chitmark 0.1.1__tar.gz

chitmark-0.1.1/.gitignore

@@ -0,0 +1,93 @@
+# Dependencies
+node_modules/
+.pnpm-store/
+.corepack-cache/
+
+# Build outputs
+dist/
+build/
+out/
+*.tsbuildinfo
+.turbo/
+.vite/
+.cache/
+.eslintcache
+.next/
+.nuxt/
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.egg-info/
+.eggs/
+.venv/
+venv/
+.env.venv/
+.python-version
+.mypy_cache/
+.pytest_cache/
+.ruff_cache/
+.tox/
+.nox/
+.hypothesis/
+htmlcov/
+.coverage
+.coverage.*
+coverage.xml
+packages/sdk-python/dist/
+.uv/
+
+# Env & secrets (never commit; keep templates)
+.env
+.env.*
+!.env.example
+!.env*.example
+*.pem
+*.key
+!*.key.pub
+
+# IDE / OS
+.DS_Store
+Thumbs.db
+.idea/
+.vscode/*
+!.vscode/extensions.json
+!.vscode/settings.json
+*.swp
+*.swo
+*~
+
+# Coverage / reports
+coverage/
+.nyc_output/
+playwright-report/
+test-results/
+blob-report/
+
+# Logs
+*.log
+logs/
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+# Wrangler / Cloudflare
+.wrangler/
+.dev.vars
+.dev.vars.*
+.mf/
+
+# Packaging / local artifacts
+*.tgz
+.python-packages/
+*.local
+
+# Local planning / task boards (not source of truth)
+.tasks/
+
+# Tinybird CLI local auth (contains tokens)
+.tinyb
+tinybird/.tinyb

chitmark-0.1.1/LICENSE

@@ -0,0 +1,15 @@
+Copyright (c) 2026 Open Agent Ledger. All rights reserved.
+
+Proprietary license. You are granted a non-exclusive, non-transferable,
+worldwide right to use, modify, and integrate this software in applications
+that communicate with the Chitmark API. Redistribution of this software or
+its modifications — in whole or in part — and sublicensing are prohibited
+without prior written consent from Open Agent Ledger.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

chitmark-0.1.1/PKG-INFO

@@ -0,0 +1,130 @@
+Metadata-Version: 2.4
+Name: chitmark
+Version: 0.1.1
+Summary: Official Python SDK for Chitmark by Open Agent Ledger — trust decisions on agent-mediated actions (verify, feedback, challenge)
+Project-URL: Homepage, https://chitmark.com
+Project-URL: Documentation, https://chitmark.com/docs
+Project-URL: Repository, https://github.com/nonameuserd/Chitmark
+Project-URL: Issues, https://github.com/nonameuserd/Chitmark/issues
+Author-email: Open Agent Ledger <dev@chitmark.com>
+License: Proprietary — no open-source grant. Copyright (c) 2026 Open Agent Ledger. All rights reserved.
+License-File: LICENSE
+Keywords: agent-actions,anti-abuse,chitmark,open-agent-ledger,trust-decisions
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Typing :: Typed
+Requires-Python: >=3.10
+Requires-Dist: httpx>=0.27.0
+Provides-Extra: dev
+Requires-Dist: cryptography>=43.0.0; extra == 'dev'
+Requires-Dist: mypy>=1.14.0; extra == 'dev'
+Requires-Dist: pyjwt>=2.9.0; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.25.0; extra == 'dev'
+Requires-Dist: pytest>=8.3.0; extra == 'dev'
+Requires-Dist: respx>=0.22.0; extra == 'dev'
+Requires-Dist: ruff>=0.9.0; extra == 'dev'
+Provides-Extra: verdict
+Requires-Dist: cryptography>=43.0.0; extra == 'verdict'
+Requires-Dist: pyjwt>=2.9.0; extra == 'verdict'
+Description-Content-Type: text/markdown
+
+# chitmark (Python)
+
+Official Python SDK for Chitmark — trust decisions on agent-mediated actions, tuned by business outcomes (`verify` / `feedback` / `challenge`).
+
+[![PyPI version](https://img.shields.io/pypi/v/chitmark.svg)](https://pypi.org/project/chitmark/)
+
+Requires Python ≥ 3.10.
+
+## Install
+
+```bash
+pip install chitmark
+# or
+uv add chitmark
+```
+
+## Quick start
+
+```python
+from chitmark import Chitmark
+
+client = Chitmark(api_key="ck_live_...")
+
+verdict = client.verify(
+    action="signup",
+    session="sess_9f3a",
+    surface="app.acme.com/signup",
+    subject={
+        "email": "buyer@acmecorp.com",
+        "ip": "203.0.113.7",
+        "userAgent": "...",
+    },
+)
+# Persist verdict["eventId"] on the account row — feedback joins only on that id.
+# Default pii_mode="hashed" minimizes email/IP before the wire.
+```
+
+## API
+
+Three verbs:
+
+| Method                  | Endpoint             | Purpose  |
+| :---------------------- | :------------------- | :------- |
+| `client.verify(...)`    | `POST /v1/verify`    | Decide   |
+| `client.feedback(...)`  | `POST /v1/feedback`  | Learn    |
+| `client.challenge(...)` | `POST /v1/challenge` | Escalate |
+
+**Golden rule:** fail to `challenge`, never to `allow`. Timeouts return a degraded challenge verdict.
+
+### Feedback
+
+Attribution is a schema contract, not a lookup: store the `eventId` from
+`verify` on the account row, then report outcomes against that same id — never
+a derived or guessed id.
+
+```python
+# At signup: persist the join key
+verdict = client.verify(action="signup", subject={"email": "a@b.com"})
+db.accounts.update(user_id, chitmark_event_id=verdict["eventId"])
+
+# Later, when a label matures (credit burn, chargeback, …):
+client.feedback(
+    event_id=account.chitmark_event_id,  # the stored join key — never guessed
+    outcome="credit_burn",
+    value=87.4,
+    unit="usd",
+    observed_at="2026-08-06T04:00:00Z",
+)
+```
+
+### PII
+
+| Mode          | Behavior                                                |
+| :------------ | :------------------------------------------------------ |
+| `hashed` (default) | SHA-256 email, /24 IP truncation, minimized form fields |
+| `none`        | Derived/header-shape signals only                       |
+| `raw`         | Tenant opt-in only; higher compliance review            |
+
+## Develop
+
+```bash
+cd packages/sdk-python
+uv sync --extra dev   # or: pip install -e ".[dev]"
+pytest
+ruff check .
+```
+
+## Resources
+
+- [API reference](https://chitmark.com/docs)
+- [GitHub](https://github.com/nonameuserd/Chitmark)
+
+## License
+
+Proprietary — see [LICENSE](LICENSE).

