pmquant 0.4.3__tar.gz → 0.4.5__tar.gz

pmquant-0.4.5/.githooks/pre-push

@@ -0,0 +1,10 @@
+#!/bin/sh
+# pmq pre-push guard: refuse to push red. CI is the backstop; this catches
+# it before the remote does. Bypass knowingly with --no-verify.
+set -e
+cd "$(git rev-parse --show-toplevel)"
+PY=./.venv/bin/python
+[ -x "$PY" ] || PY=python3
+$PY -m ruff check . || { echo "pre-push: ruff rouge"; exit 1; }
+$PY -m mypy || { echo "pre-push: mypy rouge"; exit 1; }
+$PY -m pytest -q || { echo "pre-push: tests rouges"; exit 1; }

pmquant-0.4.5/.github/workflows/codeql.yml

@@ -0,0 +1,21 @@
+name: codeql
+on:
+  push:
+    branches: [main]
+  pull_request:
+  schedule:
+    - cron: "41 7 * * 1"
+
+permissions: read-all
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4
+        with:
+          languages: python
+      - uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4

pmquant-0.4.5/.github/workflows/mcp-publish.yml

@@ -0,0 +1,35 @@
+name: mcp-publish
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  id-token: write              # OIDC login to the MCP registry
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - name: Fetch mcp-publisher
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh release download --repo modelcontextprotocol/registry \
+            --pattern "mcp-publisher_*linux_amd64.tar.gz" --output mp.tgz
+          tar -xzf mp.tgz
+          ./mcp-publisher --version
+      - name: Wait for the version to exist on PyPI
+        run: |
+          V=$(python3 -c "import json; print(json.load(open('server.json'))['version'])")
+          for i in $(seq 1 20); do
+            curl -s "https://pypi.org/pypi/pmquant/$V/json" | grep -q '"version"' && exit 0
+            echo "PyPI does not serve $V yet ($i/20)"; sleep 30
+          done
+          echo "giving up: registry would reject an unpublished version"; exit 1
+      - name: Publish server.json to the MCP registry
+        run: |
+          ./mcp-publisher login github-oidc
+          ./mcp-publisher publish

{pmquant-0.4.3 → pmquant-0.4.5}/.github/workflows/publish.yml

@@ -5,6 +5,9 @@ on:
     types: [published]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest

pmquant-0.4.3/.hypothesis/constants/1720e64af9235558 → pmquant-0.4.5/.hypothesis/constants/94e671d33554da02

@@ -1,4 +1,4 @@
 # file: /home/runner/work/pmq/pmq/src/pmq/__init__.py
 # hypothesis_version: 6.156.1
 
-['0.4.3', 'DEFAULT_BUILDER_CODE', 'FEE_RATES', 'Fill', 'OrderUncertain', 'PmqError', 'PolymarketExecutor', '__version__', 'band_ask_depth_usd', 'best_bid_ask', 'book_inferred_winner', 'book_meta', 'event_markets', 'fee', 'get_book', 'get_market', 'get_tape', 'http_get_json', 'parse_market', 'positions', 'resolved_winner']
+['0.4.5', 'DEFAULT_BUILDER_CODE', 'FEE_RATES', 'Fill', 'OrderUncertain', 'PmqError', 'PolymarketExecutor', '__version__', 'band_ask_depth_usd', 'best_bid_ask', 'book_inferred_winner', 'book_meta', 'event_markets', 'fee', 'get_book', 'get_market', 'get_tape', 'http_get_json', 'parse_market', 'positions', 'resolved_winner']

