perp-cli 0.14.3 → 0.16.0

package/dist/ws/pacifica-instrument.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Pacifica GET /info `instrument_type` (docs.pacifica.fi get-market-info; live: "perpetual" / "spot").
+ * The one perp rule for every Pacifica surface (WS directory, CLI adapter, funding, arb): only
+ * "perpetual" rows are perps — spot (SOL-USDC) and any other / future type are not.
+ */
+export declare function isPacificaPerpetual(row: {
+    instrument_type?: unknown;
+}): boolean;

package/dist/ws/pacifica-instrument.js

@@ -0,0 +1,8 @@
+/**
+ * Pacifica GET /info `instrument_type` (docs.pacifica.fi get-market-info; live: "perpetual" / "spot").
+ * The one perp rule for every Pacifica surface (WS directory, CLI adapter, funding, arb): only
+ * "perpetual" rows are perps — spot (SOL-USDC) and any other / future type are not.
+ */
+export function isPacificaPerpetual(row) {
+    return row.instrument_type === "perpetual";
+}

package/dist/ws/unclassified.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Tickers that name DIFFERENT instruments on different venues — listed everywhere, never matched
+ * across venues (canonical null): the one table for the CLI (assetClass "unclassified"), the
+ * public directory / MCP / arb and the WS directory (defaultCanonicalize). src/ws keeps it so the
+ * WS bundle needs no CLI module.
+ *  - SPX: the SPX6900 token on Hyperliquid / Aster / Lighter / Pacifica; its ticker equals the
+ *    canonical key of the S&P 500 index.
+ *  - Pacifica BP / CHIP: tickers that collide with a listed equity / ETF.
+ *  - Lighter BB / BOT / WEN / QNT: grouped with US equities there, each also a live crypto ticker.
+ *  - Lighter RH: every listed perp is classified (LIGHTER_RH_CLASS); an unlisted one is not.
+ */
+export declare const UNCLASSIFIED_TICKERS: Readonly<Record<string, ReadonlySet<string>>>;
+/** Lighter RH listing classification (live listings 2026-09-30). */
+export declare const LIGHTER_RH_CLASS: Readonly<Record<string, "crypto" | "commodity" | "etf" | "equity" | "preIpo">>;
+/** true = `base` on `venue` is never matched across venues (native markets only — not HIP-3 dexes). */
+export declare function isUnclassifiedTicker(venue: string, base: string): boolean;

package/dist/ws/unclassified.js

@@ -0,0 +1,43 @@
+/**
+ * Tickers that name DIFFERENT instruments on different venues — listed everywhere, never matched
+ * across venues (canonical null): the one table for the CLI (assetClass "unclassified"), the
+ * public directory / MCP / arb and the WS directory (defaultCanonicalize). src/ws keeps it so the
+ * WS bundle needs no CLI module.
+ *  - SPX: the SPX6900 token on Hyperliquid / Aster / Lighter / Pacifica; its ticker equals the
+ *    canonical key of the S&P 500 index.
+ *  - Pacifica BP / CHIP: tickers that collide with a listed equity / ETF.
+ *  - Lighter BB / BOT / WEN / QNT: grouped with US equities there, each also a live crypto ticker.
+ *  - Lighter RH: every listed perp is classified (LIGHTER_RH_CLASS); an unlisted one is not.
+ */
+export const UNCLASSIFIED_TICKERS = {
+    hyperliquid: new Set(["SPX"]),
+    aster: new Set(["SPX"]),
+    pacifica: new Set(["SPX", "BP", "CHIP"]),
+    lighter: new Set(["BB", "BOT", "WEN", "QNT", "SPX"]),
+};
+/** Lighter RH listing classification (live listings 2026-09-30). */
+export const LIGHTER_RH_CLASS = {
+    // crypto
+    BTC: "crypto", ETH: "crypto", SOL: "crypto", HYPE: "crypto", ZEC: "crypto", LIT: "crypto",
+    VVV: "crypto", SUI: "crypto", NEAR: "crypto", XRP: "crypto", CASHCAT: "crypto", PONS: "crypto",
+    // commodity (canonical via EXPLICIT_CANONICAL: XAU → GOLD, XAG → SILVER)
+    XAU: "commodity", XAG: "commodity",
+    // etf
+    SPY: "etf", QQQ: "etf", SOXL: "etf", SLV: "etf", USO: "etf", SGOV: "etf",
+    // equity
+    AAPL: "equity", AMZN: "equity", GOOGL: "equity", META: "equity", MSFT: "equity", NVDA: "equity",
+    TSLA: "equity", AMD: "equity", INTC: "equity", MU: "equity", TSM: "equity", ORCL: "equity",
+    PLTR: "equity", COIN: "equity", CRCL: "equity", CRWV: "equity", BABA: "equity", SNDK: "equity",
+    SMCI: "equity", SOFI: "equity", AMC: "equity", RGTI: "equity", QBTS: "equity", CLSK: "equity",
+    IREN: "equity", WULF: "equity", LUNR: "equity", ASTS: "equity", BE: "equity", USAR: "equity",
+    SPCX: "equity", SKHY: "equity",
+    // pre-IPO / private (explicit-only canonical → null unless mapped)
+    OPENAI: "preIpo", ANTHROPIC: "preIpo", SHEIN: "preIpo", ANSEM: "preIpo", AI: "preIpo",
+};
+/** true = `base` on `venue` is never matched across venues (native markets only — not HIP-3 dexes). */
+export function isUnclassifiedTicker(venue, base) {
+    const up = base.toUpperCase();
+    if (venue === "lighter-rh")
+        return LIGHTER_RH_CLASS[up] === undefined;
+    return UNCLASSIFIED_TICKERS[venue]?.has(up) === true;
+}

