agent-webui 2.5.0__tar.gz → 2.6.1__tar.gz

agent_webui-2.6.1/PKG-INFO

@@ -0,0 +1,140 @@
+Metadata-Version: 2.4
+Name: agent-webui
+Version: 2.6.1
+Summary: Agent Web Interface for Pydantic AI Agents
+Author-email: Repository Maintainers <maintainers@knuckles.team>
+License: MIT
+Classifier: Development Status :: 4 - Beta
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Environment :: Console
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3
+Requires-Python: <3.15,>=3.12
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: fastapi>=0.139.2
+Requires-Dist: langfuse>=4.14.1
+Requires-Dist: pydantic-ai-slim[ui]>=2.14.1
+Requires-Dist: python-multipart>=0.0.20
+Requires-Dist: sse-starlette>=3.4.6
+Requires-Dist: starlette>=1.3.1
+Requires-Dist: uvicorn>=0.51.0
+Requires-Dist: watchfiles>=1.2.0
+Requires-Dist: logfire[fastapi,starlette]>=4.38.0
+Requires-Dist: joserfc>=1.7.4
+Provides-Extra: test
+Requires-Dist: pytest-xdist>=3.8.0; extra == "test"
+Requires-Dist: pytest>=9.1.1; extra == "test"
+Requires-Dist: pytest-asyncio>=1.4.0; extra == "test"
+Requires-Dist: pytest-cov>=7.1.0; extra == "test"
+Requires-Dist: pytest-env>=1.7.0; extra == "test"
+Requires-Dist: pytest-timeout>=2.4.0; extra == "test"
+Requires-Dist: networkx>=3.6.1; extra == "test"
+Requires-Dist: opentelemetry-instrumentation-starlette>=0.65b0; extra == "test"
+Requires-Dist: opentelemetry-instrumentation-fastapi>=0.65b0; extra == "test"
+Requires-Dist: opentelemetry-instrumentation-asgi>=0.65b0; extra == "test"
+Requires-Dist: agent-utilities[agent-headless,graph,graphos,metrics]>=2.0.0; extra == "test"
+Dynamic: license-file
+
+# Agent WebUI
+
+[![PyPI - Version](https://img.shields.io/pypi/v/agent-webui)](https://pypi.org/project/agent-webui/)
+[![Documentation](https://img.shields.io/badge/docs-GitHub%20Pages-526cfe)](https://knuckles-team.github.io/agent-webui/)
+[![GitHub license](https://img.shields.io/github/license/Knuckles-Team/agent-webui)](LICENSE)
+
+The browser workspace for governed agents, workflows, and knowledge in GraphOS.
+
+![The Agent WebUI Atlas workspace presents graph, object, schema, data, document, and memory entry points in one browser surface.](docs/assets/screenshots/atlas-workspace.png)
+
+## Overview
+
+Agent WebUI turns GraphOS into an operator-facing product. It provides one React
+workspace for agent conversations, approvals, workflows, fleet activity, and
+epistemic-graph exploration. Its FastAPI host keeps privileged credentials and
+GraphOS delegation on the server side.
+
+| This repository owns | Other components own |
+|---|---|
+| Browser presentation, local interaction state, accessible route composition, and the WebUI FastAPI boundary | GraphOS owns public routing, identity, policy, and fleet supervision; agent-utilities owns agent behavior; epistemic-graph owns durable knowledge; connector services own external-system effects |
+
+Current package Version: 2.6.1.
+
+## Key Capabilities
+
+- Stream agent responses with sources, governed tool activity, and approval prompts.
+- Build and run workflows while observing sessions, goals, schedules, and fleet health.
+- Explore property graphs, RDF, schemas, objects, tables, documents, code, and memories through Atlas.
+- Discover MCP Apps and connector capabilities without exposing service credentials to the browser.
+- Apply one role-aware navigation and server authorization model across the complete workspace.
+- Run as the GraphOS-hosted browser co-service or as an independently deployed ASGI application.
+
+## Documentation
+
+Start with the [Agent WebUI documentation](https://knuckles-team.github.io/agent-webui/),
+then use the shared platform map to move between components:
+
+| Component | Role | Documentation |
+|---|---|---|
+| GraphOS | Public MCP, REST, A2A, identity, policy, and runtime composition | [Docs](https://knuckles-team.github.io/graph-os/) |
+| agent-utilities | Agent decisions, workflows, evaluation, and skills | [Docs](https://knuckles-team.github.io/agent-utilities/) |
+| epistemic-graph | Durable multimodal data, reasoning, provenance, and transactions | [Docs](https://knuckles-team.github.io/epistemic-graph/) |
