spaps-server-quickstart 0.6.1__tar.gz → 0.6.3__tar.gz

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.3}/CHANGELOG.md

@@ -6,6 +6,17 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and
 
 ## [Unreleased]
 
+### Fixed
+
+- `entitlements.grant_entitlement` now treats a partial-UNIQUE-index violation (the Stripe entitlement dedupe indexes from migration `000000000044`) as the idempotent "already granted" case: it rolls back the aborted transaction, re-fetches the winning row, and returns it with `created=False`. Previously a concurrent grant for the same checkout/subscription raised an unhandled `IntegrityError` that poisoned the DB session and could wedge Stripe webhook processing (the event was never marked processed, so Stripe retried indefinitely). A genuine non-dedupe integrity error still fails closed (re-raises). (sp-entitlement-grant-integrityerror-idempotency-b5sl)
+
+## [0.6.2] - 2026-06-01
+
+### Changed
+
+- Raised the FastAPI lower bound to `>=0.120.0` and added an explicit `starlette>=0.49.1,<2.0` dependency floor so downstream services can resolve Starlette security fixes without audit ignores.
+- Raised the `cryptography` lower bound to `>=46.0.7` and relaxed the upper bound to `<49.0` so downstream services can adopt current CVE-fixed releases.
+
 ## [0.6.1] - 2026-06-01
 
 ### Changed

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: spaps-server-quickstart
-Version: 0.6.1
+Version: 0.6.3
 Summary: Shared FastAPI/Celery scaffolding for Sweet Potato service backends.
 Project-URL: Homepage, https://api.sweetpotato.dev
 Project-URL: Repository, https://github.com/sweet-potato/spaps
@@ -21,11 +21,12 @@ Requires-Dist: asyncpg<0.31,>=0.30.0
 Requires-Dist: bcrypt<6.0,>=4.0.0
 Requires-Dist: botocore<2.0,>=1.35.0
 Requires-Dist: celery<6.0,>=5.5.3
-Requires-Dist: cryptography<46.0,>=42.0.0
+Requires-Dist: cryptography<49.0,>=46.0.7
 Requires-Dist: email-validator<3.0,>=2.1.0
 Requires-Dist: eth-account<1.0,>=0.13.0
-Requires-Dist: fastapi<0.120,>=0.118.0
+Requires-Dist: fastapi<1.0,>=0.120.0
 Requires-Dist: greenlet<4.0,>=3.0.3
+Requires-Dist: httpcore<2.0,>=1.0.9
 Requires-Dist: httpx<0.29,>=0.28.1
 Requires-Dist: orjson<4.0,>=3.10.0
 Requires-Dist: packaging<27.0,>=23.0
@@ -41,6 +42,7 @@ Requires-Dist: slowapi<1.0,>=0.1.9
 Requires-Dist: solders<1.0,>=0.21.0
 Requires-Dist: spaps>=0.1.2
 Requires-Dist: sqlalchemy<3.0,>=2.0.30
+Requires-Dist: starlette<2.0,>=0.49.1
 Requires-Dist: stripe<12.0,>=8.0.0
 Requires-Dist: structlog<26.0,>=25.4.0
 Requires-Dist: uvicorn[standard]<0.38,>=0.37.0
@@ -295,7 +297,7 @@ From the repository root: `make pytest`, `make lint`, `make typecheck`, `make py
 ## Metadata
 
 - `package_name`: `spaps-server-quickstart`
-- `latest_version`: `0.6.1`
+- `latest_version`: `0.6.2`
 - `minimum_runtime`: `Python >=3.12`
 - `api_base_url`: `https://api.sweetpotato.dev`
 

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.3}/README.md

@@ -216,7 +216,7 @@ From the repository root: `make pytest`, `make lint`, `make typecheck`, `make py
 ## Metadata
 
 - `package_name`: `spaps-server-quickstart`
-- `latest_version`: `0.6.1`
+- `latest_version`: `0.6.2`
 - `minimum_runtime`: `Python >=3.12`
 - `api_base_url`: `https://api.sweetpotato.dev`
 

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.3}/docs/UPGRADING.md

@@ -4,6 +4,16 @@ When `spaps-server-quickstart` publishes new releases, dependent services (e.g.
 `consumer_server`, `ingredient_server`) need a predictable upgrade cadence. Follow this
 checklist whenever we cut a release or adopt a newer version downstream.
 
