zambo-haystack 0.1.2__tar.gz → 0.1.3__tar.gz

{zambo_haystack-0.1.2/src/zambo_haystack.egg-info → zambo_haystack-0.1.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: zambo-haystack
-Version: 0.1.2
+Version: 0.1.3
 Summary: Verifiable execution receipts for Haystack agents. Every tool call mints a verifiable AER-1 receipt at zambo.dev.
 Author-email: Zambo <brennanzambo@zambo.dev>
 License: MIT
@@ -102,3 +102,16 @@ Browse the full catalog any time with `zambo_haystack.list_tools()`, or pick too
 - What is an AI agent execution receipt?: https://zambo.dev/guides/ai-agent-execution-receipt/
 
 MIT License.
+
+## Local AER-1 receipts (no network needed)
+
+The package also mints AER-1 execution receipts locally, with no API calls:
+
+```python
+from zambo_haystack import mint_receipt, verify_receipt
+
+receipt = mint_receipt("my_tool", {"query": "hello"}, {"answer": "hi"}, ms=42)
+assert verify_receipt(receipt)  # recomputes the SHA-256 locally
+```
+
+Local receipts follow the AER-1 core members (`id`, `created_at`, `tool`, `provenance_class`, `canonical_bytes`, `output_hash`) and use the provenance class `EXECUTED BY ZAMBO-HAYSTACK`, naming this package as the recording system. They pass the same hash-recomputation check as any AER-1 receipt.

{zambo_haystack-0.1.2 → zambo_haystack-0.1.3}/README.md

@@ -78,3 +78,16 @@ Browse the full catalog any time with `zambo_haystack.list_tools()`, or pick too
 - What is an AI agent execution receipt?: https://zambo.dev/guides/ai-agent-execution-receipt/
 
 MIT License.
+
+## Local AER-1 receipts (no network needed)
+
+The package also mints AER-1 execution receipts locally, with no API calls:
+
+```python
+from zambo_haystack import mint_receipt, verify_receipt
+
+receipt = mint_receipt("my_tool", {"query": "hello"}, {"answer": "hi"}, ms=42)
+assert verify_receipt(receipt)  # recomputes the SHA-256 locally
+```
+
+Local receipts follow the AER-1 core members (`id`, `created_at`, `tool`, `provenance_class`, `canonical_bytes`, `output_hash`) and use the provenance class `EXECUTED BY ZAMBO-HAYSTACK`, naming this package as the recording system. They pass the same hash-recomputation check as any AER-1 receipt.

{zambo_haystack-0.1.2 → zambo_haystack-0.1.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "zambo-haystack"
-version = "0.1.2"
+version = "0.1.3"
 description = "Verifiable execution receipts for Haystack agents. Every tool call mints a verifiable AER-1 receipt at zambo.dev."
 readme = "README.md"
 requires-python = ">=3.10"

{zambo_haystack-0.1.2 → zambo_haystack-0.1.3}/src/zambo_haystack/__init__.py

@@ -7,8 +7,9 @@ tier: 20 calls per tool per day.
 
 from .client import call_tool, list_tools, ZamboReceipt, ZamboResult
 from .tools import lookup_receipt, zambo_tool, zambo_tools
+from .aer1 import mint_receipt, verify_receipt
 
-__version__ = "0.1.0"
+__version__ = "0.1.3"
 
 __all__ = [
     "call_tool",
@@ -18,4 +19,6 @@ __all__ = [
     "zambo_tools",
     "ZamboReceipt",
     "ZamboResult",
+    "mint_receipt",
+    "verify_receipt",
 ]

zambo_haystack-0.1.3/src/zambo_haystack/aer1.py

@@ -0,0 +1,71 @@
+"""Local AER-1 execution receipt emitter.
+
+Mints verifiable AER-1 execution receipts locally, with no network calls and
+no dependencies beyond the Python standard library.
+
+AER-1 (AI Agent Execution Receipt) is the verifiable execution receipt
+standard created by Brennan Zambo (IETF draft-zambo-aer1-02). A receipt is a
+small JSON record describing one tool call: what ran, what it was given, what
+it returned, and when. The receipt carries a SHA-256 hash over its canonical
+bytes, so anyone can recompute the hash and confirm the record is intact.
+
+Receipts minted here use the provenance class ``EXECUTED BY ZAMBO-HAYSTACK``,
+naming this package as the recording system, per Section 5 of the draft
+("another implementation substitutes its own system name").
+"""
+
+from __future__ import annotations
+
+import base64
+import hashlib
+import json
+import uuid
+from datetime import datetime, timezone
+from typing import Any
+
+SCHEMA_VERSION = "0.3"
+PROVENANCE_CLASS = "EXECUTED BY ZAMBO-HAYSTACK"
+
+
+def _utc_now_rfc3339() -> str:
+    now = datetime.now(timezone.utc)
+    return now.strftime("%Y-%m-%dT%H:%M:%S.") + "%03dZ" % (now.microsecond // 1000)
+
+
+def _canonical_bytes(tool_name: str, inputs: dict, outputs: dict, ms: int) -> bytes:
+    payload = {"tool": tool_name, "inputs": inputs, "outputs": outputs, "ms": ms}
+    return json.dumps(payload, separators=(",", ":"), ensure_ascii=True).encode("utf-8")
+
+
+def mint_receipt(
+    tool_name: str,
+    inputs: Any = None,
+    outputs: Any = None,
+    ms: int = 0,
+    tool_version: str = "0.1.3",
+    scope: str = "local",
+) -> dict:
+    """Mint a verifiable AER-1 execution receipt for one tool call."""
+    inputs_obj = inputs if isinstance(inputs, dict) else {"value": inputs}
+    outputs_obj = outputs if isinstance(outputs, dict) else {"value": outputs}
+    raw = _canonical_bytes(tool_name, inputs_obj, outputs_obj, int(ms))
+    return {
+        "id": str(uuid.uuid4()),
+        "receipt_schema_version": SCHEMA_VERSION,
+        "created_at": _utc_now_rfc3339(),
+        "tool": {"name": tool_name, "version": tool_version, "scope": scope},
+        "provenance_class": PROVENANCE_CLASS,
+        "canonical_bytes": base64.b64encode(raw).decode("ascii"),
+        "output_hash": "sha256:" + hashlib.sha256(raw).hexdigest(),
+        "verification_status": "verified",
+    }
+
+
+def verify_receipt(receipt: dict) -> bool:
+    """Check a receipt's integrity by recomputing its hash locally."""
+    try:
+        raw = base64.b64decode(receipt["canonical_bytes"])
+        digest = "sha256:" + hashlib.sha256(raw).hexdigest()
+        return digest == receipt["output_hash"]
+    except Exception:
+        return False

