gloomberb 0.18.4 → 0.19.0

package/README.md

@@ -53,7 +53,7 @@ With [Bun](https://bun.sh), on any supported OS:
 bun install -g gloomberb
 ```
 
-Then run `gloom`. The command was called `gloomberb` before 0.19, and that name still works. For chart graphics, use a Kitty-compatible terminal such as Ghostty, Kitty, or WezTerm. Windows Terminal draws charts as text; the desktop app draws them in full.
+Then run `gloom`. The command was called `gloomberb` before 0.18.4, and that name still works. For chart graphics, use a Kitty-compatible terminal such as Ghostty, Kitty, or WezTerm. Windows Terminal draws charts as text; the desktop app draws them in full.
 
 ## Start
 

package/README.zh-CN.md

@@ -65,7 +65,7 @@ curl -fsSL gloom.sh/install | bash
 bun install -g gloomberb
 ```
 
-运行 `gloom` 即可启动。0.19 之前命令名为 `gloomberb`，该名称仍可使用。要显示图形，请使用兼容 Kitty 图形协议的终端，例如 Ghostty、Kitty 或 WezTerm。直接下载、安装位置与更新方式详见[安装指南（英文）](docs/installation.md)。
+运行 `gloom` 即可启动。0.18.4 之前命令名为 `gloomberb`，该名称仍可使用。要显示图形，请使用兼容 Kitty 图形协议的终端，例如 Ghostty、Kitty 或 WezTerm。直接下载、安装位置与更新方式详见[安装指南（英文）](docs/installation.md)。
 
 ## 开始使用
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gloomberb",
-  "version": "0.18.4",
+  "version": "0.19.0",
   "packageManager": "bun@1.3.11",
   "description": "Market research and portfolio tracker for the terminal",
   "module": "src/public/index.ts",

package/patches/electrobun@1.18.1.patch

@@ -74,7 +74,7 @@ index cdaa2bca0fabe577cb667056aa6f8f84211189c2..3839e5232742c2467180c344f51a30f1
  
  // Encrypt function
 diff --git a/dist/api/bun/core/Updater.ts b/dist/api/bun/core/Updater.ts
-index 39daf6d341780af8e30c2c50327162863f5977ec..0174d2ce1a9a4fa8ae0fd97367293fc5a794286a 100644
+index 39daf6d341780af8e30c2c50327162863f5977ec..4f3d2bef8e4b41a13a5a522c0af8dd700879a5db 100644
 --- a/dist/api/bun/core/Updater.ts
 +++ b/dist/api/bun/core/Updater.ts
 @@ -132,6 +132,19 @@ let updateInfo: {
@@ -193,7 +193,52 @@ index 39daf6d341780af8e30c2c50327162863f5977ec..0174d2ce1a9a4fa8ae0fd97367293fc5
  				emitStatus(
  					"fetching-patch",
  					`Checking for patch: ${currentHash.slice(0, 8)}`,
-@@ -612,12 +679,12 @@ const Updater = {
+@@ -498,11 +565,25 @@ const Updater = {
+ 				// - macOS/Windows: Resources/version.json (inside the app bundle directory)
+ 				// - Linux: metadata.json (alongside the app bundle)
+ 				const resourcesDir = "Resources";
+-				const patchedTarBytes = await Bun.file(
+-					tmpPatchedTarFilePath,
+-				).arrayBuffer();
+-				const patchedArchive = new Bun.Archive(patchedTarBytes);
+-				const patchedFiles = await patchedArchive.files();
++				let patchedFiles: Map<string, File>;
++				try {
++					const patchedTarBytes = await Bun.file(
++						tmpPatchedTarFilePath,
++					).arrayBuffer();
++					const patchedArchive = new Bun.Archive(patchedTarBytes);
++					patchedFiles = await patchedArchive.files();
++				} catch (error) {
++					// bspatch does not check what it patches: from a damaged tar it
++					// makes one that does not read, and would at every retry. The
++					// full download replaces both.
++					const message = error instanceof Error ? error.message : String(error);
++					emitStatus("patch-failed", `Patched tar does not read: ${message}`, {
++						currentHash,
++						errorMessage: message,
++					});
++					console.error("patched tar does not read", error);
++					break;
++				}
+ 
+ 				for (const [filePath] of patchedFiles) {
+ 					if (
+@@ -528,8 +609,11 @@ const Updater = {
+ 				}
+ 
+ 				const hashFile = patchedFiles.get(hashFilePath);
+-				const hashFileJson = JSON.parse(await hashFile!.text());
+-				const nextHash = hashFileJson.hash;
++				// Unreadable, it has no hash below and the full download follows.
++				const nextHash: string = await hashFile!
++					.text()
++					.then((text) => JSON.parse(text)?.hash)
++					.catch(() => "");
+ 
+ 				if (seenHashes.includes(nextHash)) {
+ 					emitStatus(
+@@ -612,12 +696,12 @@ const Updater = {
  
