agent-engine-runner-shared 0.11.8__tar.gz → 0.11.9__tar.gz

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/PKG-INFO

@@ -1,12 +1,12 @@
 Metadata-Version: 2.5
 Name: agent-engine-runner-shared
-Version: 0.11.8
+Version: 0.11.9
 Summary: Runner SDK - Framework-agnostic agent runtime
 License: Apache-2.0
 License-File: LICENSE
 Requires-Python: >=3.11
-Requires-Dist: agent-engine-sdk-memory==0.11.8
-Requires-Dist: agent-engine-sdk==0.11.8
+Requires-Dist: agent-engine-sdk-memory==0.11.9
+Requires-Dist: agent-engine-sdk==0.11.9
 Requires-Dist: fastapi>=0.141.1
 Requires-Dist: filelock>=3.0.0
 Requires-Dist: httpx-sse>=0.4.0
@@ -20,7 +20,7 @@ Requires-Dist: python-dotenv>=1.0.0
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: regex>=2026.4.4
 Requires-Dist: sentry-sdk>=2.27.0
-Requires-Dist: starlette>=1.4.1
+Requires-Dist: starlette>=1.7.0
 Requires-Dist: uvicorn>=0.32.0
 Provides-Extra: debug
 Requires-Dist: debugpy>=1.8.0; extra == 'debug'

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/docs/api.md

@@ -166,6 +166,7 @@
   * [register\_guardrail\_policy\_engine](#agent_engine_runner_shared.guardrails_evaluator.core.register_guardrail_policy_engine)
   * [evaluate\_guardrail\_check](#agent_engine_runner_shared.guardrails_evaluator.core.evaluate_guardrail_check)
 * [agent\_engine\_runner\_shared.secure\_llm\_proxy](#agent_engine_runner_shared.secure_llm_proxy)
+  * [GuardrailReviewPending](#agent_engine_runner_shared.secure_llm_proxy.GuardrailReviewPending)
   * [guardrail\_review\_wait\_id](#agent_engine_runner_shared.secure_llm_proxy.guardrail_review_wait_id)
   * [SecureLLMProxy](#agent_engine_runner_shared.secure_llm_proxy.SecureLLMProxy)
     * [step\_counter](#agent_engine_runner_shared.secure_llm_proxy.SecureLLMProxy.step_counter)
@@ -181,6 +182,7 @@
   * [raise\_for\_oe\_rejection](#agent_engine_runner_shared.secure_wrapper.raise_for_oe_rejection)
   * [ToolCallTimeoutError](#agent_engine_runner_shared.secure_wrapper.ToolCallTimeoutError)
   * [OperationalStepAllocator](#agent_engine_runner_shared.secure_wrapper.OperationalStepAllocator)
+    * [allocation\_count](#agent_engine_runner_shared.secure_wrapper.OperationalStepAllocator.allocation_count)
   * [ExternalAPICallError](#agent_engine_runner_shared.secure_wrapper.ExternalAPICallError)
   * [LLMInvocationError](#agent_engine_runner_shared.secure_wrapper.LLMInvocationError)
   * [request\_oe\_approval](#agent_engine_runner_shared.secure_wrapper.request_oe_approval)
@@ -2623,6 +2625,16 @@ The proxy packages intercepted invoke_llm requests for the Orchestration Engine
 and unwraps the streamed OE relay back into sdk-core models. The OE owns
 approval, routing, live SSE relay, and final audit/result recording.
 
+<a id="agent_engine_runner_shared.secure_llm_proxy.GuardrailReviewPending"></a>
+
+## GuardrailReviewPending
+
+```python
+class GuardrailReviewPending(Exception)
+```
+
+A recorded halt whose adapter emits its native wait after the LLM call.
+
 <a id="agent_engine_runner_shared.secure_llm_proxy.guardrail_review_wait_id"></a>
 
 #### guardrail\_review\_wait\_id
@@ -2691,11 +2703,14 @@ Collect streamed sdk-core chunks into a final sdk-core LLMResponse.
 #### stream
 
 ```python
-def stream(messages: list[Message],
-           step: int | None = None,
-           stop: list[str] | None = None,
-           options: LLMInvocationOptions | None = None,
-           activity_key: str | None = None) -> Iterator[LLMStreamChunk]
+def stream(
+    messages: list[Message],
+    step: int | None = None,
+    stop: list[str] | None = None,
+    options: LLMInvocationOptions | None = None,
+    activity_key: str | None = None,
+    pending_review: GuardrailReviewPending | None = None
+) -> Iterator[LLMStreamChunk]
 ```
 
 Stream invoke_llm chunks through OE approval and OE-owned SSE relay.
@@ -2818,6 +2833,16 @@ Process-local operational step_number mint for one AER execution.
 Shared by SecureToolWrapper and SecureLLMProxy so parallel tools and LLM
 calls cannot collide under a single AER. Not a multi-OE authority.
 
+<a id="agent_engine_runner_shared.secure_wrapper.OperationalStepAllocator.allocation_count"></a>
+
+#### allocation\_count
+
+```python
+def allocation_count() -> int
+```
+
+Count minted request slots independently of replayed step watermarks.
+
 <a id="agent_engine_runner_shared.secure_wrapper.ExternalAPICallError"></a>
 
 ## ExternalAPICallError

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "agent-engine-runner-shared"
-version = "0.11.8"
+version = "0.11.9"
 description = "Runner SDK - Framework-agnostic agent runtime"
 readme = "README.md"
 license = {text = "Apache-2.0"}
@@ -11,7 +11,7 @@ dependencies = [
     # floor: older starlette rebuilds url.path from the Host header with no
     # validation, which can disagree with scope["path"]. The
     # Host-validating _HOST_RE landed in starlette 1.4.1.
-    "starlette>=1.4.1",
+    "starlette>=1.7.0",
     "uvicorn>=0.32.0",
     "pydantic>=2.0.0",
     "protobuf>=6.33.6,<7",
@@ -23,9 +23,9 @@ dependencies = [
     "jsonschema>=4.26.0",
     "sentry-sdk>=2.27.0",
     # BaseAgent protocol and AgentInput/AgentEvent models
-    "agent-engine-sdk==0.11.8",
+    "agent-engine-sdk==0.11.9",
     # Memory models and the MemoryClient HTTP client
-    "agent-engine-sdk-memory==0.11.8",
+    "agent-engine-sdk-memory==0.11.9",
     # Required for checkpoint message decoding (query/sessions endpoints)
     "msgpack>=1.0.0",
     # Required by guardrails_evaluator/regex.py for advanced regex matching

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/connectors/README.md

@@ -42,6 +42,25 @@ auth:
   env: JIRA_TOKEN
 ```
 
+For delegated OAuth, replace that auth block with an explicit provider binding:
+
+```yaml
+auth:
+  type: oauth
+  provider_type: github
+  scopes: [repo]
+```
+
+`provider_type` is the key of a provider configured for the project, independent
+of the resource API's base URL. The scopes apply to every exposed operation in
+this connector. Registration carries this policy outside the model's argument
+schema. The Orchestration Engine resolves a credential for the saved application
+user and passes it to the Tool Pod for that invocation. A missing or invalid token
+stops the HTTP call; OAuth never falls back to a tenant environment secret.
