@lifi/perps-sdk 0.1.1-alpha.9 → 0.2.0-alpha.0

package/dist/esm/signers/lighter/LighterReadOnlyTokenManager.js

@@ -0,0 +1,214 @@
+import { PerpsErrorCode } from '@lifi/perps-types';
+import { localStorageAdapter } from '../../agent/storage.js';
+import { PerpsError } from '../../errors/PerpsError.js';
+const STORAGE_PREFIX = 'lifi:perps:lighter:rotoken';
+/**
+ * Default Lighter HTTP host the SDK posts the mint request to. Callers
+ * pointing at testnet pass an override via {@link LighterReadOnlyTokenManagerOptions.lighterApiUrl}.
+ */
+export const DEFAULT_LIGHTER_API_URL = 'https://mainnet.zklighter.elliot.ai';
+/**
+ * Default token name persisted alongside Lighter's `tokens/create` row.
+ * Lighter requires a non-empty `name` form field; the literal here is what
+ * surfaces in Lighter's UI listing under `app.lighter.xyz/read-only-tokens`.
+ */
+export const DEFAULT_READ_ONLY_TOKEN_NAME = 'LI.FI Perps';
+const SECONDS_PER_DAY = 86_400;
+/**
+ * Manage the per-account Lighter read-only token alongside the existing
+ * `(L1 address, account index)`-scoped storage adapter pattern. Mirrors
+ * `AgentManager`'s injection surface so the same `StorageAdapter` powers
+ * both. The token is opaque — never parsed client-side; `expiry`/`scope`
+ * recorded at mint time are the source of truth.
+ *
+ * The L1 wallet signer and the HTTP fetcher are both injectable so unit
+ * tests don't need a real wallet or network.
+ */
+export class LighterReadOnlyTokenManager {
+    storage;
+    lighterApiUrl;
+    fetcher;
+    now;
+    cache = new Map();
+    constructor(options = {}) {
+        this.storage = options.storage ?? localStorageAdapter;
+        this.lighterApiUrl = options.lighterApiUrl ?? DEFAULT_LIGHTER_API_URL;
+        this.fetcher = options.fetcher ?? defaultLighterTokenFetcher;
+        this.now = options.now ?? (() => Date.now());
+    }
+    storageKey(address, accountIndex) {
+        return `${STORAGE_PREFIX}:${address.toLowerCase()}:${accountIndex}`;
+    }
+    isExpired(token) {
+        return token.expiry * 1000 <= this.now();
+    }
+    /**
+     * Return the stored token for the `(address, accountIndex)` pair, or
+     * `undefined` if absent or past its `expiry`. Never surfaces an expired
+     * token — consumers can rely on the return value being usable as-is.
+     */
+    async get(address, accountIndex) {
+        const key = this.storageKey(address, accountIndex);
+        const cached = this.cache.get(key);
+        if (cached) {
+            return this.isExpired(cached) ? undefined : cached;
+        }
+        const raw = await this.storage.get(key);
+        if (!raw) {
+            return undefined;
+        }
+        const parsed = JSON.parse(raw);
+        if (this.isExpired(parsed)) {
+            return undefined;
+        }
+        this.cache.set(key, parsed);
+        return parsed;
+    }
+    /**
+     * `true` when a stored token exists AND its `expiry` falls within
+     * `thresholdDays` of now. `false` when no token exists, when the token is
+     * already expired (caller should treat that as "no token"), or when it
+     * has more than `thresholdDays` of life left.
+     */
+    async isReadOnlyTokenExpiringSoon(address, accountIndex, thresholdDays = 30) {
+        const key = this.storageKey(address, accountIndex);
+        const raw = this.cache.get(key) ??
+            (await (async () => {
+                const stored = await this.storage.get(key);
+                return stored ? JSON.parse(stored) : undefined;
+            })());
+        if (!raw) {
+            return false;
+        }
+        const remainingSeconds = raw.expiry - Math.floor(this.now() / 1000);
+        if (remainingSeconds <= 0) {
+            return false;
+        }
+        return remainingSeconds <= thresholdDays * SECONDS_PER_DAY;
+    }
+    /**
+     * Persist `token` for the `(address, accountIndex)` pair. Overwrites any
+     * prior stored token under the same key — used both by the approve flow
+     * and by the renewal flow.
+     */
+    async set(address, accountIndex, token) {
+        const key = this.storageKey(address, accountIndex);
+        this.cache.set(key, token);
+        await this.storage.set(key, JSON.stringify(token));
+    }
+    async remove(address, accountIndex) {
+        const key = this.storageKey(address, accountIndex);
+        this.cache.delete(key);
+        await this.storage.remove(key);
+    }
+    /**
+     * Mint and persist a new Lighter read-only token.
+     *
+     * Asks `signer` to produce an EIP-191 `personal_sign` over the
+     * `createToken`-specific L1 message, POSTs the signed payload to Lighter's
+     * `/api/v1/tokens/create` via the injected `fetcher`, and persists the
+     * returned bearer alongside its `expiry`/`scope`/`accountIndex`.
+     *
+     * `expirySeconds` is the absolute unix-seconds expiry Lighter records on
+     * the row. Lighter enforces 1 day ≤ lifetime ≤ 10 years server-side; the
+     * SDK does NOT pre-validate and surfaces Lighter's 400 verbatim.
+     *
+     * `scope` defaults to `'all'` (token authorises read access to every
+     * account owned by the L1 signer). `'single'` is wired through so callers
+     * who need per-account scoping can opt in.
