@waterx/sdk 4.0.0 → 4.0.1

package/dist/src/oracle/update-fetch.d.ts

@@ -16,7 +16,11 @@
  *   `Authorization` header at all). This is the Phase-0 invariant of the
  *   Pyth Pro migration: existing keyless deployments see no behavior change.
  * - Retries on network errors, HTTP 429, and HTTP 5xx, with exponential
- *   backoff (`retryDelayMs * 2^attempt`, capped at `MAX_BACKOFF_MS`). Other
+ *   backoff (`retryDelayMs * 2^attempt`, capped at `MAX_BACKOFF_MS`). A 429
+ *   carrying a numeric `Retry-After` header uses the SERVER'S delay instead,
+ *   when it fits under the same cap — a longer ask degrades to normal
+ *   backoff rather than stalling a money-path build for tens of seconds.
+ *   Other
  *   4xx statuses (401/400/403/404/…) are NOT retried — auth/bad-request
  *   failures are deterministic, so that `Response` (`ok: false`) is handed
  *   back on the first attempt for the caller to format its own
@@ -46,7 +50,7 @@
  * - Retry worst case: with the defaults (15s timeout × 3 attempts + ~0.75s of
  *   backoff between them) a FULL outage takes up to ~46s to surface as a
  *   `FetchPolicyError`, vs ~15s pre-3.2.0's single bare-`fetch` attempt.
- *   Tunable per client via `config.pyth.fetch.{timeoutMs,retries}`.
+ *   Tunable per client via the `pythFetch` create option (`{timeoutMs,retries}`).
  */
 export interface FetchPolicy {
     /** Per-attempt timeout (ms). Default 15_000. */
@@ -75,6 +79,32 @@ export declare class FetchPolicyError extends Error {
         attempts: number;
     });
 }
+/**
+ * Rethrow a `catch`-ed {@link fetchWithPolicy} failure. When it is a
+ * status-carrying `FetchPolicyError` — a retryable status (429/5xx) that never
+ * recovered — throw a new Error `${describe(err)} (retries exhausted after N
+ * attempts)` with the original as `cause`; otherwise (a network-level
+ * exhaustion with no status, or any non-`FetchPolicyError`) rethrow it verbatim,
+ * since there is no domain reframing to add. `describe` builds the
+ * status-bearing prefix so each caller keeps its own message shape (the e2e
+ * transient detector keys off those prefixes) while the guard, the `retries
+ * exhausted` suffix, and the `cause` wrapping live in one place. `: never` so a
+ * caller's `catch` block is understood not to fall through.
+ */
+export declare function rethrowExhaustedFetch(err: unknown, describe: (err: FetchPolicyError) => string): never;
+/**
+ * Join an API `path` onto an `endpoint` PRESERVING the endpoint's own base
+ * path. `new URL(path, endpoint)` is the footgun this replaces: a
+ * leading-slash path is *absolute* and silently discards the endpoint's path
+ * — harmless for a bare-origin endpoint (`https://hermes.pyth.network`) but
+ * it dropped the `/hermes` prefix of the Pyth Pro compat endpoint and 404'd
+ * every feed (see `fetchPriceFeedsUpdateData`). Every oracle fetch that
+ * targets `<endpoint><fixed path>` must build its URL here.
+ */
+/** One canonical trailing-slash trim — `joinEndpointPath` (URL building) and
+ * `pyth.ts`'s `memoKey` (endpoint identity) must never drift apart on it. */
+export declare function trimTrailingSlashes(endpoint: string): string;
+export declare function joinEndpointPath(endpoint: string, path: string): URL;
 /**
  * `fetch` with per-attempt timeout, bounded retry + backoff, and optional
  * Bearer auth. See the module header for the full policy. Both `init.signal`