+| agent-connector-sdk | Typed source adapters, connector serving, and write-back contracts | [Docs](https://knuckles-team.github.io/agent-connector-sdk/) |
+
+<details>
+<summary>Project telemetry</summary>
+
+[![Build](https://github.com/Knuckles-Team/agent-webui/actions/workflows/release.yml/badge.svg)](https://github.com/Knuckles-Team/agent-webui/actions/workflows/release.yml)
+[![Docs build](https://github.com/Knuckles-Team/agent-webui/actions/workflows/advisory.yml/badge.svg?branch=main)](https://github.com/Knuckles-Team/agent-webui/actions/workflows/advisory.yml)
+[![PyPI - Downloads](https://img.shields.io/pypi/dd/agent-webui)](https://pypi.org/project/agent-webui/)
+[![PyPI - License](https://img.shields.io/pypi/l/agent-webui)](https://pypi.org/project/agent-webui/)
+[![PyPI - Wheel](https://img.shields.io/pypi/wheel/agent-webui)](https://pypi.org/project/agent-webui/)
+[![PyPI - Implementation](https://img.shields.io/pypi/implementation/agent-webui)](https://pypi.org/project/agent-webui/)
+[![GitHub Repo stars](https://img.shields.io/github/stars/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/stargazers)
+[![GitHub forks](https://img.shields.io/github/forks/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/forks)
+[![GitHub contributors](https://img.shields.io/github/contributors/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/graphs/contributors)
+[![GitHub last commit (by committer)](https://img.shields.io/github/last-commit/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/commits/main)
+[![GitHub pull requests](https://img.shields.io/github/issues-pr/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/pulls)
+[![GitHub closed pull requests](https://img.shields.io/github/issues-pr-closed/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/pulls?q=is%3Apr+is%3Aclosed)
+[![GitHub issues](https://img.shields.io/github/issues/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/issues)
+[![GitHub top language](https://img.shields.io/github/languages/top/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui)
+[![GitHub language count](https://img.shields.io/github/languages/count/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui)
+[![GitHub repo size](https://img.shields.io/github/repo-size/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui)
+[![GitHub repo file count (file type)](https://img.shields.io/github/directory-file-count/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui)
+
+</details>
+
+## Architecture
+
+![Runtime architecture: people and MCP clients enter through Agent WebUI or GraphOS; GraphOS delegates agent work to agent-utilities, durable operations to epistemic-graph, and external effects to connector services built with agent-connector-sdk.](docs/assets/runtime-architecture.svg)
+
+The browser talks only to its same-origin FastAPI host. GraphOS injects the
+gateway routes and verified request context before the single-page application
+is mounted. The UI renders typed responses and records local presentation state;
+it does not become a second authority for policy, knowledge, or connector state.
+
+See the [architecture guide](https://knuckles-team.github.io/agent-webui/architecture/)
+for the request flow and trust boundaries.
+
+## Quick Start
+
+Generate a local profile and launch GraphOS with the WebUI integration:
+
+```bash
+uvx --from "graph-os[webui]" setup-config generate --profile tiny
+export ENABLE_WEB_UI=true
+uvx --from "graph-os[webui]" graph-os --transport streamable-http --host 127.0.0.1 --port 8000
+```
+
+Open <http://127.0.0.1:8080>. GraphOS serves MCP on port `8000` and the WebUI
+co-service on port `8080`. The [start guide](https://knuckles-team.github.io/agent-webui/start/)
+covers local source development and deployment profiles.
+
+## Contributing
+
+Issues and pull requests are welcome. Read [AGENTS.md](AGENTS.md), keep browser
+and server authority boundaries intact, and run the repository validation suite
+before opening a pull request.
+
+## License
+
+Agent WebUI is available under the [MIT License](LICENSE).

