ipor-fusion 4.2.0.dev20__tar.gz → 4.2.1.dev2__tar.gz

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ipor-fusion",
-  "version": "4.1.0",
+  "version": "4.2.0",
   "description": "Skills for building on IPOR Fusion vaults with the ipor-fusion Python SDK, plus the hosted read-only inspection server",
   "author": {
     "name": "IPOR Labs",

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/AGENTS.md

@@ -202,6 +202,10 @@ checkout's default profile), the pending reader included.
 
 ## Layout (`src/ipor_fusion/`)
 
+- `redaction.py` — `redact_provider_urls`, the one redactor for text carrying
+  exception messages (the CLI group and `main`, every MCP tool through
+  `_RedactingFastMCP.call_tool`, `LogScanError` through `core/logs.py`), and
+  `mask_provider_url`; a new entry point goes through it
 - `chains.py` chain registry; `market_ids.py` `IporFusionMarkets`; `types.py`; `errors.py`
   defines every SDK exception class (`tests/test_error_hierarchy.py` pins it)
 - `fusion_errors.py` — `FUSION_ERROR_SIGNATURES`, every custom error of the

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/CHANGELOG.md

@@ -2,6 +2,62 @@
 
 <!-- version list -->
 
+## v4.2.0 (2026-11-05)
+
+### Bug Fixes
+
+- **sdk**: Harden the Fuse Whitelist check against unreadable and non-fuse entries
+  ([`dbd2e55`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/dbd2e5538368b2fdf0caa5e491cdea80f05c2bef))
+
+- **sdk**: Keep a Comet position critical when its limit or an unused feed fails
+  ([`cb6661c`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/cb6661c066540aa699ec3e9f02928a63f0c34c09))
+
+- **sdk**: Keep provider URLs and config values out of error text
+  ([`276ab7b`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/276ab7b95c3ea4a11b50b37c7b61d8fc11f015e9))
+
+- **sdk**: Report Morpho and Euler debt that has no usable health as a risk
+  ([`88a3c55`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/88a3c55373ce857b7f79895332ff51fde25a89da))
+
+- **sdk**: Sanitize text read from contracts
+  ([`7d692af`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/7d692af40030eba067657058efe1e58284099482))
+
+- **sdk**: Tell agents to reuse whitelisted fuses instead of deploying copies
+  ([`614ab00`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/614ab003a24bf0b21c11dbd0f5000f8eaaadf1c4))
+
+### Documentation
+
+- **sdk**: Add a Compound V3 Institutional USDC borrow example
+  ([`5616c46`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/5616c46592ef374134e40645dc1f12cb6038ce61))
+
+- **sdk**: Label the Compound example's simulation-only constructs
+  ([`5fca364`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/5fca3643c2c77dec82354e768b031a1ef7a9762c))
+
+- **sdk**: Name the fuse whitelist command in the guide
+  ([`b17b62f`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/b17b62f157aa94eecbab214d10b1274887a72fe9))
+
+### Features
+
+- **sdk**: Check vault and batch fuses against the on-chain Fuse Whitelist
+  ([`d289d6d`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/d289d6db49d300be269967f3c58fbd501de53974))
+
+- **sdk**: Report Compound V3 lending health
+  ([`5baa9c2`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/5baa9c243b9a8f8c9986f08bce701acda5ef98ad))
+
+- **sdk**: Support Compound V3 Institutional USDC market fuses
+  ([`b01c5db`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/b01c5db8904e88ce734698f3037327e72234f676))
+
+### Testing
+
+- **sdk**: Drop type ignores from the redaction tests' RPC server
+  ([`ffa57c1`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/ffa57c1c7ea9f1341e7f8bde8a19f84f9c056d88))
+
+- **sdk**: Keep the live preflight checks independent of the Fuse Whitelist
+  ([`e9bc161`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/e9bc1618228234b8b0c6e993b003eaca58cdc6ba))
+
+- **sdk**: Pass the live context arguments in the Fuse Whitelist preflight test
+  ([`b974e08`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/b974e0864aaa9cf16786a74a4b39c268d4b7214a))
+
+
 ## v4.1.0 (2026-11-03)
 
