@waterx/sdk 4.3.2 → 5.0.0

package/dist/src/perp/config-view.d.ts

@@ -19,27 +19,18 @@ export declare class PerpConfigView {
     getMarket(ticker: string): import("./config.ts").WaterxPerpMarketEntry;
     /** `waterx_oracle.aggregators[ticker]`, throws if unknown. */
     getAggregator(ticker: string): string;
-    /** `pyth_rule.feeds[ticker]`, throws if unknown. */
-    getPythFeed(ticker: string): {
-        feed_id: string;
-        price_info_object: string;
-    };
     /**
      * True when `ticker` is priced by `constant_rule` (a constant pin,
-     * e.g. `USDCUSD → $1`) rather than Pyth. Such tickers are fed via
-     * `constant_rule::feed` and need no Pyth update; see {@link refreshOraclePrices}.
+     * e.g. `USDCUSD → $1`) rather than a live source. Such tickers are fed via
+     * `constant_rule::feed` and need no source update leg; see
+     * {@link refreshOraclePrices}.
      *
      * All-or-nothing, mirroring {@link getSupraRule} and the keeper: only routes a
      * ticker to the constant rule when the rule is FULLY wired (`published_at` +
      * `config` present). A half-populated block — a `feeds` entry listed before the
      * rule is deployed, a realistic mid-rollout state — would otherwise make this
-     * true while {@link aggregateTicker} throws, aborting the whole price-refresh PTB
-     * instead of safely falling back to Pyth.
-     *
-     * Whether a constant ticker is *also* Pyth-fed (the dual-feed transition state)
-     * or constant-only is not a separate flag — it falls out of whether the ticker
-     * still has a `pyth_rule.feeds` entry. {@link aggregateTicker} feeds each rule the
-     * ticker is configured for, so no `isDualFeed` / `isConstantOnly` predicate is needed.
+     * true while {@link aggregateTicker} throws, aborting the whole price-refresh
+     * PTB instead of leaving the ticker to its live sources.
      */
     isConstantTicker(ticker: string): boolean;
     /**

package/dist/src/perp/config-view.js

@@ -39,29 +39,18 @@ export class PerpConfigView {
             throw new Error(`No aggregator listed for ticker: ${ticker}`);
         return a;
     }
-    /** `pyth_rule.feeds[ticker]`, throws if unknown. */
-    getPythFeed(ticker) {
-        const f = ownEntry(this.config.packages.pyth_rule?.feeds, ticker);
-        if (!f)
-            throw new Error(`No pyth feed listed for ticker: ${ticker}`);
-        return f;
-    }
     /**
      * True when `ticker` is priced by `constant_rule` (a constant pin,
-     * e.g. `USDCUSD → $1`) rather than Pyth. Such tickers are fed via
-     * `constant_rule::feed` and need no Pyth update; see {@link refreshOraclePrices}.
+     * e.g. `USDCUSD → $1`) rather than a live source. Such tickers are fed via
+     * `constant_rule::feed` and need no source update leg; see
+     * {@link refreshOraclePrices}.
      *
      * All-or-nothing, mirroring {@link getSupraRule} and the keeper: only routes a
      * ticker to the constant rule when the rule is FULLY wired (`published_at` +
      * `config` present). A half-populated block — a `feeds` entry listed before the
      * rule is deployed, a realistic mid-rollout state — would otherwise make this
-     * true while {@link aggregateTicker} throws, aborting the whole price-refresh PTB
-     * instead of safely falling back to Pyth.
-     *
-     * Whether a constant ticker is *also* Pyth-fed (the dual-feed transition state)
-     * or constant-only is not a separate flag — it falls out of whether the ticker
-     * still has a `pyth_rule.feeds` entry. {@link aggregateTicker} feeds each rule the
-     * ticker is configured for, so no `isDualFeed` / `isConstantOnly` predicate is needed.
+     * true while {@link aggregateTicker} throws, aborting the whole price-refresh
+     * PTB instead of leaving the ticker to its live sources.
      */
     isConstantTicker(ticker) {
         const c = this.config.packages.constant_rule;

package/dist/src/perp/config.d.ts

@@ -5,15 +5,15 @@
  * The schema mirrors the canonical JSON layout one-to-one (each package
  * groups its own object IDs + per-ticker maps). External chain infra is
  * **not** in the JSON — each oracle source owns its own per-network table
- * (`PYTH_CORE_INFRA` in `oracle/pyth.ts`, `LAZER_INFRA` in
- * `oracle/rules/pyth-lazer-rule.ts`); Wormhole bridge infra lives in
+ * (`LAZER_INFRA` in `oracle/rules/pyth-lazer-rule.ts`, `WATERX_INFRA` in
+ * `oracle/rules/waterx-rule.ts`); Wormhole bridge infra lives in
  * `WORMHOLE_DEFAULTS` below.
  */
 import type { AccountPackages, BasePackageEntry, WormholeInfraConfig } from "../account/config.ts";
 import type { OraclePackages } from "../oracle/config.ts";
 import type { Network } from "./constants.ts";
 export type { AccountConfig, AccountPackages, BasePackageEntry, NativeCustodyAsset, NativeCustodyPackage, WaterxCreditPackage, WaterxReferralPackage, WithdrawalQueuePackage, WormholeBridgePackage, WormholeInfraConfig, WxaAccountPackage, } from "../account/config.ts";
-export type { ConstantFeedEntry, OracleConfig, OraclePackages, PythAccessConfig, PythFetchPolicy, PythLazerRulePackage, PythRulePackage, PythSponsorRulePackage, SupraFeedEntry, SupraRulePackage, WaterxConstantRulePackage, WaterxAccessConfig, WaterxOraclePackage, WaterxRulePackage, } from "../oracle/config.ts";
+export type { ConstantFeedEntry, OracleConfig, OraclePackages, PythAccessConfig, PythFetchPolicy, PythLazerRulePackage, SupraFeedEntry, SupraRulePackage, WaterxConstantRulePackage, WaterxAccessConfig, WaterxOraclePackage, WaterxRulePackage, } from "../oracle/config.ts";
 export interface WaterxPerpMarketEntry {
     market: string;
     config: string;

