curl --request POST \
  --url 'https://api.glider.fi/v2/portfolios/a1b2c3d4/withdraw' \
  --header 'x-api-key: gldr_sk_your_api_key' \
  --header 'Content-Type: application/json' \
  --data '{
    "message": {
      "portfolioId": "a1b2c3d4",
      "recipientAccountId": "eip155:1:0x4444444444444444444444444444444444444444",
      "assets": [
        {
          "assetId": "eip155:1/erc20:0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",
          "amountRaw": "1000500000"
        }
      ],
      "nonce": "0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef",
      "expiresAt": 1744898400
    },
    "signature": "0xabc..."
  }'

// Typical flow: stage 1 → user signs with wagmi/viem → stage 2.
import { useSignTypedData } from "wagmi";

const stage1 = await fetch(`${API}/v2/portfolios/${portfolioId}/withdraw/signature`, {
  method: "POST",
  headers: { "x-api-key": KEY, "Content-Type": "application/json" },
  body: JSON.stringify({
    recipientAccountId: `eip155:1:${recipient}`,
    assets: [{ assetId, amountRaw }],
  }),
}).then((r) => r.json());

const signature = await signTypedDataAsync(stage1.data.typedData);

// Stage 2 echoes `typedData.message` back as `body.message`.
const stage2 = await fetch(`${API}/v2/portfolios/${portfolioId}/withdraw`, {
  method: "POST",
  headers: { "x-api-key": KEY, "Content-Type": "application/json" },
  body: JSON.stringify({ message: stage1.data.typedData.message, signature }),
}).then((r) => r.json());

// Poll execution status via GET /v2/portfolios/:id/operations/:operationId
// until a terminal state is reached.
const { operationId } = stage2.data;

import bs58 from "bs58";

// Stage 1 returns `data.authorization` for Solana portfolios.
const stage1 = await fetch(`${API}/v2/portfolios/${portfolioId}/withdraw/signature`, {
  method: "POST",
  headers: { "x-api-key": KEY, "Content-Type": "application/json" },
  body: JSON.stringify({
    recipientAccountId: `solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp:${recipient}`,
    assets: [{ assetId, amountRaw }],
  }),
}).then((r) => r.json());

const auth = stage1.data.authorization; // { kind: "solana-message", text, message }

// The Solana wallet renders `auth.text` and signs its UTF-8 bytes (ed25519).
const sigBytes = await wallet.signMessage(new TextEncoder().encode(auth.text));
const signature = bs58.encode(sigBytes);

// Stage 2 echoes `authorization.message` back as `body.message`.
const stage2 = await fetch(`${API}/v2/portfolios/${portfolioId}/withdraw`, {
  method: "POST",
  headers: { "x-api-key": KEY, "Content-Type": "application/json" },
  body: JSON.stringify({ message: auth.message, signature }),
}).then((r) => r.json());

const { operationId } = stage2.data;

{
  "success": true,
  "data": {
    "operationId": "op_01JWZEE2MF30KVRMRX53N88VA4",
    "submittedAt": "2026-04-17T12:05:00.000Z"
  }
}

{
  "success": false,
  "error": {
    "code": "API_216",
    "message": "Withdrawal authorization expired at 2026-04-17T11:50:00.000Z"
  }
}

{
  "success": false,
  "error": {
    "code": "API_217",
    "message": "Withdrawal signature does not match the portfolio owner"
  }
}

{
  "success": false,
  "error": {
    "code": "API_007",
    "message": "Another withdrawal with the same nonce is still in progress"
  }
}

{
  "success": false,
  "error": {
    "code": "API_506",
    "message": "Signature verifier is temporarily unavailable"
  }
}