@waterx/sdk 4.3.0 → 4.3.2

package/dist/cjs/src/oracle/source-list.js

@@ -0,0 +1,57 @@
+"use strict";
+/**
+ * `source-list.ts` — THE parser for a consumer's `ORACLE_SOURCE` env string
+ * (comma list of `OracleSource` values → the fed set). The FE and BE
+ * previously carried twin hand-written parsers whose semantics drifted once
+ * in review (a trailing comma booted one deployment green and 500'd the
+ * other); this canonical behavior is what both fold onto:
+ *
+ *  - split on `,`, trim entries, DROP empties (trailing/doubled commas are
+ *    the most common env typo, never a boot failure)
+ *  - validate every entry against {@link ORACLE_SOURCES}
+ *  - dedupe, order-preserving (list order is consumer read-plane policy —
+ *    the SDK's own fed-set build treats the list as a set)
+ *  - throw an operator-actionable error on empty/unset/invalid input —
+ *    there is NO default oracle source
+ *
+ * The SDK still never reads `process.env` — callers pass the raw string.
+ *
+ * STRICTER than the consumers' previous `in`-operator checks: a value named
+ * like an `Object.prototype` key (`toString`, `constructor`, …) passed those
+ * and died deep in the stack; `Set.has` rejects it here at parse.
+ *
+ * Zod adopters: this THROWS a plain Error. Inside a zod `.transform()` a
+ * throw escapes `schema.parse()` un-aggregated and masks sibling issues —
+ * wrap it: `try { return parseOracleSourceList(raw); } catch (e) {
+ * ctx.addIssue({ code: "custom", message: (e as Error).message }); return
+ * z.NEVER; }`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isOracleSource = isOracleSource;
+exports.parseOracleSourceList = parseOracleSourceList;
+const price_update_rule_ts_1 = require("./price-update-rule.js");
+// Widened-annotation Set (not an assertion) so the type predicate below
+// narrows by CONSTRUCTION rather than by cast.
+const ORACLE_SOURCE_SET = new Set(price_update_rule_ts_1.ORACLE_SOURCES);
+/**
+ * THE runtime membership check for {@link ORACLE_SOURCES} — the parser below
+ * and `PerpClient`'s ctor validation both use this one predicate, so the env
+ * parser and the create-option front door can never disagree. `Set.has`,
+ * never `in`/bracket reads (prototype-chain safe by construction).
+ */
+function isOracleSource(value) {
+    return ORACLE_SOURCE_SET.has(value);
+}
+function parseOracleSourceList(raw) {
+    const parts = (raw ?? "")
+        .split(",")
+        .map((part) => part.trim())
+        .filter((part) => part !== "");
+    const sources = parts.filter(isOracleSource);
+    if (parts.length === 0 || sources.length !== parts.length) {
+        const got = raw == null || raw.trim() === "" ? "unset" : `'${raw}'`;
+        throw new Error(`ORACLE_SOURCE must be a comma-separated list of ${price_update_rule_ts_1.ORACLE_SOURCES.join(" | ")} ` +
+            `(got ${got}) — there is NO default oracle source; set it in the deployment's env.`);
+    }
+    return [...new Set(sources)];
+}

package/dist/cjs/src/perp/client.d.ts

@@ -11,7 +11,7 @@
  * {@link PerpConfigView}. This class is just the wiring + factory between them.
  */
 import { BaseLineClient } from "../base-client.ts";
-import type { OracleSource } from "../oracle/price-update-rule.ts";
+import { type OracleSource } from "../oracle/price-update-rule.ts";
 import type { FetchPolicy } from "../oracle/update-fetch.ts";
 import { type LoadConfigOptions, type PythAccessConfig, type PythFetchPolicy, type WaterxAccessConfig, type WaterXConfig, type WormholeInfraConfig } from "./config.ts";
 import type { Network } from "./constants.ts";

package/dist/cjs/src/perp/client.js

@@ -14,6 +14,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PerpClient = void 0;
 const base_client_ts_1 = require("../base-client.js");
+const price_update_rule_ts_1 = require("../oracle/price-update-rule.js");
+const source_list_ts_1 = require("../oracle/source-list.js");
 const config_view_ts_1 = require("./config-view.js");
 const config_ts_1 = require("./config.js");
 class PerpClient extends base_client_ts_1.BaseLineClient {
@@ -49,16 +51,18 @@ class PerpClient extends base_client_ts_1.BaseLineClient {
             ...(opts.waterxEndpoint !== undefined ? { endpoint: opts.waterxEndpoint } : {}),
             ...(opts.waterxFetch !== undefined ? { fetch: opts.waterxFetch } : {}),
         };
-        // Normalize single-or-list to a deduped, order-preserving list. An empty
-        // list — or a nullish/empty entry, the shape an untyped caller produces
-        // by omitting the REQUIRED option — is a caller bug, not "no oracle":
-        // fail construction loudly instead of booting green and surfacing as
-        // `OracleSourceNotImplemented: undefined` at the first tx-build.
+        // Normalize single-or-list to a deduped, order-preserving list, gated by
+        // `isOracleSource` — the SAME predicate `parseOracleSourceList` uses. An
+        // empty list, a nullish entry (an untyped caller omitting the REQUIRED
+        // option), or an unregistered value (`'core'`, `'pyth'`, …) fails
+        // construction loudly instead of booting green and surfacing as
+        // `OracleSourceNotImplemented` at the first tx-build.
         const sources = Array.isArray(opts.oracleSource) ? opts.oracleSource : [opts.oracleSource];
         this.oracleSources = [...new Set(sources)];
         if (this.oracleSources.length === 0 ||
-            this.oracleSources.some((source) => typeof source !== "string" || source.length === 0)) {
-            throw new Error(`oracleSource is REQUIRED and must name at least one source (got ${JSON.stringify(sources)})`);
+            this.oracleSources.some((source) => !(0, source_list_ts_1.isOracleSource)(source))) {
+            throw new Error(`oracleSource is REQUIRED and must name at least one of ${price_update_rule_ts_1.ORACLE_SOURCES.join(" | ")} ` +
+                `(got ${JSON.stringify(sources)})`);
         }
         this.view = new config_view_ts_1.PerpConfigView(() => this.config, () => this.wormhole);
     }

