tensorfeed 1.28.0__tar.gz → 2.0.0__tar.gz

{tensorfeed-1.28.0 → tensorfeed-2.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tensorfeed
-Version: 1.28.0
+Version: 2.0.0
 Summary: Python SDK for the TensorFeed.ai API: AI news, status, model pricing, premium routing + history series + webhook watches, agent payments via USDC on Base (optional web3 auto-send)
 Author-email: "TensorFeed.ai" <feedback@tensorfeed.ai>
 License-Expression: MIT

{tensorfeed-1.28.0 → tensorfeed-2.0.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "tensorfeed"
-version = "1.28.0"
+version = "2.0.0"
 description = "Python SDK for the TensorFeed.ai API: AI news, status, model pricing, premium routing + history series + webhook watches, agent payments via USDC on Base (optional web3 auto-send)"
 readme = "README.md"
 license = "MIT"

{tensorfeed-1.28.0 → tensorfeed-2.0.0}/tensorfeed/__init__.py

@@ -21,4 +21,4 @@ __all__ = [
     "PaymentRequired",
     "RateLimited",
 ]
-__version__ = "1.28.0"
+__version__ = "1.29.0"

{tensorfeed-1.28.0 → tensorfeed-2.0.0}/tensorfeed/client.py

@@ -565,26 +565,35 @@ class TensorFeed:
         """
         return self._get("/payment/info")
 
-    def buy_credits(self, *, amount_usd: float) -> dict[str, Any]:
-        """Generate a 30-min payment quote.
+    def buy_credits(self, *, amount_usd: float, sender_wallet: str) -> dict[str, Any]:
+        """Generate a 30-min payment quote bound to a sender wallet.
 
         Returns a dict with ``wallet``, ``memo``, ``amount_usd``, ``credits``,
-        ``expires_at``, ``ttl_seconds``, ``next_step``.
+        ``sender_wallet``, ``expires_at``, ``ttl_seconds``, ``next_step``.
 
-        Send the USDC on Base to ``wallet`` (memo is optional but recommended),
-        then call ``confirm()`` with the tx hash and the ``memo`` as nonce.
+        Send the USDC on Base FROM ``sender_wallet`` TO ``wallet``, then
+        call ``confirm()`` with the tx hash and the returned ``memo`` as
+        nonce. The on-chain sender must match ``sender_wallet`` exactly
+        or ``confirm()`` will reject with ``sender_mismatch``. This is
+        the post-2026-05-05 binding that closes the public-mempool tx
+        sniper attack.
 
         Args:
             amount_usd: USD value of credits to buy. Must be 0.5 to 10000.
                 Volume discounts apply at $5 (10%), $30 (25%), $200 (40%).
+            sender_wallet: 0x-prefixed 40-char EVM address that will sign
+                the on-chain USDC transfer. Required.
         """
-        return self._post("/payment/buy-credits", {"amount_usd": amount_usd})
+        return self._post(
+            "/payment/buy-credits",
+            {"amount_usd": amount_usd, "sender_wallet": sender_wallet},
+        )
 
     def confirm(
         self,
         *,
         tx_hash: str,
-        nonce: str | None = None,
+        nonce: str,
     ) -> dict[str, Any]:
         """Verify a USDC tx on-chain and mint a credit token.
 
@@ -597,14 +606,12 @@ class TensorFeed:
 
         Args:
             tx_hash: 0x-prefixed Base mainnet transaction hash
-            nonce: optional memo from ``buy_credits()``. If provided and
-                the tx amount matches the quote within $0.01, the quoted
-                credits (with volume discount) are applied. Otherwise
-                credits are calculated from the actual tx amount.
+            nonce: memo from ``buy_credits()``. Required as of 2026-05-05;
+                the legacy no-nonce path is closed because it allowed
+                public-mempool observers to steal credits by racing the
+                rightful payer.
         """
-        body: dict[str, Any] = {"tx_hash": tx_hash}
-        if nonce is not None:
-            body["nonce"] = nonce
+        body: dict[str, Any] = {"tx_hash": tx_hash, "nonce": nonce}
         result = self._post("/payment/confirm", body)
         if isinstance(result, dict) and result.get("ok") and result.get("token"):
             self.token = str(result["token"])
@@ -1026,6 +1033,54 @@ class TensorFeed:
             fire_cap=fire_cap,
         )
 
