@metaflux-dex/client 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 MetaFlux
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,157 @@
+# @metaflux-dex/client
+
+TypeScript client SDK for the [MetaFlux (MTF)](https://github.com/mtf-exchange) L1.
+CPU-heavy work (secp256k1 signing, keccak256, msgpack canonical encoding) is
+pushed into a wasm-bindgen WASM module — the pure-TS surface is a thin,
+type-safe `fetch` wrapper that speaks the **MTF-native** protocol directly
+(`POST /info` reads, `POST /exchange` signed writes, `wss://…/ws` streams).
+
+> MetaFlux-native only. HL-compatible and CCXT endpoints live on the gateway;
+> this SDK targets the node/gateway's first-class MTF-native surface.
+
+## Install
+
+```bash
+npm install @metaflux-dex/client
+```
+
+The published package ships the compiled `dist/` (TypeScript) and `pkg/` (WASM)
+artifacts — no Rust toolchain needed to **consume** it. You only need Rust +
+`wasm-pack` to build from source (see [Develop](#develop)).
+
+## Quickstart
+
+```ts
+import { Client } from '@metaflux-dex/client';
+
+const client = new Client({
+  baseUrl: 'http://localhost:8080',
+  // Optional. Without a private key the Client is read-only.
+  privateKey: new Uint8Array(32).fill(0x42),
+});
+
+// ---- Reads (no key required) — POST /info, {type,data} envelope unwrapped ----
+const markets = await client.info.markets();
+console.log(markets.map((m) => `${m.name} @ ${m.mark_px}`));
+
+const acct = await client.info.accountState(
+  '0x17c5185167401ed00cf5f5b2fc97d9bbfdb7d025',
+);
+console.log(acct.account_value, acct.positions);
+
+// ---- Signed order — POST /exchange (MTF-native signed action) ----
+const ack = await client.submitOrderNative({
+  owner: '0x17c5185167401ed00cf5f5b2fc97d9bbfdb7d025', // must equal the signer
+  market: 0, // BTC perp (asset id)
+  side: 'bid', // 'bid' = buy, 'ask' = sell
+  kind: 'limit',
+  size: 1_000, // fixed-point tick units
+  limit_px: 5_000_000_000_000, // fixed-point tick units
+  tif: 'gtc', // 'gtc' | 'ioc' | 'aon' | 'alo'
+  stp_mode: 'cancel_newest',
+  reduce_only: false,
+});
+
+// Synchronous per-order status — the oid is assigned at admission.
+// statuses[i] is one of { resting:{oid} } | { filled:{oid,total_sz,avg_px} } | { error }
+console.log(ack.statuses?.[0]);
+```
+
+The signing flow (EIP-712 over the canonical action bytes, nonce auto-assigned,
+`chainId` defaults to `MTF_CHAIN_ID`) is handled inside `submitOrderNative`. The
+recovered signer is checked against `owner` locally before the request leaves the
+process. Cancel via `client.cancelOrderNative({ … })`.
+
+### WebSocket streams
+
+```ts
+import { WsClient } from '@metaflux-dex/client';
+
+const ws = new WsClient('ws://localhost:8080/ws');
+ws.onMessage((f) => {
+  if (f.channel === 'l2Book') handleBook(f.data);
+});
+await ws.connect();
+await ws.subscribe({ type: 'l2Book', coin: 'BTC' });
+```
+
+### Power-user exports
+
+The barrel also exports the low-level pieces so you can build custom flows —
+`InfoApi` (standalone read client), the `buildNativeOrderAction` /
+`signNativeAction` / `nativeActionDigest` action builders, and the WASM crypto
+primitives (`keccak256`, `signSecp256k1`, `recoverPubkey`, …). See
+[`src/index.ts`](src/index.ts) for the full surface.
+
+## What's WASM-backed vs pure-TS
+
+| Operation                          | Layer                                    |
+| ---------------------------------- | ---------------------------------------- |
+| keccak256 (any input length)       | WASM (`sha3::Keccak256`)                 |
+| secp256k1 sign / recover / verify  | WASM (`k256` 0.13.x)                     |
+| EIP-712 envelope hash composition  | WASM (single keccak call, fewer FFI hops)|
+| msgpack encoding of action bodies  | WASM (`rmp_serde::to_vec_named`)         |
+| EVM address derivation             | WASM (keccak + low-20-bytes slice)       |
+| HTTP fetch wrapper                 | TS                                       |
+| `{type,data}` envelope unwrap      | TS                                       |
+| JSON request/response coercion     | TS                                       |
+| WebSocket framing + reconnect      | TS                                       |
+
+The split is intentional: every byte the gateway/node *parses* is produced by
+Rust on both sides. The TS layer only assembles JSON envelopes around
+already-canonical WASM outputs, so the wire format has a single source of truth.
