keywright-server 0.0.1__py3-none-any.whl

keywright_server/web/usage_ui.py

@@ -0,0 +1,41 @@
+"""Read-only, admin-authenticated LLM usage view."""
+from datetime import UTC, date, datetime, time, timedelta
+from urllib.parse import urlencode
+
+from fastapi import APIRouter, Depends, Request
+
+from ..db import session
+from ..models import now
+from ..usage import report
+from . import auth
+from .admin import render
+from .security import require_same_origin
+
+router = APIRouter(dependencies=[Depends(require_same_origin), Depends(auth.require_admin)])
+
+
+@router.get("/ui/usage")
+async def usage_page(request: Request, start: str = "", end: str = "", provider: str = "",
+                     model: str = "", agent: str = "", key: str = ""):
+    today = now().date()
+    error = None
+    try:
+        first = date.fromisoformat(start) if start else today - timedelta(days=29)
+        last = date.fromisoformat(end) if end else today
+        if first > last:
+            raise ValueError
+        until = datetime.combine(last + timedelta(days=1), time.min, UTC)
+    except (ValueError, OverflowError):
+        first, last = today - timedelta(days=29), today
+        until = datetime.combine(last + timedelta(days=1), time.min, UTC)
+        error = "Choose valid dates with the start on or before the end. Showing the last 30 days."
+    filters = {"start": first.isoformat(), "end": last.isoformat(), "provider": provider,
+               "model": model, "agent": agent, "key": key}
+
+    def usage_url(**changes):
+        return "/ui/usage?" + urlencode({**filters, **changes})
+
+    async with session() as db:
+        data = await report(db, datetime.combine(first, time.min, UTC), until,
+                            provider=provider, model=model, agent=agent, key=key)
+    return render(request, "usage.html", **data, filters=filters, usage_url=usage_url, error=error)

keywright_server-0.0.1.dist-info/METADATA

@@ -0,0 +1,152 @@
+Metadata-Version: 2.5
+Name: keywright-server
+Version: 0.0.1
+Summary: Keywright server: just-in-time credential broker for AI agents. One MCP front door, per-request human approval, no keys in agent context.
+Project-URL: Repository, https://github.com/johnrcarty/keywright
+Project-URL: Issues, https://github.com/johnrcarty/keywright/issues
+License-Expression: Apache-2.0
+License-File: LICENSE
+License-File: NOTICE
+License-File: THIRD_PARTY_NOTICES
+Requires-Python: >=3.12
+Requires-Dist: aiosqlite>=0.20
+Requires-Dist: asyncssh>=2.15
+Requires-Dist: authlib<2,>=1.9.1
+Requires-Dist: cryptography>=44
+Requires-Dist: fastapi>=0.115
+Requires-Dist: httpx2<3,>=2.13
+Requires-Dist: httpx>=0.27
+Requires-Dist: itsdangerous>=2.2
+Requires-Dist: jinja2>=3.1
+Requires-Dist: keywright<0.1,>=0.0.1
+Requires-Dist: mcp<3,>=2.2
+Requires-Dist: pydantic>=2.7
+Requires-Dist: python-multipart>=0.0.9
+Requires-Dist: sqlalchemy[asyncio]<2.1,>=2.0.54
+Requires-Dist: uvicorn[standard]>=0.30
+Requires-Dist: websockets>=12
+Provides-Extra: dev
+Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Requires-Dist: respx>=0.21; extra == 'dev'
+Requires-Dist: ruff>=0.5; extra == 'dev'
+Provides-Extra: knowledge
+Requires-Dist: asyncpg<1,>=0.30; extra == 'knowledge'
+Description-Content-Type: text/markdown
+
+# Keywright
+
+Give AI agents temporary access to infrastructure without handing them your credentials.
+Keywright is a self-hosted broker for SSH hosts and MCP tools, with human approval,
+scoped access, revocation and an audit trail.
+
+**v0.0.1 is in preparation.** Prebuilt preview images are published to GitHub Container
+Registry for Linux x86-64 and ARM64. The repository and image remain private during
+release preparation; the stable release, public availability and licensing review are pending.
