cap-sdk-python 1.0.6__tar.gz → 2.0.0__tar.gz

{cap_sdk_python-1.0.6 → cap_sdk_python-2.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cap-sdk-python
-Version: 1.0.6
+Version: 2.0.0
 Summary: CAP (Cortex Agent Protocol) Python SDK
 Project-URL: Homepage, https://github.com/coretexos/cap
 Requires-Python: >=3.9
@@ -22,7 +22,7 @@ Asyncio-first SDK with NATS helpers for CAP workers and clients.
      --grpc_python_out=./cap/pb \
      ../../proto/cortex/agent/v1/*.proto
    ```
-   (Or run `./tools/make_protos.sh` from repo root and copy `generated/python` into `sdk/python/cap/pb`.)
+   (Or run `./tools/make_protos.sh` from repo root with `CAP_RUN_PY=1` and copy `/python` into `sdk/python/cap/pb` if you want vendored stubs.)
 
 2. Install:
    ```bash

{cap_sdk_python-1.0.6 → cap_sdk_python-2.0.0}/README.md

@@ -11,7 +11,7 @@ Asyncio-first SDK with NATS helpers for CAP workers and clients.
      --grpc_python_out=./cap/pb \
      ../../proto/cortex/agent/v1/*.proto
    ```
-   (Or run `./tools/make_protos.sh` from repo root and copy `generated/python` into `sdk/python/cap/pb`.)
+   (Or run `./tools/make_protos.sh` from repo root with `CAP_RUN_PY=1` and copy `/python` into `sdk/python/cap/pb` if you want vendored stubs.)
 
 2. Install:
    ```bash

{cap_sdk_python-1.0.6 → cap_sdk_python-2.0.0}/cap/client.py

@@ -1,12 +1,16 @@
+import nats
 from google.protobuf import timestamp_pb2
 from cap.pb.cortex.agent.v1 import buspacket_pb2
+from cryptography.hazmat.primitives.asymmetric import ec
+from cryptography.hazmat.primitives import hashes
+import hashlib
 
 
 DEFAULT_PROTOCOL_VERSION = 1
 SUBJECT_SUBMIT = "sys.job.submit"
 
 
-async def submit_job(nc, job_request, trace_id: str, sender_id: str):
+async def submit_job(nc, job_request, trace_id: str, sender_id: str, private_key: ec.EllipticCurvePrivateKey):
     ts = timestamp_pb2.Timestamp()
     ts.GetCurrentTime()
     packet = buspacket_pb2.BusPacket()
@@ -15,4 +19,10 @@ async def submit_job(nc, job_request, trace_id: str, sender_id: str):
     packet.created_at.CopyFrom(ts)
     packet.protocol_version = DEFAULT_PROTOCOL_VERSION
     packet.job_request.CopyFrom(job_request)
+
+    unsigned_data = packet.SerializeToString()
+    digest = hashlib.sha256(unsigned_data).digest()
+    signature = private_key.sign(digest, ec.ECDSA(hashes.SHA256()))
+    packet.signature = signature
+
     await nc.publish(SUBJECT_SUBMIT, packet.SerializeToString())

{cap_sdk_python-1.0.6 → cap_sdk_python-2.0.0}/cap/pb/cortex/agent/v1/buspacket_pb2.py

@@ -28,7 +28,7 @@ from cortex.agent.v1 import heartbeat_pb2 as cortex_dot_agent_dot_v1_dot_heartbe
 from cortex.agent.v1 import alert_pb2 as cortex_dot_agent_dot_v1_dot_alert__pb2
 
 
-DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x1f\x63ortex/agent/v1/buspacket.proto\x12\x0f\x63ortex.agent.v1\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x19\x63ortex/agent/v1/job.proto\x1a\x1f\x63ortex/agent/v1/heartbeat.proto\x1a\x1b\x63ortex/agent/v1/alert.proto\"\xcb\x02\n\tBusPacket\x12\x10\n\x08trace_id\x18\x01 \x01(\t\x12\x11\n\tsender_id\x18\x02 \x01(\t\x12.\n\ncreated_at\x18\x03 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x18\n\x10protocol_version\x18\x04 \x01(\x05\x12\x32\n\x0bjob_request\x18\n \x01(\x0b\x32\x1b.cortex.agent.v1.JobRequestH\x00\x12\x30\n\njob_result\x18\x0b \x01(\x0b\x32\x1a.cortex.agent.v1.JobResultH\x00\x12/\n\theartbeat\x18\x0c \x01(\x0b\x32\x1a.cortex.agent.v1.HeartbeatH\x00\x12-\n\x05\x61lert\x18\r \x01(\x0b\x32\x1c.cortex.agent.v1.SystemAlertH\x00\x42\t\n\x07payloadB\x7f\n\x16\x61i.cortex.cap.agent.v1P\x01Z+github.com/coretexos/cap/go/cortex/agent/v1\xaa\x02\x0f\x43ortex.Agent.V1\xca\x02\x0f\x43ortex\\Agent\\V1\xea\x02\x11\x43ortex::Agent::V1b\x06proto3')
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x1f\x63ortex/agent/v1/buspacket.proto\x12\x0f\x63ortex.agent.v1\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x19\x63ortex/agent/v1/job.proto\x1a\x1f\x63ortex/agent/v1/heartbeat.proto\x1a\x1b\x63ortex/agent/v1/alert.proto\"\xde\x02\n\tBusPacket\x12\x10\n\x08trace_id\x18\x01 \x01(\t\x12\x11\n\tsender_id\x18\x02 \x01(\t\x12.\n\ncreated_at\x18\x03 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x18\n\x10protocol_version\x18\x04 \x01(\x05\x12\x32\n\x0bjob_request\x18\n \x01(\x0b\x32\x1b.cortex.agent.v1.JobRequestH\x00\x12\x30\n\njob_result\x18\x0b \x01(\x0b\x32\x1a.cortex.agent.v1.JobResultH\x00\x12/\n\theartbeat\x18\x0c \x01(\x0b\x32\x1a.cortex.agent.v1.HeartbeatH\x00\x12-\n\x05\x61lert\x18\r \x01(\x0b\x32\x1c.cortex.agent.v1.SystemAlertH\x00\x12\x11\n\tsignature\x18\x0e \x01(\x0c\x42\t\n\x07payloadB\x7f\n\x16\x61i.cortex.cap.agent.v1P\x01Z+github.com/coretexos/cap/go/cortex/agent/v1\xaa\x02\x0f\x43ortex.Agent.V1\xca\x02\x0f\x43ortex\\Agent\\V1\xea\x02\x11\x43ortex::Agent::V1b\x06proto3')
 
