mobileops-managed-agent 0.3.0__tar.gz → 0.3.2__tar.gz

{mobileops_managed_agent-0.3.0/src/mobileops_managed_agent.egg-info → mobileops_managed_agent-0.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mobileops-managed-agent
-Version: 0.3.0
+Version: 0.3.2
 Summary: Server-side SDK for the MobileOPS Managed Agent API.
 Project-URL: Homepage, https://github.com/InnoMindX/deepagent/tree/main/managed-agent-sdk/python
 Project-URL: Repository, https://github.com/InnoMindX/deepagent

{mobileops_managed_agent-0.3.0 → mobileops_managed_agent-0.3.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "mobileops-managed-agent"
-version = "0.3.0"
+version = "0.3.2"
 description = "Server-side SDK for the MobileOPS Managed Agent API."
 readme = "README.md"
 requires-python = ">=3.10"

{mobileops_managed_agent-0.3.0 → mobileops_managed_agent-0.3.2}/src/mobileops_managed_agent/__init__.py

@@ -65,6 +65,14 @@ from .vaults import (
 )
 
 __all__ = [
+    "ModelRetryEvent",
+    "ModelRetryTracker",
+    "MobileOpsArtifactsClient",
+    "MobileOpsStorageClient",
+    "Artifact",
+    "ArtifactFile",
+    "ArtifactJob",
+    "StorageUsage",
     "MobileOpsManagedAgentClient",
     "MobileOpsAgentClient",
     "MobileOpsFilesClient",
@@ -114,3 +122,16 @@ __all__ = [
     "CredentialVaultReference",
     "validate_credential_vault",
 ]
+
+from .tool_permissions import validate_tool_permissions, TOOL_PERMISSIONS_CONFIG_KEY
+
+from .artifacts import (
+    MobileOpsArtifactsClient,
+    MobileOpsStorageClient,
+    Artifact,
+    ArtifactFile,
+    ArtifactJob,
+    StorageUsage,
+)
+
+from .model_retry import ModelRetryEvent, ModelRetryTracker

