web3-agent-kit 1.18.2__tar.gz → 1.18.4__tar.gz

{web3_agent_kit-1.18.2/web3_agent_kit.egg-info → web3_agent_kit-1.18.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: web3-agent-kit
-Version: 1.18.2
+Version: 1.18.4
 Summary: Open-source framework for building autonomous AI agents that interact with blockchain networks
 Author-email: Maulana <khasbim240803@gmail.com>
 License: MIT

{web3_agent_kit-1.18.2 → web3_agent_kit-1.18.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "web3-agent-kit"
-version = "1.18.2"
+version = "1.18.4"
 description = "Open-source framework for building autonomous AI agents that interact with blockchain networks"
 readme = "README.md"
 license = {text = "MIT"}

{web3_agent_kit-1.18.2 → web3_agent_kit-1.18.4}/tests/test_p0_probe_packaging.py

@@ -147,6 +147,80 @@ def test_built_wheel_contains_the_probe(tmp_path: Path) -> None:
         )
 
 
+def test_module_invocation_emits_no_warnings() -> None:
+    """`python -m` must be clean.
+
+    An eager `from .p0_probe import run_all_probes` in
+    `web3_agent_kit.execution.__init__` places the module in sys.modules before
+    runpy executes it, and runpy then warns about unpredictable behaviour. The
+    exit code and results were always correct, which is why only the module
+    form showed it -- the console entry point never goes through runpy.
+
+    Asserting on stderr, not just the exit code: the bug was a warning, so a
+    pass/fail-only check would not have caught it.
+    """
+    proc = subprocess.run(
+        [sys.executable, "-m", "web3_agent_kit.execution.p0_probe", "--json"],
+        capture_output=True,
+        text=True,
+        cwd="/tmp",  # outside the repo: only the installed package resolves
+    )
+    assert proc.returncode == 0, proc.stderr
+    assert "RuntimeWarning" not in proc.stderr, proc.stderr
+    assert proc.stderr.strip() == "", f"unexpected stderr: {proc.stderr!r}"
+    assert '"results"' in proc.stdout
+
+
+def test_checker_module_invocation_emits_no_warnings() -> None:
+    """Same stderr assertion as the probe test.
+
+    This test previously checked exit 0 and the absence of RuntimeWarning but
+    not that stderr was empty, so a different warning would have passed. The
+    probe test had the stronger assertion; the two are now consistent.
+    """
+    proc = subprocess.run(
+        [sys.executable, "-m", "web3_agent_kit.execution.check_signing_surface"],
+        capture_output=True,
+        text=True,
+        cwd="/tmp",
+    )
+    assert proc.returncode == 0, proc.stderr
+    assert "RuntimeWarning" not in proc.stderr, proc.stderr
+    assert proc.stderr.strip() == "", f"unexpected stderr: {proc.stderr!r}"
+
+
+def test_lazy_export_still_resolves() -> None:
+    """The lazy wrapper must behave like the module-level function."""
+    from web3_agent_kit.execution import run_all_probes
+    from web3_agent_kit.execution.p0_probe import run_all_probes as direct
+
+    assert {r["id"] for r in run_all_probes()} == {r["id"] for r in direct()}
+
+
+def test_execution_package_does_not_import_probe_eagerly() -> None:
+    """Importing the package must not pull in the probe.
+
+    This is the property that keeps `python -m` clean. Checked in a subprocess
+    so an already-imported module in this process cannot mask it.
+    """
+    proc = subprocess.run(
+        [
+            sys.executable,
+            "-c",
+            "import web3_agent_kit.execution as e; "
+            "import sys; "
+            "print('web3_agent_kit.execution.p0_probe' in sys.modules)",
+        ],
+        capture_output=True,
+        text=True,
+        cwd="/tmp",
+    )
+    assert proc.stdout.strip() == "False", (
+        "importing the execution package eagerly imported p0_probe; "
+        "`python -m web3_agent_kit.execution.p0_probe` will warn again"
+    )
+
+
 def test_probe_exit_code_treats_unknown_as_not_a_pass() -> None:
     """A probe that cannot evaluate must not report success.
 
