.4.0/README.md

@@ -0,0 +1,57 @@
+# booking-agent-cli
+
+The `booking-agent` command books time-based services (haircuts, lessons,
+repairs, classes, appointments) through the Universal Scheduling Protocol (USP),
+paying from a Link wallet. It owns the booking state machine and refuses to
+proceed when a human approval gate is skipped, so an AI agent can drive it safely.
+
+The wheel ships two import packages:
+
+- `booking_agent_cli` - the `booking-agent` command
+- `booking_agent` - the USP/UCP protocol library (models, discovery, REST client)
+
+## Install
+
+Requires Python 3.10 or newer.
+
+```bash
+uv tool install booking-agent-cli
+# or
+pipx install booking-agent-cli
+
+booking-agent --help
+```
+
+Every release carries a PEP 740 attestation from the `wix/booking-agent` release
+workflow. Check a downloaded wheel with
+`uvx pypi-attestations verify pypi --repository https://github.com/wix/booking-agent <wheel>`.
+`booking-agent update` installs only verified wheels, and the CLI checks its own installed
+files against the attested release before it books or pays.
+
+Agents use the CLI through the Booking Agent skill, installed with
+`npx skills add wix/booking-agent --skill booking-agent`, or taken from the canonical raw URL:
+https://raw.githubusercontent.com/wix/booking-agent/master/booking-agent/skills/booking-agent/SKILL.md
+
+Each release also publishes that skill at an immutable `skill-v<version>` tag and signs it with
+the release workflow, so a harness can pin and verify the exact text it follows:
+
+```bash
+curl -fsSLO https://raw.githubusercontent.com/wix/booking-agent/skill-v0.50.0/booking-agent/skills/booking-agent/SKILL.md
+gh attestation verify SKILL.md --repo wix/booking-agent \
+  --signer-workflow wix/booking-agent/.github/workflows/release.yml
+```
+
+`flow init --skill-path <path>` then checks the file the agent actually loaded against the signed
+copy inside the wheel; a modified file claiming the same version fails `skill_unverified` and
+blocks booking and payment until `booking-agent skill print --output <path>` restores it. A copy
+written to evade the check can omit `--skill-path`, so the first read is what the attestation and
+the harness cover.
+
+The skill also needs `link-cli` for buyer identity and payment approval; see the
+skill for details.
+
+## Source and license
+
+Source: https://github.com/wix/booking-agent (directory `booking-agent/`).
+Licensed under the Apache License 2.0; see
+https://github.com/wix/booking-agent/blob/master/LICENSE.

{booking_agent_cli-0.2.0 → booking_agent_cli-0.4.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "booking-agent-cli"
-version = "0.2.0"
+version = "0.4.0"
 description = "The Booking Agent CLI: a stateful USP booking flow with hard gates, plus its USP protocol library."
 readme = "README.md"
 license = "Apache-2.0"
@@ -28,6 +28,8 @@ dependencies = [
     "cryptography>=42.0",
     "httpx>=0.27",
     "pydantic>=2.6",
+    # PEP 740 provenance checks before an update installs and on first run (provenance.py).
+    "pypi-attestations>=0.0.30",
     "python-dotenv>=1.0",
     "rich>=13.7",
     "starlette>=0.37",

{booking_agent_cli-0.2.0 → booking_agent_cli-0.4.0}/src/booking_agent/__init__.py

@@ -3,4 +3,4 @@
 Ships in the booking-agent-cli wheel and never imports ``booking_agent_cli``.
 """
 
-__version__ = "0.2.0"
+__version__ = "0.4.0"

{booking_agent_cli-0.2.0 → booking_agent_cli-0.4.0}/src/booking_agent_cli/__init__.py

@@ -1,3 +1,3 @@
 """booking_agent_cli: typer-based stateful CLI for USP booking flows."""
 
