@waterx/sdk 4.0.0 → 4.1.0

package/dist/cjs/src/oracle/update-fetch.js

@@ -17,7 +17,11 @@
  *   `Authorization` header at all). This is the Phase-0 invariant of the
  *   Pyth Pro migration: existing keyless deployments see no behavior change.
  * - Retries on network errors, HTTP 429, and HTTP 5xx, with exponential
- *   backoff (`retryDelayMs * 2^attempt`, capped at `MAX_BACKOFF_MS`). Other
+ *   backoff (`retryDelayMs * 2^attempt`, capped at `MAX_BACKOFF_MS`). A 429
+ *   carrying a numeric `Retry-After` header uses the SERVER'S delay instead,
+ *   when it fits under the same cap — a longer ask degrades to normal
+ *   backoff rather than stalling a money-path build for tens of seconds.
+ *   Other
  *   4xx statuses (401/400/403/404/…) are NOT retried — auth/bad-request
  *   failures are deterministic, so that `Response` (`ok: false`) is handed
  *   back on the first attempt for the caller to format its own
@@ -47,10 +51,13 @@
  * - Retry worst case: with the defaults (15s timeout × 3 attempts + ~0.75s of
  *   backoff between them) a FULL outage takes up to ~46s to surface as a
  *   `FetchPolicyError`, vs ~15s pre-3.2.0's single bare-`fetch` attempt.
- *   Tunable per client via `config.pyth.fetch.{timeoutMs,retries}`.
+ *   Tunable per client via the `pythFetch` create option (`{timeoutMs,retries}`).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FetchPolicyError = void 0;
+exports.rethrowExhaustedFetch = rethrowExhaustedFetch;
+exports.trimTrailingSlashes = trimTrailingSlashes;
+exports.joinEndpointPath = joinEndpointPath;
 exports.fetchWithPolicy = fetchWithPolicy;
 const DEFAULT_TIMEOUT_MS = 15_000;
 const DEFAULT_RETRIES = 2;
@@ -75,12 +82,60 @@ class FetchPolicyError extends Error {
     }
 }
 exports.FetchPolicyError = FetchPolicyError;
+/**
+ * Rethrow a `catch`-ed {@link fetchWithPolicy} failure. When it is a
+ * status-carrying `FetchPolicyError` — a retryable status (429/5xx) that never
+ * recovered — throw a new Error `${describe(err)} (retries exhausted after N
+ * attempts)` with the original as `cause`; otherwise (a network-level
+ * exhaustion with no status, or any non-`FetchPolicyError`) rethrow it verbatim,
+ * since there is no domain reframing to add. `describe` builds the
+ * status-bearing prefix so each caller keeps its own message shape (the e2e
+ * transient detector keys off those prefixes) while the guard, the `retries
+ * exhausted` suffix, and the `cause` wrapping live in one place. `: never` so a
+ * caller's `catch` block is understood not to fall through.
+ */
+function rethrowExhaustedFetch(err, describe) {
+    if (err instanceof FetchPolicyError && err.status !== undefined) {
+        throw new Error(`${describe(err)} (retries exhausted after ${err.attempts} attempts)`, {
+            cause: err,
+        });
+    }
+    throw err;
+}
+/**
+ * Join an API `path` onto an `endpoint` PRESERVING the endpoint's own base
+ * path. `new URL(path, endpoint)` is the footgun this replaces: a
+ * leading-slash path is *absolute* and silently discards the endpoint's path
+ * — harmless for a bare-origin endpoint (`https://hermes.pyth.network`) but
+ * it dropped the `/hermes` prefix of the Pyth Pro compat endpoint and 404'd
+ * every feed (see `fetchPriceFeedsUpdateData`). Every oracle fetch that
+ * targets `<endpoint><fixed path>` must build its URL here.
+ */
+/** One canonical trailing-slash trim — `joinEndpointPath` (URL building) and
+ * `pyth.ts`'s `memoKey` (endpoint identity) must never drift apart on it. */
+function trimTrailingSlashes(endpoint) {
+    return endpoint.replace(/\/+$/, "");
+}
+function joinEndpointPath(endpoint, path) {
+    return new URL(`${trimTrailingSlashes(endpoint)}/${path.replace(/^\/+/, "")}`);
+}
 function isRetryableStatus(status) {
     return status === 429 || status >= 500;
 }
 function backoffMs(retryDelayMs, attempt) {
     return Math.min(retryDelayMs * 2 ** attempt, MAX_BACKOFF_MS);
 }
+/**
+ * The server's own `Retry-After` (numeric-seconds form only), when present
+ * and within `MAX_BACKOFF_MS` — `undefined` otherwise (absent, HTTP-date
+ * form, zero/garbage, or an ask too long to honor inside a build path).
+ */
+function retryAfterMs(response) {
+    // Optional-chained: minimal test doubles (and some fetch shims) carry no
+    // `headers` — a missing header must read as "no hint", never throw.
+    const ms = Number(response.headers?.get?.("retry-after")) * 1_000;
+    return ms > 0 && ms <= MAX_BACKOFF_MS ? ms : undefined;
+}
 /** `host + pathname` only — never the query string (feed ids are noise, not diagnostic). */
 function describeTarget(url) {
     const parsed = new URL(url);
@@ -187,11 +242,13 @@ async function fetchWithPolicy(url, init = {}, policy = {}, externalSignal) {
         let status;
         let bodySnippet;
         let cause;
+        let serverRetryDelay;
         try {
             const response = await doFetch(url, { ...init, headers, signal });
             if (response.ok || !isRetryableStatus(response.status))
                 return response;
             status = response.status;
+            serverRetryDelay = retryAfterMs(response);
             if (attempt === retries) {
                 bodySnippet = await readBodySnippet(response);
             }
@@ -218,7 +275,7 @@ async function fetchWithPolicy(url, init = {}, policy = {}, externalSignal) {
             const detail = statusDetail ?? causeMessage(cause);
             throw new FetchPolicyError(`fetchWithPolicy: ${describeTarget(url)} failed after ${attempt + 1} attempt(s) — ${detail}`, { status, bodySnippet, cause, attempts: attempt + 1 });
         }
-        await sleep(backoffMs(retryDelayMs, attempt), combinedExternalSignal);
+        await sleep(serverRetryDelay ?? backoffMs(retryDelayMs, attempt), combinedExternalSignal);
     }
     // Unreachable: the loop above always returns or throws on its final
     // (attempt === retries) iteration — this satisfies the compiler only.

