mirror of
https://github.com/chainstacklabs/pumpfun-bonkfun-bot.git
synced 2026-11-02 06:16:10 +00:00
* refactor(tests): move the regression verifiers into tests/regression verify_*.py are not standalone examples: each imports src/, stubs the RPC client, and asserts one previously fixed bug stays fixed. Their checks are unchanged; PROJECT_ROOT, the usage lines and the bonk fixture lookup are adjusted for the new depth. run_all.py runs the set and reports failures. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * chore(tools): move the dev harness and listener benchmarks into tools/ simulate_*, live_*, both compare_* scripts and the account cleanup import src/ and several spend real funds — they exercise the bot rather than teach anything. compare_listeners.py reaches the repo root one level higher than before; nothing else changes. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * refactor(cookbook): reorganise learning-examples into cookbook/ The directory is a reference collection — one runnable script per action — but nothing said so: no index, scripts grouped by the transport they happened to use, fixtures loose at the root. Now grouped by platform, then by what you are doing: pumpfun/{listen,read,trade,graduation,decode}, pumpswap, letsbonk, legacy. Fixtures sit beside the script that reads them, manual_sell.py becomes sell_token.py, and the legacy create example moves to legacy/ and says why. pump_v2.py and tx_status.py stay at the cookbook root as the only two shared helpers; subdirectories add that root to sys.path before importing them. cookbook/README.md indexes every script and marks the ones that spend funds. Also fixes create_v2's account list: the five mayhem accounts are mandatory whatever is_mayhem_mode says, so mint_and_buy_v2.py could never have worked with mayhem off. 11 accounts fails AnchorError 3005 (AccountNotEnoughKeys) on sol_vault, 16 succeeds with the argument either way — simulateTransaction against mainnet. Seven scripts gain a module docstring they were missing. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * feat(cookbook): add buy, create, balance and status examples buy_token.py <MINT> buy_v2 against one coin; --dry-run simulates create_token.py create_v2 on its own get_balances.py SOL and tokens across both token programs check_tx_status.py <SIG> success, reverted, or not visible yet Buying previously meant manual_buy.py, which waits for the next coin created anywhere before it trades — there was no way to buy a coin you already know. Creating one meant bundling a buy with it, and the transaction-status helper was a library with no entry point. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * refactor(cookbook): move pump_v2 next to the scripts that use it pump_v2.py holds the buy_v2/sell_v2 account layouts, and only the pump.fun trade scripts import it — it sat at the cookbook root because tx_status.py does, not because anything outside pumpfun/trade/ needed it. The five callers now pick it up as a plain sibling; legacy/ and the layout verifier reach into that directory. tx_status.py stays at the root, where all four platforms use it. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * refactor(cookbook): name every script protocol_verb_noun_variant manual_buy.py did not just buy — it waited for the next coin created anywhere, then bought, so the verb was wrong. Protocol was encoded three different ways: directory, suffix, or not at all. And three scripts sat under pumpfun/ that have nothing to do with pump.fun. Filenames are now <protocol>_<verb>_<noun>[_<variant>].py, so a basename says which chain, what it does and which instruction version without opening it: manual_buy.py -> pumpfun_snipe_token_blocksubscribe.py manual_buy_geyser.py -> pumpfun_snipe_token_geyser.py buy_token.py -> pumpfun_buy_token_v2.py mint_and_buy_v2.py -> pumpfun_create_and_buy_token_v2.py manual_buy_pumpswap.py -> pumpswap_buy_token.py manual_buy_exact_in.py -> letsbonk_buy_token_exact_in.py legacy/mint_and_buy.py -> legacy/pumpfun_create_and_buy_token_v1.py The sniper was named for logsSubscribe in an earlier draft; it sends blockSubscribe, and the name now says so. Balances, transaction status and the Anchor discriminator calculator are not pump.fun-specific and move to a new cookbook/solana/. The two non-runnable helpers take no verb — pump_v2.py becomes pumpfun_instructions_v2.py beside its callers, tx_status.py becomes solana_transaction_status.py in solana/. Both are imported under a short alias so the 106 call sites stay readable. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix(cookbook): resolve a coin's quote mint before pricing it quote_units() defaulted to 9 decimals for an unresolved mint, and every trade script called it before resolve_quote_token_program() warmed the decimals cache. pump.fun's QuoteControl registry admits mints at 6, 8 and 9 decimals — 79 of the 170 admitted are tokenized equities, 8 decimals for xStocks and 6 for Backpack Securities — so those coins were sized against the wrong power of ten. The error compounds rather than cancels: price_per_token() divides by the same wrong unit, so the price reads low by the factor, the token amount comes out high by it, and the inflated cap authorises the overspend instead of catching it. 10x on an xStock pair, 1000x on a Backpack one. This is not hypothetical. A 75s sample of live curve updates on 2026-09-22 caught 8 stock-paired curves out of 124 — IONQ across 5 of them, plus QUBT, PLTRx and COPX. quote_units() now raises for an unresolved mint instead of guessing, the four trade paths resolve before they price, and pumpfun_read_price.py reads decimals from chain rather than from a two-entry table. The geyser sniper never resolved at all: it also passed SPL Token as the quote token program, which fails the account constraints for any Token-2022 quote, and created no quote ATA. verify_quote_decimals_resolved.py checks the fail-closed contract, that resolution costs no extra RPC call, and that no function prices before it resolves — confirmed to fail when the ordering is put back. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EZ5HdjTadNUad8i6xis3TR * feat(cookbook): read the quote-mint registry and Token-2022 mint state Two reads that were unreachable without knowing an undocumented PDA seed. pumpfun_read_quote_mints.py decodes QuoteControl (PDA ["quote-control"]), the second quote-mint registry added in the 2026-09-15 upgrade. Reading only Global.whitelisted_quote_mints under-reports: a coin can be paired with a mint Global has never heard of. 170 admitted today, 79 of them tokenized equities, each with the initial virtual quote reserves that set a new curve's opening price. --stocks narrows to the equities, identified by the Token-2022 extension set create_v2 requires of them rather than by a name lookup. solana_read_token2022_mint.py reads the extensions that change what a balance means: scaled UI amount, pausable, permanent delegate, transfer hook, default account state. It exists mainly for one trap — the RPC returns both `multiplier` and `newMultiplier` with an effective timestamp, and once that timestamp passes the field named `multiplier` is the stale one. On AAPLx it passed on 2026-08-08, so the obvious field has been wrong for six weeks. This compares against the clock and says which is in force. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EZ5HdjTadNUad8i6xis3TR * feat(cookbook): add the exact-quote-in buy buy_exact_quote_in_v2 was uncovered. It is the mirror of buy_v2 — buy_v2 fixes the tokens received and caps the spend, this fixes the spend and floors the tokens — and it takes the same 27 accounts in the same order, so it reuses build_v2_accounts and differs only in discriminator and arguments. Worth having because pinning the spend is the natural direction once a coin is priced in something other than SOL: "spend exactly one AAPLx" is something you can mean, where a token count is a number derived from a price that moved while you derived it. Verified by simulateTransaction against a live COPX-paired coin: the program executes the full buy and stops at TransferChecked with insufficient funds, which is as far as a wallet holding none of the quote asset can go. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EZ5HdjTadNUad8i6xis3TR * feat(cookbook): add the exact-SOL-in buy buy_exact_sol_in was uncovered. SOL only — it pre-dates non-SOL quote assets and carries no quote accounts, so the script checks the curve and points at the exact-quote version for anything else rather than failing obscurely. Its account list is the reason to have it. The IDL lists 16; the program needs 18, the extras being the bonding-curve-v2 PDA and a buyback fee recipient. Determined by simulation rather than assumed: 16 accounts fails AnchorError 6062 (BuybackFeeRecipientMissing), 18 simulates clean at 96k CU. The v2 instructions are complete in the IDL and this family is not, which is worth a newcomer knowing before they trust the file. The docstring carries the IDL's own fee arithmetic, since fees come out of the amount you name rather than on top of it, and the printed estimate ignores that split while min_tokens_out is what the program enforces. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EZ5HdjTadNUad8i6xis3TR * feat(cookbook): add the creator-fee and cashback payouts Two payout paths that had no script. Both take no arguments and, per the IDL, no signer — the funds can only reach the wallet they already belong to, so either can be run for anyone, which --creator and --user expose. collect_creator_fee_v2 sweeps a creator vault. The vault is per creator and per quote asset, so a creator whose coins are priced in several assets collects each separately; --quote picks which. claim_cashback_v2 pays out an accrued cashback balance. create_v2 has rejected new cashback coins since 2026-09-15 (error 6082), but coins minted before that keep accruing and stay claimable, which is why the cashback handling elsewhere in this repo is not dead code. Both verified by simulateTransaction against mainnet: 10 accounts each, 8 data bytes, no error. Also repairs two cookbook README rows that the earlier rename mangled — pumpswap_buy_token.py had been rewritten to pumpswap_pumpfun_buy_token_v2.py because its name contains the string that rename matched on. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EZ5HdjTadNUad8i6xis3TR * refactor(cookbook): take every script's input on the command line A reference collection only works if you can run a script against your own coin without editing it. Several carried the coin as a module-level constant instead: TOKEN_MINT = Pubkey.from_string(sys.argv[1] if len(sys.argv) > 1 else "...") which reads as optional but raises at import, so running the script the way its own usage line described it died on ValueError: Invalid Base58 string before printing anything. Nine scripts did this. Four more took their amount and slippage from environment variables that no usage line mentioned. Every script now builds an ArgumentParser in main(): required values are positionals, tunables are --options, and the literals live in DEFAULT_* constants that supply the defaults. --help works on all 32 that take input; the seven listeners take none and are exempt. The decode scripts keep defaulting to the fixture beside them, so they still run bare. Behaviour is unchanged. create_and_buy's mayhem flag defaulted to on, so it takes --mayhem/--no-mayhem via BooleanOptionalAction rather than a store_true that would have silently flipped it off. Two fixes found while threading the values through: the wallet listener read a global `wallet` from four functions that no longer had one, and find_pool raised IndexError on a coin that has not graduated instead of saying so. verify_cookbook_arguments.py enforces the shape — no module-level sys.argv, no placeholder values, argparse wherever there is input, and every default a usable value. Confirmed to fail when the old pattern is put back. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EZ5HdjTadNUad8i6xis3TR * fix(docs): replace three dead links and check the rest The Anchor discriminator citation in anchor_calculate_discriminator.py pointed at book.anchor-lang.com/anchor_bts/discriminator.html, which Anchor removed when it restructured its docs. Two links in the README had also moved: docs.chainstack.com/quickstart/ and docs.chainstack.com/docs/trader-nodes. book.anchor-lang.com/anchor_bts/discriminator.html -> www.anchor-lang.com/docs/basics/idl (has a Discriminators section) docs.chainstack.com/quickstart/ -> docs.chainstack.com/reference/blockchain-apis docs.chainstack.com/docs/trader-nodes -> docs.chainstack.com/docs/solana-trader-nodes All 28 real URLs in the repo now return 200, checked by fetching each one. verify_documentation_links.py keeps them honest: offline it asserts every URL is https and that none of the four dead endpoints has come back, and --live fetches each and fails on 4xx/5xx. It skips the unroutable hosts the offline verifiers point stub clients at, and example.com, which RFC 2606 reserves for exactly the placeholder metadata URI a test coin is created with. The discriminator script also still asked you to edit a constant, which the argument rule had just outlawed, so it takes the name on the command line and prints the u64, the byte list and the hex. Cross-checks against the constants in pumpfun_instructions_v2.py: global:buy_v2 gives [184, 23, 238, 97, 103, 197, 211, 61], which is BUY_V2_DISCRIMINATOR. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EZ5HdjTadNUad8i6xis3TR * fix(cookbook,tools): detect coins via logs so v1 transactions are not skipped Solana transaction v1 has been live since 2026-09-15 and solders cannot deserialize one until 0.29. Three scripts detected coins by deserializing the transaction envelope, so each went blind to v1: cookbook/pumpfun/listen/pumpfun_listen_tokens_blocksubscribe.py 30,080 "skipping a v1 transaction" lines in 150s tools/compare_listeners.py 601 "Failed to process transaction: io error: unexpected end of file" in 100s, which its own comment read as a transport difference cookbook/pumpfun/trade/pumpfun_snipe_token_blocksubscribe.py skipped v1 silently, so a coin created in one was never sniped All three now route on meta.logMessages, which the RPC has already decoded and which reads the same for every version. The blocks example keeps the envelope decode as a genuine fallback for providers that return blocks without logs; the sniper derives the associated bonding curve from the mint and curve instead of reading the instruction's account list, verified against pumpfun_derive_curve_addresses.py on a live coin. Measured live after the change: the blocks example decoded 88 v0, 6 v1 and 4 legacy creates with zero skips and zero errors, and compare_listeners' block lane now appears alongside logs and geyser for the same coins. Upgrading solders was tried first and reverted. 0.29 does decode v1 — 0.26, 0.27.1 and 0.28 all raise "io error: unexpected end of file" on the committed fixture — but it requires solana>=0.40, which moved TxOpts, MemcmpOpts and TokenAccountOpts out of solana.rpc.types. 22 files import them and 16 of 19 verifiers failed on the import alone, so that is a migration of its own. verify_transaction_v1.py gains a check that no cookbook or tools listener detects by opening the envelope. It found the sniper, which this had missed. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EZ5HdjTadNUad8i6xis3TR * fix(cookbook): label the transaction version and restore the lost fields The blocks listener printed "Found CreateEvent in a 0 transaction", which reads as a count rather than what it is — Solana's transaction version. It now prints v0, v1 or legacy. Routing detection through the CreateEvent also dropped two fields the instruction path used to fill, so every detection showed "Token Standard: N/A" and no Associated BC. Both come from the event's token_program: the standard is that program, and the associated bonding curve is an ordinary ATA of the curve under it. Verified against pumpfun_derive_curve_addresses.py on a live coin — curve E94izXvHd7dd... derives to He94dArnuprt..., matching what the listener now prints. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EZ5HdjTadNUad8i6xis3TR --------- Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
190 lines
6.2 KiB
Python
190 lines
6.2 KiB
Python
"""Verify the URLs in docstrings and docs still resolve.
