perp-cli 0.14.3 → 0.15.0

package/dist/exchanges/venues/lighter-family.d.ts

@@ -1,6 +1,5 @@
 /**
  * Lighter-family constants shared by the `lighter` and `lighter-rh` venues
- * (design §4 "Lighter RH" row, §10.3–§10.5, §10.8, §10.13 #4).
  *
  * Both venues run the same API/engine and the same LighterAdapter class; they
  * differ only in the values below. This module has no runtime imports so venue
@@ -11,8 +10,7 @@ export type LighterVenueId = "lighter" | "lighter-rh";
 /**
  * Lighter (main). REST hosts are the values LighterAdapter used before
  * venue-parameterization. Mainnet WS is the one ws-feeds.ts connects to.
- * Testnet WS is not in code or docs we hold → null (a WS upgrade on
- * wss://testnet.zklighter.elliot.ai/stream answered 101 on 2026-09-30, but that is a probe, not a source).
+ * Testnet WS per apidocs.lighter.xyz websocket-reference (opened in the 2026-10-13 ws probe).
  * explorerUrl is the explorer API host; callers append `/api/...`
  * (lighter-spot.ts uses `${explorerUrl}/api/markets`). The testnet explorer host
  * is the one lighter-ts-sdk documented (`https://testnet.explorer.elliot.ai/api`).
@@ -30,7 +28,8 @@ export declare const LIGHTER_NETWORKS: {
  * explorerUrl is the explorer **API** host (`https://explorerapi.rh.lighter.xyz/api/`,
  * rate-limits.md); no UI explorer URL is documented.
  * Testnet WS is not documented → null (a WS upgrade on
- * wss://api.rh-testnet.lighter.xyz/stream answered 101 on 2026-09-30).
+ * wss://api.rh-testnet.lighter.xyz/stream answered 101 on 2026-09-30, but HTTP 403 from
+ * CloudFront in the 2026-10-13 ws probe).
  * Testnet explorer is not documented → null.
  * rpcUrl (mainnet): Robinhood Chain RPC — the L1 the RH contract lives on
  * (GET /api/v1/layer1BasicInfo l1_providers chainId 4663; eth_chainId 0x1237 verified
@@ -46,22 +45,21 @@ export declare function lighterFamilyNetworks(venue: LighterVenueId): {
     testnet: VenueNetworkConfig;
 };
 /**
- * §10.8 + §10.13 #4 + §13.3. timeInForce lists the CLI inputs the adapter accepts:
+ * timeInForce lists the CLI inputs the adapter accepts:
  * GTC is mapped to GTT (28-day expiry, LIGHTER_GTT_EXPIRY_MS) by LighterAdapter.limitOrder;
  * ALO is sent as time-in-force 2 (POST_ONLY); FOK is not offered.
- * clientOrderId (§13.10 #9): Lighter `clientOrderIndex`, a numeric id — CLI format rule
+ * clientOrderId: Lighter `clientOrderIndex`, a numeric id — CLI format rule
  * in LIGHTER_CLIENT_ORDER_INDEX_MAX / lighterClientOrderIndex() (lighter.ts).
  */
 export declare const LIGHTER_CAPABILITIES: VenueCapabilities;
 /**
  * GTC/GTT (and post-only) resting-order lifetime on both Lighter venues: orderExpiry -1 is
  * resolved to now + 28 days by LighterWasmSigner (the venue allows 5 min – 30 days).
- * Recorded as the execution record's expiry for GTC→GTT (§13.10 #14).
+ * Recorded as the execution record's expiry for GTC→GTT.
  */
 export declare const LIGHTER_GTT_EXPIRY_MS: number;
 /**
- * The ONE declared reference price for slippage-bounded orders on both Lighter venues
- * (§13.10 #5): mid of best bid / best ask from `/api/v1/orderBookOrders`. Replaces
+ * The ONE declared reference price for slippage-bounded orders on both Lighter venues: mid of best bid / best ask from `/api/v1/orderBookOrders`. Replaces
  * orderBookDetails `last_trade_price` (stale on thin RH stock books). No runtime
  * substitute: a missing side → PRICE_STALE before anything is sent.
  */

