agent-commerce-client 0.1.0__py3-none-any.whl

agent_commerce_client/__init__.py

@@ -0,0 +1,19 @@
+"""Buyer core for Agent Commerce Gateway (ACG)."""
+
+from .client import (
+    AgentCommerceClient,
+    AgentCommerceError,
+    InvokeResult,
+    MemorySpendStore,
+    ResourceTool,
+    SpendStore,
+)
+
+__all__ = [
+    "AgentCommerceClient",
+    "AgentCommerceError",
+    "InvokeResult",
+    "MemorySpendStore",
+    "ResourceTool",
+    "SpendStore",
+]

agent_commerce_client/client.py

@@ -0,0 +1,433 @@
+"""Discover gateway resources and pay with x402 within spending limits"""
+
+from __future__ import annotations
+
+import asyncio
+import base64
+import json
+import logging
+import re
+import threading
+from collections.abc import Sequence
+from concurrent.futures import ThreadPoolExecutor
+from dataclasses import dataclass
+from datetime import datetime, timezone
+from decimal import Decimal
+from typing import Any, Protocol
+from urllib.parse import quote, urlsplit
+
+import httpx
+from x402 import x402Client
+from x402.http.clients.httpx import PaymentError, x402_httpx_transport
+from x402.http.utils import ResponseBodyTooLargeError
+from x402.mechanisms.evm.exact import ExactEvmScheme
+from x402.schemas import AbortResult, NoMatchingRequirementsError
+
+_LOG = logging.getLogger("agent_commerce_client")
+
+# Supported EVM networks and their USDC contracts; None allows any asset on local Anvil
+_USDC: dict[str, str | None] = {
+    "eip155:31337": None,  # local Anvil
+    "eip155:84532": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",  # Base Sepolia
+    "eip155:421614": "0x75faf114eafb1BDbe2F0316DF893fd58CE46AA4d",  # Arbitrum Sepolia
+    "eip155:8453": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",  # Base
+    "eip155:1": "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48",  # Ethereum
+    "eip155:137": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",  # Polygon
+    "eip155:42161": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",  # Arbitrum One
+    "eip155:43114": "0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",  # Avalanche C-Chain
+}
+_TESTNETS = frozenset({"eip155:31337", "eip155:84532", "eip155:421614"})
+_LIMIT = re.compile(r"[0-9]+(?:\.[0-9]{1,6})?")
+_ATOMIC = re.compile(r"[0-9]+")
+_GATEWAY_CODE = re.compile(r"[A-Z_]{1,64}")
+_REASON = re.compile(r"[a-z0-9_]{1,64}")
+_TX = re.compile(r"0x[0-9a-fA-F]{64}")
+_UNITS = 1_000_000  # USDC has 6 decimals
+_TIMEOUT = 60.0
+_APPROVALS = ("paid", "always", "never")
+_NO_OFFER = "The gateway offered no exact USDC payment on an allowed network"
+
+
+class AgentCommerceError(Exception):
+    """Client runtime failure with a short message for the model.
+
+    The client uses LIMIT_EXCEEDED, NETWORK_NOT_ALLOWED, PAYMENT_FAILED,
+    BACKEND_ERROR (with `status`) and GATEWAY_UNREACHABLE. Its error messages
+    omit secrets and start with the code so frameworks can show the message alone.
+    """
+
+    def __init__(self, code: str, message: str, status: int | None = None) -> None:
+        if not message.startswith(f"{code}: "):
+            message = f"{code}: {message}"
+        super().__init__(message)
+        self.code = code
+        self.message = message
+        self.status = status
+
+
+@dataclass(frozen=True)
+class ResourceTool:
+    """Gateway resource metadata for a framework tool"""
+
+    name: str
+    description: str
+    input_schema: dict[str, Any]
+    paid: bool
+    needs_approval: bool
+
+
+@dataclass(frozen=True)
+class InvokeResult:
+    """HTTP status, response body and decoded PAYMENT-RESPONSE, or None without a valid header"""
+
+    status: int
+    body: Any
+    payment: dict[str, Any] | None
+
+
+class SpendStore(Protocol):
+    """Daily spending counter in micro-USDC; `add` must be atomic"""
+
+    def add(self, day: str, amount: int) -> int:
+        """Add `amount` to the UTC day `day` (YYYY-MM-DD) and return the new total.
