agenticdome-python-sdk 1.2.32__tar.gz → 1.2.34__tar.gz

{agenticdome_python_sdk-1.2.32 → agenticdome_python_sdk-1.2.34}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.32
+Version: 1.2.34
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -33,20 +33,20 @@ Requires-Dist: requests>=2.31.0
 Requires-Dist: urllib3>=2.0.0
 Requires-Dist: cryptography>=42.0.0
 Provides-Extra: crewai
-Requires-Dist: crewai<=1.15.21,>=1.15.5; extra == "crewai"
+Requires-Dist: crewai<=1.15.22,>=1.15.5; extra == "crewai"
 Provides-Extra: redis
 Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
 Requires-Dist: cryptography>=42.0.0; extra == "pop"
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai<=2.43.0,>=2.16.0; extra == "pydanticai"
+Requires-Dist: pydantic-ai<=2.51.0,>=2.16.0; extra == "pydanticai"
 Requires-Dist: anyio>=4.0.0; extra == "pydanticai"
 Provides-Extra: pydantic
-Requires-Dist: pydantic-ai<=2.43.0,>=2.16.0; extra == "pydantic"
+Requires-Dist: pydantic-ai<=2.51.0,>=2.16.0; extra == "pydantic"
 Requires-Dist: anyio>=4.0.0; extra == "pydantic"
 Provides-Extra: langgraph
-Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "langgraph"
-Requires-Dist: langchain-core<=1.6.3,>=1.5.0; extra == "langgraph"
+Requires-Dist: langgraph<=1.2.12,>=1.2.9; extra == "langgraph"
+Requires-Dist: langchain-core<=1.6.5,>=1.5.0; extra == "langgraph"
 Requires-Dist: langchain-openai==1.3.5; extra == "langgraph"
 Requires-Dist: anyio>=4.0.0; extra == "langgraph"
 Provides-Extra: microsoft
@@ -55,51 +55,51 @@ Requires-Dist: autogen-agentchat==0.7.5; extra == "autogen"
 Provides-Extra: microsoft-autogen
 Requires-Dist: autogen-agentchat==0.7.5; extra == "microsoft-autogen"
 Provides-Extra: foundry
-Requires-Dist: azure-ai-projects<=2.6.1,>=2.3.0; extra == "foundry"
+Requires-Dist: azure-ai-projects<=2.7.0,>=2.3.0; extra == "foundry"
 Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
-Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "agno"
+Requires-Dist: agno<=3.0.11,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
-Requires-Dist: openai-agents<=0.22.2,>=0.18.3; extra == "openai-agents"
+Requires-Dist: openai-agents<=0.22.3,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
 Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.94,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.103,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.94,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.103,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
-Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llamaindex"
+Requires-Dist: llama-index<=0.14.25,>=0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
-Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llama-index"
+Requires-Dist: llama-index<=0.14.25,>=0.14.23; extra == "llama-index"
 Provides-Extra: google-adk
-Requires-Dist: google-adk<=2.9.0,>=2.5.0; extra == "google-adk"
+Requires-Dist: google-adk<=2.10.0,>=2.5.0; extra == "google-adk"
 Provides-Extra: adk
-Requires-Dist: google-adk<=2.9.0,>=2.5.0; extra == "adk"
+Requires-Dist: google-adk<=2.10.0,>=2.5.0; extra == "adk"
 Provides-Extra: claude
-Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude"
+Requires-Dist: claude-agent-sdk<=0.2.160,>=0.2.126; extra == "claude"
 Provides-Extra: claude-agent-sdk
-Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude-agent-sdk"
+Requires-Dist: claude-agent-sdk<=0.2.160,>=0.2.126; extra == "claude-agent-sdk"
 Provides-Extra: smolagents
 Requires-Dist: smolagents==1.26.0; extra == "smolagents"
 Provides-Extra: all
-Requires-Dist: crewai<=1.15.21,>=1.15.5; extra == "all"
+Requires-Dist: crewai<=1.15.22,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
-Requires-Dist: pydantic-ai<=2.43.0,>=2.16.0; extra == "all"
+Requires-Dist: pydantic-ai<=2.51.0,>=2.16.0; extra == "all"
 Requires-Dist: anyio>=4.0.0; extra == "all"
-Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "all"
-Requires-Dist: langchain-core<=1.6.3,>=1.5.0; extra == "all"
+Requires-Dist: langgraph<=1.2.12,>=1.2.9; extra == "all"
+Requires-Dist: langchain-core<=1.6.5,>=1.5.0; extra == "all"
 Requires-Dist: langchain-openai==1.3.5; extra == "all"
 Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
-Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "all"
-Requires-Dist: azure-ai-projects<=2.6.1,>=2.3.0; extra == "all"
+Requires-Dist: agno<=3.0.11,>=2.8.0; extra == "all"
+Requires-Dist: azure-ai-projects<=2.7.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
-Requires-Dist: openai-agents<=0.22.2,>=0.18.3; extra == "all"
+Requires-Dist: openai-agents<=0.22.3,>=0.18.3; extra == "all"
 Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.94,>=1.43.54; extra == "all"
-Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "all"
-Requires-Dist: google-adk<=2.9.0,>=2.5.0; extra == "all"
-Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "all"
+Requires-Dist: boto3<=1.43.103,>=1.43.54; extra == "all"
+Requires-Dist: llama-index<=0.14.25,>=0.14.23; extra == "all"
+Requires-Dist: google-adk<=2.10.0,>=2.5.0; extra == "all"
+Requires-Dist: claude-agent-sdk<=0.2.160,>=0.2.126; extra == "all"
 Requires-Dist: smolagents==1.26.0; extra == "all"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
@@ -218,7 +218,10 @@ agenticdome openclaw verify --output .agenticdome/verification.json
 AgenticDome plugin, explicit consent and the exact certified typed hooks.
 `agenticdome plan` returns source-free, tenant-bound Integration Copilot
 guidance for review. `openclaw verify` adds workspace-test and assigned-tenant
-policy evidence. The
+policy evidence. If the same deployable workload also uses MCP, this command
+includes the MCP transport rehearsal and both `mcp_verification` and
+`openclaw_verification` in one report. Both sections must be ready before the
+report is imported; `mcp verify` alone is not a combined-workload proof. The
 customer Control Panel separately confirms tenant binding and retained
 telemetry; neither command silently modifies customer source.
 
