@waterx/sdk 4.1.0 → 4.3.1

package/dist/src/perp/client.d.ts

@@ -11,37 +11,50 @@
  * {@link PerpConfigView}. This class is just the wiring + factory between them.
  */
 import { BaseLineClient } from "../base-client.ts";
-import type { OracleSource } from "../oracle/price-update-rule.ts";
+import { type OracleSource } from "../oracle/price-update-rule.ts";
 import type { FetchPolicy } from "../oracle/update-fetch.ts";
-import { type LoadConfigOptions, type PythFetchPolicy, type PythInfraConfig, type WaterXConfig, type WaterxInfraConfig, type WormholeInfraConfig } from "./config.ts";
+import { type LoadConfigOptions, type PythAccessConfig, type PythFetchPolicy, type WaterxAccessConfig, type WaterXConfig, type WormholeInfraConfig } from "./config.ts";
 import type { Network } from "./constants.ts";
 export interface CreateClientOptions extends LoadConfigOptions {
     grpcUrl?: string;
     /**
-     * Which oracle price-update source drives `refreshOraclePrices`. Each source
-     * is self-contained (own infra + config) with NO cross-source fallback:
+     * Which oracle price-update source drives `refreshOraclePrices`. REQUIRED —
+     * there is NO default source: every deployment names its source explicitly
+     * (wire it from your own env var, e.g. `ORACLE_SOURCE`). Each source is
+     * self-contained (own infra, own endpoints, own config) with NO cross-source
+     * fallback:
      *
-     * - `'pyth_rule'` (default) — Pyth Core `pyth_rule` updates (Hermes VAA +
-     *   per-feed update fees), Core state + keyless Core Hermes.
+     * - `'pyth_rule'` — Pyth Core `pyth_rule` updates (Hermes VAA + per-feed
+     *   update fees); Core state + Hermes endpoint live in the source's own
+     *   `PYTH_CORE_INFRA` table.
      * - `'pyth_lazer_rule'` — Pyth Lazer signed updates (ONE `leEcdsa` verify
      *   per PTB, no per-feed fees); needs `packages.pyth_lazer_rule` with feeds
-     *   and a `pythApiKey` (Lazer is auth-first).
+     *   and a `pythApiKey` (Lazer is auth-first); Lazer infra lives in the
+     *   source's own `LAZER_INFRA` table.
      * - `'waterx_rule'` — the first-party WaterX quote-center (Nautilus-TEE,
      *   ed25519-signed batches): ONE envelope covering the build's tickers,
      *   verified AND fed by a single `collect_batch_latest` per collector. No
      *   credential and no per-update fee; needs `packages.waterx_rule` with
-     *   feeds. Endpoint/transport via {@link CreateClientOptions.waterxEndpoint}
-     *   / {@link CreateClientOptions.waterxFetch} — the browser-CORS proxy hook,
+     *   feeds. Quote-center infra lives in the source's own `WATERX_INFRA`
+     *   table; endpoint/transport overridable via
+     *   {@link CreateClientOptions.waterxEndpoint} /
+     *   {@link CreateClientOptions.waterxFetch} — the browser-CORS proxy hook,
      *   since this is the one source fetched from the page.
      *
      * The name is source-neutral on purpose — a source need not be Pyth (as
      * `'waterx_rule'` shows). Selecting a source whose feed for a requested
      * ticker is absent is NOT an error at client creation: it fails at tx-build
-     * time for exactly those tickers (see `refreshOraclePrices`). The Pyth Core
-     * infra is fixed per network by `PYTH_DEFAULTS` and is not
-     * deployment-overridable.
+     * time for exactly those tickers (see `refreshOraclePrices`).
+     *
+     * Accepts a SINGLE source or a LIST. A list means every listed source's
+     * data is fetched and fed in one build — required whenever the on-chain
+     * weight tables have more than one rule weighted (e.g. a Core→Pro or
+     * Pro+Waterx coexistence window): the chain drops unweighted contributions
+     * (harmless) but aborts on a starved weighted rule, so the list must stay a
+     * SUPERSET of every ticker's weighted set. Order is meaningful to consumers
+     * (read-plane priority), not to the on-chain build.
      */
-    oracleSource?: OracleSource;
