@kasufinance/kasu-sdk 2.4.2 → 2.5.0

package/src/tests/sample.test.ts

@@ -1,42 +1,63 @@
+/**
+ * Live-network spec. It talks to a real subgraph and a real RPC, so it is
+ * OPT-IN: it runs only under `LIVE_TESTS=1` (`npm run test:live`) and is
+ * skipped by `npm test` and `npm run test:unit`. A network problem must never
+ * be able to fail a pull request that did not touch the network.
+ *
+ * Known state: the stack it points at (`kasu-wip-sepolia` on The Graph Studio,
+ * with Base Sepolia addresses) is decommissioned, so `npm run test:live` fails
+ * on a missing deployment. That is pre-existing and unrelated to the gate; the
+ * spec needs retargeting at a live deployment before it means anything.
+ */
 import * as ethers from 'ethers';
 
 import { KasuSdk } from '..';
 import { SdkConfig } from '../sdk-config';
 
-test('subgraphCall', async () => {
-    const provider = new ethers.providers.JsonRpcProvider(
-        'https://sepolia.base.org',
-    );
+const live = process.env.LIVE_TESTS === '1';
 
-    const wallet = new ethers.Wallet(
-        'dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd',
-        provider,
-    );
-    const config = new SdkConfig({
-        subgraphUrl:
-            'https://api.studio.thegraph.com/query/63245/kasu-wip-sepolia/version/latest',
-        contracts: {
-            IKSULocking: '0x529A81c11ab6176c5E88670d293BB771800066a2',
-            IKSULockBonus: '0xBBfFd5F744156FFc526df12F5e09dC7b208Be740',
-            KSUToken: '0xa0f698Feb9Bc2BeA6E85eb071D5E3F59dc5bC56b',
-            UserManager: '0xA788e9223fDd7c9Db91Ef133BbeB73515c174773',
-            LendingPoolManager: '0xc074Aaf2565aae18db2c7498ee1387610a809F40',
-            KasuAllowList: '0xaE94F9D187c9eA649ADd4966340831F7cc62B69c',
-            SystemVariables: '0xB174a3240B23e595e90bC2736A5b8ec674Cba73A',
-            UserLoyaltyRewards: '0x259631CE76FD9F65296549Cd81232aa59D53Dd0c',
-            KsuPrice: '0x2027192aCFB4810Ad734A212F19d7030F698aCE3',
-            ClearingCoordinator: '0x2027192aCFB4810Ad734A212F19d7030F698aCE3',
-            KasuNFTs: '0x0000000000000000000000000000000000000000',
-            ExternalTVL: '0x0000000000000000000000000000000000000000',
-        },
-        directusUrl: 'https://kasu-finance.directus.app',
-        UNUSED_LENDING_POOL_IDS: [''],
-    });
-    const sdk = new KasuSdk(config, wallet);
+(live ? describe : describe.skip)('live network — subgraph read', () => {
+    it('reads a user APY bonus through the subgraph', async () => {
+        const provider = new ethers.providers.JsonRpcProvider(
+            'https://sepolia.base.org',
+        );
+
+        // Generated per run. This spec only reads, so the wallet never needs
+        // funds or a key that outlives the process — and a public repository
+        // must never carry one.
+        const wallet = ethers.Wallet.createRandom().connect(provider);
+
+        const config = new SdkConfig({
+            subgraphUrl:
+                'https://api.studio.thegraph.com/query/63245/kasu-wip-sepolia/version/latest',
+            contracts: {
+                IKSULocking: '0x529A81c11ab6176c5E88670d293BB771800066a2',
+                IKSULockBonus: '0xBBfFd5F744156FFc526df12F5e09dC7b208Be740',
+                // The allow below is for a public Base Sepolia contract
+                // address, not a secret: the generic-api-key rule fires on a
+                // "Token" key name sitting next to a long hex literal.
+                KSUToken: '0xa0f698Feb9Bc2BeA6E85eb071D5E3F59dc5bC56b', // gitleaks:allow
+                UserManager: '0xA788e9223fDd7c9Db91Ef133BbeB73515c174773',
+                LendingPoolManager: '0xc074Aaf2565aae18db2c7498ee1387610a809F40',
+                KasuAllowList: '0xaE94F9D187c9eA649ADd4966340831F7cc62B69c',
+                SystemVariables: '0xB174a3240B23e595e90bC2736A5b8ec674Cba73A',
+                UserLoyaltyRewards:
+                    '0x259631CE76FD9F65296549Cd81232aa59D53Dd0c',
+                KsuPrice: '0x2027192aCFB4810Ad734A212F19d7030F698aCE3',
+                ClearingCoordinator:
+                    '0x2027192aCFB4810Ad734A212F19d7030F698aCE3',
+                KasuNFTs: '0x0000000000000000000000000000000000000000',
+                ExternalTVL: '0x0000000000000000000000000000000000000000',
+            },
+            directusUrl: 'https://kasu-finance.directus.app',
+            UNUSED_LENDING_POOL_IDS: [''],
+        });
+        const sdk = new KasuSdk(config, wallet);
 
