synth-ai 0.2.7__tar.gz → 0.2.8__tar.gz

{synth_ai-0.2.7/synth_ai.egg-info → synth_ai-0.2.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: synth-ai
-Version: 0.2.7
+Version: 0.2.8
 Summary: RL as a service SDK - Core AI functionality and tracing
 Author-email: Synth AI <josh@usesynth.ai>
 License-Expression: MIT
@@ -53,7 +53,7 @@ Requires-Dist: asyncpg>=0.30.0
 Requires-Dist: aiohttp>=3.8.0
 Requires-Dist: datasets>=4.0.0
 Requires-Dist: transformers>=4.56.1
-Requires-Dist: modal>=1.1.4
+Requires-Dist: modal>=1.1.0
 Provides-Extra: dev
 Requires-Dist: build>=1.2.2.post1; extra == "dev"
 Requires-Dist: twine>=4.0.0; extra == "dev"
@@ -98,16 +98,17 @@ synth-ai comes with a built-in RL example tailored for training Qwen/Qwen3-0.6B
 Please create an account at [Synth](https://usesynth.ai) and [Modal](https://modal.com) for the Math hello‑world test run. Then run:
 
 ```bash
-uvx synth-ai rl_demo setup
-uvx synth-ai rl_demo deploy
+uvx synth-ai demo
+uvx synth-ai setup
+uvx synth-ai deploy
 uvx synth-ai run
 ```
 
 To walk through kicking off your first RL run, see the [Synth‑AI Documentation](https://docs.usesynth.ai/synth-ai/introduction).
 
-### What `rl_demo setup` does now
+### What `setup` does now
 
-When you run `uvx synth-ai rl_demo setup`, the SDK opens your browser to the Synth dashboard for a one‑time pairing (handshake) with your signed‑in session. The SDK will automatically:
+When you run `uvx synth-ai setup` (or the legacy `uvx synth-ai rl_demo setup`), the SDK opens your browser to the Synth dashboard for a one‑time pairing (handshake) with your signed‑in session. The SDK will automatically:
 
 - Detect your current user and organization
 - Ensure both API keys exist for that user+org
@@ -124,5 +125,6 @@ If your browser isn’t already signed in, sign in when prompted and the pairing
 
 Environment variables:
 
-- `SYNTH_CANONICAL_ORIGIN` (optional): override the dashboard base URL the SDK uses for the handshake (defaults to `http://localhost:3000`).
+- `SYNTH_CANONICAL_ORIGIN` (optional): override the dashboard base URL the SDK uses for the handshake (defaults to `https://www.usesynth.ai/dashboard`).
+- `SYNTH_CANONICAL_DEV` (optional): set to `1`, `true`, `yes`, or `on` to target the local dashboard at `http://localhost:3000`.
 - Keys are stored only in your project’s `.env` file, not exported to your shell.

{synth_ai-0.2.7 → synth_ai-0.2.8}/README.md

@@ -24,16 +24,17 @@ synth-ai comes with a built-in RL example tailored for training Qwen/Qwen3-0.6B
 Please create an account at [Synth](https://usesynth.ai) and [Modal](https://modal.com) for the Math hello‑world test run. Then run:
 
 ```bash
-uvx synth-ai rl_demo setup
-uvx synth-ai rl_demo deploy
+uvx synth-ai demo
+uvx synth-ai setup
+uvx synth-ai deploy
 uvx synth-ai run
 ```
 
 To walk through kicking off your first RL run, see the [Synth‑AI Documentation](https://docs.usesynth.ai/synth-ai/introduction).
 
-### What `rl_demo setup` does now
+### What `setup` does now
 
-When you run `uvx synth-ai rl_demo setup`, the SDK opens your browser to the Synth dashboard for a one‑time pairing (handshake) with your signed‑in session. The SDK will automatically:
+When you run `uvx synth-ai setup` (or the legacy `uvx synth-ai rl_demo setup`), the SDK opens your browser to the Synth dashboard for a one‑time pairing (handshake) with your signed‑in session. The SDK will automatically:
 
 - Detect your current user and organization
 - Ensure both API keys exist for that user+org
@@ -50,5 +51,6 @@ If your browser isn’t already signed in, sign in when prompted and the pairing
 
 Environment variables:
 
-- `SYNTH_CANONICAL_ORIGIN` (optional): override the dashboard base URL the SDK uses for the handshake (defaults to `http://localhost:3000`).
+- `SYNTH_CANONICAL_ORIGIN` (optional): override the dashboard base URL the SDK uses for the handshake (defaults to `https://www.usesynth.ai/dashboard`).
+- `SYNTH_CANONICAL_DEV` (optional): set to `1`, `true`, `yes`, or `on` to target the local dashboard at `http://localhost:3000`.
 - Keys are stored only in your project’s `.env` file, not exported to your shell.

