conseel 0.5.0__py3-none-any.whl

conseel/__init__.py

@@ -0,0 +1,3 @@
+from conseel.transport import Transport, AsyncTransport
+
+__all__ = ["Transport", "AsyncTransport"]

conseel/transport.py

@@ -0,0 +1,84 @@
+"""Encrypted httpx transports for AI APIs.
+
+Extends tng.Transport with Cohere-specific defaults (ITA attestation,
+header forwarding) and automatic model-name header promotion from JSON
+request bodies.
+"""
+
+from __future__ import annotations
+
+import copy
+import json
+from typing import Optional
+
+import httpx
+
+import cohere_tng as tng
+
+_MODEL_HEADER = "x-gateway-model-name"
+
+_DEFAULT_FORWARD_HEADERS: list = ["authorization", _MODEL_HEADER]
+
+_DEFAULT_VERIFY: dict = {
+    "model": "passport",
+    "as_provider": "ita",
+    "ita_jwks_addr": "https://portal.trustauthority.intel.com",
+    "policy_ids": ["cbeedffa-e224-4664-b6b4-573fcd4133d3"],
+}
+
+_UNSET = object()
+
+
+def _should_extract_model(request: httpx.Request) -> bool:
+    if _MODEL_HEADER in request.headers:
+        return False
+    return "json" in request.headers.get("content-type", "")
+
+
+def _promote_model_from_body(request: httpx.Request, body: bytes) -> None:
+    if not body:
+        return
+    try:
+        model = json.loads(body).get("model")
+        if model:
+            request.headers[_MODEL_HEADER] = str(model)
+    except (json.JSONDecodeError, AttributeError):
+        pass
+
+
+class Transport(tng.Transport):
+    def __init__(
+        self,
+        *,
+        verify: Optional[dict] = _UNSET,
+        ohttp: Optional[dict] = None,
+    ):
+        if verify is _UNSET:
+            verify = copy.deepcopy(_DEFAULT_VERIFY)
+        ohttp = dict(ohttp) if ohttp else {}
+        ohttp.setdefault("forward_headers", list(_DEFAULT_FORWARD_HEADERS))
+        super().__init__(verify=verify, ohttp=ohttp)
+
+    def handle_request(self, request: httpx.Request) -> httpx.Response:
+        if _should_extract_model(request):
+            _promote_model_from_body(request, request.read())
+        return super().handle_request(request)
+
+
+class AsyncTransport(tng.AsyncTransport):
+    def __init__(
+        self,
+        *,
+        verify: Optional[dict] = _UNSET,
+        ohttp: Optional[dict] = None,
+    ):
+        if verify is _UNSET:
+            verify = copy.deepcopy(_DEFAULT_VERIFY)
+        ohttp = dict(ohttp) if ohttp else {}
+        ohttp.setdefault("forward_headers", list(_DEFAULT_FORWARD_HEADERS))
+        super().__init__(verify=verify, ohttp=ohttp)
+
+    async def handle_async_request(self, request: httpx.Request) -> httpx.Response:
+        if _should_extract_model(request):
+            _promote_model_from_body(request, await request.aread())
+        return await super().handle_async_request(request)

