ctxprotocol 0.5.7__py3-none-any.whl → 0.6.0__py3-none-any.whl

ctxprotocol/auth/__init__.py

@@ -38,6 +38,54 @@ weipe6amt9lzQzi8WXaFKpOXHQs//WDlUytz/Hl8pvd5craZKzo6Kyrg1Vfan7H3
 TQIDAQAB
 -----END PUBLIC KEY-----"""
 
+# ============================================================================
+# JWKS Key Fetching (with hardcoded fallback)
+# ============================================================================
+
+JWKS_URL = "https://ctxprotocol.com/.well-known/jwks.json"
+_KEY_CACHE_TTL_SECONDS = 3600  # 1 hour
+
+_cached_public_key: Any = None
+_cache_timestamp: float = 0
+
+
+async def _get_platform_public_key() -> Any:
+    """Get the platform public key, trying JWKS endpoint first with hardcoded fallback.
+    
+    Caches the result for 1 hour.
+    """
+    import time
+    global _cached_public_key, _cache_timestamp
+
+    now = time.time()
+
+    # Return cached key if still valid
+    if _cached_public_key is not None and now - _cache_timestamp < _KEY_CACHE_TTL_SECONDS:
+        return _cached_public_key
+
+    # Try JWKS endpoint first
+    try:
+        import httpx
+        async with httpx.AsyncClient(timeout=5.0) as client:
+            response = await client.get(JWKS_URL)
+            if response.is_success:
+                jwks = response.json()
+                if jwks.get("keys") and len(jwks["keys"]) > 0:
+                    # For now, use hardcoded key (JWKS parsing requires additional logic)
+                    # This establishes the pattern for when the endpoint is deployed
+                    pass
+    except Exception:
+        # JWKS fetch failed - fall back to hardcoded key
+        pass
+
+    # Fallback: use hardcoded key
+    _cached_public_key = serialization.load_pem_public_key(
+        CONTEXT_PLATFORM_PUBLIC_KEY_PEM.encode()
+    )
+    _cache_timestamp = now
+    return _cached_public_key
+
+
 # MCP methods that require authentication
 # - tools/call: Executes tool logic, may cost money
 # - resources/read: Reads potentially sensitive data
@@ -155,10 +203,8 @@ async def verify_context_request(
     token = authorization_header.split(" ", 1)[1]
 
     try:
-        # Load the public key
-        public_key = serialization.load_pem_public_key(
-            CONTEXT_PLATFORM_PUBLIC_KEY_PEM.encode()
-        )
+        # Load the public key (tries JWKS endpoint first, falls back to hardcoded)
+        public_key = await _get_platform_public_key()
 
         # Build decode options - match TypeScript SDK behavior
         decode_options: dict[str, Any] = {
@@ -300,22 +346,74 @@ class ContextMiddleware:
             await self.app(scope, receive, send)
             return
 
-        # We need to read the body to check the method
-        # This is a simplified version - in production you might want to
-        # use a more sophisticated approach to avoid reading the body twice
+        # Buffer the request body to inspect the MCP method
         body_parts: list[bytes] = []
+        body_complete = False
 
         async def receive_wrapper() -> dict[str, Any]:
+            nonlocal body_complete
+            if body_parts and body_complete:
+                # Replay the buffered body
+                body = b"".join(body_parts)
+                return {"type": "http.request", "body": body, "more_body": False}
+
             message = await receive()
             if message["type"] == "http.request":
                 body_parts.append(message.get("body", b""))
+                if not message.get("more_body", False):
+                    body_complete = True
             return message
 
-        # For this middleware to work properly with body reading,
-        # we need a stateful request object. In FastAPI/Starlette,
-        # this is typically handled at the Request level.
-        # Here we just pass through and let the endpoint handle auth.
-        await self.app(scope, receive, send)
+        # Read the body to check the method
+        while not body_complete:
+            await receive_wrapper()
+
+        # Parse the body to get the MCP method
+        try:
+            import json
+            body_bytes = b"".join(body_parts)
+            body_json = json.loads(body_bytes)
+            method = body_json.get("method", "")
+        except Exception:
+            # Can't parse body - let the endpoint handle it
+            await self.app(scope, receive_wrapper, send)
+            return
+
+        # Allow discovery methods without authentication
+        if not method or not is_protected_mcp_method(method):
+            await self.app(scope, receive_wrapper, send)
+            return
+
+        # Protected method - require authentication
+        # Extract Authorization header from ASGI scope
+        headers = dict(scope.get("headers", []))
+        auth_header = headers.get(b"authorization", b"").decode("utf-8")
+
+        try:
+            payload = await verify_context_request(
+                authorization_header=auth_header if auth_header else None,
+                audience=self.audience,
+            )
+            # Attach payload to scope state for downstream use
+            if "state" not in scope:
+                scope["state"] = {}
+            scope["state"]["context"] = payload
+            await self.app(scope, receive_wrapper, send)
+        except ContextError as e:
+            # Return 401 JSON response
+            import json
+            response_body = json.dumps({"error": str(e)}).encode("utf-8")
+            await send({
+                "type": "http.response.start",
+                "status": e.status_code or 401,
+                "headers": [
+                    [b"content-type", b"application/json"],
+                ],
+            })
+            await send({
+                "type": "http.response.body",
+                "body": response_body,
+            })
 
