@exagent/agent 0.3.5 → 0.3.6

package/test/strategy-loader.test.ts

@@ -0,0 +1,150 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { loadStrategy } from '../src/strategy/loader.js';
+import type { StrategyContext } from '@exagent/sdk';
+
+function createContext(llmContent: string, prices: Record<string, number> = { ETH: 3000 }): StrategyContext {
+  const logs: string[] = [];
+  return {
+    llm: {
+      async chat() {
+        return { content: llmContent };
+      },
+      getMetadata() {
+        return { provider: 'test', model: 'test' };
+      },
+    },
+    market: {
+      getPrice(symbol: string) {
+        return prices[symbol] ?? prices[symbol.toUpperCase()];
+      },
+      getPrices() {
+        return prices;
+      },
+      getOHLCV() {
+        return [];
+      },
+    },
+    position: {
+      openPositions: [],
+      totalUnrealizedPnL: 0,
+      totalRealizedPnL: 0,
+    },
+    store: {
+      get() {
+        return undefined;
+      },
+      set() {
+        // no-op
+      },
+      delete() {
+        // no-op
+      },
+      keys() {
+        return [];
+      },
+    },
+    config: {
+      mode: 'paper',
+      timeHorizon: 'swing',
+      maxPositionSizeBps: 2000,
+      maxDailyLossBps: 500,
+      maxConcurrentPositions: 5,
+      tradingIntervalMs: 60000,
+      maxSlippageBps: 100,
+      minTradeValueUSD: 10,
+      initialCapitalUSD: 10000,
+    },
+    log(message: string) {
+      logs.push(message);
+    },
+  };
+}
+
+test('loadStrategy rejects raw JavaScript code configs', async () => {
+  await assert.rejects(
+    () => loadStrategy({ code: 'globalThis.stoleSecrets = true; return [];' }),
+    /Raw JavaScript strategy code is disabled/,
+  );
+});
+
+test('template strategies run through prompt-backed validation', async () => {
+  const strategy = await loadStrategy({ template: 'momentum' });
+  const signals = await strategy(createContext(JSON.stringify([
+    { symbol: 'ETH', side: 'buy', venue: 'hyperliquid_perp', confidence: 0.8 },
+  ])));
+
+  assert.equal(signals.length, 1);
+  assert.equal(signals[0].symbol, 'ETH');
+  assert.equal(signals[0].venue, 'hyperliquid_perp');
+  assert.equal(signals[0].price, 3000);
+  assert.equal(signals[0].venueFillId, '');
+});
+
+test('prompt strategies drop venues outside the configured strategy scope', async () => {
+  const strategy = await loadStrategy({
+    prompt: {
+      name: 'Scoped Prompt',
+      systemPrompt: 'Return scoped trade intents.',
+      venues: ['hyperliquid_perp'],
+    },
+  });
+
+  const signals = await strategy(createContext(JSON.stringify([
+    { symbol: 'ETH', side: 'buy', venue: 'polymarket', confidence: 0.9 },
+    { symbol: 'ETH', side: 'buy', venue: 'hyperliquid_perp', confidence: 0.9 },
+  ])));
+
+  assert.equal(signals.length, 1);
+  assert.equal(signals[0].venue, 'hyperliquid_perp');
+});
+
+test('strategy metadata files are parsed as data, not executable modules', async () => {
+  const dir = mkdtempSync(join(tmpdir(), 'exagent-strategy-'));
+  const strategyPath = join(dir, 'strategy.ts');
+
+  writeFileSync(strategyPath, [
+    '// Generated by Exagent',
+    'export const name = "Prompt File";',
+    'export const venues = ["hyperliquid_perp"];',
+    'export const systemPrompt = "Return trade intents.";'
+  ].join('\n'));
+
+  try {
+    const strategy = await loadStrategy({ file: strategyPath });
+    const signals = await strategy(createContext(JSON.stringify([
+      { symbol: 'ETH', side: 'long', confidence: 0.7 },
+    ])));
+
+    assert.equal(signals.length, 1);
+    assert.equal(signals[0].venue, 'hyperliquid_perp');
+  } finally {