@@ -228,6 +231,17 @@ languages and candidate boundaries can be discovered locally; business
 purpose, sensitive actions and managed-versus-sovereign deployment remain
 explicit customer decisions and are not guessed from source code.
 
+`agenticdome init` creates local configuration without contacting Copilot.
+`inspect` and `plan` send source-free structural metadata to the assigned
+tenant sidecar. A selection spanning several deployable packages is analyzed
+as bounded, sequential workload units; successful units are checkpointed
+locally so a retry does not resubmit them. The report lists analyzed parts
+and any result-list caps. It does not claim that calls or guard placement
+across separate workload units were proven; review those boundaries before
+production. If the selection exceeds the 24-unit safety limit, select the
+application or package that actually executes agent actions. No unexamined
+unit is silently omitted or reported as protected.
+
 Use **Customer Control Panel → Activate Action Firewall → Core Config** to
 choose the Developer Integration path and import the two evidence files. This
 path is for SDK, MCP, framework or custom-code integrations; Microsoft

{agenticdome_python_sdk-1.2.32 → agenticdome_python_sdk-1.2.34}/README.md

@@ -105,7 +105,10 @@ agenticdome openclaw verify --output .agenticdome/verification.json
 AgenticDome plugin, explicit consent and the exact certified typed hooks.
 `agenticdome plan` returns source-free, tenant-bound Integration Copilot
 guidance for review. `openclaw verify` adds workspace-test and assigned-tenant
-policy evidence. The
+policy evidence. If the same deployable workload also uses MCP, this command
+includes the MCP transport rehearsal and both `mcp_verification` and
+`openclaw_verification` in one report. Both sections must be ready before the
+report is imported; `mcp verify` alone is not a combined-workload proof. The
 customer Control Panel separately confirms tenant binding and retained
 telemetry; neither command silently modifies customer source.
 
@@ -115,6 +118,17 @@ languages and candidate boundaries can be discovered locally; business
 purpose, sensitive actions and managed-versus-sovereign deployment remain
 explicit customer decisions and are not guessed from source code.
 