-    console.log(
-        await sdk.UserLending.getUserApyBonus(
+        const bonus = await sdk.UserLending.getUserApyBonus(
             '0xef38c432682ab49095e00442aaa354e955ac03a5',
-        ),
-    );
+        );
+
+        expect(bonus).toBeDefined();
+    });
 });

package/.eslintignore

@@ -1,3 +0,0 @@
-/**/*.js
-src/contracts/**
-jest-config.ts

package/.eslintrc.json

@@ -1,90 +0,0 @@
-{
-    "extends": [
-        "plugin:@typescript-eslint/strict-type-checked",
-        "plugin:@typescript-eslint/stylistic-type-checked",
-        "plugin:import/errors",
-        "plugin:import/warnings",
-        "plugin:import/typescript",
-        "prettier"
-    ],
-    "settings": {
-        "import/resolver": {
-            "node": {
-                "extensions": [".js", ".jsx", ".ts", ".tsx", ".d.ts"], // add .d.ts here
-                "moduleDirectory": ["src", "node_modules"]
-            }
-        }
-    },
-    "parserOptions": {
-        "project": ["./tsconfig.json"] // Specify it only for TypeScript files
-    },
-    "ignorePatterns": [
-        "node_modules",
-        "src/contracts",
-        "index.ts",
-        "dist/**/*"
-    ],
-    "rules": {
-        "@typescript-eslint/no-non-null-assertion": "warn",
-        "@typescript-eslint/prefer-ts-expect-error": "warn",
-        "@typescript-eslint/restrict-plus-operands": "warn",
-        "@typescript-eslint/ban-ts-comment": [
-            "warn",
-            {
-                "ts-expect-error": "allow-with-description",
-                "ts-ignore": "allow-with-description"
-            }
-        ],
-        "@typescript-eslint/ban-tslint-comment": "warn",
-        "@typescript-eslint/no-explicit-any": "warn",
-        "testing-library/prefer-screen-queries": "off",
-        "@typescript-eslint/no-unused-vars": [
-            "warn",
-            {
-                "argsIgnorePattern": "^_",
-                "varsIgnorePattern": "^_"
-            }
-        ],
-        "sort-imports": [
-            "warn",
-            {
-                "ignoreCase": true,
-                "ignoreDeclarationSort": true
-            }
-        ],
-        "import/order": [
-            "error",
-            {
-                "groups": [
-                    "builtin",
-                    "external",
-                    "internal",
-                    "parent",
-                    "sibling",
-                    "index"
-                ],
-                "pathGroups": [
-                    {
-                        "pattern": "src/**",
-                        "group": "internal",
-                        "position": "before"
-                    },
-                    {
-                        "pattern": "test/**",
-                        "group": "internal",
-                        "position": "before"
-                    }
-                ],
-                "pathGroupsExcludedImportTypes": ["builtin", "external"],
-                "newlines-between": "always",
-                "alphabetize": {
-                    "order": "asc",
-                    "caseInsensitive": true
-                }
-            }
-        ],
-        "@typescript-eslint/explicit-function-return-type": "error",
-        "@typescript-eslint/explicit-module-boundary-types": "error"
-    },
-    "plugins": ["@typescript-eslint", "import"]
-}

package/.github/workflows/ci.yml

@@ -1,39 +0,0 @@
-name: CI
-
-on:
-  push:
-    branches:
-      - main
-      - develop
-  pull_request:
-    branches:
-      - main
-      - develop
-
-permissions:
-  contents: read
-
-jobs:
-  quality-checks:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      - name: Set up Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          cache: npm
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Generate contract typings
-        run: npm run build-tc
-
-      - name: Lint & type-check
-        run: npm run build
-
-      - name: Bundle library
-        run: npm run rollup-build

package/.github/workflows/gitleaks.yml

@@ -1,22 +0,0 @@
-name: gitleaks
-
-on:
-  push:
-    branches: [main, master, develop]
-  pull_request:
-
-permissions:
-  contents: read
-
-jobs:
-  gitleaks:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Run gitleaks
-        run: |
-          curl -sSfL https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz | tar -xz gitleaks
-          ./gitleaks git --redact --no-banner .