  				const cacheBuster = Math.random().toString(36).substring(7);
  				const platformPrefix = getPlatformPrefix(
@@ -208,7 +253,65 @@ index 39daf6d341780af8e30c2c50327162863f5977ec..0174d2ce1a9a4fa8ae0fd97367293fc5
  				const prevVersionCompressedTarballPath = join(
  					appDataFolder,
  					"self-extraction",
-@@ -760,7 +827,12 @@ const Updater = {
+@@ -689,6 +773,13 @@ const Updater = {
+ 					emitStatus("error", updateInfo.error, { zstdPath });
+ 					console.error("zig-zstd not found:", zstdPath);
+ 				} else {
++					// Into a name of its own, renamed once whole: zig-zstd writes as
++					// it goes, and a run that failed (a download cut short) or never
++					// finished (the app quit) left part of a tar under the update's
++					// own name, which every later download took as done and every
++					// install then failed to unpack.
++					const partialTarPath = `${latestTarPath}.partial`;
++					rmSync(partialTarPath, { force: true });
+ 					const decompressResult = Bun.spawnSync(
+ 						[
+ 							zstdPath,
+@@ -696,7 +787,7 @@ const Updater = {
+ 							"-i",
+ 							prevVersionCompressedTarballPath,
+ 							"-o",
+-							latestTarPath,
++							partialTarPath,
+ 							"--no-timing",
+ 						],
+ 						{
+@@ -706,6 +797,7 @@ const Updater = {
+ 						},
+ 					);
+ 					if (!decompressResult.success) {
++						rmSync(partialTarPath, { force: true });
+ 						updateInfo.error = `zig-zstd failed with exit code ${decompressResult.exitCode}`;
+ 						emitStatus("error", updateInfo.error, {
+ 							zstdPath,
+@@ -716,6 +808,7 @@ const Updater = {
+ 							zstdPath,
+ 						});
+ 					} else {
++						renameSync(partialTarPath, latestTarPath);
+ 						emitStatus("decompressing", "Decompression complete");
+ 					}
+ 				}
+@@ -731,6 +824,8 @@ const Updater = {
+ 			// check for patch from that tar and apply it, until it matches the latest version
+ 			// as a fallback it should just download and unpack the latest version
+ 			updateInfo.updateReady = true;
++			// What failed on the way (a patch that did not apply) was recovered from.
++			updateInfo.error = "";
+ 			emitStatus(
+ 				"download-complete",
+ 				`Update ready to install (used ${usedPatchPath ? "patch" : "full download"} path)`,
+@@ -741,7 +836,8 @@ const Updater = {
+ 				},
+ 			);
+ 		} else {
+-			updateInfo.error = "Failed to download latest version";
++			// Why it failed (zig-zstd's exit), when that is known.
++			if (!updateInfo.error) updateInfo.error = "Failed to download latest version";
+ 			emitStatus("error", "Failed to download latest version", { latestHash });
+ 		}
+ 
+@@ -760,7 +856,12 @@ const Updater = {
  				mkdirSync(extractionFolder, { recursive: true });
  			}
  
