open-agentpay 0.2.4__tar.gz → 0.2.8__tar.gz

{open_agentpay-0.2.4 → open_agentpay-0.2.8}/.gitignore

@@ -18,6 +18,7 @@ Thumbs.db
 
 # Node.js & pnpm
 node_modules/
+package-lock.json
 npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
@@ -82,8 +83,8 @@ release.properties
 out/
 
 # Visual Studio Code
-.vscode/*
-!.vscode/settings.json
+**/.vscode/*
+!**/.vscode/settings.json
 !.vscode/tasks.json
 !.vscode/launch.json
 !.vscode/extensions.json
@@ -119,8 +120,9 @@ docs/.vitepress/cache/
 docs/.vitepress/dist/
 internal-docs/
 
-# Local gateway config with runtime credentials
-gateway-go/configs/gateway.yaml
+# Local gateway/facilitator configs with runtime credentials
+services/gateway/configs/gateway.yaml
+services/facilitator/configs/facilitator.yaml
 
 # 同步产物不进 Git；手写的 index.md 与 reports/ 要进
 docs/specs/*.md
@@ -135,5 +137,15 @@ docs/zh/specs/adr/
 !docs/zh/specs/reports/
 !docs/zh/specs/reports/**
 
-# Agent skills
-.agents/skills/
+# Agent skills & local assistant configs
+.agents/
+skills-lock.json
+
+# Next.js build output
+.next/
+*.tsbuildinfo
+
+# Internal specifications & proprietary strategy docs (local only, do not push to public GitHub)
+specs/roadmap.md
+specs/zh/roadmap.md
+specs/zh/cn-enterprise-firewall-and-finops-strategy.md

{open_agentpay-0.2.4 → open_agentpay-0.2.8}/PKG-INFO

@@ -1,9 +1,9 @@
 Metadata-Version: 2.5
 Name: open-agentpay
-Version: 0.2.4
+Version: 0.2.8
 Summary: The Open-Source Payment Infrastructure & Financial Firewall for Autonomous AI Agents
-Project-URL: Homepage, https://github.com/open-agentpay/AgentPay
-Project-URL: Documentation, https://open-agentpay.github.io/AgentPay/
+Project-URL: Homepage, https://openagentpay.dev/
+Project-URL: Documentation, https://openagentpay.dev/
 Project-URL: Repository, https://github.com/open-agentpay/AgentPay
 Author: AgentPay Contributors
 License-Expression: Apache-2.0
@@ -33,7 +33,7 @@ Requires-Dist: langchain-core>=0.1.0; extra == 'langchain'
 Description-Content-Type: text/markdown
 
 <p align="center">
-  <a href="https://open-agentpay.github.io/AgentPay/">
+  <a href="https://openagentpay.dev/">
     <img src="https://raw.githubusercontent.com/open-agentpay/AgentPay/main/docs/public/logo.png" alt="AgentPay Logo" width="120" height="120" />
   </a>
 </p>
@@ -46,7 +46,7 @@ Description-Content-Type: text/markdown
 
 <p align="center">
   <a href="https://pypi.org/project/open-agentpay/"><img src="https://img.shields.io/pypi/v/open-agentpay.svg" alt="PyPI Version"></a>
-  <a href="https://open-agentpay.github.io/AgentPay/"><img src="https://img.shields.io/badge/Docs-Live-blue?logo=vitepress&logoColor=white" alt="Documentation"></a>
+  <a href="https://openagentpay.dev/"><img src="https://img.shields.io/badge/Docs-Live-blue?logo=vitepress&logoColor=white" alt="Documentation"></a>
   <a href="https://x.com/OpenAgentPay"><img src="https://img.shields.io/badge/Follow-%40OpenAgentPay-black?logo=x&logoColor=white" alt="Follow @OpenAgentPay"></a>
   <a href="https://github.com/open-agentpay/AgentPay/blob/main/LICENSE"><img src="https://img.shields.io/badge/License-Apache_2.0-blue.svg" alt="License: Apache-2.0"></a>
   <a href="https://github.com/open-agentpay/AgentPay"><img src="https://img.shields.io/badge/Protocol-x402_V2-orange.svg" alt="x402 V2"></a>
@@ -55,7 +55,7 @@ Description-Content-Type: text/markdown
 </p>
 