pmquant-0.4.5/.hypothesis/constants/e9435504a7ce4829

@@ -0,0 +1,4 @@
+# file: /home/runner/work/pmq/pmq/src/pmq/executor.py
+# hypothesis_version: 6.156.1
+
+[0.0, 0.933, 0.983, 0.985, 4.97, 5.35, 9.98, 10.13, 1000000.0, 100, 137, 300, 400, 500, 10000, '0', '0.01', '0x[0-9a-fA-F]{64}', '; ', 'AssetType', 'BUY', 'FAILED', 'FAK', 'MAKER', 'MarketOrderArgs', 'MarketOrderArgsV2', 'OpenOrderParams', 'OrderArgs', 'OrderArgsV2', 'OrderType', 'POLY_BUILDER_CODE', 'POLY_FUNDER', 'POLY_PRIVATE_KEY', 'POLY_SIG_TYPE', 'SELL', 'TradeParams', '_pmq_taker4', 'amount', 'balance', 'builder_code', 'cancel_market_orders', 'crypto', 'error_msg', 'fd', 'get_open_orders', 'get_trades', 'makingAmount', 'off', 'on', 'orderID', 'order_args', 'order_type', 'params', 'payload', 'pmq', 'price', 'r', 'side', 'size', 'status', 'status_code', 'success', 'takingAmount', 'token_id', 'trader_side']

{pmquant-0.4.3 → pmquant-0.4.5}/CHANGELOG.md

@@ -1,5 +1,35 @@
 # Changelog
 
+## 0.4.5 (2026-07-04)
+
+* Startup guard against the fine-tick market-order rejection class: the
+  introspection now exercises the installed builder's amount arithmetic
+  across every rounding config and refuses to construct an executor that
+  would sign a market pair above the exchange caps (2 decimal maker,
+  4 decimal taker). A client build that slips past the 0.4.3 clamp fails
+  at deploy time, before any order.
+* Honesty pass after the 2026-07-04 production halt: the README rounding
+  bullet now states the fine-tick failure mode and its dates, and
+  docs/rounding-study.md gains an addendum scoping the July 3 conclusions
+  to ticks >= 0.01.
+
+## 0.4.4 (2026-07-04)
+
+* Harden: json.loads accepts NaN and Infinity, so a drifted or hostile
+  exchange response could book non-finite or negative matched amounts.
+  `_parse_fill` now zeroes anything non-finite or negative (fail closed),
+  and a hypothesis fuzz suite (four property groups, hundreds of generated
+  adversarial responses per run) pins the whole fill contract: market and
+  limit paths book only confirmed finite amounts, the 4xx/uncertain
+  exception partition is total, every transport exception surfaces as
+  OrderUncertain.
+* Security surface: CodeQL workflow (its first scan caught and we fixed a
+  host-boundary bypass in the egress allowlist), Scorecard alert triage
+  with written dismissal reasons, top-level permissions on the publish
+  workflow, direct private-advisory link in SECURITY.md, Dependabot
+  vulnerability alerts enabled. Listed in the official MCP registry as
+  io.github.crp4222/pmq (publish rides releases via OIDC).
+
 ## 0.4.3 (2026-07-04)
 