package/dist/exchanges/venues/lighter-family.js

@@ -1,6 +1,5 @@
 /**
  * Lighter-family constants shared by the `lighter` and `lighter-rh` venues
- * (design §4 "Lighter RH" row, §10.3–§10.5, §10.8, §10.13 #4).
  *
  * Both venues run the same API/engine and the same LighterAdapter class; they
  * differ only in the values below. This module has no runtime imports so venue
@@ -9,8 +8,7 @@
 /**
  * Lighter (main). REST hosts are the values LighterAdapter used before
  * venue-parameterization. Mainnet WS is the one ws-feeds.ts connects to.
- * Testnet WS is not in code or docs we hold → null (a WS upgrade on
- * wss://testnet.zklighter.elliot.ai/stream answered 101 on 2026-09-30, but that is a probe, not a source).
+ * Testnet WS per apidocs.lighter.xyz websocket-reference (opened in the 2026-10-13 ws probe).
  * explorerUrl is the explorer API host; callers append `/api/...`
  * (lighter-spot.ts uses `${explorerUrl}/api/markets`). The testnet explorer host
  * is the one lighter-ts-sdk documented (`https://testnet.explorer.elliot.ai/api`).
@@ -29,7 +27,7 @@ export const LIGHTER_NETWORKS = {
     },
     testnet: {
         restUrl: "https://testnet.zklighter.elliot.ai",
-        wsUrl: null,
+        wsUrl: "wss://testnet.zklighter.elliot.ai/stream",
         explorerUrl: "https://testnet.explorer.elliot.ai",
         signingChainId: 300,
         settlementChain: "ethereum",
@@ -48,7 +46,8 @@ export const LIGHTER_NETWORKS = {
  * explorerUrl is the explorer **API** host (`https://explorerapi.rh.lighter.xyz/api/`,
  * rate-limits.md); no UI explorer URL is documented.
  * Testnet WS is not documented → null (a WS upgrade on
- * wss://api.rh-testnet.lighter.xyz/stream answered 101 on 2026-09-30).
+ * wss://api.rh-testnet.lighter.xyz/stream answered 101 on 2026-09-30, but HTTP 403 from
+ * CloudFront in the 2026-10-13 ws probe).
  * Testnet explorer is not documented → null.
  * rpcUrl (mainnet): Robinhood Chain RPC — the L1 the RH contract lives on
  * (GET /api/v1/layer1BasicInfo l1_providers chainId 4663; eth_chainId 0x1237 verified
@@ -98,17 +97,17 @@ export function lighterFamilyNetworks(venue) {
     }
 }
 /**
- * §10.8 + §10.13 #4 + §13.3. timeInForce lists the CLI inputs the adapter accepts:
+ * timeInForce lists the CLI inputs the adapter accepts:
  * GTC is mapped to GTT (28-day expiry, LIGHTER_GTT_EXPIRY_MS) by LighterAdapter.limitOrder;
  * ALO is sent as time-in-force 2 (POST_ONLY); FOK is not offered.
- * clientOrderId (§13.10 #9): Lighter `clientOrderIndex`, a numeric id — CLI format rule
+ * clientOrderId: Lighter `clientOrderIndex`, a numeric id — CLI format rule
  * in LIGHTER_CLIENT_ORDER_INDEX_MAX / lighterClientOrderIndex() (lighter.ts).
  */
 export const LIGHTER_CAPABILITIES = {
     marketOrder: "slippageBounded",
     // ALO → time-in-force 2 = POST_ONLY (apidocs trading.md; signed by the official lighter-go
     // v1.0.9 WASM). Testnet confirmation that a crossing post-only is cancelled
-    // (canceled-post-only) is still pending (design §11).
+    // (canceled-post-only) is still pending.
     timeInForce: ["GTC", "GTT", "IOC", "ALO"],
     reduceOnlyTif: null,
     clientOrderId: true,
@@ -122,12 +121,11 @@ export const LIGHTER_CAPABILITIES = {
 /**
  * GTC/GTT (and post-only) resting-order lifetime on both Lighter venues: orderExpiry -1 is
  * resolved to now + 28 days by LighterWasmSigner (the venue allows 5 min – 30 days).
- * Recorded as the execution record's expiry for GTC→GTT (§13.10 #14).
+ * Recorded as the execution record's expiry for GTC→GTT.
  */
 export const LIGHTER_GTT_EXPIRY_MS = 28 * 24 * 60 * 60 * 1000;
 /**
- * The ONE declared reference price for slippage-bounded orders on both Lighter venues
- * (§13.10 #5): mid of best bid / best ask from `/api/v1/orderBookOrders`. Replaces
+ * The ONE declared reference price for slippage-bounded orders on both Lighter venues: mid of best bid / best ask from `/api/v1/orderBookOrders`. Replaces
  * orderBookDetails `last_trade_price` (stale on thin RH stock books). No runtime
  * substitute: a missing side → PRICE_STALE before anything is sent.
  */

package/dist/exchanges/venues/lighter-rh.d.ts

@@ -1,7 +1,7 @@
 /**
- * Lighter RH venue definition (design §4 "Lighter RH", §10.1, §10.3, §10.8).
+ * Lighter RH venue definition.
  * Same engine/adapter as Lighter; USDG collateral on the Robinhood chain.
- * Master key = OWS wallet only (no env / raw-PK tier); referral off (§10.3).
+ * Master key = OWS wallet only (no env / raw-PK tier); referral off.
  */
 import type { VenueDefinition } from "../venue.js";
 export declare const lighterRhVenue: VenueDefinition;

