agenticdome-python-sdk 1.1.0__py3-none-any.whl → 1.1.2__py3-none-any.whl

{agenticdome_python_sdk-1.1.0.dist-info → agenticdome_python_sdk-1.1.2.dist-info}/METADATA

@@ -1,8 +1,7 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.1.0
-Summary: Official Python SDK for AgentGuard Intelligence Engine and Action Firewall.
-Home-page: https://github.com/agenticdome/agenticdome-python-sdk-python
+Version: 1.1.2
+Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License: Proprietary
 Project-URL: Homepage, https://au.agenticdome.io
@@ -84,9 +83,9 @@ Requires-Dist: ruff>=0.5.0; extra == "dev"
 Requires-Dist: mypy>=1.8.0; extra == "dev"
 Requires-Dist: build>=1.0.0; extra == "dev"
 Requires-Dist: twine>=5.0.0; extra == "dev"
-Dynamic: home-page
 Dynamic: license-file
-Dynamic: requires-python
+
+
 
 # AgenticDome Python SDK
 
@@ -276,7 +275,6 @@ If you are an Enterprise Administrator securing your OpenClaw stack or another P
 1. Create an account in the AgenticDome Management Console for the AU region.
 2. Log in and copy your unique workspace or organization tenant identifier from organization settings.
 3. Navigate to the access-control or API-key section and generate a production API key.
-4. Configure your local OpenClaw runtime, server, worker, or hosting container with the required environment variables before attaching any SDK framework integration.
 
 ---
 
@@ -3008,8 +3006,6 @@ client.report_incident(
 )
 ```
 
----
-
 ## Prompt Guardrail Example
 
 ```python
@@ -3307,25 +3303,123 @@ from agenticdome_sdk.llamaindex import AgenticDomeLlamaIndexFirewall, FirewallCo
 
