@0xmonaco/core 0.8.8 → 0.8.10

package/dist/api/whitelist/api.js

@@ -0,0 +1,32 @@
+/**
+ * Whitelist API Implementation
+ *
+ * Public (unauthenticated) whitelist/waitlist application submission. The
+ * server validates and de-duplicates by wallet address and email, creating an
+ * inactive user pending manual approval. This is an onboarding endpoint, not a
+ * trading operation.
+ *
+ * @example
+ * ```typescript
+ * const { message, user_id } = await sdk.whitelist.submit({
+ *   wallet_address: "0x...",
+ *   email: "user@example.com",
+ * });
+ * ```
+ */
+import { BaseAPI } from "../base";
+import { perpRoutes } from "../perp/routes";
+export class WhitelistAPIImpl extends BaseAPI {
+    /**
+     * Submits a whitelist (waitlist) application. Public — no auth required.
+     *
+     * @param body - Applicant details
+     * @returns Promise resolving to the status message and created user id
+     */
+    async submit(body) {
+        return await this.makePublicRequest(perpRoutes.whitelist.submit(), {
+            method: "POST",
+            body: JSON.stringify(body),
+        });
+    }
+}

package/dist/api/whitelist/index.d.ts

@@ -0,0 +1 @@
+export { WhitelistAPIImpl } from "./api";

package/dist/api/whitelist/index.js

@@ -0,0 +1 @@
+export { WhitelistAPIImpl } from "./api";

package/dist/api/withdrawals/api.d.ts

@@ -0,0 +1,15 @@
+import type { InitiateWithdrawalRequest, WithdrawalResponse, WithdrawalsAPI } from "@0xmonaco/types";
+import { BaseAPI } from "../base";
+/**
+ * Low-level withdrawals client.
+ *
+ * `initiateWithdrawal` debits the caller's balance via the matching engine and
+ * returns the target vault address plus pre-signed `executeSignedWithdrawal`
+ * calldata; `getWithdrawal` re-fetches that calldata for a previously-initiated
+ * index. Neither submits on-chain — use the high-level vault API for the flow
+ * that also broadcasts the transaction.
+ */
+export declare class WithdrawalsAPIImpl extends BaseAPI implements WithdrawalsAPI {
+    initiateWithdrawal(request: InitiateWithdrawalRequest): Promise<WithdrawalResponse>;
+    getWithdrawal(withdrawalIndex: number): Promise<WithdrawalResponse>;
+}

package/dist/api/withdrawals/api.js

@@ -0,0 +1,27 @@
+import { BaseAPI } from "../base";
+import { perpRoutes } from "../perp";
+/**
+ * Low-level withdrawals client.
+ *
+ * `initiateWithdrawal` debits the caller's balance via the matching engine and
+ * returns the target vault address plus pre-signed `executeSignedWithdrawal`
+ * calldata; `getWithdrawal` re-fetches that calldata for a previously-initiated
+ * index. Neither submits on-chain — use the high-level vault API for the flow
+ * that also broadcasts the transaction.
+ */
+export class WithdrawalsAPIImpl extends BaseAPI {
+    async initiateWithdrawal(request) {
+        return this.makeAuthenticatedRequest(perpRoutes.withdrawals.initiate(), {
+            method: "POST",
+            body: JSON.stringify({
+                asset_id: request.assetId,
+                amount: request.amount,
+                destination: request.destination,
+            }),
+        });
+    }
+    async getWithdrawal(withdrawalIndex) {
+        // Public lookup — no auth required.
+        return this.makePublicRequest(perpRoutes.withdrawals.byIndex(withdrawalIndex));
+    }
+}

package/dist/api/withdrawals/index.d.ts

@@ -0,0 +1 @@
+export * from "./api";

package/dist/api/withdrawals/index.js

@@ -0,0 +1 @@
+export * from "./api";

