ipor-fusion 4.0.0.dev282__tar.gz → 4.0.0.dev291__tar.gz

{ipor_fusion-4.0.0.dev282 → ipor_fusion-4.0.0.dev291}/MIGRATION_4.md

@@ -390,6 +390,65 @@ module was renamed to match. Import the decoders with `from ipor_fusion import
 external_state_events` and `from ipor_fusion.hypercore import hypercore_events`;
 the modules are internal.
 
+#### HyperCore follows the released contracts
+
+4.0 reads and encodes the HyperCore contracts `ipor-abi` publishes on HyperEVM
+(contracts release 2026-10-21), not the earlier market-55 test deployment.
+
+- **Pending reader.** `HYPERCORE_PENDING_READERS[999]` is
+  `0x1EFFb12434f5fb59a636C54D8CBaC93b13DF1A9E`. `HyperCorePendingReader.is_pending()`
+  is gone (the released reader has no `isPending()`): call `is_action_pending()`,
+  and `is_order_in_flight()` for the order rate limit. `pending_state()` decodes
+  the released 23-word tuple only; the earlier reader `0x83F54bc9…` returns 18
+  words and is no longer supported. A vault of the earlier build (its pre-hooks
+  predate the transfer effect) reads through the released reader only while
+  nothing is in flight: the struct only grew, so a settled state decodes the same,
+  but during an action the released reader derives `pending`/`settled` from effect
+  fields the earlier hooks never write, so it can disagree with what that vault
+  enforces.
+- **`HyperCorePendingState`.** Removed: `settlement_mode`, `reported_result`,
+  `result_l1_block`, `refreshing` (the contracts no longer write them). Added:
+  `effect_kind` (`HyperCoreEffectKind`), `effect_token_index`, `effect_evm_asset`,
+  `expected_balance`, `timeout_at`, `last_order_l1_block`. A transfer with an effect
+  settles when the expected balance is observed or `timeout_at` passes.
+- **`vault info` / `vault_info`.** `hypercore.pending` drops `refreshing`,
+  `settlement_mode`, `reported_result` and gains the six fields above.
+- **Settlement mode removed.** `SettlementMode` and `HyperCoreReportedResult` are
+  gone, and so are the settlement fuse and reporter events
+  (`HyperCoreReportedActionSettled`, `ReportSubmitted`, `ObserverSetProposed`,
+  `ObserverSetChanged`, `RecoveryProposed`, `RecoveryExecuted` and their `*Args`
+  / `*Event` classes): orders settle by time, transfers by time and effect.
+  `HyperCoreConfigKey.WINDOW_ORDER_SECONDS` and `SETTLEMENT_MODE` keep their
+  numbers but are reserved and ignored (`RESERVED_HYPERCORE_CONFIG_KEYS`); a
+  decoded substrate of either carries `extra["reserved"] == "true"`.
+- **New substrates.** `HyperCoreSubstrates.perp_position_cap(asset,
+  max_position_notional_usd6)` (type 7) and `HyperCoreConfigKey`
+  `TRANSFER_TIMEOUT_SECONDS`, `ACTIVATION_FEE_ALLOWANCE_USDC_WEI`, `MAX_NAV_JUMP_BPS`,
+  `MAX_MARK_ORACLE_DEVIATION_BPS`, `NAV_JUMP_FLOOR_USD6` (7..11); `decode_substrate`
+  decodes them instead of flagging them as errors.
+
+#### ExternalState: two executor builds, one custodian marker
+
+The 2026-10-21 contracts release (on Arbitrum in `ipor-abi`) changes what the
+balance fuse and the pre-hook compare to detect an unprocessed custodian
+update: the executor's confirm count instead of the last confirmed update's
+timestamp. HyperEVM, Base and Ethereum still publish the earlier build, so both
+exist; the comparison is equality either way.
+
+- `ExternalStateVaultState.last_checked_custodian_timestamp` is
+  `last_checked_custodian_marker` and `BalanceFuseSnapshot.last_custodian_update_timestamp`
+  is `custodian_marker`, both a `CustodianMarker` (an opaque value the
+  contracts only compare for equality): a timestamp on an earlier executor, the
+  confirm count on a released one. `ExternalStateExecutor.confirm_count()`
+  exists only on the released executor (it reverts on an earlier one), and
+  `last_custodian_update_timestamp()` reads the timestamp on both.
+- New on the released build: `ExternalStateExecutor.unforwarded_credit(asset)`,
+  `proposal_base_balance(account)`, `ExternalStateOperationFuse.sweep_surplus(asset)`,
+  and the events `ExternalStateBalanceFuseLastCustodianConfirmCountUpdated` and
+  `ExternalStateOperationFuseSweepSurplus` (the released balance fuse no longer
+  emits `...LastCustodianTimestampUpdated`; it stays registered for the earlier
+  build).
+
 **Removed.**
 
