stackgen-sdk 0.3.0__tar.gz → 0.4.0rc4__tar.gz

{stackgen_sdk-0.3.0 → stackgen_sdk-0.4.0rc4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: stackgen-sdk
-Version: 0.3.0
+Version: 0.4.0rc4
 Summary: StackGen SDK — Aiden, SRE, and Vault from one client
 Project-URL: Homepage, https://appcd-dev.github.io/stackgen-sdk/
 Project-URL: Documentation, https://appcd-dev.github.io/stackgen-sdk/

{stackgen_sdk-0.3.0 → stackgen_sdk-0.4.0rc4}/src/stackgen/__init__.py

@@ -18,6 +18,7 @@ from __future__ import annotations
 from stackgen.client import StackgenClient
 from stackgen.config import StackgenConfig
 from stackgen.errors import HttpError, NotAllowlistedError, StackgenError, TimeoutError
+from stackgen.aiden.resources import PolicyConflictRule
 from stackgen.aiden.steer import is_steer_response
 from stackgen.aiden.workflow_builder import (
     AgentDefinition,
@@ -34,6 +35,7 @@ __all__ = [
     "AgentDefinition",
     "HttpError",
     "NotAllowlistedError",
+    "PolicyConflictRule",
     "PublishWorkflowResult",
     "StackgenClient",
     "StackgenConfig",

{stackgen_sdk-0.3.0 → stackgen_sdk-0.4.0rc4}/src/stackgen/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '0.3.0'
-__version_tuple__ = version_tuple = (0, 3, 0)
+__version__ = version = '0.4.0rc4'
+__version_tuple__ = version_tuple = (0, 4, 0, 'rc4')
 
 __commit_id__ = commit_id = None

{stackgen_sdk-0.3.0 → stackgen_sdk-0.4.0rc4}/src/stackgen/aiden/__init__.py

@@ -2,6 +2,7 @@
 
 from stackgen.aiden.ask import AskArtifactResult
 from stackgen.aiden.namespace import AidenNamespace
+from stackgen.aiden.resources import PolicyConflictRule
 from stackgen.aiden.run_status import ExecutionStatus, RunPhase, RunStatus
 from stackgen.aiden.steer import is_steer_response
 from stackgen.aiden.webhook import WebhookReportResult
@@ -21,6 +22,7 @@ __all__ = [
     "AidenNamespace",
     "AskArtifactResult",
     "ExecutionStatus",
+    "PolicyConflictRule",
     "PublishWorkflowResult",
     "RunPhase",
     "RunStatus",

{stackgen_sdk-0.3.0 → stackgen_sdk-0.4.0rc4}/src/stackgen/aiden/namespace.py

@@ -7,7 +7,7 @@ from typing import Any
 
 from stackgen.aiden.ask import AskArtifactJourney, AskArtifactResult
 from stackgen.aiden.models import ModelRegistry
-from stackgen.aiden.resources import AidenResources
+from stackgen.aiden.resources import AidenResources, PolicyConflictRule
 from stackgen.aiden.run_status import RunStatus, build_run_status, require_run_ids
 from stackgen.aiden.subscribe import ExecutionSubscribe, SubscribeCompleteResult
 from stackgen.aiden.webhook import WebhookReportJourney, WebhookReportResult
@@ -313,8 +313,29 @@ class AidenNamespace:
     def create_policy(self, body: dict[str, Any]) -> dict[str, Any]:
         return self._resources.create_policy(body)
 
-    def attach_policy(self, agent_name: str, body: dict[str, Any]) -> dict[str, Any]:
-        return self._resources.attach_policy(agent_name, body)
+    def attach_policy(
+        self,
+        agent_name: str,
+        body: dict[str, Any] | None = None,
+        *,
+        policy_id: str | None = None,
+        priority: int | None = None,
+        enabled: bool | None = None,
+        shadow: bool | None = None,
+    ) -> dict[str, Any]:
+        """Attach a Rego policy to an agent.
+
+        Prefer ``policy_id=...`` and optional ``shadow=True`` (log only, do not
+        block). Create alone does not govern the agent until you attach.
+        """
+        return self._resources.attach_policy(
+            agent_name,
+            body,
+            policy_id=policy_id,
+            priority=priority,
+            enabled=enabled,
+            shadow=shadow,
+        )
 
     def detach_policy(self, agent_name: str, policy_id: str) -> dict[str, Any]:
         return self._resources.detach_policy(agent_name, policy_id)
@@ -325,6 +346,43 @@ class AidenNamespace:
     def evaluate_policy(self, body: dict[str, Any]) -> dict[str, Any]:
         return self._resources.evaluate_policy(body)
 
