Metadata-Version: 2.5
Name: agentgov-core
Version: 0.10.0
Summary: Shared invoke-boundary core for agent-governance-demo: host adapters, entitlement/policy resolution, the governance envelope, and the registry Postgres schema. Published to PyPI via OIDC Trusted Publishing (.github/workflows/publish.yml) and installed into registry-api/workflows images.
Author-email: "receptor.bio" <oss@receptor.bio>
License: Apache-2.0
Requires-Python: >=3.10
Requires-Dist: botocore
Requires-Dist: cryptography
Requires-Dist: fastapi
Requires-Dist: httpx
Requires-Dist: psycopg[binary]
Requires-Dist: pyjwt
Provides-Extra: llm-judge
Requires-Dist: anthropic; extra == 'llm-judge'
Requires-Dist: deepeval; extra == 'llm-judge'
Description-Content-Type: text/markdown

# agentgov-core

Shared invoke-boundary core for [`agent-governance-demo`](https://github.com/receptor-bio/agent-governance-demo):
per-platform host adapters (`hosts/`), the governance envelope (`envelope.py`), entitlement/policy
resolution (`openfga.py`, `cedar.py`), the registry Postgres access layer + schema (`db.py`,
`schema.sql`), and the shared URN/tuple helpers (`urns.py`, `tuples.py`) that `registry-api` and
`services/workflows` both consume — replacing the `sys.path` trick `services/workflows/activities.py`
previously used to reach `registry-api`'s app code directly.

**Published to PyPI** (`pip install agentgov-core`) via OIDC Trusted Publishing
(`.github/workflows/publish.yml`, triggered by an `agentgov-core-v*` tag) — the same pattern
`receptor-bio/axiom-sc` uses. `packages/agentgov-core/pyproject.toml`'s `version` is the source of
truth; a tag must match it exactly or `publish.yml` fails its sanity check. Consuming Dockerfiles
(`services/registry-api/Dockerfile`, `services/workflows/Dockerfile`) `pip install` the published
wheel directly (no local wheel build); local dev installs the same way (`pip install -e
packages/agentgov-core`).

Not a general-purpose library: this package's boundary is driven entirely by what
`services/workflows/activities.py` and `services/registry-api/app/` actually import, not by any
external API-design goal.
