@velocity-exchange/sdk 0.6.1 → 0.8.0

package/lib/browser/adminClient.d.ts

@@ -894,9 +894,13 @@ export declare class AdminClient extends VelocityClient {
      * `updateWithdrawGuardThreshold` — in particular, the `oracle` param must equal
      * `spotMarket.oracle` (enforced by the `has_one` constraint) and is auto-resolved when
      * omitted. Throws if the spot market account can't be found when not subscribed.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateWithdrawGuardThreshold` instruction.
      */
-    getUpdateWithdrawGuardThresholdIx(spotMarketIndex: number, withdrawGuardThreshold: BN, oracle?: PublicKey): Promise<TransactionInstruction>;
+    getUpdateWithdrawGuardThresholdIx(spotMarketIndex: number, withdrawGuardThreshold: BN, oracle?: PublicKey, admin?: PublicKey): Promise<TransactionInstruction>;
     /**
      * Sets a spot market's lending-gain carveouts: the share of deposit interest routed to the
      * insurance fund (`ifFeeFactor`) and to the withdrawable protocol fee pool
@@ -913,9 +917,13 @@ export declare class AdminClient extends VelocityClient {
     /**
      * Builds the `updateSpotMarketIfFactor` instruction without sending it. See
      * `updateSpotMarketIfFactor` for units and validation.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateSpotMarketIfFactor` instruction.
      */
-    getUpdateSpotMarketIfFactorIx(spotMarketIndex: number, ifFeeFactor: number, protocolFeeFactor: number): Promise<TransactionInstruction>;
+    getUpdateSpotMarketIfFactorIx(spotMarketIndex: number, ifFeeFactor: number, protocolFeeFactor: number, admin?: PublicKey): Promise<TransactionInstruction>;
     /**
      * Sets how often a spot market's revenue pool may be settled to the insurance fund.
      * Requires warm admin (`check_warm`).
@@ -943,6 +951,10 @@ export declare class AdminClient extends VelocityClient {
      * @returns The unsigned `updateSpotMarketMaxTokenDeposits` instruction.
      */
     getUpdateSpotMarketMaxTokenDepositsIx(spotMarketIndex: number, maxTokenDeposits: BN): Promise<TransactionInstruction>;
+    updateSpotMarketWithdrawCircuitBreaker(spotMarketIndex: number, withdrawCircuitBreakerBps: number): Promise<TransactionSignature>;
+    getUpdateSpotMarketWithdrawCircuitBreakerIx(spotMarketIndex: number, withdrawCircuitBreakerBps: number): Promise<TransactionInstruction>;
+    updateSpotMarketDepositCap(spotMarketIndex: number, depositGuardThreshold: BN, maxDepositBpsPerDay: number): Promise<TransactionSignature>;
+    getUpdateSpotMarketDepositCapIx(spotMarketIndex: number, depositGuardThreshold: BN, maxDepositBpsPerDay: number): Promise<TransactionInstruction>;
     /**
      * Caps a spot market's total borrows as a fraction of its `maxTokenDeposits`, rather than
      * an absolute token amount. Requires warm admin (`check_warm`). On-chain, the effective cap
@@ -971,9 +983,13 @@ export declare class AdminClient extends VelocityClient {
     /**
      * Builds the `updateSpotMarketScaleInitialAssetWeightStart` instruction without sending it.
      * See `updateSpotMarketScaleInitialAssetWeightStart`.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateSpotMarketScaleInitialAssetWeightStart` instruction.
      */
-    getUpdateSpotMarketScaleInitialAssetWeightStartIx(spotMarketIndex: number, scaleInitialAssetWeightStart: BN): Promise<TransactionInstruction>;
+    getUpdateSpotMarketScaleInitialAssetWeightStartIx(spotMarketIndex: number, scaleInitialAssetWeightStart: BN, admin?: PublicKey): Promise<TransactionInstruction>;
     /**
      * Sets how long an insurance-fund staker's unstake request must sit in escrow before it can
      * be completed for a given spot market. Requires warm admin (`check_warm`).
@@ -1258,9 +1274,13 @@ export declare class AdminClient extends VelocityClient {
     /**
      * Builds the `updateSpotMarketStatus` instruction without sending it. See
      * `updateSpotMarketStatus`.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateSpotMarketStatus` instruction.
      */
-    getUpdateSpotMarketStatusIx(spotMarketIndex: number, marketStatus: MarketStatus): Promise<TransactionInstruction>;
+    getUpdateSpotMarketStatusIx(spotMarketIndex: number, marketStatus: MarketStatus, admin?: PublicKey): Promise<TransactionInstruction>;
     /**
      * Sets a spot market's operation pause bitmask (`SpotOperation`: `UpdateCumulativeInterest`
      * 0b00001, `Fill` 0b00010, `Deposit` 0b00100, `Withdraw` 0b01000, `Liquidation` 0b10000).

