agenticdome-python-sdk 1.2.36__py3-none-any.whl → 1.2.37__py3-none-any.whl

{agenticdome_python_sdk-1.2.36.dist-info → agenticdome_python_sdk-1.2.37.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.36
+Version: 1.2.37
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -182,7 +182,16 @@ certified onboarding path, obtain the assigned sidecar and a dedicated
 local exact diff and change summary, explicitly approve a supported edit or
 attach other boundaries manually, then run
 `agenticdome verify --run-tests --output .agenticdome/verification.json`.
-Preview obtains the private, signed, catalog-bound semantic plan and keeps
+
+If a coding assistant has already made and tested the application edits,
+import its canonical `AgenticDome_Integration.md` in the customer portal and
+run `agenticdome validate-report --report AgenticDome_Integration.md` from
+that same deployable workload. Import the two generated, hash-bound JSON files
+in Onboarding. This avoids repeating the guided edit plan; the Markdown counts
+remain AI-reported and a real action-path test is still required before
+claiming protection. See the [customer onboarding guide](docs/customer-onboarding.md).
+
+For the Pilot path, preview obtains the private, signed, catalog-bound semantic plan and keeps
 application source on your machine. `agenticdome integrate apply` creates a
 local Git review branch but never commits, pushes or deploys. Existing-source
 automatic edits cover unambiguous CrewAI bootstrap, PydanticAI `Agent(...)`,

{agenticdome_python_sdk-1.2.36.dist-info → agenticdome_python_sdk-1.2.37.dist-info}/RECORD

