cryptochief-crypto-processing-python 0.4.0__tar.gz → 0.6.0__tar.gz

{cryptochief_crypto_processing_python-0.4.0 → cryptochief_crypto_processing_python-0.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: cryptochief-crypto-processing-python
-Version: 0.4.0
+Version: 0.6.0
 Summary: Official async Python SDK for the Crypto Chief crypto payment gateway and crypto processing API. Accept crypto payments, send single and mass crypto payouts, sign on-chain transactions and smart-contract calls, manage wallets, convert fiat to crypto, and verify webhooks across Ethereum, BNB Smart Chain, Polygon, Tron, TON, Solana, Bitcoin, XRP and 20+ blockchains. USDT and USDC stablecoin support with int-precise amounts and asyncio/httpx.
 Project-URL: Homepage, https://crypto-chief.com/processing/
 Project-URL: Documentation, https://docs-sdk.crypto-chief.com/processing/python
@@ -120,7 +120,7 @@ Both credentials come from the Dashboard -> Project.
 | Solana programs | `client.transactions` | `sign_anchor_call`, `sign_solana_call` |
 | TON contract calls (Jetton / NFT / text) | `client.transactions` | `jetton_transfer`, `nft_transfer`, `send_ton_comment`, `sign_ton_call` |
 | Accept incoming payments | `client.pay_ins` | `create`, `select_asset`, `reset_asset`, `cancel`, `info`, `history`, `wait_for` |
-| Wallet management + RSA decrypt | `client.wallets` | `generate`, `list`, `info`, `freeze`, `decrypt_private_key` |
+| Wallet management + RSA decrypt | `client.wallets` | `generate`, `list`, `info`, `freeze`, `rebind_master`, `set_callback_url`, `set_label`, `decrypt_private_key` |
 | Treasury sweeps | `client.sweeps` | `force`, `history`, `wallet_history`, `settings`, `update_settings` |
 | Withdrawals (read-only) | `client.withdrawals` | `info`, `history` |
 | Static-deposit history | `client.static_deposits` | `info`, `history` |
@@ -200,6 +200,14 @@ decimal strings round-trip exactly. Discover an asset's decimals with
 
 ## Contract calls without hand-encoding
 
+> **This snippet shows the encoder, not a complete swap.** Uniswap's router
+> moves your input token with `transferFrom`, so it needs an ERC-20
+> `approve(address,uint256)` on that token first, confirmed before the swap is
+> signed — without it the swap reverts and burns the gas. And an `amountOutMin`
+> of `0` accepts whatever the pool returns, which on a public mempool hands the
+> trade to the first sandwich bot that sees it. The runnable version, with both,
+> is in `examples/`.
+
 ```python
 from cryptochief import EvmCallRequest, Erc20TransferRequest, Chain, human_to_base
 
@@ -294,8 +302,11 @@ the sender IPs in `WEBHOOK_SENDER_IPS` at your edge for defense in depth.
 ## Errors
 
 Everything the SDK raises derives from `CryptoChiefError`. API failures are
-`APIError` with a stable `.code` (and `.http_status`); branch on `ErrorCode`
-rather than parsing messages. 5xx and network errors are retried automatically;
+`APIError` with a stable `.code` (plus `.message`, `.http_status` and the
+untouched `.raw` body); branch on `ErrorCode` rather than parsing messages. Both
+envelope shapes the gateway sends - its own refusals, which carry the code in
+`error`, and refusals relayed from upstream as `SERVICE_ERROR` with the code in
+`msg` - resolve to `.code`. 5xx and network errors are retried automatically;
 4xx is raised immediately.
 