package/dist/cjs/src/perp/client.d.ts

@@ -12,44 +12,96 @@
  */
 import { BaseLineClient } from "../base-client.ts";
 import type { OracleSource } from "../oracle/price-update-rule.ts";
-import { type LoadConfigOptions, type PythGeneration, type PythInfraConfig, type WaterXConfig, type WormholeInfraConfig } from "./config.ts";
+import type { FetchPolicy } from "../oracle/update-fetch.ts";
+import { type LoadConfigOptions, type PythFetchPolicy, type PythInfraConfig, type WaterXConfig, type WaterxInfraConfig, type WormholeInfraConfig } from "./config.ts";
 import type { Network } from "./constants.ts";
 export interface CreateClientOptions extends LoadConfigOptions {
     grpcUrl?: string;
     /**
-     * Selects which `PriceUpdateRule` `refreshOraclePrices` uses for the
-     * on-chain price-update leg (see `OracleHost.oracleSource`). Default:
-     * `'pyth_rule'`. The SDK never reads `process.env` — pass this from your
-     * own env var (e.g. `ORACLE_SOURCE`).
+     * Which oracle price-update source drives `refreshOraclePrices`. Each source
+     * is self-contained (own infra + config) with NO cross-source fallback:
+     *
+     * - `'pyth_rule'` (default) — Pyth Core `pyth_rule` updates (Hermes VAA +
+     *   per-feed update fees), Core state + keyless Core Hermes.
+     * - `'pyth_lazer_rule'` — Pyth Lazer signed updates (ONE `leEcdsa` verify
+     *   per PTB, no per-feed fees); needs `packages.pyth_lazer_rule` with feeds
+     *   and a `pythApiKey` (Lazer is auth-first).
+     * - `'waterx_rule'` — the first-party WaterX quote-center (Nautilus-TEE,
+     *   ed25519-signed batches): ONE envelope covering the build's tickers,
+     *   verified AND fed by a single `collect_batch_latest` per collector. No
+     *   credential and no per-update fee; needs `packages.waterx_rule` with
+     *   feeds. Endpoint/transport via {@link CreateClientOptions.waterxEndpoint}
+     *   / {@link CreateClientOptions.waterxFetch} — the browser-CORS proxy hook,
+     *   since this is the one source fetched from the page.
+     *
+     * The name is source-neutral on purpose — a source need not be Pyth (as
+     * `'waterx_rule'` shows). Selecting a source whose feed for a requested
+     * ticker is absent is NOT an error at client creation: it fails at tx-build
+     * time for exactly those tickers (see `refreshOraclePrices`). The Pyth Core
+     * infra is fixed per network by `PYTH_DEFAULTS` and is not
+     * deployment-overridable.
      */
     oracleSource?: OracleSource;
     /**
-     * Selects which Pyth Core contract generation feeds `client.pyth` when the
-     * config JSON has no explicit `pyth` override: `'core'` (default,
-     * `PYTH_DEFAULTS`) or `'pro'` (`PYTH_PRO_DEFAULTS` — the post-2026-08-18
-     * Pro-compatible contracts + Hermes-compatible endpoint; pair with
-     * `pyth.api_key`). Orthogonal to `oracleSource`. An explicit `config.pyth`
-     * always wins wholesale (see `PythGeneration`).
+     * Pyth Lazer access token (`Authorization: Bearer …`). Required under
+     * `oracleSource: 'pyth_lazer_rule'` (Lazer is auth-first) and unused by
+     * `'pyth_rule'` (keyless Core Hermes). This is a SECRET and never belongs in
+     * the canonical `waterx-config` JSON — pass it at client init from your own
+     * env var (e.g. `PYTH_API_KEY`); the SDK never reads `process.env`.
      */
-    pythGeneration?: PythGeneration;
