Metadata-Version: 2.4
Name: ory-agent-framework
Version: 0.11.1
Summary: Ory Agent Security for the Microsoft Agent Framework — per-tool authorization, tracing, and identity propagation via function middleware. Built on ory-argus.
Author: Ory
License-Expression: Apache-2.0
Keywords: agent,agent-framework,ai,authorization,autogen,microsoft,ory
Requires-Python: >=3.10
Requires-Dist: agent-framework>=0.0.0a1
Requires-Dist: ory-argus<1,>=0.8
Provides-Extra: dev
Requires-Dist: pytest>=8; extra == 'dev'
Requires-Dist: ruff>=0.6; extra == 'dev'
Description-Content-Type: text/markdown

# ory-agent-framework

Ory Agent Security for the [Microsoft Agent Framework](https://learn.microsoft.com/agent-framework/)
(the successor to AutoGen + Semantic Kernel).

Gates every function/tool call through Ory Permissions via **function middleware**, traces
invocations, and propagates the user → agent identity — built on
[`ory-argus`](https://pypi.org/project/ory-argus/).

```bash
pip install ory-agent-framework
```

```python
from ory_agent_framework import ory_function_middleware

agent = chat_client.create_agent(
    instructions="…",
    tools=[search, send_email],
    middleware=[ory_function_middleware()],
)
```

In **enforce** mode (`ORY_PERMISSION_MODE=enforce`) a denied call sets the result to the
denial and terminates without invoking the function. In **observe** mode (default) the
function runs and a `permission.observe_deny` span is recorded.

Credentials come from the shared `~/.config/ory-agent-plugins/config.json`.