package/dist/coverage.d.ts

@@ -0,0 +1,85 @@
+/** operationId → the @0xmonaco/core client method that covers it. */
+export declare const COVERED: {
+    add_position_margin: string;
+    attach_position_tp_sl: string;
+    batch_cancel_all: string;
+    batch_cancel_all_by_pair: string;
+    batch_cancel_orders: string;
+    batch_create_orders: string;
+    batch_replace_orders: string;
+    cancel_conditional_order: string;
+    cancel_order: string;
+    close_position: string;
+    create_challenge: string;
+    create_delegated_session: string;
+    create_order: string;
+    create_sub_account_limit: string;
+    delete_sub_account_limit: string;
+    get_application_config: string;
+    get_application_stats: string;
+    get_available_collateral: string;
+    get_candles: string;
+    get_funding_state: string;
+    get_index_price: string;
+    get_margin_account_movements: string;
+    get_margin_account_summary: string;
+    get_mark_price: string;
+    get_market_metadata: string;
+    get_open_interest: string;
+    get_order_by_id: string;
+    get_orderbook_snapshot: string;
+    get_orders: string;
+    get_perp_market_config: string;
+    get_perp_market_summary: string;
+    get_portfolio_chart: string;
+    get_portfolio_stats: string;
+    get_position: string;
+    get_position_risk: string;
+    get_screener: string;
+    get_sub_account_limits: string;
+    get_trade_by_id: string;
+    get_trades: string;
+    get_trading_pair_by_id: string;
+    get_user_balance_by_asset: string;
+    get_user_balances: string;
+    get_user_movements: string;
+    get_user_profile: string;
+    get_user_trades: string;
+    get_withdrawal: string;
+    initiate_withdrawal: string;
+    list_application_balances: string;
+    list_application_movements: string;
+    list_application_orders: string;
+    list_application_users: string;
+    list_conditional_orders: string;
+    list_delegated_agent_owners: string;
+    list_delegated_agents: string;
+    list_funding_history: string;
+    list_funding_payments: string;
+    list_margin_accounts: string;
+    list_position_history: string;
+    list_positions: string;
+    list_sub_accounts_with_balances: string;
+    list_trading_pairs: string;
+    mint_tokens: string;
+    reduce_position_margin: string;
+    refresh_session: string;
+    replace_order: string;
+    revoke_delegated_agent: string;
+    revoke_session: string;
+    simulate_auto_margin_order_risk: string;
+    simulate_fees: string;
+    simulate_order_risk: string;
+    submit_whitelist: string;
+    transfer_collateral_from_margin_account: string;
+    transfer_collateral_to_auto_margin_account: string;
+    transfer_collateral_to_margin_account: string;
+    update_sub_account_limit: string;
+    upsert_delegated_agent: string;
+    verify_signature: string;
+};
+/** operationId → reason it is intentionally not covered by @0xmonaco/core. */
+export declare const INTENTIONALLY_EXCLUDED: {
+    authenticate_backend: string;
+    health_check: string;
+};