 ---
 
-## Package Build
+## Package Build and Verification
 
-For maintainers:
+For maintainers, run the Python SDK release gate from the SDK root:
 
 ```bash
 python3 -m venv .venv
 source .venv/bin/activate
 
-python -m pip install --upgrade pip setuptools wheel build twine pytest
+python -m pip install --upgrade pip setuptools wheel
 python -m pip install -e ".[dev]"
 python -m pip install -e ".[crewai,pydanticai,langgraph,microsoft,foundry,agno,openai-agents,mcp,bedrock,google-adk,llamaindex,redis]"
 
-pytest -q
+python -m pytest -q
+rm -rf build dist *.egg-info agenticdome_sdk.egg-info agenticdome_python_sdk.egg-info
+python -m build
+python -m twine check dist/*
+```
+
+`python -m pytest -q` runs the core SDK tests, package metadata contract tests, and every dependency-light framework adapter test in one go. This is the normal offline full-suite command for all supported Python integrations.
+
+The adapter tests use fake framework/client boundaries where possible so normal CI can verify authorization, delegation-token handling, sanitized tool arguments, output DLP, streaming sanitization, rate limits, and fail-open/fail-closed behavior without requiring live third-party services.
+
+To run one framework at a time, execute the matching test file from the matrix below. For example, `python -m pytest -q tests/test_langgraph_integration.py` runs only the LangGraph/LangChain adapter tests.
+
+### Verification Command Details
+
+Use this focused verification command when you only want release/package checks plus the optional live tenant smoke tests:
+
+```bash
+python -m pytest -q tests/test_packaging_contract.py tests/test_live_tenant.py
+```
+
+What each part does:
+
+| Part | Meaning |
+| :--- | :--- |
+| `python -m pytest` | Runs `pytest` using the current Python environment. |
+| `-q` | Quiet mode. It prints compact test results instead of verbose test names. |
+| `tests/test_packaging_contract.py` | Runs packaging and release-quality checks: `pyproject.toml` metadata, the minimal `setup.py` shim, public imports, `.gitignore`, `MANIFEST.in`, and README verification coverage. |
+| `tests/test_live_tenant.py` | Runs live AgenticDome tenant smoke tests only when explicitly enabled. By default these tests are skipped. |
+
+By default, `tests/test_live_tenant.py` is skipped unless you set:
+
+```bash
+export AGENTICDOME_LIVE_TENANT_TEST=1
+```
+
+For strict live policy validation, also set:
+
+```bash
+export AGENTICDOME_LIVE_EXPECT_STRICT=1
+```
+
+### Framework Test Matrix
+
+| Runtime / integration | Test command | Coverage focus |
+| :--- | :--- | :--- |
+| Core SDK client | `python -m pytest -q tests/test_client.py` | Request validation, headers, guardrail calls, A2A/MCP JSON-RPC calls, Mesh DLP, HTTP errors, and JSON handling. |
+| Package contract | `python -m pytest -q tests/test_packaging_contract.py` | `pyproject.toml` metadata, legacy `setup.py` shim, public exports, manifest hygiene, ignored build artifacts, and documented extras. |
+| CrewAI | `python -m pytest -q tests/test_crewai_integration.py` | Prompt/tool hooks, manager handoff token injection, specialist verification, output redaction, schema checks, rate limits, retries, and streaming DLP. |
+| PydanticAI | `python -m pytest -q tests/test_pydanticai_integration.py` | Agent hooks, secure tools, sanitized arguments, token-store fallback, production session enforcement, rate limits, retries, and streaming output. |
+| LangGraph / LangChain | `python -m pytest -q tests/test_langgraph_integration.py` | Graph input, transition, tool, retrieval, middleware, security routing, token consumption, output DLP, and streaming events. |
+| Microsoft Agent Framework | `python -m pytest -q tests/test_microsoft_agent_framework_integration.py` | Tool/run boundaries, delegated tool verification, middleware install helpers, identity context, Copilot enforcement hooks, and streaming output. |
+| Microsoft AI Foundry | `python -m pytest -q tests/test_microsoft_ai_foundry_integration.py` | Prompt threat contracts, local tool executors, run boundaries, bearer/API-key configuration, delegated execution, circuit breaker, and stream DLP. |
+| OpenAI Agents SDK | `python -m pytest -q tests/test_openai_agents_integration.py` | Runner wrappers, guardrail helpers, function-tool wrappers, handoff/delegated tools, HMAC token storage, schema checks, retries, and streaming output. |
+| Agno | `python -m pytest -q tests/test_agno_integration.py` | Agent/team hooks, tool hooks, middleware/plugin helpers, delegated specialist execution, retrieved text sanitization, schema checks, and stream DLP. |
+| MCP host / gateway | `python -m pytest -q tests/test_mcp_host_integration.py` | JSON-RPC preflight, tool/resource/prompt authorization, private metadata stripping, delegated token verification, response filtering, and forwarder DLP. |
+| AWS Bedrock | `python -m pytest -q tests/test_aws_bedrock_integration.py` | Converse/InvokeModel wrappers, Bedrock Agents streams, action-group Lambda wrappers, retrieval DLP, tool authorization, handoff tokens, and retries. |
+| Google ADK | `python -m pytest -q tests/test_google_adk_integration.py` | Model/tool callbacks, plugin helpers, secure tools, delegated execution, sanitized args, production sessions, rate limits, retries, and stream DLP. |
+| LlamaIndex | `python -m pytest -q tests/test_llamaindex_integration.py` | FunctionTool/query/retrieval wrappers, callback handlers, secure tools, delegated execution, fail-open behavior, and output DLP. |
+
+For a single-framework development loop, install only the extra and run the matching test file, for example:
+
+```bash
+python -m pip install -e ".[langgraph]"
+python -m pytest -q tests/test_langgraph_integration.py
+```
+
+### Release Gates
+
+For metadata and artifact validation only:
+
+```bash
+python -m pytest -q tests/test_packaging_contract.py
+rm -rf build dist *.egg-info agenticdome_sdk.egg-info agenticdome_python_sdk.egg-info
+python -m build
+python -m twine check dist/*
+```
+
+For a full offline release gate across all supported Python integrations:
 
+```bash
+python -m pip install -e ".[dev,crewai,pydanticai,langgraph,microsoft,foundry,agno,openai-agents,mcp,bedrock,google-adk,llamaindex,redis]"
+python -m pytest -q
 rm -rf build dist *.egg-info agenticdome_sdk.egg-info agenticdome_python_sdk.egg-info
 python -m build
 python -m twine check dist/*
 ```
 
