agenticdome-python-sdk 1.2.25__tar.gz → 1.2.26__tar.gz

{agenticdome_python_sdk-1.2.25 → agenticdome_python_sdk-1.2.26}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.25
+Version: 1.2.26
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -38,10 +38,10 @@ Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
 Requires-Dist: cryptography>=42.0.0; extra == "pop"
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai<=2.33.0,>=2.16.0; extra == "pydanticai"
+Requires-Dist: pydantic-ai<=2.35.1,>=2.16.0; extra == "pydanticai"
 Requires-Dist: anyio>=4.0.0; extra == "pydanticai"
 Provides-Extra: pydantic
-Requires-Dist: pydantic-ai<=2.33.0,>=2.16.0; extra == "pydantic"
+Requires-Dist: pydantic-ai<=2.35.1,>=2.16.0; extra == "pydantic"
 Requires-Dist: anyio>=4.0.0; extra == "pydantic"
 Provides-Extra: langgraph
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "langgraph"
@@ -57,48 +57,48 @@ Provides-Extra: foundry
 Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "foundry"
 Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
-Requires-Dist: agno<=2.9.0,>=2.8.0; extra == "agno"
+Requires-Dist: agno<=3.0.1,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
 Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
 Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.78,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.81,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.78,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.81,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llama-index"
 Provides-Extra: google-adk
-Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "google-adk"
+Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "google-adk"
 Provides-Extra: adk
-Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "adk"
+Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "adk"
 Provides-Extra: claude
-Requires-Dist: claude-agent-sdk<=0.2.144,>=0.2.126; extra == "claude"
+Requires-Dist: claude-agent-sdk<=0.2.145,>=0.2.126; extra == "claude"
 Provides-Extra: claude-agent-sdk
-Requires-Dist: claude-agent-sdk<=0.2.144,>=0.2.126; extra == "claude-agent-sdk"
+Requires-Dist: claude-agent-sdk<=0.2.145,>=0.2.126; extra == "claude-agent-sdk"
 Provides-Extra: smolagents
 Requires-Dist: smolagents==1.26.0; extra == "smolagents"
 Provides-Extra: all
 Requires-Dist: crewai<=1.15.17,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
-Requires-Dist: pydantic-ai<=2.33.0,>=2.16.0; extra == "all"
+Requires-Dist: pydantic-ai<=2.35.1,>=2.16.0; extra == "all"
 Requires-Dist: anyio>=4.0.0; extra == "all"
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "all"
 Requires-Dist: langchain-core<=1.6.0,>=1.5.0; extra == "all"
 Requires-Dist: langchain-openai==1.3.5; extra == "all"
 Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
-Requires-Dist: agno<=2.9.0,>=2.8.0; extra == "all"
+Requires-Dist: agno<=3.0.1,>=2.8.0; extra == "all"
 Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
 Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "all"
 Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.78,>=1.43.54; extra == "all"
+Requires-Dist: boto3<=1.43.81,>=1.43.54; extra == "all"
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "all"
-Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "all"
-Requires-Dist: claude-agent-sdk<=0.2.144,>=0.2.126; extra == "all"
+Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "all"
+Requires-Dist: claude-agent-sdk<=0.2.145,>=0.2.126; extra == "all"
 Requires-Dist: smolagents==1.26.0; extra == "all"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
@@ -183,6 +183,44 @@ The private plan is required because production verification consumes its
 signed, catalog-bound semantic analysis. `agenticdome scaffold` remains
 optional and writes an unapplied patch for review.
 