+Existing static auth modes continue to use their configured environment bindings.
+Catalog regeneration preserves the authored OAuth binding and records only
+secret-free Bearer presentation in the catalog.
+
 The pre-materialized index paths are relative to the index and must remain inside its
 directory. AER loads the schemas as ordinary remote tools. Tool Pod startup loads the
 same materialized view and owns one `ConnectorExecutor` per connector.
@@ -52,7 +71,9 @@ same materialized view and owns one `ConnectorExecutor` per connector.
 
 Own one `ConnectorExecutor(definitions)` per connector in a Tool Pod process. Call
 `execute(tool_name, arguments, env=tenant_secrets)` after authorization; the environment
-mapping is request-local and defaults to the tenant-owned process environment. Close
+mapping is request-local and defaults to the tenant-owned process environment for
+static auth. OAuth additionally requires `authorization=ToolAuthorization(...)`;
+the Tool Pod supplies it from request context and the executor never retains it. Close
 the executor at shutdown after in-flight calls finish, or use it as a context manager.
 
 The compiled format is the stable `source`, `auth`, `tools`, `params` and

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/connectors/bundle.py

@@ -95,14 +95,16 @@ class BundledTool:
 
     @property
     def registration_metadata(self) -> dict[str, Any]:
-        """Return the shared AER and Tool Pod registration policy."""
+        """Return detached AER/Tool Pod policy, with delegated binding outside the schema."""
         operation = self.operation
+        auth = self.connector.definitions.auth
+        delegated = auth if auth is not None and auth.type == "oauth" else None
         return {
             "name": operation.name,
             "description": operation.description.strip() or f"REST connector tool {operation.name}",
             "is_local": False,
-            "provider_type": None,
-            "scopes": [],
+            "provider_type": delegated.provider_type if delegated else None,
+            "scopes": list(delegated.scopes) if delegated else [],
             "network": self.network,
             "timeout_seconds": DEFAULT_EXECUTION_TIMEOUT_SECONDS,
             "redact_fields": [],

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/connectors/definitions.py

@@ -162,8 +162,14 @@ class Credential(_Model):
 
 
 class Auth(_Model):
-    type: Literal["none", "bearer", "api_key", "basic", "api_keys"] = Field(
-        default="none", description="Static auth presentation"
+    type: Literal["none", "bearer", "api_key", "basic", "api_keys", "oauth"] = Field(
+        default="none", description="Static auth presentation or request-local delegated OAuth"
+    )
+    provider_type: str | None = Field(
+        default=None, description="Project-scoped Broker provider key"
+    )
+    scopes: list[str] = Field(
+        default_factory=list, description="Connector-wide delegated permissions"
     )
     env: str | None = Field(default=None, description="Tenant secret environment reference")
     header: str | None = Field(default=None, description="API key header name")
@@ -189,12 +195,23 @@ class Auth(_Model):
             "api_key": {"type", "env", "header", "location", "name", "prefix", "headers"},
             "basic": {"type", "username_env", "password_env", "headers"},
             "api_keys": {"type", "credentials", "headers"},
+            "oauth": {"type", "provider_type", "scopes", "headers"},
         }[self.type]
         if configured - allowed:
             raise ValueError(f"{self.type} auth contains fields for another auth type")
 
         credential_headers: set[str] = set()
-        if self.type == "bearer":
+        if self.type == "oauth":
+            if not self.provider_type or any(
+                ord(character) <= 32 or ord(character) >= 127 for character in self.provider_type
+            ):
+                raise ValueError("OAuth auth requires an explicit provider key without whitespace")
+            if len(set(self.scopes)) != len(self.scopes) or any(
+                re.fullmatch(r"[!\x23-\x5B\x5D-\x7E]+", scope) is None for scope in self.scopes
+            ):
+                raise ValueError("OAuth scopes must be unique OAuth scope tokens")
+            credential_headers.add("authorization")
+        elif self.type == "bearer":
             if not _validate_secret_env(self.env):
                 raise ValueError("bearer auth requires one tenant secret env")
             credential_headers.add("authorization")
@@ -235,7 +252,7 @@ class Auth(_Model):
 
     def header_name(self) -> str | None:
         """Return the single generated auth header, when this auth shape has one."""
-        if self.type == "bearer":
+        if self.type in ("bearer", "oauth"):
             return "Authorization"
         if self.type == "api_key":
             if (self.location or "header") == "header":
@@ -244,7 +261,7 @@ class Auth(_Model):
 
     def header_names(self) -> set[str]:
         """List auth-controlled headers so model parameters cannot collide with them."""
-        if self.type in ("bearer", "basic"):
+        if self.type in ("bearer", "basic", "oauth"):
             names = {"authorization"}
         elif self.type == "api_key" and (header_name := self.header_name()):
             names = {header_name.lower()}

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/connectors/executor.py

@@ -27,6 +27,7 @@ from agent_engine_runner_shared.connectors.definitions import (
     validate_segment,
     validate_url,
 )
+from agent_engine_runner_shared.models import ToolAuthorization
 from agent_engine_runner_shared.utils import tenant_env_vars
 
 __all__ = ["DEFAULT_EXECUTION_TIMEOUT_SECONDS", "ConnectorExecutor"]
@@ -101,7 +102,11 @@ class ConnectorExecutor:
         self._transport.close()
 
     def _prepare_request(
-        self, tool: Operation, arguments: dict[str, Any], env: Mapping[str, str] | None
+        self,
+        tool: Operation,
+        arguments: dict[str, Any],
+        env: Mapping[str, str] | None,
+        authorization: ToolAuthorization | None,
     ) -> tuple[
         httpx.URL,
         dict[str, str],
@@ -178,7 +183,7 @@ class ConnectorExecutor:
             ]
             if pairs:
                 headers["Cookie"] = "; ".join(pairs)
-        base_url, auth_query, has_path_auth = self._apply_auth(headers, query, env)
+        base_url, auth_query, has_path_auth = self._apply_auth(headers, query, env, authorization)
         content, content_type = self._request_body(tool, arguments)
         if content_type:
             headers["Content-Type"] = content_type
@@ -200,8 +205,9 @@ class ConnectorExecutor:
         headers: dict[str, str],
         query: list[tuple[str, Any]],
         env: Mapping[str, str] | None,
+        authorization: ToolAuthorization | None,
     ) -> tuple[str, list[tuple[str, str]], bool]:
-        """Place materialized credentials exactly where the definition declares them.