+For a release gate against a real AgenticDome tenant:
+
+```bash
+export AGENTICDOME_API_BASE="https://www.agenticdome.io"
+export AGENTICDOME_TENANT_ID="<tenant_id>"
+export AGENTICDOME_API_KEY="<tenant_api_key>"
+export AGENTICDOME_LIVE_TENANT_TEST=1
+python -m pytest -q tests/test_live_tenant.py
+```
+
+For strict security-policy validation, add:
+
+```bash
+export AGENTICDOME_LIVE_EXPECT_STRICT=1
+```
+
+The live tenant test performs real `guardrail_validate()` and `mesh_validate()` calls through the core client. Framework-specific behavior remains covered by the offline adapter test matrix above, because those tests assert where each framework boundary calls the shared AgenticDome client and how it handles policy decisions.
+
 ---
 
 ## License
@@ -3339,5 +3433,5 @@ or terms published by AgenticDome for this package.
 For enterprise deployments, advanced governance workflows, dedicated regional control planes, or priority integration support, visit:
 
 ```text
-https://au.agenticdome.io
+https://agenticdome.io
 ```

{agenticdome_python_sdk-1.1.0.dist-info → agenticdome_python_sdk-1.1.2.dist-info}/RECORD

@@ -1,9 +1,9 @@
-agenticdome_python_sdk-1.1.0.dist-info/licenses/LICENSE,sha256=lqAH8G9tU2WPK9fzrnM_QMd4XUrh9fsmPqKE_hniKpM,718
-agenticdome_sdk/__init__.py,sha256=yNHRjMpEE3-knPsjSJ0LBwIk3lD6qbilKvFH_yXSPAs,567
+agenticdome_python_sdk-1.1.2.dist-info/licenses/LICENSE,sha256=lqAH8G9tU2WPK9fzrnM_QMd4XUrh9fsmPqKE_hniKpM,718
+agenticdome_sdk/__init__.py,sha256=87__SX3oTttDLur7z8BhzAe6QMOSK1GXjoaTZRVTbc0,223
 agenticdome_sdk/agno.py,sha256=3gbc5URNTAHyNVAaAH882CpQpMecTv0R6S0CNMDOgos,60686
 agenticdome_sdk/aws_bedrock.py,sha256=Z1Rcbps7VgvETmq_wrUbIvg6lJxsoe7YJEPZYkBKr80,69498
-agenticdome_sdk/client.py,sha256=h1__ManOybAYxYV0ScZXf2J7grm-pPiZ9Z1uTw-LwBY,41831
-agenticdome_sdk/crewai.py,sha256=MAX5rA2OmpAfSKOIbHL0WDDVcsVuOs31OJXggJtCwOc,51815
+agenticdome_sdk/client.py,sha256=9OJqaE5OMr7_mcqFI5b_QodQU-ZP9LxgRRoUU38rYW0,43513
+agenticdome_sdk/crewai.py,sha256=7o7yapjbGfxfHGrmKtnpERIeJlDKIRgqz2h1WpLQJkQ,52389
 agenticdome_sdk/google_adk.py,sha256=U23uSvUxgeQRUX6fGewls0CU0GI8mru67O1mHti7RkA,57175
 agenticdome_sdk/langgraph.py,sha256=Eyaq-zcScLVlvT4VBHPN1H_K1An45LI7lKi0YgsXCOs,82660
 agenticdome_sdk/llamaindex.py,sha256=uFDzeYNz4Y72W-5XdluhdHvKAc8xkPJRkPaLFvwhlSk,42777
@@ -13,7 +13,7 @@ agenticdome_sdk/microsoft_ai_foundry.py,sha256=aIofnEUKU30P-4vKkWx1YdZZVHQIZECjE
 agenticdome_sdk/openai_agents.py,sha256=bWoJ2hjCyXDWl5Eo4pjeRr_MOQgNOZW7QE9WRDo6oDw,57243
 agenticdome_sdk/pydantic.py,sha256=7R6X0JgPIMLcWO682wcpN0X8dSMVEiwvVc4ydUN111s,54882
 agenticdome_sdk/scenarios.py,sha256=QROC_JWKwub5AdpP9pLXdJCpotEACkF-qgKAnDAo8XA,7882
-agenticdome_python_sdk-1.1.0.dist-info/METADATA,sha256=qv0tAcX_wBzycN0i6P5NAH3BhfLswCtsKJU4pfDDtRg,157806
-agenticdome_python_sdk-1.1.0.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
-agenticdome_python_sdk-1.1.0.dist-info/top_level.txt,sha256=LZbbjXco5mqDrGwlTJpIKI5Sp6R_njzHHjExxAs9c3s,16
-agenticdome_python_sdk-1.1.0.dist-info/RECORD,,
+agenticdome_python_sdk-1.1.2.dist-info/METADATA,sha256=GHTOzz2LHgIz8fSzDkj1tICoBiD5ZO7p4wOoFUWnCuo,163986
+agenticdome_python_sdk-1.1.2.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
+agenticdome_python_sdk-1.1.2.dist-info/top_level.txt,sha256=LZbbjXco5mqDrGwlTJpIKI5Sp6R_njzHHjExxAs9c3s,16
+agenticdome_python_sdk-1.1.2.dist-info/RECORD,,

