@suilend/sdk 5.1.0 → 6.0.0

package/lib/index.d.ts

@@ -1,5 +1,6 @@
 export * from "./constants";
 export * from "./initialize";
 export * from "./liquidityMining";
+export * from "./pyth";
 export * from "./transactions";
 export * from "./types";

package/lib/index.js

@@ -1,5 +1,12 @@
 export * from "./constants.js";
 export * from "./initialize.js";
 export * from "./liquidityMining.js";
+// Exported because `createHermesPriceFeedSource` is the migration path off
+// `SuiPriceServiceConnection`: the price-reading half of that class is gone in
+// pyth-sui-js v4, so every caller that passed one to `refreshReservePrice` needs
+// this factory. The `PriceFeedSource` types it produces already reach the root
+// barrel via `utils/simulate`; without this the only thing that can build one
+// was reachable only by deep-importing `@suilend/sdk/lib/pyth`.
+export * from "./pyth.js";
 export * from "./transactions.js";
 export * from "./types.js";

package/lib/initialize.d.ts

@@ -1,10 +1,11 @@
 import { SuiClientTypes } from "@mysten/sui/client";
 import { SuiGrpcClient } from "@mysten/sui/grpc";
-import { SuiPriceServiceConnection } from "@pythnetwork/pyth-sui-js";
 import BigNumber from "bignumber.js";
 import { Reserve } from "../_generated/suilend/reserve/structs";
 import { SuilendClient } from "../client";
 import { ParsedReserve } from "../parsers";
+import * as simulate from "../utils/simulate";
+import { type HermesClientConfig } from "./pyth";
 import { LendingMarketMetadata, StrategyOwnerCap } from "./types";
 export declare const RESERVES_CUSTOM_ORDER: Record<string, string[]>;
 export declare const NORMALIZED_MAYA_COINTYPE: string;
@@ -17,7 +18,7 @@ export declare const NORMALIZED_TREATS_COINTYPE: string;
  * them is a throw, which is the whole reason the flag exists and is exactly
  * what a regression here would silently change.
  */
-export declare const refreshReservesForInitialize: (reserves: Reserve<string>[], pythConnection: SuiPriceServiceConnection, tolerateMissingPriceFeeds?: boolean) => Promise<{
+export declare const refreshReservesForInitialize: (reserves: Reserve<string>[], pythConnection: simulate.PriceFeedSource, tolerateMissingPriceFeeds?: boolean) => Promise<{
     reserves: Reserve<string>[];
     unpricedCoinTypes: string[];
 }>;
@@ -54,19 +55,38 @@ export declare const initializeSuilend: (suiGrpcClient: SuiGrpcClient, suilendCl
      * did.
      *
      * YOU ALSO OWN THE TIMEOUT. The connection this function builds for itself
-     * uses 30s; pyth-sui-js defaults to 5s, so an injected connection
-     * constructed with default options gets a 6x tighter deadline than
-     * initializeSuilend used to guarantee. Nothing here can impose a timeout on
-     * an object it did not construct — set it when you build the connection.
+     * uses `DEFAULT_HERMES_TIMEOUT_MS` (30s); hermes-client defaults to 5s, so
+     * an injected connection constructed with default options gets a 6x tighter
+     * deadline than initializeSuilend guarantees. Nothing here can impose a
+     * timeout on an object it did not construct — set it when you build the
+     * connection. If a timeout (or an access token) is the ONLY reason you were
+     * going to inject, use `pythConnectionConfig` instead and let this function
+     * keep building the connection.
      *
-     * Must be a `SuiPriceServiceConnection` (a subclass is fine, and is how you
-     * add `getLatestPriceFeedsPartial`). Not the structural
-     * `PartialPriceFeedSource` shape: with `tolerateMissingPriceFeeds` off this
-     * connection goes to `refreshReservePrice`, which needs the class's own
+     * Any `PriceFeedSource` — `createHermesPriceFeedSource` builds the default
+     * one, and an injected source is also how you add
+     * `getLatestPriceFeedsPartial`. Must satisfy `PriceFeedSource`, not the
+     * `PartialPriceFeedSource` shape alone: with `tolerateMissingPriceFeeds` off
+     * this connection goes to `refreshReservePrice`, which needs
      * `getLatestPriceFeeds`. The lower-level `refreshReservePriceTolerant` does
-     * accept the structural shape, since it only ever needs the partial fetch.
+     * accept the partial-only shape, since it never needs the other method.
      */
-    pythConnection?: SuiPriceServiceConnection;
+    pythConnection?: simulate.PriceFeedSource;
+    /**
+     * Config for the connection this function builds — the seam for an access
+     * token, which public Hermes is expected to require.
+     *
+     * The narrow alternative to `pythConnection`, and the one to reach for
+     * first: authenticating or re-timing the default connection should not cost
+     * a caller a hand-rolled `PriceFeedSource`, and hand-rolling one is how the
+     * feed-id normalisation and the requested-minus-returned `missing` contract
+     * get reimplemented slightly wrong.
+     *
+     * IGNORED when `pythConnection` is set, on the same grounds as
+     * `fallbackPythEndpoint`: it configures a connection this function no longer
+     * builds.
+     */
+    pythConnectionConfig?: HermesClientConfig;
     /**
      * Let a reserve whose feed no endpoint can serve keep the price already in
      * its on-chain state, instead of failing the whole market. Off by default.
@@ -77,10 +97,18 @@ export declare const initializeSuilend: (suiGrpcClient: SuiGrpcClient, suilendCl
      * reserves is better off pricing the 41 it can than going blind over the 4
      * it cannot.
      *
-     * REQUIRES `pythConnection` to implement `getLatestPriceFeedsPartial` —
-     * throws otherwise, rather than degrading to the identical hard failure
-     * this flag exists to avoid. The connection this function builds for itself
-     * is all-or-nothing, so the flag cannot be used alone.
+     * USABLE ON ITS OWN as of the move to hermes-client. The connection this
+     * function builds now reports per-feed gaps — Hermes' `ignoreInvalidPriceIds`
+     * returns the feeds it can and omits the rest — so this flag no longer needs
+     * a `pythConnection` alongside it. Under pyth-sui-js v2 it did: the stock
+     * `SuiPriceServiceConnection` was all-or-nothing and the flag threw unless
+     * you injected a subclass.
+     *
+     * Still REQUIRES gap reporting from whatever connection is in use, so an
+     * INJECTED `pythConnection` must implement `getLatestPriceFeedsPartial` —
+     * throws otherwise, rather than degrading to the identical hard failure this
+     * flag exists to avoid. `createHermesPriceFeedSource` gives you one; the
+     * check is on capability, not on origin.
      *
      * Callers that enable this MUST read `unpricedCoinTypes` and decide per
      * reserve what a kept price is allowed to mean — nothing here makes that