@@ -222,7 +325,37 @@ index 39daf6d341780af8e30c2c50327162863f5977ec..0174d2ce1a9a4fa8ae0fd97367293fc5
  			const latestTarPath = join(extractionFolder, `${latestHash}.tar`);
  
  			let appBundleSubpath: string = "";
-@@ -894,14 +966,7 @@ const Updater = {
+@@ -782,9 +883,26 @@ const Updater = {
+ 					mkdirSync(extractionDir, { recursive: true });
+ 				}
+ 
+-				const latestTarBytes = await Bun.file(latestTarPath).arrayBuffer();
+-				const latestArchive = new Bun.Archive(latestTarBytes);
+-				await latestArchive.extract(extractionDir);
++				try {
++					const latestTarBytes = await Bun.file(latestTarPath).arrayBuffer();
++					const latestArchive = new Bun.Archive(latestTarBytes);
++					await latestArchive.extract(extractionDir);
++				} catch (error) {
++					// The tar goes, with what it unpacked: left in place, every later
++					// download took it as the update again and every install failed
++					// here the same way. The next download fetches a fresh copy.
++					const message = `Failed to extract update: ${error instanceof Error ? error.message : String(error)}`;
++					try {
++						rmSync(latestTarPath, { force: true });
++					} catch (e) {
++						// Best effort, like the cleanup below.
++					}
++					cleanupExtractionFolder(extractionFolder, latestHash);
++					updateInfo.updateReady = false;
++					emitStatus("error", message, { errorMessage: message });
++					console.error("Failed to extract update", error);
++					return;
++				}
+ 
+ 				if (currentOS === "macos") {
+ 					// Find the .app bundle by scanning extracted directory
+@@ -894,14 +1012,7 @@ const Updater = {
  					emitStatus("replacing-app", "Removing old version...");
  
  					if (currentOS === "macos") {
@@ -238,7 +371,7 @@ index 39daf6d341780af8e30c2c50327162863f5977ec..0174d2ce1a9a4fa8ae0fd97367293fc5
  
  						// Remove quarantine extended attributes to prevent "damaged" error
  						// The inner bundle is already signed/notarized, but macOS applies
-@@ -918,14 +983,7 @@ const Updater = {
+@@ -918,14 +1029,7 @@ const Updater = {
  						// On Linux, we now have directory bundles instead of AppImage files
  						// The app is stored in {appDataFolder}/app/
  						const appBundleDir = join(appDataFolder, "app");
@@ -254,6 +387,37 @@ index 39daf6d341780af8e30c2c50327162863f5977ec..0174d2ce1a9a4fa8ae0fd97367293fc5
  
  						// Ensure launcher binary is executable
  						const launcherPath = join(appBundleDir, "bin", "launcher");
+@@ -1071,14 +1175,18 @@ del "%~f0"
+ 					// current process has exited first. The detached shell survives our
+ 					// exit and polls until the process is gone.
+ 					const pid = process.pid;
++					// The shell, sleep and open by their full paths, from /: a terminal
++					// launch can hand the app a PATH without them, and a spawn into a
++					// folder that is gone fails as if the shell were missing.
+ 					// eslint-disable-next-line @typescript-eslint/no-explicit-any
+ 					Bun.spawn(
+ 						[
+-							"sh",
++							"/bin/sh",
+ 							"-c",
+-							`while kill -0 ${pid} 2>/dev/null; do sleep 0.5; done; sleep 1; open "${runningAppBundlePath}"`,
++							`while kill -0 ${pid} 2>/dev/null; do /bin/sleep 0.5; done; /bin/sleep 1; /usr/bin/open "${runningAppBundlePath}"`,
+ 						],
+ 						{
++							cwd: "/",
+ 							detached: true,
+ 							stdio: ["ignore", "ignore", "ignore"],
+ 						} as any,
+@@ -1087,7 +1195,8 @@ del "%~f0"
+ 					// On Linux, launch the launcher binary inside the app directory
+ 					const launcherPath = join(runningAppBundlePath, "bin", "launcher");
+ 					// eslint-disable-next-line @typescript-eslint/no-explicit-any
+-					Bun.spawn(["sh", "-c", `"${launcherPath}" &`], {
++					Bun.spawn(["/bin/sh", "-c", `"${launcherPath}" &`], {
++						cwd: "/",
+ 						detached: true,
+ 					} as any);
+ 				}
 diff --git a/dist/api/bun/preload/.generated/compiled.ts b/dist/api/bun/preload/.generated/compiled.ts
 index 3ab1d7d8de8938ae60823650fd3a29b952a76cb6..e0e841e6a87ce41533c6bdda8d29400aaf478e31 100644
 --- a/dist/api/bun/preload/.generated/compiled.ts

