agent-tokenops 0.4.0__tar.gz → 0.4.1__tar.gz

{agent_tokenops-0.4.0/src/agent_tokenops.egg-info → agent_tokenops-0.4.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-tokenops
-Version: 0.4.0
+Version: 0.4.1
 Summary: TokenOps control plane and SDK for run-aware agent token governance
 Author: Susheem Koul, Tisha Chawla
 License-Expression: MIT
@@ -38,6 +38,7 @@ Requires-Dist: ruff>=0.8; extra == "dev"
 Requires-Dist: mypy>=1.13; extra == "dev"
 Requires-Dist: pre-commit>=4.0; extra == "dev"
 Requires-Dist: types-PyYAML>=6.0; extra == "dev"
+Requires-Dist: zizmor>=1.30; extra == "dev"
 Provides-Extra: contract
 Requires-Dist: agentplane-control-plane>=0.2.0; extra == "contract"
 Provides-Extra: examples
@@ -372,7 +373,6 @@ tests/                     # unit + e2e
   [LinkedIn](https://www.linkedin.com/posts/microsoft-developers_who-spent-all-the-tokens-tokenops-gives-activity-7499191980715982848-224b) and [X](https://x.com/msdev/status/2093425027500978292).
 - **[Who spent all the tokens? Real-time, run-scoped cost control for AI agents](https://commandline.microsoft.com/tokenops-real-time-run-scoped-cost-control-ai-agents/)**: *Command Line*, a Microsoft publication.
 - **[FinOps for AI Agents: Who Spent All the Tokens?](https://www.youtube.com/watch?v=GJX19pNhmSw)**: talk at the **AI Engineer World's Fair**, San Francisco.
-- **Selected to participate in the [GitHub Secure Open Source Fund](https://github.com/open-source/github-secure-open-source-fund)** (Session 5), GitHub Security Lab's open source security program.
 
 ## 🛟 Support
 

{agent_tokenops-0.4.0 → agent_tokenops-0.4.1}/README.md

@@ -323,7 +323,6 @@ tests/                     # unit + e2e
   [LinkedIn](https://www.linkedin.com/posts/microsoft-developers_who-spent-all-the-tokens-tokenops-gives-activity-7499191980715982848-224b) and [X](https://x.com/msdev/status/2093425027500978292).
 - **[Who spent all the tokens? Real-time, run-scoped cost control for AI agents](https://commandline.microsoft.com/tokenops-real-time-run-scoped-cost-control-ai-agents/)**: *Command Line*, a Microsoft publication.
 - **[FinOps for AI Agents: Who Spent All the Tokens?](https://www.youtube.com/watch?v=GJX19pNhmSw)**: talk at the **AI Engineer World's Fair**, San Francisco.
-- **Selected to participate in the [GitHub Secure Open Source Fund](https://github.com/open-source/github-secure-open-source-fund)** (Session 5), GitHub Security Lab's open source security program.
 
 ## 🛟 Support
 

{agent_tokenops-0.4.0 → agent_tokenops-0.4.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent-tokenops"
-version = "0.4.0"
+version = "0.4.1"
 description = "TokenOps control plane and SDK for run-aware agent token governance"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -55,6 +55,7 @@ dev = [
   "mypy>=1.13",
   "pre-commit>=4.0",
   "types-PyYAML>=6.0",
+  "zizmor>=1.30",
 ]
 # The verified-fake contract suite + e2e run against a real control plane in-process.
 # Not in `dev` because the 0.2.0 line is not on PyPI yet — the tests that need it

{agent_tokenops-0.4.0 → agent_tokenops-0.4.1/src/agent_tokenops.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-tokenops
-Version: 0.4.0
+Version: 0.4.1
 Summary: TokenOps control plane and SDK for run-aware agent token governance
 Author: Susheem Koul, Tisha Chawla
 License-Expression: MIT
@@ -38,6 +38,7 @@ Requires-Dist: ruff>=0.8; extra == "dev"
 Requires-Dist: mypy>=1.13; extra == "dev"
 Requires-Dist: pre-commit>=4.0; extra == "dev"
 Requires-Dist: types-PyYAML>=6.0; extra == "dev"
+Requires-Dist: zizmor>=1.30; extra == "dev"
 Provides-Extra: contract
 Requires-Dist: agentplane-control-plane>=0.2.0; extra == "contract"
 Provides-Extra: examples
@@ -372,7 +373,6 @@ tests/                     # unit + e2e
   [LinkedIn](https://www.linkedin.com/posts/microsoft-developers_who-spent-all-the-tokens-tokenops-gives-activity-7499191980715982848-224b) and [X](https://x.com/msdev/status/2093425027500978292).
 - **[Who spent all the tokens? Real-time, run-scoped cost control for AI agents](https://commandline.microsoft.com/tokenops-real-time-run-scoped-cost-control-ai-agents/)**: *Command Line*, a Microsoft publication.
 - **[FinOps for AI Agents: Who Spent All the Tokens?](https://www.youtube.com/watch?v=GJX19pNhmSw)**: talk at the **AI Engineer World's Fair**, San Francisco.
-- **Selected to participate in the [GitHub Secure Open Source Fund](https://github.com/open-source/github-secure-open-source-fund)** (Session 5), GitHub Security Lab's open source security program.
 
 ## 🛟 Support
 

{agent_tokenops-0.4.0 → agent_tokenops-0.4.1}/src/agent_tokenops.egg-info/SOURCES.txt

@@ -78,6 +78,7 @@ src/tokenops/ui/views/__init__.py
 src/tokenops/ui/views/admin.py
 src/tokenops/ui/views/dashboard.py
 tests/test_a2a_health.py
+tests/test_a2a_server_errors.py
 tests/test_actuators.py
 tests/test_apply.py
 tests/test_attribution.py

{agent_tokenops-0.4.0 → agent_tokenops-0.4.1}/src/agent_tokenops.egg-info/requires.txt

@@ -20,6 +20,7 @@ ruff>=0.8
 mypy>=1.13
 pre-commit>=4.0
 types-PyYAML>=6.0
+zizmor>=1.30
 
 [examples]
 ddgs>=9.0

{agent_tokenops-0.4.0 → agent_tokenops-0.4.1}/src/tokenops/__init__.py

@@ -4,7 +4,7 @@ from tokenops.env import load_env
 
 load_env()
 
-__version__ = "0.4.0"
+__version__ = "0.4.1"
 
 
 def init() -> None:

agent_tokenops-0.4.1/tests/test_a2a_server_errors.py

@@ -0,0 +1,22 @@
+"""The A2A example server must not echo exception text to callers."""
+
+from __future__ import annotations
+
+import logging
+
+from examples.a2a.server import create_a2a_app
+from fastapi.testclient import TestClient
+
+
+def test_handler_error_returns_generic_500_and_logs_detail(caplog):
+    async def handler(payload, headers):
+        raise RuntimeError("secret /srv/db.sqlite path")
+
+    app = create_a2a_app("t", "d", "http://x", [], handler)
+    with caplog.at_level(logging.ERROR):
+        res = TestClient(app).post("/v1/tasks", json={})
+
+    assert res.status_code == 500
+    assert res.json() == {"error": "internal error"}
+    assert "secret" not in res.text
+    assert "secret /srv/db.sqlite path" in caplog.text