agent-engine-runner-shared 0.11.7__tar.gz → 0.11.9__tar.gz

{agent_engine_runner_shared-0.11.7 → agent_engine_runner_shared-0.11.9}/PKG-INFO

@@ -1,12 +1,12 @@
 Metadata-Version: 2.5
 Name: agent-engine-runner-shared
-Version: 0.11.7
+Version: 0.11.9
 Summary: Runner SDK - Framework-agnostic agent runtime
 License: Apache-2.0
 License-File: LICENSE
 Requires-Python: >=3.11
-Requires-Dist: agent-engine-sdk-memory==0.11.7
-Requires-Dist: agent-engine-sdk==0.11.7
+Requires-Dist: agent-engine-sdk-memory==0.11.9
+Requires-Dist: agent-engine-sdk==0.11.9
 Requires-Dist: fastapi>=0.141.1
 Requires-Dist: filelock>=3.0.0
 Requires-Dist: httpx-sse>=0.4.0
@@ -20,9 +20,12 @@ Requires-Dist: python-dotenv>=1.0.0
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: regex>=2026.4.4
 Requires-Dist: sentry-sdk>=2.27.0
-Requires-Dist: starlette>=1.4.1
+Requires-Dist: starlette>=1.7.0
 Requires-Dist: uvicorn>=0.32.0
+Provides-Extra: debug
+Requires-Dist: debugpy>=1.8.0; extra == 'debug'
 Provides-Extra: dev
+Requires-Dist: debugpy>=1.8.0; extra == 'dev'
 Requires-Dist: mongomock>=4.1.0; extra == 'dev'
 Requires-Dist: msgpack>=1.0.0; extra == 'dev'
 Requires-Dist: pymongo>=4.0.0; extra == 'dev'

{agent_engine_runner_shared-0.11.7 → agent_engine_runner_shared-0.11.9}/docs/api.md

