managed-deepagents 0.6.2.dev2__py3-none-win_amd64.whl → 0.6.2.dev4__py3-none-win_amd64.whl

managed_deepagents/__init__.py

@@ -17,7 +17,6 @@ from __future__ import annotations
 
 from managed_deepagents._managed_tools import (
     ManagedDeepAgentRuntime,
-    ManagedRuntimeExtras,
 )
 from managed_deepagents.define_deep_agent import DeepAgentDefinition, define_deep_agent
 from managed_deepagents.define_memory import MemoryDefinition, define_memory
@@ -34,7 +33,6 @@ from managed_deepagents.schedules import define_schedule
 __all__ = [
     "DeepAgentDefinition",
     "ManagedDeepAgentRuntime",
-    "ManagedRuntimeExtras",
     "MemoryDefinition",
     "SandboxDefinition",
     "auth",

managed_deepagents/_channel.py

@@ -19,7 +19,6 @@ __all__ = [
     "ChannelEventsContext",
     "ChannelRequirements",
     "collect_channels",
-    "has_ingress_channels",
     "is_channel",
     "requirements_from_channels",
 ]
@@ -135,11 +134,6 @@ def _channel_stem_name(source: str) -> str:
     return base
 
 
-def has_ingress_channels(channels: Sequence[object] | None) -> bool:
-    """Return ``True`` when any channel can start an ingress run via ``events``."""
-    return any(callable(getattr(channel, "events", None)) for channel in channels or ())
-
-
 def requirements_from_channels(
     channels: Sequence[object],
 ) -> dict[str, ChannelRequirements]:

managed_deepagents/_channels/__init__.py

@@ -18,30 +18,24 @@ from managed_deepagents._channels.binding import (
 from managed_deepagents._channels.runtime import create_runtime_channel
 from managed_deepagents._channels.schedule_delivery import (
     create_schedule_delivery_middleware,
-    deliver_schedule_result,
-    read_schedule_deliver_to,
 )
 from managed_deepagents._channels.store import InMemoryChannelStore
 from managed_deepagents._channels.types import (
-    CHANNEL_ERROR_CODES,
     ChannelError,
     normalize_channel_destination,
 )
 
 __all__ = [
     "CHANNEL_BINDING_KEY",
-    "CHANNEL_ERROR_CODES",
     "SLACK_BOT_TOKEN_ENV",
     "ChannelError",
     "InMemoryChannelStore",
     "clear_final_posted",
     "create_runtime_channel",
     "create_schedule_delivery_middleware",
-    "deliver_schedule_result",
     "extract_assistant_text",
     "mark_final_posted",
     "normalize_channel_destination",
-    "read_schedule_deliver_to",
     "resolve_runtime_channel",
     "was_delivery_final_posted",
 ]

managed_deepagents/_channels/messaging_registry.py

@@ -20,7 +20,6 @@ _by_name: dict[str, MessagingFactory] = {}
 _trusted_providers: set[str] = {"slack"}
 
 __all__ = [
-    "clear_messaging_registry",
     "messaging_transport_for_name",
     "register_channel_messaging",
     "register_connector_messaging",
@@ -65,13 +64,6 @@ def register_connector_messaging(connectors: Sequence[object]) -> None:
     _register_messaging_sources(connectors)
 
 
-def clear_messaging_registry() -> None:
-    """Clear the registry (tests)."""
-    _by_name.clear()
-    _trusted_providers.clear()
-    _trusted_providers.update({"slack"})
-
-
 def messaging_transport_for_name(
     name: str, env: Mapping[str, str] | None = None
 ) -> ChannelTransport | None:

managed_deepagents/_channels/types.py

@@ -24,19 +24,6 @@ ChannelErrorCode = Literal[
     "channel_provider_rejected",
 ]
 
-CHANNEL_ERROR_CODES: tuple[ChannelErrorCode, ...] = (
-    "channel_invalid_signature",
-    "channel_replay_rejected",
-    "channel_installation_not_found",
-    "channel_event_filtered",
-    "channel_identity_unresolvable",
-    "channel_destination_forbidden",
-    "channel_invocation_rate_limited",
-    "channel_run_failed",
-    "channel_provider_rate_limited",
-    "channel_provider_rejected",
-)
-
 
 class ChannelAddressRequired(TypedDict):
     conversation_id: str
@@ -177,7 +164,6 @@ def normalize_channel_destination(
 
