PyPI - voidly-pay - Versions diffs - 2.0.2__tar.gz → 3.0.0__tar.gz - Mend

voidly-pay 2.0.2tar.gz → 3.0.0tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (12) hide show

{voidly_pay-2.0.2 → voidly_pay-3.0.0}/PKG-INFO RENAMED Viewed

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: voidly-pay
-Version: 2.0.2
-Summary: Voidly Pay SDK — open marketplace for AI-agent payments. claim() + request_with_pay() handle x402 end-to-end. USDC-backed Sourcify-verified vault on Base mainnet.
+Version: 3.0.0
+Summary: voidpay SDK — zero-value internal test-credit tools for agent-to-agent transfers and x402 integration. Credits are not backed or redeemable.
 Author-email: Voidly <team@voidly.ai>
 License: MIT
 Keywords: voidly,payments,ai-agents,x402,did,ed25519
@@ -35,7 +35,7 @@ pay = VoidlyPay()                              # mints + persists keypair
 print("DID:", pay.did)                          # did:voidly:...
 pay.faucet()                                    # 10 free credits
-# Browse the marketplace — 17 paid endpoints + N third-party listings
+# Browse the marketplace — 12 paid endpoints + N third-party listings
 mp = pay.request("GET", "/v1/pay/marketplace").json()
 for item in mp["items"][:5]:
     print(f"{item['name']:40s} ${item['pricing']['amount_usdc']}")
@@ -123,11 +123,17 @@ def expensive():
 | **Streams (per-token billing)** | `pay.open_stream(...)`, `pay.meter_stream(...)`, `pay.finalize_stream(...)` |
 | **Subscriptions** | `pay.subscribe(...)`, `pay.cancel_subscription(...)` |
 | **x402 server-side quote** | `pay.create_quote(resource, amount)` |
-| **x402 server-side verify** | `pay.verify_payment(quote_id, transfer_id)` |
+| **x402 server-side verify** | `pay.verify_payment(payment_header=header, payer_proof=proof, expected_resource=resource, expected_method=method, min_amount=price, expected_metadata=metadata)` |
 | **Webhooks** | `pay.subscribe_webhook(url, events=[...])` |
 | **Trust check** | `pay.health_check()` (6-check report incl. on-chain vault read) |
-## What's in the marketplace today (Voidly's 17 paid endpoints)
+## What's in the marketplace today (Voidly's 12 paid endpoints)
+Voidly does not sell its censorship data. The dataset is free and CC BY 4.0.
+Every endpoint below charges for compute, or for an Ed25519 signature over data
+that is itself free — never for the observatory. Five SKUs that failed that test
+were retired on 2026-08-04 and now return HTTP 410 naming their free
+replacement; see [voidly.ai/pay/changelog](https://voidly.ai/pay/changelog).
 | Endpoint | Price | What it does |
 |---|---|---|
@@ -141,13 +147,19 @@ def expensive():
 | `voidly_meta` | $0.001 | URL metadata (og + title + canonical) |
 | `voidly_extract` | $0.01 | PDF/document → plain text |
 | `voidly_scrape` | $0.01 | Fetch any URL + Voidly-signed receipt |
-| `voidly_fetch` | $0.05 | Country-pinned fetch via 37+ probe network |
-| `probe_attest` | $0.005 | Multi-vantage signed reachability proof |
-| `forecast_pro` | $0.01 | 30-day country-shutdown risk forecast |
-| `claim_verify_pro` | $0.005 | Evidence-backed verification of claims |
-| `incident_summary_pro` | $0.005 | Plain-English summary of an incident |
-| `agent_discover_pro` | $0.005 | Premium ranked agent search |
-| `incidents_export_pro` | $0.05 | Bulk export (high limit, no rate cap) |
+| `probe_attest` | $0.005 | Ed25519 attestation over probe reachability data. The data is free at `/v1/probe/domain/{host}`; the charge is the signature. |
+| `agent_discover_pro` | $0.005 | Ranked search over the voidpay agent registry (not observatory data). Free 20-result search at `/v1/agent/discover`. |
+Retired 2026-08-04 — these now return **HTTP 410 Gone** with the free
+replacement URL in the body. Do not route to them:
+| Retired | Free replacement |
+|---|---|
+| `voidly_fetch` / `POST /v1/pay/fetch` | `voidly_scrape` — the country-pinning was never implemented, so every call was already a Cloudflare-edge fetch |
+| `forecast_pro` | `GET /v1/forecast/{cc}/multi-horizon` (free, genuinely modelled) |
+| `claim_verify_pro` | `POST /verify-claim` (free) |
+| `incident_summary_pro` | `GET /data/incidents/{id}/report?format=markdown` (free) |
+| `incidents_export_pro` | `GET /data/incidents/export?format=csv` (free, uncapped) |
 Plus N third-party listings registered self-serve at [voidly.ai/pay/list-your-service](https://voidly.ai/pay/list-your-service).
@@ -178,17 +190,17 @@ ok = verify_webhook_signature(
 ## Why agents use this
-| Problem | Voidly Pay solves it |
+| Problem | voidpay solves it |
 |---|---|
 | **Need to add payment to your agent service** | x402 middleware ships for FastAPI, Flask, any web-fetch handler |
-| **Need to discover paid services** | One install → 17 endpoints + open marketplace listings |
+| **Need to discover paid services** | One install → 12 endpoints + open marketplace listings |
 | **Don't want to manage 10 API keys** | One Ed25519 keypair, one wallet, every paid endpoint works |
 | **Don't trust the agent's payment claims** | Every receipt is Ed25519-signed by Voidly. Verifiable offline. |
-| **Need country-attested fetch** | 37+ probe network, signed (URL, country, ASN, probe-DID) |
+| **Need censorship data** | It is free. `GET /data/incidents/export?format=csv`, CC BY 4.0, no wallet, no key. Voidly does not sell it. |
 ## Honest disclosure
-The Voidly Pay vault on Base mainnet (`0xd25d3c6f32886b65356cc5c700382a8a02d84df5`, [Sourcify-verified](https://repo.sourcify.dev/contracts/full_match/8453/0xd25d3c6f32886b65356cc5c700382a8a02d84df5/)) currently holds **$4 USDC**. We have approximately zero sustained external paying users yet. Live reserves at [voidly.ai/pay/proof](https://voidly.ai/pay/proof).
+**Stage 2 is being retired** (decided 2026-08-04). Credits are an internal accounting unit: not backed, not redeemable, no off-ramp. The vault on Base mainnet (`0xd25d3c6f32886b65356cc5c700382a8a02d84df5`, [Sourcify-verified](https://repo.sourcify.dev/contracts/full_match/8453/0xd25d3c6f32886b65356cc5c700382a8a02d84df5/)) holds 4.10 USDC, has never settled a payment on the canonical x402 path, and its deployed documentation claimed governance could not unilaterally move funds — which the code does not enforce. It stays on-chain as a public record at [voidly.ai/pay/proof](https://voidly.ai/pay/proof). We have approximately zero sustained external paying users.
 We opened the marketplace before the demand exists because we believe agent adoption is gated on discoverability, not on payment-rail UX.
@@ -207,9 +219,9 @@ We opened the marketplace before the demand exists because we believe agent adop
 - [/pay/marketplace](https://voidly.ai/pay/marketplace) — visual browse
 - [/pay/list-your-service](https://voidly.ai/pay/list-your-service) — list in 60s
 - [/pay/claim](https://voidly.ai/pay/claim) — free 10-credit faucet
-- [/pay/proof](https://voidly.ai/pay/proof) — live reserves dashboard
+- [/pay/proof](https://voidly.ai/pay/proof) — vault record (not a reserve; Stage 2 is being retired)
 - [/pay/for-builders](https://voidly.ai/pay/for-builders) — every middleware + adapter
-- [Voidly Pay landing](https://voidly.ai/pay)
+- [voidpay landing](https://voidly.ai/pay)
 ## Keywords

