openbroker 1.9.2 → 1.9.4

package/CHANGELOG.md

@@ -2,6 +2,27 @@
 
 All notable changes to Open Broker will be documented in this file.
 
+## [1.9.3] - 2026-06-23
+
+### Changed
+- Made automation reads WebSocket-first for mids, asset contexts, account state, spot balances, per-dex open orders, and lazily subscribed L2 books, with transparent REST fallback.
+- Activated the existing all-dex context, all-dex clearinghouse, and spot-state subscriptions before strategy `onStart` hooks.
+- Decoupled `api.every()` from REST snapshot polling. Short `--poll` values now control the disconnected fallback cadence; connected runtimes reconcile over REST at most once per minute.
+- Cached and request-de-duplicated the REST-only predicted-funding feed for 60 seconds, retaining the last good value through transient rate limits.
+- Limited automation startup metadata to the native universe and deferred HIP-3 metadata until a prefixed market is actually referenced.
+
+### Added
+- Added realtime-cache tests covering live market/account reads, lazy order-book seeding, and disconnected REST fallback.
+
+## [1.9.2] - 2026-06-22
+
+### Breaking
+- Every automation must now export a validated `guardrails` policy. Monitoring scripts use `{ mode: 'read-only' }`; trading scripts must declare explicit market, notional, exposure, leverage, margin, open-order, rate, slippage, market-order, and account-wide-cancel limits.
+
+### Added
+- Added runtime guardrail enforcement around every supported `api.client` write method, including bulk and HIP-4 outcome methods that were previously missing from dry-run and audit interception.
+- Added fail-closed account preflight checks, explicit leverage enforcement for risk-increasing perp orders, rolling order-rate limits, audit records for blocked writes, and unit coverage for schema and runtime behavior.
+
 ## [1.9.1] - 2026-06-22
 
 ### Changed

package/README.md

@@ -764,6 +764,22 @@ openbroker approve-builder --max-fee "0.05%"  # Custom max fee
 | `--builder` | Custom builder address (advanced) | Open Broker |
 | `--verbose` | Show debug output | — |
 
+## Automation Runtime
+
+Run audited TypeScript automations with required runtime guardrails:
+
+```bash
+openbroker auto run ./my-automation.ts --id my-auto --set coin=HYPE
+```
+
+WebSocket mode is enabled by default. Before an automation's `onStart` hooks run, OpenBroker subscribes to live mids, all-dex asset contexts, all-dex account state, spot balances, per-dex open-order snapshots, order updates, fills, and user events. L2 books are subscribed lazily per requested coin.
+
+Existing strategies continue to use `api.client`. Inside the automation runtime, `getAllMids()`, `getMetaAndAssetCtxs()`, `getUserState()`, `getUserStateAll()`, `getSpotBalances()`, `getOpenOrders()`, and `getL2Book()` read the live WebSocket cache first and automatically fall back to REST when the socket is unavailable or a feed has not seeded. `getPredictedFundings()` has no socket equivalent, so it is request-de-duplicated, cached for 60 seconds, and serves the last successful value through transient rate limits.
+
+`api.every(intervalMs, handler)` uses an independent scheduler and does not trigger a REST snapshot. `--poll` controls the disconnected REST fallback cadence; while WebSocket is healthy, full REST reconciliation runs no more than once per minute even when an older launch command passes a shorter value such as `--poll 5000`. Use `--no-ws` only when you intentionally need REST-only behavior.
+
+Every automation must export `guardrails` plus its default factory. See [SKILL.md](./SKILL.md) for the complete schema, WebSocket event model, and runtime enforcement rules.
+
 ## OpenClaw Plugin
 
 OpenBroker ships as an [OpenClaw](https://openclaw.ai) plugin. When installed via OpenClaw, it registers structured agent tools and a background position watcher — no Bash wrappers needed.

package/SKILL.md

@@ -213,13 +213,61 @@ Run flags:
 |---|---|
 | `--set key=value` | Repeatable typed config values |
 | `--id <name>` | Stable automation ID |
-| `--poll <ms>` | Poll interval, minimum 1000 ms |
+| `--poll <ms>` | REST fallback interval, minimum 1000 ms. While WebSocket is healthy, REST reconciliation is capped at once per minute. |
 | `--dry` | Intercept write methods |
 | `--no-ws` | Disable WebSocket and rely on REST polling |
 | `--allow-sleep` | Do not request OS sleep inhibition |
 
 Bundled examples are **references, not production strategies**. Read them for API patterns, then write a purpose-built script with explicit sizing, exit logic, and failure behavior.
 
