@totemsdk/omnia-vtxo 0.5.2 → 0.5.4

package/dist/cjs/pool-script.d.ts

@@ -4,13 +4,13 @@
  * The pool is an on-chain state output holding `totalCapacity`. An epoch's batch
  * root is committed as STATE(100), the epoch number in STATE(101), the absolute
  * exit-eligibility block in STATE(102), and each holder's committed share in
- * STATE(200+k).
+ * STATE(base+k).
  *
  * Custody (RFC-039 / CUSTODY-POLICY §2):
  *   - **Per-share unilateral exit.** After `@BLOCK GT PREVSTATE(102)` each holder
- *     may withdraw **only its own committed share** (`PREVSTATE(200+k)`, the spent
+ *     may withdraw **only its own committed share** (`PREVSTATE(base+k)`, the spent
  *     coin's share), to its own key, zeroing that share in the successor
- *     (`STATE(200+k) EQ 0`) and returning the remainder to the pool. A holder
+ *     (`STATE(base+k) EQ 0`) and returning the remainder to the pool. A holder
  *     cannot pay itself more than its share, so one holder can never rug the others.
  *   - **Cooperative update.** Before the exit window the pool may only move by
  *     `MULTISIG(operator + all holders)`, epoch-monotone (`ASSERT EPOCH GT
@@ -22,8 +22,20 @@
  * The operator holds no unilateral path: it cannot move funds, cannot advance the
  * exit block, and cannot stop a holder's exit. It is a liveness-only peer.
  */
-/** State port base for per-holder shares: holder k ⇒ port 200+k (ports are bytes, ≤255). */
-export declare const POOL_SHARE_PORT_BASE = 200;
+/**
+ * State port base for per-holder shares: holder k ⇒ `base + k`. Kept below the
+ * MSHS-2 floor so Omnia ports never collide with MASH (ports are bytes, 0–255).
+ * See RFC-048 §12 / RFC-049 §5.
+ */
+export declare const POOL_SHARE_PORT_BASE = 128;
+/** Lowest port reserved for MSHS-2 (MASH); Omnia ports MUST stay below this.
+ *  The node installs the MASH authorization bundle at ports **230–255**
+ *  (`bundleBase = 256 − (4 + k) = 230`): the header R / ROOTS_BLOB /
+ *  SECRETS_BLOB / TREE_SIG at 230–233 and PROOF at 234–255. A composite
+ *  MASH + Omnia coin must therefore keep Omnia ports ≤ 229. */
+export declare const MSHS_PORT_FLOOR = 230;
+/** Maximum holders whose share ports remain below the MSHS floor. */
+export declare const POOL_MAX_HOLDERS: number;
 export interface PoolScriptParams {
     /** Operator WOTS public-key digest (64 hex). */
     operatorPublicKeyDigest: string;

