@totalis/hip4-client 0.65.2 → 0.74.0

package/CHANGELOG.md

@@ -3,6 +3,394 @@
 `@totalis/hip4-client` follows [semantic versioning](https://semver.org).
 The contract version the generated types come from is `sdkVersion` in `./version`.
 
+## 0.74.0
+
+Execution admission (TT-1355) and a follower's copied Combos (TT-2486,
+TT-2488). Generated from contract `203.0.0-execution-admission`. Additive:
+0.73 code runs unchanged.
+
+### Added
+
+- `ErrorCode` adds `EXECUTION_BACKLOG_FULL` (503, `BACKOFF`): `acceptQuote`
+  is refused when the venue's on-chain queue could not send the trade before
+  the quote expires. Nothing was created and the maker was not asked. Retry
+  after `Retry-After` with a fresh quote.
+- `listComboCopies` (`GET /v1/me/combo-copies`): your Combo copy journal,
+  newest first, optionally for one `leader`. Each row is a followed trader's
+  Combo opening (`ENTRY`) or cash-out (`EXIT`), its legs, and what became of
+  your copy: `PENDING`, `COPIED` with your copied ticket's `position_id`,
+  `SKIPPED` with a `reason`, or `FAILED`.
+
+### Changed
+
+- `operationErrors` lists `CONTRACT_UNAVAILABLE` (503) for the trader
+  profile, follow, copy settings, copy journal and copy allocation
+  operations: a deployment with copy trading switched off answers them with
+  it. Reading, switching off and revoking copy agents, and reading the copy
+  budget, stay open.
+
+## 0.73.0
+
+A follower's copied trades, what copying each trader came to, and which of
+their fills copies made (TT-2486); the chain-agent registry's `SET_AGENT`
+Combo copy agents and the Combo copy budget (TT-2487).
+Generated from contract `201.0.0-copy-budget`. Additive.
+
+### Added
+
+- `listCopyTrades` (`GET /v1/me/copy-trades`): your copy journal, newest
+  first, optionally for one `leader`. Each row is a followed trader's trade
+  and what became of your copy: `PENDING`, `COPIED`, `PARTIAL`, `SKIPPED`
+  with a `reason`, or `FAILED`.
+- `getCopySummary` (`GET /v1/me/copy-summary`): per trader, copies filled,
+  skipped and failed, USDC `bought` and `sold`, copied shares still `held`,
+  and whether those give the P&L (`complete`).
+- `listCopiedFills` (`GET /v1/me/copy-fills?tids=&from=&through=`): which
+  of up to 100 of your fills, by Hyperliquid trade ID, in a span of at most
+  31 days, copies made, with the copied trade and its `leader`.
+- `HyperevmKeeperOperationKind` (internal registry): `SET_AGENT`, a relayed
+  vault agent grant or revoke.
+- Combo copy agents: `requestComboCopyAgent`, `grantComboCopyAgent`,
+  `confirmComboCopyAgent`, `revokeComboCopyAgent` and
+  `switchOffComboCopyAgent` (`/v1/me/copy-agents/combo*`). The key Combo
+  auto-copy signs with, the account's vault `AgentGrant` for it relayed to
+  `setAgent`, its confirmation once on chain, an on-chain revoke, and
+  switching it off. `getCopyAgents` adds `combo`.
+- `getCopyBudget` and `setCopyAllocation` (`/v1/me/copy-budget`): the Combo
+  copy allocation and the budget the sweeper leaves in the vault for Combo
+  copying.
+
+## 0.72.0
+
+Emoji reactions on market comments (TT-2399), and a named refusal for a
+core copy key on another account (TT-2485).
+Generated from contract `196.0.0-copy-engine`. Additive.
+
+### Added
+
+- Comment reactions: `reactComment` and `unreactComment`
+  (`PUT` and `DELETE /v1/comments/{comment_id}/reactions/{reaction}`) give and
+  take back one of `fire`, `laugh`, `mind_blown`, `cry`, `rocket` and `skull`.
+  Every comment gains `reactions`: each reaction it has, with its `count` and
+  whether you gave it (`reacted`).
+
+### Changed
+
+- `requestCoreCopyAgent` (`POST /v1/me/copy-agents/core`) can answer
+  409 `STATE_CONFLICT` while a key is active on another account: switch it
+  off first, or renew for the active key's account.
+
+## 0.71.0
+
+Server-held copy agents for core auto-copy (TT-2484), users, cash-outs and
+open positions in partner reports (TT-2541), and public trader profiles that
+start on (TT-2539).
+Generated from contract `194.0.0-partner-users`. Additive, except that public
+profiles now start on.
+
+### Added
+
+- Partner reports (TT-2541): `report()` (`GET /v1/partner/report`) adds
+  `users` (wallets you admitted and the accounts they created, all time),
+  `open_tickets` (your users' open positions and their stake), and per day
+  and in total `cashouts`, `cashout_volume`, `active_traders` and
+  `new_accounts`. In `totals`, `active_traders` counts each account once over
+  the range.
+
+- Copy agents (TT-2484): `requestCoreCopyAgent`
+  (`POST /v1/me/copy-agents/core`) makes the key core auto-copy signs with,
+  which the account approves with `approveAgent` in the named slot
+  `TotalisCopy`; `confirmCoreCopyAgent` (`POST .../core/confirm`) activates it
+  once Hyperliquid lists it; `getCopyAgents` (`GET /v1/me/copy-agents`) reads
+  the active key and any replacement waiting for approval; and
+  `switchOffCoreCopyAgent` (`DELETE /v1/me/copy-agents/core`) stops copying at
+  once. New schemas `CopyAgent` and `CopyAgents`.
+
+### Changed
+
+- Public trader profiles start on (TT-2539). A new account's profile is public
+  as soon as it exists, and every existing profile that never used the switch
+  was turned on, so `getIdentity` (`GET /v1/me`) reports `public_profile: true` for them, including
