@waterx/sdk 2.4.1 → 3.0.1

package/dist/src/base-client.js

@@ -0,0 +1,97 @@
+/**
+ * Shared transport base for the two product-line clients (`PerpClient`,
+ * `PredictClient`).
+ *
+ * Holds the half that is identical across both lines: the gRPC client
+ * construction (network + URL resolution), the read-only gRPC convenience
+ * wrappers, `simulate` / `signAndExecuteTransaction`, and the `packageIds()`
+ * lookup. The config-schema half (per-line typed lookups like `getMarket` /
+ * `marketRegistry`) legitimately differs and lives on each subclass.
+ *
+ * `Cfg` is the line's parsed `waterx-config` JSON type. Only the fields needed
+ * here are constrained ({@link BaseLineConfig}); each subclass narrows `Cfg` to
+ * its full config type so `this.config` stays precisely typed.
+ */
+import { SuiGrpcClient } from "@mysten/sui/grpc";
+/** Default Sui gRPC base URLs by network (public Mysten fullnodes). */
+export const DEFAULT_GRPC_URLS = {
+    MAINNET: "https://fullnode.mainnet.sui.io:443",
+    TESTNET: "https://fullnode.testnet.sui.io:443",
+};
+function isPublishedPackage(value) {
+    return (!!value &&
+        typeof value === "object" &&
+        "published_at" in value &&
+        typeof value.published_at === "string" &&
+        value.published_at.length > 0);
+}
+export class BaseLineClient {
+    /** gRPC client — all RPC including `simulateTransaction`. */
+    grpcClient;
+    /** Network identifier in upper case (`MAINNET` / `TESTNET`). */
+    network;
+    /** Parsed canonical `waterx-config` JSON for this line. */
+    config;
+    constructor(network, config, opts = {}) {
+        this.network = network;
+        this.config = config;
+        const grpcUrl = opts.grpcUrl ?? config.grpcUrl ?? DEFAULT_GRPC_URLS[network];
+        this.grpcClient = new SuiGrpcClient({
+            baseUrl: grpcUrl,
+            network: network.toLowerCase(),
+        });
+    }
+    // ========================================================
+    // gRPC convenience wrappers
+    // ========================================================
+    getObject(objectId) {
+        return this.grpcClient.getObject({ objectId });
+    }
+    getObjects(objectIds) {
+        return this.grpcClient.getObjects({ objectIds });
+    }
+    listOwnedObjects(owner) {
+        return this.grpcClient.listOwnedObjects({ owner });
+    }
+    listCoins(params) {
+        return this.grpcClient.listCoins(params);
+    }
+    getBalance(params) {
+        return this.grpcClient.getBalance(params);
+    }
+    listDynamicFields(parentId) {
+        return this.grpcClient.listDynamicFields({ parentId });
+    }
+    getDynamicField(parentId, name) {
+        return this.grpcClient.getDynamicField({ parentId, name });
+    }
+    waitForTransaction(digest) {
+        return this.grpcClient.waitForTransaction({ digest });
+    }
+    /**
+     * Simulate a transaction (no signing). Subclasses may override to add
+     * transport policy (e.g. the prediction line wraps this with rate-limit
+     * retry against the public testnet RPC).
+     */
+    async simulate(tx) {
+        return this.grpcClient.simulateTransaction({
+            transaction: tx,
+            include: { commandResults: true },
+        });
+    }
+    async signAndExecuteTransaction(params) {
+        return this.grpcClient.signAndExecuteTransaction(params);
+    }
+    // ========================================================
+    // Shared config lookup
+    // ========================================================
+    /** All package IDs (`published_at`) keyed by package name. */
+    packageIds() {
+        const out = {};
+        for (const [name, pkg] of Object.entries(this.config.packages)) {
+            if (isPublishedPackage(pkg))
+                out[name] = pkg.published_at;
+        }
+        return out;
+    }
+}

