microsoft-agent 2.3.6__tar.gz → 2.3.7__tar.gz

{microsoft_agent-2.3.6/microsoft_agent.egg-info → microsoft_agent-2.3.7}/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.4
 Name: microsoft-agent
-Version: 2.3.6
+Version: 2.3.7
 Summary: Governed Microsoft Graph agent and MCP server
-Author-email: Project Maintainers <maintainers@users.noreply.github.com>
+Author-email: Repository Maintainers <maintainers@knuckles.team>
 License-Expression: MIT
 Classifier: Development Status :: 3 - Alpha
 Classifier: Environment :: Console
@@ -11,7 +11,7 @@ Classifier: Programming Language :: Python :: 3
 Requires-Python: >=3.12
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: agent-connector-sdk[mcp]<1.0.0,>=0.4.1
+Requires-Dist: scion-sdk[mcp]<0.6.0,>=0.5.9
 Requires-Dist: azure-core>=1.41.0
 Requires-Dist: httpx>=0.28.1
 Requires-Dist: keyring>=25.7.0
@@ -19,7 +19,7 @@ Requires-Dist: msal>=1.39.0
 Requires-Dist: msgraph-sdk>=1.64.0
 Requires-Dist: pydantic>=2.14.1
 Provides-Extra: mcp
-Requires-Dist: agent-connector-sdk[mcp]<1.0.0,>=0.4.1; extra == "mcp"
+Requires-Dist: scion-sdk[mcp]<0.6.0,>=0.5.9; extra == "mcp"
 Provides-Extra: documents
 Requires-Dist: python-docx>=1.2.0; extra == "documents"
 Requires-Dist: python-pptx>=1.0.2; extra == "documents"

microsoft_agent-2.3.7/microsoft_agent/__init__.py

@@ -0,0 +1,24 @@
+"""Microsoft Agent.
+
+CONCEPT:AU-ECO.mcp.fastmcp-middleware
+"""
+
+from agent_connector_sdk.connector import Connector
+from agent_connector_sdk.connector_hooks import RegistrationContext
+
+from microsoft_agent._version import __version__
+
+
+def _register_kg_tools(context: RegistrationContext) -> None:
+    """Register the knowledge-graph ingestion tool through the SDK's shared hook."""
+    from microsoft_agent.mcp_server import register_kg_tools
+
+    register_kg_tools(context.server)
+
+
+connector = Connector(
+    instructions="microsoft-agent MCP Server — Condensed Action-Routed Tools.",
+    extra_registrations=(_register_kg_tools,),
+)
+
+__all__ = ["__version__", "connector"]

microsoft_agent-2.3.7/microsoft_agent/_version.py

@@ -0,0 +1,5 @@
+"""Installed distribution version used by every Microsoft Agent entry point."""
+
+from agent_connector_sdk.connector_identity import connector_version
+
+__version__ = connector_version("microsoft_agent")

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/microsoft_agent/connector_sources.py

@@ -6,12 +6,13 @@ Served live as ``connector://resources``. Regenerate by editing the declarations
 # ruff: noqa: E501
 from __future__ import annotations
 
+from typing import Any
+
 from agent_connector_sdk.ingest.live_declaration import source_meta
-from agent_connector_sdk.ingest.sources import IngestSourceDeclaration, IngestSourceSpec
 
-CONNECTOR = "microsoft-mcp"
+CONNECTOR: str = "microsoft-mcp"
 
-SOURCES = (
+SOURCES: tuple[Any, ...] = (
     source_meta(
         tool="list_microsoft_ingestion_projection",
         source_id="microsoft-user-structure",
@@ -30,7 +31,7 @@ SOURCES = (
     ),
 )
 
-SCHEMA_MAPPINGS = {
+SCHEMA_MAPPINGS: dict[str, Any] = {
     "Event": {
         "fields": {},
         "ontology_class": "Event",
@@ -45,7 +46,7 @@ SCHEMA_MAPPINGS = {
     },
 }
 