{voidly_pay-2.0.2 → voidly_pay-3.0.0}/README.md RENAMED Viewed

@@ -19,7 +19,7 @@ pay = VoidlyPay()                              # mints + persists keypair
 print("DID:", pay.did)                          # did:voidly:...
 pay.faucet()                                    # 10 free credits
-# Browse the marketplace — 17 paid endpoints + N third-party listings
+# Browse the marketplace — 12 paid endpoints + N third-party listings
 mp = pay.request("GET", "/v1/pay/marketplace").json()
 for item in mp["items"][:5]:
     print(f"{item['name']:40s} ${item['pricing']['amount_usdc']}")
@@ -107,11 +107,17 @@ def expensive():
 | **Streams (per-token billing)** | `pay.open_stream(...)`, `pay.meter_stream(...)`, `pay.finalize_stream(...)` |
 | **Subscriptions** | `pay.subscribe(...)`, `pay.cancel_subscription(...)` |
 | **x402 server-side quote** | `pay.create_quote(resource, amount)` |
-| **x402 server-side verify** | `pay.verify_payment(quote_id, transfer_id)` |
+| **x402 server-side verify** | `pay.verify_payment(payment_header=header, payer_proof=proof, expected_resource=resource, expected_method=method, min_amount=price, expected_metadata=metadata)` |
 | **Webhooks** | `pay.subscribe_webhook(url, events=[...])` |
 | **Trust check** | `pay.health_check()` (6-check report incl. on-chain vault read) |
-## What's in the marketplace today (Voidly's 17 paid endpoints)
+## What's in the marketplace today (Voidly's 12 paid endpoints)
+Voidly does not sell its censorship data. The dataset is free and CC BY 4.0.
+Every endpoint below charges for compute, or for an Ed25519 signature over data
+that is itself free — never for the observatory. Five SKUs that failed that test
+were retired on 2026-08-04 and now return HTTP 410 naming their free
+replacement; see [voidly.ai/pay/changelog](https://voidly.ai/pay/changelog).
 | Endpoint | Price | What it does |
 |---|---|---|
@@ -125,13 +131,19 @@ def expensive():
 | `voidly_meta` | $0.001 | URL metadata (og + title + canonical) |
 | `voidly_extract` | $0.01 | PDF/document → plain text |
 | `voidly_scrape` | $0.01 | Fetch any URL + Voidly-signed receipt |
-| `voidly_fetch` | $0.05 | Country-pinned fetch via 37+ probe network |
-| `probe_attest` | $0.005 | Multi-vantage signed reachability proof |
-| `forecast_pro` | $0.01 | 30-day country-shutdown risk forecast |
-| `claim_verify_pro` | $0.005 | Evidence-backed verification of claims |
-| `incident_summary_pro` | $0.005 | Plain-English summary of an incident |
-| `agent_discover_pro` | $0.005 | Premium ranked agent search |
-| `incidents_export_pro` | $0.05 | Bulk export (high limit, no rate cap) |
+| `probe_attest` | $0.005 | Ed25519 attestation over probe reachability data. The data is free at `/v1/probe/domain/{host}`; the charge is the signature. |
+| `agent_discover_pro` | $0.005 | Ranked search over the voidpay agent registry (not observatory data). Free 20-result search at `/v1/agent/discover`. |
+Retired 2026-08-04 — these now return **HTTP 410 Gone** with the free
+replacement URL in the body. Do not route to them:
+| Retired | Free replacement |
+|---|---|
+| `voidly_fetch` / `POST /v1/pay/fetch` | `voidly_scrape` — the country-pinning was never implemented, so every call was already a Cloudflare-edge fetch |
+| `forecast_pro` | `GET /v1/forecast/{cc}/multi-horizon` (free, genuinely modelled) |
+| `claim_verify_pro` | `POST /verify-claim` (free) |
+| `incident_summary_pro` | `GET /data/incidents/{id}/report?format=markdown` (free) |
+| `incidents_export_pro` | `GET /data/incidents/export?format=csv` (free, uncapped) |
 Plus N third-party listings registered self-serve at [voidly.ai/pay/list-your-service](https://voidly.ai/pay/list-your-service).
@@ -162,17 +174,17 @@ ok = verify_webhook_signature(
 ## Why agents use this
-| Problem | Voidly Pay solves it |
+| Problem | voidpay solves it |
 |---|---|
 | **Need to add payment to your agent service** | x402 middleware ships for FastAPI, Flask, any web-fetch handler |
-| **Need to discover paid services** | One install → 17 endpoints + open marketplace listings |
+| **Need to discover paid services** | One install → 12 endpoints + open marketplace listings |
 | **Don't want to manage 10 API keys** | One Ed25519 keypair, one wallet, every paid endpoint works |
 | **Don't trust the agent's payment claims** | Every receipt is Ed25519-signed by Voidly. Verifiable offline. |
-| **Need country-attested fetch** | 37+ probe network, signed (URL, country, ASN, probe-DID) |
+| **Need censorship data** | It is free. `GET /data/incidents/export?format=csv`, CC BY 4.0, no wallet, no key. Voidly does not sell it. |
 ## Honest disclosure
-The Voidly Pay vault on Base mainnet (`0xd25d3c6f32886b65356cc5c700382a8a02d84df5`, [Sourcify-verified](https://repo.sourcify.dev/contracts/full_match/8453/0xd25d3c6f32886b65356cc5c700382a8a02d84df5/)) currently holds **$4 USDC**. We have approximately zero sustained external paying users yet. Live reserves at [voidly.ai/pay/proof](https://voidly.ai/pay/proof).
+**Stage 2 is being retired** (decided 2026-08-04). Credits are an internal accounting unit: not backed, not redeemable, no off-ramp. The vault on Base mainnet (`0xd25d3c6f32886b65356cc5c700382a8a02d84df5`, [Sourcify-verified](https://repo.sourcify.dev/contracts/full_match/8453/0xd25d3c6f32886b65356cc5c700382a8a02d84df5/)) holds 4.10 USDC, has never settled a payment on the canonical x402 path, and its deployed documentation claimed governance could not unilaterally move funds — which the code does not enforce. It stays on-chain as a public record at [voidly.ai/pay/proof](https://voidly.ai/pay/proof). We have approximately zero sustained external paying users.
 We opened the marketplace before the demand exists because we believe agent adoption is gated on discoverability, not on payment-rail UX.
@@ -191,9 +203,9 @@ We opened the marketplace before the demand exists because we believe agent adop
 - [/pay/marketplace](https://voidly.ai/pay/marketplace) — visual browse
 - [/pay/list-your-service](https://voidly.ai/pay/list-your-service) — list in 60s
 - [/pay/claim](https://voidly.ai/pay/claim) — free 10-credit faucet
-- [/pay/proof](https://voidly.ai/pay/proof) — live reserves dashboard
+- [/pay/proof](https://voidly.ai/pay/proof) — vault record (not a reserve; Stage 2 is being retired)
 - [/pay/for-builders](https://voidly.ai/pay/for-builders) — every middleware + adapter
-- [Voidly Pay landing](https://voidly.ai/pay)
+- [voidpay landing](https://voidly.ai/pay)
 ## Keywords

