databricks-tellr-app 0.4.3.dev25__tar.gz → 0.4.3.dev27__tar.gz

{databricks_tellr_app-0.4.3.dev25 → databricks_tellr_app-0.4.3.dev27}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev25
+Version: 0.4.3.dev27
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
@@ -10,10 +10,10 @@ Requires-Dist: python-multipart==0.0.20
 Requires-Dist: pydantic==2.12.4
 Requires-Dist: pydantic-settings==2.12.0
 Requires-Dist: databricks-langchain==0.9.0
-Requires-Dist: langchain==1.3.14
-Requires-Dist: langchain-core==1.5.3
-Requires-Dist: langchain-community==0.4.2
-Requires-Dist: langchain-text-splitters==1.1.2
+Requires-Dist: langchain==1.0.5
+Requires-Dist: langchain-core==1.0.4
+Requires-Dist: langchain-community==0.4.1
+Requires-Dist: langchain-text-splitters==1.0.0
 Requires-Dist: litellm==1.80.11
 Requires-Dist: mcp==1.27.0
 Requires-Dist: opentelemetry-api==1.38.0
@@ -47,11 +47,9 @@ Requires-Dist: databricks-ai-bridge==0.21.0
 Requires-Dist: databricks-ai-search==0.76
 Requires-Dist: databricks-connect==16.1.7
 Requires-Dist: databricks-vectorsearch==0.75
-Requires-Dist: langchain-classic==1.0.8
-Requires-Dist: langgraph==1.2.10
-Requires-Dist: langgraph-checkpoint==4.1.1
-Requires-Dist: langgraph-prebuilt==1.1.0
-Requires-Dist: langgraph-sdk==0.4.2
+Requires-Dist: langchain-classic==1.0.0
+Requires-Dist: langgraph==1.0.10
+Requires-Dist: langgraph-prebuilt==1.0.10
 Requires-Dist: langsmith==0.9.5
 Requires-Dist: unitycatalog-ai==0.3.2
 Requires-Dist: unitycatalog-langchain==0.3.0

{databricks_tellr_app-0.4.3.dev25 → databricks_tellr_app-0.4.3.dev27}/databricks_tellr_app/run.py

@@ -74,29 +74,6 @@ def init_database(seed_databricks_defaults: bool = False) -> None:
         logger.error(f"Failed to migrate profiles/sessions to agent_config: {e}\n{tb}")
         raise SystemExit(1) from e
 
-    # Row-per-slide (PR1): migrate historical deck_json blobs into session_slides
-    # rows. Runs HERE, pre-fork, for the same reason as the two migrations above —
-    # the uvicorn workers must never execute migration code. It originally lived in
-    # the FastAPI lifespan; main moved migrations out of the lifespan while this
-    # branch was in flight, so it was relocated on merge rather than dropped.
-    #
-    # Guarded by a per-deck NOT EXISTS anti-join over session_slides (index-only
-    # against its composite PK), so it is a no-op scan once every deck has rows.
-    # A deck whose blob will not parse is logged and skipped, never raised — one
-    # bad row must not abort startup.
-    logger.info("Backfilling session_slides rows...")
-    try:
-        from src.core.database import get_session_local
-        from src.core.backfill_session_slides_startup import backfill_unmigrated_decks
-
-        slide_decks = backfill_unmigrated_decks(get_session_local())
-        if slide_decks:
-            logger.info(f"Backfilled {slide_decks} deck(s) into session_slides rows")
-    except Exception as e:
-        tb = traceback.format_exc()
-        logger.error(f"Failed to backfill session_slides rows: {e}\n{tb}")
-        raise SystemExit(1) from e
-
     # Seed default content
     logger.info(f"Seeding defaults (include_databricks={seed_databricks_defaults})...")
     try:
@@ -120,28 +97,6 @@ def init_database(seed_databricks_defaults: bool = False) -> None:
         logger.error(f"Failed to ensure encryption key: {e}\n{tb}")
         raise SystemExit(1) from e
 
