databricks-tellr-app 0.4.3.dev19__tar.gz → 0.4.3.dev20__tar.gz

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev19
+Version: 0.4.3.dev20
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
@@ -10,10 +10,10 @@ Requires-Dist: python-multipart==0.0.20
 Requires-Dist: pydantic==2.12.4
 Requires-Dist: pydantic-settings==2.12.0
 Requires-Dist: databricks-langchain==0.9.0
-Requires-Dist: langchain==1.0.5
-Requires-Dist: langchain-core==1.0.4
-Requires-Dist: langchain-community==0.4.1
-Requires-Dist: langchain-text-splitters==1.0.0
+Requires-Dist: langchain==1.3.14
+Requires-Dist: langchain-core==1.5.3
+Requires-Dist: langchain-community==0.4.2
+Requires-Dist: langchain-text-splitters==1.1.2
 Requires-Dist: litellm==1.80.11
 Requires-Dist: mcp==1.27.0
 Requires-Dist: opentelemetry-api==1.38.0
@@ -47,9 +47,11 @@ Requires-Dist: databricks-ai-bridge==0.21.0
 Requires-Dist: databricks-ai-search==0.76
 Requires-Dist: databricks-connect==16.1.7
 Requires-Dist: databricks-vectorsearch==0.75
-Requires-Dist: langchain-classic==1.0.0
-Requires-Dist: langgraph==1.0.10
-Requires-Dist: langgraph-prebuilt==1.0.10
+Requires-Dist: langchain-classic==1.0.8
+Requires-Dist: langgraph==1.2.10
+Requires-Dist: langgraph-checkpoint==4.1.1
+Requires-Dist: langgraph-prebuilt==1.1.0
+Requires-Dist: langgraph-sdk==0.4.2
 Requires-Dist: langsmith==0.9.5
 Requires-Dist: unitycatalog-ai==0.3.2
 Requires-Dist: unitycatalog-langchain==0.3.0

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/databricks_tellr_app/run.py

@@ -74,6 +74,29 @@ def init_database(seed_databricks_defaults: bool = False) -> None:
         logger.error(f"Failed to migrate profiles/sessions to agent_config: {e}\n{tb}")
         raise SystemExit(1) from e
 
+    # Row-per-slide (PR1): migrate historical deck_json blobs into session_slides
+    # rows. Runs HERE, pre-fork, for the same reason as the two migrations above —
+    # the uvicorn workers must never execute migration code. It originally lived in
+    # the FastAPI lifespan; main moved migrations out of the lifespan while this
+    # branch was in flight, so it was relocated on merge rather than dropped.
+    #
+    # Guarded by a per-deck NOT EXISTS anti-join over session_slides (index-only
+    # against its composite PK), so it is a no-op scan once every deck has rows.
+    # A deck whose blob will not parse is logged and skipped, never raised — one
+    # bad row must not abort startup.
+    logger.info("Backfilling session_slides rows...")
+    try:
+        from src.core.database import get_session_local
+        from src.core.backfill_session_slides_startup import backfill_unmigrated_decks
+
+        slide_decks = backfill_unmigrated_decks(get_session_local())
+        if slide_decks:
+            logger.info(f"Backfilled {slide_decks} deck(s) into session_slides rows")
+    except Exception as e:
+        tb = traceback.format_exc()
+        logger.error(f"Failed to backfill session_slides rows: {e}\n{tb}")
+        raise SystemExit(1) from e
+
     # Seed default content
     logger.info(f"Seeding defaults (include_databricks={seed_databricks_defaults})...")
     try:
@@ -97,6 +120,28 @@ def init_database(seed_databricks_defaults: bool = False) -> None:
         logger.error(f"Failed to ensure encryption key: {e}\n{tb}")
         raise SystemExit(1) from e
 
