Merge branch 'main' into users/johanb/Skill

Author: pontemonti

.github/CODEOWNERS

@@ -2,4 +2,7 @@
 * @microsoft/agent365-approvers
 /.github/ @microsoft/agent365-approvers
 /libraries/microsoft-agents-a365-observability-*/ @microsoft/agent365-observability-approvers
-/tests/observability/ @microsoft/agent365-observability-approvers
+/tests/observability/ @microsoft/agent365-observability-approvers
+/libraries/microsoft-agents-a365-notifications/ @microsoft/agent365-tooling-approvers
+/libraries/microsoft-agents-a365-tooling*/ @microsoft/agent365-tooling-approvers
+/tests/tooling/ @microsoft/agent365-tooling-approvers

.github/workflows/ci.yml

@@ -105,11 +105,13 @@ jobs:
 
     - name: Install the project
       run: uv lock && uv sync --locked --all-extras --dev
-    
+
+    - name: Verify centralized version constraints
+      run: python scripts/verify_constraints.py
+
     - name: Check linting
       run: |
-        uv run --frozen ruff check .
-      continue-on-error: true
+        uv run --frozen ruff check . --preview
 
     - name: Check formatting
       run: |

CLAUDE.md

@@ -136,6 +136,34 @@ libraries/
    - MCP (Model Context Protocol) integration
    - Framework-specific adapters for tool execution
 
+### Centralized Dependency Version Management
+
+This monorepo uses uv's `constraint-dependencies` feature to centralize version constraints:
+
+**How it works:**
+1. **Root pyproject.toml** defines version constraints for all external packages
+2. **Package pyproject.toml** files declare dependencies by name only (no version)
+3. **uv** applies root constraints during dependency resolution
+
+**Adding a new dependency:**
+1. Add the package name to your package's `dependencies` array
+2. Add the version constraint to root `pyproject.toml` `constraint-dependencies`
+3. Run `uv lock && uv sync`
+
+**Updating a dependency version:**
+1. Edit the constraint in root `pyproject.toml` only
+2. Run `uv lock && uv sync`
+3. All packages automatically use the new version
+
+**Internal workspace dependencies:**
+- Package pyproject.toml files list internal deps by name only (e.g., `microsoft-agents-a365-runtime`)
+- Root pyproject.toml `[tool.uv.sources]` maps them to `{ workspace = true }` for local development
+- At build time, `setup.py` injects exact version matches (e.g., `== 1.2.3`) for published packages
+- This ensures all SDK packages require the exact same version of each other
+
+**CI Enforcement:** The `scripts/verify_constraints.py` script runs in CI to prevent
+accidental reintroduction of version constraints in package files.
+
 ### Test Organization
 
 Tests mirror the library structure:
@@ -168,11 +196,45 @@ Place it before imports with one blank line after.
 
 ### Python Conventions
 
-- Type hints preferred (Pydantic models heavily used)
+- Type hints required on all function parameters and return types
 - Async/await patterns for I/O operations
 - Use explicit `None` checks: `if x is not None:` not `if x:`
 - Local imports should be moved to top of file
 - Return defensive copies of mutable data to protect singletons
+- **Async method naming**: Do NOT use `_async` suffix on async methods. The `_async` suffix is only appropriate when providing both sync and async versions of the same method. Since this SDK is async-only, use plain method names (e.g., `send_chat_history_messages` not `send_chat_history_messages_async`)
+
+### Type Hints - NEVER Use `Any`
+
+**CRITICAL: Never use `typing.Any` in this codebase.** Using `Any` defeats the purpose of type checking and can hide bugs. Instead:
+
+1. **Use actual types from external SDKs** - When integrating with external libraries (OpenAI, LangChain, etc.), import and use their actual types:
+   ```python
+   from agents.memory import Session
+   from agents.items import TResponseInputItem
+
+   async def send_chat_history(self, session: Session) -> OperationResult:
+       ...
+   ```
+
+2. **Use `Union` for known possible types**:
+   ```python
+   from typing import Union
+   MessageType = Union[UserMessage, AssistantMessage, SystemMessage, Dict[str, object]]
+   ```
+
+3. **Use `object` for truly unknown types** that you only pass through:
+   ```python
+   def log_item(item: object) -> None: ...
+   ```
+
+4. **Use `Protocol` only as a last resort** - If external types cannot be found or imported, define a Protocol. However, **confirm with the developer first** before proceeding with this approach, as it may indicate a missing dependency or incorrect understanding of the external API.
+
+**Why this matters:**
+- `Any` disables all type checking for that variable
+- Bugs that type checkers would catch go unnoticed
+- Code readability suffers - developers don't know what types to expect
+- Using actual SDK types provides better IDE support and ensures compatibility
+- This applies to both production code AND test files
 
