signalwire-sdk 3.7.3__tar.gz → 3.7.3.dev136__tar.gz

{signalwire_sdk-3.7.3 → signalwire_sdk-3.7.3.dev136}/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [Unreleased]
+
+### Fixed
+- In a chat session, the post-prompt summary is accepted. The chat service
+  fetches an agent's SWML under the conversation's id, so its tokens carry
+  that id, and posts the summary under its own runtime call id, with the
+  conversation's id as `conversation_id`. The SDK checked the token against
+  `call_id` only, so it refused every chat summary, retried until the service
+  gave up. A token is now accepted when it names the request's `call_id` or
+  its `conversation_id`, for the post-prompt and for secure functions alike;
+  a voice call, where the two are the same, is unchanged.
+
 ## [3.7.3] - 2026-10-19
 
 ### Added

{signalwire_sdk-3.7.3/signalwire/signalwire_sdk.egg-info → signalwire_sdk-3.7.3.dev136}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: signalwire-sdk
-Version: 3.7.3
+Version: 3.7.3.dev136
 Summary: SignalWire SDK for AI voice agents, live call control (RELAY) and REST. Run sw-pydocs for its documentation.
 Author-email: SignalWire Team <info@signalwire.com>
 License: MIT

{signalwire_sdk-3.7.3 → signalwire_sdk-3.7.3.dev136}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "signalwire-sdk"
-version = "3.7.3"
+version = "3.7.3.dev136"
 description = "SignalWire SDK for AI voice agents, live call control (RELAY) and REST. Run sw-pydocs for its documentation."
 authors = [
     {name = "SignalWire Team", email = "info@signalwire.com"}

{signalwire_sdk-3.7.3 → signalwire_sdk-3.7.3.dev136}/signalwire/signalwire/__init__.py

@@ -59,7 +59,7 @@ if TYPE_CHECKING:
     from signalwire.utils.schema_utils import SchemaValidationError
     from signalwire.web import WebService
 
-__version__ = "3.7.3"
+__version__ = "3.7.3.dev136"
 
 # §6.2-python (owner decision: NO packaging split — one package, all deps required;
 # IMPORT-TIME behavior only): the agent/web symbols are lazy-imported via module

{signalwire_sdk-3.7.3 → signalwire_sdk-3.7.3.dev136}/signalwire/signalwire/agent_server.py

@@ -68,7 +68,7 @@ class AgentServer:
         self.app = FastAPI(
             title="SignalWire AI Agents",
             description="Hosted SignalWire AI Agents",
-            version="3.7.3",
+            version="3.7.3.dev136",
             redirect_slashes=False,
             docs_url=None,
             redoc_url=None,

{signalwire_sdk-3.7.3 → signalwire_sdk-3.7.3.dev136}/signalwire/signalwire/core/agent_base.py

@@ -175,6 +175,12 @@ def _slot_names(klass: type) -> list[str]:
     return names
 
 
+def _conversation_id(body: Any) -> str | None:
+    """A request's ``conversation_id``, if it names one."""
+    value = body.get("conversation_id") if isinstance(body, dict) else None
+    return value if isinstance(value, str) and value else None
+
+
 class AgentBase(  # type: ignore[misc]  # intentional diamond: WebMixin's serve/_proxy_url_base override SWMLService/ServerlessMixin's by MRO order; mypy flags the base-vs-base shape diff but the resolution is deliberate
     AuthMixin,
     WebMixin,
@@ -1793,7 +1799,11 @@ class AgentBase(  # type: ignore[misc]  # intentional diamond: WebMixin's serve/
             )
 
         token = request.query_params.get("__token") or request.query_params.get("token")
-        rejection = target._tool_token_rejection(function_name, token, call_id)
+        # conversation_id only when the request names one, so an override
+        # written for the three-argument form keeps working
+        conversation_id = _conversation_id(body)
+        extra = {"conversation_id": conversation_id} if conversation_id else {}
+        rejection = target._tool_token_rejection(function_name, token, call_id, **extra)
         if rejection is not None:
             return self, rejection
         return target, None
@@ -1825,7 +1835,11 @@ class AgentBase(  # type: ignore[misc]  # intentional diamond: WebMixin's serve/
         return target
 
     def _tool_token_rejection(
-        self, function_name: str, token: str | None, call_id: str | None
+        self,
+        function_name: str,
+        token: str | None,
+        call_id: str | None,
+        conversation_id: str | None = None,
     ) -> dict[str, Any] | None:
         """Refuse a secure function's call unless it carries a valid token.
 
@@ -1836,10 +1850,16 @@ class AgentBase(  # type: ignore[misc]  # intentional diamond: WebMixin's serve/
         token. Every path that dispatches a SWAIG function, web server or
         serverless, checks it here.
 
+        The token may name the request's ``call_id`` or its
+        ``conversation_id``. A chat session fetches its SWML, and so gets its
+        tokens, under the conversation's id, then sends every request under
+        the chat service's own call id, with the conversation's id beside it.
+
         Args:
             function_name: The function the request asks to run
             token: The token from the request's query string, if any
             call_id: The call the request belongs to, if known
+            conversation_id: The request's ``conversation_id``, if any
 
         Returns:
             The SWAIG response to send instead of running the function, or
@@ -1860,7 +1880,16 @@ class AgentBase(  # type: ignore[misc]  # intentional diamond: WebMixin's serve/
             token
             and call_id is not None
             and hasattr(self, "_session_manager")
-            and self._session_manager.validate_tool_token(function_name, token, call_id)
+            and (
+                self._session_manager.validate_tool_token(function_name, token, call_id)
+                or (
+                    conversation_id
+                    and conversation_id != call_id
+                    and self._session_manager.validate_tool_token(
+                        function_name, token, conversation_id
+                    )
+                )
+            )
         )
         if is_valid:
             req_log.debug("token_valid")

{signalwire_sdk-3.7.3 → signalwire_sdk-3.7.3.dev136}/signalwire/signalwire/core/mixins/serverless_mixin.py

@@ -425,7 +425,15 @@ class ServerlessMixin(_HostTyped):  # type: ignore[misc]  # _HostTyped is object
         # and the token is checked against the agent that will run it
         call_id = _call_id(data)
         target = self._per_call_agent(query, data, headers)
-        rejection = target._tool_token_rejection(function_name, token, call_id)
+        conversation_id = data.get("conversation_id")
+        # conversation_id only when the request names one, so an override
+        # written for the three-argument form keeps working
+        extra = (
+            {"conversation_id": conversation_id}
+            if isinstance(conversation_id, str) and conversation_id
+            else {}
+        )
+        rejection = target._tool_token_rejection(function_name, token, call_id, **extra)
         if rejection is not None:
             return 200, json.dumps(rejection)
 

{signalwire_sdk-3.7.3 → signalwire_sdk-3.7.3.dev136}/signalwire/signalwire/core/mixins/web_mixin.py

@@ -1283,7 +1283,10 @@ class WebMixin(_HostTyped):  # type: ignore[misc]  # _HostTyped is object at run
             return 400, {"error": "The call_id in the URL and the body differ"}
         call_id = body_call_id or query_call_id
 
-        if not self._post_prompt_token_valid(token, call_id, req_log):
+        conversation_id = body.get("conversation_id")
+        if not isinstance(conversation_id, str) or not conversation_id:
+            conversation_id = None
+        if not self._post_prompt_token_valid(token, call_id, req_log, conversation_id):
             return 403, {"error": "Invalid or missing token"}
 
         # A per-call copy of the agent when dynamic configuration is set.
@@ -1321,9 +1324,16 @@ class WebMixin(_HostTyped):  # type: ignore[misc]  # _HostTyped is object at run
         return 200, {"success": True}
 
     def _post_prompt_token_valid(
-        self, token: str | None, call_id: str | None, req_log: Any
+        self,
+        token: str | None,
+        call_id: str | None,
+        req_log: Any,
+        conversation_id: str | None = None,
     ) -> bool:
-        """True when ``token`` is the post-prompt token minted for ``call_id``."""
+        """True when ``token`` is the post-prompt token minted for ``call_id``,
+        or for ``conversation_id``: a chat session's SWML, and so its token, is
+        made for the conversation, and its summary arrives under the chat
+        service's own call id."""
         if not token:
             req_log.warning("token_missing")
             return False
@@ -1334,6 +1344,13 @@ class WebMixin(_HostTyped):  # type: ignore[misc]  # _HostTyped is object at run
         try:
             is_valid = bool(
                 self._session_manager.validate_tool_token("post_prompt", token, call_id)
+                or (
+                    conversation_id
+                    and conversation_id != call_id
+                    and self._session_manager.validate_tool_token(
+                        "post_prompt", token, conversation_id
+                    )
+                )
             )
         except Exception as e:
             req_log.error("token_validation_error", error=str(e))

{signalwire_sdk-3.7.3 → signalwire_sdk-3.7.3.dev136/signalwire/signalwire_sdk.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: signalwire-sdk
-Version: 3.7.3
+Version: 3.7.3.dev136
 Summary: SignalWire SDK for AI voice agents, live call control (RELAY) and REST. Run sw-pydocs for its documentation.
 Author-email: SignalWire Team <info@signalwire.com>
 License: MIT