mobileops_managed_agent-0.3.2/src/mobileops_managed_agent/artifacts.py

@@ -0,0 +1,134 @@
+"""Persistent deliverables, independent of the sandbox and thread lifetime."""
+
+from __future__ import annotations
+from collections.abc import AsyncIterator
+from typing import Any, TypedDict, Literal
+from urllib.parse import quote, urlencode
+from .resources import MobileOpsResourcesClient, MobileOpsResourcesError
+
+
+class ArtifactFile(TypedDict):
+    path: str
+    size: int
+    sha256: str
+
+
+class Artifact(TypedDict):
+    id: str
+    thread_id: str
+    run_id: str
+    fingerprint: str
+    size_bytes: int
+    files: list[ArtifactFile]
+    created_at: str
+    expires_at: str
+
+
+class ArtifactJob(TypedDict):
+    id: str
+    thread_id: str
+    run_id: str
+    status: Literal["pending", "downloading", "saved", "unchanged", "failed", "cancelled"]
+    artifact_id: str | None
+    error_code: str | None
+    error_message: str | None
+    error_status: int | None
+    created_at: str
+    expires_at: str
+    finished_at: str | None
+
+
+class MobileOpsArtifactJobsClient:
+    def __init__(self, transport: MobileOpsResourcesClient, base: str):
+        self._transport = transport
+        self._base = base
+
+    async def list(self, *, thread_id: str | None = None, run_id: str | None = None, limit: int = 50, offset: int = 0) -> list[ArtifactJob]:
+        query = {"limit": str(limit), "offset": str(offset)}
+        if thread_id is not None:
+            query["thread_id"] = thread_id
+        if run_id is not None:
+            query["run_id"] = run_id
+        return (await self._transport._request_json("GET", self._base + "?" + urlencode(query)))["jobs"]
+
+    async def retrieve(self, job_id: str) -> ArtifactJob:
+        return (await self._transport._request_json("GET", self._base + "/" + quote(job_id, safe="")))["job"]
+
+
+class StorageUsage(TypedDict):
+    used_bytes: int
+    reserved_bytes: int
+    limit_bytes: int | None
+    default_limit_bytes: int
+    effective_limit_bytes: int
+
+
+class MobileOpsArtifactsClient:
+    def __init__(self, **options: Any):
+        self._transport = MobileOpsResourcesClient(**options)
+        self._base = options["api_url"].rstrip("/") + "/context-hub/v1/artifacts"
+        self.jobs = MobileOpsArtifactJobsClient(self._transport, options["api_url"].rstrip("/") + "/context-hub/v1/artifact-jobs")
+
+    async def list(
+        self,
+        *,
+        thread_id: str | None = None,
+        run_id: str | None = None,
+        limit: int = 50,
+        offset: int = 0,
+    ) -> list[Artifact]:
+        query = {"limit": str(limit), "offset": str(offset)}
+        if thread_id is not None:
+            query["thread_id"] = thread_id
+        if run_id is not None:
+            query["run_id"] = run_id
+        return (
+            await self._transport._request_json(
+                "GET", self._base + "?" + urlencode(query)
+            )
+        )["artifacts"]
+
+    async def retrieve(self, artifact_id: str) -> Artifact:
+        return (
+            await self._transport._request_json(
+                "GET", self._base + "/" + quote(artifact_id, safe="")
+            )
+        )["artifact"]
+
+    async def download(self, artifact_id: str) -> AsyncIterator[bytes]:
+        """Stream the ZIP without buffering the whole archive in the SDK."""
+        t = self._transport
+        async with t._client.stream(
+            "GET",
+            self._base + "/" + quote(artifact_id, safe="") + "/content",
+            headers=t._headers,
+        ) as response:
+            if response.is_error:
+                await response.aread()
+                try:
+                    body = response.json()
+                except ValueError:
+                    body = response.text
+                raise MobileOpsResourcesError(response, body)
+            async for chunk in response.aiter_bytes():
+                yield chunk
+
+    async def delete(self, artifact_id: str) -> None:
+        await self._transport._request(
+            "DELETE", self._base + "/" + quote(artifact_id, safe="")
+        )
+
+    async def aclose(self) -> None:
+        await self._transport.aclose()
+
+
+class MobileOpsStorageClient:
+    def __init__(self, **options: Any):
+        self._transport = MobileOpsResourcesClient(**options)
+        self._url = options["api_url"].rstrip("/") + "/context-hub/v1/storage/usage"
+
+    async def usage(self) -> StorageUsage:
+        return await self._transport._request_json("GET", self._url)
+
+    async def aclose(self) -> None:
+        await self._transport.aclose()

{mobileops_managed_agent-0.3.0 → mobileops_managed_agent-0.3.2}/src/mobileops_managed_agent/assistant_model.py

@@ -1,5 +1,7 @@
 from __future__ import annotations
 
+from .tool_permissions import TOOL_PERMISSIONS_CONFIG_KEY, validate_tool_permissions
+
 from typing import Any, NotRequired, TypedDict
 
 from .capabilities import (
@@ -52,6 +54,7 @@ class MobileOpsAssistant(TypedDict, total=False):
     mcp_servers: dict[str, CapabilityMcpServer]
     response_schema: JsonSchema
     sandbox_profile: str
+    tool_permissions: dict[str, Any]
     credential_vault: str
     raw: Any
     created_at: str
@@ -77,7 +80,7 @@ def _map_hub(
 ) -> dict[str, Any]:
     entrypoints = item.get("entrypoints")
     if kind == "memory":
-        if not entrypoints:
+        if "entrypoints" in item and not entrypoints:
             raise TypeError("memory attachments require a non-empty entrypoints list")
     elif entrypoints is not None:
         raise TypeError(
@@ -133,6 +136,7 @@ def to_wire_config(**kwargs: Any) -> MobileOpsAssistantConfig | None:
         and not has_response_schema
         and not has_sandbox_profile
         and not has_credential_vault
+        and "tool_permissions" not in kwargs
     ):
         return None
     configurable: dict[str, Any] = {}
@@ -153,6 +157,10 @@ def to_wire_config(**kwargs: Any) -> MobileOpsAssistantConfig | None:
         configurable[CREDENTIAL_VAULT_CONFIG_KEY] = validate_credential_vault(
             {"ref": credential_vault}
         )
+    if "tool_permissions" in kwargs:
+        configurable[TOOL_PERMISSIONS_CONFIG_KEY] = validate_tool_permissions(
+            kwargs["tool_permissions"], list((kwargs.get("mcp_servers") or {}).keys())
+        )
     return {"configurable": configurable}  # type: ignore[return-value]
 
