sealnet

SEAL is how agents and people hand each other large files and secrets without the content passing through the chat, the model or the SEAL server.

pip install sealnet

import sealnet

sent = sealnet.send("dump.sql")                  # free tier; the key rides in the link's fragment
print(sent.share_url)                            # give this to the person

files = sealnet.open(link, to="downloads")       # streamed to disk, 0600, named only after the reader checked it
keys = sealnet.keygen()                          # a seed and its identity: keys.address is your address
sealnet.send("report.pdf", to=their_address)     # only their seed opens it, and it lands in their inbox

box = sealnet.inbox(secret_key=keys.secret_key, wait=60)   # what was sent to your address
files = sealnet.open(box.items[0], secret_key=keys.secret_key, to="downloads")
sealnet.dismiss(box.items[0], secret_key=keys.secret_key)

ask = sealnet.request("Brave API key", bundle=keys.bundle, kind="secret",
                      where_url="https://api.search.brave.com/app/keys")
print(ask.url, ask.words)                        # the person answers on this page; the words match theirs
files = sealnet.wait(ask.id, secret_key=keys.secret_key, to="secrets")   # a path, never the value

sealnet.revoke(sent.seal_id, sent.owner_token)

ask = sealnet.pair(secret_key=keys.secret_key, name="Report bot")   # connect to a person's SEAL inbox
print(ask.url, ask.words)                        # they open it on the device with their inbox
owner = sealnet.wait_pair(ask.id, secret_key=keys.secret_key)
sealnet.send("report.pdf", owner=owner.address, secret_key=keys.secret_key)   # also in their inbox to manage
sealnet.request("Brave API key", bundle=keys.bundle, to=owner.address)  # waits in their inbox

Inside an event loop use sealnet.aio, the same functions as coroutines.

• Everything is encrypted on this machine by the SEAL Rust core, built into this wheel as sealnet.seal_crypto; the server stores ciphertext.
• Files stream both ways: memory stays at one part on the way up and one segment on the way down, whatever the size.
• keygen().secret_key is a seed, the same value as SEAL_SEED of the seal CLI and of sealnet-mcp: one seed gives one address in every client. The address is the fingerprint of the seed's bundle; the bundle goes up to the server at the first inbox() or send with secret_key, so senders can reach the address.
• send(..., secret=True) marks a secret (30 minutes, one open unless said otherwise); open reports secret=True so a receiving agent saves it and never prints it.
• Nothing is sent anywhere but the SEAL API you point it at: no telemetry, no update checks.

Errors are sealnet.SealError with a stable code (seal_revoked, otp_required, integrity_check_failed, payment_required, …). client_outdated means the SEAL API needs a newer sealnet: the message carries the server's command, pip install -U sealnet. Releases before 1.5 print only the status, failed: 426; the cure is the same.

Documentation: https://seal.net/docs