ms-tau-sdk 2.0.15.dev63__tar.gz → 2.0.16.dev64__tar.gz

{ms_tau_sdk-2.0.15.dev63 → ms_tau_sdk-2.0.16.dev64}/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## Unreleased
+
+- **The Tau skills say when and how a tool checks the person's teams
+  ([#103](https://github.com/mainsequence-sdk/ms-tau-sdk/issues/103)).** `tau_security_and_access`
+  has a section "Checking the person's teams". A delegated call already reaches what the person's
+  teams share, so a tool rarely checks teams itself; a tool whose own policy names teams asks with
+  `in_teams()`. That answers only while the person is the request's verified caller, and an error
+  is never a membership answer. `tau_project_customization` points to the section.
+
 ## 2.0.15 — 2026-10-15
 
 - **Team membership on demand; the caller assertion's team list is deprecated

{ms_tau_sdk-2.0.15.dev63 → ms_tau_sdk-2.0.16.dev64}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: ms-tau-sdk
-Version: 2.0.15.dev63
+Version: 2.0.16.dev64
 Summary: Workspace-bound Tau application primitives for Main Sequence projects
 Project-URL: Changelog, https://github.com/mainsequence-sdk/ms-tau-sdk/blob/development/CHANGELOG.md
 Project-URL: Documentation, https://github.com/mainsequence-sdk/ms-tau-sdk/tree/development/docs

{ms_tau_sdk-2.0.15.dev63 → ms_tau_sdk-2.0.16.dev64}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "ms-tau-sdk"
-version = "2.0.15.dev63"
+version = "2.0.16.dev64"
 description = "Workspace-bound Tau application primitives for Main Sequence projects"
 readme = "README.md"
 requires-python = ">=3.13"

{ms_tau_sdk-2.0.15.dev63 → ms_tau_sdk-2.0.16.dev64}/src/ms_tau_sdk/agent_skills/tau_project_customization/SKILL.md

@@ -160,10 +160,11 @@ async def revenue_by_region(tool_call_id, arguments, signal=None, on_update=None
 
 - `current_requester()` returns the person the turn serves, with `uid` and
   `await in_teams(team_uids, *, max_age_seconds=None)`, or `None`. `in_teams()` answers while the
-  person is the verified caller of the turn's request; `team_uids` is deprecated. The platform
-  names that person when the turn starts, whoever called; it is `None` when the platform names
-  nobody, in local mode, and in code outside a turn. Only it names the requester: never take a
-  person's UID from tool arguments, the prompt, history, or a header.
+  person is the verified caller of the turn's request (see `tau_security_and_access`, "Checking the
+  person's teams"); `team_uids` is deprecated. The platform names that person when the turn
+  starts, whoever called; it is `None` when the platform names nobody, in local mode, and in code
+  outside a turn. Only it names the requester: never take a person's UID from tool arguments, the
+  prompt, history, or a header.
 - `platform_client()` returns a client. `await client.request("GET", "/api/v1/...")` calls a
   platform API path, and `await client.call_release(release_uid, method, path, ...)` calls another
   platform application. Both return an `httpx.Response`.

{ms_tau_sdk-2.0.15.dev63 → ms_tau_sdk-2.0.16.dev64}/src/ms_tau_sdk/agent_skills/tau_security_and_access/SKILL.md

@@ -207,6 +207,33 @@ How sharing works:
   tool can use them when its design needs to, for example to refuse a team key where it expects a
   personal one. That is a choice of the tool, not a platform rule.
 
+## Checking the person's teams
+
+A delegated call already reaches exactly what the person can, including what is shared with their
+teams, so a tool rarely checks teams itself. When the tool's own policy names teams, ask the
+platform with `in_teams()`:
+
+```python
+person = current_requester()
+if person is None or REPORTS_TEAM_UID not in await person.in_teams([REPORTS_TEAM_UID]):
+    return AgentToolResult(content=[TextContent(text="These reports are for the team's members.")])
+```
+
+- `await in_teams(team_uids, *, max_age_seconds=None)` returns the subset of `team_uids` the
+  person is an active member of, as a `frozenset`. Unknown and inactive teams are left out.
+- On the turn's requester it answers only while that person is the verified caller of the request
+  the turn runs in, such as a chat or A2A Message they sent. A turn with no such request raises
+  `TauSDKError`: a Task attempt the platform dispatches, a turn that resumes a caller delivery, or
+  work another Agent asked for. Refuse the action then; never read the error as a membership
+  answer. An HTTP handler asks for its caller with `await request.state.user.in_teams(...)`.
+- The process reuses an answer across requests for `TAU_TEAM_MEMBERSHIP_CACHE_SECONDS` (default
+  `0`: only within its request); set it in `harness_agent.spec.env_vars`. `max_age_seconds=0`
+  always asks the platform: use it before a write that must see a removal at once.
+- A check the platform cannot answer raises `BackendError`; it never answers "not a member".
+- `team_uids` on the requester is deprecated and warns when read. It is empty when the turn does
+  not know the person's teams, and raises when the caller's assertion carried no team list, as
+  every assertion will once the platform stops signing them. Use `in_teams()`.
+
 ## What never reaches the model
 
 Tool results, their `details`, and errors can reach the model provider and the session history.