+`agenticdome init` creates local configuration without contacting Copilot.
+`inspect` and `plan` send source-free structural metadata to the assigned
+tenant sidecar. A selection spanning several deployable packages is analyzed
+as bounded, sequential workload units; successful units are checkpointed
+locally so a retry does not resubmit them. The report lists analyzed parts
+and any result-list caps. It does not claim that calls or guard placement
+across separate workload units were proven; review those boundaries before
+production. If the selection exceeds the 24-unit safety limit, select the
+application or package that actually executes agent actions. No unexamined
+unit is silently omitted or reported as protected.
+
 Use **Customer Control Panel → Activate Action Firewall → Core Config** to
 choose the Developer Integration path and import the two evidence files. This
 path is for SDK, MCP, framework or custom-code integrations; Microsoft

{agenticdome_python_sdk-1.2.32 → agenticdome_python_sdk-1.2.34}/agenticdome_python_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.32
+Version: 1.2.34
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -33,20 +33,20 @@ Requires-Dist: requests>=2.31.0
 Requires-Dist: urllib3>=2.0.0
 Requires-Dist: cryptography>=42.0.0
 Provides-Extra: crewai
-Requires-Dist: crewai<=1.15.21,>=1.15.5; extra == "crewai"
+Requires-Dist: crewai<=1.15.22,>=1.15.5; extra == "crewai"
 Provides-Extra: redis
 Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
 Requires-Dist: cryptography>=42.0.0; extra == "pop"
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai<=2.43.0,>=2.16.0; extra == "pydanticai"
+Requires-Dist: pydantic-ai<=2.51.0,>=2.16.0; extra == "pydanticai"
 Requires-Dist: anyio>=4.0.0; extra == "pydanticai"
 Provides-Extra: pydantic
-Requires-Dist: pydantic-ai<=2.43.0,>=2.16.0; extra == "pydantic"
+Requires-Dist: pydantic-ai<=2.51.0,>=2.16.0; extra == "pydantic"
 Requires-Dist: anyio>=4.0.0; extra == "pydantic"
 Provides-Extra: langgraph
-Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "langgraph"
-Requires-Dist: langchain-core<=1.6.3,>=1.5.0; extra == "langgraph"
+Requires-Dist: langgraph<=1.2.12,>=1.2.9; extra == "langgraph"
+Requires-Dist: langchain-core<=1.6.5,>=1.5.0; extra == "langgraph"
 Requires-Dist: langchain-openai==1.3.5; extra == "langgraph"
 Requires-Dist: anyio>=4.0.0; extra == "langgraph"
 Provides-Extra: microsoft
@@ -55,51 +55,51 @@ Requires-Dist: autogen-agentchat==0.7.5; extra == "autogen"
 Provides-Extra: microsoft-autogen
 Requires-Dist: autogen-agentchat==0.7.5; extra == "microsoft-autogen"
 Provides-Extra: foundry
-Requires-Dist: azure-ai-projects<=2.6.1,>=2.3.0; extra == "foundry"
+Requires-Dist: azure-ai-projects<=2.7.0,>=2.3.0; extra == "foundry"
 Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
-Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "agno"
+Requires-Dist: agno<=3.0.11,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
-Requires-Dist: openai-agents<=0.22.2,>=0.18.3; extra == "openai-agents"
+Requires-Dist: openai-agents<=0.22.3,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
 Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.94,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.103,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.94,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.103,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
-Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llamaindex"
