@0xmonaco/core 1.0.48 → 1.0.50-develop.9c1b239

package/dist/api/margin-accounts/api.d.ts

@@ -5,6 +5,16 @@ export declare class MarginAccountsAPIImpl extends BaseAPI implements MarginAcco
     getMarginAccountSummary(marginAccountId: string, params?: GetMarginAccountSummaryParams): Promise<MarginAccountSummary>;
     getParentMarginAccountSummary(params?: GetMarginAccountSummaryParams): Promise<MarginAccountSummary>;
     getAvailableCollateral(params?: GetAvailableCollateralParams): Promise<GetAvailableCollateralResponse>;
+    /**
+     * @deprecated This endpoint overloads two unrelated operations: with
+     * `tradingPairId` it allocates into that pair's isolated risk bucket
+     * (crediting the sole open position's stored margin), without it it
+     * performs a wallet-debiting deposit to the parent margin account. Use
+     * {@link transferCollateralToRiskBucket} for bucket funding (which now
+     * applies the same position-margin credit) and
+     * {@link transferCollateralToParentMarginAccount} for wallet-to-margin
+     * deposits. Kept for backward compatibility; no removal date scheduled.
+     */
     transferCollateralToMarginAccount(marginAccountId: string, request: TransferCollateralRequest): Promise<TransferCollateralResponse>;
     transferCollateralToParentMarginAccount(request: TransferCollateralToParentMarginAccountRequest): Promise<TransferCollateralResponse>;
     transferCollateralToRiskBucket(request: TransferCollateralToRiskBucketRequest): Promise<TransferCollateralResponse>;

package/dist/api/margin-accounts/api.js

@@ -27,6 +27,16 @@ export class MarginAccountsAPIImpl extends BaseAPI {
         validate(GetAvailableCollateralSchema, params);
         return await this.makeAuthenticatedRequest(perpRoutes.marginAccounts.availableCollateral(params));
     }
+    /**
+     * @deprecated This endpoint overloads two unrelated operations: with
+     * `tradingPairId` it allocates into that pair's isolated risk bucket
+     * (crediting the sole open position's stored margin), without it it
+     * performs a wallet-debiting deposit to the parent margin account. Use
+     * {@link transferCollateralToRiskBucket} for bucket funding (which now
+     * applies the same position-margin credit) and
+     * {@link transferCollateralToParentMarginAccount} for wallet-to-margin
+     * deposits. Kept for backward compatibility; no removal date scheduled.
+     */
     async transferCollateralToMarginAccount(marginAccountId, request) {
         validate(TransferCollateralSchema, { marginAccountId, request });
         return await this.makeAuthenticatedRequest(perpRoutes.marginAccounts.transferIn(marginAccountId), {
@@ -60,6 +70,10 @@ export class MarginAccountsAPIImpl extends BaseAPI {
                 strategyKey: request.strategyKey,
                 marginMode: request.marginMode,
                 selectedTradingPairIds: request.selectedTradingPairIds,
+                // JSON.stringify drops it when omitted; an explicit false MUST reach
+                // the wire or the server applies its Adjust Margin default and every
+                // funding-loop top-up converts into initial margin requirement.
+                applyToPositionMargin: request.applyToPositionMargin,
             }),
         });
     }

