agenticdome-python-sdk 1.2.24__tar.gz → 1.2.26__tar.gz

{agenticdome_python_sdk-1.2.24 → agenticdome_python_sdk-1.2.26}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.24
+Version: 1.2.26
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -38,10 +38,10 @@ Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
 Requires-Dist: cryptography>=42.0.0; extra == "pop"
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai<=2.33.0,>=2.16.0; extra == "pydanticai"
+Requires-Dist: pydantic-ai<=2.35.1,>=2.16.0; extra == "pydanticai"
 Requires-Dist: anyio>=4.0.0; extra == "pydanticai"
 Provides-Extra: pydantic
-Requires-Dist: pydantic-ai<=2.33.0,>=2.16.0; extra == "pydantic"
+Requires-Dist: pydantic-ai<=2.35.1,>=2.16.0; extra == "pydantic"
 Requires-Dist: anyio>=4.0.0; extra == "pydantic"
 Provides-Extra: langgraph
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "langgraph"
@@ -57,48 +57,48 @@ Provides-Extra: foundry
 Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "foundry"
 Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
-Requires-Dist: agno<=2.9.0,>=2.8.0; extra == "agno"
+Requires-Dist: agno<=3.0.1,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
 Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
 Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.78,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.81,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.78,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.81,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llama-index"
 Provides-Extra: google-adk
-Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "google-adk"
+Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "google-adk"
 Provides-Extra: adk
-Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "adk"
+Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "adk"
 Provides-Extra: claude
-Requires-Dist: claude-agent-sdk<=0.2.144,>=0.2.126; extra == "claude"
+Requires-Dist: claude-agent-sdk<=0.2.145,>=0.2.126; extra == "claude"
 Provides-Extra: claude-agent-sdk
-Requires-Dist: claude-agent-sdk<=0.2.144,>=0.2.126; extra == "claude-agent-sdk"
+Requires-Dist: claude-agent-sdk<=0.2.145,>=0.2.126; extra == "claude-agent-sdk"
 Provides-Extra: smolagents
 Requires-Dist: smolagents==1.26.0; extra == "smolagents"
 Provides-Extra: all
 Requires-Dist: crewai<=1.15.17,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
-Requires-Dist: pydantic-ai<=2.33.0,>=2.16.0; extra == "all"
+Requires-Dist: pydantic-ai<=2.35.1,>=2.16.0; extra == "all"
 Requires-Dist: anyio>=4.0.0; extra == "all"
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "all"
 Requires-Dist: langchain-core<=1.6.0,>=1.5.0; extra == "all"
 Requires-Dist: langchain-openai==1.3.5; extra == "all"
 Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
-Requires-Dist: agno<=2.9.0,>=2.8.0; extra == "all"
+Requires-Dist: agno<=3.0.1,>=2.8.0; extra == "all"
 Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
 Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "all"
 Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.78,>=1.43.54; extra == "all"
+Requires-Dist: boto3<=1.43.81,>=1.43.54; extra == "all"
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "all"
-Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "all"
-Requires-Dist: claude-agent-sdk<=0.2.144,>=0.2.126; extra == "all"
+Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "all"
+Requires-Dist: claude-agent-sdk<=0.2.145,>=0.2.126; extra == "all"
 Requires-Dist: smolagents==1.26.0; extra == "all"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
@@ -183,6 +183,44 @@ The private plan is required because production verification consumes its
 signed, catalog-bound semantic analysis. `agenticdome scaffold` remains
 optional and writes an unapplied patch for review.
 