+    oracleSource: OracleSource | OracleSource[];
     /**
      * Pyth Lazer access token (`Authorization: Bearer …`). Required under
      * `oracleSource: 'pyth_lazer_rule'` (Lazer is auth-first) and unused by
@@ -57,7 +70,7 @@ export interface CreateClientOptions extends LoadConfigOptions {
     pythFetch?: PythFetchPolicy;
     /**
      * Quote-center base URL for `oracleSource: 'waterx_rule'` — overrides the
-     * per-network {@link WATERX_DEFAULTS} host.
+     * source's own per-network `WATERX_INFRA` default.
      *
      * This is the one source a BROWSER fetches itself (the signed envelope is
      * pulled from the page), so it is bound by the quote-center deployment's CORS
@@ -73,28 +86,28 @@ export interface CreateClientOptions extends LoadConfigOptions {
     waterxEndpoint?: string;
     /**
      * Retry/timeout policy — and `fetchImpl` — for the quote-center fetch (see
-     * `fetchWithPolicy`). Optional: falls back to `pythFetch`, then to the
-     * built-in defaults. Supply `fetchImpl` to route the request through your own
+     * `fetchWithPolicy`). Optional: falls back to the built-in defaults — never
+     * to `pythFetch` (sources stay independent). Supply `fetchImpl` to route the request through your own
      * transport (a proxying `fetch` wrapper, a non-global `fetch`, a test double).
      */
     waterxFetch?: FetchPolicy;
 }
 export declare class PerpClient extends BaseLineClient<WaterXConfig> {
-    /** Pyth Core infra (fixed per network) plus the caller-supplied credential/policy. */
-    pyth: PythInfraConfig;
+    /** Caller-supplied Pyth credential + fetch policy — NO infra; each source owns its own tables. */
+    pyth: PythAccessConfig;
     /**
-     * WaterX quote-center infra for `oracleSource: 'waterx_rule'` — the network
-     * default, overridden by the `waterxEndpoint` / `waterxFetch` create options
-     * (a same-origin proxy or a custom `fetchImpl` for browser consumers).
+     * Caller-supplied quote-center overrides for `oracleSource: 'waterx_rule'`
+     * (`waterxEndpoint` / `waterxFetch` create options) — access-only, mirroring
+     * `pyth` above; unset fields resolve against the rule's own `WATERX_INFRA`.
      */
-    waterx: WaterxInfraConfig;
+    waterx: WaterxAccessConfig;
     /** Wormhole infra for the credit bridge (network defaults unless overridden). */
     wormhole: WormholeInfraConfig;
-    /** Selected oracle price-update source (`oracleSource` create option; default `'pyth_rule'`). */
-    readonly oracleSource: OracleSource;
+    /** The fed set: `oracleSource` create option normalized to a non-empty, deduped list. */
+    readonly oracleSources: readonly OracleSource[];
     /** Canonical-schema lookups (delegated to below); no transport. */
     private readonly view;
-    constructor(network: Network, config: WaterXConfig, opts?: CreateClientOptions);
+    constructor(network: Network, config: WaterXConfig, opts: CreateClientOptions);
     /**
      * Async factory: fetches the deployment config for `network` and returns
      * a ready-to-use client. Pass `opts.cache=true` to memoize the JSON.
@@ -103,9 +116,9 @@ export declare class PerpClient extends BaseLineClient<WaterXConfig> {
      * not an error at init — it surfaces at tx-build time for the specific
      * tickers that source can't serve (see `refreshOraclePrices`).
      */
-    static create(network: Network, opts?: CreateClientOptions): Promise<PerpClient>;
-    static mainnet(opts?: CreateClientOptions): Promise<PerpClient>;
-    static testnet(opts?: CreateClientOptions): Promise<PerpClient>;
+    static create(network: Network, opts: CreateClientOptions): Promise<PerpClient>;
+    static mainnet(opts: CreateClientOptions): Promise<PerpClient>;
+    static testnet(opts: CreateClientOptions): Promise<PerpClient>;
     /** @see PerpConfigView.getMarket */
     getMarket(ticker: string): import("./config.ts").WaterxPerpMarketEntry;
     /** @see PerpConfigView.getAggregator */