package/dist/api/sweeper/api.d.ts

@@ -1,10 +1,14 @@
 /**
  * Sweeper API Implementation
  *
- * Public (unauthenticated) deposit-address registration. Every (application,
- * user) pair has a deterministic deposit address; registering the pair makes
- * the backend monitor that address and sweep every ERC20 deposit into the
- * rollup automatically, crediting the user.
+ * Authenticated deposit-address registration. Every (application, user,
+ * deposit target) triple has a deterministic deposit address; registering the
+ * triple makes the backend monitor that address and sweep every ERC20 deposit
+ * into the rollup automatically, crediting the user.
+ *
+ * The credited address is the calling session's own — it is not a request
+ * field, so this can only ever register an address the caller holds the
+ * session key for.
  *
  * The reply returns immediately with the derived address; the one-time
  * initial balance check (sweeping anything already sitting on the address)
@@ -12,27 +16,36 @@
  *
  * @example
  * ```typescript
- * const { status, sweeperAddress, initialSweepCheck } = await sdk.sweeper.register({
- *   clientId: "60eb377aab9f4ea18dcdf4747204c792",
- *   userAddress: "0x...",
- * });
+ * const { status, sweeperAddress, initialSweepCheck } = await sdk.sweeper.register();
+ *
+ * // Or ask for the margin address instead — a different address.
+ * const margin = await sdk.sweeper.register({ depositTarget: "margin" });
  * ```
  */
 import type { RegisterSweeperRequest, RegisterSweeperResponse, SweeperAPI } from "@0xmonaco/types";
 import { BaseAPI } from "../base";
 export declare class SweeperAPIImpl extends BaseAPI implements SweeperAPI {
     /**
-     * Registers an (application, user) deposit address for monitoring. Public —
-     * no auth required.
+     * Registers an (application, user, deposit target) deposit address for
+     * monitoring. Requires authentication; the user is the session's own
+     * address.
+     *
+     * `registered` means the triple was added by this call,
+     * `already_registered` that it was known before; both carry the same derived
+     * deposit address. Idempotent and safe to retry — a repeat never re-triggers
+     * the initial balance check.
      *
-     * `registered` means the pair was added by this call, `already_registered`
-     * that it was known before; both carry the same derived deposit address.
-     * Idempotent and safe to retry — a repeat never re-triggers the initial
-     * balance check.
+     * `depositTarget` defaults to `"spot"`. Because it is part of the address
+     * derivation, `"spot"` and `"margin"` return two different addresses for the
+     * same application and user, each carrying its own routing request. A
+     * `"spot"` address is never credited to margin; `"margin"` is a request
+     * rather than a guarantee, since a deposit the backend cannot route to
+     * collateral is credited to the spot wallet instead.
      *
-     * @param body - The application and user identifying the pair
+     * @param body - Optionally the destination ledger; everything else comes
+     *   from the session
      * @returns Promise resolving to the deposit address and the initial-check
      *   state
      */
-    register(body: RegisterSweeperRequest): Promise<RegisterSweeperResponse>;
+    register(body?: RegisterSweeperRequest): Promise<RegisterSweeperResponse>;
 }

