agent-engine-runner-shared 0.11.10__tar.gz → 0.11.11__tar.gz

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/CHANGELOG.md

@@ -7,7 +7,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Removed
+- Removed the unused pre-materialized connector bundle override
+  (`AGENTIC_CONNECTOR_BUNDLE_PATH`) and the `load_connector_bundle` /
+  `CONNECTOR_BUNDLE_PATH_ENV` exports. Connectors resolve only from
+  `agent.yaml` and its local connector authoring files.
+
 ### Changed
+- Remote MCP servers now use MCP Python SDK 2.x (`mcp==2.3.0`). Each call
+  negotiates the protocol automatically: it probes `server/discover` and falls
+  back to the legacy `initialize` handshake, so servers on `2025-11-25` and
+  older keep working while `2026-07-28` servers are reached directly. Tool
+  result content keeps its wire field names (`mimeType`, `readOnlyHint`) and
+  failed HTTP calls keep reporting their status in error messages. OAuth caches
+  written by the previous SDK still load; new entries record the authorization
+  server's `issuer` when it provides one.
 - Reuse a process-wide keep-alive mTLS client for OE callbacks (tool
   execute/result, node events, progress and custom events) and drain callback
   response bodies so connections return to the pool; removes a full TLS

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/Makefile

@@ -13,6 +13,16 @@ PYDOC_MARKDOWN := uv tool run --from 'pydoc-markdown>=4.8' pydoc-markdown
 # pydoc-markdown emits trailing spaces on blank lines and an extra trailing
 # blank line; strip both so docs-check only fails on content changes.
 NORMALIZE_DOCS := perl -0pe 's/[^\S\n]+$$//mg; s/\n+\z/\n/'
+# ruff formats the Python inside Markdown fences, so the generated reference has
+# to go through it too. Without this stage the pre-commit ruff-format hook
+# rewrites api.md and docs-check then fails on the unformatted generator output.
+# Ruff runs from the uv workspace root so it resolves from the workspace lock,
+# the same version the hook and CI pin.
+# $(CURDIR) rather than $(abspath ...): abspath splits its argument on
+# whitespace, so a checkout whose path contains a space would break. Both paths
+# are quoted at the point of use for the same reason.
+PYTHON_WORKSPACE := $(CURDIR)/../..
+FORMAT_DOCS := uv run --directory "$(PYTHON_WORKSPACE)" ruff format --stdin-filename "$(CURDIR)/docs/api.md" -
 
 # Output path for the generated reference. Defaults to the committed file;
 # override (e.g. DOCS_OUT=/tmp/api.md) to generate elsewhere without clobbering
@@ -21,11 +31,11 @@ DOCS_OUT ?= docs/api.md
 
 # Regenerate API reference from docstrings.
 docs:
-	$(PYDOC_MARKDOWN) pydoc-markdown.yml | $(NORMALIZE_DOCS) > $(DOCS_OUT)
+	$(PYDOC_MARKDOWN) pydoc-markdown.yml | $(NORMALIZE_DOCS) | $(FORMAT_DOCS) > $(DOCS_OUT)
 
 # CI: fail if docs/api.md is stale.
 docs-check:
-	@$(PYDOC_MARKDOWN) pydoc-markdown.yml | $(NORMALIZE_DOCS) > /tmp/api-docs-check.md
+	@$(PYDOC_MARKDOWN) pydoc-markdown.yml | $(NORMALIZE_DOCS) | $(FORMAT_DOCS) > /tmp/api-docs-check.md
 	@diff -u docs/api.md /tmp/api-docs-check.md || { \
 		echo ""; \
 		echo "ERROR: docs/api.md is stale. Run 'make docs' to regenerate."; \

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/PKG-INFO

@@ -1,18 +1,19 @@
 Metadata-Version: 2.5
 Name: agent-engine-runner-shared
-Version: 0.11.10
+Version: 0.11.11
 Summary: Runner SDK - Framework-agnostic agent runtime
 License: Apache-2.0
 License-File: LICENSE
 Requires-Python: >=3.11
-Requires-Dist: agent-engine-sdk-memory==0.11.10
-Requires-Dist: agent-engine-sdk==0.11.10
+Requires-Dist: agent-engine-sdk-memory==0.11.11
+Requires-Dist: agent-engine-sdk==0.11.11
 Requires-Dist: fastapi>=0.141.1
 Requires-Dist: filelock>=3.0.0
 Requires-Dist: httpx-sse>=0.4.0
+Requires-Dist: httpx2>=2.5.0
 Requires-Dist: httpx>=0.27.0
 Requires-Dist: jsonschema>=4.26.0
-Requires-Dist: mcp==1.27.0
+Requires-Dist: mcp==2.3.0
 Requires-Dist: msgpack>=1.0.0
 Requires-Dist: protobuf<7,>=6.33.6
 Requires-Dist: pydantic>=2.0.0

