tollgate 1.0.4__tar.gz → 1.0.5__tar.gz

{tollgate-1.0.4 → tollgate-1.0.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tollgate
-Version: 1.0.4
+Version: 1.0.5
 Summary: Runtime enforcement layer for AI agent tool calls using Identity + Intent + Policy
 Author: Tollgate Maintainers
 License-Expression: Apache-2.0

{tollgate-1.0.4 → tollgate-1.0.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "tollgate"
-version = "1.0.4"
+version = "1.0.5"
 description = "Runtime enforcement layer for AI agent tool calls using Identity + Intent + Policy"
 readme = "README.md"
 requires-python = ">=3.10"

{tollgate-1.0.4 → tollgate-1.0.5}/src/tollgate/__init__.py

@@ -14,7 +14,7 @@ from .exceptions import (
     TollgateDenied,
     TollgateError,
 )
-from .grants import InMemoryGrantStore
+from .grants import GrantStore, InMemoryGrantStore
 from .helpers import guard, wrap_tool
 from .policy import PolicyEvaluator, YamlPolicyEvaluator
 from .registry import ToolRegistry
@@ -33,7 +33,7 @@ from .types import (
     ToolRequest,
 )
 
-__version__ = "1.0.4"
+__version__ = "1.0.5"
 
 __all__ = [
     "ControlTower",
@@ -45,6 +45,7 @@ __all__ = [
     "DecisionType",
     "Effect",
     "Grant",
+    "GrantStore",
     "AuditEvent",
     "Outcome",
     "ApprovalOutcome",

{tollgate-1.0.4 → tollgate-1.0.5}/src/tollgate/grants.py

@@ -1,9 +1,55 @@
 import asyncio
 import time
+from typing import Protocol, runtime_checkable
 
 from .types import AgentContext, Grant, ToolRequest
 
 
+@runtime_checkable
+class GrantStore(Protocol):
+    """Protocol for grant storage backends.
+
+    Implement this protocol to use a custom storage backend (Redis, SQLite, etc.).
+
+    Example Redis implementation:
+
+        class RedisGrantStore:
+            def __init__(self, redis_client):
+                self.redis = redis_client
+
+            async def create_grant(self, grant: Grant) -> str:
+                await self.redis.hset(f"grant:{grant.id}", mapping=grant.to_dict())
+                await self.redis.expireat(f"grant:{grant.id}", int(grant.expires_at))
+                return grant.id
+
+            async def find_matching_grant(self, agent_ctx, tool_request) -> Grant | None:
+                # Implement matching logic with Redis SCAN or secondary indexes
+                ...
+
+    All methods must be async. The InMemoryGrantStore serves as the reference implementation.
+    """
+
+    async def create_grant(self, grant: Grant) -> str:
+        ...
+
+    async def find_matching_grant(
+        self, agent_ctx: AgentContext, tool_request: ToolRequest
+    ) -> Grant | None:
+        ...
+
+    async def revoke_grant(self, grant_id: str) -> bool:
+        ...
+
+    async def list_active_grants(self, agent_id: str | None = None) -> list[Grant]:
+        ...
+
+    async def cleanup_expired(self) -> int:
+        ...
+
+    async def get_usage_count(self, grant_id: str) -> int:
+        ...
+
+
 class InMemoryGrantStore:
     """In-memory store for action grants with thread-safe matching logic."""
 

{tollgate-1.0.4 → tollgate-1.0.5}/src/tollgate/tower.py

@@ -11,6 +11,7 @@ from .exceptions import (
     TollgateDeferred,
     TollgateDenied,
 )
+from .grants import GrantStore
 from .policy import PolicyEvaluator
 from .types import (
     AgentContext,
@@ -32,7 +33,7 @@ class ControlTower:
         policy: PolicyEvaluator,
         approver: Approver,
         audit: AuditSink,
-        grant_store: Any | None = None,
+        grant_store: GrantStore | None = None,
         redact_fn: Callable[[dict[str, Any]], dict[str, Any]] | None = None,
     ):
         self.policy = policy

{tollgate-1.0.4 → tollgate-1.0.5}/tests/test_grants.py

@@ -284,3 +284,22 @@ async def test_tower_uses_grant(agent_ctx, tool_req):
     event = audit.events[-1]
     assert event.grant_id == grant.id
     assert event.outcome == Outcome.EXECUTED
+
+@pytest.mark.asyncio
+async def test_grant_store_protocol_compliance():
+    """Verify InMemoryGrantStore implements GrantStore protocol."""
+    from tollgate import GrantStore, InMemoryGrantStore
+
+    store = InMemoryGrantStore()
+
+    # Protocol requires these methods exist and are callable
+    assert hasattr(store, "create_grant")
+    assert hasattr(store, "find_matching_grant")
+    assert hasattr(store, "revoke_grant")
+    assert hasattr(store, "list_active_grants")
+    assert hasattr(store, "cleanup_expired")
+    assert hasattr(store, "get_usage_count")
+
+    # Verify it's recognized as implementing the protocol
+    # Note: requires runtime_checkable on GrantStore
+    assert isinstance(store, GrantStore)