agenticdome-python-sdk 1.2.32__py3-none-any.whl → 1.2.34__py3-none-any.whl

{agenticdome_python_sdk-1.2.32.dist-info → agenticdome_python_sdk-1.2.34.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.32
+Version: 1.2.34
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -33,20 +33,20 @@ Requires-Dist: requests>=2.31.0
 Requires-Dist: urllib3>=2.0.0
 Requires-Dist: cryptography>=42.0.0
 Provides-Extra: crewai
-Requires-Dist: crewai<=1.15.21,>=1.15.5; extra == "crewai"
+Requires-Dist: crewai<=1.15.22,>=1.15.5; extra == "crewai"
 Provides-Extra: redis
 Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
 Requires-Dist: cryptography>=42.0.0; extra == "pop"
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai<=2.43.0,>=2.16.0; extra == "pydanticai"
+Requires-Dist: pydantic-ai<=2.51.0,>=2.16.0; extra == "pydanticai"
 Requires-Dist: anyio>=4.0.0; extra == "pydanticai"
 Provides-Extra: pydantic
-Requires-Dist: pydantic-ai<=2.43.0,>=2.16.0; extra == "pydantic"
+Requires-Dist: pydantic-ai<=2.51.0,>=2.16.0; extra == "pydantic"
 Requires-Dist: anyio>=4.0.0; extra == "pydantic"
 Provides-Extra: langgraph
-Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "langgraph"
-Requires-Dist: langchain-core<=1.6.3,>=1.5.0; extra == "langgraph"
+Requires-Dist: langgraph<=1.2.12,>=1.2.9; extra == "langgraph"
+Requires-Dist: langchain-core<=1.6.5,>=1.5.0; extra == "langgraph"
 Requires-Dist: langchain-openai==1.3.5; extra == "langgraph"
 Requires-Dist: anyio>=4.0.0; extra == "langgraph"
 Provides-Extra: microsoft
@@ -55,51 +55,51 @@ Requires-Dist: autogen-agentchat==0.7.5; extra == "autogen"
 Provides-Extra: microsoft-autogen
 Requires-Dist: autogen-agentchat==0.7.5; extra == "microsoft-autogen"
 Provides-Extra: foundry
-Requires-Dist: azure-ai-projects<=2.6.1,>=2.3.0; extra == "foundry"
+Requires-Dist: azure-ai-projects<=2.7.0,>=2.3.0; extra == "foundry"
 Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
-Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "agno"
+Requires-Dist: agno<=3.0.11,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
-Requires-Dist: openai-agents<=0.22.2,>=0.18.3; extra == "openai-agents"
+Requires-Dist: openai-agents<=0.22.3,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
 Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.94,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.103,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.94,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.103,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
-Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llamaindex"
+Requires-Dist: llama-index<=0.14.25,>=0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
-Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llama-index"
+Requires-Dist: llama-index<=0.14.25,>=0.14.23; extra == "llama-index"
 Provides-Extra: google-adk
-Requires-Dist: google-adk<=2.9.0,>=2.5.0; extra == "google-adk"
+Requires-Dist: google-adk<=2.10.0,>=2.5.0; extra == "google-adk"
 Provides-Extra: adk
-Requires-Dist: google-adk<=2.9.0,>=2.5.0; extra == "adk"
+Requires-Dist: google-adk<=2.10.0,>=2.5.0; extra == "adk"
 Provides-Extra: claude
-Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude"
+Requires-Dist: claude-agent-sdk<=0.2.160,>=0.2.126; extra == "claude"
 Provides-Extra: claude-agent-sdk
-Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude-agent-sdk"
+Requires-Dist: claude-agent-sdk<=0.2.160,>=0.2.126; extra == "claude-agent-sdk"
 Provides-Extra: smolagents
 Requires-Dist: smolagents==1.26.0; extra == "smolagents"
 Provides-Extra: all
-Requires-Dist: crewai<=1.15.21,>=1.15.5; extra == "all"
+Requires-Dist: crewai<=1.15.22,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
-Requires-Dist: pydantic-ai<=2.43.0,>=2.16.0; extra == "all"
+Requires-Dist: pydantic-ai<=2.51.0,>=2.16.0; extra == "all"
 Requires-Dist: anyio>=4.0.0; extra == "all"
-Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "all"
-Requires-Dist: langchain-core<=1.6.3,>=1.5.0; extra == "all"
+Requires-Dist: langgraph<=1.2.12,>=1.2.9; extra == "all"
+Requires-Dist: langchain-core<=1.6.5,>=1.5.0; extra == "all"
 Requires-Dist: langchain-openai==1.3.5; extra == "all"
 Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
-Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "all"
-Requires-Dist: azure-ai-projects<=2.6.1,>=2.3.0; extra == "all"
+Requires-Dist: agno<=3.0.11,>=2.8.0; extra == "all"
+Requires-Dist: azure-ai-projects<=2.7.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
-Requires-Dist: openai-agents<=0.22.2,>=0.18.3; extra == "all"
+Requires-Dist: openai-agents<=0.22.3,>=0.18.3; extra == "all"
 Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.94,>=1.43.54; extra == "all"
-Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "all"
-Requires-Dist: google-adk<=2.9.0,>=2.5.0; extra == "all"
-Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "all"
+Requires-Dist: boto3<=1.43.103,>=1.43.54; extra == "all"
+Requires-Dist: llama-index<=0.14.25,>=0.14.23; extra == "all"
+Requires-Dist: google-adk<=2.10.0,>=2.5.0; extra == "all"
+Requires-Dist: claude-agent-sdk<=0.2.160,>=0.2.126; extra == "all"
 Requires-Dist: smolagents==1.26.0; extra == "all"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
@@ -218,7 +218,10 @@ agenticdome openclaw verify --output .agenticdome/verification.json
 AgenticDome plugin, explicit consent and the exact certified typed hooks.
 `agenticdome plan` returns source-free, tenant-bound Integration Copilot
 guidance for review. `openclaw verify` adds workspace-test and assigned-tenant
-policy evidence. The
+policy evidence. If the same deployable workload also uses MCP, this command
+includes the MCP transport rehearsal and both `mcp_verification` and
+`openclaw_verification` in one report. Both sections must be ready before the
+report is imported; `mcp verify` alone is not a combined-workload proof. The
 customer Control Panel separately confirms tenant binding and retained
 telemetry; neither command silently modifies customer source.
 