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/docs/api.md

@@ -6,6 +6,8 @@
     * [agent\_config](#agent_engine_runner_shared.runtime.TenantRuntime.agent_config)
     * [memory\_enabled](#agent_engine_runner_shared.runtime.TenantRuntime.memory_enabled)
     * [get\_agent](#agent_engine_runner_shared.runtime.TenantRuntime.get_agent)
+    * [build\_graph](#agent_engine_runner_shared.runtime.TenantRuntime.build_graph)
+    * [uses\_per\_invocation\_build](#agent_engine_runner_shared.runtime.TenantRuntime.uses_per_invocation_build)
     * [warm\_up\_agent](#agent_engine_runner_shared.runtime.TenantRuntime.warm_up_agent)
     * [memory\_engine](#agent_engine_runner_shared.runtime.TenantRuntime.memory_engine)
     * [memory\_writer](#agent_engine_runner_shared.runtime.TenantRuntime.memory_writer)
@@ -347,7 +349,9 @@ Return the resolved agent.yaml Memory feature setting.
 #### get\_agent
 
 ```python
-def get_agent(callbacks: List[Any] | None = None) -> BaseAgent
+def get_agent(callbacks: List[Any] | None = None,
+              *,
+              graph: Any = None) -> BaseAgent
 ```
 
 Get a BaseAgent instance from the registered App.
@@ -359,6 +363,9 @@ framework-specific graph building and callback adaptation.
 
 - `callbacks` - Framework-neutral callbacks for observability
   (e.g., NodeExecutionLogger)
+- `graph` - A graph already built by ``build_graph`` for this
+  invocation (a per-execution agent). Only forwarded when
+  present, so an App that does not accept it keeps working.
 
 
 **Returns**:
@@ -370,6 +377,37 @@ framework-specific graph building and callback adaptation.
 
 - `RuntimeError` - If no App has been registered via register_and_run()
 
+<a id="agent_engine_runner_shared.runtime.TenantRuntime.build_graph"></a>
+
+#### build\_graph
+
+```python
+async def build_graph(agent_input: Any = None, ctx: Any = None) -> Any
+```
+
+Build the graph for this invocation before ``get_agent``.
+
+The AER awaits this so a per-execution agent's builder -- which may do
+its own async I/O -- runs off the build path. Returns ``None`` when the
+registered App declares no per-execution build (every global agent),
+which tells the caller to use the cached build path unchanged. A
+context-free discovery call passes ``(None, None)``.
+
+<a id="agent_engine_runner_shared.runtime.TenantRuntime.uses_per_invocation_build"></a>
+
+#### uses\_per\_invocation\_build
+
+```python
+def uses_per_invocation_build() -> bool
+```
+
+Whether the registered App builds its graph per invocation.
+
+True only for an App that opted into ``load_strategy="per-execution"``.
+The Tool Pod reads this to decide whether a failed context-free
+discovery build should keep the registrations the builder made before
+it raised, rather than discarding them.
+
 <a id="agent_engine_runner_shared.runtime.TenantRuntime.warm_up_agent"></a>
 
 #### warm\_up\_agent

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "agent-engine-runner-shared"
-version = "0.11.10"
+version = "0.11.11"
 description = "Runner SDK - Framework-agnostic agent runtime"
 readme = "README.md"
 license = {text = "Apache-2.0"}
@@ -18,16 +18,18 @@ dependencies = [
     "pydantic>=2.0.0",
     "protobuf>=6.33.6,<7",
     "httpx>=0.27.0",
+    # MCP 2.x talks httpx2; the two clients install side by side.
+    "httpx2>=2.5.0",
     "httpx-sse>=0.4.0",
-    "mcp==1.27.0",
+    "mcp==2.3.0",
     "python-dotenv>=1.0.0",
     "PyYAML>=6.0",
     "jsonschema>=4.26.0",
     "sentry-sdk>=2.27.0",
     # BaseAgent protocol and AgentInput/AgentEvent models
-    "agent-engine-sdk==0.11.10",
+    "agent-engine-sdk==0.11.11",
     # Memory models and the MemoryClient HTTP client
-    "agent-engine-sdk-memory==0.11.10",
+    "agent-engine-sdk-memory==0.11.11",
     # Required for checkpoint message decoding (query/sessions endpoints)
     "msgpack>=1.0.0",
     # Required by guardrails_evaluator/regex.py for advanced regex matching

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/src/agent_engine_runner_shared/connectors/README.md

@@ -5,20 +5,17 @@ opt-in registration. It is not exposed through the CLI. Connector tools use the
 AER → OE → Tool Pod execution path.
 
