agent-webui 2.7.0__tar.gz → 2.8.0__tar.gz

{agent_webui-2.7.0 → agent_webui-2.8.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-webui
-Version: 2.7.0
+Version: 2.8.0
 Summary: Agent Web Interface for Pydantic AI Agents
 Author-email: Repository Maintainers <maintainers@knuckles.team>
 License: MIT
@@ -9,7 +9,10 @@ Classifier: License :: OSI Approved :: MIT License
 Classifier: Environment :: Console
 Classifier: Operating System :: POSIX :: Linux
 Classifier: Programming Language :: Python :: 3
-Requires-Python: <3.15,>=3.12
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Python: >=3.12
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: agent-utilities<4.0.0,>=3.0.0
@@ -41,14 +44,14 @@ Requires-Dist: opentelemetry-instrumentation-fastapi>=0.65b0; extra == "test"
 Requires-Dist: opentelemetry-instrumentation-asgi>=0.65b0; extra == "test"
 Dynamic: license-file
 
-# Graph OS web UI
+# Arbora web UI
 
 <p align="center">
-  <img src="docs/assets/brands/agent-webui-logo-v1.png" alt="Graph OS Agent Web UI logo" width="160" />
+  <img src="docs/assets/brands/agent-webui-logo-v1.png" alt="Arbora Agent Web UI logo" width="160" />
 </p>
 
 <p align="center">
-  <strong>The browser workspace for governed agents, workflows, and knowledge in Graph OS.</strong><br>
+  <strong>The browser workspace for governed agents, workflows, and knowledge in Arbora.</strong><br>
   <sub>Conversations · approvals · workflows · fleet activity · Atlas knowledge views</sub>
 </p>
 
@@ -88,16 +91,16 @@ Dynamic: license-file
 
 ## Overview
 
-Graph OS Agent Web UI is the browser workspace composed by Graph OS. It brings agent
+Arbora Agent Web UI is the browser workspace composed by Arbora. It brings agent
 conversations, approvals, workflows, fleet activity, and Epistemic Graph
 exploration into one React application. Its FastAPI host keeps privileged
 credentials and gateway delegation on the server side.
 
 | Agent Web UI owns | Other components own |
 |---|---|
-| Browser presentation, local interaction state, accessible route composition, and the FastAPI boundary | Graph OS owns public routing, identity, policy, and fleet supervision; Agent Utilities owns agent behavior; Epistemic Graph owns durable knowledge; connector services own external-system effects |
+| Browser presentation, local interaction state, accessible route composition, and the FastAPI boundary | Arbora owns public routing, identity, policy, and fleet supervision; Agent Utilities owns agent behavior; Epistemic Graph owns durable knowledge; connector services own external-system effects |
 
-Current package Version: 2.7.0.
+Current package Version: 2.8.0.
 
 ## Key capabilities
 
@@ -106,7 +109,7 @@ Current package Version: 2.7.0.
 - Explore property graphs, RDF, schemas, objects, tables, documents, code, and memories through Atlas and Epistemic Graph.
 - Discover MCP Apps and connector capabilities without exposing service credentials to the browser.
 - Apply one role-aware navigation and server authorization model across the complete workspace.
-- Run as the Graph OS-hosted browser co-service or as an independently deployed ASGI application.
+- Run as the Arbora-hosted browser co-service or as an independently deployed ASGI application.
 
 ## Documentation
 
@@ -118,20 +121,22 @@ then use the shared platform map to move between components:
 | Agent Web UI | Browser operator workspace and Atlas knowledge views | [Docs](https://knuckles-team.github.io/agent-webui/) |
 | Agent Terminal UI | Terminal and headless client; REST operations are available, with no ACP conversational path | [Docs](https://knuckles-team.github.io/agent-terminal-ui/) |
 | Geniusbot | Desktop cockpit for chat, graph, fleet, health, and operator workflows | [Docs](https://knuckles-team.github.io/geniusbot/) |
-| Graph OS messaging | Hosts chat and voice entrypoints; Agent Utilities supplies adapter and routing behavior | [Docs](https://knuckles-team.github.io/graph-os/) |
-| Graph OS | Public MCP, REST, A2A, identity, policy, and runtime composition | [Docs](https://knuckles-team.github.io/graph-os/) |
+| Arbora messaging | Hosts chat and voice entrypoints; Agent Utilities supplies adapter and routing behavior | [Docs](https://knuckles-team.github.io/arbora/) |
+| Arbora | Public MCP, REST, A2A, identity, policy, and runtime composition | [Docs](https://knuckles-team.github.io/arbora/) |
 | Agent Utilities | Agent decisions, workflows, evaluation, and skills | [Docs](https://knuckles-team.github.io/agent-utilities/) |
 | Epistemic Graph | Durable multimodal data, reasoning, provenance, and transactions | [Docs](https://knuckles-team.github.io/epistemic-graph/) |
 | Agent Connector SDK | Typed source adapters, connector serving, and write-back contracts | [Docs](https://knuckles-team.github.io/agent-connector-sdk/) |
 