-    # Retired prompt overrides: strip 'system_prompt' and
-    # 'slide_editing_instructions' out of every stored agent_config blob. The
-    # physical columns are dropped inside init_db()'s migration chain, early,
-    # because a database that still has them cannot insert a profile; the BLOB
-    # strip runs LAST, deliberately — it is the one position no later step can
-    # undo by writing a fresh blob (seed_defaults above creates profiles).
-    # A blob that will not parse is logged and skipped, never raised, so one bad
-    # row cannot abort startup; anything else here is SystemExit(1) like the five
-    # steps above.
-    logger.info("Stripping retired prompt keys from agent_config blobs...")
-    try:
-        from src.core.database import get_session_local
-        from src.core.strip_retired_prompt_keys import strip_retired_prompt_keys
-
-        stripped = strip_retired_prompt_keys(get_session_local())
-        if stripped:
-            logger.info(f"Stripped retired prompt keys from {stripped} row(s)")
-    except Exception as e:
-        tb = traceback.format_exc()
-        logger.error(f"Failed to strip retired prompt keys from agent_config: {e}\n{tb}")
-        raise SystemExit(1) from e
-
 
 def main() -> None:
     """Start the uvicorn server."""

{databricks_tellr_app-0.4.3.dev25 → databricks_tellr_app-0.4.3.dev27}/databricks_tellr_app.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev25
+Version: 0.4.3.dev27
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
@@ -10,10 +10,10 @@ Requires-Dist: python-multipart==0.0.20
 Requires-Dist: pydantic==2.12.4
 Requires-Dist: pydantic-settings==2.12.0
 Requires-Dist: databricks-langchain==0.9.0
-Requires-Dist: langchain==1.3.14
-Requires-Dist: langchain-core==1.5.3
-Requires-Dist: langchain-community==0.4.2
-Requires-Dist: langchain-text-splitters==1.1.2
+Requires-Dist: langchain==1.0.5
+Requires-Dist: langchain-core==1.0.4
+Requires-Dist: langchain-community==0.4.1
+Requires-Dist: langchain-text-splitters==1.0.0
 Requires-Dist: litellm==1.80.11
 Requires-Dist: mcp==1.27.0
 Requires-Dist: opentelemetry-api==1.38.0
@@ -47,11 +47,9 @@ Requires-Dist: databricks-ai-bridge==0.21.0
 Requires-Dist: databricks-ai-search==0.76
 Requires-Dist: databricks-connect==16.1.7
 Requires-Dist: databricks-vectorsearch==0.75
-Requires-Dist: langchain-classic==1.0.8
-Requires-Dist: langgraph==1.2.10
-Requires-Dist: langgraph-checkpoint==4.1.1
-Requires-Dist: langgraph-prebuilt==1.1.0
-Requires-Dist: langgraph-sdk==0.4.2
+Requires-Dist: langchain-classic==1.0.0
+Requires-Dist: langgraph==1.0.10
+Requires-Dist: langgraph-prebuilt==1.0.10
 Requires-Dist: langsmith==0.9.5
 Requires-Dist: unitycatalog-ai==0.3.2
 Requires-Dist: unitycatalog-langchain==0.3.0

{databricks_tellr_app-0.4.3.dev25 → databricks_tellr_app-0.4.3.dev27}/databricks_tellr_app.egg-info/SOURCES.txt