+
+## Install the prebuilt broker
+
+You need Docker Engine with the Compose plugin. No Git checkout, Python installation
+or local image build is needed.
+
+1. Download the **keywright-install** artifact from a successful
+   [test build and publish workflow](https://github.com/johnrcarty/keywright/actions/workflows/ci.yml).
+   Extract it into a dedicated installation directory. Its `compose.yaml` pins the exact
+   multi-platform image digest; `SHA256SUMS` covers the installation files.
+2. For the private preview, sign in with a GitHub personal access token (classic) that has
+   `read:packages` and access to this package. Enter the token at Docker's password prompt:
+   ```bash
+   docker login ghcr.io -u YOUR_GITHUB_USERNAME
+   ```
+3. In the installation directory:
+   ```bash
+   sha256sum -c SHA256SUMS
+   docker compose up -d --wait
+   ```
+
+The source copy at `deploy/compose.yaml` also works on its own; it follows
+`ghcr.io/johnrcarty/keywright:0.0.1-preview` unless `KEYWRIGHT_IMAGE` selects another tag
+or digest. The install artifact is the reproducible choice for testing a particular build.
+When the image becomes public, registry login will no longer be required.
+
+Open <http://localhost:8700/ui> and set the administrator password. The default port is
+bound to loopback. For a remote VM, use an SSH tunnel first:
+
+```bash
+ssh -L 8700:127.0.0.1:8700 user@test-vm
+```
+
+Then open the same localhost URL in your browser. Configure HTTPS and trusted proxy
+addresses before exposing the broker to other machines. Keep the broker separate from
+agent machines and use disposable targets for initial tests.
+
+1. Add an SSH host or upstream MCP server under **Resources**.
+2. Create an agent and copy its token once.
+3. Point an MCP client at `/mcp` with `Authorization: Bearer <agent-token>`, or install
+   the CLI from source using the instructions below.
+4. Request one operation, approve it in the UI, and inspect its audit record.
+5. Revoke the access and verify the operation needs approval again.
+
+Phone notifications through Home Assistant or a webhook are optional. The base stack
+needs no cloud account, model provider, identity provider or external database.
+
+## Develop from source
+
+For a local Docker build, clone the repository and explicitly add the development overlay:
+
+```bash
+docker compose -f deploy/compose.yaml -f deploy/build.compose.yaml up -d --build
+```
+
+For direct Python development, Python 3.12 or newer and [uv](https://docs.astral.sh/uv/) are required:
+
+```bash
+uv venv
+uv pip install -e ./client -e '.[dev]' -e ./router
+KW_HOST=127.0.0.1 KW_DATA_DIR=./data .venv/bin/keywright-server serve
+```
+
+In a separate shell, run the client as the user who operates the agent:
+
+```bash
+.venv/bin/kw login http://localhost:8700 --paste
+.venv/bin/kw setup check
+```
+
+Optional agent setup: `.venv/bin/kw setup claude-code` or `.venv/bin/kw setup codex`.
+See the [client guide](client/README.md) for details.
+
+```bash
+.venv/bin/python -m pytest -q
+node --test tests/test_topology_layout.cjs
+```
+
+The PostgreSQL/pgvector tests require an isolated database and `KNOWLEDGE_TEST_PG_URL`.
+Never point test configuration at a production database.
+
+## Optional integrations
+
+- [Feature and configuration reference](docs/FEATURES.md): permissions, notifications,
+  LLM gateways, OIDC, inventory, shared knowledge and result inspection.
+- [Deployment guide](deploy/README.md): base stack, optional LLM/knowledge services and
+  a disposable VM acceptance checklist.
+- [Mail router](router/README.md): optional agent that routes mail through brokered tools.
+- [Release checklist](docs/RELEASE_PLAN.md): remaining work before v0.0.1.
+- [Security reporting](SECURITY.md), [support scope](SUPPORT.md), and [contributing](CONTRIBUTING.md).
+- [Third-party source and notice materials](third_party/README.md).
+
+Knowledge chunking changes are experimental pending retrieval evaluation. Optional
+features are not all covered by the minimal-stack installation check.
