iris-security-sdk 0.1.7__tar.gz → 0.2.0__tar.gz

{iris_security_sdk-0.1.7 → iris_security_sdk-0.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iris-security-sdk
-Version: 0.1.7
+Version: 0.2.0
 Summary: IRIS — AI Agent Governance SDK. Govern AI agents locally.
 License: Apache-2.0
 Project-URL: Homepage, https://github.com/gimartinb/iris-sdk
@@ -16,7 +16,7 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
-Requires-Dist: iris-security-core>=0.1.6
+Requires-Dist: iris-security-core>=0.1.8
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: pydantic>=2.0
 Requires-Dist: click>=8.1

{iris_security_sdk-0.1.7 → iris_security_sdk-0.2.0}/iris/__init__.py

@@ -34,17 +34,20 @@ from iris_core.models.passport import (
     Environment,
     ComplianceTag,
     ToolPermission,
+    UserContext,
 )
+from iris_core.hitl.models import HITLConfig, HITLConditionRule, HITLStatus
+from iris_core.hitl.error import IrisHITLRequiredError
+from iris.hitl import HITLPoller
 from iris_core.models.policy import PolicyResult, Violation, Severity
 from iris_core.engine.cedar import CedarEngine, EvaluationContext
-from iris_core.rbac.context import UserContext
 from iris_core.engine.compiler import PolicyCompiler, CompilationResult
 from iris_core.compliance.registry import ComplianceRegistry
 from iris_core.evidence.vault import EvidenceVault
 from iris_core.cost.tracker import CostSummary, CostTracker, CostEntry
 from iris_core.cost.pricing import PricingRegistry
 
-__version__ = "0.1.7"
+__version__ = "0.2.0"
 __all__ = [
     # Main classes
     "IrisAgent",
@@ -56,6 +59,7 @@ __all__ = [
     "Environment",
     "ComplianceTag",
     "ToolPermission",
+    "UserContext",
     "EvaluationContext",
     "PolicyResult",
     "Violation",
@@ -72,6 +76,11 @@ __all__ = [
     "PricingRegistry",
     "IrisViolationError",
     "IrisCrisisDetectedError",
+    "IrisHITLRequiredError",
+    "HITLConfig",
+    "HITLConditionRule",
+    "HITLStatus",
+    "HITLPoller",
 ]
 
 
@@ -119,11 +128,15 @@ class IrisAgent:
         environment: Optional[str] = None,
         user_email: Optional[str] = None,
         user_role: Optional[str] = None,
+        user_context: Optional[UserContext] = None,
     ):
         compliance_tags = [ComplianceTag(c) for c in (compliance or [])]
         envs = [Environment(e) for e in (environments or ["dev", "test", "staging", "production"])]
         current_env = Environment(environment or os.environ.get("IRIS_ENV", "dev"))
-        self._user_ctx = UserContext.from_params(user_email, user_role)
+        self._user_ctx = user_context or UserContext.from_params(
+            user_email=user_email, user_role=user_role
+        )
+        self._default_user_context = user_context
 
         self.passport = AgentPassport(
             name=name,
@@ -190,6 +203,7 @@ class IrisAgent:
         data_region: Optional[str] = None,
         destination_region: Optional[str] = None,
         data_classification: Optional[str] = None,
+        user_context: Optional[UserContext] = None,
     ) -> Callable:
         """
         Decorator that intercepts function calls and evaluates them against policy.
@@ -205,6 +219,10 @@ class IrisAgent:
         def decorator(func: Callable) -> Callable:
             @wraps(func)
             def wrapper(*args, **kwargs) -> Any:
+                effective_user = user_context or self._default_user_context
+                user_fields = self._user_ctx.evaluation_fields()
+                if effective_user:
+                    user_fields = effective_user.evaluation_fields()
                 ctx = EvaluationContext(
                     agent_id=self.passport.agent_id,
                     action=action,
@@ -214,7 +232,8 @@ class IrisAgent:
                     data_region=data_region,
                     destination_region=destination_region,
                     data_classification=data_classification,
-                    **self._user_ctx.evaluation_fields(),
+                    user_context=effective_user,
+                    **user_fields,
                 )
                 result = self.evaluate(ctx)
 