+### Required guardrail contract
+
+Every automation module must export both `guardrails` and a default factory. Validation runs before the factory or any `onStart` hook. A missing, malformed, or internally inconsistent policy prevents startup.
+
+Use a read-only policy for monitoring and alerting:
+
+```ts
+import type { AutomationAPI, AutomationGuardrails } from 'openbroker';
+
+export const guardrails: AutomationGuardrails = { mode: 'read-only' };
+
+export default function monitor(api: AutomationAPI) {
+  api.on('price_change', ({ coin, changePct }) => api.log.info(`${coin}: ${changePct}%`));
+}
+```
+
+Read-only mode blocks every client write. Trading policies must declare every field below:
+
+```ts
+import type { AutomationAPI, AutomationGuardrails } from 'openbroker';
+
+export const guardrails: AutomationGuardrails = {
+  mode: 'trading',
+  allowedMarkets: ['ETH'],       // ETH, xyz:CL, spot:HYPE, or #<outcome encoding>
+  maxOrderUsd: 500,
+  maxPositionUsd: 1_000,
+  maxTotalExposureUsd: 2_500,
+  maxLeverage: 2,
+  maxMarginUsedPct: 50,
+  maxOpenOrders: 10,
+  maxOrdersPerMinute: 6,
+  maxSlippageBps: 50,
+  allowMarketOrders: true,
+  allowAccountWideCancel: false,
+};
+
+export default function strategy(api: AutomationAPI) {
+  // Risk-increasing perp orders must pass leverage explicitly.
+  api.onStart(() => api.client.limitOrder('ETH', true, 0.1, 2_000, 'Gtc', false, 2));
+}
+```
+
+When allowed markets depend on `--set` values, export a factory such as `guardrails({ config }) { ... }`; the returned object is still strictly validated. Wildcard markets and unknown policy fields are rejected.
+
+All `api.client` write methods cross the runtime policy proxy in live and `--dry` modes. Before risk-increasing orders, the runtime refreshes account positions, spot balances, prices, margin, and open orders; calculates projected per-market and total exposure; enforces leverage, margin, order-count, rate, market-order, and slippage limits; then either submits or throws `GuardrailViolation`. Blocks are logged and written to the audit trail as `guardrail_block`. Cancellations and genuinely risk-reducing orders remain available when exposure or margin is already above its cap, but market allowlists and explicit account-wide-cancel policy still apply. Administrative writes such as `approveBuilderFee` are always blocked inside automations.
+
+Treat `api.client` as the only supported execution path. Automation files are trusted TypeScript running in-process, not an OS sandbox; direct exchange SDK imports would bypass the runtime boundary and must not be generated or accepted during review.
+
 ### Automation API essentials
 
 - `api.client` — full Hyperliquid client.
@@ -227,9 +275,27 @@ Bundled examples are **references, not production strategies**. Read them for AP
 - `api.state` — persisted state; survives restarts.
 - `api.audit.record(...)` / `api.audit.metric(...)` — durable observability.
 - `api.dryRun` — whether writes are intercepted.
+- `api.guardrails` — validated policy currently enforced by the runtime.
 
 Core events include `tick`, `price_change`, `funding_update`, `position_opened`, `position_closed`, `position_changed`, `pnl_threshold`, `margin_warning`, `order_filled`, `order_update`, and `liquidation`.
 