+Requires-Dist: llama-index<=0.14.25,>=0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
-Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llama-index"
+Requires-Dist: llama-index<=0.14.25,>=0.14.23; extra == "llama-index"
 Provides-Extra: google-adk
-Requires-Dist: google-adk<=2.9.0,>=2.5.0; extra == "google-adk"
+Requires-Dist: google-adk<=2.10.0,>=2.5.0; extra == "google-adk"
 Provides-Extra: adk
-Requires-Dist: google-adk<=2.9.0,>=2.5.0; extra == "adk"
+Requires-Dist: google-adk<=2.10.0,>=2.5.0; extra == "adk"
 Provides-Extra: claude
-Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude"
+Requires-Dist: claude-agent-sdk<=0.2.160,>=0.2.126; extra == "claude"
 Provides-Extra: claude-agent-sdk
-Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude-agent-sdk"
+Requires-Dist: claude-agent-sdk<=0.2.160,>=0.2.126; extra == "claude-agent-sdk"
 Provides-Extra: smolagents
 Requires-Dist: smolagents==1.26.0; extra == "smolagents"
 Provides-Extra: all
-Requires-Dist: crewai<=1.15.21,>=1.15.5; extra == "all"
+Requires-Dist: crewai<=1.15.22,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
-Requires-Dist: pydantic-ai<=2.43.0,>=2.16.0; extra == "all"
+Requires-Dist: pydantic-ai<=2.51.0,>=2.16.0; extra == "all"
 Requires-Dist: anyio>=4.0.0; extra == "all"
-Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "all"
-Requires-Dist: langchain-core<=1.6.3,>=1.5.0; extra == "all"
+Requires-Dist: langgraph<=1.2.12,>=1.2.9; extra == "all"
+Requires-Dist: langchain-core<=1.6.5,>=1.5.0; extra == "all"
 Requires-Dist: langchain-openai==1.3.5; extra == "all"
 Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
-Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "all"
-Requires-Dist: azure-ai-projects<=2.6.1,>=2.3.0; extra == "all"
+Requires-Dist: agno<=3.0.11,>=2.8.0; extra == "all"
+Requires-Dist: azure-ai-projects<=2.7.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
-Requires-Dist: openai-agents<=0.22.2,>=0.18.3; extra == "all"
+Requires-Dist: openai-agents<=0.22.3,>=0.18.3; extra == "all"
 Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.94,>=1.43.54; extra == "all"
-Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "all"
-Requires-Dist: google-adk<=2.9.0,>=2.5.0; extra == "all"
-Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "all"
+Requires-Dist: boto3<=1.43.103,>=1.43.54; extra == "all"
+Requires-Dist: llama-index<=0.14.25,>=0.14.23; extra == "all"
+Requires-Dist: google-adk<=2.10.0,>=2.5.0; extra == "all"
+Requires-Dist: claude-agent-sdk<=0.2.160,>=0.2.126; extra == "all"
 Requires-Dist: smolagents==1.26.0; extra == "all"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
@@ -218,7 +218,10 @@ agenticdome openclaw verify --output .agenticdome/verification.json
 AgenticDome plugin, explicit consent and the exact certified typed hooks.
 `agenticdome plan` returns source-free, tenant-bound Integration Copilot
 guidance for review. `openclaw verify` adds workspace-test and assigned-tenant
-policy evidence. The
+policy evidence. If the same deployable workload also uses MCP, this command
+includes the MCP transport rehearsal and both `mcp_verification` and
+`openclaw_verification` in one report. Both sections must be ready before the
+report is imported; `mcp verify` alone is not a combined-workload proof. The
 customer Control Panel separately confirms tenant binding and retained
 telemetry; neither command silently modifies customer source.
 