 ## Architecture
 
-![Runtime architecture: people use Agent Web UI, Agent Terminal UI, Geniusbot, and Graph OS-hosted messaging. MCP, REST, and A2A clients enter through Graph OS; source systems flow through Agent Connector SDK into Epistemic Graph.](https://raw.githubusercontent.com/Knuckles-Team/epistemic-graph/main/docs/assets/runtime-architecture.svg)
+[![Runtime architecture: people use Agent Web UI, Agent Terminal UI, Geniusbot, and Arbora-hosted messaging. MCP, REST, and A2A clients enter through Arbora; source systems flow through Agent Connector SDK into Epistemic Graph.](https://raw.githubusercontent.com/Knuckles-Team/epistemic-graph/main/docs/assets/runtime-architecture.svg)](https://knuckles-team.github.io/.github/architecture/#webui)
 
-People also enter through Agent Terminal UI and Geniusbot or Graph OS-hosted
+[Explore the live architecture](https://knuckles-team.github.io/.github/architecture/#webui)
+
+People also enter through Agent Terminal UI and Geniusbot or Arbora-hosted
 messaging; Agent Terminal UI exposes REST operations, with no ACP conversational
 path. External applications connect over MCP, REST, or A2A. The browser talks
-only to its same-origin FastAPI host. Graph OS injects gateway routes and
+only to its same-origin FastAPI host. Arbora injects gateway routes and
 verified request context, then delegates agent behavior to Agent Utilities and
 durable knowledge to Epistemic Graph. Source systems connect through Agent
 Connector SDK directly to Epistemic Graph. Agent Web UI renders typed results
@@ -142,15 +147,15 @@ for the request flow and trust boundaries.
 
 ## Quick start
 
-Generate a local profile and start Graph OS with Agent Web UI enabled:
+Generate a local profile and start Arbora with Agent Web UI enabled:
 
 ```bash
-uvx --from "graph-os[webui]" setup-config generate --profile tiny
+uvx --from "arbora[webui]" setup-config generate --profile tiny
 export ENABLE_WEB_UI=true
-uvx --from "graph-os[webui]" graph-os --transport streamable-http --host 127.0.0.1 --port 8000
+uvx --from "arbora[webui]" arbora --transport streamable-http --host 127.0.0.1 --port 8000
 ```
 
-Open <http://127.0.0.1:8080>. Graph OS serves MCP on port `8000` and the Agent
+Open <http://127.0.0.1:8080>. Arbora serves MCP on port `8000` and the Agent
 Web UI co-service on port `8080`. The [start guide](https://knuckles-team.github.io/agent-webui/start/)
 covers local source development and deployment profiles.
 
@@ -162,4 +167,4 @@ before opening a pull request.
 
 ## License
 
-Graph OS Agent Web UI is available under the [MIT License](LICENSE).
+Arbora Agent Web UI is available under the [MIT License](LICENSE).