+
+        A negative amount rolls back a reservation.
+        """
+        ...
+
+
+class MemorySpendStore:
+    """Spend store held in process memory"""
+
+    def __init__(self) -> None:
+        self._totals: dict[str, int] = {}
+        self._lock = threading.Lock()
+
+    def add(self, day: str, amount: int) -> int:
+        with self._lock:
+            total = self._totals[day] = self._totals.get(day, 0) + amount
+            return total
+
+
+def _today() -> str:
+    return datetime.now(timezone.utc).strftime("%Y-%m-%d")
+
+
+def _limit(name: str, value: Any) -> int:
+    if not isinstance(value, str):
+        raise TypeError(f"{name} must be a decimal string such as '0.05'")
+    if not _LIMIT.fullmatch(value):
+        raise ValueError(f"{name} must be a non-negative decimal with at most 6 decimal places")
+    return int(Decimal(value) * _UNITS)
+
+
+def _usdc(units: int) -> str:
+    return format(Decimal(units) / _UNITS, "f")
+
+
+def _text(value: Any) -> str:
+    return value.strip() if isinstance(value, str) else ""
+
+
+def _has(raw: dict[str, Any], key: str, item: str) -> bool:
+    value = raw.get(key)
+    return isinstance(value, list) and item in value
+
+
+def _header(response: httpx.Response, name: str) -> dict[str, Any] | None:
+    # x402 headers carry base64-encoded JSON
+    try:
+        value = json.loads(base64.b64decode(response.headers[name], validate=True))
+    except (KeyError, ValueError):
+        return None
+    return value if isinstance(value, dict) else None
+
+
+def _gateway_code(response: httpx.Response) -> str | None:
+    try:
+        code = response.json().get("code")
+    except (ValueError, AttributeError):
+        return None
+    return code if isinstance(code, str) and _GATEWAY_CODE.fullmatch(code) else None
+
+
+def _run(method: Any, *args: Any) -> Any:
+    """Run an async method from sync code, including when an event loop is active"""
+    try:
+        asyncio.get_running_loop()
+    except RuntimeError:
+        return asyncio.run(method(*args))
+    with ThreadPoolExecutor(max_workers=1) as pool:
+        return pool.submit(asyncio.run, method(*args)).result()
+
+
+class _Payment:
+    """Track one invocation's x402 client, payment attempts and signing state"""
+
+    def __init__(self, owner: AgentCommerceClient) -> None:
+        self._owner = owner
+        self._attempts = 0
+        self.signed = False
+        self.error: AgentCommerceError | None = None
+        client = x402Client()
+        for network in owner._networks:
+            client.register(network, owner._scheme)
+        # Use the checks in `before` instead of x402's $1 cap and token allowlist
+        # so higher max_per_call values and the local Anvil token remain usable
+        client.set_spend_controls(False)
+        # Filter before selection so an unacceptable offer cannot displace a USDC offer
+        client.register_policy(lambda version, offers: [offer for offer in offers if owner._acceptable(offer)])
+        client.on_before_payment_creation(self.before)
+        client.on_after_payment_creation(self.after)
+        self.client = client
+
+    def _abort(self, code: str, message: str) -> AbortResult:
+        self.error = AgentCommerceError(code, message)
+        return AbortResult(reason=code)
+
+    def before(self, ctx: Any) -> AbortResult | None:
+        owner = self._owner
+        offer = ctx.selected_requirements
+        # Reject a second payment attempt within this invocation
+        self._attempts += 1
+        if self._attempts > 1:
+            return self._abort("PAYMENT_FAILED", "A second payment is not allowed for one invocation")
+        if not owner._acceptable(offer):
+            return self._abort("NETWORK_NOT_ALLOWED", _NO_OFFER)
+        raw = offer.get_amount()
+        if not _ATOMIC.fullmatch(raw):
+            raise ValueError("invalid payment amount")
+        amount = int(raw)
+        price = _usdc(amount)
+        if amount > owner._max_per_call:
+            return self._abort(
+                "LIMIT_EXCEEDED",
+                f"Price {price} USDC exceeds the per-call limit of {_usdc(owner._max_per_call)} USDC",
+            )
+        day = _today()
+        if owner._store.add(day, amount) > owner._max_per_day:
+            owner._store.add(day, -amount)
+            return self._abort("LIMIT_EXCEEDED", f"Price {price} USDC exceeds the remaining daily allowance")
+        return None
+
+    def after(self, ctx: Any) -> None:
+        # Keep the reservation after signing because funds may move
+        self.signed = True
+
+    def failure(self, cause: BaseException) -> AgentCommerceError:
+        if self.error is not None:
+            return self.error
+        if isinstance(cause, NoMatchingRequirementsError):
+            return AgentCommerceError("NETWORK_NOT_ALLOWED", _NO_OFFER)
+        if isinstance(cause, httpx.HTTPError):
+            return _unreachable(self.signed)
+        return AgentCommerceError("PAYMENT_FAILED", "Payment could not be completed")
+
+
+def _unreachable(signed: bool) -> AgentCommerceError:
+    suffix = "; a payment may have been sent" if signed else ""
+    return AgentCommerceError("GATEWAY_UNREACHABLE", f"Gateway could not be reached{suffix}")
+
+
+class AgentCommerceClient:
+    """Discover and invoke ACG resources, paying with x402 within spending limits.
+
+    `list_tools`/`alist_tools` and `invoke`/`ainvoke` provide sync and async forms
+    of the same operations. Invalid configuration raises ValueError or TypeError
+    during construction; client runtime failures raise AgentCommerceError.
+
+    Use `transport` to replace the HTTP transport in tests, for example with
+    `httpx.MockTransport`. Each call closes the transport. Proxy environment
+    variables are ignored.
+    """
+
+    def __init__(
+        self,
+        *,
+        gateway_url: str,
+        signer: Any,
+        networks: Sequence[str],
+        max_per_call: str,
+        max_per_day: str,
+        resources: Sequence[str] | None = None,
+        allow_mainnet: bool = False,
+        approval: str = "paid",
+        spend_store: SpendStore | None = None,
+        transport: httpx.AsyncBaseTransport | None = None,
+    ) -> None:
+        if not isinstance(gateway_url, str):
+            raise TypeError("gateway_url must be a string")
+        parts = urlsplit(gateway_url)
+        if parts.scheme not in ("http", "https") or not parts.netloc:
+            raise ValueError("gateway_url must be an http or https URL")
+        if signer is None or isinstance(signer, (str, bytes, bytearray)):
+            raise TypeError("signer must be a wallet object such as an eth_account account, not a raw private key")
+        if not (hasattr(signer, "address") and hasattr(signer, "sign_typed_data")):
+            raise TypeError("signer must expose `address` and `sign_typed_data`")
+        if isinstance(networks, str) or not isinstance(networks, Sequence):
+            raise TypeError("networks must be a list of CAIP-2 network ids")
+        if not networks:
+            raise ValueError("networks must not be empty")
+        if not isinstance(allow_mainnet, bool):
+            raise TypeError("allow_mainnet must be a bool")
+        for network in networks:
+            if network not in _USDC:
+                raise ValueError(f"networks may only hold: {', '.join(_USDC)}")
+            if network not in _TESTNETS and not allow_mainnet:
+                raise ValueError(f"{network} is a mainnet; pass allow_mainnet=True to allow it")
+        if resources is not None and (isinstance(resources, str) or not isinstance(resources, Sequence)):
+            raise TypeError("resources must be a list of resource ids")
+        if approval not in _APPROVALS:
+            raise ValueError("approval must be 'paid', 'always' or 'never'")
+        if spend_store is not None and not callable(getattr(spend_store, "add", None)):
+            raise TypeError("spend_store must provide add(day, amount)")
+
+        self._base = gateway_url.rstrip("/")
+        self._networks = frozenset(networks)
+        self._max_per_call = _limit("max_per_call", max_per_call)
+        self._max_per_day = _limit("max_per_day", max_per_day)
+        self._resources = None if resources is None else frozenset(resources)
+        self._approval = approval
+        self._store: SpendStore = spend_store if spend_store is not None else MemorySpendStore()
+        self._transport = transport