 _globals = globals()
 _builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
@@ -37,5 +37,5 @@ if not _descriptor._USE_C_DESCRIPTORS:
   _globals['DESCRIPTOR']._loaded_options = None
   _globals['DESCRIPTOR']._serialized_options = b'\n\026ai.cortex.cap.agent.v1P\001Z+github.com/coretexos/cap/go/cortex/agent/v1\252\002\017Cortex.Agent.V1\312\002\017Cortex\\Agent\\V1\352\002\021Cortex::Agent::V1'
   _globals['_BUSPACKET']._serialized_start=175
-  _globals['_BUSPACKET']._serialized_end=506
+  _globals['_BUSPACKET']._serialized_end=525
 # @@protoc_insertion_point(module_scope)

cap_sdk_python-2.0.0/cap/pb/cortex/agent/v1/job_pb2.py

@@ -0,0 +1,55 @@
+# -*- coding: utf-8 -*-
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# NO CHECKED-IN PROTOBUF GENCODE
+# source: cortex/agent/v1/job.proto
+# Protobuf Python Version: 6.31.1
+"""Generated protocol buffer code."""
+from google.protobuf import descriptor as _descriptor
+from google.protobuf import descriptor_pool as _descriptor_pool
+from google.protobuf import runtime_version as _runtime_version
+from google.protobuf import symbol_database as _symbol_database
+from google.protobuf.internal import builder as _builder
+_runtime_version.ValidateProtobufRuntimeVersion(
+    _runtime_version.Domain.PUBLIC,
+    6,
+    31,
+    1,
+    '',
+    'cortex/agent/v1/job.proto'
+)
+# @@protoc_insertion_point(imports)
+
+_sym_db = _symbol_database.Default()
+
+
+
+
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x19\x63ortex/agent/v1/job.proto\x12\x0f\x63ortex.agent.v1\"l\n\x0c\x43ontextHints\x12\x18\n\x10max_input_tokens\x18\x01 \x01(\x05\x12\x1b\n\x13\x61llow_summarization\x18\x02 \x01(\x08\x12\x17\n\x0f\x61llow_retrieval\x18\x03 \x01(\x08\x12\x0c\n\x04tags\x18\x04 \x03(\t\"l\n\x06\x42udget\x12\x18\n\x10max_input_tokens\x18\x01 \x01(\x03\x12\x19\n\x11max_output_tokens\x18\x02 \x01(\x03\x12\x18\n\x10max_total_tokens\x18\x03 \x01(\x03\x12\x13\n\x0b\x64\x65\x61\x64line_ms\x18\x04 \x01(\x03\"\xa6\x04\n\nJobRequest\x12\x0e\n\x06job_id\x18\x01 \x01(\t\x12\r\n\x05topic\x18\x02 \x01(\t\x12.\n\x08priority\x18\x03 \x01(\x0e\x32\x1c.cortex.agent.v1.JobPriority\x12\x13\n\x0b\x63ontext_ptr\x18\x04 \x01(\t\x12\x12\n\nadapter_id\x18\x05 \x01(\t\x12\x31\n\x03\x65nv\x18\x06 \x03(\x0b\x32$.cortex.agent.v1.JobRequest.EnvEntry\x12\x15\n\rparent_job_id\x18\x07 \x01(\t\x12\x13\n\x0bworkflow_id\x18\x08 \x01(\t\x12\x12\n\nstep_index\x18\t \x01(\x05\x12\x11\n\tmemory_id\x18\n \x01(\t\x12\x34\n\rcontext_hints\x18\x0b \x01(\x0b\x32\x1d.cortex.agent.v1.ContextHints\x12\'\n\x06\x62udget\x18\x0c \x01(\x0b\x32\x17.cortex.agent.v1.Budget\x12\x11\n\ttenant_id\x18\r \x01(\t\x12\x14\n\x0cprincipal_id\x18\x0e \x01(\t\x12\x37\n\x06labels\x18\x0f \x03(\x0b\x32\'.cortex.agent.v1.JobRequest.LabelsEntry\x1a*\n\x08\x45nvEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\x1a-\n\x0bLabelsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"\xaf\x01\n\tJobResult\x12\x0e\n\x06job_id\x18\x01 \x01(\t\x12*\n\x06status\x18\x02 \x01(\x0e\x32\x1a.cortex.agent.v1.JobStatus\x12\x12\n\nresult_ptr\x18\x03 \x01(\t\x12\x11\n\tworker_id\x18\x04 \x01(\t\x12\x14\n\x0c\x65xecution_ms\x18\x05 \x01(\x03\x12\x12\n\nerror_code\x18\x06 \x01(\t\x12\x15\n\rerror_message\x18\x07 \x01(\t*|\n\x0bJobPriority\x12\x1c\n\x18JOB_PRIORITY_UNSPECIFIED\x10\x00\x12\x1c\n\x18JOB_PRIORITY_INTERACTIVE\x10\x01\x12\x16\n\x12JOB_PRIORITY_BATCH\x10\x02\x12\x19\n\x15JOB_PRIORITY_CRITICAL\x10\x03*\x86\x02\n\tJobStatus\x12\x1a\n\x16JOB_STATUS_UNSPECIFIED\x10\x00\x12\x16\n\x12JOB_STATUS_PENDING\x10\x01\x12\x18\n\x14JOB_STATUS_SCHEDULED\x10\x02\x12\x19\n\x15JOB_STATUS_DISPATCHED\x10\x03\x12\x16\n\x12JOB_STATUS_RUNNING\x10\x04\x12\x18\n\x14JOB_STATUS_SUCCEEDED\x10\x05\x12\x15\n\x11JOB_STATUS_FAILED\x10\x06\x12\x18\n\x14JOB_STATUS_CANCELLED\x10\x07\x12\x15\n\x11JOB_STATUS_DENIED\x10\x08\x12\x16\n\x12JOB_STATUS_TIMEOUT\x10\tB\x7f\n\x16\x61i.cortex.cap.agent.v1P\x01Z+github.com/coretexos/cap/go/cortex/agent/v1\xaa\x02\x0f\x43ortex.Agent.V1\xca\x02\x0f\x43ortex\\Agent\\V1\xea\x02\x11\x43ortex::Agent::V1b\x06proto3')
+
+_globals = globals()
+_builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
+_builder.BuildTopDescriptorsAndMessages(DESCRIPTOR, 'cortex.agent.v1.job_pb2', _globals)
+if not _descriptor._USE_C_DESCRIPTORS:
+  _globals['DESCRIPTOR']._loaded_options = None
+  _globals['DESCRIPTOR']._serialized_options = b'\n\026ai.cortex.cap.agent.v1P\001Z+github.com/coretexos/cap/go/cortex/agent/v1\252\002\017Cortex.Agent.V1\312\002\017Cortex\\Agent\\V1\352\002\021Cortex::Agent::V1'
+  _globals['_JOBREQUEST_ENVENTRY']._loaded_options = None
+  _globals['_JOBREQUEST_ENVENTRY']._serialized_options = b'8\001'
+  _globals['_JOBREQUEST_LABELSENTRY']._loaded_options = None
+  _globals['_JOBREQUEST_LABELSENTRY']._serialized_options = b'8\001'
+  _globals['_JOBPRIORITY']._serialized_start=997
+  _globals['_JOBPRIORITY']._serialized_end=1121
+  _globals['_JOBSTATUS']._serialized_start=1124
+  _globals['_JOBSTATUS']._serialized_end=1386
+  _globals['_CONTEXTHINTS']._serialized_start=46
+  _globals['_CONTEXTHINTS']._serialized_end=154
+  _globals['_BUDGET']._serialized_start=156
+  _globals['_BUDGET']._serialized_end=264
+  _globals['_JOBREQUEST']._serialized_start=267
+  _globals['_JOBREQUEST']._serialized_end=817
+  _globals['_JOBREQUEST_ENVENTRY']._serialized_start=728
+  _globals['_JOBREQUEST_ENVENTRY']._serialized_end=770
+  _globals['_JOBREQUEST_LABELSENTRY']._serialized_start=772
+  _globals['_JOBREQUEST_LABELSENTRY']._serialized_end=817
+  _globals['_JOBRESULT']._serialized_start=820
+  _globals['_JOBRESULT']._serialized_end=995
+# @@protoc_insertion_point(module_scope)

