mainsequence-metatable 0.1.26.dev43__tar.gz → 0.1.27.dev45__tar.gz

{mainsequence_metatable-0.1.26.dev43 → mainsequence_metatable-0.1.27.dev45}/.mainsequence/workflows/metatables-api.yaml

@@ -17,12 +17,16 @@ resources:
       secrets:
         - name: METATABLES_RUNTIME_DATABASE
           level: view
+      # /runtime-context/ tells applications this branch's Analyst (ADR 0019).
+      resources:
+        - key: metatables-analyst-agent
+          level: view
 
   - key: metatables-analyst-agent
     kind: harness_agent
     spec:
       source_path: api/tau/main.py
-      llm_provider: openai
+      llm_provider: openai-codex
       llm_model: gpt-5.6-luna
       llm_thinking: medium
       automatic_deployment: true

{mainsequence_metatable-0.1.26.dev43 → mainsequence_metatable-0.1.27.dev45}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mainsequence-metatable
-Version: 0.1.26.dev43
+Version: 0.1.27.dev45
 Summary: Main Sequence MetaTables Python client and standalone API
 Author-email: Main Sequence GmbH <dev@main-sequence.io>
 License-Expression: MIT

{mainsequence_metatable-0.1.26.dev43 → mainsequence_metatable-0.1.27.dev45}/docs/adr/agent/0019-metatables-analyst-agent.md

@@ -1,5 +1,14 @@
 # ADR 0019: MetaTables Analyst agent
 
+> Amendment (2026-10-08): The API names this branch's Analyst to applications.
+> `GET /runtime-context/` returns `hosted_agent` (`uid`, `name`, `status`) beside
+> `hosted_environment`: the Agent the API's own branch deploys, which the API finds with its
+> workload credentials and caches for an hour like the Environment; a failed lookup is
+> `unavailable` and is not cached. The API's `access` names the Analyst by its key so it can
+> see it. An application's assistant, such as the MetaTables Admin rail, takes the Agent and
+> the Environment from there instead of build values. A re-created Analyst reaches it at the
+> API's next deployment, which the same push starts. Local mode reports neither.
+>
 > Amendment (2026-10-08): [ADR 0020](0020-analyst-reads-as-its-requester.md) replaces
 > the agent's own Reader grants: each tool call is answered as the person the turn
 > serves, so nobody reads more through the agent than they can read directly.
@@ -61,7 +70,7 @@ refuses anything else.
 
 | Part | Rule |
 | --- | --- |
-| Runtime | `ms-tau-sdk` 2.0.8.dev44, `openai` / `gpt-5.6-luna`, thinking `medium`. |
+| Runtime | `ms-tau-sdk` 2.0.8.dev44, `openai-codex` / `gpt-5.6-luna`, thinking `medium`. |
 | Identity | The person each turn serves (ADR 0020); the agent's own identity holds no grants. |
 | Tools | The six tools below, served by the API over MCP when hosted (ADR 0021), and the SDK's skill-scoped `read`. No shell, file writes or Main Sequence MCP. |
 | Instructions | `.tau/SYSTEM.md` covers MetaTables; vendored `pg-aiguide` skills cover PostgreSQL and TimescaleDB. |

{mainsequence_metatable-0.1.26.dev43 → mainsequence_metatable-0.1.27.dev45}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "mainsequence-metatable"
-version = "0.1.26.dev43"
+version = "0.1.27.dev45"
 description = "Main Sequence MetaTables Python client and standalone API"
 readme = "README.md"
 requires-python = ">=3.13"

{mainsequence_metatable-0.1.26.dev43 → mainsequence_metatable-0.1.27.dev45}/src/mainsequence_metatable.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mainsequence-metatable
-Version: 0.1.26.dev43
+Version: 0.1.27.dev45
 Summary: Main Sequence MetaTables Python client and standalone API
 Author-email: Main Sequence GmbH <dev@main-sequence.io>
 License-Expression: MIT

{mainsequence_metatable-0.1.26.dev43 → mainsequence_metatable-0.1.27.dev45}/src/mainsequence_metatable.egg-info/SOURCES.txt

