@sparkdreamnft/sparkdreamjs 0.0.16 → 0.0.18

package/sparkdream/session/v1/params.d.ts

@@ -1,5 +1,4 @@
 import { Duration, DurationAmino } from "../../../google/protobuf/duration";
-import { Coin, CoinAmino } from "../../../cosmos/base/v1beta1/coin";
 import { BinaryReader, BinaryWriter } from "../../../binary";
 import { DeepPartial } from "../../../helpers";
 /**
@@ -32,14 +31,145 @@ export interface Params {
      */
     maxExpiration: Duration;
     /**
-     * Maximum gas budget per session.
+     * Maximum gas budget per session, in bond-denom micro-units (the chain's
+     * bond denom is resolved at runtime via x/identity).
      */
-    maxSpendLimit: Coin;
+    maxSpendLimitAmount: string;
     /**
      * Maximum exec_count per session. Must be > 0; sessions must declare
      * a finite cap (1 <= session.max_exec_count <= params.max_exec_count).
      */
     maxExecCount: bigint;
+    /**
+     * --- RecurringPull (P3) ---
+     * Minimum period_seconds on a RECURRING_PULL grant. Default 86_400 (1 day);
+     * prevents abusive sub-second polling.
+     */
+    minRecurringPeriodSeconds: bigint;
+    /**
+     * Maximum (expires_at - start_time) on a RECURRING_PULL grant. Default
+     * 31_536_000 (1 year); long-lived recurring authorizations need explicit
+     * re-issuance.
+     */
+    maxRecurringDurationSeconds: bigint;
+    /**
+     * Maximum number of active RECURRING_PULL grants per granter. Default 50.
+     */
+    maxRecurringPullsPerGranter: number;
+    /**
+     * --- SpendingAllowance (P4) ---
+     * Minimum period_seconds on a SPENDING_ALLOWANCE grant. Default 3_600
+     * (1 hour); finer-grained than RecurringPull to support rolling burst
+     * budgets.
+     */
+    minAllowancePeriodSeconds: bigint;
+    /**
+     * Maximum number of active SPENDING_ALLOWANCE grants per granter.
+     * Default 20.
+     */
+    maxAllowancesPerGranter: number;
+    /**
+     * Maximum size of an allowed_recipients whitelist. Default 50. Prevents
+     * state-bloat attacks by capping the per-grant list length.
+     */
+    maxAllowanceRecipientList: number;
+    /**
+     * Minimum amount per MsgPullAllowance call, as sdk.Int (string). Default
+     * "1000" (1000 uspark / 0.001 SPARK). Closes the "1 utoken at a time to
+     * bloat events / drain state" griefing pattern.
+     */
+    minPullAmount: string;
+    /**
+     * --- ScheduledOneshot (P5) ---
+     * Minimum (fire_at - block_time) at creation. Default 60s; closes
+     * front-running edge cases.
+     */
+    minScheduleDelaySeconds: bigint;
+    /**
+     * Maximum (fire_at - block_time) at creation. Default 31_536_000 (1 year).
+     * Applies to fire_at only; max_grant_lifetime_seconds applies to expires_at.
+     */
+    maxScheduleHorizonSeconds: bigint;
+    /**
+     * Required buffer between fire_at and expires_at. Default 3600 (1h);
+     * makes the EndBlocker fire-vs-expire race impossible.
+     */
+    fireToExpiryBufferSeconds: bigint;
+    /**
+     * Maximum active (non-paused) ScheduledOneshot grants per granter. Default 100.
+     */
+    maxPendingOneshotsPerGranter: number;
+    /**
+     * Maximum paused (PAUSED_INSUFFICIENT_FUNDS) ScheduledOneshot grants per
+     * granter. Default 20. Separate from active cap so paused grants don't
+     * pin slots indefinitely.
+     */
+    maxPausedOneshotsPerGranter: number;
+    /**
+     * Auto-revoke a paused oneshot after this many seconds. Default 604_800
+     * (7 days). Deposit refunded on auto-revoke.
+     */
+    pausedOneshotTtlSeconds: bigint;
+    /**
+     * Minimum gas_limit allowed on OneshotExec. Default 30_000.
+     */
+    minOneshotExecGas: bigint;
+    /**
+     * Maximum gas_limit allowed on OneshotExec. Default 200_000.
