agenticdome-python-sdk 1.2.18__tar.gz → 1.2.19__tar.gz

{agenticdome_python_sdk-1.2.18 → agenticdome_python_sdk-1.2.19}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.18
+Version: 1.2.19
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -38,14 +38,14 @@ Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
 Requires-Dist: cryptography>=42.0.0; extra == "pop"
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai<=2.31.0,>=2.16.0; extra == "pydanticai"
+Requires-Dist: pydantic-ai<=2.31.1,>=2.16.0; extra == "pydanticai"
 Requires-Dist: anyio>=4.0.0; extra == "pydanticai"
 Provides-Extra: pydantic
-Requires-Dist: pydantic-ai<=2.31.0,>=2.16.0; extra == "pydantic"
+Requires-Dist: pydantic-ai<=2.31.1,>=2.16.0; extra == "pydantic"
 Requires-Dist: anyio>=4.0.0; extra == "pydantic"
 Provides-Extra: langgraph
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "langgraph"
-Requires-Dist: langchain-core<=1.5.5,>=1.5.0; extra == "langgraph"
+Requires-Dist: langchain-core<=1.5.6,>=1.5.0; extra == "langgraph"
 Requires-Dist: langchain-openai==1.3.5; extra == "langgraph"
 Requires-Dist: anyio>=4.0.0; extra == "langgraph"
 Provides-Extra: microsoft
@@ -59,21 +59,21 @@ Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
 Requires-Dist: agno<=2.9.0,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
-Requires-Dist: openai-agents<=0.21.0,>=0.18.3; extra == "openai-agents"
+Requires-Dist: openai-agents<=0.21.1,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
 Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.72,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.73,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.72,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.73,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
 Requires-Dist: llama-index==0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
 Requires-Dist: llama-index==0.14.23; extra == "llama-index"
 Provides-Extra: google-adk
-Requires-Dist: google-adk<=2.7.0,>=2.5.0; extra == "google-adk"
+Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "google-adk"
 Provides-Extra: adk
-Requires-Dist: google-adk<=2.7.0,>=2.5.0; extra == "adk"
+Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "adk"
 Provides-Extra: claude
 Requires-Dist: claude-agent-sdk<=0.2.139,>=0.2.126; extra == "claude"
 Provides-Extra: claude-agent-sdk
@@ -84,20 +84,20 @@ Provides-Extra: all
 Requires-Dist: crewai<=1.15.16,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
-Requires-Dist: pydantic-ai<=2.31.0,>=2.16.0; extra == "all"
+Requires-Dist: pydantic-ai<=2.31.1,>=2.16.0; extra == "all"
 Requires-Dist: anyio>=4.0.0; extra == "all"
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "all"
-Requires-Dist: langchain-core<=1.5.5,>=1.5.0; extra == "all"
+Requires-Dist: langchain-core<=1.5.6,>=1.5.0; extra == "all"
 Requires-Dist: langchain-openai==1.3.5; extra == "all"
 Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
 Requires-Dist: agno<=2.9.0,>=2.8.0; extra == "all"
 Requires-Dist: azure-ai-projects<=2.4.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
-Requires-Dist: openai-agents<=0.21.0,>=0.18.3; extra == "all"
+Requires-Dist: openai-agents<=0.21.1,>=0.18.3; extra == "all"
 Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.72,>=1.43.54; extra == "all"
+Requires-Dist: boto3<=1.43.73,>=1.43.54; extra == "all"
 Requires-Dist: llama-index==0.14.23; extra == "all"
-Requires-Dist: google-adk<=2.7.0,>=2.5.0; extra == "all"
+Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "all"
 Requires-Dist: claude-agent-sdk<=0.2.139,>=0.2.126; extra == "all"
 Requires-Dist: smolagents==1.26.0; extra == "all"
 Provides-Extra: dev

