soliplex 0.86__tar.gz → 0.87__tar.gz

{soliplex-0.86/src/soliplex.egg-info → soliplex-0.87}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: soliplex
-Version: 0.86
+Version: 0.87
 Summary: An AI-powered Retrieval-Augmented Generation (RAG) system with a modern web interface.
 Author-email: Enfold <info@enfoldsystems.net>
 Classifier: Programming Language :: Python :: 3
@@ -9,39 +9,39 @@ Requires-Python: >=3.13
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: ag-ui-protocol<0.1.19,>=0.1.18
-Requires-Dist: aiohttp<3.15,>=3.14.2
+Requires-Dist: aiohttp<3.15,>=3.14.4
 Requires-Dist: aiosqlite
 Requires-Dist: alembic<1.19,>=1.18.4
 Requires-Dist: authlib
 Requires-Dist: bubble-sandbox<0.14,>=0.13.0
-Requires-Dist: packaging
+Requires-Dist: certifi>=2026.10.19
 Requires-Dist: cryptography>=50.0.0
-Requires-Dist: fastapi
-Requires-Dist: fastmcp<5.0,>=4.0.2
 Requires-Dist: fakeredis!=2.35.0
+Requires-Dist: fastapi
+Requires-Dist: fastmcp<5.0,>=4.1.2
 Requires-Dist: greenlet
-Requires-Dist: haiku.rag-slim<0.99,>=0.98.0
+Requires-Dist: haiku.rag-slim<0.102,>=0.101.0
 Requires-Dist: idna>=3.15
 Requires-Dist: itsdangerous
 Requires-Dist: joserfc<1.7,>=1.6.7
 Requires-Dist: jsonpatch
-Requires-Dist: mcp>=1.27.2
-Requires-Dist: pillow<12.4,>=12.3.0
-Requires-Dist: python-jsonpath
-Requires-Dist: python-multipart>=0.0.31
 Requires-Dist: jwcrypto
 Requires-Dist: logfire[fastapi]
+Requires-Dist: mcp>=1.27.2
+Requires-Dist: packaging
+Requires-Dist: pillow<14,>=13.0
 Requires-Dist: pyasn1>=0.6.4
 Requires-Dist: pydantic-ai-slim[google]<3.0,>=2.53.0
 Requires-Dist: pydantic-settings<2.15,>=2.14.2
 Requires-Dist: pyjwt<2.16,>=2.15.0
 Requires-Dist: pymdown-extensions>=11.0.0
+Requires-Dist: python-jsonpath
 Requires-Dist: python-keycloak
+Requires-Dist: python-multipart>=0.0.31
 Requires-Dist: skills-ref
 Requires-Dist: sqlmodel
 Requires-Dist: starlette>=1.3.1
 Requires-Dist: uvicorn[standard]
-Requires-Dist: certifi>=2025.11.12
 Provides-Extra: postgres
 Requires-Dist: psycopg; extra == "postgres"
 Provides-Extra: postgres-binary

