@0xmonaco/core 1.0.82 → 1.0.85

package/README.md

@@ -54,7 +54,7 @@ The SDK supports the following documented preset networks. Configure the network
 
 **Preset Networks:**
 - `"staging"` - Staging environment (https://staging.apimonaco.xyz)
-- `"mainnet"` - Production environment (https://api.monaco.xyz)
+- `"mainnet"` - Production environment (https://apimonaco.xyz)
 
 WebSocket URLs are automatically resolved per network.
 

package/dist/api/auth/api.d.ts

@@ -25,7 +25,7 @@
  * );
  * ```
  */
-import type { AuthAPI, AuthState, ChallengeResponse, SessionCredentials, SessionRefreshResponse } from "@0xmonaco/types";
+import type { AuthAPI, AuthState, ChallengeResponse, InviteCodeList, InviteCodeRequestSummary, SessionCredentials, SessionRefreshResponse } from "@0xmonaco/types";
 import type { Chain, WalletClient } from "viem";
 import { BaseAPI } from "../base";
 export declare class AuthAPIImpl extends BaseAPI implements AuthAPI {
@@ -69,7 +69,7 @@ export declare class AuthAPIImpl extends BaseAPI implements AuthAPI {
      * console.log(`User ID: ${authResult.user.id}`);
      * ```
      */
-    authenticate(clientId: string, referralCode?: string): Promise<AuthState>;
+    authenticate(clientId: string, referralCode?: string, inviteCode?: string): Promise<AuthState>;
     /**
      * Signs a challenge message using the wallet client.
      *
@@ -149,7 +149,11 @@ export declare class AuthAPIImpl extends BaseAPI implements AuthAPI {
      * console.log(`Session public key: ${authResult.sessionPublicKey}`);
      * ```
      */
-    verifySignature(address: string, signature: string, nonce: string, clientId: string, session: SessionCredentials, referralCode?: string): Promise<AuthState>;
+    verifySignature(address: string, signature: string, nonce: string, clientId: string, session: SessionCredentials, referralCode?: string, inviteCode?: string): Promise<AuthState>;
+    /** Mint one code: one initial allowance plus one per 250,000 USDC of Mainnet volume. */
+    requestInviteCodes(): Promise<InviteCodeRequestSummary>;
+    /** Read the allowance and minted codes. Read-only: never consumes a slot. */
+    listInviteCodes(): Promise<InviteCodeList>;
     /**
      * Refreshes the current session's expiry.
      *

package/dist/api/auth/api.js

@@ -75,7 +75,7 @@ export class AuthAPIImpl extends BaseAPI {
      * console.log(`User ID: ${authResult.user.id}`);
      * ```
      */
-    async authenticate(clientId, referralCode) {
+    async authenticate(clientId, referralCode, inviteCode) {
         if (!this.walletClient) {
             throw new InvalidConfigError("Wallet client not set. Connect a wallet first.", "walletClient");
         }
@@ -95,7 +95,7 @@ export class AuthAPIImpl extends BaseAPI {
         // 3. Sign the challenge message with the wallet
         const signature = await this.signChallenge(challenge.message);
         // 4. Verify signature, registering the session public key (and optional referral)
-        return await this.verifySignature(account.address, signature, challenge.nonce, clientId, session, referralCode);
+        return await this.verifySignature(account.address, signature, challenge.nonce, clientId, session, referralCode, inviteCode);
     }
     /**
      * Signs a challenge message using the wallet client.
@@ -204,7 +204,7 @@ export class AuthAPIImpl extends BaseAPI {
      * console.log(`Session public key: ${authResult.sessionPublicKey}`);
      * ```
      */
-    async verifySignature(address, signature, nonce, clientId, session, referralCode) {
+    async verifySignature(address, signature, nonce, clientId, session, referralCode, inviteCode) {
         const responseBody = await this.makePublicRequest("/api/v1/auth/verify", {
             method: "POST",
             body: JSON.stringify({
@@ -215,6 +215,7 @@ export class AuthAPIImpl extends BaseAPI {
                 chainId: this.chain.id,
                 sessionPublicKey: session.publicKey,
                 ...(referralCode ? { referralCode } : {}),
+                ...(inviteCode ? { inviteCode } : {}),
             }),
         });
         return {
@@ -234,6 +235,19 @@ export class AuthAPIImpl extends BaseAPI {
             ...(responseBody.referralApplied !== undefined ? { referralApplied: responseBody.referralApplied } : {}),
         };
     }
+    /** Mint one code: one initial allowance plus one per 250,000 USDC of Mainnet volume. */
+    async requestInviteCodes() {
+        return await this.makeAuthenticatedRequest("/api/v1/invite-codes/requests", {
+            method: "POST",
+            body: JSON.stringify({}),
+        });
+    }
+    /** Read the allowance and minted codes. Read-only: never consumes a slot. */
+    async listInviteCodes() {
+        return await this.makeAuthenticatedRequest("/api/v1/invite-codes", {
+            method: "GET",
+        });
+    }
     /**
      * Refreshes the current session's expiry.