{agenticdome_python_sdk-1.2.18 → agenticdome_python_sdk-1.2.19}/agenticdome_python_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.18
+Version: 1.2.19
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -38,14 +38,14 @@ Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
 Requires-Dist: cryptography>=42.0.0; extra == "pop"
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai<=2.31.0,>=2.16.0; extra == "pydanticai"
+Requires-Dist: pydantic-ai<=2.31.1,>=2.16.0; extra == "pydanticai"
 Requires-Dist: anyio>=4.0.0; extra == "pydanticai"
 Provides-Extra: pydantic
-Requires-Dist: pydantic-ai<=2.31.0,>=2.16.0; extra == "pydantic"
+Requires-Dist: pydantic-ai<=2.31.1,>=2.16.0; extra == "pydantic"
 Requires-Dist: anyio>=4.0.0; extra == "pydantic"
 Provides-Extra: langgraph
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "langgraph"
-Requires-Dist: langchain-core<=1.5.5,>=1.5.0; extra == "langgraph"
+Requires-Dist: langchain-core<=1.5.6,>=1.5.0; extra == "langgraph"
 Requires-Dist: langchain-openai==1.3.5; extra == "langgraph"
 Requires-Dist: anyio>=4.0.0; extra == "langgraph"
 Provides-Extra: microsoft
@@ -59,21 +59,21 @@ Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
 Requires-Dist: agno<=2.9.0,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
-Requires-Dist: openai-agents<=0.21.0,>=0.18.3; extra == "openai-agents"
+Requires-Dist: openai-agents<=0.21.1,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
 Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.72,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.73,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.72,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.73,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
 Requires-Dist: llama-index==0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
 Requires-Dist: llama-index==0.14.23; extra == "llama-index"
 Provides-Extra: google-adk
-Requires-Dist: google-adk<=2.7.0,>=2.5.0; extra == "google-adk"
+Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "google-adk"
 Provides-Extra: adk
-Requires-Dist: google-adk<=2.7.0,>=2.5.0; extra == "adk"
+Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "adk"
 Provides-Extra: claude
 Requires-Dist: claude-agent-sdk<=0.2.139,>=0.2.126; extra == "claude"
 Provides-Extra: claude-agent-sdk
@@ -84,20 +84,20 @@ Provides-Extra: all
 Requires-Dist: crewai<=1.15.16,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
-Requires-Dist: pydantic-ai<=2.31.0,>=2.16.0; extra == "all"
+Requires-Dist: pydantic-ai<=2.31.1,>=2.16.0; extra == "all"
 Requires-Dist: anyio>=4.0.0; extra == "all"
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "all"
-Requires-Dist: langchain-core<=1.5.5,>=1.5.0; extra == "all"
+Requires-Dist: langchain-core<=1.5.6,>=1.5.0; extra == "all"
 Requires-Dist: langchain-openai==1.3.5; extra == "all"
 Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
 Requires-Dist: agno<=2.9.0,>=2.8.0; extra == "all"
 Requires-Dist: azure-ai-projects<=2.4.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
-Requires-Dist: openai-agents<=0.21.0,>=0.18.3; extra == "all"
+Requires-Dist: openai-agents<=0.21.1,>=0.18.3; extra == "all"
 Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.72,>=1.43.54; extra == "all"
+Requires-Dist: boto3<=1.43.73,>=1.43.54; extra == "all"
 Requires-Dist: llama-index==0.14.23; extra == "all"
-Requires-Dist: google-adk<=2.7.0,>=2.5.0; extra == "all"
+Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "all"
 Requires-Dist: claude-agent-sdk<=0.2.139,>=0.2.126; extra == "all"
 Requires-Dist: smolagents==1.26.0; extra == "all"
 Provides-Extra: dev

{agenticdome_python_sdk-1.2.18 → agenticdome_python_sdk-1.2.19}/agenticdome_python_sdk.egg-info/requires.txt