+### WebSocket-first runtime
+
+WebSocket mode is enabled by default. Before `onStart`, the runtime subscribes to:
+
+- `allMids` for instant perp and spot prices;
+- `allDexsAssetCtxs` for funding, mark, oracle, open-interest, and premium changes;
+- `allDexsClearinghouseState` plus `spotState` for positions, margin, collateral, and balances;
+- `openOrders` for the native dex and every active HIP-3 dex so guardrail order-count checks stay live;
+- `orderUpdates`, `userFills`, and `userEvents` for order lifecycle, fills, funding payments, and liquidations;
+- `l2Book` lazily, the first time an automation requests a book for a coin.
+
+The normal `api.client` read methods are WebSocket-aware inside automations. `getAllMids()`, `getMetaAndAssetCtxs()`, `getUserState()`, `getUserStateAll()`, `getSpotBalances()`, `getOpenOrders()`, and `getL2Book()` return fresh socket data when available and transparently fall back to REST when the socket is disconnected, a subscription has not seeded yet, or live market data is stale. Automation code should keep using `api.client`; do not import a second exchange SDK or create a second socket.
+
+`api.every(intervalMs, handler)` runs on an independent scheduler and no longer causes a REST snapshot. `--poll` controls the disconnected fallback cadence. While the socket is healthy, the runtime performs a REST reconciliation no more than once per minute, even when an older launch command passes `--poll 5000`. Predicted cross-venue funding has no equivalent socket feed, so `getPredictedFundings()` is de-duplicated, cached for 60 seconds, and serves the last good value if a refresh is temporarily rate-limited.
+
+Use `--no-ws` only for debugging or networks that cannot maintain WebSockets. In that mode, `--poll` is the active REST cadence and event latency follows it.
+
 ### Monitoring and dashboard
 
 `openbroker-monitoring` is optional but useful for long-running automations, live debugging, and post-run inspection.
@@ -251,7 +317,7 @@ These matter more than boilerplate:
 
 1. **Model the strategy as a state machine.** Persist flags, streaks, targets, and recovery state with `api.state`; handlers can fire repeatedly and processes can restart.
 2. **Use hysteresis, not one-print decisions.** Confirmation loops, separate enter/exit thresholds, and debounce logic prevent churn from noisy funding or tiny price moves.
-3. **Use the freshest correct signal.** For funding strategies, prefer `getPredictedFundings()` when available; if you fall back to instantaneous funding from metadata, ensure the metadata cache is refreshed so the signal does not freeze after startup.
+3. **Use the freshest correct signal.** Instantaneous funding and prices are WebSocket-backed by default. Prefer `getPredictedFundings()` for cross-venue forecasts; the runtime refreshes that REST-only signal at most once per minute and retains the last good value through transient rate limits.
 4. **Price the flip, not just the signal.** Before closing and later reopening a carry, compare expected hold cost with round-trip trading cost. The HYPE carry automation counts maker fees across both legs plus builder fees before deciding whether a mildly negative funding window is worth exiting.
 5. **Respect settlement timing.** If the current predicted funding is still positive, a close right before hourly settlement can be economically wrong even when the broader signal weakened. Add a settlement-proximity guard when the strategy depends on funding capture.
 6. **Sequence multi-leg hedges deliberately.** For spot-long / perp-short carry, build spot first, then short only up to spot-backed exposure; unwind spot first, then close the short reduce-only. Recover accidental one-sided exposure explicitly instead of pretending it cannot happen.
@@ -263,7 +329,7 @@ These matter more than boilerplate:
 Additional practical caveats:
 
 - Positive-funding carry and negative-funding carry are not automatically symmetric. If the hedge requires short spot and the client/runtime cannot express that safely, do not invent an unhedged mirror trade.
-- `funding_update` fires for many assets every poll; filter by coin early.
+- `funding_update` is emitted from changed WebSocket asset contexts and may cover many assets; filter by coin early.
 - Dust matters: if residual size falls below exchange precision or `minTradeUsd`, stop chasing it.
 - `ALO` / post-only orders can be rejected when they would cross; treat that as an execution branch, not a surprise.
 - Naked directional positions usually need explicit TP/SL or equivalent risk logic. Hedged multi-leg strategies need strategy-specific exits instead of cargo-cult TP/SL rules.

package/dist/auto/cli.js

@@ -29,7 +29,7 @@ Options (for run):
   --dry              Intercept write methods (no real trades)
   --verbose          Show debug output
   --id <name>        Custom automation ID (default: filename)
-  --poll <ms>        Poll interval in milliseconds (default: 10000)
+  --poll <ms>        REST fallback interval (default: 30000 with WS, 10000 with --no-ws)
   --no-ws            Disable WebSocket; fall back to REST-only polling
   --allow-sleep      Do not request OS idle-sleep inhibition for this run
 
@@ -47,6 +47,8 @@ Scripts are loaded from:
   3. Bundled examples (via --example)
 