package/dist/cjs/src/perp/config-view.js

@@ -11,6 +11,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PerpConfigView = void 0;
+const record_ts_1 = require("../utils/record.js");
 class PerpConfigView {
     getConfig;
     getWormhole;
@@ -29,21 +30,21 @@ class PerpConfigView {
     }
     /** `waterx_perp.markets[ticker]`, throws if unknown. */
     getMarket(ticker) {
-        const m = this.config.packages.waterx_perp?.markets?.[ticker];
+        const m = (0, record_ts_1.ownEntry)(this.config.packages.waterx_perp?.markets, ticker);
         if (!m)
             throw new Error(`Unknown market ticker: ${ticker}`);
         return m;
     }
     /** `waterx_oracle.aggregators[ticker]`, throws if unknown. */
     getAggregator(ticker) {
-        const a = this.config.packages.waterx_oracle?.aggregators?.[ticker];
+        const a = (0, record_ts_1.ownEntry)(this.config.packages.waterx_oracle?.aggregators, ticker);
         if (!a)
             throw new Error(`No aggregator listed for ticker: ${ticker}`);
         return a;
     }
     /** `pyth_rule.feeds[ticker]`, throws if unknown. */
     getPythFeed(ticker) {
-        const f = this.config.packages.pyth_rule?.feeds?.[ticker];
+        const f = (0, record_ts_1.ownEntry)(this.config.packages.pyth_rule?.feeds, ticker);
         if (!f)
             throw new Error(`No pyth feed listed for ticker: ${ticker}`);
         return f;
@@ -69,7 +70,7 @@ class PerpConfigView {
         const c = this.config.packages.constant_rule;
         if (!c?.published_at || !c.config)
             return false;
-        return c.feeds?.[ticker] !== undefined;
+        return (0, record_ts_1.ownEntry)(c.feeds, ticker) !== undefined;
     }
     /**
      * The `supra_rule` config when it is deployed, enabled, and fully wired
@@ -95,7 +96,7 @@ class PerpConfigView {
      */
     getPoolTokenType(tickerOrName) {
         const poolTokens = this.config.packages.wlp?.pool_tokens ?? {};
-        const exact = poolTokens[tickerOrName];
+        const exact = (0, record_ts_1.ownEntry)(poolTokens, tickerOrName);
         if (exact)
             return exact;
         for (const t of Object.values(poolTokens)) {
@@ -118,7 +119,7 @@ class PerpConfigView {
      * reward coin type, so callers don't need a separate alias-to-type lookup.
      */
     getRewarders(stakeAlias) {
-        const map = this.config.packages.waterx_staking?.rewarders?.[stakeAlias];
+        const map = (0, record_ts_1.ownEntry)(this.config.packages.waterx_staking?.rewarders, stakeAlias);
         if (!map)
             return [];
         return Object.entries(map).map(([alias, entry]) => ({ alias, ...entry }));

package/dist/cjs/src/perp/index.d.ts

@@ -13,7 +13,7 @@ export type { EstLiqPriceViewOpts } from "./liq-view.ts";
 export * from "./user/index.ts";
 export * from "./tx-builders.ts";
 export * from "./fetch.ts";
-export { FetchPolicyError, LazerApiKeyMissingError, OracleFeeSourceUnavailableError, OracleSourceNotImplementedError, PythCache, aggregateTicker, aggregateTickerWithConstant, aggregateTickerWithPyth, buildPythPriceUpdateCalls, fetchPriceFeedsUpdateData, pythCoreHermesEndpoint, pythProHermesEndpoint, resolveHermesReadEndpoint, waterxQuoteCenterEndpoint, refreshOraclePrices, updatePythPrices, } from "../oracle/index.ts";
+export { FetchPolicyError, LazerApiKeyMissingError, OracleFeeSourceUnavailableError, OracleSourceNotImplementedError, PythCache, aggregateTicker, aggregateTickerWithConstant, aggregateTickerWithPyth, ORACLE_SOURCES, buildPythPriceUpdateCalls, fetchPriceFeedsUpdateData, isOracleSource, parseOracleSourceList, pythCoreHermesEndpoint, pythProHermesEndpoint, refreshOraclePrices, resolveHermesReadEndpoint, updatePythPrices, waterxEnvelopeOf, waterxQuoteCenterEndpoint, } from "../oracle/index.ts";
 export type { FetchPolicy, OracleFeeSource, OracleSource, UpdateDataProvider, } from "../oracle/index.ts";
 export { fetchDepositVaa, fetchVaa, listBridgeWithdrawalVaas, listVaasByEmitter, padEvmEmitter, toWormholescanEmitter, vaaBase64ToBytes, vaaBase64ToHex, vaaBytesToBase64, waitForVaa, } from "../account/funding/wormhole.ts";
 export type { VaaListItem, VaaResponse, WormholescanOptions } from "../account/funding/wormhole.ts";

