matimo-core 0.1.2__tar.gz → 0.2.0__tar.gz

{matimo_core-0.1.2 → matimo_core-0.2.0}/.gitignore

@@ -58,7 +58,6 @@ temp/
 
 # Personal scratch notes / working docs — not part of the shipped repo
 .local-notes/
-typescript/examples/mcp/matimo-tools/.matimo-approvals.json
 typescript/examples/mcp/matimo-tools/fetch-weather/definition.yaml
 typescript/examples/mcp/matimo-tools/npm_downloads/definition.yaml
 typescript/examples/mcp/matimo-tools/skills/ecosystem-health/SKILL.md
@@ -68,3 +67,6 @@ typescript/packages/cli/.matimo/certs/server.crt
 typescript/packages/cli/.matimo/certs/server.key
 typescript/examples/mcp/.matimo/certs/server.crt
 typescript/examples/mcp/.matimo/certs/server.key
+
+# HITL approval manifests are per-machine state (HMAC-signed approvals); never commit one
+**/.matimo-approvals.json

matimo_core-0.2.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ROAIQ TECHNOLOGIES PRIVATE LIMITED
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

{matimo_core-0.1.2 → matimo_core-0.2.0}/PKG-INFO

@@ -1,13 +1,14 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: matimo-core
-Version: 0.1.2
+Version: 0.2.0
 Summary: Matimo core — framework-agnostic SDK: pre-built providers, skills layer, MCP, and a policy engine you control
 Project-URL: Homepage, https://matimo.dev
-Project-URL: Documentation, https://matimo.dev/docs
+Project-URL: Documentation, https://docs.matimo.dev/
 Project-URL: Repository, https://github.com/tallclub/matimo
 Project-URL: Issues, https://github.com/tallclub/matimo/issues
 License: MIT
-Keywords: agents,ai,crewai,langchain,matimo,mcp,tools
+License-File: LICENSE
+Keywords: agentic-ai,agents,agno,ai,ai-governance,crewai,langchain,matimo,mcp,mcp-server,policy-engine,tools
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
@@ -24,29 +25,33 @@ Requires-Dist: lxml-html-clean>=0.4.5
 Requires-Dist: markdownify>=1.2.3
 Requires-Dist: mistune>=3.0
 Requires-Dist: pydantic>=2.0
-Requires-Dist: pypdf>=4.0
+Requires-Dist: pypdf>=6.15.0
 Requires-Dist: python-docx>=1.1
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: readability-lxml>=0.8.4.1
 Requires-Dist: reportlab>=4.0
 Requires-Dist: simpleeval>=1.0
 Requires-Dist: typing-extensions>=4.9
+Provides-Extra: agno
+Requires-Dist: agno>=3.0; extra == 'agno'
 Provides-Extra: all
+Requires-Dist: agno>=3.0; extra == 'all'
 Requires-Dist: crewai>=0.80; extra == 'all'
 Requires-Dist: hvac>=2.0; extra == 'all'
 Requires-Dist: langchain-core>=0.3; extra == 'all'
-Requires-Dist: mcp>=1.0; extra == 'all'
+Requires-Dist: mcp>=1.28.1; extra == 'all'
 Requires-Dist: python-dotenv>=1.0; extra == 'all'
 Provides-Extra: aws
 Requires-Dist: boto3>=1.34; extra == 'aws'
 Provides-Extra: crewai
 Requires-Dist: crewai>=0.80; extra == 'crewai'
 Provides-Extra: dev
+Requires-Dist: agno>=3.0; extra == 'dev'
 Requires-Dist: boto3>=1.34; extra == 'dev'
 Requires-Dist: crewai>=0.80; extra == 'dev'
 Requires-Dist: hvac>=2.0; extra == 'dev'
 Requires-Dist: langchain-core>=0.3; extra == 'dev'
-Requires-Dist: mcp>=1.0; extra == 'dev'
+Requires-Dist: mcp>=1.28.1; extra == 'dev'
 Requires-Dist: mypy>=1.10; extra == 'dev'
 Requires-Dist: pytest-asyncio>=0.24; extra == 'dev'
 Requires-Dist: pytest-cov>=5.0; extra == 'dev'
@@ -60,22 +65,22 @@ Requires-Dist: python-dotenv>=1.0; extra == 'dotenv'
 Provides-Extra: langchain
 Requires-Dist: langchain-core>=0.3; extra == 'langchain'
 Provides-Extra: mcp
-Requires-Dist: mcp>=1.0; extra == 'mcp'
+Requires-Dist: mcp>=1.28.1; extra == 'mcp'
 Provides-Extra: vault
 Requires-Dist: hvac>=2.0; extra == 'vault'
 Description-Content-Type: text/markdown
 