@@ -83,9 +83,6 @@
   * [get\_requested\_suspend](#agent_engine_runner_shared.context.get_requested_suspend)
   * [local\_suspend\_request\_context](#agent_engine_runner_shared.context.local_suspend_request_context)
   * [record\_current\_memory\_metadata](#agent_engine_runner_shared.context.record_current_memory_metadata)
-  * [ValidationContext](#agent_engine_runner_shared.context.ValidationContext)
-    * [to\_dict](#agent_engine_runner_shared.context.ValidationContext.to_dict)
-  * [get\_validation\_context](#agent_engine_runner_shared.context.get_validation_context)
   * [get\_current\_log\_origin](#agent_engine_runner_shared.context.get_current_log_origin)
   * [customer\_origin\_scope](#agent_engine_runner_shared.context.customer_origin_scope)
 * [agent\_engine\_runner\_shared.models](#agent_engine_runner_shared.models)
@@ -99,13 +96,12 @@
   * [InvokeResponse](#agent_engine_runner_shared.models.InvokeResponse)
   * [ExecuteRequest](#agent_engine_runner_shared.models.ExecuteRequest)
   * [ToolExecuteRequest](#agent_engine_runner_shared.models.ToolExecuteRequest)
-    * [to\_start\_log](#agent_engine_runner_shared.models.ToolExecuteRequest.to_start_log)
-    * [to\_cached\_log](#agent_engine_runner_shared.models.ToolExecuteRequest.to_cached_log)
   * [ElicitationInfo](#agent_engine_runner_shared.models.ElicitationInfo)
   * [GuardrailMeta](#agent_engine_runner_shared.models.GuardrailMeta)
+  * [GuardrailReviewPolicy](#agent_engine_runner_shared.models.GuardrailReviewPolicy)
+  * [GuardrailReviewHalt](#agent_engine_runner_shared.models.GuardrailReviewHalt)
   * [ToolExecuteResponse](#agent_engine_runner_shared.models.ToolExecuteResponse)
   * [ToolResultRequest](#agent_engine_runner_shared.models.ToolResultRequest)
-    * [to\_log](#agent_engine_runner_shared.models.ToolResultRequest.to_log)
   * [ToolAuthorization](#agent_engine_runner_shared.models.ToolAuthorization)
   * [ToolPodExecuteRequest](#agent_engine_runner_shared.models.ToolPodExecuteRequest)
     * [validate\_argument\_size](#agent_engine_runner_shared.models.ToolPodExecuteRequest.validate_argument_size)
@@ -147,19 +143,6 @@
   * [AERExecuteResponse](#agent_engine_runner_shared.models.AERExecuteResponse)
   * [ToolsListResponse](#agent_engine_runner_shared.models.ToolsListResponse)
   * [StreamChunk](#agent_engine_runner_shared.models.StreamChunk)
-  * [AgentStartStreamRequest](#agent_engine_runner_shared.models.AgentStartStreamRequest)
-  * [ExecutionLogsQueryResponse](#agent_engine_runner_shared.models.ExecutionLogsQueryResponse)
-  * [NodeExecutionsQueryResponse](#agent_engine_runner_shared.models.NodeExecutionsQueryResponse)
-  * [CostSummary](#agent_engine_runner_shared.models.CostSummary)
-  * [CostByWorkspace](#agent_engine_runner_shared.models.CostByWorkspace)
-  * [CostByModel](#agent_engine_runner_shared.models.CostByModel)
-  * [DailyCostEntry](#agent_engine_runner_shared.models.DailyCostEntry)
-  * [CostDashboardResponse](#agent_engine_runner_shared.models.CostDashboardResponse)
-  * [ExecutionDocument](#agent_engine_runner_shared.models.ExecutionDocument)
-  * [ExecutionsListQueryResponse](#agent_engine_runner_shared.models.ExecutionsListQueryResponse)
-  * [ExecutionDetailQueryResponse](#agent_engine_runner_shared.models.ExecutionDetailQueryResponse)
-  * [NodeExecutionRequest](#agent_engine_runner_shared.models.NodeExecutionRequest)
-    * [to\_log](#agent_engine_runner_shared.models.NodeExecutionRequest.to_log)
 * [agent\_engine\_runner\_shared.progress](#agent_engine_runner_shared.progress)
   * [emit](#agent_engine_runner_shared.progress.emit)
   * [emit\_step](#agent_engine_runner_shared.progress.emit_step)
@@ -183,6 +166,8 @@
   * [register\_guardrail\_policy\_engine](#agent_engine_runner_shared.guardrails_evaluator.core.register_guardrail_policy_engine)
   * [evaluate\_guardrail\_check](#agent_engine_runner_shared.guardrails_evaluator.core.evaluate_guardrail_check)
 * [agent\_engine\_runner\_shared.secure\_llm\_proxy](#agent_engine_runner_shared.secure_llm_proxy)
+  * [GuardrailReviewPending](#agent_engine_runner_shared.secure_llm_proxy.GuardrailReviewPending)
+  * [guardrail\_review\_wait\_id](#agent_engine_runner_shared.secure_llm_proxy.guardrail_review_wait_id)
   * [SecureLLMProxy](#agent_engine_runner_shared.secure_llm_proxy.SecureLLMProxy)
     * [step\_counter](#agent_engine_runner_shared.secure_llm_proxy.SecureLLMProxy.step_counter)
     * [invoke](#agent_engine_runner_shared.secure_llm_proxy.SecureLLMProxy.invoke)
@@ -197,6 +182,7 @@
   * [raise\_for\_oe\_rejection](#agent_engine_runner_shared.secure_wrapper.raise_for_oe_rejection)
   * [ToolCallTimeoutError](#agent_engine_runner_shared.secure_wrapper.ToolCallTimeoutError)
   * [OperationalStepAllocator](#agent_engine_runner_shared.secure_wrapper.OperationalStepAllocator)
+    * [allocation\_count](#agent_engine_runner_shared.secure_wrapper.OperationalStepAllocator.allocation_count)
   * [ExternalAPICallError](#agent_engine_runner_shared.secure_wrapper.ExternalAPICallError)
   * [LLMInvocationError](#agent_engine_runner_shared.secure_wrapper.LLMInvocationError)
   * [request\_oe\_approval](#agent_engine_runner_shared.secure_wrapper.request_oe_approval)
@@ -216,7 +202,6 @@
   * [LoggingStream](#agent_engine_runner_shared.structured_logging.LoggingStream)
   * [install\_structured\_logging](#agent_engine_runner_shared.structured_logging.install_structured_logging)
 * [agent\_engine\_runner\_shared.metrics](#agent_engine_runner_shared.metrics)
-  * [MetricPoint](#agent_engine_runner_shared.metrics.MetricPoint)
   * [LatencyStats](#agent_engine_runner_shared.metrics.LatencyStats)
     * [record](#agent_engine_runner_shared.metrics.LatencyStats.record)
     * [avg\_ms](#agent_engine_runner_shared.metrics.LatencyStats.avg_ms)
@@ -267,7 +252,6 @@
   * [log\_tool\_result](#agent_engine_runner_shared.utils.log_tool_result)
   * [log\_cached\_result](#agent_engine_runner_shared.utils.log_cached_result)
   * [log\_policy\_blocked](#agent_engine_runner_shared.utils.log_policy_blocked)
-  * [log\_execution\_start](#agent_engine_runner_shared.utils.log_execution_start)
   * [log\_execution\_callback](#agent_engine_runner_shared.utils.log_execution_callback)
 