package/dist/cjs/src/perp/index.js

@@ -37,8 +37,8 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getCollateralAssets = exports.getMarketTickers = exports.TOKEN_DECIMALS = exports.COLLATERAL_DECIMALS = exports.WLP_DECIMALS = exports.SUI_DECIMALS = exports.MS_PER_YEAR = exports.MS_PER_HOUR = exports.MS_PER_MINUTE = exports.STAKING_PERM_ALL = exports.STAKING_PERM_CLAIM_REWARD = exports.STAKING_PERM_REDEEM_STAKE = exports.STAKING_PERM_DEPOSIT_STAKE = exports.PERM_WITHDRAW_COLLATERAL = exports.PERM_REDEEM_WLP = exports.PERM_PLACE_ORDER = exports.PERM_OPEN_POSITION = exports.PERM_MINT_WLP = exports.PERM_INCREASE_POSITION = exports.PERM_DEPOSIT_COLLATERAL = exports.PERM_DECREASE_POSITION = exports.PERM_CLOSE_POSITION = exports.PERM_CANCEL_ORDER = exports.PERM_ALL_TRADING = exports.PERM_ALL = exports.ORDER_TAG_WILDCARD = exports.ORDER_STOP_SELL = exports.ORDER_STOP_BUY = exports.ORDER_LIMIT_SELL = exports.ORDER_LIMIT_BUY = exports.FLOAT_SCALE = exports.DRY_RUN_SENDER = exports.DOUBLE_SCALE = exports.BPS_SCALE = exports.ACTION_WITHDRAW_COLLATERAL = exports.ACTION_UPDATE_ORDER = exports.ACTION_PLACE_ORDER = exports.ACTION_OPEN_POSITION = exports.ACTION_LIQUIDATE = exports.ACTION_INCREASE_POSITION = exports.ACTION_DEPOSIT_COLLATERAL = exports.ACTION_DECREASE_POSITION = exports.ACTION_CLOSE_POSITION = exports.ACTION_CANCEL_PRE_ORDER = exports.ACTION_CANCEL_ORDER = exports.ACTION_ADD_PRE_ORDER = exports.loadConfig = exports.clearConfigCache = exports.WORMHOLE_DEFAULTS = exports.PerpClient = void 0;
-exports.padEvmEmitter = exports.listVaasByEmitter = exports.listBridgeWithdrawalVaas = exports.fetchVaa = exports.fetchDepositVaa = exports.updatePythPrices = exports.refreshOraclePrices = exports.waterxQuoteCenterEndpoint = exports.resolveHermesReadEndpoint = exports.pythProHermesEndpoint = exports.pythCoreHermesEndpoint = exports.fetchPriceFeedsUpdateData = exports.buildPythPriceUpdateCalls = exports.aggregateTickerWithPyth = exports.aggregateTickerWithConstant = exports.aggregateTicker = exports.PythCache = exports.OracleSourceNotImplementedError = exports.OracleFeeSourceUnavailableError = exports.LazerApiKeyMissingError = exports.FetchPolicyError = exports.calcEstLiqPriceRawFromView = exports.formatFundingInterval = exports.rawPrice = exports.decodeFundingIndexDelta = exports.calcWlpRedeemOut = exports.calcWlpPrice = exports.calcWlpMintOut = exports.calcWlpIncentiveApy = exports.calcViewEstLiqFeesUsd = exports.calcUnrealizedPnl = exports.calcTotalTradingFeeRate = exports.calcTokenUtilizationBps = exports.calcRealLiqNetCostUsd = exports.calcPositionBorrowFee = exports.calcNotional = exports.calcMaxReducibleCollateralUsd = exports.calcLeverage = exports.calcImpactFeeRate = exports.calcFundingRate = exports.calcFundingFeeUsd = exports.calcFee = exports.calcEstLiqPriceRaw = exports.calcEstLiqPrice = exports.calcEffectiveCollateralUsd = exports.calcDynamicFeeBps = exports.calcBorrowRateAccrual = exports.calcBorrowRate = exports.annualizeFundingRate = exports.annualizedApyFromRatio = void 0;
-exports.withdrawalQueueCalls = exports.nativeCustodyCalls = exports.referralCalls = exports.pythSponsorRuleCalls = exports.pythRuleCalls = exports.oracleCalls = exports.stakingCalls = exports.wxaAccountCalls = exports.viewCalls = exports.lpPoolCalls = exports.tradingCalls = exports.MarketConfigBcs = exports.MarketBcs = exports.OrderBcs = exports.PositionBcs = exports.TokenPoolDataBcs = exports.RedeemRequestDataBcs = exports.PositionDataBcs = exports.PoolDataBcs = exports.OrderDataBcs = exports.MarketDataBcs = exports.GlobalConfigDataBcs = exports.AccountDataBcs = exports.waitForVaa = exports.vaaBytesToBase64 = exports.vaaBase64ToHex = exports.vaaBase64ToBytes = exports.toWormholescanEmitter = void 0;
+exports.fetchDepositVaa = exports.waterxQuoteCenterEndpoint = exports.waterxEnvelopeOf = exports.updatePythPrices = exports.resolveHermesReadEndpoint = exports.refreshOraclePrices = exports.pythProHermesEndpoint = exports.pythCoreHermesEndpoint = exports.parseOracleSourceList = exports.isOracleSource = exports.fetchPriceFeedsUpdateData = exports.buildPythPriceUpdateCalls = exports.ORACLE_SOURCES = exports.aggregateTickerWithPyth = exports.aggregateTickerWithConstant = exports.aggregateTicker = exports.PythCache = exports.OracleSourceNotImplementedError = exports.OracleFeeSourceUnavailableError = exports.LazerApiKeyMissingError = exports.FetchPolicyError = exports.calcEstLiqPriceRawFromView = exports.formatFundingInterval = exports.rawPrice = exports.decodeFundingIndexDelta = exports.calcWlpRedeemOut = exports.calcWlpPrice = exports.calcWlpMintOut = exports.calcWlpIncentiveApy = exports.calcViewEstLiqFeesUsd = exports.calcUnrealizedPnl = exports.calcTotalTradingFeeRate = exports.calcTokenUtilizationBps = exports.calcRealLiqNetCostUsd = exports.calcPositionBorrowFee = exports.calcNotional = exports.calcMaxReducibleCollateralUsd = exports.calcLeverage = exports.calcImpactFeeRate = exports.calcFundingRate = exports.calcFundingFeeUsd = exports.calcFee = exports.calcEstLiqPriceRaw = exports.calcEstLiqPrice = exports.calcEffectiveCollateralUsd = exports.calcDynamicFeeBps = exports.calcBorrowRateAccrual = exports.calcBorrowRate = exports.annualizeFundingRate = exports.annualizedApyFromRatio = void 0;
+exports.withdrawalQueueCalls = exports.nativeCustodyCalls = exports.referralCalls = exports.pythSponsorRuleCalls = exports.pythRuleCalls = exports.oracleCalls = exports.stakingCalls = exports.wxaAccountCalls = exports.viewCalls = exports.lpPoolCalls = exports.tradingCalls = exports.MarketConfigBcs = exports.MarketBcs = exports.OrderBcs = exports.PositionBcs = exports.TokenPoolDataBcs = exports.RedeemRequestDataBcs = exports.PositionDataBcs = exports.PoolDataBcs = exports.OrderDataBcs = exports.MarketDataBcs = exports.GlobalConfigDataBcs = exports.AccountDataBcs = exports.waitForVaa = exports.vaaBytesToBase64 = exports.vaaBase64ToHex = exports.vaaBase64ToBytes = exports.toWormholescanEmitter = exports.padEvmEmitter = exports.listVaasByEmitter = exports.listBridgeWithdrawalVaas = exports.fetchVaa = void 0;
 // ======== Core ========
 var client_ts_1 = require("./client.js");
 Object.defineProperty(exports, "PerpClient", { enumerable: true, get: function () { return client_ts_1.PerpClient; } });
@@ -144,14 +144,18 @@ Object.defineProperty(exports, "PythCache", { enumerable: true, get: function ()
 Object.defineProperty(exports, "aggregateTicker", { enumerable: true, get: function () { return index_ts_1.aggregateTicker; } });
 Object.defineProperty(exports, "aggregateTickerWithConstant", { enumerable: true, get: function () { return index_ts_1.aggregateTickerWithConstant; } });
 Object.defineProperty(exports, "aggregateTickerWithPyth", { enumerable: true, get: function () { return index_ts_1.aggregateTickerWithPyth; } });
+Object.defineProperty(exports, "ORACLE_SOURCES", { enumerable: true, get: function () { return index_ts_1.ORACLE_SOURCES; } });
 Object.defineProperty(exports, "buildPythPriceUpdateCalls", { enumerable: true, get: function () { return index_ts_1.buildPythPriceUpdateCalls; } });
 Object.defineProperty(exports, "fetchPriceFeedsUpdateData", { enumerable: true, get: function () { return index_ts_1.fetchPriceFeedsUpdateData; } });
+Object.defineProperty(exports, "isOracleSource", { enumerable: true, get: function () { return index_ts_1.isOracleSource; } });
+Object.defineProperty(exports, "parseOracleSourceList", { enumerable: true, get: function () { return index_ts_1.parseOracleSourceList; } });
 Object.defineProperty(exports, "pythCoreHermesEndpoint", { enumerable: true, get: function () { return index_ts_1.pythCoreHermesEndpoint; } });
 Object.defineProperty(exports, "pythProHermesEndpoint", { enumerable: true, get: function () { return index_ts_1.pythProHermesEndpoint; } });
-Object.defineProperty(exports, "resolveHermesReadEndpoint", { enumerable: true, get: function () { return index_ts_1.resolveHermesReadEndpoint; } });
-Object.defineProperty(exports, "waterxQuoteCenterEndpoint", { enumerable: true, get: function () { return index_ts_1.waterxQuoteCenterEndpoint; } });
 Object.defineProperty(exports, "refreshOraclePrices", { enumerable: true, get: function () { return index_ts_1.refreshOraclePrices; } });
+Object.defineProperty(exports, "resolveHermesReadEndpoint", { enumerable: true, get: function () { return index_ts_1.resolveHermesReadEndpoint; } });
 Object.defineProperty(exports, "updatePythPrices", { enumerable: true, get: function () { return index_ts_1.updatePythPrices; } });
+Object.defineProperty(exports, "waterxEnvelopeOf", { enumerable: true, get: function () { return index_ts_1.waterxEnvelopeOf; } });
+Object.defineProperty(exports, "waterxQuoteCenterEndpoint", { enumerable: true, get: function () { return index_ts_1.waterxQuoteCenterEndpoint; } });
 // ======== Wormhole / Wormholescan utilities (credit bridge) ========
 var wormhole_ts_1 = require("../account/funding/wormhole.js");
 Object.defineProperty(exports, "fetchDepositVaa", { enumerable: true, get: function () { return wormhole_ts_1.fetchDepositVaa; } });