 Runtime integration follows the platform's config → discover → register flow: each
-process derives its own view from the same manifest. Resolution order in
+process derives its own view from the same manifest. Resolution in
 `resolve_runtime_bundle`:
 
-1. A pre-materialized bundle published by the platform build, located via the
-   platform-owned `AGENTIC_CONNECTOR_BUNDLE_PATH` environment variable (the
-   deployment contract for hosted builds).
-2. Otherwise, the `connectors` entries in `agent.yaml` are materialized in memory at
+1. The `connectors` entries in `agent.yaml` are materialized in memory at
    startup: each entry names a `tool.yaml` (resolved relative to `agent.yaml`) that
    selects operations from a local catalog file (resolved relative to the
    `tool.yaml`, contained within the agent workspace) and binds the endpoint and
    credential environment reference. Catalogs are local files only — HTTPS catalog
    references fail; there is no network fetch.
-3. With neither configured, loading is an immediate no-op without filesystem or
-   network access.
+2. With no connectors configured, loading is an immediate no-op without filesystem
+   or network access.
 
 ```yaml
 version: 1
@@ -61,9 +58,8 @@ Existing static auth modes continue to use their configured environment bindings
 Catalog regeneration preserves the authored OAuth binding and records only
 secret-free Bearer presentation in the catalog.
 
-The pre-materialized index paths are relative to the index and must remain inside its
-directory. AER loads the schemas as ordinary remote tools. Tool Pod startup loads the
-same materialized view and owns one `ConnectorExecutor` per connector.
+AER loads the materialized schemas as ordinary remote tools. Tool Pod startup
+materializes the same view and owns one `ConnectorExecutor` per connector.
 
 `load_tool_defs(path)` reads a local compiled YAML artifact into `ToolDefinitions`.
 `tool_schemas()` returns detached name, description and `inputSchema` dictionaries.

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/src/agent_engine_runner_shared/connectors/__init__.py

@@ -1,12 +1,10 @@
-"""Compiled OpenAPI connector core, bundle loading, and authoring materialization."""
+"""Compiled OpenAPI connector core and authoring materialization."""
 
 from agent_engine_runner_shared.connectors.bundle import (
-    CONNECTOR_BUNDLE_PATH_ENV,
     BundledConnector,
     BundledTool,
     ConnectorBundle,
     ConnectorBundleError,
-    load_connector_bundle,
 )
 from agent_engine_runner_shared.connectors.definitions import (
     Auth,
@@ -33,7 +31,6 @@ from agent_engine_runner_shared.connectors.runtime import (
 )
 
 __all__ = [
-    "CONNECTOR_BUNDLE_PATH_ENV",
     "BundledConnector",
     "BundledTool",
     "CompileResult",
@@ -48,7 +45,6 @@ __all__ = [
     "Auth",
     "ToolDefinitions",
     "compile_catalog",
-    "load_connector_bundle",
     "load_tool_defs",
     "materialize_connectors",
     "regenerate_catalog",

agent_engine_runner_shared-0.11.11/src/agent_engine_runner_shared/connectors/bundle.py

@@ -0,0 +1,93 @@
+"""Validated runtime views shared by AER and Tool Pod connector registration.
+
+The authoring materializer builds these objects from ``agent.yaml``,
+``tool.yaml``, and the local compiled catalog. AER consumes each tool's schema
+and registration metadata; Tool Pod consumes the same views to bind executor
+callables. Nothing here reads files or performs I/O.
+"""
+
+from __future__ import annotations
+
+from dataclasses import dataclass
+from typing import Any
+from urllib.parse import urlsplit
+
+from agent_engine_runner_shared.connectors.definitions import (
+    Operation,
+    ToolDefinitions,
+)
+from agent_engine_runner_shared.connectors.executor import DEFAULT_EXECUTION_TIMEOUT_SECONDS
+
+__all__ = [
+    "BundledConnector",
+    "BundledTool",
+    "ConnectorBundle",
+    "ConnectorBundleError",
+]
+
+
+class ConnectorBundleError(ValueError):
+    """Raised when a connector bundle cannot be registered safely."""
+
+
+@dataclass(frozen=True)
+class BundledConnector:
+    """One validated compiled connector from the materialized runtime view."""
+
+    name: str
+    definitions: ToolDefinitions
+
+
+@dataclass(frozen=True)
+class BundledTool:
+    """One operation and the connector definitions needed to execute it."""
+
+    connector: BundledConnector
+    operation: Operation
+
+    @property
+    def schema(self) -> dict[str, Any]:
+        """Return a detached SDK-visible schema."""