package/dist/exchanges/venues/lighter-rh.js

@@ -1,7 +1,7 @@
 /**
- * Lighter RH venue definition (design §4 "Lighter RH", §10.1, §10.3, §10.8).
+ * Lighter RH venue definition.
  * Same engine/adapter as Lighter; USDG collateral on the Robinhood chain.
- * Master key = OWS wallet only (no env / raw-PK tier); referral off (§10.3).
+ * Master key = OWS wallet only (no env / raw-PK tier); referral off.
  */
 import { LIGHTER_RH_CAPABILITIES, LIGHTER_RH_NETWORKS, LIGHTER_RH_RATE_LIMIT } from "./lighter-family.js";
 import { BUILDER_FEE_CAPABILITIES } from "../builder-fee.js";
@@ -22,18 +22,19 @@ export const lighterRhVenue = {
     agentKeyKind: "lighter-l2",
     secretStorage: { kind: "perp-keystore", dir: "lighter-rh-agents" },
     networks: LIGHTER_RH_NETWORKS,
-    // "Lighter RH is the same API/engine as Lighter" → Lighter's basis/interval (§10.1; live-data check pending).
+    // "Lighter RH is the same API/engine as Lighter" → Lighter's basis/interval (live-data check pending).
     fundingRateBasis: { kind: "perHours", hours: 8 },
     settlementIntervalHours: 1,
     fundingVerified: true,
     roles: ["marketData", "account", "trading"],
+    gatedRoles: null,
     capabilities: LIGHTER_RH_CAPABILITIES,
-    // Applied by the rate limiter (§10.9: new venues + lighter-rh).
+    // Applied by the rate limiter (new venues + lighter-rh).
     rateLimit: LIGHTER_RH_RATE_LIMIT,
     restrictedRegions: [],
     symbolIdentity: "baseTicker",
     publicData,
-    // §12: per account (account_trading_mode, read by LighterSpotAdapter.init): Unified (1) shares
+    // per account (account_trading_mode, read by LighterSpotAdapter.init): Unified (1) shares
     // the collateral between spot and perp (no transfer); Classic (0) = separate spot balance +
     // self-transfer of the venue collateral.
     spot: {
@@ -54,5 +55,6 @@ export const lighterRhVenue = {
     },
     maxSlippageBps: 5000,
     builderFee: BUILDER_FEE_CAPABILITIES["lighter-rh"],
+    apiStatus: { kind: "official" },
     create: async (ctx) => (await import("./create-helpers.js")).createLighterFamily("lighter-rh", ctx),
 };

package/dist/exchanges/venues/lighter.d.ts

@@ -1,5 +1,5 @@
 /**
- * Lighter (main) venue definition (design §10.1, §10.8, §10.13 #4).
+ * Lighter (main) venue definition.
  * Shares LighterAdapter and constants with lighter-rh (./lighter-family.ts).
  */
 import type { VenueDefinition } from "../venue.js";

package/dist/exchanges/venues/lighter.js

@@ -1,5 +1,5 @@
 /**
- * Lighter (main) venue definition (design §10.1, §10.8, §10.13 #4).
+ * Lighter (main) venue definition.
  * Shares LighterAdapter and constants with lighter-rh (./lighter-family.ts).
  */
 import { LIGHTER_CAPABILITIES, LIGHTER_NETWORKS, LIGHTER_RATE_LIMIT } from "./lighter-family.js";
@@ -25,13 +25,14 @@ export const lighterVenue = {
     settlementIntervalHours: 1,
     fundingVerified: true,
     roles: ["marketData", "account", "trading"],
+    gatedRoles: null,
     capabilities: LIGHTER_CAPABILITIES,
-    // Declared only — per §10.9 the limiter is applied to new venues + lighter-rh, not lighter.
+    // Declared only — per the limiter is applied to new venues + lighter-rh, not lighter.
     rateLimit: LIGHTER_RATE_LIMIT,
     restrictedRegions: [],
     symbolIdentity: "baseTicker",
     publicData,
-    // §12: per account (account_trading_mode, read by LighterSpotAdapter.init): Unified (1) shares
+    // per account (account_trading_mode, read by LighterSpotAdapter.init): Unified (1) shares
     // the collateral between spot and perp (no transfer); Classic (0) = separate spot balance +
     // self-transfer of the venue collateral.
     spot: {
@@ -51,5 +52,6 @@ export const lighterVenue = {
     },
     maxSlippageBps: 5000,
     builderFee: BUILDER_FEE_CAPABILITIES["lighter"],
+    apiStatus: { kind: "official" },
     create: async (ctx) => (await import("./create-helpers.js")).createLighterFamily("lighter", ctx),
 };

