agentevo-cloud 0.2.7__tar.gz → 0.2.9__tar.gz

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.9}/LICENSE

@@ -3,7 +3,7 @@ Business Source License 1.1
 Parameters
 
 Licensor:         Agentevo
-Licensed Work:    agentevo-cloud 0.2.7
+Licensed Work:    agentevo-cloud 0.2.9
 Copyright Notice: Copyright (c) 2026 Agentevo
 
 Additional Use Grant:

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: agentevo-cloud
-Version: 0.2.7
+Version: 0.2.9
 Summary: Agentevo SaaS (TZ-3 control plane, TZ-4 managed intelligence): auth, metering, C2 APIs, workers.
 Project-URL: Homepage, https://agentevo.sh
 Project-URL: Documentation, https://agentevo.sh/#setup
@@ -20,7 +20,7 @@ Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
 Classifier: Typing :: Typed
 Requires-Python: >=3.10
 Requires-Dist: agentevo-core==0.1.6
-Requires-Dist: agentevo-local==0.1.6
+Requires-Dist: agentevo-local==0.1.7
 Requires-Dist: anyio>=4
 Requires-Dist: cryptography>=44
 Requires-Dist: fastapi>=0.115
@@ -51,16 +51,16 @@ Part of [Agentevo](https://agentevo.sh).
 
 ## Encrypted runtime release
 
-Cloud **0.2.7** is the pending source version for authenticated accepted event
+Cloud **0.2.9** is the pending source version for authenticated accepted event
 context, reviewed legacy transitions and the existing encrypted storage,
-provider and backup controls. Verified0.2.6 artifacts and consumer seal remain
-preserved;0.2.7 is not built/sealed/cold-installed yet. A local passing test alone
+provider and backup controls. Verified 0.2.8 artifacts and consumer seal remain
+preserved; 0.2.9 is not built/sealed/cold-installed yet. A local passing test alone
 does not establish publication, deployment or complete operating acceptance.
 
 The optional `encrypted` extra pins `sqlcipher3==0.6.3`. For source development,
 install it with `uv sync --frozen --package agentevo-cloud --extra encrypted`.
 After final publication, the package selection is
-`agentevo-cloud[encrypted]==0.2.7`; use the approved hashed, wheel-only consumer
+`agentevo-cloud[encrypted]==0.2.9`; use the approved hashed, wheel-only consumer
 lock for a hosted image. Installation alone does not activate encryption.
 
 Select `AGENTEVO_DB_STORAGE=sqlcipher-v1`, an explicit public

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.9}/README.md

@@ -19,16 +19,16 @@ Part of [Agentevo](https://agentevo.sh).
 
 ## Encrypted runtime release
 
-Cloud **0.2.7** is the pending source version for authenticated accepted event
+Cloud **0.2.9** is the pending source version for authenticated accepted event
 context, reviewed legacy transitions and the existing encrypted storage,
-provider and backup controls. Verified0.2.6 artifacts and consumer seal remain
-preserved;0.2.7 is not built/sealed/cold-installed yet. A local passing test alone
+provider and backup controls. Verified 0.2.8 artifacts and consumer seal remain
+preserved; 0.2.9 is not built/sealed/cold-installed yet. A local passing test alone
 does not establish publication, deployment or complete operating acceptance.
 
 The optional `encrypted` extra pins `sqlcipher3==0.6.3`. For source development,
 install it with `uv sync --frozen --package agentevo-cloud --extra encrypted`.
 After final publication, the package selection is
-`agentevo-cloud[encrypted]==0.2.7`; use the approved hashed, wheel-only consumer
+`agentevo-cloud[encrypted]==0.2.9`; use the approved hashed, wheel-only consumer
 lock for a hosted image. Installation alone does not activate encryption.
 
