@taphubhq/sdk-core 0.22.1 → 0.22.3

package/dist/index.cjs

@@ -533,7 +533,10 @@ var BidModule = class {
         price2: input.price2,
         coefficient: input.coefficient,
         amount: input.amount,
-        slippage: input.slippage
+        slippage: input.slippage,
+        // QA-only late-bid passthrough (bid-260610). Omitted entirely when absent
+        // so no `bidToken: null` is sent. sdk-react sets it from localStorage.
+        ...input.bidToken ? { bidToken: input.bidToken } : {}
       }
     };
     try {
@@ -1047,7 +1050,7 @@ function createMqttTransport(endpoint, opts = {}) {
   const candleSubscriptions = /* @__PURE__ */ new Map();
   const statsSubscriptions = /* @__PURE__ */ new Map();
   const walletSubscriptions = /* @__PURE__ */ new Map();
-  const { onLifecycle } = opts;
+  const { onLifecycle, auth } = opts;
   let connectStartedAt = 0;
   function fireLifecycle(event) {
     if (!onLifecycle) return;
@@ -1063,7 +1066,12 @@ function createMqttTransport(endpoint, opts = {}) {
       clean: true,
       reconnectPeriod: 2e3,
       connectTimeout: 1e4,
-      keepalive: 6
+      keepalive: 6,
+      // Forwarded once at connect time (no refresh on reconnect). When `auth`
+      // is absent both are `undefined`, which mqtt.js omits from the CONNECT
+      // packet — i.e. an anonymous connection, identical to prior behaviour.
+      username: auth?.username,
+      password: auth?.password
     });
     let lastPingreqAt = 0;
     client.on("packetsend", (packet) => {
@@ -1422,7 +1430,8 @@ var RealtimeModule = class extends import_eventemitter33.default {
     } else {
       this.#agencyId = mqttEndpointOrOptions.agencyId;
       this.#transport = mqttEndpointOrOptions.transport ?? createMqttTransport(mqttEndpointOrOptions.mqttEndpoint, {
-        onLifecycle: mqttEndpointOrOptions.onMqttLifecycle
+        onLifecycle: mqttEndpointOrOptions.onMqttLifecycle,
+        auth: mqttEndpointOrOptions.mqttAuth
       });
     }
   }
@@ -2765,6 +2774,7 @@ var TaphubClient = class {
     this.realtime = config.mqttEndpoint ? new RealtimeModule({
       mqttEndpoint: config.mqttEndpoint,
       agencyId: this.agencyId,
+      mqttAuth: config.mqttAuth,
       onMqttLifecycle: createMqttProbe(this.network)
     }) : void 0;
     attachConnectionProbe(this.network);

package/dist/index.d.mts

@@ -12,10 +12,24 @@ declare const TaphubStorage: {
     sessionStorage(): TaphubStorageAdapter;
 };
 
+/**
+ * MQTT broker credentials. Forwarded verbatim to the MQTT connection when
+ * `mqttEndpoint` is set, and ignored otherwise. Read once when the connection
+ * first opens (no refresh on reconnect).
+ *
+ * For brokers using JWT-in-username auth (the TapHub/EMQX default), pass the
+ * session token as `username` and leave `password` empty (`''`).
+ */
+interface MqttAuthConfig {
+    username?: string;
+    password?: string;
+}
 interface TaphubClientConfig {
     agencyId: string;
     endpoint: string;
     mqttEndpoint?: string;
+    /** Optional MQTT broker credentials. Ignored when `mqttEndpoint` is absent. */
+    mqttAuth?: MqttAuthConfig;
     storage?: TaphubStorageAdapter;
     fetch?: typeof globalThis.fetch;
 }
@@ -229,6 +243,13 @@ interface PlaceBidInput {
     coefficient: string;
     amount: string;
     slippage: number;
+    /**
+     * QA-only late-bid token (dev/local). Forwarded verbatim to grid-api, which
+     * honours it only when it matches its env secret on a dev/local stage. sdk-core
+     * is environment-agnostic and never reads it from storage — the browser-only
+     * sdk-react reads `localStorage["bidToken"]` and injects it. Omit when absent.
+     */
+    bidToken?: string;
 }
 