agent_webui-2.6.1/README.md

@@ -0,0 +1,102 @@
+# Agent WebUI
+
+[![PyPI - Version](https://img.shields.io/pypi/v/agent-webui)](https://pypi.org/project/agent-webui/)
+[![Documentation](https://img.shields.io/badge/docs-GitHub%20Pages-526cfe)](https://knuckles-team.github.io/agent-webui/)
+[![GitHub license](https://img.shields.io/github/license/Knuckles-Team/agent-webui)](LICENSE)
+
+The browser workspace for governed agents, workflows, and knowledge in GraphOS.
+
+![The Agent WebUI Atlas workspace presents graph, object, schema, data, document, and memory entry points in one browser surface.](docs/assets/screenshots/atlas-workspace.png)
+
+## Overview
+
+Agent WebUI turns GraphOS into an operator-facing product. It provides one React
+workspace for agent conversations, approvals, workflows, fleet activity, and
+epistemic-graph exploration. Its FastAPI host keeps privileged credentials and
+GraphOS delegation on the server side.
+
+| This repository owns | Other components own |
+|---|---|
+| Browser presentation, local interaction state, accessible route composition, and the WebUI FastAPI boundary | GraphOS owns public routing, identity, policy, and fleet supervision; agent-utilities owns agent behavior; epistemic-graph owns durable knowledge; connector services own external-system effects |
+
+Current package Version: 2.6.1.
+
+## Key Capabilities
+
+- Stream agent responses with sources, governed tool activity, and approval prompts.
+- Build and run workflows while observing sessions, goals, schedules, and fleet health.
+- Explore property graphs, RDF, schemas, objects, tables, documents, code, and memories through Atlas.
+- Discover MCP Apps and connector capabilities without exposing service credentials to the browser.
+- Apply one role-aware navigation and server authorization model across the complete workspace.
+- Run as the GraphOS-hosted browser co-service or as an independently deployed ASGI application.
+
+## Documentation
+
+Start with the [Agent WebUI documentation](https://knuckles-team.github.io/agent-webui/),
+then use the shared platform map to move between components:
+
+| Component | Role | Documentation |
+|---|---|---|
+| GraphOS | Public MCP, REST, A2A, identity, policy, and runtime composition | [Docs](https://knuckles-team.github.io/graph-os/) |
+| agent-utilities | Agent decisions, workflows, evaluation, and skills | [Docs](https://knuckles-team.github.io/agent-utilities/) |
+| epistemic-graph | Durable multimodal data, reasoning, provenance, and transactions | [Docs](https://knuckles-team.github.io/epistemic-graph/) |
+| agent-connector-sdk | Typed source adapters, connector serving, and write-back contracts | [Docs](https://knuckles-team.github.io/agent-connector-sdk/) |
+
+<details>
+<summary>Project telemetry</summary>
+
+[![Build](https://github.com/Knuckles-Team/agent-webui/actions/workflows/release.yml/badge.svg)](https://github.com/Knuckles-Team/agent-webui/actions/workflows/release.yml)
+[![Docs build](https://github.com/Knuckles-Team/agent-webui/actions/workflows/advisory.yml/badge.svg?branch=main)](https://github.com/Knuckles-Team/agent-webui/actions/workflows/advisory.yml)
+[![PyPI - Downloads](https://img.shields.io/pypi/dd/agent-webui)](https://pypi.org/project/agent-webui/)
+[![PyPI - License](https://img.shields.io/pypi/l/agent-webui)](https://pypi.org/project/agent-webui/)
+[![PyPI - Wheel](https://img.shields.io/pypi/wheel/agent-webui)](https://pypi.org/project/agent-webui/)
+[![PyPI - Implementation](https://img.shields.io/pypi/implementation/agent-webui)](https://pypi.org/project/agent-webui/)
+[![GitHub Repo stars](https://img.shields.io/github/stars/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/stargazers)
+[![GitHub forks](https://img.shields.io/github/forks/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/forks)
+[![GitHub contributors](https://img.shields.io/github/contributors/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/graphs/contributors)
+[![GitHub last commit (by committer)](https://img.shields.io/github/last-commit/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/commits/main)
+[![GitHub pull requests](https://img.shields.io/github/issues-pr/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/pulls)
+[![GitHub closed pull requests](https://img.shields.io/github/issues-pr-closed/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/pulls?q=is%3Apr+is%3Aclosed)
+[![GitHub issues](https://img.shields.io/github/issues/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui/issues)
+[![GitHub top language](https://img.shields.io/github/languages/top/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui)
+[![GitHub language count](https://img.shields.io/github/languages/count/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui)
+[![GitHub repo size](https://img.shields.io/github/repo-size/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui)
+[![GitHub repo file count (file type)](https://img.shields.io/github/directory-file-count/Knuckles-Team/agent-webui)](https://github.com/Knuckles-Team/agent-webui)
+
+</details>
+
+## Architecture
+
+![Runtime architecture: people and MCP clients enter through Agent WebUI or GraphOS; GraphOS delegates agent work to agent-utilities, durable operations to epistemic-graph, and external effects to connector services built with agent-connector-sdk.](docs/assets/runtime-architecture.svg)
+
+The browser talks only to its same-origin FastAPI host. GraphOS injects the
+gateway routes and verified request context before the single-page application
+is mounted. The UI renders typed responses and records local presentation state;
+it does not become a second authority for policy, knowledge, or connector state.
+
+See the [architecture guide](https://knuckles-team.github.io/agent-webui/architecture/)
+for the request flow and trust boundaries.
+
+## Quick Start
+
+Generate a local profile and launch GraphOS with the WebUI integration:
+
+```bash
+uvx --from "graph-os[webui]" setup-config generate --profile tiny
+export ENABLE_WEB_UI=true
+uvx --from "graph-os[webui]" graph-os --transport streamable-http --host 127.0.0.1 --port 8000
+```
+
+Open <http://127.0.0.1:8080>. GraphOS serves MCP on port `8000` and the WebUI
+co-service on port `8080`. The [start guide](https://knuckles-team.github.io/agent-webui/start/)
+covers local source development and deployment profiles.
+
+## Contributing
+
+Issues and pull requests are welcome. Read [AGENTS.md](AGENTS.md), keep browser
+and server authority boundaries intact, and run the repository validation suite
+before opening a pull request.
+
+## License
+
+Agent WebUI is available under the [MIT License](LICENSE).

