@cexyio/cexy 0.1.0-dev.2 → 0.1.0-dev.4

package/README.md

@@ -5,7 +5,7 @@ The official TypeScript/JavaScript SDK for the [CEXY.io](https://cexy.io) REST a
 - Typed models generated from the public OpenAPI spec ([cexy-api-spec](https://github.com/cexyio/cexy-api-spec)).
 - Safe by default: retries with backoff, order placement that never duplicates (via `client_order_id`), a client-side rate limiter.
 - A WebSocket client with heartbeat, reconnect and a live order book that applies the sync rules for you.
-- ESM and CommonJS, Node 20+, zero runtime dependencies.
+- ESM and CommonJS, Node 22+, zero runtime dependencies.
 
 > **Status: 0.x.** The API is not yet frozen. It stays 0.x until the exchange ships HMAC request signing,
 > which will change how credentials are sent.
@@ -15,7 +15,7 @@ The official TypeScript/JavaScript SDK for the [CEXY.io](https://cexy.io) REST a
 
 ```bash
 npm install @cexyio/cexy@next
-# Node only, optional: lets the WebSocket client send a User-Agent (recommended before Node 22)
+# Node only, optional: lets the WebSocket client send a User-Agent
 npm install ws
 ```
 
@@ -60,7 +60,23 @@ await cexy.trading.cancelAll({ symbol: "BTC/USDT" }); // { symbol: null } = ever
 ```
 
 `cancelAll` requires `symbol`: the server treats a missing symbol as "every market", so the SDK makes
-you say so with `{ symbol: null }`. The server allows cancel-all 30 times per minute per account.
+you say so with `{ symbol: null }`. An unknown symbol throws `NotFoundError`.
+
+One call handles at most 500 orders and puts each in exactly one list: `cancelled`, `already_closed`
+(it filled, was refused or was cancelled elsewhere first; not an error) or `failed`, with the reason in
+`failures` (`INVALID_STATE` for an order still being placed). `has_more: true` means more orders remain.
+To let the SDK repeat the call for you:
+
+```ts
+const res = await cexy.trading.cancelAll({ symbol: null, untilDone: true });
+// res.stopped: "done" | "max_rounds" | "time_budget"; res.rounds: calls made
+if (res.stopped !== "done" || res.failed.length) console.warn("left over:", res.failures);
+```
+
+`untilDone` repeats while `has_more` is true or a failure is `INVALID_STATE` / `SERVICE_UNAVAILABLE`.
+After a call without progress it waits 1, 2, 4, 8, then 15 s, and it stops after `maxRounds` calls
+(default 20) or before a wait would pass `timeBudgetMs` (default 120 000). The server allows 30 cancel-all
+calls per minute per account; a 429 is retried after its Retry-After, which counts against the budget.
 
 Give both `apiKey` and `apiSecret`, or neither: passing only one throws at construction.
 
@@ -110,7 +126,7 @@ Every API failure throws a `CexyApiError` (or a subclass) with `status`, `code`,
 | `UnprocessableError` | 422: `INSUFFICIENT_FUNDS`, `MARKET_UNAVAILABLE`, ... |
 | `RateLimitError` | 429, with `retryAfterMs` |
 | `ServerError` | 5xx |
-| `CexyApiError` | any code this SDK version does not know yet |
+| `CexyApiError` | any code this SDK version does not know yet, and `UNEXPECTED_REDIRECT` (the server answered with a 3xx; set by the SDK, see `CLIENT_ERROR_CODES`) |
 
 Local problems use `CexyConfigError`, `InvalidAmountError`, `CexyConnectionError` / `CexyTimeoutError`
 and `OrderStateUnknownError`. `ErrorCode` is a union of the known codes plus `string`, because new codes
@@ -215,7 +231,7 @@ use public channels and poll REST for private state. If the session is revoked,
 `authLost`; public channels keep working.
 
 In Node the client uses the optional `ws` package when installed (so it can send the SDK User-Agent),
-otherwise the global `WebSocket` (Node 22+, browsers).
+otherwise the global `WebSocket` (Node, browsers).
 
 ## Browsers
 
@@ -229,6 +245,10 @@ endpoints from a server. Browsers do not let scripts set `User-Agent`, so the SD
 - Credentials go only in the `X-API-Key` / `X-API-Secret` headers and only on private endpoints; never in URLs.
 - Only `https://` base URLs and `wss://` WebSocket URLs are accepted. `allowInsecure: true` permits
   `http://` / `ws://` solely for `localhost`, `127.0.0.1` or `::1` (local test servers).
+- The SDK **never follows HTTP redirects**. A 3xx answer throws a `CexyApiError` with code
+  `UNEXPECTED_REDIRECT` (not retried), so credentials are never re-sent to another host and an order
+  is never re-posted to a redirect target. If you pass your own `fetch`, it must honour `redirect: "manual"`: one that follows redirects
+  anyway has already sent your credentials by the time the SDK notices.
 - The SDK redacts the secret from `toString()`, `util.inspect`, `JSON.stringify` and error messages.
 - Keep keys in environment variables or a secret manager, not in code.
 

package/dist/index.cjs

@@ -131,6 +131,7 @@ var KNOWN_CODES = /* @__PURE__ */ new Set([
   "UNDER_MAINTENANCE",
   "ENGINE_OVERLOADED"
 ]);
+var CLIENT_ERROR_CODES = { UNEXPECTED_REDIRECT: "UNEXPECTED_REDIRECT" };
 function isKnownErrorCode(code) {
   return KNOWN_CODES.has(code);
 }
@@ -394,7 +395,13 @@ var Transport = class {
     let res;
     let text;
     try {
-      res = await this.config.fetch(url.toString(), { method: info.method, headers, body, signal: ctrl.signal });
+      res = await this.config.fetch(url.toString(), {
+        method: info.method,
+        headers,
+        body,
+        signal: ctrl.signal,
+        redirect: "manual"
+      });
       text = await res.text();
     } catch (err) {
       if (opts.signal?.aborted) throw opts.signal.reason ?? err;
@@ -406,6 +413,14 @@ var Transport = class {
       clearTimeout(timer);
       opts.signal?.removeEventListener("abort", onAbort);
     }
+    if (res.type === "opaqueredirect" || res.status >= 300 && res.status < 400 || res.redirected) {
+      throw new CexyApiError({
+        status: res.status,
+        code: CLIENT_ERROR_CODES.UNEXPECTED_REDIRECT,
+        message: `${info.method} ${info.path}: the server answered with a redirect (HTTP ${res.status}); the SDK does not follow redirects. Check baseUrl.`,
+        retryable: false
+      });
+    }
     this.config.limiter?.update(res.headers);
     if (!res.ok) {
       const parsed = safeJson(text);
@@ -776,6 +791,8 @@ var WalletResource = class extends Resource {
     return this.data({ op: "deposit_address", query: params }, opts);
   }
 };
+var CANCEL_RETRY_CODES = /* @__PURE__ */ new Set(["INVALID_STATE", "SERVICE_UNAVAILABLE"]);
+var CANCEL_BACKOFF_S = [1, 2, 4, 8, 15];
 var ORDER_AMOUNT_FIELDS = ["price", "quantity", "quote_quantity", "stop_price"];
 var TradingResource = class extends Resource {
   /** Open orders, optionally filtered by market/status. */
@@ -882,16 +899,6 @@ var TradingResource = class extends Resource {
       }
     }
   }
-  /**
-   * Cancels every open order in one market: `cancelAll({ symbol: "BTC/USDT" })`.