 declare const isPending: (bid: Bid) => boolean;
@@ -850,6 +871,15 @@ interface RealtimeModuleOptions {
      * the caller (tenant-scoping mirror of the GQL resolver).
      */
     agencyId?: string;
+    /**
+     * Optional MQTT broker credentials, forwarded to the transport connection
+     * (read once at connect time, no refresh). Ignored when an explicit
+     * `transport` override is supplied.
+     */
+    mqttAuth?: {
+        username?: string;
+        password?: string;
+    };
     /** @internal For testing only */
     transport?: MqttTransport;
     /**
@@ -1123,4 +1153,4 @@ declare function adaptiveSimpson(f: (x: number) => number, a: number, b: number,
 declare function calculateProbWin(time1: number, time2: number, _price1: number, price2: number, creationTime: number, currentPrice: number, volatility: number): number;
 declare function calculateProbWin_v2(time1: number, time2: number, _price1: number, price2: number, creationTime: number, currentPrice: number, volatility: number): number;
 
-export { type AgencyPairFilter, AgencyPairModule, type AgencyPairStats, type AgencyPairStatus, AuthModule, type BackendHealth, type Bid, BidModule, type BidStatus, type CancelBidResult, type Candle, type Constraints, type Currency, GameChannel, type GameConfig, type GridConfig, type LeaderboardEntry, LeaderboardModule, type LeaderboardPeriod, type LeaderboardSortBy, LocaleModule, type LocaleRefreshResult, type LocaleResponse, type LocaleTranslations, type LoginResult, type Me, type MqttAcceptedBid, type MqttAgencyPairStatsEvent, type MqttBalanceEvent, type MqttBidAcceptedEvent, type MqttBidLostEvent, type MqttBidWonEvent, type MqttCandleEvent, type MqttConfigEvent, type MqttIdealConfigEvent, type MqttWalletBalanceEvent, type MyRank, type NetworkLevel, type NetworkQuality, NetworkQualityMonitor, type Pair, type PairInfo, PairModule, type PlaceBidInput, type RankBoard, type RankEntry, type RankPeriod, type RankSort, RealtimeModule, type Sample, type SampleReason, type SignalSource, type SortDir, TaphubAuthError, TaphubClient, type TaphubClientConfig, TaphubError, TaphubEventBus, type TaphubEventMap, TaphubNetworkError, TaphubServerError, TaphubSlippageError, TaphubStorage, type TaphubStorageAdapter, TaphubValidationError, type User, UserModule, type UserPnL, type UserPnLPeriod, type Wallet as UserWallet, type Wallet$1 as Wallet, type WalletBalanceReason, WalletChannel, adaptiveSimpson, autoDetectStorage, calculateProbWin, calculateProbWin_v2, errorFunction, isCancelled, isLoss, isPending, isTerminal, isWin, normalCDF, normalPDF };
+export { type AgencyPairFilter, AgencyPairModule, type AgencyPairStats, type AgencyPairStatus, AuthModule, type BackendHealth, type Bid, BidModule, type BidStatus, type CancelBidResult, type Candle, type Constraints, type Currency, GameChannel, type GameConfig, type GridConfig, type LeaderboardEntry, LeaderboardModule, type LeaderboardPeriod, type LeaderboardSortBy, LocaleModule, type LocaleRefreshResult, type LocaleResponse, type LocaleTranslations, type LoginResult, type Me, type MqttAcceptedBid, type MqttAgencyPairStatsEvent, type MqttAuthConfig, type MqttBalanceEvent, type MqttBidAcceptedEvent, type MqttBidLostEvent, type MqttBidWonEvent, type MqttCandleEvent, type MqttConfigEvent, type MqttIdealConfigEvent, type MqttWalletBalanceEvent, type MyRank, type NetworkLevel, type NetworkQuality, NetworkQualityMonitor, type Pair, type PairInfo, PairModule, type PlaceBidInput, type RankBoard, type RankEntry, type RankPeriod, type RankSort, RealtimeModule, type Sample, type SampleReason, type SignalSource, type SortDir, TaphubAuthError, TaphubClient, type TaphubClientConfig, TaphubError, TaphubEventBus, type TaphubEventMap, TaphubNetworkError, TaphubServerError, TaphubSlippageError, TaphubStorage, type TaphubStorageAdapter, TaphubValidationError, type User, UserModule, type UserPnL, type UserPnLPeriod, type Wallet as UserWallet, type Wallet$1 as Wallet, type WalletBalanceReason, WalletChannel, adaptiveSimpson, autoDetectStorage, calculateProbWin, calculateProbWin_v2, errorFunction, isCancelled, isLoss, isPending, isTerminal, isWin, normalCDF, normalPDF };

package/dist/index.d.ts

@@ -12,10 +12,24 @@ declare const TaphubStorage: {
     sessionStorage(): TaphubStorageAdapter;
 };
 
