multi-forge 1.1.0__tar.gz → 1.1.3__tar.gz

{multi_forge-1.1.0 → multi_forge-1.1.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: multi-forge
-Version: 1.1.0
+Version: 1.1.3
 Summary: Multi-runtime agent toolkit: proxy routing, cost control, session management, policy enforcement, and workflow orchestration
 Project-URL: Homepage, https://github.com/hapa1i/multi-forge
 Project-URL: Repository, https://github.com/hapa1i/multi-forge
@@ -21,10 +21,11 @@ Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Topic :: Software Development
 Requires-Python: <3.14,>=3.11
-Requires-Dist: aiohttp<4,>=3.14.3
+Requires-Dist: aiohttp<4,>=3.14.4
 Requires-Dist: apscheduler<4,>=3.11.2
 Requires-Dist: backoff<3,>=2.2.1
 Requires-Dist: boto3<2,>=1.43.1
+Requires-Dist: certifi>=2026.10.19
 Requires-Dist: click>=8.3.1
 Requires-Dist: coolname<6,>=5.0.0
 Requires-Dist: cryptography>=50.0.0
@@ -34,12 +35,14 @@ Requires-Dist: fastapi-sso<1,>=0.19.0
 Requires-Dist: fastapi<0.137,>=0.136.3
 Requires-Dist: httpx>=0.25.0
 Requires-Dist: litellm==1.102.0
+Requires-Dist: multidict<7,>=6.9.1
+Requires-Dist: oauthlib<5,>=4.0.0
 Requires-Dist: openai>=1.0.0
 Requires-Dist: orjson<4,>=3.11.6
 Requires-Dist: packaging>=21.0
 Requires-Dist: pydantic-settings<3,>=2.14.1
 Requires-Dist: pydantic>=2.0.0
-Requires-Dist: pyjwt<3,>=2.13.0
+Requires-Dist: pyjwt<3,>=2.15.0
 Requires-Dist: python-dateutil<3,>=2.9.0
 Requires-Dist: python-dotenv>=1.2.2
 Requires-Dist: python-multipart<1,>=0.0.31
@@ -49,6 +52,7 @@ Requires-Dist: rich<14,>=13.9.4
 Requires-Dist: ruamel-yaml>=0.18.0
 Requires-Dist: starlette<1.8,>=1.7.0
 Requires-Dist: tenacity>=8.0.0
+Requires-Dist: urllib3<3,>=2.8.0
 Requires-Dist: uvicorn<1,>=0.33.0
 Requires-Dist: uvloop<1,>=0.21.0; sys_platform != 'win32'
 Requires-Dist: watchfiles>=0.20
@@ -194,6 +198,9 @@ forge auth login -c openrouter                        # store OPENROUTER_API_KEY
 forge session start --proxy openrouter-anthropic
 ```
 
+These PyPI installs resolve compatible dependency versions. For a constrained installation from reviewed source or a
+release wheel, see [dependency security](docs/developer/dependency_security.md).
+
 Developing on Forge itself? See [CONTRIBUTING.md](CONTRIBUTING.md) for the editable install.
 
 Once running, try `/smoke-test` (Claude) or `$smoke-test` (Codex) for a read-only health check. `/walkthrough` teaches

{multi_forge-1.1.0 → multi_forge-1.1.3}/README.md

@@ -137,6 +137,9 @@ forge auth login -c openrouter                        # store OPENROUTER_API_KEY
 forge session start --proxy openrouter-anthropic
 ```
 
+These PyPI installs resolve compatible dependency versions. For a constrained installation from reviewed source or a
+release wheel, see [dependency security](docs/developer/dependency_security.md).
+
 Developing on Forge itself? See [CONTRIBUTING.md](CONTRIBUTING.md) for the editable install.
 
