@flayerlabs/gamemode-gate 0.5.6 → 0.7.0

package/dist/chain/secure.d.ts

@@ -18,4 +18,32 @@ export interface SecureConfig {
     poolSwap?: `0x${string}`;
 }
 export declare function assertSecureConfig(client: PublicClient, config: SecureConfig): Promise<void>;
+/**
+ * The verdict of {@link checkPositionManagerWiring}: wired, with the dispatcher the manager routes
+ * through, or not, with a reason written for the operator who has to fix it.
+ */
+export type PositionManagerWiring = {
+    ok: true;
+    dispatcher: `0x${string}`;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Is this manager's fee wiring routed to this calculator?
+ *
+ * The manager must route fees through a dispatcher that knows the calculator, and the calculator
+ * must accept calls from that dispatcher. Both are one-time owner actions on chain, and a stack
+ * missing either ADOPTS launches whose swaps never reach the gate: the pool trades ungated while
+ * the gate believes it is enforcing a cap. That is the whole failure this function refuses.
+ *
+ * It is also how a manager is APPROVED for a gate. The gate never holds a list of managers: a coin
+ * offered for adoption names its own manager, and the manager is accepted when these three reads
+ * say its fees reach the gate's calculator. Wiring a new manager to the dispatcher on chain is the
+ * approval, and needs no gate release. Boot asks the same question of the primary manager.
+ */
+export declare function checkPositionManagerWiring(client: Pick<PublicClient, 'readContract'>, wiring: {
+    positionManager: `0x${string}`;
+    spendGatedCalculator: `0x${string}`;
+}): Promise<PositionManagerWiring>;
 //# sourceMappingURL=secure.d.ts.map

package/dist/chain/secure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secure.d.ts","sourceRoot":"","sources":["../../src/chain/secure.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,KAAK,YAAY,EAAE,MAAM,MAAM,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAelD,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,2CAA2C,CAAC;AAE5E,0GAA0G;AAC1G,eAAO,MAAM,qBAAqB,eAAsC,CAAC;AASzE,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,KAAK,MAAM,EAAE,CAAC;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,eAAe,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAChC,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;CAC1B;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBlG"}
+{"version":3,"file":"secure.d.ts","sourceRoot":"","sources":["../../src/chain/secure.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,KAAK,YAAY,EAAE,MAAM,MAAM,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAelD,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,2CAA2C,CAAC;AAE5E,0GAA0G;AAC1G,eAAO,MAAM,qBAAqB,eAAsC,CAAC;AASzE,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,KAAK,MAAM,EAAE,CAAC;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,eAAe,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAChC,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;CAC1B;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBlG;AAED;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,KAAK,MAAM,EAAE,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;;;;;;;;GAYG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,EAC1C,MAAM,EAAE;IAAE,eAAe,EAAE,KAAK,MAAM,EAAE,CAAC;IAAC,oBAAoB,EAAE,KAAK,MAAM,EAAE,CAAA;CAAE,GAC9E,OAAO,CAAC,qBAAqB,CAAC,CAmDhC"}

package/dist/chain/secure.js

@@ -45,51 +45,86 @@ export async function assertSecureConfig(client, config) {
         await assertWiring(client, config);
 }
 /**
- * The manager must route fees through a dispatcher that knows this calculator, and the calculator
+ * Is this manager's fee wiring routed to this calculator?
+ *
+ * The manager must route fees through a dispatcher that knows the calculator, and the calculator
  * must accept calls from that dispatcher. Both are one-time owner actions on chain, and a stack
  * missing either ADOPTS launches whose swaps never reach the gate: the pool trades ungated while
  * the gate believes it is enforcing a cap. That is the whole failure this function refuses.
  *
- * A paired stack additionally needs its PoolSwap approved as a router, because a paired buy arrives
- * through it and the calculator binds a smart wallet's buyer identity to an approved router's
- * `msgSender()` — unapproved, every such buy reverts at the swap.
+ * It is also how a manager is APPROVED for a gate. The gate never holds a list of managers: a coin
+ * offered for adoption names its own manager, and the manager is accepted when these three reads
+ * say its fees reach the gate's calculator. Wiring a new manager to the dispatcher on chain is the
+ * approval, and needs no gate release. Boot asks the same question of the primary manager.
  */
-async function assertWiring(client, config) {
-    const manager = config.positionManager;
-    const calculator = config.spendGatedCalculator;
+export async function checkPositionManagerWiring(client, wiring) {
+    const manager = wiring.positionManager;
+    const calculator = wiring.spendGatedCalculator;
     let dispatcher;
     try {
-        dispatcher = await client.readContract({ address: manager, abi: wiringAbi, functionName: 'feeCalculator' });
+        dispatcher = (await client.readContract({
+            address: manager,
+            abi: wiringAbi,
+            functionName: 'feeCalculator',
+        }));
     }
     catch {
-        throw new Error(`POSITION_MANAGER ${manager} does not answer feeCalculator() — is it a Flaunch PositionManager?`);
+        return { ok: false, reason: `${manager} does not answer feeCalculator() — is it a Flaunch PositionManager?` };
     }
     const [registered, hasRole] = await Promise.all([
-        client.readContract({
+        client
+            .readContract({
             address: dispatcher,
             abi: wiringAbi,
             functionName: 'registeredCalculators',
             args: [calculator],
-        }).catch(() => false),
-        client.readContract({
+        })
+            .catch(() => false),
+        client
+            .readContract({
             address: calculator,
             abi: wiringAbi,
             functionName: 'hasRole',
             args: [POSITION_MANAGER_ROLE, dispatcher],
-        }).catch(() => false),
+        })
+            .catch(() => false),
     ]);
     if (!registered) {
-        throw new Error(`the fee dispatcher ${dispatcher} of POSITION_MANAGER ${manager} does not have SPEND_GATED_CALCULATOR ` +
-            `${calculator} registered — its owner must call setCalculatorRegistered(${calculator}, true) before ` +
-            'this gate can serve launches on that manager');
+        return {
+            ok: false,
+            reason: `the fee dispatcher ${dispatcher} of PositionManager ${manager} does not have the spend-gated calculator ` +
+                `${calculator} registered — its owner must call setCalculatorRegistered(${calculator}, true) before ` +
+                'a gate on that calculator can serve launches on that manager',
+        };
     }
     if (!hasRole) {
-        throw new Error(`SPEND_GATED_CALCULATOR ${calculator} has not granted the PositionManager role to the dispatcher ${dispatcher} ` +
-            `— its admin must call grantRole(${POSITION_MANAGER_ROLE}, ${dispatcher})`);
+        return {
+            ok: false,
+            reason: `the spend-gated calculator ${calculator} has not granted the PositionManager role to the dispatcher ` +
+                `${dispatcher} — its admin must call grantRole(${POSITION_MANAGER_ROLE}, ${dispatcher})`,
+        };
     }
-    if (config.flaunchVariant === 'v1_3') {
+    return { ok: true, dispatcher };
+}
+/**
+ * Boot's assertion about the PRIMARY manager: {@link checkPositionManagerWiring}, thrown rather
+ * than returned, because a gate whose own address book is unwired must not come up at all.
+ *
+ * A paired stack additionally needs its PoolSwap approved as a router, because a paired buy arrives
+ * through it and the calculator binds a smart wallet's buyer identity to an approved router's
+ * `msgSender()` — unapproved, every such buy reverts at the swap.
+ */
+async function assertWiring(client, config) {
+    const calculator = config.spendGatedCalculator;
+    const wiring = await checkPositionManagerWiring(client, {
+        positionManager: config.positionManager,
+        spendGatedCalculator: calculator,
+    });
+    if (!wiring.ok)
+        throw new Error(`POSITION_MANAGER: ${wiring.reason}`);
+    if (config.flaunchVariant === 'v1_3' || config.flaunchVariant === 'any_v1_3') {
         if (!config.poolSwap) {
-            throw new Error('a v1_3 stack needs POOL_SWAP — the router a paired-token buy goes through');
+            throw new Error(`a ${config.flaunchVariant} stack needs POOL_SWAP — the router a paired-token buy goes through`);
         }
         const approved = await client
             .readContract({ address: calculator, abi: wiringAbi, functionName: 'approvedRouters', args: [config.poolSwap] })