+    pythApiKey?: string;
+    /**
+     * Retry/timeout policy for the off-chain Hermes / Lazer update fetches (see
+     * `fetchWithPolicy`). Optional — defaults to 15s timeout, 2 retries.
+     */
+    pythFetch?: PythFetchPolicy;
+    /**
+     * Quote-center base URL for `oracleSource: 'waterx_rule'` — overrides the
+     * per-network {@link WATERX_DEFAULTS} host.
+     *
+     * This is the one source a BROWSER fetches itself (the signed envelope is
+     * pulled from the page), so it is bound by the quote-center deployment's CORS
+     * allowlist. A front end whose origin is not allowed — or one that must route
+     * egress through its own backend — points this at a same-origin proxy that
+     * forwards `GET /v1/quotes/update`. Unused by the Pyth sources.
+     *
+     * An absolute URL. Any base PATH is preserved (`joinEndpointPath`), so
+     * `https://app.example/api/quote-center` fetches
+     * `https://app.example/api/quote-center/v1/quotes/update` — a proxy route
+     * survives instead of being rewritten to the origin root.
+     */
+    waterxEndpoint?: string;
+    /**
+     * Retry/timeout policy — and `fetchImpl` — for the quote-center fetch (see
+     * `fetchWithPolicy`). Optional: falls back to `pythFetch`, then to the
+     * built-in defaults. Supply `fetchImpl` to route the request through your own
+     * transport (a proxying `fetch` wrapper, a non-global `fetch`, a test double).
+     */
+    waterxFetch?: FetchPolicy;
 }
 export declare class PerpClient extends BaseLineClient<WaterXConfig> {
-    /** Pyth infra (network defaults unless overridden in JSON). */
+    /** Pyth Core infra (fixed per network) plus the caller-supplied credential/policy. */
     pyth: PythInfraConfig;
+    /**
+     * WaterX quote-center infra for `oracleSource: 'waterx_rule'` — the network
+     * default, overridden by the `waterxEndpoint` / `waterxFetch` create options
+     * (a same-origin proxy or a custom `fetchImpl` for browser consumers).
+     */
+    waterx: WaterxInfraConfig;
     /** Wormhole infra for the credit bridge (network defaults unless overridden). */
     wormhole: WormholeInfraConfig;
-    /** Selected oracle rule source (client option, resolved at creation; default `'pyth_rule'`). See `OracleHost.oracleSource`. */
+    /** Selected oracle price-update source (`oracleSource` create option; default `'pyth_rule'`). */
     readonly oracleSource: OracleSource;
     /** Canonical-schema lookups (delegated to below); no transport. */
     private readonly view;
-    constructor(network: Network, config: WaterXConfig, opts?: {
-        grpcUrl?: string;
-        oracleSource?: OracleSource;
-        pythGeneration?: PythGeneration;
-    });
+    constructor(network: Network, config: WaterXConfig, opts?: CreateClientOptions);
     /**
      * Async factory: fetches the deployment config for `network` and returns
      * a ready-to-use client. Pass `opts.cache=true` to memoize the JSON.
+     *
+     * No oracle-config guard here: selecting a source whose feeds are absent is
+     * not an error at init — it surfaces at tx-build time for the specific
+     * tickers that source can't serve (see `refreshOraclePrices`).
      */
     static create(network: Network, opts?: CreateClientOptions): Promise<PerpClient>;
     static mainnet(opts?: CreateClientOptions): Promise<PerpClient>;