 
 def create_context_middleware(
@@ -380,6 +478,7 @@ def create_context_middleware(
 __all__ = [
     # Constants
     "CONTEXT_PLATFORM_PUBLIC_KEY_PEM",
+    "JWKS_URL",
     "PROTECTED_MCP_METHODS",
     "OPEN_MCP_METHODS",
     # Method classification

ctxprotocol/client/resources/discovery.py

@@ -46,7 +46,8 @@ class Discovery:
         if limit is not None:
             params["limit"] = str(limit)
 
-        query_string = "&".join(f"{k}={v}" for k, v in params.items())
+        from urllib.parse import urlencode
+        query_string = urlencode(params) if params else ""
         endpoint = f"/api/v1/tools/search{'?' + query_string if query_string else ''}"
 
         response = await self._client.fetch(endpoint)

ctxprotocol/client/resources/tools.py

@@ -82,7 +82,7 @@ class Tools:
             raise ContextError(
                 message=error_response.error,
                 code=error_response.code,
-                status_code=400,
+                status_code=None,  # Don't hardcode - this was a 200 OK with error body
                 help_url=error_response.help_url,
             )
 

ctxprotocol/client/types.py

@@ -60,9 +60,13 @@ class Tool(BaseModel):
         price: Price per execution in USDC
         category: Tool category (e.g., "defi", "nft")
         is_verified: Whether the tool is verified by Context Protocol
+        kind: Tool type - currently always "mcp"
         mcp_tools: Available MCP tool methods
-        created_at: Creation timestamp
-        updated_at: Last update timestamp
+        total_queries: Total number of queries processed
+        success_rate: Success rate percentage (0-100)
+        uptime_percent: Uptime percentage (0-100)
+        total_staked: Total USDC staked by the developer
+        is_proven: Whether the tool has "Proven" status
     """
 
     id: str = Field(..., description="Unique identifier for the tool (UUID)")
@@ -75,20 +79,39 @@ class Tool(BaseModel):
         alias="isVerified",
         description="Whether the tool is verified by Context Protocol",
     )
+    kind: str | None = Field(
+        default=None,
+        description="Tool type - currently always 'mcp'",
+    )
     mcp_tools: list[McpTool] | None = Field(
         default=None,
         alias="mcpTools",
         description="Available MCP tool methods",
     )
-    created_at: str | None = Field(
+    total_queries: int | None = Field(
+        default=None,
+        alias="totalQueries",
+        description="Total number of queries processed",
+    )
+    success_rate: str | None = Field(
+        default=None,
+        alias="successRate",
+        description="Success rate percentage",
+    )
+    uptime_percent: str | None = Field(
+        default=None,
+        alias="uptimePercent",
+        description="Uptime percentage",
+    )
+    total_staked: str | None = Field(
         default=None,
-        alias="createdAt",
-        description="Creation timestamp",
+        alias="totalStaked",
+        description="Total USDC staked by developer",
     )
-    updated_at: str | None = Field(
+    is_proven: bool | None = Field(
         default=None,
-        alias="updatedAt",
-        description="Last update timestamp",
+        alias="isProven",
+        description="Whether tool has Proven status",
     )
 
     model_config = {"populate_by_name": True}

ctxprotocol/context/__init__.py

@@ -69,24 +69,37 @@ from ctxprotocol.context.hyperliquid import (
 
 CONTEXT_REQUIREMENTS_KEY = "x-context-requirements"
 """
-JSON Schema extension key for declaring context requirements.
+DEPRECATED: Use _meta.contextRequirements instead.
 