@@ -228,6 +231,17 @@ languages and candidate boundaries can be discovered locally; business
 purpose, sensitive actions and managed-versus-sovereign deployment remain
 explicit customer decisions and are not guessed from source code.
 
+`agenticdome init` creates local configuration without contacting Copilot.
+`inspect` and `plan` send source-free structural metadata to the assigned
+tenant sidecar. A selection spanning several deployable packages is analyzed
+as bounded, sequential workload units; successful units are checkpointed
+locally so a retry does not resubmit them. The report lists analyzed parts
+and any result-list caps. It does not claim that calls or guard placement
+across separate workload units were proven; review those boundaries before
+production. If the selection exceeds the 24-unit safety limit, select the
+application or package that actually executes agent actions. No unexamined
+unit is silently omitted or reported as protected.
+
 Use **Customer Control Panel → Activate Action Firewall → Core Config** to
 choose the Developer Integration path and import the two evidence files. This
 path is for SDK, MCP, framework or custom-code integrations; Microsoft

{agenticdome_python_sdk-1.2.32.dist-info → agenticdome_python_sdk-1.2.34.dist-info}/RECORD

@@ -1,5 +1,5 @@
-agenticdome_python_sdk-1.2.32.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
-agenticdome_python_sdk-1.2.32.dist-info/licenses/NOTICE,sha256=obvKP6kV1Ny5R8_INFOpf0X5um9U2X43LGwQFobO9kg,550
+agenticdome_python_sdk-1.2.34.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+agenticdome_python_sdk-1.2.34.dist-info/licenses/NOTICE,sha256=obvKP6kV1Ny5R8_INFOpf0X5um9U2X43LGwQFobO9kg,550
 agenticdome_sdk/__init__.py,sha256=UY__0ppEM4MlsTQoLh8alZ7AoMjtegGKe4j_Sj7CpNk,903
 agenticdome_sdk/_framework_firewall.py,sha256=W3gy7WsK50scE7ypJrmVJhHUOBsr0zAWQ85rghqaJk4,31963
 agenticdome_sdk/_mode.py,sha256=XvOgh5sW-FG8S39V483h3uLiFh8wSt14OmYXz_6eDO8,1283
@@ -7,16 +7,16 @@ agenticdome_sdk/agno.py,sha256=L3yfjTBHW47xzT67a1DsjtwmvrAoYBkbxADpsr85Cp0,60766
 agenticdome_sdk/attestation.py,sha256=ij4cMff7nzLaIS0W02d2WURFcyKe72bcUlSz-dYkaLE,10310
 agenticdome_sdk/autogen.py,sha256=KP4qlIcsNXB-4ZT9D7Slc1xWEeWXRIWkc5HGW0U6k2c,29018
 agenticdome_sdk/aws_bedrock.py,sha256=2zD9j7xi0jna0sMeMf-hKZdc3Y4RPwzj6tMVOUGgIDQ,69581
-agenticdome_sdk/catalog_snapshot.json,sha256=Bi7AA6s3h2hk_y1xP6uwV-hdTgtCNXK05MX-2x5-gsw,951
+agenticdome_sdk/catalog_snapshot.json,sha256=aOJMqz8FpPF-q1ynpM2xsEk-O-tMyUCPE5Y51dygtLQ,951
 agenticdome_sdk/claude.py,sha256=XeY9AUu61SYcJjQVz_AtL_WaN6X4KqP5nprEbbr4Q6A,17456
 agenticdome_sdk/client.py,sha256=2uVKZR1uXDBIvwOS-lpNPCAXl9K5vroPqsPNNYhBWeg,69473
-agenticdome_sdk/connect.py,sha256=yNRh84mqdWr73fXW3S8Zc_lV1QN6gce5T6mZ20cr8ps,16726
-agenticdome_sdk/copilot_ir.py,sha256=OMkzkVGSP2pFkxZBjAXNCCRcJk21X0wnllWNhQeErp0,16588
+agenticdome_sdk/connect.py,sha256=MY30wXYA6OaZhs__E67KcFXEy7mZMBxMSV06BnlBjRg,18766
