mainsequence 6.0.35__tar.gz → 6.0.37__tar.gz

{mainsequence-6.0.35 → mainsequence-6.0.37}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mainsequence
-Version: 6.0.35
+Version: 6.0.37
 Summary: Main Sequence SDK 
 Author-email: Main Sequence GmbH <dev@main-sequence.io>
 License-Expression: LicenseRef-MainSequence-Proprietary

{mainsequence-6.0.35 → mainsequence-6.0.37}/mainsequence/cli/api.py

@@ -5116,7 +5116,7 @@ def bulk_delete_projects(
     return data
 
 
-def add_deploy_key(project_branch_uid: str, key_title: str, public_key: str) -> None:
+def add_deploy_key(project_uid: str, key_title: str, public_key: str) -> None:
     """
     Add a deploy key for the project.
 
@@ -5125,7 +5125,7 @@ def add_deploy_key(project_branch_uid: str, key_title: str, public_key: str) ->
     """
     r = authed(
         "POST",
-        f"/api/v1/project-branches/{resolve_project_branch_uid(project_branch_uid)}/add-deploy-key/",
+        f"/api/v1/projects/{resolve_project_uid(project_uid)}/add-deploy-key/",
         {"key_title": key_title, "public_key": public_key},
     )
     r.raise_for_status()

{mainsequence-6.0.35 → mainsequence-6.0.37}/mainsequence/cli/cli.py

@@ -9786,7 +9786,7 @@ def project_set_up_locally(
     Clone a project locally and provision runtime `.env`.
 
     Workflow:
-    - ensure SSH key and optionally register deploy key,
+    - ensure an SSH key and optionally register it through the owning Project,
     - clone repository into local projects root,
     - build local runtime auth/backend entries for the active auth mode,
     - write/update `.env` with local runtime values.
@@ -9832,7 +9832,6 @@ def project_set_up_locally(
         error(str(e))
         raise typer.Exit(1) from e
 
-    project_branch_uid = str(project_branch.get("uid") or "").strip()
     repository_branch = str(project_branch.get("repository_branch") or "").strip()
     is_initialized = project_branch.get("is_initialized")
 
@@ -9857,10 +9856,10 @@ def project_set_up_locally(
     key_path, _pub_path, pub = ensure_key_for_repo(repo)
     copied = _copy_clipboard(pub)
 
-    # Best-effort deploy key (do not fail set-up-locally on this)
+    # Best-effort Project-owned deploy key (do not fail set-up-locally on this)
     try:
         host = platform.node()
-        add_deploy_key(project_branch_uid, host, pub)
+        add_deploy_key(project_uid, host, pub)
     except Exception as e:
         warn(f"Could not add deploy key automatically (continuing): {e}")
 

{mainsequence-6.0.35 → mainsequence-6.0.37}/mainsequence/client/agent_runtime_models.py

@@ -431,6 +431,10 @@ class Agent(ShareableObjectMixin, BaseObjectOrm, BasePydanticModel):
         - Send exactly one lookup key: `session_uid` or `handle_unique_id`.
         - `session_uid` resolves an existing AgentSession for this Agent.
         - `handle_unique_id` gets or creates a reusable session handle.
+        - For ordinary User requests, the backend owns a root session with that User.
+        - For runtime A2A requests, `parent_session_uid` proves the calling Agent;
+          the backend inherits the parent session User into the child and handle.
+        - The SDK never supplies a credential owner or forwards provider credentials.
         - Creation options are valid only with `handle_unique_id`.
         - Response is the canonical AgentSessionSerializer payload.
         """
@@ -1261,7 +1265,12 @@ class AgentSession(BaseObjectOrm, BasePydanticModel):
         None, description="Public UID of the agent definition used for this session."
     )
     created_by_user_uid: str | None = Field(
-        None, description="Public UID of the actor who created the session."
+        None,
+        description=(
+            "Public UID of the session invocation and model-provider credential "
+            "owner. For delegated sessions this is inherited from the immediate "
+            "parent and may differ from the runtime responsible User."
+        ),
     )
     parent_session_uid: str | None = Field(
         None, description="Public UID of the parent session, if any."
@@ -1273,7 +1282,7 @@ class AgentSession(BaseObjectOrm, BasePydanticModel):
     created_by_user: int | None = Field(
         None,
         exclude=True,
-        description="Legacy internal user id of the actor who created the session record.",
+        description="Legacy internal user id for the session owner.",
     )
     agent: int | Agent | None = Field(
         None,