+    rmSync(dir, { recursive: true, force: true });
+  }
+});
+
+test('strategy files cannot export code or arbitrary statements', async () => {
+  const dir = mkdtempSync(join(tmpdir(), 'exagent-strategy-'));
+  const codeExportPath = join(dir, 'code-strategy.ts');
+  const statementPath = join(dir, 'statement-strategy.ts');
+
+  writeFileSync(codeExportPath, 'export const code = "return [];";\n');
+  writeFileSync(statementPath, 'export const systemPrompt = "Return []";\nglobalThis.compromised = true;\n');
+
+  try {
+    await assert.rejects(
+      () => loadStrategy({ file: codeExportPath }),
+      /Raw JavaScript strategy code is disabled/,
+    );
+    await assert.rejects(
+      () => loadStrategy({ file: statementPath }),
+      /Unsupported statement/,
+    );
+    assert.equal((globalThis as Record<string, unknown>).compromised, undefined);
+  } finally {
+    rmSync(dir, { recursive: true, force: true });
+  }
+});

package/.turbo/turbo-build.log

@@ -1,17 +0,0 @@
-
-> @exagent/agent@0.3.0 build /Users/graydon/Codebase Repertoire/Exagent/packages/agent
-> tsup src/index.ts src/cli.ts --format esm --dts
-
-CLI Building entry: src/cli.ts, src/index.ts
-CLI Using tsconfig: tsconfig.json
-CLI tsup v8.5.1
-CLI Target: es2022
-ESM Build start
-ESM dist/cli.js            9.50 KB
-ESM dist/index.js          1.75 KB
-ESM dist/chunk-SVFTC5V2.js 201.37 KB
-ESM ⚡️ Build success in 34ms
-DTS Build start
-DTS ⚡️ Build success in 8241ms
-DTS dist/cli.d.ts   20.00 B
-DTS dist/index.d.ts 41.02 KB

package/test-bridge-arb-to-base.mjs

@@ -1,223 +0,0 @@
-/**
- * Fix the Arb → Base bridge issue (InvalidQuoteTimestamp).
- *
- * Root cause: The Across SpokePool's depositQuoteTimeBuffer is tight.
- * If there's any delay between getting the fee quote and submitting the tx,
- * the quoteTimestamp becomes stale and the tx reverts.
- *
- * Fix: Do approval BEFORE getting the quote, then submit IMMEDIATELY after.
- */
-
-import {
-  createPublicClient,
-  createWalletClient,
-  http,
-  formatUnits,
-  formatEther,
-  parseEther,
-  maxUint256,
-} from 'viem';
-import { privateKeyToAccount } from 'viem/accounts';
-import { base, arbitrum } from 'viem/chains';
-
-const DEPLOYER_KEY = '0x0991f4e17be491bb11f4cf1d079db1771fe669e2b0d735f2b3ffc0e32d230ac9';
-const TEST_KEY = '0xb027d931f6c8b4b2681451716981432130806f01ff87001c74412b504b810dbe';
-
-const deployer = privateKeyToAccount(DEPLOYER_KEY);
-const testWallet = privateKeyToAccount(TEST_KEY);
-
-const arbPublic = createPublicClient({ chain: arbitrum, transport: http('https://arb1.arbitrum.io/rpc') });
-const arbDeployerWallet = createWalletClient({ account: deployer, chain: arbitrum, transport: http('https://arb1.arbitrum.io/rpc') });
-const arbTestWallet = createWalletClient({ account: testWallet, chain: arbitrum, transport: http('https://arb1.arbitrum.io/rpc') });
-
-const basePublic = createPublicClient({ chain: base, transport: http('https://mainnet.base.org') });
-const baseTestWallet = createWalletClient({ account: testWallet, chain: base, transport: http('https://mainnet.base.org') });
-
-const USDC_ARB = '0xaf88d065e77c8cC2239327C5EDb3A432268e5831';
-const USDC_BASE = '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913';
-const ACROSS_SPOKE_ARB = '0xe35e9842fceaCA96570B734083f4a58e8F7C5f2A';
-
-const ERC20_ABI = [
-  { type: 'function', name: 'transfer', inputs: [{name:'to',type:'address'},{name:'amount',type:'uint256'}], outputs: [{type:'bool'}], stateMutability: 'nonpayable' },
-  { type: 'function', name: 'balanceOf', inputs: [{name:'account',type:'address'}], outputs: [{type:'uint256'}], stateMutability: 'view' },
