chitmark 0.6.0__tar.gz → 0.6.2__tar.gz

{chitmark-0.6.0 → chitmark-0.6.2}/.gitignore

@@ -94,3 +94,8 @@ lerna-debug.log*
 # Tinybird CLI local auth (contains tokens)
 .tinyb
 tinybird/.tinyb
+.repo-staging
+_publish
+.sync-push
+.labs/
+.routing-lab/

{chitmark-0.6.0 → chitmark-0.6.2}/PKG-INFO

@@ -1,13 +1,13 @@
 Metadata-Version: 2.5
 Name: chitmark
-Version: 0.6.0
+Version: 0.6.2
 Summary: Official Python SDK for Chitmark by Open Agent Ledger: trust decisions on agent-mediated actions (verify, feedback, challenge)
 Project-URL: Homepage, https://chitmark.com
 Project-URL: Documentation, https://chitmark.com/docs
 Author-email: Open Agent Ledger <dev@chitmark.com>
 License: Proprietary: no open-source grant. Copyright (c) 2026 Open Agent Ledger. All rights reserved.
 License-File: LICENSE
-Keywords: agent-actions,anti-abuse,chitmark,open-agent-ledger,trust-decisions
+Keywords: agent-actions,allow-challenge-deny,anti-abuse,chitmark,credit-abuse,free-tier-abuse,free-trial-abuse,open-agent-ledger,signup-abuse,trial-farming,trust-decisions
 Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: Programming Language :: Python :: 3

{chitmark-0.6.0 → chitmark-0.6.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "chitmark"
-version = "0.6.0"
+version = "0.6.2"
 description = "Official Python SDK for Chitmark by Open Agent Ledger: trust decisions on agent-mediated actions (verify, feedback, challenge)"
 readme = "README.md"
 license = { text = "Proprietary: no open-source grant. Copyright (c) 2026 Open Agent Ledger. All rights reserved." }
@@ -18,6 +18,12 @@ keywords = [
   "agent-actions",
   "trust-decisions",
   "anti-abuse",
+  "free-trial-abuse",
+  "trial-farming",
+  "signup-abuse",
+  "credit-abuse",
+  "free-tier-abuse",
+  "allow-challenge-deny",
 ]
 classifiers = [
   "Development Status :: 3 - Alpha",

{chitmark-0.6.0 → chitmark-0.6.2}/src/chitmark/client.py

@@ -272,7 +272,12 @@ class Chitmark:
             body["idempotencyKey"] = idempotency_key
         return cast(
             FeedbackResponse,
-            self._request("POST", "/v1/feedback", body=body, idempotency_key=idempotency_key),
+            self._request(
+                "POST",
+                "/v1/feedback",
+                body=body,
+                idempotency_key=idempotency_key,
+            ),
         )
 
     def challenge(

{chitmark-0.6.0 → chitmark-0.6.2}/src/chitmark/types.py

@@ -76,6 +76,7 @@ class VerdictTokenClaims(TypedDict, total=False):
     confidence: float
     aud: str
     sub: str
+    tid: str
     jti: str
     iat: int
     exp: int

{chitmark-0.6.0 → chitmark-0.6.2}/src/chitmark/verify_token.py

@@ -1,11 +1,13 @@
 """Client-side verdictToken verification (MVP-016).
 
 A verdictToken is an ES256 JWT decision receipt minted by the edge and bound
-to session (``sub``), origin (``aud``), and ``jti`` with a short ``exp``. This
-module validates shape, signature (against the JWKS served from
-``GET /.well-known/jwks.json``), expiry, session binding, and, when an
-expected audience is supplied, origin binding. Rejection reasons are surfaced
-as ``VerdictTokenError.code``.
+to session (``sub``), origin hint (``aud``), issuing tenant (``tid``), and
+``jti`` with a short ``exp``. This module validates shape, signature (against
+the JWKS served from ``GET /.well-known/jwks.json``), expiry, session
+binding, and, when expected values are supplied, tenant and origin binding.
+``aud`` reflects request headers and is attacker influenced: always verify
+``session`` and ``tenant_id``, never ``aud`` alone. Rejection reasons are
+surfaced as ``VerdictTokenError.code``.
 