{mainsequence-6.0.35 → mainsequence-6.0.37}/mainsequence/client/models_foundry.py

@@ -442,6 +442,21 @@ class Project(LabelableObjectMixin, ShareableObjectMixin, BasePydanticModel, Bas
         raise_for_response(r)
         return ProjectBulkDeleteResponse.model_validate(r.json())
 
+    def add_deploy_key(self, *, key_title: str, public_key: str, timeout=None) -> None:
+        """Register a repository deploy key through the owning Project."""
+        r = make_request(
+            s=type(self).build_session(),
+            loaders=type(self).LOADERS,
+            r_type="POST",
+            url=(
+                f"{type(self).get_object_url()}/{self._public_detail_reference()}"
+                "/add-deploy-key/"
+            ),
+            payload={"json": {"key_title": key_title, "public_key": public_key}},
+            time_out=timeout,
+        )
+        raise_for_response(r)
+
     def __str__(self):
         return yaml.safe_dump(
             self.model_dump(),
@@ -523,17 +538,6 @@ class ProjectBranch(BasePydanticModel, BaseObjectOrm):
         raise_for_response(r)
         return r.json()
 
-    def add_deploy_key(self, *, key_title: str, public_key: str, timeout=None) -> None:
-        r = make_request(
-            s=type(self).build_session(),
-            loaders=type(self).LOADERS,
-            r_type="POST",
-            url=self._action_url("add-deploy-key"),
-            payload={"json": {"key_title": key_title, "public_key": public_key}},
-            time_out=timeout,
-        )
-        raise_for_response(r)
-
     def get_data_nodes_updates(self, *, timeout: int | None = None) -> list[Any]:
         from .metatables import DataNodeUpdate
 

{mainsequence-6.0.35 → mainsequence-6.0.37}/mainsequence.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mainsequence
-Version: 6.0.35
+Version: 6.0.37
 Summary: Main Sequence SDK 
 Author-email: Main Sequence GmbH <dev@main-sequence.io>
 License-Expression: LicenseRef-MainSequence-Proprietary

{mainsequence-6.0.35 → mainsequence-6.0.37}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "mainsequence"
-version = "6.0.35"
+version = "6.0.37"
 description = "Main Sequence SDK "
 readme = "README.md"
 requires-python = ">=3.13"

{mainsequence-6.0.35 → mainsequence-6.0.37}/tests/test_cli.py

@@ -2578,6 +2578,31 @@ def test_get_current_user_profile_accepts_top_level_organization_object(cli_mod,
     assert out == {"username": "jose@main-sequence.io", "organization": "Main Sequence Dev"}
 
 
+def test_add_deploy_key_uses_project_route(cli_mod, monkeypatch):
+    api_mod = importlib.import_module("mainsequence.cli.api")
+    captured = {}
+
+    class _Response:
+        @staticmethod
+        def raise_for_status():
+            return None
+
+    def _authed(method, path, body=None):
+        captured.update(method=method, path=path, body=body)
+        return _Response()
+
+    monkeypatch.setattr(api_mod, "resolve_project_uid", lambda project_ref: "project-uid-123")
+    monkeypatch.setattr(api_mod, "authed", _authed)
+
+    api_mod.add_deploy_key("project-uid-123", "workstation", "ssh-ed25519 AAA test")
+
+    assert captured == {
+        "method": "POST",
+        "path": "/api/v1/projects/project-uid-123/add-deploy-key/",
+        "body": {"key_title": "workstation", "public_key": "ssh-ed25519 AAA test"},
+    }
+
+
 def test_render_project_branch_default_redeployment_tag_uses_backend_contract(
     cli_mod,
     monkeypatch,
@@ -9537,7 +9562,12 @@ def test_project_set_up_locally(cli_mod, runner, monkeypatch, tmp_path):
         cli_mod, "ensure_key_for_repo", lambda repo: (key, pub, "ssh-ed25519 AAA test")
     )
     monkeypatch.setattr(cli_mod, "_copy_clipboard", lambda txt: True)
-    monkeypatch.setattr(cli_mod, "add_deploy_key", lambda *a, **k: None)
+    deploy_key_requests = []
+    monkeypatch.setattr(
+        cli_mod,
+        "add_deploy_key",
+        lambda *args, **kwargs: deploy_key_requests.append((args, kwargs)),
+    )
     monkeypatch.setattr(cli_mod, "start_agent_and_add_key", lambda *_: {})
 
