ipor-fusion 4.1.1.dev2__tar.gz → 4.2.0.dev9__tar.gz

{ipor_fusion-4.1.1.dev2 → ipor_fusion-4.2.0.dev9}/AGENTS.md

@@ -174,7 +174,7 @@ checkout's default profile), the pending reader included.
   subpackages do not list them). Their exceptions stay in `errors` and the top
   level. `ipor_fusion.guide` keeps its own namespace. The
   public modules (`about`, `cache`, `chains`, `dependency_graph`, `errors`, `explorer`,
-  `field_docs`, `market_ids`, `market_info`, `morpho_api`, `preflight`, `registry`, `substrates`, `types`,
+  `field_docs`, `fuse_whitelist`, `market_ids`, `market_info`, `morpho_api`, `preflight`, `registry`, `substrates`, `types`,
   `validation`, `vault_data`, `vault_info`) stay importable for the names they
   define and the moved names README lists; `cli`, `mcp`, every other module and
   every submodule of a public subpackage (`core.contract`, `fuses.base`, ...) are
@@ -246,6 +246,13 @@ checkout's default profile), the pending reader included.
   `registry.py` the ipor-abi address registry (`fetch_address_registry` →
   `AddressRegistry`, one raw-GitHub file per chain in `REGISTRY_CHAIN_IDS`, cached ten
   minutes in the process, for good at a commit ref) and the `fusion address` documents;
+  `fuse_whitelist.py` the on-chain Fuse Whitelist (`IporFusionFuseWhitelistProxy`,
+  resolved through `registry.py`): `read_market_fuses` / `read_fuse_entries` in
+  Multicall3 batches, `check_fuses` + `fuse_whitelist_issues` (the warnings
+  `validate_vault` and `preflight_execute` add, each naming the active
+  replacement) and the `fusion fuse whitelist` document; `getFusesByMarketId`
+  returns deprecated fuses too, so state is always read alongside; it reads the
+  registry with a 5 s timeout and `stale_if_error`, since the check is optional;
   `morpho_api.py` the Morpho public GraphQL API client (`fetch_market`, `fetch_vault`,
   `PUBLIC_ALLOCATOR_ADDRESSES`; it narrows the GraphQL body from `object`);
   `market_info.py` — `build_morpho_blue_market_json`, `build_meta_morpho_json`, the
@@ -477,7 +484,8 @@ byte, e.g. Ebisu ZAPPER/REGISTRY).
 ## CLI and MCP
 
 `fusion address` (lookup, names, list; the ipor-abi registry through `registry.py`),
-`fusion config` (set-provider, set-etherscan-key, show), `fusion market`
+`fusion config` (set-provider, set-etherscan-key, show), `fusion fuse`
+(whitelist; the on-chain Fuse Whitelist through `fuse_whitelist.py`), `fusion market`
 (morpho-blue, meta-morpho), `fusion vault` (add, remove, list, info, validate,
 role-accounts, oracle-mapping, preflight). `vault info` runs independent fetch pipelines
 (vault/asset, fees, WithdrawManager, markets, roles) concurrently on a
@@ -495,7 +503,7 @@ Every CLI command has an MCP tool (`fusion changelog` maps to `server_info`;
 the rest share names). Read-only: `vault_info`, `vault_validate`, `vault_preflight`,
 `vault_list`, `vault_role_accounts`, `vault_oracle_mapping`, `market_morpho_blue`,
 `market_meta_morpho`, `address_lookup`, `address_names`, `address_list`,
-`config_show`, `server_info`. Mutating: `vault_add`,
+`fuse_whitelist`, `config_show`, `server_info`. Mutating: `vault_add`,
 `vault_remove`, `config_set_provider`, `config_set_etherscan_key`. Every new
 CLI command gets a matching MCP tool with the same argument names; an optional
 chain or block is `None` when omitted (`ChainArg`, `BlockArg`); a chain of

