ms-tau-sdk 2.0.16.dev65__tar.gz → 2.0.17.dev66__tar.gz

{ms_tau_sdk-2.0.16.dev65 → ms_tau_sdk-2.0.17.dev66}/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## Unreleased
+
+- **`team_uids` is removed; the verifier refuses caller assertions that list teams
+  ([#103](https://github.com/mainsequence-sdk/ms-tau-sdk/issues/103), ADR 0019).** The platform no
+  longer signs a team list in the caller assertion, so the runtime drops it. `in_teams()` is the
+  only membership check, and it is unchanged.
+  - `VerifiedCaller` and `Requester` have no `team_uids` and no `signed_team_uids`.
+    `VerifiedCaller(uid, is_organization_admin=False)` and `Requester(uid)` are their constructors.
+  - A caller assertion that carries `team_uids`, an empty or `null` list included, is refused with
+    401.
+  - A runtime on this release refuses every caller of a platform that still signs team lists.
+
 ## 2.0.16 — 2026-10-15
 
 - **The Tau skills say when and how a tool checks the person's teams

{ms_tau_sdk-2.0.16.dev65 → ms_tau_sdk-2.0.17.dev66}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: ms-tau-sdk
-Version: 2.0.16.dev65
+Version: 2.0.17.dev66
 Summary: Workspace-bound Tau application primitives for Main Sequence projects
 Project-URL: Changelog, https://github.com/mainsequence-sdk/ms-tau-sdk/blob/development/CHANGELOG.md
 Project-URL: Documentation, https://github.com/mainsequence-sdk/ms-tau-sdk/tree/development/docs

{ms_tau_sdk-2.0.16.dev65 → ms_tau_sdk-2.0.17.dev66}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "ms-tau-sdk"
-version = "2.0.16.dev65"
+version = "2.0.17.dev66"
 description = "Workspace-bound Tau application primitives for Main Sequence projects"
 readme = "README.md"
 requires-python = ">=3.13"

{ms_tau_sdk-2.0.16.dev65 → ms_tau_sdk-2.0.17.dev66}/src/ms_tau_sdk/agent_skills/tau_project_customization/SKILL.md

@@ -161,7 +161,7 @@ async def revenue_by_region(tool_call_id, arguments, signal=None, on_update=None
 - `current_requester()` returns the person the turn serves, with `uid` and
   `await in_teams(team_uids, *, max_age_seconds=None)`, or `None`. `in_teams()` answers while the
   person is the verified caller of the turn's request (see `tau_security_and_access`, "Checking the
-  person's teams"); `team_uids` is deprecated. The platform names that person when the turn
+  person's teams"); the person carries no team list. The platform names that person when the turn
   starts, whoever called; it is `None` when the platform names nobody, in local mode, and in code
   outside a turn. Only it names the requester: never take a person's UID from tool arguments, the
   prompt, history, or a header.

{ms_tau_sdk-2.0.16.dev65 → ms_tau_sdk-2.0.17.dev66}/src/ms_tau_sdk/agent_skills/tau_security_and_access/SKILL.md

@@ -230,9 +230,7 @@ if person is None or REPORTS_TEAM_UID not in await person.in_teams([REPORTS_TEAM
   `0`: only within its request); set it in `harness_agent.spec.env_vars`. `max_age_seconds=0`
   always asks the platform: use it before a write that must see a removal at once.
 - A check the platform cannot answer raises `BackendError`; it never answers "not a member".
-- `team_uids` on the requester is deprecated and warns when read. It is empty when the turn does
-  not know the person's teams, and raises when the caller's assertion carried no team list, as
-  every assertion will once the platform stops signing them. Use `in_teams()`.
+- The requester carries no team list; `in_teams()` is the only membership check.
 
 ## What never reaches the model
 

{ms_tau_sdk-2.0.16.dev65 → ms_tau_sdk-2.0.17.dev66}/src/ms_tau_sdk/backend/assertions.py

@@ -5,8 +5,8 @@ The platform signs two kinds of short-lived JWS with one Ed25519 key set and sen
 
 - a caller assertion, for a request a person or a workload sends to the runtime through the
   platform. It names the caller (``sub``) and whether the caller administers the Organization
-  (``is_organization_admin``). While the platform still signs it, it also carries the caller's
-  teams (``team_uids``), which is deprecated: ``in_teams()`` asks the platform instead (#103);
+  (``is_organization_admin``), and no teams: ``in_teams()`` asks the platform (#103), and an
+  assertion that lists teams is refused;
 - a platform assertion, for the platform's own background calls. It names no caller.
 