package/dist/src/perp/config.js

@@ -5,8 +5,8 @@
  * The schema mirrors the canonical JSON layout one-to-one (each package
  * groups its own object IDs + per-ticker maps). External chain infra is
  * **not** in the JSON — each oracle source owns its own per-network table
- * (`PYTH_CORE_INFRA` in `oracle/pyth.ts`, `LAZER_INFRA` in
- * `oracle/rules/pyth-lazer-rule.ts`); Wormhole bridge infra lives in
+ * (`LAZER_INFRA` in `oracle/rules/pyth-lazer-rule.ts`, `WATERX_INFRA` in
+ * `oracle/rules/waterx-rule.ts`); Wormhole bridge infra lives in
  * `WORMHOLE_DEFAULTS` below.
  */
 import { fetchWithPolicy, rethrowExhaustedFetch } from "../oracle/update-fetch.js";
@@ -14,14 +14,12 @@ import { fetchWithPolicy, rethrowExhaustedFetch } from "../oracle/update-fetch.j
 // Wormhole — external chain infra, defaults by network
 // ============================================================================
 //
-// Oracle-source infra lives with each source (`PYTH_CORE_INFRA` in
-// `oracle/pyth.ts`, `LAZER_INFRA` in `oracle/rules/pyth-lazer-rule.ts`);
-// `client.pyth` is the caller-supplied access slice only (`PythAccessConfig`,
-// re-exported at the top of this file).
+// Oracle-source infra lives with each source (`LAZER_INFRA` in
+// `oracle/rules/pyth-lazer-rule.ts`, `WATERX_INFRA` in
+// `oracle/rules/waterx-rule.ts`); `client.pyth` is the caller-supplied access
+// slice only (`PythAccessConfig`, re-exported at the top of this file).
 // `WormholeInfraConfig` is defined in `account/config.ts` (funding base) and
-// re-exported at the top of this file. `state_id` is the same shared Sui
-// Wormhole `State` object Pyth uses (kept in sync with
-// `PYTH_CORE_INFRA[*].wormhole_state_id`).
+// re-exported at the top of this file.
 export const WORMHOLE_DEFAULTS = {
     MAINNET: {
         state_id: "0xaeab97f96cf9877fee2883315d459552b2b921edc16d7ceac6eab944dd88919c",
@@ -141,15 +139,15 @@ function validateConfig(cfg, expected, url) {
     };
     // Validate by deployment kind. A perp config must carry the perp set; a
     // credit config the credit set. `waterx_account` is common to both.
-    // `pyth_lazer_rule` is intentionally NOT required (and never will be by
-    // presence alone) — it's an optional/experimental package selected only via
-    // a client's `oracleSource` option, never by its presence in the config.
+    // NO oracle-rule package is required by presence — which rules run is the
+    // client's derived fed set, never a hand-declared list (and
+    // `pyth_rule`, once required here, was retired in 5.0.0 — a config may
+    // carry or omit its block freely).
     const isPerp = "waterx_perp" in cfg.packages;
     const isCredit = "waterx_credit" in cfg.packages || "wormhole_bridge" in cfg.packages;
     const required = isPerp
         ? [
             "bucket_framework",
-            "pyth_rule",
             "waterx_account",
             "waterx_oracle",
             "waterx_perp",

