agenticdome-python-sdk 1.1.1__tar.gz → 1.1.2__tar.gz

{agenticdome_python_sdk-1.1.1 → agenticdome_python_sdk-1.1.2}/MANIFEST.in

@@ -5,7 +5,6 @@ include setup.py
 
 recursive-include examples *.py
 recursive-include tests *.py
-
 global-exclude __pycache__
 global-exclude *.py[cod]
 global-exclude .DS_Store

{agenticdome_python_sdk-1.1.1/agenticdome_python_sdk.egg-info → agenticdome_python_sdk-1.1.2}/PKG-INFO

@@ -1,8 +1,7 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.1.1
-Summary: Official Python SDK for AgentGuard Intelligence Engine and Action Firewall.
-Home-page: https://github.com/agenticdome/agenticdome-python-sdk-python
+Version: 1.1.2
+Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License: Proprietary
 Project-URL: Homepage, https://au.agenticdome.io
@@ -84,9 +83,7 @@ Requires-Dist: ruff>=0.5.0; extra == "dev"
 Requires-Dist: mypy>=1.8.0; extra == "dev"
 Requires-Dist: build>=1.0.0; extra == "dev"
 Requires-Dist: twine>=5.0.0; extra == "dev"
-Dynamic: home-page
 Dynamic: license-file
-Dynamic: requires-python
 
 
 
@@ -3009,8 +3006,6 @@ client.report_incident(
 )
 ```
 
----
-
 ## Prompt Guardrail Example
 
 ```python
@@ -3308,25 +3303,123 @@ from agenticdome_sdk.llamaindex import AgenticDomeLlamaIndexFirewall, FirewallCo
 
 ---
 
-## Package Build
+## Package Build and Verification
 
-For maintainers:
+For maintainers, run the Python SDK release gate from the SDK root:
 
 ```bash
 python3 -m venv .venv
 source .venv/bin/activate
 
-python -m pip install --upgrade pip setuptools wheel build twine pytest
+python -m pip install --upgrade pip setuptools wheel
 python -m pip install -e ".[dev]"
 python -m pip install -e ".[crewai,pydanticai,langgraph,microsoft,foundry,agno,openai-agents,mcp,bedrock,google-adk,llamaindex,redis]"
 
-pytest -q
+python -m pytest -q
+rm -rf build dist *.egg-info agenticdome_sdk.egg-info agenticdome_python_sdk.egg-info
+python -m build
+python -m twine check dist/*
+```
+
+`python -m pytest -q` runs the core SDK tests, package metadata contract tests, and every dependency-light framework adapter test in one go. This is the normal offline full-suite command for all supported Python integrations.
+
+The adapter tests use fake framework/client boundaries where possible so normal CI can verify authorization, delegation-token handling, sanitized tool arguments, output DLP, streaming sanitization, rate limits, and fail-open/fail-closed behavior without requiring live third-party services.
+
+To run one framework at a time, execute the matching test file from the matrix below. For example, `python -m pytest -q tests/test_langgraph_integration.py` runs only the LangGraph/LangChain adapter tests.
+
+### Verification Command Details
+
+Use this focused verification command when you only want release/package checks plus the optional live tenant smoke tests:
+
+```bash
+python -m pytest -q tests/test_packaging_contract.py tests/test_live_tenant.py
+```
+
+What each part does:
+
+| Part | Meaning |
+| :--- | :--- |
+| `python -m pytest` | Runs `pytest` using the current Python environment. |
+| `-q` | Quiet mode. It prints compact test results instead of verbose test names. |
+| `tests/test_packaging_contract.py` | Runs packaging and release-quality checks: `pyproject.toml` metadata, the minimal `setup.py` shim, public imports, `.gitignore`, `MANIFEST.in`, and README verification coverage. |
+| `tests/test_live_tenant.py` | Runs live AgenticDome tenant smoke tests only when explicitly enabled. By default these tests are skipped. |
+
+By default, `tests/test_live_tenant.py` is skipped unless you set:
+
+```bash
+export AGENTICDOME_LIVE_TENANT_TEST=1
+```
+
+For strict live policy validation, also set:
+
+```bash
+export AGENTICDOME_LIVE_EXPECT_STRICT=1
+```
+
+### Framework Test Matrix
+
+| Runtime / integration | Test command | Coverage focus |
+| :--- | :--- | :--- |
+| Core SDK client | `python -m pytest -q tests/test_client.py` | Request validation, headers, guardrail calls, A2A/MCP JSON-RPC calls, Mesh DLP, HTTP errors, and JSON handling. |
+| Package contract | `python -m pytest -q tests/test_packaging_contract.py` | `pyproject.toml` metadata, legacy `setup.py` shim, public exports, manifest hygiene, ignored build artifacts, and documented extras. |
+| CrewAI | `python -m pytest -q tests/test_crewai_integration.py` | Prompt/tool hooks, manager handoff token injection, specialist verification, output redaction, schema checks, rate limits, retries, and streaming DLP. |
+| PydanticAI | `python -m pytest -q tests/test_pydanticai_integration.py` | Agent hooks, secure tools, sanitized arguments, token-store fallback, production session enforcement, rate limits, retries, and streaming output. |
+| LangGraph / LangChain | `python -m pytest -q tests/test_langgraph_integration.py` | Graph input, transition, tool, retrieval, middleware, security routing, token consumption, output DLP, and streaming events. |
+| Microsoft Agent Framework | `python -m pytest -q tests/test_microsoft_agent_framework_integration.py` | Tool/run boundaries, delegated tool verification, middleware install helpers, identity context, Copilot enforcement hooks, and streaming output. |
+| Microsoft AI Foundry | `python -m pytest -q tests/test_microsoft_ai_foundry_integration.py` | Prompt threat contracts, local tool executors, run boundaries, bearer/API-key configuration, delegated execution, circuit breaker, and stream DLP. |
+| OpenAI Agents SDK | `python -m pytest -q tests/test_openai_agents_integration.py` | Runner wrappers, guardrail helpers, function-tool wrappers, handoff/delegated tools, HMAC token storage, schema checks, retries, and streaming output. |
+| Agno | `python -m pytest -q tests/test_agno_integration.py` | Agent/team hooks, tool hooks, middleware/plugin helpers, delegated specialist execution, retrieved text sanitization, schema checks, and stream DLP. |
+| MCP host / gateway | `python -m pytest -q tests/test_mcp_host_integration.py` | JSON-RPC preflight, tool/resource/prompt authorization, private metadata stripping, delegated token verification, response filtering, and forwarder DLP. |
+| AWS Bedrock | `python -m pytest -q tests/test_aws_bedrock_integration.py` | Converse/InvokeModel wrappers, Bedrock Agents streams, action-group Lambda wrappers, retrieval DLP, tool authorization, handoff tokens, and retries. |
+| Google ADK | `python -m pytest -q tests/test_google_adk_integration.py` | Model/tool callbacks, plugin helpers, secure tools, delegated execution, sanitized args, production sessions, rate limits, retries, and stream DLP. |
+| LlamaIndex | `python -m pytest -q tests/test_llamaindex_integration.py` | FunctionTool/query/retrieval wrappers, callback handlers, secure tools, delegated execution, fail-open behavior, and output DLP. |
+
+For a single-framework development loop, install only the extra and run the matching test file, for example:
+
+```bash
+python -m pip install -e ".[langgraph]"
+python -m pytest -q tests/test_langgraph_integration.py
+```
+
+### Release Gates
 
+For metadata and artifact validation only:
+
+```bash
+python -m pytest -q tests/test_packaging_contract.py
 rm -rf build dist *.egg-info agenticdome_sdk.egg-info agenticdome_python_sdk.egg-info
 python -m build
 python -m twine check dist/*
 ```
 