+
+Keywright is a credential trust boundary. Protect its host and backups. Command scope
+matching is not a shell sandbox, and output inspection cannot prove arbitrary text is
+secret-free. The [historical source security review](docs/SECURITY_REVIEW.md) records
+prior findings; it is not a certification of this candidate.
+
+## License
+
+Keywright is licensed under [Apache-2.0](LICENSE). Copyright 2026 Keywright
+contributors. See [NOTICE](NOTICE) and [third-party notices](THIRD_PARTY_NOTICES).
+Commercial use and proprietary extensions are permitted under the license's terms.
+Unless explicitly stated otherwise, contributions intentionally submitted for
+inclusion in Keywright are provided under Apache-2.0.

keywright_server-0.0.1.dist-info/RECORD

@@ -0,0 +1,127 @@
+keywright_server/__init__.py,sha256=UoYUslUfE05Z_TUBCr6Eq8v_EAfe8QoSqnUtkAsf44Q,86
+keywright_server/__main__.py,sha256=eTIcxNKNyOHALTcHBE6Jf9nJdDhlcPDC0INOxxVYgsc,2145
+keywright_server/access.py,sha256=U0A0bDZPjUygZlKvBRoNLEJWyPH8zUQOjlFvoADTij0,5458
+keywright_server/access_view.py,sha256=UaW6eAFnsIdNXtqUGVByyGG5QXdLq32R3tkfwXswL5U,7760
+keywright_server/actions.py,sha256=Kl9p_9xjTYdn9hKEgIhRn_W7OefVvfrvqv-w0_Xu4qs,1047
+keywright_server/approvals.py,sha256=Wwa8z5WU7UW7tmlyyKGZFtl3z_e4sd4UGxQH4cb7S2E,19776
+keywright_server/audit.py,sha256=nIWYqq32xX8x-CEa-k8XLa0IZPXe-fW_yh4bG-LkmQY,1906
+keywright_server/bundles.py,sha256=JcnoEQQfjdS_p3S83UNS3WP4_qhf3Lebn4I65Yvl734,4036
+keywright_server/config.py,sha256=QtaCCZ9FfR1sr01a49XIwZc4YrnBpvLAMmTT5aKP1Gg,4740
+keywright_server/db.py,sha256=gzL-0GK0ceLfmwCRr8q92UVoNFugxyI5hRPso7DGj58,4883
+keywright_server/discovery.py,sha256=x2BxNkR2b56Ey5qG9Y504KfQ0RDWNbxTYM5CzDqHqEM,14179
+keywright_server/events.py,sha256=o4TY9mMdWgRfXwJDWSDD129xQ1DsGZrhDntMUS6g8Mg,2313
+keywright_server/friction.py,sha256=gL8xyB-tFWRBQBVccCzGJvgfSwenUivdUZwh8jD_zcQ,12555
+keywright_server/integrations.py,sha256=pbwLGH0luSKPyea67mavwC0bKWt60_op_9_cZudXlS0,2640
+keywright_server/inventory.py,sha256=CWwEWV43kIRbDjQO5i-Dou17yOELiTd3SXTlBlF4XSY,20275
+keywright_server/inventory_mcp.py,sha256=590DzvYHBRQOIwmmi9Ki3v-oRDCK6RHXqqZfio9K2zU,13915
+keywright_server/jev.py,sha256=LcBhVl9pLK9cQuj6QiW6_dGeLrAZSXaZp_bcnEnxUNQ,3190
+keywright_server/knowledge.py,sha256=YnV6o_03YQCANHLB-zx2ZSCpBXC_efymlD-hXwEIAwA,19849
+keywright_server/knowledge_chunking.py,sha256=HRHIJYauFwSglOw--iVqBGh00Jh1cdU8w54FKommZeo,4970
+keywright_server/knowledge_index.py,sha256=6u5mC53bYmoMReYh5xSGZAZjQkyH8XVKmPsus2xZXv8,11997
+keywright_server/knowledge_mcp.py,sha256=r73g1CSKMnYlP3x4TZR9RtGg6qa_00GWTJjRzG6ydqY,3800
+keywright_server/llm.py,sha256=idOdTh8FsyZZJxHWOMRtYmJqNKpu9mVf6IGVtilktSs,16594
+keywright_server/llm_proxy.py,sha256=L1_5bN410gn1iMOC_KzN-gmjF0QEttK-jldjhyW1qKA,15089
+keywright_server/llm_usage.py,sha256=WEKOmeMxnbfPymlKnfPDnlbCk2UzB_bLb4opUqc5rSw,3432
