atlanhq-application-sdk-1705-1744

total 1136
drwxr-xr-x 1 root root   4096 Nov  6 22:41 .
drwxr-xr-x 1 root root   4096 Nov  6 22:42 ..
drwxr-xr-x 1 root root   4096 Nov  6 22:40 .agents
drwxr-xr-x 1 root root   4096 Nov  6 22:40 .claude
-rw-r--r-- 1 root root    650 Nov  6 22:40 .dockerignore
-rw-r--r-- 1 root root   1443 Nov  6 22:40 .env.example
drwxr-xr-x 1 root root   4096 Nov  6 22:42 .git
drwxr-xr-x 1 root root   4096 Nov  6 22:40 .github
-rw-r--r-- 1 root root   3426 Nov  6 22:40 .gitignore
-rw-r--r-- 1 root root   1202 Nov  6 22:40 .pre-commit-config.yaml
drwxr-xr-x 1 root root   4096 Nov  6 22:40 .security

drwxr-xr-x 1 root root   4096 Nov  6 22:40 .vscode
-rw-r--r-- 1 root root   2563 Nov  6 22:40 AGENTS.md
-rw-r--r-- 1 root root 104815 Nov  6 22:40 CHANGELOG.md
-rw-r--r-- 1 root root   3024 Nov  6 22:40 CLAUDE.md
-rw-r--r-- 1 root root   3370 Nov  6 22:40 CODE_OF_CONDUCT.md
-rw-r--r-- 1 root root   3450 No
…[1573 chars omitted]…
ity
./application_sdk/outputs
./application_sdk/server
./application_sdk/storage
./application_sdk/templates
./application_sdk/testing
./application_sdk/test_utils
./application_sdk/tools
./application_sdk/transformers
./components
./contract-toolkit
./contract-toolkit/.github
./contract-toolkit/docs
./contract-toolkit/examples
./contract-toolkit/scripts
./contract-toolkit/src
./contract-toolkit/tests

application_sdk/execution/__init__.py
application_sdk/execution/_temporal/__init__.py
application_sdk/execution/_temporal/activities.py
application_sdk/execution/_temporal/activity_utils.py
application_sdk/execution/_temporal/auth.py
application_sdk/execution/_temporal/backend.py
application_sdk/execution/_temporal/converter.py
application_sdk/execution/_temporal/eviction_retry.py
application_sdk/execution/_temporal/interceptors/__init__.py
application_sdk/execution/_temporal/interceptors/events.py
application_sdk/execution/_temporal/interceptors/lock.py
application_sdk/execution/_temporal/interceptors/log.py

application_sdk/execution/_temporal/interceptors/metrics.py
application_sdk/execution/_temporal/interceptors/outputs.py
application_sdk/execution/_temporal/interceptors/trace.py
application_sdk/execution/_temporal/lock_activities.py
application_sdk/execution/_temporal/sdr.py
appl
…[8629 chars omitted]…
exc_info=True)
application_sdk/server/health.py:307:        """Start the health check server.
application_sdk/server/health.py:326:        """Stop the health check server."""
application_sdk/server/health.py:365:        temporal_client: Optional Temporal client for readiness checks.
application_sdk/server/mcp/server.py:51:        ``TaskRegistry`` for the given app and checks each ``TaskMetadata.func``

"""FastAPI service for per-app handler operations.

This module provides the FastAPI application that serves handler
operations for a single app. Each app runs its own handler service.

Routes:
    POST /workflows/v1/auth - Test authentication
    POST /workflows/v1/check - Run preflight checks
    POST /workflows/v1/metadata - Fetch metadata
    POST /workflows/v1/start - Start workflow execution
    POST /workflows/v1/stop/{workflow_id}/{run_id:path} - Stop workflow
    GET  /workflows/v1/result/{workflow_id} - Get workflow result

    GET  /workflows/v1/status/{workflow_id}/{run_id:path} - Get workflow status
    GET  /workflows/v1/config/{config_id} - Get workflow config
    POST /workflows/v1/config/{config_id} - Update workflow config
    POST /workflows/v1/file - Upload file to object storage
    GET  /health - Health check (k8s liveness probe)
    GET  /server/ready - Readiness
…[8629 chars omitted]…
 to Temporal")

    if _handler_auth_manager is not None:
        _handler_auth_manager.start_background_refresh(_temporal_client)
        logger.info("Background token refresh started for handler")

    return _temporal_client


# ---------------------------------------------------------------------------
# Service factory
# ---------------------------------------------------------------------------

8:    POST /workflows/v1/check - Run preflight checks
19:    GET  /metrics - Prometheus metrics endpoint (when enabled)
75:def _record_proxy_failure(reason: str, log_message: str) -> None:
76:    """Record a Temporal-core ``/metrics`` proxy failure.
78:    Increments the ``temporal_core_metrics_proxy_failures_total`` counter
83:        metrics as _metrics_module,
86:    counter = _metrics_module.create_counter(
87:        "temporal_core_metrics_proxy_failures",
89:            "Failures fetching the Temporal Rust-core /metrics endpoint via "
99:def _serialize_credential_value(v: Any) -> str:
119:def _flatten_to_pairs(creds_dict: dict[str, Any]) -> list[dict[str, str]]:
136:def _normalize_credentials(body: dict[str, Any]) -> dict[str, Any]:

192:def _wrap_response(
209:async def _get_workflow_result(
277:    def is_configured(self) -> bool:
306:def _validated_temp_path(path: str) -> str:
…[2828 chars omitted]…
k.constants import (  # noqa: PLC0415 — cold path: only when /metrics is hit
1743:                        f"http://{TEMPORAL_PROMETHEUS_BIND_ADDRESS}/metrics"
1750:                            f"Temporal core metrics proxy returned HTTP {resp.status_code}",
1755:                    "Temporal core metrics unavailable",
1768:    async def frontend_home() -> HTMLResponse:
1790:def run_app_handler_service(

if isinstance(result, PydanticBaseModel):
        return result.model_dump()
    if isinstance(result, dict):
        return result
    return {}


# ---------------------------------------------------------------------------
# Workflow client config and singleton
# ---------------------------------------------------------------------------

@dataclasses.dataclass
class WorkflowClientConfig:
    """Configuration for the Temporal client used by the /start endpoint."""

    host: str = ""
    namespace: str = "default"
    task_queue: str = ""
    app_class: type[App] | None = dataclasses.field(default=None, repr=False)
    data_converter: DataConverter | None = dataclasses.field(default=None, repr=False)

    # TLS
    tls_enabled: bool = False
    tls_server_root_ca_cert_path: str = ""
    tls_client_cert_path: str = ""
    tls_client_private_key_path: str = ""
    tls_domain: st
…[8629 chars omitted]…
rt (default: 8000).
        log_level: Uvicorn log level (default: "info").
        **kwargs: Additional keyword arguments forwarded to
            ``create_app_handler_service()``.
    """
    import uvicorn  # noqa: PLC0415 — cold path: uvicorn only when starting standalone server

    app = create_app_handler_service(handler, **kwargs)
    uvicorn.run(app, host=host, port=port, log_level=log_level)

# ---------------------------------------------------------------------------
# Service factory
# ---------------------------------------------------------------------------


def create_app_handler_service(
    handler: Handler,
    *,
    app_name: str = "",
    app_class: type[App] | None = None,
    temporal_host: str = "",
    temporal_namespace: str = "default",

    task_queue: str = "",
    data_converter: DataConverter | None = None,
    tls_enabled: bool = False,
    tls_server_root_ca_cert_path: str = "",
    tls_client_cert_path: str = "",
    tls_client_private_key_path: str = "",
    tls_domain: str = "",
    auth_enabled: bool = False,
    auth_client_id: str = "",
    auth_client_secret: str = "",
    auth_token_url: str = "",
    auth_base_url: str = "",
    auth_scopes: str = "",
    secret_store: SecretStore | None = None,
    storage: ObjectStore | None = None,
  
…[5168 chars omitted]…

    # Auth
    # ------------------------------------------------------------------

    @app.post("/workflows/v1/auth")
    async def test_auth(request: Request) -> JSONResponse:
        body = _normalize_credentials(await request.json())
        auth_input = AuthInput.model_validate(body)
        credentials = [
            HandlerCredential(key=c.key, value=c.value) for c in auth_input.credentials

) from None

    # ------------------------------------------------------------------
    # Preflight
    # ------------------------------------------------------------------

    @app.post("/workflows/v1/check")
    async def preflight_check(request: Request) -> JSONResponse:
        body = _normalize_credentials(await request.json())
        preflight_input = PreflightInput.model_validate(body)
        credentials = [
            HandlerCredential(key=c.key, value=c.value)

            for c in preflight_input.credentials
        ]
        context = _create_context(credentials)
        with bind_handler_context(context):
            try:
                logger.info(
                    "Preflight check started: app=%s request=%s",
                    app_name,
                    context.request_id_str,
                )
                result = await handler.prefligh
…[2246 chars omitted]…
---------------------------------------------------

    @app.post("/workflows/v1/metadata")
    async def fetch_metadata(request: Request) -> JSONResponse:
        body = _normalize_credentials(await request.json())
        metadata_input = MetadataInput.model_validate(body)
        credentials = [
            HandlerCredential(key=c.key, value=c.value)
            for c in metadata_input.credentials

./application_sdk/handler/service.py:25:    app = create_app_handler_service(handler, app_name="my-app")
./application_sdk/handler/service.py:382:def create_app_handler_service(
./application_sdk/handler/service.py:1790:def run_app_handler_service(
./application_sdk/handler/service.py:1800:    Convenience wrapper around ``create_app_handler_service()`` that blocks
./application_sdk/handler/service.py:1802:    ``create_app_handler_service()``.
./application_sdk/handler/service.py:1810:            ``create_app_handler_service()``.
./application_sdk/handler/service.py:1814:    app = create_app_handler_service(handler, **kwargs)
./application_sdk/handler/__init__.py:29:    create_app_handler_service,
./application_sdk/handler/__init__.py:30:    run_app_handler_service,
./application_sdk/handler/__init__.py:54:    "create_app_handler_service",
./application_sdk/handler/__init__.py:55:    "
…[1039 chars omitted]…

1:        asyncio.run(run_combined_mode(config))
./examples/application_custom_fastapi.py:4:handler routes. In v3, the Handler is served via create_app_handler_service()
./examples/application_custom_fastapi.py:52:    create_app_handler_service() -- see the __main__ block below.
./examples/application_custom_fastapi.py:90:    #   fastapi_app = create_app_handler_service(handler, app_name="custom-app")

infra = await _create_infrastructure()
    set_infrastructure(infra)

    app_class = load_app_class(config.app_module)
    validate_app_class(app_class)
    app_name = app_class._app_name  # type: ignore[attr-defined]

    logger.info(
        "Loaded app %s version %s",
        app_name,
        app_class._app_version,  # type: ignore[attr-defined]
    )

    data_converter = create_data_converter_for_app(app_class)

    # Acquire auth token if enabled
    auth_manager: Any = None
    api_key: str | None = None
    if config.auth_enabled:
        from application_sdk.execution._temporal.auth import (  # noqa: PLC0415 — cold path: only loaded in worker mode (execution backend)
            TemporalAuthConfig,
            TemporalAuthManager,
        )

        auth_config = TemporalAuthConfig(
            client_id=config.auth_client_id,
            client_secret=config.auth_clien
…[8629 chars omitted]…
lication_sdk.infrastructure.context import (  # noqa: PLC0415 — cold path: only when infrastructure init is needed
        close_infrastructure,
    )

    await close_infrastructure()
    await _flush_observability()
    if auth_manager is not None:
        await auth_manager.shutdown()
        logger.info("Auth manager stopped")

    logger.info("Combined mode stopped")


async def run_dev_combined(

def run_handler_mode(config: AppConfig) -> None:
    """Run in handler mode (HTTP FastAPI server).

    Loads the handler class (or DefaultHandler) and runs the FastAPI
    server via uvicorn. This is synchronous — uvicorn manages its own loop.
    """
    from application_sdk.execution._temporal.converter import (  # noqa: PLC0415 — cold path: only loaded in worker mode (execution backend)
        create_data_converter_for_app,
    )
    from application_sdk.handler import (  # noqa: PLC0415 — cold path: only loaded in handler mode
        DefaultHandler,
        run_app_handler_service,

    )
    from application_sdk.infrastructure.context import (  # noqa: PLC0415 — cold path: only when infrastructure init is needed
        set_infrastructure,
    )

    infra = asyncio.run(_create_infrastructure())
    set_infrastructure(infra)

    logger.info(
        "Starting handler mode: app
…[5376 chars omitted]…
  config.temporal_host,
        config.temporal_namespace,
        data_converter=data_converter,
        api_key=api_key,
        tls_enabled=config.tls_enabled,
        tls_server_root_ca_cert_path=config.tls_server_root_ca_cert_path,
        tls_client_cert_path=config.tls_client_cert_path,
        tls_client_private_key_path=config.tls_client_private_key_path,
        tls_domain=config.tls_domain,

"""Execution layer for running Apps on Temporal."""

from application_sdk.execution._temporal.activity_utils import (
    build_output_path,
    get_object_store_prefix,
)
from application_sdk.execution._temporal.auth import (
    TemporalAuthConfig,
    TemporalAuthManager,
)
from application_sdk.execution._temporal.backend import create_temporal_client
from application_sdk.execution._temporal.converter import create_data_converter

from application_sdk.execution._temporal.worker import AppWorker, create_worker
from application_sdk.execution.decorators import needs_lock
from application_sdk.execution.errors import ApplicationError

__all__ = [
    "ApplicationError",
    "build_output_path",
    "get_object_store_prefix",
    "needs_lock",
    "AppWorker",
    "create_worker",
    "create_temporal_client",
    "create_data_converter",
    "TemporalAuthConfig",
    "TemporalAuthManager
…[4006 chars omitted]…
       prometheus_bind_address=prometheus_bind_address,
376-    )
377-
378-    # Full-jitter exponential backoff (per AWS Architecture blog) — keeps the
379-    # capped exponential growth but draws each sleep from U(0, cap_at_attempt)
380-    # to spread concurrent reconnects across the window and avoid thundering
381-    # herd on Temporal frontend recovery.
382-    last_exc: Exception | None = None

When omitted, defaults to the app name (single-entry-point apps).
        """
        from uuid import uuid4  # noqa: PLC0415 — stdlib uuid; lazy use

        input_data._correlation_id = context.correlation_id

        prefix = context.app_name
        config_hash = (
            input_data.config_hash() if hasattr(input_data, "config_hash") else ""
        )
        short_id = uuid4().hex[:8]
        workflow_id = (

            f"{prefix}-{config_hash}-{short_id}"
            if config_hash
            else f"{prefix}-{short_id}"
        )

        workflow_name = (
            f"{app_cls._app_name}:{entry_point}" if entry_point else app_cls._app_name
        )
        handle = await self._client.start_workflow(
            workflow_name,
            args=[input_data],
            id=workflow_id,
            task_queue=self._task_queue,
            retry_policy=_to_t
…[8629 chars omitted]…
000
269-            ),
270-            log_level=getattr(args, "log_level", None)
271-            or _env("ATLAN_LOG_LEVEL")
272-            or _env("LOG_LEVEL", "INFO"),
273-            health_port=_health_port_arg
274-            if (_health_port_arg := getattr(args, "health_port", None)) is not None
275-            else _env_int("ATLAN_HEALTH_PORT", 8081),
276-            service_name=service_name,

logger = get_logger(__name__)


@dataclass
class AppConfig:
    """Runtime configuration for app execution.

    ``AppConfig`` is the **authoritative runtime config** passed through the call
    chain to workers, handlers, and the Temporal client. It is constructed after
    CLI argument parsing (``from_args_and_env``) or directly in dev scripts
    (``run_dev_combined``).

    **Relationship with constants.py:**
    Some values also exist as module-level constants (e.g. ``LOG_LEVEL``).
    Those constants serve code that runs at **import time** (observability
    init, logging.basicConfig) — before AppConfig exists. Both AppConfig and
    constants.py read the **same env vars with the same defaults** so they
    stay in sync.

    **Construction paths:**
    - Production: ``main()`` → ``AppConfig.from_args_and_env(args)``
    - Dev (CLI): ``atlan app run`` → same as production
    
…[4933 chars omitted]…
]]:
    """Parse all Dapr component YAML files and return safe metadata per component.

    Returns a mapping of component name → dict of allowlisted metadata values.
    Non-allowlisted keys (secrets, connection strings, credentials) are never included.
    Silently returns an empty dict on any parse error.
    """
    import yaml  # noqa: PLC0415 — cold path: yaml only when reading dapr binding YAML

tests/integration/test_handler_service.py
tests/unit/execution/test_backend.py
tests/unit/handler/test_service.py
tests/unit/test_app_config.py
tests/unit/test_main.py

51:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
64:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
82:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
95:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
108:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
121:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
134:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
135:        raise HandlerError("preflight failed")
347:    """Tests for POST /workflows/v1/check."""
349:    def test_preflight_success(self) -> None:
352:            "/workflows/v1/check",
358:        # v2 format: data is a dict of check results keyed by camelCase name.

359:        # _TestHandler returns no checks, so
…[401 chars omitted]…
/check",
389:            # for native-app preflight calls. _normalize_credentials converts this
409:    def test_preflight_metadata_absent_defaults_to_empty(self) -> None:
414:            async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
420:            "/workflows/v1/check",
1046:        """Valid config_ids pass the regex check (result is 503/404 without a store, not 400)."""

"""Unit tests for the handler FastAPI service."""

from __future__ import annotations

import json
import warnings
from dataclasses import dataclass
from pathlib import Path
from unittest.mock import patch

import pytest
from fastapi.testclient import TestClient

from application_sdk.contracts.base import Input, Output
from application_sdk.handler.base import Handler, HandlerError
from application_sdk.handler.contracts import (
    ApiMetadataObject,
    ApiMetadataOutput,
    AuthInput,
    AuthOutput,
    AuthStatus,
    EventFilterRule,
    EventTriggerConfig,
    MetadataInput,
    MetadataOutput,
    PreflightInput,
    PreflightOutput,
    PreflightStatus,
    SqlMetadataObject,
    SqlMetadataOutput,
    SubscriptionConfig,
)
from application_sdk.handler.service import (
    _flatten_to_pairs,
    _normalize_credentials,
    _wrap_response,
    create_app_handler_service,
)

# 
…[8628 chars omitted]…
pty_returns_empty_list(self) -> None:
        """SqlMetadataOutput with no objects → empty list in data."""
        client = _make_client()
        response = client.post(
            "/workflows/v1/metadata",
            json={"credentials": []},
        )
        assert response.status_code == 200
        body = response.json()
        assert body["success"] is True
        assert body["data"] == []

status: AuthStatus
    """Authentication result status."""

    message: str = ""
    """Human-readable status message."""

    identities: list[str] = []
    """Verified identities (e.g., usernames, roles)."""

    scopes: list[str] = []
    """Authorized scopes or permissions."""

    expires_at: str = ""
    """ISO-8601 expiry timestamp (empty if no expiry)."""


class PreflightStatus(SerializableEnum):
    """Overall result of a preflight check."""