+For a full offline release gate across all supported Python integrations:
+
+```bash
+python -m pip install -e ".[dev,crewai,pydanticai,langgraph,microsoft,foundry,agno,openai-agents,mcp,bedrock,google-adk,llamaindex,redis]"
+python -m pytest -q
+rm -rf build dist *.egg-info agenticdome_sdk.egg-info agenticdome_python_sdk.egg-info
+python -m build
+python -m twine check dist/*
+```
+
+For a release gate against a real AgenticDome tenant:
+
+```bash
+export AGENTICDOME_API_BASE="https://www.agenticdome.io"
+export AGENTICDOME_TENANT_ID="<tenant_id>"
+export AGENTICDOME_API_KEY="<tenant_api_key>"
+export AGENTICDOME_LIVE_TENANT_TEST=1
+python -m pytest -q tests/test_live_tenant.py
+```
+
+For strict security-policy validation, add:
+
+```bash
+export AGENTICDOME_LIVE_EXPECT_STRICT=1
+```
+
+The live tenant test performs real `guardrail_validate()` and `mesh_validate()` calls through the core client. Framework-specific behavior remains covered by the offline adapter test matrix above, because those tests assert where each framework boundary calls the shared AgenticDome client and how it handles policy decisions.
+
 ---
 
 ## License

{agenticdome_python_sdk-1.1.1 → agenticdome_python_sdk-1.1.2}/README.md

@@ -2919,8 +2919,6 @@ client.report_incident(
 )
 ```
 
----
-
 ## Prompt Guardrail Example
 
 ```python
@@ -3218,25 +3216,123 @@ from agenticdome_sdk.llamaindex import AgenticDomeLlamaIndexFirewall, FirewallCo
 
