perp-cli 0.12.17 → 0.14.0

package/dist/exchanges/venues/lighter-family.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Lighter-family constants shared by the `lighter` and `lighter-rh` venues
+ * (design §4 "Lighter RH" row, §10.3–§10.5, §10.8, §10.13 #4).
+ *
+ * Both venues run the same API/engine and the same LighterAdapter class; they
+ * differ only in the values below. This module has no runtime imports so venue
+ * definitions and public-data paths can use it without loading the WASM SDK.
+ */
+import type { RateLimitPolicy, VenueCapabilities, VenueNetworkConfig } from "../venue.js";
+export type LighterVenueId = "lighter" | "lighter-rh";
+/**
+ * Lighter (main). REST hosts are the values LighterAdapter used before
+ * venue-parameterization. Mainnet WS is the one ws-feeds.ts connects to.
+ * Testnet WS is not in code or docs we hold → null (a WS upgrade on
+ * wss://testnet.zklighter.elliot.ai/stream answered 101 on 2026-09-30, but that is a probe, not a source).
+ * explorerUrl is the explorer API host; callers append `/api/...`
+ * (lighter-spot.ts uses `${explorerUrl}/api/markets`). The testnet explorer host
+ * is the one lighter-ts-sdk documented (`https://testnet.explorer.elliot.ai/api`).
+ */
+export declare const LIGHTER_NETWORKS: {
+    mainnet: VenueNetworkConfig;
+    testnet: VenueNetworkConfig;
+};
+/**
+ * Lighter RH (apidocs.rh.lighter.xyz). Chain ids 466324 / 300 per get-started.md.
+ * Collateral asset id 3, 6 decimals on both networks — but a different token:
+ * mainnet asset 3 is USDG, testnet asset 3 is USDC (live GET
+ * api.rh-testnet.lighter.xyz/api/v1/assetDetails, 2026-10-02: ids 1 ETH, 2 LIT,
+ * 3 USDC l1_decimals 6 / decimals 6; no USDG listed).
+ * explorerUrl is the explorer **API** host (`https://explorerapi.rh.lighter.xyz/api/`,
+ * rate-limits.md); no UI explorer URL is documented.
+ * Testnet WS is not documented → null (a WS upgrade on
+ * wss://api.rh-testnet.lighter.xyz/stream answered 101 on 2026-09-30).
+ * Testnet explorer is not documented → null.
+ * rpcUrl (mainnet): Robinhood Chain RPC — the L1 the RH contract lives on
+ * (GET /api/v1/layer1BasicInfo l1_providers chainId 4663; eth_chainId 0x1237 verified
+ * 2026-10-02; same RPC as the Arcus venue). Testnet: the RH testnet L1 (chainId 123456
+ * per layer1BasicInfo) has no documented RPC → null.
+ */
+export declare const LIGHTER_RH_NETWORKS: {
+    mainnet: VenueNetworkConfig;
+    testnet: VenueNetworkConfig;
+};
+export declare function lighterFamilyNetworks(venue: LighterVenueId): {
+    mainnet: VenueNetworkConfig;
+    testnet: VenueNetworkConfig;
+};
+/**
+ * §10.8 + §10.13 #4 + §13.3. timeInForce lists the CLI inputs the adapter accepts:
+ * GTC is mapped to GTT (28-day expiry, LIGHTER_GTT_EXPIRY_MS) by LighterAdapter.limitOrder;
+ * ALO is sent as time-in-force 2 (POST_ONLY); FOK is not offered.
+ * clientOrderId (§13.10 #9): Lighter `clientOrderIndex`, a numeric id — CLI format rule
+ * in LIGHTER_CLIENT_ORDER_INDEX_MAX / lighterClientOrderIndex() (lighter.ts).
+ */
+export declare const LIGHTER_CAPABILITIES: VenueCapabilities;
+/**
+ * GTC/GTT (and post-only) resting-order lifetime on both Lighter venues: orderExpiry -1 is
+ * resolved to now + 28 days by LighterWasmSigner (the venue allows 5 min – 30 days).