@@ -443,6 +443,7 @@ tests/analyst/test_tools.py
 tests/auth/test_bootstrap_failure_cause.py
 tests/auth/test_data_source_identity.py
 tests/auth/test_development_client.py
+tests/auth/test_hosted_agent.py
 tests/auth/test_hosted_environment_target.py
 tests/auth/test_local_mode.py
 tests/auth/test_platform_fact_cache.py

{mainsequence_metatable-0.1.26.dev43 → mainsequence_metatable-0.1.27.dev45}/src/metatables/api/app/routes/runtime_context.py

@@ -12,7 +12,7 @@ from metatables.api.app.runtime import data_source_provider
 from metatables.api.app.runtime_control import runtime_instance_id
 from metatables.api.backend.integrations.local_workspace import source_descriptor
 from metatables.api.backend.integrations.runtime_data_sources import DataSourceIntegrationError
-from metatables.runtime_contract import HostedEnvironment, RuntimeContext
+from metatables.runtime_contract import HostedAgent, HostedEnvironment, RuntimeContext
 
 logger = logging.getLogger(__name__)
 
@@ -49,6 +49,32 @@ def cached_environment(cache: PlatformCache[UUID, HostedEnvironment], uid: UUID
     return cache.get(uid, lambda: verified_environment(uid))
 
 
+def branch_agent() -> HostedAgent:
+    """The Harness Agent this API's branch deploys (ADR 0019); a branch deploys at most one.
+
+    A failed lookup raises, so the cache keeps no failure.
+    """
+    from mainsequence.client.agent_runtime_models import Agent
+    from mainsequence.code_repository_context import get_code_repository_context
+
+    branch_uid = get_code_repository_context().code_repository_branch_uid
+    agents = [agent for agent in Agent.filter(timeout=(2, 5))
+              if branch_uid and agent.code_repository_branch_uid == branch_uid]
+    if len(agents) != 1:
+        return HostedAgent(uid=None, status="not_found")
+    return HostedAgent(uid=agents[0].uid, status="verified", name=agents[0].name)
+
+
+def cached_agent(cache: PlatformCache[UUID, HostedAgent], environment_uid: UUID | None) -> HostedAgent:
+    if environment_uid is None:
+        return HostedAgent(uid=None, status="not_configured")
+    try:
+        return cache.get(environment_uid, branch_agent)
+    except Exception:
+        logger.exception("Hosted agent lookup failed")
+        return HostedAgent(uid=None, status="unavailable")
+
+
 @router.get("/runtime-context/", response_model=RuntimeContext, response_model_exclude_unset=True)
 def runtime_context(
     request: Request, response: Response,
@@ -73,6 +99,8 @@ def runtime_context(
         "runtime_instance_id": runtime_instance_id(state) if control else None,
         "api_endpoint": f"http://{state.config.expected_host}" if state.config.local_mode else str(request.base_url).rstrip("/"),
         "hosted_environment": environment,
+        # The Analyst an application's assistant talks to, in the same Environment (ADR 0019).
+        "hosted_agent": None if state.config.local_mode else cached_agent(state.agent_cache, caller.environment_uid),
         "git_source": source_descriptor(workspace.source) if workspace else None,
         "data_source_selection": selection,
         "bootstrap": state.bootstrap.descriptor(caller.user_uid, is_admin=caller.is_admin) if state.bootstrap else None,

{mainsequence_metatable-0.1.26.dev43 → mainsequence_metatable-0.1.27.dev45}/src/metatables/api/app/runtime.py

@@ -37,7 +37,7 @@ from metatables.api.backend.integrations.runtime_binding import (
     RuntimeBindingError,
     RuntimeStorageBinding,
 )
-from metatables.runtime_contract import HostedEnvironment
+from metatables.runtime_contract import HostedAgent, HostedEnvironment
 
 logger = logging.getLogger(__name__)
 