 Writing an automation:
+  export const guardrails = { mode: 'read-only' };
+
   export default function(api) {
     api.on('price_change', async ({ coin, changePct }) => {
       api.log.info(\`\${coin} moved \${changePct.toFixed(2)}%\`);
@@ -187,6 +189,7 @@ function listCommand() {
     if (automations.length === 0 && examples.length === 0) {
         console.log('No automations found in ~/.openbroker/automations/');
         console.log('\nCreate a .ts file there with:');
+        console.log("  export const guardrails = { mode: 'read-only' };");
         console.log('  export default function(api) { ... }');
         console.log('\nOr run a bundled example: openbroker auto examples');
         return;

package/dist/auto/examples/dca.d.ts

@@ -1,4 +1,5 @@
-import type { AutomationAPI, AutomationConfig } from '../types.js';
+import type { AutomationAPI, AutomationConfig, AutomationGuardrailContext, AutomationGuardrails } from '../types.js';
 export declare const config: AutomationConfig;
+export declare function guardrails({ config: values }: AutomationGuardrailContext): AutomationGuardrails;
 export default function dca(api: AutomationAPI): void;
 //# sourceMappingURL=dca.d.ts.map

package/dist/auto/examples/dca.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dca.d.ts","sourceRoot":"","sources":["../../../scripts/auto/examples/dca.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEnE,eAAO,MAAM,MAAM,EAAE,gBAQpB,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,GAAG,CAAC,GAAG,EAAE,aAAa,QAyD7C"}
+{"version":3,"file":"dca.d.ts","sourceRoot":"","sources":["../../../scripts/auto/examples/dca.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAErH,eAAO,MAAM,MAAM,EAAE,gBAQpB,CAAC;AAEF,wBAAgB,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,0BAA0B,GAAG,oBAAoB,CAiB/F;AAED,MAAM,CAAC,OAAO,UAAU,GAAG,CAAC,GAAG,EAAE,aAAa,QAyD7C"}

package/dist/auto/examples/dca.js

@@ -8,6 +8,24 @@ export const config = {
         count: { type: 'number', description: 'Total number of purchases', default: 24 },
     },
 };
+export function guardrails({ config: values }) {
+    const amount = Number(values.amount ?? 100);
+    const count = Number(values.count ?? 24);
+    return {
+        mode: 'trading',
+        allowedMarkets: [String(values.coin ?? 'HYPE')],
+        maxOrderUsd: amount * 1.1,
+        maxPositionUsd: amount * count * 1.1,
+        maxTotalExposureUsd: amount * count * 1.1,
+        maxLeverage: 1,
+        maxMarginUsedPct: 50,
+        maxOpenOrders: 5,
+        maxOrdersPerMinute: 5,
+        maxSlippageBps: 50,
+        allowMarketOrders: true,
+        allowAccountWideCancel: false,
+    };
+}
 export default function dca(api) {
     const COIN = api.state.get('coin', 'HYPE');
     const AMOUNT_USD = api.state.get('amount', 100);
@@ -33,7 +51,7 @@ export default function dca(api) {
         }
         const size = AMOUNT_USD / price;
         api.log.info(`[${purchased + 1}/${MAX_PURCHASES}] Buying ~$${AMOUNT_USD} of ${COIN} @ $${price.toFixed(2)}`);
-        const response = await api.client.marketOrder(COIN, true, size);
+        const response = await api.client.marketOrder(COIN, true, size, undefined, 1);
         if (response.status === 'ok' && response.response && typeof response.response === 'object') {
             const status = response.response.data.statuses[0];
             if (status?.filled) {

package/dist/auto/examples/funding-arb.d.ts

@@ -1,4 +1,5 @@
-import type { AutomationAPI, AutomationConfig } from '../types.js';
+import type { AutomationAPI, AutomationConfig, AutomationGuardrailContext, AutomationGuardrails } from '../types.js';
 export declare const config: AutomationConfig;
+export declare function guardrails({ config: values }: AutomationGuardrailContext): AutomationGuardrails;
 export default function fundingArb(api: AutomationAPI): void;
 //# sourceMappingURL=funding-arb.d.ts.map