package/dist/src/oracle/update-fetch.js

@@ -16,7 +16,11 @@
  *   `Authorization` header at all). This is the Phase-0 invariant of the
  *   Pyth Pro migration: existing keyless deployments see no behavior change.
  * - Retries on network errors, HTTP 429, and HTTP 5xx, with exponential
- *   backoff (`retryDelayMs * 2^attempt`, capped at `MAX_BACKOFF_MS`). Other
+ *   backoff (`retryDelayMs * 2^attempt`, capped at `MAX_BACKOFF_MS`). A 429
+ *   carrying a numeric `Retry-After` header uses the SERVER'S delay instead,
+ *   when it fits under the same cap — a longer ask degrades to normal
+ *   backoff rather than stalling a money-path build for tens of seconds.
+ *   Other
  *   4xx statuses (401/400/403/404/…) are NOT retried — auth/bad-request
  *   failures are deterministic, so that `Response` (`ok: false`) is handed
  *   back on the first attempt for the caller to format its own
@@ -46,7 +50,7 @@
  * - Retry worst case: with the defaults (15s timeout × 3 attempts + ~0.75s of
  *   backoff between them) a FULL outage takes up to ~46s to surface as a
  *   `FetchPolicyError`, vs ~15s pre-3.2.0's single bare-`fetch` attempt.
- *   Tunable per client via `config.pyth.fetch.{timeoutMs,retries}`.
+ *   Tunable per client via the `pythFetch` create option (`{timeoutMs,retries}`).
  */
 const DEFAULT_TIMEOUT_MS = 15_000;
 const DEFAULT_RETRIES = 2;
@@ -70,12 +74,60 @@ export class FetchPolicyError extends Error {
         this.attempts = opts.attempts;
     }
 }
+/**
+ * Rethrow a `catch`-ed {@link fetchWithPolicy} failure. When it is a
+ * status-carrying `FetchPolicyError` — a retryable status (429/5xx) that never
+ * recovered — throw a new Error `${describe(err)} (retries exhausted after N
+ * attempts)` with the original as `cause`; otherwise (a network-level
+ * exhaustion with no status, or any non-`FetchPolicyError`) rethrow it verbatim,
+ * since there is no domain reframing to add. `describe` builds the
+ * status-bearing prefix so each caller keeps its own message shape (the e2e
+ * transient detector keys off those prefixes) while the guard, the `retries
+ * exhausted` suffix, and the `cause` wrapping live in one place. `: never` so a
+ * caller's `catch` block is understood not to fall through.
+ */
+export function rethrowExhaustedFetch(err, describe) {
+    if (err instanceof FetchPolicyError && err.status !== undefined) {
+        throw new Error(`${describe(err)} (retries exhausted after ${err.attempts} attempts)`, {
+            cause: err,
+        });
+    }
+    throw err;
+}
+/**
+ * Join an API `path` onto an `endpoint` PRESERVING the endpoint's own base
+ * path. `new URL(path, endpoint)` is the footgun this replaces: a
+ * leading-slash path is *absolute* and silently discards the endpoint's path
+ * — harmless for a bare-origin endpoint (`https://hermes.pyth.network`) but
