@continuumdao/ctm-mpc-defi 0.2.51 → 0.2.52

package/dist/agent/skills/continuum-dao/SKILL.md

@@ -64,7 +64,7 @@ When a proposal has a `forumKey`, fetch that thread (`ctm_continuum_dao_forum_re
 
 **A proposal MUST have a Governance forum thread.** Never call `build_propose_*` or `register_proposal` with the homepage, an empty `forumKey`, or an Ideas thread. Required agent order:
 
-1. `forum_sign_in_eligible` then `build_forum_sign_in_multisign` (if no ticket).
+1. `get_forum_session` then `forum_me`. If `loggedIn`, reuse the ticket. Only if there is no session or `loggedIn` is false: `forum_sign_in_eligible` then `build_forum_sign_in_multisign`. Pass `address` on forum writes so the tool loads that node session before posting.
 2. If it is only an idea: `forum_create_idea`. Stop (no propose).
 3. If it is a proposal: `forum_create_topic` with the matching Governance `section` (proposal-threshold veCTM). Keep the returned `url`.
 4. Compose actions with `ctm_continuum_dao_compose_proposal_action` (prefer ABI from `etherscan__get_contract_abi` with chainid 59144/59141, type-check values, preview table). Then offer `ctm_continuum_dao_simulate_proposal` — pass `account` for another EOA, or `keyGenId` / omit `account` for the preferred KeyGen. Write `foundry.files` and run `foundry__forge_script` on a Linea fork with no `--broadcast`. Do **not** treat isolated `eth_call` as success. Do **not** submit if `ok` is false or a forge script reverts.
@@ -73,12 +73,12 @@ When a proposal has a `forumKey`, fetch that thread (`ctm_continuum_dao_forum_re
 
 `forumKey` must match `/topic/:tid` or `/t/:tid` on forum.continuumdao.org. Builders and `register_proposal` throw otherwise.
 
-Forum KeyGen sign-in is EIP-712 multi-sign (no EVM tx). Always check eligibility first:
+Forum KeyGen sign-in is EIP-712 multi-sign (no EVM tx). The ticket is stored on the node. Always check that session first:
 
-1. `ctm_continuum_dao_forum_sign_in_eligible({ address })` — holder or attach-key veCTM vs `veCtmThresholdPower`. If `eligible` is false, stop. Do **not** compose a multi-sign request.
-2. `ctm_continuum_dao_build_forum_sign_in_multisign` also refuses ineligible addresses (same gate) so other nodes never enter the sign loop. Pass `nodeKey` (username = first 16 chars) or a `username` on first login.
-3. After the multi-sign request is signed, exchange the signature for a ticket (`/api/continuum/eip712/ticket`). Then `forum_reply` / `forum_react` / `forum_create_topic` / `forum_create_idea`.
-4. `ctm_continuum_dao_forum_sign_out({ ticket })` revokes the ticket and forum sessions. No multi-sign.
+1. `get_forum_session({ address })`. If `found` is true, `ctm_continuum_dao_forum_me({ ticket })`. If `loggedIn` is true, reuse that ticket. Do **not** compose a sign-in request.
+2. If there is no session or `loggedIn` is false: `ctm_continuum_dao_forum_sign_in_eligible({ address })` — current `balanceOfNFT` on an owned or attached veCTM vs `veCtmThresholdPower` (200 veCTM). Governor `getVotes` and month-start `balanceOfNFTAt` do not count. Read `votingPower`, `threshold`, and `tokenId` from the result. If `eligible` is false, stop. Do **not** compose a multi-sign request.
+3. `ctm_continuum_dao_build_forum_sign_in_multisign` uses the same gate and refuses ineligible addresses so other nodes never enter the sign loop. Ask the operator for a custom username (2–16 letters, numbers, `.` `_` `-`) and pass `username`. A KeyGen may choose a username the same way a wallet does. If they decline, call again with `useNodeKeyUsername: true` and `nodeKey`; the forum assigns the first 16 characters of the node key. Do not invent a username and do not skip the question. After Execute, the node stores the ticket. Call `get_forum_session` again, then `forum_reply` / `forum_react` / `forum_create_topic` / `forum_create_idea`.
+4. `ctm_continuum_dao_forum_sign_out({ address, ticket })` deletes the node ticket (web chat and Telegram webhook turns share that row). `clear_forum_session({ address })` is the same delete. No multi-sign.
 
 Forum sign-in and sign-out are **agent/MCP only**. There is no Sign in / Sign out control in the node-app Compose header.
 
