polynode 0.12.1__tar.gz → 0.13.0__tar.gz

{polynode-0.12.1 → polynode-0.13.0}/PKG-INFO

@@ -1,11 +1,11 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: polynode
-Version: 0.12.1
-Summary: Python SDK for the PolyNode real-time prediction market data platform
+Version: 0.13.0
+Summary: Python SDK for the Polynode real-time prediction market data platform
 Project-URL: Homepage, https://polynode.dev
 Project-URL: Documentation, https://docs.polynode.dev
 Project-URL: Repository, https://github.com/Polynode-Dev/sdk-python
-Author-email: PolyNode <josh@quantish.live>
+Author-email: Polynode <josh@quantish.live>
 License: MIT
 Keywords: polymarket,polynode,prediction-markets,trading,websocket
 Classifier: Development Status :: 4 - Beta
@@ -34,11 +34,13 @@ Description-Content-Type: text/markdown
 
 # polynode
 
-Python SDK for the [PolyNode](https://polynode.dev) real-time prediction market data platform.
+Python SDK for the [Polynode](https://polynode.dev) real-time prediction market data platform.
 
-**Current in v0.12.1:** Python provides the same core capabilities as the TypeScript and Rust SDKs: complete V3 API access, the V3 perps WebSocket, reconnect-aware settlement delivery, and PN1 orderbook integrity. Unknown additive events remain available as raw payloads, decimal values remain precision-safe, and any local queue eviction is reported.
+**New in v0.13.0:** Trading adds explicit `user_owned` execution. Existing builder mode remains the default; opted-in wallets use zero builder attribution, one wallet-ownership authorization, and strict wallet-bound gasless credentials. Builder credentials and nonzero builder codes fail closed in this mode. EOA-controlled Safe and deposit wallets are supported; legacy Magic/proxy wallets are intentionally excluded from the first release.
 
-**New in v0.11.0:** Current-production parity. Trading now defaults to CLOB V2 on `clob.polymarket.com`, uses PolyNode's public builder attribution unless overridden, omits removed V1 wire fields, and supports V2 GTD expiration. Managed 5-minute, 15-minute, and 4-hour streams select the required 30/60-second Chainlink TWAP lookbacks on a dedicated connection and reconnect/resubscribe at every market rotation. WebSocket models, presets, and filters now cover current redemption, position-conversion, dome/fill, and PM2 combo events. REST position queries now include redeemable/condition filters, multi-wallet batches, and market-holder views; connection and status observability match the current public API.
+**In v0.12.2:** Python provides the same core capabilities as the TypeScript and Rust SDKs: complete V3 API access, the V3 perps WebSocket, reconnect-aware settlement delivery, and PN1 orderbook integrity. Unknown additive events remain available as raw payloads, decimal values remain precision-safe, and any local queue eviction is reported.
+
+**New in v0.11.0:** Current-production parity. Trading now defaults to CLOB V2 on `clob.polymarket.com`, uses Polynode's public builder attribution unless overridden, omits removed V1 wire fields, and supports V2 GTD expiration. Managed 5-minute, 15-minute, and 4-hour streams select the required 30/60-second Chainlink TWAP lookbacks on a dedicated connection and reconnect/resubscribe at every market rotation. WebSocket models, presets, and filters now cover current redemption, position-conversion, dome/fill, and PM2 combo events. REST position queries now include redeemable/condition filters, multi-wallet batches, and market-holder views; connection and status observability match the current public API.
 
 **New in v0.10.8:** POLY_1271 V2 order signatures now normalize the ERC-7739 `TypedDataSign` recovery byte to Ethereum `v=27/28` for on-chain ERC-1271 validation.
 
@@ -273,7 +275,7 @@ async def main():
     trader = PolyNodeTrader(TraderConfig(
         polynode_key="pn_live_...",
         # exchange_version=ExchangeVersion.V2,
-        # builder_code=None,  # disables default public PolyNode attribution
+        # builder_code=None,  # disables default public Polynode attribution
     ))
     status = await trader.ensure_ready("0xYourPrivateKey...")
 
@@ -295,6 +297,51 @@ For the V2 order flow — required approvals, EIP-712 struct, fee math, and comm
 
 V2 fees are determined at match time and are not signed into an order, so V2 payloads omit `feeRateBps`, `nonce`, and `taker`. Explicit legacy V1 mode still signs `feeRateBps`; for that path the SDK fetches `/fee-rate` and fails closed if fee, tick-size, or neg-risk metadata is unavailable or malformed.
 