 * Fix: py-clob-client-v2 1.0.2 reuses its limit-order rounding table for

{pmquant-0.4.3 → pmquant-0.4.5}/CLAUDE.md

@@ -9,16 +9,26 @@ agents EDITING it. Read both before changing code.)
    confirmed (`orderID` + `success is not False` + matched amounts); 4xx is a
    clean rejection; timeout/5xx raises `OrderUncertain`; unparseable = zero.
    Any change that books more optimistically is a regression by definition,
-   whatever it fixes elsewhere. `reconcile()` must keep meaning cancel +
-   `get_trades` truth.
+   whatever it fixes elsewhere. Matched amounts must be finite and
+   non-negative (json.loads accepts NaN/Infinity; hostile values book zero).
+   `reconcile()` must keep meaning cancel + `get_trades` truth. The
+   hypothesis fuzz suite (tests/test_fill_fuzz.py) pins all of this with
+   generated adversarial responses: extend it with every parser change,
+   never delete it.
 2. **Startup introspection** (`_EXPECTED_METHODS`/`_EXPECTED_MARKET_ARGS`):
    the executor REFUSES to run on a drifted py-clob-client-v2. When bumping
    the client dependency, re-verify signatures by introspection and update
    the tables in the same commit.
-3. **Builder code policy**: default = maintainer's code, DISCLOSED in README
-   and code comment, opt-out one line (`builder_code=None` / env). Never
-   hide it, never remove the disclosure, never make opt-out harder. This is
-   the trust model (JKorf pattern).
+3. **Builder code policy**: default = maintainer's code, defined in exactly
+   ONE place (`DEFAULT_BUILDER_CODE` in executor.py) and applied
+   automatically by every order path. DISCLOSED in README and code comment,
+   opt-out one line (`builder_code=None` / env). Never hide it, never remove
+   the disclosure, never make opt-out harder. AND the mirror rule: keep the
+   disclosure at the DOCUMENTATION level only; do not surface attribution in
+   runtime channels (server startup logs, MCP tools or instructions, order
+   responses). It is public on-chain in every signed order; in-band
+   reminders just prompt sessions to toggle a setting that costs users
+   nothing. This is the trust model (JKorf pattern).
 4. **No strategy content, ever**: the maintainer's private bot strategy
    (bands, timing, hours, families, sizing) must never appear in code, docs,
    tests, commits or issues. The bot-template ships deliberately naive
@@ -41,10 +51,20 @@ agents EDITING it. Read both before changing code.)
 * Exchange rules (min size, tick, fee rate) are READ from the venue
   (`book_meta`, `fee_rate`), not hardcoded. `FEE_RATES` is a documented
   snapshot of the official schedule used for estimates.
-* Releases: bump version in `pyproject.toml` AND `src/pmq/__init__.py`,
-  update CHANGELOG.md, push, then `gh release create vX.Y.Z`: PyPI publish
-  is automatic via trusted publishing (no tokens anywhere). PyPI name is
-  `pmquant`, import name `pmq`: keep the README line explaining it.
+* Releases: bump version in `pyproject.toml`, `src/pmq/__init__.py` AND
+  `server.json` (both version fields), update CHANGELOG.md, push, then
+  `gh release create vX.Y.Z`: PyPI publish (trusted publishing, signed
+  attestations) and the MCP registry republish (mcp-publish.yml,
+  github-oidc) both fire on the release event. Registry gotchas: the
+  server.json description caps at 100 characters, and the version must
+  exist on PyPI. PyPI name is `pmquant`, import name `pmq`: keep the
+  README line explaining it.
+* CLAUDE.md and CONTRIBUTING.md are THE SAME FILE by contract: after
+  editing one, copy it over the other in the same commit (`cp CLAUDE.md
+  CONTRIBUTING.md`). Drift between them means an agent read stale rules.
+* Local guard: `git config core.hooksPath .githooks` once per clone
+  enables the pre-push hook (ruff + mypy + pytest). CI is the backstop,
+  but the hook catches a broken push before it lands.
 * GitHub Actions stay pinned by commit SHA (dependabot bumps them); new
   workflows get an explicit least-privilege permissions block. The egress
   test and pip-audit ride the weekly canary: never move them to default CI

