@lifi/perps-sdk-provider-lighter 0.2.0-alpha.0

package/dist/esm/signers/LighterSigner.js

@@ -0,0 +1,228 @@
+import { ActionType } from '@lifi/perps-types';
+import { loadLighterWasm, } from './wasmLoader.js';
+const DEFAULT_API_URL = 'https://mainnet.zklighter.elliot.ai';
+const DEFAULT_CHAIN_ID = 304;
+/** @public */
+export class LighterSigner {
+    apiUrl;
+    chainId;
+    loaderOptions;
+    wasm;
+    registeredClients = new Set();
+    constructor(config = {}) {
+        this.apiUrl = config.apiUrl ?? DEFAULT_API_URL;
+        this.chainId = config.chainId ?? DEFAULT_CHAIN_ID;
+        this.loaderOptions = {
+            wasmBinaryUrl: config.wasmBinaryUrl,
+            wasmExecJsUrl: config.wasmExecJsUrl,
+            wasmExecJsSource: config.wasmExecJsSource,
+        };
+    }
+    async initialize() {
+        if (!this.wasm) {
+            this.wasm = await loadLighterWasm(this.loaderOptions);
+        }
+    }
+    /**
+     * Generate a fresh Lighter API keypair. Pass an optional 32-byte hex seed
+     * for deterministic generation (used in tests); omit for a random key.
+     */
+    async generateAPIKey(seed) {
+        const wasm = await this.ensureLoaded();
+        const result = wasm.GenerateAPIKey(seed ?? '');
+        if (result.error) {
+            throw new Error(`Lighter GenerateAPIKey failed: ${result.error}`);
+        }
+        if (!result.publicKey || !result.privateKey) {
+            throw new Error('Lighter GenerateAPIKey returned an incomplete result');
+        }
+        return { publicKey: result.publicKey, privateKey: result.privateKey };
+    }
+    /**
+     * Sign an action blob with the provided (apiKeyPrivateKey, apiKeyIndex,
+     * accountIndex) context. `wasmSignParams` comes straight from the backend's
+     * `WasmBlobActionStep`. Returns the signed `{ txType, txInfo, txHash }`
+     * triple the backend forwards to Lighter's `sendTx` endpoint.
+     *
+     * For REGISTER_API_KEY use `signChangePubKey` instead — it returns an
+     * additional `messageToSign` the L1 wallet must countersign.
+     */
+    async sign(action, wasmSignParams, context) {
+        if (action === ActionType.REGISTER_API_KEY) {
+            throw new Error('Use signChangePubKey() for REGISTER_API_KEY — the L1 eth_sign hop ' +
+                'must be coordinated by the caller.');
+        }
+        const wasm = await this.ensureLoaded();
+        await this.ensureClient(context);
+        const result = this.dispatch(wasm, action, wasmSignParams, context);
+        return unwrap(result, action);
+    }
+    /**
+     * Step 1 of the REGISTER_API_KEY flow. Generates the WASM blob for a
+     * ChangePubKey tx with `L1Sig` left empty, plus the canonical EIP-191
+     * message the L1 Ethereum wallet must sign next.
+     *
+     * Requires the freshly-generated `privateKey` (returned by
+     * {@link generateAPIKey}) — the Go WASM signer registers a per-slot client
+     * keyed on `(apiKeyIndex, accountIndex)` before it'll sign anything for
+     * that slot, including the ChangePubKey that's about to register the key
+     * on-chain. This is purely client-side bookkeeping; it does not touch the
+     * Lighter API.
+     */
+    async signChangePubKey(pubKeyHex, privateKey, nonce, apiKeyIndex, accountIndex, skipNonce = 0) {
+        const wasm = await this.ensureLoaded();
+        await this.ensureClient({
+            apiKeyPrivateKey: privateKey,
+            apiKeyIndex,
+            accountIndex,
+        });
+        // 5-arg call (matches lighter-python's signer wrapper). `skipNonce`:
+        //   0 — embed the supplied nonce and have Lighter enforce it on submit.
+        //   1 — embed the nonce but let Lighter pick / not enforce; used for
+        //       ChangePubKey to sidestep `/nextNonce` vs `/sendTx` disagreement
+        //       on slot re-claims.
+        const result = wasm.SignChangePubKey(pubKeyHex, skipNonce, nonce, apiKeyIndex, accountIndex);
+        if (result.error) {
+            throw new Error(`Lighter SignChangePubKey failed: ${result.error}`);
+        }
+        if (result.txType === undefined ||
+            result.txInfo === undefined ||
+            result.txHash === undefined ||
+            !result.messageToSign) {
+            throw new Error('Lighter SignChangePubKey returned incomplete result');
+        }
+        return {
+            txType: result.txType,
+            txInfo: result.txInfo,
+            txHash: result.txHash,
+            messageToSign: result.messageToSign,
+        };
+    }
+    /**
+     * Step 2 of REGISTER_API_KEY — inject the L1 signature produced by the
+     * user's Ethereum wallet into the ChangePubKey txInfo JSON. `L1Sig` is the
+     * only field in txInfo that depends on the L1 signature; txHash does NOT
+     * include it (so we do not recompute it).
+     */
+    embedL1Signature(txInfo, l1Signature) {
+        let parsed;
+        try {
+            parsed = JSON.parse(txInfo);
+        }
+        catch (err) {
+            throw new Error(`Failed to parse ChangePubKey txInfo as JSON: ${err.message}`);
+        }
+        parsed.L1Sig = l1Signature;
+        return JSON.stringify(parsed);
+    }
+    /**
+     * Create an auth token for authenticated WebSocket subscriptions.
+     * `deadline` is a Unix timestamp in seconds — tokens have an 8h hard cap.
+     */
+    async createAuthToken(deadline, context) {