package/dist/src/perp/index.d.ts

@@ -1,10 +1,10 @@
 export { PerpClient } from "./client.ts";
 export type { CreateClientOptions } from "./client.ts";
 export { WORMHOLE_DEFAULTS, clearConfigCache, loadConfig } from "./config.ts";
-export type { BasePackageEntry, ConstantFeedEntry, WaterxReferralPackage, LoadConfigOptions, NativeCustodyAsset, NativeCustodyPackage, PythAccessConfig, PythFetchPolicy, PythLazerRulePackage, PythRulePackage, PythSponsorRulePackage, SupraFeedEntry, SupraRulePackage, TestnetFaucetPackage, WaterXConfig, WaterXPackages, WaterxCreditPackage, WaterxOraclePackage, WaterxPerpMarketEntry, WaterxPerpPackage, WaterxStakingPackage, WithdrawalQueuePackage, WlpPackage, WormholeBridgePackage, WormholeInfraConfig, WxaAccountPackage, } from "./config.ts";
+export type { BasePackageEntry, ConstantFeedEntry, WaterxReferralPackage, LoadConfigOptions, NativeCustodyAsset, NativeCustodyPackage, PythAccessConfig, PythFetchPolicy, PythLazerRulePackage, SupraFeedEntry, SupraRulePackage, TestnetFaucetPackage, WaterXConfig, WaterXPackages, WaterxCreditPackage, WaterxOraclePackage, WaterxPerpMarketEntry, WaterxPerpPackage, WaterxStakingPackage, WithdrawalQueuePackage, WlpPackage, WormholeBridgePackage, WormholeInfraConfig, WxaAccountPackage, } from "./config.ts";
 export { ACTION_ADD_PRE_ORDER, ACTION_CANCEL_ORDER, ACTION_CANCEL_PRE_ORDER, ACTION_CLOSE_POSITION, ACTION_DECREASE_POSITION, ACTION_DEPOSIT_COLLATERAL, ACTION_INCREASE_POSITION, ACTION_LIQUIDATE, ACTION_OPEN_POSITION, ACTION_PLACE_ORDER, ACTION_UPDATE_ORDER, ACTION_WITHDRAW_COLLATERAL, BPS_SCALE, DOUBLE_SCALE, DRY_RUN_SENDER, FLOAT_SCALE, ORDER_LIMIT_BUY, ORDER_LIMIT_SELL, ORDER_STOP_BUY, ORDER_STOP_SELL, ORDER_TAG_WILDCARD, PERM_ALL, PERM_ALL_TRADING, PERM_CANCEL_ORDER, PERM_CLOSE_POSITION, PERM_DECREASE_POSITION, PERM_DEPOSIT_COLLATERAL, PERM_INCREASE_POSITION, PERM_MINT_WLP, PERM_OPEN_POSITION, PERM_PLACE_ORDER, PERM_REDEEM_WLP, PERM_WITHDRAW_COLLATERAL, STAKING_PERM_DEPOSIT_STAKE, STAKING_PERM_REDEEM_STAKE, STAKING_PERM_CLAIM_REWARD, STAKING_PERM_ALL, MS_PER_MINUTE, MS_PER_HOUR, MS_PER_YEAR, SUI_DECIMALS, WLP_DECIMALS, COLLATERAL_DECIMALS, TOKEN_DECIMALS, } from "./constants.ts";
 export type { Network } from "./constants.ts";
-export { getMarketTickers, getCollateralAssets } from "../utils/config.ts";
+export { getMarketTickers } from "../utils/config.ts";
 export { annualizedApyFromRatio, annualizeFundingRate, calcBorrowRate, calcBorrowRateAccrual, calcDynamicFeeBps, calcEffectiveCollateralUsd, calcEstLiqPrice, calcEstLiqPriceRaw, calcFee, calcFundingFeeUsd, calcFundingRate, calcImpactFeeRate, calcLeverage, calcMaxReducibleCollateralUsd, calcNotional, calcPositionBorrowFee, calcRealLiqNetCostUsd, calcTokenUtilizationBps, calcTotalTradingFeeRate, calcUnrealizedPnl, calcViewEstLiqFeesUsd, calcWlpIncentiveApy, calcWlpMintOut, calcWlpPrice, calcWlpRedeemOut, decodeFundingIndexDelta, rawPrice, } from "../utils/math.ts";
 export type { ExactDecimalUsd, LiqFeeBundle, RawPriceInput } from "../utils/math.ts";
 export { formatFundingInterval } from "../utils/format.ts";
@@ -13,8 +13,8 @@ export type { EstLiqPriceViewOpts } from "./liq-view.ts";
 export * from "./user/index.ts";
 export * from "./tx-builders.ts";
 export * from "./fetch.ts";
-export { FetchPolicyError, LazerApiKeyMissingError, OracleFeeSourceUnavailableError, OracleSourceNotImplementedError, PythCache, aggregateTicker, aggregateTickerWithConstant, aggregateTickerWithPyth, ORACLE_SOURCES, buildPythPriceUpdateCalls, fetchPriceFeedsUpdateData, isOracleSource, parseOracleSourceList, pythCoreHermesEndpoint, pythProHermesEndpoint, refreshOraclePrices, resolveHermesReadEndpoint, updatePythPrices, waterxEnvelopeOf, waterxQuoteCenterEndpoint, } from "../oracle/index.ts";
-export type { FetchPolicy, OracleFeeSource, OracleSource, UpdateDataProvider, } from "../oracle/index.ts";
+export { FetchPolicyError, LazerApiKeyMissingError, LazerNotEntitledError, OracleTickerUnservedError, OracleWeightCoverageError, OracleWeightUnreadableError, OracleSourceNotImplementedError, aggregateTicker, aggregateTickerWithConstant, ORACLE_SOURCES, assertOracleWeightCoverage, assertOracleWriteCoverage, fetchPythProHistory, fetchPythSymbolCatalog, fetchWaterxSignedLeaves, fetchWaterxSignedUpdate, fetchWaterxUpdateData, getMarketStatus, isFreshWaterxEntry, deriveOracleSources, missingOracleCredentials, parsePythSchedule, PythScheduleParseError, pullWaterxQuotes, readLazerPrices, readPlanTickers, readQuoteCenterPrices, refreshOraclePrices, resolveOracleReadPlan, resolveOracleRule, servableTickers, WATERX_MAX_PRICE_AGE_MS, waterxEnvelopeOf, waterxLeavesOf, parseSignedLeaves, MERKLE_ROOT_INTENT, waterxQuoteCenterEndpoint, } from "../oracle/index.ts";
+export type { FetchPolicy, HolidayDate, MarketStatusResult, OracleCredentialKind, OraclePriceEntry, OracleRefreshSummary, OracleReadPlan, OracleSource, ParsedPythSchedule, PythSymbolRecord, TradingHours, TradingSession, UpdateDataProvider, WaterxBatchItem, WaterxEnvelopePayload, WaterxLeafPayload, WaterxSignedEnvelope, WaterxSignedLeaf, WaterxUpdatePayload, } from "../oracle/index.ts";
 export { fetchDepositVaa, fetchVaa, listBridgeWithdrawalVaas, listVaasByEmitter, padEvmEmitter, toWormholescanEmitter, vaaBase64ToBytes, vaaBase64ToHex, vaaBytesToBase64, waitForVaa, } from "../account/funding/wormhole.ts";
 export type { VaaListItem, VaaResponse, WormholescanOptions } from "../account/funding/wormhole.ts";
 export { AccountData as AccountDataBcs, GlobalConfigData as GlobalConfigDataBcs, MarketData as MarketDataBcs, OrderData as OrderDataBcs, PoolData as PoolDataBcs, PositionData as PositionDataBcs, RedeemRequestData as RedeemRequestDataBcs, TokenPoolData as TokenPoolDataBcs, } from "../generated/waterx_perp_view/view.ts";
@@ -27,8 +27,6 @@ export * as viewCalls from "../generated/waterx_perp_view/view.ts";
 export * as wxaAccountCalls from "../generated/waterx_account/account.ts";
 export * as stakingCalls from "../generated/waterx_staking/waterx_staking.ts";
 export * as oracleCalls from "../generated/waterx_oracle/oracle.ts";
-export * as pythRuleCalls from "../generated/waterx_pyth_rule/pyth_rule.ts";
-export * as pythSponsorRuleCalls from "../generated/pyth_sponsor_rule/pyth_sponsor_rule.ts";
 export * as referralCalls from "../generated/waterx_referral/referral_table.ts";
 export * as nativeCustodyCalls from "../generated/native_custody/custody_vault.ts";
 export * as withdrawalQueueCalls from "../generated/withdrawal_queue/withdrawal_queue.ts";

