perp-cli 0.12.11 → 0.12.12

package/dist/commands/alerts.js

@@ -271,7 +271,7 @@ export function registerAlertCommands(program, isJson) {
             // Pass through env vars for keys
             // L2 agent key + indices now live in ~/.perp keystore + settings.agents (SSOT Rule #3),
             // not env. Only Tier 3 master PKs need passthrough.
-            const envKeys = ["LIGHTER_PRIVATE_KEY", "HL_PRIVATE_KEY", "PACIFICA_PRIVATE_KEY", "PRIVATE_KEY"];
+            const envKeys = ["LIGHTER_PRIVATE_KEY", "HL_PRIVATE_KEY", "PACIFICA_PRIVATE_KEY", "ASTER_PRIVATE_KEY", "PRIVATE_KEY"];
             const envStr = envKeys.filter(k => process.env[k]).map(k => `${k}='${process.env[k]}'`).join(" ");
             const cmd = `${envStr} ${nodeCmd} ${cliPath} ${args}`;
             execSync(`tmux new-session -d -s ${session} '${cmd.replace(/'/g, "'\\''")}'`);

package/dist/exchanges/aster.d.ts

@@ -1,10 +1,17 @@
 /**
- * Aster DEX adapter — EIP-712 three-tier signer routing (v3.2).
+ * Aster DEX adapter — EIP-712 agent-only signer routing (v3.3).
  *
- * Signer priority:
- *   Tier 1 — Agent OWS wallet  (registered + not expired + no --no-agent)
- *   Tier 2 — OWS master wallet (--ows / owsActiveWallet)
- *   Tier 3 — PK direct         (--private-key / PRIVATE_KEY / ASTER_PRIVATE_KEY)
+ * Signer policy:
+ *   Tier 1 — Agent OWS wallet  (registered + not expired + no --no-agent) — REQUIRED
+ *   Tier 2 — OWS master        — NOT_SUPPORTED (venue rejects master self-signing)
+ *   Tier 3 — PK direct         — NOT_SUPPORTED (venue rejects master self-signing)
+ *
+ * Aster V3 spec requires `signer` to be a registered API_WALLET (agent). The
+ * master wallet is never a valid signer — venue returns
+ * `code:-1000 msg:"Signature check failed"` when user==signer==master, even
+ * though the EIP-712 envelope is well-formed. Master/PK signers are still
+ * accepted via setMasterSigner/setPkSigner (used during approveAgent flow),
+ * but signed read/trade requests must use Tier 1.
  *
  * HMAC paths fully removed (see Step 3 plan — all Binance-compat HMAC code deleted).
  *
@@ -116,9 +123,9 @@ export declare class AsterAdapter implements ExchangeAdapter {
      * signed dict and the URL query string must be byte-identical except for
      * the appended signature.
      *
-     * Both `user` and `signer` are ALWAYS emitted as distinct query fields,
-     * even when the values are identical (Tier 2/3 self-signing case where
-     * master signs for itself). Aster's authority server checks both fields.
+     * Both `user` and `signer` are ALWAYS emitted as distinct query fields.
+     * In production (Tier 1 only), `user` is the master and `signer` is the
+     * registered agent address. Aster's authority server checks both fields.
      *
      * `signatureChainId` is NOT a v3 parameter — it's an artifact of an older
      * scheme; including it breaks signature verification on every call.
@@ -137,12 +144,20 @@ export declare class AsterAdapter implements ExchangeAdapter {
      * Unlike public GETs, signed GETs route through _handleAsterResponse so
      * venue JSON error envelopes ({code, msg}) are not silently treated as
      * success (SSOT Rule #2).
+     *
+     * Retries up to 3 attempts with exponential backoff (2s/4s/8s) on HTTP 429
+     * rate-limit. Each retry rebuilds a fresh signed query string (new nonce
+     * + signature) — Aster reuses recent nonces strictly, so reusing a stale
+     * one would itself be rejected. Non-429 venue errors throw immediately.
      */
     private _signedGetEip712;
     /**
      * Sign and DELETE from a path using EIP-712 Domain B.
+     * Same retry behavior as _signedGetEip712.
      */
     private _signedDeleteEip712;
+    /** Shared GET/DELETE retry loop with fresh-nonce per attempt. */
+    private _signedRequestWithRetry;
     /**
      * Unified response validator for ALL signed Aster requests.
      *

