relintio-agent 0.9.5__tar.gz

relintio_agent-0.9.5/LICENSE

@@ -0,0 +1,29 @@
+RelintioAgent / Relintio Proprietary License
+
+Copyright (c) 2026 Relintio
+
+All rights reserved.
+
+This software and associated documentation files (the "Software") are proprietary
+and confidential. Unauthorized copying, modification, distribution, or use of the
+Software, via any medium, is strictly prohibited.
+
+Permission is hereby granted to use the Software solely for the purpose of
+integrating and operating the RelintioAgent service with a valid, active license
+obtained from Relintio.
+
+You may not:
+- Copy, reproduce, or redistribute the Software or any portion of it;
+- Modify, translate, reverse engineer, decompile, disassemble, or create
+  derivative works based on the Software;
+- Remove or alter any proprietary notices.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+For licensing inquiries, contact Relintio.

relintio_agent-0.9.5/PKG-INFO

@@ -0,0 +1,144 @@
+Metadata-Version: 2.4
+Name: relintio-agent
+Version: 0.9.5
+Summary: RelintioAgent in-process agent for Python ASGI runtimes.
+License-Expression: LicenseRef-Proprietary
+Project-URL: Homepage, https://github.com/relintio/Relintio
+Project-URL: Repository, https://github.com/relintio/Relintio
+Project-URL: Issues, https://github.com/relintio/Relintio/issues
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: httpx>=0.26
+Requires-Dist: cryptography>=42
+Dynamic: license-file
+
+# relintio-agent (Python)
+
+> **Note on Features & Quotas**: Advanced features (like Bot Challenge and Custom Shield Pages) are tied to your subscription plan. If you exceed your monthly API quota, the agent will operate in a degraded mode (basic protection) before ultimately failing-open to prevent locking you out of your own site. All configuration rules are centrally managed via the dashboard.
+
+Python in-process agent for ASGI runtimes (FastAPI/Starlette/etc).
+
+## Install
+
+```bash
+pip install relintio-agent
+```
+
+## FastAPI usage
+
+```py
+from fastapi import FastAPI
+from relintio_agent.asgi import UltimateProtectorMiddleware
+
+app = FastAPI()
+
+app.add_middleware(
+    UltimateProtectorMiddleware,
+    license_key="UP_LIVE_...",
+    api_url="https://relintio.com/api",
+)
+
+```
+
+## Zero-code-ish usage (env wrapper)
+
+If you can change *how* the app is created (but don't want to paste config into code),
+wrap the ASGI app using env vars:
+
+```py
+import os
+from fastapi import FastAPI
+from relintio_agent import wrap_asgi_app
+
+app = wrap_asgi_app(FastAPI())
+
+# env:
+# UP_LICENSE_KEY=UP_LIVE_...
+# UP_API_URL=https://relintio.com/api
+```
+
+### Optional: sitecustomize bootstrap
+
+The platform can generate a `sitecustomize.py` helper inside the **Python auto bundle**.
+If that file is on `PYTHONPATH`, Python auto-imports it on startup.
+Set `UP_ASGI_APP="module:app"` and it will best-effort wrap that object automatically (fail-open).
+
+## Risk Scoring Engine (v0.9.3)
+
+Every request is evaluated using an **additive 0-100 signal-based score**. Signals include:
+
+| Signal | Weight | Description |
+|---|---|---|
+| Empty User-Agent | +50 | No UA header sent |
+| Short User-Agent | +25 | UA < 20 characters |
+| No Accept-Language | +20 | Missing browser locale header |
+| Generic Accept | +15 | Wildcard `*/*` only |
+| Connection: close | +10 | Non-persistent connection |
+| POST without Referer | +15 | Form submission without origin |
+| Rate burst | +35 | Token-bucket exhaustion |
+
+### Response Tiers
+
+| Tier | Score Range | Behavior |
+|---|---|---|
+| **ALLOW** | 0–39 | Request proceeds normally |
+| **SLOW** | 40–59 | 2-second `asyncio.sleep` to exhaust scanners |
+| **CHALLENGE** | 60–74 | Browser verification challenge |
+| **DECOY** | 75–84 | Serves fake maintenance page |
+| **BLOCK** | 85–100 | Hard block with configured response |
+
+### Token-Bucket Rate Limiter
+
+Default: **8 tokens/sec**, burst capacity of **24**. Route-aware multipliers give extra capacity to static assets. Memory-safe with 5-minute eviction via `asyncio`-compatible dict.
+
+## Notes
+
+- PyPI distribution name: `relintio-agent`
+- Import path: `relintio_agent` (recommended)
+- Legacy import path still supported: `ultimateprotector_agent`
+
+
+## Options
+
+- `license_key` (required)
+- `api_url` (required) e.g. `https://relintio.com/api`
+- `sync_interval_seconds` (default: `60`)
+- `allow_sample_rate` (default: `0.01`)
+- `only_paths`: list[str] exact (`/checkout`) or prefix (`/product/*`)
+- `except_paths`: list[str]
+- `only_regex`: str (Python regex)
+
+## Geo Enrichment
+
+When CDN geo headers (`CF-IPCountry`, etc.) are absent, the agent calls the platform's `/api/agent/geo-lookup` endpoint.
+The server resolves the country using **local MaxMind GeoLite2 databases** — zero external API calls, zero cost, microsecond latency.
+Results are cached in-memory (24h TTL) to minimize round-trips.
+
+## Changelog
+
+### 0.9.3
+
+- **Import path alignment** - `relintio_agent` is now the documented import path, with `ultimateprotector_agent` kept as a compatibility alias.
+- **Version telemetry alignment** - Runtime telemetry now reports `0.9.3`, matching the PyPI package version and release tag.
+
+### 0.5.0
+
+- **Additive risk-scoring engine** — 0-100 signal-based scoring with 7 weighted signals.
+- **5-tier graduated response** — ALLOW, SLOW (`asyncio.sleep(2.0)`), CHALLENGE, DECOY, BLOCK.
+- **Token-bucket rate limiter** — Replaces fixed-window counter. 8 tokens/sec, 24 burst, route-aware multipliers.
+- **`risk_score` telemetry** — Agent-calculated score forwarded to server in log payload.
+
+### 0.3.0
+
+- **Geo enrichment architecture hardened** — The server-side `/api/agent/geo-lookup` endpoint now performs local MaxMind GeoLite2 lookups instead of proxying to `ipinfo.io`. Agent behaviour is unchanged; the improvement is server-side.
+
+### 0.2.0
+
+- **HMAC payload verification** — Rules payloads are now authenticated with HMAC-SHA256 before decryption. Requires platform ≥ 2026-04.
+- **`X-Agent-Version` header** — Sent on every `/verify` request for dashboard version tracking.
+- **`outdated` status handling** — If the cloud responds with `outdated`, the agent fails open and stops protecting until updated.
+
+### 0.1.1
+
+- Initial stable release with AES-256-CBC encrypted rules sync.

