hotstuff-python-sdk 0.0.1b3__tar.gz → 0.0.1b4__tar.gz

{hotstuff_python_sdk-0.0.1b3 → hotstuff_python_sdk-0.0.1b4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: hotstuff-python-sdk
-Version: 0.0.1b3
+Version: 0.0.1b4
 Summary: Python SDK for interacting with Hotstuff L1
 License: MIT
 Keywords: hotstuff,trading,blockchain,defi,exchange

{hotstuff_python_sdk-0.0.1b3 → hotstuff_python_sdk-0.0.1b4}/hotstuff/__init__.py

@@ -3,7 +3,7 @@
 A Python SDK for interacting with Hotstuff L1.
 """
 
-__version__ = "0.0.1-beta.3"
+__version__ = "0.0.1-beta.4"
 
 # Transports
 from hotstuff.transports import HttpTransport, WebSocketTransport

{hotstuff_python_sdk-0.0.1b3 → hotstuff_python_sdk-0.0.1b4}/hotstuff/apis/exchange.py

@@ -2,7 +2,7 @@
 from typing import Optional, Any, Dict, Callable, Awaitable
 from eth_account import Account
 
-from hotstuff.utils import sign_action, NonceManager
+from hotstuff.utils import sign_action, NonceManager, canonicalize_for_signing
 from hotstuff.methods.exchange import (
     trading as TM,
     account as AM,
@@ -480,28 +480,32 @@ class ExchangeClient:
         if "nonce" not in params or params["nonce"] is None:
             params["nonce"] = await self.nonce()
         
-        # Sign the action
+        # Canonicalize key order so msgpack bytes match backend (fixes "invalid order signer"
+        # for cancelByOid / cancelByCloid when backend expects deterministic key order)
+        params_canonical = canonicalize_for_signing(params)
+        
+        # Sign the action (sign_action also canonicalizes; we pass canonical for consistency)
         signature = sign_action(
             wallet=self.wallet,
-            action=params,
+            action=params_canonical,
             tx_type=EXCHANGE_OP_CODES[action],
             is_testnet=self.transport.is_testnet,
         )
         
         if execute:
-            # Send to server
+            # Send to server with same canonical payload we signed
             response = await self.transport.request(
                 "exchange",
                 {
                     "action": {
-                        "data": params,
+                        "data": params_canonical,
                         "type": str(EXCHANGE_OP_CODES[action]),
                     },
                     "signature": signature,
-                    "nonce": params["nonce"],
+                    "nonce": params_canonical["nonce"],
                 },
                 signal,
             )
             return response
         
-        return {"params": params, "signature": signature}
+        return {"params": params_canonical, "signature": signature}

{hotstuff_python_sdk-0.0.1b3 → hotstuff_python_sdk-0.0.1b4}/hotstuff/utils/__init__.py

@@ -1,7 +1,7 @@
 """Utilities package."""
 from hotstuff.utils.endpoints import ENDPOINTS_URLS
 from hotstuff.utils.nonce import NonceManager
-from hotstuff.utils.signing import sign_action
+from hotstuff.utils.signing import sign_action, canonicalize_for_signing
 from hotstuff.utils.address import validate_ethereum_address
 from hotstuff.methods.exchange.op_codes import EXCHANGE_OP_CODES
 
@@ -9,6 +9,7 @@ __all__ = [
     "ENDPOINTS_URLS",
     "NonceManager",
     "sign_action",
+    "canonicalize_for_signing",
     "validate_ethereum_address",
     "EXCHANGE_OP_CODES",
 ]

{hotstuff_python_sdk-0.0.1b3 → hotstuff_python_sdk-0.0.1b4}/hotstuff/utils/signing.py

@@ -13,6 +13,20 @@ except ImportError:
     _USE_NEW_API = False
 
 
+def canonicalize_for_signing(obj):
+    """
+    Return a copy of obj with all dict keys sorted alphabetically, recursively.
+    Use this before signing and in the request body so msgpack bytes are
+    deterministic and match backend verification (fixes "invalid order signer"
+    for cancelByOid / cancelByCloid when key order differs from backend).
+    """
+    if isinstance(obj, dict):
+        return {k: canonicalize_for_signing(v) for k, v in sorted(obj.items())}
+    if isinstance(obj, list):
+        return [canonicalize_for_signing(item) for item in obj]
+    return obj
+
+
 def sign_action(
     wallet: Account,
     action: dict,
@@ -34,8 +48,10 @@ def sign_action(
     Returns:
         str: The signature (hex string)
     """
+    # Canonicalize key order so msgpack bytes match backend (deterministic signing)
+    canonical_action = canonicalize_for_signing(action)
     # Encode action to msgpack
-    action_bytes = msgpack.packb(action)
+    action_bytes = msgpack.packb(canonical_action)
     
     # Hash the payload
     payload_hash = keccak(action_bytes)

{hotstuff_python_sdk-0.0.1b3 → hotstuff_python_sdk-0.0.1b4}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "hotstuff-python-sdk"
-version = "0.0.1-beta.3"
+version = "0.0.1-beta.4"
 description = "Python SDK for interacting with Hotstuff L1"
 authors = ["hotstuff"]
 license = "MIT"
@@ -20,9 +20,7 @@ classifiers = [
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
 ]
-packages = [
-    { include = "hotstuff" }
-]
+packages = [{ include = "hotstuff" }]
 
 [tool.poetry.dependencies]
 python = "^3.8"
@@ -61,4 +59,3 @@ testpaths = ["tests"]
 markers = [
     "integration: marks tests as integration tests (deselect with '-m \"not integration\"')",
 ]
-