+    # Retired prompt overrides: strip 'system_prompt' and
+    # 'slide_editing_instructions' out of every stored agent_config blob. The
+    # physical columns are dropped inside init_db()'s migration chain, early,
+    # because a database that still has them cannot insert a profile; the BLOB
+    # strip runs LAST, deliberately — it is the one position no later step can
+    # undo by writing a fresh blob (seed_defaults above creates profiles).
+    # A blob that will not parse is logged and skipped, never raised, so one bad
+    # row cannot abort startup; anything else here is SystemExit(1) like the five
+    # steps above.
+    logger.info("Stripping retired prompt keys from agent_config blobs...")
+    try:
+        from src.core.database import get_session_local
+        from src.core.strip_retired_prompt_keys import strip_retired_prompt_keys
+
+        stripped = strip_retired_prompt_keys(get_session_local())
+        if stripped:
+            logger.info(f"Stripped retired prompt keys from {stripped} row(s)")
+    except Exception as e:
+        tb = traceback.format_exc()
+        logger.error(f"Failed to strip retired prompt keys from agent_config: {e}\n{tb}")
+        raise SystemExit(1) from e
+
 
 def main() -> None:
     """Start the uvicorn server."""

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/databricks_tellr_app.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev19
+Version: 0.4.3.dev20
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
@@ -10,10 +10,10 @@ Requires-Dist: python-multipart==0.0.20
 Requires-Dist: pydantic==2.12.4
 Requires-Dist: pydantic-settings==2.12.0
 Requires-Dist: databricks-langchain==0.9.0
-Requires-Dist: langchain==1.0.5
-Requires-Dist: langchain-core==1.0.4
-Requires-Dist: langchain-community==0.4.1
-Requires-Dist: langchain-text-splitters==1.0.0
+Requires-Dist: langchain==1.3.14
+Requires-Dist: langchain-core==1.5.3
+Requires-Dist: langchain-community==0.4.2
+Requires-Dist: langchain-text-splitters==1.1.2
 Requires-Dist: litellm==1.80.11
 Requires-Dist: mcp==1.27.0
 Requires-Dist: opentelemetry-api==1.38.0
@@ -47,9 +47,11 @@ Requires-Dist: databricks-ai-bridge==0.21.0
 Requires-Dist: databricks-ai-search==0.76
 Requires-Dist: databricks-connect==16.1.7
 Requires-Dist: databricks-vectorsearch==0.75
-Requires-Dist: langchain-classic==1.0.0
-Requires-Dist: langgraph==1.0.10
-Requires-Dist: langgraph-prebuilt==1.0.10
+Requires-Dist: langchain-classic==1.0.8
+Requires-Dist: langgraph==1.2.10
+Requires-Dist: langgraph-checkpoint==4.1.1
+Requires-Dist: langgraph-prebuilt==1.1.0
+Requires-Dist: langgraph-sdk==0.4.2
 Requires-Dist: langsmith==0.9.5
 Requires-Dist: unitycatalog-ai==0.3.2
 Requires-Dist: unitycatalog-langchain==0.3.0

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/databricks_tellr_app.egg-info/SOURCES.txt