relintio_agent-0.9.5/README.md

@@ -0,0 +1,129 @@
+# relintio-agent (Python)
+
+> **Note on Features & Quotas**: Advanced features (like Bot Challenge and Custom Shield Pages) are tied to your subscription plan. If you exceed your monthly API quota, the agent will operate in a degraded mode (basic protection) before ultimately failing-open to prevent locking you out of your own site. All configuration rules are centrally managed via the dashboard.
+
+Python in-process agent for ASGI runtimes (FastAPI/Starlette/etc).
+
+## Install
+
+```bash
+pip install relintio-agent
+```
+
+## FastAPI usage
+
+```py
+from fastapi import FastAPI
+from relintio_agent.asgi import UltimateProtectorMiddleware
+
+app = FastAPI()
+
+app.add_middleware(
+    UltimateProtectorMiddleware,
+    license_key="UP_LIVE_...",
+    api_url="https://relintio.com/api",
+)
+
+```
+
+## Zero-code-ish usage (env wrapper)
+
+If you can change *how* the app is created (but don't want to paste config into code),
+wrap the ASGI app using env vars:
+
+```py
+import os
+from fastapi import FastAPI
+from relintio_agent import wrap_asgi_app
+
+app = wrap_asgi_app(FastAPI())
+
+# env:
+# UP_LICENSE_KEY=UP_LIVE_...
+# UP_API_URL=https://relintio.com/api
+```
+
+### Optional: sitecustomize bootstrap
+
+The platform can generate a `sitecustomize.py` helper inside the **Python auto bundle**.
+If that file is on `PYTHONPATH`, Python auto-imports it on startup.
+Set `UP_ASGI_APP="module:app"` and it will best-effort wrap that object automatically (fail-open).
+
+## Risk Scoring Engine (v0.9.3)
+
+Every request is evaluated using an **additive 0-100 signal-based score**. Signals include:
+
+| Signal | Weight | Description |
+|---|---|---|
+| Empty User-Agent | +50 | No UA header sent |
+| Short User-Agent | +25 | UA < 20 characters |
+| No Accept-Language | +20 | Missing browser locale header |
+| Generic Accept | +15 | Wildcard `*/*` only |
+| Connection: close | +10 | Non-persistent connection |
+| POST without Referer | +15 | Form submission without origin |
+| Rate burst | +35 | Token-bucket exhaustion |
+
+### Response Tiers
+
+| Tier | Score Range | Behavior |
+|---|---|---|
+| **ALLOW** | 0–39 | Request proceeds normally |
+| **SLOW** | 40–59 | 2-second `asyncio.sleep` to exhaust scanners |
+| **CHALLENGE** | 60–74 | Browser verification challenge |
+| **DECOY** | 75–84 | Serves fake maintenance page |
+| **BLOCK** | 85–100 | Hard block with configured response |
+
+### Token-Bucket Rate Limiter
+
+Default: **8 tokens/sec**, burst capacity of **24**. Route-aware multipliers give extra capacity to static assets. Memory-safe with 5-minute eviction via `asyncio`-compatible dict.
+
+## Notes
+
+- PyPI distribution name: `relintio-agent`
+- Import path: `relintio_agent` (recommended)
+- Legacy import path still supported: `ultimateprotector_agent`
+
+
+## Options
+
+- `license_key` (required)
+- `api_url` (required) e.g. `https://relintio.com/api`
+- `sync_interval_seconds` (default: `60`)
+- `allow_sample_rate` (default: `0.01`)
+- `only_paths`: list[str] exact (`/checkout`) or prefix (`/product/*`)
+- `except_paths`: list[str]
+- `only_regex`: str (Python regex)
+
+## Geo Enrichment
+
+When CDN geo headers (`CF-IPCountry`, etc.) are absent, the agent calls the platform's `/api/agent/geo-lookup` endpoint.
+The server resolves the country using **local MaxMind GeoLite2 databases** — zero external API calls, zero cost, microsecond latency.
+Results are cached in-memory (24h TTL) to minimize round-trips.
+
+## Changelog
+
+### 0.9.3
+
+- **Import path alignment** - `relintio_agent` is now the documented import path, with `ultimateprotector_agent` kept as a compatibility alias.
+- **Version telemetry alignment** - Runtime telemetry now reports `0.9.3`, matching the PyPI package version and release tag.
+
+### 0.5.0
+
+- **Additive risk-scoring engine** — 0-100 signal-based scoring with 7 weighted signals.
+- **5-tier graduated response** — ALLOW, SLOW (`asyncio.sleep(2.0)`), CHALLENGE, DECOY, BLOCK.
+- **Token-bucket rate limiter** — Replaces fixed-window counter. 8 tokens/sec, 24 burst, route-aware multipliers.
+- **`risk_score` telemetry** — Agent-calculated score forwarded to server in log payload.
+
+### 0.3.0
+
+- **Geo enrichment architecture hardened** — The server-side `/api/agent/geo-lookup` endpoint now performs local MaxMind GeoLite2 lookups instead of proxying to `ipinfo.io`. Agent behaviour is unchanged; the improvement is server-side.
+
+### 0.2.0
+
+- **HMAC payload verification** — Rules payloads are now authenticated with HMAC-SHA256 before decryption. Requires platform ≥ 2026-04.
+- **`X-Agent-Version` header** — Sent on every `/verify` request for dashboard version tracking.
+- **`outdated` status handling** — If the cloud responds with `outdated`, the agent fails open and stops protecting until updated.
+
+### 0.1.1
+
+- Initial stable release with AES-256-CBC encrypted rules sync.

relintio_agent-0.9.5/pyproject.toml

@@ -0,0 +1,27 @@
+[build-system]
+requires = ["setuptools>=77", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "relintio-agent"
+version = "0.9.5"
+description = "RelintioAgent in-process agent for Python ASGI runtimes."
+readme = "README.md"
+requires-python = ">=3.10"
+license = "LicenseRef-Proprietary"
+license-files = ["LICENSE"]
+dependencies = [
+  "httpx>=0.26",
+  "cryptography>=42",
+]
+
+[project.urls]
+Homepage = "https://github.com/relintio/Relintio"
+Repository = "https://github.com/relintio/Relintio"
+Issues = "https://github.com/relintio/Relintio/issues"
+
+[tool.setuptools]
+package-dir = {"" = "src"}
+
+[tool.setuptools.packages.find]
+where = ["src"]

