agentscore-py 2.4.2__tar.gz → 2.5.0__tar.gz

{agentscore_py-2.4.2 → agentscore_py-2.5.0}/.github/workflows/ci.yml

@@ -19,9 +19,9 @@ jobs:
     timeout-minutes: 10
     steps:
       - uses: useblacksmith/checkout@v1
-      - uses: astral-sh/setup-uv@v8.1.0
+      - uses: astral-sh/setup-uv@v8.3.0
       - run: uv python install 3.12
-      - uses: actions/cache@v5
+      - uses: actions/cache@v6
         with:
           path: |
             ~/.cache/uv

{agentscore_py-2.4.2 → agentscore_py-2.5.0}/.github/workflows/publish.yml

@@ -17,9 +17,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
-      - uses: astral-sh/setup-uv@v8.1.0
+      - uses: astral-sh/setup-uv@v8.3.0
 
       - name: Set version from tag
         run: sed -i "s/^version = .*/version = \"${GITHUB_REF_NAME#v}\"/" pyproject.toml
@@ -27,7 +27,7 @@ jobs:
       - run: uv build
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@v1.14.0
 
       - name: Create GitHub Release
         run: gh release create "$GITHUB_REF_NAME" --generate-notes

{agentscore_py-2.4.2 → agentscore_py-2.5.0}/.github/workflows/security.yml

@@ -35,7 +35,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - uses: useblacksmith/checkout@v1
-      - uses: astral-sh/setup-uv@v8.1.0
+      - uses: astral-sh/setup-uv@v8.3.0
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"

{agentscore_py-2.4.2 → agentscore_py-2.5.0}/CODE_OF_CONDUCT.md

@@ -24,7 +24,7 @@ Examples of unacceptable behavior:
 
 ## Enforcement
 
-Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the project team at engineering@agentscore.sh. All complaints will be reviewed and investigated promptly and fairly.
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the project team at engineering@agentscore.com. All complaints will be reviewed and investigated promptly and fairly.
 
 ## Attribution
 

{agentscore_py-2.4.2 → agentscore_py-2.5.0}/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.4
 Name: agentscore-py
-Version: 2.4.2
+Version: 2.5.0
 Summary: Python client for the AgentScore APIs
-Project-URL: Homepage, https://agentscore.sh
+Project-URL: Homepage, https://www.agentscore.com
 Project-URL: Repository, https://github.com/agentscore/python-sdk
 Project-URL: Issues, https://github.com/agentscore/python-sdk/issues
 License-Expression: MIT
@@ -26,7 +26,7 @@ Description-Content-Type: text/markdown
 [![PyPI version](https://img.shields.io/pypi/v/agentscore-py.svg)](https://pypi.org/project/agentscore-py/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 
-Python client for the [AgentScore](https://agentscore.sh) APIs.
+The official Python client for [AgentScore](https://www.agentscore.com). Identity verification and compliance gating for agentic commerce (KYC, age, sanctions, jurisdiction), sync and async.
 
 ## Install
 
@@ -84,7 +84,7 @@ print(session["next_steps"]["action"])  # "deliver_verify_url_and_poll"
 
 status = client.poll_session(session["session_id"], session["poll_secret"])
 if status["status"] == "verified":
-    print(status["operator_token"])  # "opc_..." — use for future requests
+    print(status["operator_token"])  # "opc_...", use for future requests
 
 # Optional pre-association: attach the session to a known wallet or refresh KYC
 # for an existing operator credential.
@@ -94,7 +94,7 @@ client.create_session(operator_token="opc_...")  # KYC refresh
 
 ### Wallet resolution
 
-`assess()` responses include `resolved_operator` and `linked_wallets` — all same-operator sibling wallets (claimed via SIWE or captured via prior `associate_wallet`). The list may mix EVM addresses (`0x...` lowercased) and Solana addresses (base58, case-preserved) for cross-chain operators; merchants doing wallet-signer-match checks should accept a payment signed by any address in the list, regardless of chain. The `address` parameter on `assess()` and `get_reputation()` accepts either format — network is auto-detected from the address shape.
+`assess()` responses include `resolved_operator` and `linked_wallets`, all same-operator sibling wallets (claimed via SIWE or captured via prior `associate_wallet`). The list may mix EVM addresses (`0x...` lowercased) and Solana addresses (base58, case-preserved) for cross-chain operators; merchants doing wallet-signer-match checks should accept a payment signed by any address in the list, regardless of chain. The `address` parameter on `assess()` and `get_reputation()` accepts either format; the network is auto-detected from the address shape.
 