@@ -221,6 +221,8 @@ class RuntimeState:
         default_factory=PlatformCache, repr=False, compare=False)
     environment_cache: PlatformCache[UUID, HostedEnvironment] = field(
         default_factory=PlatformCache, repr=False, compare=False)
+    agent_cache: PlatformCache[UUID, HostedAgent] = field(
+        default_factory=PlatformCache, repr=False, compare=False)
 
     @property
     def workspace(self) -> LocalWorkspace | None:

{mainsequence_metatable-0.1.26.dev43 → mainsequence_metatable-0.1.27.dev45}/src/metatables/runtime_contract.py

@@ -23,6 +23,14 @@ class HostedEnvironment(BaseModel):
     required_repository_branch: str | None = None
 
 
+class HostedAgent(BaseModel):
+    """The Harness Agent this API's branch deploys, as the API's workload sees it."""
+    model_config = ConfigDict(extra="ignore", frozen=True)
+    uid: str | None
+    status: Literal["verified", "not_found", "unavailable", "not_configured"]
+    name: str | None = None
+
+
 class RuntimeBootstrapDescriptor(BaseModel):
     model_config = ConfigDict(extra="ignore", frozen=True)
     status: Literal["unconfigured", "migration_required", "registration_required", "migrating", "ready", "incompatible", "unavailable"]
@@ -62,6 +70,7 @@ class RuntimeContext(BaseModel):
     runtime_instance_id: str | None = None
     api_endpoint: str = ""
     hosted_environment: HostedEnvironment | None = None
+    hosted_agent: HostedAgent | None = None
     data_source_selection: Literal["local_workspace", "catalog_default", "runtime_override", "runtime_binding"] = "catalog_default"
     data_source_error: str | None = None
     bootstrap: RuntimeBootstrapDescriptor | None = None

{mainsequence_metatable-0.1.26.dev43 → mainsequence_metatable-0.1.27.dev45}/tests/analyst/test_agent_surface.py

@@ -57,6 +57,8 @@ def test_card_workflow_and_entrypoint_describe_one_read_only_agent():
     # The API serves the read tools over MCP and the hosted agent uses them as the person
     # each turn serves (ADR 0020, ADR 0021).
     assert api["spec"]["mcp_enabled"] is True
+    # The API sees its branch's Analyst, to name it in /runtime-context/ (ADR 0019).
+    assert api["access"]["resources"] == [{"key": "metatables-analyst-agent", "level": "view"}]
     assert resource["spec"]["mcp_applications"] == [{"resource": "metatables"}]
     assert resource["acts_for_requester"] is True
     steps = workflow["execution"]["steps"]

mainsequence_metatable-0.1.27.dev45/tests/auth/test_hosted_agent.py

@@ -0,0 +1,59 @@
+"""The API names the Harness Agent its own branch deploys (ADR 0019)."""
+
+from types import SimpleNamespace
+from uuid import uuid4
+
+import pytest
+
+from metatables.api.app.platform_cache import PlatformCache
+from metatables.api.app.routes import runtime_context as route
+from metatables.runtime_contract import HostedAgent
+
+BRANCH = "branch-uid"
+
+
+@pytest.fixture
+def platform(monkeypatch):
+    from mainsequence import code_repository_context
+    from mainsequence.client import agent_runtime_models
+
+    agents = []
+    monkeypatch.setattr(code_repository_context, "get_code_repository_context",
+                        lambda: SimpleNamespace(code_repository_branch_uid=BRANCH))
+    monkeypatch.setattr(agent_runtime_models.Agent, "filter",
+                        classmethod(lambda cls, timeout=None, **kwargs: list(agents)))
+    return agents
+
+
+def agent(branch, name="MetaTables Analyst"):
+    return SimpleNamespace(uid=str(uuid4()), name=name, code_repository_branch_uid=branch)
+
+
+def test_the_agent_of_the_api_branch_is_named_and_others_are_ignored(platform):
+    own = agent(BRANCH)
+    platform.extend([agent("other-branch", name="Other"), own])
+
+    assert route.branch_agent() == HostedAgent(uid=own.uid, name=own.name, status="verified")
+
+
+def test_no_agent_on_the_api_branch_is_not_found(platform):
+    platform.append(agent("other-branch"))
+
+    assert route.branch_agent() == HostedAgent(uid=None, status="not_found")
+
+
+def test_a_failed_lookup_is_unavailable_and_not_cached(monkeypatch):
+    calls = []
+
+    def failing():
+        calls.append(1)
+        raise RuntimeError("platform unavailable")
+
+    monkeypatch.setattr(route, "branch_agent", failing)
+    cache = PlatformCache()
+    environment_uid = uuid4()
+
+    for _ in range(2):
+        assert route.cached_agent(cache, environment_uid) == HostedAgent(uid=None, status="unavailable")
+    assert len(calls) == 2
+    assert route.cached_agent(cache, None) == HostedAgent(uid=None, status="not_configured")