@@ -1,5 +1,5 @@
-agenticdome_python_sdk-1.2.36.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
-agenticdome_python_sdk-1.2.36.dist-info/licenses/NOTICE,sha256=obvKP6kV1Ny5R8_INFOpf0X5um9U2X43LGwQFobO9kg,550
+agenticdome_python_sdk-1.2.37.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+agenticdome_python_sdk-1.2.37.dist-info/licenses/NOTICE,sha256=obvKP6kV1Ny5R8_INFOpf0X5um9U2X43LGwQFobO9kg,550
 agenticdome_sdk/__init__.py,sha256=1JY5ELhtp0zg-82xhgt6NxZ7k5CWL5e_Tm6BrsuCFXc,1102
 agenticdome_sdk/_framework_firewall.py,sha256=W3gy7WsK50scE7ypJrmVJhHUOBsr0zAWQ85rghqaJk4,31963
 agenticdome_sdk/_mode.py,sha256=XvOgh5sW-FG8S39V483h3uLiFh8wSt14OmYXz_6eDO8,1283
@@ -8,7 +8,7 @@ agenticdome_sdk/agno.py,sha256=L3yfjTBHW47xzT67a1DsjtwmvrAoYBkbxADpsr85Cp0,60766
 agenticdome_sdk/attestation.py,sha256=ij4cMff7nzLaIS0W02d2WURFcyKe72bcUlSz-dYkaLE,10310
 agenticdome_sdk/autogen.py,sha256=KP4qlIcsNXB-4ZT9D7Slc1xWEeWXRIWkc5HGW0U6k2c,29018
 agenticdome_sdk/aws_bedrock.py,sha256=2zD9j7xi0jna0sMeMf-hKZdc3Y4RPwzj6tMVOUGgIDQ,69581
-agenticdome_sdk/catalog_snapshot.json,sha256=xHntC0Cjzli4pP0fyTxVtbH90LthGgaq7ad6YGmy54Q,951
+agenticdome_sdk/catalog_snapshot.json,sha256=51ls_eO8qy5BCZRamVz6G7F265WYFO2LaOEerO1zcA0,951
 agenticdome_sdk/claude.py,sha256=XeY9AUu61SYcJjQVz_AtL_WaN6X4KqP5nprEbbr4Q6A,17456
 agenticdome_sdk/client.py,sha256=SQk7BROrcedyHAfubGiwGNNGycq7W7L-Ncjroj1ugBg,69815
 agenticdome_sdk/connect.py,sha256=MY30wXYA6OaZhs__E67KcFXEy7mZMBxMSV06BnlBjRg,18766
@@ -21,7 +21,7 @@ agenticdome_sdk/framework_edits.py,sha256=4BgWHxWKEkex8_DMhjVxjovpUVkrMF7TsCZzlS
 agenticdome_sdk/generic_python.py,sha256=JtXRcYEZ6_Dgxnnv4QgqeMZR8dFVr8EqFDM-XYQ-GMA,6823
 agenticdome_sdk/google_adk.py,sha256=2TA-tUhY0lOnkGcs1BN9CUEz67ebVX4HJ7mnNoRPcZs,57258
 agenticdome_sdk/guided_integration.py,sha256=m7EsgLrPEJhfrVMaVWO2DtjYp6S8PwpCKDYZPNbVZ2o,52259
-agenticdome_sdk/hook_catalog.py,sha256=4cQvWsuPa2nOZdlhp1Ya6SDo2M83aSHHtiLxrM3dkz8,29272
+agenticdome_sdk/hook_catalog.py,sha256=XRc_MeEE3LArX1R0xfO3Vo6nZbF3U-4cOkTOMfMOZS8,29272
 agenticdome_sdk/identity.py,sha256=mrymGgZSVsKJ9THRde54qGmMT7j_uZHmPJ-HtWk7PXE,4635
 agenticdome_sdk/langgraph.py,sha256=FUvF6DSA5aZP3eoBoNeldgGtPrz-dO5xcVmrPPSBEhI,84312
 agenticdome_sdk/lifecycle.py,sha256=9LvxmUU1LC_tMchb5uVFBnZIkVFUxOv3VH9wG_9gPtA,12855
@@ -32,15 +32,15 @@ agenticdome_sdk/mcp_rehearsal_server.py,sha256=cox4XqUTL8d0gaDzqxDZcEALkaz8otjOj
 agenticdome_sdk/mcp_verification.py,sha256=WtRhAFVPTBqGOcHNf_db1m4jX9_TO0oxP98XWk4_ISY,14551
 agenticdome_sdk/microsoft_agent_framework.py,sha256=GfIIuk0n-VhsZaTyoB7P6ilpz9bFLD95TWuX0rFSWeU,67219
 agenticdome_sdk/microsoft_ai_foundry.py,sha256=YlO968s1dbAYcaEqhqufL92NFR66GuTtngnCv7-1mYc,56911
-agenticdome_sdk/onboarding_cli.py,sha256=jfc4owNPrvlVkYa5eLaQfATA6sbgXGkhxf4IJfg6gWo,145081
+agenticdome_sdk/onboarding_cli.py,sha256=V1MKiiYudC48SgaZNYMmUysgRjwARGG6S0VUf4ZLLtU,150677
 agenticdome_sdk/openai_agents.py,sha256=0z-7FDBIG4usxnILpan6yjQHF4zXIzm9YLsh3-bW8Lw,57678
 agenticdome_sdk/outcomes.py,sha256=jadWDzQaZXrHNvpPme8lQY0jihYLCoM3s4CihAq0JRo,2507
 agenticdome_sdk/proof.py,sha256=ECKc14xSE0V1HHmcpZjfVz8-Q2H_fooah3BfdblFV8M,2878
 agenticdome_sdk/pydantic.py,sha256=WKb8X0Fgydfid-ep8E-M8Yslz2pWcCP6w7n_aBxt1rI,54961
 agenticdome_sdk/simulation.py,sha256=UCbZy3u9AzfxQCfY38SCV3CxGxhinV9EA4aHMPlK4mc,8426
 agenticdome_sdk/smolagents.py,sha256=wjMA1HVAQ-9wRNM38Jr9wlCpKMhF-9vxtTk6R-kwQhs,19094
-agenticdome_python_sdk-1.2.36.dist-info/METADATA,sha256=4gqvhEqeY-7JwahLP92qIULZ8G8-T5eaQsKUL0eqhUk,144718
-agenticdome_python_sdk-1.2.36.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-agenticdome_python_sdk-1.2.36.dist-info/entry_points.txt,sha256=cRfCphkr5gLrkGIzXJEtL50HdHLajoZLbZtcMLE8NoY,113
-agenticdome_python_sdk-1.2.36.dist-info/top_level.txt,sha256=LZbbjXco5mqDrGwlTJpIKI5Sp6R_njzHHjExxAs9c3s,16
-agenticdome_python_sdk-1.2.36.dist-info/RECORD,,
+agenticdome_python_sdk-1.2.37.dist-info/METADATA,sha256=MYsYXQMJm4WcWtRlr7bhEtug7k6TuLhJHknT8WjPhoE,145282
+agenticdome_python_sdk-1.2.37.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+agenticdome_python_sdk-1.2.37.dist-info/entry_points.txt,sha256=cRfCphkr5gLrkGIzXJEtL50HdHLajoZLbZtcMLE8NoY,113
+agenticdome_python_sdk-1.2.37.dist-info/top_level.txt,sha256=LZbbjXco5mqDrGwlTJpIKI5Sp6R_njzHHjExxAs9c3s,16
+agenticdome_python_sdk-1.2.37.dist-info/RECORD,,