{synth_ai-0.2.7 → synth_ai-0.2.8}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "synth-ai"
-version = "0.2.7"
+version = "0.2.8"
 description = "RL as a service SDK - Core AI functionality and tracing"
 authors = [{name = "Synth AI", email = "josh@usesynth.ai"}]
 license = "MIT"
@@ -55,7 +55,7 @@ dependencies = [
     "aiohttp>=3.8.0", # For async HTTP requests in Harmony integration
     "datasets>=4.0.0",
     "transformers>=4.56.1",
-    "modal>=1.1.4",
+    "modal>=1.1.0",
 ]
 
 [project.scripts]

{synth_ai-0.2.7 → synth_ai-0.2.8}/synth_ai/cli/demo.py

@@ -35,60 +35,65 @@ def _forward_to_new(args: list[str]) -> None:
 
 def register(cli):
     @cli.group("demo", invoke_without_command=True)
+    @click.option("--force", is_flag=True, help="Overwrite existing files in CWD when initializing demo")
     @click.option("--list", "list_only", is_flag=True, help="List available legacy demos and exit")
     @click.option("-f", "filter_term", default="", help="Filter legacy demos by substring")
     @click.pass_context
-    def demo(ctx: click.Context, list_only: bool, filter_term: str):
+    def demo(ctx: click.Context, force: bool, list_only: bool, filter_term: str):
         """Demo helpers.
 
-        - Legacy mode (no subcommand): find and run examples/*/run_demo.sh
+        - Default (no subcommand): initialize RL demo files into ./synth_demo/ (alias of rl_demo init)
+        - Legacy mode: with --list, find and run examples/*/run_demo.sh
         - New RL demo subcommands: deploy, configure, run
         """
         if ctx.invoked_subcommand is not None:
             return
-        # Legacy behavior: interactive examples runner
-        repo_root = Path(os.getcwd())
-        examples_dir = repo_root / "examples"
-        demos = _find_demo_scripts(examples_dir)
-        if filter_term:
-            demos = [p for p in demos if filter_term.lower() in str(p).lower()]
-
-        if not demos:
-            click.echo("No run_demo.sh scripts found under examples/.")
-            return
 
+        # If explicitly asked to list legacy demos, show interactive picker
         if list_only:
+            repo_root = Path(os.getcwd())
+            examples_dir = repo_root / "examples"
+            demos = _find_demo_scripts(examples_dir)
+            if filter_term:
+                demos = [p for p in demos if filter_term.lower() in str(p).lower()]
+
+            if not demos:
+                click.echo("No run_demo.sh scripts found under examples/.")
+                return
+
             click.echo("Available demos:")
-            for p in demos:
-                click.echo(f" - {p.relative_to(repo_root)}")
-            return
+            for idx, p in enumerate(demos, start=1):
+                click.echo(f" {idx}. {p.relative_to(repo_root)}")
+            click.echo("")
+
+            def _validate_choice(val: str) -> int:
+                try:
+                    i = int(val)
+                except Exception as err:
+                    raise click.BadParameter("Enter a number from the list") from err
+                if i < 1 or i > len(demos):
+                    raise click.BadParameter(f"Choose a number between 1 and {len(demos)}")
+                return i
 
-        click.echo("Available demos:")
-        for idx, p in enumerate(demos, start=1):
-            click.echo(f" {idx}. {p.relative_to(repo_root)}")
-        click.echo("")
+            choice = click.prompt("Select a demo to run", value_proc=_validate_choice)
+            script = demos[choice - 1]
+
+            click.echo("")
+            click.echo(f"🚀 Running {script.relative_to(repo_root)}\n")
 
