truthlock-io 0.1.0__py3-none-any.whl

truthlock_io/__init__.py

@@ -0,0 +1,36 @@
+"""TruthLock: standing verification for AI responses."""
+
+from truthlock_io.client import TruthLock
+from truthlock_io.errors import (
+    ApiError,
+    AuthenticationError,
+    NotFound,
+    PaymentRequired,
+    RateLimited,
+    TruthLockError,
+    VerificationTimeout,
+    WebhookSignatureError,
+)
+from truthlock_io.models import Accepted, Answer, Decision, Record
+from truthlock_io.webhooks import WebhookEvent, parse_webhook, verify_signature
+
+__version__ = "0.1.0"
+
+__all__ = [
+    "Accepted",
+    "Answer",
+    "ApiError",
+    "AuthenticationError",
+    "Decision",
+    "NotFound",
+    "PaymentRequired",
+    "RateLimited",
+    "Record",
+    "TruthLock",
+    "TruthLockError",
+    "VerificationTimeout",
+    "WebhookEvent",
+    "WebhookSignatureError",
+    "parse_webhook",
+    "verify_signature",
+]

truthlock_io/cli.py

@@ -0,0 +1,194 @@
+"""The ``truthlock`` command: the SDK from a shell, with ``--json`` for piping.
+
+    truthlock verify --org field-service --file answer.txt --json | jq .overall.grade
+    truthlock may 3f2a... publish          # exit 0 only when the decision is allow
+    truthlock attest 3f2a... --export bundle.zip
+
+The key comes from TRUTHLOCK_API_KEY, the organization from --org or
+TRUTHLOCK_ORGANIZATION, and the address from --url or TRUTHLOCK_URL.
+"""
+
+from __future__ import annotations
+
+import argparse
+import json
+import sys
+from collections.abc import Sequence
+from pathlib import Path
+from typing import Any
+
+from truthlock_io import __version__
+from truthlock_io.client import TruthLock
+from truthlock_io.errors import ApiError, TruthLockError, WebhookSignatureError
+from truthlock_io.models import Record
+from truthlock_io.webhooks import parse_webhook
+
+EXIT_OK, EXIT_NO, EXIT_ERROR = 0, 1, 2
+
+
+def _parser() -> argparse.ArgumentParser:
+    common = argparse.ArgumentParser(add_help=False)
+    common.add_argument("--org", help="organization slug (or TRUTHLOCK_ORGANIZATION)")
+    common.add_argument("--url", help="API address (or TRUTHLOCK_URL)")
+    common.add_argument("--json", action="store_true", help="print the full JSON")
+
+    p = argparse.ArgumentParser(prog="truthlock", description="TruthLock from the shell.")
+    p.add_argument("--version", action="version", version=f"truthlock {__version__}")
+    sub = p.add_subparsers(dest="command", required=True)
+
+    v = sub.add_parser("verify", parents=[common], help="verify an AI response")
+    source = v.add_mutually_exclusive_group(required=True)
+    source.add_argument("--file", help="file holding the response; - reads standard input")
+    source.add_argument("--text", help="the response itself")
+    v.add_argument("--question", help="what was asked")
+    v.add_argument("--external-id", help="your own id for this response")
+    v.add_argument("--operation", help="decide reliance for this operation as part of the run")
+    v.add_argument("--webhook-url", help="where to send the signed completion event")
+    v.add_argument("--no-wait", action="store_true", help="print the id and return at once")
+    v.add_argument("--timeout", type=float, default=300.0, help="seconds to wait (default 300)")
+
+    g = sub.add_parser("get", parents=[common], help="fetch a verification")
+    g.add_argument("id")
+
+    w = sub.add_parser("wait", parents=[common], help="wait for a verification to finish")
+    w.add_argument("id")
+    w.add_argument("--timeout", type=float, default=300.0)
+
+    m = sub.add_parser(
+        "may", parents=[common], help="may this record be relied on? exit 0 only for allow"
+    )
+    m.add_argument("id")
+    m.add_argument("operation")
+
+    a = sub.add_parser("attest", parents=[common], help="the record's attestations, or its bundle")
+    a.add_argument("id")
+    a.add_argument("--export", metavar="ZIP", help="save record, evidence, proof and signature")
+
+    r = sub.add_parser("respond", parents=[common], help="ask the organization's responder")
+    r.add_argument("question")
+    r.add_argument("--grounded", action="store_true", help="answer from published sources")
+
+    d = sub.add_parser("deliveries", parents=[common], help="webhook deliveries for a record")
+    d.add_argument("id")
+
+    wh = sub.add_parser("webhook-verify", help="check a captured webhook body and signature")
+    wh.add_argument("--body", required=True, help="file holding the raw body; - for stdin")
+    wh.add_argument("--signature", required=True, help="the TruthLock-Signature header")
+    wh.add_argument("--secret", required=True, help="the key's webhook secret (whsec_...)")