+ * Recorded as the execution record's expiry for GTC→GTT (§13.10 #14).
+ */
+export declare const LIGHTER_GTT_EXPIRY_MS: number;
+/**
+ * The ONE declared reference price for slippage-bounded orders on both Lighter venues
+ * (§13.10 #5): mid of best bid / best ask from `/api/v1/orderBookOrders`. Replaces
+ * orderBookDetails `last_trade_price` (stale on thin RH stock books). No runtime
+ * substitute: a missing side → PRICE_STALE before anything is sent.
+ */
+export declare const LIGHTER_REFERENCE_PRICE_SOURCE: "orderBookOrders.mid";
+/** Largest Lighter clientOrderIndex: 48-bit (2^48 − 1). 0 is the venue's "nil" index → 1 is the minimum. */
+export declare const LIGHTER_CLIENT_ORDER_INDEX_MAX: number;
+export declare const LIGHTER_RH_CAPABILITIES: VenueCapabilities;
+/**
+ * Standard-account REST limit: 60 requests per rolling minute, unweighted
+ * (rate-limits.md). The account tier cannot be determined from here, so the
+ * standard policy is used.
+ *
+ * Not modeled: on Premium/Plus accounts the limit is 24,000 *weighted*
+ * requests/min (`trades`/`recentTrades` weight 600, `sendTx`/`nextNonce` 6,
+ * others 300). The docs also apply `24000 / weight` when it is lower than 60, so
+ * even standard accounts get only 40/min on `trades`/`recentTrades` and 8/min on
+ * the 3000-weight endpoints. A 429 from those surfaces as RATE_LIMITED.
+ */
+export declare const LIGHTER_RH_RATE_LIMIT: RateLimitPolicy;
+/**
+ * Lighter main: same engine and the same standard-account tier (60 req/min).
+ * Taken from the RH docs ("same API/engine"); the main-venue figure is not
+ * separately verified here.
+ */
+export declare const LIGHTER_RATE_LIMIT: RateLimitPolicy;
+export declare function lighterFamilyRateLimit(venue: LighterVenueId): RateLimitPolicy;
+/** API key indexes Lighter RH reserves for its desktop/mobile interfaces (api-keys.md; valid range 0–254). */
+export declare const LIGHTER_RH_RESERVED_KEY_INDEXES: readonly number[];

package/dist/exchanges/venues/lighter-family.js

@@ -0,0 +1,166 @@
+/**
+ * Lighter-family constants shared by the `lighter` and `lighter-rh` venues
+ * (design §4 "Lighter RH" row, §10.3–§10.5, §10.8, §10.13 #4).
+ *
+ * Both venues run the same API/engine and the same LighterAdapter class; they
+ * differ only in the values below. This module has no runtime imports so venue
+ * definitions and public-data paths can use it without loading the WASM SDK.
+ */
+/**
+ * Lighter (main). REST hosts are the values LighterAdapter used before
+ * venue-parameterization. Mainnet WS is the one ws-feeds.ts connects to.
+ * Testnet WS is not in code or docs we hold → null (a WS upgrade on
+ * wss://testnet.zklighter.elliot.ai/stream answered 101 on 2026-09-30, but that is a probe, not a source).
+ * explorerUrl is the explorer API host; callers append `/api/...`
+ * (lighter-spot.ts uses `${explorerUrl}/api/markets`). The testnet explorer host
+ * is the one lighter-ts-sdk documented (`https://testnet.explorer.elliot.ai/api`).
+ */
+export const LIGHTER_NETWORKS = {
+    mainnet: {
+        restUrl: "https://mainnet.zklighter.elliot.ai",
+        wsUrl: "wss://mainnet.zklighter.elliot.ai/stream",
+        explorerUrl: "https://explorer.elliot.ai",
+        signingChainId: 304,
+        settlementChain: "ethereum",
+        collateral: ["USDC"],
+        collateralAssetIndex: 3,
+        rpcUrl: null,
+        depositPins: null,
+    },
+    testnet: {
+        restUrl: "https://testnet.zklighter.elliot.ai",
+        wsUrl: null,
+        explorerUrl: "https://testnet.explorer.elliot.ai",
+        signingChainId: 300,
+        settlementChain: "ethereum",
+        collateral: ["USDC"],
+        collateralAssetIndex: 3,
+        rpcUrl: null,
+        depositPins: null,
+    },
+};
+/**
+ * Lighter RH (apidocs.rh.lighter.xyz). Chain ids 466324 / 300 per get-started.md.