package/lib/initialize.js

@@ -94,20 +94,22 @@ export const NORMALIZED_TREATS_COINTYPE = normalizeStructTag(TREATS_COINTYPE);
 export const refreshReservesForInitialize = async (reserves, pythConnection, tolerateMissingPriceFeeds) => {
     if (tolerateMissingPriceFeeds) {
         // Tolerance is only expressible over a connection that can report WHICH
-        // feeds it could not serve. A stock SuiPriceServiceConnection cannot: the
-        // method does not exist in pyth-sui-js, so the tolerant path would fall
+        // feeds it could not serve. A plain all-or-nothing source cannot — the
+        // method is not part of `PriceFeedSource` — so the tolerant path would fall
         // back to the all-or-nothing fetch, and Hermes v2 404s the whole batch over
         // one unknown id — the caller would get the same hard failure as before the
         // flag existed, having explicitly asked not to.
         //
         // Rejected here rather than left to degrade quietly, because the pairing is
         // otherwise invisible: nothing in the flag's name or type says it needs a
-        // connection the SDK cannot build for itself. Checked on CAPABILITY, not on
-        // whether a connection was injected — injecting a stock one is equally
-        // useless. Direct callers of refreshReservePriceTolerant keep the strict
+        // capability only some connections have. Checked on CAPABILITY, not on
+        // whether a connection was injected — the source this SDK builds now DOES
+        // report gaps (Hermes' ignoreInvalidPriceIds), so origin says nothing, while
+        // an injected all-or-nothing client is still useless no matter who built it.
+        // Direct callers of refreshReservePriceTolerant keep the strict
         // fallback, which is correct for an endpoint that omits unknown ids.
         if (!simulate.canReportMissingPriceFeeds(pythConnection)) {
-            throw new Error(`tolerateMissingPriceFeeds requires a connection that can report per-feed gaps. The connection in use is all-or-nothing, so an endpoint that rejects the whole batch over one unknown feed would fail initialization regardless of this flag — ${simulate.PARTIAL_FETCH_REQUIRED_HINT}. Note that patching SuiPriceServiceConnection.prototype does NOT satisfy this: it can reroute getLatestPriceFeeds but cannot add a per-feed gap report.`);
+            throw new Error(`tolerateMissingPriceFeeds requires a connection that can report per-feed gaps. The connection in use is all-or-nothing, so an endpoint that rejects the whole batch over one unknown feed would fail initialization regardless of this flag — ${simulate.PARTIAL_FETCH_REQUIRED_HINT}. Note that patching a client prototype does NOT satisfy this: it can reroute getLatestPriceFeeds but cannot add a per-feed gap report.`);
         }
         return simulate.refreshReservePriceTolerant(reserves, pythConnection);
     }
@@ -171,7 +173,7 @@ export const initializeSuilend = async (suiGrpcClient, suilendClient, lendingMar
             reservesWithoutTemporaryPythPriceFeeds.push(reserve);
         }
     }
-    const pythConnection = await resolvePythConnection(options?.pythConnection, fallbackPythEndpoint);
+    const pythConnection = await resolvePythConnection(options?.pythConnection, fallbackPythEndpoint, options?.pythConnectionConfig);
     const [refreshedWithoutTemporary, fabricatedPriceCoinTypes] = await Promise.all([
         refreshReservesForInitialize(reservesWithoutTemporaryPythPriceFeeds, pythConnection, options?.tolerateMissingPriceFeeds),
         priceTemporaryPythFeedReserves(reservesWithTemporaryPythPriceFeeds),

package/lib/pyth.d.ts

@@ -1,4 +1,12 @@
-import { SuiPriceServiceConnection } from "@pythnetwork/pyth-sui-js";
+import { HermesClient, type HermesClientConfig } from "@pythnetwork/hermes-client";
+import type { PartialPriceFeedSource, PriceFeedSource } from "../utils/simulate";
+/**
+ * Re-exported so a caller can configure the connection this module builds
+ * without taking its own dependency on `@pythnetwork/hermes-client` — the point
+ * of `PriceFeedSource` is that consumers need not know which client is behind
+ * it.
+ */
+export type { HermesClientConfig };
 export declare const PRIMARY_PYTH_ENDPOINT = "https://hermes.pyth.network";
 /**
  * Tests if the primary Pyth connection endpoint is working by checking the /live endpoint
@@ -12,17 +20,80 @@ export declare const testPrimaryPythConnection: () => Promise<boolean>;
  */
 export declare const getWorkingPythEndpoint: (fallbackPythEndpoint?: string) => Promise<string>;
 /**
- * Pick the price connection `initializeSuilend` will use.
+ * The only part of `HermesClient` this module reads prices through.
+ *
+ * Structural for the same reason `PriceFeedSource` is: a real `HermesClient`
+ * satisfies it, and so does a stub — which is what makes the wire-to-`FeedPrice`
+ * mapping below testable without standing up an endpoint.
+ */
+export type HermesPriceReader = Pick<HermesClient, "getLatestPriceUpdates">;
+/**
+ * A `PriceFeedSource` (and `PartialPriceFeedSource`) backed by Hermes.
  *
- * Lives here rather than in initialize.ts for two reasons: it belongs beside
- * getWorkingPythEndpoint, the thing it decides whether to call; and this module
- * imports nothing, so the seam is testable without resolving
- * `@suilend/sui-core` (whose in-repo `exports` points at a .js file that does
- * not exist, making initialize.ts unimportable from source).
+ * `getLatestPriceFeedsPartial` is served by Hermes' own
+ * `ignoreInvalidPriceIds`, which returns the feeds it can and omits the rest —
+ * so gaps are reported by the endpoint rather than inferred from a thrown
+ * batch. `missing` is the requested-minus-returned difference, which is the
+ * contract `refreshReservePriceTolerant` relies on to populate
+ * `unpricedCoinTypes`.
  *
- * Skipping the probe for an injected connection is deliberate, not an
+ * `parsed: true` is required on both calls: without it Hermes returns only the
+ * binary blob and there is no price to read.
+ *
+ * `encoding: "base64"` is the cheap half of a payload regression. v2 read prices
+ * from `/api/latest_price_feeds`, which omitted the update blob entirely; this
+ * endpoint always returns `binary` and offers no way to decline it, so every
+ * price read now downloads a VAA nothing here looks at. base64 is ~1/3 smaller
+ * than the default hex for the same bytes, on a request that runs per lending
+ * market on every refresh.
+ */
+export declare const createHermesPriceFeedSource: (hermesClient: HermesPriceReader) => PriceFeedSource & PartialPriceFeedSource;
+/**
+ * The deadline the connection this module builds gets, set explicitly because
+ * hermes-client defaults to 5s.
+ *
+ * One batch here is every reserve's feed for a lending market, and
+ * `/v2/updates/price/latest` returns a binary blob alongside the parsed prices
+ * whether or not the caller wants one — 5s is not a deadline that request
+ * reliably meets. 30s is what this module guaranteed before the client changed.
+ */
+export declare const DEFAULT_HERMES_TIMEOUT_MS: number;
+/**
+ * The config the SDK's own Hermes connection is built with.
+ *
+ * Split out from `resolvePythConnection` so the DEFAULT is assertable without a
+ * 30-second test: hermes-client keeps `timeout` private, so once a client is
+ * constructed there is nothing left to observe, and a test written against the
+ * built connection can only prove that a config the CALLER passed came through
+ * — never that the default did.
+ *
+ * Exported for the same reason it is useful internally: a caller assembling its
+ * own client (failover, throttling) can start from the SDK's defaults instead of
+ * silently inheriting hermes-client's.
+ */
+export declare const hermesConnectionConfig: (hermesConfig?: HermesClientConfig) => HermesClientConfig;
+/**
+ * Pick the price source `initializeSuilend` will use.
+ *
+ * Lives here rather than in initialize.ts because it belongs beside
+ * getWorkingPythEndpoint, the thing it decides whether to call.
+ *
+ * Skipping the probe for an injected source is deliberate, not an
  * optimisation. getWorkingPythEndpoint fetches hermes.pyth.network/live, which
  * answers for whether Hermes is up — not for whether it still serves the
  * caller's feeds, and not for whether the caller is even pointed at Hermes.
+ *
+ * `hermesConfig` exists so the commonest reason to reach for an injected source
+ * — an access token, since public Hermes is expected to require one — does not
+ * cost the caller a hand-rolled `PriceFeedSource`. It configures only the
+ * connection built here; an injected source is returned untouched, config or
+ * not, because there is nothing left to build.
+ *
+ * Declared as `PriceFeedSource` because that is all an OVERRIDE is known to be.
+ * The source built here is also a `PartialPriceFeedSource`, which is a behaviour
+ * change worth stating: `tolerateMissingPriceFeeds` used to throw on the default
+ * connection, because a stock `SuiPriceServiceConnection` could not report which
+ * feeds it failed to serve. Hermes' `ignoreInvalidPriceIds` can, so the flag now
+ * works without an injected connection.
  */
-export declare const resolvePythConnection: (pythConnectionOverride?: SuiPriceServiceConnection, fallbackPythEndpoint?: string) => Promise<SuiPriceServiceConnection>;
+export declare const resolvePythConnection: (pythConnectionOverride?: PriceFeedSource, fallbackPythEndpoint?: string, hermesConfig?: HermesClientConfig) => Promise<PriceFeedSource>;