+#### Optional user-owned execution
+
+Set `execution_mode=ExecutionMode.USER_OWNED` when the signing wallet should trade with zero builder attribution and use its own gasless authorization. Builder mode remains the default and existing integrations are unchanged.
+
+```python
+import os
+from polynode.trading import (
+    ExecutionMode,
+    PolyNodeTrader,
+    TraderConfig,
+    UserOwnedClobTransport,
+)
+
+trader = PolyNodeTrader(TraderConfig(
+    polynode_key=os.environ["POLYNODE_API_KEY"],
+    execution_mode=ExecutionMode.USER_OWNED,
+    # Optional, explicit regional egress; direct is the default.
+    # user_owned_clob_transport=UserOwnedClobTransport.PROXY,
+))
+ready = await trader.ensure_ready(user_wallet_signer)
+print(ready.execution_mode, ready.user_relayer_authorized)
+```
+
+`user_wallet_signer` is a caller-controlled `RouterSigner`; the SDK asks it to sign scoped messages and never persists or transmits its private key. A private-key string is also accepted when the caller already manages it inside a trusted process. User-owned mode rejects builder credentials, nonzero builder codes, and credentials owned by another wallet. It supports EOA signers and EOA-controlled Safe or deposit wallets; legacy `POLY_PROXY` and Magic/DID signers are not supported in the first release. Normal CLOB authentication and Polymarket rate limits still apply.
+
+Signed CLOB requests go directly to Polymarket by default. Platforms that need Polynode's regional egress can explicitly set `user_owned_clob_transport=UserOwnedClobTransport.PROXY`; this transport never activates automatically and never falls back between paths. Fee-authenticated orders are not available in user-owned mode, and any positive effective `fee_bps` is rejected before an order is signed or submitted.
+
+For browser-wallet integrations, the typed `begin_user_relayer_authorization()` and `complete_user_relayer_authorization()` functions let a trusted backend request a validated message, send only that message to the user's browser for signing, and complete authorization for the same expected address. Keep the Polynode API key on the backend. Neither primitive writes the wallet signature or returned credential to local storage.
+
+For long-running services, `await trader.authorize_user_owned_execution(signer)` provides the combined convenience flow. Its wallet-owned credential can be kept in a server-side secret manager and supplied later as `TraderConfig.user_relayer_credentials`. Never log it, commit it, or store it in a browser.
+
+`ensure_ready()` is the one-call onboarding path for user-owned Safe and deposit-wallet accounts: it deploys the selected wallet when needed, applies the base trading approvals, verifies both results, and only then reports the account ready. New deposit-wallet integrations must resolve the current address asynchronously:
+
+```python
+from polynode.trading import resolve_deposit_wallet_address
+
+funder = await resolve_deposit_wallet_address("0xYourEOA...")
+```
+
+The synchronous `derive_deposit_wallet_address()` helper is deprecated and derives only the legacy UUPS address; do not use it to bind a new or live deposit-wallet account. For the same reason, synchronous `link_credentials()` and `import_wallet()` reject deposit wallets in user-owned mode; use `await link_wallet()` or `await ensure_ready()` so the current address is resolved before anything is stored.
+
+`trader.split(SplitParams(...))` and `trader.merge(MergeParams(...))` preserve the synchronous build-only API and return a `TransactionRequest` without signing or submitting anything. In user-owned mode, `await trader.execute_split(SplitParams(...))` and `await trader.execute_merge(MergeParams(...))` execute the corresponding gasless operation for EOA-controlled Safe and deposit-wallet accounts. Supply either an explicit `neg_risk` boolean or a `token_id` for fail-closed execution routing; V2 uses the appropriate collateral adapter automatically. Each executed operation batches only the additional permission it needs; split allowance is limited to the exact split amount.
+
+`await trader.wrap_to_polyusd(...)` and `await trader.unwrap_from_polyusd(...)` also use the account's wallet-specific gasless path for Safe and deposit-wallet accounts. Caller-controlled browser or HSM signers remain supported; these smart-wallet operations do not require handing a private key to the SDK.
+
 ## Documentation
 
 Full docs at [docs.polynode.dev](https://docs.polynode.dev)

{polynode-0.12.1 → polynode-0.13.0}/README.md

@@ -1,10 +1,12 @@
 # polynode
 
-Python SDK for the [PolyNode](https://polynode.dev) real-time prediction market data platform.
+Python SDK for the [Polynode](https://polynode.dev) real-time prediction market data platform.
 
