getstack 0.18.0__tar.gz → 0.19.0__tar.gz

{getstack-0.18.0 → getstack-0.19.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: getstack
-Version: 0.18.0
+Version: 0.19.0
 Summary: Python SDK for STACK — trust infrastructure for AI agents
 Project-URL: Homepage, https://getstack.run
 Project-URL: Documentation, https://getstack.run/docs/sdk

{getstack-0.18.0 → getstack-0.19.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "getstack"
-version = "0.18.0"
+version = "0.19.0"
 description = "Python SDK for STACK — trust infrastructure for AI agents"
 readme = "README.md"
 license = "MIT"

{getstack-0.18.0 → getstack-0.19.0}/src/getstack/_async/agents.py

@@ -76,5 +76,6 @@ class AsyncAgentService:
     async def delete(self, agent_id: str) -> dict[str, Any]:
         return await self._client.delete(f"/v1/agents/{agent_id}")
 
-    async def unblock(self, agent_id: str) -> dict[str, Any]:
-        return await self._client.post(f"/v1/agents/{agent_id}/unblock")
+    async def unblock(self, agent_id: str, governance_approval_id: str | None = None) -> dict[str, Any]:
+        _gov_headers = {"X-Governance-Approval": governance_approval_id} if governance_approval_id else None
+        return await self._client.post(f"/v1/agents/{agent_id}/unblock", extra_headers=_gov_headers)

getstack-0.19.0/src/getstack/_async/detector_config.py

@@ -0,0 +1,35 @@
+"""Per-operator detector customization (async parity with the JS SDK's
+DetectorConfigService).
+"""
+
+from __future__ import annotations
+
+from typing import Any
+from urllib.parse import quote
+
+from ..client import AsyncHttpClient
+
+
+class AsyncDetectorConfigService:
+    def __init__(self, client: AsyncHttpClient):
+        self._client = client
+
+    async def list(self) -> dict[str, Any]:
+        return await self._client.get("/v1/detectors/config")
+
+    async def get(self, detector_key: str) -> dict[str, Any]:
+        return await self._client.get(f"/v1/detectors/{quote(detector_key)}/config")
+
+    async def upsert(
+        self, detector_key: str, governance_approval_id: str | None = None, **config: Any
+    ) -> dict[str, Any]:
+        _gov_headers = {"X-Governance-Approval": governance_approval_id} if governance_approval_id else None
+        return await self._client.put(
+            f"/v1/detectors/{quote(detector_key)}/config", json=config, extra_headers=_gov_headers
+        )
+
+    async def reset(self, detector_key: str, governance_approval_id: str | None = None) -> None:
+        _gov_headers = {"X-Governance-Approval": governance_approval_id} if governance_approval_id else None
+        await self._client.delete(
+            f"/v1/detectors/{quote(detector_key)}/config", extra_headers=_gov_headers
+        )

{getstack-0.18.0 → getstack-0.19.0}/src/getstack/_async/reviews.py

@@ -38,13 +38,17 @@ class AsyncReviewService:
         decision: str,
         notes: str | None = None,
         block_future: bool = False,
+        governance_approval_id: str | None = None,
     ) -> ReviewDecisionResult:
         body: dict[str, Any] = {"decision": decision}
         if notes:
             body["notes"] = notes
         if block_future:
             body["block_future"] = True
-        data = await self._client.post(f"/v1/passports/reviews/{checkout_id}/decide", json=body)
+        _gov_headers = {"X-Governance-Approval": governance_approval_id} if governance_approval_id else None
+        data = await self._client.post(
+            f"/v1/passports/reviews/{checkout_id}/decide", json=body, extra_headers=_gov_headers
+        )
         return ReviewDecisionResult(
             review_id=data["review_id"],
             agent_id=data["agent_id"],

{getstack-0.18.0 → getstack-0.19.0}/src/getstack/agents.py

@@ -120,5 +120,9 @@ class AgentService:
     def delete(self, agent_id: str) -> dict[str, Any]:
         return self._client.delete(f"/v1/agents/{agent_id}")
 
-    def unblock(self, agent_id: str) -> dict[str, Any]:
-        return self._client.post(f"/v1/agents/{agent_id}/unblock")
+    def unblock(self, agent_id: str, governance_approval_id: str | None = None) -> dict[str, Any]:
+        """GET-230: from API-key sessions this 403s with
+        GOVERNANCE_APPROVAL_REQUIRED - retry with governance_approval_id
+        after human approval in the dashboard."""
+        _gov_headers = {"X-Governance-Approval": governance_approval_id} if governance_approval_id else None
+        return self._client.post(f"/v1/agents/{agent_id}/unblock", extra_headers=_gov_headers)