 ---
 
-## Package Build
+## Package Build and Verification
 
-For maintainers:
+For maintainers, run the Python SDK release gate from the SDK root:
 
 ```bash
 python3 -m venv .venv
 source .venv/bin/activate
 
-python -m pip install --upgrade pip setuptools wheel build twine pytest
+python -m pip install --upgrade pip setuptools wheel
 python -m pip install -e ".[dev]"
 python -m pip install -e ".[crewai,pydanticai,langgraph,microsoft,foundry,agno,openai-agents,mcp,bedrock,google-adk,llamaindex,redis]"
 
-pytest -q
+python -m pytest -q
+rm -rf build dist *.egg-info agenticdome_sdk.egg-info agenticdome_python_sdk.egg-info
+python -m build
+python -m twine check dist/*
+```
+
+`python -m pytest -q` runs the core SDK tests, package metadata contract tests, and every dependency-light framework adapter test in one go. This is the normal offline full-suite command for all supported Python integrations.
+
+The adapter tests use fake framework/client boundaries where possible so normal CI can verify authorization, delegation-token handling, sanitized tool arguments, output DLP, streaming sanitization, rate limits, and fail-open/fail-closed behavior without requiring live third-party services.
+
+To run one framework at a time, execute the matching test file from the matrix below. For example, `python -m pytest -q tests/test_langgraph_integration.py` runs only the LangGraph/LangChain adapter tests.
+
+### Verification Command Details
+
+Use this focused verification command when you only want release/package checks plus the optional live tenant smoke tests:
+
+```bash
+python -m pytest -q tests/test_packaging_contract.py tests/test_live_tenant.py
+```
+
+What each part does:
+
+| Part | Meaning |
+| :--- | :--- |
+| `python -m pytest` | Runs `pytest` using the current Python environment. |
+| `-q` | Quiet mode. It prints compact test results instead of verbose test names. |
+| `tests/test_packaging_contract.py` | Runs packaging and release-quality checks: `pyproject.toml` metadata, the minimal `setup.py` shim, public imports, `.gitignore`, `MANIFEST.in`, and README verification coverage. |
+| `tests/test_live_tenant.py` | Runs live AgenticDome tenant smoke tests only when explicitly enabled. By default these tests are skipped. |
+
+By default, `tests/test_live_tenant.py` is skipped unless you set:
+
+```bash
+export AGENTICDOME_LIVE_TENANT_TEST=1
+```
+
+For strict live policy validation, also set:
+
+```bash
+export AGENTICDOME_LIVE_EXPECT_STRICT=1
+```
+
+### Framework Test Matrix
+
+| Runtime / integration | Test command | Coverage focus |
+| :--- | :--- | :--- |
+| Core SDK client | `python -m pytest -q tests/test_client.py` | Request validation, headers, guardrail calls, A2A/MCP JSON-RPC calls, Mesh DLP, HTTP errors, and JSON handling. |
+| Package contract | `python -m pytest -q tests/test_packaging_contract.py` | `pyproject.toml` metadata, legacy `setup.py` shim, public exports, manifest hygiene, ignored build artifacts, and documented extras. |
+| CrewAI | `python -m pytest -q tests/test_crewai_integration.py` | Prompt/tool hooks, manager handoff token injection, specialist verification, output redaction, schema checks, rate limits, retries, and streaming DLP. |
+| PydanticAI | `python -m pytest -q tests/test_pydanticai_integration.py` | Agent hooks, secure tools, sanitized arguments, token-store fallback, production session enforcement, rate limits, retries, and streaming output. |
+| LangGraph / LangChain | `python -m pytest -q tests/test_langgraph_integration.py` | Graph input, transition, tool, retrieval, middleware, security routing, token consumption, output DLP, and streaming events. |
+| Microsoft Agent Framework | `python -m pytest -q tests/test_microsoft_agent_framework_integration.py` | Tool/run boundaries, delegated tool verification, middleware install helpers, identity context, Copilot enforcement hooks, and streaming output. |
+| Microsoft AI Foundry | `python -m pytest -q tests/test_microsoft_ai_foundry_integration.py` | Prompt threat contracts, local tool executors, run boundaries, bearer/API-key configuration, delegated execution, circuit breaker, and stream DLP. |
+| OpenAI Agents SDK | `python -m pytest -q tests/test_openai_agents_integration.py` | Runner wrappers, guardrail helpers, function-tool wrappers, handoff/delegated tools, HMAC token storage, schema checks, retries, and streaming output. |
+| Agno | `python -m pytest -q tests/test_agno_integration.py` | Agent/team hooks, tool hooks, middleware/plugin helpers, delegated specialist execution, retrieved text sanitization, schema checks, and stream DLP. |
+| MCP host / gateway | `python -m pytest -q tests/test_mcp_host_integration.py` | JSON-RPC preflight, tool/resource/prompt authorization, private metadata stripping, delegated token verification, response filtering, and forwarder DLP. |
+| AWS Bedrock | `python -m pytest -q tests/test_aws_bedrock_integration.py` | Converse/InvokeModel wrappers, Bedrock Agents streams, action-group Lambda wrappers, retrieval DLP, tool authorization, handoff tokens, and retries. |
+| Google ADK | `python -m pytest -q tests/test_google_adk_integration.py` | Model/tool callbacks, plugin helpers, secure tools, delegated execution, sanitized args, production sessions, rate limits, retries, and stream DLP. |
+| LlamaIndex | `python -m pytest -q tests/test_llamaindex_integration.py` | FunctionTool/query/retrieval wrappers, callback handlers, secure tools, delegated execution, fail-open behavior, and output DLP. |
+
+For a single-framework development loop, install only the extra and run the matching test file, for example:
+
+```bash
+python -m pip install -e ".[langgraph]"
+python -m pytest -q tests/test_langgraph_integration.py
+```
+
+### Release Gates
 
+For metadata and artifact validation only:
+
+```bash
+python -m pytest -q tests/test_packaging_contract.py
 rm -rf build dist *.egg-info agenticdome_sdk.egg-info agenticdome_python_sdk.egg-info
 python -m build
 python -m twine check dist/*
 ```
 
+For a full offline release gate across all supported Python integrations:
+
+```bash
+python -m pip install -e ".[dev,crewai,pydanticai,langgraph,microsoft,foundry,agno,openai-agents,mcp,bedrock,google-adk,llamaindex,redis]"
+python -m pytest -q
+rm -rf build dist *.egg-info agenticdome_sdk.egg-info agenticdome_python_sdk.egg-info
+python -m build
+python -m twine check dist/*
+```
+
+For a release gate against a real AgenticDome tenant:
+
+```bash
+export AGENTICDOME_API_BASE="https://www.agenticdome.io"
+export AGENTICDOME_TENANT_ID="<tenant_id>"
+export AGENTICDOME_API_KEY="<tenant_api_key>"
+export AGENTICDOME_LIVE_TENANT_TEST=1
+python -m pytest -q tests/test_live_tenant.py
+```
+
+For strict security-policy validation, add:
+
+```bash
+export AGENTICDOME_LIVE_EXPECT_STRICT=1
+```
+
+The live tenant test performs real `guardrail_validate()` and `mesh_validate()` calls through the core client. Framework-specific behavior remains covered by the offline adapter test matrix above, because those tests assert where each framework boundary calls the shared AgenticDome client and how it handles policy decisions.
+
 ---
 
 ## License

{agenticdome_python_sdk-1.1.1 → agenticdome_python_sdk-1.1.2/agenticdome_python_sdk.egg-info}/PKG-INFO