-**Current in v0.12.1:** Python provides the same core capabilities as the TypeScript and Rust SDKs: complete V3 API access, the V3 perps WebSocket, reconnect-aware settlement delivery, and PN1 orderbook integrity. Unknown additive events remain available as raw payloads, decimal values remain precision-safe, and any local queue eviction is reported.
+**New in v0.13.0:** Trading adds explicit `user_owned` execution. Existing builder mode remains the default; opted-in wallets use zero builder attribution, one wallet-ownership authorization, and strict wallet-bound gasless credentials. Builder credentials and nonzero builder codes fail closed in this mode. EOA-controlled Safe and deposit wallets are supported; legacy Magic/proxy wallets are intentionally excluded from the first release.
 
-**New in v0.11.0:** Current-production parity. Trading now defaults to CLOB V2 on `clob.polymarket.com`, uses PolyNode's public builder attribution unless overridden, omits removed V1 wire fields, and supports V2 GTD expiration. Managed 5-minute, 15-minute, and 4-hour streams select the required 30/60-second Chainlink TWAP lookbacks on a dedicated connection and reconnect/resubscribe at every market rotation. WebSocket models, presets, and filters now cover current redemption, position-conversion, dome/fill, and PM2 combo events. REST position queries now include redeemable/condition filters, multi-wallet batches, and market-holder views; connection and status observability match the current public API.
+**In v0.12.2:** Python provides the same core capabilities as the TypeScript and Rust SDKs: complete V3 API access, the V3 perps WebSocket, reconnect-aware settlement delivery, and PN1 orderbook integrity. Unknown additive events remain available as raw payloads, decimal values remain precision-safe, and any local queue eviction is reported.
+
+**New in v0.11.0:** Current-production parity. Trading now defaults to CLOB V2 on `clob.polymarket.com`, uses Polynode's public builder attribution unless overridden, omits removed V1 wire fields, and supports V2 GTD expiration. Managed 5-minute, 15-minute, and 4-hour streams select the required 30/60-second Chainlink TWAP lookbacks on a dedicated connection and reconnect/resubscribe at every market rotation. WebSocket models, presets, and filters now cover current redemption, position-conversion, dome/fill, and PM2 combo events. REST position queries now include redeemable/condition filters, multi-wallet batches, and market-holder views; connection and status observability match the current public API.
 
 **New in v0.10.8:** POLY_1271 V2 order signatures now normalize the ERC-7739 `TypedDataSign` recovery byte to Ethereum `v=27/28` for on-chain ERC-1271 validation.
 
@@ -239,7 +241,7 @@ async def main():
     trader = PolyNodeTrader(TraderConfig(
         polynode_key="pn_live_...",
         # exchange_version=ExchangeVersion.V2,
-        # builder_code=None,  # disables default public PolyNode attribution
+        # builder_code=None,  # disables default public Polynode attribution
     ))
     status = await trader.ensure_ready("0xYourPrivateKey...")
 
@@ -261,6 +263,51 @@ For the V2 order flow — required approvals, EIP-712 struct, fee math, and comm
 
 V2 fees are determined at match time and are not signed into an order, so V2 payloads omit `feeRateBps`, `nonce`, and `taker`. Explicit legacy V1 mode still signs `feeRateBps`; for that path the SDK fetches `/fee-rate` and fails closed if fee, tick-size, or neg-risk metadata is unavailable or malformed.
 