+        const wasm = await this.ensureLoaded();
+        await this.ensureClient(context);
+        const result = wasm.CreateAuthToken(deadline, context.apiKeyIndex, context.accountIndex);
+        if (result.error) {
+            throw new Error(`Lighter CreateAuthToken failed: ${result.error}`);
+        }
+        if (!result.authToken) {
+            throw new Error('Lighter CreateAuthToken returned no token');
+        }
+        return result.authToken;
+    }
+    async ensureLoaded() {
+        if (!this.wasm) {
+            await this.initialize();
+        }
+        return this.wasm;
+    }
+    async ensureClient(context) {
+        const key = `${context.apiKeyIndex}:${context.accountIndex}:${context.apiKeyPrivateKey}`;
+        if (this.registeredClients.has(key)) {
+            return;
+        }
+        const wasm = await this.ensureLoaded();
+        const result = wasm.CreateClient(this.apiUrl, context.apiKeyPrivateKey, this.chainId, context.apiKeyIndex, context.accountIndex);
+        if (result.error) {
+            throw new Error(`Lighter CreateClient failed: ${result.error}`);
+        }
+        this.registeredClients.add(key);
+    }
+    /**
+     * Map an ActionType + backend-provided params object to the positional-arg
+     * WASM call. The Go signer exports take primitives in order, not an object
+     * — so we pick fields in the exact order the Go side expects. Unknown
+     * fields (e.g. backend's integrator_* hints) are ignored.
+     */
+    dispatch(wasm, action, p, ctx) {
+        const nonce = numberField(p, 'nonce');
+        switch (action) {
+            case ActionType.PLACE_ORDER:
+            case ActionType.PLACE_TRIGGER_ORDER:
+                return wasm.SignCreateOrder(numberField(p, 'market_index'), numberField(p, 'client_order_index'), numberField(p, 'base_amount'), numberField(p, 'price'), numberField(p, 'is_ask'), numberField(p, 'order_type'), numberField(p, 'time_in_force'), 
+                // WASM's error message lists "reduceOnly" as bool-like, but Go
+                // actually calls Value.Int() on every arg — passing an actual bool
+                // panics. Coerce to 0/1.
+                numberField(p, 'reduce_only'), numberField(p, 'trigger_price'), numberField(p, 'order_expiry'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.CANCEL_ORDER:
+                return wasm.SignCancelOrder(numberField(p, 'market_index'), numberField(p, 'order_index'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.CANCEL_ALL_ORDERS:
+                return wasm.SignCancelAllOrders(numberField(p, 'time_in_force'), numberField(p, 'timestamp_ms'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.MODIFY_ORDER:
+                return wasm.SignModifyOrder(numberField(p, 'market_index'), numberField(p, 'order_index'), numberField(p, 'base_amount'), numberField(p, 'price'), numberField(p, 'trigger_price'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.UPDATE_LEVERAGE:
+                return wasm.SignUpdateLeverage(numberField(p, 'market_index'), numberField(p, 'fraction'), numberField(p, 'margin_mode'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.UPDATE_POSITION_MARGIN:
+                return wasm.SignUpdateMargin(numberField(p, 'market_index'), numberField(p, 'usdc_amount'), numberField(p, 'direction'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.WITHDRAWAL:
+                return wasm.SignWithdraw(numberField(p, 'amount'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.TRANSFER:
+                // SignTransfer's 7 positional args follow the Go binding order:
+                // `toAccount, usdcAmount, fee, memo, nonce, apiKeyIndex,
+                // accountIndex`. `memo` is copied directly into a `[32]byte`, so the
+                // backend MUST send a JS string whose UTF-8 byte length is exactly
+                // 32 (in practice: 32 ASCII characters) — anything else fails with
+                // "memo expected to be 32 bytes long".
+                return wasm.SignTransfer(numberField(p, 'to_account'), numberField(p, 'usdc_amount'), numberField(p, 'fee'), stringField(p, 'memo'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            default:
+                throw new Error(`Lighter WASM signer does not support action: ${action}`);
+        }
+    }
+}
+function unwrap(result, action) {
+    if (result.error) {
+        throw new Error(`Lighter sign(${action}) failed: ${result.error}`);
+    }
+    if (result.txType === undefined ||
+        result.txInfo === undefined ||
+        result.txHash === undefined) {
+        throw new Error(`Lighter sign(${action}) returned an incomplete signed blob`);
+    }
+    return {
+        txType: result.txType,
+        txInfo: result.txInfo,
+        txHash: result.txHash,
+    };
+}
+function numberField(p, key) {
+    const v = p[key];
+    if (typeof v === 'number') {
+        return v;
+    }
+    if (typeof v === 'boolean') {
+        return v ? 1 : 0;
+    }
+    if (typeof v === 'string' && v !== '' && !Number.isNaN(Number(v))) {
+        return Number(v);
+    }
+    throw new Error(`Lighter sign params missing numeric field '${key}' (got ${typeof v})`);
+}
+function stringField(p, key) {
+    const v = p[key];
+    if (typeof v === 'string' && v !== '') {
+        return v;
+    }
+    throw new Error(`Lighter sign params missing string field '${key}' (got ${typeof v})`);
+}
+//# sourceMappingURL=LighterSigner.js.map

