sf-smartdelegate 0.3.0__tar.gz

sf_smartdelegate-0.3.0/AUTHORS.md

@@ -0,0 +1,3 @@
+# Authors
+
+Built by SmartTasks Lab.

sf_smartdelegate-0.3.0/CHANGELOG.md

@@ -0,0 +1,50 @@
+# Changelog
+
+## Unreleased
+
+### Security
+- Install instructions no longer name packages the maintainers have not
+  published. Until the first release, install from a clone (README, "Install").
+- New `SECURITY.md` (private vulnerability reporting), `names.json` (the only
+  official package names) and a CI check that fails when a document names any
+  other package.
+- Releases are built and published only by `.github/workflows/release.yml`
+  through PyPI trusted publishing, with provenance attestations.
+
+### Changed
+- **Renamed (breaking), `sf-` = Smart Family:** repository `SmartTasksOrg/sf-smartdelegate`, PyPI package `sf-smartdelegate`, command `sf-smartdelegate`, import package `sf_smartdelegate`, MCP server `io.github.smarttasksorg/sf-smartdelegate`. The unprefixed names are not used any more, so nobody can be sent to a look-alike.
+- New `SECURITY.md`, `CONTRIBUTING.md`, `CODE_OF_CONDUCT.md`, `MAINTAINERS.md`; README "Install" and "Status" sections.
+- `pyproject.toml`: SPDX licence, `NOTICE` in the wheel, "3 - Alpha" classifier, Source/Issues/Security/Changelog URLs.
+- CI (`.github/workflows/ci.yml`): tests, scenario harness, skills check and the install-line check on every push and pull request.
+- The release workflow publishes the Python package to PyPI by trusted publishing. It no longer builds the other artifacts of `make dist`; build those from a clone (`docs/BUILD.md`).
+- npm (`sf-smartdelegate`, `sf-smartdelegate-client`) and Composer (`smarttasksorg/sf-smartdelegate`) package names and the Go module path follow the `sf-` names; none is published.
+- The GitHub Action pins `actions/setup-python` by commit and installs `sf-smartdelegate` by default.
+- Scenario 10 of the harness issues its token for the company tenant `kestrel`, as the example company says, so the cross-tenant read is refused for the reason the scenario names (`tenant_mismatch`).
+- The nightly soak workflow is no longer in this repository; it used third-party actions that the organisation does not allow.
+- Leftover files of the private simulation harness and `MARKETING.md` are no longer in this repository.
+
+## 0.3.0 — SmartDelegate: roles, bridges, six engines
+- **Renamed** from the working name AgentIAM to SmartDelegate and laid out as a Smart* family repository. Token audience, default issuer, environment variables (`SMARTDELEGATE_*`), Java package (`dev.smartdelegate`) and C ABI symbols changed with the name; 0.2 tokens are not accepted.
+- **Role-scoped task tokens** ([spec/ROLES.md](spec/ROLES.md)): `roles.json` in the bundle; `issue_token` with `role`; the human must hold the role, the token cannot exceed its ceiling, sub-agents inherit it; `context.iam.role` in policy; `require_role`.
+- **Live membership**: `groups` at issuance and `idp.groups_claim` for OIDC ID tokens replace the stored membership of that user for that token.
+- **Offboarding**: `revoke {"user"}` ends every token already issued for a human.
+- **Rule ids**: every decision carries `rule`, every error `error.rule`, as `DELEGATE-*`.
+- **IAM bridges** (`smartdelegate.bridges`, `smartdelegate bridge ...`): directory sync from SCIM, Okta, Entra ID, Keycloak, Google and AWS Identity Center; claim mapping; role ceilings from AWS, GCP and Azure permissions; AWS session policies, GCP access boundaries, Azure On-Behalf-Of scopes. Tested against fakes only.
