agentscore-commerce 2.7.0__tar.gz → 2.7.2__tar.gz

{agentscore_commerce-2.7.0 → agentscore_commerce-2.7.2}/.github/workflows/security.yml

@@ -24,7 +24,7 @@ jobs:
 
       - name: Install osv-scanner
         run: |
-          curl -fsSL https://github.com/google/osv-scanner/releases/download/v2.4.0/osv-scanner_linux_arm64 -o osv-scanner
+          curl -fsSL https://github.com/google/osv-scanner/releases/download/v2.5.1/osv-scanner_linux_arm64 -o osv-scanner
           chmod +x osv-scanner
 
       - name: Scan dependencies

{agentscore_commerce-2.7.0 → agentscore_commerce-2.7.2}/CLAUDE.md

@@ -89,7 +89,7 @@ Two identity types: wallet (`X-Wallet-Address`) and operator-token (`X-Operator-
 
 ### Operator handle: what durable merchant state keys on
 
-`get_operator_handle(request)` (per-adapter; Flask takes no argument and reads `g`; `ctx.operator_handle` inside `Checkout` hooks) returns the stable pairwise `oph_...` handle for the ACCOUNT behind the request's operator token.
+`get_operator_handle(request)` (per-adapter; Flask takes no argument and reads `g`; `ctx.operator_handle` inside `Checkout` hooks, readable from `compute_pricing` onward; the gate that populates it runs AFTER `pre_validate`, so a `pre_validate` read is always `None` and zero-settles whatever keys on it) returns the stable pairwise `oph_...` handle for the ACCOUNT behind the request's operator token.
 
 **Key state on this, never on the token.** An `opc_` lives 24h and rotates silently off a 90-day refresh, so anything keyed on the token instance is stranded daily, and revoking a leaked token would forfeit a prepaid balance. The handle derives from the account, so rotation, expiry and revocation are all free. It is pairwise per consuming merchant, so the same buyer presents an unrelated handle at every store and handles never correlate across them.
 

{agentscore_commerce-2.7.0 → agentscore_commerce-2.7.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: agentscore-commerce
-Version: 2.7.0
+Version: 2.7.2
 Summary: Agentic commerce SDK for Python: identity middleware (FastAPI, Flask, Django, AIOHTTP, Sanic, ASGI) + payment helpers + 402 builders + discovery + Stripe multichain. The full merchant-side toolkit for AgentScore-powered agentic commerce.
 Project-URL: Homepage, https://www.agentscore.com
 Project-URL: Repository, https://github.com/agentscore/python-commerce

{agentscore_commerce-2.7.0 → agentscore_commerce-2.7.2}/agentscore_commerce/challenge/how_to_pay.py

@@ -104,7 +104,7 @@ async def build_how_to_pay(
             "what_it_does": (
                 f"Hits this endpoint, receives this same 402, signs the MPP challenge on {network_name}, and "
                 "submits the credential back via Authorization: Payment. Either client (tempo request or "
-                "agentscore-pay pay --chain tempo) works — both run the full MPP handshake."
+                "agentscore-pay pay --chain tempo) works; both run the full MPP handshake."
             ),
         }
         if recommend == "both":
@@ -203,7 +203,7 @@ async def build_how_to_pay(
             )
         elif link_cli_blocked:
             stripe_block["note"] = (
-                "link-cli SPT path not available for this purchase — Stripe link-cli caps spend requests at $500.00 "
+                "link-cli SPT path not available for this purchase: Stripe link-cli caps spend requests at $500.00 "
                 f"($50000 cents); your total is ${total_num}. Use your own Stripe account with the SharedPaymentToken "
                 "API instead."
             )

{agentscore_commerce-2.7.0 → agentscore_commerce-2.7.2}/agentscore_commerce/checkout.py

@@ -1,6 +1,6 @@
 """High-level Checkout orchestrator; composes 402-emit + verify+settle.
 
-The Checkout primitive collapses the agent-commerce dance (emit 402 →
+The Checkout primitive collapses the agentic-commerce dance (emit 402 →
 verify+settle on retry → respond) into a single ``await
 checkout.handle(request)`` call. It services every merchant shape:
 
@@ -30,7 +30,7 @@ Domain-neutral by design: every per-request value is keyed by
 ``reference_id`` (a UUID minted on first contact). Goods merchants persist
 this as their order id; API merchants treat it as a per-call request id.
 
-Usage (goods seller, full agent-commerce flow)::
+Usage (goods seller, full agentic-commerce flow)::
 
     checkout = Checkout(
         rails={
@@ -349,6 +349,12 @@ class CheckoutContext:
     survives the token rotating, expiring or being revoked, whereas state keyed on the token
     instance is stranded every time one rotates. ``None`` when no gate is configured, on
     wallet or AIT paths, on anonymous discovery legs, or when the API has no handle salt.
+
+    ORDERING: populated by the gate, which runs AFTER ``pre_validate``, so it is readable
+    from ``compute_pricing`` onward (``mint_recipients``, ``compose_mppx``, ``on_settled``
+    included) and ALWAYS ``None`` inside ``pre_validate``. A ``pre_validate`` read passes
+    every keyless-dev test and zero-settles every production request whose flow keys on it
+    (a live store shipped exactly that).
     """
     capture_wallet: Callable[..., Any] | None = None
     """Capture the signer wallet under the operator credential the gate resolved
@@ -805,7 +811,7 @@ def _strip_payment_headers_from_raw(raw: Any) -> Any:
 
 
 class Checkout:
-    """High-level agent-commerce orchestrator.
+    """High-level agentic-commerce orchestrator.
 
     Composes :func:`build_accepted_methods`, :func:`build_how_to_pay`,
     :func:`respond_402`, :func:`verify_x402_request`, and
@@ -1110,7 +1116,7 @@ class Checkout:
         return None
 
     async def handle(self, request: CheckoutRequest) -> CheckoutResult:
-        """One-call agent-commerce flow.
+        """One-call agentic-commerce flow.
 
         * x402 ``X-Payment`` header present → verify, settle via ``x402_server``,
           run ``on_settled`` hook, return 200 with the hook's body (or

{agentscore_commerce-2.7.0 → agentscore_commerce-2.7.2}/agentscore_commerce/discovery/agentscore_content.py

@@ -101,7 +101,7 @@ def build_agentscore_onboarding_steps(
     compatible_fragment = ", ".join(hint for rail, hint in compatible_hints if rail in accepted_rails)
 
     compatible_clients_clause = (
-        f"the rails table also lists per-rail `compatible_clients` — {compatible_fragment}. "
+        f"the rails table also lists per-rail `compatible_clients`: {compatible_fragment}. "
         if compatible_fragment
         else ""
     )
@@ -114,7 +114,7 @@ def build_agentscore_onboarding_steps(
     )
     bootstrap_step = (
         "First-run only: bootstrap wallet + Passport. Run `agentscore-pay agent-guide --json` "
-        "for the canonical cold-start path — it walks `agentscore-pay init` "
+        "for the canonical cold-start path; it walks `agentscore-pay init` "
         "(creates keystore + per-chain wallet), `agentscore-pay passport login` "
         f"(one-time KYC{'; required for this merchant' if requires_kyc else ''}; "
         "the human completes a verify URL once and pay caches the operator_token), "
@@ -123,7 +123,7 @@ def build_agentscore_onboarding_steps(
     )
     stripe_fallback_step = (
         "If your only payment method is a Stripe / Link card (no crypto), install `@stripe/link-cli` "
-        "instead of agentscore-pay and use it on the SPT rail. Identity gating still applies — the "
+        "instead of agentscore-pay and use it on the SPT rail. Identity gating still applies: the "
         "merchant's 403 with `verify_url` lets you bootstrap a Passport even with no crypto wallet involved."
     )
     returning_user_step = (

{agentscore_commerce-2.7.0 → agentscore_commerce-2.7.2}/agentscore_commerce/discovery/llms_txt.py

@@ -28,7 +28,7 @@ def llms_txt_identity_section(
     aip_bullet = ""
     if aip:
         aip_bullet = (
-            "\n- **`Agent-Identity: <JWT>` + RFC 9421 signature** — present an Agent Identity Token (AIP) "
+            "\n- **`Agent-Identity: <JWT>` + RFC 9421 signature**: present an Agent Identity Token (AIP) "
             "from a trusted issuer (AgentScore is always trusted). Short-lived and bound to your key; sign "
             "the request (`Signature-Input` + `Signature` over `@method @authority @path agent-identity`, "
             "tag `agent-identity`) to prove possession. No long-lived token on the wire. Mint one with "
@@ -50,13 +50,13 @@ def llms_txt_identity_section(
             compliance_note = f"\n\nCompliance: {', '.join(parts)}."
     return (
         "## Identity\n\n"
-        "AgentScore identity is reusable across every AgentScore-gated merchant — one KYC, "
+        "AgentScore identity is reusable across every AgentScore-gated merchant: one KYC, "
         "no re-verification per site. Pick a header:\n\n"
-        "- **`X-Wallet-Address: 0x...` or base58** — works on signing rails (Tempo, x402, "
+        "- **`X-Wallet-Address: 0x...` or base58**: works on signing rails (Tempo, x402, "
         "Solana MPP). The wallet you claim must sign the payment.\n"
-        "- **`X-Operator-Token: opc_...`** — works on every rail, including Stripe SPT. "
+        "- **`X-Operator-Token: opc_...`**: works on every rail, including Stripe SPT. "
         f"Reusable across AgentScore merchants until expiry.{aip_bullet}\n"
-        "- **Neither** — you get a 403 with `verify_url`. Complete the session flow once and "
+        "- **Neither**: you get a 403 with `verify_url`. Complete the session flow once and "
         f"reuse the resulting `opc_...` everywhere.{compliance_note}"
     )
 
@@ -103,22 +103,22 @@ def _llms_txt_payment_section_compact(*, rails: list[str], app_url: str) -> str:
     rails_list = list(rails)
     if _has_rail_family(rails_list, "tempo-"):
         lines.append(
-            "- **Tempo USDC via MPP** — "
+            "- **Tempo USDC via MPP**: "
             f"`tempo request -X POST -H \"X-Operator-Token: opc_...\" --json '{{...}}' --max-spend N {app_url}`"
         )
     if _has_rail_family(rails_list, "x402-base-"):
         lines.append(
-            f"- **x402 USDC on Base** (EIP-3009) — `agentscore-pay pay POST {app_url} --chain base "
+            f"- **x402 USDC on Base** (EIP-3009): `agentscore-pay pay POST {app_url} --chain base "
             "-H \"X-Operator-Token: opc_...\" -d '{...}'`"
         )
     if _has_rail_family(rails_list, "mpp-solana-"):
         lines.append(
-            f"- **USDC on Solana** — `agentscore-pay pay POST {app_url} --chain solana "
+            f"- **USDC on Solana**: `agentscore-pay pay POST {app_url} --chain solana "
             "-H \"X-Operator-Token: opc_...\" -d '{...}'`"
         )
     if "stripe-spt" in rails_list:
         lines.append(
-            "- **Stripe Shared Payment Token** — agent mints SPT (own Stripe account scoped to networkId, "
+            "- **Stripe Shared Payment Token**: agent mints SPT (own Stripe account scoped to networkId, "
             "OR `link-cli spend-request create --credential-type shared_payment_token --network-id "
             "<profileId> ...`)"
         )

{agentscore_commerce-2.7.0 → agentscore_commerce-2.7.2}/agentscore_commerce/discovery/openapi.py

@@ -233,7 +233,7 @@ def agentscore_denial_schemas() -> dict[str, Any]:
                 "token_expired → deliver_verify_url_and_poll, invalid_credential → "
                 "switch_token_or_restart_session, wallet_signer_mismatch → resign_or_switch_to_operator_token, "
                 "wallet_auth_requires_wallet_signing → switch_to_operator_token, wallet_not_trusted → "
-                "contact_support — UNFIXABLE compliance only (sanctions/age/jurisdiction_restricted); "
+                "contact_support, for UNFIXABLE compliance only (sanctions/age/jurisdiction_restricted); "
                 "fixable reasons re-route to identity_verification_required, payment_required → contact_merchant)."
             ),
         },
@@ -255,7 +255,7 @@ def agentscore_denial_schemas() -> dict[str, Any]:
                     "description": (
                         "Present for missing_identity / identity_verification_required / token_expired "
                         "denials. Agent shares this with the user to complete KYC or claim a wallet. "
-                        "Not present on wallet_not_trusted (UNFIXABLE compliance — re-verification "
+                        "Not present on wallet_not_trusted (UNFIXABLE compliance, so re-verification "
                         "won't change the outcome)."
                     ),
                 },

{agentscore_commerce-2.7.0 → agentscore_commerce-2.7.2}/agentscore_commerce/discovery/skill_md.py

@@ -124,7 +124,7 @@ _RAIL_NOTES: dict[str, str] = {
         "USDC (SPL). Use `agentscore-pay pay --chain solana`; MPP credential goes in `Authorization: Payment`."
     ),
     "stripe": (
-        "Card via Link wallet. Use `@stripe/link-cli` — `agentscore-pay` emits the "
+        "Card via Link wallet. Use `@stripe/link-cli`; `agentscore-pay` emits the "
         "handoff hint when this rail is picked."
     ),
 }
@@ -141,7 +141,7 @@ def _validate(input: _SkillCtx) -> None:
         raise ValueError(f"build_skill_md: name must be 1-{_NAME_MAX} characters (got {len(n) if n else 0})")
     if not _NAME_RE.match(n):
         raise ValueError(
-            f'build_skill_md: name "{n}" is invalid — must be lowercase alphanumeric and hyphens, '
+            f'build_skill_md: name "{n}" is invalid: must be lowercase alphanumeric and hyphens, '
             "no leading/trailing/consecutive hyphens (agentskills.io spec)"
         )
     if not input.description:
@@ -232,7 +232,7 @@ def _payment_section(input: _SkillCtx) -> str:
             clients[r] = defaults.get(r, [])
     rows = ["| Rail | Notes | Compatible clients |", "|---|---|---|"]
     for r in input.accepted_rails:
-        client_list = ", ".join(clients.get(r, [])) or "—"
+        client_list = ", ".join(clients.get(r, [])) or "none"
         rows.append(f"| **{_RAIL_LABELS[r]}** | {_RAIL_NOTES[r]} | {client_list} |")
     intro = (
         "Each gated route returns a 402 with `WWW-Authenticate` + `PAYMENT-REQUIRED` "
@@ -276,12 +276,12 @@ def _identity_section(input: _SkillCtx) -> str:
             "\n\nThis merchant accepts AIP Agent Identity Tokens. If you hold an AIT from a trusted issuer "
             "(AgentScore is always trusted), present the JWT in an `Agent-Identity` header plus an RFC 9421 "
             "HTTP Message Signature (`Signature-Input` + `Signature` over `@method @authority @path agent-identity`, "
-            "tag `agent-identity`) signed with the token-bound cnf key — it satisfies identity in one round trip, "
+            "tag `agent-identity`) signed with the token-bound cnf key, satisfying identity in one round trip, "
             "no separate AgentScore credential needed. `agentscore-pay pay --identity aip` does this automatically."
         )
     denial_note = (
-        "Denial bodies carry an `agent_instructions` block describing the recovery action "
-        "— read the `action` field and follow it. See the identity-bootstrap skill for the "
+        "Denial bodies carry an `agent_instructions` block describing the recovery action. "
+        "Read the `action` field and follow it. See the identity-bootstrap skill for the "
         "canonical denial-code → action table."
     )
     return "\n".join(
@@ -375,7 +375,7 @@ def build_skill_md(
     support_links: list[SkillMdLink] | None = None,
     refresh_footer: bool = True,
 ) -> str:
-    """Render an agentskills.io-compatible ``skill.md`` for an agent-commerce merchant.
+    """Render an agentskills.io-compatible ``skill.md`` for an agentic-commerce merchant.
 
     Output is YAML frontmatter (``name`` / ``description`` / optional ``license`` /
     ``compatibility`` / ``allowed-tools`` / ``metadata``) followed by markdown sections

{agentscore_commerce-2.7.0 → agentscore_commerce-2.7.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentscore-commerce"
-version = "2.7.0"
+version = "2.7.2"
 description = "Agentic commerce SDK for Python: identity middleware (FastAPI, Flask, Django, AIOHTTP, Sanic, ASGI) + payment helpers + 402 builders + discovery + Stripe multichain. The full merchant-side toolkit for AgentScore-powered agentic commerce."
 readme = "README.md"
 license = "MIT"
@@ -108,7 +108,9 @@ filterwarnings = [
 
 [tool.uv]
 required-version = ">=0.11.0"
-# fastapi 0.136.3 is a malicious release (MAL-2026-4750): it injects an
-# undocumented `fastar` typosquat dependency. Pin away from it until a clean
-# release supersedes it on PyPI.
-constraint-dependencies = ["fastapi!=0.136.3"]
+# cdp-sdk, pytempo and x402 all require `web3` with no upper bound, so a bare
+# `uv lock --upgrade` walks onto whatever is newest, including a prerelease.
+# It did: web3 8.0.0b3 landed in this lock, and a published SDK must not ship a
+# beta to every consumer. Disallow prereleases outright rather than pinning one
+# package, since the same unbounded shape exists on several transitives.
+prerelease = "disallow"

{agentscore_commerce-2.7.0 → agentscore_commerce-2.7.2}/tests/test_skill_md.py

@@ -253,12 +253,16 @@ class TestPaymentSection:
         assert "rogue-cli" not in out
         assert "Stripe Shared Payment Token" not in out
 
-    def test_renders_em_dash_when_clients_empty(self) -> None:
+    def test_renders_none_when_clients_empty(self) -> None:
+        # "none" rather than an em-dash: this table is served on every store's
+        # skill.md, and the org rule bars em-dashes on external surfaces. Kept
+        # identical to the Node SDK, which renders the same table.
         cfg = _base()
         cfg["accepted_rails"] = ["x402_base"]
         cfg["compatible_clients"] = {"x402_base": []}
         out = build_skill_md(**cfg)
-        assert re.search("x402 on Base.+\\| —", out)
+        assert re.search(r"x402 on Base.+\| none", out)
+        assert "—" not in out
 
 
 class TestIdentitySection: