managed-deepagents 0.6.2.dev44__py3-none-win_amd64.whl → 0.6.2.dev46__py3-none-win_amd64.whl

managed_deepagents/_agent_auth.py

@@ -65,8 +65,15 @@ def clear_principal_resolve_cache_for_tests() -> None:
     _principal_resolve_cache.clear()
 
 
-def _principal_resolve_cache_key(identity: ResolvePrincipalIdentity) -> str:
-    return f"{identity['provider']}\0{identity['issuer']}\0{identity['subject']}"
+def _principal_resolve_cache_key(
+    context: AgentAuthContext, identity: ResolvePrincipalIdentity
+) -> str:
+    origin = context.base_url.rstrip("/")
+    workspace = (context.workspace_id or "").strip()
+    return (
+        f"{origin}\0{workspace}\0"
+        f"{identity['provider']}\0{identity['issuer']}\0{identity['subject']}"
+    )
 
 
 class PendingAuthorization(TypedDict):
@@ -145,17 +152,14 @@ class AgentAuth:
                 "Agent Auth principal resolve requires provider, issuer, and subject"
             )
         key = _principal_resolve_cache_key(
-            {"provider": provider, "issuer": issuer, "subject": subject}
+            self.context, {"provider": provider, "issuer": issuer, "subject": subject}
         )
         cached = _principal_resolve_cache.get(key)
         if cached is not None:
             return cached
-        try:
-            principal_id = self._resolve_principal_uncached(
-                {"provider": provider, "issuer": issuer, "subject": subject}
-            )
-        except Exception:
-            raise
+        principal_id = self._resolve_principal_uncached(
+            {"provider": provider, "issuer": issuer, "subject": subject}
+        )
         _principal_resolve_cache[key] = principal_id
         return principal_id
 

managed_deepagents/_connections.py

@@ -24,6 +24,7 @@ from managed_deepagents._agent_auth import (
     AgentAuth,
     AgentAuthContext,
     CredentialAuthorizationRequiredError,
+    ResolvePrincipalIdentity,
     WorkspaceConnection,
     clear_principal_resolve_cache_for_tests,
 )
@@ -476,7 +477,7 @@ def resolve_credential_principal_id(
 def _external_identity_for_resolve(
     identity: RuntimeIdentity,
     workspace_id: str | None,
-) -> dict[str, str] | None:
+) -> ResolvePrincipalIdentity | None:
     user = identity.get("user") or {}
     subject = user.get("id") if isinstance(user, Mapping) else None
     if not isinstance(subject, str) or not subject.strip():

managed_deepagents/_identity_auth.py

@@ -16,7 +16,6 @@ import asyncio
 import hmac
 import json
 import os
-import re
 from collections.abc import Callable, Iterable, Mapping
 from http import HTTPStatus
 from importlib import import_module
@@ -65,17 +64,6 @@ class ManagedUser(ManagedUserRequired, total=False):
     mda_agent_auth_principal_id: str
 
 
-_AGENT_AUTH_PRINCIPAL_ID = re.compile(
-    r"^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$",
-    re.IGNORECASE,
-)
-
-
-def is_agent_auth_principal_id(value: str) -> bool:
-    """True when ``value`` is shaped like an Agent Auth principal UUID."""
-    return bool(_AGENT_AUTH_PRINCIPAL_ID.fullmatch(value.strip()))
-
-
 if TYPE_CHECKING:
     from managed_deepagents.identity import (
         HttpIngress,
@@ -104,6 +92,8 @@ INGRESS_SECRET_HEADER = "x-mda-ingress-secret"  # noqa: S105 - header name, not
 #: Internal handoff headers — accepted after a server API key or legacy ingress secret validates.
 SOURCE_PROVIDER_HEADER = "x-mda-source-provider"
 SOURCE_THREAD_HEADER = "x-mda-source-thread-id"
+#: Trigger loopback stamp for a verified identity_context principal UUID.
+AGENT_AUTH_PRINCIPAL_HEADER = "x-mda-agent-auth-principal-id"
 
 #: Deployment env var carrying the shared secret the trusted backend presents.
 INGRESS_SECRET_ENV = "MDA_INGRESS_SECRET"  # noqa: S105 - env var name, not a secret
@@ -493,9 +483,9 @@ def _trusted_headers_user(headers: Mapping[str, object]) -> ManagedUser:
     if source_provider is not None and source_thread is not None:
         user["mda_source_provider"] = str(source_provider)
         user["mda_source_thread_id"] = str(source_thread)
-        # Trigger loopback stamps the identity_context principal UUID.
-        if is_agent_auth_principal_id(str(actor)):
-            user["mda_agent_auth_principal_id"] = str(actor)
+        principal = str(headers.get(AGENT_AUTH_PRINCIPAL_HEADER) or "").strip()
+        if principal:
+            user["mda_agent_auth_principal_id"] = principal
     return user
 