-__version__ = "0.2.0"
+__version__ = "0.4.0"

booking_agent_cli-0.2.0/src/booking_agent_cli/SKILL.md → booking_agent_cli-0.4.0/src/booking_agent_cli/bundled_skill.md

@@ -1,5 +1,5 @@
 ---
-version: 0.48.0
+version: 0.50.0
 name: booking-agent
 description: |
   Books time-based services via USP from a Link wallet. Use when the user wants to book, schedule, reserve, or pay for a service from a business (haircut, lesson, repair, class, appointment, consult). The `booking-agent` CLI owns the booking state machine and refuses to proceed when human gates are skipped. Sign the user in to Link on your own, right after install and at the start of every booking (`booking-agent flow link-auth connect`, then start `booking-agent flow link-auth poll` in the background and post the sign-in URL in the same turn, exactly like `pay poll`); never wait for the user to ask to sign in or to say they approved. After `booking-agent flow business use`, follow `next_command` through `use-ucp-checkout-mode`; businesses without native checkout fail closed. Payment uses `booking-agent flow pay request` (default returns immediately with the approval URL), then start `booking-agent flow pay poll` in the background and post the approval URL to the user in the same turn; the poll finishes checkout once they approve. Confirm through `booking-agent flow book poll --wait`; never start an inbound webhook. Surface the approval URL exactly once. Personal identification (name, phone, email, address) must always come from the user's Link account via `link-cli`, never from chat or placeholders. Before any location-based search, the CLI proposes the Link shipping address and the user confirms it or gives another; online services skip this. Talk to the user in plain everyday language only; never expose CLI, UCP, auth, session, or other implementation details unless they explicitly ask.
@@ -18,8 +18,8 @@ metadata:
         - booking-agent
         - link-cli
     install:
-      - kind: python
-        package: booking-agent-cli
+      - kind: uv
+        package: "booking-agent-cli==0.4.0"
         bins: [booking-agent]
 user-invocable: true
 ---
@@ -208,18 +208,27 @@ Only then may you use terms like CLI, UCP, or session. Keep explanations brief.
 
 ## Installing
 
-Install the `booking-agent` CLI from PyPI (package `booking-agent-cli`) with either command:
+Install the `booking-agent` CLI release this skill was written for (package `booking-agent-cli` on
+PyPI). Every release is signed by the official release workflow (PEP 740), so check the signature
+before installing:
 
 ```bash
-uv tool install booking-agent-cli
-# or
-pipx install booking-agent-cli
+dir="$HOME/.booking-agent/verified-wheels"
+uvx pip download "booking-agent-cli==0.4.0" --no-deps --only-binary :all: -d "$dir"
+uvx pypi-attestations==0.0.30 verify pypi --repository https://github.com/wix/booking-agent \
+  "$dir/booking_agent_cli-0.4.0-py3-none-any.whl"
+uv tool install --force "$dir/booking_agent_cli-0.4.0-py3-none-any.whl"
 
 booking-agent --help
 ```
 
+Install only when the verify step passes. If `uvx` is not available, install the same pinned
+release with `uv tool install booking-agent-cli==0.4.0` or `pipx install booking-agent-cli==0.4.0`;
+the CLI checks its own files against the signed release on the first `booking-agent flow init`
+and refuses to book or pay if they do not match.
+
 Harnesses that read the `install` block in this skill's metadata do this for you. If
-`booking-agent --help` still does not run, run one of the commands above yourself; if that is not
+`booking-agent --help` still does not run, run the commands above yourself; if that is not
 possible in this runtime, ask the user to install the skill, then try again. To develop the CLI from
 a checkout instead, see the [Booking Agent README](https://github.com/wix/booking-agent/blob/master/booking-agent/README.md).
 
@@ -248,11 +257,37 @@ for each extra cache folder the runtime asks you to keep (a relative persistent
 under the root). When the runtime keeps its files anyway, or offers no surviving folder, skip the
 command. Do not tell the user about it. If it fails, continue the booking without it.
 
+### This skill file
+
+Harnesses install this file with:
+
+```bash
+npx skills add wix/booking-agent --skill booking-agent
+```
+
+That always takes the latest skill. To take a fixed, published version instead, fetch it at the
+release tag the official workflow signs it under, and check the signature before you follow it:
+
+```bash
+curl -fsSLO https://raw.githubusercontent.com/wix/booking-agent/skill-v0.50.0/booking-agent/skills/booking-agent/SKILL.md
+gh attestation verify SKILL.md \
+  --repo wix/booking-agent \
+  --signer-workflow wix/booking-agent/.github/workflows/release.yml
+```
+
+Follow the file only when the verify step passes. Every release also attaches that same `SKILL.md`
+and its `SKILL.md.sigstore.json` bundle to the GitHub Release, so a runtime without `gh` can verify
+the bundle offline instead.
+
+Then pass the path you loaded this file from on every `flow init` (`--skill-path`, below). The CLI
+compares it with the signed copy inside the installed CLI and refuses to book or pay when a file
+claiming this same version does not match it.
+
 ### Updates (only with the user's yes)
 