 - `IporFusionMarkets.RWA`: market 50 is `IporFusionMarkets.EXTERNAL_STATE`.

{ipor_fusion-4.0.0.dev282 → ipor_fusion-4.0.0.dev291}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: ipor-fusion
-Version: 4.0.0.dev282
+Version: 4.0.0.dev291
 Summary: The IPOR Fusion SDK for Python
 Project-URL: homepage, https://ipor.io
 Project-URL: repository, https://github.com/IPOR-Labs/ipor-fusion.py
@@ -463,7 +463,7 @@ Fuse.method()  -->  FuseAction  -->  PlasmaVault.execute([actions])  -->  Call
 | `PriceOracleMiddleware` | Asset price feeds |
 | `PriceOracleMiddlewareManager` | Per-vault price-source overrides |
 | `ExternalStateExecutor` | NAV propose/confirm for off-vault capital (market 50); the executor's thresholds (`staleness_max`, `big_change_bps`, `dust_threshold`, `min_update_interval`), the live aggregate (`get_balance_fuse_snapshot`) and the pre-hook's staleness clock (`get_oldest_update_timestamp`) |
-| `read_external_state`, `ExternalStateVaultState` | The market's vault-scoped state from the vault's ERC-7201 storage at one block: executor, the balance fuse's cached total, the custodian timestamp it last checked and the pause flag the pre-hook enforces (no getter exposes them) |
+| `read_external_state`, `ExternalStateVaultState` | The market's vault-scoped state from the vault's ERC-7201 storage at one block: executor, the balance fuse's cached total, the custodian marker it last checked (a timestamp on the earlier executor build, the confirm count on the 2026-10-21 one) and the pause flag the pre-hook enforces (no getter exposes them) |
 | `decode_external_state_event`, `EXTERNAL_STATE_TOPICS` | The ExternalState events the vault emits (big change, cache updates, unpause, rescue, executor creation and deployment, operation enter/exit), decoded by topic with their raw log identity; a malformed listed log raises |
 | `erc20_balance_slot`, `VaultSimulator.with_erc20_balance` | Fund any address with any ERC-20 in a simulation by a storage override (slot found by probing), no holder to impersonate |
 | `ERC20` | Token reads and approvals |

{ipor_fusion-4.0.0.dev282 → ipor_fusion-4.0.0.dev291}/README.md

@@ -414,7 +414,7 @@ Fuse.method()  -->  FuseAction  -->  PlasmaVault.execute([actions])  -->  Call
 | `PriceOracleMiddleware` | Asset price feeds |
 | `PriceOracleMiddlewareManager` | Per-vault price-source overrides |
 | `ExternalStateExecutor` | NAV propose/confirm for off-vault capital (market 50); the executor's thresholds (`staleness_max`, `big_change_bps`, `dust_threshold`, `min_update_interval`), the live aggregate (`get_balance_fuse_snapshot`) and the pre-hook's staleness clock (`get_oldest_update_timestamp`) |
-| `read_external_state`, `ExternalStateVaultState` | The market's vault-scoped state from the vault's ERC-7201 storage at one block: executor, the balance fuse's cached total, the custodian timestamp it last checked and the pause flag the pre-hook enforces (no getter exposes them) |
+| `read_external_state`, `ExternalStateVaultState` | The market's vault-scoped state from the vault's ERC-7201 storage at one block: executor, the balance fuse's cached total, the custodian marker it last checked (a timestamp on the earlier executor build, the confirm count on the 2026-10-21 one) and the pause flag the pre-hook enforces (no getter exposes them) |
 | `decode_external_state_event`, `EXTERNAL_STATE_TOPICS` | The ExternalState events the vault emits (big change, cache updates, unpause, rescue, executor creation and deployment, operation enter/exit), decoded by topic with their raw log identity; a malformed listed log raises |
 | `erc20_balance_slot`, `VaultSimulator.with_erc20_balance` | Fund any address with any ERC-20 in a simulation by a storage override (slot found by probing), no holder to impersonate |
 | `ERC20` | Token reads and approvals |