    READY = "ready"
    NOT_READY = "not_ready"
    PARTIAL = "partial"


class PreflightCheck(BaseModel):
    """Result of a single preflight check."""

    name: str = Field(..., min_length=1)
    """Check name (e.g., 'connectivity', 'permissions')."""

    passed: bool = False
    """Whether the check passed."""

    message: str = ""
    """Details about the check result."""

    duration_ms: float = 0.0
    """How long the ch
…[7337 chars omitted]…
"temp-table-regex": "",
                },
            }
        }
    }

    root: Dict[str, Any] = Field(
        ..., description="Root JSON object containing workflow configuration"
    )


class EventWorkflowRequest(BaseModel):
    event: Event = Field(alias="data", description="Event object")
    datacontenttype: str = Field(
        alias="datacontenttype", description="Data content type"
    )

tests/integration/test_handler_service.py:13:import httpx
tests/integration/test_handler_service.py:147:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:148:        transport=httpx.ASGITransport(app=app), base_url="http://test"
tests/integration/test_handler_service.py:156:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:157:        transport=httpx.ASGITransport(app=app), base_url="http://test"
tests/integration/test_handler_service.py:224:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:225:        transport=httpx.ASGITransport(app=app), base_url="http://test"
tests/integration/test_handler_service.py:252:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:253:        transport=httpx.ASGITransport(app=app), base_url="http://test"
tests/integration/test_handler_service.py:298:    a
…[2336 chars omitted]…
 prometheus by default (port collision)

tests/unit/test_main.py:1315:        assert cfg.enable_temporal_core_metrics is False
tests/unit/test_main.py:1519:        # Build a fake httpx.AsyncClient that records calls
tests/unit/test_main.py:1552:            patch("httpx.AsyncClient", return_value=fake_client),
tests/unit/test_main.py:1615:            patch("httpx.AsyncClient", return_value=fake_client),

assert hasattr(AtlanObservability, "flush_all")


# --------------------------------------------------------------------------- #
# _log_dapr_components — branch with safe_meta                                #
# --------------------------------------------------------------------------- #


class TestLogDaprComponentsSafeMetaBranch:
    """Cover the log path that includes safe metadata details."""

    async def test_logs_with_safe_meta_when_yaml_present(self, tmp_path: Path) -> None:

        """When a component has allowlisted metadata in YAML, it appears in the log line."""
        # Write a component YAML with bucket=my-bucket so the safe-meta path triggers
        (tmp_path / "store.yaml").write_text(
            "apiVersion: dapr.io/v1alpha1\n"
            "kind: Component\n"
            "metadata:\n"
            "  name: my-store\n"
            "spec:\n"
            "  t
…[8628 chars omitted]…
w_type checks) fires before the Temporal
# call, so G6.16 and G6.17 don't require a running worker.


class RouteAInput(Input):
    value: int = 0


class RouteAOutput(Output):
    doubled: int = 0


class RouteBInput(Input):
    value: int = 0


class RouteBOutput(Output):
    tripled: int = 0


class MultiRouteApp(App):
    @entrypoint
    async def route_a(self, input: RouteAInput) -> RouteAOutput:

50082ac base
* master

27:    run_combined_mode,
29:    run_handler_mode,
349:    def test_handler_mode_calls_run_handler_mode(self) -> None:
351:        with mock.patch("application_sdk.main.run_handler_mode") as mock_handler:
358:            with mock.patch("application_sdk.main.run_combined_mode"):
1025:# run_handler_mode                                                            #
1030:    """Behavioral tests for run_handler_mode()."""
1058:        """When load_handler_class returns None, DefaultHandler is instantiated."""
1075:                "application_sdk.handler.DefaultHandler",
1085:            run_handler_mode(cfg)
1115:            run_handler_mode(cfg)
1120:        """run_handler_mode must validate the loaded app class — currently it does not."""

1131:            patch("application_sdk.handler.DefaultHandler"),
1139:            run_handler_mode(cfg)
1153:            patch("application_sdk.handl
…[3646 chars omitted]…
      patch("uvicorn.Server", return_value=uvicorn_server),
            patch("uvicorn.Config"),
            patch.object(asyncio.Event, "wait", new=AsyncMock(return_value=None)),
        ):
            await run_combined_mode(cfg)

        auth_mgr.acquire_initial_token.assert_awaited_once()
        auth_mgr.start_background_refresh.assert_called_once()
        auth_mgr.shutdown.assert_awaited_once()

# run_handler_mode                                                            #
# --------------------------------------------------------------------------- #


class TestRunHandlerMode:
    """Behavioral tests for run_handler_mode()."""

    def _common_patches(self, infra: MagicMock):
        return (
            patch(
                "application_sdk.main._create_infrastructure",
                new_callable=AsyncMock,

                return_value=infra,
            ),
            patch(
                "application_sdk.main.load_app_class",
                return_value=_fake_app_class(),
            ),
            patch(
                "application_sdk.execution._temporal.converter.create_data_converter_for_app"
            ),
            patch("application_sdk.infrastructure.context.set_infrastructure"),
            # These tests use a MagicMock for App, so stub the validator.
…[8628 chars omitted]…
------------------------------------------------------------------------ #
# run_dev_combined                                                            #
# --------------------------------------------------------------------------- #


class TestRunDevCombined:
    """Behavioral tests for run_dev_combined()."""

    async def test_sets_default_dapr_ports(
        self, monkeypatch: pytest.MonkeyPatch

"""Temporal client creation and executor backend."""

from __future__ import annotations

import asyncio
import random
import threading
from pathlib import Path
from typing import TYPE_CHECKING, Any

from temporalio.client import Client
from temporalio.contrib.pydantic import pydantic_data_converter

from temporalio.runtime import PrometheusConfig, Runtime, TelemetryConfig

from application_sdk.constants import TEMPORAL_PROMETHEUS_BIND_ADDRESS
from application_sdk.execution.retry import RetryPolicy, _to_temporal_retry_policy
from application_sdk.observability.logger_adaptor import get_logger
from application_sdk.observability.utils import get_metric_enrichment_labels

logger = get_logger(__name__)

_prometheus_runtime: Runtime | None = None
_prometheus_lock = threading.Lock()


_default_runtime: Runtime | None = None


def _get_or_create_runtime(
    *, enable_prometheus: bool = True, 
…[7590 chars omitted]…
          )
                await asyncio.sleep(jittered)
            else:
                logger.error(
                    "Temporal connection failed after %d attempts",
                    connect_max_attempts,
                    exc_info=True,
                )

    raise RuntimeError(
        f"Failed to connect to Temporal at {host!r} after {connect_max_attempts} attempts"
    ) from last_exc

application_sdk/credentials/atlan.py:51:        client = AsyncAtlanClient(base_url=self.base_url, api_key=self.token)
application_sdk/credentials/atlan.py:169:        client = AsyncAtlanClient(base_url=self.base_url, api_key=self.access_token)
application_sdk/credentials/atlan_client.py:48:        return AsyncAtlanClient(base_url=cred.base_url, api_key=cred.token)
application_sdk/credentials/atlan_client.py:52:        # Never use a pre-fetched access_token as a static api_key — it expires
application_sdk/credentials/ref.py:69:    (e.g. ``"basic"``, ``"api_key"``).
application_sdk/credentials/ref.py:262:def api_key_ref(name: str, *, store_name: str = "default") -> CredentialRef:
application_sdk/credentials/ref.py:264:    return CredentialRef(name=name, credential_type="api_key", store_name=store_name)
application_sdk/credentials/registry.py:55:            _parse_api_key,
application_sd
…[4470 chars omitted]…
.add_api_key("my-service", api_key="secret123")
application_sdk/testing/mocks.py:361:    def add_api_key(

application_sdk/testing/mocks.py:364:        api_key: str,
application_sdk/testing/mocks.py:371:            "type": "api_key",
application_sdk/testing/mocks.py:372:            "api_key": api_key,
application_sdk/testing/mocks.py:376:        return self._store_and_ref(name, data, api_key_ref(name))

282:_workflow_config: WorkflowClientConfig = WorkflowClientConfig()
320:async def _get_temporal_client() -> Client:
332:    if _workflow_config.auth_enabled:
339:            client_id=_workflow_config.auth_client_id,
340:            client_secret=_workflow_config.auth_client_secret,
341:            token_url=_workflow_config.auth_token_url,
342:            base_url=_workflow_config.auth_base_url,
343:            scopes=_workflow_config.auth_scopes,
351:        _workflow_config.host,
352:        _workflow_config.namespace,
353:        _workflow_config.tls_enabled,
354:        _workflow_config.auth_enabled,

358:        _workflow_config.host,
359:        _workflow_config.namespace,
360:        data_converter=_workflow_config.data_converter,
362:        tls_enabled=_workflow_config.tls_enabled,
363:        tls_server_root_ca_cert_path=_workflow_config.tls_server_root_ca_cert_path,
364:   
…[938 chars omitted]…
7:        if not _workflow_config.is_configured():
1112:        client = await _get_temporal_client()
1216:    async def get_workflow_config(
1240:    async def update_workflow_config(
1406:        if not _workflow_config.is_configured():
1418:        app_cls = _workflow_config.app_class
1428:            client = await _get_temporal_client()
1453:                task_queue=_workflow_config.task_queue,

250	
   251	
   252	@dataclasses.dataclass
   253	class WorkflowClientConfig:
   254	    """Configuration for the Temporal client used by the /start endpoint."""
   255	
   256	    host: str = ""
   257	    namespace: str = "default"
   258	    task_queue: str = ""
   259	    app_class: type[App] | None = dataclasses.field(default=None, repr=False)
   260	    data_converter: DataConverter | None = dataclasses.field(default=None, repr=False)
   261	

   262	    # TLS
   263	    tls_enabled: bool = False
   264	    tls_server_root_ca_cert_path: str = ""
   265	    tls_client_cert_path: str = ""
   266	    tls_client_private_key_path: str = ""
   267	    tls_domain: str = ""
   268	
   269	    # Auth
   270	    auth_enabled: bool = False
   271	    auth_client_id: str = ""
   272	    auth_client_secret: str = ""
   273	    auth_token_url: str = ""
   274	    auth_base_url: str = ""
   
…[4832 chars omitted]…
started for handler")
   373	
   374	    return _temporal_client
   375	
   376	
   377	# ---------------------------------------------------------------------------
   378	# Service factory
   379	# ---------------------------------------------------------------------------
   380	
   381	
   382	def create_app_handler_service(
   383	    handler: Handler,
   384	    *,
   385	    app_name: str = "",

count: 1016
size: 4760
in-pack: 0
packs: 0
size-pack: 0
prune-packable: 0
garbage: 0
size-garbage: 0

/repo/application_sdk/__init__.py

10:requires-python = ">=3.11"
34:    "python-dotenv>=1.1.0,<2.0.0",
95:    "pytest-order>=1.3.0,<2.0.0",
124:    "pytest>=8.3.3,<10.0.0",
126:    "pytest-asyncio>=0.26.0,<1.4.0",
127:    "pytest-timeout>=2.3.0,<3.0.0",
156:test-integration.shell = "temporal server start-dev --db-filename /tmp/temporal-integ.db &>/tmp/temporal-integ.log & sleep 3 && uv run pytest tests/integration/ -m integration -v --timeout=120; EXIT=$?; kill %1 2>/dev/null; exit $EXIT"
165:cmd = "python -m application_sdk.tools.provision_credentials"
179:uv run --with griffe python "$EXTRACTOR" dump > /tmp/capability-manifest/raw.json
180:uv run --with griffe python "$EXTRACTOR" normalize /tmp/capability-manifest/raw.json > /tmp/capability-manifest/normalized.json
181:uv run --with griffe python "$EXTRACTOR" render /tmp/capability-manifest/normalized.json "$PURPOSES" > /tmp/capability-manifest/fresh1.md
182:uv run -

…[461 chars omitted]…
nit/execution:
__init__.py
conftest.py
test_activities.py
test_activities_tracking.py
test_auth_token_refresh_event.py
test_backend.py
test_converter.py
test_eviction.py
test_heartbeat.py
test_lock_interceptor.py
test_run_in_thread.py
test_sdr.py
test_settings.py
test_temporal_prometheus.py
test_worker.py
test_workflows.py

tests/unit/handler:
__init__.py
test_base.py
test_contracts.py
test_service.py

"""Unit tests for Temporal Prometheus metrics integration."""

from __future__ import annotations

from unittest.mock import AsyncMock, MagicMock, patch

import pytest
from temporalio.runtime import Runtime

import application_sdk.execution._temporal.backend as backend_module
from application_sdk.execution._temporal.backend import (
    _get_or_create_runtime,

    create_temporal_client,
)


@pytest.fixture(autouse=True)
def _reset_singleton():
    """Reset the module-level singletons before and after each test."""
    backend_module._prometheus_runtime = None
    backend_module._default_runtime = None
    with patch.object(backend_module, "Runtime") as mock_cls:
        mock_cls.return_value = MagicMock(spec=Runtime)
        mock_cls.default.return_value = MagicMock(spec=Runtime)
        yield mock_cls
    backend_module._prometheus_runtime = None
    backend_module._default_runtime 
…[2877 chars omitted]…
r_create_runtime"),
365:            mock.patch.object(backend_module, "_get_or_create_runtime"),
385:            mock.patch.object(backend_module, "_get_or_create_runtime"),
406:            mock.patch.object(backend_module, "_get_or_create_runtime"),
435:            mock.patch.object(backend_module, "_get_or_create_runtime"),
454:            mock.patch.object(backend_module, "_get_or_create_runtime"),

cfg = _build_tls_config(
            client_cert_path=str(cert),
            client_private_key_path=str(key),
            domain="example.com",
        )
        assert cfg.client_cert == b"cert-bytes"
        assert cfg.client_private_key == b"key-bytes"
        assert cfg.domain == "example.com"


# ---------------------------------------------------------------------------
# _get_or_create_runtime

# ---------------------------------------------------------------------------


class TestGetOrCreateRuntime:
    def test_with_prometheus_caches_singleton(self) -> None:
        with mock.patch.object(backend_module, "Runtime") as Runtime:
            Runtime.side_effect = lambda **kwargs: mock.MagicMock(name="rt")
            r1 = _get_or_create_runtime(
                enable_prometheus=True, prometheus_bind_address="0.0.0.0:9999"
            )
            r2 = _get_or_create_
…[6152 chars omitted]…
w=connect_mock),
            mock.patch.object(backend_module.asyncio, "sleep", new=mock.AsyncMock()),
        ):
            with pytest.raises(RuntimeError, match="Failed to connect to Temporal"):
                await create_temporal_client(
                    connect_max_attempts=2,
                    connect_retry_delay_seconds=0.0,
                )
        assert connect_mock.await_count == 2

CHANGELOG.md:808:- Standardized preflight check response format to use per-check success fields with consolidated error messages in failureMessage, removing top-level error field (#1052) (by @chaitanyaatlan in [d2bd860](https://github.com/atlanhq/application-sdk/commit/d2bd860))

13:- run_dev_combined() honors env-var fallbacks for connection-shaped kwargs (#1614) (by @AtMrun in [2e8bb6b](https://github.com/atlanhq/application-sdk/commit/2e8bb6b))
85:- redact secrets and PII from logs, metrics, and trace attributes (#1601) (by @vaibhavatlan in [4279250](https://github.com/atlanhq/application-sdk/commit/4279250))
147:- SDK version tracking + migration metrics on dashboard (#1513) (by @mananjain99 in [3158790](https://github.com/atlanhq/application-sdk/commit/3158790))
160:- correct API drift in handler service and run_dev_combined examples [BLDX-1086] (#1507) (by @vaibhavatlan in [abc727c](https://github.com/atlanhq/application-sdk/commit/abc727c))
238:- BLDX-877 | Add Prometheus metrics support (#1291) (by @Aryamanz29 in [48c4062](https://github.com/atlanhq/application-sdk/commit/48c4062))
248:- add Prometheus metrics to Temporal client (#1396) (by @anuj-atlan
…[1836 chars omitted]…
0:- error logs for eventstore, objectstore and metrics (#647) (by @Nishchith Shetty in [70b71b6](https://github.com/atlanhq/application-sdk/commit/70b71b6))
1344:- handle str and dict types in preflight checks (#638) (by @Nishchith Shetty in [57ee9a0](https://github.com/atlanhq/application-sdk/commit/57ee9a0))
1553:- Observability changes (metrics, logs, traces) by @abhishekagrawal-atlan + refactoring

# Changelog

## v3.7.0 (May 07, 2026)

Full Changelog: https://github.com/atlanhq/application-sdk/compare/v3.6.1...v3.7.0

### Features

- free retry on worker eviction without burning Temporal attempts (#1681) (by @anuj-atlan in [3504c55](https://github.com/atlanhq/application-sdk/commit/3504c55))

### Bug Fixes

- run_dev_combined() honors env-var fallbacks for connection-shaped kwargs (#1614) (by @AtMrun in [2e8bb6b](https://github.com/atlanhq/application-sdk/commit/2e8bb6b))


## v3.6.1 (May 06, 2026)

Full Changelog: https://github.com/atlanhq/application-sdk/compare/v3.6.0...v3.6.1

### Bug Fixes

- restore secondary OTLP log exporter for S3 archival [ARUN-539] (#1684) (by @louisnow in [fa1a100](https://github.com/atlanhq/application-sdk/commit/fa1a100))


## v3.6.0 (May 06, 2026)

Full Changelog: https://github.com/atlanhq/application-sdk/compare/v3.5.0...v3.6.0

### Features


…[8630 chars omitted]…
@cmgrote in [61ff399](https://github.com/atlanhq/application-sdk/commit/61ff399))
- auto-fix vulnerabilities triggered by PR comment (#1324) (by @mananjain99 in [323a74d](https://github.com/atlanhq/application-sdk/commit/323a74d))

### Bug Fixes

- explicitly call model_dump() before passing EventMetadata to Temporal (by @cmgrote in [68b4568](https://github.com/atlanhq/application-sdk/commit/68b4568))

fatal: unable to access 'https://github.com/atlanhq/application-sdk.git/': Could not resolve host: github.com

./application_sdk/server/fastapi/models.py:75:                    "successMessage": "Successfully checked",
./application_sdk/server/fastapi/models.py:76:                    "failureMessage": "",

application_sdk/constants.py:142:TEMPORAL_PROMETHEUS_BIND_ADDRESS = os.getenv(
application_sdk/constants.py:143:    "ATLAN_TEMPORAL_PROMETHEUS_BIND_ADDRESS", "127.0.0.1:9464"
application_sdk/constants.py:151:TEMPORAL_CORE_METRICS_PROXY_TIMEOUT_SECONDS: float = float(
application_sdk/constants.py:152:    os.getenv("ATLAN_TEMPORAL_CORE_METRICS_PROXY_TIMEOUT_SECONDS", "5.0")
application_sdk/execution/_temporal/backend.py:15:from application_sdk.constants import TEMPORAL_PROMETHEUS_BIND_ADDRESS
application_sdk/execution/_temporal/backend.py:45:                bind_addr = prometheus_bind_address or TEMPORAL_PROMETHEUS_BIND_ADDRESS
application_sdk/execution/_temporal/worker.py:88:            TEMPORAL_PROMETHEUS_BIND_ADDRESS,
application_sdk/execution/_temporal/worker.py:112:                    f"http://{TEMPORAL_PROMETHEUS_BIND_ADDRESS}/metrics"
application_sdk/handler/service.py:1729:     
…[1699 chars omitted]…
5-# Prometheus Pushgateway (worker-only deployments)
156-#: Pushgateway URL workers push to. Empty disables push (combined-mode

157-#: server+worker deployments leave this unset; ``/metrics`` covers
158-#: everything via in-process proxy).
159-PROMETHEUS_PUSHGATEWAY_URL = os.getenv("ATLAN_PROMETHEUS_PUSHGATEWAY_URL", "")
160-#: Periodic push interval (seconds). A final push always happens on shutdown.

agent — regardless of whether the caller uses ``async with worker:`` or
    ``await worker.run()``.

