@totalis/hip4-client 0.74.0 → 0.76.0

package/CHANGELOG.md

@@ -3,6 +3,93 @@
 `@totalis/hip4-client` follows [semantic versioning](https://semver.org).
 The contract version the generated types come from is `sdkVersion` in `./version`.
 
+## 0.76.0
+
+Vault agents (TT-2554), one Combo leg per question (TT-2605) and no legs on
+unpriced markets (TT-2606). Generated from contract
+`205.0.0-device-vault-agents`. Additive: 0.75 code runs unchanged, but
+`createRfq` now refuses two legs from one question and legs with a null
+`chance`.
+
+### Added
+
+- Vault agents (TT-2554). `agent` in `createTotalis` takes a key the account
+  granted; it then signs the account's `TakerAccept`, `SellBack`,
+  `CashoutTransfer` and Exits to HyperCore or the account's wallet instead of
+  `signer`, so those need no wallet prompt. `signer` still names the account
+  and signs USDC authorizations, HyperCore actions, grants and run-off claims.
+- `grantVaultAgent({ agent, validUntil })` has the account sign an
+  `AgentGrant` and relays it (`POST /v1/me/vault-agents`); `revokeVaultAgent`
+  sends `validUntil` 0, and `vaultAgents()` iterates the live agents.
+- `agentGrantTypedData` in `typed-data`, checked against the vault's vectors.
+- A grant or revoke's default nonce rises past any nonce this client sent
+  explicitly for that agent, so it isn't refused for not exceeding it.
+
+### Changed
+
+- `createRfq` refuses a Combo with two legs from one native question
+  (TT-2605): the second such leg is named in `field_violations` as
+  `/legs/{i}/outcome_id` with reason `SAME_QUESTION` (`400
+  INVALID_REQUEST`). Makers never quoted these legs, so such an RFQ used
+  to open and get no quotes. Allow one leg per `native_question_id` in your
+  slip; standalone markets have none and always combine.
+- `createRfq` refuses a leg whose market has a side with a null `chance`
+  (an empty, dust or one-sided book with no recent evidence), with reason
+  `CHANCE_UNAVAILABLE` on `/legs/{i}/outcome_id` (`400 INVALID_REQUEST`).
+  Makers price from the book, and on such a book one small order sets the
+  price. Show `chance`, not `value`, and treat `chance: null` as unpriced
+  (TT-2606).
+
+## 0.75.0
+
+Maker capital on the stream (TT-2584), a stream that cannot hang in
+`connecting` (TT-2585), maker keys reading their own positions and
+performance (TT-2583) and external wallets for embedded-wallet binding
+(TT-2549). Generated from contract `204.0.0-maker-capital-stream`. Additive:
+0.74 code runs unchanged; a maker stream now sets `publication_freshness`
+unless told not to.
+
+### Added
+
+- A maker subscription can set `capital: true` (TT-2584). The stream then
+  emits `capital` with the maker's capital, the same body as
+  `GET /v1/makers/{maker_id}/capital`: once on subscribe, whenever it changes
+  (a fill, a hold or a vault change), and at least every 5 s. A bot keeps the
+  latest one instead of reading capital before it quotes; without one for
+  15 s, read capital over HTTP. It needs `vault:read`. Contract
+  `204.0.0-maker-capital-stream`.
+- `grantVaultAgent` (`POST /v1/me/vault-agents`): relay the account's signed
+  `AgentGrant` to a key one of its devices holds, or its revoke
+  (`valid_until: "0"`), so Combo accepts, cash-outs and Exits to the account's
+  own wallet or Core need no wallet prompt (TT-2550). Answers `202` with the
+  `setAgent` operation. Contract `205.0.0-device-vault-agents`.
+- `getVaultAgents` (`GET /v1/me/vault-agents`): the account's live vault
+  agents, each with `valid_until`, `nonce` and `copy_agent`, paged with
+  `cursor` and `limit`.
+
+### Changed
+
+- A maker key with `vault:read` can now read its own maker's positions
+  (`/v1/makers/{maker_id}/positions` and a single position), exposure and
+  `getMakerPerformance` (TT-2583); before, only a dashboard session could.
+  Another maker's ID answers 404.
+
+- `TotalisStream` no longer hangs in `connecting` (TT-2585). A connect that
+  has not subscribed within `connectTimeoutMs` (new, default 10000), including
+  while `accessToken` resolves, emits `error` and reconnects. A maker
+  subscription now defaults to `publication_freshness: true`, as an account
+  does, so its 1 s heartbeats keep the 5 s silence timeout armed; pass
+  `publication_freshness: false` for the old 15 s profile, which has no
+  watchdog once subscribed. A silent socket now also emits `error` before it
+  reconnects.
+
+- `bindEmbeddedWallet` can make the Ethereum wallet a Privy user signed in
+  with the account's wallet (`wallet_kind: "EXTERNAL"`) when they have no
+  embedded wallet (TT-2549). An existing account keeps its wallet.
+  `operationErrors` adds `WALLET_CONTRACT_UNSUPPORTED` (422) for a smart
+  contract wallet. `SIGN_IN_REQUIRED` now refuses only a Privy user with no
+  Google, email, X or Ethereum wallet login, such as a Solana-only one.
+
 ## 0.74.0
 
 Execution admission (TT-1355) and a follower's copied Combos (TT-2486,

package/dist/generated/account-read.d.ts

@@ -227,7 +227,7 @@ export type paths = {
             readonly path?: never;
             readonly cookie?: never;
         };
-        /** @description Performance of this maker per period. Complete periods aggregate the positions that closed economically in them; incomplete periods return unavailable metrics. Gas stays unavailable until the payer of every transaction receipt is attributed. The credential selects the deployment, and access is checked against its current permissions on every request. The maker is always the one named in the path, never inferred from the caller's account. */
+        /** @description Get your maker's trading P&L per period between `from` and `through`. */
         readonly get: operations["getMakerPerformance"];
         readonly put?: never;
         readonly post?: never;
@@ -261,7 +261,7 @@ export type paths = {
             readonly path?: never;
             readonly cookie?: never;
         };
-        /** @description This maker's open book by outcome at the vault projection checkpoint: per outcome its YES and NO exposure, gross and net, worst case and what offsetting saves, and what awaits settlement; book totals count each ticket once. Legs resolve as a position's do. Dashboard sessions only, like positions. */
+        /** @description This maker's open book by outcome at the vault projection checkpoint: per outcome its YES and NO exposure, gross and net, worst case and what offsetting saves, and what awaits settlement; book totals count each ticket once. Legs resolve as a position's do. A maker key reads only its own maker. */
         readonly get: operations["getMakerExposure"];
         readonly put?: never;
         readonly post?: never;
@@ -1848,7 +1848,7 @@ export interface operations {
         };
         readonly requestBody?: never;
         readonly responses: {
-            /** @description Scoped read with one freshness status; amounts are atomic USDC strings or null. No shared caching. */
+            /** @description Complete periods aggregate the positions that closed economically in them; incomplete periods return unavailable metrics. Gas stays unavailable until the payer of every transaction receipt is attributed. Scoped read with one freshness status; amounts are atomic USDC strings or null. No shared caching. */
             readonly 200: {
                 headers: {
                     readonly "Cache-Control": components["headers"]["CacheControl"];