package/dist/cjs/src/perp/user/staking.js

@@ -55,9 +55,10 @@ exports.unstake = unstake;
 exports.claimReward = claimReward;
 const account_request_ts_1 = require("../../account/account-request.js");
 const staking = __importStar(require("../../generated/waterx_staking/waterx_staking.js"));
+const record_ts_1 = require("../../utils/record.js");
 const validate_ts_1 = require("../../utils/validate.js");
 function pool(client, stakeAlias) {
-    const id = client.config.packages.waterx_staking?.pools?.[stakeAlias];
+    const id = (0, record_ts_1.ownEntry)(client.config.packages.waterx_staking?.pools, stakeAlias);
     if (!id) {
         throw new Error(`config.packages.waterx_staking.pools[${stakeAlias}] is not set — staking is not deployed for this stake type`);
     }

package/dist/cjs/src/utils/config.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getMarketTickers = getMarketTickers;
 exports.getCollateralAssets = getCollateralAssets;
+const record_ts_1 = require("./record.js");
 /** Returns all registered market tickers (e.g. "BTCUSD") from waterx-config. */
 function getMarketTickers(config) {
     return Object.keys(config.packages.waterx_perp.markets);
@@ -15,5 +16,5 @@ function getMarketTickers(config) {
  */
 function getCollateralAssets(config) {
     const feeds = config.packages.pyth_rule?.feeds ?? {};
-    return Object.keys(config.packages.wlp.pool_tokens).filter((t) => feeds[t] !== undefined);
+    return Object.keys(config.packages.wlp.pool_tokens).filter((t) => (0, record_ts_1.ownEntry)(feeds, t) !== undefined);
 }

