agenticdome-python-sdk 1.2.36__py3-none-any.whl → 1.2.38__py3-none-any.whl

{agenticdome_python_sdk-1.2.36.dist-info → agenticdome_python_sdk-1.2.38.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.36
+Version: 1.2.38
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -182,7 +182,16 @@ certified onboarding path, obtain the assigned sidecar and a dedicated
 local exact diff and change summary, explicitly approve a supported edit or
 attach other boundaries manually, then run
 `agenticdome verify --run-tests --output .agenticdome/verification.json`.
-Preview obtains the private, signed, catalog-bound semantic plan and keeps
+
+If a coding assistant has already made and tested the application edits,
+import its canonical `AgenticDome_Integration.md` in the customer portal and
+run `agenticdome validate-report --report AgenticDome_Integration.md` from
+that same deployable workload. Import the two generated, hash-bound JSON files
+in Onboarding. This avoids repeating the guided edit plan; the Markdown counts
+remain AI-reported and a real action-path test is still required before
+claiming protection. See the [customer onboarding guide](docs/customer-onboarding.md).
+
+For the Pilot path, preview obtains the private, signed, catalog-bound semantic plan and keeps
 application source on your machine. `agenticdome integrate apply` creates a
 local Git review branch but never commits, pushes or deploys. Existing-source
 automatic edits cover unambiguous CrewAI bootstrap, PydanticAI `Agent(...)`,

{agenticdome_python_sdk-1.2.36.dist-info → agenticdome_python_sdk-1.2.38.dist-info}/RECORD