 ### Server-side signer-match + sanctions screening
 
@@ -124,9 +124,9 @@ if sanctions and sanctions.get("sanctioned"):
     print("OFAC hit:", sanctions["ofac_label"], sanctions["sdn_uid"])
 ```
 
-Wallet-OFAC SDN enforcement on the `signer` block is unconditional whenever a signer is supplied — no `policy.require_sanctions_clear` opt-in required. The API flips `decision` to `deny` when `signer_sanctions` is `sanctioned: True` OR `status: "unavailable"`, with `decision_reasons` including `sanctions_flagged` or `sanctions_check_unavailable` respectively (fail-closed; OFAC strict-liability). `policy.require_sanctions_clear` is the separate NAME-based screen on the resolved operator's KYC identity.
+Wallet-OFAC SDN enforcement on the `signer` block is unconditional whenever a signer is supplied; no `policy.require_sanctions_clear` opt-in is required. The API flips `decision` to `deny` when `signer_sanctions` is `sanctioned: True` OR `status: "unavailable"`, with `decision_reasons` including `sanctions_flagged` or `sanctions_check_unavailable` respectively (fail-closed; OFAC strict-liability). `policy.require_sanctions_clear` is the separate NAME-based screen on the resolved operator's KYC identity.
 
-Pass `signer["address"] = None` for rails without a wallet signer (Stripe SPT, card-only). The API responds with `signer_match["kind"] == "wallet_auth_requires_wallet_signing"` and a parsed `agent_instructions` block telling the agent to switch to `X-Operator-Token` auth — spread the block directly into a 403 body.
+Pass `signer["address"] = None` for rails without a wallet signer (Stripe SPT, card-only). The API responds with `signer_match["kind"] == "wallet_auth_requires_wallet_signing"` and a parsed `agent_instructions` block telling the agent to switch to `X-Operator-Token` auth, spread the block directly into a 403 body.
 
 ### Credential Management
 
@@ -140,14 +140,14 @@ client.revoke_credential(cred["id"])
 
 ### Report an Agent's Wallet (Cross-Merchant Attribution)
 
-After an agent authenticated via `operator_token` completes a payment, report the signer wallet so AgentScore can build a cross-merchant credential↔wallet profile. Fire-and-forget — `first_seen` is informational only. `network` is the key-derivation family: `"evm"` for any EVM chain (Base, Tempo, Ethereum, …) or `"solana"` for Solana.
+After an agent authenticated via `operator_token` completes a payment, report the signer wallet so AgentScore can build a cross-merchant credential↔wallet profile. Fire-and-forget, `first_seen` is informational only. `network` is the key-derivation family: `"evm"` for any EVM chain (Base, Tempo, Ethereum, …) or `"solana"` for Solana.
 
 ```python
 client.associate_wallet(
     operator_token="opc_...",
     wallet_address=signer_from_payment,  # e.g. EIP-3009 `from` or Tempo MPP DID address
     network="evm",
-    idempotency_key=payment_intent_id,  # optional — agent retries of the same payment no-op
+    idempotency_key=payment_intent_id,  # optional, agent retries of the same payment no-op
 )
 ```
 
@@ -184,8 +184,8 @@ with AgentScore(api_key="as_live_...") as client:
 
 | Parameter     | Default                     | Description              |
 |---------------|-----------------------------|--------------------------|
-| `api_key`     | `None`                      | API key from [agentscore.sh](https://agentscore.sh) |
-| `base_url`    | `https://api.agentscore.sh` | API base URL             |
+| `api_key`     | _(required)_                | API key from [agentscore.com](https://www.agentscore.com); raises `ValueError` if missing |
+| `base_url`    | `https://api.agentscore.com` | API base URL             |
 | `timeout`     | `10.0`                      | Request timeout (seconds)|
 | `user_agent`  | `None`                      | Prepended to the default `User-Agent` as `"{user_agent} (agentscore-py/{version})"`. Use to attribute API calls to your app. |
 
@@ -202,7 +202,7 @@ except AgentScoreError as e:
     print(e.code, e.status_code, str(e))
 ```
 
-`AgentScoreError.details` carries the rest of the response body — `verify_url`, `linked_wallets`, `claimed_operator`, `actual_signer`, `expected_signer`, `reasons`, `agent_memory` — so callers can branch on granular denial codes without re-parsing.
+`AgentScoreError.details` carries the rest of the response body (`verify_url`, `linked_wallets`, `claimed_operator`, `actual_signer`, `expected_signer`, `reasons`, `agent_memory`) so callers can branch on granular denial codes without re-parsing.
 