package/dist/cjs/src/utils/record.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Own-key record lookup. Ticker-keyed config records (`feeds`, `markets`,
+ * `aggregators`) are indexed with caller-supplied strings; a bare bracket
+ * read — like the `in` operator — walks the prototype chain, so a ticker
+ * named like an `Object.prototype` key ("toString", "constructor", …) reads
+ * as an inherited Function instead of "absent" and leaks into batches sent
+ * to the network. Every such lookup funnels through here so the answer is
+ * own-keys-only, everywhere, instead of per-site `Object.hasOwn` guards
+ * that drift.
+ */
+/** `record[key]` iff `key` is an OWN key — `undefined` for an absent record, an absent key, or a prototype-chain hit. */
+export declare function ownEntry<T extends Record<string, unknown>>(record: T | undefined, key: string): T[string] | undefined;

package/dist/cjs/src/utils/record.js

@@ -0,0 +1,22 @@
+"use strict";
+/**
+ * Own-key record lookup. Ticker-keyed config records (`feeds`, `markets`,
+ * `aggregators`) are indexed with caller-supplied strings; a bare bracket
+ * read — like the `in` operator — walks the prototype chain, so a ticker
+ * named like an `Object.prototype` key ("toString", "constructor", …) reads
+ * as an inherited Function instead of "absent" and leaks into batches sent
+ * to the network. Every such lookup funnels through here so the answer is
+ * own-keys-only, everywhere, instead of per-site `Object.hasOwn` guards
+ * that drift.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ownEntry = ownEntry;
+/** `record[key]` iff `key` is an OWN key — `undefined` for an absent record, an absent key, or a prototype-chain hit. */
+function ownEntry(record, key) {
+    // The `T extends Record<...>` form (rather than `Record<string, V>`) keeps
+    // union-typed records inferable; TS then resolves `record[key]` only to the
+    // constraint's `unknown`, so restate the definitionally-true index type.
+    return record !== undefined && Object.hasOwn(record, key)
+        ? record[key]
+        : undefined;
+}

package/dist/src/oracle/aggregate.d.ts

@@ -38,9 +38,10 @@ import { type WaterxSignedEnvelope } from "./rules/waterx-rule.ts";
  *   if it is stale — it never aborts — so the call stays mandatory while
  *   `pyth_rule` remains in the ticker's on-chain weighted set
  *   (`EMissingPriceSource` requires every weighted rule to appear).
- * - **Lazer** — fed when `lazerUpdate` is supplied: the verified
- *   `pyth_lazer::update::Update` produced by this PTB's lazer update leg
- *   (see `PythLazerRule.buildUpdateCalls`). If the ticker's aggregator does
+ * - **Lazer** — fed when `lazerUpdate` is supplied: the verified update this
+ *   PTB's lazer update leg produced with the network's verify entry
+ *   (`update_v2::Update` on mainnet, `update::Update` on testnet — see
+ *   `PythLazerRule.buildUpdateCalls`). If the ticker's aggregator does
  *   not (yet) weight `PythLazerRule`, the contribution is silently dropped
  *   on-chain — feeding ahead of the weight migration is harmless.
  * - **Supra** — fed alongside Pyth/Lazer when supra is enabled + wired

package/dist/src/oracle/aggregate.js

@@ -23,6 +23,7 @@
  * `rule-registry.ts`.
  */
 import { aggregate as aggregateCall, newCollector } from "../generated/waterx_oracle/oracle.js";
+import { ownEntry } from "../utils/record.js";
 import { OracleFeeSourceUnavailableError } from "./pyth.js";
 import { resolveOracleRule } from "./rule-registry.js";
 import { feedConstantRule } from "./rules/constant-rule.js";
@@ -83,9 +84,10 @@ async function resolveGroupUpdateData(host, group, provider) {
  *   if it is stale — it never aborts — so the call stays mandatory while
  *   `pyth_rule` remains in the ticker's on-chain weighted set
  *   (`EMissingPriceSource` requires every weighted rule to appear).
- * - **Lazer** — fed when `lazerUpdate` is supplied: the verified
- *   `pyth_lazer::update::Update` produced by this PTB's lazer update leg
- *   (see `PythLazerRule.buildUpdateCalls`). If the ticker's aggregator does
+ * - **Lazer** — fed when `lazerUpdate` is supplied: the verified update this
+ *   PTB's lazer update leg produced with the network's verify entry
+ *   (`update_v2::Update` on mainnet, `update::Update` on testnet — see
+ *   `PythLazerRule.buildUpdateCalls`). If the ticker's aggregator does
  *   not (yet) weight `PythLazerRule`, the contribution is silently dropped
  *   on-chain — feeding ahead of the weight migration is harmless.
  * - **Supra** — fed alongside Pyth/Lazer when supra is enabled + wired
@@ -163,7 +165,7 @@ export function aggregateTickerWithPyth(tx, host, args) {
  * {@link refreshOraclePrices}), which feeds both.
  */
 export function aggregateTickerWithConstant(tx, host, args) {
-    if (host.config.packages.pyth_rule?.feeds?.[args.ticker] !== undefined) {
+    if (ownEntry(host.config.packages.pyth_rule?.feeds, args.ticker) !== undefined) {
         throw new Error(`'${args.ticker}' is in pyth_rule.feeds (dual-feed) — feed both via aggregateTicker({ priceInfoObjectId }) / refreshOraclePrices, not aggregateTickerWithConstant`);
     }
     aggregateTicker(tx, host, { ticker: args.ticker });
@@ -224,7 +226,7 @@ export async function refreshOraclePrices(tx, host, tickers, opts = {}) {
     // price_info_object lookup for every ticker with a pyth_rule.feeds entry —
     // needed by aggregateTicker's (unchanged) Pyth feed step below regardless of
     // which rule performed the on-chain update for that ticker.
-    const pythTickers = tickers.filter((t) => host.config.packages.pyth_rule?.feeds?.[t] !== undefined);
+    const pythTickers = tickers.filter((t) => ownEntry(host.config.packages.pyth_rule?.feeds, t) !== undefined);
     const priceInfoByTicker = new Map();
     pythTickers.forEach((t) => priceInfoByTicker.set(t, host.getPythFeed(t).price_info_object));
     // The fed set is a LIST (`host.oracleSources`, normalized + deduped at