+ * Collateral asset id 3, 6 decimals on both networks — but a different token:
+ * mainnet asset 3 is USDG, testnet asset 3 is USDC (live GET
+ * api.rh-testnet.lighter.xyz/api/v1/assetDetails, 2026-10-02: ids 1 ETH, 2 LIT,
+ * 3 USDC l1_decimals 6 / decimals 6; no USDG listed).
+ * explorerUrl is the explorer **API** host (`https://explorerapi.rh.lighter.xyz/api/`,
+ * rate-limits.md); no UI explorer URL is documented.
+ * Testnet WS is not documented → null (a WS upgrade on
+ * wss://api.rh-testnet.lighter.xyz/stream answered 101 on 2026-09-30).
+ * Testnet explorer is not documented → null.
+ * rpcUrl (mainnet): Robinhood Chain RPC — the L1 the RH contract lives on
+ * (GET /api/v1/layer1BasicInfo l1_providers chainId 4663; eth_chainId 0x1237 verified
+ * 2026-10-02; same RPC as the Arcus venue). Testnet: the RH testnet L1 (chainId 123456
+ * per layer1BasicInfo) has no documented RPC → null.
+ */
+export const LIGHTER_RH_NETWORKS = {
+    mainnet: {
+        restUrl: "https://api.rh.lighter.xyz",
+        wsUrl: "wss://api.rh.lighter.xyz/stream",
+        explorerUrl: "https://explorerapi.rh.lighter.xyz",
+        signingChainId: 466324,
+        settlementChain: "robinhood",
+        collateral: ["USDG"],
+        collateralAssetIndex: 3,
+        rpcUrl: "https://rpc.mainnet.chain.robinhood.com",
+        // Verified 2026-10-02: contract + chainId 4663 on apidocs.lighter.xyz/docs/lighter-rh and
+        // apidocs.rh.lighter.xyz "Deposits, Transfers, and Withdrawals"; USDG token on Paxos'
+        // USDG mainnet list (Robinhood Mainnet); both equal GET /api/v1/layer1BasicInfo + assetDetails.
+        depositPins: {
+            chainId: 4663,
+            contract: "0x94bAB9693Ba2f6358507eFfcbd372b0660AFfF9d",
+            token: "0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168",
+            sources: [
+                "https://apidocs.lighter.xyz/docs/lighter-rh",
+                "https://apidocs.rh.lighter.xyz/docs/deposits-transfers-and-withdrawals",
+                "https://docs.paxos.com/guides/stablecoin/usdg/mainnet",
+            ],
+        },
+    },
+    testnet: {
+        restUrl: "https://api.rh-testnet.lighter.xyz",
+        wsUrl: null,
+        explorerUrl: null,
+        signingChainId: 300,
+        settlementChain: "robinhood",
+        collateral: ["USDC"],
+        collateralAssetIndex: 3,
+        rpcUrl: null,
+        depositPins: null,
+    },
+};
+export function lighterFamilyNetworks(venue) {
+    switch (venue) {
+        case "lighter": return LIGHTER_NETWORKS;
+        case "lighter-rh": return LIGHTER_RH_NETWORKS;
+    }
+}
+/**
+ * §10.8 + §10.13 #4 + §13.3. timeInForce lists the CLI inputs the adapter accepts:
+ * GTC is mapped to GTT (28-day expiry, LIGHTER_GTT_EXPIRY_MS) by LighterAdapter.limitOrder;
+ * ALO is sent as time-in-force 2 (POST_ONLY); FOK is not offered.
+ * clientOrderId (§13.10 #9): Lighter `clientOrderIndex`, a numeric id — CLI format rule
+ * in LIGHTER_CLIENT_ORDER_INDEX_MAX / lighterClientOrderIndex() (lighter.ts).
