mainsequence 6.0.37__tar.gz → 6.0.40__tar.gz

{mainsequence-6.0.37 → mainsequence-6.0.40}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mainsequence
-Version: 6.0.37
+Version: 6.0.40
 Summary: Main Sequence SDK 
 Author-email: Main Sequence GmbH <dev@main-sequence.io>
 License-Expression: LicenseRef-MainSequence-Proprietary

{mainsequence-6.0.37 → mainsequence-6.0.40}/agent_scaffold/skills/data_access/exploration/SKILL.md

@@ -154,6 +154,13 @@ field to filter by:
 - `mainsequence data-node list --filter KEY=VALUE`
 - `mainsequence data-node detail <DATA_NODE_STORAGE_UID>`
 
+Collection listing is scoped to one Organization Environment. Inside a
+registered project checkout, the CLI derives that scope from the process-frozen
+Git-resolved ProjectBranch. Outside one, pass
+`--organization-project-environment-uid <ENVIRONMENT_UID>` explicitly. Direct
+SDK calls use the canonical
+`organization_project_environment_uid=<ENVIRONMENT_UID>` filter.
+
 Column lookup is also a different path. Use it only for schema-name discovery,
 not as the default dataset discovery flow:
 

{mainsequence-6.0.37 → mainsequence-6.0.40}/agent_scaffold/skills/maintenance/project-maintenance/SKILL.md

@@ -32,12 +32,11 @@ Route architecture changes to `project_design`, implementation routing to
 `maintenance/bug_auditor` when diagnosis extends beyond the maintenance
 workflow itself.
 
-The local identity contract has one persisted platform identifier:
-`MAIN_SEQUENCE_PROJECT_UID`, the logical Project UID. The checked-out Git
-branch selects the active ProjectBranch. Never ask the user for a
-ProjectBranch UID, persist `MAIN_SEQUENCE_PROJECT_BRANCH_UID`, or treat a
-ProjectBranch UID as local project configuration. The CLI may resolve that UID
-internally when a branch-owned platform API requires it.
+The local identity contract is Git-native. The containing repository remote,
+attached branch, and exact HEAD commit select the platform Project and
+ProjectBranch. Never ask the user for a ProjectBranch UID, persist Project or
+branch identity in `.env`, or use an environment variable as a branch selector.
+The CLI resolves platform UIDs internally when a branch-owned API requires them.
 
 ## Inspect Before Changing State
 
@@ -53,8 +52,8 @@ internally when a branch-owned platform API requires it.
 
    The `project current` result must report the logical `project_uid`, current
    `git_branch`, `project_branch_uid`, and `project_branch_status=resolved`.
-   Treat a detached checkout, missing logical Project UID, or unresolved/
-   unregistered Git branch as a maintenance preflight failure before any
+   Treat a detached checkout, unresolved repository, or unresolved/unregistered
+   Git branch as a maintenance preflight failure before any
    mutating workflow.
 
 4. Separate existing user changes from changes created by the maintenance
@@ -125,11 +124,10 @@ authorizes a new PKCE grant and the backend returns credentials directly to
 the waiting CLI process.
 
 The command preserves unrelated project configuration and renders only the
-current supported authentication shape. Existing `MAINSEQUENCE_TOKEN` and
-`MAIN_SEQUENCE_PROJECT_ID` entries are not carried into the rewritten file;
-this is not a separate cleanup routine. It preserves the logical
-`MAIN_SEQUENCE_PROJECT_UID` and never writes a ProjectBranch UID; switching Git
-branches changes local branch context without rewriting `.env`.
+current supported authentication shape. It removes legacy token aliases and
+all retired Project, ProjectBranch, repository-branch, and Environment identity
+entries. The Git checkout supplies source identity; switching branches changes
+context on the next process run without rewriting `.env`.
 
 ## Update The Project SDK
 
@@ -192,6 +190,12 @@ a detached checkout and rejects a Git branch that is not registered under the
 logical Project. Do not bypass that validation or supply a ProjectBranch UID
 manually. Register or select the correct Git branch first.
 
