agenticdome-python-sdk 1.2.28__py3-none-any.whl → 1.2.30__py3-none-any.whl

{agenticdome_python_sdk-1.2.28.dist-info → agenticdome_python_sdk-1.2.30.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.28
+Version: 1.2.30
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -31,21 +31,22 @@ License-File: LICENSE
 License-File: NOTICE
 Requires-Dist: requests>=2.31.0
 Requires-Dist: urllib3>=2.0.0
+Requires-Dist: cryptography>=42.0.0
 Provides-Extra: crewai
-Requires-Dist: crewai<=1.15.18,>=1.15.5; extra == "crewai"
+Requires-Dist: crewai<=1.15.21,>=1.15.5; extra == "crewai"
 Provides-Extra: redis
 Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
 Requires-Dist: cryptography>=42.0.0; extra == "pop"
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai<=2.36.0,>=2.16.0; extra == "pydanticai"
+Requires-Dist: pydantic-ai<=2.42.0,>=2.16.0; extra == "pydanticai"
 Requires-Dist: anyio>=4.0.0; extra == "pydanticai"
 Provides-Extra: pydantic
-Requires-Dist: pydantic-ai<=2.36.0,>=2.16.0; extra == "pydantic"
+Requires-Dist: pydantic-ai<=2.42.0,>=2.16.0; extra == "pydantic"
 Requires-Dist: anyio>=4.0.0; extra == "pydantic"
 Provides-Extra: langgraph
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "langgraph"
-Requires-Dist: langchain-core<=1.6.1,>=1.5.0; extra == "langgraph"
+Requires-Dist: langchain-core<=1.6.2,>=1.5.0; extra == "langgraph"
 Requires-Dist: langchain-openai==1.3.5; extra == "langgraph"
 Requires-Dist: anyio>=4.0.0; extra == "langgraph"
 Provides-Extra: microsoft
@@ -54,18 +55,18 @@ Requires-Dist: autogen-agentchat==0.7.5; extra == "autogen"
 Provides-Extra: microsoft-autogen
 Requires-Dist: autogen-agentchat==0.7.5; extra == "microsoft-autogen"
 Provides-Extra: foundry
-Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "foundry"
+Requires-Dist: azure-ai-projects<=2.6.0,>=2.3.0; extra == "foundry"
 Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
-Requires-Dist: agno<=3.0.4,>=2.8.0; extra == "agno"
+Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
-Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "openai-agents"
+Requires-Dist: openai-agents<=0.22.2,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
-Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "mcp"
+Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.83,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.91,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.83,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.91,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
@@ -75,30 +76,30 @@ Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "google-adk"
 Provides-Extra: adk
 Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "adk"
 Provides-Extra: claude
-Requires-Dist: claude-agent-sdk<=0.2.148,>=0.2.126; extra == "claude"
+Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude"
 Provides-Extra: claude-agent-sdk
-Requires-Dist: claude-agent-sdk<=0.2.148,>=0.2.126; extra == "claude-agent-sdk"
+Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude-agent-sdk"
 Provides-Extra: smolagents
 Requires-Dist: smolagents==1.26.0; extra == "smolagents"
 Provides-Extra: all
-Requires-Dist: crewai<=1.15.18,>=1.15.5; extra == "all"
+Requires-Dist: crewai<=1.15.21,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
-Requires-Dist: pydantic-ai<=2.36.0,>=2.16.0; extra == "all"
+Requires-Dist: pydantic-ai<=2.42.0,>=2.16.0; extra == "all"
 Requires-Dist: anyio>=4.0.0; extra == "all"
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "all"
-Requires-Dist: langchain-core<=1.6.1,>=1.5.0; extra == "all"
+Requires-Dist: langchain-core<=1.6.2,>=1.5.0; extra == "all"
 Requires-Dist: langchain-openai==1.3.5; extra == "all"
 Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
-Requires-Dist: agno<=3.0.4,>=2.8.0; extra == "all"
-Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "all"
+Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "all"
+Requires-Dist: azure-ai-projects<=2.6.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
-Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "all"
-Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.83,>=1.43.54; extra == "all"
+Requires-Dist: openai-agents<=0.22.2,>=0.18.3; extra == "all"
+Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "all"
+Requires-Dist: boto3<=1.43.91,>=1.43.54; extra == "all"
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "all"
 Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "all"
-Requires-Dist: claude-agent-sdk<=0.2.148,>=0.2.126; extra == "all"
+Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "all"
 Requires-Dist: smolagents==1.26.0; extra == "all"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
@@ -2336,7 +2337,7 @@ Start with the dedicated [MCP Host and Gateway Action Firewall guide](https://gi
 pip install "agenticdome-python-sdk[mcp]"
 ```
 
-**MCP package compatibility:** the `[mcp]` extra currently installs the externally certified PyPI range `mcp>=1.26.0,<=1.28.1`. That is the supported range of the third-party `mcp` package, not the version of AgenticDome's SDK. MCP 2.0 removed the certified `mcp.server.fastmcp` import surface, and CrewAI 1.15.5 declares `mcp~=1.28.1` for combined installs. Keep the ceiling until an isolated MCP 2.x certification passes the native imports, adapter checks, preserved 1.x floor, and package gates. The AgenticDome firewall itself is plain-JSON-RPC and dependency-light, but installing the base SDK beside an independently managed MCP 2.x transport does not constitute a formally certified MCP 2.x support claim.