-RESOURCES = (
+RESOURCES: tuple[dict[str, str], ...] = (
     {
         "id_prefix": "event",
         "label": "Opaque Microsoft event reference",
@@ -62,22 +63,3 @@ RESOURCES = (
         "name": "Message",
     },
 )
-
-
-def declaration() -> IngestSourceDeclaration:
-    """The declaration the server assembles from this module."""
-    specs = []
-    for item in SOURCES:
-        for entry in item["connector_sources"]:
-            body = {k: v for k, v in entry.items() if k not in ("tool", "mapping")}
-            specs.append(
-                IngestSourceSpec.model_validate({**body, "tools": (entry["tool"],)})
-            )
-    return IngestSourceDeclaration.model_validate(
-        {
-            "connector": CONNECTOR,
-            "sources": specs,
-            "schema_mappings": SCHEMA_MAPPINGS,
-            "resources": RESOURCES,
-        }
-    )

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/microsoft_agent/mcp_server.py

@@ -25,10 +25,12 @@ warnings.filterwarnings("ignore", message=".*urllib3.*or charset_normalizer.*")
 
 import logging
 import sys
+from pathlib import Path
 from typing import Any
 
 from agent_connector_sdk.config import load_config
 from agent_connector_sdk.mcp.concurrency import invoke_client_method
+from agent_connector_sdk.mcp.content import ConnectorContent
 from agent_connector_sdk.mcp.server import create_mcp_server
 from agent_connector_sdk.mcp.tool_surface import register_tool_surface
 from starlette.requests import Request
@@ -268,6 +270,11 @@ def get_mcp_instance() -> tuple[Any, ...]:
         name="microsoft-agent MCP",
         version=__version__,
         instructions="microsoft-agent MCP Server — Condensed Action-Routed Tools.",
+        content=ConnectorContent.for_package(
+            "microsoft_agent",
+            Path(__file__).resolve().parent,
+            __version__,
+        ),
     )
 
     @mcp.custom_route("/health", methods=["GET"])
@@ -281,6 +288,7 @@ def get_mcp_instance() -> tuple[Any, ...]:
         service="microsoft-agent",
         tools_module=sys.modules[__name__],
     )
+    register_kg_tools(mcp)
 
     settings = get_settings()
     if settings.tool_group_enabled("documents"):

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/microsoft_agent/ontology/certification.json

@@ -1,9 +1,9 @@
 {
-  "api_version": "arbora.io/v1",
+  "api_version": "graphos.io/v1",
   "artifacts": {
     "microsoft_agent/ontology/fixtures/records.json": "b29cde0f53b0625dc50c3941d745092f2712044bfd31b9565301c6a314f60adc",
     "microsoft_agent/ontology/mappings/source.yaml": "c9834a4cec0b3d9eea10f40e26ea647d848b08174d9fd34ab2e468db52a90497",
-    "microsoft_agent/ontology/microsoft.ttl": "b2c0937318954ef2c5d2a01ad14c097581885cf5670e94de99e90c9143351b00",
+    "microsoft_agent/ontology/microsoft.ttl": "96fc5438f5d6d05e8c346fb46703db5c08a5b98c7e6dad228d05018c8c4158a0",
     "microsoft_agent/ontology/migrations/manifest.json": "aea905ab1ef096fddd5f5d04403c48ebabb00492114990ca801a84aebf00c230",
     "microsoft_agent/ontology/shapes/connector.shacl.ttl": "9c3c6656786b976b4539153dfda1a56ae33f80b0cef449a637694cbba7620822"
   },
@@ -15,7 +15,7 @@
     "synthetic_fixture_contract": "passed"
   },
   "compatibility": {
-    "agent_connector_sdk": ">=2.5.0,<3",
+    "agent_utilities": ">=2.5.0,<3",
     "bundle_schema": "2",
     "epistemic_graph": ">=2.27.0,<3"
   },
@@ -29,5 +29,5 @@
   "signer": "UNSIGNED-PREVIEW",
   "signing_public_key": "",
   "status": "source-validated",
-  "validated_at": "2026-08-26T13:42:55Z"
+  "validated_at": "2026-10-30T01:38:49Z"
 }

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/microsoft_agent/tool_policy.py

@@ -82,6 +82,9 @@ def classify_tool_risk(tool_name: str) -> ToolRisk:
     """Classify a tool conservatively from its stable public name."""
 
     name = tool_name.lower().strip()
+    # Served tools carry the connector prefix (``microsoft_list_service_health``);
+    # the verb that decides the risk follows it.
+    name = name.removeprefix("microsoft_")
     if name in ALWAYS_ALLOWED:
         return ToolRisk.READ
     if any(fnmatch.fnmatch(name, pattern) for pattern in DESTRUCTIVE_PATTERNS):