-  { type: 'function', name: 'approve', inputs: [{name:'spender',type:'address'},{name:'amount',type:'uint256'}], outputs: [{type:'bool'}], stateMutability: 'nonpayable' },
-  { type: 'function', name: 'allowance', inputs: [{name:'owner',type:'address'},{name:'spender',type:'address'}], outputs: [{type:'uint256'}], stateMutability: 'view' },
-];
-
-const ACROSS_SPOKE_ABI = [
-  {
-    type: 'function', name: 'depositV3',
-    inputs: [
-      { name: 'depositor', type: 'address' }, { name: 'recipient', type: 'address' },
-      { name: 'inputToken', type: 'address' }, { name: 'outputToken', type: 'address' },
-      { name: 'inputAmount', type: 'uint256' }, { name: 'outputAmount', type: 'uint256' },
-      { name: 'destinationChainId', type: 'uint256' },
-      { name: 'exclusiveRelayer', type: 'address' },
-      { name: 'quoteTimestamp', type: 'uint32' }, { name: 'fillDeadline', type: 'uint32' },
-      { name: 'exclusivityDeadline', type: 'uint32' }, { name: 'message', type: 'bytes' },
-    ],
-    outputs: [],
-    stateMutability: 'payable',
-  },
-];
-
-function sleep(ms) { return new Promise(r => setTimeout(r, ms)); }
-
-async function waitForTx(client, hash, label) {
-  console.log(`  ⏳ ${label}: tx ${hash.slice(0, 10)}...`);
-  const receipt = await client.waitForTransactionReceipt({ hash, timeout: 120_000 });
-  if (receipt.status === 'reverted') throw new Error(`${label} REVERTED: ${hash}`);
-  console.log(`  ✅ ${label}: confirmed (gas: ${receipt.gasUsed})`);
-  return receipt;
-}
-
-// ═══ Step 1: Fund deployer with ETH on Arb (from test wallet) ═══
-console.log('═══ Step 1: Give deployer ETH on Arb for gas ═══');
-
-const deployerArbEth = await arbPublic.getBalance({ address: deployer.address });
-if (deployerArbEth < parseEther('0.0003')) {
-  console.log('  Sending 0.0005 ETH from test wallet to deployer on Arb...');
-  const h = await arbTestWallet.sendTransaction({
-    to: deployer.address,
-    value: parseEther('0.0005'),
-  });
-  await waitForTx(arbPublic, h, 'ETH to deployer');
-}
-
-// ═══ Step 2: Deployer sends USDC to test wallet ═══
-console.log('\n═══ Step 2: Deployer sends USDC to test wallet on Arb ═══');
-
-const deployerUsdc = await arbPublic.readContract({ address: USDC_ARB, abi: ERC20_ABI, functionName: 'balanceOf', args: [deployer.address] });
-console.log(`  Deployer USDC: ${formatUnits(deployerUsdc, 6)}`);
-
-if (deployerUsdc > 0n) {
-  const h = await arbDeployerWallet.writeContract({
-    address: USDC_ARB, abi: ERC20_ABI, functionName: 'transfer',
-    args: [testWallet.address, deployerUsdc],
-  });
-  await waitForTx(arbPublic, h, 'USDC to test wallet');
-}
-
-const testUsdc = await arbPublic.readContract({ address: USDC_ARB, abi: ERC20_ABI, functionName: 'balanceOf', args: [testWallet.address] });
-console.log(`  Test wallet USDC: ${formatUnits(testUsdc, 6)}`);
-
-// ═══ Step 3: Pre-approve USDC to Across SpokePool (BEFORE getting quote) ═══
-console.log('\n═══ Step 3: Pre-approve USDC to Across ═══');
-
-const allowance = await arbPublic.readContract({
-  address: USDC_ARB, abi: ERC20_ABI, functionName: 'allowance',
-  args: [testWallet.address, ACROSS_SPOKE_ARB],
-});
-
-if (allowance < testUsdc) {
-  const h = await arbTestWallet.writeContract({
-    address: USDC_ARB, abi: ERC20_ABI, functionName: 'approve',
-    args: [ACROSS_SPOKE_ARB, maxUint256],
-  });
-  await waitForTx(arbPublic, h, 'Approve Across');
-} else {
-  console.log('  Already approved');
-}
-
-// ═══ Step 4: Get quote + submit bridge IMMEDIATELY (no delays!) ═══
-console.log('\n═══ Step 4: Bridge USDC Arb → Base (quote + submit together) ═══');
-
-const bridgeAmount = testUsdc;
-console.log(`  Bridging ${formatUnits(bridgeAmount, 6)} USDC...`);
-