+  accounts without a username. `setPublicProfile` (`PUT /v1/me/public-profile`)
+  still turns it off, now also before the account has a username, and turning
+  it on still needs one. While on, a profile links the account wallet to its
+  username in `GET /v1/traders/{username}` and the leaderboards.
+
+## 0.70.0
+
+A named refusal for a sign-in without Google, email or X (TT-2519, TT-2537).
+Generated from contract `192.0.0-sign-in-required`. Additive.
+
+### Added
+
+- `bindEmbeddedWallet` refuses a new account whose Privy user has no Google,
+  email or X login linked, such as one signed in only with an external
+  wallet, with the new error code
+  `SIGN_IN_REQUIRED` (403) instead of `ACCESS_REQUIRED` (TT-2519). An X
+  login now opens an account like Google or email (TT-2537).
+  On `bindEmbeddedWallet`, `ACCESS_REQUIRED` now means only that no invite has
+  been redeemed; wallet sign-in keeps its meaning.
+
+## 0.69.0
+
+Vault run-off (TT-2260), X pictures on the leaderboard (TT-2318), a gas
+ceiling on sponsored work (TT-2338), no generated usernames (TT-2299),
+perp marks for price charts (TT-2335), live
+games on sports cards and detail (TT-2306), Combos of at most 5 legs, and
+games in play on browse, live scores over the market stream and score
+timelines (TT-2371), market comments (TT-2297), their moderation (TT-2410),
+holder badges and the holders filter (TT-2411), up to three suggested Combos,
+held chances (TT-2366), partner reports (TT-2420), market list cursors
+that continue across catalog generations (TT-2425), a named refusal for an
+accept beside another in flight (TT-2259), the account's X picture from the
+server (TT-2443), sponsored deposits from 0.10 USDC (TT-2444), the
+funded-accept wording that gives a transfer sent before `fund_by` two more
+seconds to land (TT-2259), the net stake on entry RFQs (TT-2419) and the
+discovery cards of suggested Combo legs (TT-2475), opt-in public
+trader profiles (TT-2481) and follows with copy settings (TT-2482).
+Generated from contract `191.0.0-follows`.
+Breaking only for callers of the removed operation and RFQs of more than 5
+legs.
+
+### Added
+
+- Follows and copy settings (TT-2482): `followTrader` and `unfollowTrader`
+  (`PUT` and `DELETE /v1/me/follows/{username}`) follow a public trader and
+  set the follow's core and Combo copy settings, `listFollows`
+  (`GET /v1/me/follows`) lists them, and `getCopySettings` and
+  `setCopySettings` (`/v1/me/copy-settings`) read and set the pause and daily
+  caps across every follow. `getTrader` gains `followers` and `following`, and
+  the new error codes `FOLLOW_SELF` and `FOLLOW_LIMIT_REACHED` refuse following
+  oneself or more than 100 traders.
+- Public trader profiles (TT-2481): `setPublicProfile`
+  (`PUT /v1/me/public-profile`) turns the account's profile on or off, and
+  `getTrader`, `listTraderTrades`, `listTraderPositions` and `getTraderPnl`
+  (`GET /v1/traders/{username}` and its `trades`, `positions` and `pnl`) read
+  an opted-in trader. `VenueIdentity` and both leaderboards' traders gain
+  `public_profile`, and the new error code `USERNAME_REQUIRED` refuses turning
+  a profile on without a username.
+- `SuggestedCombo` (`GET /v1/suggested-combo`) requires `cards`: the browse
+  contract 4 discovery card each leg was picked from, in leg order, as read
+  when it was quoted, so a client can draw a leg that is not on its own page
+  (TT-2475).
+- `EntryRfq` (`GET /v1/rfqs`, `GET /v1/rfqs/{rfq_id}`, snapshot `open_rfqs`)
+  and the entry `RFQ_CREATED` payload carry `net_stake`, what the vault backs
+  if a quote is accepted: `stake - floor(stake * taker_fee_bps / 10000)` with
+  the vault's current taker fee, the one every quote must carry. `stake` stays
+  gross and quotes still sign it. Absent while the server does not know the
+  taker fee (TT-2419).
+- `DashboardQuotes` (`GET /v1/makers/{maker_id}/quotes`) requires `net_stake`
+  on each quote: its stake less its own taker fee (TT-2419).
+- `VenueIdentity` (`GET /v1/me`) and comment authors carry `picture_url`, the
+  profile picture of the X account linked to the account's Privy login, the
+  same one the leaderboards show; absent when the server has none.
+  `POST /v1/me/picture` (`refreshPicture`) reads it from Privy now; call it
+  right after the user links or unlinks X.
+- `ErrorCode` adds `ACCEPTANCE_IN_FLIGHT` (409, `REFRESH`), and Accept quote
+  lists it: an account has one entry acceptance in flight at a time, so
+  accepting an entry quote while another awaits its maker or its trade is
+  refused with it instead of `STATE_CONFLICT`. Nothing was created; accept a
+  fresh quote once that acceptance's operation ends.
+- Wallet challenges accept the exact bundled iOS origin `capacitor://localhost`
+  when it is registered in the service allowlist. Existing HTTPS origins and
+  wallet-signature requirements are unchanged.
+- Partner reports (TT-2420): `createPartnerServer(...).report({ from, to })`
+  (`GET /v1/partner/report`) returns your partner's fees per UTC day, your
+  terms and, all time, what you earned, were paid and are owed, with every
+  payout and its transfers. It takes your server key; omit the range for the
+  30 days through today.
+- `signInWithWallet({ serverKey })`: a partner signing its users in from its
+  own servers passes its `tpk_v1_` server key, and the sign-in is rate limited per
+  partner instead of per source address (TT-2424). The origin must be one the
+  partner owns; the wallet still signs. Server-side only.
+- Vault v1.1 maker withdrawals: `controllerTransactions(...).withdraw(amount,
+  to)` builds `withdrawMaker`, which pays at once. `requestWithdraw`,
+  `executeWithdraw` and `cancelWithdraw` stay for a vault v1 maker.
+- Market comments (TT-2297): `GET /v1/comments` lists a question's or
+  standalone outcome's top-level comments, most liked or newest first;
+  `GET /v1/comments/{comment_id}/replies` lists a comment's replies. A
+  signed-in session posts, edits, deletes, likes and unlikes with
+  `POST /v1/comments`, `PUT` and `DELETE /v1/comments/{comment_id}` and
+  `PUT` and `DELETE /v1/comments/{comment_id}/like`.
+- Comment moderation (TT-2410): a comment carries `removed` when a moderator
+  deleted it, and a comment page carries `pinned`, the comment a moderator
+  pinned to lead the thread, on a thread's first page only. A muted account's
+  posts and edits are 403 `FORBIDDEN`.
+- Comment holders (TT-2411): a comment carries `holder` when its author holds
+  an open Combo on its market now, null when that is not known.
+  `GET /v1/comments?filter=holders` lists only holders' comments.
+- `GET /v1/suggested-combo` carries `combos`, up to three suggested Combos
+  that share no outcome. `combo`, the first of `combos` or null, is
+  deprecated and goes in the next release.
+- `signRunOffClaim({ vaultAddress })` signs an Exit of the account's free cash
+  in a vault running off to the account's own wallet; send it with
+  `sendRunOffClaim` (`POST /v1/me/run-off-claims`) and follow its operation
+  with `waitForOperation`.
+- Balances carry `run_off`: cash per vault running off, never part of
+  `amount`, with any claim still in flight as `claim`. A position carries
+  `vault_address` and `cashout_available`; a core exit carries
+  `vault_address`.
+- A cash-out of a position on a vault running off returns `STATE_CONFLICT`.
+- Both leaderboards' traders carry `picture_url`, the profile picture of the X
+  account linked to the trader's Privy login, which clients show in place of
+  the generated avatar.
+- `ErrorCode` adds `GAS_PRICE_ABOVE_CEILING` (503, `BACKOFF`): creating a
+  Combo RFQ or a cash-out is refused while HyperEVM gas is above the venue's
+  sponsorship ceiling. Retry after `Retry-After`.
+- An RFQ's `status` adds `DECLINED` and the stream adds `RFQ_DECLINED`, for
+  RFQs makers declined before declines were removed (TT-2431); no RFQ ends
+  `DECLINED` now. `watchQuotes` empties and `onRfq` drops the RFQ on it, as on
+  `RFQ_CANCELLED`.
+- Types for `GET /v1/perp-marks`, a perp's mark price on a fixed step recorded
+  from Totalis's own Hyperliquid node, and for the market stream's opt-in
+  `publication` frame (`publication_freshness`), which proves how far a
+  socket is current.
+- Browse and search cards carry `estimated_live_until` (TT-2306): for a
+  scheduled single sports contest, its start plus its league's reviewed usual
+  game length, so `[date_at, estimated_live_until)` is when it is in play. A
+  live game feed holds it open while the game runs long and closes it when
+  the game ends. Null otherwise; never a trading cutoff. Every default browse
+  page, All included, lists cards inside that window first.
+- `Question` carries the same `estimated_live_until` for its markets, and
+  `MarketDetail` read with `contract=4` carries its matchup's: its question's,
+  else its game's, else its own.
+- Both also carry `scoreboard`: the matchup's game as the live game feed last
+  read it (`status`, `period`, `clock`, `outs`, both `competitors` with
+  `score` in the matchup's own order, `last_play`, `refreshed_at`), or null
+  when the feed does not cover the game or its reading is stale. Display only,
+  never a result.
+- Browse queries take `live: true` (TT-2371): only the cards in play at
+  publication, for All or one `category`, in either browse sort; a
+  subcategory, frequency or date window beside it returns `INVALID_QUERY`.
+  Results echo it as `filters.live`. Every browse and search result carries
+  `live`: the publication's count of cards in play, `total` and per
+  configured category (`categories`, `{ value, count }`), each equal to that
+  live page's total, or `UNAVAILABLE` when the result's other counts are.
+- The market stream's opt-in `scoreboards` frame (TT-2371): a subscription
+  that sets `scoreboards` gets every selected game's `scoreboard`, complete
+  after each snapshot and then on every change.
+- Types for `GET /v1/markets/{outcome_id}/score-timeline` and
+  `GET /v1/questions/{question_id}/score-timeline` (TT-2371): the matchup's
+  score after each scoring play at the feed's wall-clock time, for a game
+  chart, or a null `timeline`.
+
+### Changed
+
+- `openPosition` (`POST /v1/rfqs`) takes 1 to 5 legs, down from 50; more
+  return `400 INVALID_REQUEST`.
+- A reference's `chance` holds the newest evidence, an execution or a book
+  midpoint at most 0.10 wide, kept inside the live book (TT-2366): on a book
+  at most 0.50 wide at any age, and on a wider, one-sided or empty book for
+  20 minutes. `chance_basis` adds `HELD` for a chance that is neither the
+  current midpoint nor the unclamped last trade. A one-sided or empty book is