+    wh.add_argument("--tolerance", type=int, default=300, help="max age in seconds; 0 = any")
+    wh.add_argument("--json", action="store_true")
+    return p
+
+
+def _read(path: str) -> str:
+    if path == "-":
+        return sys.stdin.read()
+    with open(path, encoding="utf-8") as handle:
+        return handle.read()
+
+
+def _emit(value: Any) -> None:
+    print(json.dumps(value, indent=2, default=str))
+
+
+def _summary(record: Record) -> str:
+    if record.status == "failed":
+        return f"{record.id} failed: {record.error or 'unknown error'}"
+    if not record.finished:
+        return f"{record.id} {record.status}"
+    lines = [f"{record.id} {record.grade or 'NO_CLAIMS'} ({len(record.claims)} claims)"]
+    lines += [f"  - {c}" for c in record.caveats()]
+    return "\n".join(lines)
+
+
+def _client(args: argparse.Namespace) -> TruthLock:
+    return TruthLock(organization=args.org, base_url=args.url)
+
+
+def _run(args: argparse.Namespace) -> int:
+    if args.command == "webhook-verify":
+        # Bytes, not text: the signature is over exactly what was sent.
+        body = sys.stdin.buffer.read() if args.body == "-" else Path(args.body).read_bytes()
+        event = parse_webhook(body, args.signature, args.secret, tolerance=args.tolerance)
+        _emit(event.raw) if args.json else print(f"valid: {event.type} {event.verification_id}")
+        return EXIT_OK
+
+    with _client(args) as tl:
+        if args.command == "verify":
+            text = args.text if args.text is not None else _read(args.file)
+            accepted = tl.verify(
+                text,
+                question=args.question,
+                external_id=args.external_id,
+                operation=args.operation,
+                webhook_url=args.webhook_url,
+            )
+            if args.no_wait:
+                _emit(accepted.__dict__) if args.json else print(accepted.id)
+                return EXIT_OK
+            record = tl.wait(accepted.id, timeout=args.timeout)
+        elif args.command == "get":
+            record = tl.get(args.id)
+        elif args.command == "wait":
+            record = tl.wait(args.id, timeout=args.timeout)
+        elif args.command == "may":
+            decision = tl.check(args.id, args.operation, store=False)
+            if args.json:
+                _emit(decision.raw)
+            else:
+                flagged = [str(c["claim_id"]) for c in decision.claims if c["decision"] != "allow"]
+                print(decision.decision + (f" claims {','.join(flagged)}" if flagged else ""))
+            return EXIT_OK if decision.allowed else EXIT_NO
+        elif args.command == "attest":
+            if args.export:
+                print(tl.export(args.id, args.export))
+                return EXIT_OK
+            status = tl.attestations(args.id)
+            if args.json:
+                _emit(status)
+                return EXIT_OK
+            if not status.get("attested"):
+                print("not attested")
+                return EXIT_NO
+            print("stands" if status.get("stands") else "withdrawn")
+            for item in status.get("chain") or []:
+                print(
+                    f"  {item.get('code', '')} {item.get('kind', '')} {item.get('created_at', '')}"
+                )
+            return EXIT_OK if status.get("stands") else EXIT_NO
+        elif args.command == "respond":
+            answer = tl.respond(args.question, grounded=args.grounded)
+            _emit(answer.raw) if args.json else print(answer.response)
+            return EXIT_OK
+        elif args.command == "deliveries":
+            rows = tl.webhook_deliveries(args.id)
+            if args.json:
+                _emit(rows)
+            else:
+                for row in rows:
+                    print(f"{row['status']} x{row['attempts']} {row['url']} {row['last_error']}")
+            return EXIT_OK
+        else:  # pragma: no cover - argparse refuses unknown commands first
+            return EXIT_ERROR
+
+        _emit(record.raw) if args.json else print(_summary(record))
+        return EXIT_OK if record.ok else EXIT_NO
+
+
+def main(argv: Sequence[str] | None = None) -> int:
+    args = _parser().parse_args(argv)
+    try:
+        return _run(args)
+    except WebhookSignatureError as exc:
+        print(f"invalid: {exc}", file=sys.stderr)
+        return EXIT_NO
+    except ApiError as exc:
+        print(f"truthlock: {exc.detail} (HTTP {exc.status})", file=sys.stderr)
+        return EXIT_ERROR
+    except (TruthLockError, OSError) as exc:
+        print(f"truthlock: {exc}", file=sys.stderr)
+        return EXIT_ERROR
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