package/dist/cjs/pool-script.js

@@ -5,13 +5,13 @@
  * The pool is an on-chain state output holding `totalCapacity`. An epoch's batch
  * root is committed as STATE(100), the epoch number in STATE(101), the absolute
  * exit-eligibility block in STATE(102), and each holder's committed share in
- * STATE(200+k).
+ * STATE(base+k).
  *
  * Custody (RFC-039 / CUSTODY-POLICY §2):
  *   - **Per-share unilateral exit.** After `@BLOCK GT PREVSTATE(102)` each holder
- *     may withdraw **only its own committed share** (`PREVSTATE(200+k)`, the spent
+ *     may withdraw **only its own committed share** (`PREVSTATE(base+k)`, the spent
  *     coin's share), to its own key, zeroing that share in the successor
- *     (`STATE(200+k) EQ 0`) and returning the remainder to the pool. A holder
+ *     (`STATE(base+k) EQ 0`) and returning the remainder to the pool. A holder
  *     cannot pay itself more than its share, so one holder can never rug the others.
  *   - **Cooperative update.** Before the exit window the pool may only move by
  *     `MULTISIG(operator + all holders)`, epoch-monotone (`ASSERT EPOCH GT
@@ -24,13 +24,25 @@
  * exit block, and cannot stop a holder's exit. It is a liveness-only peer.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.POOL_SHARE_PORT_BASE = void 0;
+exports.POOL_MAX_HOLDERS = exports.MSHS_PORT_FLOOR = exports.POOL_SHARE_PORT_BASE = void 0;
 exports.buildPoolScript = buildPoolScript;
 exports.poolScriptAddress = poolScriptAddress;
 exports.buildAndHashPoolScript = buildAndHashPoolScript;
 const core_1 = require("@totemsdk/core");
-/** State port base for per-holder shares: holder k ⇒ port 200+k (ports are bytes, ≤255). */
-exports.POOL_SHARE_PORT_BASE = 200;
+/**
+ * State port base for per-holder shares: holder k ⇒ `base + k`. Kept below the
+ * MSHS-2 floor so Omnia ports never collide with MASH (ports are bytes, 0–255).
+ * See RFC-048 §12 / RFC-049 §5.
+ */
+exports.POOL_SHARE_PORT_BASE = 128;
+/** Lowest port reserved for MSHS-2 (MASH); Omnia ports MUST stay below this.
+ *  The node installs the MASH authorization bundle at ports **230–255**
+ *  (`bundleBase = 256 − (4 + k) = 230`): the header R / ROOTS_BLOB /
+ *  SECRETS_BLOB / TREE_SIG at 230–233 and PROOF at 234–255. A composite
+ *  MASH + Omnia coin must therefore keep Omnia ports ≤ 229. */
+exports.MSHS_PORT_FLOOR = 230;
+/** Maximum holders whose share ports remain below the MSHS floor. */
+exports.POOL_MAX_HOLDERS = exports.MSHS_PORT_FLOOR - exports.POOL_SHARE_PORT_BASE;
 function pkHex(digest, label) {
     const raw = digest.replace(/^0x/i, '');
     if (!/^[0-9a-fA-F]{64}$/.test(raw)) {
@@ -44,6 +56,9 @@ function buildPoolScript(params) {
     if (!Array.isArray(params.holders) || params.holders.length < 1) {
         throw new Error('pool requires at least one holder');
     }
+    if (params.holders.length > exports.POOL_MAX_HOLDERS) {
+        throw new Error(`pool supports at most ${exports.POOL_MAX_HOLDERS} holders (got ${params.holders.length}) — share ports would reach the MSHS-2 band (≥${exports.MSHS_PORT_FLOOR})`);
+    }
     const holders = params.holders.map((h, i) => pkHex(h, `holder[${i}]`));
     if (!Number.isInteger(params.exitBlock) || params.exitBlock < 0) {
         throw new Error(`exitBlock must be a non-negative integer, got ${JSON.stringify(params.exitBlock)}`);

package/dist/pool-script.d.ts

@@ -4,13 +4,13 @@
  * The pool is an on-chain state output holding `totalCapacity`. An epoch's batch
  * root is committed as STATE(100), the epoch number in STATE(101), the absolute
  * exit-eligibility block in STATE(102), and each holder's committed share in
- * STATE(200+k).
+ * STATE(base+k).
  *
  * Custody (RFC-039 / CUSTODY-POLICY §2):
  *   - **Per-share unilateral exit.** After `@BLOCK GT PREVSTATE(102)` each holder
- *     may withdraw **only its own committed share** (`PREVSTATE(200+k)`, the spent
+ *     may withdraw **only its own committed share** (`PREVSTATE(base+k)`, the spent
  *     coin's share), to its own key, zeroing that share in the successor
- *     (`STATE(200+k) EQ 0`) and returning the remainder to the pool. A holder
+ *     (`STATE(base+k) EQ 0`) and returning the remainder to the pool. A holder
  *     cannot pay itself more than its share, so one holder can never rug the others.
  *   - **Cooperative update.** Before the exit window the pool may only move by
  *     `MULTISIG(operator + all holders)`, epoch-monotone (`ASSERT EPOCH GT
@@ -22,8 +22,20 @@
  * The operator holds no unilateral path: it cannot move funds, cannot advance the
  * exit block, and cannot stop a holder's exit. It is a liveness-only peer.
  */
-/** State port base for per-holder shares: holder k ⇒ port 200+k (ports are bytes, ≤255). */
-export declare const POOL_SHARE_PORT_BASE = 200;
+/**
+ * State port base for per-holder shares: holder k ⇒ `base + k`. Kept below the
+ * MSHS-2 floor so Omnia ports never collide with MASH (ports are bytes, 0–255).
+ * See RFC-048 §12 / RFC-049 §5.
+ */
+export declare const POOL_SHARE_PORT_BASE = 128;
+/** Lowest port reserved for MSHS-2 (MASH); Omnia ports MUST stay below this.
+ *  The node installs the MASH authorization bundle at ports **230–255**
+ *  (`bundleBase = 256 − (4 + k) = 230`): the header R / ROOTS_BLOB /
+ *  SECRETS_BLOB / TREE_SIG at 230–233 and PROOF at 234–255. A composite
+ *  MASH + Omnia coin must therefore keep Omnia ports ≤ 229. */
+export declare const MSHS_PORT_FLOOR = 230;
+/** Maximum holders whose share ports remain below the MSHS floor. */
+export declare const POOL_MAX_HOLDERS: number;
 export interface PoolScriptParams {
     /** Operator WOTS public-key digest (64 hex). */
     operatorPublicKeyDigest: string;

