Python: Allow checkpoint deserialization for orchestrations

[Ruiming Zhao (uuzzrm)]

Motivation & Context

Restricted checkpoint deserialization currently rejects pending orchestration requests from agent_framework_orchestrations.*. The allowlist only matches the dotted agent_framework. prefix, so workflows that pause for Handoff or Magentic user input cannot be restored through the restricted checkpoint path.

Description & Review Guide

• What are the major changes? Extend the framework module-prefix allowlist to cover the first-party agent_framework_orchestrations. package and add a focused regression test covering both HandoffAgentUserRequest and MagenticPlanReviewRequest.
• What is the impact of these changes? Pending Handoff and Magentic requests can round-trip through restricted checkpoint decoding. Custom types and the existing blocked-global checks remain unchanged.
• What do you want reviewers to focus on? Whether the explicit package-prefix boundary matches the supported first-party orchestration package and whether the regression test exercises the same restricted decode path used by checkpoint storage.

I used an AI coding assistant during the investigation and validation, then reviewed the resulting patch and test coverage manually.

Related Issue

Fixes #7618

Contribution Checklist

• The code builds clean without any errors or warnings
• All unit tests pass, and I have added new tests where possible
• The PR follows the Contribution Guidelines
• This PR is linked to an issue and there is no other open PR for this issue (see Related Issue above).
• This is not a breaking change. If it is a breaking change, add the breaking change label (or add [BREAKING] to the title prefix, before or after any language prefix) — a workflow keeps the label and title prefix in sync automatically.

[Copilot]

Pull request overview

Extends restricted checkpoint decoding to support first-party orchestration request types.

Changes:

• Allowlists the agent_framework_orchestrations. package prefix.
• Adds regression coverage for Handoff and Magentic requests.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
python/packages/core/agent_framework/_workflows/_checkpoint_encoding.py	Expands the restricted-deserialization allowlist.
python/packages/core/tests/workflow/test_checkpoint_orchestrations_deserialization.py	Tests orchestration request round-tripping.

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

[Evan Mattson (moonbox3)]

Please do handle this one. Thanks.

[Ruiming Zhao (uuzzrm)]

Handled - pushed 04dd9dd which updates the module docstring in _checkpoint_encoding.py and the FileCheckpointStorage description in _checkpoint.py to include agent_framework_orchestrations, so the documented allowlist matches what the code actually permits.

[Ruiming Zhao (uuzzrm)]

Done - the docs now mention agent_framework_orchestrations in both places. Thanks for the ping.