+
+## Wire conventions
+
+- **Signature**: 65-byte recoverable ECDSA, `r (32) || s (32) || v (1)`, where
+  `v` is the raw recovery id (0 or 1).
+- **EIP-712 digest**: `keccak256(0x1901 || domain_separator || message_hash)`,
+  `domain = { name: "MetaFlux", version: "1", chainId, verifyingContract: 0x0 }`.
+- **MTF-native action**: a canonical snake_case JSON action
+  (`{"type":"submit_order","order":{…}}`) signed verbatim; the request body is
+  `{ action, nonce, signature }` to `POST /exchange`.
+
+Field shapes are mirrored from the authoritative API spec in
+[`metaflux-knowledges`](https://github.com/mtf-exchange/metaflux-knowledges) and
+the node handlers under `metaflux/crates/api-node/src/rest/`.
+
+## Develop
+
+This repo uses [pnpm](https://pnpm.io) (see `packageManager` in package.json).
+
+```bash
+# Rust toolchain + wasm-pack (to build the WASM module).
+brew install rust wasm-pack
+
+pnpm install
+pnpm build         # wasm-pack -> pkg/, then tsc -> dist/
+pnpm test          # vitest
+pnpm typecheck     # tsc --noEmit
+```
+
+Build the artifacts separately with `pnpm build:wasm` / `pnpm build:ts`.
+
+## Repository layout
+
+```
+.
+├── package.json              # @metaflux-dex/client
+├── src/
+│   ├── index.ts              # public barrel
+│   ├── client.ts             # Client class — reads + signed writes
+│   ├── info.ts               # InfoApi — POST /info read methods
+│   ├── info-types.ts         # /info response shapes ({type,data}.data)
+│   ├── native.ts             # MTF-native action build + sign + digest
+│   ├── ws.ts                 # WsClient — subscriptions + reconnect
+│   ├── wasm.ts               # WASM loader + typed crypto wrappers
+│   ├── http.ts               # fetch wrapper + MetaFluxApiError
+│   └── types.ts              # Order / NativeOrder / acks / shared enums
+├── __tests__/                # vitest: info / native / sign / ws
+├── wasm/                     # standalone wasm-bindgen crate (+ native tests)
+├── pkg/                      # wasm-pack output (gitignored)
+└── dist/                     # tsc output (gitignored)
+```
+
+## License
+
+[MIT](LICENSE) © MetaFlux

package/dist/client.d.ts

@@ -0,0 +1,32 @@
+import { InfoApi } from './info.js';
+import { WsClient, type WsConfig } from './ws.js';
+import type { Market, NativeCancel, NativeExchangeAck, NativeOrder, Order, OrderAck, Position, SignedOrder } from './types.js';
+export interface ClientOpts {
+    baseUrl: string;
+    privateKey?: Uint8Array;
+    chainId?: number;
+}
+export declare class Client {
+    private readonly baseUrl;
+    private readonly privateKey;
+    private readonly chainId;
+    private jwt;
+    readonly info: InfoApi;
+    constructor(opts: ClientOpts);
+    get canSign(): boolean;
+    signOrder(order: Order): Promise<SignedOrder>;
+    submitOrder(signed: SignedOrder): Promise<OrderAck>;
+    submitOrderNative(order: NativeOrder, opts?: {
+        nonce?: bigint;
+        chainId?: number;
+    }): Promise<NativeExchangeAck>;
+    cancelOrderNative(cancel: NativeCancel, opts?: {
+        nonce?: bigint;
+        chainId?: number;
+    }): Promise<NativeExchangeAck>;
+    connectWs(config?: Partial<WsConfig>): Promise<WsClient>;
+    getMarkets(): Promise<Market[]>;
+    getPositions(account: string): Promise<Position[]>;
+    setJwt(token: string): void;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,KAAK,EACV,MAAM,EACN,YAAY,EACZ,iBAAiB,EACjB,WAAW,EACX,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,WAAW,EACZ,MAAM,YAAY,CAAC;AAGpB,MAAM,WAAW,UAAU;IAIzB,OAAO,EAAE,MAAM,CAAC;IAIhB,UAAU,CAAC,EAAE,UAAU,CAAC;IAGxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAwFD,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAGjC,OAAO,CAAC,GAAG,CAAqB;IAEhC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;gBAEX,IAAI,EAAE,UAAU;IAe5B,IAAI,OAAO,IAAI,OAAO,CAErB;IAoBK,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;IAgD7C,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAyCnD,iBAAiB,CACrB,KAAK,EAAE,WAAW,EAClB,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9C,OAAO,CAAC,iBAAiB,CAAC;IA0CvB,iBAAiB,CACrB,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9C,OAAO,CAAC,iBAAiB,CAAC;IAmCvB,SAAS,CAAC,MAAM,GAAE,OAAO,CAAC,QAAQ,CAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAQ5D,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAQ/B,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAcxD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAG5B"}

package/dist/client.js

@@ -0,0 +1,344 @@
+// `Client` — primary entry point for the @metaflux-dex/client SDK.