@@ -231,7 +250,7 @@ class IrisAgent:
     def evaluate(self, context: EvaluationContext) -> PolicyResult:
         """Direct policy evaluation without the decorator pattern."""
         result = self._engine.evaluate(self.passport, context)
-        self._vault.record(context, result)
+        self._vault.record(context, result, passport=self.passport)
         from iris._telemetry import maybe_fire_first_policy_run
 
         maybe_fire_first_policy_run()
@@ -278,8 +297,11 @@ class IrisViolationError(Exception):
     explanation of what was blocked and how to remediate.
     """
 
-    def __init__(self, result: PolicyResult):
+    def __init__(self, result: PolicyResult, is_compliance_block: bool = False):
         self.result = result
+        self.is_compliance_block = is_compliance_block or getattr(
+            result, "is_compliance_block", False
+        )
         primary = result.violations[0] if result.violations else None
         message = (
             f"\n[IRIS POLICY VIOLATION]\n"

{iris_security_sdk-0.1.7 → iris_security_sdk-0.2.0}/iris/_telemetry.py

@@ -1,4 +1,7 @@
-"""First-run telemetry for IRIS SDK installs. Opt-out via IRIS_TELEMETRY_OPT_OUT=1."""
+"""First-run telemetry for IRIS SDK installs. Opt-out via IRIS_TELEMETRY_OPT_OUT=1.
+
+Each event includes an ISO 8601 UTC timestamp for server-side DoD/WoW/MoM aggregation.
+"""
 
 from __future__ import annotations
 
@@ -19,6 +22,35 @@ _FIRST_RUN_SENTINEL = _IRIS_DIR / ".telemetry_sent"
 _FIRST_POLICY_SENTINEL = _IRIS_DIR / ".first_policy_sent"
 
 
+def detect_country() -> str:
+    """Infer ISO 3166-1 alpha-2 country from system locale (not GPS or IP)."""
+    candidates: list[str] = []
+    for env in ("LC_ALL", "LC_CTYPE", "LANG"):
+        val = os.environ.get(env, "").strip()
+        if val:
+            candidates.append(val)
+
+    try:
+        import locale
+
+        for getter in (locale.getlocale, locale.getdefaultlocale):
+            try:
+                loc = getter()
+                if loc and loc[0]:
+                    candidates.append(loc[0])
+            except Exception:
+                pass
+    except Exception:
+        pass
+
+    for tag in candidates:
+        normalized = tag.split(".")[0].replace("-", "_")
+        parts = normalized.split("_")
+        if len(parts) >= 2 and len(parts[-1]) == 2 and parts[-1].isalpha():
+            return parts[-1].upper()
+    return "unknown"
+
+
 def detect_install_method() -> str:
     """Detect how the iris CLI was installed from the executable path."""
     iris_path = shutil.which("iris")
@@ -69,6 +101,7 @@ def _build_payload(event: str) -> dict[str, str]:
         "event": event,
         "install_id": _get_or_create_install_id(),
         "install_method": detect_install_method(),
+        "country": detect_country(),
         "python_version": sys.version,
         "platform": sys.platform,
         "iris_version": _get_iris_version(),