 Requires the optional extras ``PyJWT`` and ``cryptography``
 (``uv sync --extra verdict``).
@@ -46,6 +48,7 @@ def verify_verdict_token(
     token: str,
     *,
     session: str | None = None,
+    tenant_id: str | None = None,
     aud: str | None = None,
     jwks: Mapping[str, Any] | None = None,
     jwks_url: str = DEFAULT_JWKS_URL,
@@ -57,7 +60,8 @@ def verify_verdict_token(
     Args:
         token: The ES256 JWT from a verify verdict.
         session: Expected session; token ``sub`` must equal this.
-        aud: Expected origin; token ``aud`` must equal this when provided.
+        tenant_id: Expected issuing tenant; token ``tid`` must equal this.
+        aud: Expected origin hint; token ``aud`` must equal this when provided.
         jwks: Pre-fetched JWKS mapping; skips the network fetch.
         jwks_url: JWKS endpoint; defaults to the production API.
         http_client: Reusable ``httpx.Client`` for the JWKS fetch.
@@ -65,9 +69,10 @@ def verify_verdict_token(
 
     Raises:
         VerdictTokenError: with a machine-readable ``code``:
-            ``malformed_token``, ``wrong_algorithm``, ``jwks_unavailable``,
-            ``unknown_kid``, ``invalid_signature``, ``expired``,
-            ``not_yet_valid``, ``wrong_session``, or ``wrong_aud``.
+            ``malformed_token``, ``wrong_algorithm``, ``wrong_type``,
+            ``jwks_unavailable``, ``unknown_kid``, ``invalid_signature``,
+            ``expired``, ``not_yet_valid``, ``wrong_session``,
+            ``wrong_tenant``, or ``wrong_aud``.
     """
     if pyjwt is None:  # pragma: no cover
         raise VerdictTokenError(
@@ -84,6 +89,14 @@ def verify_verdict_token(
             f"verdictToken must use ES256, got {alg!r}",
             code="wrong_algorithm",
         )
+    # RFC 8725 section 3.11: explicit typing keeps this receipt distinct
+    # from any other JWT a tenant might accept. The edge always mints
+    # typ "JWT".
+    if header.get("typ") != "JWT":
+        raise VerdictTokenError(
+            f"verdictToken must be a JWT, got {header.get('typ')!r}",
+            code="wrong_type",
+        )
     kid = header.get("kid")
     if not isinstance(kid, str) or not kid:
         raise VerdictTokenError(
@@ -132,6 +145,11 @@ def verify_verdict_token(
             "verdictToken was minted for a different session",
             code="wrong_session",
         )
+    if tenant_id is not None and claims.get("tid") != tenant_id:
+        raise VerdictTokenError(
+            "verdictToken was minted for a different tenant",
+            code="wrong_tenant",
+        )
     if aud is not None and claims.get("aud") != aud:
         raise VerdictTokenError(
             "verdictToken was minted for a different origin",

{chitmark-0.6.0 → chitmark-0.6.2}/tests/test_verify_token.py

@@ -94,6 +94,7 @@ def _mint(keys: dict, **overrides: object) -> str:
         "confidence": 0.56,
         "aud": "https://app.acme.com",
         "sub": "sess_token_a",
+        "tid": "org_unit",
         "jti": "jti_1",
         "iat": now,
         "exp": now + 300,
@@ -144,6 +145,23 @@ def test_rejects_wrong_audience(keys: dict) -> None:
     assert exc.value.code == "wrong_aud"
 
 
+def test_rejects_wrong_tenant(keys: dict) -> None:
+    token = _mint(keys, tid="org_other")
+
+    with pytest.raises(VerdictTokenError) as exc:
+        verify_verdict_token(token, tenant_id="org_unit", jwks=_jwks(keys))
+    assert exc.value.code == "wrong_tenant"
+
+
+def test_accepts_expected_tenant(keys: dict) -> None:
+    token = _mint(keys, tid="org_unit", sub="sess_token_a")
+
+    claims = verify_verdict_token(
+        token, session="sess_token_a", tenant_id="org_unit", jwks=_jwks(keys)
+    )
+    assert claims["tid"] == "org_unit"
+
+
 def test_rejects_expired_token(keys: dict) -> None:
     token = _mint(keys, exp=int(time.time()) - 120)
 
@@ -184,6 +202,17 @@ def test_rejects_wrong_algorithm(keys: dict) -> None:
     assert exc.value.code == "wrong_algorithm"
 
 
+def test_rejects_missing_jwt_typ(keys: dict) -> None:
+    token = _mint(keys)
+    header, payload, signature = token.split(".")
+    wrong_header = _b64url_json({"alg": "ES256", "typ": "at+jwt", "kid": keys["kid"]})
+    wrong = f"{wrong_header}.{payload}.{signature}"
+
+    with pytest.raises(VerdictTokenError) as exc:
+        verify_verdict_token(wrong, jwks=_jwks(keys))
+    assert exc.value.code == "wrong_type"
+
+
 def test_rejects_malformed_token() -> None:
     with pytest.raises(VerdictTokenError) as exc:
         verify_verdict_token("not-a-jwt", jwks={"keys": []})