+        return self.operation.model_dump(include={"name", "description", "inputSchema"})
+
+    @property
+    def network(self) -> list[str]:
+        """Return the single outbound host declared by this connector."""
+        hostname = urlsplit(self.connector.definitions.source.base_url).hostname
+        assert hostname is not None  # ToolDefinitions validated the URL.
+        return [hostname]
+
+    @property
+    def registration_metadata(self) -> dict[str, Any]:
+        """Return detached AER/Tool Pod policy, with delegated binding outside the schema."""
+        operation = self.operation
+        auth = self.connector.definitions.auth
+        delegated = auth if auth is not None and auth.type == "oauth" else None
+        return {
+            "name": operation.name,
+            "description": operation.description.strip() or f"REST connector tool {operation.name}",
+            "is_local": False,
+            "provider_type": delegated.provider_type if delegated else None,
+            "scopes": list(delegated.scopes) if delegated else [],
+            "network": self.network,
+            "timeout_seconds": DEFAULT_EXECUTION_TIMEOUT_SECONDS,
+            "redact_fields": [],
+            "connector": self.connector.name,
+        }
+
+
+@dataclass(frozen=True)
+class ConnectorBundle:
+    """Fully validated runtime bundle shared by AER and Tool Pod startup."""
+
+    connectors: tuple[BundledConnector, ...] = ()
+    tools: tuple[BundledTool, ...] = ()
+
+    def require_available_names(self, registered_names: set[str]) -> None:
+        """Reject all name collisions before a caller mutates its registry."""
+        collisions = sorted({tool.operation.name for tool in self.tools} & registered_names)
+        if collisions:
+            raise ConnectorBundleError(
+                "connector tool names collide with registered or reserved tools: "
+                + ", ".join(collisions)
+            )

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/src/agent_engine_runner_shared/connectors/create_tool.py

@@ -51,13 +51,20 @@ def _parser() -> argparse.ArgumentParser:
     parser.add_argument("--base-url", help="Tenant API base URL recorded in the authoring file")
     parser.add_argument(
         "--auth",
-        choices=("none", "bearer", "api_key"),
+        choices=("none", "bearer", "api_key", "oauth"),
         help="Credential presentation; the authority over the spec's own security schemes",
     )
     parser.add_argument(
         "--auth-env", help="Workspace secret environment reference for the credential"
     )
     parser.add_argument("--auth-header", help="Header name for API key credentials")
+    parser.add_argument(
+        "--provider-type",
+        help="Credential provider key registered in the project (with --auth oauth)",
+    )
+    parser.add_argument(
+        "--scopes", help="Comma-separated delegated OAuth scopes (with --auth oauth)"
+    )
     parser.add_argument("--allow", help="Comma-separated operation allow list (default: allow_all)")
     parser.add_argument(
         "--out-dir",
@@ -73,6 +80,17 @@ def _parser() -> argparse.ArgumentParser:
 
 
 def _auth(args: argparse.Namespace) -> Auth | None:
+    """Build the credential presentation the flags select, or None to let the
+    spec's own security schemes govern. Flag-combination refusals live here;
+    the shared ``Auth`` model validates the values themselves."""
+    if args.auth != "oauth" and (args.provider_type is not None or args.scopes is not None):
+        raise GenerateError("--provider-type and --scopes require --auth oauth")
+    if args.auth == "oauth":
+        if args.auth_env or args.auth_header:
+            raise GenerateError("--auth oauth cannot take --auth-env or --auth-header")
+        if not args.provider_type:
+            raise GenerateError("--auth oauth requires --provider-type")
+        return Auth(type="oauth", provider_type=args.provider_type, scopes=_scopes(args.scopes))
     if args.auth == "none":
         if args.auth_env or args.auth_header:
             raise GenerateError("--auth none cannot take --auth-env or --auth-header")
@@ -86,6 +104,17 @@ def _auth(args: argparse.Namespace) -> Auth | None:
     return Auth(type=args.auth, env=args.auth_env, header=args.auth_header)
 
 
+def _scopes(raw: str | None) -> list[str]:
+    """Split ``--scopes``; omitted means no scopes. An empty entry is refused
+    rather than dropped, so a typo cannot silently narrow the grant."""