@@ -51,16 +51,20 @@ setup.py
 ./src/api/schemas/settings/responses.py
 ./src/api/services/__init__.py
 ./src/api/services/chat_service.py
+./src/api/services/deck_level_writer.py
 ./src/api/services/export_job_queue.py
 ./src/api/services/feedback_service.py
 ./src/api/services/job_queue.py
 ./src/api/services/session_manager.py
 ./src/api/services/session_naming.py
+./src/api/services/slide_repository.py
 ./src/api/services/usage_events.py
 ./src/api/services/usage_service.py
 ./src/api/utils/__init__.py
 ./src/api/utils/validation.py
 ./src/core/__init__.py
+./src/core/backfill_session_slides_startup.py
+./src/core/checkpointer.py
 ./src/core/config_loader.py
 ./src/core/context_utils.py
 ./src/core/database.py
@@ -76,17 +80,20 @@ setup.py
 ./src/core/permission_context.py
 ./src/core/prompt_modules.py
 ./src/core/settings_db.py
+./src/core/strip_retired_prompt_keys.py
 ./src/core/user_context.py
 ./src/database/__init__.py
 ./src/database/types.py
 ./src/database/models/__init__.py
 ./src/database/models/deck_contributor.py
+./src/database/models/deck_review.py
 ./src/database/models/design_system.py
 ./src/database/models/encryption_key.py
 ./src/database/models/feedback.py
 ./src/database/models/genie_space.py
 ./src/database/models/google_global_credentials.py
 ./src/database/models/google_oauth_token.py
+./src/database/models/graph_checkpoint.py
 ./src/database/models/identity.py
 ./src/database/models/image.py
 ./src/database/models/profile.py
@@ -99,6 +106,9 @@ setup.py
 ./src/database/models/usage_event.py
 ./src/database/models/user_preference.py
 ./src/domain/__init__.py
+./src/domain/deck_spec.py
+./src/domain/finding.py
+./src/domain/skill_io.py
 ./src/domain/slide.py
 ./src/domain/slide_deck.py
 ./src/services/__init__.py
@@ -106,6 +116,8 @@ setup.py
 ./src/services/agent_factory.py
 ./src/services/config_service.py
 ./src/services/config_validator.py
+./src/services/deck_css_aggregator.py
+./src/services/deck_review_store.py
 ./src/services/design_system_compiler.py
 ./src/services/design_system_service.py
 ./src/services/design_system_templates.py
@@ -213,16 +225,20 @@ src/api/schemas/settings/requests.py
 src/api/schemas/settings/responses.py
 src/api/services/__init__.py
 src/api/services/chat_service.py
+src/api/services/deck_level_writer.py
 src/api/services/export_job_queue.py
 src/api/services/feedback_service.py
 src/api/services/job_queue.py
 src/api/services/session_manager.py
 src/api/services/session_naming.py
+src/api/services/slide_repository.py
 src/api/services/usage_events.py
 src/api/services/usage_service.py
 src/api/utils/__init__.py
 src/api/utils/validation.py
 src/core/__init__.py
+src/core/backfill_session_slides_startup.py
+src/core/checkpointer.py
 src/core/config_loader.py
 src/core/context_utils.py
 src/core/database.py
@@ -238,17 +254,20 @@ src/core/otel_logging.py
 src/core/permission_context.py
 src/core/prompt_modules.py
 src/core/settings_db.py
+src/core/strip_retired_prompt_keys.py
 src/core/user_context.py
 src/database/__init__.py
 src/database/types.py
 src/database/models/__init__.py
 src/database/models/deck_contributor.py
+src/database/models/deck_review.py
 src/database/models/design_system.py
 src/database/models/encryption_key.py
 src/database/models/feedback.py
 src/database/models/genie_space.py
 src/database/models/google_global_credentials.py
 src/database/models/google_oauth_token.py
+src/database/models/graph_checkpoint.py
 src/database/models/identity.py
 src/database/models/image.py
 src/database/models/profile.py
@@ -261,6 +280,9 @@ src/database/models/slide_style_library.py
 src/database/models/usage_event.py
 src/database/models/user_preference.py
 src/domain/__init__.py
+src/domain/deck_spec.py
+src/domain/finding.py
+src/domain/skill_io.py
 src/domain/slide.py
 src/domain/slide_deck.py
 src/services/__init__.py
@@ -268,6 +290,8 @@ src/services/agent.py
 src/services/agent_factory.py
 src/services/config_service.py
 src/services/config_validator.py
+src/services/deck_css_aggregator.py
+src/services/deck_review_store.py
 src/services/design_system_compiler.py
 src/services/design_system_service.py
 src/services/design_system_templates.py

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/databricks_tellr_app.egg-info/requires.txt

@@ -4,10 +4,10 @@ python-multipart==0.0.20
 pydantic==2.12.4
 pydantic-settings==2.12.0
 databricks-langchain==0.9.0
-langchain==1.0.5
-langchain-core==1.0.4
-langchain-community==0.4.1
-langchain-text-splitters==1.0.0
+langchain==1.3.14
+langchain-core==1.5.3
+langchain-community==0.4.2
+langchain-text-splitters==1.1.2
 litellm==1.80.11
 mcp==1.27.0
 opentelemetry-api==1.38.0
@@ -41,9 +41,11 @@ databricks-ai-bridge==0.21.0
 databricks-ai-search==0.76
 databricks-connect==16.1.7
 databricks-vectorsearch==0.75
-langchain-classic==1.0.0
-langgraph==1.0.10
-langgraph-prebuilt==1.0.10
+langchain-classic==1.0.8
+langgraph==1.2.10
+langgraph-checkpoint==4.1.1
+langgraph-prebuilt==1.1.0
+langgraph-sdk==0.4.2
 langsmith==0.9.5
 unitycatalog-ai==0.3.2
 unitycatalog-langchain==0.3.0

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "databricks-tellr-app"
-version = "0.4.3.dev19"
+version = "0.4.3.dev20"
 description = "Tellr application package for Databricks Apps"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -15,10 +15,10 @@ dependencies = [
     "pydantic==2.12.4",
     "pydantic-settings==2.12.0",
     "databricks-langchain==0.9.0",
-    "langchain==1.0.5",
-    "langchain-core==1.0.4",
-    "langchain-community==0.4.1",
-    "langchain-text-splitters==1.0.0",
+    "langchain==1.3.14",
+    "langchain-core==1.5.3",
+    "langchain-community==0.4.2",
+    "langchain-text-splitters==1.1.2",
     "litellm==1.80.11",
     "mcp==1.27.0",
     "opentelemetry-api==1.38.0",
@@ -73,6 +73,13 @@ dependencies = [
     # `pip install databricks-tellr-app` is safe.
     # SDR-4437 MEDIUM-7 (July 2026): the 7 formerly-ranged direct deps above
     # this block are now exact-pinned too; same refresh discipline.
+    # PR2 LangGraph stack bump (August 2026): updated langchain 1.0.5→1.3.14,
+    # langchain-core 1.0.4→1.5.3, langchain-community 0.4.1→0.4.2,
+    # langchain-text-splitters 1.0.0→1.1.2, langchain-classic 1.0.0→1.0.8,
+    # langgraph 1.0.10→1.2.10, added langgraph-checkpoint==4.1.1,
+    # langgraph-prebuilt 1.0.10→1.1.0, added langgraph-sdk==0.4.2. These match
+    # the repo-root requirements.txt and pyproject.toml. MUST be re-verified via
+    # a devloop deploy on db-tellr-dev-pinfix or equivalent before PR3 ships.
     "databricks-sdk==0.120.0",
     "mlflow[databricks]==3.14.0",
     "mlflow-skinny==3.14.0",
@@ -81,9 +88,11 @@ dependencies = [
     "databricks-ai-search==0.76",
     "databricks-connect==16.1.7",
     "databricks-vectorsearch==0.75",
-    "langchain-classic==1.0.0",
-    "langgraph==1.0.10",
-    "langgraph-prebuilt==1.0.10",
+    "langchain-classic==1.0.8",
+    "langgraph==1.2.10",
+    "langgraph-checkpoint==4.1.1",
+    "langgraph-prebuilt==1.1.0",
+    "langgraph-sdk==0.4.2",
     "langsmith==0.9.5",
     "unitycatalog-ai==0.3.2",
     "unitycatalog-langchain==0.3.0",

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/src/api/main.py

@@ -489,23 +489,11 @@ logger.info("MCP server mounted at /mcp")
 
 @app.get("/api/health")
 async def health():
-    """Health check endpoint.
-
-    ``encryption_key_source`` is load-bearing for deployment: ``tellr.update``
-    polls it to confirm a relocated app is reading the secret before it deletes
-    the Lakebase key row. Reports the source only — never the key.
-
-    ``version`` comes from the installed wheel's metadata, so it tracks the
-    deployed release; it reads "unknown" from a source checkout.
-    """
-    from src.api.routes.version import get_installed_version
-    from src.core.encryption import key_source
-
+    """Health check endpoint."""
     return {
         "status": "healthy",
         "environment": ENVIRONMENT,
-        "version": get_installed_version(),
-        "encryption_key_source": key_source(),
+        "version": "0.3.0",
     }
 