+     */
+    maxOneshotExecGas: bigint;
+    /**
+     * Price per gas unit for OneshotExec deposit calculation, as sdk.Dec
+     * string. Default "0.0025" (100x typical min_gas_price). Floor must be
+     * >= chain's effective min_gas_price. Denominated in the chain's bond
+     * denom (resolved at runtime via x/identity).
+     */
+    oneshotGasPrice: string;
+    /**
+     * Flat per-slot fee on every Oneshot grant creation (both Transfer and
+     * Exec variants), in bond-denom micro-units. Default 1000 (0.001 SPARK).
+     * Closes the "free state slot" hole.
+     */
+    oneshotCreationFee: bigint;
+    /**
+     * Hard floor on total deposit, in bond-denom micro-units. Default 1000.
+     * Defeats `gas_limit=1` zero-deposit slot griefing.
+     */
+    minOneshotDeposit: bigint;
+    /**
+     * Per-EndBlocker pass cap on dispatches (fire, auto-revoke, expire each
+     * get their own cap). Default 100.
+     */
+    maxEndblockerDispatchesPerPass: number;
+    /**
+     * --- Cross-type (P3) ---
+     * Additional coins permitted as denom in RecurringPull / SpendingAllowance
+     * / Oneshot grants. Default empty — the chain's bond denom is ALWAYS
+     * allowed; this list adds additional permitted denoms (e.g. IBC vouchers).
+     * DREAM is permanently excluded at the handler level regardless of
+     * contents.
+     */
+    allowedDenoms: string[];
+    /**
+     * General cap on `expires_at - created_at` across all grant types. Default
+     * 31_536_000 (1 year).
+     */
+    maxGrantLifetimeSeconds: bigint;
+    /**
+     * --- Module-bypass (P8) ---
+     * Bech32 addresses of module accounts authorized to call
+     * `CreateGrantOnBehalfOf` (the signature-bypass keeper entrypoint).
+     * Default empty — no module may bypass signatures unless explicitly
+     * gov-allowlisted.
+     *
+     * The bypass exists to let trusted modules (e.g. x/commons for council
+     * recurring spends) create grants for module-account granters that
+     * can't sign a real tx. Each address listed here is a strict trust
+     * grant; the bypass skips signature + sequence verification, so a
+     * compromised or buggy allowlisted module could synthesize arbitrary
+     * grants. Add only after a security review.
+     */
+    authorizedGrantCreators: string[];
 }
 export interface ParamsProtoMsg {
     typeUrl: "/sparkdream.session.v1.Params";
@@ -75,14 +205,145 @@ export interface ParamsAmino {
      */
     max_expiration?: DurationAmino;
     /**
-     * Maximum gas budget per session.
+     * Maximum gas budget per session, in bond-denom micro-units (the chain's
+     * bond denom is resolved at runtime via x/identity).
      */
-    max_spend_limit: CoinAmino;
+    max_spend_limit_amount?: string;
     /**
      * Maximum exec_count per session. Must be > 0; sessions must declare
      * a finite cap (1 <= session.max_exec_count <= params.max_exec_count).
      */
     max_exec_count?: string;
+    /**
+     * --- RecurringPull (P3) ---
+     * Minimum period_seconds on a RECURRING_PULL grant. Default 86_400 (1 day);
+     * prevents abusive sub-second polling.
+     */
+    min_recurring_period_seconds?: string;
+    /**
+     * Maximum (expires_at - start_time) on a RECURRING_PULL grant. Default
+     * 31_536_000 (1 year); long-lived recurring authorizations need explicit
+     * re-issuance.
+     */
+    max_recurring_duration_seconds?: string;
+    /**
+     * Maximum number of active RECURRING_PULL grants per granter. Default 50.
+     */
+    max_recurring_pulls_per_granter?: number;
+    /**
+     * --- SpendingAllowance (P4) ---
+     * Minimum period_seconds on a SPENDING_ALLOWANCE grant. Default 3_600
+     * (1 hour); finer-grained than RecurringPull to support rolling burst
+     * budgets.
+     */
+    min_allowance_period_seconds?: string;
+    /**
+     * Maximum number of active SPENDING_ALLOWANCE grants per granter.
