gargoyle-receipts 0.5.1.dev0__tar.gz → 0.5.2.dev0__tar.gz

{gargoyle_receipts-0.5.1.dev0/gargoyle_receipts.egg-info → gargoyle_receipts-0.5.2.dev0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gargoyle-receipts
-Version: 0.5.1.dev0
+Version: 0.5.2.dev0
 Summary: Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls.
 Author: Justin LaPorte
 License-Expression: Apache-2.0
@@ -59,7 +59,7 @@ your MCP server and lets through only what both agreed to.
 
 [![PyPI](https://img.shields.io/pypi/v/gargoyle-receipts)](https://pypi.org/project/gargoyle-receipts/)
 
-Status: pre-release (`0.5.1.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
+Status: pre-release (`0.5.2.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
 still change before the first release; it is specified in [SPEC.md](SPEC.md).
 
 ## What a receipt gives you

{gargoyle_receipts-0.5.1.dev0 → gargoyle_receipts-0.5.2.dev0}/README.md

@@ -21,7 +21,7 @@ your MCP server and lets through only what both agreed to.
 
 [![PyPI](https://img.shields.io/pypi/v/gargoyle-receipts)](https://pypi.org/project/gargoyle-receipts/)
 
-Status: pre-release (`0.5.1.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
+Status: pre-release (`0.5.2.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
 still change before the first release; it is specified in [SPEC.md](SPEC.md).
 
 ## What a receipt gives you

{gargoyle_receipts-0.5.1.dev0 → gargoyle_receipts-0.5.2.dev0}/gargoyle/entra_login.py

@@ -73,13 +73,19 @@ def public_roots_http():
     """A requests session that trusts the public CA roots (certifi) whatever
     REQUESTS_CA_BUNDLE says. A deployment pins the issuer's private CA with
     that variable; Entra's endpoints are not signed by it, so the two trust
-    domains must not share one setting. Proxies from the environment still
-    apply."""
+    domains must not share one setting. requests applies the environment
+    bundle per request and lets it beat Session.verify, so the override is
+    made per request too. Proxies from the environment still apply."""
     import certifi
     import requests
-    s = requests.Session()
-    s.verify = certifi.where()
-    return s
+
+    class PublicRootsSession(requests.Session):
+        def request(self, method, url, **kwargs):
+            if kwargs.get("verify") in (None, True):
+                kwargs["verify"] = certifi.where()
+            return super().request(method, url, **kwargs)
+
+    return PublicRootsSession()
 
 
 def _app(tenant: str, client_id: str, cache: TokenCache, app_factory: Optional[Callable] = None) -> Any:

{gargoyle_receipts-0.5.1.dev0 → gargoyle_receipts-0.5.2.dev0/gargoyle_receipts.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gargoyle-receipts
-Version: 0.5.1.dev0
+Version: 0.5.2.dev0
 Summary: Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls.
 Author: Justin LaPorte
 License-Expression: Apache-2.0
@@ -59,7 +59,7 @@ your MCP server and lets through only what both agreed to.
 
 [![PyPI](https://img.shields.io/pypi/v/gargoyle-receipts)](https://pypi.org/project/gargoyle-receipts/)
 
-Status: pre-release (`0.5.1.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
+Status: pre-release (`0.5.2.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
 still change before the first release; it is specified in [SPEC.md](SPEC.md).
 
 ## What a receipt gives you

{gargoyle_receipts-0.5.1.dev0 → gargoyle_receipts-0.5.2.dev0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "gargoyle-receipts"
-version = "0.5.1.dev0"
+version = "0.5.2.dev0"
 description = "Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls."
 readme = "README.md"
 requires-python = ">=3.12"

{gargoyle_receipts-0.5.1.dev0 → gargoyle_receipts-0.5.2.dev0}/tests/test_entra_login.py

@@ -148,7 +148,15 @@ def test_msal_gets_a_public_roots_http_client_and_is_built_lazily(tmp_path, monk
     src = EntraTokenSource("t", "c", "s", str(cache), msal_module=CapturingMsal)
     assert built == []                                   # constructed nothing yet
     assert src.token() == "at-refreshed"
-    assert len(built) == 1 and built[0].verify == certifi.where()   # public roots, not the private CA
+    assert len(built) == 1                               # one MSAL app, with our session
+    # Through requests' own environment merge: the private CA in REQUESTS_CA_BUNDLE loses.
+    import requests
+    sent = {}
+    def fake_send(self, prep, **kw):
+        sent.update(kw); r = requests.Response(); r.status_code = 200; r._content = b"{}"; return r
+    monkeypatch.setattr(requests.Session, "send", fake_send)
+    built[0].get("https://login.microsoftonline.com/x/v2.0/.well-known/openid-configuration")
+    assert sent["verify"] == certifi.where()
 
     # A tenant that cannot be reached is a refusal at call time, not a crash at startup.
     class Unreachable(FakeMsal):