+  published `AVAILABLE` while it has a `mark` (a chance, else the best bid,
+  else 0 with asks only), with the missing side null and `value` equal to
+  `mark`. Reference closes record the shown chance of
+  any basis, not only midpoints.
+- `GET /v1/markets` no longer returns `409 STALE_CURSOR`: its cursor continues
+  by native ID when a new catalog generation is published, so pages can name
+  different `catalog_generation` values (TT-2425).
+- `createDeposit` (`POST /v1/me/deposits`) admits deposits from 0.10 USDC
+  (`100000`) from a Totalis embedded wallet, down from 1 USDC (TT-2444). Any
+  other wallet still moves at least 1 USDC, its floor for every sponsored way
+  out.
+
+### Removed
+
+- `generateUsername` (`POST /v1/me/username`) and its `GeneratedUsername`
+  schema. An app picks the username and sets it with `setUsername`
+  (`PUT /v1/me/username`).
+
+### Fixed
+
+- `sendAcceptance` no longer discards a bridge because a resent accept was
+  refused (TT-2259). When the first send's answer was lost and the SDK's resend
+  under the same `Idempotency-Key` met a 401 (the session lapsed), the bridge
+  was recorded `DISCARDED` and never sent, even though the venue held the first
+  send's acceptance. A resend's refusal now ends the attempt only if the venue
+  checks it after replaying a stored acceptance (a gone price, a bad
+  signature). A resend's 401, 403 or 429, which the venue checks before the
+  replay, and a 5xx or an answer cut off mid-body, no longer discard the
+  bridge: the SDK reads the acceptance and moves the bridge from what it finds. If that read fails too, the bridge stays unsent
+  and the error reports `mayStillRun: true`, with `resend()`, so recovery
+  decides after re-authenticating.
+- `recoverAcceptance` works without a signer: it checks the record's account
+  against the session's wallet (`GET /v1/me`), since recovery signs nothing.
+
+## 0.68.0
+
+Every expired operation names why (TT-2315). Generated from contract
+`165.0.0-expiry-reasons`; an older venue simply sends fewer reasons.
+
+### Changed
+
+- `OperationFailureReason` adds `DEADLINE_BEFORE_CLAIM`,
+  `AUTHORIZATION_TOO_CLOSE`, `SIGNER_QUOTE_LIFE`, `SIMULATION_REVERTED`,
+  `QUARANTINE_EXPIRED` and `ATTESTATION_EXPIRED`. An operation's
+  `failure_reason`, and `OPERATION_UPDATED`'s, can carry any of them on
+  `EXPIRED_UNEXECUTED`.
+- `entryFailure` returns the operation's own reason for every reason but
+  `INSUFFICIENT_CASH`, which it still words as `INSUFFICIENT_CASH` or
+  `CORE_MOVE_MISSED`. `EntryFailure` widens to match: code that handles it
+  exhaustively needs a case for each new reason.
+
+## 0.67.0
+
+Taker flow fixes (TT-2268). Additive: 0.66 code runs unchanged.
+
+### Added
+
+- `bestBid(minLifeSeconds, minPrice)`: an optional price floor in USDC base
+  units; no bid below it is chosen.
+- `RetryPolicy.maxRetryAfterMs` (default 30 s). A BACKOFF answer whose
+  Retry-After is longer is no longer waited out: the call throws at once, for
+  example `RATE_LIMITED`, with `retryAfterMs` set.
+- `StreamClosedError.commandSent` and `TotalisStream.closeError()`.
+
+### Changed
+
+- A follow cut off by a stream closed for good rejects with the server's
+  close reason (for example `STREAM_REPLACED`), not a generic `closed`. When
+  it follows a command already sent (`waitForOperation`, `waitForCoreExit`,
+  `sendWithdrawal`, `waitForWithdrawal`), the error has `commandSent` and
+  `normalizeError` reports `mayStillRun: true`.
+- An `AcceptanceResult`'s `bridged` reads the bridge as it stands now, so it
+  turns `landed: "yes"` once Hyperliquid answers `ok`, and reads undefined
+  once a bridge is refused or discarded unsent.
+- `openPosition` takes and signs a fresh quote once when the accept is
+  refused with `QUOTE_EXPIRED` or `QUOTE_REPLACED`; `onSigned` gets the new
+  record. A second refusal, or no fresh quote within `quoteTimeoutMs`, throws
+  the refusal.
+- Deposit, withdrawal and exit signing windows are set on the venue clock the
+  stream tracks once it has synced. Signing never waits for the stream, so a
+  window signed on a fresh instance before its first sync uses the device
+  clock; start the stream first on devices whose clock may be off.
+- Documented that an acceptance read after the trade settled, for example by
+  `recoverAcceptance`, can be `FILLED` or `FAILED`, both with `operationId`.
+
+## 0.66.1
+
+Combos close at a market's admission cutoff (TT-2271). No type changes.
+
+### Changed
+
+- `combo` is `CLOSED` with `OUTSIDE_WINDOW` and a null `opens_at` once a
+  market's result can be known: a price market from its observation time, a
+  policy rate from its scheduled decision. A sports game stays open in play
+  until its resolution backstop. RFQs refuse such legs as before.
+
+## 0.66.0
+
+A lighter HyperCore read for Cash (TT-2277). Additive: 0.65 code runs unchanged.
+
+### Added
+
+- `GET /v1/hypercore/balance` returns the session account's HyperCore spot
+  USDC, perps cash, account mode and HIP-4 positions in one read, on mainnet
+  and testnet. It reads no orders or fill history, so it answers even when
+  the portfolio's fill history is unavailable.
+- HyperCore funding (`/v1/hypercore/portfolio` and the new route) carries
+  `spot_usdc_total` and `spot_usdc_hold`; `spot_usdc` stays total minus hold.
 ## 0.65.2
 