package/dist/src/perp/client.js

@@ -11,44 +11,56 @@
  * {@link PerpConfigView}. This class is just the wiring + factory between them.
  */
 import { BaseLineClient } from "../base-client.js";
+import { ORACLE_SOURCES } from "../oracle/price-update-rule.js";
+import { isOracleSource } from "../oracle/source-list.js";
 import { PerpConfigView } from "./config-view.js";
-import { loadConfig, PYTH_DEFAULTS, WATERX_DEFAULTS, WORMHOLE_DEFAULTS, } from "./config.js";
+import { loadConfig, WORMHOLE_DEFAULTS, } from "./config.js";
 export class PerpClient extends BaseLineClient {
-    /** Pyth Core infra (fixed per network) plus the caller-supplied credential/policy. */
+    /** Caller-supplied Pyth credential + fetch policy — NO infra; each source owns its own tables. */
     pyth;
     /**
-     * WaterX quote-center infra for `oracleSource: 'waterx_rule'` — the network
-     * default, overridden by the `waterxEndpoint` / `waterxFetch` create options
-     * (a same-origin proxy or a custom `fetchImpl` for browser consumers).
+     * Caller-supplied quote-center overrides for `oracleSource: 'waterx_rule'`
+     * (`waterxEndpoint` / `waterxFetch` create options) — access-only, mirroring
+     * `pyth` above; unset fields resolve against the rule's own `WATERX_INFRA`.
      */
     waterx;
     /** Wormhole infra for the credit bridge (network defaults unless overridden). */
     wormhole;
-    /** Selected oracle price-update source (`oracleSource` create option; default `'pyth_rule'`). */
-    oracleSource;
+    /** The fed set: `oracleSource` create option normalized to a non-empty, deduped list. */
+    oracleSources;
     /** Canonical-schema lookups (delegated to below); no transport. */
     view;
-    constructor(network, config, opts = {}) {
+    constructor(network, config, opts) {
         super(network, config, opts);
-        // Pyth Core infra is fixed per network — NOT deployment-overridable and
-        // NOT source-dependent (the pyth_lazer_rule source reads only api_key/fetch
-        // from here). The api_key + fetch policy are caller-supplied at init: a
-        // secret has no place in the canonical waterx-config JSON.
+        // Access-only slice: the api_key + fetch policy are caller-supplied at
+        // init (a secret has no place in the canonical waterx-config JSON). All
+        // endpoint/object-id infra is per-source, owned by the rule modules —
+        // nothing infra-shaped lives on the client.
         this.pyth = {
-            ...PYTH_DEFAULTS[network],
             ...(opts.pythApiKey !== undefined ? { api_key: opts.pythApiKey } : {}),
             ...(opts.pythFetch !== undefined ? { fetch: opts.pythFetch } : {}),
         };
         this.wormhole = config.wormhole ?? WORMHOLE_DEFAULTS[network];
-        // Quote-center infra: network default, each field independently overridable
-        // — a browser blocked by the quote-center's CORS allowlist swaps `endpoint`
-        // for a same-origin proxy without touching anything else.
+        // Quote-center access slice: overrides only — a browser blocked by the
+        // quote-center's CORS allowlist swaps `endpoint` for a same-origin proxy;
+        // unset fields resolve inside the rule against WATERX_INFRA[network].
         this.waterx = {
-            ...WATERX_DEFAULTS[network],
             ...(opts.waterxEndpoint !== undefined ? { endpoint: opts.waterxEndpoint } : {}),
             ...(opts.waterxFetch !== undefined ? { fetch: opts.waterxFetch } : {}),
         };
-        this.oracleSource = opts.oracleSource ?? "pyth_rule";
+        // Normalize single-or-list to a deduped, order-preserving list, gated by
+        // `isOracleSource` — the SAME predicate `parseOracleSourceList` uses. An
+        // empty list, a nullish entry (an untyped caller omitting the REQUIRED
+        // option), or an unregistered value (`'core'`, `'pyth'`, …) fails
+        // construction loudly instead of booting green and surfacing as
+        // `OracleSourceNotImplemented` at the first tx-build.
+        const sources = Array.isArray(opts.oracleSource) ? opts.oracleSource : [opts.oracleSource];
+        this.oracleSources = [...new Set(sources)];
+        if (this.oracleSources.length === 0 ||
+            this.oracleSources.some((source) => !isOracleSource(source))) {
+            throw new Error(`oracleSource is REQUIRED and must name at least one of ${ORACLE_SOURCES.join(" | ")} ` +
+                `(got ${JSON.stringify(sources)})`);
+        }
         this.view = new PerpConfigView(() => this.config, () => this.wormhole);
     }
     /**
@@ -59,14 +71,14 @@ export class PerpClient extends BaseLineClient {
      * not an error at init — it surfaces at tx-build time for the specific
      * tickers that source can't serve (see `refreshOraclePrices`).
      */
-    static async create(network, opts = {}) {
+    static async create(network, opts) {
         const config = await loadConfig(network, opts);
         return new PerpClient(network, config, opts);
     }
-    static mainnet(opts = {}) {
+    static mainnet(opts) {
         return PerpClient.create("MAINNET", opts);
     }
-    static testnet(opts = {}) {
+    static testnet(opts) {
         return PerpClient.create("TESTNET", opts);
     }
     // ========================================================

