@cexyio/cexy 0.1.0-dev.0 → 0.1.0-dev.3

package/README.md

@@ -5,16 +5,17 @@ The official TypeScript/JavaScript SDK for the [CEXY.io](https://cexy.io) REST a
 - Typed models generated from the public OpenAPI spec ([cexy-api-spec](https://github.com/cexyio/cexy-api-spec)).
 - Safe by default: retries with backoff, order placement that never duplicates (via `client_order_id`), a client-side rate limiter.
 - A WebSocket client with heartbeat, reconnect and a live order book that applies the sync rules for you.
-- ESM and CommonJS, Node 20+, zero runtime dependencies.
+- ESM and CommonJS, Node 22+, zero runtime dependencies.
 
 > **Status: 0.x.** The API is not yet frozen. It stays 0.x until the exchange ships HMAC request signing,
 > which will change how credentials are sent.
+> Pre-release: `npm install @cexyio/cexy@next`; `latest` currently points at a pre-release until 1.0.
 
 ## Install
 
 ```bash
-npm install @cexyio/cexy
-# Node only, optional: lets the WebSocket client send a User-Agent (recommended before Node 22)
+npm install @cexyio/cexy@next
+# Node only, optional: lets the WebSocket client send a User-Agent
 npm install ws
 ```
 
@@ -102,6 +103,7 @@ Every API failure throws a `CexyApiError` (or a subclass) with `status`, `code`,
 |---|---|
 | `AuthenticationError` | 401: missing or invalid credentials |
 | `ForbiddenError` | 403: the key lacks a scope (`FORBIDDEN`), or the route is session-only (`API_KEY_NOT_ALLOWED`) |
+| `JurisdictionBlockedError` | 451: `JURISDICTION_BLOCKED` (not available in the caller's jurisdiction); a `ForbiddenError` subclass |
 | `ValidationError` | 400: see `fields` |
 | `NotFoundError` | 404 |
 | `ConflictError` | 409: `ALREADY_EXISTS`, `IDEMPOTENCY_KEY_CONFLICT`, `CONCURRENT_MODIFICATION` |
@@ -213,7 +215,7 @@ use public channels and poll REST for private state. If the session is revoked,
 `authLost`; public channels keep working.
 
 In Node the client uses the optional `ws` package when installed (so it can send the SDK User-Agent),
-otherwise the global `WebSocket` (Node 22+, browsers).
+otherwise the global `WebSocket` (Node, browsers).
 
 ## Browsers
 
@@ -227,6 +229,9 @@ endpoints from a server. Browsers do not let scripts set `User-Agent`, so the SD
 - Credentials go only in the `X-API-Key` / `X-API-Secret` headers and only on private endpoints; never in URLs.
 - Only `https://` base URLs and `wss://` WebSocket URLs are accepted. `allowInsecure: true` permits
   `http://` / `ws://` solely for `localhost`, `127.0.0.1` or `::1` (local test servers).
+- The SDK **never follows HTTP redirects**. A 3xx answer throws a `CexyApiError` with code
+  `UNEXPECTED_REDIRECT` (not retried), so credentials are never re-sent to another host and an order
+  is never re-posted to a redirect target. If you pass your own `fetch`, it must honour `redirect: "manual"`.
 - The SDK redacts the secret from `toString()`, `util.inspect`, `JSON.stringify` and error messages.
 - Keep keys in environment variables or a secret manager, not in code.
 