@@ -1,5 +1,5 @@
-agenticdome_python_sdk-1.2.36.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
-agenticdome_python_sdk-1.2.36.dist-info/licenses/NOTICE,sha256=obvKP6kV1Ny5R8_INFOpf0X5um9U2X43LGwQFobO9kg,550
+agenticdome_python_sdk-1.2.38.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+agenticdome_python_sdk-1.2.38.dist-info/licenses/NOTICE,sha256=obvKP6kV1Ny5R8_INFOpf0X5um9U2X43LGwQFobO9kg,550
 agenticdome_sdk/__init__.py,sha256=1JY5ELhtp0zg-82xhgt6NxZ7k5CWL5e_Tm6BrsuCFXc,1102
 agenticdome_sdk/_framework_firewall.py,sha256=W3gy7WsK50scE7ypJrmVJhHUOBsr0zAWQ85rghqaJk4,31963
 agenticdome_sdk/_mode.py,sha256=XvOgh5sW-FG8S39V483h3uLiFh8wSt14OmYXz_6eDO8,1283
@@ -8,7 +8,7 @@ agenticdome_sdk/agno.py,sha256=L3yfjTBHW47xzT67a1DsjtwmvrAoYBkbxADpsr85Cp0,60766
 agenticdome_sdk/attestation.py,sha256=ij4cMff7nzLaIS0W02d2WURFcyKe72bcUlSz-dYkaLE,10310
 agenticdome_sdk/autogen.py,sha256=KP4qlIcsNXB-4ZT9D7Slc1xWEeWXRIWkc5HGW0U6k2c,29018
 agenticdome_sdk/aws_bedrock.py,sha256=2zD9j7xi0jna0sMeMf-hKZdc3Y4RPwzj6tMVOUGgIDQ,69581
-agenticdome_sdk/catalog_snapshot.json,sha256=xHntC0Cjzli4pP0fyTxVtbH90LthGgaq7ad6YGmy54Q,951
+agenticdome_sdk/catalog_snapshot.json,sha256=aVXNwobV40gCMiG-pYgio5fonr2jo8QJRdlGsYJquXA,951
 agenticdome_sdk/claude.py,sha256=XeY9AUu61SYcJjQVz_AtL_WaN6X4KqP5nprEbbr4Q6A,17456
 agenticdome_sdk/client.py,sha256=SQk7BROrcedyHAfubGiwGNNGycq7W7L-Ncjroj1ugBg,69815
 agenticdome_sdk/connect.py,sha256=MY30wXYA6OaZhs__E67KcFXEy7mZMBxMSV06BnlBjRg,18766
@@ -21,7 +21,7 @@ agenticdome_sdk/framework_edits.py,sha256=4BgWHxWKEkex8_DMhjVxjovpUVkrMF7TsCZzlS
 agenticdome_sdk/generic_python.py,sha256=JtXRcYEZ6_Dgxnnv4QgqeMZR8dFVr8EqFDM-XYQ-GMA,6823
 agenticdome_sdk/google_adk.py,sha256=2TA-tUhY0lOnkGcs1BN9CUEz67ebVX4HJ7mnNoRPcZs,57258
 agenticdome_sdk/guided_integration.py,sha256=m7EsgLrPEJhfrVMaVWO2DtjYp6S8PwpCKDYZPNbVZ2o,52259
-agenticdome_sdk/hook_catalog.py,sha256=4cQvWsuPa2nOZdlhp1Ya6SDo2M83aSHHtiLxrM3dkz8,29272
+agenticdome_sdk/hook_catalog.py,sha256=XRc_MeEE3LArX1R0xfO3Vo6nZbF3U-4cOkTOMfMOZS8,29272
 agenticdome_sdk/identity.py,sha256=mrymGgZSVsKJ9THRde54qGmMT7j_uZHmPJ-HtWk7PXE,4635
 agenticdome_sdk/langgraph.py,sha256=FUvF6DSA5aZP3eoBoNeldgGtPrz-dO5xcVmrPPSBEhI,84312
 agenticdome_sdk/lifecycle.py,sha256=9LvxmUU1LC_tMchb5uVFBnZIkVFUxOv3VH9wG_9gPtA,12855
@@ -32,15 +32,15 @@ agenticdome_sdk/mcp_rehearsal_server.py,sha256=cox4XqUTL8d0gaDzqxDZcEALkaz8otjOj
 agenticdome_sdk/mcp_verification.py,sha256=WtRhAFVPTBqGOcHNf_db1m4jX9_TO0oxP98XWk4_ISY,14551
 agenticdome_sdk/microsoft_agent_framework.py,sha256=GfIIuk0n-VhsZaTyoB7P6ilpz9bFLD95TWuX0rFSWeU,67219
 agenticdome_sdk/microsoft_ai_foundry.py,sha256=YlO968s1dbAYcaEqhqufL92NFR66GuTtngnCv7-1mYc,56911
-agenticdome_sdk/onboarding_cli.py,sha256=jfc4owNPrvlVkYa5eLaQfATA6sbgXGkhxf4IJfg6gWo,145081
+agenticdome_sdk/onboarding_cli.py,sha256=XVI1mYJi1VuMCpVTb1eMbXRbtAi2X3r0xVxWq6Zfv24,155268
 agenticdome_sdk/openai_agents.py,sha256=0z-7FDBIG4usxnILpan6yjQHF4zXIzm9YLsh3-bW8Lw,57678
 agenticdome_sdk/outcomes.py,sha256=jadWDzQaZXrHNvpPme8lQY0jihYLCoM3s4CihAq0JRo,2507
 agenticdome_sdk/proof.py,sha256=ECKc14xSE0V1HHmcpZjfVz8-Q2H_fooah3BfdblFV8M,2878
 agenticdome_sdk/pydantic.py,sha256=WKb8X0Fgydfid-ep8E-M8Yslz2pWcCP6w7n_aBxt1rI,54961
 agenticdome_sdk/simulation.py,sha256=UCbZy3u9AzfxQCfY38SCV3CxGxhinV9EA4aHMPlK4mc,8426
 agenticdome_sdk/smolagents.py,sha256=wjMA1HVAQ-9wRNM38Jr9wlCpKMhF-9vxtTk6R-kwQhs,19094
-agenticdome_python_sdk-1.2.36.dist-info/METADATA,sha256=4gqvhEqeY-7JwahLP92qIULZ8G8-T5eaQsKUL0eqhUk,144718
-agenticdome_python_sdk-1.2.36.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-agenticdome_python_sdk-1.2.36.dist-info/entry_points.txt,sha256=cRfCphkr5gLrkGIzXJEtL50HdHLajoZLbZtcMLE8NoY,113
-agenticdome_python_sdk-1.2.36.dist-info/top_level.txt,sha256=LZbbjXco5mqDrGwlTJpIKI5Sp6R_njzHHjExxAs9c3s,16
-agenticdome_python_sdk-1.2.36.dist-info/RECORD,,
+agenticdome_python_sdk-1.2.38.dist-info/METADATA,sha256=L_2D7HRNQMh2-2Ha5mkZhDAmRTCqyucnM884rhMpur4,145282
+agenticdome_python_sdk-1.2.38.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+agenticdome_python_sdk-1.2.38.dist-info/entry_points.txt,sha256=cRfCphkr5gLrkGIzXJEtL50HdHLajoZLbZtcMLE8NoY,113
+agenticdome_python_sdk-1.2.38.dist-info/top_level.txt,sha256=LZbbjXco5mqDrGwlTJpIKI5Sp6R_njzHHjExxAs9c3s,16
+agenticdome_python_sdk-1.2.38.dist-info/RECORD,,

agenticdome_sdk/catalog_snapshot.json

@@ -1,13 +1,13 @@
 {
     "schema": "agenticdome.catalog-snapshot.v1",
     "catalog_schema": "agenticdome.hook-catalog.v1",
-    "verified_at": "2026-09-29",
-    "python_sdk_version": "1.2.36",
+    "verified_at": "2026-10-02",
+    "python_sdk_version": "1.2.38",
     "published_packages": {
         "agenticdome-python-sdk": {
             "registry": "pypi",
-            "version": "1.2.36",
-            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.36/"
+            "version": "1.2.38",
+            "url": "https://pypi.org/project/agenticdome-python-sdk/1.2.38/"
         },
         "agenticdome-sdk": {
             "registry": "npm",
@@ -21,8 +21,8 @@
         },
         "openclaw": {
             "registry": "npm",
-            "version": "2026.9.6",
-            "url": "https://www.npmjs.com/package/openclaw/v/2026.9.6"
+            "version": "2026.9.7",
+            "url": "https://www.npmjs.com/package/openclaw/v/2026.9.7"
         }
     }
 }

agenticdome_sdk/hook_catalog.py

@@ -39,7 +39,7 @@ CATALOG_VERIFIED_AT = str(_CATALOG_SNAPSHOT["verified_at"])
 
 
 _OPENCLAW_RUNTIME_MIN_VERSION = "2026.7.1-2"
-_OPENCLAW_RUNTIME_MAX_VERSION = "2026.9.6"
+_OPENCLAW_RUNTIME_MAX_VERSION = "2026.9.7"
 _OPENCLAW_RUNTIME_VERSION = _OPENCLAW_RUNTIME_MAX_VERSION
 _OPENCLAW_NODE_RANGE = ">=24.16.0 <25 || >=26.1.0"
 

agenticdome_sdk/onboarding_cli.py

@@ -7,6 +7,7 @@ paths and boundary locations, never source snippets or file contents.
 from __future__ import annotations
 
 import argparse
+import ast
 import difflib
 import hashlib
 import importlib.metadata
@@ -716,6 +717,82 @@ def _mcp_evidence_id(kind: str, relative: str, line: int) -> str:
     return f"{kind}-{digest}"
 
 
+def _agenticdome_policy_probe_spans(text: str) -> Dict[int, List[Tuple[int, int]]]:
+    """Mask only a confirmed AgenticDome policy call's MCP method literal.
+
+    A policy client can use the MCP JSON-RPC envelope without forwarding
+    customer MCP tools. Keep all other MCP calls in the same file visible.
+    Unparseable or ambiguous source receives no exception.
+    """
+    if "tools/call" not in text or "guardrail.validate" not in text:
+        return {}
+    try:
+        module = ast.parse(text)
+    except (SyntaxError, ValueError):
+        return {}
+
+    def field(mapping: ast.AST, key: str) -> Optional[ast.AST]:
+        if not isinstance(mapping, ast.Dict):
+            return None
+        return next(
+            (value for name, value in zip(mapping.keys, mapping.values)
+             if isinstance(name, ast.Constant) and name.value == key),
+            None,
+        )
+
+    def is_literal(node: Optional[ast.AST], value: str) -> bool:
+        return isinstance(node, ast.Constant) and node.value == value
+
+    # The legacy urllib client uses an environment-overridable URL whose
+    # checked-in default is AgenticDome's own /mcp policy endpoint.
+    policy_url_names: set[str] = set()
+    for node in ast.walk(module):
+        if not isinstance(node, (ast.Assign, ast.AnnAssign)):
+            continue
+        targets = node.targets if isinstance(node, ast.Assign) else [node.target]
+        value = node.value
+        if value is None or not any(
+            isinstance(part, ast.Constant) and isinstance(part.value, str)
+            and re.fullmatch(r"https?://(?:[a-z0-9-]+\.)*agenticdome\.io(?::\d+)?/mcp/?", part.value, re.I)
+            for part in ast.walk(value)
+        ):
+            continue
+        policy_url_names.update(target.id for target in targets if isinstance(target, ast.Name))
+
+    spans: Dict[int, List[Tuple[int, int]]] = {}
+    for function in ast.walk(module):
+        if not isinstance(function, (ast.FunctionDef, ast.AsyncFunctionDef)):
+            continue
+        calls = [node for node in ast.walk(function) if isinstance(node, ast.Call)]
+        for assignment in ast.walk(function):
+            if not isinstance(assignment, (ast.Assign, ast.AnnAssign)):
+                continue
+            targets = assignment.targets if isinstance(assignment, ast.Assign) else [assignment.target]
+            names = {target.id for target in targets if isinstance(target, ast.Name)}
+            method = field(assignment.value, "method") if assignment.value is not None else None
+            params = field(assignment.value, "params") if assignment.value is not None else None
+            if not names or not is_literal(method, "tools/call") or not is_literal(field(params, "name"), "guardrail.validate"):
+                continue
+
+            def sends_policy_payload(call: ast.Call) -> bool:
+                if not any(isinstance(part, ast.Name) and part.id in names for part in ast.walk(call)):
+                    return False
+                if (isinstance(call.func, ast.Attribute) and call.func.attr == "_post"
+                        and call.args and is_literal(call.args[0], "/mcp")):
+                    return True
+                return (
+                    isinstance(call.func, (ast.Name, ast.Attribute))
+                    and (call.func.id if isinstance(call.func, ast.Name) else call.func.attr) == "Request"
+                    and bool(call.args)
+                    and isinstance(call.args[0], ast.Name)
+                    and call.args[0].id in policy_url_names
+                )
+
+            if any(sends_policy_payload(call) for call in calls):
+                spans.setdefault(method.lineno, []).append((method.col_offset, method.end_col_offset))
+    return spans
+
+
 def _detect_mcp_protection(root: Path, paths: Sequence[Path], languages: Sequence[str]) -> Dict[str, Any]:
     """Collect source-free MCP topology and candidate protection evidence.
 
@@ -735,15 +812,21 @@ def _detect_mcp_protection(root: Path, paths: Sequence[Path], languages: Sequenc
     for path in paths:
         relative = _relative(path, root)
         text = _read_text(path)
-        # A client asking AgenticDome's own /mcp policy endpoint to run
-        # guardrail.validate is not a customer MCP forwarder. Do not suggest
-        # an MCP onboarding path from that protocol-shaped probe alone.
-        policy_probe_only = (
+        python_source = path.suffix.lower() in {".py", ".pyi"}
+        policy_probe_spans = _agenticdome_policy_probe_spans(text) if python_source else {}
+        # Preserve the existing JavaScript/TypeScript policy-client exception.
+        # Unlike Python, this scanner has no AST span for those languages, so
+        # exempt only a single policy call with no other MCP integration hints.
+        if not python_source and (
             bool(re.search(r"['\"]name['\"]\s*:\s*['\"]guardrail\.validate['\"]", text))
             and bool(re.search(r"_post\s*\(\s*['\"]/mcp['\"]", text))
-            and not re.search(r"\b(?:from\s+mcp|import\s+mcp|FastMCP|McpServer|ClientSession|StdioClientTransport|SSEClientTransport)\b|@modelcontextprotocol", text)
-        )
-        if policy_probe_only:
+            and len(re.findall(r"\btools/call\b", text)) == 1
+            and not re.search(
+                r"\b(?:FastMCP|McpServer|MCPClient|McpClient|ClientSession|StdioClientTransport|"
+                r"SSEClientTransport|call_tool|callTool|registerTool|tools/list|setRequestHandler)\b|@modelcontextprotocol",
+                text,
+            )
+        ):
             continue
         if not re.search(
             r"(?:\b(?:from\s+mcp|import\s+mcp|FastMCP|MCPClient|McpClient|McpServer|ClientSession|"
@@ -753,6 +836,14 @@ def _detect_mcp_protection(root: Path, paths: Sequence[Path], languages: Sequenc
         ):
             continue
         for line_number, line in enumerate(text.splitlines(), start=1):
+            # AST offsets are UTF-8 byte offsets. Mask the exact policy method
+            # literal, not the whole line or file: a real MCP call alongside
+            # the policy probe must still trigger specialist onboarding.
+            if line_number in policy_probe_spans:
+                encoded = bytearray(line.encode("utf-8"))
+                for start, end in policy_probe_spans[line_number]:
+                    encoded[start:end] = b" " * (end - start)
+                line = encoded.decode("utf-8")
             for role, patterns in MCP_ROLE_PATTERNS.items():
                 if any(pattern.search(line) for pattern in patterns):
                     roles.add(role)
@@ -2471,6 +2562,77 @@ def verify_project(root: Path, live: bool = False, run_tests: bool = False,
     return (0 if result["ready"] else 2), result
 
 
+def validate_ai_integration_report(root: Path, report_path: Path) -> Tuple[int, Dict[str, Any]]:
+    """Validate an AI-assisted edit with the existing semantic and test gates.
+
+    Markdown is a customer-authored inventory, never an authorization or proof
+    source. Only its digest is added to the source-free evidence exports.
+    """
+    if report_path.name != "AgenticDome_Integration.md" or report_path.is_symlink() or not report_path.is_file():
+        raise SystemExit("Select this workload's AgenticDome_Integration.md (regular file, exact name).")
+    if not report_path.resolve().is_relative_to(root) or report_path.stat().st_size > 524288:
+        raise SystemExit("The integration report must be inside this workload and no larger than 512 KB.")
+    try:
+        markdown = report_path.read_text(encoding="utf-8")
+    except (UnicodeError, OSError) as exc:
+        raise SystemExit("Read AgenticDome_Integration.md as UTF-8 and retry; the file could not be read safely.") from exc
+    if not markdown or "\x00" in markdown:
+        raise SystemExit("AgenticDome_Integration.md is empty or contains unsupported binary content.")
+    scope_match = re.search(r"^Workload scope:\s*([^\r\n]+)", markdown, re.IGNORECASE | re.MULTILINE)
+    if not scope_match:
+        raise SystemExit("Add a Workload scope line naming this deployable workload to AgenticDome_Integration.md.")
+    quoted = re.search(r"`([^`]+)`", scope_match.group(1))
+    scope = (quoted.group(1) if quoted else scope_match.group(1).split()[0]).strip().rstrip("/")
+    if Path(scope).name.casefold() != root.name.casefold() or ".." in Path(scope).parts:
+        raise SystemExit("The report's Workload scope does not match this workload root. Run from the correct deployable service.")
+    rows = re.findall(r"^\|\s*([1-8])\.([^\r\n]*)", markdown, re.MULTILINE)
+    if len(rows) != 8 or {number for number, _ in rows} != {str(index) for index in range(1, 9)}:
+        raise SystemExit("The integration report needs one valid row for each of the eight interception categories.")
+    for _, cells_text in rows:
+        cells = [cell.strip().replace("*", "").replace(",", "") for cell in cells_text.strip().strip("|").split("|")]
+        if len(cells) != 6 or any(not re.fullmatch(r"\d{1,5}", cell) for cell in cells[1:]):
+            raise SystemExit("Each interception row needs five non-negative counts after its category.")
+        found, existing, new, unprotected, live = (int(cell) for cell in cells[1:])
+        if any(value > 10000 for value in (found, existing, new, unprotected, live)) or existing + new + unprotected != found or live > existing + new:
+            raise SystemExit("The report counts do not reconcile. Correct the AI integration inventory before validation.")
+    digest = hashlib.sha256(markdown.encode("utf-8")).hexdigest()
+
+    inspection = _exportable_inspection(inspect_repository(root))
+    if inspection.get("scope", {}).get("complete") is not True:
+        raise SystemExit(_scope_gap_message(inspection))
+    if inspection.get("mcp_protection", {}).get("detected") is True or inspection.get("openclaw_protection", {}).get("ready") is True:
+        raise SystemExit("This workload needs the specialist MCP or OpenClaw onboarding path. Keep the AI report for review, then use that journey's verification commands.")
+    inspection["ai_integration_report_sha256"] = digest
+    inspection.pop("report_sha256", None)
+    inspection["report_sha256"] = hashlib.sha256(
+        json.dumps(inspection, sort_keys=True, separators=(",", ":")).encode("utf-8")
+    ).hexdigest()
+    plan = integration_plan(root)
+    plan["inspection_report_sha256"] = inspection["report_sha256"]
+    exit_code, verification = verify_project(root, run_tests=True, plan=plan)
+    verification["ai_integration_report_sha256"] = digest
+    verification.pop("report_sha256", None)
+    verification["report_sha256"] = hashlib.sha256(
+        json.dumps(verification, sort_keys=True, separators=(",", ":")).encode("utf-8")
+    ).hexdigest()
+
+    inspection_path = root / "agenticdome-inspection.json"
+    verification_path = root / ".agenticdome" / "verification.json"
+    for output in (inspection_path, verification_path):
+        if output.is_symlink() or not output.resolve().is_relative_to(root):
+            raise SystemExit("An evidence output path is a symlink or leaves this workload; remove that path and retry.")
+    _write_json(inspection_path, inspection)
+    _write_json(verification_path, verification)
+    return exit_code, {
+        "status": "validation_passed" if verification["ready"] else "validation_needs_attention",
+        "inspection": str(inspection_path.relative_to(root)),
+        "verification": str(verification_path.relative_to(root)),
+        "ai_integration_report_sha256": digest,
+        "ready": verification["ready"],
+        "next_action": "Import both JSON files in Onboarding; then run the assigned-runtime check and test a real action path. No customer action executes in these fixed decision cases.",
+    }
+
+
 def _print(value: Any, as_json: bool = False) -> None:
     if as_json or isinstance(value, (dict, list)):
         print(json.dumps(value, indent=2, sort_keys=True))
@@ -2575,6 +2737,11 @@ def build_parser() -> argparse.ArgumentParser:
     )
     verify_parser.add_argument("--output")
 
+    ai_validate_parser = subparsers.add_parser(
+        "validate-report", help="Validate a coding-assistant integration report against this workload; no source upload or code edit."
+    )
+    ai_validate_parser.add_argument("--report", default="AgenticDome_Integration.md")
+
     action_parser = subparsers.add_parser(
         "verify-action",
         help="Run one safe customer test and correlate the real SDK hook, live verdict and handler spy.",
@@ -2754,6 +2921,13 @@ def main(argv: Optional[Sequence[str]] = None) -> int:
         record_verification(root, result)
         _print(result)
         return exit_code
+    if args.command == "validate-report":
+        report_path = Path(args.report)
+        if not report_path.is_absolute():
+            report_path = root / report_path
+        exit_code, result = validate_ai_integration_report(root, report_path)
+        _print(result)
+        return exit_code
     if args.command == "verify-action":
         from .action_path_proof import run_action_path_test
         command = list(args.test_command)