+        """Attach explicit delegated authorization or the configured static credentials.
 
         Query credentials are returned so same-origin redirects can preserve them.
         Path-authenticated requests reject redirects because moving the credential
@@ -212,6 +218,18 @@ class ConnectorExecutor:
         if not auth or auth.type == "none":
             return base_url, [], False
 
+        if auth.type == "oauth":
+            # Delegated calls must never fall back to a process/tenant secret;
+            # the existing OE gate binds this authorization to the saved user.
+            token = authorization.token if authorization else None
+            if not token or any(
+                ord(character) <= 32 or ord(character) >= 127 for character in token
+            ):
+                raise ValueError("delegated connector token is missing or invalid")
+            headers["Authorization"] = f"Bearer {token}"
+            headers.update(auth.headers or {})
+            return base_url, [], False
+
         secrets = env if env is not None else tenant_env_vars()
         auth_query: list[tuple[str, str]] = []
         has_path_auth = False
@@ -304,13 +322,19 @@ class ConnectorExecutor:
         return None, None
 
     def execute(
-        self, name: str, arguments: dict[str, Any], *, env: Mapping[str, str] | None = None
+        self,
+        name: str,
+        arguments: dict[str, Any],
+        *,
+        env: Mapping[str, str] | None = None,
+        authorization: ToolAuthorization | None = None,
     ) -> str:
         """Execute a named compiled operation and return bounded UTF-8 response text.
 
         Invalid definitions/arguments/secrets raise ValueError before dispatch.
         HTTP and transport failures use httpx exceptions understood by ToolAPIError.
         Only GET/HEAD/OPTIONS retry 429/503; writes are never automatically replayed.
+        OAuth requires explicit request-local authorization; static modes ignore it.
         """
         deadline = time.monotonic() + self._timeout_seconds
         tool = self._operations.get(name)
@@ -318,7 +342,7 @@ class ConnectorExecutor:
             raise ValueError("unknown connector tool")
         try:
             url, headers, content, auth_query, has_path_auth = self._prepare_request(
-                tool, arguments, env
+                tool, arguments, env, authorization
             )
         except RecursionError:
             # Pathological nesting exhausts the interpreter stack in the

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/connectors/generate/authoring.py

@@ -135,6 +135,9 @@ def _guidance_comment(base_url: str, auth: Auth | None) -> str:
         granted = ", ".join(_quote(env) for env in envs)
         lines.append(f"#   secret   grant {granted} to the tool sandbox under")
         lines.append("#            sandboxes.tool.secrets (sandboxes requires an agent block)")
+    elif auth is not None and auth.type == "oauth":
+        lines.append("#   auth     delegated OAuth; configure the named provider for this project")
+        lines.append("#   secret   none required in the tool sandbox; tokens are request-local")
     else:
         lines.append("#   secret   none required; this connector authenticates anonymously")
     return "\n".join(lines) + "\n"

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/connectors/generate/security.py

@@ -118,7 +118,7 @@ def _catalog_override(auth: Auth | None) -> dict[str, Any] | None:
         return None
     if auth.type == "none":
         return {}
-    if auth.type == "bearer":
+    if auth.type in ("bearer", "oauth"):
         return {"type": "bearer", **({"headers": auth.headers} if auth.headers else {})}
     if auth.type == "basic":
         return {"type": "basic", **({"headers": auth.headers} if auth.headers else {})}

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/connectors/runtime.py

@@ -9,6 +9,7 @@ from typing import Any, Callable, Iterator, Mapping
 
 from agent_engine_runner_shared.connectors.bundle import BundledTool, ConnectorBundle
 from agent_engine_runner_shared.connectors.executor import ConnectorExecutor
+from agent_engine_runner_shared.context import get_current_authorization
 
 __all__ = ["ConnectorToolRegistration", "ConnectorToolRuntime"]
 
@@ -68,11 +69,16 @@ class ConnectorToolRuntime:
 
     @staticmethod
     def _make_callable(executor: ConnectorExecutor, tool_name: str) -> Callable[..., str]:
+        """Bind a tool name; capture credentials only when its invocation runs."""
+
         def execute(**arguments: Any) -> str:
+            """Execute with this worker's captured environment and delegated authorization."""
             env = _current_connector_env.get()
             if env is None:
                 raise RuntimeError("connector invocation environment is unavailable")
-            return executor.execute(tool_name, arguments, env=env)
+            return executor.execute(
+                tool_name, arguments, env=env, authorization=get_current_authorization()
+            )
 
         execute.__name__ = tool_name
         return execute

agent_engine_runner_shared-0.11.9/src/agent_engine_runner_shared/generated/workflow/v1/activity_pb2.py

@@ -0,0 +1,61 @@
+# -*- coding: utf-8 -*-
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# NO CHECKED-IN PROTOBUF GENCODE
+# source: workflow/v1/activity.proto
+# Protobuf Python Version: 6.33.5
+"""Generated protocol buffer code."""
