agenticdome-python-sdk 1.2.29__tar.gz → 1.2.30__tar.gz

{agenticdome_python_sdk-1.2.29 → agenticdome_python_sdk-1.2.30}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.29
+Version: 1.2.30
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -33,7 +33,7 @@ Requires-Dist: requests>=2.31.0
 Requires-Dist: urllib3>=2.0.0
 Requires-Dist: cryptography>=42.0.0
 Provides-Extra: crewai
-Requires-Dist: crewai<=1.15.20,>=1.15.5; extra == "crewai"
+Requires-Dist: crewai<=1.15.21,>=1.15.5; extra == "crewai"
 Provides-Extra: redis
 Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
@@ -60,13 +60,13 @@ Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
 Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
-Requires-Dist: openai-agents<=0.22.1,>=0.18.3; extra == "openai-agents"
+Requires-Dist: openai-agents<=0.22.2,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
 Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.90,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.91,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.90,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.91,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
@@ -82,7 +82,7 @@ Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude-agent-sdk"
 Provides-Extra: smolagents
 Requires-Dist: smolagents==1.26.0; extra == "smolagents"
 Provides-Extra: all
-Requires-Dist: crewai<=1.15.20,>=1.15.5; extra == "all"
+Requires-Dist: crewai<=1.15.21,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
 Requires-Dist: pydantic-ai<=2.42.0,>=2.16.0; extra == "all"
@@ -94,9 +94,9 @@ Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
 Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "all"
 Requires-Dist: azure-ai-projects<=2.6.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
-Requires-Dist: openai-agents<=0.22.1,>=0.18.3; extra == "all"
+Requires-Dist: openai-agents<=0.22.2,>=0.18.3; extra == "all"
 Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.90,>=1.43.54; extra == "all"
+Requires-Dist: boto3<=1.43.91,>=1.43.54; extra == "all"
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "all"
 Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "all"
 Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "all"

{agenticdome_python_sdk-1.2.29 → agenticdome_python_sdk-1.2.30}/agenticdome_python_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.29
+Version: 1.2.30
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -33,7 +33,7 @@ Requires-Dist: requests>=2.31.0
 Requires-Dist: urllib3>=2.0.0
 Requires-Dist: cryptography>=42.0.0
 Provides-Extra: crewai
-Requires-Dist: crewai<=1.15.20,>=1.15.5; extra == "crewai"
+Requires-Dist: crewai<=1.15.21,>=1.15.5; extra == "crewai"
 Provides-Extra: redis
 Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
@@ -60,13 +60,13 @@ Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
 Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
-Requires-Dist: openai-agents<=0.22.1,>=0.18.3; extra == "openai-agents"
+Requires-Dist: openai-agents<=0.22.2,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
 Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.90,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.91,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.90,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.91,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
@@ -82,7 +82,7 @@ Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude-agent-sdk"
 Provides-Extra: smolagents
 Requires-Dist: smolagents==1.26.0; extra == "smolagents"
 Provides-Extra: all
-Requires-Dist: crewai<=1.15.20,>=1.15.5; extra == "all"
+Requires-Dist: crewai<=1.15.21,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
 Requires-Dist: pydantic-ai<=2.42.0,>=2.16.0; extra == "all"
@@ -94,9 +94,9 @@ Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
 Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "all"
 Requires-Dist: azure-ai-projects<=2.6.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
-Requires-Dist: openai-agents<=0.22.1,>=0.18.3; extra == "all"
+Requires-Dist: openai-agents<=0.22.2,>=0.18.3; extra == "all"
 Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.90,>=1.43.54; extra == "all"
+Requires-Dist: boto3<=1.43.91,>=1.43.54; extra == "all"
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "all"
 Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "all"
 Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "all"

{agenticdome_python_sdk-1.2.29 → agenticdome_python_sdk-1.2.30}/agenticdome_python_sdk.egg-info/requires.txt