 <p align="center">
-  <a href="https://open-agentpay.github.io/AgentPay/">📚 Documentation</a> •
+  <a href="https://openagentpay.dev/">📚 Documentation</a> •
   <a href="https://github.com/open-agentpay/AgentPay">💻 GitHub Repository</a> •
   <a href="https://x.com/OpenAgentPay">🐦 Follow on X (@OpenAgentPay)</a> •
   <a href="https://github.com/open-agentpay/AgentPay/issues">🐛 Report Issue</a>
@@ -65,7 +65,7 @@ Description-Content-Type: text/markdown
 
 ## 💡 What is AgentPay?
 
-**AgentPay** equips autonomous AI agents with micro-payments (Circle USDC on Arbitrum Sepolia & Base) governed by an in-process, non-custodial **Financial Firewall**. It transparently intercepts `HTTP 402 Payment Required` responses, validates policy limits, and signs off-chain authorizations—protecting agent wallets against runaway loops and LLM hallucinations.
+**AgentPay** equips autonomous AI agents with micro-payments (Circle USDC on Arbitrum Sepolia & Base Sepolia) governed by an in-process, non-custodial **Financial Firewall**. It transparently intercepts `HTTP 402 Payment Required` responses, validates policy limits, and signs off-chain authorizations—protecting agent wallets against runaway loops and LLM hallucinations.
 
 > 📦 **Package Name Note**: The canonical PyPI distribution is [`open-agentpay`](https://pypi.org/project/open-agentpay/) (official aliases: `agentpay-core`, `agentpay-firewall`). Regardless of which package you install, you import `agentpay` in Python code.
 
@@ -89,16 +89,21 @@ pip install "open-agentpay[langchain]"
 Transparently intercepts HTTP 402 challenges, enforces local policy limits, and signs off-chain EIP-712/EIP-3009 authorizations:
 
 ```python
+import os
 from agentpay import AgentPayClient, LocalSigner
 from agentpay.policy import SQLitePolicyEngine, PolicyConfig
 
 # 1. Initialize local signer (non-custodial private key, 0 gas required)
-signer = LocalSigner("0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80")
+# ⚠️ TESTNET DEVELOPMENT ONLY: This fallback key is Hardhat/Anvil's public Account 0 key.
+# NEVER transfer mainnet funds to this address! In production, inject via environment variable:
+private_key = os.getenv("AGENT_PRIVATE_KEY", "0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80")
+signer = LocalSigner(private_key)
 
 # 2. Configure local financial firewall
 policy = SQLitePolicyEngine.create_in_memory(
     PolicyConfig(
         id="agent_firewall",
+        name="Agent Firewall",
         wallet_address=signer.address,
         max_per_tx_base_units=100_000,  # Max $0.10 per call
         rolling_budget_24h_base_units=1_000_000,  # Daily cap $1.00
@@ -119,13 +124,26 @@ print(response.json())
 For sub-millisecond execution using a pre-funded virtual ledger:
 
 ```python
+import os
 from agentpay import AgentPayClient, LocalSigner
 from agentpay.policy import SQLitePolicyEngine, PolicyConfig
 
+private_key = os.getenv("AGENT_PRIVATE_KEY", "0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80")
+signer = LocalSigner(private_key)
 client = AgentPayClient(
-    signer=LocalSigner("0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80"),
-    policy=SQLitePolicyEngine.create_in_memory(PolicyConfig(...)),
+    signer=signer,
+    policy=SQLitePolicyEngine.create_in_memory(
+        PolicyConfig(
+            id="wallet_firewall",
+            name="Wallet Firewall",
+            wallet_address=signer.address,
+            max_per_tx_base_units=100_000,
+            rolling_budget_24h_base_units=5_000_000,
+            whitelist_domains=frozenset(["gateway.seller.com"]),
+        )
+    ),
     headers={"Authorization": "Bearer agp_live_your_api_key"},
+    wallet_challenge_mode=True,
 )
 