@@ -2,7 +2,7 @@ requests>=2.31.0
 urllib3>=2.0.0
 
 [adk]
-google-adk<=2.7.0,>=2.5.0
+google-adk<=2.7.1,>=2.5.0
 
 [agno]
 agno<=2.9.0,>=2.8.0
@@ -11,20 +11,20 @@ agno<=2.9.0,>=2.8.0
 crewai<=1.15.16,>=1.15.5
 redis>=4.5.0
 cryptography>=42.0.0
-pydantic-ai<=2.31.0,>=2.16.0
+pydantic-ai<=2.31.1,>=2.16.0
 anyio>=4.0.0
 langgraph<=1.2.11,>=1.2.9
-langchain-core<=1.5.5,>=1.5.0
+langchain-core<=1.5.6,>=1.5.0
 langchain-openai==1.3.5
 autogen-agentchat==0.7.5
 agno<=2.9.0,>=2.8.0
 azure-ai-projects<=2.4.0,>=2.3.0
 azure-identity==1.25.3
-openai-agents<=0.21.0,>=0.18.3
+openai-agents<=0.21.1,>=0.18.3
 mcp<=1.28.1,>=1.26.0
-boto3<=1.43.72,>=1.43.54
+boto3<=1.43.73,>=1.43.54
 llama-index==0.14.23
-google-adk<=2.7.0,>=2.5.0
+google-adk<=2.7.1,>=2.5.0
 claude-agent-sdk<=0.2.139,>=0.2.126
 smolagents==1.26.0
 
@@ -32,10 +32,10 @@ smolagents==1.26.0
 autogen-agentchat==0.7.5
 
 [aws-bedrock]
-boto3<=1.43.72,>=1.43.54
+boto3<=1.43.73,>=1.43.54
 
 [bedrock]
-boto3<=1.43.72,>=1.43.54
+boto3<=1.43.73,>=1.43.54
 
 [claude]
 claude-agent-sdk<=0.2.139,>=0.2.126
@@ -62,11 +62,11 @@ azure-ai-projects<=2.4.0,>=2.3.0
 azure-identity==1.25.3
 
 [google-adk]
-google-adk<=2.7.0,>=2.5.0
+google-adk<=2.7.1,>=2.5.0
 
 [langgraph]
 langgraph<=1.2.11,>=1.2.9
-langchain-core<=1.5.5,>=1.5.0
+langchain-core<=1.5.6,>=1.5.0
 langchain-openai==1.3.5
 anyio>=4.0.0
 
@@ -85,17 +85,17 @@ mcp<=1.28.1,>=1.26.0
 autogen-agentchat==0.7.5
 
 [openai-agents]
-openai-agents<=0.21.0,>=0.18.3
+openai-agents<=0.21.1,>=0.18.3
 
 [pop]
 cryptography>=42.0.0
 
 [pydantic]
-pydantic-ai<=2.31.0,>=2.16.0
+pydantic-ai<=2.31.1,>=2.16.0
 anyio>=4.0.0
 
 [pydanticai]
-pydantic-ai<=2.31.0,>=2.16.0
+pydantic-ai<=2.31.1,>=2.16.0
 anyio>=4.0.0
 
 [redis]

{agenticdome_python_sdk-1.2.18 → agenticdome_python_sdk-1.2.19}/agenticdome_sdk/onboarding_cli.py

@@ -9,6 +9,7 @@ from __future__ import annotations
 import argparse
 import difflib
 import hashlib
+import importlib.metadata
 import json
 import os
 import re
@@ -28,8 +29,22 @@ IGNORED_DIRECTORIES = {
     ".git", ".hg", ".svn", ".idea", ".vscode", ".tox", ".venv", "venv",
     "node_modules", "dist", "build", "coverage", "__pycache__", ".mypy_cache",
     ".pytest_cache", ".ruff_cache", ".next", ".agenticdome", ".harness_runtime",
+    "tests", "test", "__tests__", "spec",
 }
 TEXT_SUFFIXES = {".py", ".pyi", ".js", ".jsx", ".ts", ".tsx", ".json", ".toml", ".txt", ".yaml", ".yml"}
+SENSITIVE_FILE_PATTERN = re.compile(
+    r"(^|[._-])(secret|secrets|credential|credentials|password|passwords|token|tokens|"
+    r"private[_-]?key|private[_-]?keys|api[_-]?key|api[_-]?keys)([._-]|$)",
+    re.I,
+)
+SENSITIVE_FILE_SUFFIXES = {".key", ".pem", ".p12", ".pfx", ".jks", ".keystore"}
+
+
+def _installed_sdk_version() -> str:
+    try:
+        return importlib.metadata.version("agenticdome-python-sdk")
+    except importlib.metadata.PackageNotFoundError:
+        return "source-checkout"
 