+ */
+export const LIGHTER_CAPABILITIES = {
+    marketOrder: "slippageBounded",
+    // ALO → time-in-force 2 = POST_ONLY (apidocs trading.md; signed by the official lighter-go
+    // v1.0.9 WASM). Testnet confirmation that a crossing post-only is cancelled
+    // (canceled-post-only) is still pending (design §11).
+    timeInForce: ["GTC", "GTT", "IOC", "ALO"],
+    reduceOnlyTif: null,
+    clientOrderId: true,
+    orderAck: "async",
+    tpsl: "separateOrders",
+    amend: "native",
+    batchPlaceMax: null,
+    marginModes: ["cross", "isolated"],
+    withdrawAssets: ["USDC"],
+};
+/**
+ * GTC/GTT (and post-only) resting-order lifetime on both Lighter venues: orderExpiry -1 is
+ * resolved to now + 28 days by LighterWasmSigner (the venue allows 5 min – 30 days).
+ * Recorded as the execution record's expiry for GTC→GTT (§13.10 #14).
+ */
+export const LIGHTER_GTT_EXPIRY_MS = 28 * 24 * 60 * 60 * 1000;
+/**
+ * The ONE declared reference price for slippage-bounded orders on both Lighter venues
+ * (§13.10 #5): mid of best bid / best ask from `/api/v1/orderBookOrders`. Replaces
+ * orderBookDetails `last_trade_price` (stale on thin RH stock books). No runtime
+ * substitute: a missing side → PRICE_STALE before anything is sent.
+ */
+export const LIGHTER_REFERENCE_PRICE_SOURCE = "orderBookOrders.mid";
+/** Largest Lighter clientOrderIndex: 48-bit (2^48 − 1). 0 is the venue's "nil" index → 1 is the minimum. */
+export const LIGHTER_CLIENT_ORDER_INDEX_MAX = 2 ** 48 - 1;
+export const LIGHTER_RH_CAPABILITIES = {
+    ...LIGHTER_CAPABILITIES,
+    withdrawAssets: ["USDG"],
+};
+/**
+ * Standard-account REST limit: 60 requests per rolling minute, unweighted
+ * (rate-limits.md). The account tier cannot be determined from here, so the
+ * standard policy is used.
+ *
+ * Not modeled: on Premium/Plus accounts the limit is 24,000 *weighted*
+ * requests/min (`trades`/`recentTrades` weight 600, `sendTx`/`nextNonce` 6,
+ * others 300). The docs also apply `24000 / weight` when it is lower than 60, so
+ * even standard accounts get only 40/min on `trades`/`recentTrades` and 8/min on
+ * the 3000-weight endpoints. A 429 from those surfaces as RATE_LIMITED.
+ */
+export const LIGHTER_RH_RATE_LIMIT = { capacity: 60, refillPerSec: 1, weights: null };
+/**
+ * Lighter main: same engine and the same standard-account tier (60 req/min).
+ * Taken from the RH docs ("same API/engine"); the main-venue figure is not
+ * separately verified here.
+ */
+export const LIGHTER_RATE_LIMIT = { capacity: 60, refillPerSec: 1, weights: null };
+export function lighterFamilyRateLimit(venue) {
+    switch (venue) {
+        case "lighter": return LIGHTER_RATE_LIMIT;
+        case "lighter-rh": return LIGHTER_RH_RATE_LIMIT;
+    }
+}
+/** API key indexes Lighter RH reserves for its desktop/mobile interfaces (api-keys.md; valid range 0–254). */
+export const LIGHTER_RH_RESERVED_KEY_INDEXES = [0, 1, 2, 3, 157];

package/dist/exchanges/venues/lighter-rh.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Lighter RH venue definition (design §4 "Lighter RH", §10.1, §10.3, §10.8).
+ * Same engine/adapter as Lighter; USDG collateral on the Robinhood chain.
+ * Master key = OWS wallet only (no env / raw-PK tier); referral off (§10.3).