 
@@ -327,6 +335,10 @@ def from_wire_assistant(raw: object) -> MobileOpsAssistant:
         product["response_schema"] = response_schema
     if sandbox_profile is not None:
         product["sandbox_profile"] = sandbox_profile
+    if configurable and TOOL_PERMISSIONS_CONFIG_KEY in configurable:
+        product["tool_permissions"] = validate_tool_permissions(
+            configurable[TOOL_PERMISSIONS_CONFIG_KEY]
+        )
     if credential_vault is not None:
         product["credential_vault"] = credential_vault
     if isinstance(doc.get("name"), str):

{mobileops_managed_agent-0.3.0 → mobileops_managed_agent-0.3.2}/src/mobileops_managed_agent/assistants.py

@@ -52,6 +52,7 @@ class MobileOpsAssistantsClient:
         response_schema: JsonSchema | None = None,
         sandbox_profile: str | None = None,
         credential_vault: str | None = None,
+        tool_permissions: dict[str, Any] | _NotGiven = _NOT_GIVEN,
         assistant_id: str | None = None,
         if_exists: OnConflictBehavior | None = None,
         context: Context | None = None,
@@ -94,6 +95,8 @@ class MobileOpsAssistantsClient:
         if credential_vault is not None:
             product_kwargs["credential_vault"] = credential_vault
 
+        if not isinstance(tool_permissions, _NotGiven):
+            product_kwargs["tool_permissions"] = tool_permissions
         wire = to_wire_create_kwargs(**product_kwargs)
         native_kwargs = {
             key: wire[key]
@@ -172,6 +175,7 @@ class MobileOpsAssistantsClient:
         response_schema: JsonSchema | None | _NotGiven = _NOT_GIVEN,
         sandbox_profile: str | None | _NotGiven = _NOT_GIVEN,
         credential_vault: str | None | _NotGiven = _NOT_GIVEN,
+        tool_permissions: dict[str, Any] | _NotGiven = _NOT_GIVEN,
         context: Context | None = None,
         headers: Mapping[str, str] | None = None,
         params: QueryParamTypes | None = None,
@@ -212,7 +216,9 @@ class MobileOpsAssistantsClient:
             )
         ) or not isinstance(response_schema, _NotGiven) or not isinstance(
             sandbox_profile, _NotGiven
-        ) or not isinstance(credential_vault, _NotGiven)
+        ) or not isinstance(credential_vault, _NotGiven) or not isinstance(
+            tool_permissions, _NotGiven
+        )
         if changes_config:
             current = await self.get(
                 assistant_id,
@@ -248,6 +254,10 @@ class MobileOpsAssistantsClient:
                 if not isinstance(sandbox_profile, _NotGiven)
                 else current.get("sandbox_profile")
             )
+            if not isinstance(tool_permissions, _NotGiven):
+                product_kwargs["tool_permissions"] = tool_permissions
+            elif "tool_permissions" in current:
+                product_kwargs["tool_permissions"] = current["tool_permissions"]
             product_kwargs["credential_vault"] = (
                 credential_vault
                 if not isinstance(credential_vault, _NotGiven)

