databricks-tellr-app 0.4.3.dev19__tar.gz → 0.4.3.dev21__tar.gz

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev21}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev19
+Version: 0.4.3.dev21
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
@@ -10,10 +10,10 @@ Requires-Dist: python-multipart==0.0.20
 Requires-Dist: pydantic==2.12.4
 Requires-Dist: pydantic-settings==2.12.0
 Requires-Dist: databricks-langchain==0.9.0
-Requires-Dist: langchain==1.0.5
-Requires-Dist: langchain-core==1.0.4
-Requires-Dist: langchain-community==0.4.1
-Requires-Dist: langchain-text-splitters==1.0.0
+Requires-Dist: langchain==1.3.14
+Requires-Dist: langchain-core==1.5.3
+Requires-Dist: langchain-community==0.4.2
+Requires-Dist: langchain-text-splitters==1.1.2
 Requires-Dist: litellm==1.80.11
 Requires-Dist: mcp==1.27.0
 Requires-Dist: opentelemetry-api==1.38.0
@@ -47,9 +47,11 @@ Requires-Dist: databricks-ai-bridge==0.21.0
 Requires-Dist: databricks-ai-search==0.76
 Requires-Dist: databricks-connect==16.1.7
 Requires-Dist: databricks-vectorsearch==0.75
-Requires-Dist: langchain-classic==1.0.0
-Requires-Dist: langgraph==1.0.10
-Requires-Dist: langgraph-prebuilt==1.0.10
+Requires-Dist: langchain-classic==1.0.8
+Requires-Dist: langgraph==1.2.10
+Requires-Dist: langgraph-checkpoint==4.1.1
+Requires-Dist: langgraph-prebuilt==1.1.0
+Requires-Dist: langgraph-sdk==0.4.2
 Requires-Dist: langsmith==0.9.5
 Requires-Dist: unitycatalog-ai==0.3.2
 Requires-Dist: unitycatalog-langchain==0.3.0

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev21}/databricks_tellr_app/run.py

@@ -74,6 +74,29 @@ def init_database(seed_databricks_defaults: bool = False) -> None:
         logger.error(f"Failed to migrate profiles/sessions to agent_config: {e}\n{tb}")
         raise SystemExit(1) from e
 
+    # Row-per-slide (PR1): migrate historical deck_json blobs into session_slides
+    # rows. Runs HERE, pre-fork, for the same reason as the two migrations above —
+    # the uvicorn workers must never execute migration code. It originally lived in
+    # the FastAPI lifespan; main moved migrations out of the lifespan while this
+    # branch was in flight, so it was relocated on merge rather than dropped.
+    #
+    # Guarded by a per-deck NOT EXISTS anti-join over session_slides (index-only
+    # against its composite PK), so it is a no-op scan once every deck has rows.
+    # A deck whose blob will not parse is logged and skipped, never raised — one
+    # bad row must not abort startup.
+    logger.info("Backfilling session_slides rows...")
+    try:
+        from src.core.database import get_session_local
+        from src.core.backfill_session_slides_startup import backfill_unmigrated_decks
+
+        slide_decks = backfill_unmigrated_decks(get_session_local())
+        if slide_decks:
+            logger.info(f"Backfilled {slide_decks} deck(s) into session_slides rows")
+    except Exception as e:
+        tb = traceback.format_exc()
+        logger.error(f"Failed to backfill session_slides rows: {e}\n{tb}")
+        raise SystemExit(1) from e
+
     # Seed default content
     logger.info(f"Seeding defaults (include_databricks={seed_databricks_defaults})...")
     try:
@@ -97,6 +120,28 @@ def init_database(seed_databricks_defaults: bool = False) -> None:
         logger.error(f"Failed to ensure encryption key: {e}\n{tb}")
         raise SystemExit(1) from e
 