package/lib/pyth.js

@@ -1,20 +1,34 @@
-import { SuiPriceServiceConnection } from "@pythnetwork/pyth-sui-js";
+import { HermesClient, } from "@pythnetwork/hermes-client";
+import { normalizeFeedId } from "../utils/feedId.js";
 export const PRIMARY_PYTH_ENDPOINT = "https://hermes.pyth.network";
+// Concurrent callers (e.g. one initializeSuilend per lending market) share a
+// single in-flight /live probe. The entry is dropped once it settles, so
+// sequential callers still probe fresh and failover behavior is unchanged.
+let _testPrimaryPythConnectionPromise = null;
 /**
  * Tests if the primary Pyth connection endpoint is working by checking the /live endpoint
  * @returns true if the connection is working, false otherwise
  */
-export const testPrimaryPythConnection = async () => {
-    try {
-        const res = await fetch(`${PRIMARY_PYTH_ENDPOINT}/live`, {
-            signal: AbortSignal.timeout(5 * 1000), // 5 second timeout
-        });
-        return res.ok;
-    }
-    catch (err) {
-        console.warn(`[testPrimaryPythConnection] Pyth connection test failed for ${PRIMARY_PYTH_ENDPOINT}:`, err);
-        return false;
+export const testPrimaryPythConnection = () => {
+    if (_testPrimaryPythConnectionPromise) {
+        return _testPrimaryPythConnectionPromise;
     }
+    const promise = (async () => {
+        try {
+            const res = await fetch(`${PRIMARY_PYTH_ENDPOINT}/live`, {
+                signal: AbortSignal.timeout(5 * 1000), // 5 second timeout
+            });
+            return res.ok;
+        }
+        catch (err) {
+            console.warn(`[testPrimaryPythConnection] Pyth connection test failed for ${PRIMARY_PYTH_ENDPOINT}:`, err);
+            return false;
+        }
+    })().finally(() => {
+        _testPrimaryPythConnectionPromise = null;
+    });
+    _testPrimaryPythConnectionPromise = promise;
+    return promise;
 };
 /**
  * Gets a working Pyth connection endpoint, trying primary first, then fallback if provided
@@ -39,25 +53,119 @@ export const getWorkingPythEndpoint = async (fallbackPythEndpoint) => {
     }
 };
 /**
- * Pick the price connection `initializeSuilend` will use.
+ * Hermes' wire price -> a number.
+ *
+ * `price` is an integer STRING and `expo` a negative exponent, so the value is
+ * `price * 10 ** expo`. This is what v2's `getPriceAsNumberUnchecked()` did
+ * internally; doing it here keeps the conversion in one place now that the
+ * client no longer offers it.
+ */
+const toPriceNumber = (price) => Number(price.price) * 10 ** price.expo;
+/**
+ * A `PriceFeedSource` (and `PartialPriceFeedSource`) backed by Hermes.
  *
- * Lives here rather than in initialize.ts for two reasons: it belongs beside
- * getWorkingPythEndpoint, the thing it decides whether to call; and this module
- * imports nothing, so the seam is testable without resolving
- * `@suilend/sui-core` (whose in-repo `exports` points at a .js file that does
- * not exist, making initialize.ts unimportable from source).
+ * `getLatestPriceFeedsPartial` is served by Hermes' own
+ * `ignoreInvalidPriceIds`, which returns the feeds it can and omits the rest —
+ * so gaps are reported by the endpoint rather than inferred from a thrown
+ * batch. `missing` is the requested-minus-returned difference, which is the
+ * contract `refreshReservePriceTolerant` relies on to populate
+ * `unpricedCoinTypes`.
+ *
+ * `parsed: true` is required on both calls: without it Hermes returns only the
+ * binary blob and there is no price to read.
+ *
+ * `encoding: "base64"` is the cheap half of a payload regression. v2 read prices
+ * from `/api/latest_price_feeds`, which omitted the update blob entirely; this
+ * endpoint always returns `binary` and offers no way to decline it, so every
+ * price read now downloads a VAA nothing here looks at. base64 is ~1/3 smaller
+ * than the default hex for the same bytes, on a request that runs per lending
+ * market on every refresh.
+ */
+export const createHermesPriceFeedSource = (hermesClient) => {
+    const fetchFeeds = async (ids, ignoreInvalidPriceIds) => {
+        const update = await hermesClient.getLatestPriceUpdates(ids, {
+            parsed: true,
+            encoding: "base64",
+            ignoreInvalidPriceIds,
+        });
+        return (update.parsed ?? []).map((parsed) => ({
+            id: parsed.id,
+            price: toPriceNumber(parsed.price),
+            emaPrice: toPriceNumber(parsed.ema_price),
+            publishTimeS: parsed.price.publish_time,
+        }));
+    };
+    return {
+        // All-or-nothing, matching the previous client: an unknown id fails the
+        // whole batch rather than being silently dropped, so a caller that did not
+        // ask for tolerance cannot end up pricing off a partial response.
+        getLatestPriceFeeds: (ids) => fetchFeeds(ids, false),
+        getLatestPriceFeedsPartial: async (ids) => {
+            const feeds = await fetchFeeds(ids, true);
+            const served = new Set(feeds.map((feed) => normalizeFeedId(feed.id)));
+            const missing = ids.filter((id) => !served.has(normalizeFeedId(id)));
+            return { feeds, missing };
+        },
+    };
+};
+/**
+ * The deadline the connection this module builds gets, set explicitly because
+ * hermes-client defaults to 5s.
  *
- * Skipping the probe for an injected connection is deliberate, not an
+ * One batch here is every reserve's feed for a lending market, and
+ * `/v2/updates/price/latest` returns a binary blob alongside the parsed prices
+ * whether or not the caller wants one — 5s is not a deadline that request
+ * reliably meets. 30s is what this module guaranteed before the client changed.
+ */
+export const DEFAULT_HERMES_TIMEOUT_MS = 30 * 1000;
+/**
+ * The config the SDK's own Hermes connection is built with.
+ *
+ * Split out from `resolvePythConnection` so the DEFAULT is assertable without a
+ * 30-second test: hermes-client keeps `timeout` private, so once a client is
+ * constructed there is nothing left to observe, and a test written against the
+ * built connection can only prove that a config the CALLER passed came through
+ * — never that the default did.
+ *
+ * Exported for the same reason it is useful internally: a caller assembling its
+ * own client (failover, throttling) can start from the SDK's defaults instead of
+ * silently inheriting hermes-client's.
+ */
+export const hermesConnectionConfig = (hermesConfig) => ({
+    ...hermesConfig,
+    // `??`, not a spread default: `{ timeout: someOptionalVar }` is a normal thing
+    // for a caller to pass, and letting an explicit `undefined` through would
+    // quietly hand back hermes-client's 5s.
+    timeout: hermesConfig?.timeout ?? DEFAULT_HERMES_TIMEOUT_MS,
+});
+/**
+ * Pick the price source `initializeSuilend` will use.
+ *
+ * Lives here rather than in initialize.ts because it belongs beside
+ * getWorkingPythEndpoint, the thing it decides whether to call.
+ *
+ * Skipping the probe for an injected source is deliberate, not an
  * optimisation. getWorkingPythEndpoint fetches hermes.pyth.network/live, which
  * answers for whether Hermes is up — not for whether it still serves the
  * caller's feeds, and not for whether the caller is even pointed at Hermes.
+ *
+ * `hermesConfig` exists so the commonest reason to reach for an injected source
+ * — an access token, since public Hermes is expected to require one — does not
+ * cost the caller a hand-rolled `PriceFeedSource`. It configures only the
+ * connection built here; an injected source is returned untouched, config or
+ * not, because there is nothing left to build.
+ *
+ * Declared as `PriceFeedSource` because that is all an OVERRIDE is known to be.
+ * The source built here is also a `PartialPriceFeedSource`, which is a behaviour
+ * change worth stating: `tolerateMissingPriceFeeds` used to throw on the default
+ * connection, because a stock `SuiPriceServiceConnection` could not report which
+ * feeds it failed to serve. Hermes' `ignoreInvalidPriceIds` can, so the flag now
+ * works without an injected connection.
  */
-export const resolvePythConnection = async (pythConnectionOverride, fallbackPythEndpoint) => {
+export const resolvePythConnection = async (pythConnectionOverride, fallbackPythEndpoint, hermesConfig) => {
     if (pythConnectionOverride)
         return pythConnectionOverride;
     // Get a working Pyth endpoint (try primary, fallback to fallbackPythEndpoint if provided)
     const pythEndpoint = await getWorkingPythEndpoint(fallbackPythEndpoint);
-    return new SuiPriceServiceConnection(pythEndpoint, {
-        timeout: 30 * 1000,
-    });
+    return createHermesPriceFeedSource(new HermesClient(pythEndpoint, hermesConnectionConfig(hermesConfig)));
 };

