@ctgexchange/sdk 0.1.2

package/dist/index.cjs

@@ -0,0 +1,576 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  ApiError: () => ApiError,
+  AuthenticationError: () => AuthenticationError,
+  BadRequestError: () => BadRequestError,
+  Client: () => Client,
+  CtgExchangeError: () => CtgExchangeError,
+  DEFAULT_BASE_URL: () => DEFAULT_BASE_URL,
+  DEFAULT_WS_BASE_URL: () => DEFAULT_WS_BASE_URL,
+  MarketDataStream: () => MarketDataStream,
+  NotFoundError: () => NotFoundError,
+  PermissionDeniedError: () => PermissionDeniedError,
+  RateLimitError: () => RateLimitError,
+  ServerError: () => ServerError,
+  UserStream: () => UserStream,
+  errorFromResponse: () => errorFromResponse,
+  parseFrame: () => parseFrame,
+  restCanonicalString: () => restCanonicalString,
+  restHeaders: () => restHeaders,
+  sha256Hex: () => sha256Hex,
+  signRest: () => signRest,
+  signWsAuth: () => signWsAuth,
+  wsAuthMessage: () => wsAuthMessage
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/errors.ts
+var CtgExchangeError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = new.target.name;
+  }
+};
+var ApiError = class extends CtgExchangeError {
+  statusCode;
+  apiError;
+  apiMessage;
+  requestId;
+  constructor(statusCode, apiError, apiMessage, requestId) {
+    const detail = apiMessage ?? apiError ?? "request failed";
+    const suffix = requestId ? ` (request_id=${requestId})` : "";
+    super(`[${statusCode}] ${detail}${suffix}`);
+    this.statusCode = statusCode;
+    this.apiError = apiError;
+    this.apiMessage = apiMessage;
+    this.requestId = requestId;
+  }
+};
+var BadRequestError = class extends ApiError {
+};
+var AuthenticationError = class extends ApiError {
+};
+var PermissionDeniedError = class extends ApiError {
+};
+var NotFoundError = class extends ApiError {
+};
+var RateLimitError = class extends ApiError {
+  /** The `Retry-After` header value in seconds, when the server sent one. */
+  retryAfter;
+  constructor(statusCode, apiError, apiMessage, requestId, retryAfter) {
+    super(statusCode, apiError, apiMessage, requestId);
+    this.retryAfter = retryAfter;
+  }
+};
+var ServerError = class extends ApiError {
+};
+function errorFromResponse(statusCode, body, retryAfter) {
+  const { error, message, request_id: requestId } = body ?? {};
+  switch (statusCode) {
+    case 400:
+      return new BadRequestError(statusCode, error, message, requestId);
+    case 401:
+      return new AuthenticationError(statusCode, error, message, requestId);
+    case 403:
+      return new PermissionDeniedError(statusCode, error, message, requestId);
+    case 404:
+      return new NotFoundError(statusCode, error, message, requestId);
+    case 429:
+      return new RateLimitError(
+        statusCode,
+        error,
+        message,
+        requestId,
+        retryAfter
+      );
+    default:
+      return statusCode >= 500 ? new ServerError(statusCode, error, message, requestId) : new ApiError(statusCode, error, message, requestId);
+  }
+}
+
+// src/rest.ts
+var import_node_crypto2 = require("crypto");
+
+// src/signing.ts
+var import_node_crypto = require("crypto");
+function sha256Hex(body) {
+  return (0, import_node_crypto.createHash)("sha256").update(body, "utf8").digest("hex");
+}
+function restCanonicalString(ts, method, requestUri, body = "") {
+  return [String(ts), method.toUpperCase(), requestUri, sha256Hex(body)].join(
+    "\n"
+  );
+}
+function signRest(secret, ts, method, requestUri, body = "") {
+  return (0, import_node_crypto.createHmac)("sha256", secret).update(restCanonicalString(ts, method, requestUri, body)).digest("hex");
+}
+function restHeaders(keyId, secret, method, requestUri, body = "", ts = Math.floor(Date.now() / 1e3)) {
+  return {
+    "X-API-Key": keyId,
+    "X-Timestamp": String(ts),
+    "X-Signature": signRest(secret, ts, method, requestUri, body)
+  };
+}
+function signWsAuth(secret, ts) {
+  return (0, import_node_crypto.createHmac)("sha256", secret).update(`ws-auth
+${ts}`).digest("hex");
+}
+function wsAuthMessage(keyId, secret, ts = Math.floor(Date.now() / 1e3)) {
+  return { op: "auth", args: [keyId, ts, signWsAuth(secret, ts)] };
+}
+
+// src/rest.ts
+var DEFAULT_BASE_URL = "https://api.ctg.exchange";
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+function numToStr(value) {
+  return typeof value === "number" ? String(value) : value;
+}
+var Client = class {
+  apiKey;
+  apiSecret;
+  baseUrl;
+  timeoutMs;
+  maxRetries;
+  fetchImpl;
+  constructor(options = {}) {
+    this.apiKey = options.apiKey;
+    this.apiSecret = options.apiSecret;
+    this.baseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+    this.timeoutMs = options.timeoutMs ?? 1e4;
+    this.maxRetries = options.maxRetries ?? 0;
+    const fetchImpl = options.fetch ?? globalThis.fetch;
+    if (!fetchImpl) {
+      throw new CtgExchangeError(
+        "no fetch implementation available; pass `fetch` in ClientOptions"
+      );
+    }
+    this.fetchImpl = fetchImpl;
+  }
+  buildRequestUri(path, query) {
+    if (!query) return path;
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(query)) {
+      if (value !== void 0) params.append(key, String(value));
+    }
+    const qs = params.toString();
+    return qs ? `${path}?${qs}` : path;
+  }
+  async request(method, path, options = {}) {
+    const { query, body, auth = false } = options;
+    const requestUri = this.buildRequestUri(path, query);
+    const bodyStr = body === void 0 ? "" : JSON.stringify(body);
+    for (let attempt = 0; ; attempt++) {
+      const headers = {};
+      if (bodyStr) headers["Content-Type"] = "application/json";
+      if (auth) {
+        if (!this.apiKey || !this.apiSecret) {
+          throw new CtgExchangeError(
+            "apiKey and apiSecret are required for private endpoints"
+          );
+        }
+        Object.assign(
+          headers,
+          restHeaders(this.apiKey, this.apiSecret, method, requestUri, bodyStr)
+        );
+      }
+      const response = await this.fetchImpl(this.baseUrl + requestUri, {
+        method,
+        headers,
+        body: bodyStr || void 0,
+        signal: AbortSignal.timeout(this.timeoutMs)
+      });
+      if (response.ok) {
+        const text = await response.text();
+        return text ? JSON.parse(text) : void 0;
+      }
+      const retryAfter = parseRetryAfter(response);
+      const error = errorFromResponse(
+        response.status,
+        await safeJson(response),
+        retryAfter
+      );
+      if (error instanceof RateLimitError && attempt < this.maxRetries) {
+        await sleep((retryAfter ?? 1) * 1e3);
+        continue;
+      }
+      throw error;
+    }
+  }
+  // -- public market data ---------------------------------------------
+  /** All trading symbols with their order filters. */
+  getSymbols() {
+    return this.request("GET", "/api/v1/symbols");
+  }
+  /** 24h ticker for every symbol. */
+  getTickers() {
+    return this.request("GET", "/api/v1/tickers");
+  }
+  /** Current order book for `symbol`. */
+  getOrderBook(symbol) {
+    return this.request("GET", `/api/v1/${symbol}/orderbook`);
+  }
+  /** 24h ticker for `symbol`. */
+  getTicker(symbol) {
+    return this.request("GET", `/api/v1/${symbol}/ticker`);
+  }
+  /**
+   * Candles for `symbol` at `interval` (`1m` / `5m` / `15m` / `1h` /
+   * `4h` / `1d`).
+   *
+   * Omit `from` / `to` for the latest `limit` candles. Pass `from` /
+   * `to` (Unix ms) to select a historical window `[from, to)` for
+   * scrollback.
