b60439152b
- harness/es.py: append-only event store + проекции (образец — кооп-портал) - harness/levels.py: уровни 1с/1м/1ч/1д, контекст ∝ масштабу - harness/scheduler.py: уровневые потоки, идемпотентные тики, absorbed-стабы - harness/isolated_runner.py + _llm_worker.py: LLM-тик в сабпроцессе (глобальный asyncio-рантайм Strands не переживает 2+ create_harness) - cli.py: init/task/tasks/status/events + requeue (написан самим минутным агентом) - 9router: отдельный ключ sk-simbiot, модель auto (glm-5.3 первым)
42 lines
1.8 KiB
Python
42 lines
1.8 KiB
Python
from pydantic import AnyHttpUrl, BaseModel, ConfigDict, Field
|
|
|
|
|
|
class ClientRegistrationOptions(BaseModel):
|
|
enabled: bool = False
|
|
client_secret_expiry_seconds: int | None = None
|
|
valid_scopes: list[str] | None = None
|
|
default_scopes: list[str] | None = None
|
|
|
|
|
|
class RevocationOptions(BaseModel):
|
|
enabled: bool = False
|
|
|
|
|
|
class AuthSettings(BaseModel):
|
|
# Preserve empty URL paths so a path-less issuer/resource passed as a string keeps its
|
|
# canonical form (no trailing slash). RFC 8414/9207 issuer comparison is exact string
|
|
# comparison, so a spurious trailing slash would break it. See PR #2925 for the metadata
|
|
# models; this applies the same to the server's own configured URLs.
|
|
model_config = ConfigDict(url_preserve_empty_path=True)
|
|
|
|
issuer_url: AnyHttpUrl = Field(
|
|
...,
|
|
description="OAuth authorization server URL that issues tokens for this resource server.",
|
|
)
|
|
service_documentation_url: AnyHttpUrl | None = None
|
|
client_registration_options: ClientRegistrationOptions | None = None
|
|
revocation_options: RevocationOptions | None = None
|
|
required_scopes: list[str] | None = None
|
|
identity_assertion_enabled: bool = Field(
|
|
default=False,
|
|
description="Advertise and accept the SEP-990 Identity Assertion Authorization Grant "
|
|
"(the RFC 7523 jwt-bearer grant carrying an ID-JAG) at the token endpoint, for enterprise "
|
|
"IdP flows. The provider must implement `exchange_identity_assertion`.",
|
|
)
|
|
|
|
# Resource Server settings (when operating as RS only)
|
|
resource_server_url: AnyHttpUrl | None = Field(
|
|
...,
|
|
description="The URL of the MCP server to be used as the resource identifier "
|
|
"and base route to look up OAuth Protected Resource Metadata.",
|
|
)
|