-WHY THIS APPROACH?
-- MCP protocol only transmits: name, description, inputSchema, outputSchema
-- Custom fields like `requirements` get stripped by MCP SDK during transport
-- JSON Schema allows custom "x-" prefixed extension properties
-- inputSchema is preserved end-to-end through MCP transport
+The primary mechanism for declaring context requirements is via the MCP _meta field
+at the tool level, which is preserved by the MCP SDK through transport:
 
-Example:
     >>> tool = {
     ...     "name": "analyze_my_positions",
+    ...     "_meta": {"contextRequirements": ["hyperliquid"]},
     ...     "inputSchema": {
     ...         "type": "object",
-    ...         CONTEXT_REQUIREMENTS_KEY: ["hyperliquid"],
     ...         "properties": {"portfolio": {"type": "object"}},
     ...         "required": ["portfolio"]
     ...     }
     ... }
+
+This constant is kept for backwards compatibility but _meta.contextRequirements
+is what the Context Platform reads. The x-context-requirements inputSchema extension
+may be stripped by some MCP transports.
+"""
+
+META_CONTEXT_REQUIREMENTS_KEY = "contextRequirements"
+"""
+The key used inside _meta to declare context requirements.
+This is the primary mechanism - the Context Platform reads _meta.contextRequirements.
+
+Example:
+    >>> tool = {
+    ...     "name": "analyze_positions",
+    ...     "_meta": {META_CONTEXT_REQUIREMENTS_KEY: ["hyperliquid"]},
+    ...     "inputSchema": {...}
+    ... }
 """
 
 # Context requirement types supported by the Context marketplace
@@ -158,6 +171,7 @@ class UserContext(BaseModel):
 __all__ = [
     # Constants
     "CONTEXT_REQUIREMENTS_KEY",
+    "META_CONTEXT_REQUIREMENTS_KEY",
     # Type aliases
     "ContextRequirementType",
     # Wallet types

ctxprotocol/handshake/__init__.py

@@ -34,7 +34,10 @@ from typing import Any, Literal, Optional, TypedDict, Union
 
 
 class HandshakeMeta(TypedDict, total=False):
-    """UI metadata for handshake approval cards."""
+    """UI metadata for handshake approval cards.
+    
+    Note: Keys use camelCase to match the wire format expected by the platform.
+    """
 
     description: str
     """Human-readable description of the action."""
@@ -45,15 +48,21 @@ class HandshakeMeta(TypedDict, total=False):
     action: str
     """Action verb (e.g., 'Place Order', 'Place Bid')."""
 
-    token_symbol: str
+    tokenSymbol: str
     """Token symbol if relevant."""
 
-    token_amount: str
+    tokenAmount: str
     """Human-readable token amount."""
 
-    warning_level: Literal["info", "caution", "danger"]
+    warningLevel: Literal["info", "caution", "danger"]
     """UI warning level."""
 
+    title: str
+    """Title for the approval card."""
+
+    subtitle: str
+    """Subtitle for the approval card."""
+
 
 # =============================================================================
 # Web3: Signature Requests (EIP-712)
@@ -125,10 +134,10 @@ class SignatureRequest(TypedDict, total=False):
 class TransactionProposalMeta(HandshakeMeta, total=False):
     """Extended metadata for transaction proposals."""
 
-    estimated_gas: str
+    estimatedGas: str
     """Estimated gas cost (informational - Context may sponsor)."""
 
-    explorer_url: str
+    explorerUrl: str
     """Link to contract on block explorer."""
 
 
@@ -168,7 +177,7 @@ class TransactionProposal(TypedDict, total=False):
 class AuthRequiredMeta(TypedDict, total=False):
     """Metadata for OAuth requests."""
 
-    display_name: str
+    displayName: str
     """Human-friendly service name."""
 
     scopes: list[str]
@@ -177,10 +186,10 @@ class AuthRequiredMeta(TypedDict, total=False):
     description: str
     """Description of what access is needed."""
 
-    icon_url: str
+    iconUrl: str
     """Tool's icon URL."""
 
-    expires_in: str
+    expiresIn: str
     """How long authorization lasts."""
 
 

{ctxprotocol-0.5.7.dist-info → ctxprotocol-0.6.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ctxprotocol
-Version: 0.5.7
+Version: 0.6.0
 Summary: Official Python SDK for the Context Protocol - Discover and execute AI tools programmatically
 Project-URL: Homepage, https://ctxprotocol.com
 Project-URL: Documentation, https://docs.ctxprotocol.com