package/dist/cjs/src/perp/client.js

@@ -17,34 +17,54 @@ const base_client_ts_1 = require("../base-client.js");
 const config_view_ts_1 = require("./config-view.js");
 const config_ts_1 = require("./config.js");
 class PerpClient extends base_client_ts_1.BaseLineClient {
-    /** Pyth infra (network defaults unless overridden in JSON). */
+    /** Pyth Core infra (fixed per network) plus the caller-supplied credential/policy. */
     pyth;
+    /**
+     * WaterX quote-center infra for `oracleSource: 'waterx_rule'` — the network
+     * default, overridden by the `waterxEndpoint` / `waterxFetch` create options
+     * (a same-origin proxy or a custom `fetchImpl` for browser consumers).
+     */
+    waterx;
     /** Wormhole infra for the credit bridge (network defaults unless overridden). */
     wormhole;
-    /** Selected oracle rule source (client option, resolved at creation; default `'pyth_rule'`). See `OracleHost.oracleSource`. */
+    /** Selected oracle price-update source (`oracleSource` create option; default `'pyth_rule'`). */
     oracleSource;
     /** Canonical-schema lookups (delegated to below); no transport. */
     view;
     constructor(network, config, opts = {}) {
         super(network, config, opts);
-        // Precedence: explicit config.pyth override > generation constants.
-        this.pyth =
-            config.pyth ?? (opts.pythGeneration === "pro" ? config_ts_1.PYTH_PRO_DEFAULTS : config_ts_1.PYTH_DEFAULTS)[network];
+        // Pyth Core infra is fixed per network — NOT deployment-overridable and
+        // NOT source-dependent (the pyth_lazer_rule source reads only api_key/fetch
+        // from here). The api_key + fetch policy are caller-supplied at init: a
+        // secret has no place in the canonical waterx-config JSON.
+        this.pyth = {
+            ...config_ts_1.PYTH_DEFAULTS[network],
+            ...(opts.pythApiKey !== undefined ? { api_key: opts.pythApiKey } : {}),
+            ...(opts.pythFetch !== undefined ? { fetch: opts.pythFetch } : {}),
+        };
         this.wormhole = config.wormhole ?? config_ts_1.WORMHOLE_DEFAULTS[network];
+        // Quote-center infra: network default, each field independently overridable
+        // — a browser blocked by the quote-center's CORS allowlist swaps `endpoint`
+        // for a same-origin proxy without touching anything else.
+        this.waterx = {
+            ...config_ts_1.WATERX_DEFAULTS[network],
+            ...(opts.waterxEndpoint !== undefined ? { endpoint: opts.waterxEndpoint } : {}),
+            ...(opts.waterxFetch !== undefined ? { fetch: opts.waterxFetch } : {}),
+        };
         this.oracleSource = opts.oracleSource ?? "pyth_rule";
         this.view = new config_view_ts_1.PerpConfigView(() => this.config, () => this.wormhole);
     }
     /**
      * Async factory: fetches the deployment config for `network` and returns
      * a ready-to-use client. Pass `opts.cache=true` to memoize the JSON.
+     *
+     * No oracle-config guard here: selecting a source whose feeds are absent is
+     * not an error at init — it surfaces at tx-build time for the specific
+     * tickers that source can't serve (see `refreshOraclePrices`).
      */
     static async create(network, opts = {}) {
         const config = await (0, config_ts_1.loadConfig)(network, opts);
-        return new PerpClient(network, config, {
-            grpcUrl: opts.grpcUrl,
-            oracleSource: opts.oracleSource,
-            pythGeneration: opts.pythGeneration,
-        });
+        return new PerpClient(network, config, opts);
     }
     static mainnet(opts = {}) {
         return PerpClient.create("MAINNET", opts);