{agent_webui-2.5.0 → agent_webui-2.6.1}/agent/agent_webui/__tests__/test_agent_library_endpoints.py

@@ -12,9 +12,10 @@ running the pre-existing, untouched ``test_workflow_endpoints.py`` in this
 same environment — it now fails 6/6 with the identical shape). That gate is
 owned by a sibling lane; these tests exercise the new route logic this lane
 owns (engine resolution, Cypher shape, node/edge writes, validation,
-degrade-to-empty behavior) without re-deriving or working around the identity
-boundary that isn't this lane's to fix. ``test_identity_middleware_boundary.py``
-already pins that boundary's own behavior.
+truthful backend failures, and genuine empty results) without re-deriving or
+working around the identity boundary that isn't this lane's to fix.
+``test_identity_middleware_boundary.py`` already pins that boundary's own
+behavior.
 """
 
 import asyncio
@@ -50,7 +51,11 @@ def run(coro):
 def test_list_library_agents_returns_local_and_a2a(mock_engine):
     from agent_webui.api_extensions import list_library_agents
 
-    mock_engine.backend.execute.return_value = [
+    # FIX LANE Priority 1: `list_library_agents` now reads through
+    # `_read_union_cypher`, which falls back to `engine.query_cypher` (not
+    # `engine.backend.execute`) when there is no ambient `GraphSession` --
+    # the case for a direct handler call like this one.
+    mock_engine.query_cypher.return_value = [
         {
             'r': {
                 'id': 'resource:skill:demo',
@@ -80,7 +85,7 @@ def test_list_library_agents_returns_local_and_a2a(mock_engine):
 def test_list_library_agents_excludes_archived(mock_engine):
     from agent_webui.api_extensions import list_library_agents
 
-    mock_engine.backend.execute.return_value = [
+    mock_engine.query_cypher.return_value = [
         {
             'r': {
                 'id': 'resource:skill:demo',
@@ -95,10 +100,22 @@ def test_list_library_agents_excludes_archived(mock_engine):
         assert run(list_library_agents()) == []
 