package/lib/browser/adminClient.js

@@ -1767,9 +1767,13 @@ class AdminClient extends velocityClient_1.VelocityClient {
      * `updateWithdrawGuardThreshold` — in particular, the `oracle` param must equal
      * `spotMarket.oracle` (enforced by the `has_one` constraint) and is auto-resolved when
      * omitted. Throws if the spot market account can't be found when not subscribed.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateWithdrawGuardThreshold` instruction.
      */
-    async getUpdateWithdrawGuardThresholdIx(spotMarketIndex, withdrawGuardThreshold, oracle) {
+    async getUpdateWithdrawGuardThresholdIx(spotMarketIndex, withdrawGuardThreshold, oracle, admin) {
         const spotMarketPublicKey = await (0, pda_1.getSpotMarketPublicKey)(this.program.programId, spotMarketIndex);
         if (!oracle) {
             const cachedSpotMarket = this.isSubscribed
@@ -1789,9 +1793,9 @@ class AdminClient extends velocityClient_1.VelocityClient {
         }
         return await this.program.instruction.updateWithdrawGuardThreshold(withdrawGuardThreshold, {
             accounts: {
-                admin: this.isSubscribed
+                admin: admin !== null && admin !== void 0 ? admin : (this.isSubscribed
                     ? this.getStateAccount().coldAdmin
-                    : this.wallet.publicKey,
+                    : this.wallet.publicKey),
                 state: await this.getStatePublicKey(),
                 spotMarket: spotMarketPublicKey,
                 oracle,
@@ -1819,14 +1823,18 @@ class AdminClient extends velocityClient_1.VelocityClient {
     /**
      * Builds the `updateSpotMarketIfFactor` instruction without sending it. See
      * `updateSpotMarketIfFactor` for units and validation.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateSpotMarketIfFactor` instruction.
      */
-    async getUpdateSpotMarketIfFactorIx(spotMarketIndex, ifFeeFactor, protocolFeeFactor) {
+    async getUpdateSpotMarketIfFactorIx(spotMarketIndex, ifFeeFactor, protocolFeeFactor, admin) {
         return await this.program.instruction.updateSpotMarketIfFactor(spotMarketIndex, ifFeeFactor, protocolFeeFactor, {
             accounts: {
-                admin: this.isSubscribed
+                admin: admin !== null && admin !== void 0 ? admin : (this.isSubscribed
                     ? this.getStateAccount().coldAdmin
-                    : this.wallet.publicKey,
+                    : this.wallet.publicKey),
                 state: await this.getStatePublicKey(),
                 spotMarket: await (0, pda_1.getSpotMarketPublicKey)(this.program.programId, spotMarketIndex),
             },
@@ -1889,6 +1897,40 @@ class AdminClient extends velocityClient_1.VelocityClient {
             },
         });
     }
+    async updateSpotMarketWithdrawCircuitBreaker(spotMarketIndex, withdrawCircuitBreakerBps) {
+        const ix = await this.getUpdateSpotMarketWithdrawCircuitBreakerIx(spotMarketIndex, withdrawCircuitBreakerBps);
+        const tx = await this.buildTransaction(ix);
+        const { txSig } = await this.sendTransaction(tx, [], this.opts);
+        return txSig;
+    }
+    async getUpdateSpotMarketWithdrawCircuitBreakerIx(spotMarketIndex, withdrawCircuitBreakerBps) {
+        return this.program.instruction.updateSpotMarketWithdrawCircuitBreaker(withdrawCircuitBreakerBps, {
+            accounts: {
+                admin: this.isSubscribed
+                    ? this.getStateAccount().coldAdmin
+                    : this.wallet.publicKey,
+                state: await this.getStatePublicKey(),