package/dist/index.cjs

@@ -56,6 +56,8 @@ var AuthenticationError = class extends CexyApiError {
 };
 var ForbiddenError = class extends CexyApiError {
 };
+var JurisdictionBlockedError = class extends ForbiddenError {
+};
 var NotFoundError = class extends CexyApiError {
 };
 var ValidationError = class extends CexyApiError {
@@ -78,8 +80,8 @@ var STATUS_CLASSES = {
   401: AuthenticationError,
   403: ForbiddenError,
   404: NotFoundError,
-  451: ForbiddenError,
-  // unavailable for legal reasons (JURISDICTION_BLOCKED)
+  451: JurisdictionBlockedError,
+  // unavailable for legal reasons
   409: ConflictError,
   422: UnprocessableError
 };
@@ -172,6 +174,7 @@ function errorFromResponse(status, body, headers, redact = (t) => t) {
   if (status === 429 || init.code === "RATE_LIMITED") {
     return new RateLimitError(init, retryAfterMs(headers, init.details));
   }
+  if (init.code === "JURISDICTION_BLOCKED") return new JurisdictionBlockedError(init);
   if (env && !isKnownErrorCode(env.code)) return new CexyApiError(init);
   if (status >= 500) return new ServerError(init);
   const Cls = STATUS_CLASSES[status] ?? CexyApiError;
@@ -391,7 +394,13 @@ var Transport = class {
     let res;
     let text;
     try {
-      res = await this.config.fetch(url.toString(), { method: info.method, headers, body, signal: ctrl.signal });
+      res = await this.config.fetch(url.toString(), {
+        method: info.method,
+        headers,
+        body,
+        signal: ctrl.signal,
+        redirect: "manual"
+      });
       text = await res.text();
     } catch (err) {
       if (opts.signal?.aborted) throw opts.signal.reason ?? err;
@@ -403,6 +412,14 @@ var Transport = class {
       clearTimeout(timer);
       opts.signal?.removeEventListener("abort", onAbort);
     }
+    if (res.type === "opaqueredirect" || res.status >= 300 && res.status < 400 || res.redirected) {
+      throw new CexyApiError({
+        status: res.status,
+        code: "UNEXPECTED_REDIRECT",
+        message: `${info.method} ${info.path}: the server answered with a redirect (HTTP ${res.status}); the SDK does not follow redirects. Check baseUrl.`,
+        retryable: false
+      });
+    }
     this.config.limiter?.update(res.headers);
     if (!res.ok) {
       const parsed = safeJson(text);
@@ -901,7 +918,7 @@ var TradingResource = class extends Resource {
 };
 
 // src/version.ts
-var VERSION = "0.1.0-dev.0";
+var VERSION = "0.1.0-dev.3";
 var USER_AGENT = `cexy-typescript/${VERSION}`;
 
 // src/ws/emitter.ts
@@ -1661,7 +1678,7 @@ var CexyClient = class {
     assertSecureUrl(parsed, "https:", "http:", options.allowInsecure === true, "baseUrl");
     this.#allowInsecure = options.allowInsecure === true;
     const fetchImpl = options.fetch ?? globalThis.fetch;
-    if (!fetchImpl) throw new CexyConfigError("no global fetch found (Node 20+ required); pass options.fetch");
+    if (!fetchImpl) throw new CexyConfigError("no global fetch found (Node 22+ required); pass options.fetch");
     const timeoutMs = options.timeoutMs ?? 1e4;
     const maxRetries = options.maxRetries ?? 3;
     if (!(timeoutMs > 0)) throw new CexyConfigError("timeoutMs must be > 0");
@@ -1772,6 +1789,7 @@ exports.ExportsResource = ExportsResource;
 exports.FeesResource = FeesResource;
 exports.ForbiddenError = ForbiddenError;
 exports.InvalidAmountError = InvalidAmountError;
+exports.JurisdictionBlockedError = JurisdictionBlockedError;
 exports.KNOWN_EVENT_TYPES = KNOWN_EVENT_TYPES;
 exports.LiveOrderBook = LiveOrderBook;
 exports.MarketsResource = MarketsResource;