package/dist/src/oracle/index.d.ts

@@ -21,13 +21,15 @@ export type { FetchPolicy } from "./update-fetch.ts";
 export { PythCache, fetchPriceFeedsUpdateData, endpointSupportedFeedIds, probeMissingFeeds, buildPythPriceUpdateCalls, pythCoreHermesEndpoint, pythProHermesEndpoint, PYTH_PRO_HERMES_ENDPOINT, updatePythPrices, HermesEndpointRejectedAllFeedsError, MISSING_FEED_MEMO_TTL_MS, OracleFeeSourceUnavailableError, } from "./pyth.ts";
 export type { OracleFeeSource } from "./pyth.ts";
 export type { PriceUpdateRule, PriceUpdateRuleKind, RuleUpdateData, RuleUpdateHandle, BuildUpdateOpts, OracleSource, UpdateDataProvider, } from "./price-update-rule.ts";
+export { ORACLE_SOURCES } from "./price-update-rule.ts";
+export { isOracleSource, parseOracleSourceList } from "./source-list.ts";
 export { resolveOracleReadPlan, resolveHermesReadEndpoint } from "./read-plane.ts";
 export type { OracleReadPlan } from "./read-plane.ts";
 export { PythCoreRule } from "./rules/pyth-core-rule.ts";
 export type { PythCoreUpdatePayload } from "./rules/pyth-core-rule.ts";
 export { PythLazerRule, LazerApiKeyMissingError } from "./rules/pyth-lazer-rule.ts";
 export type { PythLazerUpdatePayload } from "./rules/pyth-lazer-rule.ts";
-export { WaterxRule, parseSignedEnvelope, BATCH_PRICE_INTENT, WATERX_INFRA, waterxQuoteCenterEndpoint, } from "./rules/waterx-rule.ts";
+export { WaterxRule, parseSignedEnvelope, BATCH_PRICE_INTENT, WATERX_INFRA, waterxQuoteCenterEndpoint, waterxEnvelopeOf, } from "./rules/waterx-rule.ts";
 export type { WaterxUpdatePayload, WaterxSignedEnvelope, WaterxBatchItem, } from "./rules/waterx-rule.ts";
 export { OracleSourceNotImplementedError, resolveOracleRule } from "./rule-registry.ts";
 export { aggregateTicker, aggregateTickerWithPyth, aggregateTickerWithConstant, refreshOraclePrices, } from "./aggregate.ts";

package/dist/src/oracle/index.js

@@ -40,6 +40,10 @@ export { PythCache, fetchPriceFeedsUpdateData, endpointSupportedFeedIds, probeMi
 // `resolveHermesReadEndpoint` (pyth_rule listed → Core, else override ??
 // Pro) — never a hand-rolled branch, never a cross-source fallback.
 pythCoreHermesEndpoint, pythProHermesEndpoint, PYTH_PRO_HERMES_ENDPOINT, updatePythPrices, HermesEndpointRejectedAllFeedsError, MISSING_FEED_MEMO_TTL_MS, OracleFeeSourceUnavailableError, } from "./pyth.js";
+// Canonical OracleSource value list + THE env-string parser consumers fold
+// onto — semantics and rationale in `source-list.ts`'s header.
+export { ORACLE_SOURCES } from "./price-update-rule.js";
+export { isOracleSource, parseOracleSourceList } from "./source-list.js";
 // Per-source READ-plane resolution — which tickers a source can price
 // off-chain and with which ids (`resolveOracleReadPlan`), and which
 // Hermes-compatible base the hermes plans execute against
@@ -58,7 +62,10 @@ export { PythLazerRule, LazerApiKeyMissingError } from "./rules/pyth-lazer-rule.
 // read-plane accessor (mirrors `pythCoreHermesEndpoint`).
 // WaterX quote-center rule (first-party ed25519 signed batches; `feedWaterxRule`
 // stays internal to `aggregate.ts`).
-export { WaterxRule, parseSignedEnvelope, BATCH_PRICE_INTENT, WATERX_INFRA, waterxQuoteCenterEndpoint, } from "./rules/waterx-rule.js";
+export { WaterxRule, parseSignedEnvelope, BATCH_PRICE_INTENT, WATERX_INFRA, waterxQuoteCenterEndpoint, 
+// Rule-owned payload accessor (kind-check + unwrap in one place) — never
+// hand-cast the payload shape.
+waterxEnvelopeOf, } from "./rules/waterx-rule.js";
 // `resolveOracleRule` is the ONE source→rule registry — exported so external
 // consumers (e.g. a BE prefetch cache that keys per source and needs each
 // source's `supportedTickers`/`fetchUpdateData`) resolve through it instead of

package/dist/src/oracle/price-update-rule.d.ts

@@ -20,14 +20,28 @@ import type { OracleHost } from "./host.ts";
 import type { OracleFeeSource, PythCache } from "./pyth.ts";
 export type PriceUpdateRuleKind = "pyth_rule" | "pyth_lazer_rule" | "supra_rule" | "constant_rule" | "waterx_rule";
 /**
- * The subset of `PriceUpdateRuleKind`s listable in a client's `oracleSource`
- * create option (see `OracleHost.oracleSources`) — i.e. rules that can serve as
- * the on-chain price *update* leg `refreshOraclePrices` runs before aggregating.
- * `supra_rule` and `constant_rule` are auxiliary rules fed alongside whichever
- * source is selected (see `aggregateTicker`), not sources themselves. The SDK
- * never reads `process.env` — consumers resolve their own env var to this type.
+ * The canonical list of selectable oracle sources — the SINGLE authority the
+ * {@link OracleSource} union derives from (the value-list→union derive
+ * idiom of `unified-client.ts`'s `NON_CLIENT_FIRST`, plus `Object.freeze`
+ * so the immutability is RUNTIME truth: `as const` alone would let a JS
+ * consumer push into the array and desync the membership Set built from it
+ * in `source-list.ts`). Runtime membership checks and the `ORACLE_SOURCE`
+ * env parser live there, on `isOracleSource` / `parseOracleSourceList`.
+ * Only sources belong here: `supra_rule` and `constant_rule` are auxiliary
+ * rules fed alongside whichever sources are selected (see
+ * `aggregateTicker`), not sources themselves — the `satisfies` keeps
+ * entries inside `PriceUpdateRuleKind` but adding an auxiliary rule to this
+ * list is an (incorrect) editorial decision this comment exists to prevent.
  */
-export type OracleSource = "pyth_rule" | "pyth_lazer_rule" | "waterx_rule";
+export declare const ORACLE_SOURCES: readonly ["pyth_rule", "pyth_lazer_rule", "waterx_rule"];
+/**
+ * The kinds listable in a client's `oracleSource` create option (see
+ * `OracleHost.oracleSources`) — i.e. rules that can serve as the on-chain
+ * price *update* leg `refreshOraclePrices` runs before aggregating. Derived
+ * from {@link ORACLE_SOURCES}. The SDK never reads `process.env` — consumers
+ * resolve their own env var to this type.
+ */
+export type OracleSource = (typeof ORACLE_SOURCES)[number];
 /**
  * Off-chain payload fetched by a rule, tagged by `kind` so a caller holding
  * several rules' results can tell them apart. `payload` is `unknown` here —
@@ -69,14 +83,22 @@ export declare function assertRuleUpdateData<T>(data: RuleUpdateData, kind: Pric
  * return when its collector-feed leg needs a value produced by the update leg
  * *within the same PTB*. Pyth Core needs none (its feed leg reads the shared
  * `PriceInfoObject` the update leg refreshed), so it returns `void`. The Lazer
- * rule returns the verified `pyth_lazer::update::Update` result — one
+ * rule returns the verified-update result of its network's verify entry — one
  * signature verification covers every feed in the payload, and
  * `pyth_lazer_rule::feed` takes it by reference per ticker (see
  * `aggregateTicker`'s `lazerUpdate` arg).
  */
 export type RuleUpdateHandle = {
     readonly kind: "pyth_lazer_rule";
-    /** Result of `pyth_lazer::parse_and_verify_le_ecdsa_update` in this PTB. */
+    /**
+     * Opaque result of this network's `LAZER_INFRA.verify_entry` in this PTB,
+     * passed straight to `pyth_lazer_rule::feed`. The Move type is
+     * network-dependent and never named here: mainnet's
+     * `pyth_lazer::parse_and_verify_le_ecdsa_update_v2` yields
+     * `pyth_lazer::update_v2::Update`, testnet's v1
+     * `…_le_ecdsa_update` yields `pyth_lazer::update::Update`, and each
+     * network's `pyth_lazer_rule` is published bound to the matching one.
+     */
     readonly update: TransactionArgument;
 };
 /**

package/dist/src/oracle/price-update-rule.js

@@ -15,6 +15,25 @@
  * entry via `rule-registry.ts`, then drives fetch + `buildUpdateCalls`
  * through this port; `aggregate.ts` stays the sole orchestrator.
  */
+/**
+ * The canonical list of selectable oracle sources — the SINGLE authority the
+ * {@link OracleSource} union derives from (the value-list→union derive
+ * idiom of `unified-client.ts`'s `NON_CLIENT_FIRST`, plus `Object.freeze`
+ * so the immutability is RUNTIME truth: `as const` alone would let a JS
+ * consumer push into the array and desync the membership Set built from it
+ * in `source-list.ts`). Runtime membership checks and the `ORACLE_SOURCE`
+ * env parser live there, on `isOracleSource` / `parseOracleSourceList`.
+ * Only sources belong here: `supra_rule` and `constant_rule` are auxiliary
+ * rules fed alongside whichever sources are selected (see
+ * `aggregateTicker`), not sources themselves — the `satisfies` keeps
+ * entries inside `PriceUpdateRuleKind` but adding an auxiliary rule to this
+ * list is an (incorrect) editorial decision this comment exists to prevent.
+ */
+export const ORACLE_SOURCES = Object.freeze([
+    "pyth_rule",
+    "pyth_lazer_rule",
+    "waterx_rule",
+]);
 /**
  * Shared null → kind → shape guard ladder for a `PriceUpdateRule.buildUpdateCalls`
  * payload — every rule's `buildUpdateCalls` needs the exact same three checks,

