feat(types): close parity gaps vs node-sdk

Four concrete divergences found in the symmetry audit, now closed:

1. AssociateWalletResponse.agent_memory — mirror of node-sdk fix. API emits
   agent_memory on first wallet capture; SDK now surfaces it as optional.

2. AssessResponse.identity_method typed as Literal["wallet",
   "operator_token"] — was loose str. Matches node-sdk's union.

3. AccountVerification TypedDict added and wired into
   CredentialListResponse.account_verification — was NotRequired[dict] with
   zero type safety. node-sdk had a typed AccountVerification interface;
   now python does too.

4. CredentialCreateErrorResponse added — typed 409 response for KYC-required
   credential mints. node-sdk had this; python was missing it. Exported
   from agentscore namespace.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: vvillait88

agentscore/__init__.py

@@ -3,10 +3,12 @@
 from agentscore.client import AgentScore
 from agentscore.errors import AgentScoreError
 from agentscore.types import (
+    AccountVerification,
     AgentMemoryHint,
     AgentMemoryIdentityPaths,
     AssessResponse,
     AssociateWalletResponse,
+    CredentialCreateErrorResponse,
     CredentialCreateResponse,
     CredentialItem,
     CredentialListResponse,
@@ -32,12 +34,14 @@
 __version__ = _pkg_version("agentscore-py")
 
 __all__ = [
+    "AccountVerification",
     "AgentMemoryHint",
     "AgentMemoryIdentityPaths",
     "AgentScore",
     "AgentScoreError",
     "AssessResponse",
     "AssociateWalletResponse",
+    "CredentialCreateErrorResponse",
     "CredentialCreateResponse",
     "CredentialItem",
     "CredentialListResponse",

agentscore/types.py

@@ -172,7 +172,7 @@ class DecisionPolicy(TypedDict, total=False):
 class _AssessResponseRequired(TypedDict):
     decision: str | None
     decision_reasons: list[str]
-    identity_method: str
+    identity_method: Literal["wallet", "operator_token"]
     on_the_fly: bool
     updated_at: str | None
 
@@ -278,16 +278,44 @@ class CredentialCreateResponse(_CredentialCreateResponseRequired, total=False):
     agent_memory: AgentMemoryHint
 
 
+class AccountVerification(TypedDict, total=False):
+    """Account-level KYC state surfaced by GET /v1/credentials (same shape the API emits)."""
+
+    kyc_status: str
+    kyc_verified_at: str | None
+    jurisdiction: str | None
+    age_verified: bool
+    age_bracket: str | None
+    sanctions_status: str | None
+    operator_type: str | None
+
+
 class CredentialListResponse(TypedDict):
     credentials: list[CredentialItem]
-    account_verification: NotRequired[dict]
+    account_verification: NotRequired[AccountVerification]
 
 
 class CredentialRevokeResponse(TypedDict):
     id: str
     revoked: Literal[True]
 
 
+class _CredentialCreateErrorNextSteps(TypedDict):
+    action: NextStepsAction
+
+
+class CredentialCreateErrorNextSteps(_CredentialCreateErrorNextSteps, total=False):
+    user_message: str
+
+
+class CredentialCreateErrorResponse(TypedDict):
+    """409 response body when POST /v1/credentials is called before KYC completes."""
+
+    error: dict  # {"code": "kyc_required", "message": str}
+    verify_url: str
+    next_steps: CredentialCreateErrorNextSteps
+
+
 Network = Literal["evm", "solana"]
 """Key-derivation family for associate_wallet. EVM covers any EVM chain (Base, Tempo, Ethereum, …)
 because EOA addresses derive from the same private key on every EVM chain. Solana lives in its own
@@ -298,6 +326,10 @@ class AssociateWalletResponse(TypedDict):
     associated: bool
     first_seen: bool
     deduped: NotRequired[bool]
+    # Cross-merchant pattern hint. Emitted only on the first wallet capture (first_seen=True)
+    # so merchants can relay it once in a 402 body and LLM-hosted agents persist the pattern
+    # to long-term memory. Absent on all subsequent captures.
+    agent_memory: NotRequired[AgentMemoryHint]
 
 
 # ---------------------------------------------------------------------------