package/dist/cjs/src/perp/config.d.ts

@@ -9,11 +9,11 @@
  * below, keyed by network.
  */
 import type { AccountPackages, BasePackageEntry, WormholeInfraConfig } from "../account/config.ts";
-import type { OraclePackages, PythInfraConfig } from "../oracle/config.ts";
+import type { OraclePackages } from "../oracle/config.ts";
 import type { Network } from "./constants.ts";
-export type { AccountConfig, AccountPackages, BasePackageEntry, NativeCustodyAsset, NativeCustodyPackage, TrustedEmitterRow, WaterxCreditPackage, WaterxReferralPackage, WithdrawalQueuePackage, WormholeBridgePackage, WormholeInfraConfig, WxaAccountPackage, } from "../account/config.ts";
-export type { ConstantFeedEntry, OracleConfig, OraclePackages, PythGeneration, PythInfraConfig, PythLazerRulePackage, PythRulePackage, PythSponsorRulePackage, SupraFeedEntry, SupraRulePackage, WaterxConstantRulePackage, WaterxOraclePackage, } from "../oracle/config.ts";
-export { PYTH_DEFAULTS, PYTH_PRO_DEFAULTS } from "../oracle/config.ts";
+export type { AccountConfig, AccountPackages, BasePackageEntry, NativeCustodyAsset, NativeCustodyPackage, WaterxCreditPackage, WaterxReferralPackage, WithdrawalQueuePackage, WormholeBridgePackage, WormholeInfraConfig, WxaAccountPackage, } from "../account/config.ts";
+export type { ConstantFeedEntry, OracleConfig, OraclePackages, PythFetchPolicy, PythInfraConfig, PythLazerRulePackage, PythRulePackage, PythSponsorRulePackage, SupraFeedEntry, SupraRulePackage, WaterxConstantRulePackage, WaterxInfraConfig, WaterxOraclePackage, WaterxRulePackage, } from "../oracle/config.ts";
+export { PYTH_DEFAULTS, WATERX_DEFAULTS } from "../oracle/config.ts";
 export interface WaterxPerpMarketEntry {
     market: string;
     config: string;
@@ -71,7 +71,6 @@ export interface WaterXPackages extends AccountPackages, OraclePackages {
     mock_usdc?: MockCoinPackage;
     mock_usdsui?: MockCoinPackage;
     mock_sui?: MockCoinPackage;
-    waterx_rule?: BasePackageEntry;
     waterx_rule_nautilus_enclave?: BasePackageEntry;
 }
 export declare const WORMHOLE_DEFAULTS: Record<Network, WormholeInfraConfig>;
@@ -82,8 +81,6 @@ export interface WaterXConfig {
     /** Sui gRPC base URL (default: public Mysten fullnode for the network). */
     grpcUrl?: string;
     packages: WaterXPackages;
-    /** Pyth infra override (defaults from `PYTH_DEFAULTS[network]`). */
-    pyth?: PythInfraConfig;
     /** Wormhole infra override (defaults from `WORMHOLE_DEFAULTS[network]`). */
     wormhole?: WormholeInfraConfig;
     /** Sui `CoinRegistry` shared object (credit deployments). */

package/dist/cjs/src/perp/config.js

@@ -10,13 +10,13 @@
  * below, keyed by network.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WORMHOLE_DEFAULTS = exports.PYTH_PRO_DEFAULTS = exports.PYTH_DEFAULTS = void 0;
+exports.WORMHOLE_DEFAULTS = exports.WATERX_DEFAULTS = exports.PYTH_DEFAULTS = void 0;
 exports.clearConfigCache = clearConfigCache;
 exports.loadConfig = loadConfig;
 const update_fetch_ts_1 = require("../oracle/update-fetch.js");
 var config_ts_1 = require("../oracle/config.js");
 Object.defineProperty(exports, "PYTH_DEFAULTS", { enumerable: true, get: function () { return config_ts_1.PYTH_DEFAULTS; } });
-Object.defineProperty(exports, "PYTH_PRO_DEFAULTS", { enumerable: true, get: function () { return config_ts_1.PYTH_PRO_DEFAULTS; } });
+Object.defineProperty(exports, "WATERX_DEFAULTS", { enumerable: true, get: function () { return config_ts_1.WATERX_DEFAULTS; } });
 // ============================================================================
 // Wormhole / Hermes — external chain infra, defaults by network
 // ============================================================================
@@ -120,16 +120,13 @@ async function loadConfig(network, opts = {}) {
         const stale = configCache.get(cacheKey);
         if (stale)
             return stale;
-        // Reformat a status-carrying FetchPolicyError (retries exhausted on a
-        // retryable status) into this function's own message shape, mirroring
-        // the non-retried `!response.ok` throw above. A network-level
-        // exhaustion (no status), a `!response.ok` throw, or a JSON parse /
-        // `validateConfig` failure has no domain-specific reframing to add —
-        // propagate that error's own message as-is.
-        if (err instanceof update_fetch_ts_1.FetchPolicyError && err.status !== undefined) {
-            throw new Error(`loadConfig: HTTP ${err.status} fetching ${url} (retries exhausted after ${err.attempts} attempts)`, { cause: err });
-        }
-        throw err;
+        // Reframe a status-carrying FetchPolicyError into this function's own
+        // message shape, mirroring the non-retried `!response.ok` throw above and
+        // carrying the URL (the key datum for a config-fetch failure). A
+        // network-level exhaustion (no status), a `!response.ok` throw, or a JSON
+        // parse / `validateConfig` failure has no reframing to add — the helper
+        // propagates those verbatim.
+        (0, update_fetch_ts_1.rethrowExhaustedFetch)(err, (e) => `loadConfig: HTTP ${e.status} fetching ${url}`);
     }
     configCache.set(cacheKey, raw);
     return raw;

