@soltracer/nft-staking 0.2.1 → 0.2.4

package/dist/index.d.ts

@@ -1,5 +1,9 @@
-export { NftStakingClient, type FeeParams } from "./client";
-export { NFT_STAKING_PROGRAM_ID } from "@soltracer/core";
+export { NftStakingClient, type FeeParams, type NftRewardAmount, type NftRewardSummary, type NftRewardSummaryOptions, } from "./client";
+export { NFT_STAKING_PROGRAM_ID, getStakeConfigPda, getStakePoolPda, getStakeEntryPda, getStakerAccountPda, getCollectionPda, getPoolAuthorityPda, getPoolSecondaryRewardsPda, getStakerSecondaryRewardsPda, StakingMode, NftStandard, RewardType, TraitBonusMode, } from "@soltracer/core";
 export { type NftStaking as NftStakingIDLType } from "./idl";
 export { default as NftStakingIDL } from "./idl.json";
+export * from "./errors";
+export * from "./helpers";
+export { buildTraitProofMessage, TRAIT_PROOF_MSG_LEN } from "./traitProof";
+export { GATE_TYPE_NONE, GATE_TYPE_WALLET, GATE_TYPE_TOKEN_MINT, type GateType, type MerkleTree, hashLeaf, hashPair, buildMerkleTree, getMerkleProof, proofToAnchorArg, rootToAnchorArg, } from "./merkle";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,KAAK,UAAU,IAAI,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAC7D,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,4BAA4B,EAC5B,WAAW,EACX,WAAW,EACX,UAAU,EACV,cAAc,GACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,KAAK,UAAU,IAAI,iBAAiB,EAAE,MAAM,OAAO,CAAA;AAC5D,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,YAAY,CAAA;AACrD,cAAc,UAAU,CAAA;AACxB,cAAc,WAAW,CAAA;AACzB,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAC1E,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,QAAQ,EACR,QAAQ,EACR,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,eAAe,GAChB,MAAM,UAAU,CAAA"}

package/dist/index.js

@@ -1,4 +1,8 @@
-export { NftStakingClient } from "./client";
-export { NFT_STAKING_PROGRAM_ID } from "@soltracer/core";
+export { NftStakingClient, } from "./client";
+export { NFT_STAKING_PROGRAM_ID, getStakeConfigPda, getStakePoolPda, getStakeEntryPda, getStakerAccountPda, getCollectionPda, getPoolAuthorityPda, getPoolSecondaryRewardsPda, getStakerSecondaryRewardsPda, StakingMode, NftStandard, RewardType, TraitBonusMode, } from "@soltracer/core";
 export { default as NftStakingIDL } from "./idl.json";
+export * from "./errors";
+export * from "./helpers";
+export { buildTraitProofMessage, TRAIT_PROOF_MSG_LEN } from "./traitProof";
+export { GATE_TYPE_NONE, GATE_TYPE_WALLET, GATE_TYPE_TOKEN_MINT, hashLeaf, hashPair, buildMerkleTree, getMerkleProof, proofToAnchorArg, rootToAnchorArg, } from "./merkle";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAkB,MAAM,UAAU,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,GAKjB,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,4BAA4B,EAC5B,WAAW,EACX,WAAW,EACX,UAAU,EACV,cAAc,GACf,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,YAAY,CAAA;AACrD,cAAc,UAAU,CAAA;AACxB,cAAc,WAAW,CAAA;AACzB,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAC1E,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EAGpB,QAAQ,EACR,QAAQ,EACR,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,eAAe,GAChB,MAAM,UAAU,CAAA"}