+## 0.6.2
+
+This is a dependency-bound patch release only. It permits FastAPI 0.120+,
+requires Starlette 0.49.1 or newer, and requires `cryptography` 46.0.7 or
+newer without requiring any SPAPS application-code migration.
+
+Downstream services should refresh their dependency lockfile after bumping
+`spaps-server-quickstart` to 0.6.2, then run their normal lint, typecheck, test,
+and security-audit gates.
+
 ## 0.6.1
 
 This is a dependency-bound patch release only. It permits FastAPI 0.119.x

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "spaps-server-quickstart"
-version = "0.6.1"
+version = "0.6.3"
 description = "Shared FastAPI/Celery scaffolding for Sweet Potato service backends."
 readme = "README.md"
 requires-python = ">=3.12"
@@ -23,7 +23,8 @@ classifiers = [
   "Topic :: Internet :: WWW/HTTP",
 ]
 dependencies = [
-  "fastapi>=0.118.0,<0.120",
+  "fastapi>=0.120.0,<1.0",
+  "starlette>=0.49.1,<2.0",
   "uvicorn[standard]>=0.37.0,<0.38",
   "sqlalchemy>=2.0.30,<3.0",
   "asyncpg>=0.30.0,<0.31",
@@ -40,6 +41,7 @@ dependencies = [
   "celery>=5.5.3,<6.0",
   "redis>=6.4.0,<7.0",
   "httpx>=0.28.1,<0.29",
+  "httpcore>=1.0.9,<2.0",
   "orjson>=3.10.0,<4.0",
   "packaging>=23.0,<27.0",
   "spaps>=0.1.2",
@@ -55,7 +57,7 @@ dependencies = [
   # Phase 3-4: Stripe + Entitlements
   "stripe>=8.0.0,<12.0",
   # Phase 7: PII Encryption (AES-256-GCM + HKDF-SHA256)
-  "cryptography>=42.0.0,<46.0",
+  "cryptography>=46.0.7,<49.0",
 ]
 
 [project.optional-dependencies]

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.3}/src/spaps_server_quickstart/__init__.py

@@ -60,7 +60,7 @@ from .sdk import (
     FeatureContext,
 )
 
-__version__ = "0.6.1"
+__version__ = "0.6.3"
 
 __all__ = [
     "create_app",

spaps_server_quickstart-0.6.3/src/spaps_server_quickstart/celery_app.py

@@ -0,0 +1,11 @@
+"""Celery application for SPAPS background tasks."""
+
+from __future__ import annotations
+
+from .spaps_settings import get_spaps_settings
+from .tasks import create_celery_app
+
+celery_app = create_celery_app(get_spaps_settings(), task_modules=[])
+celery_app.set_default()
+
+__all__ = ["celery_app"]

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.3}/src/spaps_server_quickstart/domains/_db/base.py

@@ -23,7 +23,6 @@ class Base(DeclarativeBase):
     ``__tablename__`` explicitly — no magic name derivation.
     """
 
-    pass
 
 
 # Re-export for convenience so domain models can do:

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.3}/src/spaps_server_quickstart/domains/_db/model_registry.py

@@ -10,6 +10,7 @@ _MODEL_MODULES = (
     "spaps_server_quickstart.domains.app_links.models",
     "spaps_server_quickstart.domains.billing_accounts.models",
     "spaps_server_quickstart.domains.applications.models",
+    "spaps_server_quickstart.domains.auth.models",
     "spaps_server_quickstart.domains.audit.models",
     "spaps_server_quickstart.domains.cfo.models",
     "spaps_server_quickstart.domains.crypto.models",
@@ -18,6 +19,7 @@ _MODEL_MODULES = (
     "spaps_server_quickstart.domains.email.models",
     "spaps_server_quickstart.domains.entitlements.models",
     "spaps_server_quickstart.domains.issue_reporting_platform.models",
+    "spaps_server_quickstart.domains.marketing_events.models",
     "spaps_server_quickstart.domains.notifications.models",
     "spaps_server_quickstart.domains.policies.models",
     "spaps_server_quickstart.domains.secure_messages.models",