 The package is now `@totalis/hip4-client`, published to public npm. Install

package/dist/controller.d.ts

@@ -39,10 +39,13 @@ export declare function controllerTransactions(deployment: TotalisDeployment & U
     approveUsdc: (amount: Value) => TransactionCall;
     /** `depositMaker`: pull approved USDC from the sending wallet into this maker's vault. */
     deposit: (amount: Value) => TransactionCall;
-    /** `requestMakerWithdraw`: start the withdrawal delay for `amount` to `to`. */
+    /** `withdrawMaker`: pay `amount` of free collateral to `to` at once (vault v1.1). */
+    withdraw: (amount: Value, to: string) => TransactionCall;
+    /** `requestMakerWithdraw` (vault v1 only): start the withdrawal delay for `amount` to `to`. */
     requestWithdraw: (amount: Value, to: string) => TransactionCall;
-    /** `executeMakerWithdraw`: pay out the pending request once its delay has passed. */
+    /** `executeMakerWithdraw` (vault v1 only): pay out the pending request once its delay has passed. */
     executeWithdraw: () => TransactionCall;
+    /** `cancelMakerWithdraw` (vault v1 only). */
     cancelWithdraw: () => TransactionCall;
     resetDiscount: () => TransactionCall;
 };

package/dist/controller.js

@@ -50,10 +50,13 @@ export function controllerTransactions(deployment, makerId, controller) {
         approveUsdc: (amount) => call(deployment, deployment.usdc.address, encodeCall("approve", [{ name: "spender", type: "address" }, { name: "amount", type: "uint256" }], [deployment.vault_address, amount])),
         /** `depositMaker`: pull approved USDC from the sending wallet into this maker's vault. */
         deposit: (amount) => vaultCall(deployment, "depositMaker", [makerId, controller, amount]),
-        /** `requestMakerWithdraw`: start the withdrawal delay for `amount` to `to`. */
+        /** `withdrawMaker`: pay `amount` of free collateral to `to` at once (vault v1.1). */
+        withdraw: (amount, to) => vaultCall(deployment, "withdrawMaker", [makerId, amount, to]),
+        /** `requestMakerWithdraw` (vault v1 only): start the withdrawal delay for `amount` to `to`. */
         requestWithdraw: (amount, to) => vaultCall(deployment, "requestMakerWithdraw", [makerId, amount, to]),
-        /** `executeMakerWithdraw`: pay out the pending request once its delay has passed. */
+        /** `executeMakerWithdraw` (vault v1 only): pay out the pending request once its delay has passed. */
         executeWithdraw: () => vaultCall(deployment, "executeMakerWithdraw", [makerId]),
+        /** `cancelMakerWithdraw` (vault v1 only). */
         cancelWithdraw: () => vaultCall(deployment, "cancelMakerWithdraw", [makerId]),
         resetDiscount: () => vaultCall(deployment, "resetDiscount", [makerId]),
     };

package/dist/flow-errors.d.ts

@@ -49,9 +49,10 @@ export type NormalizedError = {
     /**
      * The command may have reached the venue and may still execute: its
      * response was lost, it was aborted or timed out in flight, it was still
-     * BACKOFF after the resends (an earlier send may have been lost), or a
-     * proxy answered 5xx without the venue's error envelope. Never sign a new
-     * command; `resend` it or read its state.
+     * BACKOFF after the resends (an earlier send may have been lost), a
+     * proxy answered 5xx without the venue's error envelope, or the stream
+     * closed for good while following it (`StreamClosedError` `commandSent`).
+     * Never sign a new command; `resend` it or read its state.
      */
     readonly mayStillRun: boolean;
     /** Sends the identical request again, when the flow attached it. */

package/dist/flow-errors.js

@@ -60,7 +60,7 @@ export function normalizeError(error) {
     if (error instanceof ExitUnavailableError)
         return { ...base, code: error.code, message, retryable: false };
     if (error instanceof StreamClosedError)
-        return { ...base, code: "STREAM_CLOSED", message: error.reason, retryable: false };
+        return { ...base, code: "STREAM_CLOSED", message: error.reason, retryable: false, mayStillRun: error.commandSent };
     // An aborted or timed-out request may still have reached the venue.
     if (error instanceof Error && error.name === "TimeoutError")
         return { ...base, code: "TIMEOUT", message, retryable: true, mayStillRun: true };