package/dist/src/perp/index.js

@@ -4,7 +4,7 @@ export { WORMHOLE_DEFAULTS, clearConfigCache, loadConfig } from "./config.js";
 // ======== Constants & enums ========
 export { ACTION_ADD_PRE_ORDER, ACTION_CANCEL_ORDER, ACTION_CANCEL_PRE_ORDER, ACTION_CLOSE_POSITION, ACTION_DECREASE_POSITION, ACTION_DEPOSIT_COLLATERAL, ACTION_INCREASE_POSITION, ACTION_LIQUIDATE, ACTION_OPEN_POSITION, ACTION_PLACE_ORDER, ACTION_UPDATE_ORDER, ACTION_WITHDRAW_COLLATERAL, BPS_SCALE, DOUBLE_SCALE, DRY_RUN_SENDER, FLOAT_SCALE, ORDER_LIMIT_BUY, ORDER_LIMIT_SELL, ORDER_STOP_BUY, ORDER_STOP_SELL, ORDER_TAG_WILDCARD, PERM_ALL, PERM_ALL_TRADING, PERM_CANCEL_ORDER, PERM_CLOSE_POSITION, PERM_DECREASE_POSITION, PERM_DEPOSIT_COLLATERAL, PERM_INCREASE_POSITION, PERM_MINT_WLP, PERM_OPEN_POSITION, PERM_PLACE_ORDER, PERM_REDEEM_WLP, PERM_WITHDRAW_COLLATERAL, STAKING_PERM_DEPOSIT_STAKE, STAKING_PERM_REDEEM_STAKE, STAKING_PERM_CLAIM_REWARD, STAKING_PERM_ALL, MS_PER_MINUTE, MS_PER_HOUR, MS_PER_YEAR, SUI_DECIMALS, WLP_DECIMALS, COLLATERAL_DECIMALS, TOKEN_DECIMALS, } from "./constants.js";
 // ======== Utilities ========
-export { getMarketTickers, getCollateralAssets } from "../utils/config.js";
+export { getMarketTickers } from "../utils/config.js";
 export { annualizedApyFromRatio, annualizeFundingRate, calcBorrowRate, calcBorrowRateAccrual, calcDynamicFeeBps, calcEffectiveCollateralUsd, calcEstLiqPrice, calcEstLiqPriceRaw, calcFee, calcFundingFeeUsd, calcFundingRate, calcImpactFeeRate, calcLeverage, calcMaxReducibleCollateralUsd, calcNotional, calcPositionBorrowFee, calcRealLiqNetCostUsd, calcTokenUtilizationBps, calcTotalTradingFeeRate, calcUnrealizedPnl, calcViewEstLiqFeesUsd, calcWlpIncentiveApy, calcWlpMintOut, calcWlpPrice, calcWlpRedeemOut, decodeFundingIndexDelta, rawPrice, } from "../utils/math.js";
 export { formatFundingInterval } from "../utils/format.js";
 export { calcEstLiqPriceRawFromView } from "./liq-view.js";
@@ -14,8 +14,22 @@ export * from "./user/index.js";
 export * from "./tx-builders.js";
 // ======== Read-only queries ========
 export * from "./fetch.js";
-// ======== Oracle utilities (Pyth source + rule aggregation) ========
-export { FetchPolicyError, LazerApiKeyMissingError, OracleFeeSourceUnavailableError, OracleSourceNotImplementedError, PythCache, aggregateTicker, aggregateTickerWithConstant, aggregateTickerWithPyth, ORACLE_SOURCES, buildPythPriceUpdateCalls, fetchPriceFeedsUpdateData, isOracleSource, parseOracleSourceList, pythCoreHermesEndpoint, pythProHermesEndpoint, refreshOraclePrices, resolveHermesReadEndpoint, updatePythPrices, waterxEnvelopeOf, waterxQuoteCenterEndpoint, } from "../oracle/index.js";
+// ======== Oracle utilities (sources + rule aggregation + read planes) ========
+export { FetchPolicyError, LazerApiKeyMissingError, LazerNotEntitledError, OracleTickerUnservedError, OracleWeightCoverageError, OracleWeightUnreadableError, OracleSourceNotImplementedError, aggregateTicker, aggregateTickerWithConstant, ORACLE_SOURCES, assertOracleWeightCoverage, assertOracleWriteCoverage, fetchPythProHistory, fetchPythSymbolCatalog, fetchWaterxSignedLeaves, fetchWaterxSignedUpdate, fetchWaterxUpdateData, getMarketStatus, isFreshWaterxEntry, deriveOracleSources, missingOracleCredentials, parsePythSchedule, PythScheduleParseError, 
+// THE quote-center route ladder (leaves-first, envelope only where there is
+// no leaf route). Both SDK planes go through it, so a consumer running its
+// own prefetch reaches for the same one rather than re-deriving the ladder.
+pullWaterxQuotes, readLazerPrices, readPlanTickers, readQuoteCenterPrices, refreshOraclePrices, resolveOracleReadPlan, resolveOracleRule, 
+// `refreshOraclePrices`' OWN acceptance predicate. Consumers filtering a
+// ticker list before a build must use this rather than re-deriving "some
+// listed source carries it", or they drift from what the build accepts.
+servableTickers, WATERX_MAX_PRICE_AGE_MS, waterxEnvelopeOf, 
+// Leaves are the DEFAULT waterx wire shape, so their accessor + parser belong
+// on the same surface as `waterxEnvelopeOf` (and on the root, which re-exports
+// this file). A prefetch cache written against the envelope-only surface would
+// otherwise get `null` from its only accessor on the normal path and have to
+// discover `@waterx/sdk/oracle` to fix it.
+waterxLeavesOf, parseSignedLeaves, MERKLE_ROOT_INTENT, waterxQuoteCenterEndpoint, } from "../oracle/index.js";
 // ======== Wormhole / Wormholescan utilities (credit bridge) ========
 export { fetchDepositVaa, fetchVaa, listBridgeWithdrawalVaas, listVaasByEmitter, padEvmEmitter, toWormholescanEmitter, vaaBase64ToBytes, vaaBase64ToHex, vaaBytesToBase64, waitForVaa, } from "../account/funding/wormhole.js";
 // ======== Generated BCS types (sui-ts-codegen) ========
@@ -30,8 +44,6 @@ export * as viewCalls from "../generated/waterx_perp_view/view.js";
 export * as wxaAccountCalls from "../generated/waterx_account/account.js";
 export * as stakingCalls from "../generated/waterx_staking/waterx_staking.js";
 export * as oracleCalls from "../generated/waterx_oracle/oracle.js";
-export * as pythRuleCalls from "../generated/waterx_pyth_rule/pyth_rule.js";
-export * as pythSponsorRuleCalls from "../generated/pyth_sponsor_rule/pyth_sponsor_rule.js";
 export * as referralCalls from "../generated/waterx_referral/referral_table.js";
 export * as nativeCustodyCalls from "../generated/native_custody/custody_vault.js";
 export * as withdrawalQueueCalls from "../generated/withdrawal_queue/withdrawal_queue.js";