+        self._scheme = ExactEvmScheme(signer)
+
+    def _acceptable(self, offer: Any) -> bool:
+        # Accept exact EIP-3009 offers on configured networks, using their USDC asset
+        # Permit2 requires a prior on-chain approval; ACG returns 412 without it
+        if offer.scheme != "exact" or offer.network not in self._networks:
+            return False
+        if (offer.extra or {}).get("assetTransferMethod") not in (None, "eip3009"):
+            return False
+        usdc = _USDC[offer.network]
+        return usdc is None or offer.asset.lower() == usdc.lower()
+
+    # Discovery
+
+    def list_tools(self) -> list[ResourceTool]:
+        """Return eligible gateway resources as tool descriptions"""
+        return _run(self.alist_tools)
+
+    async def alist_tools(self) -> list[ResourceTool]:
+        """Async form of `list_tools`"""
+        response = await self._send("GET", "/api/resources")
+        if not 200 <= response.status_code < 300:
+            raise _backend_error(response)
+        try:
+            items = response.json()["resources"]
+        except (ValueError, KeyError, TypeError):
+            items = None
+        if not isinstance(items, list):
+            raise AgentCommerceError(
+                "BACKEND_ERROR", "Gateway returned an unexpected resource list", response.status_code
+            )
+        tools = []
+        for raw in items:
+            if not isinstance(raw, dict) or not isinstance(raw.get("id"), str):
+                _LOG.warning("Skipping a resource without a string id")
+                continue
+            reason = self._skip_reason(raw)
+            if reason:
+                _LOG.warning("Skipping resource %s: %s", json.dumps(raw["id"]), reason)
+                continue
+            tools.append(self._describe(raw))
+        return tools
+
+    def _skip_reason(self, raw: dict[str, Any]) -> str | None:
+        if not _has(raw, "exposedVia", "http"):
+            return "not exposed over http"
+        if _pricing(raw).get("type") != "free" and not _has(raw, "paymentMethods", "x402"):
+            return "not payable with x402"
+        if self._resources is not None and raw["id"] not in self._resources:
+            return "not in the resources allowlist"
+        return None
+
+    def _describe(self, raw: dict[str, Any]) -> ResourceTool:
+        pricing = _pricing(raw)
+        paid = pricing.get("type") != "free"
+        summary = _text(raw.get("description")) or _text(raw.get("name")) or raw["id"]
+        if not summary.endswith((".", "!", "?")):
+            summary += "."
+        if not paid:
+            price = "Free."
+        elif (
+            pricing.get("type") == "fixed"
+            and isinstance(pricing.get("amount"), str)
+            and isinstance(pricing.get("currency"), str)
+        ):
+            price = f"Costs {pricing['amount']} {pricing['currency']} per call."
+        else:
+            price = "Paid."
+        schema = raw.get("inputSchema")
+        return ResourceTool(
+            name=raw["id"],
+            description=f"{summary} {price}",
+            input_schema=schema if isinstance(schema, dict) else {"type": "object", "properties": {}},
+            paid=paid,
+            needs_approval=(paid if self._approval == "paid" else self._approval == "always"),
+        )
+
+    # Invocation
+
+    def invoke(self, resource: str, input: dict[str, Any] | None = None) -> InvokeResult:
+        """Invoke a resource and pay with x402 if the gateway requires payment"""
+        return _run(self.ainvoke, resource, input)
+
+    async def ainvoke(self, resource: str, input: dict[str, Any] | None = None) -> InvokeResult:
+        """Async form of `invoke`"""
+        payment = _Payment(self)
+        path = f"/api/resources/{quote(resource, safe='')}/invoke"
+        response = await self._send("POST", path, {} if input is None else input, payment)
+        status = response.status_code
+        settled = _header(response, "PAYMENT-RESPONSE") or {}
+        if status == 402 or settled.get("success") is False:
+            # The x402 transport handles the initial challenge; a final 402 rejects the payment.
+            # Failed settlement on another status (ACG uses 502) may still complete on chain.
