@velocity-exchange/sdk 0.2.4 → 0.3.0

package/src/adminClient.ts

@@ -22,6 +22,7 @@ import {
 	OracleGuardRails,
 	OracleSource,
 	ExchangeStatus,
+	SolvencyStatus,
 	MarketStatus,
 	ContractTier,
 	AssetTier,
@@ -3223,6 +3224,33 @@ export class AdminClient extends VelocityClient {
 		});
 	}
 
+	public async updateSolvencyStatus(
+		solvencyStatus: SolvencyStatus
+	): Promise<TransactionSignature> {
+		const updateSolvencyStatusIx = await this.getUpdateSolvencyStatusIx(
+			solvencyStatus
+		);
+
+		const tx = await this.buildTransaction(updateSolvencyStatusIx);
+
+		const { txSig } = await this.sendTransaction(tx, [], this.opts);
+
+		return txSig;
+	}
+
+	public async getUpdateSolvencyStatusIx(
+		solvencyStatus: SolvencyStatus
+	): Promise<TransactionInstruction> {
+		return await this.program.instruction.updateSolvencyStatus(solvencyStatus, {
+			accounts: {
+				admin: this.isSubscribed
+					? this.getStateAccount().coldAdmin
+					: this.wallet.publicKey,
+				state: await this.getStatePublicKey(),
+			},
+		});
+	}
+
 	public async updatePerpAuctionDuration(
 		minDuration: BN | number
 	): Promise<TransactionSignature> {

package/src/idl/velocity.json

@@ -11068,6 +11068,35 @@
         }
       ]
     },
+    {
+      "name": "update_solvency_status",
+      "discriminator": [
+        81,
+        136,
+        15,
+        6,
+        24,
+        165,
+        44,
+        133
+      ],
+      "accounts": [
+        {
+          "name": "admin",
+          "signer": true
+        },
+        {
+          "name": "state",
+          "writable": true
+        }
+      ],
+      "args": [
+        {
+          "name": "solvency_status",
+          "type": "u8"
+        }
+      ]
+    },
     {
       "name": "update_special_user_status",
       "discriminator": [
@@ -15972,6 +16001,16 @@
       "code": 6354,
       "name": "InsufficientProtocolFees",
       "msg": "Insufficient protocol fees available to withdraw"
+    },
+    {
+      "code": 6355,
+      "name": "InvalidNativeStateAccount",
+      "msg": "Native dispatch: supplied state account is not the canonical Velocity state PDA"
+    },
+    {
+      "code": 6356,
+      "name": "InvalidNativePerpMarketAccount",
+      "msg": "Native dispatch: supplied market account is not a Velocity perp market"
     }
   ],
   "types": [
@@ -23207,6 +23246,16 @@
             "name": "lp_pool_feature_bit_flags",
             "type": "u8"
           },
+          {
+            "name": "solvency_status",
+            "docs": [
+              "Bitmask of `SolvencyStatus` flags. Gates internal solvency-repair flows",
+              "(bankruptcy / pnl-deficit resolution) independently of `WithdrawPaused`,",
+              "so user withdrawals can be halted while repair keeps running, or repair",
+              "can be frozen on its own when an oracle is suspect. `0` = repair allowed."
+            ],
+            "type": "u8"
+          },
           {
             "name": "protocol_fee_recipient_perp",
             "docs": [
@@ -23241,7 +23290,7 @@
             "type": {
               "array": [
                 "u8",
-                272
+                271
               ]
             }
           }