package/dist/merkle.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Merkle-gate helpers for NFT-staking pool access control.
+ *
+ * On-chain verification (`programs/nft-staking/src/merkle.rs`) uses:
+ *
+ *   - Leaf hash:    sha256(leaf_data_bytes)        where leaf_data_bytes is
+ *                                                  the 32-byte PublicKey of
+ *                                                  the gated entity (wallet
+ *                                                  for GATE_TYPE_WALLET,
+ *                                                  mint for GATE_TYPE_TOKEN_MINT).
+ *   - Inner node:   sha256(min(a, b) || max(a, b)) (canonical ordering — no
+ *                                                  position bits in the proof).
+ *
+ * Use `buildMerkleTree(leafKeys, gateType)` once when seeding the pool's
+ * `merkleRoot` via `updateStakePool`, then `getMerkleProof(tree, leafKey)`
+ * for each `stakeNft` / `stakeCnft` call.
+ */
+import { PublicKey } from "@solana/web3.js";
+import { type PkInput } from "@soltracer/core";
+export declare const GATE_TYPE_NONE = 0;
+export declare const GATE_TYPE_WALLET = 1;
+export declare const GATE_TYPE_TOKEN_MINT = 2;
+export type GateType = typeof GATE_TYPE_NONE | typeof GATE_TYPE_WALLET | typeof GATE_TYPE_TOKEN_MINT;
+/** Leaf hash: `sha256(pubkeyBytes)`. Matches `hashv(&[leaf_data])` on-chain. */
+export declare function hashLeaf(key: PkInput): Uint8Array;
+/** Pair-hash two nodes with canonical ordering (`sha256(min || max)`). */
+export declare function hashPair(a: Uint8Array, b: Uint8Array): Uint8Array;
+export interface MerkleTree {
+    /** Layer 0 = leaf hashes (in original order); each subsequent layer is the parent layer. */
+    layers: Uint8Array[][];
+    /** 32-byte root — store on-chain via `updateStakePool({ merkleRoot })`. */
+    root: Uint8Array;
+    /** Original input keys (preserved for proof lookup by index). */
+    leafKeys: PublicKey[];
+}
+/**
+ * Build a canonical-ordering Merkle tree from a list of gated entity keys
+ * (wallets for `GATE_TYPE_WALLET`, mints for `GATE_TYPE_TOKEN_MINT`).
+ * Duplicate keys are de-duplicated before hashing.
+ */
+export declare function buildMerkleTree(leafKeys: PkInput[]): MerkleTree;
+/**
+ * Get the inclusion proof for `leafKey` in `tree`. Returns the proof as
+ * an array of 32-byte `Uint8Array`s — convert to `number[][]` for the
+ * Anchor instruction args via `proof.map(Array.from)`.
+ *
+ * Throws if `leafKey` is not present in the tree.
+ */
+export declare function getMerkleProof(tree: MerkleTree, leafKey: PkInput): Uint8Array[];
+/**
+ * Convert a `Uint8Array[]` proof to the `number[][]` shape Anchor expects
+ * for the `gate_proof: Vec<[u8; 32]>` argument.
+ */
+export declare function proofToAnchorArg(proof: Uint8Array[]): number[][];
+/** Convert the 32-byte root to the `number[]` shape Anchor expects. */
+export declare function rootToAnchorArg(root: Uint8Array): number[];
+//# sourceMappingURL=merkle.d.ts.map

package/dist/merkle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,OAAO,EAAQ,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEpD,eAAO,MAAM,cAAc,IAAI,CAAA;AAC/B,eAAO,MAAM,gBAAgB,IAAI,CAAA;AACjC,eAAO,MAAM,oBAAoB,IAAI,CAAA;AAErC,MAAM,MAAM,QAAQ,GAAG,OAAO,cAAc,GAAG,OAAO,gBAAgB,GAAG,OAAO,oBAAoB,CAAA;AAwBpG,gFAAgF;AAChF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAEjD;AAED,0EAA0E;AAC1E,wBAAgB,QAAQ,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,UAAU,CAEjE;AAED,MAAM,WAAW,UAAU;IACzB,4FAA4F;IAC5F,MAAM,EAAE,UAAU,EAAE,EAAE,CAAA;IACtB,2EAA2E;IAC3E,IAAI,EAAE,UAAU,CAAA;IAChB,iEAAiE;IACjE,QAAQ,EAAE,SAAS,EAAE,CAAA;CACtB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,UAAU,CA6B/D;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,UAAU,EAAE,CAmB/E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,EAAE,CAEhE;AAED,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,EAAE,CAE1D"}