+/**
+ * MQTT broker credentials. Forwarded verbatim to the MQTT connection when
+ * `mqttEndpoint` is set, and ignored otherwise. Read once when the connection
+ * first opens (no refresh on reconnect).
+ *
+ * For brokers using JWT-in-username auth (the TapHub/EMQX default), pass the
+ * session token as `username` and leave `password` empty (`''`).
+ */
+interface MqttAuthConfig {
+    username?: string;
+    password?: string;
+}
 interface TaphubClientConfig {
     agencyId: string;
     endpoint: string;
     mqttEndpoint?: string;
+    /** Optional MQTT broker credentials. Ignored when `mqttEndpoint` is absent. */
+    mqttAuth?: MqttAuthConfig;
     storage?: TaphubStorageAdapter;
     fetch?: typeof globalThis.fetch;
 }
@@ -229,6 +243,13 @@ interface PlaceBidInput {
     coefficient: string;
     amount: string;
     slippage: number;
+    /**
+     * QA-only late-bid token (dev/local). Forwarded verbatim to grid-api, which
+     * honours it only when it matches its env secret on a dev/local stage. sdk-core
+     * is environment-agnostic and never reads it from storage — the browser-only
+     * sdk-react reads `localStorage["bidToken"]` and injects it. Omit when absent.
+     */
+    bidToken?: string;
 }
 
 declare const isPending: (bid: Bid) => boolean;
@@ -850,6 +871,15 @@ interface RealtimeModuleOptions {
      * the caller (tenant-scoping mirror of the GQL resolver).
      */
     agencyId?: string;
+    /**
+     * Optional MQTT broker credentials, forwarded to the transport connection
+     * (read once at connect time, no refresh). Ignored when an explicit
+     * `transport` override is supplied.
+     */
+    mqttAuth?: {
+        username?: string;
+        password?: string;
+    };
     /** @internal For testing only */
     transport?: MqttTransport;
     /**
@@ -1123,4 +1153,4 @@ declare function adaptiveSimpson(f: (x: number) => number, a: number, b: number,
 declare function calculateProbWin(time1: number, time2: number, _price1: number, price2: number, creationTime: number, currentPrice: number, volatility: number): number;
 declare function calculateProbWin_v2(time1: number, time2: number, _price1: number, price2: number, creationTime: number, currentPrice: number, volatility: number): number;
 
-export { type AgencyPairFilter, AgencyPairModule, type AgencyPairStats, type AgencyPairStatus, AuthModule, type BackendHealth, type Bid, BidModule, type BidStatus, type CancelBidResult, type Candle, type Constraints, type Currency, GameChannel, type GameConfig, type GridConfig, type LeaderboardEntry, LeaderboardModule, type LeaderboardPeriod, type LeaderboardSortBy, LocaleModule, type LocaleRefreshResult, type LocaleResponse, type LocaleTranslations, type LoginResult, type Me, type MqttAcceptedBid, type MqttAgencyPairStatsEvent, type MqttBalanceEvent, type MqttBidAcceptedEvent, type MqttBidLostEvent, type MqttBidWonEvent, type MqttCandleEvent, type MqttConfigEvent, type MqttIdealConfigEvent, type MqttWalletBalanceEvent, type MyRank, type NetworkLevel, type NetworkQuality, NetworkQualityMonitor, type Pair, type PairInfo, PairModule, type PlaceBidInput, type RankBoard, type RankEntry, type RankPeriod, type RankSort, RealtimeModule, type Sample, type SampleReason, type SignalSource, type SortDir, TaphubAuthError, TaphubClient, type TaphubClientConfig, TaphubError, TaphubEventBus, type TaphubEventMap, TaphubNetworkError, TaphubServerError, TaphubSlippageError, TaphubStorage, type TaphubStorageAdapter, TaphubValidationError, type User, UserModule, type UserPnL, type UserPnLPeriod, type Wallet as UserWallet, type Wallet$1 as Wallet, type WalletBalanceReason, WalletChannel, adaptiveSimpson, autoDetectStorage, calculateProbWin, calculateProbWin_v2, errorFunction, isCancelled, isLoss, isPending, isTerminal, isWin, normalCDF, normalPDF };
+export { type AgencyPairFilter, AgencyPairModule, type AgencyPairStats, type AgencyPairStatus, AuthModule, type BackendHealth, type Bid, BidModule, type BidStatus, type CancelBidResult, type Candle, type Constraints, type Currency, GameChannel, type GameConfig, type GridConfig, type LeaderboardEntry, LeaderboardModule, type LeaderboardPeriod, type LeaderboardSortBy, LocaleModule, type LocaleRefreshResult, type LocaleResponse, type LocaleTranslations, type LoginResult, type Me, type MqttAcceptedBid, type MqttAgencyPairStatsEvent, type MqttAuthConfig, type MqttBalanceEvent, type MqttBidAcceptedEvent, type MqttBidLostEvent, type MqttBidWonEvent, type MqttCandleEvent, type MqttConfigEvent, type MqttIdealConfigEvent, type MqttWalletBalanceEvent, type MyRank, type NetworkLevel, type NetworkQuality, NetworkQualityMonitor, type Pair, type PairInfo, PairModule, type PlaceBidInput, type RankBoard, type RankEntry, type RankPeriod, type RankSort, RealtimeModule, type Sample, type SampleReason, type SignalSource, type SortDir, TaphubAuthError, TaphubClient, type TaphubClientConfig, TaphubError, TaphubEventBus, type TaphubEventMap, TaphubNetworkError, TaphubServerError, TaphubSlippageError, TaphubStorage, type TaphubStorageAdapter, TaphubValidationError, type User, UserModule, type UserPnL, type UserPnLPeriod, type Wallet as UserWallet, type Wallet$1 as Wallet, type WalletBalanceReason, WalletChannel, adaptiveSimpson, autoDetectStorage, calculateProbWin, calculateProbWin_v2, errorFunction, isCancelled, isLoss, isPending, isTerminal, isWin, normalCDF, normalPDF };