package/dist/index.d.cts

@@ -3458,6 +3458,12 @@ declare class AuthenticationError extends CexyApiError {
 /** 403: the key lacks a scope (`FORBIDDEN`), or the route is session-only (`API_KEY_NOT_ALLOWED`). */
 declare class ForbiddenError extends CexyApiError {
 }
+/**
+ * 451: not available in the caller's jurisdiction (`JURISDICTION_BLOCKED`). A `ForbiddenError`
+ * subclass, so existing `instanceof ForbiddenError` checks still match. Retrying will not help.
+ */
+declare class JurisdictionBlockedError extends ForbiddenError {
+}
 /** 404 */
 declare class NotFoundError extends CexyApiError {
 }
@@ -3838,7 +3844,7 @@ interface CexyClientOptions {
     timeoutMs?: number;
     /** Retries after the first attempt for retryable failures. Default 3. */
     maxRetries?: number;
-    /** A `fetch` implementation. Default: the global `fetch` (Node 20+, browsers). */
+    /** A `fetch` implementation. Default: the global `fetch` (Node 22+, browsers). */
     fetch?: FetchLike;
     /**
      * Client-side rate limit in requests per minute, or `false` to disable. Default 100/min
@@ -3919,11 +3925,11 @@ declare function isAmount(value: unknown): value is Amount;
 declare function assertAmountFields(body: Record<string, unknown>, fields: readonly string[], context: string): void;
 
 /** SDK version, kept in sync with package.json (a test enforces this). */
-declare const VERSION = "0.1.0-dev.0";
+declare const VERSION = "0.1.0-dev.3";
 /** Default User-Agent product token. */
-declare const USER_AGENT = "cexy-typescript/0.1.0-dev.0";
+declare const USER_AGENT = "cexy-typescript/0.1.0-dev.3";
 
 /** True for loopback hosts, the only ones where plain-text transport may be allowed. */
 declare function isLocalHost(hostname: string): boolean;
 