cap_sdk_python-2.0.0/cap/pb/cortex/agent/v1/safety_pb2.py

@@ -0,0 +1,48 @@
+# -*- coding: utf-8 -*-
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# NO CHECKED-IN PROTOBUF GENCODE
+# source: cortex/agent/v1/safety.proto
+# Protobuf Python Version: 6.31.1
+"""Generated protocol buffer code."""
+from google.protobuf import descriptor as _descriptor
+from google.protobuf import descriptor_pool as _descriptor_pool
+from google.protobuf import runtime_version as _runtime_version
+from google.protobuf import symbol_database as _symbol_database
+from google.protobuf.internal import builder as _builder
+_runtime_version.ValidateProtobufRuntimeVersion(
+    _runtime_version.Domain.PUBLIC,
+    6,
+    31,
+    1,
+    '',
+    'cortex/agent/v1/safety.proto'
+)
+# @@protoc_insertion_point(imports)
+
+_sym_db = _symbol_database.Default()
+
+
+from cortex.agent.v1 import job_pb2 as cortex_dot_agent_dot_v1_dot_job__pb2
+
+
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x1c\x63ortex/agent/v1/safety.proto\x12\x0f\x63ortex.agent.v1\x1a\x19\x63ortex/agent/v1/job.proto\"\xcd\x02\n\x12PolicyCheckRequest\x12\x0e\n\x06job_id\x18\x01 \x01(\t\x12\r\n\x05topic\x18\x02 \x01(\t\x12\x0e\n\x06tenant\x18\x03 \x01(\t\x12.\n\x08priority\x18\x04 \x01(\x0e\x32\x1c.cortex.agent.v1.JobPriority\x12\x16\n\x0e\x65stimated_cost\x18\x05 \x01(\x01\x12\'\n\x06\x62udget\x18\x06 \x01(\x0b\x32\x17.cortex.agent.v1.Budget\x12\x14\n\x0cprincipal_id\x18\x07 \x01(\t\x12?\n\x06labels\x18\x08 \x03(\x0b\x32/.cortex.agent.v1.PolicyCheckRequest.LabelsEntry\x12\x11\n\tmemory_id\x18\t \x01(\t\x1a-\n\x0bLabelsEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"t\n\x13PolicyCheckResponse\x12/\n\x08\x64\x65\x63ision\x18\x01 \x01(\x0e\x32\x1d.cortex.agent.v1.DecisionType\x12\x0e\n\x06reason\x18\x02 \x01(\t\x12\x1c\n\x14redacted_context_ptr\x18\x03 \x01(\t*\x9b\x01\n\x0c\x44\x65\x63isionType\x12\x1d\n\x19\x44\x45\x43ISION_TYPE_UNSPECIFIED\x10\x00\x12\x17\n\x13\x44\x45\x43ISION_TYPE_ALLOW\x10\x01\x12\x16\n\x12\x44\x45\x43ISION_TYPE_DENY\x10\x02\x12\x1f\n\x1b\x44\x45\x43ISION_TYPE_REQUIRE_HUMAN\x10\x03\x12\x1a\n\x16\x44\x45\x43ISION_TYPE_THROTTLE\x10\x04\x32\x62\n\x0cSafetyKernel\x12R\n\x05\x43heck\x12#.cortex.agent.v1.PolicyCheckRequest\x1a$.cortex.agent.v1.PolicyCheckResponseB\x7f\n\x16\x61i.cortex.cap.agent.v1P\x01Z+github.com/coretexos/cap/go/cortex/agent/v1\xaa\x02\x0f\x43ortex.Agent.V1\xca\x02\x0f\x43ortex\\Agent\\V1\xea\x02\x11\x43ortex::Agent::V1b\x06proto3')
+
+_globals = globals()
+_builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
+_builder.BuildTopDescriptorsAndMessages(DESCRIPTOR, 'cortex.agent.v1.safety_pb2', _globals)
+if not _descriptor._USE_C_DESCRIPTORS:
+  _globals['DESCRIPTOR']._loaded_options = None
+  _globals['DESCRIPTOR']._serialized_options = b'\n\026ai.cortex.cap.agent.v1P\001Z+github.com/coretexos/cap/go/cortex/agent/v1\252\002\017Cortex.Agent.V1\312\002\017Cortex\\Agent\\V1\352\002\021Cortex::Agent::V1'
+  _globals['_POLICYCHECKREQUEST_LABELSENTRY']._loaded_options = None
+  _globals['_POLICYCHECKREQUEST_LABELSENTRY']._serialized_options = b'8\001'
+  _globals['_DECISIONTYPE']._serialized_start=531
+  _globals['_DECISIONTYPE']._serialized_end=686
+  _globals['_POLICYCHECKREQUEST']._serialized_start=77
+  _globals['_POLICYCHECKREQUEST']._serialized_end=410
+  _globals['_POLICYCHECKREQUEST_LABELSENTRY']._serialized_start=365
+  _globals['_POLICYCHECKREQUEST_LABELSENTRY']._serialized_end=410
+  _globals['_POLICYCHECKRESPONSE']._serialized_start=412
+  _globals['_POLICYCHECKRESPONSE']._serialized_end=528
+  _globals['_SAFETYKERNEL']._serialized_start=688
+  _globals['_SAFETYKERNEL']._serialized_end=786
+# @@protoc_insertion_point(module_scope)

