agent-framework-lib 0.8.8.post3__tar.gz → 0.8.8.post5__tar.gz

{agent_framework_lib-0.8.8.post3/agent_framework_lib.egg-info → agent_framework_lib-0.8.8.post5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-framework-lib
-Version: 0.8.8.post3
+Version: 0.8.8.post5
 Summary: A comprehensive Python framework for building and serving conversational AI agents with FastAPI
 Author-email: Sebastian Pavel <sebastian@cinco.ai>, Elliott Girard <elliott.girard@icloud.com>
 Maintainer-email: Sebastian Pavel <sebastian@cinco.ai>

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/memory/providers/graphiti_provider.py

@@ -335,7 +335,6 @@ class GraphitiProvider(MemoryProviderInterface):
         """
         import os
 
-        from graphiti_core.driver.driver import GraphDriver
         from graphiti_core.driver.neo4j_driver import Neo4jDriver
         from neo4j import AsyncGraphDatabase
 
@@ -351,9 +350,16 @@ class GraphitiProvider(MemoryProviderInterface):
 
         class _FailFastNeo4jDriver(Neo4jDriver):
             def __init__(self, uri: str, user, password, database: str = "neo4j") -> None:
-                # Bypass Neo4jDriver.__init__ on purpose (untuned client + auto
-                # index scheduling). Initialize the base, then a TUNED client.
-                GraphDriver.__init__(self)
+                # Run the REAL Neo4jDriver.__init__ so every version-specific
+                # attribute exists (graphiti>=0.29 instantiates its Neo4j*Operations
+                # objects there — the previous bypass crashed at runtime with
+                # AttributeError: '_entity_node_ops'). The two stock behaviors we
+                # need to tame are handled differently: the UNTUNED client it
+                # builds is swapped for a tuned one right after, and the
+                # unconditional index scheduling is neutered via the
+                # build_indices_and_constraints override below.
+                super().__init__(uri, user, password, database)
+                untuned = self.client
                 self.client = AsyncGraphDatabase.driver(
                     uri=uri,
                     auth=(user or "", password or ""),
@@ -361,15 +367,19 @@ class GraphitiProvider(MemoryProviderInterface):
                     connection_acquisition_timeout=_f("NEO4J_CONN_ACQ_TIMEOUT", 5.0),
                     connection_timeout=conn_timeout,
                 )
-                self._database = database
-                self.aoss_client = None
-                if not skip_indices:
-                    import asyncio
-
-                    try:
-                        asyncio.get_running_loop().create_task(self.build_indices_and_constraints())
-                    except RuntimeError:
-                        pass
+                import asyncio
+                import contextlib
+
+                with contextlib.suppress(RuntimeError):
+                    asyncio.get_running_loop().create_task(untuned.close())
+
+            async def build_indices_and_constraints(self, delete_existing: bool = False):
+                # Scheduled unconditionally by Neo4jDriver.__init__ (the source of
+                # the CREATE INDEX boot storm); honor skip_index_creation here.
+                # When it does run, it uses self.client — already the tuned one.
+                if skip_indices:
+                    return None
+                return await super().build_indices_and_constraints(delete_existing)
 
         driver = _FailFastNeo4jDriver(
             self.config.neo4j_uri,

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/security/authz.py

@@ -58,19 +58,20 @@ def auth_required() -> bool:
 def trust_client_user_id() -> bool:
     """Le déployeur fait confiance au client pour fournir le ``user_id``.
 