 # matimo-core
 
-> Matimo core — framework-agnostic SDK with pre-built providers, skills layer, MCP, and a policy engine you control.
+> Matimo core - framework-agnostic SDK with pre-built providers, skills layer, MCP, and a policy engine you control.
 
 [![PyPI](https://img.shields.io/pypi/v/matimo-core)](https://pypi.org/project/matimo-core/)
 [![Python](https://img.shields.io/pypi/pyversions/matimo-core)](https://pypi.org/project/matimo-core/)
-[![Docs](https://img.shields.io/badge/docs-matimo.dev-blue)](https://matimo.dev/docs)
-[![Tests](https://img.shields.io/badge/tests-658%20passing-brightgreen)](https://github.com/tallclub/matimo)
+[![Docs](https://img.shields.io/badge/docs-matimo.dev-blue)](https://docs.matimo.dev)
+[![Tests](https://img.shields.io/badge/tests-1134%20passing-brightgreen)](https://github.com/tallclub/matimo)
 [![Coverage](https://img.shields.io/badge/coverage-97%25-brightgreen)](https://github.com/tallclub/matimo)
 
-Write tools once in YAML, use them everywhere — with LangChain, CrewAI, MCP, and more.
+Write tools once in YAML, use them everywhere - with LangChain, CrewAI, MCP, and more.
 
 > **Note:** Most users should install [`matimo`](https://pypi.org/project/matimo/) (the convenience wrapper) instead of `matimo-core` directly.
 
@@ -188,18 +193,18 @@ await server.start()
 ### `Matimo.init()`
 
 ```python
-from matimo import Matimo, InitOptions
+from matimo import InitOptions, JsonlFileSink, Matimo
 
 matimo = await Matimo.init(
     tool_paths=['./tools', './agent-tools'],  # or a single string
     auto_discover=False,       # discover installed matimo-* packages
-    include_core=True,         # include built-in meta-tools
     policy_file='./policy.yaml',
     untrusted_paths=['./agent-tools'],
     skill_paths=['./skills'],
     log_level='info',          # silent | error | warn | info | debug
     log_format='json',         # json | simple
     on_event=my_event_handler,
+    audit_sink=JsonlFileSink('./logs/matimo-audit.jsonl'),  # hash-chained audit log
     on_hitl=my_approval_callback,
 )
 ```
@@ -243,14 +248,23 @@ execution:
 ## Policy Engine
 
 ```python
-from matimo import Matimo, InitOptions
+from matimo import ApprovalRequest, JsonlFileSink, Matimo
 
-matimo = await Matimo.init('./tools', InitOptions(
+
+async def ask_operator(request: ApprovalRequest) -> bool:
+    return input(f"Approve {request.tool_name} {request.params}? (y/n) ") == "y"
+
+
+matimo = await Matimo.init(
+    './tools',
     policy_file='./policy.yaml',
-    on_hitl=lambda req: {'approved': True, 'reason': 'auto'},
-))
+    on_approval=ask_operator,                       # calls that need approval ask here
+    audit_sink=JsonlFileSink('./matimo-audit.jsonl'),  # hash-chained audit log
+)
 ```
 
