ipor-fusion 4.0.0.dev325__tar.gz → 4.0.0.dev330__tar.gz

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/AGENTS.md

@@ -159,7 +159,8 @@ checkout's default profile), the pending reader included.
 - No AI attribution trailers or "generated with" lines in commits or PRs.
 - Branch and open a PR; `main` only moves through PRs and the release workflow.
 - Dependencies: `>=x,<next-major` ranges in `pyproject.toml`, resolved by
-  `uv.lock`; `pyright` is pinned exactly.
+  `uv.lock`; `pyright` is pinned exactly. `certifi` is the deliberate exception: it
+  is calendar-versioned, and its floor only forces a CA bundle with recent revocations.
 - English only, US spelling, in code, comments, docstrings and user-facing
   strings (`field_docs.py` ships as API documentation). Comments only for edge
   cases and non-obvious logic.
@@ -304,7 +305,8 @@ checkout's default profile), the pending reader included.
   `ccip/quote` (`quote_ccip_native_fee`: the exact native fee of a send, from a
   simulation with the payer's balance at zero);
   `ccip/events` decodes the executor/dispatcher/factory events by topic (one
-  registry, mirrored from the v3 source; the v2 pair emits a subset of it);
+  registry, mirrored from the released contracts; earlier deployments' events
+  are not decoded where their signatures differ);
   `ccip/chainlink` also wraps the 2.0 OffRamp, verifier resolver and committee verifier
   (`CcipOffRamp.execute` is the permissionless delivery) and `ccip/indexer` fetches a
   message's verifier result from Chainlink's public indexers and builds that

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/MIGRATION_4.md

@@ -346,12 +346,12 @@ could not hold. 4.0 exports them only from their subpackages.
   `CrosschainSimulator`. It also covers the crosschain ids (`AssetId`, `CommandId`,
   `MessageId`, `LayerZeroEid`, `CcipChainSelector`, ...), which still import from
   `ipor_fusion.types` too.
-- **HyperCore:** the 97 HyperCore names import from the new
+- **HyperCore:** the HyperCore names import from the new
   `ipor_fusion.hypercore`. That covers the fuses and `HyperCoreSubstrates`, the
   readers and `read_hypercore_*`, the event classes, specs and decoders, and the
   ids (`HyperCoreAsset`, `HyperCoreTokenIndex`, `MarginTableId`, `PayloadHash`,
   ...). It also covers the constants and helpers (`SPOT_DEX`, `USDC_TOKEN_INDEX`,
-  `USDC_SYSTEM_ADDRESS`, `system_address`, `precompile_index_of`, `SettlementMode`,
+  `USDC_SYSTEM_ADDRESS`, `system_address`, `precompile_index_of`,
   `TimeInForce`, `TransferDirection`, ...). `HYPEREVM_CHAIN_ID` stays a top-level
   chain constant. `ipor_fusion.fuses`
   and `ipor_fusion.readers` no longer list them; the ids still import from
@@ -540,11 +540,12 @@ on the spoke side.
   `observation()` raises `UnsupportedContractVersionError` this way), and it
   survives `Call.map()`.
 - **Removed.** `CrosschainDispatcher.pending_request_shares` (neither released
-  dispatcher has it). From the repository: `scripts/crosschain_readiness.py`, the
-  pytest `--run-readiness` option and `readiness` marker, and the examples
-  `crosschain_ccip_usdc_arbitrum_hyperevm.py` and
-  `composed_hypercore_flow_arbitrum_hyperevm.py`, which drove an earlier
-  deployment.
+  dispatcher has it). From the repository: `scripts/crosschain_readiness.py` and the
+  pytest `--run-readiness` option and `readiness` marker. The example
+  `crosschain_ccip_usdc_arbitrum_hyperevm.py` is rewritten for the released
+  contracts under the same name, and `composed_hypercore_flow_arbitrum_hyperevm.py`,
+  which drove an earlier deployment, is replaced by
+  `hypercore_vault_official_deployment_hyperevm.py`.
 - **Events and errors.** `CCIP_EVENTS` mirrors the released contracts:
   `ReturnFinalized` / `LateReturnFinalized` gain `debitedSD`, `SharesRequested`
   gains `feeShares`, and new events are registered. The crosschain error registry
@@ -851,7 +852,7 @@ oracle-mapping readers, `read_external_state`, `VaultSimulator(vault=)`,
 `CrosschainSimulator`, crosschain discovery, the hub-manager inputs
 (`ExecutorInitParams.manager`, `create_executor(manager=)`, `executors_of(manager=)`),
 the async command helpers `Command.request_shares` / `redeem_from_request`,
-`pending_request_shares` and `WithdrawManager.update_plasma_vault_address` take a
+and `WithdrawManager.update_plasma_vault_address` take a
 `PlasmaVaultAddress`; `.address`, `FusionInstance.plasma_vault` and the executor's
 `manager()` return one. Crosschain deposit and redeem destinations stay
 `ChecksumAddress`: `Command.deposit` / `redeem`, `is_allowed_vault`,
@@ -928,8 +929,7 @@ and `pending_deployment_created_at()` return a `Timestamp`. Decimals are
 `shared_decimals` of `CcipCrosschainFactory.asset_config()`, `schedule_asset` and
 `execute_asset`. Token amounts are `Amount` (`EVMTokenAmount.amount`,
 `TokenTransferV1.amount`, `TaxiMessage.amount_sd`, `OutboundMessage.token_amount`,
-`StargateChain.to_local_decimals`), and `pending_request_shares()` returns
-`Shares`. Counters, sequences, epochs, versions, bps and gas limits stay `int`.
+`StargateChain.to_local_decimals`). Counters, sequences, epochs, versions, bps and gas limits stay `int`.
 Decoded event values
 (`ccip_events` → `CcipEvent.values`) stay a generic mapping: convert a value
 before passing it on.

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: ipor-fusion
-Version: 4.0.0.dev325
+Version: 4.0.0.dev330
 Summary: The IPOR Fusion SDK for Python
 Project-URL: homepage, https://ipor.io
 Project-URL: repository, https://github.com/IPOR-Labs/ipor-fusion.py
@@ -58,9 +58,10 @@ Maintained by <a href="https://ipor.io">IPOR Labs AG</a>.
 
 > **Preview, not production:** the crosschain market (54: Stargate and CCIP executors,
 > dispatchers, lanes, fuses) and the HyperCore market (55: fuses, readers, events) are
-> under active development. Their contracts are not production releases, the mainnet
-> deployments are a proof of concept and IPOR Labs canaries, and their interfaces may
-> change between minor versions. Route no production capital through them. Everything
+> under active development. The SDK follows their official deployment (the 2026-10-21
+> contracts release, listed in ipor-abi) and nothing earlier, and their interfaces may
+> change or be removed between minor versions, with no backward compatibility. Route
+> no production capital through them. Everything
 > else in the package is production. `server_info` and `fusion changelog` list the same
 > status (`PREVIEW_FEATURES`).
 
@@ -540,7 +541,7 @@ the pilot executors and factories). Pin an exact version if you depend on them.
 | `discover_deployment`, `open_lanes` | Read a vault's crosschain market from the hub alone (executors with transport, factory, fuses, attestation keys and spokes served; remote vaults per spoke) and open every lane; `LANES` maps a transport kind to its lane class |
 | `CrosschainSimulator` | Multi-chain `eth_simulateV1` relay: replays LayerZero and CCIP messages between pinned chains by impersonating the endpoint or router on delivery, no bridge needed |
 | `ccip_token_lane` | Whether a CCIP message lane exists from a chain and whether a token's pool serves it, read on Chainlink's Router, OnRamp, TokenAdminRegistry and pool |
-| `decode_hypercore_event`, `hypercore_events` | The HyperCore fuse, pending-library, settlement and reporter events, decoded by topic with their raw log identity under the same input contract as `decode_external_state_event`; a malformed listed log raises `HyperCoreEventDecodeError` |
+| `decode_hypercore_event`, `hypercore_events` | The HyperCore fuse events and the pending library's `HyperCoreActionEnqueued` / `HyperCoreActionSettled`, decoded by topic with their raw log identity under the same input contract as `decode_external_state_event`; a malformed listed log raises `HyperCoreEventDecodeError` |
 | Crosschain fuses (market 54): `StargateCrosschainSupplyFuse`, `StargateCrosschainCommandFuse`, `CcipCrosschainSupplyFuse`, `CcipCrosschainCommandFuse`, `CrosschainClaimFuse`; transport-agnostic bases `CrosschainSupplyFuse` / `CrosschainCommandFuse` with `StargateSendParams` / `CcipSendParams`, plus `Command`, `CrosschainSubstrateLib`, `OptionsBuilder` | `ipor_fusion.crosschain` |
 | HyperCore fuses (market 55): `HyperCoreDepositFuse`, `HyperCoreMarginFuse`, `HyperCoreSendFuse`, `HyperCoreOrderFuse`, `HyperCoreCancelFuse`, `HyperCoreBuilderFeeFuse`, `HyperCoreSubstrates` | `ipor_fusion.hypercore`, with `HyperCoreReader`, `read_hypercore_vault_state` and the event decoders |
 

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/README.md

@@ -9,9 +9,10 @@ Maintained by <a href="https://ipor.io">IPOR Labs AG</a>.
 
 > **Preview, not production:** the crosschain market (54: Stargate and CCIP executors,
 > dispatchers, lanes, fuses) and the HyperCore market (55: fuses, readers, events) are
-> under active development. Their contracts are not production releases, the mainnet
-> deployments are a proof of concept and IPOR Labs canaries, and their interfaces may
-> change between minor versions. Route no production capital through them. Everything
+> under active development. The SDK follows their official deployment (the 2026-10-21
+> contracts release, listed in ipor-abi) and nothing earlier, and their interfaces may
+> change or be removed between minor versions, with no backward compatibility. Route
+> no production capital through them. Everything
 > else in the package is production. `server_info` and `fusion changelog` list the same
 > status (`PREVIEW_FEATURES`).
 
@@ -491,7 +492,7 @@ the pilot executors and factories). Pin an exact version if you depend on them.
 | `discover_deployment`, `open_lanes` | Read a vault's crosschain market from the hub alone (executors with transport, factory, fuses, attestation keys and spokes served; remote vaults per spoke) and open every lane; `LANES` maps a transport kind to its lane class |
 | `CrosschainSimulator` | Multi-chain `eth_simulateV1` relay: replays LayerZero and CCIP messages between pinned chains by impersonating the endpoint or router on delivery, no bridge needed |
 | `ccip_token_lane` | Whether a CCIP message lane exists from a chain and whether a token's pool serves it, read on Chainlink's Router, OnRamp, TokenAdminRegistry and pool |
-| `decode_hypercore_event`, `hypercore_events` | The HyperCore fuse, pending-library, settlement and reporter events, decoded by topic with their raw log identity under the same input contract as `decode_external_state_event`; a malformed listed log raises `HyperCoreEventDecodeError` |
+| `decode_hypercore_event`, `hypercore_events` | The HyperCore fuse events and the pending library's `HyperCoreActionEnqueued` / `HyperCoreActionSettled`, decoded by topic with their raw log identity under the same input contract as `decode_external_state_event`; a malformed listed log raises `HyperCoreEventDecodeError` |
 | Crosschain fuses (market 54): `StargateCrosschainSupplyFuse`, `StargateCrosschainCommandFuse`, `CcipCrosschainSupplyFuse`, `CcipCrosschainCommandFuse`, `CrosschainClaimFuse`; transport-agnostic bases `CrosschainSupplyFuse` / `CrosschainCommandFuse` with `StargateSendParams` / `CcipSendParams`, plus `Command`, `CrosschainSubstrateLib`, `OptionsBuilder` | `ipor_fusion.crosschain` |
 | HyperCore fuses (market 55): `HyperCoreDepositFuse`, `HyperCoreMarginFuse`, `HyperCoreSendFuse`, `HyperCoreOrderFuse`, `HyperCoreCancelFuse`, `HyperCoreBuilderFeeFuse`, `HyperCoreSubstrates` | `ipor_fusion.hypercore`, with `HyperCoreReader`, `read_hypercore_vault_state` and the event decoders |
 