package/dist/auto/examples/funding-arb.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"funding-arb.d.ts","sourceRoot":"","sources":["../../../scripts/auto/examples/funding-arb.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEnE,eAAO,MAAM,MAAM,EAAE,gBASpB,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,UAAU,CAAC,GAAG,EAAE,aAAa,QAkFpD"}
+{"version":3,"file":"funding-arb.d.ts","sourceRoot":"","sources":["../../../scripts/auto/examples/funding-arb.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAErH,eAAO,MAAM,MAAM,EAAE,gBASpB,CAAC;AAEF,wBAAgB,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,0BAA0B,GAAG,oBAAoB,CAgB/F;AAED,MAAM,CAAC,OAAO,UAAU,UAAU,CAAC,GAAG,EAAE,aAAa,QAkFpD"}

package/dist/auto/examples/funding-arb.js

@@ -9,6 +9,23 @@ export const config = {
         closeAt: { type: 'number', description: 'Close when funding drops below this %', default: 5 },
     },
 };
+export function guardrails({ config: values }) {
+    const sizeUsd = Number(values.sizeUsd ?? 5000);
+    return {
+        mode: 'trading',
+        allowedMarkets: [String(values.coin ?? 'HYPE')],
+        maxOrderUsd: sizeUsd * 1.1,
+        maxPositionUsd: sizeUsd * 1.1,
+        maxTotalExposureUsd: sizeUsd * 1.1,
+        maxLeverage: 1,
+        maxMarginUsedPct: 50,
+        maxOpenOrders: 5,
+        maxOrdersPerMinute: 4,
+        maxSlippageBps: 50,
+        allowMarketOrders: true,
+        allowAccountWideCancel: false,
+    };
+}
 export default function fundingArb(api) {
     const COIN = api.state.get('coin', 'HYPE');
     const SIZE_USD = api.state.get('sizeUsd', 5000);
@@ -38,7 +55,7 @@ export default function fundingArb(api) {
             if (shouldClose) {
                 api.log.info(`Funding dropped to ${annualizedPct.toFixed(2)}% (below ${CLOSE_AT}%), closing ${positionSide}`);
                 const closeIsBuy = positionSide === 'short';
-                await api.client.marketOrder(coin, closeIsBuy, positionSize);
+                await api.client.marketOrder(coin, closeIsBuy, positionSize, undefined, 1);
                 inPosition = false;
                 api.state.set('inPosition', false);
                 api.log.info(`Position closed. Funding collected: ~$${totalFunding.toFixed(2)}`);
@@ -56,7 +73,7 @@ export default function fundingArb(api) {
             const price = parseFloat(mids[coin]);
             const size = SIZE_USD / price;
             api.log.info(`Funding at ${annualizedPct.toFixed(2)}% — opening ${side} ${size.toFixed(6)} ${coin}`);
-            const response = await api.client.marketOrder(coin, !shouldShort, size);
+            const response = await api.client.marketOrder(coin, !shouldShort, size, undefined, 1);
             if (response.status === 'ok' && response.response && typeof response.response === 'object') {
                 const status = response.response.data.statuses[0];
                 if (status?.filled) {

package/dist/auto/examples/grid.d.ts

@@ -1,4 +1,5 @@
-import type { AutomationAPI, AutomationConfig } from '../types.js';
+import type { AutomationAPI, AutomationConfig, AutomationGuardrailContext, AutomationGuardrails } from '../types.js';
 export declare const config: AutomationConfig;
+export declare function guardrails({ config: values }: AutomationGuardrailContext): AutomationGuardrails;
 export default function grid(api: AutomationAPI): void;
 //# sourceMappingURL=grid.d.ts.map

package/dist/auto/examples/grid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grid.d.ts","sourceRoot":"","sources":["../../../scripts/auto/examples/grid.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEnE,eAAO,MAAM,MAAM,EAAE,gBAUpB,CAAC;AASF,MAAM,CAAC,OAAO,UAAU,IAAI,CAAC,GAAG,EAAE,aAAa,QA+G9C"}
+{"version":3,"file":"grid.d.ts","sourceRoot":"","sources":["../../../scripts/auto/examples/grid.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAErH,eAAO,MAAM,MAAM,EAAE,gBAUpB,CAAC;AAEF,wBAAgB,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,0BAA0B,GAAG,oBAAoB,CAe/F;AASD,MAAM,CAAC,OAAO,UAAU,IAAI,CAAC,GAAG,EAAE,aAAa,QA+G9C"}

