prefect-client 3.7.8.dev4__tar.gz → 3.7.9.dev2__tar.gz

{prefect_client-3.7.8.dev4 → prefect_client-3.7.9.dev2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: prefect-client
-Version: 3.7.8.dev4
+Version: 3.7.9.dev2
 Summary: Workflow orchestration and management.
 Project-URL: Changelog, https://github.com/PrefectHQ/prefect/releases
 Project-URL: Documentation, https://docs.prefect.io

prefect_client-3.7.9.dev2/src/prefect/_build_info.py

@@ -0,0 +1,5 @@
+# Generated by versioningit
+__version__ = "3.7.9.dev2"
+__build_date__ = "2026-07-15 08:51:28.185474+00:00"
+__git_commit__ = "4e685996b4633ab80f77d5ec98249fffeb39d36f"
+__dirty__ = False

{prefect_client-3.7.8.dev4 → prefect_client-3.7.9.dev2}/src/prefect/concurrency/_asyncio.py

@@ -43,6 +43,51 @@ class AcquireConcurrencySlotTimeoutError(TimeoutError):
 logger: logging.Logger = get_logger("concurrency")
 
 
+def _format_http_status_error(exc: httpx.HTTPStatusError) -> str:
+    """Format an HTTP status error from the server into a compact string.
+
+    Handles both Prefect API payloads (`exception_detail`) and raw FastAPI
+    payloads (`detail`), extracting Pydantic-style validation errors and
+    dropping the leading `body` location component.
+    """
+    status_code = exc.response.status_code
+    reason = exc.response.reason_phrase
+    status_text = f"{status_code} {reason}" if reason else str(status_code)
+
+    try:
+        body = exc.response.json()
+    except Exception:
+        body = None
+
+    messages: list[str] = []
+    if isinstance(body, dict):
+        errors = body.get("exception_detail") or body.get("detail")
+        if isinstance(errors, list):
+            for error in errors:
+                if not isinstance(error, dict):
+                    continue
+                msg = error.get("msg")
+                if not isinstance(msg, str):
+                    continue
+                loc = error.get("loc")
+                if isinstance(loc, (list, tuple)) and loc:
+                    if loc[0] == "body":
+                        loc = loc[1:]
+                    field = ".".join(str(part) for part in loc)
+                else:
+                    field = ""
+                if field:
+                    messages.append(f"{field}: {msg}")
+                else:
+                    messages.append(msg)
+        elif isinstance(errors, str):
+            messages.append(errors)
+
+    if messages:
+        return f"{status_text}: {'; '.join(messages)}"
+    return status_text
+
+
 async def aacquire_concurrency_slots(
     names: list[str],
     slots: int,
@@ -59,6 +104,11 @@ async def aacquire_concurrency_slots(
         raise AcquireConcurrencySlotTimeoutError(
             f"Attempt to acquire concurrency slots timed out after {timeout_seconds} second(s)"
         ) from timeout
+    except httpx.HTTPStatusError as exc:
+        raise ConcurrencySlotAcquisitionError(
+            f"Unable to acquire concurrency slots on {names!r}: "
+            f"{_format_http_status_error(exc)}"
+        ) from exc
     except Exception as exc:
         raise ConcurrencySlotAcquisitionError(
             f"Unable to acquire concurrency slots on {names!r}"
@@ -104,6 +154,11 @@ async def aacquire_concurrency_slots_with_lease(
         raise AcquireConcurrencySlotTimeoutError(
             f"Attempt to acquire concurrency slots timed out after {timeout_seconds} second(s)"
         ) from timeout
+    except httpx.HTTPStatusError as exc:
+        raise ConcurrencySlotAcquisitionError(
+            f"Unable to acquire concurrency slots on {names!r}: "
+            f"{_format_http_status_error(exc)}"
+        ) from exc
     except Exception as exc:
         raise ConcurrencySlotAcquisitionError(
             f"Unable to acquire concurrency slots on {names!r}"

{prefect_client-3.7.8.dev4 → prefect_client-3.7.9.dev2}/src/prefect/filesystems.py

@@ -412,14 +412,54 @@ class RemoteFileSystem(WritableFileSystem, WritableDeploymentStorage):
 
         # Confirm that absolute paths are valid
         if scheme:
-            if scheme != base_scheme:
+            if scheme.lower() != base_scheme.lower():
                 raise ValueError(
                     f"Path {path!r} with scheme {scheme!r} must use the same scheme as"
                     f" the base path {base_scheme!r}."
                 )
 
         if netloc:
-            if (netloc != base_netloc) or not urlpath.startswith(base_urlpath):
+            if netloc != base_netloc:
+                raise ValueError(
+                    f"Path {path!r} is outside of the base path {self.basepath!r}."
+                )
+
+            # Normalize the base path for containment checks so that sibling prefixes
+            # (e.g. base `/foo` vs path `/foobar`) are not treated as contained.
+            base_path = base_urlpath.rstrip("/")
+            base_output_path = base_path + "/" if base_path else "/"
+
+            if not urlpath:
+                urlpath = "/"
+
+            # Decode percent-encoded and backslash separators only for traversal
+            # checks. The containment check below uses the raw URL path so that
+            # prefix spoofs such as `pre%66ix` or `prefix%2Fchild` are rejected.
+            decoded_path = urllib.parse.unquote(urlpath).replace("\\", "/")
+            if any(segment == ".." for segment in decoded_path.split("/")):
+                raise ValueError(
+                    f"Path {path!r} is outside of the base path {self.basepath!r}."
+                )
+
+            if urlpath == base_path or urlpath == base_output_path:
+                return urllib.parse.urlunsplit(
+                    (base_scheme, base_netloc, base_output_path, "", "")
+                )
+
+            if (base_path and urlpath.startswith(base_path + "/")) or (
+                not base_path and urlpath.startswith("/")
+            ):
+                return urllib.parse.urlunsplit(
+                    (base_scheme, base_netloc, urlpath, "", "")
+                )
+
+            raise ValueError(
+                f"Path {path!r} is outside of the base path {self.basepath!r}."
+            )
+
+        if scheme:
+            decoded_path = urllib.parse.unquote(urlpath).replace("\\", "/")
+            if any(segment == ".." for segment in decoded_path.split("/")):
                 raise ValueError(
                     f"Path {path!r} is outside of the base path {self.basepath!r}."
                 )

{prefect_client-3.7.8.dev4 → prefect_client-3.7.9.dev2}/src/prefect/workers/_worker_channel/_transport.py

@@ -143,7 +143,12 @@ class WorkerChannelTransport:
 
         status_code = self._status_code_from_exception(exc)
         if status_code is not None:
-            if status_code in {401, 403}:
+            if status_code == 401:
+                return WorkerChannelTerminalError(
+                    WorkerChannelCloseReason.AUTHENTICATION_FAILED.value,
+                    "Worker channel setup was rejected by the server",
+                )
+            if status_code == 403:
                 return WorkerChannelTerminalError(
                     WorkerChannelCloseReason.AUTHORIZATION_FAILED.value,
                     "Worker channel setup was rejected by the server",

prefect_client-3.7.8.dev4/src/prefect/_build_info.py

@@ -1,5 +0,0 @@
-# Generated by versioningit
-__version__ = "3.7.8.dev4"
-__build_date__ = "2026-07-09 09:23:46.650691+00:00"
-__git_commit__ = "467544da6cd2526a549c1003d8a991c95a514392"
-__dirty__ = False