a bjJ@sUdZddlZddlZddlZddlZddlZddlZddlmZddl m Z ddl Z ddl m Z ddlmZddlmZe dd Zd Zed Zed Zdae eed <ddZedddZd3eedddZd4eeeedddZd5ee eedddZ edddZ!edd d!Z"edd"d#Z#e$d$kre%d%e%d&ee%d'eZ&e%d(e&d)dd*d+e%d,e!Z'e%d-ej(e'd.d/e%d0e"Z)e%d-e*e)e+re,e)ne)d1e%d2dS)6u Polymarket CLOB API — authentication (Phase 1, read-only). Derives L2 API credentials (key/secret/passphrase) from the L1 wallet private key via an EIP-712 signed request, then verifies with read-only balance and position checks. No orders placed here — that's poly_trader.py (Phase 2). Auth scheme (Polymarket CLOB): L1 (wallet-signed): EIP-712 signature over a ClobAuth message, sent to GET /auth/derive-api-key to deterministically derive (not create) the account's standing API key/secret/passphrase. L2 (HMAC): subsequent requests sign `timestamp+method+path+body` with the derived secret (HMAC-SHA256, base64url), sent as POLY_SIGNATURE alongside POLY_API_KEY / POLY_PASSPHRASE / POLY_ADDRESS / POLY_TIMESTAMP. N)Path)Optional) load_dotenv)Account)encode_typed_datazE:\soccer\.envzhttps://clob.polymarket.comZPOLY_PRIVATE_KEYZPOLY_WALLET_ADDRESS _creds_cachecCsts tdttS)Nz POLY_PRIVATE_KEY not set in .env) PRIVATE_KEY RuntimeErrorrZfrom_keyr r E:\soccer\main\poly_auth.py_account)sr )returncCst}ttt}d}dddddddddgdddd ddd ddd ddgd d ddtd|j||ddd}t|d}||}|j }| dsd|}|j||t|dS)z=EIP-712 sign a ClobAuth message; returns the L1 auth headers.rnamestring)rtypeversionchainIdZuint256address timestampnoncemessage)Z EIP712DomainClobAuthrZClobAuthDomain1)rrrz4This message attests that I control the given wallet)rrrr)typesZ primaryTypeZdomainr)Z full_messageZ0x) POLY_ADDRESSPOLY_SIGNATUREPOLY_TIMESTAMPZ POLY_NONCE) r strinttimeCHAIN_IDrrZ sign_messageZ signaturehex startswith)ZaccttsrZ typed_dataZsignableZsignedsigr r r _l1_headers/s>      r&F)forcercCs^tdur|stSt}tjtd|dd}|jdkrNtd|jd|j|}|a|S)uMGET /auth/derive-api-key — L1-signed, returns {apiKey, secret, passphrase}.Nz/auth/derive-api-key)headerstimeoutzderive-api-key -> : ) rr&requestsget CLOB_BASE status_coder textjson)r'r)rcredsr r r derive_api_credsXs  r5)methodpathbodyrc Cst}tptj}ttt}||||}t |d}t || dt j}t|d} ||d|d|| dS)NZsecretzutf-8apiKeyZ passphrase)rZ POLY_API_KEYZPOLY_PASSPHRASErr)r5WALLET_ADDRESSr rrrr upperbase64Zurlsafe_b64decodehmacnewencodehashlibZsha256ZdigestZurlsafe_b64encodedecode) r7r8r9r4Z acct_addressr$msgZ secret_bytesr%Zsig_b64r r r _l2_headersfs rD)r8paramsrcCsPtd|}tjt|||dd}|jdkrHtd|d|jd|j|S)NZGETr()r)rEr*r+zGET z -> r,)rDr-r.r/r0r r1r2)r8rEr)r3r r r _getws   rFcCstdddidS)uJGET /balance-allowance — collateral (USDC) balance + exchange allowance.z/balance-allowanceZ asset_typeZ COLLATERAL)rErFr r r r get_balance_allowancesrHcCstdS)Nz/ordersrGr r r r get_open_orderssrIcCstdS)Nz/tradesrGr r r r get_tradessrJ__main__z&=== Phase 1: Polymarket auth check ===zWallet: z6 [1/3] Deriving API credentials (L1 signed request)...u OK — apiKey: r:z...z8 [2/3] Checking balance/allowance (L2 signed request)...z )indentz [3/3] Checking open orders...z open ordersu: Phase 1 OK — read-only auth verified. No orders placed.)F)r6)N)-__doc__osr r2r=r>rApathlibrtypingrr-ZdotenvrZ eth_accountrZeth_account.messagesrr/r!getenvr r;rdict__annotations__r r&boolr5rrDrFrHrIrJ__name__printr4ZbaldumpsZorders isinstancelistlenr r r r sN       ) $