+from google.protobuf import descriptor as _descriptor
+from google.protobuf import descriptor_pool as _descriptor_pool
+from google.protobuf import runtime_version as _runtime_version
+from google.protobuf import symbol_database as _symbol_database
+from google.protobuf.internal import builder as _builder
+_runtime_version.ValidateProtobufRuntimeVersion(
+    _runtime_version.Domain.PUBLIC,
+    6,
+    33,
+    5,
+    '',
+    'workflow/v1/activity.proto'
+)
+# @@protoc_insertion_point(imports)
+
+_sym_db = _symbol_database.Default()
+
+
+from google.protobuf import struct_pb2 as google_dot_protobuf_dot_struct__pb2
+from agent_engine_runner_shared.generated.workflow.v1 import common_pb2 as workflow_dot_v1_dot_common__pb2
+
+
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x1aworkflow/v1/activity.proto\x12\x1bmongodb.agentic.workflow.v1\x1a\x1cgoogle/protobuf/struct.proto\x1a\x18workflow/v1/common.proto\"\x91\x04\n\x0f\x41\x63tivityCommand\x12Z\n\x11workflow_identity\x18\x01 \x01(\x0b\x32-.mongodb.agentic.workflow.v1.WorkflowIdentityR\x10workflowIdentity\x12\x1d\n\nattempt_id\x18\x02 \x01(\tR\tattemptId\x12#\n\rfencing_token\x18\x03 \x01(\x03R\x0c\x66\x65ncingToken\x12I\n\x08position\x18\x04 \x01(\x0b\x32-.mongodb.agentic.workflow.v1.ActivityPositionR\x08position\x12N\n\ractivity_kind\x18\x05 \x01(\x0e\x32).mongodb.agentic.workflow.v1.ActivityKindR\x0c\x61\x63tivityKind\x12#\n\ractivity_name\x18\x06 \x01(\tR\x0c\x61\x63tivityName\x12=\n\x0esemantic_input\x18\x07 \x01(\x0b\x32\x16.google.protobuf.ValueR\rsemanticInput\x12_\n\x12on_unknown_outcome\x18\x08 \x01(\x0e\x32\x31.mongodb.agentic.workflow.v1.UnknownOutcomePolicyR\x10onUnknownOutcome\"\xd2\x01\n\x0f\x41\x63tivityContext\x12Z\n\x11workflow_identity\x18\x01 \x01(\x0b\x32-.mongodb.agentic.workflow.v1.WorkflowIdentityR\x10workflowIdentity\x12\x1f\n\x0b\x61\x63tivity_id\x18\x02 \x01(\tR\nactivityId\x12\x1d\n\nattempt_id\x18\x03 \x01(\tR\tattemptId\x12#\n\rfencing_token\x18\x04 \x01(\x03R\x0c\x66\x65ncingToken\"_\n\x12\x41\x63tivitySuspension\x12\x16\n\x06reason\x18\x01 \x01(\tR\x06reason\x12\x31\n\x07\x63ontext\x18\x02 \x01(\x0b\x32\x17.google.protobuf.StructR\x07\x63ontext\"@\n\x0bMemoryWrite\x12\x0e\n\x02id\x18\x01 \x01(\tR\x02id\x12!\n\x0cpayload_json\x18\x02 \x01(\x0cR\x0bpayloadJson\"\xf0\x03\n\x0f\x41\x63tivityOutcome\x12Z\n\x11workflow_identity\x18\x01 \x01(\x0b\x32-.mongodb.agentic.workflow.v1.WorkflowIdentityR\x10workflowIdentity\x12\x1f\n\x0b\x61\x63tivity_id\x18\x02 \x01(\tR\nactivityId\x12\x1d\n\nattempt_id\x18\x03 \x01(\tR\tattemptId\x12#\n\rfencing_token\x18\x04 \x01(\x03R\x0c\x66\x65ncingToken\x12S\n\x0coutcome_kind\x18\x05 \x01(\x0e\x32\x30.mongodb.agentic.workflow.v1.ActivityOutcomeKindR\x0boutcomeKind\x12.\n\x06result\x18\x06 \x01(\x0b\x32\x16.google.protobuf.ValueR\x06result\x12@\n\x05\x65rror\x18\x07 \x01(\x0b\x32*.mongodb.agentic.workflow.v1.WorkflowErrorR\x05\x65rror\x12O\n\nsuspension\x18\x08 \x01(\x0b\x32/.mongodb.agentic.workflow.v1.ActivitySuspensionR\nsuspensionJ\x04\x08\t\x10\n\"\xa7\x02\n\x15\x41\x63tivityMemoryCommand\x12Z\n\x11workflow_identity\x18\x01 \x01(\x0b\x32-.mongodb.agentic.workflow.v1.WorkflowIdentityR\x10workflowIdentity\x12\x1f\n\x0b\x61\x63tivity_id\x18\x02 \x01(\tR\nactivityId\x12\x1d\n\nattempt_id\x18\x03 \x01(\tR\tattemptId\x12#\n\rfencing_token\x18\x04 \x01(\x03R\x0c\x66\x65ncingToken\x12M\n\rmemory_writes\x18\x05 \x03(\x0b\x32(.mongodb.agentic.workflow.v1.MemoryWriteR\x0cmemoryWrites\"\xe5\x02\n\x13StepSuspensionEntry\x12I\n\x08position\x18\x01 \x01(\x0b\x32-.mongodb.agentic.workflow.v1.ActivityPositionR\x08position\x12N\n\ractivity_kind\x18\x02 \x01(\x0e\x32).mongodb.agentic.workflow.v1.ActivityKindR\x0c\x61\x63tivityKind\x12#\n\ractivity_name\x18\x03 \x01(\tR\x0c\x61\x63tivityName\x12=\n\x0esemantic_input\x18\x04 \x01(\x0b\x32\x16.google.protobuf.ValueR\rsemanticInput\x12O\n\nsuspension\x18\x05 \x01(\x0b\x32/.mongodb.agentic.workflow.v1.ActivitySuspensionR\nsuspension\"\xa6\x01\n\x11StepActivityEntry\x12I\n\x08position\x18\x01 \x01(\x0b\x32-.mongodb.agentic.workflow.v1.ActivityPositionR\x08position\x12\x46\n\x07outcome\x18\x02 \x01(\x0b\x32,.mongodb.agentic.workflow.v1.ActivityOutcomeR\x07outcome\"\xf6\x01\n\x18\x41\x63tivityHeartbeatRequest\x12Z\n\x11workflow_identity\x18\x01 \x01(\x0b\x32-.mongodb.agentic.workflow.v1.WorkflowIdentityR\x10workflowIdentity\x12\x1f\n\x0b\x61\x63tivity_id\x18\x02 \x01(\tR\nactivityId\x12\x1d\n\nattempt_id\x18\x03 \x01(\tR\tattemptId\x12#\n\rfencing_token\x18\x04 \x01(\x03R\x0c\x66\x65ncingToken\x12\x19\n\x08owner_id\x18\x05 \x01(\tR\x07ownerId*v\n\x0c\x41\x63tivityKind\x12\x1d\n\x19\x41\x43TIVITY_KIND_UNSPECIFIED\x10\x00\x12\x15\n\x11\x41\x43TIVITY_KIND_LLM\x10\x01\x12\x16\n\x12\x41\x43TIVITY_KIND_TOOL\x10\x02\x12\x18\n\x14\x41\x43TIVITY_KIND_MEMORY\x10\x03*\xca\x01\n\x13\x41\x63tivityOutcomeKind\x12%\n!ACTIVITY_OUTCOME_KIND_UNSPECIFIED\x10\x00\x12#\n\x1f\x41\x43TIVITY_OUTCOME_KIND_COMPLETED\x10\x01\x12 \n\x1c\x41\x43TIVITY_OUTCOME_KIND_FAILED\x10\x02\x12 \n\x1c\x41\x43TIVITY_OUTCOME_KIND_DENIED\x10\x03\x12#\n\x1f\x41\x43TIVITY_OUTCOME_KIND_SUSPENDED\x10\x04*\x81\x01\n\x14UnknownOutcomePolicy\x12&\n\"UNKNOWN_OUTCOME_POLICY_UNSPECIFIED\x10\x00\x12\x1f\n\x1bUNKNOWN_OUTCOME_POLICY_FAIL\x10\x01\x12 \n\x1cUNKNOWN_OUTCOME_POLICY_RERUN\x10\x02\x42@Z>github.com/10gen/agentic-platform/proto/workflow/v1;workflowv1b\x06proto3')
