ranbval-sdk 0.1.0__tar.gz

ranbval_sdk-0.1.0/PKG-INFO

@@ -0,0 +1,34 @@
+Metadata-Version: 2.4
+Name: ranbval-sdk
+Version: 0.1.0
+Summary: Ranbval Runtime Blind Decryption Python SDK
+Author: Ahsan Tariq
+Requires-Python: >=3.10,<4.0
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: cryptography (>=42.0.0,<43.0.0)
+Requires-Dist: openai (>=1.12.0,<2.0.0)
+Description-Content-Type: text/markdown
+
+# Ranbval Python SDK
+
+A secure, E2E zero-knowledge wrapper for official OpenAI clients.
+This SDK is designed to keep raw developer API keys completely invisible via runtime blind decryption and advanced Cython compilation logic.
+
+## Usage
+Simply drop this package into your existing OpenAI projects without changing your code structure:
+
+```python
+from ranbval_sdk import SecureOpenAI
+
+# Automatically decrypts the custom JWT-like ranbval structure
+client = SecureOpenAI()
+```
+
+## Security Design
+This package employs zero-knowledge PBKDF2 parameters synced natively to your personal vault secrets.
+

ranbval_sdk-0.1.0/README.md

@@ -0,0 +1,17 @@
+# Ranbval Python SDK
+
+A secure, E2E zero-knowledge wrapper for official OpenAI clients.
+This SDK is designed to keep raw developer API keys completely invisible via runtime blind decryption and advanced Cython compilation logic.
+
+## Usage
+Simply drop this package into your existing OpenAI projects without changing your code structure:
+
+```python
+from ranbval_sdk import SecureOpenAI
+
+# Automatically decrypts the custom JWT-like ranbval structure
+client = SecureOpenAI()
+```
+
+## Security Design
+This package employs zero-knowledge PBKDF2 parameters synced natively to your personal vault secrets.

ranbval_sdk-0.1.0/build.py

@@ -0,0 +1,19 @@
+import os
+from setuptools import Extension
+from Cython.Build import cythonize
+
+# Define the C-Extension compilation for our secure cryptography module
+extensions = [
+    Extension(
+        "ranbval_sdk.crypto",
+        ["src/ranbval_sdk/crypto.py"],
+    )
+]
+
+def build(setup_kwargs):
+    """
+    Hook for Poetry to compile the Python script into a raw C/C++ Shared Object (.so) Machine Code binary.
+    """
+    setup_kwargs.update({
+        "ext_modules": cythonize(extensions, language_level=3, compiler_directives={'linetrace': False})
+    })

ranbval_sdk-0.1.0/pyproject.toml

@@ -0,0 +1,16 @@
+[tool.poetry]
+name = "ranbval-sdk"
+version = "0.1.0"
+description = "Ranbval Runtime Blind Decryption Python SDK"
+authors = ["Ahsan Tariq", "Hussnain Tariq", "Sundas Tariq"]
+readme = "README.md"
+build = "build.py"
+
+[tool.poetry.dependencies]
+python = "^3.10"
+cryptography = "^42.0.0"
+openai = "^1.12.0"
+
+[build-system]
+requires = ["poetry-core>=1.0.0", "Cython>=3.0.0", "setuptools"]
+build-backend = "poetry.core.masonry.api"

ranbval_sdk-0.1.0/src/ranbval_sdk/__init__.py

@@ -0,0 +1,3 @@
+from .integrations.openai_client import SecureOpenAI
+
+__all__ = ["SecureOpenAI"]