 response = client.get("https://gateway.seller.com/v1/compute")
@@ -176,7 +194,7 @@ asyncio.run(main())
 |---|---|
 | **Zero-Trust Financial Firewall** | Enforces per-transaction caps, 24-hour rolling budgets, lifetime limits, and payee whitelists outside the LLM prompt. |
 | **Autonomous Circuit Breaker** | Automatically halts agent loops and freezes spending when request frequency exceeds safety thresholds (`circuit_max_rpm`). |
-| **Gasless Off-Chain Settlements** | AI Agents hold only Circle USDC; gas is sponsored on Arbitrum Sepolia & Base via EIP-3009 off-chain authorizations. |
+| **Gasless Off-Chain Settlements** | AI Agents hold only Circle USDC; gas is sponsored on Arbitrum Sepolia & Base Sepolia via EIP-3009 off-chain authorizations. |
 | **Agent Session & Audit Observability** | Automatic tracking headers (`X-Agent-Session-ID`, `X-Agent-Task-ID`) connect tool spending to tasks in the AgentPay Console. |
 | **Fail-Closed Guarantees** | Any policy violation, budget overrun, or upstream failure aborts safely with zero funds deducted. |
 
@@ -184,7 +202,7 @@ asyncio.run(main())
 
 ## 📖 Documentation & Community
 
-- **Official Documentation**: [https://open-agentpay.github.io/AgentPay/](https://open-agentpay.github.io/AgentPay/)
+- **Official Documentation**: [https://openagentpay.dev/](https://openagentpay.dev/)
 - **GitHub Repository**: [https://github.com/open-agentpay/AgentPay](https://github.com/open-agentpay/AgentPay)
 - **Twitter / X**: [@OpenAgentPay](https://x.com/OpenAgentPay)
 - **Issue Tracker**: [GitHub Issues](https://github.com/open-agentpay/AgentPay/issues)

{open_agentpay-0.2.4 → open_agentpay-0.2.8}/README.md

@@ -1,5 +1,5 @@
 <p align="center">
-  <a href="https://open-agentpay.github.io/AgentPay/">
+  <a href="https://openagentpay.dev/">
     <img src="https://raw.githubusercontent.com/open-agentpay/AgentPay/main/docs/public/logo.png" alt="AgentPay Logo" width="120" height="120" />
   </a>
 </p>
@@ -12,7 +12,7 @@
 
 <p align="center">
   <a href="https://pypi.org/project/open-agentpay/"><img src="https://img.shields.io/pypi/v/open-agentpay.svg" alt="PyPI Version"></a>
-  <a href="https://open-agentpay.github.io/AgentPay/"><img src="https://img.shields.io/badge/Docs-Live-blue?logo=vitepress&logoColor=white" alt="Documentation"></a>
+  <a href="https://openagentpay.dev/"><img src="https://img.shields.io/badge/Docs-Live-blue?logo=vitepress&logoColor=white" alt="Documentation"></a>
   <a href="https://x.com/OpenAgentPay"><img src="https://img.shields.io/badge/Follow-%40OpenAgentPay-black?logo=x&logoColor=white" alt="Follow @OpenAgentPay"></a>
   <a href="https://github.com/open-agentpay/AgentPay/blob/main/LICENSE"><img src="https://img.shields.io/badge/License-Apache_2.0-blue.svg" alt="License: Apache-2.0"></a>
   <a href="https://github.com/open-agentpay/AgentPay"><img src="https://img.shields.io/badge/Protocol-x402_V2-orange.svg" alt="x402 V2"></a>
@@ -21,7 +21,7 @@
 </p>
 
 <p align="center">
-  <a href="https://open-agentpay.github.io/AgentPay/">📚 Documentation</a> •
+  <a href="https://openagentpay.dev/">📚 Documentation</a> •
   <a href="https://github.com/open-agentpay/AgentPay">💻 GitHub Repository</a> •
   <a href="https://x.com/OpenAgentPay">🐦 Follow on X (@OpenAgentPay)</a> •
   <a href="https://github.com/open-agentpay/AgentPay/issues">🐛 Report Issue</a>
@@ -31,7 +31,7 @@
 
 ## 💡 What is AgentPay?
 
-**AgentPay** equips autonomous AI agents with micro-payments (Circle USDC on Arbitrum Sepolia & Base) governed by an in-process, non-custodial **Financial Firewall**. It transparently intercepts `HTTP 402 Payment Required` responses, validates policy limits, and signs off-chain authorizations—protecting agent wallets against runaway loops and LLM hallucinations.
+**AgentPay** equips autonomous AI agents with micro-payments (Circle USDC on Arbitrum Sepolia & Base Sepolia) governed by an in-process, non-custodial **Financial Firewall**. It transparently intercepts `HTTP 402 Payment Required` responses, validates policy limits, and signs off-chain authorizations—protecting agent wallets against runaway loops and LLM hallucinations.
 
