feat: add multi-token Safe spending limit support

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: hyacinthus

intentkit/core/agent/__init__.py

@@ -9,13 +9,14 @@
 from .notifications import send_agent_notification
 from .public_info import override_public_info, update_public_info
 from .queries import get_agent, get_agent_by_id_or_slug, iterate_agent_id_batches
-from .wallet import process_agent_wallet
+from .wallet import process_agent_wallet, set_agent_safe_token_spending_limit
 
 __all__ = [
     "get_agent",
     "get_agent_by_id_or_slug",
     "iterate_agent_id_batches",
     "process_agent_wallet",
+    "set_agent_safe_token_spending_limit",
     "send_agent_notification",
     "override_agent",
     "patch_agent",

intentkit/core/agent/wallet.py

@@ -1,6 +1,7 @@
 import json
 import logging
 from decimal import Decimal
+from typing import Any
 
 from intentkit.config.config import config
 from intentkit.models.agent import Agent
@@ -279,3 +280,98 @@ async def process_agent_wallet(
         )
 
     return agent_data
+
+
+def _resolve_safe_rpc_url(network_id: str, privy_wallet_data: dict[str, Any]) -> str:
+    rpc_url = privy_wallet_data.get("rpc_url")
+    if not rpc_url and config.chain_provider:
+        try:
+            chain_config = config.chain_provider.get_chain_config(network_id)
+            rpc_url = chain_config.rpc_url
+        except Exception as e:
+            logger.warning(f"Failed to get RPC URL from chain provider: {e}")
+
+    if not rpc_url:
+        from intentkit.wallets.privy import CHAIN_CONFIGS
+
+        chain_config = CHAIN_CONFIGS.get(network_id)
+        if chain_config and chain_config.rpc_url:
+            rpc_url = chain_config.rpc_url
+
+    if not rpc_url:
+        raise IntentKitAPIError(
+            500,
+            "RpcUrlNotConfigured",
+            f"RPC URL not configured for network {network_id}",
+        )
+
+    return rpc_url
+
+
+async def set_agent_safe_token_spending_limit(
+    agent_id: str,
+    token_address: str,
+    spending_limit: float,
+) -> dict[str, Any]:
+    """Set token spending limit for a Safe agent using agent-level inputs only."""
+    from intentkit.core.agent.queries import get_agent
+    from intentkit.wallets.privy import PrivyClient, set_safe_token_spending_limit
+
+    agent = await get_agent(agent_id)
+    if not agent:
+        raise IntentKitAPIError(
+            status_code=404,
+            key="AgentNotFound",
+            message=f"Agent with ID '{agent_id}' not found",
+        )
+    if agent.wallet_provider != "safe":
+        raise IntentKitAPIError(
+            400,
+            "SafeWalletRequired",
+            "Token spending limits can only be set for agents using wallet_provider='safe'.",
+        )
+
+    agent_data = await AgentData.get(agent_id)
+    if not agent_data.privy_wallet_data:
+        raise IntentKitAPIError(
+            400,
+            "PrivyWalletDataMissing",
+            "Privy wallet data is missing for this Safe wallet agent.",
+        )
+
+    try:
+        privy_wallet_data = json.loads(agent_data.privy_wallet_data)
+    except json.JSONDecodeError as e:
+        raise IntentKitAPIError(
+            500,
+            "PrivyWalletDataInvalid",
+            "Privy wallet data is corrupted and cannot be parsed.",
+        ) from e
+
+    try:
+        privy_wallet_id = privy_wallet_data["privy_wallet_id"]
+        privy_wallet_address = privy_wallet_data["privy_wallet_address"]
+        safe_address = privy_wallet_data["smart_wallet_address"]
+    except KeyError as e:
+        raise IntentKitAPIError(
+            500,
+            "PrivyWalletDataIncomplete",
+            "Privy wallet data is missing required fields.",
+        ) from e
+
+    network_id = (
+        privy_wallet_data.get("network_id") or agent.network_id or "base-mainnet"
+    )
+    rpc_url = _resolve_safe_rpc_url(network_id, privy_wallet_data)
+
+    privy_client = PrivyClient()
+    return await set_safe_token_spending_limit(
+        privy_client=privy_client,
+        privy_wallet_id=privy_wallet_id,
+        privy_wallet_address=privy_wallet_address,
+        safe_address=safe_address,
+        token_address=token_address,
+        spending_limit=spending_limit,
+        network_id=network_id,
+        rpc_url=rpc_url,
+    )

intentkit/models/agent_schema.json

@@ -55,9 +55,7 @@
       "order": 10
     }
   ],
-  "required": [
-    "name"
-  ],
+  "required": ["name"],
   "properties": {
     "name": {
       "title": "Agent Name",
@@ -153,10 +151,7 @@
       "type": "string",
       "description": "Strategy for managing short-term memory when context limit is reached. 'trim' removes oldest messages, 'summarize' creates summaries.",
       "default": "trim",
-      "enum": [
-        "trim",
-        "summarize"
-      ],
+      "enum": ["trim", "summarize"],
       "x-group": "llm",
       "x-advanced": true
     },
@@ -322,10 +317,7 @@
             "x-group": "autonomous"
           }
         },
-        "required": [
-          "name",
-          "prompt"
-        ]
+        "required": ["name", "prompt"]
       },
       "description": "Set automated prompts and schedules for your agent.",
       "x-group": "autonomous",
@@ -335,17 +327,9 @@
       "title": "Wallet Provider",
       "type": "string",
       "description": "Provider of the agent's wallet, choose cdp if you want the agent to have it's own wallet.",
-      "enum": [
-        "cdp",
-        "readonly",
-        "none"
-      ],
-      "x-enum-title": [
-        "Coinbase Server Wallet V2",
-        "Readonly Wallet",
-        "None"
-      ],
-      "default": "cdp",
+      "enum": ["cdp", "readonly", "none"],
+      "x-enum-title": ["Coinbase Server Wallet V2", "Readonly Wallet", "None"],
+      "default": "none",
       "x-group": "onchain"
     },
     "network_id": {
@@ -382,9 +366,7 @@
         "x-group": "onchain"
       }
     },
-    "required": [
-      "readonly_wallet_address"
-    ]
+    "required": ["readonly_wallet_address"]
   },
   "additionalProperties": true
-}
+}

intentkit/wallets/privy.py

@@ -17,6 +17,7 @@
     deploy_safe_with_allowance,
     execute_gasless_transaction,
     get_wallet_provider,
+    set_safe_token_spending_limit,
     transfer_erc20_gasless,
 )
 from intentkit.wallets.privy_signer import PrivyWalletSigner, get_wallet_signer
@@ -75,6 +76,7 @@
     "_send_safe_transaction_with_master_wallet",
     "_send_transaction_with_master_wallet",
     "_set_spending_limit",
+    "set_safe_token_spending_limit",
     "_wait_for_safe_deployed",
     "create_privy_safe_wallet",
     "deploy_safe_with_allowance",