package/.github/workflows/main.yml

@@ -1,41 +0,0 @@
-name: Verify release tag
-
-# npm publishes are intentionally manual (policy: always run `npm publish`
-# locally as a kasu_finance org member). This workflow only verifies the
-# pushed tag matches package.json — it does NOT publish.
-
-on:
-  push:
-    tags:
-      - 'v[0-9]+.[0-9]+.[0-9]+'
-
-  workflow_dispatch:
-
-jobs:
-  verify:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Get tag version
-        id: tag_version
-        run: |
-          RAW_TAG="${GITHUB_REF#refs/tags/}"
-          echo "TAG_VERSION=${RAW_TAG#v}" >> "$GITHUB_OUTPUT"
-
-      - name: Read package version
-        id: package_version
-        run: |
-          PKG_VERSION=$(node -p "require('./package.json').version")
-          echo "PACKAGE_VERSION=$PKG_VERSION" >> "$GITHUB_OUTPUT"
-
-      - name: Ensure tag matches package.json
-        run: |
-          if [ "${{ steps.tag_version.outputs.TAG_VERSION }}" != "${{ steps.package_version.outputs.PACKAGE_VERSION }}" ]; then
-            echo "Tag ${{ steps.tag_version.outputs.TAG_VERSION }} does not match package.json ${{ steps.package_version.outputs.PACKAGE_VERSION }}."
-            exit 1
-          fi
-          echo "Tag ${{ steps.tag_version.outputs.TAG_VERSION }} matches package.json. Run 'npm publish' locally to release."

package/.gitleaksignore

@@ -1,19 +0,0 @@
-# Baseline: historical findings triaged 2026-08-11 (real ones rotated, rest false positives).
-# New findings will still fail CI. Format: commit:file:rule:line
-0a13e5c82c4b0dea51a1bca2bcffd4dbe7d9e9c8:src/config/sdk/mainnet.config.ts:generic-api-key:9
-0a13e5c82c4b0dea51a1bca2bcffd4dbe7d9e9c8:src/config/sdk/testnet.config.ts:generic-api-key:9
-1a0e64886602fdbb0789b72e3be80460dfb2a9bc:src/tests/sample.test.ts:generic-api-key:18
-41992e186efdd602e49a07a9cfaa17a046194afd:src/tests/sample.test.ts:generic-api-key:20
-61345a2c016dd28bd3fe647b01ae92321f4e6797:src/config/sdk/mainnet.config.ts:generic-api-key:9
-61345a2c016dd28bd3fe647b01ae92321f4e6797:src/config/sdk/testnet.config.ts:generic-api-key:9
-678e94f28e9894246569775e06b7bfc145c90db9:src/config/sdk/mainnet.config.ts:generic-api-key:9
-678e94f28e9894246569775e06b7bfc145c90db9:src/config/sdk/testnet.config.ts:generic-api-key:9
-76241c92f25050ca6b73e77ce0514abc8c5038d8:src/config/sdk/mainnet.config.ts:generic-api-key:9
-76241c92f25050ca6b73e77ce0514abc8c5038d8:src/config/sdk/testnet.config.ts:generic-api-key:9
-aa4522559522cf1f207b834fbd0318ef96f1f635:src/app/api/kyc-challenge/route.ts:generic-api-key:5
-c65a422c4f96ba302c047fe1a4e3d6d74dcc2744:src/facade/chain-configs.ts:generic-api-key:18
-cee7050d62ae95f1b6d88592de8eaff576719d28:src/tests/sample.test.ts:generic-api-key:18
-f085d18b3b818f5853a934aee12ce1611afc738e:src/config/sdk/mainnet.config.ts:generic-api-key:9
-f085d18b3b818f5853a934aee12ce1611afc738e:src/config/sdk/testnet.config.ts:generic-api-key:9
-f92e12c74df7990a519eec7c4940a655cbaa3160:src/actions/getTokenPrice.ts:generic-api-key:52
-fc75e2491f414032d69a352f7a0e1fcd3f515f99:.env.local:generic-api-key:2

package/.prettierignore

@@ -1,3 +0,0 @@
-.nyc_output
-package-lock.json
-src/contracts/**

package/.prettierrc

@@ -1,28 +0,0 @@
-{
-    "arrowParens": "always",
-    "singleQuote": true,
-    "tabWidth": 4,
-    "semi": true,
-    "trailingComma": "all",
-    "endOfLine": "auto",
-    "overrides": [
-        {
-            "files": ".prettierrc",
-            "options": {
-                "parser": "json"
-            }
-        },
-        {
-            "files": ["*.ts", "*.mts"],
-            "options": {
-                "parser": "typescript"
-            }
-        },
-        {
-            "files": ["*.yml", "*.yaml"],
-            "options": {
-                "tabWidth": 2
-            }
-        }
-    ]
-}