 Once running, try `/smoke-test` (Claude) or `$smoke-test` (Codex) for a read-only health check. `/walkthrough` teaches

{multi_forge-1.1.0 → multi_forge-1.1.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "multi-forge"
-version = "1.1.0"
+version = "1.1.3"
 description = "Multi-runtime agent toolkit: proxy routing, cost control, session management, policy enforcement, and workflow orchestration"
 readme = "README.md"
 license = "Apache-2.0"
@@ -45,25 +45,31 @@ dependencies = [
     # validated through LiteLLM 1.102.0; run scripts/test-wheel-runtime.sh before
     # raising the ceiling. Alternate servers, databases, and cloud integrations
     # remain outside Forge's runtime path.
-    "aiohttp>=3.14.3,<4",
+    "aiohttp>=3.14.4,<4",
     "apscheduler>=3.11.2,<4",
     "backoff>=2.2.1,<3",
     # LiteLLM 1.88+ imports the Focus S3 destination during proxy startup.
     "boto3>=1.43.1,<2",
+    # Exclude the compromised CA trust roots from clean installations too.
+    "certifi>=2026.10.19",
     "cryptography>=50.0.0",
     # LiteLLM 1.95 imports outbound-credential tagged unions at startup.
     "expression>=5.6.0,<6",
     # Keep FastAPI's lock-proven route-tree behavior; upgrade it separately.
     "fastapi>=0.136.3,<0.137",
     "fastapi-sso>=0.19.0,<1",
+    # Runtime security floors belong in wheel metadata, not only uv constraints.
+    "multidict>=6.9.1,<7",
+    "oauthlib>=4.0.0,<5",
     "orjson>=3.11.6,<4",
     "pydantic-settings>=2.14.1,<3",
-    "pyjwt>=2.13.0,<3",
+    "pyjwt>=2.15.0,<3",
     "python-multipart>=0.0.31,<1",
     # LiteLLM 1.95 imports its Redis support from the default startup graph.
     "redis>=5.2.0,<8",
     # Starlette 1.7 fixes TestClient's deprecated AnyIO BlockingPortal import.
     "starlette>=1.7.0,<1.8",
+    "urllib3>=2.8.0,<3",
     "uvicorn>=0.33.0,<1",
     "uvloop>=0.21.0,<1; sys_platform != 'win32'",
     "watchfiles>=0.20",
@@ -82,7 +88,7 @@ Issues = "https://github.com/hapa1i/multi-forge/issues"
 Documentation = "https://github.com/hapa1i/multi-forge/tree/main/docs"
 
 [build-system]
-requires = ["hatchling"]
+requires = ["hatchling==1.32.4"]
 build-backend = "hatchling.build"
 
 [tool.hatch.build.targets.wheel]
@@ -148,9 +154,19 @@ disallow_untyped_calls = false
 
 # Security floor for transitive dependencies (Dependabot alerts)
 [tool.uv]
+# uv sync does not consume UV_BUILD_CONSTRAINT; keep its isolated builds pinned too.
+# scripts/check-dependency-pins.py checks this list against the build-group export.
+build-constraint-dependencies = [
+    "hatchling==1.32.4",
+    "packaging==26.3",
+    "pathspec==1.1.1",
+    "pluggy==1.6.0",
+    "tomlkit==0.15.2",
+    "trove-classifiers==2026.9.21.13",
+]
 constraint-dependencies = [
     "filelock>=3.20.3",
-    "virtualenv>=20.36.1",
+    "virtualenv>=21.14.12",
     "mcp>=1.28.1",
     "Pygments>=2.20.0",
     "pyasn1>=0.6.4",
@@ -158,6 +174,13 @@ constraint-dependencies = [
 
 [dependency-groups]
 dev = [
+    "pre-commit-hooks==6.0.0",
+    "isort==9.0.1",
+    "mdformat==1.0.0",
+    "mdformat-gfm==1.0.0",
+    "mdformat-gfm-alerts==2.1.0",
+    "mdformat-simple-breaks==0.1.0",
+    "mdformat-frontmatter==2.1.2",
     "pytest>=9.0.3",
     "pytest-cov>=4.1.0",
     "pytest-asyncio>=0.23.0",
@@ -172,6 +195,7 @@ dev = [
     "types-requests>=2.31.0",
     "httpx2>=2.3.0",
 ]
+build = ["hatchling==1.32.4"]
 provider-check = [
     # scripts/count-tokens.py imports provider-specific count_tokens surfaces;
     # keep lock refreshes inside the API families verified by that script.