 
-def test_list_library_agents_degrades_to_empty_on_backend_failure(mock_engine):
+def test_list_library_agents_reports_backend_failure(mock_engine):
+    from agent_webui.api_extensions import list_library_agents
+    from fastapi import HTTPException
+
+    mock_engine.query_cypher.side_effect = Exception('DB down')
+    with _patched_engine(mock_engine), pytest.raises(HTTPException) as exc:
+        run(list_library_agents())
+    assert exc.value.status_code == 503
+    assert exc.value.detail == 'Service unavailable'
+    assert 'DB down' not in str(exc.value.detail)
+
+
+def test_list_library_agents_preserves_genuine_empty_result(mock_engine):
     from agent_webui.api_extensions import list_library_agents
 
-    mock_engine.backend.execute.side_effect = Exception('DB down')
+    mock_engine.query_cypher.return_value = []
     with _patched_engine(mock_engine):
         assert run(list_library_agents()) == []
 
@@ -224,6 +241,98 @@ def test_archive_library_agent_missing_returns_404(mock_engine):
     assert exc.value.status_code == 404
 
 
+def test_update_library_agent_requires_name_and_instructions(mock_engine):
+    from agent_webui.api_extensions import update_library_agent
+    from fastapi import HTTPException
+
+    with _patched_engine(mock_engine), pytest.raises(HTTPException) as exc:
+        run(
+            update_library_agent(
+                'resource:skill:demo', {'name': '', 'instructions': ''}
+            )
+        )
+    assert exc.value.status_code == 422
+
+
+def test_update_library_agent_rejects_non_library_resource(mock_engine):
+    from agent_webui.api_extensions import update_library_agent
+    from fastapi import HTTPException
+
+    mock_engine.backend.execute.return_value = [
+        {
+            'rtype': 'AGENT_SKILL',
+            'provider_ref': 'provider://mcp:some-fleet-skill',
+            'source_ref': 'skill://fleet-thing',
+        }
+    ]
+    with _patched_engine(mock_engine), pytest.raises(HTTPException) as exc:
+        run(
+            update_library_agent(
+                'resource:skill:fleet-thing',
+                {'name': 'x', 'instructions': 'y'},
+            )
+        )
+    assert exc.value.status_code == 403
+
+
+def test_update_library_agent_missing_returns_404(mock_engine):
+    from agent_webui.api_extensions import update_library_agent
+    from fastapi import HTTPException
+
+    mock_engine.backend.execute.return_value = []
+    with _patched_engine(mock_engine), pytest.raises(HTTPException) as exc:
+        run(
+            update_library_agent(
+                'resource:skill:nope', {'name': 'x', 'instructions': 'y'}
+            )
+        )
+    assert exc.value.status_code == 404
+
+
+def test_update_library_agent_edits_fields_and_resyncs_tools(mock_engine):
+    from agent_webui.api_extensions import update_library_agent
+
+    queries = []
+
+    def execute(query, params=None):
+        queries.append((query, params))
+        if 'RETURN r.resource_type AS rtype' in query:
+            return [
+                {
+                    'rtype': 'AGENT_SKILL',
+                    'provider_ref': 'provider://agent-webui-library',
+                    'source_ref': 'skill://my-agent',
+                }
+            ]
+        return []
+
+    mock_engine.backend.execute.side_effect = execute
+    with _patched_engine(mock_engine):
+        data = run(
+            update_library_agent(
+                'resource:skill:my-agent',
+                {
+                    'name': 'my-agent',
+                    'description': 'now does more things',
+                    'instructions': 'You are an updated specialist.',
+                    'tool_ids': ['tool:new'],
+                },
+            )
+        )
+    assert data['id'] == 'resource:skill:my-agent'
+    assert data['description'] == 'now does more things'
+    assert data['tools'] == ['tool:new']
+
+    # Skill + CallableResource nodes were both updated in place.
+    assert any('SET s.name' in q for q, _ in queries)
+    assert any('SET r.name' in q for q, _ in queries)
+    # Old USES_TOOL edges were dropped before the new set was linked --
+    # full-replace, not merge.
+    assert any('DELETE e' in q for q, _ in queries)
+    link_calls = [call.args for call in mock_engine.link_nodes.call_args_list]
+    assert ('resource:skill:my-agent', 'tool:new', 'USES_TOOL') in link_calls
+
+
 def test_register_a2a_agent_requires_valid_url(mock_engine):
     from agent_webui.api_extensions import register_a2a_agent
     from fastapi import HTTPException
@@ -302,6 +411,26 @@ def test_suggest_library_agents_excludes_bound_servers(mock_engine):
     assert data[0]['tool_count'] == 2
 
