pmxt-core 2.53.0 → 2.54.0

package/dist/BaseExchange.d.ts

@@ -2,7 +2,7 @@ import { AxiosInstance } from 'axios';
 import { SubscribedAddressSnapshot, SubscriptionOption } from './subscriber/base';
 import { Balance, BuiltOrder, CandleInterval, CreateOrderParams, Order, OrderBook, Position, PriceCandle, Trade, UnifiedEvent, UnifiedMarket, UnifiedSeries, UserTrade } from './types';
 import { ExecutionPriceResult } from './utils/math';
-import type { FetchMarketMatchesParams, FetchMatchesParams, FetchEventMatchesParams, FetchArbitrageParams, FetchMatchedMarketsParams, FetchMatchedPricesParams, MatchResult, EventMatchResult, PriceComparison, ArbitrageOpportunity, MatchedMarketPair, MatchedPricePair } from './router/types';
+import type { FetchMarketMatchesParams, FetchMatchesParams, FetchEventMatchesParams, FetchArbitrageParams, FetchMatchedMarketsParams, FetchMatchedPricesParams, MatchResult, EventMatchResult, PriceComparison, CompareMarketPricesParams, ArbitrageOpportunity, MatchedMarketPair, MatchedPricePair, AuthNonceResponse, AuthLoginResponse, AuthSession } from './router/types';
 export interface ApiEndpoint {
     /** HTTP verb for the endpoint (e.g. GET, POST). */
     method: string;
@@ -383,11 +383,62 @@ export declare abstract class PredictionMarketExchange {
     private _snapshot?;
     private _eventSnapshot?;
     private apiDescriptors;
+    protected _sessions: Map<string, AuthSession>;
     constructor(credentials?: ExchangeCredentials, options?: ExchangeOptions);
     private _rateLimit;
     get rateLimit(): number;
     set rateLimit(value: number);
     abstract get name(): string;
+    /**
+     * Get a cryptographic nonce for Web3 login.
+     * @param walletAddress - The wallet address to authenticate
+     */
+    getAuthNonce(walletAddress: string): Promise<AuthNonceResponse>;
+    /**
+     * Login with a signed nonce to obtain session credentials.
+     * @param walletAddress - The wallet address
+     * @param signature - The signature of the nonce message
+     * @param nonce - The nonce that was signed
+     */
+    loginWithSignature(walletAddress: string, signature: string, nonce: string): Promise<AuthLoginResponse>;
+    /**
+     * Logout and invalidate the current session.
+     * @param walletAddress - The wallet address to logout (optional)
+     */
+    logout(walletAddress?: string): Promise<void>;
+    /**
+     * Check if a session is active for the given wallet address.
+     * @param walletAddress - The wallet address to check
+     */
+    isSessionActive(walletAddress: string): Promise<boolean>;
+    /**
+     * Get the stored session for a wallet address.
+     *
+     * SECURITY: This is an in-process helper only and is deliberately excluded
+     * from the HTTP/RPC server surface (see EXCLUDED_METHODS in
+     * scripts/generate-openapi.js). It returns session credentials (apiKey /
+     * apiSecret / passphrase), so it must never be reachable over the network,
+     * where the wallet address — a public value — would otherwise let any caller
+     * retrieve another user's secrets.
+     * @param walletAddress - The wallet address
+     */
+    getSession(walletAddress: string): AuthSession | undefined;
+    /**
+     * Store a session in memory.
+     * @param walletAddress - The wallet address
+     * @param credentials - The session credentials
+     */
+    protected storeSession(walletAddress: string, credentials: AuthLoginResponse): void;
+    /**
+     * Remove a session from memory.
+     * @param walletAddress - The wallet address
+     */
+    protected removeSession(walletAddress: string): void;
+    /**
+     * Clean expired sessions from memory.
+     * Should be called periodically to prevent memory leaks.
+     */
+    protected cleanExpiredSessions(): void;
     /**
      * Introspection getter: returns info about all implicit API methods.
      */
@@ -818,7 +869,7 @@ export declare abstract class PredictionMarketExchange {
      * @param params - Match filter parameters (uses relation: 'identity' internally)
      * @returns Array of price comparisons across venues
      */
-    compareMarketPrices(params: FetchMatchesParams): Promise<PriceComparison[]>;
+    compareMarketPrices(params: CompareMarketPricesParams): Promise<PriceComparison[]>;
     /**
      * Find related markets across venues. Discovers subset/superset market relationships
      * where one market's outcome implies another, with live prices.