+- **New native engines**: Node, Go and PHP, each with a CLI and REST daemon. Java and Rust brought to 0.3.
+- **Cross-port matrix** (`ports/conformance/matrix.py`) and `ports/conformance/run.sh`.
+- **Strictness** found by running the ports against each other and fixed in the reference: audit lines split at `\n` only, strict base64url, full-match type names, `containsAll`/`containsAny` operand checks, policy JSON shapes, non-UTF-8 files, signing-key creation race.
+- **Example company** ([examples/company/](examples/company/)): a bundle for a seven-unit company (35 people, 18 roles, 115 policies, 63 policy tests), used by the scenario harness and the live suites.
+- **Scenario harness** ([harness/](harness/)): six business scenarios of that company with scripted agents, in process or against a daemon by URL, with five checks and an HTML report.
+- **Simulation testing.** A larger harness, not part of this repository, ran 16 scenarios with many simulated agents (scripted and deliberately misbehaving) against every engine and compared the answers with an independent model of the company's rules. It found three engine issues, fixed in every engine: ancestor budgets were not enforced by a verify-only engine with its own state (now carried in the token's `lim` claim), a user cut-off could move back, and an approval was not bound to resource attributes.
+- **Bootstrap, build and CI**: `bootstrap.sh` / `bootstrap.ps1` (fresh clone to built and checked), `scripts/doctor.py`, `make` / `make.ps1` targets, `make dist` (wheel, jar, npm tarballs, Go binaries for four platforms, PHP archive and phar, Rust binary, spec tarball, checksums), Docker files and a compose topology (not run), GitHub workflows for Linux, macOS and Windows (not run). [docs/BUILD.md](docs/BUILD.md).
+- **Live suites** ([live/](live/)): a real Keycloak, a real PostgreSQL-backed upstream behind both proxy implementations, a kernel network-namespace boundary test, load and soak. They led to: `azp` check on ID tokens, ID tokens from before a user's revoke refused, `reload` re-reading the provider's keys, nested group claims, strict query parsing and record lookups in the proxies (`attrs_from_record`), strict validation of proxy configuration, request-framing rules, SqlGuard masking inside JSON columns, and in the Rust port a new HTTP server, no head-of-line blocking and `TCP_NODELAY`.
+- **Java**: command line and REST daemon; Java is now in the cross-port matrix and the load suite.
+- **Breaking for proxy users**: routes and tools files are validated strictly at start. Constants in `id` and `spend` are written `{"literal": ...}`; attributes taken from the request must be declared under `attrs_from_request`.
+- **Family surface**: `smartdelegate.core` (`delegate`, `narrow`, `check`), `smartdelegate.models`, `smartdelegate --demo`, integrations, playground.
+- Conformance: 95 policy-evaluation cases, 78 engine cases (327 steps) in 12 files.
+
+## 0.2.0 — Python reference, Java port (as AgentIAM)
+- Python became the reference; Java native port; Rust moved under `ports/`; policies compiled to Cedar JSON.
+
+## 0.1.0 — first build (as AgentIAM)
+- Rust core: capability tokens, delegation, Cedar policy, field masking, budgets, approval, audit.