+For an MCP client, host, gateway or server workload, use the focused path:
+
+```bash
+agenticdome mcp protect
+# review the detected role/transport, boundaries, registry and unapplied patch
+agenticdome mcp verify
+```
+
+`mcp protect` adds no customer source changes. `mcp verify` runs the workload's
+tests, a real JSON-RPC stdio subprocess interception rehearsal and live
+assigned-sidecar decisions. The customer Control Panel combines that evidence
+with retained runtime evidence before representing production readiness.
+
+For an OpenClaw workspace, first install and enable the published native
+plugin, grant its explicit conversation-hook consent and restart the gateway.
+Then use the focused, source-free proof path:
+
+```bash
+openclaw plugins install npm:agenticdome-openclaw-security
+openclaw plugins enable agenticdome-security
+openclaw config set plugins.entries.agenticdome-security.hooks.allowConversationAccess true
+openclaw gateway restart
+agenticdome openclaw protect
+# With AGENTICDOME_API_BASE, AGENTICDOME_TENANT_ID and the dedicated
+# AGENTICDOME_COPILOT_API_KEY set, generate and review the signed plan:
+agenticdome plan
+# Also set AGENTICDOME_API_KEY for the live tenant decision proof:
+agenticdome openclaw verify --output .agenticdome/verification.json
+```
+
+`openclaw protect` fails unless the active OpenClaw runtime reports the loaded
+AgenticDome plugin, explicit consent and the exact certified typed hooks.
+`agenticdome plan` returns source-free, tenant-bound Integration Copilot
+guidance for review. `openclaw verify` adds workspace-test and assigned-tenant
+policy evidence. The
+customer Control Panel separately confirms tenant binding and retained
+telemetry; neither command silently modifies customer source.
+
 When `.agenticdome/inspection.json` is imported into Developer Integration,
 the Control Panel adds its detected frameworks to the workload. Frameworks,
 languages and candidate boundaries can be discovered locally; business
@@ -2386,7 +2424,17 @@ export AGENTICDOME_MCP_RATE_LIMIT_PER_MINUTE="0"
 # export AGENTICDOME_REDIS_KEY_PREFIX="AgenticDome:mcp:handoff"
 ```
 
-Notes: call `preflight_request()` or `forward_with_firewall()` in the host, gateway, proxy, or router that forwards JSON-RPC requests — env config alone does not intercept MCP traffic. Disable individual protections with the corresponding `AGENTICDOME_MCP_PROTECT_*` setting when a simple host needs passthrough behavior. AgenticDome protects only the routed local boundary and configured returned-result paths; it cannot inspect code inside a remote third-party MCP server you do not control. `forward_with_firewall()` enforces policy blocks, but currently returns the original response after an unexpected non-policy result-sanitization error. Applications requiring fail-closed output handling must catch and block review failures explicitly. Pass `mcp_server_id`, `mcp_server_url`, `mcp_server_vendor`, and trust metadata in `context` for per-server policy decisions. Use stable `session_id` values; set `AGENTICDOME_REQUIRE_SESSION_ID=true` when every host request should be traceable.
+Notes: call `preflight_request()` or `forward_with_firewall()` in the host, gateway, proxy, or router that forwards JSON-RPC requests — env config alone does not intercept MCP traffic. Disable individual protections with the corresponding `AGENTICDOME_MCP_PROTECT_*` setting when a simple host needs passthrough behavior. AgenticDome protects only the routed local boundary and configured returned-result paths; it cannot inspect code inside a remote third-party MCP server you do not control. `forward_with_firewall()` fails closed on request-policy or response-review failures unless fail-open was explicitly configured. Pass `mcp_server_id`, `mcp_server_url`, `mcp_server_vendor`, and trust metadata in `context` for per-server policy decisions. Use stable `session_id` values; set `AGENTICDOME_REQUIRE_SESSION_ID=true` when every host request should be traceable.
+
+For a low-code Streamable HTTP boundary, configure the fixed upstream and real
+identity/purpose values generated by `agenticdome mcp protect`, then run
+`python -m agenticdome_sdk.mcp_http_gateway` behind authenticated TLS ingress.
+It accepts JSON responses and Streamable HTTP SSE on POST or GET, refuses
+redirects and fails closed. It blocks legacy SSE `endpoint` advertisements,
+whose separate message endpoint needs a separately reviewed local adapter.
+Enable `AGENTICDOME_MCP_TRUST_IDENTITY_HEADERS=true` only behind ingress that
+authenticates the caller, strips caller-supplied identity headers and sets the
+trusted session/user headers itself.
 
 ```python
 from agenticdome_sdk.mcp_host import (

{agenticdome_python_sdk-1.2.25 → agenticdome_python_sdk-1.2.26}/README.md

@@ -71,6 +71,44 @@ The private plan is required because production verification consumes its
 signed, catalog-bound semantic analysis. `agenticdome scaffold` remains
 optional and writes an unapplied patch for review.
 
