@0xmonaco/core 1.0.70 → 1.0.73

package/dist/api/auth/api.d.ts

@@ -153,11 +153,13 @@ export declare class AuthAPIImpl extends BaseAPI implements AuthAPI {
      */
     verifySignature(address: string, signature: string, nonce: string, clientId: string, session: SessionCredentials, referralCode?: string): Promise<AuthState>;
     /**
-     * Extends the current session's expiry.
+     * Refreshes the current session's expiry.
      *
      * The request is signed with the active session key (set via
-     * {@link setSessionKeypair}); the server bumps the session's `expiresAt`.
-     * No new credential is issued — the same keypair keeps working.
+     * {@link setSessionKeypair}). For a delegated session, the delegation must
+     * still be active; the returned expiry is capped by its current expiry and
+     * may move earlier if the owner shortened the delegation. No new credential
+     * is issued — the same keypair keeps working.
      *
      * @returns Promise resolving to the new expiry
      * @throws {APIError} When refresh fails (e.g. session expired or revoked)

package/dist/api/auth/api.js

@@ -237,11 +237,13 @@ export class AuthAPIImpl extends BaseAPI {
         };
     }
     /**
-     * Extends the current session's expiry.
+     * Refreshes the current session's expiry.
      *
      * The request is signed with the active session key (set via
-     * {@link setSessionKeypair}); the server bumps the session's `expiresAt`.
-     * No new credential is issued — the same keypair keeps working.
+     * {@link setSessionKeypair}). For a delegated session, the delegation must
+     * still be active; the returned expiry is capped by its current expiry and
+     * may move earlier if the owner shortened the delegation. No new credential
+     * is issued — the same keypair keeps working.
      *
      * @returns Promise resolving to the new expiry
      * @throws {APIError} When refresh fails (e.g. session expired or revoked)

package/dist/api/base.d.ts

@@ -34,10 +34,13 @@ export declare abstract class BaseAPI {
     /** Application secret key (`sk_...`) sent in the `x-server-key` header for backend-authenticated requests. */
     protected serverKey?: string;
     private requestSigning;
+    private redirectPolicy?;
     /** Server time learned from responses; signing timestamps are read from it. */
     protected serverClock: ServerClock;
     /** Opt in only after the target server supports RFC 9421. No automatic downgrade. */
     setRequestSigning(protocol: RequestSigning): void;
+    /** Refuse cross-origin and same-origin redirects when set to `error`. */
+    setRedirectPolicy(policy: "error" | undefined): void;
     protected retryOptions: Required<RetryOptions>;
     /** Share one server clock across API instances so any response calibrates all of them. */
     setServerClock(clock: ServerClock): void;

package/dist/api/base.js

@@ -44,6 +44,7 @@ export class BaseAPI {
     /** Application secret key (`sk_...`) sent in the `x-server-key` header for backend-authenticated requests. */
     serverKey;
     requestSigning = "legacy";
+    redirectPolicy;
     /** Server time learned from responses; signing timestamps are read from it. */
     serverClock = new ServerClock();
     /** Opt in only after the target server supports RFC 9421. No automatic downgrade. */
@@ -52,6 +53,10 @@ export class BaseAPI {
             throw new Error("Unsupported request signing protocol");
         this.requestSigning = protocol;
     }
+    /** Refuse cross-origin and same-origin redirects when set to `error`. */
+    setRedirectPolicy(policy) {
+        this.redirectPolicy = policy;
+    }
     retryOptions;
     /** Share one server clock across API instances so any response calibrates all of them. */
     setServerClock(clock) {
@@ -186,7 +191,7 @@ export class BaseAPI {
         // authenticated, backend, and public request paths.
         const headers = { "User-Agent": SDK_USER_AGENT, ...options.headers };
         try {
-            response = await fetch(url, { ...options, headers });
+            response = await fetch(url, { ...options, headers, ...(this.redirectPolicy ? { redirect: this.redirectPolicy } : {}) });
         }
         catch (error) {
             throw new APIError(`Network request failed for ${endpoint}`, {

