@continuumdao/ctm-mpc-defi 0.2.51 → 0.2.53

package/dist/agent/skills/continuum-dao/SKILL.md

@@ -64,7 +64,7 @@ When a proposal has a `forumKey`, fetch that thread (`ctm_continuum_dao_forum_re
 
 **A proposal MUST have a Governance forum thread.** Never call `build_propose_*` or `register_proposal` with the homepage, an empty `forumKey`, or an Ideas thread. Required agent order:
 
-1. `forum_sign_in_eligible` then `build_forum_sign_in_multisign` (if no ticket).
+1. `get_forum_session` then `forum_me`. If `loggedIn`, reuse the ticket. Only if there is no session or `loggedIn` is false: `forum_sign_in_eligible` then `build_forum_sign_in_multisign`. Pass `address` on forum writes so the tool loads that node session before posting.
 2. If it is only an idea: `forum_create_idea`. Stop (no propose).
 3. If it is a proposal: `forum_create_topic` with the matching Governance `section` (proposal-threshold veCTM). Keep the returned `url`.
 4. Compose actions with `ctm_continuum_dao_compose_proposal_action` (prefer ABI from `etherscan__get_contract_abi` with chainid 59144/59141, type-check values, preview table). Then offer `ctm_continuum_dao_simulate_proposal` — pass `account` for another EOA, or `keyGenId` / omit `account` for the preferred KeyGen. Write `foundry.files` and run `foundry__forge_script` on a Linea fork with no `--broadcast`. Do **not** treat isolated `eth_call` as success. Do **not** submit if `ok` is false or a forge script reverts.
@@ -73,12 +73,12 @@ When a proposal has a `forumKey`, fetch that thread (`ctm_continuum_dao_forum_re
 
 `forumKey` must match `/topic/:tid` or `/t/:tid` on forum.continuumdao.org. Builders and `register_proposal` throw otherwise.
 
-Forum KeyGen sign-in is EIP-712 multi-sign (no EVM tx). Always check eligibility first:
+Forum KeyGen sign-in is EIP-712 multi-sign (no EVM tx). The ticket is stored on the node. Always check that session first:
 
-1. `ctm_continuum_dao_forum_sign_in_eligible({ address })` — holder or attach-key veCTM vs `veCtmThresholdPower`. If `eligible` is false, stop. Do **not** compose a multi-sign request.
-2. `ctm_continuum_dao_build_forum_sign_in_multisign` also refuses ineligible addresses (same gate) so other nodes never enter the sign loop. Pass `nodeKey` (username = first 16 chars) or a `username` on first login.
-3. After the multi-sign request is signed, exchange the signature for a ticket (`/api/continuum/eip712/ticket`). Then `forum_reply` / `forum_react` / `forum_create_topic` / `forum_create_idea`.
-4. `ctm_continuum_dao_forum_sign_out({ ticket })` revokes the ticket and forum sessions. No multi-sign.
+1. `get_forum_session({ address })`. If `found` is true, `ctm_continuum_dao_forum_me({ ticket })`. If `loggedIn` is true, reuse that ticket. Do **not** compose a sign-in request.
+2. If there is no session or `loggedIn` is false: `ctm_continuum_dao_forum_sign_in_eligible({ address })` — current `balanceOfNFT` on an owned or attached veCTM vs `veCtmThresholdPower` (200 veCTM). Governor `getVotes` and month-start `balanceOfNFTAt` do not count. Read `votingPower`, `threshold`, and `tokenId` from the result. If `eligible` is false, stop. Do **not** compose a multi-sign request.
+3. `ctm_continuum_dao_build_forum_sign_in_multisign` uses the same gate and refuses ineligible addresses so other nodes never enter the sign loop. Always pass `nodeKey` from this node. A custom username does not omit it; `useNodeKeyUsername` only chooses the display name. Ask the operator for a custom username (2–16 letters, numbers, `.` `_` `-`) and pass `username` together with `nodeKey`. If they decline, call again with `useNodeKeyUsername: true` and the same `nodeKey`; the forum assigns the first 16 characters of the node key as the username. Do not invent a username and do not skip the question. After Execute, the node stores the ticket and the forum stores the verified node key on that user (new or existing), which is required for MPA Wallet Chat. Call `get_forum_session` again, then `forum_reply` / `forum_react` / `forum_create_topic` / `forum_create_idea`.
+4. `ctm_continuum_dao_forum_sign_out({ address, ticket })` deletes the node ticket (web chat and Telegram webhook turns share that row). `clear_forum_session({ address })` is the same delete. No multi-sign.
 
 Forum sign-in and sign-out are **agent/MCP only**. There is no Sign in / Sign out control in the node-app Compose header.
 
@@ -119,6 +119,7 @@ Propose builders **hard-fail** if `getVotes(KeyGen) <` live `proposalThreshold()
 | Fetch on-chain state | `ctm_continuum_dao_fetch_proposal_state` |
 | Who voted and how | `ctm_continuum_dao_fetch_proposal_votes` |
 | Fetch voting power | `ctm_continuum_dao_fetch_voting_power` |
+| Forum session on this node | `get_forum_session` / `clear_forum_session` |
 | Forum sign-in eligible? | `ctm_continuum_dao_forum_sign_in_eligible` |
 | Forum KeyGen sign-in | `ctm_continuum_dao_build_forum_sign_in_multisign` |
 | Forum sign-out | `ctm_continuum_dao_forum_sign_out` |