+For an MCP client, host, gateway or server workload, use the focused path:
+
+```bash
+agenticdome mcp protect
+# review the detected role/transport, boundaries, registry and unapplied patch
+agenticdome mcp verify
+```
+
+`mcp protect` adds no customer source changes. `mcp verify` runs the workload's
+tests, a real JSON-RPC stdio subprocess interception rehearsal and live
+assigned-sidecar decisions. The customer Control Panel combines that evidence
+with retained runtime evidence before representing production readiness.
+
+For an OpenClaw workspace, first install and enable the published native
+plugin, grant its explicit conversation-hook consent and restart the gateway.
+Then use the focused, source-free proof path:
+
+```bash
+openclaw plugins install npm:agenticdome-openclaw-security
+openclaw plugins enable agenticdome-security
+openclaw config set plugins.entries.agenticdome-security.hooks.allowConversationAccess true
+openclaw gateway restart
+agenticdome openclaw protect
+# With AGENTICDOME_API_BASE, AGENTICDOME_TENANT_ID and the dedicated
+# AGENTICDOME_COPILOT_API_KEY set, generate and review the signed plan:
+agenticdome plan
+# Also set AGENTICDOME_API_KEY for the live tenant decision proof:
+agenticdome openclaw verify --output .agenticdome/verification.json
+```
+
+`openclaw protect` fails unless the active OpenClaw runtime reports the loaded
+AgenticDome plugin, explicit consent and the exact certified typed hooks.
+`agenticdome plan` returns source-free, tenant-bound Integration Copilot
+guidance for review. `openclaw verify` adds workspace-test and assigned-tenant
+policy evidence. The
+customer Control Panel separately confirms tenant binding and retained
+telemetry; neither command silently modifies customer source.
+
 When `.agenticdome/inspection.json` is imported into Developer Integration,
 the Control Panel adds its detected frameworks to the workload. Frameworks,
 languages and candidate boundaries can be discovered locally; business
@@ -2274,7 +2312,17 @@ export AGENTICDOME_MCP_RATE_LIMIT_PER_MINUTE="0"
 # export AGENTICDOME_REDIS_KEY_PREFIX="AgenticDome:mcp:handoff"
 ```
 
-Notes: call `preflight_request()` or `forward_with_firewall()` in the host, gateway, proxy, or router that forwards JSON-RPC requests — env config alone does not intercept MCP traffic. Disable individual protections with the corresponding `AGENTICDOME_MCP_PROTECT_*` setting when a simple host needs passthrough behavior. AgenticDome protects only the routed local boundary and configured returned-result paths; it cannot inspect code inside a remote third-party MCP server you do not control. `forward_with_firewall()` enforces policy blocks, but currently returns the original response after an unexpected non-policy result-sanitization error. Applications requiring fail-closed output handling must catch and block review failures explicitly. Pass `mcp_server_id`, `mcp_server_url`, `mcp_server_vendor`, and trust metadata in `context` for per-server policy decisions. Use stable `session_id` values; set `AGENTICDOME_REQUIRE_SESSION_ID=true` when every host request should be traceable.
+Notes: call `preflight_request()` or `forward_with_firewall()` in the host, gateway, proxy, or router that forwards JSON-RPC requests — env config alone does not intercept MCP traffic. Disable individual protections with the corresponding `AGENTICDOME_MCP_PROTECT_*` setting when a simple host needs passthrough behavior. AgenticDome protects only the routed local boundary and configured returned-result paths; it cannot inspect code inside a remote third-party MCP server you do not control. `forward_with_firewall()` fails closed on request-policy or response-review failures unless fail-open was explicitly configured. Pass `mcp_server_id`, `mcp_server_url`, `mcp_server_vendor`, and trust metadata in `context` for per-server policy decisions. Use stable `session_id` values; set `AGENTICDOME_REQUIRE_SESSION_ID=true` when every host request should be traceable.
+
+For a low-code Streamable HTTP boundary, configure the fixed upstream and real
+identity/purpose values generated by `agenticdome mcp protect`, then run
+`python -m agenticdome_sdk.mcp_http_gateway` behind authenticated TLS ingress.
+It accepts JSON responses and Streamable HTTP SSE on POST or GET, refuses
+redirects and fails closed. It blocks legacy SSE `endpoint` advertisements,
+whose separate message endpoint needs a separately reviewed local adapter.
+Enable `AGENTICDOME_MCP_TRUST_IDENTITY_HEADERS=true` only behind ingress that
+authenticates the caller, strips caller-supplied identity headers and sets the
+trusted session/user headers itself.
 