package/dist/src/constants.d.ts

@@ -23,52 +23,10 @@ export declare const TOKEN_DECIMALS: {
     readonly USDSUI: 6;
     readonly WLP: 6;
 };
-/** Default crypto market trading fee rate (3 bps). Per-market value lives in MarketConfig. */
-export declare const CRYPTO_FEE_RATE = 0.0003;
-/** Default stock / commodity market trading fee rate (5 bps). Per-market value lives in MarketConfig. */
-export declare const STOCK_FEE_RATE = 0.0005;
-/** Default maintenance margin rate (150 bps = 1.5%). Per-market value lives in MarketConfig. */
-export declare const MAINTENANCE_MARGIN_RATE = 0.015;
-export declare const PERM_OPEN_POSITION = 1;
-export declare const PERM_CLOSE_POSITION = 2;
-export declare const PERM_INCREASE_POSITION = 4;
-export declare const PERM_DECREASE_POSITION = 8;
-export declare const PERM_PLACE_ORDER = 16;
-export declare const PERM_CANCEL_ORDER = 32;
-export declare const PERM_DEPOSIT_COLLATERAL = 64;
-export declare const PERM_WITHDRAW_COLLATERAL = 128;
-export declare const PERM_MINT_WLP = 256;
-export declare const PERM_REDEEM_WLP = 512;
-export declare const PERM_ALL_TRADING = 255;
-export declare const PERM_ALL = 65535;
-export declare const STAKING_PERM_DEPOSIT_STAKE: number;
-export declare const STAKING_PERM_REDEEM_STAKE: number;
-export declare const STAKING_PERM_CLAIM_REWARD: number;
-export declare const STAKING_PERM_ALL: number;
-export declare const ORDER_LIMIT_BUY = 0;
-export declare const ORDER_LIMIT_SELL = 1;
-export declare const ORDER_STOP_BUY = 2;
-export declare const ORDER_STOP_SELL = 3;
-/** Wildcard tag accepted by `cancel_order_request` — scans all 4 books. */
-export declare const ORDER_TAG_WILDCARD = 255;
-export declare const ACTION_OPEN_POSITION = 0;
-export declare const ACTION_CLOSE_POSITION = 1;
-export declare const ACTION_PLACE_ORDER = 2;
-export declare const ACTION_CANCEL_ORDER = 3;
-export declare const ACTION_DEPOSIT_COLLATERAL = 4;
-export declare const ACTION_WITHDRAW_COLLATERAL = 5;
-export declare const ACTION_LIQUIDATE = 6;
-export declare const ACTION_INCREASE_POSITION = 7;
-export declare const ACTION_DECREASE_POSITION = 8;
-export declare const ACTION_UPDATE_ORDER = 9;
-export declare const ACTION_CANCEL_PRE_ORDER = 10;
-export declare const ACTION_ADD_PRE_ORDER = 11;
 export declare const MS_PER_YEAR: number;
-/** Zero-address placeholder used as the sender in dry-run / simulate calls. */
-export declare const DRY_RUN_SENDER = "0x0000000000000000000000000000000000000000000000000000000000000000";
 /**
- * Well-known address of Sui's native funds-accumulator root shared object
- * (`@0xacc` in the framework). Pass this to `request_deposit_from_funds<T>`
- * to drain `Balance<T>` parked at an account's address.
+ * Zero-address placeholder used as the sender in dry-run / simulate calls.
+ * Line-agnostic (every read path simulates with it); re-exported from
+ * `perp/constants.ts` for back-compat.
  */
-export declare const ACCUMULATOR_ROOT = "0xacc";
+export declare const DRY_RUN_SENDER = "0x0000000000000000000000000000000000000000000000000000000000000000";