+ */
+import type { VenueDefinition } from "../venue.js";
+export declare const lighterRhVenue: VenueDefinition;

package/dist/exchanges/venues/lighter-rh.js

@@ -0,0 +1,58 @@
+/**
+ * Lighter RH venue definition (design §4 "Lighter RH", §10.1, §10.3, §10.8).
+ * Same engine/adapter as Lighter; USDG collateral on the Robinhood chain.
+ * Master key = OWS wallet only (no env / raw-PK tier); referral off (§10.3).
+ */
+import { LIGHTER_RH_CAPABILITIES, LIGHTER_RH_NETWORKS, LIGHTER_RH_RATE_LIMIT } from "./lighter-family.js";
+import { BUILDER_FEE_CAPABILITIES } from "../builder-fee.js";
+const publicData = {
+    async fetchFundingRates(net) {
+        return (await import("../lighter-public.js")).lighterPublicData("lighter-rh").fetchFundingRates(net);
+    },
+    async fetchMarkets(net) {
+        return (await import("../lighter-public.js")).lighterPublicData("lighter-rh").fetchMarkets(net);
+    },
+};
+export const lighterRhVenue = {
+    id: "lighter-rh",
+    aliases: ["lrh", "rh"],
+    displayName: "Lighter RH",
+    family: "lighter",
+    masterKeyKind: "evm",
+    agentKeyKind: "lighter-l2",
+    secretStorage: { kind: "perp-keystore", dir: "lighter-rh-agents" },
+    networks: LIGHTER_RH_NETWORKS,
+    // "Lighter RH is the same API/engine as Lighter" → Lighter's basis/interval (§10.1; live-data check pending).
+    fundingRateBasis: { kind: "perHours", hours: 8 },
+    settlementIntervalHours: 1,
+    fundingVerified: true,
+    roles: ["marketData", "account", "trading"],
+    capabilities: LIGHTER_RH_CAPABILITIES,
+    // Applied by the rate limiter (§10.9: new venues + lighter-rh).
+    rateLimit: LIGHTER_RH_RATE_LIMIT,
+    restrictedRegions: [],
+    symbolIdentity: "baseTicker",
+    publicData,
+    // §12: per account (account_trading_mode, read by LighterSpotAdapter.init): Unified (1) shares
+    // the collateral between spot and perp (no transfer); Classic (0) = separate spot balance +
+    // self-transfer of the venue collateral.
+    spot: {
+        accountModel: "runtime",
+        // Spot quote = the network's collateral (USDG mainnet, USDC testnet).
+        quoteAssets: { mainnet: LIGHTER_RH_NETWORKS.mainnet.collateral, testnet: LIGHTER_RH_NETWORKS.testnet.collateral },
+        capabilities: { limitOrder: true, orderbook: true, cancel: true, transfer: true },
+        async createSpot(perp) {
+            const [{ LighterAdapter }, { LighterSpotAdapter }] = await Promise.all([
+                import("../lighter.js"), import("../lighter-spot.js"),
+            ]);
+            if (!(perp instanceof LighterAdapter))
+                throw new Error(`lighter-rh spot needs a LighterAdapter (got ${perp.name})`);
+            const spot = new LighterSpotAdapter(perp);
+            await spot.init();
+            return spot;
+        },
+    },
+    maxSlippageBps: 5000,
+    builderFee: BUILDER_FEE_CAPABILITIES["lighter-rh"],
+    create: async (ctx) => (await import("./create-helpers.js")).createLighterFamily("lighter-rh", ctx),
+};

package/dist/exchanges/venues/lighter.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Lighter (main) venue definition (design §10.1, §10.8, §10.13 #4).
+ * Shares LighterAdapter and constants with lighter-rh (./lighter-family.ts).
+ */
+import type { VenueDefinition } from "../venue.js";
+export declare const lighterVenue: VenueDefinition;

package/dist/exchanges/venues/lighter.js

@@ -0,0 +1,55 @@
+/**
+ * Lighter (main) venue definition (design §10.1, §10.8, §10.13 #4).
+ * Shares LighterAdapter and constants with lighter-rh (./lighter-family.ts).