+keywright_server/mail.py,sha256=EDcGW_o6Sb7oUkqfk26opBjNpHYtbsIRbiTli_5Xpgo,15292
+keywright_server/mcp_oauth.py,sha256=tnvmZRMjh327_0HBUft1_enVn-pwz1cX1Xsi3MSFpD8,20478
+keywright_server/mcp_proxy.py,sha256=EEq6RnyokQH5fJmh5H7qBhOq44O1sdMFgZG_KoooAzo,5142
+keywright_server/mcp_server.py,sha256=eu183SHZe5CknEUJOlUm_T-uB-g4KWC7gg6QhKXSlLs,59199
+keywright_server/models.py,sha256=WutdbNiONFsj8yOTYWSBW1UTex652EWfG4vB5rJ-zXg,23269
+keywright_server/network_map.py,sha256=ZFuJImvkKd-hXIoTYdaZx6lIkea9p3zlt7NXQxRJa4Q,7975
+keywright_server/nudges.py,sha256=TdyQTWLOeifhxt43mHVemUpZdue9dPzmvINcmXpkna8,5130
+keywright_server/omada.py,sha256=Q0g6ml5lz2M60UnQJonBBLSJ9fQIYbijf5TB8nfD6EE,8222
+keywright_server/policy.py,sha256=KF65Ls82CXLfRTQf5zZVU8_OyE7dZfh6rWN6YY37G_g,12231
+keywright_server/policy_preview.py,sha256=HL0K_okix8K6ZwMDJzHD6cWCeYTM1fTu9DSQrDkqE68,8341
+keywright_server/reconciliation.py,sha256=E5yeDfgUoEfbrDSYyzxtH1Mq4MAXKYO2aKMZ1PtStS8,11620
+keywright_server/result_inspection.py,sha256=ixJlGvuOICc1TD9e5bWh5c7l-olhTr1pyleApjvp9rg,13609
+keywright_server/semantic.py,sha256=k3R3d0oS69LYdFTTtCA3DkqAC_z9iA0n0Ke_wFPXLcI,21563
+keywright_server/semantic_questions.json,sha256=Lex-gJwJ9MHqG6FkbkmYC-fXhWG4kumnEi3QKgcIFjA,7012
+keywright_server/settings_store.py,sha256=4x04Q5Eefs6sNW7cxEA2b8mCDY2tWNwiaiUhMZfjRfM,1147
+keywright_server/ssh.py,sha256=C_51iwhq49qK3utWeDKUr641Im9gchFZHCC8g3OGDxQ,13541
+keywright_server/tool_access.py,sha256=_u-_ZvOHrJZIfq5VaH2i9kon9F2OMtC6sVXpyO7zdnI,12116
+keywright_server/usage.py,sha256=eAZvbNueltWDD8IDYUqc4zQVJtg0LedrQ5Bxf0FFk4s,6051
+keywright_server/notify/__init__.py,sha256=6TEF4kxEJwmrgD2_3uPxHtye292cw0k41_48rFLADHs,441
+keywright_server/notify/base.py,sha256=9fKV0CpbUP6tnvRisS3z7r3n5OsHn6b_gwM1v_lggq8,6312
+keywright_server/notify/homeassistant.py,sha256=S8e5UEq8rj7d7pdNy9bD_mzkihR9S0lu_wRmiqtgsmA,10571
+keywright_server/notify/log.py,sha256=YtR3bJRZRFx7iFiBNoZk4x3-V2fMpAdt1IBG9PUz08o,1164
+keywright_server/notify/manager.py,sha256=E8zO64WmpICchNk-wQ_hDf_yiClagZgT_0Ni3R3DuhQ,5687
+keywright_server/notify/webhook.py,sha256=YxD28PYbXW9WUjR1A0zgvwFyY7FkxnSHFROeOJVYdl0,3772
+keywright_server/web/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+keywright_server/web/admin.py,sha256=bY348io2OJmWYJ6aEXVVGukiNnxhE4r4dGXUWBMkWP0,58554
+keywright_server/web/app.py,sha256=_HkzRDxh7hYjbe95f-DMDKoCgzsi2cKftSL3hIT56io,5928
+keywright_server/web/auth.py,sha256=CHo-kM1IL16jH0A1wiyxWpjuB3wiT0BGM21udsetDes,4578
+keywright_server/web/discovery_ui.py,sha256=WLHahXyBCbC_jFgM66BN32Zc4VmB264ygn-Crux7KhU,6787
+keywright_server/web/friction_ui.py,sha256=BTmdL4MDhZ-7wSUFpzB2fA8GNZXyIfiCXuyPOfRnSR0,4656
+keywright_server/web/inventory_ui.py,sha256=ypty5TPExTFJEFaNcqJqHVhTu6E1ZEEt4zawXahGZzI,9287
+keywright_server/web/knowledge_ui.py,sha256=VLmXPtaAruaduhnQ2gXPLbiwOp9rG7eqN4oAhl3eWVA,9347