-   * To cancel across ALL markets, pass `symbol: null` explicitly: `cancelAll({ symbol: null })`.
-   * Omitting `symbol` is an error, so an account-wide cancel never happens by accident
-   * (the server itself treats `{}` as every market).
-   *
-   * The server limits cancel-all to 30 calls per minute per account. It is naturally
-   * repeatable, so it is retried after network errors; a retry reports only what that retry
-   * cancelled.
-   */
   async cancelAll(params, opts) {
     const hasSymbol = !!params && typeof params === "object" && Object.prototype.hasOwnProperty.call(params, "symbol");
     const symbol = hasSymbol ? params.symbol : void 0;
@@ -899,12 +906,62 @@ var TradingResource = class extends Resource {
     if (typeof symbol === "string" && symbol !== "") body = { symbol };
     else if (hasSymbol && symbol === null) body = {};
     else throw new CexyConfigError('cancelAll(): pass { symbol: "BASE/QUOTE" }, or { symbol: null } to cancel in every market');
-    return this.data({ op: "cancel_all", body }, opts);
+    const once = () => this.data({ op: "cancel_all", body }, opts);
+    if (params.untilDone !== true) return once();
+    const maxRounds = params.maxRounds ?? 20;
+    const budgetMs = params.timeBudgetMs ?? 12e4;
+    if (!(maxRounds >= 1)) throw new CexyConfigError("cancelAll(): maxRounds must be >= 1");
+    if (!(budgetMs > 0)) throw new CexyConfigError("cancelAll(): timeBudgetMs must be > 0");
+    const now = this.t.config.now ?? Date.now;
+    const start = now();
+    const state = /* @__PURE__ */ new Map();
+    let rounds = 0;
+    let idle = 0;
+    let last;
+    let stopped;
+    for (; ; ) {
+      last = await once();
+      rounds++;
+      const failures = last.failures ?? [];
+      for (const id of last.cancelled ?? []) state.set(id, { list: "cancelled" });
+      for (const id of last.already_closed ?? []) state.set(id, { list: "already_closed" });
+      for (const id of last.failed ?? []) {
+        const failure = failures.find((f) => f.order_id === id);
+        state.set(id, failure ? { list: "failed", failure } : { list: "failed" });
+      }
+      const progress = (last.cancelled?.length ?? 0) + (last.already_closed?.length ?? 0) > 0;
+      if (!last.has_more && !failures.some((f) => CANCEL_RETRY_CODES.has(f.code))) {
+        stopped = "done";
+        break;
+      }
+      if (rounds >= maxRounds) {
+        stopped = "max_rounds";
+        break;
+      }
+      let waitMs = 0;
+      if (progress) idle = 0;
+      else waitMs = (CANCEL_BACKOFF_S[Math.min(idle++, CANCEL_BACKOFF_S.length - 1)] ?? 15) * 1e3;
+      if (now() - start + waitMs >= budgetMs) {
+        stopped = "time_budget";
+        break;
+      }
+      if (waitMs > 0) await this.t.config.sleep(waitMs, opts?.signal);
+    }
+    const pick = (list) => [...state].filter(([, v]) => v.list === list).map(([id]) => id);
+    return {
+      cancelled: pick("cancelled"),
+      already_closed: pick("already_closed"),
+      failed: pick("failed"),
+      failures: [...state.values()].flatMap((v) => v.list === "failed" && v.failure ? [v.failure] : []),
+      has_more: last.has_more,
+      rounds,
+      stopped
+    };
   }
 };
 
 // src/version.ts
-var VERSION = "0.1.0-dev.2";
+var VERSION = "0.1.0-dev.4";
 var USER_AGENT = `cexy-typescript/${VERSION}`;
 
 // src/ws/emitter.ts
@@ -1664,7 +1721,7 @@ var CexyClient = class {
     assertSecureUrl(parsed, "https:", "http:", options.allowInsecure === true, "baseUrl");
     this.#allowInsecure = options.allowInsecure === true;
     const fetchImpl = options.fetch ?? globalThis.fetch;
-    if (!fetchImpl) throw new CexyConfigError("no global fetch found (Node 20+ required); pass options.fetch");
+    if (!fetchImpl) throw new CexyConfigError("no global fetch found (Node 22+ required); pass options.fetch");
     const timeoutMs = options.timeoutMs ?? 1e4;
     const maxRetries = options.maxRetries ?? 3;
     if (!(timeoutMs > 0)) throw new CexyConfigError("timeoutMs must be > 0");
@@ -1685,6 +1742,7 @@ var CexyClient = class {
       userAgent: canSetUserAgent() ? [USER_AGENT, options.userAgentSuffix].filter(Boolean).join(" ") : null,
       sleep: sleep2,
       random: options.random ?? Math.random,
+      now: options.now ?? Date.now,
       onRetry: options.onRetry
     });
     const t = this.#transport;
@@ -1758,6 +1816,7 @@ exports.AccountResource = AccountResource;
 exports.ApiKeyAuthenticator = ApiKeyAuthenticator;
 exports.AssetsResource = AssetsResource;
 exports.AuthenticationError = AuthenticationError;
+exports.CLIENT_ERROR_CODES = CLIENT_ERROR_CODES;
 exports.CexyApiError = CexyApiError;
 exports.CexyClient = CexyClient;
 exports.CexyConfigError = CexyConfigError;

package/dist/index.d.cts

@@ -163,6 +163,8 @@ interface TransportConfig {
     userAgent: string | null;
     sleep: (ms: number, signal?: AbortSignal) => Promise<void>;
     random: () => number;
+    /** Milliseconds clock (default `Date.now`); injectable for tests. */
+    now?: () => number;
     onRetry?: ((info: RetryInfo) => void) | undefined;
 }
 interface CallSpec {
@@ -730,7 +732,11 @@ interface paths {
         put?: never;
         /**
          * Cancels every open order, optionally within one market.
-         * @description Best-effort: a failure on one order does not stop the rest, and both outcomes are reported. A panic-button endpoint that stops at the first problem is worse than useless.
+         * @description Best-effort: a failure on one order does not stop the rest, and every outcome is reported. A panic-button endpoint that stops at the first problem is worse than useless.
+         *
+         *     An order still being placed when the call starts (status `pending`, for as long as its own placement request runs) is waited for, up to 500 ms per call in total: cancelled if it opens, reported in `already_closed` if it fills or is refused, and in `failed` with code `INVALID_STATE` if it is still being placed at the deadline. Orders placed after the call starts are not part of it. At most 500 orders per call; `has_more` says there are others.
+         *
+         *     Limited to 30 calls a minute per account, on top of the general request limit.