package/dist/ws-cli/credentials.d.ts

@@ -0,0 +1,62 @@
+/**
+ * CredentialProvider for perp-cli/ws backed by the CLI's existing stores (plan ws-0.14.4 §5.1).
+ * Node only (not part of perp-cli/ws). Identifiers come from the active OWS wallet and the registered
+ * venue agents in ~/.perp/settings.json; the Lighter auth token is created in memory by the same path
+ * the CLI uses (agent keystore → WASM signer). Never reads argv or env, never prompts: a keystore that
+ * needs a passphrase → PASSPHRASE_REQUIRED (the stream reports WS_AUTH_FAILED). Keys never leave this
+ * module; only the short-lived token is handed to the stream.
+ */
+import { getAgentForNetwork } from "../agent-wallet/store.js";
+type Network = "mainnet" | "testnet";
+type UserRef = {
+    venue: "hyperliquid";
+    address: `0x${string}`;
+} | {
+    venue: "pacifica";
+    account: string;
+} | {
+    venue: "lighter" | "lighter-rh";
+    accountIndex: number;
+} | {
+    venue: "arcus";
+    address: `0x${string}`;
+    subaccount: number | null;
+};
+export interface CliCredentialProvider {
+    /** Non-fatal notes about the resolved identity (e.g. Arcus all-subaccounts agent → subaccount 0). */
+    readonly warnings: string[];
+    user(): Promise<UserRef>;
+    authToken?(req: {
+        purpose: string;
+        maxTtlSec: number;
+    }): Promise<{
+        token: string;
+        expiresAt: number;
+    }>;
+}
+export type CliWsVenue = "hyperliquid" | "pacifica" | "lighter" | "lighter-rh" | "arcus";
+type LighterAgentMeta = NonNullable<ReturnType<typeof getAgentForNetwork>> & {
+    accountIndex: number;
+    apiKeyIndex: number;
+};
+/** Mints Lighter auth tokens; holds the agent key inside its WASM signer for the provider's lifetime. */
+export interface LighterTokenSigner {
+    createAuthToken(deadlineSec: number): Promise<string>;
+}
+/** Injectable for tests; the defaults are the CLI's own stores and signer. */
+export interface CliCredentialDeps {
+    owsAddresses(): {
+        evm: string;
+        solana: string;
+    };
+    lighterAgent(venue: "lighter" | "lighter-rh", network: Network): LighterAgentMeta;
+    arcusAgent(network: Network): {
+        ownerAddress: `0x${string}`;
+        accountIndex: number;
+    } | null;
+    /** Decrypt the agent key with the empty passphrase (never prompts). */
+    loadLighterKey(venue: "lighter" | "lighter-rh", network: Network, meta: LighterAgentMeta): Promise<string>;
+    makeLighterSigner(venue: "lighter" | "lighter-rh", network: Network, meta: LighterAgentMeta, key: string): Promise<LighterTokenSigner>;
+}
+export declare function createCliCredentialProvider(venue: CliWsVenue, network: Network, deps?: Partial<CliCredentialDeps>): CliCredentialProvider;
+export {};