package/dist/src/perp/tx-builders/common.d.ts

@@ -1,44 +1,58 @@
 /**
  * Shared scaffolding for the high-level perp `build*Tx` composers:
  * `CommonBuildOpts`, the new-or-reuse PTB helper, the WLP pool-oracle refresh,
- * and the request+execute envelope (optional Pyth-sponsor flow + pre-sweep).
+ * and the request+execute envelope (optional pre-sweep).
  */
 import { Transaction, type TransactionArgument } from "@mysten/sui/transactions";
-import { PythCache, type OracleFeeSource, type UpdateDataProvider } from "../../oracle/index.ts";
+import { type OracleRefreshSummary, type UpdateDataProvider } from "../../oracle/index.ts";
 import type { PerpClient } from "../client.ts";
 export interface CommonBuildOpts {
     /** Append to an existing PTB instead of creating a new one. */
     tx?: Transaction;
-    /** Skip oracle refresh entirely (caller manages freshness). Default: false. */
-    skipOraclePriceRefresh?: boolean;
-    /** Share a `PythCache` across builders to avoid redundant pyth_state reads. */
-    pythCache?: PythCache;
     /**
-     * @deprecated No longer a fee-source decision. `wrapRequestAndExecute` now
-     * opens (and reimburses) the `pyth_sponsor_rule` Fund purely from config
-     * presence — whenever `client.config.packages.pyth_sponsor_rule` is
-     * deployed, the fund is ALWAYS opened, regardless of this flag (see
-     * `OracleFeeSourceUnavailable` in `oracle/pyth.ts`). This closes the gap
-     * where a market whose checklist required `PythSponsorRule`, or a caller
-     * that mis-set this flag, silently drew from `tx.gas` and failed
-     * ON-CHAIN instead of at build time. Use `allowGasFee` for the
-     * non-sponsored case instead. Kept accepted (as a no-op) only so existing
-     * callers keep compiling; will be removed in a future major version.
+     * Skip oracle refresh entirely (caller manages freshness). Default: false.
+     *
+     * This is the SHARED-REFRESH composition lever: a caller batching several
+     * builders into one PTB refreshes once, up front, then passes the same `tx`
+     * to each builder with this flag set —
+     *
+     *   const tx = new Transaction();
+     *   await refreshOraclePrices(tx, client.perp, allTickers);
+     *   await buildIncreasePositionTx(client.perp, { ...a, tx, skipOraclePriceRefresh: true });
+     *   await buildPlaceOrderTx(client.perp, { ...b, tx, skipOraclePriceRefresh: true });
+     *
+     * — one refresh covering `allTickers` (every builder's market + collateral
+     * tickers + the WLP pool tokens) instead of N. This is not just a gas
+     * saving: under `waterx_rule` a repeated per-builder refresh would submit
+     * the same signed timestamp twice per symbol in one PTB, paying full
+     * verification for an on-chain abstain (the F-014 per-symbol replay
+     * high-water mark).
+     *
+     * Sharing one fetched waterx snapshot across CONCURRENT builds is safe on
+     * these paths: every builder here feeds through `collect_*`, where a
+     * replayed per-symbol timestamp ABSTAINS rather than aborting — the chain
+     * already holds a price at least that fresh. `EReplayedSignature` is raised
+     * only by the single-rule `feed_*` entries, which no `build*Tx` uses. The
+     * cost of sharing is a contribution that does not count, not a failed
+     * transaction.
      */
-    useSponsor?: boolean;
+    skipOraclePriceRefresh?: boolean;
     /**
-     * Explicit opt-in to draw the Pyth update fee from `tx.gas` when this
-     * client's config has no `pyth_sponsor_rule` deployed. Ignored whenever a
-     * sponsor fund IS available — the sponsor pool always wins over `tx.gas`
-     * when one can be opened (see `useSponsor`'s deprecation note above).
-     * Required for flows with no `TradingRequest` to reimburse a sponsor fund
-     * against (e.g. `buildMintWlpTx` — see its doc comment). Building an
-     * oracle refresh with neither a sponsor fund nor this flag throws
-     * `OracleFeeSourceUnavailable` instead of silently drawing from `tx.gas`
-     * (Enoki-sponsored transactions reject any `tx.gas` draw). Default:
-     * `false`.
+     * Build even when a ticker this action depends on could not be refreshed.
+     *
+     * `refreshOraclePrices` SKIPS tickers no listed source serves (it is a broad
+     * primitive — losing 29 tickers because the 30th is unconfigured is the wrong
+     * trade). The composers then fail closed on the subset their specific action
+     * actually depends on. This opts out of that check, building against whatever
+     * price the chain already holds.
+     *
+     * Rarely correct. The on-chain guards do NOT cover for it: `mint_wlp` sizes
+     * the payout off `pool.tvl_usd`, and `assert_prices_fresh` only compares each
+     * token's `last_price_refresh_timestamp` against
+     * `price_refresh_threshold_ms` — so a pool asset last refreshed by SOMEONE
+     * ELSE minutes ago passes, and the mint is valued off that stale price.
      */
-    allowGasFee?: boolean;
+    allowUnrefreshedPrices?: boolean;
     /**
      * Pre-sweep parked backing assets (USDC, USDsui, …) at the wxa account's