          */
         post: operations["cancel_all"];
         delete?: never;
@@ -1037,12 +1043,31 @@ interface components {
             /** @description Limit the cancellation to one market. Omitted or `null`, every market's open orders are cancelled. */
             symbol?: string | null;
         };
-        /** @description What a bulk cancellation achieved. */
+        /**
+         * @description What a bulk cancellation achieved.
+         *
+         *     Every order the call handled is in exactly one of `cancelled`, `already_closed` and `failed`.
+         */
         CancelAllResponse: {
+            /** @description Orders that closed on their own (filled, rejected, cancelled elsewhere) before this call reached them. Nothing was done to them, and they are not failures. */
+            already_closed: string[];
             /** @description Orders cancelled. */
             cancelled: string[];
-            /** @description Orders that could not be cancelled. Each failure is logged server-side. */
+            /** @description Orders that could not be cancelled in this call. Check `failures` for why, then refresh or call again. */
             failed: string[];
+            /** @description Why each order in `failed` could not be cancelled. */
+            failures: components["schemas"]["CancelFailureResponse"][];
+            /** @description More open orders exist than one call handles (500). Call again. */
+            has_more: boolean;
+        };
+        /** @description Why one order could not be cancelled. */
+        CancelFailureResponse: {
+            /** @description The error code of the attempt, as in any error response: e.g. `INVALID_STATE` for an order still being placed when the wait ran out, or `MARKET_UNAVAILABLE`. */
+            code: string;
+            /** @description Its message. */
+            message: string;
+            /** @description The order. */
+            order_id: string;
         };
         /**
          * @description Candle/kline intervals for market data.
@@ -2877,6 +2902,24 @@ interface operations {
                     };
                 };
             };
+            /** @description No such market */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Over 30 calls a minute for this account; `details.retry_after_seconds` says when to retry */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
     order_history: {
@@ -3181,6 +3224,21 @@ type AssetNetwork = S["AssetNetworkResponse"];
 type Balance = S["BalanceResponse"];
 type CancelAllRequest = S["CancelAllRequest"];
 type CancelAllResult = S["CancelAllResponse"];
+/** Why one order could not be cancelled (`CancelAllResult.failures`). */
+type CancelFailure = S["CancelFailureResponse"];
+/** Why a `cancelAll({ ..., untilDone: true })` loop ended. */
+type CancelAllStopReason = "done" | "max_rounds" | "time_budget";
+/**
+ * Merged result of a `cancelAll({ ..., untilDone: true })` loop. Every order is in exactly one
+ * of `cancelled`, `already_closed` and `failed`, in its latest state; `has_more` is the last
+ * round's.
+ */
+interface CancelAllUntilDoneResult extends CancelAllResult {
+    /** Number of cancel-all calls made. */
+    rounds: number;
+    /** `done`: nothing left to retry; otherwise the loop's limit that ended it. */
+    stopped: CancelAllStopReason;
+}
 type Candle = S["CandleResponse"];
 type CandleInterval = S["CandleInterval"];
 type DepositAddress = S["DepositAddressResponse"];
@@ -3344,6 +3402,14 @@ interface PlaceOrderResult extends PlaceOrderResponse {
  */
 interface CancelAllParams {
     symbol: string | null;
+    /**
+     * Repeat the call until nothing is left to retry (see `cancelAll`). Default false: one call.
+     */
+    untilDone?: boolean;
+    /** With `untilDone`: at most this many calls. Default 20. */
+    maxRounds?: number;
+    /** With `untilDone`: stop before a wait would take the loop to this many ms. Default 120000. */
+    timeBudgetMs?: number;
 }
 declare class TradingResource extends Resource {
     #private;
@@ -3380,12 +3446,27 @@ declare class TradingResource extends Resource {
      * Cancels every open order in one market: `cancelAll({ symbol: "BTC/USDT" })`.
      * To cancel across ALL markets, pass `symbol: null` explicitly: `cancelAll({ symbol: null })`.
      * Omitting `symbol` is an error, so an account-wide cancel never happens by accident
-     * (the server itself treats `{}` as every market).
+     * (the server itself treats `{}` as every market). An unknown symbol throws `NotFoundError`.
+     *
+     * One call handles at most 500 orders. Every order it handled is in exactly one list:
+     * `cancelled`; `already_closed` (it filled, was refused or was cancelled elsewhere first:
+     * not an error); or `failed`, with the reason in `failures` (`INVALID_STATE` for an order
+     * still being placed when the server's 500 ms wait ran out). `has_more` says more orders
+     * remain: call again.
+     *
+     * With `untilDone: true` the SDK does that for you. It repeats while `has_more` is true or a
+     * failure is `INVALID_STATE` / `SERVICE_UNAVAILABLE`. After a call that made no progress it
+     * waits 1, 2, 4, 8 and then 15 s, starting over after any progress. It stops after
+     * `maxRounds` calls or before a wait would pass `timeBudgetMs`, and returns the merged
+     * result with `rounds` and `stopped`. Other failure codes are returned, never retried.
      *
-     * The server limits cancel-all to 30 calls per minute per account. It is naturally
-     * repeatable, so it is retried after network errors; a retry reports only what that retry
-     * cancelled.
+     * The server allows 30 cancel-all calls per minute per account (a 429 is retried after its
+     * Retry-After). The call is naturally repeatable and needs no Idempotency-Key, so it is
+     * retried after network errors; a retry reports only what that retry did.
      */
+    cancelAll(params: CancelAllParams & {
+        untilDone: true;
+    }, opts?: RequestOptions): Promise<CancelAllUntilDoneResult>;
     cancelAll(params: CancelAllParams, opts?: RequestOptions): Promise<CancelAllResult>;
 }
 
@@ -3484,7 +3565,16 @@ declare class RateLimitError extends CexyApiError {
 /** 5xx */
 declare class ServerError extends CexyApiError {
 }
-/** True for codes listed in errors.yaml. */
+/**
+ * Codes the SDK itself sets on a `CexyApiError`; the API never sends them, so they are not in
+ * errors.yaml and `isKnownErrorCode()` returns false for them.
+ * - `UNEXPECTED_REDIRECT`: the server answered with a 3xx. The SDK never follows redirects (the
+ *   credentials would go to the redirect target); not retryable.
+ */
+declare const CLIENT_ERROR_CODES: {
+    readonly UNEXPECTED_REDIRECT: "UNEXPECTED_REDIRECT";
+};
+/** True for codes listed in errors.yaml (server codes; see `CLIENT_ERROR_CODES` for the SDK's own). */
 declare function isKnownErrorCode(code: string): code is KnownErrorCode;
 /**
  * Builds the right error subclass for an HTTP error response.
@@ -3844,7 +3934,12 @@ interface CexyClientOptions {
     timeoutMs?: number;
     /** Retries after the first attempt for retryable failures. Default 3. */
     maxRetries?: number;
-    /** A `fetch` implementation. Default: the global `fetch` (Node 20+, browsers). */
+    /**
+     * A `fetch` implementation. Default: the global `fetch` (Node 22+, browsers).
+     * It must honour `redirect: "manual"` (the SDK never follows redirects). A fetch that follows
+     * them anyway has already sent the credentials to the redirect target by the time the SDK sees
+     * `response.redirected` and throws `UNEXPECTED_REDIRECT`.
