From 3eb42d3f0f4fcf9a215d62c8618ece9467d29740 Mon Sep 17 00:00:00 2001 From: vvillait88 Date: Wed, 12 Aug 2026 05:05:44 -0700 Subject: [PATCH 1/2] Type operator_handle on the assess response /v1/assess now returns a stable pairwise handle for the account behind a presented operator token. Typed here so SDK consumers keying durable state on identity (prepaid balances first) can read it without casting. --- src/types.ts | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/src/types.ts b/src/types.ts index 4d20e5f..17bd4f4 100644 --- a/src/types.ts +++ b/src/types.ts @@ -310,6 +310,19 @@ export interface AssessResponse { * Returned regardless of identity_method so agents can enumerate all wallets they could * sign with to satisfy a wallet-auth claim. Capped at 100 entries. */ linked_wallets?: string[]; + /** Stable pairwise handle (`oph_...`) for the ACCOUNT behind a presented operator token. + * + * This is the identity durable merchant state should key on, because it survives the + * token rotating, expiring or being revoked: an `opc_` lives 24h and rotates silently + * off a 90-day refresh, so anything keyed on the token instance is stranded daily. + * Pairwise per consuming account, so the same buyer presents an unrelated handle to + * every merchant and handles never correlate across them. + * + * Carries no compliance meaning: a registration-only (`sign_in`) credential resolves the + * same as a KYC-backed one, so read the decision fields for policy. Present only on the + * operator-token path, and returned on denials too, since it is identity rather than a + * verdict. */ + operator_handle?: string; verify_url?: string; policy_result?: PolicyResult | null; explanation?: PolicyExplanation[]; From 3e95bce356df3a0a9d535257bc328c88b671c106 Mon Sep 17 00:00:00 2001 From: vvillait88 Date: Wed, 12 Aug 2026 05:09:15 -0700 Subject: [PATCH 2/2] Bump to 2.7.5 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 5081d87..45b20f7 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@agent-score/sdk", - "version": "2.7.4", + "version": "2.7.5", "description": "TypeScript client for the AgentScore APIs", "main": "./dist/index.js", "module": "./dist/index.mjs",