package/package.json

@@ -1 +1 @@
-{"name":"@suilend/sdk","version":"5.1.0","private":false,"description":"A TypeScript SDK for interacting with the Suilend program","author":"Suilend","license":"MIT","main":"./index.js","exports":{".":"./index.js","./mmt":"./mmt.js","./strategies":"./strategies.js","./client":"./client.js","./utils":"./utils/index.js","./utils/simulate":"./utils/simulate.js","./utils/obligation":"./utils/obligation.js","./utils/events":"./utils/events.js","./margin":"./margin/index.js","./lib/transactions":"./lib/transactions.js","./lib/strategyOwnerCap":"./lib/strategyOwnerCap.js","./lib/constants":"./lib/constants.js","./lib/types":"./lib/types.js","./lib":"./lib/index.js","./lib/pyth":"./lib/pyth.js","./lib/liquidityMining":"./lib/liquidityMining.js","./lib/initialize":"./lib/initialize.js","./lib/pythAdapter":"./lib/pythAdapter.js","./swap":"./swap/index.js","./swap/transaction":"./swap/transaction.js","./swap/quote":"./swap/quote.js","./parsers/reserve":"./parsers/reserve.js","./parsers/rateLimiter":"./parsers/rateLimiter.js","./parsers":"./parsers/index.js","./parsers/apiReserveAssetDataEvent":"./parsers/apiReserveAssetDataEvent.js","./parsers/obligation":"./parsers/obligation.js","./parsers/lendingMarket":"./parsers/lendingMarket.js","./api":"./api/index.js","./api/events":"./api/events.js","./margin/utils":"./margin/utils/index.js","./margin/margin/market":"./margin/margin/market.js","./margin/margin/version":"./margin/margin/version.js","./margin/margin/position":"./margin/margin/position.js","./margin/margin/router":"./margin/margin/router.js","./margin/margin/admin_cap":"./margin/margin/admin_cap.js","./margin/margin/permissions":"./margin/margin/permissions.js","./_generated/suilend":"./_generated/suilend/index.js","./_generated/_framework/reified":"./_generated/_framework/reified.js","./_generated/_framework/util":"./_generated/_framework/util.js","./_generated/_framework/vector":"./_generated/_framework/vector.js","./_generated/suilend/lending-market-registry/functions":"./_generated/suilend/lending-market-registry/functions.js","./_generated/suilend/obligation/structs":"./_generated/suilend/obligation/structs.js","./_generated/suilend/reserve-config/structs":"./_generated/suilend/reserve-config/structs.js","./_generated/suilend/reserve-config/functions":"./_generated/suilend/reserve-config/functions.js","./_generated/suilend/rate-limiter/structs":"./_generated/suilend/rate-limiter/structs.js","./_generated/suilend/rate-limiter/functions":"./_generated/suilend/rate-limiter/functions.js","./_generated/suilend/cell/structs":"./_generated/suilend/cell/structs.js","./_generated/suilend/liquidity-mining/structs":"./_generated/suilend/liquidity-mining/structs.js","./_generated/suilend/lending-market/structs":"./_generated/suilend/lending-market/structs.js","./_generated/suilend/lending-market/functions":"./_generated/suilend/lending-market/functions.js","./_generated/suilend/decimal/structs":"./_generated/suilend/decimal/structs.js","./_generated/suilend/reserve/structs":"./_generated/suilend/reserve/structs.js","./margin/margin/deps/suilend/lending_market":"./margin/margin/deps/suilend/lending_market.js","./margin/margin/deps/sui/vec_set":"./margin/margin/deps/sui/vec_set.js","./margin/margin/deps/std/type_name":"./margin/margin/deps/std/type_name.js","./_generated/_dependencies/source/0x1":"./_generated/_dependencies/source/0x1/index.js","./_generated/_dependencies/source/0x2":"./_generated/_dependencies/source/0x2/index.js","./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e":"./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/index.js","./_generated/_dependencies/source/0x1/option/structs":"./_generated/_dependencies/source/0x1/option/structs.js","./_generated/_dependencies/source/0x1/ascii/structs":"./_generated/_dependencies/source/0x1/ascii/structs.js","./_generated/_dependencies/source/0x1/type-name/structs":"./_generated/_dependencies/source/0x1/type-name/structs.js","./_generated/_dependencies/source/0x2/balance/structs":"./_generated/_dependencies/source/0x2/balance/structs.js","./_generated/_dependencies/source/0x2/object/structs":"./_generated/_dependencies/source/0x2/object/structs.js","./_generated/_dependencies/source/0x2/object-table/structs":"./_generated/_dependencies/source/0x2/object-table/structs.js","./_generated/_dependencies/source/0x2/bag/structs":"./_generated/_dependencies/source/0x2/bag/structs.js","./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price-identifier/structs":"./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price-identifier/structs.js","./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price-info/structs":"./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price-info/structs.js","./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price/structs":"./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price/structs.js","./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price-feed/structs":"./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price-feed/structs.js","./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/i64/structs":"./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/i64/structs.js"},"types":"./index.d.ts","scripts":{"build":"rm -rf ./dist && bun tsc && node ./fix-esm-imports.js","typecheck":"tsc --noEmit && tsc --noEmit -p tsconfig.test.json","test":"bun test tests/","lint:ci":"bun run typecheck","prettier":"prettier --write src/ tests/","release":"bun run build && bun ./release.js && cd ./dist && npm publish --access public"},"repository":{"type":"git","url":"git+https://github.com/fireflyprotocol/lending-mono.git","directory":"ts/sdks/sdk"},"dependencies":{"@bluefin-exchange/bluefin7k-aggregator-sdk":"^7.3.0","@cetusprotocol/aggregator-sdk":"^1.5.7","@flowx-finance/sdk":"^2.1.0","@pythnetwork/pyth-sui-js":"2.2.0","@suilend/springsui-sdk":"^4.0.0","bignumber.js":"^9.1.2","bn.js":"^5.2.2","crypto-js":"^4.2.0","lodash":"^4.17.21","p-limit":"3.1.0","uuid":"^11.0.3"},"devDependencies":{"@types/bn.js":"^5.2.0","@types/lodash":"^4.17.20","ts-node":"^10.9.2","typescript":"^6.0.3","@tsconfig/recommended":"^1.0.8","@types/node":"^22.9.0"},"peerDependencies":{"@mysten/bcs":"^2.0.5","@mysten/sui":"2.17.0","@suilend/sui-core":"^1.0.0"},"type":"module"}