+**MCP package compatibility:** the `[mcp]` extra currently installs the externally certified PyPI range `mcp>=1.26.0,<=2.2.0`. That is the supported range of the third-party `mcp` package, not the version of AgenticDome's SDK. MCP 2.0 removed the certified `mcp.server.fastmcp` import surface used by the earlier native compatibility test. AgenticDome's transport-independent JSON-RPC firewall has since passed the isolated MCP 2.x certification matrix through 2.2.0 while preserving the 1.26.0 floor. CrewAI 1.15.x combined installations can still resolve the narrower MCP 1.28.x line according to CrewAI's dependency constraint; this does not reduce the independently certified AgenticDome range.
 
 **Wrap the forwarding boundary** — the full host flow is `JSON-RPC request → rate limit / upstream prompt screen → method authorization → optional delegation-token verification → third-party MCP server → list filtering / result sanitization → client`:
 
@@ -2606,6 +2607,30 @@ result = client.mesh_validate(
 print(result)
 ```
 
+**Multimodal content descriptors:**
+
+Use `inspect_content()` when a document, image, audio or video processor has
+already produced bounded text, a transcript, trusted sensitivity labels, or a
+content digest. The active tenant policy is evaluated inside the assigned
+AgenticDome runtime. OCR, transcription and proprietary classification are not
+shipped in this public SDK, and the returned evidence does not retain raw
+content.
+
+```python
+verdict = client.inspect_content(
+    direction="output",
+    content_parts=[{
+        "modality": "image",
+        "mime_type": "image/png",
+        "content_sha256": "sha256:" + image_digest,
+        "labels": ["phi"],
+    }],
+    policy_context={"request_purpose": "clinical-summary-delivery"},
+)
+if verdict["verdict"] == "BLOCKED":
+    raise PermissionError(verdict["reason"])
+```
+
 **Incident reporting:**
 
 ```python
@@ -2719,6 +2744,34 @@ Plus, for every production deployment:
 
 ---
 
+## Verified Action lifecycle evidence
+
+Use `VerifiedActionReporter` for executable tool calls, function calls, MCP operations and external side effects that should appear in **Verified Actions**. It is not intended for health checks or every policy lookup.
+
+```bash
+export AGENTICDOME_EVIDENCE_API_BASE="https://your-control-plane.example"
+export AGENTICDOME_EVIDENCE_TOKEN="<portal-token-scoped-to-evidence:write>"
+```
+
+```python
+from agenticdome_sdk import VerifiedActionReporter, verified_action
+
+evidence = VerifiedActionReporter.from_env(tenant_id="your-tenant-id")
+
+@verified_action(
+    reporter=evidence,
+    operation_type="function_call",
+    executor_type="function",
+    target_type="service",
+)
+def refresh_customer_record(customer_id: str):
+    ...
+```
+
+The reporter uses a bounded, non-blocking queue and retains hashes plus normalized lifecycle metadata only. It never sends raw arguments, results, prompts, source, or credentials. The dedicated evidence token is separate from the Runtime / SDK key: authorization stays on the assigned sidecar and evidence-delivery failure never changes its allow/deny decision. Integrations built on the shared framework `secure_tool` / `wrap_tool_handler` boundary and the MCP host/gateway wrapper report the same lifecycle automatically when these optional evidence variables are present; other custom boundaries can use the decorator above.