|
|
|
|
A dead link in a cookbook docstring is worse than no link: the script is a
|
|
reference someone reads before writing their own code, and the citation is how
|
|
they check the claim. Three had rotted by 2026-09-22 —
|
|
`book.anchor-lang.com/anchor_bts/discriminator.html` (Anchor restructured its
|
|
docs), `docs.chainstack.com/quickstart/` and `docs.chainstack.com/docs/trader-nodes`.
|
|
|
|
Offline by default, so this can run in the normal set:
|
|
|
|
A. Every URL is well-formed and uses https, apart from the deliberate
|
|
unroutable stubs the offline verifiers point their fake clients at.
|
|
B. No URL matches one of the dead endpoints already removed, so they cannot
|
|
come back by copy-paste.
|
|
|
|
With `--live` it fetches every one and fails on anything >= 400. That needs
|
|
network and takes about a minute, so it is opt-in.
|
|
|
|
Usage:
|
|
uv run tests/regression/verify_documentation_links.py
|
|
uv run tests/regression/verify_documentation_links.py --live
|
|
"""
|
|
|
|
import re
|
|
import sys
|
|
import urllib.error
|
|
import urllib.request
|
|
from pathlib import Path
|
|
from urllib.parse import urlparse
|
|
|
|
PROJECT_ROOT = Path(__file__).resolve().parents[2]
|
|
|
|
SEARCH_ROOTS = ("cookbook", "tools", "tests", "src", "bots")
|
|
SEARCH_SUFFIXES = {".py", ".md", ".yaml"}
|
|
EXTRA_FILES = ("README.md", "CLAUDE.md")
|
|
|
|
URL = re.compile(r"https?://[^\s'\"()<>\]`,]+")
|
|
|
|
# Hosts that are not meant to resolve. The offline verifiers point a stub client
|
|
# at unroutable addresses on purpose, and example.com is the domain RFC 2606
|
|
# reserves for exactly the placeholder metadata URI a test coin is created with.
|
|
STUB_HOSTS = {
|
|
"127.0.0.1",
|
|
"dummy",
|
|
"offline.invalid",
|
|
"stub.invalid",
|
|
"example.com",
|
|
}
|
|
|
|
# Endpoints that used to be cited here and no longer exist. Keeping them listed
|
|
# means a stale copy-paste fails loudly instead of shipping.
|
|
DEAD = {
|
|
"https://book.anchor-lang.com/anchor_bts/discriminator.html",
|
|
"https://www.anchor-lang.com/anchor_bts/discriminator.html",
|
|
"https://docs.chainstack.com/quickstart/",
|
|
"https://docs.chainstack.com/docs/trader-nodes",
|
|
}
|
|
|
|
HTTP_ERROR = 400
|
|
TIMEOUT_SECONDS = 25
|
|
|
|
|
|
def collect_urls() -> dict[str, list[str]]:
|
|
"""Find every URL in the repo's docs and docstrings.