package/dist/esm/signers/LighterSigner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LighterSigner.js","sourceRoot":"","sources":["../../../src/signers/LighterSigner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAGL,eAAe,GAEhB,MAAM,iBAAiB,CAAA;AA4CxB,MAAM,eAAe,GAAG,qCAAqC,CAAA;AAC7D,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B,cAAc;AACd,MAAM,OAAO,aAAa;IACP,MAAM,CAAQ;IACd,OAAO,CAAQ;IACf,aAAa,CAAwB;IAC9C,IAAI,CAAgC;IAC3B,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAA;IAEtD,YAAY,SAA8B,EAAE;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,eAAe,CAAA;QAC9C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAA;QACjD,IAAI,CAAC,aAAa,GAAG;YACnB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC1C,CAAA;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,IAAa;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;QAC9C,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QACnE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACzE,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAA;IACvE,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,IAAI,CACR,MAAkB,EAClB,cAAuC,EACvC,OAA6B;QAE7B,IAAI,MAAM,KAAK,UAAU,CAAC,gBAAgB,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,oEAAoE;gBAClE,oCAAoC,CACvC,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACtC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,CAAA;QACnE,OAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,gBAAgB,CACpB,SAAiB,EACjB,UAAkB,EAClB,KAAa,EACb,WAAmB,EACnB,YAAoB,EACpB,YAAmB,CAAC;QAEpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACtC,MAAM,IAAI,CAAC,YAAY,CAAC;YACtB,gBAAgB,EAAE,UAAU;YAC5B,WAAW;YACX,YAAY;SACb,CAAC,CAAA;QACF,qEAAqE;QACrE,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,2BAA2B;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAClC,SAAS,EACT,SAAS,EACT,KAAK,EACL,WAAW,EACX,YAAY,CACb,CAAA;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QACrE,CAAC;QACD,IACE,MAAM,CAAC,MAAM,KAAK,SAAS;YAC3B,MAAM,CAAC,MAAM,KAAK,SAAS;YAC3B,MAAM,CAAC,MAAM,KAAK,SAAS;YAC3B,CAAC,MAAM,CAAC,aAAa,EACrB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QACxE,CAAC;QACD,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAA;IACH,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,MAAc,EAAE,WAAmB;QAClD,IAAI,MAA+B,CAAA;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA4B,CAAA;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,gDAAiD,GAAa,CAAC,OAAO,EAAE,CACzE,CAAA;QACH,CAAC;QACD,MAAM,CAAC,KAAK,GAAG,WAAW,CAAA;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CACnB,QAAgB,EAChB,OAA6B;QAE7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACtC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CACjC,QAAQ,EACR,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,YAAY,CACrB,CAAA;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAC9D,CAAC;QACD,OAAO,MAAM,CAAC,SAAS,CAAA;IACzB,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACzB,CAAC;QACD,OAAO,IAAI,CAAC,IAA0B,CAAA;IACxC,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAA6B;QACtD,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAA;QACxF,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,OAAM;QACR,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAC9B,IAAI,CAAC,MAAM,EACX,OAAO,CAAC,gBAAgB,EACxB,IAAI,CAAC,OAAO,EACZ,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,YAAY,CACrB,CAAA;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAED;;;;;OAKG;IACK,QAAQ,CACd,IAAwB,EACxB,MAAkB,EAClB,CAA0B,EAC1B,GAAyB;QAEzB,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QACrC,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,UAAU,CAAC,WAAW,CAAC;YAC5B,KAAK,UAAU,CAAC,mBAAmB;gBACjC,OAAO,IAAI,CAAC,eAAe,CACzB,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,WAAW,CAAC,CAAC,EAAE,oBAAoB,CAAC,EACpC,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,EACvB,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,EACxB,WAAW,CAAC,CAAC,EAAE,YAAY,CAAC,EAC5B,WAAW,CAAC,CAAC,EAAE,eAAe,CAAC;gBAC/B,+DAA+D;gBAC/D,mEAAmE;gBACnE,yBAAyB;gBACzB,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,WAAW,CAAC,CAAC,EAAE,eAAe,CAAC,EAC/B,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,YAAY;gBAC1B,OAAO,IAAI,CAAC,eAAe,CACzB,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,iBAAiB;gBAC/B,OAAO,IAAI,CAAC,mBAAmB,CAC7B,WAAW,CAAC,CAAC,EAAE,eAAe,CAAC,EAC/B,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,YAAY;gBAC1B,OAAO,IAAI,CAAC,eAAe,CACzB,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,EACvB,WAAW,CAAC,CAAC,EAAE,eAAe,CAAC,EAC/B,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,eAAe;gBAC7B,OAAO,IAAI,CAAC,kBAAkB,CAC5B,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,WAAW,CAAC,CAAC,EAAE,UAAU,CAAC,EAC1B,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,sBAAsB;gBACpC,OAAO,IAAI,CAAC,gBAAgB,CAC1B,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,EAC3B,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,UAAU;gBACxB,OAAO,IAAI,CAAC,YAAY,CACtB,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,EACxB,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,QAAQ;gBACtB,gEAAgE;gBAChE,yDAAyD;gBACzD,qEAAqE;gBACrE,mEAAmE;gBACnE,mEAAmE;gBACnE,uCAAuC;gBACvC,OAAO,IAAI,CAAC,YAAY,CACtB,WAAW,CAAC,CAAC,EAAE,YAAY,CAAC,EAC5B,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,EACrB,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,EACtB,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH;gBACE,MAAM,IAAI,KAAK,CACb,gDAAgD,MAAM,EAAE,CACzD,CAAA;QACL,CAAC;IACH,CAAC;CACF;AAED,SAAS,MAAM,CAAC,MAAkB,EAAE,MAAkB;IACpD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,aAAa,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;IACpE,CAAC;IACD,IACE,MAAM,CAAC,MAAM,KAAK,SAAS;QAC3B,MAAM,CAAC,MAAM,KAAK,SAAS;QAC3B,MAAM,CAAC,MAAM,KAAK,SAAS,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,gBAAgB,MAAM,sCAAsC,CAC7D,CAAA;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAA0B,EAAE,GAAW;IAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;IAChB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAA;IACV,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;IAClB,CAAC;IACD,MAAM,IAAI,KAAK,CACb,8CAA8C,GAAG,UAAU,OAAO,CAAC,GAAG,CACvE,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAA0B,EAAE,GAAW;IAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;IAChB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACtC,OAAO,CAAC,CAAA;IACV,CAAC;IACD,MAAM,IAAI,KAAK,CACb,6CAA6C,GAAG,UAAU,OAAO,CAAC,GAAG,CACtE,CAAA;AACH,CAAC"}