{ipor_fusion-4.0.0.dev282 → ipor_fusion-4.0.0.dev291}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "ipor-fusion"
-version = "4.0.0.dev282"
+version = "4.0.0.dev291"
 description = "The IPOR Fusion SDK for Python"
 authors = [
     { name = "Adam Mydlarz", email = "amydlarz@gmail.com" },

{ipor_fusion-4.0.0.dev282 → ipor_fusion-4.0.0.dev291}/src/ipor_fusion/__init__.py

@@ -196,10 +196,12 @@ from ipor_fusion.fuses.external_state_event_decoding import (
     EXTERNAL_STATE_TOPICS,
     ExternalStateAssetRescuedArgs,
     ExternalStateAssetRescuedEvent,
+    ExternalStateBalanceFuseLastCustodianConfirmCountUpdatedEvent,
     ExternalStateBalanceFuseLastCustodianTimestampUpdatedEvent,
     ExternalStateBalanceFuseLastTotalBalanceUpdatedEvent,
     ExternalStateBigChangeDetectedArgs,
     ExternalStateBigChangeDetectedEvent,
+    ExternalStateCustodianConfirmCountUpdatedArgs,
     ExternalStateCustodianTimestampUpdatedArgs,
     ExternalStateEvent,
     ExternalStateEventArgs,
@@ -210,6 +212,8 @@ from ipor_fusion.fuses.external_state_event_decoding import (
     ExternalStateOperationArgs,
     ExternalStateOperationFuseEnterEvent,
     ExternalStateOperationFuseExitEvent,
+    ExternalStateOperationFuseSweepSurplusArgs,
+    ExternalStateOperationFuseSweepSurplusEvent,
     ExternalStateTotalBalanceUpdatedArgs,
     ExternalStateUnpausedArgs,
     ExternalStateUnpausedEvent,
@@ -333,6 +337,7 @@ from ipor_fusion.types import (
     AssetSource,
     ChainId,
     Check,
+    CustodianMarker,
     Decimals,
     Fee,
     FuseAddress,
@@ -437,6 +442,8 @@ __all__ = [
     "EXTERNAL_STATE_EVENT_CLASSES",
     "ExternalStateBigChangeDetectedEvent",
     "ExternalStateBalanceFuseLastCustodianTimestampUpdatedEvent",
+    "ExternalStateBalanceFuseLastCustodianConfirmCountUpdatedEvent",
+    "ExternalStateOperationFuseSweepSurplusEvent",
     "ExternalStateBalanceFuseLastTotalBalanceUpdatedEvent",
     "ExternalStateUnpausedEvent",
     "ExternalStateAssetRescuedEvent",
@@ -447,6 +454,8 @@ __all__ = [
     "ExternalStateAssetRescuedArgs",
     "ExternalStateBigChangeDetectedArgs",
     "ExternalStateCustodianTimestampUpdatedArgs",
+    "ExternalStateCustodianConfirmCountUpdatedArgs",
+    "ExternalStateOperationFuseSweepSurplusArgs",
     "ExternalStateEventArgs",
     "ExternalStateExecutorArgs",
     "ExternalStateOperationArgs",
@@ -664,6 +673,7 @@ __all__ = [
     "format_amount",
     "format_shares",
     "Price",
+    "CustodianMarker",
     "Period",
     "MAX_UINT256",
     "ZERO_ADDRESS",