cap_sdk_python-2.0.0/cap/worker.py

@@ -0,0 +1,77 @@
+import asyncio
+from typing import Callable, Awaitable, Dict
+
+import nats
+from google.protobuf import timestamp_pb2
+from cap.pb.cortex.agent.v1 import buspacket_pb2, job_pb2
+from cryptography.hazmat.primitives.asymmetric import ec
+from cryptography.hazmat.primitives import hashes
+import hashlib
+
+DEFAULT_PROTOCOL_VERSION = 1
+SUBJECT_RESULT = "sys.job.result"
+
+
+async def run_worker(nats_url: str, subject: str, handler: Callable[[job_pb2.JobRequest], Awaitable[job_pb2.JobResult]],
+                     public_keys: Dict[str, ec.EllipticCurvePublicKey] = None,
+                     private_key: ec.EllipticCurvePrivateKey = None,
+                     sender_id: str = "cap-worker",
+                     connect_fn: Callable = nats.connect):
+
+    # Allow injection for tests; defaults to nats.connect.
+    nc = await connect_fn(servers=nats_url, name=sender_id)
+
+    async def on_msg(msg):
+        packet = buspacket_pb2.BusPacket()
+        packet.ParseFromString(msg.data)
+
+        if public_keys:
+            public_key = public_keys.get(packet.sender_id)
+            if not public_key:
+                print(f"worker: no public key found for sender: {packet.sender_id}")
+                return
+
+            signature = packet.signature
+            packet.ClearField("signature")
+            unsigned_data = packet.SerializeToString()
+            digest = hashlib.sha256(unsigned_data).digest()
+            try:
+                public_key.verify(signature, digest, ec.ECDSA(hashes.SHA256()))
+            except Exception:
+                print(f"worker: invalid signature from sender: {packet.sender_id}")
+                return
+
+        req = packet.job_request
+        if not req.job_id:
+            return
+        try:
+            res = await handler(req)
+        except Exception as exc:  # noqa: BLE001
+            res = job_pb2.JobResult(
+                job_id=req.job_id,
+                status=job_pb2.JOB_STATUS_FAILED,
+                error_message=str(exc),
+            )
+        ts = timestamp_pb2.Timestamp()
+        ts.GetCurrentTime()
+        out = buspacket_pb2.BusPacket()
+        out.trace_id = packet.trace_id
+        out.sender_id = sender_id
+        out.protocol_version = DEFAULT_PROTOCOL_VERSION
+        out.created_at.CopyFrom(ts)
+        out.job_result.CopyFrom(res)
+
+        if private_key:
+            unsigned_data = out.SerializeToString()
+            digest = hashlib.sha256(unsigned_data).digest()
+            signature = private_key.sign(digest, ec.ECDSA(hashes.SHA256()))
+            out.signature = signature
+
+        await nc.publish(SUBJECT_RESULT, out.SerializeToString())
+
+    await nc.subscribe(subject, queue=subject, cb=on_msg)
+    try:
+        while True:
+            await asyncio.sleep(1)
+    finally:
+        await nc.drain()

{cap_sdk_python-1.0.6 → cap_sdk_python-2.0.0}/cap_sdk_python.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cap-sdk-python
-Version: 1.0.6
+Version: 2.0.0
 Summary: CAP (Cortex Agent Protocol) Python SDK
 Project-URL: Homepage, https://github.com/coretexos/cap
 Requires-Python: >=3.9
@@ -22,7 +22,7 @@ Asyncio-first SDK with NATS helpers for CAP workers and clients.
      --grpc_python_out=./cap/pb \
      ../../proto/cortex/agent/v1/*.proto
    ```
-   (Or run `./tools/make_protos.sh` from repo root and copy `generated/python` into `sdk/python/cap/pb`.)
+   (Or run `./tools/make_protos.sh` from repo root with `CAP_RUN_PY=1` and copy `/python` into `sdk/python/cap/pb` if you want vendored stubs.)
 
 2. Install:
    ```bash

{cap_sdk_python-1.0.6 → cap_sdk_python-2.0.0}/cap_sdk_python.egg-info/SOURCES.txt

@@ -22,4 +22,5 @@ cap_sdk_python.egg-info/PKG-INFO
 cap_sdk_python.egg-info/SOURCES.txt
 cap_sdk_python.egg-info/dependency_links.txt
 cap_sdk_python.egg-info/requires.txt
-cap_sdk_python.egg-info/top_level.txt
+cap_sdk_python.egg-info/top_level.txt
+tests/test_sdk.py

{cap_sdk_python-1.0.6 → cap_sdk_python-2.0.0}/cap_sdk_python.egg-info/top_level.txt

