langchain-chronoverify 0.1.0__tar.gz

langchain_chronoverify-0.1.0/.gitignore

@@ -0,0 +1,11 @@
+# Node
+node_modules/
+dist/
+*.tsbuildinfo
+
+# Python
+__pycache__/
+*.pyc
+build/
+*.egg-info/
+.eggs/

langchain_chronoverify-0.1.0/PKG-INFO

@@ -0,0 +1,64 @@
+Metadata-Version: 2.4
+Name: langchain-chronoverify
+Version: 0.1.0
+Summary: LangChain tool for ChronoVerify: verify when a photo was taken and its provenance (C2PA Content Credentials, EXIF, pixel forensics).
+Project-URL: Homepage, https://chronoverify.com
+Project-URL: Documentation, https://chronoverify.com/integrations/langchain
+Project-URL: API reference, https://chronoverify.com/method
+Project-URL: Source, https://github.com/beeswaxpat/chronoverify-agent-recipes
+Author-email: ChronoVerify <support@chronoverify.com>
+License-Expression: MIT
+Keywords: c2pa,capture-time,content-credentials,exif,image-verification,langchain,provenance
+Requires-Python: >=3.9
+Requires-Dist: langchain-core<2,>=0.3
+Requires-Dist: requests>=2.28
+Description-Content-Type: text/markdown
+
+# langchain-chronoverify
+
+LangChain tool for [ChronoVerify](https://chronoverify.com): verify when a photo was taken and its provenance. It reads EXIF and XMP, cryptographically validates C2PA Content Credentials against the official trust lists, and runs classical pixel forensics, returning one plain-language verdict with a confidence score.
+
+Provenance validation, not a deepfake or AI-generation detector. Verdicts are investigative triage to support human review, not proof.
+
+## Install
+
+```bash
+pip install langchain-chronoverify
+```
+
+## Use
+
+```python
+from langchain_chronoverify import ChronoVerifyTool
+
+tool = ChronoVerifyTool()  # keyless: free, rate-limited public path
+
+result = tool.invoke({"url": "https://example.com/photo.jpg"})
+print(result["verdict"], result["confidence"])
+# verdict is one of: provenance_confirmed, consistent, inconclusive,
+# metadata_anomaly, manipulation_indicated
+```
+
+With an agent:
+
+```python
+from langchain.agents import create_agent  # or your agent constructor
+
+agent = create_agent(model, tools=[ChronoVerifyTool()])
+```
+
+## API key (optional)
+
+The keyless path is free and rate limited per IP. For your own quota, pass `api_key="cv_live_..."` or set `CHRONOVERIFY_API_KEY`. A free key (no card, 100 verifications per month):
+
+```bash
+curl -X POST https://chronoverify.com/v1/keys/free \
+  -H "Content-Type: application/json" -d '{"email": "you@example.com"}'
+```
+
+## Links
+
+- Machine-readable onboarding: https://chronoverify.com/v1/onboarding
+- API docs: https://chronoverify.com/method
+- Response JSON Schema: https://chronoverify.com/v1/verify.schema.json
+- Pricing: https://chronoverify.com/pricing

langchain_chronoverify-0.1.0/README.md

@@ -0,0 +1,48 @@
+# langchain-chronoverify
+
+LangChain tool for [ChronoVerify](https://chronoverify.com): verify when a photo was taken and its provenance. It reads EXIF and XMP, cryptographically validates C2PA Content Credentials against the official trust lists, and runs classical pixel forensics, returning one plain-language verdict with a confidence score.
+
+Provenance validation, not a deepfake or AI-generation detector. Verdicts are investigative triage to support human review, not proof.
+
+## Install
+
+```bash
+pip install langchain-chronoverify
+```
+
+## Use
+
+```python
+from langchain_chronoverify import ChronoVerifyTool
+
+tool = ChronoVerifyTool()  # keyless: free, rate-limited public path
+
+result = tool.invoke({"url": "https://example.com/photo.jpg"})
+print(result["verdict"], result["confidence"])
+# verdict is one of: provenance_confirmed, consistent, inconclusive,
+# metadata_anomaly, manipulation_indicated
+```
+
+With an agent:
+
+```python
+from langchain.agents import create_agent  # or your agent constructor
+
+agent = create_agent(model, tools=[ChronoVerifyTool()])
+```
+
+## API key (optional)
+
+The keyless path is free and rate limited per IP. For your own quota, pass `api_key="cv_live_..."` or set `CHRONOVERIFY_API_KEY`. A free key (no card, 100 verifications per month):
+
+```bash
+curl -X POST https://chronoverify.com/v1/keys/free \
+  -H "Content-Type: application/json" -d '{"email": "you@example.com"}'
+```
+
+## Links
+
+- Machine-readable onboarding: https://chronoverify.com/v1/onboarding
+- API docs: https://chronoverify.com/method
+- Response JSON Schema: https://chronoverify.com/v1/verify.schema.json
+- Pricing: https://chronoverify.com/pricing