package/dist/src/perp/config-view.js

@@ -8,6 +8,7 @@
  * callers keep calling `client.getMarket(...)` / `client.wlpType()` unchanged.
  * Tested in isolation against a plain config object — no network needed.
  */
+import { ownEntry } from "../utils/record.js";
 export class PerpConfigView {
     getConfig;
     getWormhole;
@@ -26,21 +27,21 @@ export class PerpConfigView {
     }
     /** `waterx_perp.markets[ticker]`, throws if unknown. */
     getMarket(ticker) {
-        const m = this.config.packages.waterx_perp?.markets?.[ticker];
+        const m = ownEntry(this.config.packages.waterx_perp?.markets, ticker);
         if (!m)
             throw new Error(`Unknown market ticker: ${ticker}`);
         return m;
     }
     /** `waterx_oracle.aggregators[ticker]`, throws if unknown. */
     getAggregator(ticker) {
-        const a = this.config.packages.waterx_oracle?.aggregators?.[ticker];
+        const a = ownEntry(this.config.packages.waterx_oracle?.aggregators, ticker);
         if (!a)
             throw new Error(`No aggregator listed for ticker: ${ticker}`);
         return a;
     }
     /** `pyth_rule.feeds[ticker]`, throws if unknown. */
     getPythFeed(ticker) {
-        const f = this.config.packages.pyth_rule?.feeds?.[ticker];
+        const f = ownEntry(this.config.packages.pyth_rule?.feeds, ticker);
         if (!f)
             throw new Error(`No pyth feed listed for ticker: ${ticker}`);
         return f;
@@ -66,7 +67,7 @@ export class PerpConfigView {
         const c = this.config.packages.constant_rule;
         if (!c?.published_at || !c.config)
             return false;
-        return c.feeds?.[ticker] !== undefined;
+        return ownEntry(c.feeds, ticker) !== undefined;
     }
     /**
      * The `supra_rule` config when it is deployed, enabled, and fully wired
@@ -92,7 +93,7 @@ export class PerpConfigView {
      */
     getPoolTokenType(tickerOrName) {
         const poolTokens = this.config.packages.wlp?.pool_tokens ?? {};
-        const exact = poolTokens[tickerOrName];
+        const exact = ownEntry(poolTokens, tickerOrName);
         if (exact)
             return exact;
         for (const t of Object.values(poolTokens)) {
@@ -115,7 +116,7 @@ export class PerpConfigView {
      * reward coin type, so callers don't need a separate alias-to-type lookup.
      */
     getRewarders(stakeAlias) {
-        const map = this.config.packages.waterx_staking?.rewarders?.[stakeAlias];
+        const map = ownEntry(this.config.packages.waterx_staking?.rewarders, stakeAlias);
         if (!map)
             return [];
         return Object.entries(map).map(([alias, entry]) => ({ alias, ...entry }));

package/dist/src/perp/config.d.ts

@@ -3,17 +3,17 @@
  * `waterx-config` repo (default: GitHub raw).
  *
  * The schema mirrors the canonical JSON layout one-to-one (each package
- * groups its own object IDs + per-ticker maps). External chain infra
- * (Pyth state, Wormhole state/core, Hermes & Wormholescan endpoints) is
- * **not** in the JSON — it lives in `PYTH_DEFAULTS` / `WORMHOLE_DEFAULTS`
- * below, keyed by network.
+ * groups its own object IDs + per-ticker maps). External chain infra is
+ * **not** in the JSON — each oracle source owns its own per-network table
+ * (`PYTH_CORE_INFRA` in `oracle/pyth.ts`, `LAZER_INFRA` in
+ * `oracle/rules/pyth-lazer-rule.ts`); Wormhole bridge infra lives in
+ * `WORMHOLE_DEFAULTS` below.
  */
 import type { AccountPackages, BasePackageEntry, WormholeInfraConfig } from "../account/config.ts";
 import type { OraclePackages } from "../oracle/config.ts";
 import type { Network } from "./constants.ts";
 export type { AccountConfig, AccountPackages, BasePackageEntry, NativeCustodyAsset, NativeCustodyPackage, WaterxCreditPackage, WaterxReferralPackage, WithdrawalQueuePackage, WormholeBridgePackage, WormholeInfraConfig, WxaAccountPackage, } from "../account/config.ts";
-export type { ConstantFeedEntry, OracleConfig, OraclePackages, PythFetchPolicy, PythInfraConfig, PythLazerRulePackage, PythRulePackage, PythSponsorRulePackage, SupraFeedEntry, SupraRulePackage, WaterxConstantRulePackage, WaterxInfraConfig, WaterxOraclePackage, WaterxRulePackage, } from "../oracle/config.ts";
-export { PYTH_DEFAULTS, WATERX_DEFAULTS } from "../oracle/config.ts";
+export type { ConstantFeedEntry, OracleConfig, OraclePackages, PythAccessConfig, PythFetchPolicy, PythLazerRulePackage, PythRulePackage, PythSponsorRulePackage, SupraFeedEntry, SupraRulePackage, WaterxConstantRulePackage, WaterxAccessConfig, WaterxOraclePackage, WaterxRulePackage, } from "../oracle/config.ts";
 export interface WaterxPerpMarketEntry {
     market: string;
     config: string;