package/dist/BaseExchange.js

@@ -54,6 +54,7 @@ class PredictionMarketExchange {
     _snapshot;
     _eventSnapshot;
     apiDescriptors = [];
+    _sessions = new Map();
     constructor(credentials, options) {
         this.credentials = credentials;
         this._snapshotTTL = options?.snapshotTTL ?? 0;
@@ -128,6 +129,89 @@ class PredictionMarketExchange {
             delay: 1,
         });
     }
+    /**
+     * Get a cryptographic nonce for Web3 login.
+     * @param walletAddress - The wallet address to authenticate
+     */
+    async getAuthNonce(walletAddress) {
+        throw new Error(`getAuthNonce not implemented for ${this.name}`);
+    }
+    /**
+     * Login with a signed nonce to obtain session credentials.
+     * @param walletAddress - The wallet address
+     * @param signature - The signature of the nonce message
+     * @param nonce - The nonce that was signed
+     */
+    async loginWithSignature(walletAddress, signature, nonce) {
+        throw new Error(`loginWithSignature not implemented for ${this.name}`);
+    }
+    /**
+     * Logout and invalidate the current session.
+     * @param walletAddress - The wallet address to logout (optional)
+     */
+    async logout(walletAddress) {
+        throw new Error(`logout not implemented for ${this.name}`);
+    }
+    /**
+     * Check if a session is active for the given wallet address.
+     * @param walletAddress - The wallet address to check
+     */
+    async isSessionActive(walletAddress) {
+        const session = this._sessions.get(walletAddress);
+        if (!session)
+            return false;
+        if (session.credentials.expiresAt && session.credentials.expiresAt < Date.now()) {
+            this._sessions.delete(walletAddress);
+            return false;
+        }
+        return session.credentials.active !== false;
+    }
+    /**
+     * Get the stored session for a wallet address.
+     *
+     * SECURITY: This is an in-process helper only and is deliberately excluded
+     * from the HTTP/RPC server surface (see EXCLUDED_METHODS in
+     * scripts/generate-openapi.js). It returns session credentials (apiKey /
+     * apiSecret / passphrase), so it must never be reachable over the network,
+     * where the wallet address — a public value — would otherwise let any caller
+     * retrieve another user's secrets.
+     * @param walletAddress - The wallet address
+     */
+    getSession(walletAddress) {
+        return this._sessions.get(walletAddress);
+    }
+    /**
+     * Store a session in memory.
+     * @param walletAddress - The wallet address
+     * @param credentials - The session credentials
+     */
+    storeSession(walletAddress, credentials) {
+        this._sessions.set(walletAddress, {
+            walletAddress,
+            credentials,
+            createdAt: Date.now(),
+            lastUsedAt: Date.now(),
+        });
+    }
+    /**
+     * Remove a session from memory.
+     * @param walletAddress - The wallet address
+     */
+    removeSession(walletAddress) {
+        this._sessions.delete(walletAddress);
+    }
+    /**
+     * Clean expired sessions from memory.
+     * Should be called periodically to prevent memory leaks.
+     */
+    cleanExpiredSessions() {
+        const now = Date.now();
+        for (const [address, session] of this._sessions) {
+            if (session.credentials.expiresAt && session.credentials.expiresAt < now) {
+                this._sessions.delete(address);
+            }
+        }
+    }
     /**
      * Introspection getter: returns info about all implicit API methods.
      */

package/dist/exchanges/kalshi/api.d.ts

@@ -1,6 +1,6 @@
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/kalshi/Kalshi.yaml
- * Generated at: 2026-07-18T01:24:08.960Z
+ * Generated at: 2026-07-18T01:45:23.295Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 export declare const kalshiApiSpec: {

package/dist/exchanges/kalshi/api.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.kalshiApiSpec = void 0;
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/kalshi/Kalshi.yaml
- * Generated at: 2026-07-18T01:24:08.960Z
+ * Generated at: 2026-07-18T01:45:23.295Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 exports.kalshiApiSpec = {

package/dist/exchanges/limitless/api.d.ts

@@ -1,6 +1,6 @@
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/limitless/Limitless.yaml
- * Generated at: 2026-07-18T01:24:08.996Z
+ * Generated at: 2026-07-18T01:45:23.334Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 export declare const limitlessApiSpec: {