package/dist/api/sweeper/api.js

@@ -1,10 +1,14 @@
 /**
  * Sweeper API Implementation
  *
- * Public (unauthenticated) deposit-address registration. Every (application,
- * user) pair has a deterministic deposit address; registering the pair makes
- * the backend monitor that address and sweep every ERC20 deposit into the
- * rollup automatically, crediting the user.
+ * Authenticated deposit-address registration. Every (application, user,
+ * deposit target) triple has a deterministic deposit address; registering the
+ * triple makes the backend monitor that address and sweep every ERC20 deposit
+ * into the rollup automatically, crediting the user.
+ *
+ * The credited address is the calling session's own — it is not a request
+ * field, so this can only ever register an address the caller holds the
+ * session key for.
  *
  * The reply returns immediately with the derived address; the one-time
  * initial balance check (sweeping anything already sitting on the address)
@@ -12,32 +16,70 @@
  *
  * @example
  * ```typescript
- * const { status, sweeperAddress, initialSweepCheck } = await sdk.sweeper.register({
- *   clientId: "60eb377aab9f4ea18dcdf4747204c792",
- *   userAddress: "0x...",
- * });
+ * const { status, sweeperAddress, initialSweepCheck } = await sdk.sweeper.register();
+ *
+ * // Or ask for the margin address instead — a different address.
+ * const margin = await sdk.sweeper.register({ depositTarget: "margin" });
  * ```
  */
+import { InvalidConfigError } from "../../errors";
 import { BaseAPI } from "../base";
 import { perpRoutes } from "../perp/routes";
+/**
+ * Ergonomic target to its wire form.
+ *
+ * The public surface is lowercase; the contract's enum is `SPOT`/`MARGIN`, and
+ * the generated wire type is `"SPOT" | "MARGIN" | null`. Serializing the
+ * ergonomic value verbatim would put the official SDK outside its own OpenAPI
+ * schema — it happens to be accepted today only because the gateway uppercases
+ * before matching, so a server tightened to the published enum would break the
+ * SDK rather than the caller.
+ *
+ * Deliberately a comparison rather than an object lookup. A lookup resolves
+ * inherited keys, so an untyped `depositTarget: "toString"` would return
+ * `Object.prototype.toString` — not `undefined`, so it passes a
+ * validity check — and `JSON.stringify` then drops the function-valued field
+ * entirely, leaving the server to apply its SPOT default and hand back a
+ * fundable address for a target that was never valid.
+ */
+function toWireDepositTarget(target) {
+    if (target === "spot") {
+        return "SPOT";
+    }
+    if (target === "margin") {
+        return "MARGIN";
+    }
+    throw new InvalidConfigError(`Invalid deposit target: ${JSON.stringify(target)}. Expected "spot" or "margin".`);
+}
 export class SweeperAPIImpl extends BaseAPI {
     /**
-     * Registers an (application, user) deposit address for monitoring. Public —
-     * no auth required.
+     * Registers an (application, user, deposit target) deposit address for
+     * monitoring. Requires authentication; the user is the session's own
+     * address.
+     *
+     * `registered` means the triple was added by this call,
+     * `already_registered` that it was known before; both carry the same derived
+     * deposit address. Idempotent and safe to retry — a repeat never re-triggers
+     * the initial balance check.
      *
-     * `registered` means the pair was added by this call, `already_registered`
-     * that it was known before; both carry the same derived deposit address.
-     * Idempotent and safe to retry — a repeat never re-triggers the initial
-     * balance check.
+     * `depositTarget` defaults to `"spot"`. Because it is part of the address
+     * derivation, `"spot"` and `"margin"` return two different addresses for the
+     * same application and user, each carrying its own routing request. A
+     * `"spot"` address is never credited to margin; `"margin"` is a request
+     * rather than a guarantee, since a deposit the backend cannot route to
+     * collateral is credited to the spot wallet instead.
      *
-     * @param body - The application and user identifying the pair
+     * @param body - Optionally the destination ledger; everything else comes
+     *   from the session
      * @returns Promise resolving to the deposit address and the initial-check
      *   state
      */
-    async register(body) {
-        return await this.makePublicRequest(perpRoutes.sweeper.register(), {
+    async register(body = {}) {
+        const { depositTarget, ...rest } = body;
+        const wireBody = depositTarget === undefined ? rest : { ...rest, depositTarget: toWireDepositTarget(depositTarget) };
+        return await this.makeAuthenticatedRequest(perpRoutes.sweeper.register(), {
             method: "POST",
-            body: JSON.stringify(body),
+            body: JSON.stringify(wireBody),
         });
     }
 }