    When ``enable_pushgateway=True`` the wrapper also registers a
    ``TemporalCoreCollector`` and starts a ``PushGatewayClient`` that
    periodically pushes ``prometheus_client.REGISTRY`` to
    ``PROMETHEUS_PUSHGATEWAY_URL``. Combined-mode deployments (FastAPI server
    in the same process) leave this off — ``/metrics`` already exposes the
    same series and pushing would double-count.
    """

    def __init__(

        self,
        worker: Worker,
        *,
        start_event_params: dict,
        enable_pushgateway: bool = False,
        primary_app_name: str = "",
        task_queue: str = "",
    ) -> None:
        self._worker = worker
        self._start_event_params = start_event_params
        self._enable_pushgateway = enable_pushgateway
        self._primary_app_
…[3939 chars omitted]…
hat
66:        enable_pushgateway: bool = False,
72:        self._enable_pushgateway = enable_pushgateway
78:        if not self._enable_pushgateway:
103:            TemporalCoreCollector,
111:                TemporalCoreCollector(
267:    enable_pushgateway: bool = False,
298:        enable_pushgateway: When True (worker-only deployments), the worker
494:        enable_pushgateway=enable_pushgateway,

class BaseResolver:
  Enable tracemalloc to get traceback where the object was allocated.
  See https://docs.pytest.org/en/stable/how-to/capture-warnings.html#resource-warnings for more info.

tests/unit/test_main.py::TestMainEntryPoint::test_value_error_in_config_exits_1
tests/unit/test_main.py::TestMainEntryPoint::test_unhandled_exception_flushes_and_exits_1
  /usr/local/lib/python3.12/unittest/mock.py:2217: RuntimeWarning: coroutine '_flush_observability' was never awaited
    def __init__(self, name, parent):
  Enable tracemalloc to get traceback where the object was allocated.
  See https://docs.pytest.org/en/stable/how-to/capture-warnings.html#resource-warnings for more info.

tests/unit/test_main.py::TestMainEntryPoint::test_discovery_error_exits_1

  /repo/tests/unit/test_main.py:822: DeprecationWarning: DiscoveryError is deprecated; use application_sdk.errors.InvalidInputE
…[1476 chars omitted]…
: coroutine '_flush_observability' was never awaited
    template = ast.BinOp(assertmsg, ast.Add(), ast.Constant(explanation))
  Enable tracemalloc to get traceback where the object was allocated.
  See https://docs.pytest.org/en/stable/how-to/capture-warnings.html#resource-warnings for more info.

-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
295 passed, 16 warnings in 6.81s

73:def create_counter(name: str, *, unit: str = "", description: str = "") -> Counter:
74-    return _meter().create_counter(name=name, unit=unit, description=description)
75-
76-
77-def create_up_down_counter(
78-    name: str, *, unit: str = "", description: str = ""
79-) -> UpDownCounter:
80-    return _meter().create_up_down_counter(
81-        name=name, unit=unit, description=description
82-    )
83-
84-

85-def create_histogram(name: str, *, unit: str = "", description: str = "") -> Histogram:
86-    return _meter().create_histogram(name=name, unit=unit, description=description)
87-
88-
89-def create_observable_counter(
90-    name: str,
91-    callbacks: Sequence[ObservableCallback],
92-    *,
93-    unit: str = "",
94-    description: str = "",
95-) -> ObservableCounter:
96-    return _meter().create_observable_counter(
97-        name=name, callbacks=callbacks, unit=unit, des
…[5091 chars omitted]…
1048-    if name is None:
1049-        name = __name__
1050-    # Create new logger instance if it doesn't exist
1051-    if name not in _logger_instances:
1052-        _logger_instances[name] = AtlanLoggerAdapter(name)
1053-
1054-    return _logger_instances[name]
1055-
1056-
1057-# Initialize the default logger
1058-default_logger = get_logger()  # Use a different name instead of redefining 'logger'

347:    def debug(self, msg: str, **kwargs: Any) -> None:
348-        try:
349-            self._logger.debug(msg, **kwargs)
350-        except Exception:
351-            logging.error("Error in lazy debug logging", exc_info=True)
352-
353-    def info(self, msg: str, **kwargs: Any) -> None:
354-        try:
355-            self._logger.info(msg, **kwargs)
356-        except Exception:
357-            logging.error("Error in lazy info logging", exc_info=True)
358-

359:    def warning(self, msg: str, **kwargs: Any) -> None:
360-        try:
361-            self._logger.warning(msg, **kwargs)
362-        except Exception:
363-            logging.error("Error in lazy warning logging", exc_info=True)
364-
365-    def error(self, msg: str, **kwargs: Any) -> None:
366-        try:
367-            self._logger.error(msg, **kwargs)
368-        except Exception:
369-            logging.error("
…[3607 chars omitted]…
ents
821-            **kwargs: Additional keyword arguments for context
822-
823-        Note: Forces an immediate flush of logs when called.
824-        """
825-        try:
826-            msg, args = _format_printf_args(msg, args)
827-            exc_info = kwargs.pop("exc_info", False)
828-            msg, kwargs = self.process(msg, kwargs)
829-            bound_logger = self.logger.bind(**kwargs)

3:version = "3.7.0"
50082ac base
 .agents/skills/make-contract/SKILL.md              |  268 +
 .claude/commands/write-integration-tests.md        |  689 +++
 .claude/settings.json                              |   16 +
 .claude/skills/add-entrypoint/SKILL.md             |  139 +
 .claude/skills/add-mcp-tool/SKILL.md               |  148 +
 .claude/skills/capability-manifest/SKILL.md        |  234 +
 .../capability-manifest/references/extractor.py    |  766 +++
 .../capability-manifest/references/format-spec.md  |  162 +
 .../capability-manifest/references/retro-log.md    |    1 +
 .../references/subpackage-purposes.yaml            |   21 +

 .claude/skills/local-dev-bootstrap/SKILL.md        |  202 +
 .claude/skills/make-contract/SKILL.md              |  268 +
 .claude/skills/migrate-to-native/SKILL.md          |  256 +
 .claude/skills/scaffold-app/SKILL.md               |  219 +
 .clau
…[653 chars omitted]…
s/retro-log.md  |   24 +
 .../skills/sdk-review/references/security-rules.md |  222 +
 .../sdk-review/references/structural-rules.md      |  166 +
 .../sdk-review/references/test-quality-rules.md    |  295 ++
 .../sdk-review/references/v3-architecture-rules.md |  156 +
806:        enable_prometheus=config.enable_temporal_core_metrics,
1061:        enable_prometheus=config.enable_temporal_core_metrics,

docs/adr/0001-per-app-handlers.md:34:│   POST /preflight             │   POST /preflight
docs/adr/0001-per-app-handlers.md:103:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput: ...
docs/adr/0009-separate-handler-worker-deployments.md:9:- **Handler**: HTTP-synchronous operations (auth, preflight, metadata) via FastAPI
docs/adr/0009-separate-handler-worker-deployments.md:32:│   /auth, /preflight, etc.    │         │   Health on :8081            │
docs/agents/sdk-capabilities.md:28:| `application_sdk.handler` | HTTP handler framework — Handler ABC, DefaultHandler, preflight, auth, service factory | 22 |
docs/agents/sdk-capabilities.md:1261:HTTP handler framework — Handler ABC, DefaultHandler, preflight, auth, service factory
docs/agents/sdk-capabilities.md:1304:- **Summary:** Base type for preflight and metadata connection configuration.
docs/agents/sdk-capab
…[5995 chars omitted]…
async def preflight_check(self, *args, **kwargs): ...
docs/upgrade-guide-v3.md:366:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
docs/upgrade-guide-v3.md:367:        # run preflight checks

docs/whats-new-v3.md:375:    async def preflight_check(self, *args, **kwargs):
docs/whats-new-v3.md:398:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:

`status` values: `success`, `failed`, `expired`, `invalid_credentials`. All non-success values return HTTP 401.

Delegates to `Handler.test_auth(AuthInput)`.

---

### `POST /workflows/v1/check`

Run preflight checks (connectivity, permission, schema access).

**Request body:** Same shape as `/auth` (credentials list).

**Response:**
```json
{
  "data": {
    "authenticationCheck": { "success": true, "message": "Authenticated" },
    "permissionCheck": { "success": true, "message": "Read permission confirmed" }
  },
  "success": true,
  "message": "Preflight check ready"
}
```

Each check in `PreflightOutput.checks` is mapped to a key in `data` by lower-casing the first character of the check name (e.g. `"AuthCheck"` → `"authCheck"`). Names are not fully camelCased; spaces and inner capitals are preserved.

Delegates to `Handler.preflight_check(PreflightInput)`.

---

### `POST /workf
…[978 chars omitted]…
# human-readable summary
    total_duration_ms: float = 0.0    # total time for all checks
```

### MetadataInput / MetadataOutput

```python
class MetadataInput(BaseModel):
    credentials: list[HandlerCredential] = []  # credentials for discovery
    connection_config: dict[str, Any] = {}     # connection configuration
    object_filter: str = ""                    # filter pattern (e.g. 'public.*')

Refused: `find /` walks the whole container FS. Scope under /repo.

total 76
drwxr-xr-x   1 root root  4096 Nov  6 22:42 .
drwxr-xr-x   1 root root  4096 Nov  6 22:42 ..
-rwxr-xr-x   1 root root     0 Nov  6 22:42 .dockerenv
lrwxrwxrwx   1 root root     7 Jul  4 09:05 bin -> usr/bin
drwxr-xr-x   2 root root  4096 Jul  4 09:05 boot
drwxr-xr-x   5 root root   340 Nov  6 22:42 dev
drwxr-xr-x   1 root root  4096 Nov  6 22:42 etc
drwxr-xr-x   2 root root  4096 Jul  4 09:05 home
lrwxrwxrwx   1 root root     7 Jul  4 09:05 lib -> usr/lib
lrwxrwxrwx   1 root root     9 Jul  4 09:05 lib64 -> usr/lib64
drwxr-xr-x   2 root root  4096 Aug  3 00:00 media

drwxr-xr-x   2 root root  4096 Aug  3 00:00 mnt
drwxr-xr-x   2 root root  4096 Aug  3 00:00 opt
dr-xr-xr-x 300 root root     0 Nov  6 22:42 proc
drwxr-xr-x   1 root root  4096 Nov  6 22:45 repo
drwx------   1 root root  4096 Nov  6 22:42 root
drwxr-xr-x   1 root root  4096 Nov  6 22:42 run
lrwxrwxrwx   1 root root
…[376 chars omitted]…
rw-r--r-- 1 root root     0 Nov  6 22:43 install.log
drwx------ 3 root root  4096 Nov  6 22:45 pytest-of-root
total 24
drwx------ 1 root root 4096 Nov  6 22:42 .
drwxr-xr-x 1 root root 4096 Nov  6 22:42 ..
-rw-r--r-- 1 root root  607 Jul  4 09:05 .bashrc
drwxr-xr-x 3 root root 4096 Nov  6 22:42 .cache
-rw-r--r-- 1 root root  132 Jul  4 09:05 .profile
-rw-r--r-- 1 root root  169 Aug  5 01:04 .wget-hsts

/root/.cache/pip/selfcheck/fe300af6f7d708c14827daac3afc81fbb8306b73de8dd6e3f1f8ea3b

tests/unit/clients/test_base_client.py:52:    @patch("application_sdk.clients.base.httpx.AsyncClient")
tests/unit/clients/test_base_client.py:84:    @patch("application_sdk.clients.base.httpx.AsyncClient")
tests/unit/clients/test_base_client.py:120:    @patch("application_sdk.clients.base.httpx.AsyncClient")
tests/unit/clients/test_base_client.py:139:    @patch("application_sdk.clients.base.httpx.AsyncClient")
tests/unit/clients/test_base_client.py:156:    @patch("application_sdk.clients.base.httpx.AsyncClient")
tests/unit/clients/test_base_client.py:181:    @patch("application_sdk.clients.base.httpx.AsyncClient")
tests/unit/clients/test_base_client.py:221:    @patch("application_sdk.clients.base.httpx.AsyncClient")
tests/unit/clients/test_base_client.py:258:    @patch("application_sdk.clients.base.httpx.AsyncClient")
tests/unit/clients/test_base_client.py:280:    @patch("application_
…[3634 chars omitted]…
syncClient(
tests/integration/test_handler_service.py:471:    async with httpx.AsyncClient(

tests/integration/test_handler_service.py:534:        httpx.AsyncClient(
tests/integration/test_handler_service.py:581:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:646:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:744:    async with httpx.AsyncClient(

async def run_dev_combined(
    app_class: type[App],
    *,
    credential_stores: Mapping[str, SecretStore] | None = None,
    credentials: dict[str, Any] | None = None,
    example_input: dict[str, Any] | None = None,
    host: str | None = None,
    port: int | None = None,
    temporal_host: str | None = None,
    temporal_namespace: str | None = None,
    task_queue: str | None = None,
) -> None:

    """Run worker + handler in a single process for local development.

    Dev-friendly wrapper around ``run_combined_mode()`` that accepts a
    Python class and keyword arguments directly. Use it in ``run_dev.py``
    scripts; production containers use ``run_combined_mode()`` via CLI flags.

    All five connection-shaped kwargs (``host``, ``port``, ``temporal_host``,
    ``temporal_namespace``, ``task_queue``) follow the same precedence as the
    CLI path — ``explicit kwarg → env v
…[7874 chars omitted]…
ly
    # the prometheus_client defaults.
    from application_sdk.observability.metrics_adaptor import (  # noqa: PLC0415 — cold path: meter provider bootstrap at process start
        get_metrics,
    )

    get_metrics()

    if config.mode == "worker":
        asyncio.run(run_worker_mode(config))
    elif config.mode == "handler":
        run_handler_mode(config)
    elif config.mode == "combined":

568:def _build_dev_config(
569-    app_module: str,
570-    *,
571-    host: str | None = None,
572-    port: int | None = None,
573-    temporal_host: str | None = None,
574-    temporal_namespace: str | None = None,
575-    task_queue: str | None = None,
576-) -> AppConfig:
577-    """Build an :class:`AppConfig` for the dev-combined path.
578-
579-    Routes through :meth:`AppConfig.from_args_and_env` so env-var reading is

580-    not duplicated. Precedence per connection field:
581-    ``explicit kwarg → env var(s) → AppConfig default``.
582-
583-    Two fields are fixed in the synthetic namespace before construction:
584-
585-    * ``log_level`` is always ``"DEBUG"``.
586-    * ``health_port`` is always ``0`` (OS-assigned ephemeral port).
587-
588-    Two further overrides are applied to the config after construction,
589-    because their dev defaults differ from the production d
…[4248 chars omitted]…
    task_queue: Task queue name. Default precedence: kwarg →
1228-            ``ATLAN_TASK_QUEUE`` → ``"{app_name}-queue"``.
1229-
1230-    Example::
1231-
1232-        import asyncio
1233-        from my_app import MyApp
1234-
1235-        asyncio.run(run_dev_combined(
1236-            MyApp,
1237-            credentials={
1238-                "host": "localhost", "port": "5432", "authType": "basic",

grep: application_sdk/server/fastapi/__pycache__/models.cpython-312.pyc: binary file matches
contract-toolkit/docs/reference.md:878:| `Sage` / `SageV2` | `sage` / `sageV2` | `str` | `checks` — preflight definitions. `connectorConfig` + `selectedCredentialGuid` route per-dialect checks to a selected connection's configmap. |
contract-toolkit/examples/postgres/app.pkl:122:        ["preflight-check"] = new Config.SageV2 {
contract-toolkit/examples/trino/app.pkl:123:        ["preflight-check"] = new Config.SageV2 {
contract-toolkit/README.md:868:| `Sage` / `SageV2` | Preflight check runner (`connectorConfig` + `selectedCredentialGuid` route per-dialect checks to a selected connection's configmap) |
contract-toolkit/src/Config.pkl:1769:class SageV2 extends UIElement {
contract-toolkit/src/NativeApp.pkl:2657:  else if (u is Config.Sage || u is Config.SageV2)
docs/guides/pkl-contracts.md:144
…[41 chars omitted]…
.SageV2 { title = "" }
docs/guides/pkl-contracts.md:258:| `Config.SageV2` | Pre-run validation checks |
docs/guides/pkl-contracts.md:262:The `SageV2` widget must always be the **last** property in the final step.

application_sdk/server/fastapi/models.py:75:                    "successMessage": "Successfully checked",
application_sdk/server/fastapi/models.py:76:                    "failureMessage": "",

contract-toolkit/docs/reference.md:878:| `Sage` / `SageV2` | `sage` / `sageV2` | `str` | `checks` — preflight definitions. `connectorConfig` + `selectedCredentialGuid` route per-dialect checks to a selected connection's configmap. |
contract-toolkit/src/Config.pkl:565:  /// Configuration for widgets such as sage/sageV2 preflight checks and dsnTreeMap.
contract-toolkit/src/Config.pkl:625:  /// preflight checks to the selected connection's credential.
contract-toolkit/src/Config.pkl:877:  /// (e.g. Fivetran routes preflight checks by selected connector).
contract-toolkit/src/Config.pkl:881:  /// connection. Used to route downstream widgets (e.g. sage preflight) to the
contract-toolkit/src/Config.pkl:1726:/// Widget that renders a preflight / health check against the connector.
contract-toolkit/src/Config.pkl:1738:  /// List of preflight check configurations.
contract-toolkit/src/Config.
…[921 chars omitted]…
reflight-check"] = new Config.SageV2 {
contract-toolkit/examples/trino/generated/manifest.json:22:          "preflight_check": "{{preflight-check}}",
contract-toolkit/examples/trino/generated/trino.json:132:      "preflight-check": {

contract-toolkit/examples/trino/generated/trino.json:238:          "preflight-check",
contract-toolkit/examples/trino/generated/_input.py:20:    preflight_check: str = ""

service.py updated

67:    PreflightStatus,

main.py updated
compiled

Traceback (most recent call last):
  File "<stdin>", line 16, in <module>
TypeError: Can't instantiate abstract class H without an implementation for abstract methods 'fetch_metadata', 'test_auth'

2026-11-06 22:48:40 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
metrics status 200 python_info True
2026-11-06 22:48:40 [INFO] application_sdk.server.middleware.log - Request started: method=POST path=/workflows/v1/check request_id=764940d3-320f-437d-aba4-c769995281e0 url=http://testserver/workflows/v1/check client_host=testclient
2026-11-06 22:48:40 [INFO] application_sdk.handler.service - Preflight check started: app=x request=86e1e927-1505-4898-afc7-b97454a1c5a4
2026-11-06 22:48:40 [INFO] application_sdk.handler.service - Preflight check completed: app=x request=86e1e927-1505-4898-afc7-b97454a1c5a4 status=partial checks=3
2026-11-06 22:48:40 [INFO] application_sdk.server.middleware.log - Request completed: method=POST path=/workflows/v1/check status_code=200 duration_ms=2.98 request_id=764940d3-320f-
…[299 chars omitted]…
: {'success': True, 'message': '', 'successMessage': '', 'failureMessage': ''}}, 'message': 'Preflight check partial'}
2026-11-06 22:48:40 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
proxy metrics status 200 python_info True
warn calls [call('Temporal core metrics proxy request failed', exc_info=True)]
debug calls []

OK

2026-11-06 22:48:46 [INFO] application_sdk.handler.service - Connecting to Temporal for workflow execution host=h:1 namespace=ns tls=False auth=False
2026-11-06 22:48:46 [INFO] application_sdk.handler.service - Connected to Temporal
True
call('h:1', 'ns', data_converter=None, api_key=None, tls_enabled=False, tls_server_root_ca_cert_path='', tls_client_cert_path='', tls_client_private_key_path='', tls_domain='', enable_prometheus=False, prometheus_bind_address='1.2.3.4:5')

def test_preflight_success(self) -> None:
        client = _make_client()
        response = client.post(
            "/workflows/v1/check",
            json={"credentials": []},
        )
        assert response.status_code == 200
        body = response.json()
>       assert body["success"] is True
E       assert False is True

tests/unit/handler/test_service.py:357: AssertionError

----------------------------- Captured stdout call -----------------------------
2026-11-06 22:48:51 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
2026-11-06 22:48:51 [INFO] application_sdk.server.middleware.log - Request started: method=POST path=/workflows/v1/check request_id=7e4a4a85-0247-46ae-a317-76aa6162b506 url=http://testserver/workflows/v1/check client_host=testclient
2026-11-06 22:48:51 [INFO] application_sdk.h
…[4559 chars omitted]…
t was allocated.
  See https://docs.pytest.org/en/stable/how-to/capture-warnings.html#resource-warnings for more info.