+
+_globals = globals()
+_builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
+_builder.BuildTopDescriptorsAndMessages(DESCRIPTOR, 'workflow.v1.activity_pb2', _globals)
+if not _descriptor._USE_C_DESCRIPTORS:
+  _globals['DESCRIPTOR']._loaded_options = None
+  _globals['DESCRIPTOR']._serialized_options = b'Z>github.com/10gen/agentic-platform/proto/workflow/v1;workflowv1'
+  _globals['_ACTIVITYKIND']._serialized_start=2598
+  _globals['_ACTIVITYKIND']._serialized_end=2716
+  _globals['_ACTIVITYOUTCOMEKIND']._serialized_start=2719
+  _globals['_ACTIVITYOUTCOMEKIND']._serialized_end=2921
+  _globals['_UNKNOWNOUTCOMEPOLICY']._serialized_start=2924
+  _globals['_UNKNOWNOUTCOMEPOLICY']._serialized_end=3053
+  _globals['_ACTIVITYCOMMAND']._serialized_start=116
+  _globals['_ACTIVITYCOMMAND']._serialized_end=645
+  _globals['_ACTIVITYCONTEXT']._serialized_start=648
+  _globals['_ACTIVITYCONTEXT']._serialized_end=858
+  _globals['_ACTIVITYSUSPENSION']._serialized_start=860
+  _globals['_ACTIVITYSUSPENSION']._serialized_end=955
+  _globals['_MEMORYWRITE']._serialized_start=957
+  _globals['_MEMORYWRITE']._serialized_end=1021
+  _globals['_ACTIVITYOUTCOME']._serialized_start=1024
+  _globals['_ACTIVITYOUTCOME']._serialized_end=1520
+  _globals['_ACTIVITYMEMORYCOMMAND']._serialized_start=1523
+  _globals['_ACTIVITYMEMORYCOMMAND']._serialized_end=1818
+  _globals['_STEPSUSPENSIONENTRY']._serialized_start=1821
+  _globals['_STEPSUSPENSIONENTRY']._serialized_end=2178
+  _globals['_STEPACTIVITYENTRY']._serialized_start=2181
+  _globals['_STEPACTIVITYENTRY']._serialized_end=2347
+  _globals['_ACTIVITYHEARTBEATREQUEST']._serialized_start=2350
+  _globals['_ACTIVITYHEARTBEATREQUEST']._serialized_end=2596
+# @@protoc_insertion_point(module_scope)

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/generated/workflow/v1/activity_pb2.pyi

@@ -23,6 +23,12 @@ class ActivityOutcomeKind(int, metaclass=_enum_type_wrapper.EnumTypeWrapper):
     ACTIVITY_OUTCOME_KIND_FAILED: _ClassVar[ActivityOutcomeKind]
     ACTIVITY_OUTCOME_KIND_DENIED: _ClassVar[ActivityOutcomeKind]
     ACTIVITY_OUTCOME_KIND_SUSPENDED: _ClassVar[ActivityOutcomeKind]
+
+class UnknownOutcomePolicy(int, metaclass=_enum_type_wrapper.EnumTypeWrapper):
+    __slots__ = ()
+    UNKNOWN_OUTCOME_POLICY_UNSPECIFIED: _ClassVar[UnknownOutcomePolicy]
+    UNKNOWN_OUTCOME_POLICY_FAIL: _ClassVar[UnknownOutcomePolicy]
+    UNKNOWN_OUTCOME_POLICY_RERUN: _ClassVar[UnknownOutcomePolicy]
 ACTIVITY_KIND_UNSPECIFIED: ActivityKind
 ACTIVITY_KIND_LLM: ActivityKind
 ACTIVITY_KIND_TOOL: ActivityKind
@@ -32,9 +38,12 @@ ACTIVITY_OUTCOME_KIND_COMPLETED: ActivityOutcomeKind
 ACTIVITY_OUTCOME_KIND_FAILED: ActivityOutcomeKind
 ACTIVITY_OUTCOME_KIND_DENIED: ActivityOutcomeKind
 ACTIVITY_OUTCOME_KIND_SUSPENDED: ActivityOutcomeKind
+UNKNOWN_OUTCOME_POLICY_UNSPECIFIED: UnknownOutcomePolicy
+UNKNOWN_OUTCOME_POLICY_FAIL: UnknownOutcomePolicy
+UNKNOWN_OUTCOME_POLICY_RERUN: UnknownOutcomePolicy
 
 class ActivityCommand(_message.Message):
-    __slots__ = ("workflow_identity", "attempt_id", "fencing_token", "position", "activity_kind", "activity_name", "semantic_input")
+    __slots__ = ("workflow_identity", "attempt_id", "fencing_token", "position", "activity_kind", "activity_name", "semantic_input", "on_unknown_outcome")
     WORKFLOW_IDENTITY_FIELD_NUMBER: _ClassVar[int]
     ATTEMPT_ID_FIELD_NUMBER: _ClassVar[int]
     FENCING_TOKEN_FIELD_NUMBER: _ClassVar[int]
@@ -42,6 +51,7 @@ class ActivityCommand(_message.Message):
     ACTIVITY_KIND_FIELD_NUMBER: _ClassVar[int]
     ACTIVITY_NAME_FIELD_NUMBER: _ClassVar[int]
     SEMANTIC_INPUT_FIELD_NUMBER: _ClassVar[int]
+    ON_UNKNOWN_OUTCOME_FIELD_NUMBER: _ClassVar[int]
     workflow_identity: _common_pb2.WorkflowIdentity
     attempt_id: str
     fencing_token: int
@@ -49,7 +59,8 @@ class ActivityCommand(_message.Message):
     activity_kind: ActivityKind
     activity_name: str
     semantic_input: _struct_pb2.Value
-    def __init__(self, workflow_identity: _Optional[_Union[_common_pb2.WorkflowIdentity, _Mapping]] = ..., attempt_id: _Optional[str] = ..., fencing_token: _Optional[int] = ..., position: _Optional[_Union[_common_pb2.ActivityPosition, _Mapping]] = ..., activity_kind: _Optional[_Union[ActivityKind, str]] = ..., activity_name: _Optional[str] = ..., semantic_input: _Optional[_Union[_struct_pb2.Value, _Mapping]] = ...) -> None: ...