+//
+// Heavy lifting: order signing (msgpack encode -> EIP-712 hash ->
+// secp256k1 sign -> address derive) runs through WASM. Pure-TS
+// responsibilities: HTTP plumbing, type coercion, optional JWT
+// session bookkeeping.
+//
+// Naming note: exported as `Client` (NOT `MtfClient`) per session
+// direction. Consumers import as `import { Client } from '@metaflux-dex/client'`.
+import { deriveAddressFromPubkey, eip712TypedDataHash, encodeLimitOrder, keccak256, recoverPubkey, signSecp256k1, } from './wasm.js';
+import { httpRequest } from './http.js';
+import { buildNativeCancelAction, buildNativeOrderAction, nativeRequestBody, nextNonce, recoverNativeSigner, signNativeAction, } from './native.js';
+import { InfoApi } from './info.js';
+import { WsClient } from './ws.js';
+/// Default chain ID for the EIP-712 domain. The MetaFlux mainnet ID is
+/// reserved-but-not-yet-assigned (PLAN.md §M.1 — "TBD pre-mainnet, avoid
+/// 999 which is HL"); the devnet default `31337` matches what the
+/// existing core-state tests use.
+const DEFAULT_CHAIN_ID = 31337;
+/// `keccak256("EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)")`
+/// pre-computed at module load. Static across the SDK lifetime so we
+/// don't re-keccak it for every signing call.
+let cachedDomainTypeHash;
+async function domainTypeHash() {
+    if (cachedDomainTypeHash === undefined) {
+        cachedDomainTypeHash = await keccak256(new TextEncoder().encode('EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)'));
+    }
+    return cachedDomainTypeHash;
+}
+/// Pre-computed type-hash for the limit-order action. The string mirrors
+/// what the node will register for the `Order` action — locked in by
+/// RFC-001 §D once the on-chain registry lands. The shape here matches
+/// what `encode_limit_order` produces.
+let cachedOrderTypeHash;
+async function orderTypeHash() {
+    if (cachedOrderTypeHash === undefined) {
+        cachedOrderTypeHash = await keccak256(new TextEncoder().encode('Order(uint32 asset,uint8 side,uint128 px,uint128 size,uint8 tif)'));
+    }
+    return cachedOrderTypeHash;
+}
+/// Compute the EIP-712 domain separator for a given chain id.
+///
+/// Mirrors `core_state::signing::EipDomain::separator` — the canonical
+/// 5-segment keccak input is
+/// `(domain_type_hash, name_hash, version_hash, chain_id_be32, verifying_contract_padded)`.
+async function computeDomainSeparator(chainId) {
+    const dth = await domainTypeHash();
+    const nameHash = await keccak256(new TextEncoder().encode('MetaFlux'));
+    const versionHash = await keccak256(new TextEncoder().encode('1'));
+    // uint256 chainId big-endian, 32 bytes.
+    const chainIdBe = new Uint8Array(32);
+    // JS bitwise ops are signed 32-bit; use BigInt for the conversion.
+    const view = new DataView(chainIdBe.buffer);
+    view.setBigUint64(24, BigInt(chainId)); // low 8 bytes carry the value.
+    // Verifying contract == Address::ZERO, left-padded to 32 bytes -> all zeros.
+    const verifyingPadded = new Uint8Array(32);
+    // Concat + keccak. Allocating one Uint8Array beats 5 hasher.update calls
+    // because the WASM keccak primitive takes a single slice — the
+    // call-overhead of multiple FFI hops would outweigh the copy.
+    const concat = new Uint8Array(5 * 32);
+    concat.set(dth, 0);
+    concat.set(nameHash, 32);
+    concat.set(versionHash, 64);
+    concat.set(chainIdBe, 96);
+    concat.set(verifyingPadded, 128);
+    return keccak256(concat);
+}
+/// Primary client surface. Construct once per session.
