fix(api): return kind and observability grants from TokenVerifier.verify

Author: RaphaelFakhri

livekit-api/livekit/api/access_token.py

@@ -322,12 +322,23 @@ def verify(self, token: str, *, verify_signature: bool = True) -> Claims:
         }
         inference = InferenceGrants(**inference_dict)
 
+        observability_dict = claims.get("observability", dict())
+        observability_dict = {camel_to_snake(k): v for k, v in observability_dict.items()}
+        observability_dict = {
+            k: v
+            for k, v in observability_dict.items()
+            if k in ObservabilityGrants.__dataclass_fields__
+        }
+        observability = ObservabilityGrants(**observability_dict)
+
         grant_claims = Claims(
             identity=claims.get("sub", ""),
             name=claims.get("name", ""),
+            kind=claims.get("kind", ""),
             video=video,
             sip=sip,
             inference=inference,
+            observability=observability,
             attributes=claims.get("attributes", {}),
             metadata=claims.get("metadata", ""),
             sha256=claims.get("sha256", ""),

tests/api/test_access_token.py

@@ -12,6 +12,7 @@
     TokenVerifier,
     VideoGrants,
 )
+from livekit.api.access_token import ObservabilityGrants
 from livekit.protocol.room import RoomConfiguration
 from livekit.protocol.agent_dispatch import RoomAgentDispatch
 
@@ -157,3 +158,18 @@ def test_verify_token_missing_exp() -> None:
     token_verifier = TokenVerifier(TEST_API_KEY, TEST_API_SECRET)
     with pytest.raises(Exception):
         token_verifier.verify(token)
+
+
+def test_verify_token_preserves_kind_and_observability() -> None:
+    token = (
+        AccessToken(TEST_API_KEY, TEST_API_SECRET)
+        .with_identity("test_identity")
+        .with_kind("agent")
+        .with_observability_grants(ObservabilityGrants(write=True))
+        .to_jwt()
+    )
+
+    claims = TokenVerifier(TEST_API_KEY, TEST_API_SECRET).verify(token)
+    assert claims.kind == "agent"
+    assert claims.observability is not None
+    assert claims.observability.write is True