package/dist/chain/secure.js.map

@@ -1 +1 @@
-{"version":3,"file":"secure.js","sourceRoot":"","sources":["../../src/chain/secure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAqB,MAAM,MAAM,CAAC;AAGrE;;;;;;;GAOG;AAEH,mGAAmG;AACnG,MAAM,gBAAgB,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAChD,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAExC,gFAAgF;AAChF,MAAM,CAAC,MAAM,mBAAmB,GAAG,wCAAwC,CAAC;AAE5E,0GAA0G;AAC1G,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAEzE,MAAM,SAAS,GAAG,QAAQ,CAAC;IACzB,iDAAiD;IACjD,6DAA6D;IAC7D,qEAAqE;IACrE,uDAAuD;CACxD,CAAC,CAAC;AAgBH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAoB,EAAE,MAAoB;IACjF,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;IAClD,IAAI,GAAG,KAAK,gBAAgB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,mBAAmB,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,gGAAgG;IAChG,gGAAgG;IAChG,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;IAC1C,IAAI,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,qBAAqB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,+FAA+F;IAC/F,4FAA4F;IAC5F,mBAAmB;IACnB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,oBAAoB,2BAA2B,OAAO,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,IAAI,MAAM,CAAC,eAAe;QAAE,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,YAAY,CAAC,MAAoB,EAAE,MAAoB;IACpE,MAAM,OAAO,GAAG,MAAM,CAAC,eAAgB,CAAC;IACxC,MAAM,UAAU,GAAG,MAAM,CAAC,oBAAoB,CAAC;IAE/C,IAAI,UAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9G,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,qEAAqE,CAAC,CAAC;IACpH,CAAC;IAED,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,MAAM,CAAC,YAAY,CAAC;YAClB,OAAO,EAAE,UAAU;YACnB,GAAG,EAAE,SAAS;YACd,YAAY,EAAE,uBAAuB;YACrC,IAAI,EAAE,CAAC,UAAU,CAAC;SACnB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,YAAY,CAAC;YAClB,OAAO,EAAE,UAAU;YACnB,GAAG,EAAE,SAAS;YACd,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,qBAAqB,EAAE,UAAU,CAAC;SAC1C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,sBAAsB,UAAU,wBAAwB,OAAO,wCAAwC;YACrG,GAAG,UAAU,6DAA6D,UAAU,iBAAiB;YACrG,8CAA8C,CACjD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,0BAA0B,UAAU,+DAA+D,UAAU,GAAG;YAC9G,mCAAmC,qBAAqB,KAAK,UAAU,GAAG,CAC7E,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,MAAM;aAC1B,YAAY,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;aAC/G,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,0BAA0B,UAAU,+BAA+B,MAAM,CAAC,QAAQ,iBAAiB;gBACjG,yCAAyC,MAAM,CAAC,QAAQ,SAAS,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"secure.js","sourceRoot":"","sources":["../../src/chain/secure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAqB,MAAM,MAAM,CAAC;AAGrE;;;;;;;GAOG;AAEH,mGAAmG;AACnG,MAAM,gBAAgB,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAChD,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAExC,gFAAgF;AAChF,MAAM,CAAC,MAAM,mBAAmB,GAAG,wCAAwC,CAAC;AAE5E,0GAA0G;AAC1G,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAEzE,MAAM,SAAS,GAAG,QAAQ,CAAC;IACzB,iDAAiD;IACjD,6DAA6D;IAC7D,qEAAqE;IACrE,uDAAuD;CACxD,CAAC,CAAC;AAgBH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAoB,EAAE,MAAoB;IACjF,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;IAClD,IAAI,GAAG,KAAK,gBAAgB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,mBAAmB,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,gGAAgG;IAChG,gGAAgG;IAChG,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;IAC1C,IAAI,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,qBAAqB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,+FAA+F;IAC/F,4FAA4F;IAC5F,mBAAmB;IACnB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,oBAAoB,2BAA2B,OAAO,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,IAAI,MAAM,CAAC,eAAe;QAAE,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC;AAUD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAA0C,EAC1C,MAA+E;IAE/E,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC;IACvC,MAAM,UAAU,GAAG,MAAM,CAAC,oBAAoB,CAAC;IAE/C,IAAI,UAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,UAAU,GAAG,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC;YACtC,OAAO,EAAE,OAAO;YAChB,GAAG,EAAE,SAAS;YACd,YAAY,EAAE,eAAe;SAC9B,CAAC,CAAkB,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,qEAAqE,EAAE,CAAC;IAChH,CAAC;IAED,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,MAAM;aACH,YAAY,CAAC;YACZ,OAAO,EAAE,UAAU;YACnB,GAAG,EAAE,SAAS;YACd,YAAY,EAAE,uBAAuB;YACrC,IAAI,EAAE,CAAC,UAAU,CAAC;SACnB,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;QACrB,MAAM;aACH,YAAY,CAAC;YACZ,OAAO,EAAE,UAAU;YACnB,GAAG,EAAE,SAAS;YACd,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,qBAAqB,EAAE,UAAU,CAAC;SAC1C,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,sBAAsB,UAAU,uBAAuB,OAAO,4CAA4C;gBAC1G,GAAG,UAAU,6DAA6D,UAAU,iBAAiB;gBACrG,8DAA8D;SACjE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,8BAA8B,UAAU,8DAA8D;gBACtG,GAAG,UAAU,oCAAoC,qBAAqB,KAAK,UAAU,GAAG;SAC3F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,YAAY,CAAC,MAAoB,EAAE,MAAoB;IACpE,MAAM,UAAU,GAAG,MAAM,CAAC,oBAAoB,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE;QACtD,eAAe,EAAE,MAAM,CAAC,eAAgB;QACxC,oBAAoB,EAAE,UAAU;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtE,IAAI,MAAM,CAAC,cAAc,KAAK,MAAM,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,KAAK,MAAM,CAAC,cAAc,qEAAqE,CAAC,CAAC;QACnH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,MAAM;aAC1B,YAAY,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;aAC/G,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,0BAA0B,UAAU,+BAA+B,MAAM,CAAC,QAAQ,iBAAiB;gBACjG,yCAAyC,MAAM,CAAC,QAAQ,SAAS,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/chain/signer.d.ts