-export { AccountResource, type Amount, type ApiKey, ApiKeyAuthenticator, type ApiScope, type Asset, type AssetNetwork, AssetsResource, type AuthRequest, type AuthResult, type AuthenticatedFrame, AuthenticationError, type Authenticator, type Balance, type BalanceUpdatedEvent, type BookLevel, type CancelAllParams, type CancelAllRequest, type CancelAllResult, type Candle, type CandleInterval, CexyApiError, type CexyApiErrorInit, CexyClient, type CexyClientOptions, CexyConfigError, CexyConnectionError, CexyError, CexyTimeoutError, CexyWebSocket, CexyWebSocketError, type CexyWebSocketEvents, type CexyWebSocketOptions, type CloseInfo, ConflictError, type CursorParams, DEFAULT_BASE_URL, DEFAULT_RPM_ANONYMOUS, DEFAULT_RPM_WITH_KEY, DEFAULT_WS_URL, type Deposit, type DepositAddress, type DepositEvent, type DepositStatus, type ErrorBody, type ErrorCode, type ErrorFrame, type EventMap, type ExchangeConfig, type ExitPoolRequest, type ExitPoolResult, ExportsResource, type FeeSchedule, FeesResource, type FetchLike, type Fill, ForbiddenError, InvalidAmountError, type IterateOptions, type JoinPoolRequest, type JoinPoolResult, KNOWN_EVENT_TYPES, type KnownErrorCode, type LedgerEntry, type LedgerEntryKind, type LiquidityRole, type Listener, LiveOrderBook, type LiveOrderBookEvents, type LiveOrderBookOptions, type MaintenanceState, type Market, type MarketStatus, type MarketStatusEvent, MarketsResource, type Network, NetworksResource, NotFoundError, type Notification, type NotificationKind, OPERATIONS, type OperationAuth, type OperationId, type OperationInfo, type OperationScope, type Order, type OrderBook, type OrderBookUpdateData, type OrderBookUpdateEvent, type OrderEvent, type OrderSide, OrderStateUnknownError, type OrderStatus, type OrderType, PRIVATE_CHANNELS, type Page, type PlaceOrderRequest, type PlaceOrderResponse, type PlaceOrderResult, type PongFrame, type Pool, type PoolStatus, PoolsResource, type PublicTrade, type QueryOf, RateLimitError, RateLimiter, type RateLimiterOptions, type RateLimiterState, type ReconnectOptions, type RequestOptions, type ResyncReason, type RetryInfo, SUPPORTED_PROTOCOL_VERSION, ServerError, type ServerTime, type SessionRevokedData, type SessionRevokedEvent, type SnapshotSource, type SortDirection, type SubAccount, type SubscribeResult, type SubscribedFrame, type TickerUpdateEvent, type TimeInForce, type TradeNewEvent, TradingResource, type TriggerDirection, TypedEmitter, USER_AGENT, UnprocessableError, type UnsubscribedFrame, VERSION, ValidationError, WS_BOOK_DEPTH, WalletResource, type WebSocketConstructor, type WebSocketLike, type WelcomeFrame, type Withdrawal, type WithdrawalAddress, type WithdrawalStatus, type WithdrawalUpdatedEvent, type WsEvent, type WsLogger, assertAmountFields, type components, errorFromResponse, isAmount, isKnownErrorCode, isLocalHost, isRetryable, type operations, paginate, type paths };
+export { AccountResource, type Amount, type ApiKey, ApiKeyAuthenticator, type ApiScope, type Asset, type AssetNetwork, AssetsResource, type AuthRequest, type AuthResult, type AuthenticatedFrame, AuthenticationError, type Authenticator, type Balance, type BalanceUpdatedEvent, type BookLevel, type CancelAllParams, type CancelAllRequest, type CancelAllResult, type Candle, type CandleInterval, CexyApiError, type CexyApiErrorInit, CexyClient, type CexyClientOptions, CexyConfigError, CexyConnectionError, CexyError, CexyTimeoutError, CexyWebSocket, CexyWebSocketError, type CexyWebSocketEvents, type CexyWebSocketOptions, type CloseInfo, ConflictError, type CursorParams, DEFAULT_BASE_URL, DEFAULT_RPM_ANONYMOUS, DEFAULT_RPM_WITH_KEY, DEFAULT_WS_URL, type Deposit, type DepositAddress, type DepositEvent, type DepositStatus, type ErrorBody, type ErrorCode, type ErrorFrame, type EventMap, type ExchangeConfig, type ExitPoolRequest, type ExitPoolResult, ExportsResource, type FeeSchedule, FeesResource, type FetchLike, type Fill, ForbiddenError, InvalidAmountError, type IterateOptions, type JoinPoolRequest, type JoinPoolResult, JurisdictionBlockedError, KNOWN_EVENT_TYPES, type KnownErrorCode, type LedgerEntry, type LedgerEntryKind, type LiquidityRole, type Listener, LiveOrderBook, type LiveOrderBookEvents, type LiveOrderBookOptions, type MaintenanceState, type Market, type MarketStatus, type MarketStatusEvent, MarketsResource, type Network, NetworksResource, NotFoundError, type Notification, type NotificationKind, OPERATIONS, type OperationAuth, type OperationId, type OperationInfo, type OperationScope, type Order, type OrderBook, type OrderBookUpdateData, type OrderBookUpdateEvent, type OrderEvent, type OrderSide, OrderStateUnknownError, type OrderStatus, type OrderType, PRIVATE_CHANNELS, type Page, type PlaceOrderRequest, type PlaceOrderResponse, type PlaceOrderResult, type PongFrame, type Pool, type PoolStatus, PoolsResource, type PublicTrade, type QueryOf, RateLimitError, RateLimiter, type RateLimiterOptions, type RateLimiterState, type ReconnectOptions, type RequestOptions, type ResyncReason, type RetryInfo, SUPPORTED_PROTOCOL_VERSION, ServerError, type ServerTime, type SessionRevokedData, type SessionRevokedEvent, type SnapshotSource, type SortDirection, type SubAccount, type SubscribeResult, type SubscribedFrame, type TickerUpdateEvent, type TimeInForce, type TradeNewEvent, TradingResource, type TriggerDirection, TypedEmitter, USER_AGENT, UnprocessableError, type UnsubscribedFrame, VERSION, ValidationError, WS_BOOK_DEPTH, WalletResource, type WebSocketConstructor, type WebSocketLike, type WelcomeFrame, type Withdrawal, type WithdrawalAddress, type WithdrawalStatus, type WithdrawalUpdatedEvent, type WsEvent, type WsLogger, assertAmountFields, type components, errorFromResponse, isAmount, isKnownErrorCode, isLocalHost, isRetryable, type operations, paginate, type paths };