 ```python
 from agenticdome_sdk.mcp_host import (

{agenticdome_python_sdk-1.2.25 → agenticdome_python_sdk-1.2.26}/agenticdome_python_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.25
+Version: 1.2.26
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -38,10 +38,10 @@ Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
 Requires-Dist: cryptography>=42.0.0; extra == "pop"
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai<=2.33.0,>=2.16.0; extra == "pydanticai"
+Requires-Dist: pydantic-ai<=2.35.1,>=2.16.0; extra == "pydanticai"
 Requires-Dist: anyio>=4.0.0; extra == "pydanticai"
 Provides-Extra: pydantic
-Requires-Dist: pydantic-ai<=2.33.0,>=2.16.0; extra == "pydantic"
+Requires-Dist: pydantic-ai<=2.35.1,>=2.16.0; extra == "pydantic"
 Requires-Dist: anyio>=4.0.0; extra == "pydantic"
 Provides-Extra: langgraph
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "langgraph"
@@ -57,48 +57,48 @@ Provides-Extra: foundry
 Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "foundry"
 Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
-Requires-Dist: agno<=2.9.0,>=2.8.0; extra == "agno"
+Requires-Dist: agno<=3.0.1,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
 Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
 Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.78,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.81,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.78,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.81,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llama-index"
 Provides-Extra: google-adk
-Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "google-adk"
+Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "google-adk"
 Provides-Extra: adk
-Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "adk"
+Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "adk"
 Provides-Extra: claude
-Requires-Dist: claude-agent-sdk<=0.2.144,>=0.2.126; extra == "claude"
+Requires-Dist: claude-agent-sdk<=0.2.145,>=0.2.126; extra == "claude"
 Provides-Extra: claude-agent-sdk
-Requires-Dist: claude-agent-sdk<=0.2.144,>=0.2.126; extra == "claude-agent-sdk"
+Requires-Dist: claude-agent-sdk<=0.2.145,>=0.2.126; extra == "claude-agent-sdk"
 Provides-Extra: smolagents
 Requires-Dist: smolagents==1.26.0; extra == "smolagents"
 Provides-Extra: all
 Requires-Dist: crewai<=1.15.17,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
-Requires-Dist: pydantic-ai<=2.33.0,>=2.16.0; extra == "all"
+Requires-Dist: pydantic-ai<=2.35.1,>=2.16.0; extra == "all"
 Requires-Dist: anyio>=4.0.0; extra == "all"
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "all"
 Requires-Dist: langchain-core<=1.6.0,>=1.5.0; extra == "all"
 Requires-Dist: langchain-openai==1.3.5; extra == "all"
 Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
-Requires-Dist: agno<=2.9.0,>=2.8.0; extra == "all"
+Requires-Dist: agno<=3.0.1,>=2.8.0; extra == "all"
 Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
 Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "all"
 Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.78,>=1.43.54; extra == "all"
+Requires-Dist: boto3<=1.43.81,>=1.43.54; extra == "all"
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "all"
-Requires-Dist: google-adk<=2.7.1,>=2.5.0; extra == "all"
-Requires-Dist: claude-agent-sdk<=0.2.144,>=0.2.126; extra == "all"
+Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "all"
+Requires-Dist: claude-agent-sdk<=0.2.145,>=0.2.126; extra == "all"
 Requires-Dist: smolagents==1.26.0; extra == "all"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
@@ -183,6 +183,44 @@ The private plan is required because production verification consumes its
 signed, catalog-bound semantic analysis. `agenticdome scaffold` remains
 optional and writes an unapplied patch for review.
 