 TenantRuntime — framework-agnostic platform runtime for tenant agent applications.
@@ -1640,37 +1624,6 @@ def record_current_memory_metadata(*,
 
 Attach explicit memory metadata to the current execution step, if one exists.
 
-<a id="agent_engine_runner_shared.context.ValidationContext"></a>
-
-## ValidationContext
-
-```python
-@dataclass(frozen=True)
-class ValidationContext()
-```
-
-Execution identity passed to guardrails for audit logging.
-
-<a id="agent_engine_runner_shared.context.ValidationContext.to_dict"></a>
-
-#### to\_dict
-
-```python
-def to_dict() -> Dict[str, str]
-```
-
-Serialize to a dict for inclusion in HTTP payloads.
-
-<a id="agent_engine_runner_shared.context.get_validation_context"></a>
-
-#### get\_validation\_context
-
-```python
-def get_validation_context() -> ValidationContext
-```
-
-Build a ValidationContext from the current execution contextvars.
-
 <a id="agent_engine_runner_shared.context.get_current_log_origin"></a>
 
 #### get\_current\_log\_origin
@@ -1833,54 +1786,48 @@ class ToolExecuteRequest(BaseModel)
 
 Request to execute a tool (AER → OE for approval).
 
-<a id="agent_engine_runner_shared.models.ToolExecuteRequest.to_start_log"></a>
+<a id="agent_engine_runner_shared.models.ElicitationInfo"></a>
 
-#### to\_start\_log
+## ElicitationInfo
 
 ```python
-def to_start_log(execution: "Execution") -> "ExecutionLog"
+class ElicitationInfo(BaseModel)
 ```
 
-Convert this request to an ExecutionLog for tool start.
+Authorization details returned when broker consent is required.
 
-<a id="agent_engine_runner_shared.models.ToolExecuteRequest.to_cached_log"></a>
+Its presence in a ToolExecuteResponse signals that the user must authorize
+via the provided URL before the tool invocation can proceed.
 
-#### to\_cached\_log
+<a id="agent_engine_runner_shared.models.GuardrailMeta"></a>
+
+## GuardrailMeta
 
 ```python
-def to_cached_log(execution: "Execution",
-                  cached_result: Any) -> "ExecutionLog"
+class GuardrailMeta(BaseModel)
 ```
 
-Convert this request to an ExecutionLog for cached result.
-
-**Arguments**:
+Identity of the policy that caused a guardrail block or require_review halt.
 
-- `execution` - The parent execution context
-- `cached_result` - The cached result being returned
+<a id="agent_engine_runner_shared.models.GuardrailReviewPolicy"></a>
 
-<a id="agent_engine_runner_shared.models.ElicitationInfo"></a>
-
-## ElicitationInfo
+## GuardrailReviewPolicy
 
 ```python
-class ElicitationInfo(BaseModel)
+class GuardrailReviewPolicy(BaseModel)
 ```
 
-Authorization details returned when broker consent is required.
+One policy that required a guardrail review.
 
-Its presence in a ToolExecuteResponse signals that the user must authorize
-via the provided URL before the tool invocation can proceed.
+<a id="agent_engine_runner_shared.models.GuardrailReviewHalt"></a>
 
-<a id="agent_engine_runner_shared.models.GuardrailMeta"></a>
-
-## GuardrailMeta
+## GuardrailReviewHalt
 
 ```python
-class GuardrailMeta(BaseModel)
+class GuardrailReviewHalt(BaseModel)
 ```
 
-Identity of the policy that caused a guardrail block or require_review halt.
+The review OE opened for a require_review halt of a review_protocol call.
 