package/dist/index.d.ts

@@ -3458,6 +3458,12 @@ declare class AuthenticationError extends CexyApiError {
 /** 403: the key lacks a scope (`FORBIDDEN`), or the route is session-only (`API_KEY_NOT_ALLOWED`). */
 declare class ForbiddenError extends CexyApiError {
 }
+/**
+ * 451: not available in the caller's jurisdiction (`JURISDICTION_BLOCKED`). A `ForbiddenError`
+ * subclass, so existing `instanceof ForbiddenError` checks still match. Retrying will not help.
+ */
+declare class JurisdictionBlockedError extends ForbiddenError {
+}
 /** 404 */
 declare class NotFoundError extends CexyApiError {
 }
@@ -3838,7 +3844,7 @@ interface CexyClientOptions {
     timeoutMs?: number;
     /** Retries after the first attempt for retryable failures. Default 3. */
     maxRetries?: number;
-    /** A `fetch` implementation. Default: the global `fetch` (Node 20+, browsers). */
+    /** A `fetch` implementation. Default: the global `fetch` (Node 22+, browsers). */
     fetch?: FetchLike;
     /**
      * Client-side rate limit in requests per minute, or `false` to disable. Default 100/min
@@ -3919,11 +3925,11 @@ declare function isAmount(value: unknown): value is Amount;
 declare function assertAmountFields(body: Record<string, unknown>, fields: readonly string[], context: string): void;
 
 /** SDK version, kept in sync with package.json (a test enforces this). */
-declare const VERSION = "0.1.0-dev.0";
+declare const VERSION = "0.1.0-dev.3";
 /** Default User-Agent product token. */
-declare const USER_AGENT = "cexy-typescript/0.1.0-dev.0";
+declare const USER_AGENT = "cexy-typescript/0.1.0-dev.3";
 
 /** True for loopback hosts, the only ones where plain-text transport may be allowed. */
 declare function isLocalHost(hostname: string): boolean;
 