+   */
+  getCandles(symbol, interval = "1m", opts = {}) {
+    return this.request("GET", `/api/v1/${symbol}/candles`, {
+      query: {
+        interval,
+        limit: opts.limit,
+        from: opts.from,
+        to: opts.to
+      }
+    });
+  }
+  /** Recent public trade prints for `symbol`. */
+  getTrades(symbol, limit) {
+    return this.request("GET", `/api/v1/${symbol}/trades`, {
+      query: { limit }
+    });
+  }
+  // -- private: account -----------------------------------------------
+  /** Per-asset balances for the API key's owner (scope: read). */
+  getBalances() {
+    return this.request("GET", "/api/v1/me/balances", { auth: true });
+  }
+  /** Fee/rebate snapshot for the API key's owner (scope: read). */
+  getFees() {
+    return this.request("GET", "/api/v1/me/fees", { auth: true });
+  }
+  // -- private: orders ------------------------------------------------
+  /**
+   * Place an order (scope: trade).
+   *
+   * A `clientOrderId` is generated when you do not supply one — it lets
+   * the engine de-dup on safe retries.
+   */
+  placeOrder(symbol, params) {
+    const body = {
+      client_order_id: params.clientOrderId ?? (0, import_node_crypto2.randomUUID)(),
+      side: params.side,
+      type: params.type
+    };
+    if (params.price !== void 0) body.price = numToStr(params.price);
+    if (params.qty !== void 0) body.qty = numToStr(params.qty);
+    return this.request("POST", `/api/v1/me/orders/${symbol}`, {
+      body,
+      auth: true
+    });
+  }
+  /** List the owner's orders for `symbol` (scope: read). */
+  getOrders(symbol, opts = {}) {
+    return this.request("GET", `/api/v1/me/orders/${symbol}`, {
+      query: { status: opts.status, limit: opts.limit, offset: opts.offset },
+      auth: true
+    });
+  }
+  /**
+   * List every open order across all symbols (scope: read).
+   *
+   * Each `Order` carries its own `symbol`; decimal fields are converted
+   * per that order's scales. For closed-order history use `getOrders`
+   * per symbol.
+   */
+  getOpenOrders() {
+    return this.request("GET", "/api/v1/me/orders/open", { auth: true });
+  }
+  /** Get one order by its canonical server id (scope: read). */
+  getOrder(symbol, orderId) {
+    return this.request("GET", `/api/v1/me/orders/${symbol}/${orderId}`, {
+      auth: true
+    });
+  }
+  /** Cancel one order (scope: trade). */
+  cancelOrder(symbol, orderId) {
+    return this.request("DELETE", `/api/v1/me/orders/${symbol}/${orderId}`, {
+      auth: true
+    });
+  }
+  /** Cancel every open order for `symbol` (scope: trade). */
+  async cancelAllOrders(symbol) {
+    const data = await this.request(
+      "DELETE",
+      `/api/v1/me/orders/${symbol}`,
+      { auth: true }
+    );
+    return data?.orders ?? [];
+  }
+  /**
+   * Modify a resting order's price and quantity (scope: trade).
+   *
+   * The API expects the full new state — pass both `newPrice` and
+   * `newQty`.
+   */
+  async modifyOrder(symbol, orderId, params) {
+    const body = {};
+    if (params.newPrice !== void 0) {
+      body.new_price = numToStr(params.newPrice);
+    }
+    if (params.newQty !== void 0) body.new_qty = numToStr(params.newQty);
+    const data = await this.request(
+      "PATCH",
+      `/api/v1/me/orders/${symbol}/${orderId}`,
+      { body, auth: true }
+    );
+    return data.order ?? data;
+  }
+  // -- private: trades ------------------------------------------------
+  /** The owner's trade history for `symbol` (scope: read). */
+  getMyTrades(symbol, opts = {}) {
+    return this.request("GET", `/api/v1/me/trades/${symbol}`, {
+      query: { limit: opts.limit, offset: opts.offset },
+      auth: true
+    });
+  }
+};
+function parseRetryAfter(response) {
+  const raw = response.headers.get("Retry-After");
+  if (raw === null) return void 0;
+  const value = Number(raw);
+  return Number.isFinite(value) ? value : void 0;
+}
+async function safeJson(response) {
+  try {
+    const body = await response.json();
+    return typeof body === "object" && body !== null ? body : void 0;
+  } catch {
+    return void 0;
+  }
+}
+
+// src/ws.ts
+var import_ws = require("ws");
+var DEFAULT_WS_BASE_URL = "wss://api.ctg.exchange";
+var sleep2 = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+function parseFrame(raw) {
+  let payload;
+  try {
+    payload = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (typeof payload !== "object" || payload === null) return null;
+  const obj = payload;
+  if (obj.type !== "snapshot" && obj.type !== "update") return null;
+  return {
+    type: obj.type,
+    channel: typeof obj.channel === "string" ? obj.channel : "",
+    symbol: typeof obj.symbol === "string" ? obj.symbol : void 0,
+    data: obj.data,
+    raw: obj
+  };
+}
+var BaseStream = class {
+  url;
+  channels;
+  reconnect;
+  reconnectDelayMs;
+  ws = null;
+  closed = false;
+  queue = [];
+  socketEnded = false;
+  resolveNext = null;
+  constructor(path, options) {
+    this.url = (options.baseUrl ?? DEFAULT_WS_BASE_URL).replace(/\/+$/, "") + path;
+    this.channels = new Set(options.channels ?? []);
+    this.reconnect = options.reconnect ?? true;
+    this.reconnectDelayMs = options.reconnectDelayMs ?? 2e3;
+  }
+  /** No-op for the public stream; overridden by {@link UserStream}. */
+  async authenticate(_ws) {
+  }
+  /** Close the socket and stop reconnecting. */
+  close() {
+    this.closed = true;
+    this.reconnect = false;
+    this.socketEnded = true;
+    this.ws?.close();
+    this.ws = null;
+    this.wake();
+  }
+  /** Add channels (e.g. `orderbook@CTGUSDT`). Kept across reconnects. */
+  subscribe(channels) {
+    const list = typeof channels === "string" ? [channels] : [...channels];
+    for (const c of list) this.channels.add(c);
+    if (this.ws?.readyState === import_ws.WebSocket.OPEN) {
+      this.send({ method: "subscribe", channels: list });
+    }
+  }
+  /** Drop channels. */
+  unsubscribe(channels) {
+    const list = typeof channels === "string" ? [channels] : [...channels];
+    for (const c of list) this.channels.delete(c);
+    if (this.ws?.readyState === import_ws.WebSocket.OPEN) {
+      this.send({ method: "unsubscribe", channels: list });
+    }
+  }
+  send(obj) {
+    this.ws?.send(JSON.stringify(obj));
+  }
+  wake() {
+    const resolve = this.resolveNext;
+    if (resolve) {
+      this.resolveNext = null;
+      resolve();
+    }
+  }
+  async open() {
+    this.queue = [];
+    this.socketEnded = false;
+    const ws = new import_ws.WebSocket(this.url);
+    this.ws = ws;
+    await new Promise((resolve, reject) => {
+      ws.once("open", () => resolve());