package/dist/auto/examples/grid.js

@@ -10,6 +10,22 @@ export const config = {
         mode: { type: 'string', description: 'Grid mode: neutral, long, or short', default: 'neutral' },
     },
 };
+export function guardrails({ config: values }) {
+    return {
+        mode: 'trading',
+        allowedMarkets: [String(values.coin ?? 'HYPE')],
+        maxOrderUsd: 10_000,
+        maxPositionUsd: 25_000,
+        maxTotalExposureUsd: 25_000,
+        maxLeverage: 1,
+        maxMarginUsedPct: 50,
+        maxOpenOrders: 25,
+        maxOrdersPerMinute: 25,
+        maxSlippageBps: 50,
+        allowMarketOrders: false,
+        allowAccountWideCancel: false,
+    };
+}
 export default function grid(api) {
     const COIN = api.state.get('coin', 'HYPE');
     const GRIDS = api.state.get('grids', 10);
@@ -43,7 +59,7 @@ export default function grid(api) {
             if (Math.abs(price - mid) / mid < 0.001)
                 continue;
             const level = { price, side, size: SIZE };
-            const response = await api.client.limitOrder(COIN, side === 'buy', SIZE, price, 'Gtc', false);
+            const response = await api.client.limitOrder(COIN, side === 'buy', SIZE, price, 'Gtc', false, 1);
             if (response.status === 'ok' && response.response && typeof response.response === 'object') {
                 const status = response.response.data.statuses[0];
                 if (status?.resting) {
@@ -84,7 +100,7 @@ export default function grid(api) {
             const oppositePrice = level.side === 'buy' ? level.price + spacing : level.price - spacing;
             if (oppositePrice < lower || oppositePrice > upper)
                 continue;
-            const response = await api.client.limitOrder(COIN, oppositeSide === 'buy', SIZE, oppositePrice, 'Gtc', false);
+            const response = await api.client.limitOrder(COIN, oppositeSide === 'buy', SIZE, oppositePrice, 'Gtc', false, 1);
             if (response.status === 'ok' && response.response && typeof response.response === 'object') {
                 const status = response.response.data.statuses[0];
                 if (status?.resting) {

package/dist/auto/examples/mm-maker.d.ts

@@ -1,4 +1,5 @@
-import type { AutomationAPI, AutomationConfig } from '../types.js';
+import type { AutomationAPI, AutomationConfig, AutomationGuardrailContext, AutomationGuardrails } from '../types.js';
 export declare const config: AutomationConfig;
+export declare function guardrails({ config: values }: AutomationGuardrailContext): AutomationGuardrails;
 export default function mmMaker(api: AutomationAPI): void;
 //# sourceMappingURL=mm-maker.d.ts.map

package/dist/auto/examples/mm-maker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mm-maker.d.ts","sourceRoot":"","sources":["../../../scripts/auto/examples/mm-maker.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEnE,eAAO,MAAM,MAAM,EAAE,gBASpB,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,OAAO,CAAC,GAAG,EAAE,aAAa,QA6GjD"}
+{"version":3,"file":"mm-maker.d.ts","sourceRoot":"","sources":["../../../scripts/auto/examples/mm-maker.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAErH,eAAO,MAAM,MAAM,EAAE,gBASpB,CAAC;AAEF,wBAAgB,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,0BAA0B,GAAG,oBAAoB,CAe/F;AAED,MAAM,CAAC,OAAO,UAAU,OAAO,CAAC,GAAG,EAAE,aAAa,QA6GjD"}

