agentscore-commerce 2.7.1__tar.gz → 2.7.2__tar.gz

{agentscore_commerce-2.7.1 → agentscore_commerce-2.7.2}/.github/workflows/security.yml

@@ -24,7 +24,7 @@ jobs:
 
       - name: Install osv-scanner
         run: |
-          curl -fsSL https://github.com/google/osv-scanner/releases/download/v2.4.0/osv-scanner_linux_arm64 -o osv-scanner
+          curl -fsSL https://github.com/google/osv-scanner/releases/download/v2.5.1/osv-scanner_linux_arm64 -o osv-scanner
           chmod +x osv-scanner
 
       - name: Scan dependencies

{agentscore_commerce-2.7.1 → agentscore_commerce-2.7.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: agentscore-commerce
-Version: 2.7.1
+Version: 2.7.2
 Summary: Agentic commerce SDK for Python: identity middleware (FastAPI, Flask, Django, AIOHTTP, Sanic, ASGI) + payment helpers + 402 builders + discovery + Stripe multichain. The full merchant-side toolkit for AgentScore-powered agentic commerce.
 Project-URL: Homepage, https://www.agentscore.com
 Project-URL: Repository, https://github.com/agentscore/python-commerce

{agentscore_commerce-2.7.1 → agentscore_commerce-2.7.2}/agentscore_commerce/challenge/how_to_pay.py

@@ -104,7 +104,7 @@ async def build_how_to_pay(
             "what_it_does": (
                 f"Hits this endpoint, receives this same 402, signs the MPP challenge on {network_name}, and "
                 "submits the credential back via Authorization: Payment. Either client (tempo request or "
-                "agentscore-pay pay --chain tempo) works — both run the full MPP handshake."
+                "agentscore-pay pay --chain tempo) works; both run the full MPP handshake."
             ),
         }
         if recommend == "both":
@@ -203,7 +203,7 @@ async def build_how_to_pay(
             )
         elif link_cli_blocked:
             stripe_block["note"] = (
-                "link-cli SPT path not available for this purchase — Stripe link-cli caps spend requests at $500.00 "
+                "link-cli SPT path not available for this purchase: Stripe link-cli caps spend requests at $500.00 "
                 f"($50000 cents); your total is ${total_num}. Use your own Stripe account with the SharedPaymentToken "
                 "API instead."
             )

{agentscore_commerce-2.7.1 → agentscore_commerce-2.7.2}/agentscore_commerce/checkout.py

@@ -1,6 +1,6 @@
 """High-level Checkout orchestrator; composes 402-emit + verify+settle.
 
-The Checkout primitive collapses the agent-commerce dance (emit 402 →
+The Checkout primitive collapses the agentic-commerce dance (emit 402 →
 verify+settle on retry → respond) into a single ``await
 checkout.handle(request)`` call. It services every merchant shape:
 
@@ -30,7 +30,7 @@ Domain-neutral by design: every per-request value is keyed by
 ``reference_id`` (a UUID minted on first contact). Goods merchants persist
 this as their order id; API merchants treat it as a per-call request id.
 
-Usage (goods seller, full agent-commerce flow)::
+Usage (goods seller, full agentic-commerce flow)::
 
     checkout = Checkout(
         rails={
@@ -811,7 +811,7 @@ def _strip_payment_headers_from_raw(raw: Any) -> Any:
 
 
 class Checkout:
-    """High-level agent-commerce orchestrator.
+    """High-level agentic-commerce orchestrator.
 
     Composes :func:`build_accepted_methods`, :func:`build_how_to_pay`,
     :func:`respond_402`, :func:`verify_x402_request`, and
@@ -1116,7 +1116,7 @@ class Checkout:
         return None
 
     async def handle(self, request: CheckoutRequest) -> CheckoutResult:
-        """One-call agent-commerce flow.
+        """One-call agentic-commerce flow.
 
         * x402 ``X-Payment`` header present → verify, settle via ``x402_server``,
           run ``on_settled`` hook, return 200 with the hook's body (or

{agentscore_commerce-2.7.1 → agentscore_commerce-2.7.2}/agentscore_commerce/discovery/agentscore_content.py

@@ -101,7 +101,7 @@ def build_agentscore_onboarding_steps(
     compatible_fragment = ", ".join(hint for rail, hint in compatible_hints if rail in accepted_rails)
 
     compatible_clients_clause = (
-        f"the rails table also lists per-rail `compatible_clients` — {compatible_fragment}. "
+        f"the rails table also lists per-rail `compatible_clients`: {compatible_fragment}. "
         if compatible_fragment
         else ""
     )
@@ -114,7 +114,7 @@ def build_agentscore_onboarding_steps(
     )
     bootstrap_step = (
         "First-run only: bootstrap wallet + Passport. Run `agentscore-pay agent-guide --json` "
-        "for the canonical cold-start path — it walks `agentscore-pay init` "
+        "for the canonical cold-start path; it walks `agentscore-pay init` "
         "(creates keystore + per-chain wallet), `agentscore-pay passport login` "
         f"(one-time KYC{'; required for this merchant' if requires_kyc else ''}; "
         "the human completes a verify URL once and pay caches the operator_token), "
@@ -123,7 +123,7 @@ def build_agentscore_onboarding_steps(
     )
     stripe_fallback_step = (
         "If your only payment method is a Stripe / Link card (no crypto), install `@stripe/link-cli` "
-        "instead of agentscore-pay and use it on the SPT rail. Identity gating still applies — the "
+        "instead of agentscore-pay and use it on the SPT rail. Identity gating still applies: the "
         "merchant's 403 with `verify_url` lets you bootstrap a Passport even with no crypto wallet involved."
     )
     returning_user_step = (

{agentscore_commerce-2.7.1 → agentscore_commerce-2.7.2}/agentscore_commerce/discovery/llms_txt.py

@@ -28,7 +28,7 @@ def llms_txt_identity_section(
     aip_bullet = ""
     if aip:
         aip_bullet = (
-            "\n- **`Agent-Identity: <JWT>` + RFC 9421 signature** — present an Agent Identity Token (AIP) "
+            "\n- **`Agent-Identity: <JWT>` + RFC 9421 signature**: present an Agent Identity Token (AIP) "
             "from a trusted issuer (AgentScore is always trusted). Short-lived and bound to your key; sign "
             "the request (`Signature-Input` + `Signature` over `@method @authority @path agent-identity`, "
             "tag `agent-identity`) to prove possession. No long-lived token on the wire. Mint one with "
@@ -50,13 +50,13 @@ def llms_txt_identity_section(
             compliance_note = f"\n\nCompliance: {', '.join(parts)}."
     return (
         "## Identity\n\n"
-        "AgentScore identity is reusable across every AgentScore-gated merchant — one KYC, "
+        "AgentScore identity is reusable across every AgentScore-gated merchant: one KYC, "
         "no re-verification per site. Pick a header:\n\n"
-        "- **`X-Wallet-Address: 0x...` or base58** — works on signing rails (Tempo, x402, "
+        "- **`X-Wallet-Address: 0x...` or base58**: works on signing rails (Tempo, x402, "
         "Solana MPP). The wallet you claim must sign the payment.\n"
-        "- **`X-Operator-Token: opc_...`** — works on every rail, including Stripe SPT. "
+        "- **`X-Operator-Token: opc_...`**: works on every rail, including Stripe SPT. "
         f"Reusable across AgentScore merchants until expiry.{aip_bullet}\n"
-        "- **Neither** — you get a 403 with `verify_url`. Complete the session flow once and "
+        "- **Neither**: you get a 403 with `verify_url`. Complete the session flow once and "
         f"reuse the resulting `opc_...` everywhere.{compliance_note}"
     )
 
@@ -103,22 +103,22 @@ def _llms_txt_payment_section_compact(*, rails: list[str], app_url: str) -> str:
     rails_list = list(rails)
     if _has_rail_family(rails_list, "tempo-"):
         lines.append(
-            "- **Tempo USDC via MPP** — "
+            "- **Tempo USDC via MPP**: "
             f"`tempo request -X POST -H \"X-Operator-Token: opc_...\" --json '{{...}}' --max-spend N {app_url}`"
         )
     if _has_rail_family(rails_list, "x402-base-"):
         lines.append(
-            f"- **x402 USDC on Base** (EIP-3009) — `agentscore-pay pay POST {app_url} --chain base "
+            f"- **x402 USDC on Base** (EIP-3009): `agentscore-pay pay POST {app_url} --chain base "
             "-H \"X-Operator-Token: opc_...\" -d '{...}'`"
         )
     if _has_rail_family(rails_list, "mpp-solana-"):
         lines.append(
-            f"- **USDC on Solana** — `agentscore-pay pay POST {app_url} --chain solana "
+            f"- **USDC on Solana**: `agentscore-pay pay POST {app_url} --chain solana "
             "-H \"X-Operator-Token: opc_...\" -d '{...}'`"
         )
     if "stripe-spt" in rails_list:
         lines.append(
-            "- **Stripe Shared Payment Token** — agent mints SPT (own Stripe account scoped to networkId, "
+            "- **Stripe Shared Payment Token**: agent mints SPT (own Stripe account scoped to networkId, "
             "OR `link-cli spend-request create --credential-type shared_payment_token --network-id "
             "<profileId> ...`)"
         )

{agentscore_commerce-2.7.1 → agentscore_commerce-2.7.2}/agentscore_commerce/discovery/openapi.py

@@ -233,7 +233,7 @@ def agentscore_denial_schemas() -> dict[str, Any]:
                 "token_expired → deliver_verify_url_and_poll, invalid_credential → "
                 "switch_token_or_restart_session, wallet_signer_mismatch → resign_or_switch_to_operator_token, "
                 "wallet_auth_requires_wallet_signing → switch_to_operator_token, wallet_not_trusted → "
-                "contact_support — UNFIXABLE compliance only (sanctions/age/jurisdiction_restricted); "
+                "contact_support, for UNFIXABLE compliance only (sanctions/age/jurisdiction_restricted); "
                 "fixable reasons re-route to identity_verification_required, payment_required → contact_merchant)."
             ),
         },
@@ -255,7 +255,7 @@ def agentscore_denial_schemas() -> dict[str, Any]:
                     "description": (
                         "Present for missing_identity / identity_verification_required / token_expired "
                         "denials. Agent shares this with the user to complete KYC or claim a wallet. "
-                        "Not present on wallet_not_trusted (UNFIXABLE compliance — re-verification "
+                        "Not present on wallet_not_trusted (UNFIXABLE compliance, so re-verification "
                         "won't change the outcome)."
                     ),
                 },

{agentscore_commerce-2.7.1 → agentscore_commerce-2.7.2}/agentscore_commerce/discovery/skill_md.py

@@ -124,7 +124,7 @@ _RAIL_NOTES: dict[str, str] = {
         "USDC (SPL). Use `agentscore-pay pay --chain solana`; MPP credential goes in `Authorization: Payment`."
     ),
     "stripe": (
-        "Card via Link wallet. Use `@stripe/link-cli` — `agentscore-pay` emits the "
+        "Card via Link wallet. Use `@stripe/link-cli`; `agentscore-pay` emits the "
         "handoff hint when this rail is picked."
     ),
 }
@@ -141,7 +141,7 @@ def _validate(input: _SkillCtx) -> None:
         raise ValueError(f"build_skill_md: name must be 1-{_NAME_MAX} characters (got {len(n) if n else 0})")
     if not _NAME_RE.match(n):
         raise ValueError(
-            f'build_skill_md: name "{n}" is invalid — must be lowercase alphanumeric and hyphens, '
+            f'build_skill_md: name "{n}" is invalid: must be lowercase alphanumeric and hyphens, '
             "no leading/trailing/consecutive hyphens (agentskills.io spec)"
         )
     if not input.description:
@@ -232,7 +232,7 @@ def _payment_section(input: _SkillCtx) -> str:
             clients[r] = defaults.get(r, [])
     rows = ["| Rail | Notes | Compatible clients |", "|---|---|---|"]
     for r in input.accepted_rails:
-        client_list = ", ".join(clients.get(r, [])) or "—"
+        client_list = ", ".join(clients.get(r, [])) or "none"
         rows.append(f"| **{_RAIL_LABELS[r]}** | {_RAIL_NOTES[r]} | {client_list} |")
     intro = (
         "Each gated route returns a 402 with `WWW-Authenticate` + `PAYMENT-REQUIRED` "
@@ -276,12 +276,12 @@ def _identity_section(input: _SkillCtx) -> str:
             "\n\nThis merchant accepts AIP Agent Identity Tokens. If you hold an AIT from a trusted issuer "
             "(AgentScore is always trusted), present the JWT in an `Agent-Identity` header plus an RFC 9421 "
             "HTTP Message Signature (`Signature-Input` + `Signature` over `@method @authority @path agent-identity`, "
-            "tag `agent-identity`) signed with the token-bound cnf key — it satisfies identity in one round trip, "
+            "tag `agent-identity`) signed with the token-bound cnf key, satisfying identity in one round trip, "
             "no separate AgentScore credential needed. `agentscore-pay pay --identity aip` does this automatically."
         )
     denial_note = (
-        "Denial bodies carry an `agent_instructions` block describing the recovery action "
-        "— read the `action` field and follow it. See the identity-bootstrap skill for the "
+        "Denial bodies carry an `agent_instructions` block describing the recovery action. "
+        "Read the `action` field and follow it. See the identity-bootstrap skill for the "
         "canonical denial-code → action table."
     )
     return "\n".join(
@@ -375,7 +375,7 @@ def build_skill_md(
     support_links: list[SkillMdLink] | None = None,
     refresh_footer: bool = True,
 ) -> str:
-    """Render an agentskills.io-compatible ``skill.md`` for an agent-commerce merchant.
+    """Render an agentskills.io-compatible ``skill.md`` for an agentic-commerce merchant.
 
     Output is YAML frontmatter (``name`` / ``description`` / optional ``license`` /
     ``compatibility`` / ``allowed-tools`` / ``metadata``) followed by markdown sections

{agentscore_commerce-2.7.1 → agentscore_commerce-2.7.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentscore-commerce"
-version = "2.7.1"
+version = "2.7.2"
 description = "Agentic commerce SDK for Python: identity middleware (FastAPI, Flask, Django, AIOHTTP, Sanic, ASGI) + payment helpers + 402 builders + discovery + Stripe multichain. The full merchant-side toolkit for AgentScore-powered agentic commerce."
 readme = "README.md"
 license = "MIT"

{agentscore_commerce-2.7.1 → agentscore_commerce-2.7.2}/tests/test_skill_md.py

@@ -253,12 +253,16 @@ class TestPaymentSection:
         assert "rogue-cli" not in out
         assert "Stripe Shared Payment Token" not in out
 
-    def test_renders_em_dash_when_clients_empty(self) -> None:
+    def test_renders_none_when_clients_empty(self) -> None:
+        # "none" rather than an em-dash: this table is served on every store's
+        # skill.md, and the org rule bars em-dashes on external surfaces. Kept
+        # identical to the Node SDK, which renders the same table.
         cfg = _base()
         cfg["accepted_rails"] = ["x402_base"]
         cfg["compatible_clients"] = {"x402_base": []}
         out = build_skill_md(**cfg)
-        assert re.search("x402 on Base.+\\| —", out)
+        assert re.search(r"x402 on Base.+\| none", out)
+        assert "—" not in out
 
 
 class TestIdentitySection:

{agentscore_commerce-2.7.1 → agentscore_commerce-2.7.2}/uv.lock

@@ -13,7 +13,7 @@ prerelease-mode = "disallow"
 
 [[package]]
 name = "agentscore-commerce"
-version = "2.7.1"
+version = "2.7.2"
 source = { editable = "." }
 dependencies = [
     { name = "agentscore-py" },
@@ -131,14 +131,14 @@ dev = [
 
 [[package]]
 name = "agentscore-py"
-version = "2.6.5"
+version = "2.6.6"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "httpx" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/a0/10/bd5b4ef8f1ea241f34899a1f40f7c67d41b73448089c36434a89492a34b5/agentscore_py-2.6.5.tar.gz", hash = "sha256:e8bc1d86ba2ec6bb46368070f74ff49f7960716f63fa49059ee76c8566aad689", size = 67361, upload-time = "2026-08-12T12:12:09.655Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/3b/2d/51bcf54136a51c82570a825fc65e554a46c08ed4f603ab95bcf4b028d5a0/agentscore_py-2.6.6.tar.gz", hash = "sha256:710b8f3c13f014911beb39913a526f99783d2a8e817beaf85771c8d9cc821210", size = 67383, upload-time = "2026-08-21T08:44:49.577Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/59/f6/0fb30d2987454417e058d933fba894c6c40cc7f16ba1ea97b56947a57dfc/agentscore_py-2.6.5-py3-none-any.whl", hash = "sha256:419d1442a6bafaff67930de59c4eb573da996e5b66370d0b99f1177359428118", size = 22378, upload-time = "2026-08-12T12:12:08.62Z" },
+    { url = "https://files.pythonhosted.org/packages/07/f9/824626fa733246fcba5d4ba985d7142708a5d719dca1b0a69a8db8ef237a/agentscore_py-2.6.6-py3-none-any.whl", hash = "sha256:27e8c412fa4ede62b5d06c6d4c1bbe6763a9deaef0e33390148c22dd317aa58b", size = 22378, upload-time = "2026-08-21T08:44:48.187Z" },
 ]
 
 [[package]]
@@ -1894,15 +1894,15 @@ wheels = [
 
 [[package]]
 name = "lefthook"
-version = "2.1.10"
+version = "2.1.11"
 source = { registry = "https://pypi.org/simple" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/f2/a7/ff54e6b498de6daa9ca5f02e77f943923924ae6aa2d0babc0334507bd0e2/lefthook-2.1.10-py3-none-macosx_10_15_x86_64.whl", hash = "sha256:8ae438e6a6a2984e7f7e1eef43ae08a5a1f99999a75f911f52e33106f1b198ff", size = 5424203, upload-time = "2026-07-08T12:03:27.993Z" },
-    { url = "https://files.pythonhosted.org/packages/93/1d/12274ace64319fe26ed6f394dae463ceae24f504d751d84072cb3bfdbacf/lefthook-2.1.10-py3-none-macosx_11_0_arm64.whl", hash = "sha256:9f468de23f627837ee822beea57473c3ed541fc8bf82b030a3247d773a192b4f", size = 4946329, upload-time = "2026-07-08T12:03:29.912Z" },
-    { url = "https://files.pythonhosted.org/packages/fc/3f/cbd5bcf3d481a8ffda0378b6e90bca3c85f060c085e16002837ceeab56b6/lefthook-2.1.10-py3-none-manylinux_2_17_aarch64.whl", hash = "sha256:115c6b4ba6dd12dc18d8661c61992d46dcfab1e0528f16b6a90664c4fe60c376", size = 4776557, upload-time = "2026-07-08T12:03:31.437Z" },
-    { url = "https://files.pythonhosted.org/packages/0d/52/54798a744c4d656ba39ed5f0e6ccb8a81c6a4c15a3e1448978a40aefd713/lefthook-2.1.10-py3-none-manylinux_2_17_x86_64.whl", hash = "sha256:a635411b4e9263154fd5a64a81df28c628d625ab18c7f071df90e7006d0de748", size = 5356418, upload-time = "2026-07-08T12:03:33.827Z" },
-    { url = "https://files.pythonhosted.org/packages/11/b9/fb10fab6e854e97ed2af8c906ff90b706e850f17d245c6cde59c076e4066/lefthook-2.1.10-py3-none-win_amd64.whl", hash = "sha256:7385e234f14ab65bcaa84ebe7ba6d6b1dafe36be6ad5a9dd852e5add6f1e701e", size = 5506468, upload-time = "2026-07-08T12:03:35.826Z" },
-    { url = "https://files.pythonhosted.org/packages/77/01/054a0a18154dd8127276398a82d9797dd5534ebeeb1d8d61a9b19e6a8ef0/lefthook-2.1.10-py3-none-win_arm64.whl", hash = "sha256:be7b59b9e3483f62a217a632cb4177eaa3f75229916450bd12b99b608c51439d", size = 4858134, upload-time = "2026-07-08T12:03:37.421Z" },
+    { url = "https://files.pythonhosted.org/packages/5c/3b/3dc3e68960986ffd5380bd84111008c20c2f0e1b8c121b71d65253ddd92b/lefthook-2.1.11-py3-none-macosx_10_15_x86_64.whl", hash = "sha256:a4b54f149e3dba520456df82d0e1a84958082b4a15dd7acf2c129727528e01bc", size = 5426206, upload-time = "2026-08-21T08:18:20.476Z" },
+    { url = "https://files.pythonhosted.org/packages/07/38/54c1ee7116a9b2f5a854f8686a6e8cf755aa638460f3d09b1626b9b248c5/lefthook-2.1.11-py3-none-macosx_11_0_arm64.whl", hash = "sha256:16c76f244d37a35eba82046b60e47791e4bd006235007c5e88a7df49223b6652", size = 4949297, upload-time = "2026-08-21T08:18:23.077Z" },
+    { url = "https://files.pythonhosted.org/packages/e8/e4/3f9b7446cb05602fdd1155dbbc2ac31c0000224b4ee75026bceba078e786/lefthook-2.1.11-py3-none-manylinux_2_17_aarch64.whl", hash = "sha256:ed5ed8702e03409251ba6ec52179a438fb65c21843b004bbabdd0e22e12317b1", size = 4780005, upload-time = "2026-08-21T08:18:24.471Z" },
+    { url = "https://files.pythonhosted.org/packages/21/5f/df23da9414245591094fb0e07a3e8e6fa938f51b568b21f6b4fa07b5896a/lefthook-2.1.11-py3-none-manylinux_2_17_x86_64.whl", hash = "sha256:7207f6e0d5da75ca69794532edc36dacf0e3e141b54d92c8e195c07f16171a60", size = 5359796, upload-time = "2026-08-21T08:18:25.766Z" },
+    { url = "https://files.pythonhosted.org/packages/3c/8f/f9307859a9351b450b0e06b409526fb0ce31023fcd7f9f9e04727bc52313/lefthook-2.1.11-py3-none-win_amd64.whl", hash = "sha256:332639455dd7f725dc1d3d9817397b91a76ccc72dfeb65b5dcf4189e4be443f6", size = 5507966, upload-time = "2026-08-21T08:18:27.184Z" },
+    { url = "https://files.pythonhosted.org/packages/e6/6a/a4ce63a9ae841def7321ca09a446c213d9c7b465e5bb4f7edf9ea4052c63/lefthook-2.1.11-py3-none-win_arm64.whl", hash = "sha256:d82b86c6cb59cfe536adde34c7178ab31b5d5504043ee713fd808556baeeb701", size = 4860496, upload-time = "2026-08-21T08:18:28.803Z" },
 ]
 
 [[package]]