package/dist/src/perp/config.js

@@ -3,23 +3,25 @@
  * `waterx-config` repo (default: GitHub raw).
  *
  * The schema mirrors the canonical JSON layout one-to-one (each package
- * groups its own object IDs + per-ticker maps). External chain infra
- * (Pyth state, Wormhole state/core, Hermes & Wormholescan endpoints) is
- * **not** in the JSON — it lives in `PYTH_DEFAULTS` / `WORMHOLE_DEFAULTS`
- * below, keyed by network.
+ * groups its own object IDs + per-ticker maps). External chain infra is
+ * **not** in the JSON — each oracle source owns its own per-network table
+ * (`PYTH_CORE_INFRA` in `oracle/pyth.ts`, `LAZER_INFRA` in
+ * `oracle/rules/pyth-lazer-rule.ts`); Wormhole bridge infra lives in
+ * `WORMHOLE_DEFAULTS` below.
  */
 import { fetchWithPolicy, rethrowExhaustedFetch } from "../oracle/update-fetch.js";
-export { PYTH_DEFAULTS, WATERX_DEFAULTS } from "../oracle/config.js";
 // ============================================================================
-// Wormhole / Hermes — external chain infra, defaults by network
+// Wormhole — external chain infra, defaults by network
 // ============================================================================
 //
-// `PythInfraConfig` + `PYTH_DEFAULTS` live in `oracle/config.ts` (shared infra)
-// and are re-exported at the top of this file.
+// Oracle-source infra lives with each source (`PYTH_CORE_INFRA` in
+// `oracle/pyth.ts`, `LAZER_INFRA` in `oracle/rules/pyth-lazer-rule.ts`);
+// `client.pyth` is the caller-supplied access slice only (`PythAccessConfig`,
+// re-exported at the top of this file).
 // `WormholeInfraConfig` is defined in `account/config.ts` (funding base) and
 // re-exported at the top of this file. `state_id` is the same shared Sui
 // Wormhole `State` object Pyth uses (kept in sync with
-// `PYTH_DEFAULTS[*].wormhole_state_id`).
+// `PYTH_CORE_INFRA[*].wormhole_state_id`).
 export const WORMHOLE_DEFAULTS = {
     MAINNET: {
         state_id: "0xaeab97f96cf9877fee2883315d459552b2b921edc16d7ceac6eab944dd88919c",

package/dist/src/perp/index.d.ts

@@ -1,7 +1,7 @@
 export { PerpClient } from "./client.ts";
 export type { CreateClientOptions } from "./client.ts";
-export { PYTH_DEFAULTS, WORMHOLE_DEFAULTS, clearConfigCache, loadConfig } from "./config.ts";
-export type { BasePackageEntry, ConstantFeedEntry, WaterxReferralPackage, LoadConfigOptions, NativeCustodyAsset, NativeCustodyPackage, PythFetchPolicy, PythInfraConfig, PythLazerRulePackage, PythRulePackage, PythSponsorRulePackage, SupraFeedEntry, SupraRulePackage, TestnetFaucetPackage, WaterXConfig, WaterXPackages, WaterxCreditPackage, WaterxOraclePackage, WaterxPerpMarketEntry, WaterxPerpPackage, WaterxStakingPackage, WithdrawalQueuePackage, WlpPackage, WormholeBridgePackage, WormholeInfraConfig, WxaAccountPackage, } from "./config.ts";
+export { WORMHOLE_DEFAULTS, clearConfigCache, loadConfig } from "./config.ts";
+export type { BasePackageEntry, ConstantFeedEntry, WaterxReferralPackage, LoadConfigOptions, NativeCustodyAsset, NativeCustodyPackage, PythAccessConfig, PythFetchPolicy, PythLazerRulePackage, PythRulePackage, PythSponsorRulePackage, SupraFeedEntry, SupraRulePackage, TestnetFaucetPackage, WaterXConfig, WaterXPackages, WaterxCreditPackage, WaterxOraclePackage, WaterxPerpMarketEntry, WaterxPerpPackage, WaterxStakingPackage, WithdrawalQueuePackage, WlpPackage, WormholeBridgePackage, WormholeInfraConfig, WxaAccountPackage, } from "./config.ts";
 export { ACTION_ADD_PRE_ORDER, ACTION_CANCEL_ORDER, ACTION_CANCEL_PRE_ORDER, ACTION_CLOSE_POSITION, ACTION_DECREASE_POSITION, ACTION_DEPOSIT_COLLATERAL, ACTION_INCREASE_POSITION, ACTION_LIQUIDATE, ACTION_OPEN_POSITION, ACTION_PLACE_ORDER, ACTION_UPDATE_ORDER, ACTION_WITHDRAW_COLLATERAL, BPS_SCALE, DOUBLE_SCALE, DRY_RUN_SENDER, FLOAT_SCALE, ORDER_LIMIT_BUY, ORDER_LIMIT_SELL, ORDER_STOP_BUY, ORDER_STOP_SELL, ORDER_TAG_WILDCARD, PERM_ALL, PERM_ALL_TRADING, PERM_CANCEL_ORDER, PERM_CLOSE_POSITION, PERM_DECREASE_POSITION, PERM_DEPOSIT_COLLATERAL, PERM_INCREASE_POSITION, PERM_MINT_WLP, PERM_OPEN_POSITION, PERM_PLACE_ORDER, PERM_REDEEM_WLP, PERM_WITHDRAW_COLLATERAL, STAKING_PERM_DEPOSIT_STAKE, STAKING_PERM_REDEEM_STAKE, STAKING_PERM_CLAIM_REWARD, STAKING_PERM_ALL, MS_PER_MINUTE, MS_PER_HOUR, MS_PER_YEAR, SUI_DECIMALS, WLP_DECIMALS, COLLATERAL_DECIMALS, TOKEN_DECIMALS, } from "./constants.ts";
 export type { Network } from "./constants.ts";
 export { getMarketTickers, getCollateralAssets } from "../utils/config.ts";
@@ -13,7 +13,7 @@ export type { EstLiqPriceViewOpts } from "./liq-view.ts";
 export * from "./user/index.ts";
 export * from "./tx-builders.ts";
 export * from "./fetch.ts";
-export { FetchPolicyError, LazerApiKeyMissingError, OracleFeeSourceUnavailableError, OracleSourceNotImplementedError, PythCache, aggregateTicker, aggregateTickerWithConstant, aggregateTickerWithPyth, buildPythPriceUpdateCalls, fetchPriceFeedsUpdateData, refreshOraclePrices, updatePythPrices, } from "../oracle/index.ts";
+export { FetchPolicyError, LazerApiKeyMissingError, OracleFeeSourceUnavailableError, OracleSourceNotImplementedError, PythCache, aggregateTicker, aggregateTickerWithConstant, aggregateTickerWithPyth, ORACLE_SOURCES, buildPythPriceUpdateCalls, fetchPriceFeedsUpdateData, isOracleSource, parseOracleSourceList, pythCoreHermesEndpoint, pythProHermesEndpoint, refreshOraclePrices, resolveHermesReadEndpoint, updatePythPrices, waterxEnvelopeOf, waterxQuoteCenterEndpoint, } from "../oracle/index.ts";
 export type { FetchPolicy, OracleFeeSource, OracleSource, UpdateDataProvider, } from "../oracle/index.ts";
 export { fetchDepositVaa, fetchVaa, listBridgeWithdrawalVaas, listVaasByEmitter, padEvmEmitter, toWormholescanEmitter, vaaBase64ToBytes, vaaBase64ToHex, vaaBytesToBase64, waitForVaa, } from "../account/funding/wormhole.ts";
 export type { VaaListItem, VaaResponse, WormholescanOptions } from "../account/funding/wormhole.ts";