+
+---
+
 ## Source Installation and Verification
 
 Most customers should install the published package from PyPI. Contributors evaluating the public source can run the public tests from the SDK root:

{agenticdome_python_sdk-1.2.28.dist-info → agenticdome_python_sdk-1.2.30.dist-info}/RECORD

@@ -1,37 +1,41 @@
-agenticdome_python_sdk-1.2.28.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
-agenticdome_python_sdk-1.2.28.dist-info/licenses/NOTICE,sha256=obvKP6kV1Ny5R8_INFOpf0X5um9U2X43LGwQFobO9kg,550
-agenticdome_sdk/__init__.py,sha256=dNi4ndORi_fxskZY4IyUMc9C8jTM84aE2ybr79L84ss,685
-agenticdome_sdk/_framework_firewall.py,sha256=NKOUuYlkvm9f_evaaA4Uts9pxaPAvhgGeIKWj7le9ow,29642
+agenticdome_python_sdk-1.2.30.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+agenticdome_python_sdk-1.2.30.dist-info/licenses/NOTICE,sha256=obvKP6kV1Ny5R8_INFOpf0X5um9U2X43LGwQFobO9kg,550
+agenticdome_sdk/__init__.py,sha256=UY__0ppEM4MlsTQoLh8alZ7AoMjtegGKe4j_Sj7CpNk,903
+agenticdome_sdk/_framework_firewall.py,sha256=W3gy7WsK50scE7ypJrmVJhHUOBsr0zAWQ85rghqaJk4,31963
 agenticdome_sdk/_mode.py,sha256=XvOgh5sW-FG8S39V483h3uLiFh8wSt14OmYXz_6eDO8,1283
 agenticdome_sdk/agno.py,sha256=L3yfjTBHW47xzT67a1DsjtwmvrAoYBkbxADpsr85Cp0,60766
+agenticdome_sdk/attestation.py,sha256=XFMq8UEMU8L_8-wH6gKTkWJQguYDm3pbZ65G506bLiw,10126
 agenticdome_sdk/autogen.py,sha256=KP4qlIcsNXB-4ZT9D7Slc1xWEeWXRIWkc5HGW0U6k2c,29018
 agenticdome_sdk/aws_bedrock.py,sha256=2zD9j7xi0jna0sMeMf-hKZdc3Y4RPwzj6tMVOUGgIDQ,69581
-agenticdome_sdk/catalog_snapshot.json,sha256=sWkErTQOI3BpAALn2eNP6LvMjvAGusgTtl4eysZm9Xg,951
+agenticdome_sdk/catalog_snapshot.json,sha256=ixwzcK8geYTdan-UrZde0X-twunMHBziPz97fum0LBo,951
 agenticdome_sdk/claude.py,sha256=XeY9AUu61SYcJjQVz_AtL_WaN6X4KqP5nprEbbr4Q6A,17456
-agenticdome_sdk/client.py,sha256=4Kh3FpY0JDZ6pOA_1wzcYVnagbje-fEYcz0djpzsrZI,63601
+agenticdome_sdk/client.py,sha256=Sr43Qp3JWqHGCjWwelgIWGjHPsEdnxaoang70DMOufA,67641
+agenticdome_sdk/connect.py,sha256=yNRh84mqdWr73fXW3S8Zc_lV1QN6gce5T6mZ20cr8ps,16726
 agenticdome_sdk/copilot_ir.py,sha256=OMkzkVGSP2pFkxZBjAXNCCRcJk21X0wnllWNhQeErp0,16588
 agenticdome_sdk/copilot_ir_collector.cjs,sha256=oxLY8ByONo7Es4YjYiJuRz_A7IKL65Sy486UXnu-4Rs,9681
 agenticdome_sdk/crewai.py,sha256=sSJQ49O7-8kqOAD2_jrsMtMOmBOcJmFkeOv7S3-ayMs,52490
 agenticdome_sdk/demo.py,sha256=dyfqt2N_cJoyUWKnjPYuQxuw2hb2DrCNUf1jQKeYYoc,8350
 agenticdome_sdk/google_adk.py,sha256=2TA-tUhY0lOnkGcs1BN9CUEz67ebVX4HJ7mnNoRPcZs,57258
-agenticdome_sdk/hook_catalog.py,sha256=PABcv8nKm_05Zs9RQ6cW4CLHwJ7iqXk6Eyz-cPmYiAo,29293
+agenticdome_sdk/hook_catalog.py,sha256=PduNxLhnBiIF14mAxABnpBPsvR7sTzDmCyudbU1BvrI,29272
 agenticdome_sdk/identity.py,sha256=mrymGgZSVsKJ9THRde54qGmMT7j_uZHmPJ-HtWk7PXE,4635
 agenticdome_sdk/langgraph.py,sha256=FUvF6DSA5aZP3eoBoNeldgGtPrz-dO5xcVmrPPSBEhI,84312
+agenticdome_sdk/lifecycle.py,sha256=9LvxmUU1LC_tMchb5uVFBnZIkVFUxOv3VH9wG_9gPtA,12855
 agenticdome_sdk/llamaindex.py,sha256=BHplSUIsgMi7k8tBztprzaV9iaOXiljXbdeMRax_2h8,42860
-agenticdome_sdk/mcp_host.py,sha256=E2MQ2s0tJQrohOSWTqjFsD7PQ2q0WhceNNFEwqmT8sI,61114
+agenticdome_sdk/mcp_host.py,sha256=bJG0pCfMYkI6ig4tmPvtJKcdFFfDOXNmatLbh_X9lso,63283
 agenticdome_sdk/mcp_http_gateway.py,sha256=j7B_IVhr0QLSPdsE8iVKcH0mCtQN7EE622JKY3d2LHI,13533
 agenticdome_sdk/mcp_rehearsal_server.py,sha256=cox4XqUTL8d0gaDzqxDZcEALkaz8otjOjOqHvoUeeCo,2118
 agenticdome_sdk/mcp_verification.py,sha256=VqQS5SpPVFI3G7qCwrT90JmG8vFE6pRJEB7PViHjKqw,14235
 agenticdome_sdk/microsoft_agent_framework.py,sha256=GfIIuk0n-VhsZaTyoB7P6ilpz9bFLD95TWuX0rFSWeU,67219
 agenticdome_sdk/microsoft_ai_foundry.py,sha256=YlO968s1dbAYcaEqhqufL92NFR66GuTtngnCv7-1mYc,56911