 > 📦 **Package Name Note**: The canonical PyPI distribution is [`open-agentpay`](https://pypi.org/project/open-agentpay/) (official aliases: `agentpay-core`, `agentpay-firewall`). Regardless of which package you install, you import `agentpay` in Python code.
 
@@ -55,16 +55,21 @@ pip install "open-agentpay[langchain]"
 Transparently intercepts HTTP 402 challenges, enforces local policy limits, and signs off-chain EIP-712/EIP-3009 authorizations:
 
 ```python
+import os
 from agentpay import AgentPayClient, LocalSigner
 from agentpay.policy import SQLitePolicyEngine, PolicyConfig
 
 # 1. Initialize local signer (non-custodial private key, 0 gas required)
-signer = LocalSigner("0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80")
+# ⚠️ TESTNET DEVELOPMENT ONLY: This fallback key is Hardhat/Anvil's public Account 0 key.
+# NEVER transfer mainnet funds to this address! In production, inject via environment variable:
+private_key = os.getenv("AGENT_PRIVATE_KEY", "0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80")
+signer = LocalSigner(private_key)
 
 # 2. Configure local financial firewall
 policy = SQLitePolicyEngine.create_in_memory(
     PolicyConfig(
         id="agent_firewall",
+        name="Agent Firewall",
         wallet_address=signer.address,
         max_per_tx_base_units=100_000,  # Max $0.10 per call
         rolling_budget_24h_base_units=1_000_000,  # Daily cap $1.00
@@ -85,13 +90,26 @@ print(response.json())
 For sub-millisecond execution using a pre-funded virtual ledger:
 
 ```python
+import os
 from agentpay import AgentPayClient, LocalSigner
 from agentpay.policy import SQLitePolicyEngine, PolicyConfig
 
+private_key = os.getenv("AGENT_PRIVATE_KEY", "0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80")
+signer = LocalSigner(private_key)
 client = AgentPayClient(
-    signer=LocalSigner("0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80"),
-    policy=SQLitePolicyEngine.create_in_memory(PolicyConfig(...)),
+    signer=signer,
+    policy=SQLitePolicyEngine.create_in_memory(
+        PolicyConfig(
+            id="wallet_firewall",
+            name="Wallet Firewall",
+            wallet_address=signer.address,
+            max_per_tx_base_units=100_000,
+            rolling_budget_24h_base_units=5_000_000,
+            whitelist_domains=frozenset(["gateway.seller.com"]),
+        )
+    ),
     headers={"Authorization": "Bearer agp_live_your_api_key"},
+    wallet_challenge_mode=True,
 )
 
 response = client.get("https://gateway.seller.com/v1/compute")
@@ -142,7 +160,7 @@ asyncio.run(main())
 |---|---|
 | **Zero-Trust Financial Firewall** | Enforces per-transaction caps, 24-hour rolling budgets, lifetime limits, and payee whitelists outside the LLM prompt. |
 | **Autonomous Circuit Breaker** | Automatically halts agent loops and freezes spending when request frequency exceeds safety thresholds (`circuit_max_rpm`). |
-| **Gasless Off-Chain Settlements** | AI Agents hold only Circle USDC; gas is sponsored on Arbitrum Sepolia & Base via EIP-3009 off-chain authorizations. |
+| **Gasless Off-Chain Settlements** | AI Agents hold only Circle USDC; gas is sponsored on Arbitrum Sepolia & Base Sepolia via EIP-3009 off-chain authorizations. |
 | **Agent Session & Audit Observability** | Automatic tracking headers (`X-Agent-Session-ID`, `X-Agent-Task-ID`) connect tool spending to tasks in the AgentPay Console. |
 | **Fail-Closed Guarantees** | Any policy violation, budget overrun, or upstream failure aborts safely with zero funds deducted. |
 
@@ -150,7 +168,7 @@ asyncio.run(main())
 