+{"name":"@suilend/sdk","version":"6.0.0","private":false,"description":"A TypeScript SDK for interacting with the Suilend program","author":"Suilend","license":"MIT","main":"./index.js","exports":{".":"./index.js","./mmt":"./mmt.js","./strategies":"./strategies.js","./client":"./client.js","./utils/feedId":"./utils/feedId.js","./utils":"./utils/index.js","./utils/simulate":"./utils/simulate.js","./utils/obligation":"./utils/obligation.js","./utils/events":"./utils/events.js","./margin":"./margin/index.js","./lib/transactions":"./lib/transactions.js","./lib/strategyOwnerCap":"./lib/strategyOwnerCap.js","./lib/constants":"./lib/constants.js","./lib/types":"./lib/types.js","./lib":"./lib/index.js","./lib/pyth":"./lib/pyth.js","./lib/liquidityMining":"./lib/liquidityMining.js","./lib/initialize":"./lib/initialize.js","./lib/pythAdapter":"./lib/pythAdapter.js","./swap":"./swap/index.js","./swap/transaction":"./swap/transaction.js","./swap/quote":"./swap/quote.js","./parsers/reserve":"./parsers/reserve.js","./parsers/rateLimiter":"./parsers/rateLimiter.js","./parsers":"./parsers/index.js","./parsers/apiReserveAssetDataEvent":"./parsers/apiReserveAssetDataEvent.js","./parsers/obligation":"./parsers/obligation.js","./parsers/lendingMarket":"./parsers/lendingMarket.js","./api":"./api/index.js","./api/events":"./api/events.js","./margin/utils":"./margin/utils/index.js","./margin/margin/market":"./margin/margin/market.js","./margin/margin/version":"./margin/margin/version.js","./margin/margin/position":"./margin/margin/position.js","./margin/margin/router":"./margin/margin/router.js","./margin/margin/admin_cap":"./margin/margin/admin_cap.js","./margin/margin/permissions":"./margin/margin/permissions.js","./_generated/suilend":"./_generated/suilend/index.js","./_generated/_framework/reified":"./_generated/_framework/reified.js","./_generated/_framework/util":"./_generated/_framework/util.js","./_generated/_framework/vector":"./_generated/_framework/vector.js","./_generated/suilend/lending-market-registry/functions":"./_generated/suilend/lending-market-registry/functions.js","./_generated/suilend/obligation/structs":"./_generated/suilend/obligation/structs.js","./_generated/suilend/reserve-config/structs":"./_generated/suilend/reserve-config/structs.js","./_generated/suilend/reserve-config/functions":"./_generated/suilend/reserve-config/functions.js","./_generated/suilend/rate-limiter/structs":"./_generated/suilend/rate-limiter/structs.js","./_generated/suilend/rate-limiter/functions":"./_generated/suilend/rate-limiter/functions.js","./_generated/suilend/cell/structs":"./_generated/suilend/cell/structs.js","./_generated/suilend/liquidity-mining/structs":"./_generated/suilend/liquidity-mining/structs.js","./_generated/suilend/lending-market/structs":"./_generated/suilend/lending-market/structs.js","./_generated/suilend/lending-market/functions":"./_generated/suilend/lending-market/functions.js","./_generated/suilend/decimal/structs":"./_generated/suilend/decimal/structs.js","./_generated/suilend/reserve/structs":"./_generated/suilend/reserve/structs.js","./margin/margin/deps/suilend/lending_market":"./margin/margin/deps/suilend/lending_market.js","./margin/margin/deps/sui/vec_set":"./margin/margin/deps/sui/vec_set.js","./margin/margin/deps/std/type_name":"./margin/margin/deps/std/type_name.js","./_generated/_dependencies/source/0x1":"./_generated/_dependencies/source/0x1/index.js","./_generated/_dependencies/source/0x2":"./_generated/_dependencies/source/0x2/index.js","./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e":"./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/index.js","./_generated/_dependencies/source/0x1/option/structs":"./_generated/_dependencies/source/0x1/option/structs.js","./_generated/_dependencies/source/0x1/ascii/structs":"./_generated/_dependencies/source/0x1/ascii/structs.js","./_generated/_dependencies/source/0x1/type-name/structs":"./_generated/_dependencies/source/0x1/type-name/structs.js","./_generated/_dependencies/source/0x2/balance/structs":"./_generated/_dependencies/source/0x2/balance/structs.js","./_generated/_dependencies/source/0x2/object/structs":"./_generated/_dependencies/source/0x2/object/structs.js","./_generated/_dependencies/source/0x2/object-table/structs":"./_generated/_dependencies/source/0x2/object-table/structs.js","./_generated/_dependencies/source/0x2/bag/structs":"./_generated/_dependencies/source/0x2/bag/structs.js","./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price-identifier/structs":"./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price-identifier/structs.js","./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price-info/structs":"./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price-info/structs.js","./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price/structs":"./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price/structs.js","./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price-feed/structs":"./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/price-feed/structs.js","./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/i64/structs":"./_generated/_dependencies/source/0x8d97f1cd6ac663735be08d1d2b6d02a159e711586461306ce60a2b7a6a565a9e/i64/structs.js"},"types":"./index.d.ts","scripts":{"build":"rm -rf ./dist && bun tsc && node ./fix-esm-imports.js","typecheck":"tsc --noEmit && tsc --noEmit -p tsconfig.test.json","test":"bun test tests/","lint:ci":"bun run typecheck","prettier":"prettier --write src/ tests/","release":"bun run build && bun ./release.js && cd ./dist && npm publish --access public"},"repository":{"type":"git","url":"git+https://github.com/fireflyprotocol/lending-mono.git","directory":"ts/sdks/sdk"},"dependencies":{"@bluefin-exchange/bluefin7k-aggregator-sdk":"^7.3.0","@cetusprotocol/aggregator-sdk":"^1.5.7","@flowx-finance/sdk":"^2.1.0","@pythnetwork/hermes-client":"3.1.0","@pythnetwork/pyth-sui-js":"4.0.0","@suilend/springsui-sdk":"^4.0.0","bignumber.js":"^9.1.2","bn.js":"^5.2.2","crypto-js":"^4.2.0","lodash":"^4.17.21","p-limit":"3.1.0","uuid":"^11.0.3"},"devDependencies":{"@types/bn.js":"^5.2.0","@types/lodash":"^4.17.20","ts-node":"^10.9.2","typescript":"^6.0.3","@tsconfig/recommended":"^1.0.8","@types/node":"^22.9.0"},"peerDependencies":{"@mysten/bcs":"^2.0.5","@mysten/sui":"2.17.0","@suilend/sui-core":"^1.0.0"},"type":"module"}