package/dist/merkle.js

@@ -0,0 +1,110 @@
+import { sha256 as nobleSha256 } from "@noble/hashes/sha256";
+import { toPk } from "@soltracer/core";
+export const GATE_TYPE_NONE = 0;
+export const GATE_TYPE_WALLET = 1;
+export const GATE_TYPE_TOKEN_MINT = 2;
+function sha256(...parts) {
+    let total = 0;
+    for (const p of parts)
+        total += p.length;
+    const buf = new Uint8Array(total);
+    let off = 0;
+    for (const p of parts) {
+        buf.set(p, off);
+        off += p.length;
+    }
+    return nobleSha256(buf);
+}
+function compare(a, b) {
+    const len = Math.min(a.length, b.length);
+    for (let i = 0; i < len; i++) {
+        const av = a[i];
+        const bv = b[i];
+        if (av !== bv)
+            return av - bv;
+    }
+    return a.length - b.length;
+}
+/** Leaf hash: `sha256(pubkeyBytes)`. Matches `hashv(&[leaf_data])` on-chain. */
+export function hashLeaf(key) {
+    return sha256(toPk(key).toBytes());
+}
+/** Pair-hash two nodes with canonical ordering (`sha256(min || max)`). */
+export function hashPair(a, b) {
+    return compare(a, b) <= 0 ? sha256(a, b) : sha256(b, a);
+}
+/**
+ * Build a canonical-ordering Merkle tree from a list of gated entity keys
+ * (wallets for `GATE_TYPE_WALLET`, mints for `GATE_TYPE_TOKEN_MINT`).
+ * Duplicate keys are de-duplicated before hashing.
+ */
+export function buildMerkleTree(leafKeys) {
+    if (leafKeys.length === 0) {
+        throw new Error("buildMerkleTree: at least one leaf is required");
+    }
+    // Stable de-dup preserving first occurrence.
+    const seen = new Set();
+    const uniqueKeys = [];
+    for (const k of leafKeys) {
+        const pk = toPk(k);
+        const b58 = pk.toBase58();
+        if (seen.has(b58))
+            continue;
+        seen.add(b58);
+        uniqueKeys.push(pk);
+    }
+    const leaves = uniqueKeys.map((k) => hashLeaf(k));
+    const layers = [leaves];
+    let current = leaves;
+    while (current.length > 1) {
+        const next = [];
+        for (let i = 0; i < current.length; i += 2) {
+            const left = current[i];
+            const right = (i + 1 < current.length ? current[i + 1] : current[i]);
+            next.push(hashPair(left, right));
+        }
+        layers.push(next);
+        current = next;
+    }
+    return { layers, root: current[0], leafKeys: uniqueKeys };
+}
+/**
+ * Get the inclusion proof for `leafKey` in `tree`. Returns the proof as
+ * an array of 32-byte `Uint8Array`s — convert to `number[][]` for the
+ * Anchor instruction args via `proof.map(Array.from)`.
+ *
+ * Throws if `leafKey` is not present in the tree.
+ */
+export function getMerkleProof(tree, leafKey) {
+    const target = toPk(leafKey).toBase58();
+    const index = tree.leafKeys.findIndex((k) => k.toBase58() === target);
+    if (index < 0) {
+        throw new Error(`getMerkleProof: leaf ${target} not in tree`);
+    }
+    const proof = [];
+    let idx = index;
+    for (let depth = 0; depth < tree.layers.length - 1; depth++) {
+        const layer = tree.layers[depth];
+        const sibling = idx ^ 1;
+        if (sibling < layer.length) {
+            proof.push(layer[sibling]);
+        }
+        else {
+            proof.push(layer[idx]); // odd → sibling is self
+        }
+        idx = idx >> 1;
+    }
+    return proof;
+}
+/**
+ * Convert a `Uint8Array[]` proof to the `number[][]` shape Anchor expects
+ * for the `gate_proof: Vec<[u8; 32]>` argument.
+ */
+export function proofToAnchorArg(proof) {
+    return proof.map((n) => Array.from(n));
+}
+/** Convert the 32-byte root to the `number[]` shape Anchor expects. */
+export function rootToAnchorArg(root) {
+    return Array.from(root);
+}
+//# sourceMappingURL=merkle.js.map