+                spotMarket: await (0, pda_1.getSpotMarketPublicKey)(this.program.programId, spotMarketIndex),
+            },
+        });
+    }
+    async updateSpotMarketDepositCap(spotMarketIndex, depositGuardThreshold, maxDepositBpsPerDay) {
+        const ix = await this.getUpdateSpotMarketDepositCapIx(spotMarketIndex, depositGuardThreshold, maxDepositBpsPerDay);
+        const tx = await this.buildTransaction(ix);
+        const { txSig } = await this.sendTransaction(tx, [], this.opts);
+        return txSig;
+    }
+    async getUpdateSpotMarketDepositCapIx(spotMarketIndex, depositGuardThreshold, maxDepositBpsPerDay) {
+        return this.program.instruction.updateSpotMarketDepositCap(depositGuardThreshold, maxDepositBpsPerDay, {
+            accounts: {
+                admin: this.isSubscribed
+                    ? this.getStateAccount().coldAdmin
+                    : this.wallet.publicKey,
+                state: await this.getStatePublicKey(),
+                spotMarket: await (0, pda_1.getSpotMarketPublicKey)(this.program.programId, spotMarketIndex),
+            },
+        });
+    }
     /**
      * Caps a spot market's total borrows as a fraction of its `maxTokenDeposits`, rather than
      * an absolute token amount. Requires warm admin (`check_warm`). On-chain, the effective cap
@@ -1937,14 +1979,18 @@ class AdminClient extends velocityClient_1.VelocityClient {
     /**
      * Builds the `updateSpotMarketScaleInitialAssetWeightStart` instruction without sending it.
      * See `updateSpotMarketScaleInitialAssetWeightStart`.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateSpotMarketScaleInitialAssetWeightStart` instruction.
      */
-    async getUpdateSpotMarketScaleInitialAssetWeightStartIx(spotMarketIndex, scaleInitialAssetWeightStart) {
+    async getUpdateSpotMarketScaleInitialAssetWeightStartIx(spotMarketIndex, scaleInitialAssetWeightStart, admin) {
         return this.program.instruction.updateSpotMarketScaleInitialAssetWeightStart(scaleInitialAssetWeightStart, {
             accounts: {
-                admin: this.isSubscribed
+                admin: admin !== null && admin !== void 0 ? admin : (this.isSubscribed
                     ? this.getStateAccount().coldAdmin
-                    : this.wallet.publicKey,
+                    : this.wallet.publicKey),
                 state: await this.getStatePublicKey(),
                 spotMarket: await (0, pda_1.getSpotMarketPublicKey)(this.program.programId, spotMarketIndex),
             },
@@ -2492,14 +2538,18 @@ class AdminClient extends velocityClient_1.VelocityClient {
     /**
      * Builds the `updateSpotMarketStatus` instruction without sending it. See
      * `updateSpotMarketStatus`.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateSpotMarketStatus` instruction.
      */
-    async getUpdateSpotMarketStatusIx(spotMarketIndex, marketStatus) {
+    async getUpdateSpotMarketStatusIx(spotMarketIndex, marketStatus, admin) {
         return await this.program.instruction.updateSpotMarketStatus(marketStatus, {
             accounts: {
-                admin: this.isSubscribed
+                admin: admin !== null && admin !== void 0 ? admin : (this.isSubscribed
                     ? this.getStateAccount().coldAdmin
-                    : this.wallet.publicKey,
+                    : this.wallet.publicKey),
                 state: await this.getStatePublicKey(),
                 spotMarket: await (0, pda_1.getSpotMarketPublicKey)(this.program.programId, spotMarketIndex),
             },