 ## 📖 Documentation & Community
 
-- **Official Documentation**: [https://open-agentpay.github.io/AgentPay/](https://open-agentpay.github.io/AgentPay/)
+- **Official Documentation**: [https://openagentpay.dev/](https://openagentpay.dev/)
 - **GitHub Repository**: [https://github.com/open-agentpay/AgentPay](https://github.com/open-agentpay/AgentPay)
 - **Twitter / X**: [@OpenAgentPay](https://x.com/OpenAgentPay)
 - **Issue Tracker**: [GitHub Issues](https://github.com/open-agentpay/AgentPay/issues)

{open_agentpay-0.2.4 → open_agentpay-0.2.8}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "open-agentpay"
-version = "0.2.4"
+version = "0.2.8"
 description = "The Open-Source Payment Infrastructure & Financial Firewall for Autonomous AI Agents"
 readme = "README.md"
 license = "Apache-2.0"
@@ -44,8 +44,8 @@ dev = [
 ]
 
 [project.urls]
-Homepage = "https://github.com/open-agentpay/AgentPay"
-Documentation = "https://open-agentpay.github.io/AgentPay/"
+Homepage = "https://openagentpay.dev/"
+Documentation = "https://openagentpay.dev/"
 Repository = "https://github.com/open-agentpay/AgentPay"
 
 [tool.hatch.build.targets.wheel]

{open_agentpay-0.2.4 → open_agentpay-0.2.8}/src/agentpay/__init__.py

@@ -3,7 +3,7 @@ AgentPay Python SDK
 The Open-Source Payment Infrastructure & Financial Firewall for Autonomous AI Agents.
 """
 
-__version__ = "0.2.4"
+__version__ = "0.2.8"
 
 from agentpay.client import (
     AgentPayClient,

{open_agentpay-0.2.4 → open_agentpay-0.2.8}/src/agentpay/budget/__init__.py

@@ -14,6 +14,7 @@ from agentpay.policy.models import (
     PolicyConfig,
     PolicyDecision,
     ReservationToken,
+    WhitelistMode,
 )
 
 # Backward compatibility / convenient domain aliases
@@ -34,4 +35,5 @@ __all__ = [
     "PolicyEvaluationResult",
     "PolicyStatus",
     "ReservationToken",
+    "WhitelistMode",
 ]

{open_agentpay-0.2.4 → open_agentpay-0.2.8}/src/agentpay/client/client.py

@@ -57,22 +57,22 @@ class AgentPayClient(httpx.Client):
     """
 
     def __init__(
-            self,
-            signer: ISigner,
-            policy: IPolicyEngine,
-            *,
-            transport: httpx.BaseTransport | None = None,
-            auto_retry_on_402: bool = True,
-            raise_on_policy_rejection: bool = False,
-            clock: Callable[[], int] | None = None,
-            unmetered_credential_policy: CredentialMode = "block",
-            credential_headers: tuple[str, ...] = DEFAULT_CREDENTIAL_HEADERS,
-            credential_value_prefixes: tuple[str, ...] = DEFAULT_CREDENTIAL_VALUE_PREFIXES,
-            estimate_cost: Callable[[httpx.Request], int] | None = None,
-            actual_cost: Callable[[httpx.Response], int | None] | None = None,
-            credential_ttl_seconds: int = 60,
-            wallet_challenge_mode: bool = False,
-            **kwargs: Any,
+        self,
+        signer: ISigner,
+        policy: IPolicyEngine,
+        *,
+        transport: httpx.BaseTransport | None = None,
+        auto_retry_on_402: bool = True,
+        raise_on_policy_rejection: bool = False,
+        clock: Callable[[], int] | None = None,
+        unmetered_credential_policy: CredentialMode = "block",
+        credential_headers: tuple[str, ...] = DEFAULT_CREDENTIAL_HEADERS,
+        credential_value_prefixes: tuple[str, ...] = DEFAULT_CREDENTIAL_VALUE_PREFIXES,
+        estimate_cost: Callable[[httpx.Request], int] | None = None,
+        actual_cost: Callable[[httpx.Response], int | None] | None = None,
+        credential_ttl_seconds: int = 60,
+        wallet_challenge_mode: bool = False,
+        **kwargs: Any,
     ) -> None:
         inner_kwargs = _inner_transport_kwargs(kwargs)
 