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.3}/src/spaps_server_quickstart/domains/affiliate_referrals/router.py

@@ -59,7 +59,7 @@ async def register_affiliate(
     user: CurrentUser,
 ):
     """Register as an affiliate with a vanity slug."""
-    result = await service.register_affiliate(
+    return await service.register_affiliate(
         db,
         user_id=UUID(str(user.id)),
         affiliate_type=body.affiliate_type,
@@ -68,7 +68,6 @@ async def register_affiliate(
         payout_wallet_address=body.payout_wallet_address,
         payout_chain=body.payout_chain,
     )
-    return result
 
 
 @affiliates_router.get("/me")
@@ -79,12 +78,11 @@ async def get_my_affiliate(
     agent_id: str | None = Query(default=None),
 ):
     """Get my affiliate profile."""
-    result = await service.get_my_affiliate(
+    return await service.get_my_affiliate(
         db,
         user_id=UUID(str(user.id)),
         agent_id=UUID(agent_id) if agent_id else None,
     )
-    return result
 
 
 @affiliates_router.put("/me")
@@ -96,7 +94,7 @@ async def update_my_affiliate(
     agent_id: str | None = Query(default=None),
 ):
     """Update my affiliate profile."""
-    result = await service.update_my_affiliate(
+    return await service.update_my_affiliate(
         db,
         user_id=UUID(str(user.id)),
         agent_id=UUID(agent_id) if agent_id else None,
@@ -105,7 +103,6 @@ async def update_my_affiliate(
         payout_chain=body.payout_chain,
         is_active=body.is_active,
     )
-    return result
 
 
 # ---------------------------------------------------------------------------
@@ -124,7 +121,7 @@ async def get_commissions(
     since: str | None = Query(default=None),
 ):
     """Get commission history."""
-    result = await service.get_commissions(
+    return await service.get_commissions(
         db,
         user_id=UUID(str(user.id)),
         agent_id=UUID(agent_id) if agent_id else None,
@@ -133,7 +130,6 @@ async def get_commissions(
         limit=pagination.limit,
         offset=pagination.offset,
     )
-    return result
 
 
 @affiliates_router.get("/me/referrals")
@@ -145,14 +141,13 @@ async def get_my_referrals(
     agent_id: str | None = Query(default=None),
 ):
     """Get direct referrals."""
-    result = await service.get_my_referrals(
+    return await service.get_my_referrals(
         db,
         user_id=UUID(str(user.id)),
         agent_id=UUID(agent_id) if agent_id else None,
         limit=pagination.limit,
         offset=pagination.offset,
     )
-    return result
 
 
 @affiliates_router.get("/me/tree")
@@ -163,12 +158,11 @@ async def get_referral_tree(
     agent_id: str | None = Query(default=None),
 ):
     """Get referral tree summary (3 levels)."""
-    result = await service.get_referral_tree(
+    return await service.get_referral_tree(
         db,
         user_id=UUID(str(user.id)),
         agent_id=UUID(agent_id) if agent_id else None,
     )
-    return result
 
 
 # ---------------------------------------------------------------------------
@@ -184,14 +178,13 @@ async def request_payout(
     user: CurrentUser,
 ):
     """Request USDC payout."""
-    result = await service.request_payout(
+    return await service.request_payout(
         db,
         user_id=UUID(str(user.id)),
         agent_id=UUID(body.agent_id) if body.agent_id else None,
         amount_cents=body.amount_cents,
         application_id=UUID(str(application.id)),
     )
-    return result
 
 
 @affiliates_router.get("/me/payouts")
@@ -204,7 +197,7 @@ async def get_my_payouts(
     status: str | None = Query(default=None),
 ):
     """Get payout history."""
-    result = await service.get_my_payouts(
+    return await service.get_my_payouts(
         db,
         user_id=UUID(str(user.id)),
         agent_id=UUID(agent_id) if agent_id else None,
@@ -212,7 +205,6 @@ async def get_my_payouts(
         limit=pagination.limit,
         offset=pagination.offset,
     )
-    return result
 
 
 # ===========================================================================
@@ -242,14 +234,13 @@ async def record_click(
     ip_address = request.client.host if request.client else "unknown"
     user_agent = request.headers.get("User-Agent")
 
-    result = await service.record_click(
+    return await service.record_click(
         db,
         slug=body.slug,
         application_id=request_application_id,
         ip_address=ip_address,
         user_agent=user_agent,
     )
-    return result
 
 
 @referrals_router.post("/attribute", status_code=201)
@@ -264,7 +255,7 @@ async def attribute_referral(
     The caller must own the referred entity, and click IDs are resolved only
     inside the current API key application.
     """
-    result = await service.attribute_referral(
+    return await service.attribute_referral(
         db,
         referred_entity_type=body.referred_entity_type,
         referred_entity_id=UUID(body.referred_entity_id),
@@ -273,7 +264,6 @@ async def attribute_referral(
         slug=body.slug,
         application_id=UUID(str(application.id)),
     )
-    return result
 
 
 # ===========================================================================
@@ -292,13 +282,12 @@ async def list_admin_payouts(
     status: str | None = Query(default="requested"),
 ):
     """List payout queue (admin only)."""
-    result = await service.list_admin_payouts(
+    return await service.list_admin_payouts(
         db,
         status=status,
         limit=pagination.limit,
         offset=pagination.offset,
     )
-    return result
 
 
 @affiliate_admin_router.post("/{payout_id}/approve")
@@ -309,12 +298,11 @@ async def approve_payout(
     user: AdminUser,
 ):
     """Approve a payout request (admin only)."""
-    result = await service.approve_payout(
+    return await service.approve_payout(
         db,
         payout_id=UUID(payout_id),
         admin_user_id=UUID(str(user.id)),
     )
-    return result
 
 
 @affiliate_admin_router.post("/{payout_id}/complete")
@@ -326,13 +314,12 @@ async def complete_payout(
     user: AdminUser,
 ):
     """Mark payout as completed with tx_hash (admin only)."""
-    result = await service.complete_payout(
+    return await service.complete_payout(
         db,
         payout_id=UUID(payout_id),
         tx_hash=body.tx_hash,
         application_id=UUID(str(application.id)),
     )
-    return result
 
 
 @affiliate_admin_router.post("/{payout_id}/deny")
@@ -344,12 +331,11 @@ async def deny_payout(
     user: AdminUser,
 ):
     """Deny a payout request (admin only)."""
-    result = await service.deny_payout(
+    return await service.deny_payout(
         db,
         payout_id=UUID(payout_id),
         reason=body.reason,
     )
-    return result
 
 
 @affiliate_admin_router.post("/{payout_id}/fail")
@@ -361,12 +347,11 @@ async def fail_payout(
     user: AdminUser,
 ):
     """Mark payout as failed (admin only)."""
-    result = await service.fail_payout(
+    return await service.fail_payout(
         db,
         payout_id=UUID(payout_id),
         reason=body.reason,
     )
-    return result
 
 
 # ===========================================================================
@@ -385,7 +370,7 @@ async def update_affiliate_config(
     user: CurrentUser,
 ):
     """Configure affiliate rates for an application."""
-    result = await service.update_affiliate_config(
+    return await service.update_affiliate_config(
         db,
         application_id=UUID(application_id),
         user_id=UUID(str(user.id)),
@@ -397,7 +382,6 @@ async def update_affiliate_config(
         attribution_window_days=body.attribution_window_days,
         min_payout_cents=body.min_payout_cents,
     )
-    return result
 
 
 @affiliate_config_router.get("/{application_id}/affiliate-config")
@@ -407,11 +391,10 @@ async def get_affiliate_config(
     application: Application,
 ):
     """Read affiliate config for an application."""
-    result = await service.get_affiliate_config(
+    return await service.get_affiliate_config(
         db,
         application_id=UUID(application_id),
     )
-    return result
 
 
 # ===========================================================================
@@ -447,7 +430,7 @@ async def process_commissions(
     ):
         raise ForbiddenError("Invalid service credentials")
 