@@ -119,6 +119,7 @@ Propose builders **hard-fail** if `getVotes(KeyGen) <` live `proposalThreshold()
 | Fetch on-chain state | `ctm_continuum_dao_fetch_proposal_state` |
 | Who voted and how | `ctm_continuum_dao_fetch_proposal_votes` |
 | Fetch voting power | `ctm_continuum_dao_fetch_voting_power` |
+| Forum session on this node | `get_forum_session` / `clear_forum_session` |
 | Forum sign-in eligible? | `ctm_continuum_dao_forum_sign_in_eligible` |
 | Forum KeyGen sign-in | `ctm_continuum_dao_build_forum_sign_in_multisign` |
 | Forum sign-out | `ctm_continuum_dao_forum_sign_out` |

package/dist/protocols/evm/continuum-dao/index.cjs

@@ -930,13 +930,33 @@ async function continuumDaoForumSignInEligible(args) {
   const st = body.status && typeof body.status === "object" ? body.status : null;
   const reason = typeof body.reason === "string" && body.reason || st && typeof st.message === "string" && st.message || void 0;
   const ok = res.ok && Boolean(body.ok ?? body.eligible);
+  const votingPower = typeof body.votingPower === "string" ? body.votingPower : void 0;
+  const threshold = typeof body.threshold === "string" ? body.threshold : void 0;
+  const tokenId = typeof body.tokenId === "string" ? body.tokenId : void 0;
   return {
     ok,
     eligible: ok,
     address: typeof body.address === "string" ? body.address : address,
-    reason: ok ? void 0 : reason || "Address does not meet the veCTM threshold"
+    reason: ok ? void 0 : reason || "Address does not meet the veCTM threshold",
+    votingPower,
+    threshold,
+    tokenId
   };
 }
+function assertForumSignInUsernameChoice(args) {
+  const nodeKey = args.nodeKey?.trim() || "";
+  const username = args.username?.trim() || "";
+  if (username && !FORUM_USERNAME_RE.test(username)) {
+    throw new Error(
+      "Ask the operator for a forum username of 2\u201316 letters, numbers, periods, underscores, or hyphens. If they want the node-key name, call again with useNodeKeyUsername true and nodeKey set."
+    );
+  }
+  if (!username && !(args.useNodeKeyUsername && nodeKey)) {
+    throw new Error(
+      "Ask the operator for a custom forum username (2\u201316 letters, numbers, . _ -). If they want the default, call again with useNodeKeyUsername true and nodeKey set. The username will be the first 16 characters of the node key."
+    );
+  }
+}
 async function continuumDaoForumSignInNonce(args) {
   const qs2 = new URLSearchParams({
     address: args.address,
@@ -945,6 +965,18 @@ async function continuumDaoForumSignInNonce(args) {
   });
   return forumFetch(`/api/continuum/eip712/nonce?${qs2}`, { forumUrl: args.forumUrl });
 }
+function forumSignInTypedExpiryUnix(message) {
+  const raw = message.expiresAt;
+  const n = typeof raw === "number" ? raw : typeof raw === "string" && raw.trim() !== "" ? Number(raw) : NaN;
+  if (!Number.isFinite(n) || n <= 0) return void 0;
+  return Math.floor(n > 1e12 ? n / 1e3 : n);
+}
+function forumSignInRequestExpiryUnix(message, explicit) {
+  const typed = forumSignInTypedExpiryUnix(message);
+  const caller = explicit != null && explicit > 0 ? Math.floor(explicit) : void 0;
+  if (typed != null && caller != null) return Math.min(typed, caller);
+  return typed ?? caller;
+}
 async function buildEvmMultisignBodyContinuumDaoForumSignIn(args) {
   const owner = viem.getAddress(args.executorAddress);
   const gate = await continuumDaoForumSignInEligible({ address: owner, forumUrl: args.forumUrl });
@@ -953,6 +985,7 @@ async function buildEvmMultisignBodyContinuumDaoForumSignIn(args) {
       `${gate.reason || "Address does not meet the veCTM threshold"}. Do not start a multi-sign request.`
     );
   }
+  assertForumSignInUsernameChoice(args);
   const typed = await continuumDaoForumSignInNonce({
     address: owner,
     nodeKey: args.nodeKey,
@@ -981,10 +1014,10 @@ async function buildEvmMultisignBodyContinuumDaoForumSignIn(args) {
         }
       }
     ],
-    expiryDate: args.expiryDate
+    expiryDate: forumSignInRequestExpiryUnix(typed.message, args.expiryDate)
   });
 }
-var DEFAULT_FORUM_URL; exports.FORUM_GOVERNANCE_SECTIONS = void 0; exports.FORUM_IDEA_SECTION = void 0; exports.PROPOSAL_TYPE_TO_FORUM_SECTION = void 0; var IDEA_SECTION_ALIASES; exports.FORUM_LOGIN_DELIVERY_KIND = void 0;
+var DEFAULT_FORUM_URL; exports.FORUM_GOVERNANCE_SECTIONS = void 0; exports.FORUM_IDEA_SECTION = void 0; exports.PROPOSAL_TYPE_TO_FORUM_SECTION = void 0; var IDEA_SECTION_ALIASES; exports.FORUM_LOGIN_DELIVERY_KIND = void 0; var FORUM_USERNAME_RE;
 var init_forum = __esm({
   "src/protocols/evm/continuum-dao/forum.ts"() {
     init_eip712Multisign();
@@ -1006,6 +1039,7 @@ var init_forum = __esm({
     };
     IDEA_SECTION_ALIASES = /* @__PURE__ */ new Set(["ideas", "ideas-suggestions", "suggestions"]);
     exports.FORUM_LOGIN_DELIVERY_KIND = "forumLogin";
+    FORUM_USERNAME_RE = /^[A-Za-z0-9._-]{2,16}$/;
   }
 });