package/dist/src/constants.js

@@ -1,3 +1,6 @@
+// Shared, line-agnostic primitives (network id, scaling, decimals, time).
+// Perp-domain enums (permissions / order tags / action codes / fee rates) live
+// in `perp/constants.ts`; prediction has its own `prediction/constants.ts`.
 // ======== Scaling ========
 /** Basis-point denominator (10_000). Matches BP_SCALE in the Move contracts. */
 export const BPS_SCALE = 10000n;
@@ -24,59 +27,12 @@ export const TOKEN_DECIMALS = {
     USDSUI: COLLATERAL_DECIMALS,
     WLP: WLP_DECIMALS,
 };
-// ======== Fee rates & risk parameters ========
-/** Default crypto market trading fee rate (3 bps). Per-market value lives in MarketConfig. */
-export const CRYPTO_FEE_RATE = 0.0003;
-/** Default stock / commodity market trading fee rate (5 bps). Per-market value lives in MarketConfig. */
-export const STOCK_FEE_RATE = 0.0005;
-/** Default maintenance margin rate (150 bps = 1.5%). Per-market value lives in MarketConfig. */
-export const MAINTENANCE_MARGIN_RATE = 0.015;
-// ======== Permission Bitmasks (matches account_data.move) ========
-export const PERM_OPEN_POSITION = 1;
-export const PERM_CLOSE_POSITION = 2;
-export const PERM_INCREASE_POSITION = 4;
-export const PERM_DECREASE_POSITION = 8;
-export const PERM_PLACE_ORDER = 16;
-export const PERM_CANCEL_ORDER = 32;
-export const PERM_DEPOSIT_COLLATERAL = 64;
-export const PERM_WITHDRAW_COLLATERAL = 128;
-export const PERM_MINT_WLP = 256;
-export const PERM_REDEEM_WLP = 512;
-export const PERM_ALL_TRADING = 0xff;
-export const PERM_ALL = 0xffff;
-// ======== Staking Permission Bitmasks (matches waterx_staking.move) ========
-export const STAKING_PERM_DEPOSIT_STAKE = 1 << 0;
-export const STAKING_PERM_REDEEM_STAKE = 1 << 1;
-export const STAKING_PERM_CLAIM_REWARD = 1 << 2;
-export const STAKING_PERM_ALL = STAKING_PERM_DEPOSIT_STAKE | STAKING_PERM_REDEEM_STAKE | STAKING_PERM_CLAIM_REWARD;
-// ======== Order Type Tags ========
-export const ORDER_LIMIT_BUY = 0;
-export const ORDER_LIMIT_SELL = 1;
-export const ORDER_STOP_BUY = 2;
-export const ORDER_STOP_SELL = 3;
-/** Wildcard tag accepted by `cancel_order_request` — scans all 4 books. */
-export const ORDER_TAG_WILDCARD = 255;
-// ======== Action Type Constants (request.move) ========
-export const ACTION_OPEN_POSITION = 0;
-export const ACTION_CLOSE_POSITION = 1;
-export const ACTION_PLACE_ORDER = 2;
-export const ACTION_CANCEL_ORDER = 3;
-export const ACTION_DEPOSIT_COLLATERAL = 4;
-export const ACTION_WITHDRAW_COLLATERAL = 5;
-export const ACTION_LIQUIDATE = 6;
-export const ACTION_INCREASE_POSITION = 7;
-export const ACTION_DECREASE_POSITION = 8;
-export const ACTION_UPDATE_ORDER = 9;
-export const ACTION_CANCEL_PRE_ORDER = 10;
-export const ACTION_ADD_PRE_ORDER = 11;
 // ======== Time ========
 export const MS_PER_YEAR = 365 * 24 * 60 * 60 * 1000;
-// ======== Misc ========
-/** Zero-address placeholder used as the sender in dry-run / simulate calls. */
-export const DRY_RUN_SENDER = "0x0000000000000000000000000000000000000000000000000000000000000000";
+// ======== Well-known addresses ========
 /**
- * Well-known address of Sui's native funds-accumulator root shared object
- * (`@0xacc` in the framework). Pass this to `request_deposit_from_funds<T>`
- * to drain `Balance<T>` parked at an account's address.
+ * Zero-address placeholder used as the sender in dry-run / simulate calls.
+ * Line-agnostic (every read path simulates with it); re-exported from
+ * `perp/constants.ts` for back-compat.
  */
-export const ACCUMULATOR_ROOT = "0xacc";
+export const DRY_RUN_SENDER = "0x0000000000000000000000000000000000000000000000000000000000000000";

package/dist/src/generated/bucket_v2_framework/liability.d.ts

@@ -169,29 +169,3 @@ export interface DebtValueOptions {
     ];
 }
 export declare function debtValue(options: DebtValueOptions): (tx: Transaction) => import("@mysten/sui/transactions").TransactionResult;
-export interface DestroyCreditForTestingArguments {
-    credit: TransactionArgument;
-}
-export interface DestroyCreditForTestingOptions {
-    package?: string;
-    arguments: DestroyCreditForTestingArguments | [
-        credit: TransactionArgument
-    ];
-    typeArguments: [
-        string
-    ];
-}
-export declare function destroyCreditForTesting(options: DestroyCreditForTestingOptions): (tx: Transaction) => import("@mysten/sui/transactions").TransactionResult;
-export interface DestroyDebtForTestingArguments {
-    debt: TransactionArgument;
-}
-export interface DestroyDebtForTestingOptions {
-    package?: string;
-    arguments: DestroyDebtForTestingArguments | [
-        debt: TransactionArgument
-    ];
-    typeArguments: [
-        string
-    ];
-}
-export declare function destroyDebtForTesting(options: DestroyDebtForTestingOptions): (tx: Transaction) => import("@mysten/sui/transactions").TransactionResult;