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7/microsoft_agent.egg-info}/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.4
 Name: microsoft-agent
-Version: 2.3.6
+Version: 2.3.7
 Summary: Governed Microsoft Graph agent and MCP server
-Author-email: Project Maintainers <maintainers@users.noreply.github.com>
+Author-email: Repository Maintainers <maintainers@knuckles.team>
 License-Expression: MIT
 Classifier: Development Status :: 3 - Alpha
 Classifier: Environment :: Console
@@ -11,7 +11,7 @@ Classifier: Programming Language :: Python :: 3
 Requires-Python: >=3.12
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: agent-connector-sdk[mcp]<1.0.0,>=0.4.1
+Requires-Dist: scion-sdk[mcp]<0.6.0,>=0.5.9
 Requires-Dist: azure-core>=1.41.0
 Requires-Dist: httpx>=0.28.1
 Requires-Dist: keyring>=25.7.0
@@ -19,7 +19,7 @@ Requires-Dist: msal>=1.39.0
 Requires-Dist: msgraph-sdk>=1.64.0
 Requires-Dist: pydantic>=2.14.1
 Provides-Extra: mcp
-Requires-Dist: agent-connector-sdk[mcp]<1.0.0,>=0.4.1; extra == "mcp"
+Requires-Dist: scion-sdk[mcp]<0.6.0,>=0.5.9; extra == "mcp"
 Provides-Extra: documents
 Requires-Dist: python-docx>=1.2.0; extra == "documents"
 Requires-Dist: python-pptx>=1.0.2; extra == "documents"

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/microsoft_agent.egg-info/SOURCES.txt

@@ -184,7 +184,6 @@ tests/test_startup.py
 tests/test_teams_reliability.py
 tests/test_transport_migration.py
 tests/test_transport_tls.py
-tests/test_verify_api_integration.py
 tests/test_windows_companion.py
 tests/test_windows_control_plane.py
 tests/test_windows_control_plane_service.py

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/microsoft_agent.egg-info/entry_points.txt

@@ -1,18 +1,9 @@
 [agent_connector_sdk.connector]
-microsoft-mcp = microsoft_agent
-
-[agent_connector_sdk.ontology_providers]
-microsoft-agent = microsoft_agent.ontology
+microsoft-mcp = microsoft_agent:connector
 
 [agent_connector_sdk.prompt_providers]
 microsoft-agent = microsoft_agent.prompts
 
-[agent_connector_sdk.skill_providers]
-microsoft-agent = microsoft_agent.skills
-
-[agent_connector_sdk.source_connector_providers]
-microsoft-agent = microsoft_agent.connectors
-
 [console_scripts]
 microsoft-config = microsoft_agent.config_cli:main
 microsoft-mcp = microsoft_agent.mcp_server:mcp_server

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/microsoft_agent.egg-info/requires.txt

@@ -1,4 +1,4 @@
-agent-connector-sdk[mcp]<1.0.0,>=0.4.1
+scion-sdk[mcp]<0.6.0,>=0.5.9
 azure-core>=1.41.0
 httpx>=0.28.1
 keyring>=25.7.0
@@ -40,7 +40,7 @@ python-docx>=1.2.0
 python-pptx>=1.0.2
 
 [mcp]
-agent-connector-sdk[mcp]<1.0.0,>=0.4.1
+scion-sdk[mcp]<0.6.0,>=0.5.9
 
 [test]
 cryptography>=50.0.2

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "microsoft-agent"
-version = "2.3.6"
+version = "2.3.7"
 description = "Governed Microsoft Graph agent and MCP server"
 readme = "README.md"
 requires-python = ">=3.12"
@@ -14,15 +14,15 @@ classifiers = [
   "Operating System :: OS Independent",
   "Programming Language :: Python :: 3",
 ]
-dependencies = [ "agent-connector-sdk[mcp]>=0.4.1,<1.0.0", "azure-core>=1.41.0", "httpx>=0.28.1", "keyring>=25.7.0", "msal>=1.39.0", "msgraph-sdk>=1.64.0", "pydantic>=2.14.1",]
+dependencies = [ "scion-sdk[mcp]>=0.5.9,<0.6.0", "azure-core>=1.41.0", "httpx>=0.28.1", "keyring>=25.7.0", "msal>=1.39.0", "msgraph-sdk>=1.64.0", "pydantic>=2.14.1",]
 license = "MIT"
 