package/dist/cjs/src/perp/constants.d.ts

@@ -1,10 +1,4 @@
 export * from "../constants.ts";
-/** Default crypto market trading fee rate (3 bps). Per-market value lives in MarketConfig. */
-export declare const CRYPTO_FEE_RATE = 0.0003;
-/** Default stock / commodity market trading fee rate (5 bps). Per-market value lives in MarketConfig. */
-export declare const STOCK_FEE_RATE = 0.0005;
-/** Default maintenance margin rate (150 bps = 1.5%). Per-market value lives in MarketConfig. */
-export declare const MAINTENANCE_MARGIN_RATE = 0.015;
 export declare const PERM_OPEN_POSITION = 1;
 export declare const PERM_CLOSE_POSITION = 2;
 export declare const PERM_INCREASE_POSITION = 4;

package/dist/cjs/src/perp/constants.js

@@ -1,8 +1,17 @@
 "use strict";
 // Perp-line domain constants (trading permissions / order tags / action codes /
-// fee rates / well-known addresses). Re-exports the shared primitives from
+// well-known addresses). Re-exports the shared primitives from
 // `../constants.ts` so perp code and the `./perp` barrel get the full set from
 // a single import.
+//
+// NOTE: there are deliberately NO fee-rate / maintenance-margin constants here.
+// `CRYPTO_FEE_RATE` / `STOCK_FEE_RATE` / `MAINTENANCE_MARGIN_RATE` were removed
+// — they were defaults masquerading as truth; per-market `MarketConfig` on
+// chain is the only source for fee and margin parameters (real MMRs span
+// 0.5%–5%; the flat 1.5% understated AAPLX-class risk >3x — mainnet incident
+// 2026-07-28: shorts displayed liq ~$364 but were liquidated at ~$343). When
+// the market rate is unavailable, treat the value as NOT estimable and fail
+// safe — never substitute a flat default.
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -18,15 +27,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ACCUMULATOR_ROOT = exports.ACTION_ADD_PRE_ORDER = exports.ACTION_CANCEL_PRE_ORDER = exports.ACTION_UPDATE_ORDER = exports.ACTION_DECREASE_POSITION = exports.ACTION_INCREASE_POSITION = exports.ACTION_LIQUIDATE = exports.ACTION_WITHDRAW_COLLATERAL = exports.ACTION_DEPOSIT_COLLATERAL = exports.ACTION_CANCEL_ORDER = exports.ACTION_PLACE_ORDER = exports.ACTION_CLOSE_POSITION = exports.ACTION_OPEN_POSITION = exports.ORDER_TAG_WILDCARD = exports.ORDER_STOP_SELL = exports.ORDER_STOP_BUY = exports.ORDER_LIMIT_SELL = exports.ORDER_LIMIT_BUY = exports.STAKING_PERM_ALL = exports.STAKING_PERM_CLAIM_REWARD = exports.STAKING_PERM_REDEEM_STAKE = exports.STAKING_PERM_DEPOSIT_STAKE = exports.PERM_ALL = exports.PERM_ALL_TRADING = exports.PERM_REDEEM_WLP = exports.PERM_MINT_WLP = exports.PERM_WITHDRAW_COLLATERAL = exports.PERM_DEPOSIT_COLLATERAL = exports.PERM_CANCEL_ORDER = exports.PERM_PLACE_ORDER = exports.PERM_DECREASE_POSITION = exports.PERM_INCREASE_POSITION = exports.PERM_CLOSE_POSITION = exports.PERM_OPEN_POSITION = exports.MAINTENANCE_MARGIN_RATE = exports.STOCK_FEE_RATE = exports.CRYPTO_FEE_RATE = void 0;
+exports.ACCUMULATOR_ROOT = exports.ACTION_ADD_PRE_ORDER = exports.ACTION_CANCEL_PRE_ORDER = exports.ACTION_UPDATE_ORDER = exports.ACTION_DECREASE_POSITION = exports.ACTION_INCREASE_POSITION = exports.ACTION_LIQUIDATE = exports.ACTION_WITHDRAW_COLLATERAL = exports.ACTION_DEPOSIT_COLLATERAL = exports.ACTION_CANCEL_ORDER = exports.ACTION_PLACE_ORDER = exports.ACTION_CLOSE_POSITION = exports.ACTION_OPEN_POSITION = exports.ORDER_TAG_WILDCARD = exports.ORDER_STOP_SELL = exports.ORDER_STOP_BUY = exports.ORDER_LIMIT_SELL = exports.ORDER_LIMIT_BUY = exports.STAKING_PERM_ALL = exports.STAKING_PERM_CLAIM_REWARD = exports.STAKING_PERM_REDEEM_STAKE = exports.STAKING_PERM_DEPOSIT_STAKE = exports.PERM_ALL = exports.PERM_ALL_TRADING = exports.PERM_REDEEM_WLP = exports.PERM_MINT_WLP = exports.PERM_WITHDRAW_COLLATERAL = exports.PERM_DEPOSIT_COLLATERAL = exports.PERM_CANCEL_ORDER = exports.PERM_PLACE_ORDER = exports.PERM_DECREASE_POSITION = exports.PERM_INCREASE_POSITION = exports.PERM_CLOSE_POSITION = exports.PERM_OPEN_POSITION = void 0;
 __exportStar(require("../constants.js"), exports);
-// ======== Fee rates & risk parameters ========
-/** Default crypto market trading fee rate (3 bps). Per-market value lives in MarketConfig. */
-exports.CRYPTO_FEE_RATE = 0.0003;
-/** Default stock / commodity market trading fee rate (5 bps). Per-market value lives in MarketConfig. */
-exports.STOCK_FEE_RATE = 0.0005;
-/** Default maintenance margin rate (150 bps = 1.5%). Per-market value lives in MarketConfig. */
-exports.MAINTENANCE_MARGIN_RATE = 0.015;
 // ======== Permission Bitmasks (matches account_data.move) ========
 exports.PERM_OPEN_POSITION = 1;
 exports.PERM_CLOSE_POSITION = 2;