{voidly_pay-2.0.2 → voidly_pay-3.0.0}/pyproject.toml RENAMED Viewed

@@ -1,7 +1,7 @@
 [project]
 name = "voidly-pay"
-version = "2.0.2"
-description = "Voidly Pay SDK — open marketplace for AI-agent payments. claim() + request_with_pay() handle x402 end-to-end. USDC-backed Sourcify-verified vault on Base mainnet."
+version = "3.0.0"
+description = "voidpay SDK — zero-value internal test-credit tools for agent-to-agent transfers and x402 integration. Credits are not backed or redeemable."
 readme = "README.md"
 requires-python = ">=3.10"
 license = { text = "MIT" }
@@ -20,4 +20,4 @@ requires = ["setuptools>=61"]
 build-backend = "setuptools.build_meta"
 [tool.setuptools]
-packages = ["voidly_pay"]
+packages = ["voidly_pay", "voidly_pay.middleware"]

{voidly_pay-2.0.2 → voidly_pay-3.0.0}/tests/test_sdk.py RENAMED Viewed

@@ -143,6 +143,102 @@ class TransferTests(unittest.TestCase):
         self.assertEqual(ctx.exception.code, "insufficient_balance")
+class X402Tests(unittest.TestCase):
+    def test_verify_payment_signs_every_merchant_expectation(self):
+        sess, captured = fake_session({
+            "POST /v1/pay/x402/verify": resp_json({"ok": True, "quote_id": "q-1", "transfer_id": "t-1"}),
+        })
+        pay = VoidlyPay(api_url="http://x.example", secret_key=bytes(nacl.signing.SigningKey.generate()._signing_key), session=sess)
+        pay.verify_payment(
+            payment_header="voidly-credit transfer_id=t-1; quote_id=q-1",
+            payer_proof="signed-payer-proof",
+            expected_resource=["service:read", "service:read:v2"],
+            expected_method="POST",
+            min_amount=0.004,
+            expected_recipient="did:voidly:merchant-payee",
+            expected_currency="voidly-credit",
+            expected_metadata={"order_id": "order-a", "sku": "report"},
+        )
+        call = next(c for c in captured if c["url"].endswith("/v1/pay/x402/verify"))
+        env = call["json_body"]["envelope"]
+        self.assertEqual(env["payer_proof"], "signed-payer-proof")
+        self.assertEqual(env["expected_resource"], ["service:read", "service:read:v2"])
+        self.assertEqual(env["expected_method"], "POST")
+        self.assertEqual(env["expected_recipient_did"], "did:voidly:merchant-payee")
+        self.assertEqual(env["min_amount_micro"], 4_000)
+        self.assertEqual(env["expected_currency"], "voidly-credit")
+        self.assertEqual(env["expected_metadata"], {"order_id": "order-a", "sku": "report"})
+    def test_verify_payment_returns_structured_4xx_refusal(self):
+        sess, _ = fake_session({
+            "POST /v1/pay/x402/verify": resp_json(
+                {"ok": False, "reason": "quote_already_consumed"}, status=409,
+            ),
+        })
+        pay = VoidlyPay(api_url="http://x.example", secret_key=bytes(nacl.signing.SigningKey.generate()._signing_key), session=sess)
+        result = pay.verify_payment(
+            payment_header="voidly-credit transfer_id=t-1; quote_id=q-1",
+            payer_proof="signed-payer-proof",
+            expected_resource="/goods",
+            expected_method=None,
+            min_amount=0.001,
+            expected_metadata={},
+        )
+        self.assertEqual(result, {"ok": False, "reason": "quote_already_consumed"})
+    def test_verify_payment_rejects_hollow_terms_without_request(self):
+        sess, captured = fake_session({})
+        pay = VoidlyPay(api_url="http://x.example", secret_key=bytes(nacl.signing.SigningKey.generate()._signing_key), session=sess)
+        with self.assertRaises(VoidlyPayError):
+            pay.verify_payment(
+                payment_header="x", payer_proof="proof", expected_resource="", expected_method=None, min_amount=0.001, expected_metadata={},
+            )
+        with self.assertRaises(VoidlyPayError):
+            pay.verify_payment(
+                payment_header="x", payer_proof="proof", expected_resource="/r", expected_method=None, min_amount=0.0000001, expected_metadata={},
+            )
+        self.assertEqual(captured, [])
+    def test_request_with_pay_relays_a_bound_payer_proof(self):
+        quote = {
+            "x402": {"accepts": [{
+                "scheme": "voidly-credit", "quote_id": "q-1", "recipient_did": "did:voidly:merchant",
+                "resource": "/goods", "amount_micro": 1_000,
+            }]},
+        }
+        first = resp_json(quote, status=402)
+        second = resp_json({"goods": True})
+        transfer = resp_json({"transfer_id": "t-1", "status": "settled"})
+        sess, captured = fake_session({
+            "GET /goods": first,
+            "POST /v1/pay/wallet": resp_json({"wallet": {}}),
+            "POST /v1/pay/transfer": transfer,
+        })
+        calls = {"goods": 0}
+        def route(method, url, **kwargs):
+            from urllib.parse import urlparse
+            if method.upper() == "GET" and urlparse(url).path == "/goods":
+                captured.append({"method": "GET", "url": url, "json_body": None, "headers": kwargs.get("headers", {})})
+                calls["goods"] += 1
+                return first if calls["goods"] == 1 else second
+            return fake_session({
+                "POST /v1/pay/wallet": resp_json({"wallet": {}}),
+                "POST /v1/pay/transfer": transfer,
+            })[0].request(method, url, **kwargs)
+        sess.request = mock.Mock(side_effect=route)
+        pay = VoidlyPay(api_url="http://x.example", secret_key=bytes(nacl.signing.SigningKey.generate()._signing_key), session=sess)
+        result = pay.request_with_pay("GET", "http://merchant.example/goods")
+        self.assertEqual(result.status_code, 200)
+        retry = [c for c in captured if c["method"] == "GET"][-1]
+        self.assertIn("X-Payment", retry["headers"])
+        proof = retry["headers"]["X-Voidly-Payer-Proof"]
+        decoded = json.loads(base64.b64decode(proof).decode())
+        self.assertEqual(decoded["envelope"]["quote_id"], "q-1")
+        self.assertEqual(decoded["envelope"]["transfer_id"], "t-1")
 class WebhookSignatureTests(unittest.TestCase):
     def test_valid_signature(self):
         secret = "deadbeef" * 8