 
@@ -516,7 +506,13 @@ def _has_valid_handoff_secret(headers: Mapping[str, object]) -> bool:
 
 def _has_handoff_headers(headers: Mapping[str, object]) -> bool:
     return any(
-        header in headers for header in (USER_HEADER, SOURCE_PROVIDER_HEADER, SOURCE_THREAD_HEADER)
+        header in headers
+        for header in (
+            USER_HEADER,
+            SOURCE_PROVIDER_HEADER,
+            SOURCE_THREAD_HEADER,
+            AGENT_AUTH_PRINCIPAL_HEADER,
+        )
     )
 
 

managed_deepagents/_ingress.py

@@ -19,6 +19,7 @@ from managed_deepagents._channels.assistant_text import extract_assistant_text
 from managed_deepagents._channels.binding import CHANNEL_BINDING_KEY, ChannelBinding
 from managed_deepagents._channels.types import ChannelError
 from managed_deepagents._identity_auth import (
+    AGENT_AUTH_PRINCIPAL_HEADER,
     HANDOFF_SECRET_ENV,
     HANDOFF_SECRET_HEADER,
     INGRESS_SECRET_ENV,
@@ -355,6 +356,7 @@ def _create_trigger_ingress_loopback_client(
         )
     headers = {
         USER_HEADER: user_id,
+        AGENT_AUTH_PRINCIPAL_HEADER: user_id,
         SOURCE_PROVIDER_HEADER: source["provider"],
         SOURCE_THREAD_HEADER: source["thread_key"],
     }

{managed_deepagents-0.6.2.dev44.dist-info → managed_deepagents-0.6.2.dev46.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: managed-deepagents
-Version: 0.6.2.dev44
+Version: 0.6.2.dev46
 Summary: Managed Deep Agents — the define_deep_agent authoring interface plus the CLI that compiles and deploys a code-first Deep Agent repository to a managed LangGraph runtime.
 Author: LangChain
 License: MIT

{managed_deepagents-0.6.2.dev44.dist-info → managed_deepagents-0.6.2.dev46.dist-info}/RECORD