+#### Optional user-owned execution
+
+Set `execution_mode=ExecutionMode.USER_OWNED` when the signing wallet should trade with zero builder attribution and use its own gasless authorization. Builder mode remains the default and existing integrations are unchanged.
+
+```python
+import os
+from polynode.trading import (
+    ExecutionMode,
+    PolyNodeTrader,
+    TraderConfig,
+    UserOwnedClobTransport,
+)
+
+trader = PolyNodeTrader(TraderConfig(
+    polynode_key=os.environ["POLYNODE_API_KEY"],
+    execution_mode=ExecutionMode.USER_OWNED,
+    # Optional, explicit regional egress; direct is the default.
+    # user_owned_clob_transport=UserOwnedClobTransport.PROXY,
+))
+ready = await trader.ensure_ready(user_wallet_signer)
+print(ready.execution_mode, ready.user_relayer_authorized)
+```
+
+`user_wallet_signer` is a caller-controlled `RouterSigner`; the SDK asks it to sign scoped messages and never persists or transmits its private key. A private-key string is also accepted when the caller already manages it inside a trusted process. User-owned mode rejects builder credentials, nonzero builder codes, and credentials owned by another wallet. It supports EOA signers and EOA-controlled Safe or deposit wallets; legacy `POLY_PROXY` and Magic/DID signers are not supported in the first release. Normal CLOB authentication and Polymarket rate limits still apply.
+
+Signed CLOB requests go directly to Polymarket by default. Platforms that need Polynode's regional egress can explicitly set `user_owned_clob_transport=UserOwnedClobTransport.PROXY`; this transport never activates automatically and never falls back between paths. Fee-authenticated orders are not available in user-owned mode, and any positive effective `fee_bps` is rejected before an order is signed or submitted.
+
+For browser-wallet integrations, the typed `begin_user_relayer_authorization()` and `complete_user_relayer_authorization()` functions let a trusted backend request a validated message, send only that message to the user's browser for signing, and complete authorization for the same expected address. Keep the Polynode API key on the backend. Neither primitive writes the wallet signature or returned credential to local storage.
+
+For long-running services, `await trader.authorize_user_owned_execution(signer)` provides the combined convenience flow. Its wallet-owned credential can be kept in a server-side secret manager and supplied later as `TraderConfig.user_relayer_credentials`. Never log it, commit it, or store it in a browser.
+
+`ensure_ready()` is the one-call onboarding path for user-owned Safe and deposit-wallet accounts: it deploys the selected wallet when needed, applies the base trading approvals, verifies both results, and only then reports the account ready. New deposit-wallet integrations must resolve the current address asynchronously:
+
+```python
+from polynode.trading import resolve_deposit_wallet_address
+
+funder = await resolve_deposit_wallet_address("0xYourEOA...")
+```
+
+The synchronous `derive_deposit_wallet_address()` helper is deprecated and derives only the legacy UUPS address; do not use it to bind a new or live deposit-wallet account. For the same reason, synchronous `link_credentials()` and `import_wallet()` reject deposit wallets in user-owned mode; use `await link_wallet()` or `await ensure_ready()` so the current address is resolved before anything is stored.
+
+`trader.split(SplitParams(...))` and `trader.merge(MergeParams(...))` preserve the synchronous build-only API and return a `TransactionRequest` without signing or submitting anything. In user-owned mode, `await trader.execute_split(SplitParams(...))` and `await trader.execute_merge(MergeParams(...))` execute the corresponding gasless operation for EOA-controlled Safe and deposit-wallet accounts. Supply either an explicit `neg_risk` boolean or a `token_id` for fail-closed execution routing; V2 uses the appropriate collateral adapter automatically. Each executed operation batches only the additional permission it needs; split allowance is limited to the exact split amount.
+
+`await trader.wrap_to_polyusd(...)` and `await trader.unwrap_from_polyusd(...)` also use the account's wallet-specific gasless path for Safe and deposit-wallet accounts. Caller-controlled browser or HSM signers remain supported; these smart-wallet operations do not require handing a private key to the SDK.
+
 ## Documentation
 
 Full docs at [docs.polynode.dev](https://docs.polynode.dev)

polynode-0.13.0/polynode/_version.py

@@ -0,0 +1 @@
+__version__ = "0.13.0"