@@ -101,10 +101,10 @@ class AgentPayClient(httpx.Client):
         super().__init__(transport=agent_transport, **kwargs)
 
     def async_client(
-            self,
-            *,
-            transport: httpx.AsyncBaseTransport | None = None,
-            **kwargs: Any,
+        self,
+        *,
+        transport: httpx.AsyncBaseTransport | None = None,
+        **kwargs: Any,
     ) -> AsyncAgentPayClient:
         """Create an AsyncAgentPayClient sharing the same signer, policy and firewall options."""
         options = {**self._agentpay_options, **{k: v for k, v in kwargs.items() if k in self._agentpay_options}}
@@ -127,22 +127,22 @@ class AsyncAgentPayClient(httpx.AsyncClient):
     """
 
     def __init__(
-            self,
-            signer: ISigner,
-            policy: IPolicyEngine,
-            *,
-            transport: httpx.AsyncBaseTransport | None = None,
-            auto_retry_on_402: bool = True,
-            raise_on_policy_rejection: bool = False,
-            clock: Callable[[], int] | None = None,
-            unmetered_credential_policy: CredentialMode = "block",
-            credential_headers: tuple[str, ...] = DEFAULT_CREDENTIAL_HEADERS,
-            credential_value_prefixes: tuple[str, ...] = DEFAULT_CREDENTIAL_VALUE_PREFIXES,
-            estimate_cost: Callable[[httpx.Request], int] | None = None,
-            actual_cost: Callable[[httpx.Response], int | None] | None = None,
-            credential_ttl_seconds: int = 60,
-            wallet_challenge_mode: bool = False,
-            **kwargs: Any,
+        self,
+        signer: ISigner,
+        policy: IPolicyEngine,
+        *,
+        transport: httpx.AsyncBaseTransport | None = None,
+        auto_retry_on_402: bool = True,
+        raise_on_policy_rejection: bool = False,
+        clock: Callable[[], int] | None = None,
+        unmetered_credential_policy: CredentialMode = "block",
+        credential_headers: tuple[str, ...] = DEFAULT_CREDENTIAL_HEADERS,
+        credential_value_prefixes: tuple[str, ...] = DEFAULT_CREDENTIAL_VALUE_PREFIXES,
+        estimate_cost: Callable[[httpx.Request], int] | None = None,
+        actual_cost: Callable[[httpx.Response], int | None] | None = None,
+        credential_ttl_seconds: int = 60,
+        wallet_challenge_mode: bool = False,
+        **kwargs: Any,
     ) -> None:
         inner_kwargs = _inner_transport_kwargs(kwargs)
 

{open_agentpay-0.2.4 → open_agentpay-0.2.8}/src/agentpay/client/transport.py

@@ -111,26 +111,27 @@ def _safe_record_failure(policy: Any, reason: str) -> None:
 
 class _AgentPayCore:
     def __init__(
-            self,
-            signer: ISigner,
-            policy: IPolicyEngine,
-            *,
-            auto_retry_on_402: bool,
-            raise_on_policy_rejection: bool,
-            clock: Callable[[], int] | None,
-            unmetered_credential_policy: CredentialMode,
-            credential_headers: tuple[str, ...],
-            credential_value_prefixes: tuple[str, ...],
-            estimate_cost: Callable[[httpx.Request], int] | None,
-            actual_cost: Callable[[httpx.Response], int | None] | None,
-            credential_ttl_seconds: int,
-            wallet_challenge_mode: bool,
+        self,
+        signer: ISigner,
+        policy: IPolicyEngine,
+        *,
+        auto_retry_on_402: bool,
+        raise_on_policy_rejection: bool,
+        clock: Callable[[], int] | None,
+        unmetered_credential_policy: CredentialMode,
+        credential_headers: tuple[str, ...],
+        credential_value_prefixes: tuple[str, ...],
+        estimate_cost: Callable[[httpx.Request], int] | None,
+        actual_cost: Callable[[httpx.Response], int | None] | None,
+        credential_ttl_seconds: int,
+        wallet_challenge_mode: bool,
     ) -> None:
         if unmetered_credential_policy not in ("block", "meter", "allow"):
             raise ValueError(
-                f"unmetered_credential_policy must be block/meter/allow, got {unmetered_credential_policy!r}")
+                f"unmetered_credential_policy must be block/meter/allow, got {unmetered_credential_policy!r}"
+            )
         if unmetered_credential_policy == "meter" and (
-                estimate_cost is None or not isinstance(policy, IMeteredPolicyEngine)
+            estimate_cost is None or not isinstance(policy, IMeteredPolicyEngine)
         ):
             raise ValueError("meter mode requires estimate_cost and a policy implementing IMeteredPolicyEngine")
 