 Both are bound to this runtime's release (``aud``, ``resource_release_uid``) and Organization
@@ -33,7 +33,7 @@ import httpx
 import jwt
 from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PublicKey
 
-from ms_tau_sdk.backend.team_memberships import deprecated_team_uids, member_team_uids
+from ms_tau_sdk.backend.team_memberships import member_team_uids
 from ms_tau_sdk.errors import ConfigurationError
 from ms_tau_sdk.settings import (
     CALLER_ASSERTION_ISSUER_ENV,
@@ -83,40 +83,15 @@ class AssertionKeysUnavailableError(Exception):
     """The platform's verification keys could not be obtained."""
 
 
-@dataclass(frozen=True, slots=True, init=False)
+@dataclass(frozen=True, slots=True)
 class VerifiedCaller:
     """The caller that a verified caller assertion names.
 
-    ``in_teams()`` asks the platform which teams the caller belongs to. ``team_uids`` is the
-    deprecated list earlier assertions carried; ``signed_team_uids`` is None when the assertion
-    carried none (#103).
+    ``in_teams()`` asks the platform which teams the caller belongs to (#103).
     """
 
     uid: str
-    is_organization_admin: bool
-    signed_team_uids: tuple[str, ...] | None
-
-    def __init__(
-        self,
-        uid: str,
-        team_uids: tuple[str, ...] | None = None,
-        is_organization_admin: bool = False,
-    ) -> None:
-        object.__setattr__(self, "uid", uid)
-        object.__setattr__(self, "is_organization_admin", is_organization_admin)
-        object.__setattr__(
-            self, "signed_team_uids", None if team_uids is None else tuple(team_uids)
-        )
-
-    @property
-    def team_uids(self) -> tuple[str, ...]:
-        """Deprecated: the team UIDs the caller's assertion carried. Use ``in_teams()``.
-
-        Warns when read, and raises ``TauSDKError`` when the assertion carried no team list; it
-        never answers an empty list for that.
-        """
-
-        return deprecated_team_uids(self.signed_team_uids)
+    is_organization_admin: bool = False
 
     async def in_teams(
         self,
@@ -253,28 +228,10 @@ def _fresh_until(cache_control: str | None, now: float) -> float | None:
 
 def _verified_caller(payload: Mapping[str, Any]) -> VerifiedCaller:
     uid = payload["sub"]
-    # The deprecated team list, checked while the platform still signs it (#103).
-    team_uids = payload.get("team_uids")
     is_organization_admin = payload["is_organization_admin"]
-    if (
-        not _is_canonical_uid(uid)
-        or (
-            team_uids is not None
-            and (
-                not isinstance(team_uids, list)
-                or not all(_is_canonical_uid(team_uid) for team_uid in team_uids)
-                or team_uids != sorted(set(team_uids))
-            )
-        )
-        or ("team_uids" in payload and team_uids is None)
-        or type(is_organization_admin) is not bool
-    ):
+    if not _is_canonical_uid(uid) or type(is_organization_admin) is not bool:
         raise InvalidAssertionError("The caller assertion does not name a valid caller")
-    return VerifiedCaller(
-        uid=uid,
-        team_uids=None if team_uids is None else tuple(team_uids),
-        is_organization_admin=is_organization_admin,
-    )
+    return VerifiedCaller(uid=uid, is_organization_admin=is_organization_admin)
 
 
 class AssertionVerifier:
@@ -382,9 +339,7 @@ class AssertionVerifier:
             )
         except (jwt.PyJWTError, TypeError, ValueError) as error:
             raise InvalidAssertionError(f"The {kind} assertion did not verify") from error
-        # A caller assertion may still carry the deprecated team list (#103).
-        optional = {"team_uids"} if kind == "caller" else set()
-        if set(payload) - optional != claims:
+        if set(payload) != claims:
             raise InvalidAssertionError(f"The {kind} assertion does not have the exact claim set")
         if (
             payload["iss"] != self.issuer

{ms_tau_sdk-2.0.16.dev65 → ms_tau_sdk-2.0.17.dev66}/src/ms_tau_sdk/backend/team_memberships.py

@@ -12,7 +12,6 @@ import math
 import threading
 import time
 import uuid
-import warnings
 from collections import OrderedDict
 from collections.abc import Iterable
 from contextvars import ContextVar, Token
@@ -209,21 +208,3 @@ async def _platform_members(
     if scope.client is None:
         raise TauSDKError("in_teams() needs the Agent runtime of this process")
     return await scope.client.team_memberships(person_uid, team_uids, caller_assertion=token)
-
-
-def deprecated_team_uids(signed: tuple[str, ...] | None) -> tuple[str, ...]:
-    """Return the deprecated team list a caller assertion carried, with a warning.
-
-    It raises when the assertion carried none; it never answers an empty list for that.
-    """
-
-    warnings.warn(
-        "team_uids is deprecated; check membership with in_teams() instead",
-        DeprecationWarning,
-        stacklevel=3,
-    )
-    if signed is None:
-        raise TauSDKError(
-            "The caller assertion carries no team list; check membership with in_teams()"
-        )
-    return signed