+keywright_server/web/mail_ui.py,sha256=uqvKaA1r2zdyO5bJcX_udBqmezt5CvHDAac19A-XFlM,9693
+keywright_server/web/mcp_oauth_ui.py,sha256=OT7z_13PYAeBfcrEQWkpKcNFdAg5MbbHLRsM4wSe7vs,3749
+keywright_server/web/network_map_ui.py,sha256=TGL4SX6eCVHQLGTrc9eWzCCqMUz--fBtWcU2k6IgOUw,1462
+keywright_server/web/oidc.py,sha256=jPiQk4Ashbzx4bHdo49E5gIsDFhje8GAybKDSoy5QP0,11192
+keywright_server/web/security.py,sha256=5cn1RX6GCgj2JsS4c2oGYF3UzaSMiQxljlwhTODNSRc,3490
+keywright_server/web/usage_ui.py,sha256=q0GcrOw3RTbM8q-_18cUmymYKkCAxkiNsDvO_KgbwJE,1770
+keywright_server/web/templates/_activity_row.html,sha256=785VpUP-6tnayp32bGIpxnb5Ou4SudxAtykkhG3TJvk,3451
+keywright_server/web/templates/_agent_setup.html,sha256=CKU8T82Lr3PxuhkhJcaTReMdbf9rmqHZYTFSj4CCRHY,3608
+keywright_server/web/templates/_collections_style.html,sha256=lp7t920yTnRt6ZJIHUvsAf8LcczJZzl70P4KLMY_CN4,7884
+keywright_server/web/templates/_constraints.html,sha256=1luZO8auyR0J7Zxn-69Zy9uMaIKT0T4E2UH9Zzrz_bk,1073
+keywright_server/web/templates/_decide.html,sha256=ViuQmg7cDr1VLBJ-xVRsQ83A8piY1lZrBJjmQ2zj98o,3450
+keywright_server/web/templates/_device_kind_picker.html,sha256=9Ox6_aPLjjLNoJVx9j9n3qZ00KO-N7CM06l_iFhgB0g,5822
+keywright_server/web/templates/_hazards.html,sha256=JAk62Cqmb_hnSN2wuNVaCvsxIOZlrS9LC_Epp6Hif2A,751
+keywright_server/web/templates/_icons.html,sha256=s4CHmL-T4YSWBbpC9zbs8JokkeCUqp1PM91QzRPKOeg,1902
+keywright_server/web/templates/_infrastructure_nav.html,sha256=vYi9_-h_hAxklMKYMRIk2f4uoAP0E5yPxfqUdH5p63U,792
+keywright_server/web/templates/_integration_style.html,sha256=Lzq9WBDUeAGGPv8oGLsCo1pMYtQHr9TjAEIxUXZnsW4,5016
+keywright_server/web/templates/_inventory_forms.html,sha256=xUXJJ3zwBANxFG4TnDN2KjwxG_71zIGhyKQsRVDIAUE,4533
+keywright_server/web/templates/_inventory_style.html,sha256=xvdC-cjB7ZCY1p-xWaFHjPcZZOb09gfgHmAmjd5XzS0,3763
+keywright_server/web/templates/_live.html,sha256=4upXpBPeei8T3dwXmmCFQSCR5QmbKVOO_EXT3lBfv5g,764
+keywright_server/web/templates/_mail_nav.html,sha256=Qqp3j5gjLjlOuMoeKbX0rlCjxXOz-Ey04sbfgZVyrlo,360
+keywright_server/web/templates/_mail_style.html,sha256=Zhs7FfPkZadiUmDQJJ2T8BAymW6sVr3CDeVKQYUeoRI,3823
+keywright_server/web/templates/_network_map_script.html,sha256=_Z1Ka1ZKlNaEKZ1KoURQHm3aw_M7tE1wzGwi0NiZrSo,131
+keywright_server/web/templates/_nudge_card.html,sha256=zYLN77BJrvYdaLI3PUqGGrwZ7EoJCQ4Sh8-RyXz06n8,917
+keywright_server/web/templates/_patterns.html,sha256=zutI6vcYQkH8u24lz_24v3t9MQKguPkSOIsCfcOfzYA,665
+keywright_server/web/templates/_policy_preview_results.html,sha256=cbcZMOckW8L2nx2hXzZ7ETRVvdOvTi6msAhOkQ_XbmA,1791
+keywright_server/web/templates/_request_card.html,sha256=9DtxVXFQcXx6-6Fg2NTlkxEJKhw4ivnOJuGg6K-hlsY,3938
+keywright_server/web/templates/_semantic.html,sha256=LlCf459XKnpDCbq0P_KMUA9_EZlk3UBGW0Zv6XE6sYY,1560