@@ -9,7 +9,7 @@ google-adk<=2.8.0,>=2.5.0
 agno<=3.0.9,>=2.8.0
 
 [all]
-crewai<=1.15.20,>=1.15.5
+crewai<=1.15.21,>=1.15.5
 redis>=4.5.0
 cryptography>=42.0.0
 pydantic-ai<=2.42.0,>=2.16.0
@@ -21,9 +21,9 @@ autogen-agentchat==0.7.5
 agno<=3.0.9,>=2.8.0
 azure-ai-projects<=2.6.0,>=2.3.0
 azure-identity==1.25.3
-openai-agents<=0.22.1,>=0.18.3
+openai-agents<=0.22.2,>=0.18.3
 mcp<=2.2.0,>=1.26.0
-boto3<=1.43.90,>=1.43.54
+boto3<=1.43.91,>=1.43.54
 llama-index<=0.14.24,>=0.14.23
 google-adk<=2.8.0,>=2.5.0
 claude-agent-sdk<=0.2.152,>=0.2.126
@@ -33,10 +33,10 @@ smolagents==1.26.0
 autogen-agentchat==0.7.5
 
 [aws-bedrock]
-boto3<=1.43.90,>=1.43.54
+boto3<=1.43.91,>=1.43.54
 
 [bedrock]
-boto3<=1.43.90,>=1.43.54
+boto3<=1.43.91,>=1.43.54
 
 [claude]
 claude-agent-sdk<=0.2.152,>=0.2.126
@@ -45,7 +45,7 @@ claude-agent-sdk<=0.2.152,>=0.2.126
 claude-agent-sdk<=0.2.152,>=0.2.126
 
 [crewai]
-crewai<=1.15.20,>=1.15.5
+crewai<=1.15.21,>=1.15.5
 
 [dev]
 pytest>=8.0.0
@@ -86,7 +86,7 @@ mcp<=2.2.0,>=1.26.0
 autogen-agentchat==0.7.5
 
 [openai-agents]
-openai-agents<=0.22.1,>=0.18.3
+openai-agents<=0.22.2,>=0.18.3
 
 [pop]
 cryptography>=42.0.0

{agenticdome_python_sdk-1.2.29 → agenticdome_python_sdk-1.2.30}/agenticdome_sdk/catalog_snapshot.json

@@ -1,13 +1,13 @@
 {
     "schema": "agenticdome.catalog-snapshot.v1",
     "catalog_schema": "agenticdome.hook-catalog.v1",
-    "verified_at": "2026-09-09",
-    "python_sdk_version": "1.2.29",
+    "verified_at": "2026-09-10",
+    "python_sdk_version": "1.2.30",
     "published_packages": {
         "agenticdome-python-sdk": {
             "registry": "pypi",
-            "version": "1.2.29",
-            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.29/"
+            "version": "1.2.30",
+            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.30/"
         },
         "agenticdome-sdk": {
             "registry": "npm",
@@ -21,8 +21,8 @@
         },
         "openclaw": {
             "registry": "npm",
-            "version": "2026.8.1",
-            "url": "https://www.npmjs.com/package/openclaw/v/2026.8.1"
+            "version": "2026.9.3",
+            "url": "https://www.npmjs.com/package/openclaw/v/2026.9.3"
         }
     }
 }

{agenticdome_python_sdk-1.2.29 → agenticdome_python_sdk-1.2.30}/agenticdome_sdk/client.py

@@ -126,8 +126,10 @@ class AgenticDomeClient:
             if execution_broker_mode is not None
             else os.getenv("AGENTICDOME_EXECUTION_BROKER_MODE", "off")
         ).strip().lower()
-        if broker_mode not in {"off", "observe", "enforce"}:
-            raise ValueError("execution_broker_mode must be off, observe, or enforce")
+        if broker_mode not in {"policy", "off", "observe", "monitor", "enforce"}:
+            raise ValueError("execution_broker_mode must be policy, off, monitor, observe, or enforce")
+        if broker_mode == "observe":
+            broker_mode = "monitor"
         self.execution_broker_mode = broker_mode
         self._tool_provenance: Dict[str, Dict[str, str]] = {}
         for registered_name, provenance in dict(tool_provenance or {}).items():
@@ -436,6 +438,7 @@ class AgenticDomeClient:
             extra_headers=headers,
         )
 