+     *
+     * @param signer EIP-191 wallet signer for the L1 message.
+     * @param inputs Token-mint parameters plus the L1 `address` that signs.
+     */
+    async approve(signer, inputs) {
+        const { address, accountIndex, expirySeconds, scope } = inputs;
+        const message = buildReadOnlyTokenMessage({
+            accountIndex,
+            expirySeconds,
+            scope,
+        });
+        const authorization = await signer({ address, message });
+        const response = await this.fetcher({
+            url: `${this.lighterApiUrl}/api/v1/tokens/create`,
+            authorization,
+            name: DEFAULT_READ_ONLY_TOKEN_NAME,
+            accountIndex,
+            expiry: expirySeconds,
+            subAccountAccess: scope === 'all',
+            scopes: scope,
+        });
+        const token = {
+            token: response.api_token,
+            expiry: response.expiry,
+            // Lighter echoes the literal we sent; we trust ours over the wire
+            // string so we never desynchronise the persisted shape from
+            // the typed `'single' | 'all'` discriminator.
+            scope,
+            accountIndex: response.account_index,
+        };
+        await this.set(address, token.accountIndex, token);
+        return {
+            token,
+            config: {
+                provider: 'lighter',
+                accountIndex: token.accountIndex,
+                readOnlyTokenApproved: true,
+                readOnlyTokenExpiry: token.expiry,
+                readOnlyTokenScope: token.scope,
+            },
+        };
+    }
+}
+/**
+ * Build the EIP-191 message the user's L1 wallet signs to authorise a
+ * Lighter `tokens/create` request.
+ *
+ * NOTE — Lighter's public docs do not fully specify the message template
+ * for the read-only token mint flow. The shape here is the SDK's best-fit
+ * given (a) Lighter's UI hosts the equivalent flow at
+ * `app.lighter.xyz/read-only-tokens` and (b) Lighter's `tokens/create`
+ * endpoint reads `account_index`, `expiry`, and `scopes` as form fields.
+ * If Lighter publishes a documented template that diverges, update this
+ * builder — the test fixtures will fail loudly.
+ */
+export function buildReadOnlyTokenMessage(params) {
+    return [
+        'Lighter Read-Only Token',
+        `account_index=${params.accountIndex}`,
+        `expiry=${params.expirySeconds}`,
+        `scopes=${params.scope}`,
+    ].join('\n');
+}
+/**
+ * Default fetcher: posts a multipart/form-data request to Lighter's
+ * `tokens/create` endpoint and returns the parsed response. Throws a
+ * {@link PerpsError} with the Lighter-side body when the response is
+ * non-2xx.
+ */
+export const defaultLighterTokenFetcher = async ({ url, authorization, name, accountIndex, expiry, subAccountAccess, scopes, }) => {
+    const form = new FormData();
+    form.set('name', name);
+    form.set('account_index', String(accountIndex));
+    form.set('expiry', String(expiry));
+    form.set('sub_account_access', String(subAccountAccess));
+    form.set('scopes', scopes);
+    const response = await fetch(url, {
+        method: 'POST',
+        headers: { authorization },
+        body: form,
+    });
+    if (!response.ok) {
+        const body = await response.text();
+        throw new PerpsError(PerpsErrorCode.ServerError, `Lighter tokens/create returned ${response.status}: ${body || '<empty>'}`);
+    }
+    return (await response.json());
+};
+/**
+ * Adapter producing a {@link LighterWalletSigner} from a viem
+ * `WalletClient`. Pulled out so `PerpsClient.approveReadOnlyToken` can call
+ * into the manager without leaking viem types past the manager's boundary.
+ */
+export function walletClientSigner(client) {
+    return ({ message }) => client.signMessage({ account: client.account, message });
+}
+//# sourceMappingURL=LighterReadOnlyTokenManager.js.map

package/dist/esm/signers/lighter/LighterReadOnlyTokenManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LighterReadOnlyTokenManager.js","sourceRoot":"","sources":["../../../../src/signers/lighter/LighterReadOnlyTokenManager.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAElD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AAEvD,MAAM,cAAc,GAAG,4BAA4B,CAAA;AAEnD;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,qCAAqC,CAAA;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,aAAa,CAAA;AAqFzD,MAAM,eAAe,GAAG,MAAM,CAAA;AAE9B;;;;;;;;;GASG;AACH,MAAM,OAAO,2BAA2B;IACrB,OAAO,CAAgB;IACvB,aAAa,CAAQ;IACrB,OAAO,CAAqB;IAC5B,GAAG,CAAc;IACjB,KAAK,GAAG,IAAI,GAAG,EAAgC,CAAA;IAEhE,YAAY,UAA8C,EAAE;QAC1D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,mBAAmB,CAAA;QACrD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAA;QACrE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,0BAA0B,CAAA;QAC5D,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC9C,CAAC;IAEO,UAAU,CAAC,OAAgB,EAAE,YAAoB;QACvD,OAAO,GAAG,cAAc,IAAI,OAAO,CAAC,WAAW,EAAE,IAAI,YAAY,EAAE,CAAA;IACrE,CAAC;IAEO,SAAS,CAAC,KAA2B;QAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IAC1C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CACP,OAAgB,EAChB,YAAoB;QAEpB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;QACpD,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAA;QACtD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC3B,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,2BAA2B,CAC/B,OAAgB,EAChB,YAAoB,EACpB,aAAa,GAAG,EAAE;QAElB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAClD,MAAM,GAAG,GACP,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACnB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;gBACjB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC1C,OAAO,MAAM,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAA0B,CAAC,CAAC,CAAC,SAAS,CAAA;YAC1E,CAAC,CAAC,EAAE,CAAC,CAAA;QACP,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,gBAAgB,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QACnE,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,gBAAgB,IAAI,aAAa,GAAG,eAAe,CAAA;IAC5D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CACP,OAAgB,EAChB,YAAoB,EACpB,KAA2B;QAE3B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAClD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,YAAoB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAClD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACtB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAChC,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,OAAO,CACX,MAA2B,EAC3B,MAAkC;QAElC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;QAC9D,MAAM,OAAO,GAAG,yBAAyB,CAAC;YACxC,YAAY;YACZ,aAAa;YACb,KAAK;SACN,CAAC,CAAA;QACF,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;QAExD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,uBAAuB;YACjD,aAAa;YACb,IAAI,EAAE,4BAA4B;YAClC,YAAY;YACZ,MAAM,EAAE,aAAa;YACrB,gBAAgB,EAAE,KAAK,KAAK,KAAK;YACjC,MAAM,EAAE,KAAK;SACd,CAAC,CAAA;QAEF,MAAM,KAAK,GAAyB;YAClC,KAAK,EAAE,QAAQ,CAAC,SAAS;YACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,kEAAkE;YAClE,4DAA4D;YAC5D,8CAA8C;YAC9C,KAAK;YACL,YAAY,EAAE,QAAQ,CAAC,aAAa;SACrC,CAAA;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAElD,OAAO;YACL,KAAK;YACL,MAAM,EAAE;gBACN,QAAQ,EAAE,SAAS;gBACnB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,qBAAqB,EAAE,IAAI;gBAC3B,mBAAmB,EAAE,KAAK,CAAC,MAAM;gBACjC,kBAAkB,EAAE,KAAK,CAAC,KAAK;aAChC;SACF,CAAA;IACH,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAIzC;IACC,OAAO;QACL,yBAAyB;QACzB,iBAAiB,MAAM,CAAC,YAAY,EAAE;QACtC,UAAU,MAAM,CAAC,aAAa,EAAE;QAChC,UAAU,MAAM,CAAC,KAAK,EAAE;KACzB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAwB,KAAK,EAAE,EACpE,GAAG,EACH,aAAa,EACb,IAAI,EACJ,YAAY,EACZ,MAAM,EACN,gBAAgB,EAChB,MAAM,GACP,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAA;IAC3B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACtB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAA;IAC/C,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAClC,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACxD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAE1B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE;QAC1B,IAAI,EAAE,IAAI;KACX,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,MAAM,IAAI,UAAU,CAClB,cAAc,CAAC,WAAW,EAC1B,kCAAkC,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,SAAS,EAAE,CAC1E,CAAA;IACH,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+B,CAAA;AAC9D,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAuC;IAEvC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACrB,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;AAC5D,CAAC"}

package/dist/esm/signers/lighter/LighterSigner.d.ts

@@ -0,0 +1,88 @@
+import { ActionType } from '@lifi/perps-types';
+import { type LoadLighterWasmOptions } from './wasmLoader.js';
+export interface LighterSignerContext {
+    /** Lighter-native private key (from GenerateAPIKey, NOT an Ethereum key). */
+    apiKeyPrivateKey: string;
+    /** API key slot registered on-chain (0-255). */
+    apiKeyIndex: number;
+    /** Lighter account index — looked up from the user's L1 Ethereum address. */
+    accountIndex: number;
+}
+export interface LighterSignerConfig extends LoadLighterWasmOptions {
+    /** Lighter REST API base URL. */
+    apiUrl?: string;
+    /** Lighter chain ID (304 = mainnet). */
+    chainId?: number;
+}
+export interface LighterSignedBlob {
+    txType: number;
+    txInfo: string;
+    txHash: string;
+}
+export interface ChangePubKeyResult extends LighterSignedBlob {
+    /** EIP-191 message the L1 Ethereum wallet must sign to authorize the key rotation. */
+    messageToSign: string;
+}
+export interface ApiKeyPair {
+    publicKey: string;
+    privateKey: string;
+}
+export declare class LighterSigner {
+    private readonly apiUrl;
+    private readonly chainId;
+    private readonly loaderOptions;
+    private wasm;
+    private readonly registeredClients;
+    constructor(config?: LighterSignerConfig);
+    initialize(): Promise<void>;
+    /**
+     * Generate a fresh Lighter API keypair. Pass an optional 32-byte hex seed
+     * for deterministic generation (used in tests); omit for a random key.
+     */
+    generateAPIKey(seed?: string): Promise<ApiKeyPair>;
+    /**
+     * Sign an action blob with the provided (apiKeyPrivateKey, apiKeyIndex,
+     * accountIndex) context. `wasmSignParams` comes straight from the backend's
+     * `WasmBlobActionStep`. Returns the signed `{ txType, txInfo, txHash }`
+     * triple the backend forwards to Lighter's `sendTx` endpoint.
+     *
+     * For REGISTER_API_KEY use `signChangePubKey` instead — it returns an
+     * additional `messageToSign` the L1 wallet must countersign.
