muse-code-sdk 1.4.12__tar.gz → 1.4.14__tar.gz

{muse_code_sdk-1.4.12 → muse_code_sdk-1.4.14}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: muse-code-sdk
-Version: 1.4.12
+Version: 1.4.14
 Summary: Muse Code SDK for MSP: asyncio-first facade over the generated wire types (muse-code-msp), with a thin sync wrapper.
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/meta-models/muse-code-sdk
@@ -15,7 +15,7 @@ Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: pydantic==2.13.5
-Requires-Dist: muse-code-msp==1.4.12
+Requires-Dist: muse-code-msp==1.4.14
 Dynamic: license-file
 
 # `muse-code-sdk`
@@ -84,6 +84,47 @@ async def main() -> None:
 asyncio.run(main())
 ```
 
+To run a session and the child agents it starts without approval prompts,
+start it under the built-in `:unrestricted` permission profile. Current
+releases admit every child of such a session without prompts; a child admitted
+with a narrower authority would stay gated at it.
+
+That profile is described, verbatim, as "No filesystem sandbox or approval
+prompts; local commands have direct network access; project trust is
+unchanged." It also sets the approval reviewer to none. Use it only for a
+trusted workspace and trusted prompts. Never use it where the prompts or the
+sandbox are what protects you.
+
+Start it with that profile, and pass the same profile when you resume it.
+Paste inside `main()` above, indented, before `await client.close()`, with the same client:
+
+```python
+from muse_code import ResumeSessionOptions, StartSessionOptions
+
+session = await client.start_session(StartSessionOptions(
+    workspace_root="/path/to/repo",  # an absolute path
+    permission_profile=":unrestricted",
+))
+saved_session_id = session.session_id
+# ... later, in the same client:
+session = await client.resume_session(ResumeSessionOptions(
+    session_id=saved_session_id,
+    permission_profile=":unrestricted",
+))
+```
+
+On start, `require_permission_profile=True` makes the client prove that the
+pick was applied, and raise `PermissionProfileNotApplied` if it cannot (a
+failed `session/read` read-back raises its own error). A host
+that does not report the committed selection fails that proof even when the
+pick was applied (seen with Muse Code 1.4.12). Resume has no
+`require_permission_profile`, so the client never verifies the pick there.
+
+`approval_mode` alone is not enough: it changes the session's own approval
+mode, but its child agents are capped by the session's permission profile.
+Under a prompting profile (such as `:ask-me`, whose approval is `on_request`),
+the children still ask.
+
 ## Documentation
 
 - Guides, cookbook recipes, and the protocol reference:

{muse_code_sdk-1.4.12 → muse_code_sdk-1.4.14}/README.md

@@ -64,6 +64,47 @@ async def main() -> None:
 asyncio.run(main())
 ```
 
+To run a session and the child agents it starts without approval prompts,
+start it under the built-in `:unrestricted` permission profile. Current
+releases admit every child of such a session without prompts; a child admitted
+with a narrower authority would stay gated at it.
+
+That profile is described, verbatim, as "No filesystem sandbox or approval
+prompts; local commands have direct network access; project trust is
+unchanged." It also sets the approval reviewer to none. Use it only for a
+trusted workspace and trusted prompts. Never use it where the prompts or the
+sandbox are what protects you.
+
+Start it with that profile, and pass the same profile when you resume it.
+Paste inside `main()` above, indented, before `await client.close()`, with the same client:
+
+```python
+from muse_code import ResumeSessionOptions, StartSessionOptions
+
+session = await client.start_session(StartSessionOptions(
+    workspace_root="/path/to/repo",  # an absolute path
+    permission_profile=":unrestricted",
+))
+saved_session_id = session.session_id
+# ... later, in the same client:
+session = await client.resume_session(ResumeSessionOptions(
+    session_id=saved_session_id,
+    permission_profile=":unrestricted",
+))
+```
+
+On start, `require_permission_profile=True` makes the client prove that the
+pick was applied, and raise `PermissionProfileNotApplied` if it cannot (a
+failed `session/read` read-back raises its own error). A host
+that does not report the committed selection fails that proof even when the
+pick was applied (seen with Muse Code 1.4.12). Resume has no
+`require_permission_profile`, so the client never verifies the pick there.
+
+`approval_mode` alone is not enough: it changes the session's own approval
+mode, but its child agents are capped by the session's permission profile.
+Under a prompting profile (such as `:ask-me`, whose approval is `on_request`),
+the children still ask.
+
 ## Documentation
 
 - Guides, cookbook recipes, and the protocol reference:

{muse_code_sdk-1.4.12 → muse_code_sdk-1.4.14}/pyproject.toml

@@ -5,7 +5,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "muse-code-sdk"
-version = "1.4.12"
+version = "1.4.14"
 description = "Muse Code SDK for MSP: asyncio-first facade over the generated wire types (muse-code-msp), with a thin sync wrapper."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -18,7 +18,7 @@ license-files = ["LICENSE"]
 # `pip install muse-code-sdk` must import, and the release bump moves this
 # package's version and its muse-code-msp pin together; pydantic bumps stay
 # reviewed PRs (test_publish_shape pins the pairing).
-dependencies = ["pydantic==2.13.5", "muse-code-msp==1.4.12"]
+dependencies = ["pydantic==2.13.5", "muse-code-msp==1.4.14"]
 classifiers = [
     # Alpha states the withheld promise: publication is permitted, but the
     # stability promise and conformance claim stay withheld — experimental