+
     # ------------------------------------------------------------------
     # SaaS Scan Endpoints
     # ------------------------------------------------------------------
@@ -717,9 +720,14 @@ class AgenticDomeClient:
             }
         )
 
+        resolved_broker_mode = self.execution_broker_mode if tool_name else "off"
+        # Offline demos have no tenant policy to resolve. Preserve that behavior,
+        # but never downgrade an explicit enforcement requirement to simulation.
+        if self.is_simulation and resolved_broker_mode != "enforce":
+            resolved_broker_mode = "off"
         broker_enabled = bool(
             tool_name
-            and (self.execution_broker_mode in {"observe", "enforce"} or execution_broker is True)
+            and (resolved_broker_mode in {"policy", "monitor", "enforce"} or execution_broker is True)
         )
         if broker_enabled:
             boundary_id = self._normalize_optional_string(execution_boundary_id)
@@ -773,12 +781,19 @@ class AgenticDomeClient:
                 payload["workload_id"] = normalized_workload
 
         path = "/tools/execution/authorize" if broker_enabled else "/tools/guardrail/validate"
+        if broker_enabled and resolved_broker_mode == "policy" and execution_broker is not True:
+            path = "/tools/execution/resolve"
         response = self._request("POST", path, json_body=payload, tenant_id=tenant_id)
         if broker_enabled:
+            if path == "/tools/execution/resolve":
+                contract = response.get("execution_broker_policy") or {}
+                if contract.get("schema") != "agenticdome.execution-broker-policy.v1" or contract.get("mode") not in {"off", "monitor", "enforce"}:
+                    raise AgenticDomeError("Assigned sidecar did not return a valid Execution Broker policy contract")
+                resolved_broker_mode = contract["mode"]
             broker = response.get("broker") if isinstance(response.get("broker"), dict) else {}
             verified = bool(broker.get("verified")) and bool(broker.get("token_consumed"))
-            must_enforce = self.execution_broker_mode == "enforce" or execution_broker is True
-            if must_enforce and not verified:
+            must_enforce = resolved_broker_mode == "enforce" or execution_broker is True
+            if must_enforce and (self.is_simulation or not verified):
                 raise AgenticDomeError(
                     "AgenticDome execution broker did not return a verified, atomically consumed decision"
                 )
@@ -1538,7 +1553,11 @@ class AgenticDomeClient:
         # In broker mode the official MCP adapter uses the same one-request
         # execution boundary as REST. This preserves immediate decision
         # consumption without adding a second network round trip.
-        if tool_name and self.execution_broker_mode in {"observe", "enforce"}:
+        if (
+            tool_name
+            and self.execution_broker_mode in {"policy", "monitor", "enforce"}
+            and (not self.is_simulation or self.execution_broker_mode == "enforce")
+        ):
             return self.guardrail_validate(
                 text=text,
                 agent_id=agent_id,
@@ -1566,7 +1585,6 @@ class AgenticDomeClient:
                 block_on_sensitive_output=block_on_sensitive_output,
                 trusted_destination_domains=trusted_destination_domains,
                 allowed_destination_domains=allowed_destination_domains,
-                execution_broker=True,
                 tenant_id=tenant_id,
             )
 

{agenticdome_python_sdk-1.2.29 → agenticdome_python_sdk-1.2.30}/agenticdome_sdk/connect.py