+After that branch preflight, `--dry-run` resolves the existing `uv` executable,
+previews its patch version without mutation, requests the backend-owned tag for
+that future version, rejects an invalid or existing local tag, prints the
+complete plan, and returns without generating an SSH key, querying private
+remote refs, changing dependencies or project files, or mutating Git state.
+
 After review:
 
 ```bash
@@ -200,13 +204,20 @@ mainsequence project sync --path . -m "<specific commit message>"
 
 The canonical command always:
 
-1. applies a patch version bump;
-2. runs `uv lock`;
-3. runs `uv sync`;
-4. exports locked production requirements;
-5. stages and commits the changes;
-6. creates an annotated `v<version>` tag; and
-7. pushes the branch and tag with `--follow-tags`.
+1. selects `mainsequence-<repository-slug>-<first-16-sha256>` from the normalized
+   `host[:non-default-port]/repository/path`, never from the repository basename alone and never
+   from a legacy basename-only key;
+2. previews the `uv` patch version, requests the backend-owned ProjectBranch tag, and rejects an
+   invalid or existing local tag;
+3. registers a new or inaccessible key through the owning Project and verifies a dry-run push with
+   that forced identity;
+4. queries the exact tag ref on `origin` and stops if it exists or cannot be checked;
+5. applies the patch version bump and verifies it matches the preview;
+6. runs `uv lock` and `uv sync`;
+7. exports locked production requirements;
+8. stages and commits the changes;
+9. creates the returned annotated tag unchanged; and
+10. atomically pushes the explicit branch and tag refs with `--follow-tags`.
 
 Do not offer alternate bump modes, a no-push mode, or a hand-written sequence
 of equivalent commands. Do not call `sync-after-commit` or any backend repair

{mainsequence-6.0.37 → mainsequence-6.0.40}/agent_scaffold/skills/sdk_project_execution/SKILL.md

@@ -91,22 +91,26 @@ If the user goal or project context is unclear, stop before routing domain work.
 
 ## Resolve Local Project Context From Git
 
-Local project context is composed from two sources:
-
-- `.env` supplies `MAIN_SEQUENCE_PROJECT_UID`, the logical Project aggregate;
-- `git branch --show-current` supplies the active repository branch.
-
-Use `mainsequence project current --debug --json` to verify that pair resolves
+The containing Git worktree is the only source of repository, attached branch,
+and exact commit identity. The SDK normalizes the non-secret repository remote,
+maps it to Project and ProjectBranch through the platform API, resolves once for
+the process, and reuses the immutable result. Authentication selects credentials
+and permissions; it does not select source identity. A `git switch` performed in
+a long-running process takes effect only in the next CLI invocation, worker,
+script, or other process run.
+
+Use `mainsequence project current --debug --json` to verify that Git context resolves
 to `project_branch_status=resolved` and a nonempty `project_branch_uid`. The UID
 is an internal resolution result for branch-owned platform calls; it is not a
-local configuration input. Never require the user to look it up, never persist
-`MAIN_SEQUENCE_PROJECT_BRANCH_UID`, and never infer a branch from collection
-order. A detached checkout or an unregistered Git branch is unresolved project
-context and must block live branch-owned operations.
+local or environment configuration input. Never require the user to look it up,
+persist project identity in `.env`, accept a branch environment override, or