+agenticdome_sdk/copilot_ir.py,sha256=zT13tOX8xu11yrOtIPMRFVud8CQ81Gu3WxsXxyQ4XT0,17928
 agenticdome_sdk/copilot_ir_collector.cjs,sha256=oxLY8ByONo7Es4YjYiJuRz_A7IKL65Sy486UXnu-4Rs,9681
 agenticdome_sdk/crewai.py,sha256=sSJQ49O7-8kqOAD2_jrsMtMOmBOcJmFkeOv7S3-ayMs,52490
 agenticdome_sdk/demo.py,sha256=dyfqt2N_cJoyUWKnjPYuQxuw2hb2DrCNUf1jQKeYYoc,8350
 agenticdome_sdk/google_adk.py,sha256=2TA-tUhY0lOnkGcs1BN9CUEz67ebVX4HJ7mnNoRPcZs,57258
-agenticdome_sdk/hook_catalog.py,sha256=IH8PVvjI393pUXFeVzLaZIibXGDUXW1Ve-IUqrAJY5A,29272
+agenticdome_sdk/hook_catalog.py,sha256=0dfFWNDS0KCeP0IozWZb1NkNBWf1omaO2-yZKNVdTf0,29272
 agenticdome_sdk/identity.py,sha256=mrymGgZSVsKJ9THRde54qGmMT7j_uZHmPJ-HtWk7PXE,4635
 agenticdome_sdk/langgraph.py,sha256=FUvF6DSA5aZP3eoBoNeldgGtPrz-dO5xcVmrPPSBEhI,84312
 agenticdome_sdk/lifecycle.py,sha256=9LvxmUU1LC_tMchb5uVFBnZIkVFUxOv3VH9wG_9gPtA,12855
@@ -27,15 +27,15 @@ agenticdome_sdk/mcp_rehearsal_server.py,sha256=cox4XqUTL8d0gaDzqxDZcEALkaz8otjOj
 agenticdome_sdk/mcp_verification.py,sha256=VqQS5SpPVFI3G7qCwrT90JmG8vFE6pRJEB7PViHjKqw,14235
 agenticdome_sdk/microsoft_agent_framework.py,sha256=GfIIuk0n-VhsZaTyoB7P6ilpz9bFLD95TWuX0rFSWeU,67219
 agenticdome_sdk/microsoft_ai_foundry.py,sha256=YlO968s1dbAYcaEqhqufL92NFR66GuTtngnCv7-1mYc,56911
-agenticdome_sdk/onboarding_cli.py,sha256=8ymGtNmllNH6lP87pvxHe2GySlcsHoDoLiispfQ5rDs,95417
+agenticdome_sdk/onboarding_cli.py,sha256=yPPlNRPCjuDNpeJpL-0fJK3RZTOZvII8d-qFHJgTILM,120597
 agenticdome_sdk/openai_agents.py,sha256=nNM-YcsUDcE23sGv1buLudcYFz0NLju2Mwiw_wrVaJg,57326
 agenticdome_sdk/outcomes.py,sha256=jadWDzQaZXrHNvpPme8lQY0jihYLCoM3s4CihAq0JRo,2507
 agenticdome_sdk/proof.py,sha256=ECKc14xSE0V1HHmcpZjfVz8-Q2H_fooah3BfdblFV8M,2878
 agenticdome_sdk/pydantic.py,sha256=WKb8X0Fgydfid-ep8E-M8Yslz2pWcCP6w7n_aBxt1rI,54961
 agenticdome_sdk/simulation.py,sha256=UCbZy3u9AzfxQCfY38SCV3CxGxhinV9EA4aHMPlK4mc,8426
 agenticdome_sdk/smolagents.py,sha256=wjMA1HVAQ-9wRNM38Jr9wlCpKMhF-9vxtTk6R-kwQhs,19094
-agenticdome_python_sdk-1.2.32.dist-info/METADATA,sha256=iNu8PnerROIUvox-_F038ah1a1wHBb2OSTUHJE2gZ0A,139108
-agenticdome_python_sdk-1.2.32.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-agenticdome_python_sdk-1.2.32.dist-info/entry_points.txt,sha256=cRfCphkr5gLrkGIzXJEtL50HdHLajoZLbZtcMLE8NoY,113
-agenticdome_python_sdk-1.2.32.dist-info/top_level.txt,sha256=LZbbjXco5mqDrGwlTJpIKI5Sp6R_njzHHjExxAs9c3s,16
-agenticdome_python_sdk-1.2.32.dist-info/RECORD,,
+agenticdome_python_sdk-1.2.34.dist-info/METADATA,sha256=hOOXfVmbkCRG1AKVWBUcSqHa1i6G92XEomK47iBKSiU,140120
+agenticdome_python_sdk-1.2.34.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+agenticdome_python_sdk-1.2.34.dist-info/entry_points.txt,sha256=cRfCphkr5gLrkGIzXJEtL50HdHLajoZLbZtcMLE8NoY,113
+agenticdome_python_sdk-1.2.34.dist-info/top_level.txt,sha256=LZbbjXco5mqDrGwlTJpIKI5Sp6R_njzHHjExxAs9c3s,16
+agenticdome_python_sdk-1.2.34.dist-info/RECORD,,