truthlock_io/client.py

@@ -0,0 +1,249 @@
+"""The TruthLock client.
+
+    from truthlock_io import TruthLock
+
+    tl = TruthLock(api_key="tl_...", organization="field-service")
+    record = tl.verify_and_wait(question=question, response=answer_text)
+    if tl.may(record, "display"):
+        show(answer_text)
+
+Verification is asynchronous: it takes seconds to a minute or two. ``verify`` returns at
+once with an id; ``wait`` polls until the record is finished; a webhook (see
+``truthlock.webhooks``) saves you the polling.
+"""
+
+from __future__ import annotations
+
+import os
+import time
+from collections.abc import Callable
+from pathlib import Path
+from typing import Any
+
+import httpx
+
+from truthlock_io.errors import (
+    ApiError,
+    AuthenticationError,
+    NotFound,
+    PaymentRequired,
+    RateLimited,
+    TruthLockError,
+    VerificationTimeout,
+)
+from truthlock_io.models import Accepted, Answer, Decision, Record
+
+DEFAULT_URL = "https://app.truthlock.io"
+USER_AGENT = "truthlock-python/0.1.0"
+
+_ERRORS: dict[int, type[ApiError]] = {
+    401: AuthenticationError,
+    403: AuthenticationError,
+    402: PaymentRequired,
+    404: NotFound,
+    429: RateLimited,
+}
+
+
+class TruthLock:
+    def __init__(
+        self,
+        api_key: str | None = None,
+        organization: str | None = None,
+        *,
+        base_url: str | None = None,
+        timeout: float = 30.0,
+        transport: httpx.BaseTransport | None = None,
+    ) -> None:
+        key = api_key or os.environ.get("TRUTHLOCK_API_KEY")
+        if not key:
+            raise TruthLockError("no API key: pass api_key= or set TRUTHLOCK_API_KEY")
+        self.organization = organization or os.environ.get("TRUTHLOCK_ORGANIZATION")
+        url = (base_url or os.environ.get("TRUTHLOCK_URL") or DEFAULT_URL).rstrip("/")
+        self._http = httpx.Client(
+            base_url=url,
+            timeout=timeout,
+            transport=transport,
+            headers={"X-API-Key": key, "User-Agent": USER_AGENT, "Accept": "application/json"},
+        )
+
+    # --- plumbing ------------------------------------------------------------------------------
+
+    def close(self) -> None:
+        self._http.close()
+
+    def __enter__(self) -> TruthLock:
+        return self
+
+    def __exit__(self, *_exc: object) -> None:
+        self.close()
+
+    def _org(self, organization: str | None) -> str:
+        slug = organization or self.organization
+        if not slug:
+            raise TruthLockError(
+                "no organization: pass organization= or set TRUTHLOCK_ORGANIZATION"
+            )
+        return f"/v1/organizations/{slug}"
+
+    def _request(self, method: str, path: str, **kwargs: Any) -> httpx.Response:
+        try:
+            response = self._http.request(method, path, **kwargs)
+        except httpx.HTTPError as exc:
+            raise TruthLockError(f"could not reach TruthLock: {exc}") from exc
+        if response.is_success:
+            return response
+        try:
+            detail = response.json().get("detail", response.text)
+        except ValueError:
+            detail = response.text
+        retry = response.headers.get("Retry-After")
+        raise _ERRORS.get(response.status_code, ApiError)(
+            response.status_code, detail, int(retry) if retry and retry.isdigit() else None
+        )
+
+    # --- verify ----------------------------------------------------------------------------------
+
+    def verify(
+        self,
+        response: str,
+        *,
+        question: str | None = None,
+        cited_sources: list[dict[str, Any]] | None = None,
+        external_id: str | None = None,
+        operation: str | None = None,
+        meta: dict[str, Any] | None = None,
+        webhook_url: str | None = None,
+        organization: str | None = None,
+    ) -> Accepted:
+        """Submit an AI response. Returns at once; the work happens in the background."""
+        body: dict[str, Any] = {"response": response}
+        for name, value in (
+            ("question", question),
+            ("cited_sources", cited_sources),
+            ("external_id", external_id),
+            ("operation", operation),
+            ("meta", meta),
+            ("webhook_url", webhook_url),
+        ):
+            if value is not None:
+                body[name] = value
+        raw = self._request("POST", f"{self._org(organization)}/verify", json=body).json()
+        return Accepted(str(raw["id"]), str(raw["status"]), str(raw.get("status_url", "")))
+
+    def get(self, verification_id: str, *, organization: str | None = None) -> Record:
+        path = f"{self._org(organization)}/verifications/{verification_id}"