-        def _validate_choice(val: str) -> int:
             try:
-                i = int(val)
-            except Exception as err:
-                raise click.BadParameter("Enter a number from the list") from err
-            if i < 1 or i > len(demos):
-                raise click.BadParameter(f"Choose a number between 1 and {len(demos)}")
-            return i
-
-        choice = click.prompt("Select a demo to run", value_proc=_validate_choice)
-        script = demos[choice - 1]
-
-        click.echo("")
-        click.echo(f"🚀 Running {script.relative_to(repo_root)}\n")
-
-        try:
-            subprocess.run(["bash", str(script)], check=True)
-        except subprocess.CalledProcessError as e:
-            click.echo(f"❌ Demo exited with non-zero status: {e.returncode}")
-        except KeyboardInterrupt:
-            click.echo("\n🛑 Demo interrupted by user")
+                subprocess.run(["bash", str(script)], check=True)
+            except subprocess.CalledProcessError as e:
+                click.echo(f"❌ Demo exited with non-zero status: {e.returncode}")
+            except KeyboardInterrupt:
+                click.echo("\n🛑 Demo interrupted by user")
+            return
+
+        # Default: forward to RL demo init behavior, optionally with --force
+        args: list[str] = ["rl_demo.init"]
+        if force:
+            args.append("--force")
+        _forward_to_new(args)
 
     # (prepare command removed; configure now prepares baseline TOML)
 

{synth_ai-0.2.7 → synth_ai-0.2.8}/synth_ai/cli/root.py

@@ -142,6 +142,12 @@ def run(batch_size: int | None, group_size: int | None, model: str | None, timeo
     _forward_to_demo(args)
 
 
+@cli.command()
+def setup():
+    """Perform SDK handshake and write keys to .env."""
+    _forward_to_demo(["rl_demo.setup"])
+
+
 @cli.command()
 @click.option("--db-file", default="traces/v3/synth_ai.db", help="Database file path")
 @click.option("--sqld-port", default=8080, type=int, help="Port for sqld HTTP interface")

{synth_ai-0.2.7 → synth_ai-0.2.8}/synth_ai/demos/core/cli.py

@@ -66,15 +66,6 @@ def cmd_setup(_args: argparse.Namespace) -> int:
         env = demo_core.load_env()
         local_env = demo_core.load_dotenv_file(cwd_env_path)
 
-    def _is_modal_public_url(u: str) -> bool:
-        try:
-            s = (u or "").strip().lower()
-            if not (s.startswith("http://") or s.startswith("https://")):
-                return False
-            return (".modal.run" in s) and ("modal.local" not in s) and ("pypi-mirror" not in s)
-        except Exception:
-            return False
-
     def _maybe_fix_task_url() -> None:
         if not env.task_app_name:
             return
@@ -772,7 +763,10 @@ def cmd_deploy(args: argparse.Namespace) -> int:
                     raise FileNotFoundError(f"App file not found: {app_path}")
                 # Surface the app path before asking for the name
                 print(f"Using task app: {app_path}")
-                suggested_name = args.name or f"synth-{os.path.splitext(os.path.basename(app_path))[0]}"
+                existing_name = (args.name or env.task_app_name or "").strip()
+                if not existing_name:
+                    existing_name = f"synth-{os.path.splitext(os.path.basename(app_path))[0]}"
+                suggested_name = existing_name
                 name_in = input(f"Modal app name [{suggested_name}]: ").strip() or suggested_name
                 app_name = name_in
                 print("\nAbout to deploy with:")
@@ -783,7 +777,11 @@ def cmd_deploy(args: argparse.Namespace) -> int:
                     print("Aborted by user.")
                     return 1
 
-                secret_name = (env.task_app_secret_name or "").strip() or f"{name_in}-secret"
+                prev_secret = (env.task_app_secret_name or "").strip()
+                default_secret = f"{name_in}-secret"
+                secret_name = default_secret if not prev_secret else prev_secret
+                if prev_secret and prev_secret != default_secret:
+                    secret_name = default_secret
                 existing_env_key = (env.env_api_key or "").strip()
                 env_key: str | None = existing_env_key or None
                 if existing_env_key:
@@ -808,24 +806,24 @@ def cmd_deploy(args: argparse.Namespace) -> int:
                     print("[deploy] Minted new ENVIRONMENT_API_KEY")
                 
