buzzkit 0.1.1__tar.gz → 0.1.2__tar.gz

{buzzkit-0.1.1 → buzzkit-0.1.2}/.gitignore

@@ -6,3 +6,5 @@ __pycache__/
 *.egg-info/
 .python-version
 agent.secret
+/dist
+owner.secret

{buzzkit-0.1.1 → buzzkit-0.1.2}/Cargo.lock

@@ -168,7 +168,7 @@ dependencies = [
 
 [[package]]
 name = "buzzkit"
-version = "0.1.1"
+version = "0.1.2"
 dependencies = [
  "base64",
  "buzz-core",

{buzzkit-0.1.1 → buzzkit-0.1.2}/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "buzzkit"
-version = "0.1.1"
+version = "0.1.2"
 edition = "2021"
 publish = false
 description = "PyO3 bindings over Block's Buzz zero-I/O crates (buzz-core / buzz-sdk)"

{buzzkit-0.1.1 → buzzkit-0.1.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: buzzkit
-Version: 0.1.1
+Version: 0.1.2
 Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License

{buzzkit-0.1.1 → buzzkit-0.1.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "buzzkit"
-version = "0.1.1"
+version = "0.1.2"
 description = "Python bindings + async client for Block's Buzz (Nostr) protocol, backed by Rust buzz-core/buzz-sdk"
 readme = "README.md"
 requires-python = ">=3.12"

{buzzkit-0.1.1 → buzzkit-0.1.2}/python/buzzkit/__init__.py

@@ -20,7 +20,9 @@ from ._native import (
     build_auth_event,
     build_join_channel_event,
     build_message_event,
+    build_presence_event,
     build_profile_event,
+    compute_auth_tag,
     generate_keypair,
     pubkey_from_secret,
     sign_nip98,
@@ -28,7 +30,7 @@ from ._native import (
 )
 from .client import BuzzClient
 
-__version__ = "0.1.1"
+__version__ = "0.1.2"
 
 __all__ = [
     "KIND_ADD_MEMBER",
@@ -42,7 +44,9 @@ __all__ = [
     "build_auth_event",
     "build_join_channel_event",
     "build_message_event",
+    "build_presence_event",
     "build_profile_event",
+    "compute_auth_tag",
     "generate_keypair",
     "pubkey_from_secret",
     "sign_nip98",

{buzzkit-0.1.1 → buzzkit-0.1.2}/python/buzzkit/_native.pyi

@@ -24,9 +24,17 @@ def build_profile_event(
 def build_join_channel_event(secret: str, channel_id: str) -> str:
     """Build + sign a NIP-29 channel self-join event (kind 9000, role=bot)."""
 
-def build_auth_event(secret: str, challenge: str, relay_url: str) -> str:
+def build_presence_event(secret: str, status: str = ...) -> str:
+    """Build + sign a presence event (kind 20001); status online/away/offline."""
+
+def build_auth_event(
+    secret: str, challenge: str, relay_url: str, auth_tag: str | None = ...
+) -> str:
     """Build + sign a NIP-42 AUTH event (kind 22242); returns event JSON."""
 
+def compute_auth_tag(owner_secret: str, agent_pubkey_hex: str, conditions: str = ...) -> str:
+    """Compute a NIP-OA owner-attestation tag JSON attesting an agent pubkey."""
+
 def sign_nip98(secret: str, method: str, url: str, body: bytes | None = ...) -> str:
     """Return an ``Authorization: Nostr <base64>`` header value (NIP-98)."""
 

{buzzkit-0.1.1 → buzzkit-0.1.2}/python/buzzkit/client.py

@@ -119,6 +119,11 @@ class BuzzClient:
         ev = _native.build_join_channel_event(self._secret, channel_id)
         return await self.publish(ev)
 
+    async def publish_presence(self, status: str = "online") -> dict:
+        """Announce presence (kind 20001, ephemeral) over the WebSocket."""
+        ev = _native.build_presence_event(self._secret, status)
+        return await self.publish(ev)
+
     async def query(self, filters: list[dict]) -> list[dict]:
         """Run a NIP-01 REQ over the HTTP bridge; returns a list of events."""
         url = f"{self._http}/query"
@@ -225,7 +230,9 @@ class BuzzClient:
                 q.put_nowait(("closed", "connection lost"))
 
     async def _on_auth_challenge(self, challenge: str) -> None:
-        auth_ev = json.loads(_native.build_auth_event(self._secret, challenge, self._ws_url))
+        auth_ev = json.loads(
+            _native.build_auth_event(self._secret, challenge, self._ws_url, self._auth_tag)
+        )
         self._auth_event_id = auth_ev["id"]
         await self._ws.send(json.dumps(["AUTH", auth_ev]))
 

{buzzkit-0.1.1 → buzzkit-0.1.2}/src/lib.rs

@@ -7,7 +7,7 @@
 
 use base64::engine::general_purpose::STANDARD as B64;
 use base64::Engine as _;
-use nostr::{EventBuilder, JsonUtil, Keys, Kind, RelayUrl, Tag, ToBech32};
+use nostr::{EventBuilder, JsonUtil, Keys, Kind, PublicKey, RelayUrl, Tag, ToBech32};
 use pyo3::exceptions::PyValueError;
 use pyo3::prelude::*;
 use sha2::{Digest, Sha256};
@@ -69,17 +69,50 @@ fn build_message_event(
 