-export { AccountResource, type Amount, type ApiKey, ApiKeyAuthenticator, type ApiScope, type Asset, type AssetNetwork, AssetsResource, type AuthRequest, type AuthResult, type AuthenticatedFrame, AuthenticationError, type Authenticator, type Balance, type BalanceUpdatedEvent, type BookLevel, type CancelAllParams, type CancelAllRequest, type CancelAllResult, type Candle, type CandleInterval, CexyApiError, type CexyApiErrorInit, CexyClient, type CexyClientOptions, CexyConfigError, CexyConnectionError, CexyError, CexyTimeoutError, CexyWebSocket, CexyWebSocketError, type CexyWebSocketEvents, type CexyWebSocketOptions, type CloseInfo, ConflictError, type CursorParams, DEFAULT_BASE_URL, DEFAULT_RPM_ANONYMOUS, DEFAULT_RPM_WITH_KEY, DEFAULT_WS_URL, type Deposit, type DepositAddress, type DepositEvent, type DepositStatus, type ErrorBody, type ErrorCode, type ErrorFrame, type EventMap, type ExchangeConfig, type ExitPoolRequest, type ExitPoolResult, ExportsResource, type FeeSchedule, FeesResource, type FetchLike, type Fill, ForbiddenError, InvalidAmountError, type IterateOptions, type JoinPoolRequest, type JoinPoolResult, KNOWN_EVENT_TYPES, type KnownErrorCode, type LedgerEntry, type LedgerEntryKind, type LiquidityRole, type Listener, LiveOrderBook, type LiveOrderBookEvents, type LiveOrderBookOptions, type MaintenanceState, type Market, type MarketStatus, type MarketStatusEvent, MarketsResource, type Network, NetworksResource, NotFoundError, type Notification, type NotificationKind, OPERATIONS, type OperationAuth, type OperationId, type OperationInfo, type OperationScope, type Order, type OrderBook, type OrderBookUpdateData, type OrderBookUpdateEvent, type OrderEvent, type OrderSide, OrderStateUnknownError, type OrderStatus, type OrderType, PRIVATE_CHANNELS, type Page, type PlaceOrderRequest, type PlaceOrderResponse, type PlaceOrderResult, type PongFrame, type Pool, type PoolStatus, PoolsResource, type PublicTrade, type QueryOf, RateLimitError, RateLimiter, type RateLimiterOptions, type RateLimiterState, type ReconnectOptions, type RequestOptions, type ResyncReason, type RetryInfo, SUPPORTED_PROTOCOL_VERSION, ServerError, type ServerTime, type SessionRevokedData, type SessionRevokedEvent, type SnapshotSource, type SortDirection, type SubAccount, type SubscribeResult, type SubscribedFrame, type TickerUpdateEvent, type TimeInForce, type TradeNewEvent, TradingResource, type TriggerDirection, TypedEmitter, USER_AGENT, UnprocessableError, type UnsubscribedFrame, VERSION, ValidationError, WS_BOOK_DEPTH, WalletResource, type WebSocketConstructor, type WebSocketLike, type WelcomeFrame, type Withdrawal, type WithdrawalAddress, type WithdrawalStatus, type WithdrawalUpdatedEvent, type WsEvent, type WsLogger, assertAmountFields, type components, errorFromResponse, isAmount, isKnownErrorCode, isLocalHost, isRetryable, type operations, paginate, type paths };
+export { AccountResource, type Amount, type ApiKey, ApiKeyAuthenticator, type ApiScope, type Asset, type AssetNetwork, AssetsResource, type AuthRequest, type AuthResult, type AuthenticatedFrame, AuthenticationError, type Authenticator, type Balance, type BalanceUpdatedEvent, type BookLevel, type CancelAllParams, type CancelAllRequest, type CancelAllResult, type Candle, type CandleInterval, CexyApiError, type CexyApiErrorInit, CexyClient, type CexyClientOptions, CexyConfigError, CexyConnectionError, CexyError, CexyTimeoutError, CexyWebSocket, CexyWebSocketError, type CexyWebSocketEvents, type CexyWebSocketOptions, type CloseInfo, ConflictError, type CursorParams, DEFAULT_BASE_URL, DEFAULT_RPM_ANONYMOUS, DEFAULT_RPM_WITH_KEY, DEFAULT_WS_URL, type Deposit, type DepositAddress, type DepositEvent, type DepositStatus, type ErrorBody, type ErrorCode, type ErrorFrame, type EventMap, type ExchangeConfig, type ExitPoolRequest, type ExitPoolResult, ExportsResource, type FeeSchedule, FeesResource, type FetchLike, type Fill, ForbiddenError, InvalidAmountError, type IterateOptions, type JoinPoolRequest, type JoinPoolResult, JurisdictionBlockedError, KNOWN_EVENT_TYPES, type KnownErrorCode, type LedgerEntry, type LedgerEntryKind, type LiquidityRole, type Listener, LiveOrderBook, type LiveOrderBookEvents, type LiveOrderBookOptions, type MaintenanceState, type Market, type MarketStatus, type MarketStatusEvent, MarketsResource, type Network, NetworksResource, NotFoundError, type Notification, type NotificationKind, OPERATIONS, type OperationAuth, type OperationId, type OperationInfo, type OperationScope, type Order, type OrderBook, type OrderBookUpdateData, type OrderBookUpdateEvent, type OrderEvent, type OrderSide, OrderStateUnknownError, type OrderStatus, type OrderType, PRIVATE_CHANNELS, type Page, type PlaceOrderRequest, type PlaceOrderResponse, type PlaceOrderResult, type PongFrame, type Pool, type PoolStatus, PoolsResource, type PublicTrade, type QueryOf, RateLimitError, RateLimiter, type RateLimiterOptions, type RateLimiterState, type ReconnectOptions, type RequestOptions, type ResyncReason, type RetryInfo, SUPPORTED_PROTOCOL_VERSION, ServerError, type ServerTime, type SessionRevokedData, type SessionRevokedEvent, type SnapshotSource, type SortDirection, type SubAccount, type SubscribeResult, type SubscribedFrame, type TickerUpdateEvent, type TimeInForce, type TradeNewEvent, TradingResource, type TriggerDirection, TypedEmitter, USER_AGENT, UnprocessableError, type UnsubscribedFrame, VERSION, ValidationError, WS_BOOK_DEPTH, WalletResource, type WebSocketConstructor, type WebSocketLike, type WelcomeFrame, type Withdrawal, type WithdrawalAddress, type WithdrawalStatus, type WithdrawalUpdatedEvent, type WsEvent, type WsLogger, assertAmountFields, type components, errorFromResponse, isAmount, isKnownErrorCode, isLocalHost, isRetryable, type operations, paginate, type paths };