@@ -51,20 +51,16 @@ setup.py
 ./src/api/schemas/settings/responses.py
 ./src/api/services/__init__.py
 ./src/api/services/chat_service.py
-./src/api/services/deck_level_writer.py
 ./src/api/services/export_job_queue.py
 ./src/api/services/feedback_service.py
 ./src/api/services/job_queue.py
 ./src/api/services/session_manager.py
 ./src/api/services/session_naming.py
-./src/api/services/slide_repository.py
 ./src/api/services/usage_events.py
 ./src/api/services/usage_service.py
 ./src/api/utils/__init__.py
 ./src/api/utils/validation.py
 ./src/core/__init__.py
-./src/core/backfill_session_slides_startup.py
-./src/core/checkpointer.py
 ./src/core/config_loader.py
 ./src/core/context_utils.py
 ./src/core/database.py
@@ -80,28 +76,17 @@ setup.py
 ./src/core/permission_context.py
 ./src/core/prompt_modules.py
 ./src/core/settings_db.py
-./src/core/strip_retired_prompt_keys.py
 ./src/core/user_context.py
-./src/core/skills/__init__.py
-./src/core/skills/architect.py
-./src/core/skills/build_reviewer.py
-./src/core/skills/builder.py
-./src/core/skills/data_analyst.py
-./src/core/skills/deck_reviewer.py
-./src/core/skills/fix_reviewer.py
-./src/core/skills/fixer.py
 ./src/database/__init__.py
 ./src/database/types.py
 ./src/database/models/__init__.py
 ./src/database/models/deck_contributor.py
-./src/database/models/deck_review.py
 ./src/database/models/design_system.py
 ./src/database/models/encryption_key.py
 ./src/database/models/feedback.py
 ./src/database/models/genie_space.py
 ./src/database/models/google_global_credentials.py
 ./src/database/models/google_oauth_token.py
-./src/database/models/graph_checkpoint.py
 ./src/database/models/identity.py
 ./src/database/models/image.py
 ./src/database/models/profile.py
@@ -114,24 +99,17 @@ setup.py
 ./src/database/models/usage_event.py
 ./src/database/models/user_preference.py
 ./src/domain/__init__.py
-./src/domain/deck_spec.py
-./src/domain/finding.py
-./src/domain/skill_io.py
 ./src/domain/slide.py
 ./src/domain/slide_deck.py
 ./src/services/__init__.py
 ./src/services/agent.py
 ./src/services/agent_factory.py
-./src/services/agent_resolution.py
 ./src/services/config_service.py
 ./src/services/config_validator.py
-./src/services/deck_css_aggregator.py
-./src/services/deck_review_store.py
 ./src/services/design_system_compiler.py
 ./src/services/design_system_service.py
 ./src/services/design_system_templates.py
 ./src/services/drive_uploader.py
-./src/services/foreman_service.py
 ./src/services/genie_service.py
 ./src/services/google_slides_auth.py
 ./src/services/google_slides_prompts_defaults.py
@@ -145,9 +123,7 @@ setup.py
 ./src/services/pptx_from_records.py
 ./src/services/pptx_prompts_defaults.py
 ./src/services/profile_service.py
-./src/services/spec_sync.py
 ./src/services/streaming_callback.py
-./src/services/template_sections.py
 ./src/services/validator.py
 ./src/services/converter_jail/__init__.py
 ./src/services/converter_jail/ast_guard.py
@@ -158,12 +134,6 @@ setup.py
 ./src/services/converter_jail/protocol.py
 ./src/services/evaluation/__init__.py
 ./src/services/evaluation/llm_judge.py
-./src/services/graph/__init__.py
-./src/services/graph/builder.py
-./src/services/graph/event_emitter.py
-./src/services/graph/nodes.py
-./src/services/graph/routers.py
-./src/services/graph/state.py
 ./src/services/identity_providers/__init__.py
 ./src/services/identity_providers/account_provider.py
 ./src/services/identity_providers/local_provider.py
@@ -179,7 +149,6 @@ setup.py
 ./src/utils/css_utils.py
 ./src/utils/ds_asset_utils.py
 ./src/utils/error_handling.py
-./src/utils/graph_safety.py
 ./src/utils/html_safety.py
 ./src/utils/html_utils.py
 ./src/utils/image_utils.py
@@ -244,20 +213,16 @@ src/api/schemas/settings/requests.py
 src/api/schemas/settings/responses.py
 src/api/services/__init__.py
 src/api/services/chat_service.py
-src/api/services/deck_level_writer.py
 src/api/services/export_job_queue.py
 src/api/services/feedback_service.py
 src/api/services/job_queue.py
 src/api/services/session_manager.py
 src/api/services/session_naming.py
-src/api/services/slide_repository.py
 src/api/services/usage_events.py
 src/api/services/usage_service.py
 src/api/utils/__init__.py
 src/api/utils/validation.py
 src/core/__init__.py
-src/core/backfill_session_slides_startup.py
-src/core/checkpointer.py
 src/core/config_loader.py
 src/core/context_utils.py
 src/core/database.py
@@ -273,28 +238,17 @@ src/core/otel_logging.py
 src/core/permission_context.py
 src/core/prompt_modules.py
 src/core/settings_db.py
-src/core/strip_retired_prompt_keys.py
 src/core/user_context.py
-src/core/skills/__init__.py
-src/core/skills/architect.py
-src/core/skills/build_reviewer.py
-src/core/skills/builder.py
-src/core/skills/data_analyst.py
-src/core/skills/deck_reviewer.py
-src/core/skills/fix_reviewer.py
-src/core/skills/fixer.py
 src/database/__init__.py
 src/database/types.py
 src/database/models/__init__.py
 src/database/models/deck_contributor.py
-src/database/models/deck_review.py
 src/database/models/design_system.py
 src/database/models/encryption_key.py
 src/database/models/feedback.py
 src/database/models/genie_space.py
 src/database/models/google_global_credentials.py
 src/database/models/google_oauth_token.py
-src/database/models/graph_checkpoint.py
 src/database/models/identity.py
 src/database/models/image.py
 src/database/models/profile.py
@@ -307,24 +261,17 @@ src/database/models/slide_style_library.py
 src/database/models/usage_event.py
 src/database/models/user_preference.py
 src/domain/__init__.py
-src/domain/deck_spec.py
-src/domain/finding.py
-src/domain/skill_io.py
 src/domain/slide.py
 src/domain/slide_deck.py
 src/services/__init__.py
 src/services/agent.py
 src/services/agent_factory.py
-src/services/agent_resolution.py
 src/services/config_service.py
 src/services/config_validator.py
-src/services/deck_css_aggregator.py
-src/services/deck_review_store.py
 src/services/design_system_compiler.py
 src/services/design_system_service.py
 src/services/design_system_templates.py
 src/services/drive_uploader.py
-src/services/foreman_service.py
 src/services/genie_service.py
 src/services/google_slides_auth.py
 src/services/google_slides_prompts_defaults.py
@@ -338,9 +285,7 @@ src/services/pptx_from_html_huashu.py
 src/services/pptx_from_records.py
 src/services/pptx_prompts_defaults.py
 src/services/profile_service.py
-src/services/spec_sync.py
 src/services/streaming_callback.py
-src/services/template_sections.py
 src/services/validator.py
 src/services/converter_jail/__init__.py
 src/services/converter_jail/ast_guard.py
@@ -351,12 +296,6 @@ src/services/converter_jail/pptx_runner.py
 src/services/converter_jail/protocol.py
 src/services/evaluation/__init__.py
 src/services/evaluation/llm_judge.py
-src/services/graph/__init__.py
-src/services/graph/builder.py
-src/services/graph/event_emitter.py
-src/services/graph/nodes.py
-src/services/graph/routers.py
-src/services/graph/state.py
 src/services/identity_providers/__init__.py
 src/services/identity_providers/account_provider.py
 src/services/identity_providers/local_provider.py
@@ -372,7 +311,6 @@ src/utils/__init__.py
 src/utils/css_utils.py
 src/utils/ds_asset_utils.py
 src/utils/error_handling.py
-src/utils/graph_safety.py
 src/utils/html_safety.py
 src/utils/html_utils.py
 src/utils/image_utils.py