ctxprotocol-0.6.0.dist-info/RECORD

@@ -0,0 +1,17 @@
+ctxprotocol/__init__.py,sha256=m7s0VtVaMwm-cBBXpvBN30M3RfgDgMTIwcpY_vqVHFg,4755
+ctxprotocol/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+ctxprotocol/auth/__init__.py,sha256=zXo2n9ZvVN6H0Oa5oE_4J6j6KdksymC-SFAzlLUm7JI,16645
+ctxprotocol/client/__init__.py,sha256=dgtQ9_pzVthsNJazibWHcFkdTjZQlT_gn7SuPCsBOHo,940
+ctxprotocol/client/client.py,sha256=eEiSTmBY6VHP04LbBEGF-D_9D5oZvDgaVF1ysMVS_zc,4771
+ctxprotocol/client/types.py,sha256=cKJ0vdkaMckIgh7QR8gMhTDzUMAu4agDu9xyY9-WCX8,8961
+ctxprotocol/client/resources/__init__.py,sha256=ZJkrArhJtYMALMIu46m2JU6XimBcIUvd0LvZPi7Cpz0,238
+ctxprotocol/client/resources/discovery.py,sha256=BH-rN53GhgG_4Ecl2lqr-tgyxHShrqpawFV8ndJThAU,2107
+ctxprotocol/client/resources/tools.py,sha256=gV5HbssUveJjouJ4EaitL-Ouph3IK9f0cbLz4fnltZw,3425
+ctxprotocol/context/__init__.py,sha256=3uP-_7iULzwv0bV-CLznjRWAjsA38oCIhJzpWsxmvBM,6297
+ctxprotocol/context/hyperliquid.py,sha256=M59Ku48yCdfpS9_b5l8SyEFukZwbNb8P1xAh2P0Yh-0,7603
+ctxprotocol/context/polymarket.py,sha256=GcBay3VRKf4MQj49VLmhOPrU172_aNa4i2TPS9-sZuQ,3484
+ctxprotocol/context/wallet.py,sha256=g6pXMY_olLn3-4ULQQKmtpDcZ_u9kgCwIdc0JFEkckE,1742
+ctxprotocol/handshake/__init__.py,sha256=oz-dQO5hwbzCxaPFUeOMQDolfy14K55GfygTtKmu-IY,12498
+ctxprotocol-0.6.0.dist-info/METADATA,sha256=11JEebdyq30IQHkbCo-dQEUgRQXdJrnPIVVpVf4CR2I,11706
+ctxprotocol-0.6.0.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+ctxprotocol-0.6.0.dist-info/RECORD,,

ctxprotocol-0.5.7.dist-info/RECORD

@@ -1,17 +0,0 @@
-ctxprotocol/__init__.py,sha256=m7s0VtVaMwm-cBBXpvBN30M3RfgDgMTIwcpY_vqVHFg,4755
-ctxprotocol/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-ctxprotocol/auth/__init__.py,sha256=J1AWTpN-KKCYfFRMtIW8z8jvBvJHE4cB7Z6t2PjFsVA,13202
-ctxprotocol/client/__init__.py,sha256=dgtQ9_pzVthsNJazibWHcFkdTjZQlT_gn7SuPCsBOHo,940
-ctxprotocol/client/client.py,sha256=eEiSTmBY6VHP04LbBEGF-D_9D5oZvDgaVF1ysMVS_zc,4771
-ctxprotocol/client/types.py,sha256=3FOL5SuzzhiPAGTl-sWasDSxkEKnNjgyoaXc8wjlkOI,8143
-ctxprotocol/client/resources/__init__.py,sha256=ZJkrArhJtYMALMIu46m2JU6XimBcIUvd0LvZPi7Cpz0,238
-ctxprotocol/client/resources/discovery.py,sha256=xnykG55DfO_TjD6Z5taLc7aGklg98X8boPiBYsx3NFE,2076
-ctxprotocol/client/resources/tools.py,sha256=ZkBLz-AKZI_6MUPIQMCj80PDo7gd6YgxXPYHqRJaEb4,3370
-ctxprotocol/context/__init__.py,sha256=v_auetqp3w0eScRLhWGbFHXGRfgjcNzTEeeMKOAxigA,5819
-ctxprotocol/context/hyperliquid.py,sha256=M59Ku48yCdfpS9_b5l8SyEFukZwbNb8P1xAh2P0Yh-0,7603
-ctxprotocol/context/polymarket.py,sha256=GcBay3VRKf4MQj49VLmhOPrU172_aNa4i2TPS9-sZuQ,3484
-ctxprotocol/context/wallet.py,sha256=g6pXMY_olLn3-4ULQQKmtpDcZ_u9kgCwIdc0JFEkckE,1742
-ctxprotocol/handshake/__init__.py,sha256=GUWa1lKacLq463cgVaTu5K2Wrx9E8EhJIVbCUbqhwMs,12300
-ctxprotocol-0.5.7.dist-info/METADATA,sha256=cNNsRcxhzJ4Y-jucq1PxJw11bH1sA-L2QfOpQKjFkjs,11706
-ctxprotocol-0.5.7.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-ctxprotocol-0.5.7.dist-info/RECORD,,