{getstack-0.18.0 → getstack-0.19.0}/src/getstack/client.py

@@ -72,11 +72,11 @@ class HttpClient:
     def patch(self, path: str, json: Any = None) -> Any:
         return self.request("PATCH", path, json=json)
 
-    def put(self, path: str, json: Any = None) -> Any:
-        return self.request("PUT", path, json=json)
+    def put(self, path: str, json: Any = None, extra_headers: dict[str, str] | None = None) -> Any:
+        return self.request("PUT", path, json=json, extra_headers=extra_headers)
 
-    def delete(self, path: str) -> Any:
-        return self.request("DELETE", path)
+    def delete(self, path: str, extra_headers: dict[str, str] | None = None) -> Any:
+        return self.request("DELETE", path, extra_headers=extra_headers)
 
     def close(self) -> None:
         self._client.close()

{getstack-0.18.0 → getstack-0.19.0}/src/getstack/detector_config.py

@@ -27,13 +27,26 @@ class DetectorConfigService:
         built-in defaults)."""
         return self._client.get(f"/v1/detectors/{quote(detector_key)}/config")
 
-    def upsert(self, detector_key: str, **config: Any) -> dict[str, Any]:
+    def upsert(
+        self, detector_key: str, governance_approval_id: str | None = None, **config: Any
+    ) -> dict[str, Any]:
         """Upsert this operator's customization for the named detector.
         studio+ only. Accepts custom_patterns / whitelist_patterns /
-        severity_overrides / enabled."""
-        return self._client.put(f"/v1/detectors/{quote(detector_key)}/config", json=config)
+        severity_overrides / enabled.
 
-    def reset(self, detector_key: str) -> None:
+        GET-230: loosening changes 403 with GOVERNANCE_APPROVAL_REQUIRED
+        from API-key sessions - retry with governance_approval_id after a
+        human approves in the dashboard (/governance/approvals)."""
+        _gov_headers = {"X-Governance-Approval": governance_approval_id} if governance_approval_id else None
+        return self._client.put(
+            f"/v1/detectors/{quote(detector_key)}/config", json=config, extra_headers=_gov_headers
+        )
+
+    def reset(self, detector_key: str, governance_approval_id: str | None = None) -> None:
         """Reset a detector to built-in defaults (deletes the row). studio+
-        only."""
-        self._client.delete(f"/v1/detectors/{quote(detector_key)}/config")
+        only. GET-230: always requires a governance approval from API-key
+        sessions."""
+        _gov_headers = {"X-Governance-Approval": governance_approval_id} if governance_approval_id else None
+        self._client.delete(
+            f"/v1/detectors/{quote(detector_key)}/config", extra_headers=_gov_headers
+        )

{getstack-0.18.0 → getstack-0.19.0}/src/getstack/reviews.py

@@ -39,13 +39,20 @@ class ReviewService:
         decision: str,
         notes: str | None = None,
         block_future: bool = False,
+        governance_approval_id: str | None = None,
     ) -> ReviewDecisionResult:
+        """GET-230: decision='approved' from API-key sessions 403s with
+        GOVERNANCE_APPROVAL_REQUIRED - retry with governance_approval_id
+        after human approval. 'blocked' needs no approval."""
         body: dict[str, Any] = {"decision": decision}
         if notes:
             body["notes"] = notes
         if block_future:
             body["block_future"] = True
-        data = self._client.post(f"/v1/passports/reviews/{checkout_id}/decide", json=body)
+        _gov_headers = {"X-Governance-Approval": governance_approval_id} if governance_approval_id else None
+        data = self._client.post(
+            f"/v1/passports/reviews/{checkout_id}/decide", json=body, extra_headers=_gov_headers
+        )
         return ReviewDecisionResult(
             review_id=data["review_id"],
             agent_id=data["agent_id"],

getstack-0.18.0/src/getstack/_async/detector_config.py

@@ -1,27 +0,0 @@
-"""Per-operator detector customization (async parity with the JS SDK's
-DetectorConfigService).
-"""
-
-from __future__ import annotations
-
-from typing import Any
-from urllib.parse import quote
-
-from ..client import AsyncHttpClient
-
-
-class AsyncDetectorConfigService:
-    def __init__(self, client: AsyncHttpClient):
-        self._client = client
-
-    async def list(self) -> dict[str, Any]:
-        return await self._client.get("/v1/detectors/config")
-
-    async def get(self, detector_key: str) -> dict[str, Any]:
-        return await self._client.get(f"/v1/detectors/{quote(detector_key)}/config")
-
-    async def upsert(self, detector_key: str, **config: Any) -> dict[str, Any]:
-        return await self._client.put(f"/v1/detectors/{quote(detector_key)}/config", json=config)
-
-    async def reset(self, detector_key: str) -> None:
-        await self._client.delete(f"/v1/detectors/{quote(detector_key)}/config")