package/src/account/auth-model.ts

@@ -125,13 +125,17 @@ export async function performEmailAuth(mode: AccountMode, email: string, passwor
   } else {
     user = await apiClient.signIn(email, password);
   }
-  if (!user.emailVerified) {
-    await apiClient.sendVerification().catch(logFailure("account-auth", "Verification email request failed"));
-  }
+  if (apiClient.getCurrentUser()?.id !== user.id) throw new Error("Another sign-in replaced this request.");
   const sessionToken = apiClient.getSessionToken();
   if (sessionToken) {
     chatController.adoptSession(sessionToken, user);
   }
+  if (!user.emailVerified) {
+    await apiClient.sendVerification().catch(logFailure("account-auth", "Verification email request failed"));
+  }
+  if (apiClient.getSessionToken() !== sessionToken || apiClient.getCurrentUser()?.id !== user.id) {
+    throw new Error("Another sign-in replaced this request.");
+  }
   identifyResearchUser();
   await chatController.refreshSession().catch(logFailure("account-auth", "Session refresh after email authentication failed"));
   return user;

package/src/api-client/auth.ts

@@ -74,6 +74,7 @@ export class CloudAuthApi {
     username: string,
     name: string,
     password: string,
+    isCurrent: () => boolean = () => true,
   ): Promise<AuthUser> {
     const result = await this.options.request<{ user: AuthUser }>(
       "/auth/sign-up/email",
@@ -81,7 +82,9 @@ export class CloudAuthApi {
         method: "POST",
         body: JSON.stringify({ email, username, name, password }),
       },
+      isCurrent,
     );
+    if (!isCurrent()) throw new Error("Another sign-in replaced this request.");
     this.options.requireCapturedSession(
       "Account created, but Gloom could not save the login session. Please try logging in again.",
     );
@@ -89,14 +92,16 @@ export class CloudAuthApi {
     return result.user;
   }
 
-  async signIn(email: string, password: string): Promise<AuthUser> {
+  async signIn(email: string, password: string, isCurrent: () => boolean = () => true): Promise<AuthUser> {
     const result = await this.options.request<{ user: AuthUser }>(
       "/auth/sign-in/email",
       {
         method: "POST",
         body: JSON.stringify({ email, password }),
       },
+      isCurrent,
     );
+    if (!isCurrent()) throw new Error("Another sign-in replaced this request.");
     this.options.requireCapturedSession(
       "Logged in, but Gloom could not save the login session. Please try again.",
     );
@@ -127,11 +132,11 @@ export class CloudAuthApi {
     });
   }
 
-  async signOut(): Promise<void> {
+  async signOut(isCurrent: () => boolean = () => true): Promise<void> {
     try {
-      await this.options.request("/auth/sign-out", { method: "POST" });
+      await this.options.request("/auth/sign-out", { method: "POST" }, isCurrent);
     } finally {
-      this.options.setSessionToken(null);
+      if (isCurrent()) this.options.setSessionToken(null);
     }
   }
 

package/src/api-client/catalysts.ts

@@ -1,6 +1,7 @@
 type QuoteMatchMode = "exact" | "whitespace" | "normalized"
 
-export const CATALYST_TYPES = ["regulatory", "clinical", "litigation", "antitrust", "recall", "sanctions", "export_control", "tariff", "rulemaking", "approval", "advisory", "pdufa"] as const
+/** Regulator events, then the ones a company or its exchange dates itself (results, meetings, deals). */
+export const CATALYST_TYPES = ["regulatory", "clinical", "litigation", "antitrust", "recall", "sanctions", "export_control", "tariff", "rulemaking", "approval", "advisory", "pdufa", "results", "shareholder_meeting", "merger_vote", "deal_closing", "investor_day"] as const
 export type CatalystType = (typeof CATALYST_TYPES)[number]
 type DatePrecision = "day" | "month" | "year"
 interface CatalystIdentifiers {