{muse_code_sdk-1.4.12 → muse_code_sdk-1.4.14}/src/muse_code/__init__.py

@@ -80,7 +80,7 @@ __all__ = [
 ]
 
 EXPECTED_SCHEMA_FINGERPRINT: Final[str] = (
-    "sha256:cfdb6d2525601b9bac76584ccb0610ab3a5539b5e4f51141f079b99b39fcb4e0"
+    "sha256:c94c3d1f2f51e6424074b9ec43eac3eedcf532d3dcd77351ec1383a87d3049c6"
 )
 """The stable schema-bundle fingerprint this SDK was built against.
 
@@ -92,7 +92,7 @@ Python SDK reds this lane instead of drifting silently.
 # The lockstep rule: the release train bumps pyproject.toml, the
 # distribution-metadata authority; this constant is aligned at publication
 # time.
-__version__: Final[str] = "1.4.12"
+__version__: Final[str] = "1.4.14"
 
 # The facade is imported last so the constants above are already bound: the
 # spawn path reads ``EXPECTED_SCHEMA_FINGERPRINT`` (lazily, at initialize

{muse_code_sdk-1.4.12 → muse_code_sdk-1.4.14}/src/muse_code/facade/approval.py

@@ -66,6 +66,7 @@ _REFRESH_FROM_REQUEST = frozenset(
         "judgeEscalated",
         "protectedWrite",
         "rawArgs",
+        "reviewerReason",
         "taskId",
         "toolCallId",
         "toolName",
@@ -302,6 +303,10 @@ class ApprovalRouter:
         # the retained request across stages.
         if "cuaCardFacts" in requested:
             refreshed["cuaCardFacts"] = requested["cuaCardFacts"]
+        # The escalation reason belongs to the call, so it stays with the
+        # retained request across stages.
+        if "reviewerReason" in requested:
+            refreshed["reviewerReason"] = requested["reviewerReason"]
         acked = self._in_flight.get(requested["approvalId"])
         if acked is not None:
             return self._after_ack(acked, refreshed)

{muse_code_sdk-1.4.12 → muse_code_sdk-1.4.14}/src/muse_code/facade/client.py

@@ -80,7 +80,8 @@ class StartSessionOptions:
     """Caller-facing options for ``session/start``.
 
     Composed from the generated ``SessionStartParams``. ``config`` is excluded as well as ``commandId`` until the facade
-    implements the required ``sessionMcp`` grant check and forwarding.
+    implements the required ``sessionMcp`` grant check and forwarding; ``previousSessionId`` is excluded because the
+    facade starts root sessions, and ``spawnedBy`` because the facade does not expose a spawner yet.
 
     Attributes:
         approval_mode: The approval enforcement mode to start under; omitted
@@ -139,6 +140,9 @@ class ResumeSessionOptions:
             wire's ``permissionProfile`` member: the host restores the
             retained authority first, then applies the pick. Omitted means
             no override.
+        model_id: The model override forwarded as the wire's ``modelId``
+            member: the host applies it after the warm pick, before
+            enrichments. Omitted means no override.
         recovery_mode: Optional recovery selection (wire ``recoveryMode``);
             omitted means no selection is sent.
         on_approval: Answers this session's approvals from its first frame,
@@ -158,6 +162,7 @@ class ResumeSessionOptions:
     exclude_items: bool | None = None
     history: Mapping[str, Any] | None = None
     permission_profile: str | None = None
+    model_id: str | None = None
     recovery_mode: RecoveryMode | None = None
     on_approval: ApprovalHandler | None = None
     on_approval_error: ApprovalFailureHandler | None = None
@@ -168,12 +173,15 @@ class ResumeSessionOptions:
 # generated params but not to the options dataclass reds THIS import (and thus
 # every test), so a regenerated member cannot silently fail to reach the wire.
 # The excluded members are the ones the facade owns rather than forwards:
-# `commandId` (the connection is the single minter) and `config`
-# (temporarily withheld until capability-checked forwarding lands). The owned
+# `commandId` (the connection is the single minter), `config`
+# (temporarily withheld until capability-checked forwarding lands) and
+# `previousSessionId` (the facade starts root sessions; the predecessor link
+# belongs to a client that switches sessions) and `spawnedBy` (the facade
+# does not expose a spawner yet). The owned
 # members are options-only posture the wire never carries (client-local
 # `requirePermissionProfile`, the required-selection check): subtracted from
 # the options side, so a regen that adds a same-named wire member reds here.
-_START_EXCLUDED = {"commandId", "config"}
+_START_EXCLUDED = {"commandId", "config", "previousSessionId", "spawnedBy"}
 _START_OWNED = {"requirePermissionProfile"}
 assert (
     {_camel(f.name) for f in fields(StartSessionOptions)} - _START_OWNED
@@ -521,6 +529,8 @@ class MuseClient(Generic[_I]):
             params["excludeItems"] = options.exclude_items
         if options.history is not None:
             params["history"] = options.history
+        if options.model_id is not None:
+            params["modelId"] = options.model_id
         if options.recovery_mode is not None:
             params["recoveryMode"] = options.recovery_mode
         if options.permission_profile is not None:

{muse_code_sdk-1.4.12 → muse_code_sdk-1.4.14}/src/muse_code_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: muse-code-sdk
-Version: 1.4.12
+Version: 1.4.14
 Summary: Muse Code SDK for MSP: asyncio-first facade over the generated wire types (muse-code-msp), with a thin sync wrapper.
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/meta-models/muse-code-sdk
@@ -15,7 +15,7 @@ Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: pydantic==2.13.5
-Requires-Dist: muse-code-msp==1.4.12
+Requires-Dist: muse-code-msp==1.4.14
 Dynamic: license-file
 
 # `muse-code-sdk`
@@ -84,6 +84,47 @@ async def main() -> None:
 asyncio.run(main())
 ```
 
+To run a session and the child agents it starts without approval prompts,
+start it under the built-in `:unrestricted` permission profile. Current
+releases admit every child of such a session without prompts; a child admitted
+with a narrower authority would stay gated at it.
+
+That profile is described, verbatim, as "No filesystem sandbox or approval
+prompts; local commands have direct network access; project trust is
+unchanged." It also sets the approval reviewer to none. Use it only for a
+trusted workspace and trusted prompts. Never use it where the prompts or the
+sandbox are what protects you.
+
+Start it with that profile, and pass the same profile when you resume it.
+Paste inside `main()` above, indented, before `await client.close()`, with the same client:
+
+```python
+from muse_code import ResumeSessionOptions, StartSessionOptions
+
+session = await client.start_session(StartSessionOptions(
+    workspace_root="/path/to/repo",  # an absolute path
+    permission_profile=":unrestricted",
+))
+saved_session_id = session.session_id
+# ... later, in the same client:
+session = await client.resume_session(ResumeSessionOptions(
+    session_id=saved_session_id,
+    permission_profile=":unrestricted",
+))
+```
+
+On start, `require_permission_profile=True` makes the client prove that the
+pick was applied, and raise `PermissionProfileNotApplied` if it cannot (a
+failed `session/read` read-back raises its own error). A host
+that does not report the committed selection fails that proof even when the
+pick was applied (seen with Muse Code 1.4.12). Resume has no
+`require_permission_profile`, so the client never verifies the pick there.
+
+`approval_mode` alone is not enough: it changes the session's own approval
+mode, but its child agents are capped by the session's permission profile.
+Under a prompting profile (such as `:ask-me`, whose approval is `on_request`),
+the children still ask.
+
 ## Documentation
 
 - Guides, cookbook recipes, and the protocol reference:

muse_code_sdk-1.4.14/src/muse_code_sdk.egg-info/requires.txt

@@ -0,0 +1,2 @@
+pydantic==2.13.5
+muse-code-msp==1.4.14

{muse_code_sdk-1.4.12 → muse_code_sdk-1.4.14}/tests/test_facade_approval.py

@@ -734,6 +734,38 @@ async def test_a_stage_advance_keeps_the_requests_cua_card_facts(facts: Any) ->
     await settled_io(updated.io)
 
 
+@pytest.mark.asyncio
+@pytest.mark.parametrize("reason", ["pipes a downloaded script into sh", None])
+async def test_a_stage_advance_keeps_the_requests_reviewer_reason(reason: Any) -> None:
+    # `reviewerReason` belongs to the call and `approval/updated` doesn't
+    # carry it, so the refreshed stage-2 request keeps the original request's
+    # reason, and a request without one stays without the key.
+    transport, session, minted = wired()
+    seen: List[Params] = []
+
+    def handler(request: Any) -> ApprovalDecisionInput:
+        seen.append(dict(request))
+        return ApprovalDecisionInput(choice_id="allow_once")
+
+    session.on_approval(handler)
+    overrides: Params = {} if reason is None else {"reviewerReason": reason}
+    first = session.apply(approval_requested(**overrides))
+    await wait_for_writes(transport, 1)
+    answer(transport, 0, {**decide_result("mint-0"), "terminal": False})
+    await settled_io(first.io)
+
+    updated = session.apply(stage_resolved(2, CHOICES))
+    await wait_for_writes(transport, 2)
+    assert minted == ["mint-0", "mint-1"]
+    assert len(seen) == 2
+    if reason is None:
+        assert "reviewerReason" not in seen[1]
+    else:
+        assert seen[1]["reviewerReason"] == reason
+    answer(transport, 1, decide_result("mint-1"))
+    await settled_io(updated.io)
+
+
 @pytest.mark.asyncio
 async def test_an_approval_updated_naming_the_decided_stage_asks_nothing() -> None:
     # The per-stage latch: an update that still names the stage this client

muse_code_sdk-1.4.12/src/muse_code_sdk.egg-info/requires.txt

@@ -1,2 +0,0 @@
-pydantic==2.13.5
-muse-code-msp==1.4.12