@@ -1,14 +1,18 @@
 import { type GateReadiness } from '@flayerlabs/gamemode-spec/embed';
 /**
- * Issues the signed authorizations SpendGatedSignerFeeCalculator.trackSwap verifies.
+ * Issues the signed authorisations SpendGatedSignerFeeCalculator.trackSwap verifies.
  *
- * EIP-712, over the `SpendAuthorization` struct the calculator declares. It used to be an
- * EIP-191 personal-sign over `keccak256(abi.encodePacked(...))`, which committed to the five
- * fields and nothing else — no chain id, no verifying contract. An audit flagged that as the
- * same defect already raised against the parent calculator (M-6, remediated there in the
- * EIP-712 PR but never ported to this fork): the protocol deploys deterministically across
- * chains, so the same poolId genuinely recurs, and one signing key shared between two
- * environments made an authorization issued for one valid on the other. The domain closes it.
+ * EIP-712, over the `SpendAuthorization` struct the calculator declares, under the
+ * `FlaunchSpendGate` version `2` domain. The struct carries a cumulative ceiling: the most this
+ * buyer may EVER have spent on this pool, which the calculator compares against its own
+ * `walletSpentWei` accumulator. There is no nonce and no per-purchase amount, because there is
+ * nothing to consume — two authorisations with the same ceiling cannot add up, so reusing one is
+ * harmless by construction and the gate holds nothing against it.
+ *
+ * The domain matters: the protocol deploys deterministically across chains, so the same poolId
+ * genuinely recurs, and one signing key shared between two environments would otherwise make an
+ * authorisation issued for one valid on the other. Version `2` also keeps 0.5.x signatures (a
+ * five-field struct with a nonce) from verifying on this calculator and vice versa.
  *
  * The digest MUST match `hashSpendAuthorization` on the calculator exactly. That function is
  * public for this reason — a domain drift is otherwise a silent `InvalidSigner` at swap time
@@ -19,8 +23,7 @@ export interface SignedPayload {
     buyer: `0x${string}`;
     poolId: `0x${string}`;
     deadline: bigint;
-    maxSpendWei: bigint;
-    nonce: bigint;
+    spendCeilingWei: bigint;
     signature: `0x${string}`;
     signer: `0x${string}`;
 }
@@ -38,12 +41,15 @@ export declare class PayloadSigner {
     /** Fixed non-spend payload. The caller cannot choose a domain, type or deadline. */
     readiness(origin: string, positionManager: `0x${string}`, nonce: `0x${string}`): Promise<GateReadiness>;
     /** The digest the calculator reconstructs; mirrors its `hashSpendAuthorization`. */
-    messageHash(buyer: `0x${string}`, poolId: `0x${string}`, deadline: bigint, maxSpendWei: bigint, nonce: bigint): `0x${string}`;
-    sign(buyer: `0x${string}`, poolId: `0x${string}`, deadline: bigint, maxSpendWei: bigint, nonce: bigint): Promise<SignedPayload>;
+    messageHash(buyer: `0x${string}`, poolId: `0x${string}`, deadline: bigint, spendCeilingWei: bigint): `0x${string}`;
+    sign(buyer: `0x${string}`, poolId: `0x${string}`, deadline: bigint, spendCeilingWei: bigint): Promise<SignedPayload>;
 }
 /**
  * Encodes a signed payload as the hookData the swap must carry:
- * `abi.encode(address referrer, SignedMessage{buyer, poolId, deadline, maxSpendWei, nonce, signature})`
+ * `abi.encode(address referrer, SignedMessage{buyer, poolId, deadline, spendCeilingWei, signature})`
+ *
+ * The referrer word is always zero. The calculator ignores it, but the trusted page checks it, so
+ * a creator iframe cannot redirect attribution while keeping a valid signature.
  */
 export declare function encodeHookData(payload: SignedPayload): `0x${string}`;
 //# sourceMappingURL=signer.d.ts.map