relintio_agent-0.9.5/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

relintio_agent-0.9.5/src/auraprotector_agent/__init__.py

@@ -0,0 +1,18 @@
+"""Compatibility import path.
+
+The distribution name on PyPI is `relintio-agent`.
+
+Historically the internal module path was `ultimateprotector_agent`.
+To reduce confusion for new users, we provide `relintio_agent` as
+an alias that re-exports the public API.
+
+Both imports are supported:
+
+    from relintio_agent.asgi import UltimateProtectorMiddleware
+    from ultimateprotector_agent.asgi import UltimateProtectorMiddleware
+"""
+
+from ultimateprotector_agent.asgi import UltimateProtectorMiddleware
+from ultimateprotector_agent.auto import config_from_env, wrap_asgi_app
+
+__all__ = ["UltimateProtectorMiddleware", "config_from_env", "wrap_asgi_app"]

relintio_agent-0.9.5/src/auraprotector_agent/asgi.py

@@ -0,0 +1,3 @@
+"""Re-export for compatibility."""
+
+from ultimateprotector_agent.asgi import *  # noqa: F403

relintio_agent-0.9.5/src/auraprotector_agent/auto.py

@@ -0,0 +1,3 @@
+"""Re-export for compatibility."""
+
+from ultimateprotector_agent.auto import *  # noqa: F403

relintio_agent-0.9.5/src/relintio_agent.egg-info/PKG-INFO

@@ -0,0 +1,144 @@
+Metadata-Version: 2.4
+Name: relintio-agent
+Version: 0.9.5
+Summary: RelintioAgent in-process agent for Python ASGI runtimes.
+License-Expression: LicenseRef-Proprietary
+Project-URL: Homepage, https://github.com/relintio/Relintio
+Project-URL: Repository, https://github.com/relintio/Relintio
+Project-URL: Issues, https://github.com/relintio/Relintio/issues
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: httpx>=0.26
+Requires-Dist: cryptography>=42
+Dynamic: license-file
+
+# relintio-agent (Python)
+
+> **Note on Features & Quotas**: Advanced features (like Bot Challenge and Custom Shield Pages) are tied to your subscription plan. If you exceed your monthly API quota, the agent will operate in a degraded mode (basic protection) before ultimately failing-open to prevent locking you out of your own site. All configuration rules are centrally managed via the dashboard.
+
+Python in-process agent for ASGI runtimes (FastAPI/Starlette/etc).
+
+## Install
+
+```bash
+pip install relintio-agent
+```
+
+## FastAPI usage
+
+```py
+from fastapi import FastAPI
+from relintio_agent.asgi import UltimateProtectorMiddleware
+
+app = FastAPI()
+
+app.add_middleware(
+    UltimateProtectorMiddleware,
+    license_key="UP_LIVE_...",
+    api_url="https://relintio.com/api",
+)
+
+```
+
+## Zero-code-ish usage (env wrapper)
+
+If you can change *how* the app is created (but don't want to paste config into code),
+wrap the ASGI app using env vars:
+
+```py
+import os
+from fastapi import FastAPI
+from relintio_agent import wrap_asgi_app
+
+app = wrap_asgi_app(FastAPI())
+
+# env:
+# UP_LICENSE_KEY=UP_LIVE_...
+# UP_API_URL=https://relintio.com/api
+```
+
+### Optional: sitecustomize bootstrap
+
+The platform can generate a `sitecustomize.py` helper inside the **Python auto bundle**.
+If that file is on `PYTHONPATH`, Python auto-imports it on startup.
+Set `UP_ASGI_APP="module:app"` and it will best-effort wrap that object automatically (fail-open).
+
+## Risk Scoring Engine (v0.9.3)
+
+Every request is evaluated using an **additive 0-100 signal-based score**. Signals include:
+
+| Signal | Weight | Description |
+|---|---|---|
+| Empty User-Agent | +50 | No UA header sent |
+| Short User-Agent | +25 | UA < 20 characters |
+| No Accept-Language | +20 | Missing browser locale header |
+| Generic Accept | +15 | Wildcard `*/*` only |
+| Connection: close | +10 | Non-persistent connection |
+| POST without Referer | +15 | Form submission without origin |
+| Rate burst | +35 | Token-bucket exhaustion |
+
+### Response Tiers
+
+| Tier | Score Range | Behavior |
+|---|---|---|
+| **ALLOW** | 0–39 | Request proceeds normally |
+| **SLOW** | 40–59 | 2-second `asyncio.sleep` to exhaust scanners |
+| **CHALLENGE** | 60–74 | Browser verification challenge |
+| **DECOY** | 75–84 | Serves fake maintenance page |
+| **BLOCK** | 85–100 | Hard block with configured response |
+
+### Token-Bucket Rate Limiter
+
+Default: **8 tokens/sec**, burst capacity of **24**. Route-aware multipliers give extra capacity to static assets. Memory-safe with 5-minute eviction via `asyncio`-compatible dict.
+
+## Notes
+
+- PyPI distribution name: `relintio-agent`
+- Import path: `relintio_agent` (recommended)
+- Legacy import path still supported: `ultimateprotector_agent`
+
+
+## Options
+
+- `license_key` (required)
+- `api_url` (required) e.g. `https://relintio.com/api`
+- `sync_interval_seconds` (default: `60`)
+- `allow_sample_rate` (default: `0.01`)
+- `only_paths`: list[str] exact (`/checkout`) or prefix (`/product/*`)
+- `except_paths`: list[str]
+- `only_regex`: str (Python regex)
+
+## Geo Enrichment
+
+When CDN geo headers (`CF-IPCountry`, etc.) are absent, the agent calls the platform's `/api/agent/geo-lookup` endpoint.
+The server resolves the country using **local MaxMind GeoLite2 databases** — zero external API calls, zero cost, microsecond latency.
+Results are cached in-memory (24h TTL) to minimize round-trips.
+
+## Changelog
+
+### 0.9.3
+
+- **Import path alignment** - `relintio_agent` is now the documented import path, with `ultimateprotector_agent` kept as a compatibility alias.
+- **Version telemetry alignment** - Runtime telemetry now reports `0.9.3`, matching the PyPI package version and release tag.
+
+### 0.5.0
+
+- **Additive risk-scoring engine** — 0-100 signal-based scoring with 7 weighted signals.
+- **5-tier graduated response** — ALLOW, SLOW (`asyncio.sleep(2.0)`), CHALLENGE, DECOY, BLOCK.
+- **Token-bucket rate limiter** — Replaces fixed-window counter. 8 tokens/sec, 24 burst, route-aware multipliers.
+- **`risk_score` telemetry** — Agent-calculated score forwarded to server in log payload.
+
+### 0.3.0
+
+- **Geo enrichment architecture hardened** — The server-side `/api/agent/geo-lookup` endpoint now performs local MaxMind GeoLite2 lookups instead of proxying to `ipinfo.io`. Agent behaviour is unchanged; the improvement is server-side.
+
+### 0.2.0
+
+- **HMAC payload verification** — Rules payloads are now authenticated with HMAC-SHA256 before decryption. Requires platform ≥ 2026-04.
+- **`X-Agent-Version` header** — Sent on every `/verify` request for dashboard version tracking.
+- **`outdated` status handling** — If the cloud responds with `outdated`, the agent fails open and stops protecting until updated.
+
+### 0.1.1
+
+- Initial stable release with AES-256-CBC encrypted rules sync.