+     */
     fetch?: FetchLike;
     /**
      * Client-side rate limit in requests per minute, or `false` to disable. Default 100/min
@@ -3866,6 +3961,8 @@ interface CexyClientOptions {
     sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;
     /** @internal Deterministic jitter in tests. */
     random?: () => number;
+    /** @internal Replace the clock in tests (milliseconds). */
+    now?: () => number;
 }
 /**
  * CEXY.io REST client.
@@ -3925,11 +4022,11 @@ declare function isAmount(value: unknown): value is Amount;
 declare function assertAmountFields(body: Record<string, unknown>, fields: readonly string[], context: string): void;
 
 /** SDK version, kept in sync with package.json (a test enforces this). */
-declare const VERSION = "0.1.0-dev.2";
+declare const VERSION = "0.1.0-dev.4";
 /** Default User-Agent product token. */
-declare const USER_AGENT = "cexy-typescript/0.1.0-dev.2";
+declare const USER_AGENT = "cexy-typescript/0.1.0-dev.4";
 
 /** True for loopback hosts, the only ones where plain-text transport may be allowed. */
 declare function isLocalHost(hostname: string): boolean;
 
-export { AccountResource, type Amount, type ApiKey, ApiKeyAuthenticator, type ApiScope, type Asset, type AssetNetwork, AssetsResource, type AuthRequest, type AuthResult, type AuthenticatedFrame, AuthenticationError, type Authenticator, type Balance, type BalanceUpdatedEvent, type BookLevel, type CancelAllParams, type CancelAllRequest, type CancelAllResult, type Candle, type CandleInterval, CexyApiError, type CexyApiErrorInit, CexyClient, type CexyClientOptions, CexyConfigError, CexyConnectionError, CexyError, CexyTimeoutError, CexyWebSocket, CexyWebSocketError, type CexyWebSocketEvents, type CexyWebSocketOptions, type CloseInfo, ConflictError, type CursorParams, DEFAULT_BASE_URL, DEFAULT_RPM_ANONYMOUS, DEFAULT_RPM_WITH_KEY, DEFAULT_WS_URL, type Deposit, type DepositAddress, type DepositEvent, type DepositStatus, type ErrorBody, type ErrorCode, type ErrorFrame, type EventMap, type ExchangeConfig, type ExitPoolRequest, type ExitPoolResult, ExportsResource, type FeeSchedule, FeesResource, type FetchLike, type Fill, ForbiddenError, InvalidAmountError, type IterateOptions, type JoinPoolRequest, type JoinPoolResult, JurisdictionBlockedError, KNOWN_EVENT_TYPES, type KnownErrorCode, type LedgerEntry, type LedgerEntryKind, type LiquidityRole, type Listener, LiveOrderBook, type LiveOrderBookEvents, type LiveOrderBookOptions, type MaintenanceState, type Market, type MarketStatus, type MarketStatusEvent, MarketsResource, type Network, NetworksResource, NotFoundError, type Notification, type NotificationKind, OPERATIONS, type OperationAuth, type OperationId, type OperationInfo, type OperationScope, type Order, type OrderBook, type OrderBookUpdateData, type OrderBookUpdateEvent, type OrderEvent, type OrderSide, OrderStateUnknownError, type OrderStatus, type OrderType, PRIVATE_CHANNELS, type Page, type PlaceOrderRequest, type PlaceOrderResponse, type PlaceOrderResult, type PongFrame, type Pool, type PoolStatus, PoolsResource, type PublicTrade, type QueryOf, RateLimitError, RateLimiter, type RateLimiterOptions, type RateLimiterState, type ReconnectOptions, type RequestOptions, type ResyncReason, type RetryInfo, SUPPORTED_PROTOCOL_VERSION, ServerError, type ServerTime, type SessionRevokedData, type SessionRevokedEvent, type SnapshotSource, type SortDirection, type SubAccount, type SubscribeResult, type SubscribedFrame, type TickerUpdateEvent, type TimeInForce, type TradeNewEvent, TradingResource, type TriggerDirection, TypedEmitter, USER_AGENT, UnprocessableError, type UnsubscribedFrame, VERSION, ValidationError, WS_BOOK_DEPTH, WalletResource, type WebSocketConstructor, type WebSocketLike, type WelcomeFrame, type Withdrawal, type WithdrawalAddress, type WithdrawalStatus, type WithdrawalUpdatedEvent, type WsEvent, type WsLogger, assertAmountFields, type components, errorFromResponse, isAmount, isKnownErrorCode, isLocalHost, isRetryable, type operations, paginate, type paths };
+export { AccountResource, type Amount, type ApiKey, ApiKeyAuthenticator, type ApiScope, type Asset, type AssetNetwork, AssetsResource, type AuthRequest, type AuthResult, type AuthenticatedFrame, AuthenticationError, type Authenticator, type Balance, type BalanceUpdatedEvent, type BookLevel, CLIENT_ERROR_CODES, type CancelAllParams, type CancelAllRequest, type CancelAllResult, type CancelAllStopReason, type CancelAllUntilDoneResult, type CancelFailure, type Candle, type CandleInterval, CexyApiError, type CexyApiErrorInit, CexyClient, type CexyClientOptions, CexyConfigError, CexyConnectionError, CexyError, CexyTimeoutError, CexyWebSocket, CexyWebSocketError, type CexyWebSocketEvents, type CexyWebSocketOptions, type CloseInfo, ConflictError, type CursorParams, DEFAULT_BASE_URL, DEFAULT_RPM_ANONYMOUS, DEFAULT_RPM_WITH_KEY, DEFAULT_WS_URL, type Deposit, type DepositAddress, type DepositEvent, type DepositStatus, type ErrorBody, type ErrorCode, type ErrorFrame, type EventMap, type ExchangeConfig, type ExitPoolRequest, type ExitPoolResult, ExportsResource, type FeeSchedule, FeesResource, type FetchLike, type Fill, ForbiddenError, InvalidAmountError, type IterateOptions, type JoinPoolRequest, type JoinPoolResult, JurisdictionBlockedError, KNOWN_EVENT_TYPES, type KnownErrorCode, type LedgerEntry, type LedgerEntryKind, type LiquidityRole, type Listener, LiveOrderBook, type LiveOrderBookEvents, type LiveOrderBookOptions, type MaintenanceState, type Market, type MarketStatus, type MarketStatusEvent, MarketsResource, type Network, NetworksResource, NotFoundError, type Notification, type NotificationKind, OPERATIONS, type OperationAuth, type OperationId, type OperationInfo, type OperationScope, type Order, type OrderBook, type OrderBookUpdateData, type OrderBookUpdateEvent, type OrderEvent, type OrderSide, OrderStateUnknownError, type OrderStatus, type OrderType, PRIVATE_CHANNELS, type Page, type PlaceOrderRequest, type PlaceOrderResponse, type PlaceOrderResult, type PongFrame, type Pool, type PoolStatus, PoolsResource, type PublicTrade, type QueryOf, RateLimitError, RateLimiter, type RateLimiterOptions, type RateLimiterState, type ReconnectOptions, type RequestOptions, type ResyncReason, type RetryInfo, SUPPORTED_PROTOCOL_VERSION, ServerError, type ServerTime, type SessionRevokedData, type SessionRevokedEvent, type SnapshotSource, type SortDirection, type SubAccount, type SubscribeResult, type SubscribedFrame, type TickerUpdateEvent, type TimeInForce, type TradeNewEvent, TradingResource, type TriggerDirection, TypedEmitter, USER_AGENT, UnprocessableError, type UnsubscribedFrame, VERSION, ValidationError, WS_BOOK_DEPTH, WalletResource, type WebSocketConstructor, type WebSocketLike, type WelcomeFrame, type Withdrawal, type WithdrawalAddress, type WithdrawalStatus, type WithdrawalUpdatedEvent, type WsEvent, type WsLogger, assertAmountFields, type components, errorFromResponse, isAmount, isKnownErrorCode, isLocalHost, isRetryable, type operations, paginate, type paths };

package/dist/index.d.ts

@@ -163,6 +163,8 @@ interface TransportConfig {
     userAgent: string | null;
     sleep: (ms: number, signal?: AbortSignal) => Promise<void>;
     random: () => number;
+    /** Milliseconds clock (default `Date.now`); injectable for tests. */
+    now?: () => number;
     onRetry?: ((info: RetryInfo) => void) | undefined;
 }
 interface CallSpec {
@@ -730,7 +732,11 @@ interface paths {
         put?: never;
         /**
          * Cancels every open order, optionally within one market.