+      ws.once("error", (err) => reject(err));
+    });
+    await this.authenticate(ws);
+    ws.on("message", (data) => {
+      const message = parseFrame(data.toString());
+      if (message) {
+        this.queue.push(message);
+        this.wake();
+      }
+    });
+    const end = () => {
+      this.socketEnded = true;
+      this.wake();
+    };
+    ws.on("close", end);
+    ws.on("error", end);
+    if (this.channels.size > 0) {
+      this.send({ method: "subscribe", channels: [...this.channels] });
+    }
+  }
+  async nextMessage() {
+    for (; ; ) {
+      const message = this.queue.shift();
+      if (message !== void 0) return message;
+      if (this.socketEnded) return null;
+      await new Promise((resolve) => {
+        this.resolveNext = resolve;
+      });
+    }
+  }
+  async *[Symbol.asyncIterator]() {
+    while (!this.closed) {
+      try {
+        await this.open();
+      } catch (err) {
+        this.ws = null;
+        if (!this.reconnect || this.closed) throw err;
+        await sleep2(this.reconnectDelayMs);
+        continue;
+      }
+      for (; ; ) {
+        const message = await this.nextMessage();
+        if (message === null) break;
+        yield message;
+      }
+      this.ws = null;
+      if (!this.reconnect || this.closed) return;
+      await sleep2(this.reconnectDelayMs);
+    }
+  }
+};
+var MarketDataStream = class extends BaseStream {
+  constructor(options = {}) {
+    super("/api/v1/stream", options);
+  }
+};
+var UserStream = class extends BaseStream {
+  apiKey;
+  apiSecret;
+  constructor(options) {
+    if (!options.apiKey || !options.apiSecret) {
+      throw new CtgExchangeError(
+        "apiKey and apiSecret are required for the private stream"
+      );
+    }
+    super("/api/v1/me/stream", options);
+    this.apiKey = options.apiKey;
+    this.apiSecret = options.apiSecret;
+  }
+  async authenticate(ws) {
+    ws.send(JSON.stringify(wsAuthMessage(this.apiKey, this.apiSecret)));
+    const reply = await new Promise(
+      (resolve, reject) => {
+        ws.once("message", (data) => {
+          try {
+            resolve(JSON.parse(data.toString()));
+          } catch (err) {
+            reject(err);
+          }
+        });
+        ws.once(
+          "close",
+          () => reject(
+            new AuthenticationError(
+              401,
+              void 0,
+              "socket closed during auth"
+            )
+          )
+        );
+      }
+    );
+    if (reply.op !== "auth" || reply.success !== true) {
+      ws.close();
+      const detail = typeof reply.error === "string" ? reply.error : "WebSocket auth rejected";
+      throw new AuthenticationError(401, void 0, detail);
+    }
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ApiError,
+  AuthenticationError,
+  BadRequestError,
+  Client,
+  CtgExchangeError,
+  DEFAULT_BASE_URL,
+  DEFAULT_WS_BASE_URL,
+  MarketDataStream,
+  NotFoundError,
+  PermissionDeniedError,
+  RateLimitError,
+  ServerError,
+  UserStream,
+  errorFromResponse,
+  parseFrame,
+  restCanonicalString,
+  restHeaders,
+  sha256Hex,
+  signRest,
+  signWsAuth,
+  wsAuthMessage
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/errors.ts","../src/rest.ts","../src/signing.ts","../src/ws.ts"],"sourcesContent":["/**\n * TypeScript SDK for the CTG.EXCHANGE exchange API.\n *\n * CTG.EXCHANGE is a hybrid crypto exchange (off-chain matcher, on-chain\n * custody on BNB Smart Chain). This package is a thin, typed client\n * over its public REST + WebSocket API.\n *\n *     import { Client } from \"@ctgexchange/sdk\";\n *\n *     const client = new Client({ apiKey, apiSecret });\n *     const balances = await client.getBalances();\n *\n * Monetary values are JSON strings (the decimal contract) — see\n * `types`. Withdrawals are intentionally not part of the API.\n */\n\nexport { Client, DEFAULT_BASE_URL } from \"./rest.js\";\nexport type { ClientOptions, FetchLike } from \"./rest.js\";\n\nexport {\n  DEFAULT_WS_BASE_URL,\n  MarketDataStream,\n  UserStream,\n  parseFrame,\n} from \"./ws.js\";\nexport type { StreamOptions, UserStreamOptions } from \"./ws.js\";\n\nexport {\n  CtgExchangeError,\n  ApiError,\n  AuthenticationError,\n  BadRequestError,\n  NotFoundError,\n  PermissionDeniedError,\n  RateLimitError,\n  ServerError,\n  errorFromResponse,\n} from \"./errors.js\";\n\nexport {\n  restCanonicalString,\n  restHeaders,\n  sha256Hex,\n  signRest,\n  signWsAuth,\n  wsAuthMessage,\n} from \"./signing.js\";\n\nexport type * from \"./types.js\";\n","/**\n * Typed errors for the CTG.EXCHANGE SDK.\n *\n * Every non-2xx REST response is thrown as an {@link ApiError} subclass\n * chosen by status code. The exchange returns a JSON error body\n * `{ error, message, request_id }` — `requestId` is surfaced on the\n * error; quote it when reporting a problem.\n */\n\n/** Base class for every error thrown by this SDK. */\nexport class CtgExchangeError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = new.target.name;\n  }\n}\n\n/** A non-2xx HTTP response from the API. */\nexport class ApiError extends CtgExchangeError {\n  readonly statusCode: number;\n  readonly apiError?: string;\n  readonly apiMessage?: string;\n  readonly requestId?: string;\n\n  constructor(\n    statusCode: number,\n    apiError?: string,\n    apiMessage?: string,\n    requestId?: string,\n  ) {\n    const detail = apiMessage ?? apiError ?? \"request failed\";\n    const suffix = requestId ? ` (request_id=${requestId})` : \"\";\n    super(`[${statusCode}] ${detail}${suffix}`);\n    this.statusCode = statusCode;\n    this.apiError = apiError;\n    this.apiMessage = apiMessage;\n    this.requestId = requestId;\n  }\n}\n\n/** 400 — the request was malformed. */\nexport class BadRequestError extends ApiError {}\n\n/** 401 — missing, expired, unknown or wrong-signature API key. */\nexport class AuthenticationError extends ApiError {}\n\n/** 403 — the key lacks the required scope, or the IP is off-allowlist. */\nexport class PermissionDeniedError extends ApiError {}\n\n/** 404 — unknown symbol or order. */\nexport class NotFoundError extends ApiError {}\n\n/** 429 — per-key or per-IP rate limit exceeded. */\nexport class RateLimitError extends ApiError {\n  /** The `Retry-After` header value in seconds, when the server sent one. */\n  readonly retryAfter?: number;\n\n  constructor(\n    statusCode: number,\n    apiError?: string,\n    apiMessage?: string,\n    requestId?: string,\n    retryAfter?: number,\n  ) {\n    super(statusCode, apiError, apiMessage, requestId);\n    this.retryAfter = retryAfter;\n  }\n}\n\n/** 5xx — the API failed to handle a well-formed