Align sandbox preview behavior with dotnet

Author: YunchuWang

durabletask-azuremanaged/durabletask/azuremanaged/preview/sandboxes/declarations.py

@@ -153,12 +153,13 @@ def build_profile_sandbox_activity_declarations() -> list[pb.SandboxActivityDecl
         activity_names = resolve_activity_names(profile.activity_names)
 
         for activity_name in activity_names:
-            existing_profile = activity_owners.get(activity_name)
+            activity_key = activity_name.casefold()
+            existing_profile = activity_owners.get(activity_key)
             if existing_profile and existing_profile != profile.worker_profile_id:
                 raise ValueError(
                     f"Sandbox activity '{activity_name}' is assigned to both worker profile "
                     f"'{existing_profile}' and '{profile.worker_profile_id}'.")
-            activity_owners[activity_name] = profile.worker_profile_id
+            activity_owners[activity_key] = profile.worker_profile_id
 
         declarations.append(_build_sandbox_activity_declaration(
             activity_names=activity_names,

durabletask-azuremanaged/durabletask/azuremanaged/preview/sandboxes/worker.py

@@ -202,8 +202,9 @@ def _resolve_worker_profile_id() -> str:
 
 def _resolve_token_credential() -> TokenCredential | None:
     authentication = os.getenv("DTS_AUTHENTICATION", "")
-    if authentication.lower() != "managedidentity":
-        return None
+    if authentication.strip().lower() != "managedidentity":
+        raise ValueError(
+            "Sandbox worker requires DTS_AUTHENTICATION to be ManagedIdentity.")
 
     client_id = os.getenv("DTS_UMI_CLIENT_ID", "")
     if not client_id.strip():
@@ -231,12 +232,16 @@ def _resolve_sandbox_provider() -> str:
 
 def _resolve_max_concurrent_activities() -> int:
     value = os.getenv("DTS_SANDBOX_MAX_ACTIVITIES")
-    max_concurrent_activities = (
-        int(value)
-        if value
-        else DEFAULT_MAX_CONCURRENT_ACTIVITIES)
+    if value is None:
+        return DEFAULT_MAX_CONCURRENT_ACTIVITIES
+
+    try:
+        max_concurrent_activities = int(value.strip())
+    except ValueError as ex:
+        raise ValueError(
+            "DTS_SANDBOX_MAX_ACTIVITIES must be a positive integer when injected by DTS.") from ex
 
     if max_concurrent_activities <= 0:
         raise ValueError(
-            "Sandbox activity worker max concurrent activities must be greater than zero.")
+            "DTS_SANDBOX_MAX_ACTIVITIES must be a positive integer when injected by DTS.")
     return max_concurrent_activities

examples/sandboxes/Containerfile

@@ -13,5 +13,4 @@ RUN pip install --no-cache-dir /src /src/durabletask-azuremanaged azure-identity
 COPY examples/sandboxes/remote_worker.py /app/remote_worker.py
 COPY examples/sandboxes/activity_names.py /app/activity_names.py
 
-EXPOSE 8080
 ENTRYPOINT ["python", "/app/remote_worker.py"]

examples/sandboxes/README.md

@@ -49,9 +49,11 @@ names with `options.add_activity(...)`. The declarer and remote worker both use
 The remote worker code cannot pass Durable Task Scheduler runtime settings to the SDK. In a
 sandbox, `SandboxWorker()` reads `DTS_ENDPOINT`,
 `DTS_TASK_HUB`, `DTS_WORKER_PROFILE_ID`, `DTS_SANDBOX_MAX_ACTIVITIES`,
-`DTS_SANDBOX_PROVIDER`, and `DTS_SANDBOX_ID` from environment variables injected by
-Durable Task Scheduler. The worker reports its registered activity names when it connects, and
-Durable Task Scheduler validates they match the declaration before advertising worker capacity.
+`DTS_SANDBOX_PROVIDER`, `DTS_AUTHENTICATION`, `DTS_UMI_CLIENT_ID`, and
+`DTS_SANDBOX_ID` from environment variables injected by Durable Task Scheduler.
+The worker requires `DTS_AUTHENTICATION=ManagedIdentity` and reports its
+registered activity names when it connects. Durable Task Scheduler validates
+they match the declaration before advertising worker capacity.
 
 ## Build the remote worker image