-    Activé via ``AUTH_TRUST_CLIENT_USER_ID``. Cas d'usage : un backend de
-    confiance authentifié par API key (un portail) qui multiplexe plusieurs
-    end-users et passe leur ``user_id`` en paramètre. Quand actif, le serveur
-    HONORE le ``user_id`` client (au lieu de le forcer au principal authentifié),
-    et ``is_owner`` autorise ce principal de confiance sur toute ressource —
-    l'auth (API key) reste exigée, mais le contrôle par end-user est délégué au
-    portail.
-
-    ⚠️ N'activer QUE si le client est de confiance et applique lui-même le
-    contrôle d'accès par end-user — sinon tout détenteur de la clé peut réclamer
-    n'importe quel ``user_id``.
+    Piloté par ``AUTH_TRUST_CLIENT_USER_ID`` (défaut ``true``). Cas d'usage
+    nominal : un backend de confiance authentifié par API key (un portail) qui
+    multiplexe plusieurs end-users et passe leur ``user_id`` en paramètre. Quand
+    actif, le serveur HONORE le ``user_id`` client (au lieu de le forcer au
+    principal authentifié), et ``is_owner`` autorise ce principal de confiance
+    sur toute ressource — l'auth (API key) reste exigée, mais le contrôle par
+    end-user est délégué au portail.
+
+    ⚠️ Tout détenteur d'une clé valide peut alors agir pour n'importe quel
+    ``user_id``. Pour un déploiement multi-tenant strict où les clients ne sont
+    PAS de confiance, mettre ``AUTH_TRUST_CLIENT_USER_ID=false`` (le serveur lie
+    alors chaque requête au principal authentifié, anti-usurpation).
     """
-    return _env_flag("AUTH_TRUST_CLIENT_USER_ID")
+    return os.environ.get("AUTH_TRUST_CLIENT_USER_ID", "true").strip().lower() == "true"
 
 
 def resolve_effective_user_id(current_user: str, requested_user_id: str | None) -> str:

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/skills/builtin/scripts/create_and_register.py

@@ -164,12 +164,16 @@ def main() -> None:
 
     skill, filename, output_dir, extra_args = _parse_args(sys.argv[1:])
 
-    # Default to the per-invocation AGENT_OUTPUT_DIR when no explicit directory
-    # is given. This guarantees that generated files land where the ShellTool
-    # passive finalizer scans, so they are registered (and their links surfaced)
-    # even if this process is killed before it can upload them itself.
-    if not output_dir:
-        output_dir = os.environ.get("AGENT_OUTPUT_DIR") or None
+    # Always write the generated file INTO AGENT_OUTPUT_DIR when it is set (the
+    # per-command directory the ShellTool parent finalizer collects). We strip any
+    # directory from --filename and override a caller-supplied --output-dir so a
+    # generated file can NEVER land somewhere the finalizer does not look (e.g.
+    # /tmp). Outside a finalizer context (AGENT_OUTPUT_DIR unset) the caller's
+    # --output-dir is honored as before.
+    agent_output_dir = os.environ.get("AGENT_OUTPUT_DIR")
+    if agent_output_dir:
+        output_dir = agent_output_dir
+    filename = os.path.basename(filename)
 
     module = SKILL_MODULE_MAP.get(skill)
     if module is None:
@@ -179,23 +183,26 @@ def main() -> None:
 
     _verify_file(filepath)
 
-    # In the per-session sandbox the network is cut: the in-shell HTTP upload
-    # cannot reach the server. The file is left in AGENT_OUTPUT_DIR and the
-    # ShellTool parent finalizer (which HAS network + creds) registers it. We
-    # must NOT print a file_id here, otherwise the finalizer treats the file as
-    # already uploaded and skips it → the link 404s.
-    skip_upload = os.environ.get("AGENT_SKILL_SKIP_HTTP_UPLOAD", "").lower() in ("1", "true", "yes")
-    upload_result = {} if skip_upload else _upload_file(filepath)
-
-    # Local file is kept by default so downstream consumers (e.g. PowerPoint skill
-    # embedding charts/mermaid) can still read it. Set AGENT_CLEANUP_LOCAL=1 in the
-    # environment to delete it after successful upload.
+    # Delivery is the ShellTool parent finalizer's job (it has network + creds; the
+    # sandbox does not). The in-shell HTTP upload is OFF by default and never runs
+    # in the sandbox: it derails the agent (401 on an unreachable target) and a
+    # printed file_id makes the finalizer skip the file. Opt in explicitly with
+    # AGENT_SKILL_HTTP_UPLOAD=1 for legacy/local non-finalizer flows only.
+    do_upload = os.environ.get("AGENT_SKILL_HTTP_UPLOAD", "").lower() in ("1", "true", "yes")
+    upload_result = _upload_file(filepath) if do_upload else {}
+
+    # Keep the local file unless an explicit upload happened AND cleanup is asked:
+    # the finalizer needs the file on disk to deliver it. Never delete on the
+    # default (no-upload) path, or there would be nothing left to register.
     local_cleaned = False
-    if os.environ.get("AGENT_CLEANUP_LOCAL", "").lower() in ("1", "true", "yes"):
+    if (
+        do_upload
+        and upload_result
+        and os.environ.get("AGENT_CLEANUP_LOCAL", "").lower() in ("1", "true", "yes")
+    ):
         local_cleaned = _cleanup(filepath)
 