-         * @description Best-effort: a failure on one order does not stop the rest, and both outcomes are reported. A panic-button endpoint that stops at the first problem is worse than useless.
+         * @description Best-effort: a failure on one order does not stop the rest, and every outcome is reported. A panic-button endpoint that stops at the first problem is worse than useless.
+         *
+         *     An order still being placed when the call starts (status `pending`, for as long as its own placement request runs) is waited for, up to 500 ms per call in total: cancelled if it opens, reported in `already_closed` if it fills or is refused, and in `failed` with code `INVALID_STATE` if it is still being placed at the deadline. Orders placed after the call starts are not part of it. At most 500 orders per call; `has_more` says there are others.
+         *
+         *     Limited to 30 calls a minute per account, on top of the general request limit.
          */
         post: operations["cancel_all"];
         delete?: never;
@@ -1037,12 +1043,31 @@ interface components {
             /** @description Limit the cancellation to one market. Omitted or `null`, every market's open orders are cancelled. */
             symbol?: string | null;
         };
-        /** @description What a bulk cancellation achieved. */
+        /**
+         * @description What a bulk cancellation achieved.
+         *
+         *     Every order the call handled is in exactly one of `cancelled`, `already_closed` and `failed`.
+         */
         CancelAllResponse: {
+            /** @description Orders that closed on their own (filled, rejected, cancelled elsewhere) before this call reached them. Nothing was done to them, and they are not failures. */
+            already_closed: string[];
             /** @description Orders cancelled. */
             cancelled: string[];
-            /** @description Orders that could not be cancelled. Each failure is logged server-side. */
+            /** @description Orders that could not be cancelled in this call. Check `failures` for why, then refresh or call again. */
             failed: string[];
+            /** @description Why each order in `failed` could not be cancelled. */
+            failures: components["schemas"]["CancelFailureResponse"][];
+            /** @description More open orders exist than one call handles (500). Call again. */
+            has_more: boolean;
+        };
+        /** @description Why one order could not be cancelled. */
+        CancelFailureResponse: {
+            /** @description The error code of the attempt, as in any error response: e.g. `INVALID_STATE` for an order still being placed when the wait ran out, or `MARKET_UNAVAILABLE`. */
+            code: string;
+            /** @description Its message. */
+            message: string;
+            /** @description The order. */
+            order_id: string;
         };
         /**
          * @description Candle/kline intervals for market data.
@@ -2877,6 +2902,24 @@ interface operations {
                     };
                 };
             };
+            /** @description No such market */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Over 30 calls a minute for this account; `details.retry_after_seconds` says when to retry */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
     order_history: {
@@ -3181,6 +3224,21 @@ type AssetNetwork = S["AssetNetworkResponse"];
 type Balance = S["BalanceResponse"];
 type CancelAllRequest = S["CancelAllRequest"];
 type CancelAllResult = S["CancelAllResponse"];
+/** Why one order could not be cancelled (`CancelAllResult.failures`). */
+type CancelFailure = S["CancelFailureResponse"];
+/** Why a `cancelAll({ ..., untilDone: true })` loop ended. */
+type CancelAllStopReason = "done" | "max_rounds" | "time_budget";
+/**
+ * Merged result of a `cancelAll({ ..., untilDone: true })` loop. Every order is in exactly one
+ * of `cancelled`, `already_closed` and `failed`, in its latest state; `has_more` is the last
+ * round's.
+ */
+interface CancelAllUntilDoneResult extends CancelAllResult {
+    /** Number of cancel-all calls made. */
+    rounds: number;
+    /** `done`: nothing left to retry; otherwise the loop's limit that ended it. */
+    stopped: CancelAllStopReason;
+}
 type Candle = S["CandleResponse"];
 type CandleInterval = S["CandleInterval"];
 type DepositAddress = S["DepositAddressResponse"];
@@ -3344,6 +3402,14 @@ interface PlaceOrderResult extends PlaceOrderResponse {
  */
 interface CancelAllParams {
     symbol: string | null;
+    /**
+     * Repeat the call until nothing is left to retry (see `cancelAll`). Default false: one call.
+     */
+    untilDone?: boolean;
+    /** With `untilDone`: at most this many calls. Default 20. */
+    maxRounds?: number;
+    /** With `untilDone`: stop before a wait would take the loop to this many ms. Default 120000. */
+    timeBudgetMs?: number;
 }
 declare class TradingResource extends Resource {
     #private;
@@ -3380,12 +3446,27 @@ declare class TradingResource extends Resource {
      * Cancels every open order in one market: `cancelAll({ symbol: "BTC/USDT" })`.
      * To cancel across ALL markets, pass `symbol: null` explicitly: `cancelAll({ symbol: null })`.
      * Omitting `symbol` is an error, so an account-wide cancel never happens by accident
-     * (the server itself treats `{}` as every market).
+     * (the server itself treats `{}` as every market). An unknown symbol throws `NotFoundError`.
+     *
+     * One call handles at most 500 orders. Every order it handled is in exactly one list:
+     * `cancelled`; `already_closed` (it filled, was refused or was cancelled elsewhere first:
+     * not an error); or `failed`, with the reason in `failures` (`INVALID_STATE` for an order
+     * still being placed when the server's 500 ms wait ran out). `has_more` says more orders
+     * remain: call again.
+     *
+     * With `untilDone: true` the SDK does that for you. It repeats while `has_more` is true or a
+     * failure is `INVALID_STATE` / `SERVICE_UNAVAILABLE`. After a call that made no progress it
+     * waits 1, 2, 4, 8 and then 15 s, starting over after any progress. It stops after
+     * `maxRounds` calls or before a wait would pass `timeBudgetMs`, and returns the merged
+     * result with `rounds` and `stopped`. Other failure codes are returned, never retried.