@@ -228,6 +231,17 @@ languages and candidate boundaries can be discovered locally; business
 purpose, sensitive actions and managed-versus-sovereign deployment remain
 explicit customer decisions and are not guessed from source code.
 
+`agenticdome init` creates local configuration without contacting Copilot.
+`inspect` and `plan` send source-free structural metadata to the assigned
+tenant sidecar. A selection spanning several deployable packages is analyzed
+as bounded, sequential workload units; successful units are checkpointed
+locally so a retry does not resubmit them. The report lists analyzed parts
+and any result-list caps. It does not claim that calls or guard placement
+across separate workload units were proven; review those boundaries before
+production. If the selection exceeds the 24-unit safety limit, select the
+application or package that actually executes agent actions. No unexamined
+unit is silently omitted or reported as protected.
+
 Use **Customer Control Panel → Activate Action Firewall → Core Config** to
 choose the Developer Integration path and import the two evidence files. This
 path is for SDK, MCP, framework or custom-code integrations; Microsoft

{agenticdome_python_sdk-1.2.32 → agenticdome_python_sdk-1.2.34}/agenticdome_python_sdk.egg-info/requires.txt

@@ -3,49 +3,49 @@ urllib3>=2.0.0
 cryptography>=42.0.0
 
 [adk]
-google-adk<=2.9.0,>=2.5.0
+google-adk<=2.10.0,>=2.5.0
 
 [agno]
-agno<=3.0.9,>=2.8.0
+agno<=3.0.11,>=2.8.0
 
 [all]
-crewai<=1.15.21,>=1.15.5
+crewai<=1.15.22,>=1.15.5
 redis>=4.5.0
 cryptography>=42.0.0
-pydantic-ai<=2.43.0,>=2.16.0
+pydantic-ai<=2.51.0,>=2.16.0
 anyio>=4.0.0
-langgraph<=1.2.11,>=1.2.9
-langchain-core<=1.6.3,>=1.5.0
+langgraph<=1.2.12,>=1.2.9
+langchain-core<=1.6.5,>=1.5.0
 langchain-openai==1.3.5
 autogen-agentchat==0.7.5
-agno<=3.0.9,>=2.8.0
-azure-ai-projects<=2.6.1,>=2.3.0
+agno<=3.0.11,>=2.8.0
+azure-ai-projects<=2.7.0,>=2.3.0
 azure-identity==1.25.3
-openai-agents<=0.22.2,>=0.18.3
+openai-agents<=0.22.3,>=0.18.3
 mcp<=2.2.0,>=1.26.0
-boto3<=1.43.94,>=1.43.54
-llama-index<=0.14.24,>=0.14.23
-google-adk<=2.9.0,>=2.5.0
-claude-agent-sdk<=0.2.152,>=0.2.126
+boto3<=1.43.103,>=1.43.54
+llama-index<=0.14.25,>=0.14.23
+google-adk<=2.10.0,>=2.5.0
+claude-agent-sdk<=0.2.160,>=0.2.126
 smolagents==1.26.0
 
 [autogen]
 autogen-agentchat==0.7.5
 
 [aws-bedrock]
-boto3<=1.43.94,>=1.43.54
+boto3<=1.43.103,>=1.43.54
 
 [bedrock]
-boto3<=1.43.94,>=1.43.54
+boto3<=1.43.103,>=1.43.54
 
 [claude]
-claude-agent-sdk<=0.2.152,>=0.2.126
+claude-agent-sdk<=0.2.160,>=0.2.126
 
 [claude-agent-sdk]
-claude-agent-sdk<=0.2.152,>=0.2.126
+claude-agent-sdk<=0.2.160,>=0.2.126
 
 [crewai]
-crewai<=1.15.21,>=1.15.5
+crewai<=1.15.22,>=1.15.5
 
 [dev]
 pytest>=8.0.0
@@ -59,23 +59,23 @@ twine>=5.0.0
 tomli>=2.0.0
 
 [foundry]
-azure-ai-projects<=2.6.1,>=2.3.0
+azure-ai-projects<=2.7.0,>=2.3.0
 azure-identity==1.25.3
 
 [google-adk]
-google-adk<=2.9.0,>=2.5.0
+google-adk<=2.10.0,>=2.5.0
 
 [langgraph]
-langgraph<=1.2.11,>=1.2.9
-langchain-core<=1.6.3,>=1.5.0
+langgraph<=1.2.12,>=1.2.9
+langchain-core<=1.6.5,>=1.5.0
 langchain-openai==1.3.5
 anyio>=4.0.0
 
 [llama-index]
-llama-index<=0.14.24,>=0.14.23
+llama-index<=0.14.25,>=0.14.23
 
 [llamaindex]
-llama-index<=0.14.24,>=0.14.23
+llama-index<=0.14.25,>=0.14.23
 
 [mcp]
 mcp<=2.2.0,>=1.26.0
@@ -86,17 +86,17 @@ mcp<=2.2.0,>=1.26.0
 autogen-agentchat==0.7.5
 
 [openai-agents]
-openai-agents<=0.22.2,>=0.18.3
+openai-agents<=0.22.3,>=0.18.3
 
 [pop]
 cryptography>=42.0.0
 
 [pydantic]
-pydantic-ai<=2.43.0,>=2.16.0
+pydantic-ai<=2.51.0,>=2.16.0
 anyio>=4.0.0
 
 [pydanticai]
-pydantic-ai<=2.43.0,>=2.16.0
+pydantic-ai<=2.51.0,>=2.16.0
 anyio>=4.0.0
 