package/dist/exchanges/venues/ondo.d.ts

@@ -1,5 +1,5 @@
 /**
- * Ondo Perps venue definition (design §4, §10).
+ * Ondo Perps venue definition.
  *
  * Off-chain matching engine; collateral is USDC plus eligible Ondo Global
  * Markets tokenized stocks (docs collateral-assets). Hot-path key = HMAC API

package/dist/exchanges/venues/ondo.js

@@ -1,5 +1,5 @@
 /**
- * Ondo Perps venue definition (design §4, §10).
+ * Ondo Perps venue definition.
  *
  * Off-chain matching engine; collateral is USDC plus eligible Ondo Global
  * Markets tokenized stocks (docs collateral-assets). Hot-path key = HMAC API
@@ -81,10 +81,11 @@ export const ondoVenue = {
     settlementIntervalHours: 1,
     fundingVerified: true,
     roles: ["marketData", "account", "trading"],
+    gatedRoles: null,
     capabilities: {
         // The venue offers native market orders; the adapter sends every market order
         // as an IOC LIMIT at the tick-aligned protection price (mark ± resolved
-        // slippage, design §13.2).
+        // slippage).
         marketOrder: "native",
         timeInForce: ["GTC", "IOC", "ALO"],
         // A reduce-only limit order must be IOC: the venue refuses a resting one with HTTP 400
@@ -107,7 +108,7 @@ export const ondoVenue = {
     restrictedRegions: ["US", "PA"],
     symbolIdentity: "baseTicker",
     publicData,
-    // §12: separate spot wallet + POST /v1/spot/transfers (spot ↔ margin).
+    // separate spot wallet + POST /v1/spot/transfers (spot ↔ margin).
     spot: {
         accountModel: "separate",
         quoteAssets: { mainnet: ["USDC"], testnet: ["USDC"] },
@@ -125,6 +126,7 @@ export const ondoVenue = {
     },
     maxSlippageBps: 5000,
     builderFee: BUILDER_FEE_CAPABILITIES["ondo"],
+    apiStatus: { kind: "official" },
     create: async (ctx) => {
         const adapter = new (await import("../ondo/adapter.js")).OndoAdapter(ondoVenue, ctx);
         // Builder code: only settings builder.ondo (off by default). Ondo has no approval step.

package/dist/exchanges/venues/pacifica.d.ts

@@ -1,6 +1,6 @@
 /**
- * Pacifica venue definition (design §10.1, §10.8, §10.13 #4).
- * Adapter + public-data code are loaded lazily (§10.10).
+ * Pacifica venue definition.
+ * Adapter + public-data code are loaded lazily.
  */
 import type { VenueDefinition } from "../venue.js";
 /** Pacifica `client_order_id` format: "Full UUID string" (docs.pacifica.fi rest-api orders/create-limit-order). */

package/dist/exchanges/venues/pacifica.js

@@ -1,6 +1,6 @@
 /**
- * Pacifica venue definition (design §10.1, §10.8, §10.13 #4).
- * Adapter + public-data code are loaded lazily (§10.10).
+ * Pacifica venue definition.
+ * Adapter + public-data code are loaded lazily.
  */
 import { BUILDER_FEE_CAPABILITIES } from "../builder-fee.js";
 const publicData = {
@@ -50,6 +50,7 @@ export const pacificaVenue = {
     settlementIntervalHours: 1,
     fundingVerified: true,
     roles: ["marketData", "account", "trading"],
+    gatedRoles: null,
     capabilities: {
         marketOrder: "slippageBounded",
         timeInForce: ["GTC", "IOC", "ALO", "TOB"],
@@ -68,12 +69,12 @@ export const pacificaVenue = {
     // docs.pacifica.fi "Rate limits": "Pacifica uses a credit-based rate limiting system with a
     // 60-second rolling window." Tier "Unidentified IP | 125" base credits/60s (valid API Config
     // Key: 300); "Standard request/action | 1" credit.
-    // Declared only — per §10.9 the limiter is applied to new venues + lighter-rh.
+    // Declared only — per the limiter is applied to new venues + lighter-rh.
     rateLimit: { capacity: 125, refillPerSec: 125 / 60, weights: null },
     restrictedRegions: [],
     symbolIdentity: "baseTicker",
     publicData,
-    // §12: spot (SOL-USDC) shares the perp account — USDC is perp margin, no transfer.
+    // spot (SOL-USDC) shares the perp account — USDC is perp margin, no transfer.
     spot: {
         accountModel: "unified",
         quoteAssets: { mainnet: ["USDC"], testnet: ["USDC"] },
@@ -91,5 +92,6 @@ export const pacificaVenue = {
     },
     maxSlippageBps: 5000,
     builderFee: BUILDER_FEE_CAPABILITIES["pacifica"],
+    apiStatus: { kind: "official" },
     create: async (ctx) => (await import("./create-helpers.js")).createPacifica(ctx),
 };