+///
+/// Read-only example:
+/// ```ts
+/// const c = new Client({ baseUrl: 'http://localhost:8080' });
+/// const markets = await c.getMarkets();
+/// ```
+///
+/// Signing example:
+/// ```ts
+/// const c = new Client({
+///   baseUrl: 'http://localhost:8080',
+///   privateKey: hexToBytes('...'),
+/// });
+/// const signed = await c.signOrder({ asset: 0, side: 0, sizeE8: 100_000_000n,
+///                                    priceE8: 50_000_00000000n, tif: 0 });
+/// const ack = await c.submitOrder(signed);
+/// ```
+export class Client {
+    baseUrl;
+    privateKey;
+    chainId;
+    /// Cached gateway-issued JWT (`/auth`). The session is established
+    /// lazily on the first authenticated call.
+    jwt;
+    /// MTF-native read API (`POST /info`). Read-only; no key required.
+    info;
+    constructor(opts) {
+        if (opts.baseUrl.length === 0) {
+            throw new RangeError('Client baseUrl must be non-empty');
+        }
+        if (opts.privateKey !== undefined && opts.privateKey.length !== 32) {
+            throw new RangeError('Client privateKey must be exactly 32 bytes');
+        }
+        this.baseUrl = opts.baseUrl;
+        this.privateKey = opts.privateKey;
+        this.chainId = opts.chainId ?? DEFAULT_CHAIN_ID;
+        this.info = new InfoApi(this.baseUrl);
+    }
+    /// Whether this client has a private key available for signing
+    /// operations. Read-only data calls work regardless.
+    get canSign() {
+        return this.privateKey !== undefined;
+    }
+    /// Sign an order body. Returns the `(payload, signature, signer)`
+    /// triplet ready for `submitOrder`.
+    ///
+    /// All heavy lifting (msgpack encode, keccak, ECDSA) is in WASM.
+    /// The signing flow:
+    ///
+    /// 1. `payload = encode_limit_order(...)` — msgpack body matching the
+    ///    node's `OrderParams` decoder.
+    /// 2. `messageHash = keccak256(orderTypeHash || payload)` — the
+    ///    EIP-712 "struct hash" of the action.
+    /// 3. `domainSeparator = keccak256(EIP712Domain(...))` — cached.
+    /// 4. `digest = keccak256(0x1901 || domainSeparator || messageHash)`.
+    /// 5. `signature = sign_secp256k1(privateKey, digest)`.
+    /// 6. `signer = derive_address_from_pubkey(recover_pubkey(signature, digest))`.
+    ///
+    /// Step 6 derives the signer locally rather than trusting the gateway
+    /// to recover it; that way the SDK ships the address upfront and the
+    /// gateway can reject obviously-replayed envelopes before doing ECDSA.
+    async signOrder(order) {
+        if (this.privateKey === undefined) {
+            throw new Error('signOrder requires a privateKey in ClientOpts (this Client is read-only)');
+        }
+        const payload = await encodeLimitOrder(order.asset, order.side, order.sizeE8, order.priceE8, order.tif, order.stp ?? 0, order.cloid, order.reduceOnly ?? false, order.builder);
+        const typeHash = await orderTypeHash();
+        // message_hash = keccak256(type_hash || payload).
+        const msgBuffer = new Uint8Array(typeHash.length + payload.length);
+        msgBuffer.set(typeHash, 0);
+        msgBuffer.set(payload, typeHash.length);
+        const messageHash = await keccak256(msgBuffer);
+        const domainSeparator = await computeDomainSeparator(this.chainId);
+        const digest = await eip712TypedDataHash(domainSeparator, messageHash);
+        const signature = await signSecp256k1(this.privateKey, digest);
+        const pubkey = await recoverPubkey(signature, digest);
+        const signer = await deriveAddressFromPubkey(pubkey);
+        return { payload, signature, signer };
+    }
+    /// Submit a pre-signed order to the gateway.
+    ///
+    /// DEPRECATED / LEGACY: this targets the old `{payload,signature,signer}` →
+    /// `/v1/orders` envelope with a msgpack body and an `Order(...)` typehash.
+    /// The server now accepts the MTF-native `{action,nonce,signature}` →
+    /// `/exchange` envelope instead — use `submitOrderNative`. Retained
+    /// only for any consumer still on the old gateway adapter.
+    ///
+    /// Wire shape: POSTs the `SignedOrder` as a msgpack-friendly JSON
+    /// envelope — `payload` and `signature` go as base64url strings (the
+    /// gateway's existing `LoginEnvelope` shape uses base64; we mirror
+    /// that), `signer` goes as a 0x-hex address. The gateway adapter
+    /// (TODO on the server side) decodes and forwards to the node via
+    /// gRPC; for now the SDK targets the CCXT createOrder response shape.