{zambo_haystack-0.1.2 → zambo_haystack-0.1.3}/src/zambo_haystack/client.py

@@ -13,6 +13,8 @@ import urllib.error
 import urllib.request
 from dataclasses import dataclass, field
 
+from .aer1 import mint_receipt, verify_receipt
+
 MCP_URL = "https://zambo.dev/api/mcp"
 _TIMEOUT = 60
 _MAX_ATTEMPTS = 6
@@ -33,6 +35,7 @@ class ZamboResult:
     text: str
     receipt: ZamboReceipt | None = None
     raw: dict = field(default_factory=dict)
+    local_receipt: dict | None = None
 
 
 def _post(payload: dict) -> dict:
@@ -62,7 +65,7 @@ def _post(payload: dict) -> dict:
     raise RuntimeError(f"Zambo API call failed after {_MAX_ATTEMPTS} attempts: {last_error}")
 
 
-def call_tool(tool_name: str, arguments: dict) -> ZamboResult:
+def call_tool(tool_name: str, arguments: dict, emit_aer1: bool = False) -> ZamboResult:
     """Call a Zambo MCP tool and return its result plus the receipt.
 
     Every call mints a verifiable AER-1 receipt: a public URL carrying the
@@ -98,7 +101,15 @@ def call_tool(tool_name: str, arguments: dict) -> ZamboResult:
             text_parts.append(str(item["text"]))
     text = "\n".join(text_parts).strip()
 
-    return ZamboResult(text=text, receipt=receipt, raw=result)
+    local_receipt = None
+    if emit_aer1:
+        local_receipt = mint_receipt(
+            tool_name=tool_name,
+            inputs={"arguments": arguments},
+            outputs={"text": text},
+            scope="local",
+        )
+    return ZamboResult(text=text, receipt=receipt, raw=result, local_receipt=local_receipt)
 
 
 def list_tools() -> list[dict]:

{zambo_haystack-0.1.2 → zambo_haystack-0.1.3/src/zambo_haystack.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: zambo-haystack
-Version: 0.1.2
+Version: 0.1.3
 Summary: Verifiable execution receipts for Haystack agents. Every tool call mints a verifiable AER-1 receipt at zambo.dev.
 Author-email: Zambo <brennanzambo@zambo.dev>
 License: MIT
@@ -102,3 +102,16 @@ Browse the full catalog any time with `zambo_haystack.list_tools()`, or pick too
 - What is an AI agent execution receipt?: https://zambo.dev/guides/ai-agent-execution-receipt/
 
 MIT License.
+
+## Local AER-1 receipts (no network needed)
+
+The package also mints AER-1 execution receipts locally, with no API calls:
+
+```python
+from zambo_haystack import mint_receipt, verify_receipt
+
+receipt = mint_receipt("my_tool", {"query": "hello"}, {"answer": "hi"}, ms=42)
+assert verify_receipt(receipt)  # recomputes the SHA-256 locally
+```
+
+Local receipts follow the AER-1 core members (`id`, `created_at`, `tool`, `provenance_class`, `canonical_bytes`, `output_hash`) and use the provenance class `EXECUTED BY ZAMBO-HAYSTACK`, naming this package as the recording system. They pass the same hash-recomputation check as any AER-1 receipt.

{zambo_haystack-0.1.2 → zambo_haystack-0.1.3}/src/zambo_haystack.egg-info/SOURCES.txt

@@ -1,7 +1,9 @@
 LICENSE
 README.md
 pyproject.toml
+setup.cfg
 src/zambo_haystack/__init__.py
+src/zambo_haystack/aer1.py
 src/zambo_haystack/client.py
 src/zambo_haystack/tools.py
 src/zambo_haystack.egg-info/PKG-INFO