package/src/idl/velocity.ts

@@ -11074,6 +11074,35 @@ export type Velocity = {
         }
       ]
     },
+    {
+      "name": "updateSolvencyStatus",
+      "discriminator": [
+        81,
+        136,
+        15,
+        6,
+        24,
+        165,
+        44,
+        133
+      ],
+      "accounts": [
+        {
+          "name": "admin",
+          "signer": true
+        },
+        {
+          "name": "state",
+          "writable": true
+        }
+      ],
+      "args": [
+        {
+          "name": "solvencyStatus",
+          "type": "u8"
+        }
+      ]
+    },
     {
       "name": "updateSpecialUserStatus",
       "discriminator": [
@@ -15978,6 +16007,16 @@ export type Velocity = {
       "code": 6354,
       "name": "insufficientProtocolFees",
       "msg": "Insufficient protocol fees available to withdraw"
+    },
+    {
+      "code": 6355,
+      "name": "invalidNativeStateAccount",
+      "msg": "Native dispatch: supplied state account is not the canonical Velocity state PDA"
+    },
+    {
+      "code": 6356,
+      "name": "invalidNativePerpMarketAccount",
+      "msg": "Native dispatch: supplied market account is not a Velocity perp market"
     }
   ],
   "types": [
@@ -23213,6 +23252,16 @@ export type Velocity = {
             "name": "lpPoolFeatureBitFlags",
             "type": "u8"
           },
+          {
+            "name": "solvencyStatus",
+            "docs": [
+              "Bitmask of `SolvencyStatus` flags. Gates internal solvency-repair flows",
+              "(bankruptcy / pnl-deficit resolution) independently of `WithdrawPaused`,",
+              "so user withdrawals can be halted while repair keeps running, or repair",
+              "can be frozen on its own when an oracle is suspect. `0` = repair allowed."
+            ],
+            "type": "u8"
+          },
           {
             "name": "protocolFeeRecipientPerp",
             "docs": [
@@ -23247,7 +23296,7 @@ export type Velocity = {
             "type": {
               "array": [
                 "u8",
-                272
+                271
               ]
             }
           }

package/src/math/exchangeStatus.ts

@@ -7,6 +7,7 @@ import {
 	ExchangeStatus,
 	PerpMarketAccount,
 	PerpOperation,
+	SolvencyStatus,
 	SpotMarketAccount,
 	SpotOperation,
 	StateAccount,
@@ -20,6 +21,15 @@ export function exchangePaused(state: StateAccount): boolean {
 	return state.exchangeStatus !== ExchangeStatus.ACTIVE;
 }
 
+// Mirror of the program's `State::solvency_repair_paused`. Gates the resolve
+// bankruptcy / pnl-deficit instructions, independent of WITHDRAW_PAUSED.
+export function solvencyRepairPaused(state: StateAccount): boolean {
+	return (
+		(state.solvencyStatus & SolvencyStatus.SOLVENCY_REPAIR_PAUSED) ===
+		SolvencyStatus.SOLVENCY_REPAIR_PAUSED
+	);
+}
+
 export function fillPaused(
 	state: StateAccount,
 	market: PerpMarketAccount | SpotMarketAccount

package/src/math/orders.ts

@@ -312,6 +312,9 @@ export function calculateOrderBaseAssetAmount(
  * Returns:
  * - BN size (>=0) if bounded
  * - null if impossible (target < liabilityWeight) OR imfFactor == 0 (unbounded)
+ *
+ * Note: a market.maxOpenInterest of 0 means "no configured cap" and is treated
+ * as unlimited rather than a hard cap of 0.
  */
 export function maxSizeForTargetLiabilityWeightBN(
 	target: BN,
@@ -364,9 +367,10 @@ export function maxSizeForTargetLiabilityWeightBN(
 		}
 	}
 
-	// cap at max OI
+	// cap at max OI. A maxOpenInterest of 0 means no configured cap (unlimited),
+	// matching the on-chain convention — do not treat it as a hard cap of 0.
 	const maxOpenInterest = market.maxOpenInterest;
-	if (lo.gt(maxOpenInterest)) {
+	if (!maxOpenInterest.isZero() && lo.gt(maxOpenInterest)) {
 		return maxOpenInterest;
 	}
 

package/src/math/state.ts

@@ -15,7 +15,7 @@ export function calculateInitUserFee(stateAccount: StateAccount): BN {
 	const accountSpaceUtilization = stateAccount.numberOfSubAccounts
 		.addn(1)
 		.mul(PERCENTAGE_PRECISION)
-		.div(getMaxNumberOfSubAccounts(stateAccount));
+		.div(BN.max(getMaxNumberOfSubAccounts(stateAccount), new BN(1)));
 
