imperal-sdk 4.2.3__tar.gz → 4.2.5__tar.gz

{imperal_sdk-4.2.3 → imperal_sdk-4.2.5}/CHANGELOG.md

@@ -2,6 +2,56 @@
 
 All notable changes to `imperal-sdk` are documented here.
 
+## 4.2.5 — 2026-05-13
+
+**Fix: synthetic `__panel__*` tools excluded from validator tool_count + tests**
+
+v4.2.4 introduced an unconditional synthetic `secrets` panel via `Extension.__init__`,
+which auto-registers a `__panel__secrets` tool internally. The validator's `tool_count`
+logic was counting this synthetic tool as a user-authored tool, masking V3 ("at least
+one tool") error detection for extensions with zero user tools and inflating
+marketplace tool counts.
+
+### Fixed
+
+- **`validator.tool_count`** now excludes any tool whose name matches the
+  synthetic-prefix allowlist (`__panel__`, `__widget__`, `__tray__`, `__webhook__`).
+  These are platform-provided, not author-authored, and shouldn't count.
+- **`V3 "at least one tool"`** check now correctly fires for ext'ы with only
+  synthetic auto-registered tools.
+- `tests/test_panels.py::test_multiple_panels` updated to assert +1 for the
+  always-present synthetic `secrets` panel.
+
+### Notes
+
+- No behavior change for extensions with at least one real `@ext.tool` or
+  ChatExtension. Strict-tool-count-zero ext'ы now properly fail V3 again.
+- Marketplace tool counts shown to users no longer count synthetic panels.
+
+## 4.2.4 — 2026-05-13
+
+**EXT-SECRETS-V1 — unconditional synthetic Secrets panel**
+
+In v4.2.3 the synthetic Secrets panel was registered conditionally on the
+first `@ext.secret(...)` call, which meant extensions that did not declare
+secrets had no menu entry — leaving end-users without a discoverable place
+to manage credentials when developers later add declarations.
+
+This release flips the registration to **unconditional**: every Extension
+instance auto-registers the synthetic `secrets` panel in `__init__` (slot
+`right`, title `Secrets`, icon `KeyRound`). When the manifest has zero
+declared secrets, the panel renders an empty state with developer guidance
+(`@ext.secret(...)` code example + link to docs). When declarations exist,
+it renders one card per secret with `is_set` status + Manage button.
+
+### Migration notes
+
+- **No code changes required**. Bump your ext's SDK pin to `>= 4.2.4` and
+  redeploy via Dev Portal — the Secrets tab appears automatically.
+- Extensions that genuinely never need credentials still get the tab; this
+  is intentional for UX consistency. Federal V32 contract still requires
+  `@ext.secret` for any real credential access at runtime.
+
 ## 4.2.3 — 2026-05-13
 
 **EXT-SECRETS-V1 UX polish — synthetic `secrets` panel auto-injected**

{imperal_sdk-4.2.3 → imperal_sdk-4.2.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: imperal-sdk
-Version: 4.2.3
+Version: 4.2.5
 Summary: SDK for building Imperal Cloud extensions
 Author: Valentin Scerbacov, Imperal, Inc.
 License-Expression: AGPL-3.0-or-later

{imperal_sdk-4.2.3 → imperal_sdk-4.2.5}/src/imperal_sdk/__init__.py

@@ -39,7 +39,7 @@ from imperal_sdk.secrets import (
     SecretValueTooLarge, SecretDeclarationConflict,
 )
 
-__version__ = "4.2.3"
+__version__ = "4.2.5"
 
 __all__ = [
     # Core

{imperal_sdk-4.2.3 → imperal_sdk-4.2.5}/src/imperal_sdk/extension.py

@@ -142,6 +142,36 @@ class Extension:
         # EXT-SECRETS-V1 (v4.2.2) — declared secrets emitted into manifest.secrets[]
         self._secrets: dict[str, "SecretSpec"] = {}
 