+For an MCP client, host, gateway or server workload, use the focused path:
+
+```bash
+agenticdome mcp protect
+# review the detected role/transport, boundaries, registry and unapplied patch
+agenticdome mcp verify
+```
+
+`mcp protect` adds no customer source changes. `mcp verify` runs the workload's
+tests, a real JSON-RPC stdio subprocess interception rehearsal and live
+assigned-sidecar decisions. The customer Control Panel combines that evidence
+with retained runtime evidence before representing production readiness.
+
+For an OpenClaw workspace, first install and enable the published native
+plugin, grant its explicit conversation-hook consent and restart the gateway.
+Then use the focused, source-free proof path:
+
+```bash
+openclaw plugins install npm:agenticdome-openclaw-security
+openclaw plugins enable agenticdome-security
+openclaw config set plugins.entries.agenticdome-security.hooks.allowConversationAccess true
+openclaw gateway restart
+agenticdome openclaw protect
+# With AGENTICDOME_API_BASE, AGENTICDOME_TENANT_ID and the dedicated
+# AGENTICDOME_COPILOT_API_KEY set, generate and review the signed plan:
+agenticdome plan
+# Also set AGENTICDOME_API_KEY for the live tenant decision proof:
+agenticdome openclaw verify --output .agenticdome/verification.json
+```
+
+`openclaw protect` fails unless the active OpenClaw runtime reports the loaded
+AgenticDome plugin, explicit consent and the exact certified typed hooks.
+`agenticdome plan` returns source-free, tenant-bound Integration Copilot
+guidance for review. `openclaw verify` adds workspace-test and assigned-tenant
+policy evidence. The
+customer Control Panel separately confirms tenant binding and retained
+telemetry; neither command silently modifies customer source.
+
 When `.agenticdome/inspection.json` is imported into Developer Integration,
 the Control Panel adds its detected frameworks to the workload. Frameworks,
 languages and candidate boundaries can be discovered locally; business
@@ -2386,7 +2424,17 @@ export AGENTICDOME_MCP_RATE_LIMIT_PER_MINUTE="0"
 # export AGENTICDOME_REDIS_KEY_PREFIX="AgenticDome:mcp:handoff"
 ```
 
-Notes: call `preflight_request()` or `forward_with_firewall()` in the host, gateway, proxy, or router that forwards JSON-RPC requests — env config alone does not intercept MCP traffic. Disable individual protections with the corresponding `AGENTICDOME_MCP_PROTECT_*` setting when a simple host needs passthrough behavior. AgenticDome protects only the routed local boundary and configured returned-result paths; it cannot inspect code inside a remote third-party MCP server you do not control. `forward_with_firewall()` enforces policy blocks, but currently returns the original response after an unexpected non-policy result-sanitization error. Applications requiring fail-closed output handling must catch and block review failures explicitly. Pass `mcp_server_id`, `mcp_server_url`, `mcp_server_vendor`, and trust metadata in `context` for per-server policy decisions. Use stable `session_id` values; set `AGENTICDOME_REQUIRE_SESSION_ID=true` when every host request should be traceable.
+Notes: call `preflight_request()` or `forward_with_firewall()` in the host, gateway, proxy, or router that forwards JSON-RPC requests — env config alone does not intercept MCP traffic. Disable individual protections with the corresponding `AGENTICDOME_MCP_PROTECT_*` setting when a simple host needs passthrough behavior. AgenticDome protects only the routed local boundary and configured returned-result paths; it cannot inspect code inside a remote third-party MCP server you do not control. `forward_with_firewall()` fails closed on request-policy or response-review failures unless fail-open was explicitly configured. Pass `mcp_server_id`, `mcp_server_url`, `mcp_server_vendor`, and trust metadata in `context` for per-server policy decisions. Use stable `session_id` values; set `AGENTICDOME_REQUIRE_SESSION_ID=true` when every host request should be traceable.
+
+For a low-code Streamable HTTP boundary, configure the fixed upstream and real
+identity/purpose values generated by `agenticdome mcp protect`, then run
+`python -m agenticdome_sdk.mcp_http_gateway` behind authenticated TLS ingress.
+It accepts JSON responses and Streamable HTTP SSE on POST or GET, refuses
+redirects and fails closed. It blocks legacy SSE `endpoint` advertisements,
+whose separate message endpoint needs a separately reviewed local adapter.
+Enable `AGENTICDOME_MCP_TRUST_IDENTITY_HEADERS=true` only behind ingress that
+authenticates the caller, strips caller-supplied identity headers and sets the
+trusted session/user headers itself.
 