+    # Retired prompt overrides: strip 'system_prompt' and
+    # 'slide_editing_instructions' out of every stored agent_config blob. The
+    # physical columns are dropped inside init_db()'s migration chain, early,
+    # because a database that still has them cannot insert a profile; the BLOB
+    # strip runs LAST, deliberately — it is the one position no later step can
+    # undo by writing a fresh blob (seed_defaults above creates profiles).
+    # A blob that will not parse is logged and skipped, never raised, so one bad
+    # row cannot abort startup; anything else here is SystemExit(1) like the five
+    # steps above.
+    logger.info("Stripping retired prompt keys from agent_config blobs...")
+    try:
+        from src.core.database import get_session_local
+        from src.core.strip_retired_prompt_keys import strip_retired_prompt_keys
+
+        stripped = strip_retired_prompt_keys(get_session_local())
+        if stripped:
+            logger.info(f"Stripped retired prompt keys from {stripped} row(s)")
+    except Exception as e:
+        tb = traceback.format_exc()
+        logger.error(f"Failed to strip retired prompt keys from agent_config: {e}\n{tb}")
+        raise SystemExit(1) from e
+
 
 def main() -> None:
     """Start the uvicorn server."""

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev21}/databricks_tellr_app.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev19
+Version: 0.4.3.dev21
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
@@ -10,10 +10,10 @@ Requires-Dist: python-multipart==0.0.20
 Requires-Dist: pydantic==2.12.4
 Requires-Dist: pydantic-settings==2.12.0
 Requires-Dist: databricks-langchain==0.9.0
-Requires-Dist: langchain==1.0.5
-Requires-Dist: langchain-core==1.0.4
-Requires-Dist: langchain-community==0.4.1
-Requires-Dist: langchain-text-splitters==1.0.0
+Requires-Dist: langchain==1.3.14
+Requires-Dist: langchain-core==1.5.3
+Requires-Dist: langchain-community==0.4.2
+Requires-Dist: langchain-text-splitters==1.1.2
 Requires-Dist: litellm==1.80.11
 Requires-Dist: mcp==1.27.0
 Requires-Dist: opentelemetry-api==1.38.0
@@ -47,9 +47,11 @@ Requires-Dist: databricks-ai-bridge==0.21.0
 Requires-Dist: databricks-ai-search==0.76
 Requires-Dist: databricks-connect==16.1.7
 Requires-Dist: databricks-vectorsearch==0.75
-Requires-Dist: langchain-classic==1.0.0
-Requires-Dist: langgraph==1.0.10
-Requires-Dist: langgraph-prebuilt==1.0.10
+Requires-Dist: langchain-classic==1.0.8
+Requires-Dist: langgraph==1.2.10
+Requires-Dist: langgraph-checkpoint==4.1.1
+Requires-Dist: langgraph-prebuilt==1.1.0
+Requires-Dist: langgraph-sdk==0.4.2
 Requires-Dist: langsmith==0.9.5
 Requires-Dist: unitycatalog-ai==0.3.2
 Requires-Dist: unitycatalog-langchain==0.3.0

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev21}/databricks_tellr_app.egg-info/SOURCES.txt

