ms-tau-sdk 2.0.21.dev72__tar.gz → 2.0.22.dev73__tar.gz

{ms_tau_sdk-2.0.21.dev72 → ms_tau_sdk-2.0.22.dev73}/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 2.0.22 — 2026-10-21
+
+- **A hosted Task's answer reaches the caller of GetTask
+  ([#113](https://github.com/mainsequence-sdk/ms-tau-sdk/issues/113)).** GetTask answered a
+  completed hosted Task with no Artifacts, although the platform had stored its answer. The SDK
+  found the Task in the platform's Task list and answered with that list's entry, which carries
+  only the counts of a Task's outputs. It now reads the Task in full after the list finds it, so
+  GetTask, JSON-RPC `GetTask` and the stream of an existing Task answer with its Artifacts, an
+  error answer included. A2A ListTasks still answers each Task without its Artifacts.
+
+- **A Task acts for the person who asked for it
+  ([#114](https://github.com/mainsequence-sdk/ms-tau-sdk/issues/114), ADR 0019, ADR 0021).** A
+  Task attempt took the person it serves from the platform's answer to its turn start, which names
+  nobody for a Task, so a Task's application calls went out as the Agent alone and the application
+  refused them. A Task attempt now serves the person the platform names for running the Task: in
+  its answer when the request creates or continues the Task, or in the dispatch when the platform
+  asks the runtime to run it. The platform names only an active person whom the executing Agent may
+  act for, and checks them again on every call made for them. Chat, A2A Message and
+  caller-delivery turns still take the person from the turn start.
+
 ## 2.0.21 — 2026-10-21
 
 - **Hosted Tasks can be sent, read and listed with their Messages

{ms_tau_sdk-2.0.21.dev72 → ms_tau_sdk-2.0.22.dev73}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: ms-tau-sdk
-Version: 2.0.21.dev72
+Version: 2.0.22.dev73
 Summary: Workspace-bound Tau application primitives for Main Sequence projects
 Project-URL: Changelog, https://github.com/mainsequence-sdk/ms-tau-sdk/blob/development/CHANGELOG.md
 Project-URL: Documentation, https://github.com/mainsequence-sdk/ms-tau-sdk/tree/development/docs

{ms_tau_sdk-2.0.21.dev72 → ms_tau_sdk-2.0.22.dev73}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "ms-tau-sdk"
-version = "2.0.21.dev72"
+version = "2.0.22.dev73"
 description = "Workspace-bound Tau application primitives for Main Sequence projects"
 readme = "README.md"
 requires-python = ">=3.13"

{ms_tau_sdk-2.0.21.dev72 → ms_tau_sdk-2.0.22.dev73}/src/ms_tau_sdk/agent_skills/tau_a2a_runtime_adapter/SKILL.md

@@ -32,7 +32,9 @@ The SDK owns:
   which the platform's own records establish, never the `X-Caller-*` headers;
 - presenting the verified caller assertion of the request that starts a chat or A2A Message turn
   only when it marks that turn active, so that the platform can record the turn's requester;
-  taking the person the turn serves only from the platform's answer to the turn start; and giving
+  taking the person a chat, A2A Message or caller-delivery turn serves from the platform's answer
+  to the turn start, and the person a Task attempt serves from the platform's answer to the Task's
+  creation or continuation or from its dispatch; and giving
   extension tools that person and calls for the work through `current_requester()` and
   `platform_client()` without exposing the assertion, the lease proof, or any token;
 - translating inbound A2A requests into the shared TAU runtime; and

{ms_tau_sdk-2.0.21.dev72 → ms_tau_sdk-2.0.22.dev73}/src/ms_tau_sdk/agent_skills/tau_security_and_access/SKILL.md

@@ -21,7 +21,8 @@ Every call a tool makes through `platform_client()` follows one rule:
 | A valid delegation | The person the turn serves, with their ordinary permissions, including administrative ones. |
 | A delegation that ended or is invalid | None. The call is refused with a `PermissionError` and is never retried as the Agent. |
 
-- The platform names the person when the turn starts, and `current_requester()` returns them. It
+- The platform names the person when a chat or Message turn starts, and for a Task when it is
+  created, continued or dispatched; `current_requester()` returns them. It
   returns `None` when the Agent is not enabled to act for people (only an Organization admin can
   enable it, with `acts_for_requester`), for work no person asked for, in local mode and outside a
   turn.