package/dist/exchanges/limitless/api.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.limitlessApiSpec = void 0;
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/limitless/Limitless.yaml
- * Generated at: 2026-07-18T01:24:08.996Z
+ * Generated at: 2026-07-18T01:45:23.334Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 exports.limitlessApiSpec = {

package/dist/exchanges/myriad/api.d.ts

@@ -1,6 +1,6 @@
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/myriad/myriad.yaml
- * Generated at: 2026-07-18T01:24:09.008Z
+ * Generated at: 2026-07-18T01:45:23.349Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 export declare const myriadApiSpec: {

package/dist/exchanges/myriad/api.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.myriadApiSpec = void 0;
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/myriad/myriad.yaml
- * Generated at: 2026-07-18T01:24:09.008Z
+ * Generated at: 2026-07-18T01:45:23.349Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 exports.myriadApiSpec = {

package/dist/exchanges/opinion/api.d.ts

@@ -1,6 +1,6 @@
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/opinion/opinion-openapi.yaml
- * Generated at: 2026-07-18T01:24:09.013Z
+ * Generated at: 2026-07-18T01:45:23.354Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 export declare const opinionApiSpec: {

package/dist/exchanges/opinion/api.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.opinionApiSpec = void 0;
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/opinion/opinion-openapi.yaml
- * Generated at: 2026-07-18T01:24:09.013Z
+ * Generated at: 2026-07-18T01:45:23.354Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 exports.opinionApiSpec = {

package/dist/exchanges/polymarket/api-clob.d.ts

@@ -1,6 +1,6 @@
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/polymarket/PolymarketClobAPI.yaml
- * Generated at: 2026-07-18T01:24:08.966Z
+ * Generated at: 2026-07-18T01:45:23.304Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 export declare const polymarketClobSpec: {

package/dist/exchanges/polymarket/api-clob.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.polymarketClobSpec = void 0;
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/polymarket/PolymarketClobAPI.yaml
- * Generated at: 2026-07-18T01:24:08.966Z
+ * Generated at: 2026-07-18T01:45:23.304Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 exports.polymarketClobSpec = {

package/dist/exchanges/polymarket/api-data.d.ts

@@ -1,6 +1,6 @@
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/polymarket/Polymarket_Data_API.yaml
- * Generated at: 2026-07-18T01:24:08.979Z
+ * Generated at: 2026-07-18T01:45:23.315Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 export declare const polymarketDataSpec: {

package/dist/exchanges/polymarket/api-data.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.polymarketDataSpec = void 0;
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/polymarket/Polymarket_Data_API.yaml
- * Generated at: 2026-07-18T01:24:08.979Z
+ * Generated at: 2026-07-18T01:45:23.315Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 exports.polymarketDataSpec = {

package/dist/exchanges/polymarket/api-gamma.d.ts

@@ -1,6 +1,6 @@
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/polymarket/PolymarketGammaAPI.yaml
- * Generated at: 2026-07-18T01:24:08.976Z
+ * Generated at: 2026-07-18T01:45:23.313Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 export declare const polymarketGammaSpec: {

package/dist/exchanges/polymarket/api-gamma.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.polymarketGammaSpec = void 0;
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/polymarket/PolymarketGammaAPI.yaml
- * Generated at: 2026-07-18T01:24:08.976Z
+ * Generated at: 2026-07-18T01:45:23.313Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 exports.polymarketGammaSpec = {

package/dist/exchanges/probable/api.d.ts

@@ -1,6 +1,6 @@
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/probable/probable.yaml
- * Generated at: 2026-07-18T01:24:09.002Z
+ * Generated at: 2026-07-18T01:45:23.342Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 export declare const probableApiSpec: {

package/dist/exchanges/probable/api.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.probableApiSpec = void 0;
 /**
  * Auto-generated from /home/runner/work/pmxt/pmxt/core/specs/probable/probable.yaml
- * Generated at: 2026-07-18T01:24:09.002Z
+ * Generated at: 2026-07-18T01:45:23.342Z
  * Do not edit manually -- run "npm run fetch:openapi" to regenerate.
  */
 exports.probableApiSpec = {