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "ipor-fusion"
-version = "4.0.0.dev325"
+version = "4.0.0.dev330"
 description = "The IPOR Fusion SDK for Python"
 authors = [
     { name = "Adam Mydlarz", email = "amydlarz@gmail.com" },

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/src/ipor_fusion/about.py

@@ -23,9 +23,9 @@ class PreviewFeature:
 
 # Stated once here and surfaced by `server_info`, `fusion changelog`, the
 # README and the module docstrings, so no reader can miss it: the contracts
-# behind these are under active development, their mainnet deployments are
-# a proof of concept and IPOR Labs canaries, and their interfaces may change
-# between minor versions. Nothing under these names should route production
+# behind these are under active development, the SDK follows only their
+# official deployment, and their interfaces may change or be removed between
+# minor versions. Nothing under these names should route production
 # capital. Every other feature of the package is production.
 PREVIEW_FEATURES: tuple[PreviewFeature, ...] = (
     PreviewFeature(
@@ -40,9 +40,8 @@ PREVIEW_FEATURES: tuple[PreviewFeature, ...] = (
 )
 PREVIEW_STATEMENT = (
     "Preview, not production: the contracts are under active development, the "
-    "mainnet deployments are a proof of concept and IPOR Labs canaries, and "
-    "interfaces may change or be removed between minor versions, with no "
-    "backward compatibility."
+    "SDK follows only their official deployment, and interfaces may change or "
+    "be removed between minor versions, with no backward compatibility."
 )
 
 _DISTRIBUTION = "ipor-fusion"

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/src/ipor_fusion/crosschain/__init__.py

@@ -7,7 +7,7 @@ transport and lane. This namespace exports all of it; the transport
 subpackages export only their codecs and wrappers, because the encoders import
 those and a package's ``__init__`` runs before any of its modules.
 
-Status: preview, not production. The contracts behind it are under active development, the mainnet deployments are a proof of concept and IPOR Labs canaries, and interfaces may change between minor versions; see ``ipor_fusion.about.PREVIEW_FEATURES``.
+Status: preview, not production. The contracts behind it are under active development, the SDK follows only their official deployment, and interfaces may change or be removed between minor versions, with no backward compatibility; see ``ipor_fusion.about.PREVIEW_FEATURES``.
 """
 
 from ipor_fusion.crosschain.ccip.chainlink import (

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/src/ipor_fusion/crosschain/fuses/base.py

@@ -7,10 +7,10 @@ exist and each has its own supply and command fuse (``stargate`` and ``ccip``
 next to this module); the claim fuse and the substrates are shared. Names,
 methods and parameters follow ``contracts/fuses/crosschain/**``.
 
-Every fuse is bound to one market id at construction (``MARKET_ID``), and the
-deployments so far were built with a keccak-derived id rather than the
-library constant, so the market id is a parameter here, never an assumption
-(see :func:`crosschain_market_id`).
+Every fuse is bound to one market id at construction (``MARKET_ID``). The
+released deployment uses ``IporFusionMarkets.CROSSCHAIN`` (54); a fuse built
+with another id (see :func:`crosschain_market_id`) is still addressed by it, so
+the market id is a parameter here, never an assumption.
 
 ``CrosschainSupplyFuse`` and ``CrosschainCommandFuse`` are the SDK's
 transport-agnostic layer (the contracts have none): the operations both

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/src/ipor_fusion/hypercore/__init__.py

@@ -1,8 +1,10 @@
 """HyperCore (Hyperliquid) vaults, market 55: preview.
 