request. */\nexport class ServerError extends ApiError {}\n\ninterface ErrorBody {\n  error?: string;\n  message?: string;\n  request_id?: string;\n}\n\n/** Map an HTTP status + JSON error body to the right error instance. */\nexport function errorFromResponse(\n  statusCode: number,\n  body: ErrorBody | undefined,\n  retryAfter?: number,\n): ApiError {\n  const { error, message, request_id: requestId } = body ?? {};\n\n  switch (statusCode) {\n    case 400:\n      return new BadRequestError(statusCode, error, message, requestId);\n    case 401:\n      return new AuthenticationError(statusCode, error, message, requestId);\n    case 403:\n      return new PermissionDeniedError(statusCode, error, message, requestId);\n    case 404:\n      return new NotFoundError(statusCode, error, message, requestId);\n    case 429:\n      return new RateLimitError(\n        statusCode,\n        error,\n        message,\n        requestId,\n        retryAfter,\n      );\n    default:\n      return statusCode >= 500\n        ? new ServerError(statusCode, error, message, requestId)\n        : new ApiError(statusCode, error, message, requestId);\n  }\n}\n","/**\n * REST client for the CTG.EXCHANGE API.\n *\n * Covers the whole `/api/v1` REST surface: public market data plus the\n * private, API-key-signed account and order endpoints.\n *\n *     const client = new Client({ apiKey, apiSecret });\n *     const book = await client.getOrderBook(\"CTGUSDT\");\n */\n\nimport { CtgExchangeError, RateLimitError, errorFromResponse } from \"./errors.js\";\nimport { randomUUID } from \"node:crypto\";\nimport { restHeaders } from \"./signing.js\";\nimport type {\n  Balance,\n  Candle,\n  ModifyOrderParams,\n  Order,\n  OrderBook,\n  OrderStatus,\n  PlaceOrderParams,\n  PlaceOrderResult,\n  SymbolInfo,\n  Ticker,\n  Trade,\n  UserFees,\n} from \"./types.js\";\n\nexport const DEFAULT_BASE_URL = \"https://api.ctg.exchange\";\n\n/** A `fetch`-compatible function — injectable for testing. */\nexport type FetchLike = (url: string, init: RequestInit) => Promise<Response>;\n\nexport interface ClientOptions {\n  /** Key id (`ak_...`). Required only for private endpoints. */\n  apiKey?: string;\n  /** Key secret (`sk_...`). Required only for private endpoints. */\n  apiSecret?: string;\n  /** REST base URL. Defaults to production. */\n  baseUrl?: string;\n  /** Per-request timeout in milliseconds. Default 10000. */\n  timeoutMs?: number;\n  /** How many times to retry a `429`, honouring `Retry-After`. Default 0. */\n  maxRetries?: number;\n  /** A `fetch` implementation. Defaults to the global `fetch`. */\n  fetch?: FetchLike;\n}\n\ninterface RequestOptions {\n  query?: Record<string, string | number | undefined>;\n  body?: unknown;\n  auth?: boolean;\n}\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\nfunction numToStr(value: string | number): string {\n  return typeof value === \"number\" ? String(value) : value;\n}\n\n/** A REST client for the CTG.EXCHANGE API. */\nexport class Client {\n  private readonly apiKey?: string;\n  private readonly apiSecret?: string;\n  private readonly baseUrl: string;\n  private readonly timeoutMs: number;\n  private readonly maxRetries: number;\n  private readonly fetchImpl: FetchLike;\n\n  constructor(options: ClientOptions = {}) {\n    this.apiKey = options.apiKey;\n    this.apiSecret = options.apiSecret;\n    this.baseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/+$/, \"\");\n    this.timeoutMs = options.timeoutMs ?? 10_000;\n    this.maxRetries = options.maxRetries ?? 0;\n    const fetchImpl = options.fetch ?? (globalThis.fetch as FetchLike);\n    if (!fetchImpl) {\n      throw new CtgExchangeError(\n        \"no fetch implementation available; pass `fetch` in ClientOptions\",\n      );\n    }\n    this.fetchImpl = fetchImpl;\n  }\n\n  private buildRequestUri(\n    path: string,\n    query?: Record<string, string | number | undefined>,\n  ): string {\n    if (!query) return path;\n    const params = new URLSearchParams();\n    for (const [key, value] of Object.entries(query)) {\n      if (value !== undefined) params.append(key, String(value));\n    }\n    const qs = params.toString();\n    return qs ? `${path}?${qs}` : path;\n  }\n\n  private async request<T>(\n    method: string,\n    path: string,\n    options: RequestOptions = {},\n  ): Promise<T> {\n    const { query, body, auth = false } = options;\n    // request-uri must be the path+query exactly as sent, and the body\n    // hash must cover the exact bytes on the wire.\n    const requestUri = this.buildRequestUri(path, query);\n    const bodyStr = body === undefined ? \"\" : JSON.stringify(body);\n\n    for (let attempt = 0; ; attempt++) {\n      const headers: Record<string, string> = {};\n      if (bodyStr) headers[\"Content-Type\"] = \"application/json\";\n      if (auth) {\n        if (!this.apiKey || !this.apiSecret) {\n          throw new CtgExchangeError(\n            \"apiKey and apiSecret are required for private endpoints\",\n          );\n        }\n        Object.assign(\n          headers,\n          restHeaders(this.apiKey, this.apiSecret, method, requestUri, bodyStr),\n        );\n      }\n\n      const response = await this.fetchImpl(this.baseUrl + requestUri, {\n        method,\n        headers,\n        body: bodyStr || undefined,\n        signal: AbortSignal.timeout(this.timeoutMs),\n      });\n\n      if (response.ok) {\n        const text = await response.text();\n        return (text ? JSON.parse(text) : undefined) as T;\n      }\n\n      const retryAfter = parseRetryAfter(response);\n      const error = errorFromResponse(\n        response.status,\n        await safeJson(response),\n        retryAfter,\n      );\n      if (error instanceof RateLimitError && attempt < this.maxRetries) {\n        await sleep((retryAfter ?? 1) * 1000);\n        continue;\n      }\n      throw error;\n    }\n  }\n\n  // -- public market data ---------------------------------------------\n\n  /** All trading symbols with their order filters. */\n  getSymbols(): Promise<SymbolInfo[]> {\n    return this.request(\"GET\", \"/api/v1/symbols\");\n  }\n\n  /** 24h ticker for every symbol. */\n  getTickers(): Promise<Ticker[]> {\n    return this.request(\"GET\", \"/api/v1/tickers\");\n  }\n\n  /** Current order book for `symbol`. */\n  getOrderBook(symbol: string): Promise<OrderBook> {\n    return this.request(\"GET\", `/api/v1/${symbol}/orderbook`);\n  }\n\n  /** 24h ticker for `symbol`. */\n  getTicker(symbol: string): Promise<Ticker> {\n    return this.request(\"GET\", `/api/v1/${symbol}/ticker`);\n  }\n\n  /**\n   * Candles for `symbol` at `interval` (`1m` / `5m` / `15m` / `1h` /\n   * `4h` / `1d`).