+For an MCP client, host, gateway or server workload, use the focused path:
+
+```bash
+agenticdome mcp protect
+# review the detected role/transport, boundaries, registry and unapplied patch
+agenticdome mcp verify
+```
+
+`mcp protect` adds no customer source changes. `mcp verify` runs the workload's
+tests, a real JSON-RPC stdio subprocess interception rehearsal and live
+assigned-sidecar decisions. The customer Control Panel combines that evidence
+with retained runtime evidence before representing production readiness.
+
+For an OpenClaw workspace, first install and enable the published native
+plugin, grant its explicit conversation-hook consent and restart the gateway.
+Then use the focused, source-free proof path:
+
+```bash
+openclaw plugins install npm:agenticdome-openclaw-security
+openclaw plugins enable agenticdome-security
+openclaw config set plugins.entries.agenticdome-security.hooks.allowConversationAccess true
+openclaw gateway restart
+agenticdome openclaw protect
+# With AGENTICDOME_API_BASE, AGENTICDOME_TENANT_ID and the dedicated
+# AGENTICDOME_COPILOT_API_KEY set, generate and review the signed plan:
+agenticdome plan
+# Also set AGENTICDOME_API_KEY for the live tenant decision proof:
+agenticdome openclaw verify --output .agenticdome/verification.json
+```
+
+`openclaw protect` fails unless the active OpenClaw runtime reports the loaded
+AgenticDome plugin, explicit consent and the exact certified typed hooks.
+`agenticdome plan` returns source-free, tenant-bound Integration Copilot
+guidance for review. `openclaw verify` adds workspace-test and assigned-tenant
+policy evidence. The
+customer Control Panel separately confirms tenant binding and retained
+telemetry; neither command silently modifies customer source.
+
 When `.agenticdome/inspection.json` is imported into Developer Integration,
 the Control Panel adds its detected frameworks to the workload. Frameworks,
 languages and candidate boundaries can be discovered locally; business
@@ -2386,7 +2424,17 @@ export AGENTICDOME_MCP_RATE_LIMIT_PER_MINUTE="0"
 # export AGENTICDOME_REDIS_KEY_PREFIX="AgenticDome:mcp:handoff"
 ```
 
-Notes: call `preflight_request()` or `forward_with_firewall()` in the host, gateway, proxy, or router that forwards JSON-RPC requests — env config alone does not intercept MCP traffic. Disable individual protections with the corresponding `AGENTICDOME_MCP_PROTECT_*` setting when a simple host needs passthrough behavior. AgenticDome protects only the routed local boundary and configured returned-result paths; it cannot inspect code inside a remote third-party MCP server you do not control. `forward_with_firewall()` enforces policy blocks, but currently returns the original response after an unexpected non-policy result-sanitization error. Applications requiring fail-closed output handling must catch and block review failures explicitly. Pass `mcp_server_id`, `mcp_server_url`, `mcp_server_vendor`, and trust metadata in `context` for per-server policy decisions. Use stable `session_id` values; set `AGENTICDOME_REQUIRE_SESSION_ID=true` when every host request should be traceable.
+Notes: call `preflight_request()` or `forward_with_firewall()` in the host, gateway, proxy, or router that forwards JSON-RPC requests — env config alone does not intercept MCP traffic. Disable individual protections with the corresponding `AGENTICDOME_MCP_PROTECT_*` setting when a simple host needs passthrough behavior. AgenticDome protects only the routed local boundary and configured returned-result paths; it cannot inspect code inside a remote third-party MCP server you do not control. `forward_with_firewall()` fails closed on request-policy or response-review failures unless fail-open was explicitly configured. Pass `mcp_server_id`, `mcp_server_url`, `mcp_server_vendor`, and trust metadata in `context` for per-server policy decisions. Use stable `session_id` values; set `AGENTICDOME_REQUIRE_SESSION_ID=true` when every host request should be traceable.
+
+For a low-code Streamable HTTP boundary, configure the fixed upstream and real
+identity/purpose values generated by `agenticdome mcp protect`, then run
+`python -m agenticdome_sdk.mcp_http_gateway` behind authenticated TLS ingress.
+It accepts JSON responses and Streamable HTTP SSE on POST or GET, refuses
+redirects and fails closed. It blocks legacy SSE `endpoint` advertisements,
+whose separate message endpoint needs a separately reviewed local adapter.
+Enable `AGENTICDOME_MCP_TRUST_IDENTITY_HEADERS=true` only behind ingress that
+authenticates the caller, strips caller-supplied identity headers and sets the
+trusted session/user headers itself.
 
 ```python
 from agenticdome_sdk.mcp_host import (

{agenticdome_python_sdk-1.2.24 → agenticdome_python_sdk-1.2.26}/README.md

@@ -71,6 +71,44 @@ The private plan is required because production verification consumes its
 signed, catalog-bound semantic analysis. `agenticdome scaffold` remains
 optional and writes an unapplied patch for review.
 