{databricks_tellr_app-0.4.3.dev25 → databricks_tellr_app-0.4.3.dev27}/databricks_tellr_app.egg-info/requires.txt

@@ -4,10 +4,10 @@ python-multipart==0.0.20
 pydantic==2.12.4
 pydantic-settings==2.12.0
 databricks-langchain==0.9.0
-langchain==1.3.14
-langchain-core==1.5.3
-langchain-community==0.4.2
-langchain-text-splitters==1.1.2
+langchain==1.0.5
+langchain-core==1.0.4
+langchain-community==0.4.1
+langchain-text-splitters==1.0.0
 litellm==1.80.11
 mcp==1.27.0
 opentelemetry-api==1.38.0
@@ -41,11 +41,9 @@ databricks-ai-bridge==0.21.0
 databricks-ai-search==0.76
 databricks-connect==16.1.7
 databricks-vectorsearch==0.75
-langchain-classic==1.0.8
-langgraph==1.2.10
-langgraph-checkpoint==4.1.1
-langgraph-prebuilt==1.1.0
-langgraph-sdk==0.4.2
+langchain-classic==1.0.0
+langgraph==1.0.10
+langgraph-prebuilt==1.0.10
 langsmith==0.9.5
 unitycatalog-ai==0.3.2
 unitycatalog-langchain==0.3.0

{databricks_tellr_app-0.4.3.dev25 → databricks_tellr_app-0.4.3.dev27}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "databricks-tellr-app"
-version = "0.4.3.dev25"
+version = "0.4.3.dev27"
 description = "Tellr application package for Databricks Apps"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -15,10 +15,10 @@ dependencies = [
     "pydantic==2.12.4",
     "pydantic-settings==2.12.0",
     "databricks-langchain==0.9.0",
-    "langchain==1.3.14",
-    "langchain-core==1.5.3",
-    "langchain-community==0.4.2",
-    "langchain-text-splitters==1.1.2",
+    "langchain==1.0.5",
+    "langchain-core==1.0.4",
+    "langchain-community==0.4.1",
+    "langchain-text-splitters==1.0.0",
     "litellm==1.80.11",
     "mcp==1.27.0",
     "opentelemetry-api==1.38.0",
@@ -73,13 +73,6 @@ dependencies = [
     # `pip install databricks-tellr-app` is safe.
     # SDR-4437 MEDIUM-7 (July 2026): the 7 formerly-ranged direct deps above
     # this block are now exact-pinned too; same refresh discipline.
-    # PR2 LangGraph stack bump (August 2026): updated langchain 1.0.5→1.3.14,
-    # langchain-core 1.0.4→1.5.3, langchain-community 0.4.1→0.4.2,
-    # langchain-text-splitters 1.0.0→1.1.2, langchain-classic 1.0.0→1.0.8,
-    # langgraph 1.0.10→1.2.10, added langgraph-checkpoint==4.1.1,
-    # langgraph-prebuilt 1.0.10→1.1.0, added langgraph-sdk==0.4.2. These match
-    # the repo-root requirements.txt and pyproject.toml. MUST be re-verified via
-    # a devloop deploy on db-tellr-dev-pinfix or equivalent before PR3 ships.
     "databricks-sdk==0.120.0",
     "mlflow[databricks]==3.14.0",
     "mlflow-skinny==3.14.0",
@@ -88,11 +81,9 @@ dependencies = [
     "databricks-ai-search==0.76",
     "databricks-connect==16.1.7",
     "databricks-vectorsearch==0.75",
-    "langchain-classic==1.0.8",
-    "langgraph==1.2.10",
-    "langgraph-checkpoint==4.1.1",
-    "langgraph-prebuilt==1.1.0",
-    "langgraph-sdk==0.4.2",
+    "langchain-classic==1.0.0",
+    "langgraph==1.0.10",
+    "langgraph-prebuilt==1.0.10",
     "langsmith==0.9.5",
     "unitycatalog-ai==0.3.2",
     "unitycatalog-langchain==0.3.0",

{databricks_tellr_app-0.4.3.dev25 → databricks_tellr_app-0.4.3.dev27}/src/api/fixtures/tour_demo_deck.json