-    result = await service.process_commissions(
+    return await service.process_commissions(
         db,
         payer_entity_type=body.payer_entity_type,
         payer_entity_id=UUID(body.payer_entity_id),
@@ -456,4 +439,3 @@ async def process_commissions(
         payment_reference=body.payment_reference,
         application_id=UUID(body.application_id),
     )
-    return result

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.3}/src/spaps_server_quickstart/domains/agent_approvals/router.py

@@ -168,7 +168,7 @@ async def register_agent(
 
     Returns agent details including the raw secret (shown once).
     """
-    result = await service.register_agent(
+    return await service.register_agent(
         db,
         application_id=UUID(str(application.id)),
         owner_user_id=UUID(str(user.id)),
@@ -179,7 +179,6 @@ async def register_agent(
         referral_click_id=body.referral_click_id,
         referral_slug=body.ref,
     )
-    return result
 
 
 @agents_router.get("")
@@ -191,7 +190,7 @@ async def list_agents(
     is_active: bool | None = Query(default=True),
 ):
     """List agents owned by the authenticated user (admin sees all)."""
-    result = await service.list_agents(
+    return await service.list_agents(
         db,
         application_id=UUID(str(application.id)),
         user_id=UUID(str(user.id)),
@@ -200,7 +199,6 @@ async def list_agents(
         limit=pagination.limit,
         offset=pagination.offset,
     )
-    return result
 
 
 @agents_router.get("/{agent_id}")
@@ -211,14 +209,13 @@ async def get_agent(
     user: CurrentUser,
 ):
     """Get agent details (owner or admin only)."""
-    result = await service.get_agent(
+    return await service.get_agent(
         db,
         agent_id=_as_uuid(agent_id, "agent_id"),
         application_id=UUID(str(application.id)),
         user_id=UUID(str(user.id)),
         is_admin=getattr(user, "is_admin", False),
     )
-    return result
 
 
 @agents_router.put("/{agent_id}")
@@ -230,7 +227,7 @@ async def update_agent(
     user: CurrentUser,
 ):
     """Update agent fields (owner or admin only)."""
-    result = await service.update_agent(
+    return await service.update_agent(
         db,
         agent_id=_as_uuid(agent_id, "agent_id"),
         application_id=UUID(str(application.id)),
@@ -242,7 +239,6 @@ async def update_agent(
         metadata=body.metadata,
         is_active=body.is_active,
     )
-    return result
 
 
 @agents_router.delete("/{agent_id}")
@@ -253,14 +249,13 @@ async def deactivate_agent(
     user: CurrentUser,
 ):
     """Deactivate an agent (soft delete). Expires pending approvals."""
-    result = await service.deactivate_agent(
+    return await service.deactivate_agent(
         db,
         agent_id=_as_uuid(agent_id, "agent_id"),
         application_id=UUID(str(application.id)),
         user_id=UUID(str(user.id)),
         is_admin=getattr(user, "is_admin", False),
     )
-    return result
 
 
 @agents_router.post("/{agent_id}/rotate-secret")
@@ -271,13 +266,12 @@ async def rotate_secret(
     user: CurrentUser,
 ):
     """Rotate the agent secret. Owner only."""
-    result = await service.rotate_agent_secret(
+    return await service.rotate_agent_secret(
         db,
         agent_id=_as_uuid(agent_id, "agent_id"),
         application_id=UUID(str(application.id)),
         user_id=UUID(str(user.id)),
     )
-    return result
 
 
 # ---------------------------------------------------------------------------
@@ -294,7 +288,7 @@ async def add_approver(
     user: CurrentUser,
 ):
     """Add a user or agent as approver. Owner only."""
-    result = await service.add_approver(
+    return await service.add_approver(
         db,
         agent_id=_as_uuid(agent_id, "agent_id"),
         application_id=UUID(str(application.id)),
@@ -307,7 +301,6 @@ async def add_approver(
         if body.approver_agent_id
         else None,
     )
-    return result
 