package/dist/src/generated/bucket_v2_framework/liability.js

@@ -175,31 +175,3 @@ export function debtValue(options) {
         typeArguments: options.typeArguments
     });
 }
-export function destroyCreditForTesting(options) {
-    const packageAddress = options.package ?? '@bucket/framework';
-    const argumentsTypes = [
-        null
-    ];
-    const parameterNames = ["credit"];
-    return (tx) => tx.moveCall({
-        package: packageAddress,
-        module: 'liability',
-        function: 'destroy_credit_for_testing',
-        arguments: normalizeMoveArguments(options.arguments, argumentsTypes, parameterNames),
-        typeArguments: options.typeArguments
-    });
-}
-export function destroyDebtForTesting(options) {
-    const packageAddress = options.package ?? '@bucket/framework';
-    const argumentsTypes = [
-        null
-    ];
-    const parameterNames = ["debt"];
-    return (tx) => tx.moveCall({
-        package: packageAddress,
-        module: 'liability',
-        function: 'destroy_debt_for_testing',
-        arguments: normalizeMoveArguments(options.arguments, argumentsTypes, parameterNames),
-        typeArguments: options.typeArguments
-    });
-}

package/dist/src/generated/waterx_account/account.d.ts

@@ -220,7 +220,16 @@ export declare const ProtocolDataKey: MoveTuple<readonly [BcsType<boolean, boole
 export declare const Delegate: MoveStruct<{
     delegate_address: BcsType<string, string | Uint8Array<ArrayBufferLike>, "bytes[32]">;
     alias: BcsType<string, string, "string">;
-    /** Framework-level action bitmap (PERM_WITHDRAW etc). */
+    /**
+     * Framework-level action bitmap (`PERM_WITHDRAW`, `PERM_RECEIVE`,
+     * `PERM_MANAGE_DELEGATES`). **Vestigial — retained for ABI/bitmap stability but no
+     * longer the live authority for any path.** All three bits now gate nothing: the
+     * funds-out paths (`request_withdraw` / `withdraw_from_funds` / `receive`) and
+     * delegate-perm management (`set/unset_delegate_protocol_permission`) are
+     * owner-only. Delegate authority lives entirely in `protocol_permissions` below
+     * plus the per-account `take`/`put` gate. `effective_permissions` /
+     * `has_permission` remain as public views but no internal path consults them.
+     */
     permissions: BcsType<number, number, "u32">;
     /**
      * Per-protocol bitmap. Missing key → delegate cannot drive that protocol. Each
@@ -1181,8 +1190,9 @@ export interface RequestWithdrawOptions {
 }
 /**
  * Debits `amount` of the account's stored `Balance<T>` and packages it into a
- * `WithdrawRequest<T>` for the registered withdraw policy. Auth (`PERM_WITHDRAW`
- * on `T`'s account) and pause are checked here, not in `consume_withdraw`.
+ * `WithdrawRequest<T>` for the registered withdraw policy. Auth (owner-only — see
+ * the gate below; `PERM_WITHDRAW` delegates are rejected) and pause are checked
+ * here, not in `consume_withdraw`.
  */
 export declare function requestWithdraw(options: RequestWithdrawOptions): (tx: Transaction) => import("@mysten/sui/transactions").TransactionResult;
 export interface ConsumeWithdrawArguments<P extends BcsType<any>> {
@@ -1229,9 +1239,9 @@ export interface TransferCoinOptions {
  * TTOs a `Coin<T>` to the account's UID address. The coin sits there until someone
  * calls `request_deposit_from_receivings<T>` (which requires a registered deposit
  * policy that then folds the coin into the account's stored balance) or
- * `receive<Coin<T>>` (owner / `PERM_RECEIVE` delegate, no policy needed). Useful
- * for async / cross-PTB deposits and for routing protocol payouts (e.g. reward
- * claims) into an account when `T` has no deposit policy.
+ * `receive<Coin<T>>` (owner-only, no policy needed). Useful for async / cross-PTB
+ * deposits and for routing protocol payouts (e.g. reward claims) into an account
+ * when `T` has no deposit policy.
  */
 export declare function transferCoin(options: TransferCoinOptions): (tx: Transaction) => import("@mysten/sui/transactions").TransactionResult;