 The CLI decides whether a newer version is worth mentioning; you never decide from version
 numbers or release pages. Pass this skill's version on every `flow init` (`--skill-version
-0.48.0`, from the frontmatter above), so the CLI can tell when these instructions and the
+0.50.0`, from the frontmatter above), so the CLI can tell when these instructions and the
 installed CLI no longer match.
 
 - When a command returns `awaiting_user: update_consent`, ask the question in `prompt` in plain
@@ -482,12 +517,17 @@ have it). Do not invent a lookup.
 **Step 1b — Create a new session:**
 
 ```bash
-booking-agent flow init --user-request "<user's exact request>" --skill-version 0.48.0
+booking-agent flow init --user-request "<user's exact request>" --skill-version 0.50.0 \
+  --skill-path "<absolute path of the SKILL.md you loaded>"
 ```
 
 Add `--capability <name>` once for each part of the request that clearly needs it: `calendar`
 (they mention their calendar), `reschedule`, or `cancel`. Leave it out when unsure.
 
+Pass `--skill-path` whenever you know where you loaded this file from, so the CLI can check it
+against the signed copy it ships with. Leave it out when you do not know the path; never guess one
+and never point it at a different file.
+
 - If `init` returns `awaiting_user: update_consent`, no booking was started yet. Follow
   [Updates](#updates-only-with-the-users-yes); after the answer, run `data.continue_command` to
   start the booking.
@@ -1129,7 +1169,7 @@ booking-agent flow calendar create-event
 Once the user has been told they are booked (and after Step 8 when it ran), run:
 
 ```bash
-booking-agent update check --after-booking --skill-version 0.48.0
+booking-agent update check --after-booking --skill-version 0.50.0
 ```
 
 If it returns `awaiting_user: update_consent`, ask once, as in [Updates](#updates-only-with-the-users-yes).
@@ -1247,7 +1287,10 @@ recover.
 | `session_store_too_new` | Saved bookings on this device were written by a newer version of the assistant | Run `next_command` (`booking-agent update check`) and follow it; never delete or edit the saved state |
 | `update_not_confirmed` | `update` ran without `--user-confirmed` | Ask the user first; pass `--user-confirmed` only after they agree |
 | `update_session_in_progress` | `update` ran while a booking is unfinished | Finish or cancel the booking first, then offer the update again |
-| `update_failed` / `update_not_verified` | The update did not install or did not start | Tell the user the update did not take; carry on with the installed version |
+| `update_failed` / `update_not_verified` | The update did not install, did not start, or could not be shown to come from the official release (`data.reason`); nothing unverified is installed | Tell the user the update did not take; carry on with the installed version |
+| `installation_unverified` | The installed CLI files do not match the signed official release, so it will not book or pay | Tell the user in plain words the assistant needs reinstalling; run `data.reinstall_command` only with their yes, then start the booking again. Never book another way |
+| `skill_unverified` | The SKILL.md you loaded does not match the signed skill this CLI was released with, so it will not book or pay | Follow `data.skill_text` from now on. Tell the user plainly that the assistant's instructions file was changed and ask whether to restore the official one; only with their yes run `data.replace_command`, then run `flow init` again with `--skill-path`. Never book another way |
+| `skill_path_invalid` | `--skill-path` named a file that is missing, unreadable, or not a booking-agent SKILL.md | Run `flow init` again with the real path of the file you loaded, or without `--skill-path` if you do not know it |
 | `skill_output_refused` | `skill print --output` named a file that is not the loaded skill | Follow `data.skill_text` from `booking-agent skill print` instead |
 
 ### Notes to the assistant team

{booking_agent_cli-0.2.0 → booking_agent_cli-0.4.0}/src/booking_agent_cli/commands/flow.py