+ * it dropped the `/hermes` prefix of the Pyth Pro compat endpoint and 404'd
+ * every feed (see `fetchPriceFeedsUpdateData`). Every oracle fetch that
+ * targets `<endpoint><fixed path>` must build its URL here.
+ */
+/** One canonical trailing-slash trim — `joinEndpointPath` (URL building) and
+ * `pyth.ts`'s `memoKey` (endpoint identity) must never drift apart on it. */
+export function trimTrailingSlashes(endpoint) {
+    return endpoint.replace(/\/+$/, "");
+}
+export function joinEndpointPath(endpoint, path) {
+    return new URL(`${trimTrailingSlashes(endpoint)}/${path.replace(/^\/+/, "")}`);
+}
 function isRetryableStatus(status) {
     return status === 429 || status >= 500;
 }
 function backoffMs(retryDelayMs, attempt) {
     return Math.min(retryDelayMs * 2 ** attempt, MAX_BACKOFF_MS);
 }
+/**
+ * The server's own `Retry-After` (numeric-seconds form only), when present
+ * and within `MAX_BACKOFF_MS` — `undefined` otherwise (absent, HTTP-date
+ * form, zero/garbage, or an ask too long to honor inside a build path).
+ */
+function retryAfterMs(response) {
+    // Optional-chained: minimal test doubles (and some fetch shims) carry no
+    // `headers` — a missing header must read as "no hint", never throw.
+    const ms = Number(response.headers?.get?.("retry-after")) * 1_000;
+    return ms > 0 && ms <= MAX_BACKOFF_MS ? ms : undefined;
+}
 /** `host + pathname` only — never the query string (feed ids are noise, not diagnostic). */
 function describeTarget(url) {
     const parsed = new URL(url);
@@ -182,11 +234,13 @@ export async function fetchWithPolicy(url, init = {}, policy = {}, externalSigna
         let status;
         let bodySnippet;
         let cause;
+        let serverRetryDelay;
         try {
             const response = await doFetch(url, { ...init, headers, signal });
             if (response.ok || !isRetryableStatus(response.status))
                 return response;
             status = response.status;
+            serverRetryDelay = retryAfterMs(response);
             if (attempt === retries) {
                 bodySnippet = await readBodySnippet(response);
             }
@@ -213,7 +267,7 @@ export async function fetchWithPolicy(url, init = {}, policy = {}, externalSigna
             const detail = statusDetail ?? causeMessage(cause);
             throw new FetchPolicyError(`fetchWithPolicy: ${describeTarget(url)} failed after ${attempt + 1} attempt(s) — ${detail}`, { status, bodySnippet, cause, attempts: attempt + 1 });
         }
-        await sleep(backoffMs(retryDelayMs, attempt), combinedExternalSignal);
+        await sleep(serverRetryDelay ?? backoffMs(retryDelayMs, attempt), combinedExternalSignal);
     }
     // Unreachable: the loop above always returns or throws on its final
     // (attempt === retries) iteration — this satisfies the compiler only.