@@ -1,8 +1,7 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.1.1
-Summary: Official Python SDK for AgentGuard Intelligence Engine and Action Firewall.
-Home-page: https://github.com/agenticdome/agenticdome-python-sdk-python
+Version: 1.1.2
+Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License: Proprietary
 Project-URL: Homepage, https://au.agenticdome.io
@@ -84,9 +83,7 @@ Requires-Dist: ruff>=0.5.0; extra == "dev"
 Requires-Dist: mypy>=1.8.0; extra == "dev"
 Requires-Dist: build>=1.0.0; extra == "dev"
 Requires-Dist: twine>=5.0.0; extra == "dev"
-Dynamic: home-page
 Dynamic: license-file
-Dynamic: requires-python
 
 
 
@@ -3009,8 +3006,6 @@ client.report_incident(
 )
 ```
 
----
-
 ## Prompt Guardrail Example
 
 ```python
@@ -3308,25 +3303,123 @@ from agenticdome_sdk.llamaindex import AgenticDomeLlamaIndexFirewall, FirewallCo
 
 ---
 
-## Package Build
+## Package Build and Verification
 
-For maintainers:
+For maintainers, run the Python SDK release gate from the SDK root:
 
 ```bash
 python3 -m venv .venv
 source .venv/bin/activate
 
-python -m pip install --upgrade pip setuptools wheel build twine pytest
+python -m pip install --upgrade pip setuptools wheel
 python -m pip install -e ".[dev]"
 python -m pip install -e ".[crewai,pydanticai,langgraph,microsoft,foundry,agno,openai-agents,mcp,bedrock,google-adk,llamaindex,redis]"
 
-pytest -q
+python -m pytest -q
+rm -rf build dist *.egg-info agenticdome_sdk.egg-info agenticdome_python_sdk.egg-info
+python -m build
+python -m twine check dist/*
+```
+
+`python -m pytest -q` runs the core SDK tests, package metadata contract tests, and every dependency-light framework adapter test in one go. This is the normal offline full-suite command for all supported Python integrations.
+
+The adapter tests use fake framework/client boundaries where possible so normal CI can verify authorization, delegation-token handling, sanitized tool arguments, output DLP, streaming sanitization, rate limits, and fail-open/fail-closed behavior without requiring live third-party services.
+
+To run one framework at a time, execute the matching test file from the matrix below. For example, `python -m pytest -q tests/test_langgraph_integration.py` runs only the LangGraph/LangChain adapter tests.
+
+### Verification Command Details
+
+Use this focused verification command when you only want release/package checks plus the optional live tenant smoke tests:
+
+```bash
+python -m pytest -q tests/test_packaging_contract.py tests/test_live_tenant.py
+```
+
+What each part does:
+
+| Part | Meaning |
+| :--- | :--- |
+| `python -m pytest` | Runs `pytest` using the current Python environment. |
+| `-q` | Quiet mode. It prints compact test results instead of verbose test names. |
+| `tests/test_packaging_contract.py` | Runs packaging and release-quality checks: `pyproject.toml` metadata, the minimal `setup.py` shim, public imports, `.gitignore`, `MANIFEST.in`, and README verification coverage. |
+| `tests/test_live_tenant.py` | Runs live AgenticDome tenant smoke tests only when explicitly enabled. By default these tests are skipped. |
+
+By default, `tests/test_live_tenant.py` is skipped unless you set:
+
+```bash
+export AGENTICDOME_LIVE_TENANT_TEST=1
+```
+
+For strict live policy validation, also set:
+
+```bash
+export AGENTICDOME_LIVE_EXPECT_STRICT=1
+```
+
+### Framework Test Matrix
+
+| Runtime / integration | Test command | Coverage focus |
+| :--- | :--- | :--- |
+| Core SDK client | `python -m pytest -q tests/test_client.py` | Request validation, headers, guardrail calls, A2A/MCP JSON-RPC calls, Mesh DLP, HTTP errors, and JSON handling. |
+| Package contract | `python -m pytest -q tests/test_packaging_contract.py` | `pyproject.toml` metadata, legacy `setup.py` shim, public exports, manifest hygiene, ignored build artifacts, and documented extras. |
+| CrewAI | `python -m pytest -q tests/test_crewai_integration.py` | Prompt/tool hooks, manager handoff token injection, specialist verification, output redaction, schema checks, rate limits, retries, and streaming DLP. |
+| PydanticAI | `python -m pytest -q tests/test_pydanticai_integration.py` | Agent hooks, secure tools, sanitized arguments, token-store fallback, production session enforcement, rate limits, retries, and streaming output. |
+| LangGraph / LangChain | `python -m pytest -q tests/test_langgraph_integration.py` | Graph input, transition, tool, retrieval, middleware, security routing, token consumption, output DLP, and streaming events. |
+| Microsoft Agent Framework | `python -m pytest -q tests/test_microsoft_agent_framework_integration.py` | Tool/run boundaries, delegated tool verification, middleware install helpers, identity context, Copilot enforcement hooks, and streaming output. |
+| Microsoft AI Foundry | `python -m pytest -q tests/test_microsoft_ai_foundry_integration.py` | Prompt threat contracts, local tool executors, run boundaries, bearer/API-key configuration, delegated execution, circuit breaker, and stream DLP. |
+| OpenAI Agents SDK | `python -m pytest -q tests/test_openai_agents_integration.py` | Runner wrappers, guardrail helpers, function-tool wrappers, handoff/delegated tools, HMAC token storage, schema checks, retries, and streaming output. |
+| Agno | `python -m pytest -q tests/test_agno_integration.py` | Agent/team hooks, tool hooks, middleware/plugin helpers, delegated specialist execution, retrieved text sanitization, schema checks, and stream DLP. |
+| MCP host / gateway | `python -m pytest -q tests/test_mcp_host_integration.py` | JSON-RPC preflight, tool/resource/prompt authorization, private metadata stripping, delegated token verification, response filtering, and forwarder DLP. |
+| AWS Bedrock | `python -m pytest -q tests/test_aws_bedrock_integration.py` | Converse/InvokeModel wrappers, Bedrock Agents streams, action-group Lambda wrappers, retrieval DLP, tool authorization, handoff tokens, and retries. |
+| Google ADK | `python -m pytest -q tests/test_google_adk_integration.py` | Model/tool callbacks, plugin helpers, secure tools, delegated execution, sanitized args, production sessions, rate limits, retries, and stream DLP. |
+| LlamaIndex | `python -m pytest -q tests/test_llamaindex_integration.py` | FunctionTool/query/retrieval wrappers, callback handlers, secure tools, delegated execution, fail-open behavior, and output DLP. |
+
+For a single-framework development loop, install only the extra and run the matching test file, for example:
+
+```bash
+python -m pip install -e ".[langgraph]"
+python -m pytest -q tests/test_langgraph_integration.py
+```
+
+### Release Gates
 
+For metadata and artifact validation only:
+
+```bash
+python -m pytest -q tests/test_packaging_contract.py
 rm -rf build dist *.egg-info agenticdome_sdk.egg-info agenticdome_python_sdk.egg-info
 python -m build
 python -m twine check dist/*
 ```
 