+    on_unknown_outcome: UnknownOutcomePolicy
+    def __init__(self, workflow_identity: _Optional[_Union[_common_pb2.WorkflowIdentity, _Mapping]] = ..., attempt_id: _Optional[str] = ..., fencing_token: _Optional[int] = ..., position: _Optional[_Union[_common_pb2.ActivityPosition, _Mapping]] = ..., activity_kind: _Optional[_Union[ActivityKind, str]] = ..., activity_name: _Optional[str] = ..., semantic_input: _Optional[_Union[_struct_pb2.Value, _Mapping]] = ..., on_unknown_outcome: _Optional[_Union[UnknownOutcomePolicy, str]] = ...) -> None: ...
 
 class ActivityContext(_message.Message):
     __slots__ = ("workflow_identity", "activity_id", "attempt_id", "fencing_token")

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/generated/workflow/v1/state_pb2.py

@@ -27,7 +27,7 @@ from agent_engine_runner_shared.generated.workflow.v1 import activity_pb2 as wor
 from agent_engine_runner_shared.generated.workflow.v1 import common_pb2 as workflow_dot_v1_dot_common__pb2
 
 
-DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x17workflow/v1/state.proto\x12\x1bmongodb.agentic.workflow.v1\x1a\x1cgoogle/protobuf/struct.proto\x1a\x1aworkflow/v1/activity.proto\x1a\x18workflow/v1/common.proto\"\xbe\x06\n\x0fWorkflowMessage\x12<\n\x04role\x18\x01 \x01(\x0e\x32(.mongodb.agentic.workflow.v1.MessageRoleR\x04role\x12\x30\n\x07\x63ontent\x18\x02 \x01(\x0b\x32\x16.google.protobuf.ValueR\x07\x63ontent\x12\x36\n\ntool_calls\x18\x03 \x03(\x0b\x32\x17.google.protobuf.StructR\ttoolCalls\x12%\n\x0ctool_call_id\x18\x04 \x01(\tH\x00R\ntoolCallId\x88\x01\x01\x12\x17\n\x04name\x18\x05 \x01(\tH\x01R\x04name\x88\x01\x01\x12\x13\n\x02id\x18\x06 \x01(\tH\x02R\x02id\x88\x01\x01\x12\x41\n\x0esource_message\x18\t \x01(\x0b\x32\x16.google.protobuf.ValueB\x02\x18\x01R\rsourceMessage\x12\x39\n\tartifacts\x18\n \x03(\x0b\x32\x17.google.protobuf.StructB\x02\x18\x01R\tartifacts\x12\x44\n\x11\x61\x64\x64itional_kwargs\x18\x0b \x01(\x0b\x32\x17.google.protobuf.StructR\x10\x61\x64\x64itionalKwargs\x12\x44\n\x11response_metadata\x18\x0c \x01(\x0b\x32\x17.google.protobuf.StructR\x10responseMetadata\x12\x1e\n\x08is_error\x18\r \x01(\x08H\x03R\x07isError\x88\x01\x01\x12;\n\rtool_artifact\x18\x0e \x01(\x0b\x32\x16.google.protobuf.ValueR\x0ctoolArtifact\x12\x46\n\x12platform_artifacts\x18\x0f \x03(\x0b\x32\x17.google.protobuf.StructR\x11platformArtifacts\x12\x45\n\x12invalid_tool_calls\x18\x10 \x03(\x0b\x32\x17.google.protobuf.StructR\x10invalidToolCallsB\x0f\n\r_tool_call_idB\x07\n\x05_nameB\x05\n\x03_idB\x0b\n\t_is_errorJ\x04\x08\x07\x10\x08J\x04\x08\x08\x10\t\"\x92\x02\n\rStateSnapshot\x12\x37\n\nproperties\x18\x01 \x01(\x0b\x32\x17.google.protobuf.StructR\nproperties\x12H\n\x08messages\x18\x02 \x03(\x0b\x32,.mongodb.agentic.workflow.v1.WorkflowMessageR\x08messages\x12\x38\n\x18message_encoding_version\x18\x03 \x01(\rR\x16messageEncodingVersion\x12\x44\n\x11replay_properties\x18\x04 \x01(\x0b\x32\x17.google.protobuf.StructR\x10replayProperties\"\xfc\x01\n\x18\x43ompleteExecutionCommand\x12Z\n\x11workflow_identity\x18\x01 \x01(\x0b\x32-.mongodb.agentic.workflow.v1.WorkflowIdentityR\x10workflowIdentity\x12\x1d\n\nattempt_id\x18\x02 \x01(\tR\tattemptId\x12#\n\rfencing_token\x18\x03 \x01(\x03R\x0c\x66\x65ncingToken\x12@\n\x05state\x18\x04 \x01(\x0b\x32*.mongodb.agentic.workflow.v1.StateSnapshotR\x05state\"\xdd\x03\n\x13\x46inalizeStepCommand\x12Z\n\x11workflow_identity\x18\x01 \x01(\x0b\x32-.mongodb.agentic.workflow.v1.WorkflowIdentityR\x10workflowIdentity\x12\x1d\n\nattempt_id\x18\x02 \x01(\tR\tattemptId\x12#\n\rfencing_token\x18\x03 \x01(\x03R\x0c\x66\x65ncingToken\x12@\n\x05state\x18\x04 \x01(\x0b\x32*.mongodb.agentic.workflow.v1.StateSnapshotR\x05state\x12!\n\x0cstep_ordinal\x18\x05 \x01(\x03R\x0bstepOrdinal\x12m\n\x1bobserved_activity_positions\x18\x06 \x03(\x0b\x32-.mongodb.agentic.workflow.v1.ActivityPositionR\x19observedActivityPositions\x12R\n\x0bsuspensions\x18\x07 \x03(\x0b\x32\x30.mongodb.agentic.workflow.v1.StepSuspensionEntryR\x0bsuspensions\"\xa2\x01\n\x14\x46inalizeStepResponse\x12H\n\x07\x65ntries\x18\x01 \x03(\x0b\x32..mongodb.agentic.workflow.v1.StepActivityEntryR\x07\x65ntries\x12@\n\x05\x65rror\x18\x02 \x01(\x0b\x32*.mongodb.agentic.workflow.v1.WorkflowErrorR\x05\x65rror*\x8e\x01\n\x0bMessageRole\x12\x1c\n\x18MESSAGE_ROLE_UNSPECIFIED\x10\x00\x12\x15\n\x11MESSAGE_ROLE_USER\x10\x01\x12\x1a\n\x16MESSAGE_ROLE_ASSISTANT\x10\x02\x12\x15\n\x11MESSAGE_ROLE_TOOL\x10\x03\x12\x17\n\x13MESSAGE_ROLE_SYSTEM\x10\x04\x42@Z>github.com/10gen/agentic-platform/proto/workflow/v1;workflowv1b\x06proto3')