{polynode-0.12.1 → polynode-0.13.0}/polynode/trading/V2_ORDER_FLOW.md

@@ -6,8 +6,8 @@ Verified 2026-04-21 with matched order `0xaecd1060f7c978d0ab947eacc12a17106b7a5d
 ## TL;DR
 
 ```
-1. Approve pUSD to: CTF_EXCHANGE_V2, NEG_RISK_EXCHANGE_V2_A, NEG_RISK_ADAPTER (V1!)
-2. setApprovalForAll CTF → same three addresses
+1. Approve pUSD to: CTF_EXCHANGE_V2 and NEG_RISK_EXCHANGE_V2_A
+2. setApprovalForAll CTF → the same two addresses
 3. GET /balance-allowance/update — force CLOB cache refresh after approvals
 4. Sign EIP-712 Order (domain name "Polymarket CTF Exchange", version "2")
 5. POST /order with L2 HMAC headers
@@ -15,19 +15,15 @@ Verified 2026-04-21 with matched order `0xaecd1060f7c978d0ab947eacc12a17106b7a5d
 
 ## Required Approvals (V2 CLOB balance-allowance check)
 
-The V2 CLOB checks **three** pUSD allowances for orders:
+The V2 CLOB checks **two** pUSD allowances for orders:
 
 | Address | Name | Why |
 |---|---|---|
 | `0xE111180000d2663C0091e4f400237545B87B996B` | `CTF_EXCHANGE_V2` | Standard market orders |
 | `0xe2222d279d744050d28e00520010520000310F59` | `NEG_RISK_EXCHANGE_V2_A` | Neg-risk market orders |
-| `0xd91E80cF2E7be2e162c6513ceD06f1dD0dA35296` | `NegRiskAdapter` (V1) | Settlement delegation |
 
-**The V1 `NegRiskAdapter` MUST be approved for pUSD even though it's a V1 contract.** The V2 neg-risk exchange delegates settlement to it. Without this allowance set, the CLOB rejects every order with:
-
-```
-{"error":"not enough balance / allowance"}
-```
+The V1 `NegRiskAdapter` is not part of V2 base order readiness. Position adapters
+are approved just in time in the same relayed batch as each split or merge.
 
 ## Order Flow Step-by-Step
 
@@ -37,7 +33,7 @@ For **every** spender above:
 - `pUSD.approve(spender, MAX_UINT256)`
 - `CTF.setApprovalForAll(spender, true)` — only needed for SELL orders, but safe to set
 
-Batch all 6 TXs into one Safe multisend via `RelayClient.execute(...)`.
+Batch all 4 TXs into one Safe multisend via `RelayClient.execute(...)`.
 
 ### 2. Refresh CLOB balance/allowance cache
 
@@ -59,12 +55,11 @@ Response:
   "balance": "2179236",
   "allowances": {
     "0xE111180000d2663C0091e4f400237545B87B996B": "115792089...",
-    "0xd91E80cF2E7be2e162c6513ceD06f1dD0dA35296": "115792089...",
     "0xe2222d279d744050d28e00520010520000310F59": "115792089..."
   }
 }
 ```
-All three allowances must be non-zero.
+Both allowances must be non-zero.
 
 ### 3. Determine `neg_risk` and pick exchange address
 
@@ -218,7 +213,7 @@ The `builderCode` field ties the on-chain trade to the attribution record — th
 
 | Error | Cause |
 |---|---|
-| `"not enough balance / allowance"` | (a) V1 NegRiskAdapter not approved for pUSD; (b) balance-allowance cache stale — run `/balance-allowance/update`; (c) balance < notional + fee |
+| `"not enough balance / allowance"` | (a) a current V2 exchange allowance is missing; (b) balance-allowance cache is stale — run `/balance-allowance/update`; (c) balance < notional + fee |
 | `"invalid signature"` | Wrong exchange address in EIP-712 domain. Almost always caused by `neg_risk` misdetection — check the `.neg_risk` field, don't `!!` the response object |
 | `"invalid amounts, ... max accuracy of N decimals"` | Float precision in amount calc. Use `parseUnits(decimalString, 6)`, not `Math.trunc(x * 1e6)` |
 | `"no orders found to match with FAK order"` | The matching engine ran and found no crossing asks. Either (a) book API showing stale asks, or (b) price didn't actually cross — check you're using the correct tick size |
@@ -232,7 +227,7 @@ pUSD                         : 0xC011a7E12a19f7B1f670d46F03B03f3342E82DFB
 CTF (ERC-1155)               : 0x4D97DCd97eC945f40cF65F87097ACe5EA0476045
 CTF_EXCHANGE_V2              : 0xe111180000d2663c0091e4f400237545b87b996b
 NEG_RISK_EXCHANGE_V2_A       : 0xe2222d279d744050d28e00520010520000310f59
-NegRiskAdapter (V1)          : 0xd91E80cF2E7be2e162c6513ceD06f1dD0dA35296
+NegRiskAdapter (V1 only)     : 0xd91E80cF2E7be2e162c6513ceD06f1dD0dA35296
 CtfCollateralAdapter         : 0xAdA100Db00Ca00073811820692005400218FcE1f
 NegRiskCtfCollateralAdapter  : 0xadA2005600Dec949baf300f4C6120000bDB6eAab
 