@@ -24,56 +24,5 @@
     }
   ],
   "chat_prompt": "Create 3 slides about the benefits of AI in modern healthcare, with a title slide, key advantages, and future outlook.",
-  "chat_reply": "Here's your deck with 3 slides! I've created:\n\n1. **Title Slide** — introducing AI in healthcare\n2. **Key Advantages** — early detection, personalized treatment, operational efficiency, and drug discovery\n3. **Future Outlook** — predictive monitoring, AI-assisted surgery, and global health equity\n\nFeel free to ask me to refine any slide, add new ones, or change the style.",
-  "deck_spec": {
-    "title": "Example Deck — AI in Healthcare",
-    "audience": "A first-time Tellr user taking the product tour: a general business audience, with no clinical or machine-learning background assumed.",
-    "purpose": "Show a new user what a finished Tellr deck looks like, on a subject that needs no domain briefing, so they can see structure and styling before they write their own prompt.",
-    "argument": "AI already delivers concrete benefits across diagnosis, treatment and research, and its near-term trajectory points at prevention and wider access, so it is worth engaging with now rather than watching.",
-    "call_to_action": "Ask the assistant to refine a slide, add a new one, or change the style: the next step of the tour.",
-    "narrative_arc": [
-      "Frame the subject: AI is already changing patient care, diagnostics and medical research, a transformation under way rather than a forecast.",
-      "Ground that claim in four advantages visible today: earlier disease detection, personalized treatment, operational efficiency, and faster drug discovery.",
-      "Extend today's gains into the near future and land on access: predictive monitoring, AI-assisted surgery, and specialist-level care reaching underserved communities."
-    ],
-    "design_contract": {
-      "design_system_id": null,
-      "template_id": null,
-      "slide_style_id": null
-    },
-    "resolved_data": {
-      "synthesis": "No live data was resolved for this deck. The tour ships fixed illustrative bytes so every user sees the same three slides; the claims are widely reported general benefits of AI in healthcare, not figures drawn from a source system.",
-      "figures": [],
-      "gaps": [
-        "No quantitative source: the deck cites no measured figure, so no claim in it is traceable to a dataset.",
-        "No organisation context: the tour deck is deliberately generic and names no customer, hospital or vendor."
-      ]
-    },
-    "slides": [
-      {
-        "position": 0,
-        "purpose": "Open the deck: name the subject and frame AI in healthcare as a transformation already under way.",
-        "content_brief": "Title slide. Badge reading 'AI & Healthcare', headline 'The Benefits of AI in Modern Healthcare', and a one-line standfirst naming the three areas the deck covers: patient care, diagnostics, and medical research.",
-        "assumes": "Nothing. This is the deck's first slide.",
-        "hands_off": "The reader knows the subject and expects concrete advantages next.",
-        "data_references": []
-      },
-      {
-        "position": 1,
-        "purpose": "Make the case with four concrete present-day advantages, so the benefit claim is specific rather than atmospheric.",
-        "content_brief": "Four bolded items, one explanatory clause each: early disease detection (imaging patterns a human reader can miss), personalized treatment plans (genetics, lifestyle, history), operational efficiency (scheduling, documentation, triage), and drug discovery acceleration (molecular simulation at scale).",
-        "assumes": "The reader has accepted the framing from the title slide.",
-        "hands_off": "The present-tense case is made; the reader is ready to look forward.",
-        "data_references": []
-      },
-      {
-        "position": 2,
-        "purpose": "Extend the argument from today's gains to the near future and close on access, so the deck ends on consequence rather than a list.",
-        "content_brief": "Three bolded forward-looking items: predictive health monitoring (wearables shifting medicine from reactive to proactive), AI-assisted surgery (robotics guided by real-time analysis), and global health equity (mobile diagnostics for underserved communities). Close on the italic line about healthcare becoming intelligent, personalized and accessible to all.",
-        "assumes": "The reader accepts the four present-day advantages from the previous slide.",
-        "hands_off": "The deck ends; the reader leaves with the equity claim as the takeaway.",
-        "data_references": []
-      }
-    ]
-  }
+  "chat_reply": "Here's your deck with 3 slides! I've created:\n\n1. **Title Slide** — introducing AI in healthcare\n2. **Key Advantages** — early detection, personalized treatment, operational efficiency, and drug discovery\n3. **Future Outlook** — predictive monitoring, AI-assisted surgery, and global health equity\n\nFeel free to ask me to refine any slide, add new ones, or change the style."
 }

{databricks_tellr_app-0.4.3.dev25 → databricks_tellr_app-0.4.3.dev27}/src/api/main.py