{ipor_fusion-4.0.0.dev282 → ipor_fusion-4.0.0.dev291}/src/ipor_fusion/core/external_state_executor.py

@@ -35,6 +35,7 @@ from ipor_fusion.types import (
     ZERO_ADDRESS,
     Amount,
     ChainId,
+    CustodianMarker,
     Period,
     PlasmaVaultAddress,
     ProposalHash,
@@ -127,10 +128,15 @@ class ExternalStateVaultState:
     `last_total_balance` is the balance fuse's cache of the executor's total in
     raw underlying units, as of the fuse's last refresh -- not the live total,
     which `ExternalStateExecutor.get_balance_fuse_snapshot` reads;
-    `last_checked_custodian_timestamp` is the executor custodian timestamp the
-    balance fuse last processed -- not necessarily the latest custodian update
+    `last_checked_custodian_marker` is the executor's custodian marker the
+    balance fuse last processed -- the last confirmed custodian update's block
+    timestamp on executors of the contracts before the 2026-10-21 release, the
+    executor's confirm count (`ExternalStateExecutor.confirm_count`) on the
+    executors of that release; either way not necessarily the latest update
     and not the pre-hook's staleness clock, which is
-    `ExternalStateExecutor.get_oldest_update_timestamp`; `paused` is the flag
+    `ExternalStateExecutor.get_oldest_update_timestamp`. The fuse and the
+    pre-hook only compare it for equality with
+    `BalanceFuseSnapshot.custodian_marker`; `paused` is the flag
     the balance fuse sets on a big change and `ExternalStateUnpauseFuse` clears
     with an atomist signature. `ExternalStatePausePreHook` blocks the vault's
     gated user operations while the flag is set, and also, flag or not, while
@@ -141,7 +147,7 @@ class ExternalStateVaultState:
 
     executor: ChecksumAddress | None
     last_total_balance: Amount
-    last_checked_custodian_timestamp: Timestamp
+    last_checked_custodian_marker: CustodianMarker
     paused: bool
     block: int
 
@@ -150,11 +156,14 @@ class ExternalStateVaultState:
 class BalanceFuseSnapshot:
     """`ExternalStateExecutor.getBalanceFuseSnapshot()`: the live sum of the
     tracked balances in raw underlying units, the cached big-change threshold
-    in basis points and the timestamp of the last confirmed custodian update."""
+    in basis points and the custodian marker: the last confirmed custodian
+    update's timestamp on executors before the 2026-10-21 contracts release,
+    the confirm count on the executors of that release (two confirms in one
+    block then still differ)."""
 
     total_balance: Amount
     big_change_bps: int
-    last_custodian_update_timestamp: Timestamp
+    custodian_marker: CustodianMarker
 
 
 def _storage_word(raw: bytes) -> int:
@@ -226,7 +235,7 @@ def read_external_state(
     return ExternalStateVaultState(
         executor=Web3.to_checksum_address(f"0x{words[0]:040x}") if words[0] else None,
         last_total_balance=Amount(words[1]),
-        last_checked_custodian_timestamp=Timestamp(words[2]),
+        last_checked_custodian_marker=CustodianMarker(words[2]),
         paused=words[3] == 1,
         block=block,
     )
@@ -344,18 +353,63 @@ class ExternalStateExecutor(ContractWrapper):
 
     def get_balance_fuse_snapshot(self) -> Call[BalanceFuseSnapshot]:
         """The live aggregate the balance fuse reads: the sum of the tracked
-        balances, the big-change threshold and the last confirmed custodian
-        update timestamp, in one call. Pin the context's block to the one
+        balances, the big-change threshold and the custodian marker, in one
+        call. Pin the context's block to the one
         `read_external_state` returned to compare live against cached."""
         return self._view(
             "getBalanceFuseSnapshot()",
             output_types=["uint256", "uint256", "uint256"],
         ).map(
             lambda values: BalanceFuseSnapshot(
-                Amount(values[0]), int(values[1]), Timestamp(values[2])
+                Amount(values[0]), int(values[1]), CustodianMarker(values[2])
             )
         )
 