package/strategies.d.ts

@@ -1,4 +1,4 @@
-import { AggregatorClient as CetusSdk } from "@cetusprotocol/aggregator-sdk";
+import type { AggregatorClient as CetusSdk } from "@cetusprotocol/aggregator-sdk";
 import { SuiClientTypes } from "@mysten/sui/client";
 import { SuiGrpcClient } from "@mysten/sui/grpc";
 import { Transaction, TransactionArgument, TransactionObjectInput } from "@mysten/sui/transactions";

package/swap/quote.d.ts

@@ -1,6 +1,6 @@
-import { QuoteResponse as Bluefin7kQuote } from "@bluefin-exchange/bluefin7k-aggregator-sdk";
-import { RouterDataV3 as CetusQuote, AggregatorClient as CetusSdk } from "@cetusprotocol/aggregator-sdk";
-import { AggregatorQuoter as FlowXAggregatorQuoter, GetRoutesResult as FlowXGetRoutesResult } from "@flowx-finance/sdk";
+import type { QuoteResponse as Bluefin7kQuote } from "@bluefin-exchange/bluefin7k-aggregator-sdk";
+import type { RouterDataV3 as CetusQuote, AggregatorClient as CetusSdk } from "@cetusprotocol/aggregator-sdk";
+import type { AggregatorQuoter as FlowXAggregatorQuoter, GetRoutesResult as FlowXGetRoutesResult } from "@flowx-finance/sdk";
 import BigNumber from "bignumber.js";
 import { Token } from "@suilend/sui-core";
 export declare enum QuoteProvider {

package/swap/quote.js

@@ -1,4 +1,3 @@
-import { getQuote as getBluefin7kQuoteOriginal, } from "@bluefin-exchange/bluefin7k-aggregator-sdk";
 import { normalizeStructTag } from "@mysten/sui/utils";
 import BigNumber from "bignumber.js";
 import BN from "bn.js";
@@ -110,6 +109,25 @@ const getCetusQuote = async (sdk, tokenIn, tokenOut, amountIn) => {
     return standardizedQuote;
 };
 const getBluefin7kQuote = async (tokenIn, tokenOut, amountIn) => {
+    // Imported here rather than at module scope so 7k is loaded only when a 7k
+    // quote is actually requested, keeping a browser-only router out of every
+    // consumer's module-init graph.
+    //
+    // 7k is NOT a CJS package — 7.3.0 is `type: module` and ships no CJS build at
+    // all — so this is not the ERR_REQUIRE_ESM_RACE_CONDITION fix that the flowx
+    // deferral in transaction.ts is. Spelled out because the reverse mistake is the
+    // easy one: noticing 7k is ESM and concluding this can go back to a static
+    // import.
+    //
+    // What it does still protect is a CONSUMER's graph. 7k peer-depends on
+    // `@pythnetwork/pyth-sui-js ^2.1.0`, and pyth v2 is CJS and `require()`s
+    // ESM-only `@mysten/sui`. `ts/sdks` pins pyth to 4.0.0 so that peer never
+    // resolves to v2 here — but that resolution does not travel with the published
+    // package, so an installer without the same override gets CJS pyth v2 under 7k.
+    // Deferred, it is never in their init graph either way. (The peer range is
+    // stale regardless: 7k 7.3.0 calls pyth v4's `SuiPythClient` API and would not
+    // work against v2.)
+    const { getQuote: getBluefin7kQuoteOriginal } = await import("@bluefin-exchange/bluefin7k-aggregator-sdk");
     const quote = await getBluefin7kQuoteOriginal({
         tokenIn: tokenIn.coinType,
         tokenOut: tokenOut.coinType,

package/swap/transaction.d.ts

@@ -1,5 +1,5 @@
-import { AggregatorClient as CetusSdk } from "@cetusprotocol/aggregator-sdk";
-import { AggregatorQuoter as FlowXAggregatorQuoter } from "@flowx-finance/sdk";
+import type { AggregatorClient as CetusSdk } from "@cetusprotocol/aggregator-sdk";
+import type { AggregatorQuoter as FlowXAggregatorQuoter } from "@flowx-finance/sdk";
 import { SuiGrpcClient } from "@mysten/sui/grpc";
 import { Transaction, TransactionObjectArgument } from "@mysten/sui/transactions";
 import { QuoteProvider, StandardizedQuote } from "./quote";

