check against server hash

Author: smoreinis

examples/tutorials/00_sync/000_hello_acp/project/acp.py

@@ -2,12 +2,10 @@
 from agentex.lib.sdk.fastacp.fastacp import FastACP
 from agentex.lib.types.acp import SendMessageParams
 
-
 from agentex.lib.types.task_message_updates import TaskMessageUpdate
 from agentex.types.task_message import TaskMessageContent
 from agentex.types.task_message_content import TextContent
 from agentex.lib.utils.logging import make_logger
-from agentex.lib.utils.model_utils import BaseModel
 
 logger = make_logger(__name__)
 
@@ -18,27 +16,12 @@
 )
 
 
-class StateModel(BaseModel):
-    system_prompt: str
-    model: str
-
 @acp.on_message_send
 async def handle_message_send(
     params: SendMessageParams
 ) -> Union[TaskMessageContent, AsyncGenerator[TaskMessageUpdate, None]]:
-    from agentex.lib import adk
     """Default message handler with streaming support"""
-    # Try to retrieve the state. If it doesn't exist, create it.
-    task_state = await adk.state.get_by_task_and_agent(task_id=params.task.id, agent_id=params.agent.id)
-
-    if not task_state:
-        # If the state doesn't exist, create it.
-        state = StateModel(system_prompt="You are a helpful assistant that can answer questions.", model="gpt-4o-mini")
-        task_state = await adk.state.create(task_id=params.task.id, agent_id=params.agent.id, state=state)
-    else:
-        state = StateModel.model_validate(task_state.state)
     return TextContent(
         author="agent",
         content=f"Hello! I've received your message. Here's a generic response, but in future tutorials we'll see how you can get me to intelligently respond to your message. This is what I heard you say: {params.content.content}",
     )
-

examples/tutorials/00_sync/010_multiturn/project/acp.py

@@ -1,7 +1,7 @@
 import os
 from typing import AsyncGenerator, Union
 
-
+from agentex.lib import adk
 from agentex.lib.sdk.fastacp.fastacp import FastACP
 from agentex.lib.types.acp import SendMessageParams
 from agentex.lib.types.llm_messages import AssistantMessage, LLMConfig, SystemMessage, UserMessage
@@ -26,7 +26,6 @@ class StateModel(BaseModel):
 async def handle_message_send(
     params: SendMessageParams
 ) -> Union[TaskMessageContent, AsyncGenerator[TaskMessageUpdate, None]]:
-    from agentex.lib import adk
     """
     In this tutorial, we'll see how to handle a basic multi-turn conversation without streaming.
     """

src/agentex/lib/environment_variables.py

@@ -20,6 +20,8 @@ class EnvVarKeys(str, Enum):
     AGENT_NAME = "AGENT_NAME"
     AGENT_DESCRIPTION = "AGENT_DESCRIPTION"
     AGENT_ID = "AGENT_ID"
+    AGENT_API_KEY = "AGENT_API_KEY"
+    AGENT_API_KEY_HASH = "AGENT_API_KEY_HASH"
     # ACP Configuration
     ACP_URL = "ACP_URL"
     ACP_PORT = "ACP_PORT"
@@ -49,6 +51,8 @@ class EnvironmentVariables(BaseModel):
     AGENT_NAME: str
     AGENT_DESCRIPTION: str | None = None
     AGENT_ID: str | None = None
+    AGENT_API_KEY: str | None = None
+    AGENT_API_KEY_HASH: str | None = None
     ACP_TYPE: str | None = "agentic"
     # ACP Configuration
     ACP_URL: str

src/agentex/lib/sdk/fastacp/base/base_acp_server.py

@@ -1,5 +1,6 @@
 import asyncio
 import base64
+import hashlib
 import inspect
 import json
 import os
@@ -102,14 +103,9 @@ async def _handle_jsonrpc(self, request: Request):
             rpc_request = JSONRPCRequest(**data)
 
             # Check if the request is authenticated
-            if os.environ.get("AGENT_API_KEY") is not None:
+            if refreshed_environment_variables.AGENT_API_KEY_HASH:
                 authorization_header = request.headers.get("Authorization")
-                if authorization_header is None:
-                    return JSONRPCResponse(
-                        id=rpc_request.id,
-                        error=JSONRPCError(code=-32601, message="Unauthorized"),
-                    )
-                if authorization_header != f"Bearer {os.environ.get("AGENT_API_KEY")}":
+                if authorization_header != f"Bearer {refreshed_environment_variables.AGENT_API_KEY_HASH}":
                     return JSONRPCResponse(
                         id=rpc_request.id,
                         error=JSONRPCError(code=-32601, message="Unauthorized"),
@@ -409,15 +405,17 @@ async def _register_agent(self, env_vars: EnvironmentVariables):
                     if response.status_code == 200:
                         agent = response.json()
                         agent_id, agent_name = agent["id"], agent["name"]
-                        print(agent)
                         agent_api_key = agent["agent_api_key"]
+                        agent_api_key_hash = hashlib.sha256(agent_api_key.encode()).hexdigest()
 
                         os.environ["AGENT_ID"] = agent_id
                         os.environ["AGENT_NAME"] = agent_name
                         os.environ["AGENT_API_KEY"] = agent_api_key
+                        os.environ["AGENT_API_KEY_HASH"] = agent_api_key_hash
                         refreshed_environment_variables.AGENT_ID = agent_id
                         refreshed_environment_variables.AGENT_NAME = agent_name
                         refreshed_environment_variables.AGENT_API_KEY = agent_api_key
+                        refreshed_environment_variables.AGENT_API_KEY_HASH = agent_api_key_hash
                         get_async_agentex_client()  # refresh cache
                         logger.info(
                             f"Successfully registered agent '{env_vars.AGENT_NAME}' with Agentex server with acp_url: {full_acp_url}. Registration data: {registration_data}"