 ### Bug Fixes

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: ipor-fusion
-Version: 4.2.0.dev20
+Version: 4.2.1.dev2
 Summary: The IPOR Fusion SDK for Python
 Project-URL: homepage, https://ipor.io
 Project-URL: repository, https://github.com/IPOR-Labs/ipor-fusion.py

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "ipor-fusion"
-version = "4.2.0.dev20"
+version = "4.2.1.dev2"
 description = "The IPOR Fusion SDK for Python"
 authors = [
     { name = "Adam Mydlarz", email = "amydlarz@gmail.com" },

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/src/ipor_fusion/cli/config_cmd.py

@@ -5,9 +5,9 @@ import click
 from ipor_fusion.cli.config_store import (
     FusionConfig,
     load_config,
-    mask_provider_url,
     save_config,
 )
+from ipor_fusion.redaction import mask_provider_url
 from ipor_fusion.types import ChainId
 
 

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/src/ipor_fusion/cli/config_store.py

@@ -3,7 +3,6 @@ from __future__ import annotations
 import json
 import os
 from pathlib import Path
-from urllib.parse import urlsplit
 
 import click
 from eth_typing import ChecksumAddress
@@ -54,18 +53,14 @@ class FusionConfig(BaseModel):
         return data
 
 
-def mask_provider_url(url: str) -> str:
-    """Render a provider URL as scheme and host only.
-
-    RPC provider URLs carry API keys in the path, the query string or the
-    userinfo, so nothing but the scheme and the host (with port) may be
-    displayed. An unparsable value is rendered as ``***``.
-    """
-    parts = urlsplit(url)
-    host = parts.netloc.rpartition("@")[2]
-    if not parts.scheme or not host:
-        return "***"
-    return f"{parts.scheme}://{host}"
+def _describe_invalid_fields(exc: ValidationError) -> str:
+    """Which fields failed and why, never their values: the file holds API keys."""
+    return "\n".join(
+        f"  {'.'.join(str(part) for part in error['loc'])}: {error['msg']}"
+        for error in exc.errors(
+            include_input=False, include_url=False, include_context=False
+        )
+    )
 
 
 def load_config() -> FusionConfig:
@@ -75,7 +70,7 @@ def load_config() -> FusionConfig:
         return FusionConfig.model_validate_json(CONFIG_FILE.read_text(encoding="utf-8"))
     except ValidationError as exc:
         raise click.ClickException(
-            f"Config {CONFIG_FILE} is invalid:\n{exc}\n"
+            f"Config {CONFIG_FILE} is invalid:\n{_describe_invalid_fields(exc)}\n"
             "Fix the file manually or delete it to start fresh."
         ) from exc
     except json.JSONDecodeError as exc:

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/src/ipor_fusion/cli/main.py

@@ -4,6 +4,7 @@ import os
 import sys
 
 import click
+import requests
 
 from ipor_fusion.cli.address_cmd import address
 from ipor_fusion.cli.changelog_cmd import changelog
@@ -12,9 +13,21 @@ from ipor_fusion.cli.fuse_cmd import fuse
 from ipor_fusion.cli.market_cmd import market
 from ipor_fusion.cli.preflight_cmd import preflight
 from ipor_fusion.cli.vault_cmd import vault
+from ipor_fusion.redaction import redact_provider_urls
 