 
 __all__ = [
-    "CHANNEL_ERROR_CODES",
     "ChannelAddress",
     "ChannelAttachmentRef",
     "ChannelCapabilities",

managed_deepagents/_connector.py

@@ -21,7 +21,6 @@ __all__ = [
     "EventsContext",
     "SandboxContext",
     "collect_connectors",
-    "has_ingress_connectors",
     "has_sandbox_connectors",
     "is_connector",
     "load_connector_tools",
@@ -201,11 +200,6 @@ def has_sandbox_connectors(connectors: Sequence[object] | None) -> bool:
     return any(callable(getattr(connector, "sandbox", None)) for connector in connectors or ())
 
 
-def has_ingress_connectors(connectors: Sequence[object] | None) -> bool:
-    """Return ``True`` when any connector can start an ingress run via ``events``."""
-    return any(callable(getattr(connector, "events", None)) for connector in connectors or ())
-
-
 def requirements_from_connectors(
     connectors: Sequence[object],
 ) -> dict[str, ConnectorRequirements]:

managed_deepagents/_cors.py

@@ -9,11 +9,12 @@ and other built-ins are not double-headed.
 :data:`MDA_PUBLIC_APP_URL_ENV` plus optional :data:`MDA_CORS_ORIGINS_ENV`.
 
 Subdomain policy: an allowlisted origin also permits **one** DNS label beneath
-it (e.g. Cloudflare Pages previews under a project apex). Deeper nesting is
-rejected. With ``allow_credentials=True``, do not put hosts that issue
-attacker-reachable subdomains into :data:`MDA_CORS_ORIGINS_ENV` / the public
-app URL — a malicious page on such a subdomain could read credentialed
-``/connectors`` and ``/channels`` responses.
+it (e.g. Cloudflare Pages previews under a project apex) **on the same scheme**.
+Deeper nesting is rejected, and ``http://`` is never reflected for an
+``https://`` allowlist entry (or the reverse). With ``allow_credentials=True``,
+do not put hosts that issue attacker-reachable subdomains into
+:data:`MDA_CORS_ORIGINS_ENV` / the public app URL — a malicious page on such a
+subdomain could read credentialed ``/connectors`` and ``/channels`` responses.
 """
 
 from __future__ import annotations
@@ -96,9 +97,10 @@ def _is_single_subdomain(request_host: str, allowed_host: str) -> bool:
 def match_cors_origin(request_origin: str, allowlist: list[str]) -> str | None:
     """Return ``request_origin`` when allowed, otherwise ``None``.
 
-    Mirrors TypeScript ``matchCorsOrigin`` (exact host or one subdomain label).
-    Starlette has no origin callback, so production uses
-    :func:`_cors_origin_regex` instead; keep this helper for tests / policy parity.
+    Mirrors TypeScript ``matchCorsOrigin`` (exact origin, or one subdomain
+    label on the same scheme). Starlette has no origin callback, so production
+    uses :func:`_cors_origin_regex` instead; keep this helper for tests / policy
+    parity.
     """
     parsed = urlparse(request_origin)
     if not parsed.scheme or not parsed.netloc:
@@ -108,8 +110,9 @@ def match_cors_origin(request_origin: str, allowlist: list[str]) -> str | None:
         return origin
     request_host = parsed.netloc
     for allowed in allowlist:
-        allowed_host = urlparse(allowed).netloc
-        if not allowed_host:
+        allowed_parsed = urlparse(allowed)
+        allowed_host = allowed_parsed.netloc
+        if not allowed_host or parsed.scheme != allowed_parsed.scheme:
             continue
         if request_host == allowed_host or _is_single_subdomain(request_host, allowed_host):
             return origin

managed_deepagents/_identity_http.py

@@ -42,7 +42,7 @@ from managed_deepagents.identity import (
     RuntimeIdentity,
 )
 