{soliplex-0.86 → soliplex-0.87}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "soliplex"
-version = "0.86"
+version = "0.87"
 description = "An AI-powered Retrieval-Augmented Generation (RAG) system with a modern web interface."
 authors = [{ name = "Enfold", email = "info@enfoldsystems.net" }]
 readme = "README.md"
@@ -15,39 +15,39 @@ classifiers = [
 ]
 dependencies = [
     "ag-ui-protocol >= 0.1.18, < 0.1.19",
-    "aiohttp >= 3.14.2, < 3.15",  # multiple CVEs
+    "aiohttp >= 3.14.4, < 3.15",  # multiple CVEs
     "aiosqlite",
     "alembic >= 1.18.4, < 1.19",
     "authlib",
     "bubble-sandbox >= 0.13.0, < 0.14",
-    "packaging",
+    "certifi >= 2026.10.19",  # PYSEC-2026-4320
     "cryptography >= 50.0.0",  # PYSEC-2026-3552
-    "fastapi",
-    "fastmcp >= 4.0.2, < 5.0",
     "fakeredis != 2.35.0",  # brownbag
+    "fastapi",
+    "fastmcp >= 4.1.2, < 5.0",
     "greenlet",
-    "haiku.rag-slim >= 0.98.0, < 0.99",
+    "haiku.rag-slim >= 0.101.0, < 0.102",
     "idna >= 3.15",
     "itsdangerous",
     "joserfc >= 1.6.7, < 1.7",  # CVE-2026-48990
     "jsonpatch",
-    "mcp >= 1.27.2",  # CVE-2026-52870
-    "pillow >= 12.3.0, < 12.4",  # PYSEC-2026-225{3,4,5,6,7}
-    "python-jsonpath",  # RFC 9535 query support
-    "python-multipart >= 0.0.31",  # Multiple CVEs
     "jwcrypto",
     "logfire[fastapi]",
+    "mcp >= 1.27.2",  # CVE-2026-52870
+    "packaging",
+    "pillow >= 13.0, < 14",  # Many-many
     "pyasn1 >= 0.6.4",  # PYSEC-2026-3456
     "pydantic-ai-slim[google] >= 2.53.0, < 3.0",  # PYSEC-2026-4285
     "pydantic-settings >= 2.14.2, < 2.15",  # GHSA-4xgf-cpjx-pc3j
     "pyjwt >= 2.15.0, < 2.16",  # CVE-2026-102275
     "pymdown-extensions >= 11.0.0",  # CVE-2026-61632
+    "python-jsonpath",  # RFC 9535 query support
     "python-keycloak",
+    "python-multipart >= 0.0.31",  # Multiple CVEs
     "skills-ref",
     "sqlmodel",
     "starlette >= 1.3.1",  # Multiple CVEs
     "uvicorn[standard]",
-    "certifi >= 2025.11.12",
 ]
 
 # Database drivers are not dependencies:  soliplex imports none of them,

{soliplex-0.86 → soliplex-0.87}/src/soliplex/config/rag.py

@@ -84,7 +84,8 @@ class RagDbFileNotFound(ValueError):
         self._config_path = _config_path
         super().__init__(
             f"RAG DB file not found: {rag_db_filename} "
-            f"(configured in {_config_path})"
+            f"(configured in {_config_path}). "
+            "Run 'haiku-rag init' to create."
         )
 
 

{soliplex-0.86 → soliplex-0.87}/src/soliplex/config/rooms.py

@@ -289,7 +289,11 @@ class RoomConfig:
 
     @property
     def has_thread_uploads(self) -> bool:
-        """Can files be uploaded to threads in this room at all?"""
+        """Can files be uploaded to threads in this room?
+
+        Thread uploads do not require extra permissions, but they are
+        allowed only in rooms which configure the sandbox skill.
+        """
         upload_path = getattr(
             self._installation_config,
             "threads_upload_path",
@@ -299,13 +303,18 @@ class RoomConfig:
 
     @property
     def has_room_uploads(self) -> bool:
-        """Can files be uploaded to this room at all?"""
+        """Can files be uploaded to this room?
+
+        Room uploads require only that the installation's uploads tree
+        is configured: upload is permitted by the room authorization
+        policy's 'ALLOW WRITE' ACL entries.
+        """
         upload_path = getattr(
             self._installation_config,
             "rooms_upload_path",
             None,
         )
-        return self.has_sandbox and upload_path is not None
+        return upload_path is not None
 
     @property
     def agui_feature_names(self) -> tuple[str]:

{soliplex-0.86 → soliplex-0.87}/src/soliplex/loggers.py

@@ -40,6 +40,7 @@ UPLOADS_GET_ROOM_FILE = "uploads get room file"
 UPLOADS_GET_ROOM_THREAD = "uploads get room thread"
 UPLOADS_GET_ROOM_THREAD_FILE = "uploads get room thread file"
 UPLOADS_POST_ROOM = "uploads post room"
+UPLOADS_DELETE_ROOM_FILE = "uploads delete room file"
 UPLOADS_POST_ROOM_THREAD = "uploads post room thread"
 
 WORKDIRS_GET_ROOM_THREAD = "workdirs get room thread"
@@ -106,6 +107,11 @@ INST_GET_INSTALLATION_PROVIDERS = "get installation providers"
 INST_GET_INSTALLATION_GIT_METADATA = "get installation git metadata"
 INST_GET_INSTALLATION_IDENTITY = "get installation identity"
 INST_NO_INSTALLATION_IDENTITY = "installation identity not configured"
+INST_POST_RELOAD_ROOMS = "installation reload rooms"
+INST_RELOAD_ROOMS_MULTI_WRITER = (
+    "room configs reload unsupported with multiple workers: restart"
+    " the server to reload"
+)
 