{agent_webui-2.7.0 → agent_webui-2.8.0}/README.md

@@ -1,11 +1,11 @@
-# Graph OS web UI
+# Arbora web UI
 
 <p align="center">
-  <img src="docs/assets/brands/agent-webui-logo-v1.png" alt="Graph OS Agent Web UI logo" width="160" />
+  <img src="docs/assets/brands/agent-webui-logo-v1.png" alt="Arbora Agent Web UI logo" width="160" />
 </p>
 
 <p align="center">
-  <strong>The browser workspace for governed agents, workflows, and knowledge in Graph OS.</strong><br>
+  <strong>The browser workspace for governed agents, workflows, and knowledge in Arbora.</strong><br>
   <sub>Conversations · approvals · workflows · fleet activity · Atlas knowledge views</sub>
 </p>
 
@@ -45,16 +45,16 @@
 
 ## Overview
 
-Graph OS Agent Web UI is the browser workspace composed by Graph OS. It brings agent
+Arbora Agent Web UI is the browser workspace composed by Arbora. It brings agent
 conversations, approvals, workflows, fleet activity, and Epistemic Graph
 exploration into one React application. Its FastAPI host keeps privileged
 credentials and gateway delegation on the server side.
 
 | Agent Web UI owns | Other components own |
 |---|---|
-| Browser presentation, local interaction state, accessible route composition, and the FastAPI boundary | Graph OS owns public routing, identity, policy, and fleet supervision; Agent Utilities owns agent behavior; Epistemic Graph owns durable knowledge; connector services own external-system effects |
+| Browser presentation, local interaction state, accessible route composition, and the FastAPI boundary | Arbora owns public routing, identity, policy, and fleet supervision; Agent Utilities owns agent behavior; Epistemic Graph owns durable knowledge; connector services own external-system effects |
 
-Current package Version: 2.7.0.
+Current package Version: 2.8.0.
 
 ## Key capabilities
 
@@ -63,7 +63,7 @@ Current package Version: 2.7.0.
 - Explore property graphs, RDF, schemas, objects, tables, documents, code, and memories through Atlas and Epistemic Graph.
 - Discover MCP Apps and connector capabilities without exposing service credentials to the browser.
 - Apply one role-aware navigation and server authorization model across the complete workspace.
-- Run as the Graph OS-hosted browser co-service or as an independently deployed ASGI application.
+- Run as the Arbora-hosted browser co-service or as an independently deployed ASGI application.
 
 ## Documentation
 
@@ -75,20 +75,22 @@ then use the shared platform map to move between components:
 | Agent Web UI | Browser operator workspace and Atlas knowledge views | [Docs](https://knuckles-team.github.io/agent-webui/) |
 | Agent Terminal UI | Terminal and headless client; REST operations are available, with no ACP conversational path | [Docs](https://knuckles-team.github.io/agent-terminal-ui/) |
 | Geniusbot | Desktop cockpit for chat, graph, fleet, health, and operator workflows | [Docs](https://knuckles-team.github.io/geniusbot/) |
-| Graph OS messaging | Hosts chat and voice entrypoints; Agent Utilities supplies adapter and routing behavior | [Docs](https://knuckles-team.github.io/graph-os/) |
-| Graph OS | Public MCP, REST, A2A, identity, policy, and runtime composition | [Docs](https://knuckles-team.github.io/graph-os/) |
+| Arbora messaging | Hosts chat and voice entrypoints; Agent Utilities supplies adapter and routing behavior | [Docs](https://knuckles-team.github.io/arbora/) |
+| Arbora | Public MCP, REST, A2A, identity, policy, and runtime composition | [Docs](https://knuckles-team.github.io/arbora/) |
 | Agent Utilities | Agent decisions, workflows, evaluation, and skills | [Docs](https://knuckles-team.github.io/agent-utilities/) |
 | Epistemic Graph | Durable multimodal data, reasoning, provenance, and transactions | [Docs](https://knuckles-team.github.io/epistemic-graph/) |
 | Agent Connector SDK | Typed source adapters, connector serving, and write-back contracts | [Docs](https://knuckles-team.github.io/agent-connector-sdk/) |
 
 ## Architecture
 
-![Runtime architecture: people use Agent Web UI, Agent Terminal UI, Geniusbot, and Graph OS-hosted messaging. MCP, REST, and A2A clients enter through Graph OS; source systems flow through Agent Connector SDK into Epistemic Graph.](https://raw.githubusercontent.com/Knuckles-Team/epistemic-graph/main/docs/assets/runtime-architecture.svg)
+[![Runtime architecture: people use Agent Web UI, Agent Terminal UI, Geniusbot, and Arbora-hosted messaging. MCP, REST, and A2A clients enter through Arbora; source systems flow through Agent Connector SDK into Epistemic Graph.](https://raw.githubusercontent.com/Knuckles-Team/epistemic-graph/main/docs/assets/runtime-architecture.svg)](https://knuckles-team.github.io/.github/architecture/#webui)
 