                 # Optionally upload the new key to the backend using sealed box helper
-                backend_base = env.dev_backend_url or ""
+                backend_base = (env.dev_backend_url or "").rstrip("/")
                 synth_key = (env.synth_api_key or os.environ.get("SYNTH_API_KEY") or local_env.get("SYNTH_API_KEY") or "").strip()
                 if backend_base and synth_key:
-                        backend_base = backend_base.rstrip("/")
-                        if not backend_base.endswith("/api"):
-                            backend_base = f"{backend_base}/api"
+                        # Pass a base WITHOUT trailing /api to setup_environment_api_key,
+                        # since it appends /api/v1/... internally.
+                        non_api_base = backend_base[:-4] if backend_base.endswith("/api") else backend_base
                         try:
                             choice = input(
-                                f"Upload ENVIRONMENT_API_KEY to backend {backend_base}? [Y/n]: "
+                                f"Upload ENVIRONMENT_API_KEY to backend {non_api_base}? [Y/n]: "
                             ).strip().lower() or "y"
                         except Exception:
                             choice = "y"
                         if choice.startswith("y"):
                             try:
-                                print(f"[deploy] Uploading ENVIRONMENT_API_KEY to {backend_base} …")
+                                print(f"[deploy] Uploading ENVIRONMENT_API_KEY to {non_api_base} …")
                                 from synth_ai.rl.env_keys import setup_environment_api_key
 
-                                setup_environment_api_key(backend_base.rstrip("/"), synth_key, token=env_key)
+                                setup_environment_api_key(non_api_base, synth_key, token=env_key)
                                 print("[deploy] Backend sealed-box upload complete.")
                             except Exception as upload_err:
                                 print(f"[deploy] Failed to upload ENVIRONMENT_API_KEY: {upload_err}")
@@ -926,7 +924,7 @@ def cmd_deploy(args: argparse.Namespace) -> int:
             print(f"  export TASK_APP_NAME={app_name}")
             print(f"  export TASK_APP_SECRET_NAME={app_name}-secret")
         print(f"Persisted to {dotenv_path}")
-        print("Next: uvx synth-ai run")
+        print("\nNext step:\n$ uvx synth-ai run")
         return 0
     except Exception as e:
         print(f"Deploy error: {e}")
@@ -1079,11 +1077,7 @@ fi
         if os.path.exists(dst_cfg):
             print(f"  - {dst_cfg} (seeded)")
         print("")
-        print("Next steps:")
-        print("  1) cd synth_demo && put your ENVIRONMENT_API_KEY in ./.env")
-        print("  2) Deploy to Modal:")
-        print("     uvx bash ./deploy_task_app.sh")
-        print("  3) From project root, run: uvx synth-ai run")
+        print("\nNext step:\n$ uvx synth-ai setup")
         return 0
     except Exception as e:
         print(f"Init error: {e}")
@@ -1372,7 +1366,7 @@ def main(argv: list[str] | None = None) -> int:
     def _deploy_opts(parser):
         parser.add_argument("--local", action="store_true", help="Run local FastAPI instead of Modal deploy")
         parser.add_argument("--app", type=str, default=None, help="Path to Modal app.py for uv run modal deploy")
-        parser.add_argument("--name", type=str, default="synth-math-demo", help="Modal app name")
+        parser.add_argument("--name", type=str, default=None, help="Modal app name")
         parser.add_argument("--script", type=str, default=None, help="Path to deploy_task_app.sh (optional legacy)")
         parser.set_defaults(func=cmd_deploy)
 

{synth_ai-0.2.7 → synth_ai-0.2.8}/synth_ai/demos/demo_task_apps/math/modal_task_app.py

@@ -43,7 +43,15 @@ if _SYNTH_HOSTED is not None:
 # No extra local dirs required; app is self-contained
 
 app = App("hendrycks-math-task-app")
-_SECRET_NAME = os.getenv("MATH_TASK_APP_SECRET", "crafter-environment-sdk")
+_SECRET_NAME = (
+    os.getenv("TASK_APP_SECRET_NAME")
+    or os.getenv("MATH_TASK_APP_SECRET")
+    or os.getenv("TASK_APP_NAME", "").strip()
+)
+if not _SECRET_NAME:
+    _SECRET_NAME = "synth-math-demo-secret"
+elif not _SECRET_NAME.endswith("-secret"):
+    _SECRET_NAME = f"{_SECRET_NAME}-secret"
 