package/dist/chain/signer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../src/chain/signer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiD,KAAK,aAAa,EAA+B,MAAM,iCAAiC,CAAC;AAEjJ;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC;CACvB;AAED,qBAAa,aAAa;IAUtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAVpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAE5C;;;;OAIG;gBAED,UAAU,EAAE,KAAK,MAAM,EAAE,EACR,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,KAAK,MAAM,EAAE;IAKnD,IAAI,OAAO,IAAI,KAAK,MAAM,EAAE,CAE3B;IAED,oFAAoF;IAC9E,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IAQ7G,oFAAoF;IACpF,WAAW,CACT,KAAK,EAAE,KAAK,MAAM,EAAE,EACpB,MAAM,EAAE,KAAK,MAAM,EAAE,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,KAAK,MAAM,EAAE;IAUV,IAAI,CACR,KAAK,EAAE,KAAK,MAAM,EAAE,EACpB,MAAM,EAAE,KAAK,MAAM,EAAE,EACrB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,CAAC;CAU1B;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,KAAK,MAAM,EAAE,CA4BpE"}
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../src/chain/signer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiD,KAAK,aAAa,EAA+B,MAAM,iCAAiC,CAAC;AAEjJ;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC;CACvB;AAED,qBAAa,aAAa;IAUtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAVpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAE5C;;;;OAIG;gBAED,UAAU,EAAE,KAAK,MAAM,EAAE,EACR,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,KAAK,MAAM,EAAE;IAKnD,IAAI,OAAO,IAAI,KAAK,MAAM,EAAE,CAE3B;IAED,oFAAoF;IAC9E,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IAQ7G,oFAAoF;IACpF,WAAW,CACT,KAAK,EAAE,KAAK,MAAM,EAAE,EACpB,MAAM,EAAE,KAAK,MAAM,EAAE,EACrB,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,GACtB,KAAK,MAAM,EAAE;IAMV,IAAI,CACR,KAAK,EAAE,KAAK,MAAM,EAAE,EACpB,MAAM,EAAE,KAAK,MAAM,EAAE,EACrB,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,aAAa,CAAC;CAM1B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,KAAK,MAAM,EAAE,CA0BpE"}

package/dist/chain/signer.js

@@ -27,17 +27,20 @@ export class PayloadSigner {
         return { ...proof, signature: await this.account.signTypedData(gateReadinessTypedData(proof)) };
     }
     /** The digest the calculator reconstructs; mirrors its `hashSpendAuthorization`. */
-    messageHash(buyer, poolId, deadline, maxSpendWei, nonce) {
-        return hashTypedData(spendAuthorisationTypedData({ buyer, poolId, deadline, maxSpendWei, nonce }, this.chainId, this.verifyingContract));
+    messageHash(buyer, poolId, deadline, spendCeilingWei) {
+        return hashTypedData(spendAuthorisationTypedData({ buyer, poolId, deadline, spendCeilingWei }, this.chainId, this.verifyingContract));
     }
-    async sign(buyer, poolId, deadline, maxSpendWei, nonce) {
-        const signature = await this.account.signTypedData(spendAuthorisationTypedData({ buyer, poolId, deadline, maxSpendWei, nonce }, this.chainId, this.verifyingContract));
-        return { buyer, poolId, deadline, maxSpendWei, nonce, signature, signer: this.account.address };
+    async sign(buyer, poolId, deadline, spendCeilingWei) {
+        const signature = await this.account.signTypedData(spendAuthorisationTypedData({ buyer, poolId, deadline, spendCeilingWei }, this.chainId, this.verifyingContract));
+        return { buyer, poolId, deadline, spendCeilingWei, signature, signer: this.account.address };
     }
 }
 /**
  * Encodes a signed payload as the hookData the swap must carry:
- * `abi.encode(address referrer, SignedMessage{buyer, poolId, deadline, maxSpendWei, nonce, signature})`
+ * `abi.encode(address referrer, SignedMessage{buyer, poolId, deadline, spendCeilingWei, signature})`
+ *
+ * The referrer word is always zero. The calculator ignores it, but the trusted page checks it, so
+ * a creator iframe cannot redirect attribution while keeping a valid signature.
  */
 export function encodeHookData(payload) {
     return encodeAbiParameters([
@@ -48,8 +51,7 @@ export function encodeHookData(payload) {
                 { name: 'buyer', type: 'address' },
                 { name: 'poolId', type: 'bytes32' },
                 { name: 'deadline', type: 'uint256' },
-                { name: 'maxSpendWei', type: 'uint256' },
-                { name: 'nonce', type: 'uint256' },
+                { name: 'spendCeilingWei', type: 'uint256' },
                 { name: 'signature', type: 'bytes' },
             ],
         },
@@ -59,8 +61,7 @@ export function encodeHookData(payload) {
             buyer: payload.buyer,
             poolId: payload.poolId,
             deadline: payload.deadline,
-            maxSpendWei: payload.maxSpendWei,
-            nonce: payload.nonce,
+            spendCeilingWei: payload.spendCeilingWei,
             signature: payload.signature,
         },
     ]);