-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
=========================== short test summary info ============================
FAILED tests/unit/handler/test_service.py::TestPreflightEndpoint::test_preflight_success
1 failed, 294 passed, 16 warnings in 3.89s

removed unused import

diff --git a/application_sdk/handler/service.py b/application_sdk/handler/service.py
index b3b34ff..4334972 100644
--- a/application_sdk/handler/service.py
+++ b/application_sdk/handler/service.py
@@ -42,6 +42,7 @@ from pathlib import Path, PurePosixPath
 from typing import TYPE_CHECKING, Annotated, Any, cast
 from uuid import uuid4
 
+import httpx
 import orjson
 import temporalio.service
 from fastapi import FastAPI, File, Form, HTTPException

@@ -63,7 +64,6 @@ from application_sdk.handler.contracts import (
     HandlerCredential,
     MetadataInput,
     PreflightInput,
-    PreflightStatus,
     SubscriptionConfig,
 )
 from application_sdk.handler.manifest import AppManifest
@@ -78,21 +78,29 @@ def _record_proxy_failure(reason: str, log_message: str) -> None:
     Increments the ``temporal_core_metrics_proxy_failures_total`` counter
     so failures are observable from VictoriaMet
…[8231 chars omitted]…
ly when infrastructure init is needed
@@ -1118,6 +1120,8 @@ async def run_combined_mode(config: AppConfig) -> None:
         secret_store=infra.secret_store,
         storage=infra.storage,
         frontend_assets_path=config.frontend_assets_path,
+        enable_temporal_core_metrics=True,
+        prometheus_bind_address=config.prometheus_bind_address,
     )
 
     uvicorn_server = uvicorn.Server(

bash: line 622: ruff: command not found

./application_sdk/handler/service.py:294:_workflow_config: WorkflowClientConfig = WorkflowClientConfig()
./application_sdk/handler/service.py:467:    _workflow_config = WorkflowClientConfig(
./tests/integration/test_handler_service.py:44:    svc._workflow_config = svc.WorkflowClientConfig()
./tests/integration/test_handler_service.py:52:    svc._workflow_config = svc.WorkflowClientConfig()
./tests/unit/handler/test_service.py:2256:        svc_module._workflow_config = svc_module.WorkflowClientConfig(
./tests/unit/handler/test_service.py:2285:        svc_module._workflow_config = svc_module.WorkflowClientConfig(
./tests/unit/handler/test_service.py:2313:        svc_module._workflow_config = svc_module.WorkflowClientConfig(
./tests/unit/handler/test_service.py:3377:        cfg = WorkflowClientConfig(host="", task_queue="q")
./tests/unit/handler/test_service.py:3383:        cfg = WorkflowClientConfig(host="t:7233", app_class=None)
./tests/unit/handler/test_service.py:3392:        cfg = WorkflowClientConfig(host="t:7233", app_class=_Cls)  # type: ignore[arg-type]

)
            finally:
                os.chdir(original_cwd)

            # The endpoint still succeeds because _config_save_to_objectstore
            # returns False (no-op) when storage is None, but doesn't raise.
            assert response.status_code == 200
            guid = response.json()["data"]["credential_guid"]

            import orjson

            secrets_file = tmp_path / "local" / "dapr" / "secrets" / "secrets.json"

            all_secrets = orjson.loads(secrets_file.read_bytes())
            assert all_secrets[guid] == {"username": "u"}
        finally:
            self._restore(restore)


# ---------------------------------------------------------------------------
# BLDX-1129: tests targeting the bug class — runtime-only inline imports,
# swallowed exceptions, contract drift between handler service and its
# injected dependencies (Temporal, object
…[7122 chars omitted]…
catch_warnings(record=True) as caught:
            warnings.simplefilter("always")
            create_app_handler_service(
                _TestHandler(),
                app_name="dep-test",
                state_store="some-state-store",
            )
        assert any(
            issubclass(w.category, DeprecationWarning)
            and "state_store" in str(w.message)
            for w in caught

"""Unit tests for the main entry point."""

from __future__ import annotations

import argparse
import asyncio
import signal
import sys
from pathlib import Path
from unittest import mock
from unittest.mock import AsyncMock, MagicMock, patch

import pytest

from application_sdk.main import (
    AppConfig,
    _create_infrastructure,
    _derive_service_name,
    _flush_observability,
    _install_excepthook,
    _install_graceful_signal_handlers,
    _log_dapr_components,
    _loop_exception_handler,
    _parse_all_component_yamls,
    main,
    parse_args,
    run_combined_mode,
    run_dev_combined,
    run_handler_mode,
    run_main,
    run_worker_mode,
)


class TestDeriveServiceName:
    """Tests for _derive_service_name()."""

    def test_pascal_case_to_kebab(self) -> None:
        result = _derive_service_name("my_package.apps:MyAppExtractor")
        assert result == "my-app
…[2681 chars omitted]…
         coro.close()
            return MagicMock()

        with (
            patch(
                "application_sdk.main._create_infrastructure",
                new_callable=AsyncMock,
                return_value=MagicMock(),
            ),
            patch("application_sdk.infrastructure.context.set_infrastructure"),
            patch(
                "application_sdk.main.run_combined_mode",

grep: tests/unit/handler/__pycache__/test_service.cpython-312-pytest-9.0.3.pyc: binary file matches
tests/unit/handler/test_service.py:3325:        # frontend_assets_path doesn't contain index.html
tests/unit/handler/test_service.py:3329:            frontend_assets_path=str(tmp_path / "missing"),
tests/unit/handler/test_service.py:3343:            frontend_assets_path=str(assets),

163:def _make_client(handler: Handler | None = None) -> TestClient:
164-    handler = handler or _TestHandler()
165-    app = create_app_handler_service(handler, app_name="test-app")
166-    return TestClient(app)
167-
168-
169-# ---------------------------------------------------------------------------
170-# Tests
171-# ---------------------------------------------------------------------------
172-
173-
174-class TestHealthEndpoints:

175-    """Tests for /health and /server/ready."""
176-
177-    def test_health_endpoint_returns_200(self) -> None:
178-        client = _make_client()
179-        response = client.get("/health")
180-        assert response.status_code == 200
181-        assert response.json() == {"status": "healthy"}
182-
183-    def test_server_health_alias_returns_200(self) -> None:
184-        client = _make_client()
185-        response = client.get("/server/heal
…[2489 chars omitted]…
HELLO" in response.text


class TestRunAppHandlerService:
    """Smoke test for run_app_handler_service — ensures uvicorn wiring is OK."""

    def test_run_invokes_uvicorn_with_built_app(self) -> None:
        from unittest.mock import patch

        from application_sdk.handler.service import run_app_handler_service

        with patch("uvicorn.run") as mock_run:
            run_app_handler_service(

/repo/tests/unit/test_main.py:822: DeprecationWarning: DiscoveryError is deprecated; use application_sdk.errors.InvalidInputError — will be removed in v4.0
    side_effect=DiscoveryError("not found"),

tests/unit/test_main.py::TestRunWorkerMode::test_runs_through_to_completion
tests/unit/test_main.py::TestRunWorkerMode::test_auth_enabled_acquires_token
  /repo/application_sdk/main.py:867: RuntimeWarning: coroutine 'AsyncMockMixin._execute_mock_call' was never awaited
    health_server.set_temporal_client(client)
  Enable tracemalloc to get traceback where the object was allocated.
  See https://docs.pytest.org/en/stable/how-to/capture-warnings.html#resource-warnings for more info.

tests/unit/test_main.py::TestRunCombinedMode::test_combined_runs_to_completion
tests/unit/test_main.py::TestRunCombinedMode::test_reuses_existing_infrastructure

tests/unit/test_main.py::TestRunCombinedAut
…[102 chars omitted]…
g: coroutine 'AsyncMockMixin._execute_mock_call' was never awaited
    health_server.set_temporal_client(client)
  Enable tracemalloc to get traceback where the object was allocated.
  See https://docs.pytest.org/en/stable/how-to/capture-warnings.html#resource-warnings for more info.

-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
294 passed, 1 deselected, 15 warnings in 3.54s

class DefaultHandler(Handler):
    """Pass-through handler that always returns SUCCESS/READY/empty.

    Useful as a base class for apps that only need to override some operations,
    or as a placeholder during development.
    """

    async def test_auth(self, input: AuthInput) -> AuthOutput:
        """Always returns SUCCESS."""
        return AuthOutput(
            status=AuthStatus.SUCCESS, message="Authentication successful"
        )

    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
        """Always returns READY with no checks."""
        return PreflightOutput(
            status=PreflightStatus.READY,
            message="All preflight checks passed",
        )

    async def fetch_metadata(self, input: MetadataInput) -> MetadataOutput:
        """Always returns empty metadata."""
        return SqlMetadataOutput(objects=[])

101:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
114:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:

/usr/local/lib/python3.12/importlib/__init__.py:90: in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
tests/unit/transformers/query/test_sql_transformer.py:4: in <module>
    import daft
E   ModuleNotFoundError: No module named 'daft'
_ ERROR collecting tests/unit/transformers/query/test_sql_transformer_output_validation.py _
ImportError while importing test module '/repo/tests/unit/transformers/query/test_sql_transformer_output_validation.py'.
Hint: make sure your test modules/packages have valid Python names.
Traceback:
/usr/local/lib/python3.12/importlib/__init__.py:90: in import_module
    return _bootstrap._gcd_import(name[level:], package, level)

           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
tests/unit/transformers/query/test_sql_transformer_output_validation.py:6: in
…[1787 chars omitted]…
ats/writers/test_parquet_writer.py
ERROR tests/unit/testing/integration/test_client.py
ERROR tests/unit/testing/sdr/test_base.py
ERROR tests/unit/transformers/query/test_sql_transformer.py
ERROR tests/unit/transformers/query/test_sql_transformer_output_validation.py
!!!!!!!!!!!!!!!!!!! Interrupted: 15 errors during collection !!!!!!!!!!!!!!!!!!!
1 skipped, 3 deselected, 4 warnings, 15 errors in 19.69s

2026-11-06 22:51:41 [INFO] application_sdk.main - Starting handler mode: app=pkg:FakeApp host=0.0.0.0 port=8000
2026-11-06 22:51:41 [INFO] application_sdk.main - Using DefaultHandler for fake
handler kw False 127.0.0.1:9464
2026-11-06 22:51:41 [INFO] application_sdk.main - Starting combined mode: app=pkg:FakeApp temporal=localhost:7233 queue=fake-app-queue port=8000
2026-11-06 22:51:41 [INFO] application_sdk.main - Loaded app fake version 1
2026-11-06 22:51:41 [INFO] application_sdk.main - Connecting to Temporal localhost:7233
2026-11-06 22:51:41 [INFO] application_sdk.main - Using DefaultHandler for fake
2026-11-06 22:51:41 [INFO] application_sdk.main - Combined mode started: app=fake queue=fake-app-queue port=8000
2026-11-06 22:51:41 [INFO] application_sdk.main - Combined mode stopped
client kw False 9.9.9.9:1234 None
svc kw True 9.9.9.9:1234
OK

.                                                                        [100%]
1 passed in 1.62s

GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305
LANG=C.UTF-8
PS1=
SHLVL=1
_=/usr/bin/env

M application_sdk/handler/service.py
 M application_sdk/main.py

2026-11-06 22:52:40 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
200 True
call(timeout=5.0)
call('http://example:1234/metrics')

pyproject.toml:30:    "httpx-retries>=0.4.0,<0.5.0",
pyproject.toml:37:    # Temporal runtime (httpx-retries at L29 is the Dapr HTTP client replacement)
pyproject.toml:97:    "httpx>=0.27.0,<0.29.0",
requirements.txt:18:    #   httpx
requirements.txt:33:    #   httpx
requirements.txt:95:    # via httpx
requirements.txt:98:httpx==0.28.1
requirements.txt:102:    #   httpx-retries
requirements.txt:104:httpx-retries==0.4.6
requirements.txt:115:    #   httpx

warnings [call('Static UI assets not found at %s, skipping static mount', PosixPath('app/generated/frontend/static')),
 call('Temporal core metrics proxy request failed', exc_info=True)]

.......                                                                  [100%]
7 passed in 0.59s

2026-11-06 22:53:30 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
2026-11-06 22:53:30 [INFO] application_sdk.server.middleware.log - Request started: method=POST path=/workflows/v1/check request_id=a6ab8ed9-85d1-4d8b-823e-7e9c76364cee url=http://testserver/workflows/v1/check client_host=testclient
2026-11-06 22:53:30 [INFO] application_sdk.handler.service - Preflight check started: app=x request=2744ea2b-79b3-49c8-bbd9-47cf76ac579b
2026-11-06 22:53:30 [INFO] application_sdk.handler.service - Preflight check completed: app=x request=2744ea2b-79b3-49c8-bbd9-47cf76ac579b status=ready checks=0
2026-11-06 22:53:30 [INFO] application_sdk.server.middleware.log - Request completed: method=POST path=/workflows/v1/check status_code=200 duration_ms=7.21 request_id=a6ab8ed9-85d1-4d8b-823e-7e9c76364cee
{'success': False, 'data': {}, 'message': 'ready'}
OK

enable_temporal_core_metrics True KEYWORD_ONLY
prometheus_bind_address  KEYWORD_ONLY
WorkflowClientConfig(host='', namespace='default', task_queue='', tls_enabled=False, tls_server_root_ca_cert_path='', tls_client_cert_path='', tls_client_private_key_path='', tls_domain='', auth_enabled=False, auth_client_id='', auth_client_secret='', auth_token_url='', auth_base_url='', auth_scopes='', enable_temporal_core_metrics=True, prometheus_bind_address='')

tests/unit/decorators/test_mcp_tool.py:16:| Method Types                    |      3      | Class, static, async methods        |
tests/unit/decorators/test_mcp_tool.py:230:    def test_decorator_with_static_method(self):
tests/unit/decorators/test_mcp_tool.py:231:        """Test decorator with static method."""
tests/unit/decorators/test_mcp_tool.py:234:            @staticmethod
tests/unit/decorators/test_mcp_tool.py:235:            @mcp_tool(name="static_method_tool")
tests/unit/decorators/test_mcp_tool.py:236:            def static_method(value: int) -> int:
tests/unit/decorators/test_mcp_tool.py:237:                """A static method tool."""
tests/unit/decorators/test_mcp_tool.py:240:        # Test that static method still works
tests/unit/decorators/test_mcp_tool.py:241:        assert TestClass.static_method(5) == 10
tests/unit/decorators/test_mcp_tool.py:244:        metadata = 
…[2001 chars omitted]…
ef test_preserves_staticmethod_and_override(self) -> None:

tests/unit/tools/test_codemods/test_remove_decorators.py:172:                @staticmethod
tests/unit/tools/test_codemods/test_remove_decorators.py:177:        assert "@staticmethod" in code
tests/unit/tools/test_codemod_roundtrip.py:59:            "    @staticmethod\n"
tests/unit/tools/test_run_codemods.py:76:            "    @staticmethod\n"

tests/unit/handler/test_service.py:896:            with patch("application_sdk.handler.service.logger") as mock_logger:
tests/unit/handler/test_service.py:900:            mock_logger.warning.assert_called_once_with(

def test_custom_message(self) -> None:
        result = _wrap_response({}, message="All good")
        assert result["message"] == "All good"

    def test_failure_response(self) -> None:
        result = _wrap_response({"error": "oops"}, success=False, message="failed")
        assert result["success"] is False
        assert result["message"] == "failed"

    def test_list_data(self) -> None:
        result = _wrap_response([{"a": 1}, {"b": 2}], message="ok")
        assert result["data"] == [{"a": 1}, {"b": 2}]

        assert result["message"] == "ok"


class TestRunIdPathParam:
    """Tests for stop and status endpoints using slash-containing run_ids."""

    def test_status_with_slash_run_id(self) -> None:
        # Without a configured Temporal client the service returns 503,
        # but the route itself must resolve (not 404/405).
        client = _make_client()
        r
…[1626 chars omitted]…
g": {"key": "value"}}
        (tmp_path / "my-config.json").write_text(json.dumps(raw))

        original = svc_module.CONTRACT_GENERATED_DIR
        svc_module.CONTRACT_GENERATED_DIR = tmp_path
        try:
            client = _make_client()
            response = client.get("/workflows/v1/configmap/my-config")
            assert response.status_code == 200
            data = response.json()["data"]

88:105:        from application_sdk.observability import (  # noqa: PLC0415 — cold path: only on proxy failure
422:104:    description: str = "Per-app handler service for authentication, preflight, and metadata operations",
488:107:    from application_sdk.constants import (  # noqa: PLC0415 — cold path: only at handler service startup
493:102:        from contextlib import (  # noqa: PLC0415 — cold path: lifespan setup, only when MCP enabled
497:105:        from application_sdk.server.mcp import (  # noqa: PLC0415 — cold path: only when ENABLE_MCP set
635:99:                # v2 format: {"authenticationCheck": {"success": true, "message": "...", ...}, ...}
638:91:                    # Convert check name to camelCase key (e.g. "AuthCheck" -> "authCheck")
1701:93:            "Provisioned local credentials: guid=%s sensitive_keys=%s non_sensitive_keys=%s",
1752:108:        from promethe
…[930 chars omitted]…
cture init is needed
487:121:        from application_sdk.storage import (  # noqa: PLC0415 — cold path: storage init only when binding YAML present

629:134:    from application_sdk.observability.observability import (  # noqa: PLC0415 — cold path: observability components only at startup
696:108:    from application_sdk.execution.shutdown import (  # noqa: PLC0415 — keep main.py import surface narrow

1407:#### `create_app_handler_service`
1408-
1409:- **Import:** `from application_sdk.handler import create_app_handler_service`
1410:- **Signature:** `create_app_handler_service(handler: Handler, ...)`
1411-- **Summary:** Create a FastAPI app for a single handler.
1412-- **Defined in:** `application_sdk/handler/service.py`
1413-
1414-#### `run_app_handler_service`
1415-
1416-- **Import:** `from application_sdk.handler import run_app_handler_service`
1417-- **Signature:** `run_app_handler_service(handler: Handler, ...)`
1418-- **Summary:** Create and run the handler service with uvicorn.