 
 @app.function(
@@ -411,5 +419,3 @@ def fastapi_app():
         }
 
     return api
-
-

synth_ai-0.2.8/synth_ai/handshake.py

@@ -0,0 +1,107 @@
+from __future__ import annotations
+import os
+import time
+import webbrowser
+from typing import Any, Dict, Tuple
+from urllib.parse import urljoin, urlsplit, urlunsplit
+
+import requests
+
+
+class HandshakeError(Exception):
+    pass
+
+
+_TRUTHY = {"1", "true", "yes", "on"}
+
+
+def _origin() -> str:
+    """Resolve the dashboard origin for the browser handshake.
+
+    Priority order:
+      1. Explicit ``SYNTH_CANONICAL_ORIGIN`` override.
+      2. Development flag ``SYNTH_CANONICAL_DEV`` (case-insensitive truthy) → localhost.
+      3. Production dashboard at ``https://www.usesynth.ai/dashboard``.
+    """
+
+    override = (os.getenv("SYNTH_CANONICAL_ORIGIN") or "").strip()
+    if override:
+        return override.rstrip("/")
+
+    dev_flag = (os.getenv("SYNTH_CANONICAL_DEV") or "").strip().lower()
+    if dev_flag in _TRUTHY:
+        print("USING DEV ORIGIN")
+        return "http://localhost:3000"
+
+    return "https://www.usesynth.ai/dashboard"
+
+
+def _split_origin(origin: str) -> tuple[str, str]:
+    parsed = urlsplit(origin)
+    bare = urlunsplit((parsed.scheme, parsed.netloc, "", "", ""))
+    path = parsed.path.rstrip("/")
+    return bare, path
+
+
+def _ensure_verification_uri(data: Dict[str, Any], base_with_path: str) -> None:
+    uri = data.get("verification_uri")
+    if not isinstance(uri, str) or not uri:
+        return
+    if uri.startswith("http://") or uri.startswith("https://"):
+        return
+    data["verification_uri"] = urljoin(base_with_path.rstrip("/") + "/", uri.lstrip("/"))
+
+
+def start_handshake_session(origin: str | None = None) -> Tuple[str, str, int, int]:
+    base = (origin or _origin()).rstrip("/")
+    api_origin, _ = _split_origin(base)
+    url = urljoin(api_origin.rstrip("/") + "/", "api/sdk/handshake/init")
+    r = requests.post(url, timeout=10)
+    if r.status_code != 200:
+        raise HandshakeError(f"init failed: {r.status_code} {r.text}")
+    try:
+        data = r.json()
+    except ValueError as exc:  # pragma: no cover - network dependent
+        raise HandshakeError(f"init returned malformed JSON: {exc}") from exc
+    _ensure_verification_uri(data, base)
+    return (
+        str(data.get("device_code")),
+        str(data.get("verification_uri")),
+        int(data.get("expires_in", 600)),
+        int(data.get("interval", 3)),
+    )
+
+
+def poll_handshake_token(device_code: str, origin: str | None = None, *, timeout_s: int | None = None) -> Dict[str, Any]:
+    base = (origin or _origin()).rstrip("/")
+    api_origin, _ = _split_origin(base)
+    url = urljoin(api_origin.rstrip("/") + "/", "api/sdk/handshake/token")
+    deadline = time.time() + (timeout_s or 600)
+    while True:
+        if time.time() > deadline:
+            raise HandshakeError("handshake timed out")
+        try:
+            r = requests.post(url, json={"device_code": device_code}, timeout=10)
+        except Exception as e:
+            time.sleep(2)
+            continue
+        if r.status_code == 200:
+            try:
+                data = r.json()
+            except ValueError as exc:  # pragma: no cover - network dependent
+                raise HandshakeError(f"token returned malformed JSON: {exc}") from exc
+            _ensure_verification_uri(data, base)
+            return data
+        elif r.status_code in (404, 410):
+            raise HandshakeError(f"handshake failed: {r.status_code}")
+        # 428 authorization_pending or others → wait and retry
+        time.sleep(2)
+
+
+def run_handshake(origin: str | None = None) -> Dict[str, Any]:
+    device_code, verification_uri, expires_in, interval = start_handshake_session(origin)
+    try:
+        webbrowser.open(verification_uri)
+    except Exception:
+        pass
+    return poll_handshake_token(device_code, origin, timeout_s=expires_in)

{synth_ai-0.2.7 → synth_ai-0.2.8/synth_ai.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: synth-ai
-Version: 0.2.7
+Version: 0.2.8
 Summary: RL as a service SDK - Core AI functionality and tracing
 Author-email: Synth AI <josh@usesynth.ai>
 License-Expression: MIT
@@ -53,7 +53,7 @@ Requires-Dist: asyncpg>=0.30.0
 Requires-Dist: aiohttp>=3.8.0
 Requires-Dist: datasets>=4.0.0
 Requires-Dist: transformers>=4.56.1
-Requires-Dist: modal>=1.1.4
+Requires-Dist: modal>=1.1.0
 Provides-Extra: dev
 Requires-Dist: build>=1.2.2.post1; extra == "dev"
 Requires-Dist: twine>=4.0.0; extra == "dev"
@@ -98,16 +98,17 @@ synth-ai comes with a built-in RL example tailored for training Qwen/Qwen3-0.6B
 Please create an account at [Synth](https://usesynth.ai) and [Modal](https://modal.com) for the Math hello‑world test run. Then run:
 
 ```bash
-uvx synth-ai rl_demo setup
-uvx synth-ai rl_demo deploy
+uvx synth-ai demo
+uvx synth-ai setup
+uvx synth-ai deploy
 uvx synth-ai run
 ```
 
 To walk through kicking off your first RL run, see the [Synth‑AI Documentation](https://docs.usesynth.ai/synth-ai/introduction).
 