package/dist/merkle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,MAAM,IAAI,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,EAAE,IAAI,EAAgB,MAAM,iBAAiB,CAAA;AAEpD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAA;AAC/B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAA;AACjC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAA;AAIrC,SAAS,MAAM,CAAC,GAAG,KAAmB;IACpC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,KAAK,IAAI,CAAC,CAAC,MAAM,CAAA;IACxC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,GAAG,GAAG,CAAC,CAAA;IACX,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACf,GAAG,IAAI,CAAC,CAAC,MAAM,CAAA;IACjB,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,OAAO,CAAC,CAAa,EAAE,CAAa;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAW,CAAA;QACzB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAW,CAAA;QACzB,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAA;IAC/B,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAA;AAC5B,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,QAAQ,CAAC,GAAY;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;AACpC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,QAAQ,CAAC,CAAa,EAAE,CAAa;IACnD,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACzD,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAmB;IACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IACD,6CAA6C;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,UAAU,GAAgB,EAAE,CAAA;IAClC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QAClB,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACjD,MAAM,MAAM,GAAmB,CAAC,MAAM,CAAC,CAAA;IACvC,IAAI,OAAO,GAAG,MAAM,CAAA;IACpB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAiB,EAAE,CAAA;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAe,CAAA;YACrC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAe,CAAA;YAClF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;QAClC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjB,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAA;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,OAAgB;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,MAAM,CAAC,CAAA;IACrE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,cAAc,CAAC,CAAA;IAC/D,CAAC;IACD,MAAM,KAAK,GAAiB,EAAE,CAAA;IAC9B,IAAI,GAAG,GAAG,KAAK,CAAA;IACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAiB,CAAA;QAChD,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,CAAA;QACvB,IAAI,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,CAAC,CAAA;QAC1C,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC,CAAA,CAAC,wBAAwB;QAC/D,CAAC;QACD,GAAG,GAAG,GAAG,IAAI,CAAC,CAAA;IAChB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAmB;IAClD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AACxC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,IAAgB;IAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}

package/dist/traitProof.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Trait-bonus proof builder for NFT-staking `claim_rewards`.
+ *
+ * Audit 2026-05-11 F-H2: the on-chain Ed25519 message embeds
+ * `staker.total_claimed` (strictly monotonic) instead of `last_update_at`,
+ * eliminating same-second replay. Callers MUST read the live
+ * `StakerAccount.totalClaimed` immediately before signing.
+ *
+ * Message layout — 80 bytes, little-endian where applicable:
+ *
+ *   [0..32]   pool                 (PublicKey bytes)
+ *   [32..64]  staker wallet        (PublicKey bytes)
+ *   [64..72]  trait_bonus_rate u64 (LE)
+ *   [72..80]  total_claimed   u64  (LE)
+ *
+ * Sign this byte payload with the pool's trait-authority Ed25519 keypair
+ * (or the global trait authority) and prepend an Ed25519 instruction with
+ * the signature, expected pubkey, and message to the same transaction that
+ * invokes `claimRewards(..., traitBonusRate)`.
+ */
+import { type PkInput, type BnInput } from "@soltracer/core";
+/** Fixed message length consumed by the on-chain Ed25519 verifier. */
+export declare const TRAIT_PROOF_MSG_LEN = 80;
+/**
+ * Build the 80-byte trait-proof message exactly as the on-chain handler
+ * reconstructs it. `totalClaimed` must be the LIVE value of
+ * `StakerAccount.totalClaimed` (i.e. fetched within the same client tx
+ * preparation window — otherwise the signature will be rejected).
+ */
+export declare function buildTraitProofMessage(params: {
+    pool: PkInput;
+    wallet: PkInput;
+    traitBonusRate: BnInput;
+    /** Strictly monotonic nonce — `StakerAccount.totalClaimed` */
+    totalClaimed: BnInput;
+}): Buffer;
+/**
+ * Example (off-chain trait-authority server):
+ *
+ * ```ts
+ * import nacl from "tweetnacl"
+ * import { Ed25519Program } from "@solana/web3.js"
+ * import { buildTraitProofMessage } from "@soltracer/nft-staking"
+ *
+ * const message = buildTraitProofMessage({
+ *   pool,
+ *   wallet: staker,
+ *   traitBonusRate,
+ *   totalClaimed: stakerAccount.totalClaimed,
+ * })
+ * const signature = nacl.sign.detached(message, traitAuthority.secretKey)
+ * const ed25519Ix = Ed25519Program.createInstructionWithPublicKey({
+ *   publicKey: traitAuthority.publicKey.toBytes(),
+ *   message,
+ *   signature,
+ * })
+ * const claimIx = await client.claimRewards(poolId, { traitBonusRate })
+ * await provider.sendAndConfirm(new Transaction().add(ed25519Ix, claimIx))
+ * ```
+ */
+//# sourceMappingURL=traitProof.d.ts.map

package/dist/traitProof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traitProof.d.ts","sourceRoot":"","sources":["../src/traitProof.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAQ,KAAK,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAElE,sEAAsE;AACtE,eAAO,MAAM,mBAAmB,KAAK,CAAA;AAcrC;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,IAAI,EAAE,OAAO,CAAA;IACb,MAAM,EAAE,OAAO,CAAA;IACf,cAAc,EAAE,OAAO,CAAA;IACvB,8DAA8D;IAC9D,YAAY,EAAE,OAAO,CAAA;CACtB,GAAG,MAAM,CAOT;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG"}