package/src/api-client/cot.ts

@@ -1,5 +1,9 @@
-export type CotFamily = "legacy" | "disaggregated"
+/** The CFTC report: Legacy, Disaggregated, or Traders in Financial Futures (TFF). */
+export type CotFamily = "legacy" | "disaggregated" | "tff"
 export type CotClass = "noncommercial" | "commercial" | "producer" | "swap" | "managed-money" | "other-reportable" | "nonreportable"
+  | "dealer" | "asset-manager" | "leveraged-funds"
+/** Futures positions alone, or futures and options combined (options delta-adjusted, as the CFTC reports them). */
+export type CotPositions = "futures-only" | "combined"
 interface CotPosition { long: number | null; short: number | null; spreading: number | null }
 interface CotPercentile {
   value: number | null
@@ -34,7 +38,7 @@ interface CotMarket {
 }
 export interface CotPayloadBase {
   source: "CFTC"
-  scope: "futures-only"
+  scope: CotPositions
   reportFamily: CotFamily
   generatedAt: string
   /** Tuesday position observation date, distinct from publication/download time. */

package/src/api-client/credit-documents.ts

@@ -26,7 +26,10 @@ export interface CreditFact {
   status: "active" | "superseded" | "pending";
   supersedesId: string | null;
 }
+/** The party an instrument, covenant or wall bucket is of, when the filing names one other than the issuer. */
+export interface CreditObligor { name: string; role?: string | null }
 export interface CreditInstrument {
+  obligor?: CreditObligor | null;
   lifecycle?: string | null;
   id: string;
   key: string;
@@ -41,6 +44,7 @@ export interface CreditInstrument {
   history?: CreditFact[];
 }
 export interface CreditHeadroom {
+  obligor?: CreditObligor | null;
   id: string;
   instrumentId: string;
   instrumentName: string;
@@ -57,12 +61,14 @@ export interface CreditHeadroom {
   evidenceIds: string[];
 }
 export interface CreditMaturityBucket {
+  obligor?: CreditObligor | null;
   year: number;
   currency: string;
   principal: number;
   instruments: Array<{ id: string; name: string; principal: number; evidenceIds: string[] }>;
 }
 interface CreditControlExposure {
+  obligor?: CreditObligor | null;
   instrumentId: string;
   instrumentName: string;
   currency: string | null;

package/src/api-client/data.ts

@@ -7,7 +7,7 @@ import { companyDisclosurePath } from "./company-kpis";
 import { cloudExchangeAnnouncementsPath } from "./exchange-announcements";
 import type { PowerBoard, PowerDetail, PowerFilter, PowerHistory } from "./power";
 import type { PerpBoardPayload, PerpEquitiesPayload, PerpEquityListing, PerpHistoryPayload, PerpRankingsPayload, PerpBoardQuery, PerpHistoryQuery,
-  PerpMarketPayload } from "./perps";
+  PerpMarketPayload, PerpLiquidationsPayload, PerpDepthPayload } from "./perps";
 import type { ExposureRequest, ExposurePayload, ExposureScenario } from "./exposure";
 import type { SupplyChainPayload, SupplyOptions } from "./supply-chain";
 import { supplyGraphQuery, type GraphOptions, type GraphPayload } from "./supply-chain-graph";
@@ -44,13 +44,14 @@ import type { BeneficialOwnersPayload, CloudBeneficialOwnersParams } from "./ben
 import type { CloudInsiderSignalsParams, InsiderSignalsPayload } from "./insider-signals";
 import type { SocialMentionDayPosts, SocialMentionsPayload, SocialMentionsRange } from "./social-mentions";
 import type { FuturesContractTermsPayload, FuturesCurveAsOfPayload, FuturesCurvePayload } from "./futures-curve";
-import type { CotBoardPayload, CotContractPayload, CotFamily, CotClass } from "./cot";
+import type { CotBoardPayload, CotContractPayload, CotFamily, CotClass, CotPositions } from "./cot";
 import type { DoeBoardPayload, DoePricesPayload } from "./doe";
 import type { JodiBoardPayload, PsdBoardPayload } from "./commodity-balances";
 import type { CarbonBoard, CarbonHistory, EuropePowerBoard, EuropePowerHistory, GasStorageBoard, GasStorageHistory, GasStorageSeasonal } from "./europe-energy";
 import type { GpuBoardPayload, GpuEventsPayload, GpuHistoryPayload, GpuHistoryQuery } from "./gpu";
 import type { CpiBoardPayload } from "./cpi";
 import type { TapeRange, TapeSnapshot } from "./tape";
+import { LIVE_SCAN_PATH, type LiveScanPayload, type LiveScanWireDefinition } from "./live-scan";
 import { signalWithTimeout } from "../utils/async-deadline";
 import { ApiRequestError } from "./errors";
 import type { ExchangeRateSnapshot } from "../types/exchange-rate";
@@ -179,6 +180,7 @@ import type {
   CloudWorldVenueMapPayload,
   CloudYieldPointPayload,
   ScannerFlowHistoryPage,
+  ScannerFlowSession,
 } from "./types";
 import type { CloudApiRequest } from "./request";
 