+     */
+    sign(action: ActionType, wasmSignParams: Record<string, unknown>, context: LighterSignerContext): Promise<LighterSignedBlob>;
+    /**
+     * Step 1 of the REGISTER_API_KEY flow. Generates the WASM blob for a
+     * ChangePubKey tx with `L1Sig` left empty, plus the canonical EIP-191
+     * message the L1 Ethereum wallet must sign next.
+     *
+     * Requires the freshly-generated `privateKey` (returned by
+     * {@link generateAPIKey}) — the Go WASM signer registers a per-slot client
+     * keyed on `(apiKeyIndex, accountIndex)` before it'll sign anything for
+     * that slot, including the ChangePubKey that's about to register the key
+     * on-chain. This is purely client-side bookkeeping; it does not touch the
+     * Lighter API.
+     */
+    signChangePubKey(pubKeyHex: string, privateKey: string, nonce: number, apiKeyIndex: number, accountIndex: number): Promise<ChangePubKeyResult>;
+    /**
+     * Step 2 of REGISTER_API_KEY — inject the L1 signature produced by the
+     * user's Ethereum wallet into the ChangePubKey txInfo JSON. `L1Sig` is the
+     * only field in txInfo that depends on the L1 signature; txHash does NOT
+     * include it (so we do not recompute it).
+     */
+    embedL1Signature(txInfo: string, l1Signature: string): string;
+    /**
+     * Create an auth token for authenticated WebSocket subscriptions.
+     * `deadline` is a Unix timestamp in seconds — tokens have an 8h hard cap.
+     */
+    createAuthToken(deadline: number, context: LighterSignerContext): Promise<string>;
+    private ensureLoaded;
+    private ensureClient;
+    /**
+     * Map an ActionType + backend-provided params object to the positional-arg
+     * WASM call. The Go signer exports take primitives in order, not an object
+     * — so we pick fields in the exact order the Go side expects. Unknown
+     * fields (e.g. backend's integrator_* hints) are ignored.
+     */
+    private dispatch;
+}
+//# sourceMappingURL=LighterSigner.d.ts.map

package/dist/esm/signers/lighter/LighterSigner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LighterSigner.d.ts","sourceRoot":"","sources":["../../../../src/signers/lighter/LighterSigner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAEL,KAAK,sBAAsB,EAG5B,MAAM,iBAAiB,CAAA;AAWxB,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,CAAA;IACxB,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAA;IACnB,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,mBAAoB,SAAQ,sBAAsB;IACjE,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D,sFAAsF;IACtF,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB;AAKD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAwB;IACtD,OAAO,CAAC,IAAI,CAAgC;IAC5C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;gBAE1C,MAAM,GAAE,mBAAwB;IAUtC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAMjC;;;OAGG;IACG,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAYxD;;;;;;;;OAQG;IACG,IAAI,CACR,MAAM,EAAE,UAAU,EAClB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,iBAAiB,CAAC;IAa7B;;;;;;;;;;;OAWG;IACG,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,kBAAkB,CAAC;IAqC9B;;;;;OAKG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM;IAa7D;;;OAGG;IACG,eAAe,CACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,MAAM,CAAC;YAiBJ,YAAY;YAOZ,YAAY;IAmB1B;;;;;OAKG;IACH,OAAO,CAAC,QAAQ;CAsGjB"}

package/dist/esm/signers/lighter/LighterSigner.js

@@ -0,0 +1,226 @@
+import { ActionType } from '@lifi/perps-types';
+import { loadLighterWasm, } from './wasmLoader.js';
+const DEFAULT_API_URL = 'https://mainnet.zklighter.elliot.ai';
+const DEFAULT_CHAIN_ID = 304;
+export class LighterSigner {
+    apiUrl;
+    chainId;
+    loaderOptions;
+    wasm;
+    registeredClients = new Set();
+    constructor(config = {}) {
+        this.apiUrl = config.apiUrl ?? DEFAULT_API_URL;
+        this.chainId = config.chainId ?? DEFAULT_CHAIN_ID;
+        this.loaderOptions = {
+            wasmBinaryUrl: config.wasmBinaryUrl,
+            wasmExecJsUrl: config.wasmExecJsUrl,
+            wasmExecJsSource: config.wasmExecJsSource,
+        };
+    }
+    async initialize() {
+        if (!this.wasm) {
+            this.wasm = await loadLighterWasm(this.loaderOptions);
+        }
+    }
+    /**
+     * Generate a fresh Lighter API keypair. Pass an optional 32-byte hex seed
+     * for deterministic generation (used in tests); omit for a random key.
+     */
+    async generateAPIKey(seed) {
+        const wasm = await this.ensureLoaded();
+        const result = wasm.GenerateAPIKey(seed ?? '');
+        if (result.error) {
+            throw new Error(`Lighter GenerateAPIKey failed: ${result.error}`);
+        }
+        if (!result.publicKey || !result.privateKey) {
+            throw new Error('Lighter GenerateAPIKey returned an incomplete result');
+        }
+        return { publicKey: result.publicKey, privateKey: result.privateKey };
+    }
+    /**
+     * Sign an action blob with the provided (apiKeyPrivateKey, apiKeyIndex,
+     * accountIndex) context. `wasmSignParams` comes straight from the backend's
+     * `WasmBlobActionStep`. Returns the signed `{ txType, txInfo, txHash }`
+     * triple the backend forwards to Lighter's `sendTx` endpoint.