1419-- **Defined in:** `application_sdk/handler/service.py`
1420-
1421-## `application_sdk.infrastructure`
1422-
1423-Protocol-based infrastructure (StateStore, SecretStore, PubSub, Bindings, CapacityPool)
1424-
1425-### Classes
1426-
1427-#### `AsyncDaprClient`
1428-
1429-- **Import:** `from applicat
…[597 chars omitted]…
ication_sdk.infrastructure import BindingError`
1444-- **Signature:** `class BindingError(message: str, ...)`
1445-- **Summary:** Deprecated: use ``application_sdk.errors.DependencyUnavailableError`` — removed in v4.0.
1446-- **Defined in:** `application_sdk/infrastructure/bindings.py`
1447-
1448-#### `BindingRequest`
1449-
1450-- **Import:** `from application_sdk.infrastructure import BindingRequest`

2026-11-06 22:55:06 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
200 True [call('Temporal core metrics proxy request failed', exc_info=True)] []

response = client.post(
            "/workflows/v1/check",
            json={"credentials": []},
        )
        assert response.status_code == 200
        body = response.json()
>       assert body["success"] is True
E       assert False is True

tests/unit/handler/test_service.py:357: AssertionError
----------------------------- Captured stdout call -----------------------------
2026-11-06 22:55:23 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount

2026-11-06 22:55:23 [INFO] application_sdk.server.middleware.log - Request started: method=POST path=/workflows/v1/check request_id=17c8e1bb-7905-4ea5-b91c-72ec0d68dac8 url=http://testserver/workflows/v1/check client_host=testclient
2026-11-06 22:55:23 [INFO] application_sdk.handler.service - Preflight check started: app=test-app request=71cd8eca-e3ff-48
…[669 chars omitted]…
 use a typed application_sdk.errors.AppError subclass — will be removed in v4.0
    raise HandlerError("preflight failed")

-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
=========================== short test summary info ============================
FAILED tests/unit/handler/test_service.py::TestPreflightEndpoint::test_preflight_success
1 failed, 3 passed, 1 warning in 1.03s

application_sdk/handler/service.py:45:import httpx
application_sdk/handler/service.py:286:    enable_temporal_core_metrics: bool = True
application_sdk/handler/service.py:287:    prometheus_bind_address: str = ""
application_sdk/handler/service.py:379:        enable_prometheus=_workflow_config.enable_temporal_core_metrics,
application_sdk/handler/service.py:380:        prometheus_bind_address=_workflow_config.prometheus_bind_address,
application_sdk/handler/service.py:425:    enable_temporal_core_metrics: bool = True,
application_sdk/handler/service.py:426:    prometheus_bind_address: str = "",
application_sdk/handler/service.py:484:        enable_temporal_core_metrics=enable_temporal_core_metrics,
application_sdk/handler/service.py:485:        prometheus_bind_address=prometheus_bind_address,
application_sdk/handler/service.py:1767:        if enable_temporal_core_metrics and prometheu
…[1410 chars omitted]…
dress=config.prometheus_bind_address,

application_sdk/main.py:1123:        enable_temporal_core_metrics=True,
application_sdk/main.py:1124:        prometheus_bind_address=config.prometheus_bind_address,
application_sdk/main.py:1283:        import httpx  # noqa: PLC0415 — cold path: lazy load to keep import-time cost low
application_sdk/main.py:1288:            async with httpx.AsyncClient() as client:

..                                                                       [100%]
2 passed in 0.57s

application_sdk/handler/service.py | 81 ++++++++++++++++++++++++++------------
 application_sdk/main.py            |  4 ++
 2 files changed, 60 insertions(+), 25 deletions(-)

M application_sdk/handler/service.py
 M application_sdk/main.py
  Enable tracemalloc to get traceback where the object was allocated.
  See https://docs.pytest.org/en/stable/how-to/capture-warnings.html#resource-warnings for more info.

-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
294 passed, 1 deselected, 15 warnings in 5.06s

…[24 chars omitted]…
levant unit tests pass except the pre-existing test_preflight_success assertion, which encodes the old empty-checks success behavior explicitly changed by the issue."}
submitted.

/repo
total 1136
drwxr-xr-x 1 root root   4096 Nov  4 12:02 .
drwxr-xr-x 1 root root   4096 Nov  4 12:03 ..
drwxr-xr-x 1 root root   4096 Nov  4 12:02 .agents
drwxr-xr-x 1 root root   4096 Nov  4 12:02 .claude
-rw-r--r-- 1 root root    650 Nov  4 12:02 .dockerignore
-rw-r--r-- 1 root root   1443 Nov  4 12:02 .env.example
drwxr-xr-x 1 root root   4096 Nov  4 12:03 .git
drwxr-xr-x 1 root root   4096 Nov  4 12:02 .github
-rw-r--r-- 1 root root   3426 Nov  4 12:02 .gitignore
-rw-r--r-- 1 root root   1202 Nov  4 12:02 .pre-commit-config.yaml

drwxr-xr-x 1 root root   4096 Nov  4 12:02 .security
drwxr-xr-x 1 root root   4096 Nov  4 12:02 .vscode
-rw-r--r-- 1 root root   2563 Nov  4 12:02 AGENTS.md
-rw-r--r-- 1 root root 104815 Nov  4 12:02 CHANGELOG.md
-rw-r--r-- 1 root root   3024 Nov  4 12:02 CLAUDE.md
-rw-r--r-- 1 root root   3370 Nov  4 12:02 CODE_OF_CONDUCT.md
-rw-r--r-- 1 root root   3
…[7962 chars omitted]…
ion_sdk/observability/observability.py
./application_sdk/observability/pushgateway.py
./application_sdk/observability/resource_sampler.py
./application_sdk/observability/segment_client.py
./application_sdk/observability/trace_context.py
./application_sdk/observability/traces_adaptor.py
./application_sdk/observability/utils.py
./application_sdk/outputs/__init__.py
./application_sdk/outputs/collector.py

71a3a19 base

application_sdk/handler/base.py:103:            async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
application_sdk/handler/base.py:125:                "Access self.context only inside test_auth, preflight_check, or fetch_metadata."
application_sdk/handler/base.py:145:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
application_sdk/handler/base.py:190:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
application_sdk/handler/contracts.py:5:- Preflight checks (preflight_check)
application_sdk/handler/contracts.py:107:        async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
application_sdk/handler/contracts.py:237:class PreflightStatus(SerializableEnum):
application_sdk/handler/contracts.py:245:class PreflightCheck(BaseModel):
application_sdk/handler/contracts.py:261:class Prefligh
…[5504 chars omitted]…
ght_check(self, **kwargs):\n"
tests/unit/tools/test_codemod_roundtrip.py:171:            "    async def preflight_check(self, *args, **kwargs) -> dict:\n"

tests/integration/test_handler_service.py:101:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
tests/integration/test_handler_service.py:114:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:

@dataclasses.dataclass
class WorkflowClientConfig:
    """Configuration for the Temporal client used by the /start endpoint."""

    host: str = ""
    namespace: str = "default"
    task_queue: str = ""
    app_class: type[App] | None = dataclasses.field(default=None, repr=False)
    data_converter: DataConverter | None = dataclasses.field(default=None, repr=False)

    # TLS
    tls_enabled: bool = False

    tls_server_root_ca_cert_path: str = ""
    tls_client_cert_path: str = ""
    tls_client_private_key_path: str = ""
    tls_domain: str = ""

    # Auth
    auth_enabled: bool = False
    auth_client_id: str = ""
    auth_client_secret: str = ""
    auth_token_url: str = ""
    auth_base_url: str = ""
    auth_scopes: str = ""

    def is_configured(self) -> bool:
        return bool(self.host and self.app_class)


_temporal_client: Client | None = None
_workflow_config: Workf
…[8630 chars omitted]…
flow_id,
                run_id,
                str(e),
                exc_info=True,
            )
            raise HTTPException(
                status_code=500, detail="Failed to get workflow status"
            ) from None

    # ------------------------------------------------------------------
    # Config (state store)
    # ------------------------------------------------------------------

19:    GET  /metrics - Prometheus metrics endpoint (when enabled)
76:    """Record a Temporal-core ``/metrics`` proxy failure.
78:    Increments the ``temporal_core_metrics_proxy_failures_total`` counter
83:        metrics as _metrics_module,
86:    counter = _metrics_module.create_counter(
87:        "temporal_core_metrics_proxy_failures",
89:            "Failures fetching the Temporal Rust-core /metrics endpoint via "
282:_workflow_config: WorkflowClientConfig = WorkflowClientConfig()
382:def create_app_handler_service(
451:    _workflow_config = WorkflowClientConfig(
514:    # MeterProvider configured in observability/metrics_adaptor.py and land in
592:    async def preflight_check(request: Request) -> JSONResponse:

607:                result = await handler.preflight_check(preflight_input)
1707:    # Prometheus metrics
1710:    @app.get("/metrics")
1711:    async def prometheus_me
…[8629 chars omitted]…
v1/config/{config_id}")
    async def get_workflow_config(
        config_id: Annotated[str, PathParam(pattern=_CONFIG_KEY_PATTERN)],
        type: Annotated[str, Query(pattern=_CONFIG_KEY_PATTERN)] = "workflows",
    ) -> JSONResponse:
        """Fetch workflow config from object store."""
886:def run_handler_mode(config: AppConfig) -> None:
969:async def run_combined_mode(config: AppConfig) -> None:

status: AuthStatus
    """Authentication result status."""

    message: str = ""
    """Human-readable status message."""

    identities: list[str] = []
    """Verified identities (e.g., usernames, roles)."""

    scopes: list[str] = []
    """Authorized scopes or permissions."""

    expires_at: str = ""
    """ISO-8601 expiry timestamp (empty if no expiry)."""


class PreflightStatus(SerializableEnum):
    """Overall result of a preflight check."""

    READY = "ready"
    NOT_READY = "not_ready"
    PARTIAL = "partial"


class PreflightCheck(BaseModel):
    """Result of a single preflight check."""

    name: str = Field(..., min_length=1)
    """Check name (e.g., 'connectivity', 'permissions')."""

    passed: bool = False
    """Whether the check passed."""

    message: str = ""
    """Details about the check result."""

    duration_ms: float = 0.0
    """How long the ch
…[1892 chars omitted]…
class SqlMetadataObject(BaseModel):
    """A row for the **sqltree** frontend widget.

    The sqltree widget expects a flat list of catalog/schema pairs.
    The frontend groups them into a tree (catalogs → schemas).
application_sdk/handler/service.py:1790:def run_app_handler_service(
application_sdk/main.py:897:        run_app_handler_service,
application_sdk/main.py:934:    run_app_handler_service(

tests/unit/test_main.py:1029:class TestRunHandlerMode:
tests/unit/test_main.py:1174:class TestRunCombinedMode:
tests/unit/test_main.py:1315:        assert cfg.enable_temporal_core_metrics is False
tests/unit/handler/test_service.py:659:            "application_sdk.handler.service._get_temporal_client",
tests/unit/handler/test_service.py:761:            "application_sdk.handler.service._get_temporal_client",
tests/unit/handler/test_service.py:2229:    _get_temporal_client() caches a Temporal client globally; tests that
tests/unit/handler/test_service.py:2242:class TestGetTemporalClientInlineImports:
tests/unit/handler/test_service.py:2243:    """BLDX-1129 regression: exercise the real _get_temporal_client body so a
tests/unit/handler/test_service.py:2267:            result = await svc_module._get_temporal_client()
tests/unit/handler/test_service.py:2293:            first = await svc_mo
…[3729 chars omitted]…
pp_config.py:375:        assert config.enable_temporal_core_metrics is True

tests/unit/test_app_config.py:388:        assert config.enable_temporal_core_metrics is False
tests/unit/test_app_config.py:577:        assert _build_dev_config(_APP_MODULE).enable_temporal_core_metrics is False
tests/unit/test_app_config.py:583:        assert _build_dev_config(_APP_MODULE).enable_temporal_core_metrics is True

1038:def get_logger(name: str | None = None) -> AtlanLoggerAdapter:
1039-    """Get or create an instance of AtlanLoggerAdapter.
1040-    Args:
1041-        name (str, optional): Logger name. If None, uses the caller's module name.
1042-    Returns:
1043-        AtlanLoggerAdapter: Logger instance for the specified name
1044-    """
1045-    global _logger_instances
1046-
1047-    # If no name provided, use the caller's module name
1048-    if name is None:
1049-        name = __name__

1050-    # Create new logger instance if it doesn't exist
1051-    if name not in _logger_instances:
1052-        _logger_instances[name] = AtlanLoggerAdapter(name)
1053-
1054-    return _logger_instances[name]
1055-
1056-
1057-# Initialize the default logger
1058-default_logger = get_logger()  # Use a different name instead of redefining 'logger'
application_sdk/handler/service.py:75:def _record_proxy_failure(reason: str, log_message: str) -> None:
application_sdk/handler/service.py:1748:                        _record_proxy_failure(
application_sdk/handler/service.py:1750:                            f"Temporal core metrics proxy returned HTTP {resp.status_code}",
application_sdk/handler/service.py:1753:                _record_proxy_failure(

2026-11-04 12:09:30 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
2026-11-04 12:09:30 [WARNING] application_sdk.handler.service - Temporal core metrics unavailable
Traceback (most recent call last):

  File "/usr/local/lib/python3.12/site-packages/httpx/_transports/default.py", line 101, in map_httpcore_exceptions
    yield
  File "/usr/local/lib/python3.12/site-packages/httpx/_transports/default.py", line 394, in handle_async_request
    resp = await self._pool.handle_async_request(req)
                 │    │     │                    └ <Request [b'GET']>
                 │    │     └ <function AsyncConnectionPool.handle_async_request at 0x79821d52ba60>
                 │    └ <AsyncConnectionPool [Requests: 0 active, 0 queued | Connections: 0 active, 0 idle]>
                 └ <httpx.AsyncHTTPTransport

…[8630 chars omitted]…
 Request completed: method=POST path=/workflows/v1/check status_code=200 duration_ms=2.49 request_id=4e387d00-1580-43dc-b0c4-7f0902f21f48
preflight status: 200
preflight body: {'success': False, 'data': {'goodCheck': {'success': True, 'message': 'all good'}, 'badCheck': {'success': False, 'message': 'bad one'}, 'noMessageCheck': {'success': False, 'message': ''}}, 'message': 'Preflight check partial'}

727:async def run_worker_mode(config: AppConfig) -> None:
796:    client = await create_temporal_client(
1051:    client = await create_temporal_client(

import asyncio
import logging
import sys
import threading
import traceback as tb_module
from typing import Any, ClassVar

from loguru import logger
from opentelemetry._logs import LogRecord, SeverityNumber
from opentelemetry.exporter.otlp.proto.grpc._log_exporter import OTLPLogExporter
from opentelemetry.sdk._logs import LoggerProvider
from opentelemetry.sdk._logs._internal.export import BatchLogRecordProcessor

from opentelemetry.trace.span import TraceFlags

from application_sdk.constants import (
    APPLICATION_NAME,
    ENABLE_OBSERVABILITY_STORE_SINK,
    ENABLE_OTLP_LOGS,
    ENABLE_OTLP_WORKFLOW_LOGS,
    LOG_BATCH_SIZE,
    LOG_CLEANUP_ENABLED,
    LOG_FILE_NAME,
    LOG_FLUSH_INTERVAL_SECONDS,
    LOG_LEVEL,
    LOG_RETENTION_DAYS,
    OTEL_BATCH_DELAY_MS,
    OTEL_BATCH_SIZE,
    OTEL_EXPORTER_OTLP_ENDPOINT,
    OTEL_EXPORTER_TIMEOUT_SECONDS,
    OTEL_QUEUE_SIZE,
    OTEL_WO
…[3385 chars omitted]…
n.type/message/stacktrace
    "failure.",  # SDK convention: failure.category/audience/code from AppError
347:    def debug(self, msg: str, **kwargs: Any) -> None:
359:    def warning(self, msg: str, **kwargs: Any) -> None:
378:class AtlanLoggerAdapter(AtlanObservability[Any]):
752:    def debug(self, msg: str, *args: Any, **kwargs: Any):
794:    def warning(self, msg: str, *args: Any, **kwargs: Any):

if config_hash
            else f"{prefix}-{short_id}"
        )

        workflow_name = (
            f"{app_cls._app_name}:{entry_point}" if entry_point else app_cls._app_name
        )
        ep_meta = (
            app_cls._app_metadata.entry_points.get(entry_point) if entry_point else None
        )
        if entry_point is not None and ep_meta is None:
            available = list(app_cls._app_metadata.entry_points)

            raise ValueError(
                f"Unknown entry point '{entry_point}' for app '{app_cls._app_name}'. "
                f"Available: {available}"
            )
        output_type = (
            ep_meta.output_type
            if ep_meta is not None
            else getattr(app_cls, "_output_type", None)
        )
        result = await self._client.execute_workflow(
            workflow_name,
            args=[input_data],
            id
…[8481 chars omitted]…