package/dist/api/buildercodes/api.d.ts

@@ -19,7 +19,7 @@
  * console.log(`Now tradeable: ${result.tradingBalance}`);
  * ```
  */
-import type { BuildercodesAPI, ClaimBuildercodeRewardsParams, ClaimBuildercodeRewardsResponse, GetBuildercodePayoutSummaryResponse, GetBuildercodeRewardsBalanceResponse, GetBuildercodesConfigResponse, ListBuildercodePayoutsParams, ListBuildercodePayoutsResponse } from "@0xmonaco/types";
+import type { BuildercodesAPI, ClaimBuildercodeRewardsParams, ClaimBuildercodeRewardsResponse, GetBuildercodePayoutSummaryResponse, GetBuildercodeRewardsBalanceResponse, GetBuildercodesConfigResponse, ListBuildercodePayoutsParams, ListBuildercodePayoutsResponse, ListBuilderFeeChangesParams, ListBuilderFeeChangesResponse, SetBuilderFeeParams, SetBuilderFeeResponse } from "@0xmonaco/types";
 import { BaseAPI } from "../base";
 export declare class BuildercodesAPIImpl extends BaseAPI implements BuildercodesAPI {
     /**
@@ -30,11 +30,15 @@ export declare class BuildercodesAPIImpl extends BaseAPI implements Buildercodes
      * application's configured payout address.
      */
     getConfig(): Promise<GetBuildercodesConfigResponse>;
+    /** Set this frontend's builder fee. */
+    setBuilderFee(params: SetBuilderFeeParams): Promise<SetBuilderFeeResponse>;
+    /** List this frontend's builder-fee audit log, newest first. */
+    listBuilderFeeChanges(params?: ListBuilderFeeChangesParams): Promise<ListBuilderFeeChangesResponse>;
     /**
      * List this frontend's per-trade BuilderCodes credits, newest first. Each
-     * credit carries its payout `kind`: `REVENUE_SHARE` (your share of Monaco's
-     * fee) or `BUILDER_FEE` (your builder fee). Pass `kind` to list one stream;
-     * `total` then counts only that stream.
+     * credit carries its payout `kind`. `REVENUE_SHARE` is active;
+     * `BUILDER_FEE` is reserved and is not currently emitted. Pass `kind` to
+     * filter the list; `total` then counts only that category.
      *
      * The server scopes every query to the authenticated application; neither
      * the application id nor payout wallet can be supplied by the caller.

package/dist/api/buildercodes/api.js

@@ -19,7 +19,7 @@
  * console.log(`Now tradeable: ${result.tradingBalance}`);
  * ```
  */
-import { ClaimBuildercodeRewardsParamsSchema, ListBuildercodePayoutsParamsSchema, validate } from "@0xmonaco/types";
+import { ClaimBuildercodeRewardsParamsSchema, ListBuildercodePayoutsParamsSchema, ListBuilderFeeChangesParamsSchema, SetBuilderFeeParamsSchema, validate, } from "@0xmonaco/types";
 import { APIError } from "../../errors";
 import { BaseAPI } from "../base";
 /**
@@ -102,11 +102,35 @@ export class BuildercodesAPIImpl extends BaseAPI {
             method: "GET",
         });
     }
+    /** Set this frontend's builder fee. */
+    async setBuilderFee(params) {
+        const validated = validate(SetBuilderFeeParamsSchema, params);
+        return this.makeAuthenticatedRequest("/api/v1/buildercodes/builder-fee", {
+            method: "PUT",
+            body: JSON.stringify({ bps: validated.bps }),
+        });
+    }
+    /** List this frontend's builder-fee audit log, newest first. */
+    async listBuilderFeeChanges(params) {
+        if (params) {
+            validate(ListBuilderFeeChangesParamsSchema, params);
+        }
+        const searchParams = new URLSearchParams();
+        if (params?.pageSize !== undefined) {
+            searchParams.append("pageSize", params.pageSize.toString());
+        }
+        if (params?.pageToken !== undefined) {
+            searchParams.append("pageToken", params.pageToken);
+        }
+        const query = searchParams.toString();
+        const path = query ? `/api/v1/buildercodes/builder-fee/changes?${query}` : "/api/v1/buildercodes/builder-fee/changes";
+        return this.makeAuthenticatedRequest(path, { method: "GET" });
+    }
     /**
      * List this frontend's per-trade BuilderCodes credits, newest first. Each
-     * credit carries its payout `kind`: `REVENUE_SHARE` (your share of Monaco's
-     * fee) or `BUILDER_FEE` (your builder fee). Pass `kind` to list one stream;
-     * `total` then counts only that stream.
+     * credit carries its payout `kind`. `REVENUE_SHARE` is active;
+     * `BUILDER_FEE` is reserved and is not currently emitted. Pass `kind` to
+     * filter the list; `total` then counts only that category.
      *
      * The server scopes every query to the authenticated application; neither
      * the application id nor payout wallet can be supplied by the caller.