chitmark-0.1.1/README.md

@@ -0,0 +1,95 @@
+# chitmark (Python)
+
+Official Python SDK for Chitmark — trust decisions on agent-mediated actions, tuned by business outcomes (`verify` / `feedback` / `challenge`).
+
+[![PyPI version](https://img.shields.io/pypi/v/chitmark.svg)](https://pypi.org/project/chitmark/)
+
+Requires Python ≥ 3.10.
+
+## Install
+
+```bash
+pip install chitmark
+# or
+uv add chitmark
+```
+
+## Quick start
+
+```python
+from chitmark import Chitmark
+
+client = Chitmark(api_key="ck_live_...")
+
+verdict = client.verify(
+    action="signup",
+    session="sess_9f3a",
+    surface="app.acme.com/signup",
+    subject={
+        "email": "buyer@acmecorp.com",
+        "ip": "203.0.113.7",
+        "userAgent": "...",
+    },
+)
+# Persist verdict["eventId"] on the account row — feedback joins only on that id.
+# Default pii_mode="hashed" minimizes email/IP before the wire.
+```
+
+## API
+
+Three verbs:
+
+| Method                  | Endpoint             | Purpose  |
+| :---------------------- | :------------------- | :------- |
+| `client.verify(...)`    | `POST /v1/verify`    | Decide   |
+| `client.feedback(...)`  | `POST /v1/feedback`  | Learn    |
+| `client.challenge(...)` | `POST /v1/challenge` | Escalate |
+
+**Golden rule:** fail to `challenge`, never to `allow`. Timeouts return a degraded challenge verdict.
+
+### Feedback
+
+Attribution is a schema contract, not a lookup: store the `eventId` from
+`verify` on the account row, then report outcomes against that same id — never
+a derived or guessed id.
+
+```python
+# At signup: persist the join key
+verdict = client.verify(action="signup", subject={"email": "a@b.com"})
+db.accounts.update(user_id, chitmark_event_id=verdict["eventId"])
+
+# Later, when a label matures (credit burn, chargeback, …):
+client.feedback(
+    event_id=account.chitmark_event_id,  # the stored join key — never guessed
+    outcome="credit_burn",
+    value=87.4,
+    unit="usd",
+    observed_at="2026-08-06T04:00:00Z",
+)
+```
+
+### PII
+
+| Mode          | Behavior                                                |
+| :------------ | :------------------------------------------------------ |
+| `hashed` (default) | SHA-256 email, /24 IP truncation, minimized form fields |
+| `none`        | Derived/header-shape signals only                       |
+| `raw`         | Tenant opt-in only; higher compliance review            |
+
+## Develop
+
+```bash
+cd packages/sdk-python
+uv sync --extra dev   # or: pip install -e ".[dev]"
+pytest
+ruff check .
+```
+
+## Resources
+
+- [API reference](https://chitmark.com/docs)
+- [GitHub](https://github.com/nonameuserd/Chitmark)
+
+## License
+
+Proprietary — see [LICENSE](LICENSE).