      *

package/dist/api/trading/api.d.ts

@@ -318,7 +318,8 @@ export declare class TradingAPIImpl extends BaseAPI implements TradingAPI {
      * Every row is a BOOK order (`LIMIT` or `MARKET`); filter `status` to
      * `["SUBMITTED", "PARTIALLY_FILLED"]` for the resting working set. TWAP parents and
      * conditional (TP/SL) orders are not rows here — list them with `listTwapOrders`
-     * and `listConditionalOrders`.
+     * and `listConditionalOrders`. Nor are a TWAP's slices, the child orders that carry
+     * `parentOrderId`: read them with `listTwapOrderSlices`.
      * When neither `page` nor `pageToken` is passed, the SDK drives cursor (pageToken)
      * pagination: it starts a cursor walk from the newest (or oldest, for
      * `orderBy: "ASC"`) row and the response's `nextPageToken` resumes it. Both modes

package/dist/api/trading/api.js

@@ -498,7 +498,8 @@ export class TradingAPIImpl extends BaseAPI {
      * Every row is a BOOK order (`LIMIT` or `MARKET`); filter `status` to
      * `["SUBMITTED", "PARTIALLY_FILLED"]` for the resting working set. TWAP parents and
      * conditional (TP/SL) orders are not rows here — list them with `listTwapOrders`
-     * and `listConditionalOrders`.
+     * and `listConditionalOrders`. Nor are a TWAP's slices, the child orders that carry
+     * `parentOrderId`: read them with `listTwapOrderSlices`.
      * When neither `page` nor `pageToken` is passed, the SDK drives cursor (pageToken)
      * pagination: it starts a cursor walk from the newest (or oldest, for
      * `orderBy: "ASC"`) row and the response's `nextPageToken` resumes it. Both modes

package/dist/api/websocket/websocket.js

@@ -40,6 +40,19 @@ function readOptionalString(source, field) {
     }
     return value;
 }
+/**
+ * Read an optional decimal-string field: absent (or `null`) is `undefined`,
+ * and a present value must be a non-empty string. An empty string is
+ * rejected rather than surfaced, because a client converting it with
+ * `Number("")` would read it as zero.
+ */
+function readOptionalDecimalString(source, field) {
+    const value = readOptionalString(source, field);
+    if (value === "") {
+        throw new Error(`Invalid WebSocket event: ${field} must not be empty`);
+    }
+    return value;
+}
 /**
  * Read a field the server serializes as an explicit `null` when unset.
  *
@@ -377,6 +390,11 @@ function parseAccountEventData(raw) {
         freeCollateral: readString(data, "freeCollateral"),
         marginRatio: readString(data, "marginRatio"),
         maintenanceRequirement: readString(data, "maintenanceRequirement"),
+        // Optional so a frame from an older server parses; a present value must
+        // still be a non-empty decimal string, or the frame is rejected.
+        initialMarginRequired: readOptionalDecimalString(data, "initialMarginRequired"),
+        withdrawableCollateral: readOptionalDecimalString(data, "withdrawableCollateral"),
+        realizedPnl: readOptionalDecimalString(data, "realizedPnl"),
         updatedAt: readString(data, "updatedAt"),
     };
 }
@@ -553,6 +571,8 @@ function parseOHLCVSnapshotCandle(raw, interval) {
         v: readString(raw, "volume"),
         i: interval,
         n: readSequence(raw, "trades_count"),
+        openInterestBase: readOptionalString(raw, "open_interest_base"),
+        openInterestNotional: readOptionalString(raw, "open_interest_notional"),
     };
 }
 function parseInstrumentEventData(raw) {
@@ -798,8 +818,10 @@ function parseBalanceSnapshotItem(raw) {
  *
  * The optional fields are read as nullable, not optional: they are Rust
  * `Option`s serialized without `skip_serializing_if`, so the key is always
- * present carrying `null`. `clientOrderId` is the one field the server omits
- * outright, so it is the one read as optional.
+ * present carrying `null`. The fields the server omits outright
+ * (`clientOrderId`, `selfTradePreventionMode`, `parentOrderId`, `postOnly`,
+ * `expirationDate`, `triggerPrice`, `positionSide`, `version` and `origin`) are
+ * read as optional and spread in only when present.
  */
 function parseOrderSnapshotItem(raw) {
     if (!isRecord(raw)) {
@@ -817,6 +839,7 @@ function parseOrderSnapshotItem(raw) {
     const triggerPrice = readOptionalString(item, "triggerPrice");
     const positionSide = readOptionalString(item, "positionSide");
     const version = readOptionalNumber(item, "version");
+    const origin = readOptionalString(item, "origin");
     return {
         orderId: readString(item, "orderId"),
         userId: readString(item, "userId"),
@@ -864,6 +887,10 @@ function parseOrderSnapshotItem(raw) {
         // than becoming `version: undefined` — a resync compares this value, and
         // absent means unknown, never zero (0XM-2440).
         ...(version === undefined ? {} : { version }),
+        // Read as a plain string, like the value fields above: an unrecognized
+        // origin passes through rather than dropping the row, and absent stays
+        // absent.
+        ...(origin === undefined ? {} : { origin }),
     };
 }
 /**
@@ -1246,6 +1273,9 @@ export function createMonacoWebSocket(baseUrl, options = {}, serverClock = new S
                 if (msg.code === "AUTH_FAILED") {
                     lastAuthError = { code: msg.code, message: msg.message, session: pendingAuthSessions.shift() };
                 }
+                else if (msg.code === "ACCOUNT_DEACTIVATED") {
+                    lastAuthError = { code: msg.code, message: msg.message, session: pendingAuthSessions.shift() ?? confirmedSession };
+                }
                 else if (msg.code === "SESSION_INVALID") {
                     lastAuthError = { code: msg.code, message: msg.message, session: confirmedSession ?? pendingAuthSessions[0] };
                 }
@@ -1428,7 +1458,10 @@ export function createMonacoWebSocket(baseUrl, options = {}, serverClock = new S
                     const skewRetry = autoReconnect && authError?.code === "AUTH_FAILED" && SKEW_REJECTION.test(authError.message) && skewAuthRetries < MAX_SKEW_AUTH_RETRIES;
                     if (skewRetry)
                         skewAuthRetries++;
-                    const authLoss = !skewRetry && authError !== null && authError.session !== undefined && (authError.code === "AUTH_FAILED" || event.code === 1008);
+                    const authLoss = !skewRetry &&
+                        authError !== null &&
+                        authError.session !== undefined &&
+                        (authError.code === "AUTH_FAILED" || authError.code === "ACCOUNT_DEACTIVATED" || event.code === 1008);
                     const terminalAuthLoss = authLoss && session === authError.session;
                     if (terminalAuthLoss) {
                         session = undefined;
@@ -1662,6 +1695,8 @@ export function createMonacoWebSocket(baseUrl, options = {}, serverClock = new S
                         s: data.symbol,
                         i: data.interval,
                         n: ohlcvData.trades_count || 0,
+                        openInterestBase: readOptionalString(ohlcvData, "open_interest_base"),
+                        openInterestNotional: readOptionalString(ohlcvData, "open_interest_notional"),
                     },
                 };
                 handler(event);
@@ -1906,7 +1941,8 @@ export function createMonacoWebSocket(baseUrl, options = {}, serverClock = new S
     /**
      * Subscribe to the authenticated user's account-level margin health updates
      * (equity, collateral, free collateral, margin ratio, maintenance
-     * requirement). Requires authentication - the user is identified from the
+     * requirement, initial margin required, withdrawable collateral, realized
+     * PnL). Requires authentication - the user is identified from the
      * signed session-key handshake. Detected broadcast lag closes the connection
      * with 1013; reconnect and reconcile missed state. Each frame is a terminal-state snapshot
      * per margin account, not an additive delta.

package/dist/coverage.d.ts

@@ -34,6 +34,8 @@ export declare const COVERED: {
     list_twap_order_slices: string;
     close_position: string;
     create_challenge: string;
+    request_invite_codes: string;
+    list_invite_codes: string;
     create_delegated_session: string;
     create_order: string;
     create_sub_account_limit: string;

package/dist/coverage.js

@@ -34,6 +34,8 @@ export const COVERED = {
     list_twap_order_slices: "listTwapOrderSlices",
     close_position: "closePosition",
     create_challenge: "createChallenge",
+    request_invite_codes: "auth.requestInviteCodes",
+    list_invite_codes: "auth.listInviteCodes",
     create_delegated_session: "createDelegatedSession",
     create_order: "placeLimitOrder / placeMarketOrder",
     create_sub_account_limit: "subAccounts.createLimit",

package/dist/errors/errors.d.ts

@@ -303,6 +303,12 @@ export declare class APIError extends MonacoCoreError {
         requestId?: string;
         retryAfter?: number;
     });
+    /**
+     * The server's stable error code from the response envelope's `code` field
+     * (e.g. `INVITE_CODE_REQUIRED`, `POST_ONLY_WOULD_CROSS`), when it sent one.
+     * Branch on this rather than on the message text.
+     */
+    get serverCode(): string | undefined;
     /**
      * Override toJSON to include API-specific fields with sanitization
      *

package/dist/errors/errors.js

@@ -563,6 +563,19 @@ export class APIError extends MonacoCoreError {
         this.requestId = options?.requestId;
         this.retryAfter = options?.retryAfter;
     }
+    /**
+     * The server's stable error code from the response envelope's `code` field
+     * (e.g. `INVITE_CODE_REQUIRED`, `POST_ONLY_WOULD_CROSS`), when it sent one.
+     * Branch on this rather than on the message text.
+     */
+    get serverCode() {
+        const body = this.responseBody;
+        if (body && typeof body === "object" && "code" in body) {
+            const code = body.code;
+            return typeof code === "string" ? code : undefined;
+        }
+        return undefined;
+    }
     /**
      * Override toJSON to include API-specific fields with sanitization
      *

package/dist/networks/networks.js

@@ -10,7 +10,9 @@
 const LOCAL_URL = "http://localhost:8080";
 const DEVELOPMENT_URL = "https://develop.apimonaco.xyz";
 const STAGING_URL = "https://staging.apimonaco.xyz";
-const MAINNET_URL = "https://api.monaco.xyz";
+// https://api.monaco.xyz never resolved (the monaco.xyz zone has no NS
+// delegation), so this is not a behavior change for any working client.
+const MAINNET_URL = "https://apimonaco.xyz";
 const DEFAULT_API_URLS = {
     local: LOCAL_URL,
     development: DEVELOPMENT_URL,

package/dist/sdk.d.ts

@@ -62,6 +62,7 @@ export declare class MonacoSDKImpl implements MonacoSDK {
      * @param clientId - The client ID for authentication
      * @param options - Optional configuration
      * @param options.connectWebSocket - Auto-connect WebSocket after login (default: false)
+     * @param options.inviteCode - Optional case-sensitive Mainnet invite code
      *
      * @example
      * ```typescript
@@ -79,6 +80,7 @@ export declare class MonacoSDKImpl implements MonacoSDK {
      */
     login(clientId: string, options?: {
         connectWebSocket?: boolean;
+        inviteCode?: string;
     }): Promise<AuthState>;
     /**
      * Create and adopt an owner-scoped delegated session.

package/dist/sdk.js

@@ -213,6 +213,7 @@ export class MonacoSDKImpl {
      * @param clientId - The client ID for authentication
      * @param options - Optional configuration
      * @param options.connectWebSocket - Auto-connect WebSocket after login (default: false)
+     * @param options.inviteCode - Optional case-sensitive Mainnet invite code
      *
      * @example
      * ```typescript
@@ -229,7 +230,7 @@ export class MonacoSDKImpl {
      * ```
      */
     async login(clientId, options) {
-        this.authState = await this.auth.authenticate(clientId);
+        this.authState = await this.auth.authenticate(clientId, undefined, options?.inviteCode);
         this.propagateSession(this.sessionFromAuthState(this.authState));
         // Auto-connect WebSocket if requested
         if (options?.connectWebSocket) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@0xmonaco/core",
-	"version": "1.0.82",
+	"version": "1.0.85",
 	"type": "module",
 	"homepage": "https://docs.0xmonaco.com/sdk/typescript",
 	"main": "./dist/index.js",
@@ -19,8 +19,8 @@
 		"viem": "^2.45.2"
 	},
 	"dependencies": {
-		"@0xmonaco/contracts": "1.0.82",
-		"@0xmonaco/types": "1.0.82",
+		"@0xmonaco/contracts": "1.0.85",
+		"@0xmonaco/types": "1.0.85",
 		"@noble/curves": "^1.9.1",
 		"@noble/hashes": "^2.4.0",
 		"http-status-codes": "^2.3.0"