code0-hercules 1.4.5__tar.gz → 1.5.0__tar.gz

{code0_hercules-1.4.5 → code0_hercules-1.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code0-hercules
-Version: 1.4.5
+Version: 1.5.0
 Summary: Python SDK for the hercules action runner
 License-Expression: MIT
 Project-URL: Repository, https://github.com/code0-tech/hercules
@@ -51,7 +51,7 @@ The built-in data types / functions in `hercules/definitions/` are **generated**
 release:
 
 ```bash
-uv run python scripts/build_definitions.py --version def-0.0.35
+uv run python scripts/build_definitions.py --version def-0.0.36
 ```
 
 ## Build & release
@@ -70,7 +70,7 @@ git tag 0.1.0 && git push origin 0.1.0
 ```
 
 The `code0-definition` release used for the built-in definitions is controlled by
-the `HERCULES_DEFINITIONS_VERSION` repository variable (default `def-0.0.35`).
+the `HERCULES_DEFINITIONS_VERSION` repository variable (default `def-0.0.36`).
 
 Build locally:
 

{code0_hercules-1.4.5 → code0_hercules-1.5.0}/README.md

@@ -36,7 +36,7 @@ The built-in data types / functions in `hercules/definitions/` are **generated**
 release:
 
 ```bash
-uv run python scripts/build_definitions.py --version def-0.0.35
+uv run python scripts/build_definitions.py --version def-0.0.36
 ```
 
 ## Build & release
@@ -55,7 +55,7 @@ git tag 0.1.0 && git push origin 0.1.0
 ```
 
 The `code0-definition` release used for the built-in definitions is controlled by
-the `HERCULES_DEFINITIONS_VERSION` repository variable (default `def-0.0.35`).
+the `HERCULES_DEFINITIONS_VERSION` repository variable (default `def-0.0.36`).
 
 Build locally:
 

{code0_hercules-1.4.5 → code0_hercules-1.5.0}/code0_hercules.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code0-hercules
-Version: 1.4.5
+Version: 1.5.0
 Summary: Python SDK for the hercules action runner
 License-Expression: MIT
 Project-URL: Repository, https://github.com/code0-tech/hercules
@@ -51,7 +51,7 @@ The built-in data types / functions in `hercules/definitions/` are **generated**
 release:
 
 ```bash
-uv run python scripts/build_definitions.py --version def-0.0.35
+uv run python scripts/build_definitions.py --version def-0.0.36
 ```
 
 ## Build & release
@@ -70,7 +70,7 @@ git tag 0.1.0 && git push origin 0.1.0
 ```
 
 The `code0-definition` release used for the built-in definitions is controlled by
-the `HERCULES_DEFINITIONS_VERSION` repository variable (default `def-0.0.35`).
+the `HERCULES_DEFINITIONS_VERSION` repository variable (default `def-0.0.36`).
 
 Build locally:
 

{code0_hercules-1.4.5 → code0_hercules-1.5.0}/code0_hercules.egg-info/SOURCES.txt

@@ -233,6 +233,7 @@ hercules/definitions/taurus_text/runtime_functions/std_text_trim.py
 hercules/definitions/taurus_text/runtime_functions/std_text_uppercase.py
 hercules/internal/__init__.py
 hercules/internal/connection.py
+hercules/internal/jwt.py
 hercules/internal/literal.py
 hercules/internal/module_builder.py
 hercules/internal/pydantic_codegen.py

{code0_hercules-1.4.5 → code0_hercules-1.5.0}/hercules/internal/connection.py

@@ -12,6 +12,8 @@ import grpc
 from tucana.generated.aquila import action_pb2, action_pb2_grpc
 from tucana.generated.shared import module_pb2
 
+from hercules.internal.jwt import build_logon_token
+
 
 async def create_connection(
     module: module_pb2.Module,
@@ -22,8 +24,10 @@ async def create_connection(
     channel = grpc.aio.insecure_channel(aquila_url, options=grpc_options)
     stub = action_pb2_grpc.ActionTransferServiceStub(channel)
 
+    logon_token = build_logon_token(auth_token, module.identifier)
+
     # Bi-directional stream. Authorization is passed as call metadata.
-    stream = stub.Transfer(metadata=(("authorization", auth_token),))
+    stream = stub.Transfer(metadata=(("authorization", logon_token),))
 
     await stream.write(
         action_pb2.ActionTransferRequest(

code0_hercules-1.5.0/hercules/internal/jwt.py

@@ -0,0 +1,28 @@
+from __future__ import annotations
+
+import base64
+import hashlib
+import hmac
+import json
+import time
+
+TOKEN_LIFETIME_SECS = 300
+
+_HEADER = base64.urlsafe_b64encode(
+    json.dumps({"alg": "HS256", "typ": "JWT"}, separators=(",", ":")).encode()
+).rstrip(b"=")
+
+
+def build_logon_token(secret: str, identifier: str) -> str:
+    payload = base64.urlsafe_b64encode(
+        json.dumps(
+            {"sub": identifier, "exp": int(time.time()) + TOKEN_LIFETIME_SECS},
+            separators=(",", ":"),
+        ).encode()
+    ).rstrip(b"=")
+
+    signing_input = _HEADER + b"." + payload
+    signature = hmac.new(secret.encode(), signing_input, hashlib.sha256).digest()
+    encoded_signature = base64.urlsafe_b64encode(signature).rstrip(b"=")
+
+    return (signing_input + b"." + encoded_signature).decode()

{code0_hercules-1.4.5 → code0_hercules-1.5.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "code0-hercules"
-version = "1.4.5"
+version = "1.5.0"
 description = "Python SDK for the hercules action runner"
 readme = "README.md"
 requires-python = ">=3.10"