@@ -182,9 +183,7 @@ class _AgentPayCore:
         try:
             estimate = self._estimate_cost(request)
         except Exception as exc:  # noqa: BLE001
-            raise PolicyViolationError(
-                PolicyErrorCode.INVALID_AMOUNT_FORMAT, "estimate_cost callback failed"
-            ) from exc
+            raise PolicyViolationError(PolicyErrorCode.INVALID_AMOUNT_FORMAT, "estimate_cost callback failed") from exc
 
         intent_id = f"cred_{uuid.uuid4().hex}"
         decision = self._policy.reserve_metered(  # type: ignore[attr-defined]
@@ -225,11 +224,15 @@ class _AgentPayCore:
         if challenge.is_expired(self._clock()):
             return None
         if challenge.scheme not in ("EIP-3009", "agentpay-wallet"):
-            raise PolicyViolationError(PolicyErrorCode.POLICY_SYSTEM_ERROR, f"unsupported payment scheme: {challenge.scheme}")
+            raise PolicyViolationError(
+                PolicyErrorCode.POLICY_SYSTEM_ERROR, f"unsupported payment scheme: {challenge.scheme}"
+            )
         if challenge.scheme == "agentpay-wallet":
             expected_binding = self._request_binding(request)
             if (challenge.extensions or {}).get("requestBinding") != expected_binding:
-                raise PolicyViolationError(PolicyErrorCode.POLICY_SYSTEM_ERROR, "wallet challenge requestBinding mismatch")
+                raise PolicyViolationError(
+                    PolicyErrorCode.POLICY_SYSTEM_ERROR, "wallet challenge requestBinding mismatch"
+                )
             if not (challenge.extensions or {}).get("routeId"):
                 raise PolicyViolationError(PolicyErrorCode.POLICY_SYSTEM_ERROR, "wallet challenge missing routeId")
             raw_path, _, _ = request.url.raw_path.partition(b"?")
@@ -272,12 +275,18 @@ class _AgentPayCore:
             if challenge.scheme == "agentpay-wallet":
                 # SECURITY-REVIEW: the challenge-bound reservation is the buyer-side approval gate.
                 if reservation.intent_id != challenge.challenge_id or reservation.amount != challenge.amount_base_units:
-                    raise PolicyViolationError(PolicyErrorCode.POLICY_SYSTEM_ERROR, "wallet reservation does not match challenge")
+                    raise PolicyViolationError(
+                        PolicyErrorCode.POLICY_SYSTEM_ERROR, "wallet reservation does not match challenge"
+                    )
                 if reservation.expires_at < challenge.valid_before:
-                    raise PolicyViolationError(PolicyErrorCode.POLICY_SYSTEM_ERROR, "wallet reservation expires before challenge")
+                    raise PolicyViolationError(
+                        PolicyErrorCode.POLICY_SYSTEM_ERROR, "wallet reservation expires before challenge"
+                    )
                 request_binding = (challenge.extensions or {}).get("requestBinding")
                 if not request_binding:
-                    raise PolicyViolationError(PolicyErrorCode.POLICY_SYSTEM_ERROR, "wallet challenge missing requestBinding")
+                    raise PolicyViolationError(
+                        PolicyErrorCode.POLICY_SYSTEM_ERROR, "wallet challenge missing requestBinding"
+                    )
                 wallet_auth = WalletAuthorization(
                     challengeId=challenge.challenge_id,
                     nonce="0x" + secrets.token_bytes(32).hex(),
@@ -291,8 +300,11 @@ class _AgentPayCore:
                 headers["PAYMENT-SIGNATURE"] = encode_wallet_authorization(wallet_auth)
                 content = request.read()
                 return httpx.Request(
-                    method=request.method, url=request.url, headers=headers,
-                    content=content, extensions=dict(request.extensions),
+                    method=request.method,
+                    url=request.url,
+                    headers=headers,
+                    content=content,
+                    extensions=dict(request.extensions),
                 )
             authorization = self._signer.sign_payment_authorization(challenge, reservation)
             return _clone_request_with_authorization(request, authorization)
@@ -328,21 +340,21 @@ class AgentPayTransport(_AgentPayCore, httpx.BaseTransport):
     """
 