package/dist/index.js

@@ -54,6 +54,8 @@ var AuthenticationError = class extends CexyApiError {
 };
 var ForbiddenError = class extends CexyApiError {
 };
+var JurisdictionBlockedError = class extends ForbiddenError {
+};
 var NotFoundError = class extends CexyApiError {
 };
 var ValidationError = class extends CexyApiError {
@@ -76,8 +78,8 @@ var STATUS_CLASSES = {
   401: AuthenticationError,
   403: ForbiddenError,
   404: NotFoundError,
-  451: ForbiddenError,
-  // unavailable for legal reasons (JURISDICTION_BLOCKED)
+  451: JurisdictionBlockedError,
+  // unavailable for legal reasons
   409: ConflictError,
   422: UnprocessableError
 };
@@ -170,6 +172,7 @@ function errorFromResponse(status, body, headers, redact = (t) => t) {
   if (status === 429 || init.code === "RATE_LIMITED") {
     return new RateLimitError(init, retryAfterMs(headers, init.details));
   }
+  if (init.code === "JURISDICTION_BLOCKED") return new JurisdictionBlockedError(init);
   if (env && !isKnownErrorCode(env.code)) return new CexyApiError(init);
   if (status >= 500) return new ServerError(init);
   const Cls = STATUS_CLASSES[status] ?? CexyApiError;
@@ -389,7 +392,13 @@ var Transport = class {
     let res;
     let text;
     try {
-      res = await this.config.fetch(url.toString(), { method: info.method, headers, body, signal: ctrl.signal });
+      res = await this.config.fetch(url.toString(), {
+        method: info.method,
+        headers,
+        body,
+        signal: ctrl.signal,
+        redirect: "manual"
+      });
       text = await res.text();
     } catch (err) {
       if (opts.signal?.aborted) throw opts.signal.reason ?? err;
@@ -401,6 +410,14 @@ var Transport = class {
       clearTimeout(timer);
       opts.signal?.removeEventListener("abort", onAbort);
     }
+    if (res.type === "opaqueredirect" || res.status >= 300 && res.status < 400 || res.redirected) {
+      throw new CexyApiError({
+        status: res.status,
+        code: "UNEXPECTED_REDIRECT",
+        message: `${info.method} ${info.path}: the server answered with a redirect (HTTP ${res.status}); the SDK does not follow redirects. Check baseUrl.`,
+        retryable: false
+      });
+    }
     this.config.limiter?.update(res.headers);
     if (!res.ok) {
       const parsed = safeJson(text);
@@ -899,7 +916,7 @@ var TradingResource = class extends Resource {
 };
 
 // src/version.ts
-var VERSION = "0.1.0-dev.0";
+var VERSION = "0.1.0-dev.3";
 var USER_AGENT = `cexy-typescript/${VERSION}`;
 