+For a full offline release gate across all supported Python integrations:
+
+```bash
+python -m pip install -e ".[dev,crewai,pydanticai,langgraph,microsoft,foundry,agno,openai-agents,mcp,bedrock,google-adk,llamaindex,redis]"
+python -m pytest -q
+rm -rf build dist *.egg-info agenticdome_sdk.egg-info agenticdome_python_sdk.egg-info
+python -m build
+python -m twine check dist/*
+```
+
+For a release gate against a real AgenticDome tenant:
+
+```bash
+export AGENTICDOME_API_BASE="https://www.agenticdome.io"
+export AGENTICDOME_TENANT_ID="<tenant_id>"
+export AGENTICDOME_API_KEY="<tenant_api_key>"
+export AGENTICDOME_LIVE_TENANT_TEST=1
+python -m pytest -q tests/test_live_tenant.py
+```
+
+For strict security-policy validation, add:
+
+```bash
+export AGENTICDOME_LIVE_EXPECT_STRICT=1
+```
+
+The live tenant test performs real `guardrail_validate()` and `mesh_validate()` calls through the core client. Framework-specific behavior remains covered by the offline adapter test matrix above, because those tests assert where each framework boundary calls the shared AgenticDome client and how it handles policy decisions.
+
 ---
 
 ## License

{agenticdome_python_sdk-1.1.1 → agenticdome_python_sdk-1.1.2}/agenticdome_python_sdk.egg-info/SOURCES.txt

@@ -38,9 +38,11 @@ tests/test_client.py
 tests/test_crewai_integration.py
 tests/test_google_adk_integration.py
 tests/test_langgraph_integration.py
+tests/test_live_tenant.py
 tests/test_llamaindex_integration.py
 tests/test_mcp_host_integration.py
 tests/test_microsoft_agent_framework_integration.py
 tests/test_microsoft_ai_foundry_integration.py
 tests/test_openai_agents_integration.py
+tests/test_packaging_contract.py
 tests/test_pydanticai_integration.py

agenticdome_python_sdk-1.1.2/agenticdome_sdk/__init__.py

@@ -0,0 +1,10 @@
+from .client import AgentGuardClient, AgentGuardError, AgentGuardHTTPError
+
+GuardrailClient = AgentGuardClient
+
+__all__ = [
+    "AgentGuardClient",
+    "GuardrailClient",
+    "AgentGuardError",
+    "AgentGuardHTTPError",
+]

{agenticdome_python_sdk-1.1.1 → agenticdome_python_sdk-1.1.2}/agenticdome_sdk/client.py

@@ -1,6 +1,6 @@
 import base64
 import os
-from typing import Optional, Dict, List, Any, Union
+from typing import Optional, Dict, List, Any, Tuple, Union
 
 import requests
 from requests.adapters import HTTPAdapter
@@ -51,6 +51,10 @@ class AgentGuardClient:
         timeout: int = 20,
         user_agent: str = "agenticdome-python-sdk/0.4.0",
         max_retries: int = 3,
+        connect_timeout: Optional[float] = None,
+        pool_connections: int = 20,
+        pool_maxsize: int = 100,
+        pool_block: bool = False,
     ):
         self.api_base = self._require_nonempty("api_base", api_base).rstrip("/")
         self.api_key = self._require_nonempty(
@@ -66,6 +70,11 @@ class AgentGuardClient:
             or os.getenv("AGENTICDOME_BEARER_TOKEN")
         )
         self.timeout = timeout
+        self.connect_timeout = self._positive_float(
+            "connect_timeout",
+            connect_timeout if connect_timeout is not None else os.getenv("AGENTICDOME_CONNECT_TIMEOUT_S", "5"),
+            default=5.0,
+        )
         self.user_agent = user_agent
 
         self.session = requests.Session()
@@ -77,7 +86,12 @@ class AgentGuardClient:
             status_forcelist=(429, 500, 502, 503, 504),
             allowed_methods=frozenset(["GET", "POST", "PUT", "PATCH", "DELETE"]),
         )
-        adapter = HTTPAdapter(max_retries=retry)
+        adapter = HTTPAdapter(
+            max_retries=retry,
+            pool_connections=max(1, int(pool_connections)),
+            pool_maxsize=max(1, int(pool_maxsize)),
+            pool_block=bool(pool_block),
+        )
         self.session.mount("http://", adapter)
         self.session.mount("https://", adapter)
 