package/dist/generated/client.d.ts

@@ -49,6 +49,7 @@ export type paths = {
     readonly "/v1/me/copy-agents": Pick<SharedPaths["/v1/me/copy-agents"], "parameters" | "get">;
     readonly "/v1/me/copy-agents/core": Pick<SharedPaths["/v1/me/copy-agents/core"], "parameters" | "post" | "delete">;
     readonly "/v1/me/copy-agents/combo": Pick<SharedPaths["/v1/me/copy-agents/combo"], "parameters" | "post" | "delete">;
+    readonly "/v1/me/vault-agents": Pick<SharedPaths["/v1/me/vault-agents"], "parameters" | "get" | "post">;
     readonly "/v1/me/copy-budget": Pick<SharedPaths["/v1/me/copy-budget"], "parameters" | "get" | "put">;
     readonly "/v1/me/copy-agents/combo/confirm": Pick<SharedPaths["/v1/me/copy-agents/combo/confirm"], "parameters" | "post">;
     readonly "/v1/me/copy-agents/combo/grant": Pick<SharedPaths["/v1/me/copy-agents/combo/grant"], "parameters" | "post">;
@@ -102,4 +103,4 @@ export type paths = {
     readonly "/v1/makers/{maker_id}/exposure": Pick<SharedPaths["/v1/makers/{maker_id}/exposure"], "parameters" | "get">;
     readonly "/v1/makers/{maker_id}/performance": Pick<SharedPaths["/v1/makers/{maker_id}/performance"], "parameters" | "get">;
 };
-export type operations = Pick<SharedOperations, "abandonCoreExit" | "acceptQuote" | "activeCoreExits" | "admitOwnMaker" | "admitPartnerWallet" | "bindEmbeddedWallet" | "cancelRfq" | "confirmComboCopyAgent" | "confirmCoreCopyAgent" | "createCashout" | "createComment" | "createCoreExit" | "createDeposit" | "createRfq" | "createRunOffClaim" | "createWalletChallenge" | "createWalletSession" | "createWithdrawal" | "deleteComment" | "editComment" | "endWalletSession" | "followTrader" | "getAcceptance" | "getAccountActivity" | "getAccountPnl" | "getAccountPosition" | "getBalances" | "getCopyAgents" | "getCopyBudget" | "getCopySettings" | "getCopySummary" | "getCoreExit" | "getDeployment" | "getHypercoreBalance" | "getHypercorePortfolio" | "getHypercoreSettlementCredits" | "getIdentity" | "getMakerActivity" | "getMakerCapital" | "getMakerExposure" | "getMakerPerformance" | "getMakerPosition" | "getMakerQuotes" | "getMakerTelemetry" | "getMakerVaultFundingTransaction" | "getMakerWithdrawal" | "getMarket" | "getMarketDataConfig" | "getMarketDefinitions" | "getMarketHistory" | "getMarketRecurringRound" | "getMarketReferenceCloses" | "getMarketScoreTimeline" | "getMarketStats" | "getOperation" | "getOwnMaker" | "getPartnerReport" | "getPerpMarks" | "getProfitLeaderboard" | "getQuestion" | "getQuestionRecurringRound" | "getQuestionScoreTimeline" | "getRfq" | "getSeries" | "getSuggestedCombo" | "getTaxonomy" | "getTrader" | "getTraderPnl" | "getUsernameAvailability" | "getVolumeLeaderboard" | "getWithdrawal" | "grantComboCopyAgent" | "likeComment" | "listAccountActivity" | "listAccountPositions" | "listComboCopies" | "listCommentReplies" | "listComments" | "listControlledMakers" | "listCopiedFills" | "listCopyTrades" | "listDiscovery" | "listFollows" | "listMakerActivity" | "listMakerPositions" | "listMakerQuoteHistory" | "listMarkets" | "listOperations" | "listQuotes" | "listTraderPositions" | "listTraderTrades" | "reactComment" | "recordAcquisition" | "refreshPicture" | "requestComboCopyAgent" | "requestCoreCopyAgent" | "revokeComboCopyAgent" | "searchCatalog" | "setAvatar" | "setCopyAllocation" | "setCopySettings" | "setPublicProfile" | "setUsername" | "stream" | "streamMarkets" | "switchOffComboCopyAgent" | "switchOffCoreCopyAgent" | "unfollowTrader" | "unlikeComment" | "unreactComment">;
+export type operations = Pick<SharedOperations, "abandonCoreExit" | "acceptQuote" | "activeCoreExits" | "admitOwnMaker" | "admitPartnerWallet" | "bindEmbeddedWallet" | "cancelRfq" | "confirmComboCopyAgent" | "confirmCoreCopyAgent" | "createCashout" | "createComment" | "createCoreExit" | "createDeposit" | "createRfq" | "createRunOffClaim" | "createWalletChallenge" | "createWalletSession" | "createWithdrawal" | "deleteComment" | "editComment" | "endWalletSession" | "followTrader" | "getAcceptance" | "getAccountActivity" | "getAccountPnl" | "getAccountPosition" | "getBalances" | "getCopyAgents" | "getCopyBudget" | "getCopySettings" | "getCopySummary" | "getCoreExit" | "getDeployment" | "getHypercoreBalance" | "getHypercorePortfolio" | "getHypercoreSettlementCredits" | "getIdentity" | "getMakerActivity" | "getMakerCapital" | "getMakerExposure" | "getMakerPerformance" | "getMakerPosition" | "getMakerQuotes" | "getMakerTelemetry" | "getMakerVaultFundingTransaction" | "getMakerWithdrawal" | "getMarket" | "getMarketDataConfig" | "getMarketDefinitions" | "getMarketHistory" | "getMarketRecurringRound" | "getMarketReferenceCloses" | "getMarketScoreTimeline" | "getMarketStats" | "getOperation" | "getOwnMaker" | "getPartnerReport" | "getPerpMarks" | "getProfitLeaderboard" | "getQuestion" | "getQuestionRecurringRound" | "getQuestionScoreTimeline" | "getRfq" | "getSeries" | "getSuggestedCombo" | "getTaxonomy" | "getTrader" | "getTraderPnl" | "getUsernameAvailability" | "getVaultAgents" | "getVolumeLeaderboard" | "getWithdrawal" | "grantComboCopyAgent" | "grantVaultAgent" | "likeComment" | "listAccountActivity" | "listAccountPositions" | "listComboCopies" | "listCommentReplies" | "listComments" | "listControlledMakers" | "listCopiedFills" | "listCopyTrades" | "listDiscovery" | "listFollows" | "listMakerActivity" | "listMakerPositions" | "listMakerQuoteHistory" | "listMarkets" | "listOperations" | "listQuotes" | "listTraderPositions" | "listTraderTrades" | "reactComment" | "recordAcquisition" | "refreshPicture" | "requestComboCopyAgent" | "requestCoreCopyAgent" | "revokeComboCopyAgent" | "searchCatalog" | "setAvatar" | "setCopyAllocation" | "setCopySettings" | "setPublicProfile" | "setUsername" | "stream" | "streamMarkets" | "switchOffComboCopyAgent" | "switchOffCoreCopyAgent" | "unfollowTrader" | "unlikeComment" | "unreactComment">;

package/dist/generated/errors.d.ts

@@ -333,7 +333,7 @@ export declare const operationErrors: {
     readonly activeCoreExits: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "DEPENDENCY_STALE", "RATE_LIMITED"];
     readonly admitOwnMaker: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "DEPENDENCY_STALE", "RATE_LIMITED", "ORIGIN_REQUIRED", "INVALID_REQUEST", "NOT_FOUND", "STATE_CONFLICT"];
     readonly admitPartnerWallet: readonly ["INVALID_REQUEST", "INVALID_IDEMPOTENCY_KEY", "UNAUTHENTICATED", "FORBIDDEN", "STATE_CONFLICT", "INVALID_SIGNATURE", "RATE_LIMITED", "AUTHORIZATION_UNAVAILABLE"];
-    readonly bindEmbeddedWallet: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "DEPENDENCY_STALE", "RATE_LIMITED", "INVALID_REQUEST", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSED", "EMBEDDED_WALLET_CONFLICT", "ACCESS_REQUIRED", "SIGN_IN_REQUIRED", "ORIGIN_REQUIRED"];
+    readonly bindEmbeddedWallet: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "DEPENDENCY_STALE", "RATE_LIMITED", "INVALID_REQUEST", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSED", "EMBEDDED_WALLET_CONFLICT", "ACCESS_REQUIRED", "SIGN_IN_REQUIRED", "WALLET_CONTRACT_UNSUPPORTED", "ORIGIN_REQUIRED"];
     readonly cancelQuote: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "DEPENDENCY_STALE", "RATE_LIMITED", "INVALID_REQUEST", "NOT_FOUND", "STATE_CONFLICT"];
     readonly cancelRfq: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "DEPENDENCY_STALE", "RATE_LIMITED", "INVALID_REQUEST", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSED", "NOT_FOUND", "RFQ_NOT_CANCELLABLE", "STATE_CONFLICT", "ORIGIN_REQUIRED"];
     readonly confirmComboCopyAgent: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "RATE_LIMITED", "ORIGIN_REQUIRED", "IDENTITY_NOT_FOUND", "CONTRACT_UNAVAILABLE", "NOT_FOUND", "STATE_CONFLICT", "DEPENDENCY_STALE", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSED"];
@@ -410,9 +410,11 @@ export declare const operationErrors: {
     readonly getTrader: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "RATE_LIMITED", "INVALID_QUERY", "ORIGIN_REQUIRED", "NOT_FOUND", "SOURCE_UNAVAILABLE", "CONTRACT_UNAVAILABLE"];
     readonly getTraderPnl: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "RATE_LIMITED", "INVALID_QUERY", "ORIGIN_REQUIRED", "NOT_FOUND", "SOURCE_UNAVAILABLE", "CONTRACT_UNAVAILABLE"];
     readonly getUsernameAvailability: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "DEPENDENCY_STALE", "RATE_LIMITED", "INVALID_QUERY", "IDENTITY_NOT_FOUND", "ORIGIN_REQUIRED"];
+    readonly getVaultAgents: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "RATE_LIMITED", "ORIGIN_REQUIRED", "IDENTITY_NOT_FOUND", "INVALID_QUERY", "DEPENDENCY_STALE"];
     readonly getVolumeLeaderboard: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "DEPENDENCY_STALE", "RATE_LIMITED", "INVALID_QUERY", "CONTRACT_UNAVAILABLE"];
     readonly getWithdrawal: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "DEPENDENCY_STALE", "RATE_LIMITED", "INVALID_REQUEST", "NOT_FOUND"];
     readonly grantComboCopyAgent: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "RATE_LIMITED", "ORIGIN_REQUIRED", "IDENTITY_NOT_FOUND", "CONTRACT_UNAVAILABLE", "NOT_FOUND", "INVALID_REQUEST", "FINANCIAL_ACTIONS_DISABLED", "DEPENDENCY_STALE", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSED"];
+    readonly grantVaultAgent: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "RATE_LIMITED", "ORIGIN_REQUIRED", "IDENTITY_NOT_FOUND", "INVALID_REQUEST", "FINANCIAL_ACTIONS_DISABLED", "DEPENDENCY_STALE", "INVALID_IDEMPOTENCY_KEY", "IDEMPOTENCY_KEY_REUSED"];
     readonly likeComment: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "DEPENDENCY_STALE", "RATE_LIMITED", "ORIGIN_REQUIRED", "IDENTITY_NOT_FOUND", "NOT_FOUND", "INVALID_IDEMPOTENCY_KEY"];
     readonly listAccountActivity: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "DEPENDENCY_STALE", "RATE_LIMITED", "INVALID_QUERY", "ORIGIN_REQUIRED", "NOT_FOUND", "SOURCE_UNAVAILABLE", "CONTRACT_UNAVAILABLE", "CURSOR_EXPIRED"];
     readonly listAccountPositions: readonly ["UNAUTHENTICATED", "FORBIDDEN", "AUTHORIZATION_UNAVAILABLE", "DEPENDENCY_STALE", "RATE_LIMITED", "INVALID_QUERY", "ORIGIN_REQUIRED", "NOT_FOUND", "SOURCE_UNAVAILABLE", "CONTRACT_UNAVAILABLE", "CURSOR_EXPIRED"];