@@ -253,6 +255,10 @@ export class CloudDataApi {
     return this.request<import("./fund-facts").FundFactsPayload>(`/cloud/fund-facts/${encodeURIComponent(ticker)}`, options.signal ? { signal: options.signal } : undefined);
   }
 
+  getFundBreadth(fund: string) {
+    return this.request<import("./members").FundBreadthPayload>(`/cloud/members/${encodeURIComponent(fund)}/breadth`);
+  }
+
   getFundChanges(fund: string) {
     return this.request<import("./members").FundChangesPayload>(`/cloud/members/${encodeURIComponent(fund)}/changes`);
   }
@@ -589,12 +595,15 @@ export class CloudDataApi {
     return this.request<CloudShillerPayload>(cloudShillerPath());
   }
 
-  async getCloudCotBoard(report: CotFamily, traderClass: CotClass): Promise<CotBoardPayload> {
-    return this.request<CotBoardPayload>(`/cloud/cot/board?${new URLSearchParams({ report, traderClass })}`);
+  /** Futures-only positions unless `positions` asks for futures and options combined; the default request is unchanged. */
+  async getCloudCotBoard(report: CotFamily, traderClass: CotClass, positions: CotPositions = "futures-only"): Promise<CotBoardPayload> {
+    const query = new URLSearchParams({ report, traderClass, ...(positions === "combined" ? { scope: positions } : {}) });
+    return this.request<CotBoardPayload>(`/cloud/cot/board?${query}`);
   }
 
-  async getCloudCotContract(code: string, report: CotFamily): Promise<CotContractPayload> {
-    return this.request<CotContractPayload>(`/cloud/cot/contracts/${encodeURIComponent(code)}?${new URLSearchParams({ report })}`);
+  async getCloudCotContract(code: string, report: CotFamily, positions: CotPositions = "futures-only"): Promise<CotContractPayload> {
+    const query = new URLSearchParams({ report, ...(positions === "combined" ? { scope: positions } : {}) });
+    return this.request<CotContractPayload>(`/cloud/cot/contracts/${encodeURIComponent(code)}?${query}`);
   }
 
   /** Geo layers (the map's layers, entities and series); one prefix-scoped method, like EQS. */
@@ -687,6 +696,8 @@ export class CloudDataApi {
   }
   async getCloudPerpsRankings(): Promise<PerpRankingsPayload> { return this.request("/cloud/perps/rankings"); }
   async getCloudPerpsCompare(baseAsset: string): Promise<PerpBoardPayload> { return this.request(`/cloud/perps/compare?${new URLSearchParams({ baseAsset })}`); }
+  async getCloudPerpsLiquidations(baseAsset: string): Promise<PerpLiquidationsPayload> { return this.request(`/cloud/perps/liquidations?${new URLSearchParams({ baseAsset })}`); }
+  async getCloudPerpsDepth(baseAsset: string): Promise<PerpDepthPayload> { return this.request(`/cloud/perps/depth?${new URLSearchParams({ baseAsset })}`); }
   async getCloudPerpsEquity(symbol: string, exchange?: string): Promise<PerpBoardPayload> {
     const query = exchange === undefined ? "" : `?${new URLSearchParams({ identity: "listing", exchange })}`;
     return this.request(`/cloud/perps/equity/${encodeURIComponent(symbol)}${query}`);
@@ -897,11 +908,25 @@ export class CloudDataApi {
     return this.request<CentralBankRatesPayload>("/cloud/econ/central-bank-rates", { signal: AbortSignal.timeout(45_000) });
   }
 