+    def break_glass(
+        self,
+        agent_name: str,
+        *,
+        reason: str,
+        duration_minutes: int,
+    ) -> dict[str, Any]:
+        """Temporarily let an agent run without policy enforcement during an outage.
+
+        Pass ``reason`` and ``duration_minutes`` (1–480) only. Aiden records who
+        opened the glass from your API token (``activated_by`` on the response).
+        Call :meth:`end_break_glass` in a ``finally``.
+        """
+        return self._resources.break_glass(
+            agent_name, reason=reason, duration_minutes=duration_minutes
+        )
+
+    def get_break_glass(self, agent_name: str) -> dict[str, Any]:
+        """Read whether break-glass is active (who from the token, why, expiry)."""
+        return self._resources.get_break_glass(agent_name)
+
+    def end_break_glass(self, agent_name: str) -> dict[str, Any]:
+        """Turn policy enforcement back on after :meth:`break_glass`."""
+        return self._resources.end_break_glass(agent_name)
+
+    def when_policies_disagree(
+        self,
+        agent_name: str,
+        rule: PolicyConflictRule,
+    ) -> dict[str, Any]:
+        """Choose the tie-break when several attached policies disagree.
+
+        Prefer ``any_deny_blocks`` for production. Use ``any_allow_wins`` only
+        when a permissive policy should beat a deny.
+        """
+        return self._resources.when_policies_disagree(agent_name, rule)
+
     def list_audit_events(self, **params: Any) -> list[dict[str, Any]]:
         return self._resources.list_audit_events(**params)
 

{stackgen_sdk-0.3.0 → stackgen_sdk-0.4.0rc4}/src/stackgen/aiden/resources.py

@@ -4,12 +4,24 @@ from __future__ import annotations
 
 import json
 import urllib.parse
-from typing import Any
+from typing import Any, Literal
 
 from stackgen import _http
 from stackgen.config import StackgenConfig
 from stackgen.errors import StackgenError
 
+PolicyConflictRule = Literal[
+    "any_deny_blocks",
+    "any_allow_wins",
+    "first_matching_policy",
+]
+
+_CONFLICT_RULE_TO_WIRE: dict[str, str] = {
+    "any_deny_blocks": "deny_overrides",
+    "any_allow_wins": "permit_overrides",
+    "first_matching_policy": "first_applicable",
+}
+
 
 def _with_org(config: StackgenConfig, params: dict[str, Any] | None = None) -> dict[str, Any]:
     query = dict(params or {})
@@ -134,9 +146,38 @@ class AidenResources:
     def create_policy(self, body: dict[str, Any]) -> dict[str, Any]:
         return _as_object(self._send("/policies", "POST", body), "createPolicy")
 
-    def attach_policy(self, agent_name: str, body: dict[str, Any]) -> dict[str, Any]:
+    def attach_policy(
+        self,
+        agent_name: str,
+        body: dict[str, Any] | None = None,
+        *,
+        policy_id: str | None = None,
+        priority: int | None = None,
+        enabled: bool | None = None,
+        shadow: bool | None = None,
+    ) -> dict[str, Any]:
+        """Attach a Rego policy to an agent.
+
+        Prefer keyword args (``policy_id``, optional ``shadow``). ``shadow=True``
+        evaluates and logs without blocking the tool. Pass a raw ``body`` with
+        ``policy_id`` for wire-shaped payloads. Create alone does not govern the
+        agent until you attach.
+        """
+        if policy_id is not None:
+            payload: dict[str, Any] = {"policy_id": policy_id}
+            if priority is not None:
+                payload["priority"] = priority
+            if enabled is not None:
+                payload["enabled"] = enabled
+            if shadow is not None:
+                payload["shadow"] = shadow
+        elif body is not None:
+            payload = body
+        else:
+            raise StackgenError("attach_policy requires policy_id=... or a body dict")
         return _as_object(
-            self._send(f"/agents/{agent_name}/policies", "POST", body), "attachPolicy"
+            self._send(f"/agents/{agent_name}/policies", "POST", payload),
+            "attachPolicy",
         )
 