 ### Typed error classes
 
@@ -211,11 +211,11 @@ For status-code-specific recovery, the SDK raises typed subclasses of `AgentScor
 | Class | Triggered by | What it adds |
 |---|---|---|
 | `PaymentRequiredError` | HTTP 402 | The endpoint is not enabled for this account |
-| `TokenExpiredError` | HTTP 401 with `error.code = "token_expired"` | Parsed body fields on the instance: `verify_url`, `session_id`, `poll_secret`, `poll_url`, `next_steps`, `agent_memory` — recover without re-parsing `details` |
-| `InvalidCredentialError` | HTTP 401 with `error.code = "invalid_credential"` | Permanent — switch tokens or restart |
+| `TokenExpiredError` | HTTP 401 with `error.code = "token_expired"` | Parsed body fields on the instance: `verify_url`, `session_id`, `poll_secret`, `poll_url`, `next_steps`, `agent_memory`, recover without re-parsing `details` |
+| `InvalidCredentialError` | HTTP 401 with `error.code = "invalid_credential"` | Permanent, switch tokens or restart |
 | `QuotaExceededError` | HTTP 429 with `error.code = "quota_exceeded"` | Account-level cap reached; don't retry |
 | `RateLimitedError` | HTTP 429 with `error.code = "rate_limited"` | Per-second sliding-window cap; retry after `Retry-After` |
-| `TimeoutError` | `httpx.TimeoutException` (connect/read/write/pool timeout) | Distinct from generic network errors. Note: subclasses `AgentScoreError`, **not** the builtin `TimeoutError` — import explicitly from `agentscore.errors` to disambiguate. |
+| `TimeoutError` | `httpx.TimeoutException` (connect/read/write/pool timeout) | Distinct from generic network errors. Note: subclasses `AgentScoreError`, **not** the builtin `TimeoutError`, import explicitly from `agentscore.errors` to disambiguate. |
 
 All non-timeout `httpx.HTTPError` (ConnectError, ProtocolError, NetworkError, etc.) are wrapped as `AgentScoreError(code="network_error", status_code=0)`.
 
@@ -230,11 +230,11 @@ try:
 except TokenExpiredError as e:
     print("Verify at:", e.verify_url, "poll with:", e.poll_secret)
 except QuotaExceededError as e:
-    print("Account quota reached — surface to user; don't retry.")
+    print("Account quota reached, surface to user; don't retry.")
 except AgentScoreTimeoutError:
-    print("Network timeout — retry with backoff.")
+    print("Network timeout, retry with backoff.")
 except AgentScoreError as e:
-    print(e.code, e.message)
+    print(e.code, str(e))
 ```
 
 ## Quota observability
@@ -247,10 +247,10 @@ quota = result.get("quota")
 if quota and quota["limit"] and quota["used"]:
     pct = (quota["used"] / quota["limit"]) * 100
     if pct > 80:
-        print(f"AgentScore quota at {pct:.1f}% — resets {quota['reset']}")
+        print(f"AgentScore quota at {pct:.1f}%, resets {quota['reset']}")
 ```
 
-`quota` is absent when the API doesn't emit the headers (Enterprise / unlimited tiers). On a 429 response the SDK raises `QuotaExceededError` / `RateLimitedError` instead of returning a body, so `quota` is only readable on successful calls — drive proactive alerting off the success-path field.
+`quota` is absent when the API doesn't emit the headers (Enterprise / unlimited tiers). On a 429 response the SDK raises `QuotaExceededError` / `RateLimitedError` instead of returning a body, so `quota` is only readable on successful calls; drive proactive alerting off the success-path field.
 