package/dist/exchanges/venues/qfex.d.ts

@@ -1,5 +1,5 @@
 /**
- * QFEX venue definition (design §14.1 as amended by §14.12).
+ * QFEX venue definition.
  *
  * TradFi perpetuals (equities, indices, commodities; no spot) on a custodial, off-chain
  * matching engine. All markets are cross-margin, margin asset USDC. Orders go over the Trade

package/dist/exchanges/venues/qfex.js

@@ -1,5 +1,5 @@
 /**
- * QFEX venue definition (design §14.1 as amended by §14.12).
+ * QFEX venue definition.
  *
  * TradFi perpetuals (equities, indices, commodities; no spot) on a custodial, off-chain
  * matching engine. All markets are cross-margin, margin asset USDC. Orders go over the Trade
@@ -71,12 +71,13 @@ export const qfexVenue = {
     // hourly × 8760 overstates it. Until both are settled QFEX is not a funding-arb venue.
     fundingVerified: false,
     roles: ["marketData", "account", "trading"],
+    gatedRoles: null,
     capabilities: {
         // The venue offers a native MARKET order (bounded only by the price band — docs /qfex/risk-limits
         // "Dynamic price bands": 1.65%–10% by product preset and session; "integrations should use
         // that live value rather than hardcoding a percentage"); the
         // adapter sends every market order as an IOC LIMIT at the tick-aligned protection price
-        // (mark ± resolved slippage, design §13.2) — the same declaration as Ondo.
+        // (mark ± resolved slippage) — the same declaration as Ondo.
         marketOrder: "native",
         // ALO = order_type "ALO" + GTC.
         timeInForce: ["GTC", "IOC", "FOK", "ALO"],
@@ -123,6 +124,7 @@ export const qfexVenue = {
     // Widest documented price band (equities at the open: 10%). The order's own band is checked before sending.
     maxSlippageBps: 1000,
     builderFee: BUILDER_FEE_CAPABILITIES["qfex"],
+    apiStatus: { kind: "official" },
     create: async (ctx) => {
         const { QfexAdapter } = await import("../qfex/adapter.js");
         const adapter = new QfexAdapter(qfexVenue, ctx);

package/dist/exchanges/venues/risex-release.d.ts

@@ -0,0 +1,14 @@
+/**
+ * RISEx release switch (owner decision 2026-10-19: new venues ship in phases).
+ *
+ * Phase 1 (0.15.0): RISEx is read-only — market data and public-by-address account reads.
+ * Phase 2 (a later release): trading. Flip this to `true`; nothing else needs to change.
+ *
+ * false removes the "trading" role from the RISEx venue definition (risex.ts), so every trading /
+ * signer / agent / bot / MCP-write path refuses with CAPABILITY_UNSUPPORTED through the role
+ * mechanism (venue.ts roleUnsupported()), and the adapter refuses writes itself as well.
+ * The trading code and its tests stay; those tests enable the switch with
+ * `vi.mock(".../venues/risex-release.js", () => ({ RISEX_TRADING_ENABLED: true }))`.
+ * Kept in its own module so tests can mock it without replacing the venue definition.
+ */
+export declare const RISEX_TRADING_ENABLED: boolean;

package/dist/exchanges/venues/risex-release.js

@@ -0,0 +1,14 @@
+/**
+ * RISEx release switch (owner decision 2026-10-19: new venues ship in phases).
+ *
+ * Phase 1 (0.15.0): RISEx is read-only — market data and public-by-address account reads.
+ * Phase 2 (a later release): trading. Flip this to `true`; nothing else needs to change.
+ *
+ * false removes the "trading" role from the RISEx venue definition (risex.ts), so every trading /
+ * signer / agent / bot / MCP-write path refuses with CAPABILITY_UNSUPPORTED through the role
+ * mechanism (venue.ts roleUnsupported()), and the adapter refuses writes itself as well.
+ * The trading code and its tests stay; those tests enable the switch with
+ * `vi.mock(".../venues/risex-release.js", () => ({ RISEX_TRADING_ENABLED: true }))`.
+ * Kept in its own module so tests can mock it without replacing the venue definition.
+ */
+export const RISEX_TRADING_ENABLED = false;