package/dist/api/copy-trading/api.d.ts

@@ -20,7 +20,7 @@
  * const { followId } = await sdk.copyTrading.upsertFollow({ leader, allocation: "1000", slPct: "0.25" });
  * ```
  */
-import type { CopyTradingAPI, GetFollowResponse, GetLeadTraderResponse, ListFollowLeaderPositionsResponse, ListLeadTraderClosedTradesParams, ListLeadTraderClosedTradesResponse, ListLeadTraderOpenPositionsResponse, ListLeadTradersParams, ListLeadTradersResponse, ListMyFollowersParams, ListMyFollowersResponse, ListMyFollowsParams, ListMyFollowsResponse, PreviewFollowParams, PreviewFollowResponse, StopFollowResponse, UpsertFollowParams, UpsertFollowResponse, UpsertLeadTraderParams, UpsertLeadTraderResponse } from "@0xmonaco/types";
+import type { AddFollowPositionMarginParams, AddFollowPositionMarginResponse, CloseAllCopyPositionsResponse, CloseFollowPositionsResponse, CopyTradingAPI, GetFollowResponse, GetLeadTraderResponse, ListFollowLeaderPositionsResponse, ListLeadTraderClosedTradesParams, ListLeadTraderClosedTradesResponse, ListLeadTraderOpenPositionsResponse, ListLeadTradersParams, ListLeadTradersResponse, ListMyFollowersParams, ListMyFollowersResponse, ListMyFollowsParams, ListMyFollowsResponse, PreviewFollowParams, PreviewFollowResponse, StopFollowResponse, UpsertFollowParams, UpsertFollowResponse, UpsertLeadTraderParams, UpsertLeadTraderResponse } from "@0xmonaco/types";
 import { BaseAPI } from "../base";
 export declare class CopyTradingAPIImpl extends BaseAPI implements CopyTradingAPI {
     /**
@@ -77,6 +77,30 @@ export declare class CopyTradingAPIImpl extends BaseAPI implements CopyTradingAP
     previewFollow(params: PreviewFollowParams): Promise<PreviewFollowResponse>;
     /** Stop one of your follows: the leader's fills stop being mirrored. */
     stopFollow(followId: string): Promise<StopFollowResponse>;
+    /**
+     * Close every position in one of your follows' copy accounts and keep the
+     * follow. The response acknowledges the batch; fills arrive on the order,
+     * position and copy channels.
+     */
+    closeFollowPositions(followId: string): Promise<CloseFollowPositionsResponse>;
+    /** Close the copy positions of every live follow of yours, keeping the follows. */
+    closeAllCopyPositions(): Promise<CloseAllCopyPositionsResponse>;
+    /**
+     * Add margin to one of your copy positions: moves `amount` (quote units)
+     * from the follow's copy account into the margin of its isolated copy
+     * position on `tradingPairId`. The position's margin rises by exactly
+     * `amount`, the copy account's remaining collateral falls by the same, and
+     * your margin account is never touched. It opens no exposure, so it works
+     * while copy trading is switched off and on a `CLOSE_ONLY` follow; there is
+     * no margin reduction (a follow exits by being stopped).
+     *
+     * Master account sessions only (403 otherwise); 404 for a follow that is
+     * not yours; 409 while the follow is stopping or once it is stopped; 400
+     * `COPY_TRADING_REJECTED` when the engine refuses the add; 429 over the
+     * shared movement budget. Not idempotent: a retry after a timeout whose
+     * first attempt landed adds the amount twice.
+     */
+    addFollowPositionMargin(params: AddFollowPositionMarginParams): Promise<AddFollowPositionMarginResponse>;
     /** List your follows, newest first. Cursor paged, up to 1000 per page. */
     listMyFollows(params?: ListMyFollowsParams): Promise<ListMyFollowsResponse>;
     /**

package/dist/api/copy-trading/api.js

@@ -20,7 +20,7 @@
  * const { followId } = await sdk.copyTrading.upsertFollow({ leader, allocation: "1000", slPct: "0.25" });
  * ```
  */
-import { LeaderHandleSchema, ListLeadTraderClosedTradesSchema, ListLeadTradersSchema, ListMyFollowersSchema, ListMyFollowsSchema, PreviewFollowSchema, UpsertFollowSchema, UpsertLeadTraderSchema, UUIDSchema, validate, } from "@0xmonaco/types";
+import { AddFollowPositionMarginSchema, LeaderHandleSchema, ListLeadTraderClosedTradesSchema, ListLeadTradersSchema, ListMyFollowersSchema, ListMyFollowsSchema, PreviewFollowSchema, UpsertFollowSchema, UpsertLeadTraderSchema, UUIDSchema, validate, } from "@0xmonaco/types";
 import { BaseAPI } from "../base";
 const BASE = "/api/v1/copy-trading";
 /** `?k=v&...` from the defined entries, or `""` when there are none. */
@@ -183,6 +183,42 @@ export class CopyTradingAPIImpl extends BaseAPI {
     async stopFollow(followId) {
         return await this.makeAuthenticatedRequest(`${followPath(followId)}/stop`, { method: "POST" });
     }
+    /**
+     * Close every position in one of your follows' copy accounts and keep the
+     * follow. The response acknowledges the batch; fills arrive on the order,
+     * position and copy channels.
+     */
+    async closeFollowPositions(followId) {
+        return await this.makeAuthenticatedRequest(`${followPath(followId)}/close-positions`, { method: "POST" });
+    }
+    /** Close the copy positions of every live follow of yours, keeping the follows. */
+    async closeAllCopyPositions() {
+        return await this.makeAuthenticatedRequest(`${BASE}/follows/close-positions`, { method: "POST" });
+    }
+    /**
+     * Add margin to one of your copy positions: moves `amount` (quote units)
+     * from the follow's copy account into the margin of its isolated copy
+     * position on `tradingPairId`. The position's margin rises by exactly
+     * `amount`, the copy account's remaining collateral falls by the same, and
+     * your margin account is never touched. It opens no exposure, so it works
+     * while copy trading is switched off and on a `CLOSE_ONLY` follow; there is
+     * no margin reduction (a follow exits by being stopped).
+     *
+     * Master account sessions only (403 otherwise); 404 for a follow that is
+     * not yours; 409 while the follow is stopping or once it is stopped; 400
+     * `COPY_TRADING_REJECTED` when the engine refuses the add; 429 over the
+     * shared movement budget. Not idempotent: a retry after a timeout whose
+     * first attempt landed adds the amount twice.
+     */
+    async addFollowPositionMargin(params) {
+        const { followId, tradingPairId, amount } = validate(AddFollowPositionMarginSchema, params);
+        // The follow id travels in the path only; the body carries the rest.
+        const body = { tradingPairId, amount };
+        return await this.makeAuthenticatedRequest(`${followPath(followId)}/position-margin`, {
+            method: "POST",
+            body: JSON.stringify(body),
+        });
+    }
     /** List your follows, newest first. Cursor paged, up to 1000 per page. */
     async listMyFollows(params = {}) {
         const { pageSize, pageToken } = validate(ListMyFollowsSchema, params);