pmquant-0.4.5/CONTRIBUTING.md

@@ -0,0 +1,80 @@
+# pmq: engineering invariants for agents CONTRIBUTING to this repo
+
+(AGENTS.md in this repo is for agents USING the library; this file is for
+agents EDITING it. Read both before changing code.)
+
+## Never weaken (the product IS these properties)
+
+1. **The fail-closed fill contract**: a `Fill` books only what the exchange
+   confirmed (`orderID` + `success is not False` + matched amounts); 4xx is a
+   clean rejection; timeout/5xx raises `OrderUncertain`; unparseable = zero.
+   Any change that books more optimistically is a regression by definition,
+   whatever it fixes elsewhere. Matched amounts must be finite and
+   non-negative (json.loads accepts NaN/Infinity; hostile values book zero).
+   `reconcile()` must keep meaning cancel + `get_trades` truth. The
+   hypothesis fuzz suite (tests/test_fill_fuzz.py) pins all of this with
+   generated adversarial responses: extend it with every parser change,
+   never delete it.
+2. **Startup introspection** (`_EXPECTED_METHODS`/`_EXPECTED_MARKET_ARGS`):
+   the executor REFUSES to run on a drifted py-clob-client-v2. When bumping
+   the client dependency, re-verify signatures by introspection and update
+   the tables in the same commit.
+3. **Builder code policy**: default = maintainer's code, defined in exactly
+   ONE place (`DEFAULT_BUILDER_CODE` in executor.py) and applied
+   automatically by every order path. DISCLOSED in README and code comment,
+   opt-out one line (`builder_code=None` / env). Never hide it, never remove
+   the disclosure, never make opt-out harder. AND the mirror rule: keep the
+   disclosure at the DOCUMENTATION level only; do not surface attribution in
+   runtime channels (server startup logs, MCP tools or instructions, order
+   responses). It is public on-chain in every signed order; in-band
+   reminders just prompt sessions to toggle a setting that costs users
+   nothing. This is the trust model (JKorf pattern).
+4. **No strategy content, ever**: the maintainer's private bot strategy
+   (bands, timing, hours, families, sizing) must never appear in code, docs,
+   tests, commits or issues. The bot-template ships deliberately naive
+   demos only.
+5. **Claims must be falsifiable**: no superlatives in README/docs; dated
+   claims with evidence (comparison table, on-chain receipts, measured
+   studies). If you cannot prove it, do not write it.
+6. **MCP safety gates**: trading tools are REGISTERED only when the operator
+   sets `PMQ_MCP_LIVE=1`; per-order `PMQ_MCP_MAX_USD` cap enforced before
+   any client call. Read tools must keep working with zero credentials.
+
+## Working rules
+
+* Tests green (`pytest -q`) and `ruff check .` clean before any push;
+  `pyscn check src/pmq bot-template` (complexity <= 10, no dead code)
+  must stay green too; clone warnings are informational (the template
+  dash deliberately duplicates helpers to stay stdlib-standalone). Add
+  tests with every behavior change. Network-touching tests go to
+  `tests/test_canary_live.py` behind `PMQ_CANARY=1`, never in default CI.
+* Exchange rules (min size, tick, fee rate) are READ from the venue
+  (`book_meta`, `fee_rate`), not hardcoded. `FEE_RATES` is a documented
+  snapshot of the official schedule used for estimates.
+* Releases: bump version in `pyproject.toml`, `src/pmq/__init__.py` AND
+  `server.json` (both version fields), update CHANGELOG.md, push, then
+  `gh release create vX.Y.Z`: PyPI publish (trusted publishing, signed
+  attestations) and the MCP registry republish (mcp-publish.yml,
+  github-oidc) both fire on the release event. Registry gotchas: the
+  server.json description caps at 100 characters, and the version must
+  exist on PyPI. PyPI name is `pmquant`, import name `pmq`: keep the
+  README line explaining it.
+* CLAUDE.md and CONTRIBUTING.md are THE SAME FILE by contract: after
+  editing one, copy it over the other in the same commit (`cp CLAUDE.md
+  CONTRIBUTING.md`). Drift between them means an agent read stale rules.
+* Local guard: `git config core.hooksPath .githooks` once per clone
+  enables the pre-push hook (ruff + mypy + pytest). CI is the backstop,
+  but the hook catches a broken push before it lands.
+* GitHub Actions stay pinned by commit SHA (dependabot bumps them); new
+  workflows get an explicit least-privilege permissions block. The egress
+  test and pip-audit ride the weekly canary: never move them to default CI
+  (they need network) and never widen the egress allowlist beyond
+  polymarket.com without updating SECURITY.md and the README section.
+* The weekly canary workflow is the drift alarm: if it opens an issue, the
+  fix starts by re-running the introspection against the new surface, not
+  by loosening the checks.
+* Keep the library small and auditable (five modules): resist adding
+  dependencies; stdlib first. Anything bot-shaped belongs in bot-template/,
+  not in the package.
+* Style: no em-dashes and no " - " connectors anywhere (strong user rule);
+  keep comments sparse and constraint-focused.

{pmquant-0.4.3 → pmquant-0.4.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pmquant
-Version: 0.4.3
+Version: 0.4.5
 Summary: Fail-closed execution and market-data layer for Polymarket CLOB V2: local signing, confirmed fills only, fee-correct math, working deposit-wallet (POLY_1271) support.
 Project-URL: Homepage, https://github.com/crp4222/pmq
 Project-URL: Issues, https://github.com/crp4222/pmq/issues
@@ -71,8 +71,14 @@ examples leave several traps undocumented. Every line of pmq was paid for with
 a real error in live trading:
 