{mainsequence_metatable-0.1.26.dev43 → mainsequence_metatable-0.1.27.dev45}/tests/auth/test_hosted_environment_target.py

@@ -1,4 +1,4 @@
-"""The runtime descriptor reports only the active API's hosted Environment."""
+"""The runtime descriptor reports only the active API's hosted Environment and Agent."""
 
 from types import SimpleNamespace
 from uuid import uuid4
@@ -9,7 +9,7 @@ from fastapi import Response
 from metatables.api.app.auth.boundary import AdmittedCaller
 from metatables.api.app.platform_cache import PlatformCache
 from metatables.api.app.routes import runtime_context as route
-from metatables.runtime_contract import HostedEnvironment, RuntimeContext
+from metatables.runtime_contract import HostedAgent, HostedEnvironment, RuntimeContext
 
 
 @pytest.mark.parametrize("local", [True, False])
@@ -19,14 +19,16 @@ def test_runtime_descriptor_reports_the_active_environment_only_when_hosted(monk
 
     uid = uuid4()
     environment = HostedEnvironment(uid=str(uid), name="Development", status="verified")
+    agent = HostedAgent(uid=str(uuid4()), name="MetaTables Analyst", status="verified")
     state = SimpleNamespace(config=SimpleNamespace(local_mode=local, developer_mode=True,
         configuration_path=None, expected_host="127.0.0.1:18473"), workspace=None, bootstrap=None,
-        binding=SimpleNamespace(source_uid=None), environment_cache=PlatformCache(),
+        binding=SimpleNamespace(source_uid=None), environment_cache=PlatformCache(), agent_cache=PlatformCache(),
         credential_store=SimpleNamespace(descriptor=lambda: dict(provider="unconfigured", status="uninitialized", error=None)))
     request = SimpleNamespace(app=SimpleNamespace(state=SimpleNamespace(runtime=state, runtime_control=None)),
                               base_url="http://127.0.0.1:18473/")
     monkeypatch.setattr(DeploymentConfiguration, "load", classmethod(lambda cls, path: SimpleNamespace(local_mode_available=True)))
     monkeypatch.setattr(route, "verified_environment", lambda supplied_uid: environment)
+    monkeypatch.setattr(route, "branch_agent", lambda: agent)
     def provider(state):
         raise DataSourceIntegrationError("default_data_source_not_configured")
     monkeypatch.setattr(route, "data_source_provider", provider)
@@ -35,4 +37,5 @@ def test_runtime_descriptor_reports_the_active_environment_only_when_hosted(monk
         caller=AdmittedCaller(user_uid=uuid4(), environment_uid=uid)))
     assert context.local_mode is local
     assert context.hosted_environment == (None if local else environment)
+    assert context.hosted_agent == (None if local else agent)
     assert response.headers["cache-control"] == "no-store"

{mainsequence_metatable-0.1.26.dev43 → mainsequence_metatable-0.1.27.dev45}/uv.lock

@@ -825,7 +825,7 @@ mcp = [
 
 [[package]]
 name = "mainsequence-metatable"
-version = "0.1.26"
+version = "0.1.27"
 source = { editable = "." }
 dependencies = [
     { name = "alembic" },