web3-agent-kit 1.18.0__tar.gz → 1.18.2__tar.gz

{web3_agent_kit-1.18.0/web3_agent_kit.egg-info → web3_agent_kit-1.18.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: web3-agent-kit
-Version: 1.18.0
+Version: 1.18.2
 Summary: Open-source framework for building autonomous AI agents that interact with blockchain networks
 Author-email: Maulana <khasbim240803@gmail.com>
 License: MIT
@@ -34,6 +34,7 @@ Requires-Dist: pytest-cov>=4.0; extra == "dev"
 Requires-Dist: pytest-asyncio>=0.23.0; extra == "dev"
 Requires-Dist: hypothesis>=6.0; extra == "dev"
 Requires-Dist: ruff>=0.1.0; extra == "dev"
+Requires-Dist: tomli>=2.0; python_version < "3.11" and extra == "dev"
 Provides-Extra: solana
 Requires-Dist: solders>=0.21.0; extra == "solana"
 Requires-Dist: solana>=0.35.0; extra == "solana"

{web3_agent_kit-1.18.0 → web3_agent_kit-1.18.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "web3-agent-kit"
-version = "1.18.0"
+version = "1.18.2"
 description = "Open-source framework for building autonomous AI agents that interact with blockchain networks"
 readme = "README.md"
 license = {text = "MIT"}
@@ -35,6 +35,8 @@ dependencies = [
 ]
 [project.scripts]
 wak = "web3_agent_kit.cli:main"
+wak-p0-probe = "web3_agent_kit.execution.p0_probe:main"
+wak-signing-surface = "web3_agent_kit.execution.check_signing_surface:main"
 
 
 [project.optional-dependencies]
@@ -44,6 +46,8 @@ dev = [
     "pytest-asyncio>=0.23.0",
     "hypothesis>=6.0",
     "ruff>=0.1.0",
+    # tomllib is stdlib from 3.11. Packaging tests parse pyproject.toml.
+    "tomli>=2.0; python_version < '3.11'",
 ]
 solana = [
     "solders>=0.21.0",

{web3_agent_kit-1.18.0 → web3_agent_kit-1.18.2}/tests/test_check_signing_surface.py

@@ -6,7 +6,6 @@ tests pin its detection behaviour and its fail-closed exit codes.
 
 from __future__ import annotations
 
-import importlib.util
 import subprocess
 import sys
 import textwrap
@@ -15,19 +14,12 @@ from pathlib import Path
 import pytest
 
 REPO_ROOT = Path(__file__).resolve().parents[1]
-TOOL_PATH = REPO_ROOT / "tools" / "check_signing_surface.py"
+# The check lives in the package so it ships in the wheel. tools/ keeps a thin
+# wrapper for the source-checkout workflow, covered by
+# test_p0_probe_packaging.py.
+TOOL_PATH = REPO_ROOT / "web3_agent_kit" / "execution" / "check_signing_surface.py"
 
-
-def _load_tool():
-    spec = importlib.util.spec_from_file_location("check_signing_surface", TOOL_PATH)
-    assert spec and spec.loader
-    module = importlib.util.module_from_spec(spec)
-    sys.modules[spec.name] = module
-    spec.loader.exec_module(module)
-    return module
-
-
-tool = _load_tool()
+from web3_agent_kit.execution import check_signing_surface as tool  # noqa: E402
 
 
 def _write(package: Path, relative: str, source: str) -> None:

{web3_agent_kit-1.18.0 → web3_agent_kit-1.18.2}/tests/test_cli.py

@@ -39,9 +39,45 @@ class TestMainGroup:
         assert "WAK" in result.output
 
     def test_version(self):
+        """The CLI must report the version the package actually declares.
+
+        Asserting a literal version string here means every release breaks this
+        test, and the failure says nothing about whether the CLI is wrong.
+        Compare against the package's own __version__ instead, so this catches
+        a CLI pin that has drifted from the package -- which is the real bug
+        it is here to prevent.
+        """
+        from web3_agent_kit import __version__
+
         result = runner.invoke(main, ["--version"])
         assert result.exit_code == 0
-        assert "1.16.2" in result.output
+        assert __version__ in result.output
+
+    def test_cli_version_matches_package_metadata(self):
+        """pyproject.toml, __version__ and the CLI option must all agree."""
+        import re
+        from pathlib import Path
+
+        from web3_agent_kit import __version__
+
+        pyproject = Path(__file__).resolve().parents[1] / "pyproject.toml"
+        declared = re.search(
+            r'^version\s*=\s*"([^"]+)"', pyproject.read_text(), re.MULTILINE
+        ).group(1)
+        cli_source = (
+            Path(__file__).resolve().parents[1]
+            / "web3_agent_kit"
+            / "cli"
+            / "main.py"
+        ).read_text()
+        pinned = re.search(r'version_option\(version="([^"]+)"', cli_source).group(1)
+
+        assert declared == __version__, (
+            f"pyproject says {declared}, package says {__version__}"
+        )
+        assert pinned == __version__, (
+            f"CLI is pinned to {pinned}, package is {__version__}"
+        )
 
     def test_subcommands_registered(self):
         result = runner.invoke(main, ["--help"])

{web3_agent_kit-1.18.0 → web3_agent_kit-1.18.2}/tests/test_enforced_module_gates.py

@@ -14,10 +14,36 @@ import pytest
 from web3_agent_kit.chains import Chain
 from web3_agent_kit.execution import (
     ActionType,
+    AuthorizationEvidence,
     EnforcementDenied,
     ExecutionPolicy,
     PreSignInterceptor,
 )
+from web3_agent_kit.execution.envelope import CallEnvelopeV1
+
+
+class _AllowingProvider:
+    """Verifier that authorizes exactly the call it is handed.
+
+    All three migrated modules now require principal exact-call authorization
+    on top of a policy allow, so each signing test supplies this.
+    """
+
+    @property
+    def policy_id(self) -> str:
+        return "module-gate-test-provider"
+
+    def authorize(self, context):
+        return AuthorizationEvidence(
+            authorization_id="module-gate-test-auth",
+            envelope_digest=context.envelope_digest,
+            executor=context.envelope.executor,
+            authorizer="0x" + "99" * 20,
+            valid_from=0,
+            valid_until=2**31,
+            nonce="1",
+            policy_commitment_digest=context.policy_commitment.digest(),
+        )
 from web3_agent_kit.messaging import CrossChainMessenger
 
 # Address derived from TEST_KEY, so the "from" field matches the signer.
@@ -26,14 +52,20 @@ ENDPOINT = "0x7564105E977516C53bE337314c7E53838967bDaC"
 TEST_KEY = "0x" + "33" * 32
 
 
-def _tx(to: str = ENDPOINT, value: int = 0) -> dict:
+def _tx(to: str = ENDPOINT, value: int = 0, chainId: int = 42161) -> dict:
+    """A fully constructed transaction.
+
+    ``chainId`` is explicit so each test states which chain it is signing on.
+    A transaction whose chainId disagrees with the chain the gate evaluated is
+    now refused, so an implicit default would hide the mismatch.
+    """
     return {
         "to": to,
         "from": SENDER,
         "data": "0xdeadbeef",
         "value": value,
         "nonce": 5,
-        "chainId": 42161,
+        "chainId": chainId,
         "gas": 300_000,
         "gasPrice": 1_000_000_000,
     }
@@ -44,12 +76,13 @@ def _tx(to: str = ENDPOINT, value: int = 0) -> dict:
 # ---------------------------------------------------------------------------
 
 
-def _messenger(policy=None) -> CrossChainMessenger:
+def _messenger(policy=None, provider=True) -> CrossChainMessenger:
     m = CrossChainMessenger(
         rpc_url="http://localhost:8545",
         src_chain="arbitrum",
         private_key=TEST_KEY,
         policy=policy,
+        authorization_provider=_AllowingProvider() if provider else None,
     )
     return m
 