      * address into USD credit, plus any CREDIT coins/funds at the address into
@@ -73,36 +87,63 @@ interface RequestParams {
     lpType?: string;
 }
 export declare function newTx(opts?: CommonBuildOpts): Transaction;
+/**
+ * Fail the build when a ticker THIS action depends on went unrefreshed.
+ *
+ * The split of responsibility: `refreshOraclePrices` skips (it cannot know
+ * which of its tickers were load-bearing), the composer asserts (it does).
+ */
+export declare function assertTickersRefreshed(client: PerpClient, summary: OracleRefreshSummary, required: string[], opts: CommonBuildOpts | undefined, 
+/** Appended to the error, to say why THESE tickers were load-bearing. */
+why?: string): void;
+/**
+ * Fail the build when ANY WLP pool asset went unpriced — stricter than
+ * {@link assertTickersRefreshed}, and deliberately so.
+ *
+ * `mint_wlp` / `settle_redeem` take `&WlpAum` and size the payout against the
+ * pool's WHOLE `tvl_usd`, so a stale price on any pool asset mis-values the
+ * trade — not just a stale price on the deposit ticker.
+ *
+ * Nothing on chain catches the gap. Two paths, neither of which fails:
+ *   - the asset IS bumped: `update_token_value` calls `oracle::get_price`,
+ *     which aborts `EStalePrice` unless this PTB aggregated it — loud, safe;
+ *   - the asset is NOT bumped (it was skipped, so no leg was emitted): its
+ *     `last_price_refresh_timestamp` keeps whatever a previous transaction
+ *     left, and `assert_prices_fresh` only asks that it be within
+ *     `price_refresh_threshold_ms`. A recent-enough stale price PASSES.
+ *
+ * So the silent case is exactly the skipped one, and the build is the only
+ * place it can be caught.
+ */
+export declare function assertWlpPoolRefreshed(client: PerpClient, summary: OracleRefreshSummary, opts: CommonBuildOpts | undefined): void;
 /**
  * Refresh every WLP pool-token oracle (+ caller-supplied extra tickers) and
  * bump each pool token's `last_price_refresh_timestamp` so the pool's
  * `assert_prices_fresh` passes when the next `mint_wlp` / `request_redeem` /
  * trading `execute` runs in the same PTB.
+ *
+ * Fails closed via {@link assertWlpPoolRefreshed} — see there for why a gap is
+ * otherwise silent rather than an on-chain abort.
  */
-export declare function refreshWlpPoolOracles(tx: Transaction, client: PerpClient, extraTickers: string[], opts: {
-    cache?: PythCache;
-    /** Forwarded to `refreshOraclePrices` — already resolved by the caller (see `OracleFeeSource`). */
-    feeSource?: OracleFeeSource;
+export declare function refreshWlpPoolOracles(tx: Transaction, client: PerpClient, extraTickers: string[], 
+/** The build's options — `lpType`, plus `allowUnrefreshedPrices` / `updateDataProvider`. */
+opts: CommonBuildOpts & {
     lpType?: string;
-    updateDataProvider?: UpdateDataProvider;
-}): Promise<void>;
+}): Promise<OracleRefreshSummary>;
 /**
- * Build the *Request + execute envelope with the config-driven Pyth sponsor flow:
+ * Build the *Request + execute envelope:
  *
  *   [maybeConsolidate(tx)]
- *   [fund = sponsor.request()]
- *   refreshOraclePrices(..., feeSource?)
+ *   refreshOraclePrices(...)
  *   req = buildRequest()
- *   [sponsor.reimburse(fund, req)]
  *   trading::execute(req)
  *
  * Accepted ordering caveat: `maybeConsolidate` runs FIRST and can itself
- * append PTB commands (the consolidation sweep) before the fee-source check
- * inside `refreshOraclePrices` ever runs — so an `OracleFeeSourceUnavailable`
- * throw here is NOT the "zero commands appended" guarantee
- * `refreshOraclePrices` gives its own callers (see its docblock in
- * `aggregate.ts`); `tx` can already carry the sweep. This is the same
- * discard-tx-on-throw contract every `build*Tx` composer already has for
+ * append PTB commands (the consolidation sweep) before the refresh's own
+ * pre-checks run — so a throw out of `refreshOraclePrices` here is NOT the
+ * "zero commands appended" guarantee it gives its own callers (see its
+ * docblock in `aggregate.ts`); `tx` can already carry the sweep. This is the
+ * same discard-tx-on-throw contract every `build*Tx` composer already has for
  * mid-build on-chain-read failures — not a new hole. It matters only for a
  * caller that passed in their OWN `opts.tx` (reusing one `Transaction`
  * across builder calls, e.g. to compose several actions in one PTB); such a
@@ -111,10 +152,7 @@ export declare function refreshWlpPoolOracles(tx: Transaction, client: PerpClien
  */
 export declare function wrapRequestAndExecute(client: PerpClient, tx: Transaction, req: RequestParams & {
     accountId: string;
-}, collateralTicker: string, opts: CommonBuildOpts | undefined, buildRequest: (sponsorFund?: {
-    fund: TransactionArgument;
-    packageId: string;
-}) => TransactionArgument): Promise<void>;
+}, collateralTicker: string, opts: CommonBuildOpts | undefined, buildRequest: () => TransactionArgument): Promise<void>;
 /** Run the async sweep iff `consolidateToUsd !== false`. */
 export declare function maybeConsolidate(client: PerpClient, tx: Transaction, accountId: string, opts: CommonBuildOpts | undefined): Promise<void>;
 export {};