{mobileops_managed_agent-0.3.0 → mobileops_managed_agent-0.3.2}/src/mobileops_managed_agent/capabilities.py

@@ -298,7 +298,7 @@ _SIZE_BUDGET_PROXY_HOST = f"{'x' * 253}:65535"
 
 
 def _size_budget_upstream_host(url: object) -> str | None:
-    """Mirror backend auto-Host injection for tunnel absolute-form authority."""
+    """Mirror backend upstream Host configuration for tunneled targets."""
     if not isinstance(url, str) or not url.strip():
         return None
     from urllib.parse import urlparse
@@ -337,7 +337,7 @@ def _assert_mcp_gateway_config_launchable(servers: dict) -> None:
             continue
         # Budget processd backendTunnel + auto Host injected at sandbox setup.
         policies: dict = {
-            "backendTunnel": {"proxy": {"host": _SIZE_BUDGET_PROXY_HOST}},
+            "backendTunnel": {"mode": "connect", "proxy": {"host": _SIZE_BUDGET_PROXY_HOST}},
         }
         headers = server.get("headers")
         header_set: dict = dict(headers) if isinstance(headers, dict) else {}

{mobileops_managed_agent-0.3.0 → mobileops_managed_agent-0.3.2}/src/mobileops_managed_agent/client.py

@@ -11,6 +11,7 @@ from .assistants import MobileOpsAssistantsClient
 from .resources import MobileOpsResourcesClient
 from .sandbox_profiles import MobileOpsSandboxProfilesClient
 from .vaults import MobileOpsVaultsClient
+from .artifacts import MobileOpsArtifactsClient, MobileOpsStorageClient
 
 
 class MobileOpsAgentClient:
@@ -52,6 +53,9 @@ class MobileOpsManagedAgentClient:
                 headers=merged_headers,
             )
         )
+        artifact_options = dict(api_url=api_url, api_key=api_key, headers=headers, http_client=http_client)
+        self.artifacts = MobileOpsArtifactsClient(**artifact_options)
+        self.storage = MobileOpsStorageClient(**artifact_options)
         self.files = MobileOpsFilesClient(
             api_url=api_url,
             api_key=api_key,
@@ -92,7 +96,13 @@ class MobileOpsManagedAgentClient:
                     try:
                         await self.vaults.aclose()
                     finally:
-                        await self.sandbox_profiles.aclose()
+                        try:
+                            await self.sandbox_profiles.aclose()
+                        finally:
+                            try:
+                                await self.artifacts.aclose()
+                            finally:
+                                await self.storage.aclose()
 
     async def __aenter__(self) -> "MobileOpsManagedAgentClient":
         return self

mobileops_managed_agent-0.3.2/src/mobileops_managed_agent/model_retry.py

@@ -0,0 +1,64 @@
+"""Track custom model retry events while consuming the native Run stream."""
+
+from __future__ import annotations
+from collections.abc import Mapping, Sequence
+from typing import Any, Literal, TypedDict
+
+
+class ModelRetryEvent(TypedDict):
+    type: Literal["model_retry"]
+    call_id: str
+    namespace: str
+    phase: Literal["retrying", "resumed", "succeeded", "exhausted"]
+    attempt: int
+    max_retries: int
+    failed_message_ids: list[str]
+    delay_ms: int
+    reason: str | None
+
+
+class ModelRetryTracker:
+    def __init__(self) -> None:
+        self._discarded: set[str] = set()
+        self._active: dict[str, ModelRetryEvent] = {}
+
+    def update(self, value: Any) -> ModelRetryEvent | None:
+        if not isinstance(value, dict) or value.get("type") != "model_retry":
+            return None
+        if (
+            not isinstance(value.get("call_id"), str)
+            or not isinstance(value.get("namespace"), str)
+            or value.get("phase")
+            not in ("retrying", "resumed", "succeeded", "exhausted")
+            or any(
+                type(value.get(k)) is not int or value[k] < 0
+                for k in ("attempt", "max_retries", "delay_ms")
+            )
+            or not isinstance(value.get("failed_message_ids"), list)
+            or not all(isinstance(i, str) for i in value["failed_message_ids"])
+            or "reason" not in value
+            or not (value.get("reason") is None or isinstance(value.get("reason"), str))
+        ):
+            return None
+        self._discarded.update(value["failed_message_ids"])
+        if value["phase"] in ("retrying", "resumed"):
+            self._active[value["call_id"]] = value
+        else:
+            self._active.pop(value["call_id"], None)
+        return value
+
+    @property
+    def pending(self) -> list[ModelRetryEvent]:
+        return list(self._active.values())
+
+    def filter(self, messages: Sequence[Mapping[str, Any]]) -> list[Mapping[str, Any]]:
+        return [m for m in messages if m.get("id") not in self._discarded]
+
+    def reset(self) -> None:
+        """Start tracking a different conversation."""
+        self._discarded.clear()
+        self._active.clear()
+
+    def finish(self) -> None:
+        """Clear status at Run end, keeping failed messages hidden."""
+        self._active.clear()