package/dist/traitProof.js

@@ -0,0 +1,72 @@
+/**
+ * Trait-bonus proof builder for NFT-staking `claim_rewards`.
+ *
+ * Audit 2026-05-11 F-H2: the on-chain Ed25519 message embeds
+ * `staker.total_claimed` (strictly monotonic) instead of `last_update_at`,
+ * eliminating same-second replay. Callers MUST read the live
+ * `StakerAccount.totalClaimed` immediately before signing.
+ *
+ * Message layout — 80 bytes, little-endian where applicable:
+ *
+ *   [0..32]   pool                 (PublicKey bytes)
+ *   [32..64]  staker wallet        (PublicKey bytes)
+ *   [64..72]  trait_bonus_rate u64 (LE)
+ *   [72..80]  total_claimed   u64  (LE)
+ *
+ * Sign this byte payload with the pool's trait-authority Ed25519 keypair
+ * (or the global trait authority) and prepend an Ed25519 instruction with
+ * the signature, expected pubkey, and message to the same transaction that
+ * invokes `claimRewards(..., traitBonusRate)`.
+ */
+import { toPk } from "@soltracer/core";
+/** Fixed message length consumed by the on-chain Ed25519 verifier. */
+export const TRAIT_PROOF_MSG_LEN = 80;
+function u64LE(value) {
+    const bi = typeof value === "bigint"
+        ? value
+        : typeof value === "number"
+            ? BigInt(value)
+            : BigInt(value.toString());
+    const buf = Buffer.alloc(8);
+    buf.writeBigUInt64LE(bi);
+    return buf;
+}
+/**
+ * Build the 80-byte trait-proof message exactly as the on-chain handler
+ * reconstructs it. `totalClaimed` must be the LIVE value of
+ * `StakerAccount.totalClaimed` (i.e. fetched within the same client tx
+ * preparation window — otherwise the signature will be rejected).
+ */
+export function buildTraitProofMessage(params) {
+    const msg = Buffer.alloc(TRAIT_PROOF_MSG_LEN);
+    toPk(params.pool).toBuffer().copy(msg, 0);
+    toPk(params.wallet).toBuffer().copy(msg, 32);
+    u64LE(params.traitBonusRate).copy(msg, 64);
+    u64LE(params.totalClaimed).copy(msg, 72);
+    return msg;
+}
+/**
+ * Example (off-chain trait-authority server):
+ *
+ * ```ts
+ * import nacl from "tweetnacl"
+ * import { Ed25519Program } from "@solana/web3.js"
+ * import { buildTraitProofMessage } from "@soltracer/nft-staking"
+ *
+ * const message = buildTraitProofMessage({
+ *   pool,
+ *   wallet: staker,
+ *   traitBonusRate,
+ *   totalClaimed: stakerAccount.totalClaimed,
+ * })
+ * const signature = nacl.sign.detached(message, traitAuthority.secretKey)
+ * const ed25519Ix = Ed25519Program.createInstructionWithPublicKey({
+ *   publicKey: traitAuthority.publicKey.toBytes(),
+ *   message,
+ *   signature,
+ * })
+ * const claimIx = await client.claimRewards(poolId, { traitBonusRate })
+ * await provider.sendAndConfirm(new Transaction().add(ed25519Ix, claimIx))
+ * ```
+ */
+//# sourceMappingURL=traitProof.js.map

package/dist/traitProof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traitProof.js","sourceRoot":"","sources":["../src/traitProof.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,IAAI,EAA8B,MAAM,iBAAiB,CAAA;AAElE,sEAAsE;AACtE,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAA;AAErC,SAAS,KAAK,CAAC,KAAc;IAC3B,MAAM,EAAE,GACN,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3B,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACxB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAMtC;IACC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAC5C,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAC1C,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IACxC,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soltracer/nft-staking",
-  "version": "0.2.1",
+  "version": "0.2.4",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -11,7 +11,9 @@
     }
   },
   "dependencies": {
-    "@soltracer/core": "0.1.2"
+    "@noble/hashes": "^1.8.0",
+    "@soltracer/core": "0.2.0",
+    "@soltracer/cpi-accounts": "0.1.0"
   },
   "devDependencies": {
     "typescript": "^5.7.0"