@@ -1,2 +1,3 @@
 cap
 dist
+tests

{cap_sdk_python-1.0.6 → cap_sdk_python-2.0.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cap-sdk-python"
-version = "1.0.6"
+version = "2.0.0"
 description = "CAP (Cortex Agent Protocol) Python SDK"
 readme = "README.md"
 requires-python = ">=3.9"

cap_sdk_python-2.0.0/tests/test_sdk.py

@@ -0,0 +1,103 @@
+import asyncio
+import sys
+import os
+import unittest
+from typing import Callable, Awaitable, Dict
+
+# Avoid loading duplicate generated stubs from both /python and sdk/python/cap/pb.
+sys.path = [p for p in sys.path if not p.rstrip("/").endswith("python")]
+# Ensure generated modules under sdk/python/cap/pb are discoverable for `cortex.agent.v1.*`.
+sys.path.append(os.path.abspath(os.path.join(os.path.dirname(__file__), "..", "cap", "pb")))
+
+from cryptography.hazmat.primitives.asymmetric import ec
+from cryptography.hazmat.primitives import hashes
+
+from cap.pb.cortex.agent.v1 import job_pb2
+from cap import client
+from cap import worker
+
+
+class MockNATS:
+    def __init__(self):
+        self.subscriptions = {}
+        self.published = asyncio.Queue()
+
+    async def publish(self, subject, data):
+        await self.published.put((subject, data))
+
+    async def subscribe(self, subject, queue, cb):
+        self.subscriptions[subject] = cb
+
+    async def connect(self, servers, name):
+        return self
+
+    async def drain(self):
+        pass
+
+
+class TestSDK(unittest.TestCase):
+    def test_e2e(self):
+        async def run_test():
+            client_key = ec.generate_private_key(ec.SECP256R1())
+            worker_key = ec.generate_private_key(ec.SECP256R1())
+
+            mock_nats = MockNATS()
+
+            async def handler(req: job_pb2.JobRequest) -> job_pb2.JobResult:
+                return job_pb2.JobResult(status=job_pb2.JOB_STATUS_SUCCEEDED)
+
+            worker_task = asyncio.create_task(
+                worker.run_worker(
+                    nats_url="",
+                    subject="test.worker",
+                    handler=handler,
+                    public_keys={"test-client": client_key.public_key()},
+                    private_key=worker_key,
+                    sender_id="test-worker",
+                    connect_fn=mock_nats.connect
+                )
+            )
+
+            # Wait until the worker subscription is registered on the mock bus.
+            for _ in range(20):
+                if "test.worker" in mock_nats.subscriptions:
+                    break
+                await asyncio.sleep(0)
+            self.assertIn("test.worker", mock_nats.subscriptions)
+
+            job_request = job_pb2.JobRequest(job_id="test-job-1", topic="test.worker")
+            await client.submit_job(
+                mock_nats,
+                job_request,
+                "test-trace",
+                "test-client",
+                client_key
+            )
+
+            # Get the published job and send it to the worker
+            subj, data = await mock_nats.published.get()
+            self.assertEqual(subj, client.SUBJECT_SUBMIT)
+            await mock_nats.subscriptions["test.worker"](type("obj", (object,), {"data": data})())
+
+            # Get the result from the worker
+            subj, data = await mock_nats.published.get()
+            self.assertEqual(subj, worker.SUBJECT_RESULT)
+
+            # Verify the signature of the result
+            from cap.pb.cortex.agent.v1 import buspacket_pb2
+            import hashlib
+            result_packet = buspacket_pb2.BusPacket()
+            result_packet.ParseFromString(data)
+            signature = result_packet.signature
+            result_packet.ClearField("signature")
+            unsigned_data = result_packet.SerializeToString()
+            digest = hashlib.sha256(unsigned_data).digest()
+            worker_key.public_key().verify(signature, digest, ec.ECDSA(hashes.SHA256()))
+
+            worker_task.cancel()
+
+        asyncio.run(run_test())
+
+
+if __name__ == "__main__":
+    unittest.main()