@@ -166,3 +240,75 @@ def test_probe_exit_code_treats_unknown_as_not_a_pass() -> None:
         assert p0_probe.main(["--json"]) == 2
     finally:
         p0_probe.run_all_probes = original
+
+
+# ---------------------------------------------------------------------------
+# Excluded-ancestor regression
+#
+# `_is_excluded` tests path components against EXCLUDED_DIR_PARTS, which
+# includes "venv" and ".venv". Applied to an absolute path, any ancestor with
+# one of those names excluded the whole scan: the checker reported zero signer
+# calls and exited 0 while an unapproved call sat in the tree. The same code
+# under a neutrally named ancestor was detected correctly.
+#
+# This was a false negative, not a missing feature. The most likely way to hit
+# it is running the checker from inside a virtualenv, which is the normal way
+# to run it.
+# ---------------------------------------------------------------------------
+
+
+@pytest.mark.parametrize("ancestor", ["neutral", "venv", ".venv", "build", "dist"])
+def test_checker_detects_an_unapproved_call_under_any_ancestor_name(
+    tmp_path: Path, ancestor: str
+) -> None:
+    """An excluded directory *above* the scan root must not suppress the scan."""
+    from web3_agent_kit.execution.check_signing_surface import main
+
+    root = tmp_path / ancestor / "web3_agent_kit"
+    root.mkdir(parents=True)
+    (root / "unexpected.py").write_text(
+        "def send(account, tx):\n    return account.sign_transaction(tx)\n"
+    )
+
+    assert main(["--root", str(root)]) == 1, (
+        f"a scan rooted under a directory named {ancestor!r} exited 0 while "
+        "an unapproved signer call was present"
+    )
+
+
+@pytest.mark.parametrize("nested", [".venv", "venv", "__pycache__", "node_modules"])
+def test_checker_still_excludes_nested_environment_directories(
+    tmp_path: Path, nested: str
+) -> None:
+    """Exclusions *inside* the scan root must keep working.
+
+    The fix scopes exclusion to the path relative to the root. A nested
+    environment directory still appears in that relative path, so it stays
+    excluded -- otherwise vendored copies of libraries would be reported as
+    violations.
+    """
+    from web3_agent_kit.execution.check_signing_surface import main
+
+    root = tmp_path / "web3_agent_kit"
+    inner = root / nested
+    inner.mkdir(parents=True)
+    (inner / "ignored.py").write_text("account.sign_transaction(tx)\n")
+
+    assert main(["--root", str(root)]) == 0, (
+        f"{nested!r} inside the scan root should still be excluded"
+    )
+
+
+def test_checker_detects_a_call_beside_a_nested_exclusion(tmp_path: Path) -> None:
+    """Both properties at once: nested excluded, real violation reported."""
+    from web3_agent_kit.execution.check_signing_surface import main
+
+    root = tmp_path / "venv" / "web3_agent_kit"
+    inner = root / "node_modules"
+    inner.mkdir(parents=True)
+    (inner / "vendored.py").write_text("account.sign_transaction(tx)\n")
+    (root / "unexpected.py").write_text(
+        "def send(account, tx):\n    return account.sign_transaction(tx)\n"
+    )
+
+    assert main(["--root", str(root)]) == 1

{web3_agent_kit-1.18.2 → web3_agent_kit-1.18.4}/web3_agent_kit/__init__.py

@@ -1,6 +1,6 @@
 """Web3 Agent Kit — Open-source framework for autonomous Web3 AI agents."""
 
-__version__ = "1.18.2"
+__version__ = "1.18.4"
 __author__ = "Maulana"
 
 # Core

{web3_agent_kit-1.18.2 → web3_agent_kit-1.18.4}/web3_agent_kit/cli/main.py

@@ -22,7 +22,7 @@ BANNER = r"""
 
 
 @click.group(invoke_without_command=True)
-@click.version_option(version="1.18.2", prog_name="wak")
+@click.version_option(version="1.18.4", prog_name="wak")
 @click.pass_context
 def main(ctx):
     """WAK — Web3 Agent Kit CLI.

{web3_agent_kit-1.18.2 → web3_agent_kit-1.18.4}/web3_agent_kit/execution/__init__.py

@@ -26,7 +26,6 @@ from .errors import (
     UnsupportedChainError,
 )
 from .intent import ActionType, TransactionIntent
-from .p0_probe import run_all_probes
 from .interceptor import (
     AuditEntry,
     AuthorizationRequest,
@@ -48,7 +47,6 @@ from .policy import (
 
 __all__ = [
     "CALL_ENVELOPE_SCHEMA",
-    "run_all_probes",
     "POLICY_DECISION_SCHEMA",
     "ActionType",
     "AuditEntry",
@@ -83,4 +81,25 @@ __all__ = [
     "UnapprovedSignerError",
     "UnsupportedActionError",
     "UnsupportedChainError",
+    "run_all_probes",
 ]
+
+
+def run_all_probes():
+    """Run the P0 enforcement probes and return their results.
+
+    Imported lazily. ``web3_agent_kit.execution`` must not import
+    ``p0_probe`` at package-import time: doing so places the module in
+    ``sys.modules`` before ``runpy`` executes it, so
+    ``python -m web3_agent_kit.execution.p0_probe`` emits a RuntimeWarning
+    about unpredictable behaviour. The warning is cosmetic and the exit code
+    was always correct, but the documented invocation should be clean.
+
+    The console entry point (``wak-p0-probe``) was unaffected because it never
+    went through ``runpy`` -- which is exactly why the warning survived a test
+    suite that only exercised the entry point.
+    """
+    from .p0_probe import run_all_probes as _run
+
+    return _run()
+

{web3_agent_kit-1.18.2 → web3_agent_kit-1.18.4}/web3_agent_kit/execution/check_signing_surface.py

@@ -170,7 +170,20 @@ def find_signer_calls(root: Path) -> list[SignerCall]:
     """
     found: list[SignerCall] = []
     for path in sorted(root.rglob("*.py")):
-        if _is_excluded(path):
+        # Exclusions are relative to the scan root, not to the absolute path.
+        #
+        # `_is_excluded` tests every path component against EXCLUDED_DIR_PARTS,
+        # which contains "venv" and ".venv". Evaluating it on the absolute path
+        # meant any ancestor named venv excluded the entire scan: an installed
+        # package under site-packages/venv/lib/... reported zero signer calls
+        # and exited 0, while the same code under a neutrally named ancestor
+        # reported the real count. A check that silently reports nothing when
+        # run from a virtualenv is worse than no check, because it produces a
+        # passing result for the one invocation most people use.
+        #
+        # Nested environment directories inside the scanned root stay excluded,
+        # since those components survive the relative_to() reduction.
+        if _is_excluded(path.relative_to(root)):
             continue
         relative = _report_path(path, root)
         try:

{web3_agent_kit-1.18.2 → web3_agent_kit-1.18.4/web3_agent_kit.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: web3-agent-kit
-Version: 1.18.2
+Version: 1.18.4
 Summary: Open-source framework for building autonomous AI agents that interact with blockchain networks
 Author-email: Maulana <khasbim240803@gmail.com>
 License: MIT