-CHANNEL_EVENTS_MAX_BODY_BYTES = 1024 * 1024
+EVENTS_MAX_BODY_BYTES = 1024 * 1024
 
 RouteResult = object | Awaitable[object]
 PublicRouteHandler = Callable[[HttpRequestLike], RouteResult]
@@ -204,9 +204,9 @@ def _channel_events_route(
         if not callable(events):
             raise TypeError(f'channel "{name}" is missing events')
         try:
-            raw_body = await _read_limited_channel_body(request)
+            raw_body = await _read_limited_events_body(request)
             if raw_body is None:
-                return responses.PlainTextResponse("Payload Too Large", status_code=413)
+                return responses.JSONResponse({"error": "payload too large"}, status_code=413)
             result = events(
                 {
                     "name": name,
@@ -225,12 +225,12 @@ def _channel_events_route(
     return cast("StarletteRoute", routing.Route(path, events_handler, methods=["POST"]))
 
 
-async def _read_limited_channel_body(request: HttpRequestLike) -> bytes | None:
+async def _read_limited_events_body(request: HttpRequestLike) -> bytes | None:
     stream = getattr(request, "stream", None)
     if not callable(stream):
         body_method = getattr(request, "body", None)
         body = await body_method() if callable(body_method) else b""
-        if isinstance(body, bytes) and len(body) <= CHANNEL_EVENTS_MAX_BODY_BYTES:
+        if isinstance(body, bytes) and len(body) <= EVENTS_MAX_BODY_BYTES:
             return body
         return None
 
@@ -238,7 +238,7 @@ async def _read_limited_channel_body(request: HttpRequestLike) -> bytes | None:
     size = 0
     async for chunk in stream():
         size += len(chunk)
-        if size > CHANNEL_EVENTS_MAX_BODY_BYTES:
+        if size > EVENTS_MAX_BODY_BYTES:
             return None
         chunks.append(chunk)
     return b"".join(chunks)
@@ -261,22 +261,28 @@ def _connector_events_route(
     )
 
     async def events_handler(request: HttpRequestLike) -> object:
-        body_method = getattr(request, "body", None)
-        raw_body = await body_method() if callable(body_method) else b""
+        responses = import_module("starlette.responses")
         events = getattr(connector, "events", None)
         if not callable(events):
             raise TypeError(f'connector "{name}" is missing events')
-        result = events(
-            {
-                "name": name,
-                "request": request,
-                "raw_body": raw_body,
-                "connector": connector,
-            }
-        )
-        if inspect.isawaitable(result):
-            result = await result
-        return result
+        try:
+            raw_body = await _read_limited_events_body(request)
+            if raw_body is None:
+                return responses.JSONResponse({"error": "payload too large"}, status_code=413)
+            result = events(
+                {
+                    "name": name,
+                    "request": request,
+                    "raw_body": raw_body,
+                    "connector": connector,
+                }
+            )
+            if inspect.isawaitable(result):
+                result = await result
+            return result
+        except Exception as error:  # noqa: BLE001 - log a safe label, keep the HTTP body opaque
+            logger.error("POST %s failed (%s)", path, logger.safe_error_label(error))
+            return responses.JSONResponse({"error": "internal error"}, status_code=500)
 
     return cast("StarletteRoute", routing.Route(path, events_handler, methods=["POST"]))
 