 ## Telemetry
 
@@ -258,7 +258,7 @@ if quota and quota["limit"] and quota["used"]:
 
 ## Documentation
 
-- [API Reference](https://docs.agentscore.sh)
+- [API Reference](https://docs.agentscore.com)
 
 ## License
 

{agentscore_py-2.4.2 → agentscore_py-2.5.0}/README.md

@@ -3,7 +3,7 @@
 [![PyPI version](https://img.shields.io/pypi/v/agentscore-py.svg)](https://pypi.org/project/agentscore-py/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 
-Python client for the [AgentScore](https://agentscore.sh) APIs.
+The official Python client for [AgentScore](https://www.agentscore.com). Identity verification and compliance gating for agentic commerce (KYC, age, sanctions, jurisdiction), sync and async.
 
 ## Install
 
@@ -61,7 +61,7 @@ print(session["next_steps"]["action"])  # "deliver_verify_url_and_poll"
 
 status = client.poll_session(session["session_id"], session["poll_secret"])
 if status["status"] == "verified":
-    print(status["operator_token"])  # "opc_..." — use for future requests
+    print(status["operator_token"])  # "opc_...", use for future requests
 
 # Optional pre-association: attach the session to a known wallet or refresh KYC
 # for an existing operator credential.
@@ -71,7 +71,7 @@ client.create_session(operator_token="opc_...")  # KYC refresh
 
 ### Wallet resolution
 
-`assess()` responses include `resolved_operator` and `linked_wallets` — all same-operator sibling wallets (claimed via SIWE or captured via prior `associate_wallet`). The list may mix EVM addresses (`0x...` lowercased) and Solana addresses (base58, case-preserved) for cross-chain operators; merchants doing wallet-signer-match checks should accept a payment signed by any address in the list, regardless of chain. The `address` parameter on `assess()` and `get_reputation()` accepts either format — network is auto-detected from the address shape.
+`assess()` responses include `resolved_operator` and `linked_wallets`, all same-operator sibling wallets (claimed via SIWE or captured via prior `associate_wallet`). The list may mix EVM addresses (`0x...` lowercased) and Solana addresses (base58, case-preserved) for cross-chain operators; merchants doing wallet-signer-match checks should accept a payment signed by any address in the list, regardless of chain. The `address` parameter on `assess()` and `get_reputation()` accepts either format; the network is auto-detected from the address shape.
 
 ### Server-side signer-match + sanctions screening
 
@@ -101,9 +101,9 @@ if sanctions and sanctions.get("sanctioned"):
     print("OFAC hit:", sanctions["ofac_label"], sanctions["sdn_uid"])
 ```
 
-Wallet-OFAC SDN enforcement on the `signer` block is unconditional whenever a signer is supplied — no `policy.require_sanctions_clear` opt-in required. The API flips `decision` to `deny` when `signer_sanctions` is `sanctioned: True` OR `status: "unavailable"`, with `decision_reasons` including `sanctions_flagged` or `sanctions_check_unavailable` respectively (fail-closed; OFAC strict-liability). `policy.require_sanctions_clear` is the separate NAME-based screen on the resolved operator's KYC identity.
+Wallet-OFAC SDN enforcement on the `signer` block is unconditional whenever a signer is supplied; no `policy.require_sanctions_clear` opt-in is required. The API flips `decision` to `deny` when `signer_sanctions` is `sanctioned: True` OR `status: "unavailable"`, with `decision_reasons` including `sanctions_flagged` or `sanctions_check_unavailable` respectively (fail-closed; OFAC strict-liability). `policy.require_sanctions_clear` is the separate NAME-based screen on the resolved operator's KYC identity.
 
-Pass `signer["address"] = None` for rails without a wallet signer (Stripe SPT, card-only). The API responds with `signer_match["kind"] == "wallet_auth_requires_wallet_signing"` and a parsed `agent_instructions` block telling the agent to switch to `X-Operator-Token` auth — spread the block directly into a 403 body.
+Pass `signer["address"] = None` for rails without a wallet signer (Stripe SPT, card-only). The API responds with `signer_match["kind"] == "wallet_auth_requires_wallet_signing"` and a parsed `agent_instructions` block telling the agent to switch to `X-Operator-Token` auth, spread the block directly into a 403 body.
 
 ### Credential Management
 
@@ -117,14 +117,14 @@ client.revoke_credential(cred["id"])
 
 ### Report an Agent's Wallet (Cross-Merchant Attribution)
 
-After an agent authenticated via `operator_token` completes a payment, report the signer wallet so AgentScore can build a cross-merchant credential↔wallet profile. Fire-and-forget — `first_seen` is informational only. `network` is the key-derivation family: `"evm"` for any EVM chain (Base, Tempo, Ethereum, …) or `"solana"` for Solana.
+After an agent authenticated via `operator_token` completes a payment, report the signer wallet so AgentScore can build a cross-merchant credential↔wallet profile. Fire-and-forget, `first_seen` is informational only. `network` is the key-derivation family: `"evm"` for any EVM chain (Base, Tempo, Ethereum, …) or `"solana"` for Solana.
 