{ipor_fusion-4.1.1.dev2 → ipor_fusion-4.2.0.dev9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: ipor-fusion
-Version: 4.1.1.dev2
+Version: 4.2.0.dev9
 Summary: The IPOR Fusion SDK for Python
 Project-URL: homepage, https://ipor.io
 Project-URL: repository, https://github.com/IPOR-Labs/ipor-fusion.py
@@ -251,6 +251,9 @@ fusion market meta-morpho 0xVAULT_ADDRESS --chain ethereum
 # Find IPOR Fusion contracts in the ipor-abi registry
 fusion address lookup SupplyFuseAaveV3 --chain base
 fusion address list --chain base
+
+# Whitelisted fuses of a market: reuse one instead of deploying a copy
+fusion fuse whitelist --chain arbitrum --market-id 11
 ```
 
 ## MCP Server
@@ -309,7 +312,7 @@ Available tools:
 | `config_set_provider` | Set RPC provider URL for a chain (auto-detects chain ID) |
 | `config_set_etherscan_key` | Set Etherscan API key (enables contract name resolution) |
 | `vault_info` | Full on-chain vault state — assets, fuses, balances, fees, lending health, reconciliation |
-| `vault_validate` | Health verdict (ok / warning / critical) with the reconciliation, lending-health and ERC20 numbers behind it |
+| `vault_validate` | Health verdict (ok / warning / critical) with the reconciliation, lending-health and ERC20 numbers behind it, plus a warning for each fuse not active in the Fuse Whitelist |
 | `vault_preflight` | Check execute calldata as its sender would send it: permission, fuses, balance fuses, simulation |
 | `vault_role_accounts` | Accounts holding each AccessManager role on a vault |
 | `vault_oracle_mapping` | Price-oracle sources per asset for a vault |
@@ -321,6 +324,7 @@ Available tools:
 | `address_lookup` | IPOR Fusion contracts by name substring or address (ipor-abi registry) |
 | `address_names` | Contract names in the registry, with the chains that have them |
 | `address_list` | One chain's full `{name: address}` registry |
+| `fuse_whitelist` | The fuses the chain's Fuse Whitelist lists for a market (active first) |
 
 Configure providers and vaults via `fusion config` or the MCP config tools first.
 

{ipor_fusion-4.1.1.dev2 → ipor_fusion-4.2.0.dev9}/README.md

@@ -202,6 +202,9 @@ fusion market meta-morpho 0xVAULT_ADDRESS --chain ethereum
 # Find IPOR Fusion contracts in the ipor-abi registry
 fusion address lookup SupplyFuseAaveV3 --chain base
 fusion address list --chain base
+
+# Whitelisted fuses of a market: reuse one instead of deploying a copy
+fusion fuse whitelist --chain arbitrum --market-id 11
 ```
 
 ## MCP Server
@@ -260,7 +263,7 @@ Available tools:
 | `config_set_provider` | Set RPC provider URL for a chain (auto-detects chain ID) |
 | `config_set_etherscan_key` | Set Etherscan API key (enables contract name resolution) |
 | `vault_info` | Full on-chain vault state — assets, fuses, balances, fees, lending health, reconciliation |
-| `vault_validate` | Health verdict (ok / warning / critical) with the reconciliation, lending-health and ERC20 numbers behind it |
+| `vault_validate` | Health verdict (ok / warning / critical) with the reconciliation, lending-health and ERC20 numbers behind it, plus a warning for each fuse not active in the Fuse Whitelist |
 | `vault_preflight` | Check execute calldata as its sender would send it: permission, fuses, balance fuses, simulation |
 | `vault_role_accounts` | Accounts holding each AccessManager role on a vault |
 | `vault_oracle_mapping` | Price-oracle sources per asset for a vault |
@@ -272,6 +275,7 @@ Available tools:
 | `address_lookup` | IPOR Fusion contracts by name substring or address (ipor-abi registry) |
 | `address_names` | Contract names in the registry, with the chains that have them |
 | `address_list` | One chain's full `{name: address}` registry |
+| `fuse_whitelist` | The fuses the chain's Fuse Whitelist lists for a market (active first) |
 
 Configure providers and vaults via `fusion config` or the MCP config tools first.
 

{ipor_fusion-4.1.1.dev2 → ipor_fusion-4.2.0.dev9}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "ipor-fusion"
-version = "4.1.1.dev2"
+version = "4.2.0.dev9"
 description = "The IPOR Fusion SDK for Python"
 authors = [
     { name = "Adam Mydlarz", email = "amydlarz@gmail.com" },

{ipor_fusion-4.1.1.dev2 → ipor_fusion-4.2.0.dev9}/skills/ipor-deploy-vault/SKILL.md