 ```python
@@ -363,6 +374,35 @@ priv = client.wallets.decrypt_private_key(wallet.private_key_encrypted)
   `completed_at` filled in. Earlier platform versions reported `completed` at
   broadcast, so a sweep could read as settled while its transaction was still
   unconfirmed.
+- **My deposits are settling on the wrong master wallet.**
+  `client.wallets.rebind_master(address, master_wallet_address)` re-points a
+  transit or static wallet at another master of the project - the link is
+  otherwise decided at creation, falling back to the project's *oldest* master
+  of that chain family when none was named. It moves no money: it changes where
+  the **next** sweep settles, including sweeps already queued, and anything
+  already swept sits on the previous master and has to be sent from there as an
+  ordinary payout. It is idempotent, so re-running the same list is safe.
+- **A static address is announcing deposits to the wrong URL.** Deposits go to
+  the callback the *address* carries, fixed when it was minted - so an address
+  you did not create through your own integration, or one minted before your
+  endpoint moved, keeps notifying somewhere else.
+  `client.wallets.set_callback_url(address, url)` corrects it, from the next
+  deposit on (one already announced is not re-announced). Pass `""` to clear it
+  and stop the announcements - the SDK sends the empty string rather than
+  dropping it the way it drops unset optional fields, and the wallet then reads
+  back `callback_url=None`. Static wallets only.
+- **How do I name a wallet?** Pass `label` on
+  `client.wallets.generate(GenerateWalletRequest(..., label="EU shop"))`. It
+  applies to every wallet type, is up to 255 characters, and is yours alone -
+  nothing on chain and nothing in routing depends on it.
+- **How do I rename a wallet I already have?**
+  `client.wallets.set_label(address, "EU shop")` - every wallet type, master
+  and transit included, unlike the deposit callback. Pass `""` to clear the
+  name: as with `set_callback_url`, the empty string is sent rather than
+  dropped, and the wallet then reads back `label=None`. The name comes back on
+  every response that describes a wallet - generation, `info`, `list`, and the
+  answers of `rebind_master` / `set_callback_url` / `set_label` itself - as
+  `wallet.label`, `None` when the wallet is unnamed.
 - **How do I keep test payments off real chains?** Set `environment` on
   `CreatePayInRequest` to `Environment.TESTNET` or `Environment.MAINNET`. It
   constrains the asset the platform picks when you have not named a concrete

{cryptochief_crypto_processing_python-0.4.0 → cryptochief_crypto_processing_python-0.6.0}/README.md

@@ -81,7 +81,7 @@ Both credentials come from the Dashboard -> Project.
 | Solana programs | `client.transactions` | `sign_anchor_call`, `sign_solana_call` |
 | TON contract calls (Jetton / NFT / text) | `client.transactions` | `jetton_transfer`, `nft_transfer`, `send_ton_comment`, `sign_ton_call` |
 | Accept incoming payments | `client.pay_ins` | `create`, `select_asset`, `reset_asset`, `cancel`, `info`, `history`, `wait_for` |
-| Wallet management + RSA decrypt | `client.wallets` | `generate`, `list`, `info`, `freeze`, `decrypt_private_key` |
+| Wallet management + RSA decrypt | `client.wallets` | `generate`, `list`, `info`, `freeze`, `rebind_master`, `set_callback_url`, `set_label`, `decrypt_private_key` |
 | Treasury sweeps | `client.sweeps` | `force`, `history`, `wallet_history`, `settings`, `update_settings` |
 | Withdrawals (read-only) | `client.withdrawals` | `info`, `history` |
 | Static-deposit history | `client.static_deposits` | `info`, `history` |
@@ -161,6 +161,14 @@ decimal strings round-trip exactly. Discover an asset's decimals with
 
 ## Contract calls without hand-encoding
 
+> **This snippet shows the encoder, not a complete swap.** Uniswap's router
+> moves your input token with `transferFrom`, so it needs an ERC-20
+> `approve(address,uint256)` on that token first, confirmed before the swap is
+> signed — without it the swap reverts and burns the gas. And an `amountOutMin`
+> of `0` accepts whatever the pool returns, which on a public mempool hands the
+> trade to the first sandwich bot that sees it. The runnable version, with both,
+> is in `examples/`.
+
 ```python
 from cryptochief import EvmCallRequest, Erc20TransferRequest, Chain, human_to_base
 
@@ -255,8 +263,11 @@ the sender IPs in `WEBHOOK_SENDER_IPS` at your edge for defense in depth.
 ## Errors
 
 Everything the SDK raises derives from `CryptoChiefError`. API failures are
-`APIError` with a stable `.code` (and `.http_status`); branch on `ErrorCode`
-rather than parsing messages. 5xx and network errors are retried automatically;
+`APIError` with a stable `.code` (plus `.message`, `.http_status` and the
+untouched `.raw` body); branch on `ErrorCode` rather than parsing messages. Both
+envelope shapes the gateway sends - its own refusals, which carry the code in
+`error`, and refusals relayed from upstream as `SERVICE_ERROR` with the code in
+`msg` - resolve to `.code`. 5xx and network errors are retried automatically;
 4xx is raised immediately.
 