package/dist/api/vault/api.d.ts

@@ -23,21 +23,19 @@
  * console.log(`Deposit transaction: ${result.hash}`);
  * ```
  */
+import { encodeDepositApplicationData } from "@0xmonaco/contracts";
 import type { ApplicationsAPI, Balance, DepositOptions, DepositTarget, ProfileAPI, TransactionResult, VaultAPI, WithdrawalRetryOptions, WithdrawalSource, WithdrawResult } from "@0xmonaco/types";
 import { type Address, type Chain, type PublicClient, type WalletClient } from "viem";
 import { BaseAPI } from "../base";
 /**
  * Encode the on-chain `applicationData` for a deposit.
  *
- * For `"spot"` (the default) this stays the bare `clientId` string — byte-for-byte
- * identical to the legacy encoding, so existing deposits are unchanged. For
- * `"margin"` it emits a small JSON routing hint the indexer decodes to credit the
- * deposit to margin collateral.
- *
- * MUST stay in sync with the indexer decoder in
- * `indexer/src/listeners/deposit_routing.rs`.
+ * Re-exported from `@0xmonaco/contracts` rather than defined here: the same
+ * encoding also derives sweeper deposit addresses, and two copies of it could
+ * disagree about the bytes a deposit address is a hash of. Its Rust
+ * counterpart is `utils::deposit_routing::encode_application_data`.
  */
-export declare function encodeDepositApplicationData(clientId: string, target: DepositTarget): string;
+export { encodeDepositApplicationData };
 export declare class VaultAPIImpl extends BaseAPI implements VaultAPI {
     private readonly publicClient;
     private readonly chain;

package/dist/api/vault/api.js

@@ -23,7 +23,7 @@
  * console.log(`Deposit transaction: ${result.hash}`);
  * ```
  */
-import { CONTRACT_ABIS } from "@0xmonaco/contracts";
+import { CONTRACT_ABIS, encodeDepositApplicationData } from "@0xmonaco/contracts";
 import { ApproveTokenSchema, DepositSchema, validate, WithdrawSchema } from "@0xmonaco/types";
 import { erc20Abi } from "viem";
 import { APIError, ContractError, InvalidConfigError } from "../../errors";
@@ -42,17 +42,12 @@ const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 /**
  * Encode the on-chain `applicationData` for a deposit.
  *
- * For `"spot"` (the default) this stays the bare `clientId` string — byte-for-byte
- * identical to the legacy encoding, so existing deposits are unchanged. For
- * `"margin"` it emits a small JSON routing hint the indexer decodes to credit the
- * deposit to margin collateral.
- *
- * MUST stay in sync with the indexer decoder in
- * `indexer/src/listeners/deposit_routing.rs`.
+ * Re-exported from `@0xmonaco/contracts` rather than defined here: the same
+ * encoding also derives sweeper deposit addresses, and two copies of it could
+ * disagree about the bytes a deposit address is a hash of. Its Rust
+ * counterpart is `utils::deposit_routing::encode_application_data`.
  */
-export function encodeDepositApplicationData(clientId, target) {
-    return target === "margin" ? JSON.stringify({ clientId, depositTarget: "MARGIN" }) : clientId;
-}
+export { encodeDepositApplicationData };
 export class VaultAPIImpl extends BaseAPI {
     publicClient;
     chain;