package/lib/browser/blockhashSubscriber/BlockhashSubscriber.d.ts

@@ -1,12 +1,14 @@
 import { BlockhashWithExpiryBlockHeight, Context } from '@solana/web3.js';
 import { BlockhashSubscriberConfig } from './types';
 /**
- * BlockhashSubscriber — polls `getLatestBlockhashAndContext`/`getBlockHeight`
- * on a fixed interval and caches a short history of recent blockhashes, so
- * callers can grab a recent blockhash for transaction building without an
- * RPC round-trip per transaction. Nothing is populated until `subscribe()`
- * (or a manual `updateBlockhash()`) has completed at least once — all getters
- * return `undefined`/empty before then.
+ * BlockhashSubscriber — polls `getLatestBlockhashAndContext` on a fixed
+ * interval and caches a short history of recent blockhashes, so callers can
+ * grab a recent blockhash for transaction building without an RPC round-trip
+ * per transaction. The current block height is derived from the same response
+ * (`lastValidBlockHeight - 150`), so no paired `getBlockHeight` call is made.
+ * Nothing is populated until `subscribe()` (or a manual `updateBlockhash()`)
+ * has completed at least once — all getters return `undefined`/empty before
+ * then.
  */
 export declare class BlockhashSubscriber {
     private connection;
@@ -28,9 +30,9 @@ export declare class BlockhashSubscriber {
      * @returns The block height as of the most recent successful poll, or
      * `undefined` if `subscribe()`/`updateBlockhash()` has not yet completed
      * successfully at least once (including if every poll so far has errored).
-     * This value is a `getBlockHeight` snapshot taken alongside the latest
-     * blockhash fetch — it is not guaranteed to be perfectly in sync with the
-     * blockhash slot, only "recent as of the last poll".
+     * This value is derived from the latest blockhash fetch
+     * (`lastValidBlockHeight - 150`) — it is not guaranteed to be perfectly in
+     * sync with the blockhash slot, only "recent as of the last poll".
      */
     getLatestBlockHeight(): number | undefined;
     /** @returns The RPC `Context` (including `slot`) captured with the most recent successful blockhash poll, or `undefined` before the first successful poll. */
@@ -45,12 +47,14 @@ export declare class BlockhashSubscriber {
     /** Drops cached blockhashes whose `lastValidBlockHeight` is at or below `latestBlockHeight` (i.e. already expired for transaction signing). Called automatically after every `updateBlockhash`. No-ops if `latestBlockHeight` hasn't been set yet. */
     pruneBlockhashes(): void;
     /**
-     * Fetches the latest blockhash and block height in parallel and appends
-     * the blockhash to the cache (skipped if it's identical to the
-     * most-recently-cached one), then prunes expired entries. Errors (e.g. RPC
-     * failure) are caught and logged, not thrown — on error, `latestBlockHeight`
-     * is left at its previous value, but `pruneBlockhashes()` still runs in a
-     * `finally` block and may evict entries that expired in the meantime.
+     * Fetches the latest blockhash and appends it to the cache (skipped if it's
+     * identical to the most-recently-cached one), then prunes expired entries.
+     * The current block height is derived from the same response
+     * (`lastValidBlockHeight - 150`) rather than a paired `getBlockHeight` call.
+     * Errors (e.g. RPC failure) are caught and logged, not thrown — on error,
+     * `latestBlockHeight` is left at its previous value, but `pruneBlockhashes()`
+     * still runs in a `finally` block and may evict entries that expired in the
+     * meantime.
      */
     updateBlockhash(): Promise<void>;
     /** Performs an immediate `updateBlockhash()` and then starts polling on `updateIntervalMs`. Idempotent — a second call while already subscribed is a no-op. */