+        return Record.from_json(self._request("GET", path).json())
+
+    def recent(self, limit: int = 20, *, organization: str | None = None) -> list[dict[str, Any]]:
+        path = f"{self._org(organization)}/verifications"
+        return list(self._request("GET", path, params={"limit": limit}).json())
+
+    def wait(
+        self,
+        verification_id: str,
+        *,
+        timeout: float = 300.0,
+        interval: float = 2.0,
+        organization: str | None = None,
+        sleep: Callable[[float], None] = time.sleep,
+    ) -> Record:
+        """Poll until the record is done or failed. Raises VerificationTimeout otherwise;
+        the verification carries on, and ``get`` will find it later."""
+        deadline = time.monotonic() + timeout
+        delay = interval
+        while True:
+            record = self.get(verification_id, organization=organization)
+            if record.finished:
+                return record
+            if time.monotonic() + delay > deadline:
+                raise VerificationTimeout(verification_id, timeout)
+            sleep(delay)
+            delay = min(delay * 1.5, 10.0)
+
+    def verify_and_wait(
+        self, response: str, *, timeout: float = 300.0, interval: float = 2.0, **kwargs: Any
+    ) -> Record:
+        accepted = self.verify(response, **kwargs)
+        return self.wait(
+            accepted.id,
+            timeout=timeout,
+            interval=interval,
+            organization=kwargs.get("organization"),
+        )
+
+    # --- reliance --------------------------------------------------------------------------------
+
+    def check(
+        self,
+        record: Record | str,
+        operation: str,
+        *,
+        store: bool = True,
+        apply: str = "none",
+        organization: str | None = None,
+    ) -> Decision:
+        """Decide whether the record may be relied on for ``operation``."""
+        verification_id = record.id if isinstance(record, Record) else record
+        raw = self._request(
+            "POST",
+            f"{self._org(organization)}/reliance/check",
+            json={
+                "verification_id": verification_id,
+                "operation": operation,
+                "store": store,
+                "apply": apply,
+            },
+        ).json()
+        return Decision.from_json(raw, verification_id)
+
+    def may(self, record: Record | str, operation: str, *, organization: str | None = None) -> bool:
+        """True only when the decision is ``allow``. A record that already carries a
+        decision for this operation is not asked about again."""
+        if isinstance(record, Record):
+            stored = record.decision(operation)
+            if stored is not None:
+                return stored.allowed
+        return self.check(record, operation, store=False, organization=organization).allowed
+
+    # --- the rest --------------------------------------------------------------------------------
+
+    def respond(
+        self, question: str, *, grounded: bool = False, organization: str | None = None
+    ) -> Answer:
+        raw = self._request(
+            "POST",
+            f"{self._org(organization)}/respond",
+            json={"question": question, "grounded": grounded},
+            timeout=120.0,
+        ).json()
+        return Answer(
+            response=str(raw.get("response", "")),
+            cited_sources=list(raw.get("cited_sources") or []),
+            warnings=list(raw.get("warnings") or []),
+            origin=dict(raw.get("origin") or {}),
+            raw=raw,
+        )
+
+    def attestations(
+        self, verification_id: str, *, organization: str | None = None
+    ) -> dict[str, Any]:
+        """Whether the record is attested and still stands, the current attestation, and
+        the ``chain`` of every attestation issued for it, oldest first."""
+        path = f"{self._org(organization)}/verifications/{verification_id}/attestations"
+        return dict(self._request("GET", path).json())
+
+    def export(
+        self, verification_id: str, path: str | Path, *, organization: str | None = None
+    ) -> Path:
+        """Save the record, its evidence, the proof and the signature as one zip."""
+        url = f"{self._org(organization)}/verifications/{verification_id}/export"
+        target = Path(path)
+        target.write_bytes(self._request("GET", url, timeout=120.0).content)
+        return target
+
+    def webhook_deliveries(
+        self, verification_id: str, *, organization: str | None = None
+    ) -> list[dict[str, Any]]:
+        path = f"{self._org(organization)}/verifications/{verification_id}/webhook-deliveries"
+        return list(self._request("GET", path).json())