managed_deepagents/runtime.py

@@ -25,13 +25,11 @@ from typing import TYPE_CHECKING, Any, Literal, Protocol, TypedDict, cast
 from managed_deepagents._channel import (
     Channel,
     collect_channels,
-    has_ingress_channels,
     requirements_from_channels,
 )
 from managed_deepagents._connector import (
     Connector,
     collect_connectors,
-    has_ingress_connectors,
     has_sandbox_connectors,
     load_connector_tools,
     requirements_from_connectors,
@@ -40,21 +38,9 @@ from managed_deepagents._connector import (
 from managed_deepagents._eval_filesystem import create_eval_trial_filesystem_backend
 from managed_deepagents._identity_auth import build_managed_auth
 from managed_deepagents._identity_http import build_managed_http_app
-from managed_deepagents._identity_runtime import (
-    build_runtime_identity,
-    resolve_runtime_configurable,
-    sanitize_configurable,
-)
-from managed_deepagents._managed_middleware import (
-    managed_middleware_overrides,
-    with_managed_middleware,
-    wrap_middleware_with_managed_runtime,
-)
-from managed_deepagents._managed_tools import (
-    managed_runtime_overrides,
-    with_managed_runtime,
-    wrap_tools_with_managed_runtime,
-)
+from managed_deepagents._identity_runtime import resolve_runtime_configurable
+from managed_deepagents._managed_middleware import wrap_middleware_with_managed_runtime
+from managed_deepagents._managed_tools import wrap_tools_with_managed_runtime
 from managed_deepagents._memory import (
     managed_context_backend as _managed_context_backend,
 )
@@ -140,25 +126,15 @@ __all__ = [
     "RECIPE_SNAPSHOT_ENV",
     "build_managed_auth",
     "build_managed_http_app",
-    "build_runtime_identity",
     "collect_channels",
     "collect_connectors",
     "compile_managed_agent",
     "compile_managed_agent_for_eval",
-    "has_ingress_channels",
-    "has_ingress_connectors",
     "has_sandbox_connectors",
     "load_connector_tools",
-    "managed_middleware_overrides",
-    "managed_runtime_overrides",
     "requirements_from_channels",
     "requirements_from_connectors",
     "run_connector_sandbox_hooks",
-    "sanitize_configurable",
-    "with_managed_middleware",
-    "with_managed_runtime",
-    "wrap_middleware_with_managed_runtime",
-    "wrap_tools_with_managed_runtime",
 ]
 
 

{managed_deepagents-0.6.2.dev2.dist-info → managed_deepagents-0.6.2.dev4.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: managed-deepagents
-Version: 0.6.2.dev2
+Version: 0.6.2.dev4
 Summary: Managed Deep Agents — the define_deep_agent authoring interface plus the CLI that compiles and deploys a code-first Deep Agent repository to a managed LangGraph runtime.
 Author: LangChain
 License: MIT

{managed_deepagents-0.6.2.dev2.dist-info → managed_deepagents-0.6.2.dev4.dist-info}/RECORD