+            required = _header(response, "PAYMENT-REQUIRED") or {}
+            reason = settled.get("errorReason") or required.get("error")
+            reason = reason if isinstance(reason, str) and _REASON.fullmatch(reason) else None
+            if status == 402:
+                code = _gateway_code(response)
+                detail = (f": {code}" if code else "") + (f" ({reason})" if reason else "")
+                raise AgentCommerceError("PAYMENT_FAILED", f"The gateway refused the payment{detail}")
+            transaction = settled.get("transaction")
+            tx = f"tx {transaction}" if isinstance(transaction, str) and _TX.fullmatch(transaction) else None
+            notes = ", ".join(note for note in (reason, tx) if note)
+            detail = f" ({notes})" if notes else ""
+            raise AgentCommerceError(
+                "PAYMENT_FAILED", f"Settlement not confirmed{detail}; the payment may still complete on chain"
+            )
+        if 200 <= status < 300:
+            body: Any = response.text
+            if "json" in response.headers.get("content-type", ""):
+                try:
+                    body = response.json()
+                except ValueError:
+                    pass
+            return InvokeResult(status, body, _header(response, "PAYMENT-RESPONSE"))
+        raise _backend_error(response)
+
+    async def _send(self, method: str, path: str, body: Any = None, payment: _Payment | None = None) -> httpx.Response:
+        # Disable connection retries in the default transport to avoid replaying payments
+        inner = self._transport or httpx.AsyncHTTPTransport(retries=0)
+        transport = inner if payment is None else x402_httpx_transport(payment.client, inner)
+        try:
+            async with httpx.AsyncClient(transport=transport, timeout=_TIMEOUT) as http:
+                return await http.request(method, self._base + path, json=body)
+        except (PaymentError, ResponseBodyTooLargeError, httpx.HTTPError) as exc:
+            # Unwrap PaymentError to classify transport and offer-selection failures
+            cause = exc.__cause__ if isinstance(exc, PaymentError) and exc.__cause__ else exc
+            raise (payment.failure(cause) if payment else _unreachable(False)) from None
+
+
+def _pricing(raw: dict[str, Any]) -> dict[str, Any]:
+    pricing = raw.get("pricing")
+    return pricing if isinstance(pricing, dict) else {}
+
+
+def _backend_error(response: httpx.Response) -> AgentCommerceError:
+    code = _gateway_code(response)
+    suffix = f" ({code})" if code else ""
+    return AgentCommerceError(
+        "BACKEND_ERROR", f"Gateway returned HTTP {response.status_code}{suffix}", response.status_code
+    )

agent_commerce_client-0.1.0.dist-info/METADATA

@@ -0,0 +1,168 @@
+Metadata-Version: 2.5
+Name: agent-commerce-client
+Version: 0.1.0
+Summary: Python buyer client for a self-hosted Agent Commerce Gateway: discovers resources and pays for them with x402 within set spending limits.
+Project-URL: Homepage, https://acg.devlab.group
+Project-URL: Repository, https://github.com/devlab-group/agent-commerce-clients
+Project-URL: Issues, https://github.com/devlab-group/agent-commerce-clients/issues
+License-Expression: Apache-2.0
+License-File: LICENSE
+Keywords: agents,api,payments,x402
+Requires-Python: >=3.10
+Requires-Dist: httpx>=0.28.1
+Requires-Dist: x402[evm,httpx]<3,>=2.28.0
+Description-Content-Type: text/markdown
+
+# agent-commerce-client
+
+Python buyer client for a self-hosted [Agent Commerce Gateway](https://acg.devlab.group) (ACG). It discovers gateway
+resources and pays for them with x402, within spending limits you set in code.
+
+The framework packages build on this client and add no payment logic of their own:
+[`langchain-agent-commerce`](../langchain-agent-commerce) and
+[`agent-framework-agent-commerce`](../agent-framework-agent-commerce) (Microsoft Agent Framework). The full behavior
+contract, shared with the TypeScript client, is in
+[docs/buyer-core.md](https://github.com/devlab-group/agent-commerce-clients/blob/main/docs/buyer-core.md).
+
+## Install
+
+```bash
+pip install agent-commerce-client
+```
+
+Python 3.10 or newer. Payments use the official [`x402`](https://pypi.org/project/x402/) package (`exact` scheme on EVM
+networks).