@@ -100,8 +133,10 @@ def test_messaging_gate_signs_when_policy_allows():
     )
     m = _messenger(policy=policy)
     gate = m._gate()
-
-    raw = gate.sign(_authorization_request()).raw_transaction
+    request = _authorization_request()
+    # The request's chain and the transaction's chainId must agree; the
+    # fixture's chainId is 42161, so the request is built on Arbitrum.
+    raw = gate.sign(request).raw_transaction
 
     assert isinstance(raw, bytes)
     assert len(raw) > 0
@@ -157,8 +192,11 @@ def test_messaging_resolves_known_and_unknown_chains():
 def _farmer(policy=None):
     from web3_agent_kit.airdrop.onchain import OnChainAirdropFarmer, OnChainConfig
 
-    farmer = OnChainAirdropFarmer(OnChainConfig(chain="ethereum", dry_run=True))
-    farmer._policy = policy
+    farmer = OnChainAirdropFarmer(
+        OnChainConfig(chain="ethereum", dry_run=True),
+        policy=policy,
+        authorization_provider=_AllowingProvider(),
+    )
     farmer._web3 = MagicMock()
     farmer._account = MagicMock()
     farmer._account.address = "0x" + "ac" * 20
@@ -201,7 +239,9 @@ def test_airdrop_gate_signs_when_policy_allows():
     receipt.transactionHash.hex.return_value = "0xairdrop"
     f._web3.eth.wait_for_transaction_receipt.return_value = receipt
 
-    result = f._send_transaction(_tx(to="0x" + "dd" * 20))
+    result = f._send_transaction(
+        _tx(to="0x" + "dd" * 20, chainId=1)
+    )
 
     assert result == "0xairdrop"
     f._web3.eth.send_raw_transaction.assert_called_once_with(b"raw-bytes")

{web3_agent_kit-1.18.0 → web3_agent_kit-1.18.2}/tests/test_messaging_events_gov.py

@@ -10,6 +10,7 @@ import pytest
 from web3_agent_kit.chains import Chain
 from web3_agent_kit.execution import (
     ActionType,
+    AuthorizationEvidence,
     EnforcementDenied,
     ExecutionPolicy,
 )
@@ -388,15 +389,41 @@ class TestEvents:
         assert sub.events_processed == 0
 
 
-# ----------------------------------------------------------------------------
+# ---------------------------------------------------------------------------
 # Governance
-# ----------------------------------------------------------------------------
+# ---------------------------------------------------------------------------
+class _GovernanceProvider:
+    """Verifier that authorizes the exact call it is handed.
+
+    The gate requires principal exact-call authorization in addition to a
+    policy allow, so governance signing tests need a verifier that returns
+    evidence bound to the call under test.
+    """
+
+    @property
+    def policy_id(self) -> str:
+        return "gov-test-provider"
+
+    def authorize(self, context):
+        return AuthorizationEvidence(
+            authorization_id="gov-test-auth",
+            envelope_digest=context.envelope_digest,
+            executor=context.envelope.executor,
+            authorizer="0x" + "99" * 20,
+            valid_from=0,
+            valid_until=2**31,
+            nonce="1",
+            policy_commitment_digest=context.policy_commitment.digest(),
+        )
+
+
 class TestGovernance:
     def _tracker(self):
         with patch("web3.Web3"):
             t = GovernanceTracker(rpc_url="https://x")
         t.w3 = MagicMock()
         t.w3.to_checksum_address.side_effect = lambda a: a
+        t._authorization_provider = _GovernanceProvider()
         return t
 
     def test_proposal_to_dict(self):
@@ -544,7 +571,7 @@ class TestGovernance:
             "data": "0xdeadbeef",
             "value": 0,
             "nonce": 1,
-            "chainId": 8453,
+            "chainId": 1,
             "gas": 200000,
             "gasPrice": 1_000_000_000,
         }
@@ -565,6 +592,9 @@ class TestGovernance:
             ),
             require_confirmation=False,
         )
+        # Policy allow is not authority: the gate also requires a principal
+        # exact-call authorization verifier.
+        t._authorization_provider = _GovernanceProvider()
 
         result = t.delegate(delegatee="0xdel", token="0xt", private_key="0xkey")
         assert result == "0xdelegatehash"
@@ -582,7 +612,7 @@ class TestGovernance:
             "data": "0xdeadbeef",
             "value": 0,
             "nonce": 1,
-            "chainId": 8453,
+            "chainId": 1,
             "gas": 200000,
             "gasPrice": 1_000_000_000,
         }