 ```python
 from agenticdome_sdk.mcp_host import (

{agenticdome_python_sdk-1.2.25 → agenticdome_python_sdk-1.2.26}/agenticdome_python_sdk.egg-info/SOURCES.txt

@@ -31,6 +31,9 @@ agenticdome_sdk/identity.py
 agenticdome_sdk/langgraph.py
 agenticdome_sdk/llamaindex.py
 agenticdome_sdk/mcp_host.py
+agenticdome_sdk/mcp_http_gateway.py
+agenticdome_sdk/mcp_rehearsal_server.py
+agenticdome_sdk/mcp_verification.py
 agenticdome_sdk/microsoft_agent_framework.py
 agenticdome_sdk/microsoft_ai_foundry.py
 agenticdome_sdk/onboarding_cli.py

{agenticdome_python_sdk-1.2.25 → agenticdome_python_sdk-1.2.26}/agenticdome_python_sdk.egg-info/requires.txt

@@ -2,46 +2,46 @@ requests>=2.31.0
 urllib3>=2.0.0
 
 [adk]
-google-adk<=2.7.1,>=2.5.0
+google-adk<=2.8.0,>=2.5.0
 
 [agno]
-agno<=2.9.0,>=2.8.0
+agno<=3.0.1,>=2.8.0
 
 [all]
 crewai<=1.15.17,>=1.15.5
 redis>=4.5.0
 cryptography>=42.0.0
-pydantic-ai<=2.33.0,>=2.16.0
+pydantic-ai<=2.35.1,>=2.16.0
 anyio>=4.0.0
 langgraph<=1.2.11,>=1.2.9
 langchain-core<=1.6.0,>=1.5.0
 langchain-openai==1.3.5
 autogen-agentchat==0.7.5
-agno<=2.9.0,>=2.8.0
+agno<=3.0.1,>=2.8.0
 azure-ai-projects<=2.5.0,>=2.3.0
 azure-identity==1.25.3
 openai-agents<=0.22.0,>=0.18.3
 mcp<=1.28.1,>=1.26.0
-boto3<=1.43.78,>=1.43.54
+boto3<=1.43.81,>=1.43.54
 llama-index<=0.14.24,>=0.14.23
-google-adk<=2.7.1,>=2.5.0
-claude-agent-sdk<=0.2.144,>=0.2.126
+google-adk<=2.8.0,>=2.5.0
+claude-agent-sdk<=0.2.145,>=0.2.126
 smolagents==1.26.0
 
 [autogen]
 autogen-agentchat==0.7.5
 
 [aws-bedrock]
-boto3<=1.43.78,>=1.43.54
+boto3<=1.43.81,>=1.43.54
 
 [bedrock]
-boto3<=1.43.78,>=1.43.54
+boto3<=1.43.81,>=1.43.54
 
 [claude]
-claude-agent-sdk<=0.2.144,>=0.2.126
+claude-agent-sdk<=0.2.145,>=0.2.126
 
 [claude-agent-sdk]
-claude-agent-sdk<=0.2.144,>=0.2.126
+claude-agent-sdk<=0.2.145,>=0.2.126
 
 [crewai]
 crewai<=1.15.17,>=1.15.5
@@ -62,7 +62,7 @@ azure-ai-projects<=2.5.0,>=2.3.0
 azure-identity==1.25.3
 
 [google-adk]
-google-adk<=2.7.1,>=2.5.0
+google-adk<=2.8.0,>=2.5.0
 
 [langgraph]
 langgraph<=1.2.11,>=1.2.9
@@ -91,11 +91,11 @@ openai-agents<=0.22.0,>=0.18.3
 cryptography>=42.0.0
 
 [pydantic]
-pydantic-ai<=2.33.0,>=2.16.0
+pydantic-ai<=2.35.1,>=2.16.0
 anyio>=4.0.0
 
 [pydanticai]
-pydantic-ai<=2.33.0,>=2.16.0
+pydantic-ai<=2.35.1,>=2.16.0
 anyio>=4.0.0
 
 [redis]

{agenticdome_python_sdk-1.2.25 → agenticdome_python_sdk-1.2.26}/agenticdome_sdk/catalog_snapshot.json