-agenticdome_sdk/onboarding_cli.py,sha256=nQzxu6WV10YVETP2mwGEqwwhncR_MJ1w6o_BIdt7BeY,87776
+agenticdome_sdk/onboarding_cli.py,sha256=8ymGtNmllNH6lP87pvxHe2GySlcsHoDoLiispfQ5rDs,95417
 agenticdome_sdk/openai_agents.py,sha256=nNM-YcsUDcE23sGv1buLudcYFz0NLju2Mwiw_wrVaJg,57326
+agenticdome_sdk/outcomes.py,sha256=jadWDzQaZXrHNvpPme8lQY0jihYLCoM3s4CihAq0JRo,2507
 agenticdome_sdk/proof.py,sha256=ECKc14xSE0V1HHmcpZjfVz8-Q2H_fooah3BfdblFV8M,2878
 agenticdome_sdk/pydantic.py,sha256=WKb8X0Fgydfid-ep8E-M8Yslz2pWcCP6w7n_aBxt1rI,54961
 agenticdome_sdk/simulation.py,sha256=UCbZy3u9AzfxQCfY38SCV3CxGxhinV9EA4aHMPlK4mc,8426
 agenticdome_sdk/smolagents.py,sha256=wjMA1HVAQ-9wRNM38Jr9wlCpKMhF-9vxtTk6R-kwQhs,19094
-agenticdome_python_sdk-1.2.28.dist-info/METADATA,sha256=rUEBdKXqmbfj_JG1ybkrwSsmqVNBORweFYLP5vw_FXs,136861
-agenticdome_python_sdk-1.2.28.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-agenticdome_python_sdk-1.2.28.dist-info/entry_points.txt,sha256=cRfCphkr5gLrkGIzXJEtL50HdHLajoZLbZtcMLE8NoY,113
-agenticdome_python_sdk-1.2.28.dist-info/top_level.txt,sha256=LZbbjXco5mqDrGwlTJpIKI5Sp6R_njzHHjExxAs9c3s,16
-agenticdome_python_sdk-1.2.28.dist-info/RECORD,,
+agenticdome_python_sdk-1.2.30.dist-info/METADATA,sha256=VfpIoruBWktFlx3XfM79Psr_SUgJRHllPWbRoDid-I0,139108
+agenticdome_python_sdk-1.2.30.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+agenticdome_python_sdk-1.2.30.dist-info/entry_points.txt,sha256=cRfCphkr5gLrkGIzXJEtL50HdHLajoZLbZtcMLE8NoY,113
+agenticdome_python_sdk-1.2.30.dist-info/top_level.txt,sha256=LZbbjXco5mqDrGwlTJpIKI5Sp6R_njzHHjExxAs9c3s,16
+agenticdome_python_sdk-1.2.30.dist-info/RECORD,,

agenticdome_sdk/__init__.py

@@ -2,6 +2,7 @@ from .client import AgenticDomeClient, AgenticDomeError, AgenticDomeHTTPError
 from .identity import IDENTITY_CONTEXT_VERSION, canonicalize_identity_context, enrich_policy_context
 from .proof import create_dpop_proof, generate_rsa_proof_key, jwk_thumbprint
 from ._mode import LIVE_MODE, LOCAL_SIM_MODE, is_local_sim_mode, resolve_mode
+from .lifecycle import VerifiedActionContext, VerifiedActionDenied, VerifiedActionReporter, verified_action
 
 __all__ = [
     "AgenticDomeClient",
@@ -17,4 +18,8 @@ __all__ = [
     "LOCAL_SIM_MODE",
     "is_local_sim_mode",
     "resolve_mode",
+    "VerifiedActionContext",
+    "VerifiedActionDenied",
+    "VerifiedActionReporter",
+    "verified_action",
 ]

agenticdome_sdk/_framework_firewall.py

@@ -16,6 +16,7 @@ from threading import Lock, Thread
 from typing import Any, Awaitable, Callable, Deque, Dict, Optional, Tuple, Type
 
 from .client import AgenticDomeClient
+from .lifecycle import VerifiedActionReporter
 from ._mode import credentials_or_local_sim
 
 
@@ -201,6 +202,7 @@ class FrameworkFirewallBase:
             timeout=config.timeout_s,
         )
         self.token_store = token_store or build_token_store(config, logger)
+        self.lifecycle_reporter = VerifiedActionReporter.from_env(tenant_id=config.tenant_id)
         self.denied_error = denied_error
         self.label = label
         self.logger = logger
@@ -211,6 +213,7 @@ class FrameworkFirewallBase:
         self._circuit_open_until = 0.0
 
     def close(self) -> None:
+        self.lifecycle_reporter.flush(timeout=2.0)
         try:
             self.client.close()
         except Exception:
@@ -611,35 +614,73 @@ class FrameworkFirewallBase:
             call_args = self.normalize_args(kwargs if kwargs else (args[0] if len(args) == 1 and isinstance(args[0], dict) else {}))
             sid = self.session_id(session_id)
             aid = agent_id or self.config.agent_id
-            decision = await self.aauthorize_tool_call(
-                session_id=sid, agent_id=aid, tool_name=tool_name, tool_args=call_args,