+    def confirm_count(self) -> Call[CustodianMarker]:
+        """Executors of the 2026-10-21 contracts release only: the count of
+        confirmed custodian updates across every balance account, the marker
+        `get_balance_fuse_snapshot` reports. An earlier executor has no such
+        function and the call reverts."""
+        return self._view(
+            "confirmCount()", output_types=["uint256"], decoder=CustodianMarker
+        )
+
+    def last_custodian_update_timestamp(self) -> Call[Timestamp]:
+        """Block timestamp of the last confirmed custodian update on any
+        balance account."""
+        return self._view(
+            "lastCustodianUpdateTimestamp()",
+            output_types=["uint256"],
+            decoder=Timestamp,
+        )
+
+    def unforwarded_credit(self, asset: ChecksumAddress) -> Call[Amount]:
+        """Executors of the 2026-10-21 contracts release only: tokens of
+        `asset` credited through the vault path that have not left the
+        executor. The executor's `asset` balance above it is surplus (a
+        donation or a payout sent straight to the executor):
+        `ExternalStateOperationFuse.sweep_surplus` moves it to the vault, and
+        custodians should not propose while it exists unless they know whether
+        their report counts it."""
+        return self._view(
+            "unforwardedCredit(address)",
+            asset,
+            output_types=["uint256"],
+            decoder=Amount,
+        )
+
+    def proposal_base_balance(self, balance_account: ChecksumAddress) -> Call[Amount]:
+        """Executors of the 2026-10-21 contracts release only: the account
+        balance when the pending proposal was made. `confirmBalance` reverts
+        `ExternalStateExecutorBalanceChangedSinceProposal` once the balance
+        differs from it (an alpha flow ran in between): propose again."""
+        return self._view(
+            "proposalBaseBalance(address)",
+            balance_account,
+            output_types=["uint256"],
+            decoder=Amount,
+        )
+
     def get_oldest_update_timestamp(self) -> Call[Timestamp]:
         """The pre-hook's staleness clock: the oldest non-zero `lastUpdated`
         across the balance accounts, 0 when no account was ever updated. The

{ipor_fusion-4.0.0.dev282 → ipor_fusion-4.0.0.dev291}/src/ipor_fusion/fuses/__init__.py

@@ -30,10 +30,12 @@ from ipor_fusion.fuses.external_state_event_decoding import (
     EXTERNAL_STATE_TOPICS,
     ExternalStateAssetRescuedArgs,
     ExternalStateAssetRescuedEvent,
+    ExternalStateBalanceFuseLastCustodianConfirmCountUpdatedEvent,
     ExternalStateBalanceFuseLastCustodianTimestampUpdatedEvent,
     ExternalStateBalanceFuseLastTotalBalanceUpdatedEvent,
     ExternalStateBigChangeDetectedArgs,
     ExternalStateBigChangeDetectedEvent,
+    ExternalStateCustodianConfirmCountUpdatedArgs,
     ExternalStateCustodianTimestampUpdatedArgs,
     ExternalStateEvent,
     ExternalStateEventArgs,
@@ -44,6 +46,8 @@ from ipor_fusion.fuses.external_state_event_decoding import (
     ExternalStateOperationArgs,
     ExternalStateOperationFuseEnterEvent,
     ExternalStateOperationFuseExitEvent,
+    ExternalStateOperationFuseSweepSurplusArgs,
+    ExternalStateOperationFuseSweepSurplusEvent,
     ExternalStateTotalBalanceUpdatedArgs,
     ExternalStateUnpausedArgs,
     ExternalStateUnpausedEvent,
@@ -146,10 +150,14 @@ __all__ = [
     "ExternalStateAssetRescuedArgs",
     "ExternalStateAssetRescuedEvent",
     "ExternalStateBalanceFuseLastCustodianTimestampUpdatedEvent",
+    "ExternalStateBalanceFuseLastCustodianConfirmCountUpdatedEvent",
+    "ExternalStateOperationFuseSweepSurplusEvent",
     "ExternalStateBalanceFuseLastTotalBalanceUpdatedEvent",
     "ExternalStateBigChangeDetectedArgs",
     "ExternalStateBigChangeDetectedEvent",
     "ExternalStateCustodianTimestampUpdatedArgs",
+    "ExternalStateCustodianConfirmCountUpdatedArgs",
+    "ExternalStateOperationFuseSweepSurplusArgs",
     "ExternalStateEvent",
     "ExternalStateEventArgs",
     "ExternalStateEventSpec",