agenticdome_sdk/__init__.py

@@ -1,22 +1,6 @@
-from .client import AgentGuardClient
-
-try:
-    from .client import GuardrailClient
-except Exception:
-    GuardrailClient = AgentGuardClient
-
-try:
-    from .exceptions import AgentGuardError, AgentGuardHTTPError
-except Exception:
-    try:
-        from .client import AgentGuardError, AgentGuardHTTPError
-    except Exception:
-        class AgentGuardError(Exception):
-            pass
-
-        class AgentGuardHTTPError(AgentGuardError):
-            pass
+from .client import AgentGuardClient, AgentGuardError, AgentGuardHTTPError
 
+GuardrailClient = AgentGuardClient
 
 __all__ = [
     "AgentGuardClient",

agenticdome_sdk/client.py

@@ -1,6 +1,6 @@
 import base64
 import os
-from typing import Optional, Dict, List, Any, Union
+from typing import Optional, Dict, List, Any, Tuple, Union
 
 import requests
 from requests.adapters import HTTPAdapter
@@ -51,6 +51,10 @@ class AgentGuardClient:
         timeout: int = 20,
         user_agent: str = "agenticdome-python-sdk/0.4.0",
         max_retries: int = 3,
+        connect_timeout: Optional[float] = None,
+        pool_connections: int = 20,
+        pool_maxsize: int = 100,
+        pool_block: bool = False,
     ):
         self.api_base = self._require_nonempty("api_base", api_base).rstrip("/")
         self.api_key = self._require_nonempty(
@@ -66,6 +70,11 @@ class AgentGuardClient:
             or os.getenv("AGENTICDOME_BEARER_TOKEN")
         )
         self.timeout = timeout
+        self.connect_timeout = self._positive_float(
+            "connect_timeout",
+            connect_timeout if connect_timeout is not None else os.getenv("AGENTICDOME_CONNECT_TIMEOUT_S", "5"),
+            default=5.0,
+        )
         self.user_agent = user_agent
 
         self.session = requests.Session()
@@ -77,7 +86,12 @@ class AgentGuardClient:
             status_forcelist=(429, 500, 502, 503, 504),
             allowed_methods=frozenset(["GET", "POST", "PUT", "PATCH", "DELETE"]),
         )
-        adapter = HTTPAdapter(max_retries=retry)
+        adapter = HTTPAdapter(
+            max_retries=retry,
+            pool_connections=max(1, int(pool_connections)),
+            pool_maxsize=max(1, int(pool_maxsize)),
+            pool_block=bool(pool_block),
+        )
         self.session.mount("http://", adapter)
         self.session.mount("https://", adapter)
 
@@ -136,6 +150,22 @@ class AgentGuardClient:
         s = str(value).strip()
         return s or None
 
