cred-autogen 1.0.0__tar.gz

cred_autogen-1.0.0/.gitignore

@@ -0,0 +1,50 @@
+node_modules/
+dist/
+build/
+
+# Sprint artifacts
+.factory/
+.sprint-*
+.sprint-pid
+.rewire-done
+.content-rewrite-done
+.hubspot-done
+.integrations-done
+.done
+.validation-report.md
+.sprint-logs/
+.sprint-prompts/
+SESSION_PACKAGE.md
+run-sprint.sh
+validate.sh
+
+# Internal planning docs (not for public repo)
+CLAUDE.md
+PLAN.md
+HANDOFF.md
+VALIDATION.md
+MARKETING-VALIDATION.md
+FINAL-SUBMISSION-VALIDATION.md
+.next/
+out/
+coverage/
+*.tsbuildinfo
+.turbo/
+.DS_Store
+*.pem
+.env
+.env.local
+.env*.local
+!.env.example
+
+# Python
+__pycache__/
+*.py[cod]
+*.pyo
+*.egg-info/
+.pytest_cache/
+.venv/
+venv/
+dist/
+*.dist-info/
+packages/sdk-python/.venv/

cred_autogen-1.0.0/PKG-INFO

@@ -0,0 +1,78 @@
+Metadata-Version: 2.4
+Name: cred-autogen
+Version: 1.0.0
+Summary: Cred AutoGen integration — credential delegation FunctionTool for Microsoft AutoGen agents
+Author-email: Cred <hello@cred.ninja>
+License: Apache-2.0
+Keywords: ai-agents,autogen,cred,delegation,microsoft,oauth
+Requires-Python: >=3.9
+Requires-Dist: autogen-core>=0.4
+Requires-Dist: cred-auth>=0.1.0
+Provides-Extra: dev
+Requires-Dist: hatchling; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.21; extra == 'dev'
+Requires-Dist: pytest>=7.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# cred-autogen
+
+Microsoft AutoGen integration for Cred. OAuth2 credential delegation for AI agents.
+
+## Install
+
+```bash
+pip install cred-autogen
+```
+
+## Quick Start
+
+```python
+import os
+from cred_autogen import cred_delegate_tool
+
+tool = cred_delegate_tool(
+    agent_token=os.environ["CRED_AGENT_TOKEN"],
+    user_id="user_123",
+    app_client_id="my_app_client_id",
+)
+
+# Register with an AutoGen AssistantAgent
+from autogen_agentchat.agents import AssistantAgent
+
+agent = AssistantAgent(
+    name="assistant",
+    tools=[tool],
+)
+```
+
+## Tool Schema
+
+The `cred_delegate` tool accepts:
+
+| Parameter | Type | Description |
+|-----------|------|-------------|
+| `service` | `string` | Service slug (e.g. `google`, `github`) |
+| `scopes` | `string[]` | OAuth scopes to request |
+
+`user_id` and `app_client_id` are pre-configured at factory time, not agent-controlled.
+
+## Handling Consent
+
+When the user hasn't connected the service, the tool raises `ConsentRequiredError`.
+The error's `consent_url` attribute contains the URL to redirect the user.
+
+```python
+from cred import ConsentRequiredError
+
+try:
+    result = await tool.run_json(
+        {"service": "google", "scopes": ["calendar.readonly"]},
+        cancellation_token,
+    )
+except ConsentRequiredError as e:
+    print(f"Redirect user to: {e.consent_url}")
+```
+
+## Cred Cloud (Coming Soon)
+
+Managed cloud delegation is coming. [Join the waitlist](https://cred.ninja/waitlist).

cred_autogen-1.0.0/README.md

@@ -0,0 +1,62 @@
+# cred-autogen
+
+Microsoft AutoGen integration for Cred. OAuth2 credential delegation for AI agents.
+
+## Install
+
+```bash
+pip install cred-autogen
+```
+
+## Quick Start
+
+```python
+import os
+from cred_autogen import cred_delegate_tool
+
+tool = cred_delegate_tool(
+    agent_token=os.environ["CRED_AGENT_TOKEN"],
+    user_id="user_123",
+    app_client_id="my_app_client_id",
+)
+
+# Register with an AutoGen AssistantAgent
+from autogen_agentchat.agents import AssistantAgent
+
+agent = AssistantAgent(
+    name="assistant",
+    tools=[tool],
+)
+```
+
+## Tool Schema
+
+The `cred_delegate` tool accepts:
+
+| Parameter | Type | Description |
+|-----------|------|-------------|
+| `service` | `string` | Service slug (e.g. `google`, `github`) |
+| `scopes` | `string[]` | OAuth scopes to request |
+
+`user_id` and `app_client_id` are pre-configured at factory time, not agent-controlled.
+
+## Handling Consent
+
+When the user hasn't connected the service, the tool raises `ConsentRequiredError`.
+The error's `consent_url` attribute contains the URL to redirect the user.
+
+```python
+from cred import ConsentRequiredError
+
+try:
+    result = await tool.run_json(
+        {"service": "google", "scopes": ["calendar.readonly"]},
+        cancellation_token,
+    )
+except ConsentRequiredError as e:
+    print(f"Redirect user to: {e.consent_url}")
+```
+
+## Cred Cloud (Coming Soon)
+
+Managed cloud delegation is coming. [Join the waitlist](https://cred.ninja/waitlist).

cred_autogen-1.0.0/cred_autogen/__init__.py

@@ -0,0 +1,7 @@
+"""Cred AutoGen integration."""
+
+from .tool import cred_delegate_tool
+
+CredTool = cred_delegate_tool
+
+__all__ = ["cred_delegate_tool", "CredTool"]

cred_autogen-1.0.0/cred_autogen/tool.py

@@ -0,0 +1,94 @@
+"""Cred AutoGen integration.
+
+Returns a FunctionTool that AutoGen agents can call to get delegated OAuth tokens.
+The tool schema matches the Cred MCP tool spec:
+
+    name:   cred_delegate
+    params: { service: str, scopes: list[str] }
+
+user_id and app_client_id are pre-configured at factory time and are not
+agent-controlled inputs.
+"""
+
+from __future__ import annotations
+
+import json
+from typing import Annotated, Optional
+
+from autogen_core.tools import FunctionTool
+
+from cred import Cred
+
+
+def cred_delegate_tool(
+    agent_token: str,
+    user_id: str,
+    app_client_id: str,
+    base_url: str = "https://api.cred.ninja",
+) -> FunctionTool:
+    """Create an AutoGen FunctionTool for credential delegation.
+
+    The returned tool is pre-configured with the user's identity and app context.
+    At runtime, the agent supplies ``service`` and ``scopes``.
+
+    Args:
+        agent_token:    Agent token issued by Cred (starts with ``cred_at_``).
+        user_id:        The user whose credentials to delegate.
+        app_client_id:  The Cred app client ID to delegate for.
+        base_url:       Override the API base URL.
+
+    Returns:
+        A ``FunctionTool`` ready to use with AutoGen agents.
+
+    Raises:
+        ConsentRequiredError: (from the tool at runtime) when the user hasn't
+            connected the requested service. The error message includes
+            ``consent_url`` so the caller can redirect the user.
+
+    Example::
+
+        from cred_autogen import cred_delegate_tool
+
+        tool = cred_delegate_tool(
+            agent_token=os.environ["CRED_AGENT_TOKEN"],
+            user_id="user_123",
+            app_client_id="my_app",
+        )
+        # Register with an AutoGen agent
+    """
+    cred = Cred(agent_token=agent_token, base_url=base_url)
+
+    def delegate(
+        service: Annotated[str, "Service slug to get a token for (e.g. 'google', 'github', 'google-calendar')."],
+        scopes: Annotated[list[str], "OAuth scopes to request (e.g. ['calendar.readonly']). Pass an empty list to use all consented scopes."],
+    ) -> str:
+        """Get a delegated OAuth access token for a third-party service on behalf of the current user.
+
+        Returns JSON with access_token, token_type, expires_in, service, scopes,
+        and delegation_id. Raises an error with consent_url if the user hasn't
+        connected the service.
+        """
+        resolved_scopes: Optional[list[str]] = scopes if scopes else None
+
+        result = cred.delegate(
+            service=service,
+            user_id=user_id,
+            app_client_id=app_client_id,
+            scopes=resolved_scopes,
+        )
+
+        return json.dumps({
+            "access_token": result.access_token,
+            "token_type": result.token_type,
+            "expires_in": result.expires_in,
+            "service": result.service,
+            "scopes": result.scopes,
+            "delegation_id": result.delegation_id,
+        })
+
+    return FunctionTool(delegate, name="cred_delegate", description=(
+        "Get a delegated OAuth access token for a third-party service "
+        "on behalf of the current user. "
+        "Returns access_token, token_type, expires_in, service, and scopes. "
+        "Raises an error with consent_url if the user hasn't connected the service."
+    ))

cred_autogen-1.0.0/pyproject.toml

@@ -0,0 +1,26 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "cred-autogen"
+version = "1.0.0"
+description = "Cred AutoGen integration — credential delegation FunctionTool for Microsoft AutoGen agents"
+readme = "README.md"
+license = { text = "Apache-2.0" }
+requires-python = ">=3.9"
+authors = [{ name = "Cred", email = "hello@cred.ninja" }]
+keywords = ["cred", "autogen", "microsoft", "oauth", "delegation", "ai-agents"]
+dependencies = [
+    "cred-auth>=0.1.0",
+    "autogen-core>=0.4",
+]
+
+[project.optional-dependencies]
+dev = ["pytest>=7.0", "pytest-asyncio>=0.21", "hatchling"]
+
+[tool.hatch.build.targets.wheel]
+packages = ["cred_autogen"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]

cred_autogen-1.0.0/tests/test_tool.py

@@ -0,0 +1,206 @@
+"""Cred AutoGen integration tests.
+
+Tests focus on: FunctionTool shape, invocation, output JSON,
+and error propagation. The Cred client is mocked -- no real HTTP.
+"""
+
+import asyncio
+import json
+from datetime import datetime, timezone
+from typing import Optional
+import pytest
+import httpx
+from unittest.mock import MagicMock, patch
+
+from autogen_core.tools import FunctionTool
+from autogen_core import CancellationToken
+
+from cred import DelegationResult, ConsentRequiredError, CredError
+from cred_autogen import cred_delegate_tool, CredTool
+
+TOKEN = "cred_at_test"
+USER_ID = "user_123"
+APP_CLIENT_ID = "app_1"
+
+
+def make_delegation_result(
+    *,
+    access_token: str = "at",
+    token_type: str = "Bearer",
+    expires_in: int = 3600,
+    service: str = "google",
+    scopes: Optional[list[str]] = None,
+    delegation_id: str = "del_1",
+) -> DelegationResult:
+    return DelegationResult(
+        access_token=access_token,
+        token_type=token_type,
+        expires_in=expires_in,
+        expires_at=datetime(2026, 3, 1, tzinfo=timezone.utc),
+        service=service,
+        scopes=scopes or [],
+        delegation_id=delegation_id,
+    )
+
+
+@pytest.fixture
+def mock_cred():
+    return MagicMock()
+
+
+@pytest.fixture
+def tool(mock_cred):
+    with patch("cred_autogen.tool.Cred", return_value=mock_cred):
+        return cred_delegate_tool(
+            agent_token=TOKEN,
+            user_id=USER_ID,
+            app_client_id=APP_CLIENT_ID,
+        )
+
+
+def run(coro):
+    """Run a coroutine synchronously (test helper)."""
+    return asyncio.run(coro)
+
+
+# -- factory function ---------------------------------------------------------
+
+class TestFactory:
+    def test_returns_function_tool(self):
+        with patch("cred_autogen.tool.Cred"):
+            t = cred_delegate_tool(
+                agent_token=TOKEN,
+                user_id=USER_ID,
+                app_client_id=APP_CLIENT_ID,
+            )
+        assert isinstance(t, FunctionTool)
+
+    def test_tool_name_is_cred_delegate(self, tool):
+        assert tool.name == "cred_delegate"
+
+    def test_tool_description_mentions_oauth(self, tool):
+        assert "access token" in tool.description.lower()
+        assert "service" in tool.description.lower()
+
+    def test_creates_cred_client_with_token_and_base_url(self):
+        with patch("cred_autogen.tool.Cred") as mock_cred_class:
+            cred_delegate_tool(
+                agent_token=TOKEN,
+                user_id=USER_ID,
+                app_client_id=APP_CLIENT_ID,
+                base_url="http://localhost:3001",
+            )
+            mock_cred_class.assert_called_once_with(
+                agent_token=TOKEN,
+                base_url="http://localhost:3001",
+            )
+
+    def test_exports_cred_tool_alias(self):
+        assert CredTool is cred_delegate_tool
+
+
+# -- invocation ---------------------------------------------------------------