@@ -1,13 +1,13 @@
 {
     "schema": "agenticdome.catalog-snapshot.v1",
     "catalog_schema": "agenticdome.hook-catalog.v1",
-    "verified_at": "2026-08-23",
-    "python_sdk_version": "1.2.25",
+    "verified_at": "2026-08-27",
+    "python_sdk_version": "1.2.26",
     "published_packages": {
         "agenticdome-python-sdk": {
             "registry": "pypi",
-            "version": "1.2.25",
-            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.25/"
+            "version": "1.2.26",
+            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.26/"
         },
         "agenticdome-sdk": {
             "registry": "npm",

{agenticdome_python_sdk-1.2.25 → agenticdome_python_sdk-1.2.26}/agenticdome_sdk/hook_catalog.py

@@ -116,7 +116,7 @@ FRAMEWORK_HOOK_CATALOG: Dict[str, Dict[str, Any]] = {
         "agenticdome_sdk.integrations.pydanticai",
         "CyberSecFirewall",
         ["install_native_hooks", "secure_tool"],
-        packages={"pydantic-ai": {"min":"2.16.0","max":"2.33.0"}},
+        packages={"pydantic-ai": {"min":"2.16.0","max":"2.35.1"}},
         native_modules=[{"module": "pydantic_ai", "attrs": ["Agent", "RunContext"]}],
         adapter_attrs=[
             {
@@ -201,7 +201,7 @@ FRAMEWORK_HOOK_CATALOG: Dict[str, Dict[str, Any]] = {
         "agenticdome_sdk.integrations.claude",
         "AgenticDomeClaudeFirewall",
         ["install_on_options", "secure_query", "run_client_securely", "secure_sdk_tool"],
-        packages={"claude-agent-sdk": {"min":"0.2.126","max":"0.2.144"}},
+        packages={"claude-agent-sdk": {"min":"0.2.126","max":"0.2.145"}},
         native_modules=[
             {
                 "module": "claude_agent_sdk",
@@ -226,7 +226,7 @@ FRAMEWORK_HOOK_CATALOG: Dict[str, Dict[str, Any]] = {
         "agenticdome_sdk.integrations.agno",
         "AgenticDomeAgnoFirewall",
         ["attach_firewall", "secure_tool", "create_hook_bundle"],
-        packages={"agno": {"min": "2.8.0", "max": "2.9.0"}},
+        packages={"agno": {"min":"2.8.0","max":"3.0.1"}},
         native_modules=[{"module": "agno.agent", "attrs": ["Agent"]}],
         native_smoke={"module": "agenticdome_sdk.integrations.agno", "call": "attach_firewall"},
         docs="docs/frameworks/agno.md",
@@ -236,7 +236,7 @@ FRAMEWORK_HOOK_CATALOG: Dict[str, Dict[str, Any]] = {
         "agenticdome_sdk.integrations.google_adk",
         "AgenticDomeGoogleADKFirewall",
         ["build_callback_kwargs", "install_on_agent", "wrap_tool_handler"],
-        packages={"google-adk": {"min": "2.5.0", "max": "2.7.1"}},
+        packages={"google-adk": {"min":"2.5.0","max":"2.8.0"}},
         native_modules=[
             {"module": "google.adk.agents", "attrs": ["Agent"]},
             {"module": "google.adk.tools", "attrs": ["FunctionTool"]},
@@ -262,7 +262,7 @@ FRAMEWORK_HOOK_CATALOG: Dict[str, Dict[str, Any]] = {
         "agenticdome_sdk.integrations.aws_bedrock",
         "AgenticDomeAWSBedrockFirewall",
         ["converse_securely", "wrap_tool_handler", "wrap_action_group_lambda"],
-        packages={"boto3": {"min":"1.43.54","max":"1.43.78"}},
+        packages={"boto3": {"min":"1.43.54","max":"1.43.81"}},
         native_modules=[{"module": "boto3", "attrs": ["client"]}],
         native_smoke={"module": "agenticdome_sdk.integrations.aws_bedrock", "call": "wrap_tool_handler"},
         docs="docs/frameworks/aws-bedrock.md",
@@ -277,6 +277,8 @@ FRAMEWORK_HOOK_CATALOG: Dict[str, Dict[str, Any]] = {
             "authorize_mcp_method",
             "sanitize_text",
             "sanitize_mcp_result",
+            "review_forwarded_response",
+            "forward_with_firewall",
         ],
         packages={"mcp": {"min": "1.26.0", "max": "1.28.1"}},
         native_modules=[
@@ -327,23 +329,23 @@ FRAMEWORK_HOOK_CATALOG: Dict[str, Dict[str, Any]] = {
         "docs": "agenticdome-openclaw-security package README",
     },
     "mcp-ts": {
-        "label": "MCP API Client Surface (TypeScript)",
+        "label": "MCP Host / Gateway Firewall (TypeScript)",
         "language": "typescript",
         "registry": "npm",
         "agenticdome_package": "agenticdome-sdk",
         "packages": {"agenticdome-sdk": {"exact": PUBLISHED_AGENTICDOME_PACKAGES["agenticdome-sdk"]["version"]}},
         "runtime": {"node": ">=18"},
         "adapter_module": "agenticdome-sdk",
-        "adapter_class": "AgenticDomeClient",
-        "attachment_methods": ["mcpToolCall", "mcpGuardrailValidate", "mcpListTools"],
+        "adapter_class": "AgenticDomeMCPGateway",
+        "attachment_methods": ["forward", "preflight", "mcpToolCall", "mcpGuardrailValidate", "mcpListTools"],
         "native_hooks": [],
         "protocol_methods": ["tools/call", "tools/list"],
-        "integration_scope": "transport_neutral_client",
+        "integration_scope": "transport_neutral_host_gateway",
         "external_sdk": {
             "package": "@modelcontextprotocol/sdk",
             "relationship": "not_a_dependency",
             "certification": "not_applicable",
-            "note": "agenticdome-sdk sends MCP policy requests through its own transport-neutral client API; customer MCP transports may use @modelcontextprotocol/sdk independently.",
+            "note": "AgenticDomeMCPGateway wraps an injected customer MCP transport without depending on it; customer transports may use @modelcontextprotocol/sdk independently.",
         },
         "docs": "agenticdome-sdk package README (MCP section)",
     },
@@ -427,7 +429,13 @@ _HARNESS_VERIFICATION: Dict[str, Dict[str, Any]] = {
     },
     "mcp": {
         "adapter_attrs": ["AgenticDomeMCPHostFirewall"],
-        "firewall_methods": ["screen_upstream_prompt", "authorize_mcp_tool_call", "authorize_mcp_method", "sanitize_text", "sanitize_mcp_result"],
+        "firewall_methods": ["screen_upstream_prompt", "authorize_mcp_tool_call", "authorize_mcp_method", "sanitize_text", "sanitize_mcp_result", "review_forwarded_response", "forward_with_firewall"],
+        "low_code_gateway": {
+            "module": "agenticdome_sdk.mcp_http_gateway",
+            "transport": "streamable_http",
+            "response_modes": ["application/json", "text/event-stream"],
+            "legacy_standalone_sse": "requires_reviewed_local_adapter",
+        },
     },
     "custom-python": {
         "adapter_attrs": ["AgenticDomeClient"],
@@ -437,17 +445,17 @@ _HARNESS_VERIFICATION: Dict[str, Dict[str, Any]] = {
 