 
-@click.group()
+class _RedactingGroup(click.Group):
+    """Click prints a `ClickException` itself, before `main` could see it."""
+
+    def invoke(self, ctx: click.Context) -> object:
+        try:
+            return super().invoke(ctx)
+        except click.ClickException as exc:
+            exc.message = redact_provider_urls(exc.message)
+            raise
+
+
+@click.group(cls=_RedactingGroup)
 @click.version_option(package_name="ipor_fusion")
 @click.option("--verbose", "-v", is_flag=True, help="Print RPC call details.")
 @click.option("--quiet", "-q", is_flag=True, help="Suppress non-essential output.")
@@ -49,16 +62,17 @@ def main() -> None:
         sys.exit(130)
     except click.UsageError:
         raise
-    except ConnectionError as exc:
-        click.secho(f"Connection failed: {exc}. Check your provider URL.", fg="red")
+    except (ConnectionError, requests.ConnectionError) as exc:
+        msg = redact_provider_urls(str(exc))
+        click.secho(f"Connection failed: {msg}. Check your provider URL.", fg="red")
         sys.exit(1)
     except ValueError as exc:
-        msg = str(exc)
+        msg = redact_provider_urls(str(exc))
         if "address" in msg.lower():
             click.secho(f"Invalid address: {msg}", fg="red")
         else:
             click.secho(f"Error: {msg}", fg="red")
         sys.exit(1)
     except Exception as exc:
-        click.secho(f"Error: {exc}", fg="red")
+        click.secho(f"Error: {redact_provider_urls(str(exc))}", fg="red")
         sys.exit(1)

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/src/ipor_fusion/core/logs.py

@@ -28,6 +28,7 @@ from web3.exceptions import Web3Exception
 from web3.types import BlockIdentifier, FilterParams, LogReceipt
 
 from ipor_fusion.errors import LogScanError
+from ipor_fusion.redaction import redact_provider_urls
 from ipor_fusion.types import ChainId
 
 # The log shapes the SDK's event readers accept: a receipt log from web3.py
@@ -70,7 +71,6 @@ _TRANSIENT_TEXT = re.compile(
     r"rate.?limit|too many requests|compute units|temporar|try again later", re.I
 )
 _TRANSIENT_STATUS = frozenset({429, 502, 503})
-_URL = re.compile(r"\w+://\S+")
 
 
 class LogSource(Protocol):
@@ -370,13 +370,13 @@ def _status_code(exc: BaseException) -> int | None:
 
 
 def _describe(exc: BaseException) -> str:
-    """Error text with the response body, provider URLs (they embed API keys)
-    removed, truncated."""
+    """Error text with the response body, provider URLs reduced to their host,
+    truncated."""
     text = f"{type(exc).__name__}: {exc}"
     body = getattr(getattr(exc, "response", None), "text", None)
     if isinstance(body, str) and body:
         text = f"{text} {body}"
-    return _URL.sub("<provider>", text)[:400]
+    return redact_provider_urls(text)[:400]
 
 
 def _is_transient(exc: BaseException) -> bool:

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/src/ipor_fusion/errors.py

@@ -12,6 +12,7 @@ from web3.types import TxParams, TxReceipt
 
 from ipor_fusion.fusion_errors import FUSION_ERROR_SIGNATURES
 from ipor_fusion.onchain_text import sanitize_onchain_text
+from ipor_fusion.redaction import redact_provider_urls
 from ipor_fusion.types import TxHash
 
 log = logging.getLogger(__name__)
@@ -148,7 +149,9 @@ def get_revert_reason(web3: Web3, tx_hash: TxHash, receipt: TxReceipt) -> str |
             or "execution reverted" in exc_message.lower()
         ):
             return exc_message
-        log.debug("Could not decode revert reason: %s", exc)
+        log.debug(
+            "Could not decode revert reason: %s", redact_provider_urls(exc_message)
+        )
         return None
 
 

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/src/ipor_fusion/mcp/server.py

@@ -4,12 +4,14 @@ Calls the ipor_fusion SDK directly — no CLI subprocess.
 Configuration is loaded from the shared CLI config (~/.config/ipor-fusion/).
 """
 
-from collections.abc import Callable
+from collections.abc import Callable, Sequence
 from functools import partial
-from typing import Annotated, Literal
+from typing import Annotated, Any, Literal
 
 from eth_typing import ChecksumAddress
 from mcp.server.fastmcp import FastMCP
+from mcp.server.fastmcp.exceptions import ToolError
+from mcp.types import ContentBlock
 from pydantic import AfterValidator, BeforeValidator, Field
 from web3 import Web3
 