package/dist/api/websocket/websocket.js

@@ -7,8 +7,6 @@ const CONNECTION_TIMEOUT = 10000;
 const HEARTBEAT_INTERVAL = 15000;
 const MAX_RECONNECT_DELAY = 30000;
 const RECONNECT_BASE_DELAY = 1000;
-const TWAP_ORDER_STATES = ["PENDING", "ACTIVE", "COMPLETED", "CANCELLED"];
-const INSTRUMENT_CHANGE_KINDS = ["listing", "delisting", "halt", "unhalt", "config_change"];
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -310,7 +308,14 @@ function parseInstrumentEventData(raw) {
     }
     const data = keysToCamelCase(raw);
     return {
-        change: readEnum(data, "change", INSTRUMENT_CHANGE_KINDS),
+        // Read as a plain non-empty string, not matched against a value list: an
+        // unrecognized change kind must not throw, because the throw is swallowed
+        // by the message-handler catch and takes the whole frame with it — and
+        // every instrument frame carries the market's FULL current config, so a
+        // dropped frame can hide a market going inactive behind an unfamiliar
+        // label. The declared `InstrumentChangeKind` union documents the values
+        // the server sends today, not a runtime guarantee.
+        change: readString(data, "change"),
         tradingPairId: readString(data, "tradingPairId"),
         symbol: readString(data, "symbol"),
         isActive: readBoolean(data, "isActive"),
@@ -373,9 +378,16 @@ function parseTwapOrderEvent(rawData) {
     if (typeof twapOrderId !== "string" || twapOrderId.length === 0) {
         throw new Error("Invalid TWAP order event: twapOrderId must be a non-empty string");
     }
+    // `state` is required, so an absent/non-string/empty one is a malformed
+    // frame — but an unrecognized VALUE is passed through untouched. Matching it
+    // against a value list would throw, the message-handler catch would swallow
+    // the throw, and the whole update would be lost: a TWAP order whose state
+    // this SDK version predates would stop reporting its fills entirely
+    // (0XM-2627's failure mode). The declared `TwapOrderState` union documents
+    // the values the server sends today, not a runtime guarantee.
     const state = data.state;
-    if (typeof state !== "string" || !TWAP_ORDER_STATES.includes(state)) {
-        throw new Error(`Invalid TWAP order event: state must be one of ${TWAP_ORDER_STATES.join(", ")}`);
+    if (typeof state !== "string" || state.length === 0) {
+        throw new Error("Invalid TWAP order event: state must be a non-empty string");
     }
     return {
         eventType: "twap_order_update",
@@ -553,6 +565,21 @@ export function createMonacoWebSocket(baseUrl, options = {}) {
         return frameChannel === subscriptionChannel || frameChannel.startsWith(`${subscriptionChannel}:`);
     };
     const routeMessage = (msg) => {
+        if (msg.type === "Error") {
+            // Connection-scoped, not channel-scoped: an Error frame matches no
+            // subscription, so without this it reached no consumer at all and a
+            // failed subscribe / invalidated session / unreadable subscribe-time
+            // snapshot was silent. `code` is passed through whatever its value —
+            // a code added server-side after this SDK shipped must still reach the
+            // app rather than be dropped for being unrecognized (0XM-2627's
+            // leniency contract) — but a frame missing either field is malformed,
+            // and synthesizing the missing half would send the app down a branch on
+            // data the server never sent.
+            if (typeof msg.code === "string" && typeof msg.message === "string") {
+                options.onError?.({ code: msg.code, message: msg.message });
+            }
+            return;
+        }
         if (!msg.channel)
             return;
         if (msg.type === "Snapshot") {
@@ -816,7 +843,15 @@ export function createMonacoWebSocket(baseUrl, options = {}) {
                 // Concrete price series of this candle (`trade`/`mark`). Present on
                 // every current frame; a wildcard (`*`) subscriber reads it to tell the
                 // two streams apart. Omitted when a legacy frame carries no `price_type`.
-                const priceType = data.price_type === "trade" || data.price_type === "mark" ? data.price_type : undefined;
+                //
+                // Passed through rather than matched against the two known values: a
+                // wildcard subscription accepts any suffix, so a series added
+                // server-side after this version reaches this parser, and reporting it
+                // as `undefined` would leave a wildcard subscriber unable to do the one
+                // thing the field exists for. Only a missing or non-string value is
+                // treated as absent.
+                const rawPriceType = data.price_type;
+                const priceType = typeof rawPriceType === "string" && rawPriceType !== "" ? rawPriceType : undefined;
                 const event = {
                     // `trading_pair_id` is the pair UUID; `symbol` is the display string.
                     // `tradingPairId` must carry the UUID (the symbol lives in `candlestick.s`).
@@ -887,12 +922,17 @@ export function createMonacoWebSocket(baseUrl, options = {}) {
                         token: (movementData.token ?? movementData.token_address),
                         tokenAddress: (movementData.token ?? movementData.token_address),
                         assetId: movementData.asset_id,
+                        symbol: movementData.symbol,
                         amount: String(movementData.amount),
                         amountRaw: movementData.amount_raw,
                         balanceBefore: movementData.balance_before != null ? String(movementData.balance_before) : undefined,
+                        balanceBeforeRaw: movementData.balance_before_raw,
                         balanceAfter: movementData.balance_after != null ? String(movementData.balance_after) : undefined,
+                        balanceAfterRaw: movementData.balance_after_raw,
                         lockedBefore: movementData.locked_before != null ? String(movementData.locked_before) : undefined,
+                        lockedBeforeRaw: movementData.locked_before_raw,
                         lockedAfter: movementData.locked_after != null ? String(movementData.locked_after) : undefined,
+                        lockedAfterRaw: movementData.locked_after_raw,
                         referenceId: movementData.reference_id,
                         referenceType: movementData.reference_type,
                         description: movementData.description,

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@0xmonaco/core",
-	"version": "1.0.48",
+	"version": "1.0.50-develop.9c1b239",
 	"type": "module",
 	"homepage": "https://docs.0xmonaco.com/sdk/typescript",
 	"main": "./dist/index.js",
@@ -19,8 +19,8 @@
 		"viem": "^2.45.2"
 	},
 	"dependencies": {
-		"@0xmonaco/contracts": "1.0.48",
-		"@0xmonaco/types": "1.0.48",
+		"@0xmonaco/contracts": "1.0.50-develop.9c1b239",
+		"@0xmonaco/types": "1.0.50-develop.9c1b239",
 		"@noble/curves": "^1.9.1",
 		"@noble/hashes": "^1.8.0",
 		"http-status-codes": "^2.3.0"