+Calls that need approval: tools with `requires_approval: true`, HTTP `DELETE` and command tools (the 0.2.0 secure default), and calls whose `sql`/`command` argument contains a destructive keyword. With no `on_approval` they are refused.
+
 `policy.yaml`:
 ```yaml
 allowedDomains:
@@ -271,7 +285,7 @@ from matimo.mcp.secrets import create_resolver_chain
 resolver = create_resolver_chain([
     {'type': 'env'},
     {'type': 'dotenv', 'path': '.env'},
-    {'type': 'vault', 'address': 'http://vault:8200'},
+    {'type': 'vault', 'addr': 'http://vault:8200'},
     {'type': 'aws', 'region': 'us-east-1'},
 ])
 token = await resolver.resolve('SLACK_BOT_TOKEN')
@@ -287,7 +301,7 @@ from matimo.logging import get_global_matimo_logger
 
 matimo = await Matimo.init('./tools', log_level='info', log_format='json')
 logger = get_global_matimo_logger()
-logger.info('Tool executed', {'tool': 'slack_send_channel_message'})
+logger.info('Tool executed', tool='slack_send_channel_message')
 ```
 
 ---
@@ -303,30 +317,35 @@ Built-in tools that let agents manage other tools at runtime:
 | `matimo_approve_tool` | Promote draft → approved | Yes |
 | `matimo_reload_tools` | Hot-reload registry | Yes |
 | `matimo_list_user_tools` | List agent-created tools | No |
+| `matimo_get_tool` | Retrieve a tool's full definition | No |
 | `matimo_get_tool_status` | Check approval state | Yes |
+| `matimo_search_tools` | Search the loaded tool registry by keyword | No |
 | `matimo_create_skill` | Create a SKILL.md | Yes |
 | `matimo_list_skills` | List available skills | No |
 | `matimo_get_skill` | Read skill content | No |
 | `matimo_validate_skill` | Validate skill spec | No |
+| `matimo_search_skills` | Semantically rank skills by relevance (TF-IDF) | No |
+| `matimo_get_skill_sections` | Inventory a skill's sections and token costs | No |
+| `matimo_get_skill_content` | Load only specific sections of a skill | No |
 
 ---
 
 ## Documentation
 
-- [Getting Started](https://matimo.dev/docs/getting-started/QUICK_START)
-- [Full API Reference](https://matimo.dev/docs/api-reference/SDK)
-- [LangChain Integration](https://matimo.dev/docs/framework-integrations/LANGCHAIN)
-- [CrewAI Integration](https://matimo.dev/docs/framework-integrations/CREWAI)
-- [MCP Guide](https://matimo.dev/docs/MCP)
-- [Policy & Lifecycle](https://matimo.dev/docs/api-reference/POLICY_AND_LIFECYCLE)
-- [Meta-Tools Reference](https://matimo.dev/docs/api-reference/META_TOOLS)
+- [Getting Started](https://docs.matimo.dev/getting-started/QUICK_START)
+- [Full API Reference](https://docs.matimo.dev/api-reference/SDK)
+- [LangChain Integration](https://docs.matimo.dev/framework-integrations/LANGCHAIN)
+- [CrewAI Integration](https://docs.matimo.dev/framework-integrations/CREWAI)
+- [MCP Guide](https://docs.matimo.dev/MCP)
+- [Policy & Lifecycle](https://docs.matimo.dev/api-reference/POLICY_AND_LIFECYCLE)
+- [Meta-Tools Reference](https://docs.matimo.dev/api-reference/META_TOOLS)
 
 ---
 
 ## Links
 
 - **PyPI:** https://pypi.org/project/matimo-core/
-- **Docs:** https://matimo.dev/docs
+- **Docs:** https://docs.matimo.dev/
 - **GitHub:** https://github.com/tallclub/matimo
 - **Changelog:** https://github.com/tallclub/matimo/blob/main/docs/RELEASES.md
 

{matimo_core-0.1.2 → matimo_core-0.2.0}/README.md

@@ -1,14 +1,14 @@
 # matimo-core
 
-> Matimo core — framework-agnostic SDK with pre-built providers, skills layer, MCP, and a policy engine you control.
+> Matimo core - framework-agnostic SDK with pre-built providers, skills layer, MCP, and a policy engine you control.
 