polynode-0.13.0/polynode/trading/__init__.py

@@ -0,0 +1,70 @@
+"""Trading module — place orders on Polymarket with wallet-owned credentials."""
+
+from .constants import *  # noqa: F401, F403
+from .cosigner import build_l2_headers, send_via_cosigner
+from .onboarding import (
+    derive_beacon_deposit_wallet_address,
+    derive_deposit_wallet_address,
+    derive_proxy_address,
+    derive_safe_address,
+    derive_uups_deposit_wallet_address,
+    detect_wallet_type,
+    resolve_deposit_wallet_address,
+)
+from .position_management import build_convert_txn, build_merge_txn, build_split_txn
+from .privy import PrivyConfig, PrivySigner
+from .signer import NormalizedSigner, normalize_signer
+from .trader import PolyNodeTrader
+from .types import *  # noqa: F401, F403
+from .types import (
+    BuilderCredentials,
+    ExchangeVersion,
+    ExecutionMode,
+    FeeConfig,
+    MergeParams,
+    PositionResult,
+    SplitParams,
+    TransactionRequest,
+    UserOwnedClobTransport,
+    UserRelayerAuthorizationChallenge,
+    UserRelayerCredentials,
+)
+from .user_relayer import (
+    authorize_user_relayer,
+    begin_user_relayer_authorization,
+    complete_user_relayer_authorization,
+)
+
+__all__ = [
+    "PolyNodeTrader",
+    "BuilderCredentials",
+    "ExecutionMode",
+    "UserOwnedClobTransport",
+    "UserRelayerCredentials",
+    "UserRelayerAuthorizationChallenge",
+    "ExchangeVersion",
+    "FeeConfig",
+    "SplitParams",
+    "MergeParams",
+    "TransactionRequest",
+    "PositionResult",
+    "PrivySigner",
+    "PrivyConfig",
+    "NormalizedSigner",
+    "normalize_signer",
+    "build_l2_headers",
+    "send_via_cosigner",
+    "derive_safe_address",
+    "derive_proxy_address",
+    "derive_deposit_wallet_address",
+    "derive_uups_deposit_wallet_address",
+    "derive_beacon_deposit_wallet_address",
+    "resolve_deposit_wallet_address",
+    "detect_wallet_type",
+    "build_split_txn",
+    "build_merge_txn",
+    "build_convert_txn",
+    "authorize_user_relayer",
+    "begin_user_relayer_authorization",
+    "complete_user_relayer_authorization",
+]

{polynode-0.12.1 → polynode-0.13.0}/polynode/trading/clob_api.py

@@ -4,12 +4,13 @@ from __future__ import annotations
 
 import math
 from typing import Any
+from urllib.parse import urlencode
 
 import httpx
 
 from .constants import CLOB_HOST, CLOB_HOST_V2
 from .cosigner import build_l2_headers
-from .types import ExchangeVersion
+from .types import ExchangeVersion, ExecutionMode, UserOwnedClobTransport
 
 
 async def post_order(
@@ -21,6 +22,8 @@ async def post_order(
     order_body: str,
     builder_credentials: Any | None = None,
     clob_host: str | None = None,
+    execution_mode: ExecutionMode = ExecutionMode.BUILDER,
+    user_owned_clob_transport: UserOwnedClobTransport = UserOwnedClobTransport.DIRECT,
 ) -> dict[str, Any]:
     """Submit a signed order to the CLOB."""
     from .cosigner import send_via_cosigner
@@ -42,6 +45,8 @@ async def post_order(
         {"method": "POST", "path": "/order", "body": order_body, "headers": headers},
         builder_credentials=builder_credentials,
         clob_host=clob_host,
+        execution_mode=execution_mode,
+        user_owned_clob_transport=user_owned_clob_transport,
     )
 
 
@@ -54,11 +59,14 @@ async def cancel_order(
     order_id: str,
     builder_credentials: Any | None = None,
     clob_host: str | None = None,
+    execution_mode: ExecutionMode = ExecutionMode.BUILDER,
+    user_owned_clob_transport: UserOwnedClobTransport = UserOwnedClobTransport.DIRECT,
 ) -> dict[str, Any]:
     """Cancel a specific order."""
-    from .cosigner import send_via_cosigner
     import json
 
+    from .cosigner import send_via_cosigner
+
     body = json.dumps({"orderID": order_id})
     headers = build_l2_headers(
         credentials["apiKey"],
@@ -77,6 +85,8 @@ async def cancel_order(
         {"method": "DELETE", "path": "/order", "body": body, "headers": headers},
         builder_credentials=builder_credentials,
         clob_host=clob_host,
+        execution_mode=execution_mode,
+        user_owned_clob_transport=user_owned_clob_transport,
     )
 