 
 @agents_router.get("/{agent_id}/approvers")
@@ -319,14 +312,13 @@ async def list_approvers(
     pagination: PaginationDep,
 ):
     """List approvers for an agent. Owner or admin."""
-    result = await service.list_approvers(
+    return await service.list_approvers(
         db,
         agent_id=_as_uuid(agent_id, "agent_id"),
         application_id=UUID(str(application.id)),
         user_id=UUID(str(user.id)),
         is_admin=getattr(user, "is_admin", False),
     )
-    return result
 
 
 @agents_router.delete("/{agent_id}/approvers/{approver_id}")
@@ -338,14 +330,13 @@ async def remove_approver(
     user: CurrentUser,
 ):
     """Remove an approver. Owner only."""
-    result = await service.remove_approver(
+    return await service.remove_approver(
         db,
         agent_id=_as_uuid(agent_id, "agent_id"),
         approver_id=_as_uuid(approver_id, "approver_id"),
         application_id=UUID(str(application.id)),
         user_id=UUID(str(user.id)),
     )
-    return result
 
 
 # ===========================================================================
@@ -378,7 +369,7 @@ async def create_approval(
         application_id=UUID(str(application.id)),
     )
 
-    result = await service.create_approval(
+    return await service.create_approval(
         db,
         agent_id=UUID(str(agent.id)),
         application_id=UUID(str(application.id)),
@@ -394,7 +385,6 @@ async def create_approval(
         else None,
         settings=request.app.state.settings,
     )
-    return result
 
 
 @approvals_router.get("/by-code/{code}")
@@ -408,13 +398,12 @@ async def get_approval_by_code(
     # Capability gate: approval_request.read (before participant check)
     await _enforce_read_capability(db, user, application)
 
-    result = await service.get_approval_by_code(
+    return await service.get_approval_by_code(
         db,
         code=code,
         application_id=UUID(str(application.id)),
         user_id=UUID(str(user.id)),
     )
-    return result
 
 
 @approvals_router.get("/{approval_id}")
@@ -424,12 +413,11 @@ async def get_approval(
     application: Application,
 ):
     """Poll approval status. API key auth only; sensitive fields are withheld."""
-    result = await service.get_approval(
+    return await service.get_approval(
         db,
         approval_id=_as_uuid(approval_id, "approval_id"),
         application_id=UUID(str(application.id)),
     )
-    return result
 
 
 @approvals_router.post("/{approval_id}/respond")
@@ -471,7 +459,7 @@ async def respond_to_approval(
 
         raise UnauthorizedError("Authentication required")
 
-    result = await service.respond_to_approval(
+    return await service.respond_to_approval(
         db,
         approval_id=_as_uuid(approval_id, "approval_id"),
         application_id=UUID(str(application.id)),
@@ -485,7 +473,6 @@ async def respond_to_approval(
         edited_intent=body.edited_intent.model_dump() if body.edited_intent else None,
         settings=settings,
     )
-    return result
 
 
 @approvals_router.get("")
@@ -502,7 +489,7 @@ async def list_approvals(
     # Capability gate: approval_request.read (before participant check)
     await _enforce_read_capability(db, user, application)
 
-    result = await service.list_approvals(
+    return await service.list_approvals(
         db,
         application_id=UUID(str(application.id)),
         user_id=UUID(str(user.id)),
@@ -513,4 +500,3 @@ async def list_approvals(
         limit=pagination.limit,
         offset=pagination.offset,
     )
-    return result

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.3}/src/spaps_server_quickstart/domains/agent_approvals/service.py

@@ -118,7 +118,7 @@ def _resolve_approval_jwt_secret(settings: Any) -> str:
 
 def _agent_to_dict(agent: Any, *, include_secret: bool = False) -> dict[str, Any]:
     """Convert an Agent model instance to a serialisable dict."""
-    result = {
+    return {
         "id": str(agent.id),
         "name": agent.name,
         "description": agent.description,
@@ -130,7 +130,6 @@ def _agent_to_dict(agent: Any, *, include_secret: bool = False) -> dict[str, Any
         "created_at": agent.created_at.isoformat() if hasattr(agent.created_at, "isoformat") else str(agent.created_at),
         "updated_at": agent.updated_at.isoformat() if hasattr(agent.updated_at, "isoformat") else str(agent.updated_at),
     }
-    return result
 
 
 async def _attribute_agent_referral(