ipor-fusion 4.2.0.dev23__tar.gz → 4.2.1.dev2__tar.gz

{ipor_fusion-4.2.0.dev23 → ipor_fusion-4.2.1.dev2}/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ipor-fusion",
-  "version": "4.1.0",
+  "version": "4.2.0",
   "description": "Skills for building on IPOR Fusion vaults with the ipor-fusion Python SDK, plus the hosted read-only inspection server",
   "author": {
     "name": "IPOR Labs",

{ipor_fusion-4.2.0.dev23 → ipor_fusion-4.2.1.dev2}/CHANGELOG.md

@@ -2,6 +2,62 @@
 
 <!-- version list -->
 
+## v4.2.0 (2026-11-05)
+
+### Bug Fixes
+
+- **sdk**: Harden the Fuse Whitelist check against unreadable and non-fuse entries
+  ([`dbd2e55`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/dbd2e5538368b2fdf0caa5e491cdea80f05c2bef))
+
+- **sdk**: Keep a Comet position critical when its limit or an unused feed fails
+  ([`cb6661c`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/cb6661c066540aa699ec3e9f02928a63f0c34c09))
+
+- **sdk**: Keep provider URLs and config values out of error text
+  ([`276ab7b`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/276ab7b95c3ea4a11b50b37c7b61d8fc11f015e9))
+
+- **sdk**: Report Morpho and Euler debt that has no usable health as a risk
+  ([`88a3c55`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/88a3c55373ce857b7f79895332ff51fde25a89da))
+
+- **sdk**: Sanitize text read from contracts
+  ([`7d692af`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/7d692af40030eba067657058efe1e58284099482))
+
+- **sdk**: Tell agents to reuse whitelisted fuses instead of deploying copies
+  ([`614ab00`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/614ab003a24bf0b21c11dbd0f5000f8eaaadf1c4))
+
+### Documentation
+
+- **sdk**: Add a Compound V3 Institutional USDC borrow example
+  ([`5616c46`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/5616c46592ef374134e40645dc1f12cb6038ce61))
+
+- **sdk**: Label the Compound example's simulation-only constructs
+  ([`5fca364`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/5fca3643c2c77dec82354e768b031a1ef7a9762c))
+
+- **sdk**: Name the fuse whitelist command in the guide
+  ([`b17b62f`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/b17b62f157aa94eecbab214d10b1274887a72fe9))
+
+### Features
+
+- **sdk**: Check vault and batch fuses against the on-chain Fuse Whitelist
+  ([`d289d6d`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/d289d6db49d300be269967f3c58fbd501de53974))
+
+- **sdk**: Report Compound V3 lending health
+  ([`5baa9c2`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/5baa9c243b9a8f8c9986f08bce701acda5ef98ad))
+
+- **sdk**: Support Compound V3 Institutional USDC market fuses
+  ([`b01c5db`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/b01c5db8904e88ce734698f3037327e72234f676))
+
+### Testing
+
+- **sdk**: Drop type ignores from the redaction tests' RPC server
+  ([`ffa57c1`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/ffa57c1c7ea9f1341e7f8bde8a19f84f9c056d88))
+
+- **sdk**: Keep the live preflight checks independent of the Fuse Whitelist
+  ([`e9bc161`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/e9bc1618228234b8b0c6e993b003eaca58cdc6ba))
+
+- **sdk**: Pass the live context arguments in the Fuse Whitelist preflight test
+  ([`b974e08`](https://github.com/IPOR-Labs/ipor-fusion.py/commit/b974e0864aaa9cf16786a74a4b39c268d4b7214a))
+
+
 ## v4.1.0 (2026-11-03)
 
 ### Bug Fixes

{ipor_fusion-4.2.0.dev23 → ipor_fusion-4.2.1.dev2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: ipor-fusion
-Version: 4.2.0.dev23
+Version: 4.2.1.dev2
 Summary: The IPOR Fusion SDK for Python
 Project-URL: homepage, https://ipor.io
 Project-URL: repository, https://github.com/IPOR-Labs/ipor-fusion.py

{ipor_fusion-4.2.0.dev23 → ipor_fusion-4.2.1.dev2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "ipor-fusion"
-version = "4.2.0.dev23"
+version = "4.2.1.dev2"
 description = "The IPOR Fusion SDK for Python"
 authors = [
     { name = "Adam Mydlarz", email = "amydlarz@gmail.com" },

{ipor_fusion-4.2.0.dev23 → ipor_fusion-4.2.1.dev2}/src/ipor_fusion/errors.py

@@ -12,6 +12,7 @@ from web3.types import TxParams, TxReceipt
 
 from ipor_fusion.fusion_errors import FUSION_ERROR_SIGNATURES
 from ipor_fusion.onchain_text import sanitize_onchain_text
+from ipor_fusion.redaction import redact_provider_urls
 from ipor_fusion.types import TxHash
 
 log = logging.getLogger(__name__)
@@ -148,7 +149,9 @@ def get_revert_reason(web3: Web3, tx_hash: TxHash, receipt: TxReceipt) -> str |
             or "execution reverted" in exc_message.lower()
         ):
             return exc_message
-        log.debug("Could not decode revert reason: %s", exc)
+        log.debug(
+            "Could not decode revert reason: %s", redact_provider_urls(exc_message)
+        )
         return None
 
