agentscore-py 2.0.0__tar.gz → 2.0.2__tar.gz

{agentscore_py-2.0.0 → agentscore_py-2.0.2}/.claude/CLAUDE.md

@@ -1,6 +1,6 @@
 # agentscore-py
 
-Python client for the AgentScore trust and reputation API.
+Python client for the AgentScore APIs.
 
 ## Identity Model
 

{agentscore_py-2.0.0 → agentscore_py-2.0.2}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: agentscore-py
-Version: 2.0.0
-Summary: Python client for the AgentScore trust and reputation API
+Version: 2.0.2
+Summary: Python client for the AgentScore APIs
 Project-URL: Homepage, https://agentscore.sh
 Project-URL: Repository, https://github.com/agentscore/python-sdk
 Project-URL: Issues, https://github.com/agentscore/python-sdk/issues
@@ -26,7 +26,7 @@ Description-Content-Type: text/markdown
 [![PyPI version](https://img.shields.io/pypi/v/agentscore-py.svg)](https://pypi.org/project/agentscore-py/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 
-Python client for the [AgentScore](https://agentscore.sh) trust and reputation API.
+Python client for the [AgentScore](https://agentscore.sh) APIs.
 
 ## Install
 

{agentscore_py-2.0.0 → agentscore_py-2.0.2}/README.md

@@ -3,7 +3,7 @@
 [![PyPI version](https://img.shields.io/pypi/v/agentscore-py.svg)](https://pypi.org/project/agentscore-py/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 
-Python client for the [AgentScore](https://agentscore.sh) trust and reputation API.
+Python client for the [AgentScore](https://agentscore.sh) APIs.
 
 ## Install
 

{agentscore_py-2.0.0 → agentscore_py-2.0.2}/agentscore/client.py

@@ -42,7 +42,7 @@ if TYPE_CHECKING:
 
 
 class AgentScore:
-    """Client for the AgentScore trust and reputation API."""
+    """Client for the AgentScore APIs."""
 
     def __init__(
         self,
@@ -153,7 +153,7 @@ class AgentScore:
         self,
         address: str | None = None,
         chain: str | None = None,
-        refresh: bool = False,
+        refresh: bool | None = None,
         policy: DecisionPolicy | None = None,
         operator_token: str | None = None,
     ) -> AssessResponse:
@@ -165,8 +165,8 @@ class AgentScore:
             body["operator_token"] = operator_token
         if chain:
             body["chain"] = chain
-        if refresh:
-            body["refresh"] = True
+        if refresh is not None:
+            body["refresh"] = refresh
         if policy is not None:
             body["policy"] = dict(policy)
         client = self._get_sync_client()
@@ -279,7 +279,7 @@ class AgentScore:
         self,
         address: str | None = None,
         chain: str | None = None,
-        refresh: bool = False,
+        refresh: bool | None = None,
         policy: DecisionPolicy | None = None,
         operator_token: str | None = None,
     ) -> AssessResponse:
@@ -291,8 +291,8 @@ class AgentScore:
             body["operator_token"] = operator_token
         if chain:
             body["chain"] = chain
-        if refresh:
-            body["refresh"] = True
+        if refresh is not None:
+            body["refresh"] = refresh
         if policy is not None:
             body["policy"] = dict(policy)
         client = self._get_async_client()

{agentscore_py-2.0.0 → agentscore_py-2.0.2}/agentscore/types.py

@@ -338,23 +338,32 @@ class AssociateWalletResponse(TypedDict):
 
 
 DenialCode = Literal[
-    "operator_verification_required",
-    "compliance_denied",
-    "compliance_error",
-    "wallet_not_trusted",
+    # Gate-emitted codes from commerce middleware (canonical 9-element union)
     "missing_identity",
     "identity_verification_required",
-    "payment_required",
-    "api_error",
-    "kyc_required",
-    # Wallet-signer binding — claimed X-Wallet-Address must resolve to the same operator
-    # as the payment signer; wallet-auth is rejected on rails with no wallet signer.
-    "wallet_signer_mismatch",
-    "wallet_auth_requires_wallet_signing",
     # Credential is no longer valid (revoked or past its TTL — the two cases share this
     # code deliberately so the API doesn't leak which one). The 401 body carries an
     # auto-minted session so agents recover without holding an API key.
     "token_expired",
+    # Credential doesn't exist at all (typo, fabricated, never minted). Permanent state;
+    # no auto-session is issued because the agent may have other valid tokens to try.
+    "invalid_credential",
+    # Wallet-signer binding — claimed X-Wallet-Address must resolve to the same operator
+    # as the payment signer; wallet-auth is rejected on rails with no wallet signer.
+    "wallet_signer_mismatch",
+    "wallet_auth_requires_wallet_signing",
+    "wallet_not_trusted",
+    "api_error",
+    "payment_required",
+    # Merchant-emitted convenience codes — not emitted by the AgentScore API itself,
+    # but may appear in 4xx bodies passing through the SDK from merchants whose gate
+    # `on_denied` hook wraps AgentScore denials into business-domain codes.
+    "operator_verification_required",
+    "compliance_denied",
+    "compliance_error",
+    # Decision-reason code surfaced in error.code by some merchants — kept for back-compat
+    # with merchants that flatten policy reasons into the error envelope.
+    "kyc_required",
 ]
 """Denial codes returned by the gate in 403/402 error bodies. Lets agents pick the right
 remediation without natural-language parsing."""

