databricks-tellr-app 0.4.3.dev31__tar.gz → 0.4.3.dev32__tar.gz

{databricks_tellr_app-0.4.3.dev31 → databricks_tellr_app-0.4.3.dev32}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev31
+Version: 0.4.3.dev32
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
@@ -9,14 +9,16 @@ Requires-Dist: uvicorn==0.38.0
 Requires-Dist: python-multipart==0.0.20
 Requires-Dist: pydantic==2.12.4
 Requires-Dist: pydantic-settings==2.12.0
-Requires-Dist: databricks-langchain==0.9.0
+Requires-Dist: databricks-langchain==0.20.0
+Requires-Dist: databricks-openai==0.17.1
 Requires-Dist: langchain==1.3.14
 Requires-Dist: langchain-core==1.5.3
 Requires-Dist: langchain-community==0.4.2
 Requires-Dist: langchain-text-splitters==1.1.2
 Requires-Dist: litellm==1.80.11
 Requires-Dist: mcp==1.27.0
-Requires-Dist: openai>=1.99.9
+Requires-Dist: openai==3.19.2
+Requires-Dist: openai-agents==0.22.2
 Requires-Dist: opentelemetry-api==1.38.0
 Requires-Dist: opentelemetry-sdk==1.38.0
 Requires-Dist: beautifulsoup4==4.14.2

{databricks_tellr_app-0.4.3.dev31 → databricks_tellr_app-0.4.3.dev32}/databricks_tellr_app.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev31
+Version: 0.4.3.dev32
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
@@ -9,14 +9,16 @@ Requires-Dist: uvicorn==0.38.0
 Requires-Dist: python-multipart==0.0.20
 Requires-Dist: pydantic==2.12.4
 Requires-Dist: pydantic-settings==2.12.0
-Requires-Dist: databricks-langchain==0.9.0
+Requires-Dist: databricks-langchain==0.20.0
+Requires-Dist: databricks-openai==0.17.1
 Requires-Dist: langchain==1.3.14
 Requires-Dist: langchain-core==1.5.3
 Requires-Dist: langchain-community==0.4.2
 Requires-Dist: langchain-text-splitters==1.1.2
 Requires-Dist: litellm==1.80.11
 Requires-Dist: mcp==1.27.0
-Requires-Dist: openai>=1.99.9
+Requires-Dist: openai==3.19.2
+Requires-Dist: openai-agents==0.22.2
 Requires-Dist: opentelemetry-api==1.38.0
 Requires-Dist: opentelemetry-sdk==1.38.0
 Requires-Dist: beautifulsoup4==4.14.2

{databricks_tellr_app-0.4.3.dev31 → databricks_tellr_app-0.4.3.dev32}/databricks_tellr_app.egg-info/requires.txt

@@ -3,14 +3,16 @@ uvicorn==0.38.0
 python-multipart==0.0.20
 pydantic==2.12.4
 pydantic-settings==2.12.0
-databricks-langchain==0.9.0
+databricks-langchain==0.20.0
+databricks-openai==0.17.1
 langchain==1.3.14
 langchain-core==1.5.3
 langchain-community==0.4.2
 langchain-text-splitters==1.1.2
 litellm==1.80.11
 mcp==1.27.0
-openai>=1.99.9
+openai==3.19.2
+openai-agents==0.22.2
 opentelemetry-api==1.38.0
 opentelemetry-sdk==1.38.0
 beautifulsoup4==4.14.2

{databricks_tellr_app-0.4.3.dev31 → databricks_tellr_app-0.4.3.dev32}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "databricks-tellr-app"
-version = "0.4.3.dev31"
+version = "0.4.3.dev32"
 description = "Tellr application package for Databricks Apps"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -14,7 +14,8 @@ dependencies = [
     "python-multipart==0.0.20",
     "pydantic==2.12.4",
     "pydantic-settings==2.12.0",
-    "databricks-langchain==0.9.0",
+    "databricks-langchain==0.20.0",
+    "databricks-openai==0.17.1",
     "langchain==1.3.14",
     "langchain-core==1.5.3",
     "langchain-community==0.4.2",
@@ -22,8 +23,10 @@ dependencies = [
     "litellm==1.80.11",
     "mcp==1.27.0",
     # agent_runtime.py and model_endpoint_probe.py import openai at module level;
-    # databricks-langchain==0.9.0 requires openai>=1.99.9 directly.
-    "openai>=1.99.9",
+    # openai and openai-agents pinned to the versions databricks-openai 0.17.1 resolves
+    # to so the Apps build matches local tests.
+    "openai==3.19.2",
+    "openai-agents==0.22.2",
     "opentelemetry-api==1.38.0",
     "opentelemetry-sdk==1.38.0",
     "beautifulsoup4==4.14.2",

{databricks_tellr_app-0.4.3.dev31 → databricks_tellr_app-0.4.3.dev32}/src/api/main.py

@@ -527,11 +527,23 @@ logger.info("MCP server mounted at /mcp")
 
 @app.get("/api/health")
 async def health():
-    """Health check endpoint."""
+    """Health check endpoint.
+
+    ``encryption_key_source`` is load-bearing for deployment: ``tellr.update``
+    polls it to confirm a relocated app is reading the secret before it deletes
+    the Lakebase key row. Reports the source only — never the key.
+
+    ``version`` comes from the installed wheel's metadata, so it tracks the
+    deployed release; it reads "unknown" from a source checkout.
+    """
+    from src.api.routes.version import get_installed_version
+    from src.core.encryption import key_source
+
     return {
         "status": "healthy",
         "environment": ENVIRONMENT,
-        "version": "0.3.0",
+        "version": get_installed_version(),
+        "encryption_key_source": key_source(),
     }
 