package/dist/generated/errors.js

@@ -405,6 +405,7 @@ export const operationErrors = {
         "EMBEDDED_WALLET_CONFLICT",
         "ACCESS_REQUIRED",
         "SIGN_IN_REQUIRED",
+        "WALLET_CONTRACT_UNSUPPORTED",
         "ORIGIN_REQUIRED"
     ],
     "cancelQuote": [
@@ -1196,6 +1197,16 @@ export const operationErrors = {
         "IDENTITY_NOT_FOUND",
         "ORIGIN_REQUIRED"
     ],
+    "getVaultAgents": [
+        "UNAUTHENTICATED",
+        "FORBIDDEN",
+        "AUTHORIZATION_UNAVAILABLE",
+        "RATE_LIMITED",
+        "ORIGIN_REQUIRED",
+        "IDENTITY_NOT_FOUND",
+        "INVALID_QUERY",
+        "DEPENDENCY_STALE"
+    ],
     "getVolumeLeaderboard": [
         "UNAUTHENTICATED",
         "FORBIDDEN",
@@ -1229,6 +1240,19 @@ export const operationErrors = {
         "INVALID_IDEMPOTENCY_KEY",
         "IDEMPOTENCY_KEY_REUSED"
     ],
+    "grantVaultAgent": [
+        "UNAUTHENTICATED",
+        "FORBIDDEN",
+        "AUTHORIZATION_UNAVAILABLE",
+        "RATE_LIMITED",
+        "ORIGIN_REQUIRED",
+        "IDENTITY_NOT_FOUND",
+        "INVALID_REQUEST",
+        "FINANCIAL_ACTIONS_DISABLED",
+        "DEPENDENCY_STALE",
+        "INVALID_IDEMPOTENCY_KEY",
+        "IDEMPOTENCY_KEY_REUSED"
+    ],
     "likeComment": [
         "UNAUTHENTICATED",
         "FORBIDDEN",

package/dist/generated/openapi.d.ts

@@ -426,7 +426,7 @@ export type paths = {
         readonly put?: never;
         /**
          * Bind embedded wallet
-         * @description Idempotently binds the one Ethereum wallet attested by the authenticated user's signed Privy identity token. BYOW and multiple wallets are rejected. Creating a new account needs a Google, email or X login linked in the identity token, or this answers SIGN_IN_REQUIRED (a Privy user with only an external wallet, such as one from another app on the same Privy app, is refused), and, while the closed launch is on, an invite code redeemed with the access service first, or this answers ACCESS_REQUIRED. Existing accounts are unaffected.
+         * @description Idempotently makes a wallet attested by the authenticated user's signed Privy identity token the account's: the account's current wallet if it has one, else the Privy embedded wallet, else the one Ethereum wallet the user signed in with. The account's wallet never changes once bound; several external wallets on a new account, or a wallet another account holds, answer EMBEDDED_WALLET_CONFLICT, and a smart contract wallet answers WALLET_CONTRACT_UNSUPPORTED. Creating a new account needs a Google, email, X or Ethereum wallet login linked in the identity token, or this answers SIGN_IN_REQUIRED (a Privy user with only a Solana wallet, such as one from the Solana app on the same Privy app, is refused), and, while the closed launch is on, an invite code redeemed with the access service first, or this answers ACCESS_REQUIRED. Existing accounts are unaffected.
          */
         readonly post: operations["bindEmbeddedWallet"];
         readonly delete?: never;
@@ -1031,6 +1031,30 @@ export type paths = {
         readonly patch?: never;
         readonly trace?: never;
     };
+    readonly "/v1/me/vault-agents": {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        /**
+         * Get my vault agents
+         * @description The authenticated account's vault agents whose latest AgentGrant on chain is still live, by agent address, a page at a time: each agent may sign the account's named TakerAccept, owner-side SellBack, seller-side CashoutTransfer and Exit to the account's own wallet or Core spot until valid_until. copy_agent marks a server-held copy agent (managed under /v1/me/copy-agents) rather than a key one of the account's devices holds. A grant appears once the chain-agent projects it, after its operation completes. nonce is the agent's last grant, which a new grant or revoke must exceed.
+         */
+        readonly get: operations["getVaultAgents"];
+        readonly put?: never;
+        /**
+         * Relay the account's grant or revoke of a device's vault agent
+         * @description Relays the account's EIP-712 signature over AgentGrant(account, agent, valid_until, nonce) to setAgent; Totalis pays the gas. agent is a key one of the account's devices holds, so it can sign the account's named Combo accepts, cash-outs and Exits to its own wallet or Core spot without a wallet prompt. valid_until is unix seconds, in the future and at most 180 days away (the vault's limit); 0 revokes at once. nonce must exceed the agent's last grant (GET /v1/me/vault-agents), so a client uses the current unix time. Only the account's own signature (or its ERC-1271 verdict) grants. 403 FORBIDDEN for a copy agent, whose grants go through /v1/me/copy-agents. While financial actions run off only a revoke is relayed. A retry with the same Idempotency-Key returns the same operation.
+         */
+        readonly post: operations["grantVaultAgent"];
+        readonly delete?: never;
+        readonly options?: never;
+        readonly head?: never;
+        readonly patch?: never;
+        readonly trace?: never;
+    };
     readonly "/v1/me/copy-budget": {
         readonly parameters: {
             readonly query?: never;
@@ -2429,7 +2453,7 @@ export type paths = {
         };
         /**
          * Get maker exposure
-         * @description This maker's open book by outcome at the vault projection checkpoint: per outcome its YES and NO exposure, gross and net, worst case and what offsetting saves, and what awaits settlement; book totals count each ticket once. Legs resolve as a position's do. Dashboard sessions only, like positions.
+         * @description This maker's open book by outcome at the vault projection checkpoint: per outcome its YES and NO exposure, gross and net, worst case and what offsetting saves, and what awaits settlement; book totals count each ticket once. Legs resolve as a position's do. A maker key reads only its own maker.
          */
         readonly get: operations["getMakerExposure"];
         readonly put?: never;
@@ -2449,7 +2473,7 @@ export type paths = {
         };
         /**
          * Get maker performance
-         * @description Performance of this maker per period. Complete periods aggregate the positions that closed economically in them; incomplete periods return unavailable metrics. Gas stays unavailable until the payer of every transaction receipt is attributed. The credential selects the deployment, and access is checked against its current permissions on every request. The maker is always the one named in the path, never inferred from the caller's account.
+         * @description Get your maker's trading P&L per period between `from` and `through`.
          */
         readonly get: operations["getMakerPerformance"];
         readonly put?: never;
@@ -2560,6 +2584,38 @@ export type components = {
             /** @description The account's EIP-712 signature over AgentGrant(account, agent, 0, nonce). */
             readonly signature: components["schemas"]["Signature65"];
         };
+        /** VaultAgentGrant */
+        readonly VaultAgentGrant: {
+            /** @description The key a device of the account holds; not the account, not a copy agent. */
+            readonly agent: components["schemas"]["LowercaseNonZeroAddress"];
+            /** @description Unix seconds the grant lasts until, at most 180 days away; 0 revokes. */
+            readonly valid_until: components["schemas"]["UInt64String"];
+            /** @description Above the agent's last grant; the current unix time works. */
+            readonly nonce: components["schemas"]["UInt64String"];
+            /** @description The account's EIP-712 signature over AgentGrant(account, agent, valid_until, nonce) in the vault's domain. */
+            readonly signature: components["schemas"]["Signature65"];
+        };
+        /** VaultAgents */
+        readonly VaultAgents: {
+            /** @description The account wallet the agents sign for. */
+            readonly account: components["schemas"]["Address"];
+            /** @description Live grants, by agent address. */
+            readonly agents: readonly components["schemas"]["VaultAgent"][];
+            readonly next_cursor: components["schemas"]["NextCursor"];
+            /** @description Whether more agents follow next_cursor. */
+            readonly has_more: boolean;
+        };
+        /** VaultAgent */
+        readonly VaultAgent: {
+            /** @description The agent key. */
+            readonly agent: components["schemas"]["Address"];
+            /** @description Unix seconds the grant lasts until. */
+            readonly valid_until: components["schemas"]["UInt64String"];
+            /** @description The grant's nonce; a new grant or revoke must exceed it. */
+            readonly nonce: components["schemas"]["UInt64String"];
+            /** @description A server-held copy agent rather than a device's key. */
+            readonly copy_agent: boolean;
+        };
         /** AgentGrantRelayed */
         readonly AgentGrantRelayed: {
             /** @description The relayed setAgent operation. */
@@ -2787,7 +2843,7 @@ export type components = {
         readonly CreateRfqCommand: {
             /** @description Stake in atomic USDC (6 decimals), before taker fees; must be positive. Quotes carry the same stake. */
             readonly stake: components["schemas"]["$defs-Amount"];
-            /** @description 1 to 5 legs in strictly increasing outcome_id order. */
+            /** @description 1 to 5 legs in strictly increasing outcome_id order, at most one per native question. Every leg's market must have eligibility ENABLED and combo OPEN, and a chance on each side. */
             readonly legs: readonly components["schemas"]["$defs-Leg"][];
             /** @description Optional partner attribution code, from any credential. From an account a partner admitted, it must be one of that partner's active codes and needs no signature; with none, the partner's account code is recorded. From any other account it needs builder_authorization_expiry and builder_signature from the partner's registered signer and is honoured only from the code's registered browser origin, so an API-key request (no Origin) from such an account cannot send one. A refused code returns INVALID_REQUEST naming /builder_code. Revocation rejects new RFQs without vetoing an already-created RFQ. Partners get codes from Totalis. */
             readonly builder_code?: string;
@@ -7112,7 +7168,7 @@ export interface operations {
         };
         readonly requestBody?: never;
         readonly responses: {
-            /** @description Embedded wallet is bound */
+            /** @description Account wallet is bound */
             readonly 204: {
                 headers: {
                     readonly [name: string]: unknown;
@@ -7123,6 +7179,7 @@ export interface operations {
             readonly 401: components["responses"]["Error"];
             readonly 403: components["responses"]["Error"];
             readonly 409: components["responses"]["Error"];
+            readonly 422: components["responses"]["Error"];
             readonly 429: components["responses"]["RateLimited"];
             readonly 503: components["responses"]["Unavailable"];
         };
@@ -8507,6 +8564,81 @@ export interface operations {
             readonly 503: components["responses"]["Unavailable"];
         };
     };
+    readonly getVaultAgents: {
+        readonly parameters: {
+            readonly query?: {
+                /**
+                 * @description Omit for the first page; then send the previous response's next_cursor unchanged.
+                 * @example eyJ2IjoxLCJzIjoiMTIzNDUifQ
+                 */
+                readonly cursor?: components["parameters"]["Cursor"];
+                /**
+                 * @description Maximum items per page, 1 to 200, default 50. A page may hold fewer, even none, while has_more is true.
+                 * @example 50
+                 */
+                readonly limit?: components["parameters"]["Limit"];
+            };
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly requestBody?: never;
+        readonly responses: {
+            /** @description The account's live vault agents */
+            readonly 200: {
+                headers: {
+                    readonly "Cache-Control"?: "no-store";
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly "application/json": components["schemas"]["VaultAgents"];
+                };
+            };
+            readonly 400: components["responses"]["Error"];
+            readonly 401: components["responses"]["Error"];
+            readonly 403: components["responses"]["Error"];
+            readonly 404: components["responses"]["Error"];
+            readonly 429: components["responses"]["RateLimited"];
+            readonly 503: components["responses"]["Unavailable"];
+        };
+    };
+    readonly grantVaultAgent: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header: {
+                /**
+                 * @description Lowercase UUIDv7 naming this command, unique per caller and route. A retry with the same key and body returns the original result; the same key with a different body returns `409 IDEMPOTENCY_KEY_REUSED`.
+                 * @example 0198a6f6-82a5-7abc-9f2a-4f0fb437493e
+                 */
+                readonly "Idempotency-Key": components["parameters"]["IdempotencyKey"];
+            };
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly requestBody: {
+            readonly content: {
+                readonly "application/json": components["schemas"]["VaultAgentGrant"];
+            };
+        };
+        readonly responses: {
+            /** @description Relayed, not yet on chain. Follow the operation with `GET /v1/me/operations/{operation_id}`. */
+            readonly 202: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly "application/json": components["schemas"]["AgentGrantRelayed"];
+                };
+            };
+            readonly 400: components["responses"]["Error"];
+            readonly 401: components["responses"]["Error"];
+            readonly 403: components["responses"]["Error"];
+            readonly 404: components["responses"]["Error"];
+            readonly 409: components["responses"]["Error"];
+            readonly 429: components["responses"]["RateLimited"];
+            readonly 503: components["responses"]["Unavailable"];
+        };
+    };
     readonly getCopyBudget: {
         readonly parameters: {
             readonly query?: never;
@@ -9426,7 +9558,7 @@ export interface operations {
                     readonly "application/json": components["schemas"]["RfqCreated"];
                 };
             };
-            /** @description `INVALID_REQUEST`: the body is malformed, or a leg's market refuses new positions now. A refused leg is named in `field_violations` as `/legs/{i}/outcome_id`, and the message gives the reason, such as `REFERENCE_UNAVAILABLE` or `OUTSIDE_WINDOW`; the market's `eligibility` and `combo` show when it clears. */
+            /** @description `INVALID_REQUEST`: the body is malformed, or a leg's market refuses new positions now. A refused leg is named in `field_violations` as `/legs/{i}/outcome_id`, and the message gives the reason, such as `REFERENCE_UNAVAILABLE`, `OUTSIDE_WINDOW`, `CHANCE_UNAVAILABLE` for a side whose `chance` is null, or `SAME_QUESTION` for a leg whose `native_question_id` an earlier leg already has; the market's `eligibility` and `combo` show when it clears. */
             readonly 400: components["responses"]["Error"];
             readonly 401: components["responses"]["Error"];
             readonly 403: components["responses"]["Error"];
@@ -10955,7 +11087,7 @@ export interface operations {
         };
         readonly requestBody?: never;
         readonly responses: {
-            /** @description Scoped read with one freshness status; amounts are atomic USDC strings or null. No shared caching. */
+            /** @description Complete periods aggregate the positions that closed economically in them; incomplete periods return unavailable metrics. Gas stays unavailable until the payer of every transaction receipt is attributed. Scoped read with one freshness status; amounts are atomic USDC strings or null. No shared caching. */
             readonly 200: {
                 headers: {
                     readonly "Cache-Control": components["headers"]["CacheControl"];