package/dist/exchanges/probable/auth.d.ts

@@ -1,5 +1,6 @@
 import { createClobClient } from '@prob/clob';
 import { ExchangeCredentials } from '../../BaseExchange';
+import { AuthNonceResponse, AuthLoginResponse } from '../../router/types';
 /**
  * Manages Probable authentication and CLOB client initialization.
  * Requires a privateKey and pre-generated API key triplet (apiKey, apiSecret, passphrase).
@@ -12,3 +13,28 @@ export declare class ProbableAuth {
     getClobClient(): ReturnType<typeof createClobClient>;
     getAddress(): string;
 }
+/**
+ * Get a nonce from Probable.
+ * Uses the implicit API endpoint 'getPublicApiV1AuthNonce'.
+ */
+export declare function getAuthNonce(walletAddress: string, callApi: Function): Promise<AuthNonceResponse>;
+/**
+ * Login to Probable with signature.
+ * Uses the implicit API endpoint 'postPublicApiV1AuthLogin'.
+ */
+export declare function loginWithSignature(walletAddress: string, signature: string, nonce: string, callApi: Function): Promise<AuthLoginResponse>;
+/**
+ * Logout from Probable.
+ * Uses the implicit API endpoint 'postPublicApiV1AuthLogout'.
+ */
+export declare function logout(callApi: Function): Promise<void>;
+/**
+ * Verify L1 signature.
+ * Uses the implicit API endpoint 'postPublicApiV1AuthVerifyL1'.
+ */
+export declare function verifyL1(walletAddress: string, signature: string, callApi: Function): Promise<boolean>;
+/**
+ * Verify L2 signature.
+ * Uses the implicit API endpoint 'postPublicApiV1AuthVerifyL2'.
+ */
+export declare function verifyL2(walletAddress: string, signature: string, callApi: Function): Promise<boolean>;

package/dist/exchanges/probable/auth.js

@@ -1,6 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ProbableAuth = void 0;
+exports.getAuthNonce = getAuthNonce;
+exports.loginWithSignature = loginWithSignature;
+exports.logout = logout;
+exports.verifyL1 = verifyL1;
+exports.verifyL2 = verifyL2;
 const clob_1 = require("@prob/clob");
 const accounts_1 = require("viem/accounts");
 const viem_1 = require("viem");
@@ -69,3 +74,88 @@ class ProbableAuth {
     }
 }
 exports.ProbableAuth = ProbableAuth;
+/**
+ * Get a nonce from Probable.
+ * Uses the implicit API endpoint 'getPublicApiV1AuthNonce'.
+ */
+async function getAuthNonce(walletAddress, callApi) {
+    try {
+        const response = await callApi('getPublicApiV1AuthNonce', { address: walletAddress });
+        return {
+            nonce: response.nonce,
+            messageToSign: response.message || response.messageToSign,
+            expiresAt: response.expiresAt,
+        };
+    }
+    catch (error) {
+        throw new Error(`Failed to get Probable auth nonce: ${error.message}`);
+    }
+}
+/**
+ * Login to Probable with signature.
+ * Uses the implicit API endpoint 'postPublicApiV1AuthLogin'.
+ */
+async function loginWithSignature(walletAddress, signature, nonce, callApi) {
+    try {
+        const response = await callApi('postPublicApiV1AuthLogin', {
+            address: walletAddress,
+            signature,
+            nonce,
+        });
+        return {
+            apiKey: response.apiKey,
+            apiSecret: response.apiSecret,
+            passphrase: response.passphrase,
+            expiresAt: response.expiresAt,
+            active: true,
+        };
+    }
+    catch (error) {
+        throw new Error(`Failed to login to Probable: ${error.message}`);
+    }
+}
+/**
+ * Logout from Probable.
+ * Uses the implicit API endpoint 'postPublicApiV1AuthLogout'.
+ */
+async function logout(callApi) {
+    try {
+        await callApi('postPublicApiV1AuthLogout', {});
+    }
+    catch (error) {
+        // Log but don't throw - logout should be best-effort
+        console.warn(`Failed to logout from Probable: ${error.message}`);
+    }
+}
+/**
+ * Verify L1 signature.
+ * Uses the implicit API endpoint 'postPublicApiV1AuthVerifyL1'.
+ */
+async function verifyL1(walletAddress, signature, callApi) {
+    try {
+        const response = await callApi('postPublicApiV1AuthVerifyL1', {
+            address: walletAddress,
+            signature,
+        });
+        return response.verified === true;
+    }
+    catch (error) {
+        return false;
+    }
+}
+/**
+ * Verify L2 signature.
+ * Uses the implicit API endpoint 'postPublicApiV1AuthVerifyL2'.
+ */
+async function verifyL2(walletAddress, signature, callApi) {
+    try {
+        const response = await callApi('postPublicApiV1AuthVerifyL2', {
+            address: walletAddress,
+            signature,
+        });
+        return response.verified === true;
+    }
+    catch (error) {
+        return false;
+    }
+}