package/dist/chain/signer.js.map

@@ -1 +1 @@
-{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/chain/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAA0B,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAsB,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AA4BjJ,MAAM,OAAO,aAAa;IAUL;IACA;IAVF,OAAO,CAAoB;IAE5C;;;;OAIG;IACH,YACE,UAAyB,EACR,OAAe,EACf,iBAAgC;QADhC,YAAO,GAAP,OAAO,CAAQ;QACf,sBAAiB,GAAjB,iBAAiB,CAAe;QAEjD,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,eAA8B,EAAE,KAAoB;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,eAAe;YACjF,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,QAAQ;YAC7D,SAAS,EAAE,QAAQ,GAAG,qBAAqB,EAAE,CAAC;QAChD,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IAClG,CAAC;IAED,oFAAoF;IACpF,WAAW,CACT,KAAoB,EACpB,MAAqB,EACrB,QAAgB,EAChB,WAAmB,EACnB,KAAa;QAEb,OAAO,aAAa,CAClB,2BAA2B,CACzB,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,EAC/C,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,iBAAiB,CACvB,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAAoB,EACpB,MAAqB,EACrB,QAAgB,EAChB,WAAmB,EACnB,KAAa;QAEb,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAChD,2BAA2B,CACzB,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,EAC/C,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,iBAAiB,CACvB,CACF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAClG,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAsB;IACnD,OAAO,mBAAmB,CACxB;QACE,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB;YACE,IAAI,EAAE,OAAO;YACb,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;gBAClC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;gBACnC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;gBACrC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;gBACxC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;gBAClC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;aACrC;SACF;KACF,EACD;QACE,WAAW;QACX;YACE,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B;KACF,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/chain/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAA0B,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAsB,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AA+BjJ,MAAM,OAAO,aAAa;IAUL;IACA;IAVF,OAAO,CAAoB;IAE5C;;;;OAIG;IACH,YACE,UAAyB,EACR,OAAe,EACf,iBAAgC;QADhC,YAAO,GAAP,OAAO,CAAQ;QACf,sBAAiB,GAAjB,iBAAiB,CAAe;QAEjD,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,eAA8B,EAAE,KAAoB;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,eAAe;YACjF,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,QAAQ;YAC7D,SAAS,EAAE,QAAQ,GAAG,qBAAqB,EAAE,CAAC;QAChD,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IAClG,CAAC;IAED,oFAAoF;IACpF,WAAW,CACT,KAAoB,EACpB,MAAqB,EACrB,QAAgB,EAChB,eAAuB;QAEvB,OAAO,aAAa,CAClB,2BAA2B,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAChH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAAoB,EACpB,MAAqB,EACrB,QAAgB,EAChB,eAAuB;QAEvB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAChD,2BAA2B,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAChH,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/F,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAAsB;IACnD,OAAO,mBAAmB,CACxB;QACE,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB;YACE,IAAI,EAAE,OAAO;YACb,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;gBAClC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;gBACnC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;gBACrC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC5C,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;aACrC;SACF;KACF,EACD;QACE,WAAW;QACX;YACE,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B;KACF,CACF,CAAC;AACJ,CAAC"}

package/dist/claims.d.ts

@@ -1,30 +1,16 @@
 import type { Pool } from 'pg';
 import type { PlayerId } from '@flayerlabs/gamemode-spec';
 import type { EconomyBalance } from '@flayerlabs/gamemode-spec/live';
-import { Ledger, type BalanceKey } from './ledger.js';
+import { Ledger } from './ledger.js';
 import type { PayloadSigner, SignedPayload } from './chain/signer.js';
-/**
- * Turning points into something a player can actually spend.
- *
- * Two parties have to agree before a buy can happen, and they check different things. The ledger
- * knows what this player earned and what they have already been authorised for. The signer knows
- * whether it is willing to vouch for this pool at all. Only when both say yes does an
- * authorisation exist.
- *
- * The order matters and is not interchangeable: the hold is recorded first, then signed. A
- * signature that exists without a hold is spending nobody is tracking; a hold without a signature
- * is a refund waiting to happen. Only one of those costs money.
- */
-/** How long an authorisation stays valid. Long enough to approve in a wallet, short enough that an
- *  abandoned one does not sit around spendable. */
-export declare const CLAIM_AUTHORIZATION_TTL_MS: number;
 /** Request ids cross an unauthenticated parser before they reach Postgres, so bound them here too. */
 export declare function isClaimRequestId(value: unknown): value is string;
 /** The signed message carries uint256, while JavaScript's bigint has no upper bound. */
 export declare function isClaimAmount(value: unknown): value is bigint;
 export type Authorisation = {
     ok: true;
-    payload: SignedPayload;
+    payload: SignedPayload; /** Exact-in amount for this buy, clamped to what was available. */
+    spend: bigint;
 } | {
     ok: false;
     refuse: string;
@@ -33,27 +19,25 @@ export declare class Claims {
     private readonly pool;
     private readonly ledger;
     private readonly signer;
-    /** Called when a hold could neither be signed nor released, and needs a human. */
-    private readonly onStrandedHold?;
     /** An internal seam for exact window-boundary tests. Production uses the process clock. */
     private readonly now;
     constructor(pool: Pool, ledger: Ledger, signer: PayloadSigner, 
-    /** Called when a hold could neither be signed nor released, and needs a human. */
-    onStrandedHold?: ((nonce: bigint, error: unknown) => void) | undefined, 
     /** An internal seam for exact window-boundary tests. Production uses the process clock. */
     now?: () => number);
     /**
-     * Authorise a player to spend up to `upToWei`, or explain why not.
+     * Authorise a player to spend up to `spendWei`, or explain why not.
      *
-     * The ledger's ceiling is a conservative mirror of the chain's: the contract tracks
-     * `walletSpentWei` per pool per wallet and enforces it whatever we believe. Being ahead of the
-     * chain is safe — we simply authorise less than we could. Being behind it would mean issuing a
-     * signature that reverts at the swap, which to a player is indistinguishable from being robbed.
+     * Returns the largest amount available rather than refusing an over-ask: a player pressing buy
+     * wants to spend what they have, and telling them "you asked for too much" when they asked for
+     * everything is a worse product than giving them everything. The ceiling in the signature is the
+     * same either way — it is what they have earned, not what they asked for.
+     *
+     * The ledger's view of spend is a conservative mirror of the chain's. Being behind it means
+     * signing a ceiling the calculator will refuse at the swap, which to a player is
+     * indistinguishable from being robbed; settlement keeps the gap to one reconciliation pass.
      */
-    authorise(roundId: string, player: PlayerId, upToWei: bigint, requestId: string): Promise<Authorisation>;
-    private finish;
-    /** Give back every authorisation that expired unspent. */
-    releaseExpired(): Promise<BalanceKey[]>;
+    authorise(roundId: string, player: PlayerId, spendWei: bigint, requestId: string): Promise<Authorisation>;
+    private answer;
     /** What this player could spend right now. */
     available(roundId: string, player: PlayerId): Promise<bigint>;
     /** Full authoritative balance for live snapshots. */