+    def create_leaderboard_rank_watch(
+        self,
+        *,
+        provider: str,
+        op: str,
+        threshold: int | None = None,
+        callback_url: str,
+        secret: str | None = None,
+        fire_cap: int | None = None,
+    ) -> dict[str, Any]:
+        """Convenience helper for leaderboard rank-change webhook watches.
+
+        Costs 1 credit at registration. Fires when the provider's rank in
+        the cross-provider 7-day uptime leaderboard crosses a threshold or
+        changes. Useful for SRE / vendor-management workflows tracking
+        which AI provider is currently most reliable relative to the field.
+
+        Rank semantics: rank 1 = best (highest uptime).
+
+        Args:
+            provider: Provider name or slug (case-insensitive). e.g.
+                'claude', 'OpenAI API', 'AWS Bedrock'.
+            op: 'drops_below', 'rises_above', or 'changes'.
+            threshold: Required for drops_below / rises_above; integer
+                rank position (e.g. 5 means "below #5"). Ignored for
+                'changes'.
+            callback_url: HTTPS URL to POST to on each fire.
+            secret: Optional HMAC shared secret.
+            fire_cap: Max fires before auto-disable (default 100).
+
+        Returns:
+            Same shape as ``create_watch``.
+
+        Raises:
+            ValueError: if no token is set on the client
+            PaymentRequired: if the token has insufficient credits
+            TensorFeedError: 400 on invalid spec or callback URL
+        """
+        spec: dict[str, Any] = {"type": "leaderboard_rank", "provider": provider, "op": op}
+        if threshold is not None:
+            spec["threshold"] = threshold
+        return self.create_watch(
+            spec=spec,
+            callback_url=callback_url,
+            secret=secret,
+            fire_cap=fire_cap,
+        )
+
     # ── Paid: provider deep-dive (Tier 1, 1 credit) ────────────────
 
     def provider_deepdive(self, provider: str) -> dict[str, Any]:

{tensorfeed-1.28.0 → tensorfeed-2.0.0}/tensorfeed/web3_signer.py

@@ -106,8 +106,10 @@ def auto_purchase_credits(
     account = Account.from_key(private_key)
     sender = account.address
 
-    # Step 1: TensorFeed-side quote
-    quote = tf.buy_credits(amount_usd=amount_usd)
+    # Step 1: TensorFeed-side quote, bound to this sender wallet so the
+    # post-2026-05-05 Tx-Sniper guard accepts the confirm. Must pass the
+    # exact lowercased address that will sign the on-chain transfer.
+    quote = tf.buy_credits(amount_usd=amount_usd, sender_wallet=sender.lower())
     receiving_wallet = quote["wallet"]
     memo = quote["memo"]
 
@@ -135,7 +137,12 @@ def auto_purchase_credits(
     signed = Account.sign_transaction(tx, private_key=private_key)
     raw_tx = getattr(signed, "raw_transaction", None) or getattr(signed, "rawTransaction")
     tx_hash_bytes = w3.eth.send_raw_transaction(raw_tx)
-    tx_hash = "0x" + tx_hash_bytes.hex().lstrip("0x")
+    # Older fix used `.lstrip("0x")` which silently corrupts hashes that
+    # contain leading zero bytes (rare but real, ~0.4% of txs). Modern
+    # web3.py returns HexBytes whose .hex() may or may not include the
+    # 0x prefix depending on version, so check and prepend explicitly.
+    raw_hex = tx_hash_bytes.hex()
+    tx_hash = raw_hex if raw_hex.startswith("0x") else "0x" + raw_hex
 
     # Step 4: wait for confirmation
     deadline = time.time() + wait_seconds

{tensorfeed-1.28.0 → tensorfeed-2.0.0}/tensorfeed.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tensorfeed
-Version: 1.28.0
+Version: 2.0.0
 Summary: Python SDK for the TensorFeed.ai API: AI news, status, model pricing, premium routing + history series + webhook watches, agent payments via USDC on Base (optional web3 auto-send)
 Author-email: "TensorFeed.ai" <feedback@tensorfeed.ai>
 License-Expression: MIT