 [![PyPI](https://img.shields.io/pypi/v/matimo-core)](https://pypi.org/project/matimo-core/)
 [![Python](https://img.shields.io/pypi/pyversions/matimo-core)](https://pypi.org/project/matimo-core/)
-[![Docs](https://img.shields.io/badge/docs-matimo.dev-blue)](https://matimo.dev/docs)
-[![Tests](https://img.shields.io/badge/tests-658%20passing-brightgreen)](https://github.com/tallclub/matimo)
+[![Docs](https://img.shields.io/badge/docs-matimo.dev-blue)](https://docs.matimo.dev)
+[![Tests](https://img.shields.io/badge/tests-1134%20passing-brightgreen)](https://github.com/tallclub/matimo)
 [![Coverage](https://img.shields.io/badge/coverage-97%25-brightgreen)](https://github.com/tallclub/matimo)
 
-Write tools once in YAML, use them everywhere — with LangChain, CrewAI, MCP, and more.
+Write tools once in YAML, use them everywhere - with LangChain, CrewAI, MCP, and more.
 
 > **Note:** Most users should install [`matimo`](https://pypi.org/project/matimo/) (the convenience wrapper) instead of `matimo-core` directly.
 
@@ -121,18 +121,18 @@ await server.start()
 ### `Matimo.init()`
 
 ```python
-from matimo import Matimo, InitOptions
+from matimo import InitOptions, JsonlFileSink, Matimo
 
 matimo = await Matimo.init(
     tool_paths=['./tools', './agent-tools'],  # or a single string
     auto_discover=False,       # discover installed matimo-* packages
-    include_core=True,         # include built-in meta-tools
     policy_file='./policy.yaml',
     untrusted_paths=['./agent-tools'],
     skill_paths=['./skills'],
     log_level='info',          # silent | error | warn | info | debug
     log_format='json',         # json | simple
     on_event=my_event_handler,
+    audit_sink=JsonlFileSink('./logs/matimo-audit.jsonl'),  # hash-chained audit log
     on_hitl=my_approval_callback,
 )
 ```
@@ -176,14 +176,23 @@ execution:
 ## Policy Engine
 
 ```python
-from matimo import Matimo, InitOptions
+from matimo import ApprovalRequest, JsonlFileSink, Matimo
 
-matimo = await Matimo.init('./tools', InitOptions(
+
+async def ask_operator(request: ApprovalRequest) -> bool:
+    return input(f"Approve {request.tool_name} {request.params}? (y/n) ") == "y"
+
+
+matimo = await Matimo.init(
+    './tools',
     policy_file='./policy.yaml',
-    on_hitl=lambda req: {'approved': True, 'reason': 'auto'},
-))
+    on_approval=ask_operator,                       # calls that need approval ask here
+    audit_sink=JsonlFileSink('./matimo-audit.jsonl'),  # hash-chained audit log
+)
 ```
 
+Calls that need approval: tools with `requires_approval: true`, HTTP `DELETE` and command tools (the 0.2.0 secure default), and calls whose `sql`/`command` argument contains a destructive keyword. With no `on_approval` they are refused.
+
 `policy.yaml`:
 ```yaml
 allowedDomains:
@@ -204,7 +213,7 @@ from matimo.mcp.secrets import create_resolver_chain
 resolver = create_resolver_chain([
     {'type': 'env'},
     {'type': 'dotenv', 'path': '.env'},
-    {'type': 'vault', 'address': 'http://vault:8200'},
+    {'type': 'vault', 'addr': 'http://vault:8200'},
     {'type': 'aws', 'region': 'us-east-1'},
 ])
 token = await resolver.resolve('SLACK_BOT_TOKEN')
@@ -220,7 +229,7 @@ from matimo.logging import get_global_matimo_logger
 
 matimo = await Matimo.init('./tools', log_level='info', log_format='json')
 logger = get_global_matimo_logger()
-logger.info('Tool executed', {'tool': 'slack_send_channel_message'})
+logger.info('Tool executed', tool='slack_send_channel_message')
 ```
 
