Scope durable task IDs by hosted session GUID (#48776)

* Scope durable task IDs by session GUID

Read FOUNDRY_AGENT_SESSION_GUID in hosted configuration and use it as the private durable task namespace while preserving public conversation chain identity.

Reuse active pre-rollout multi-turn tasks through a legacy-ID lookup and keep one-shot task IDs unchanged.

Authored-by: GitHub Copilot CLI v1.0.81-9

Model: GPT-5.6 Sol (gpt-5.6-sol)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 6d678f27-b33c-41af-b188-c852375a8762

* fix(agentserver): address session GUID review feedback

Regenerate the Core API snapshot for AgentConfig.session_guid and require Core 2.2.0b1 from the Responses package so the configuration and legacy lookup APIs are always available.

Authored-by: GitHub Copilot CLI v1.0.81-9

Model: GPT-5.6 Sol (gpt-5.6-sol)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 6d678f27-b33c-41af-b188-c852375a8762

---------

Co-authored-by: Naman Tyagi <namantyagi@microsoft.com>
Copilot-Session: 6d678f27-b33c-41af-b188-c852375a8762

Author: Nathandrake229

sdk/agentserver/azure-ai-agentserver-core/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Release History
 
+## 2.2.0b1 (Unreleased)
+
+### Features Added
+
+- Added `AgentConfig.session_guid`, populated from the platform-owned
+  `FOUNDRY_AGENT_SESSION_GUID` environment variable for hosted session
+  incarnation identity.
+
 ## 2.1.0 (2026-08-24)
 
 ### Other Changes

sdk/agentserver/azure-ai-agentserver-core/api.md

@@ -79,6 +79,7 @@ namespace azure.ai.agentserver.core
                 port: int, 
                 project_endpoint: str, 
                 project_id: str, 
+                session_guid: str = "", 
                 session_id: str, 
                 sse_keepalive_interval: int, 
                 ws_ping_interval: float = 0.0

sdk/agentserver/azure-ai-agentserver-core/api.metadata.yml

@@ -1,3 +1,3 @@
-apiMdSha256: 018ddfb374222289f131e8655f9b4ab52192a16833c1001b42d0560731c1f14b
+apiMdSha256: 70c2b15bd26a79923051b648f558b9e6197363e508ee01f33d7f85eeb0298dc2
 parserVersion: 0.3.31
-pythonVersion: 3.12.13
+pythonVersion: 3.12.10

sdk/agentserver/azure-ai-agentserver-core/azure/ai/agentserver/core/_config.py

@@ -14,6 +14,7 @@
 misconfiguration is surfaced at startup rather than silently masked.
 """
 import os
+import re
 from pathlib import Path
 from typing import Optional
 
@@ -33,6 +34,7 @@
 _ENV_FOUNDRY_PROJECT_ENDPOINT = "FOUNDRY_PROJECT_ENDPOINT"
 _ENV_FOUNDRY_PROJECT_ARM_ID = "FOUNDRY_PROJECT_ARM_ID"
 _ENV_FOUNDRY_AGENT_SESSION_ID = "FOUNDRY_AGENT_SESSION_ID"
+_ENV_FOUNDRY_AGENT_SESSION_GUID = "FOUNDRY_AGENT_SESSION_GUID"
 _ENV_PORT = "PORT"
 _ENV_APPLICATIONINSIGHTS_CONNECTION_STRING = "APPLICATIONINSIGHTS_CONNECTION_STRING"
 _ENV_OTEL_EXPORTER_OTLP_ENDPOINT = "OTEL_EXPORTER_OTLP_ENDPOINT"
@@ -68,6 +70,8 @@ class AgentConfig:  # pylint: disable=too-many-instance-attributes
     :param project_endpoint: Foundry project endpoint from ``FOUNDRY_PROJECT_ENDPOINT``.
     :param project_id: Foundry project ARM resource ID from ``FOUNDRY_PROJECT_ARM_ID``.
     :param session_id: Default session ID from ``FOUNDRY_AGENT_SESSION_ID``.
+    :param session_guid: System-generated session incarnation GUID from
+        ``FOUNDRY_AGENT_SESSION_GUID``.
     :param port: Server port from ``PORT`` (default 8088).
     :param appinsights_connection_string: Application Insights connection string.
     :param otlp_endpoint: OTLP exporter endpoint.
@@ -92,6 +96,7 @@ def __init__(
         otlp_endpoint: str,
         sse_keepalive_interval: int,
         ws_ping_interval: float = 0.0,
+        session_guid: str = "",
     ) -> None:
         self.agent_name = agent_name
         self.agent_version = agent_version
@@ -101,6 +106,7 @@ def __init__(
         self.project_endpoint = project_endpoint
         self.project_id = project_id
         self.session_id = session_id
+        self.session_guid = session_guid
         self.port = port
         self.appinsights_connection_string = appinsights_connection_string
         self.otlp_endpoint = otlp_endpoint
@@ -124,15 +130,23 @@ def from_env(cls) -> Self:
         else:
             agent_id = ""
 