+  /** A live scan's matches against Gloom Cloud's newest market-wide snapshot for this account's tier. */
+  getLiveScan(definition: LiveScanWireDefinition, signal?: AbortSignal) {
+    return this.request<LiveScanPayload>(LIVE_SCAN_PATH, {
+      method: "POST",
+      body: JSON.stringify({ scan: definition }),
+      signal: signalWithTimeout(signal, 20_000),
+    });
+  }
+
   /** Recorded FLOW prints older than the live tape (Pro); the plugin builds `search`. */
   getScannerFlowHistory(search: string, signal?: AbortSignal) {
     return this.request<ScannerFlowHistoryPage>(`/market/scanner/flow/history?${search}`, { signal });
   }
 
+  /** The latest session's recorded FLOW prints summed by side, by time and by strike (Pro); the plugin builds `search`. */
+  getScannerFlowSession(search: string, signal?: AbortSignal) {
+    return this.request<ScannerFlowSession>(`/market/scanner/flow/session?${search}`, { signal });
+  }
+
   getMobileAlertHistory<T>(offset = 0) {
     return this.request<T>(`/mobile/alerts/history?offset=${offset}`);
   }

package/src/api-client/equity-screener.ts

@@ -2,6 +2,27 @@
 export const KPI_FIELDS = ["kpiArr", "kpiNrrPercent", "kpiRpo", "kpiCrpo", "kpiSubscribers", "kpiDau", "kpiMau", "kpiGmv", "kpiTakeRatePercent", "kpiSameStoreSalesPercent", "kpiStores", "kpiBacklog", "kpiBookToBill", "kpiNimPercent", "kpiCet1Percent", "kpiCombinedRatioPercent", "kpiOccupancyPercent", "kpiLoadFactorPercent", "guideRevenueChangePercent", "guideEpsChangePercent"] as const;
 /** Payout ratio and dividend growth; listed only when asked (`include=dividends`), and omitted by a server from before them. */
 export const DIVIDEND_FIELDS = ["payoutRatioPercent", "dividendGrowth1YPercent", "dividendGrowth3YPercent"] as const;
+/**
+ * Technical readings of the stored daily bars at the last completed session; listed only when asked
+ * (`include=technical`), and omitted by a server from before them.
+ */
+export const TECHNICAL_FIELDS = [
+  "rsi14",
+  "priceVsSma20Percent", "priceVsSma50Percent", "priceVsSma200Percent",
+  "macdBullishCrossDays", "macdBearishCrossDays", "goldenCrossDays", "deathCrossDays",
+  "newHigh20dDays", "newLow20dDays", "newHigh52wDays", "newLow52wDays",
+  "bollingerWidthPercentile",
+] as const;
+/**
+ * IV30, its 52-week percentile and its moves in volatility points, and 20-session realized volatility with its
+ * 52-week rank; listed only when asked (`include=option-volatility`), and omitted by a server from before them.
+ */
+export const OPTION_VOLATILITY_FIELDS = ["iv30Percent", "ivPercentile", "iv30Change1d", "iv30Change5d", "hv20Percent", "hvRank"] as const;
+/**
+ * Shares outstanding, float, short % of float and 13F institutional ownership, each with the day it describes;
+ * listed only when asked (`include=ownership`), and omitted by a server from before them.
+ */
+export const OWNERSHIP_FIELDS = ["sharesOutstanding", "floatShares", "shortPercentOfFloat", "institutionalOwnershipPercent"] as const;
 export const NUMERIC_FIELDS = [
   ...KPI_FIELDS,
   "price",
@@ -42,6 +63,7 @@ export const NUMERIC_FIELDS = [
   "fromHigh52WPercent",
   "beta",
   "atrPercent",
+  ...TECHNICAL_FIELDS,
   "priceToBook",
   "evToEbitda",
   "roePercent",
@@ -49,6 +71,8 @@ export const NUMERIC_FIELDS = [
   "analystUpsidePercent",
   "ivRank",
   "ivToHv",
+  ...OPTION_VOLATILITY_FIELDS,
+  ...OWNERSHIP_FIELDS,
   "hiringOpenRoles", "hiringNetAddsWeek", "hiringRemotePercent", "hiringZScore",
   "appAttentionScore", "appRankVelocity7d", "appRatingDrift7d", "appRatingCountGrowth7d",
 ] as const;