package/lib/browser/blockhashSubscriber/BlockhashSubscriber.js

@@ -3,12 +3,21 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.BlockhashSubscriber = void 0;
 const web3_js_1 = require("@solana/web3.js");
 /**
- * BlockhashSubscriber — polls `getLatestBlockhashAndContext`/`getBlockHeight`
- * on a fixed interval and caches a short history of recent blockhashes, so
- * callers can grab a recent blockhash for transaction building without an
- * RPC round-trip per transaction. Nothing is populated until `subscribe()`
- * (or a manual `updateBlockhash()`) has completed at least once — all getters
- * return `undefined`/empty before then.
+ * A blockhash is valid for signing until 150 blocks after the block it was
+ * fetched from, so `getLatestBlockhash`'s `lastValidBlockHeight` is exactly
+ * `(block height of that blockhash) + 150`. Subtracting this offset recovers
+ * the current block height without a second RPC call.
+ */
+const BLOCKHASH_VALIDITY_BLOCKS = 150;
+/**
+ * BlockhashSubscriber — polls `getLatestBlockhashAndContext` on a fixed
+ * interval and caches a short history of recent blockhashes, so callers can
+ * grab a recent blockhash for transaction building without an RPC round-trip
+ * per transaction. The current block height is derived from the same response
+ * (`lastValidBlockHeight - 150`), so no paired `getBlockHeight` call is made.
+ * Nothing is populated until `subscribe()` (or a manual `updateBlockhash()`)
+ * has completed at least once — all getters return `undefined`/empty before
+ * then.
  */
 class BlockhashSubscriber {
     /**
@@ -34,9 +43,9 @@ class BlockhashSubscriber {
      * @returns The block height as of the most recent successful poll, or
      * `undefined` if `subscribe()`/`updateBlockhash()` has not yet completed
      * successfully at least once (including if every poll so far has errored).
-     * This value is a `getBlockHeight` snapshot taken alongside the latest
-     * blockhash fetch — it is not guaranteed to be perfectly in sync with the
-     * blockhash slot, only "recent as of the last poll".
+     * This value is derived from the latest blockhash fetch
+     * (`lastValidBlockHeight - 150`) — it is not guaranteed to be perfectly in
+     * sync with the blockhash slot, only "recent as of the last poll".
      */
     getLatestBlockHeight() {
         return this.latestBlockHeight;
@@ -69,22 +78,22 @@ class BlockhashSubscriber {
         }
     }
     /**
-     * Fetches the latest blockhash and block height in parallel and appends
-     * the blockhash to the cache (skipped if it's identical to the
-     * most-recently-cached one), then prunes expired entries. Errors (e.g. RPC
-     * failure) are caught and logged, not thrown — on error, `latestBlockHeight`
-     * is left at its previous value, but `pruneBlockhashes()` still runs in a
-     * `finally` block and may evict entries that expired in the meantime.
+     * Fetches the latest blockhash and appends it to the cache (skipped if it's
+     * identical to the most-recently-cached one), then prunes expired entries.
+     * The current block height is derived from the same response
+     * (`lastValidBlockHeight - 150`) rather than a paired `getBlockHeight` call.
+     * Errors (e.g. RPC failure) are caught and logged, not thrown — on error,
+     * `latestBlockHeight` is left at its previous value, but `pruneBlockhashes()`
+     * still runs in a `finally` block and may evict entries that expired in the
+     * meantime.
      */
     async updateBlockhash() {
         try {
-            const [resp, lastConfirmedBlockHeight] = await Promise.all([
-                this.connection.getLatestBlockhashAndContext({
-                    commitment: this.commitment,
-                }),
-                this.connection.getBlockHeight({ commitment: this.commitment }),
-            ]);
-            this.latestBlockHeight = lastConfirmedBlockHeight;
+            const resp = await this.connection.getLatestBlockhashAndContext({
+                commitment: this.commitment,
+            });
+            this.latestBlockHeight =
+                resp.value.lastValidBlockHeight - BLOCKHASH_VALIDITY_BLOCKS;
             this.latestBlockHeightContext = resp.context;
             // avoid caching duplicate blockhashes
             if (this.blockhashes.length > 0) {

package/lib/browser/constants/numericConstants.d.ts

@@ -102,6 +102,8 @@ export declare const FUNDING_RATE_CLAMP_DENOMINATOR: BN;
 export declare const PRICE_TIMES_AMM_TO_QUOTE_PRECISION_RATIO: BN;
 /** 300 seconds. */
 export declare const FIVE_MINUTE: BN;
+/** Max age of the last fill before the trigger price's last-fill leg is treated as absent (oracle price substitutes). */
+export declare const TRIGGER_PRICE_LAST_FILL_MAX_AGE: BN;
 /** 3600 seconds. */
 export declare const ONE_HOUR: BN;
 /** 31,536,000 seconds (365 days). */