+For an MCP client, host, gateway or server workload, use the focused path:
+
+```bash
+agenticdome mcp protect
+# review the detected role/transport, boundaries, registry and unapplied patch
+agenticdome mcp verify
+```
+
+`mcp protect` adds no customer source changes. `mcp verify` runs the workload's
+tests, a real JSON-RPC stdio subprocess interception rehearsal and live
+assigned-sidecar decisions. The customer Control Panel combines that evidence
+with retained runtime evidence before representing production readiness.
+
+For an OpenClaw workspace, first install and enable the published native
+plugin, grant its explicit conversation-hook consent and restart the gateway.
+Then use the focused, source-free proof path:
+
+```bash
+openclaw plugins install npm:agenticdome-openclaw-security
+openclaw plugins enable agenticdome-security
+openclaw config set plugins.entries.agenticdome-security.hooks.allowConversationAccess true
+openclaw gateway restart
+agenticdome openclaw protect
+# With AGENTICDOME_API_BASE, AGENTICDOME_TENANT_ID and the dedicated
+# AGENTICDOME_COPILOT_API_KEY set, generate and review the signed plan:
+agenticdome plan
+# Also set AGENTICDOME_API_KEY for the live tenant decision proof:
+agenticdome openclaw verify --output .agenticdome/verification.json
+```
+
+`openclaw protect` fails unless the active OpenClaw runtime reports the loaded
+AgenticDome plugin, explicit consent and the exact certified typed hooks.
+`agenticdome plan` returns source-free, tenant-bound Integration Copilot
+guidance for review. `openclaw verify` adds workspace-test and assigned-tenant
+policy evidence. The
+customer Control Panel separately confirms tenant binding and retained
+telemetry; neither command silently modifies customer source.
+
 When `.agenticdome/inspection.json` is imported into Developer Integration,
 the Control Panel adds its detected frameworks to the workload. Frameworks,
 languages and candidate boundaries can be discovered locally; business
@@ -2274,7 +2312,17 @@ export AGENTICDOME_MCP_RATE_LIMIT_PER_MINUTE="0"
 # export AGENTICDOME_REDIS_KEY_PREFIX="AgenticDome:mcp:handoff"
 ```
 
-Notes: call `preflight_request()` or `forward_with_firewall()` in the host, gateway, proxy, or router that forwards JSON-RPC requests — env config alone does not intercept MCP traffic. Disable individual protections with the corresponding `AGENTICDOME_MCP_PROTECT_*` setting when a simple host needs passthrough behavior. AgenticDome protects only the routed local boundary and configured returned-result paths; it cannot inspect code inside a remote third-party MCP server you do not control. `forward_with_firewall()` enforces policy blocks, but currently returns the original response after an unexpected non-policy result-sanitization error. Applications requiring fail-closed output handling must catch and block review failures explicitly. Pass `mcp_server_id`, `mcp_server_url`, `mcp_server_vendor`, and trust metadata in `context` for per-server policy decisions. Use stable `session_id` values; set `AGENTICDOME_REQUIRE_SESSION_ID=true` when every host request should be traceable.
+Notes: call `preflight_request()` or `forward_with_firewall()` in the host, gateway, proxy, or router that forwards JSON-RPC requests — env config alone does not intercept MCP traffic. Disable individual protections with the corresponding `AGENTICDOME_MCP_PROTECT_*` setting when a simple host needs passthrough behavior. AgenticDome protects only the routed local boundary and configured returned-result paths; it cannot inspect code inside a remote third-party MCP server you do not control. `forward_with_firewall()` fails closed on request-policy or response-review failures unless fail-open was explicitly configured. Pass `mcp_server_id`, `mcp_server_url`, `mcp_server_vendor`, and trust metadata in `context` for per-server policy decisions. Use stable `session_id` values; set `AGENTICDOME_REQUIRE_SESSION_ID=true` when every host request should be traceable.
+
+For a low-code Streamable HTTP boundary, configure the fixed upstream and real
+identity/purpose values generated by `agenticdome mcp protect`, then run
+`python -m agenticdome_sdk.mcp_http_gateway` behind authenticated TLS ingress.
+It accepts JSON responses and Streamable HTTP SSE on POST or GET, refuses
+redirects and fails closed. It blocks legacy SSE `endpoint` advertisements,
+whose separate message endpoint needs a separately reviewed local adapter.
+Enable `AGENTICDOME_MCP_TRUST_IDENTITY_HEADERS=true` only behind ingress that
+authenticates the caller, strips caller-supplied identity headers and sets the
+trusted session/user headers itself.
 