package/dist/auto/examples/mm-maker.js

@@ -9,6 +9,22 @@ export const config = {
         skewFactor: { type: 'number', description: 'Inventory skew aggressiveness', default: 2.0 },
     },
 };
+export function guardrails({ config: values }) {
+    return {
+        mode: 'trading',
+        allowedMarkets: [String(values.coin ?? 'HYPE')],
+        maxOrderUsd: 10_000,
+        maxPositionUsd: 25_000,
+        maxTotalExposureUsd: 25_000,
+        maxLeverage: 1,
+        maxMarginUsedPct: 50,
+        maxOpenOrders: 10,
+        maxOrdersPerMinute: 60,
+        maxSlippageBps: 25,
+        allowMarketOrders: false,
+        allowAccountWideCancel: false,
+    };
+}
 export default function mmMaker(api) {
     const COIN = api.state.get('coin', 'HYPE');
     const SIZE = api.state.get('size', 0.1);
@@ -85,7 +101,7 @@ export default function mmMaker(api) {
         }
         // Place ALO bid
         if (shouldBid && !bidOid && safeBid < book.bestAsk) {
-            const resp = await api.client.limitOrder(COIN, true, SIZE, safeBid, 'Alo', false);
+            const resp = await api.client.limitOrder(COIN, true, SIZE, safeBid, 'Alo', false, 1);
             if (resp.status === 'ok' && resp.response && typeof resp.response === 'object') {
                 const s = resp.response.data.statuses[0];
                 if (s?.resting) {
@@ -99,7 +115,7 @@ export default function mmMaker(api) {
         }
         // Place ALO ask
         if (shouldAsk && !askOid && safeAsk > book.bestBid) {
-            const resp = await api.client.limitOrder(COIN, false, SIZE, safeAsk, 'Alo', false);
+            const resp = await api.client.limitOrder(COIN, false, SIZE, safeAsk, 'Alo', false, 1);
             if (resp.status === 'ok' && resp.response && typeof resp.response === 'object') {
                 const s = resp.response.data.statuses[0];
                 if (s?.resting) {

package/dist/auto/examples/mm-spread.d.ts

@@ -1,4 +1,5 @@
-import type { AutomationAPI, AutomationConfig } from '../types.js';
+import type { AutomationAPI, AutomationConfig, AutomationGuardrailContext, AutomationGuardrails } from '../types.js';
 export declare const config: AutomationConfig;
+export declare function guardrails({ config: values }: AutomationGuardrailContext): AutomationGuardrails;
 export default function mmSpread(api: AutomationAPI): void;
 //# sourceMappingURL=mm-spread.d.ts.map

package/dist/auto/examples/mm-spread.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mm-spread.d.ts","sourceRoot":"","sources":["../../../scripts/auto/examples/mm-spread.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEnE,eAAO,MAAM,MAAM,EAAE,gBASpB,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,GAAG,EAAE,aAAa,QAmGlD"}
+{"version":3,"file":"mm-spread.d.ts","sourceRoot":"","sources":["../../../scripts/auto/examples/mm-spread.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAErH,eAAO,MAAM,MAAM,EAAE,gBASpB,CAAC;AAEF,wBAAgB,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,0BAA0B,GAAG,oBAAoB,CAe/F;AAED,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,GAAG,EAAE,aAAa,QAmGlD"}

package/dist/auto/examples/mm-spread.js

@@ -9,6 +9,22 @@ export const config = {
         skewFactor: { type: 'number', description: 'Inventory skew aggressiveness', default: 2.0 },
     },
 };
+export function guardrails({ config: values }) {
+    return {
+        mode: 'trading',
+        allowedMarkets: [String(values.coin ?? 'HYPE')],
+        maxOrderUsd: 10_000,
+        maxPositionUsd: 25_000,
+        maxTotalExposureUsd: 25_000,
+        maxLeverage: 1,
+        maxMarginUsedPct: 50,
+        maxOpenOrders: 10,
+        maxOrdersPerMinute: 60,
+        maxSlippageBps: 25,
+        allowMarketOrders: false,
+        allowAccountWideCancel: false,
+    };
+}
 export default function mmSpread(api) {
     const COIN = api.state.get('coin', 'HYPE');
     const SIZE = api.state.get('size', 0.1);
@@ -82,7 +98,7 @@ export default function mmSpread(api) {
         }
         // Place new quotes
         if (shouldBid && !bidOid) {
-            const resp = await api.client.limitOrder(COIN, true, SIZE, targetBid, 'Gtc', false);
+            const resp = await api.client.limitOrder(COIN, true, SIZE, targetBid, 'Gtc', false, 1);
             if (resp.status === 'ok' && resp.response && typeof resp.response === 'object') {
                 const s = resp.response.data.statuses[0];
                 if (s?.resting) {
@@ -92,7 +108,7 @@ export default function mmSpread(api) {
             }
         }
         if (shouldAsk && !askOid) {
-            const resp = await api.client.limitOrder(COIN, false, SIZE, targetAsk, 'Gtc', false);
+            const resp = await api.client.limitOrder(COIN, false, SIZE, targetAsk, 'Gtc', false, 1);
             if (resp.status === 'ok' && resp.response && typeof resp.response === 'object') {
                 const s = resp.response.data.statuses[0];
                 if (s?.resting) {