 _PACKAGE_CERTIFICATION_DATES: Dict[str, Dict[str, str]] = {
     "crewai": {"crewai":"2026-08-20"},
-    "pydanticai": {"pydantic-ai": "2026-08-22"},
+    "pydanticai": {"pydantic-ai": "2026-08-27"},
     "langgraph": {"langgraph": "2026-08-12", "langchain-core": "2026-08-20"},
     "autogen": {"autogen-agentchat": "2026-07-26"},
     "foundry": {"azure-ai-projects": "2026-08-22", "azure-identity": "2026-07-10"},
     "openai-agents": {"openai-agents": "2026-08-22"},
-    "claude": {"claude-agent-sdk": "2026-08-23"},
+    "claude": {"claude-agent-sdk": "2026-08-27"},
     "smolagents": {"smolagents": "2026-07-23"},
-    "agno": {"agno": "2026-08-16"},
-    "google-adk": {"google-adk": "2026-08-18"},
+    "agno": {"agno": "2026-08-27"},
+    "google-adk": {"google-adk": "2026-08-27"},
     "llamaindex": {"llama-index": "2026-08-20"},
-    "bedrock": {"boto3": "2026-08-23"},
+    "bedrock": {"boto3": "2026-08-27"},
     "mcp": {"mcp": "2026-07-10"},
 }