feat(website): a session cookie per site, the clock's rate, conformance levels and models= (FD-4683) by williamloo-scale · Pull Request #444 · scaleapi/agentenv-framework

williamloo-scale · 2026-11-02T19:10:12Z

Stacked on #443.

Website SDK follow-ups.

Session cookie per site. agentenv_session_<name>, named on the card, so two sites under one gateway host don't overwrite each other's. The shared agentenv_session is still read for one release.
Clock rate. /clock/time also answers virtual_seconds_per_real_second, which UniverseClock follows instead of inferring it.
Conformance: required vs recommended. Only what website/v1 requires of any server fails a run: any host, health, no page at the reserved paths (new), the data-plane round trip. The card's details, X-Universe-Now, clock, forwarded headers and cookies warn; --strict fails on a warning.
@website(models=...). An object with load/export/reset, or SQLAlchemy models. With models the site gets self.db on DATABASE_URL, and the data plane reads those tables, so the GUI and the MCP tools share rows.

Before merging

models= adds an optional db extra (sqlalchemy>=2.0), included in dev, and updates uv.lock. SQLAlchemy is imported only when a site uses models.

Test

Unit suite: 12,625 passed; the models= tests (6) also pass with SQLAlchemy installed.

🤖 Generated with Claude Code

Confidence Score: 5/5

The PR appears safe to merge with the warning-handling fix from PR #446.

Summary

Adds per-site cookies, explicit clock rates, required and recommended conformance checks, and database-backed sites through models=.

Website pages and data tools can share rows in a site’s database.
The conformance checker separates required checks from recommended ones.
Each website uses its own session cookie name.
Website clocks follow the rate reported by the gateway.

_{Reviews (16) · Last reviewed commit: "fix(website): a models= site orders a se..." · Reviewed by Greptile}

socket-security · 2026-11-03T18:01:04Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/psycopg@3.3.7

View full report

…'s websites as its MCP servers (FD-4683) A website env, and a multi env's websites, get the harness treatment MCP servers get: sync_env_clock syncs them (and tells them main's timezone), snapshot_env exports each through its data plane and fails on a site whose card can't be read, and an apply_server_config broadcast reaches them; a site without the clock, a data plane or the config extension is skipped. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…server the env card lists, at its own route (FD-4683) The servers behind an env's gateway come from its card's children_environments, each at its own /svc route, through new protocol helpers (ChildEnv, children, child_at, child_named, serves), not from the env's definition: a website sharing an MCP server's name is its own server, and a card without data/get in its operations serves no v1 data plane. The definition is read only for servers that serve no card, and for a record whose card can't be read, logged. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…tract, and a conformance check tests any server (FD-4683) This PR's change, rebased as one commit onto #427. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

… keep older sites and shared names working (FD-4683) - The gateway answers 503 on a site's route while its card can't be read, rather than forwarding with nothing reserved. - A plugin's MultiEnv record looks each child up by its kind, so a website and an MCP server may share a name. - The state verifier reads a site its definition names but its card doesn't list at /svc/<name>/go, deprecated. - The clock script is put in streamed HTML holding only what comes before <head>. - Conformance fails a website/v1 ready that answers an HTTP error, whatever its body says. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…ver HTTP client the test client uses (FD-4683) After a sign-out the client's jar keeps the site's signed-out cookie under testserver.local, and setting the forged one adds a second cookie of the same name. httpx2, which Starlette's TestClient uses when it is installed (as on CodeBuild), sends the forged one first, so the site reads the valid signed-out cookie and the test fails; httpx sends them the other way round. Clearing the jar first sends the forged cookie alone. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

…op /go, the state op and website_state_verifier (FD-4683) - The SDK serves no `/go`, no `params.state.path` and no `website/v1` `state` op; `STATE_PATH`, `WebsiteState`, `website_state`, `website_sites` and `website/state.py` are gone, and the default store keeps no initial state or diff. - Conformance runs the data plane's round trip on every server, with no skip for a state that shows changes. - The gateway reserves the card's `url` and every advertised endpoint, no longer a state path. - `website_state_verifier` is removed from the framework; grading against a site's state belongs outside it. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