-// Get fee quote
-const params = new URLSearchParams({
-  inputToken: USDC_ARB,
-  outputToken: USDC_BASE,
-  originChainId: '42161',
-  destinationChainId: '8453',
-  amount: bridgeAmount.toString(),
-  recipient: testWallet.address,
-});
-
-const feeRes = await fetch(`https://app.across.to/api/suggested-fees?${params}`);
-if (!feeRes.ok) {
-  console.log(`  ❌ Fee API error: ${await feeRes.text()}`);
-  process.exit(1);
-}
-
-const feeData = await feeRes.json();
-
-if (feeData.isAmountTooLow) {
-  console.log('  ❌ Amount too low for bridge');
-  process.exit(1);
-}
-
-const outputAmount = BigInt(bridgeAmount) - BigInt(feeData.totalRelayFee.total);
-const quoteTimestamp = parseInt(feeData.timestamp);
-const fillDeadline = Math.floor(Date.now() / 1000) + 21600;
-
-console.log(`  Quote timestamp: ${quoteTimestamp}`);
-console.log(`  Output: ${formatUnits(outputAmount, 6)} USDC`);
-
-// IMMEDIATELY submit — no awaits between quote and this call!
-console.log('  Submitting depositV3 IMMEDIATELY...');
-const bridgeHash = await arbTestWallet.writeContract({
-  address: ACROSS_SPOKE_ARB,
-  abi: ACROSS_SPOKE_ABI,
-  functionName: 'depositV3',
-  args: [
-    testWallet.address, testWallet.address,
-    USDC_ARB, USDC_BASE,
-    bridgeAmount, outputAmount,
-    8453n,
-    '0x0000000000000000000000000000000000000000',
-    quoteTimestamp, fillDeadline, 0, '0x',
-  ],
-});
-
-await waitForTx(arbPublic, bridgeHash, 'Arb→Base bridge');
-
-// Poll for fill
-console.log('  Polling for fill...');
-for (let i = 0; i < 60; i++) {
-  await sleep(2000);
-  try {
-    const sRes = await fetch(`https://app.across.to/api/deposit/status?depositTxHash=${bridgeHash}&originChainId=42161`);
-    if (sRes.ok) {
-      const s = await sRes.json();
-      if (s.status === 'filled') { console.log('  ✅ Bridge filled!'); break; }
-      if (i % 5 === 0) console.log(`  ... ${s.status} (${i*2}s)`);
-    }
-  } catch {}
-}
-
-await sleep(3000);
-
-// ═══ Step 5: Return all funds to deployer on Base ═══
-console.log('\n═══ Step 5: Return funds to deployer ═══');
-
-const baseUsdc = await basePublic.readContract({ address: USDC_BASE, abi: ERC20_ABI, functionName: 'balanceOf', args: [testWallet.address] });
-if (baseUsdc > 0n) {
-  console.log(`  Returning ${formatUnits(baseUsdc, 6)} USDC...`);
-  const h = await baseTestWallet.writeContract({
-    address: USDC_BASE, abi: ERC20_ABI, functionName: 'transfer',
-    args: [deployer.address, baseUsdc],
-  });
-  await waitForTx(basePublic, h, 'Return USDC');
-}
-
-// Return remaining Base ETH
-const baseEth = await basePublic.getBalance({ address: testWallet.address });
-if (baseEth > 200000000000000n) {
-  const returnEth = baseEth - 100000000000000n;
-  const h = await baseTestWallet.sendTransaction({ to: deployer.address, value: returnEth });
-  await waitForTx(basePublic, h, 'Return ETH');
-}
-
-// Final report
-console.log('\n═══ Final Deployer Balance ═══');
-const dEth = await basePublic.getBalance({ address: deployer.address });
-const dUsdc = await basePublic.readContract({ address: USDC_BASE, abi: ERC20_ABI, functionName: 'balanceOf', args: [deployer.address] });
-console.log(`  Base: ${formatEther(dEth)} ETH, ${formatUnits(dUsdc, 6)} USDC`);
-
-const dArbUsdc = await arbPublic.readContract({ address: USDC_ARB, abi: ERC20_ABI, functionName: 'balanceOf', args: [deployer.address] });
-const dArbEth = await arbPublic.getBalance({ address: deployer.address });
-console.log(`  Arb:  ${formatEther(dArbEth)} ETH, ${formatUnits(dArbUsdc, 6)} USDC`);
-
-console.log('\nDone!');

package/test-funded-check.mjs

@@ -1,79 +0,0 @@
-/**
- * Check deployer and test wallet balances before funded tests.