@@ -136,6 +150,22 @@ class AgentGuardClient:
         s = str(value).strip()
         return s or None
 
+    def _positive_float(self, name: str, value: Any, *, default: float) -> float:
+        try:
+            parsed = float(value)
+        except Exception:
+            parsed = default
+        if parsed <= 0:
+            parsed = default
+        return parsed
+
+    def _timeout_tuple(self, timeout: Optional[Union[int, float, Tuple[float, float]]]) -> Union[float, Tuple[float, float]]:
+        if isinstance(timeout, tuple):
+            return timeout
+        read_timeout = self._positive_float("timeout", timeout if timeout is not None else self.timeout, default=float(self.timeout or 20))
+        connect_timeout = min(self.connect_timeout, read_timeout)
+        return (connect_timeout, read_timeout)
+
     def _normalize_direction(self, direction: Optional[str]) -> str:
         """
         Normalize common direction synonyms to the canonical values expected by the API.
@@ -239,7 +269,7 @@ class AgentGuardClient:
         tenant_id: Optional[Union[str, int]] = None,
         use_bearer: bool = False,
         extra_headers: Optional[Dict[str, str]] = None,
-        timeout: Optional[int] = None,
+        timeout: Optional[Union[int, float, Tuple[float, float]]] = None,
     ) -> Dict[str, Any]:
         url = f"{self.api_base}{path}"
         headers = self._headers(
@@ -253,7 +283,7 @@ class AgentGuardClient:
             url=url,
             headers=headers,
             json=json_body,
-            timeout=timeout or self.timeout,
+            timeout=self._timeout_tuple(timeout),
         )
 
         if not response.ok:
@@ -647,16 +677,20 @@ class AgentGuardClient:
     def reset_trust_score(
         self,
         agent_id: str,
-        admin_secret: str,
+        admin_secret: Optional[str] = None,
         tenant_id: Optional[Union[str, int]] = None,
         is_agent: bool = True,
+        service_token: Optional[str] = None,
     ) -> Dict[str, Any]:
+        token = service_token or admin_secret or os.getenv("AGENTICDOME_SERVICE_TOKEN") or os.getenv("SERVICE_SECRET")
+        if not token:
+            raise ValueError("reset_trust_score requires service_token or AGENTICDOME_SERVICE_TOKEN")
         path = f"/trust/reset/{agent_id}?is_agent={'true' if is_agent else 'false'}"
         return self._request(
             "POST",
             path,
             tenant_id=tenant_id,
-            extra_headers={"X-Admin-Secret": admin_secret},
+            extra_headers={"X-Service-Token": token},
         )
 
     # ------------------------------------------------------------------
@@ -1060,7 +1094,7 @@ class AgentGuardClient:
         payload: Dict[str, Any],
         *,
         api_version: str = "2025-09-01",
-        timeout: Optional[int] = None,
+        timeout: Optional[Union[int, float, Tuple[float, float]]] = None,
     ) -> Dict[str, Any]:
         return self._request(
             "POST",
@@ -1075,7 +1109,7 @@ class AgentGuardClient:
         payload: Dict[str, Any],
         *,
         api_version: str = "2025-09-01",
-        timeout: Optional[int] = None,
+        timeout: Optional[Union[int, float, Tuple[float, float]]] = None,
     ) -> Dict[str, Any]:
         return self._request(
             "POST",

{agenticdome_python_sdk-1.1.1 → agenticdome_python_sdk-1.1.2}/agenticdome_sdk/crewai.py

@@ -25,6 +25,19 @@ except Exception as exc:  # pragma: no cover
         "Install with: pip install 'agenticdome-python-sdk[crewai]'"
     ) from exc
 
+
+
+def _preserve_hook_function(register: Callable[[Callable[..., Any]], Any]) -> Callable[[Callable[..., Any]], Callable[..., Any]]:
+    def decorator(fn: Callable[..., Any]) -> Callable[..., Any]:
+        registered = register(fn)
+        return fn if registered is None else registered
+    return decorator
+
+
+register_after_tool_call_hook = _preserve_hook_function(register_after_tool_call_hook)
+register_before_llm_call_hook = _preserve_hook_function(register_before_llm_call_hook)
+register_before_tool_call_hook = _preserve_hook_function(register_before_tool_call_hook)
+
 from agenticdome_sdk.client import AgentGuardClient
 
 try:

{agenticdome_python_sdk-1.1.1 → agenticdome_python_sdk-1.1.2}/pyproject.toml

@@ -4,8 +4,8 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agenticdome-python-sdk"
-version = "1.1.1"
-description = "Official Python SDK for AgentGuard Intelligence Engine and Action Firewall."
+version = "1.1.2"
+description = "Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement."
 readme = "README.md"
 requires-python = ">=3.9"
 license = { text = "Proprietary" }

agenticdome_python_sdk-1.1.2/setup.py

@@ -0,0 +1,7 @@
+from setuptools import setup
+
+
+# Packaging metadata lives in pyproject.toml. Keep this shim for legacy
+# tooling that still invokes setup.py directly without duplicating release
+# metadata, dependency declarations, classifiers, or repository URLs.
+setup()