+ */
+import { LIGHTER_CAPABILITIES, LIGHTER_NETWORKS, LIGHTER_RATE_LIMIT } from "./lighter-family.js";
+import { BUILDER_FEE_CAPABILITIES } from "../builder-fee.js";
+const publicData = {
+    async fetchFundingRates(net) {
+        return (await import("../lighter-public.js")).lighterPublicData("lighter").fetchFundingRates(net);
+    },
+    async fetchMarkets(net) {
+        return (await import("../lighter-public.js")).lighterPublicData("lighter").fetchMarkets(net);
+    },
+};
+export const lighterVenue = {
+    id: "lighter",
+    aliases: ["lt"],
+    displayName: "Lighter",
+    family: "lighter",
+    masterKeyKind: "evm",
+    agentKeyKind: "lighter-l2",
+    secretStorage: { kind: "perp-keystore", dir: "lighter-agents" },
+    networks: LIGHTER_NETWORKS,
+    fundingRateBasis: { kind: "perHours", hours: 8 },
+    settlementIntervalHours: 1,
+    fundingVerified: true,
+    roles: ["marketData", "account", "trading"],
+    capabilities: LIGHTER_CAPABILITIES,
+    // Declared only — per §10.9 the limiter is applied to new venues + lighter-rh, not lighter.
+    rateLimit: LIGHTER_RATE_LIMIT,
+    restrictedRegions: [],
+    symbolIdentity: "baseTicker",
+    publicData,
+    // §12: per account (account_trading_mode, read by LighterSpotAdapter.init): Unified (1) shares
+    // the collateral between spot and perp (no transfer); Classic (0) = separate spot balance +
+    // self-transfer of the venue collateral.
+    spot: {
+        accountModel: "runtime",
+        quoteAssets: { mainnet: LIGHTER_NETWORKS.mainnet.collateral, testnet: LIGHTER_NETWORKS.testnet.collateral },
+        capabilities: { limitOrder: true, orderbook: true, cancel: true, transfer: true },
+        async createSpot(perp) {
+            const [{ LighterAdapter }, { LighterSpotAdapter }] = await Promise.all([
+                import("../lighter.js"), import("../lighter-spot.js"),
+            ]);
+            if (!(perp instanceof LighterAdapter))
+                throw new Error(`lighter spot needs a LighterAdapter (got ${perp.name})`);
+            const spot = new LighterSpotAdapter(perp);
+            await spot.init();
+            return spot;
+        },
+    },
+    maxSlippageBps: 5000,
+    builderFee: BUILDER_FEE_CAPABILITIES["lighter"],
+    create: async (ctx) => (await import("./create-helpers.js")).createLighterFamily("lighter", ctx),
+};

package/dist/exchanges/venues/ondo.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Ondo Perps venue definition (design §4, §10).
+ *
+ * Off-chain matching engine; collateral is USDC plus eligible Ondo Global
+ * Markets tokenized stocks (docs collateral-assets). Hot-path key = HMAC API
+ * key stored in ~/.perp/ondo-agents/<keyId>.json (SSOT Rule #3).
+ * Not registered here; the registry module owns registerVenue().
+ */
+import type { VenueDefinition } from "../venue.js";
+/**
+ * Chain Ondo Perps withdrawals are paid out on (POST /v1/withdraw `network`).
+ * The venue settles off-chain (settlementChain "offchain"); USDC leaves on Ethereum.
+ */
+export declare const ONDO_WITHDRAW_NETWORK = "ethereum";
+/** Chains the CLI funds an Ondo Perps account from (`funds deposit ondo --chain`). */
+export type OndoDepositChain = "arbitrum" | "ethereum";
+export interface OndoDepositChainPins {
+    chainId: number;
+    label: string;
+    /** Public JSON-RPC of the chain (no env override). */
+    rpcUrl: string;
+    /** Native USDC (Circle) on that chain — the only asset the CLI sends. */
+    usdc: string;
+    sources: readonly string[];
+}
+/**
+ * PINNED USDC token addresses for Ondo Perps funding (mainnet). Funding is a plain ERC-20
+ * transfer of USDC to the account's own funding address (docs.ondoperps.xyz/funding-ondo-perps:
+ * "USDC is supported on Ethereum and Arbitrum"; api-reference/integration_guide "Deposit USDC").