@@ -191,6 +191,7 @@ def run_connect(root: Path, args: Any) -> Dict[str, Any]:
     if not config_path.exists():
         config_path.write_text(json.dumps({
             "schema": "agenticdome.project-config.v1", "frameworks": frameworks or ["custom-python"],
+            "execution_broker_mode": "policy",
             "business_purpose": "REVIEW_REQUIRED_NOT_INVENTED", "sensitive_tools": [],
             "deployment": {"preference": "managed", "region": session["runtime"].get("region") or "auto"},
             "source_upload": False,
@@ -215,10 +216,17 @@ def run_connect(root: Path, args: Any) -> Dict[str, Any]:
         if not args.repository_connection:
             raise SystemExit("--open-pr requires --repository-connection with a connection UUID from the customer portal.")
         pull_request = _open_review_pr(root, portal, session, args.repository_connection, patch_path)
+    effective_config = json.loads(config_path.read_text(encoding="utf-8"))
+    broker_setup = dict(session["runtime"].get("execution_broker") or {
+        "status": "readiness_not_reported",
+        "next_action": "Ask AgenticDome to confirm policy-aware sidecar readiness before live verification.",
+    })
+    broker_setup["sdk_mode"] = effective_config.get("execution_broker_mode", "existing_sdk_or_environment_default")
     return {
         "status": "changeset_ready", "source_upload": False, "tenant_id": session["tenant_id"],
         "session_uuid": session["session_uuid"], "workload_uuid": workload_uuid,
         "runtime_region": session["runtime"].get("region"), "frameworks": frameworks,
+        "execution_broker": broker_setup,
         "attachment_points": len(semantic.get("attachment_points") or []),
         "bypass_risks": len(semantic.get("bypass_risks") or []),
         "patch": str(patch_path.relative_to(root)),

{agenticdome_python_sdk-1.2.29 → agenticdome_python_sdk-1.2.30}/agenticdome_sdk/hook_catalog.py

@@ -39,9 +39,9 @@ CATALOG_VERIFIED_AT = str(_CATALOG_SNAPSHOT["verified_at"])
 
 
 _OPENCLAW_RUNTIME_MIN_VERSION = "2026.7.1-2"
-_OPENCLAW_RUNTIME_MAX_VERSION = "2026.8.1"
+_OPENCLAW_RUNTIME_MAX_VERSION = "2026.9.3"
 _OPENCLAW_RUNTIME_VERSION = _OPENCLAW_RUNTIME_MAX_VERSION
-_OPENCLAW_NODE_RANGE = ">=22.22.3 <23 || >=24.15.0 <25 || >=25.9.0"
+_OPENCLAW_NODE_RANGE = ">=24.16.0 <25 || >=26.1.0"
 
 PUBLISHED_AGENTICDOME_PACKAGES: Dict[str, Dict[str, str]] = {
     str(package): {str(key): str(value) for key, value in row.items()}
@@ -86,7 +86,7 @@ FRAMEWORK_HOOK_CATALOG: Dict[str, Dict[str, Any]] = {
         "agenticdome_sdk.integrations.crewai",
         "AgenticDomeCrewAIFirewall",
         ["attach", "secure_tool"],
-        packages={"crewai": {"min":"1.15.5","max":"1.15.20"}},
+        packages={"crewai": {"min":"1.15.5","max":"1.15.21"}},
         native_modules=[
             {
                 "module": "crewai.hooks",
@@ -191,7 +191,7 @@ FRAMEWORK_HOOK_CATALOG: Dict[str, Dict[str, Any]] = {
         "agenticdome_sdk.integrations.openai_agents",
         "AgenticDomeOpenAIAgentsFirewall",
         ["run_agent_securely", "wrap_tool_handler", "create_input_guardrail"],
-        packages={"openai-agents": {"min":"0.18.3","max":"0.22.1"}},
+        packages={"openai-agents": {"min":"0.18.3","max":"0.22.2"}},
         native_modules=[{"module": "agents", "attrs": ["Agent", "Runner", "function_tool"]}],
         native_smoke={"module": "agenticdome_sdk.integrations.openai_agents", "call": "create_input_guardrail"},
         docs="docs/frameworks/openai-agents.md",
@@ -262,7 +262,7 @@ FRAMEWORK_HOOK_CATALOG: Dict[str, Dict[str, Any]] = {
         "agenticdome_sdk.integrations.aws_bedrock",
         "AgenticDomeAWSBedrockFirewall",
         ["converse_securely", "wrap_tool_handler", "wrap_action_group_lambda"],
-        packages={"boto3": {"min":"1.43.54","max":"1.43.90"}},
+        packages={"boto3": {"min":"1.43.54","max":"1.43.91"}},
         native_modules=[{"module": "boto3", "attrs": ["client"]}],
         native_smoke={"module": "agenticdome_sdk.integrations.aws_bedrock", "call": "wrap_tool_handler"},
         docs="docs/frameworks/aws-bedrock.md",
@@ -444,18 +444,18 @@ _HARNESS_VERIFICATION: Dict[str, Dict[str, Any]] = {
 }
 