package/dist/generated/account-read.d.ts

@@ -359,7 +359,7 @@ export type components = {
             readonly activity_id: string;
             /** @description Revision of this activity view, as a decimal string; increases when the activity is revised. */
             readonly revision: string;
-            /** @description Commit-visible publication sequence, as a decimal string. Lists order by sequence, then activity_id, descending. */
+            /** @description Commit-visible publication sequence of the activity's vault, as a decimal string. Lists order each vault's activity by sequence, then activity_id, descending; an account that has activity in more than one vault (after a vault redeploy) gets them merged, most recently recorded first. */
             readonly sequence: string;
             /** @description Business type of the activity, e.g. DEPOSIT, ACCEPT, SETTLEMENT, CLAIM, or CORRECTION for a reorg reversal. */
             readonly kind: components["schemas"]["ActivityKind"];
@@ -395,7 +395,7 @@ export type components = {
         readonly ActivityList: {
             /** @description Freshness of this read: the oldest source observation and one status for every amount in the response. */
             readonly context: components["schemas"]["ReadContext"];
-            /** @description Activities on this page, ordered by sequence, then activity_id, descending. */
+            /** @description Activities on this page, ordered by sequence, then activity_id, descending, within each vault; several vaults' activities are merged, most recently recorded first. */
             readonly items: readonly components["schemas"]["Activity"][];
             /** @description Opaque cursor for the next page, bound to this response's snapshot; null on the last page. Send it back unchanged as cursor. */
             readonly next_cursor: components["schemas"]["NextCursor"];
@@ -525,8 +525,12 @@ export type components = {
             readonly result_denominator: null;
         };
         readonly Position: {
-            /** @description Position ID: the contract's ticketId (bytes32 hex). */
+            /** @description Position ID: the contract's ticketId (bytes32 hex). A ticketId is the EIP-712 digest of its quote under its vault's domain, so it names one position across every vault. */
             readonly position_id: string;
+            /** @description Lowercase vault contract address the position is on. An account's positions span every vault the deployment has served: the active one, one running off and closed ones. */
+            readonly vault_address: components["schemas"]["LowercaseNonZeroAddress"];
+            /** @description Whether the position's vault takes a cash-out. Only the active vault does; a position on a vault running off cannot be cashed out (`STATE_CONFLICT`) and pays out automatically when it settles. Whether this position can be cashed out now also depends on its status. */
+            readonly cashout_available: boolean;
             /** @description Maker that wrote the position, as a decimal string. */
             readonly maker_id: components["schemas"]["NonZeroUInt64String"];
             /** @description Current position owner wallet (lowercase). */
@@ -735,6 +739,8 @@ export type components = {
                 readonly rfq_id: string;
                 /** @description Bettor stake in atomic USDC (6 decimals), before taker fees. */
                 readonly stake: string;
+                /** @description Stake less the quote's taker fee, floor(stake * taker_fee_bps / 10000), in atomic USDC (6 decimals): what the vault escrows if the quote fills. Payout minus net_stake is the maker's risk. */
+                readonly net_stake: string;
                 /** @description Signed potential bettor payout in atomic USDC (6 decimals). */
                 readonly payout: string;
                 /** @description Quote expiry as Unix epoch seconds. */
@@ -746,7 +752,7 @@ export type components = {
          * @description Stable HTTP error code. Each code has one HTTP status and one retry value.
          * @enum {string}
          */