+
+class TestInvoke:
+    def test_returns_json_with_access_token(self, tool, mock_cred):
+        mock_cred.delegate.return_value = make_delegation_result(
+            access_token="ya29.mock",
+            expires_in=3600,
+            service="google",
+            scopes=["calendar.readonly"],
+            delegation_id="del_abc",
+        )
+
+        result_str = run(tool.run_json(
+            {"service": "google", "scopes": ["calendar.readonly"]},
+            CancellationToken(),
+        ))
+        result = json.loads(result_str)
+
+        assert result["access_token"] == "ya29.mock"
+        assert result["token_type"] == "Bearer"
+        assert result["expires_in"] == 3600
+        assert result["service"] == "google"
+        assert result["scopes"] == ["calendar.readonly"]
+        assert result["delegation_id"] == "del_abc"
+
+    def test_passes_service_user_app_to_cred(self, tool, mock_cred):
+        mock_cred.delegate.return_value = make_delegation_result(service="github")
+
+        run(tool.run_json(
+            {"service": "github", "scopes": ["repo"]},
+            CancellationToken(),
+        ))
+
+        mock_cred.delegate.assert_called_once_with(
+            service="github",
+            user_id=USER_ID,
+            app_client_id=APP_CLIENT_ID,
+            scopes=["repo"],
+        )
+
+    def test_passes_none_scopes_when_empty_list(self, tool, mock_cred):
+        mock_cred.delegate.return_value = make_delegation_result()
+
+        run(tool.run_json(
+            {"service": "google", "scopes": []},
+            CancellationToken(),
+        ))
+
+        call_kwargs = mock_cred.delegate.call_args.kwargs
+        assert call_kwargs["scopes"] is None
+
+    def test_propagates_consent_required_error(self, tool, mock_cred):
+        mock_cred.delegate.side_effect = ConsentRequiredError(
+            "User has not consented",
+            "https://api.cred.ninja/api/connect/google/authorize?app_client_id=app_1",
+        )
+
+        with pytest.raises(ConsentRequiredError) as exc_info:
+            run(tool.run_json(
+                {"service": "google", "scopes": ["calendar.readonly"]},
+                CancellationToken(),
+            ))
+
+        assert "/api/connect/google/authorize" in exc_info.value.consent_url
+
+    def test_propagates_cred_error_on_401(self, tool, mock_cred):
+        mock_cred.delegate.side_effect = CredError(
+            "Invalid agent token", "unauthorized", 401
+        )
+
+        with pytest.raises(CredError) as exc_info:
+            run(tool.run_json(
+                {"service": "google", "scopes": []},
+                CancellationToken(),
+            ))
+
+        assert exc_info.value.status_code == 401
+
+    def test_real_cred_client_delegates_against_mock_server(self):
+        tool = cred_delegate_tool(
+            agent_token=TOKEN,
+            user_id=USER_ID,
+            app_client_id=APP_CLIENT_ID,
+            base_url="https://cred.example.com",
+        )
+
+        with patch("httpx.Client.request", return_value=httpx.Response(
+            200,
+            json={
+                "access_token": "ya29.real",
+                "token_type": "Bearer",
+                "expires_in": 3600,
+                "service": "google",
+                "scopes": ["calendar.readonly"],
+                "delegation_id": "del_real",
+            },
+        )) as request_mock:
+            result_str = run(tool.run_json(
+                {"service": "google", "scopes": ["calendar.readonly"]},
+                CancellationToken(),
+            ))
+
+        payload = json.loads(result_str)
+        assert payload["access_token"] == "ya29.real"
+        assert request_mock.called