langchain_chronoverify-0.1.0/langchain_chronoverify/__init__.py

@@ -0,0 +1,6 @@
+"""LangChain tool for ChronoVerify image capture-time and provenance verification."""
+
+from langchain_chronoverify.tool import ChronoVerifyTool
+
+__all__ = ["ChronoVerifyTool"]
+__version__ = "0.1.0"

langchain_chronoverify-0.1.0/langchain_chronoverify/tool.py

@@ -0,0 +1,97 @@
+"""ChronoVerify tool for LangChain agents.
+
+Calls POST https://chronoverify.com/v1/verify and returns the typed verdict
+object. Works keyless on the free, rate-limited public path; pass an API key
+(or set CHRONOVERIFY_API_KEY) to meter against your own quota. Machine
+contract: https://chronoverify.com/v1/onboarding
+"""
+
+from __future__ import annotations
+
+import os
+from typing import Any, Optional, Type
+
+import requests
+from langchain_core.tools import BaseTool
+from pydantic import BaseModel, Field
+
+_ENDPOINT = "https://chronoverify.com/v1/verify"
+
+_DESCRIPTION = (
+    "Verify when a photo was taken and its provenance. Reads EXIF and XMP, "
+    "cryptographically validates C2PA Content Credentials against the official "
+    "trust lists, and runs classical pixel forensics, returning ONE verdict "
+    "(provenance_confirmed, consistent, inconclusive, metadata_anomaly, or "
+    "manipulation_indicated) with a 0 to 100 confidence, capture time, device, "
+    "location, and SHA-256/512 fingerprints. Use it before trusting a "
+    "user-submitted or sourced image: insurance claims, KYC, marketplace "
+    "listings, journalism and OSINT, or EU AI Act Article 50 transparency "
+    "checks. Works on any image, signed or not. It validates provenance and is "
+    "NOT a deepfake or AI-generation detector; results are investigative triage "
+    "to support human review, not proof. Provide exactly one of url or "
+    "file_path."
+)
+
+
+class ChronoVerifyInput(BaseModel):
+    """Input for the ChronoVerify verification tool."""
+
+    url: Optional[str] = Field(
+        default=None,
+        description="Publicly reachable direct image URL; the server fetches it.",
+    )
+    file_path: Optional[str] = Field(
+        default=None,
+        description="Local path of an image file to upload.",
+    )
+
+
+class ChronoVerifyTool(BaseTool):
+    """LangChain tool that verifies image capture time and provenance."""
+
+    name: str = "verify_image_provenance"
+    description: str = _DESCRIPTION
+    args_schema: Type[BaseModel] = ChronoVerifyInput
+
+    api_key: Optional[str] = None
+    """ChronoVerify API key (cv_live_...). Falls back to the CHRONOVERIFY_API_KEY
+    environment variable, then to the free, rate-limited keyless path. A free
+    key: POST https://chronoverify.com/v1/keys/free with an email field."""
+
+    timeout: float = 30.0
+
+    def _headers(self) -> dict:
+        key = self.api_key or os.environ.get("CHRONOVERIFY_API_KEY")
+        return {"Authorization": f"Bearer {key}"} if key else {}
+
+    def _run(
+        self,
+        url: Optional[str] = None,
+        file_path: Optional[str] = None,
+        **kwargs: Any,
+    ) -> dict:
+        provided = [v for v in (url, file_path) if v]
+        if len(provided) != 1:
+            raise ValueError("Provide exactly one of url or file_path.")
+        if url:
+            resp = requests.post(
+                _ENDPOINT,
+                data={"url": url},
+                headers=self._headers(),
+                timeout=self.timeout,
+            )
+        else:
+            with open(file_path, "rb") as fh:  # type: ignore[arg-type]
+                resp = requests.post(
+                    _ENDPOINT,
+                    files={"file": (os.path.basename(file_path), fh)},  # type: ignore[arg-type]
+                    headers=self._headers(),
+                    timeout=self.timeout,
+                )
+        if resp.status_code != 200:
+            try:
+                detail = resp.json().get("detail", resp.text)
+            except Exception:
+                detail = resp.text
+            raise RuntimeError(f"ChronoVerify HTTP {resp.status_code}: {detail}")
+        return resp.json()