@@ -51,16 +51,20 @@ setup.py
 ./src/api/schemas/settings/responses.py
 ./src/api/services/__init__.py
 ./src/api/services/chat_service.py
+./src/api/services/deck_level_writer.py
 ./src/api/services/export_job_queue.py
 ./src/api/services/feedback_service.py
 ./src/api/services/job_queue.py
 ./src/api/services/session_manager.py
 ./src/api/services/session_naming.py
+./src/api/services/slide_repository.py
 ./src/api/services/usage_events.py
 ./src/api/services/usage_service.py
 ./src/api/utils/__init__.py
 ./src/api/utils/validation.py
 ./src/core/__init__.py
+./src/core/backfill_session_slides_startup.py
+./src/core/checkpointer.py
 ./src/core/config_loader.py
 ./src/core/context_utils.py
 ./src/core/database.py
@@ -76,17 +80,28 @@ setup.py
 ./src/core/permission_context.py
 ./src/core/prompt_modules.py
 ./src/core/settings_db.py
+./src/core/strip_retired_prompt_keys.py
 ./src/core/user_context.py
+./src/core/skills/__init__.py
+./src/core/skills/architect.py
+./src/core/skills/build_reviewer.py
+./src/core/skills/builder.py
+./src/core/skills/data_analyst.py
+./src/core/skills/deck_reviewer.py
+./src/core/skills/fix_reviewer.py
+./src/core/skills/fixer.py
 ./src/database/__init__.py
 ./src/database/types.py
 ./src/database/models/__init__.py
 ./src/database/models/deck_contributor.py
+./src/database/models/deck_review.py
 ./src/database/models/design_system.py
 ./src/database/models/encryption_key.py
 ./src/database/models/feedback.py
 ./src/database/models/genie_space.py
 ./src/database/models/google_global_credentials.py
 ./src/database/models/google_oauth_token.py
+./src/database/models/graph_checkpoint.py
 ./src/database/models/identity.py
 ./src/database/models/image.py
 ./src/database/models/profile.py
@@ -99,17 +114,24 @@ setup.py
 ./src/database/models/usage_event.py
 ./src/database/models/user_preference.py
 ./src/domain/__init__.py
+./src/domain/deck_spec.py
+./src/domain/finding.py
+./src/domain/skill_io.py
 ./src/domain/slide.py
 ./src/domain/slide_deck.py
 ./src/services/__init__.py
 ./src/services/agent.py
 ./src/services/agent_factory.py
+./src/services/agent_resolution.py
 ./src/services/config_service.py
 ./src/services/config_validator.py
+./src/services/deck_css_aggregator.py
+./src/services/deck_review_store.py
 ./src/services/design_system_compiler.py
 ./src/services/design_system_service.py
 ./src/services/design_system_templates.py
 ./src/services/drive_uploader.py
+./src/services/foreman_service.py
 ./src/services/genie_service.py
 ./src/services/google_slides_auth.py
 ./src/services/google_slides_prompts_defaults.py
@@ -123,7 +145,9 @@ setup.py
 ./src/services/pptx_from_records.py
 ./src/services/pptx_prompts_defaults.py
 ./src/services/profile_service.py
+./src/services/spec_sync.py
 ./src/services/streaming_callback.py
+./src/services/template_sections.py
 ./src/services/validator.py
 ./src/services/converter_jail/__init__.py
 ./src/services/converter_jail/ast_guard.py
@@ -134,6 +158,12 @@ setup.py
 ./src/services/converter_jail/protocol.py
 ./src/services/evaluation/__init__.py
 ./src/services/evaluation/llm_judge.py
+./src/services/graph/__init__.py
+./src/services/graph/builder.py
+./src/services/graph/event_emitter.py
+./src/services/graph/nodes.py
+./src/services/graph/routers.py
+./src/services/graph/state.py
 ./src/services/identity_providers/__init__.py
 ./src/services/identity_providers/account_provider.py
 ./src/services/identity_providers/local_provider.py
@@ -149,6 +179,7 @@ setup.py
 ./src/utils/css_utils.py
 ./src/utils/ds_asset_utils.py
 ./src/utils/error_handling.py
+./src/utils/graph_safety.py
 ./src/utils/html_safety.py
 ./src/utils/html_utils.py