{voidly_pay-2.0.2 → voidly_pay-3.0.0}/voidly_pay/__init__.py RENAMED Viewed

@@ -1,4 +1,4 @@
-"""Voidly Pay — Python SDK for agent-to-agent payments.
+"""voidpay — Python SDK for agent-to-agent payments.
 Quick start:
@@ -21,6 +21,7 @@ import base64
 import hashlib
 import hmac
 import json
+import math
 import os
 import secrets
 import time
@@ -32,7 +33,7 @@ from typing import Any, Iterable, Mapping, Optional
 import nacl.signing
 import requests
-__version__ = "0.1.0"
+__version__ = "3.0.0"
 DEFAULT_API = "https://api.voidly.ai"
 MICRO_PER_CREDIT = 1_000_000
@@ -193,8 +194,33 @@ class VoidlyPay:
     # ─── HTTP ──────────────────────────────────────────────────────────────
-    def _req(self, method: str, path: str, body: Any = None, idempotency: str | None = None) -> dict:
+    def proof_header(self, did: str | None = None) -> dict:
+        """Mint a short-lived ownership proof for ``did`` (default: our own).
+        voidpay redacts relationship metadata -- counterparty DIDs, memos,
+        task payloads and row ids -- from every unauthenticated read, because
+        those endpoints are public and a stranger could otherwise rebuild who
+        deals with whom. This header proves you are a party to the rows you
+        are asking for, and the server then returns the full view.
+        A 60-second Ed25519 signature over a caller-chosen window: no new key
+        material, no round-trip, nothing to store.
+        """
+        env = {
+            "schema": "voidly-pay-history-read/v1",
+            "did": did or self.did,
+            "nonce": uuid.uuid4().hex,
+            "issued_at": self._now_iso(),
+            "expires_at": self._expires(60_000),
+        }
+        blob = json.dumps({"envelope": env, "signature": self._sign(env)}, separators=(",", ":"))
+        return {"x-voidly-proof": base64.b64encode(blob.encode()).decode()}
+    def _req(self, method: str, path: str, body: Any = None, idempotency: str | None = None,
+             headers_extra: dict | None = None) -> dict:
         headers = {"accept": "application/json"}
+        if headers_extra:
+            headers.update(headers_extra)
         if body is not None:
             headers["content-type"] = "application/json"
         if idempotency:
@@ -231,10 +257,28 @@ class VoidlyPay:
         Idempotent: re-calling for an already-registered DID is safe.
         Uses the test-mode endpoint which auto-grants a starter balance
         (Stage 1) for instant onboarding.
+        The route used to accept a bare {did, signing_public_key} from any
+        caller. Since it mints 1,000 credits, that let anyone print against any
+        DID they cared to name. It now requires a signed proof of control,
+        which costs this SDK nothing — it already holds the key the DID is
+        derived from.
         """
-        return self._req("POST", "/v1/pay/test/wallet/create", {
+        envelope = {
+            "schema": "voidly-pay-test-wallet-create/v1",
             "did": self.did,
             "signing_public_key": self.public_key,
+            "nonce": os.urandom(16).hex(),
+            "issued_at": self._now_iso(),
+            # The server caps the signed window at 10 minutes; the SDK-wide
+            # default expiry is 30, so this one is set explicitly rather than
+            # inherited — an inherited 30 would be rejected as
+            # envelope_window_too_long.
+            "expires_at": self._expires(5 * 60_000),
+        }
+        return self._req("POST", "/v1/pay/test/wallet/create", {
+            "envelope": envelope,
+            "signature": self._sign(envelope),
         })
     def faucet(self) -> dict:
@@ -337,7 +381,9 @@ class VoidlyPay:
         return r
     def get_transfer(self, transfer_id: str) -> dict:
-        return self._req("GET", f"/v1/pay/transfer/{transfer_id}").get("transfer", {})
+        # Counterparties and memo are withheld from non-parties; prove we are one.
+        return self._req("GET", f"/v1/pay/transfer/{transfer_id}",
+                         headers_extra=self.proof_header()).get("transfer", {})
     def history(self, did: str | None = None, limit: int | None = None, before: str | None = None) -> dict:
         params = []
@@ -346,7 +392,9 @@ class VoidlyPay:
         if before:
             params.append(f"before={requests.utils.quote(before)}")
         qs = ("?" + "&".join(params)) if params else ""
-        return self._req("GET", f"/v1/pay/history/{did or self.did}{qs}")
+        target = did or self.did
+        return self._req("GET", f"/v1/pay/history/{target}{qs}",
+                         headers_extra=self.proof_header(target))
     # ─── Escrow ────────────────────────────────────────────────────────────
@@ -417,18 +465,106 @@ class VoidlyPay:
         }
         return self._req("POST", "/v1/pay/x402/quote", {"envelope": env, "signature": self._sign(env)})
-    def verify_payment(self, quote_id: str, transfer_id: str | None = None, payment_header: str | None = None) -> dict:
+    def verify_payment(
+        self,
+        quote_id: str = "",
+        transfer_id: str | None = None,
+        payment_header: str | None = None,
+        *,
+        payer_proof: str | None,
+        expected_resource: str | list[str],
+        expected_method: str | None,
+        min_amount: float,
+        expected_metadata: dict[str, Any],
+        expected_recipient: str | None = None,
+        expected_currency: str = "voidly-credit",
+    ) -> dict:
+        """One-shot verify a customer's payment against this merchant's terms.
+        The payer proof and every authorization fact are required keyword
+        arguments. Older call shapes therefore fail locally instead of asking
+        the facilitator whether an attacker-selected quote was merely
+        internally consistent.
+        """
+        if isinstance(min_amount, bool) or not isinstance(min_amount, (int, float)) or not math.isfinite(min_amount):
+            min_amount_micro = 0
+        else:
+            min_amount_micro = round(min_amount * MICRO_PER_CREDIT)
+        if min_amount_micro <= 0 or min_amount_micro > 2**53 - 1:
+            raise VoidlyPayError(
+                code="x402_expected_amount_invalid",
+                message="verify_payment min_amount must resolve to at least one safe micro-credit",
+                status=400,
+            )
+        resources = [expected_resource] if isinstance(expected_resource, str) else expected_resource
+        if (
+            not isinstance(resources, list)
+            or not 1 <= len(resources) <= 16
+            or any(not isinstance(resource, str) or not 1 <= len(resource) <= 512 for resource in resources)
+        ):
+            raise VoidlyPayError(
+                code="x402_expected_resource_invalid",
+                message="verify_payment expected_resource must name one to sixteen non-empty resources",
+                status=400,
+            )
+        if not isinstance(expected_metadata, dict):
+            raise VoidlyPayError(
+                code="x402_expected_metadata_invalid",
+                message="verify_payment expected_metadata must be a mapping",
+                status=400,
+            )
+        if expected_method is not None and (
+            not isinstance(expected_method, str) or not 1 <= len(expected_method) <= 16
+        ):
+            raise VoidlyPayError(
+                code="x402_expected_method_invalid",
+                message="verify_payment expected_method must be a non-empty HTTP method or None for a methodless quote",
+                status=400,
+            )
         env = {
             "schema": "voidly-x402-verify/v1",
             "server_did": self.did,
             "quote_id": quote_id,
             "transfer_id": transfer_id,
             "payment_header": payment_header,
+            "payer_proof": payer_proof,
+            "expected_resource": expected_resource,
+            "expected_method": expected_method,
+            "expected_recipient_did": self.did if expected_recipient is None else expected_recipient,
+            "min_amount_micro": min_amount_micro,
+            "expected_currency": expected_currency,
+            "expected_metadata": expected_metadata,
             "nonce": uuid.uuid4().hex,
             "issued_at": self._now_iso(),
             "expires_at": self._expires(),
         }
-        return self._req("POST", "/v1/pay/x402/verify", {"envelope": env, "signature": self._sign(env)})
+        try:
+            return self._req("POST", "/v1/pay/x402/verify", {"envelope": env, "signature": self._sign(env)})
+        except VoidlyPayError as error:
+            # A verifier refusal is a normal result for server middleware. Do
+            # not turn an invalid/replayed payment into an application 500.
+            # Infrastructure failures remain exceptions.
+            if 400 <= error.status < 500:
+                raw = error.raw if isinstance(error.raw, dict) else {}
+                raw_error = raw.get("error") if isinstance(raw.get("error"), dict) else {}
+                reason = raw.get("reason") or raw_error.get("code") or error.code
+                return {"ok": False, "reason": reason}
+            raise
+    def payer_proof(self, quote_id: str, transfer_id: str, ttl_ms: int = 120_000) -> str:
+        """Mint the single-use ``x-voidly-payer-proof`` value for one pair."""
+        bounded_ttl_ms = max(1, min(int(ttl_ms), 120_000))
+        env = {
+            "schema": "voidly-pay-payer-binding/v1",
+            "did": self.did,
+            "quote_id": quote_id,
+            "transfer_id": transfer_id,
+            "nonce": uuid.uuid4().hex,
+            "issued_at": self._now_iso(),
+            "expires_at": self._expires(bounded_ttl_ms),
+        }
+        blob = json.dumps({"envelope": env, "signature": self._sign(env)}, separators=(",", ":"))
+        return base64.b64encode(blob.encode("utf-8")).decode("ascii")
     # ─── x402 (client-side: pay-on-402) ────────────────────────────────────
@@ -462,6 +598,7 @@ class VoidlyPay:
         t = self.transfer(to=accept["recipient_did"], amount=credits, memo=f"x402: {accept['resource']}")
         headers = dict(kwargs.pop("headers", {}) or {})
         headers["X-Payment"] = f"voidly-credit transfer_id={t['transfer_id']}; quote_id={accept['quote_id']}"
+        headers["X-Voidly-Payer-Proof"] = self.payer_proof(accept["quote_id"], t["transfer_id"])
         return self.session.request(method, url, headers=headers, **kwargs)
     # ─── Webhooks ──────────────────────────────────────────────────────────
@@ -576,17 +713,25 @@ class VoidlyPay:
         return self._req("POST", "/v1/pay/hire", {"envelope": env, "signature": self._sign(env)})
     def hire_get(self, hire_id: str) -> dict:
-        return self._req("GET", f"/v1/pay/hire/{hire_id}")
+        # A hire row names who bought what and carries the task payload, so it
+        # is redacted for anyone who is not the requester or the provider.
+        return self._req("GET", f"/v1/pay/hire/{hire_id}", headers_extra=self.proof_header())
     def hires_incoming(self, did: str | None = None, state: str | None = None, limit: int = 50) -> dict:
         target = did or self.did
         qs = f"?limit={limit}" + (f"&state={requests.utils.quote(state)}" if state else "")
-        return self._req("GET", f"/v1/pay/hire/incoming/{target}{qs}")
+        # A provider polling for work MUST send the proof: without it the list
+        # comes back with no hire ids and no inputs. That is deliberate —
+        # naming a DID is not the same as controlling it, and /v1/agent/discover
+        # hands out every DID for free.
+        return self._req("GET", f"/v1/pay/hire/incoming/{target}{qs}",
+                         headers_extra=self.proof_header(target))
     def hires_outgoing(self, did: str | None = None, state: str | None = None, limit: int = 50) -> dict:
         target = did or self.did
         qs = f"?limit={limit}" + (f"&state={requests.utils.quote(state)}" if state else "")
-        return self._req("GET", f"/v1/pay/hire/outgoing/{target}{qs}")
+        return self._req("GET", f"/v1/pay/hire/outgoing/{target}{qs}",
+                         headers_extra=self.proof_header(target))
     def hire_and_wait(
         self,