 _PACKAGE_CERTIFICATION_DATES: Dict[str, Dict[str, str]] = {
-    "crewai": {"crewai":"2026-09-09"},
+    "crewai": {"crewai":"2026-09-10"},
     "pydanticai": {"pydantic-ai": "2026-09-09"},
     "langgraph": {"langgraph": "2026-08-12", "langchain-core": "2026-09-09"},
     "autogen": {"autogen-agentchat": "2026-07-26"},
     "foundry": {"azure-ai-projects": "2026-09-09", "azure-identity": "2026-07-10"},
-    "openai-agents": {"openai-agents": "2026-09-09"},
+    "openai-agents": {"openai-agents": "2026-09-10"},
     "claude": {"claude-agent-sdk": "2026-09-09"},
     "smolagents": {"smolagents": "2026-07-23"},
     "agno": {"agno": "2026-09-09"},
     "google-adk": {"google-adk": "2026-08-27"},
     "llamaindex": {"llama-index": "2026-08-20"},
-    "bedrock": {"boto3": "2026-09-09"},
+    "bedrock": {"boto3": "2026-09-10"},
     "mcp": {"mcp": "2026-09-09"},
 }
 

{agenticdome_python_sdk-1.2.29 → agenticdome_python_sdk-1.2.30}/agenticdome_sdk/onboarding_cli.py

@@ -666,6 +666,10 @@ def _load_json(path: Path) -> Dict[str, Any]:
 
 
 def init_project(root: Path, args: argparse.Namespace) -> Dict[str, Any]:
+    target = _agenticdome_dir(root) / "config.json"
+    # Reassessment must not silently migrate an established integration.
+    if target.exists():
+        return _load_json(target)
     report = inspect_repository(root)
     detected = [item["key"] for item in report["frameworks"]]
     frameworks = list(dict.fromkeys(args.framework or detected or ["custom-python"]))
@@ -685,8 +689,8 @@ def init_project(root: Path, args: argparse.Namespace) -> Dict[str, Any]:
             "tenant_id_env": "AGENTICDOME_TENANT_ID",
         },
         "source_upload": False,
+        "execution_broker_mode": "policy",
     }
-    target = _agenticdome_dir(root) / "config.json"
     _write_json(target, config)
     _write_json(_agenticdome_dir(root) / "inspection.json", report)
     return config
@@ -1069,6 +1073,59 @@ def _framework_hooks_markdown(plan: Dict[str, Any]) -> str:
     return "\n".join(lines).rstrip() + "\n"
 
