refactor: move mcp auth record ownership

src/wf_api/__init__.py

@@ -1,7 +1,5 @@
 from __future__ import annotations
 
-from .auth import AUTH_ID_PATTERN, AuthRecord, AuthStore, validate_auth_id
-from .listing import matches_query, paged_list_payload
 from .admin import (
     WorkflowAdminApi,
     WorkflowAdminAuthProvider,
@@ -9,8 +7,7 @@ from .admin import (
     WorkflowAdminEventProvider,
 )
 from .artifacts import WorkflowArtifactApi
-from .local_sources import builtin_sources, get_qualified_spec, qualify_spec
-from .models import RawWorkflowPlan, TraceRange
+from .auth import AUTH_ID_PATTERN, AuthRecord, AuthStore, validate_auth_id
 from .capabilities import WorkflowCapabilityApi
 from .constants import (
     DEFAULT_CALL_STEP_ID,
@@ -21,9 +18,21 @@ from .constants import (
 )
 from .deployments import WorkflowDeploymentApi
 from .drafts import WorkflowDraftApi
-from .next_actions import NextActionPatchExample, NextActionTool, NextActions
+from .durable_context import durable_workflow_api, require_workflow_stores
+from .listing import matches_query, paged_list_payload
+from .local_sources import builtin_sources, get_qualified_spec, qualify_spec
+from .models import RawWorkflowPlan, TraceRange
+from .next_actions import NextActionPatchExample, NextActions, NextActionTool
+from .operation_context import (
+    WorkflowEventRecorder,
+    WorkflowLiveSourceChecker,
+    WorkflowOperationContext,
+    WorkflowRuntimeRunner,
+    WorkflowSpecProvider,
+)
 from .refs import WorkflowSurfaceCapabilityId, parse_workflow_surface_capability_id
 from .runs import WorkflowRunApi
+from .runtime_dependencies import RuntimeDependencies, resolve_runtime_dependencies
 from .service import WorkflowApi
 from .source_admin import WorkflowSourceAdminApi
 from .source_registry_admin import (
@@ -32,6 +41,7 @@ from .source_registry_admin import (
     WorkflowSourceRegistryMutationProvider,
     WorkflowSourceRegistryProvider,
 )
+from .stores import WorkflowStores, file_workflow_stores
 from .surface import (
     WorkflowAdminSurface,
     WorkflowApiSurface,
@@ -55,18 +65,6 @@ from .wrapper_hints import (
     wrapper_hints_for_capability,
 )
 
-from .operation_context import (
-    WorkflowEventRecorder,
-    WorkflowLiveSourceChecker,
-    WorkflowOperationContext,
-    WorkflowRuntimeRunner,
-    WorkflowSpecProvider,
-)
-
-from .runtime_dependencies import RuntimeDependencies, resolve_runtime_dependencies
-from .stores import WorkflowStores, file_workflow_stores
-from .durable_context import durable_workflow_api, require_workflow_stores
-
 __all__ = [
     "AUTH_ID_PATTERN",
     "DEFAULT_CALL_STEP_ID",

src/wf_api/artifacts.py

@@ -14,6 +14,8 @@ from wf_artifacts import (
     RequiredCapability,
     WorkflowArtifact,
     artifact_catalog_entry,
+)
+from wf_artifacts import (
     create_workflow_artifact_from_plan as build_workflow_artifact_from_plan,
 )
 

src/wf_api/capability_requirements.py

@@ -4,6 +4,8 @@ from typing import Any
 
 from wf_artifacts import (
     RequiredCapability,
+)
+from wf_artifacts import (
     create_workflow_artifact_from_plan as build_workflow_artifact_from_plan,
 )
 from wf_platform import CapabilityRef, NodeSpecInventory

src/wf_api/drafts.py

@@ -6,12 +6,18 @@ from typing import Any
 from wf_artifacts import (
     DraftWorkspaceStore,
     compile_workflow_draft,
-    create_draft_workspace as create_draft_workspace_record,
-    get_draft_workspace as get_draft_workspace_record,
-    patch_draft_workspace as patch_draft_workspace_record,
     patch_workflow_draft,
     validate_workflow_draft,
 )
+from wf_artifacts import (
+    create_draft_workspace as create_draft_workspace_record,
+)
+from wf_artifacts import (
+    get_draft_workspace as get_draft_workspace_record,
+)
+from wf_artifacts import (
+    patch_draft_workspace as patch_draft_workspace_record,
+)
 from wf_core.models.steps import (
     InputBinding,
     InputPathBinding,

src/wf_api/local_sources.py

@@ -3,12 +3,31 @@ from __future__ import annotations
 from collections.abc import Mapping
 from typing import TYPE_CHECKING, Any
 
-from wf_authoring import NodeSpec, coalesce, concat, constant, default_if_none
-from wf_authoring import extract_field, filter_items, filter_items_present, first_item
-from wf_authoring import first_item_maybe, first_item_or_none, is_empty, last_item
-from wf_authoring import last_item_or_none, length, node, pick_key, pick_path
-from wf_authoring import project_fields, rename_fields, runtime_error, truthy
-from wf_authoring import extract_text_content
+from wf_authoring import (
+    NodeSpec,
+    coalesce,
+    concat,
+    constant,
+    default_if_none,
+    extract_field,
+    extract_text_content,
+    filter_items,
+    filter_items_present,
+    first_item,
+    first_item_maybe,
+    first_item_or_none,
+    is_empty,
+    last_item,
+    last_item_or_none,
+    length,
+    node,
+    pick_key,
+    pick_path,
+    project_fields,
+    rename_fields,
+    runtime_error,
+    truthy,
+)
 from wf_core.runtime.ops.merges import DEFAULT_REDUCER_DEFINITIONS
 from wf_platform import (
     CapabilityBuckets,

src/wf_api/models.py

@@ -4,6 +4,7 @@ from dataclasses import dataclass
 from typing import Any
 
 from pydantic import BaseModel, Field
+
 from wf_core import Edge
 from wf_core.models.steps import InputBinding, Step
 

src/wf_api/run_lifecycle.py

@@ -3,6 +3,7 @@ from __future__ import annotations
 from datetime import UTC, datetime
 from uuid import uuid4
 
+from wf_api.saved_subgraphs import SavedSubgraphTree
 from wf_artifacts import (
     AvailableSource,
     CheckpointReason,
@@ -26,8 +27,6 @@ from wf_core import (
     load_run_state,
 )
 
-from wf_api.saved_subgraphs import SavedSubgraphTree
-
 
 def create_pinned_environment(
     *,

src/wf_api/runs.py

@@ -14,6 +14,7 @@ from wf_core import RunState
 from .artifact_plans import raw_plan_from_artifact
 from .deployments import WorkflowDeploymentApi, _available_sources
 from .next_actions import NextActions
+from .operation_context import WorkflowOperationContext
 from .run_lifecycle import (
     create_pinned_environment,
     has_blocking_diagnostics,
@@ -24,7 +25,6 @@ from .run_lifecycle import (
     validate_pinned_resume_environment,
 )
 from .saved_subgraphs import saved_subgraph_tree_from_snapshots
-from .operation_context import WorkflowOperationContext
 
 
 class TraceRangeLike(Protocol):