package/swap/transaction.js

@@ -1,5 +1,3 @@
-import { BluefinXTx, buildTx as buildBluefin7kTransaction, } from "@bluefin-exchange/bluefin7k-aggregator-sdk";
-import { Coin as FlowXCoin, Commission as FlowXCommission, CommissionType as FlowXCommissionType, TradeBuilder as FlowXTradeBuilder, } from "@flowx-finance/sdk";
 import { getSpendableCoin } from "@suilend/sui-core";
 import { QuoteProvider } from "./quote.js";
 const getSwapTransactionWrapper = async (provider, getSwapTransaction) => {
@@ -35,6 +33,12 @@ export const getSwapTransaction = async (suiGrpcClient, address, quote, slippage
     }
     else if (quote.provider === QuoteProvider.BLUEFIN7K) {
         return getSwapTransactionWrapper(QuoteProvider.BLUEFIN7K, async () => {
+            // Deferred for the reason spelled out at the 7k import in quote.ts: 7k is
+            // itself ESM, so this is about init cost plus a consumer's exposure to the
+            // CJS pyth v2 that 7k's stale peer range still permits — not the
+            // require(ESM) fix that the flowx branch below is. `BluefinXTx` comes from
+            // the same import because the `instanceof` below needs the real class.
+            const { BluefinXTx, buildTx: buildBluefin7kTransaction } = await import("@bluefin-exchange/bluefin7k-aggregator-sdk");
             const { tx: transaction2, coinOut } = await buildBluefin7kTransaction({
                 quoteResponse: quote.quote,
                 accountAddress: address,
@@ -62,9 +66,25 @@ export const getSwapTransaction = async (suiGrpcClient, address, quote, slippage
     }
     else if (quote.provider === QuoteProvider.FLOWX) {
         return getSwapTransactionWrapper(QuoteProvider.FLOWX, async () => {
-            if (!coinIn) {
-                coinIn = await getSpendableCoin(suiGrpcClient, address, quote.in.coinType, quote.quote.amountIn.toString(), transaction);
-            }
+            // flowx is the genuine CJS offender of the three routers: 2.1.0 publishes
+            // no `exports` map, so Node ESM resolves its `main` — `index.cjs.js` —
+            // which `require()`s ESM-only `@mysten/sui/{bcs,grpc,transactions,utils}`.
+            // At module scope that lands in every consumer's init graph and Node
+            // rejects it mid-evaluation (ERR_REQUIRE_ESM_RACE_CONDITION).
+            //
+            // Loaded alongside the coin fetch rather than after it, so pulling in a
+            // large CJS bundle overlaps a network round-trip instead of following it.
+            // Via Promise.all rather than a bare `const p = import(...)` above the
+            // fetch: a floating promise becomes an unhandled rejection if the coin
+            // fetch throws first, and module evaluation is exactly the thing here that
+            // can throw.
+            const [flowx, spendableCoinIn] = await Promise.all([
+                import("@flowx-finance/sdk"),
+                coinIn ??
+                    getSpendableCoin(suiGrpcClient, address, quote.in.coinType, quote.quote.amountIn.toString(), transaction),
+            ]);
+            coinIn = spendableCoinIn;
+            const { Coin: FlowXCoin, Commission: FlowXCommission, CommissionType: FlowXCommissionType, TradeBuilder: FlowXTradeBuilder, } = flowx;
             const trade = new FlowXTradeBuilder("mainnet", quote.quote.routes)
                 .slippage((slippagePercent / 100) * 1e6)
                 .commission(new FlowXCommission(partnerIdMap[QuoteProvider.FLOWX], new FlowXCoin(quote.out.coinType), FlowXCommissionType.PERCENTAGE, 0, false))

package/utils/feedId.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Feed ids compared in one encoding.
+ *
+ * `toHex` emits bare lowercase hex while Hermes' `parsed[].id` has been seen
+ * both ways; comparing raw would miss every feed over a `0x` prefix and price
+ * nothing, which is a silent failure rather than a loud one.
+ *
+ * Its own module, importing nothing, because the two places that must agree on
+ * this — the reserve-pricing code in `simulate.ts` and the Hermes source in
+ * `lib/pyth.ts` — cannot share a definition otherwise. `lib/pyth.ts` is reached
+ * from `initializeSuilend` and is deliberately near-leaf, so importing
+ * `simulate.ts` for one four-line function would drag `@mysten/sui/bcs`, the
+ * generated structs and the `utils` barrel in behind it. The previous answer was
+ * a second copy in `lib/pyth.ts`; two definitions of the encoding that decides
+ * whether a feed matches is exactly the thing that goes wrong quietly.
+ */
+export declare const normalizeFeedId: (id: string) => string;

package/utils/feedId.js

@@ -0,0 +1,17 @@
+/**
+ * Feed ids compared in one encoding.
+ *
+ * `toHex` emits bare lowercase hex while Hermes' `parsed[].id` has been seen
+ * both ways; comparing raw would miss every feed over a `0x` prefix and price
+ * nothing, which is a silent failure rather than a loud one.
+ *
+ * Its own module, importing nothing, because the two places that must agree on
+ * this — the reserve-pricing code in `simulate.ts` and the Hermes source in
+ * `lib/pyth.ts` — cannot share a definition otherwise. `lib/pyth.ts` is reached
+ * from `initializeSuilend` and is deliberately near-leaf, so importing
+ * `simulate.ts` for one four-line function would drag `@mysten/sui/bcs`, the
+ * generated structs and the `utils` barrel in behind it. The previous answer was
+ * a second copy in `lib/pyth.ts`; two definitions of the encoding that decides
+ * whether a feed matches is exactly the thing that goes wrong quietly.
+ */
+export const normalizeFeedId = (id) => id.replace(/^0x/i, "").toLowerCase();