voidly_pay-3.0.0/voidly_pay/middleware/__init__.py ADDED Viewed

@@ -0,0 +1,140 @@
+"""voidpay middleware for popular Python web frameworks.
+Each helper turns a plain handler into an x402-protected paywall.
+Pay-by-call: the function-level decorator (FastAPI dependency / Flask
+decorator) is what most users want.
+"""
+from __future__ import annotations
+import json
+from typing import Any, Awaitable, Callable
+from ..__init__ import VoidlyPay
+def fastapi_x402(pay: VoidlyPay, amount: float, *, resource: str | None = None,
+                 recipient: str | None = None, description: str | None = None,
+                 metadata: dict[str, Any] | None = None,
+                 ttl_seconds: int | None = None):
+    """FastAPI dependency. Returns a callable to use as a Depends().
+    Usage::
+        from fastapi import Depends, FastAPI
+        from voidly_pay import VoidlyPay
+        from voidly_pay.middleware import fastapi_x402
+        app = FastAPI()
+        pay = VoidlyPay()
+        require_payment = fastapi_x402(pay, amount=0.01)
+        @app.get("/expensive")
+        def expensive(payment = Depends(require_payment)):
+            return {"data": "the goods", "payer": payment["payer_did"]}
+    """
+    from fastapi import Header, HTTPException, Request, Response
+    async def _dep(
+        request: Request,
+        x_payment: str | None = Header(None),
+        x_voidly_payer_proof: str | None = Header(None),
+    ):
+        if x_payment is None:
+            quote = pay.create_quote(
+                resource=resource or request.url.path,
+                amount=amount,
+                recipient=recipient,
+                method=request.method,
+                description=description,
+                metadata=metadata,
+                ttl_seconds=ttl_seconds,
+            )
+            raise HTTPException(
+                status_code=402,
+                detail=quote["payment_required_response"],
+                headers={"WWW-Authenticate": "x402"},
+            )
+        v = pay.verify_payment(
+            payment_header=x_payment,
+            payer_proof=x_voidly_payer_proof,
+            expected_resource=resource or request.url.path,
+            expected_method=request.method,
+            min_amount=amount,
+            expected_recipient=recipient or pay.did,
+            expected_currency="voidly-credit",
+            expected_metadata=metadata or {},
+        )
+        if not v.get("ok"):
+            raise HTTPException(
+                status_code=402,
+                detail={"error": {"code": "x402_verify_failed", "message": v.get("reason")}},
+                headers={"WWW-Authenticate": "x402"},
+            )
+        return v
+    return _dep
+def flask_x402(pay: VoidlyPay, amount: float, *, resource: str | None = None,
+               recipient: str | None = None, description: str | None = None,
+               metadata: dict[str, Any] | None = None,
+               ttl_seconds: int | None = None):
+    """Flask decorator factory. Wrap a view function.
+    Usage::
+        from flask import Flask
+        from voidly_pay import VoidlyPay
+        from voidly_pay.middleware import flask_x402
+        app = Flask(__name__)
+        pay = VoidlyPay()
+        require_payment = flask_x402(pay, amount=0.01)
+        @app.get("/expensive")
+        @require_payment
+        def expensive():
+            return {"data": "the goods"}
+    """
+    from functools import wraps
+    from flask import jsonify, request
+    def decorator(view: Callable):
+        @wraps(view)
+        def _wrap(*args, **kwargs):
+            payment_header = request.headers.get("X-Payment")
+            if not payment_header:
+                quote = pay.create_quote(
+                    resource=resource or request.path,
+                    amount=amount,
+                    recipient=recipient,
+                    method=request.method,
+                    description=description,
+                    metadata=metadata,
+                    ttl_seconds=ttl_seconds,
+                )
+                resp = jsonify(quote["payment_required_response"])
+                resp.status_code = 402
+                resp.headers["WWW-Authenticate"] = "x402"
+                return resp
+            v = pay.verify_payment(
+                payment_header=payment_header,
+                payer_proof=request.headers.get("X-Voidly-Payer-Proof"),
+                expected_resource=resource or request.path,
+                expected_method=request.method,
+                min_amount=amount,
+                expected_recipient=recipient or pay.did,
+                expected_currency="voidly-credit",
+                expected_metadata=metadata or {},
+            )
+            if not v.get("ok"):
+                resp = jsonify({"error": {"code": "x402_verify_failed", "message": v.get("reason")}})
+                resp.status_code = 402
+                resp.headers["WWW-Authenticate"] = "x402"
+                return resp
+            request.voidly_payment = v  # type: ignore[attr-defined]
+            return view(*args, **kwargs)
+        return _wrap
+    return decorator
+__all__ = ["fastapi_x402", "flask_x402"]

{voidly_pay-2.0.2 → voidly_pay-3.0.0}/voidly_pay.egg-info/PKG-INFO RENAMED Viewed