package/dist/claims.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../src/claims.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,EAAE,MAAM,EAAE,KAAK,UAAU,EAAc,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEtE;;;;;;;;;;;GAWG;AAEH;mDACmD;AACnD,eAAO,MAAM,0BAA0B,QAAa,CAAC;AAIrD,sGAAsG;AACtG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEhE;AAED,wFAAwF;AACxF,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE7D;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,GACpC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,qBAAa,MAAM;IAEf,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,kFAAkF;IAClF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAChC,2FAA2F;IAC3F,OAAO,CAAC,QAAQ,CAAC,GAAG;gBANH,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa;IACtC,kFAAkF;IACjE,cAAc,CAAC,GAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,aAAA;IACzE,2FAA2F;IAC1E,GAAG,GAAE,MAAM,MAAiB;IAG/C;;;;;;;OAOG;IACG,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;YAyBhG,MAAM;IA4BpB,0DAA0D;IAC1D,cAAc,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAIvC,8CAA8C;IAC9C,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAI7D,qDAAqD;IACrD,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC;CAG3E"}
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../src/claims.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE,OAAO,EAAE,MAAM,EAA6C,MAAM,aAAa,CAAC;AAChF,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAkBtE,sGAAsG;AACtG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEhE;AAED,wFAAwF;AACxF,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE7D;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC,CAAC,mEAAmE;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvH;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,qBAAa,MAAM;IAEf,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,2FAA2F;IAC3F,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAJH,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa;IACtC,2FAA2F;IAC1E,GAAG,GAAE,MAAM,MAAiB;IAG/C;;;;;;;;;;;OAWG;IACG,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAgC/G,OAAO,CAAC,MAAM;IAgBd,8CAA8C;IAC9C,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAI7D,qDAAqD;IACrD,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC;CAG3E"}