package/dist/esm/signers/createAuthToken.d.ts

@@ -0,0 +1,36 @@
+import type { LighterApiKey } from './LighterKeyStore.js';
+import type { LighterReadOnlyToken } from './LighterReadOnlyTokenManager.js';
+import type { LighterSigner } from './LighterSigner.js';
+/** @public */
+export interface CreateAuthTokenInputs {
+    signer: LighterSigner;
+    apiKey: Pick<LighterApiKey, 'apiKeyPrivateKey' | 'apiKeyIndex' | 'accountIndex'>;
+    /**
+     * Token lifetime in seconds. Lighter caps standard tokens at 8 hours.
+     * Defaults to 1 hour, matching the previous `PerpsClient` behaviour.
+     */
+    lifetimeSeconds?: number;
+    /** Optional clock injection for tests. */
+    now?: () => number;
+}
+/**
+ * Create a fresh Lighter standard auth token via the WASM signer. Returns the
+ * opaque bearer string Lighter will accept on its authenticated read
+ * endpoints (`getOrders`, `getOrder`, `getActivity`, etc.).
+ *
+ * This utility carries no SDK-wide coupling — pass an explicit `signer` +
+ * `apiKey` and consume the returned bearer however the caller likes
+ * (per-call `options.lighterAuthToken`, persisted cache, etc.).
+ * @public
+ */
+export declare function createAuthToken(inputs: CreateAuthTokenInputs): Promise<string>;
+/**
+ * True when `token` exists, has not already expired, and is within
+ * `thresholdSeconds` of its recorded `expiry`. Intended for widget renewal
+ * banners — `thresholdSeconds` defaults to 30 days. Returns `false` for an
+ * undefined or already-expired token, so callers may treat that as "no
+ * token / renewal not needed (yet)".
+ * @public
+ */
+export declare function isReadOnlyTokenExpiringSoon(token: LighterReadOnlyToken | undefined | null, thresholdSeconds?: number, now?: () => number): boolean;
+//# sourceMappingURL=createAuthToken.d.ts.map

package/dist/esm/signers/createAuthToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAuthToken.d.ts","sourceRoot":"","sources":["../../../src/signers/createAuthToken.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAA;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAKvD,cAAc;AACd,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,aAAa,CAAA;IACrB,MAAM,EAAE,IAAI,CACV,aAAa,EACb,kBAAkB,GAAG,aAAa,GAAG,cAAc,CACpD,CAAA;IACD;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,oBAAoB,GAAG,SAAS,GAAG,IAAI,EAC9C,gBAAgB,GAAE,MAAkC,EACpD,GAAG,GAAE,MAAM,MAAyB,GACnC,OAAO,CAST"}

package/dist/esm/signers/createAuthToken.js

@@ -0,0 +1,42 @@
+const DEFAULT_LIFETIME_SECONDS = 60 * 60;
+const DEFAULT_THRESHOLD_SECONDS = 30 * 86_400;
+/**
+ * Create a fresh Lighter standard auth token via the WASM signer. Returns the
+ * opaque bearer string Lighter will accept on its authenticated read
+ * endpoints (`getOrders`, `getOrder`, `getActivity`, etc.).
+ *
+ * This utility carries no SDK-wide coupling — pass an explicit `signer` +
+ * `apiKey` and consume the returned bearer however the caller likes
+ * (per-call `options.lighterAuthToken`, persisted cache, etc.).
+ * @public
+ */
+export async function createAuthToken(inputs) {
+    const { signer, apiKey } = inputs;
+    const lifetime = inputs.lifetimeSeconds ?? DEFAULT_LIFETIME_SECONDS;
+    const now = inputs.now ?? (() => Date.now());
+    const deadline = Math.floor(now() / 1000) + lifetime;
+    return signer.createAuthToken(deadline, {
+        apiKeyPrivateKey: apiKey.apiKeyPrivateKey,
+        apiKeyIndex: apiKey.apiKeyIndex,
+        accountIndex: apiKey.accountIndex,
+    });
+}
+/**
+ * True when `token` exists, has not already expired, and is within
+ * `thresholdSeconds` of its recorded `expiry`. Intended for widget renewal
+ * banners — `thresholdSeconds` defaults to 30 days. Returns `false` for an
+ * undefined or already-expired token, so callers may treat that as "no
+ * token / renewal not needed (yet)".
+ * @public
+ */
+export function isReadOnlyTokenExpiringSoon(token, thresholdSeconds = DEFAULT_THRESHOLD_SECONDS, now = () => Date.now()) {
+    if (!token) {
+        return false;
+    }
+    const remaining = token.expiry - Math.floor(now() / 1000);
+    if (remaining <= 0) {
+        return false;
+    }
+    return remaining <= thresholdSeconds;
+}
+//# sourceMappingURL=createAuthToken.js.map