- * Read-only — no transactions.
- */
-
-import { createPublicClient, http, formatEther, formatUnits } from 'viem';
-import { base, arbitrum, polygon } from 'viem/chains';
-
-const DEPLOYER = '0x1374Ee64A05011877660fD53A0D757B65Cbc73ce';
-const TEST_WALLET_1 = '0xf5C450448E531162141e69c70F9D8cfA637604F4';
-
-const ERC20_ABI = [
-  { type: 'function', name: 'balanceOf', inputs: [{ name: 'account', type: 'address' }], outputs: [{ type: 'uint256' }], stateMutability: 'view' },
-  { type: 'function', name: 'decimals', inputs: [], outputs: [{ type: 'uint8' }], stateMutability: 'view' },
-  { type: 'function', name: 'symbol', inputs: [], outputs: [{ type: 'string' }], stateMutability: 'view' },
-];
-
-const TOKENS = {
-  base: {
-    USDC: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913',
-    USDbC: '0xd9aAEc86B65D86f6A7B5B1b0c42FFA531710b6CA',
-  },
-  arbitrum: {
-    USDC: '0xaf88d065e77c8cC2239327C5EDb3A432268e5831',
-    'USDC.e': '0xFF970A61A04b1cA14834A43f5dE4533eBDDB5CC8',
-  },
-  polygon: {
-    USDC: '0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359',
-    'USDC.e': '0x2791Bca1f2de4661ED88A30C99A7a9449Aa84174',
-  },
-};
-
-const clients = {
-  base: createPublicClient({ chain: base, transport: http('https://mainnet.base.org') }),
-  arbitrum: createPublicClient({ chain: arbitrum, transport: http('https://arb1.arbitrum.io/rpc') }),
-  polygon: createPublicClient({ chain: polygon, transport: http('https://polygon-bor-rpc.publicnode.com') }),
-};
-
-async function checkWallet(name, address) {
-  console.log(`\n─── ${name}: ${address} ───`);
-
-  for (const [chainName, client] of Object.entries(clients)) {
-    try {
-      const ethBal = await client.getBalance({ address });
-      const ethStr = formatEther(ethBal);
-      const nativeName = chainName === 'polygon' ? 'POL' : 'ETH';
-
-      const tokens = TOKENS[chainName];
-      let tokenLine = '';
-      for (const [symbol, tokenAddr] of Object.entries(tokens)) {
-        try {
-          const bal = await client.readContract({ address: tokenAddr, abi: ERC20_ABI, functionName: 'balanceOf', args: [address] });
-          const decimals = await client.readContract({ address: tokenAddr, abi: ERC20_ABI, functionName: 'decimals' });
-          const formatted = formatUnits(bal, decimals);
-          if (parseFloat(formatted) > 0) {
-            tokenLine += ` | ${formatted} ${symbol}`;
-          }
-        } catch {
-          // token might not exist on chain
-        }
-      }
-
-      if (parseFloat(ethStr) > 0 || tokenLine) {
-        console.log(`  ${chainName}: ${ethStr} ${nativeName}${tokenLine}`);
-      }
-    } catch (err) {
-      console.log(`  ${chainName}: RPC error (${err.shortMessage || err.message})`);
-    }
-  }
-}
-
-console.log('Wallet Balance Check');
-console.log('====================');
-
-await checkWallet('Deployer', DEPLOYER);
-await checkWallet('Test Wallet 1 (Phase 7)', TEST_WALLET_1);
-
-console.log('\n====================');
-console.log('Done. Use these balances to plan funded tests.');