{agentscore_py-2.0.0 → agentscore_py-2.0.2}/pyproject.toml

@@ -4,8 +4,8 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentscore-py"
-version = "2.0.0"
-description = "Python client for the AgentScore trust and reputation API"
+version = "2.0.2"
+description = "Python client for the AgentScore APIs"
 readme = "README.md"
 license = "MIT"
 requires-python = ">=3.11"

{agentscore_py-2.0.0 → agentscore_py-2.0.2}/tests/test_client.py

@@ -407,11 +407,23 @@ def test_user_agent_header_prepends_custom_user_agent():
 
 
 @respx.mock
-def test_assess_refresh_false_not_included_in_body():
+def test_assess_refresh_explicit_false_sent_in_body():
+    # Matches node-sdk semantics: when consumer explicitly passes refresh=False,
+    # the SDK includes `refresh: false` in the body. Default (no value passed)
+    # omits the field entirely.
     route = respx.post(f"{BASE_URL}/v1/assess").mock(return_value=httpx.Response(200, json=ASSESS_PAYLOAD))
     client = AgentScore(api_key=API_KEY)
     client.assess(ADDRESS, refresh=False)
     body = json.loads(route.calls.last.request.content)
+    assert body.get("refresh") is False
+
+
+@respx.mock
+def test_assess_refresh_omitted_when_default():
+    route = respx.post(f"{BASE_URL}/v1/assess").mock(return_value=httpx.Response(200, json=ASSESS_PAYLOAD))
+    client = AgentScore(api_key=API_KEY)
+    client.assess(ADDRESS)
+    body = json.loads(route.calls.last.request.content)
     assert "refresh" not in body
 
 
@@ -515,7 +527,7 @@ REPUTATION_WITH_VERIFICATION = {
 ASSESS_WITH_COMPLIANCE = {
     **ASSESS_PAYLOAD,
     "decision": "deny",
-    "decision_reasons": ["kyc_required", "sanctions_check_pending"],
+    "decision_reasons": ["kyc_required", "sanctions_flagged"],
     "operator_verification": {
         "level": "none",
         "operator_type": None,
@@ -633,7 +645,7 @@ def test_full_compliance_deny_flow():
     compliance_response = {
         **REPUTATION_PAYLOAD,
         "decision": "deny",
-        "decision_reasons": ["kyc_required", "sanctions_check_pending"],
+        "decision_reasons": ["kyc_required", "sanctions_flagged"],
         "on_the_fly": False,
         "operator_verification": {
             "level": "none",
@@ -654,7 +666,7 @@ def test_full_compliance_deny_flow():
     )
     assert result["decision"] == "deny"
     assert "kyc_required" in result["decision_reasons"]
-    assert "sanctions_check_pending" in result["decision_reasons"]
+    assert "sanctions_flagged" in result["decision_reasons"]
     assert result["verify_url"] == "https://agentscore.sh/verify/xyz789"
     assert result["operator_verification"]["level"] == "none"
 

{agentscore_py-2.0.0 → agentscore_py-2.0.2}/tests/test_integration.py

@@ -5,10 +5,13 @@ import pytest
 from agentscore import AgentScore
 
 API_KEY = os.environ.get("AGENTSCORE_API_KEY")
-BASE_URL = os.environ.get("AGENTSCORE_BASE_URL", "http://api.dev.agentscore.internal")
+BASE_URL = os.environ.get("AGENTSCORE_BASE_URL")
 TEST_ADDRESS = "0x339559a2d1cd15059365fc7bd36b3047bba480e0"
 
-pytestmark = pytest.mark.skipif(not API_KEY, reason="AGENTSCORE_API_KEY not set")
+pytestmark = pytest.mark.skipif(
+    not (API_KEY and BASE_URL),
+    reason="AGENTSCORE_API_KEY and AGENTSCORE_BASE_URL must both be set",
+)
 
 
 def test_get_reputation_shape():

{agentscore_py-2.0.0 → agentscore_py-2.0.2}/uv.lock

@@ -4,7 +4,7 @@ requires-python = ">=3.11"
 
 [[package]]
 name = "agentscore-py"
-version = "2.0.0"
+version = "2.0.2"
 source = { editable = "." }
 dependencies = [
     { name = "httpx" },