+    if raw is None:
+        return []
+    scopes = [scope.strip() for scope in raw.split(",")]
+    if not all(scopes):
+        raise GenerateError("--scopes must not contain empty entries")
+    return scopes
+
+
 def _allow(raw: str | None) -> list[str] | None:
     if raw is None:
         return None
@@ -127,6 +156,8 @@ def main(argv: list[str] | None = None) -> int:
                 args.auth
                 or args.auth_env
                 or args.auth_header
+                or args.provider_type is not None
+                or args.scopes is not None
                 or args.allow is not None
                 or args.base_url
                 or args.name
@@ -134,8 +165,9 @@ def main(argv: list[str] | None = None) -> int:
             ):
                 raise GenerateError(
                     "--config regeneration preserves the authored settings from "
-                    "tool.yaml and writes beside it; --auth, --auth-env, "
-                    "--auth-header, --allow, --base-url, --name and --out-dir do not apply"
+                    "tool.yaml and writes beside it; --auth, --auth-env, --auth-header, "
+                    "--provider-type, --scopes, --allow, --base-url, --name and --out-dir "
+                    "do not apply"
                 )
             result = regenerate_catalog(args.config, skip_unsupported=args.skip_unsupported)
             written = [str(result.catalog)]

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/src/agent_engine_runner_shared/connectors/definitions.py

@@ -47,7 +47,7 @@ CONNECTOR_NAME_PATTERN = r"^[A-Za-z0-9_-]{1,64}$"
 
 
 def validate_connector_name(value: str) -> str:
-    """Connector names key connector identity and appear in bundle indexes."""
+    """Connector names key connector identity in runtime registration."""
     if re.fullmatch(r"[A-Za-z0-9_-]{1,64}", value) is None:
         raise ValueError(f"connector name must match {CONNECTOR_NAME_PATTERN}")
     return value

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/src/agent_engine_runner_shared/connectors/generate/README.md

@@ -187,7 +187,7 @@ concerns.
 
 ## Acceptance corpus
 
-`tests/corpus/manifest.json` pins 100 real-world APIs.guru documents by URL and SHA-256.
+`tests/corpus/manifest.json` pins 100 real-world APIs.guru documents by path and SHA-256 within one GitHub commit.
 The set contains 10,059 declared operations and requires at least 9,512 generated tools
 overall, at least 80% for every API, and named Pinecone data-plane operations. The
 current implementation produces 9,880 tools (98.22%) for the pinned inputs.

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/src/agent_engine_runner_shared/connectors/generate/authoring.py

@@ -136,7 +136,10 @@ def _guidance_comment(base_url: str, auth: Auth | None) -> str:
         lines.append(f"#   secret   grant {granted} to the tool sandbox under")
         lines.append("#            sandboxes.tool.secrets (sandboxes requires an agent block)")
     elif auth is not None and auth.type == "oauth":
-        lines.append("#   auth     delegated OAuth; configure the named provider for this project")
+        lines.append(
+            "#   auth     delegated OAuth; register a credential provider with provider "
+            f"type {_quote(auth.provider_type)} in this project"
+        )
         lines.append("#   secret   none required in the tool sandbox; tokens are request-local")
     else:
         lines.append("#   secret   none required; this connector authenticates anonymously")

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/src/agent_engine_runner_shared/connectors/generate/modes.py

@@ -8,6 +8,7 @@ coordinates the focused parser, compiler, and writer modules.
 
 from __future__ import annotations
 
+import difflib
 from dataclasses import dataclass
 from pathlib import Path
 from typing import Any, Sequence
@@ -39,6 +40,28 @@ from agent_engine_runner_shared.connectors.generate.spec import (
     _quote,
 )
 
+# Catalogs up to this size list every operation when an allow rule misses.
+_LISTED_OPERATIONS = 20
+
+
+def _unmatched_allow_error(unmatched: list[str], available: set[str]) -> GenerateError:
+    """Name the allow rules that match no operation and point at the fix.
+
+    Small catalogs list every operation. Large ones, which can run to
+    thousands of operations, report the count and the closest names, so a
+    typo does not flood the terminal.
+    """
+    if len(available) <= _LISTED_OPERATIONS:
+        hint = f"available: {sorted(available)}"
+    else:
+        closest = sorted(
+            {match for name in unmatched for match in difflib.get_close_matches(name, available)}
+        )
+        hint = f"{len(available)} operations available"
+        if closest:
+            hint += f"; closest: {closest}"
+    return GenerateError(f"allow rules match no catalog operation: {unmatched}; {hint}")
+
 
 @dataclass(frozen=True)
 class CompileResult:
@@ -89,10 +112,7 @@ def compile_catalog(
         available = {operation.name for operation in catalog.tools}
         unmatched = sorted(set(allow) - available)
         if unmatched:
-            raise GenerateError(
-                f"allow rules match no catalog operation: {unmatched}; "
-                f"available: {sorted(available)}"
-            )
+            raise _unmatched_allow_error(unmatched, available)
 
     catalog_path = _ensure_output(out, _CATALOG_NAME)
     catalog.write(catalog_path)
@@ -146,10 +166,7 @@ def scaffold_tool_yaml(
     if allow is not None:
         unmatched = sorted(set(allow) - available)
         if unmatched:
-            raise GenerateError(
-                f"allow rules match no catalog operation: {unmatched}; "
-                f"available: {sorted(available)}"
-            )
+            raise _unmatched_allow_error(unmatched, available)
     return _write_tool_yaml(
         out,
         name=catalog.source.name,

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/src/agent_engine_runner_shared/connectors/materialize.py

@@ -23,18 +23,15 @@ and load-bearing:
 
 from __future__ import annotations
 
-import os
 from pathlib import Path
 from typing import TYPE_CHECKING, Any, Sequence
 
 import yaml
 
 from agent_engine_runner_shared.connectors.bundle import (
-    CONNECTOR_BUNDLE_PATH_ENV,
     BundledConnector,
     BundledTool,
     ConnectorBundle,
-    load_connector_bundle,
 )
 from agent_engine_runner_shared.connectors.definitions import (
     Auth,
@@ -311,16 +308,10 @@ def materialize_connectors(connector_paths: Sequence[str | Path], *, root: Path)
 def resolve_runtime_bundle(agent_config: RuntimeAgentConfig) -> ConnectorBundle:
     """Resolve the connector bundle for this process.
 
-    A pre-materialized bundle published by the platform build (via
-    ``AGENTIC_CONNECTOR_BUNDLE_PATH``) wins; otherwise the ``agent.yaml``
-    ``connectors`` entries are materialized in memory from local files. With
-    neither configured this is an immediate no-op without file or network
-    I/O, matching the no-connector contract.
+    The ``agent.yaml`` ``connectors`` entries are materialized in memory from
+    local files. With none configured this is an immediate no-op without file
+    or network I/O, matching the no-connector contract.
     """
-    configured = os.environ.get(CONNECTOR_BUNDLE_PATH_ENV)
-    if configured:
-        return load_connector_bundle(configured)
-
     # Shape check, not truthiness: mocked runtime configs auto-create
     # truthy attributes, and only a real list/tuple of references counts.
     references = getattr(agent_config, "connectors", None)

{agent_engine_runner_shared-0.11.10 → agent_engine_runner_shared-0.11.11}/src/agent_engine_runner_shared/custom_events.py

@@ -18,6 +18,7 @@ from __future__ import annotations
 
 import asyncio
 import logging
+import uuid
 from collections.abc import Mapping
 from contextlib import contextmanager
 from contextvars import ContextVar, Token
@@ -157,6 +158,11 @@ class OEHTTPCustomEventTransport:
             return
         try:
             client = get_shared_client(oe_url)
+            # delivery_id is minted once per event and reused verbatim by the
+            # owner-first helper across both attempts, so a fallback after a
+            # lost owner response carries the same stable identity and the
+            # platform can dedup the redelivered event. Regenerated per emit —
+            # two intentionally identical events must remain distinct.
             _post_chunk_owner_first(
                 client,
                 service_url=f"{oe_url.rstrip('/')}/stream/chunk",
@@ -165,6 +171,7 @@ class OEHTTPCustomEventTransport:
                     "execution_id": execution_id,
                     "chunk_type": CUSTOM_EVENT,
                     "custom_event": dict(payload),
+                    "delivery_id": uuid.uuid4().hex,
                 },
                 on_owner_failure=report_oe_owner_url_failure,
                 timeout=PROGRESS_TIMEOUT_SECS,