truthlock_io/errors.py

@@ -0,0 +1,47 @@
+"""What can go wrong, as types a caller can catch."""
+
+from __future__ import annotations
+
+from typing import Any
+
+
+class TruthLockError(Exception):
+    """Base class for every error this library raises."""
+
+
+class ApiError(TruthLockError):
+    """The API answered with an error status."""
+
+    def __init__(self, status: int, detail: Any, retry_after: int | None = None) -> None:
+        self.status = status
+        self.detail = detail
+        self.retry_after = retry_after
+        super().__init__(f"{status}: {detail}")
+
+
+class AuthenticationError(ApiError):
+    """401 or 403: the key is missing, wrong, paused, or not allowed to do this."""
+
+
+class PaymentRequired(ApiError):
+    """402: the plan's allowance is spent, or an invoice is past its grace period."""
+
+
+class RateLimited(ApiError):
+    """429: too many calls this minute. ``retry_after`` says how long to wait."""
+
+
+class NotFound(ApiError):
+    """404."""
+
+
+class VerificationTimeout(TruthLockError):
+    """``wait`` gave up before the verification finished. It may still finish."""
+
+    def __init__(self, verification_id: str, seconds: float) -> None:
+        self.verification_id = verification_id
+        super().__init__(f"verification {verification_id} was not finished after {seconds:g}s")
+
+
+class WebhookSignatureError(TruthLockError):
+    """The webhook was not signed by this secret, was altered, or is a replay."""

truthlock_io/models.py

@@ -0,0 +1,126 @@
+"""Thin views over the API's JSON. The raw dict is always there as ``.raw``."""
+
+from __future__ import annotations
+
+from dataclasses import dataclass, field
+from typing import Any
+
+# Grades that mean "do not present this claim as established".
+WEAK_GRADES = ("CONTRADICTED", "UNCONFIRMED", "REFUSED")
+
+
+@dataclass(frozen=True)
+class Accepted:
+    id: str
+    status: str
+    status_url: str
+
+
+@dataclass(frozen=True)
+class Decision:
+    """May this record be relied on for one operation: ``allow``, ``review`` or ``deny``."""
+
+    verification_id: str
+    operation: str
+    decision: str
+    counts: dict[str, int]
+    claims: list[dict[str, Any]]
+    applied_text: str | None
+    raw: dict[str, Any] = field(repr=False)
+
+    @property
+    def allowed(self) -> bool:
+        return self.decision == "allow"
+
+    @classmethod
+    def from_json(cls, raw: dict[str, Any], verification_id: str = "") -> Decision:
+        return cls(
+            verification_id=str(raw.get("verification_id") or verification_id),
+            operation=str(raw.get("operation", "")),
+            decision=str(raw.get("decision", "deny")),
+            counts=dict(raw.get("counts") or {}),
+            claims=list(raw.get("claims") or []),
+            applied_text=raw.get("applied_text"),
+            raw=raw,
+        )
+
+
+@dataclass(frozen=True)
+class Record:
+    """A verification: what each claim rests on, and what may be done with it."""
+
+    id: str
+    status: str
+    raw: dict[str, Any] = field(repr=False)
+
+    @classmethod
+    def from_json(cls, raw: dict[str, Any]) -> Record:
+        return cls(id=str(raw["id"]), status=str(raw.get("status", "")), raw=raw)
+
+    @property
+    def finished(self) -> bool:
+        return self.status in ("done", "failed")
+
+    @property
+    def ok(self) -> bool:
+        return self.status == "done"
+
+    @property
+    def error(self) -> str | None:
+        return self.raw.get("error")
+
+    @property
+    def overall(self) -> dict[str, Any]:
+        return dict(self.raw.get("overall") or {})
+
+    @property
+    def grade(self) -> str | None:
+        """The worst grade among the claims: VERIFIED, SUPPORTED, UNCONFIRMED,
+        CONTRADICTED or REFUSED."""
+        grade = self.overall.get("grade")
+        return str(grade) if grade else None
+
+    @property
+    def claims(self) -> list[dict[str, Any]]:
+        return list(self.raw.get("claims") or [])
+
+    @property
+    def external_id(self) -> str | None:
+        return self.raw.get("external_id")
+
+    def decision(self, operation: str) -> Decision | None:
+        """The decision already written on the record for this operation, if any."""
+        stored = (self.raw.get("reliance") or {}).get(operation)
+        return Decision.from_json(stored, self.id) if isinstance(stored, dict) else None
+
+    def caveats(self) -> list[str]:
+        """One line per claim that should not be presented as established."""
+        out: list[str] = []
+        for c in self.claims:
+            grade = str(c.get("grade") or "")
+            if grade not in WEAK_GRADES:
+                continue
+            text = c.get("claim") or c.get("text_snippet") or f"claim {c.get('claim_id')}"
+            why = c.get("explanation") or c.get("reason_code") or ""
+            out.append(f"{text} [{grade}{': ' + why if why else ''}]")
+        return out
+
+    def review_ids(self) -> list[int]:
+        """The claims a person should look at: weak grades and anything flagged."""
+        return [
+            int(c["claim_id"])
+            for c in self.claims
+            if "claim_id" in c
+            and (str(c.get("grade") or "") in WEAK_GRADES or c.get("needs_review"))
+        ]
+
+
+@dataclass(frozen=True)
+class Answer:
+    """An answer from the organization's responder agent, ready to verify."""
+
+    response: str
+    cited_sources: list[dict[str, Any]]
+    warnings: list[str]
+    origin: dict[str, Any]
+    raw: dict[str, Any] = field(repr=False)