     def detach_policy(self, agent_name: str, policy_id: str) -> dict[str, Any]:
@@ -151,6 +192,87 @@ class AidenResources:
     def evaluate_policy(self, body: dict[str, Any]) -> dict[str, Any]:
         return _as_object(self._send("/policies/evaluate", "POST", body), "evaluatePolicy")
 
+    def break_glass(
+        self,
+        agent_name: str,
+        *,
+        reason: str,
+        duration_minutes: int,
+    ) -> dict[str, Any]:
+        """Temporarily let an agent run without policy enforcement during an outage.
+
+        Pass a clear ``reason`` and ``duration_minutes`` (1–480) only. Aiden
+        records who opened the glass from your API token on the response as
+        ``activated_by`` (you cannot set that field). Call
+        :meth:`end_break_glass` in a ``finally`` when done. Until then (or until
+        the timer expires), attached policies do not block tools; actions are
+        still audited.
+        """
+        cleaned = (reason or "").strip()
+        if not cleaned:
+            raise StackgenError("break_glass requires a non-empty reason")
+        if not isinstance(duration_minutes, int) or duration_minutes < 1 or duration_minutes > 480:
+            raise StackgenError("break_glass duration_minutes must be between 1 and 480")
+        return _as_object(
+            self._send(
+                f"/agents/{agent_name}/break-glass",
+                "POST",
+                {"reason": cleaned, "duration_minutes": duration_minutes},
+            ),
+            "breakGlass",
+        )
+
+    def get_break_glass(self, agent_name: str) -> dict[str, Any]:
+        """Read whether break-glass is active for an agent.
+
+        Use after :meth:`break_glass` to confirm the bypass. The response includes
+        ``activated_by`` (caller identity from the API token that opened the
+        glass), ``reason``, and expiry.
+        """
+        return _as_object(
+            self._get(f"/agents/{agent_name}/break-glass"),
+            "getBreakGlass",
+        )
+
+    def end_break_glass(self, agent_name: str) -> dict[str, Any]:
+        """Turn policy enforcement back on after an outage bypass.
+
+        Call this in a ``finally`` once the incident is over. If you skip it,
+        Aiden still restores guardrails when ``duration_minutes`` expires.
+        """
+        data = self._send(f"/agents/{agent_name}/break-glass", "DELETE")
+        if data is None or data == "":
+            return {"ok": True}
+        if isinstance(data, dict):
+            return data
+        return {"ok": True}
+
+    def when_policies_disagree(
+        self,
+        agent_name: str,
+        rule: PolicyConflictRule,
+    ) -> dict[str, Any]:
+        """Choose what happens when several attached policies disagree.
+
+        Prefer ``any_deny_blocks`` for production guardrails: one deny stops the
+        tool. Use ``any_allow_wins`` only when a permissive policy should
+        override a deny. Without this call, Aiden keeps the agent's current rule.
+        """
+        wire = _CONFLICT_RULE_TO_WIRE.get(rule)
+        if not wire:
+            raise StackgenError(
+                "when_policies_disagree unknown rule "
+                f"{rule!r}; use any_deny_blocks, any_allow_wins, or first_matching_policy"
+            )
+        data = self._send(
+            f"/agents/{agent_name}/combining-algorithm",
+            "PUT",
+            {"combining_algorithm": wire},
+        )
+        if isinstance(data, dict):
+            return data
+        return {"combining_algorithm": wire, "rule": rule}
+
     def list_audit_events(self, **params: Any) -> list[dict[str, Any]]:
         return _http.as_list(self._get("/audit/events", params))
 

{stackgen_sdk-0.3.0 → stackgen_sdk-0.4.0rc4}/src/stackgen/generated/.openapi-generator/FILES