package/dist/src/perp/tx-builders/common.js

@@ -1,52 +1,141 @@
 /**
  * Shared scaffolding for the high-level perp `build*Tx` composers:
  * `CommonBuildOpts`, the new-or-reuse PTB helper, the WLP pool-oracle refresh,
- * and the request+execute envelope (optional Pyth-sponsor flow + pre-sweep).
+ * and the request+execute envelope (optional pre-sweep).
  */
 import { Transaction } from "@mysten/sui/transactions";
 import { appendConsolidateForSpend } from "../../account/funding/consolidate.js";
-import { openPythSponsorFund, refreshOraclePrices, reimbursePythSponsor, } from "../../oracle/index.js";
-import { getCollateralAssets } from "../../utils/config.js";
+import { OracleTickerUnservedError, partitionServableTickers, refreshOraclePrices, } from "../../oracle/index.js";
 import { executeTrading } from "../user/trading.js";
 import { updateTokenValue } from "../user/wlp.js";
 export function newTx(opts) {
     return opts?.tx ?? new Transaction();
 }
+/**
+ * Fail the build when a ticker THIS action depends on went unrefreshed.
+ *
+ * The split of responsibility: `refreshOraclePrices` skips (it cannot know
+ * which of its tickers were load-bearing), the composer asserts (it does).
+ */
+export function assertTickersRefreshed(client, summary, required, opts, 
+/** Appended to the error, to say why THESE tickers were load-bearing. */
+why) {
+    if (opts?.allowUnrefreshedPrices)
+        return;
+    const skipped = new Set(summary.skipped);
+    const unserved = [...new Set(required)].filter((ticker) => skipped.has(ticker));
+    if (unserved.length > 0) {
+        throw new OracleTickerUnservedError(unserved, client.oracleSources, why);
+    }
+}
+/**
+ * Fail the build when ANY WLP pool asset went unpriced — stricter than
+ * {@link assertTickersRefreshed}, and deliberately so.
+ *
+ * `mint_wlp` / `settle_redeem` take `&WlpAum` and size the payout against the
+ * pool's WHOLE `tvl_usd`, so a stale price on any pool asset mis-values the
+ * trade — not just a stale price on the deposit ticker.
+ *
+ * Nothing on chain catches the gap. Two paths, neither of which fails:
+ *   - the asset IS bumped: `update_token_value` calls `oracle::get_price`,
+ *     which aborts `EStalePrice` unless this PTB aggregated it — loud, safe;
+ *   - the asset is NOT bumped (it was skipped, so no leg was emitted): its
+ *     `last_price_refresh_timestamp` keeps whatever a previous transaction
+ *     left, and `assert_prices_fresh` only asks that it be within
+ *     `price_refresh_threshold_ms`. A recent-enough stale price PASSES.
+ *
+ * So the silent case is exactly the skipped one, and the build is the only
+ * place it can be caught.
+ */
+export function assertWlpPoolRefreshed(client, summary, opts) {
+    // Every pool asset is required — that IS the WLP-specific part. The general
+    // assert does the rest; there is no second class of fault to detect, because
+    // `refreshWlpPoolOracles` requests the whole pool, so anything this client
+    // cannot price is necessarily in `summary.skipped` already.
+    assertTickersRefreshed(client, summary, Object.keys(client.config.packages.wlp?.pool_tokens ?? {}), opts, "They are WLP pool assets, and mint/redeem values the WHOLE pool. ");
+}
 /**
  * Refresh every WLP pool-token oracle (+ caller-supplied extra tickers) and
  * bump each pool token's `last_price_refresh_timestamp` so the pool's
  * `assert_prices_fresh` passes when the next `mint_wlp` / `request_redeem` /
  * trading `execute` runs in the same PTB.
+ *
+ * Fails closed via {@link assertWlpPoolRefreshed} — see there for why a gap is
+ * otherwise silent rather than an on-chain abort.
  */
-export async function refreshWlpPoolOracles(tx, client, extraTickers, opts) {
-    const poolTickers = getCollateralAssets(client.config);
-    const oracleTickers = Array.from(new Set([...extraTickers, ...poolTickers]));
-    await refreshOraclePrices(tx, client, oracleTickers, {
-        cache: opts.cache,
-        feeSource: opts.feeSource,
+export async function refreshWlpPoolOracles(tx, client, extraTickers, 
+/** The build's options — `lpType`, plus `allowUnrefreshedPrices` / `updateDataProvider`. */
+opts) {
+    // EVERY pool asset is requested, not a pre-filtered subset. Filtering here
+    // was the bug: a token the fed set cannot price was dropped from BOTH the
+    // refresh and the bump, so nothing on chain objected (see
+    // `assertWlpPoolRefreshed` for why `assert_prices_fresh` lets that through)
+    // and the mint was valued off a stale price. Ask for all of them, fail the
+    // build on any gap, then bump.
+    const poolTokens = client.config.packages.wlp?.pool_tokens ?? {};
+    // `refreshOraclePrices` dedupes its own input, so a plain concat is enough.
+    const oracleTickers = [...extraTickers, ...Object.keys(poolTokens)];
+    // Fail closed BEFORE the fetch, on EVERYTHING this build depends on.
+    //
+    // `refreshOraclePrices` no longer throws on an unservable ticker (it skips
+    // and reports), so nothing is gained by waiting for it — and waiting costs
+    // the full off-chain fetch plus every collector/aggregate moveCall appended
+    // to a caller-supplied `tx`, all discarded on the throw. The predicate is
+    // pure config, so the pre-flight answer is identical to the summary's, free.
+    //
+    // Two required sets, each with its own explanation: `extraTickers` are the
+    // caller's action-critical ones (the traded market + its collateral, or a
+    // WLP deposit ticker), and the pool is required wholesale because mint and
+    // redeem value the WHOLE pool.