 
@@ -89,11 +99,14 @@ async def cancel_all_orders(
     market: str | None = None,
     builder_credentials: Any | None = None,
     clob_host: str | None = None,
+    execution_mode: ExecutionMode = ExecutionMode.BUILDER,
+    user_owned_clob_transport: UserOwnedClobTransport = UserOwnedClobTransport.DIRECT,
 ) -> dict[str, Any]:
     """Cancel all orders, optionally for a specific market."""
-    from .cosigner import send_via_cosigner
     import json
 
+    from .cosigner import send_via_cosigner
+
     path = "/cancel-market-orders" if market else "/cancel-all"
     body = json.dumps({"market": market}) if market else None
     headers = build_l2_headers(
@@ -113,6 +126,8 @@ async def cancel_all_orders(
         {"method": "DELETE", "path": path, "body": body, "headers": headers},
         builder_credentials=builder_credentials,
         clob_host=clob_host,
+        execution_mode=execution_mode,
+        user_owned_clob_transport=user_owned_clob_transport,
     )
 
 
@@ -126,18 +141,19 @@ async def get_open_orders(
     asset_id: str | None = None,
     builder_credentials: Any | None = None,
     clob_host: str | None = None,
+    execution_mode: ExecutionMode = ExecutionMode.BUILDER,
+    user_owned_clob_transport: UserOwnedClobTransport = UserOwnedClobTransport.DIRECT,
 ) -> list[dict[str, Any]]:
     """Get open orders from the CLOB."""
     from .cosigner import send_via_cosigner
 
-    path = "/data/orders"
-    params = []
+    base_path = "/data/orders"
+    params: list[tuple[str, str]] = []
     if market:
-        params.append(f"market={market}")
+        params.append(("market", market))
     if asset_id:
-        params.append(f"asset_id={asset_id}")
-    if params:
-        path += "?" + "&".join(params)
+        params.append(("asset_id", asset_id))
+    path = base_path + ("?" + urlencode(params) if params else "")
 
     headers = build_l2_headers(
         credentials["apiKey"],
@@ -145,7 +161,7 @@ async def get_open_orders(
         credentials["apiPassphrase"],
         wallet_address,
         "GET",
-        path,
+        base_path,
     )
 
     result = await send_via_cosigner(
@@ -155,6 +171,8 @@ async def get_open_orders(
         {"method": "GET", "path": path, "headers": headers},
         builder_credentials=builder_credentials,
         clob_host=clob_host,
+        execution_mode=execution_mode,
+        user_owned_clob_transport=user_owned_clob_transport,
     )
 
     if isinstance(result, list):
@@ -183,7 +201,9 @@ def _parse_tick_size(data: Any) -> str:
     """Parse CLOB tick size without substituting an unsafe default."""
     raw = data.get("minimum_tick_size") if isinstance(data, dict) else data
     if isinstance(raw, bool) or not isinstance(raw, (int, float, str)):
-        raise ValueError("CLOB tick-size response is missing a positive minimum_tick_size")
+        raise ValueError(
+            "CLOB tick-size response is missing a positive minimum_tick_size"
+        )
     try:
         tick = float(raw)
     except ValueError as exc:
@@ -274,7 +294,9 @@ async def refresh_balance_allowance(
         "GET",
         path,  # HMAC uses base path only (NO query string)
     )
-    url = f"{CLOB_HOST_V2}{path}?asset_type={asset_type}&signature_type={signature_type}"
+    url = (
+        f"{CLOB_HOST_V2}{path}?asset_type={asset_type}&signature_type={signature_type}"
+    )
     async with httpx.AsyncClient(timeout=10.0) as http:
         resp = await http.get(url, headers=headers)
         return resp.is_success, resp.status_code
@@ -299,7 +321,9 @@ async def get_balance_allowance(
         "GET",
         path,  # HMAC uses base path only
     )
-    url = f"{CLOB_HOST_V2}{path}?asset_type={asset_type}&signature_type={signature_type}"
+    url = (
+        f"{CLOB_HOST_V2}{path}?asset_type={asset_type}&signature_type={signature_type}"
+    )
     async with httpx.AsyncClient(timeout=10.0) as http:
         resp = await http.get(url, headers=headers)
         if not resp.is_success:

{polynode-0.12.1 → polynode-0.13.0}/polynode/trading/constants.py

@@ -16,6 +16,8 @@ CLOB_HOST_V2 = "https://clob.polymarket.com"
 CTF_EXCHANGE_V2 = "0xe111180000d2663c0091e4f400237545b87b996b"
 NEG_RISK_CTF_EXCHANGE_V2_A = "0xe2222d279d744050d28e00520010520000310f59"
 NEG_RISK_CTF_EXCHANGE_V2_B = "0xe2222d002000ba0053cef3375333610f64600036"
+CTF_COLLATERAL_ADAPTER = "0xAdA100Db00Ca00073811820692005400218FcE1f"
+NEG_RISK_CTF_COLLATERAL_ADAPTER = "0xadA2005600Dec949baf300f4C6120000bDB6eAab"
 