truthlock_io/webhooks.py

@@ -0,0 +1,103 @@
+"""Receiving a TruthLock webhook: prove it is ours, then read it.
+
+Every event carries ``TruthLock-Signature: t=<unix>,v1=<hex>``, where ``v1`` is the
+HMAC-SHA256 of ``"<t>.<raw body>"`` under the API key's webhook secret. The timestamp is
+inside the signed text, so an old capture cannot be replayed with a fresh one.
+
+Verify against the raw bytes you received, before any JSON parsing: re-serialising the
+body changes it, and the signature is over what was sent.
+"""
+
+from __future__ import annotations
+
+import hashlib
+import hmac
+import json
+import time
+from dataclasses import dataclass
+from typing import Any
+
+from truthlock_io.errors import WebhookSignatureError
+
+SIGNATURE_HEADER = "TruthLock-Signature"
+DEFAULT_TOLERANCE_SECONDS = 300
+
+
+@dataclass(frozen=True)
+class WebhookEvent:
+    id: str
+    type: str
+    created: int
+    data: dict[str, Any]
+    raw: dict[str, Any]
+
+    @property
+    def verification_id(self) -> str:
+        return str(self.data.get("id", ""))
+
+    @property
+    def completed(self) -> bool:
+        return self.type == "verification.completed"
+
+    @property
+    def grade(self) -> str | None:
+        overall = self.data.get("overall") or {}
+        grade = overall.get("grade")
+        return str(grade) if grade else None
+
+
+def sign(payload: bytes, secret: str, timestamp: int | None = None) -> str:
+    """Build the header TruthLock would send. For tests of your own receiver."""
+    ts = int(time.time()) if timestamp is None else timestamp
+    mac = hmac.new(secret.encode(), f"{ts}.".encode() + payload, hashlib.sha256).hexdigest()
+    return f"t={ts},v1={mac}"
+
+
+def verify_signature(
+    payload: bytes | str,
+    header: str | None,
+    secret: str,
+    *,
+    tolerance: int = DEFAULT_TOLERANCE_SECONDS,
+    now: float | None = None,
+) -> None:
+    """Raise WebhookSignatureError unless ``payload`` was signed by ``secret`` recently."""
+    body = payload.encode() if isinstance(payload, str) else payload
+    if not header:
+        raise WebhookSignatureError(f"no {SIGNATURE_HEADER} header")
+    parts = dict(p.split("=", 1) for p in header.split(",") if "=" in p)
+    try:
+        ts = int(parts["t"])
+        sent = parts["v1"]
+    except (KeyError, ValueError):
+        raise WebhookSignatureError(f"malformed {SIGNATURE_HEADER} header") from None
+    expected = sign(body, secret, ts).split("v1=", 1)[1]
+    if not hmac.compare_digest(expected, sent):
+        raise WebhookSignatureError("the signature does not match this body and secret")
+    current = time.time() if now is None else now
+    if tolerance > 0 and abs(current - ts) > tolerance:
+        raise WebhookSignatureError(
+            f"the signature is {abs(current - ts):.0f}s old; refusing a possible replay"
+        )
+
+
+def parse_webhook(
+    payload: bytes | str,
+    header: str | None,
+    secret: str,
+    *,
+    tolerance: int = DEFAULT_TOLERANCE_SECONDS,
+) -> WebhookEvent:
+    """Verify, then parse. The only safe order."""
+    verify_signature(payload, header, secret, tolerance=tolerance)
+    try:
+        raw = json.loads(payload)
+    except ValueError:
+        raise WebhookSignatureError("the body is signed but is not JSON") from None
+    return WebhookEvent(
+        id=str(raw.get("id", "")),
+        type=str(raw.get("type", "")),
+        created=int(raw.get("created") or 0),
+        data=dict(raw.get("data") or {}),
+        raw=raw,
+    )