-        readonly ErrorCode: "INVALID_REQUEST" | "INVALID_QUERY" | "INVALID_CURSOR" | "INVALID_IDEMPOTENCY_KEY" | "ORIGIN_REQUIRED" | "SUBPROTOCOL_REQUIRED" | "UNSUPPORTED_BROWSE_CONTRACT" | "UNAUTHENTICATED" | "FORBIDDEN" | "ORIGIN_NOT_ALLOWED" | "ACCESS_REQUIRED" | "NOT_FOUND" | "IDENTITY_NOT_FOUND" | "QUOTE_NOT_FOUND" | "INVITE_CODE_NOT_FOUND" | "IDEMPOTENCY_KEY_REUSED" | "STATE_CONFLICT" | "INVITE_CODE_EXHAUSTED" | "STALE_CURSOR" | "CURSOR_EXPIRED" | "CURSOR_RESET" | "RECURRING_DEFINITION_CONFLICT" | "EMBEDDED_WALLET_CONFLICT" | "SECRET_UNAVAILABLE" | "ROTATION_IN_PROGRESS" | "TELEMETRY_CONFLICT" | "RFQ_NOT_CANCELLABLE" | "RFQ_NOT_OPEN" | "RFQ_GENERATION_STALE" | "RFQ_GENERATION_IN_FLIGHT" | "QUOTE_EXPIRED" | "QUOTE_CANCELLED" | "QUOTE_REPLACED" | "QUOTE_SIGNER_CHANGED" | "QUOTE_CAPACITY_EXCEEDED" | "CORE_ACCOUNT_NOT_READY" | "CORE_ACCOUNT_ACTIVATION_REQUIRED" | "CORE_EXIT_ABANDONED" | "CORE_MOVE_IN_FLIGHT" | "USERNAME_TAKEN" | "USERNAME_ALREADY_SET" | "INVALID_SIGNATURE" | "WALLET_CONTRACT_UNSUPPORTED" | "WRONG_AUTHORITY" | "KEY_LIMIT_REACHED" | "USERNAME_NOT_ALLOWED" | "RATE_LIMITED" | "CONNECTION_LIMIT" | "RFQ_INTENT_LIMIT" | "QUOTE_EXPOSURE_LIMIT" | "DEPENDENCY_STALE" | "AUTHORIZATION_UNAVAILABLE" | "SOURCE_UNAVAILABLE" | "CONTRACT_UNAVAILABLE" | "MARKET_DATA_UNAVAILABLE" | "BROWSE_UNAVAILABLE" | "FINANCIAL_ACTIONS_DISABLED" | "CORE_EXIT_UNAVAILABLE" | "COLLATERAL_REDUCTION_UNAVAILABLE" | "SPONSORSHIP_UNAVAILABLE" | "CONTRACT_SIGNATURE_OVERLOADED" | "QUOTE_EXPOSURE_STALE" | "COMBO_AUTOMATIC_DISABLED" | "EMBEDDED_WALLET_UNAVAILABLE" | "CONNECTION_DRAIN";
+        readonly ErrorCode: "INVALID_REQUEST" | "INVALID_QUERY" | "INVALID_CURSOR" | "INVALID_IDEMPOTENCY_KEY" | "ORIGIN_REQUIRED" | "SUBPROTOCOL_REQUIRED" | "UNSUPPORTED_BROWSE_CONTRACT" | "UNAUTHENTICATED" | "FORBIDDEN" | "ORIGIN_NOT_ALLOWED" | "ACCESS_REQUIRED" | "SIGN_IN_REQUIRED" | "NOT_FOUND" | "IDENTITY_NOT_FOUND" | "QUOTE_NOT_FOUND" | "INVITE_CODE_NOT_FOUND" | "IDEMPOTENCY_KEY_REUSED" | "STATE_CONFLICT" | "INVITE_CODE_EXHAUSTED" | "STALE_CURSOR" | "CURSOR_EXPIRED" | "CURSOR_RESET" | "RECURRING_DEFINITION_CONFLICT" | "EMBEDDED_WALLET_CONFLICT" | "SECRET_UNAVAILABLE" | "ROTATION_IN_PROGRESS" | "TELEMETRY_CONFLICT" | "RFQ_NOT_CANCELLABLE" | "RFQ_NOT_OPEN" | "RFQ_GENERATION_STALE" | "RFQ_GENERATION_IN_FLIGHT" | "QUOTE_EXPIRED" | "QUOTE_CANCELLED" | "QUOTE_REPLACED" | "QUOTE_SIGNER_CHANGED" | "QUOTE_CAPACITY_EXCEEDED" | "CORE_ACCOUNT_NOT_READY" | "CORE_ACCOUNT_ACTIVATION_REQUIRED" | "CORE_EXIT_ABANDONED" | "CORE_MOVE_IN_FLIGHT" | "ACCEPTANCE_IN_FLIGHT" | "USERNAME_TAKEN" | "USERNAME_ALREADY_SET" | "USERNAME_REQUIRED" | "INVALID_SIGNATURE" | "WALLET_CONTRACT_UNSUPPORTED" | "WRONG_AUTHORITY" | "KEY_LIMIT_REACHED" | "USERNAME_NOT_ALLOWED" | "FOLLOW_SELF" | "FOLLOW_LIMIT_REACHED" | "RATE_LIMITED" | "CONNECTION_LIMIT" | "RFQ_INTENT_LIMIT" | "QUOTE_EXPOSURE_LIMIT" | "DEPENDENCY_STALE" | "AUTHORIZATION_UNAVAILABLE" | "SOURCE_UNAVAILABLE" | "CONTRACT_UNAVAILABLE" | "MARKET_DATA_UNAVAILABLE" | "BROWSE_UNAVAILABLE" | "FINANCIAL_ACTIONS_DISABLED" | "CORE_EXIT_UNAVAILABLE" | "COLLATERAL_REDUCTION_UNAVAILABLE" | "SPONSORSHIP_UNAVAILABLE" | "CONTRACT_SIGNATURE_OVERLOADED" | "QUOTE_EXPOSURE_STALE" | "COMBO_AUTOMATIC_DISABLED" | "GAS_PRICE_ABOVE_CEILING" | "EXECUTION_BACKLOG_FULL" | "EMBEDDED_WALLET_UNAVAILABLE" | "CONNECTION_DRAIN";
         readonly FieldViolation: {
             /**
              * @description REQUIRED: the input is missing. INVALID: it is present but malformed or out of range. UNEXPECTED: the input is not accepted here.
@@ -994,7 +1000,7 @@ export type components = {
              * @description Exclusive RFC3339 end of the period, echoed from the query.
              */
             readonly through: string;
-            /** @description The period's fill rate, on a list's first page (no cursor); null on later pages and when the period holds more than 50,000 quotes: ask for a shorter one. */
+            /** @description The period's fill rate, on a list's first page (no cursor); null on later pages. */
             readonly fill_rate: components["schemas"]["QuoteFillRate"] | null;
             /** @description Quotes on this page, newest submitted_at first. Each status is read when the page is. */
             readonly items: readonly components["schemas"]["QuoteHistoryItem"][];