package/dist/generated/realtime.d.ts

@@ -371,6 +371,15 @@ export type components = {
             /** @description Publication coverage, sent each heartbeat to subscriptions that set publication_freshness. Null when no checkpoint is available; treat freshness as unproven. */
             readonly data: components["schemas"]["PublicationCheckpoint"] | null;
         };
+        readonly CapitalFrame: {
+            /**
+             * @description Frame discriminator, always capital. Sent to maker subscriptions that set capital: once on subscribe, again whenever the capital changes, and at least every 5000 ms.
+             * @constant
+             */
+            readonly channel: "capital";
+            /** @description The same body as GET /v1/makers/{maker_id}/capital, read when the frame was published; its context says how fresh it is. Without a frame for 15 s, read capital over HTTP. */
+            readonly data: components["schemas"]["MakerCapital"];
+        };
         readonly Snapshot: {
             /** @description Stream cursor the snapshot is consistent with. Events after it follow on the stream; reconnect with it to replay them. */
             readonly cursor: components["schemas"]["Cursor"];
@@ -413,6 +422,8 @@ export type components = {
             readonly account_reads?: boolean;
             /** @description Opt in to publication checkpoints and a 1000 ms authenticated heartbeat. */
             readonly publication_freshness?: boolean;
+            /** @description Opt in to capital frames: the maker's capital read, pushed when it changes and at least every 5 s. Needs vault:read; without it the server closes with SUBSCRIPTION_DENIED. */
+            readonly capital?: boolean;
         };
         readonly Subscribe: {
             /**
@@ -461,6 +472,8 @@ export type components = {
                     readonly account_reads?: boolean;
                     /** @description Opt in to publication checkpoints and a 1000 ms authenticated heartbeat. */
                     readonly publication_freshness?: boolean;
+                    /** @description Opt in to capital frames: the maker's capital read, pushed when it changes and at least every 5 s. Needs vault:read; without it the server closes with SUBSCRIPTION_DENIED. */
+                    readonly capital?: boolean;
                 };
                 /**
                  * Format: uuid
@@ -990,6 +1003,88 @@ export type components = {
             /** @description When the withdrawal last changed, RFC3339 UTC. */
             readonly updated_at: components["schemas"]["Timestamp"];
         };
+        /** Format: date-time */
+        readonly "$defs-Timestamp": string;
+        /** @description Freshness of the read. Pages of one list share the snapshot bound into their cursor. */
+        readonly ReadContext: {
+            /** @description RFC3339 observation time of the oldest source this read used. */
+            readonly as_of: components["schemas"]["$defs-Timestamp"];
+            /**
+             * @description Freshness of the whole read. CURRENT: every source is fresh and reconciled. STALE: a source lags or has not reconciled, such as a catching-up projection, a pending reorg rescan or a period not fully covered; amounts may be displayed with their age but never authorize an action. UNAVAILABLE: a required source could not be read, so the amounts it backs are null.
+             * @enum {string}
+             */
+            readonly status: "CURRENT" | "STALE" | "UNAVAILABLE";
+        };
+        readonly "$defs-Amount": string;
+        /** @description Non-negative amount in atomic USDC (6 decimals, "1000000" = 1 USDC); null when it could not be established, never zero in its place. */
+        readonly UnsignedMetric: components["schemas"]["$defs-Amount"] | null;
+        readonly SignedAmount: string;
+        /** @description Signed amount in atomic USDC (6 decimals, "1000000" = 1 USDC); null when it could not be established, never zero in its place. */
+        readonly Metric: components["schemas"]["SignedAmount"] | null;
+        readonly ActionAvailability: {
+            /**
+             * @description Action this decision covers: MAKER_WITHDRAW or MAKER_QUOTE.
+             * @enum {string}
+             */
+            readonly action: "MAKER_WITHDRAW" | "MAKER_QUOTE";
+            /** @description Funding route the decision covers, e.g. MAKER_VAULT. */
+            readonly route: string;
+            /** @description Amount available for this action and route in atomic USDC (6 decimals, "1000000" = 1 USDC); null with blockers when unavailable. */
+            readonly available: components["schemas"]["UnsignedMetric"];
+            /** @description Machine-readable codes blocking the action, e.g. MAKER_WITHDRAW_PENDING or RECONCILIATION_MISMATCH; at least one when available is null. */
+            readonly blockers: readonly string[];
+        };
+        /** @description A venue admission reservation on the maker vault. */
+        readonly Reservation: {
+            /** @description Stable reservation identifier. */
+            readonly reservation_id: string;
+            /** @description Operations holding this reservation. */
+            readonly operation_ids: readonly string[];
+            /** @description Reserved amount in atomic USDC (6 decimals, "1000000" = 1 USDC). */
+            readonly value: components["schemas"]["$defs-Amount"];
+            /**
+             * @description ACTIVE: held and not yet reflected on-chain; UNKNOWN: outcome unknown, still counted as held.
+             * @enum {string}
+             */
+            readonly status: "ACTIVE" | "UNKNOWN";
+        };
+        /** @description Maker capital lanes and derived collateral, in atomic USDC (6 decimals, "1000000" = 1 USDC). Amounts are null when unavailable; context.status is their freshness. */
+        readonly MakerCapital: {
+            /** @description Freshness of this read: the oldest source observation and one status for every amount in the response. */
+            readonly context: components["schemas"]["ReadContext"];
+            /** @description Maker owner (its controller) from the same indexed vault row as the lanes. */
+            readonly owner: components["schemas"]["LowercaseNonZeroAddress"];
+            /** @description Maker signer (its quote signer) from the same indexed vault row as the lanes. The zero address means the maker was opened without one and cannot quote. */
+            readonly signer: string;
+            /** @description Maker vault lane V from the vault contract, including escrow and payables. */
+            readonly vault_gross: components["schemas"]["UnsignedMetric"];
+            /** @description Bettor net stakes escrowed in this maker's open tickets (E). */
+            readonly stake_escrow: components["schemas"]["UnsignedMetric"];
+            /** @description Settled winnings owed to ticket holders and not yet claimed (P). */
+            readonly payable_owed: components["schemas"]["UnsignedMetric"];
+            /** @description Original open maker exposure G: payout minus net stake summed over open tickets. */
+            readonly gross_open: components["schemas"]["UnsignedMetric"];
+            /** @description Maker discount lane D from the vault contract, which offsets gross_open in the requirement. */
+            readonly discount: components["schemas"]["UnsignedMetric"];
+            /** @description Collateral requirement R = max(G - min(D, G), ceil(G * floor_bps / 10000)) under the pinned release; null when floor_bps is null or an input is null. */
+            readonly requirement: components["schemas"]["UnsignedMetric"];
+            /** @description Collateral headroom F = max(V - E - P - R, 0). Not a guarantee of quote acceptance. */
+            readonly free_collateral: components["schemas"]["UnsignedMetric"];
+            /** @description Signed C = V - E - P. Excludes open-ticket valuation; not equity or NAV. */
+            readonly capital_net_of_senior_liabilities: components["schemas"]["Metric"];
+            /** @description Admission reservations H the venue holds for this maker that are not yet reflected on-chain; the sum of reservations. */
+            readonly pending_commitments: components["schemas"]["UnsignedMetric"];
+            /** @description max(F - H, 0): free collateral after unreflected commitments. Not private bot capacity. */
+            readonly free_after_pending: components["schemas"]["UnsignedMetric"];
+            /** @description Requirement floor K in basis points from the pinned release; null when the on-chain comparison mismatches, which makes requirement UNAVAILABLE. */
+            readonly floor_bps: number | null;
+            /** @description SHA-256 of the exact pinned artifact that names this deployment's chain and vault: the release artifact on chain 999, the environment's deployment manifest on 998. A client compares it with its own pinned artifact to bind the read to its deployment. */
+            readonly deployment_digest: string;
+            /** @description Decisions for MAKER_WITHDRAW and MAKER_QUOTE on the MAKER_VAULT route. MAKER_WITHDRAW is the amount a new withdrawal request may ask for: free_after_pending, so it never takes collateral from fills already admitted. The vault re-checks free collateral when the request executes after its delay; it is null with MAKER_WITHDRAW_PENDING while a request is live, or with a reconciliation blocker. MAKER_QUOTE is always null with one blocker, because quoting capacity depends on state only the maker's bot holds, such as its other live quotes. PRIVATE_QUOTE_CAPACITY_UNAVAILABLE means only that Totalis cannot compute that amount; it does not mean quoting is off, and the maker can keep quoting. A reconciliation blocker replaces it while the vault read and venue records disagree. */
+            readonly actions: readonly components["schemas"]["ActionAvailability"][];
+            /** @description Venue reservations on MAKER_VAULT that make up pending_commitments. */
+            readonly reservations: readonly components["schemas"]["Reservation"][];
+        } & unknown;
         readonly ReadSubscription: {
             /**
              * @description Account-read contract version of the subscription; always "1".