truthlock_io-0.1.0.dist-info/METADATA

@@ -0,0 +1,140 @@
+Metadata-Version: 2.5
+Name: truthlock-io
+Version: 0.1.0
+Summary: Client for the TruthLock verification API: submit, wait, decide, and verify signed webhooks.
+Project-URL: Homepage, https://truthlock.io
+Project-URL: Documentation, https://truthlock.io/developers
+Author-email: Iron Rod Systems LLC <contact@truthlock.io>
+License-Expression: Apache-2.0
+License-File: LICENSE
+License-File: NOTICE
+Keywords: attestation,llm,truthlock,verification
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Typing :: Typed
+Requires-Python: >=3.10
+Requires-Dist: httpx>=0.27
+Description-Content-Type: text/markdown
+
+# truthlock-io
+
+Python client and command line tool for [TruthLock](https://truthlock.io): standing
+verification for AI responses.
+
+```
+pip install truthlock-io
+```
+
+The package is `truthlock-io` and the module is `truthlock_io`. The similarly named
+`truthlock` on PyPI belongs to a different company and does not talk to this service.
+
+## Verify a response
+
+```python
+from truthlock_io import TruthLock
+
+tl = TruthLock(api_key="tl_...", organization="field-service")
+
+record = tl.verify_and_wait(
+    question="How do I clear fault E-41 on the press?",
+    response=answer_text,
+)
+
+if tl.may(record, "display"):
+    show(answer_text)
+elif tl.may(record, "display_with_caveat"):
+    show(answer_text, caveats=record.caveats())
+else:
+    hold(record.review_ids())
+```
+
+The key and organization may also come from `TRUTHLOCK_API_KEY` and
+`TRUTHLOCK_ORGANIZATION`. `TRUTHLOCK_URL` points the client at a dedicated stack;
+the default is `https://app.truthlock.io`.
+
+Verification takes seconds to a minute or two, so it is asynchronous. `verify` returns an
+id at once. `wait` polls with a growing interval and raises `VerificationTimeout` if it
+gives up; the verification carries on, and `get` finds it later.
+
+| Call | What it does |
+|---|---|
+| `verify(response, question=, external_id=, operation=, webhook_url=, meta=)` | Submit. Returns `Accepted(id, status, status_url)`. |
+| `get(id)` / `wait(id)` / `verify_and_wait(...)` / `recent(limit)` | The `Record`: `.grade`, `.claims`, `.caveats()`, `.review_ids()`, `.raw`. |
+| `check(record, operation)` | The reliance `Decision`: `allow`, `review` or `deny`, per claim and overall. |
+| `may(record, operation)` | `True` only for `allow`. |
+| `respond(question, grounded=False)` | An answer from the organization's responder agent. |
+| `attestations(id)` / `export(id, path)` | Whether the record is attested and stands, with its signed `chain`; or the whole bundle as a zip. |
+| `webhook_deliveries(id)` | What was sent for the record, and what your receiver answered. |
+
+Errors are typed: `AuthenticationError` (401, 403), `PaymentRequired` (402: the plan's
+allowance is spent, or an invoice is past due), `RateLimited` (429, with `.retry_after`),
+`NotFound`, and `ApiError` for the rest.
+
+## Webhooks
+
+Give an API key a webhook under **Advanced → API keys → Webhook**, or:
+
+```
+curl -X PUT https://app.truthlock.io/v1/api-keys/$KEY_ID/webhook \
+  -H "X-API-Key: $ADMIN_KEY" -H "Content-Type: application/json" \
+  -d '{"url": "https://example.com/hooks/truthlock"}'
+```
+
+The response carries the signing secret, `whsec_...`, once. When a verification submitted
+with that key finishes, TruthLock posts a `verification.completed` or
+`verification.failed` event, signed:
+
+```
+TruthLock-Signature: t=1700000000,v1=<hex HMAC-SHA256 of "<t>.<raw body>">
+```
+
+Verify against the raw bytes, before parsing them:
+
+```python
+from truthlock_io import parse_webhook, WebhookSignatureError
+
+
+@app.post("/hooks/truthlock")
+async def hook(request):
+    try:
+        event = parse_webhook(
+            await request.body(),
+            request.headers.get("TruthLock-Signature"),
+            WEBHOOK_SECRET,
+        )
+    except WebhookSignatureError:
+        return Response(status_code=400)
+    if event.completed:
+        record = tl.get(event.verification_id)
+    return Response(status_code=204)
+```
+
+`parse_webhook` rejects an altered body, another key's secret, and anything older than five
+minutes, which is what stops a captured delivery being replayed. Answer with any 2xx
+quickly and do the work afterwards: anything else is retried, eight times over about a day.
+A delivery may arrive more than once; `event.id` is the same each time.
+
+## Command line
+
+```
+$ export TRUTHLOCK_API_KEY=tl_...
+$ truthlock verify --org field-service --file answer.txt --json | jq .overall.grade
+"CONTRADICTED"
+$ truthlock may 3f2a9b1c-... publish
+review claims 1
+$ truthlock attest 3f2a9b1c-... --export bundle.zip
+```
+
+| Command | |
+|---|---|
+| `verify --file F \| --text T [--question Q] [--no-wait] [--webhook-url U]` | Submit and wait. `-` reads standard input. |
+| `get ID`, `wait ID` | Fetch, or wait for, a record. |
+| `may ID OPERATION` | Prints the decision. Exit 0 only for `allow`. |
+| `attest ID [--export ZIP]` | The attestation chain, or the bundle. |
+| `respond QUESTION [--grounded]` | Ask the responder agent. |
+| `deliveries ID` | Webhook deliveries for a record. |
+| `webhook-verify --body F --signature H --secret S` | Check a captured delivery. |
+
+Every command takes `--json`. Exit codes: 0 done or allowed, 1 a finding that says no
+(failed run, decision other than allow, bad signature), 2 an error.