iris_security_sdk-0.2.0/iris/hitl.py

@@ -0,0 +1,81 @@
+"""HITL polling helper for application-layer wait loops."""
+
+from __future__ import annotations
+
+import asyncio
+import time
+from typing import Callable, Optional
+
+from iris_core.hitl.models import HITLStatus
+from iris_core.hitl.queue import HITLQueue
+
+
+class HITLPoller:
+    """
+    Helper for applications that need to poll for HITL resolution.
+    Handles the polling loop, timeout, and retry logic.
+    """
+
+    def __init__(self, review_id: str, queue: Optional[HITLQueue] = None):
+        self.review_id = review_id
+        self._queue = queue or HITLQueue()
+
+    def wait(
+        self,
+        timeout: int = 300,
+        poll_interval: int = 5,
+        on_status_change: Optional[Callable[[HITLStatus], None]] = None,
+    ) -> HITLStatus:
+        deadline = time.time() + timeout
+        last_status: Optional[HITLStatus] = None
+        while time.time() < deadline:
+            review = self._queue.get(self.review_id)
+            if review is None:
+                time.sleep(poll_interval)
+                continue
+            if review.status != last_status:
+                if on_status_change:
+                    on_status_change(review.status)
+                last_status = review.status
+            if review.status in (
+                HITLStatus.APPROVED,
+                HITLStatus.REJECTED,
+                HITLStatus.TIMED_OUT,
+                HITLStatus.ESCALATED,
+            ):
+                return review.status
+            if self._queue.is_expired(review):
+                resolved = self._queue.apply_timeout_policy(review)
+                return resolved.status
+            time.sleep(poll_interval)
+        return HITLStatus.TIMED_OUT
+
+    async def wait_async(
+        self,
+        timeout: int = 300,
+        poll_interval: int = 5,
+        on_status_change: Optional[Callable[[HITLStatus], None]] = None,
+    ) -> HITLStatus:
+        deadline = time.time() + timeout
+        last_status: Optional[HITLStatus] = None
+        while time.time() < deadline:
+            review = self._queue.get(self.review_id)
+            if review is None:
+                await asyncio.sleep(poll_interval)
+                continue
+            if review.status != last_status:
+                if on_status_change:
+                    on_status_change(review.status)
+                last_status = review.status
+            if review.status in (
+                HITLStatus.APPROVED,
+                HITLStatus.REJECTED,
+                HITLStatus.TIMED_OUT,
+                HITLStatus.ESCALATED,
+            ):
+                return review.status
+            if self._queue.is_expired(review):
+                resolved = self._queue.apply_timeout_policy(review)
+                return resolved.status
+            await asyncio.sleep(poll_interval)
+        return HITLStatus.TIMED_OUT

{iris_security_sdk-0.1.7 → iris_security_sdk-0.2.0}/iris_security_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iris-security-sdk
-Version: 0.1.7
+Version: 0.2.0
 Summary: IRIS — AI Agent Governance SDK. Govern AI agents locally.
 License: Apache-2.0
 Project-URL: Homepage, https://github.com/gimartinb/iris-sdk
@@ -16,7 +16,7 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
-Requires-Dist: iris-security-core>=0.1.6
+Requires-Dist: iris-security-core>=0.1.8
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: pydantic>=2.0
 Requires-Dist: click>=8.1

{iris_security_sdk-0.1.7 → iris_security_sdk-0.2.0}/iris_security_sdk.egg-info/SOURCES.txt

@@ -3,6 +3,7 @@ pyproject.toml
 iris/__init__.py
 iris/_telemetry.py
 iris/_telemetry_config.py
+iris/hitl.py
 iris_security_sdk.egg-info/PKG-INFO
 iris_security_sdk.egg-info/SOURCES.txt
 iris_security_sdk.egg-info/dependency_links.txt

{iris_security_sdk-0.1.7 → iris_security_sdk-0.2.0}/iris_security_sdk.egg-info/requires.txt

@@ -1,4 +1,4 @@
-iris-security-core>=0.1.6
+iris-security-core>=0.1.8
 pyyaml>=6.0
 pydantic>=2.0
 click>=8.1

{iris_security_sdk-0.1.7 → iris_security_sdk-0.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "iris-security-sdk"
-version = "0.1.7"
+version = "0.2.0"
 description = "IRIS — AI Agent Governance SDK. Govern AI agents locally."
 readme = "README.md"
 license = { text = "Apache-2.0" }
@@ -28,7 +28,7 @@ classifiers = [
   "Programming Language :: Python :: 3.12",
 ]
 dependencies = [
-  "iris-security-core>=0.1.6",
+  "iris-security-core>=0.1.8",
   "pyyaml>=6.0",
   "pydantic>=2.0",
   "click>=8.1",
@@ -65,6 +65,7 @@ Repository = "https://github.com/gimartinb/iris-sdk"
 
 [tool.setuptools.packages.find]
 where = ["."]
+exclude = ["tools*", "demo*", "docs*"]
 
 [tool.ruff]
 line-length = 100