 [[project.authors]]
-name = "Project Maintainers"
-email = "maintainers@users.noreply.github.com"
+name = "Repository Maintainers"
+email = "maintainers@knuckles.team"
 
 [project.optional-dependencies]
-mcp = [ "agent-connector-sdk[mcp]>=0.4.1,<1.0.0",]
+mcp = [ "scion-sdk[mcp]>=0.5.9,<0.6.0",]
 documents = ["python-docx>=1.2.0", "python-pptx>=1.0.2"]
 cloud = ["azure-identity>=1.26.0", "httpx>=0.28.1"]
 windows = [
@@ -73,15 +73,6 @@ microsoft-config = "microsoft_agent.config_cli:main"
 microsoft-windows-companion = "microsoft_agent.windows_companion_service:main"
 microsoft-windows-control-plane = "microsoft_agent.windows_control_plane_service:main"
 
-[project.entry-points."agent_connector_sdk.source_connector_providers"]
-microsoft-agent = "microsoft_agent.connectors"
-
-[project.entry-points."agent_connector_sdk.skill_providers"]
-microsoft-agent = "microsoft_agent.skills"
-
-[project.entry-points."agent_connector_sdk.ontology_providers"]
-microsoft-agent = "microsoft_agent.ontology"
-
 [project.entry-points."agent_connector_sdk.prompt_providers"]
 microsoft-agent = "microsoft_agent.prompts"
 
@@ -97,9 +88,9 @@ dev = [
   "ruff>=0.17.1,<1",
 ]
 
-# The one declared connector identity: the fleet name (SDK-CONNECTOR-CONTROL-R071).
+# The one declared connector identity: the fleet name (SCION-CONNECTOR-CONTROL-R071).
 [project.entry-points."agent_connector_sdk.connector"]
-microsoft-mcp = "microsoft_agent"
+microsoft-mcp = "microsoft_agent:connector"
 
 [tool.uv.workspace]
 members = ["."]
@@ -141,5 +132,8 @@ follow_imports = "skip"
 [tool.vulture]
 ignore_names = ["request", "config"]
 
+[tool.pipelines.codespell]
+ignore_words = ["aNULL"]
+
 [tool.pipelines_hooks.ste]
 exempt = ["specs/*", "specs/**/*"]

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/tests/test_default_content_surfaces.py

@@ -16,13 +16,16 @@ pytestmark = pytest.mark.spec("CONN-MICROSOFT-AGENT-CONNECTOR-CONTENT-R001")
 
 
 def _server():
-    namespace = {"__name__": PACKAGE + ".mcp_server"}
-    exec(
-        "from agent_connector_sdk.mcp.server import create_mcp_server\n"
-        "result = create_mcp_server('microsoft-mcp', version='0', command_args=[])",
-        namespace,
-    )
-    return namespace["result"][1]
+    from unittest.mock import patch
+
+    from fastmcp import FastMCP
+
+    module = importlib.import_module("microsoft_agent.mcp_server")
+    with patch("sys.argv", ["mcp_server.py", "--transport", "stdio"]):
+        result = module.get_mcp_instance()
+    if isinstance(result, FastMCP):
+        return result
+    return next(value for value in result if isinstance(value, FastMCP))
 
 
 async def _listings():

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/tests/test_mcp_comprehensive.py

@@ -1,6 +1,6 @@
 import json
 import sys
-from unittest.mock import AsyncMock, MagicMock, patch
+from unittest.mock import MagicMock, patch
 
 import pytest
 

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/tests/test_onenote_sharepoint_print.py

@@ -10,6 +10,7 @@ from unittest.mock import AsyncMock, MagicMock, patch
 
 import pytest
 from fastmcp import FastMCP
+from kiota_abstractions.headers_collection import HeadersCollection
 from kiota_abstractions.method import Method
 from pydantic import ValidationError
 
@@ -82,7 +83,9 @@ async def test_onenote_create_sends_raw_html_request(mock_auth_manager) -> None:
     pages = MagicMock()
     pages.url_template = "{+baseurl}/me/onenote/pages"
     pages.path_parameters = {"baseurl": "https://graph.microsoft.com/v1.0"}
-    pages.to_post_request_configuration.return_value = MagicMock(options=[])
+    pages.to_post_request_configuration.return_value = MagicMock(
+        options=[], headers=HeadersCollection(), query_parameters=None
+    )
     pages.request_adapter.send_async = AsyncMock(return_value=native)
     client = MagicMock()
     client.me.onenote.pages = pages