package/dist/exchanges/probable/index.d.ts

@@ -1,4 +1,5 @@
 import { PredictionMarketExchange, MarketFetchParams, EventFetchParams, ExchangeCredentials, OHLCVParams, HistoryFilterParams, TradesParams, MyTradesParams } from '../../BaseExchange';
+import { AuthNonceResponse, AuthLoginResponse } from '../../router/types';
 import { UnifiedMarket, UnifiedEvent, OrderBook, PriceCandle, Trade, UserTrade, Order, Position, Balance, CreateOrderParams } from '../../types';
 import { ProbableWebSocketConfig } from './websocket';
 export declare class ProbableExchange extends PredictionMarketExchange {
@@ -14,6 +15,11 @@ export declare class ProbableExchange extends PredictionMarketExchange {
     get name(): string;
     protected mapImplicitApiError(error: any): any;
     private ensureAuth;
+    getAuthNonce(walletAddress: string): Promise<AuthNonceResponse>;
+    loginWithSignature(walletAddress: string, signature: string, nonce: string): Promise<AuthLoginResponse>;
+    logout(walletAddress?: string): Promise<void>;
+    verifyL1(walletAddress: string, signature: string): Promise<boolean>;
+    verifyL2(walletAddress: string, signature: string): Promise<boolean>;
     protected fetchMarketsImpl(params?: MarketFetchParams): Promise<UnifiedMarket[]>;
     protected fetchEventsImpl(params: EventFetchParams): Promise<UnifiedEvent[]>;
     /**

package/dist/exchanges/probable/index.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ProbableExchange = void 0;
 const BaseExchange_1 = require("../../BaseExchange");
 const auth_1 = require("./auth");
+const auth_2 = require("./auth");
 const websocket_1 = require("./websocket");
 const errors_1 = require("./errors");
 const errors_2 = require("../../errors");
@@ -29,7 +30,7 @@ class ProbableExchange extends BaseExchange_1.PredictionMarketExchange {
         this.rateLimit = 500;
         this.wsConfig = wsConfig;
         if (credentials?.privateKey && credentials?.apiKey && credentials?.apiSecret && credentials?.passphrase) {
-            this.auth = new auth_1.ProbableAuth(credentials);
+            this.auth = new auth_2.ProbableAuth(credentials);
         }
         const probableBaseUrl = credentials?.baseUrl || process.env.PROBABLE_BASE_URL || utils_1.DEFAULT_BASE_URL;
         const descriptor = (0, openapi_1.parseOpenApiSpec)(api_1.probableApiSpec, probableBaseUrl);
@@ -55,6 +56,26 @@ class ProbableExchange extends BaseExchange_1.PredictionMarketExchange {
         }
         return this.auth;
     }
+    async getAuthNonce(walletAddress) {
+        return (0, auth_1.getAuthNonce)(walletAddress, this.callApi.bind(this));
+    }
+    async loginWithSignature(walletAddress, signature, nonce) {
+        const credentials = await (0, auth_1.loginWithSignature)(walletAddress, signature, nonce, this.callApi.bind(this));
+        this.storeSession(walletAddress, credentials);
+        return credentials;
+    }
+    async logout(walletAddress) {
+        await (0, auth_1.logout)(this.callApi.bind(this));
+        if (walletAddress) {
+            this.removeSession(walletAddress);
+        }
+    }
+    async verifyL1(walletAddress, signature) {
+        return (0, auth_1.verifyL1)(walletAddress, signature, this.callApi.bind(this));
+    }
+    async verifyL2(walletAddress, signature) {
+        return (0, auth_1.verifyL2)(walletAddress, signature, this.callApi.bind(this));
+    }
     // --------------------------------------------------------------------------
     // Market Data (fetcher -> normalizer)
     // --------------------------------------------------------------------------