 export interface ReceiveArguments {
@@ -1264,9 +1274,10 @@ export interface ReceiveOptions {
  * `request_deposit_from_receivings<X>` or `request_deposit_from_funds<X>` for
  * inflow when X has a deposit policy.
  *
- * Auth: account owner or a `PERM_RECEIVE` delegate (kept separate from
- * `PERM_WITHDRAW` so reward-collection rights don't imply balance-drain rights).
- * Returns the received object to the caller's PTB.
+ * Auth: account owner only. Receiving a TTO'd object hands it to the caller's PTB
+ * — an off-platform exfil path — so a delegate can never drive it, even one
+ * holding `PERM_RECEIVE`. The `PERM_RECEIVE` bit is retained for ABI stability but
+ * no longer gates any path. Returns the received object to the caller's PTB.
  */
 export declare function receive(options: ReceiveOptions): (tx: Transaction) => import("@mysten/sui/transactions").TransactionResult;
 export interface WithdrawFromFundsArguments {
@@ -1292,13 +1303,15 @@ export interface WithdrawFromFundsOptions {
  * native funds accumulator and returns it directly as a `Balance<T>`. Symmetric to
  * `request_deposit_from_funds<T>`, but explicitly for `T` that has **no**
  * registered deposit policy — policy-managed inflow must route through the
- * deposit-policy pipeline instead. The intent is to let owners (or `PERM_WITHDRAW`
- * delegates) pull policy-less inflow (reward tokens TTO'd via `send_funds`,
- * miscellaneous `Balance<T>` the SDK parked at the address) straight out.
+ * deposit-policy pipeline instead. The intent is to let the account owner pull
+ * policy-less inflow (reward tokens TTO'd via `send_funds`, miscellaneous
+ * `Balance<T>` the SDK parked at the address) straight out.
  *
- * Auth: same as `request_withdraw<T>` — `PERM_WITHDRAW` or owner. Aborts
- * `EUseRequestDepositInstead` if `T` has a deposit policy registered. Pause-gated.
- * Returns `Balance::zero<T>()` when the address holds no T.
+ * Auth: same as `request_withdraw<T>` — owner-only. A delegate is rejected even
+ * one holding `PERM_WITHDRAW` (the bit no longer gates this path; retained for ABI
+ * stability only). Aborts `EUseRequestDepositInstead` if `T` has a deposit policy
+ * registered. Pause-gated. Returns `Balance::zero<T>()` when the address holds no
+ * T.
  */
 export declare function withdrawFromFunds(options: WithdrawFromFundsOptions): (tx: Transaction) => import("@mysten/sui/transactions").TransactionResult;
 export interface TakeArguments<P extends BcsType<any>> {
@@ -1401,6 +1414,28 @@ export interface IsAccountAuthorizedOptions {
  * top of this.
  */
 export declare function isAccountAuthorized(options: IsAccountAuthorizedOptions): (tx: Transaction) => import("@mysten/sui/transactions").TransactionResult;
+export interface IsAccountOwnerArguments {
+    registry: RawTransactionArgument<string>;
+    accountId: RawTransactionArgument<string>;
+    addr: RawTransactionArgument<string>;
+}
+export interface IsAccountOwnerOptions {
+    package?: string;
+    arguments: IsAccountOwnerArguments | [
+        registry: RawTransactionArgument<string>,
+        accountId: RawTransactionArgument<string>,
+        addr: RawTransactionArgument<string>
+    ];
+}
+/**
+ * Returns `true` only when `addr` is the account's **owner** — delegates are
+ * excluded regardless of their permission bits or expiry. Protocols use this for
+ * owner-only actions that must never be delegate-driven (e.g. collateral
+ * withdrawal): defense-in-depth so a phished or compromised delegate key can never
+ * move funds, only the owner's own signature can. Contrast `is_account_authorized`
+ * (owner OR live delegate).
+ */
+export declare function isAccountOwner(options: IsAccountOwnerOptions): (tx: Transaction) => import("@mysten/sui/transactions").TransactionResult;
 export interface AccountCountArguments {
     registry: RawTransactionArgument<string>;
     owner: RawTransactionArgument<string>;