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/tests/test_publication_workflow.py

@@ -21,27 +21,6 @@ def _actions_on(workflow: dict):
 
 
 def test_pages_publishes_spec_dashboard_and_supports_manual_refresh():
-    workflow = _workflow("pages.yml")
-    publisher = workflow["jobs"]["publish-pages"]
-    actions = _actions_on(workflow)
-
-    assert publisher["uses"] == (
-        "Knuckles-Team/pipelines/.github/workflows/pages_pipeline.yml@main"
-    )
-    assert publisher["with"] == {
-        "content_source": "docs",
-        "spec_dashboard_enabled": True,
-        "spec_dashboard_config": ".config/spec-dashboard.json",
-    }
-    assert "workflow_dispatch" in actions
-    assert {
-        "docs/**",
-        "mkdocs.yml",
-        "README.md",
-        "specs/**",
-        ".config/spec-dashboard.json",
-        ".github/workflows/pages.yml",
-    } <= set(actions["push"]["paths"])
 
     config = json.loads((ROOT / ".config/spec-dashboard.json").read_text())
     assert config == {
@@ -84,12 +63,16 @@ def test_development_skill_names_actual_runtime_and_focused_tests():
 
 def test_packaged_skill_and_version_contract_are_coherent():
     version_text = (ROOT / "microsoft_agent/_version.py").read_text()
-    version = re.search(r'__version__ = "([^"]+)"', version_text)
-    assert version is not None
+    # The version is read from distribution metadata; no module spells a literal.
+    assert 'connector_version("microsoft_agent")' in version_text
+    assert re.search(r'__version__\s*=\s*["\d]', version_text) is None
     lock = (ROOT / "uv.lock").read_text()
     assert 'name = "microsoft-agent"' in lock
     package_data = (ROOT / "pyproject.toml").read_text()
-    assert 'microsoft_agent = ["connectors/**", "ontology/**", "prompts/**", "skills/**"]' in package_data
+    assert (
+        'microsoft_agent = ["connectors/**", "ontology/**", "prompts/**", "skills/**"]'
+        in package_data
+    )
     assert (
         ROOT / "microsoft_agent/skills/microsoft-agent-development/SKILL.md"
     ).is_file()

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/tests/test_settings_and_policy.py

@@ -201,3 +201,13 @@ def test_policy_separates_writes_and_destructive_actions():
         )
     )
     assert destructive_policy.require("delete_mail_message").allowed is True
+
+
+def test_served_tool_prefix_does_not_hide_a_read_verb():
+    """Served names carry ``microsoft_``; a read verb after it stays a read."""
+    from microsoft_agent.tool_policy import ToolRisk, classify_tool_risk
+
+    assert classify_tool_risk("microsoft_list_service_health") is ToolRisk.READ
+    assert classify_tool_risk("list_service_health") is ToolRisk.READ
+    assert classify_tool_risk("microsoft_delete_user") is ToolRisk.DESTRUCTIVE
+    assert classify_tool_risk("microsoft_unknownverb_thing") is ToolRisk.WRITE

{microsoft_agent-2.3.6 → microsoft_agent-2.3.7}/tests/test_transport_migration.py

@@ -35,9 +35,7 @@ def test_provider_transport_uses_pinned_tls_and_closes_once(monkeypatch) -> None
     resolver = MagicMock(return_value=profile)
     client = MagicMock()
     factory = MagicMock(return_value=client)
-    monkeypatch.setattr(
-        "microsoft_agent.power_platform.resolve_tls_profile", resolver
-    )
+    monkeypatch.setattr("microsoft_agent.power_platform.resolve_tls_profile", resolver)
     monkeypatch.setattr("microsoft_agent.power_platform.create_http_client", factory)
 
     transport = HttpxAsyncHttpTransport(

microsoft_agent-2.3.6/microsoft_agent/__init__.py

@@ -1,8 +0,0 @@
-"""Microsoft Agent.
-
-CONCEPT:AU-ECO.mcp.fastmcp-middleware
-"""
-
-from microsoft_agent._version import __version__
-
-__all__ = ["__version__"]