        """
        try:
            msg, args = _format_printf_args(msg, args)
            exc_info = kwargs.pop("exc_info", False)
            msg, kwargs = self.process(msg, kwargs)
            bound_logger = self.logger.bind(**kwargs)
            if exc_info:
                bound_logger.opt(exception=exc_info).warning(msg, *args)
            else:
                bound_logger.warning(msg, *args)

tests/unit/test_app_config.py:41:        # Loopback by default — only the in-process /metrics proxy and the

# First positional arg is the FastAPI app instance
        assert kwargs.get("host") == "127.0.0.1"
        assert kwargs.get("port") == 9000
        assert kwargs.get("log_level") == "warning"


class TestWorkflowClientConfig:
    """Tests for WorkflowClientConfig.is_configured()."""

    def test_unconfigured_when_host_missing(self) -> None:
        from application_sdk.handler.service import WorkflowClientConfig

        cfg = WorkflowClientConfig(host="", task_queue="q")
        assert cfg.is_configured() is False

    def test_unconfigured_when_app_class_missing(self) -> None:
        from application_sdk.handler.service import WorkflowClientConfig

        cfg = WorkflowClientConfig(host="t:7233", app_class=None)
        assert cfg.is_configured() is False

    def test_configured_when_host_and_app_class_present(self) -> None:
        from application_sdk.handler.service
…[4087 chars omitted]…
fig(
tests/unit/handler/test_service.py:3377:        cfg = WorkflowClientConfig(host="", task_queue="q")
tests/unit/handler/test_service.py:3383:        cfg = WorkflowClientConfig(host="t:7233", app_class=None)
tests/unit/handler/test_service.py:3392:        cfg = WorkflowClientConfig(host="t:7233", app_class=_Cls)  # type: ignore[arg-type]
1315:        assert cfg.enable_temporal_core_metrics is False

diff --git a/application_sdk/handler/service.py b/application_sdk/handler/service.py
index b3b34ff..99a97a3 100644
--- a/application_sdk/handler/service.py
+++ b/application_sdk/handler/service.py
@@ -274,6 +274,10 @@ class WorkflowClientConfig:
     auth_base_url: str = ""
     auth_scopes: str = ""
 
+    # Temporal Runtime metrics
+    enable_temporal_core_metrics: bool = True
+    prometheus_bind_address: str = ""
+

     def is_configured(self) -> bool:
         return bool(self.host and self.app_class)
 
@@ -364,6 +368,8 @@ async def _get_temporal_client() -> Client:
         tls_client_cert_path=_workflow_config.tls_client_cert_path,
         tls_client_private_key_path=_workflow_config.tls_client_private_key_path,
         tls_domain=_workflow_config.tls_domain,
+        enable_prometheus=_workflow_config.enable_temporal_core_metrics,
+        prometheus_bind_address=_workflow_
…[4055 chars omitted]…
          f"with HTTP {resp.status_code}",
+                            )
+                except Exception as exc:
+                    _record_proxy_failure(
+                        type(exc).__name__,
+                        "Temporal core metrics proxy request failed: "
+                        f"{type(exc).__name__}",
+                    )
 
         return Response(
             content=body,

diff --git a/application_sdk/main.py b/application_sdk/main.py
index 4651c00..00e0447 100644
--- a/application_sdk/main.py
+++ b/application_sdk/main.py
@@ -956,6 +956,8 @@ def run_handler_mode(config: AppConfig) -> None:
         secret_store=infra.secret_store,
         storage=infra.storage,
         frontend_assets_path=config.frontend_assets_path,
+        enable_temporal_core_metrics=False,
+        prometheus_bind_address=config.prometheus_bind_address,
     )
 

     from application_sdk.infrastructure.context import (  # noqa: PLC0415 — cold path: only when infrastructure init is needed
@@ -1118,6 +1120,8 @@ async def run_combined_mode(config: AppConfig) -> None:
         secret_store=infra.secret_store,
         storage=infra.storage,
         frontend_assets_path=config.frontend_assets_path,
+        enable_temporal_core_metrics=config.enable_temporal_core_metrics,
+        prometheus_bind_address=config.prometheus_bind_address,
     )
 
     uvicorn_server = uvicorn.Server(

2026-11-04 12:15:03 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
disabled proxy: status=200, python_info present, AsyncClient not constructed
2026-11-04 12:15:04 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
enabled failure: status=200, one warning, proxy request failed, exc_info=True
2026-11-04 12:15:04 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
2026-11-04 12:15:04 [INFO] application_sdk.server.middleware.log - Request started: method=POST path=/workflows/v1/check request_id=4c491cee-cd7f-4e6f-8376-000555f95ae6 url=http://testserver/workflows/v1/check client_host=testclient
2026-11-04 12:15:04 [INFO] application_sdk.handler.service - Preflig
…[1022 chars omitted]…

2026-11-04 12:15:04 [INFO] application_sdk.handler.service - Preflight check completed: app= request=94b5b5e7-e073-447d-927d-6bbdb611d3ad status=ready checks=0
2026-11-04 12:15:04 [INFO] application_sdk.server.middleware.log - Request completed: method=POST path=/workflows/v1/check status_code=200 duration_ms=2.98 request_id=725703de-c103-4ca9-bfee-5435cbb215cd
empty preflight: success=False, data={}

................F....................................................... [ 19%]
........................................................................ [ 39%]
........................................................................ [ 58%]
........................................................................ [ 78%]
........................................................................ [ 97%]
........                                                                 [100%]
=================================== FAILURES ===================================
_________________ TestPreflightEndpoint.test_preflight_success _________________

self = <tests.unit.handler.test_service.TestPreflightEndpoint object at 0x7b7246bb3770>

    def test_preflight_success(self) -> None:

        client = _make_client()
        response = client.post(
            "/workflows/v1/check",
            json={"c
…[1011 chars omitted]…
2:15:37 [INFO] application_sdk.server.middleware.log - Request completed: method=POST path=/workflows/v1/check status_code=200 duration_ms=2.03 request_id=f5142c1c-fc44-4468-afb1-d258d59506a3
=========================== short test summary info ============================
FAILED tests/unit/handler/test_service.py::TestPreflightEndpoint::test_preflight_success
1 failed, 367 passed, 16 warnings in 5.65s

"""OTel-native metrics API for app authors.

Apps can emit their own counters, histograms, gauges, and up-down counters
through the same MeterProvider that the SDK's interceptors use:

    from application_sdk.observability import metrics

    requests = metrics.create_counter(
        "myapp.requests",
        description="Requests handled",
        unit="1",
    )

    requests.add(1, {"endpoint": "/foo"})

    latency = metrics.create_histogram(
        "myapp.request.duration",
        description="Request latency",
        unit="s",
    )
    latency.record(0.42, {"endpoint": "/foo"})

The instruments write through the global ``MeterProvider`` configured in
``application_sdk.observability.metrics_adaptor``. They are scraped from
``/metrics`` on long-running servers and pushed via Pushgateway from
short-lived workers — no per-call configuration required.
"""

from __future__ import
…[8628 chars omitted]…
needed
@@ -1118,6 +1120,8 @@ async def run_combined_mode(config: AppConfig) -> None:
         secret_store=infra.secret_store,
         storage=infra.storage,
         frontend_assets_path=config.frontend_assets_path,
+        enable_temporal_core_metrics=config.enable_temporal_core_metrics,
+        prometheus_bind_address=config.prometheus_bind_address,
     )
 
     uvicorn_server = uvicorn.Server(

160:generate-apidocs.shell = "mkdocs build && pydoctor --html-output=site/api application_sdk --docformat=google"
207:reportPossiblyUnboundVariable = "information"
255:[tool.ruff.lint]
271:[tool.ruff.lint.per-file-ignores]
292:    "black>=26.3.1",             # CVE-2026-32274
bash: line 401: uv: command not found

66:    PreflightStatus,
25:    app = create_app_handler_service(handler, app_name="my-app")
26-    uvicorn.run(app, host="0.0.0.0", port=8000)
27-"""
28-
29-from __future__ import annotations
30-
31-import asyncio
32-import dataclasses
33-import json
34-import mimetypes
35-import os

36-import re
37-import shutil
38-import tempfile
39-import warnings
40-from datetime import UTC, datetime
41-from pathlib import Path, PurePosixPath
42-from typing import TYPE_CHECKING, Annotated, Any, cast
43-from uuid import uuid4
44-
45-import orjson
46-import temporalio.service
47-from fastapi import FastAPI, File, Form, HTTPException
48-from fastapi import Path as PathParam
49-from fastapi import Query, Request, UploadFile
50-from fastapi.responses import HTMLResponse, JSONResponse, Response
51-from fastapi.staticfiles import StaticFiles
52-from pydantic import BaseModel as PydanticBaseModel
53-from t
…[7721 chars omitted]…
ve_task_queue(self.app_module)
182-
183-    @classmethod
184-    def from_args_and_env(cls, args: argparse.Namespace) -> AppConfig:
185-        """Create config from CLI args with env var fallbacks.
186-
187-        CLI arguments take precedence over environment variables.
188-        """
189-
190-        def _env(key: str, default: str = "") -> str:
191-            return os.environ.get(key, default)

HandlerError: On authentication errors that should surface as HTTP 500.
        """
        ...

    @abstractmethod
    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
        """Run preflight checks (connectivity, permissions, etc.).

        Args:
            input: Credentials, connection config, and checks to run.

        Returns:

            PreflightOutput with per-check results and overall status.

        Raises:
            HandlerError: On check errors that should surface as HTTP 500.
        """
        ...

    @abstractmethod
    async def fetch_metadata(self, input: MetadataInput) -> MetadataOutput:
        """Fetch metadata objects from the target system.

        Args:
            input: Credentials, connection config, and filter options.

        Returns:
            A ``SqlMetadataOutput`` (for sqltree widget) or
            `
…[8629 chars omitted]…
 application_sdk.observability.observability import AtlanObservability
1459-
1460-        assert hasattr(AtlanObservability, "flush_all")
1461-
1462-
1463-# --------------------------------------------------------------------------- #
1464-# _log_dapr_components — branch with safe_meta                                #
1465-# --------------------------------------------------------------------------- #

........................................................................ [ 19%]
........................................................................ [ 39%]
........................................................................ [ 58%]
........................................................................ [ 78%]
........................................................................ [ 98%]
.......                                                                  [100%]
367 passed, 1 deselected, 15 warnings in 4.81s

logger = get_logger(__name__)


class AppWorker:
    """Wraps Temporal Worker to emit worker_start on startup and to push
    metrics on shutdown for short-lived deployments.

    Emits the ``worker_start`` lifecycle event on ``__aenter__`` (and ``run()``)
    so that every code path that starts a worker automatically registers the
    agent — regardless of whether the caller uses ``async with worker:`` or
    ``await worker.run()``.

    When ``enable_pushgateway=True`` the wrapper also registers a
    ``TemporalCoreCollector`` and starts a ``PushGatewayClient`` that
    periodically pushes ``prometheus_client.REGISTRY`` to
    ``PROMETHEUS_PUSHGATEWAY_URL``. Combined-mode deployments (FastAPI server
    in the same process) leave this off — ``/metrics`` already exposes the
    same series and pushing would double-count.
    """

    def __init__(
        self,
        worker: Worke
…[8628 chars omitted]…
Mock()

    await create_temporal_client(
        host="localhost:7233",
        namespace="default",
        connect_max_attempts=1,
        enable_prometheus=False,
    )

    mock_connect.assert_called_once()
    call_kwargs = mock_connect.call_args[1]
    assert "runtime" in call_kwargs
    # Should have used Runtime.default(), not PrometheusConfig
    _reset_singleton.default.assert_called_once()

application_sdk/handler/service.py | 65 ++++++++++++++++++++++++--------------
 application_sdk/main.py            |  4 +++
 2 files changed, 46 insertions(+), 23 deletions(-)
diff --git a/application_sdk/handler/service.py b/application_sdk/handler/service.py
index b3b34ff..fd73d00 100644
--- a/application_sdk/handler/service.py
+++ b/application_sdk/handler/service.py
@@ -63,7 +63,6 @@ from application_sdk.handler.contracts import (
     HandlerCredential,
     MetadataInput,
     PreflightInput,
-    PreflightStatus,

     SubscriptionConfig,
 )
 from application_sdk.handler.manifest import AppManifest
@@ -274,6 +273,13 @@ class WorkflowClientConfig:
     auth_base_url: str = ""
     auth_scopes: str = ""
 
+    # Temporal Runtime metrics
+    enable_temporal_core_metrics: bool = True
+    """Whether the Temporal runtime should expose core Prometheus metrics."""
+
+    prometheus_b
…[5631 chars omitted]…
needed
@@ -1118,6 +1120,8 @@ async def run_combined_mode(config: AppConfig) -> None:
         secret_store=infra.secret_store,
         storage=infra.storage,
         frontend_assets_path=config.frontend_assets_path,
+        enable_temporal_core_metrics=config.enable_temporal_core_metrics,
+        prometheus_bind_address=config.prometheus_bind_address,
     )
 
     uvicorn_server = uvicorn.Server(

# emits a DeprecationWarning. Will be removed in v3.2.0.
    state_store: Any = None,
) -> FastAPI:
    """Create a FastAPI app for a single handler.

    Args:
        handler: The Handler instance to serve.
        app_name: App name for logging context.
        app_class: App class for workflow execution (enables /start, /stop, etc.).
        temporal_host: Temporal server address (e.g., "localhost:7233").
        temporal_namespace: Temporal namespace.
        task_queue: Task queue name (default: "{app_name}-queue").

        data_converter: Optional custom Temporal DataConverter.
        enable_temporal_core_metrics: Whether to proxy Temporal Runtime metrics from
            ``/metrics``.
        prometheus_bind_address: Address of the Temporal Runtime metrics endpoint.
        secret_store: Optional secret store for credential resolution.
        storage: Optional obstore st
…[3033 chars omitted]…
ttp_{resp.status_code}",
                            "Temporal core metrics proxy request failed "
                            f"with HTTP {resp.status_code}",
                        )

        return Response(
            content=body,
            media_type="text/plain; version=0.0.4; charset=utf-8",
        )

    # ------------------------------------------------------------------
    # UI routes

M application_sdk/handler/service.py
 M application_sdk/main.py

42	21	application_sdk/handler/service.py
4	0	application_sdk/main.py
 M application_sdk/handler/service.py
 M application_sdk/main.py

diff --git a/application_sdk/handler/service.py b/application_sdk/handler/service.py
index b3b34ff..d37f3fa 100644
--- a/application_sdk/handler/service.py
+++ b/application_sdk/handler/service.py
@@ -63,7 +63,6 @@ from application_sdk.handler.contracts import (
     HandlerCredential,
     MetadataInput,
     PreflightInput,
-    PreflightStatus,
     SubscriptionConfig,
 )
 from application_sdk.handler.manifest import AppManifest

@@ -274,6 +273,13 @@ class WorkflowClientConfig:
     auth_base_url: str = ""
     auth_scopes: str = ""
 
+    # Temporal Runtime metrics
+    enable_temporal_core_metrics: bool = True
+    """Whether the Temporal runtime should expose core Prometheus metrics."""
+
+    prometheus_bind_address: str = ""
+    """Bind address used for Temporal's core metrics endpoint, if enabled."""
+
     def is_configured(self) -> bool:
         return bool(self.host and s
…[6824 chars omitted]…
AppConfig) -> None:
         secret_store=infra.secret_store,
         storage=infra.storage,
         frontend_assets_path=config.frontend_assets_path,
+        enable_temporal_core_metrics=config.enable_temporal_core_metrics,
+        prometheus_bind_address=config.prometheus_bind_address,
     )
 
     uvicorn_server = uvicorn.Server(
 M application_sdk/handler/service.py
 M application_sdk/main.py

2026-11-04 12:28:59 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
2026-11-04 12:28:59 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
2026-11-04 12:28:59 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
2026-11-04 12:28:59 [INFO] application_sdk.server.middleware.log - Request started: method=POST path=/workflows/v1/check request_id=04e53f61-24ec-42ff-9ae3-be36eb45ed57 url=http://testserver/workflows/v1/check client_host=testclient
2026-11-04 12:28:59 [INFO] application_sdk.handler.service - Preflight check started: app= request=f9226c22-7d05-4a0c-8c08-c92e1f64a603
2026-11-04 12:28:59 [INFO] application_sdk.handler.service - Preflight check completed:
…[779 chars omitted]…
a5-d016f4ca00e1
2026-11-04 12:28:59 [INFO] application_sdk.handler.service - Preflight check completed: app= request=ff06ace2-88a3-4e7b-9aa5-d016f4ca00e1 status=ready checks=0
2026-11-04 12:28:59 [INFO] application_sdk.server.middleware.log - Request completed: method=POST path=/workflows/v1/check status_code=200 duration_ms=2.35 request_id=df473efe-add5-4061-a81b-18288017f962
final reproducers passed

2026-11-04 12:29:08 [INFO] application_sdk.main - Starting combined mode: app=pkg:App temporal=localhost:7233 queue=app-queue port=8000
2026-11-04 12:29:08 [INFO] application_sdk.main - Loaded app app version 1
2026-11-04 12:29:08 [INFO] application_sdk.main - Connecting to Temporal localhost:7233
2026-11-04 12:29:08 [INFO] application_sdk.main - Using DefaultHandler for app
2026-11-04 12:29:08 [INFO] application_sdk.main - Combined mode started: app=app queue=app-queue port=8000
2026-11-04 12:29:08 [INFO] application_sdk.main - Combined mode stopped
combined mode config routing and normal completion passed

180:def load_handler_class(
181-    module_path: str,
182-    *,
183-    handler_module_path: str | None = None,
184-) -> type[Handler] | None:
185-    """Load a Handler class associated with an App.
186-
187-    Handler discovery order:
188-    1. If ``handler_module_path`` is provided, load from that path.
189-    2. Look for ``{AppClassName}Handler`` in the same module.
190-    3. Look for any Handler subclass in the same module.
191-    4. Return None if no handler is found.

192-
193-    Args:
194-        module_path: Module path of the App class.
195-        handler_module_path: Optional explicit path to a Handler class.
196-
197-    Returns:
198-        The Handler subclass, or None if not found.
199-
200-    Raises:
201-        DiscoveryError: If ``handler_module_path`` is provided but invalid.
202-    """
203-    if handler_module_path:
204-        module_name, class_name = _p
…[2974 chars omitted]…
t in registry.list_apps():
285-        raise DiscoveryError(
286-            f"App '{app_name}' is not registered in AppRegistry. "
287-            "This usually means App.__init_subclass__ did not run correctly."
288-        )
289-
290-    logger.debug(
291-        "App class validated app_name=%s version=%s",
292-        app_name,
293-        cls._app_version,  # type: ignore[attr-defined]
294-    )

submitted.

AGENTS.md
CHANGELOG.md
CLAUDE.md
CODE_OF_CONDUCT.md
CONTRIBUTING.md
Dockerfile
LICENSE
NOTICE
README.md
SECURITY.md
application_sdk
components

contract-toolkit
docs
entrypoint.sh
examples
mkdocs.yml
pyproject.toml
requirements.txt
tests
tools
uv.lock
On branch master
nothing to commit, working tree clean
./.claude/skills/capability-manifest/references/extractor.py
./.git
./.github/scripts/check_allowlist.py
./.github/scripts/config_validator.py
./.github/scripts/extract_release_notes.py
./.github/scripts/parse_atlan_yaml.py
./.github/scripts/release.py
./.github/scripts/sdk_version_flags.py
./.github/scripts/security_scan_create_linear.py
./.github/scripts/tests/test_check_allowlist.py
./.github/scripts/tests/test_config_validator.py
./.github/scripts/tests/test_parse_atlan_yaml.py
./.github/scripts/tests/test_sdk_version_flags.py
./.github/scripts/tests/test_validate_atlan_yaml.py
./
…[2380 chars omitted]…
orage.py
./application_sdk/contracts/types.py
./application_sdk/contracts/__init__.py
./application_sdk/credentials/agent.py
./application_sdk/credentials/atlan.py
./application_sdk/credentials/atlan_client.py
./application_sdk/credentials/errors.py
./application_sdk/credentials/git.py
./application_sdk/credentials/oauth.py
./application_sdk/credentials/ref.py
./application_sdk/credentials/registry.py

application_sdk/execution
application_sdk/execution/decorators.py
application_sdk/execution/errors.py
application_sdk/execution/heartbeat.py
application_sdk/execution/retry.py
application_sdk/execution/sandbox.py
application_sdk/execution/settings.py
application_sdk/execution/shutdown.py
application_sdk/execution/_temporal
application_sdk/execution/_temporal/activities.py
application_sdk/execution/_temporal/activity_utils.py
application_sdk/execution/_temporal/auth.py

application_sdk/execution/_temporal/backend.py
application_sdk/execution/_temporal/converter.py
application_sdk/execution/_temporal/eviction_retry.py
application_sdk/execution/_temporal/interceptors
application_sdk/execution/_temporal/interceptors/events.py
application_sdk/execution/_temporal/interceptors/lock.py
application_sdk/execution/_temporal/interceptors/log.py
application_sdk/execution/_temporal/interceptors/metr
…[1355 chars omitted]…
ut_handler/json_handler.py
application_sdk/testing/scale_data_generator/output_handler/parquet_handler.py
application_sdk/testing/scale_data_generator/output_handler/__init__.py
===
application_sdk/execution:
__init__.py
_temporal
decorators.py
errors.py
heartbeat.py
retry.py
sandbox.py
settings.py
shutdown.py

application_sdk/handler:
__init__.py
base.py
context.py
contracts.py
manifest.py
service.py

"""FastAPI service for per-app handler operations.

This module provides the FastAPI application that serves handler
operations for a single app. Each app runs its own handler service.

Routes:
    POST /workflows/v1/auth - Test authentication
    POST /workflows/v1/check - Run preflight checks
    POST /workflows/v1/metadata - Fetch metadata
    POST /workflows/v1/start - Start workflow execution
    POST /workflows/v1/stop/{workflow_id}/{run_id:path} - Stop workflow
    GET  /workflows/v1/result/{workflow_id} - Get workflow result

    GET  /workflows/v1/status/{workflow_id}/{run_id:path} - Get workflow status
    GET  /workflows/v1/config/{config_id} - Get workflow config
    POST /workflows/v1/config/{config_id} - Update workflow config
    POST /workflows/v1/file - Upload file to object storage
    GET  /health - Health check (k8s liveness probe)
    GET  /server/ready - Readiness
…[7544 chars omitted]…
---------------------------------


@dataclasses.dataclass
class WorkflowClientConfig:
    """Configuration for the Temporal client used by the /start endpoint."""

    host: str = ""
    namespace: str = "default"
    task_queue: str = ""
    app_class: type[App] | None = dataclasses.field(default=None, repr=False)
    data_converter: DataConverter | None = dataclasses.field(default=None, repr=False)

data_converter: DataConverter | None = dataclasses.field(default=None, repr=False)

    # TLS
    tls_enabled: bool = False
    tls_server_root_ca_cert_path: str = ""
    tls_client_cert_path: str = ""
    tls_client_private_key_path: str = ""
    tls_domain: str = ""

    # Auth
    auth_enabled: bool = False
    auth_client_id: str = ""

    auth_client_secret: str = ""
    auth_token_url: str = ""
    auth_base_url: str = ""
    auth_scopes: str = ""

    def is_configured(self) -> bool:
        return bool(self.host and self.app_class)


_temporal_client: Client | None = None
_workflow_config: WorkflowClientConfig = WorkflowClientConfig()
_handler_auth_manager: Any | None = None
_secret_store: SecretStore | None = None
_storage: ObjectStore | None = None

# Directory where generated contract JSON files are stored
CONTRACT_GENERATED_DIR = Path(_CONTRACT_GENERATED_DIR)

# Allowli
…[8629 chars omitted]…
patible response: each check becomes a top-level
                # key in data so the frontend can iterate check names directly.
                # v2 format: {"authenticationCheck": {"success": true, "message": "..."}, ...}
                v2_data: dict[str, Any] = {}
                for check in result.checks:
                    # Convert check name to camelCase key (e.g. "AuthCheck" -> "authCheck")

auth_base_url: str = "",
    auth_scopes: str = "",
    secret_store: SecretStore | None = None,
    storage: ObjectStore | None = None,
    event_triggers: list[EventTriggerConfig] | None = None,
    subscriptions: list[SubscriptionConfig] | None = None,
    manifest: AppManifest | None = None,
    title: str = "Handler Service",
    description: str = "Per-app handler service for authentication, preflight, and metadata operations",
    version: str = "1.0.0",
    frontend_assets_path: str = "app/generated/frontend/static",
    # Deprecated: state_store is no longer used. Credential resolution now

    # goes through DaprCredentialVault exclusively. Passing this parameter
    # emits a DeprecationWarning. Will be removed in v3.2.0.
    state_store: Any = None,
) -> FastAPI:
    """Create a FastAPI app for a single handler.

    Args:
        handler: The Handler instance to serve.
…[7829 chars omitted]…
patible response: each check becomes a top-level
                # key in data so the frontend can iterate check names directly.
                # v2 format: {"authenticationCheck": {"success": true, "message": "..."}, ...}
                v2_data: dict[str, Any] = {}
                for check in result.checks:
                    # Convert check name to camelCase key (e.g. "AuthCheck" -> "authCheck")

# Convert check name to camelCase key (e.g. "AuthCheck" -> "authCheck")
                    key = check.name[0].lower() + check.name[1:]
                    v2_data[key] = {
                        "success": check.passed,
                        "message": check.message or "",
                    }
                return JSONResponse(
                    content=_wrap_response(
                        v2_data,
                        message=result.message
                        or f"Preflight check {result.status.value}",
                        success=result.status == PreflightStatus.READY,

                    )
                )
            except HandlerError as e:
                logger.error(
                    "Preflight check failed for app %s (request %s): %s",
                    app_name,
                    context.request_id_str,
                  
…[8628 chars omitted]…
 hit
1737:                import httpx  # noqa: PLC0415 — cold path: only when Temporal Rust-core proxy enabled
1739:                async with httpx.AsyncClient(
1743:                        f"http://{TEMPORAL_PROMETHEUS_BIND_ADDRESS}/metrics"
1750:                            f"Temporal core metrics proxy returned HTTP {resp.status_code}",
1755:                    "Temporal core metrics unavailable",

def create_app_handler_service(
    handler: Handler,
    *,
    app_name: str = "",
    app_class: type[App] | None = None,
    temporal_host: str = "",
    temporal_namespace: str = "default",
    task_queue: str = "",
    data_converter: DataConverter | None = None,
    tls_enabled: bool = False,
    tls_server_root_ca_cert_path: str = "",
    tls_client_cert_path: str = "",

    tls_client_private_key_path: str = "",
    tls_domain: str = "",
    auth_enabled: bool = False,
    auth_client_id: str = "",
    auth_client_secret: str = "",
    auth_token_url: str = "",
    auth_base_url: str = "",
    auth_scopes: str = "",
    secret_store: SecretStore | None = None,
    storage: ObjectStore | None = None,
    event_triggers: list[EventTriggerConfig] | None = None,
    subscriptions: list[SubscriptionConfig] | None = None,
    manifest: AppManifest | None = None,
    title: str = "
…[4117 chars omitted]…
ailable</h1></body></html>",
            status_code=404,
        )

    static_dir = Path(frontend_assets_path)
    if static_dir.is_dir():
        app.mount("/", StaticFiles(directory=str(static_dir)), name="static")
    else:
        logger.warning(
            "Static UI assets not found at %s, skipping static mount",
            static_dir,
        )

    return app


def run_app_handler_service(

def run_app_handler_service(
    handler: Handler,
    *,
    host: str = "0.0.0.0",
    port: int = 8000,
    log_level: str = "info",
    **kwargs: Any,
) -> None:
    """Create and run the handler service with uvicorn.

    Convenience wrapper around ``create_app_handler_service()`` that blocks
    until the server is stopped. All keyword arguments are forwarded to

    ``create_app_handler_service()``.

    Args:
        handler: The Handler instance to serve.
        host: Bind host (default: "0.0.0.0").
        port: Bind port (default: 8000).
        log_level: Uvicorn log level (default: "info").
        **kwargs: Additional keyword arguments forwarded to
            ``create_app_handler_service()``.
    """
    import uvicorn  # noqa: PLC0415 — cold path: uvicorn only when starting standalone server

    app = create_app_handler_service(handler, **kwargs)
    uvicorn.run(app, host=host, port=port, log_level=log_level)

application_sdk/constants.py:142:TEMPORAL_PROMETHEUS_BIND_ADDRESS = os.getenv(
application_sdk/constants.py:143:    "ATLAN_TEMPORAL_PROMETHEUS_BIND_ADDRESS", "127.0.0.1:9464"
application_sdk/execution/_temporal/backend.py:15:from application_sdk.constants import TEMPORAL_PROMETHEUS_BIND_ADDRESS
application_sdk/execution/_temporal/backend.py:45:                bind_addr = prometheus_bind_address or TEMPORAL_PROMETHEUS_BIND_ADDRESS
application_sdk/execution/_temporal/backend.py:282:async def create_temporal_client(
application_sdk/execution/_temporal/worker.py:88:            TEMPORAL_PROMETHEUS_BIND_ADDRESS,
application_sdk/execution/_temporal/worker.py:112:                    f"http://{TEMPORAL_PROMETHEUS_BIND_ADDRESS}/metrics"
application_sdk/execution/_temporal/worker.py:312:        client = await create_temporal_client("localhost:7233")
application_sdk/execution/__init__.py:11:from 
…[1336 chars omitted]…
tion_sdk/main.py:1196:    scripts; production containers use ``run_combined_mode()`` via CLI flags.
application_sdk/main.py:1267:    # Create infrastructure early so run_combined_mode uses it directly.

application_sdk/main.py:1355:    await run_combined_mode(config)
application_sdk/main.py:1379:        run_handler_mode(config)
application_sdk/main.py:1381:        asyncio.run(run_combined_mode(config))

def _wrapped_handler() -> None:
        mark_worker_shutting_down()
        handler()

    for sig in (signal.SIGINT, signal.SIGTERM):
        try:
            loop.add_signal_handler(sig, _wrapped_handler)
        except (NotImplementedError, OSError):
            # Platforms that don't support ``loop.add_signal_handler`` (e.g.
            # Windows) still need the worker-shutdown flag set so the
            # eviction-retry path attributes mid-activity ``CancelledError``
            # correctly. Drop in a plain ``signal.signal`` fallback that, at

            # minimum, flips the flag — graceful-shutdown event integration
            # is still unavailable in this branch but eviction detection
            # continues to work.
            try:
                signal.signal(sig, lambda *_: mark_worker_shutting_down())
            except (ValueError, OSError):
                pass  
…[8629 chars omitted]…
 can deadlock
            # with background gRPC threads from the Temporal SDK on Windows.
            # Uvicorn logs still flow through Python's root logger to our
            # structlog/loguru setup via the installed InterceptHandler.
            log_config=None,
        )
    )

    shutdown_event = asyncio.Event()

    def _signal_handler() -> None:
        logger.info("Shutdown signal received")

await auth_manager.shutdown()
        logger.info("Auth manager stopped")

    logger.info("Worker stopped")


def run_handler_mode(config: AppConfig) -> None:
    """Run in handler mode (HTTP FastAPI server).

    Loads the handler class (or DefaultHandler) and runs the FastAPI
    server via uvicorn. This is synchronous — uvicorn manages its own loop.
    """

    from application_sdk.execution._temporal.converter import (  # noqa: PLC0415 — cold path: only loaded in worker mode (execution backend)
        create_data_converter_for_app,
    )
    from application_sdk.handler import (  # noqa: PLC0415 — cold path: only loaded in handler mode
        DefaultHandler,
        run_app_handler_service,
    )
    from application_sdk.infrastructure.context import (  # noqa: PLC0415 — cold path: only when infrastructure init is needed
        set_infrastructure,
    )

    infra = as
…[3663 chars omitted]…
: PLC0415 — cold path: only when infrastructure init is needed
        get_infrastructure,
        set_infrastructure,
    )

    # Only create infrastructure if not already set (e.g., by run_dev_combined)
    _existing_infra = get_infrastructure()
    if _existing_infra is None:
        infra = await _create_infrastructure()
        set_infrastructure(infra)
    else:
        infra = _existing_infra

handler_host=getattr(args, "handler_host", None)
            or _env("ATLAN_HANDLER_HOST")
            or _env("ATLAN_APP_HTTP_HOST", "0.0.0.0"),
            handler_port=_handler_port_arg
            if (_handler_port_arg := getattr(args, "handler_port", None)) is not None
            else (
                _env_int("ATLAN_HANDLER_PORT", 0)
                or _env_int("ATLAN_APP_HTTP_PORT", 0)
                or 8000
            ),
            log_level=getattr(args, "log_level", None)
            or _env("ATLAN_LOG_LEVEL")

            or _env("LOG_LEVEL", "INFO"),
            health_port=_health_port_arg
            if (_health_port_arg := getattr(args, "health_port", None)) is not None
            else _env_int("ATLAN_HEALTH_PORT", 8081),
            service_name=service_name,
            # TLS
            tls_enabled=_env_bool("ATLAN_TEMPORAL_TLS_ENABLED"),
           
…[8629 chars omitted]…
erver_root_ca_cert=ca_cert_bytes)
            else:
                tls_config = True
        logger.info(
            "Connecting to Temporal with TLS: host=%s namespace=%s mtls=%s",
            host,
            namespace,
            bool(tls_client_cert_path),
        )
    else:
        logger.info(
            "Connecting to Temporal (plaintext): host=%s namespace=%s", host, namespace
        )

tests/unit/execution/test_backend.py:300:                enable_prometheus=True, prometheus_bind_address="0.0.0.0:9999"
tests/unit/execution/test_backend.py:303:                enable_prometheus=True, prometheus_bind_address="0.0.0.0:9999"
tests/unit/test_app_config.py:35:    def test_enable_temporal_core_metrics_default_true(self):
tests/unit/test_app_config.py:37:        assert config.enable_temporal_core_metrics is True
tests/unit/test_app_config.py:39:    def test_prometheus_bind_address_default(self):
tests/unit/test_app_config.py:43:        assert config.prometheus_bind_address == "127.0.0.1:9464"
tests/unit/test_app_config.py:61:        assert config.enable_temporal_core_metrics is False
tests/unit/test_app_config.py:63:    def test_prometheus_bind_address_from_env(self, monkeypatch: pytest.MonkeyPatch):
tests/unit/test_app_config.py:67:        assert config.prometheus_bind_add
…[2779 chars omitted]…
          "application_sdk.main.run_combined_mode",
tests/unit/test_main.py:1548:                "application_sdk.main.run_combined_mode",

tests/unit/test_main.py:1611:                "application_sdk.main.run_combined_mode",
tests/unit/test_main.py:1631:# run_combined_mode — auth path                                               #
tests/unit/test_main.py:1714:            await run_combined_mode(cfg)

with pytest.raises(RuntimeError, match="temporal down"):
            await run_worker_mode(cfg)


# --------------------------------------------------------------------------- #
# run_handler_mode                                                            #
# --------------------------------------------------------------------------- #


class TestRunHandlerMode:
    """Behavioral tests for run_handler_mode()."""

    def _common_patches(self, infra: MagicMock):
        return (
            patch(
                "application_sdk.main._create_infrastructure",
                new_callable=AsyncMock,
                return_value=infra,
            ),
            patch(
                "application_sdk.main.load_app_class",
                return_value=_fake_app_class(),
            ),
            patch(
                "application_sdk.execution._temporal.converter.create_data_c
…[8628 chars omitted]…
     with (
            patch(
                "application_sdk.infrastructure.context.get_infrastructure",
                return_value=existing,
            ),
            patch(
                "application_sdk.main._create_infrastructure",
                new_callable=AsyncMock,
            ) as no_create,
        ):
            await run_combined_mode(cfg)
        no_create.assert_not_awaited()

tests/integration/test_handler_service.py
tests/unit/handler
tests/unit/handler/test_service.py
tests/unit/tools/test_codemods/test_rewrite_handlers.py
tests/unit/execution/test_sdr.py:40:        self.preflight_input: PreflightInput | None = None
tests/unit/execution/test_sdr.py:49:    async def preflight_check(self, input: PreflightInput) -> PreflightOutput:
tests/unit/execution/test_sdr.py:50:        self.preflight_input = input
tests/unit/execution/test_sdr.py:68:        assert defn.name == "sdr:preflight_check"
tests/unit/execution/test_sdr.py:105:        # preflight + fetch_metadata: at most 2 attempts so retries never
tests/unit/execution/test_sdr.py:142:    async def test_preflight_activity_dispatches(self) -> None:
tests/unit/execution/test_sdr.py:148:        preflight = by_name[SDR_PREFLIGHT_ACTIVITY]
tests/unit/execution/test_sdr.py:151:        result = await preflight(input

…[8628 chars omitted]…
 name="preflight_invalid_credentials",
tests/integration/_example/scenarios.py:95:        api="preflight",
tests/integration/_example/scenarios.py:110:        description="Test preflight check with invalid credentials",
tests/integration/_example/scenarios.py:173:scenarios = auth_scenarios + preflight_scenarios + workflow_scenarios
tests/integration/_example/scenarios.py:178:    "preflight_scenarios",

"""Unit tests for the handler FastAPI service."""

from __future__ import annotations

import json
import warnings
from dataclasses import dataclass
from pathlib import Path
from unittest.mock import patch

import pytest
from fastapi.testclient import TestClient

from application_sdk.contracts.base import Input, Output
from application_sdk.handler.base import Handler, HandlerError
from application_sdk.handler.contracts import (
    ApiMetadataObject,
    ApiMetadataOutput,
    AuthInput,
    AuthOutput,
    AuthStatus,
    EventFilterRule,
    EventTriggerConfig,
    MetadataInput,
    MetadataOutput,
    PreflightInput,
    PreflightOutput,
    PreflightStatus,
    SqlMetadataObject,
    SqlMetadataOutput,
    SubscriptionConfig,
)
from application_sdk.handler.service import (
    _flatten_to_pairs,
    _normalize_credentials,
    _wrap_response,
    create_app_handler_service,
)