 

{databricks_tellr_app-0.4.3.dev31 → databricks_tellr_app-0.4.3.dev32}/src/api/mcp_auth.py

@@ -16,19 +16,22 @@ Accepts three identity sources, evaluated in priority order:
    identity headers. The receiving app (tellr) trusts those headers
    because the same proxy sets them, strips any caller-supplied versions,
    and cannot be bypassed by external traffic. This path has no user
-   token, so downstream Databricks API calls use tellr's own service
-   principal credentials; attribution (``created_by`` on decks, etc.)
-   remains the real user via ``user_name``.
+   token, so the user-client ContextVar is left **unset**: agent tools
+   that resolve their client via ``get_user_client()`` fail closed rather
+   than silently running as tellr's service principal (SDR-4437 / F-CR-3).
+   Code that legitimately needs SP credentials on this path must call
+   ``get_system_client()`` explicitly. Attribution (``created_by`` on
+   decks, etc.) remains the real user via ``user_name``.
 
 The priority-3 path is gated on ``TELLR_TRUST_FORWARDED_IDENTITY=true``
 so the behaviour is explicit at deploy time. Production Databricks Apps
 deployments enable it; local dev does not.
 
 The resolved identity is bound into the same request-scoped ContextVars
-the browser flow uses (``set_current_user``, ``set_user_client``,
-``set_permission_context``), so downstream services (session manager,
-permission service, MLflow, Google OAuth) see the caller's identity
-without any MCP-specific plumbing.
+the browser flow uses (``set_current_user``, ``set_permission_context``,
+and — only when a user token is present — ``set_user_client``), so
+downstream services (session manager, permission service, MLflow, Google
+OAuth) see the caller's identity without any MCP-specific plumbing.
 """
 
 from __future__ import annotations
@@ -43,7 +46,6 @@ from fastapi import Request
 
 from src.core.databricks_client import (
     get_or_create_user_client,
-    get_system_client,
     set_user_client,
 )
 from src.core.permission_context import (
@@ -150,28 +152,24 @@ def extract_mcp_identity(request: Request) -> MCPIdentity:
 def mcp_auth_scope(request: Request) -> Iterator[MCPIdentity]:
     """Authenticate an MCP request and bind identity ContextVars for the block.
 
-    On entry: resolves identity, binds ``current_user``, ``user_client``,
-    and ``permission_context``.
+    On entry: resolves identity and binds ``current_user`` and
+    ``permission_context``. The ``user_client`` ContextVar is bound only when
+    a real user token is present (priority 1/2); on the token-less priority-3
+    app-to-app path it is deliberately left unset.
 
     On exit: clears all three ContextVars, even if the wrapped block raised.
 
-    When the identity was resolved via priority 3 (no user token), the
-    bound ``user_client`` is tellr's service-principal client — downstream
-    services still function, but any SDK calls are made with SP credentials
-    rather than the user's own. Attribution (``created_by``) is unaffected:
-    it uses ``user_name`` from the forwarded identity headers, which the
-    proxy attests.
+    Leaving ``user_client`` unset on priority 3 makes it true by construction
+    that agent tools (which resolve their client via ``get_user_client()``)
+    can never execute as tellr's service principal on the app-to-app path —
+    they fail closed with ``UserClientRequiredError`` in production
+    (SDR-4437 / F-CR-3). Code that legitimately needs SP credentials must call
+    ``get_system_client()`` explicitly. Attribution (``created_by``) is
+    unaffected: it uses ``user_name`` from the forwarded identity headers,
+    which the proxy attests.
     """
     identity = extract_mcp_identity(request)
 
-    if identity.token is not None:
-        user_client = get_or_create_user_client(identity.token)
-    else:
-        # Priority-3 path: no user token, so downstream Databricks API
-        # calls use tellr's service principal. Safe because the app-to-app
-        # model explicitly delegates credentialing to the receiving app.
-        user_client = get_system_client()
-
     permission_ctx = build_permission_context(
         user_id=identity.user_id,
         user_name=identity.user_name,
@@ -179,9 +177,22 @@ def mcp_auth_scope(request: Request) -> Iterator[MCPIdentity]:
     )
 
     set_current_user(identity.user_name)
-    set_user_client(user_client)
     set_permission_context(permission_ctx)
 
+    if identity.token is not None:
+        # Priority 1/2: a real user token is present. Bind the OBO client so
+        # downstream services (agent tools included) act as the user.
+        set_user_client(get_or_create_user_client(identity.token))
+    else:
+        # Priority-3 (app-to-app) path: no user token is available. Do NOT
+        # bind any client into the user-client ContextVar. Leaving it unset
+        # makes it true by construction that agent tools — which resolve their
+        # client via get_user_client() — can never run as the app service
+        # principal on this path: they fail closed with UserClientRequiredError
+        # in production (SDR-4437 / F-CR-3). Anything that legitimately needs
+        # the SP here must call get_system_client() explicitly.
+        set_user_client(None)
+
     logger.debug(
         "MCP auth scope entered",
         extra={

{databricks_tellr_app-0.4.3.dev31 → databricks_tellr_app-0.4.3.dev32}/src/api/routes/chat.py

@@ -623,18 +623,6 @@ async def send_message_streaming(
     )
 
 
-@router.get("/health")
-async def health_check():
-    """Health check endpoint.
-
-    Returns:
-        Status information
-    """
-    return {
-        "status": "healthy",
-        "service": "AI Slide Generator",
-    }
-
 
 @router.post("/chat/async")
 async def submit_chat_async(