Metadata-Version: 2.4
Name: delegate-manifest
Version: 0.1.0
Summary: AgentPermissionManifest — typed permission middleware for LangGraph agents
License-File: LICENSE
Requires-Python: >=3.12
Requires-Dist: langchain-core>=0.3.83
Requires-Dist: langgraph>=0.5.4
Requires-Dist: pydantic>=2.12.5
Description-Content-Type: text/markdown

# 🛡️ Delegate Manifest

**Zero-Trust Permission Middleware for AI Agents.**

[![PyPI version](https://img.shields.io/pypi/v/delegate-manifest.svg)](https://pypi.org/project/delegate-manifest/)
[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)

**Delegate Manifest** is a framework-agnostic Python library that enforces explicit permission boundaries on AI agents. It was engineered to solve the **Agentic Latency Trap**: the friction and context loss caused by redirecting users to browsers for OAuth consent mid-execution.

By integrating this library with **Auth0 Token Vault** and **Auth0 CIBA**, developers can build agents that hold **zero credentials** and request high-stakes permissions via out-of-band push notifications (Auth0 Guardian) without ever breaking the LLM's context window.

---

## ✨ Key Features

- **Explicit Manifests:** Map agent tools to microscopic OAuth scopes and security classifications (`safe` vs `requires_stepup`).
- **LangGraph Integration:** Drop-in replacement for the standard `ToolNode` with `ManifestToolNode`.
- **Runtime Kill-Switch:** Tools can be disabled in memory instantly; the middleware hard-interrupts the agent before any Auth0 or API calls are made.
- **Forensic Audit Log:** Every action emits a SHA-256 chained receipt (Witness Pattern), creating a tamper-evident cryptographic trail.
- **Framework Agnostic:** Decoupled from FastAPI; uses a `broadcast_fn` pattern to pipe events to SSE, WebSockets, or internal logs.

---

## 📦 Installation

```bash
pip install delegate-manifest
```