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x17workflow/v1/state.proto\x12\x1bmongodb.agentic.workflow.v1\x1a\x1cgoogle/protobuf/struct.proto\x1a\x1aworkflow/v1/activity.proto\x1a\x18workflow/v1/common.proto\"\xbe\x06\n\x0fWorkflowMessage\x12<\n\x04role\x18\x01 \x01(\x0e\x32(.mongodb.agentic.workflow.v1.MessageRoleR\x04role\x12\x30\n\x07\x63ontent\x18\x02 \x01(\x0b\x32\x16.google.protobuf.ValueR\x07\x63ontent\x12\x36\n\ntool_calls\x18\x03 \x03(\x0b\x32\x17.google.protobuf.StructR\ttoolCalls\x12%\n\x0ctool_call_id\x18\x04 \x01(\tH\x00R\ntoolCallId\x88\x01\x01\x12\x17\n\x04name\x18\x05 \x01(\tH\x01R\x04name\x88\x01\x01\x12\x13\n\x02id\x18\x06 \x01(\tH\x02R\x02id\x88\x01\x01\x12\x41\n\x0esource_message\x18\t \x01(\x0b\x32\x16.google.protobuf.ValueB\x02\x18\x01R\rsourceMessage\x12\x39\n\tartifacts\x18\n \x03(\x0b\x32\x17.google.protobuf.StructB\x02\x18\x01R\tartifacts\x12\x44\n\x11\x61\x64\x64itional_kwargs\x18\x0b \x01(\x0b\x32\x17.google.protobuf.StructR\x10\x61\x64\x64itionalKwargs\x12\x44\n\x11response_metadata\x18\x0c \x01(\x0b\x32\x17.google.protobuf.StructR\x10responseMetadata\x12\x1e\n\x08is_error\x18\r \x01(\x08H\x03R\x07isError\x88\x01\x01\x12;\n\rtool_artifact\x18\x0e \x01(\x0b\x32\x16.google.protobuf.ValueR\x0ctoolArtifact\x12\x46\n\x12platform_artifacts\x18\x0f \x03(\x0b\x32\x17.google.protobuf.StructR\x11platformArtifacts\x12\x45\n\x12invalid_tool_calls\x18\x10 \x03(\x0b\x32\x17.google.protobuf.StructR\x10invalidToolCallsB\x0f\n\r_tool_call_idB\x07\n\x05_nameB\x05\n\x03_idB\x0b\n\t_is_errorJ\x04\x08\x07\x10\x08J\x04\x08\x08\x10\t\"\x92\x02\n\rStateSnapshot\x12\x37\n\nproperties\x18\x01 \x01(\x0b\x32\x17.google.protobuf.StructR\nproperties\x12H\n\x08messages\x18\x02 \x03(\x0b\x32,.mongodb.agentic.workflow.v1.WorkflowMessageR\x08messages\x12\x38\n\x18message_encoding_version\x18\x03 \x01(\rR\x16messageEncodingVersion\x12\x44\n\x11replay_properties\x18\x04 \x01(\x0b\x32\x17.google.protobuf.StructR\x10replayProperties\"\xfc\x01\n\x18\x43ompleteExecutionCommand\x12Z\n\x11workflow_identity\x18\x01 \x01(\x0b\x32-.mongodb.agentic.workflow.v1.WorkflowIdentityR\x10workflowIdentity\x12\x1d\n\nattempt_id\x18\x02 \x01(\tR\tattemptId\x12#\n\rfencing_token\x18\x03 \x01(\x03R\x0c\x66\x65ncingToken\x12@\n\x05state\x18\x04 \x01(\x0b\x32*.mongodb.agentic.workflow.v1.StateSnapshotR\x05state\"\xdd\x03\n\x13\x46inalizeStepCommand\x12Z\n\x11workflow_identity\x18\x01 \x01(\x0b\x32-.mongodb.agentic.workflow.v1.WorkflowIdentityR\x10workflowIdentity\x12\x1d\n\nattempt_id\x18\x02 \x01(\tR\tattemptId\x12#\n\rfencing_token\x18\x03 \x01(\x03R\x0c\x66\x65ncingToken\x12@\n\x05state\x18\x04 \x01(\x0b\x32*.mongodb.agentic.workflow.v1.StateSnapshotR\x05state\x12!\n\x0cstep_ordinal\x18\x05 \x01(\x03R\x0bstepOrdinal\x12m\n\x1bobserved_activity_positions\x18\x06 \x03(\x0b\x32-.mongodb.agentic.workflow.v1.ActivityPositionR\x19observedActivityPositions\x12R\n\x0bsuspensions\x18\x07 \x03(\x0b\x32\x30.mongodb.agentic.workflow.v1.StepSuspensionEntryR\x0bsuspensions\"\xce\x01\n\x14\x46inalizeStepResponse\x12H\n\x07\x65ntries\x18\x01 \x03(\x0b\x32..mongodb.agentic.workflow.v1.StepActivityEntryR\x07\x65ntries\x12@\n\x05\x65rror\x18\x02 \x01(\x0b\x32*.mongodb.agentic.workflow.v1.WorkflowErrorR\x05\x65rror\x12*\n\x11source_state_hash\x18\x03 \x01(\tR\x0fsourceStateHash*\x8e\x01\n\x0bMessageRole\x12\x1c\n\x18MESSAGE_ROLE_UNSPECIFIED\x10\x00\x12\x15\n\x11MESSAGE_ROLE_USER\x10\x01\x12\x1a\n\x16MESSAGE_ROLE_ASSISTANT\x10\x02\x12\x15\n\x11MESSAGE_ROLE_TOOL\x10\x03\x12\x17\n\x13MESSAGE_ROLE_SYSTEM\x10\x04\x42@Z>github.com/10gen/agentic-platform/proto/workflow/v1;workflowv1b\x06proto3')
 
 _globals = globals()
 _builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
@@ -39,8 +39,8 @@ if not _descriptor._USE_C_DESCRIPTORS:
   _globals['_WORKFLOWMESSAGE'].fields_by_name['source_message']._serialized_options = b'\030\001'
   _globals['_WORKFLOWMESSAGE'].fields_by_name['artifacts']._loaded_options = None
   _globals['_WORKFLOWMESSAGE'].fields_by_name['artifacts']._serialized_options = b'\030\001'
-  _globals['_MESSAGEROLE']._serialized_start=2151
-  _globals['_MESSAGEROLE']._serialized_end=2293
+  _globals['_MESSAGEROLE']._serialized_start=2195
+  _globals['_MESSAGEROLE']._serialized_end=2337
   _globals['_WORKFLOWMESSAGE']._serialized_start=141
   _globals['_WORKFLOWMESSAGE']._serialized_end=971
   _globals['_STATESNAPSHOT']._serialized_start=974
@@ -50,5 +50,5 @@ if not _descriptor._USE_C_DESCRIPTORS:
   _globals['_FINALIZESTEPCOMMAND']._serialized_start=1506
   _globals['_FINALIZESTEPCOMMAND']._serialized_end=1983
   _globals['_FINALIZESTEPRESPONSE']._serialized_start=1986
-  _globals['_FINALIZESTEPRESPONSE']._serialized_end=2148