     mime = _guess_mime(filepath)
-    size_bytes = upload_result.get("size_bytes", 0)
 
     output = {
         "status": "success",
@@ -203,13 +210,24 @@ def main() -> None:
         # table, image_gen) so callers can embed the local PNG when needed.
         # Empty if local was cleaned up.
         "file": "" if local_cleaned else filepath,
-        "file_id": upload_result.get("file_id", ""),
-        "download_url": upload_result.get("download_url", ""),
         "filename": os.path.basename(filepath),
-        "size_bytes": size_bytes,
         "mime_type": mime,
         "local_cleaned": local_cleaned,
+        # The file is created; the framework delivers it to storage automatically
+        # and appends the download link to this command's result. The agent must
+        # NOT try to upload or authenticate.
+        "delivery": "automatic",
+        "message": (
+            f"File '{os.path.basename(filepath)}' created successfully and is being "
+            "delivered to storage automatically — the download link appears in this "
+            "command's result. Do not upload or authenticate."
+        ),
     }
+    # Surface storage fields ONLY when an explicit upload actually happened.
+    if upload_result:
+        output["file_id"] = upload_result.get("file_id", "")
+        output["download_url"] = upload_result.get("download_url", "")
+        output["size_bytes"] = upload_result.get("size_bytes", 0)
     print(json.dumps(output))
 
 

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/skills/builtin/skills/chart/SKILL.md

@@ -224,13 +224,17 @@ echo '{
 
 ### Output Format (stdout)
 
-On success, the script prints a JSON object to stdout with the download URL:
+On success, the script prints a JSON object confirming the file was created:
 
 ```json
-{"status": "success", "file_id": "uuid", "download_url": "/files/uuid/download", "filename": "monthly_sales.png", "size_bytes": 1234, "mime_type": "image/png", "local_cleaned": true}
+{"status": "success", "filename": "monthly_sales.png", "mime_type": "image/png", "delivery": "automatic", "message": "File 'monthly_sales.png' created successfully and is being delivered to storage automatically — the download link appears in this command's result."}
 ```
 
-Use the `download_url` to provide the user with a download link: `[monthly_sales.png](/files/uuid/download)`
+The file is delivered to storage **automatically** by the framework — you do NOT
+upload, register, or authenticate anything. The download link
+(`/files/<uuid>/download`) is appended to this command's result; present it to the
+user as `[monthly_sales.png](/files/<uuid>/download)`. Do not improvise an upload or
+write the file elsewhere — just run the command above and read the link from the result.
 
 ### ⚠️ Generating MULTIPLE images — read this carefully
 

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/skills/builtin/skills/csv/SKILL.md

@@ -92,14 +92,15 @@ Widget C,39.99,200
 
 ### Output Format (stdout)
 
+On success, the script prints a JSON object confirming the file was created:
+
 ```json
 {
   "status": "success",
-  "file_id": "uuid",
-  "download_url": "/files/uuid/download",
   "filename": "products.csv",
-  "size_bytes": 124,
   "mime_type": "text/csv",
+  "delivery": "automatic",
+  "message": "File 'products.csv' created successfully and is being delivered to storage automatically — the download link appears in this command's result.",
   "metadata": {
     "rows": 3,
     "columns": 3,
@@ -108,6 +109,12 @@ Widget C,39.99,200
 }
 ```
 
+The file is delivered to storage **automatically** by the framework — you do NOT
+upload, register, or authenticate anything. The download link
+(`/files/<uuid>/download`) is appended to this command's result; present it to the
+user as `[products.csv](/files/<uuid>/download)`. Do not improvise an upload or write
+the file elsewhere — just run the command above and read the link from the result.
+
 ---
 
 ## Operation 2: Read CSV to JSON
@@ -276,12 +283,15 @@ uv run python agent_framework/skills/builtin/skills/csv/transform_csv.py \
 