 ```python
@@ -324,6 +335,35 @@ priv = client.wallets.decrypt_private_key(wallet.private_key_encrypted)
   `completed_at` filled in. Earlier platform versions reported `completed` at
   broadcast, so a sweep could read as settled while its transaction was still
   unconfirmed.
+- **My deposits are settling on the wrong master wallet.**
+  `client.wallets.rebind_master(address, master_wallet_address)` re-points a
+  transit or static wallet at another master of the project - the link is
+  otherwise decided at creation, falling back to the project's *oldest* master
+  of that chain family when none was named. It moves no money: it changes where
+  the **next** sweep settles, including sweeps already queued, and anything
+  already swept sits on the previous master and has to be sent from there as an
+  ordinary payout. It is idempotent, so re-running the same list is safe.
+- **A static address is announcing deposits to the wrong URL.** Deposits go to
+  the callback the *address* carries, fixed when it was minted - so an address
+  you did not create through your own integration, or one minted before your
+  endpoint moved, keeps notifying somewhere else.
+  `client.wallets.set_callback_url(address, url)` corrects it, from the next
+  deposit on (one already announced is not re-announced). Pass `""` to clear it
+  and stop the announcements - the SDK sends the empty string rather than
+  dropping it the way it drops unset optional fields, and the wallet then reads
+  back `callback_url=None`. Static wallets only.
+- **How do I name a wallet?** Pass `label` on
+  `client.wallets.generate(GenerateWalletRequest(..., label="EU shop"))`. It
+  applies to every wallet type, is up to 255 characters, and is yours alone -
+  nothing on chain and nothing in routing depends on it.
+- **How do I rename a wallet I already have?**
+  `client.wallets.set_label(address, "EU shop")` - every wallet type, master
+  and transit included, unlike the deposit callback. Pass `""` to clear the
+  name: as with `set_callback_url`, the empty string is sent rather than
+  dropped, and the wallet then reads back `label=None`. The name comes back on
+  every response that describes a wallet - generation, `info`, `list`, and the
+  answers of `rebind_master` / `set_callback_url` / `set_label` itself - as
+  `wallet.label`, `None` when the wallet is unnamed.
 - **How do I keep test payments off real chains?** Set `environment` on
   `CreatePayInRequest` to `Environment.TESTNET` or `Environment.MAINNET`. It
   constrains the asset the platform picks when you have not named a concrete

{cryptochief_crypto_processing_python-0.4.0 → cryptochief_crypto_processing_python-0.6.0}/pyproject.toml

@@ -110,5 +110,5 @@ target-version = "py310"
 
 [tool.mypy]
 python_version = "3.10"
+mypy_path = "src"
 warn_unused_ignores = true
-ignore_missing_imports = true

{cryptochief_crypto_processing_python-0.4.0 → cryptochief_crypto_processing_python-0.6.0}/src/cryptochief/__init__.py

@@ -170,6 +170,8 @@ from .webhook import (
     PayInWebhookEvent,
     PayoutWebhookEvent,
     StaticDepositWebhookEvent,
+    SweepWebhookEvent,
+    SWEEP_EVENT_CONFIRMED,
     TransactionWebhookEvent,
     WebhookSignatureError,
     coerce_webhook_event,
@@ -230,6 +232,8 @@ __all__ = [
     "TransactionWebhookEvent",
     "PayInWebhookEvent",
     "StaticDepositWebhookEvent",
+    "SweepWebhookEvent",
+    "SWEEP_EVENT_CONFIRMED",
     # Services
     "PayoutsService",
     "TransactionsService",

{cryptochief_crypto_processing_python-0.4.0 → cryptochief_crypto_processing_python-0.6.0}/src/cryptochief/_version.py

@@ -1,3 +1,3 @@
 """Single source of truth for the package version."""
 
-__version__ = "0.4.0"
+__version__ = "0.6.0"

{cryptochief_crypto_processing_python-0.4.0 → cryptochief_crypto_processing_python-0.6.0}/src/cryptochief/errors.py

@@ -19,19 +19,27 @@ class CryptoChiefError(Exception):
 class APIError(CryptoChiefError):
     """A typed Crypto Chief error response.
 