package/dist/esm/signers/createAuthToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAuthToken.js","sourceRoot":"","sources":["../../../src/signers/createAuthToken.ts"],"names":[],"mappings":"AAIA,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,CAAA;AACxC,MAAM,yBAAyB,GAAG,EAAE,GAAG,MAAM,CAAA;AAkB7C;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAA6B;IAE7B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;IACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,IAAI,wBAAwB,CAAA;IACnE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAA;IACpD,OAAO,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE;QACtC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAA8C,EAC9C,mBAA2B,yBAAyB,EACpD,MAAoB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACzD,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,SAAS,IAAI,gBAAgB,CAAA;AACtC,CAAC"}

package/dist/esm/signers/index.d.ts

@@ -0,0 +1,11 @@
+export type { CreateAuthTokenInputs } from './createAuthToken.js';
+export { createAuthToken, isReadOnlyTokenExpiringSoon, } from './createAuthToken.js';
+export type { LighterApiKey } from './LighterKeyStore.js';
+export { LighterKeyStore } from './LighterKeyStore.js';
+export type { ApproveReadOnlyTokenInputs, ApproveReadOnlyTokenResult, LighterCreateTokenResponse, LighterReadOnlyToken, LighterReadOnlyTokenManagerOptions, LighterTokenFetcher, } from './LighterReadOnlyTokenManager.js';
+export { DEFAULT_LIGHTER_API_URL, DEFAULT_READ_ONLY_TOKEN_NAME, defaultLighterTokenFetcher, LighterReadOnlyTokenManager, } from './LighterReadOnlyTokenManager.js';
+export type { ApiKeyPair, ChangePubKeyResult, LighterSignedBlob, LighterSignerConfig, LighterSignerContext, } from './LighterSigner.js';
+export { LighterSigner } from './LighterSigner.js';
+export type { LighterWasmExports, LoadLighterWasmOptions, } from './wasmLoader.js';
+export { loadLighterWasm, resetLighterWasmCache } from './wasmLoader.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/signers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/signers/index.ts"],"names":[],"mappings":"AAEA,YAAY,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AACjE,OAAO,EACL,eAAe,EACf,2BAA2B,GAC5B,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,YAAY,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,oBAAoB,EACpB,kCAAkC,EAClC,mBAAmB,GACpB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,kCAAkC,CAAA;AACzC,YAAY,EACV,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,YAAY,EACV,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/esm/signers/index.js

@@ -0,0 +1,7 @@
+// biome-ignore-all lint/performance/noBarrelFile: package-internal barrel.
+export { createAuthToken, isReadOnlyTokenExpiringSoon, } from './createAuthToken.js';
+export { LighterKeyStore } from './LighterKeyStore.js';
+export { DEFAULT_LIGHTER_API_URL, DEFAULT_READ_ONLY_TOKEN_NAME, defaultLighterTokenFetcher, LighterReadOnlyTokenManager, } from './LighterReadOnlyTokenManager.js';
+export { LighterSigner } from './LighterSigner.js';
+export { loadLighterWasm, resetLighterWasmCache } from './wasmLoader.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/signers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/signers/index.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAG3E,OAAO,EACL,eAAe,EACf,2BAA2B,GAC5B,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAStD,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,kCAAkC,CAAA;AAQzC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAKlD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/esm/signers/signActions.d.ts