package/dist/generated/version.d.ts

@@ -1,12 +1,12 @@
-export declare const sdkVersion = "203.0.0-execution-admission";
-export declare const openapiSha256 = "2304ae546fe97a86cbb1147dccdebe50f5bb44080c26b88503356ac9dd1aa096";
-export declare const realtimeSha256 = "6491fe1d9b5fdcfefcbee71716401effa181e7bcdf1fa4623fbb83dc5b2975cd";
+export declare const sdkVersion = "205.0.0-device-vault-agents";
+export declare const openapiSha256 = "93141e0bf50949fc37ebceef7c64555eb50a70f69c71c89c8fdc12780e0dd168";
+export declare const realtimeSha256 = "1cac740e108e84ad1979f6ccc71089efd840404cb72d1612a86edc02769637e3";
 export declare const jsonSchemaSha256: {
     readonly "account.schema.json": "5106e2d53abef190990eff113f6692dd27df5848439cf5a80a42c11e89f2bef6";
     readonly "comments.schema.json": "18f4addcfa4e31c2c833fce8b8beca61d2e2ee5b6318c2ed0b479698ff56b65e";
     readonly "common.schema.json": "04f51deb3cbea448e59195e26ede3212598d58a7940fe67eb2123fd9161c5edb";
     readonly "core-exit.schema.json": "c7f617e815225cdcac95c236f8b73fbe288ee5713ff444c3be90eb915fc3a401";
-    readonly "error.schema.json": "85b2e13d449f137322779086c96d1355d0e70708647eb67b62c9b4070ed6530e";
+    readonly "error.schema.json": "56b1e1c4ea26078cb8ce7ab3c554c0415c8c82eec45821180fc0d5e891046c1e";
     readonly "hypercore.schema.json": "5b89b2bbff7ec8cc1b8717375d12ce9cd5ab6aa5af03c4fdc6cc753ef9583a2c";
     readonly "identity.schema.json": "94534b768030736f4fd1fad285f1312454ca5fbff0b1eb5fab70416a78923bd0";
     readonly "maker-access.schema.json": "49698ee0235e42064aae0397db1e0f646bdc10d9dfa10121714ba06dd69fee3b";
@@ -15,10 +15,10 @@ export declare const jsonSchemaSha256: {
     readonly "market-data.schema.json": "85db33fac6a29b0fa87a500bfda947d0ab3913b13f1c26663d4a7c0484c35786";
     readonly "product-metadata.schema.json": "7c8ffbde878a0aedaed16814fcfd2e80038054b140886cc8736bb7b508042631";
     readonly "quote.schema.json": "5616260d399d022bde2d0130cc9f8a09f71a3dc877276adf796c7a174d21b59a";
-    readonly "realtime.schema.json": "6491fe1d9b5fdcfefcbee71716401effa181e7bcdf1fa4623fbb83dc5b2975cd";
+    readonly "realtime.schema.json": "1cac740e108e84ad1979f6ccc71089efd840404cb72d1612a86edc02769637e3";
 };
 export declare const operations: {
-    readonly client: readonly ["abandonCoreExit", "acceptQuote", "activeCoreExits", "admitOwnMaker", "admitPartnerWallet", "bindEmbeddedWallet", "cancelRfq", "confirmComboCopyAgent", "confirmCoreCopyAgent", "createCashout", "createComment", "createCoreExit", "createDeposit", "createRfq", "createRunOffClaim", "createWalletChallenge", "createWalletSession", "createWithdrawal", "deleteComment", "editComment", "endWalletSession", "followTrader", "getAcceptance", "getAccountActivity", "getAccountPnl", "getAccountPosition", "getBalances", "getCopyAgents", "getCopyBudget", "getCopySettings", "getCopySummary", "getCoreExit", "getDeployment", "getHypercoreBalance", "getHypercorePortfolio", "getHypercoreSettlementCredits", "getIdentity", "getMakerActivity", "getMakerCapital", "getMakerExposure", "getMakerPerformance", "getMakerPosition", "getMakerQuotes", "getMakerTelemetry", "getMakerVaultFundingTransaction", "getMakerWithdrawal", "getMarket", "getMarketDataConfig", "getMarketDefinitions", "getMarketHistory", "getMarketRecurringRound", "getMarketReferenceCloses", "getMarketScoreTimeline", "getMarketStats", "getOperation", "getOwnMaker", "getPartnerReport", "getPerpMarks", "getProfitLeaderboard", "getQuestion", "getQuestionRecurringRound", "getQuestionScoreTimeline", "getRfq", "getSeries", "getSuggestedCombo", "getTaxonomy", "getTrader", "getTraderPnl", "getUsernameAvailability", "getVolumeLeaderboard", "getWithdrawal", "grantComboCopyAgent", "likeComment", "listAccountActivity", "listAccountPositions", "listComboCopies", "listCommentReplies", "listComments", "listControlledMakers", "listCopiedFills", "listCopyTrades", "listDiscovery", "listFollows", "listMakerActivity", "listMakerPositions", "listMakerQuoteHistory", "listMarkets", "listOperations", "listQuotes", "listTraderPositions", "listTraderTrades", "reactComment", "recordAcquisition", "refreshPicture", "requestComboCopyAgent", "requestCoreCopyAgent", "revokeComboCopyAgent", "searchCatalog", "setAvatar", "setCopyAllocation", "setCopySettings", "setPublicProfile", "setUsername", "stream", "streamMarkets", "switchOffComboCopyAgent", "switchOffCoreCopyAgent", "unfollowTrader", "unlikeComment", "unreactComment"];
+    readonly client: readonly ["abandonCoreExit", "acceptQuote", "activeCoreExits", "admitOwnMaker", "admitPartnerWallet", "bindEmbeddedWallet", "cancelRfq", "confirmComboCopyAgent", "confirmCoreCopyAgent", "createCashout", "createComment", "createCoreExit", "createDeposit", "createRfq", "createRunOffClaim", "createWalletChallenge", "createWalletSession", "createWithdrawal", "deleteComment", "editComment", "endWalletSession", "followTrader", "getAcceptance", "getAccountActivity", "getAccountPnl", "getAccountPosition", "getBalances", "getCopyAgents", "getCopyBudget", "getCopySettings", "getCopySummary", "getCoreExit", "getDeployment", "getHypercoreBalance", "getHypercorePortfolio", "getHypercoreSettlementCredits", "getIdentity", "getMakerActivity", "getMakerCapital", "getMakerExposure", "getMakerPerformance", "getMakerPosition", "getMakerQuotes", "getMakerTelemetry", "getMakerVaultFundingTransaction", "getMakerWithdrawal", "getMarket", "getMarketDataConfig", "getMarketDefinitions", "getMarketHistory", "getMarketRecurringRound", "getMarketReferenceCloses", "getMarketScoreTimeline", "getMarketStats", "getOperation", "getOwnMaker", "getPartnerReport", "getPerpMarks", "getProfitLeaderboard", "getQuestion", "getQuestionRecurringRound", "getQuestionScoreTimeline", "getRfq", "getSeries", "getSuggestedCombo", "getTaxonomy", "getTrader", "getTraderPnl", "getUsernameAvailability", "getVaultAgents", "getVolumeLeaderboard", "getWithdrawal", "grantComboCopyAgent", "grantVaultAgent", "likeComment", "listAccountActivity", "listAccountPositions", "listComboCopies", "listCommentReplies", "listComments", "listControlledMakers", "listCopiedFills", "listCopyTrades", "listDiscovery", "listFollows", "listMakerActivity", "listMakerPositions", "listMakerQuoteHistory", "listMarkets", "listOperations", "listQuotes", "listTraderPositions", "listTraderTrades", "reactComment", "recordAcquisition", "refreshPicture", "requestComboCopyAgent", "requestCoreCopyAgent", "revokeComboCopyAgent", "searchCatalog", "setAvatar", "setCopyAllocation", "setCopySettings", "setPublicProfile", "setUsername", "stream", "streamMarkets", "switchOffComboCopyAgent", "switchOffCoreCopyAgent", "unfollowTrader", "unlikeComment", "unreactComment"];
     readonly maker: readonly ["cancelQuote", "confirmQuote", "createCollateralReduction", "createQuote", "getAccountActivity", "getAccountPosition", "getCollateralReduction", "getDeployment", "getMakerActivity", "getMakerCapital", "getMakerExposure", "getMakerPerformance", "getMakerPosition", "getMakerQuotes", "getMakerTelemetry", "getMakerTelemetryPublication", "getMakerVaultFundingTransaction", "getMakerWithdrawal", "getMarket", "getMarketHistory", "getMarketRecurringRound", "getMarketReferenceCloses", "getOperation", "getQuestion", "getQuestionRecurringRound", "getRfq", "getSeries", "getTaxonomy", "listAccountActivity", "listAccountPositions", "listDiscovery", "listMakerAcceptances", "listMakerActivity", "listMakerPositions", "listMakerQuoteHistory", "listMarkets", "listOperations", "listRfqs", "publishMakerTelemetry", "releaseQuoteLease", "renewQuoteLease", "searchCatalog", "stream", "submitMakerSelfFundedTransaction"];
     readonly operator: readonly ["live", "ready"];
 };