package/dist/ws-cli/credentials.js

@@ -0,0 +1,126 @@
+/**
+ * CredentialProvider for perp-cli/ws backed by the CLI's existing stores (plan ws-0.14.4 §5.1).
+ * Node only (not part of perp-cli/ws). Identifiers come from the active OWS wallet and the registered
+ * venue agents in ~/.perp/settings.json; the Lighter auth token is created in memory by the same path
+ * the CLI uses (agent keystore → WASM signer). Never reads argv or env, never prompts: a keystore that
+ * needs a passphrase → PASSPHRASE_REQUIRED (the stream reports WS_AUTH_FAILED). Keys never leave this
+ * module; only the short-lived token is handed to the stream.
+ */
+import { PerpError } from "../errors.js";
+import { loadSettings } from "../settings.js";
+import { loadOws } from "../signer/ows-loader.js";
+import { getAgentForNetwork, getVenueAgentForNetwork } from "../agent-wallet/store.js";
+function activeOwsAddresses() {
+    const name = loadSettings().owsActiveWallet;
+    if (!name) {
+        throw new PerpError("NO_SIGNER_AVAILABLE", "No active OWS wallet", { remediation: "Run: perp wallet use <name>" });
+    }
+    const w = loadOws().getWallet(name);
+    const evm = w.accounts.find(a => a.chainId.startsWith("eip155:"))?.address;
+    const solana = w.accounts.find(a => a.chainId.startsWith("solana:"))?.address;
+    if (evm === undefined || solana === undefined) {
+        throw new PerpError("NO_SIGNER_AVAILABLE", `OWS wallet "${name}" has no EVM or Solana account`, { remediation: "Run: perp wallet show" });
+    }
+    return { evm, solana };
+}
+function lighterAgent(venue, network) {
+    const meta = getAgentForNetwork(venue, network);
+    if (!meta || typeof meta.accountIndex !== "number" || typeof meta.apiKeyIndex !== "number") {
+        throw new PerpError("AGENT_NOT_REGISTERED", `No ${venue} agent registered on ${network}`, { remediation: `Run: perp -e ${venue} wallet agent approve` });
+    }
+    return meta;
+}
+const DEFAULT_DEPS = {
+    owsAddresses: activeOwsAddresses,
+    lighterAgent,
+    arcusAgent: (network) => getVenueAgentForNetwork("arcus", network),
+    async loadLighterKey(venue, network, meta) {
+        const { loadLighterFamilyKey } = await import("../agent-wallet/lighter-keystore.js");
+        return loadLighterFamilyKey(venue, network, meta.accountIndex, meta.apiKeyIndex, "");
+    },
+    async makeLighterSigner(venue, network, meta, key) {
+        const { LighterAdapter } = await import("../exchanges/lighter.js");
+        const adapter = LighterAdapter.forVenue(venue, "", network === "testnet");
+        adapter.setAgentSigner(meta, key);
+        if (meta.userEvmAddress)
+            adapter.setAddress(meta.userEvmAddress);
+        await adapter.init();
+        return { createAuthToken: async (deadlineSec) => (await adapter.signer.createAuthToken(deadlineSec)).authToken };
+    },
+};
+/**
+ * Keystore decrypt failures with the empty passphrase mean "this keystore has a passphrase" →
+ * PASSPHRASE_REQUIRED. Every other keystore error keeps its code with a generic message (no path,
+ * no crypto detail, no key material).
+ */
+function keystoreError(venue, e) {
+    const code = e instanceof PerpError ? e.structured.code : "UNKNOWN";
+    const msg = e instanceof Error ? e.message : "";
+    if (code === "SIGNATURE_FAILED" && /LIGHTER_KEYSTORE_DECRYPT_FAILED: (?!corrupt JSON|unsupported)|Keystore decrypt failed/.test(msg)) {