package/dist/exchanges/venues/risex.d.ts

@@ -0,0 +1,31 @@
+/**
+ * RISEx — fully on-chain perps order book on RISE chain (chainId 4153), USDC collateral.
+ *
+ * Two keys (developer.rise.trade "Integration"): the account (master EVM wallet) signs setup only;
+ * a registered session SIGNER signs every order / cancel / leverage / margin action with an EIP-712
+ * VerifyWitness permit (the server submits it and pays gas). perp-cli registers the signer with the
+ * master and then restricts it ON-CHAIN to the trading permission (no fund movement), and keeps its
+ * key in OWS wallet `agent-risex-<master>[-testnet]` (SSOT Rule #3).
+ *
+ * RELEASE PHASE: trading is implemented but switched OFF in this release (risex-release.ts
+ * RISEX_TRADING_ENABLED). RISEx is read-only here — market data and public-by-address account
+ * reads; every trading / signer path refuses with CAPABILITY_UNSUPPORTED (RISEX_TRADING_GATE).
+ *
+ * Deposits and withdrawals are app-only (owner decision 2026-10-13): `funds deposit|withdraw risex`
+ * refuse with CAPABILITY_UNSUPPORTED and point to app.rise.trade. Account reads are public by
+ * address. TP/SL and builder fees are not implemented yet.
+ * Not registered here; the registry module owns registerVenue().
+ */
+import type { VenueDefinition } from "../venue.js";
+export declare const RISEX_APP_URL = "https://app.rise.trade";
+/** The uniform deposit / withdraw refusal (owner decision: funds move through the RISEx app only). */
+export declare const RISEX_FUNDS_APP_ONLY: {
+    readonly reason: "RISEx deposits and withdrawals are done in the RISEx app; perp-cli does not move RISEx funds";
+    readonly remediation: "Deposit / withdraw at https://app.rise.trade (Portfolio → Deposit / Withdraw). perp-cli reads RISEx market data and your account (read-only in this release)";
+};
+/** The uniform refusal for every RISEx trading / signer path while RISEX_TRADING_ENABLED is false. */
+export declare const RISEX_TRADING_GATE: {
+    readonly reason: "RISEx trading is planned for a later perp-cli release; in this version RISEx is read-only (market data and account reads)";
+    readonly remediation: "Trade RISEx in the RISEx app (https://app.rise.trade). perp-cli shows RISEx market data (perp -e risex market list|prices|funding|book) and account reads (perp -e risex portfolio, perp -e risex account positions)";
+};
+export declare const risexVenue: VenueDefinition;