-People also enter through Agent Terminal UI and Geniusbot or Graph OS-hosted
+[Explore the live architecture](https://knuckles-team.github.io/.github/architecture/#webui)
+
+People also enter through Agent Terminal UI and Geniusbot or Arbora-hosted
 messaging; Agent Terminal UI exposes REST operations, with no ACP conversational
 path. External applications connect over MCP, REST, or A2A. The browser talks
-only to its same-origin FastAPI host. Graph OS injects gateway routes and
+only to its same-origin FastAPI host. Arbora injects gateway routes and
 verified request context, then delegates agent behavior to Agent Utilities and
 durable knowledge to Epistemic Graph. Source systems connect through Agent
 Connector SDK directly to Epistemic Graph. Agent Web UI renders typed results
@@ -99,15 +101,15 @@ for the request flow and trust boundaries.
 
 ## Quick start
 
-Generate a local profile and start Graph OS with Agent Web UI enabled:
+Generate a local profile and start Arbora with Agent Web UI enabled:
 
 ```bash
-uvx --from "graph-os[webui]" setup-config generate --profile tiny
+uvx --from "arbora[webui]" setup-config generate --profile tiny
 export ENABLE_WEB_UI=true
-uvx --from "graph-os[webui]" graph-os --transport streamable-http --host 127.0.0.1 --port 8000
+uvx --from "arbora[webui]" arbora --transport streamable-http --host 127.0.0.1 --port 8000
 ```
 
-Open <http://127.0.0.1:8080>. Graph OS serves MCP on port `8000` and the Agent
+Open <http://127.0.0.1:8080>. Arbora serves MCP on port `8000` and the Agent
 Web UI co-service on port `8080`. The [start guide](https://knuckles-team.github.io/agent-webui/start/)
 covers local source development and deployment profiles.
 
@@ -119,4 +121,4 @@ before opening a pull request.
 
 ## License
 
-Graph OS Agent Web UI is available under the [MIT License](LICENSE).
+Arbora Agent Web UI is available under the [MIT License](LICENSE).

{agent_webui-2.7.0 → agent_webui-2.8.0}/agent/agent_webui/__tests__/test_browser_control.py

@@ -1,4 +1,4 @@
-"""Live-path and trust-boundary tests for the Graph OS browser channel."""
+"""Live-path and trust-boundary tests for the Arbora browser channel."""
 
 from __future__ import annotations
 
@@ -75,7 +75,7 @@ class RecordingConnection:
         self.messages.append(message)
         if message.type == 'catalog.register':
             return {
-                'authority': 'graph-os',
+                'authority': 'arbora',
                 'route_id': message.route_id,
                 'registration_generation': message.registration_generation,
                 'catalog_digest': message.catalog_digest,
@@ -130,7 +130,7 @@ class _AuCancel(BaseModel):
 
 
 class RecordingPort:
-    authority = 'graph-os'
+    authority = 'arbora'
     supports_durable_fences = True
     supports_durable_audit = True
     supports_attended_leases = True
@@ -174,7 +174,7 @@ class FailingOpenPort(RecordingPort):
 
     async def open_channel(self, binding: BrowserControlBinding, send: Any) -> Any:
         self.bindings.append(binding)
-        raise RuntimeError('synthetic Graph OS open failure')
+        raise RuntimeError('synthetic Arbora open failure')
 
     async def revoke_attended_arm(self, binding: BrowserControlBinding) -> Any:
         self.revoked.append(binding)
@@ -482,7 +482,7 @@ def test_structural_au_message_is_validated_and_sent_to_browser(
         assert websocket.receive_json() == {
             'protocol': 'webmcp.control.v1',
             'type': 'channel.ready',
-            'authority': 'graph-os',
+            'authority': 'arbora',
             'route_id': 'knowledge.graph',
             'registration_generation': 7,
             'catalog_digest': _CATALOG_DIGEST,
@@ -541,7 +541,7 @@ def test_one_injected_connection_handles_every_browser_event_and_outbound_send(
     ) as websocket:
         websocket.send_json(_OPEN)
         websocket.send_json(_CATALOG)
-        assert websocket.receive_json()['authority'] == 'graph-os'
+        assert websocket.receive_json()['authority'] == 'arbora'
         for event in events:
             websocket.send_json(event)
             assert websocket.receive_json() == {
@@ -560,7 +560,7 @@ def test_one_injected_connection_handles_every_browser_event_and_outbound_send(
     ]
 