package/lib/browser/constants/numericConstants.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MARGIN_PRECISION = exports.AMM_TIMES_PEG_TO_QUOTE_PRECISION_RATIO = exports.PRICE_TO_QUOTE_PRECISION = exports.PRICE_DIV_PEG = exports.AMM_TO_QUOTE_PRECISION_RATIO = exports.BASE_PRECISION_EXP = exports.BASE_PRECISION = exports.AMM_RESERVE_PRECISION = exports.PEG_PRECISION = exports.FUNDING_RATE_BUFFER_PRECISION = exports.FUNDING_RATE_PRECISION = exports.PRICE_PRECISION = exports.QUOTE_PRECISION = exports.LIQUIDATION_FEE_PRECISION = exports.SPOT_MARKET_IMF_PRECISION = exports.SPOT_MARKET_IMF_PRECISION_EXP = exports.SPOT_MARKET_BALANCE_PRECISION = exports.SPOT_MARKET_BALANCE_PRECISION_EXP = exports.SPOT_MARKET_WEIGHT_PRECISION = exports.SPOT_MARKET_UTILIZATION_PRECISION = exports.SPOT_MARKET_UTILIZATION_PRECISION_EXP = exports.SPOT_MARKET_CUMULATIVE_INTEREST_PRECISION = exports.SPOT_MARKET_CUMULATIVE_INTEREST_PRECISION_EXP = exports.SPOT_MARKET_RATE_PRECISION = exports.SPOT_MARKET_RATE_PRECISION_EXP = exports.AMM_RESERVE_PRECISION_EXP = exports.PEG_PRECISION_EXP = exports.FUNDING_RATE_PRECISION_EXP = exports.PRICE_PRECISION_EXP = exports.FUNDING_RATE_BUFFER_PRECISION_EXP = exports.QUOTE_PRECISION_EXP = exports.CONCENTRATION_PRECISION = exports.PERCENTAGE_PRECISION = exports.PERCENTAGE_PRECISION_EXP = exports.MAX_LEVERAGE_ORDER_SIZE = exports.MAX_LEVERAGE = exports.TEN_MILLION = exports.BN_MAX = exports.TEN_THOUSAND = exports.TEN = exports.NINE = exports.EIGHT = exports.SEVEN = exports.SIX = exports.FIVE = exports.FOUR = exports.THREE = exports.TWO = exports.ONE = exports.ZERO = void 0;
-exports.MIN_I64 = exports.MAX_I64 = exports.GET_MULTIPLE_ACCOUNTS_CHUNK_SIZE = exports.MAX_POSITIVE_UPNL_FOR_INITIAL_MARGIN = exports.DUST_POSITION_SIZE = exports.SLOT_TIME_ESTIMATE_MS = exports.IDLE_TIME_SLOTS = exports.ACCOUNT_AGE_DELETION_CUTOFF_SECONDS = exports.DEFAULT_REVENUE_SINCE_LAST_FUNDING_SPREAD_RETREAT = exports.OPEN_ORDER_MARGIN_REQUIREMENT = exports.LAMPORTS_EXP = exports.LAMPORTS_PRECISION = exports.QUOTE_SPOT_MARKET_INDEX = exports.ONE_YEAR = exports.ONE_HOUR = exports.FIVE_MINUTE = exports.PRICE_TIMES_AMM_TO_QUOTE_PRECISION_RATIO = exports.FUNDING_RATE_CLAMP_DENOMINATOR = exports.FUNDING_RATE_OFFSET_PERCENTAGE = exports.FUNDING_RATE_OFFSET_DENOMINATOR = exports.LIQUIDATION_PCT_PRECISION = exports.BID_ASK_SPREAD_PRECISION = exports.BPS_PRECISION = void 0;
+exports.MIN_I64 = exports.MAX_I64 = exports.GET_MULTIPLE_ACCOUNTS_CHUNK_SIZE = exports.MAX_POSITIVE_UPNL_FOR_INITIAL_MARGIN = exports.DUST_POSITION_SIZE = exports.SLOT_TIME_ESTIMATE_MS = exports.IDLE_TIME_SLOTS = exports.ACCOUNT_AGE_DELETION_CUTOFF_SECONDS = exports.DEFAULT_REVENUE_SINCE_LAST_FUNDING_SPREAD_RETREAT = exports.OPEN_ORDER_MARGIN_REQUIREMENT = exports.LAMPORTS_EXP = exports.LAMPORTS_PRECISION = exports.QUOTE_SPOT_MARKET_INDEX = exports.ONE_YEAR = exports.ONE_HOUR = exports.TRIGGER_PRICE_LAST_FILL_MAX_AGE = exports.FIVE_MINUTE = exports.PRICE_TIMES_AMM_TO_QUOTE_PRECISION_RATIO = exports.FUNDING_RATE_CLAMP_DENOMINATOR = exports.FUNDING_RATE_OFFSET_PERCENTAGE = exports.FUNDING_RATE_OFFSET_DENOMINATOR = exports.LIQUIDATION_PCT_PRECISION = exports.BID_ASK_SPREAD_PRECISION = exports.BPS_PRECISION = void 0;
 const web3_js_1 = require("@solana/web3.js");
 const anchor_1 = require("../isomorphic/anchor");
 /** Precision constants used throughout the SDK. Each mirrors an on-chain fixed-point scale — a raw `BN` amount at that precision represents `amount / 10^exponent` in human units (e.g. `PRICE_PRECISION` = 1e6, so a raw price of `1_500_000` is `$1.50`). Values must stay numerically identical to the Rust program's `math::constants` — a mismatch here silently mis-scales every derived SDK computation. */
@@ -107,6 +107,8 @@ exports.FUNDING_RATE_CLAMP_DENOMINATOR = new anchor_1.BN(2000);
 exports.PRICE_TIMES_AMM_TO_QUOTE_PRECISION_RATIO = exports.PRICE_PRECISION.mul(exports.AMM_TO_QUOTE_PRECISION_RATIO);
 /** 300 seconds. */
 exports.FIVE_MINUTE = new anchor_1.BN(60 * 5);
+/** Max age of the last fill before the trigger price's last-fill leg is treated as absent (oracle price substitutes). */
+exports.TRIGGER_PRICE_LAST_FILL_MAX_AGE = exports.FIVE_MINUTE;
 /** 3600 seconds. */
 exports.ONE_HOUR = new anchor_1.BN(60 * 60);
 /** 31,536,000 seconds (365 days). */