 ./src/utils/image_utils.py
@@ -213,16 +244,20 @@ src/api/schemas/settings/requests.py
 src/api/schemas/settings/responses.py
 src/api/services/__init__.py
 src/api/services/chat_service.py
+src/api/services/deck_level_writer.py
 src/api/services/export_job_queue.py
 src/api/services/feedback_service.py
 src/api/services/job_queue.py
 src/api/services/session_manager.py
 src/api/services/session_naming.py
+src/api/services/slide_repository.py
 src/api/services/usage_events.py
 src/api/services/usage_service.py
 src/api/utils/__init__.py
 src/api/utils/validation.py
 src/core/__init__.py
+src/core/backfill_session_slides_startup.py
+src/core/checkpointer.py
 src/core/config_loader.py
 src/core/context_utils.py
 src/core/database.py
@@ -238,17 +273,28 @@ src/core/otel_logging.py
 src/core/permission_context.py
 src/core/prompt_modules.py
 src/core/settings_db.py
+src/core/strip_retired_prompt_keys.py
 src/core/user_context.py
+src/core/skills/__init__.py
+src/core/skills/architect.py
+src/core/skills/build_reviewer.py
+src/core/skills/builder.py
+src/core/skills/data_analyst.py
+src/core/skills/deck_reviewer.py
+src/core/skills/fix_reviewer.py
+src/core/skills/fixer.py
 src/database/__init__.py
 src/database/types.py
 src/database/models/__init__.py
 src/database/models/deck_contributor.py
+src/database/models/deck_review.py
 src/database/models/design_system.py
 src/database/models/encryption_key.py
 src/database/models/feedback.py
 src/database/models/genie_space.py
 src/database/models/google_global_credentials.py
 src/database/models/google_oauth_token.py
+src/database/models/graph_checkpoint.py
 src/database/models/identity.py
 src/database/models/image.py
 src/database/models/profile.py
@@ -261,17 +307,24 @@ src/database/models/slide_style_library.py
 src/database/models/usage_event.py
 src/database/models/user_preference.py
 src/domain/__init__.py
+src/domain/deck_spec.py
+src/domain/finding.py
+src/domain/skill_io.py
 src/domain/slide.py
 src/domain/slide_deck.py
 src/services/__init__.py
 src/services/agent.py
 src/services/agent_factory.py
+src/services/agent_resolution.py
 src/services/config_service.py
 src/services/config_validator.py
+src/services/deck_css_aggregator.py
+src/services/deck_review_store.py
 src/services/design_system_compiler.py
 src/services/design_system_service.py
 src/services/design_system_templates.py
 src/services/drive_uploader.py
+src/services/foreman_service.py
 src/services/genie_service.py
 src/services/google_slides_auth.py
 src/services/google_slides_prompts_defaults.py
@@ -285,7 +338,9 @@ src/services/pptx_from_html_huashu.py
 src/services/pptx_from_records.py
 src/services/pptx_prompts_defaults.py
 src/services/profile_service.py
+src/services/spec_sync.py
 src/services/streaming_callback.py
+src/services/template_sections.py
 src/services/validator.py
 src/services/converter_jail/__init__.py
 src/services/converter_jail/ast_guard.py
@@ -296,6 +351,12 @@ src/services/converter_jail/pptx_runner.py
 src/services/converter_jail/protocol.py
 src/services/evaluation/__init__.py
 src/services/evaluation/llm_judge.py
+src/services/graph/__init__.py
+src/services/graph/builder.py
+src/services/graph/event_emitter.py
+src/services/graph/nodes.py
+src/services/graph/routers.py
+src/services/graph/state.py
 src/services/identity_providers/__init__.py
 src/services/identity_providers/account_provider.py
 src/services/identity_providers/local_provider.py
@@ -311,6 +372,7 @@ src/utils/__init__.py
 src/utils/css_utils.py
 src/utils/ds_asset_utils.py
 src/utils/error_handling.py
+src/utils/graph_safety.py
 src/utils/html_safety.py
 src/utils/html_utils.py
 src/utils/image_utils.py