+keywright_server/web/templates/_topology_controller.js,sha256=tvLB09tehE4JdfhkS_aZ_2us9dAvjDVC1k0JakNl0-c,18524
+keywright_server/web/templates/_topology_layout.js,sha256=Pp6kdRc27WcCGEB6blH9NP1zEMKHfKJvVi8DGRew9Rs,9680
+keywright_server/web/templates/_topology_render.js,sha256=YvStEMbDwesPoXWDwEBkFyWDhHncrH93AMO9dtHpt1o,7516
+keywright_server/web/templates/access.html,sha256=CQt-SbLqN8ChT9mvEWNGiDI4H45EonIJvYtCZRWaHws,9027
+keywright_server/web/templates/agents.html,sha256=_uHBkexd7fFuen8X9fxyCOzktyBv3PWWzZaDLfjzgKA,3372
+keywright_server/web/templates/audit.html,sha256=rcHFbnTNizYG9Cz6GQytvZU-M79LDmxVpbxKBWX8rtw,714
+keywright_server/web/templates/base.html,sha256=s2RXyfruClbc54fioGI9OSsE0t7WhiGW90Wbp0xWRqI,20202
+keywright_server/web/templates/dashboard.html,sha256=oAAoah-iZ3iTUho2-BZLFASrju_Qpo85o1a4o4dvX_g,12497
+keywright_server/web/templates/decision.html,sha256=OT3Gr5fc3fJVqO39dME8rVo2ZqsY9CV_VMmex66s4kI,2135
+keywright_server/web/templates/friction.html,sha256=i47hPJq6uufAFmv8WwkgE1Ne_SA-jDYv1anMm5FmFws,5151
+keywright_server/web/templates/friction_review.html,sha256=AEjbp_JruhX8ukO-C2yiVwUaPuZKho4Zbt1PwzHwWug,1838
+keywright_server/web/templates/grants.html,sha256=8zM98S5rcRmHQVwMOWcGQvM2Ozzm7BEFFVWH57zQ2c8,5474
+keywright_server/web/templates/integration_picker.html,sha256=_vK96K_p1k1aroDhWBeQHRZ9cmen0BYvUnYJobk0FQg,3247
+keywright_server/web/templates/inventory.html,sha256=MDK19T2TDP82LBiM1rb88wXhV3n-lcsbV0FbRpORP6M,3800
+keywright_server/web/templates/inventory_asset.html,sha256=LfOkgIhDkI_EgNn5RzVBkpjrvvClsHtuyqe1NfefFNM,6676
+keywright_server/web/templates/inventory_discovery.html,sha256=mE9A1fejR4apZ_i0dw4yp0aRPVB7NeHtF61pBQxNBu0,6823
+keywright_server/web/templates/inventory_discovery_review.html,sha256=NAUEuQHAAZp593XhAZRzGu1fsASnv0YAbCG2vylLpIg,8624
+keywright_server/web/templates/inventory_map.html,sha256=SAhabT5B_auhH7MrnbRyELzaWiqwi_aAU6F7dU5B5Jk,12050
+keywright_server/web/templates/inventory_networks.html,sha256=TIYPnrn9TnPvAmRGT_9FLgXR6gPbxOvIqkax0fKIHus,1854
+keywright_server/web/templates/inventory_subnet.html,sha256=irSS_JmBC0YfUiExRFjUCEOp4nFo7ZDyHDct1eohkUc,5944
+keywright_server/web/templates/inventory_topology.html,sha256=Q-oiN_-efxgXUge3yn9B2uky3Q4qWWp4JK0txLa9y_w,2754
+keywright_server/web/templates/knowledge.html,sha256=VV5Mur5s25OFB2vIdmw8Xs9eqV7S7nCUIms-uCC51rQ,5876
+keywright_server/web/templates/knowledge_document.html,sha256=TGSK8LaOArJTcucYX4lM_2QZ2R_fZ_49bf1x8J7DyKg,2188
+keywright_server/web/templates/knowledge_proposal.html,sha256=pVLktI6yXbXil81K1QTfloj8AoZfqvDOKqCSHWX1s0M,1248
+keywright_server/web/templates/login.html,sha256=G8mDpwYdVECSaK3oaPWEqkMsBSyKgIchcMWI4f1G2fo,996
+keywright_server/web/templates/mail.html,sha256=4X2DMKNEaCWZSFpH4MBM2MCPfItUtJNuZ381cil6F9I,5256
+keywright_server/web/templates/mail_rules.html,sha256=8-TmnrkmTIK3YzpPYhbgNpnL_bIxUkgOUNNjWt0QhUk,3303