      *
-     * The server limits cancel-all to 30 calls per minute per account. It is naturally
-     * repeatable, so it is retried after network errors; a retry reports only what that retry
-     * cancelled.
+     * The server allows 30 cancel-all calls per minute per account (a 429 is retried after its
+     * Retry-After). The call is naturally repeatable and needs no Idempotency-Key, so it is
+     * retried after network errors; a retry reports only what that retry did.
      */
+    cancelAll(params: CancelAllParams & {
+        untilDone: true;
+    }, opts?: RequestOptions): Promise<CancelAllUntilDoneResult>;
     cancelAll(params: CancelAllParams, opts?: RequestOptions): Promise<CancelAllResult>;
 }
 
@@ -3484,7 +3565,16 @@ declare class RateLimitError extends CexyApiError {
 /** 5xx */
 declare class ServerError extends CexyApiError {
 }
-/** True for codes listed in errors.yaml. */
+/**
+ * Codes the SDK itself sets on a `CexyApiError`; the API never sends them, so they are not in
+ * errors.yaml and `isKnownErrorCode()` returns false for them.
+ * - `UNEXPECTED_REDIRECT`: the server answered with a 3xx. The SDK never follows redirects (the
+ *   credentials would go to the redirect target); not retryable.
+ */
+declare const CLIENT_ERROR_CODES: {
+    readonly UNEXPECTED_REDIRECT: "UNEXPECTED_REDIRECT";
+};
+/** True for codes listed in errors.yaml (server codes; see `CLIENT_ERROR_CODES` for the SDK's own). */
 declare function isKnownErrorCode(code: string): code is KnownErrorCode;
 /**
  * Builds the right error subclass for an HTTP error response.
@@ -3844,7 +3934,12 @@ interface CexyClientOptions {
     timeoutMs?: number;
     /** Retries after the first attempt for retryable failures. Default 3. */
     maxRetries?: number;
-    /** A `fetch` implementation. Default: the global `fetch` (Node 20+, browsers). */
+    /**
+     * A `fetch` implementation. Default: the global `fetch` (Node 22+, browsers).
+     * It must honour `redirect: "manual"` (the SDK never follows redirects). A fetch that follows
+     * them anyway has already sent the credentials to the redirect target by the time the SDK sees
+     * `response.redirected` and throws `UNEXPECTED_REDIRECT`.
+     */
     fetch?: FetchLike;
     /**
      * Client-side rate limit in requests per minute, or `false` to disable. Default 100/min
@@ -3866,6 +3961,8 @@ interface CexyClientOptions {
     sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;
     /** @internal Deterministic jitter in tests. */
     random?: () => number;
+    /** @internal Replace the clock in tests (milliseconds). */
+    now?: () => number;
 }
 /**
  * CEXY.io REST client.
@@ -3925,11 +4022,11 @@ declare function isAmount(value: unknown): value is Amount;
 declare function assertAmountFields(body: Record<string, unknown>, fields: readonly string[], context: string): void;
 
 /** SDK version, kept in sync with package.json (a test enforces this). */
-declare const VERSION = "0.1.0-dev.2";
+declare const VERSION = "0.1.0-dev.4";
 /** Default User-Agent product token. */
-declare const USER_AGENT = "cexy-typescript/0.1.0-dev.2";
+declare const USER_AGENT = "cexy-typescript/0.1.0-dev.4";
 
 /** True for loopback hosts, the only ones where plain-text transport may be allowed. */
 declare function isLocalHost(hostname: string): boolean;
 
-export { AccountResource, type Amount, type ApiKey, ApiKeyAuthenticator, type ApiScope, type Asset, type AssetNetwork, AssetsResource, type AuthRequest, type AuthResult, type AuthenticatedFrame, AuthenticationError, type Authenticator, type Balance, type BalanceUpdatedEvent, type BookLevel, type CancelAllParams, type CancelAllRequest, type CancelAllResult, type Candle, type CandleInterval, CexyApiError, type CexyApiErrorInit, CexyClient, type CexyClientOptions, CexyConfigError, CexyConnectionError, CexyError, CexyTimeoutError, CexyWebSocket, CexyWebSocketError, type CexyWebSocketEvents, type CexyWebSocketOptions, type CloseInfo, ConflictError, type CursorParams, DEFAULT_BASE_URL, DEFAULT_RPM_ANONYMOUS, DEFAULT_RPM_WITH_KEY, DEFAULT_WS_URL, type Deposit, type DepositAddress, type DepositEvent, type DepositStatus, type ErrorBody, type ErrorCode, type ErrorFrame, type EventMap, type ExchangeConfig, type ExitPoolRequest, type ExitPoolResult, ExportsResource, type FeeSchedule, FeesResource, type FetchLike, type Fill, ForbiddenError, InvalidAmountError, type IterateOptions, type JoinPoolRequest, type JoinPoolResult, JurisdictionBlockedError, KNOWN_EVENT_TYPES, type KnownErrorCode, type LedgerEntry, type LedgerEntryKind, type LiquidityRole, type Listener, LiveOrderBook, type LiveOrderBookEvents, type LiveOrderBookOptions, type MaintenanceState, type Market, type MarketStatus, type MarketStatusEvent, MarketsResource, type Network, NetworksResource, NotFoundError, type Notification, type NotificationKind, OPERATIONS, type OperationAuth, type OperationId, type OperationInfo, type OperationScope, type Order, type OrderBook, type OrderBookUpdateData, type OrderBookUpdateEvent, type OrderEvent, type OrderSide, OrderStateUnknownError, type OrderStatus, type OrderType, PRIVATE_CHANNELS, type Page, type PlaceOrderRequest, type PlaceOrderResponse, type PlaceOrderResult, type PongFrame, type Pool, type PoolStatus, PoolsResource, type PublicTrade, type QueryOf, RateLimitError, RateLimiter, type RateLimiterOptions, type RateLimiterState, type ReconnectOptions, type RequestOptions, type ResyncReason, type RetryInfo, SUPPORTED_PROTOCOL_VERSION, ServerError, type ServerTime, type SessionRevokedData, type SessionRevokedEvent, type SnapshotSource, type SortDirection, type SubAccount, type SubscribeResult, type SubscribedFrame, type TickerUpdateEvent, type TimeInForce, type TradeNewEvent, TradingResource, type TriggerDirection, TypedEmitter, USER_AGENT, UnprocessableError, type UnsubscribedFrame, VERSION, ValidationError, WS_BOOK_DEPTH, WalletResource, type WebSocketConstructor, type WebSocketLike, type WelcomeFrame, type Withdrawal, type WithdrawalAddress, type WithdrawalStatus, type WithdrawalUpdatedEvent, type WsEvent, type WsLogger, assertAmountFields, type components, errorFromResponse, isAmount, isKnownErrorCode, isLocalHost, isRetryable, type operations, paginate, type paths };