package/dist/generated/version.js

@@ -1,13 +1,13 @@
 // Generated by scripts/generate.mjs; do not edit.
-export const sdkVersion = "203.0.0-execution-admission";
-export const openapiSha256 = "2304ae546fe97a86cbb1147dccdebe50f5bb44080c26b88503356ac9dd1aa096";
-export const realtimeSha256 = "6491fe1d9b5fdcfefcbee71716401effa181e7bcdf1fa4623fbb83dc5b2975cd";
+export const sdkVersion = "205.0.0-device-vault-agents";
+export const openapiSha256 = "93141e0bf50949fc37ebceef7c64555eb50a70f69c71c89c8fdc12780e0dd168";
+export const realtimeSha256 = "1cac740e108e84ad1979f6ccc71089efd840404cb72d1612a86edc02769637e3";
 export const jsonSchemaSha256 = {
     "account.schema.json": "5106e2d53abef190990eff113f6692dd27df5848439cf5a80a42c11e89f2bef6",
     "comments.schema.json": "18f4addcfa4e31c2c833fce8b8beca61d2e2ee5b6318c2ed0b479698ff56b65e",
     "common.schema.json": "04f51deb3cbea448e59195e26ede3212598d58a7940fe67eb2123fd9161c5edb",
     "core-exit.schema.json": "c7f617e815225cdcac95c236f8b73fbe288ee5713ff444c3be90eb915fc3a401",
-    "error.schema.json": "85b2e13d449f137322779086c96d1355d0e70708647eb67b62c9b4070ed6530e",
+    "error.schema.json": "56b1e1c4ea26078cb8ce7ab3c554c0415c8c82eec45821180fc0d5e891046c1e",
     "hypercore.schema.json": "5b89b2bbff7ec8cc1b8717375d12ce9cd5ab6aa5af03c4fdc6cc753ef9583a2c",
     "identity.schema.json": "94534b768030736f4fd1fad285f1312454ca5fbff0b1eb5fab70416a78923bd0",
     "maker-access.schema.json": "49698ee0235e42064aae0397db1e0f646bdc10d9dfa10121714ba06dd69fee3b",
@@ -16,7 +16,7 @@ export const jsonSchemaSha256 = {
     "market-data.schema.json": "85db33fac6a29b0fa87a500bfda947d0ab3913b13f1c26663d4a7c0484c35786",
     "product-metadata.schema.json": "7c8ffbde878a0aedaed16814fcfd2e80038054b140886cc8736bb7b508042631",
     "quote.schema.json": "5616260d399d022bde2d0130cc9f8a09f71a3dc877276adf796c7a174d21b59a",
-    "realtime.schema.json": "6491fe1d9b5fdcfefcbee71716401effa181e7bcdf1fa4623fbb83dc5b2975cd"
+    "realtime.schema.json": "1cac740e108e84ad1979f6ccc71089efd840404cb72d1612a86edc02769637e3"
 };
 export const operations = {
     "client": [
@@ -89,9 +89,11 @@ export const operations = {
         "getTrader",
         "getTraderPnl",
         "getUsernameAvailability",
+        "getVaultAgents",
         "getVolumeLeaderboard",
         "getWithdrawal",
         "grantComboCopyAgent",
+        "grantVaultAgent",
         "likeComment",
         "listAccountActivity",
         "listAccountPositions",

package/dist/stream.d.ts

@@ -9,6 +9,8 @@ export type StreamEventOf<T extends StreamEventType> = StreamEvent extends infer
 } ? T extends K ? E : never : never : never;
 export type StreamSnapshot = Schemas["Snapshot"];
 export type StreamEventFrame = Schemas["EventFrame"];
+/** A maker's capital, the same body as `GET /v1/makers/{maker_id}/capital`. */
+export type StreamCapital = Schemas["CapitalFrame"]["data"];
 /** What a stream follows: the account (optionally with every open RFQ), or one maker. The client manages the cursor. */
 export type StreamSubscription = Omit<Schemas["AccountSubscription"], "cursor"> | Omit<Schemas["MakerSubscription"], "cursor">;
 /** A server frame: `channel` names what `data` carries. */
@@ -36,7 +38,11 @@ export type StreamOptions = {
     /** The WebSocket origin, such as `wss://hip4-ws.totalis.trade`. Defaults to `baseUrl`, else the environment's stream host. */
     readonly streamBaseUrl?: string;
     readonly accessToken: AccessToken;
-    /** `publication_freshness` (1 s heartbeats and publication checkpoints) defaults on for an account, off for a maker. */
+    /**
+     * `publication_freshness` (1 s heartbeats and publication checkpoints) defaults on. Its
+     * heartbeats are what the silence timeout watches: a stream without it has no watchdog
+     * once subscribed, because WebSocket pings are invisible to clients.
+     */
     readonly subscription: StreamSubscription;
     /**
      * Resume after this cursor, for example one a bot persisted from `event.cursor`:
@@ -52,16 +58,25 @@ export type StreamOptions = {
     };
     /** Reconnect after this long without a frame. Default 5000 ms with publication freshness, otherwise off. */
     readonly silenceTimeoutMs?: number;
+    /** Reconnect when a connect has not subscribed after this long, including while `accessToken` resolves. Default 10000 ms. */
+    readonly connectTimeoutMs?: number;
 };
 type Listeners = {
     /** A new event, in order and deduplicated, with the frame that carried it. */
     event: (event: StreamEvent, frame: StreamEventFrame) => void;
     snapshot: (snapshot: StreamSnapshot) => void;
+    /**
+     * A maker subscription that set `capital`: its capital on subscribe, on every change and at
+     * least every 5 s, so a bot need not read capital before it quotes. Without one for 15 s,
+     * read capital over HTTP.
+     */
+    capital: (capital: StreamCapital) => void;
     /** Local state built from earlier events is void; replace it from the snapshot that follows. */
     reset: () => void;
     status: (status: StreamStatus) => void;
     /** Every parsed frame, including publication checkpoints, market refreshes and read invalidations. */
     frame: (frame: StreamFrame) => void;
+    /** A failure. The stream reconnects unless it is a StreamClosedError, so a run of these means it cannot get back. */
     error: (error: unknown) => void;
 };
 /**
@@ -107,6 +122,9 @@ export declare class TotalisStream {
     private nextDelayMs;
     private timer;
     private silence;
+    private connecting;
+    /** Counts connects, so one abandoned while its token resolved never opens a socket. */
+    private generation;
     private reauthorized;
     /** A REPLAY resume with publication freshness: live waits for the first publication frame, which follows the replayed events. */
     private replaying;
@@ -138,5 +156,7 @@ export declare class TotalisStream {
     private onClose;
     private disconnected;
     private watchSilence;
+    /** Gives up on the current connect or socket, reports why and reconnects. */
+    private abandon;
 }
 export {};

