@rolly-dev/witness-core 1.4.0 → 2.0.0

package/index.d.ts

@@ -181,6 +181,13 @@ export interface ProcessTxResult {
    * key-registration signature must carry.
    */
   newAccountNonce: string
+  /**
+   * Post-tx provider allowance (62-bit, decimal): the remaining cap on
+   * operator-authorized provider bets. `amount` after a
+   * `set_provider_allowance` (tx 13), decremented by a provider `bet` (2),
+   * unchanged otherwise (a provider `win` does NOT restore it).
+   */
+  newProviderAllowance: string
   winAmount: string
   random?: string
   nextSeedHash?: string
@@ -329,6 +336,17 @@ export declare class MerkleEngine {
    * withdrawal signed against it stays valid while the user keeps playing.
    */
   getAccountNonce(userId: number): bigint
+  /**
+   * Provider allowance committed in the leaf (62-bit): the remaining amount
+   * game providers may debit through operator-authorized provider bets
+   * (tx 2). Set by the owner-signed `set_provider_allowance` (tx 13),
+   * decremented by each provider bet, never restored by a provider win. `0`
+   * for accounts that never granted one — every provider bet against such an
+   * account is rejected with `ProviderAllowanceExceeded`. The backend serves
+   * this to the client and clamps the provider `balance` callback to
+   * `min(balance, allowance)`.
+   */
+  getProviderAllowance(userId: number): bigint
   /** Spendable balance minus all frozen buckets (withdrawal + game locks). */
   getAvailable(userId: number): bigint
   getSeedHash(userId: number): Buffer
@@ -385,8 +403,8 @@ export declare class MerkleEngine {
   hasInitSeedReservation(userId: number): boolean
   /**
    * Open a crash-round auth lock for `user_id`: while set, `process_tx`
-   * rejects a game-lane tx (`in_house_bet`) or a key rotation
-   * (`key_register`) with `CrashRoundOpen`, so the account's pre-signed
+   * rejects a game-lane tx (`in_house_bet`, `set_provider_allowance`) or a
+   * key rotation (`key_register`) with `CrashRoundOpen`, so the account's pre-signed
    * `crash_settle` auto-cashout keeps its bound game-lane nonce and signing
    * key. Account-lane withdrawal / transfer are NOT blocked — they move a
    * counter the cashout never signed. Called by the crash game when a bet is

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rolly-dev/witness-core",
-  "version": "1.4.0",
+  "version": "2.0.0",
   "description": "Authoritative native witness-state engine for Rolly ZK-Rollup (Node-API addon)",
   "main": "index.js",
   "types": "index.d.ts",