relintio_agent-0.9.5/src/relintio_agent.egg-info/SOURCES.txt

@@ -0,0 +1,18 @@
+LICENSE
+README.md
+pyproject.toml
+src/auraprotector_agent/__init__.py
+src/auraprotector_agent/asgi.py
+src/auraprotector_agent/auto.py
+src/relintio_agent.egg-info/PKG-INFO
+src/relintio_agent.egg-info/SOURCES.txt
+src/relintio_agent.egg-info/dependency_links.txt
+src/relintio_agent.egg-info/requires.txt
+src/relintio_agent.egg-info/top_level.txt
+src/ultimateprotector_agent/__init__.py
+src/ultimateprotector_agent/asgi.py
+src/ultimateprotector_agent/auto.py
+src/ultimateprotector_agent/client.py
+src/ultimateprotector_agent/obsidian.py
+src/ultimateprotector_agent/sitecustomize.py
+src/ultimateprotector_agent/utils.py

relintio_agent-0.9.5/src/relintio_agent.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

relintio_agent-0.9.5/src/relintio_agent.egg-info/requires.txt

@@ -0,0 +1,2 @@
+httpx>=0.26
+cryptography>=42

relintio_agent-0.9.5/src/relintio_agent.egg-info/top_level.txt

@@ -0,0 +1,2 @@
+auraprotector_agent
+ultimateprotector_agent

relintio_agent-0.9.5/src/ultimateprotector_agent/__init__.py

@@ -0,0 +1,4 @@
+from .asgi import UltimateProtectorMiddleware
+from .auto import config_from_env, wrap_asgi_app
+
+__all__ = ["UltimateProtectorMiddleware", "config_from_env", "wrap_asgi_app"]