package/dist/stream.js

@@ -63,12 +63,15 @@ export class TotalisStream {
     nextDelayMs;
     timer;
     silence;
+    connecting;
+    /** Counts connects, so one abandoned while its token resolved never opens a socket. */
+    generation = 0;
     reauthorized = false;
     /** A REPLAY resume with publication freshness: live waits for the first publication frame, which follows the replayed events. */
     replaying = false;
     seen = [];
     listeners = {
-        event: new Set(), snapshot: new Set(), reset: new Set(), status: new Set(), frame: new Set(), error: new Set(),
+        event: new Set(), snapshot: new Set(), capital: new Set(), reset: new Set(), status: new Set(), frame: new Set(), error: new Set(),
     };
     constructor(options) {
         this.options = options;
@@ -87,6 +90,7 @@ export class TotalisStream {
         this.setStatus("closed");
         clearTimeout(this.timer);
         clearTimeout(this.silence);
+        clearTimeout(this.connecting);
         const socket = this.socket;
         this.socket = undefined;
         socket?.close(1000);
@@ -172,17 +176,20 @@ export class TotalisStream {
         this.emit("event", event, frame);
     }
     freshness() {
-        const { type, publication_freshness = type === "account" } = this.options.subscription;
+        const { publication_freshness = true } = this.options.subscription;
         return publication_freshness;
     }
     async connect() {
         this.replaying = false;
         this.setStatus("connecting");
-        const { accessToken, environment = "production", baseUrl, streamBaseUrl } = this.options;
+        const generation = ++this.generation;
+        const { accessToken, environment = "production", baseUrl, streamBaseUrl, connectTimeoutMs = 10_000 } = this.options;
+        clearTimeout(this.connecting);
+        this.connecting = setTimeout(() => this.abandon("unsubscribed", `stream not subscribed after ${connectTimeoutMs} ms`), connectTimeoutMs);
         let socket;
         try {
             const token = typeof accessToken === "function" ? await accessToken() : accessToken;
-            if (this.status === "closed")
+            if (this.status === "closed" || generation !== this.generation)
                 return;
             const open = this.options.webSocket ?? openWebSocket;
             const url = realtimeUrl(environment, baseUrl, streamBaseUrl);
@@ -191,6 +198,9 @@ export class TotalisStream {
                 : open(url, [realtimeProtocol], { ...this.options.headers, Authorization: `Bearer ${token}` });
         }
         catch (error) {
+            if (generation !== this.generation)
+                return;
+            clearTimeout(this.connecting);
             this.emit("error", error);
             this.disconnected();
             return;
@@ -221,7 +231,7 @@ export class TotalisStream {
         this.watchSilence();
     }
     subscribe() {
-        const { publication_freshness = this.options.subscription.type === "account", ...subscription } = this.options.subscription;
+        const { publication_freshness = true, ...subscription } = this.options.subscription;
         return {
             method: "subscribe",
             subscription: { ...subscription, ...(publication_freshness ? { publication_freshness } : {}), ...(this.cursor === undefined ? {} : { cursor: this.cursor }) },
@@ -242,6 +252,7 @@ export class TotalisStream {
                 }
                 break;
             case "subscriptionResponse": {
+                clearTimeout(this.connecting);
                 const ready = frame.data;
                 this.clockOffsetMs = Date.parse(ready.server_time) - Date.now();
                 if (ready.resume === "REPLAY") {
@@ -271,6 +282,9 @@ export class TotalisStream {
             case "event":
                 this.apply(frame.data, frame);
                 break;
+            case "capital":
+                this.emit("capital", frame.data);
+                break;
             case "reset":
                 this.reset();
                 break;
@@ -287,6 +301,7 @@ export class TotalisStream {
     onClose(code, reason) {
         this.socket = undefined;
         clearTimeout(this.silence);
+        clearTimeout(this.connecting);
         if (this.status === "closed")
             return;
         const retry = errorRegistry[reason]?.retry ?? "BACKOFF";
@@ -321,11 +336,17 @@ export class TotalisStream {
         clearTimeout(this.silence);
         if (silenceTimeoutMs === undefined)
             return;
-        this.silence = setTimeout(() => {
-            const socket = this.socket;
-            this.socket = undefined;
-            socket?.close(4000, "silent");
-            this.disconnected();
-        }, silenceTimeoutMs);
+        this.silence = setTimeout(() => this.abandon("silent", `stream silent for ${silenceTimeoutMs} ms`), silenceTimeoutMs);
+    }
+    /** Gives up on the current connect or socket, reports why and reconnects. */
+    abandon(reason, message) {
+        this.generation++;
+        clearTimeout(this.silence);
+        clearTimeout(this.connecting);
+        const socket = this.socket;
+        this.socket = undefined;
+        socket?.close(4000, reason);
+        this.emit("error", new Error(message));
+        this.disconnected();
     }
 }

package/dist/totalis.d.ts

@@ -185,6 +185,15 @@ export type TotalisOptions = Omit<ApiClientOptions, "accessToken"> & {
     readonly accessToken: AccessToken;
     /** The account's signer (GET /v1/me `wallet`); required for flows that sign. Never stored. */
     readonly signer?: SignerInput;
+    /**
+     * A key the account granted as a vault agent (`grantVaultAgent`). When set,
+     * it signs the account's TakerAccept, SellBack, CashoutTransfer and Exits to
+     * its wallet or HyperCore instead of `signer`, so those need no wallet
+     * prompt. `signer` still names the account and signs everything else: USDC
+     * authorizations, HyperCore actions, grants and run-off claims. The venue
+     * refuses an agent whose grant ends before the signed expiry.
+     */
+    readonly agent?: SignerInput;
     /** Stream options; `subscription` adds account subscription fields such as `open_rfqs`. */
     readonly stream?: Omit<StreamOptions, "subscription" | "accessToken" | "environment" | "baseUrl" | "streamBaseUrl"> & {
         readonly subscription?: Omit<Extract<StreamSubscription, {
@@ -638,6 +647,27 @@ export declare function createTotalis(options: TotalisOptions): {
         readonly signal?: AbortSignal;
     }) => Promise<CoreExit>;
     directDepositCalls: (amount: Amount) => Promise<readonly WalletCall[]>;
+    grantVaultAgent: (request: {
+        readonly agent: string;
+        readonly validUntil: number | string;
+        readonly nonce?: number | string;
+        readonly idempotencyKey?: string;
+    }) => Promise<{
+        readonly operation_id: import("./generated/openapi.js").components["schemas"]["Hash32"];
+    }>;
+    revokeVaultAgent: (request: {
+        readonly agent: string;
+        readonly nonce?: number | string;
+        readonly idempotencyKey?: string;
+    }) => Promise<{
+        readonly operation_id: import("./generated/openapi.js").components["schemas"]["Hash32"];
+    }>;
+    vaultAgents: (limit?: number) => AsyncGenerator<{
+        readonly agent: import("./generated/openapi.js").components["schemas"]["Address"];
+        readonly valid_until: import("./generated/openapi.js").components["schemas"]["UInt64String"];
+        readonly nonce: import("./generated/openapi.js").components["schemas"]["UInt64String"];
+        readonly copy_agent: boolean;
+    }, void, any>;
     /** Render an RFQ's live quotes (entry or cash-out) from the stream; `[]` while the stream is down. */
     watchQuotes: (rfqId: string, listener: (quotes: readonly Quote[], serverNowMs: number) => void) => () => void;
     /** Issue a personal `ttk_` key; the signer must be the account wallet (embedded, or a wallet-only account's own). */