-                tool_platform=tool_platform, text=f"[{self.label}] {aid} calls {tool_name}",
+            lifecycle = self.lifecycle_reporter.new_context(
+                operation_type="tool_call", tool_name=tool_name, arguments=call_args,
+                initiator_type="agent", executor_type="tool", target_type="tool",
             )
+            self.lifecycle_reporter.phase(lifecycle, "requested", "requested")
+            try:
+                decision = await self.aauthorize_tool_call(
+                    session_id=sid, agent_id=aid, tool_name=tool_name, tool_args=call_args,
+                    tool_platform=tool_platform, text=f"[{self.label}] {aid} calls {tool_name}",
+                )
+            except Exception:
+                self.lifecycle_reporter.phase(lifecycle, "authorised", "blocked")
+                self.lifecycle_reporter.outcome(lifecycle, "not_attempted")
+                raise
+            self.lifecycle_reporter.phase(lifecycle, "authorised", "allowed")
+            self.lifecycle_reporter.phase(lifecycle, "admitted", "admitted")
             clean = self.sanitized_args(decision, call_args)
-            if kwargs:
-                raw = await handler(*args, **clean)
-            elif len(args) == 1 and isinstance(args[0], dict):
-                raw = await handler(clean)
-            else:
-                raw = await handler(*args, **kwargs)
-            return await self.areview_value(raw, session_id=sid, agent_id=aid, policy_context={"tool_name": tool_name}) if sanitize_output else raw
+            self.lifecycle_reporter.phase(lifecycle, "attempted", "attempted")
+            try:
+                if kwargs:
+                    raw = await handler(*args, **clean)
+                elif len(args) == 1 and isinstance(args[0], dict):
+                    raw = await handler(clean)
+                else:
+                    raw = await handler(*args, **kwargs)
+                reviewed = await self.areview_value(raw, session_id=sid, agent_id=aid, policy_context={"tool_name": tool_name}) if sanitize_output else raw
+            except Exception:
+                self.lifecycle_reporter.outcome(lifecycle, "failed")
+                raise
+            self.lifecycle_reporter.outcome(lifecycle, "succeeded")
+            return reviewed
 
         def sync_wrapper(*args: Any, **kwargs: Any) -> Any:
             call_args = self.normalize_args(kwargs if kwargs else (args[0] if len(args) == 1 and isinstance(args[0], dict) else {}))
             sid = self.session_id(session_id)
             aid = agent_id or self.config.agent_id
-            decision = self.authorize_tool_call(
-                session_id=sid, agent_id=aid, tool_name=tool_name, tool_args=call_args,
-                tool_platform=tool_platform, text=f"[{self.label}] {aid} calls {tool_name}",
+            lifecycle = self.lifecycle_reporter.new_context(
+                operation_type="tool_call", tool_name=tool_name, arguments=call_args,
+                initiator_type="agent", executor_type="tool", target_type="tool",
             )
+            self.lifecycle_reporter.phase(lifecycle, "requested", "requested")
+            try:
+                decision = self.authorize_tool_call(
+                    session_id=sid, agent_id=aid, tool_name=tool_name, tool_args=call_args,
+                    tool_platform=tool_platform, text=f"[{self.label}] {aid} calls {tool_name}",
+                )
+            except Exception:
+                self.lifecycle_reporter.phase(lifecycle, "authorised", "blocked")
+                self.lifecycle_reporter.outcome(lifecycle, "not_attempted")