     def _clone(cmd, env=None, cwd=None):
@@ -9558,6 +9588,10 @@ def test_project_set_up_locally(cli_mod, runner, monkeypatch, tmp_path):
     )
     assert result.exit_code == 0
     assert repository_requests == ["repository-uid-123"]
+    assert len(deploy_key_requests) == 1
+    assert deploy_key_requests[0][0][0] == "project-uid-123"
+    assert deploy_key_requests[0][0][2] == "ssh-ed25519 AAA test"
+    assert deploy_key_requests[0][1] == {}
 
     env_file = base / "org" / "projects" / "demo-project-uid-123" / ".env"
     assert env_file.exists()
@@ -9628,7 +9662,12 @@ def test_project_set_up_locally_runtime_credential(cli_mod, runner, monkeypatch,
         cli_mod, "ensure_key_for_repo", lambda repo: (key, pub, "ssh-ed25519 AAA test")
     )
     monkeypatch.setattr(cli_mod, "_copy_clipboard", lambda txt: True)
-    monkeypatch.setattr(cli_mod, "add_deploy_key", lambda *a, **k: None)
+    deploy_key_requests = []
+    monkeypatch.setattr(
+        cli_mod,
+        "add_deploy_key",
+        lambda *args, **kwargs: deploy_key_requests.append((args, kwargs)),
+    )
     monkeypatch.setattr(cli_mod, "start_agent_and_add_key", lambda *_: {})
 
     def _clone(cmd, env=None, cwd=None):
@@ -9654,6 +9693,10 @@ def test_project_set_up_locally_runtime_credential(cli_mod, runner, monkeypatch,
     )
     assert result.exit_code == 0
     assert repository_requests == ["repository-uid-123"]
+    assert len(deploy_key_requests) == 1
+    assert deploy_key_requests[0][0][0] == "project-uid-123"
+    assert deploy_key_requests[0][0][2] == "ssh-ed25519 AAA test"
+    assert deploy_key_requests[0][1] == {}
 
     env_file = base / "org" / "projects" / "demo-project-uid-123" / ".env"
     env_text = env_file.read_text(encoding="utf-8")

{mainsequence-6.0.35 → mainsequence-6.0.37}/tests/test_project_branch_contract.py

@@ -186,6 +186,36 @@ def test_project_bulk_delete_uses_selection_and_options(monkeypatch):
     }
 
 
+def test_project_add_deploy_key_uses_project_route(monkeypatch):
+    captured = {}
+    project = models_foundry.Project(**logical_project_payload())
+
+    def fake_make_request(**kwargs):
+        captured.update(kwargs)
+        return FakeResponse(None)
+
+    monkeypatch.setattr(
+        models_foundry.Project,
+        "get_object_url",
+        classmethod(lambda cls: "https://api/projects"),
+    )
+    monkeypatch.setattr(
+        models_foundry.Project,
+        "build_session",
+        classmethod(lambda cls: object()),
+    )
+    monkeypatch.setattr(models_foundry, "make_request", fake_make_request)
+
+    project.add_deploy_key(key_title="workstation", public_key="ssh-ed25519 AAA test")
+
+    assert captured["r_type"] == "POST"
+    assert captured["url"] == f"https://api/projects/{PROJECT_UID}/add-deploy-key/"
+    assert captured["payload"] == {
+        "json": {"key_title": "workstation", "public_key": "ssh-ed25519 AAA test"}
+    }
+    assert not hasattr(models_foundry.ProjectBranch, "add_deploy_key")
+
+
 def test_project_branch_summary_uses_branch_route(monkeypatch):
     captured = {}
     branch = models_foundry.ProjectBranch(**project_branch_payload())