 /// Build and sign a NIP-42 AUTH event (kind 22242) for a relay challenge.
 /// Returns the event JSON to send back as `["AUTH", <event>]`.
+///
+/// `auth_tag` is an optional NIP-OA owner-attestation tag JSON
+/// (`["auth", <owner>, <conditions>, <sig>]`) — inject it so the relay records
+/// the agent's owner.
 #[pyfunction]
-fn build_auth_event(secret: &str, challenge: &str, relay_url: &str) -> PyResult<String> {
+#[pyo3(signature = (secret, challenge, relay_url, auth_tag=None))]
+fn build_auth_event(
+    secret: &str,
+    challenge: &str,
+    relay_url: &str,
+    auth_tag: Option<&str>,
+) -> PyResult<String> {
     let keys = keys_from_secret(secret)?;
     let url = RelayUrl::parse(relay_url)
         .map_err(|e| PyValueError::new_err(format!("invalid relay url: {e}")))?;
-    let event = EventBuilder::auth(challenge, url)
+    let mut builder = EventBuilder::auth(challenge, url);
+    if let Some(tag_json) = auth_tag {
+        let tag = buzz_sdk::nip_oa::parse_auth_tag(tag_json)
+            .map_err(|e| PyValueError::new_err(format!("invalid auth_tag: {e}")))?;
+        builder = builder.tags([tag]);
+    }
+    let event = builder
         .sign_with_keys(&keys)
         .map_err(|e| PyValueError::new_err(format!("sign: {e}")))?;
     Ok(event.as_json())
 }
 
+/// Compute a NIP-OA owner-attestation tag: the OWNER signs an attestation over
+/// the agent's pubkey. Returns the `["auth", <owner>, <conditions>, <sig>]` tag
+/// JSON. `owner_secret` must differ from the agent (no self-attestation).
+#[pyfunction]
+#[pyo3(signature = (owner_secret, agent_pubkey_hex, conditions=""))]
+fn compute_auth_tag(
+    owner_secret: &str,
+    agent_pubkey_hex: &str,
+    conditions: &str,
+) -> PyResult<String> {
+    let owner_keys = keys_from_secret(owner_secret)?;
+    let agent_pubkey = PublicKey::from_hex(agent_pubkey_hex)
+        .map_err(|e| PyValueError::new_err(format!("invalid agent pubkey: {e}")))?;
+    buzz_sdk::nip_oa::compute_auth_tag(&owner_keys, &agent_pubkey, conditions)
+        .map_err(|e| PyValueError::new_err(format!("compute_auth_tag: {e}")))
+}
+
 /// Sign a NIP-98 HTTP-auth event (kind 27235). Returns the
 /// `Authorization: Nostr <base64>` header value for the Buzz HTTP bridge.
 #[pyfunction]
@@ -160,16 +193,31 @@ fn build_join_channel_event(secret: &str, channel_id: &str) -> PyResult<String>
     Ok(event.as_json())
 }
 
+/// Build and sign a presence event (kind 20001). `status` is "online",
+/// "away", or "offline". Ephemeral — publish over the WebSocket.
+#[pyfunction]
+#[pyo3(signature = (secret, status="online"))]
+fn build_presence_event(secret: &str, status: &str) -> PyResult<String> {
+    let keys = keys_from_secret(secret)?;
+    let event = buzz_sdk::build_presence_update(status)
+        .map_err(|e| PyValueError::new_err(format!("build_presence: {e}")))?
+        .sign_with_keys(&keys)
+        .map_err(|e| PyValueError::new_err(format!("sign: {e}")))?;
+    Ok(event.as_json())
+}
+
 #[pymodule]
 fn _native(m: &Bound<'_, PyModule>) -> PyResult<()> {
     m.add_function(wrap_pyfunction!(generate_keypair, m)?)?;
     m.add_function(wrap_pyfunction!(pubkey_from_secret, m)?)?;
     m.add_function(wrap_pyfunction!(build_message_event, m)?)?;
     m.add_function(wrap_pyfunction!(build_auth_event, m)?)?;
+    m.add_function(wrap_pyfunction!(compute_auth_tag, m)?)?;
     m.add_function(wrap_pyfunction!(sign_nip98, m)?)?;
     m.add_function(wrap_pyfunction!(verify_event, m)?)?;
     m.add_function(wrap_pyfunction!(build_profile_event, m)?)?;
     m.add_function(wrap_pyfunction!(build_join_channel_event, m)?)?;
+    m.add_function(wrap_pyfunction!(build_presence_event, m)?)?;
 
     // Buzz event kinds (subset — mirrors buzz-core/src/kind.rs).
     m.add("KIND_REACTION", 7u16)?;

{buzzkit-0.1.1 → buzzkit-0.1.2}/tests/test_signing.py

@@ -73,3 +73,25 @@ def test_join_channel_event_keeps_self_p_tag():
     assert ["p", pk_hex] in event["tags"]
     assert ["role", "bot"] in event["tags"]
     assert any(t[0] == "h" for t in event["tags"])
+
+
+def test_compute_auth_tag():
+    owner_nsec, _, owner_pk = buzzkit.generate_keypair()
+    _, _, agent_pk = buzzkit.generate_keypair()
+    tag = json.loads(buzzkit.compute_auth_tag(owner_nsec, agent_pk))
+    assert tag[0] == "auth"
+    assert tag[1] == owner_pk  # owner pubkey
+    assert len(tag) == 4  # ["auth", owner, conditions, sig]
+
+
+def test_compute_auth_tag_rejects_self():
+    nsec, _, pk_hex = buzzkit.generate_keypair()
+    with pytest.raises(ValueError):
+        buzzkit.compute_auth_tag(nsec, pk_hex)  # owner == agent
+
+
+def test_presence_event():
+    nsec, _, _ = buzzkit.generate_keypair()
+    event = json.loads(buzzkit.build_presence_event(nsec, "online"))
+    assert event["kind"] == buzzkit.KIND_PRESENCE_UPDATE == 20001
+    assert event["content"] == "online" or ["status", "online"] in event["tags"]