package/dist/src/perp/client.d.ts

@@ -12,44 +12,58 @@
  */
 import { BaseLineClient } from "../base-client.ts";
 import type { OracleSource } from "../oracle/price-update-rule.ts";
-import { type LoadConfigOptions, type PythGeneration, type PythInfraConfig, type WaterXConfig, type WormholeInfraConfig } from "./config.ts";
+import { type LoadConfigOptions, type PythFetchPolicy, type PythInfraConfig, type WaterXConfig, type WormholeInfraConfig } from "./config.ts";
 import type { Network } from "./constants.ts";
 export interface CreateClientOptions extends LoadConfigOptions {
     grpcUrl?: string;
     /**
-     * Selects which `PriceUpdateRule` `refreshOraclePrices` uses for the
-     * on-chain price-update leg (see `OracleHost.oracleSource`). Default:
-     * `'pyth_rule'`. The SDK never reads `process.env` — pass this from your
-     * own env var (e.g. `ORACLE_SOURCE`).
+     * Which oracle price-update source drives `refreshOraclePrices`. Each source
+     * is self-contained (own infra + config) with NO cross-source fallback:
+     *
+     * - `'pyth_rule'` (default) — Pyth Core `pyth_rule` updates (Hermes VAA +
+     *   per-feed update fees), Core state + keyless Core Hermes.
+     * - `'pyth_lazer_rule'` — Pyth Lazer signed updates (ONE `leEcdsa` verify
+     *   per PTB, no per-feed fees); needs `packages.pyth_lazer_rule` with feeds
+     *   and a `pythApiKey` (Lazer is auth-first).
+     *
+     * A source-neutral name on purpose — a future source need not be Pyth.
+     * Selecting a source whose feed for a requested ticker is absent is NOT an
+     * error at client creation: it fails at tx-build time for exactly those
+     * tickers (see `refreshOraclePrices`). The Pyth Core infra is fixed per
+     * network by `PYTH_DEFAULTS` and is not deployment-overridable.
      */
     oracleSource?: OracleSource;
     /**
-     * Selects which Pyth Core contract generation feeds `client.pyth` when the
-     * config JSON has no explicit `pyth` override: `'core'` (default,
-     * `PYTH_DEFAULTS`) or `'pro'` (`PYTH_PRO_DEFAULTS` — the post-2026-08-18
-     * Pro-compatible contracts + Hermes-compatible endpoint; pair with
-     * `pyth.api_key`). Orthogonal to `oracleSource`. An explicit `config.pyth`
-     * always wins wholesale (see `PythGeneration`).
+     * Pyth Lazer access token (`Authorization: Bearer …`). Required under
+     * `oracleSource: 'pyth_lazer_rule'` (Lazer is auth-first) and unused by
+     * `'pyth_rule'` (keyless Core Hermes). This is a SECRET and never belongs in
+     * the canonical `waterx-config` JSON — pass it at client init from your own
+     * env var (e.g. `PYTH_API_KEY`); the SDK never reads `process.env`.
      */
-    pythGeneration?: PythGeneration;
+    pythApiKey?: string;
+    /**
+     * Retry/timeout policy for the off-chain Hermes / Lazer update fetches (see
+     * `fetchWithPolicy`). Optional — defaults to 15s timeout, 2 retries.
+     */
+    pythFetch?: PythFetchPolicy;
 }
 export declare class PerpClient extends BaseLineClient<WaterXConfig> {
-    /** Pyth infra (network defaults unless overridden in JSON). */
+    /** Pyth Core infra (fixed per network) plus the caller-supplied credential/policy. */
     pyth: PythInfraConfig;
     /** Wormhole infra for the credit bridge (network defaults unless overridden). */
     wormhole: WormholeInfraConfig;
-    /** Selected oracle rule source (client option, resolved at creation; default `'pyth_rule'`). See `OracleHost.oracleSource`. */
+    /** Selected oracle price-update source (`oracleSource` create option; default `'pyth_rule'`). */
     readonly oracleSource: OracleSource;
     /** Canonical-schema lookups (delegated to below); no transport. */
     private readonly view;
-    constructor(network: Network, config: WaterXConfig, opts?: {
-        grpcUrl?: string;
-        oracleSource?: OracleSource;
-        pythGeneration?: PythGeneration;
-    });
+    constructor(network: Network, config: WaterXConfig, opts?: CreateClientOptions);
     /**
      * Async factory: fetches the deployment config for `network` and returns
      * a ready-to-use client. Pass `opts.cache=true` to memoize the JSON.
+     *
+     * No oracle-config guard here: selecting a source whose feeds are absent is
+     * not an error at init — it surfaces at tx-build time for the specific
+     * tickers that source can't serve (see `refreshOraclePrices`).
      */
     static create(network: Network, opts?: CreateClientOptions): Promise<PerpClient>;
     static mainnet(opts?: CreateClientOptions): Promise<PerpClient>;