 LOG_INGEST_INGEST_LOGS = "ingest logs"
 LOG_INGEST_PAYLOAD_TOO_BIG = "payload too big"
@@ -163,6 +169,7 @@ AUDIT_RESOURCE_INSTALLATION = "installation"
 AUDIT_RESOURCE_INSTALLATION_VERSIONS = "installation-versions"
 AUDIT_RESOURCE_INSTALLATION_PROVIDERS = "installation-providers"
 AUDIT_RESOURCE_INSTALLATION_GIT_METADATA = "installation-git-metadata"
+AUDIT_RESOURCE_INSTALLATION_ROOMS = "installation-rooms"
 AUDIT_RESOURCE_ROOM_UPLOAD = "room-upload"
 
 # room-authz audit events
@@ -180,6 +187,7 @@ AUDIT_INSTALLATION_READ = "installation read"
 AUDIT_INSTALLATION_VERSIONS_READ = "installation versions read"
 AUDIT_INSTALLATION_PROVIDERS_READ = "installation providers read"
 AUDIT_INSTALLATION_GIT_METADATA_READ = "installation git metadata read"
+AUDIT_INSTALLATION_ROOMS_RELOADED = "installation rooms reloaded"
 
 # server-lifecycle audit events
 AUDIT_SERVER_STARTING = "server starting"
@@ -213,9 +221,10 @@ AUDIT_SANDBOX_ACTION_READ_IMAGE = "read-image"
 AUDIT_SANDBOX_REASON_TIMEOUT = "timeout"
 AUDIT_SANDBOX_REASON_EXIT_CODE = "exit-code"
 
-# room-upload audit events: an admin (privileged) adds shared reference
+# room-upload audit events: an admin / privileged user adds shared reference
 # material to a room, changing what the room's agent and members can access.
 AUDIT_ROOM_UPLOAD_ADDED = "room upload added"
+AUDIT_ROOM_UPLOAD_DELETED = "room upload deleted"
 
 # room-access audit events. 'AUDIT_ROOM_ACCESS' is the single "a principal
 # accessed room X" event, emitted across every entry path: the authenticated
@@ -547,6 +556,14 @@ class InstallationConfigAuditLog(AuditLogWrapper):
     def installation_git_metadata_read(self):
         self._succeeded(AUDIT_INSTALLATION_GIT_METADATA_READ)
 
+    def rooms_reloaded(self, added, removed, changed):
+        self._succeeded(
+            AUDIT_INSTALLATION_ROOMS_RELOADED,
+            rooms_added=added,
+            rooms_removed=removed,
+            rooms_changed=changed,
+        )
+
 
 class RAGAccessAuditLog(AuditLogWrapper):
     """Record knowledge-base accesses made while answering a request
@@ -769,6 +786,15 @@ class RoomUploadAuditLog(AuditLogWrapper):
             upload_filename=filename,
         )
 
+    def room_upload_deleted(self, room_id: str, filename: str):
+        # NB: 'filename' is a reserved LogRecord attribute, so the stored
+        # file is recorded under 'upload_filename'.
+        self._succeeded(
+            AUDIT_ROOM_UPLOAD_DELETED,
+            room_id=room_id,
+            upload_filename=filename,
+        )
+
 
 class RoomAccessAuditLog(AuditLogWrapper):
     """Record access to a room (and, for the CLI, the agent-run outcome).

{soliplex-0.86 → soliplex-0.87}/src/soliplex/models.py

@@ -483,6 +483,18 @@ class InstallationInfo(pydantic.BaseModel):
         )
 
 
+class RoomConfigsReloaded(pydantic.BaseModel):
+    """The room IDs the last room-configs reload changed
+
+    'changed' means the reloaded config compares unequal to the one it
+    replaced;  unchanged rooms appear in none of the three fields.
+    """
+
+    added: list[str] = []
+    removed: list[str] = []
+    changed: list[str] = []
+
+
 class Installation(pydantic.BaseModel):
     """Configuration for a set of rooms, completions, etc."""