package/dist/router/types.d.ts

@@ -48,6 +48,19 @@ export interface ArbitrageOpportunity {
     /** Match confidence score (0.0 to 1.0). */
     confidence?: number;
 }
+/**
+ * Parameters for comparing market prices across venues.
+ */
+export interface CompareMarketPricesParams {
+    /** The source market ID to compare against. */
+    marketId: string;
+    /** Optional list of target market IDs to compare with. If not provided, the router finds matches automatically. */
+    targetMarketIds?: string[];
+    /** Minimum price difference to return. */
+    minDifference?: number;
+    /** Maximum number of results to return. */
+    limit?: number;
+}
 export interface FetchMarketMatchesParams {
     /** Keyword search across matched market titles. */
     query?: string;
@@ -68,6 +81,45 @@ export interface FetchMarketMatchesParams {
     /** Sort order. Browse mode only. */
     sort?: 'confidence' | 'volume' | 'priceDifference';
 }
+/**
+ * Response from /auth/nonce
+ */
+export interface AuthNonceResponse {
+    /** Random nonce to be signed */
+    nonce: string;
+    /** Human-readable message to sign */
+    messageToSign: string;
+    /** Optional expiry timestamp (milliseconds) */
+    expiresAt?: number;
+}
+/**
+ * Response from /auth/login
+ */
+export interface AuthLoginResponse {
+    /** API key for authenticated requests */
+    apiKey: string;
+    /** API secret for signing */
+    apiSecret: string;
+    /** Passphrase for trading */
+    passphrase?: string;
+    /** Session expiry timestamp (milliseconds) */
+    expiresAt?: number;
+    /** Whether session is active */
+    active?: boolean;
+}
+/**
+ * Session state stored in memory
+ */
+export interface AuthSession {
+    /** Wallet address that authenticated */
+    walletAddress: string;
+    /** Session credentials */
+    credentials: AuthLoginResponse;
+    /** When session was created (milliseconds) */
+    createdAt: number;
+    /** When session was last used (milliseconds) */
+    lastUsedAt: number;
+}
 /** @deprecated Use {@link FetchMarketMatchesParams} instead. */
 export type FetchMatchesParams = FetchMarketMatchesParams;
 export interface FetchEventMatchesParams {

package/dist/server/method-verbs.json

@@ -1,4 +1,54 @@
 {
+  "getAuthNonce": {
+    "verb": "post",
+    "args": [
+      {
+        "name": "walletAddress",
+        "kind": "string",
+        "optional": false
+      }
+    ]
+  },
+  "loginWithSignature": {
+    "verb": "post",
+    "args": [
+      {
+        "name": "walletAddress",
+        "kind": "string",
+        "optional": false
+      },
+      {
+        "name": "signature",
+        "kind": "string",
+        "optional": false
+      },
+      {
+        "name": "nonce",
+        "kind": "string",
+        "optional": false
+      }
+    ]
+  },
+  "logout": {
+    "verb": "post",
+    "args": [
+      {
+        "name": "walletAddress",
+        "kind": "string",
+        "optional": true
+      }
+    ]
+  },
+  "isSessionActive": {
+    "verb": "post",
+    "args": [
+      {
+        "name": "walletAddress",
+        "kind": "string",
+        "optional": false
+      }
+    ]
+  },
   "loadMarkets": {
     "verb": "post",
     "args": [