 [redis]

{agenticdome_python_sdk-1.2.32 → agenticdome_python_sdk-1.2.34}/agenticdome_sdk/catalog_snapshot.json

@@ -1,13 +1,13 @@
 {
     "schema": "agenticdome.catalog-snapshot.v1",
     "catalog_schema": "agenticdome.hook-catalog.v1",
-    "verified_at": "2026-09-15",
-    "python_sdk_version": "1.2.32",
+    "verified_at": "2026-09-26",
+    "python_sdk_version": "1.2.34",
     "published_packages": {
         "agenticdome-python-sdk": {
             "registry": "pypi",
-            "version": "1.2.32",
-            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.32/"
+            "version": "1.2.34",
+            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.34/"
         },
         "agenticdome-sdk": {
             "registry": "npm",
@@ -21,8 +21,8 @@
         },
         "openclaw": {
             "registry": "npm",
-            "version": "2026.9.4",
-            "url": "https://www.npmjs.com/package/openclaw/v/2026.9.4"
+            "version": "2026.9.6",
+            "url": "https://www.npmjs.com/package/openclaw/v/2026.9.6"
         }
     }
 }

{agenticdome_python_sdk-1.2.32 → agenticdome_python_sdk-1.2.34}/agenticdome_sdk/connect.py

@@ -17,9 +17,6 @@ from pathlib import Path
 from typing import Any, Dict, Optional
 
 from .attestation import ensure_attestation_key
-from .hook_catalog import CATALOG_SCHEMA, CATALOG_VERIFIED_AT, catalog_digest
-
-
 SCOPES = ["onboarding:read", "metadata:write", "evidence:write", "workload:write", "repository:prepare"]
 
 
@@ -124,7 +121,10 @@ def _approve_metadata(ir: Dict[str, Any], assume_yes: bool) -> None:
 
 def run_connect(root: Path, args: Any) -> Dict[str, Any]:
     # Import lazily to avoid a module cycle and keep the public client purely orchestration code.
-    from .onboarding_cli import _installed_sdk_version, inspect_repository
+    from .onboarding_cli import (
+        _active_copilot_catalog_binding, _copilot_semantic_analysis,
+        _ensure_workload_id, _installed_sdk_version, _scope_gap_message, inspect_repository,
+    )
 
     portal = str(args.portal).rstrip("/")
     if not portal.startswith("https://") and not getattr(args, "allow_insecure_http", False):
@@ -155,12 +155,23 @@ def run_connect(root: Path, args: Any) -> Dict[str, Any]:
     if not session.get("runtime") or not session.get("copilot"):
         raise SystemExit("Authentication succeeded, but no eligible runtime is assigned. The saved portal session can be resumed after an administrator enables an assignment policy.")
 
-    report = inspect_repository(root)
+    local_workload_id = _ensure_workload_id(root)
+    report = inspect_repository(root, remote_analysis=False)
+    if report.get("scope", {}).get("complete") is not True:
+        raise SystemExit(_scope_gap_message(report))
     ir = report["copilot_ir"]
     _approve_metadata(ir, bool(args.yes))
     private_pem, public_pem = ensure_attestation_key(root / ".agenticdome")
     del private_pem
-    workload_uuid = str(uuid.uuid5(uuid.NAMESPACE_URL, session["tenant_id"] + ":" + root.name))
+    workload_uuid = str(uuid.uuid5(uuid.NAMESPACE_URL, session["tenant_id"] + ":" + local_workload_id))
+    previous_session_path = root / ".agenticdome" / "connect-session.json"
+    if previous_session_path.is_file():
+        try:
+            previous_session = json.loads(previous_session_path.read_text(encoding="utf-8"))
+            if previous_session.get("tenant_id") == session["tenant_id"]:
+                workload_uuid = str(uuid.UUID(str(previous_session["workload_uuid"])))
+        except (OSError, ValueError, KeyError, TypeError, AttributeError, json.JSONDecodeError):
+            raise SystemExit("The previous Connect workload identity is unreadable. Restore its connect-session.json before retrying to avoid creating a duplicate workload.")
     frameworks = [item["key"] for item in report.get("frameworks", [])]
     _request(portal + "/api/agentguard/connect/workloads", {
         "session_uuid": session["session_uuid"], "workload_uuid": workload_uuid,
@@ -171,38 +182,51 @@ def run_connect(root: Path, args: Any) -> Dict[str, Any]:
 