+    def _positive_float(self, name: str, value: Any, *, default: float) -> float:
+        try:
+            parsed = float(value)
+        except Exception:
+            parsed = default
+        if parsed <= 0:
+            parsed = default
+        return parsed
+
+    def _timeout_tuple(self, timeout: Optional[Union[int, float, Tuple[float, float]]]) -> Union[float, Tuple[float, float]]:
+        if isinstance(timeout, tuple):
+            return timeout
+        read_timeout = self._positive_float("timeout", timeout if timeout is not None else self.timeout, default=float(self.timeout or 20))
+        connect_timeout = min(self.connect_timeout, read_timeout)
+        return (connect_timeout, read_timeout)
+
     def _normalize_direction(self, direction: Optional[str]) -> str:
         """
         Normalize common direction synonyms to the canonical values expected by the API.
@@ -239,7 +269,7 @@ class AgentGuardClient:
         tenant_id: Optional[Union[str, int]] = None,
         use_bearer: bool = False,
         extra_headers: Optional[Dict[str, str]] = None,
-        timeout: Optional[int] = None,
+        timeout: Optional[Union[int, float, Tuple[float, float]]] = None,
     ) -> Dict[str, Any]:
         url = f"{self.api_base}{path}"
         headers = self._headers(
@@ -253,7 +283,7 @@ class AgentGuardClient:
             url=url,
             headers=headers,
             json=json_body,
-            timeout=timeout or self.timeout,
+            timeout=self._timeout_tuple(timeout),
         )
 
         if not response.ok:
@@ -647,16 +677,20 @@ class AgentGuardClient:
     def reset_trust_score(
         self,
         agent_id: str,
-        admin_secret: str,
+        admin_secret: Optional[str] = None,
         tenant_id: Optional[Union[str, int]] = None,
         is_agent: bool = True,
+        service_token: Optional[str] = None,
     ) -> Dict[str, Any]:
+        token = service_token or admin_secret or os.getenv("AGENTICDOME_SERVICE_TOKEN") or os.getenv("SERVICE_SECRET")
+        if not token:
+            raise ValueError("reset_trust_score requires service_token or AGENTICDOME_SERVICE_TOKEN")
         path = f"/trust/reset/{agent_id}?is_agent={'true' if is_agent else 'false'}"
         return self._request(
             "POST",
             path,
             tenant_id=tenant_id,
-            extra_headers={"X-Admin-Secret": admin_secret},
+            extra_headers={"X-Service-Token": token},
         )
 
     # ------------------------------------------------------------------
@@ -1060,7 +1094,7 @@ class AgentGuardClient:
         payload: Dict[str, Any],
         *,
         api_version: str = "2025-09-01",
-        timeout: Optional[int] = None,
+        timeout: Optional[Union[int, float, Tuple[float, float]]] = None,
     ) -> Dict[str, Any]:
         return self._request(
             "POST",
@@ -1075,7 +1109,7 @@ class AgentGuardClient:
         payload: Dict[str, Any],
         *,
         api_version: str = "2025-09-01",
-        timeout: Optional[int] = None,
+        timeout: Optional[Union[int, float, Tuple[float, float]]] = None,
     ) -> Dict[str, Any]:
         return self._request(
             "POST",

agenticdome_sdk/crewai.py

@@ -25,6 +25,19 @@ except Exception as exc:  # pragma: no cover
         "Install with: pip install 'agenticdome-python-sdk[crewai]'"
     ) from exc
 
+
+
+def _preserve_hook_function(register: Callable[[Callable[..., Any]], Any]) -> Callable[[Callable[..., Any]], Callable[..., Any]]:
+    def decorator(fn: Callable[..., Any]) -> Callable[..., Any]:
+        registered = register(fn)
+        return fn if registered is None else registered
+    return decorator
+
+
+register_after_tool_call_hook = _preserve_hook_function(register_after_tool_call_hook)
+register_before_llm_call_hook = _preserve_hook_function(register_before_llm_call_hook)
+register_before_tool_call_hook = _preserve_hook_function(register_before_tool_call_hook)
+
 from agenticdome_sdk.client import AgentGuardClient
 
 try: