@agg-build/sdk 4.28.0 → 4.29.0

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { a as loadImmutableHistory, c as orderbookCrc32, i as snapshotToOrderbook, l as projectedOrderbookChecksum, n as applyOrderbookDelta, r as computeChecksum, s as readChartHistoryText, t as AggWebSocket } from "./agg-websocket-BrkWNijv.mjs";
+import { a as loadImmutableHistory, c as orderbookCrc32, i as snapshotToOrderbook, l as projectedOrderbookChecksum, n as applyOrderbookDelta, r as computeChecksum, s as readChartHistoryText, t as AggWebSocket } from "./agg-websocket-ClGhhROZ.mjs";
 import { t as CandleBuilder } from "./candle-builder-BNewIe9K.mjs";
 //#region ../common/src/enums/venue.ts
 /** Use these constants instead of hardcoding "kalshi" or "polymarket". */
@@ -1057,6 +1057,71 @@ const RECURRENCE_CADENCES = [
 	"P1Y"
 ];
 //#endregion
+//#region src/self-custody-signing.ts
+/**
+* Signing policy for a self-custody fill's `pendingSignatures`, shared by
+* `AggClient.fillSelfCustody` and `@agg-build/hooks`' `useSelfCustodySigning`
+* so both answer the same requests in the same order with the same bounds.
+*/
+/** EVM hex compares case-insensitively; Solana base58 is case-significant. */
+const isSameWalletAddress = (a, b) => a.startsWith("0x") && b.startsWith("0x") ? a.toLowerCase() === b.toLowerCase() : a === b;
+/** Step id prefix of a Polymarket order signature request (`poly-sign-<orderId>`). */
+const PM_ORDER_SIGNATURE_STEP_PREFIX = "poly-sign-";
+/** True for the trade-executor's Polymarket order signature step. */
+const isPolymarketOrderSignatureStep = (stepId) => stepId.startsWith(PM_ORDER_SIGNATURE_STEP_PREFIX);
+/** An optional fee pre-sign (`purpose: "app_fee"`), e.g. a Polymarket buy fee. */
+const isOptionalFeeRequest = (req) => !!req.optional && req.purpose === "app_fee";
+/**
+* A required fee request asked after every order filled: the post-fill sell
+* fee. Declining it leaves the fee uncollected; the trade itself is done.
+*/
+const isPostFillFeeRequest = (req, ordersFilled) => ordersFilled && !req.optional && req.purpose === "app_fee";
+/** Every order on the run reached a fill (full or partial). False with no orders yet. */
+const areOrdersFilled = (orders) => (orders?.length ?? 0) > 0 && orders.every((o) => o.event === "filled" || o.event === "partial_fill");
+/**
+* The requests to sign now, required first.
+*
+* An optional fee pre-sign is prepared independently of the order, so it can
+* be listed before the order prompt exists; it is held back until the
+* Polymarket ORDER signature has been submitted, and then signed in a round of
+* its own so a slow or declined fee prompt never holds anything else. Every
+* other request goes in one batch: the server reads an optional signature (a
+* referral code, a sponsor) right after the order finalises, so a second round
+* would arrive too late.
+*/
+const orderSignatureRound = (pending, { orderSubmitted }) => {
+	const eligible = pending.filter((req) => orderSubmitted || !isOptionalFeeRequest(req));
+	return [...eligible.some((req) => !isOptionalFeeRequest(req)) ? eligible.filter((req) => !isOptionalFeeRequest(req)) : eligible].sort((a, b) => Number(!!a.optional) - Number(!!b.optional));
+};
+/** The user's own wallets for this fill: its signing address plus every required request's signer. */
+const userSignerAddresses = (pending, signingAddress) => [signingAddress, ...pending.filter((req) => !req.optional).map((req) => req.signerAddress)].filter((address) => !!address);
+/**
+* How long to wait on the signer for `req`, or `undefined` to wait for the
+* human. An optional fee pre-sign is bounded by
+* `OPTIONAL_FEE_SIGNATURE_TIMEOUT_MS`; an optional request addressed to a
+* wallet other than the user's (a partner's sponsor) by
+* `OPTIONAL_SIGNATURE_TIMEOUT_MS`. Required requests and optional ones the
+* user signs (a referral code) are never bounded.
+*/
+const signatureTimeoutMs = (req, userSigners) => {
+	if (isOptionalFeeRequest(req)) return OPTIONAL_FEE_SIGNATURE_TIMEOUT_MS;
+	if (req.optional && !userSigners.some((a) => isSameWalletAddress(a, req.signerAddress))) return OPTIONAL_SIGNATURE_TIMEOUT_MS;
+};
+/** Rejects after `ms` (when given); a late settlement of `promise` is ignored. */
+function withTimeout(promise, ms) {
+	if (ms === void 0) return promise;
+	return new Promise((resolve, reject) => {
+		const timer = setTimeout(() => reject(/* @__PURE__ */ new Error(`timed out after ${ms}ms`)), ms);
+		promise.then((value) => {
+			clearTimeout(timer);
+			resolve(value);
+		}, (err) => {
+			clearTimeout(timer);
+			reject(err);
+		});
+	});
+}
+//#endregion
 //#region src/client.ts
 const COOKIE_REFRESH_DELIVERY = "cookie-refresh";
 const DEFAULT_MIDPOINT_IDS_PER_REQUEST = 75;
@@ -1077,8 +1142,6 @@ const MAX_SPORTS_EVENT_IDS_PER_REQUEST = 25;
 */
 const MIN_POLL_INTERVAL_MS = 250;
 const MAX_POLL_INTERVAL_MS = 3e4;
-/** Step id prefix of a Polymarket order signature request (`poly-sign-<orderId>`). */
-const PM_ORDER_SIGNATURE_STEP_PREFIX = "poly-sign-";
 const isUserProfile = (user) => {
 	return "accounts" in user && "wallets" in user && "avatarUrl" in user;
 };
@@ -1147,23 +1210,11 @@ const AUTH_PATHS = /* @__PURE__ */ new Set([
 	"/auth/token/exchange",
 	"/auth/sign-out"
 ]);
-/** Rejects after `ms`; a late settlement of `p` is ignored. */
-function withTimeout(p, ms) {
-	return new Promise((resolve, reject) => {
-		const timer = setTimeout(() => reject(/* @__PURE__ */ new Error(`timed out after ${ms}ms`)), ms);
-		p.then((v) => {
-			clearTimeout(timer);
-			resolve(v);
-		}, (e) => {
-			clearTimeout(timer);
-			reject(e);
-		});
-	});
-}
 var AggClient = class {
 	constructor(options) {
 		this.listeners = /* @__PURE__ */ new Set();
 		this.webSocketAuthCleanups = /* @__PURE__ */ new Set();
+		this.tradeSockets = /* @__PURE__ */ new Set();
 		this._authStatus = "unauthenticated";
 		this.authChannel = null;
 		this.pendingRefresh = null;
@@ -1629,11 +1680,16 @@ var AggClient = class {
 			body: JSON.stringify({ contentType })
 		});
 	}
-	/** Disconnect a linked auth provider from the current user. */
-	async disconnectAccount(provider) {
+	/**
+	* Disconnect a linked auth provider from the current user. Pass
+	* `providerAccountId` (the wallet address) when the user has more than one
+	* account for the same provider, or the server rejects the call as ambiguous.
+	*/
+	async disconnectAccount(provider, options) {
 		return this.request(`/users/me/accounts/${provider}`, {
 			method: "DELETE",
-			body: JSON.stringify({})
+			body: JSON.stringify({}),
+			...options?.providerAccountId ? { query: { providerAccountId: options.providerAccountId } } : {}
 		});
 	}
 	/** Sign out — revoke all tokens server-side and clear local session. */
@@ -2304,6 +2360,7 @@ var AggClient = class {
 	async getSmartRoute(params, options) {
 		const venueMarketOutcomeId = params.venueMarketOutcomeId ?? params.venueMarketId ?? params.outcomeId;
 		if (!venueMarketOutcomeId) throw new Error("getSmartRoute requires venueMarketOutcomeId");
+		this.openTradeSockets();
 		const query = {};
 		if (params.maxSpend != null) query.maxSpend = String(params.maxSpend);
 		if (params.sellShares != null) query.sellShares = String(params.sellShares);
@@ -2321,6 +2378,8 @@ var AggClient = class {
 		if (params.referrerFeeBipsByVenue) query.referrerFeeBipsByVenue = JSON.stringify(params.referrerFeeBipsByVenue);
 		if (params.referralPayer) query.referralPayer = params.referralPayer;
 		if (params.referralPayerAddress) query.referralPayerAddress = params.referralPayerAddress;
+		if (params.signingAddress) query.signingAddress = params.signingAddress;
+		if (params.fundingAddresses?.length) query.fundingAddresses = params.fundingAddresses;
 		if (params.referralActivationSponsorAddress) query.referralActivationSponsorAddress = params.referralActivationSponsorAddress;
 		const response = await this.request(`/orderbook/${encodeURIComponent(venueMarketOutcomeId)}/route`, {
 			query,
@@ -2354,11 +2413,15 @@ var AggClient = class {
 		const watchdogHeaders = {};
 		if (this._appId) watchdogHeaders["x-app-id"] = this._appId;
 		if (this.apiKey) watchdogHeaders["x-app-api-key"] = this.apiKey;
+		const isBrowser = typeof window !== "undefined" && typeof document !== "undefined";
+		const headers = this.apiKey && !isBrowser ? { "x-app-api-key": this.apiKey } : void 0;
 		const socket = createSocket({
 			url: url.toString(),
 			callbacks,
 			initialToken: this.accessToken,
 			enableLogs: options?.enableLogs ?? false,
+			...headers ? { headers } : {},
+			...options?.webSocketImpl ? { webSocketImpl: options.webSocketImpl } : {},
 			bookWatchdog: options?.bookWatchdog === false ? void 0 : {
 				baseUrl: this.baseUrl,
 				headers: watchdogHeaders,
@@ -2368,7 +2431,28 @@ var AggClient = class {
 		this.bindWebSocketAuth(socket, callbacks);
 		return socket;
 	}
+	openTradeSockets() {
+		for (const socket of this.tradeSockets) socket.connect();
+	}
+	/**
+	* User events are registered by `{ action: "authenticate" }`, not a channel
+	* subscribe. The confirmation is `{ type: "authenticated" }`. Send that
+	* frame only when the socket is already open and it has not been sent for
+	* this token. Opening a socket here would lose the fill to the handshake.
+	*/
+	confirmTradeSockets() {
+		const token = this.accessToken;
+		if (!token || this.tradeAuthSentForToken === token) return;
+		const confirmedUserId = this.tradeSocketAuthenticatedUserId;
+		if (confirmedUserId && (this.accessTokenUserId === void 0 || confirmedUserId === this.accessTokenUserId)) return;
+		for (const socket of this.tradeSockets) {
+			if (!socket.connected) continue;
+			socket.authenticate(token);
+			this.tradeAuthSentForToken = token;
+		}
+	}
 	bindWebSocketAuth(socket, callbacks) {
+		this.tradeSockets.add(socket);
 		let token = this.accessToken;
 		let userId = this.accessTokenUserId;
 		let authenticatedUserId;
@@ -2387,12 +2471,14 @@ var AggClient = class {
 				if (!connected) {
 					authenticatedUserId = void 0;
 					awaitingDisconnect = false;
+					this.tradeSocketAuthenticatedUserId = void 0;
 				}
 				handlers.onConnectionStateChange?.(connected);
 			},
 			onAuthenticated: (message) => {
 				if (awaitingDisconnect || !this.accessToken || this.accessTokenUserId !== void 0 && this.accessTokenUserId !== message.userId) return;
 				authenticatedUserId = message.userId;
+				this.tradeSocketAuthenticatedUserId = message.userId;
 				handlers.onAuthenticated?.(message);
 			},
 			onOrderEvent: (message) => {
@@ -2412,6 +2498,15 @@ var AggClient = class {
 			},
 			onWithdrawalLifecycle: (message) => {
 				if (canReceiveUserEvent(message.userId)) handlers.onWithdrawalLifecycle?.(message);
+			},
+			onAuthExpiring: (message) => {
+				if (this.accessToken && message.userId === authenticatedUserId) this.refreshWithDedup().catch(() => {});
+				handlers.onAuthExpiring?.(message);
+			},
+			onAuthExpired: (message) => {
+				if (message.userId === authenticatedUserId) authenticatedUserId = void 0;
+				if (this.accessToken && message.reason === "expired") this.refreshWithDedup().catch(() => {});
+				handlers.onAuthExpired?.(message);
 			}
 		});
 		socket.setCallbacks = (handlers) => {
@@ -2422,7 +2517,9 @@ var AggClient = class {
 		socket.connect = () => {
 			connectRequested = true;
 			manuallyDisconnected = false;
+			const willOpen = !socket.connected;
 			originalConnect.call(socket);
+			if (willOpen && this.accessToken) this.tradeAuthSentForToken = this.accessToken;
 		};
 		socket.disconnect = () => {
 			connectRequested = false;
@@ -2441,12 +2538,18 @@ var AggClient = class {
 				const reconnect = connectRequested || socket.connected || !manuallyDisconnected && (diagnostics.orderbookOutcomeIds.length > 0 || diagnostics.tradeOutcomeIds.length > 0 || diagnostics.arbMarketIds.length > 0 || diagnostics.arbFeedSubscribers > 0);
 				authenticatedUserId = void 0;
 				awaitingDisconnect = true;
+				this.tradeSocketAuthenticatedUserId = void 0;
 				originalDisconnect.call(socket);
 				socket.authenticate(nextToken ?? "");
+				if (nextToken) this.tradeAuthSentForToken = nextToken;
 				if (reconnect) originalConnect.call(socket);
-			} else if (nextToken) socket.authenticate(nextToken);
+			} else if (nextToken) {
+				socket.authenticate(nextToken);
+				this.tradeAuthSentForToken = nextToken;
+			}
 		});
 		const cleanup = () => {
+			this.tradeSockets.delete(socket);
 			unsubscribe();
 			this.webSocketAuthCleanups.delete(cleanup);
 			socket.setCallbacks = originalSetCallbacks;
@@ -2463,6 +2566,7 @@ var AggClient = class {
 	}
 	/** Execute a previously quoted managed trade. Returns pending order IDs. */
 	async executeManaged(params) {
+		this.confirmTradeSockets();
 		return this.request("/execution/fill", {
 			method: "POST",
 			body: JSON.stringify(params)
@@ -2499,10 +2603,11 @@ var AggClient = class {
 		const deadline = Date.now() + SELF_CUSTODY_FILL_TIMEOUT_MS;
 		let nextPollMs = MIN_POLL_INTERVAL_MS;
 		const declinedOptional = /* @__PURE__ */ new Set();
-		const isOptionalFee = (req) => req.optional && req.purpose === "app_fee";
+		let ordersFilled = false;
+		const isPostFillFee = (req) => isPostFillFeeRequest(req, ordersFilled);
 		let orderSubmitted = false;
 		for (;;) {
-			pending = pending.filter((p) => !declinedOptional.has(p.stepId) && (orderSubmitted || !isOptionalFee(p)));
+			pending = pending.filter((p) => !declinedOptional.has(p.stepId) && (orderSubmitted || !isOptionalFeeRequest(p)));
 			if (Date.now() > deadline) throw new Error(`Fill for quote ${quoteId} did not finish within the timeout.`);
 			if (pending.length === 0) {
 				await new Promise((r) => setTimeout(r, nextPollMs));
@@ -2515,6 +2620,7 @@ var AggClient = class {
 						pendingSignatures: []
 					};
 				}
+				ordersFilled = areOrdersFilled(polled.orders);
 				pending = polled.pendingSignatures ?? [];
 				continue;
 			}
@@ -2522,20 +2628,28 @@ var AggClient = class {
 			if (key === lastKey) throw new Error(`Fill for quote ${quoteId} did not advance — still awaiting steps [${key}] after signing them.`);
 			lastKey = key;
 			const signatures = [];
-			const ordered = [...pending.some((req) => !isOptionalFee(req)) ? pending.filter((req) => !isOptionalFee(req)) : pending].sort((a, b) => Number(!!a.optional) - Number(!!b.optional));
-			const userSigners = new Set([params.signingAddress, ...pending.filter((p) => !p.optional).map((p) => p.signerAddress)].filter((a) => !!a).map((a) => a.toLowerCase()));
+			const ordered = orderSignatureRound(pending, { orderSubmitted });
+			const userSigners = userSignerAddresses(pending, params.signingAddress);
 			for (const req of ordered) {
 				if (Date.now() > new Date(req.expiresAt).getTime()) {
 					if (req.optional) {
 						declinedOptional.add(req.stepId);
 						continue;
 					}
+					if (isPostFillFee(req)) return {
+						...first,
+						pendingSignatures: []
+					};
 					throw new Error(`Signature request ${req.stepId} for quote ${quoteId} expired at ${req.expiresAt}; the fill must be re-quoted.`);
 				}
 				let signed;
 				try {
-					signed = isOptionalFee(req) ? await withTimeout(signer(req), OPTIONAL_FEE_SIGNATURE_TIMEOUT_MS) : req.optional && !userSigners.has(req.signerAddress?.toLowerCase()) ? await withTimeout(signer(req), OPTIONAL_SIGNATURE_TIMEOUT_MS) : await signer(req);