 
+def _onboarding_broker_options(config: Dict[str, Any]) -> Dict[str, str]:
+    # An absent value is a pre-existing integration: retain the SDK/env default.
+    if "execution_broker_mode" not in config:
+        return {}
+    mode = config["execution_broker_mode"]
+    if mode not in ("policy", "off", "monitor", "observe", "enforce"):
+        raise SystemExit("Invalid execution_broker_mode in .agenticdome/config.json; use policy for tenant-controlled brokering.")
+    return {"execution_broker_mode": mode}
+
+
+def _configure_scaffold_broker(files: Dict[str, str], config: Dict[str, Any]) -> Dict[str, str]:
+    options = _onboarding_broker_options(config)
+    if not options:
+        return files
+    mode = options["execution_broker_mode"]
+    files[".env.agenticdome.example"] += (
+        "\n# Load this into the APPLICATION process, not just the sidecar.\n"
+        "# Policy selects Off / Monitor / Enforce; this setting does not force Enforce.\n"
+        f"AGENTICDOME_EXECUTION_BROKER_MODE={mode}\n"
+    )
+    if "agenticdome_integration.py" in files:
+        files["agenticdome_integration.py"] = files["agenticdome_integration.py"].replace(
+            '    mode="live",', f'    mode="live",\n    execution_broker_mode="{mode}",'
+        )
+    for filename in ("agenticdome_integration.ts", "agenticdome_mcp_gateway.ts"):
+        if filename in files:
+            files[filename] = files[filename].replace(
+                '  tenantId: required("AGENTICDOME_TENANT_ID"),',
+                f'  tenantId: required("AGENTICDOME_TENANT_ID"),\n  executionBrokerMode: "{mode}",',
+            )
+    if "agenticdome_mcp_gateway.py" in files:
+        files["agenticdome_mcp_gateway.py"] = files["agenticdome_mcp_gateway.py"].replace(
+            "from agenticdome_sdk.mcp_host import AgenticDomeMCPHostFirewall",
+            "from agenticdome_sdk import AgenticDomeClient\nfrom agenticdome_sdk.mcp_host import AgenticDomeMCPHostFirewall, load_config",
+        ).replace(
+            "firewall = AgenticDomeMCPHostFirewall()",
+            'config = load_config()\nfirewall = AgenticDomeMCPHostFirewall(config, client=AgenticDomeClient(\n'
+            '    api_base=config.api_base, api_key=config.api_key, tenant_id=config.tenant_id,\n'
+            f'    timeout=config.timeout_s, execution_broker_mode="{mode}",\n))',
+        )
+    files["AGENTICDOME-INTEGRATION.md"] += (
+        "\n## Policy-controlled execution\n\n"
+        f"This new scaffold sets `AGENTICDOME_EXECUTION_BROKER_MODE={mode}` and configures the generated SDK clients. "
+        "An example env file is not loaded automatically: load it into the application, MCP gateway or plugin process. "
+        "This does not install a separate broker or force Enforce. The assigned sidecar resolves the effective tenant policy per action. "
+        "AgenticDome must deploy a policy-aware sidecar and a compatible SDK before live activation. "
+        "Run `agenticdome verify --live` with a Runtime / SDK key; an unsupported resolver fails closed, without silently falling back. "
+        "The Integration Copilot key cannot authorize tool execution. "
+        "Review and attach wrappers at actual invocation boundaries; generated files alone do not protect an application.\n"
+    )
+    return files
+
+
 def _scaffold_files(config: Dict[str, Any], plan: Dict[str, Any]) -> Dict[str, str]:
     frameworks = ", ".join(config.get("frameworks", []))
     wrapper = '''"""AgenticDome enforcement boundaries generated for review.
@@ -1346,7 +1403,7 @@ export function protectedMCPForwarder(forwardToUpstream: (request: MCPJsonRpcReq
 
 export type RequiredMCPContext = MCPGatewayContext;
 '''
-    return files
+    return _configure_scaffold_broker(files, config)
 
 
 def create_scaffold(root: Path, plan: Optional[Dict[str, Any]] = None) -> Path:
@@ -1385,6 +1442,7 @@ def protect_mcp(root: Path) -> Dict[str, Any]:
     config_path = _agenticdome_dir(root) / "config.json"
     config = _load_json(config_path) if config_path.exists() else {
         "schema": CONFIG_SCHEMA,
+        "execution_broker_mode": "policy",
         "frameworks": [],
         "business_purpose": "REVIEW_REQUIRED_NOT_INVENTED",
         "sensitive_tools": [],
@@ -1563,6 +1621,7 @@ def protect_openclaw(root: Path) -> Dict[str, Any]:
     config_path = _agenticdome_dir(root) / "config.json"
     config = _load_json(config_path) if config_path.exists() else {
         "schema": CONFIG_SCHEMA,
+        "execution_broker_mode": "policy",
         "frameworks": [],
         "business_purpose": "REVIEW_REQUIRED_NOT_INVENTED",
         "sensitive_tools": [],
@@ -1597,7 +1656,8 @@ def protect_openclaw(root: Path) -> Dict[str, Any]:
         "inspection": _relative(inspection_path, root),
         "evidence": _relative(protection_path, root),
         "customer_source_modified": False,
-        "next_action": "Generate and review agenticdome plan with the tenant's Copilot key, then run agenticdome openclaw verify with its Runtime / SDK key.",
+        "runtime_environment": {"AGENTICDOME_EXECUTION_BROKER_MODE": _onboarding_broker_options(config)["execution_broker_mode"]} if _onboarding_broker_options(config) else {},
+        "next_action": "Generate and review agenticdome plan with the tenant's Copilot key. Load the reported runtime_environment in the OpenClaw process (existing settings are not changed), then run agenticdome openclaw verify with its Runtime / SDK key and a compatible sidecar.",
     }
 