     runtime_base = str(session["runtime"]["api_base"]).rstrip("/")
     copilot_key = str(session["copilot"]["api_key"])
-    ir_digest = hashlib.sha256(json.dumps(ir, sort_keys=True, separators=(",", ":")).encode("utf-8")).hexdigest()
-    plan = _request(runtime_base + "/integration-copilot/v1/analyze", {
-        "schema": "agenticdome.copilot-request.v1", "ir": ir,
-        "catalog_binding": {"schema": CATALOG_SCHEMA, "catalog_digest": catalog_digest(), "verified_at": CATALOG_VERIFIED_AT},
-    }, headers={"X-API-Key": copilot_key, "X-Tenant-Id": session["tenant_id"], "Idempotency-Key": hashlib.sha256((session["tenant_id"] + ir_digest + catalog_digest()).encode()).hexdigest()})
-    if plan.get("schema") != "agenticdome.copilot-plan.v1" or plan.get("tenant_id") != session["tenant_id"]:
-        raise SystemExit("The assigned private Copilot returned an invalid tenant-bound plan.")
-    semantic = plan.get("semantic_analysis") or {}
-    if semantic.get("ir_sha256") != ir_digest:
-        raise SystemExit("The private Copilot plan was not bound to the submitted metadata.")
-    _request(portal + "/api/agentguard/connect/sessions/" + session["session_uuid"] + "/metadata", {"ir": ir, "signed_plan": plan}, session["access_token"])
-
+    from .onboarding_cli import _ir_sha256
+    ir_digest = _ir_sha256(ir)
     state_dir = root / ".agenticdome"
     state_dir.mkdir(parents=True, exist_ok=True)
-    cache = {"schema": "agenticdome.copilot-cache.v1", "source_upload": False, "tenant_id": session["tenant_id"], "api_base": runtime_base, "semantic_analysis": semantic, "catalog_binding": plan.get("catalog_binding")}
-    (state_dir / "copilot-analysis.json").write_text(json.dumps(cache, indent=2, sort_keys=True) + "\n", encoding="utf-8")
     config_path = state_dir / "config.json"
     if not config_path.exists():
         config_path.write_text(json.dumps({
-            "schema": "agenticdome.project-config.v1", "frameworks": frameworks or ["custom-python"],
+            "schema": "agenticdome.project-config.v1", "workload_id": local_workload_id,
+            "frameworks": frameworks or ["custom-python"],
             "execution_broker_mode": "policy",
             "business_purpose": "REVIEW_REQUIRED_NOT_INVENTED", "sensitive_tools": [],
             "deployment": {"preference": "managed", "region": session["runtime"].get("region") or "auto"},
             "source_upload": False,
         }, indent=2, sort_keys=True) + "\n", encoding="utf-8")
-    resumable = {"schema": "agenticdome.connect-state.v1", "portal": portal, "tenant_id": session["tenant_id"], "session_uuid": session["session_uuid"], "workload_uuid": workload_uuid, "token_expires_at": session["expires_at"], "access_token": session["access_token"]}
-    state_path = state_dir / "connect-session.json"
-    state_path.write_text(json.dumps(resumable, indent=2, sort_keys=True) + "\n", encoding="utf-8")
-    os.chmod(state_path, 0o600)
     previous = {name: os.environ.get(name) for name in ("AGENTICDOME_API_BASE", "AGENTICDOME_COPILOT_API_KEY", "AGENTICDOME_TENANT_ID")}
     os.environ.update({"AGENTICDOME_API_BASE": runtime_base, "AGENTICDOME_COPILOT_API_KEY": copilot_key, "AGENTICDOME_TENANT_ID": session["tenant_id"]})
     try:
+        semantic = _copilot_semantic_analysis(root, ir, required=True)
+        binding = _active_copilot_catalog_binding(root)
+        if semantic.get("ir_sha256") != ir_digest or not binding:
+            raise SystemExit("The private Copilot result was not bound to this workload and the installed SDK catalog.")
+        # The portal stores a compact inventory, never the potentially large
+        # per-function graph. Every selected part was analyzed at the sidecar.
+        portal_ir = {
+            "schema": "agenticdome.copilot-ir.v1", "source_upload": False,
+            "metadata_kind": "bounded_workload_summary", "selected_ir_sha256": ir_digest,
+            "files": [], "functions": [],