 <a id="agent_engine_runner_shared.models.ToolExecuteResponse"></a>
 
@@ -1902,20 +1849,6 @@ class ToolResultRequest(BaseModel)
 
 Report tool execution result (AER → OE).
 
-<a id="agent_engine_runner_shared.models.ToolResultRequest.to_log"></a>
-
-#### to\_log
-
-```python
-def to_log(execution: Optional["Execution"] = None) -> "ExecutionLog"
-```
-
-Convert this request to an ExecutionLog for tool result.
-
-**Arguments**:
-
-- `execution` - The parent execution context (optional)
-
 <a id="agent_engine_runner_shared.models.ToolAuthorization"></a>
 
 ## ToolAuthorization
@@ -2393,136 +2326,6 @@ A chunk of streaming response from the agent.
 
 Used for real-time streaming of agent responses via SSE or gRPC.
 
-<a id="agent_engine_runner_shared.models.AgentStartStreamRequest"></a>
-
-## AgentStartStreamRequest
-
-```python
-class AgentStartStreamRequest(BaseModel)
-```
-
-Request to start an agent execution with streaming response.
-
-<a id="agent_engine_runner_shared.models.ExecutionLogsQueryResponse"></a>
-
-## ExecutionLogsQueryResponse
-
-```python
-class ExecutionLogsQueryResponse(BaseModel)
-```
-
-Response for execution logs query (used by API Gateway proxy).
-
-<a id="agent_engine_runner_shared.models.NodeExecutionsQueryResponse"></a>
-
-## NodeExecutionsQueryResponse
-
-```python
-class NodeExecutionsQueryResponse(BaseModel)
-```
-
-Response for node executions query (used by API Gateway proxy).
-
-<a id="agent_engine_runner_shared.models.CostSummary"></a>
-
-## CostSummary
-
-```python
-class CostSummary(BaseModel)
-```
-
-Aggregate cost metrics for the requested period.
-
-<a id="agent_engine_runner_shared.models.CostByWorkspace"></a>
-
-## CostByWorkspace
-
-```python
-class CostByWorkspace(BaseModel)
-```
-
-Cost breakdown for a single workspace.
-
-<a id="agent_engine_runner_shared.models.CostByModel"></a>
-
-## CostByModel
-
-```python
-class CostByModel(BaseModel)
-```
-
-Cost breakdown for a single model.
-
-<a id="agent_engine_runner_shared.models.DailyCostEntry"></a>
-
-## DailyCostEntry
-
-```python
-class DailyCostEntry(BaseModel)
-```
-
-Cost data for a single day.
-
-<a id="agent_engine_runner_shared.models.CostDashboardResponse"></a>
-
-## CostDashboardResponse
-
-```python
-class CostDashboardResponse(BaseModel)
-```
-
-Response for cost dashboard aggregation (used by API Gateway proxy).
-
-<a id="agent_engine_runner_shared.models.ExecutionDocument"></a>
-
-## ExecutionDocument
-
-```python
-class ExecutionDocument(BaseModel)
-```
-
-An execution document as stored in the platform database.
-
-<a id="agent_engine_runner_shared.models.ExecutionsListQueryResponse"></a>
-
-## ExecutionsListQueryResponse
-
-```python
-class ExecutionsListQueryResponse(BaseModel)
-```
-
-Response for executions list query (used by API Gateway proxy).
-
-<a id="agent_engine_runner_shared.models.ExecutionDetailQueryResponse"></a>
-
-## ExecutionDetailQueryResponse
-
-```python
-class ExecutionDetailQueryResponse(BaseModel)
-```
-
-Response for single execution detail query (used by API Gateway proxy).
-
-<a id="agent_engine_runner_shared.models.NodeExecutionRequest"></a>
-
-## NodeExecutionRequest
-
-```python
-class NodeExecutionRequest(BaseModel)
-```
-
-Report node execution event (AER → OE for logging).
-
-<a id="agent_engine_runner_shared.models.NodeExecutionRequest.to_log"></a>
-
-#### to\_log
-
-```python
-def to_log() -> "NodeExecutionLog"
-```
-
-Convert this request to a NodeExecutionLog for persistence.
-
 emit / emit_step — send a mid-execution chunk from within a tool function.
 