@@ -0,0 +1,54 @@
+import { type SignActionsContext } from '@lifi/perps-sdk';
+import type { ActionStep, EvmTxActionStep, EvmTxSignedActionStep, SignedActionStep, WasmBlobActionStep, WasmBlobSignedActionStep } from '@lifi/perps-types';
+import { SigningMethod } from '@lifi/perps-types';
+import type { Address } from 'viem';
+import type { LighterKeyStore } from './LighterKeyStore.js';
+import type { LighterSigner } from './LighterSigner.js';
+/**
+ * Per-batch dependencies the Lighter `signActions` implementation needs:
+ * a WASM signer (`LighterSigner`), the API-key store keyed on L1 address,
+ * and a reference to the host SDK client for descriptor/account fetches
+ * within the REGISTER_API_KEY hybrid flow.
+ * @internal
+ */
+export interface LighterSignActionsDeps {
+    signer: LighterSigner;
+    keyStore: LighterKeyStore;
+    /**
+     * Resolve the user's Lighter `accountIndex` for an L1 address. Required
+     * by REGISTER_API_KEY so the ChangePubKey blob carries the right
+     * account. Implementations typically call Lighter's `/api/v1/account`
+     * with `by=l1_address`.
+     */
+    resolveAccountIndex(address: Address): Promise<number>;
+}
+/**
+ * Sign a `WASM_BLOB` batch (Lighter). Ensures the user's API keypair is
+ * registered first — generating one and running the REGISTER_API_KEY
+ * hybrid flow via the L1 signer if not — then feeds each subsequent step
+ * through the WASM signer.
+ *
+ * `ACCOUNT_TYPE` (Lighter `/changeAccountTier`) is a WASM_BLOB envelope
+ * authenticated with an auth token rather than a wasm tx signature —
+ * created via `LighterSigner.createAuthToken` and parked in `signedTx.txInfo`.
+ * @internal
+ */
+export declare function signWasmBlobActions(deps: LighterSignActionsDeps, address: Address, steps: WasmBlobActionStep[], ctx: SignActionsContext | undefined): Promise<WasmBlobSignedActionStep[]>;
+/**
+ * Sign and broadcast a sequence of `EVM_TX` actions via the user's wallet
+ * client. Steps are submitted serially so a later step (e.g. deposit) can
+ * rely on an earlier step (e.g. approve) having mined. Each step's
+ * `txParams` carries chainId, target, function name, args, and a
+ * human-readable abi from the backend.
+ * @internal
+ */
+export declare function signEvmTxActions(steps: EvmTxActionStep[], ctx: SignActionsContext | undefined): Promise<EvmTxSignedActionStep[]>;
+/**
+ * Top-level dispatch: pick the per-method signer based on the descriptor's
+ * `signingMethod` and forward. `EIP712` is rejected — Lighter declares no
+ * EIP712 actions (its user-consent step uses an EIP-191 `signMessage` inside
+ * the `WASM_BLOB` REGISTER_API_KEY flow).
+ * @internal
+ */
+export declare function lighterSignActions(deps: LighterSignActionsDeps, method: SigningMethod, steps: ActionStep[], address: Address, ctx?: SignActionsContext): Promise<SignedActionStep[]>;
+//# sourceMappingURL=signActions.d.ts.map

package/dist/esm/signers/signActions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signActions.d.ts","sourceRoot":"","sources":["../../../src/signers/signActions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACrE,OAAO,KAAK,EACV,UAAU,EACV,eAAe,EACf,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAA8B,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC7E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAGnC,OAAO,KAAK,EAAiB,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEvD;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,aAAa,CAAA;IACrB,QAAQ,EAAE,eAAe,CAAA;IACzB;;;;;OAKG;IACH,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACvD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,kBAAkB,EAAE,EAC3B,GAAG,EAAE,kBAAkB,GAAG,SAAS,GAClC,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAYrC;AAkKD;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,eAAe,EAAE,EACxB,GAAG,EAAE,kBAAkB,GAAG,SAAS,GAClC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAqClC;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,sBAAsB,EAC5B,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,UAAU,EAAE,EACnB,OAAO,EAAE,OAAO,EAChB,GAAG,CAAC,EAAE,kBAAkB,GACvB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAsB7B"}