agenticdome_sdk/catalog_snapshot.json

@@ -1,13 +1,13 @@
 {
     "schema": "agenticdome.catalog-snapshot.v1",
     "catalog_schema": "agenticdome.hook-catalog.v1",
-    "verified_at": "2026-09-29",
-    "python_sdk_version": "1.2.36",
+    "verified_at": "2026-10-02",
+    "python_sdk_version": "1.2.37",
     "published_packages": {
         "agenticdome-python-sdk": {
             "registry": "pypi",
-            "version": "1.2.36",
-            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.36/"
+            "version": "1.2.37",
+            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.37/"
         },
         "agenticdome-sdk": {
             "registry": "npm",
@@ -21,8 +21,8 @@
         },
         "openclaw": {
             "registry": "npm",
-            "version": "2026.9.6",
-            "url": "https://www.npmjs.com/package/openclaw/v/2026.9.6"
+            "version": "2026.9.7",
+            "url": "https://www.npmjs.com/package/openclaw/v/2026.9.7"
         }
     }
 }

agenticdome_sdk/hook_catalog.py

@@ -39,7 +39,7 @@ CATALOG_VERIFIED_AT = str(_CATALOG_SNAPSHOT["verified_at"])
 
 
 _OPENCLAW_RUNTIME_MIN_VERSION = "2026.7.1-2"
-_OPENCLAW_RUNTIME_MAX_VERSION = "2026.9.6"
+_OPENCLAW_RUNTIME_MAX_VERSION = "2026.9.7"
 _OPENCLAW_RUNTIME_VERSION = _OPENCLAW_RUNTIME_MAX_VERSION
 _OPENCLAW_NODE_RANGE = ">=24.16.0 <25 || >=26.1.0"
 

agenticdome_sdk/onboarding_cli.py

@@ -2471,6 +2471,77 @@ def verify_project(root: Path, live: bool = False, run_tests: bool = False,
     return (0 if result["ready"] else 2), result
 
 
+def validate_ai_integration_report(root: Path, report_path: Path) -> Tuple[int, Dict[str, Any]]:
+    """Validate an AI-assisted edit with the existing semantic and test gates.
+
+    Markdown is a customer-authored inventory, never an authorization or proof
+    source. Only its digest is added to the source-free evidence exports.
+    """
+    if report_path.name != "AgenticDome_Integration.md" or report_path.is_symlink() or not report_path.is_file():
+        raise SystemExit("Select this workload's AgenticDome_Integration.md (regular file, exact name).")
+    if not report_path.resolve().is_relative_to(root) or report_path.stat().st_size > 524288:
+        raise SystemExit("The integration report must be inside this workload and no larger than 512 KB.")
+    try:
+        markdown = report_path.read_text(encoding="utf-8")
+    except (UnicodeError, OSError) as exc:
+        raise SystemExit("Read AgenticDome_Integration.md as UTF-8 and retry; the file could not be read safely.") from exc
+    if not markdown or "\x00" in markdown:
+        raise SystemExit("AgenticDome_Integration.md is empty or contains unsupported binary content.")
+    scope_match = re.search(r"^Workload scope:\s*([^\r\n]+)", markdown, re.IGNORECASE | re.MULTILINE)
+    if not scope_match:
+        raise SystemExit("Add a Workload scope line naming this deployable workload to AgenticDome_Integration.md.")
+    quoted = re.search(r"`([^`]+)`", scope_match.group(1))
+    scope = (quoted.group(1) if quoted else scope_match.group(1).split()[0]).strip().rstrip("/")
+    if Path(scope).name.casefold() != root.name.casefold() or ".." in Path(scope).parts:
+        raise SystemExit("The report's Workload scope does not match this workload root. Run from the correct deployable service.")
+    rows = re.findall(r"^\|\s*([1-8])\.([^\r\n]*)", markdown, re.MULTILINE)
+    if len(rows) != 8 or {number for number, _ in rows} != {str(index) for index in range(1, 9)}:
+        raise SystemExit("The integration report needs one valid row for each of the eight interception categories.")
+    for _, cells_text in rows:
+        cells = [cell.strip().replace("*", "").replace(",", "") for cell in cells_text.strip().strip("|").split("|")]
+        if len(cells) != 6 or any(not re.fullmatch(r"\d{1,5}", cell) for cell in cells[1:]):
+            raise SystemExit("Each interception row needs five non-negative counts after its category.")
+        found, existing, new, unprotected, live = (int(cell) for cell in cells[1:])
+        if any(value > 10000 for value in (found, existing, new, unprotected, live)) or existing + new + unprotected != found or live > existing + new:
+            raise SystemExit("The report counts do not reconcile. Correct the AI integration inventory before validation.")
+    digest = hashlib.sha256(markdown.encode("utf-8")).hexdigest()
+
+    inspection = _exportable_inspection(inspect_repository(root))
+    if inspection.get("scope", {}).get("complete") is not True:
+        raise SystemExit(_scope_gap_message(inspection))
+    if inspection.get("mcp_protection", {}).get("detected") is True or inspection.get("openclaw_protection", {}).get("ready") is True:
+        raise SystemExit("This workload needs the specialist MCP or OpenClaw onboarding path. Keep the AI report for review, then use that journey's verification commands.")
+    inspection["ai_integration_report_sha256"] = digest
+    inspection.pop("report_sha256", None)
+    inspection["report_sha256"] = hashlib.sha256(
+        json.dumps(inspection, sort_keys=True, separators=(",", ":")).encode("utf-8")
+    ).hexdigest()
+    plan = integration_plan(root)
+    plan["inspection_report_sha256"] = inspection["report_sha256"]
+    exit_code, verification = verify_project(root, run_tests=True, plan=plan)
+    verification["ai_integration_report_sha256"] = digest
+    verification.pop("report_sha256", None)
+    verification["report_sha256"] = hashlib.sha256(
+        json.dumps(verification, sort_keys=True, separators=(",", ":")).encode("utf-8")
+    ).hexdigest()
+
+    inspection_path = root / "agenticdome-inspection.json"
+    verification_path = root / ".agenticdome" / "verification.json"
+    for output in (inspection_path, verification_path):
+        if output.is_symlink() or not output.resolve().is_relative_to(root):
+            raise SystemExit("An evidence output path is a symlink or leaves this workload; remove that path and retry.")
+    _write_json(inspection_path, inspection)
+    _write_json(verification_path, verification)
+    return exit_code, {
+        "status": "validation_passed" if verification["ready"] else "validation_needs_attention",
+        "inspection": str(inspection_path.relative_to(root)),
+        "verification": str(verification_path.relative_to(root)),
+        "ai_integration_report_sha256": digest,
+        "ready": verification["ready"],
+        "next_action": "Import both JSON files in Onboarding; then run the assigned-runtime check and test a real action path. No customer action executes in these fixed decision cases.",
+    }
+
+
 def _print(value: Any, as_json: bool = False) -> None:
     if as_json or isinstance(value, (dict, list)):
         print(json.dumps(value, indent=2, sort_keys=True))
@@ -2575,6 +2646,11 @@ def build_parser() -> argparse.ArgumentParser:
     )
     verify_parser.add_argument("--output")
 
+    ai_validate_parser = subparsers.add_parser(
+        "validate-report", help="Validate a coding-assistant integration report against this workload; no source upload or code edit."
+    )
+    ai_validate_parser.add_argument("--report", default="AgenticDome_Integration.md")
+
     action_parser = subparsers.add_parser(
         "verify-action",
         help="Run one safe customer test and correlate the real SDK hook, live verdict and handler spy.",
@@ -2754,6 +2830,13 @@ def main(argv: Optional[Sequence[str]] = None) -> int:
         record_verification(root, result)
         _print(result)
         return exit_code
+    if args.command == "validate-report":
+        report_path = Path(args.report)
+        if not report_path.is_absolute():
+            report_path = root / report_path
+        exit_code, result = validate_ai_integration_report(root, report_path)
+        _print(result)
+        return exit_code
     if args.command == "verify-action":
         from .action_path_proof import run_action_path_test
         command = list(args.test_command)