agenticdome_sdk/catalog_snapshot.json

@@ -1,13 +1,13 @@
 {
     "schema": "agenticdome.catalog-snapshot.v1",
     "catalog_schema": "agenticdome.hook-catalog.v1",
-    "verified_at": "2026-09-15",
-    "python_sdk_version": "1.2.32",
+    "verified_at": "2026-09-26",
+    "python_sdk_version": "1.2.34",
     "published_packages": {
         "agenticdome-python-sdk": {
             "registry": "pypi",
-            "version": "1.2.32",
-            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.32/"
+            "version": "1.2.34",
+            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.34/"
         },
         "agenticdome-sdk": {
             "registry": "npm",
@@ -21,8 +21,8 @@
         },
         "openclaw": {
             "registry": "npm",
-            "version": "2026.9.4",
-            "url": "https://www.npmjs.com/package/openclaw/v/2026.9.4"
+            "version": "2026.9.6",
+            "url": "https://www.npmjs.com/package/openclaw/v/2026.9.6"
         }
     }
 }

agenticdome_sdk/connect.py

@@ -17,9 +17,6 @@ from pathlib import Path
 from typing import Any, Dict, Optional
 
 from .attestation import ensure_attestation_key
-from .hook_catalog import CATALOG_SCHEMA, CATALOG_VERIFIED_AT, catalog_digest
-
-
 SCOPES = ["onboarding:read", "metadata:write", "evidence:write", "workload:write", "repository:prepare"]
 
 
@@ -124,7 +121,10 @@ def _approve_metadata(ir: Dict[str, Any], assume_yes: bool) -> None:
 
 def run_connect(root: Path, args: Any) -> Dict[str, Any]:
     # Import lazily to avoid a module cycle and keep the public client purely orchestration code.
-    from .onboarding_cli import _installed_sdk_version, inspect_repository
+    from .onboarding_cli import (
+        _active_copilot_catalog_binding, _copilot_semantic_analysis,
+        _ensure_workload_id, _installed_sdk_version, _scope_gap_message, inspect_repository,
+    )
 
     portal = str(args.portal).rstrip("/")
     if not portal.startswith("https://") and not getattr(args, "allow_insecure_http", False):
@@ -155,12 +155,23 @@ def run_connect(root: Path, args: Any) -> Dict[str, Any]:
     if not session.get("runtime") or not session.get("copilot"):
         raise SystemExit("Authentication succeeded, but no eligible runtime is assigned. The saved portal session can be resumed after an administrator enables an assignment policy.")
 