 Select `AGENTEVO_DB_STORAGE=sqlcipher-v1`, an explicit public

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.9}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "agentevo-cloud"
-version = "0.2.7"
+version = "0.2.9"
 description = "Agentevo SaaS (TZ-3 control plane, TZ-4 managed intelligence): auth, metering, C2 APIs, workers."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -22,7 +22,7 @@ classifiers = [
 ]
 dependencies = [
     "agentevo-core==0.1.6",
-    "agentevo-local==0.1.6",
+    "agentevo-local==0.1.7",
     "cryptography>=44",
     "fastapi>=0.115",
     "anyio>=4",

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.9}/src/agentevo_cloud/community.py

@@ -46,6 +46,9 @@ SIGNING_KEY_ENV = "AGENTEVO_FEED_SIGNING_KEY"
 #: Key id of the manifest signature (rotation adds ids; clients pin the map).
 SIGNING_KEY_ID = "vendor-feed-v1"
 
+#: Env overriding the manifest key id (the deploy sets it when it rotates).
+SIGNING_KEY_ID_ENV = "AGENTEVO_FEED_SIGNING_KEY_ID"
+
 
 @dataclass(frozen=True)
 class CommunityGuard:
@@ -187,7 +190,8 @@ def feed(*, since: str | None = None) -> dict[str, Any]:
     }
     key = os.environ.get(SIGNING_KEY_ENV, "").strip()
     if key:
-        return sign_feed(envelope, key)
+        key_id = os.environ.get(SIGNING_KEY_ID_ENV, "").strip() or SIGNING_KEY_ID
+        return sign_feed(envelope, key, key_id=key_id)
     return envelope
 
 

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.9}/src/agentevo_cloud/health_receipts.py

@@ -8,11 +8,13 @@ These files are application observations, not backup-restorability proofs.
 
 from __future__ import annotations
 
+import errno
 import json
 import os
 import stat
 import sys
 import tempfile
+import time
 from collections.abc import Iterator
 from contextlib import contextmanager
 from dataclasses import dataclass
@@ -32,6 +34,13 @@ COMPONENTS = frozenset({"jobs", "webhooks", "backup"})
 _EVENTS = frozenset({"attempt", "completed", "success", "item_success", "failure"})
 _MAX_MARKER_BYTES = 1024
 
+#: Contended receipt writes wait this long in total (sibling passes hold
+#: the lock for milliseconds; a lock stuck past this is a real fault).
+_WRITER_LOCK_DEADLINE_SECONDS = 5.0
+
+#: Pause between writer-lock attempts (mirrors the migration lock poll).
+_WRITER_LOCK_POLL_SECONDS = 0.05
+
 
 def receipt_directory(settings: Settings) -> Path:
     """A dedicated private directory, normally beside the shared database."""
@@ -165,18 +174,35 @@ def _writer_lock(directory: Path) -> Iterator[None]:
     try:
         if not stat.S_ISREG(os.fstat(fd).st_mode):
             raise ValueError("invalid receipt lock file")
-        if sys.platform == "win32":
-            if os.fstat(fd).st_size == 0:
-                os.write(fd, b"0")
-            os.lseek(fd, 0, os.SEEK_SET)
-            msvcrt.locking(fd, msvcrt.LK_NBLCK, 1)
-        else:
-            fcntl.flock(fd, fcntl.LOCK_EX | fcntl.LOCK_NB)
+        if sys.platform == "win32" and os.fstat(fd).st_size == 0:
+            os.write(fd, b"0")
+        deadline = time.monotonic() + _WRITER_LOCK_DEADLINE_SECONDS
+        while True:
+            try:
+                _lock_writer_file(fd)
+                break
+            except OSError as exc:
+                if exc.errno not in (errno.EACCES, errno.EAGAIN):
+                    raise
+                remaining = deadline - time.monotonic()
+                if remaining <= 0:
+                    raise TimeoutError("timed out waiting for the receipt writer lock") from None
+                time.sleep(min(_WRITER_LOCK_POLL_SECONDS, remaining))
         yield
     finally:
         os.close(fd)  # Also releases the kernel lock after a crashed writer.
 
 
+def _lock_writer_file(fd: int) -> None:
+    """Try kernel ownership once (the caller retries contention)."""
+    if sys.platform == "win32":
+        os.lseek(fd, 0, os.SEEK_SET)
+        # Windows permits the locked byte range to extend beyond EOF.
+        msvcrt.locking(fd, msvcrt.LK_NBLCK, 1)
+    else:
+        fcntl.flock(fd, fcntl.LOCK_EX | fcntl.LOCK_NB)
+
+
 def _write_marker(directory: Path, component: str, event: str, moment: datetime) -> None:
     """Publish only after a complete file has reached the filesystem."""
     payload = {"version": 1, "at": moment.astimezone(UTC).isoformat()}