 ## CI/CD
 

README.md

@@ -2,7 +2,8 @@
 
 [![PyPI](https://img.shields.io/pypi/v/microsoft-agents-a365-observability-core?label=PyPI&logo=pypi)](https://pypi.org/search/?q=microsoft-agents-a365)
 [![PyPI Downloads](https://img.shields.io/pypi/dm/microsoft-agents-a365-observability-core?label=Downloads&logo=pypi)](https://pypi.org/search/?q=microsoft-agents-a365)
-[![Build Status](https://img.shields.io/github/actions/workflow/status/microsoft/Agent365-python/.github/workflows/ci.yml?branch=main&label=Build&logo=github)](https://github.com/microsoft/Agent365-python/actions)
+[![CI - Build, Test, and Publish SDKs](https://github.com/microsoft/Agent365-python/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/microsoft/Agent365-python/actions/workflows/ci.yml)
+[![CodeQL](https://github.com/microsoft/Agent365-python/actions/workflows/github-code-scanning/codeql/badge.svg?branch=main)](https://github.com/microsoft/Agent365-python/actions/workflows/github-code-scanning/codeql)
 [![License](https://img.shields.io/github/license/microsoft/Agent365-python?label=License)](LICENSE.md)
 [![Python Version](https://img.shields.io/badge/Python-3.10%2B-3776AB?logo=python)](https://www.python.org/)
 [![Contributors](https://img.shields.io/github/contributors/microsoft/Agent365-python?label=Contributors&logo=github)](https://github.com/microsoft/Agent365-python/graphs/contributors)

docs/design.md

@@ -227,9 +227,51 @@ Framework-specific adapters for MCP tool integration:
 |---------|---------|------------|
 | `extensions-agentframework` | Adapt MCP tools to Microsoft Agents SDK | [design.md](../libraries/microsoft-agents-a365-tooling-extensions-agentframework/docs/design.md) |
 | `extensions-azureaifoundry` | Azure AI Foundry tool integration | [design.md](../libraries/microsoft-agents-a365-tooling-extensions-azureaifoundry/docs/design.md) |
-| `extensions-openai` | OpenAI function calling integration | [design.md](../libraries/microsoft-agents-a365-tooling-extensions-openai/docs/design.md) |
+| `extensions-openai` | OpenAI function calling integration and chat history | [design.md](../libraries/microsoft-agents-a365-tooling-extensions-openai/docs/design.md) |
 | `extensions-semantickernel` | Semantic Kernel plugin integration | [design.md](../libraries/microsoft-agents-a365-tooling-extensions-semantickernel/docs/design.md) |
 
+#### OpenAI Extension: Chat History API
+
+The OpenAI tooling extension provides methods to send chat history to the MCP platform for real-time threat protection:
+
+**Key Classes:**
+
+| Class | Purpose |
+|-------|---------|
+| `McpToolRegistrationService` | MCP tool registration and chat history management |
+
+**Methods:**
+
+| Method | Purpose |
+|--------|---------|
+| `send_chat_history(turn_context, session, limit, options)` | Extract messages from OpenAI Session and send to MCP platform |
+| `send_chat_history_messages(turn_context, messages, options)` | Send a list of OpenAI TResponseInputItem messages to MCP platform |
+
+**Usage Example:**
+
+```python
+from agents import Agent, Runner
+from microsoft_agents_a365.tooling.extensions.openai import McpToolRegistrationService
+
+service = McpToolRegistrationService()
+agent = Agent(name="my-agent", model="gpt-4")
+
+# In your agent handler:
+async with Runner.run(agent, messages) as result:
+    session = result.session
+
+    # Option 1: Send from Session object
+    op_result = await service.send_chat_history(turn_context, session)
+
+    # Option 2: Send from message list
+    op_result = await service.send_chat_history_messages(turn_context, messages)
+
+    if op_result.succeeded:
+        print("Chat history sent successfully")
+```
+
+The methods convert OpenAI message types to `ChatHistoryMessage` format and delegate to the core `McpToolServerConfigurationService.send_chat_history()` method.
+
 ### 6. Notifications (`microsoft-agents-a365-notifications`)
 
 > **Detailed documentation**: [libraries/microsoft-agents-a365-notifications/docs/design.md](../libraries/microsoft-agents-a365-notifications/docs/design.md)