fix: pin a2a-sdk<1.0 to keep a2a.server.apps import working

a2a-sdk 1.0.0 restructured the package and removed a2a.server.apps,
which main.py imports directly for A2AStarletteApplication. The
current >=0.3.25 constraint resolves to 1.0.0 on fresh installs and
the runtime crashes at startup with ModuleNotFoundError — which is
exactly what bit production workspace EC2 instances provisioned on
2026-04-20.

Bump to 0.1.3 and pin <1.0 until we're ready to migrate to the 1.x
import paths. Companion fix in molecule-controlplane PR #174 pins at
pip-install time; this PR fixes the upstream package so other callers
don't re-hit the same trap.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Hongming Wang 2026-04-20 15:34:27 -07:00
parent 2391952eae
commit 90a1bdbbf4

View File

@ -4,14 +4,16 @@ build-backend = "setuptools.build_meta"
[project]
name = "molecule-ai-workspace-runtime"
version = "0.1.2"
version = "0.1.3"
description = "Molecule AI workspace runtime — shared infrastructure for all agent adapters"
requires-python = ">=3.11"
license = {text = "BSL-1.1"}
readme = "README.md"
# Don't pin heavy deps — each adapter adds its own
dependencies = [
"a2a-sdk[http-server]>=0.3.25",
# Upper bound: a2a-sdk 1.0.0 dropped the a2a.server.apps module we import
# in main.py. Keep on the 0.3.x line until we migrate to the 1.x API.
"a2a-sdk[http-server]>=0.3.25,<1.0",
"httpx>=0.27.0",
"uvicorn>=0.30.0",
"starlette>=0.38.0",