 ```python
 client.associate_wallet(
     operator_token="opc_...",
     wallet_address=signer_from_payment,  # e.g. EIP-3009 `from` or Tempo MPP DID address
     network="evm",
-    idempotency_key=payment_intent_id,  # optional — agent retries of the same payment no-op
+    idempotency_key=payment_intent_id,  # optional, agent retries of the same payment no-op
 )
 ```
 
@@ -161,8 +161,8 @@ with AgentScore(api_key="as_live_...") as client:
 
 | Parameter     | Default                     | Description              |
 |---------------|-----------------------------|--------------------------|
-| `api_key`     | `None`                      | API key from [agentscore.sh](https://agentscore.sh) |
-| `base_url`    | `https://api.agentscore.sh` | API base URL             |
+| `api_key`     | _(required)_                | API key from [agentscore.com](https://www.agentscore.com); raises `ValueError` if missing |
+| `base_url`    | `https://api.agentscore.com` | API base URL             |
 | `timeout`     | `10.0`                      | Request timeout (seconds)|
 | `user_agent`  | `None`                      | Prepended to the default `User-Agent` as `"{user_agent} (agentscore-py/{version})"`. Use to attribute API calls to your app. |
 
@@ -179,7 +179,7 @@ except AgentScoreError as e:
     print(e.code, e.status_code, str(e))
 ```
 
-`AgentScoreError.details` carries the rest of the response body — `verify_url`, `linked_wallets`, `claimed_operator`, `actual_signer`, `expected_signer`, `reasons`, `agent_memory` — so callers can branch on granular denial codes without re-parsing.
+`AgentScoreError.details` carries the rest of the response body (`verify_url`, `linked_wallets`, `claimed_operator`, `actual_signer`, `expected_signer`, `reasons`, `agent_memory`) so callers can branch on granular denial codes without re-parsing.
 
 ### Typed error classes
 
@@ -188,11 +188,11 @@ For status-code-specific recovery, the SDK raises typed subclasses of `AgentScor
 | Class | Triggered by | What it adds |
 |---|---|---|
 | `PaymentRequiredError` | HTTP 402 | The endpoint is not enabled for this account |
-| `TokenExpiredError` | HTTP 401 with `error.code = "token_expired"` | Parsed body fields on the instance: `verify_url`, `session_id`, `poll_secret`, `poll_url`, `next_steps`, `agent_memory` — recover without re-parsing `details` |
-| `InvalidCredentialError` | HTTP 401 with `error.code = "invalid_credential"` | Permanent — switch tokens or restart |
+| `TokenExpiredError` | HTTP 401 with `error.code = "token_expired"` | Parsed body fields on the instance: `verify_url`, `session_id`, `poll_secret`, `poll_url`, `next_steps`, `agent_memory`, recover without re-parsing `details` |
+| `InvalidCredentialError` | HTTP 401 with `error.code = "invalid_credential"` | Permanent, switch tokens or restart |
 | `QuotaExceededError` | HTTP 429 with `error.code = "quota_exceeded"` | Account-level cap reached; don't retry |
 | `RateLimitedError` | HTTP 429 with `error.code = "rate_limited"` | Per-second sliding-window cap; retry after `Retry-After` |
-| `TimeoutError` | `httpx.TimeoutException` (connect/read/write/pool timeout) | Distinct from generic network errors. Note: subclasses `AgentScoreError`, **not** the builtin `TimeoutError` — import explicitly from `agentscore.errors` to disambiguate. |
+| `TimeoutError` | `httpx.TimeoutException` (connect/read/write/pool timeout) | Distinct from generic network errors. Note: subclasses `AgentScoreError`, **not** the builtin `TimeoutError`, import explicitly from `agentscore.errors` to disambiguate. |
 
 All non-timeout `httpx.HTTPError` (ConnectError, ProtocolError, NetworkError, etc.) are wrapped as `AgentScoreError(code="network_error", status_code=0)`.
 