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev21}/databricks_tellr_app.egg-info/requires.txt

@@ -4,10 +4,10 @@ python-multipart==0.0.20
 pydantic==2.12.4
 pydantic-settings==2.12.0
 databricks-langchain==0.9.0
-langchain==1.0.5
-langchain-core==1.0.4
-langchain-community==0.4.1
-langchain-text-splitters==1.0.0
+langchain==1.3.14
+langchain-core==1.5.3
+langchain-community==0.4.2
+langchain-text-splitters==1.1.2
 litellm==1.80.11
 mcp==1.27.0
 opentelemetry-api==1.38.0
@@ -41,9 +41,11 @@ databricks-ai-bridge==0.21.0
 databricks-ai-search==0.76
 databricks-connect==16.1.7
 databricks-vectorsearch==0.75
-langchain-classic==1.0.0
-langgraph==1.0.10
-langgraph-prebuilt==1.0.10
+langchain-classic==1.0.8
+langgraph==1.2.10
+langgraph-checkpoint==4.1.1
+langgraph-prebuilt==1.1.0
+langgraph-sdk==0.4.2
 langsmith==0.9.5
 unitycatalog-ai==0.3.2
 unitycatalog-langchain==0.3.0

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev21}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "databricks-tellr-app"
-version = "0.4.3.dev19"
+version = "0.4.3.dev21"
 description = "Tellr application package for Databricks Apps"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -15,10 +15,10 @@ dependencies = [
     "pydantic==2.12.4",
     "pydantic-settings==2.12.0",
     "databricks-langchain==0.9.0",
-    "langchain==1.0.5",
-    "langchain-core==1.0.4",
-    "langchain-community==0.4.1",
-    "langchain-text-splitters==1.0.0",
+    "langchain==1.3.14",
+    "langchain-core==1.5.3",
+    "langchain-community==0.4.2",
+    "langchain-text-splitters==1.1.2",
     "litellm==1.80.11",
     "mcp==1.27.0",
     "opentelemetry-api==1.38.0",
@@ -73,6 +73,13 @@ dependencies = [
     # `pip install databricks-tellr-app` is safe.
     # SDR-4437 MEDIUM-7 (July 2026): the 7 formerly-ranged direct deps above
     # this block are now exact-pinned too; same refresh discipline.
+    # PR2 LangGraph stack bump (August 2026): updated langchain 1.0.5→1.3.14,
+    # langchain-core 1.0.4→1.5.3, langchain-community 0.4.1→0.4.2,
+    # langchain-text-splitters 1.0.0→1.1.2, langchain-classic 1.0.0→1.0.8,
+    # langgraph 1.0.10→1.2.10, added langgraph-checkpoint==4.1.1,
+    # langgraph-prebuilt 1.0.10→1.1.0, added langgraph-sdk==0.4.2. These match
+    # the repo-root requirements.txt and pyproject.toml. MUST be re-verified via
+    # a devloop deploy on db-tellr-dev-pinfix or equivalent before PR3 ships.
     "databricks-sdk==0.120.0",
     "mlflow[databricks]==3.14.0",
     "mlflow-skinny==3.14.0",
@@ -81,9 +88,11 @@ dependencies = [
     "databricks-ai-search==0.76",
     "databricks-connect==16.1.7",
     "databricks-vectorsearch==0.75",
-    "langchain-classic==1.0.0",
-    "langgraph==1.0.10",
-    "langgraph-prebuilt==1.0.10",
+    "langchain-classic==1.0.8",
+    "langgraph==1.2.10",
+    "langgraph-checkpoint==4.1.1",
+    "langgraph-prebuilt==1.1.0",
+    "langgraph-sdk==0.4.2",
     "langsmith==0.9.5",
     "unitycatalog-ai==0.3.2",
     "unitycatalog-langchain==0.3.0",

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev21}/src/api/fixtures/tour_demo_deck.json