+    async submitOrder(signed) {
+        return httpRequest(this.baseUrl, '/v1/orders', {
+            method: 'POST',
+            json: {
+                payload: bytesToBase64Url(signed.payload),
+                signature: bytesToBase64Url(signed.signature),
+                signer: bytesToHex(signed.signer, '0x'),
+            },
+            bearer: this.jwt,
+        });
+    }
+    /// Submit an order via the MTF-native signed-action front door
+    /// (`POST /exchange`).
+    ///
+    /// This is the path the server now accepts. It supersedes the legacy
+    /// `signOrder` + `submitOrder` flow (msgpack body + `Order(...)` typehash +
+    /// `{payload,signature,signer}` → `/v1/orders`), which targeted an
+    /// envelope the node no longer recognizes.
+    ///
+    /// Flow:
+    /// 1. `buildNativeOrderAction` produces the canonical snake_case action JSON
+    ///    string (`{"type":"submit_order","order":{...}}`), field order matching
+    ///    the server `NativeOrder`.
+    /// 2. `signNativeAction` computes the native EIP-712 digest over the EXACT
+    ///    action bytes (`MetaFluxAction(string action,uint64 nonce)` struct hash,
+    ///    5-field domain) and signs it.
+    /// 3. The action string is POSTed VERBATIM inside `{action, nonce, signature}`
+    ///    — the server recovers the signer over the raw `action` bytes, so the
+    ///    signed bytes and the sent bytes are identical.
+    ///
+    /// `order.owner` MUST equal the signing wallet's address; we recover the
+    /// signer locally and reject a mismatch before hitting the network (the
+    /// server enforces the same).
+    ///
+    /// `nonce` is the per-owner replay nonce bound into the digest. Defaults to
+    /// `Date.now()` (unix-ms) — supply an explicit monotonically-increasing
+    /// value for back-to-back submissions in the same millisecond.
+    ///
+    /// `chainId` defaults to the MTF-native chain id (998), independent of the
+    /// legacy `ClientOpts.chainId` (which is the wrong domain for this path).
+    async submitOrderNative(order, opts = {}) {
+        if (this.privateKey === undefined) {
+            throw new Error('submitOrderNative requires a privateKey in ClientOpts (this Client is read-only)');
+        }
+        const nonce = opts.nonce ?? nextNonce();
+        const actionJson = buildNativeOrderAction(order);
+        const signed = await signNativeAction(this.privateKey, actionJson, nonce, opts.chainId);
+        // Local guard: the recovered signer must equal the claimed owner. The
+        // server enforces this too (401 on mismatch), but failing here saves a
+        // round-trip and surfaces a key/owner mismatch with a clear message.
+        const signer = await recoverNativeSigner(signed, opts.chainId);
+        if (signer.toLowerCase() !== order.owner.toLowerCase()) {
+            throw new Error(`order.owner ${order.owner} != recovered signer ${signer}`);
+        }
+        return httpRequest(this.baseUrl, '/exchange', {
+            method: 'POST',
+            rawJson: nativeRequestBody(signed),
+            bearer: this.jwt,
+        });
+    }
+    /// Cancel an order via the MTF-native signed-action front door
+    /// (`POST /exchange`).
+    ///
+    /// Same envelope + verification model as `submitOrderNative`: the
+    /// `cancel_order` action JSON is built canonically, signed over the EIP-712
+    /// native digest, and POSTed verbatim. The server cancels by `oid`, so
+    /// `cancel.oid` must be set (a `cloid`-only cancel is rejected at lowering).
+    ///
+    /// `cancel.owner` MUST equal the signing wallet; we recover the signer
+    /// locally and reject a mismatch before hitting the network.
+    async cancelOrderNative(cancel, opts = {}) {
+        if (this.privateKey === undefined) {
+            throw new Error('cancelOrderNative requires a privateKey in ClientOpts (this Client is read-only)');
+        }
+        const nonce = opts.nonce ?? nextNonce();
+        const actionJson = buildNativeCancelAction(cancel);
+        const signed = await signNativeAction(this.privateKey, actionJson, nonce, opts.chainId);
+        const signer = await recoverNativeSigner(signed, opts.chainId);
+        if (signer.toLowerCase() !== cancel.owner.toLowerCase()) {
+            throw new Error(`cancel.owner ${cancel.owner} != recovered signer ${signer}`);
+        }
+        return httpRequest(this.baseUrl, '/exchange', {
+            method: 'POST',
+            rawJson: nativeRequestBody(signed),
+            bearer: this.jwt,
+        });
+    }
+    /// Open an MTF-native WebSocket connection to `<baseUrl>/ws`.