@@ -23,7 +25,6 @@ from ipor_fusion.cli.config_store import (
     FusionConfig,
     VaultEntry,
     load_config,
-    mask_provider_url,
     resolve_chain_id,
     save_config,
 )
@@ -69,6 +70,7 @@ from ipor_fusion.preflight import (
 )
 from ipor_fusion.readers.morpho import MorphoReader, morpho_blue_address
 from ipor_fusion.readers.oracle_mapping import build_oracle_mapping
+from ipor_fusion.redaction import mask_provider_url, redact_provider_urls
 from ipor_fusion.registry import (
     build_address_list_json,
     build_address_lookup_json,
@@ -92,7 +94,20 @@ from ipor_fusion.vault_info import build_vault_info_json, build_vault_validation
 
 # chain_id default: detect the chain from the saved vault or the single provider.
 
-mcp = FastMCP(
+
+class _RedactingFastMCP(FastMCP):
+    """Every tool failure reaches the client through `call_tool`."""
+
+    async def call_tool(
+        self, name: str, arguments: dict[str, Any]
+    ) -> Sequence[ContentBlock] | dict[str, Any]:
+        try:
+            return await super().call_tool(name, arguments)
+        except Exception as exc:
+            raise ToolError(redact_provider_urls(str(exc))) from exc
+
+
+mcp = _RedactingFastMCP(
     "ipor-fusion",
     instructions=(
         "Inspection and configuration tools for IPOR Fusion Plasma Vaults. "

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/src/ipor_fusion/readers/lending_health.py

@@ -44,6 +44,7 @@ from ipor_fusion.readers.morpho import (
     morpho_blue_address,
     to_assets_up,
 )
+from ipor_fusion.redaction import redact_provider_urls
 from ipor_fusion.substrates import decode_substrate, market_name
 from ipor_fusion.types import (
     ChainId,
@@ -227,7 +228,12 @@ class VaultLendingHealth:
 
 def _reason(what: str, exc: Exception) -> str:
     """Why a read failed, for the unreadable entry and its finding."""
-    _logger.debug("lending %s read failed: %s: %s", what, type(exc).__name__, exc)
+    _logger.debug(
+        "lending %s read failed: %s: %s",
+        what,
+        type(exc).__name__,
+        redact_provider_urls(str(exc)),
+    )
     return f"{what} read failed: {type(exc).__name__}"
 
 

ipor_fusion-4.2.1.dev2/src/ipor_fusion/redaction.py

@@ -0,0 +1,39 @@
+"""Removes provider URLs from text meant for a person or a log.
+
+RPC provider URLs carry API keys in the path, the query string or the userinfo,
+and requests and web3 quote them in their exception messages.
+"""
+
+from __future__ import annotations
+
+import re
+from urllib.parse import urlsplit
+
+# A URL runs to the next whitespace, since quotes and brackets are legal inside
+# one and a key may follow them; only punctuation closing it stays in the text.
+# The lookbehind tries each run of scheme characters once, so long hex in an error
+# stays linear; a run that is no valid scheme ("0xhttp") comes out masked whole.
+_URL = re.compile(r"(?<![a-zA-Z0-9+.\-])[a-zA-Z0-9+.\-]+://\S*[^\s.,;:)'\">]")
+# urllib3 names only the path and query: "Max retries exceeded with url: /v2/key"
+_REQUEST_TARGET = re.compile(r"\burl: /\S*")
+_HOST = re.compile(r"(?:[a-zA-Z0-9.\-]+|\[[0-9a-fA-F:.]+\])(?::\d+)?")
+
+
+def mask_provider_url(url: str) -> str:
+    """Render a provider URL as scheme and host only. An unparsable value is
+    rendered as ``***``: what looks like its host may be part of a key."""
+    try:
+        parts = urlsplit(url)
+    except ValueError:
+        return "***"
+    host = parts.netloc.rpartition("@")[2]
+    if not parts.scheme or not _HOST.fullmatch(host):
+        return "***"
+    return f"{parts.scheme}://{host}"
+
+
+def redact_provider_urls(text: str) -> str:
+    """``text`` with every URL reduced to scheme and host, and every request
+    target urllib3 quotes on its own replaced."""
+    text = _URL.sub(lambda match: mask_provider_url(match.group()), text)
+    return _REQUEST_TARGET.sub("url: <redacted>", text)