conseel-0.5.0.dist-info/METADATA

@@ -0,0 +1,88 @@
+Metadata-Version: 2.4
+Name: conseel
+Version: 0.5.0
+Summary: Drop-in encrypted transport for AI SDKs
+Author-email: Cohere <support@cohere.com>
+License: Apache-2.0
+Project-URL: Homepage, https://github.com/cohere-ai/tng
+Project-URL: Repository, https://github.com/cohere-ai/tng
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Requires-Dist: cohere-tng
+Requires-Dist: httpx>=0.23.0
+
+# conseel
+
+Drop-in encrypted transport for AI SDKs. Wraps [cohere-tng](https://pypi.org/project/cohere-tng/) to route
+requests through OHTTP encryption with TEE attestation verification, and
+automatically promotes the `model` field from JSON request bodies into an
+`x-gateway-model-name` header for backend routing.
+
+## Install
+
+```bash
+pip install conseel
+```
+
+## Usage
+
+### Cohere
+
+```python
+import cohere
+import httpx
+from conseel import Transport
+
+co = cohere.ClientV2(
+    api_key="...",
+    httpx_client=httpx.Client(transport=Transport()),
+)
+co.chat(model="command-a-plus-05-2026", messages=[...])
+```
+
+### OpenAI
+
+```python
+from openai import OpenAI
+import httpx
+from conseel import Transport
+
+client = OpenAI(
+    http_client=httpx.Client(transport=Transport()),
+)
+client.chat.completions.create(model="gpt-4", messages=[...])
+```
+
+### Async
+
+```python
+import httpx
+from conseel import AsyncTransport
+
+async with httpx.AsyncClient(transport=AsyncTransport()) as client:
+    resp = await client.post(url, json={"model": "command-a-plus-05-2026", ...})
+```
+
+## What it does
+
+1. **Encrypts** all traffic via OHTTP so that even the network infrastructure
+   cannot inspect request or response payloads.
+2. **Verifies** the remote TEE via Intel Trust Authority attestation before
+   sending any data (configurable via the `verify` parameter).
+3. **Extracts** the `model` field from JSON request bodies and sets it as the
+   `x-gateway-model-name` HTTP header for gateway routing. Non-JSON requests
+   (e.g. multipart audio uploads) are streamed through without inspection.
+4. **Forwards** `authorization` and `x-gateway-model-name` headers through the
+   OHTTP layer to the backend.
+
+## Configuration
+
+`Transport` and `AsyncTransport` accept the same `verify` and `ohttp` keyword
+arguments as `cohere_tng.Transport` (see [TNG configuration docs](https://github.com/cohere-ai/tng/blob/cohere/docs/configuration.md)
+for the full schema). The only difference is that `conseel` provides sensible
+defaults:
+
+- **`verify`** — Defaults to Intel Trust Authority attestation. Pass `None` to
+  disable verification (not recommended for production).
+- **`ohttp`** — Defaults include forwarding `authorization` and
+  `x-gateway-model-name` headers.

conseel-0.5.0.dist-info/RECORD

@@ -0,0 +1,8 @@
+conseel/__init__.py,sha256=DJFz3rj-oNVxfguDgIARmS7Kkj2Cu8u2_H8Pxx2ubFQ,99
+conseel/transport.py,sha256=tQarLnevZvTXeX01ODrMEWSnTw0buTnGYwjyp3Z5pu0,2477
+conseel-0.5.0.dist-info/METADATA,sha256=uLF8qHfsXFWhEvH-rRofY_7FJE-TVyS848xgReIM71A,2640
+conseel-0.5.0.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
+conseel-0.5.0.dist-info/scm_file_list.json,sha256=DQdOFCU3IrJWc_osNpHdnKLm799WLQ0lU7SJS7hIezw,122
+conseel-0.5.0.dist-info/scm_version.json,sha256=jKeuu9N9hw_EVL0ide7BofACcmszToN6BYZ52yJ-UKw,160
+conseel-0.5.0.dist-info/top_level.txt,sha256=ls9yohhlR0r4eY70dV7sWwj5ivFpVK6wpLIjoNnhJZw,8
+conseel-0.5.0.dist-info/RECORD,,

conseel-0.5.0.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (82.0.1)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

conseel-0.5.0.dist-info/scm_file_list.json

@@ -0,0 +1,8 @@
+{
+  "files": [
+    "README.md",
+    "pyproject.toml",
+    "src/conseel/__init__.py",
+    "src/conseel/transport.py"
+  ]
+}

conseel-0.5.0.dist-info/scm_version.json

@@ -0,0 +1,8 @@
+{
+  "tag": "0.5.0",
+  "distance": 0,
+  "node": "g1d6b24e94444392b42ad3732b12b6c182bee69b6",
+  "dirty": false,
+  "branch": "HEAD",
+  "node_date": "2026-07-03"
+}

conseel-0.5.0.dist-info/top_level.txt

@@ -0,0 +1 @@
+conseel