package/dist/src/generated/waterx_account/account.js

@@ -111,7 +111,16 @@ export const ProtocolDataKey = new MoveTuple({ name: `${$moduleName}::ProtocolDa
 export const Delegate = new MoveStruct({ name: `${$moduleName}::Delegate`, fields: {
         delegate_address: bcs.Address,
         alias: bcs.string(),
-        /** Framework-level action bitmap (PERM_WITHDRAW etc). */
+        /**
+         * Framework-level action bitmap (`PERM_WITHDRAW`, `PERM_RECEIVE`,
+         * `PERM_MANAGE_DELEGATES`). **Vestigial — retained for ABI/bitmap stability but no
+         * longer the live authority for any path.** All three bits now gate nothing: the
+         * funds-out paths (`request_withdraw` / `withdraw_from_funds` / `receive`) and
+         * delegate-perm management (`set/unset_delegate_protocol_permission`) are
+         * owner-only. Delegate authority lives entirely in `protocol_permissions` below
+         * plus the per-account `take`/`put` gate. `effective_permissions` /
+         * `has_permission` remain as public views but no internal path consults them.
+         */
         permissions: bcs.u32(),
         /**
          * Per-protocol bitmap. Missing key → delegate cannot drive that protocol. Each
@@ -1023,8 +1032,9 @@ export function consumeDeposit(options) {
 }
 /**
  * Debits `amount` of the account's stored `Balance<T>` and packages it into a
- * `WithdrawRequest<T>` for the registered withdraw policy. Auth (`PERM_WITHDRAW`
- * on `T`'s account) and pause are checked here, not in `consume_withdraw`.
+ * `WithdrawRequest<T>` for the registered withdraw policy. Auth (owner-only — see
+ * the gate below; `PERM_WITHDRAW` delegates are rejected) and pause are checked
+ * here, not in `consume_withdraw`.
  */
 export function requestWithdraw(options) {
     const packageAddress = options.package ?? '@waterx/account';
@@ -1072,9 +1082,9 @@ export function consumeWithdraw(options) {
  * TTOs a `Coin<T>` to the account's UID address. The coin sits there until someone
  * calls `request_deposit_from_receivings<T>` (which requires a registered deposit
  * policy that then folds the coin into the account's stored balance) or
- * `receive<Coin<T>>` (owner / `PERM_RECEIVE` delegate, no policy needed). Useful
- * for async / cross-PTB deposits and for routing protocol payouts (e.g. reward
- * claims) into an account when `T` has no deposit policy.
+ * `receive<Coin<T>>` (owner-only, no policy needed). Useful for async / cross-PTB
+ * deposits and for routing protocol payouts (e.g. reward claims) into an account
+ * when `T` has no deposit policy.
  */
 export function transferCoin(options) {
     const packageAddress = options.package ?? '@waterx/account';
@@ -1104,9 +1114,10 @@ export function transferCoin(options) {
  * `request_deposit_from_receivings<X>` or `request_deposit_from_funds<X>` for
  * inflow when X has a deposit policy.
  *
- * Auth: account owner or a `PERM_RECEIVE` delegate (kept separate from
- * `PERM_WITHDRAW` so reward-collection rights don't imply balance-drain rights).
- * Returns the received object to the caller's PTB.
+ * Auth: account owner only. Receiving a TTO'd object hands it to the caller's PTB
+ * — an off-platform exfil path — so a delegate can never drive it, even one
+ * holding `PERM_RECEIVE`. The `PERM_RECEIVE` bit is retained for ABI stability but
+ * no longer gates any path. Returns the received object to the caller's PTB.
  */
 export function receive(options) {
     const packageAddress = options.package ?? '@waterx/account';
@@ -1131,13 +1142,15 @@ export function receive(options) {
  * native funds accumulator and returns it directly as a `Balance<T>`. Symmetric to
  * `request_deposit_from_funds<T>`, but explicitly for `T` that has **no**
  * registered deposit policy — policy-managed inflow must route through the
- * deposit-policy pipeline instead. The intent is to let owners (or `PERM_WITHDRAW`
- * delegates) pull policy-less inflow (reward tokens TTO'd via `send_funds`,
- * miscellaneous `Balance<T>` the SDK parked at the address) straight out.
+ * deposit-policy pipeline instead. The intent is to let the account owner pull
+ * policy-less inflow (reward tokens TTO'd via `send_funds`, miscellaneous
+ * `Balance<T>` the SDK parked at the address) straight out.
  *
- * Auth: same as `request_withdraw<T>` — `PERM_WITHDRAW` or owner. Aborts
- * `EUseRequestDepositInstead` if `T` has a deposit policy registered. Pause-gated.
- * Returns `Balance::zero<T>()` when the address holds no T.
+ * Auth: same as `request_withdraw<T>` — owner-only. A delegate is rejected even
+ * one holding `PERM_WITHDRAW` (the bit no longer gates this path; retained for ABI
+ * stability only). Aborts `EUseRequestDepositInstead` if `T` has a deposit policy
+ * registered. Pause-gated. Returns `Balance::zero<T>()` when the address holds no
+ * T.
  */
 export function withdrawFromFunds(options) {
     const packageAddress = options.package ?? '@waterx/account';
@@ -1253,6 +1266,29 @@ export function isAccountAuthorized(options) {
         arguments: normalizeMoveArguments(options.arguments, argumentsTypes, parameterNames),
     });
 }
+/**
+ * Returns `true` only when `addr` is the account's **owner** — delegates are
+ * excluded regardless of their permission bits or expiry. Protocols use this for
+ * owner-only actions that must never be delegate-driven (e.g. collateral
+ * withdrawal): defense-in-depth so a phished or compromised delegate key can never
+ * move funds, only the owner's own signature can. Contrast `is_account_authorized`
+ * (owner OR live delegate).
+ */
+export function isAccountOwner(options) {
+    const packageAddress = options.package ?? '@waterx/account';
+    const argumentsTypes = [
+        null,
+        '0x2::object::ID',
+        'address'
+    ];
+    const parameterNames = ["registry", "accountId", "addr"];
+    return (tx) => tx.moveCall({
+        package: packageAddress,
+        module: 'account',
+        function: 'is_account_owner',
+        arguments: normalizeMoveArguments(options.arguments, argumentsTypes, parameterNames),
+    });
+}
 export function accountCount(options) {
     const packageAddress = options.package ?? '@waterx/account';
     const argumentsTypes = [

