Add the ITN client (mina_sdk.itn) and execute_query

[dkijania]

Summary

This PR adds the ITN client to the Python SDK. With it, all four SDKs implement both parts of mina-sdk-spec: the daemon API and the ITN API.

• ITN client: the new package mina_sdk.itn has ItnClient, ItnKey, the input types and the errors. It uses the documents of spec/itn-operations.graphql. The protocol is the same as in Rust, Go and JS:
  • ed25519 signatures;
  • the auth handshake;
  • sequence numbers, with one request at a time;
  • after HTTP 412, a new auth and one repeat of the request;
  • no repeat after a transport error.
• Dependency: a new optional extra, itn, adds cryptography. Without the extra, import mina_sdk.itn fails with an error that tells you to install mina-sdk[itn]. The daemon client does not need the extra.
• Thread safety: the client is safe to share between threads; a lock sends one request at a time.
• execute_query: MinaDaemonClient.execute_query runs a custom document, as the custom-query methods of the other SDKs do. SPEC.md (v0.1.1) names it.
• Spec copy: spec/ is mina-sdk-spec v0.1.1. That version of ITN.md still shows "–" in the Python column. Spec v0.1.2 will add the Python ITN names, and then I re-sync the four SDKs.

Test plan

• ruff, mypy, bandit: pass. 71 unit tests pass on Python 3.12 and 3.10.

• tests/test_itn.py: a mock ITN server that verifies each signature, the UUID and the sequence number as the daemon does. It covers:

  • the handshake;
  • the wrap of the sequence number at 2^16;
  • 412 recovery;
  • 412 again after a new auth;
  • 401;
  • no repeat after a transport error;
  • the HTTP error cause;
  • the variables of each operation.

  As a check, I changed the client to pack the sequence number little-endian, and the tests failed.

• Conformance: tests/test_spec.py also checks the ITN documents against spec/itn-operations.graphql.

• Live, against devnet daemon 4.0.0-6965b50 with ITN_FEATURES=1: the 7 tests of tests/test_itn_integration.py pass. They are the same 7 tests as in the other SDKs. The slotsWon test accepts the GraphQL error that the daemon gives while its VRF evaluation runs, as the Go test does.

🤖 Generated with Claude Code

https://claude.ai/code/session_01E9VzXg2bJYonrX5xBfmLMr