@@ -1,13 +1,13 @@
-managed_deepagents/__init__.py,sha256=dwW3AxLgL9ZPZEWngXOzvKYYg8-yz-0w11qXQV2swZM,1490
+managed_deepagents/__init__.py,sha256=I4zM2GVyFXqvGvQ8qjglphHcaNdMUAq1nSdBTOCMZSs,1436
 managed_deepagents/__main__.py,sha256=GcjmqN0Ea5v8OHKMxYToasm3eCX_doSLOlpEzAi1tAw,67
-managed_deepagents/_channel.py,sha256=FzPac3TaQ9TJbwMN_BX9ip2rDFJ_wTpbvEqlh3vuDbI,5544
+managed_deepagents/_channel.py,sha256=-Og7QOM1yvV-yeTDOfv2CxXpR2HLY4xdX1bLrIsPi5k,5272
 managed_deepagents/_cli.py,sha256=jVaw2i1ysdRoWziMdPFmRXtKry_baYGRspyzyIeGWoU,1688
-managed_deepagents/_connector.py,sha256=nYlVnh2K5TXTa9a0GPecgyz3-CUJ7wHFC8WYXtnw0p4,8326
-managed_deepagents/_cors.py,sha256=MKT5DQwIhCpHDOcb6RwR1XIJBsrWRbUwh0t0Q9Ur5oc,7377
+managed_deepagents/_connector.py,sha256=Syp0SRs1oFCUUltIUmZbSNi1Ys_PxObVdiAi-I9GBzs,8040
+managed_deepagents/_cors.py,sha256=V96RPrqewdRWG5RpEMEBnPuRq9_zF8nf4vf99k5dkuI,7597
 managed_deepagents/_eval_filesystem.py,sha256=1nuD0yn3gh19JrWNocWyPFyeJW42E7Gse3XRWCUSTAA,1399
 managed_deepagents/_extension.py,sha256=x2H1S8inkvTZQ_dr7kq0M8o8rre1FjzCDvMzItw4iyk,5318
 managed_deepagents/_identity_auth.py,sha256=M8SHwh18aQhf8QEgVfLiX0vaH6kBqW3Ic0nmuEffjrE,26866
-managed_deepagents/_identity_http.py,sha256=MuqhmBxkW5tnXN_Nv3NJHzIqlOHpFG7JIpMGNbnK76c,15598
+managed_deepagents/_identity_http.py,sha256=aVQfZr7UKQoXF1Dry3p9fzXIj1882sEa668rvhn37i0,16029
 managed_deepagents/_identity_links.py,sha256=Z1H2Seo2KaI-vcdU3_PGM-F06wOz0IQqUP-28wqiQsA,9172
 managed_deepagents/_identity_runtime.py,sha256=9-8y7OYn2dbiYiWUjLpv-v9cA_Q3bxoPlJtogdnBdCQ,10500
 managed_deepagents/_ingress.py,sha256=mPIb1o60G_pCg4Qotwt-SUloCxY1xXfUTSyN_BPZNts,11581
@@ -21,22 +21,22 @@ managed_deepagents/define_deep_agent.py,sha256=17VfiiBINyhlqlATHrlJRPihKVlBsDGDP
 managed_deepagents/define_memory.py,sha256=n7Ya20dWGvwbZOkPIXoa68nTnJie8tpKEkRwfJQt_fU,5036
 managed_deepagents/namespaces.py,sha256=GS76G19-V5Svfpbca-9xhQfJ6vel52jcJyfj6loLt_Y,4199
 managed_deepagents/py.typed,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
-managed_deepagents/runtime.py,sha256=7-hg8e-iuiMroHo7Jz8teEntYqwF_YSsnHMHqDkEZnw,65296
+managed_deepagents/runtime.py,sha256=vRAFLVxoYKW-MA8C8aei-23NpS-0MRgjSn4WhezFAR8,64712
 managed_deepagents/sandbox.py,sha256=xlpcWa6CoVX6GKip2nK-0Lw-HBCoFGFYm0r4x9eYwcY,2530
 managed_deepagents/schedules.py,sha256=MtTQN4tlm1NizFDCjZZv_huGfbQx-dj9WP1dIBybCug,5237
-managed_deepagents/_binaries/mda.exe,sha256=8vQ1GnmCoEMAElxZtCewtg-v33gX5dvygps_9Cfg2ZQ,3744768
-managed_deepagents/_channels/__init__.py,sha256=c8Pm2PDSahJQHKTtIA5suLP02GdFiny7GstuIF1U0-o,1390
+managed_deepagents/_binaries/mda.exe,sha256=Tq3ggZyrxUsBb7xIMnceQ7qE6PacG3ErM_i928e28q0,3744768
+managed_deepagents/_channels/__init__.py,sha256=Z6eXmzaLxG09DSyJoY_CX34axcsBo9gSJ0G7pRm2D6M,1216
 managed_deepagents/_channels/assistant_text.py,sha256=f-Z3J3PlQFXZHztgBxlRoqB2LigU1Hj1YpwoXBMTR18,2171
 managed_deepagents/_channels/binding.py,sha256=6vAKbWpg-eyLErJ0SsozH4mZc50hA1NhquM63mVmWDQ,3423