-### What `rl_demo setup` does now
+### What `setup` does now
 
-When you run `uvx synth-ai rl_demo setup`, the SDK opens your browser to the Synth dashboard for a one‑time pairing (handshake) with your signed‑in session. The SDK will automatically:
+When you run `uvx synth-ai setup` (or the legacy `uvx synth-ai rl_demo setup`), the SDK opens your browser to the Synth dashboard for a one‑time pairing (handshake) with your signed‑in session. The SDK will automatically:
 
 - Detect your current user and organization
 - Ensure both API keys exist for that user+org
@@ -124,5 +125,6 @@ If your browser isn’t already signed in, sign in when prompted and the pairing
 
 Environment variables:
 
-- `SYNTH_CANONICAL_ORIGIN` (optional): override the dashboard base URL the SDK uses for the handshake (defaults to `http://localhost:3000`).
+- `SYNTH_CANONICAL_ORIGIN` (optional): override the dashboard base URL the SDK uses for the handshake (defaults to `https://www.usesynth.ai/dashboard`).
+- `SYNTH_CANONICAL_DEV` (optional): set to `1`, `true`, `yes`, or `on` to target the local dashboard at `http://localhost:3000`.
 - Keys are stored only in your project’s `.env` file, not exported to your shell.

{synth_ai-0.2.7 → synth_ai-0.2.8}/synth_ai.egg-info/requires.txt

@@ -41,7 +41,7 @@ asyncpg>=0.30.0
 aiohttp>=3.8.0
 datasets>=4.0.0
 transformers>=4.56.1
-modal>=1.1.4
+modal>=1.1.0
 
 [all]
 crafter>=1.8.3

synth_ai-0.2.7/synth_ai/handshake.py

@@ -1,63 +0,0 @@
-from __future__ import annotations
-
-import json
-import os
-import time
-import webbrowser
-from typing import Any, Dict, Tuple
-
-import requests
-
-
-class HandshakeError(Exception):
-    pass
-
-
-def _origin() -> str:
-    # Prefer explicit env; fallback to localhost dashboard
-    return (os.getenv("SYNTH_CANONICAL_ORIGIN", "") or "http://localhost:3000").rstrip("/")
-
-
-def start_handshake_session(origin: str | None = None) -> Tuple[str, str, int, int]:
-    base = (origin or _origin()).rstrip("/")
-    url = f"{base}/api/sdk/handshake/init"
-    r = requests.post(url, timeout=10)
-    if r.status_code != 200:
-        raise HandshakeError(f"init failed: {r.status_code} {r.text}")
-    data = r.json()
-    return (
-        str(data.get("device_code")),
-        str(data.get("verification_uri")),
-        int(data.get("expires_in", 600)),
-        int(data.get("interval", 3)),
-    )
-
-
-def poll_handshake_token(device_code: str, origin: str | None = None, *, timeout_s: int | None = None) -> Dict[str, Any]:
-    base = (origin or _origin()).rstrip("/")
-    url = f"{base}/api/sdk/handshake/token"
-    deadline = time.time() + (timeout_s or 600)
-    while True:
-        if time.time() > deadline:
-            raise HandshakeError("handshake timed out")
-        try:
-            r = requests.post(url, json={"device_code": device_code}, timeout=10)
-        except Exception as e:
-            time.sleep(2)
-            continue
-        if r.status_code == 200:
-            return r.json()
-        elif r.status_code in (404, 410):
-            raise HandshakeError(f"handshake failed: {r.status_code}")
-        # 428 authorization_pending or others → wait and retry
-        time.sleep(2)
-
-
-def run_handshake(origin: str | None = None) -> Dict[str, Any]:
-    device_code, verification_uri, expires_in, interval = start_handshake_session(origin)
-    try:
-        webbrowser.open(verification_uri)
-    except Exception:
-        pass
-    return poll_handshake_token(device_code, origin, timeout_s=expires_in)
-