truthlock_io-0.1.0.dist-info/RECORD

@@ -0,0 +1,13 @@
+truthlock_io/__init__.py,sha256=XR-SlBPSAdJQk_6OQcfKwUjNfcIDluODPzuywUJqQ_Y,805
+truthlock_io/cli.py,sha256=0Qp1aEoBq6XPkckG9zYc54o6QZ7tMBuTuLTkDyy5F_4,8257
+truthlock_io/client.py,sha256=vXs0HiDWlD4FhpYJVcjFXMJG6BtdtWZcaMdODvs0bEM,9222
+truthlock_io/errors.py,sha256=kW_-oURDMRhNWMwy4FKLSW9lKzxdhAGd8jxQzyJBOV8,1396
+truthlock_io/models.py,sha256=_ZIvhNygZ_O4PH6jG5iJlYX9Wm25fA4C8sDdoVJ_nPM,3916
+truthlock_io/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+truthlock_io/webhooks.py,sha256=TnvvP1xMdeCdZLUeHNpRUs8Up1yQlNNxZ9db_z0YedQ,3375
+truthlock_io-0.1.0.dist-info/METADATA,sha256=x0rPe8rdHKedWtC3e0CEExOqzOUe6xkf_b4acH7C_yc,5350
+truthlock_io-0.1.0.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+truthlock_io-0.1.0.dist-info/entry_points.txt,sha256=cz1tEU5oeTUp9ObsJZTSRCxd5hbt6TimafsshVXXGLg,52
+truthlock_io-0.1.0.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+truthlock_io-0.1.0.dist-info/licenses/NOTICE,sha256=YJbbHW_jtH2T-q6HMAgIyENp7BIOX-5Xi9gcZkZKhGA,50
+truthlock_io-0.1.0.dist-info/RECORD,,

truthlock_io-0.1.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.32.4
+Root-Is-Purelib: true
+Tag: py3-none-any

truthlock_io-0.1.0.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+truthlock = truthlock_io.cli:main

truthlock_io-0.1.0.dist-info/licenses/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

truthlock_io-0.1.0.dist-info/licenses/NOTICE

@@ -0,0 +1,2 @@
+TruthLock SDK
+Copyright 2026 Iron Rod Systems LLC