openentity 0.5.2__tar.gz → 0.5.3__tar.gz

{openentity-0.5.2 → openentity-0.5.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: openentity
-Version: 0.5.2
+Version: 0.5.3
 Summary: Open Entity (OEIS-1) client: JCS, did:key, eddsa-jcs-2022, Merkle proofs, adopt().
 Project-URL: Homepage, https://openentity.org
 Project-URL: Documentation, https://oeis.dev

{openentity-0.5.2 → openentity-0.5.3}/openentity/__init__.py

@@ -5,4 +5,4 @@ from .httpsig import HttpSigError, sign_request, verify_request  # noqa: F401
 from .identity import Identity  # noqa: F401
 from .report import TrustReport, trust  # noqa: F401
 
-__version__ = "0.5.2"
+__version__ = "0.5.3"

{openentity-0.5.2 → openentity-0.5.3}/openentity/identity.py

@@ -37,8 +37,13 @@ def _keychain_set(seed_hex: str) -> bool:
     return False
 
 
+def home() -> pathlib.Path:
+    """OPENENTITY_HOME, else ~/.openentity: where the key file and integrations' state live."""
+    return pathlib.Path(os.environ.get("OPENENTITY_HOME", "~/.openentity")).expanduser()
+
+
 def _file() -> pathlib.Path:
-    return pathlib.Path(os.environ.get("OPENENTITY_HOME", "~/.openentity")).expanduser() / "identity.key"
+    return home() / "identity.key"
 
 
 class Identity:
@@ -54,10 +59,17 @@ class Identity:
         return self.kp.seed
 
     @classmethod
-    def load_or_create(cls) -> "Identity":
+    def load(cls) -> "Identity | None":
+        """The existing identity, or None. Never creates one."""
         for source, read in (("keychain", _keychain_get), ("file", lambda: _file().read_text().strip() if _file().exists() else None)):
             if h := read():
                 return cls(bytes.fromhex(h), source)
+        return None
+
+    @classmethod
+    def load_or_create(cls) -> "Identity":
+        if found := cls.load():
+            return found
         seed = os.urandom(32)
         if _keychain_set(seed.hex()):
             return cls(seed, "keychain")

{openentity-0.5.2 → openentity-0.5.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "openentity"
-version = "0.5.2"
+version = "0.5.3"
 description = "Open Entity (OEIS-1) client: JCS, did:key, eddsa-jcs-2022, Merkle proofs, adopt()."
 readme = "README.md"
 license = "MIT"

{openentity-0.5.2 → openentity-0.5.3}/tests/test_core.py

@@ -7,7 +7,7 @@ from pathlib import Path
 
 import pytest
 
-from openentity import cli, core
+from openentity import __version__, cli, core
 
 ROOT = Path(__file__).resolve().parents[3]
 VECTORS = ROOT / "test-vectors"
@@ -198,7 +198,7 @@ def test_adopt_and_cli(tmp_path, monkeypatch, capsys):
 def test_cli_version(capsys):
     with pytest.raises(SystemExit) as e:
         cli.main(["--version"])
-    assert e.value.code == 0 and "0.5.2" in capsys.readouterr().out
+    assert e.value.code == 0 and __version__ in capsys.readouterr().out
 
 
 # ---- shared vectors, checked with the independent verifier's own logic ----

{openentity-0.5.2 → openentity-0.5.3}/tests/test_identity.py

@@ -45,3 +45,15 @@ def test_keychain_failure_falls_back_to_file(monkeypatch):
     monkeypatch.delenv("OPENENTITY_KEYCHAIN")
     monkeypatch.setattr(identity, "_run", lambda argv, stdin=None: None)  # no `security`, no `secret-tool`
     assert Identity.load_or_create().source == "file"
+
+
+def test_load_never_creates_a_key(home):
+    """Read-only callers (a trust gate) must not mint an identity as a side effect."""
+    assert Identity.load() is None
+    assert not (home / "identity.key").exists()
+    a = Identity.load_or_create()
+    assert Identity.load().did == a.did
+
+
+def test_home_follows_openentity_home(home):
+    assert identity.home() == home

{openentity-0.5.2 → openentity-0.5.3}/uv.lock

@@ -699,7 +699,7 @@ wheels = [
 
 [[package]]
 name = "openentity"
-version = "0.5.2"
+version = "0.5.3"
 source = { editable = "." }
 dependencies = [
     { name = "cryptography" },