@@ -7,6 +7,7 @@ stackgen/generated/api/sre_api.py
 stackgen/generated/api_client.py
 stackgen/generated/api_response.py
 stackgen/generated/configuration.py
+stackgen/generated/docs/ActivateBreakGlassRequest.md
 stackgen/generated/docs/AgentAppMCPBinding.md
 stackgen/generated/docs/AgentHealthCheck.md
 stackgen/generated/docs/AgentHealthResponse.md
@@ -41,12 +42,15 @@ stackgen/generated/docs/AutonomyBudgetConfig.md
 stackgen/generated/docs/AutonomyBudgetSnapshot.md
 stackgen/generated/docs/AutonomyBudgetTier.md
 stackgen/generated/docs/AutonomyBudgetTierReason.md
+stackgen/generated/docs/BreakGlassState.md
 stackgen/generated/docs/CandidateType.md
 stackgen/generated/docs/ChatChannelSelector.md
 stackgen/generated/docs/ChatSubscription.md
 stackgen/generated/docs/ChatSubscriptionListResponse.md
 stackgen/generated/docs/ChatSubscriptionTargetType.md
 stackgen/generated/docs/ChatSubscriptionTriggerType.md
+stackgen/generated/docs/CombiningAlgorithm.md
+stackgen/generated/docs/CombiningAlgorithmRequest.md
 stackgen/generated/docs/ContainerImage.md
 stackgen/generated/docs/CostBand.md
 stackgen/generated/docs/CreateChatSubscriptionRequest.md
@@ -220,6 +224,7 @@ stackgen/generated/docs/WorkflowTrigger.md
 stackgen/generated/docs/WorkflowTriggerType.md
 stackgen/generated/exceptions.py
 stackgen/generated/models/__init__.py
+stackgen/generated/models/activate_break_glass_request.py
 stackgen/generated/models/agent_app_mcp_binding.py
 stackgen/generated/models/agent_health_check.py
 stackgen/generated/models/agent_health_response.py
@@ -253,12 +258,15 @@ stackgen/generated/models/autonomy_budget_config.py
 stackgen/generated/models/autonomy_budget_snapshot.py
 stackgen/generated/models/autonomy_budget_tier.py
 stackgen/generated/models/autonomy_budget_tier_reason.py
+stackgen/generated/models/break_glass_state.py
 stackgen/generated/models/candidate_type.py
 stackgen/generated/models/chat_channel_selector.py
 stackgen/generated/models/chat_subscription.py
 stackgen/generated/models/chat_subscription_list_response.py
 stackgen/generated/models/chat_subscription_target_type.py
 stackgen/generated/models/chat_subscription_trigger_type.py
+stackgen/generated/models/combining_algorithm.py
+stackgen/generated/models/combining_algorithm_request.py
 stackgen/generated/models/container_image.py
 stackgen/generated/models/cost_band.py
 stackgen/generated/models/create_chat_subscription_request.py
@@ -431,6 +439,7 @@ stackgen/generated/models/workflow_trigger.py
 stackgen/generated/models/workflow_trigger_type.py
 stackgen/generated/rest.py
 stackgen/generated/test/__init__.py
+stackgen/generated/test/test_activate_break_glass_request.py
 stackgen/generated/test/test_agent_app_mcp_binding.py
 stackgen/generated/test/test_agent_health_check.py
 stackgen/generated/test/test_agent_health_response.py
@@ -465,12 +474,15 @@ stackgen/generated/test/test_autonomy_budget_config.py
 stackgen/generated/test/test_autonomy_budget_snapshot.py
 stackgen/generated/test/test_autonomy_budget_tier.py
 stackgen/generated/test/test_autonomy_budget_tier_reason.py
+stackgen/generated/test/test_break_glass_state.py
 stackgen/generated/test/test_candidate_type.py
 stackgen/generated/test/test_chat_channel_selector.py
 stackgen/generated/test/test_chat_subscription.py
 stackgen/generated/test/test_chat_subscription_list_response.py
 stackgen/generated/test/test_chat_subscription_target_type.py
 stackgen/generated/test/test_chat_subscription_trigger_type.py
+stackgen/generated/test/test_combining_algorithm.py
+stackgen/generated/test/test_combining_algorithm_request.py
 stackgen/generated/test/test_container_image.py
 stackgen/generated/test/test_cost_band.py
 stackgen/generated/test/test_create_chat_subscription_request.py