{ms_tau_sdk-2.0.21.dev72 → ms_tau_sdk-2.0.22.dev73}/src/ms_tau_sdk/api/a2a.py

@@ -63,7 +63,7 @@ from ms_tau_sdk.runtime.provenance import (
     TurnProvenance,
     turn_provenance_from_request,
 )
-from ms_tau_sdk.runtime.requester import CallerDelivery
+from ms_tau_sdk.runtime.requester import CallerDelivery, canonical_requester_uid
 from ms_tau_sdk.runtime.task_context import (
     TaskExecutionContext,
     active_task_execution,
@@ -1072,13 +1072,26 @@ def _presented_assertion(caller_assertion: CallerAssertion | None) -> dict[str,
 def _request_caller(caller_assertion: CallerAssertion | None) -> VerifiedCaller | None:
     """Return the verified caller of a request that runs a Task attempt itself.
 
-    The platform's answer to the attempt's turn start names the person the attempt serves; this
-    caller only supplies that person's teams, when it is that person.
+    The platform names the person the attempt serves; this caller only supplies that person's
+    teams, when it is that person.
     """
 
     return caller_assertion.caller if caller_assertion is not None else None
 
 
+def _task_requester_uid(requester_user_uid: object, requester_identity_type: object) -> str | None:
+    """Return the person a Task attempt serves, as the platform named them for running the Task.
+
+    The platform names a requester for running a Task in its answer to the runtime's own creation
+    or continuation of the Task and in the dispatch: an active person, only while the executing
+    Agent may act for them, and nobody otherwise.
+    """
+
+    if requester_identity_type != "human":
+        return None
+    return canonical_requester_uid(requester_user_uid)
+
+
 async def _wait_for_task_return_state(
     client: MainSequenceClient,
     task: AgentTask,
@@ -1441,6 +1454,7 @@ async def _execute_task(
     dispatch_uid: str | None = None,
     claim: _ClaimedTask | None = None,
     caller: VerifiedCaller | None = None,
+    requester_uid: str | None = None,
 ) -> dict[str, Any]:
     bind_contextvars(
         a2a_task_id=task.task_id,
@@ -1474,6 +1488,7 @@ async def _execute_task(
         holder_id=claim.holder_id,
         lease_token=claim.lease_token,
         caller=caller,
+        requester_uid=requester_uid,
     )
     try:
         await writer.ensure_not_canceled(force=True)
@@ -1561,7 +1576,11 @@ async def _schedule_task_accelerator(
     config: TauSDKSettings,
     caller: VerifiedCaller | None = None,
 ) -> bool:
-    """Best-effort local start after durable creation; dispatch remains recovery owner."""
+    """Best-effort local start after durable creation; dispatch remains recovery owner.
+
+    ``task`` is the platform's answer to the runtime's own creation or continuation of the Task,
+    which names the person the attempt serves.
+    """
 
     try:
         claim = await _claim_backend_task(client, manager, task)
@@ -1592,6 +1611,7 @@ async def _schedule_task_accelerator(
         config=config,
         claim=claim,
         caller=caller,
+        requester_uid=_task_requester_uid(task.requester_user_uid, task.requester_identity_type),
     )
     try:
         _background, scheduled = manager.create_a2a_task_execution(
@@ -1854,6 +1874,8 @@ async def _stream_task_events(
         holder_id=claim.holder_id,
         lease_token=claim.lease_token,
         caller=caller,
+        # ``task`` is the platform's answer to the runtime's own creation of the Task.
+        requester_uid=_task_requester_uid(task.requester_user_uid, task.requester_identity_type),
     )
     working = await client.get_task(task.uid)
     working = await _task_with_history(client, working, history_length=history_length)
@@ -2337,6 +2359,12 @@ async def task_dispatch_available(
             provenance=provenance,
             config=config,
             claim=claim,
+            # The dispatch names the person the attempt serves. The Task read above records who
+            # asked, but does not say whether the Agent may act for them.
+            requester_uid=_task_requester_uid(
+                body.get("requester_user_uid"),
+                body.get("requester_identity_type"),
+            ),
         ),
         name=f"a2a-task-{task.task_id}",
     )

{ms_tau_sdk-2.0.21.dev72 → ms_tau_sdk-2.0.22.dev73}/src/ms_tau_sdk/backend/client.py

@@ -1009,16 +1009,26 @@ class MainSequenceClient:
             for task in TypeAdapter(list[AgentTask]).validate_python(values or [])
         ]
 