{ipor_fusion-4.0.0.dev282 → ipor_fusion-4.0.0.dev291}/src/ipor_fusion/fuses/external_state.py

@@ -92,6 +92,17 @@ class ExternalStateOperationFuse(Fuse):
         """
         return self._action_raw("createExecutor()", [])
 
+    def sweep_surplus(self, asset: ChecksumAddress) -> FuseAction:
+        """Operation fuses of the 2026-10-21 contracts release only: move to
+        the vault the executor's ``asset`` balance above its unforwarded
+        credit (tokens that did not arrive through the vault path, such as a
+        donation), emitting ``ExternalStateOperationFuseSweepSurplus``. The
+        swept tokens enter NAV at once only when ``asset`` is the underlying.
+        Use it for tokens the confirmed custodian report no longer counts; a
+        payout it still counts is booked with ``exit`` instead."""
+        self._validate_address(asset, "asset")
+        return self._action_raw("sweepSurplus(address)", [asset])
+
     def _build(
         self,
         method: str,

{ipor_fusion-4.0.0.dev282 → ipor_fusion-4.0.0.dev291}/src/ipor_fusion/fuses/external_state_event_decoding.py

@@ -65,6 +65,10 @@ EXTERNAL_STATE_EVENT_SPECS: tuple[ExternalStateEventSpec, ...] = (
         "ExternalStateBalanceFuseLastCustodianTimestampUpdated",
         (("uint256", "oldTimestamp"), ("uint256", "newTimestamp")),
     ),
+    ExternalStateEventSpec(
+        "ExternalStateBalanceFuseLastCustodianConfirmCountUpdated",
+        (("uint256", "oldConfirmCount"), ("uint256", "newConfirmCount")),
+    ),
     ExternalStateEventSpec(
         "ExternalStateBalanceFuseLastTotalBalanceUpdated",
         (("uint256", "oldTotalBalance"), ("uint256", "newTotalBalance")),
@@ -106,6 +110,10 @@ EXTERNAL_STATE_EVENT_SPECS: tuple[ExternalStateEventSpec, ...] = (
             ("uint256", "actionsCount"),
         ),
     ),
+    ExternalStateEventSpec(
+        "ExternalStateOperationFuseSweepSurplus",
+        (("address", "version"), ("address", "asset"), ("uint256", "amount")),
+    ),
     # ExternalStateExecutorStorageLib
     ExternalStateEventSpec(
         "ExternalStateExecutorDeployed",
@@ -127,6 +135,24 @@ class ExternalStateCustodianTimestampUpdatedArgs(TypedDict):
     newTimestamp: Timestamp
 
 
+class ExternalStateCustodianConfirmCountUpdatedArgs(TypedDict):
+    """``ExternalStateBalanceFuseLastCustodianConfirmCountUpdated`` (balance
+    fuses of the 2026-10-21 contracts release; earlier ones emit the
+    timestamp event)."""
+
+    oldConfirmCount: int
+    newConfirmCount: int
+
+
+class ExternalStateOperationFuseSweepSurplusArgs(TypedDict):
+    """``ExternalStateOperationFuseSweepSurplus``: ``amount`` of ``asset``
+    swept from the executor to the vault."""
+
+    version: FuseAddress
+    asset: ChecksumAddress
+    amount: Amount
+
+
 class ExternalStateTotalBalanceUpdatedArgs(TypedDict):
     """``ExternalStateBalanceFuseLastTotalBalanceUpdated``."""
 