 
-def test_channel_ready_refuses_a_tampered_graph_os_catalog_receipt(
+def test_channel_ready_refuses_a_tampered_arbora_catalog_receipt(
     mock_agent: Any,
     monkeypatch: pytest.MonkeyPatch,
 ) -> None:
@@ -852,7 +852,7 @@ def test_duplicate_tool_id_with_a_different_version_is_rejected(
         [{**_CATALOG['tools'][0], 'required_roles': ['é']}],
     ],
 )
-def test_catalog_descriptor_invariants_fail_before_graph_os(
+def test_catalog_descriptor_invariants_fail_before_arbora(
     mock_agent: Any,
     monkeypatch: pytest.MonkeyPatch,
     tools: list[dict[str, Any]],

{agent_webui-2.7.0 → agent_webui-2.8.0}/agent/agent_webui/__tests__/test_oidc_session.py

@@ -560,8 +560,8 @@ async def test_a_caller_with_its_own_bearer_is_never_given_a_browser_session():
     authorization = [v for k, v in seen['headers'] if k.lower() == b'authorization']
     assert authorization == [b'Bearer service-token']
     assert 'browser_login_session_ref' not in seen['state']
-    assert seen['state'].get('graphos_session_admitted') is not True
-    assert 'graphos_console_mfa_at_ms' not in seen['state']
+    assert seen['state'].get('arbora_session_admitted') is not True
+    assert 'arbora_console_mfa_at_ms' not in seen['state']
 
 
 @pytest.mark.anyio
@@ -591,10 +591,10 @@ async def test_a_valid_session_is_forwarded_as_the_users_own_bearer():
     assert login_ref.startswith('login_')
     assert len(login_ref) == 70
     assert 'users-own-token' not in login_ref
-    # This is a legacy sealed Keycloak cookie, not a live GraphOS identity
-    # broker session. Only GraphOS IdentityGate may set the admission marker.
-    assert seen['state'].get('graphos_session_admitted') is not True
-    assert 'graphos_console_mfa_at_ms' not in seen['state']
+    # This is a legacy sealed Keycloak cookie, not a live Arbora identity
+    # broker session. Only Arbora IdentityGate may set the admission marker.
+    assert seen['state'].get('arbora_session_admitted') is not True
+    assert 'arbora_console_mfa_at_ms' not in seen['state']
 
 
 @pytest.mark.anyio
@@ -1229,7 +1229,7 @@ async def test_finalize_consumes_recent_auth_once_and_mints_exact_arm(monkeypatc
     revoked: list = []
 
     class Port:
-        authority = 'graph-os'
+        authority = 'arbora'
         supports_durable_fences = True
         supports_durable_audit = True
         supports_attended_leases = True
@@ -1457,13 +1457,13 @@ def anyio_backend():
 
 # --------------------------------------------------- browser session evidence
 #
-# graph-os's browser identity producer (``graph_os.identity.broker
-# .GraphOSBrowserAuthority``) is the real caller of this port: it verifies a
-# live ``__Host-graphos_session`` cookie, then calls this exact chokepoint to
+# arbora's browser identity producer (``arbora.identity.broker
+# .ArboraBrowserAuthority``) is the real caller of this port: it verifies a
+# live ``__Host-arbora_session`` cookie, then calls this exact chokepoint to
 # turn its own owner-verified evidence into the MFA timestamp its HTTP/MCP
 # caller projection needs. These tests exercise the webui side of that
 # contract with a synthetic authority fixture standing in for the real
-# producer, which graph-os's own suite covers end to end.
+# producer, which arbora's own suite covers end to end.
 