package/dist/exchanges/aster.js

@@ -1,10 +1,17 @@
 /**
- * Aster DEX adapter — EIP-712 three-tier signer routing (v3.2).
+ * Aster DEX adapter — EIP-712 agent-only signer routing (v3.3).
  *
- * Signer priority:
- *   Tier 1 — Agent OWS wallet  (registered + not expired + no --no-agent)
- *   Tier 2 — OWS master wallet (--ows / owsActiveWallet)
- *   Tier 3 — PK direct         (--private-key / PRIVATE_KEY / ASTER_PRIVATE_KEY)
+ * Signer policy:
+ *   Tier 1 — Agent OWS wallet  (registered + not expired + no --no-agent) — REQUIRED
+ *   Tier 2 — OWS master        — NOT_SUPPORTED (venue rejects master self-signing)
+ *   Tier 3 — PK direct         — NOT_SUPPORTED (venue rejects master self-signing)
+ *
+ * Aster V3 spec requires `signer` to be a registered API_WALLET (agent). The
+ * master wallet is never a valid signer — venue returns
+ * `code:-1000 msg:"Signature check failed"` when user==signer==master, even
+ * though the EIP-712 envelope is well-formed. Master/PK signers are still
+ * accepted via setMasterSigner/setPkSigner (used during approveAgent flow),
+ * but signed read/trade requests must use Tier 1.
  *
  * HMAC paths fully removed (see Step 3 plan — all Binance-compat HMAC code deleted).
  *
@@ -528,18 +535,19 @@ export class AsterAdapter {
                 };
             }
         }
-        // Tier 2: OWS master — master self-signs, so user==signer per V3 spec.
-        // The query string MUST still emit `user=` AND `signer=` as distinct
-        // fields even when the values are identical (Aster authority verifies
-        // both keys); see _buildSignedQueryString.
-        if (this._masterSigner) {
-            const addr = this._masterSigner.getAddress();
-            return { tier: "master", signer: this._masterSigner, signerAddress: addr, userAddress: addr };
-        }
-        // Tier 3: PK direct — same self-signing model as Tier 2.
-        if (this._pkSigner) {
-            const addr = this._pkSigner.getAddress();
-            return { tier: "pk", signer: this._pkSigner, signerAddress: addr, userAddress: addr };
+        // Tier 2/3: master self-signing is not supported by the venue. Per Aster
+        // V3 spec the `signer` field MUST be a registered API_WALLET (agent);
+        // sending `user==signer==master` is rejected with
+        // `code:-1000 msg:"Signature check failed"` even though the EIP-712
+        // envelope is well-formed. SSOT Rule #2: throw with remediation rather
+        // than silently dispatching a request the venue will reject.
+        //
+        // Reference: HypurrQuant_FE AsterPerpAdapter.ts throws if agent isn't
+        // configured; never attempts master self-signing.
+        if (this._masterSigner || this._pkSigner) {
+            throw new PerpError("NOT_IMPLEMENTED", "Aster requires a registered agent — master self-signing is not supported by venue", {
+                remediation: "perp wallet agent approve aster --master <wallet>",
+            });
         }
         // No signer at any tier
         throw new PerpError("NO_SIGNER_AVAILABLE", "No signing path configured for Aster", {
@@ -564,9 +572,9 @@ export class AsterAdapter {
      * signed dict and the URL query string must be byte-identical except for
      * the appended signature.
      *
-     * Both `user` and `signer` are ALWAYS emitted as distinct query fields,
-     * even when the values are identical (Tier 2/3 self-signing case where
-     * master signs for itself). Aster's authority server checks both fields.
+     * Both `user` and `signer` are ALWAYS emitted as distinct query fields.
+     * In production (Tier 1 only), `user` is the master and `signer` is the
+     * registered agent address. Aster's authority server checks both fields.
      *
      * `signatureChainId` is NOT a v3 parameter — it's an artifact of an older
      * scheme; including it breaks signature verification on every call.