 ### Output Format (stdout)
 
+On success, the script prints a JSON object confirming the file was created:
+
 ```json
 {
   "status": "success",
-  "file_id": "uuid",
-  "download_url": "/files/uuid/download",
   "filename": "filtered.csv",
+  "mime_type": "text/csv",
+  "delivery": "automatic",
+  "message": "File 'filtered.csv' created successfully and is being delivered to storage automatically — the download link appears in this command's result.",
   "metadata": {
     "input_rows": 100,
     "output_rows": 25,
@@ -290,6 +300,12 @@ uv run python agent_framework/skills/builtin/skills/csv/transform_csv.py \
 }
 ```
 
+The file is delivered to storage **automatically** by the framework — you do NOT
+upload, register, or authenticate anything. The download link
+(`/files/<uuid>/download`) is appended to this command's result; present it to the
+user as `[filtered.csv](/files/<uuid>/download)`. Do not improvise an upload or write
+the file elsewhere — just run the command above and read the link from the result.
+
 ---
 
 ## Error Handling (stderr)

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/skills/builtin/skills/drawio/SKILL.md

@@ -79,13 +79,17 @@ uv run python -m agent_framework.skills.builtin.scripts.create_and_register --sk
 
 ### Output Format (stdout)
 
-On success, the script prints a JSON object to stdout with the download URL:
+On success, the script prints a JSON object confirming the file was created:
 
 ```json
-{"status": "success", "file_id": "uuid", "download_url": "/files/uuid/download", "filename": "order_flow.drawio", "size_bytes": 1234, "mime_type": "application/xml", "local_cleaned": true}
+{"status": "success", "filename": "order_flow.drawio", "mime_type": "application/xml", "delivery": "automatic", "message": "File 'order_flow.drawio' created successfully and is being delivered to storage automatically — the download link appears in this command's result."}
 ```
 
-Use the `download_url` to provide the user with a download link: `[order_flow.drawio](/files/uuid/download)`
+The file is delivered to storage **automatically** by the framework — you do NOT
+upload, register, or authenticate anything. The download link
+(`/files/<uuid>/download`) is appended to this command's result; present it to the
+user as `[order_flow.drawio](/files/<uuid>/download)`. Do not improvise an upload or
+write the file elsewhere — just run the command above and read the link from the result.
 
 ### Error Handling (stderr)
 

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/skills/builtin/skills/excel/SKILL.md

@@ -74,17 +74,17 @@ echo '[
 
 ### Output Format (stdout)
 
-On success, the script prints a JSON object to stdout with the download URL:
+On success, the script prints a JSON object confirming the file was created:
 
 ```json
-{"status": "success", "file_id": "uuid", "download_url": "/files/uuid/download", "filename": "sales_report.xlsx", "size_bytes": 1234, "mime_type": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", "local_cleaned": true}
+{"status": "success", "filename": "sales_report.xlsx", "mime_type": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", "delivery": "automatic", "message": "File 'sales_report.xlsx' created successfully and is being delivered to storage automatically — the download link appears in this command's result."}
 ```
 
-Use the `download_url` from this response to provide the user with a download link:
-
-```
-[sales_report.xlsx](/files/uuid/download)
-```
+The file is delivered to storage **automatically** by the framework — you do NOT
+upload, register, or authenticate anything. The download link
+(`/files/<uuid>/download`) is appended to this command's result; present it to the
+user as `[sales_report.xlsx](/files/<uuid>/download)`. Do not improvise an upload or
+write the file elsewhere — just run the command above and read the link from the result.
 
 ### Error Handling (stderr)
 

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/skills/builtin/skills/file/SKILL.md

@@ -76,11 +76,17 @@ echo "Hello, world!" | uv run python -m agent_framework.skills.builtin.scripts.c
 
 #### Output Format (stdout)
 
+On success, the script prints a JSON object confirming the file was created:
+
 ```json
-{"status": "success", "file_id": "uuid", "download_url": "/files/uuid/download", "filename": "report.txt", "size_bytes": 1234, "mime_type": "text/plain", "local_cleaned": true}
+{"status": "success", "filename": "report.txt", "mime_type": "text/plain", "delivery": "automatic", "message": "File 'report.txt' created successfully and is being delivered to storage automatically — the download link appears in this command's result."}
 ```
 
-Use the `download_url` to provide the user with a download link: `[report.txt](/files/uuid/download)`
+The file is delivered to storage **automatically** by the framework — you do NOT
+upload, register, or authenticate anything. The download link
+(`/files/<uuid>/download`) is appended to this command's result; present it to the
+user as `[report.txt](/files/<uuid>/download)`. Do not improvise an upload or write
+the file elsewhere — just run the command above and read the link from the result.
 