@@ -207,11 +207,11 @@ try:
 except TokenExpiredError as e:
     print("Verify at:", e.verify_url, "poll with:", e.poll_secret)
 except QuotaExceededError as e:
-    print("Account quota reached — surface to user; don't retry.")
+    print("Account quota reached, surface to user; don't retry.")
 except AgentScoreTimeoutError:
-    print("Network timeout — retry with backoff.")
+    print("Network timeout, retry with backoff.")
 except AgentScoreError as e:
-    print(e.code, e.message)
+    print(e.code, str(e))
 ```
 
 ## Quota observability
@@ -224,10 +224,10 @@ quota = result.get("quota")
 if quota and quota["limit"] and quota["used"]:
     pct = (quota["used"] / quota["limit"]) * 100
     if pct > 80:
-        print(f"AgentScore quota at {pct:.1f}% — resets {quota['reset']}")
+        print(f"AgentScore quota at {pct:.1f}%, resets {quota['reset']}")
 ```
 
-`quota` is absent when the API doesn't emit the headers (Enterprise / unlimited tiers). On a 429 response the SDK raises `QuotaExceededError` / `RateLimitedError` instead of returning a body, so `quota` is only readable on successful calls — drive proactive alerting off the success-path field.
+`quota` is absent when the API doesn't emit the headers (Enterprise / unlimited tiers). On a 429 response the SDK raises `QuotaExceededError` / `RateLimitedError` instead of returning a body, so `quota` is only readable on successful calls; drive proactive alerting off the success-path field.
 
 ## Telemetry
 
@@ -235,7 +235,7 @@ if quota and quota["limit"] and quota["used"]:
 
 ## Documentation
 
-- [API Reference](https://docs.agentscore.sh)
+- [API Reference](https://docs.agentscore.com)
 
 ## License
 

{agentscore_py-2.4.2 → agentscore_py-2.5.0}/SECURITY.md

@@ -6,7 +6,7 @@ If you discover a security vulnerability, please report it responsibly.
 
 **Do not open a public GitHub issue for security vulnerabilities.**
 
-Instead, email us at **security@agentscore.sh** with:
+Instead, email us at **security@agentscore.com** with:
 
 - Description of the vulnerability
 - Steps to reproduce

{agentscore_py-2.4.2 → agentscore_py-2.5.0}/agentscore/__init__.py

@@ -17,6 +17,8 @@ from agentscore.types import (
     AgentMemoryHint,
     AgentMemoryIdentityPaths,
     AgentSummary,
+    AipProvenance,
+    AipSignatureMaterial,
     AssessResponse,
     AssociateWalletResponse,
     ChainEntry,
@@ -77,6 +79,8 @@ __all__ = [
     "AgentScore",
     "AgentScoreError",
     "AgentSummary",
+    "AipProvenance",
+    "AipSignatureMaterial",
     "AssessResponse",
     "AssociateWalletResponse",
     "ChainEntry",

{agentscore_py-2.4.2 → agentscore_py-2.5.0}/agentscore/client.py

@@ -27,7 +27,9 @@ _MAX_RETRY_WAIT_SECONDS = 10.0
 def _retry_after_seconds(response: httpx.Response) -> float:
     raw = response.headers.get("retry-after", "1")
     try:
-        return min(float(raw), _MAX_RETRY_WAIT_SECONDS)
+        # Clamp the lower bound to 0: a negative ``Retry-After`` (buggy/malicious proxy)
+        # would otherwise reach ``time.sleep(-n)`` and raise ValueError, crashing the retry.
+        return max(0.0, min(float(raw), _MAX_RETRY_WAIT_SECONDS))
     except (TypeError, ValueError):
         return 1.0
 
@@ -131,6 +133,7 @@ if TYPE_CHECKING:
     from collections.abc import Awaitable, Callable
 
     from agentscore.types import (
+        AipSignatureMaterial,
         AssessResponse,
         AssociateWalletResponse,
         CredentialCreateResponse,
@@ -151,12 +154,12 @@ class AgentScore:
     def __init__(
         self,
         api_key: str,
-        base_url: str = "https://api.agentscore.sh",
+        base_url: str = "https://api.agentscore.com",
         timeout: float = 10.0,
         user_agent: str | None = None,
     ):
         if not api_key:
-            raise ValueError("AgentScore API key is required. Get one at https://agentscore.sh/sign-up")
+            raise ValueError("AgentScore API key is required. Get one at https://www.agentscore.com/sign-up")
         self.api_key = api_key
         self.base_url = base_url.rstrip("/")
         self.timeout = timeout
@@ -260,18 +263,30 @@ class AgentScore:
         policy: DecisionPolicy | None = None,
         operator_token: str | None = None,
         signer: Signer | None = None,
+        aip_token: str | None = None,
+        aip_signature: AipSignatureMaterial | None = None,
     ) -> AssessResponse:
         """Assess a wallet or operator (paid, writes score on-the-fly).
 