+    ///
+    /// Derives the `ws(s)://` URL from the client's `http(s)://` base, mounts the
+    /// `/ws` path (the node's upgrade route), and returns a connected
+    /// [`WsClient`]. Register handlers via `ws.onMessage` and subscribe with
+    /// `ws.subscribe({ type: 'l2Book', coin: 'BTC' })`.
+    async connectWs(config = {}) {
+        const ws = new WsClient(httpToWsUrl(this.baseUrl), config);
+        await ws.connect();
+        return ws;
+    }
+    /// `fetchMarkets` — list of all CCXT-compat market descriptors.
+    /// Unauthenticated.
+    async getMarkets() {
+        return httpRequest(this.baseUrl, '/ccxt/markets');
+    }
+    /// `fetchPositions` for a given account. Authenticated. The CCXT
+    /// surface defines `fetchPositions(symbols?)`; the MTF gateway
+    /// adapter accepts an explicit `account` query parameter so the
+    /// caller can fetch positions for sub-accounts they control.
+    async getPositions(account) {
+        if (!isHexAddress(account)) {
+            throw new RangeError(`getPositions: account must be a 0x-prefixed 20-byte hex string, got '${account}'`);
+        }
+        return httpRequest(this.baseUrl, '/ccxt/positions', {
+            query: { account },
+            bearer: this.jwt,
+        });
+    }
+    /// Internal: set the JWT after a successful `/auth` exchange. Exposed
+    /// so an external auth flow (wallet popup, etc.) can plant a token.
+    setJwt(token) {
+        this.jwt = token;
+    }
+}
+// ============================================================================
+// Encoding helpers — narrow + private
+// ============================================================================
+/// Encode a `Uint8Array` as a base64url string (no padding).
+///
+/// Matches the encoding the gateway's `LoginEnvelope.signature` field
+/// expects (see `metaflux/crates/api-gateway/src/ccxt/auth.rs`). We
+/// avoid Buffer/global polyfills here because the SDK targets both
+/// node and the browser; manual base64 is small and avoids the
+/// dependency.
+function bytesToBase64Url(bytes) {
+    // Build a binary string of the bytes. `String.fromCharCode` is
+    // bounded to ~65k arguments per call — safe for any signature
+    // (65 bytes) or payload (under 1KB).
+    let binary = '';
+    for (const b of bytes)
+        binary += String.fromCharCode(b);
+    const b64 = btoa(binary);
+    return b64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/// Encode a `Uint8Array` as a hex string with optional `0x` prefix.
+function bytesToHex(bytes, prefix = '') {
+    let out = prefix;
+    for (const b of bytes) {
+        out += b.toString(16).padStart(2, '0');
+    }
+    return out;
+}
+/// Derive the WS endpoint URL from the client's HTTP base URL: map the scheme
+/// (`http`→`ws`, `https`→`wss`), strip any trailing slash, and append `/ws`
+/// (the node's upgrade route). A base that is already `ws(s)://` is passed
+/// through (only the `/ws` suffix is ensured).
+function httpToWsUrl(baseUrl) {
+    let url = baseUrl;
+    if (url.startsWith('https://')) {
+        url = `wss://${url.slice('https://'.length)}`;
+    }
+    else if (url.startsWith('http://')) {
+        url = `ws://${url.slice('http://'.length)}`;
+    }
+    if (url.endsWith('/'))
+        url = url.slice(0, -1);
+    return url.endsWith('/ws') ? url : `${url}/ws`;
+}
+/// Validate that a string is a `0x` + 40 hex chars EVM address.
