agent-framework-lib 0.8.8.post4__tar.gz → 0.8.8.post6__tar.gz

{agent_framework_lib-0.8.8.post4/agent_framework_lib.egg-info → agent_framework_lib-0.8.8.post6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-framework-lib
-Version: 0.8.8.post4
+Version: 0.8.8.post6
 Summary: A comprehensive Python framework for building and serving conversational AI agents with FastAPI
 Author-email: Sebastian Pavel <sebastian@cinco.ai>, Elliott Girard <elliott.girard@icloud.com>
 Maintainer-email: Sebastian Pavel <sebastian@cinco.ai>

{agent_framework_lib-0.8.8.post4 → agent_framework_lib-0.8.8.post6}/agent_framework/__init__.py

@@ -32,7 +32,6 @@ Example Usage:
     create_basic_agent_server(MyAgent, port=8000)
     ```
 
-Version: 0.8.8
 Author: Cinco AI Team
 License: MIT
 """
@@ -137,7 +136,18 @@ def _run_auto_setup() -> None:
 # Track if auto-setup has been done
 _AUTO_SETUP_DONE = False
 
-__version__ = "0.8.7"
+# Resolved from the installed package metadata — the single source of truth is
+# pyproject.toml. NEVER hardcode a version here: ensure_sandbox_image() uses
+# __version__ both to decide whether the sandbox image is stale (label compare)
+# and to pick WHICH release to install inside it. A stale hardcoded value froze
+# the sandbox image on that old release forever (skills inside the sandbox ran
+# weeks-old code regardless of the deployed agent version).
+try:
+    from importlib.metadata import version as _pkg_version
+
+    __version__ = _pkg_version("agent-framework-lib")
+except Exception:  # noqa: BLE001 — running from a source tree without install
+    __version__ = "0.0.0+unknown"
 __author__ = "Cinco AI Team"
 __license__ = "MIT"
 __email__ = "sebastian@cinco.ai"

{agent_framework_lib-0.8.8.post4 → agent_framework_lib-0.8.8.post6}/agent_framework/memory/providers/graphiti_provider.py

@@ -335,7 +335,6 @@ class GraphitiProvider(MemoryProviderInterface):
         """
         import os
 
-        from graphiti_core.driver.driver import GraphDriver
         from graphiti_core.driver.neo4j_driver import Neo4jDriver
         from neo4j import AsyncGraphDatabase
 
@@ -351,9 +350,16 @@ class GraphitiProvider(MemoryProviderInterface):
 
         class _FailFastNeo4jDriver(Neo4jDriver):
             def __init__(self, uri: str, user, password, database: str = "neo4j") -> None:
-                # Bypass Neo4jDriver.__init__ on purpose (untuned client + auto
-                # index scheduling). Initialize the base, then a TUNED client.
-                GraphDriver.__init__(self)
+                # Run the REAL Neo4jDriver.__init__ so every version-specific
+                # attribute exists (graphiti>=0.29 instantiates its Neo4j*Operations
+                # objects there — the previous bypass crashed at runtime with
+                # AttributeError: '_entity_node_ops'). The two stock behaviors we
+                # need to tame are handled differently: the UNTUNED client it
+                # builds is swapped for a tuned one right after, and the
+                # unconditional index scheduling is neutered via the
+                # build_indices_and_constraints override below.
+                super().__init__(uri, user, password, database)
+                untuned = self.client
                 self.client = AsyncGraphDatabase.driver(
                     uri=uri,
                     auth=(user or "", password or ""),
@@ -361,15 +367,19 @@ class GraphitiProvider(MemoryProviderInterface):
                     connection_acquisition_timeout=_f("NEO4J_CONN_ACQ_TIMEOUT", 5.0),
                     connection_timeout=conn_timeout,
                 )
-                self._database = database
-                self.aoss_client = None
-                if not skip_indices:
-                    import asyncio
-
-                    try:
-                        asyncio.get_running_loop().create_task(self.build_indices_and_constraints())
-                    except RuntimeError:
-                        pass
+                import asyncio
+                import contextlib
+
+                with contextlib.suppress(RuntimeError):
+                    asyncio.get_running_loop().create_task(untuned.close())
+
+            async def build_indices_and_constraints(self, delete_existing: bool = False):
+                # Scheduled unconditionally by Neo4jDriver.__init__ (the source of
+                # the CREATE INDEX boot storm); honor skip_index_creation here.
+                # When it does run, it uses self.client — already the tuned one.
+                if skip_indices:
+                    return None
+                return await super().build_indices_and_constraints(delete_existing)
 
         driver = _FailFastNeo4jDriver(
             self.config.neo4j_uri,

{agent_framework_lib-0.8.8.post4 → agent_framework_lib-0.8.8.post6}/agent_framework/security/authz.py

@@ -58,19 +58,20 @@ def auth_required() -> bool:
 def trust_client_user_id() -> bool:
     """Le déployeur fait confiance au client pour fournir le ``user_id``.
 