+     *
+     * For REGISTER_API_KEY use `signChangePubKey` instead — it returns an
+     * additional `messageToSign` the L1 wallet must countersign.
+     */
+    async sign(action, wasmSignParams, context) {
+        if (action === ActionType.REGISTER_API_KEY) {
+            throw new Error('Use signChangePubKey() for REGISTER_API_KEY — the L1 eth_sign hop ' +
+                'must be coordinated by the caller.');
+        }
+        const wasm = await this.ensureLoaded();
+        await this.ensureClient(context);
+        const result = this.dispatch(wasm, action, wasmSignParams, context);
+        return unwrap(result, action);
+    }
+    /**
+     * Step 1 of the REGISTER_API_KEY flow. Generates the WASM blob for a
+     * ChangePubKey tx with `L1Sig` left empty, plus the canonical EIP-191
+     * message the L1 Ethereum wallet must sign next.
+     *
+     * Requires the freshly-generated `privateKey` (returned by
+     * {@link generateAPIKey}) — the Go WASM signer registers a per-slot client
+     * keyed on `(apiKeyIndex, accountIndex)` before it'll sign anything for
+     * that slot, including the ChangePubKey that's about to register the key
+     * on-chain. This is purely client-side bookkeeping; it does not touch the
+     * Lighter API.
+     */
+    async signChangePubKey(pubKeyHex, privateKey, nonce, apiKeyIndex, accountIndex) {
+        const wasm = await this.ensureLoaded();
+        await this.ensureClient({
+            apiKeyPrivateKey: privateKey,
+            apiKeyIndex,
+            accountIndex,
+        });
+        // 5-arg call (matches lighter-python's signer wrapper). `skipNonce=0`
+        // means "embed the supplied nonce" — the value we just fetched from
+        // Lighter's authoritative /nextNonce.
+        const SKIP_NONCE_OFF = 0;
+        const result = wasm.SignChangePubKey(pubKeyHex, SKIP_NONCE_OFF, nonce, apiKeyIndex, accountIndex);
+        if (result.error) {
+            throw new Error(`Lighter SignChangePubKey failed: ${result.error}`);
+        }
+        if (result.txType === undefined ||
+            result.txInfo === undefined ||
+            result.txHash === undefined ||
+            !result.messageToSign) {
+            throw new Error('Lighter SignChangePubKey returned incomplete result');
+        }
+        return {
+            txType: result.txType,
+            txInfo: result.txInfo,
+            txHash: result.txHash,
+            messageToSign: result.messageToSign,
+        };
+    }
+    /**
+     * Step 2 of REGISTER_API_KEY — inject the L1 signature produced by the
+     * user's Ethereum wallet into the ChangePubKey txInfo JSON. `L1Sig` is the
+     * only field in txInfo that depends on the L1 signature; txHash does NOT
+     * include it (so we do not recompute it).
+     */
+    embedL1Signature(txInfo, l1Signature) {
+        let parsed;
+        try {
+            parsed = JSON.parse(txInfo);
+        }
+        catch (err) {
+            throw new Error(`Failed to parse ChangePubKey txInfo as JSON: ${err.message}`);
+        }
+        parsed.L1Sig = l1Signature;
+        return JSON.stringify(parsed);
+    }
+    /**
+     * Create an auth token for authenticated WebSocket subscriptions.
+     * `deadline` is a Unix timestamp in seconds — tokens have an 8h hard cap.
+     */
+    async createAuthToken(deadline, context) {
+        const wasm = await this.ensureLoaded();
+        await this.ensureClient(context);
+        const result = wasm.CreateAuthToken(deadline, context.apiKeyIndex, context.accountIndex);
+        if (result.error) {
+            throw new Error(`Lighter CreateAuthToken failed: ${result.error}`);
+        }
+        if (!result.authToken) {
+            throw new Error('Lighter CreateAuthToken returned no token');
+        }
+        return result.authToken;
+    }
+    async ensureLoaded() {
+        if (!this.wasm) {
+            await this.initialize();
+        }
+        return this.wasm;
+    }
+    async ensureClient(context) {
+        const key = `${context.apiKeyIndex}:${context.accountIndex}:${context.apiKeyPrivateKey}`;
+        if (this.registeredClients.has(key)) {
+            return;
+        }
+        const wasm = await this.ensureLoaded();
+        const result = wasm.CreateClient(this.apiUrl, context.apiKeyPrivateKey, this.chainId, context.apiKeyIndex, context.accountIndex);
+        if (result.error) {
+            throw new Error(`Lighter CreateClient failed: ${result.error}`);
+        }
+        this.registeredClients.add(key);
+    }
+    /**
+     * Map an ActionType + backend-provided params object to the positional-arg
+     * WASM call. The Go signer exports take primitives in order, not an object
+     * — so we pick fields in the exact order the Go side expects. Unknown
+     * fields (e.g. backend's integrator_* hints) are ignored.
+     */
+    dispatch(wasm, action, p, ctx) {
+        const nonce = numberField(p, 'nonce');
+        switch (action) {
+            case ActionType.PLACE_ORDER:
+            case ActionType.PLACE_TRIGGER_ORDER:
+                return wasm.SignCreateOrder(numberField(p, 'market_index'), numberField(p, 'client_order_index'), numberField(p, 'base_amount'), numberField(p, 'price'), numberField(p, 'is_ask'), numberField(p, 'order_type'), numberField(p, 'time_in_force'), 
+                // WASM's error message lists "reduceOnly" as bool-like, but Go
+                // actually calls Value.Int() on every arg — passing an actual bool
+                // panics. Coerce to 0/1.