+keywright_server/web/templates/mail_settings.html,sha256=5dZiVNT7jG00SOxcXZ2D9QWBwcFXr34RUL47wypgyzk,2260
+keywright_server/web/templates/mcp_oauth_continue.html,sha256=TIkDb3L2-cn5xiywlDdizUODKfwu9yrjcvCzu3JGR8k,602
+keywright_server/web/templates/policies.html,sha256=LvzNJtgvVNr2RSHRxRz8In99-otk3lFuPTVkrdKAG4s,3960
+keywright_server/web/templates/request_detail.html,sha256=YAUMPLJtZCJFQD3B4v6cuG_yX7s5VdiAqm_vVDH68rg,4896
+keywright_server/web/templates/requests.html,sha256=PZ5GWCm1TxMq9WbE-VBKNNjRpBUX_hAN8uQ6gzvuBok,1701
+keywright_server/web/templates/resource_form.html,sha256=CBdymSMwbxk-NAFep-BmoCFL3AfEedMo_ZyEIULrthU,21535
+keywright_server/web/templates/resources.html,sha256=boeF6tHa__4APbTVuuyDOEeblKw4-rJamnmHPbFgoeY,8040
+keywright_server/web/templates/settings.html,sha256=j3CMLgqW1tYr5pkITjxJrYxLA0Su2_DI3Q8mcARFFNI,6063
+keywright_server/web/templates/setup.html,sha256=PS8K-nezxmEaQlTIE5agnIe8PQ-b-RPsvk62mCyCltU,642
+keywright_server/web/templates/usage.html,sha256=BhqHKP0xSD7rBsZYOoEbIwzX4KCcSQQSXvcM__V0SV4,7096
+keywright_server-0.0.1.dist-info/METADATA,sha256=iMUMG5n7e7tNUzS3zEldZZSrqvmL3inpkFt5gMSb_jI,6486
+keywright_server-0.0.1.dist-info/WHEEL,sha256=2iZrJkDIkeDh0k9SikKMqFuRP-ua6mb4Ir1AsER4BEw,87
+keywright_server-0.0.1.dist-info/entry_points.txt,sha256=hJ_TrL4uXWa9VszkG0KxW79vlcKkQeAM-wSP1OkdP44,68
+keywright_server-0.0.1.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+keywright_server-0.0.1.dist-info/licenses/NOTICE,sha256=jr7_rVnJBoFTRrhJtso7fNZSTqY3VWn3HMHIJx4VZQs,137
+keywright_server-0.0.1.dist-info/licenses/THIRD_PARTY_NOTICES,sha256=XBtFG9lof3o3Q_5_3531dD2E3-4uNZ8ykUsnYFIAP1w,3270
+keywright_server-0.0.1.dist-info/RECORD,,

keywright_server-0.0.1.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.33.0
+Root-Is-Purelib: true
+Tag: py3-none-any

keywright_server-0.0.1.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+keywright-server = keywright_server.__main__:main

keywright_server-0.0.1.dist-info/licenses/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

keywright_server-0.0.1.dist-info/licenses/NOTICE

@@ -0,0 +1,5 @@
+Keywright
+Copyright 2026 Keywright contributors
+
+Licensed under the Apache License, Version 2.0.
+https://github.com/johnrcarty/keywright

keywright_server-0.0.1.dist-info/licenses/THIRD_PARTY_NOTICES

@@ -0,0 +1,55 @@
+Third-party components
+======================
+
+Apache-2.0 applies to Keywright's own code and documentation. Dependencies,
+container base images, optional services and embedding models retain their own
+licenses. This file is a guide to those components, not a replacement for their
+license texts or a complete inventory of a particular image.
+
+Python dependencies
+-------------------
+Keywright distributions declare dependencies rather than vendoring them. pip