@@ -137,6 +137,8 @@ from ..runtime import (
     resolve_backend,
     resolve_calendar_service,
 )
+from .. import install_integrity
+from .. import skill_integrity
 from .. import reschedule as reschedule_rules
 from .. import timezone_context as tz_context
 from ..activity_log import record_command
@@ -310,6 +312,44 @@ def _emit_booking_create_error(
     return typer.Exit(code=1)
 
 
+def _require_verified_installation(store: Any, phase: str) -> None:
+    """Refuse to go on when the installed files do not match the attested release."""
+    failure = install_integrity.check(store)
+    if failure is not None:
+        emit_error(
+            phase,
+            code=install_integrity.CODE,
+            message=install_integrity.error_message(),
+            data=install_integrity.error_data(failure),
+        )
+        raise typer.Exit(code=1)
+
+
+def _require_verified_skill(store: Any, phase: str, skill_path: Optional[str] = None) -> Optional[str]:
+    """Refuse to go on while the loaded skill file differs from the bundled skill.
+
+    Returns the version the file at ``skill_path`` declares (None without a path).
+    """
+    try:
+        failure, loaded_version = skill_integrity.check(store, skill_path)
+    except ValueError as exc:
+        emit_error(
+            phase,
+            code=skill_integrity.PATH_INVALID_CODE,
+            message=skill_integrity.path_invalid_message(str(exc)),
+        )
+        raise typer.Exit(code=1)
+    if failure is not None:
+        emit_error(
+            phase,
+            code=skill_integrity.CODE,
+            message=skill_integrity.error_message(),
+            data=skill_integrity.error_data(failure),
+        )
+        raise typer.Exit(code=1)
+    return loaded_version
+
+
 # ---------------------------------------------------------------------------
 # init / status
 # ---------------------------------------------------------------------------
@@ -326,12 +366,19 @@ def init(
     skill_version: Optional[str] = typer.Option(
         None, "--skill-version", help="The version in the loaded skill's frontmatter.",
     ),
+    skill_path: Optional[str] = typer.Option(
+        None, "--skill-path",
+        help="The SKILL.md file the skill was loaded from; checked against the signed skill.",
+    ),
     capability: Optional[List[str]] = typer.Option(
         None, "--capability", help="A capability the user's request needs; repeatable.",
     ),
 ) -> None:
     """Initialize a new booking session."""
     store = load_store()
+    # Before the session checks: a skill the agent points us at is checked whatever the
+    # flow state, so a changed file is never masked by session_active.
+    loaded_version = _require_verified_skill(store, "INIT", skill_path)
     active = get_active_session(store)
     if active is not None and active.flow_phase not in TERMINAL_PHASES and not force:
         emit_error(
@@ -346,7 +393,11 @@ def init(
         )
         raise typer.Exit(code=1)
 
-    gate = _update_gate(user_request, skill_version, capability or [], allow_duplicate)
+    _require_verified_installation(store, "INIT")
+
+    gate = _update_gate(
+        user_request, loaded_version or skill_version, capability or [], allow_duplicate, skill_path,
+    )
     if gate is not None:
         emit(gate)
         return
@@ -423,7 +474,11 @@ def init(
 
 
 def _update_gate(
-    user_request: str, skill_version: Optional[str], capabilities: List[str], allow_duplicate: bool,
+    user_request: str,
+    skill_version: Optional[str],
+    capabilities: List[str],
+    allow_duplicate: bool,
+    skill_path: Optional[str] = None,
 ) -> Optional[AgentOutput]:
     """Ask about an update before a session exists, only for a mismatch or a ready release."""
     from . import update as update_cmd
@@ -443,6 +498,8 @@ def _update_gate(
     rerun = f"booking-agent flow init --user-request {shlex.quote(user_request)}"
     if skill_version:
         rerun += f" --skill-version {shlex.quote(skill_version)}"
+    if skill_path:
+        rerun += f" --skill-path {shlex.quote(skill_path)}"
     for c in capabilities:
         rerun += f" --capability {shlex.quote(c)}"
     if allow_duplicate:
@@ -4300,6 +4357,9 @@ def book(
             require_buyer_from_link_cli(session)
     except GateError as e:
         raise _handle_gate(session, e)
+    if not dry_run:
+        _require_verified_installation(load_store(), "BOOKED")
+        _require_verified_skill(load_store(), "BOOKED")
 
     backend = resolve_backend()
 