 	if (accountSpaceUtilization.gt(targetUtilization)) {
 		return maxInitFee

package/src/memcmp.ts

@@ -12,10 +12,32 @@ export function getUserFilter(): MemcmpFilter {
 	};
 }
 
+/*
+ * Byte offsets of the trailing scalar flags in the `User` account.
+ *
+ * These MUST match the on-chain `User` layout decoded in `decode/user.ts`. The
+ * current Velocity layout is 4496 bytes, with the tail block laid out as
+ * consecutive single bytes:
+ *   status(4468) isMarginTradingEnabled(4469) idle(4470) openOrders(4471)
+ *   hasOpenOrder(4472) openAuctions(4473) hasOpenAuction(4474) poolId(4475)
+ *   specialUserStatus(4476)
+ *
+ * NOTE: these were previously hardcoded to the older (4376-byte) layout
+ * (idle@4350, hasOpenOrder@4352, ...). After Velocity added fields to
+ * `PerpPosition`, the account grew by 120 bytes and these flags shifted, but
+ * the filters were not updated — so `getUserWithOrderFilter()` matched zero
+ * accounts and the DLOB order book never populated. Keep these in sync with
+ * `decode/user.ts` if the `User` layout changes again.
+ */
+const USER_IDLE_OFFSET = 4470;
+const USER_HAS_OPEN_ORDER_OFFSET = 4472;
+const USER_HAS_OPEN_AUCTION_OFFSET = 4474;
+const USER_POOL_ID_OFFSET = 4475;
+
 export function getNonIdleUserFilter(): MemcmpFilter {
 	return {
 		memcmp: {
-			offset: 4350,
+			offset: USER_IDLE_OFFSET,
 			bytes: bs58.encode(Uint8Array.from([0])),
 		},
 	};
@@ -24,7 +46,7 @@ export function getNonIdleUserFilter(): MemcmpFilter {
 export function getUserWithOrderFilter(): MemcmpFilter {
 	return {
 		memcmp: {
-			offset: 4352,
+			offset: USER_HAS_OPEN_ORDER_OFFSET,
 			bytes: bs58.encode(Uint8Array.from([1])),
 		},
 	};
@@ -33,7 +55,7 @@ export function getUserWithOrderFilter(): MemcmpFilter {
 export function getUserWithoutOrderFilter(): MemcmpFilter {
 	return {
 		memcmp: {
-			offset: 4352,
+			offset: USER_HAS_OPEN_ORDER_OFFSET,
 			bytes: bs58.encode(Uint8Array.from([0])),
 		},
 	};
@@ -42,7 +64,7 @@ export function getUserWithoutOrderFilter(): MemcmpFilter {
 export function getUserWithAuctionFilter(): MemcmpFilter {
 	return {
 		memcmp: {
-			offset: 4354,
+			offset: USER_HAS_OPEN_AUCTION_OFFSET,
 			bytes: bs58.encode(Uint8Array.from([1])),
 		},
 	};
@@ -60,7 +82,7 @@ export function getUserWithName(name: string): MemcmpFilter {
 export function getUsersWithPoolId(poolId: number): MemcmpFilter {
 	return {
 		memcmp: {
-			offset: 4356,
+			offset: USER_POOL_ID_OFFSET,
 			bytes: bs58.encode(Uint8Array.from([poolId])),
 		},
 	};

package/src/orderSubscriber/OrderSubscriber.ts

@@ -19,6 +19,16 @@ import { grpcSubscription } from './grpcSubscription';
 import { calculateOrderBaseAssetAmount } from '../math/orders';
 import { ZERO } from '../constants/numericConstants';
 
+/*
+ * Byte offset of `lastActiveSlot` (u64) in the `User` account, used here to
+ * cheaply detect stale updates without fully decoding the buffer. Must match
+ * the on-chain `User` layout (see `decode/user.ts`). The previous value (4328)
+ * was for the older 4376-byte layout; the current Velocity layout is 4496
+ * bytes, shifting this field +120 bytes. With the wrong offset this read 8
+ * zero-padding bytes, so the staleness guard rejected every post-load update.
+ */
+const USER_LAST_ACTIVE_SLOT_OFFSET = 4448;
+
 export class OrderSubscriber {
 	velocityClient: VelocityClient;
 	usersAccounts = new Map<string, { slot: number; userAccount: UserAccount }>();
@@ -176,7 +186,10 @@ export class OrderSubscriber {
 				const buffer = Buffer.from(data[0], data[1]);
 
 				const newLastActiveSlot = new BN(
-					buffer.subarray(4328, 4328 + 8),
+					buffer.subarray(
+						USER_LAST_ACTIVE_SLOT_OFFSET,
+						USER_LAST_ACTIVE_SLOT_OFFSET + 8
+					),
 					undefined,
 					'le'
 				);
@@ -191,7 +204,10 @@ export class OrderSubscriber {
 			} else if (dataType === 'buffer') {
 				const buffer: Buffer = data as Buffer;
 				const newLastActiveSlot = new BN(
-					buffer.subarray(4328, 4328 + 8),
+					buffer.subarray(
+						USER_LAST_ACTIVE_SLOT_OFFSET,
+						USER_LAST_ACTIVE_SLOT_OFFSET + 8
+					),
 					undefined,
 					'le'
 				);