package/dist/src/perp/index.js

@@ -1,6 +1,6 @@
 // ======== Core ========
 export { PerpClient } from "./client.js";
-export { PYTH_DEFAULTS, WORMHOLE_DEFAULTS, clearConfigCache, loadConfig } from "./config.js";
+export { WORMHOLE_DEFAULTS, clearConfigCache, loadConfig } from "./config.js";
 // ======== Constants & enums ========
 export { ACTION_ADD_PRE_ORDER, ACTION_CANCEL_ORDER, ACTION_CANCEL_PRE_ORDER, ACTION_CLOSE_POSITION, ACTION_DECREASE_POSITION, ACTION_DEPOSIT_COLLATERAL, ACTION_INCREASE_POSITION, ACTION_LIQUIDATE, ACTION_OPEN_POSITION, ACTION_PLACE_ORDER, ACTION_UPDATE_ORDER, ACTION_WITHDRAW_COLLATERAL, BPS_SCALE, DOUBLE_SCALE, DRY_RUN_SENDER, FLOAT_SCALE, ORDER_LIMIT_BUY, ORDER_LIMIT_SELL, ORDER_STOP_BUY, ORDER_STOP_SELL, ORDER_TAG_WILDCARD, PERM_ALL, PERM_ALL_TRADING, PERM_CANCEL_ORDER, PERM_CLOSE_POSITION, PERM_DECREASE_POSITION, PERM_DEPOSIT_COLLATERAL, PERM_INCREASE_POSITION, PERM_MINT_WLP, PERM_OPEN_POSITION, PERM_PLACE_ORDER, PERM_REDEEM_WLP, PERM_WITHDRAW_COLLATERAL, STAKING_PERM_DEPOSIT_STAKE, STAKING_PERM_REDEEM_STAKE, STAKING_PERM_CLAIM_REWARD, STAKING_PERM_ALL, MS_PER_MINUTE, MS_PER_HOUR, MS_PER_YEAR, SUI_DECIMALS, WLP_DECIMALS, COLLATERAL_DECIMALS, TOKEN_DECIMALS, } from "./constants.js";
 // ======== Utilities ========
@@ -15,7 +15,7 @@ export * from "./tx-builders.js";
 // ======== Read-only queries ========
 export * from "./fetch.js";
 // ======== Oracle utilities (Pyth source + rule aggregation) ========
-export { FetchPolicyError, LazerApiKeyMissingError, OracleFeeSourceUnavailableError, OracleSourceNotImplementedError, PythCache, aggregateTicker, aggregateTickerWithConstant, aggregateTickerWithPyth, buildPythPriceUpdateCalls, fetchPriceFeedsUpdateData, refreshOraclePrices, updatePythPrices, } from "../oracle/index.js";
+export { FetchPolicyError, LazerApiKeyMissingError, OracleFeeSourceUnavailableError, OracleSourceNotImplementedError, PythCache, aggregateTicker, aggregateTickerWithConstant, aggregateTickerWithPyth, ORACLE_SOURCES, buildPythPriceUpdateCalls, fetchPriceFeedsUpdateData, isOracleSource, parseOracleSourceList, pythCoreHermesEndpoint, pythProHermesEndpoint, refreshOraclePrices, resolveHermesReadEndpoint, updatePythPrices, waterxEnvelopeOf, waterxQuoteCenterEndpoint, } from "../oracle/index.js";
 // ======== Wormhole / Wormholescan utilities (credit bridge) ========
 export { fetchDepositVaa, fetchVaa, listBridgeWithdrawalVaas, listVaasByEmitter, padEvmEmitter, toWormholescanEmitter, vaaBase64ToBytes, vaaBase64ToHex, vaaBytesToBase64, waitForVaa, } from "../account/funding/wormhole.js";
 // ======== Generated BCS types (sui-ts-codegen) ========