+                raise
+            self.lifecycle_reporter.phase(lifecycle, "authorised", "allowed")
+            self.lifecycle_reporter.phase(lifecycle, "admitted", "admitted")
             clean = self.sanitized_args(decision, call_args)
-            if kwargs:
-                raw = handler(*args, **clean)
-            elif len(args) == 1 and isinstance(args[0], dict):
-                raw = handler(clean)
-            else:
-                raw = handler(*args, **kwargs)
-            return self.review_value(raw, session_id=sid, agent_id=aid, policy_context={"tool_name": tool_name}) if sanitize_output else raw
+            self.lifecycle_reporter.phase(lifecycle, "attempted", "attempted")
+            try:
+                if kwargs:
+                    raw = handler(*args, **clean)
+                elif len(args) == 1 and isinstance(args[0], dict):
+                    raw = handler(clean)
+                else:
+                    raw = handler(*args, **kwargs)
+                reviewed = self.review_value(raw, session_id=sid, agent_id=aid, policy_context={"tool_name": tool_name}) if sanitize_output else raw
+            except Exception:
+                self.lifecycle_reporter.outcome(lifecycle, "failed")
+                raise
+            self.lifecycle_reporter.outcome(lifecycle, "succeeded")
+            return reviewed
 
         wrapper = async_wrapper if is_async else sync_wrapper
         return functools.wraps(handler)(wrapper)

agenticdome_sdk/attestation.py

@@ -0,0 +1,205 @@
+"""Signed runtime-coverage evidence with no customer source or proprietary analysis."""
+
+from __future__ import annotations
+
+import base64
+import hashlib
+import json
+import os
+import threading
+import time
+import urllib.request
+import uuid
+from datetime import datetime, timezone
+from pathlib import Path
+from typing import Any, Dict, Iterable, Optional
+
+
+def _crypto():
+    try:
+        from cryptography.hazmat.primitives import hashes, serialization
+        from cryptography.hazmat.primitives.asymmetric import padding, rsa
+    except ImportError as exc:  # pragma: no cover - packaging/install failure
+        raise RuntimeError("Runtime attestation requires the SDK's cryptography dependency.") from exc
+    return hashes, serialization, padding, rsa
+
+
+def canonical_json(value: Dict[str, Any]) -> bytes:
+    return json.dumps(value, sort_keys=True, separators=(",", ":"), ensure_ascii=False).encode("utf-8")
+
+
+def ensure_attestation_key(directory: Path) -> tuple[str, str]:
+    """Return private/public PEM, creating a local non-uploaded private key once."""
+    hashes, serialization, padding, rsa = _crypto()
+    del hashes, padding
+    directory.mkdir(parents=True, exist_ok=True)
+    private_path = directory / "attestation-private.pem"
+    public_path = directory / "attestation-public.pem"
+    if private_path.exists():
+        private_pem = private_path.read_text(encoding="ascii")
+        key = serialization.load_pem_private_key(private_pem.encode("ascii"), password=None)
+    else:
+        key = rsa.generate_private_key(public_exponent=65537, key_size=3072)
+        private_pem = key.private_bytes(
+            serialization.Encoding.PEM,
+            serialization.PrivateFormat.PKCS8,
+            serialization.NoEncryption(),
+        ).decode("ascii")
+        private_path.write_text(private_pem, encoding="ascii")
+        os.chmod(private_path, 0o600)
+    public_pem = key.public_key().public_bytes(
+        serialization.Encoding.PEM,
+        serialization.PublicFormat.SubjectPublicKeyInfo,
+    ).decode("ascii")
+    public_path.write_text(public_pem, encoding="ascii")