chitmark-0.1.1/pyproject.toml

@@ -0,0 +1,86 @@
+[build-system]
+requires = ["hatchling>=1.27"]
+build-backend = "hatchling.build"
+
+[project]
+name = "chitmark"
+version = "0.1.1"
+description = "Official Python SDK for Chitmark by Open Agent Ledger — trust decisions on agent-mediated actions (verify, feedback, challenge)"
+readme = "README.md"
+license = { text = "Proprietary — no open-source grant. Copyright (c) 2026 Open Agent Ledger. All rights reserved." }
+requires-python = ">=3.10"
+authors = [
+  { name = "Open Agent Ledger", email = "dev@chitmark.com" },
+]
+keywords = [
+  "chitmark",
+  "open-agent-ledger",
+  "agent-actions",
+  "trust-decisions",
+  "anti-abuse",
+]
+classifiers = [
+  "Development Status :: 3 - Alpha",
+  "Intended Audience :: Developers",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3.10",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Programming Language :: Python :: 3.13",
+  "Typing :: Typed",
+]
+dependencies = [
+  "httpx>=0.27.0",
+]
+
+[project.optional-dependencies]
+dev = [
+  "pytest>=8.3.0",
+  "pytest-asyncio>=0.25.0",
+  "ruff>=0.9.0",
+  "mypy>=1.14.0",
+  "respx>=0.22.0",
+  "PyJWT>=2.9.0",
+  "cryptography>=43.0.0",
+]
+verdict = [
+  "PyJWT>=2.9.0",
+  "cryptography>=43.0.0",
+]
+
+[project.urls]
+Homepage = "https://chitmark.com"
+Documentation = "https://chitmark.com/docs"
+Repository = "https://github.com/nonameuserd/Chitmark"
+Issues = "https://github.com/nonameuserd/Chitmark/issues"
+
+# src/chitmark layout is auto-discovered by hatchling
+
+[tool.hatch.build.targets.sdist]
+include = [
+  "/src",
+  "/tests",
+  "/README.md",
+  "/LICENSE",
+]
+
+[tool.hatch.metadata]
+license-files = ["LICENSE"]
+
+[tool.pytest.ini_options]
+asyncio_mode = "auto"
+testpaths = ["tests"]
+pythonpath = ["src"]
+
+[tool.ruff]
+line-length = 90
+target-version = "py310"
+
+[tool.ruff.lint]
+select = ["E", "F", "I", "UP", "B", "SIM"]
+
+[tool.mypy]
+python_version = "3.10"
+strict = true
+packages = ["chitmark"]
+mypy_path = "src"

chitmark-0.1.1/src/chitmark/__init__.py

@@ -0,0 +1,45 @@
+"""Official Python SDK for Chitmark by Open Agent Ledger.
+
+Trust decisions on agent-mediated actions (verify, feedback, challenge),
+tuned by business outcomes.
+"""
+
+from chitmark.client import SDK_VERSION, Chitmark
+from chitmark.errors import ChitmarkApiError, ChitmarkError
+from chitmark.pii import hash_email_sha256, truncate_ip
+from chitmark.types import (
+    ActorType,
+    ChallengeMethod,
+    ChallengeResponse,
+    Decision,
+    FeedbackResponse,
+    Outcome,
+    Principal,
+    Subject,
+    Verdict,
+    VerdictTokenClaims,
+)
+from chitmark.verify_token import VerdictTokenError, verify_verdict_token
+
+__all__ = [
+    "SDK_VERSION",
+    "ActorType",
+    "ChallengeMethod",
+    "ChallengeResponse",
+    "Chitmark",
+    "ChitmarkApiError",
+    "ChitmarkError",
+    "Decision",
+    "FeedbackResponse",
+    "Outcome",
+    "Principal",
+    "Subject",
+    "Verdict",
+    "VerdictTokenClaims",
+    "VerdictTokenError",
+    "hash_email_sha256",
+    "truncate_ip",
+    "verify_verdict_token",
+]
+
+__version__ = SDK_VERSION