+
+## Quick start
+
+```python
+import os
+
+from agent_commerce_client import AgentCommerceClient, AgentCommerceError
+from eth_account import Account
+
+client = AgentCommerceClient(
+    gateway_url="https://merchant.example.com",
+    signer=Account.from_key(os.environ["BUYER_PRIVATE_KEY"]),
+    networks=["eip155:84532"],  # Base Sepolia
+    max_per_call="0.05",  # USDC
+    max_per_day="1.00",  # USDC per UTC day
+)
+
+for tool in client.list_tools():
+    print(tool.name, "-", tool.description)
+
+try:
+    result = client.invoke("report", {"topic": "x"})
+    print(result.status, result.body, result.payment)  # payment: network, transaction hash, payer
+except AgentCommerceError as error:
+    print(error.code, error.message, error.status)
+```
+
+Use `await client.alist_tools()` and `await client.ainvoke(...)` for async calls. The sync methods call the same
+implementation and can also run while an event loop is active.
+
+## Configuration
+
+| Argument        | Required | Meaning                                                                          |
+| --------------- | -------- | -------------------------------------------------------------------------------- |
+| `gateway_url`   | Yes      | Gateway base URL, `http` or `https`                                              |
+| `signer`        | Yes      | Wallet object, for example an `eth_account` account. A raw key string is refused |
+| `networks`      | Yes      | Allowed networks from the table below, for example `["eip155:84532"]`            |
+| `max_per_call`  | Yes      | Limit per invocation in USDC, a decimal string with up to 6 decimals             |
+| `max_per_day`   | Yes      | Limit per UTC day in USDC                                                        |
+| `resources`     | No       | Allowlist of resource ids; every eligible resource when omitted                  |
+| `allow_mainnet` | No       | Must be `True` before any mainnet network is accepted                            |
+| `approval`      | No       | `"paid"` (default), `"always"` or `"never"`: which tools carry `needs_approval`  |
+| `spend_store`   | No       | Daily spending counter; process memory by default                                |
+| `transport`     | No       | HTTP transport override for tests; closed after each call                        |
+
+Invalid configuration raises `ValueError` or `TypeError` during client construction. `resources=[]` excludes every
+resource; leave it as `None` to include all eligible resources.
+
+`networks` accepts the EVM networks below. Payments use each network's USDC, with any asset allowed on local Anvil:
+
+| Network           | Id              | Kind    | USDC                                         |
+| ----------------- | --------------- | ------- | -------------------------------------------- |
+| Local Anvil       | `eip155:31337`  | testnet | any asset (local development chain)          |
+| Base Sepolia      | `eip155:84532`  | testnet | `0x036CbD53842c5426634e7929541eC2318f3dCF7e` |
+| Arbitrum Sepolia  | `eip155:421614` | testnet | `0x75faf114eafb1BDbe2F0316DF893fd58CE46AA4d` |
+| Base              | `eip155:8453`   | mainnet | `0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913` |
+| Ethereum          | `eip155:1`      | mainnet | `0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48` |
+| Polygon           | `eip155:137`    | mainnet | `0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359` |
+| Arbitrum One      | `eip155:42161`  | mainnet | `0xaf88d065e77c8cC2239327C5EDb3A432268e5831` |
+| Avalanche C-Chain | `eip155:43114`  | mainnet | `0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E` |
+
+Mainnet networks require `allow_mainnet=True`. Unknown network ids raise `ValueError` even with that setting.
+
+## Spending limits
+
+The client enforces limits before signing a payment. When the gateway answers `402`, an offer is acceptable only with
+the `exact` scheme, a network in `networks`, that network's USDC and an EIP-3009 transfer (`extra.assetTransferMethod`
+absent or `eip3009`; `permit2` needs an on-chain approval first, and ACG answers 412 without it). Unacceptable offers
+are removed before the x402 client selects one, so an earlier non-USDC offer cannot displace an acceptable USDC offer.
+If none remains, the call fails with `NETWORK_NOT_ALLOWED`. The x402 before-payment hook then checks the selected offer
+again, and the amount (USDC base units, 6 decimals) must not exceed `max_per_call`; it is reserved in the spend store
+against `max_per_day`. A refusal raises `AgentCommerceError` before a signature exists. The model calling a tool cannot
+change any limit.