-    The API returns either ``{"error": "SERVICE_ERROR", "msg": "<CODE>", ...}``
-    (then :attr:`code` is ``<CODE>``) or ``{"error": "<CODE>", ...}`` (then
-    :attr:`code` is that value). Either way :attr:`code` is the stable
-    identifier to branch on::
+    :attr:`code` is the machine-readable identifier to branch on, whichever
+    envelope shape the refusal arrived in: the gateway's own refusals carry the
+    code in ``error`` and an English sentence in ``msg``
+    (``{"error": "LABEL_TOO_LONG", "msg": "label is longer than 255 characters"}``),
+    while a relayed upstream refusal carries the generic ``SERVICE_ERROR``
+    marker in ``error`` and the code in ``msg``
+    (``{"error": "SERVICE_ERROR", "msg": "wallet_not_found"}``). Both resolve to
+    :attr:`code`::
 
         try:
             await client.payouts.execute(req)
         except APIError as e:
             if e.code == ErrorCode.INSUFFICIENT_FUNDS:
                 ...  # top up and retry
+
+    :attr:`message` is the human-readable half - the sentence when the gateway
+    sent one - and :attr:`raw` is the untouched response body.
     """
 
     code: str
+    message: str
     http_status: int
     raw: Optional[str]
 
@@ -46,6 +54,7 @@ class APIError(CryptoChiefError):
         # Normalize an ErrorCode member to its wire string ("NETWORK_ERROR"),
         # not its enum repr ("ErrorCode.NETWORK_ERROR").
         self.code = code.value if isinstance(code, Enum) else str(code)
+        self.message = message or ""
         self.http_status = http_status
         self.raw = raw
         super().__init__(self._format(http_status, self.code, message))
@@ -75,6 +84,11 @@ class ErrorCode(str, Enum):
     ORDER_NOT_LIVE = "ORDER_NOT_LIVE"
     ASSET_ALREADY_SELECTED = "ASSET_ALREADY_SELECTED"
     INVALID_PARAMS = "INVALID_PARAMS"
+    #: A wallet label over 255 characters.
+    LABEL_TOO_LONG = "LABEL_TOO_LONG"
+    #: The gateway's marker for a refusal relayed from an upstream service; the
+    #: machine code then travels in ``msg`` and is what :attr:`APIError.code`
+    #: reports, so this member is rarely what you compare against.
     SERVICE_ERROR = "SERVICE_ERROR"
     UNAUTHORIZED = "UNAUTHORIZED"
     URL_CALLBACK_REQUIRED = "URL_CALLBACK_REQUIRED"