package/dist/cjs/src/perp/fetch/account.js

@@ -56,6 +56,9 @@ async function getSpendableCreditBalance(client, accountId) {
         (0, balance_ts_1.probeParkedBackingAssets)(client, accountId),
         (0, balance_ts_1.probeAddressCreditBalance)(client, accountId),
     ]);
+    // COLLATERAL_DECIMALS here is the CREDIT/wxUSD *target* scale (collateral-typed;
+    // 6 on all current deployments — config carries no credit decimal). The
+    // per-asset backing decimals come from config via each row's `decimals`.
     const pendingBackingRaw = (0, balance_ts_1.sumParkedBackingAsCreditRaw)(parkedBacking, constants_ts_1.COLLATERAL_DECIMALS);
     const pendingCreditAtAddressRaw = addressCredit.fundsRaw + addressCredit.coinsRaw;
     const totalRaw = internalRaw + pendingBackingRaw + pendingCreditAtAddressRaw;

package/dist/cjs/src/perp/fetch/bridge.js

@@ -10,6 +10,7 @@ const bcs_1 = require("@mysten/sui/bcs");
 const transactions_1 = require("@mysten/sui/transactions");
 const withdrawal_queue_ts_1 = require("../../generated/withdrawal_queue/withdrawal_queue.js");
 const wormhole_bridge_ts_1 = require("../../generated/wormhole_bridge/wormhole_bridge.js");
+const validate_ts_1 = require("../../utils/validate.js");
 const simulate_ts_1 = require("./simulate.js");
 /**
  * Batched read of the bridge's rate-limit / cap state in a single simulate.
@@ -100,7 +101,7 @@ function requireWithdrawalQueue(client) {
  */
 async function getBridgeFee(client, args) {
     const { pkg, queue } = requireWithdrawalQueue(client);
-    const amount = BigInt(args.amount);
+    const amount = (0, validate_ts_1.toU64)(args.amount, "amount");
     const common = {
         package: pkg,
         typeArguments: [args.creditType ?? client.creditType()],