+export { AccountResource, type Amount, type ApiKey, ApiKeyAuthenticator, type ApiScope, type Asset, type AssetNetwork, AssetsResource, type AuthRequest, type AuthResult, type AuthenticatedFrame, AuthenticationError, type Authenticator, type Balance, type BalanceUpdatedEvent, type BookLevel, CLIENT_ERROR_CODES, type CancelAllParams, type CancelAllRequest, type CancelAllResult, type CancelAllStopReason, type CancelAllUntilDoneResult, type CancelFailure, type Candle, type CandleInterval, CexyApiError, type CexyApiErrorInit, CexyClient, type CexyClientOptions, CexyConfigError, CexyConnectionError, CexyError, CexyTimeoutError, CexyWebSocket, CexyWebSocketError, type CexyWebSocketEvents, type CexyWebSocketOptions, type CloseInfo, ConflictError, type CursorParams, DEFAULT_BASE_URL, DEFAULT_RPM_ANONYMOUS, DEFAULT_RPM_WITH_KEY, DEFAULT_WS_URL, type Deposit, type DepositAddress, type DepositEvent, type DepositStatus, type ErrorBody, type ErrorCode, type ErrorFrame, type EventMap, type ExchangeConfig, type ExitPoolRequest, type ExitPoolResult, ExportsResource, type FeeSchedule, FeesResource, type FetchLike, type Fill, ForbiddenError, InvalidAmountError, type IterateOptions, type JoinPoolRequest, type JoinPoolResult, JurisdictionBlockedError, KNOWN_EVENT_TYPES, type KnownErrorCode, type LedgerEntry, type LedgerEntryKind, type LiquidityRole, type Listener, LiveOrderBook, type LiveOrderBookEvents, type LiveOrderBookOptions, type MaintenanceState, type Market, type MarketStatus, type MarketStatusEvent, MarketsResource, type Network, NetworksResource, NotFoundError, type Notification, type NotificationKind, OPERATIONS, type OperationAuth, type OperationId, type OperationInfo, type OperationScope, type Order, type OrderBook, type OrderBookUpdateData, type OrderBookUpdateEvent, type OrderEvent, type OrderSide, OrderStateUnknownError, type OrderStatus, type OrderType, PRIVATE_CHANNELS, type Page, type PlaceOrderRequest, type PlaceOrderResponse, type PlaceOrderResult, type PongFrame, type Pool, type PoolStatus, PoolsResource, type PublicTrade, type QueryOf, RateLimitError, RateLimiter, type RateLimiterOptions, type RateLimiterState, type ReconnectOptions, type RequestOptions, type ResyncReason, type RetryInfo, SUPPORTED_PROTOCOL_VERSION, ServerError, type ServerTime, type SessionRevokedData, type SessionRevokedEvent, type SnapshotSource, type SortDirection, type SubAccount, type SubscribeResult, type SubscribedFrame, type TickerUpdateEvent, type TimeInForce, type TradeNewEvent, TradingResource, type TriggerDirection, TypedEmitter, USER_AGENT, UnprocessableError, type UnsubscribedFrame, VERSION, ValidationError, WS_BOOK_DEPTH, WalletResource, type WebSocketConstructor, type WebSocketLike, type WelcomeFrame, type Withdrawal, type WithdrawalAddress, type WithdrawalStatus, type WithdrawalUpdatedEvent, type WsEvent, type WsLogger, assertAmountFields, type components, errorFromResponse, isAmount, isKnownErrorCode, isLocalHost, isRetryable, type operations, paginate, type paths };

package/dist/index.js

@@ -129,6 +129,7 @@ var KNOWN_CODES = /* @__PURE__ */ new Set([
   "UNDER_MAINTENANCE",
   "ENGINE_OVERLOADED"
 ]);
+var CLIENT_ERROR_CODES = { UNEXPECTED_REDIRECT: "UNEXPECTED_REDIRECT" };
 function isKnownErrorCode(code) {
   return KNOWN_CODES.has(code);
 }
@@ -392,7 +393,13 @@ var Transport = class {
     let res;
     let text;
     try {
-      res = await this.config.fetch(url.toString(), { method: info.method, headers, body, signal: ctrl.signal });
+      res = await this.config.fetch(url.toString(), {
+        method: info.method,
+        headers,
+        body,
+        signal: ctrl.signal,
+        redirect: "manual"
+      });
       text = await res.text();
     } catch (err) {
       if (opts.signal?.aborted) throw opts.signal.reason ?? err;
@@ -404,6 +411,14 @@ var Transport = class {
       clearTimeout(timer);
       opts.signal?.removeEventListener("abort", onAbort);
     }
+    if (res.type === "opaqueredirect" || res.status >= 300 && res.status < 400 || res.redirected) {
+      throw new CexyApiError({
+        status: res.status,
+        code: CLIENT_ERROR_CODES.UNEXPECTED_REDIRECT,
+        message: `${info.method} ${info.path}: the server answered with a redirect (HTTP ${res.status}); the SDK does not follow redirects. Check baseUrl.`,
+        retryable: false
+      });
+    }
     this.config.limiter?.update(res.headers);
     if (!res.ok) {
       const parsed = safeJson(text);
@@ -774,6 +789,8 @@ var WalletResource = class extends Resource {
     return this.data({ op: "deposit_address", query: params }, opts);
   }
 };
+var CANCEL_RETRY_CODES = /* @__PURE__ */ new Set(["INVALID_STATE", "SERVICE_UNAVAILABLE"]);
+var CANCEL_BACKOFF_S = [1, 2, 4, 8, 15];
 var ORDER_AMOUNT_FIELDS = ["price", "quantity", "quote_quantity", "stop_price"];
 var TradingResource = class extends Resource {
   /** Open orders, optionally filtered by market/status. */
@@ -880,16 +897,6 @@ var TradingResource = class extends Resource {
       }
     }
   }
-  /**
-   * Cancels every open order in one market: `cancelAll({ symbol: "BTC/USDT" })`.
-   * To cancel across ALL markets, pass `symbol: null` explicitly: `cancelAll({ symbol: null })`.
-   * Omitting `symbol` is an error, so an account-wide cancel never happens by accident
-   * (the server itself treats `{}` as every market).
-   *
-   * The server limits cancel-all to 30 calls per minute per account. It is naturally
-   * repeatable, so it is retried after network errors; a retry reports only what that retry
-   * cancelled.