 

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/src/api/mcp_auth.py

@@ -16,22 +16,19 @@ Accepts three identity sources, evaluated in priority order:
    identity headers. The receiving app (tellr) trusts those headers
    because the same proxy sets them, strips any caller-supplied versions,
    and cannot be bypassed by external traffic. This path has no user
-   token, so the user-client ContextVar is left **unset**: agent tools
-   that resolve their client via ``get_user_client()`` fail closed rather
-   than silently running as tellr's service principal (SDR-4437 / F-CR-3).
-   Code that legitimately needs SP credentials on this path must call
-   ``get_system_client()`` explicitly. Attribution (``created_by`` on
-   decks, etc.) remains the real user via ``user_name``.
+   token, so downstream Databricks API calls use tellr's own service
+   principal credentials; attribution (``created_by`` on decks, etc.)
+   remains the real user via ``user_name``.
 
 The priority-3 path is gated on ``TELLR_TRUST_FORWARDED_IDENTITY=true``
 so the behaviour is explicit at deploy time. Production Databricks Apps
 deployments enable it; local dev does not.
 
 The resolved identity is bound into the same request-scoped ContextVars
-the browser flow uses (``set_current_user``, ``set_permission_context``,
-and — only when a user token is present — ``set_user_client``), so
-downstream services (session manager, permission service, MLflow, Google
-OAuth) see the caller's identity without any MCP-specific plumbing.
+the browser flow uses (``set_current_user``, ``set_user_client``,
+``set_permission_context``), so downstream services (session manager,
+permission service, MLflow, Google OAuth) see the caller's identity
+without any MCP-specific plumbing.
 """
 
 from __future__ import annotations
@@ -46,6 +43,7 @@ from fastapi import Request
 
 from src.core.databricks_client import (
     get_or_create_user_client,
+    get_system_client,
     set_user_client,
 )
 from src.core.permission_context import (
@@ -152,24 +150,28 @@ def extract_mcp_identity(request: Request) -> MCPIdentity:
 def mcp_auth_scope(request: Request) -> Iterator[MCPIdentity]:
     """Authenticate an MCP request and bind identity ContextVars for the block.
 
-    On entry: resolves identity and binds ``current_user`` and
-    ``permission_context``. The ``user_client`` ContextVar is bound only when
-    a real user token is present (priority 1/2); on the token-less priority-3
-    app-to-app path it is deliberately left unset.
+    On entry: resolves identity, binds ``current_user``, ``user_client``,
+    and ``permission_context``.
 
     On exit: clears all three ContextVars, even if the wrapped block raised.
 
-    Leaving ``user_client`` unset on priority 3 makes it true by construction
-    that agent tools (which resolve their client via ``get_user_client()``)
-    can never execute as tellr's service principal on the app-to-app path —
-    they fail closed with ``UserClientRequiredError`` in production
-    (SDR-4437 / F-CR-3). Code that legitimately needs SP credentials must call
-    ``get_system_client()`` explicitly. Attribution (``created_by``) is
-    unaffected: it uses ``user_name`` from the forwarded identity headers,
-    which the proxy attests.
+    When the identity was resolved via priority 3 (no user token), the
+    bound ``user_client`` is tellr's service-principal client — downstream
+    services still function, but any SDK calls are made with SP credentials
+    rather than the user's own. Attribution (``created_by``) is unaffected:
+    it uses ``user_name`` from the forwarded identity headers, which the
+    proxy attests.
     """
     identity = extract_mcp_identity(request)
 