package/src/swift/swiftOrderSubscriber.ts

@@ -161,8 +161,8 @@ export class SwiftOrderSubscriber {
 		const endpoint =
 			this.config.endpoint ??
 			(env === 'devnet'
-				? 'wss://master.swift.drift.trade/ws'
-				: 'wss://swift.drift.trade/ws');
+				? 'wss://swift.master.velocity.exchange/ws'
+				: 'wss://swift.velocity.exchange/ws');
 		const ws = new WebSocket(
 			endpoint + '?pubkey=' + this.config.keypair.publicKey.toBase58()
 		);

package/src/tokenFaucet.ts

@@ -1,5 +1,5 @@
-import * as anchor from './isomorphic/anchor29';
-import { AnchorProvider, Idl, Program } from './isomorphic/anchor29';
+import * as anchor from './isomorphic/anchor';
+import { AnchorProvider, Idl, Program } from './isomorphic/anchor';
 import {
 	TOKEN_PROGRAM_ID,
 	Account,
@@ -51,11 +51,14 @@ export class TokenFaucet {
 			this.opts
 		);
 		this.provider = provider;
-		this.program = new Program(
-			tokenFaucet as unknown as Idl,
-			programId,
-			provider
-		);
+		// Anchor (>= 0.30) reads the program id from `idl.address` rather than a
+		// constructor argument. Override it with the caller-provided `programId`
+		// so PDAs and instructions target the intended program.
+		const idl = {
+			...(tokenFaucet as unknown as Idl),
+			address: programId.toBase58(),
+		} as Idl;
+		this.program = new Program(idl, provider);
 		this.mint = mint;
 	}
 

package/src/types.ts

@@ -39,6 +39,13 @@ export enum ExchangeStatus {
 	PAUSED = 255,
 }
 
+// Mirror of the Rust `SolvencyStatus` bitflag (State.solvencyStatus). Gates
+// internal solvency-repair flows independently of ExchangeStatus.WITHDRAW_PAUSED.
+export enum SolvencyStatus {
+	ACTIVE = 0,
+	SOLVENCY_REPAIR_PAUSED = 1,
+}
+
 export enum FeatureBitFlags {
 	MM_ORACLE_UPDATE = 1,
 	MEDIAN_TRIGGER_PRICE = 2,
@@ -771,6 +778,7 @@ export type StateAccount = {
 	maxInitializeUserFee: number;
 	featureBitFlags: number;
 	lpPoolFeatureBitFlags: number;
+	solvencyStatus: number;
 };
 
 export type PerpMarketAccount = {

package/src/user.ts

@@ -225,20 +225,35 @@ export class User {
 		this.isSubscribed = false;
 	}
 
+	/**
+	 * Returns the cached user account.
+	 *
+	 * - **Throws** `NotSubscribedError` if the subscriber has not been subscribed
+	 *   yet — reading the account before {@link subscribe} resolves is a
+	 *   programming error, not a missing-account condition.
+	 * - Returns `undefined` when subscribed but no account was found on chain.
+	 *   Because `subscribe()` awaits the initial fetch, an `undefined` here means
+	 *   the account does not exist (or has not yet been observed), not that data
+	 *   is "still loading".
+	 */
 	public getUserAccount(): UserAccount | undefined {
 		return this.accountSubscriber.getUserAccountAndSlot()?.data;
 	}
 
 	/**
-	 * Like {@link getUserAccount} but throws a named error instead of returning
-	 * `undefined` when the account has not been loaded yet. Use at call sites
-	 * that structurally require a loaded account.
+	 * Like {@link getUserAccount} but throws instead of returning `undefined`
+	 * when the account was not found. Use at call sites that structurally
+	 * require the account to exist. (Still propagates `NotSubscribedError` when
+	 * called before subscribing.)
+	 *
+	 * Delegates to {@link getUserAccount} (rather than the subscriber directly)
+	 * so callers that override `getUserAccount` see the override here too.
 	 */
 	public getUserAccountOrThrow(): UserAccount {
 		const userAccount = this.getUserAccount();
 		if (!userAccount) {
 			throw new Error(
-				`User account not loaded: ${this.getUserAccountPublicKey().toString()}`
+				`User account not found: ${this.getUserAccountPublicKey().toString()}`
 			);
 		}
 		return userAccount;
@@ -255,14 +270,15 @@ export class User {
 	}
 