+    os.chmod(public_path, 0o644)
+    return private_pem, public_pem
+
+
+def sign_claims(claims: Dict[str, Any], private_key_pem: str) -> str:
+    hashes, serialization, padding, rsa = _crypto()
+    del rsa
+    key = serialization.load_pem_private_key(private_key_pem.encode("ascii"), password=None)
+    signature = key.sign(canonical_json(claims), padding.PKCS1v15(), hashes.SHA256())
+    return base64.b64encode(signature).decode("ascii")
+
+
+def build_hook_manifest(
+    *, tenant_id: str, workload_uuid: str, deployment_id: str,
+    expected_hooks: Iterable[str], observed_hooks: Iterable[str],
+    private_key_pem: str, sdk_version: str, framework_versions: Optional[Dict[str, str]] = None,
+    high_impact_actions: Optional[Iterable[str]] = None, build_sha256: Optional[str] = None,
+    sdk_checksum: Optional[str] = None, ttl_seconds: int = 600,
+) -> Dict[str, Any]:
+    now = int(time.time())
+    claims: Dict[str, Any] = {
+        "schema": "agenticdome.hook-manifest.v1",
+        "tenant_id": tenant_id,
+        "workload_uuid": workload_uuid,
+        "deployment_id": deployment_id,
+        "manifest_id": str(uuid.uuid4()),
+        "build_sha256": build_sha256,
+        "sdk_checksum": sdk_checksum,
+        "sdk_version": sdk_version,
+        "framework_versions": framework_versions or {},
+        "expected_hooks": sorted(set(str(item) for item in expected_hooks if item)),
+        "observed_hooks": sorted(set(str(item) for item in observed_hooks if item)),
+        "high_impact_actions": sorted(set(str(item) for item in (high_impact_actions or []) if item)),
+        "started_at": datetime.fromtimestamp(now, timezone.utc).isoformat(),
+        "expires_at": datetime.fromtimestamp(now + max(60, min(ttl_seconds, 600)), timezone.utc).isoformat(),
+    }
+    return {**claims, "signature": sign_claims(claims, private_key_pem)}
+
+
+def build_hook_heartbeat(
+    *, tenant_id: str, workload_uuid: str, deployment_id: str, manifest_sha256: str,
+    active_hooks: Iterable[str], sequence: int, private_key_pem: str, ttl_seconds: int = 120,
+) -> Dict[str, Any]:
+    now = int(time.time())
+    claims: Dict[str, Any] = {
+        "schema": "agenticdome.hook-heartbeat.v1",
+        "tenant_id": tenant_id,
+        "workload_uuid": workload_uuid,
+        "deployment_id": deployment_id,
+        "manifest_sha256": manifest_sha256,
+        "sequence": max(1, int(sequence)),
+        "active_hooks": sorted(set(str(item) for item in active_hooks if item)),
+        "observed_at": datetime.fromtimestamp(now, timezone.utc).isoformat(),
+        "expires_at": datetime.fromtimestamp(now + max(30, min(ttl_seconds, 300)), timezone.utc).isoformat(),
+    }
+    return {**claims, "signature": sign_claims(claims, private_key_pem)}
+
+
+def manifest_sha256(manifest: Dict[str, Any]) -> str:
+    claims = {key: value for key, value in manifest.items() if key != "signature"}
+    return hashlib.sha256(canonical_json(claims)).hexdigest()
+
+
+def _post_json(url: str, payload: Dict[str, Any]) -> Dict[str, Any]:
+    request = urllib.request.Request(url, data=canonical_json(payload), method="POST", headers={"Content-Type": "application/json", "Accept": "application/json"})
+    with urllib.request.urlopen(request, timeout=15) as response:  # noqa: S310 - explicit AgenticDome portal
+        value = json.loads(response.read().decode("utf-8"))
+    if not isinstance(value, dict):
+        raise RuntimeError("AgenticDome returned an invalid attestation response.")
+    return value
+
+
+class RuntimeCoverageAttestor:
+    """Background signed manifest/heartbeat reporter; never sends source or arguments."""