@@ -24,5 +24,56 @@
     }
   ],
   "chat_prompt": "Create 3 slides about the benefits of AI in modern healthcare, with a title slide, key advantages, and future outlook.",
-  "chat_reply": "Here's your deck with 3 slides! I've created:\n\n1. **Title Slide** — introducing AI in healthcare\n2. **Key Advantages** — early detection, personalized treatment, operational efficiency, and drug discovery\n3. **Future Outlook** — predictive monitoring, AI-assisted surgery, and global health equity\n\nFeel free to ask me to refine any slide, add new ones, or change the style."
+  "chat_reply": "Here's your deck with 3 slides! I've created:\n\n1. **Title Slide** — introducing AI in healthcare\n2. **Key Advantages** — early detection, personalized treatment, operational efficiency, and drug discovery\n3. **Future Outlook** — predictive monitoring, AI-assisted surgery, and global health equity\n\nFeel free to ask me to refine any slide, add new ones, or change the style.",
+  "deck_spec": {
+    "title": "Example Deck — AI in Healthcare",
+    "audience": "A first-time Tellr user taking the product tour: a general business audience, with no clinical or machine-learning background assumed.",
+    "purpose": "Show a new user what a finished Tellr deck looks like, on a subject that needs no domain briefing, so they can see structure and styling before they write their own prompt.",
+    "argument": "AI already delivers concrete benefits across diagnosis, treatment and research, and its near-term trajectory points at prevention and wider access, so it is worth engaging with now rather than watching.",
+    "call_to_action": "Ask the assistant to refine a slide, add a new one, or change the style: the next step of the tour.",
+    "narrative_arc": [
+      "Frame the subject: AI is already changing patient care, diagnostics and medical research, a transformation under way rather than a forecast.",
+      "Ground that claim in four advantages visible today: earlier disease detection, personalized treatment, operational efficiency, and faster drug discovery.",
+      "Extend today's gains into the near future and land on access: predictive monitoring, AI-assisted surgery, and specialist-level care reaching underserved communities."
+    ],
+    "design_contract": {
+      "design_system_id": null,
+      "template_id": null,
+      "slide_style_id": null
+    },
+    "resolved_data": {
+      "synthesis": "No live data was resolved for this deck. The tour ships fixed illustrative bytes so every user sees the same three slides; the claims are widely reported general benefits of AI in healthcare, not figures drawn from a source system.",
+      "figures": [],
+      "gaps": [
+        "No quantitative source: the deck cites no measured figure, so no claim in it is traceable to a dataset.",
+        "No organisation context: the tour deck is deliberately generic and names no customer, hospital or vendor."
+      ]
+    },
+    "slides": [
+      {
+        "position": 0,
+        "purpose": "Open the deck: name the subject and frame AI in healthcare as a transformation already under way.",
+        "content_brief": "Title slide. Badge reading 'AI & Healthcare', headline 'The Benefits of AI in Modern Healthcare', and a one-line standfirst naming the three areas the deck covers: patient care, diagnostics, and medical research.",
+        "assumes": "Nothing. This is the deck's first slide.",
+        "hands_off": "The reader knows the subject and expects concrete advantages next.",
+        "data_references": []
+      },
+      {
+        "position": 1,
+        "purpose": "Make the case with four concrete present-day advantages, so the benefit claim is specific rather than atmospheric.",
+        "content_brief": "Four bolded items, one explanatory clause each: early disease detection (imaging patterns a human reader can miss), personalized treatment plans (genetics, lifestyle, history), operational efficiency (scheduling, documentation, triage), and drug discovery acceleration (molecular simulation at scale).",
+        "assumes": "The reader has accepted the framing from the title slide.",
+        "hands_off": "The present-tense case is made; the reader is ready to look forward.",
+        "data_references": []
+      },
+      {
+        "position": 2,
+        "purpose": "Extend the argument from today's gains to the near future and close on access, so the deck ends on consequence rather than a list.",
+        "content_brief": "Three bolded forward-looking items: predictive health monitoring (wearables shifting medicine from reactive to proactive), AI-assisted surgery (robotics guided by real-time analysis), and global health equity (mobile diagnostics for underserved communities). Close on the italic line about healthcare becoming intelligent, personalized and accessible to all.",
+        "assumes": "The reader accepts the four present-day advantages from the previous slide.",
+        "hands_off": "The deck ends; the reader leaves with the equity claim as the takeaway.",
+        "data_references": []
+      }
+    ]
+  }
 }

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev21}/src/api/main.py

@@ -51,13 +51,14 @@ _worker_task = None
 _export_worker_task = None
 _cleanup_task = None
 _timeout_task = None
+_spec_sweeper_task = None
 _frontend_assets_stack: ExitStack | None = None
 
