tking/fastapi-gsap
SHA256
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Python GSAP broker reference implementation
10 commits 2 branches 3 tags 31 MiB
Python 99.8%
Dockerfile 0.2%
Find a file
Tyler King f7c49387c1 feat: absorb llm-principal-broker as gsap_broker/delegations/ 
Merges the standalone llm-principal-broker (1,132 LOC) into fastapi-gsap
as an in-process module. The previous architecture had two FastAPI
processes where the broker called GSAP over HTTP on every delegation
creation; now the lifecycle code uses GSAP's own async DB engine
directly and inserts AuthorizationContextDB rows in the same
transaction context.

New module: gsap_broker/delegations/
  models.py             Pydantic request/response shapes
  storage.py            DelegationDB SQLModel sharing the GSAP engine
  lifecycle.py          DelegationManager — in-process AC issuance via
                        AuthorizationContextDB.insert (no HTTP self-call)
  cleanup.py            30s background task for stale delegations
  router.py             /delegations/* FastAPI router (4 endpoints)
  registrars/
    base.py             AgentRegistrar Protocol + AgentCredentials
    stub.py             dev-mode no-op
    keycloak.py         Keycloak Admin REST API
    entra.py            Microsoft Entra Agent ID via Graph (lazy import)
    factory.py          driver selection (auto/stub/keycloak/entra)

Wiring:
  app.py mounts the delegations router and starts the cleanup task in
  the existing lifespan context manager.
  settings.py absorbs the keycloak_admin_*, entra_*, and
  agent_registrar fields from the old broker's settings.
  pyproject.toml adds an optional `entra` extra for the msal dep.

Behaviour preservation:
  - Endpoints kept identical: POST /, POST /{id}/revoke, GET /{id}, GET /
  - Chronicle event codes preserved: 0x3001 / 0x3003 / 0x3004
  - DelegationScope defaults unchanged (max_ttl_minutes=60, max_commands=500)
  - Capability ceiling -> capability_mask conversion documented inline

Smoke test: `python -c "from gsap_broker.app import app"` loads cleanly
with 26 routes including the four /delegations/ endpoints.

The standalone llm-principal-broker repo is archived to
~/projects/archive/llm-principal-broker.

Signed-off-by: Tyler King <tking@guildhouse.dev>
2026-04-08 13:37:06 -04:00
gsap_broker feat: absorb llm-principal-broker as gsap_broker/delegations/ 2026-04-08 13:37:06 -04:00
tests feat: governed function runtime + billing drain 2026-03-30 22:12:29 -04:00
.gitignore feat: fastapi-gsap — lightweight GSAP broker PoC 2026-03-30 14:10:21 -04:00
Dockerfile feat: fastapi-gsap — lightweight GSAP broker PoC 2026-03-30 14:10:21 -04:00
pyproject.toml feat: absorb llm-principal-broker as gsap_broker/delegations/ 2026-04-08 13:37:06 -04:00
README.md Initial commit 2026-03-30 18:03:34 +00:00
requirements.txt feat: fastapi-gsap — lightweight GSAP broker PoC 2026-03-30 14:10:21 -04:00
uv.lock feat: governed connector module 2026-03-30 16:42:38 -04:00

README.md

fastapi-gsap

Lightweight FastAPI reference implementation of the GSAP broker (GCAP-SPEC-SHELLBOUND-BROKER-0001)