@@ -213,6 +239,24 @@ class ExternalStateBalanceFuseLastCustodianTimestampUpdatedEvent(
     args: ExternalStateCustodianTimestampUpdatedArgs
 
 
+@dataclass(frozen=True, slots=True, kw_only=True)
+class ExternalStateBalanceFuseLastCustodianConfirmCountUpdatedEvent(
+    _ExternalStateEventBase
+):
+    name: Literal["ExternalStateBalanceFuseLastCustodianConfirmCountUpdated"] = (
+        "ExternalStateBalanceFuseLastCustodianConfirmCountUpdated"
+    )
+    args: ExternalStateCustodianConfirmCountUpdatedArgs
+
+
+@dataclass(frozen=True, slots=True, kw_only=True)
+class ExternalStateOperationFuseSweepSurplusEvent(_ExternalStateEventBase):
+    name: Literal["ExternalStateOperationFuseSweepSurplus"] = (
+        "ExternalStateOperationFuseSweepSurplus"
+    )
+    args: ExternalStateOperationFuseSweepSurplusArgs
+
+
 @dataclass(frozen=True, slots=True, kw_only=True)
 class ExternalStateBalanceFuseLastTotalBalanceUpdatedEvent(_ExternalStateEventBase):
     name: Literal["ExternalStateBalanceFuseLastTotalBalanceUpdated"] = (
@@ -262,6 +306,8 @@ class ExternalStateExecutorDeployedEvent(_ExternalStateEventBase):
 ExternalStateEvent: TypeAlias = (
     ExternalStateBigChangeDetectedEvent
     | ExternalStateBalanceFuseLastCustodianTimestampUpdatedEvent
+    | ExternalStateBalanceFuseLastCustodianConfirmCountUpdatedEvent
+    | ExternalStateOperationFuseSweepSurplusEvent
     | ExternalStateBalanceFuseLastTotalBalanceUpdatedEvent
     | ExternalStateUnpausedEvent
     | ExternalStateAssetRescuedEvent
@@ -275,6 +321,8 @@ ExternalStateEvent: TypeAlias = (
 EXTERNAL_STATE_EVENT_CLASSES: dict[str, type[ExternalStateEvent]] = {
     "ExternalStateBigChangeDetected": ExternalStateBigChangeDetectedEvent,
     "ExternalStateBalanceFuseLastCustodianTimestampUpdated": ExternalStateBalanceFuseLastCustodianTimestampUpdatedEvent,
+    "ExternalStateBalanceFuseLastCustodianConfirmCountUpdated": ExternalStateBalanceFuseLastCustodianConfirmCountUpdatedEvent,
+    "ExternalStateOperationFuseSweepSurplus": ExternalStateOperationFuseSweepSurplusEvent,
     "ExternalStateBalanceFuseLastTotalBalanceUpdated": ExternalStateBalanceFuseLastTotalBalanceUpdatedEvent,
     "ExternalStateUnpaused": ExternalStateUnpausedEvent,
     "ExternalStateAssetRescued": ExternalStateAssetRescuedEvent,

{ipor_fusion-4.0.0.dev282 → ipor_fusion-4.0.0.dev291}/src/ipor_fusion/fuses/hypercore.py

@@ -95,15 +95,12 @@ class TimeInForce(IntEnum):
     IOC = 3
 
 
-class SettlementMode(IntEnum):
-    """``Config{SettlementMode}``: how a pending action is cleared."""
-
-    TIMING = 1
-    REPORTED = 2
-
-
 class HyperCoreConfigKey(IntEnum):
-    """``HyperCoreSubstrateLib.ConfigKey`` (the Undefined member is invalid)."""
+    """``HyperCoreSubstrateLib.ConfigKey`` (the Undefined member is invalid).
+
+    The numbering is stable: ``WINDOW_ORDER_SECONDS`` (2) and
+    ``SETTLEMENT_MODE`` (5) are reserved and ignored by the fuses; orders
+    settle by time and the observed effect only."""
 
