delegate-manifest 0.1.0

AgentPermissionManifest — typed permission middleware for LangGraph agents

🛡️ Delegate Manifest

Zero-Trust Permission Middleware for AI Agents.

Delegate Manifest is a framework-agnostic Python library that enforces explicit permission boundaries on AI agents. It was engineered to solve the Agentic Latency Trap: the friction and context loss caused by redirecting users to browsers for OAuth consent mid-execution.

By integrating this library with Auth0 Token Vault and Auth0 CIBA, developers can build agents that hold zero credentials and request high-stakes permissions via out-of-band push notifications (Auth0 Guardian) without ever breaking the LLM's context window.

---

✨ Key Features

• Explicit Manifests: Map agent tools to microscopic OAuth scopes and security classifications (safe vs requires_stepup).
• LangGraph Integration: Drop-in replacement for the standard ToolNode with ManifestToolNode.
• Runtime Kill-Switch: Tools can be disabled in memory instantly; the middleware hard-interrupts the agent before any Auth0 or API calls are made.
• Forensic Audit Log: Every action emits a SHA-256 chained receipt (Witness Pattern), creating a tamper-evident cryptographic trail.
• Framework Agnostic: Decoupled from FastAPI; uses a broadcast_fn pattern to pipe events to SSE, WebSockets, or internal logs.

---

📦 Installation

pip install delegate-manifest