cap_sdk_python-1.0.6/cap/pb/cortex/agent/v1/job_pb2.py

@@ -1,47 +0,0 @@
-# -*- coding: utf-8 -*-
-# Generated by the protocol buffer compiler.  DO NOT EDIT!
-# NO CHECKED-IN PROTOBUF GENCODE
-# source: cortex/agent/v1/job.proto
-# Protobuf Python Version: 6.31.1
-"""Generated protocol buffer code."""
-from google.protobuf import descriptor as _descriptor
-from google.protobuf import descriptor_pool as _descriptor_pool
-from google.protobuf import runtime_version as _runtime_version
-from google.protobuf import symbol_database as _symbol_database
-from google.protobuf.internal import builder as _builder
-_runtime_version.ValidateProtobufRuntimeVersion(
-    _runtime_version.Domain.PUBLIC,
-    6,
-    31,
-    1,
-    '',
-    'cortex/agent/v1/job.proto'
-)
-# @@protoc_insertion_point(imports)
-
-_sym_db = _symbol_database.Default()
-
-
-
-
-DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x19\x63ortex/agent/v1/job.proto\x12\x0f\x63ortex.agent.v1\"\xa3\x02\n\nJobRequest\x12\x0e\n\x06job_id\x18\x01 \x01(\t\x12\r\n\x05topic\x18\x02 \x01(\t\x12.\n\x08priority\x18\x03 \x01(\x0e\x32\x1c.cortex.agent.v1.JobPriority\x12\x13\n\x0b\x63ontext_ptr\x18\x04 \x01(\t\x12\x12\n\nadapter_id\x18\x05 \x01(\t\x12\x31\n\x03\x65nv\x18\x06 \x03(\x0b\x32$.cortex.agent.v1.JobRequest.EnvEntry\x12\x15\n\rparent_job_id\x18\x07 \x01(\t\x12\x13\n\x0bworkflow_id\x18\x08 \x01(\t\x12\x12\n\nstep_index\x18\t \x01(\x05\x1a*\n\x08\x45nvEntry\x12\x0b\n\x03key\x18\x01 \x01(\t\x12\r\n\x05value\x18\x02 \x01(\t:\x02\x38\x01\"\xaf\x01\n\tJobResult\x12\x0e\n\x06job_id\x18\x01 \x01(\t\x12*\n\x06status\x18\x02 \x01(\x0e\x32\x1a.cortex.agent.v1.JobStatus\x12\x12\n\nresult_ptr\x18\x03 \x01(\t\x12\x11\n\tworker_id\x18\x04 \x01(\t\x12\x14\n\x0c\x65xecution_ms\x18\x05 \x01(\x03\x12\x12\n\nerror_code\x18\x06 \x01(\t\x12\x15\n\rerror_message\x18\x07 \x01(\t*|\n\x0bJobPriority\x12\x1c\n\x18JOB_PRIORITY_UNSPECIFIED\x10\x00\x12\x1c\n\x18JOB_PRIORITY_INTERACTIVE\x10\x01\x12\x16\n\x12JOB_PRIORITY_BATCH\x10\x02\x12\x19\n\x15JOB_PRIORITY_CRITICAL\x10\x03*\x86\x02\n\tJobStatus\x12\x1a\n\x16JOB_STATUS_UNSPECIFIED\x10\x00\x12\x16\n\x12JOB_STATUS_PENDING\x10\x01\x12\x18\n\x14JOB_STATUS_SCHEDULED\x10\x02\x12\x19\n\x15JOB_STATUS_DISPATCHED\x10\x03\x12\x16\n\x12JOB_STATUS_RUNNING\x10\x04\x12\x18\n\x14JOB_STATUS_SUCCEEDED\x10\x05\x12\x15\n\x11JOB_STATUS_FAILED\x10\x06\x12\x18\n\x14JOB_STATUS_CANCELLED\x10\x07\x12\x15\n\x11JOB_STATUS_DENIED\x10\x08\x12\x16\n\x12JOB_STATUS_TIMEOUT\x10\tB\x7f\n\x16\x61i.cortex.cap.agent.v1P\x01Z+github.com/coretexos/cap/go/cortex/agent/v1\xaa\x02\x0f\x43ortex.Agent.V1\xca\x02\x0f\x43ortex\\Agent\\V1\xea\x02\x11\x43ortex::Agent::V1b\x06proto3')
-
-_globals = globals()
-_builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
-_builder.BuildTopDescriptorsAndMessages(DESCRIPTOR, 'cortex.agent.v1.job_pb2', _globals)
-if not _descriptor._USE_C_DESCRIPTORS:
-  _globals['DESCRIPTOR']._loaded_options = None
-  _globals['DESCRIPTOR']._serialized_options = b'\n\026ai.cortex.cap.agent.v1P\001Z+github.com/coretexos/cap/go/cortex/agent/v1\252\002\017Cortex.Agent.V1\312\002\017Cortex\\Agent\\V1\352\002\021Cortex::Agent::V1'
-  _globals['_JOBREQUEST_ENVENTRY']._loaded_options = None
-  _globals['_JOBREQUEST_ENVENTRY']._serialized_options = b'8\001'
-  _globals['_JOBPRIORITY']._serialized_start=518
-  _globals['_JOBPRIORITY']._serialized_end=642
-  _globals['_JOBSTATUS']._serialized_start=645
-  _globals['_JOBSTATUS']._serialized_end=907
-  _globals['_JOBREQUEST']._serialized_start=47
-  _globals['_JOBREQUEST']._serialized_end=338
-  _globals['_JOBREQUEST_ENVENTRY']._serialized_start=296
-  _globals['_JOBREQUEST_ENVENTRY']._serialized_end=338
-  _globals['_JOBRESULT']._serialized_start=341
-  _globals['_JOBRESULT']._serialized_end=516
-# @@protoc_insertion_point(module_scope)