 * `invalid amounts, the market buy orders maker amount supports a max accuracy
-  of 2 decimals`: the CLOB treats FAK/FOK buys as **market orders**. pmq routes
-  them through the market-order builder with the correct rounding.
+  of 2 decimals, taker amount a max of 4 decimals`: the CLOB treats FAK/FOK
+  buys as **market orders** and caps their signed amounts at 2 decimals
+  (maker) / 4 decimals (taker) whatever the tick size. The official client's
+  rounding table allows 5-6 taker decimals on ticks finer than 0.01, so every
+  market order there is rejected; this cost us a production halt on
+  2026-07-04. pmq clamps the signed pair to the exchange caps (0.4.3) and
+  refuses at startup any client build that would still sign a rejectable
+  pair (0.4.5).
 * `no orders found to match with FAK order` (HTTP 400, yet with an `orderID`):
   a clean no-fill, not an error. pmq returns an empty `Fill` instead of crashing
   or, worse, retrying blindly.
@@ -130,7 +136,10 @@ not your hopes.
 
 At startup pmq **introspects the installed py-clob-client-v2** against the API
 surface it was verified on, and refuses to trade on drift instead of sending
-orders through changed semantics.
+orders through changed semantics. The whole table is pinned by an executable
+test per row plus a hypothesis fuzz suite (hundreds of generated adversarial
+responses per run, including NaN/Infinity and negative amounts, which book
+zero).
 
 ## Quickstart
 
@@ -217,7 +226,9 @@ JKorf/Polymarket.Net; the official client defaults to zero attribution.)
 
 ## MCP server (agents)
 
-`pip install "pmquant[mcp]"` then run `pmq-mcp` (stdio). Read tools (market,
+`pip install "pmquant[mcp]"` then run `pmq-mcp` (stdio). Listed in the
+[official MCP registry](https://registry.modelcontextprotocol.io) as
+`io.github.crp4222/pmq`. Read tools (market,
 book, taker_fee, account_collateral, account_trades) always exist. Trading
 tools (`fak_buy`, `fak_sell`, `cancel_and_reconcile`) are **only registered
 when the operator sets `PMQ_MCP_LIVE=1`** in the server environment: an

{pmquant-0.4.3 → pmquant-0.4.5}/README.md

@@ -36,8 +36,14 @@ examples leave several traps undocumented. Every line of pmq was paid for with
 a real error in live trading:
 
 * `invalid amounts, the market buy orders maker amount supports a max accuracy
-  of 2 decimals`: the CLOB treats FAK/FOK buys as **market orders**. pmq routes
-  them through the market-order builder with the correct rounding.
+  of 2 decimals, taker amount a max of 4 decimals`: the CLOB treats FAK/FOK
+  buys as **market orders** and caps their signed amounts at 2 decimals
+  (maker) / 4 decimals (taker) whatever the tick size. The official client's
+  rounding table allows 5-6 taker decimals on ticks finer than 0.01, so every
+  market order there is rejected; this cost us a production halt on
+  2026-07-04. pmq clamps the signed pair to the exchange caps (0.4.3) and
+  refuses at startup any client build that would still sign a rejectable
+  pair (0.4.5).
 * `no orders found to match with FAK order` (HTTP 400, yet with an `orderID`):
   a clean no-fill, not an error. pmq returns an empty `Fill` instead of crashing
   or, worse, retrying blindly.
@@ -95,7 +101,10 @@ not your hopes.
 
 At startup pmq **introspects the installed py-clob-client-v2** against the API
 surface it was verified on, and refuses to trade on drift instead of sending
-orders through changed semantics.
+orders through changed semantics. The whole table is pinned by an executable
+test per row plus a hypothesis fuzz suite (hundreds of generated adversarial
+responses per run, including NaN/Infinity and negative amounts, which book
+zero).
 
 ## Quickstart
 
@@ -182,7 +191,9 @@ JKorf/Polymarket.Net; the official client defaults to zero attribution.)
 