+ * The network names equal the `network` values of POST /v1/wallet/deposit_address/list
+ * (live 2026-10-05: "ethereum" | "arbitrum" | "avalanche"). Decimals are read on-chain.
+ */
+export declare const ONDO_DEPOSIT_CHAINS: Readonly<Record<OndoDepositChain, OndoDepositChainPins>>;
+export declare const ondoVenue: VenueDefinition;

package/dist/exchanges/venues/ondo.js

@@ -0,0 +1,140 @@
+/**
+ * Ondo Perps venue definition (design §4, §10).
+ *
+ * Off-chain matching engine; collateral is USDC plus eligible Ondo Global
+ * Markets tokenized stocks (docs collateral-assets). Hot-path key = HMAC API
+ * key stored in ~/.perp/ondo-agents/<keyId>.json (SSOT Rule #3).
+ * Not registered here; the registry module owns registerVenue().
+ */
+import { BUILDER_FEE_CAPABILITIES } from "../builder-fee.js";
+/** Lazy: public.ts is only loaded when market data is actually requested. */
+const publicData = {
+    async fetchFundingRates(net) {
+        return (await import("../ondo/public.js")).ondoPublicData.fetchFundingRates(net);
+    },
+    async fetchMarkets(net) {
+        return (await import("../ondo/public.js")).ondoPublicData.fetchMarkets(net);
+    },
+};
+/**
+ * Chain Ondo Perps withdrawals are paid out on (POST /v1/withdraw `network`).
+ * The venue settles off-chain (settlementChain "offchain"); USDC leaves on Ethereum.
+ */
+export const ONDO_WITHDRAW_NETWORK = "ethereum";
+/**
+ * PINNED USDC token addresses for Ondo Perps funding (mainnet). Funding is a plain ERC-20
+ * transfer of USDC to the account's own funding address (docs.ondoperps.xyz/funding-ondo-perps:
+ * "USDC is supported on Ethereum and Arbitrum"; api-reference/integration_guide "Deposit USDC").
+ * The network names equal the `network` values of POST /v1/wallet/deposit_address/list
+ * (live 2026-10-05: "ethereum" | "arbitrum" | "avalanche"). Decimals are read on-chain.
+ */
+export const ONDO_DEPOSIT_CHAINS = {
+    arbitrum: {
+        chainId: 42161,
+        label: "Arbitrum",
+        rpcUrl: "https://arb1.arbitrum.io/rpc",
+        usdc: "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
+        sources: ["https://developers.circle.com/stablecoins/usdc-contract-addresses", "https://docs.ondoperps.xyz/funding-ondo-perps"],
+    },
+    ethereum: {
+        chainId: 1,
+        label: "Ethereum",
+        rpcUrl: "https://ethereum-rpc.publicnode.com",
+        usdc: "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48",
+        sources: ["https://developers.circle.com/stablecoins/usdc-contract-addresses", "https://docs.ondoperps.xyz/funding-ondo-perps"],
+    },
+};
+/** Collateral accepted for margin (docs collateral-assets, 2026-09-30). */
+const ONDO_COLLATERAL = [
+    "USDC",
+    "SPYon", "QQQon", "NVDAon", "GOOGLon", "TSLAon", "MUon", "SNDKon",
+    "DRAMon", "SPCXon", "CRCLon", "SLVon", "GLDon",
+];
+export const ondoVenue = {
+    id: "ondo",
+    aliases: ["ondo-perps"],
+    displayName: "Ondo Perps",
+    family: "ondo",
+    masterKeyKind: "evm",
+    agentKeyKind: "hmac",
+    secretStorage: { kind: "perp-keystore", dir: "ondo-agents" },
+    networks: {
+        mainnet: {
+            restUrl: "https://api.ondoperps.xyz",
+            wsUrl: "wss://api.ondoperps.xyz/ws",
+            explorerUrl: null,
+            signingChainId: null,
+            settlementChain: "offchain",
+            collateral: ONDO_COLLATERAL,
+            collateralAssetIndex: null,
+            rpcUrl: null,
+            depositPins: null,
+        },
+        testnet: {
+            restUrl: "https://api.ondoperps-sandbox.xyz",
+            wsUrl: "wss://api.ondoperps-sandbox.xyz/ws",
+            explorerUrl: null,
+            signingChainId: null,
+            settlementChain: "offchain",
+            collateral: ONDO_COLLATERAL,
+            collateralAssetIndex: null,
+            rpcUrl: null,
+            depositPins: null,
+        },
+    },
+    fundingRateBasis: { kind: "perHours", hours: 1 },
+    settlementIntervalHours: 1,
+    fundingVerified: true,
+    roles: ["marketData", "account", "trading"],
+    capabilities: {
+        // The venue offers native market orders; the adapter sends every market order
+        // as an IOC LIMIT at the tick-aligned protection price (mark ± resolved
+        // slippage, design §13.2).