package/dist/coverage.js

@@ -0,0 +1,85 @@
+/** operationId → the @0xmonaco/core client method that covers it. */
+export const COVERED = {
+    add_position_margin: "addPositionMargin",
+    attach_position_tp_sl: "attachPositionTpSl",
+    batch_cancel_all: "batchCancelAll",
+    batch_cancel_all_by_pair: "batchCancelAll (with tradingPairId)",
+    batch_cancel_orders: "batchCancel",
+    batch_create_orders: "batchCreate",
+    batch_replace_orders: "batchReplace",
+    cancel_conditional_order: "cancelConditionalOrder",
+    cancel_order: "cancelOrder",
+    close_position: "closePosition",
+    create_challenge: "createChallenge",
+    create_delegated_session: "createDelegatedSession",
+    create_order: "placeLimitOrder / placeMarketOrder",
+    create_sub_account_limit: "subAccounts.createLimit",
+    delete_sub_account_limit: "subAccounts.deleteLimit",
+    get_application_config: "getApplicationConfig",
+    get_application_stats: "getApplicationStats",
+    get_available_collateral: "getAvailableCollateral",
+    get_candles: "getCandlesticks",
+    get_funding_state: "getFundingState",
+    get_index_price: "getIndexPrice",
+    get_margin_account_movements: "getMarginAccountMovements",
+    get_margin_account_summary: "getMarginAccountSummary",
+    get_mark_price: "getMarkPrice",
+    get_market_metadata: "getMarketMetadata",
+    get_open_interest: "getOpenInterest",
+    get_order_by_id: "getOrder",
+    get_orderbook_snapshot: "getOrderbook",
+    get_orders: "getPaginatedOrders",
+    get_perp_market_config: "getPerpMarketConfig",
+    get_perp_market_summary: "getPerpMarketSummary",
+    get_portfolio_chart: "getPortfolioChart",
+    get_portfolio_stats: "getPortfolioStats",
+    get_position: "getPosition",
+    get_position_risk: "getPositionRisk",
+    get_screener: "getScreener",
+    get_sub_account_limits: "subAccounts.getLimits",
+    get_trade_by_id: "getTradeById",
+    get_trades: "getTrades",
+    get_trading_pair_by_id: "getTradingPair",
+    get_user_balance_by_asset: "getUserBalanceByAssetId",
+    get_user_balances: "getUserBalances",
+    get_user_movements: "getPaginatedUserMovements",
+    get_user_profile: "getProfile",
+    get_user_trades: "getUserTrades",
+    get_withdrawal: "getWithdrawal",
+    initiate_withdrawal: "initiateWithdrawal",
+    list_application_balances: "listApplicationBalances",
+    list_application_movements: "listApplicationMovements",
+    list_application_orders: "listApplicationOrders",
+    list_application_users: "listApplicationUsers",
+    list_conditional_orders: "listConditionalOrders",
+    list_delegated_agent_owners: "listDelegatedOwners",
+    list_delegated_agents: "listDelegatedAgents",
+    list_funding_history: "listFundingHistory",
+    list_funding_payments: "listFundingPayments",
+    list_margin_accounts: "listMarginAccounts",
+    list_position_history: "listPositionHistory",
+    list_positions: "listPositions",
+    list_sub_accounts_with_balances: "subAccounts.list",
+    list_trading_pairs: "getPaginatedTradingPairs",
+    mint_tokens: "faucet.mint",
+    reduce_position_margin: "reducePositionMargin",
+    refresh_session: "refreshSession",
+    replace_order: "replaceOrder",
+    revoke_delegated_agent: "revokeDelegatedAgent",
+    revoke_session: "revokeSession",
+    simulate_auto_margin_order_risk: "simulateAutoMarginOrderRisk",
+    simulate_fees: "simulateFees",
+    simulate_order_risk: "simulateOrderRisk",
+    submit_whitelist: "whitelist.submit",
+    transfer_collateral_from_margin_account: "transferCollateralFromMarginAccount",
+    transfer_collateral_to_auto_margin_account: "transferCollateralToAutoMarginAccount",
+    transfer_collateral_to_margin_account: "transferCollateralToMarginAccount",
+    update_sub_account_limit: "subAccounts.updateLimit",
+    upsert_delegated_agent: "upsertDelegatedAgent",
+    verify_signature: "verifySignature",
+};
+/** operationId → reason it is intentionally not covered by @0xmonaco/core. */
+export const INTENTIONALLY_EXCLUDED = {
+    authenticate_backend: "Backend auth is header-based via setServerKey()/the x-server-key header, not an endpoint method (MON-1486).",
+    health_check: "Infrastructure liveness probe (GET /health); not part of the data SDK surface.",
+};

package/dist/sdk.d.ts

@@ -1,4 +1,4 @@
-import type { ApplicationsAPI, AuthAPI, AuthState, DelegatedAgentsAPI, FeesAPI, MarginAccountsAPI, MarketAPI, MonacoSDK, Network, PositionsAPI, ProfileAPI, SDKConfig, TradingAPI, VaultAPI } from "@0xmonaco/types";
+import type { ApplicationsAPI, AuthAPI, AuthState, DelegatedAgentsAPI, FaucetAPI, FeesAPI, MarginAccountsAPI, MarketAPI, MonacoSDK, Network, PositionsAPI, ProfileAPI, SDKConfig, SubAccountsAPI, TradingAPI, VaultAPI, WhitelistAPI, WithdrawalsAPI } from "@0xmonaco/types";
 import { type PublicClient, type TransactionReceipt, type WalletClient } from "viem";
 import { type MonacoWebSocket, OrderbookAPIImpl, TradesAPIImpl } from "./api";
 export declare class MonacoSDKImpl implements MonacoSDK {
@@ -7,10 +7,14 @@ export declare class MonacoSDKImpl implements MonacoSDK {
     applications: ApplicationsAPI;
     fees: FeesAPI;
     vault: VaultAPI;
+    withdrawals: WithdrawalsAPI;
     trading: TradingAPI;
     market: MarketAPI;
     marginAccounts: MarginAccountsAPI;
     positions: PositionsAPI;
+    subAccounts: SubAccountsAPI;
+    faucet: FaucetAPI;
+    whitelist: WhitelistAPI;
     profile: ProfileAPI;
     orderbook: OrderbookAPIImpl;
     trades: TradesAPIImpl;
@@ -25,6 +29,24 @@ export declare class MonacoSDKImpl implements MonacoSDK {
      * the WebSocket client.
      */
     private propagateSession;
+    /**
+     * Set (or clear) the application secret key used for backend-authenticated
+     * requests (those annotated `#[require_backend]` on the gateway, e.g. the
+     * `applications` reporting endpoints).
+     *
+     * The raw `sk_...` key is sent in the `x-server-key` header on each such
+     * request. This is independent of {@link login}/session auth — a client may
+     * hold both a session and a server key at once.
+     *
+     * @param serverKey - The application secret key (`sk_...`), or `undefined` to clear.
+     *
+     * @example
+     * ```typescript
+     * sdk.setServerKey("sk_live_...");
+     * const orders = await sdk.applications.listApplicationOrders({ status: "FILLED" });
+     * ```
+     */
+    setServerKey(serverKey: string | undefined): void;
     /** Extract the session keypair from an auth state. */
     private sessionFromAuthState;
     constructor(cfg: SDKConfig);
@@ -63,6 +85,15 @@ export declare class MonacoSDKImpl implements MonacoSDK {
     login(clientId: string, options?: {
         connectWebSocket?: boolean;
     }): Promise<AuthState>;
+    /**
+     * Create and adopt an owner-scoped delegated session.
+     *
+     * This must be called while authenticated as the agent wallet. The delegated
+     * session uses a fresh ed25519 keypair generated locally; the current agent
+     * session signs the registration request, and subsequent SDK calls use the
+     * delegated session keypair.
+     */
+    loginAsDelegatedOwner(ownerUserId: string): Promise<AuthState>;
     /**
      * Get the current authentication state
      *

package/dist/sdk.js

@@ -4,13 +4,18 @@ import { sei, seiTestnet } from "viem/chains";
 import { ApplicationsAPIImpl, createMonacoWebSocket, OrderbookAPIImpl, TradesAPIImpl } from "./api";
 import { AuthAPIImpl } from "./api/auth";
 import { DelegatedAgentsAPIImpl } from "./api/delegated-agents";
+import { FaucetAPIImpl } from "./api/faucet";
 import { FeesAPIImpl } from "./api/fees";
 import { MarginAccountsAPIImpl } from "./api/margin-accounts";
 import { MarketAPIImpl } from "./api/market";
 import { PositionsAPIImpl } from "./api/positions";
 import { ProfileAPIImpl } from "./api/profile";
+import { SubAccountsAPIImpl } from "./api/sub-accounts";
 import { TradingAPIImpl } from "./api/trading";
 import { VaultAPIImpl } from "./api/vault";
+import { WhitelistAPIImpl } from "./api/whitelist";
+import { WithdrawalsAPIImpl } from "./api/withdrawals";
+import { generateSessionKeypair, privateKeyHex, publicKeyHex } from "./crypto/session";
 import { APIError, InvalidConfigError, InvalidStateError } from "./errors";
 import { resolveApiUrl, resolveWsUrl } from "./networks";
 /** Validate a user-supplied URL override, returning it unchanged when valid. */
@@ -29,10 +34,14 @@ export class MonacoSDKImpl {
     applications;
     fees;
     vault;
+    withdrawals;
     trading;
     market;
     marginAccounts;
     positions;
+    subAccounts;
+    faucet;
+    whitelist;
     profile;
     orderbook;
     trades;
@@ -52,15 +61,54 @@ export class MonacoSDKImpl {
         this.applications.setSessionKeypair(credentials);
         this.fees.setSessionKeypair(credentials);
         this.vault.setSessionKeypair(credentials);
+        this.withdrawals.setSessionKeypair(credentials);
         this.trading.setSessionKeypair(credentials);
         this.market.setSessionKeypair(credentials);
         this.marginAccounts.setSessionKeypair(credentials);
         this.positions.setSessionKeypair(credentials);
+        this.subAccounts.setSessionKeypair(credentials);
+        this.faucet.setSessionKeypair(credentials);
+        this.whitelist.setSessionKeypair(credentials);
         this.profile.setSessionKeypair(credentials);
         this.orderbook.setSessionKeypair(credentials);
         this.trades.setSessionKeypair(credentials);
         this.ws.setSessionKeypair(credentials);
     }
+    /**
+     * Set (or clear) the application secret key used for backend-authenticated
+     * requests (those annotated `#[require_backend]` on the gateway, e.g. the
+     * `applications` reporting endpoints).
+     *
+     * The raw `sk_...` key is sent in the `x-server-key` header on each such
+     * request. This is independent of {@link login}/session auth — a client may
+     * hold both a session and a server key at once.
+     *
+     * @param serverKey - The application secret key (`sk_...`), or `undefined` to clear.
+     *
+     * @example
+     * ```typescript
+     * sdk.setServerKey("sk_live_...");
+     * const orders = await sdk.applications.listApplicationOrders({ status: "FILLED" });
+     * ```
+     */
+    setServerKey(serverKey) {
+        this.auth.setServerKey(serverKey);
+        this.delegatedAgents.setServerKey(serverKey);
+        this.applications.setServerKey(serverKey);
+        this.fees.setServerKey(serverKey);
+        this.vault.setServerKey(serverKey);
+        this.withdrawals.setServerKey(serverKey);
+        this.trading.setServerKey(serverKey);
+        this.market.setServerKey(serverKey);
+        this.marginAccounts.setServerKey(serverKey);
+        this.positions.setServerKey(serverKey);
+        this.subAccounts.setServerKey(serverKey);
+        this.faucet.setServerKey(serverKey);
+        this.whitelist.setServerKey(serverKey);
+        this.profile.setServerKey(serverKey);
+        this.orderbook.setServerKey(serverKey);
+        this.trades.setServerKey(serverKey);
+    }
     /** Extract the session keypair from an auth state. */
     sessionFromAuthState(authState) {
         return {
@@ -110,11 +158,15 @@ export class MonacoSDKImpl {
         this.market = new MarketAPIImpl(apiUrl);
         this.marginAccounts = new MarginAccountsAPIImpl(apiUrl);
         this.positions = new PositionsAPIImpl(apiUrl);
+        this.subAccounts = new SubAccountsAPIImpl(apiUrl);
+        this.faucet = new FaucetAPIImpl(apiUrl);
+        this.whitelist = new WhitelistAPIImpl(apiUrl);
         this.auth = new AuthAPIImpl(this.walletClient, this.chain, apiUrl);
         this.delegatedAgents = new DelegatedAgentsAPIImpl(apiUrl);
         this.fees = new FeesAPIImpl(apiUrl);
         this.profile = new ProfileAPIImpl(apiUrl);
         this.vault = new VaultAPIImpl(this.publicClient, this.walletClient, this.chain, this.applications, this.profile, apiUrl);
+        this.withdrawals = new WithdrawalsAPIImpl(apiUrl);
         this.trading = new TradingAPIImpl(apiUrl);
         this.orderbook = new OrderbookAPIImpl(apiUrl);
         this.trades = new TradesAPIImpl(apiUrl);
@@ -163,6 +215,42 @@ export class MonacoSDKImpl {
         }
         return this.authState;
     }
+    /**
+     * Create and adopt an owner-scoped delegated session.
+     *
+     * This must be called while authenticated as the agent wallet. The delegated
+     * session uses a fresh ed25519 keypair generated locally; the current agent
+     * session signs the registration request, and subsequent SDK calls use the
+     * delegated session keypair.
+     */
+    async loginAsDelegatedOwner(ownerUserId) {
+        if (!this.authState) {
+            throw new APIError("No active agent session to create delegated session", {
+                endpoint: "delegated-agents/sessions",
+                statusCode: StatusCodes.UNAUTHORIZED,
+            });
+        }
+        const keypair = generateSessionKeypair();
+        const session = {
+            publicKey: publicKeyHex(keypair),
+            privateKey: privateKeyHex(keypair),
+        };
+        const delegatedSession = await this.delegatedAgents.createDelegatedSession({
+            ownerUserId,
+            sessionPublicKey: session.publicKey,
+        });
+        this.authState = {
+            sessionPublicKey: session.publicKey,
+            sessionPrivateKey: session.privateKey,
+            expiresAt: delegatedSession.expires_at,
+            user: {
+                id: delegatedSession.owner_user_id,
+                address: delegatedSession.agent_address,
+            },
+        };
+        this.propagateSession(this.sessionFromAuthState(this.authState));
+        return this.authState;
+    }
     /**
      * Get the current authentication state
      *

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@0xmonaco/core",
-	"version": "0.8.8",
+	"version": "0.8.10",
 	"type": "module",
 	"repository": {
 		"type": "git",
@@ -23,8 +23,8 @@
 		"viem": "^2.45.2"
 	},
 	"dependencies": {
-		"@0xmonaco/contracts": "0.8.8",
-		"@0xmonaco/types": "0.8.8",
+		"@0xmonaco/contracts": "0.8.10",
+		"@0xmonaco/types": "0.8.10",
 		"@noble/curves": "^1.9.1",
 		"@noble/hashes": "^1.8.0",
 		"http-status-codes": "^2.3.0"