package/dist/src/perp/client.js

@@ -12,21 +12,27 @@
  */
 import { BaseLineClient } from "../base-client.js";
 import { PerpConfigView } from "./config-view.js";
-import { loadConfig, PYTH_DEFAULTS, PYTH_PRO_DEFAULTS, WORMHOLE_DEFAULTS, } from "./config.js";
+import { loadConfig, PYTH_DEFAULTS, WORMHOLE_DEFAULTS, } from "./config.js";
 export class PerpClient extends BaseLineClient {
-    /** Pyth infra (network defaults unless overridden in JSON). */
+    /** Pyth Core infra (fixed per network) plus the caller-supplied credential/policy. */
     pyth;
     /** Wormhole infra for the credit bridge (network defaults unless overridden). */
     wormhole;
-    /** Selected oracle rule source (client option, resolved at creation; default `'pyth_rule'`). See `OracleHost.oracleSource`. */
+    /** Selected oracle price-update source (`oracleSource` create option; default `'pyth_rule'`). */
     oracleSource;
     /** Canonical-schema lookups (delegated to below); no transport. */
     view;
     constructor(network, config, opts = {}) {
         super(network, config, opts);
-        // Precedence: explicit config.pyth override > generation constants.
-        this.pyth =
-            config.pyth ?? (opts.pythGeneration === "pro" ? PYTH_PRO_DEFAULTS : PYTH_DEFAULTS)[network];
+        // Pyth Core infra is fixed per network — NOT deployment-overridable and
+        // NOT source-dependent (the pyth_lazer_rule source reads only api_key/fetch
+        // from here). The api_key + fetch policy are caller-supplied at init: a
+        // secret has no place in the canonical waterx-config JSON.
+        this.pyth = {
+            ...PYTH_DEFAULTS[network],
+            ...(opts.pythApiKey !== undefined ? { api_key: opts.pythApiKey } : {}),
+            ...(opts.pythFetch !== undefined ? { fetch: opts.pythFetch } : {}),
+        };
         this.wormhole = config.wormhole ?? WORMHOLE_DEFAULTS[network];
         this.oracleSource = opts.oracleSource ?? "pyth_rule";
         this.view = new PerpConfigView(() => this.config, () => this.wormhole);
@@ -34,14 +40,14 @@ export class PerpClient extends BaseLineClient {
     /**
      * Async factory: fetches the deployment config for `network` and returns
      * a ready-to-use client. Pass `opts.cache=true` to memoize the JSON.
+     *
+     * No oracle-config guard here: selecting a source whose feeds are absent is
+     * not an error at init — it surfaces at tx-build time for the specific
+     * tickers that source can't serve (see `refreshOraclePrices`).
      */
     static async create(network, opts = {}) {
         const config = await loadConfig(network, opts);
-        return new PerpClient(network, config, {
-            grpcUrl: opts.grpcUrl,
-            oracleSource: opts.oracleSource,
-            pythGeneration: opts.pythGeneration,
-        });
+        return new PerpClient(network, config, opts);
     }
     static mainnet(opts = {}) {
         return PerpClient.create("MAINNET", opts);

package/dist/src/perp/config.d.ts

@@ -9,11 +9,11 @@
  * below, keyed by network.
  */
 import type { AccountPackages, BasePackageEntry, WormholeInfraConfig } from "../account/config.ts";
-import type { OraclePackages, PythInfraConfig } from "../oracle/config.ts";
+import type { OraclePackages } from "../oracle/config.ts";
 import type { Network } from "./constants.ts";
-export type { AccountConfig, AccountPackages, BasePackageEntry, NativeCustodyAsset, NativeCustodyPackage, TrustedEmitterRow, WaterxCreditPackage, WaterxReferralPackage, WithdrawalQueuePackage, WormholeBridgePackage, WormholeInfraConfig, WxaAccountPackage, } from "../account/config.ts";
-export type { ConstantFeedEntry, OracleConfig, OraclePackages, PythGeneration, PythInfraConfig, PythLazerRulePackage, PythRulePackage, PythSponsorRulePackage, SupraFeedEntry, SupraRulePackage, WaterxConstantRulePackage, WaterxOraclePackage, } from "../oracle/config.ts";
-export { PYTH_DEFAULTS, PYTH_PRO_DEFAULTS } from "../oracle/config.ts";
+export type { AccountConfig, AccountPackages, BasePackageEntry, NativeCustodyAsset, NativeCustodyPackage, WaterxCreditPackage, WaterxReferralPackage, WithdrawalQueuePackage, WormholeBridgePackage, WormholeInfraConfig, WxaAccountPackage, } from "../account/config.ts";
+export type { ConstantFeedEntry, OracleConfig, OraclePackages, PythFetchPolicy, PythInfraConfig, PythLazerRulePackage, PythRulePackage, PythSponsorRulePackage, SupraFeedEntry, SupraRulePackage, WaterxConstantRulePackage, WaterxOraclePackage, } from "../oracle/config.ts";
+export { PYTH_DEFAULTS } from "../oracle/config.ts";
 export interface WaterxPerpMarketEntry {
     market: string;
     config: string;
@@ -82,8 +82,6 @@ export interface WaterXConfig {
     /** Sui gRPC base URL (default: public Mysten fullnode for the network). */
     grpcUrl?: string;
     packages: WaterXPackages;
-    /** Pyth infra override (defaults from `PYTH_DEFAULTS[network]`). */
-    pyth?: PythInfraConfig;
     /** Wormhole infra override (defaults from `WORMHOLE_DEFAULTS[network]`). */
     wormhole?: WormholeInfraConfig;
     /** Sui `CoinRegistry` shared object (credit deployments). */