\n   *\n   * Omit `from` / `to` for the latest `limit` candles. Pass `from` /\n   * `to` (Unix ms) to select a historical window `[from, to)` for\n   * scrollback.\n   */\n  getCandles(\n    symbol: string,\n    interval = \"1m\",\n    opts: { limit?: number; from?: number; to?: number } = {},\n  ): Promise<Candle[]> {\n    return this.request(\"GET\", `/api/v1/${symbol}/candles`, {\n      query: {\n        interval,\n        limit: opts.limit,\n        from: opts.from,\n        to: opts.to,\n      },\n    });\n  }\n\n  /** Recent public trade prints for `symbol`. */\n  getTrades(symbol: string, limit?: number): Promise<Trade[]> {\n    return this.request(\"GET\", `/api/v1/${symbol}/trades`, {\n      query: { limit },\n    });\n  }\n\n  // -- private: account -----------------------------------------------\n\n  /** Per-asset balances for the API key's owner (scope: read). */\n  getBalances(): Promise<Balance[]> {\n    return this.request(\"GET\", \"/api/v1/me/balances\", { auth: true });\n  }\n\n  /** Fee/rebate snapshot for the API key's owner (scope: read). */\n  getFees(): Promise<UserFees> {\n    return this.request(\"GET\", \"/api/v1/me/fees\", { auth: true });\n  }\n\n  // -- private: orders ------------------------------------------------\n\n  /**\n   * Place an order (scope: trade).\n   *\n   * A `clientOrderId` is generated when you do not supply one — it lets\n   * the engine de-dup on safe retries.\n   */\n  placeOrder(\n    symbol: string,\n    params: PlaceOrderParams,\n  ): Promise<PlaceOrderResult> {\n    const body: Record<string, string> = {\n      client_order_id: params.clientOrderId ?? randomUUID(),\n      side: params.side,\n      type: params.type,\n    };\n    if (params.price !== undefined) body.price = numToStr(params.price);\n    if (params.qty !== undefined) body.qty = numToStr(params.qty);\n    return this.request(\"POST\", `/api/v1/me/orders/${symbol}`, {\n      body,\n      auth: true,\n    });\n  }\n\n  /** List the owner's orders for `symbol` (scope: read). */\n  getOrders(\n    symbol: string,\n    opts: { status?: OrderStatus; limit?: number; offset?: number } = {},\n  ): Promise<Order[]> {\n    return this.request(\"GET\", `/api/v1/me/orders/${symbol}`, {\n      query: { status: opts.status, limit: opts.limit, offset: opts.offset },\n      auth: true,\n    });\n  }\n\n  /**\n   * List every open order across all symbols (scope: read).\n   *\n   * Each `Order` carries its own `symbol`; decimal fields are converted\n   * per that order's scales. For closed-order history use `getOrders`\n   * per symbol.\n   */\n  getOpenOrders(): Promise<Order[]> {\n    return this.request(\"GET\", \"/api/v1/me/orders/open\", { auth: true });\n  }\n\n  /** Get one order by its canonical server id (scope: read). */\n  getOrder(symbol: string, orderId: string): Promise<Order> {\n    return this.request(\"GET\", `/api/v1/me/orders/${symbol}/${orderId}`, {\n      auth: true,\n    });\n  }\n\n  /** Cancel one order (scope: trade). */\n  cancelOrder(symbol: string, orderId: string): Promise<Order> {\n    return this.request(\"DELETE\", `/api/v1/me/orders/${symbol}/${orderId}`, {\n      auth: true,\n    });\n  }\n\n  /** Cancel every open order for `symbol` (scope: trade). */\n  async cancelAllOrders(symbol: string): Promise<Order[]> {\n    const data = await this.request<{ orders?: Order[] }>(\n      \"DELETE\",\n      `/api/v1/me/orders/${symbol}`,\n      { auth: true },\n    );\n    return data?.orders ?? [];\n  }\n\n  /**\n   * Modify a resting order's price and quantity (scope: trade).\n   *\n   * The API expects the full new state — pass both `newPrice` and\n   * `newQty`.\n   */\n  async modifyOrder(\n    symbol: string,\n    orderId: string,\n    params: ModifyOrderParams,\n  ): Promise<Order> {\n    const body: Record<string, string> = {};\n    if (params.newPrice !== undefined) {\n      body.new_price = numToStr(params.newPrice);\n    }\n    if (params.newQty !== undefined) body.new_qty = numToStr(params.newQty);\n    const data = await this.request<Order & { order?: Order }>(\n      \"PATCH\",\n      `/api/v1/me/orders/${symbol}/${orderId}`,\n      { body, auth: true },\n    );\n    // The API wraps the modified order: { order: {...}, trades: [...] }.\n    return data.order ?? data;\n  }\n\n  // -- private: trades ------------------------------------------------\n\n  /** The owner's trade history for `symbol` (scope: read). */\n  getMyTrades(\n    symbol: string,\n    opts: { limit?: number; offset?: number } = {},\n  ): Promise<Trade[]> {\n    return this.request(\"GET\", `/api/v1/me/trades/${symbol}`, {\n      query: { limit: opts.limit, offset: opts.offset },\n      auth: true,\n    });\n  }\n}\n\nfunction parseRetryAfter(response: Response): number | undefined {\n  const raw = response.headers.get(\"Retry-After\");\n  if (raw === null) return undefined;\n  const value = Number(raw);\n  return Number.isFinite(value) ? value : undefined;\n}\n\nasync function safeJson(\n  response: Response,\n): Promise<Record<string, unknown> | undefined> {\n  try {\n    const body = (await response.json()) as unknown;\n    return typeof body === \"object\" && body !== null\n      ? (body as Record<string, unknown>)\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n","/**\n * HMAC-SHA256 request signing for the CTG.EXCHANGE API.\n *\n * Two signing schemes share one key secret:\n *\n * REST — the canonical string is four newline-joined fields:\n *\n *     <ts>\\n<METHOD>\\n<request-uri>\\n<hex sha256 of body>\n *\n * WebSocket — the in-band auth frame signs the string `ws-auth\\n<ts>`.\n *\n * Both produce a lowercase-hex HMAC-SHA256 keyed by the API key secret.\n */\n\nimport { createHash, createHmac } from \"node:crypto\";\n\n/** Hex SHA-256 of a request body. `sha256(\"\")` for an empty body. */\nexport function sha256Hex(body: string): string {\n  return createHash(\"sha256\").update(body, \"utf8\").digest(\"hex\");\n}\n\n/**\n * Build the four-field canonical string a REST signature covers.\n *\n * `requestUri` is the path plus query string exactly as sent on the\n * request line, e.g. `/api/v1/me/orders/CTGUSDT?limit=50`.\n */\nexport function restCanonicalString(\n  ts: number | string,\n  method: string,\n  requestUri: string,\n  body = \"\",\n): string {\n  return [String(ts), method.toUpperCase(), requestUri, sha256Hex(body)].join(\n    \"\\n\",\n  );\n}\n\n/** Lowercase-hex HMAC-SHA256 of the REST canonical string. */\nexport function signRest(\n  secret: string,\n  ts: number | string,\n  method: string,\n  requestUri: string,\n  body = \"\",\n): string {\n  return createHmac(\"sha256\", secret)\n    .update(restCanonicalString(ts, method, requestUri, body))\n    .digest(\"hex\");\n}\n\n/**\n * The three signed headers a private REST request must carry.