package/dist/src/perp/user/staking.js

@@ -17,9 +17,10 @@
  */
 import { makeSenderRequest } from "../../account/account-request.js";
 import * as staking from "../../generated/waterx_staking/waterx_staking.js";
+import { ownEntry } from "../../utils/record.js";
 import { toU64Arg } from "../../utils/validate.js";
 function pool(client, stakeAlias) {
-    const id = client.config.packages.waterx_staking?.pools?.[stakeAlias];
+    const id = ownEntry(client.config.packages.waterx_staking?.pools, stakeAlias);
     if (!id) {
         throw new Error(`config.packages.waterx_staking.pools[${stakeAlias}] is not set — staking is not deployed for this stake type`);
     }

package/dist/src/unified-client.d.ts

@@ -3,7 +3,7 @@
  *
  * Exposes three namespaces over the two product-line sub-clients:
  *
- *   const client = await WaterXClient.create({ network: "TESTNET" });
+ *   const client = await WaterXClient.create({ network: "TESTNET", oracleSource: "pyth_rule" });
  *   client.account.createAccount(tx, { alias });   // -> shared waterx_account + funding
  *   client.perp.placeOrderRequest(tx, params);     // -> perp builder
  *   client.predict.placeOrder(tx, params);         // -> prediction builder
@@ -370,20 +370,25 @@ export interface ClientCreateOptions {
     /**
      * The perp line's oracle price-update source (perp-line only — the
      * prediction line has no oracle leg), forwarded to `PerpClient.create`.
+     * REQUIRED — there is NO default source: every deployment names its source
+     * explicitly (wire it from your own env var, e.g. `ORACLE_SOURCE`).
      * Source-neutral by design: a source need not be Pyth (see `'waterx_rule'`).
      *
-     * - `'pyth_rule'` (default) — Pyth Core updates on Core infra.
+     * - `'pyth_rule'` — Pyth Core updates; infra in the source's own
+     *   `PYTH_CORE_INFRA` table.
      * - `'pyth_lazer_rule'` — Pyth Lazer signed updates (pair with `pythApiKey`
-     *   and a config carrying `packages.pyth_lazer_rule`).
+     *   and a config carrying `packages.pyth_lazer_rule`); infra in the
+     *   source's own `LAZER_INFRA` table.
      * - `'waterx_rule'` — the first-party WaterX quote-center (Nautilus-TEE,
-     *   ed25519 signed batches; no credential, no per-update fee). Pair with
-     *   `waterxEndpoint` / `waterxFetch` when the browser needs a proxy.
+     *   ed25519 signed batches; no credential, no per-update fee); infra in the
+     *   source's own `WATERX_INFRA` table. Pair with `waterxEndpoint` /
+     *   `waterxFetch` when the browser needs a proxy.
      *
      * Each source is self-contained with no cross-source fallback; selecting a
      * source whose feed for a ticker is absent fails at tx-build (not at init).
      * See perp `CreateClientOptions.oracleSource` for the full note.
      */
-    oracleSource?: OracleSource;
+    oracleSource: OracleSource | OracleSource[];
     /**
      * Pyth Lazer access token, forwarded to the perp line. Required under
      * `oracleSource: 'pyth_lazer_rule'`, unused by `'pyth_rule'`. A SECRET —
@@ -395,7 +400,7 @@ export interface ClientCreateOptions {
     pythFetch?: PythFetchPolicy;
     /**
      * Quote-center base URL for `oracleSource: 'waterx_rule'`, forwarded to the
-     * perp line — overrides the per-network `WATERX_DEFAULTS` host.
+     * perp line — overrides the source's own per-network `WATERX_INFRA` default.
      *
      * `waterx_rule` is the one source a BROWSER fetches itself, so it is bound by
      * the quote-center deployment's CORS allowlist: a front end whose origin is
@@ -406,7 +411,7 @@ export interface ClientCreateOptions {
     waterxEndpoint?: string;
     /**
      * Retry/timeout policy — and `fetchImpl` — for the perp line's quote-center
-     * fetch. Falls back to `pythFetch`, then to the built-in defaults.
+     * fetch. Falls back to the built-in defaults — never to `pythFetch`.
      */
     waterxFetch?: FetchPolicy;
     /** Perp-line overrides (network, grpcUrl, waterxConfigUrl, cache, …). */
@@ -448,6 +453,6 @@ export declare class WaterXClient {
      * `waterx-config` JSON) and returns a ready client. Each line can target a
      * different network via `opts.perp.network` / `opts.predict.network`.
      */
-    static create(opts?: ClientCreateOptions): Promise<WaterXClient>;
+    static create(opts: ClientCreateOptions): Promise<WaterXClient>;
 }
 export {};