+    if identity.token is not None:
+        user_client = get_or_create_user_client(identity.token)
+    else:
+        # Priority-3 path: no user token, so downstream Databricks API
+        # calls use tellr's service principal. Safe because the app-to-app
+        # model explicitly delegates credentialing to the receiving app.
+        user_client = get_system_client()
+
     permission_ctx = build_permission_context(
         user_id=identity.user_id,
         user_name=identity.user_name,
@@ -177,22 +179,9 @@ def mcp_auth_scope(request: Request) -> Iterator[MCPIdentity]:
     )
 
     set_current_user(identity.user_name)
+    set_user_client(user_client)
     set_permission_context(permission_ctx)
 
-    if identity.token is not None:
-        # Priority 1/2: a real user token is present. Bind the OBO client so
-        # downstream services (agent tools included) act as the user.
-        set_user_client(get_or_create_user_client(identity.token))
-    else:
-        # Priority-3 (app-to-app) path: no user token is available. Do NOT
-        # bind any client into the user-client ContextVar. Leaving it unset
-        # makes it true by construction that agent tools — which resolve their
-        # client via get_user_client() — can never run as the app service
-        # principal on this path: they fail closed with UserClientRequiredError
-        # in production (SDR-4437 / F-CR-3). Anything that legitimately needs
-        # the SP here must call get_system_client() explicitly.
-        set_user_client(None)
-
     logger.debug(
         "MCP auth scope entered",
         extra={

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/src/api/routes/chat.py

@@ -543,6 +543,18 @@ async def send_message_streaming(
     )
 
 
+@router.get("/health")
+async def health_check():
+    """Health check endpoint.
+
+    Returns:
+        Status information
+    """
+    return {
+        "status": "healthy",
+        "service": "AI Slide Generator",
+    }
+
 
 @router.post("/chat/async")
 async def submit_chat_async(

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/src/api/routes/sessions.py

@@ -743,11 +743,28 @@ async def get_session_slides(session_id: str):
         ) from e
 
 
-# F-CR-16 (SDR-4437): the POST /cleanup endpoint was removed — it had no
-# authorization check and allowed any authenticated CAN_USE user to delete all
-# sessions older than 24h (cascading to decks, chat history, etc.). The endpoint
-# was unused (no frontend caller, no scheduler, no script), so removal was safer
-# than gating. See SDR-4437 for details.
+@router.post("/cleanup")
+async def cleanup_expired_sessions():
+    """Clean up expired sessions.
+
+    Returns:
+        Number of sessions deleted
+    """
+    try:
+        session_manager = get_session_manager()
+        count = await asyncio.to_thread(session_manager.cleanup_expired_sessions)
+
+        logger.info("Session cleanup completed", extra={"deleted_count": count})
+
+        return {"status": "completed", "deleted_count": count}
+
+    except Exception as e:
+        logger.error(f"Failed to cleanup sessions: {e}", exc_info=True)
+        raise HTTPException(
+            status_code=500,
+            detail="Cleanup failed",
+        ) from e
+
 
 # F-CR-10 (SDR-4437): the debug-only POST /{session_id}/export endpoint was
 # removed — it was unused by the frontend and dumped full session data (all chat

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/src/api/routes/settings/design_systems.py

@@ -3,21 +3,7 @@
 CRUD + bundle import for org-shared design systems. Mirrors the slide-styles
 router (``slide_styles.py``): design systems are company-wide assets (everyone
 can view/use), ``created_by`` records authorship, and a single ``is_default``
-marks the org default.
-
-AUTHORIZATION (SDR-4437 F-CR-17): CREATE and IMPORT are ADMIN-ONLY. This
-supersedes the earlier "any user may contribute a design system" decision. The
-reason is the downstream blast radius rather than the write itself: a design
-system's ``compiled_style_content`` is injected into the generation system
-prompt of every user who selects it (``agent_factory._get_prompt_content`` ->
-``prompt_modules.build_generation_system_prompt``), and that artifact embeds the
-bundle's README/SKILL.md **verbatim** as the BRAND MANUAL block. Contribution is
-therefore a write into other users' prompt context, not just into a shared
-library, so it is gated to the same ``require_admin`` primitive that already
-guards ``set-default``, the slide-style library and the deck-prompt library.
-Reads stay open; rename/delete remain CREATOR-OR-ADMIN (see
-``_require_creator_or_admin``). The prompt-side hardening that complements this
-gate lives in ``design_system_compiler.DESIGN_SYSTEM_SCOPE_FIREWALL``. A design system compiles to ``compiled_style_content`` —
+marks the org default. A design system compiles to ``compiled_style_content`` —
 the drop-in equivalent of ``slide_style_library.style_content`` — so it flows
 through the existing generation seam (see ``agent_factory._get_prompt_content``).
 