{stackgen_sdk-0.3.0 → stackgen_sdk-0.4.0rc4}/src/stackgen/generated/__init__.py

@@ -7,7 +7,7 @@
 
     Allowlisted StackGen API surface for the public SDK. Managed via api-docs/product/allowlists/external.yaml. Aiden←stackgen-guild, SRE←stackgen-sre-app, Vault←infraops/api-specs/stackgen-vault.
 
-    The version of the OpenAPI document: 0.3.0
+    The version of the OpenAPI document: 0.2.0
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
     Do not edit the class manually.
@@ -29,6 +29,7 @@ __all__ = [
     "ApiKeyError",
     "ApiAttributeError",
     "ApiException",
+    "ActivateBreakGlassRequest",
     "AgentAppMCPBinding",
     "AgentHealthCheck",
     "AgentHealthResponse",
@@ -62,12 +63,15 @@ __all__ = [
     "AutonomyBudgetSnapshot",
     "AutonomyBudgetTier",
     "AutonomyBudgetTierReason",
+    "BreakGlassState",
     "CandidateType",
     "ChatChannelSelector",
     "ChatSubscription",
     "ChatSubscriptionListResponse",
     "ChatSubscriptionTargetType",
     "ChatSubscriptionTriggerType",
+    "CombiningAlgorithm",
+    "CombiningAlgorithmRequest",
     "ContainerImage",
     "CostBand",
     "CreateChatSubscriptionRequest",
@@ -256,6 +260,7 @@ from stackgen.generated.exceptions import ApiAttributeError as ApiAttributeError
 from stackgen.generated.exceptions import ApiException as ApiException
 
 # import models into sdk package
+from stackgen.generated.models.activate_break_glass_request import ActivateBreakGlassRequest as ActivateBreakGlassRequest
 from stackgen.generated.models.agent_app_mcp_binding import AgentAppMCPBinding as AgentAppMCPBinding
 from stackgen.generated.models.agent_health_check import AgentHealthCheck as AgentHealthCheck
 from stackgen.generated.models.agent_health_response import AgentHealthResponse as AgentHealthResponse
@@ -289,12 +294,15 @@ from stackgen.generated.models.autonomy_budget_config import AutonomyBudgetConfi
 from stackgen.generated.models.autonomy_budget_snapshot import AutonomyBudgetSnapshot as AutonomyBudgetSnapshot
 from stackgen.generated.models.autonomy_budget_tier import AutonomyBudgetTier as AutonomyBudgetTier
 from stackgen.generated.models.autonomy_budget_tier_reason import AutonomyBudgetTierReason as AutonomyBudgetTierReason
+from stackgen.generated.models.break_glass_state import BreakGlassState as BreakGlassState
 from stackgen.generated.models.candidate_type import CandidateType as CandidateType
 from stackgen.generated.models.chat_channel_selector import ChatChannelSelector as ChatChannelSelector
 from stackgen.generated.models.chat_subscription import ChatSubscription as ChatSubscription
 from stackgen.generated.models.chat_subscription_list_response import ChatSubscriptionListResponse as ChatSubscriptionListResponse
 from stackgen.generated.models.chat_subscription_target_type import ChatSubscriptionTargetType as ChatSubscriptionTargetType
 from stackgen.generated.models.chat_subscription_trigger_type import ChatSubscriptionTriggerType as ChatSubscriptionTriggerType
+from stackgen.generated.models.combining_algorithm import CombiningAlgorithm as CombiningAlgorithm
+from stackgen.generated.models.combining_algorithm_request import CombiningAlgorithmRequest as CombiningAlgorithmRequest
 from stackgen.generated.models.container_image import ContainerImage as ContainerImage
 from stackgen.generated.models.cost_band import CostBand as CostBand
 from stackgen.generated.models.create_chat_subscription_request import CreateChatSubscriptionRequest as CreateChatSubscriptionRequest