 
 @asynccontextmanager
 async def lifespan(app: FastAPI):
     """Lifespan context manager for startup/shutdown events."""
-    global _worker_task, _export_worker_task, _cleanup_task, _timeout_task, _frontend_assets_stack
+    global _worker_task, _export_worker_task, _cleanup_task, _timeout_task, _spec_sweeper_task, _frontend_assets_stack
 
     # Startup
     logger.info(f"Starting AI Slide Generator API (environment: {ENVIRONMENT})")
@@ -134,6 +135,16 @@ async def lifespan(app: FastAPI):
         _cleanup_task = asyncio.create_task(request_log_cleanup_loop())
         logger.info("Request log cleanup task started")
 
+        # Start the spec-dirty arc-review sweeper. A PERIODIC LOOP, so it belongs
+        # here beside the two above and NOT in run.py::init_database: the
+        # pre-fork rule there is for migrations and backfills, which must run
+        # exactly once, and a loop started in that step would die with it. It
+        # runs in every uvicorn worker (UVICORN_WORKERS defaults to 4), which is
+        # why claim_due_marker takes an atomic lease rather than trusting a read.
+        from src.services.spec_sync import spec_review_sweeper_loop
+        _spec_sweeper_task = asyncio.create_task(spec_review_sweeper_loop())
+        logger.info("Spec-review arc sweeper started")
+
         # Recover any stuck requests from previous crashes
         try:
             recovered = await recover_stuck_requests()
@@ -185,6 +196,14 @@ async def lifespan(app: FastAPI):
             pass
         logger.info("MCP job timeout sweeper stopped")
 
+    if _spec_sweeper_task:
+        _spec_sweeper_task.cancel()
+        try:
+            await _spec_sweeper_task
+        except asyncio.CancelledError:
+            pass
+        logger.info("Spec-review arc sweeper stopped")
+
     # Tear down the FastMCP session manager's task group. Safe to call
     # unconditionally — the stack was entered unconditionally at startup.
     await mcp_lifespan_stack.aclose()
@@ -489,23 +508,11 @@ logger.info("MCP server mounted at /mcp")
 
 @app.get("/api/health")
 async def health():
-    """Health check endpoint.
-
-    ``encryption_key_source`` is load-bearing for deployment: ``tellr.update``
-    polls it to confirm a relocated app is reading the secret before it deletes
-    the Lakebase key row. Reports the source only — never the key.
-
-    ``version`` comes from the installed wheel's metadata, so it tracks the
-    deployed release; it reads "unknown" from a source checkout.
-    """
-    from src.api.routes.version import get_installed_version
-    from src.core.encryption import key_source
-
+    """Health check endpoint."""
     return {
         "status": "healthy",
         "environment": ENVIRONMENT,
-        "version": get_installed_version(),
-        "encryption_key_source": key_source(),
+        "version": "0.3.0",
     }
 
 

{databricks_tellr_app-0.4.3.dev19 → databricks_tellr_app-0.4.3.dev21}/src/api/mcp_auth.py

@@ -16,22 +16,19 @@ Accepts three identity sources, evaluated in priority order:
    identity headers. The receiving app (tellr) trusts those headers
    because the same proxy sets them, strips any caller-supplied versions,
    and cannot be bypassed by external traffic. This path has no user
-   token, so the user-client ContextVar is left **unset**: agent tools
-   that resolve their client via ``get_user_client()`` fail closed rather
-   than silently running as tellr's service principal (SDR-4437 / F-CR-3).
-   Code that legitimately needs SP credentials on this path must call
-   ``get_system_client()`` explicitly. Attribution (``created_by`` on
-   decks, etc.) remains the real user via ``user_name``.
+   token, so downstream Databricks API calls use tellr's own service
+   principal credentials; attribution (``created_by`` on decks, etc.)
+   remains the real user via ``user_name``.
 