agenticdome_python_sdk-1.1.2/tests/test_live_tenant.py

@@ -0,0 +1,67 @@
+import os
+
+import pytest
+
+from agenticdome_sdk.client import AgentGuardClient
+
+
+pytestmark = pytest.mark.skipif(
+    os.getenv("AGENTICDOME_LIVE_TENANT_TEST") != "1",
+    reason="Set AGENTICDOME_LIVE_TENANT_TEST=1 with real tenant credentials to run live checks.",
+)
+
+
+def live_client():
+    return AgentGuardClient(
+        api_base=os.getenv("AGENTICDOME_API_BASE", "").rstrip("/"),
+        api_key=os.getenv("AGENTICDOME_API_KEY", ""),
+        tenant_id=os.getenv("AGENTICDOME_TENANT_ID", ""),
+        timeout=20,
+        max_retries=1,
+    )
+
+
+def verdict_from(response):
+    if "verdict" in response:
+        return str(response.get("verdict") or "").upper()
+    result = response.get("result") if isinstance(response, dict) else None
+    if isinstance(result, dict):
+        return str(result.get("verdict") or "").upper()
+    return ""
+
+
+def test_live_guardrail_allows_benign_prompt():
+    client = live_client()
+
+    response = client.guardrail_validate(
+        text="Summarize the public product documentation for a customer support agent.",
+        agent_id="python-sdk-live-smoke",
+        direction="inbound",
+        platform="python",
+        session_id="python-sdk-live-smoke-session",
+        policy_context={"test_case": "benign_prompt"},
+    )
+
+    verdict = verdict_from(response)
+    assert verdict not in {"BLOCKED", "DENIED"}, response
+
+
+def test_live_mesh_sanitizes_or_allows_output():
+    client = live_client()
+
+    response = client.mesh_validate(
+        text="Support response for alice@example.com with token=sk_live_example1234567890",
+        agent_id="python-sdk-live-smoke",
+        direction="output",
+        platform="python",
+        session_id="python-sdk-live-smoke-session",
+        redact_pii=True,
+        redact_secrets=True,
+        policy_context={"test_case": "mesh_output"},
+    )
+
+    verdict = verdict_from(response)
+    assert verdict in {"", "ALLOWED", "REDACTED", "BLOCKED", "DENIED"}, response
+
+    if os.getenv("AGENTICDOME_LIVE_EXPECT_STRICT") == "1":
+        assert verdict in {"REDACTED", "BLOCKED", "DENIED"}, response

agenticdome_python_sdk-1.1.2/tests/test_packaging_contract.py

@@ -0,0 +1,128 @@
+import ast
+import importlib.metadata
+import pathlib
+import pytest
+
+try:
+    import tomllib
+except ModuleNotFoundError:  # pragma: no cover - Python < 3.11 fallback for local dev only
+    tomllib = None
+
+
+ROOT = pathlib.Path(__file__).resolve().parents[1]
+
+
+def load_pyproject():
+    if tomllib is None:
+        pytest.skip("tomllib is unavailable on this Python runtime")
+    return tomllib.loads((ROOT / "pyproject.toml").read_text(encoding="utf-8"))
+
+
+def test_pyproject_is_the_single_packaging_metadata_source():
+    project = load_pyproject()["project"]
+    setup_py = (ROOT / "setup.py").read_text(encoding="utf-8")
+
+    assert project["name"] == "agenticdome-python-sdk"
+    assert project["version"] == "1.1.1"
+    assert "AgenticDome" in project["description"]
+    assert "AgentGuard Intelligence Engine" not in project["description"]
+
+    tree = ast.parse(setup_py)
+    setup_calls = [
+        node
+        for node in ast.walk(tree)
+        if isinstance(node, ast.Call) and getattr(node.func, "id", "") == "setup"
+    ]
+    assert len(setup_calls) == 1
+    assert setup_calls[0].keywords == []
+    assert "version=" not in setup_py
+    assert "install_requires" not in setup_py
+
+
+def test_distribution_metadata_matches_pyproject_when_installed():
+    project = load_pyproject()["project"]
+
+    try:
+        installed = importlib.metadata.metadata(project["name"])
+    except importlib.metadata.PackageNotFoundError:
+        pytest.skip("agenticdome-python-sdk is not installed in this environment")
+
+    assert installed["Name"] == project["name"]
+    assert installed["Version"] == project["version"]
+
+
+def test_public_package_exports_are_importable():
+    from agenticdome_sdk import (
+        AgentGuardClient,
+        AgentGuardError,
+        AgentGuardHTTPError,
+        GuardrailClient,
+    )
+
+    assert GuardrailClient is AgentGuardClient
+    assert issubclass(AgentGuardHTTPError, AgentGuardError)
+
+
+def test_manifest_and_ignore_files_keep_release_artifacts_out_of_source_contract():
+    manifest = (ROOT / "MANIFEST.in").read_text(encoding="utf-8")
+    gitignore = (ROOT / ".gitignore").read_text(encoding="utf-8")
+
+    for required in ["include README.md", "include LICENSE", "include pyproject.toml", "include setup.py"]:
+        assert required in manifest
+
+    for ignored in ["build/", "dist/", "*.egg-info/", "__pycache__/", ".pytest_cache/"]:
+        assert ignored in gitignore
+
+    forbidden_manifest_entries = ["recursive-include build", "recursive-include dist", "recursive-include *.egg-info"]
+    for forbidden in forbidden_manifest_entries:
+        assert forbidden not in manifest
+
+
+def test_project_extras_cover_documented_frameworks():
+    project = load_pyproject()["project"]
+    extras = project["optional-dependencies"]
+
+    expected = {
+        "crewai",
+        "redis",
+        "pydanticai",
+        "langgraph",
+        "microsoft",
+        "foundry",
+        "agno",
+        "openai-agents",
+        "mcp",
+        "bedrock",
+        "llamaindex",
+        "google-adk",
+        "all",
+        "dev",
+    }
+    assert expected.issubset(extras)
+    assert "pytest>=8.0.0" in extras["dev"]
+    assert "build>=1.0.0" in extras["dev"]
+
+def test_readme_documents_framework_verification_matrix():
+    readme = (ROOT / "README.md").read_text(encoding="utf-8")
+
+    assert "## Package Build and Verification" in readme
+    assert "### Framework Test Matrix" in readme
+    assert "tests/test_live_tenant.py" in readme
+
+    for test_file in [
+        "tests/test_client.py",
+        "tests/test_packaging_contract.py",
+        "tests/test_crewai_integration.py",
+        "tests/test_pydanticai_integration.py",
+        "tests/test_langgraph_integration.py",
+        "tests/test_microsoft_agent_framework_integration.py",
+        "tests/test_microsoft_ai_foundry_integration.py",
+        "tests/test_openai_agents_integration.py",
+        "tests/test_agno_integration.py",
+        "tests/test_mcp_host_integration.py",
+        "tests/test_aws_bedrock_integration.py",
+        "tests/test_google_adk_integration.py",
+        "tests/test_llamaindex_integration.py",
+    ]:
+        assert test_file in readme
+