package/dist/esm/signers/signActions.js

@@ -0,0 +1,193 @@
+import { PerpsError } from '@lifi/perps-sdk';
+import { ActionType, PerpsErrorCode, SigningMethod } from '@lifi/perps-types';
+import { parseAbi } from 'viem';
+import { DEFAULT_API_KEY_INDEX } from '../constants.js';
+/**
+ * Sign a `WASM_BLOB` batch (Lighter). Ensures the user's API keypair is
+ * registered first — generating one and running the REGISTER_API_KEY
+ * hybrid flow via the L1 signer if not — then feeds each subsequent step
+ * through the WASM signer.
+ *
+ * `ACCOUNT_TYPE` (Lighter `/changeAccountTier`) is a WASM_BLOB envelope
+ * authenticated with an auth token rather than a wasm tx signature —
+ * created via `LighterSigner.createAuthToken` and parked in `signedTx.txInfo`.
+ * @internal
+ */
+export async function signWasmBlobActions(deps, address, steps, ctx) {
+    const signed = [];
+    for (const step of steps) {
+        if (step.action === ActionType.REGISTER_API_KEY) {
+            signed.push(await signRegisterApiKey(deps, address, step, ctx));
+        }
+        else if (step.action === ActionType.ACCOUNT_TYPE) {
+            signed.push(await signAccountTierChange(deps, address, step));
+        }
+        else {
+            signed.push(await signStandardWasmAction(deps, address, step));
+        }
+    }
+    return signed;
+}
+async function signStandardWasmAction(deps, address, step) {
+    const apiKey = await requireApiKey(deps, address);
+    const signedTx = await deps.signer.sign(step.action, step.wasmSignParams, {
+        apiKeyPrivateKey: apiKey.apiKeyPrivateKey,
+        apiKeyIndex: apiKey.apiKeyIndex,
+        accountIndex: apiKey.accountIndex,
+    });
+    return {
+        action: step.action,
+        wasmSignParams: step.wasmSignParams,
+        signedTx,
+    };
+}
+/**
+ * REGISTER_API_KEY flow:
+ *   1. Look up the user's Lighter accountIndex (Lighter REST).
+ *   2. Generate a fresh Lighter API keypair via the WASM signer.
+ *   3. Call SignChangePubKey to produce the WASM blob + EIP-191 message.
+ *   4. Have the user's L1 Ethereum wallet sign the message.
+ *   5. Inject the L1 signature into the ChangePubKey txInfo JSON.
+ *   6. Persist the keypair and return the signed blob.
+ *
+ * Requires the end-user's wallet in `ctx.userWallet` — the L1 signature is the
+ * user's consent to rotate keys.
+ */
+async function signRegisterApiKey(deps, address, step, ctx) {
+    const walletSigner = ctx?.userWallet;
+    if (!walletSigner) {
+        throw new PerpsError(PerpsErrorCode.SDKError, 'REGISTER_API_KEY requires the end-user wallet — pass `userWallet` to ' +
+            'createPerpsClient or call setUserWallet(walletClient).');
+    }
+    const params = step.wasmSignParams;
+    const apiKeyIndex = params.api_key_index ?? DEFAULT_API_KEY_INDEX;
+    const nonce = params.nonce;
+    if (typeof nonce !== 'number') {
+        throw new PerpsError(PerpsErrorCode.SDKError, 'REGISTER_API_KEY wasmSignParams is missing `nonce`.');
+    }
+    const skipNonce = params.skip_nonce === 1 ? 1 : 0;
+    const accountIndex = await deps.resolveAccountIndex(address);
+    const keypair = await deps.signer.generateAPIKey();
+    const changePubKey = await deps.signer.signChangePubKey(keypair.publicKey, keypair.privateKey, nonce, apiKeyIndex, accountIndex, skipNonce);
+    const l1Signature = await walletSigner.signMessage({
+        account: walletSigner.account,
+        message: changePubKey.messageToSign,
+    });
+    const txInfoWithL1Sig = deps.signer.embedL1Signature(changePubKey.txInfo, l1Signature);
+    const apiKey = {
+        accountIndex,
+        apiKeyIndex,
+        apiKeyPrivateKey: keypair.privateKey,
+        apiKeyPublicKey: keypair.publicKey,
+    };
+    await deps.keyStore.set(address, apiKey);
+    return {
+        action: step.action,
+        wasmSignParams: {
+            ...step.wasmSignParams,
+            new_public_key: keypair.publicKey,
+        },
+        signedTx: {
+            txType: changePubKey.txType,
+            txInfo: txInfoWithL1Sig,
+            txHash: changePubKey.txHash,
+        },
+    };
+}
+/**
+ * Sign an `ACCOUNT_TYPE` step (Lighter `changeAccountTier`).
+ *
+ * Lighter's `/api/v1/changeAccountTier` is an HTTP-only mutation —
+ * Lighter does NOT consume a wasm-signed transaction here; it
+ * authenticates the request with the same auth token its read endpoints
+ * use, and enforces anti-replay business rules server-side. The backend
+ * declares the step as a `WasmBlobActionStep` with
+ * `wasmSignParams.kind = 'changeAccountTier'` and expects the SDK to create
+ * an auth token in lieu of a transaction signature; the executor reads
+ * `signedTx.txInfo` as the `auth` form parameter.
+ *
+ * The 1h deadline mirrors the previous behaviour — Lighter caps tokens at
+ * 8h hard, and the backend's executor runs `verifyPendingAction` then a
+ * single POST, which completes well inside an hour.
+ */
+async function signAccountTierChange(deps, address, step) {
+    const apiKey = await requireApiKey(deps, address);
+    const deadline = Math.floor(Date.now() / 1000) + 60 * 60;
+    const authToken = await deps.signer.createAuthToken(deadline, {
+        apiKeyPrivateKey: apiKey.apiKeyPrivateKey,
+        apiKeyIndex: apiKey.apiKeyIndex,
+        accountIndex: apiKey.accountIndex,
+    });
+    return {
+        action: step.action,
+        wasmSignParams: step.wasmSignParams,
+        signedTx: {
+            // `/changeAccountTier` reads only `txInfo` (the auth token); `txType`
+            // and `txHash` are placeholders to satisfy the envelope shape.
+            txType: 0,
+            txInfo: authToken,
+            txHash: '',
+        },
+    };
+}
+async function requireApiKey(deps, address) {
+    const apiKey = await deps.keyStore.get(address);
+    if (!apiKey) {
+        throw new PerpsError(PerpsErrorCode.SDKError, `No Lighter API key registered for ${address}. ` +
+            'Run prepareAccount / REGISTER_API_KEY first.');
+    }
+    return apiKey;
+}
+/**
+ * Sign and broadcast a sequence of `EVM_TX` actions via the user's wallet
+ * client. Steps are submitted serially so a later step (e.g. deposit) can
+ * rely on an earlier step (e.g. approve) having mined. Each step's
+ * `txParams` carries chainId, target, function name, args, and a
+ * human-readable abi from the backend.
+ * @internal
+ */
+export async function signEvmTxActions(steps, ctx) {
+    const walletSigner = ctx?.userWallet;
+    if (!walletSigner) {
+        throw new PerpsError(PerpsErrorCode.SDKError, 'EVM_TX signing requires the end-user wallet. Pass `userWallet` to ' +
+            'createPerpsClient or call setUserWallet(walletClient).');
+    }
+    const signed = [];
+    for (const step of steps) {
+        const params = step.txParams;
+        const txHash = await walletSigner.writeContract({
+            address: params.to,
+            abi: parseAbi(params.abi),
+            functionName: params.functionName,
+            args: params.args,
+            chain: walletSigner.chain,
+            account: walletSigner.account,
+        });
+        signed.push({
+            action: step.action,
+            txParams: step.txParams,
+            txHash,
+        });
+    }
+    return signed;
+}
+/**
+ * Top-level dispatch: pick the per-method signer based on the descriptor's
+ * `signingMethod` and forward. `EIP712` is rejected — Lighter declares no
+ * EIP712 actions (its user-consent step uses an EIP-191 `signMessage` inside
+ * the `WASM_BLOB` REGISTER_API_KEY flow).
+ * @internal
+ */
+export async function lighterSignActions(deps, method, steps, address, ctx) {
+    switch (method) {
+        case SigningMethod.WASM_BLOB:
+            return signWasmBlobActions(deps, address, steps, ctx);
+        case SigningMethod.EVM_TX:
+            return signEvmTxActions(steps, ctx);
+        case SigningMethod.EIP712:
+            throw new PerpsError(PerpsErrorCode.SDKError, 'LighterProvider.signActions: Lighter declares no EIP712 actions.');
+        default:
+            throw new PerpsError(PerpsErrorCode.SDKError, `LighterProvider.signActions: unknown SigningMethod '${method}'.`);
+    }
+}
+//# sourceMappingURL=signActions.js.map