langchain_chronoverify-0.1.0/pyproject.toml

@@ -0,0 +1,34 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "langchain-chronoverify"
+version = "0.1.0"
+description = "LangChain tool for ChronoVerify: verify when a photo was taken and its provenance (C2PA Content Credentials, EXIF, pixel forensics)."
+readme = "README.md"
+license = "MIT"
+requires-python = ">=3.9"
+authors = [{ name = "ChronoVerify", email = "support@chronoverify.com" }]
+keywords = [
+    "langchain",
+    "image-verification",
+    "provenance",
+    "c2pa",
+    "content-credentials",
+    "exif",
+    "capture-time",
+]
+dependencies = [
+    "langchain-core>=0.3,<2",
+    "requests>=2.28",
+]
+
+[project.urls]
+Homepage = "https://chronoverify.com"
+Documentation = "https://chronoverify.com/integrations/langchain"
+"API reference" = "https://chronoverify.com/method"
+Source = "https://github.com/beeswaxpat/chronoverify-agent-recipes"
+
+[tool.hatch.build.targets.wheel]
+packages = ["langchain_chronoverify"]

langchain_chronoverify-0.1.0/tests/test_tool.py

@@ -0,0 +1,58 @@
+"""Mocked tests for ChronoVerifyTool (no live network)."""
+
+import os
+import sys
+from unittest.mock import MagicMock, patch
+
+sys.path.insert(0, os.path.abspath(os.path.join(os.path.dirname(__file__), "..")))
+
+import pytest
+
+from langchain_chronoverify import ChronoVerifyTool
+
+VERDICT = {"verdict": "consistent", "confidence": 61, "integrity": {"sha256": "ab" * 32}}
+
+
+def _resp(status=200, body=VERDICT):
+    r = MagicMock()
+    r.status_code = status
+    r.json.return_value = body
+    return r
+
+
+def test_url_call_returns_verdict():
+    tool = ChronoVerifyTool()
+    with patch("langchain_chronoverify.tool.requests.post", return_value=_resp()) as post:
+        out = tool.invoke({"url": "https://example.com/a.jpg"})
+    assert out["verdict"] == "consistent"
+    assert post.call_args.kwargs["data"] == {"url": "https://example.com/a.jpg"}
+    assert "Authorization" not in post.call_args.kwargs["headers"]
+
+
+def test_api_key_header_sent():
+    tool = ChronoVerifyTool(api_key="cv_live_test")
+    with patch("langchain_chronoverify.tool.requests.post", return_value=_resp()) as post:
+        tool.invoke({"url": "https://example.com/a.jpg"})
+    assert post.call_args.kwargs["headers"]["Authorization"] == "Bearer cv_live_test"
+
+
+def test_requires_exactly_one_input():
+    tool = ChronoVerifyTool()
+    with pytest.raises(Exception):
+        tool.invoke({})
+    with pytest.raises(Exception):
+        tool.invoke({"url": "https://x.example/a.jpg", "file_path": "a.jpg"})
+
+
+def test_http_error_surfaces_detail():
+    tool = ChronoVerifyTool()
+    err = _resp(status=429, body={"detail": "Rate limit exceeded"})
+    with patch("langchain_chronoverify.tool.requests.post", return_value=err):
+        with pytest.raises(Exception) as exc:
+            tool.invoke({"url": "https://example.com/a.jpg"})
+    assert "429" in str(exc.value) and "Rate limit" in str(exc.value)
+
+
+def test_honest_description():
+    d = ChronoVerifyTool().description
+    assert "NOT a deepfake" in d and "provenance" in d.lower()