package/dist/src/generated/waterx_oracle/oracle.d.ts

@@ -8,7 +8,7 @@
  *
  * ```text
  * let collector = oracle::new_collector(b"BTC_USD".to_string());
- * waterx_rule::feed(&mut collector, &waterx_config, &clock, ...);
+ * waterx_rule::feed(&mut collector, &mut waterx_config, &clock, ...);
  * oracle::aggregate(&mut oracle, collector, &clock);
  * // ... later in the same tx:
  * let price = oracle::get_price(&oracle, b"BTC_USD".to_string(), &clock);
@@ -240,6 +240,7 @@ export interface GetPriceAtTimestampOptions {
 export declare function getPriceAtTimestamp(options: GetPriceAtTimestampOptions): (tx: Transaction) => import("@mysten/sui/transactions").TransactionResult;
 export interface RemovePriceAtTimestampArguments {
     oracle: RawTransactionArgument<string>;
+    Cap: RawTransactionArgument<string>;
     ticker: RawTransactionArgument<string>;
     timestampMs: RawTransactionArgument<number | bigint>;
 }
@@ -247,6 +248,7 @@ export interface RemovePriceAtTimestampOptions {
     package?: string;
     arguments: RemovePriceAtTimestampArguments | [
         oracle: RawTransactionArgument<string>,
+        Cap: RawTransactionArgument<string>,
         ticker: RawTransactionArgument<string>,
         timestampMs: RawTransactionArgument<number | bigint>
     ];
@@ -254,6 +256,10 @@ export interface RemovePriceAtTimestampOptions {
 /**
  * Removes the exact historical price snapshot at `timestamp_ms` so the caller can
  * reclaim the dynamic-field storage rebate. Latest price is unchanged.
+ *
+ * `ListingCap`-gated (F-012): without it any address could delete any listed
+ * ticker's history snapshots, griefing off-chain reconciliation. The live price
+ * path (`latest_price` / `last_update_ms`) is never touched here.
  */
 export declare function removePriceAtTimestamp(options: RemovePriceAtTimestampOptions): (tx: Transaction) => import("@mysten/sui/transactions").TransactionResult;
 export interface UnsafeGetLatestPriceArguments {

package/dist/src/generated/waterx_oracle/oracle.js

@@ -8,7 +8,7 @@
  *
  * ```text
  * let collector = oracle::new_collector(b"BTC_USD".to_string());
- * waterx_rule::feed(&mut collector, &waterx_config, &clock, ...);
+ * waterx_rule::feed(&mut collector, &mut waterx_config, &clock, ...);
  * oracle::aggregate(&mut oracle, collector, &clock);
  * // ... later in the same tx:
  * let price = oracle::get_price(&oracle, b"BTC_USD".to_string(), &clock);
@@ -259,15 +259,20 @@ export function getPriceAtTimestamp(options) {
 /**
  * Removes the exact historical price snapshot at `timestamp_ms` so the caller can
  * reclaim the dynamic-field storage rebate. Latest price is unchanged.
+ *
+ * `ListingCap`-gated (F-012): without it any address could delete any listed
+ * ticker's history snapshots, griefing off-chain reconciliation. The live price
+ * path (`latest_price` / `last_update_ms`) is never touched here.
  */
 export function removePriceAtTimestamp(options) {
     const packageAddress = options.package ?? '@waterx/oracle';
     const argumentsTypes = [
+        null,
         null,
         '0x1::string::String',
         'u64'
     ];
-    const parameterNames = ["oracle", "ticker", "timestampMs"];
+    const parameterNames = ["oracle", "Cap", "ticker", "timestampMs"];
     return (tx) => tx.moveCall({
         package: packageAddress,
         module: 'oracle',