 ---
@@ -236,30 +245,35 @@ Built-in tools that let agents manage other tools at runtime:
 | `matimo_approve_tool` | Promote draft → approved | Yes |
 | `matimo_reload_tools` | Hot-reload registry | Yes |
 | `matimo_list_user_tools` | List agent-created tools | No |
+| `matimo_get_tool` | Retrieve a tool's full definition | No |
 | `matimo_get_tool_status` | Check approval state | Yes |
+| `matimo_search_tools` | Search the loaded tool registry by keyword | No |
 | `matimo_create_skill` | Create a SKILL.md | Yes |
 | `matimo_list_skills` | List available skills | No |
 | `matimo_get_skill` | Read skill content | No |
 | `matimo_validate_skill` | Validate skill spec | No |
+| `matimo_search_skills` | Semantically rank skills by relevance (TF-IDF) | No |
+| `matimo_get_skill_sections` | Inventory a skill's sections and token costs | No |
+| `matimo_get_skill_content` | Load only specific sections of a skill | No |
 
 ---
 
 ## Documentation
 
-- [Getting Started](https://matimo.dev/docs/getting-started/QUICK_START)
-- [Full API Reference](https://matimo.dev/docs/api-reference/SDK)
-- [LangChain Integration](https://matimo.dev/docs/framework-integrations/LANGCHAIN)
-- [CrewAI Integration](https://matimo.dev/docs/framework-integrations/CREWAI)
-- [MCP Guide](https://matimo.dev/docs/MCP)
-- [Policy & Lifecycle](https://matimo.dev/docs/api-reference/POLICY_AND_LIFECYCLE)
-- [Meta-Tools Reference](https://matimo.dev/docs/api-reference/META_TOOLS)
+- [Getting Started](https://docs.matimo.dev/getting-started/QUICK_START)
+- [Full API Reference](https://docs.matimo.dev/api-reference/SDK)
+- [LangChain Integration](https://docs.matimo.dev/framework-integrations/LANGCHAIN)
+- [CrewAI Integration](https://docs.matimo.dev/framework-integrations/CREWAI)
+- [MCP Guide](https://docs.matimo.dev/MCP)
+- [Policy & Lifecycle](https://docs.matimo.dev/api-reference/POLICY_AND_LIFECYCLE)
+- [Meta-Tools Reference](https://docs.matimo.dev/api-reference/META_TOOLS)
 
 ---
 
 ## Links
 
 - **PyPI:** https://pypi.org/project/matimo-core/
-- **Docs:** https://matimo.dev/docs
+- **Docs:** https://docs.matimo.dev/
 - **GitHub:** https://github.com/tallclub/matimo
 - **Changelog:** https://github.com/tallclub/matimo/blob/main/docs/RELEASES.md
 

{matimo_core-0.1.2 → matimo_core-0.2.0}/pyproject.toml

@@ -4,12 +4,12 @@ build-backend = "hatchling.build"
 