+                numberField(p, 'reduce_only'), numberField(p, 'trigger_price'), numberField(p, 'order_expiry'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.CANCEL_ORDER:
+                return wasm.SignCancelOrder(numberField(p, 'market_index'), numberField(p, 'order_index'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.CANCEL_ALL_ORDERS:
+                return wasm.SignCancelAllOrders(numberField(p, 'time_in_force'), numberField(p, 'timestamp_ms'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.MODIFY_ORDER:
+                return wasm.SignModifyOrder(numberField(p, 'market_index'), numberField(p, 'order_index'), numberField(p, 'base_amount'), numberField(p, 'price'), numberField(p, 'trigger_price'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.UPDATE_LEVERAGE:
+                return wasm.SignUpdateLeverage(numberField(p, 'market_index'), numberField(p, 'fraction'), numberField(p, 'margin_mode'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.UPDATE_POSITION_MARGIN:
+                return wasm.SignUpdateMargin(numberField(p, 'market_index'), numberField(p, 'usdc_amount'), numberField(p, 'direction'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.WITHDRAWAL:
+                return wasm.SignWithdraw(numberField(p, 'amount'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            case ActionType.TRANSFER:
+                // SignTransfer's 7 positional args follow the Go binding order:
+                // `toAccount, usdcAmount, fee, memo, nonce, apiKeyIndex,
+                // accountIndex`. `memo` is copied directly into a `[32]byte`, so the
+                // backend MUST send a JS string whose UTF-8 byte length is exactly
+                // 32 (in practice: 32 ASCII characters) — anything else fails with
+                // "memo expected to be 32 bytes long".
+                return wasm.SignTransfer(numberField(p, 'to_account'), numberField(p, 'usdc_amount'), numberField(p, 'fee'), stringField(p, 'memo'), nonce, ctx.apiKeyIndex, ctx.accountIndex);
+            default:
+                throw new Error(`Lighter WASM signer does not support action: ${action}`);
+        }
+    }
+}
+function unwrap(result, action) {
+    if (result.error) {
+        throw new Error(`Lighter sign(${action}) failed: ${result.error}`);
+    }
+    if (result.txType === undefined ||
+        result.txInfo === undefined ||
+        result.txHash === undefined) {
+        throw new Error(`Lighter sign(${action}) returned an incomplete signed blob`);
+    }
+    return {
+        txType: result.txType,
+        txInfo: result.txInfo,
+        txHash: result.txHash,
+    };
+}
+function numberField(p, key) {
+    const v = p[key];
+    if (typeof v === 'number') {
+        return v;
+    }
+    if (typeof v === 'boolean') {
+        return v ? 1 : 0;
+    }
+    if (typeof v === 'string' && v !== '' && !Number.isNaN(Number(v))) {
+        return Number(v);
+    }
+    throw new Error(`Lighter sign params missing numeric field '${key}' (got ${typeof v})`);
+}
+function stringField(p, key) {
+    const v = p[key];
+    if (typeof v === 'string' && v !== '') {
+        return v;
+    }
+    throw new Error(`Lighter sign params missing string field '${key}' (got ${typeof v})`);
+}
+//# sourceMappingURL=LighterSigner.js.map

package/dist/esm/signers/lighter/LighterSigner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LighterSigner.js","sourceRoot":"","sources":["../../../../src/signers/lighter/LighterSigner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAGL,eAAe,GAEhB,MAAM,iBAAiB,CAAA;AA2CxB,MAAM,eAAe,GAAG,qCAAqC,CAAA;AAC7D,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B,MAAM,OAAO,aAAa;IACP,MAAM,CAAQ;IACd,OAAO,CAAQ;IACf,aAAa,CAAwB;IAC9C,IAAI,CAAgC;IAC3B,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAA;IAEtD,YAAY,SAA8B,EAAE;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,eAAe,CAAA;QAC9C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAA;QACjD,IAAI,CAAC,aAAa,GAAG;YACnB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC1C,CAAA;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,IAAa;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;QAC9C,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QACnE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACzE,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAA;IACvE,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,IAAI,CACR,MAAkB,EAClB,cAAuC,EACvC,OAA6B;QAE7B,IAAI,MAAM,KAAK,UAAU,CAAC,gBAAgB,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,oEAAoE;gBAClE,oCAAoC,CACvC,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACtC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,CAAA;QACnE,OAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,gBAAgB,CACpB,SAAiB,EACjB,UAAkB,EAClB,KAAa,EACb,WAAmB,EACnB,YAAoB;QAEpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACtC,MAAM,IAAI,CAAC,YAAY,CAAC;YACtB,gBAAgB,EAAE,UAAU;YAC5B,WAAW;YACX,YAAY;SACb,CAAC,CAAA;QACF,sEAAsE;QACtE,oEAAoE;QACpE,sCAAsC;QACtC,MAAM,cAAc,GAAG,CAAC,CAAA;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAClC,SAAS,EACT,cAAc,EACd,KAAK,EACL,WAAW,EACX,YAAY,CACb,CAAA;