+            "features": {"functions": len(ir.get("functions", []))},
+            "scope": {
+                "complete": True, "fingerprint": ir.get("scope", {}).get("fingerprint"),
+                "eligible_files_scanned": ir.get("scope", {}).get("eligible_files_scanned", 0),
+            },
+            "workload_coverage": {
+                "selected_parts": semantic.get("workload_coverage", {}).get("selected_parts", 1),
+                "analyzed_parts": semantic.get("workload_coverage", {}).get("analyzed_parts", 1),
+                "cross_part_flow_proven": semantic.get("workload_coverage", {}).get("cross_part_flow_proven", True),
+            },
+        }
+        plan = {
+            "schema": "agenticdome.copilot-plan.v1", "tenant_id": session["tenant_id"],
+            "semantic_analysis": semantic, "catalog_binding": binding,
+            "aggregation": {"kind": "sdk_local_bounded_parts", "signature_scope": "individual_sidecar_parts_only"},
+        }
+        _request(portal + "/api/agentguard/connect/sessions/" + session["session_uuid"] + "/metadata", {"ir": portal_ir, "signed_plan": plan}, session["access_token"])
+
         from .onboarding_cli import create_scaffold
         patch_path = create_scaffold(root)
     finally:
@@ -211,6 +235,11 @@ def run_connect(root: Path, args: Any) -> Dict[str, Any]:
                 os.environ.pop(name, None)
             else:
                 os.environ[name] = value
+
+    resumable = {"schema": "agenticdome.connect-state.v1", "portal": portal, "tenant_id": session["tenant_id"], "session_uuid": session["session_uuid"], "workload_uuid": workload_uuid, "token_expires_at": session["expires_at"], "access_token": session["access_token"]}
+    state_path = state_dir / "connect-session.json"
+    state_path.write_text(json.dumps(resumable, indent=2, sort_keys=True) + "\n", encoding="utf-8")
+    os.chmod(state_path, 0o600)
     pull_request = None
     if args.open_pr:
         if not args.repository_connection:
@@ -222,6 +251,15 @@ def run_connect(root: Path, args: Any) -> Dict[str, Any]:
         "next_action": "Ask AgenticDome to confirm policy-aware sidecar readiness before live verification.",
     })
     broker_setup["sdk_mode"] = effective_config.get("execution_broker_mode", "existing_sdk_or_environment_default")
+    cross_part_review_required = semantic.get("workload_coverage", {}).get("cross_part_flow_proven") is False
+    next_action = (
+        "Review the generated pull request and run agenticdome verify. Then review cross-part call paths and workload-specific tests in the portal before activation."
+        if args.open_pr else
+        "Review the generated patch, apply it on a branch, and run agenticdome verify. Then review cross-part call paths and workload-specific tests in the portal before activation."
+    ) if cross_part_review_required else (
+        "Review the generated pull request and run agenticdome verify."
+        if args.open_pr else "Review the generated patch, apply it on a branch, then run agenticdome verify."
+    )
     return {
         "status": "changeset_ready", "source_upload": False, "tenant_id": session["tenant_id"],
         "session_uuid": session["session_uuid"], "workload_uuid": workload_uuid,
@@ -229,9 +267,10 @@ def run_connect(root: Path, args: Any) -> Dict[str, Any]:
         "execution_broker": broker_setup,
         "attachment_points": len(semantic.get("attachment_points") or []),
         "bypass_risks": len(semantic.get("bypass_risks") or []),
+        "cross_part_review_required": cross_part_review_required,
         "patch": str(patch_path.relative_to(root)),
         "pull_request": pull_request,
-        "next_action": "Review the generated pull request and run agenticdome verify." if pull_request else "Review the generated patch, apply it on a branch, then run agenticdome verify.",
+        "next_action": next_action,
         "sdk_version": _installed_sdk_version(),
     }