+        marketOrder: "native",
+        timeInForce: ["GTC", "IOC", "ALO"],
+        // A reduce-only limit order must be IOC: the venue refuses a resting one with HTTP 400
+        // `reduce_only_invalid_tif` "reduce only order can only be IOC" (live mainnet 2026-10-05).
+        // docs.ondoperps.xyz/api-reference/rest-spec.json lists the errorCode `reduce_only_invalid_tif`
+        // on POST /v1/perps/orders; the rule itself is not spelled out in the prose docs.
+        reduceOnlyTif: ["IOC"],
+        clientOrderId: true,
+        orderAck: "sync",
+        tpsl: "attached",
+        amend: "cancelReplace",
+        batchPlaceMax: 20,
+        marginModes: ["cross"],
+        withdrawAssets: ["USDC"],
+    },
+    rateLimit: { capacity: 1, refillPerSec: 1, weights: null },
+    // Docs (account-set-up, about): "outside the U.S., Panama and other prohibited
+    // jurisdictions". The remaining prohibited list is only in the Terms of Service.
+    restrictedRegions: ["US", "PA"],
+    symbolIdentity: "baseTicker",
+    publicData,
+    // §12: separate spot wallet + POST /v1/spot/transfers (spot ↔ margin).
+    spot: {
+        accountModel: "separate",
+        quoteAssets: { mainnet: ["USDC"], testnet: ["USDC"] },
+        capabilities: { limitOrder: true, orderbook: true, cancel: true, transfer: true },
+        async createSpot(perp) {
+            const [{ OndoAdapter }, { OndoSpotAdapter }] = await Promise.all([
+                import("../ondo/adapter.js"), import("../ondo/spot.js"),
+            ]);
+            if (!(perp instanceof OndoAdapter))
+                throw new Error(`ondo spot needs an OndoAdapter (got ${perp.name})`);
+            const spot = new OndoSpotAdapter(perp);
+            await spot.init();
+            return spot;
+        },
+    },
+    maxSlippageBps: 5000,
+    builderFee: BUILDER_FEE_CAPABILITIES["ondo"],
+    create: async (ctx) => {
+        const adapter = new (await import("../ondo/adapter.js")).OndoAdapter(ondoVenue, ctx);
+        // Builder code: only settings builder.ondo (off by default). Ondo has no approval step.
+        const { loadSettings } = await import("../../settings.js");
+        const { resolveBuilderGate } = await import("../builder-fee.js");
+        adapter.builderFee = resolveBuilderGate("ondo", ctx, loadSettings().builder, null, () => "");
+        return adapter;
+    },
+};

package/dist/exchanges/venues/pacifica.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Pacifica venue definition (design §10.1, §10.8, §10.13 #4).
+ * Adapter + public-data code are loaded lazily (§10.10).
+ */
+import type { VenueDefinition } from "../venue.js";
+/** Pacifica `client_order_id` format: "Full UUID string" (docs.pacifica.fi rest-api orders/create-limit-order). */
+export declare const PACIFICA_UUID_RE: RegExp;
+export declare const pacificaVenue: VenueDefinition;