 ```python
 from agenticdome_sdk.mcp_host import (

{agenticdome_python_sdk-1.2.24 → agenticdome_python_sdk-1.2.26}/agenticdome_python_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.24
+Version: 1.2.26
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -38,10 +38,10 @@ Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
 Requires-Dist: cryptography>=42.0.0; extra == "pop"
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai<=2.33.0,>=2.16.0; extra == "pydanticai"
+Requires-Dist: pydantic-ai<=2.35.1,>=2.16.0; extra == "pydanticai"
 Requires-Dist: anyio>=4.0.0; extra == "pydanticai"
 Provides-Extra: pydantic
-Requires-Dist: pydantic-ai<=2.33.0,>=2.16.0; extra == "pydantic"
+Requires-Dist: pydantic-ai<=2.35.1,>=2.16.0; extra == "pydantic"
 Requires-Dist: anyio>=4.0.0; extra == "pydantic"
 Provides-Extra: langgraph
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "langgraph"
@@ -57,48 +57,48 @@ Provides-Extra: foundry
 Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "foundry"
 Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
-Requires-Dist: agno<=2.9.0,>=2.8.0; extra == "agno"
+Requires-Dist: agno<=3.0.1,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
 Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
 Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.78,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.81,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.78,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.81,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llama-index"
 Provides-Extra: google-adk
-Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "google-adk"
+Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "google-adk"
 Provides-Extra: adk
-Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "adk"
+Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "adk"
 Provides-Extra: claude
-Requires-Dist: claude-agent-sdk<=0.2.144,>=0.2.126; extra == "claude"
+Requires-Dist: claude-agent-sdk<=0.2.145,>=0.2.126; extra == "claude"
 Provides-Extra: claude-agent-sdk
-Requires-Dist: claude-agent-sdk<=0.2.144,>=0.2.126; extra == "claude-agent-sdk"
+Requires-Dist: claude-agent-sdk<=0.2.145,>=0.2.126; extra == "claude-agent-sdk"
 Provides-Extra: smolagents
 Requires-Dist: smolagents==1.26.0; extra == "smolagents"
 Provides-Extra: all
 Requires-Dist: crewai<=1.15.17,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
-Requires-Dist: pydantic-ai<=2.33.0,>=2.16.0; extra == "all"
+Requires-Dist: pydantic-ai<=2.35.1,>=2.16.0; extra == "all"
 Requires-Dist: anyio>=4.0.0; extra == "all"
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "all"
 Requires-Dist: langchain-core<=1.6.0,>=1.5.0; extra == "all"
 Requires-Dist: langchain-openai==1.3.5; extra == "all"
 Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
-Requires-Dist: agno<=2.9.0,>=2.8.0; extra == "all"
+Requires-Dist: agno<=3.0.1,>=2.8.0; extra == "all"
 Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
 Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "all"
 Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.78,>=1.43.54; extra == "all"
+Requires-Dist: boto3<=1.43.81,>=1.43.54; extra == "all"
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "all"
-Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "all"
-Requires-Dist: claude-agent-sdk<=0.2.144,>=0.2.126; extra == "all"
+Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "all"
+Requires-Dist: claude-agent-sdk<=0.2.145,>=0.2.126; extra == "all"
 Requires-Dist: smolagents==1.26.0; extra == "all"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
@@ -183,6 +183,44 @@ The private plan is required because production verification consumes its
 signed, catalog-bound semantic analysis. `agenticdome scaffold` remains
 optional and writes an unapplied patch for review.
 