cryptochief_crypto_processing_python-0.6.0/src/cryptochief/services/wallets.py

@@ -0,0 +1,222 @@
+"""Wallet management + local RSA private-key decryption."""
+
+from __future__ import annotations
+
+from dataclasses import dataclass
+from enum import Enum
+from typing import List, Optional
+
+from .._models import from_dict
+from ..errors import CryptoChiefError
+from .base import BaseService
+
+
+class WalletType(str, Enum):
+    MASTER = "master"
+    TRANSIT = "transit"
+    STATIC = "static"
+
+
+@dataclass(kw_only=True)
+class GenerateWalletRequest:
+    wallet_type: str
+    chain_family: str
+    master_wallet_address: Optional[str] = None  # transit/static wallets only
+    callback_url: Optional[str] = None  # static wallets only - per-deposit webhook URL
+    #: A name for the wallet, for people reading a list of them. Applies to
+    #: every wallet type - it names the wallet, it is not a property of its
+    #: role - and is yours alone: nothing on chain and nothing in routing
+    #: depends on it. Up to 255 characters, longer answers ``LABEL_TOO_LONG``.
+    #: Leave it ``None`` to omit it; the endpoint rejects unknown fields, and an
+    #: empty string is a name rather than the absence of one.
+    #: :meth:`WalletsService.set_label` renames the wallet afterwards.
+    label: Optional[str] = None
+
+
+@dataclass(kw_only=True)
+class WalletCoinBalance:
+    address: Optional[str] = None
+    chain: Optional[str] = None
+    coin: Optional[str] = None
+    contract: Optional[str] = None
+    decimals: int = 0
+    value: Optional[str] = None
+    human_value: Optional[str] = None
+    amount_usd: Optional[str] = None
+    timestamp: Optional[int] = None
+
+
+@dataclass(kw_only=True)
+class Wallet:
+    address: str = ""
+    chain_family: Optional[str] = None
+    type: Optional[str] = None
+    wallet_type: Optional[str] = None
+    frozen: Optional[bool] = None
+    #: The master this wallet sweeps into, ``None`` when it has none - a master
+    #: wallet has no master of its own. The API always sends the key and sends
+    #: ``null`` rather than an empty string, so ``None`` here means "no master",
+    #: not "not reported". :meth:`WalletsService.rebind_master` changes it.
+    master_wallet_address: Optional[str] = None
+    #: Where deposits to this address are announced, ``None`` when nowhere. Only
+    #: a static wallet has one: a master or transit always reads ``None``.
+    #: :meth:`WalletsService.set_callback_url` changes it.
+    callback_url: Optional[str] = None
+    #: The wallet's name, ``None`` when it has none. Every wallet type can carry
+    #: one, and every response that describes a wallet reports it. The API
+    #: always sends the key and sends ``null`` rather than an empty string, so
+    #: ``None`` here means "unnamed" - a cleared label reads back as ``None``,
+    #: never as ``""``. :meth:`WalletsService.set_label` changes it.
+    label: Optional[str] = None
+    #: Base64 RSA-OAEP/SHA-256 ciphertext - decrypt with ``decrypt_private_key``.
+    private_key_encrypted: Optional[str] = None
+    created_at: Optional[str] = None
+    coins: Optional[List[WalletCoinBalance]] = None
+    total_balance_usd: Optional[str] = None
+
+
+@dataclass(kw_only=True)
+class ListWalletsResponse:
+    items: Optional[List[Wallet]] = None
+
+
+class WalletsService(BaseService):
+    async def generate(self, req: GenerateWalletRequest) -> Wallet:
+        """Provision a new wallet on the requested chain family."""
+        return from_dict(Wallet, await self._post("/v1/wallets/generate", req))
+
+    async def list(self) -> ListWalletsResponse:
+        """Every wallet on the project."""
+        return from_dict(ListWalletsResponse, await self._post("/v1/wallets/list", {}))
+
+    async def info(self, address: str) -> Wallet:
+        """Details and current balances of one wallet."""
+        return from_dict(Wallet, await self._post("/v1/wallets/info", {"address": address}))
+
+    async def freeze(self, address: str) -> Wallet:
+        """Toggle the frozen flag - the response's ``frozen`` field is the new state."""
+        return from_dict(Wallet, await self._post("/v1/wallets/freeze", {"address": address}))
+
+    async def rebind_master(self, address: str, master_wallet_address: str) -> Wallet:
+        """Re-point a transit or static wallet at another master of the project.
+
+        The master link is decided when the wallet is created - at the master
+        named on that request, or, when none was named, at the project's *oldest*
+        master of that chain family, which on a project with more than one master
+        is rarely the one you meant. This is the way back.
+
+        It moves no money. It changes where the *next* sweep settles, including
+        sweeps already queued, because the destination is resolved when the sweep
+        runs; anything already swept sits on the previous master and has to be
+        sent from there as an ordinary payout.
+
+        Idempotent - a wallet already bound to that master answers 200 unchanged,
+        so re-running the same list is safe. A master wallet cannot be
+        re-pointed at all (``only transit and static wallets have a master``);