package/lib/browser/core/VelocityCore.d.ts

@@ -224,6 +224,7 @@ export declare class VelocityCore {
      * @param args.state - the global `State` PDA.
      * @param args.filler - the keeper's `User` account submitting the trigger.
      * @param args.user - the order owner's `User` account.
+     * @param args.userStats - the order owner's `UserStats` account (authority-wide equity breaker).
      * @param args.authority - signer that must own or be a registered delegate of `filler`.
      * @param args.remainingAccounts - oracle/market `AccountMeta[]` for the order's market.
      * @returns the unsigned `triggerOrder` `TransactionInstruction`.
@@ -234,6 +235,7 @@ export declare class VelocityCore {
         state: PublicKey;
         filler: PublicKey;
         user: PublicKey;
+        userStats: PublicKey;
         authority: PublicKey;
         remainingAccounts: AccountMeta[];
     }): Promise<TransactionInstruction>;

package/lib/browser/core/VelocityCore.js

@@ -202,6 +202,7 @@ class VelocityCore {
      * @param args.state - the global `State` PDA.
      * @param args.filler - the keeper's `User` account submitting the trigger.
      * @param args.user - the order owner's `User` account.
+     * @param args.userStats - the order owner's `UserStats` account (authority-wide equity breaker).
      * @param args.authority - signer that must own or be a registered delegate of `filler`.
      * @param args.remainingAccounts - oracle/market `AccountMeta[]` for the order's market.
      * @returns the unsigned `triggerOrder` `TransactionInstruction`.

package/lib/browser/core/instructions/trigger.d.ts

@@ -11,6 +11,9 @@ import type { VelocityProgram } from '../../config';
  * @param args.state - the global `State` PDA.
  * @param args.filler - the keeper's `User` account submitting the trigger.
  * @param args.user - the order owner's `User` account.
+ * @param args.userStats - the order owner's `UserStats` account (checked for the
+ *   authority-wide equity breaker; a risk-increasing trigger order is cancelled
+ *   rather than activated while the breaker is tripped).
  * @param args.authority - signer that must own or be a registered delegate of `filler`.
  * @param args.remainingAccounts - oracle/market `AccountMeta[]` for the order's market.
  * @returns the unsigned `triggerOrder` `TransactionInstruction`.
@@ -21,6 +24,7 @@ export declare function buildTriggerOrderInstruction(args: {
     state: PublicKey;
     filler: PublicKey;
     user: PublicKey;
+    userStats: PublicKey;
     authority: PublicKey;
     remainingAccounts: AccountMeta[];
 }): Promise<TransactionInstruction>;

package/lib/browser/core/instructions/trigger.js

@@ -12,6 +12,9 @@ exports.buildTriggerOrderInstruction = void 0;
  * @param args.state - the global `State` PDA.
  * @param args.filler - the keeper's `User` account submitting the trigger.
  * @param args.user - the order owner's `User` account.
+ * @param args.userStats - the order owner's `UserStats` account (checked for the
+ *   authority-wide equity breaker; a risk-increasing trigger order is cancelled
+ *   rather than activated while the breaker is tripped).
  * @param args.authority - signer that must own or be a registered delegate of `filler`.
  * @param args.remainingAccounts - oracle/market `AccountMeta[]` for the order's market.
  * @returns the unsigned `triggerOrder` `TransactionInstruction`.
@@ -22,6 +25,7 @@ async function buildTriggerOrderInstruction(args) {
             state: args.state,
             filler: args.filler,
             user: args.user,
+            userStats: args.userStats,
             authority: args.authority,
         },
         remainingAccounts: args.remainingAccounts,