+        # EXT-SECRETS-V1 (v4.2.4) — auto-register synthetic 'secrets' panel
+        # unconditionally for every Extension. Empty state (no @ext.secret
+        # declared) renders developer guidance with code example. Federal
+        # contract enforced platform-side regardless of UI presence.
+        self._auto_register_secrets_panel()
+
+    def _auto_register_secrets_panel(self) -> None:
+        """Register the platform-provided 'secrets' panel.
+
+        Idempotent — only registers once per Extension instance. Slot
+        defaults to 'right' (least-used by typical extensions, lowest
+        collision risk with deploy-sync logic that keeps one panel per slot).
+        """
+        if "secrets" in self._panels:
+            return
+        try:
+            from imperal_sdk.secrets.panel_handler import (
+                builtin_secrets_panel_handler,
+            )
+        except Exception:
+            # If secrets package import fails, don't break Extension init.
+            return
+        self.panel(
+            "secrets",
+            slot="right",
+            title="Secrets",
+            icon="KeyRound",
+            refresh="manual",
+        )(builtin_secrets_panel_handler)
+
     def secret(
         self,
         name: str,
@@ -195,32 +225,10 @@ class Extension:
             )
         self._secrets[name] = spec
 
-        # EXT-SECRETS-V1 (v4.2.3): auto-register synthetic 'secrets' panel
-        # on first @ext.secret call so the Secrets tab appears alongside
-        # the extension's own tabs without the author writing panel code.
-        # The handler is shipped in imperal_sdk.secrets.panel_handler.
-        # Subsequent @ext.secret calls are no-ops here — registration is
-        # idempotent.
-        #
-        # Slot choice: ``right`` is defensively chosen. Most extensions
-        # use ``left`` (sidebar nav) and ``center`` (main content); ``right``
-        # is rarely-used so the synthetic Secrets tab is least likely to be
-        # overwritten by the deploy-sync logic in imperal-ext-developer
-        # which currently keeps only one panel per slot. If your extension
-        # already uses ``right``, your panel wins; users can still reach
-        # the Secrets UI via the chat-top ribbon and at /ext/{ext_id}/secrets.
-        if "secrets" not in self._panels:
-            from imperal_sdk.secrets.panel_handler import (
-                builtin_secrets_panel_handler,
-            )
-            # Call self.panel(...) the same way an extension author would.
-            self.panel(
-                "secrets",
-                slot="right",
-                title="Secrets",
-                icon="KeyRound",
-                refresh="manual",
-            )(builtin_secrets_panel_handler)
+        # EXT-SECRETS-V1 (v4.2.4): synthetic Secrets panel is now registered
+        # unconditionally in Extension.__init__ via _auto_register_secrets_panel.
+        # This call site is a no-op safety net for older bytecode paths.
+        self._auto_register_secrets_panel()
 
         def _decorator(target):
             return target  # syntactic anchor only — decorator is a no-op wrapper

{imperal_sdk-4.2.3 → imperal_sdk-4.2.5}/src/imperal_sdk/validator.py

@@ -145,8 +145,17 @@ def validate_extension(ext) -> ValidationReport:
             fix="Set version to a valid semver string",
         ))
 
-    # Count registered @ext.tool entries
-    tools = getattr(ext, "_tools", {})
+    # Count registered @ext.tool entries. Exclude synthetic tools that the
+    # SDK auto-registers internally (e.g. __panel__secrets from the
+    # EXT-SECRETS-V1 unconditional synthetic Secrets panel, v4.2.4) — those
+    # are platform-provided, not user-authored, and shouldn't count toward
+    # V3 "at least one tool" or marketplace tool counts.
+    _all_tools = getattr(ext, "_tools", {})
+    _SYNTHETIC_PREFIXES = ("__panel__", "__widget__", "__tray__", "__webhook__")
+    tools = {
+        name: t for name, t in _all_tools.items()
+        if not any(name.startswith(p) for p in _SYNTHETIC_PREFIXES)
+    }
     report.tool_count = len(tools)
 
     # Collect all ChatExtension instances registered on this extension

{imperal_sdk-4.2.3 → imperal_sdk-4.2.5}/tests/test_panels.py

@@ -34,9 +34,12 @@ class TestPanelDecorator:
         async def left(ctx): pass
         @ext.panel("stats", slot="right", title="Right")
         async def right(ctx): pass
-        assert len(ext.panels) == 2
+        # +1 for the synthetic 'secrets' panel auto-injected by Extension.__init__
+        # (EXT-SECRETS-V1 v4.2.4) — see Extension._auto_register_secrets_panel.
+        assert len(ext.panels) == 3
         assert "sidebar" in ext.panels
         assert "stats" in ext.panels
+        assert "secrets" in ext.panels
 
     def test_default_slot(self):
         ext = Extension("test-app")