package/dist/exchanges/venues/risex.js

@@ -0,0 +1,116 @@
+/**
+ * RISEx — fully on-chain perps order book on RISE chain (chainId 4153), USDC collateral.
+ *
+ * Two keys (developer.rise.trade "Integration"): the account (master EVM wallet) signs setup only;
+ * a registered session SIGNER signs every order / cancel / leverage / margin action with an EIP-712
+ * VerifyWitness permit (the server submits it and pays gas). perp-cli registers the signer with the
+ * master and then restricts it ON-CHAIN to the trading permission (no fund movement), and keeps its
+ * key in OWS wallet `agent-risex-<master>[-testnet]` (SSOT Rule #3).
+ *
+ * RELEASE PHASE: trading is implemented but switched OFF in this release (risex-release.ts
+ * RISEX_TRADING_ENABLED). RISEx is read-only here — market data and public-by-address account
+ * reads; every trading / signer path refuses with CAPABILITY_UNSUPPORTED (RISEX_TRADING_GATE).
+ *
+ * Deposits and withdrawals are app-only (owner decision 2026-10-13): `funds deposit|withdraw risex`
+ * refuse with CAPABILITY_UNSUPPORTED and point to app.rise.trade. Account reads are public by
+ * address. TP/SL and builder fees are not implemented yet.
+ * Not registered here; the registry module owns registerVenue().
+ */
+import { RISEX_TRADING_ENABLED } from "./risex-release.js";
+export const RISEX_APP_URL = "https://app.rise.trade";
+/** The uniform deposit / withdraw refusal (owner decision: funds move through the RISEx app only). */
+export const RISEX_FUNDS_APP_ONLY = {
+    reason: "RISEx deposits and withdrawals are done in the RISEx app; perp-cli does not move RISEx funds",
+    remediation: `Deposit / withdraw at ${RISEX_APP_URL} (Portfolio → Deposit / Withdraw). perp-cli reads RISEx market data and your account (read-only in this release)`,
+};
+/** The uniform refusal for every RISEx trading / signer path while RISEX_TRADING_ENABLED is false. */
+export const RISEX_TRADING_GATE = {
+    reason: "RISEx trading is planned for a later perp-cli release; in this version RISEx is read-only (market data and account reads)",
+    remediation: `Trade RISEx in the RISEx app (${RISEX_APP_URL}). perp-cli shows RISEx market data (perp -e risex market list|prices|funding|book) and account reads (perp -e risex portfolio, perp -e risex account positions)`,
+};
+const publicData = {
+    async fetchFundingRates(net) {
+        return (await import("../risex/public.js")).risexPublicData.fetchFundingRates(net);
+    },
+    async fetchMarkets(net) {
+        return (await import("../risex/public.js")).risexPublicData.fetchMarkets(net);
+    },
+};
+export const risexVenue = {
+    id: "risex",
+    aliases: ["rise"],
+    displayName: "RISEx",
+    family: "risex",
+    masterKeyKind: "evm",
+    agentKeyKind: "evm",
+    secretStorage: { kind: "ows-wallet", dir: null },
+    networks: {
+        mainnet: {
+            restUrl: "https://api.rise.trade",
+            wsUrl: "wss://ws.rise.trade/ws",
+            explorerUrl: "https://explorer.risechain.com",
+            signingChainId: 4153,
+            settlementChain: "rise",
+            collateral: ["USDC"],
+            collateralAssetIndex: null,
+            rpcUrl: "https://rpc.risechain.com",
+            depositPins: null,
+        },
+        testnet: {
+            restUrl: "https://api.testnet.rise.trade",
+            // ws.testnet.rise.trade answered 525 on 2026-10-13; the API host serves the socket.
+            wsUrl: "wss://api.testnet.rise.trade/ws/",
+            explorerUrl: null,
+            signingChainId: 11155931,
+            settlementChain: "rise",
+            collateral: ["USDC"],
+            collateralAssetIndex: null,
+            rpcUrl: "https://testnet.riselabs.xyz",
+            depositPins: null,
+        },
+    },
+    // funding_interval = 3600e9 ns on every market; current_funding_rate is a fraction per hour.
+    fundingRateBasis: { kind: "perHours", hours: 1 },
+    settlementIntervalHours: 1,
+    // Verified 2026-10-14: current_funding_rate equals the last settled print in
+    // /funding-rate-history, and public /v1/account/funding-payments satisfy
+    // payment = position size × index price × rate for that hour, positive = paid. Evidence: raw
+    // records of 6 mainnet accounts / 23 markets / 31 hours in
+    // src/__tests__/fixtures/risex/funding-payments-evidence.json, checked by risex-evidence.test.ts.
+    fundingVerified: true,
+    // Phase 1 (0.15.0): read-only. The trading role comes back with RISEX_TRADING_ENABLED (phase 2).
+    roles: RISEX_TRADING_ENABLED ? ["marketData", "account", "trading"] : ["marketData", "account"],
+    gatedRoles: RISEX_TRADING_ENABLED ? null : { roles: ["trading"], ...RISEX_TRADING_GATE },
+    // Describes the implemented trading path; unreachable while the trading role is gated
+    // (requireCapabilities() checks the role first).
+    capabilities: {
+        // Market = order_type Market + IOC with a price_ticks bound (the venue requires FOK/IOC).
+        marketOrder: "slippageBounded",
+        // ALO = GTC + post_only. GTT is not offered (the ttl_units unit is undocumented).
+        timeInForce: ["GTC", "IOC", "FOK", "ALO"],
+        reduceOnlyTif: null,
+        clientOrderId: true,
+        // The response carries block_number (on-chain inclusion); IOC also carries filled_quantity.
+        orderAck: "sync",
+        tpsl: null,
+        amend: null,
+        batchPlaceMax: null,
+        marginModes: ["cross", "isolated"],
+        withdrawAssets: null,
+    },
+    // Documented 500 requests / 10 s per IP; Cloudflare 200 / 10 s observed — the stricter one.
+    rateLimit: { capacity: 200, refillPerSec: 20, weights: null },
+    // Not yet reviewed (open question Q-R5).
+    restrictedRegions: [],
+    symbolIdentity: "baseTicker",
+    publicData,
+    spot: null,
+    // The venue's own match_price_band (2% today) is checked per market before sending.
+    maxSlippageBps: 1000,
+    builderFee: null,
+    apiStatus: { kind: "official" },
+    async create(ctx) {
+        const { RisexAdapter } = await import("../risex/adapter.js");
+        return RisexAdapter.create(risexVenue, ctx);
+    },
+};