package/dist/claims.js

@@ -4,18 +4,15 @@ import { Ledger } from './ledger.js';
  * Turning points into something a player can actually spend.
  *
  * Two parties have to agree before a buy can happen, and they check different things. The ledger
- * knows what this player earned and what they have already been authorised for. The signer knows
- * whether it is willing to vouch for this pool at all. Only when both say yes does an
- * authorisation exist.
+ * knows what this player earned and what the chain says they have spent. The signer knows whether
+ * it is willing to vouch for this pool at all. Only when both say yes does an authorisation exist.
  *
- * The order matters and is not interchangeable: the hold is recorded first, then signed. A
- * signature that exists without a hold is spending nobody is tracking; a hold without a signature
- * is a refund waiting to happen. Only one of those costs money.
+ * What gets signed is a ceiling, not a purchase: the most this wallet may ever have spent on the
+ * pool. The calculator compares it against its own running total, so the gate reserves nothing
+ * and a signature that is never used costs nobody anything. The one thing this file must get
+ * right is idempotency — a retried request must receive the same bytes — and that is a primary
+ * key, not a lock.
  */
-/** How long an authorisation stays valid. Long enough to approve in a wallet, short enough that an
- *  abandoned one does not sit around spendable. */
-export const CLAIM_AUTHORIZATION_TTL_MS = 5 * 60_000;
-const DEADLINE_SECONDS = CLAIM_AUTHORIZATION_TTL_MS / 1_000;
 const REQUEST_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
 /** Request ids cross an unauthenticated parser before they reach Postgres, so bound them here too. */
 export function isClaimRequestId(value) {
@@ -29,79 +26,74 @@ export class Claims {
     pool;
     ledger;
     signer;
-    onStrandedHold;
     now;
     constructor(pool, ledger, signer, 
-    /** Called when a hold could neither be signed nor released, and needs a human. */
-    onStrandedHold, 
     /** An internal seam for exact window-boundary tests. Production uses the process clock. */
     now = Date.now) {
         this.pool = pool;
         this.ledger = ledger;
         this.signer = signer;
-        this.onStrandedHold = onStrandedHold;
         this.now = now;
     }
     /**
-     * Authorise a player to spend up to `upToWei`, or explain why not.
+     * Authorise a player to spend up to `spendWei`, or explain why not.
      *
-     * The ledger's ceiling is a conservative mirror of the chain's: the contract tracks
-     * `walletSpentWei` per pool per wallet and enforces it whatever we believe. Being ahead of the
-     * chain is safe — we simply authorise less than we could. Being behind it would mean issuing a
-     * signature that reverts at the swap, which to a player is indistinguishable from being robbed.
+     * Returns the largest amount available rather than refusing an over-ask: a player pressing buy
+     * wants to spend what they have, and telling them "you asked for too much" when they asked for
+     * everything is a worse product than giving them everything. The ceiling in the signature is the
+     * same either way — it is what they have earned, not what they asked for.
+     *
+     * The ledger's view of spend is a conservative mirror of the chain's. Being behind it means
+     * signing a ceiling the calculator will refuse at the swap, which to a player is
+     * indistinguishable from being robbed; settlement keeps the gap to one reconciliation pass.
      */
-    async authorise(roundId, player, upToWei, requestId) {
+    async authorise(roundId, player, spendWei, requestId) {
         if (!isClaimRequestId(requestId))
             return { ok: false, refuse: 'claim.request_invalid' };
-        if (!isClaimAmount(upToWei))
+        if (!isClaimAmount(spendWei))
             return { ok: false, refuse: 'claim.amount_invalid' };
         const round = await this.pool.query(`select pool_id from rounds where id = $1`, [roundId]);
         const row = round.rows[0];
         if (!row)
             return { ok: false, refuse: 'claim.no_such_round' };
-        // The deadline is decided before the hold so both agree on when it stops being spendable.
-        const now = this.now();
-        const deadline = BigInt(Math.floor(now / 1000) + DEADLINE_SECONDS);
-        // Idempotency and the clock are decided under the same player lock. If an accepted request is
-        // still committing at the buzzer, a retry waits for it and recovers it rather than observing
-        // no row outside the transaction and being refused as a new, late request.
-        const held = await this.ledger.claim(roundId, player, upToWei, requestId, deadline, now);
-        if (!held.ok)
-            return { ok: false, refuse: held.refuse };
-        // Another replica may have completed the request while this one waited for the balance lock.
-        if (held.claim.signature && held.claim.signer) {
-            return { ok: true, payload: payload(row.pool_id, held.claim) };
-        }
-        if (held.claim.status === 'released')
-            return { ok: false, refuse: 'claim.request_released' };
-        return this.finish(row.pool_id, held.claim);
-    }
-    async finish(poolId, claim) {
-        try {
-            const candidate = await this.signer.sign(claim.player, poolId, claim.deadline, claim.wei, claim.nonce);
-            // Never return bytes that were not durably recorded. Concurrent signers both return the one
-            // stored winner, so retries stay byte-identical even if an implementation signs randomly.
-            const completed = await this.ledger.completeClaim(claim.nonce, candidate.signature, candidate.signer);
-            if (!completed?.signature || !completed.signer)
-                throw new Error('claim could not be completed');
-            return { ok: true, payload: payload(poolId, completed) };
-        }
-        catch (error) {
-            // The hold was taken and nothing will ever be spent against it, so it goes back. Without
-            // this, a signer outage quietly eats a player's allowance for the rest of the round.
-            //
-            // If the release ALSO fails, the original error still wins. Replacing it with a database
-            // error would hide the reason and leave the nonce nowhere in the logs — so it is named here,
-            // because that number is what a person needs to give the allowance back by hand.
-            await this.ledger.releaseUnsigned(claim.nonce).catch((releaseError) => {
-                this.onStrandedHold?.(claim.nonce, releaseError);
-            });
-            throw error;
-        }
+        const poolId = row.pool_id;
+        // An existing request deliberately wins over the clock and the current balance: it was issued
+        // under the earlier call's window, and a retry must get the same answer.
+        const existing = await this.ledger.findAuthorisation(roundId, player, requestId);
+        if (existing)
+            return this.answer(poolId, existing, spendWei);
+        const quote = await this.ledger.quote(roundId, player, this.now());
+        if (!quote.ok)
+            return { ok: false, refuse: quote.refuse };
+        const spend = spendWei < quote.available ? spendWei : quote.available;
+        const signed = await this.signer.sign(player, poolId, quote.deadlineSeconds, quote.ceiling);
+        const stored = await this.ledger.storeAuthorisation(roundId, {
+            player,
+            requestId,
+            requestedWei: spendWei,
+            spendCeilingWei: signed.spendCeilingWei,
+            spendWei: spend,
+            deadline: signed.deadline,
+            signature: signed.signature,
+            signer: signed.signer,
+        });
+        return this.answer(poolId, stored, spendWei);
     }
-    /** Give back every authorisation that expired unspent. */
-    releaseExpired() {
-        return this.ledger.releaseExpired(Math.floor(this.now() / 1000));
+    answer(poolId, stored, requestedWei) {
+        if (stored.requestedWei !== requestedWei)
+            return { ok: false, refuse: 'claim.request_mismatch' };
+        return {
+            ok: true,
+            payload: {
+                buyer: stored.player,
+                poolId,
+                deadline: stored.deadline,
+                spendCeilingWei: stored.spendCeilingWei,
+                signature: stored.signature,
+                signer: stored.signer,
+            },
+            spend: stored.spendWei,
+        };
     }
     /** What this player could spend right now. */
     available(roundId, player) {
@@ -112,17 +104,4 @@ export class Claims {
         return this.ledger.economyBalance(roundId, player);
     }
 }
-function payload(poolId, claim) {
-    if (!claim.signature || !claim.signer)
-        throw new Error('claim is not signed');
-    return {
-        buyer: claim.player,
-        poolId: poolId,
-        deadline: claim.deadline,
-        maxSpendWei: claim.wei,
-        nonce: claim.nonce,
-        signature: claim.signature,
-        signer: claim.signer,
-    };
-}
 //# sourceMappingURL=claims.js.map