sf_smartdelegate-0.3.0/LICENSE

@@ -0,0 +1,176 @@
+                              Apache License
+                        Version 2.0, January 2004
+                     http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+   "License" shall mean the terms and conditions for use, reproduction,
+   and distribution as defined by Sections 1 through 9 of this document.
+
+   "Licensor" shall mean the copyright owner or entity authorized by
+   the copyright owner that is granting the License.
+
+   "Legal Entity" shall mean the union of the acting entity and all
+   other entities that control, are controlled by, or are under common
+   control with that entity. For the purposes of this definition,
+   "control" means (i) the power, direct or indirect, to cause the
+   direction or management of such entity, whether by contract or
+   otherwise, or (ii) ownership of fifty percent (50%) or more of the
+   outstanding shares, or (iii) beneficial ownership of such entity.
+
+   "You" (or "Your") shall mean an individual or Legal Entity
+   exercising permissions granted by this License.
+
+   "Source" form shall mean the preferred form for making modifications,
+   including but not limited to software source code, documentation
+   source, and configuration files.
+
+   "Object" form shall mean any form resulting from mechanical
+   transformation or translation of a Source form, including but
+   not limited to compiled object code, generated documentation,
+   and conversions to other media types.
+
+   "Work" shall mean the work of authorship, whether in Source or
+   Object form, made available under the License, as indicated by a
+   copyright notice that is included in or attached to the work
+   (an example is provided in the Appendix below).
+
+   "Derivative Works" shall mean any work, whether in Source or Object
+   form, that is based on (or derived from) the Work and for which the
+   editorial revisions, annotations, elaborations, or other modifications
+   represent, as a whole, an original work of authorship. For the purposes
+   of this License, Derivative Works shall not include works that remain
+   separable from, or merely link (or bind by name) to the interfaces of,
+   the Work and Derivative Works thereof.
+
+   "Contribution" shall mean any work of authorship, including
+   the original version of the Work and any modifications or additions
+   to that Work or Derivative Works thereof, that is intentionally
+   submitted to Licensor for inclusion in the Work by the copyright owner
+   or by an individual or Legal Entity authorized to submit on behalf of
+   the copyright owner. For the purposes of this definition, "submitted"
+   means any form of electronic, verbal, or written communication sent
+   to the Licensor or its representatives, including but not limited to
+   communication on electronic mailing lists, source code control systems,
+   and issue tracking systems that are managed by, or on behalf of, the
+   Licensor for the purpose of discussing and improving the Work, but
+   excluding communication that is conspicuously marked or otherwise
+   designated in writing by the copyright owner as "Not a Contribution."
+
+   "Contributor" shall mean Licensor and any individual or Legal Entity
+   on behalf of whom a Contribution has been received by Licensor and
+   subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   copyright license to reproduce, prepare Derivative Works of,
+   publicly display, publicly perform, sublicense, and distribute the
+   Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   (except as stated in this section) patent license to make, have made,
+   use, offer to sell, sell, import, and otherwise transfer the Work,
+   where such license applies only to those patent claims licensable
+   by such Contributor that are necessarily infringed by their
+   Contribution(s) alone or by combination of their Contribution(s)
+   with the Work to which such Contribution(s) was submitted. If You
+   institute patent litigation against any entity (including a
+   cross-claim or counterclaim in a lawsuit) alleging that the Work
+   or a Contribution incorporated within the Work constitutes direct
+   or contributory patent infringement, then any patent licenses
+   granted to You under this License for that Work shall terminate
+   as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the
+   Work or Derivative Works thereof in any medium, with or without
+   modifications, and in Source or Object form, provided that You
+   meet the following conditions:
+
+   (a) You must give any other recipients of the Work or
+       Derivative Works a copy of this License; and
+
+   (b) You must cause any modified files to carry prominent notices
+       stating that You changed the files; and
+
+   (c) You must retain, in the Source form of any Derivative Works
+       that You distribute, all copyright, patent, trademark, and
+       attribution notices from the Source form of the Work,
+       excluding those notices that do not pertain to any part of
+       the Derivative Works; and
+
+   (d) If the Work includes a "NOTICE" text file as part of its
+       distribution, then any Derivative Works that You distribute must
+       include a readable copy of the attribution notices contained
+       within such NOTICE file, excluding those notices that do not
+       pertain to any part of the Derivative Works, in at least one
+       of the following places: within a NOTICE text file distributed
+       as part of the Derivative Works; within the Source form or
+       documentation, if provided along with the Derivative Works; or,
+       within a display generated by the Derivative Works, if and
+       wherever such third-party notices normally appear. The contents
+       of the NOTICE file are for informational purposes only and
+       do not modify the License. You may add Your own attribution
+       notices within Derivative Works that You distribute, alongside
+       or as an addendum to the NOTICE text from the Work, provided
+       that such additional attribution notices cannot be construed
+       as modifying the License.
+
+   You may add Your own copyright statement to Your modifications and
+   may provide additional or different license terms and conditions
+   for use, reproduction, or distribution of Your modifications, or
+   for any such Derivative Works as a whole, provided Your use,
+   reproduction, and distribution of the Work otherwise complies with
+   the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise,
+   any Contribution intentionally submitted for inclusion in the Work
+   by You to the Licensor shall be under the terms and conditions of
+   this License, without any additional terms or conditions.
+   Notwithstanding the above, nothing herein shall supersede or modify
+   the terms of any separate license agreement you may have executed
+   with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade
+   names, trademarks, service marks, or product names of the Licensor,
+   except as required for reasonable and customary use in describing the
+   origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or
+   agreed to in writing, Licensor provides the Work (and each
+   Contributor provides its Contributions) on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+   implied, including, without limitation, any warranties or conditions
+   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+   PARTICULAR PURPOSE. You are solely responsible for determining the
+   appropriateness of using or redistributing the Work and assume any
+   risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory,
+   whether in tort (including negligence), contract, or otherwise,
+   unless required by applicable law (such as deliberate and grossly
+   negligent acts) or agreed to in writing, shall any Contributor be
+   liable to You for damages, including any direct, indirect, special,
+   incidental, or consequential damages of any character arising as a
+   result of this License or out of the use or inability to use the
+   Work (including but not limited to damages for loss of goodwill,
+   work stoppage, computer failure or malfunction, or any and all
+   other commercial damages or losses), even if such Contributor
+   has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing
+   the Work or Derivative Works thereof, You may choose to offer,
+   and charge a fee for, acceptance of support, warranty, indemnity,
+   or other liability obligations and/or rights consistent with this
+   License. However, in accepting such obligations, You may act only
+   on Your own behalf and on Your sole responsibility, not on behalf
+   of any other Contributor, and only if You agree to indemnify,
+   defend, and hold each Contributor harmless for any liability
+   incurred by, or claims asserted against, such Contributor by reason
+   of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS

sf_smartdelegate-0.3.0/MANIFEST.in

@@ -0,0 +1,3 @@
+include README.md LICENSE MANIFESTO.md CHANGELOG.md AUTHORS.md
+recursive-include demo *
+recursive-include src/sf_smartdelegate/example_bundle *

sf_smartdelegate-0.3.0/MANIFESTO.md

@@ -0,0 +1,20 @@
+# The SmartDelegate Code
+
+*In the voice of The Pangolin Code — bold in the open, disciplined where it counts.*
+
+**I. Close the gap at the moment it bites.**
+SmartDelegate fires when a human hands work to an agent: lend one role, for one task, and nothing else.
+
+**II. Work on clone.**
+A tool that needs setup before it proves itself doesn't spread. Ship the demo.
+
+**III. Same seal, same family.**
+`DELEGATE-*` rules, one mascot, one manifesto. Kin, not clones.
+
+**IV. Conform, then compose.**
+Meet the IAIso §10 · Delegation bar, then stack with every sibling tool and with the IAM you already run.
+
+**V. Bare it all — except the secrets.**
+Radical in the open (smartdelegate/), locked where it counts (private/). Say what was tested and what was not.
+
+*SmartDelegate is part of the Smart* family. https://iaiso.org · https://smarttasks.cloud*

sf_smartdelegate-0.3.0/NOTICE

@@ -0,0 +1,23 @@
+SmartDelegate
+Copyright 2026 SmartTasks Lab
+
+Licensed under the Apache License, Version 2.0 (see LICENSE).
+
+Names and affiliation
+---------------------
+
+SmartDelegate is published by SmartTasksOrg. The only package names it is
+published under are those marked "registered": true in names.json.
+
+Cedar is a trademark of its owner.
+LangChain is a trademark of its owner.
+LlamaIndex is a trademark of its owner.
+Okta is a trademark of its owner.
+Microsoft Entra ID is a trademark of its owner.
+Keycloak is a trademark of its owner.
+Google Cloud is a trademark of its owner.
+AWS is a trademark of its owner.
+Microsoft Azure is a trademark of its owner.
+All other names are the property of their respective owners. Their use here
+only says what the software reads, evaluates or connects to; it does not
+imply affiliation, sponsorship or endorsement.