 
+def test_suggest_library_agents_reports_backend_failure(mock_engine):
+    from agent_webui.api_extensions import suggest_library_agents
+    from fastapi import HTTPException
+
+    mock_engine.backend.execute.side_effect = RuntimeError('DB down')
+    with _patched_engine(mock_engine), pytest.raises(HTTPException) as exc:
+        run(suggest_library_agents())
+    assert exc.value.status_code == 503
+    assert exc.value.detail == 'Service unavailable'
+    assert 'DB down' not in str(exc.value.detail)
+
+
+def test_suggest_library_agents_preserves_genuine_empty_result(mock_engine):
+    from agent_webui.api_extensions import suggest_library_agents
+
+    mock_engine.backend.execute.return_value = []
+    with _patched_engine(mock_engine):
+        assert run(suggest_library_agents()) == []
+
+
 def test_list_library_tools_filters_by_server(mock_engine):
     from agent_webui.api_extensions import list_library_tools
 
@@ -313,6 +442,26 @@ def test_list_library_tools_filters_by_server(mock_engine):
     assert data[0]['id'] == 'tool:a'
 
 
+def test_list_library_tools_reports_backend_failure(mock_engine):
+    from agent_webui.api_extensions import list_library_tools
+    from fastapi import HTTPException
+
+    mock_engine.backend.execute.side_effect = RuntimeError('DB down')
+    with _patched_engine(mock_engine), pytest.raises(HTTPException) as exc:
+        run(list_library_tools())
+    assert exc.value.status_code == 503
+    assert exc.value.detail == 'Service unavailable'
+    assert 'DB down' not in str(exc.value.detail)
+
+
+def test_list_library_tools_preserves_genuine_empty_result(mock_engine):
+    from agent_webui.api_extensions import list_library_tools
+
+    mock_engine.backend.execute.return_value = []
+    with _patched_engine(mock_engine):
+        assert run(list_library_tools()) == []
+
+
 def test_list_library_tools_rejects_unsafe_server_filter(mock_engine):
     from agent_webui.api_extensions import list_library_tools
     from fastapi import HTTPException
@@ -358,16 +507,33 @@ def test_agent_config_summary_projects_model_registry():
     assert 'api_key_ref' not in data['chat_models'][0]
 
 
-def test_agent_config_summary_degrades_to_empty_on_failure():
+def test_agent_config_summary_preserves_empty_registry():
     from agent_webui.api_extensions import agent_config_summary
 
+    class _EmptyConfig:
+        app_profile = ''
+        deployment_profile = ''
+        chat_models = []
+        embedding_models = []
+
+    with patch('agent_utilities.core.config.AgentConfig', return_value=_EmptyConfig()):
+        assert run(agent_config_summary()) == {
+            'app_profile': '',
+            'deployment_profile': '',
+            'chat_models': [],
+            'embedding_models': [],
+        }
+
+
+def test_agent_config_summary_reports_backend_failure():
+    from agent_webui.api_extensions import agent_config_summary
+    from fastapi import HTTPException
+
     with patch(
         'agent_utilities.core.config.AgentConfig', side_effect=RuntimeError('boom')
     ):
-        data = run(agent_config_summary())
-    assert data == {
-        'app_profile': '',
-        'deployment_profile': '',
-        'chat_models': [],
-        'embedding_models': [],
-    }
+        with pytest.raises(HTTPException) as exc:
+            run(agent_config_summary())
+    assert exc.value.status_code == 503
+    assert exc.value.detail == 'Service unavailable'
+    assert 'boom' not in str(exc.value.detail)