 #### Error Handling (stderr)
 

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/skills/builtin/skills/image_gen/SKILL.md

@@ -192,17 +192,15 @@ To use DALL-E 3 instead, set `"model": "dall-e-3"` (with `quality` `standard`/`h
 
 ## Output Format (stdout)
 
-On success, the script prints a JSON object with download information:
+On success, the script prints a JSON object confirming the file was created:
 
 ```json
 {
   "status": "success",
-  "file_id": "uuid",
-  "download_url": "/files/uuid/download",
   "filename": "mountain_landscape.png",
-  "size_bytes": 234567,
   "mime_type": "image/png",
-  "local_cleaned": true,
+  "delivery": "automatic",
+  "message": "File 'mountain_landscape.png' created successfully and is being delivered to storage automatically — the download link appears in this command's result.",
   "metadata": {
     "model": "gpt-image-1",
     "size": "1536x1024",
@@ -214,10 +212,11 @@ On success, the script prints a JSON object with download information:
 
 **Note**: The `revised_prompt` field (when provided by the model) shows how OpenAI interpreted and enhanced your original prompt.
 
-Use the `download_url` to provide a download link:
-```
-[Download image](/files/uuid/download)
-```
+The file is delivered to storage **automatically** by the framework — you do NOT
+upload, register, or authenticate anything. The download link
+(`/files/<uuid>/download`) is appended to this command's result; present it to the
+user as `[mountain_landscape.png](/files/<uuid>/download)`. Do not improvise an upload or
+write the file elsewhere — just run the command above and read the link from the result.
 
 ---
 

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/skills/builtin/skills/mermaid/SKILL.md

@@ -145,13 +145,17 @@ echo 'sequenceDiagram
 
 ### Output Format (stdout)
 
-On success, the script prints a JSON object to stdout with the download URL:
+On success, the script prints a JSON object confirming the file was created:
 
 ```json
-{"status": "success", "file_id": "uuid", "download_url": "/files/uuid/download", "filename": "diagram.png", "size_bytes": 1234, "mime_type": "image/png", "local_cleaned": true}
+{"status": "success", "filename": "diagram.png", "mime_type": "image/png", "delivery": "automatic", "message": "File 'diagram.png' created successfully and is being delivered to storage automatically — the download link appears in this command's result."}
 ```
 
-Use the `download_url` to provide the user with a download link: `[diagram.png](/files/uuid/download)`
+The file is delivered to storage **automatically** by the framework — you do NOT
+upload, register, or authenticate anything. The download link
+(`/files/<uuid>/download`) is appended to this command's result; present it to the
+user as `[diagram.png](/files/<uuid>/download)`. Do not improvise an upload or write
+the file elsewhere — just run the command above and read the link from the result.
 
 ### Error Handling (stderr)
 

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/skills/builtin/skills/powerpoint/SKILL.md

@@ -770,17 +770,15 @@ echo '{
 
 ## Output Format (stdout)
 
-On success, the script prints a JSON object with download information:
+On success, the script prints a JSON object confirming the file was created:
 
 ```json
 {
   "status": "success",
-  "file_id": "uuid",
-  "download_url": "/files/uuid/download",
   "filename": "Q4_review.pptx",
-  "size_bytes": 45678,
   "mime_type": "application/vnd.openxmlformats-officedocument.presentationml.presentation",
-  "local_cleaned": true,
+  "delivery": "automatic",
+  "message": "File 'Q4_review.pptx' created successfully and is being delivered to storage automatically — the download link appears in this command's result.",
   "metadata": {
     "slide_count": 12,
     "theme": "consulting",
@@ -805,10 +803,11 @@ On success, the script prints a JSON object with download information:
 | `assets_generated` | int | Number of assets generated via external skills |
 | `suggested_structure` | array or null | Slide structure plan (deck strategy mode only) |
 
-Use the `download_url` to provide a download link:
-```
-[Download presentation](/files/uuid/download)
-```
+The file is delivered to storage **automatically** by the framework — you do NOT
+upload, register, or authenticate anything. The download link
+(`/files/<uuid>/download`) is appended to this command's result; present it to the
+user as `[Q4_review.pptx](/files/<uuid>/download)`. Do not improvise an upload or write
+the file elsewhere — just run the command above and read the link from the result.
 