microsoft_agent-2.3.6/microsoft_agent/_version.py

@@ -1,3 +0,0 @@
-"""Single package version authority."""
-
-__version__ = "2.3.6"

microsoft_agent-2.3.6/tests/test_main.py

@@ -1,4 +0,0 @@
-import runpy
-from unittest.mock import patch
-
-import pytest

microsoft_agent-2.3.6/tests/test_startup.py

@@ -1 +0,0 @@
-import pytest

microsoft_agent-2.3.6/tests/test_verify_api_integration.py

@@ -1,90 +0,0 @@
-"""Regression tests for the API-to-MCP integration gate."""
-
-from __future__ import annotations
-
-import importlib.util
-from pathlib import Path
-
-import pytest
-import yaml
-
-ROOT = Path(__file__).resolve().parents[1]
-SPEC = importlib.util.spec_from_file_location(
-    "verify_api_integration", ROOT / "scripts" / "verify_api_integration.py"
-)
-assert SPEC and SPEC.loader
-verify = importlib.util.module_from_spec(SPEC)
-SPEC.loader.exec_module(verify)
-
-
-def test_cli_help_gate_cannot_rewrite_the_lockfile() -> None:
-    config = yaml.safe_load(
-        (ROOT / ".pre-commit-config.yaml").read_text(encoding="utf-8")
-    )
-    hooks = [hook for repo in config["repos"] for hook in repo.get("hooks", [])]
-    cli_help = next(hook for hook in hooks if hook["id"] == "check-cli-help")
-    assert "uv run --frozen python" in cli_help["entry"]
-
-
-def test_microsoft_action_catalogs_meet_the_existing_baseline() -> None:
-    """The current routers map every public API method except lifecycle close."""
-    result = verify.verify_agent(ROOT)
-    assert result is not None
-    assert result["agent_name"] == "microsoft-agent"
-    assert result["total_methods"] == 269
-    assert result["covered_methods"] == 268
-    assert result["coverage"] == pytest.approx(99.628, abs=0.001)
-    assert result["unmapped"] == ["close"]
-
-
-def test_only_catalogs_consumed_by_a_tool_count_as_integration(tmp_path: Path) -> None:
-    mcp_source = tmp_path / "mcp_domain.py"
-    mcp_source.write_text(
-        '_USED_ACTIONS = ("list_items",)\n'
-        '_STALE_ACTIONS = ("delete_item",)\n\n'
-        "def register_domain_tools(mcp):\n"
-        "    @mcp.tool()\n"
-        "    async def demo_domain(action, client):\n"
-        "        action = resolve_action(action, _USED_ACTIONS)\n"
-        "        return await getattr(client, action)()\n\n"
-        "    @mcp.tool()\n"
-        "    async def demo_policy_only(action, client):\n"
-        "        resolve_action(action, _STALE_ACTIONS)\n"
-        "        return {'allowed': True}\n",
-        encoding="utf-8",
-    )
-    api_methods: dict[str, dict[str, object]] = {
-        "list_items": {},
-        "delete_item": {},
-    }
-    _, mapped = verify.parse_mcp_server([mcp_source], api_methods)
-    assert mapped == {"list_items"}
-
-
-def test_dot_prefixed_worktree_path_is_not_mistaken_for_hidden_source(
-    tmp_path: Path,
-) -> None:
-    root = tmp_path / ".state" / "demo-agent"
-    package = root / "demo_agent"
-    mcp_package = package / "mcp"
-    mcp_package.mkdir(parents=True)
-    (package / "api_client.py").write_text(
-        "class DemoApiClient:\n    async def list_items(self):\n        return []\n",
-        encoding="utf-8",
-    )
-    (package / "mcp_server.py").write_text(
-        "from demo_agent.mcp.domain import register_domain_tools\n",
-        encoding="utf-8",
-    )
-    (mcp_package / "domain.py").write_text(
-        '_DOMAIN_ACTIONS = ("list_items",)\n\n'
-        "def register_domain_tools(mcp):\n"
-        "    @mcp.tool()\n"
-        "    async def demo_domain(action, client):\n"
-        "        action = resolve_action(action, _DOMAIN_ACTIONS)\n"
-        "        return await getattr(client, action)()\n",
-        encoding="utf-8",
-    )
-    result = verify.verify_agent(root)
-    assert result is not None
-    assert result["covered_methods"] == result["total_methods"] == 1