 FRAMEWORK_MARKERS: Dict[str, Tuple[str, ...]] = {
     "crewai": ("crewai",),
@@ -44,7 +59,9 @@ FRAMEWORK_MARKERS: Dict[str, Tuple[str, ...]] = {
     "agno": ("agno",),
     "google-adk": ("google.adk", "google-adk"),
     "llamaindex": ("llama_index", "llama-index"),
-    "bedrock": ("bedrock-agent", "boto3", "bedrock-runtime"),
+    # boto3 alone is not evidence of Bedrock: many Python services install it
+    # only for S3, SES, DynamoDB or other AWS APIs.
+    "bedrock": ("bedrock-agent", "bedrock-runtime", "agenticdome_sdk.aws_bedrock"),
     "mcp": ("from mcp", "import mcp", "@modelcontextprotocol", "model-context-protocol"),
     "openclaw": ("openclaw", "agenticdome-openclaw-security"),
     "custom-python": ("fastapi", "django", "flask", "celery"),
@@ -52,11 +69,12 @@ FRAMEWORK_MARKERS: Dict[str, Tuple[str, ...]] = {
 
 BOUNDARY_PATTERNS: Dict[str, Tuple[re.Pattern[str], ...]] = {
     "prompt_ingress": (
-        re.compile(r"\b(prompt|user_input|user_message|messages?)\b", re.I),
+        re.compile(r"\b(screen_input|validate_input|screen_prompt|guard_prompt)\s*\(", re.I),
+        re.compile(r"\b(user_input|user_query|user_message)\s*(?::[^=]+)?=", re.I),
         re.compile(r"@(app|router)\.(post|put|patch)\b", re.I),
     ),
     "tool_execution": (
-        re.compile(r"\b(call_tool|invoke_tool|execute_tool|run_tool|tools/call|function_tool)\b", re.I),
+        re.compile(r"\b(call_tool|invoke_tool|execute_tool|run_tool|tools/call|function_tool|authorize_tool_call)\b", re.I),
         re.compile(r"\b(authorize_tool|policy\.authorize|tool_registry\.dispatch|gateway\.execute)\s*\(", re.I),
         re.compile(r"\.dispatch\s*\(.*\btool_name\s*=", re.I),
         re.compile(r"(^|\s)@tool\b", re.I),
@@ -68,11 +86,36 @@ BOUNDARY_PATTERNS: Dict[str, Tuple[re.Pattern[str], ...]] = {
         re.compile(r"\b(retrieve|retriever|vectorstore|query_engine|knowledge_base)\b", re.I),
     ),
     "output_egress": (
-        re.compile(r"\b(stream|streaming|final_output|tool_result|response_model)\b", re.I),
+        re.compile(
+            r"\b(sanitize_output|sanitize_streaming_response|sanitize_streaming_events|"
+            r"mesh_validate|review_output|output_guardrails|_sanitize_agent_result)\s*\(",
+            re.I,
+        ),
+        re.compile(r"\b(final_output|tool_result)\s*(?::[^=]+)?=", re.I),
+        re.compile(r"\bresponse_model\s*=", re.I),
     ),
 }
 
 
+def _is_sensitive_file(path: Path) -> bool:
+    name = path.name.lower()
+    return (
+        name == ".env"
+        or name.startswith(".env.")
+        or path.suffix.lower() in SENSITIVE_FILE_SUFFIXES
+        or bool(SENSITIVE_FILE_PATTERN.search(name))
+    )
+
+
+def _is_backup_file(path: Path) -> bool:
+    name = path.name.lower()
+    stem = path.stem.lower()
+    return (
+        name.endswith(("~", ".bak", ".orig", ".rej"))
+        or stem.endswith(("_copy", "-copy", "_backup", "-backup"))
+    )
+
+
 def _relative(path: Path, root: Path) -> str:
     try:
         return path.resolve().relative_to(root.resolve()).as_posix()
@@ -88,8 +131,9 @@ def _candidate_files(root: Path) -> Iterable[Path]:
             if count >= MAX_FILES:
                 return
             path = Path(current) / name
-            lowered_name = name.lower()
-            sensitive_name = lowered_name == ".env" or "secret" in lowered_name or "credential" in lowered_name
+            if _is_backup_file(path):
+                continue
+            sensitive_name = _is_sensitive_file(path)
             if path.suffix.lower() not in TEXT_SUFFIXES and not sensitive_name:
                 continue
             try:
@@ -122,6 +166,7 @@ def _framework_evidence_text(path: Path, text: str) -> str:
             line.strip().lower()
             for line in text.splitlines()
             if re.match(r"^\s*(from|import)\s+[A-Za-z_]", line)
+            or re.search(r"\bclient\s*\(\s*['\"]bedrock(?:-runtime|-agent-runtime)?['\"]", line, re.I)
         ]
         return "\n".join(lines)
     if path.suffix.lower() in {".js", ".jsx", ".ts", ".tsx"}:
@@ -151,8 +196,7 @@ def inspect_repository(root: Path) -> Dict[str, Any]:
         elif suffix in {".js", ".jsx", ".ts", ".tsx"}:
             languages.add("typescript/javascript")
 