package/dist/api/fees/api.d.ts

@@ -76,6 +76,9 @@ export declare class FeesAPIImpl extends BaseAPI implements FeesAPI {
      * spot/perp breakdown), the volume still needed to reach the next tier, and the
      * requested pair's six-row fee schedule.
      *
+     * The tier and volumes are wallet-wide: the caller's wallet total across every
+     * application it trades through, so they read the same from any application.
+     *
      * @param params - Parameters for the lookup
      * @param params.tradingPairId - Trading pair whose fee schedule to return
      * @returns Promise resolving to the caller's tier and the pair's schedule

package/dist/api/fees/api.js

@@ -94,6 +94,9 @@ export class FeesAPIImpl extends BaseAPI {
      * spot/perp breakdown), the volume still needed to reach the next tier, and the
      * requested pair's six-row fee schedule.
      *
+     * The tier and volumes are wallet-wide: the caller's wallet total across every
+     * application it trades through, so they read the same from any application.
+     *
      * @param params - Parameters for the lookup
      * @param params.tradingPairId - Trading pair whose fee schedule to return
      * @returns Promise resolving to the caller's tier and the pair's schedule

package/dist/coverage.d.ts

@@ -19,6 +19,9 @@ export declare const COVERED: {
     list_lead_trader_open_positions: string;
     upsert_follow: string;
     stop_follow: string;
+    close_follow_positions: string;
+    close_all_copy_positions: string;
+    add_follow_position_margin: string;
     list_my_follows: string;
     get_follow: string;
     list_follow_leader_positions: string;
@@ -102,6 +105,7 @@ export declare const COVERED: {
     list_application_orders: string;
     list_application_users: string;
     list_buildercode_payouts: string;
+    list_builder_fee_changes: string;
     list_conditional_orders: string;
     list_delegated_agent_owners: string;
     list_delegated_agents: string;
@@ -129,6 +133,7 @@ export declare const COVERED: {
     transfer_collateral_to_parent_margin_account: string;
     transfer_collateral_to_risk_bucket: string;
     claim_buildercode_rewards: string;
+    set_builder_fee: string;
     transfer_rewards: string;
     update_sub_account_limit: string;
     upsert_delegated_agent: string;