         ``signer`` opts into server-side wallet-signer-match: when supplied,
         the API resolves the signer wallet against the claimed ``address`` and emits
         a ``signer_match`` block on the response. See :class:`Signer`.
+
+        ``aip_token`` (+ ``aip_signature``) supplies an AIP Agent Identity Token in place of
+        ``address`` / ``operator_token``: the API re-verifies the issuer signature, the RFC 9421
+        proof-of-possession, and the attested claims, then evaluates policy against them.
         """
         body: dict[str, Any] = {}
         if address:
             body["address"] = address
         if operator_token:
             body["operator_token"] = operator_token
+        # AIP Agent Identity Token path: the API re-verifies the IdP signature + claims
+        # server-side and evaluates policy against the attested identity.
+        if aip_token:
+            body["aip_token"] = aip_token
+        if aip_signature is not None:
+            body["aip_signature"] = dict(aip_signature)
         if chain:
             body["chain"] = chain
         if refresh is not None:
@@ -398,17 +413,23 @@ class AgentScore:
         policy: DecisionPolicy | None = None,
         operator_token: str | None = None,
         signer: Signer | None = None,
+        aip_token: str | None = None,
+        aip_signature: AipSignatureMaterial | None = None,
     ) -> AssessResponse:
         """Assess a wallet or operator (paid, writes score on-the-fly).
 
-        ``signer`` opts into server-side wallet-signer-match — async mirror of
-        :meth:`assess`.
+        ``signer`` opts into server-side wallet-signer-match; ``aip_token`` (+ ``aip_signature``)
+        supplies an AIP Agent Identity Token. Async mirror of :meth:`assess`.
         """
         body: dict[str, Any] = {}
         if address:
             body["address"] = address
         if operator_token:
             body["operator_token"] = operator_token
+        if aip_token:
+            body["aip_token"] = aip_token
+        if aip_signature is not None:
+            body["aip_signature"] = dict(aip_signature)
         if chain:
             body["chain"] = chain
         if refresh is not None:

{agentscore_py-2.4.2 → agentscore_py-2.5.0}/agentscore/errors.py

@@ -34,7 +34,7 @@ class PaymentRequiredError(AgentScoreError):
 class TokenExpiredError(AgentScoreError):
     """HTTP 401 with ``error.code = 'token_expired'`` — credential is no longer valid.
 
-    Covers both revoked and TTL-expired credentials; the API deliberately doesn't disclose
+    Covers both revoked and TTL-expired credentials; the API does not distinguish
     which. Body carries an auto-minted verification session — exposed here so callers recover
     without re-parsing ``details``.
     """

{agentscore_py-2.4.2 → agentscore_py-2.5.0}/agentscore/types.py

@@ -191,7 +191,7 @@ class SignerMatch(TypedDict):
     """Server-side wallet-signer-match verdict.
 
     Emitted on ``AssessResponse.signer_match`` when the request supplied
-    ``signer``. Mirrors the verdict shape commerce SDK gates produce locally;
+    ``signer``. Mirrors the verdict shape the gate produces locally;
     SDK consumers spread this into 403 bodies verbatim instead of re-deriving via 2
     extra ``/v1/assess`` round trips.
 
@@ -218,7 +218,7 @@ class SignerMatch(TypedDict):
     # Mirrors the top-level ``linked_wallets`` deny-guard — omitted on ``deny`` verdicts.
     linked_wallets: NotRequired[list[str]]
     # JSON-encoded ``{action, steps, user_message}`` envelope for SDK denial bodies.
-    # Authoritative copy lives server-side; SDK consumers spread this into their 403
+    # SDK consumers spread this into their 403
     # body without re-parsing.
     agent_instructions: NotRequired[str]
 
@@ -257,8 +257,7 @@ class SignerSanctionsUnavailable(TypedDict):
     """Server-side wallet-sanctions verdict — lookup itself failed.
 