… items in OpenAPI, and find the clock's sync_time by name (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…ses the conformance check (FD-4683) This PR's change, rebased as one commit onto #428. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…s, and adds a note once per submit (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…sign-in fails, and reloads itself at its slash-ending address (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…hrough data/get, not /go (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…s, settles a save the server accepted, and reloads itself on its own origin (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…gers by route (FD-4683) This PR's change, rebased as one commit onto #429. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

… conformance levels and models= (FD-4683) This PR's change, rebased as one commit onto #443. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

… so its own export loads back (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…rents first, so its export loads back (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…dels= sites; data/get alone (FD-4683) - The store keeps no sessions: no `?sid=`, no `agentenv_sid_<name>` cookie, no `changed_sessions`; `self.store` is the site's one store, which the data plane loads, exports and resets. - A models= site keeps no initial state and no diff; its data plane is its database's. - Conformance runs the round trip with no skip for changed state or sessions. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…hole and restores enum columns as their members (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

…ength parents first, without recursing (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

This was referenced Nov 2, 2026

feat(website): one spec declares a site, composes it and checks any server (FD-4683) #445

Open

feat(website)!: WebsiteEnvironment serves a site on the website/v1 contract, and a conformance check tests any server (FD-4683) #428

Merged

williamloo-scale changed the title ~~website: per-site session cookie, /go?sid=, clock rate, conformance levels, models= (FD-4683)~~ feat(website): a session cookie per site, /go?sid=, the clock's rate, conformance levels and models= (FD-4683) Nov 3, 2026

williamloo-scale marked this pull request as ready for review November 3, 2026 00:24

williamloo-scale requested a review from a team as a code owner November 3, 2026 00:24

greptile-apps Bot reviewed Nov 3, 2026

View reviewed changes

Comment thread packages/agentenv-protocol/pyproject.toml Resolved

Comment thread packages/agentenv-protocol/src/agentenv_protocol/website/conformance.py Resolved

Comment thread packages/agentenv-protocol/src/agentenv_protocol/website/conformance.py Resolved

greptile-apps Bot reviewed Nov 3, 2026

View reviewed changes

Comment thread packages/agentenv-protocol/src/agentenv_protocol/website/database.py Resolved

greptile-apps Bot mentioned this pull request Nov 3, 2026

feat(website): a Notes site on WebsiteEnvironment, one image that passes the conformance check (FD-4683) #429

Open

greptile-apps Bot reviewed Nov 3, 2026

View reviewed changes

Comment thread packages/agentenv-protocol/src/agentenv_protocol/website/environment.py Resolved

Comment thread packages/agentenv-protocol/src/agentenv_protocol/website/store.py Resolved

greptile-apps Bot reviewed Nov 3, 2026

View reviewed changes

Comment thread packages/agentenv-protocol/src/agentenv_protocol/website/database.py Resolved

greptile-apps Bot reviewed Nov 3, 2026

View reviewed changes

Comment thread packages/agentenv-protocol/src/agentenv_protocol/website/session.py Resolved

williamloo-scale and others added 3 commits November 3, 2026 13:34

feat(website): WebsiteEnvironment serves a site on the website/v1 con…

76145d2

…tract, and a conformance check tests any server (FD-4683) This PR's change, rebased as one commit onto #427. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

williamloo-scale force-pushed the wloo/website-gateway-auth branch from 8dcebd1 to 4c1fcc1 Compare November 3, 2026 21:50

williamloo-scale force-pushed the wloo/website-sdk-followups branch from 8090f3e to 2d64812 Compare November 3, 2026 21:50

greptile-apps Bot reviewed Nov 3, 2026

View reviewed changes

Comment thread packages/agentenv-protocol/src/agentenv_protocol/website/database.py Resolved

williamloo-scale force-pushed the wloo/website-gateway-auth branch from 4c1fcc1 to 22947c3 Compare November 3, 2026 22:52

williamloo-scale force-pushed the wloo/website-sdk-followups branch 2 times, most recently from 0ef31b9 to 615d6a0 Compare November 3, 2026 23:47

williamloo-scale force-pushed the wloo/website-gateway-auth branch from 22947c3 to 253eaec Compare November 3, 2026 23:47

greptile-apps Bot reviewed Nov 3, 2026

View reviewed changes

Comment thread packages/agentenv-protocol/src/agentenv_protocol/website/database.py Resolved