 

{ipor_fusion-4.2.0.dev23 → ipor_fusion-4.2.1.dev2}/src/ipor_fusion/readers/lending_health.py

@@ -44,6 +44,7 @@ from ipor_fusion.readers.morpho import (
     morpho_blue_address,
     to_assets_up,
 )
+from ipor_fusion.redaction import redact_provider_urls
 from ipor_fusion.substrates import decode_substrate, market_name
 from ipor_fusion.types import (
     ChainId,
@@ -227,7 +228,12 @@ class VaultLendingHealth:
 
 def _reason(what: str, exc: Exception) -> str:
     """Why a read failed, for the unreadable entry and its finding."""
-    _logger.debug("lending %s read failed: %s: %s", what, type(exc).__name__, exc)
+    _logger.debug(
+        "lending %s read failed: %s: %s",
+        what,
+        type(exc).__name__,
+        redact_provider_urls(str(exc)),
+    )
     return f"{what} read failed: {type(exc).__name__}"
 
 

{ipor_fusion-4.2.0.dev23 → ipor_fusion-4.2.1.dev2}/src/ipor_fusion/vault_reads.py

@@ -12,6 +12,7 @@ from web3.exceptions import ContractLogicError, TimeExhausted, Web3RPCError
 from ipor_fusion.core.context import Web3Context
 from ipor_fusion.core.contract import Call
 from ipor_fusion.errors import EmptyCallResultError, LogScanError
+from ipor_fusion.redaction import redact_provider_urls
 
 T = TypeVar("T")
 
@@ -36,7 +37,11 @@ def _scan_or_none(func: Callable[[], T]) -> T | None:
     try:
         return func()
     except _ROLE_SCAN_ERRORS as exc:
-        _logger.debug("scan unavailable: %s: %s", type(exc).__name__, exc)
+        _logger.debug(
+            "scan unavailable: %s: %s",
+            type(exc).__name__,
+            redact_provider_urls(str(exc)),
+        )
         return None
 
 

{ipor_fusion-4.2.0.dev23 → ipor_fusion-4.2.1.dev2}/tests/test_provider_url_redaction.py

@@ -6,21 +6,27 @@ from __future__ import annotations
 
 import asyncio
 import json
+import logging
 import socket
 import sys
 import threading
 from collections.abc import Iterator
 from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
 from pathlib import Path
+from unittest.mock import MagicMock
 
 import pytest
+import requests
 from mcp.server.fastmcp.exceptions import ToolError
 
 from ipor_fusion.cli import config_store
 from ipor_fusion.cli.config_store import FusionConfig, save_config
 from ipor_fusion.cli.main import main
+from ipor_fusion.errors import get_revert_reason
 from ipor_fusion.mcp import server
+from ipor_fusion.readers.lending_health import _reason
 from ipor_fusion.redaction import mask_provider_url, redact_provider_urls
+from ipor_fusion.vault_reads import _scan_or_none
 
 VAULT = "0x4c4f752fa54dafaa7770b2c6d6f0d6d7e5cf8b2f"
 ACCESS_MANAGER_WORD = "0x" + "00" * 12 + "11" * 20
@@ -249,6 +255,41 @@ class TestCliErrorChannels:
             assert secret not in output
 
 
+class TestDebugLogs:
+    FAILURE = requests.ConnectionError(
+        f"Max retries exceeded with url: {PROVIDER_PATH}"
+    )
+
+    def _assert_redacted(self, caplog: pytest.LogCaptureFixture) -> None:
+        assert "<redacted>" in caplog.text
+        _assert_no_secret(caplog.text)
+
+    def test_unavailable_scan(self, caplog: pytest.LogCaptureFixture):
+        def scan() -> None:
+            raise self.FAILURE
+
+        with caplog.at_level(logging.DEBUG):
+            assert _scan_or_none(scan) is None
+
+        self._assert_redacted(caplog)
+
+    def test_failed_lending_read(self, caplog: pytest.LogCaptureFixture):
+        with caplog.at_level(logging.DEBUG):
+            _reason("market data", self.FAILURE)
+
+        self._assert_redacted(caplog)
+
+    def test_undecodable_revert(self, caplog: pytest.LogCaptureFixture):
+        web3 = MagicMock()
+        web3.eth.get_transaction.side_effect = self.FAILURE
+
+        with caplog.at_level(logging.DEBUG):
+            reason = get_revert_reason(web3, MagicMock(), MagicMock())
+
+        assert reason is None
+        self._assert_redacted(caplog)
+
+
 class TestRedactProviderUrls:
     @pytest.mark.parametrize(
         ("text", "expected"),

{ipor_fusion-4.2.0.dev23 → ipor_fusion-4.2.1.dev2}/uv.lock

@@ -1150,7 +1150,7 @@ wheels = [
 
 [[package]]
 name = "ipor-fusion"
-version = "4.1.0"
+version = "4.2.0"
 source = { editable = "." }
 dependencies = [
     { name = "certifi" },