+     * Default 20.
+     */
+    max_allowances_per_granter?: number;
+    /**
+     * Maximum size of an allowed_recipients whitelist. Default 50. Prevents
+     * state-bloat attacks by capping the per-grant list length.
+     */
+    max_allowance_recipient_list?: number;
+    /**
+     * Minimum amount per MsgPullAllowance call, as sdk.Int (string). Default
+     * "1000" (1000 uspark / 0.001 SPARK). Closes the "1 utoken at a time to
+     * bloat events / drain state" griefing pattern.
+     */
+    min_pull_amount?: string;
+    /**
+     * --- ScheduledOneshot (P5) ---
+     * Minimum (fire_at - block_time) at creation. Default 60s; closes
+     * front-running edge cases.
+     */
+    min_schedule_delay_seconds?: string;
+    /**
+     * Maximum (fire_at - block_time) at creation. Default 31_536_000 (1 year).
+     * Applies to fire_at only; max_grant_lifetime_seconds applies to expires_at.
+     */
+    max_schedule_horizon_seconds?: string;
+    /**
+     * Required buffer between fire_at and expires_at. Default 3600 (1h);
+     * makes the EndBlocker fire-vs-expire race impossible.
+     */
+    fire_to_expiry_buffer_seconds?: string;
+    /**
+     * Maximum active (non-paused) ScheduledOneshot grants per granter. Default 100.
+     */
+    max_pending_oneshots_per_granter?: number;
+    /**
+     * Maximum paused (PAUSED_INSUFFICIENT_FUNDS) ScheduledOneshot grants per
+     * granter. Default 20. Separate from active cap so paused grants don't
+     * pin slots indefinitely.
+     */
+    max_paused_oneshots_per_granter?: number;
+    /**
+     * Auto-revoke a paused oneshot after this many seconds. Default 604_800
+     * (7 days). Deposit refunded on auto-revoke.
+     */
+    paused_oneshot_ttl_seconds?: string;
+    /**
+     * Minimum gas_limit allowed on OneshotExec. Default 30_000.
+     */
+    min_oneshot_exec_gas?: string;
+    /**
+     * Maximum gas_limit allowed on OneshotExec. Default 200_000.
+     */
+    max_oneshot_exec_gas?: string;
+    /**
+     * Price per gas unit for OneshotExec deposit calculation, as sdk.Dec
+     * string. Default "0.0025" (100x typical min_gas_price). Floor must be
+     * >= chain's effective min_gas_price. Denominated in the chain's bond
+     * denom (resolved at runtime via x/identity).
+     */
+    oneshot_gas_price?: string;
+    /**
+     * Flat per-slot fee on every Oneshot grant creation (both Transfer and
+     * Exec variants), in bond-denom micro-units. Default 1000 (0.001 SPARK).
+     * Closes the "free state slot" hole.
+     */
+    oneshot_creation_fee?: string;
+    /**
+     * Hard floor on total deposit, in bond-denom micro-units. Default 1000.
+     * Defeats `gas_limit=1` zero-deposit slot griefing.
+     */
+    min_oneshot_deposit?: string;
+    /**
+     * Per-EndBlocker pass cap on dispatches (fire, auto-revoke, expire each
+     * get their own cap). Default 100.
+     */
+    max_endblocker_dispatches_per_pass?: number;
+    /**
+     * --- Cross-type (P3) ---
+     * Additional coins permitted as denom in RecurringPull / SpendingAllowance
+     * / Oneshot grants. Default empty — the chain's bond denom is ALWAYS
+     * allowed; this list adds additional permitted denoms (e.g. IBC vouchers).
+     * DREAM is permanently excluded at the handler level regardless of
+     * contents.
+     */
+    allowed_denoms?: string[];
+    /**
+     * General cap on `expires_at - created_at` across all grant types. Default
+     * 31_536_000 (1 year).
+     */
+    max_grant_lifetime_seconds?: string;
+    /**
+     * --- Module-bypass (P8) ---
+     * Bech32 addresses of module accounts authorized to call
+     * `CreateGrantOnBehalfOf` (the signature-bypass keeper entrypoint).
+     * Default empty — no module may bypass signatures unless explicitly
+     * gov-allowlisted.