-    report = inspect_repository(root)
+    local_workload_id = _ensure_workload_id(root)
+    report = inspect_repository(root, remote_analysis=False)
+    if report.get("scope", {}).get("complete") is not True:
+        raise SystemExit(_scope_gap_message(report))
     ir = report["copilot_ir"]
     _approve_metadata(ir, bool(args.yes))
     private_pem, public_pem = ensure_attestation_key(root / ".agenticdome")
     del private_pem
-    workload_uuid = str(uuid.uuid5(uuid.NAMESPACE_URL, session["tenant_id"] + ":" + root.name))
+    workload_uuid = str(uuid.uuid5(uuid.NAMESPACE_URL, session["tenant_id"] + ":" + local_workload_id))
+    previous_session_path = root / ".agenticdome" / "connect-session.json"
+    if previous_session_path.is_file():
+        try:
+            previous_session = json.loads(previous_session_path.read_text(encoding="utf-8"))
+            if previous_session.get("tenant_id") == session["tenant_id"]:
+                workload_uuid = str(uuid.UUID(str(previous_session["workload_uuid"])))
+        except (OSError, ValueError, KeyError, TypeError, AttributeError, json.JSONDecodeError):
+            raise SystemExit("The previous Connect workload identity is unreadable. Restore its connect-session.json before retrying to avoid creating a duplicate workload.")
     frameworks = [item["key"] for item in report.get("frameworks", [])]
     _request(portal + "/api/agentguard/connect/workloads", {
         "session_uuid": session["session_uuid"], "workload_uuid": workload_uuid,
@@ -171,38 +182,51 @@ def run_connect(root: Path, args: Any) -> Dict[str, Any]:
 