 The fuses, readers, events and identifiers of the HyperCore market. A
-preview feature (`ipor_fusion.PREVIEW_FEATURES`): its names may change in a
-minor release, which is why they live here rather than in `ipor_fusion`.
+preview feature (`ipor_fusion.PREVIEW_FEATURES`) that follows only the
+official deployment: its names may change or be removed in a minor release,
+with no backward compatibility, which is why they live here rather than in
+`ipor_fusion`.
 """
 
 from ipor_fusion.fuses.hypercore import (

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/src/ipor_fusion/market_ids.py

@@ -99,10 +99,7 @@ class IporFusionMarkets:
     # Crosschain market: a hub PlasmaVault deploys capital into PlasmaVaults
     # on other chains through an executor (Stargate/LayerZero or Chainlink
     # CCIP). Substrate type: CrosschainSubstrateLib (1 EXECUTOR, 2 REMOTE_VAULT
-    # bound to a chain id). Ahead of the public contracts repo: defined on the
-    # crosschain feature branch; the mirror test allowlists it until it lands.
-    # The mainnet POC fuses were built with a keccak-derived id instead (see
-    # ipor_fusion.crosschain.fuses.crosschain_market_id).
+    # bound to a chain id).
     # A legacy HyperEVM HyperCore test vault also uses 54 until it is
     # redeployed on HyperCore's assigned market 55; do not interpret that
     # vault's market-54 substrates as crosschain configuration.

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/src/ipor_fusion/mcp/models.py

@@ -1175,9 +1175,8 @@ class PreviewFeatureModel(_Base):
     status: Literal["preview"] = Field(
         default="preview",
         description="Always 'preview': not production. The contracts are under "
-        "active development, the mainnet deployments are a proof of concept "
-        "and IPOR Labs canaries, and interfaces may change or be removed "
-        "between minor versions, with no backward compatibility. Route no "
+        "active development, the SDK follows only their official deployment, "
+        "and interfaces may change or be removed between minor versions, with no backward compatibility. Route no "
         "production capital through these features.",
     )
 

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/src/ipor_fusion/substrates.py

@@ -16,7 +16,6 @@ from collections.abc import Callable
 from dataclasses import dataclass, field
 
 from eth_typing import HexAddress
-from eth_utils import keccak
 
 from ipor_fusion.fuses.hypercore import (
     is_hip3_asset,
@@ -634,17 +633,9 @@ _register_markets([40], _decode_async_action)
 _register_markets([50], _decode_external_state)
 # Uniswap V4 (id 53 per IporFusionMarkets.sol): PoolId or pool currency.
 _register_markets([53], _decode_uniswap_v4)
-# Crosschain (id 54 on the contracts' crosschain branch): EXECUTOR /
-# REMOTE_VAULT typed substrates per CrosschainSubstrateLib.sol. The mainnet
-# POC vault (Ethereum 0x0Aa75BfD…) granted the same layout under the
-# keccak-derived market id its fuses were built with, so that id decodes too.
-_register_markets(
-    [
-        54,
-        int.from_bytes(keccak(text="IPOR_FUSION_CROSSCHAIN_USDC_POC_V1"), "big"),
-    ],
-    _decode_crosschain,
-)
+# Crosschain (54): EXECUTOR / REMOTE_VAULT typed substrates per
+# CrosschainSubstrateLib.sol.
+_register_markets([54], _decode_crosschain)
 # HyperCore (55): typed substrates per HyperCoreSubstrateLib.sol, verified
 # against the 12 words granted on the first HyperEVM test vault (see
 # tests/fixtures/hypercore_hip3_flow.json; that run used id 54 before the

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/tests/_crosschain_lifecycle.py

@@ -70,7 +70,7 @@ SUPPLY_AMOUNT = {
 NATIVE_BUDGET = 10**18  # executor and dispatcher pay bridge fees themselves
 