+For an MCP client, host, gateway or server workload, use the focused path:
+
+```bash
+agenticdome mcp protect
+# review the detected role/transport, boundaries, registry and unapplied patch
+agenticdome mcp verify
+```
+
+`mcp protect` adds no customer source changes. `mcp verify` runs the workload's
+tests, a real JSON-RPC stdio subprocess interception rehearsal and live
+assigned-sidecar decisions. The customer Control Panel combines that evidence
+with retained runtime evidence before representing production readiness.
+
+For an OpenClaw workspace, first install and enable the published native
+plugin, grant its explicit conversation-hook consent and restart the gateway.
+Then use the focused, source-free proof path:
+
+```bash
+openclaw plugins install npm:agenticdome-openclaw-security
+openclaw plugins enable agenticdome-security
+openclaw config set plugins.entries.agenticdome-security.hooks.allowConversationAccess true
+openclaw gateway restart
+agenticdome openclaw protect
+# With AGENTICDOME_API_BASE, AGENTICDOME_TENANT_ID and the dedicated
+# AGENTICDOME_COPILOT_API_KEY set, generate and review the signed plan:
+agenticdome plan
+# Also set AGENTICDOME_API_KEY for the live tenant decision proof:
+agenticdome openclaw verify --output .agenticdome/verification.json
+```
+
+`openclaw protect` fails unless the active OpenClaw runtime reports the loaded
+AgenticDome plugin, explicit consent and the exact certified typed hooks.
+`agenticdome plan` returns source-free, tenant-bound Integration Copilot
+guidance for review. `openclaw verify` adds workspace-test and assigned-tenant
+policy evidence. The
+customer Control Panel separately confirms tenant binding and retained
+telemetry; neither command silently modifies customer source.
+
 When `.agenticdome/inspection.json` is imported into Developer Integration,
 the Control Panel adds its detected frameworks to the workload. Frameworks,
 languages and candidate boundaries can be discovered locally; business
@@ -2386,7 +2424,17 @@ export AGENTICDOME_MCP_RATE_LIMIT_PER_MINUTE="0"
 # export AGENTICDOME_REDIS_KEY_PREFIX="AgenticDome:mcp:handoff"
 ```
 
-Notes: call `preflight_request()` or `forward_with_firewall()` in the host, gateway, proxy, or router that forwards JSON-RPC requests — env config alone does not intercept MCP traffic. Disable individual protections with the corresponding `AGENTICDOME_MCP_PROTECT_*` setting when a simple host needs passthrough behavior. AgenticDome protects only the routed local boundary and configured returned-result paths; it cannot inspect code inside a remote third-party MCP server you do not control. `forward_with_firewall()` enforces policy blocks, but currently returns the original response after an unexpected non-policy result-sanitization error. Applications requiring fail-closed output handling must catch and block review failures explicitly. Pass `mcp_server_id`, `mcp_server_url`, `mcp_server_vendor`, and trust metadata in `context` for per-server policy decisions. Use stable `session_id` values; set `AGENTICDOME_REQUIRE_SESSION_ID=true` when every host request should be traceable.
+Notes: call `preflight_request()` or `forward_with_firewall()` in the host, gateway, proxy, or router that forwards JSON-RPC requests — env config alone does not intercept MCP traffic. Disable individual protections with the corresponding `AGENTICDOME_MCP_PROTECT_*` setting when a simple host needs passthrough behavior. AgenticDome protects only the routed local boundary and configured returned-result paths; it cannot inspect code inside a remote third-party MCP server you do not control. `forward_with_firewall()` fails closed on request-policy or response-review failures unless fail-open was explicitly configured. Pass `mcp_server_id`, `mcp_server_url`, `mcp_server_vendor`, and trust metadata in `context` for per-server policy decisions. Use stable `session_id` values; set `AGENTICDOME_REQUIRE_SESSION_ID=true` when every host request should be traceable.
+
+For a low-code Streamable HTTP boundary, configure the fixed upstream and real
+identity/purpose values generated by `agenticdome mcp protect`, then run
+`python -m agenticdome_sdk.mcp_http_gateway` behind authenticated TLS ingress.
+It accepts JSON responses and Streamable HTTP SSE on POST or GET, refuses
+redirects and fails closed. It blocks legacy SSE `endpoint` advertisements,
+whose separate message endpoint needs a separately reviewed local adapter.
+Enable `AGENTICDOME_MCP_TRUST_IDENTITY_HEADERS=true` only behind ingress that
+authenticates the caller, strips caller-supplied identity headers and sets the
+trusted session/user headers itself.
 
 ```python
 from agenticdome_sdk.mcp_host import (

{agenticdome_python_sdk-1.2.24 → agenticdome_python_sdk-1.2.26}/agenticdome_python_sdk.egg-info/SOURCES.txt

@@ -18,6 +18,7 @@ agenticdome_sdk/_mode.py
 agenticdome_sdk/agno.py
 agenticdome_sdk/autogen.py
 agenticdome_sdk/aws_bedrock.py
+agenticdome_sdk/catalog_snapshot.json
 agenticdome_sdk/claude.py
 agenticdome_sdk/client.py
 agenticdome_sdk/copilot_ir.py
@@ -30,6 +31,9 @@ agenticdome_sdk/identity.py
 agenticdome_sdk/langgraph.py
 agenticdome_sdk/llamaindex.py
 agenticdome_sdk/mcp_host.py
+agenticdome_sdk/mcp_http_gateway.py
+agenticdome_sdk/mcp_rehearsal_server.py
+agenticdome_sdk/mcp_verification.py
 agenticdome_sdk/microsoft_agent_framework.py
 agenticdome_sdk/microsoft_ai_foundry.py
 agenticdome_sdk/onboarding_cli.py