package/dist/src/oracle/read-plane.js

@@ -10,6 +10,7 @@
  * (FE/BE price facades) resolve through this instead of hardcoding which
  * sources share which feeds namespace.
  */
+import { ownEntry } from "../utils/record.js";
 import { pythCoreHermesEndpoint, pythProHermesEndpoint } from "./pyth.js";
 /**
  * Resolve `source`'s read plan for `tickers`. Pure config lookup — no
@@ -43,26 +44,32 @@ export function resolveOracleReadPlan(host, source, tickers) {
     switch (source) {
         case "pyth_rule":
         case "pyth_lazer_rule": {
+            // All ticker lookups go through `ownEntry` (own-keys-only): a ticker
+            // named like an Object.prototype key ("toString", "constructor", …)
+            // must read as not-listed, not as an inherited Function.
             const hexFeeds = host.config.packages.pyth_rule?.feeds;
             const feedIdByTicker = new Map();
             for (const ticker of tickers) {
-                const feedId = hexFeeds?.[ticker]?.feed_id;
+                const feedId = ownEntry(hexFeeds, ticker)?.feed_id;
                 if (feedId !== undefined)
                     feedIdByTicker.set(ticker, feedId);
             }
             // For pyth_rule the write and read namespaces coincide, so `unreadable`
             // is always empty; for lazer it is exactly the hex-entry gap.
             const writeFeeds = source === "pyth_lazer_rule" ? host.config.packages.pyth_lazer_rule?.feeds : hexFeeds;
-            const unreadable = tickers.filter((ticker) => writeFeeds?.[ticker] !== undefined && !feedIdByTicker.has(ticker));
+            const unreadable = tickers.filter((ticker) => ownEntry(writeFeeds, ticker) !== undefined && !feedIdByTicker.has(ticker));
             return { plane: "hermes", feedIdByTicker, unreadable };
         }
         case "waterx_rule": {
             // Absent feeds block ⇒ serves nothing (see the OracleReadPlan doc) —
-            // never claim tickers the config doesn't name.
+            // never claim tickers the config doesn't name. `ownEntry` (own-keys-
+            // only, never the `in` operator or a bare bracket read) so a
+            // prototype-key ticker can't count as feeds-listed and poison the
+            // quote-center batch (which 404s whole batches on unknown symbols).
             const feeds = host.config.packages.waterx_rule?.feeds;
             return {
                 plane: "quote_center",
-                tickers: feeds ? tickers.filter((ticker) => ticker in feeds) : [],
+                tickers: tickers.filter((ticker) => ownEntry(feeds, ticker) !== undefined),
                 unreadable: [],
             };
         }

package/dist/src/oracle/rules/pyth-core-rule.js

@@ -6,6 +6,7 @@
  * across rules by `kind`. Mechanical wrap only — no on-chain/off-chain logic
  * changes vs `../pyth.ts` / `./pyth-rule.ts`.
  */
+import { ownEntry } from "../../utils/record.js";
 import { assertRuleUpdateData, } from "../price-update-rule.js";
 import { buildPythPriceUpdateCalls, endpointSupportedFeedIds, fetchPriceFeedsUpdateData, pythCoreHermesEndpoint, } from "../pyth.js";
 /**
@@ -76,7 +77,7 @@ export const PythCoreRule = {
         for (const ticker of tickers) {
             // Same lookup as `host.getPythFeed(ticker)` minus its throw — an
             // unlisted ticker is a miss here, not an error.
-            const feedId = host.config.packages.pyth_rule?.feeds?.[ticker]?.feed_id;
+            const feedId = ownEntry(host.config.packages.pyth_rule?.feeds, ticker)?.feed_id;
             if (feedId === undefined || !packedFeedIds.has(feedId))
                 return null;
             feedIds.push(feedId);

package/dist/src/oracle/rules/pyth-lazer-rule.d.ts

@@ -4,8 +4,9 @@
  * appends per lazer-routed ticker. Fetches one `leEcdsa` payload for all
  * requested integer feed ids from the Lazer HTTP API (Bearer-authenticated
  * via the `pythApiKey` create option), verifies it ONCE on-chain via
- * `pyth_lazer::parse_and_verify_le_ecdsa_update`, and hands the resulting
- * `Update` PTB value back through a `RuleUpdateHandle` for the feed calls.
+ * `pyth_lazer`'s verify entry for that network (see `LAZER_INFRA`), and hands the
+ * resulting `Update` PTB value back through a `RuleUpdateHandle` for the feed
+ * calls.
  */
 import type { Transaction, TransactionArgument } from "@mysten/sui/transactions";
 import type { Network } from "../../constants.ts";
@@ -21,16 +22,33 @@ import { type PriceUpdateRule } from "../price-update-rule.ts";
  *   `POST /v1/latest_price` (Bearer-authenticated). The service is
  *   network-agnostic (one signed payload verifies on any chain that trusts the
  *   Lazer signers), so both networks share the production host.
- * - `verifier_package` — the Sui package carrying
- *   `pyth_lazer::parse_and_verify_le_ecdsa_update`. Per-network: testnet is
- *   still the original v1 publish; mainnet is the v2-upgraded package (which
- *   still exposes the v1 entry `pyth_lazer_rule` binds). Values mirror the
- *   contract repo's `pyth_lazer_rule/Move.toml` published-at pins.
+ * - `verifier_package` / `verify_entry` — the Sui package carrying the verify
+ *   call, and which entry to call. These track what `pyth_lazer_rule` binds on
+ *   that network, so they move together:
+ *   - **mainnet** — the v2 package `0xefbfd064…` and the **v2** entry. The rule
+ *     was republished v2-bound after a 2026-08-05 mainnet probe: the ORIGINAL
+ *     package `0x7b502c…` now aborts `EDifferentVersion` (`state::current_cap`)
+ *     for any payload — the shared `State` has been migrated past that code —
+ *     and its v1 entry aborts `EInvalidChannel` on `fixed_rate@1000ms`, the only
+ *     channel WaterX's Pyth Pro grant permits.
+ *   - **testnet** — still the original v1 publish, which has no `update_v2`
+ *     module at all, so the v1 entry is the only one that exists there.
+ *   Both entries take `(state, clock, bytes)` and accept the same `leEcdsa`
+ *   payload. Values mirror the contract repo's `pyth_lazer_rule/Move.toml`
+ *   published-at pins.
  */
 export declare const LAZER_INFRA: Record<Network, {
     endpoint: string;
     verifier_package: string;
+    verify_entry: LazerVerifyEntry;
+    channel: string;
 }>;
+/**
+ * The `pyth_lazer` verify entry a network's deployed rule consumes. `_v2`
+ * returns `update_v2::Update`; the v1 entry returns `update::Update`, and the
+ * two are NOT interchangeable — the rule's `feed` takes one concrete type.
+ */
+export type LazerVerifyEntry = "parse_and_verify_le_ecdsa_update" | "parse_and_verify_le_ecdsa_update_v2";
 /** `pyth_lazer_rule`'s narrowed `RuleUpdateData.payload` shape. */
 export interface PythLazerUpdatePayload {
     /** One signed `leEcdsa` message carrying every requested feed. */