+  _globals['_FINALIZESTEPRESPONSE']._serialized_end=2192
 # @@protoc_insertion_point(module_scope)

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/generated/workflow/v1/state_pb2.pyi

@@ -98,9 +98,11 @@ class FinalizeStepCommand(_message.Message):
     def __init__(self, workflow_identity: _Optional[_Union[_common_pb2.WorkflowIdentity, _Mapping]] = ..., attempt_id: _Optional[str] = ..., fencing_token: _Optional[int] = ..., state: _Optional[_Union[StateSnapshot, _Mapping]] = ..., step_ordinal: _Optional[int] = ..., observed_activity_positions: _Optional[_Iterable[_Union[_common_pb2.ActivityPosition, _Mapping]]] = ..., suspensions: _Optional[_Iterable[_Union[_activity_pb2.StepSuspensionEntry, _Mapping]]] = ...) -> None: ...
 
 class FinalizeStepResponse(_message.Message):
-    __slots__ = ("entries", "error")
+    __slots__ = ("entries", "error", "source_state_hash")
     ENTRIES_FIELD_NUMBER: _ClassVar[int]
     ERROR_FIELD_NUMBER: _ClassVar[int]
+    SOURCE_STATE_HASH_FIELD_NUMBER: _ClassVar[int]
     entries: _containers.RepeatedCompositeFieldContainer[_activity_pb2.StepActivityEntry]
     error: _common_pb2.WorkflowError
-    def __init__(self, entries: _Optional[_Iterable[_Union[_activity_pb2.StepActivityEntry, _Mapping]]] = ..., error: _Optional[_Union[_common_pb2.WorkflowError, _Mapping]] = ...) -> None: ...
+    source_state_hash: str
+    def __init__(self, entries: _Optional[_Iterable[_Union[_activity_pb2.StepActivityEntry, _Mapping]]] = ..., error: _Optional[_Union[_common_pb2.WorkflowError, _Mapping]] = ..., source_state_hash: _Optional[str] = ...) -> None: ...

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/mcp_tools.py

@@ -43,6 +43,7 @@ class MCPToolBinding:
     description: str
     input_schema: dict[str, Any]
     server_config: RuntimeMCPServerConfig
+    annotations: dict[str, Any] | None = None
 
 
 class MCPToolResult(BaseModel):
@@ -177,6 +178,7 @@ async def discover_mcp_tools_async(config: RuntimeMCPConfig) -> list[MCPToolBind
                     description=tool.description or "",
                     input_schema=dict(tool.inputSchema),
                     server_config=server_config,
+                    annotations=normalize_mcp_tool_annotations(getattr(tool, "annotations", None)),
                 )
             )
 
@@ -397,6 +399,35 @@ def _run_coroutine_sync(
     raise active_loop_error
 
 
+def normalize_mcp_tool_annotations(value: Any) -> dict[str, Any] | None:
+    """Return a JSON-safe copy of MCP ``Tool.annotations``, or ``None``.
+
+    Missing or malformed values stay missing. The SDK must not apply MCP client
+    defaults (``readOnlyHint: false``, ``destructiveHint: true``, …); applications
+    fail closed when hints are absent. Pydantic models are dumped with
+    ``exclude_unset=True`` so SDK field defaults are not invented as server hints.
+    """
+
+    if value is None:
+        return None
+    dumped: Any = value
+    model_dump = getattr(value, "model_dump", None)
+    if callable(model_dump):
+        try:
+            dumped = model_dump(mode="json", exclude_unset=True)
+        except Exception:
+            return None
+    if not isinstance(dumped, dict):
+        return None
+    try:
+        parsed = json.loads(json.dumps(dumped, allow_nan=False))
+    except (TypeError, ValueError):
+        return None
+    if not isinstance(parsed, dict):
+        return None
+    return parsed
+
+
 def _ensure_json_safe(field_name: str, value: Any) -> None:
     try:
         json.dumps(value)
@@ -467,6 +498,7 @@ __all__ = [
     "make_mcp_tool_pod_callable",
     "make_sync_mcp_tool_callable",
     "mcp_server_network_hosts",
+    "normalize_mcp_tool_annotations",
     "normalize_mcp_tool_result",
     "resolve_mcp_auth",
     "resolve_mcp_headers",

{agent_engine_runner_shared-0.11.8 → agent_engine_runner_shared-0.11.9}/src/agent_engine_runner_shared/models.py

@@ -1325,6 +1325,14 @@ class LLMPodStreamEvent(BaseModel):
 class ExecutorCallbackRequest(BaseModel):
     """Callback from AER to OE when execution completes or suspends."""
 
+    attempt_id: Optional[str] = Field(
+        default=None,
+        min_length=1,
+        description="Originating durable attempt returned by StartAttempt",
+    )
+    attempt_fence: Optional[int] = Field(
+        default=None, ge=1, description="Fence returned with the originating durable attempt"
+    )
     execution_id: str = Field(..., description="Execution identifier")
     status: str = Field(..., description="Status: COMPLETED, SUSPENDED, ERROR")
     suspend_generation: Optional[int] = Field(