     Fail-closed: the gate denies whenever a signer was supplied and the OFAC
-    lookup couldn't resolve. Falsely allowing a sanctioned settle is an OFAC
-    strict-liability violation; falsely denying a clean buyer is bad UX.
+    lookup couldn't resolve, because OFAC sanctions screening is strict-liability.
     """
 
     status: Literal["unavailable"]
@@ -268,10 +267,43 @@ class SignerSanctionsUnavailable(TypedDict):
 SignerSanctions = SignerSanctionsClear | SignerSanctionsHit | SignerSanctionsUnavailable
 
 
+class AipSignatureMaterial(TypedDict):
+    """RFC 9421 HTTP Message Signature material proving possession of the AIT-bound ``cnf`` key.
+
+    Forwarded alongside ``aip_token`` so ``/v1/assess`` can re-verify proof-of-possession
+    authoritatively; the API never sees the original agent-to-merchant request itself.
+    """
+
+    method: str  # HTTP method of the original agent-to-merchant request (``@method``)
+    authority: str  # Authority/host the agent signed (``@authority``)
+    path: str  # Request path the agent signed (``@path``)
+    signature_input: str  # Raw ``Signature-Input`` header value the agent sent
+    signature: str  # Raw ``Signature`` header value the agent sent
+
+
+class _AipProvenanceRequired(TypedDict):
+    issuer: str  # Canonical issuer URL of the AIT
+    subject: str  # The token's ``sub``: the IdP's subject identifier for the verified human
+
+
+class AipProvenance(_AipProvenanceRequired, total=False):
+    """Provenance block returned when the identity input was an AIP Agent Identity Token.
+
+    Surfaces which issuer attested the identity and the trust level it asserted.
+    """
+
+    trust_level: Literal["autonomous", "human_present", "human_confirmed"]
+    agent_provider: str
+    # True when /v1/assess re-verified the RFC 9421 proof-of-possession. Always true on a
+    # success response: the API fail-closes with an HTTP 400/401 error (not a 200 deny)
+    # when possession can't be proven.
+    pop_verified: bool
+
+
 class _AssessResponseRequired(TypedDict):
     decision: str | None
     decision_reasons: list[str]
-    identity_method: Literal["wallet", "operator_token"]
+    identity_method: Literal["wallet", "operator_token", "aip_token"]
 
 
 class PolicyExplanation(TypedDict, total=False):
@@ -314,6 +346,8 @@ class AssessResponse(_AssessResponseRequired, total=False):
     # Server-side OFAC SDN wallet-address verdict, returned only when the request supplied
     # ``signer``. Empty otherwise.
     signer_sanctions: NotRequired[SignerSanctions]
+    # Issuer provenance, returned only when ``identity_method == "aip_token"``.
+    aip: NotRequired[AipProvenance]
     # Quota state for this account, captured from response headers on the success path.
     # Use to monitor approach-to-cap proactively (warn at 80%, alert at 95%) before 429.
     quota: NotRequired[QuotaInfo]
@@ -529,6 +563,7 @@ NextStepsAction = Literal[
 class AgentMemoryIdentityPaths(TypedDict):
     wallet: str
     operator_token: str
+    agent_identity: NotRequired[str]
 
 
 class AgentMemoryHint(TypedDict):
@@ -545,6 +580,8 @@ class AgentMemoryHint(TypedDict):
     identity_check_endpoint: str
     list_wallets_endpoint: NotRequired[str]
     identity_paths: AgentMemoryIdentityPaths
+    # Issuer allowlist a merchant accepts for AIP Agent Identity Tokens, when advertised.
+    aip_trusted_issuers: NotRequired[list[str]]
     bootstrap: str
     do_not_persist_in_memory: list[str]
     persist_in_credential_store: list[str]

{agentscore_py-2.4.2 → agentscore_py-2.5.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentscore-py"
-version = "2.4.2"
+version = "2.5.0"
 description = "Python client for the AgentScore APIs"
 readme = "README.md"
 license = "MIT"
@@ -22,7 +22,7 @@ classifiers = [
 ]
 
 [project.urls]
-Homepage = "https://agentscore.sh"
+Homepage = "https://www.agentscore.com"
 Repository = "https://github.com/agentscore/python-sdk"
 Issues = "https://github.com/agentscore/python-sdk/issues"