+    const planned = plannedSummary(client, oracleTickers);
+    assertTickersRefreshed(client, planned, extraTickers, opts);
+    assertWlpPoolRefreshed(client, planned, opts);
+    const summary = await refreshOraclePrices(tx, client, oracleTickers, {
         updateDataProvider: opts.updateDataProvider,
     });
-    for (const tokenType of Object.values(client.config.packages.wlp.pool_tokens)) {
+    // Bump only what was actually AGGREGATED, not every pool entry.
+    //
+    // `update_token_value` calls `oracle::get_price`, which aborts `EStalePrice`
+    // unless this PTB aggregated that ticker. Normally the asserts above
+    // guarantee it — but `allowUnrefreshedPrices` skips them by design, and
+    // bumping a skipped asset then produced a transaction guaranteed to abort,
+    // which made the escape hatch unusable on exactly the deployments that need
+    // it. Driving the loop off the summary makes the opt-out mean what it says:
+    // build with whatever prices the chain already holds, and touch nothing else.
+    const aggregated = new Set(summary.refreshed);
+    for (const [ticker, tokenType] of Object.entries(poolTokens)) {
+        if (!aggregated.has(ticker))
+            continue;
         updateTokenValue(client, tx, { tokenType, lpType: opts.lpType });
     }
+    return summary;
 }
 /**
- * Build the *Request + execute envelope with the config-driven Pyth sponsor flow:
+ * What {@link refreshOraclePrices} WOULD report for `tickers`, computed from
+ * config alone.
+ *
+ * Same predicate, same partition — so a pre-flight assert cannot disagree with
+ * the summary the refresh later returns, and a build destined to fail can fail
+ * before spending a network round trip or mutating the caller's transaction.
+ */
+function plannedSummary(client, tickers) {
+    const { servable, unservable } = partitionServableTickers(client, tickers);
+    return { refreshed: servable, skipped: unservable };
+}
+/**
+ * Build the *Request + execute envelope:
  *
  *   [maybeConsolidate(tx)]
- *   [fund = sponsor.request()]
- *   refreshOraclePrices(..., feeSource?)
+ *   refreshOraclePrices(...)
  *   req = buildRequest()
- *   [sponsor.reimburse(fund, req)]
  *   trading::execute(req)
  *
  * Accepted ordering caveat: `maybeConsolidate` runs FIRST and can itself
- * append PTB commands (the consolidation sweep) before the fee-source check
- * inside `refreshOraclePrices` ever runs — so an `OracleFeeSourceUnavailable`
- * throw here is NOT the "zero commands appended" guarantee
- * `refreshOraclePrices` gives its own callers (see its docblock in
- * `aggregate.ts`); `tx` can already carry the sweep. This is the same
- * discard-tx-on-throw contract every `build*Tx` composer already has for
+ * append PTB commands (the consolidation sweep) before the refresh's own
+ * pre-checks run — so a throw out of `refreshOraclePrices` here is NOT the
+ * "zero commands appended" guarantee it gives its own callers (see its
+ * docblock in `aggregate.ts`); `tx` can already carry the sweep. This is the
+ * same discard-tx-on-throw contract every `build*Tx` composer already has for
  * mid-build on-chain-read failures — not a new hole. It matters only for a
  * caller that passed in their OWN `opts.tx` (reusing one `Transaction`
  * across builder calls, e.g. to compose several actions in one PTB); such a
@@ -55,39 +144,16 @@ export async function refreshWlpPoolOracles(tx, client, extraTickers, opts) {
  */
 export async function wrapRequestAndExecute(client, tx, req, collateralTicker, opts, buildRequest) {
     await maybeConsolidate(client, tx, req.accountId, opts);
-    // Fee source + witness attachment is config-driven, not a caller flag: the
-    // sponsor fund is opened (and later reimbursed) whenever this client's
-    // config has `pyth_sponsor_rule` deployed — regardless of the deprecated
-    // `useSponsor` flag (see its JSDoc). `allowGasFee` is the only caller lever
-    // left, and it only matters when config has NO sponsor rule to open (see
-    // `OracleFeeSourceUnavailable` in `oracle/pyth.ts`).
-    //
-    // `feeSource` is resolved HERE, once, from that same decision — sponsor
-    // beats gas structurally because this is the only branch that ever sees
-    // both candidates; everything downstream (`refreshWlpPoolOracles` →
-    // `refreshOraclePrices` → `BuildUpdateOpts` → `PythCoreRule` →
-    // `buildPythPriceUpdateCalls`) just carries the single resolved value.
-    let sponsorFund;
-    if (client.config.packages.pyth_sponsor_rule) {
-        sponsorFund = openPythSponsorFund(tx, client);
-    }
-    const feeSource = sponsorFund
-        ? { kind: "sponsor", ...sponsorFund }
-        : opts?.allowGasFee
-            ? { kind: "gas" }
-            : undefined;
     if (!opts?.skipOraclePriceRefresh) {
+        // The action-critical pair for a trade — the market being traded and the
+        // collateral it is margined in — is passed as the extras, which
+        // `refreshWlpPoolOracles` fails closed on before it fetches anything.
         await refreshWlpPoolOracles(tx, client, [req.ticker, collateralTicker], {
-            cache: opts?.pythCache,
-            feeSource,
+            ...opts,
             lpType: req.lpType,
-            updateDataProvider: opts?.updateDataProvider,
         });
     }
-    const tradingReq = buildRequest(sponsorFund);
-    if (sponsorFund) {
-        reimbursePythSponsor(tx, client, sponsorFund.fund, tradingReq, req.collateralType);
-    }
+    const tradingReq = buildRequest();
     executeTrading(client, tx, {
         ticker: req.ticker,
         collateralType: req.collateralType,