package/dist/src/perp/config.js

@@ -8,8 +8,8 @@
  * **not** in the JSON — it lives in `PYTH_DEFAULTS` / `WORMHOLE_DEFAULTS`
  * below, keyed by network.
  */
-import { FetchPolicyError, fetchWithPolicy } from "../oracle/update-fetch.js";
-export { PYTH_DEFAULTS, PYTH_PRO_DEFAULTS } from "../oracle/config.js";
+import { fetchWithPolicy, rethrowExhaustedFetch } from "../oracle/update-fetch.js";
+export { PYTH_DEFAULTS } from "../oracle/config.js";
 // ============================================================================
 // Wormhole / Hermes — external chain infra, defaults by network
 // ============================================================================
@@ -113,16 +113,13 @@ export async function loadConfig(network, opts = {}) {
         const stale = configCache.get(cacheKey);
         if (stale)
             return stale;
-        // Reformat a status-carrying FetchPolicyError (retries exhausted on a
-        // retryable status) into this function's own message shape, mirroring
-        // the non-retried `!response.ok` throw above. A network-level
-        // exhaustion (no status), a `!response.ok` throw, or a JSON parse /
-        // `validateConfig` failure has no domain-specific reframing to add —
-        // propagate that error's own message as-is.
-        if (err instanceof FetchPolicyError && err.status !== undefined) {
-            throw new Error(`loadConfig: HTTP ${err.status} fetching ${url} (retries exhausted after ${err.attempts} attempts)`, { cause: err });
-        }
-        throw err;
+        // Reframe a status-carrying FetchPolicyError into this function's own
+        // message shape, mirroring the non-retried `!response.ok` throw above and
+        // carrying the URL (the key datum for a config-fetch failure). A
+        // network-level exhaustion (no status), a `!response.ok` throw, or a JSON
+        // parse / `validateConfig` failure has no reframing to add — the helper
+        // propagates those verbatim.
+        rethrowExhaustedFetch(err, (e) => `loadConfig: HTTP ${e.status} fetching ${url}`);
     }
     configCache.set(cacheKey, raw);
     return raw;