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/src/ipor_fusion/vault_reads.py

@@ -12,6 +12,7 @@ from web3.exceptions import ContractLogicError, TimeExhausted, Web3RPCError
 from ipor_fusion.core.context import Web3Context
 from ipor_fusion.core.contract import Call
 from ipor_fusion.errors import EmptyCallResultError, LogScanError
+from ipor_fusion.redaction import redact_provider_urls
 
 T = TypeVar("T")
 
@@ -36,7 +37,11 @@ def _scan_or_none(func: Callable[[], T]) -> T | None:
     try:
         return func()
     except _ROLE_SCAN_ERRORS as exc:
-        _logger.debug("scan unavailable: %s: %s", type(exc).__name__, exc)
+        _logger.debug(
+            "scan unavailable: %s: %s",
+            type(exc).__name__,
+            redact_provider_urls(str(exc)),
+        )
         return None
 
 

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/tests/test_cli_config_store.py

@@ -8,9 +8,9 @@ from ipor_fusion.cli.config_store import (
     FusionConfig,
     VaultEntry,
     load_config,
-    mask_provider_url,
     save_config,
 )
+from ipor_fusion.redaction import mask_provider_url
 
 
 @pytest.fixture(autouse=True)

{ipor_fusion-4.2.0.dev20 → ipor_fusion-4.2.1.dev2}/tests/test_logs.py

@@ -1,5 +1,6 @@
 """Adaptive eth_getLogs paging (`core.logs`) against a fake provider."""
 
+import socket
 import threading
 from collections.abc import Callable
 from typing import Any
@@ -366,17 +367,40 @@ class TestNoPartialResults:
         with pytest.raises(KeyError):
             get_logs_adaptive(_web3(eth), ADDRESS, TOPICS, chunk_hint=100)
 
-    def test_error_names_no_provider_url(self):
-        provider_url = "https://rpc.example/v2/SECRETKEY"
-        eth = _FakeEth(
-            reject=lambda _l, _h: Web3RPCError(f"bad for url: {provider_url}")
-        )
+    @pytest.mark.parametrize(
+        "quoted",
+        ["https://rpc.example/v2/SECRETKEY", "/v2/SECRETKEY?apikey=SECRETKEY"],
+    )
+    def test_error_names_no_provider_url(self, quoted):
+        eth = _FakeEth(reject=lambda _l, _h: Web3RPCError(f"bad for url: {quoted}"))
 
         with pytest.raises(LogScanError) as info:
             get_logs_adaptive(_web3(eth), ADDRESS, TOPICS, 999, 1_000)
 
         assert "SECRETKEY" not in str(info.value)
 
+    def test_refused_connection_names_no_request_target(self, monkeypatch):
+        monkeypatch.setattr(logs_mod, "_TRANSIENT_RETRIES", 0)
+        with socket.socket() as probe:
+            probe.bind(("127.0.0.1", 0))
+            port = probe.getsockname()[1]
+
+        def reject(_low: int, _high: int) -> Exception | None:
+            try:
+                requests.post(
+                    f"http://127.0.0.1:{port}/v2/SECRETKEY?apikey=SECRETKEY", timeout=1
+                )
+            except requests.ConnectionError as exc:
+                return exc
+            return None
+
+        with pytest.raises(LogScanError) as info:
+            get_logs_adaptive(
+                _web3(_FakeEth(reject=reject)), ADDRESS, TOPICS, 999, 1_000
+            )
+
+        assert "SECRETKEY" not in str(info.value)
+
     def test_is_an_ipor_fusion_error(self):
         assert issubclass(LogScanError, IporFusionError)