package/dist/claims.js.map

@@ -1 +1 @@
-{"version":3,"file":"claims.js","sourceRoot":"","sources":["../src/claims.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,EAAE,MAAM,EAA+B,MAAM,aAAa,CAAC;AAGlE;;;;;;;;;;;GAWG;AAEH;mDACmD;AACnD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAG,MAAM,CAAC;AACrD,MAAM,gBAAgB,GAAG,0BAA0B,GAAG,KAAK,CAAC;AAC5D,MAAM,UAAU,GAAG,qCAAqC,CAAC;AAEzD,sGAAsG;AACtG,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,IAAI,UAAU,CAAC;AACxE,CAAC;AAMD,MAAM,OAAO,MAAM;IAEE;IACA;IACA;IAEA;IAEA;IAPnB,YACmB,IAAU,EACV,MAAc,EACd,MAAqB;IACtC,kFAAkF;IACjE,cAAwD;IACzE,2FAA2F;IAC1E,MAAoB,IAAI,CAAC,GAAG;QAN5B,SAAI,GAAJ,IAAI,CAAM;QACV,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAe;QAErB,mBAAc,GAAd,cAAc,CAA0C;QAExD,QAAG,GAAH,GAAG,CAAyB;IAC5C,CAAC;IAEJ;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,MAAgB,EAAE,OAAe,EAAE,SAAiB;QACnF,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QACxF,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAElF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAsB,0CAA0C,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAChH,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAE9D,0FAA0F;QAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;QACnE,8FAA8F;QAC9F,6FAA6F;QAC7F,2EAA2E;QAC3E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAExD,6FAA6F;QAC7F,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QAC7F,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,KAAY;QAC/C,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACtC,KAAK,CAAC,MAAuB,EAC7B,MAAuB,EACvB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,KAAK,CACZ,CAAC;YACF,4FAA4F;YAC5F,0FAA0F;YAC1F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YACtG,IAAI,CAAC,SAAS,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAChG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yFAAyF;YACzF,qFAAqF;YACrF,EAAE;YACF,yFAAyF;YACzF,6FAA6F;YAC7F,iFAAiF;YACjF,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,YAAqB,EAAE,EAAE;gBAC7E,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,cAAc;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,8CAA8C;IAC9C,SAAS,CAAC,OAAe,EAAE,MAAgB;QACzC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,qDAAqD;IACrD,cAAc,CAAC,OAAe,EAAE,MAAgB;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;CACF;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,KAAY;IAC3C,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC9E,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,MAAuB;QACpC,MAAM,EAAE,MAAuB;QAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,GAAG;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"claims.js","sourceRoot":"","sources":["../src/claims.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,EAAE,MAAM,EAA6C,MAAM,aAAa,CAAC;AAGhF;;;;;;;;;;;;GAYG;AAEH,MAAM,UAAU,GAAG,qCAAqC,CAAC;AAEzD,sGAAsG;AACtG,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,IAAI,UAAU,CAAC;AACxE,CAAC;AAMD,MAAM,OAAO,MAAM;IAEE;IACA;IACA;IAEA;IALnB,YACmB,IAAU,EACV,MAAc,EACd,MAAqB;IACtC,2FAA2F;IAC1E,MAAoB,IAAI,CAAC,GAAG;QAJ5B,SAAI,GAAJ,IAAI,CAAM;QACV,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAe;QAErB,QAAG,GAAH,GAAG,CAAyB;IAC5C,CAAC;IAEJ;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,MAAgB,EAAE,QAAgB,EAAE,SAAiB;QACpF,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QACxF,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAEnF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAsB,0CAA0C,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAChH,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAwB,CAAC;QAE5C,8FAA8F;QAC9F,yEAAyE;QACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACjF,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE7D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAE1D,MAAM,KAAK,GAAG,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAuB,EAAE,MAAM,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7G,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE;YAC3D,MAAM;YACN,SAAS;YACT,YAAY,EAAE,QAAQ;YACtB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAEO,MAAM,CAAC,MAAqB,EAAE,MAA2B,EAAE,YAAoB;QACrF,IAAI,MAAM,CAAC,YAAY,KAAK,YAAY;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QACjG,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE;gBACP,KAAK,EAAE,MAAM,CAAC,MAAuB;gBACrC,MAAM;gBACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB;YACD,KAAK,EAAE,MAAM,CAAC,QAAQ;SACvB,CAAC;IACJ,CAAC;IAED,8CAA8C;IAC9C,SAAS,CAAC,OAAe,EAAE,MAAgB;QACzC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,qDAAqD;IACrD,cAAc,CAAC,OAAe,EAAE,MAAgB;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;CACF"}

package/dist/demo.d.ts

@@ -31,7 +31,7 @@ export interface Demo {
     walletAddress: `0x${string}`;
     /** Everything the fake wallet was asked to buy, in order. Empty until somebody buys. */
     purchases: {
-        maxSpendWei: string;
+        spend: string;
         at: number;
     }[];
     pool: pg.Pool;

package/dist/demo.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"demo.d.ts","sourceRoot":"","sources":["../src/demo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AA+B5D,MAAM,WAAW,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU;IAC/E,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,IAAI;IACnB,GAAG,EAAE,eAAe,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,aAAa,EAAE,KAAK,MAAM,EAAE,CAAC;IAC7B,wFAAwF;IACxF,SAAS,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjD,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;CACf;AAID;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EACvF,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,GACzE,OAAO,CAAC,IAAI,CAAC,CAmGf"}
+{"version":3,"file":"demo.d.ts","sourceRoot":"","sources":["../src/demo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AA+B5D,MAAM,WAAW,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU;IAC/E,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,IAAI;IACnB,GAAG,EAAE,eAAe,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,aAAa,EAAE,KAAK,MAAM,EAAE,CAAC;IAC7B,wFAAwF;IACxF,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3C,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;CACf;AAID;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EACvF,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,GACzE,OAAO,CAAC,IAAI,CAAC,CAmGf"}