signedapproval 0.1.0__tar.gz

signedapproval-0.1.0/.gitignore

@@ -0,0 +1,39 @@
+# deps
+/node_modules
+
+# Next.js
+/.next/
+/out/
+
+# production build
+/build
+
+# env files — never commit
+.env
+.env.local
+.env.production.local
+.env.development.local
+.env.claude
+
+# Vercel
+.vercel
+
+# TypeScript
+*.tsbuildinfo
+next-env.d.ts
+
+# OS
+.DS_Store
+*.pem
+
+# Debug logs
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# iOS secrets (contains Supabase anon key)
+ios/Secrets.xcconfig
+.env*.local
+
+# claude code
+CLAUDE.md

signedapproval-0.1.0/PKG-INFO

@@ -0,0 +1,18 @@
+Metadata-Version: 2.4
+Name: signedapproval
+Version: 0.1.0
+Summary: Official Python SDK for SignedApproval — cryptographic human-in-the-loop approvals
+Project-URL: Homepage, https://signedapproval.net
+Project-URL: Repository, https://github.com/AlexFloyd13/signedapproval
+Author: Floyd Media LLC
+License: MIT
+Keywords: approval,ed25519,human-in-the-loop,passkey,signedapproval
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Requires-Python: >=3.9

signedapproval-0.1.0/pyproject.toml

@@ -0,0 +1,26 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "signedapproval"
+version = "0.1.0"
+description = "Official Python SDK for SignedApproval — cryptographic human-in-the-loop approvals"
+requires-python = ">=3.9"
+license = { text = "MIT" }
+authors = [{ name = "Floyd Media LLC" }]
+keywords = ["signedapproval", "human-in-the-loop", "approval", "passkey", "ed25519"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.9",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+]
+
+[project.urls]
+Homepage = "https://signedapproval.net"
+Repository = "https://github.com/AlexFloyd13/signedapproval"

signedapproval-0.1.0/signedapproval/__init__.py

@@ -0,0 +1,16 @@
+"""
+SignedApproval Python SDK
+~~~~~~~~~~~~~~~~~~~~~~~~~
+
+from signedapproval import SignedApproval
+
+sa = SignedApproval("sa_live_...")
+req = sa.request_approval(action="Deploy to production")
+decision = sa.wait_for_decision(req["request_id"])
+proof = sa.verify(req["request_id"])  # verify the signed decision
+"""
+
+from .client import SignedApproval, SignedApprovalError
+
+__all__ = ["SignedApproval", "SignedApprovalError"]
+__version__ = "0.1.0"

signedapproval-0.1.0/signedapproval/client.py

@@ -0,0 +1,147 @@
+"""SignedApproval Python client."""
+
+from __future__ import annotations
+
+import time
+from typing import Any, Optional
+import urllib.error
+import urllib.request
+import json
+
+
+class SignedApprovalError(Exception):
+    def __init__(self, message: str, status_code: Optional[int] = None) -> None:
+        super().__init__(message)
+        self.status_code = status_code
+
+
+class SignedApproval:
+    """
+    Client for the SignedApproval API.
+
+    Usage::
+
+        sa = SignedApproval("sa_live_...")
+        req = sa.request_approval(action="Deploy main to production")
+        decision = sa.wait_for_decision(req["request_id"], timeout=3600)
+        proof = sa.verify(decision["decision"]["signature"])
+    """
+
+    def __init__(
+        self,
+        api_key: str,
+        base_url: str = "https://signedapproval.net",
+    ) -> None:
+        if not api_key.startswith("sa_live_"):
+            raise ValueError("API key must start with sa_live_")
+        self._api_key = api_key
+        self._base_url = base_url.rstrip("/")
+
+    # ─── Requests ─────────────────────────────────────────────────────────────
+
+    def request_approval(
+        self,
+        action: str,
+        context: Optional[dict[str, Any]] = None,
+        callback_url: Optional[str] = None,
+        require_passkey: bool = False,
+        require_totp: bool = False,
+        ttl_seconds: int = 3600,
+    ) -> dict[str, Any]:
+        """Request a human approval. Returns immediately with request_id."""
+        body: dict[str, Any] = {
+            "action": action,
+            "require_passkey": require_passkey,
+            "require_totp": require_totp,
+            "ttl_seconds": ttl_seconds,
+        }
+        if context is not None:
+            body["context"] = context
+        if callback_url is not None:
+            body["callback_url"] = callback_url
+        return self._post("/api/v1/approvals/request", body)
+
+    def get_status(self, request_id: str) -> dict[str, Any]:
+        """Poll the status of an approval request."""
+        return self._get(f"/api/v1/approvals/{request_id}")
+
+    def wait_for_decision(
+        self,
+        request_id: str,
+        timeout: float = 3600,
+        poll_interval: float = 5.0,
+    ) -> dict[str, Any]:
+        """
+        Wait for a human decision, polling every poll_interval seconds.
+        Raises SignedApprovalError on timeout or expiry.
+        """
+        deadline = time.monotonic() + timeout
+
+        while time.monotonic() < deadline:
+            status = self.get_status(request_id)
+            if status["status"] != "pending":
+                return status
+            expires_at = status.get("expires_at", "")
+            if expires_at:
+                from datetime import datetime, timezone
+                expiry = datetime.fromisoformat(expires_at.replace("Z", "+00:00"))
+                if expiry < datetime.now(timezone.utc):
+                    raise SignedApprovalError(
+                        f"Request {request_id} has expired", status_code=410
+                    )
+            time.sleep(min(poll_interval, max(0, deadline - time.monotonic())))
+
+        raise SignedApprovalError(
+            f"Timed out waiting for decision on request {request_id}", status_code=408
+        )
+
+    # ─── Verification ──────────────────────────────────────────────────────────
+
+    def verify(self, decision_id: str) -> dict[str, Any]:
+        """
+        Verify a signed approval decision.
+        Public endpoint — no API key required.
+        Returns { "valid": True } when the Ed25519 signature is valid.
+        """
+        return self._get_public(f"/api/v1/approvals/{decision_id}/verify")
+
+    # ─── Private helpers ───────────────────────────────────────────────────────
+
+    def _post(self, path: str, body: dict[str, Any]) -> dict[str, Any]:
+        data = json.dumps(body).encode()
+        req = urllib.request.Request(
+            f"{self._base_url}{path}",
+            data=data,
+            headers={
+                "Content-Type": "application/json",
+                "Authorization": f"Bearer {self._api_key}",
+            },
+            method="POST",
+        )
+        return self._send(req)
+
+    def _get(self, path: str) -> dict[str, Any]:
+        req = urllib.request.Request(
+            f"{self._base_url}{path}",
+            headers={"Authorization": f"Bearer {self._api_key}"},
+        )
+        return self._send(req)
+
+    def _get_public(self, path: str) -> dict[str, Any]:
+        req = urllib.request.Request(f"{self._base_url}{path}")
+        return self._send(req)
+
+    def _send(self, req: urllib.request.Request) -> dict[str, Any]:
+        try:
+            with urllib.request.urlopen(req, timeout=30) as resp:
+                return json.loads(resp.read())
+        except urllib.error.HTTPError as e:
+            body = {}
+            try:
+                body = json.loads(e.read())
+            except Exception:
+                pass
+            message = body.get("error") or f"HTTP {e.code}"
+            raise SignedApprovalError(message, status_code=e.code) from e
+        except urllib.error.URLError as e:
+            raise SignedApprovalError(str(e)) from e