@@ -1,20 +1,20 @@
 managed_deepagents/__init__.py,sha256=RezkpgYxCcywj6_W7Nk3PN9TMBfYyFgIatxGrIeY8V4,1862
 managed_deepagents/__main__.py,sha256=GcjmqN0Ea5v8OHKMxYToasm3eCX_doSLOlpEzAi1tAw,67
-managed_deepagents/_agent_auth.py,sha256=u9qvBjC1FM1U4M96M_juGqR7XI_0VtGEr6GgF9lcZJ0,19886
+managed_deepagents/_agent_auth.py,sha256=TUZJgc1TyjEFNZX3E97VV30igM_bC9rDZ-pmKpUSExA,20010
 managed_deepagents/_agent_auth_http.py,sha256=aCYn7Rrtw3cnK3r4ir4JWxwzFkb7cF7nBgPpNdydxDw,5108
 managed_deepagents/_channel.py,sha256=-Og7QOM1yvV-yeTDOfv2CxXpR2HLY4xdX1bLrIsPi5k,5272
 managed_deepagents/_cli.py,sha256=jVaw2i1ysdRoWziMdPFmRXtKry_baYGRspyzyIeGWoU,1688
-managed_deepagents/_connections.py,sha256=rZnt9CI5BY16N66kR-bgx4pPoAmhNgtV73ejl7IkXhc,19378
+managed_deepagents/_connections.py,sha256=zRqC0uy5FC6rdW9Dbwvpx1ubba6eHb-x7aGSZvONpGk,19418
 managed_deepagents/_connector.py,sha256=Syp0SRs1oFCUUltIUmZbSNi1Ys_PxObVdiAi-I9GBzs,8040
 managed_deepagents/_cors.py,sha256=V96RPrqewdRWG5RpEMEBnPuRq9_zF8nf4vf99k5dkuI,7597
 managed_deepagents/_credential_gate.py,sha256=SNxXunqmHgjBsZpiZu8yp49YkRIO0amkl0-7GHLGnIg,12280
 managed_deepagents/_eval_filesystem.py,sha256=1nuD0yn3gh19JrWNocWyPFyeJW42E7Gse3XRWCUSTAA,1399
 managed_deepagents/_extension.py,sha256=x2H1S8inkvTZQ_dr7kq0M8o8rre1FjzCDvMzItw4iyk,5318
-managed_deepagents/_identity_auth.py,sha256=TvZLzab47LIkLOps3c5yrVuuoekkTc8Mn4bbWOc4zXk,33546
+managed_deepagents/_identity_auth.py,sha256=sykxsL2wzcJI7I0MFs4xkcoviQhfNQGIBFQ0rfP3cXU,33418
 managed_deepagents/_identity_http.py,sha256=aVQfZr7UKQoXF1Dry3p9fzXIj1882sEa668rvhn37i0,16029
 managed_deepagents/_identity_links.py,sha256=Z1H2Seo2KaI-vcdU3_PGM-F06wOz0IQqUP-28wqiQsA,9172
 managed_deepagents/_identity_runtime.py,sha256=FJeJkhCg0Wo8x8hwiLB-9MUS-VBsGVzBzk3JJaDqH0o,24847
-managed_deepagents/_ingress.py,sha256=iqsGm2jZKKn0FqjNn2nJAlR7d-IqCpVKWo6NbMEhjxw,12323
+managed_deepagents/_ingress.py,sha256=8vJqIuyKI3dxC5wbyRPL9ES71xsXgxiTWJqYPpG7Wt0,12402
 managed_deepagents/_log.py,sha256=oYwOO0ZL4-INkge9YJvtLuCxL9zAtgjSPIggVbkcyc8,2932
 managed_deepagents/_loopback.py,sha256=hQ1oNi77XpdUjzZURSBRoMvJ1mGCs-STobfBftGmXuE,2409
 managed_deepagents/_managed_middleware.py,sha256=cfInVHTVjWoy_DBoFlnslfrDf2_n6llGnTGasta4AIo,10295
@@ -28,7 +28,7 @@ managed_deepagents/py.typed,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
 managed_deepagents/runtime.py,sha256=B4iKTJZD0zXx_MZ09pqQFOkVo07tqJDT3qvOBr-0iOk,65782
 managed_deepagents/sandbox.py,sha256=xlpcWa6CoVX6GKip2nK-0Lw-HBCoFGFYm0r4x9eYwcY,2530
 managed_deepagents/schedules.py,sha256=MtTQN4tlm1NizFDCjZZv_huGfbQx-dj9WP1dIBybCug,5237
-managed_deepagents/_binaries/mda.exe,sha256=DAmmuhOtkqW4j92gqsKuXvseKHNVHSJR4SZTPOEeTWA,3905536
+managed_deepagents/_binaries/mda.exe,sha256=fLdjZDHKoYDEbyWC0iDNi4CaMyR0phRPsf1aTUGS4ts,3905536
 managed_deepagents/_channels/__init__.py,sha256=Z6eXmzaLxG09DSyJoY_CX34axcsBo9gSJ0G7pRm2D6M,1216
 managed_deepagents/_channels/assistant_text.py,sha256=f-Z3J3PlQFXZHztgBxlRoqB2LigU1Hj1YpwoXBMTR18,2171
 managed_deepagents/_channels/binding.py,sha256=6vAKbWpg-eyLErJ0SsozH4mZc50hA1NhquM63mVmWDQ,3423
@@ -69,9 +69,9 @@ managed_deepagents/identity/__init__.py,sha256=3KHXJca8w9Xu99_QhJX9iV1xMHTa34NS1
 managed_deepagents/identity/claims.py,sha256=prby7r_8Lww3MmoBm8PX6PsSGE3GwSHkr8mVIz_08nU,1180
 managed_deepagents/identity/options.py,sha256=x_yMbXEFR7zXyehEjDHG2qjAlukXjrRBcQLcM6IndLM,2550
 managed_deepagents/identity/supabase.py,sha256=8uobl3WCrQL_ieSXG8KTLf1th7Qjim9liZT50HeaJE0,6026
-managed_deepagents-0.6.2.dev44.dist-info/licenses/LICENSE,sha256=WnPZQQ608ojZUkXl7BW6VbKloIAibZiGm1K6cjeZOL8,1066
-managed_deepagents-0.6.2.dev44.dist-info/METADATA,sha256=4mbNB9mNXciy5VVqWTsrBUBFC-3LtWDOiK_MJ1w37Ec,14039
-managed_deepagents-0.6.2.dev44.dist-info/WHEEL,sha256=3I5VVWZdsFlU417aCS2bMRuerS8wsfvBq99MyatBV3A,97
-managed_deepagents-0.6.2.dev44.dist-info/entry_points.txt,sha256=ziZqkKuaDO3qHCjKmBhrx9cm3ok8bZ9xcEDpUTj4unM,53
-managed_deepagents-0.6.2.dev44.dist-info/top_level.txt,sha256=fdBo4O0Hlol_w022tTLB5ftZpamb4yJoQ3MUvjgTGfA,19
-managed_deepagents-0.6.2.dev44.dist-info/RECORD,,
+managed_deepagents-0.6.2.dev46.dist-info/licenses/LICENSE,sha256=WnPZQQ608ojZUkXl7BW6VbKloIAibZiGm1K6cjeZOL8,1066
+managed_deepagents-0.6.2.dev46.dist-info/METADATA,sha256=1N01o7C9oOWrkmmpfRxFW95lBu7DORxX_9Wl6fos_t4,14039
+managed_deepagents-0.6.2.dev46.dist-info/WHEEL,sha256=3I5VVWZdsFlU417aCS2bMRuerS8wsfvBq99MyatBV3A,97
+managed_deepagents-0.6.2.dev46.dist-info/entry_points.txt,sha256=ziZqkKuaDO3qHCjKmBhrx9cm3ok8bZ9xcEDpUTj4unM,53
+managed_deepagents-0.6.2.dev46.dist-info/top_level.txt,sha256=fdBo4O0Hlol_w022tTLB5ftZpamb4yJoQ3MUvjgTGfA,19
+managed_deepagents-0.6.2.dev46.dist-info/RECORD,,