getstack 0.12.0__tar.gz → 0.13.1__tar.gz

{getstack-0.12.0 → getstack-0.13.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: getstack
-Version: 0.12.0
+Version: 0.13.1
 Summary: Python SDK for STACK — trust infrastructure for AI agents
 Project-URL: Homepage, https://getstack.run
 Project-URL: Documentation, https://getstack.run/docs/sdk

{getstack-0.12.0 → getstack-0.13.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "getstack"
-version = "0.12.0"
+version = "0.13.1"
 description = "Python SDK for STACK — trust infrastructure for AI agents"
 readme = "README.md"
 license = "MIT"

{getstack-0.12.0 → getstack-0.13.1}/src/getstack/agents.py

@@ -15,7 +15,10 @@ def _to_agent(data: dict[str, Any]) -> Agent:
         name=data["name"],
         description=data.get("description"),
         status=data["status"],
-        accountability_mode=data.get("accountability_mode", "standard"),
+        # DB default for new agents is "enforced" (matches the API), not
+        # "standard" — the old fallback misreported the mode when the
+        # field was absent from a response.
+        accountability_mode=data.get("accountability_mode", "enforced"),
         on_warning=data.get("on_warning", "notify"),
         on_critical=data.get("on_critical", "notify"),
         passport_blocked=data.get("passport_blocked", False),
@@ -23,6 +26,8 @@ def _to_agent(data: dict[str, Any]) -> Agent:
         passport_blocked_at=data.get("passport_blocked_at"),
         created_at=data["created_at"],
         updated_at=data["updated_at"],
+        credential_access=data.get("credential_access", "direct"),
+        key_mode=data.get("key_mode", "stack_managed"),
     )
 
 
@@ -34,13 +39,35 @@ class AgentService:
         self,
         name: str,
         description: str | None = None,
-        accountability_mode: str = "enforced",
+        profile: str | None = None,
+        accountability_mode: str | None = None,
+        credential_access: str | None = None,
         on_warning: str = "notify",
         on_critical: str = "notify",
     ) -> Agent:
-        body: dict[str, Any] = {"name": name, "accountability_mode": accountability_mode}
+        """Register an agent.
+
+        For a bot that just runs (calls an LLM through STACK, no provider
+        key on its box), pass ``profile="proxied-llm-bot"`` — it expands
+        server-side to ``credential_access="proxy_only"`` +
+        ``accountability_mode="logged"`` + ``key_mode="stack_managed"`` so
+        the first call works with no approval-header dance. Any field you
+        also pass explicitly overrides the preset.
+
+        Omitting ``accountability_mode``/``credential_access`` leaves the
+        server default (``enforced`` + ``direct``) OR the profile value —
+        they are only sent when provided, so an unset value never clobbers
+        a preset.
+        """
+        body: dict[str, Any] = {"name": name}
         if description:
             body["description"] = description
+        if profile is not None:
+            body["profile"] = profile
+        if accountability_mode is not None:
+            body["accountability_mode"] = accountability_mode
+        if credential_access is not None:
+            body["credential_access"] = credential_access
         if on_warning != "notify":
             body["on_warning"] = on_warning
         if on_critical != "notify":

{getstack-0.12.0 → getstack-0.13.1}/src/getstack/types.py

@@ -20,6 +20,14 @@ class Agent:
     passport_blocked_at: str | None
     created_at: str
     updated_at: str
+    # Raw-secret access policy: "direct" | "proxy_preferred" | "proxy_only".
+    # Defaulted for backward compatibility with older API responses.
+    credential_access: str = "direct"
+    # Signing-key model: "stack_managed" | "customer_managed" | "co_signed".
+    # Immutable after registration. Surfaced (GET-243/244) so on-box use can
+    # see whether the box needs an agent keypair (customer_managed) or the
+    # operator credential (stack_managed). Defaulted for older responses.
+    key_mode: str = "stack_managed"
 
 
 @dataclass