Disclaimer: Do not include SAP-internal or customer-specific information in this PR (e.g. internal system URLs, customer names, tenant IDs, or confidential configurations). This is a public repository.

Description

Adds multitenancy support to the agent_memory module. access_strategy and tenant are configured once at create_client() time — no per-call params on individual methods.

from sap_cloud_sdk.agent_memory import create_client, AccessStrategy

# Subscriber — all calls use subscriber token scoped to "acme-corp"
client = create_client(
    access_strategy=AccessStrategy.SUBSCRIBER,
    tenant="acme-corp",
)
memories = client.list_memories(agent_id="x", invoker_id="u")

# Provider — uses provider token (no isolation, emits logger.warning)
client = create_client(access_strategy=AccessStrategy.PROVIDER)

Implementation (native multitenancy approach)

This branch uses a single default binding with token URL derivation: the subscriber token URL is derived by replacing the identityzone segment in token_url with the tenant subdomain (using the identityzone field from the UAA binding). This is the intended implementation once the Agent Memory service natively supports multitenancy.

The companion PR #232 (feat/enable-multitenancy-support-for-agent-memory-using-bindings) implements the same public API but uses per-tenant bindings as a temporary workaround for environments where native multitenancy is not yet available.

Key changes

• AccessStrategy enum (SUBSCRIBER / PROVIDER) on create_client()
• AgentMemoryClient simplified: single _transport, access_strategy and tenant validated at construction, logger.warning() when PROVIDER is used
• _http_transport.py unchanged — per-tenant token derivation via identityzone remains
• BDD integration tests with full subscriber + provider coverage sharing all step implementations

Related Issue

Closes #

Type of Change

• Bug fix
• New feature (non-breaking)
• Breaking change
• Documentation update

How to Test

pytest tests/agent_memory/unit/    # 248 tests pass
CLOUD_SDK_CFG_HANA_AGENT_MEMORY_DEFAULT_SUBSCRIBER_TENANT=<subdomain> \
pytest tests/agent_memory/integration/   # 26 pass

Checklist

• Tests added/updated
• All tests pass locally
• Pre-commit hooks pass (uvx pre-commit run --all-files)
• Documentation updated
• No sensitive information

Breaking Changes

create_client() with no args raises AgentMemoryValidationError (default SUBSCRIBER requires tenant). Individual methods no longer accept access_strategy or tenant.

Migration:

client = create_client(tenant="my-subdomain")          # subscriber
client = create_client(access_strategy=AccessStrategy.PROVIDER)  # provider