package/dist/esm/signers/signActions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signActions.js","sourceRoot":"","sources":["../../../src/signers/signActions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAA2B,MAAM,iBAAiB,CAAA;AASrE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAE7E,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAC/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAuBvD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAA4B,EAC5B,OAAgB,EAChB,KAA2B,EAC3B,GAAmC;IAEnC,MAAM,MAAM,GAA+B,EAAE,CAAA;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,gBAAgB,EAAE,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;QACjE,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,YAAY,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,MAAM,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QAC/D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,MAAM,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,IAA4B,EAC5B,OAAgB,EAChB,IAAwB;IAExB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE;QACxE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAA;IACF,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,QAAQ;KACT,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,kBAAkB,CAC/B,IAA4B,EAC5B,OAAgB,EAChB,IAAwB,EACxB,GAAmC;IAEnC,MAAM,YAAY,GAAG,GAAG,EAAE,UAAU,CAAA;IACpC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,UAAU,CAClB,cAAc,CAAC,QAAQ,EACvB,uEAAuE;YACrE,wDAAwD,CAC3D,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,cAInB,CAAA;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,aAAa,IAAI,qBAAqB,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAClB,cAAc,CAAC,QAAQ,EACvB,qDAAqD,CACtD,CAAA;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAEjD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAE5D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;IAClD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CACrD,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,UAAU,EAClB,KAAK,EACL,WAAW,EACX,YAAY,EACZ,SAAS,CACV,CAAA;IAED,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC;QACjD,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,OAAO,EAAE,YAAY,CAAC,aAAa;KACpC,CAAC,CAAA;IAEF,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAClD,YAAY,CAAC,MAAM,EACnB,WAAW,CACZ,CAAA;IAED,MAAM,MAAM,GAAkB;QAC5B,YAAY;QACZ,WAAW;QACX,gBAAgB,EAAE,OAAO,CAAC,UAAU;QACpC,eAAe,EAAE,OAAO,CAAC,SAAS;KACnC,CAAA;IACD,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAExC,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,cAAc,EAAE;YACd,GAAG,IAAI,CAAC,cAAc;YACtB,cAAc,EAAE,OAAO,CAAC,SAAS;SAClC;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,MAAM,EAAE,eAAe;YACvB,MAAM,EAAE,YAAY,CAAC,MAAM;SAC5B;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,qBAAqB,CAClC,IAA4B,EAC5B,OAAgB,EAChB,IAAwB;IAExB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAA;IACxD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE;QAC5D,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAA;IACF,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,QAAQ,EAAE;YACR,sEAAsE;YACtE,+DAA+D;YAC/D,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,EAAE;SACX;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAA4B,EAC5B,OAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,UAAU,CAClB,cAAc,CAAC,QAAQ,EACvB,qCAAqC,OAAO,IAAI;YAC9C,8CAA8C,CACjD,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAwB,EACxB,GAAmC;IAEnC,MAAM,YAAY,GAAG,GAAG,EAAE,UAAU,CAAA;IACpC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,UAAU,CAClB,cAAc,CAAC,QAAQ,EACvB,oEAAoE;YAClE,wDAAwD,CAC3D,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,QAMnB,CAAA;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC;YAC9C,OAAO,EAAE,MAAM,CAAC,EAAE;YAClB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,OAAO,EAAE,YAAY,CAAC,OAAO;SAC9B,CAAC,CAAA;QAEF,MAAM,CAAC,IAAI,CAAC;YACV,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM;SACP,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAA4B,EAC5B,MAAqB,EACrB,KAAmB,EACnB,OAAgB,EAChB,GAAwB;IAExB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,aAAa,CAAC,SAAS;YAC1B,OAAO,mBAAmB,CACxB,IAAI,EACJ,OAAO,EACP,KAA6B,EAC7B,GAAG,CACJ,CAAA;QACH,KAAK,aAAa,CAAC,MAAM;YACvB,OAAO,gBAAgB,CAAC,KAA0B,EAAE,GAAG,CAAC,CAAA;QAC1D,KAAK,aAAa,CAAC,MAAM;YACvB,MAAM,IAAI,UAAU,CAClB,cAAc,CAAC,QAAQ,EACvB,kEAAkE,CACnE,CAAA;QACH;YACE,MAAM,IAAI,UAAU,CAClB,cAAc,CAAC,QAAQ,EACvB,uDAAuD,MAAgB,IAAI,CAC5E,CAAA;IACL,CAAC;AACH,CAAC"}