package/dist/exchanges/venues/txflow.d.ts

@@ -0,0 +1,18 @@
+/**
+ * TxFlow venue definition — MARKET DATA ONLY, through an UNOFFICIAL API.
+ *
+ * TxFlow publishes no official trading / data API yet (its "Platform API" is "Coming Soon").
+ * perp-cli reads the undocumented Hyperliquid-style `POST /info` endpoint and the WebSocket the
+ * TxFlow web app itself uses. It may change or be blocked without notice, so:
+ *  - apiStatus is "unofficial" and every user-facing surface labels it;
+ *  - funding is unverified (fundingVerified false): the rate is quoted in PERCENT per hour and is a
+ *    live, moving estimate — kept out of arb ranking unless --include-unverified;
+ *  - roles are ["marketData"]: every account / trading / funds / agent / builder / bot path
+ *    refuses with CAPABILITY_UNSUPPORTED before any request (venue.ts roleUnsupported()).
+ * There is no TxFlow order, transfer or account code at all.
+ * Not registered here; the registry module owns registerVenue().
+ */
+import type { VenueDefinition } from "../venue.js";
+export declare const TXFLOW_REST_URL = "https://api.txflow.com";
+export declare const TXFLOW_WS_URL = "wss://api.txflow.com/ws";
+export declare const txflowVenue: VenueDefinition;

package/dist/exchanges/venues/txflow.js

@@ -0,0 +1,77 @@
+/**
+ * TxFlow venue definition — MARKET DATA ONLY, through an UNOFFICIAL API.
+ *
+ * TxFlow publishes no official trading / data API yet (its "Platform API" is "Coming Soon").
+ * perp-cli reads the undocumented Hyperliquid-style `POST /info` endpoint and the WebSocket the
+ * TxFlow web app itself uses. It may change or be blocked without notice, so:
+ *  - apiStatus is "unofficial" and every user-facing surface labels it;
+ *  - funding is unverified (fundingVerified false): the rate is quoted in PERCENT per hour and is a
+ *    live, moving estimate — kept out of arb ranking unless --include-unverified;
+ *  - roles are ["marketData"]: every account / trading / funds / agent / builder / bot path
+ *    refuses with CAPABILITY_UNSUPPORTED before any request (venue.ts roleUnsupported()).
+ * There is no TxFlow order, transfer or account code at all.
+ * Not registered here; the registry module owns registerVenue().
+ */
+export const TXFLOW_REST_URL = "https://api.txflow.com";
+export const TXFLOW_WS_URL = "wss://api.txflow.com/ws";
+/** Lazy: public.ts (and `ws`) is only loaded when market data is actually requested. */
+const publicData = {
+    async fetchFundingRates(net) {
+        return (await import("../txflow/public.js")).txflowPublicData.fetchFundingRates(net);
+    },
+    async fetchMarkets(net) {
+        return (await import("../txflow/public.js")).txflowPublicData.fetchMarkets(net);
+    },
+};
+export const txflowVenue = {
+    id: "txflow",
+    aliases: ["txf"],
+    displayName: "TxFlow",
+    family: "txflow",
+    masterKeyKind: "none",
+    agentKeyKind: "none",
+    secretStorage: { kind: "none", dir: null },
+    networks: {
+        mainnet: {
+            restUrl: TXFLOW_REST_URL,
+            wsUrl: TXFLOW_WS_URL,
+            explorerUrl: null,
+            signingChainId: null,
+            settlementChain: "offchain",
+            collateral: ["USDC"],
+            collateralAssetIndex: null,
+            rpcUrl: null,
+            depositPins: null,
+        },
+        // No public testnet.
+        testnet: null,
+    },
+    // settlementIntervalMs = 3600000 on every market (marketTicker); the rate is percent per hour.
+    fundingRateBasis: { kind: "perHours", hours: 1 },
+    settlementIntervalHours: 1,
+    // Unofficial API; the percent unit is inferred (HL-style 0.00125 %/h baseline on most markets);
+    // the published value moves every tick (a live estimate, not a settled print).
+    fundingVerified: false,
+    roles: ["marketData"],
+    gatedRoles: null,
+    capabilities: null,
+    // No rate-limit headers are published; conservative.
+    rateLimit: { capacity: 20, refillPerSec: 2, weights: null },
+    restrictedRegions: [],
+    symbolIdentity: "baseTicker",
+    publicData,
+    spot: null,
+    // Unused (no trading role); the field is required by the definition shape.
+    maxSlippageBps: 1,
+    builderFee: null,
+    apiStatus: {
+        kind: "unofficial",
+        note: "undocumented HL-style API used by the app.txflow.com web app; read-only in perp-cli and may change or be blocked without notice",
+        docs: "https://docs.txflow.com",
+    },
+    // A public-only adapter: market data works, every account / trading method refuses.
+    async create(ctx) {
+        const { TxflowPublicAdapter } = await import("../txflow/adapter.js");
+        return new TxflowPublicAdapter(txflowVenue, ctx.network);
+    },
+};