+function isHexAddress(s) {
+    if (s.length !== 42)
+        return false;
+    if (!s.startsWith('0x'))
+        return false;
+    for (let i = 2; i < s.length; i++) {
+        const c = s.charCodeAt(i);
+        const isHex = (c >= 0x30 && c <= 0x39) ||
+            (c >= 0x41 && c <= 0x46) ||
+            (c >= 0x61 && c <= 0x66);
+        if (!isHex)
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,kEAAkE;AAClE,+DAA+D;AAC/D,+DAA+D;AAC/D,uBAAuB;AACvB,EAAE;AACF,kEAAkE;AAClE,kFAAkF;AAElF,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,aAAa,GACd,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,SAAS,EACT,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAiB,MAAM,SAAS,CAAC;AA2BlD,uEAAuE;AACvE,yEAAyE;AACzE,kEAAkE;AAClE,kCAAkC;AAClC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B,qGAAqG;AACrG,qEAAqE;AACrE,8CAA8C;AAC9C,IAAI,oBAA4C,CAAC;AACjD,KAAK,UAAU,cAAc;IAC3B,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACvC,oBAAoB,GAAG,MAAM,SAAS,CACpC,IAAI,WAAW,EAAE,CAAC,MAAM,CACtB,oFAAoF,CACrF,CACF,CAAC;IACJ,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,yEAAyE;AACzE,qEAAqE;AACrE,uEAAuE;AACvE,uCAAuC;AACvC,IAAI,mBAA2C,CAAC;AAChD,KAAK,UAAU,aAAa;IAC1B,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACtC,mBAAmB,GAAG,MAAM,SAAS,CACnC,IAAI,WAAW,EAAE,CAAC,MAAM,CACtB,kEAAkE,CACnE,CACF,CAAC;IACJ,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,8DAA8D;AAC9D,GAAG;AACH,uEAAuE;AACvE,6BAA6B;AAC7B,4FAA4F;AAC5F,KAAK,UAAU,sBAAsB,CAAC,OAAe;IACnD,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAEnE,wCAAwC;IACxC,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACrC,mEAAmE;IACnE,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,+BAA+B;IAEvE,6EAA6E;IAC7E,MAAM,eAAe,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAE3C,yEAAyE;IACzE,+DAA+D;IAC/D,8DAA8D;IAC9D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IACjC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,uDAAuD;AACvD,GAAG;AACH,sBAAsB;AACtB,SAAS;AACT,+DAA+D;AAC/D,yCAAyC;AACzC,OAAO;AACP,GAAG;AACH,oBAAoB;AACpB,SAAS;AACT,0BAA0B;AAC1B,uCAAuC;AACvC,oCAAoC;AACpC,OAAO;AACP,+EAA+E;AAC/E,4EAA4E;AAC5E,4CAA4C;AAC5C,OAAO;AACP,MAAM,OAAO,MAAM;IACA,OAAO,CAAS;IAChB,UAAU,CAAyB;IACnC,OAAO,CAAS;IACjC,mEAAmE;IACnE,2CAA2C;IACnC,GAAG,CAAqB;IAChC,mEAAmE;IAC1D,IAAI,CAAU;IAEvB,YAAY,IAAgB;QAC1B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACnE,MAAM,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,+DAA+D;IAC/D,qDAAqD;IACrD,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;IACvC,CAAC;IAED,kEAAkE;IAClE,oCAAoC;IACpC,GAAG;IACH,iEAAiE;IACjE,qBAAqB;IACrB,GAAG;IACH,sEAAsE;IACtE,oCAAoC;IACpC,gEAAgE;IAChE,2CAA2C;IAC3C,iEAAiE;IACjE,sEAAsE;IACtE,wDAAwD;IACxD,gFAAgF;IAChF,GAAG;IACH,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,KAAK,CAAC,SAAS,CAAC,KAAY;QAC1B,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,GAAG,IAAI,CAAC,EACd,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,UAAU,IAAI,KAAK,EACzB,KAAK,CAAC,OAAO,CACd,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;QACvC,kDAAkD;QAClD,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACnE,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3B,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QAE/C,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;QAEvE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAErD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACxC,CAAC;IAED,6CAA6C;IAC7C,GAAG;IACH,4EAA4E;IAC5E,2EAA2E;IAC3E,sEAAsE;IACtE,oEAAoE;IACpE,2DAA2D;IAC3D,GAAG;IACH,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,iEAAiE;IACjE,kEAAkE;IAClE,sEAAsE;IACtE,KAAK,CAAC,WAAW,CAAC,MAAmB;QACnC,OAAO,WAAW,CAAW,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC;gBACzC,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC;gBAC7C,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;aACxC;YACD,MAAM,EAAE,IAAI,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IAED,+DAA+D;IAC/D,uBAAuB;IACvB,GAAG;IACH,qEAAqE;IACrE,4EAA4E;IAC5E,mEAAmE;IACnE,2CAA2C;IAC3C,GAAG;IACH,SAAS;IACT,6EAA6E;