+        return new PerpError("PASSPHRASE_REQUIRED", `${venue} agent keystore needs a passphrase (not prompted for a stream)`, {
+            remediation: "Use a keystore without a passphrase for streaming, or pass your own CredentialProvider.authToken",
+        });
+    }
+    const remediation = e instanceof PerpError ? e.structured.remediation : undefined;
+    return new PerpError(code, `${venue} agent keystore could not be read (${code})`, remediation === undefined ? undefined : { remediation });
+}
+export function createCliCredentialProvider(venue, network, deps = {}) {
+    const d = { ...DEFAULT_DEPS, ...deps };
+    const warnings = [];
+    let signer = null;
+    const provider = {
+        warnings,
+        async user() {
+            switch (venue) {
+                case "hyperliquid":
+                    return { venue, address: d.owsAddresses().evm };
+                case "pacifica":
+                    return { venue, account: d.owsAddresses().solana };
+                case "lighter":
+                case "lighter-rh":
+                    return { venue, accountIndex: d.lighterAgent(venue, network).accountIndex };
+                case "arcus": {
+                    const a = d.arcusAgent(network);
+                    if (a === null)
+                        throw new PerpError("AGENT_NOT_REGISTERED", `No arcus agent registered on ${network}`, { remediation: "Run: perp -e arcus wallet agent approve" });
+                    if (a.accountIndex === 255) {
+                        // 255 = an API key for ALL subaccounts; a stream follows one account → the venue default (0).
+                        const w = "arcus agent covers all subaccounts (255): streaming subaccount 0 (the venue default); pass your own CredentialProvider.user() for another subaccount";
+                        if (!warnings.includes(w))
+                            warnings.push(w);
+                        return { venue, address: a.ownerAddress, subaccount: null };
+                    }
+                    return { venue, address: a.ownerAddress, subaccount: a.accountIndex };
+                }
+            }
+        },
+    };
+    if (venue === "lighter" || venue === "lighter-rh") {
+        // One signer per provider: the agent key is decrypted once and lives only inside the WASM signer
+        // until the provider is dropped. A failed creation is not cached (the next call retries).
+        const getSigner = () => {
+            if (signer === null) {
+                signer = (async () => {
+                    const meta = d.lighterAgent(venue, network);
+                    let key;
+                    try {
+                        key = await d.loadLighterKey(venue, network, meta);
+                    }
+                    catch (e) {
+                        throw keystoreError(venue, e);
+                    }
+                    return d.makeLighterSigner(venue, network, meta, key);
+                })();
+                signer.catch(() => { signer = null; });
+            }
+            return signer;
+        };
+        provider.authToken = async ({ maxTtlSec }) => {
+            const s = await getSigner();
+            const deadlineSec = Math.floor(Date.now() / 1000) + maxTtlSec;
+            const token = await s.createAuthToken(deadlineSec);
+            return { token, expiresAt: deadlineSec * 1000 };
+        };
+    }
+    return provider;
+}