-        lowered_name = path.name.lower()
-        if lowered_name == ".env" or "secret" in lowered_name or "credential" in lowered_name:
+        if _is_sensitive_file(path):
             secret_file_count += 1
             continue
 
@@ -559,6 +603,11 @@ def _print(value: Any, as_json: bool = False) -> None:
 
 def build_parser() -> argparse.ArgumentParser:
     parser = argparse.ArgumentParser(prog="agenticdome", description="Local-first AgenticDome integration assistant.")
+    parser.add_argument(
+        "--version",
+        action="version",
+        version="%(prog)s " + _installed_sdk_version(),
+    )
     parser.add_argument(
         "--path",
         default=".",

{agenticdome_python_sdk-1.2.18 → agenticdome_python_sdk-1.2.19}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agenticdome-python-sdk"
-version = "1.2.18"
+version = "1.2.19"
 description = "Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement."
 readme = "README.md"
 requires-python = ">=3.9"
@@ -58,16 +58,16 @@ pop = [
     "cryptography>=42.0.0"
 ]
 pydanticai = [
-    "pydantic-ai>=2.16.0,<=2.31.0",
+    "pydantic-ai>=2.16.0,<=2.31.1",
     "anyio>=4.0.0"
 ]
 pydantic = [
-    "pydantic-ai>=2.16.0,<=2.31.0",
+    "pydantic-ai>=2.16.0,<=2.31.1",
     "anyio>=4.0.0"
 ]
 langgraph = [
     "langgraph>=1.2.9,<=1.2.11",
-    "langchain-core>=1.5.0,<=1.5.5",
+    "langchain-core>=1.5.0,<=1.5.6",
     "langchain-openai==1.3.5",
     "anyio>=4.0.0"
 ]
@@ -86,16 +86,16 @@ agno = [
     "agno>=2.8.0,<=2.9.0"
 ]
 openai-agents = [
-    "openai-agents>=0.18.3,<=0.21.0"
+    "openai-agents>=0.18.3,<=0.21.1"
 ]
 mcp = [
     "mcp>=1.26.0,<=1.28.1"
 ]
 bedrock = [
-    "boto3>=1.43.54,<=1.43.72"
+    "boto3>=1.43.54,<=1.43.73"
 ]
 aws-bedrock = [
-    "boto3>=1.43.54,<=1.43.72"
+    "boto3>=1.43.54,<=1.43.73"
 ]
 llamaindex = [
     "llama-index==0.14.23"
@@ -104,10 +104,10 @@ llama-index = [
     "llama-index==0.14.23"
 ]
 google-adk = [
-    "google-adk>=2.5.0,<=2.7.0"
+    "google-adk>=2.5.0,<=2.7.1"
 ]
 adk = [
-    "google-adk>=2.5.0,<=2.7.0"
+    "google-adk>=2.5.0,<=2.7.1"
 ]
 claude = [
     "claude-agent-sdk>=0.2.126,<=0.2.139"
@@ -122,20 +122,20 @@ all = [
     "crewai>=1.15.5,<=1.15.16",
     "redis>=4.5.0",
     "cryptography>=42.0.0",
-    "pydantic-ai>=2.16.0,<=2.31.0",
+    "pydantic-ai>=2.16.0,<=2.31.1",
     "anyio>=4.0.0",
     "langgraph>=1.2.9,<=1.2.11",
-    "langchain-core>=1.5.0,<=1.5.5",
+    "langchain-core>=1.5.0,<=1.5.6",
     "langchain-openai==1.3.5",
     "autogen-agentchat==0.7.5",
     "agno>=2.8.0,<=2.9.0",
     "azure-ai-projects>=2.3.0,<=2.4.0",
     "azure-identity==1.25.3",
-    "openai-agents>=0.18.3,<=0.21.0",
+    "openai-agents>=0.18.3,<=0.21.1",
     "mcp>=1.26.0,<=1.28.1",
-    "boto3>=1.43.54,<=1.43.72",
+    "boto3>=1.43.54,<=1.43.73",
     "llama-index==0.14.23",
-    "google-adk>=2.5.0,<=2.7.0",
+    "google-adk>=2.5.0,<=2.7.1",
     "claude-agent-sdk>=0.2.126,<=0.2.139",
     "smolagents==1.26.0"
 ]