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QACrE,CAAC;QACD,IACE,MAAM,CAAC,MAAM,KAAK,SAAS;YAC3B,MAAM,CAAC,MAAM,KAAK,SAAS;YAC3B,MAAM,CAAC,MAAM,KAAK,SAAS;YAC3B,CAAC,MAAM,CAAC,aAAa,EACrB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QACxE,CAAC;QACD,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAA;IACH,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,MAAc,EAAE,WAAmB;QAClD,IAAI,MAA+B,CAAA;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA4B,CAAA;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,gDAAiD,GAAa,CAAC,OAAO,EAAE,CACzE,CAAA;QACH,CAAC;QACD,MAAM,CAAC,KAAK,GAAG,WAAW,CAAA;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CACnB,QAAgB,EAChB,OAA6B;QAE7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACtC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CACjC,QAAQ,EACR,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,YAAY,CACrB,CAAA;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAC9D,CAAC;QACD,OAAO,MAAM,CAAC,SAAS,CAAA;IACzB,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACzB,CAAC;QACD,OAAO,IAAI,CAAC,IAA0B,CAAA;IACxC,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAA6B;QACtD,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAA;QACxF,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,OAAM;QACR,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAC9B,IAAI,CAAC,MAAM,EACX,OAAO,CAAC,gBAAgB,EACxB,IAAI,CAAC,OAAO,EACZ,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,YAAY,CACrB,CAAA;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAED;;;;;OAKG;IACK,QAAQ,CACd,IAAwB,EACxB,MAAkB,EAClB,CAA0B,EAC1B,GAAyB;QAEzB,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QACrC,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,UAAU,CAAC,WAAW,CAAC;YAC5B,KAAK,UAAU,CAAC,mBAAmB;gBACjC,OAAO,IAAI,CAAC,eAAe,CACzB,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,WAAW,CAAC,CAAC,EAAE,oBAAoB,CAAC,EACpC,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,EACvB,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,EACxB,WAAW,CAAC,CAAC,EAAE,YAAY,CAAC,EAC5B,WAAW,CAAC,CAAC,EAAE,eAAe,CAAC;gBAC/B,+DAA+D;gBAC/D,mEAAmE;gBACnE,yBAAyB;gBACzB,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,WAAW,CAAC,CAAC,EAAE,eAAe,CAAC,EAC/B,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,YAAY;gBAC1B,OAAO,IAAI,CAAC,eAAe,CACzB,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,iBAAiB;gBAC/B,OAAO,IAAI,CAAC,mBAAmB,CAC7B,WAAW,CAAC,CAAC,EAAE,eAAe,CAAC,EAC/B,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,YAAY;gBAC1B,OAAO,IAAI,CAAC,eAAe,CACzB,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,EACvB,WAAW,CAAC,CAAC,EAAE,eAAe,CAAC,EAC/B,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,eAAe;gBAC7B,OAAO,IAAI,CAAC,kBAAkB,CAC5B,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,WAAW,CAAC,CAAC,EAAE,UAAU,CAAC,EAC1B,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,sBAAsB;gBACpC,OAAO,IAAI,CAAC,gBAAgB,CAC1B,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,EAC9B,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,EAC3B,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,UAAU;gBACxB,OAAO,IAAI,CAAC,YAAY,CACtB,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,EACxB,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH,KAAK,UAAU,CAAC,QAAQ;gBACtB,gEAAgE;gBAChE,yDAAyD;gBACzD,qEAAqE;gBACrE,mEAAmE;gBACnE,mEAAmE;gBACnE,uCAAuC;gBACvC,OAAO,IAAI,CAAC,YAAY,CACtB,WAAW,CAAC,CAAC,EAAE,YAAY,CAAC,EAC5B,WAAW,CAAC,CAAC,EAAE,aAAa,CAAC,EAC7B,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,EACrB,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,EACtB,KAAK,EACL,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,YAAY,CACjB,CAAA;YACH;gBACE,MAAM,IAAI,KAAK,CACb,gDAAgD,MAAM,EAAE,CACzD,CAAA;QACL,CAAC;IACH,CAAC;CACF;AAED,SAAS,MAAM,CAAC,MAAkB,EAAE,MAAkB;IACpD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,aAAa,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;IACpE,CAAC;IACD,IACE,MAAM,CAAC,MAAM,KAAK,SAAS;QAC3B,MAAM,CAAC,MAAM,KAAK,SAAS;QAC3B,MAAM,CAAC,MAAM,KAAK,SAAS,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,gBAAgB,MAAM,sCAAsC,CAC7D,CAAA;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAA0B,EAAE,GAAW;IAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;IAChB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAA;IACV,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;IAClB,CAAC;IACD,MAAM,IAAI,KAAK,CACb,8CAA8C,GAAG,UAAU,OAAO,CAAC,GAAG,CACvE,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAA0B,EAAE,GAAW;IAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;IAChB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACtC,OAAO,CAAC,CAAA;IACV,CAAC;IACD,MAAM,IAAI,KAAK,CACb,6CAA6C,GAAG,UAAU,OAAO,CAAC,GAAG,CACtE,CAAA;AACH,CAAC"}

package/dist/esm/signers/lighter/index.d.ts

@@ -0,0 +1,9 @@
+export type { LighterApiKey } from './LighterKeyStore.js';
+export { DEFAULT_API_KEY_INDEX, LIGHTER_PROVIDER_KEY, LighterKeyStore, } from './LighterKeyStore.js';
+export type { ApproveReadOnlyTokenInputs, ApproveReadOnlyTokenResult, LighterCreateTokenResponse, LighterReadOnlyToken, LighterReadOnlyTokenManagerOptions, LighterTokenFetcher, LighterWalletSigner, } from './LighterReadOnlyTokenManager.js';