@@ -4533,6 +4593,12 @@ def book(
 pay_app = typer.Typer(help="Link spend approval and UCP checkout completion.")
 app.add_typer(pay_app, name="pay")
 
+
+@pay_app.callback()
+def _pay_requires_verified_installation() -> None:
+    _require_verified_installation(load_store(), "PAYMENT_PENDING")
+    _require_verified_skill(load_store(), "PAYMENT_PENDING")
+
 _REBOOK_MSG = (
     "Run `booking-agent flow pay rebook --service-id <id>` to create a fresh checkout, "
     "then retry payment."

{booking_agent_cli-0.2.0 → booking_agent_cli-0.4.0}/src/booking_agent_cli/commands/update.py

@@ -6,13 +6,14 @@ import os
 import shutil
 import subprocess
 import sys
+import tempfile
 from pathlib import Path
 from typing import List, Optional, Tuple
 
 import typer
 
 from .. import __version__ as CLI_VERSION
-from .. import updates
+from .. import provenance, skill_integrity, updates
 from ..output import AgentOutput, emit, emit_error
 from ..session import (
     TERMINAL_PHASES,
@@ -31,6 +32,7 @@ DECLINE_COMMAND = "booking-agent update decline --prompt-key"
 SKILL_PRINT_COMMAND = "booking-agent skill print"
 INSTALL_TIMEOUT_SECONDS = 600
 VERIFY_TIMEOUT_SECONDS = 60
+VERIFIED_WHEELS_DIR = "verified-wheels"
 _MAX_ANSWERED = 50
 
 
@@ -82,6 +84,10 @@ def skill_print(
         output.chmod(0o644)
     except OSError:
         pass
+    try:
+        skill_integrity.clear(load_store())
+    except SessionStoreTooNew:
+        pass
     emit(AgentOutput(
         phase="UPDATE",
         prompt=(
@@ -97,7 +103,7 @@ def skill_print(
 def _skill_target_error(path: Path) -> Optional[str]:
     if path.name != "SKILL.md":
         return "--output must name a SKILL.md file."
-    if path.is_symlink():
+    if path.is_symlink() or skill_integrity.is_source_checkout(path):
         return (
             "That skill file is a link into a source checkout, which updates with the "
             "checkout; it is never overwritten."
@@ -313,6 +319,22 @@ def update(
         ))
         return
 
+    try:
+        wheel = verified_wheel(target.cli_version)
+    except provenance.ProvenanceError as exc:
+        emit_error(
+            "UPDATE",
+            code="update_not_verified",
+            message=(
+                "The update could not be shown to come from the official Booking Agent "
+                "release, so nothing was installed. Tell the user in plain words that the "
+                "update was not installed, and carry on with the installed version."
+            ),
+            data={"target_version": target.cli_version, "reason": exc.reason, "detail": exc.message},
+        )
+        raise typer.Exit(code=1)
+
+    commands = install_commands(target.cli_version, newest=target.key == newest, wheel=wheel)
     ok, detail = _run(commands[installer], timeout=INSTALL_TIMEOUT_SECONDS)
     if not ok:
         emit_error(
@@ -340,6 +362,7 @@ def update(
         )
         raise typer.Exit(code=1)
 
+    _drop_other_wheels(wheel)
     _remember(store, f"release:{target.cli_version}")
     emit(AgentOutput(
         phase="UPDATE",
@@ -370,19 +393,31 @@ def _remember(store, key: Optional[str]) -> None:
 
 
 def is_editable_install() -> bool:
-    try:
-        from importlib.metadata import distribution
+    return provenance.install_source() == provenance.INSTALL_EDITABLE
 