 The priority-3 path is gated on ``TELLR_TRUST_FORWARDED_IDENTITY=true``
 so the behaviour is explicit at deploy time. Production Databricks Apps
 deployments enable it; local dev does not.
 
 The resolved identity is bound into the same request-scoped ContextVars
-the browser flow uses (``set_current_user``, ``set_permission_context``,
-and — only when a user token is present — ``set_user_client``), so
-downstream services (session manager, permission service, MLflow, Google
-OAuth) see the caller's identity without any MCP-specific plumbing.
+the browser flow uses (``set_current_user``, ``set_user_client``,
+``set_permission_context``), so downstream services (session manager,
+permission service, MLflow, Google OAuth) see the caller's identity
+without any MCP-specific plumbing.
 """
 
 from __future__ import annotations
@@ -46,6 +43,7 @@ from fastapi import Request
 
 from src.core.databricks_client import (
     get_or_create_user_client,
+    get_system_client,
     set_user_client,
 )
 from src.core.permission_context import (
@@ -152,24 +150,28 @@ def extract_mcp_identity(request: Request) -> MCPIdentity:
 def mcp_auth_scope(request: Request) -> Iterator[MCPIdentity]:
     """Authenticate an MCP request and bind identity ContextVars for the block.
 
-    On entry: resolves identity and binds ``current_user`` and
-    ``permission_context``. The ``user_client`` ContextVar is bound only when
-    a real user token is present (priority 1/2); on the token-less priority-3
-    app-to-app path it is deliberately left unset.
+    On entry: resolves identity, binds ``current_user``, ``user_client``,
+    and ``permission_context``.
 
     On exit: clears all three ContextVars, even if the wrapped block raised.
 
-    Leaving ``user_client`` unset on priority 3 makes it true by construction
-    that agent tools (which resolve their client via ``get_user_client()``)
-    can never execute as tellr's service principal on the app-to-app path —
-    they fail closed with ``UserClientRequiredError`` in production
-    (SDR-4437 / F-CR-3). Code that legitimately needs SP credentials must call
-    ``get_system_client()`` explicitly. Attribution (``created_by``) is
-    unaffected: it uses ``user_name`` from the forwarded identity headers,
-    which the proxy attests.
+    When the identity was resolved via priority 3 (no user token), the
+    bound ``user_client`` is tellr's service-principal client — downstream
+    services still function, but any SDK calls are made with SP credentials
+    rather than the user's own. Attribution (``created_by``) is unaffected:
+    it uses ``user_name`` from the forwarded identity headers, which the
+    proxy attests.
     """
     identity = extract_mcp_identity(request)
 
+    if identity.token is not None:
+        user_client = get_or_create_user_client(identity.token)
+    else:
+        # Priority-3 path: no user token, so downstream Databricks API
+        # calls use tellr's service principal. Safe because the app-to-app
+        # model explicitly delegates credentialing to the receiving app.
+        user_client = get_system_client()
+
     permission_ctx = build_permission_context(
         user_id=identity.user_id,
         user_name=identity.user_name,
@@ -177,22 +179,9 @@ def mcp_auth_scope(request: Request) -> Iterator[MCPIdentity]:
     )
 
     set_current_user(identity.user_name)
+    set_user_client(user_client)
     set_permission_context(permission_ctx)
 
-    if identity.token is not None:
-        # Priority 1/2: a real user token is present. Bind the OBO client so
-        # downstream services (agent tools included) act as the user.
-        set_user_client(get_or_create_user_client(identity.token))
-    else:
-        # Priority-3 (app-to-app) path: no user token is available. Do NOT
-        # bind any client into the user-client ContextVar. Leaving it unset
-        # makes it true by construction that agent tools — which resolve their
-        # client via get_user_client() — can never run as the app service
-        # principal on this path: they fail closed with UserClientRequiredError
-        # in production (SDR-4437 / F-CR-3). Anything that legitimately needs
-        # the SP here must call get_system_client() explicitly.
-        set_user_client(None)
-
     logger.debug(
         "MCP auth scope entered",
         extra={