@@ -68,6 +68,18 @@ greppable.
    `AaveV3WithPriceOracleMiddlewareBalanceFuse`, Arbitrum only the latter, so a
    name that resolves on one chain may not exist on the next. Resolve
    `(chain, name)` in `ipor-abi`; never reuse an address across chains.
+   A registry entry is not a whitelist entry. Before adding or deploying a
+   fuse, check the chain's Fuse Whitelist: `fusion fuse whitelist --chain base
+   --market-id 11` or the MCP tool `fuse_whitelist` lists a market's active
+   fuses. On-chain it is `IporFusionFuseWhitelistProxy` in the same
+   `addresses.json`: `getFusesByMarketId(market_id)` returns a market's fuses,
+   active and deprecated together, and only those whose
+   `getFuseByAddress(fuse)` reports `fuseState` 1 (active) belong in a new
+   vault. Use an active fuse when one covers the action. A redeployed or
+   forked copy of a whitelisted fuse is never whitelisted, and the IPOR app
+   shows its market as unknown; a fuse for an action no active fuse covers
+   goes through the whitelist review at
+   https://ipor.io/docs/build-on-fusion/integrating-a-new-market.md.
 6. **`.send(ctx)` signs locally and needs a private key in the `Web3Context`;
    `.call(ctx)` previews without one.** Sending through a context built with
    `signer=` alone raises `ValueError("Private key required for sending
@@ -238,6 +250,8 @@ Resolve fuse addresses by registry name and chain from `ipor-abi`
 `fusion address lookup SupplyFuseAaveV3 --chain base`, or the MCP tool
 `address_lookup` (the hosted server's `fusion_address_lookup`). The SDK class
 for a registry name swaps the parts: `SupplyFuseAaveV3` is `AaveV3SupplyFuse`.
+Then confirm the fuse is active in the chain's Fuse Whitelist with
+`fusion fuse whitelist` or the MCP tool `fuse_whitelist` (invariant 5).
 
 ## Pointers
 

{ipor_fusion-4.1.1.dev2 → ipor_fusion-4.2.0.dev9}/src/ipor_fusion/__init__.py

@@ -146,6 +146,26 @@ from ipor_fusion.errors import (
 )
 from ipor_fusion.explorer import get_contract_name, get_deployment_tx
 from ipor_fusion.field_docs import DOCS
+from ipor_fusion.fuse_whitelist import (
+    FUSE_WHITELIST_READ_ERRORS,
+    FUSE_WHITELIST_REGISTRY_NAME,
+    FuseIssueKind,
+    FuseRole,
+    FuseState,
+    FuseWhitelist,
+    FuseWhitelistCheck,
+    FuseWhitelistIssue,
+    FuseWhitelistJson,
+    WhitelistEntry,
+    WhitelistEntryJson,
+    build_fuse_whitelist_json,
+    check_fuses,
+    fetch_fuse_whitelist_json,
+    fuse_whitelist_for_chain,
+    fuse_whitelist_issues,
+    read_fuse_entries,
+    read_market_fuses,
+)
 from ipor_fusion.fuses import (
     AaveV3BorrowFuse,
     AaveV3SupplyFuse,
@@ -405,6 +425,7 @@ from ipor_fusion.validation import (
     VaultState,
     VaultValidation,
     WithdrawQueue,
+    read_vault_fuse_whitelist,
     validate_vault,
     validate_vault_state,
 )
@@ -537,6 +558,24 @@ __all__ = [
     "fetch_address_registries",
     "fetch_address_registry",
     "registry_url",
+    "FUSE_WHITELIST_READ_ERRORS",
+    "FUSE_WHITELIST_REGISTRY_NAME",
+    "FuseIssueKind",
+    "FuseRole",
+    "FuseState",
+    "FuseWhitelist",
+    "FuseWhitelistCheck",
+    "FuseWhitelistIssue",
+    "FuseWhitelistJson",
+    "WhitelistEntry",
+    "WhitelistEntryJson",
+    "build_fuse_whitelist_json",
+    "check_fuses",
+    "fetch_fuse_whitelist_json",
+    "fuse_whitelist_for_chain",
+    "fuse_whitelist_issues",
+    "read_fuse_entries",
+    "read_market_fuses",
     "ContextManager",
     "Call",
     "get_logs_adaptive",
@@ -791,6 +830,7 @@ __all__ = [
     "WithdrawQueue",
     "validate_vault",
     "validate_vault_state",
+    "read_vault_fuse_whitelist",
     "compute_update_groups",
     "compute_update_reach",
     "find_markets_missing_erc20_dependency",