 # Simulated schedule. The freshness window itself (``staleness_max``, 1 h on
-# the POC executors) is read from the lane; MIN_UPDATE_INTERVAL is 60 s and a
+# the released executors) is read from the lane; MIN_UPDATE_INTERVAL is 60 s and a
 # proposal needs a 15 min approval window.
 BRIDGE_LATENCY = 2 * 60
 APPROVAL_DELAY = 5 * 60

{ipor_fusion-4.0.0.dev325 → ipor_fusion-4.0.0.dev330}/tests/test_crosschain_encoding.py

@@ -1,8 +1,7 @@
 """Offline tests for the crosschain fuses, substrates and wire codecs.
 
-Live fixtures: the substrates granted on the mainnet POC vault (Ethereum
-0x0Aa75BfD…, market keccak256("IPOR_FUSION_CROSSCHAIN_USDC_POC_V1"),
-read on 2026-09-24) and the well-known LayerZero option blobs.
+Fixtures: substrate words in the CrosschainSubstrateLib layout, as granted on
+a mainnet vault on 2026-09-24, and the well-known LayerZero option blobs.
 """
 
 from __future__ import annotations
@@ -79,7 +78,7 @@ WITHDRAW_MANAGER = Web3.to_checksum_address(
 )
 RECEIVER = Web3.to_checksum_address("0x3333333333333333333333333333333333333333")
 
-# Live grants on the POC vault: one EXECUTOR and two chain-bound REMOTE_VAULTs.
+# Granted substrate words: one EXECUTOR and two chain-bound REMOTE_VAULTs.
 LIVE_EXECUTOR_SUBSTRATE = (
     "0x0100000000000000000000001d5c9d44f8d556ec7f557ae992401cc770937e6e"
 )
@@ -89,7 +88,6 @@ LIVE_REMOTE_VAULT_BASE = (
 LIVE_REMOTE_VAULT_ARB = (
     "0x02000000000000000000a4b1174bfa12935ac416caa7d27397bd4f3b15175980"
 )
-POC_MARKET_ID = crosschain_market_id("IPOR_FUSION_CROSSCHAIN_USDC_POC_V1")
 
 
 def _decoded(action, signature: str) -> tuple:
@@ -249,7 +247,7 @@ class TestCrosschainSubstrateLib:
         assert info.type_label == "EXECUTOR"
         assert info.address == EXECUTOR.lower()
         assert info.extra == {}
-        info = decode_substrate(LIVE_REMOTE_VAULT_BASE, market_id=POC_MARKET_ID)
+        info = decode_substrate(LIVE_REMOTE_VAULT_BASE, market_id=54)
         assert info.type_label == "REMOTE_VAULT"
         assert info.address == REMOTE_VAULT_BASE.lower()
         assert info.extra == {"chain_id": "8453"}
@@ -279,11 +277,17 @@ class TestCrosschainSubstrateLib:
         assert info.is_error is True
         assert info.extra == {"chain_id": str(substrate.chain_id)}
 
-    def test_poc_market_id_matches_deployment_manifest(self):
-        assert POC_MARKET_ID == int(
+    def test_crosschain_market_id_is_the_keccak_of_its_preimage(self):
+        assert crosschain_market_id("IPOR_FUSION_CROSSCHAIN_USDC_POC_V1") == int(
             "0x3698b2215fdb7b90ebd6e623939afe7a334e14147954f78e1a42ddcbcbc9b576", 16
         )
 
+    def test_only_the_canonical_crosschain_market_decodes(self):
+        market = crosschain_market_id("IPOR_FUSION_CROSSCHAIN_USDC_POC_V1")
+        info = decode_substrate(LIVE_REMOTE_VAULT_BASE, market_id=market)
+        assert info.type_label == "no_decoder(UNKNOWN)"
+        assert info.address is None
+
 
 # ── Fuses ──────────────────────────────────────────────────────────────────