 ## MCP server (agents)
 
-`pip install "pmquant[mcp]"` then run `pmq-mcp` (stdio). Read tools (market,
+`pip install "pmquant[mcp]"` then run `pmq-mcp` (stdio). Listed in the
+[official MCP registry](https://registry.modelcontextprotocol.io) as
+`io.github.crp4222/pmq`. Read tools (market,
 book, taker_fee, account_collateral, account_trades) always exist. Trading
 tools (`fak_buy`, `fak_sell`, `cancel_and_reconcile`) are **only registered
 when the operator sets `PMQ_MCP_LIVE=1`** in the server environment: an

{pmquant-0.4.3 → pmquant-0.4.5}/SECURITY.md

@@ -35,6 +35,7 @@ the important questions:
 
 ## Reporting a vulnerability
 
-Open a GitHub security advisory on this repository (Security tab, "Report a
-vulnerability") or an issue with the `security` label if it is not sensitive.
+Open a [private security advisory](https://github.com/crp4222/pmq/security/advisories/new)
+(Security tab, "Report a vulnerability") or, if it is not sensitive, an
+[issue](https://github.com/crp4222/pmq/issues) with the `security` label.
 You will get an answer within a few days.

{pmquant-0.4.3 → pmquant-0.4.5}/docs/rounding-study.md

@@ -50,3 +50,21 @@ amounts against requested size, cross-checked with `get_trades`.
 4. The per-market minimum size is enforced server-side with a clean 400, and
    is readable in advance from the book response (`min_order_size`, exposed
    by `pmq.book_meta`).
+
+## Addendum (2026-07-04): fine-tick market orders
+
+The study above ran on a 0.01-tick market and point 1 turns out to hold
+only there. On 2026-07-04 a 0.001-tick market rejected every market buy
+with `invalid amounts ... taker amount a max of 4 decimals`: the client's
+ROUNDING_CONFIG allows amount decimals = price decimals + 2 (5 for tick
+0.001, 6 for 0.0025 and 0.0001). That is right for LIMIT orders, whose
+amounts are exact price×size products, but MARKET-order takers are capped
+by the server at a flat 4 decimals whatever the tick, so on fine ticks the
+maker/price division leaves a 5th decimal and the order can never be
+accepted. Normalization still happens client-side; it just normalizes to a
+precision the server refuses.
+
+pmq 0.4.3 clamps the market path to 4 decimals (round-down: the budget
+contract is intact, the dust given up is under 0.0001 share). pmq 0.4.5
+also refuses at startup any client build that would still sign such a
+pair, so this class of failure stops at deploy time, not at trade time.

{pmquant-0.4.3 → pmquant-0.4.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "pmquant"
-version = "0.4.3"
+version = "0.4.5"
 description = "Fail-closed execution and market-data layer for Polymarket CLOB V2: local signing, confirmed fills only, fee-correct math, working deposit-wallet (POLY_1271) support."
 readme = "README.md"
 license = { text = "MIT" }

{pmquant-0.4.3 → pmquant-0.4.5}/server.json

@@ -2,18 +2,18 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.crp4222/pmq",
   "title": "pmq (Polymarket CLOB V2)",
-  "description": "Fail-closed Polymarket CLOB V2 market data and execution, production-proven daily with the maintainer's own funds. Exchange-confirmed fills only; keys never leave the process (weekly public CI egress proof: only polymarket.com is ever contacted). Read tools need zero credentials; trading tools exist only when the operator sets PMQ_MCP_LIVE=1, capped per order by PMQ_MCP_MAX_USD.",
+  "description": "Production-proven Polymarket CLOB V2 trading and data. Fail-closed fills; keys stay local.",
   "repository": {
     "url": "https://github.com/crp4222/pmq",
     "source": "github"
   },
-  "version": "0.4.2",
+  "version": "0.4.4",
   "packages": [
     {
       "registryType": "pypi",
       "registryBaseUrl": "https://pypi.org",
       "identifier": "pmquant",
-      "version": "0.4.2",
+      "version": "0.4.4",
       "runtimeHint": "uvx",
       "transport": {
         "type": "stdio"

{pmquant-0.4.3 → pmquant-0.4.5}/src/pmq/__init__.py

@@ -25,7 +25,7 @@ from .data import (
 )
 from .exceptions import IntrospectionMismatch, OrderUncertain, PmqError
 
-__version__ = "0.4.3"
+__version__ = "0.4.5"
 __all__ = [
     "FEE_RATES", "band_ask_depth_usd", "best_bid_ask", "book_inferred_winner",
     "book_meta", "event_markets", "fee", "get_book", "get_market", "get_tape",