 ---
 

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/skills/builtin/skills/table/SKILL.md

@@ -156,13 +156,17 @@ echo '{
 
 ### Output Format (stdout)
 
-On success, the script prints a JSON object to stdout with the download URL:
+On success, the script prints a JSON object confirming the file was created:
 
 ```json
-{"status": "success", "file_id": "uuid", "download_url": "/files/uuid/download", "filename": "sales_table.png", "size_bytes": 1234, "mime_type": "image/png", "local_cleaned": true}
+{"status": "success", "filename": "sales_table.png", "mime_type": "image/png", "delivery": "automatic", "message": "File 'sales_table.png' created successfully and is being delivered to storage automatically — the download link appears in this command's result."}
 ```
 
-Use the `download_url` to provide the user with a download link: `[sales_table.png](/files/uuid/download)`
+The file is delivered to storage **automatically** by the framework — you do NOT
+upload, register, or authenticate anything. The download link
+(`/files/<uuid>/download`) is appended to this command's result; present it to the
+user as `[sales_table.png](/files/<uuid>/download)`. Do not improvise an upload or write
+the file elsewhere — just run the command above and read the link from the result.
 
 ### Error Handling (stderr)
 

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/skills/builtin/skills/unified_pdf/SKILL.md

@@ -156,13 +156,17 @@ echo '<h1>Meeting Notes</h1>
 
 ### Output Format (stdout)
 
-On success, the script prints a JSON object to stdout with the download URL:
+On success, the script prints a JSON object confirming the file was created:
 
 ```json
-{"status": "success", "file_id": "uuid", "download_url": "/files/uuid/download", "filename": "report.pdf", "size_bytes": 1234, "mime_type": "application/pdf", "local_cleaned": true}
+{"status": "success", "filename": "report.pdf", "mime_type": "application/pdf", "delivery": "automatic", "message": "File 'report.pdf' created successfully and is being delivered to storage automatically — the download link appears in this command's result."}
 ```
 
-Use the `download_url` to provide the user with a download link: `[report.pdf](/files/uuid/download)`
+The file is delivered to storage **automatically** by the framework — you do NOT
+upload, register, or authenticate anything. The download link
+(`/files/<uuid>/download`) is appended to this command's result; present it to the
+user as `[report.pdf](/files/<uuid>/download)`. Do not improvise an upload or write
+the file elsewhere — just run the command above and read the link from the result.
 
 ### Error Handling (stderr)
 

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/skills/builtin/skills/word/SKILL.md

@@ -335,28 +335,17 @@ echo '{
 
 ## Output Format (stdout)
 
-On success, the script prints a JSON object with download information:
+On success, the script prints a JSON object confirming the file was created:
 
 ```json
-{
-  "status": "success",
-  "file_id": "uuid",
-  "download_url": "/files/uuid/download",
-  "filename": "Q4_2024_Report.docx",
-  "size_bytes": 78456,
-  "mime_type": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-  "local_cleaned": true,
-  "metadata": {
-    "section_count": 10,
-    "page_count": 3
-  }
-}
+{"status": "success", "filename": "Q4_2024_Report.docx", "mime_type": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "delivery": "automatic", "message": "File 'Q4_2024_Report.docx' created successfully and is being delivered to storage automatically — the download link appears in this command's result."}
 ```
 
-Use the `download_url` to provide a download link:
-```
-[Download document](/files/uuid/download)
-```
+The file is delivered to storage **automatically** by the framework — you do NOT
+upload, register, or authenticate anything. The download link
+(`/files/<uuid>/download`) is appended to this command's result; present it to the
+user as `[Q4_2024_Report.docx](/files/<uuid>/download)`. Do not improvise an upload or
+write the file elsewhere — just run the command above and read the link from the result.
 