IAC7E,6EAA6E;IAC7E,gCAAgC;IAChC,2EAA2E;IAC3E,8EAA8E;IAC9E,oCAAoC;IACpC,+EAA+E;IAC/E,2EAA2E;IAC3E,qDAAqD;IACrD,GAAG;IACH,yEAAyE;IACzE,wEAAwE;IACxE,8BAA8B;IAC9B,GAAG;IACH,4EAA4E;IAC5E,wEAAwE;IACxE,+DAA+D;IAC/D,GAAG;IACH,2EAA2E;IAC3E,0EAA0E;IAC1E,KAAK,CAAC,iBAAiB,CACrB,KAAkB,EAClB,OAA6C,EAAE;QAE/C,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,IAAI,CAAC,UAAU,EACf,UAAU,EACV,KAAK,EACL,IAAI,CAAC,OAAO,CACb,CAAC;QAEF,sEAAsE;QACtE,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CACb,eAAe,KAAK,CAAC,KAAK,wBAAwB,MAAM,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAoB,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IAED,+DAA+D;IAC/D,uBAAuB;IACvB,GAAG;IACH,kEAAkE;IAClE,4EAA4E;IAC5E,uEAAuE;IACvE,6EAA6E;IAC7E,GAAG;IACH,uEAAuE;IACvE,6DAA6D;IAC7D,KAAK,CAAC,iBAAiB,CACrB,MAAoB,EACpB,OAA6C,EAAE;QAE/C,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,IAAI,CAAC,UAAU,EACf,UAAU,EACV,KAAK,EACL,IAAI,CAAC,OAAO,CACb,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CACb,gBAAgB,MAAM,CAAC,KAAK,wBAAwB,MAAM,EAAE,CAC7D,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAoB,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IAED,8DAA8D;IAC9D,GAAG;IACH,8EAA8E;IAC9E,kEAAkE;IAClE,yEAAyE;IACzE,oDAAoD;IACpD,KAAK,CAAC,SAAS,CAAC,SAA4B,EAAE;QAC5C,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,gEAAgE;IAChE,oBAAoB;IACpB,KAAK,CAAC,UAAU;QACd,OAAO,WAAW,CAAW,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC9D,CAAC;IAED,iEAAiE;IACjE,+DAA+D;IAC/D,gEAAgE;IAChE,6DAA6D;IAC7D,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAClB,wEAAwE,OAAO,GAAG,CACnF,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAAa,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE;YAC9D,KAAK,EAAE,EAAE,OAAO,EAAE;YAClB,MAAM,EAAE,IAAI,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC;IACnB,CAAC;CACF;AAED,+EAA+E;AAC/E,sCAAsC;AACtC,+EAA+E;AAE/E,6DAA6D;AAC7D,GAAG;AACH,sEAAsE;AACtE,oEAAoE;AACpE,mEAAmE;AACnE,+DAA+D;AAC/D,eAAe;AACf,SAAS,gBAAgB,CAAC,KAAiB;IACzC,+DAA+D;IAC/D,8DAA8D;IAC9D,qCAAqC;IACrC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,oEAAoE;AACpE,SAAS,UAAU,CAAC,KAAiB,EAAE,SAAiB,EAAE;IACxD,IAAI,GAAG,GAAG,MAAM,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAC3E,+CAA+C;AAC/C,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,GAAG,GAAG,SAAS,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;IAChD,CAAC;SAAM,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,GAAG,GAAG,QAAQ,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC;AACjD,CAAC;AAED,gEAAgE;AAChE,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,KAAK,GACT,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC;YACxB,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC;YACxB,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,17 @@
+export declare class MetaFluxApiError extends Error {
+    readonly status: number;
+    readonly bodyText: string;
+    constructor(status: number, bodyText: string, message: string);
+}
+export interface HttpRequestInit {
+    method?: 'GET' | 'POST' | 'PUT' | 'DELETE';
+    json?: unknown;
+    bytes?: Uint8Array;
+    rawJson?: string;
+    bearer?: string;
+    headers?: Record<string, string>;
+    query?: Record<string, string>;
+    signal?: AbortSignal;
+}
+export declare function httpRequest<T>(baseUrl: string, path: string, init?: HttpRequestInit): Promise<T>;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAaA,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,MAAM,EAAE,MAAM;aACd,QAAQ,EAAE,MAAM;gBADhB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChC,OAAO,EAAE,MAAM;CAKlB;AAID,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAG3C,IAAI,CAAC,EAAE,OAAO,CAAC;IAIf,KAAK,CAAC,EAAE,UAAU,CAAC;IAOnB,OAAO,CAAC,EAAE,MAAM,CAAC;IAGjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAGjC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAG/B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAUD,wBAAsB,WAAW,CAAC,CAAC,EACjC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,eAAoB,GACzB,OAAO,CAAC,CAAC,CAAC,CAmDZ"}