+
+    def __init__(self, *, portal: str, tenant_id: str, workload_uuid: str, deployment_id: str,
+                 private_key_pem: str, expected_hooks: Iterable[str], sdk_version: str,
+                 high_impact_actions: Optional[Iterable[str]] = None, heartbeat_seconds: int = 60):
+        self.portal = portal.rstrip("/")
+        self.tenant_id = tenant_id
+        self.workload_uuid = workload_uuid
+        self.deployment_id = deployment_id
+        self.private_key_pem = private_key_pem
+        self.expected_hooks = set(str(item) for item in expected_hooks if item)
+        self.observed_hooks: set[str] = set()
+        self.sdk_version = sdk_version
+        self.high_impact_actions = set(str(item) for item in (high_impact_actions or []) if item)
+        self.heartbeat_seconds = max(15, min(int(heartbeat_seconds), 120))
+        self.sequence = 0
+        self.current_manifest_sha256 = ""
+        self.last_error: Optional[str] = None
+        self._stop = threading.Event()
+        self._thread: Optional[threading.Thread] = None
+        self._lock = threading.Lock()
+
+    @classmethod
+    def from_environment(cls, expected_hooks: Iterable[str], high_impact_actions: Optional[Iterable[str]] = None) -> Optional["RuntimeCoverageAttestor"]:
+        names = ["AGENTICDOME_CONTROL_PLANE_URL", "AGENTICDOME_TENANT_ID", "AGENTICDOME_WORKLOAD_UUID", "AGENTICDOME_DEPLOYMENT_ID", "AGENTICDOME_ATTESTATION_KEY_PATH"]
+        values = {name: os.getenv(name, "").strip() for name in names}
+        if not all(values.values()):
+            return None
+        key = Path(values["AGENTICDOME_ATTESTATION_KEY_PATH"]).read_text(encoding="ascii")
+        return cls(portal=values["AGENTICDOME_CONTROL_PLANE_URL"], tenant_id=values["AGENTICDOME_TENANT_ID"],
+                   workload_uuid=values["AGENTICDOME_WORKLOAD_UUID"], deployment_id=values["AGENTICDOME_DEPLOYMENT_ID"],
+                   private_key_pem=key, expected_hooks=expected_hooks, sdk_version=os.getenv("AGENTICDOME_SDK_VERSION", "unknown"),
+                   high_impact_actions=high_impact_actions)
+
+    def observe(self, hook_id: str) -> None:
+        if hook_id:
+            with self._lock:
+                self.observed_hooks.add(str(hook_id))
+
+    def start(self) -> None:
+        if self._thread and self._thread.is_alive():
+            return
+        self._thread = threading.Thread(target=self._run, name="agenticdome-coverage", daemon=True)
+        self._thread.start()
+
+    def stop(self, timeout: float = 2.0) -> None:
+        self._stop.set()
+        if self._thread:
+            self._thread.join(timeout=max(0.0, timeout))
+
+    def _manifest(self) -> None:
+        with self._lock:
+            observed = sorted(self.observed_hooks)
+        manifest = build_hook_manifest(tenant_id=self.tenant_id, workload_uuid=self.workload_uuid,
+                                       deployment_id=self.deployment_id, expected_hooks=self.expected_hooks,
+                                       observed_hooks=observed, private_key_pem=self.private_key_pem,
+                                       sdk_version=self.sdk_version, high_impact_actions=self.high_impact_actions)
+        _post_json(self.portal + "/api/agentguard/runtime/hook-manifest", manifest)
+        self.current_manifest_sha256 = manifest_sha256(manifest)
+
+    def _run(self) -> None:
+        manifest_at = 0.0
+        while not self._stop.is_set():
+            try:
+                if not self.current_manifest_sha256 or time.monotonic() - manifest_at >= 300:
+                    self._manifest()
+                    manifest_at = time.monotonic()
+                self.sequence += 1
+                with self._lock:
+                    active = sorted(self.observed_hooks)
+                heartbeat = build_hook_heartbeat(tenant_id=self.tenant_id, workload_uuid=self.workload_uuid,
+                                                 deployment_id=self.deployment_id, manifest_sha256=self.current_manifest_sha256,
+                                                 active_hooks=active, sequence=self.sequence, private_key_pem=self.private_key_pem)
+                _post_json(self.portal + "/api/agentguard/runtime/hook-heartbeat", heartbeat)
+                self.last_error = None
+            except Exception as exc:  # evidence failure is surfaced via stale coverage; action fail-closed remains gateway-owned
+                self.last_error = exc.__class__.__name__
+            self._stop.wait(self.heartbeat_seconds)

agenticdome_sdk/catalog_snapshot.json

@@ -1,13 +1,13 @@
 {
     "schema": "agenticdome.catalog-snapshot.v1",
     "catalog_schema": "agenticdome.hook-catalog.v1",
-    "verified_at": "2026-08-31",
-    "python_sdk_version": "1.2.28",
+    "verified_at": "2026-09-10",
+    "python_sdk_version": "1.2.30",
     "published_packages": {
         "agenticdome-python-sdk": {
             "registry": "pypi",
-            "version": "1.2.28",
-            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.28/"
+            "version": "1.2.30",
+            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.30/"
         },
         "agenticdome-sdk": {
             "registry": "npm",
@@ -21,8 +21,8 @@
         },
         "openclaw": {
             "registry": "npm",
-            "version": "2026.8.1",
-            "url": "https://www.npmjs.com/package/openclaw/v/2026.8.1"
+            "version": "2026.9.3",
+            "url": "https://www.npmjs.com/package/openclaw/v/2026.9.3"
         }
     }
 }