 managed_deepagents/_channels/manifest.py,sha256=i9A5kWGC9FUCmtDPSxwoevPo1e8JbIZUMLzsCJdIrag,679
-managed_deepagents/_channels/messaging_registry.py,sha256=9Uy-ch4S9g7vvrINjIGWVU8X7HvnKekrYa21P1mUyPY,2910
+managed_deepagents/_channels/messaging_registry.py,sha256=xCl65CmBkFcakYaDPMLFRrDyNd42WfQPp9TEA6NNx9E,2705
 managed_deepagents/_channels/registry.py,sha256=Y-dYgc1ClR5r1qdyxeQC6kVfOeUnaBP6c3ChwtJEgBg,1610
 managed_deepagents/_channels/registry_store.py,sha256=1jDlzL3WS9TkqjKmHS0zLeNeB7c_0p_NgbayQS9u2ak,705
 managed_deepagents/_channels/response_format.py,sha256=DbXVhj1YyOF0nSr7Lglu440IvAmMA9ulfGXvkmFVsSo,2554
 managed_deepagents/_channels/runtime.py,sha256=86qFJ4lqNUD-dSn5arwL7yHPWd4LKLVmcGAvAkrPSqY,6542
 managed_deepagents/_channels/schedule_delivery.py,sha256=TkN3VAlSc_CeL17Grg2kbP-fJisy-UOBjMIysKhsDGE,10994
 managed_deepagents/_channels/store.py,sha256=NfQyqqB7KiWyGq23Lt79t9I5EPwrKBUvSUWZnx_z7JY,4454
-managed_deepagents/_channels/types.py,sha256=RvVBLM6kM6G2yvZ19WxMzJQB9eTBhibouFgnRGKaw78,5100
+managed_deepagents/_channels/types.py,sha256=E-bQyPeYXmjcUIgu8t4U9nr6O3Aqn_HgSZ0FubEpq2I,4675
 managed_deepagents/_channels/slack/__init__.py,sha256=5d7Su1eGArEYv71RMXy_O5srH0klr9bbSzvyYnS3UFs,9062
 managed_deepagents/_channels/slack/adapter.py,sha256=A0LaxZqGA7vW8YmbQ05NroKy62jMZkQkIAIJMI3lBy4,3428
 managed_deepagents/_channels/slack/http.py,sha256=0mEbhBTFI9b7Bia5zZPkp07dQkN19Ii7k2PcF67bk1Y,20570
@@ -64,9 +64,9 @@ managed_deepagents/identity/__init__.py,sha256=7qfGbOfQf4-5EQT6Ssrf8_CRhkihr-ENf
 managed_deepagents/identity/claims.py,sha256=prby7r_8Lww3MmoBm8PX6PsSGE3GwSHkr8mVIz_08nU,1180
 managed_deepagents/identity/options.py,sha256=x_yMbXEFR7zXyehEjDHG2qjAlukXjrRBcQLcM6IndLM,2550
 managed_deepagents/identity/supabase.py,sha256=8uobl3WCrQL_ieSXG8KTLf1th7Qjim9liZT50HeaJE0,6026
-managed_deepagents-0.6.2.dev2.dist-info/licenses/LICENSE,sha256=WnPZQQ608ojZUkXl7BW6VbKloIAibZiGm1K6cjeZOL8,1066
-managed_deepagents-0.6.2.dev2.dist-info/METADATA,sha256=uVBFsjGHtJGFK9rV8vdP-9uA11Z92IaLUevywVVydew,12848
-managed_deepagents-0.6.2.dev2.dist-info/WHEEL,sha256=3I5VVWZdsFlU417aCS2bMRuerS8wsfvBq99MyatBV3A,97
-managed_deepagents-0.6.2.dev2.dist-info/entry_points.txt,sha256=ziZqkKuaDO3qHCjKmBhrx9cm3ok8bZ9xcEDpUTj4unM,53
-managed_deepagents-0.6.2.dev2.dist-info/top_level.txt,sha256=fdBo4O0Hlol_w022tTLB5ftZpamb4yJoQ3MUvjgTGfA,19
-managed_deepagents-0.6.2.dev2.dist-info/RECORD,,
+managed_deepagents-0.6.2.dev4.dist-info/licenses/LICENSE,sha256=WnPZQQ608ojZUkXl7BW6VbKloIAibZiGm1K6cjeZOL8,1066
+managed_deepagents-0.6.2.dev4.dist-info/METADATA,sha256=0alJE7loSiE2eMsfn7yOu7q7X9iLxMiw4g5WhBviPRU,12848
+managed_deepagents-0.6.2.dev4.dist-info/WHEEL,sha256=3I5VVWZdsFlU417aCS2bMRuerS8wsfvBq99MyatBV3A,97
+managed_deepagents-0.6.2.dev4.dist-info/entry_points.txt,sha256=ziZqkKuaDO3qHCjKmBhrx9cm3ok8bZ9xcEDpUTj4unM,53
+managed_deepagents-0.6.2.dev4.dist-info/top_level.txt,sha256=fdBo4O0Hlol_w022tTLB5ftZpamb4yJoQ3MUvjgTGfA,19
+managed_deepagents-0.6.2.dev4.dist-info/RECORD,,