     runtime_base = str(session["runtime"]["api_base"]).rstrip("/")
     copilot_key = str(session["copilot"]["api_key"])
-    ir_digest = hashlib.sha256(json.dumps(ir, sort_keys=True, separators=(",", ":")).encode("utf-8")).hexdigest()
-    plan = _request(runtime_base + "/integration-copilot/v1/analyze", {
-        "schema": "agenticdome.copilot-request.v1", "ir": ir,
-        "catalog_binding": {"schema": CATALOG_SCHEMA, "catalog_digest": catalog_digest(), "verified_at": CATALOG_VERIFIED_AT},
-    }, headers={"X-API-Key": copilot_key, "X-Tenant-Id": session["tenant_id"], "Idempotency-Key": hashlib.sha256((session["tenant_id"] + ir_digest + catalog_digest()).encode()).hexdigest()})
-    if plan.get("schema") != "agenticdome.copilot-plan.v1" or plan.get("tenant_id") != session["tenant_id"]:
-        raise SystemExit("The assigned private Copilot returned an invalid tenant-bound plan.")
-    semantic = plan.get("semantic_analysis") or {}
-    if semantic.get("ir_sha256") != ir_digest:
-        raise SystemExit("The private Copilot plan was not bound to the submitted metadata.")
-    _request(portal + "/api/agentguard/connect/sessions/" + session["session_uuid"] + "/metadata", {"ir": ir, "signed_plan": plan}, session["access_token"])
-
+    from .onboarding_cli import _ir_sha256
+    ir_digest = _ir_sha256(ir)
     state_dir = root / ".agenticdome"
     state_dir.mkdir(parents=True, exist_ok=True)
-    cache = {"schema": "agenticdome.copilot-cache.v1", "source_upload": False, "tenant_id": session["tenant_id"], "api_base": runtime_base, "semantic_analysis": semantic, "catalog_binding": plan.get("catalog_binding")}
-    (state_dir / "copilot-analysis.json").write_text(json.dumps(cache, indent=2, sort_keys=True) + "\n", encoding="utf-8")
     config_path = state_dir / "config.json"
     if not config_path.exists():
         config_path.write_text(json.dumps({
-            "schema": "agenticdome.project-config.v1", "frameworks": frameworks or ["custom-python"],
+            "schema": "agenticdome.project-config.v1", "workload_id": local_workload_id,
+            "frameworks": frameworks or ["custom-python"],
             "execution_broker_mode": "policy",
             "business_purpose": "REVIEW_REQUIRED_NOT_INVENTED", "sensitive_tools": [],
             "deployment": {"preference": "managed", "region": session["runtime"].get("region") or "auto"},
             "source_upload": False,
         }, indent=2, sort_keys=True) + "\n", encoding="utf-8")
-    resumable = {"schema": "agenticdome.connect-state.v1", "portal": portal, "tenant_id": session["tenant_id"], "session_uuid": session["session_uuid"], "workload_uuid": workload_uuid, "token_expires_at": session["expires_at"], "access_token": session["access_token"]}
-    state_path = state_dir / "connect-session.json"
-    state_path.write_text(json.dumps(resumable, indent=2, sort_keys=True) + "\n", encoding="utf-8")
-    os.chmod(state_path, 0o600)
     previous = {name: os.environ.get(name) for name in ("AGENTICDOME_API_BASE", "AGENTICDOME_COPILOT_API_KEY", "AGENTICDOME_TENANT_ID")}
     os.environ.update({"AGENTICDOME_API_BASE": runtime_base, "AGENTICDOME_COPILOT_API_KEY": copilot_key, "AGENTICDOME_TENANT_ID": session["tenant_id"]})
     try:
+        semantic = _copilot_semantic_analysis(root, ir, required=True)
+        binding = _active_copilot_catalog_binding(root)
+        if semantic.get("ir_sha256") != ir_digest or not binding:
+            raise SystemExit("The private Copilot result was not bound to this workload and the installed SDK catalog.")
+        # The portal stores a compact inventory, never the potentially large
+        # per-function graph. Every selected part was analyzed at the sidecar.
+        portal_ir = {
+            "schema": "agenticdome.copilot-ir.v1", "source_upload": False,
+            "metadata_kind": "bounded_workload_summary", "selected_ir_sha256": ir_digest,
+            "files": [], "functions": [],
+            "features": {"functions": len(ir.get("functions", []))},
+            "scope": {
+                "complete": True, "fingerprint": ir.get("scope", {}).get("fingerprint"),
+                "eligible_files_scanned": ir.get("scope", {}).get("eligible_files_scanned", 0),
+            },
+            "workload_coverage": {
+                "selected_parts": semantic.get("workload_coverage", {}).get("selected_parts", 1),
+                "analyzed_parts": semantic.get("workload_coverage", {}).get("analyzed_parts", 1),
+                "cross_part_flow_proven": semantic.get("workload_coverage", {}).get("cross_part_flow_proven", True),
+            },
+        }
+        plan = {
+            "schema": "agenticdome.copilot-plan.v1", "tenant_id": session["tenant_id"],
+            "semantic_analysis": semantic, "catalog_binding": binding,
+            "aggregation": {"kind": "sdk_local_bounded_parts", "signature_scope": "individual_sidecar_parts_only"},
+        }
+        _request(portal + "/api/agentguard/connect/sessions/" + session["session_uuid"] + "/metadata", {"ir": portal_ir, "signed_plan": plan}, session["access_token"])
+
         from .onboarding_cli import create_scaffold
         patch_path = create_scaffold(root)
     finally:
@@ -211,6 +235,11 @@ def run_connect(root: Path, args: Any) -> Dict[str, Any]:
                 os.environ.pop(name, None)
             else:
                 os.environ[name] = value
+
+    resumable = {"schema": "agenticdome.connect-state.v1", "portal": portal, "tenant_id": session["tenant_id"], "session_uuid": session["session_uuid"], "workload_uuid": workload_uuid, "token_expires_at": session["expires_at"], "access_token": session["access_token"]}
+    state_path = state_dir / "connect-session.json"
+    state_path.write_text(json.dumps(resumable, indent=2, sort_keys=True) + "\n", encoding="utf-8")
+    os.chmod(state_path, 0o600)
     pull_request = None
     if args.open_pr:
         if not args.repository_connection:
@@ -222,6 +251,15 @@ def run_connect(root: Path, args: Any) -> Dict[str, Any]:
         "next_action": "Ask AgenticDome to confirm policy-aware sidecar readiness before live verification.",
     })
     broker_setup["sdk_mode"] = effective_config.get("execution_broker_mode", "existing_sdk_or_environment_default")
+    cross_part_review_required = semantic.get("workload_coverage", {}).get("cross_part_flow_proven") is False
+    next_action = (
+        "Review the generated pull request and run agenticdome verify. Then review cross-part call paths and workload-specific tests in the portal before activation."
+        if args.open_pr else
+        "Review the generated patch, apply it on a branch, and run agenticdome verify. Then review cross-part call paths and workload-specific tests in the portal before activation."
+    ) if cross_part_review_required else (
+        "Review the generated pull request and run agenticdome verify."
+        if args.open_pr else "Review the generated patch, apply it on a branch, then run agenticdome verify."
+    )
     return {
         "status": "changeset_ready", "source_upload": False, "tenant_id": session["tenant_id"],
         "session_uuid": session["session_uuid"], "workload_uuid": workload_uuid,
@@ -229,9 +267,10 @@ def run_connect(root: Path, args: Any) -> Dict[str, Any]:
         "execution_broker": broker_setup,
         "attachment_points": len(semantic.get("attachment_points") or []),
         "bypass_risks": len(semantic.get("bypass_risks") or []),
+        "cross_part_review_required": cross_part_review_required,
         "patch": str(patch_path.relative_to(root)),
         "pull_request": pull_request,
-        "next_action": "Review the generated pull request and run agenticdome verify." if pull_request else "Review the generated patch, apply it on a branch, then run agenticdome verify.",
+        "next_action": next_action,
         "sdk_version": _installed_sdk_version(),
     }
 