package/dist/index.js

@@ -468,7 +468,10 @@ var BidModule = class {
         price2: input.price2,
         coefficient: input.coefficient,
         amount: input.amount,
-        slippage: input.slippage
+        slippage: input.slippage,
+        // QA-only late-bid passthrough (bid-260610). Omitted entirely when absent
+        // so no `bidToken: null` is sent. sdk-react sets it from localStorage.
+        ...input.bidToken ? { bidToken: input.bidToken } : {}
       }
     };
     try {
@@ -982,7 +985,7 @@ function createMqttTransport(endpoint, opts = {}) {
   const candleSubscriptions = /* @__PURE__ */ new Map();
   const statsSubscriptions = /* @__PURE__ */ new Map();
   const walletSubscriptions = /* @__PURE__ */ new Map();
-  const { onLifecycle } = opts;
+  const { onLifecycle, auth } = opts;
   let connectStartedAt = 0;
   function fireLifecycle(event) {
     if (!onLifecycle) return;
@@ -998,7 +1001,12 @@ function createMqttTransport(endpoint, opts = {}) {
       clean: true,
       reconnectPeriod: 2e3,
       connectTimeout: 1e4,
-      keepalive: 6
+      keepalive: 6,
+      // Forwarded once at connect time (no refresh on reconnect). When `auth`
+      // is absent both are `undefined`, which mqtt.js omits from the CONNECT
+      // packet — i.e. an anonymous connection, identical to prior behaviour.
+      username: auth?.username,
+      password: auth?.password
     });
     let lastPingreqAt = 0;
     client.on("packetsend", (packet) => {
@@ -1357,7 +1365,8 @@ var RealtimeModule = class extends EventEmitter3 {
     } else {
       this.#agencyId = mqttEndpointOrOptions.agencyId;
       this.#transport = mqttEndpointOrOptions.transport ?? createMqttTransport(mqttEndpointOrOptions.mqttEndpoint, {
-        onLifecycle: mqttEndpointOrOptions.onMqttLifecycle
+        onLifecycle: mqttEndpointOrOptions.onMqttLifecycle,
+        auth: mqttEndpointOrOptions.mqttAuth
       });
     }
   }
@@ -2700,6 +2709,7 @@ var TaphubClient = class {
     this.realtime = config.mqttEndpoint ? new RealtimeModule({
       mqttEndpoint: config.mqttEndpoint,
       agencyId: this.agencyId,
+      mqttAuth: config.mqttAuth,
       onMqttLifecycle: createMqttProbe(this.network)
     }) : void 0;
     attachConnectionProbe(this.network);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taphubhq/sdk-core",
-  "version": "0.22.1",
+  "version": "0.22.3",
   "description": "Core SDK for building on the TabHub platform",
   "license": "MIT",
   "main": "./dist/index.cjs",