+        naming something that is not a master as the TARGET is a different
+        refusal (``not_a_master_wallet``). The target master must be the same
+        chain family (``chain_family_mismatch``) and not frozen
+        (``master_wallet_frozen``), since sweeping into a frozen master would
+        strand the funds there.
+
+        The gateway relays every upstream refusal as
+        ``{"error": "SERVICE_ERROR", "msg": "<token>"}``, and the SDK reports
+        that token as ``APIError.code`` - so branch on the code, not on the
+        message text. These tokens are per-endpoint and are not
+        :class:`~cryptochief.ErrorCode` members. Memo/tag-based families share one deposit
+        account across orders and are excluded
+        (``shared_transit_cannot_be_rebound``). Both addresses resolve against
+        the authenticated project, so one that is not yours answers
+        ``wallet_not_found`` / ``master_wallet_not_found`` rather than revealing
+        that it exists elsewhere.
+
+        Returns the wallet as it now stands.
+        """
+        return from_dict(
+            Wallet,
+            await self._post(
+                "/v1/wallets/rebind-master",
+                {"address": address, "master_wallet_address": master_wallet_address},
+            ),
+        )
+
+    async def set_callback_url(self, address: str, callback_url: str) -> Wallet:
+        """Set or clear a static wallet's deposit webhook after creation.
+
+        Deposits are announced to the callback URL the *address* carries, which
+        is fixed when the address is minted - so an address you did not create
+        through your own integration, or one minted before your endpoint moved,
+        keeps announcing its deposits somewhere else, or nowhere. This corrects
+        it, from the next deposit on: one already announced is not re-announced
+        to the new URL.
+
+        Pass ``""`` to clear it and stop announcing deposits for the address.
+        That is a real instruction rather than a missing field, so the SDK sends
+        the empty string instead of dropping it the way it drops unset optional
+        fields; the wallet then reads back ``callback_url=None``. ``None`` is
+        not that instruction and is refused here rather than silently leaving
+        the field off the body.
+
+        Static wallets only - a master or transit has no per-deposit callback
+        and answers 400. The address resolves against the authenticated project,
+        so one that is not yours answers ``wallet_not_found``.
+
+        Returns the wallet as it now stands.
+        """
+        if callback_url is None:
+            raise CryptoChiefError(
+                'cryptochief: set_callback_url: callback_url is required; pass "" to clear it'
+            )
+        return from_dict(
+            Wallet,
+            await self._post(
+                "/v1/wallets/callback-url",
+                {"address": address, "callback_url": callback_url},
+            ),
+        )
+
+    async def set_label(self, address: str, label: str) -> Wallet:
+        """Set or clear a wallet's label - the name it is read by.
+
+        A label is yours alone: nothing on chain and nothing in routing depends
+        on it. It is also the only thing telling one freshly minted address
+        apart from the next in a list, so a wallet created before the label was
+        supported, or minted somewhere other than your own integration, is worth
+        naming after the fact. This is how.
+
+        Every wallet type can be renamed - master, transit and static alike,
+        because a label names the wallet rather than describing its role. That
+        is unlike :meth:`set_callback_url`, which only a static wallet has.
+
+        Pass ``""`` to clear the name and leave the wallet unnamed. That is a
+        real instruction rather than a missing field, so the SDK sends the empty
+        string instead of dropping it the way it drops unset optional fields;
+        the wallet then reads back ``label=None``. ``None`` is not that
+        instruction and is refused here rather than silently leaving the field
+        off the body.
+
+        Up to 255 characters, longer answers ``LABEL_TOO_LONG``. The address
+        resolves against the authenticated project, so one that is not yours
+        answers ``wallet_not_found`` rather than revealing that it exists
+        elsewhere.
+
+        Returns the wallet as it now stands.
+        """
+        if label is None:
+            raise CryptoChiefError(
+                'cryptochief: set_label: label is required; pass "" to clear it'
+            )
+        return from_dict(
+            Wallet,
+            await self._post("/v1/wallets/label", {"address": address, "label": label}),
+        )
+
+    def decrypt_private_key(self, encrypted: str) -> str:
+        """Decrypt a generated wallet's ``private_key_encrypted`` field locally.
+
+        Uses the RSA private key configured on the client (``rsa_private_key``
+        option) and returns the chain-native hex private key. Raises
+        :class:`RsaKeyNotConfiguredError` if no key was configured. Synchronous -
+        never touches the network.
+        """
+        return self._client.rsa_decrypt(encrypted)