-        raw = distribution(PACKAGE).read_text("direct_url.json")
-    except Exception:
-        return False
-    if not raw:
-        return False
-    try:
-        info = json.loads(raw)
-    except ValueError:
-        return False
-    return bool((info.get("dir_info") or {}).get("editable"))
+
+def verified_wheel(version: str) -> Path:
+    """The PyPI wheel for ``version``, kept only once its PEP 740 provenance verifies.
+
+    It stays under the booking-agent home because uv and pipx record the file they
+    installed from.
+    """
+    from booking_agent import settings
+    from booking_agent.secure_file import ensure_private_dir
+
+    folder = settings.booking_agent_home() / VERIFIED_WHEELS_DIR
+    ensure_private_dir(folder)
+    with tempfile.TemporaryDirectory(dir=folder) as tmp:
+        downloaded = provenance.download_verified_wheel(version, Path(tmp))
+        wheel = folder / downloaded.name
+        os.replace(downloaded, wheel)
+    return wheel
+
+
+def _drop_other_wheels(keep: Path) -> None:
+    for old in keep.parent.glob("*.whl"):
+        if old != keep:
+            old.unlink(missing_ok=True)
 
 
 def detect_installer() -> Optional[str]:
@@ -397,9 +432,16 @@ def detect_installer() -> Optional[str]:
     return None
 
 
-def install_commands(version: str, *, newest: bool) -> dict:
-    # ">=" leaves later upgrades free; "==" holds back a newer release that is not ready.
-    spec = f"{PACKAGE}>={version}" if newest else f"{PACKAGE}=={version}"
+def install_commands(version: str, *, newest: bool, wheel: Optional[Path] = None) -> dict:
+    """Install the verified ``wheel`` itself, so nothing is resolved from the index again.
+
+    Without a wheel (commands shown to the user to run by hand): ">=" leaves later
+    upgrades free; "==" holds back a newer release that is not ready.
+    """
+    if wheel is not None:
+        spec = str(wheel)
+    else:
+        spec = f"{PACKAGE}>={version}" if newest else f"{PACKAGE}=={version}"
     return {
         "uv": ["uv", "tool", "install", "--force", spec],
         "pipx": ["pipx", "install", "--force", spec],

booking_agent_cli-0.4.0/src/booking_agent_cli/install_integrity.py

@@ -0,0 +1,68 @@
+"""Whether this installation may book and take payments: the first-run provenance check.
+
+The first ``flow init`` after an install or update checks the installed files against
+the attested release (``provenance.verify_installed``) and remembers the outcome for
+that exact installation (its ``RECORD`` fingerprint). A mismatch is remembered too, so
+``flow book`` and every ``flow pay`` command refuse until the CLI is reinstalled. A
+failure to reach PyPI decides nothing and is retried on the next check.
+"""
+from __future__ import annotations
+
+from typing import Any, Dict, Optional
+
+from . import __version__ as CLI_VERSION
+from . import provenance
+
+CODE = "installation_unverified"
+
+
+def _same_install(record: Any, fingerprint: Optional[str]) -> bool:
+    return (
+        isinstance(record, dict)
+        and record.get("version") == CLI_VERSION
+        and record.get("record_sha256") == fingerprint
+    )
+
+
+def check(store: Any) -> Optional[Dict[str, Any]]:
+    """The recorded failure for this installation, or None when it may proceed."""
+    from .session import save_store
+
+    fingerprint = provenance.installed_fingerprint()
+    if _same_install(store.install_integrity_failure, fingerprint):
+        return store.install_integrity_failure
+    if _same_install(store.install_verified, fingerprint):
+        return None
+    result = provenance.verify_installed()
+    if result.skipped is not None or result.transient:
+        return None
+    if result.ok:
+        store.install_verified = {"version": CLI_VERSION, "record_sha256": fingerprint}
+        store.install_integrity_failure = None
+    else:
+        store.install_integrity_failure = {
+            "version": CLI_VERSION,
+            "record_sha256": fingerprint,
+            "reason": result.reason,
+            "detail": result.message,
+        }
+    save_store(store)
+    return store.install_integrity_failure
+
+
+def error_message() -> str:
+    return (
+        "The booking assistant installed on this device does not match the official "
+        "release, so it will not book or take payments. Tell the user in plain words that "
+        "the assistant needs to be reinstalled before it can book, and reinstall it only "
+        "with their yes, by running data.reinstall_command. Do not try to book another way."
+    )
+
+
+def error_data(failure: Dict[str, Any]) -> Dict[str, Any]:
+    return {
+        "reason": failure.get("reason"),
+        "detail": failure.get("detail"),
+        "installed_version": CLI_VERSION,
+        "reinstall_command": provenance.reinstall_command(),
+    }