package/dist/src/perp/index.d.ts

@@ -1,7 +1,7 @@
 export { PerpClient } from "./client.ts";
 export type { CreateClientOptions } from "./client.ts";
-export { PYTH_DEFAULTS, PYTH_PRO_DEFAULTS, WORMHOLE_DEFAULTS, clearConfigCache, loadConfig, } from "./config.ts";
-export type { BasePackageEntry, ConstantFeedEntry, WaterxReferralPackage, LoadConfigOptions, NativeCustodyAsset, NativeCustodyPackage, PythGeneration, PythInfraConfig, PythLazerRulePackage, PythRulePackage, PythSponsorRulePackage, SupraFeedEntry, SupraRulePackage, TestnetFaucetPackage, TrustedEmitterRow, WaterXConfig, WaterXPackages, WaterxCreditPackage, WaterxOraclePackage, WaterxPerpMarketEntry, WaterxPerpPackage, WaterxStakingPackage, WithdrawalQueuePackage, WlpPackage, WormholeBridgePackage, WormholeInfraConfig, WxaAccountPackage, } from "./config.ts";
+export { PYTH_DEFAULTS, WORMHOLE_DEFAULTS, clearConfigCache, loadConfig } from "./config.ts";
+export type { BasePackageEntry, ConstantFeedEntry, WaterxReferralPackage, LoadConfigOptions, NativeCustodyAsset, NativeCustodyPackage, PythFetchPolicy, PythInfraConfig, PythLazerRulePackage, PythRulePackage, PythSponsorRulePackage, SupraFeedEntry, SupraRulePackage, TestnetFaucetPackage, WaterXConfig, WaterXPackages, WaterxCreditPackage, WaterxOraclePackage, WaterxPerpMarketEntry, WaterxPerpPackage, WaterxStakingPackage, WithdrawalQueuePackage, WlpPackage, WormholeBridgePackage, WormholeInfraConfig, WxaAccountPackage, } from "./config.ts";
 export { ACTION_ADD_PRE_ORDER, ACTION_CANCEL_ORDER, ACTION_CANCEL_PRE_ORDER, ACTION_CLOSE_POSITION, ACTION_DECREASE_POSITION, ACTION_DEPOSIT_COLLATERAL, ACTION_INCREASE_POSITION, ACTION_LIQUIDATE, ACTION_OPEN_POSITION, ACTION_PLACE_ORDER, ACTION_UPDATE_ORDER, ACTION_WITHDRAW_COLLATERAL, BPS_SCALE, CRYPTO_FEE_RATE, DOUBLE_SCALE, DRY_RUN_SENDER, FLOAT_SCALE, MAINTENANCE_MARGIN_RATE, ORDER_LIMIT_BUY, ORDER_LIMIT_SELL, ORDER_STOP_BUY, ORDER_STOP_SELL, ORDER_TAG_WILDCARD, PERM_ALL, PERM_ALL_TRADING, PERM_CANCEL_ORDER, PERM_CLOSE_POSITION, PERM_DECREASE_POSITION, PERM_DEPOSIT_COLLATERAL, PERM_INCREASE_POSITION, PERM_MINT_WLP, PERM_OPEN_POSITION, PERM_PLACE_ORDER, PERM_REDEEM_WLP, PERM_WITHDRAW_COLLATERAL, STAKING_PERM_DEPOSIT_STAKE, STAKING_PERM_REDEEM_STAKE, STAKING_PERM_CLAIM_REWARD, STAKING_PERM_ALL, STOCK_FEE_RATE, MS_PER_YEAR, SUI_DECIMALS, WLP_DECIMALS, COLLATERAL_DECIMALS, TOKEN_DECIMALS, } from "./constants.ts";
 export type { Network } from "./constants.ts";
 export { getMarketTickers, getCollateralAssets } from "../utils/config.ts";

package/dist/src/perp/index.js

@@ -1,6 +1,6 @@
 // ======== Core ========
 export { PerpClient } from "./client.js";
-export { PYTH_DEFAULTS, PYTH_PRO_DEFAULTS, WORMHOLE_DEFAULTS, clearConfigCache, loadConfig, } from "./config.js";
+export { PYTH_DEFAULTS, WORMHOLE_DEFAULTS, clearConfigCache, loadConfig } from "./config.js";
 // ======== Constants & enums ========
 export { ACTION_ADD_PRE_ORDER, ACTION_CANCEL_ORDER, ACTION_CANCEL_PRE_ORDER, ACTION_CLOSE_POSITION, ACTION_DECREASE_POSITION, ACTION_DEPOSIT_COLLATERAL, ACTION_INCREASE_POSITION, ACTION_LIQUIDATE, ACTION_OPEN_POSITION, ACTION_PLACE_ORDER, ACTION_UPDATE_ORDER, ACTION_WITHDRAW_COLLATERAL, BPS_SCALE, CRYPTO_FEE_RATE, DOUBLE_SCALE, DRY_RUN_SENDER, FLOAT_SCALE, MAINTENANCE_MARGIN_RATE, ORDER_LIMIT_BUY, ORDER_LIMIT_SELL, ORDER_STOP_BUY, ORDER_STOP_SELL, ORDER_TAG_WILDCARD, PERM_ALL, PERM_ALL_TRADING, PERM_CANCEL_ORDER, PERM_CLOSE_POSITION, PERM_DECREASE_POSITION, PERM_DEPOSIT_COLLATERAL, PERM_INCREASE_POSITION, PERM_MINT_WLP, PERM_OPEN_POSITION, PERM_PLACE_ORDER, PERM_REDEEM_WLP, PERM_WITHDRAW_COLLATERAL, STAKING_PERM_DEPOSIT_STAKE, STAKING_PERM_REDEEM_STAKE, STAKING_PERM_CLAIM_REWARD, STAKING_PERM_ALL, STOCK_FEE_RATE, MS_PER_YEAR, SUI_DECIMALS, WLP_DECIMALS, COLLATERAL_DECIMALS, TOKEN_DECIMALS, } from "./constants.js";
 // ======== Utilities ========