 Tool functions running inside a Tool Pod call these to stream events to the
@@ -2822,6 +2625,30 @@ The proxy packages intercepted invoke_llm requests for the Orchestration Engine
 and unwraps the streamed OE relay back into sdk-core models. The OE owns
 approval, routing, live SSE relay, and final audit/result recording.
 
+<a id="agent_engine_runner_shared.secure_llm_proxy.GuardrailReviewPending"></a>
+
+## GuardrailReviewPending
+
+```python
+class GuardrailReviewPending(Exception)
+```
+
+A recorded halt whose adapter emits its native wait after the LLM call.
+
+<a id="agent_engine_runner_shared.secure_llm_proxy.guardrail_review_wait_id"></a>
+
+#### guardrail\_review\_wait\_id
+
+```python
+def guardrail_review_wait_id(value: Any) -> str | None
+```
+
+The review a pause value names, when this attempt paused for that review.
+
+The answer to such a pause is the platform's review decision, not part of
+the conversation. An application's own pause is never one, whatever its
+value looks like: only a review the proxy recorded a halt for counts.
+
 <a id="agent_engine_runner_shared.secure_llm_proxy.SecureLLMProxy"></a>
 
 ## SecureLLMProxy
@@ -2877,15 +2704,22 @@ Collect streamed sdk-core chunks into a final sdk-core LLMResponse.
 
 ```python
 def stream(
-        messages: list[Message],
-        step: int | None = None,
-        stop: list[str] | None = None,
-        options: LLMInvocationOptions | None = None
+    messages: list[Message],
+    step: int | None = None,
+    stop: list[str] | None = None,
+    options: LLMInvocationOptions | None = None,
+    activity_key: str | None = None,
+    pending_review: GuardrailReviewPending | None = None
 ) -> Iterator[LLMStreamChunk]
 ```
 
 Stream invoke_llm chunks through OE approval and OE-owned SSE relay.
 
+`activity_key` names this call's durable activity. An adapter whose
+framework re-runs code after a pause supplies a key that is the same
+on every run; the default, the operational step, only ever increases
+within an attempt.
+
 Sessions routed to the platform-owned workflow wrap the call in a
 serial LLM activity: a recorded outcome replays without a model call;
 a fresh dispatch streams the model and records the folded response
@@ -2999,6 +2833,16 @@ Process-local operational step_number mint for one AER execution.
 Shared by SecureToolWrapper and SecureLLMProxy so parallel tools and LLM
 calls cannot collide under a single AER. Not a multi-OE authority.
 
+<a id="agent_engine_runner_shared.secure_wrapper.OperationalStepAllocator.allocation_count"></a>
+
+#### allocation\_count
+
+```python
+def allocation_count() -> int
+```
+
+Count minted request slots independently of replayed step watermarks.
+
 <a id="agent_engine_runner_shared.secure_wrapper.ExternalAPICallError"></a>
 
 ## ExternalAPICallError
@@ -3027,6 +2871,9 @@ uses this same exception type.
 on the failure (e.g. a provider credential rejection), when it did. It
 travels to the OE/UI on the ERROR chunk metadata instead of the generic
 invocation code so consumers can classify without string-matching prose.
+It is ``GUARDRAIL_REVIEW_INVALID`` when OE refused to answer a call from
+a guardrail review: the review is unknown or undecided, or the call is not
+the reviewed one.
 