package/src/api-client/fund-facts.ts

@@ -6,7 +6,15 @@ interface FundFact<T> {
   url?: string;
 }
 
-type FundStructure = "registered" | "trust";
+/**
+ * `registered`: a 1940 Act fund (an ETF or UIT). `trust`: an exchange-traded
+ * trust or pool outside the 1940 Act. `closed-end`: a registered closed-end
+ * fund (ECC, OXLC, PDI), found filing N-CEN, N-CSR, N-PORT or N-2. `bdc`: a
+ * business development company (ARCC, MAIN), found filing N-2 or its N-54A
+ * election beside its 10-Q and 10-K. Either's shares trade at their own
+ * premium or discount to NAV. Servers before them say null.
+ */
+export type FundStructure = "registered" | "trust" | "closed-end" | "bdc";
 type ExpenseRatioKind = "net" | "gross" | "sponsor-fee";
 /**
  * A bond fund as its sponsor classes it: `municipal` when its interest is
@@ -67,6 +75,22 @@ export interface FundMetalHoldings {
   stale: boolean;
 }
 
+/**
+ * The 1M change in an ETF's shares outstanding (creations less redemptions),
+ * from the sponsor's count on `from` to its count on `asOf`. `value` puts a
+ * dollar figure on it, each day's change at that day's NAV; null when a day
+ * in between had none.
+ */
+export interface FundFlows {
+  period: "1M";
+  shares: number;
+  value: number | null;
+  from: string;
+  asOf: string;
+  source: string;
+  url?: string;
+}
+
 /**
  * `not-collected-yet`: a source Gloom reads covers the fund, but it has no
  * figures yet. `not-published`: no source Gloom reads covers it. Servers
@@ -86,10 +110,23 @@ export interface FundFactsPayload {
   structure: FundStructure | null;
   /** `document`: read from the fund's prospectus filed with the SEC on `asOf`, not from its sponsor. */
   expenseRatio: (FundFact<number> & { kind: ExpenseRatioKind; document?: "prospectus" }) | null;
-  nav: FundFact<number> | null;
+  /**
+   * `period`: a `day`'s NAV, or a `month-end`'s (a closed-end fund's monthly
+   * estimate, or the NAV per share its filing states), which is its normal
+   * cadence rather than a lag. `estimate`: the range the sponsor published,
+   * whose midpoint `value` is. Servers before them leave both out.
+   */
+  nav: (FundFact<number> & { period?: "day" | "month-end"; estimate?: { low: number; high: number } }) | null;
+  /** Why a covered fund has no NAV, in one line. Absent when it has one, and from servers before it. */
+  navReason?: string;
+  /** Dated by its own session: a month end on a weekend is priced at the Friday before it. */
   closingPrice: FundFact<number> | null;
-  /** `published` by the sponsor, or `computed` from the closing price against the NAV. */
-  premiumDiscount: (FundFact<number> & { basis: "published" | "computed" }) | null;
+  /**
+   * `published` by the sponsor, or `computed` from the closing price against
+   * the NAV, dated by the NAV. `estimate`: computed against the midpoint of a
+   * NAV estimate, so an estimate too; absent from servers before it.
+   */
+  premiumDiscount: (FundFact<number> & { basis: "published" | "computed"; estimate?: true }) | null;
   /**
    * `period`: a `day`'s figure, or the last `month-end`'s (Vanguard and ARK
    * ETFs, N-PORT), which is not today's. `document`: the fund's N-PORT report
@@ -105,6 +142,10 @@ export interface FundFactsPayload {
   bond?: FundBondFacts | null;
   /** A metal trust's metal in trust; absent for any other fund, until its first read, and from servers before it. */
   metalHoldings?: FundMetalHoldings | null;
+  /** Shares outstanding as the sponsor's file states them, dated. Servers before it leave it out. */
+  sharesOutstanding?: FundFact<number> | null;
+  /** The 1M change in shares outstanding; null until a month of counts is kept. Servers before it leave it out. */
+  flows?: FundFlows | null;
   /** The newest NAV is older than a few US trading days: every figure is older than it looks. */
   stale: boolean;
   fetchedAt: string | null;