agenticdome_sdk/copilot_ir.py

@@ -18,7 +18,9 @@ from typing import Any, Dict, List, Sequence, Tuple
 
 
 IR_SCHEMA = "agenticdome.copilot-ir.v1"
-MAX_IR_FILES = 1_000
+MAX_IR_FILES = 5_000
+MAX_IR_FUNCTIONS = 20_000
+TYPESCRIPT_BATCH_FILES = 200
 
 
 def _relative(path: Path, root: Path) -> str:
@@ -280,7 +282,7 @@ def _collect_python(root: Path, paths: Sequence[Path]) -> Tuple[List[Dict[str, A
     parsed = 0
     parse_errors = 0
     features = {"functions": 0, "calls": 0, "returns": 0, "raises": 0}
-    for path in paths[:MAX_IR_FILES]:
+    for path in paths:
         try:
             tree = ast.parse(path.read_text(encoding="utf-8", errors="ignore"), filename=path.name)
         except (OSError, SyntaxError, ValueError):
@@ -309,29 +311,38 @@ def _collect_typescript(root: Path, paths: Sequence[Path]) -> Tuple[List[Dict[st
     helper = Path(__file__).with_name("copilot_ir_collector.cjs")
     if not node or not helper.exists():
         return _typescript_fallback(root, paths, "Node.js or the packaged IR collector is unavailable.")
-    try:
-        completed = subprocess.run(
-            [node, str(helper)],
-            input=json.dumps({"root": str(root), "files": [str(path) for path in paths[:MAX_IR_FILES]]}),
-            text=True,
-            stdout=subprocess.PIPE,
-            stderr=subprocess.DEVNULL,
-            check=False,
-            timeout=20,
-            cwd=root,
-        )
-        result = json.loads(completed.stdout or "{}") if completed.returncode == 0 else {}
-    except (OSError, subprocess.TimeoutExpired, json.JSONDecodeError):
-        result = {}
-    if not isinstance(result, dict) or not result.get("available"):
-        return _typescript_fallback(root, paths, str(result.get("reason", "The TypeScript compiler is unavailable."))[:160] if isinstance(result, dict) else "The TypeScript compiler is unavailable.")
-    functions = result.get("functions") if isinstance(result.get("functions"), list) else []
-    return [item for item in functions if isinstance(item, dict)], {
+    functions: List[Dict[str, Any]] = []
+    files_parsed = 0
+    parse_errors = 0
+    compiler_version = ""
+    for offset in range(0, len(paths), TYPESCRIPT_BATCH_FILES):
+        batch = paths[offset:offset + TYPESCRIPT_BATCH_FILES]
+        try:
+            completed = subprocess.run(
+                [node, str(helper)],
+                input=json.dumps({"root": str(root), "files": [str(path) for path in batch]}),
+                text=True,
+                stdout=subprocess.PIPE,
+                stderr=subprocess.DEVNULL,
+                check=False,
+                timeout=30,
+                cwd=root,
+            )
+            result = json.loads(completed.stdout or "{}") if completed.returncode == 0 else {}
+        except (OSError, subprocess.TimeoutExpired, json.JSONDecodeError):
+            result = {}
+        if not isinstance(result, dict) or not result.get("available"):
+            return _typescript_fallback(root, paths, str(result.get("reason", "The TypeScript compiler is unavailable."))[:160] if isinstance(result, dict) else "The TypeScript compiler is unavailable.")
+        functions.extend(item for item in result.get("functions", []) if isinstance(item, dict))
+        files_parsed += max(0, int(result.get("files_parsed", 0)))
+        parse_errors += max(0, int(result.get("parse_errors", 0)))
+        compiler_version = str(result.get("typescript_version", ""))[:40]
+    return functions, {
         "engine": "typescript-compiler-api",
         "available": True,
-        "files_parsed": max(0, int(result.get("files_parsed", 0))),
-        "parse_errors": max(0, int(result.get("parse_errors", 0))),
-        "typescript_version": str(result.get("typescript_version", ""))[:40],
+        "files_parsed": files_parsed,
+        "parse_errors": parse_errors,
+        "typescript_version": compiler_version,
         "claim": "Generic compiler AST structure collection; private reasoning is performed by the assigned Copilot service",
     }
 