 _EVIDENCE_ORIGIN = 'https://console.example.test'
 _NOW_MS = 2_000_000

agent_webui-2.8.0/agent/agent_webui/__tests__/test_run_identity.py

@@ -0,0 +1,218 @@
+"""WEBUI-API-R011.2: conversation labels and admitted run identity stay distinct."""
+
+# spec: WEBUI-API-R011.2.1
+
+import asyncio
+
+import pytest
+from agent_webui.orchestrator_model import (
+    _conversation_session_id,
+    _run_identity,
+    build_orchestrator_model,
+)
+from pydantic_ai import Agent
+from pydantic_ai.messages import ModelRequest, UserPromptPart
+
+
+def request(text='hello', conversation_id=None):
+    return ModelRequest(
+        parts=[UserPromptPart(content=text)], conversation_id=conversation_id
+    )
+
+
+def task_result(task_id, context='owned-context'):
+    return {
+        'value': {
+            'id': task_id,
+            'contextId': context,
+            'metadata': {
+                'arbora': {
+                    'runId': 'run-' + task_id,
+                    'runTraceRef': 'opaque-ref-' + task_id,
+                }
+            },
+            'artifacts': [{'parts': [{'kind': 'text', 'text': 'reply-' + task_id}]}],
+        }
+    }
+
+
+def test_explicit_identity_is_stable_not_content_derived():
+    assert _conversation_session_id([request('one', 'c1')]) == 'webui:c1'
+    assert _conversation_session_id([request('two', 'c1')]) == 'webui:c1'
+    assert _conversation_session_id([request('one', 'c2')]) == 'webui:c2'
+    assert _conversation_session_id([request()]) != _conversation_session_id(
+        [request()]
+    )
+
+
+def test_conflicting_identity_refused():
+    with pytest.raises(ValueError, match='Conflicting'):
+        _conversation_session_id(
+            [request(conversation_id='a'), request(conversation_id='b')]
+        )
+
+
+def test_explicit_references_only_no_guessed_trace():
+    metadata = _run_identity(task_result('t1'), 'webui:c1')
+    assert metadata is not None
+    identity = metadata['arbora_run']
+    assert identity == {
+        'conversation_context': 'webui:c1',
+        'task_id': 't1',
+        'context_id': 'owned-context',
+        'run_id': 'run-t1',
+        'run_trace_ref': 'opaque-ref-t1',
+    }
+    assert _run_identity({'value': {'status': {}}}, 'webui:c1') is None
+    assert _run_identity({'result': task_result('nested')}, 'webui:c1') is None
+    assert _run_identity({'value': {'id': 't', 'contextId': 'c'}}, 'webui:c1') == {
+        'arbora_run': {
+            'conversation_context': 'webui:c1',
+            'task_id': 't',
+            'context_id': 'c',
+        }
+    }
+
+
+@pytest.mark.parametrize(
+    'field,value', [('id', 1), ('contextId', ''), ('contextId', ['c'])]
+)
+def test_invalid_returned_identity_refused(field, value):
+    result = task_result('t1')
+    result['value'][field] = value
+    assert _run_identity(result, 'webui:c1') is None
+
+
+async def test_stream_metadata_is_request_local_and_preserves_exact_refs():
+    calls = []
+
+    async def invoke(op, params, *, idempotency_key):
+        context = params['message']['contextId']
+        calls.append((context, idempotency_key))
+        await asyncio.sleep(0)
+        return task_result(context)
+
+    agent = Agent(build_orchestrator_model(invoke=invoke))
+
+    async def run(conversation):
+        async with agent.run_stream('hello', conversation_id=conversation) as result:
+            await result.get_output()
+            return result.response
+
+    one, two = await asyncio.gather(run('one'), run('two'))
+    assert one.metadata['arbora_run']['task_id'] == 'webui:one'
+    assert two.metadata['arbora_run']['task_id'] == 'webui:two'
+    assert one.metadata['arbora_run']['run_trace_ref'] == 'opaque-ref-webui:one'
+    from pydantic_ai.ui.vercel_ai import VercelAIAdapter
+
+    wire = VercelAIAdapter.dump_messages([one])[0]
+    assert wire.metadata['arbora_run'] == one.metadata['arbora_run']
+    # Repeated turns share conversation identity, not a fabricated task/run ID.
+    again = await run('one')
+    assert again.metadata['arbora_run']['conversation_context'] == 'webui:one'