ipor_fusion-4.2.0.dev9/src/ipor_fusion/cli/fuse_cmd.py

@@ -0,0 +1,108 @@
+"""`fusion fuse whitelist` — the fuses the chain's Fuse Whitelist lists for a market."""
+
+from __future__ import annotations
+
+import json as json_lib
+from datetime import UTC, datetime
+
+import click
+
+from ipor_fusion.cli.config_store import load_config
+from ipor_fusion.cli.options import BLOCK_NUMBER, CHAIN, _resolve_provider
+from ipor_fusion.cli.vault_rendering import _print_table
+from ipor_fusion.core.context import Web3Context
+from ipor_fusion.errors import (
+    AddressNotInRegistryError,
+    AddressRegistryError,
+    EmptyCallResultError,
+    UnsupportedChainError,
+)
+from ipor_fusion.fuse_whitelist import MAX_MARKET_ID, fetch_fuse_whitelist_json
+from ipor_fusion.types import ChainId, MarketId
+
+
+@click.group()
+def fuse() -> None:
+    """Inspect fuses: which ones IPOR whitelists for a market."""
+
+
+@fuse.command("whitelist")
+@click.option(
+    "--chain",
+    "chain_id",
+    type=CHAIN,
+    required=True,
+    help="Chain ID or name (ethereum, base, arbitrum, ...).",
+)
+@click.option(
+    "--market-id",
+    "market_id",
+    type=click.IntRange(min=0, max=MAX_MARKET_ID),
+    required=True,
+    help="Numeric market ID (IporFusionMarkets), e.g. 11 for EULER_V2.",
+)
+@click.option(
+    "--block-number",
+    "--block",
+    "block_number",
+    type=BLOCK_NUMBER,
+    default=None,
+    help="Block number for on-chain reads (0 or omitted: latest).",
+)
+@click.option(
+    "--include-deprecated",
+    is_flag=True,
+    default=False,
+    help="Also list deprecated and removed fuses.",
+)
+@click.option(
+    "--json",
+    "json_output",
+    is_flag=True,
+    default=False,
+    help="Emit machine-readable JSON instead of a table.",
+)
+def whitelist(
+    chain_id: ChainId,
+    market_id: int,
+    block_number: int | None,
+    include_deprecated: bool,
+    json_output: bool,
+) -> None:
+    """List the whitelisted fuses of a market: use one of these instead of
+    deploying a copy, which the IPOR app would show as unknown."""
+    ctx = Web3Context.from_url(_resolve_provider(load_config(), chain_id))
+    if block_number is not None:
+        ctx = ctx.at_block(block_number)
+    try:
+        document = fetch_fuse_whitelist_json(
+            ctx, MarketId(market_id), include_deprecated=include_deprecated
+        )
+    except (
+        AddressNotInRegistryError,
+        AddressRegistryError,
+        EmptyCallResultError,
+        UnsupportedChainError,
+    ) as exc:
+        raise click.UsageError(str(exc)) from exc
+    if json_output:
+        click.echo(json_lib.dumps(document, indent=2))
+        return
+    click.secho(
+        f"Fuse Whitelist {document['whitelist']} on {document['chain']},"
+        f" market {document['market']}",
+        bold=True,
+    )
+    _print_table(
+        ("Fuse", "State", "Type", "Role", "Added"),
+        [
+            (
+                f["fuse"],
+                f["state"],
+                f["type_name"],
+                f["role"] or "?",
+                datetime.fromtimestamp(f["added_at"], UTC).date().isoformat(),
+            )
+            for f in document["fuses"]
+        ],
+    )

{ipor_fusion-4.1.1.dev2 → ipor_fusion-4.2.0.dev9}/src/ipor_fusion/cli/main.py

@@ -8,6 +8,7 @@ import click
 from ipor_fusion.cli.address_cmd import address
 from ipor_fusion.cli.changelog_cmd import changelog
 from ipor_fusion.cli.config_cmd import config
+from ipor_fusion.cli.fuse_cmd import fuse
 from ipor_fusion.cli.market_cmd import market
 from ipor_fusion.cli.preflight_cmd import preflight
 from ipor_fusion.cli.vault_cmd import vault
@@ -34,6 +35,7 @@ def cli(ctx: click.Context, verbose: bool, quiet: bool, no_color: bool) -> None:
 cli.add_command(address)
 cli.add_command(changelog)
 cli.add_command(config)
+cli.add_command(fuse)
 cli.add_command(market)
 cli.add_command(vault)
 vault.add_command(preflight)