@@ -610,21 +618,53 @@ export class AsterAdapter {
      * Unlike public GETs, signed GETs route through _handleAsterResponse so
      * venue JSON error envelopes ({code, msg}) are not silently treated as
      * success (SSOT Rule #2).
+     *
+     * Retries up to 3 attempts with exponential backoff (2s/4s/8s) on HTTP 429
+     * rate-limit. Each retry rebuilds a fresh signed query string (new nonce
+     * + signature) — Aster reuses recent nonces strictly, so reusing a stale
+     * one would itself be rejected. Non-429 venue errors throw immediately.
      */
     async _signedGetEip712(path, params, resolved) {
-        const qs = await this._buildSignedQueryString(params, resolved);
-        const url = `${this._baseUrl}${path}?${qs}`;
-        const res = await fetch(url);
-        return this._handleAsterResponse(res, "GET", path);
+        return this._signedRequestWithRetry("GET", path, params, resolved);
     }
     /**
      * Sign and DELETE from a path using EIP-712 Domain B.
+     * Same retry behavior as _signedGetEip712.
      */
     async _signedDeleteEip712(path, params, resolved) {
-        const qs = await this._buildSignedQueryString(params, resolved);
-        const url = `${this._baseUrl}${path}?${qs}`;
-        const res = await fetch(url, { method: "DELETE" });
-        return this._handleAsterResponse(res, "DELETE", path);
+        return this._signedRequestWithRetry("DELETE", path, params, resolved);
+    }
+    /** Shared GET/DELETE retry loop with fresh-nonce per attempt. */
+    async _signedRequestWithRetry(method, path, params, resolved) {
+        const MAX_ATTEMPTS = 3;
+        let lastErr;
+        for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
+            // Rebuild signed query string with fresh nonce on each attempt.
+            const qs = await this._buildSignedQueryString(params, resolved);
+            const url = `${this._baseUrl}${path}?${qs}`;
+            const res = await fetch(url, method === "DELETE" ? { method: "DELETE" } : undefined);
+            // 429 → backoff + retry. All other paths (including non-429 venue
+            // errors wrapped in HTTP 200 with code≠0) throw immediately via
+            // _handleAsterResponse — no silent fallback (Rule #2).
+            if (res.status === 429 && attempt < MAX_ATTEMPTS - 1) {
+                const backoffMs = 2000 * Math.pow(2, attempt); // 2s, 4s, 8s
+                await new Promise((r) => setTimeout(r, backoffMs));
+                continue;
+            }
+            try {
+                return await this._handleAsterResponse(res, method, path);
+            }
+            catch (e) {
+                lastErr = e;
+                if (res.status === 429 && attempt < MAX_ATTEMPTS - 1) {
+                    const backoffMs = 2000 * Math.pow(2, attempt);
+                    await new Promise((r) => setTimeout(r, backoffMs));
+                    continue;
+                }
+                throw e;
+            }
+        }
+        throw lastErr;
     }
     // ── Private: HTTP response handling ──────────────────────────────────────
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "perp-cli",
-  "version": "0.12.11",
+  "version": "0.12.12",
   "description": "Multi-DEX Perpetual Futures CLI - Pacifica, Hyperliquid, Lighter, Aster",
   "bin": {
     "perp": "dist/index.js",

package/skills/perp-cli/SKILL.md

@@ -5,7 +5,7 @@ allowed-tools: "Bash(perp:*), Bash(npx perp-cli:*), Bash(npx -y perp-cli:*)"
 license: MIT
 metadata:
   author: hypurrquant
-  version: "0.12.11"
+  version: "0.12.12"
 ---
 
 # perp-cli Agent Guide
@@ -41,7 +41,7 @@ Multi-DEX perpetual futures CLI + MCP server — Pacifica (Solana), Hyperliquid
 ## Install
 
 ```bash
-perp --version 2>/dev/null  # check if exists (must be >= 0.12.11)
+perp --version 2>/dev/null  # check if exists (must be >= 0.12.12)
 npm install -g perp-cli@latest 2>/dev/null || npx -y perp-cli@latest --json --version
 ```