+    assert calls[0][1] != calls[-1][1]
+    assert calls[-1][0] == 'webui:one'
+
+
+async def test_failed_stream_does_not_reuse_previous_identity():
+    calls = 0
+
+    async def invoke(op, params, *, idempotency_key):
+        nonlocal calls
+        calls += 1
+        if calls == 2:
+            raise RuntimeError('unavailable')
+        return task_result('first' if calls == 1 else 'third')
+
+    agent = Agent(build_orchestrator_model(invoke=invoke))
+    first = await agent.run('first', conversation_id='one')
+    assert first.response.metadata['arbora_run']['task_id'] == 'first'
+    with pytest.raises(RuntimeError, match='unavailable'):
+        async with agent.run_stream('second', conversation_id='two') as result:
+            await result.get_output()
+    async with agent.run_stream('retry', conversation_id='two') as result:
+        await result.get_output()
+        assert result.response.metadata['arbora_run']['task_id'] == 'third'
+        assert (
+            result.response.metadata['arbora_run']['conversation_context']
+            == 'webui:two'
+        )
+
+
+@pytest.mark.parametrize('malformed', [False, True])
+async def test_real_vercel_stream_propagates_served_identity_without_repeating_effects(
+    malformed,
+):
+    import json
+
+    from pydantic_ai.ui.vercel_ai import VercelAIAdapter
+    from starlette.requests import Request
+
+    calls = []
+
+    async def invoke(op, params, *, idempotency_key):
+        calls.append(params)
+        result = task_result('wire-task')
+        if malformed:
+            result['value']['id'] = 42
+        return {'ok': True, 'result': result, 'meta': {'registry_digest': 'test'}}
+
+    payload = json.dumps(
+        {
+            'id': '/selected',
+            'trigger': 'submit-message',
+            'messages': [
+                {
+                    'id': 'u1',
+                    'role': 'user',
+                    'parts': [{'type': 'text', 'text': 'hello'}],
+                }
+            ],
+        }
+    ).encode()
+
+    async def receive():
+        return {'type': 'http.request', 'body': payload, 'more_body': False}
+
+    request = Request(
+        {
+            'type': 'http',
+            'method': 'POST',
+            'path': '/api/chats/messages',
+            'headers': [(b'content-type', b'application/json')],
+        },
+        receive,
+    )
+    response = await VercelAIAdapter.dispatch_request(
+        request, agent=Agent(build_orchestrator_model(invoke=invoke)), sdk_version=7
+    )
+    assert hasattr(response, 'body_iterator'), response.body
+    chunks = [chunk async for chunk in response.body_iterator]
+    body = ''.join(
+        chunk.decode() if isinstance(chunk, bytes) else chunk for chunk in chunks
+    )
+    assert len(calls) == 1
+    assert calls[0]['message']['contextId'] == 'webui:/selected'
+    assert 'reply-wire-task' in body
+    events = [
+        json.loads(line[6:])
+        for line in body.splitlines()
+        if line.startswith('data: ') and line != 'data: [DONE]'
+    ]
+    metadata = [
+        event['messageMetadata']
+        for event in events
+        if event['type'] == 'message-metadata'
+    ]
+    assert len(metadata) == 1
+    if malformed:
+        assert 'arbora_run' not in metadata[0]
+    else:
+        assert metadata[0]['arbora_run']['task_id'] == 'wire-task'
+        assert metadata[0]['arbora_run']['run_trace_ref'] == 'opaque-ref-wire-task'
+
+
+def test_error_envelope_cannot_supply_identity():
+    assert (
+        _run_identity({'ok': False, 'result': task_result('fake')}, 'webui:c') is None
+    )

{agent_webui-2.7.0 → agent_webui-2.8.0}/agent/agent_webui/__tests__/test_security_boundaries.py

@@ -270,7 +270,7 @@ def _run_html_document(body_chunks: list[bytes], policy: str | None = None) -> l
     return messages
 
 
-@pytest.mark.spec('DS-08')
+@pytest.mark.spec('WEBUI-DESIGN-R009')
 def test_html_documents_carry_a_fresh_style_nonce() -> None:
     chunks = [b'<meta property="csp-nonce" nonce="AGENT_WEBUI_', b'CSP_NONCE">']
     first = _run_html_document(chunks)