a2a-protocol-core 0.2.0__tar.gz → 0.2.1__tar.gz

{a2a_protocol_core-0.2.0 → a2a_protocol_core-0.2.1}/CHANGELOG.md

@@ -3,7 +3,23 @@
 All notable changes to `a2a-protocol-core` are documented here. This project
 adheres to [Semantic Versioning](https://semver.org/).
 
-## [0.2.0] — Unreleased
+## [0.2.1] — 2026-07-20
+
+Conformance fix for the XRPL exact scheme's field placement. Required before
+the server drops its deprecated top-level mirrors (scheduled after 2026-10-01)
+— a 0.2.0 client will stop attaching `InvoiceID` at that point and be rejected
+by the server's mandatory invoice binding.
+
+### Fixed
+- `pay_alias_xrp` now reads `invoiceId` and `sourceTag` from the x402
+  requirement's `extra` block, where the XRPL exact scheme
+  (`scheme_exact_xrpl.md`) places them, falling back to the deprecated
+  top-level mirrors for not-yet-updated servers. Previously only the top-level
+  copies were read, so a spec-conformant server that stopped mirroring them
+  would silently produce payments without `InvoiceID` — which the invoice
+  binding (the anti-replay mechanism) mandatorily rejects.
+
+## [0.2.0] — 2026-07-11
 
 Adds the one-call x402 pay-path so an agent can pay a `pay:` alias from its own
 wallet — the "make it actually easy" client, still fully non-custodial.

{a2a_protocol_core-0.2.0 → a2a_protocol_core-0.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: a2a-protocol-core
-Version: 0.2.0
+Version: 0.2.1
 Summary: Open, deterministic protocol core for the DNS of Money A2A payment surface (FAS-1 pay: addressing, canonical hashing, payment-hook client).
 Project-URL: Homepage, https://dnsofmoney.com
 Project-URL: Specification, https://github.com/dnsofmoney/dns-of-money

{a2a_protocol_core-0.2.0 → a2a_protocol_core-0.2.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "a2a-protocol-core"
-version = "0.2.0"
+version = "0.2.1"
 description = "Open, deterministic protocol core for the DNS of Money A2A payment surface (FAS-1 pay: addressing, canonical hashing, payment-hook client)."
 readme = "README.md"
 requires-python = ">=3.10"

{a2a_protocol_core-0.2.0 → a2a_protocol_core-0.2.1}/src/a2a_protocol_core/__init__.py

@@ -46,7 +46,7 @@ from a2a_protocol_core.x402_pay import (
     summarize_attestation,
 )
 
-__version__ = "0.2.0"
+__version__ = "0.2.1"
 
 __all__ = [
     "__version__",

{a2a_protocol_core-0.2.0 → a2a_protocol_core-0.2.1}/src/a2a_protocol_core/x402_pay.py

@@ -239,14 +239,19 @@ def pay_alias_xrp(
     """
     http = session or requests.Session()
     req = fetch_requirement(base_url=base_url, alias=alias, amount_xrp=amount_xrp, session=http, timeout=timeout)
-    invoice = req.get("invoiceId")
+    # The XRPL exact scheme carries scheme fields in `extra`; the top-level copies
+    # are our own deprecated mirrors (removed after 2026-10-01). Prefer `extra`, fall
+    # back to top-level so this client still works against not-yet-updated servers.
+    extra = req.get("extra") or {}
+    invoice = extra.get("invoiceId") or req.get("invoiceId")
+    source_tag = extra.get("sourceTag") if extra.get("sourceTag") is not None else req.get("sourceTag")
     tx_hash, payer = _sign_and_submit_xrp(
         pay_to=req["payTo"],
         drops=req["maxAmountRequired"],
         seed=seed,
         rpc_url=xrpl_rpc_url,
         invoice_id=invoice_id_hash(invoice) if invoice else None,
-        source_tag=req.get("sourceTag"),
+        source_tag=source_tag,
     )
     body = _settle(
         base_url=base_url,