agenticdome_python_sdk-1.1.1/agenticdome_sdk/__init__.py

@@ -1,26 +0,0 @@
-from .client import AgentGuardClient
-
-try:
-    from .client import GuardrailClient
-except Exception:
-    GuardrailClient = AgentGuardClient
-
-try:
-    from .exceptions import AgentGuardError, AgentGuardHTTPError
-except Exception:
-    try:
-        from .client import AgentGuardError, AgentGuardHTTPError
-    except Exception:
-        class AgentGuardError(Exception):
-            pass
-
-        class AgentGuardHTTPError(AgentGuardError):
-            pass
-
-
-__all__ = [
-    "AgentGuardClient",
-    "GuardrailClient",
-    "AgentGuardError",
-    "AgentGuardHTTPError",
-]

agenticdome_python_sdk-1.1.1/setup.py

@@ -1,128 +0,0 @@
-from pathlib import Path
-
-from setuptools import find_packages, setup
-
-
-ROOT = Path(__file__).parent
-README = ROOT / "README.md"
-
-setup(
-    name="agenticdome-python-sdk",
-    version="1.1.1",
-    description="Python SDK for AgenticDome AI security, guardrails, A2A, MCP, CrewAI, and enterprise agent governance APIs.",
-    long_description=README.read_text(encoding="utf-8") if README.exists() else "",
-    long_description_content_type="text/markdown",
-    author="AgenticDome",
-    license="Proprietary",
-    url="https://github.com/agenticdome/agenticdome-python-sdk-python",
-    project_urls={
-        "Homepage": "https://github.com/agenticdome/agenticdome-python-sdk-python",
-        "Source": "https://github.com/agenticdome/agenticdome-python-sdk-python",
-        "Issues": "https://github.com/agenticdome/agenticdome-python-sdk-python/issues",
-        "Console": "https://au.agenticdome.io",
-    },
-    packages=find_packages(include=["agenticdome_sdk", "agenticdome_sdk.*"]),
-    python_requires=">=3.9",
-    install_requires=[
-        "requests>=2.28.0",
-    ],
-    extras_require={
-        "crewai": [
-            "crewai",
-        ],
-        "redis": [
-            "redis>=4.5.0",
-        ],
-        "pydanticai": [
-            "pydantic-ai",
-            "anyio>=4.0.0",
-        ],
-        "pydantic": [
-            "pydantic-ai",
-            "anyio>=4.0.0",
-        ],
-        "langgraph": [
-            "langgraph",
-            "langchain-core",
-            "anyio>=4.0.0",
-        ],
-        "microsoft": [],
-        "foundry": [
-            "azure-ai-projects",
-            "azure-identity",
-        ],
-        "agno": [
-            "agno",
-        ],
-        "openai-agents": [
-            "openai-agents",
-        ],
-        "mcp": [
-            "mcp",
-        ],
-        "bedrock": [
-            "boto3",
-        ],
-        "aws-bedrock": [
-            "boto3",
-        ],
-        "llamaindex": [
-            "llama-index",
-        ],
-        "llama-index": [
-            "llama-index",
-        ],
-        "google-adk": [
-            "google-adk",
-        ],
-        "adk": [
-            "google-adk",
-        ],
-        "all": [
-            "crewai",
-            "redis>=4.5.0",
-            "pydantic-ai",
-            "anyio>=4.0.0",
-            "langgraph",
-            "langchain-core",
-            "agno",
-            "azure-ai-projects",
-            "azure-identity",
-            "openai-agents",
-            "mcp",
-            "boto3",
-            "llama-index",
-            "google-adk",
-        ],
-        "dev": [
-            "build",
-            "twine",
-            "pytest",
-            "ruff",
-        ],
-    },
-    classifiers=[
-        "Development Status :: 4 - Beta",
-        "Intended Audience :: Developers",
-        "Intended Audience :: Information Technology",
-        "Topic :: Security",
-        "Topic :: Software Development :: Libraries :: Python Modules",
-        "Topic :: Scientific/Engineering :: Artificial Intelligence",
-        "License :: Other/Proprietary License",
-        "Programming Language :: Python :: 3",
-        "Programming Language :: Python :: 3.9",
-        "Programming Language :: Python :: 3.10",
-        "Programming Language :: Python :: 3.11",
-        "Programming Language :: Python :: 3.12",
-    ],
-    keywords=[
-        "agenticdome",
-        "agentguard",
-        "ai-security",
-        "guardrails",
-        "crewai",
-        "mcp",
-        "a2a",
-        "llm-security",
-    ],
-)