 [project]
 name = "matimo-core"
-version = "0.1.2"
+version = "0.2.0"
 description = "Matimo core — framework-agnostic SDK: pre-built providers, skills layer, MCP, and a policy engine you control"
 readme = "README.md"
 license = { text = "MIT" }
 requires-python = ">=3.11"
-keywords = ["ai", "tools", "agents", "langchain", "crewai", "mcp", "matimo"]
+keywords = ["ai", "tools", "agents", "langchain", "crewai", "agno", "mcp", "matimo", "mcp-server", "agentic-ai", "ai-governance", "policy-engine"]
 classifiers = [
     "Development Status :: 4 - Beta",
     "Intended Audience :: Developers",
@@ -27,7 +27,7 @@ dependencies = [
     "pyyaml>=6.0",
     "anyio>=4.0",
     "typing-extensions>=4.9",
-    "pypdf>=4.0",
+    "pypdf>=6.15.0",
     "python-docx>=1.1",
     "mistune>=3.0",
     "reportlab>=4.0",
@@ -40,14 +40,16 @@ dependencies = [
 [project.optional-dependencies]
 langchain = ["langchain-core>=0.3"]
 crewai = ["crewai>=0.80"]
-mcp = ["mcp>=1.0"]
+agno = ["agno>=3.0"]
+mcp = ["mcp>=1.28.1"]
 vault = ["hvac>=2.0"]
 aws = ["boto3>=1.34"]
 dotenv = ["python-dotenv>=1.0"]
 all = [
     "langchain-core>=0.3",
     "crewai>=0.80",
-    "mcp>=1.0",
+    "agno>=3.0",
+    "mcp>=1.28.1",
     "hvac>=2.0",
     "python-dotenv>=1.0",
 ]
@@ -61,7 +63,8 @@ dev = [
     "types-pyyaml>=6.0",
     "langchain-core>=0.3",
     "crewai>=0.80",
-    "mcp>=1.0",
+    "agno>=3.0",
+    "mcp>=1.28.1",
     "hvac>=2.0",
     "boto3>=1.34",
     "python-dotenv>=1.0",
@@ -69,7 +72,7 @@ dev = [
 
 [project.urls]
 Homepage = "https://matimo.dev"
-Documentation = "https://matimo.dev/docs"
+Documentation = "https://docs.matimo.dev/"
 Repository = "https://github.com/tallclub/matimo"
 Issues = "https://github.com/tallclub/matimo/issues"
 
@@ -80,7 +83,7 @@ core = "matimo:get_core_tools_path"
 packages = ["src/matimo"]
 
 [tool.hatch.build.targets.sdist]
-include = ["src/", "README.md", "../../../LICENSE"]
+include = ["src/", "README.md", "LICENSE"]
 
 [tool.pytest.ini_options]
 testpaths = ["tests"]

{matimo_core-0.1.2 → matimo_core-0.2.0}/src/matimo/__init__.py

@@ -34,6 +34,7 @@ from matimo.approval.handler import (
     ApprovalCallback,
     ApprovalHandler,
     ApprovalRequest,
+    definition_requires_approval,
     get_global_approval_handler,
     set_global_approval_handler,
 )
@@ -122,7 +123,7 @@ from matimo.errors import (
 
 # Executors
 from matimo.executors.command_executor import CommandExecutor
-from matimo.executors.function_executor import FunctionExecutor
+from matimo.executors.function_executor import FunctionExecutor, FunctionToolContext
 from matimo.executors.http_executor import HttpExecutor
 
 # Main entry point + sync API
@@ -150,12 +151,26 @@ from matimo.mcp.tool_converter import convert_parameters_to_mcp_schema
 
 # Policy
 from matimo.policy.approval_manifest import ApprovalManifest, ApprovalRecord
+from matimo.policy.audit_sink import (
+    AUDIT_GENESIS_HASH,
+    AuditLogVerification,
+    AuditSink,
+    JsonlFileSink,
+    hash_audit_entry,
+    redact_secrets,
+    verify_audit_log,
+)
 from matimo.policy.content_validator import ContentViolation, validate_tool_content
 from matimo.policy.default_policy import DefaultPolicyEngine, PolicyEngine, get_tier_for_tool
 from matimo.policy.integrity_tracker import IntegrityAction, ToolIntegrityTracker
 from matimo.policy.policy_loader import load_policy_from_file
-from matimo.policy.risk_classifier import classify_risk
+from matimo.policy.risk_classifier import (
+    classify_execution_risk,
+    classify_risk,
+    meets_risk_threshold,
+)
 from matimo.policy.types import (
+    GovernanceMode,
     HITLCallback,
     HITLRequest,
     MatimoEvent,
@@ -170,7 +185,7 @@ from matimo.policy.types import (
 )
 from matimo.sync import MatimoSync
 
-__version__ = "0.1.0"
+__version__ = "0.2.0"
 
 
 def get_core_tools_path() -> str:
@@ -231,6 +246,36 @@ def convert_tools_to_crewai(
     return _inner(tools, matimo_instance, credentials)
 
 
+def convert_tools_to_agno(
+    tools: list[Any],
+    matimo_instance: Matimo,
+    credentials: dict[str, str] | None = None,
+    **kwargs: Any,  # noqa: ANN401
+) -> list[Any]:
+    """Convert Matimo tools to Agno Function list. Requires agno.
+
+    Extra keyword arguments (context, confirm_risk_levels) are forwarded to
+    matimo.integrations.agno.convert_tools_to_agno.
+    """
+    from matimo.integrations.agno import convert_tools_to_agno as _inner
+    return _inner(tools, matimo_instance, credentials, **kwargs)
+
+
+def MatimoTools(  # noqa: N802
+    matimo_instance: Matimo,
+    tools: list[Any] | None = None,
+    **kwargs: Any,  # noqa: ANN401
+) -> Any:  # noqa: ANN401
+    """Build an Agno Toolkit exposing governed Matimo tools. Requires agno.
+
+    Named in CapWords to match Agno's <Name>Tools toolkit convention. Returns Any
+    because Toolkit comes from an optional dependency (agno). Extra keyword
+    arguments are forwarded to matimo.integrations.agno.MatimoTools.
+    """
+    from matimo.integrations.agno import MatimoTools as _inner
+    return _inner(matimo_instance, tools, **kwargs)
+
+
 # ---------------------------------------------------------------------------
 # Decorators
 # ---------------------------------------------------------------------------
@@ -272,7 +317,7 @@ __all__ = [
     "ParsedSkillContent", "SemanticSearchResult",
     "TfIdfEmbeddingProvider", "EmbeddingProvider", "cosine_similarity",
     # Executors
-    "HttpExecutor", "CommandExecutor", "FunctionExecutor",
+    "HttpExecutor", "CommandExecutor", "FunctionExecutor", "FunctionToolContext",
     # Auth
     "inject_auth_parameters", "extract_parameter_placeholders",
     "OAuth2Handler", "OAuth2ProviderLoader",
@@ -280,17 +325,20 @@ __all__ = [
     # Approval
     "ApprovalHandler", "ApprovalRequest", "ApprovalCallback",
     "get_global_approval_handler", "set_global_approval_handler",
+    "definition_requires_approval",
     # Encodings
     "apply_parameter_encodings",
     # Policy
     "PolicyEngine", "DefaultPolicyEngine", "PolicyConfig",
     "PolicyDecision", "PolicyAllowed", "PolicyDenied", "PolicyPendingApproval",
     "RiskLevel", "PolicyTier",
-    "MatimoEvent", "MatimoEventHandler", "HITLCallback", "HITLRequest",
+    "MatimoEvent", "MatimoEventHandler", "GovernanceMode", "HITLCallback", "HITLRequest",
     "ContentViolation", "validate_tool_content",
-    "classify_risk", "get_tier_for_tool",
+    "classify_risk", "classify_execution_risk", "meets_risk_threshold", "get_tier_for_tool",
     "ToolIntegrityTracker", "IntegrityAction",
     "ApprovalManifest", "ApprovalRecord",
+    "AuditSink", "JsonlFileSink", "AuditLogVerification", "verify_audit_log",
+    "redact_secrets", "hash_audit_entry", "AUDIT_GENESIS_HASH",
     "load_policy_from_file",
     # MCP
     "MCPServer", "MCPServerOptions", "create_mcp_server",
@@ -303,6 +351,8 @@ __all__ = [
     "get_skills_metadata",
     "build_relevant_skill_prompt",
     "convert_tools_to_crewai",
+    "convert_tools_to_agno",
+    "MatimoTools",
     # Decorators
     "tool", "set_global_matimo_instance", "get_global_matimo_instance",
     # Logging