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: voidly-pay
-Version: 2.0.2
-Summary: Voidly Pay SDK — open marketplace for AI-agent payments. claim() + request_with_pay() handle x402 end-to-end. USDC-backed Sourcify-verified vault on Base mainnet.
+Version: 3.0.0
+Summary: voidpay SDK — zero-value internal test-credit tools for agent-to-agent transfers and x402 integration. Credits are not backed or redeemable.
 Author-email: Voidly <team@voidly.ai>
 License: MIT
 Keywords: voidly,payments,ai-agents,x402,did,ed25519
@@ -35,7 +35,7 @@ pay = VoidlyPay()                              # mints + persists keypair
 print("DID:", pay.did)                          # did:voidly:...
 pay.faucet()                                    # 10 free credits
-# Browse the marketplace — 17 paid endpoints + N third-party listings
+# Browse the marketplace — 12 paid endpoints + N third-party listings
 mp = pay.request("GET", "/v1/pay/marketplace").json()
 for item in mp["items"][:5]:
     print(f"{item['name']:40s} ${item['pricing']['amount_usdc']}")
@@ -123,11 +123,17 @@ def expensive():
 | **Streams (per-token billing)** | `pay.open_stream(...)`, `pay.meter_stream(...)`, `pay.finalize_stream(...)` |
 | **Subscriptions** | `pay.subscribe(...)`, `pay.cancel_subscription(...)` |
 | **x402 server-side quote** | `pay.create_quote(resource, amount)` |
-| **x402 server-side verify** | `pay.verify_payment(quote_id, transfer_id)` |
+| **x402 server-side verify** | `pay.verify_payment(payment_header=header, payer_proof=proof, expected_resource=resource, expected_method=method, min_amount=price, expected_metadata=metadata)` |
 | **Webhooks** | `pay.subscribe_webhook(url, events=[...])` |
 | **Trust check** | `pay.health_check()` (6-check report incl. on-chain vault read) |
-## What's in the marketplace today (Voidly's 17 paid endpoints)
+## What's in the marketplace today (Voidly's 12 paid endpoints)
+Voidly does not sell its censorship data. The dataset is free and CC BY 4.0.
+Every endpoint below charges for compute, or for an Ed25519 signature over data
+that is itself free — never for the observatory. Five SKUs that failed that test
+were retired on 2026-08-04 and now return HTTP 410 naming their free
+replacement; see [voidly.ai/pay/changelog](https://voidly.ai/pay/changelog).
 | Endpoint | Price | What it does |
 |---|---|---|
@@ -141,13 +147,19 @@ def expensive():
 | `voidly_meta` | $0.001 | URL metadata (og + title + canonical) |
 | `voidly_extract` | $0.01 | PDF/document → plain text |
 | `voidly_scrape` | $0.01 | Fetch any URL + Voidly-signed receipt |
-| `voidly_fetch` | $0.05 | Country-pinned fetch via 37+ probe network |
-| `probe_attest` | $0.005 | Multi-vantage signed reachability proof |
-| `forecast_pro` | $0.01 | 30-day country-shutdown risk forecast |
-| `claim_verify_pro` | $0.005 | Evidence-backed verification of claims |
-| `incident_summary_pro` | $0.005 | Plain-English summary of an incident |
-| `agent_discover_pro` | $0.005 | Premium ranked agent search |
-| `incidents_export_pro` | $0.05 | Bulk export (high limit, no rate cap) |
+| `probe_attest` | $0.005 | Ed25519 attestation over probe reachability data. The data is free at `/v1/probe/domain/{host}`; the charge is the signature. |
+| `agent_discover_pro` | $0.005 | Ranked search over the voidpay agent registry (not observatory data). Free 20-result search at `/v1/agent/discover`. |
+Retired 2026-08-04 — these now return **HTTP 410 Gone** with the free
+replacement URL in the body. Do not route to them:
+| Retired | Free replacement |
+|---|---|
+| `voidly_fetch` / `POST /v1/pay/fetch` | `voidly_scrape` — the country-pinning was never implemented, so every call was already a Cloudflare-edge fetch |
+| `forecast_pro` | `GET /v1/forecast/{cc}/multi-horizon` (free, genuinely modelled) |
+| `claim_verify_pro` | `POST /verify-claim` (free) |
+| `incident_summary_pro` | `GET /data/incidents/{id}/report?format=markdown` (free) |
+| `incidents_export_pro` | `GET /data/incidents/export?format=csv` (free, uncapped) |
 Plus N third-party listings registered self-serve at [voidly.ai/pay/list-your-service](https://voidly.ai/pay/list-your-service).
@@ -178,17 +190,17 @@ ok = verify_webhook_signature(
 ## Why agents use this
-| Problem | Voidly Pay solves it |
+| Problem | voidpay solves it |
 |---|---|
 | **Need to add payment to your agent service** | x402 middleware ships for FastAPI, Flask, any web-fetch handler |
-| **Need to discover paid services** | One install → 17 endpoints + open marketplace listings |
+| **Need to discover paid services** | One install → 12 endpoints + open marketplace listings |
 | **Don't want to manage 10 API keys** | One Ed25519 keypair, one wallet, every paid endpoint works |
 | **Don't trust the agent's payment claims** | Every receipt is Ed25519-signed by Voidly. Verifiable offline. |
-| **Need country-attested fetch** | 37+ probe network, signed (URL, country, ASN, probe-DID) |
+| **Need censorship data** | It is free. `GET /data/incidents/export?format=csv`, CC BY 4.0, no wallet, no key. Voidly does not sell it. |
 ## Honest disclosure
-The Voidly Pay vault on Base mainnet (`0xd25d3c6f32886b65356cc5c700382a8a02d84df5`, [Sourcify-verified](https://repo.sourcify.dev/contracts/full_match/8453/0xd25d3c6f32886b65356cc5c700382a8a02d84df5/)) currently holds **$4 USDC**. We have approximately zero sustained external paying users yet. Live reserves at [voidly.ai/pay/proof](https://voidly.ai/pay/proof).
+**Stage 2 is being retired** (decided 2026-08-04). Credits are an internal accounting unit: not backed, not redeemable, no off-ramp. The vault on Base mainnet (`0xd25d3c6f32886b65356cc5c700382a8a02d84df5`, [Sourcify-verified](https://repo.sourcify.dev/contracts/full_match/8453/0xd25d3c6f32886b65356cc5c700382a8a02d84df5/)) holds 4.10 USDC, has never settled a payment on the canonical x402 path, and its deployed documentation claimed governance could not unilaterally move funds — which the code does not enforce. It stays on-chain as a public record at [voidly.ai/pay/proof](https://voidly.ai/pay/proof). We have approximately zero sustained external paying users.
 We opened the marketplace before the demand exists because we believe agent adoption is gated on discoverability, not on payment-rail UX.
@@ -207,9 +219,9 @@ We opened the marketplace before the demand exists because we believe agent adop
 - [/pay/marketplace](https://voidly.ai/pay/marketplace) — visual browse
 - [/pay/list-your-service](https://voidly.ai/pay/list-your-service) — list in 60s
 - [/pay/claim](https://voidly.ai/pay/claim) — free 10-credit faucet
-- [/pay/proof](https://voidly.ai/pay/proof) — live reserves dashboard
+- [/pay/proof](https://voidly.ai/pay/proof) — vault record (not a reserve; Stage 2 is being retired)
 - [/pay/for-builders](https://voidly.ai/pay/for-builders) — every middleware + adapter
-- [Voidly Pay landing](https://voidly.ai/pay)
+- [voidpay landing](https://voidly.ai/pay)
 ## Keywords

{voidly_pay-2.0.2 → voidly_pay-3.0.0}/voidly_pay.egg-info/SOURCES.txt RENAMED Viewed

@@ -6,4 +6,5 @@ voidly_pay.egg-info/PKG-INFO
 voidly_pay.egg-info/SOURCES.txt
 voidly_pay.egg-info/dependency_links.txt
 voidly_pay.egg-info/requires.txt
-voidly_pay.egg-info/top_level.txt
+voidly_pay.egg-info/top_level.txt
+voidly_pay/middleware/__init__.py

{voidly_pay-2.0.2 → voidly_pay-3.0.0}/setup.cfg RENAMED Viewed

File without changes

{voidly_pay-2.0.2 → voidly_pay-3.0.0}/voidly_pay.egg-info/dependency_links.txt RENAMED Viewed

File without changes

{voidly_pay-2.0.2 → voidly_pay-3.0.0}/voidly_pay.egg-info/requires.txt RENAMED Viewed

File without changes

{voidly_pay-2.0.2 → voidly_pay-3.0.0}/voidly_pay.egg-info/top_level.txt RENAMED Viewed

File without changes

voidly-pay 2.0.2__tar.gz → 3.0.0__tar.gz

voidly-pay 2.0.2tar.gz → 3.0.0tar.gz