 // src/ws/emitter.ts
@@ -1659,7 +1676,7 @@ var CexyClient = class {
     assertSecureUrl(parsed, "https:", "http:", options.allowInsecure === true, "baseUrl");
     this.#allowInsecure = options.allowInsecure === true;
     const fetchImpl = options.fetch ?? globalThis.fetch;
-    if (!fetchImpl) throw new CexyConfigError("no global fetch found (Node 20+ required); pass options.fetch");
+    if (!fetchImpl) throw new CexyConfigError("no global fetch found (Node 22+ required); pass options.fetch");
     const timeoutMs = options.timeoutMs ?? 1e4;
     const maxRetries = options.maxRetries ?? 3;
     if (!(timeoutMs > 0)) throw new CexyConfigError("timeoutMs must be > 0");
@@ -1749,4 +1766,4 @@ function canSetUserAgent() {
   return !(typeof g.window !== "undefined" && typeof g.window.document !== "undefined");
 }
 
-export { AccountResource, ApiKeyAuthenticator, AssetsResource, AuthenticationError, CexyApiError, CexyClient, CexyConfigError, CexyConnectionError, CexyError, CexyTimeoutError, CexyWebSocket, CexyWebSocketError, ConflictError, DEFAULT_BASE_URL, DEFAULT_RPM_ANONYMOUS, DEFAULT_RPM_WITH_KEY, DEFAULT_WS_URL, ExportsResource, FeesResource, ForbiddenError, InvalidAmountError, KNOWN_EVENT_TYPES, LiveOrderBook, MarketsResource, NetworksResource, NotFoundError, OPERATIONS, OrderStateUnknownError, PRIVATE_CHANNELS, PoolsResource, RateLimitError, RateLimiter, SUPPORTED_PROTOCOL_VERSION, ServerError, TradingResource, TypedEmitter, USER_AGENT, UnprocessableError, VERSION, ValidationError, WS_BOOK_DEPTH, WalletResource, assertAmountFields, errorFromResponse, isAmount, isKnownErrorCode, isLocalHost, isRetryable, paginate };
+export { AccountResource, ApiKeyAuthenticator, AssetsResource, AuthenticationError, CexyApiError, CexyClient, CexyConfigError, CexyConnectionError, CexyError, CexyTimeoutError, CexyWebSocket, CexyWebSocketError, ConflictError, DEFAULT_BASE_URL, DEFAULT_RPM_ANONYMOUS, DEFAULT_RPM_WITH_KEY, DEFAULT_WS_URL, ExportsResource, FeesResource, ForbiddenError, InvalidAmountError, JurisdictionBlockedError, KNOWN_EVENT_TYPES, LiveOrderBook, MarketsResource, NetworksResource, NotFoundError, OPERATIONS, OrderStateUnknownError, PRIVATE_CHANNELS, PoolsResource, RateLimitError, RateLimiter, SUPPORTED_PROTOCOL_VERSION, ServerError, TradingResource, TypedEmitter, USER_AGENT, UnprocessableError, VERSION, ValidationError, WS_BOOK_DEPTH, WalletResource, assertAmountFields, errorFromResponse, isAmount, isKnownErrorCode, isLocalHost, isRetryable, paginate };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cexyio/cexy",
-  "version": "0.1.0-dev.0",
+  "version": "0.1.0-dev.3",
   "description": "Official TypeScript/JavaScript SDK for the CEXY.io REST and WebSocket API",
   "license": "MIT",
   "author": "CEXY.io",
@@ -43,7 +43,7 @@
   ],
   "sideEffects": false,
   "engines": {
-    "node": ">=20"
+    "node": ">=22"
   },
   "scripts": {
     "generate": "node scripts/generate.mjs",
@@ -65,16 +65,16 @@
     }
   },
   "devDependencies": {
-    "@eslint/js": "^9.39.0",
-    "@types/node": "^20.19.0",
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^22.20.4",
     "@types/ws": "^8.18.0",
-    "eslint": "^9.39.0",
+    "eslint": "^10.11.0",
     "openapi-typescript": "^7.13.0",
     "tsup": "^8.5.0",
     "typescript": "~5.9.3",
     "typescript-eslint": "^8.70.0",
-    "vite": "^6.4.0",
-    "vitest": "^3.2.7",
+    "vite": "^8.3.0",
+    "vitest": "^5.0.2",
     "ws": "^8.18.0"
   },
   "publishConfig": {