{cryptochief_crypto_processing_python-0.4.0 → cryptochief_crypto_processing_python-0.6.0}/src/cryptochief/transport.py

@@ -8,11 +8,26 @@ import random
 from .errors import APIError, ErrorCode
 
 
+def _field(env: dict, key: str) -> str:
+    """Read ``key`` from an error envelope as a trimmed string (``""`` if absent)."""
+    value = env.get(key)
+    return value.strip() if isinstance(value, str) else ""
+
+
 def parse_api_error(status: int, body: str) -> APIError:
     """Parse a non-2xx response body into an :class:`APIError` with a stable code.
 
-    The code is ``msg or error or HTTP_<status>``, and the message prefers
-    ``msg`` when it differs from ``error``.
+    Refusals arrive in two envelope shapes. When the gateway itself refuses, the
+    machine code is in ``error`` and ``msg`` holds an English sentence
+    (``{"error": "LABEL_TOO_LONG", "msg": "label is longer than 255 characters"}``).
+    When it relays an upstream refusal, ``error`` is the generic
+    ``SERVICE_ERROR`` marker and the machine code is in ``msg``
+    (``{"error": "SERVICE_ERROR", "msg": "wallet_not_found"}``).
+
+    So the code is ``error`` unless that is ``SERVICE_ERROR``, in which case it
+    is ``msg``; an empty result falls back to ``error`` and then
+    ``HTTP_<status>``. The human-readable message prefers ``msg`` and falls back
+    to ``error``.
     """
     env: dict = {}
     try:
@@ -21,11 +36,16 @@ def parse_api_error(status: int, body: str) -> APIError:
             env = parsed
     except ValueError:
         pass  # non-JSON error body -> fall back to HTTP_<status>
-    code = env.get("msg") or env.get("error") or f"HTTP_{status}"
-    message = env.get("error") or ""
-    if env.get("msg") and env.get("msg") != env.get("error"):
-        message = env.get("msg")
-    return APIError(code, http_status=status, message=message, raw=body)
+
+    error = _field(env, "error")
+    msg = _field(env, "msg")
+    code = error if error and error != ErrorCode.SERVICE_ERROR else (msg or error)
+    return APIError(
+        code or f"HTTP_{status}",
+        http_status=status,
+        message=msg or error,
+        raw=body,
+    )
 
 
 def backoff_delay(attempt: int, base_ms: float, max_ms: float) -> float:

{cryptochief_crypto_processing_python-0.4.0 → cryptochief_crypto_processing_python-0.6.0}/src/cryptochief/webhook.py

@@ -175,11 +175,75 @@ class StaticDepositWebhookEvent:
     paid_at: Optional[str] = None
 
 
+#: The only sweep event the platform emits. There is deliberately no
+#: ``sweep.broadcasted``: "we sent it" is not something you can act on, and an
+#: event that means "maybe" is one more thing to reconcile.
+SWEEP_EVENT_CONFIRMED = "sweep.confirmed"
+
+
+@dataclass(kw_only=True)
+class SweepWebhookEvent:
+    """Funds swept off a deposit wallet, confirmed on chain.
+
+    A ``static_deposit.paid`` tells you a customer paid you. This tells you the
+    money has finished moving into your own custody - until it fires, the
+    balance still sits on the deposit address. Reconciliation, treasury
+    reporting and "funds available to pay out" all key off this event, not off
+    the deposit.
+
+    Sweeps run on static deposit wallets *and* on the transit wallets issued per
+    pay-in order; both deliver here, to the callback URL configured for the
+    wallet the funds left.
+    """
+
+    event: str = ""
+    #: The sweeper task. One sweep settles once - use it as your idempotency key.
+    task_id: str = ""
+    #: Always ``"completed"``. A sweep reaches you in no other state.
+    status: str = ""
+
+    #: The wallet the funds left - the address your customer paid into.
+    wallet_address: str = ""
+    #: The master wallet they landed on.
+    to_address: Optional[str] = None
+
+    network: str = ""
+    chain_family: Optional[str] = None
+    asset_symbol: str = ""
+    asset_contract: Optional[str] = None
+    #: ``"native"`` or ``"token"``.
+    asset_type: Optional[str] = None
+    amount_raw: Optional[str] = None
+    amount_human: Optional[str] = None
+
+    sweep_tx_hash: str = ""
+    #: Set when the platform had to fund gas on the wallet before it could sweep.
+    gas_pump_tx_hash: Optional[str] = None
+
+    #: What makes this event true rather than hopeful, and never zero. It
+    #: travels with the event rather than being implied by it: "confirmed" is
+    #: not the same number on every chain, so if you run your own finality
+    #: policy you need the count to apply it.
+    sweep_confirmations: int = 0
+
+    #: When the chain was observed to hold the sweep. NOT the task's completion
+    #: timestamp, which is stamped on every terminal outcome - failures
+    #: included - and so says nothing about settlement.
+    confirmed_at: Optional[str] = None
+
+    #: What triggered it: ``"momentum"``, ``"threshold"`` or ``"force"``.
+    type_work: Optional[str] = None
+    #: What the sweep cost: network fee plus any gas or energy the platform
+    #: fronted to make it possible.
+    total_fee_usd: Optional[str] = None
+
+
 WebhookEvent = Union[
     PayoutWebhookEvent,
     TransactionWebhookEvent,
     PayInWebhookEvent,
     StaticDepositWebhookEvent,
+    SweepWebhookEvent,
     Dict[str, Any],
 ]
 