 
@@ -1684,6 +1744,8 @@ def verify_project(root: Path, live: bool = False, run_tests: bool = False) -> T
     from .client import AgenticDomeClient
 
     plan = integration_plan(root)
+    config_path = _agenticdome_dir(root) / "config.json"
+    broker_options = _onboarding_broker_options(_load_json(config_path)) if config_path.exists() else {}
     required_env = ["AGENTICDOME_API_BASE", "AGENTICDOME_API_KEY", "AGENTICDOME_TENANT_ID"]
     missing_env = [name for name in required_env if live and not os.getenv(name, "").strip()]
     if missing_env:
@@ -1693,6 +1755,7 @@ def verify_project(root: Path, live: bool = False, run_tests: bool = False) -> T
         api_key=os.getenv("AGENTICDOME_API_KEY", ""),
         tenant_id=os.getenv("AGENTICDOME_TENANT_ID", ""),
         mode="live" if live else "local_sim",
+        **broker_options,
     )
     cases = [
         ("allowed", "Look up the status of support case 123.", "crm.case.lookup", {"case_id": "123"}),

{agenticdome_python_sdk-1.2.29 → agenticdome_python_sdk-1.2.30}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agenticdome-python-sdk"
-version = "1.2.29"
+version = "1.2.30"
 description = "Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement."
 readme = "README.md"
 requires-python = ">=3.9"
@@ -50,7 +50,7 @@ dependencies = [
 
 [project.optional-dependencies]
 crewai = [
-    "crewai>=1.15.5,<=1.15.20"
+    "crewai>=1.15.5,<=1.15.21"
 ]
 redis = [
     "redis>=4.5.0"
@@ -87,16 +87,16 @@ agno = [
     "agno>=2.8.0,<=3.0.9"
 ]
 openai-agents = [
-    "openai-agents>=0.18.3,<=0.22.1"
+    "openai-agents>=0.18.3,<=0.22.2"
 ]
 mcp = [
     "mcp>=1.26.0,<=2.2.0"
 ]
 bedrock = [
-    "boto3>=1.43.54,<=1.43.90"
+    "boto3>=1.43.54,<=1.43.91"
 ]
 aws-bedrock = [
-    "boto3>=1.43.54,<=1.43.90"
+    "boto3>=1.43.54,<=1.43.91"
 ]
 llamaindex = [
     "llama-index>=0.14.23,<=0.14.24"
@@ -120,7 +120,7 @@ smolagents = [
     "smolagents==1.26.0"
 ]
 all = [
-    "crewai>=1.15.5,<=1.15.20",
+    "crewai>=1.15.5,<=1.15.21",
     "redis>=4.5.0",
     "cryptography>=42.0.0",
     "pydantic-ai>=2.16.0,<=2.42.0",
@@ -132,9 +132,9 @@ all = [
     "agno>=2.8.0,<=3.0.9",
     "azure-ai-projects>=2.3.0,<=2.6.0",
     "azure-identity==1.25.3",
-    "openai-agents>=0.18.3,<=0.22.1",
+    "openai-agents>=0.18.3,<=0.22.2",
     "mcp>=1.26.0,<=2.2.0",
-    "boto3>=1.43.54,<=1.43.90",
+    "boto3>=1.43.54,<=1.43.91",
     "llama-index>=0.14.23,<=0.14.24",
     "google-adk>=2.5.0,<=2.8.0",
     "claude-agent-sdk>=0.2.126,<=0.2.152",