package/dist/src/{prediction/generated → generated}/waterx_prediction/account_data.d.ts

@@ -12,8 +12,25 @@
  */
 import { MoveStruct, type RawTransactionArgument } from '../utils/index.ts';
 import { type Transaction, type TransactionArgument } from '@mysten/sui/transactions';
-export declare const WaterXPrediction: MoveStruct<any, any>;
-export declare const WaterXPredictionData: MoveStruct<any, any>;
+export declare const WaterXPrediction: MoveStruct<{
+    dummy_field: import("@mysten/sui/bcs").BcsType<boolean, boolean, "bool">;
+}, "@waterx/prediction::account_data::WaterXPrediction">;
+export declare const WaterXPredictionData: MoveStruct<{
+    /** Pending open/close order IDs for this account. Value = market key. */
+    orders: MoveStruct<any, any>;
+    /** Active position IDs for this account. Value = market key. */
+    positions: MoveStruct<any, any>;
+    /** Per-market pending order ID sets. Key = market key. */
+    orders_by_market: MoveStruct<{
+        id: import("@mysten/sui/bcs").BcsType<string, string | Uint8Array<ArrayBufferLike>, "bytes[32]">;
+        size: import("@mysten/sui/bcs").BcsType<string, string | number | bigint, "u64">;
+    }, "0x2::table::Table<phantom K, phantom V>">;
+    /** Per-market active position ID sets. Key = market key. */
+    positions_by_market: MoveStruct<{
+        id: import("@mysten/sui/bcs").BcsType<string, string | Uint8Array<ArrayBufferLike>, "bytes[32]">;
+        size: import("@mysten/sui/bcs").BcsType<string, string | number | bigint, "u64">;
+    }, "0x2::table::Table<phantom K, phantom V>">;
+}, "@waterx/prediction::account_data::WaterXPredictionData">;
 export interface PermPlaceOrderOptions {
     package?: string;
     arguments?: [

package/dist/src/{prediction/generated → generated}/waterx_prediction/admin.d.ts

@@ -2,4 +2,6 @@
  * THIS FILE IS GENERATED AND SHOULD NOT BE MANUALLY MODIFIED *
  **************************************************************/
 import { MoveStruct } from '../utils/index.ts';
-export declare const AdminCap: MoveStruct<any, any>;
+export declare const AdminCap: MoveStruct<{
+    id: import("@mysten/sui/bcs").BcsType<string, string | Uint8Array<ArrayBufferLike>, "bytes[32]">;
+}, "@waterx/prediction::admin::AdminCap">;

package/dist/src/{prediction/generated → generated}/waterx_prediction/deps/sui/balance.d.ts

@@ -7,4 +7,6 @@
  * and `Balance`s.
  */
 import { MoveStruct } from '../../../utils/index.ts';
-export declare const Balance: MoveStruct<any, any>;
+export declare const Balance: MoveStruct<{
+    value: import("@mysten/sui/bcs").BcsType<string, string | number | bigint, "u64">;
+}, "0x2::balance::Balance<phantom T>">;

package/dist/src/{prediction/generated/waterx_account → generated/waterx_prediction}/deps/sui/table.d.ts

@@ -21,4 +21,9 @@
  * ```
  */
 import { MoveStruct } from '../../../utils/index.ts';
-export declare const Table: MoveStruct<any, any>;
+export declare const Table: MoveStruct<{
+    /** the ID of this table */
+    id: import("@mysten/sui/bcs").BcsType<string, string | Uint8Array<ArrayBufferLike>, "bytes[32]">;
+    /** the number of key-value pairs in the table */
+    size: import("@mysten/sui/bcs").BcsType<string, string | number | bigint, "u64">;
+}, "0x2::table::Table<phantom K, phantom V>">;