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.9}/tests/test_community.py

@@ -18,6 +18,8 @@ from agentevo_cloud.community import (
     FEED_VERSION,
     FORMAT,
     SIGNING_KEY_ENV,
+    SIGNING_KEY_ID,
+    SIGNING_KEY_ID_ENV,
     CommunityGuard,
     feed,
     sign_feed,
@@ -348,6 +350,16 @@ def test_feed_signs_when_env_set(monkeypatch: pytest.MonkeyPatch) -> None:
     assert "manifest" not in feed()
 
 
+def test_feed_honors_key_id_env(monkeypatch: pytest.MonkeyPatch) -> None:
+    private_pem, _ = _ed25519_pem()
+    monkeypatch.setenv(SIGNING_KEY_ENV, private_pem)
+    assert feed()["manifest"]["key_id"] == SIGNING_KEY_ID
+    monkeypatch.setenv(SIGNING_KEY_ID_ENV, "vendor-feed-v2")
+    assert feed()["manifest"]["key_id"] == "vendor-feed-v2"
+    monkeypatch.setenv(SIGNING_KEY_ID_ENV, "  ")
+    assert feed()["manifest"]["key_id"] == SIGNING_KEY_ID
+
+
 def test_route_since_filter_and_no_billing(client: Any) -> None:
     secret = client.provisioned["secret"]
     before = client.get("/v1/usage", headers=auth(secret)).json()["used"]

{agentevo_cloud-0.2.7 → agentevo_cloud-0.2.9}/tests/test_health_freshness.py

@@ -3,6 +3,7 @@
 
 from __future__ import annotations
 
+import errno
 import gzip
 import json
 import os
@@ -94,7 +95,9 @@ def test_independent_freshness_boundaries_and_failure_recovery(
     assert component_status(settings, other, now=STAMP)["last_successful_pass_at"] is None
 
 
-def test_receipts_are_private_atomic_and_do_not_regress(tmp_path: Path) -> None:
+def test_receipts_are_private_atomic_and_do_not_regress(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
     settings = _settings(tmp_path, "jobs")
     _success(settings, "jobs")
     directory = receipt_directory(settings)
@@ -106,13 +109,56 @@ def test_receipts_are_private_atomic_and_do_not_regress(tmp_path: Path) -> None:
     assert component_status(settings, "jobs", now=STAMP)["last_successful_pass_at"] == (
         STAMP.isoformat()
     )
-    with health_receipts._writer_lock(directory), pytest.raises(OSError):
+    # A lock stuck past the deadline still surfaces (TimeoutError is an
+    # OSError) and the timestamp never regresses; production showed the
+    # old fail-on-first-contention dropping worker passes.
+    monkeypatch.setattr(health_receipts, "_WRITER_LOCK_DEADLINE_SECONDS", 0.01)
+    with health_receipts._writer_lock(directory), pytest.raises(TimeoutError):
         record_event(settings, "jobs", "success", now=STAMP + timedelta(seconds=1))
     assert component_status(settings, "jobs", now=STAMP)["last_successful_pass_at"] == (
         STAMP.isoformat()
     )
 
 
+def test_writer_lock_retries_transient_contention(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    settings = _settings(tmp_path, "jobs")
+    calls = 0
+    real_flock = health_receipts.fcntl.flock
+
+    def _flaky(fd: int, operation: int) -> None:
+        nonlocal calls
+        calls += 1
+        if calls <= 2:
+            raise OSError(errno.EAGAIN, "contended")
+        real_flock(fd, operation)
+
+    monkeypatch.setattr(health_receipts.fcntl, "flock", _flaky)
+    record_event(settings, "jobs", "success", now=STAMP)
+    assert calls == 3
+    assert component_status(settings, "jobs", now=STAMP)["last_successful_pass_at"] == (
+        STAMP.isoformat()
+    )
+
+
+def test_writer_lock_rejects_non_contention_errors_without_retry(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    settings = _settings(tmp_path, "jobs")
+    calls = 0
+
+    def _boom(fd: int, operation: int) -> None:
+        nonlocal calls
+        calls += 1
+        raise OSError(errno.EBADF, "synthetic")
+
+    monkeypatch.setattr(health_receipts.fcntl, "flock", _boom)
+    with pytest.raises(OSError, match="synthetic"):
+        record_event(settings, "jobs", "success", now=STAMP)
+    assert calls == 1
+
+
 @pytest.mark.parametrize(
     "payload",
     [