|
|
|
|
Returns:
|
|
Each URL mapped to the `path:line` locations that mention it
|
|
"""
|
|
files = [
|
|
p
|
|
for root in SEARCH_ROOTS
|
|
for p in (PROJECT_ROOT / root).rglob("*")
|
|
if p.is_file()
|
|
and p.suffix in SEARCH_SUFFIXES
|
|
# This file lists the dead endpoints on purpose; scanning it would
|
|
# report its own registry as a finding.
|
|
and p.resolve() != Path(__file__).resolve()
|
|
]
|
|
files += [PROJECT_ROOT / name for name in EXTRA_FILES]
|
|
|
|
found: dict[str, list[str]] = {}
|
|
for path in files:
|
|
try:
|
|
text = path.read_text()
|
|
except UnicodeDecodeError:
|
|
continue
|
|
for match in URL.finditer(text):
|
|
url = match.group(0).rstrip(".,;:")
|
|
line = text[: match.start()].count("\n") + 1
|
|
found.setdefault(url, []).append(f"{path.relative_to(PROJECT_ROOT)}:{line}")
|
|
return found
|
|
|
|
|
|
def is_checkable(url: str) -> bool:
|
|
"""Whether a URL is a real address rather than a stub or a format template.
|
|
|
|
Args:
|
|
url: The URL to classify
|
|
|
|
Returns:
|
|
True if it should resolve to a live page
|
|
"""
|
|
if "{" in url: # f-string template, e.g. an explorer link
|
|
return False
|
|
host = urlparse(url).hostname or ""
|
|
return host not in STUB_HOSTS
|
|
|
|
|
|
def check_urls_well_formed(found: dict[str, list[str]]) -> None:
|
|
"""Every real URL must be https with a hostname."""
|
|
offenders = []
|
|
for url, where in sorted(found.items()):
|
|
if not is_checkable(url):
|
|
continue
|
|
parsed = urlparse(url)
|
|
if parsed.scheme != "https" or not parsed.hostname:
|
|
offenders.append(f"{url} ({where[0]})")
|
|
assert not offenders, "URLs that are not https with a host:\n " + "\n ".join(
|
|
offenders
|
|
)
|
|
|
|
|
|
def check_no_known_dead(found: dict[str, list[str]]) -> None:
|
|
"""None of the endpoints already found dead may reappear."""
|
|
offenders = [
|
|
f"{url} ({', '.join(where)})"
|
|
for url, where in sorted(found.items())
|
|
if url in DEAD
|
|
]
|
|
assert not offenders, "known-dead URLs are back:\n " + "\n ".join(offenders)
|
|
|
|
|
|
def check_urls_resolve(found: dict[str, list[str]]) -> None:
|
|
"""Fetch every real URL and fail on anything >= 400.
|
|
|
|
Args:
|
|
found: URLs mapped to where they appear
|
|
|
|
Raises:
|
|
AssertionError: If any URL returns an error status or cannot be reached
|
|
"""
|
|
offenders = []
|
|
targets = sorted(url for url in found if is_checkable(url))
|
|
print(f" fetching {len(targets)} URLs...")
|
|
for url in targets:
|
|
request = urllib.request.Request( # noqa: S310
|
|
url, method="GET", headers={"User-Agent": "Mozilla/5.0 (link-check)"}
|
|
)
|
|
try:
|
|
with urllib.request.urlopen(request, timeout=TIMEOUT_SECONDS) as response: # noqa: S310
|
|
status = response.status
|
|
except urllib.error.HTTPError as exc:
|
|
status = exc.code
|
|
except Exception as exc: # noqa: BLE001
|
|
offenders.append(f"{url} unreachable: {exc} ({found[url][0]})")
|
|
continue
|
|
if status >= HTTP_ERROR:
|
|
offenders.append(f"{url} HTTP {status} ({found[url][0]})")
|
|
assert not offenders, "dead links:\n " + "\n ".join(offenders)
|
|
|
|
|
|
def main() -> None:
|
|
"""Run the checks and report."""
|
|
live = "--live" in sys.argv
|
|
|
|
print("=" * 72)
|
|
print("Verifying documentation links")
|
|
print("=" * 72)
|
|
|
|
found = collect_urls()
|
|
checkable = [u for u in found if is_checkable(u)]
|
|
print(f"{len(found)} distinct URLs, {len(checkable)} of them real addresses\n")
|
|
|
|
check_urls_well_formed(found)
|
|
print("every URL is https with a host -> OK")
|
|
check_no_known_dead(found)
|
|
print("no known-dead URL has come back -> OK")
|
|
|
|
if live:
|
|
check_urls_resolve(found)
|
|
print("every URL resolves -> OK")
|
|
else:
|
|
print("\n(skipping the network check; pass --live to fetch each URL)")
|
|
|
|
print("\nALL CHECKS PASSED")
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|