 ---
 

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5}/agent_framework/tools/shell_tool.py

@@ -175,6 +175,10 @@ class ShellTool(AgentTool):
         # Avoids rescanning os.environ + rebuilding the redactor on every command.
         self._redactor: SecretRedactor | None = None
         self._redactor_env_values: list[str] | None = None
+        # Per-command ephemeral secrets (e.g. the minted AGENT_SESSION_TOKEN). These
+        # never live in os.environ, so the env-scan redactor would miss them — they
+        # are registered here at mint time so they are masked in shell output.
+        self._ephemeral_secret_values: set[str] = set()
 
     def set_skill_env_provider(self, provider: Callable[[], Iterable[str]] | None) -> None:
         """Set the callback that lists env vars required by loaded skills.
@@ -250,7 +254,11 @@ class ShellTool(AgentTool):
 
         if self._redactor_env_values is None:
             self._redactor_env_values = sensitive_env_values(os.environ)
-        values = [*self._redactor_env_values, *self._workspace_secrets.values()]
+        values = [
+            *self._redactor_env_values,
+            *self._workspace_secrets.values(),
+            *self._ephemeral_secret_values,
+        ]
         self._redactor = SecretRedactor(values)
         return self._redactor
 
@@ -347,9 +355,15 @@ class ShellTool(AgentTool):
                 from agent_framework.security.upload_token import sign_upload_token
 
                 ttl = _env_int("SHELL_SESSION_TOKEN_TTL", 1800)
-                env["AGENT_SESSION_TOKEN"] = sign_upload_token(
+                token = sign_upload_token(
                     self.current_user_id, self.current_session_id, ttl=ttl
                 )
+                env["AGENT_SESSION_TOKEN"] = token
+                # Register the ephemeral token so it is masked in shell output
+                # (it is never in os.environ → the env-scan redactor would miss it,
+                # e.g. a leak via `env` in the shell). Invalidate the cached redactor.
+                self._ephemeral_secret_values.add(token)
+                self._redactor = None
             except Exception as e:  # noqa: BLE001 — never let token minting break the shell
                 logger.warning("ShellTool: session token minting failed: %s", e)
         # Ensure server connection info is available
@@ -754,15 +768,6 @@ class ShellTool(AgentTool):
         )
         env["AGENT_HOST"] = callback_host
         env["AGENT_PORT"] = str(callback_port)
-        # In the per-session sandbox the in-shell HTTP upload is the WRONG path:
-        # the sandbox is a sibling container with no reliable route back to the
-        # agent (in Coolify the agent port is not published — host.docker.internal
-        # :8000 is NOT the agent → 401/wrong server). The skill therefore only
-        # WRITES its file to AGENT_OUTPUT_DIR; the parent ShellTool finalizer pulls
-        # it out via the gateway (collect_out) and registers it to the agent itself
-        # (localhost) with the session token. Forcing skip also prevents the skill
-        # from printing a file_id that would make the finalizer skip the file.
-        env["AGENT_SKILL_SKIP_HTTP_UPLOAD"] = "true"
         # Tell upload scripts whether to authenticate.
         env["REQUIRE_AUTH"] = os.environ.get("REQUIRE_AUTH", "false")
         # Scoped, short-lived session token (HMAC, user/session) so the sandbox
@@ -772,9 +777,15 @@ class ShellTool(AgentTool):
                 from agent_framework.security.upload_token import sign_upload_token
 
                 ttl = _env_int("SHELL_SESSION_TOKEN_TTL", 1800)
-                env["AGENT_SESSION_TOKEN"] = sign_upload_token(
+                token = sign_upload_token(
                     self.current_user_id, self.current_session_id, ttl=ttl
                 )
+                env["AGENT_SESSION_TOKEN"] = token
+                # Register the ephemeral token so it is masked in shell output
+                # (it is never in os.environ → the env-scan redactor would miss it,
+                # e.g. a leak via `env` in the shell). Invalidate the cached redactor.
+                self._ephemeral_secret_values.add(token)
+                self._redactor = None
             except Exception as e:  # noqa: BLE001 — never let token minting break the shell
                 logger.warning("ShellTool: sandbox session token minting failed: %s", e)
 

{agent_framework_lib-0.8.8.post3 → agent_framework_lib-0.8.8.post5/agent_framework_lib.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-framework-lib
-Version: 0.8.8.post3
+Version: 0.8.8.post5
 Summary: A comprehensive Python framework for building and serving conversational AI agents with FastAPI
 Author-email: Sebastian Pavel <sebastian@cinco.ai>, Elliott Girard <elliott.girard@icloud.com>
 Maintainer-email: Sebastian Pavel <sebastian@cinco.ai>