package/dist/src/unified-client.js

@@ -3,7 +3,7 @@
  *
  * Exposes three namespaces over the two product-line sub-clients:
  *
- *   const client = await WaterXClient.create({ network: "TESTNET" });
+ *   const client = await WaterXClient.create({ network: "TESTNET", oracleSource: "pyth_rule" });
  *   client.account.createAccount(tx, { alias });   // -> shared waterx_account + funding
  *   client.perp.placeOrderRequest(tx, params);     // -> perp builder
  *   client.predict.placeOrder(tx, params);         // -> prediction builder
@@ -150,7 +150,7 @@ export class WaterXClient {
      * `waterx-config` JSON) and returns a ready client. Each line can target a
      * different network via `opts.perp.network` / `opts.predict.network`.
      */
-    static async create(opts = {}) {
+    static async create(opts) {
         const baseNetwork = opts.network ?? "TESTNET";
         const { network: perpNetwork, ...perpRest } = opts.perp ?? {};
         const { network: predictNetwork, ...predictRest } = opts.predict ?? {};

package/dist/src/utils/config.js

@@ -1,3 +1,4 @@
+import { ownEntry } from "./record.js";
 /** Returns all registered market tickers (e.g. "BTCUSD") from waterx-config. */
 export function getMarketTickers(config) {
     return Object.keys(config.packages.waterx_perp.markets);
@@ -11,5 +12,5 @@ export function getMarketTickers(config) {
  */
 export function getCollateralAssets(config) {
     const feeds = config.packages.pyth_rule?.feeds ?? {};
-    return Object.keys(config.packages.wlp.pool_tokens).filter((t) => feeds[t] !== undefined);
+    return Object.keys(config.packages.wlp.pool_tokens).filter((t) => ownEntry(feeds, t) !== undefined);
 }

package/dist/src/utils/record.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Own-key record lookup. Ticker-keyed config records (`feeds`, `markets`,
+ * `aggregators`) are indexed with caller-supplied strings; a bare bracket
+ * read — like the `in` operator — walks the prototype chain, so a ticker
+ * named like an `Object.prototype` key ("toString", "constructor", …) reads
+ * as an inherited Function instead of "absent" and leaks into batches sent
+ * to the network. Every such lookup funnels through here so the answer is
+ * own-keys-only, everywhere, instead of per-site `Object.hasOwn` guards
+ * that drift.
+ */
+/** `record[key]` iff `key` is an OWN key — `undefined` for an absent record, an absent key, or a prototype-chain hit. */
+export declare function ownEntry<T extends Record<string, unknown>>(record: T | undefined, key: string): T[string] | undefined;

package/dist/src/utils/record.js

@@ -0,0 +1,19 @@
+/**
+ * Own-key record lookup. Ticker-keyed config records (`feeds`, `markets`,
+ * `aggregators`) are indexed with caller-supplied strings; a bare bracket
+ * read — like the `in` operator — walks the prototype chain, so a ticker
+ * named like an `Object.prototype` key ("toString", "constructor", …) reads
+ * as an inherited Function instead of "absent" and leaks into batches sent
+ * to the network. Every such lookup funnels through here so the answer is
+ * own-keys-only, everywhere, instead of per-site `Object.hasOwn` guards
+ * that drift.
+ */
+/** `record[key]` iff `key` is an OWN key — `undefined` for an absent record, an absent key, or a prototype-chain hit. */
+export function ownEntry(record, key) {
+    // The `T extends Record<...>` form (rather than `Record<string, V>`) keeps
+    // union-typed records inferable; TS then resolves `record[key]` only to the
+    // constraint's `unknown`, so restate the definitionally-true index type.
+    return record !== undefined && Object.hasOwn(record, key)
+        ? record[key]
+        : undefined;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@waterx/sdk",
-  "version": "4.1.0",
+  "version": "4.3.1",
   "description": "WaterX SDK — perpetuals and prediction markets on Sui",
   "license": "MIT",
   "author": "WaterX",