cap_sdk_python-1.0.6/cap/pb/cortex/agent/v1/safety_pb2.py

@@ -1,44 +0,0 @@
-# -*- coding: utf-8 -*-
-# Generated by the protocol buffer compiler.  DO NOT EDIT!
-# NO CHECKED-IN PROTOBUF GENCODE
-# source: cortex/agent/v1/safety.proto
-# Protobuf Python Version: 6.31.1
-"""Generated protocol buffer code."""
-from google.protobuf import descriptor as _descriptor
-from google.protobuf import descriptor_pool as _descriptor_pool
-from google.protobuf import runtime_version as _runtime_version
-from google.protobuf import symbol_database as _symbol_database
-from google.protobuf.internal import builder as _builder
-_runtime_version.ValidateProtobufRuntimeVersion(
-    _runtime_version.Domain.PUBLIC,
-    6,
-    31,
-    1,
-    '',
-    'cortex/agent/v1/safety.proto'
-)
-# @@protoc_insertion_point(imports)
-
-_sym_db = _symbol_database.Default()
-
-
-from cortex.agent.v1 import job_pb2 as cortex_dot_agent_dot_v1_dot_job__pb2
-
-
-DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x1c\x63ortex/agent/v1/safety.proto\x12\x0f\x63ortex.agent.v1\x1a\x19\x63ortex/agent/v1/job.proto\"\x8b\x01\n\x12PolicyCheckRequest\x12\x0e\n\x06job_id\x18\x01 \x01(\t\x12\r\n\x05topic\x18\x02 \x01(\t\x12\x0e\n\x06tenant\x18\x03 \x01(\t\x12.\n\x08priority\x18\x04 \x01(\x0e\x32\x1c.cortex.agent.v1.JobPriority\x12\x16\n\x0e\x65stimated_cost\x18\x05 \x01(\x01\"t\n\x13PolicyCheckResponse\x12/\n\x08\x64\x65\x63ision\x18\x01 \x01(\x0e\x32\x1d.cortex.agent.v1.DecisionType\x12\x0e\n\x06reason\x18\x02 \x01(\t\x12\x1c\n\x14redacted_context_ptr\x18\x03 \x01(\t*\x9b\x01\n\x0c\x44\x65\x63isionType\x12\x1d\n\x19\x44\x45\x43ISION_TYPE_UNSPECIFIED\x10\x00\x12\x17\n\x13\x44\x45\x43ISION_TYPE_ALLOW\x10\x01\x12\x16\n\x12\x44\x45\x43ISION_TYPE_DENY\x10\x02\x12\x1f\n\x1b\x44\x45\x43ISION_TYPE_REQUIRE_HUMAN\x10\x03\x12\x1a\n\x16\x44\x45\x43ISION_TYPE_THROTTLE\x10\x04\x32\x62\n\x0cSafetyKernel\x12R\n\x05\x43heck\x12#.cortex.agent.v1.PolicyCheckRequest\x1a$.cortex.agent.v1.PolicyCheckResponseB\x7f\n\x16\x61i.cortex.cap.agent.v1P\x01Z+github.com/coretexos/cap/go/cortex/agent/v1\xaa\x02\x0f\x43ortex.Agent.V1\xca\x02\x0f\x43ortex\\Agent\\V1\xea\x02\x11\x43ortex::Agent::V1b\x06proto3')
-
-_globals = globals()
-_builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
-_builder.BuildTopDescriptorsAndMessages(DESCRIPTOR, 'cortex.agent.v1.safety_pb2', _globals)
-if not _descriptor._USE_C_DESCRIPTORS:
-  _globals['DESCRIPTOR']._loaded_options = None
-  _globals['DESCRIPTOR']._serialized_options = b'\n\026ai.cortex.cap.agent.v1P\001Z+github.com/coretexos/cap/go/cortex/agent/v1\252\002\017Cortex.Agent.V1\312\002\017Cortex\\Agent\\V1\352\002\021Cortex::Agent::V1'
-  _globals['_DECISIONTYPE']._serialized_start=337
-  _globals['_DECISIONTYPE']._serialized_end=492
-  _globals['_POLICYCHECKREQUEST']._serialized_start=77
-  _globals['_POLICYCHECKREQUEST']._serialized_end=216
-  _globals['_POLICYCHECKRESPONSE']._serialized_start=218
-  _globals['_POLICYCHECKRESPONSE']._serialized_end=334
-  _globals['_SAFETYKERNEL']._serialized_start=494
-  _globals['_SAFETYKERNEL']._serialized_end=592
-# @@protoc_insertion_point(module_scope)

cap_sdk_python-1.0.6/cap/worker.py

@@ -1,45 +0,0 @@
-import asyncio
-from typing import Callable, Awaitable
-
-from google.protobuf import timestamp_pb2
-from cap.pb.cortex.agent.v1 import buspacket_pb2, job_pb2
-
-DEFAULT_PROTOCOL_VERSION = 1
-SUBJECT_RESULT = "sys.job.result"
-
-
-async def run_worker(nats_url: str, subject: str, handler: Callable[[job_pb2.JobRequest], Awaitable[job_pb2.JobResult]]):
-    import nats
-
-    nc = await nats.connect(servers=nats_url, name="cap-worker")
-
-    async def on_msg(msg):
-        packet = buspacket_pb2.BusPacket()
-        packet.ParseFromString(msg.data)
-        req = packet.job_request
-        if not req.job_id:
-            return
-        try:
-            res = await handler(req)
-        except Exception as exc:  # noqa: BLE001
-            res = job_pb2.JobResult(
-                job_id=req.job_id,
-                status=job_pb2.JOB_STATUS_FAILED,
-                error_message=str(exc),
-            )
-        ts = timestamp_pb2.Timestamp()
-        ts.GetCurrentTime()
-        out = buspacket_pb2.BusPacket()
-        out.trace_id = packet.trace_id
-        out.sender_id = "cap-worker"
-        out.protocol_version = DEFAULT_PROTOCOL_VERSION
-        out.created_at.CopyFrom(ts)
-        out.job_result.CopyFrom(res)
-        await nc.publish(SUBJECT_RESULT, out.SerializeToString())
-
-    await nc.subscribe(subject, queue=subject, cb=on_msg)
-    try:
-        while True:
-            await asyncio.sleep(1)
-    finally:
-        await nc.drain()