{agenticdome_python_sdk-1.2.24 → agenticdome_python_sdk-1.2.26}/agenticdome_python_sdk.egg-info/requires.txt

@@ -2,46 +2,46 @@ requests>=2.31.0
 urllib3>=2.0.0
 
 [adk]
-google-adk<=2.7.1,>=2.5.0
+google-adk<=2.8.0,>=2.5.0
 
 [agno]
-agno<=2.9.0,>=2.8.0
+agno<=3.0.1,>=2.8.0
 
 [all]
 crewai<=1.15.17,>=1.15.5
 redis>=4.5.0
 cryptography>=42.0.0
-pydantic-ai<=2.33.0,>=2.16.0
+pydantic-ai<=2.35.1,>=2.16.0
 anyio>=4.0.0
 langgraph<=1.2.11,>=1.2.9
 langchain-core<=1.6.0,>=1.5.0
 langchain-openai==1.3.5
 autogen-agentchat==0.7.5
-agno<=2.9.0,>=2.8.0
+agno<=3.0.1,>=2.8.0
 azure-ai-projects<=2.5.0,>=2.3.0
 azure-identity==1.25.3
 openai-agents<=0.22.0,>=0.18.3
 mcp<=1.28.1,>=1.26.0
-boto3<=1.43.78,>=1.43.54
+boto3<=1.43.81,>=1.43.54
 llama-index<=0.14.24,>=0.14.23
-google-adk<=2.7.1,>=2.5.0
-claude-agent-sdk<=0.2.144,>=0.2.126
+google-adk<=2.8.0,>=2.5.0
+claude-agent-sdk<=0.2.145,>=0.2.126
 smolagents==1.26.0
 
 [autogen]
 autogen-agentchat==0.7.5
 
 [aws-bedrock]
-boto3<=1.43.78,>=1.43.54
+boto3<=1.43.81,>=1.43.54
 
 [bedrock]
-boto3<=1.43.78,>=1.43.54
+boto3<=1.43.81,>=1.43.54
 
 [claude]
-claude-agent-sdk<=0.2.144,>=0.2.126
+claude-agent-sdk<=0.2.145,>=0.2.126
 
 [claude-agent-sdk]
-claude-agent-sdk<=0.2.144,>=0.2.126
+claude-agent-sdk<=0.2.145,>=0.2.126
 
 [crewai]
 crewai<=1.15.17,>=1.15.5
@@ -62,7 +62,7 @@ azure-ai-projects<=2.5.0,>=2.3.0
 azure-identity==1.25.3
 
 [google-adk]
-google-adk<=2.7.1,>=2.5.0
+google-adk<=2.8.0,>=2.5.0
 
 [langgraph]
 langgraph<=1.2.11,>=1.2.9
@@ -91,11 +91,11 @@ openai-agents<=0.22.0,>=0.18.3
 cryptography>=42.0.0
 
 [pydantic]
-pydantic-ai<=2.33.0,>=2.16.0
+pydantic-ai<=2.35.1,>=2.16.0
 anyio>=4.0.0
 
 [pydanticai]
-pydantic-ai<=2.33.0,>=2.16.0
+pydantic-ai<=2.35.1,>=2.16.0
 anyio>=4.0.0
 
 [redis]

agenticdome_python_sdk-1.2.26/agenticdome_sdk/catalog_snapshot.json

@@ -0,0 +1,28 @@
+{
+    "schema": "agenticdome.catalog-snapshot.v1",
+    "catalog_schema": "agenticdome.hook-catalog.v1",
+    "verified_at": "2026-08-27",
+    "python_sdk_version": "1.2.26",
+    "published_packages": {
+        "agenticdome-python-sdk": {
+            "registry": "pypi",
+            "version": "1.2.26",
+            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.26/"
+        },
+        "agenticdome-sdk": {
+            "registry": "npm",
+            "version": "0.6.3",
+            "url": "https://www.npmjs.com/package/agenticdome-sdk/v/0.6.3"
+        },
+        "agenticdome-openclaw-security": {
+            "registry": "npm",
+            "version": "1.0.2",
+            "url": "https://www.npmjs.com/package/agenticdome-openclaw-security/v/1.0.2"
+        },
+        "openclaw": {
+            "registry": "npm",
+            "version": "2026.7.1-2",
+            "url": "https://www.npmjs.com/package/openclaw/v/2026.7.1-2"
+        }
+    }
+}