package/dist/protocols/evm/continuum-dao/index.cjs

@@ -187,7 +187,8 @@ var init_constants = __esm({
       [exports.CONTINUUM_DAO_LINEA_CHAIN_ID]: {
         ...UNSET,
         ctm: exports.CTM_TOKEN_ADDRESS,
-        votingEscrow: exports.VOTING_ESCROW_LINEA_ADDRESS
+        votingEscrow: exports.VOTING_ESCROW_LINEA_ADDRESS,
+        governor: exports.CONTINUUM_DAO_LINEA_GOVERNOR_ADDRESS
       },
       [exports.CONTINUUM_DAO_LINEA_SEPOLIA_CHAIN_ID]: { ...UNSET },
       [exports.CONTINUUM_DAO_ETHEREUM_CHAIN_ID]: {
@@ -930,13 +931,38 @@ async function continuumDaoForumSignInEligible(args) {
   const st = body.status && typeof body.status === "object" ? body.status : null;
   const reason = typeof body.reason === "string" && body.reason || st && typeof st.message === "string" && st.message || void 0;
   const ok = res.ok && Boolean(body.ok ?? body.eligible);
+  const votingPower = typeof body.votingPower === "string" ? body.votingPower : void 0;
+  const threshold = typeof body.threshold === "string" ? body.threshold : void 0;
+  const tokenId = typeof body.tokenId === "string" ? body.tokenId : void 0;
   return {
     ok,
     eligible: ok,
     address: typeof body.address === "string" ? body.address : address,
-    reason: ok ? void 0 : reason || "Address does not meet the veCTM threshold"
+    reason: ok ? void 0 : reason || "Address does not meet the veCTM threshold",
+    votingPower,
+    threshold,
+    tokenId
   };
 }
+function assertForumSignInUsernameChoice(args) {
+  const nodeKey = args.nodeKey?.trim() || "";
+  const username = args.username?.trim() || "";
+  if (!nodeKey) {
+    throw new Error(
+      "KeyGen forum sign-in requires nodeKey from this node, including when the operator chose a custom username. useNodeKeyUsername only selects the username."
+    );
+  }
+  if (username && !FORUM_USERNAME_RE.test(username)) {
+    throw new Error(
+      "Ask the operator for a forum username of 2\u201316 letters, numbers, periods, underscores, or hyphens. If they want the node-key name, call again with useNodeKeyUsername true and the same nodeKey."
+    );
+  }
+  if (!username && !args.useNodeKeyUsername) {
+    throw new Error(
+      "Ask the operator for a custom forum username (2\u201316 letters, numbers, . _ -). If they decline, call again with useNodeKeyUsername true and the same nodeKey. The username will be the first 16 characters of the node key. Always pass nodeKey."
+    );
+  }
+}
 async function continuumDaoForumSignInNonce(args) {
   const qs2 = new URLSearchParams({
     address: args.address,
@@ -945,6 +971,18 @@ async function continuumDaoForumSignInNonce(args) {
   });
   return forumFetch(`/api/continuum/eip712/nonce?${qs2}`, { forumUrl: args.forumUrl });
 }
+function forumSignInTypedExpiryUnix(message) {
+  const raw = message.expiresAt;
+  const n = typeof raw === "number" ? raw : typeof raw === "string" && raw.trim() !== "" ? Number(raw) : NaN;
+  if (!Number.isFinite(n) || n <= 0) return void 0;
+  return Math.floor(n > 1e12 ? n / 1e3 : n);
+}
+function forumSignInRequestExpiryUnix(message, explicit) {
+  const typed = forumSignInTypedExpiryUnix(message);
+  const caller = explicit != null && explicit > 0 ? Math.floor(explicit) : void 0;
+  if (typed != null && caller != null) return Math.min(typed, caller);
+  return typed ?? caller;
+}
 async function buildEvmMultisignBodyContinuumDaoForumSignIn(args) {
   const owner = viem.getAddress(args.executorAddress);
   const gate = await continuumDaoForumSignInEligible({ address: owner, forumUrl: args.forumUrl });
@@ -953,6 +991,7 @@ async function buildEvmMultisignBodyContinuumDaoForumSignIn(args) {
       `${gate.reason || "Address does not meet the veCTM threshold"}. Do not start a multi-sign request.`
     );
   }
+  assertForumSignInUsernameChoice(args);
   const typed = await continuumDaoForumSignInNonce({
     address: owner,
     nodeKey: args.nodeKey,
@@ -981,10 +1020,10 @@ async function buildEvmMultisignBodyContinuumDaoForumSignIn(args) {
         }
       }
     ],
-    expiryDate: args.expiryDate
+    expiryDate: forumSignInRequestExpiryUnix(typed.message, args.expiryDate)
   });
 }
-var DEFAULT_FORUM_URL; exports.FORUM_GOVERNANCE_SECTIONS = void 0; exports.FORUM_IDEA_SECTION = void 0; exports.PROPOSAL_TYPE_TO_FORUM_SECTION = void 0; var IDEA_SECTION_ALIASES; exports.FORUM_LOGIN_DELIVERY_KIND = void 0;
+var DEFAULT_FORUM_URL; exports.FORUM_GOVERNANCE_SECTIONS = void 0; exports.FORUM_IDEA_SECTION = void 0; exports.PROPOSAL_TYPE_TO_FORUM_SECTION = void 0; var IDEA_SECTION_ALIASES; exports.FORUM_LOGIN_DELIVERY_KIND = void 0; var FORUM_USERNAME_RE;
 var init_forum = __esm({
   "src/protocols/evm/continuum-dao/forum.ts"() {
     init_eip712Multisign();
@@ -1006,6 +1045,7 @@ var init_forum = __esm({
     };
     IDEA_SECTION_ALIASES = /* @__PURE__ */ new Set(["ideas", "ideas-suggestions", "suggestions"]);
     exports.FORUM_LOGIN_DELIVERY_KIND = "forumLogin";
+    FORUM_USERNAME_RE = /^[A-Za-z0-9._-]{2,16}$/;
   }
 });