proofledger 0.3.0__tar.gz → 0.4.0__tar.gz

{proofledger-0.3.0 → proofledger-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: proofledger
-Version: 0.3.0
+Version: 0.4.0
 Summary: Framework-agnostic, tamper-evident audit layer for AI agents. Hash chains verify byte-for-byte against the ProofLedger TypeScript SDK and dashboard.
 Project-URL: Homepage, https://proofledger.dev
 Project-URL: Repository, https://github.com/jorama/proofledger

{proofledger-0.3.0 → proofledger-0.4.0}/proofledger/__init__.py

@@ -18,7 +18,13 @@ from __future__ import annotations
 
 from typing import Any, Callable, Dict, Optional, TypeVar
 
-from .client import RunHandle, ProofLedgerClient, PolicyBlockedError, iso_now
+from .client import (
+    RunHandle,
+    ProofLedgerClient,
+    PolicyBlockedError,
+    ApprovalDeniedError,
+    iso_now,
+)
 from .hashing import (
     GENESIS_HASH,
     ChainVerificationResult,
@@ -63,6 +69,7 @@ __all__ = [
     "get_trust_score",
     "flush",
     "PolicyBlockedError",
+    "ApprovalDeniedError",
     # Adapters
     "instrument",
     "wrap_openai",
@@ -127,6 +134,8 @@ def enable(
     version: Optional[str] = None,
     auto_capture: bool = True,
     policy_mode: str = "monitor",
+    approval_interval_ms: float = 2000,
+    approval_timeout_ms: float = 300_000,
 ) -> ProofLedgerClient:
     """Initialize the global client and return it for advanced use."""
     global _global_client
@@ -146,6 +155,8 @@ def enable(
         version=version,
         auto_capture=auto_capture,
         policy_mode=policy_mode,
+        approval_interval_ms=approval_interval_ms,
+        approval_timeout_ms=approval_timeout_ms,
     )
     return _global_client
 

{proofledger-0.3.0 → proofledger-0.4.0}/proofledger/client.py

@@ -22,7 +22,13 @@ from .hashing import (
 from .pricing import estimate_cost
 from .transport import HttpTransport, LocalTransport, Transport
 
-__all__ = ["ProofLedgerClient", "RunHandle", "PolicyBlockedError", "iso_now"]
+__all__ = [
+    "ProofLedgerClient",
+    "RunHandle",
+    "PolicyBlockedError",
+    "ApprovalDeniedError",
+    "iso_now",
+]
 
 T = TypeVar("T")
 
@@ -97,6 +103,8 @@ class ProofLedgerClient:
         version: Optional[str] = None,
         auto_capture: bool = True,
         policy_mode: str = "monitor",
+        approval_interval_ms: float = 2000,
+        approval_timeout_ms: float = 300_000,
     ) -> None:
         use_local = local is True or not api_key
         self.config: Dict[str, Any] = {
@@ -114,6 +122,8 @@ class ProofLedgerClient:
             "version": version,
             "auto_capture": auto_capture is not False,
             "policy_mode": policy_mode if policy_mode in ("monitor", "enforce") else "monitor",
+            "approval_interval_ms": approval_interval_ms,
+            "approval_timeout_ms": approval_timeout_ms,
         }
 
         #: Active agent identity for trust events. The private key lives in
@@ -696,8 +706,21 @@ class ProofLedgerClient:
         }
         result = self.transport.send_trust_event(payload)
         policy = result.get("policy") or {}
-        if self.config["policy_mode"] == "enforce" and policy.get("decision") == "block":
-            raise PolicyBlockedError(policy)
+        if self.config["policy_mode"] == "enforce":
+            if policy.get("decision") == "block":
+                raise PolicyBlockedError(policy)
+            # require_approval GATES the action: block until a human decides.
+            # Fail closed — denied or timed-out-pending both raise.
+            approval = result.get("approval") or {}
+            if policy.get("decision") == "require_approval" and approval.get("id"):
+                status = self.await_approval(
+                    approval["id"],
+                    interval_ms=self.config["approval_interval_ms"],
+                    timeout_ms=self.config["approval_timeout_ms"],
+                )
+                if status != "approved":
+                    raise ApprovalDeniedError(approval["id"], status, action)
+                approval["status"] = "approved"
         return result
 
     def log_decision(self, **kwargs: Any) -> Dict[str, Any]:
@@ -775,6 +798,21 @@ class PolicyBlockedError(RuntimeError):
         self.evaluation = evaluation
 
 
+class ApprovalDeniedError(RuntimeError):
+    """Raised in enforce mode when a require_approval action is denied — or
+    still pending when the wait times out (fail-closed)."""
+
+    def __init__(self, approval_id: str, status: str, title: Optional[str] = None) -> None:
+        suffix = f": {title}" if title else ""
+        super().__init__(
+            f"ProofLedger approval timed out while pending{suffix}"
+            if status == "pending"
+            else f"ProofLedger approval denied{suffix}"
+        )
+        self.approval_id = approval_id
+        self.status = status
+
+
 def _now_ms() -> float:
     """Epoch milliseconds, matching JS ``Date.now()``."""
     return time.time() * 1000.0

{proofledger-0.3.0 → proofledger-0.4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "proofledger"
-version = "0.3.0"
+version = "0.4.0"
 description = "Framework-agnostic, tamper-evident audit layer for AI agents. Hash chains verify byte-for-byte against the ProofLedger TypeScript SDK and dashboard."
 readme = "README.md"
 requires-python = ">=3.9"