ranbval_sdk-0.1.0/src/ranbval_sdk/crypto.py

@@ -0,0 +1,53 @@
+import base64
+import hashlib
+from cryptography.hazmat.primitives.kdf.pbkdf2 import PBKDF2HMAC
+from cryptography.hazmat.primitives import hashes
+from cryptography.hazmat.primitives.ciphers.aead import AESGCM
+
+def derive_key(password: str, salt_hex: str) -> bytes:
+    salt = bytes.fromhex(salt_hex)
+    kdf = PBKDF2HMAC(
+        algorithm=hashes.SHA256(),
+        length=32,
+        salt=salt,
+        iterations=100000,
+    )
+    return kdf.derive(password.encode())
+
+def safe_decrypt(copy_token: str, vault_secret: str) -> str:
+    """
+    Takes the encapsulated cryptographic identity token and performs zero-knowledge
+    in-memory envelope decryption utilizing PBKDF2 and AES-GCM.
+    """
+    packet_segments = copy_token.split(".")
+    if len(packet_segments) != 5:
+        raise ValueError("E2E packet fragmentation error")
+    
+    header = packet_segments[0]
+    entropy_matrix = packet_segments[1]
+    salt_hex = packet_segments[2]
+    b64_payload = packet_segments[3]
+    tail_sig = packet_segments[4]
+
+    # Core integrity envelope verification (Irreversible computationally secure hash validation)
+    h_header = hashlib.sha256(header.encode()).hexdigest()
+    h_tail = hashlib.sha256(tail_sig.encode()).hexdigest()
+    
+    if h_header != "6abbdc55e134f25eedf27cb269d26ddc4f136db89f469af4336d1caaa7d39da8" or h_tail != "3b6abd55988090c857afcd08354fcc4c86ffadb6f0c480b12a9c692637a982e4" or len(entropy_matrix) != 15:
+        raise ValueError("Corrupted cryptographic token identifier or signature matrix")
+    
+    # 1. Derive key cryptographically tied to the project salt
+    key = derive_key(vault_secret, salt_hex)
+    
+    # 2. Decode payload (IV + Ciphertext)
+    packed = base64.b64decode(b64_payload)
+    iv = packed[:12]
+    ciphertext = packed[12:]
+    
+    # 3. Decrypt payload
+    try:
+        aesgcm = AESGCM(key)
+        decrypted = aesgcm.decrypt(iv, ciphertext, None)
+        return decrypted.decode("utf-8")
+    except Exception as e:
+        raise ValueError("Decryption failed! Did you provide the correct E2E vault secret?") from e

ranbval_sdk-0.1.0/src/ranbval_sdk/integrations/__init__.py

@@ -0,0 +1 @@
+# Automagical wrapper imports

ranbval_sdk-0.1.0/src/ranbval_sdk/integrations/openai_client.py

@@ -0,0 +1,33 @@
+import os
+import openai
+from ranbval_sdk.crypto import safe_decrypt
+
+class SecureOpenAI(openai.OpenAI):
+    """
+    A drop-in replacement for `openai.OpenAI` that intercepts
+    Ranbval (rbv1.*) encoded API keys from .env or args, decrypts
+    them entirely in-memory at runtime, and seamlessly initializes
+    the standard OpenAI client.
+    """
+    def __init__(self, api_key=None, vault_secret=None, **kwargs):
+        encoded_key = api_key or os.environ.get("OPENAI_API_KEY")
+        secret = vault_secret or os.environ.get("RANBVAL_VAULT_SECRET")
+        
+        if not encoded_key:
+            raise ValueError("No OPENAI_API_KEY found or provided.")
+            
+        if encoded_key.startswith("ranbval."):
+            if not secret:
+                raise ValueError(
+                    "You supplied an Encrypted Ranbval Token but no RANBVAL_VAULT_SECRET "
+                    "was found in .env or passed as an argument."
+                )
+            
+            # Runtime blind-decryption hook!
+            decrypted_key = safe_decrypt(encoded_key, secret)
+            
+            # Call openai.OpenAI constructor with the real raw string entirely in-memory
+            super().__init__(api_key=decrypted_key, **kwargs)
+        else:
+            # Fallback if standard (sk-...) api_key is given natively.
+            super().__init__(api_key=encoded_key, **kwargs)