+infer a branch from collection order. Local and deployed project images use the
+same Git algorithm. A detached checkout or an unregistered Git branch is
+unresolved context and must block only live branch-owned operations.
 
 Keep the platform boundaries explicit:
 
-- use the logical Project UID for aggregate identity and Project operations;
+- use the Git-resolved logical Project UID for aggregate identity and Project operations;
 - let the SDK resolve the current Git branch to ProjectBranch only when Jobs,
   images, releases, resources, pods, or other branch-owned APIs require it;
 - treat GitRepository as repository metadata and clone-location ownership;
@@ -114,9 +118,12 @@ Keep the platform boundaries explicit:
 
 For ordinary local implementation, work naturally in the current Git branch.
 Do not make ProjectBranch selection a separate user workflow.
-An unregistered local branch may still use the logical Project default
-DataSource for generic MetaTable/session work. It remains invalid for Jobs,
-images, releases, resources, pods, and every other branch-owned platform API.
+An unregistered local branch remains valid for ordinary local development, but
+it has no ProjectBranch, Environment, or project-derived MetaTables DataSource.
+Only branch-owned operations fail. Register the branch before using Jobs,
+images, releases, resources, platform-managed MetaTables/DataNodes, migrations,
+pods, or other branch-owned platform APIs. Never fall back to another branch or
+to a Project-level default DataSource.
 
 ## Required Decisions
 

{mainsequence-6.0.37 → mainsequence-6.0.40}/mainsequence/bootstrap.py

@@ -20,7 +20,7 @@ def _read_local_env_values(env_path: pathlib.Path) -> dict[str, str]:
         return {}
 
     values: dict[str, str] = {}
-    for key in ("MAINSEQUENCE_ENDPOINT", "MAIN_SEQUENCE_PROJECT_UID"):
+    for key in ("MAINSEQUENCE_ENDPOINT",):
         match = re.search(rf"(?m)^{re.escape(key)}=(.+?)\s*$", content)
         if match:
             values[key] = match.group(1).strip()
@@ -35,7 +35,6 @@ def prime_runtime_env() -> None:
     local_values = _read_local_env_values(pathlib.Path.cwd() / ".env")
 
     _set_if_missing("MAINSEQUENCE_ENDPOINT", local_values.get("MAINSEQUENCE_ENDPOINT"))
-    _set_if_missing("MAIN_SEQUENCE_PROJECT_UID", local_values.get("MAIN_SEQUENCE_PROJECT_UID"))
 
     try:
         from .cli import config as cli_config

{mainsequence-6.0.37 → mainsequence-6.0.40}/mainsequence/cli/api.py

@@ -606,7 +606,6 @@ def _run_sdk_model_operation(
     module_name: str,
     class_name: str,
     operation,
-    project_uid_env: str | None = None,
 ):
     tokens = get_tokens()
     access = (tokens.get("access") or "").strip()
@@ -622,7 +621,6 @@ def _run_sdk_model_operation(
         "MAINSEQUENCE_ACCESS_TOKEN": os.environ.get("MAINSEQUENCE_ACCESS_TOKEN"),
         "MAINSEQUENCE_REFRESH_TOKEN": os.environ.get("MAINSEQUENCE_REFRESH_TOKEN"),
         "MAINSEQUENCE_ENDPOINT": os.environ.get("MAINSEQUENCE_ENDPOINT"),
-        "MAIN_SEQUENCE_PROJECT_UID": os.environ.get("MAIN_SEQUENCE_PROJECT_UID"),
     }
 
     client_utils = None
@@ -639,11 +637,6 @@ def _run_sdk_model_operation(
         else:
             os.environ.pop("MAINSEQUENCE_REFRESH_TOKEN", None)
         os.environ["MAINSEQUENCE_ENDPOINT"] = endpoint
-        if project_uid_env is not None:
-            os.environ["MAIN_SEQUENCE_PROJECT_UID"] = str(project_uid_env)
-        else:
-            os.environ.pop("MAIN_SEQUENCE_PROJECT_UID", None)
-
         from mainsequence.client import utils as _client_utils
         from mainsequence.client.base import BaseObjectOrm
 
