agentevo-cloud 0.2.7__tar.gz → 0.2.8__tar.gz

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.8}/LICENSE

@@ -3,7 +3,7 @@ Business Source License 1.1
 Parameters
 
 Licensor:         Agentevo
-Licensed Work:    agentevo-cloud 0.2.7
+Licensed Work:    agentevo-cloud 0.2.8
 Copyright Notice: Copyright (c) 2026 Agentevo
 
 Additional Use Grant:

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: agentevo-cloud
-Version: 0.2.7
+Version: 0.2.8
 Summary: Agentevo SaaS (TZ-3 control plane, TZ-4 managed intelligence): auth, metering, C2 APIs, workers.
 Project-URL: Homepage, https://agentevo.sh
 Project-URL: Documentation, https://agentevo.sh/#setup
@@ -20,7 +20,7 @@ Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
 Classifier: Typing :: Typed
 Requires-Python: >=3.10
 Requires-Dist: agentevo-core==0.1.6
-Requires-Dist: agentevo-local==0.1.6
+Requires-Dist: agentevo-local==0.1.7
 Requires-Dist: anyio>=4
 Requires-Dist: cryptography>=44
 Requires-Dist: fastapi>=0.115
@@ -51,16 +51,16 @@ Part of [Agentevo](https://agentevo.sh).
 
 ## Encrypted runtime release
 
-Cloud **0.2.7** is the pending source version for authenticated accepted event
+Cloud **0.2.8** is the pending source version for authenticated accepted event
 context, reviewed legacy transitions and the existing encrypted storage,
-provider and backup controls. Verified0.2.6 artifacts and consumer seal remain
-preserved;0.2.7 is not built/sealed/cold-installed yet. A local passing test alone
+provider and backup controls. Verified 0.2.7 artifacts and consumer seal remain
+preserved; 0.2.8 is not built/sealed/cold-installed yet. A local passing test alone
 does not establish publication, deployment or complete operating acceptance.
 
 The optional `encrypted` extra pins `sqlcipher3==0.6.3`. For source development,
 install it with `uv sync --frozen --package agentevo-cloud --extra encrypted`.
 After final publication, the package selection is
-`agentevo-cloud[encrypted]==0.2.7`; use the approved hashed, wheel-only consumer
+`agentevo-cloud[encrypted]==0.2.8`; use the approved hashed, wheel-only consumer
 lock for a hosted image. Installation alone does not activate encryption.
 
 Select `AGENTEVO_DB_STORAGE=sqlcipher-v1`, an explicit public

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.8}/README.md

@@ -19,16 +19,16 @@ Part of [Agentevo](https://agentevo.sh).
 
 ## Encrypted runtime release
 
-Cloud **0.2.7** is the pending source version for authenticated accepted event
+Cloud **0.2.8** is the pending source version for authenticated accepted event
 context, reviewed legacy transitions and the existing encrypted storage,
-provider and backup controls. Verified0.2.6 artifacts and consumer seal remain
-preserved;0.2.7 is not built/sealed/cold-installed yet. A local passing test alone
+provider and backup controls. Verified 0.2.7 artifacts and consumer seal remain
+preserved; 0.2.8 is not built/sealed/cold-installed yet. A local passing test alone
 does not establish publication, deployment or complete operating acceptance.
 
 The optional `encrypted` extra pins `sqlcipher3==0.6.3`. For source development,
 install it with `uv sync --frozen --package agentevo-cloud --extra encrypted`.
 After final publication, the package selection is
-`agentevo-cloud[encrypted]==0.2.7`; use the approved hashed, wheel-only consumer
+`agentevo-cloud[encrypted]==0.2.8`; use the approved hashed, wheel-only consumer
 lock for a hosted image. Installation alone does not activate encryption.
 
 Select `AGENTEVO_DB_STORAGE=sqlcipher-v1`, an explicit public

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.8}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "agentevo-cloud"
-version = "0.2.7"
+version = "0.2.8"
 description = "Agentevo SaaS (TZ-3 control plane, TZ-4 managed intelligence): auth, metering, C2 APIs, workers."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -22,7 +22,7 @@ classifiers = [
 ]
 dependencies = [
     "agentevo-core==0.1.6",
-    "agentevo-local==0.1.6",
+    "agentevo-local==0.1.7",
     "cryptography>=44",
     "fastapi>=0.115",
     "anyio>=4",

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.8}/src/agentevo_cloud/community.py

@@ -46,6 +46,9 @@ SIGNING_KEY_ENV = "AGENTEVO_FEED_SIGNING_KEY"
 #: Key id of the manifest signature (rotation adds ids; clients pin the map).
 SIGNING_KEY_ID = "vendor-feed-v1"
 
+#: Env overriding the manifest key id (the deploy sets it when it rotates).
+SIGNING_KEY_ID_ENV = "AGENTEVO_FEED_SIGNING_KEY_ID"
+
 
 @dataclass(frozen=True)
 class CommunityGuard:
@@ -187,7 +190,8 @@ def feed(*, since: str | None = None) -> dict[str, Any]:
     }
     key = os.environ.get(SIGNING_KEY_ENV, "").strip()
     if key:
-        return sign_feed(envelope, key)
+        key_id = os.environ.get(SIGNING_KEY_ID_ENV, "").strip() or SIGNING_KEY_ID
+        return sign_feed(envelope, key, key_id=key_id)
     return envelope
 
 

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.8}/tests/test_community.py

@@ -18,6 +18,8 @@ from agentevo_cloud.community import (
     FEED_VERSION,
     FORMAT,
     SIGNING_KEY_ENV,
+    SIGNING_KEY_ID,
+    SIGNING_KEY_ID_ENV,
     CommunityGuard,
     feed,
     sign_feed,
@@ -348,6 +350,16 @@ def test_feed_signs_when_env_set(monkeypatch: pytest.MonkeyPatch) -> None:
     assert "manifest" not in feed()
 
 
+def test_feed_honors_key_id_env(monkeypatch: pytest.MonkeyPatch) -> None:
+    private_pem, _ = _ed25519_pem()
+    monkeypatch.setenv(SIGNING_KEY_ENV, private_pem)
+    assert feed()["manifest"]["key_id"] == SIGNING_KEY_ID
+    monkeypatch.setenv(SIGNING_KEY_ID_ENV, "vendor-feed-v2")
+    assert feed()["manifest"]["key_id"] == "vendor-feed-v2"
+    monkeypatch.setenv(SIGNING_KEY_ID_ENV, "  ")
+    assert feed()["manifest"]["key_id"] == SIGNING_KEY_ID
+
+
 def test_route_since_filter_and_no_billing(client: Any) -> None:
     secret = client.provisioned["secret"]
     before = client.get("/v1/usage", headers=auth(secret)).json()["used"]