package/dist/pool-script.js

@@ -4,13 +4,13 @@
  * The pool is an on-chain state output holding `totalCapacity`. An epoch's batch
  * root is committed as STATE(100), the epoch number in STATE(101), the absolute
  * exit-eligibility block in STATE(102), and each holder's committed share in
- * STATE(200+k).
+ * STATE(base+k).
  *
  * Custody (RFC-039 / CUSTODY-POLICY §2):
  *   - **Per-share unilateral exit.** After `@BLOCK GT PREVSTATE(102)` each holder
- *     may withdraw **only its own committed share** (`PREVSTATE(200+k)`, the spent
+ *     may withdraw **only its own committed share** (`PREVSTATE(base+k)`, the spent
  *     coin's share), to its own key, zeroing that share in the successor
- *     (`STATE(200+k) EQ 0`) and returning the remainder to the pool. A holder
+ *     (`STATE(base+k) EQ 0`) and returning the remainder to the pool. A holder
  *     cannot pay itself more than its share, so one holder can never rug the others.
  *   - **Cooperative update.** Before the exit window the pool may only move by
  *     `MULTISIG(operator + all holders)`, epoch-monotone (`ASSERT EPOCH GT
@@ -23,8 +23,20 @@
  * exit block, and cannot stop a holder's exit. It is a liveness-only peer.
  */
 import { computeScriptAddress } from '@totemsdk/core';
-/** State port base for per-holder shares: holder k ⇒ port 200+k (ports are bytes, ≤255). */
-export const POOL_SHARE_PORT_BASE = 200;
+/**
+ * State port base for per-holder shares: holder k ⇒ `base + k`. Kept below the
+ * MSHS-2 floor so Omnia ports never collide with MASH (ports are bytes, 0–255).
+ * See RFC-048 §12 / RFC-049 §5.
+ */
+export const POOL_SHARE_PORT_BASE = 128;
+/** Lowest port reserved for MSHS-2 (MASH); Omnia ports MUST stay below this.
+ *  The node installs the MASH authorization bundle at ports **230–255**
+ *  (`bundleBase = 256 − (4 + k) = 230`): the header R / ROOTS_BLOB /
+ *  SECRETS_BLOB / TREE_SIG at 230–233 and PROOF at 234–255. A composite
+ *  MASH + Omnia coin must therefore keep Omnia ports ≤ 229. */
+export const MSHS_PORT_FLOOR = 230;
+/** Maximum holders whose share ports remain below the MSHS floor. */
+export const POOL_MAX_HOLDERS = MSHS_PORT_FLOOR - POOL_SHARE_PORT_BASE;
 function pkHex(digest, label) {
     const raw = digest.replace(/^0x/i, '');
     if (!/^[0-9a-fA-F]{64}$/.test(raw)) {
@@ -38,6 +50,9 @@ export function buildPoolScript(params) {
     if (!Array.isArray(params.holders) || params.holders.length < 1) {
         throw new Error('pool requires at least one holder');
     }
+    if (params.holders.length > POOL_MAX_HOLDERS) {
+        throw new Error(`pool supports at most ${POOL_MAX_HOLDERS} holders (got ${params.holders.length}) — share ports would reach the MSHS-2 band (≥${MSHS_PORT_FLOOR})`);
+    }
     const holders = params.holders.map((h, i) => pkHex(h, `holder[${i}]`));
     if (!Number.isInteger(params.exitBlock) || params.exitBlock < 0) {
         throw new Error(`exitBlock must be a non-negative integer, got ${JSON.stringify(params.exitBlock)}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@totemsdk/omnia-vtxo",
-  "version": "0.5.2",
+  "version": "0.5.4",
   "description": "Virtual UTXO / payment-pool claim layer for Omnia — cash-like off-chain balance primitive for Totem Edge",
   "main": "dist/cjs/index.js",
   "types": "dist/cjs/index.d.ts",
@@ -25,10 +25,10 @@
   ],
   "dependencies": {
     "@totemsdk/chain-provider": "^0.2.1",
+    "@totemsdk/core": "^1.3.0",
     "@totemsdk/omnia": "^2.0.1",
-    "@totemsdk/txpow": "^1.0.2",
     "@totemsdk/storage": "^0.1.0",
-    "@totemsdk/core": "^1.3.0",
+    "@totemsdk/txpow": "^1.0.2",
     "@totemsdk/wots-lease": "^1.0.1"
   },
   "devDependencies": {