@@ -51,14 +51,13 @@ _worker_task = None
 _export_worker_task = None
 _cleanup_task = None
 _timeout_task = None
-_spec_sweeper_task = None
 _frontend_assets_stack: ExitStack | None = None
 
 
 @asynccontextmanager
 async def lifespan(app: FastAPI):
     """Lifespan context manager for startup/shutdown events."""
-    global _worker_task, _export_worker_task, _cleanup_task, _timeout_task, _spec_sweeper_task, _frontend_assets_stack
+    global _worker_task, _export_worker_task, _cleanup_task, _timeout_task, _frontend_assets_stack
 
     # Startup
     logger.info(f"Starting AI Slide Generator API (environment: {ENVIRONMENT})")
@@ -135,16 +134,6 @@ async def lifespan(app: FastAPI):
         _cleanup_task = asyncio.create_task(request_log_cleanup_loop())
         logger.info("Request log cleanup task started")
 
-        # Start the spec-dirty arc-review sweeper. A PERIODIC LOOP, so it belongs
-        # here beside the two above and NOT in run.py::init_database: the
-        # pre-fork rule there is for migrations and backfills, which must run
-        # exactly once, and a loop started in that step would die with it. It
-        # runs in every uvicorn worker (UVICORN_WORKERS defaults to 4), which is
-        # why claim_due_marker takes an atomic lease rather than trusting a read.
-        from src.services.spec_sync import spec_review_sweeper_loop
-        _spec_sweeper_task = asyncio.create_task(spec_review_sweeper_loop())
-        logger.info("Spec-review arc sweeper started")
-
         # Recover any stuck requests from previous crashes
         try:
             recovered = await recover_stuck_requests()
@@ -196,14 +185,6 @@ async def lifespan(app: FastAPI):
             pass
         logger.info("MCP job timeout sweeper stopped")
 
-    if _spec_sweeper_task:
-        _spec_sweeper_task.cancel()
-        try:
-            await _spec_sweeper_task
-        except asyncio.CancelledError:
-            pass
-        logger.info("Spec-review arc sweeper stopped")
-
     # Tear down the FastMCP session manager's task group. Safe to call
     # unconditionally — the stack was entered unconditionally at startup.
     await mcp_lifespan_stack.aclose()
@@ -508,11 +489,23 @@ logger.info("MCP server mounted at /mcp")
 
 @app.get("/api/health")
 async def health():
-    """Health check endpoint."""
+    """Health check endpoint.
+
+    ``encryption_key_source`` is load-bearing for deployment: ``tellr.update``
+    polls it to confirm a relocated app is reading the secret before it deletes
+    the Lakebase key row. Reports the source only — never the key.
+
+    ``version`` comes from the installed wheel's metadata, so it tracks the
+    deployed release; it reads "unknown" from a source checkout.
+    """
+    from src.api.routes.version import get_installed_version
+    from src.core.encryption import key_source
+
     return {
         "status": "healthy",
         "environment": ENVIRONMENT,
-        "version": "0.3.0",
+        "version": get_installed_version(),
+        "encryption_key_source": key_source(),
     }
 
 

{databricks_tellr_app-0.4.3.dev25 → databricks_tellr_app-0.4.3.dev27}/src/api/mcp_auth.py

@@ -16,19 +16,22 @@ Accepts three identity sources, evaluated in priority order:
    identity headers. The receiving app (tellr) trusts those headers
    because the same proxy sets them, strips any caller-supplied versions,
    and cannot be bypassed by external traffic. This path has no user
-   token, so downstream Databricks API calls use tellr's own service
-   principal credentials; attribution (``created_by`` on decks, etc.)
-   remains the real user via ``user_name``.
+   token, so the user-client ContextVar is left **unset**: agent tools
+   that resolve their client via ``get_user_client()`` fail closed rather
+   than silently running as tellr's service principal (SDR-4437 / F-CR-3).
+   Code that legitimately needs SP credentials on this path must call
+   ``get_system_client()`` explicitly. Attribution (``created_by`` on
+   decks, etc.) remains the real user via ``user_name``.
 