{pmquant-0.4.3 → pmquant-0.4.5}/src/pmq/executor.py

@@ -218,8 +218,40 @@ class PolymarketExecutor:
             drifts += [f"{label} lost field {p}" for p in expected if p not in have]
         if not hasattr(self._t["OrderType"], "FAK"):
             drifts.append("OrderType.FAK missing")
+        drifts += self._amount_precision_drifts()
         return drifts
 
+    def _amount_precision_drifts(self) -> list[str]:
+        """Behavioral guard: the exchange caps signed MARKET-order amounts at
+        2 decimals (maker) and 4 (taker) whatever the tick size. Exercise the
+        installed builder's arithmetic on awkward pairs across every rounding
+        config; a client build that would sign a rejectable pair is refused
+        here, at startup, instead of failing on the first fine-tick order."""
+        try:
+            from py_clob_client_v2.order_builder.builder import (
+                ROUNDING_CONFIG,
+                OrderBuilder,
+            )
+            from py_clob_client_v2.order_builder.constants import BUY, SELL
+        except ImportError:
+            return []
+        out: set[str] = set()
+        probe = object.__new__(OrderBuilder)
+        cases = ((BUY, 9.98, 0.985), (BUY, 4.97, 0.983),
+                 (SELL, 10.13, 0.985), (SELL, 5.35, 0.933))
+        for tick, rc in ROUNDING_CONFIG.items():
+            for side, amount, price in cases:
+                try:
+                    _, mk, tk = OrderBuilder.get_market_order_amounts(
+                        probe, side, amount, price, rc)
+                except Exception as e:
+                    out.add(f"market amounts builder failed at tick {tick}: {e}")
+                    continue
+                if int(mk) % 10_000 or int(tk) % 100:
+                    out.add(f"market order would sign >2dp maker or >4dp taker "
+                            f"at tick {tick}")
+        return sorted(out)
+
     def _verify_client_surface(self) -> None:
         drifts = self._surface_drifts()
         if drifts:

{pmquant-0.4.3 → pmquant-0.4.5}/tests/test_canary_live.py

@@ -101,5 +101,6 @@ def test_egress_only_polymarket_hosts(monkeypatch):
     except pmq.OrderUncertain:
         pass                                  # 5xx path; egress is the point
     print("hosts contacted:", sorted(hosts))
-    foreign = {h for h in hosts if not h.endswith("polymarket.com")}
+    foreign = {h for h in hosts
+               if h != "polymarket.com" and not h.endswith(".polymarket.com")}
     assert not foreign, f"unexpected egress: {sorted(foreign)}"

{pmquant-0.4.3 → pmquant-0.4.5}/tests/test_executor.py

@@ -362,3 +362,17 @@ def test_market_taker_amounts_clamped_to_4dp_on_fine_ticks():
         assert int(tk) % 10**2 == 0, f"taker >4dp at tick {tick}"
         _, mk_s, tk_s = fn(b, SELL, 10.13, 0.985, ROUNDING_CONFIG[tick])
         assert int(mk_s) % 10**4 == 0 and int(tk_s) % 10**2 == 0
+
+
+def test_startup_refuses_client_signing_dirty_market_amounts(monkeypatch):
+    """If a client build slips past the 4dp clamp (new code path, future
+    regression), the startup introspection must refuse to trade at all."""
+    from py_clob_client_v2.order_builder import builder as b
+
+    def dirty(self, side, amount, price, round_config):
+        return side, 9980000, 10131970          # taker 10.13197: 5 decimals
+
+    dirty._pmq_taker4 = True                    # defeat the pmq wrapper
+    monkeypatch.setattr(b.OrderBuilder, "get_market_order_amounts", dirty)
+    with pytest.raises(IntrospectionMismatch):
+        make(FakeClient())