package/dist/server/openapi.yaml

@@ -27,6 +27,145 @@ paths:
                   timestamp:
                     type: integer
                     format: int64
+  '/api/{exchange}/getAuthNonce':
+    post:
+      summary: Get Auth Nonce
+      operationId: getAuthNonce
+      parameters:
+        - $ref: '#/components/parameters/ExchangeParam'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              title: GetAuthNonceRequest
+              type: object
+              properties:
+                args:
+                  type: array
+                  maxItems: 1
+                  items:
+                    type: string
+                  minItems: 1
+                credentials:
+                  $ref: '#/components/schemas/ExchangeCredentials'
+              required:
+                - args
+      responses:
+        '200':
+          description: Get Auth Nonce response
+          content:
+            application/json:
+              schema:
+                allOf:
+                  - $ref: '#/components/schemas/BaseResponse'
+                  - type: object
+                    properties:
+                      data:
+                        type: object
+      description: Get a cryptographic nonce for Web3 login.
+  '/api/{exchange}/loginWithSignature':
+    post:
+      summary: Login With Signature
+      operationId: loginWithSignature
+      parameters:
+        - $ref: '#/components/parameters/ExchangeParam'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              title: LoginWithSignatureRequest
+              type: object
+              properties:
+                args:
+                  type: array
+                  minItems: 3
+                  maxItems: 3
+                  items:
+                    oneOf:
+                      - type: string
+                      - type: string
+                      - type: string
+                credentials:
+                  $ref: '#/components/schemas/ExchangeCredentials'
+              required:
+                - args
+      responses:
+        '200':
+          description: Login With Signature response
+          content:
+            application/json:
+              schema:
+                allOf:
+                  - $ref: '#/components/schemas/BaseResponse'
+                  - type: object
+                    properties:
+                      data:
+                        type: object
+      description: Login with a signed nonce to obtain session credentials.
+  '/api/{exchange}/logout':
+    post:
+      summary: Logout
+      operationId: logout
+      parameters:
+        - $ref: '#/components/parameters/ExchangeParam'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              title: LogoutRequest
+              type: object
+              properties:
+                args:
+                  type: array
+                  maxItems: 1
+                  items:
+                    type: string
+                credentials:
+                  $ref: '#/components/schemas/ExchangeCredentials'
+      responses:
+        '200':
+          description: Logout response
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/BaseResponse'
+      description: Logout and invalidate the current session.
+  '/api/{exchange}/isSessionActive':
+    post:
+      summary: Is Session Active
+      operationId: isSessionActive
+      parameters:
+        - $ref: '#/components/parameters/ExchangeParam'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              title: IsSessionActiveRequest
+              type: object
+              properties:
+                args:
+                  type: array
+                  maxItems: 1
+                  items:
+                    type: string
+                  minItems: 1
+                credentials:
+                  $ref: '#/components/schemas/ExchangeCredentials'
+              required:
+                - args
+      responses:
+        '200':
+          description: Is Session Active response
+          content:
+            application/json:
+              schema:
+                allOf:
+                  - $ref: '#/components/schemas/BaseResponse'
+                  - type: object
+                    properties:
+                      data:
+                        type: boolean
+      description: Check if a session is active for the given wallet address.
   '/api/{exchange}/loadMarkets':
     post:
       summary: Load Markets
@@ -1758,7 +1897,7 @@ paths:
                   type: array
                   maxItems: 1
                   items:
-                    $ref: '#/components/schemas/FetchMarketMatchesParams'
+                    type: object
                   minItems: 1
                 credentials:
                   $ref: '#/components/schemas/ExchangeCredentials'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pmxt-core",
-  "version": "2.53.0",
+  "version": "2.54.0",
   "description": "Local sidecar API for supported prediction markets.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -29,8 +29,8 @@
     "test": "jest -c jest.config.js",
     "server": "tsx watch src/server/index.ts",
     "server:prod": "node dist/server/index.js",
-    "generate:sdk:python": "npx @openapitools/openapi-generator-cli generate -i src/server/openapi.yaml -g python -o ../sdks/python/generated --package-name pmxt_internal --additional-properties=projectName=pmxt-internal,packageVersion=2.53.0,library=urllib3",
-    "generate:sdk:typescript": "npx @openapitools/openapi-generator-cli generate -i src/server/openapi.yaml -g typescript-fetch -o ../sdks/typescript/generated --additional-properties=npmName=pmxtjs,npmVersion=2.53.0,supportsES6=true,typescriptThreePlus=true && node ../sdks/typescript/scripts/fix-generated.js",
+    "generate:sdk:python": "npx @openapitools/openapi-generator-cli generate -i src/server/openapi.yaml -g python -o ../sdks/python/generated --package-name pmxt_internal --additional-properties=projectName=pmxt-internal,packageVersion=2.54.0,library=urllib3",
+    "generate:sdk:typescript": "npx @openapitools/openapi-generator-cli generate -i src/server/openapi.yaml -g typescript-fetch -o ../sdks/typescript/generated --additional-properties=npmName=pmxtjs,npmVersion=2.54.0,supportsES6=true,typescriptThreePlus=true && node ../sdks/typescript/scripts/fix-generated.js",
     "fetch:openapi": "node scripts/fetch-openapi-specs.js",
     "extract:jsdoc": "node ../scripts/extract-jsdoc.js",
     "generate:docs": "npm run extract:jsdoc && node ../scripts/generate-api-docs.js",