package/dist/auto/examples/price-alert.d.ts

@@ -1,4 +1,5 @@
-import type { AutomationAPI, AutomationConfig } from '../types.js';
+import type { AutomationAPI, AutomationConfig, AutomationGuardrails } from '../types.js';
 export declare const config: AutomationConfig;
+export declare const guardrails: AutomationGuardrails;
 export default function priceAlert(api: AutomationAPI): void;
 //# sourceMappingURL=price-alert.d.ts.map

package/dist/auto/examples/price-alert.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"price-alert.d.ts","sourceRoot":"","sources":["../../../scripts/auto/examples/price-alert.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEnE,eAAO,MAAM,MAAM,EAAE,gBAQpB,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,UAAU,CAAC,GAAG,EAAE,aAAa,QAgFpD"}
+{"version":3,"file":"price-alert.d.ts","sourceRoot":"","sources":["../../../scripts/auto/examples/price-alert.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEzF,eAAO,MAAM,MAAM,EAAE,gBAQpB,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,oBAA4C,CAAC;AAEtE,MAAM,CAAC,OAAO,UAAU,UAAU,CAAC,GAAG,EAAE,aAAa,QAgFpD"}

package/dist/auto/examples/price-alert.js

@@ -9,6 +9,7 @@ export const config = {
         below: { type: 'number', description: 'Alert when price goes below this level (0 = disabled)', default: 0 },
     },
 };
+export const guardrails = { mode: 'read-only' };
 export default function priceAlert(api) {
     const COIN = api.state.get('coin', 'BTC');
     const THRESHOLD = api.state.get('threshold', 0.1);
@@ -73,7 +74,7 @@ export default function priceAlert(api) {
         api.log.error(`LIQUIDATION: $${liquidatedNtlPos.toFixed(2)} notional, account value: $${liquidatedAccountValue.toFixed(2)}`);
         api.publish(`LIQUIDATED: $${liquidatedNtlPos.toFixed(2)} notional, account value: $${liquidatedAccountValue.toFixed(2)}`, { name: 'liquidation-alert' });
     });
-    // Periodic summary via REST heartbeat
+    // Periodic summary via the independent runtime scheduler
     api.on('tick', ({ pollCount }) => {
         if (pollCount % 10 === 0 && alertCount > 0) {
             api.log.info(`Summary: ${alertCount} alerts fired, last price: $${lastAlertPrice.toFixed(2)}`);

package/dist/auto/guardrails.d.ts

@@ -0,0 +1,19 @@
+import type { HyperliquidClient } from '../core/client.js';
+import type { AutomationGuardrailContext, AutomationGuardrails, AutomationGuardrailsExport, AutomationLogger } from './types.js';
+export declare const CLIENT_WRITE_METHODS: Set<string>;
+export declare class GuardrailViolation extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare function canonicalMarket(market: string): string;
+export declare function validateAutomationGuardrails(value: unknown): AutomationGuardrails;
+export declare function resolveAutomationGuardrails(exported: AutomationGuardrailsExport, context: AutomationGuardrailContext): AutomationGuardrails;
+export interface GuardrailedClientOptions {
+    policy: AutomationGuardrails;
+    rawClient: HyperliquidClient;
+    log: AutomationLogger;
+    onViolation?: (error: GuardrailViolation, method: string, args: unknown[]) => void;
+}
+/** Wrap a client so every public write method crosses the validated policy boundary. */
+export declare function createGuardrailedClient(executionClient: HyperliquidClient, options: GuardrailedClientOptions): HyperliquidClient;
+//# sourceMappingURL=guardrails.d.ts.map

package/dist/auto/guardrails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.d.ts","sourceRoot":"","sources":["../../scripts/auto/guardrails.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,KAAK,EACV,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,oBAAoB,aAQ/B,CAAC;AAiBH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAgCD,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAOtD;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAuDjF;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,0BAA0B,EACpC,OAAO,EAAE,0BAA0B,GAClC,oBAAoB,CAUtB;AAuTD,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,GAAG,EAAE,gBAAgB,CAAC;IACtB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;CACpF;AAED,wFAAwF;AACxF,wBAAgB,uBAAuB,CACrC,eAAe,EAAE,iBAAiB,EAClC,OAAO,EAAE,wBAAwB,GAChC,iBAAiB,CA6NnB"}