package/dist/src/unified-client.d.ts

@@ -32,7 +32,7 @@ import { Transaction } from "@mysten/sui/transactions";
 import * as accountOps from "./account/index.ts";
 import * as perpReferral from "./account/referral.ts";
 import type { Network } from "./constants.ts";
-import type { PythGeneration } from "./oracle/config.ts";
+import type { PythFetchPolicy } from "./oracle/config.ts";
 import type { OracleSource } from "./oracle/price-update-rule.ts";
 import { PerpClient, type CreateClientOptions as PerpCreateOptions } from "./perp/client.ts";
 import * as perpFetch from "./perp/fetch.ts";
@@ -366,20 +366,28 @@ export interface ClientCreateOptions {
     /** Memoize the fetched config JSON. */
     cache?: boolean;
     /**
-     * Selects which `PriceUpdateRule` the perp line's `refreshOraclePrices` uses
-     * for the on-chain price-update leg (see `OracleHost.oracleSource`).
-     * Default: `'pyth_rule'`. Perp-line only. The SDK never reads `process.env`
-     * — pass this from your own env var (e.g. `ORACLE_SOURCE`).
+     * The perp line's oracle price-update source (perp-line only — the
+     * prediction line has no oracle leg), forwarded to `PerpClient.create`.
+     * Source-neutral by design: a future source need not be Pyth.
+     *
+     * - `'pyth_rule'` (default) — Pyth Core updates on Core infra.
+     * - `'pyth_lazer_rule'` — Pyth Lazer signed updates (pair with `pythApiKey`
+     *   and a config carrying `packages.pyth_lazer_rule`).
+     *
+     * Each source is self-contained with no cross-source fallback; selecting a
+     * source whose feed for a ticker is absent fails at tx-build (not at init).
+     * See perp `CreateClientOptions.oracleSource` for the full note.
      */
     oracleSource?: OracleSource;
     /**
-     * Selects which Pyth Core contract generation feeds the perp line's
-     * `client.perp.pyth` when the config JSON has no explicit `pyth` override:
-     * `'core'` (default) or `'pro'` (post-2026-08-18 Pro-compatible contracts +
-     * Hermes-compatible endpoint; pair with `pyth.api_key`). Perp-line only.
-     * See `PythGeneration` / `PYTH_PRO_DEFAULTS`.
+     * Pyth Lazer access token, forwarded to the perp line. Required under
+     * `oracleSource: 'pyth_lazer_rule'`, unused by `'pyth_rule'`. A SECRET —
+     * pass it at init from your own env var; it is never read from the config
+     * JSON or `process.env`.
      */
-    pythGeneration?: PythGeneration;
+    pythApiKey?: string;
+    /** Retry/timeout policy for the perp line's off-chain oracle fetches. */
+    pythFetch?: PythFetchPolicy;
     /** Perp-line overrides (network, grpcUrl, waterxConfigUrl, cache, …). */
     perp?: PerpLineOptions;
     /** Prediction-line overrides (network, grpcUrl, waterxConfigUrl, cache, settlement, …). */

package/dist/src/unified-client.js

@@ -169,7 +169,8 @@ export class WaterXClient {
             waterxConfigUrl: opts.waterxConfigUrl,
             cache: opts.cache,
             oracleSource: opts.oracleSource,
-            pythGeneration: opts.pythGeneration,
+            pythApiKey: opts.pythApiKey,
+            pythFetch: opts.pythFetch,
             ...perpRest,
         });
         const predictClient = await PredictClient.create(resolvedPredictNetwork, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@waterx/sdk",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "WaterX SDK — perpetuals and prediction markets on Sui",
   "license": "MIT",
   "author": "WaterX",