package/dist/cjs/src/perp/fetch/market.js

@@ -12,6 +12,7 @@ exports.getGlobalConfigData = getGlobalConfigData;
 const bcs_1 = require("@mysten/sui/bcs");
 const transactions_1 = require("@mysten/sui/transactions");
 const view_ts_1 = require("../../generated/waterx_perp_view/view.js");
+const validate_ts_1 = require("../../utils/validate.js");
 const simulate_ts_1 = require("./simulate.js");
 /**
  * Look up the registered AccountData for a given wxa account ID.
@@ -59,7 +60,7 @@ async function getTokenPoolData(client, args) {
         package: client.config.packages.waterx_perp_view.published_at,
         arguments: {
             pool: tx.object(client.config.packages.wlp.wlp_pool),
-            tokenIndex: args.tokenIndex,
+            tokenIndex: (0, validate_ts_1.toU64)(args.tokenIndex, "tokenIndex"),
         },
         typeArguments: [(0, simulate_ts_1.withLp)(client, args.lpType)],
     })(tx);

package/dist/cjs/src/perp/fetch/positions.d.ts

@@ -3,7 +3,9 @@
  * list (`waterx_perp_view`).
  */
 import { OrderData, PositionData, RedeemRequestData } from "../../generated/waterx_perp_view/view.ts";
+import { parseWholeDollarU64, type WholeDollarUsdPrice } from "../../utils/validate.ts";
 import type { PerpClient } from "../client.ts";
+export { parseWholeDollarU64, type WholeDollarUsdPrice };
 export type PositionDataView = ReturnType<typeof PositionData.parse>;
 export declare function positionExists(client: PerpClient, args: {
     ticker: string;
@@ -13,9 +15,8 @@ export declare function positionExists(client: PerpClient, args: {
 export declare function getPosition(client: PerpClient, args: {
     ticker: string;
     positionId: bigint | number;
-    /** Human-readable USD prices for Pnl / liq price calc; pass 0n if unsure. */
-    basePriceUsd: bigint | number;
-    collateralPriceUsd: bigint | number;
+    basePriceUsd: WholeDollarUsdPrice;
+    collateralPriceUsd: WholeDollarUsdPrice;
     lpType?: string;
 }): Promise<PositionDataView>;
 export type OrderDataView = ReturnType<typeof OrderData.parse>;
@@ -23,8 +24,9 @@ export declare function getOrder(client: PerpClient, args: {
     ticker: string;
     orderId: bigint | number;
     orderTypeTag: number;
+    /** Raw 1e9-scaled u128 order-book key — same scale as tx-build `rawPrice()`. */
     triggerPrice: bigint | number;
-    basePriceUsd: bigint | number;
+    basePriceUsd: WholeDollarUsdPrice;
     lpType?: string;
 }): Promise<OrderDataView>;
 export interface PageOpts {
@@ -33,7 +35,8 @@ export interface PageOpts {
 }
 export declare function getMarketOrders(client: PerpClient, args: {
     ticker: string;
-    basePriceUsd?: bigint | number;
+    /** Defaults to `0n`. */
+    basePriceUsd?: WholeDollarUsdPrice;
     lpType?: string;
 } & PageOpts): Promise<{
     orders: OrderDataView[];
@@ -41,8 +44,9 @@ export declare function getMarketOrders(client: PerpClient, args: {
 }>;
 export declare function getMarketPositions(client: PerpClient, args: {
     ticker: string;
-    basePriceUsd: bigint | number;
-    collateralPriceUsd?: bigint | number;
+    basePriceUsd: WholeDollarUsdPrice;
+    /** Defaults to `0n`. */
+    collateralPriceUsd?: WholeDollarUsdPrice;
     lpType?: string;
 } & PageOpts): Promise<{
     positions: PositionDataView[];
@@ -51,14 +55,16 @@ export declare function getMarketPositions(client: PerpClient, args: {
 export declare function getAccountPositions(client: PerpClient, args: {
     ticker: string;
     accountObjectAddress: string;
-    basePriceUsd: bigint | number;
-    collateralPriceUsd?: bigint | number;
+    basePriceUsd: WholeDollarUsdPrice;
+    /** Defaults to `0n`. */
+    collateralPriceUsd?: WholeDollarUsdPrice;
     lpType?: string;
 }): Promise<PositionDataView[]>;
 export declare function getAccountOrders(client: PerpClient, args: {
     ticker: string;
     accountObjectAddress: string;
-    basePriceUsd?: bigint | number;
+    /** Defaults to `0n`. */
+    basePriceUsd?: WholeDollarUsdPrice;
     lpType?: string;
 }): Promise<OrderDataView[]>;
 export type RedeemRequestDataView = ReturnType<typeof RedeemRequestData.parse>;