@@ -188,4 +252,5 @@ _EVENT_BY_PREFIX = {
     "transaction": TransactionWebhookEvent,
     "invoice": PayInWebhookEvent,
     "static_deposit": StaticDepositWebhookEvent,
+    "sweep": SweepWebhookEvent,
 }

cryptochief_crypto_processing_python-0.4.0/src/cryptochief/services/wallets.py

@@ -1,86 +0,0 @@
-"""Wallet management + local RSA private-key decryption."""
-
-from __future__ import annotations
-
-from dataclasses import dataclass
-from enum import Enum
-from typing import List, Optional
-
-from .._models import from_dict
-from .base import BaseService
-
-
-class WalletType(str, Enum):
-    MASTER = "master"
-    TRANSIT = "transit"
-    STATIC = "static"
-
-
-@dataclass(kw_only=True)
-class GenerateWalletRequest:
-    wallet_type: str
-    chain_family: str
-    master_wallet_address: Optional[str] = None  # transit/static wallets only
-    callback_url: Optional[str] = None  # static wallets only - per-deposit webhook URL
-
-
-@dataclass(kw_only=True)
-class WalletCoinBalance:
-    address: Optional[str] = None
-    chain: Optional[str] = None
-    coin: Optional[str] = None
-    contract: Optional[str] = None
-    decimals: int = 0
-    value: Optional[str] = None
-    human_value: Optional[str] = None
-    amount_usd: Optional[str] = None
-    timestamp: Optional[int] = None
-
-
-@dataclass(kw_only=True)
-class Wallet:
-    address: str = ""
-    chain_family: Optional[str] = None
-    type: Optional[str] = None
-    wallet_type: Optional[str] = None
-    frozen: Optional[bool] = None
-    master_wallet_address: Optional[str] = None
-    callback_url: Optional[str] = None
-    #: Base64 RSA-OAEP/SHA-256 ciphertext - decrypt with ``decrypt_private_key``.
-    private_key_encrypted: Optional[str] = None
-    created_at: Optional[str] = None
-    coins: Optional[List[WalletCoinBalance]] = None
-    total_balance_usd: Optional[str] = None
-
-
-@dataclass(kw_only=True)
-class ListWalletsResponse:
-    items: Optional[List[Wallet]] = None
-
-
-class WalletsService(BaseService):
-    async def generate(self, req: GenerateWalletRequest) -> Wallet:
-        """Provision a new wallet on the requested chain family."""
-        return from_dict(Wallet, await self._post("/v1/wallets/generate", req))
-
-    async def list(self) -> ListWalletsResponse:
-        """Every wallet on the project."""
-        return from_dict(ListWalletsResponse, await self._post("/v1/wallets/list", {}))
-
-    async def info(self, address: str) -> Wallet:
-        """Details and current balances of one wallet."""
-        return from_dict(Wallet, await self._post("/v1/wallets/info", {"address": address}))
-
-    async def freeze(self, address: str) -> Wallet:
-        """Toggle the frozen flag - the response's ``frozen`` field is the new state."""
-        return from_dict(Wallet, await self._post("/v1/wallets/freeze", {"address": address}))
-
-    def decrypt_private_key(self, encrypted: str) -> str:
-        """Decrypt a generated wallet's ``private_key_encrypted`` field locally.
-
-        Uses the RSA private key configured on the client (``rsa_private_key``
-        option) and returns the chain-native hex private key. Raises
-        :class:`RsaKeyNotConfiguredError` if no key was configured. Synchronous -
-        never touches the network.
-        """
-        return self._client.rsa_decrypt(encrypted)