+installs their license files alongside their package metadata, typically under
+/usr/local/lib/python3.13/site-packages/<distribution>.dist-info/ in the supplied
+images. Preserve those files when redistributing an installation or image.
+The pyproject.toml files declare the dependency ranges; resolved versions may
+change between builds.
+
+AsyncSSH is used as an unmodified library under EPL-2.0. Its installed asyncssh/
+directory contains the Python source, including upstream copyright headers;
+its distribution metadata includes the Eclipse Public License text. Source and
+release history: https://github.com/ronf/asyncssh
+
+Certifi uses MPL-2.0 for its certificate bundle. The installed certifi/ directory
+contains the bundle and Python source, and its distribution metadata includes
+the license. Source and release history: https://github.com/certifi/python-certifi
+
+Container operating-system packages
+-----------------------------------
+The images use the official Python slim image and Debian packages. License and
+copyright notices are retained under /usr/share/doc/<package>/copyright and in
+Python's installation. Debian source packages are available through the Debian
+archive and https://snapshot.debian.org/ for the corresponding package version.
+Some system tools have copyleft licenses; redistributors must satisfy their
+source-distribution requirements as well as retaining notices. The release workflow verifies exact installed versions against a reviewed source
+lock and publishes matching source materials before publishing the application
+image. The image label io.keywright.source-image identifies the matching source
+image in the same registry package; retain it while distributing the application.
+Version-tag builds also attach source and notice assets to a draft GitHub Release. A Keywright image license label describes the
+Keywright application, not every component in the image.
+
+Optional services
+-----------------
+PostgreSQL, pgvector, LiteLLM and any embedding server/model are separate services
+with their own upstream terms. Check the particular image and model version you
+deploy or redistribute. Keywright's license does not relicense those services.
+
+Supplemental native notices and source coverage
+---------------------------------------------
+Prebuilt images include supplemental upstream notices under
+/usr/share/keywright/licenses/LICENSES.txt and a verified dependency inventory.
+The source lock and notice provenance are maintained under third_party/ in the
+repository. This covers bundled native libraries in addition to installed package
+notices, including libffi, libuv, OpenSSL and Rust components. See
+https://github.com/johnrcarty/keywright/blob/main/third_party/README.md for obtaining
+and verifying the matching source archive without running the source image.