 <a id="agent_engine_runner_shared.secure_wrapper.request_oe_approval"></a>
 
@@ -3048,7 +2895,9 @@ def request_oe_approval(
         scopes: Optional[list[str]] = None,
         tool_call_id: Optional[str] = None,
         custom_headers: Optional[Dict[str, str]] = None,
-        timeout: float | httpx.Timeout | None = None) -> ToolExecuteResponse
+        timeout: float | httpx.Timeout | None = None,
+        review_protocol: Optional[int] = None,
+        review_id: Optional[str] = None) -> ToolExecuteResponse
 ```
 
 Request approval from OE before executing a tool/LLM call.
@@ -3435,17 +3284,6 @@ Usage:
     # Get all metrics
     metrics = Metrics.get_all()
 
-<a id="agent_engine_runner_shared.metrics.MetricPoint"></a>
-
-## MetricPoint
-
-```python
-@dataclass
-class MetricPoint()
-```
-
-Single metric data point.
-
 <a id="agent_engine_runner_shared.metrics.LatencyStats"></a>
 
 ## LatencyStats
@@ -4127,18 +3965,6 @@ def log_policy_blocked(tool_name: str,
 
 Log that a tool call was blocked by policy.
 
-<a id="agent_engine_runner_shared.utils.log_execution_start"></a>
-
-#### log\_execution\_start
-
-```python
-def log_execution_start(execution_id: str,
-                        input_keys: List[str],
-                        prefix: str = "OE") -> None
-```
-
-Log the start of an execution.
-
 <a id="agent_engine_runner_shared.utils.log_execution_callback"></a>
 
 #### log\_execution\_callback

{agent_engine_runner_shared-0.11.7 → agent_engine_runner_shared-0.11.9}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "agent-engine-runner-shared"
-version = "0.11.7"
+version = "0.11.9"
 description = "Runner SDK - Framework-agnostic agent runtime"
 readme = "README.md"
 license = {text = "Apache-2.0"}
@@ -11,7 +11,7 @@ dependencies = [
     # floor: older starlette rebuilds url.path from the Host header with no
     # validation, which can disagree with scope["path"]. The
     # Host-validating _HOST_RE landed in starlette 1.4.1.
-    "starlette>=1.4.1",
+    "starlette>=1.7.0",
     "uvicorn>=0.32.0",
     "pydantic>=2.0.0",
     "protobuf>=6.33.6,<7",
@@ -23,9 +23,9 @@ dependencies = [
     "jsonschema>=4.26.0",
     "sentry-sdk>=2.27.0",
     # BaseAgent protocol and AgentInput/AgentEvent models
-    "agent-engine-sdk==0.11.7",
+    "agent-engine-sdk==0.11.9",
     # Memory models and the MemoryClient HTTP client
-    "agent-engine-sdk-memory==0.11.7",
+    "agent-engine-sdk-memory==0.11.9",
     # Required for checkpoint message decoding (query/sessions endpoints)
     "msgpack>=1.0.0",
     # Required by guardrails_evaluator/regex.py for advanced regex matching
@@ -53,6 +53,14 @@ dev = [
     "msgpack>=1.0.0",
     "pymongo>=4.0.0",
     "mongomock>=4.1.0",
+    "debugpy>=1.8.0",
+]
+# Local-Kind-only debug hook. Not installed by default so
+# production/CI images never pull in a debugger; local debug-mode tooling
+# installs this extra explicitly when building an agent/tool image with
+# debugging enabled.
+debug = [
+    "debugpy>=1.8.0",
 ]
 
 [build-system]

{agent_engine_runner_shared-0.11.7 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/connectors/README.md

@@ -42,6 +42,25 @@ auth:
   env: JIRA_TOKEN
 ```
 
+For delegated OAuth, replace that auth block with an explicit provider binding:
+
+```yaml
+auth:
+  type: oauth
+  provider_type: github
+  scopes: [repo]
+```
+
+`provider_type` is the key of a provider configured for the project, independent
+of the resource API's base URL. The scopes apply to every exposed operation in
+this connector. Registration carries this policy outside the model's argument
+schema. The Orchestration Engine resolves a credential for the saved application
+user and passes it to the Tool Pod for that invocation. A missing or invalid token
+stops the HTTP call; OAuth never falls back to a tenant environment secret.
+Existing static auth modes continue to use their configured environment bindings.
+Catalog regeneration preserves the authored OAuth binding and records only
+secret-free Bearer presentation in the catalog.
+
 The pre-materialized index paths are relative to the index and must remain inside its
 directory. AER loads the schemas as ordinary remote tools. Tool Pod startup loads the
 same materialized view and owns one `ConnectorExecutor` per connector.
@@ -52,7 +71,9 @@ same materialized view and owns one `ConnectorExecutor` per connector.
 