+        is_hosted = bool(os.environ.get(_ENV_FOUNDRY_HOSTING_ENVIRONMENT, ""))
+        session_guid = os.environ.get(_ENV_FOUNDRY_AGENT_SESSION_GUID, "")
+        if is_hosted and session_guid and re.fullmatch(r"[0-9a-f]{32}", session_guid) is None:
+            raise ValueError(
+                "FOUNDRY_AGENT_SESSION_GUID must be a 32-character lowercase hexadecimal GUID"
+            )
+
         return cls(
             agent_name=agent_name,
             agent_version=agent_version,
             agent_id=agent_id,
             agent_guid=os.environ.get(_ENV_FOUNDRY_AGENT_ID, ""),
-            is_hosted=bool(os.environ.get(_ENV_FOUNDRY_HOSTING_ENVIRONMENT, "")),
+            is_hosted=is_hosted,
             project_endpoint=os.environ.get(_ENV_FOUNDRY_PROJECT_ENDPOINT, ""),
             project_id=os.environ.get(_ENV_FOUNDRY_PROJECT_ARM_ID, ""),
             session_id=os.environ.get(_ENV_FOUNDRY_AGENT_SESSION_ID, ""),
+            session_guid=session_guid,
             port=resolve_port(None),
             appinsights_connection_string=os.environ.get(
                 _ENV_APPLICATIONINSIGHTS_CONNECTION_STRING, ""),

sdk/agentserver/azure-ai-agentserver-core/azure/ai/agentserver/core/_constants.py

@@ -30,3 +30,4 @@ class Constants:
 
     # Session identity
     FOUNDRY_AGENT_SESSION_ID = "FOUNDRY_AGENT_SESSION_ID"
+    FOUNDRY_AGENT_SESSION_GUID = "FOUNDRY_AGENT_SESSION_GUID"

sdk/agentserver/azure-ai-agentserver-core/azure/ai/agentserver/core/_version.py

@@ -2,4 +2,4 @@
 # Copyright (c) Microsoft Corporation. All rights reserved.
 # ---------------------------------------------------------
 
-VERSION = "2.1.0"
+VERSION = "2.2.0b1"

sdk/agentserver/azure-ai-agentserver-core/azure/ai/agentserver/core/tasks/_decorator.py

@@ -1701,6 +1701,16 @@ async def get_active_run(
             return None
         return run
 
+    async def _get(self, task_id: str) -> Any:
+        """Return the persisted chain record for internal orchestration.
+
+        :param task_id: The chain task identifier.
+        :type task_id: str
+        :return: The persisted task information, or ``None`` when absent.
+        :rtype: Any
+        """
+        return await self._inner._get(task_id)  # noqa: SLF001  # pylint: disable=protected-access
+
     async def delete(self, task_id: str) -> None:
         """Force-delete the chain record + any queued inputs.
 

sdk/agentserver/azure-ai-agentserver-core/pyproject.toml

@@ -8,7 +8,7 @@ authors = [
 ]
 license = "MIT"
 classifiers = [
-    "Development Status :: 5 - Production/Stable",
+    "Development Status :: 4 - Beta",
     "Programming Language :: Python",
     "Programming Language :: Python :: 3 :: Only",
     "Programming Language :: Python :: 3",

sdk/agentserver/azure-ai-agentserver-core/tests/test_config.py

@@ -60,3 +60,43 @@ def test_agent_guid_distinct_from_composite_agent_id(self, monkeypatch: pytest.M
         config = AgentConfig.from_env()
         assert config.agent_id == "weather:1"
         assert config.agent_guid == "guid-abc"
+
+
+class TestAgentConfigSessionGuid:
+    """Tests for the FOUNDRY_AGENT_SESSION_GUID resolution."""
+
+    def test_session_guid_from_hosted_env(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        monkeypatch.setenv("FOUNDRY_HOSTING_ENVIRONMENT", "production")
+        monkeypatch.setenv("FOUNDRY_AGENT_SESSION_GUID", "a" * 32)
+
+        config = AgentConfig.from_env()
+
+        assert config.session_guid == "a" * 32
+
+    def test_session_guid_empty_when_absent(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        monkeypatch.delenv("FOUNDRY_AGENT_SESSION_GUID", raising=False)
+
+        config = AgentConfig.from_env()
+
+        assert config.session_guid == ""
+
+    @pytest.mark.parametrize("value", ["A" * 32, "a" * 31, "g" * 32, "not-a-guid"])
+    def test_invalid_hosted_session_guid_raises(
+        self, monkeypatch: pytest.MonkeyPatch, value: str
+    ) -> None:
+        monkeypatch.setenv("FOUNDRY_HOSTING_ENVIRONMENT", "production")
+        monkeypatch.setenv("FOUNDRY_AGENT_SESSION_GUID", value)
+
+        with pytest.raises(ValueError, match="FOUNDRY_AGENT_SESSION_GUID"):
+            AgentConfig.from_env()
+
+    def test_non_hosted_invalid_session_guid_is_not_trusted(
+        self, monkeypatch: pytest.MonkeyPatch
+    ) -> None:
+        monkeypatch.delenv("FOUNDRY_HOSTING_ENVIRONMENT", raising=False)
+        monkeypatch.setenv("FOUNDRY_AGENT_SESSION_GUID", "local-value")
+
+        config = AgentConfig.from_env()
+
+        assert config.is_hosted is False
+        assert config.session_guid == "local-value"

sdk/agentserver/azure-ai-agentserver-responses/CHANGELOG.md

@@ -2,14 +2,19 @@
 
 ## 2.2.0b2 (Unreleased)
 
-### Features Added
-
-### Breaking Changes
-
 ### Bugs Fixed
 
+- Scoped durable multi-turn task IDs with `FOUNDRY_AGENT_SESSION_GUID` when
+  available, preventing recreated same-name sessions from colliding with task
+  tombstones. Existing pre-rollout active chains remain resumable through a
+  legacy-ID lookup.
+
 ### Other Changes
 
+- Raised the minimum `azure-ai-agentserver-core` dependency to `>=2.2.0b1`,
+  which provides the session GUID configuration and legacy task lookup used by
+  resilient Responses.
+
 ## 2.2.0b1 (2026-08-27)
 
 ### Breaking Changes