@@ -537,7 +523,6 @@ def list_design_systems(
     "/import",
     response_model=DesignSystemImportResult,
     status_code=status.HTTP_201_CREATED,
-    dependencies=[Depends(require_admin)],
 )
 async def import_design_system(
     file: UploadFile = File(...),
@@ -598,12 +583,7 @@ async def import_design_system(
         )
 
 
-@router.post(
-    "",
-    response_model=DesignSystemDetail,
-    status_code=status.HTTP_201_CREATED,
-    dependencies=[Depends(require_admin)],
-)
+@router.post("", response_model=DesignSystemDetail, status_code=status.HTTP_201_CREATED)
 def create_design_system(
     request: DesignSystemCreate,
     db: Session = Depends(get_db),

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/src/api/routes/slides.py

@@ -436,12 +436,12 @@ async def update_slide_verification(index: int, request: UpdateVerificationReque
         content_hash = compute_slide_hash(slide_html)
 
         if request.verification is not None:
-            # Save verification by content hash
+            # Save verification by content hash (row-level merge)
             await asyncio.to_thread(
-                session_manager.save_verification,
+                session_manager.write_slide_verification,
                 request.session_id,
-                content_hash,
-                request.verification,
+                index,
+                {content_hash: request.verification},
             )
             
             logger.info(

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/src/api/routes/verification.py

@@ -195,10 +195,10 @@ async def verify_slide(slide_index: int, request: VerifySlideRequest):
 
             # Save this result by content hash (so it's remembered)
             await asyncio.to_thread(
-                session_manager.save_verification,
+                session_manager.write_slide_verification,
                 request.session_id,
-                content_hash,
-                unknown_result,
+                slide_index,
+                {content_hash: unknown_result},
             )
 
             return VerifySlideResponse(**unknown_result)
@@ -223,10 +223,10 @@ async def verify_slide(slide_index: int, request: VerifySlideRequest):
                 "error": False,
             }
             await asyncio.to_thread(
-                session_manager.save_verification,
+                session_manager.write_slide_verification,
                 request.session_id,
-                content_hash,
-                unknown_result,
+                slide_index,
+                {content_hash: unknown_result},
             )
             return VerifySlideResponse(**unknown_result)
 
@@ -261,10 +261,10 @@ async def verify_slide(slide_index: int, request: VerifySlideRequest):
 
         # Save verification by content hash (survives deck regeneration)
         await asyncio.to_thread(
-            session_manager.save_verification,
+            session_manager.write_slide_verification,
             request.session_id,
-            content_hash,
-            verification_result,
+            slide_index,
+            {content_hash: verification_result},
         )
 
         logger.info(

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev20}/src/api/routes/version.py

@@ -39,13 +39,9 @@ class VersionCheckResponse(BaseModel):
     package_name: str
 
 
-def get_installed_version() -> str:
+def _get_installed_version() -> str:
     """Get the installed version of databricks-tellr-app.
 
-    Shared with the ``/api/health`` handler in ``src.api.main``, which reports
-    the same value. Returns "unknown" when running from a source checkout
-    rather than an installed wheel.
-
     Returns:
         Version string or "unknown" if not installed
     """
@@ -133,7 +129,7 @@ async def check_version() -> VersionCheckResponse:
     - update_available: Whether an update is available
     - update_type: "patch" (redeploy) or "major" (run tellr.update())
     """
-    installed = get_installed_version()
+    installed = _get_installed_version()
     latest = _get_latest_version_from_pypi()
 
     update_available = False