{mobileops_managed_agent-0.3.0 → mobileops_managed_agent-0.3.2}/src/mobileops_managed_agent/resources.py

@@ -1,5 +1,6 @@
 from __future__ import annotations
 
+import json
 from collections.abc import Mapping
 from typing import Any, NotRequired, TypedDict
 from urllib.parse import quote, urlencode
@@ -16,6 +17,8 @@ class ResourceVersion(TypedDict):
     ref: str
     file_count: NotRequired[int]
     created_at: NotRequired[str]
+    size_bytes: NotRequired[int]
+    files: NotRequired[list[ResourceFile]]
 
 
 class ResourceSummary(TypedDict):
@@ -65,10 +68,21 @@ class MobileOpsResourceVersionsClient:
         return payload["resource"]
 
     async def list(
-        self, kind: CapabilityResourceKind, slug: str
+        self,
+        kind: CapabilityResourceKind,
+        slug: str,
+        *,
+        versions: list[str] | None = None,
+        include_files: bool = False,
     ) -> list[ResourceVersion]:
-        resource = await self._resources.retrieve(kind, slug)
-        return resource.get("versions", [])
+        params = {"include_files": str(include_files).lower()}
+        if versions is not None:
+            params["versions"] = json.dumps(versions)
+        payload = await self._resources._request_json(
+            "GET",
+            f"{self._resources._resource_url(kind, slug)}/versions?{urlencode(params)}",
+        )
+        return payload["versions"]
 
 
 class MobileOpsResourceFilesClient:

mobileops_managed_agent-0.3.2/src/mobileops_managed_agent/tool_permissions.py

@@ -0,0 +1,97 @@
+"""Tool permission policies. Approval decisions never modify configured rules.
+Keep validators aligned with the shared conformance fixtures.
+"""
+
+from __future__ import annotations
+
+import copy
+import re
+from typing import Any
+
+TOOL_PERMISSIONS_CONFIG_KEY = "haiops_tool_permissions"
+BUILTIN_TOOL_NAMES = frozenset(
+    {
+        "ls",
+        "read_file",
+        "write_file",
+        "edit_file",
+        "delete",
+        "glob",
+        "grep",
+        "execute",
+        "eval",
+        "task",
+        "write_todos",
+        "request_user_input",
+    }
+)
+
+
+def _object(value: Any, keys: set[str]) -> dict:
+    if not isinstance(value, dict) or set(value) - keys:
+        raise ValueError("Invalid tool permissions object or unsupported field")
+    return value
+
+
+def _rule(value: Any, named: bool = False) -> dict:
+    r = _object(
+        value, {"enabled", "permission_policy"} | ({"name"} if named else set())
+    )
+    if "enabled" in r and type(r["enabled"]) is not bool:
+        raise ValueError("enabled must be boolean")
+    if "permission_policy" in r:
+        p = _object(r["permission_policy"], {"type"})
+        if p.get("type") not in ("always_allow", "always_ask"):
+            raise ValueError("Unsupported permission policy")
+    return r
+
+
+def validate_tool_permissions(value: Any, servers: list[str] | None = None) -> dict:
+    p = _object(value, {"version", "toolsets"})
+    if (
+        type(p.get("version")) is not int
+        or p["version"] != 1
+        or not isinstance(p.get("toolsets"), list)
+        or len(p["toolsets"]) > 128
+    ):
+        raise ValueError(
+            "Tool permissions require version 1 and a toolsets array (max 128)"
+        )
+    seen = set()
+    for raw in p["toolsets"]:
+        s = _object(raw, {"type", "mcp_server_name", "default_config", "configs"})
+        if s.get("type") not in ("builtin", "mcp"):
+            raise ValueError("Unknown toolset type")
+        if s["type"] == "mcp":
+            server = s.get("mcp_server_name")
+            if (
+                not isinstance(server, str)
+                or not re.fullmatch(r"[A-Za-z0-9.-]+", server)
+                or (servers is not None and server not in servers)
+            ):
+                raise ValueError("Unknown or invalid MCP server")
+        elif "mcp_server_name" in s:
+            raise ValueError("Only MCP toolsets accept mcp_server_name")
+        key = (s["type"], s.get("mcp_server_name"))
+        if key in seen:
+            raise ValueError("Duplicate toolset")
+        seen.add(key)
+        if "default_config" in s:
+            _rule(s["default_config"])
+        if "configs" in s:
+            if not isinstance(s["configs"], list) or len(s["configs"]) > 1024:
+                raise ValueError("configs must be an array (max 1024)")
+            names = set()
+            for raw_config in s["configs"]:
+                c = _rule(raw_config, True)
+                name = c.get("name")
+                if (
+                    not isinstance(name, str)
+                    or not re.fullmatch(r"[A-Za-z0-9_.-]{1,128}", name)
+                    or name in names
+                ):
+                    raise ValueError("Invalid or duplicate tool name")
+                if s["type"] == "builtin" and name not in BUILTIN_TOOL_NAMES:
+                    raise ValueError("Unknown built-in tool")
+                names.add(name)
+    return copy.deepcopy(p)

{mobileops_managed_agent-0.3.0 → mobileops_managed_agent-0.3.2/src/mobileops_managed_agent.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mobileops-managed-agent
-Version: 0.3.0
+Version: 0.3.2
 Summary: Server-side SDK for the MobileOPS Managed Agent API.
 Project-URL: Homepage, https://github.com/InnoMindX/deepagent/tree/main/managed-agent-sdk/python
 Project-URL: Repository, https://github.com/InnoMindX/deepagent

{mobileops_managed_agent-0.3.0 → mobileops_managed_agent-0.3.2}/src/mobileops_managed_agent.egg-info/SOURCES.txt

@@ -2,6 +2,7 @@ MANIFEST.in
 README.md
 pyproject.toml
 src/mobileops_managed_agent/__init__.py
+src/mobileops_managed_agent/artifacts.py
 src/mobileops_managed_agent/assistant_model.py
 src/mobileops_managed_agent/assistants.py
 src/mobileops_managed_agent/auth.py
@@ -9,10 +10,12 @@ src/mobileops_managed_agent/capabilities.py
 src/mobileops_managed_agent/client.py
 src/mobileops_managed_agent/credential_vault.py
 src/mobileops_managed_agent/files.py
+src/mobileops_managed_agent/model_retry.py
 src/mobileops_managed_agent/resources.py
 src/mobileops_managed_agent/response_schema.py
 src/mobileops_managed_agent/sandbox_profile.py
 src/mobileops_managed_agent/sandbox_profiles.py
+src/mobileops_managed_agent/tool_permissions.py
 src/mobileops_managed_agent/vaults.py
 src/mobileops_managed_agent.egg-info/PKG-INFO
 src/mobileops_managed_agent.egg-info/SOURCES.txt