\n *\n * `ts` defaults to the current Unix time in seconds; the server rejects\n * timestamps outside its signature window (default 30s), so keep the\n * local clock in sync.\n */\nexport function restHeaders(\n  keyId: string,\n  secret: string,\n  method: string,\n  requestUri: string,\n  body = \"\",\n  ts: number = Math.floor(Date.now() / 1000),\n): Record<string, string> {\n  return {\n    \"X-API-Key\": keyId,\n    \"X-Timestamp\": String(ts),\n    \"X-Signature\": signRest(secret, ts, method, requestUri, body),\n  };\n}\n\n/** Lowercase-hex HMAC-SHA256 over `ws-auth\\n<ts>`. */\nexport function signWsAuth(secret: string, ts: number | string): string {\n  return createHmac(\"sha256\", secret).update(`ws-auth\\n${ts}`).digest(\"hex\");\n}\n\n/** The signed `auth` frame to send first on the private WebSocket stream. */\nexport function wsAuthMessage(\n  keyId: string,\n  secret: string,\n  ts: number = Math.floor(Date.now() / 1000),\n): { op: \"auth\"; args: [string, number, string] } {\n  return { op: \"auth\", args: [keyId, ts, signWsAuth(secret, ts)] };\n}\n","/**\n * WebSocket clients for the CTG.EXCHANGE streams.\n *\n * - {@link MarketDataStream} — public market data, no auth.\n * - {@link UserStream} — the caller's private `orders` / `trades` /\n *   `balances`, authenticated in-band with a signed first frame.\n *\n * Both auto-reconnect by default and re-send their subscriptions on\n * every (re)connect, so a dropped socket is transparent to the\n * consumer:\n *\n *     const stream = new MarketDataStream({ channels: [\"trades@CTGUSDT\"] });\n *     for await (const msg of stream) {\n *       console.log(msg.channel, msg.type, msg.data);\n *     }\n */\n\nimport { type RawData, WebSocket } from \"ws\";\nimport { CtgExchangeError, AuthenticationError } from \"./errors.js\";\nimport type { StreamMessage } from \"./types.js\";\nimport { wsAuthMessage } from \"./signing.js\";\n\nexport const DEFAULT_WS_BASE_URL = \"wss://api.ctg.exchange\";\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * Parse a raw frame into a {@link StreamMessage}, or `null` for control\n * frames (auth replies, subscribe acks) — only data frames are surfaced.\n */\nexport function parseFrame(raw: string): StreamMessage | null {\n  let payload: unknown;\n  try {\n    payload = JSON.parse(raw);\n  } catch {\n    return null;\n  }\n  if (typeof payload !== \"object\" || payload === null) return null;\n  const obj = payload as Record<string, unknown>;\n  if (obj.type !== \"snapshot\" && obj.type !== \"update\") return null;\n  return {\n    type: obj.type,\n    channel: typeof obj.channel === \"string\" ? obj.channel : \"\",\n    symbol: typeof obj.symbol === \"string\" ? obj.symbol : undefined,\n    data: obj.data,\n    raw: obj,\n  };\n}\n\nexport interface StreamOptions {\n  /** WebSocket base URL. Defaults to production. */\n  baseUrl?: string;\n  /** Channels to subscribe to on every (re)connect. */\n  channels?: Iterable<string>;\n  /** Auto-reconnect on a dropped socket. Default `true`. */\n  reconnect?: boolean;\n  /** Delay before a reconnect attempt, in milliseconds. Default 2000. */\n  reconnectDelayMs?: number;\n}\n\n/** Shared connect / subscribe / reconnect machinery. */\nabstract class BaseStream implements AsyncIterable<StreamMessage> {\n  private readonly url: string;\n  private readonly channels: Set<string>;\n  private reconnect: boolean;\n  private readonly reconnectDelayMs: number;\n  private ws: WebSocket | null = null;\n  private closed = false;\n\n  private queue: StreamMessage[] = [];\n  private socketEnded = false;\n  private resolveNext: (() => void) | null = null;\n\n  protected constructor(path: string, options: StreamOptions) {\n    this.url = (options.baseUrl ?? DEFAULT_WS_BASE_URL).replace(/\\/+$/, \"\") +\n      path;\n    this.channels = new Set(options.channels ?? []);\n    this.reconnect = options.reconnect ?? true;\n    this.reconnectDelayMs = options.reconnectDelayMs ?? 2000;\n  }\n\n  /** No-op for the public stream; overridden by {@link UserStream}. */\n  protected async authenticate(_ws: WebSocket): Promise<void> {}\n\n  /** Close the socket and stop reconnecting. */\n  close(): void {\n    this.closed = true;\n    this.reconnect = false;\n    this.socketEnded = true;\n    this.ws?.close();\n    this.ws = null;\n    this.wake();\n  }\n\n  /** Add channels (e.g. `orderbook@CTGUSDT`). Kept across reconnects. */\n  subscribe(channels: string | Iterable<string>): void {\n    const list = typeof channels === \"string\" ? [channels] : [...channels];\n    for (const c of list) this.channels.add(c);\n    if (this.ws?.readyState === WebSocket.OPEN) {\n      this.send({ method: \"subscribe\", channels: list });\n    }\n  }\n\n  /** Drop channels. */\n  unsubscribe(channels: string | Iterable<string>): void {\n    const list = typeof channels === \"string\" ? [channels] : [...channels];\n    for (const c of list) this.channels.delete(c);\n    if (this.ws?.readyState === WebSocket.OPEN) {\n      this.send({ method: \"unsubscribe\", channels: list });\n    }\n  }\n\n  private send(obj: unknown): void {\n    this.ws?.send(JSON.stringify(obj));\n  }\n\n  private wake(): void {\n    const resolve = this.resolveNext;\n    if (resolve) {\n      this.resolveNext = null;\n      resolve();\n    }\n  }\n\n  private async open(): Promise<void> {\n    this.queue = [];\n    this.socketEnded = false;\n    const ws = new WebSocket(this.url);\n    this.ws = ws;\n\n    await new Promise<void>((resolve, reject) => {\n      ws.once(\"open\", () => resolve());\n      ws.once(\"error\", (err) => reject(err));\n    });\n\n    await this.authenticate(ws);\n\n    ws.on(\"message\", (data: RawData) => {\n      const message = parseFrame(data.toString());\n      if (message) {\n        this.queue.push(message);\n        this.wake();\n      }\n    });\n    const end = (): void => {\n      this.socketEnded = true;\n      this.wake();\n    };\n    ws.on(\"close\", end);\n    ws.on(\"error\", end);\n\n    if (this.channels.size > 0) {\n      this.send({ method: \"subscribe\", channels: [...this.channels] });\n    }\n  }\n\n  private async nextMessage(): Promise<StreamMessage | null> {\n    for (;;) {\n      const message = this.queue.shift();\n      if (message !