{multi_forge-1.1.0 → multi_forge-1.1.3}/src/forge/cli/hooks/authority.py

@@ -22,6 +22,11 @@ from forge.session.authority import (
 from forge.session.hooks import resolve_session_store
 from forge.session.models import SessionState
 from forge.session.store import SessionStore
+from forge.session.workers import (
+    SESSION_INSTANCE_ENV,
+    capture_session_instance,
+    session_worker_lease,
+)
 
 
 @dataclass(frozen=True)
@@ -35,6 +40,7 @@ class AuthorityGuardResult:
     state: SessionState | None = None
     store: SessionStore | None = None
     marker: AuthorityMarker | None = None
+    instance_id: str | None = None
 
 
 def evaluate_authority_guard(data: dict[str, Any] | None, *, runtime: str) -> AuthorityGuardResult:
@@ -47,6 +53,7 @@ def evaluate_authority_guard(data: dict[str, Any] | None, *, runtime: str) -> Au
 
     state: SessionState | None = None
     store: SessionStore | None = None
+    instance_id: str | None = None
     covered_tool = sanitize_covered_tool_name(data.get("tool_name") if isinstance(data.get("tool_name"), str) else None)
     try:
         payload_cwd = data.get("cwd")
@@ -54,6 +61,9 @@ def evaluate_authority_guard(data: dict[str, Any] | None, *, runtime: str) -> Au
         store = resolve_session_store(cwd, session_id=data.get("session_id") if runtime == "claude_code" else None)
         if store is None:
             raise ValueError("managed session could not be resolved")
+        instance_id = os.environ.get(SESSION_INSTANCE_ENV) or capture_session_instance(
+            store.forge_root, store.session_name
+        )
         state = store.read()
         marker = parse_authority_marker(raw_marker, state)
         authority = state.intent.authority
@@ -72,6 +82,7 @@ def evaluate_authority_guard(data: dict[str, Any] | None, *, runtime: str) -> Au
             state=state,
             store=store,
             marker=marker,
+            instance_id=instance_id,
         )
     except Exception:
         return AuthorityGuardResult(
@@ -82,6 +93,7 @@ def evaluate_authority_guard(data: dict[str, Any] | None, *, runtime: str) -> Au
             state=state,
             store=store,
             marker=None,
+            instance_id=instance_id,
         )
 
 
@@ -89,6 +101,8 @@ def journal_authority_denial(result: AuthorityGuardResult, *, runtime: str) -> b
     """Best-effort denial journal; return False without weakening the deny."""
     if not result.deny or result.state is None or result.store is None:
         return True
+    if result.instance_id is None:
+        return False
     try:
         run_id = result.marker.run_id if result.marker is not None else _recover_valid_marker_run_id()
         hook_digest = (
@@ -107,7 +121,13 @@ def journal_authority_denial(result: AuthorityGuardResult, *, runtime: str) -> b
             hook_registration_sha256=hook_digest,
             covered_tool=result.covered_tool or "unknown",
         )
-        append_authority_event(str(result.store.forge_root), event)
+        with session_worker_lease(
+            result.store.forge_root,
+            result.store.session_name,
+            expected_instance_id=result.instance_id,
+            label="authority denial",
+        ):
+            append_authority_event(str(result.store.forge_root), event)
     except Exception:
         return False
     return True

{multi_forge-1.1.0 → multi_forge-1.1.3}/src/forge/cli/hooks/codex_stop.py

@@ -31,6 +31,7 @@ from forge.session.effective import compute_effective_intent
 from forge.session.hooks.session_start import resolve_session_store
 from forge.session.models import SessionState, session_runtime
 from forge.session.store import SessionStore
+from forge.session.workers import SESSION_INSTANCE_ENV, capture_session_instance
 
 _log = logging.getLogger(__name__)
 INPUT_BYTES = 512_000
@@ -110,7 +111,7 @@ def resolve_context(data: dict[str, Any]) -> tuple[stop_review.TurnContext, Sess
         data.get("turn_id", ""),
         sup,
         read_bound_lane(state, SUPERVISOR_CONSUMER),
-        store.review_identity(create=True) or "",
+        os.environ.get(SESSION_INSTANCE_ENV) or capture_session_instance(store.forge_root, state.name),
         native_boundary=boundary_from_hook(data, admitted=True) if sup.native_source else None,
     )
     return context, store
@@ -218,6 +219,6 @@ def _freeze_lane(store: SessionStore, context: stop_review.TurnContext) -> None:
             ensure_consumer_lane_binding(state, SUPERVISOR_CONSUMER, context.lane)
 
     try:
-        store.update(timeout_s=1, mutate=mutate)
+        store.update(timeout_s=1, mutate=mutate, expected_instance_id=context.session_identity)
     except Exception as exc:
         _log.warning("Stop reviewer lane could not be frozen (%s)", type(exc).__name__)