@@ -339,11 +350,13 @@ def _collect_typescript(root: Path, paths: Sequence[Path]) -> Tuple[List[Dict[st
 def _typescript_fallback(root: Path, paths: Sequence[Path], reason: str) -> Tuple[List[Dict[str, Any]], Dict[str, Any]]:
     functions: List[Dict[str, Any]] = []
     parsed = 0
+    read_errors = 0
     call_pattern = re.compile(r"\b([A-Za-z_$][\w$]*(?:\s*\.\s*[A-Za-z_$][\w$]*)*)\s*\(")
-    for path in paths[:MAX_IR_FILES]:
+    for path in paths:
         try:
             lines = path.read_text(encoding="utf-8", errors="ignore").splitlines()
         except OSError:
+            read_errors += 1
             continue
         events = []
         for line_number, line in enumerate(lines, start=1):
@@ -357,7 +370,7 @@ def _typescript_fallback(root: Path, paths: Sequence[Path], reason: str) -> Tupl
         "engine": "typescript-structural-fallback",
         "available": False,
         "files_parsed": parsed,
-        "parse_errors": 0,
+        "parse_errors": read_errors,
         "reason": reason,
         "claim": "Generic structural collection only; install TypeScript for compiler AST evidence",
     }
@@ -365,16 +378,30 @@ def _typescript_fallback(root: Path, paths: Sequence[Path], reason: str) -> Tupl
 
 def collect_repository_ir(root: Path, paths: Sequence[Path]) -> Dict[str, Any]:
     """Collect bounded metadata for private reasoning without emitting source."""
-    python_paths = [path for path in paths if path.suffix.lower() in {".py", ".pyi"}]
-    typescript_paths = [path for path in paths if path.suffix.lower() in {".js", ".jsx", ".ts", ".tsx"}]
+    selected = paths[:MAX_IR_FILES]
+    python_paths = [path for path in selected if path.suffix.lower() in {".py", ".pyi"}]
+    typescript_paths = [path for path in selected if path.suffix.lower() in {".js", ".jsx", ".ts", ".tsx"}]
     python_functions, python_engine = _collect_python(root, python_paths)
     typescript_functions, typescript_engine = _collect_typescript(root, typescript_paths)
+    functions = python_functions + typescript_functions
+    collection_errors = int(python_engine.get("parse_errors", 0)) + int(typescript_engine.get("parse_errors", 0))
+    files_parsed = int(python_engine.get("files_parsed", 0)) + int(typescript_engine.get("files_parsed", 0))
+    complete = (len(paths) <= MAX_IR_FILES and len(functions) <= MAX_IR_FUNCTIONS
+                and collection_errors == 0 and files_parsed == len(paths))
     return {
         "schema": IR_SCHEMA,
         "source_upload": False,
         "collector_mode": "generic_ast_metadata_only",
         "engines": {"python": python_engine, "typescript": typescript_engine},
-        "functions": (python_functions + typescript_functions)[:20_000],
+        "functions": functions[:MAX_IR_FUNCTIONS],
+        "coverage": {
+            "candidate_source_files": len(paths),
+            "files_selected": len(selected),
+            "symbols_found": len(functions),
+            "complete": complete,
+            "limit_reason": "file_limit" if len(paths) > MAX_IR_FILES else "symbol_limit" if len(functions) > MAX_IR_FUNCTIONS
+                else "parse_or_read_error" if collection_errors or files_parsed != len(paths) else None,
+        },
         "privacy": {
             "source_text": False,
             "string_literals": False,