williamloo-scale force-pushed the wloo/website-sdk-followups branch from 718dbb1 to 65a1c8e Compare November 4, 2026 03:37

williamloo-scale force-pushed the wloo/website-gateway-auth branch from 253eaec to 18b1b98 Compare November 4, 2026 03:37

greptile-apps Bot reviewed Nov 4, 2026

View reviewed changes

Comment thread packages/agentenv-protocol/src/agentenv_protocol/website/database.py Resolved

williamloo-scale force-pushed the wloo/website-gateway-auth branch from 18b1b98 to d95702e Compare November 4, 2026 03:56

williamloo-scale force-pushed the wloo/website-sdk-followups branch from 65a1c8e to 0f672be Compare November 4, 2026 03:56

williamloo-scale changed the title ~~feat(website): a session cookie per site, /go?sid=, the clock's rate, conformance levels and models= (FD-4683)~~ feat(website): a session cookie per site, the clock's rate, conformance levels and models= (FD-4683) Nov 4, 2026

greptile-apps Bot reviewed Nov 4, 2026

View reviewed changes

Comment thread packages/agentenv-protocol/src/agentenv_protocol/website/database.py Resolved

williamloo-scale and others added 12 commits November 3, 2026 20:06

fix(website): leave a partial HTML answer as it is, type query lists'…

d4efdbb

… items in OpenAPI, and find the clock's sync_time by name (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

feat(website): a Notes site on WebsiteEnvironment, one image that pas…

175ad02

…ses the conformance check (FD-4683) This PR's change, rebased as one commit onto #428. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

fix(website): the Notes page saves queued edits before switching user…

4ee1be2

…s, and adds a note once per submit (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

fix(website): the Notes page keeps the signed-in user when a save or …

687c4a9

…sign-in fails, and reloads itself at its slash-ending address (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

refactor(website): the Notes example reads what a task left it with t…

8448c43

…hrough data/get, not /go (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

fix(website): the Notes page keeps unsaved edits apart from its input…

b055f91

…s, settles a save the server accepted, and reloads itself on its own origin (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

feat(gateway): a keyed deploy's role key, forwarded headers, and trig…

8389f76

…gers by route (FD-4683) This PR's change, rebased as one commit onto #429. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

feat(website): a session cookie per site, /go?sid=, the clock's rate,…

f5454b6

… conformance levels and models= (FD-4683) This PR's change, rebased as one commit onto #443. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

fix(website): a models= site's data load leaves out computed columns,…

ef1c24b

… so its own export loads back (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

fix(website): a models= site loads a self-referencing table's rows pa…

9741dbf

…rents first, so its export loads back (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

fix(website): a models= site's load matches a composite foreign key w…

3184f79

…hole and restores enum columns as their members (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

williamloo-scale force-pushed the wloo/website-gateway-auth branch from d95702e to 8389f76 Compare November 4, 2026 04:40

williamloo-scale force-pushed the wloo/website-sdk-followups branch from 0f672be to 3184f79 Compare November 4, 2026 04:40

greptile-apps Bot reviewed Nov 4, 2026

View reviewed changes

Comment thread packages/agentenv-protocol/src/agentenv_protocol/website/database.py Resolved

fix(website): a models= site orders a self-referencing chain of any l…

e759024

…ength parents first, without recursing (FD-4683) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

earakely-scale force-pushed the wloo/website-gateway-auth branch from 8389f76 to c7f214b Compare November 5, 2026 06:42

Navigation Menu

Repository navigation

feat(website): a session cookie per site, the clock's rate, conformance levels and models= (FD-4683) - #444

feat(website): a session cookie per site, the clock's rate, conformance levels and models= (FD-4683)#444
williamloo-scale wants to merge 19 commits into
wloo/website-gateway-authfrom
wloo/website-sdk-followups

williamloo-scale commented Nov 2, 2026 •

edited by greptile-apps Bot

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

socket-security Bot commented Nov 3, 2026 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

williamloo-scale commented Nov 2, 2026 • edited by greptile-apps Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Before merging

Test

Confidence Score: 5/5

Summary

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

socket-security Bot commented Nov 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

williamloo-scale commented Nov 2, 2026 •

edited by greptile-apps Bot

Loading

socket-security Bot commented Nov 3, 2026 •

edited

Loading