package/dist/generated/api-keys.d.ts

@@ -375,7 +375,7 @@ export type components = {
          * @description Stable HTTP error code. Each code has one HTTP status and one retry value.
          * @enum {string}
          */
-        readonly ErrorCode: "INVALID_REQUEST" | "INVALID_QUERY" | "INVALID_CURSOR" | "INVALID_IDEMPOTENCY_KEY" | "ORIGIN_REQUIRED" | "SUBPROTOCOL_REQUIRED" | "UNSUPPORTED_BROWSE_CONTRACT" | "UNAUTHENTICATED" | "FORBIDDEN" | "ORIGIN_NOT_ALLOWED" | "ACCESS_REQUIRED" | "NOT_FOUND" | "IDENTITY_NOT_FOUND" | "QUOTE_NOT_FOUND" | "INVITE_CODE_NOT_FOUND" | "IDEMPOTENCY_KEY_REUSED" | "STATE_CONFLICT" | "INVITE_CODE_EXHAUSTED" | "STALE_CURSOR" | "CURSOR_EXPIRED" | "CURSOR_RESET" | "RECURRING_DEFINITION_CONFLICT" | "EMBEDDED_WALLET_CONFLICT" | "SECRET_UNAVAILABLE" | "ROTATION_IN_PROGRESS" | "TELEMETRY_CONFLICT" | "RFQ_NOT_CANCELLABLE" | "RFQ_NOT_OPEN" | "RFQ_GENERATION_STALE" | "RFQ_GENERATION_IN_FLIGHT" | "QUOTE_EXPIRED" | "QUOTE_CANCELLED" | "QUOTE_REPLACED" | "QUOTE_SIGNER_CHANGED" | "QUOTE_CAPACITY_EXCEEDED" | "CORE_ACCOUNT_NOT_READY" | "CORE_ACCOUNT_ACTIVATION_REQUIRED" | "CORE_EXIT_ABANDONED" | "CORE_MOVE_IN_FLIGHT" | "USERNAME_TAKEN" | "USERNAME_ALREADY_SET" | "INVALID_SIGNATURE" | "WALLET_CONTRACT_UNSUPPORTED" | "WRONG_AUTHORITY" | "KEY_LIMIT_REACHED" | "USERNAME_NOT_ALLOWED" | "RATE_LIMITED" | "CONNECTION_LIMIT" | "RFQ_INTENT_LIMIT" | "QUOTE_EXPOSURE_LIMIT" | "DEPENDENCY_STALE" | "AUTHORIZATION_UNAVAILABLE" | "SOURCE_UNAVAILABLE" | "CONTRACT_UNAVAILABLE" | "MARKET_DATA_UNAVAILABLE" | "BROWSE_UNAVAILABLE" | "FINANCIAL_ACTIONS_DISABLED" | "CORE_EXIT_UNAVAILABLE" | "COLLATERAL_REDUCTION_UNAVAILABLE" | "SPONSORSHIP_UNAVAILABLE" | "CONTRACT_SIGNATURE_OVERLOADED" | "QUOTE_EXPOSURE_STALE" | "COMBO_AUTOMATIC_DISABLED" | "EMBEDDED_WALLET_UNAVAILABLE" | "CONNECTION_DRAIN";
+        readonly ErrorCode: "INVALID_REQUEST" | "INVALID_QUERY" | "INVALID_CURSOR" | "INVALID_IDEMPOTENCY_KEY" | "ORIGIN_REQUIRED" | "SUBPROTOCOL_REQUIRED" | "UNSUPPORTED_BROWSE_CONTRACT" | "UNAUTHENTICATED" | "FORBIDDEN" | "ORIGIN_NOT_ALLOWED" | "ACCESS_REQUIRED" | "SIGN_IN_REQUIRED" | "NOT_FOUND" | "IDENTITY_NOT_FOUND" | "QUOTE_NOT_FOUND" | "INVITE_CODE_NOT_FOUND" | "IDEMPOTENCY_KEY_REUSED" | "STATE_CONFLICT" | "INVITE_CODE_EXHAUSTED" | "STALE_CURSOR" | "CURSOR_EXPIRED" | "CURSOR_RESET" | "RECURRING_DEFINITION_CONFLICT" | "EMBEDDED_WALLET_CONFLICT" | "SECRET_UNAVAILABLE" | "ROTATION_IN_PROGRESS" | "TELEMETRY_CONFLICT" | "RFQ_NOT_CANCELLABLE" | "RFQ_NOT_OPEN" | "RFQ_GENERATION_STALE" | "RFQ_GENERATION_IN_FLIGHT" | "QUOTE_EXPIRED" | "QUOTE_CANCELLED" | "QUOTE_REPLACED" | "QUOTE_SIGNER_CHANGED" | "QUOTE_CAPACITY_EXCEEDED" | "CORE_ACCOUNT_NOT_READY" | "CORE_ACCOUNT_ACTIVATION_REQUIRED" | "CORE_EXIT_ABANDONED" | "CORE_MOVE_IN_FLIGHT" | "ACCEPTANCE_IN_FLIGHT" | "USERNAME_TAKEN" | "USERNAME_ALREADY_SET" | "USERNAME_REQUIRED" | "INVALID_SIGNATURE" | "WALLET_CONTRACT_UNSUPPORTED" | "WRONG_AUTHORITY" | "KEY_LIMIT_REACHED" | "USERNAME_NOT_ALLOWED" | "FOLLOW_SELF" | "FOLLOW_LIMIT_REACHED" | "RATE_LIMITED" | "CONNECTION_LIMIT" | "RFQ_INTENT_LIMIT" | "QUOTE_EXPOSURE_LIMIT" | "DEPENDENCY_STALE" | "AUTHORIZATION_UNAVAILABLE" | "SOURCE_UNAVAILABLE" | "CONTRACT_UNAVAILABLE" | "MARKET_DATA_UNAVAILABLE" | "BROWSE_UNAVAILABLE" | "FINANCIAL_ACTIONS_DISABLED" | "CORE_EXIT_UNAVAILABLE" | "COLLATERAL_REDUCTION_UNAVAILABLE" | "SPONSORSHIP_UNAVAILABLE" | "CONTRACT_SIGNATURE_OVERLOADED" | "QUOTE_EXPOSURE_STALE" | "COMBO_AUTOMATIC_DISABLED" | "GAS_PRICE_ABOVE_CEILING" | "EXECUTION_BACKLOG_FULL" | "EMBEDDED_WALLET_UNAVAILABLE" | "CONNECTION_DRAIN";
         readonly FieldViolation: {
             /**
              * @description REQUIRED: the input is missing. INVALID: it is present but malformed or out of range. UNEXPECTED: the input is not accepted here.