+     *
+     * The bypass exists to let trusted modules (e.g. x/commons for council
+     * recurring spends) create grants for module-account granters that
+     * can't sign a real tx. Each address listed here is a strict trust
+     * grant; the bypass skips signature + sequence verification, so a
+     * compromised or buggy allowlisted module could synthesize arbitrary
+     * grants. Add only after a security review.
+     */
+    authorized_grant_creators?: string[];
 }
 export interface ParamsAminoMsg {
     type: "sparkdream/x/session/Params";
@@ -105,8 +366,43 @@ export interface SessionOperationalParams {
     maxSessionsPerGranter: bigint;
     maxMsgTypesPerSession: bigint;
     maxExpiration: Duration;
-    maxSpendLimit: Coin;
+    maxSpendLimitAmount: string;
     maxExecCount: bigint;
+    /**
+     * --- RecurringPull + cross-type (P3) ---
+     */
+    minRecurringPeriodSeconds: bigint;
+    maxRecurringDurationSeconds: bigint;
+    maxRecurringPullsPerGranter: number;
+    /**
+     * --- SpendingAllowance (P4) ---
+     */
+    minAllowancePeriodSeconds: bigint;
+    maxAllowancesPerGranter: number;
+    maxAllowanceRecipientList: number;
+    minPullAmount: string;
+    /**
+     * --- ScheduledOneshot (P5) ---
+     */
+    minScheduleDelaySeconds: bigint;
+    maxScheduleHorizonSeconds: bigint;
+    fireToExpiryBufferSeconds: bigint;
+    maxPendingOneshotsPerGranter: number;
+    maxPausedOneshotsPerGranter: number;
+    pausedOneshotTtlSeconds: bigint;
+    minOneshotExecGas: bigint;
+    maxOneshotExecGas: bigint;
+    oneshotGasPrice: string;
+    oneshotCreationFee: bigint;
+    minOneshotDeposit: bigint;
+    maxEndblockerDispatchesPerPass: number;
+    /**
+     * Note: allowed_denoms is add-only by ops (removing a denom strands existing
+     * grants and is gov-only via MsgUpdateParams). Including it here so ops can
+     * widen the set.
+     */
+    allowedDenoms: string[];
+    maxGrantLifetimeSeconds: bigint;
 }
 export interface SessionOperationalParamsProtoMsg {
     typeUrl: "/sparkdream.session.v1.SessionOperationalParams";
@@ -129,8 +425,43 @@ export interface SessionOperationalParamsAmino {
     max_sessions_per_granter?: string;
     max_msg_types_per_session?: string;
     max_expiration?: DurationAmino;
-    max_spend_limit: CoinAmino;
+    max_spend_limit_amount?: string;
     max_exec_count?: string;
+    /**
+     * --- RecurringPull + cross-type (P3) ---
+     */
+    min_recurring_period_seconds?: string;
+    max_recurring_duration_seconds?: string;
+    max_recurring_pulls_per_granter?: number;
+    /**
+     * --- SpendingAllowance (P4) ---
+     */
+    min_allowance_period_seconds?: string;
+    max_allowances_per_granter?: number;
+    max_allowance_recipient_list?: number;
+    min_pull_amount?: string;
+    /**
+     * --- ScheduledOneshot (P5) ---
+     */
+    min_schedule_delay_seconds?: string;
+    max_schedule_horizon_seconds?: string;
+    fire_to_expiry_buffer_seconds?: string;
+    max_pending_oneshots_per_granter?: number;
+    max_paused_oneshots_per_granter?: number;
+    paused_oneshot_ttl_seconds?: string;
+    min_oneshot_exec_gas?: string;
+    max_oneshot_exec_gas?: string;
+    oneshot_gas_price?: string;
+    oneshot_creation_fee?: string;
+    min_oneshot_deposit?: string;
+    max_endblocker_dispatches_per_pass?: number;
+    /**
+     * Note: allowed_denoms is add-only by ops (removing a denom strands existing
+     * grants and is gov-only via MsgUpdateParams). Including it here so ops can
+     * widen the set.
+     */
+    allowed_denoms?: string[];
+    max_grant_lifetime_seconds?: string;
 }
 export interface SessionOperationalParamsAminoMsg {
     type: "sparkdream/x/session/SessionOperationalParams";