== undefined) return message;\n      if (this.socketEnded) return null;\n      await new Promise<void>((resolve) => {\n        this.resolveNext = resolve;\n      });\n    }\n  }\n\n  async *[Symbol.asyncIterator](): AsyncGenerator<StreamMessage> {\n    while (!this.closed) {\n      try {\n        await this.open();\n      } catch (err) {\n        this.ws = null;\n        if (!this.reconnect || this.closed) throw err;\n        await sleep(this.reconnectDelayMs);\n        continue;\n      }\n      for (;;) {\n        const message = await this.nextMessage();\n        if (message === null) break;\n        yield message;\n      }\n      this.ws = null;\n      if (!this.reconnect || this.closed) return;\n      await sleep(this.reconnectDelayMs);\n    }\n  }\n}\n\n/**\n * Public market-data stream — `orderbook` / `ticker` / `candles` /\n * `trades`. No authentication.\n */\nexport class MarketDataStream extends BaseStream {\n  constructor(options: StreamOptions = {}) {\n    super(\"/api/v1/stream\", options);\n  }\n}\n\nexport interface UserStreamOptions extends StreamOptions {\n  /** Key id (`ak_...`). */\n  apiKey: string;\n  /** Key secret (`sk_...`). */\n  apiSecret: string;\n}\n\n/**\n * Private stream — the caller's `orders` / `trades` / `balances`.\n * Authenticates in-band with a signed first frame.\n */\nexport class UserStream extends BaseStream {\n  private readonly apiKey: string;\n  private readonly apiSecret: string;\n\n  constructor(options: UserStreamOptions) {\n    if (!options.apiKey || !options.apiSecret) {\n      throw new CtgExchangeError(\n        \"apiKey and apiSecret are required for the private stream\",\n      );\n    }\n    super(\"/api/v1/me/stream\", options);\n    this.apiKey = options.apiKey;\n    this.apiSecret = options.apiSecret;\n  }\n\n  protected override async authenticate(ws: WebSocket): Promise<void> {\n    ws.send(JSON.stringify(wsAuthMessage(this.apiKey, this.apiSecret)));\n    const reply = await new Promise<Record<string, unknown>>(\n      (resolve, reject) => {\n        ws.once(\"message\", (data: RawData) => {\n          try {\n            resolve(JSON.parse(data.toString()) as Record<string, unknown>);\n          } catch (err) {\n            reject(err as Error);\n          }\n        });\n        ws.once(\"close\", () =>\n          reject(\n            new AuthenticationError(\n              401,\n              undefined,\n              \"socket closed during auth\",\n            ),\n          ),\n        );\n      },\n    );\n    if (reply.op !== \"auth\" || reply.success !== true) {\n      ws.close();\n      const detail =\n        typeof reply.error === \"string\"\n          ? reply.error\n          : \"WebSocket auth rejected\";\n      throw new AuthenticationError(401, undefined, detail);\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACUO,IAAM,mBAAN,cAA+B,MAAM;AAAA,EAC1C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO,WAAW;AAAA,EACzB;AACF;AAGO,IAAM,WAAN,cAAuB,iBAAiB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YACE,YACA,UACA,YACA,WACA;AACA,UAAM,SAAS,cAAc,YAAY;AACzC,UAAM,SAAS,YAAY,gBAAgB,SAAS,MAAM;AAC1D,UAAM,IAAI,UAAU,KAAK,MAAM,GAAG,MAAM,EAAE;AAC1C,SAAK,aAAa;AAClB,SAAK,WAAW;AAChB,SAAK,aAAa;AAClB,SAAK,YAAY;AAAA,EACnB;AACF;AAGO,IAAM,kBAAN,cAA8B,SAAS;AAAC;AAGxC,IAAM,sBAAN,cAAkC,SAAS;AAAC;AAG5C,IAAM,wBAAN,cAAoC,SAAS;AAAC;AAG9C,IAAM,gBAAN,cAA4B,SAAS;AAAC;AAGtC,IAAM,iBAAN,cAA6B,SAAS;AAAA;AAAA,EAElC;AAAA,EAET,YACE,YACA,UACA,YACA,WACA,YACA;AACA,UAAM,YAAY,UAAU,YAAY,SAAS;AACjD,SAAK,aAAa;AAAA,EACpB;AACF;AAGO,IAAM,cAAN,cAA0B,SAAS;AAAC;AASpC,SAAS,kBACd,YACA,MACA,YACU;AACV,QAAM,EAAE,OAAO,SAAS,YAAY,UAAU,IAAI,QAAQ,CAAC;AAE3D,UAAQ,YAAY;AAAA,IAClB,KAAK;AACH,aAAO,IAAI,gBAAgB,YAAY,OAAO,SAAS,SAAS;AAAA,IAClE,KAAK;AACH,aAAO,IAAI,oBAAoB,YAAY,OAAO,SAAS,SAAS;AAAA,IACtE,KAAK;AACH,aAAO,IAAI,sBAAsB,YAAY,OAAO,SAAS,SAAS;AAAA,IACxE,KAAK;AACH,aAAO,IAAI,cAAc,YAAY,OAAO,SAAS,SAAS;AAAA,IAChE,KAAK;AACH,aAAO,IAAI;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACE,aAAO,cAAc,MACjB,IAAI,YAAY,YAAY,OAAO,SAAS,SAAS,IACrD,IAAI,SAAS,YAAY,OAAO,SAAS,SAAS;AAAA,EAC1D;AACF;;;ACjGA,IAAAA,sBAA2B;;;ACG3B,yBAAuC;AAGhC,SAAS,UAAU,MAAsB;AAC9C,aAAO,+BAAW,QAAQ,EAAE,OAAO,MAAM,MAAM,EAAE,OAAO,KAAK;AAC/D;AAQO,SAAS,oBACd,IACA,QACA,YACA,OAAO,IACC;AACR,SAAO,CAAC,OAAO,EAAE,GAAG,OAAO,YAAY,GAAG,YAAY,UAAU,IAAI,CAAC,EAAE;AAAA,IACrE;AAAA,EACF;AACF;AAGO,SAAS,SACd,QACA,IACA,QACA,YACA,OAAO,IACC;AACR,aAAO,+BAAW,UAAU,MAAM,EAC/B,OAAO,oBAAoB,IAAI,QAAQ,YAAY,IAAI,CAAC,EACxD,OAAO,KAAK;AACjB;AASO,SAAS,YACd,OACA,QACA,QACA,YACA,OAAO,IACP,KAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,GACjB;AACxB,SAAO;AAAA,IACL,aAAa;AAAA,IACb,eAAe,OAAO,EAAE;AAAA,IACxB,eAAe,SAAS,QAAQ,IAAI,QAAQ,YAAY,IAAI;AAAA,EAC9D;AACF;AAGO,SAAS,WAAW,QAAgB,IAA6B;AACtE,aAAO,+BAAW,UAAU,MAAM,EAAE,OAAO;AAAA,EAAY,EAAE,EAAE,EAAE,OAAO,KAAK;AAC3E;AAGO,SAAS,cACd,OACA,QACA,KAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,GACO;AAChD,SAAO,EAAE,IAAI,QAAQ,MAAM,CAAC,OAAO,IAAI,WAAW,QAAQ,EAAE,CAAC,EAAE;AACjE;;;ADzDO,IAAM,mBAAmB;AA0BhC,IAAM,QAAQ,CAAC,OACb,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAElD,SAAS,SAAS,OAAgC;AAChD,SAAO,OAAO,UAAU,WAAW,OAAO,KAAK,IAAI;AACrD;AAGO,IAAM,SAAN,MAAa;AAAA,EACD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAAyB,CAAC,GAAG;AACvC,SAAK,SAAS,QAAQ;AACtB,SAAK,YAAY,QAAQ;AACzB,SAAK,WAAW,QAAQ,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AACvE,SAAK,YAAY,QAAQ,aAAa;AACtC,SAAK,aAAa,QAAQ,cAAc;AACxC,UAAM,YAAY,QAAQ,SAAU,WAAW;AAC/C,QAAI,CAAC,WAAW;AACd,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,SAAK,YAAY;AAAA,EACnB;AAAA,EAEQ,gBACN,MACA,OACQ;AACR,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,SAAS,IAAI,gBAAgB;AACnC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,UAAI,UAAU,OAAW,QAAO,OAAO,KAAK,OAAO,KAAK,CAAC;AAAA,IAC3D;AACA,UAAM,KAAK,OAAO,SAAS;AAC3B,WAAO,KAAK,GAAG,IAAI,IAAI,EAAE,KAAK;AAAA,EAChC;AAAA,EAEA,MAAc,QACZ,QACA,MACA,UAA0B,CAAC,GACf;AACZ,UAAM,EAAE,OAAO,MAAM,OAAO,MAAM,IAAI;AAGtC,UAAM,aAAa,KAAK,gBAAgB,MAAM,KAAK;AACnD,UAAM,UAAU,SAAS,SAAY,KAAK,KAAK,UAAU,IAAI;AAE7D,aAAS,UAAU,KAAK,WAAW;AACjC,YAAM,UAAkC,CAAC;AACzC,UAAI,QAAS,SAAQ,cAAc,IAAI;AACvC,UAAI,MAAM;AACR,YAAI,CAAC,KAAK,UAAU,CAAC,KAAK,WAAW;AACnC,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AACA,eAAO;AAAA,UACL;AAAA,UACA,YAAY,KAAK,QAAQ,KAAK,WAAW,QAAQ,YAAY,OAAO;AAAA,QACtE;AAAA,MACF;AAEA,YAAM,WAAW,MAAM,KAAK,UAAU,KAAK,UAAU,YAAY;AAAA,QAC/D;AAAA,QACA;AAAA,QACA,MAAM,WAAW;AAAA,QACjB,QAAQ,YAAY,QAAQ,KAAK,SAAS;AAAA,MAC5C,CAAC;AAED,UAAI,SAAS,IAAI;AACf,cAAM,OAAO,MAAM,SAAS,KAAK;AACjC,eAAQ,OAAO,KAAK,MAAM,IAAI,IAAI;AAAA,MACpC;AAEA,YAAM,aAAa,gBAAgB,QAAQ;AAC3C,YAAM,QAAQ;AAAA,QACZ,SAAS;AAAA,QACT,MAAM,SAAS,QAAQ;AAAA,QACvB;AAAA,MACF;AACA,UAAI,iBAAiB,kBAAkB,UAAU,KAAK,YAAY;AAChE,cAAM,OAAO,cAAc,KAAK,GAAI;AACpC;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA,EAKA,aAAoC;AAClC,WAAO,KAAK,QAAQ,OAAO,iBAAiB;AAAA,EAC9C;AAAA;AAAA,EAGA,aAAgC;AAC9B,WAAO,KAAK,QAAQ,OAAO,iBAAiB;AAAA,EAC9C;AAAA;AAAA,EAGA,aAAa,QAAoC