package/utils/simulate.d.ts

@@ -1,9 +1,9 @@
-import { PriceFeed, SuiPriceServiceConnection } from "@pythnetwork/pyth-sui-js";
 import BigNumber from "bignumber.js";
 import { Decimal } from "../_generated/suilend/decimal/structs";
 import { PoolRewardManager, UserRewardManager } from "../_generated/suilend/liquidity-mining/structs";
 import { Borrow, Obligation } from "../_generated/suilend/obligation/structs";
 import { Reserve } from "../_generated/suilend/reserve/structs";
+import { normalizeFeedId } from "./feedId";
 /**
  * @deprecated since version 1.0.8. Use `calculateUtilizationPercent` instead.
  */
@@ -21,7 +21,30 @@ export declare const calculateSupplyApr: (reserve: Reserve<string>) => BigNumber
 export declare const calculateDepositAprPercent: (reserve: Reserve<string>) => BigNumber;
 export declare const compoundReserveInterest: (reserve: Reserve<string>, nowS: number) => Reserve<string>;
 export declare const updatePoolRewardsManager: (manager: PoolRewardManager, nowMs: number) => PoolRewardManager;
-export declare const refreshReservePrice: (reserves: Reserve<string>[], pythConnection: SuiPriceServiceConnection) => Promise<Reserve<string>[]>;
+/**
+ * A price read from Pyth, normalised away from any one client's response shape.
+ *
+ * Hermes returns `{ price: "12345", expo: -8, publish_time }`; v2's `PriceFeed`
+ * exposed `getPriceAsNumberUnchecked()` instead. Normalising at the boundary
+ * keeps `price * 10 ** expo` in exactly one place, and keeps the reserve-pricing
+ * code below independent of which client fetched it.
+ */
+export interface FeedPrice {
+    id: string;
+    price: number;
+    emaPrice: number;
+    publishTimeS: number;
+}
+/**
+ * A source of latest prices. Structural on purpose: any object with this method
+ * qualifies, so a caller can inject its own client (authenticated, failover,
+ * throttled) without this package depending on it.
+ */
+export interface PriceFeedSource {
+    getLatestPriceFeeds(ids: string[]): Promise<FeedPrice[] | undefined>;
+}
+export { normalizeFeedId };
+export declare const refreshReservePrice: (reserves: Reserve<string>[], pythConnection: PriceFeedSource) => Promise<Reserve<string>[]>;
 /**
  * A connection that can report which of the requested feeds it could not serve,
  * instead of failing the whole batch. Structural on purpose: any object with
@@ -30,7 +53,7 @@ export declare const refreshReservePrice: (reserves: Reserve<string>[], pythConn
  */
 export interface PartialPriceFeedSource {
     getLatestPriceFeedsPartial(ids: string[]): Promise<{
-        feeds: PriceFeed[];
+        feeds: FeedPrice[];
         missing: string[];
     }>;
 }
@@ -41,7 +64,7 @@ export interface PartialPriceFeedSource {
  * internal branch: `tolerateMissingPriceFeeds` is meaningless without it (see
  * `refreshReservesForInitialize`, which refuses the combination).
  */
-export declare function canReportMissingPriceFeeds(connection: SuiPriceServiceConnection | PartialPriceFeedSource): connection is PartialPriceFeedSource;
+export declare function canReportMissingPriceFeeds(connection: PriceFeedSource | PartialPriceFeedSource): connection is PartialPriceFeedSource;
 /**
  * The remedy both gap-tolerance failure paths point at.
  *
@@ -77,7 +100,7 @@ export declare const PARTIAL_FETCH_REQUIRED_HINT = "inject a connection implemen
  *    at literal zero. `unpricedCoinTypes` is the only thing distinguishing a
  *    real price from a kept one; it is not optional to read.
  * 2. Tolerance requires a connection that can REPORT a gap
- *    (`getLatestPriceFeedsPartial`). Handed a stock `SuiPriceServiceConnection`,
+ *    (`getLatestPriceFeedsPartial`). Handed a plain all-or-nothing source,
  *    this falls back to the all-or-nothing fetch, which Hermes v2 answers with
  *    a 404 for the whole batch when any id is unknown — so there is nothing
  *    left to be tolerant with. That fetch is kept because it is correct for an
@@ -85,7 +108,7 @@ export declare const PARTIAL_FETCH_REQUIRED_HINT = "inject a connection implemen
  *    failure is re-thrown with attribution rather than surfacing as a bare HTTP
  *    error. `refreshReservesForInitialize` rejects the combination outright.
  */
-export declare const refreshReservePriceTolerant: (reserves: Reserve<string>[], pythConnection: SuiPriceServiceConnection | PartialPriceFeedSource) => Promise<{
+export declare const refreshReservePriceTolerant: (reserves: Reserve<string>[], pythConnection: PriceFeedSource | PartialPriceFeedSource) => Promise<{
     reserves: Reserve<string>[];
     unpricedCoinTypes: string[];
 }>;

package/utils/simulate.js

@@ -6,6 +6,7 @@ import { Decimal } from "../_generated/suilend/decimal/structs.js";
 import { UserReward, } from "../_generated/suilend/liquidity-mining/structs.js";
 import { WAD } from "../lib/constants.js";
 import { linearlyInterpolate } from "../utils/index.js";
+import { normalizeFeedId } from "./feedId.js";
 /**
  * @deprecated since version 1.0.8. Use `calculateUtilizationPercent` instead.
  */
@@ -118,8 +119,12 @@ export const updatePoolRewardsManager = (manager, nowMs) => {
     updatedManager.lastUpdateTimeMs = BigInt(nowMs);
     return updatedManager;
 };
+// Re-exported, not redefined: it was part of this module's public surface before
+// it moved to ./feedId, and every consumer that normalizes a feed id to compare
+// it against `unpricedCoinTypes` imports it from here.
+export { normalizeFeedId };
 /** The Pyth feed id a reserve is priced from, in the response's `id` encoding. */
-const reserveFeedId = (reserve) => toHex(new Uint8Array(reserve.priceIdentifier.bytes));
+const reserveFeedId = (reserve) => normalizeFeedId(toHex(new Uint8Array(reserve.priceIdentifier.bytes)));
 /**
  * Index feeds by id for O(1) lookup, keeping the FIRST entry per id.
  *
@@ -130,9 +135,11 @@ const reserveFeedId = (reserve) => toHex(new Uint8Array(reserve.priceIdentifier.
  */
 const indexFeedsById = (priceFeeds) => {
     const byId = new Map();
-    for (const feed of priceFeeds)
-        if (!byId.has(feed.id))
-            byId.set(feed.id, feed);
+    for (const feed of priceFeeds) {
+        const id = normalizeFeedId(feed.id);
+        if (!byId.has(id))
+            byId.set(id, feed);
+    }
     return byId;
 };
 /**
@@ -148,9 +155,9 @@ const indexFeedsById = (priceFeeds) => {
  */
 const withFeedPrice = (reserve, priceFeed) => {
     const newReserve = { ...reserve };
-    newReserve.price = stringToDecimal(priceFeed.getPriceUnchecked().getPriceAsNumberUnchecked().toString());
-    newReserve.smoothedPrice = stringToDecimal(priceFeed.getEmaPriceUnchecked().getPriceAsNumberUnchecked().toString());
-    newReserve.priceLastUpdateTimestampS = BigInt(priceFeed.getPriceUnchecked().publishTime);
+    newReserve.price = stringToDecimal(priceFeed.price.toString());
+    newReserve.smoothedPrice = stringToDecimal(priceFeed.emaPrice.toString());
+    newReserve.priceLastUpdateTimestampS = BigInt(priceFeed.publishTimeS);
     return newReserve;
 };
 export const refreshReservePrice = async (reserves, pythConnection) => {
@@ -220,7 +227,7 @@ export const PARTIAL_FETCH_REQUIRED_HINT = "inject a connection implementing get
  *    at literal zero. `unpricedCoinTypes` is the only thing distinguishing a
  *    real price from a kept one; it is not optional to read.
  * 2. Tolerance requires a connection that can REPORT a gap
- *    (`getLatestPriceFeedsPartial`). Handed a stock `SuiPriceServiceConnection`,
+ *    (`getLatestPriceFeedsPartial`). Handed a plain all-or-nothing source,
  *    this falls back to the all-or-nothing fetch, which Hermes v2 answers with
  *    a 404 for the whole batch when any id is unknown — so there is nothing
  *    left to be tolerant with. That fetch is kept because it is correct for an