 # Token contracts
 USDC = "0x2791Bca1f2de4661ED88A30C99A7a9449Aa84174"
@@ -24,11 +26,15 @@ CTF = "0x4D97DCd97eC945f40cF65F87097ACe5EA0476045"
 # Safe derivation
 SAFE_FACTORY = "0xaacFeEa03eb1561C4e67d661e40682Bd20E3541b"
 SAFE_MULTISEND = "0xA238CBeb142c10Ef7Ad8442C6D1f9E89e07e7761"
-SAFE_INIT_CODE_HASH = "0x2bce2127ff07fb632d16c8347c4ebf501f4841168bed00d9e6ef715ddb6fcecf"
+SAFE_INIT_CODE_HASH = (
+    "0x2bce2127ff07fb632d16c8347c4ebf501f4841168bed00d9e6ef715ddb6fcecf"
+)
 
 # Proxy derivation
 PROXY_FACTORY = "0xaB45c5A4B0c941a2F231C04C3f49182e1A254052"
-PROXY_INIT_CODE_HASH = "0xd21df8dc65880a8606f09fe0ce3df9b8869287ab0b058be05aa9e8af6330a00b"
+PROXY_INIT_CODE_HASH = (
+    "0xd21df8dc65880a8606f09fe0ce3df9b8869287ab0b058be05aa9e8af6330a00b"
+)
 
 # Deposit wallet derivation (Solady ERC-1967 clones)
 DEPOSIT_WALLET_FACTORY = "0x00000000000Fb5C9ADea0298D729A0CB3823Cc07"
@@ -37,19 +43,18 @@ DEPOSIT_WALLET_IMPL = "0x58CA52ebe0DadfdF531Cde7062e76746de4Db1eB"
 # All spender contracts that need approval
 SPENDERS = [CTF_EXCHANGE, NEG_RISK_CTF_EXCHANGE, NEG_RISK_ADAPTER]
 
-# V2 spenders that need pUSD approval.
-# Order matters: [0..2] are the three spenders the V2 CLOB validates during order placement.
-# [0] CTF_EXCHANGE_V2              — standard market orders
-# [1] NEG_RISK_CTF_EXCHANGE_V2_A   — neg-risk market orders
-# [2] NEG_RISK_ADAPTER (V1!)       — V2 neg-risk delegates settlement to V1 NRA, so the CLOB
-#                                    requires pUSD allowance here even though it's a V1 contract.
-#                                    Without this, every order fails with "not enough balance / allowance".
-# [3] NEG_RISK_CTF_EXCHANGE_V2_B   — reserved variant
+# Current V2 order spenders: standard and neg-risk exchange contracts.
 V2_SPENDERS = [
     CTF_EXCHANGE_V2,
     NEG_RISK_CTF_EXCHANGE_V2_A,
-    NEG_RISK_ADAPTER,
-    NEG_RISK_CTF_EXCHANGE_V2_B,
+]
+
+# Least-privilege persistent approvals for user-owned V2 order execution.
+# Position adapters are intentionally excluded: split/merge adds only the
+# required adapter approval in the same relayed batch as each operation.
+USER_OWNED_V2_ORDER_SPENDERS = [
+    CTF_EXCHANGE_V2,
+    NEG_RISK_CTF_EXCHANGE_V2_A,
 ]
 
 # PolyUSD wrapping contracts
@@ -58,7 +63,9 @@ COLLATERAL_ONRAMP = "0x93070a847efef7f70739046a929d47a521f5b8ee"
 COLLATERAL_OFFRAMP = "0x2957922eb93258b93368531d39facca3b4dc5854"
 
 # Public attribution value signed into V2 orders; this is not a credential.
-POLYNODE_BUILDER_CODE = "0x5472fdd700a9b2b6613d103095048c92304e97215a2607f73a9d5aa3701f3f09"
+POLYNODE_BUILDER_CODE = (
+    "0x5472fdd700a9b2b6613d103095048c92304e97215a2607f73a9d5aa3701f3f09"
+)
 
 # Fee Escrow
 # V1 (USDC.e collateral, paired with the V1 CLOB)