-    Activé via ``AUTH_TRUST_CLIENT_USER_ID``. Cas d'usage : un backend de
-    confiance authentifié par API key (un portail) qui multiplexe plusieurs
-    end-users et passe leur ``user_id`` en paramètre. Quand actif, le serveur
-    HONORE le ``user_id`` client (au lieu de le forcer au principal authentifié),
-    et ``is_owner`` autorise ce principal de confiance sur toute ressource —
-    l'auth (API key) reste exigée, mais le contrôle par end-user est délégué au
-    portail.
-
-    ⚠️ N'activer QUE si le client est de confiance et applique lui-même le
-    contrôle d'accès par end-user — sinon tout détenteur de la clé peut réclamer
-    n'importe quel ``user_id``.
+    Piloté par ``AUTH_TRUST_CLIENT_USER_ID`` (défaut ``true``). Cas d'usage
+    nominal : un backend de confiance authentifié par API key (un portail) qui
+    multiplexe plusieurs end-users et passe leur ``user_id`` en paramètre. Quand
+    actif, le serveur HONORE le ``user_id`` client (au lieu de le forcer au
+    principal authentifié), et ``is_owner`` autorise ce principal de confiance
+    sur toute ressource — l'auth (API key) reste exigée, mais le contrôle par
+    end-user est délégué au portail.
+
+    ⚠️ Tout détenteur d'une clé valide peut alors agir pour n'importe quel
+    ``user_id``. Pour un déploiement multi-tenant strict où les clients ne sont
+    PAS de confiance, mettre ``AUTH_TRUST_CLIENT_USER_ID=false`` (le serveur lie
+    alors chaque requête au principal authentifié, anti-usurpation).
     """
-    return _env_flag("AUTH_TRUST_CLIENT_USER_ID")
+    return os.environ.get("AUTH_TRUST_CLIENT_USER_ID", "true").strip().lower() == "true"
 
 
 def resolve_effective_user_id(current_user: str, requested_user_id: str | None) -> str:

{agent_framework_lib-0.8.8.post4 → agent_framework_lib-0.8.8.post6/agent_framework_lib.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-framework-lib
-Version: 0.8.8.post4
+Version: 0.8.8.post6
 Summary: A comprehensive Python framework for building and serving conversational AI agents with FastAPI
 Author-email: Sebastian Pavel <sebastian@cinco.ai>, Elliott Girard <elliott.girard@icloud.com>
 Maintainer-email: Sebastian Pavel <sebastian@cinco.ai>

{agent_framework_lib-0.8.8.post4 → agent_framework_lib-0.8.8.post6}/docs/OPENSHELL_GATEWAY_HOST_SETUP.md

@@ -143,14 +143,22 @@ services:
       - SHELL_SANDBOX_PROVIDER=openshell
       - OPENSHELL_GATEWAY_ENDPOINT=http://host.docker.internal:17670
       - OPENSHELL_GATEWAY_INSECURE=true
+      # Sandbox→agent HTTP callback. REQUIRED for skills that fetch INPUT files
+      # from storage inside the sandbox (download_to_local — file modification
+      # flows). One DEDICATED host port per agent on the host (18000, 18001, …).
+      - AGENT_SANDBOX_CALLBACK_HOST=host.docker.internal
+      - AGENT_SANDBOX_CALLBACK_PORT=18000
+    ports:
+      # Dedicated callback publish (the PUBLIC route stays on the Coolify proxy —
+      # never publish 0.0.0.0:8000 directly, it collides). Keep this port OUT of
+      # the cloud security group (internal VPC only).
+      - "18000:8000"
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
     group_add:
       - "${DOCKER_GID}"            # host: getent group docker | cut -d: -f3  (or: stat -c %g /var/run/docker.sock)
     extra_hosts:
       - "host.docker.internal:host-gateway"   # resolves to the host (Linux)
-    # NO `ports:` under Coolify — its proxy owns the host ports (publishing
-    # 0.0.0.0:<port> here fails with "port is already allocated").
 ```
 
 Set `DOCKER_GID` in the deployment env to the host's docker group GID. The agent

{agent_framework_lib-0.8.8.post4 → agent_framework_lib-0.8.8.post6}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent-framework-lib"
-version = "0.8.8post4"
+version = "0.8.8post6"
 description = "A comprehensive Python framework for building and serving conversational AI agents with FastAPI"
 readme = {file = "README.md", content-type = "text/markdown"}
 license = {text = "MIT"}