+export { buildReadOnlyTokenMessage, DEFAULT_LIGHTER_API_URL, DEFAULT_READ_ONLY_TOKEN_NAME, defaultLighterTokenFetcher, LighterReadOnlyTokenManager, walletClientSigner, } from './LighterReadOnlyTokenManager.js';
+export type { ApiKeyPair, ChangePubKeyResult, LighterSignedBlob, LighterSignerConfig, LighterSignerContext, } from './LighterSigner.js';
+export { LighterSigner } from './LighterSigner.js';
+export type { LighterWasmExports, LoadLighterWasmOptions, } from './wasmLoader.js';
+export { loadLighterWasm, resetLighterWasmCache } from './wasmLoader.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/signers/lighter/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/signers/lighter/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,GAChB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,oBAAoB,EACpB,kCAAkC,EAClC,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,kCAAkC,CAAA;AACzC,YAAY,EACV,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,YAAY,EACV,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/esm/signers/lighter/index.js

@@ -0,0 +1,5 @@
+export { DEFAULT_API_KEY_INDEX, LIGHTER_PROVIDER_KEY, LighterKeyStore, } from './LighterKeyStore.js';
+export { buildReadOnlyTokenMessage, DEFAULT_LIGHTER_API_URL, DEFAULT_READ_ONLY_TOKEN_NAME, defaultLighterTokenFetcher, LighterReadOnlyTokenManager, walletClientSigner, } from './LighterReadOnlyTokenManager.js';
+export { LighterSigner } from './LighterSigner.js';
+export { loadLighterWasm, resetLighterWasmCache } from './wasmLoader.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/signers/lighter/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/signers/lighter/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,GAChB,MAAM,sBAAsB,CAAA;AAU7B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,kCAAkC,CAAA;AAQzC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAKlD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/esm/signers/lighter/wasmLoader.d.ts

@@ -0,0 +1,71 @@
+export interface LoadLighterWasmOptions {
+    /** Override URL for the `.wasm` binary (browser: fetch; Node: fs). */
+    wasmBinaryUrl?: string | URL;
+    /** Override URL for Go's `wasm_exec.js` runtime. */
+    wasmExecJsUrl?: string | URL;
+    /**
+     * Pre-fetched source of Go's `wasm_exec.js`. Preferred over
+     * `wasmExecJsUrl` for bundlers (Vite/webpack) that may transform a `.js`
+     * URL on serve, breaking the IIFE that installs `globalThis.Go`. Pass via
+     * a `?raw` import (Vite) or equivalent so the original source survives
+     * intact.
+     */
+    wasmExecJsSource?: string;
+}
+export interface LighterWasmExports {
+    GenerateAPIKey: (seed?: string) => {
+        publicKey?: string;
+        privateKey?: string;
+        error?: string;
+    };
+    CreateClient: (url: string, privateKey: string, chainId: number, apiKeyIndex: number, accountIndex: number) => {
+        error?: string;
+    };
+    CheckClient: (apiKeyIndex: number, accountIndex: number) => {
+        error?: string;
+    };
+    /**
+     * Returns `{authToken}` on success — note the field name is `authToken`,
+     * NOT `token`. Reading the wrong field silently fails (Go sets nothing
+     * else on the result), which is why early code paths returned undefined
+     * tokens with no error.
+     */
+    CreateAuthToken: (deadline: number, apiKeyIndex: number, accountIndex: number) => {
+        authToken?: string;
+        error?: string;
+    };
+    /**
+     * Signature mirrors lighter-python's `signer.SignChangePubKey(...)` call —
+     * 5 positional args including `skipNonce` (use 0 to embed our supplied
+     * nonce; 1 to leave it out for server-fill scenarios). Earlier versions
+     * here had only 4 args, which silently shifted all arguments by one and
+     * produced txInfo with garbage AccountIndex / ApiKeyIndex fields →
+     * Lighter rejected with code 20001 "invalid param".
+     */
+    SignChangePubKey: (pubKeyHex: string, skipNonce: number, nonce: number, apiKeyIndex: number, accountIndex: number) => SignResult & {
+        messageToSign?: string;
+    };
+    SignCreateOrder: (...args: unknown[]) => SignResult;
+    SignCancelOrder: (...args: unknown[]) => SignResult;
+    SignCancelAllOrders: (...args: unknown[]) => SignResult;
+    SignTransfer: (...args: unknown[]) => SignResult;
+    SignWithdraw: (...args: unknown[]) => SignResult;
+    SignUpdateLeverage: (...args: unknown[]) => SignResult;
+    SignModifyOrder: (...args: unknown[]) => SignResult;
+    SignUpdateMargin: (...args: unknown[]) => SignResult;
+}
+export interface SignResult {
+    txType?: number;
+    txInfo?: string;
+    txHash?: string;
+    error?: string;
+}
+/**
+ * Load the Lighter WASM signer. Memoized per-process: subsequent calls return
+ * the cached exports. The Go runtime keeps a long-running goroutine to service
+ * JS calls — we start it once and never stop it.
+ */
+export declare function loadLighterWasm(options?: LoadLighterWasmOptions): Promise<LighterWasmExports>;
+/** Testing helper — drop the cached WASM instance so the next load reinitializes. */
+export declare function resetLighterWasmCache(): void;
+//# sourceMappingURL=wasmLoader.d.ts.map