pmquant-0.4.3/.hypothesis/constants/07a2a0eac57d1dd0

@@ -1,4 +0,0 @@
-# file: /home/runner/work/pmq/pmq/src/pmq/executor.py
-# hypothesis_version: 6.156.1
-
-[0.0, 1000000.0, 137, 300, 400, 500, '0', '0.01', '0x[0-9a-fA-F]{64}', '; ', 'AssetType', 'BUY', 'FAILED', 'FAK', 'MAKER', 'MarketOrderArgs', 'MarketOrderArgsV2', 'OpenOrderParams', 'OrderArgs', 'OrderArgsV2', 'OrderType', 'POLY_BUILDER_CODE', 'POLY_FUNDER', 'POLY_PRIVATE_KEY', 'POLY_SIG_TYPE', 'SELL', 'TradeParams', '_pmq_taker4', 'amount', 'balance', 'builder_code', 'cancel_market_orders', 'crypto', 'error_msg', 'fd', 'get_open_orders', 'get_trades', 'makingAmount', 'off', 'on', 'orderID', 'order_args', 'order_type', 'params', 'payload', 'pmq', 'price', 'r', 'side', 'size', 'status', 'status_code', 'success', 'takingAmount', 'token_id', 'trader_side']

pmquant-0.4.3/CONTRIBUTING.md

@@ -1,52 +0,0 @@
-# pmq: engineering invariants for agents CONTRIBUTING to this repo
-
-(AGENTS.md in this repo is for agents USING the library; this file is for
-agents EDITING it. Read both before changing code.)
-
-## Never weaken (the product IS these properties)
-
-1. **The fail-closed fill contract**: a `Fill` books only what the exchange
-   confirmed (`orderID` + `success is not False` + matched amounts); 4xx is a
-   clean rejection; timeout/5xx raises `OrderUncertain`; unparseable = zero.
-   Any change that books more optimistically is a regression by definition,
-   whatever it fixes elsewhere. `reconcile()` must keep meaning cancel +
-   `get_trades` truth.
-2. **Startup introspection** (`_EXPECTED_METHODS`/`_EXPECTED_MARKET_ARGS`):
-   the executor REFUSES to run on a drifted py-clob-client-v2. When bumping
-   the client dependency, re-verify signatures by introspection and update
-   the tables in the same commit.
-3. **Builder code policy**: default = maintainer's code, DISCLOSED in README
-   and code comment, opt-out one line (`builder_code=None` / env). Never
-   hide it, never remove the disclosure, never make opt-out harder. This is
-   the trust model (JKorf pattern).
-4. **No strategy content, ever**: the maintainer's private bot strategy
-   (bands, timing, hours, families, sizing) must never appear in code, docs,
-   tests, commits or issues. The bot-template ships deliberately naive
-   demos only.
-5. **Claims must be falsifiable**: no superlatives in README/docs; dated
-   claims with evidence (comparison table, on-chain receipts, measured
-   studies). If you cannot prove it, do not write it.
-6. **MCP safety gates**: trading tools are REGISTERED only when the operator
-   sets `PMQ_MCP_LIVE=1`; per-order `PMQ_MCP_MAX_USD` cap enforced before
-   any client call. Read tools must keep working with zero credentials.
-
-## Working rules
-
-* Tests green (`pytest -q`) and `ruff check .` clean before any push; add
-  tests with every behavior change. Network-touching tests go to
-  `tests/test_canary_live.py` behind `PMQ_CANARY=1`, never in default CI.
-* Exchange rules (min size, tick, fee rate) are READ from the venue
-  (`book_meta`, `fee_rate`), not hardcoded. `FEE_RATES` is a documented
-  snapshot of the official schedule used for estimates.
-* Releases: bump version in `pyproject.toml` AND `src/pmq/__init__.py`,
-  update CHANGELOG.md, push, then `gh release create vX.Y.Z`: PyPI publish
-  is automatic via trusted publishing (no tokens anywhere). PyPI name is
-  `pmquant`, import name `pmq`: keep the README line explaining it.
-* The weekly canary workflow is the drift alarm: if it opens an issue, the
-  fix starts by re-running the introspection against the new surface, not
-  by loosening the checks.
-* Keep the library small and auditable (five modules): resist adding
-  dependencies; stdlib first. Anything bot-shaped belongs in bot-template/,
-  not in the package.
-* Style: no em-dashes and no " - " connectors anywhere (strong user rule);
-  keep comments sparse and constraint-focused.