     WINDOW_TRANSFER_SECONDS = 1
     WINDOW_ORDER_SECONDS = 2
@@ -111,6 +108,17 @@ class HyperCoreConfigKey(IntEnum):
     PERP_DEX_IDS = 4
     SETTLEMENT_MODE = 5
     SPOT_SEND_BRIDGE_ENABLED = 6
+    TRANSFER_TIMEOUT_SECONDS = 7
+    ACTIVATION_FEE_ALLOWANCE_USDC_WEI = 8
+    MAX_NAV_JUMP_BPS = 9
+    MAX_MARK_ORACLE_DEVIATION_BPS = 10
+    NAV_JUMP_FLOOR_USD6 = 11
+
+
+#: Config keys the fuses ignore (kept for their stable numbering).
+RESERVED_HYPERCORE_CONFIG_KEYS = frozenset(
+    {HyperCoreConfigKey.WINDOW_ORDER_SECONDS, HyperCoreConfigKey.SETTLEMENT_MODE}
+)
 
 
 def hip3_action_asset(dex: int, index_in_dex: int) -> HyperCoreAsset:
@@ -347,11 +355,13 @@ class HyperCoreSubstrates:
     (at most one when any of them is HIP-3), Destinations for ``sendAsset`` /
     ``spotSend`` (only the vault itself and, for the Core -> EVM route, the
     token's :func:`system_address` are accepted by the fuses), a SendCap per
-    token (mandatory: a token without one cannot be sent), Builders, and the
-    Config keys. ``WINDOW_ORDER_SECONDS`` and ``SETTLEMENT_MODE`` are required
-    before any order or cancel, ``MAX_USD_CLASS_TRANSFER_USD6`` before a margin
-    transfer; ``WINDOW_TRANSFER_SECONDS`` defaults to 2 s and
-    ``SPOT_SEND_BRIDGE_ENABLED`` to disabled. :func:`ipor_fusion.decode_substrate`
+    token (mandatory: a token without one cannot be sent), Builders, a
+    PerpPositionCap per market whose open position is capped, and the Config
+    keys. ``MAX_USD_CLASS_TRANSFER_USD6`` is required before a margin transfer;
+    ``WINDOW_TRANSFER_SECONDS`` defaults to 2 s, ``SPOT_SEND_BRIDGE_ENABLED`` to
+    disabled, ``TRANSFER_TIMEOUT_SECONDS`` to 600 s (at least 60),
+    ``MAX_NAV_JUMP_BPS`` to 5000 and ``MAX_MARK_ORACLE_DEVIATION_BPS`` to 500;
+    the reserved keys are ignored. :func:`ipor_fusion.decode_substrate`
     inverts these.
     """
 
@@ -394,7 +404,9 @@ class HyperCoreSubstrates:
     @staticmethod
     def config(key: HyperCoreConfigKey, value: int) -> bytes:
         """One Config key; ``PERP_DEX_IDS`` is a bitmap (bit i enables perp
-        dex i, bit 0 stays clear), ``SETTLEMENT_MODE`` a :class:`SettlementMode`."""
+        dex i, bit 0 stays clear). The reserved keys
+        (:data:`RESERVED_HYPERCORE_CONFIG_KEYS`) encode but the fuses ignore
+        them."""
         key = HyperCoreConfigKey(key)
         _validate_uint(value, 240, "value")
         return _word(5, (int(key) << 240) | value)
@@ -405,3 +417,14 @@ class HyperCoreSubstrates:
         _validate_uint(token_index, 64, "token_index")
         _validate_uint(max_wei, 128, "max_wei")
         return _word(6, (token_index << 128) | max_wei)
+
+    @staticmethod
+    def perp_position_cap(
+        asset: HyperCoreAsset, max_position_notional_usd6: int
+    ) -> bytes:
+        """Cap on the open position notional of action asset ``asset`` in USD
+        (6 decimals); the order fuse reverts
+        ``HyperCoreOrderFusePositionCapExceeded`` above it."""
+        _validate_uint(asset, 32, "asset")
+        _validate_uint(max_position_notional_usd6, 88, "max_position_notional_usd6")
+        return _word(7, (asset << 216) | (max_position_notional_usd6 << 128))