 Own one `ConnectorExecutor(definitions)` per connector in a Tool Pod process. Call
 `execute(tool_name, arguments, env=tenant_secrets)` after authorization; the environment
-mapping is request-local and defaults to the tenant-owned process environment. Close
+mapping is request-local and defaults to the tenant-owned process environment for
+static auth. OAuth additionally requires `authorization=ToolAuthorization(...)`;
+the Tool Pod supplies it from request context and the executor never retains it. Close
 the executor at shutdown after in-flight calls finish, or use it as a context manager.
 
 The compiled format is the stable `source`, `auth`, `tools`, `params` and

{agent_engine_runner_shared-0.11.7 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/connectors/bundle.py

@@ -95,14 +95,16 @@ class BundledTool:
 
     @property
     def registration_metadata(self) -> dict[str, Any]:
-        """Return the shared AER and Tool Pod registration policy."""
+        """Return detached AER/Tool Pod policy, with delegated binding outside the schema."""
         operation = self.operation
+        auth = self.connector.definitions.auth
+        delegated = auth if auth is not None and auth.type == "oauth" else None
         return {
             "name": operation.name,
             "description": operation.description.strip() or f"REST connector tool {operation.name}",
             "is_local": False,
-            "provider_type": None,
-            "scopes": [],
+            "provider_type": delegated.provider_type if delegated else None,
+            "scopes": list(delegated.scopes) if delegated else [],
             "network": self.network,
             "timeout_seconds": DEFAULT_EXECUTION_TIMEOUT_SECONDS,
             "redact_fields": [],

{agent_engine_runner_shared-0.11.7 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/connectors/definitions.py

@@ -162,8 +162,14 @@ class Credential(_Model):
 
 
 class Auth(_Model):
-    type: Literal["none", "bearer", "api_key", "basic", "api_keys"] = Field(
-        default="none", description="Static auth presentation"
+    type: Literal["none", "bearer", "api_key", "basic", "api_keys", "oauth"] = Field(
+        default="none", description="Static auth presentation or request-local delegated OAuth"
+    )
+    provider_type: str | None = Field(
+        default=None, description="Project-scoped Broker provider key"
+    )
+    scopes: list[str] = Field(
+        default_factory=list, description="Connector-wide delegated permissions"
     )
     env: str | None = Field(default=None, description="Tenant secret environment reference")
     header: str | None = Field(default=None, description="API key header name")
@@ -189,12 +195,23 @@ class Auth(_Model):
             "api_key": {"type", "env", "header", "location", "name", "prefix", "headers"},
             "basic": {"type", "username_env", "password_env", "headers"},
             "api_keys": {"type", "credentials", "headers"},
+            "oauth": {"type", "provider_type", "scopes", "headers"},
         }[self.type]
         if configured - allowed:
             raise ValueError(f"{self.type} auth contains fields for another auth type")
 
         credential_headers: set[str] = set()
-        if self.type == "bearer":
+        if self.type == "oauth":
+            if not self.provider_type or any(
+                ord(character) <= 32 or ord(character) >= 127 for character in self.provider_type
+            ):
+                raise ValueError("OAuth auth requires an explicit provider key without whitespace")
+            if len(set(self.scopes)) != len(self.scopes) or any(
+                re.fullmatch(r"[!\x23-\x5B\x5D-\x7E]+", scope) is None for scope in self.scopes
+            ):
+                raise ValueError("OAuth scopes must be unique OAuth scope tokens")
+            credential_headers.add("authorization")
+        elif self.type == "bearer":
             if not _validate_secret_env(self.env):
                 raise ValueError("bearer auth requires one tenant secret env")
             credential_headers.add("authorization")
@@ -235,7 +252,7 @@ class Auth(_Model):
 
     def header_name(self) -> str | None:
         """Return the single generated auth header, when this auth shape has one."""
-        if self.type == "bearer":
+        if self.type in ("bearer", "oauth"):
             return "Authorization"
         if self.type == "api_key":
             if (self.location or "header") == "header":
@@ -244,7 +261,7 @@ class Auth(_Model):
 
     def header_names(self) -> set[str]:
         """List auth-controlled headers so model parameters cannot collide with them."""
-        if self.type in ("bearer", "basic"):
+        if self.type in ("bearer", "basic", "oauth"):
             names = {"authorization"}
         elif self.type == "api_key" and (header_name := self.header_name()):
             names = {header_name.lower()}