+					signed = await withTimeout(signer(req), signatureTimeoutMs(req, userSigners));
 				} catch (err) {
+					if (isPostFillFee(req)) return {
+						...first,
+						pendingSignatures: []
+					};
 					if (!req.optional) throw err;
 					declinedOptional.add(req.stepId);
 					continue;
@@ -2553,7 +2667,7 @@ var AggClient = class {
 				continue;
 			}
 			const next = await this.submitFillSignatures(quoteId, signatures);
-			if (signatures.some((s) => s.stepId.startsWith(PM_ORDER_SIGNATURE_STEP_PREFIX))) orderSubmitted = true;
+			if (signatures.some((s) => isPolymarketOrderSignatureStep(s.stepId))) orderSubmitted = true;
 			pending = next.pendingSignatures ?? [];
 		}
 	}
@@ -2939,6 +3053,6 @@ function createAggClient(options) {
 	return new AggClient(options);
 }
 //#endregion
-export { ACTIVE_VENUES, AccountProvider, AccountType, AggApiError, AggClient, AggWebSocket, CONFIRMED_MATCH_STATUSES, CandleBuilder, Chain, DEFAULT_BALANCE_REFILL_DAILY_CAP_RAW, DEFAULT_BALANCE_REFILL_MAX_FEE_RAW, IMAGE_SIZES, INACTIVE_VENUES, ImageSize, LIMIT_PRICE_RAW_SCALE, MarketStatus, MatchStatus, MatchType, OPTIONAL_SIGNATURE_TIMEOUT_MS, OrderStatus, OrderType, RECURRENCE_CADENCES, RETINA_IMAGE_SIZES, SELF_CUSTODY_FILL_TIMEOUT_MS, SELF_CUSTODY_POLL_INTERVAL_MS, TERMINAL_EXECUTION_STATES, TimeInForce, TradeSide, TurnstileChallengeError, VENUES, VENUE_CHAIN_IDS, Venue, adjustLimitPriceRawToTick, aggregateMidpoint, applyOrderbookDelta, buildVenueUrl, computeBestSplitsByAmount, computeChecksum, createAggClient, enumGuard, formatMarketQuestion, formatOutcomeLabel, formatOutcomeTitle, getBalanceRefillMaximumRaw, getEffectiveDisabledVenues, getWalletAddressFromUserProfile, hasShape, isAggApiError, isBalanceRefillWithinDailyCap, isEmail, isEnum, isFiniteNonNeg, isNonEmptyString, isVenueActive, isVenueDataVisible, isVenueInactive, loadImmutableHistory, mergeCandles, mergeClosedCandles, normalizeVenueMarketCluster, optimizedImageUrl, orderbookCrc32, parse, parseEmail, parseEmailStrict, prepareHostedVenueFunding, prepareHostedVenueRoute, projectedOrderbookChecksum, retinaImageUrl, safeParse, snapshotToOrderbook, sortVenues, toChecksumAddress };
+export { ACTIVE_VENUES, AccountProvider, AccountType, AggApiError, AggClient, AggWebSocket, CONFIRMED_MATCH_STATUSES, CandleBuilder, Chain, DEFAULT_BALANCE_REFILL_DAILY_CAP_RAW, DEFAULT_BALANCE_REFILL_MAX_FEE_RAW, IMAGE_SIZES, INACTIVE_VENUES, ImageSize, LIMIT_PRICE_RAW_SCALE, MarketStatus, MatchStatus, MatchType, OPTIONAL_FEE_SIGNATURE_TIMEOUT_MS, OPTIONAL_SIGNATURE_TIMEOUT_MS, OrderStatus, OrderType, RECURRENCE_CADENCES, RETINA_IMAGE_SIZES, SELF_CUSTODY_FILL_TIMEOUT_MS, SELF_CUSTODY_POLL_INTERVAL_MS, TERMINAL_EXECUTION_STATES, TimeInForce, TradeSide, TurnstileChallengeError, VENUES, VENUE_CHAIN_IDS, Venue, adjustLimitPriceRawToTick, aggregateMidpoint, applyOrderbookDelta, areOrdersFilled, buildVenueUrl, computeBestSplitsByAmount, computeChecksum, createAggClient, enumGuard, formatMarketQuestion, formatOutcomeLabel, formatOutcomeTitle, getBalanceRefillMaximumRaw, getEffectiveDisabledVenues, getWalletAddressFromUserProfile, hasShape, isAggApiError, isBalanceRefillWithinDailyCap, isEmail, isEnum, isFiniteNonNeg, isNonEmptyString, isOptionalFeeRequest, isPolymarketOrderSignatureStep, isPostFillFeeRequest, isSameWalletAddress, isVenueActive, isVenueDataVisible, isVenueInactive, loadImmutableHistory, mergeCandles, mergeClosedCandles, normalizeVenueMarketCluster, optimizedImageUrl, orderSignatureRound, orderbookCrc32, parse, parseEmail, parseEmailStrict, prepareHostedVenueFunding, prepareHostedVenueRoute, projectedOrderbookChecksum, retinaImageUrl, safeParse, signatureTimeoutMs, snapshotToOrderbook, sortVenues, toChecksumAddress, userSignerAddresses, withTimeout };
 
 //# sourceMappingURL=index.mjs.map