;AAC/C,WAAO,KAAK,QAAQ,OAAO,WAAW,MAAM,YAAY;AAAA,EAC1D;AAAA;AAAA,EAGA,UAAU,QAAiC;AACzC,WAAO,KAAK,QAAQ,OAAO,WAAW,MAAM,SAAS;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,WACE,QACA,WAAW,MACX,OAAuD,CAAC,GACrC;AACnB,WAAO,KAAK,QAAQ,OAAO,WAAW,MAAM,YAAY;AAAA,MACtD,OAAO;AAAA,QACL;AAAA,QACA,OAAO,KAAK;AAAA,QACZ,MAAM,KAAK;AAAA,QACX,IAAI,KAAK;AAAA,MACX;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,UAAU,QAAgB,OAAkC;AAC1D,WAAO,KAAK,QAAQ,OAAO,WAAW,MAAM,WAAW;AAAA,MACrD,OAAO,EAAE,MAAM;AAAA,IACjB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA,EAKA,cAAkC;AAChC,WAAO,KAAK,QAAQ,OAAO,uBAAuB,EAAE,MAAM,KAAK,CAAC;AAAA,EAClE;AAAA;AAAA,EAGA,UAA6B;AAC3B,WAAO,KAAK,QAAQ,OAAO,mBAAmB,EAAE,MAAM,KAAK,CAAC;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,WACE,QACA,QAC2B;AAC3B,UAAM,OAA+B;AAAA,MACnC,iBAAiB,OAAO,qBAAiB,gCAAW;AAAA,MACpD,MAAM,OAAO;AAAA,MACb,MAAM,OAAO;AAAA,IACf;AACA,QAAI,OAAO,UAAU,OAAW,MAAK,QAAQ,SAAS,OAAO,KAAK;AAClE,QAAI,OAAO,QAAQ,OAAW,MAAK,MAAM,SAAS,OAAO,GAAG;AAC5D,WAAO,KAAK,QAAQ,QAAQ,qBAAqB,MAAM,IAAI;AAAA,MACzD;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,UACE,QACA,OAAkE,CAAC,GACjD;AAClB,WAAO,KAAK,QAAQ,OAAO,qBAAqB,MAAM,IAAI;AAAA,MACxD,OAAO,EAAE,QAAQ,KAAK,QAAQ,OAAO,KAAK,OAAO,QAAQ,KAAK,OAAO;AAAA,MACrE,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,gBAAkC;AAChC,WAAO,KAAK,QAAQ,OAAO,0BAA0B,EAAE,MAAM,KAAK,CAAC;AAAA,EACrE;AAAA;AAAA,EAGA,SAAS,QAAgB,SAAiC;AACxD,WAAO,KAAK,QAAQ,OAAO,qBAAqB,MAAM,IAAI,OAAO,IAAI;AAAA,MACnE,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,YAAY,QAAgB,SAAiC;AAC3D,WAAO,KAAK,QAAQ,UAAU,qBAAqB,MAAM,IAAI,OAAO,IAAI;AAAA,MACtE,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,gBAAgB,QAAkC;AACtD,UAAM,OAAO,MAAM,KAAK;AAAA,MACtB;AAAA,MACA,qBAAqB,MAAM;AAAA,MAC3B,EAAE,MAAM,KAAK;AAAA,IACf;AACA,WAAO,MAAM,UAAU,CAAC;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,YACJ,QACA,SACA,QACgB;AAChB,UAAM,OAA+B,CAAC;AACtC,QAAI,OAAO,aAAa,QAAW;AACjC,WAAK,YAAY,SAAS,OAAO,QAAQ;AAAA,IAC3C;AACA,QAAI,OAAO,WAAW,OAAW,MAAK,UAAU,SAAS,OAAO,MAAM;AACtE,UAAM,OAAO,MAAM,KAAK;AAAA,MACtB;AAAA,MACA,qBAAqB,MAAM,IAAI,OAAO;AAAA,MACtC,EAAE,MAAM,MAAM,KAAK;AAAA,IACrB;AAEA,WAAO,KAAK,SAAS;AAAA,EACvB;AAAA;AAAA;AAAA,EAKA,YACE,QACA,OAA4C,CAAC,GAC3B;AAClB,WAAO,KAAK,QAAQ,OAAO,qBAAqB,MAAM,IAAI;AAAA,MACxD,OAAO,EAAE,OAAO,KAAK,OAAO,QAAQ,KAAK,OAAO;AAAA,MAChD,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AACF;AAEA,SAAS,gBAAgB,UAAwC;AAC/D,QAAM,MAAM,SAAS,QAAQ,IAAI,aAAa;AAC9C,MAAI,QAAQ,KAAM,QAAO;AACzB,QAAM,QAAQ,OAAO,GAAG;AACxB,SAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AAC1C;AAEA,eAAe,SACb,UAC8C;AAC9C,MAAI;AACF,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,WAAO,OAAO,SAAS,YAAY,SAAS,OACvC,OACD;AAAA,EACN,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AErUA,gBAAwC;AAKjC,IAAM,sBAAsB;AAEnC,IAAMC,SAAQ,CAAC,OACb,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAM3C,SAAS,WAAW,KAAmC;AAC5D,MAAI;AACJ,MAAI;AACF,cAAU,KAAK,MAAM,GAAG;AAAA,EAC1B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,OAAO,YAAY,YAAY,YAAY,KAAM,QAAO;AAC5D,QAAM,MAAM;AACZ,MAAI,IAAI,SAAS,cAAc,IAAI,SAAS,SAAU,QAAO;AAC7D,SAAO;AAAA,IACL,MAAM,IAAI;AAAA,IACV,SAAS,OAAO,IAAI,YAAY,WAAW,IAAI,UAAU;AAAA,IACzD,QAAQ,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAAA,IACtD,MAAM,IAAI;AAAA,IACV,KAAK;AAAA,EACP;AACF;AAcA,IAAe,aAAf,MAAkE;AAAA,EAC/C;AAAA,EACA;AAAA,EACT;AAAA,EACS;AAAA,EACT,KAAuB;AAAA,EACvB,SAAS;AAAA,EAET,QAAyB,CAAC;AAAA,EAC1B,cAAc;AAAA,EACd,cAAmC;AAAA,EAEjC,YAAY,MAAc,SAAwB;AAC1D,SAAK,OAAO,QAAQ,WAAW,qBAAqB,QAAQ,QAAQ,EAAE,IACpE;AACF,SAAK,WAAW,IAAI,IAAI,QAAQ,YAAY,CAAC,CAAC;AAC9C,SAAK,YAAY,QAAQ,aAAa;AACtC,SAAK,mBAAmB,QAAQ,oBAAoB;AAAA,EACtD;AAAA;AAAA,EAGA,MAAgB,aAAa,KAA+B;AAAA,EAAC;AAAA;AAAA,EAG7D,QAAc;AACZ,SAAK,SAAS;AACd,SAAK,YAAY;AACjB,SAAK,cAAc;AACnB,SAAK,IAAI,MAAM;AACf,SAAK,KAAK;AACV,SAAK,KAAK;AAAA,EACZ;AAAA;AAAA,EAGA,UAAU,UAA2C;AACnD,UAAM,OAAO,OAAO,aAAa,WAAW,CAAC,QAAQ,IAAI,CAAC,GAAG,QAAQ;AACrE,eAAW,KAAK,KAAM,MAAK,SAAS,IAAI,CAAC;AACzC,QAAI,KAAK,IAAI,eAAe,oBAAU,MAAM;AAC1C,WAAK,KAAK,EAAE,QAAQ,aAAa,UAAU,KAAK,CAAC;AAAA,IACnD;AAAA,EACF;AAAA;AAAA,EAGA,YAAY,UAA2C;AACrD,UAAM,OAAO,OAAO,aAAa,WAAW,CAAC,QAAQ,IAAI,CAAC,GAAG,QAAQ;AACrE,eAAW,KAAK,KAAM,MAAK,SAAS,OAAO,CAAC;AAC5C,QAAI,KAAK,IAAI,eAAe,oBAAU,MAAM;AAC1C,WAAK,KAAK,EAAE,QAAQ,eAAe,UAAU,KAAK,CAAC;AAAA,IACrD;AAAA,EACF;AAAA,EAEQ,KAAK,KAAoB;AAC/B,SAAK,IAAI,KAAK,KAAK,UAAU,GAAG,CAAC;AAAA,EACnC;AAAA,EAEQ,OAAa;AACnB,UAAM,UAAU,KAAK;AACrB,QAAI,SAAS;AACX,WAAK,cAAc;AACnB,cAAQ;AAAA,IACV;AAAA,EACF;AAAA,EAEA,MAAc,OAAsB;AAClC,SAAK,QAAQ,CAAC;AACd,SAAK,cAAc;AACnB,UAAM,KAAK,IAAI,oBAAU,KAAK,GAAG;AACjC,SAAK,KAAK;AAEV,UAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,SAAG,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAC/B,SAAG,KAAK,SAAS,CAAC,QAAQ,OAAO,GAAG,CAAC;AAAA,IACvC,CAAC;AAED,UAAM,KAAK,aAAa,EAAE;AAE1B,OAAG,GAAG,WAAW,CAAC,SAAkB;AAClC,YAAM,UAAU,WAAW,KAAK,SAAS,CAAC;AAC1C,UAAI,SAAS;AACX,aAAK,MAAM,KAAK,OAAO;AACvB,aAAK,KAAK;AAAA,MACZ;AAAA,IACF,CAAC;AACD,UAAM,MAAM,MAAY;AACtB,WAAK,cAAc;AACnB,WAAK,KAAK;AAAA,IACZ;AACA,OAAG,GAAG,SAAS,GAAG;AAClB,OAAG,GAAG,SAAS,GAAG;AAElB,QAAI,KAAK,SAAS,OAAO,GAAG;AAC1B,WAAK,KAAK,EAAE,QAAQ,aAAa,UAAU,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;AAAA,IACjE;AAAA,EACF;AAAA,EAEA,MAAc,cAA6C;AACzD,eAAS;AACP,YAAM,UAAU,KAAK,MAAM,MAAM;AACjC,UAAI,YAAY,OAAW,QAAO;AAClC,UAAI,KAAK,YAAa,QAAO;AAC7B,YAAM,IAAI,QAAc,CAAC,YAAY;AACnC,aAAK,cAAc;AAAA,MACrB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,QAAQ,OAAO,aAAa,IAAmC;AAC7D,WAAO,CAAC,KAAK,QAAQ;AACnB,UAAI;AACF,cAAM,KAAK,KAAK;AAAA,MAClB,SAAS,KAAK;AACZ,aAAK,KAAK;AACV,YAAI,CAAC,KAAK,aAAa,KAAK,OAAQ,OAAM;AAC1C,cAAMA,OAAM,KAAK,gBAAgB;AACjC;AAAA,MACF;AACA,iBAAS;AACP,cAAM,UAAU,MAAM,KAAK,YAAY;AACvC,YAAI,YAAY,KAAM;AACtB,cAAM;AAAA,MACR;AACA,WAAK,KAAK;AACV,UAAI,CAAC,KAAK,aAAa,KAAK,OAAQ;AACpC,YAAMA,OAAM,KAAK,gBAAgB;AAAA,IACnC;AAAA,EACF;AACF;AAMO,IAAM,mBAAN,cAA+B,WAAW;AAAA,EAC/C,YAAY,UAAyB,CAAC,GAAG;AACvC,UAAM,kBAAkB,OAAO;AAAA,EACjC;AACF;AAaO,IAAM,aAAN,cAAyB,WAAW;AAAA,EACxB;AAAA,EACA;AAAA,EAEjB,YAAY,SAA4B;AACtC,QAAI,CAAC,QAAQ,UAAU,CAAC,QAAQ,WAAW;AACzC,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,qBAAqB,OAAO;AAClC,SAAK,SAAS,QAAQ;AACtB,SAAK,YAAY,QAAQ;AAAA,EAC3B;AAAA,EAEA,MAAyB,aAAa,IAA8B;AAClE,OAAG,KAAK,KAAK,UAAU,cAAc,KAAK,QAAQ,KAAK,SAAS,CAAC,CAAC;AAClE,UAAM,QAAQ,MAAM,IAAI;AAAA,MACtB,CAAC,SAAS,WAAW;AACnB,WAAG,KAAK,WAAW,CAAC,SAAkB;AACpC,cAAI;AACF,oBAAQ,KAAK,MAAM,KAAK,SAAS,CAAC,CAA4B;AAAA,UAChE,SAAS,KAAK;AACZ,mBAAO,GAAY;AAAA,UACrB;AAAA,QACF,CAAC;AACD,WAAG;AAAA,UAAK;AAAA,UAAS,MACf;AAAA,YACE,IAAI;AAAA,cACF;AAAA,cACA;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,QAAI,MAAM,OAAO,UAAU,MAAM,YAAY,MAAM;AACjD,SAAG,MAAM;AACT,YAAM,SACJ,OAAO,MAAM,UAAU,WACnB,MAAM,QACN;AACN,YAAM,IAAI,oBAAoB,KAAK,QAAW,MAAM;AAAA,IACtD;AAAA,EACF;AACF;","names":["import_node_crypto","sleep"]}