{agenticdome_python_sdk-1.2.18 → agenticdome_python_sdk-1.2.19}/tests/test_onboarding_cli.py

@@ -66,6 +66,58 @@ def test_framework_names_in_prose_do_not_become_installed_frameworks(tmp_path):
     assert frameworks == {"langgraph", "custom-python"}
 
 
+def test_boto3_alone_does_not_claim_aws_bedrock(tmp_path):
+    (tmp_path / "requirements.txt").write_text("fastapi\nboto3\n", encoding="utf-8")
+    (tmp_path / "app.py").write_text(
+        "from fastapi import FastAPI\napp = FastAPI()\n",
+        encoding="utf-8",
+    )
+
+    report = inspect_repository(tmp_path)
+    frameworks = {item["key"] for item in report["frameworks"]}
+
+    assert "custom-python" in frameworks
+    assert "bedrock" not in frameworks
+
+
+def test_bedrock_runtime_client_is_unambiguous_framework_evidence(tmp_path):
+    (tmp_path / "runtime.py").write_text(
+        'import boto3\nclient = boto3.client("bedrock-runtime")\n',
+        encoding="utf-8",
+    )
+
+    report = inspect_repository(tmp_path)
+
+    assert "bedrock" in {item["key"] for item in report["frameworks"]}
+
+
+def test_common_message_variables_are_not_all_reported_as_prompt_ingress(tmp_path):
+    (tmp_path / "app.py").write_text(
+        "messages = []\nmessages.append({'role': 'system'})\n"
+        "user_query = request.query\n"
+        "decision = firewall.screen_input(text=user_query)\n"
+        "reviewed = firewall.sanitize_output(output=result)\n",
+        encoding="utf-8",
+    )
+
+    report = inspect_repository(tmp_path)
+
+    assert report["boundary_counts"]["prompt_ingress"] == 2
+    assert report["boundary_counts"]["output_egress"] == 1
+
+
+def test_secret_like_filenames_and_private_key_artifacts_are_never_read(tmp_path):
+    (tmp_path / "app.py").write_text("user_query = request.query\n", encoding="utf-8")
+    (tmp_path / "api-token.json").write_text('{"value":"must-never-appear"}', encoding="utf-8")
+    (tmp_path / "service.pem").write_text("must-never-appear", encoding="utf-8")
+
+    report = inspect_repository(tmp_path)
+    serialized = json.dumps(report)
+
+    assert report["potential_secret_files_excluded"] == 2
+    assert "must-never-appear" not in serialized
+
+
 def test_guarded_dispatcher_is_a_tool_execution_boundary(tmp_path):
     (tmp_path / "requirements.txt").write_text("fastapi\n", encoding="utf-8")
     (tmp_path / "tools.py").write_text(
@@ -122,6 +174,20 @@ def test_command_inspect_json_is_installable(tmp_path, capsys):
     assert SCHEMA in output
 
 
+def test_command_reports_installed_sdk_version(monkeypatch, capsys):
+    monkeypatch.setattr(
+        "agenticdome_sdk.onboarding_cli.importlib.metadata.version",
+        lambda package: "9.8.7",
+    )
+
+    try:
+        main(["--version"])
+    except SystemExit as exc:
+        assert exc.code == 0
+
+    assert capsys.readouterr().out.strip() == "agenticdome 9.8.7"
+
+
 def test_command_inspect_output_prints_summary_not_full_report(tmp_path, capsys):
     _project(tmp_path)
     output_path = tmp_path / "inspection.json"