     def __init__(
-            self,
-            inner_transport: httpx.BaseTransport,
-            signer: ISigner,
-            policy: IPolicyEngine,
-            *,
-            auto_retry_on_402: bool = True,
-            raise_on_policy_rejection: bool = False,
-            clock: Callable[[], int] | None = None,
-            unmetered_credential_policy: CredentialMode = "block",
-            credential_headers: tuple[str, ...] = DEFAULT_CREDENTIAL_HEADERS,
-            credential_value_prefixes: tuple[str, ...] = DEFAULT_CREDENTIAL_VALUE_PREFIXES,
-            estimate_cost: Callable[[httpx.Request], int] | None = None,
-            actual_cost: Callable[[httpx.Response], int | None] | None = None,
-            credential_ttl_seconds: int = 60,
-            wallet_challenge_mode: bool = False,
+        self,
+        inner_transport: httpx.BaseTransport,
+        signer: ISigner,
+        policy: IPolicyEngine,
+        *,
+        auto_retry_on_402: bool = True,
+        raise_on_policy_rejection: bool = False,
+        clock: Callable[[], int] | None = None,
+        unmetered_credential_policy: CredentialMode = "block",
+        credential_headers: tuple[str, ...] = DEFAULT_CREDENTIAL_HEADERS,
+        credential_value_prefixes: tuple[str, ...] = DEFAULT_CREDENTIAL_VALUE_PREFIXES,
+        estimate_cost: Callable[[httpx.Request], int] | None = None,
+        actual_cost: Callable[[httpx.Response], int | None] | None = None,
+        credential_ttl_seconds: int = 60,
+        wallet_challenge_mode: bool = False,
     ) -> None:
         httpx.BaseTransport.__init__(self)
         _AgentPayCore.__init__(
@@ -415,21 +427,21 @@ class AsyncAgentPayTransport(_AgentPayCore, httpx.AsyncBaseTransport):
     """
 
     def __init__(
-            self,
-            inner_transport: httpx.AsyncBaseTransport,
-            signer: ISigner,
-            policy: IPolicyEngine,
-            *,
-            auto_retry_on_402: bool = True,
-            raise_on_policy_rejection: bool = False,
-            clock: Callable[[], int] | None = None,
-            unmetered_credential_policy: CredentialMode = "block",
-            credential_headers: tuple[str, ...] = DEFAULT_CREDENTIAL_HEADERS,
-            credential_value_prefixes: tuple[str, ...] = DEFAULT_CREDENTIAL_VALUE_PREFIXES,
-            estimate_cost: Callable[[httpx.Request], int] | None = None,
-            actual_cost: Callable[[httpx.Response], int | None] | None = None,
-            credential_ttl_seconds: int = 60,
-            wallet_challenge_mode: bool = False,
+        self,
+        inner_transport: httpx.AsyncBaseTransport,
+        signer: ISigner,
+        policy: IPolicyEngine,
+        *,
+        auto_retry_on_402: bool = True,
+        raise_on_policy_rejection: bool = False,
+        clock: Callable[[], int] | None = None,
+        unmetered_credential_policy: CredentialMode = "block",
+        credential_headers: tuple[str, ...] = DEFAULT_CREDENTIAL_HEADERS,
+        credential_value_prefixes: tuple[str, ...] = DEFAULT_CREDENTIAL_VALUE_PREFIXES,
+        estimate_cost: Callable[[httpx.Request], int] | None = None,
+        actual_cost: Callable[[httpx.Response], int | None] | None = None,
+        credential_ttl_seconds: int = 60,
+        wallet_challenge_mode: bool = False,
     ) -> None:
         httpx.AsyncBaseTransport.__init__(self)
         _AgentPayCore.__init__(