-   */
   async cancelAll(params, opts) {
     const hasSymbol = !!params && typeof params === "object" && Object.prototype.hasOwnProperty.call(params, "symbol");
     const symbol = hasSymbol ? params.symbol : void 0;
@@ -897,12 +904,62 @@ var TradingResource = class extends Resource {
     if (typeof symbol === "string" && symbol !== "") body = { symbol };
     else if (hasSymbol && symbol === null) body = {};
     else throw new CexyConfigError('cancelAll(): pass { symbol: "BASE/QUOTE" }, or { symbol: null } to cancel in every market');
-    return this.data({ op: "cancel_all", body }, opts);
+    const once = () => this.data({ op: "cancel_all", body }, opts);
+    if (params.untilDone !== true) return once();
+    const maxRounds = params.maxRounds ?? 20;
+    const budgetMs = params.timeBudgetMs ?? 12e4;
+    if (!(maxRounds >= 1)) throw new CexyConfigError("cancelAll(): maxRounds must be >= 1");
+    if (!(budgetMs > 0)) throw new CexyConfigError("cancelAll(): timeBudgetMs must be > 0");
+    const now = this.t.config.now ?? Date.now;
+    const start = now();
+    const state = /* @__PURE__ */ new Map();
+    let rounds = 0;
+    let idle = 0;
+    let last;
+    let stopped;
+    for (; ; ) {
+      last = await once();
+      rounds++;
+      const failures = last.failures ?? [];
+      for (const id of last.cancelled ?? []) state.set(id, { list: "cancelled" });
+      for (const id of last.already_closed ?? []) state.set(id, { list: "already_closed" });
+      for (const id of last.failed ?? []) {
+        const failure = failures.find((f) => f.order_id === id);
+        state.set(id, failure ? { list: "failed", failure } : { list: "failed" });
+      }
+      const progress = (last.cancelled?.length ?? 0) + (last.already_closed?.length ?? 0) > 0;
+      if (!last.has_more && !failures.some((f) => CANCEL_RETRY_CODES.has(f.code))) {
+        stopped = "done";
+        break;
+      }
+      if (rounds >= maxRounds) {
+        stopped = "max_rounds";
+        break;
+      }
+      let waitMs = 0;
+      if (progress) idle = 0;
+      else waitMs = (CANCEL_BACKOFF_S[Math.min(idle++, CANCEL_BACKOFF_S.length - 1)] ?? 15) * 1e3;
+      if (now() - start + waitMs >= budgetMs) {
+        stopped = "time_budget";
+        break;
+      }
+      if (waitMs > 0) await this.t.config.sleep(waitMs, opts?.signal);
+    }
+    const pick = (list) => [...state].filter(([, v]) => v.list === list).map(([id]) => id);
+    return {
+      cancelled: pick("cancelled"),
+      already_closed: pick("already_closed"),
+      failed: pick("failed"),
+      failures: [...state.values()].flatMap((v) => v.list === "failed" && v.failure ? [v.failure] : []),
+      has_more: last.has_more,
+      rounds,
+      stopped
+    };
   }
 };
 
 // src/version.ts
-var VERSION = "0.1.0-dev.2";
+var VERSION = "0.1.0-dev.4";
 var USER_AGENT = `cexy-typescript/${VERSION}`;
 
 // src/ws/emitter.ts
@@ -1662,7 +1719,7 @@ var CexyClient = class {
     assertSecureUrl(parsed, "https:", "http:", options.allowInsecure === true, "baseUrl");
     this.#allowInsecure = options.allowInsecure === true;
     const fetchImpl = options.fetch ?? globalThis.fetch;
-    if (!fetchImpl) throw new CexyConfigError("no global fetch found (Node 20+ required); pass options.fetch");
+    if (!fetchImpl) throw new CexyConfigError("no global fetch found (Node 22+ required); pass options.fetch");
     const timeoutMs = options.timeoutMs ?? 1e4;
     const maxRetries = options.maxRetries ?? 3;
     if (!(timeoutMs > 0)) throw new CexyConfigError("timeoutMs must be > 0");
@@ -1683,6 +1740,7 @@ var CexyClient = class {
       userAgent: canSetUserAgent() ? [USER_AGENT, options.userAgentSuffix].filter(Boolean).join(" ") : null,
       sleep: sleep2,
       random: options.random ?? Math.random,
+      now: options.now ?? Date.now,
       onRetry: options.onRetry
     });
     const t = this.#transport;
@@ -1752,4 +1810,4 @@ function canSetUserAgent() {
   return !(typeof g.window !== "undefined" && typeof g.window.document !== "undefined");
 }
 
-export { AccountResource, ApiKeyAuthenticator, AssetsResource, AuthenticationError, CexyApiError, CexyClient, CexyConfigError, CexyConnectionError, CexyError, CexyTimeoutError, CexyWebSocket, CexyWebSocketError, ConflictError, DEFAULT_BASE_URL, DEFAULT_RPM_ANONYMOUS, DEFAULT_RPM_WITH_KEY, DEFAULT_WS_URL, ExportsResource, FeesResource, ForbiddenError, InvalidAmountError, JurisdictionBlockedError, KNOWN_EVENT_TYPES, LiveOrderBook, MarketsResource, NetworksResource, NotFoundError, OPERATIONS, OrderStateUnknownError, PRIVATE_CHANNELS, PoolsResource, RateLimitError, RateLimiter, SUPPORTED_PROTOCOL_VERSION, ServerError, TradingResource, TypedEmitter, USER_AGENT, UnprocessableError, VERSION, ValidationError, WS_BOOK_DEPTH, WalletResource, assertAmountFields, errorFromResponse, isAmount, isKnownErrorCode, isLocalHost, isRetryable, paginate };
+export { AccountResource, ApiKeyAuthenticator, AssetsResource, AuthenticationError, CLIENT_ERROR_CODES, CexyApiError, CexyClient, CexyConfigError, CexyConnectionError, CexyError, CexyTimeoutError, CexyWebSocket, CexyWebSocketError, ConflictError, DEFAULT_BASE_URL, DEFAULT_RPM_ANONYMOUS, DEFAULT_RPM_WITH_KEY, DEFAULT_WS_URL, ExportsResource, FeesResource, ForbiddenError, InvalidAmountError, JurisdictionBlockedError, KNOWN_EVENT_TYPES, LiveOrderBook, MarketsResource, NetworksResource, NotFoundError, OPERATIONS, OrderStateUnknownError, PRIVATE_CHANNELS, PoolsResource, RateLimitError, RateLimiter, SUPPORTED_PROTOCOL_VERSION, ServerError, TradingResource, TypedEmitter, USER_AGENT, UnprocessableError, VERSION, ValidationError, WS_BOOK_DEPTH, WalletResource, assertAmountFields, errorFromResponse, isAmount, isKnownErrorCode, isLocalHost, isRetryable, paginate };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cexyio/cexy",
-  "version": "0.1.0-dev.2",
+  "version": "0.1.0-dev.4",
   "description": "Official TypeScript/JavaScript SDK for the CEXY.io REST and WebSocket API",
   "license": "MIT",
   "author": "CEXY.io",
@@ -43,7 +43,7 @@
   ],
   "sideEffects": false,
   "engines": {
-    "node": ">=20"
+    "node": ">=22"
   },
   "scripts": {
     "generate": "node scripts/generate.mjs",
@@ -65,16 +65,16 @@
     }
   },
   "devDependencies": {
-    "@eslint/js": "^9.39.0",
-    "@types/node": "^20.19.0",
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^22.20.4",
     "@types/ws": "^8.18.0",
-    "eslint": "^9.39.0",
+    "eslint": "^10.11.0",
     "openapi-typescript": "^7.13.0",
     "tsup": "^8.5.0",
     "typescript": "~5.9.3",
     "typescript-eslint": "^8.70.0",
-    "vite": "^6.4.0",
-    "vitest": "^3.2.7",
+    "vite": "^8.3.0",
+    "vitest": "^5.0.2",
     "ws": "^8.18.0"
   },
   "publishConfig": {