package/dist/coverage.js

@@ -19,6 +19,9 @@ export const COVERED = {
     list_lead_trader_open_positions: "copyTrading.listLeadTraderOpenPositions",
     upsert_follow: "copyTrading.upsertFollow",
     stop_follow: "copyTrading.stopFollow",
+    close_follow_positions: "copyTrading.closeFollowPositions",
+    close_all_copy_positions: "copyTrading.closeAllCopyPositions",
+    add_follow_position_margin: "copyTrading.addFollowPositionMargin",
     list_my_follows: "copyTrading.listMyFollows",
     get_follow: "copyTrading.getFollow",
     list_follow_leader_positions: "copyTrading.listFollowLeaderPositions",
@@ -102,6 +105,7 @@ export const COVERED = {
     list_application_orders: "listApplicationOrders",
     list_application_users: "listApplicationUsers",
     list_buildercode_payouts: "buildercodes.listPayouts",
+    list_builder_fee_changes: "buildercodes.listBuilderFeeChanges",
     list_conditional_orders: "listConditionalOrders",
     list_delegated_agent_owners: "listDelegatedOwners",
     list_delegated_agents: "listDelegatedAgents",
@@ -129,6 +133,7 @@ export const COVERED = {
     transfer_collateral_to_parent_margin_account: "transferCollateralToParentMarginAccount",
     transfer_collateral_to_risk_bucket: "transferCollateralToRiskBucket",
     claim_buildercode_rewards: "buildercodes.claimBuildercodeRewards",
+    set_builder_fee: "buildercodes.setBuilderFee",
     transfer_rewards: "pitpass.transferRewards",
     update_sub_account_limit: "subAccounts.updateLimit",
     upsert_delegated_agent: "upsertDelegatedAgent",

package/dist/sdk.d.ts

@@ -99,6 +99,8 @@ export declare class MonacoSDKImpl implements MonacoSDK {
      * session uses a fresh ed25519 keypair generated locally; the current agent
      * session signs the registration request, and subsequent SDK calls use the
      * delegated session keypair.
+     * The session expires no later than the delegation. Revocation or an earlier
+     * policy expiry also ends access, including reads and session refresh.
      */
     loginAsDelegatedOwner(ownerUserId: string): Promise<AuthState>;
     /**
@@ -134,6 +136,8 @@ export declare class MonacoSDKImpl implements MonacoSDK {
      * Signs a refresh request with the active session key and updates the local
      * `expiresAt`. The session keypair is unchanged. If no session is active, or
      * the session has expired/been revoked, this throws.
+     * Delegated sessions also require an active grant; refresh cannot extend
+     * access beyond its expiry or renew the owner's authorization.
      *
      * @returns The updated authentication state
      */

package/dist/sdk.js

@@ -278,6 +278,8 @@ export class MonacoSDKImpl {
      * session uses a fresh ed25519 keypair generated locally; the current agent
      * session signs the registration request, and subsequent SDK calls use the
      * delegated session keypair.
+     * The session expires no later than the delegation. Revocation or an earlier
+     * policy expiry also ends access, including reads and session refresh.
      */
     async loginAsDelegatedOwner(ownerUserId) {
         if (!this.authState) {
@@ -358,6 +360,8 @@ export class MonacoSDKImpl {
      * Signs a refresh request with the active session key and updates the local
      * `expiresAt`. The session keypair is unchanged. If no session is active, or
      * the session has expired/been revoked, this throws.
+     * Delegated sessions also require an active grant; refresh cannot extend
+     * access beyond its expiry or renew the owner's authorization.
      *
      * @returns The updated authentication state
      */

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@0xmonaco/core",
-	"version": "1.0.70",
+	"version": "1.0.73",
 	"type": "module",
 	"homepage": "https://docs.0xmonaco.com/sdk/typescript",
 	"main": "./dist/index.js",
@@ -19,8 +19,8 @@
 		"viem": "^2.45.2"
 	},
 	"dependencies": {
-		"@0xmonaco/contracts": "1.0.70",
-		"@0xmonaco/types": "1.0.70",
+		"@0xmonaco/contracts": "1.0.73",
+		"@0xmonaco/types": "1.0.73",
 		"@noble/curves": "^1.9.1",
 		"@noble/hashes": "^2.4.0",
 		"http-status-codes": "^2.3.0"