# 
…[8629 chars omitted]…
esult

        mock_handle = MagicMock()
        mock_handle.result = AsyncMock(return_value={"foo": "bar"})
        mock_client = MagicMock()
        mock_client.get_workflow_handle = MagicMock(return_value=mock_handle)

        result = await _get_workflow_result(
            mock_client, workflow_id="wf-1", output_type=None
        )
        assert result == {"foo": "bar"}

    @pytest.mark.asyncio

class _RoutingInput(Input, allow_unbounded_fields=True):  # type: ignore[call-arg]
    name: str = ""


class _RoutingOutput(Output, allow_unbounded_fields=True):  # type: ignore[call-arg]
    result: str = ""


# ---------------------------------------------------------------------------
# Helper: create test client
# ---------------------------------------------------------------------------

def _make_client(handler: Handler | None = None) -> TestClient:
    handler = handler or _TestHandler()
    app = create_app_handler_service(handler, app_name="test-app")
    return TestClient(app)


# ---------------------------------------------------------------------------
# Tests
# ---------------------------------------------------------------------------


class TestHealthEndpoints:
    """Tests for /health and /server/ready."""

    def test_health_endpoint_returns_200(self) -> None:
 
…[8629 chars omitted]…
p):
    """Handler service configured with MultiRouteApp for multi-EP routing tests."""
    from application_sdk.handler import service as svc
    from application_sdk.handler.service import create_app_handler_service

    reregister_app(MultiRouteApp)

    handler = DefaultHandler()
    app = create_app_handler_service(
        handler,
        app_name="multi-route",
        app_class=MultiRouteApp,

for status in AuthStatus:
            assert isinstance(
                status.http_status, int
            ), f"{status} missing from _AUTH_STATUS_HTTP_CODES"


class TestPreflightEndpoint:
    """Tests for POST /workflows/v1/check."""

    def test_preflight_success(self) -> None:
        client = _make_client()
        response = client.post(

            "/workflows/v1/check",
            json={"credentials": []},
        )
        assert response.status_code == 200
        body = response.json()
        assert body["success"] is True
        # v2 format: data is a dict of check results keyed by camelCase name.
        # _TestHandler returns no checks, so data is empty.
        assert body["data"] == {}
        assert body["message"] == "ready"

    def test_preflight_handler_error_returns_500(self) -> None:
        client = _make_client(handler=_FailingHandler())
        
…[7727 chars omitted]…
nds to wait for metadata fetch."""
385-
386-
387-class MetadataOutput(BaseModel):
388-    """Base output from the fetch_metadata handler operation.
389-
390-    Do not instantiate directly — use ``SqlMetadataOutput`` or
391-    ``ApiMetadataOutput`` instead.  This base class exists so the
392-    handler return type (``MetadataOutput``) covers both subtypes
393-    via ``isinstance``.
394-    """
395-

8a6ea13 base
application_sdk/handler/service.py:25:    app = create_app_handler_service(handler, app_name="my-app")
application_sdk/handler/service.py:382:def create_app_handler_service(
application_sdk/handler/service.py:1800:    Convenience wrapper around ``create_app_handler_service()`` that blocks
application_sdk/handler/service.py:1802:    ``create_app_handler_service()``.
application_sdk/handler/service.py:1810:            ``create_app_handler_service()``.
application_sdk/handler/service.py:1814:    app = create_app_handler_service(handler, **kwargs)
application_sdk/main.py:1099:    fastapi_app = create_app_handler_service(
CHANGELOG.md:428:- **Handler framework** (`application_sdk.handler`): Typed `Handler` ABC with `test_auth`, `preflight_check`, `fetch_metadata`. Response contract types (`AuthStatus`, `PreflightStatus`, `ApiMetadataOutput`, `SqlMetadataOutput`) are exported f
…[4835 chars omitted]…
3402:            create_app_handler_service(
tests/unit/handler/test_service.py:3416:            create_app_handler_service(_TestHandler(), app_name="no-dep")

tests/unit/handler/test_service.py:3442:        app = create_app_handler_service(
tests/unit/handler/test_service.py:3459:        app = create_app_handler_service(
tests/unit/handler/test_service.py:3487:        app = create_app_handler_service(

900:            mock_logger.warning.assert_called_once_with(

96:class AppConfig:
97-    """Runtime configuration for app execution.
98-
99-    ``AppConfig`` is the **authoritative runtime config** passed through the call
100-    chain to workers, handlers, and the Temporal client. It is constructed after
101-    CLI argument parsing (``from_args_and_env``) or directly in dev scripts
102-    (``run_dev_combined``).
103-
104-    **Relationship with constants.py:**
105-    Some values also exist as module-level constants (e.g. ``LOG_LEVEL``).
106-    Those constants serve code that runs at **import time** (observability
107-    init, logging.basicConfig) — before AppConfig exists. Both AppConfig and

108-    constants.py read the **same env vars with the same defaults** so they
109-    stay in sync.
110-
111-    **Construction paths:**
112-    - Production: ``main()`` → ``AppConfig.from_args_and_env(args)``
113-    - Dev (CLI): ``atlan app run`` → 
…[4956 chars omitted]…
orkflow_host
237-            else ""
238-        )
239-
240-        # Task queue: prefer ATLAN_APPLICATION_NAME+ATLAN_DEPLOYMENT_NAME (matches v2
241-        # TemporalWorkflowClient.get_worker_task_queue()), fall back to class-name derivation.
242-        _default_task_queue = _derive_task_queue(app_module)
243-
244-        return cls(
245-            mode=mode,
246-            app_module=app_module,

428:- **Handler framework** (`application_sdk.handler`): Typed `Handler` ABC with `test_auth`, `preflight_check`, `fetch_metadata`. Response contract types (`AuthStatus`, `PreflightStatus`, `ApiMetadataOutput`, `SqlMetadataOutput`) are exported from `application_sdk.handler`. `create_app_handler_service()` FastAPI factory replaces the untyped `HandlerInterface` + `APIServer` pattern.
778:- add temporal prometheus metrics (#1078) (by @anbarasantr in [6dbf1dd](https://github.com/atlanhq/application-sdk/commit/6dbf1dd))
808:- Standardized preflight check response format to use per-check success fields with consolidated error messages in failureMessage, removing top-level error field (#1052) (by @chaitanyaatlan in [d2bd860](https://github.com/atlanhq/application-sdk/commit/d2bd860))
1080:- resolve race condition in preflight_check activity (#751) (by @inishchith in [d24fe41](https://githu
…[316 chars omitted]…
enable_temporal_core_metrics=_env_bool(
application_sdk/main.py:594:    * ``enable_temporal_core_metrics`` defaults to ``False`` to avoid the
application_sdk/main.py:623:        config.enable_temporal_core_metrics = False
application_sdk/main.py:806:        enable_prometheus=config.enable_temporal_core_metrics,
application_sdk/main.py:1061:        enable_prometheus=config.enable_temporal_core_metrics,

- file upload/download support via FastAPI bindings | PART-255 (#1046) (by @prateek11rai in [326962d](https://github.com/atlanhq/application-sdk/commit/326962d))


## v2.4.0 (February 17, 2026)

Full Changelog: https://github.com/atlanhq/application-sdk/compare/v2.3.3...v2.4.0

### Features

- add root_path parameter to APIServer.start() for reverse proxy support (#1058) (by @rashi-j in [edc99bc](https://github.com/atlanhq/application-sdk/commit/edc99bc))
- add /review skill for structured Claude PR reviews (#1059) (by @fyzanshaik-atlan in [65e3903](https://github.com/atlanhq/application-sdk/commit/65e3903))

### Bug Fixes

- restore pandas extra compatibility (#1037) (by @fyzanshaik-atlan in [8425922](https://github.com/atlanhq/application-sdk/commit/8425922))
- use --append-system-prompt for Claude review skill routing (#1060) (by @fyzanshaik-atlan in [f59f0f4](https://github.com/a
…[676 chars omitted]…
a access).
docs/reference/http-api.md:61:Delegates to `Handler.preflight_check(PreflightInput)`.
docs/concepts/server.md:18:- Routes for `test_auth`, `preflight_check`, and `fetch_metadata` derived from your `Handler` subclass
docs/concepts/server.md:40:| `preflight_check()` | `/workflows/v1/check` | POST |
docs/concepts/server.md:52:| `/workflows/v1/check` | POST | Run preflight connectivity checks |

timeout: failed to run command ‘curl’: No such file or directory

<class 'urllib.error.URLError'> <urlopen error [Errno -3] Temporary failure in name resolution>

done handler

done main
    return body


if TYPE_CHECKING:
    from obstore.store import ObjectStore
    from temporalio.client import Client
    from temporalio.converter import DataConverter

    from application_sdk.app.base import App
    from application_sdk.infrastructure.secrets import SecretStore

# ---------------------------------------------------------------------------
# Helpers
# ---------------------------------------------------------------------------


def _wrap_response(
    data: dict[str, Any] | list[Any],
    *,
    message: str = "",
        )

        auth_config = TemporalAuthConfig(
            client_id=_workflow_config.auth_client_id,
            client_secret=_workflow_config.auth_client_secret,
            token_url=_workflow_config.auth_token_url,
            base_url=_workflow_config.auth_base_url,
            scopes=_workflow_config.auth_scopes,
        )
        
…[5107 chars omitted]…
ore metrics proxy request failed: HTTP {resp.status_code}",
                        )
            except Exception as exc:
                _record_proxy_failure(
                    type(exc).__name__,
                    "Temporal core metrics proxy request failed",
                )

        return Response(
            content=body,
            media_type="text/plain; version=0.0.4; charset=utf-8",

................F
=================================== FAILURES ===================================
_________________ TestPreflightEndpoint.test_preflight_success _________________

self = <tests.unit.handler.test_service.TestPreflightEndpoint object at 0x72d4fc65b7d0>

    def test_preflight_success(self) -> None:
        client = _make_client()
        response = client.post(
            "/workflows/v1/check",
            json={"credentials": []},
        )

        assert response.status_code == 200
        body = response.json()
>       assert body["success"] is True
E       assert False is True

tests/unit/handler/test_service.py:357: AssertionError
----------------------------- Captured stdout call -----------------------------
2026-11-02 01:04:08 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
2026-11-
…[627 chars omitted]…
od=POST path=/workflows/v1/check status_code=200 duration_ms=1.88 request_id=19dfe4ff-6046-457f-bc4f-d10410d90b50
=========================== short test summary info ============================
FAILED tests/unit/handler/test_service.py::TestPreflightEndpoint::test_preflight_success
!!!!!!!!!!!!!!!!!!!!!!!!!! stopping after 1 failures !!!!!!!!!!!!!!!!!!!!!!!!!!!
1 failed, 16 passed, 1 warning in 2.03s

................F....................................................... [ 24%]
........................................................................ [ 48%]
........................................................................ [ 73%]
........................................................................ [ 97%]
.......                                                                  [100%]/usr/local/lib/python3.12/site-packages/_pytest/unraisableexception.py:33: RuntimeWarning: coroutine '_flush_observability' was never awaited
  gc.collect()
RuntimeWarning: Enable tracemalloc to get the object allocation traceback

=================================== FAILURES ===================================
_________________ TestPreflightEndpoint.test_preflight_success _________________

self = <tests.unit.handler.test_service.TestPreflightEndpoint object at 0x7d04e1d8f260>

    def test_p
…[1162 chars omitted]…
1:04:13 [INFO] application_sdk.server.middleware.log - Request completed: method=POST path=/workflows/v1/check status_code=200 duration_ms=1.83 request_id=2a5f9713-c371-4b2b-b23c-78545d097890
=========================== short test summary info ============================
FAILED tests/unit/handler/test_service.py::TestPreflightEndpoint::test_preflight_success
1 failed, 294 passed, 15 warnings in 4.23s

2026-11-02 01:04:33 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
disabled 200 True 0
2026-11-02 01:04:33 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
failure 200 True 1 call('Temporal core metrics proxy request failed', exc_info=True) 0
2026-11-02 01:04:33 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
2026-11-02 01:04:33 [INFO] application_sdk.server.middleware.log - Request started: method=POST path=/workflows/v1/check request_id=146c927d-7af4-4409-8a44-ccad74da1ed8 url=http://testserver/workflows/v1/check client_host=testclient
2026-11-02 01:04:33 [INFO] application_sdk.handler.service - Preflight check started: app= request=2a633a12-7802-472
…[1749 chars omitted]…
l for workflow execution host=h namespace=default tls=False auth=False
2026-11-02 01:04:33 [INFO] application_sdk.handler.service - Connected to Temporal
client {'data_converter': None, 'api_key': None, 'tls_enabled': False, 'tls_server_root_ca_cert_path': '', 'tls_client_cert_path': '', 'tls_client_private_key_path': '', 'tls_domain': '', 'enable_prometheus': False, 'prometheus_bind_address': 'addr'}

/usr/local/bin/python: No module named ruff
/usr/local/bin/python: No module named ruff

ok
 application_sdk/handler/service.py | 34 +++++++++++++++++++++++++++-------
 application_sdk/main.py            |  4 ++++
 2 files changed, 31 insertions(+), 7 deletions(-)
diff --git a/application_sdk/main.py b/application_sdk/main.py
index 4651c00..0da6dba 100644
--- a/application_sdk/main.py
+++ b/application_sdk/main.py
@@ -956,6 +956,8 @@ def run_handler_mode(config: AppConfig) -> None:
         secret_store=infra.secret_store,
         storage=infra.storage,
         frontend_assets_path=config.frontend_assets_path,

+        enable_temporal_core_metrics=False,
+        prometheus_bind_address=config.prometheus_bind_address,
     )
 
     from application_sdk.infrastructure.context import (  # noqa: PLC0415 — cold path: only when infrastructure init is needed
@@ -1118,6 +1120,8 @@ async def run_combined_mode(config: AppConfig) -> None:
         secret_store=infra.secret_store,
         storage=infra.storage,
         frontend_assets_path=config.frontend_assets_path,
+        enable_temporal_core_metrics=True,
+        prometheus_bind_address=config.prometheus_bind_address,
     )
 
     uvicorn_server = uvicorn.Server(

diff --git a/application_sdk/handler/service.py b/application_sdk/handler/service.py
index b3b34ff..e45eb38 100644
--- a/application_sdk/handler/service.py
+++ b/application_sdk/handler/service.py
@@ -259,6 +259,10 @@ class WorkflowClientConfig:
     app_class: type[App] | None = dataclasses.field(default=None, repr=False)
     data_converter: DataConverter | None = dataclasses.field(default=None, repr=False)
 
+    # Temporal runtime metrics
+    enable_temporal_core_metrics: bool = True
+    prometheus_bind_address: str = ""
+

     # TLS
     tls_enabled: bool = False
     tls_server_root_ca_cert_path: str = ""
@@ -364,6 +368,8 @@ async def _get_temporal_client() -> Client:
         tls_client_cert_path=_workflow_config.tls_client_cert_path,
         tls_client_private_key_path=_workflow_config.tls_client_private_key_path,
         tls_domain=_workflow_config.tls_domain,
+        en
…[4553 chars omitted]…
               f"Temporal core metrics proxy request failed: HTTP {resp.status_code}",
                         )
             except Exception as exc:
                 _record_proxy_failure(
                     type(exc).__name__,
-                    "Temporal core metrics unavailable",
+                    "Temporal core metrics proxy request failed",
                 )
 
         return Response(

pyproject.toml:30:    "httpx-retries>=0.4.0,<0.5.0",
pyproject.toml:37:    # Temporal runtime (httpx-retries at L29 is the Dapr HTTP client replacement)
pyproject.toml:97:    "httpx>=0.27.0,<0.29.0",
requirements.txt:18:    #   httpx
requirements.txt:33:    #   httpx
requirements.txt:95:    # via httpx
requirements.txt:98:httpx==0.28.1
requirements.txt:102:    #   httpx-retries
requirements.txt:104:httpx-retries==0.4.6
requirements.txt:115:    #   httpx

tests/integration/test_handler_service.py:147:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:156:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:224:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:252:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:298:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:400:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:471:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:534:        httpx.AsyncClient(
tests/integration/test_handler_service.py:581:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:646:    async with httpx.AsyncClient(
tests/integration/test_handler_service.py:744:    async with httpx.AsyncClient(
tests/unit/clients/test_

…[3855 chars omitted]…
yncMock(return_value=mock_response)),
tests/unit/testing/e2e/test_portforward.py:118:            "httpx.AsyncClient.request",
tests/unit/test_main.py:1519:        # Build a fake httpx.AsyncClient that records calls
tests/unit/test_main.py:1552:            patch("httpx.AsyncClient", return_value=fake_client),
tests/unit/test_main.py:1615:            patch("httpx.AsyncClient", return_value=fake_client),

result = await _log_dapr_components(dapr_client, tmp_path)
        assert result == {"my-store"}
        # The "with safe_meta" code path produces an INFO call whose format
        # string contains a 4th positional placeholder for the detail string.
        info_calls = [c for c in mock_log.info.call_args_list]
        # At least one info should reference the bucket value
        assert any("bucket=my-bucket" in str(c) for c in info_calls)


# --------------------------------------------------------------------------- #
# run_dev_combined — _provision_and_start inner-function                      #
# --------------------------------------------------------------------------- #

class TestRunDevCombinedProvisioning:
    """Exercise the inner _provision_and_start coroutine in the credentials path."""

    async def test_provision_and_start_posts_creds_and_workflow(
       
…[4452 chars omitted]…
ble=AsyncMock),
            patch("application_sdk.main.logger"),
        ):
            await run_dev_combined(
                _fake_app_class(),
                credentials={"host": "h"},
            )
            assert len(captured) == 1
            await captured[0]

        assert fake_client.post.await_count == 2


# --------------------------------------------------------------------------- #

application_sdk/clients/base.py:3:import httpx
application_sdk/credentials/oauth.py:146:        import httpx  # deferred: matches existing lazy-import pattern for optional heavy deps  # noqa: PLC0415 — circular: credentials/__init__.py loads sibling modules

ok
........................................................................ [ 60%]
...............................................                          [100%]
119 passed, 10 warnings in 1.62s

2026-11-02 01:05:19 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
200 0
2026-11-02 01:05:19 [WARNING] application_sdk.handler.service - Static UI assets not found at app/generated/frontend/static, skipping static mount
200 1 call('Temporal core metrics proxy request failed', exc_info=True) 0
 application_sdk/handler/service.py | 37 ++++++++++++++++++++++++++++---------
 application_sdk/main.py            |  4 ++++
 2 files changed, 32 insertions(+), 9 deletions(-)

1 deselected in 1.65s

.                                                                        [100%]
1 passed in 1.90s

M application_sdk/handler/service.py
 M application_sdk/main.py

submitted.