+    async def _task_uid_by_protocol_id(self, task_id: str) -> str:
+        tasks = await self.list_tasks(task_id=task_id)
+        if not tasks:
+            raise SessionNotFoundError(f"A2A task not found: {task_id}")
+        return tasks[0].uid
+
     async def get_task_by_protocol_id(
         self,
         task_id: str,
         *,
         history_length: int | None = None,
     ) -> AgentTask:
-        tasks = await self.list_tasks(task_id=task_id, history_length=history_length)
-        if not tasks:
-            raise SessionNotFoundError(f"A2A task not found: {task_id}")
-        return tasks[0]
+        """Return the complete Task that the protocol ID names.
+
+        The platform's Task list finds the Task but answers only the counts of its outputs, so
+        the Task is then read in full.
+        """
+
+        task_uid = await self._task_uid_by_protocol_id(task_id)
+        return await self.get_task(task_uid, history_length=history_length)
 
     async def get_task(
         self,
@@ -1067,8 +1077,7 @@ class MainSequenceClient:
         return snapshot.model_copy(update={"task": _with_binding_messages(snapshot.task)})
 
     async def get_task_snapshot_by_protocol_id(self, task_id: str) -> AgentTaskSnapshot:
-        task = await self.get_task_by_protocol_id(task_id)
-        return await self.get_task_snapshot(task.uid)
+        return await self.get_task_snapshot(await self._task_uid_by_protocol_id(task_id))
 
     async def list_task_events(
         self,

{ms_tau_sdk-2.0.21.dev72 → ms_tau_sdk-2.0.22.dev73}/src/ms_tau_sdk/runtime/manager.py

@@ -83,7 +83,7 @@ from ms_tau_sdk.runtime.snapshots import (
     restore_snapshot,
     sha256_json,
 )
-from ms_tau_sdk.runtime.task_context import active_task_execution
+from ms_tau_sdk.runtime.task_context import TaskExecutionContext, active_task_execution
 from ms_tau_sdk.sessions.storage import SESSION_ENTRY_ADAPTER, BackendSessionStorage
 from ms_tau_sdk.settings import TauSDKSettings
 from ms_tau_sdk.tools.mainsequence_mcp import (
@@ -1573,7 +1573,7 @@ class SessionRuntimeManager:
         )
         requester_binding = TurnRequesterBinding(
             session_uid=session_uid,
-            requester=self._turn_requester(runtime),
+            requester=self._turn_requester(runtime, task_context),
             lease_proof=lambda: LeaseProof(
                 session_uid=session_uid,
                 holder_id=self.holder_id,
@@ -1756,16 +1756,22 @@ class SessionRuntimeManager:
 
         return not self.settings.local_mode and self.settings.request_identity_mode == "assertion"
 
-    def _turn_requester(self, runtime: ActiveSessionRuntime) -> Requester | None:
+    def _turn_requester(
+        self,
+        runtime: ActiveSessionRuntime,
+        task_context: TaskExecutionContext | None,
+    ) -> Requester | None:
         """Name the person a turn serves, or None.
 
-        The platform's answer to the turn start names that person, whoever called: a chat or A2A
-        Message turn, a Task attempt, and a turn the platform starts for a caller delivery alike.
+        A Task attempt serves the person the platform named for running the Task, which its
+        execution context holds; the platform's answer to a Task attempt's turn start names
+        nobody. Any other turn, a chat or A2A Message turn and a turn the platform starts for a
+        caller delivery, serves the person the platform's answer to the turn start names.
         """
 
         if not self._requester_identity_verified():
             return None
-        uid = runtime.requester_user_uid
+        uid = task_context.requester_uid if task_context is not None else runtime.requester_user_uid
         if uid is None:
             return None
         return Requester(uid=uid)

{ms_tau_sdk-2.0.21.dev72 → ms_tau_sdk-2.0.22.dev73}/src/ms_tau_sdk/runtime/task_context.py

@@ -27,8 +27,12 @@ class TaskExecutionContext:
     interruption_message: dict[str, Any] | None = None
     # The verified caller of the request that runs this attempt itself; None for an attempt the
     # platform dispatches. It supplies the teams of the person the attempt serves when that
-    # person is the caller; the platform's answer to the turn start names the person.
+    # person is the caller.
     caller: VerifiedCaller | None = None
+    # The person the attempt serves, as the platform named them for running the Task: in its
+    # answer to the runtime's own creation or continuation of the Task, or in the dispatch. None
+    # when it named nobody. The platform checks the person again on every call made for them.
+    requester_uid: str | None = None
 
     def request_interruption(
         self,