 The priority-3 path is gated on ``TELLR_TRUST_FORWARDED_IDENTITY=true``
 so the behaviour is explicit at deploy time. Production Databricks Apps
 deployments enable it; local dev does not.
 
 The resolved identity is bound into the same request-scoped ContextVars
-the browser flow uses (``set_current_user``, ``set_user_client``,
-``set_permission_context``), so downstream services (session manager,
-permission service, MLflow, Google OAuth) see the caller's identity
-without any MCP-specific plumbing.
+the browser flow uses (``set_current_user``, ``set_permission_context``,
+and — only when a user token is present — ``set_user_client``), so
+downstream services (session manager, permission service, MLflow, Google
+OAuth) see the caller's identity without any MCP-specific plumbing.
 """
 
 from __future__ import annotations
@@ -43,7 +46,6 @@ from fastapi import Request
 
 from src.core.databricks_client import (
     get_or_create_user_client,
-    get_system_client,
     set_user_client,
 )
 from src.core.permission_context import (
@@ -150,28 +152,24 @@ def extract_mcp_identity(request: Request) -> MCPIdentity:
 def mcp_auth_scope(request: Request) -> Iterator[MCPIdentity]:
     """Authenticate an MCP request and bind identity ContextVars for the block.
 
-    On entry: resolves identity, binds ``current_user``, ``user_client``,
-    and ``permission_context``.
+    On entry: resolves identity and binds ``current_user`` and
+    ``permission_context``. The ``user_client`` ContextVar is bound only when
+    a real user token is present (priority 1/2); on the token-less priority-3
+    app-to-app path it is deliberately left unset.
 
     On exit: clears all three ContextVars, even if the wrapped block raised.
 
-    When the identity was resolved via priority 3 (no user token), the
-    bound ``user_client`` is tellr's service-principal client — downstream
-    services still function, but any SDK calls are made with SP credentials
-    rather than the user's own. Attribution (``created_by``) is unaffected:
-    it uses ``user_name`` from the forwarded identity headers, which the
-    proxy attests.
+    Leaving ``user_client`` unset on priority 3 makes it true by construction
+    that agent tools (which resolve their client via ``get_user_client()``)
+    can never execute as tellr's service principal on the app-to-app path —
+    they fail closed with ``UserClientRequiredError`` in production
+    (SDR-4437 / F-CR-3). Code that legitimately needs SP credentials must call
+    ``get_system_client()`` explicitly. Attribution (``created_by``) is
+    unaffected: it uses ``user_name`` from the forwarded identity headers,
+    which the proxy attests.
     """
     identity = extract_mcp_identity(request)
 
-    if identity.token is not None:
-        user_client = get_or_create_user_client(identity.token)
-    else:
-        # Priority-3 path: no user token, so downstream Databricks API
-        # calls use tellr's service principal. Safe because the app-to-app
-        # model explicitly delegates credentialing to the receiving app.
-        user_client = get_system_client()
-
     permission_ctx = build_permission_context(
         user_id=identity.user_id,
         user_name=identity.user_name,
@@ -179,9 +177,22 @@ def mcp_auth_scope(request: Request) -> Iterator[MCPIdentity]:
     )
 
     set_current_user(identity.user_name)
-    set_user_client(user_client)
     set_permission_context(permission_ctx)
 
+    if identity.token is not None:
+        # Priority 1/2: a real user token is present. Bind the OBO client so
+        # downstream services (agent tools included) act as the user.
+        set_user_client(get_or_create_user_client(identity.token))
+    else:
+        # Priority-3 (app-to-app) path: no user token is available. Do NOT
+        # bind any client into the user-client ContextVar. Leaving it unset
+        # makes it true by construction that agent tools — which resolve their
+        # client via get_user_client() — can never run as the app service
+        # principal on this path: they fail closed with UserClientRequiredError
+        # in production (SDR-4437 / F-CR-3). Anything that legitimately needs
+        # the SP here must call get_system_client() explicitly.
+        set_user_client(None)
+
     logger.debug(
         "MCP auth scope entered",
         extra={