+
+Each invocation sends at most one request with `PAYMENT-SIGNATURE` and does not retry it. After signing, the reserved
+amount remains in the daily total even if the gateway rejects the payment, because the client cannot always tell whether
+funds moved.
+
+To share the daily counter between processes, pass a `spend_store` with an atomic `add` method:
+
+```python
+class SpendStore:
+    def add(self, day: str, amount: int) -> int:
+        """Add `amount` micro-USDC (negative to roll back) to `day` (UTC, YYYY-MM-DD); return the new total."""
+```
+
+## Resources and tools
+
+`list_tools()` keeps a resource when it is exposed over `http`, is free or accepts x402, and is in the `resources`
+allowlist (if given). Each resource excluded by these filters produces one warning on the `agent_commerce_client`
+logger. A tool is a `ResourceTool` with `name` (the resource id), `description` (ends with `Costs 0.01 USDC per call.`,
+`Free.` or `Paid.`), `input_schema`, `paid` and `needs_approval`. Framework wrappers use `needs_approval` to configure
+human approval.
+
+Tool names and descriptions come from the gateway and reach the model. Use `resources=[...]` to expose only resources
+you trust.
+
+## Errors
+
+`AgentCommerceError` has `code`, `message` and `status`. The message starts with the code, for example
+`LIMIT_EXCEEDED: Price 0.01 USDC exceeds the per-call limit of 0.005 USDC`, because frameworks often show a model only
+the message. Client-generated messages omit keys, headers and backend bodies. They may include a gateway error code such
+as `INPUT_INVALID`, an x402 reason such as `invalid_payload`, or a valid transaction hash for an unconfirmed settlement.
+
+| Code                  | When                                                                                                                                   |
+| --------------------- | -------------------------------------------------------------------------------------------------------------------------------------- |
+| `LIMIT_EXCEEDED`      | The price is above the per-call limit or the remaining daily allowance                                                                 |
+| `NETWORK_NOT_ALLOWED` | The gateway offered no `exact` USDC payment on an allowed network                                                                      |
+| `PAYMENT_FAILED`      | The gateway refused the signed payment, or could not confirm settlement; the message then says the payment may still complete on chain |
+| `BACKEND_ERROR`       | Any other non-2xx answer, redirects included; `status` holds the status                                                                |
+| `GATEWAY_UNREACHABLE` | The gateway could not be reached (60 second request timeout)                                                                           |
+
+## Not supported
+
+MPP, Solana and NEAR rails, the MCP transport, resources that need an AP2 mandate or other authorization, wallet key
+storage and proxy environment variables. Requests do not follow redirects.
+
+## x402 library defaults
+
+The Python `x402` package defaults to a $1 payment cap and an allowlist of known tokens, checked before policies and
+hooks. This client disables those controls with `set_spend_controls(False)` and applies its network, USDC and spending
+checks instead. That allows a `max_per_call` above 1 USDC and the custom token used on local Anvil.
+
+## Tests
+
+```bash
+uv run pytest agent-commerce-client   # from the python/ directory of the repository
+```
+
+The suite runs every scenario of the shared conformance suite in `conformance/` on both the sync and async paths.
+
+## License
+
+Apache-2.0

agent_commerce_client-0.1.0.dist-info/RECORD

@@ -0,0 +1,7 @@
+agent_commerce_client/__init__.py,sha256=dDlXkgI_lBgl2q84i3bNbI03zSpD-2zbAf32J_aU-PA,349
+agent_commerce_client/client.py,sha256=igp4RCYVUf-cF8nY35msuUcDP8qGytM_WBK-uJmvOYM,18435
+agent_commerce_client/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+agent_commerce_client-0.1.0.dist-info/METADATA,sha256=VUWdFR24-WhaLU9tzFVK-xGuJVMZAd5TxHk3SP1OJyQ,9654
+agent_commerce_client-0.1.0.dist-info/WHEEL,sha256=2iZrJkDIkeDh0k9SikKMqFuRP-ua6mb4Ir1AsER4BEw,87
+agent_commerce_client-0.1.0.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+agent_commerce_client-0.1.0.dist-info/RECORD,,

agent_commerce_client-0.1.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.33.0
+Root-Is-Purelib: true
+Tag: py3-none-any

agent_commerce_client-0.1.0.dist-info/licenses/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.