package/package.json

@@ -1,12 +1,40 @@
 {
   "name": "perp-cli",
-  "version": "0.14.3",
-  "description": "Multi-DEX Perpetual Futures CLI - Pacifica, Hyperliquid, Lighter, Aster, Lighter RH, Ondo Perps, Arcus",
+  "version": "0.16.0",
+  "description": "Multi-DEX perpetual futures CLI + MCP server for traders and AI agents — trade on Hyperliquid (incl. HIP-3), Pacifica, Lighter, Aster, Ondo, Arcus, QFEX and more; funding-rate arb, portfolio, bots, bridge. 31 MCP tools, agent skill, JSON output.",
   "bin": {
     "perp": "dist/index.js",
     "perp-mcp": "dist/mcp-server.js",
     "perp-guardrail": "dist/guardrail/perp-guardrail.js"
   },
+  "exports": {
+    "./ws": {
+      "types": "./dist/ws/index.d.ts",
+      "import": "./dist/ws/index.js",
+      "default": "./dist/ws/index.js"
+    },
+    "./ws/node": {
+      "types": "./dist/ws/node.d.ts",
+      "import": "./dist/ws/node.js",
+      "default": "./dist/ws/node.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "typesVersions": {
+    "*": {
+      "ws": [
+        "dist/ws/index.d.ts"
+      ],
+      "ws/node": [
+        "dist/ws/node.d.ts"
+      ]
+    }
+  },
+  "sideEffects": [
+    "./dist/index.js",
+    "./dist/mcp-server.js",
+    "./dist/guardrail/perp-guardrail.js"
+  ],
   "files": [
     "dist",
     "skills",
@@ -14,16 +42,20 @@
   ],
   "type": "module",
   "scripts": {
-    "build": "tsc",
+    "build": "tsc && tsup --config tsup.ws.config.ts && tsup --config tsup.perp-ws.config.ts",
     "dev": "tsc --watch",
     "test": "vitest run --exclude '**/integration/**'",
     "test:integration": "vitest run -c vitest.integration.config.ts",
     "test:all": "vitest run",
+    "test:conformance": "vitest run src/__tests__/conformance",
+    "test:conformance:live": "PERP_LIVE=1 vitest run -c vitest.conformance.live.config.ts",
+    "conformance:record": "tsx scripts/conformance/record.ts",
+    "release-qa": "node scripts/release-qa/run.mjs",
     "e2e": "tsx scripts/e2e/run.ts",
     "e2e:typecheck": "tsc -p scripts/e2e/tsconfig.json",
     "typecheck:test": "tsc -p tsconfig.test.json",
     "sync-skill-version": "node scripts/sync-skill-version.mjs",
-    "prepublishOnly": "node scripts/sync-skill-version.mjs && pnpm run build"
+    "prepublishOnly": "node scripts/sync-skill-version.mjs --check && node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && pnpm run build"
   },
   "keywords": [
     "pacifica",
@@ -35,6 +67,12 @@
     "ondo",
     "ondo-perps",
     "arcus",
+    "qfex",
+    "risex",
+    "rise-chain",
+    "txflow",
+    "variational",
+    "grvt",
     "solana",
     "perps",
     "dex",
@@ -51,32 +89,41 @@
     "ethereum"
   ],
   "license": "MIT",
+  "author": "HypurrQuant",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/hypurrquant/perp-cli.git"
+  },
+  "homepage": "https://github.com/hypurrquant/perp-cli#readme",
+  "bugs": {
+    "url": "https://github.com/hypurrquant/perp-cli/issues"
+  },
   "engines": {
     "node": "^20.0.0 || ^22.0.0 || ^24.0.0"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.27.1",
+    "@modelcontextprotocol/sdk": "^1.32.1",
     "@msgpack/msgpack": "^3.1.3",
     "@open-wallet-standard/core": "1.3.2",
-    "@solana/web3.js": "^1.98.0",
-    "@types/react": "^19.2.14",
+    "@solana/web3.js": "^1.99.0",
     "bs58": "^6.0.0",
     "chalk": "^5.4.1",
     "cli-table3": "^0.6.5",
     "commander": "^13.1.0",
     "dotenv": "^16.5.0",
-    "ethers": "^6.13.2",
+    "ethers": "^6.17.0",
     "ink": "^6.8.0",
     "ink-spinner": "^5.0.0",
     "ink-table": "^3.1.0",
     "react": "^19.2.4",
     "tweetnacl": "^1.0.3",
-    "ws": "^8.19.0",
-    "yaml": "^2.8.2",
+    "ws": "^8.22.0",
+    "yaml": "^2.9.1",
     "zod": "^4.3.6"
   },
   "devDependencies": {
     "@types/node": "^25.3.3",
+    "@types/react": "^19.2.14",
     "@types/ws": "^8.18.1",
     "@vitest/coverage-v8": "^4.1.6",
     "ts-morph": "^27.0.2",
@@ -84,5 +131,19 @@
     "tsx": "^4.21.0",
     "typescript": "^5.7.0",
     "vitest": "^4.1.6"
+  },
+  "pnpm": {
+    "overrides": {
+      "hono@<4.13.7": "^4.13.13",
+      "@hono/node-server@<1.19.15": "^1.19.15",
+      "fast-uri@<3.1.8": "^3.1.8",
+      "proxy-addr@<2.0.8": "^2.0.8",
+      "path-to-regexp@>=8.0.0 <8.4.0": "^8.4.2",
+      "ip-address@<=10.7.0": "^10.7.4",
+      "qs@<6.16.0": "^6.16.0",
+      "body-parser@>=2.0.0 <2.3.0": "^2.3.0",
+      "ws@>=7.0.0 <7.5.11": "^7.5.13",
+      "uuid@>=11.0.0 <11.1.1": "^11.1.1"
+    }
   }
 }