@@ -2028,7 +2021,6 @@ def get_project_data_node_updates(
         "MAINSEQUENCE_ACCESS_TOKEN": os.environ.get("MAINSEQUENCE_ACCESS_TOKEN"),
         "MAINSEQUENCE_REFRESH_TOKEN": os.environ.get("MAINSEQUENCE_REFRESH_TOKEN"),
         "MAINSEQUENCE_ENDPOINT": os.environ.get("MAINSEQUENCE_ENDPOINT"),
-        "MAIN_SEQUENCE_PROJECT_UID": os.environ.get("MAIN_SEQUENCE_PROJECT_UID"),
     }
 
     client_utils = None
@@ -2139,7 +2131,6 @@ def create_project_image(
         "MAINSEQUENCE_ACCESS_TOKEN": os.environ.get("MAINSEQUENCE_ACCESS_TOKEN"),
         "MAINSEQUENCE_REFRESH_TOKEN": os.environ.get("MAINSEQUENCE_REFRESH_TOKEN"),
         "MAINSEQUENCE_ENDPOINT": os.environ.get("MAINSEQUENCE_ENDPOINT"),
-        "MAIN_SEQUENCE_PROJECT_UID": os.environ.get("MAIN_SEQUENCE_PROJECT_UID"),
     }
 
     client_utils = None
@@ -2246,7 +2237,6 @@ def list_project_images(
         "MAINSEQUENCE_ACCESS_TOKEN": os.environ.get("MAINSEQUENCE_ACCESS_TOKEN"),
         "MAINSEQUENCE_REFRESH_TOKEN": os.environ.get("MAINSEQUENCE_REFRESH_TOKEN"),
         "MAINSEQUENCE_ENDPOINT": os.environ.get("MAINSEQUENCE_ENDPOINT"),
-        "MAIN_SEQUENCE_PROJECT_UID": os.environ.get("MAIN_SEQUENCE_PROJECT_UID"),
     }
 
     client_utils = None
@@ -2473,7 +2463,6 @@ def list_project_jobs(
         "MAINSEQUENCE_ACCESS_TOKEN": os.environ.get("MAINSEQUENCE_ACCESS_TOKEN"),
         "MAINSEQUENCE_REFRESH_TOKEN": os.environ.get("MAINSEQUENCE_REFRESH_TOKEN"),
         "MAINSEQUENCE_ENDPOINT": os.environ.get("MAINSEQUENCE_ENDPOINT"),
-        "MAIN_SEQUENCE_PROJECT_UID": os.environ.get("MAIN_SEQUENCE_PROJECT_UID"),
     }
 
     client_utils = None
@@ -2509,7 +2498,7 @@ def list_project_jobs(
         extra_filters = dict(filters or {})
         jobs = ClientJob.filter(
             timeout=timeout,
-            **{**extra_filters, "project__uid": resolved_branch_uid},
+            **{**extra_filters, "project_branch_uid": resolved_branch_uid},
         )
 
         out: list[dict[str, Any]] = []
@@ -2585,7 +2574,6 @@ def list_project_resources(
         "MAINSEQUENCE_ACCESS_TOKEN": os.environ.get("MAINSEQUENCE_ACCESS_TOKEN"),
         "MAINSEQUENCE_REFRESH_TOKEN": os.environ.get("MAINSEQUENCE_REFRESH_TOKEN"),
         "MAINSEQUENCE_ENDPOINT": os.environ.get("MAINSEQUENCE_ENDPOINT"),
-        "MAIN_SEQUENCE_PROJECT_UID": os.environ.get("MAIN_SEQUENCE_PROJECT_UID"),
     }
 
     client_utils = None
@@ -4397,7 +4385,6 @@ def create_project_job(
         "MAINSEQUENCE_ACCESS_TOKEN": os.environ.get("MAINSEQUENCE_ACCESS_TOKEN"),
         "MAINSEQUENCE_REFRESH_TOKEN": os.environ.get("MAINSEQUENCE_REFRESH_TOKEN"),
         "MAINSEQUENCE_ENDPOINT": os.environ.get("MAINSEQUENCE_ENDPOINT"),
-        "MAIN_SEQUENCE_PROJECT_UID": os.environ.get("MAIN_SEQUENCE_PROJECT_UID"),
     }
 
     client_utils = None
@@ -5021,7 +5008,6 @@ def list_github_organizations() -> list[dict]:
 def create_project(
     *,
     project_name: str,
-    default_metatables_data_source_uid: str,
     project_type: str = "python",
     default_base_image_uid: str | None = None,
     github_org_uid: str | None = None,
@@ -5036,9 +5022,6 @@ def create_project(
         "project_type": project_type,
     }
 
-    if default_metatables_data_source_uid in (None, ""):
-        raise ValueError("default_metatables_data_source_uid is required")
-    payload["default_metatables_data_source_uid"] = str(default_metatables_data_source_uid)
     if default_base_image_uid not in (None, ""):
         payload["default_base_image_uid"] = str(default_base_image_uid)
     if github_org_uid not in (None, ""):