 	/**
-	 * Like {@link getUserAccountAndSlot} but throws a named error instead of
-	 * returning `undefined` when the account has not been loaded yet. Use at
-	 * call sites that structurally require a loaded account.
+	 * Like {@link getUserAccountAndSlot} but throws instead of returning
+	 * `undefined` when the account was not found. Use at call sites that
+	 * structurally require the account to exist. (Still propagates
+	 * `NotSubscribedError` when called before subscribing.)
 	 */
 	public getUserAccountAndSlotOrThrow(): DataAndSlot<UserAccount> {
 		return assertDataAndSlot(
 			this.accountSubscriber.getUserAccountAndSlot(),
-			`User account not loaded: ${this.getUserAccountPublicKey().toString()}`
+			`User account not found: ${this.getUserAccountPublicKey().toString()}`
 		);
 	}
 

package/src/velocityClient.ts

@@ -1297,37 +1297,6 @@ export class VelocityClient {
 		});
 	}
 
-	public async migrateReferrer(
-		authority: PublicKey,
-		txParams?: TxParams
-	): Promise<TransactionSignature> {
-		const ix = await this.getMigrateReferrerIx(authority);
-		const tx = await this.buildTransaction([ix], txParams);
-		const { txSig } = await this.sendTransaction(tx, [], this.opts);
-		return txSig;
-	}
-
-	public async getMigrateReferrerIx(
-		authority: PublicKey
-	): Promise<TransactionInstruction> {
-		const escrow = getRevenueShareEscrowAccountPublicKey(
-			this.program.programId,
-			authority
-		);
-		return (this.program.instruction as any).migrateReferrer({
-			accounts: {
-				escrow,
-				authority,
-				userStats: getUserStatsAccountPublicKey(
-					this.program.programId,
-					authority
-				),
-				state: await this.getStatePublicKey(),
-				payer: this.wallet.publicKey,
-			},
-		});
-	}
-
 	public async resizeRevenueShareEscrowOrders(
 		authority: PublicKey,
 		numOrders: number,
@@ -2335,7 +2304,7 @@ export class VelocityClient {
 		subAccountId = subAccountId ?? this.activeSubAccountId;
 		authority = authority ?? this.authority;
 		if (subAccountId === undefined || authority === undefined) {
-			throw new Error('Subaccount ID and authority are required');
+			return false;
 		}
 		const userMapKey = this.getUserMapKey(subAccountId, authority);
 
@@ -10360,7 +10329,11 @@ export class VelocityClient {
 		);
 
 		const tx = await this.buildTransaction(updateMmOracleIx, {
-			computeUnits: 1000,
+			// Headroom for the native handler's owner + discriminator validation
+			// of the state + perp-market accounts (was 1000 when it bytemuck-cast
+			// the market without any checks). Measured ~1.3k CU; 2000 leaves
+			// margin for the production-only signer check.
+			computeUnits: 2000,
 			computeUnitsPrice: 0,
 		});
 		const { txSig } = await this.sendTransaction(tx, [], this.opts);
@@ -10368,16 +10341,19 @@ export class VelocityClient {
 		return txSig;
 	}
 
-	public getUpdateAmmSpreadAdjustmentNativeIx(
+	public async getUpdateAmmSpreadAdjustmentNativeIx(
 		marketIndex: number,
 		ammSpreadAdjustment: number // i8
-	): TransactionInstruction {
+	): Promise<TransactionInstruction> {
 		const discriminatorBuffer = createNativeInstructionDiscriminatorBuffer(1);
 		const data = Buffer.alloc(discriminatorBuffer.length + 4);
 		data.set(discriminatorBuffer, 0);
 		data.writeInt8(ammSpreadAdjustment, 5); // next byte
 
-		// Build the instruction manually
+		// Build the instruction manually. The native handler re-establishes the
+		// account guarantees Anchor would normally provide: it loads `state` as
+		// the program-owned State account and authenticates the signer against
+		// `state.hotAmmSpreadAdjust`, so the state account is required at index 2.
 		return new TransactionInstruction({
 			programId: this.program.programId,
 			keys: [
@@ -10391,6 +10367,11 @@ export class VelocityClient {
 					isWritable: false,
 					isSigner: true,
 				},
+				{
+					pubkey: await this.getStatePublicKey(),
+					isWritable: false,
+					isSigner: false,
+				},
 			],
 			data,
 		});

package/tests/dlob/helpers.ts

@@ -560,6 +560,7 @@ export const mockStateAccount: StateAccount = {
 	protocolFeeRecipientSpot: PublicKey.default,
 	featureBitFlags: 0,
 	lpPoolFeatureBitFlags: 0,
+	solvencyStatus: 0,
 	defaultMarketOrderTimeInForce: 0,
 	defaultSpotAuctionDuration: 0,
 	discountMint: PublicKey.default,