package/dist/totalis.js

@@ -7,7 +7,8 @@ import { spendableCash } from "./money.js";
 import { ApiError, backoffDelay, envelope, NetworkError, randomBytes32, resendable, retryingFetch, sendOnce, singleFetch, sleep, unwrap, uuidv7 } from "./request.js";
 import { toTotalisSigner } from "./signer.js";
 import { TotalisStream } from "./stream.js";
-import { address, cashoutTransferTypedData, exitTypedData, receiveWithAuthorizationTypedData, sellBackTypedData, takerAcceptTypedData, payoutNonce, transferWithAuthorizationTypedData, } from "./typed-data.js";
+import { items } from "./pagination.js";
+import { address, agentGrantTypedData, cashoutTransferTypedData, exitTypedData, receiveWithAuthorizationTypedData, sellBackTypedData, takerAcceptTypedData, payoutNonce, transferWithAuthorizationTypedData, } from "./typed-data.js";
 /**
  * What an entry's bridge may have moved to its wallet, by its state: nothing
  * before it is sent, once discarded or refused. Only `LANDED` proves it
@@ -314,7 +315,7 @@ function streamQuotes(stream, read) {
  * stream; HTTP reads recover after a reconnect or answer a doorbell.
  */
 export function createTotalis(options) {
-    const { environment, signer: signerInput, stream: streamOptions, streamBaseUrl, accessToken, ...clientOptions } = options;
+    const { environment, signer: signerInput, agent: agentInput, stream: streamOptions, streamBaseUrl, accessToken, ...clientOptions } = options;
     const client = audienceClient(environment, { ...clientOptions, accessToken });
     const keys = createApiKeyClient(environment, { ...clientOptions, accessToken });
     const stream = new TotalisStream({
@@ -337,6 +338,22 @@ export function createTotalis(options) {
     };
     const signer = signerInput === undefined ? undefined : toTotalisSigner(signerInput);
     const requireSigner = () => signer ?? Promise.reject(new Error("this flow needs a signer"));
+    const agent = agentInput === undefined ? undefined : toTotalisSigner(agentInput);
+    // The vault reverts a grant whose nonce does not exceed the agent's last, so
+    // two grants for one agent in one second (a grant, then its revoke) must not
+    // share one, and a default after an explicit nonce must exceed it too. The
+    // vault counts per agent, so the mark is per agent.
+    const lastGrantNonce = new Map();
+    const grantNonce = (agentAddress, explicit) => {
+        const last = lastGrantNonce.get(agentAddress) ?? 0n;
+        const clock = BigInt(now());
+        const nonce = explicit !== undefined ? BigInt(explicit) : clock > last ? clock : last + 1n;
+        if (nonce < 1n || nonce > 2n ** 64n - 1n)
+            throw new Error(`grant nonce ${nonce} is outside 1..2^64-1`);
+        if (nonce > last)
+            lastGrantNonce.set(agentAddress, nonce);
+        return String(nonce);
+    };
     let deploymentRead;
     const deployment = () => (deploymentRead ??= client.GET("/v1/deployment").then(unwrap).catch((error) => {
         deploymentRead = undefined;
@@ -585,7 +602,7 @@ export function createTotalis(options) {
         const signer = await requireSigner();
         const account = await signer.address();
         const chain = await deployment();
-        return { signer, account, chain, scope: { account, chainId: chain.chain_id, vault: address(chain.vault_address.toLowerCase()) } };
+        return { signer, vaultSigner: agent ?? signer, account, chain, scope: { account, chainId: chain.chain_id, vault: address(chain.vault_address.toLowerCase()) } };
     }
     /** A stored record signs nothing more, so without a signer the session's wallet (GET /v1/me) stands for the account. */
     async function checkScope(signed) {
@@ -626,14 +643,14 @@ export function createTotalis(options) {
     }
     async function signEntryWith(request, funding) {
         const { quote, cash } = request;
-        const { signer, account, chain, scope } = await recordScope();
+        const { signer, vaultSigner, account, chain, scope } = await recordScope();
         if (quote.entry.taker.toLowerCase() !== account)
             throw new Error("the quote is for another taker");
         const stake = BigInt(quote.entry.stake);
         const core = request.core === undefined || request.core === null ? request.core : BigInt(request.core);
         // Known cash is planned before any prompt, so a plan that fails asks the wallet for nothing.
         let plan = funding === "plan" && cash !== undefined ? planEntry(stake, core, cash) : undefined;
-        const signing = signer.signTypedData(takerAcceptTypedData(chain, quote.entry));
+        const signing = vaultSigner.signTypedData(takerAcceptTypedData(chain, quote.entry));
         if (funding === "plan" && cash === undefined) {
             // The quote signature names no amount, so the wallet signs it while the balances are read; a refusal stops the read and is the call's error.
             const reading = new AbortController();
@@ -682,12 +699,12 @@ export function createTotalis(options) {
     /** Sign a cash-out quote as the position's owner without sending it: the same SellBack or CashoutTransfer digest the maker signs. */
     async function signCashout(request) {
         const { quote } = request;
-        const { signer, account, chain, scope } = await recordScope();
+        const { vaultSigner, account, chain, scope } = await recordScope();
         const seller = quote.kind === "SELL_BACK" ? quote.sell_back.owner : quote.transfer.seller;
         if (seller.toLowerCase() !== account)
             throw new Error("the quote sells another owner's position");
         const typedData = quote.kind === "SELL_BACK" ? sellBackTypedData(chain, quote.sell_back) : cashoutTransferTypedData(chain, quote.transfer);
-        const taker_signature = await signer.signTypedData(typedData);
+        const taker_signature = await vaultSigner.signTypedData(typedData);
         return {
             kind: "CASHOUT", acceptanceId: request.acceptanceId ?? uuidv7(), rfqId: quote.rfq_id, quoteId: quote.quote_id, ...scope,
             positionId: termsOf(quote).position_id, command: { taker_signature },
@@ -913,7 +930,7 @@ export function createTotalis(options) {
         let vault_withdrawal;
         if (shortfall > 0n) {
             const exit = { amount: shortfall.toString(), expiry: String(issued + 600), salt: BigInt(randomBytes32()).toString() };
-            vault_withdrawal = { ...exit, signature: await signer.signTypedData(exitTypedData(chain, { account, to: account, ...exit })) };
+            vault_withdrawal = { ...exit, signature: await (agent ?? signer).signTypedData(exitTypedData(chain, { account, to: account, ...exit })) };
             deadline = issued + 600;
         }
         // The venue requires the payout to outlive the vault leg by 300 s; a minute more absorbs clock skew.
@@ -1065,7 +1082,7 @@ export function createTotalis(options) {
         const to = address(route.router_address.toLowerCase());
         // A minute inside the venue's maximum life absorbs clock skew.
         const exit = { amount: BigInt(request.amount).toString(), expiry: String(now() + Math.min(route.maximum_life_seconds - 60, 600)), salt: BigInt(randomBytes32()).toString() };
-        const signature = await signer.signTypedData(exitTypedData(chain, { account, to, ...exit }));
+        const signature = await (agent ?? signer).signTypedData(exitTypedData(chain, { account, to, ...exit }));
         const body = envelope({ account, to, ...exit, signature, purpose: request.purpose ?? "ORDER", ...(request.activationFeeAccepted ? { activation_fee_accepted: true } : {}) });
         return { exitId, account, body };
     }
@@ -1190,6 +1207,36 @@ export function createTotalis(options) {
             throw new Error(`core exit ${exitId} ended ${exit.status}, not credited on HyperCore`);
         return exit;
     }
+    /**
+     * Grant `agent`, a key one of the account's devices holds, as a vault agent
+     * until `validUntil` (unix seconds, at most 180 days away): the account's
+     * `signer` signs the AgentGrant and Totalis relays it to the vault, paying
+     * the gas. Pass that key as `agent` to sign accepts, cash-outs and Exits
+     * back to the account without a wallet prompt. The nonce defaults to the
+     * venue's clock in seconds, and rises past this client's last grant, so a
+     * later grant or revoke supersedes an earlier one. The
+     * 202 is admission: follow `operation_id` with `waitForOperation`; the agent
+     * signs once it lands. A resend of the same `idempotencyKey` returns the
+     * same operation.
+     */
+    async function grantVaultAgent(request) {
+        const signer = await requireSigner();
+        const account = address((await signer.address()).toLowerCase());
+        const agentAddress = address(request.agent.toLowerCase());
+        const grant = { account, agent: agentAddress, valid_until: String(request.validUntil), nonce: grantNonce(agentAddress, request.nonce) };
+        const signature = await signer.signTypedData(agentGrantTypedData(await deployment(), grant));
+        const key = request.idempotencyKey ?? uuidv7();
+        return sendOnce(() => client.POST("/v1/me/vault-agents", { params: { header: idempotency(key) },
+            body: { agent: grant.agent, valid_until: grant.valid_until, nonce: grant.nonce, signature } }));
+    }
+    /** The agent keeps signing until the revoke's operation lands; `waitForOperation` before treating it as gone. */
+    function revokeVaultAgent(request) {
+        return grantVaultAgent({ ...request, validUntil: 0 });
+    }
+    /** The account's live vault agents, every page; `copy_agent` marks a Combo copy agent's key. */
+    function vaultAgents(limit = 200) {
+        return items((query) => client.GET("/v1/me/vault-agents", { params: { query: { ...query, limit } } }).then(unwrap), (page) => page.agents);
+    }
     /**
      * The transactions a wallet sends itself to deposit USDC from HyperEVM into
      * its vault balance, paying its own gas: approve the vault for `amount`, then
@@ -1239,6 +1286,9 @@ export function createTotalis(options) {
         sendReturnToCore,
         returnToCore,
         directDepositCalls,
+        grantVaultAgent,
+        revokeVaultAgent,
+        vaultAgents,
         /** Render an RFQ's live quotes (entry or cash-out) from the stream; `[]` while the stream is down. */
         watchQuotes,
         /** Issue a personal `ttk_` key; the signer must be the account wallet (embedded, or a wallet-only account's own). */

package/dist/typed-data.d.ts

@@ -127,15 +127,34 @@ export declare const totalisTypes: {
         readonly name: "salt";
         readonly type: "uint256";
     }];
+    readonly AgentGrant: readonly [{
+        readonly name: "account";
+        readonly type: "address";
+    }, {
+        readonly name: "agent";
+        readonly type: "address";
+    }, {
+        readonly name: "validUntil";
+        readonly type: "uint64";
+    }, {
+        readonly name: "nonce";
+        readonly type: "uint64";
+    }];
 };
 export type TotalisPrimaryType = Exclude<keyof typeof totalisTypes, "Leg">;
-/** Who signs each struct: the maker's signer, the taker's signer, or either side of a cash-out. */
+/**
+ * Who signs each struct: the maker's signer, the taker's signer, or either
+ * side of a cash-out. A vault agent the account granted may sign the taker's
+ * TakerAccept, SellBack and CashoutTransfer, and an Exit back to the account;
+ * only the account itself signs an AgentGrant.
+ */
 export declare const signedBy: {
     readonly Quote: "maker";
     readonly TakerAccept: "taker";
     readonly SellBack: "maker_and_taker";
     readonly CashoutTransfer: "maker_and_taker";
     readonly Exit: "taker";
+    readonly AgentGrant: "taker";
 };
 /** The vault deployment a signature binds to: GET /v1/deployment. */
 export type TotalisDeployment = Pick<Schemas["Deployment"], "chain_id" | "vault_address">;
@@ -201,6 +220,17 @@ export declare function exitTypedData(deployment: TotalisDeployment, exit: {
     expiry: string;
     salt: string;
 }): TotalisTypedData<"Exit">;
+/**
+ * The account's grant to a vault agent: a key it holds signs for the account
+ * until `valid_until` (unix seconds, at most 180 days away; 0 revokes). The
+ * nonce must exceed the agent's last grant. Relay it with POST /v1/me/vault-agents.
+ */
+export declare function agentGrantTypedData(deployment: TotalisDeployment, grant: {
+    account: Hex;
+    agent: Hex;
+    valid_until: string;
+    nonce: string;
+}): TotalisTypedData<"AgentGrant">;
 export declare const domainTypes: {
     readonly EIP712Domain: readonly [{
         readonly name: "name";

package/dist/typed-data.js

@@ -47,14 +47,26 @@ export const totalisTypes = {
         { name: "expiry", type: "uint64" },
         { name: "salt", type: "uint256" },
     ],
+    AgentGrant: [
+        { name: "account", type: "address" },
+        { name: "agent", type: "address" },
+        { name: "validUntil", type: "uint64" },
+        { name: "nonce", type: "uint64" },
+    ],
 };
-/** Who signs each struct: the maker's signer, the taker's signer, or either side of a cash-out. */
+/**
+ * Who signs each struct: the maker's signer, the taker's signer, or either
+ * side of a cash-out. A vault agent the account granted may sign the taker's
+ * TakerAccept, SellBack and CashoutTransfer, and an Exit back to the account;
+ * only the account itself signs an AgentGrant.
+ */
 export const signedBy = {
     Quote: "maker",
     TakerAccept: "taker",
     SellBack: "maker_and_taker",
     CashoutTransfer: "maker_and_taker",
     Exit: "taker",
+    AgentGrant: "taker",
 };
 /** A 20-byte hex address, or a TypeError. */
 export function address(value) {
@@ -122,6 +134,17 @@ export function exitTypedData(deployment, exit) {
         message: { account: exit.account, to: exit.to, amount: BigInt(exit.amount), expiry: BigInt(exit.expiry), salt: BigInt(exit.salt) },
     };
 }
+/**
+ * The account's grant to a vault agent: a key it holds signs for the account
+ * until `valid_until` (unix seconds, at most 180 days away; 0 revokes). The
+ * nonce must exceed the agent's last grant. Relay it with POST /v1/me/vault-agents.
+ */
+export function agentGrantTypedData(deployment, grant) {
+    return {
+        domain: domain(deployment), types: { AgentGrant: totalisTypes.AgentGrant }, primaryType: "AgentGrant",
+        message: { account: address(grant.account), agent: address(grant.agent), validUntil: BigInt(grant.valid_until), nonce: BigInt(grant.nonce) },
+    };
+}
 // ---------------------------------------------------------------------------
 // EIP-712 hashing, so makers can compute quote_digest and every signer can be
 // checked against the contract's vectors without a wallet library.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@totalis/hip4-client",
-  "version": "0.74.0",
+  "version": "0.76.0",
   "description": "Totalis HIP-4 SDK: typed HTTP clients, signer-agnostic typed data, a retrying request layer, pagination, a realtime stream and taker/maker flows",
   "type": "module",
   "files": [