{ms_tau_sdk-2.0.16.dev65 → ms_tau_sdk-2.0.17.dev66}/src/ms_tau_sdk/runtime/manager.py

@@ -30,7 +30,7 @@ from tau_agent.types import JSONValue
 from tau_coding import CodingSession, CodingSessionConfig
 from tau_coding.tools import create_coding_tools
 
-from ms_tau_sdk.backend.assertions import CallerAssertion, VerifiedCaller
+from ms_tau_sdk.backend.assertions import CallerAssertion
 from ms_tau_sdk.backend.client import LeaseProof, MainSequenceClient
 from ms_tau_sdk.backend.mcp import MainSequenceMCPClient
 from ms_tau_sdk.backend.models import (
@@ -1573,16 +1573,7 @@ class SessionRuntimeManager:
         )
         requester_binding = TurnRequesterBinding(
             session_uid=session_uid,
-            requester=self._turn_requester(
-                runtime,
-                caller=(
-                    presented.caller
-                    if presented is not None
-                    else task_context.caller
-                    if task_context is not None
-                    else None
-                ),
-            ),
+            requester=self._turn_requester(runtime),
             lease_proof=lambda: LeaseProof(
                 session_uid=session_uid,
                 holder_id=self.holder_id,
@@ -1765,18 +1756,11 @@ class SessionRuntimeManager:
 
         return not self.settings.local_mode and self.settings.request_identity_mode == "assertion"
 
-    def _turn_requester(
-        self,
-        runtime: ActiveSessionRuntime,
-        *,
-        caller: VerifiedCaller | None,
-    ) -> Requester | None:
+    def _turn_requester(self, runtime: ActiveSessionRuntime) -> Requester | None:
         """Name the person a turn serves, or None.
 
         The platform's answer to the turn start names that person, whoever called: a chat or A2A
         Message turn, a Task attempt, and a turn the platform starts for a caller delivery alike.
-        ``caller`` is the verified caller of the request, when there is one; it supplies the
-        deprecated team list its assertion carried only when it is that person.
         """
 
         if not self._requester_identity_verified():
@@ -1784,8 +1768,7 @@ class SessionRuntimeManager:
         uid = runtime.requester_user_uid
         if uid is None:
             return None
-        team_uids = caller.signed_team_uids if caller is not None and caller.uid == uid else ()
-        return Requester(uid=uid, team_uids=team_uids)
+        return Requester(uid=uid)
 
     def _requester_http(self) -> httpx.AsyncClient:
         """The client for calls to platform applications, made when first used."""

{ms_tau_sdk-2.0.16.dev65 → ms_tau_sdk-2.0.17.dev66}/src/ms_tau_sdk/runtime/requester.py

@@ -31,7 +31,7 @@ import structlog
 from ms_tau_sdk.backend.auth import AccessToken, _jwt_expiry
 from ms_tau_sdk.backend.client import LeaseProof, answer_without_request_credentials
 from ms_tau_sdk.backend.models import ReleaseRuntimeAccess
-from ms_tau_sdk.backend.team_memberships import deprecated_team_uids, member_team_uids
+from ms_tau_sdk.backend.team_memberships import member_team_uids
 from ms_tau_sdk.errors import (
     ApplicationReadinessTimeoutError,
     ApplicationWakingError,
@@ -52,34 +52,15 @@ type Delegation = Literal["auto", "none", "required"]
 _DELEGATIONS: tuple[Delegation, ...] = ("auto", "none", "required")
 
 
-@dataclass(frozen=True, slots=True, init=False)
+@dataclass(frozen=True, slots=True)
 class Requester:
     """The verified person whose request the current turn serves.
 
     ``in_teams()`` asks the platform which teams the person belongs to while the person is the
-    verified caller of the request the turn runs in, and raises otherwise. ``team_uids`` is the
-    deprecated list the caller's assertion carried: empty when the turn does not know the person's
-    teams, and ``signed_team_uids`` is None when the assertion carried no list (#103).
+    verified caller of the request the turn runs in, and raises otherwise (#103).
     """
 
     uid: str
-    signed_team_uids: tuple[str, ...] | None
-
-    def __init__(self, uid: str, team_uids: tuple[str, ...] | None = ()) -> None:
-        object.__setattr__(self, "uid", uid)
-        object.__setattr__(
-            self, "signed_team_uids", None if team_uids is None else tuple(team_uids)
-        )
-
-    @property
-    def team_uids(self) -> tuple[str, ...]:
-        """Deprecated: the team UIDs the caller's assertion carried. Use ``in_teams()``.
-
-        Warns when read, and raises ``TauSDKError`` when the assertion carried no team list; it
-        never answers an empty list for that.
-        """
-
-        return deprecated_team_uids(self.signed_team_uids)
 
     async def in_teams(
         self,