@velocity-exchange/sdk 0.6.1 → 0.8.0

package/lib/browser/math/market.js

@@ -244,10 +244,11 @@ exports.calculateNetUserPnlImbalance = calculateNetUserPnlImbalance;
 /**
  * Calculates the price used to evaluate trigger (stop/take-profit) orders for a perp market,
  * mirroring the Rust `get_trigger_price`. When `useMedianPrice` is true, the trigger price is the
- * median of three candidates — the last fill price (or oracle price if there's been no fill), the
- * oracle price adjusted by the implied funding basis, and the oracle price adjusted by the 5min
- * mark/oracle TWAP basis — then clamped to within a contract-tier-dependent band around the raw
- * oracle price (tier A/B: 20bps, tier C: 100bps, others: 250bps) via `clampTriggerPrice`. This
+ * median of three candidates — the last fill price (or oracle price if there's been no fill or the
+ * last fill is older than `TRIGGER_PRICE_LAST_FILL_MAX_AGE`), the oracle price adjusted by the
+ * implied funding basis, and the oracle price adjusted by the 5min mark/oracle TWAP basis — then
+ * clamped to within a contract-tier-dependent band around the raw oracle price (tier A/B: 20bps,
+ * tier C: 100bps, others: 250bps) via `clampTriggerPrice`. This
  * resists a single manipulated print (last fill or a momentary oracle/mark divergence) from
  * triggering orders it shouldn't. When `useMedianPrice` is false, the raw oracle price is used
  * directly with no smoothing.
@@ -265,17 +266,23 @@ function getTriggerPrice(market, oraclePrice, now, useMedianPrice) {
     if (!useMedianPrice) {
         return oraclePrice.abs();
     }
+    // Leg A: last trade price, only while fresh. `lastTradeTs` is stamped by
+    // the same fill path that writes `lastFillPrice`.
     const lastFillPrice = market.lastFillPrice;
-    // Calculate 5-minute basis
+    const lastFillIsFresh = now
+        .sub(market.marketStats.lastTradeTs)
+        .lte(numericConstants_1.TRIGGER_PRICE_LAST_FILL_MAX_AGE);
+    // Leg C: oracle + (mark_twap_5min - oracle_twap_5min)
     const markPrice5minTwap = market.marketStats.lastMarkPriceTwap5Min;
     const lastOraclePriceTwap5min = market.marketStats.historicalOracleData.lastOraclePriceTwap5Min;
     const basis5min = markPrice5minTwap.sub(lastOraclePriceTwap5min);
     const oraclePlusBasis5min = oraclePrice.add(basis5min);
-    // Calculate funding basis
+    // Leg B: oracle + decayed funding basis
     const lastFundingBasis = getLastFundingBasis(market, oraclePrice, now);
     const oraclePlusFundingBasis = oraclePrice.add(lastFundingBasis);
+    // No fill yet or last fill is stale: oracle price stands in for Leg A
     const prices = [
-        lastFillPrice.gt(numericConstants_1.ZERO) ? lastFillPrice : oraclePrice,
+        lastFillPrice.gt(numericConstants_1.ZERO) && lastFillIsFresh ? lastFillPrice : oraclePrice,
         oraclePlusFundingBasis,
         oraclePlusBasis5min,
     ].sort((a, b) => a.cmp(b));
@@ -294,11 +301,11 @@ function getLastFundingBasis(market, oraclePrice, now) {
             .div(market.marketStats.lastFundingOracleTwap)
             .muln(24);
         const lastFundingRatePreAdj = lastFundingRate.sub(numericConstants_1.FUNDING_RATE_OFFSET_PERCENTAGE);
-        const timeLeftUntilFundingUpdate = anchor_1.BN.min(anchor_1.BN.max(now.sub(market.lastFundingRateTs), numericConstants_1.ZERO), market.marketStats.fundingPeriod);
+        const timeSinceFundingUpdate = anchor_1.BN.min(anchor_1.BN.max(now.sub(market.lastFundingRateTs), numericConstants_1.ZERO), market.marketStats.fundingPeriod);
         const lastFundingBasis = oraclePrice
             .mul(lastFundingRatePreAdj)
             .div(numericConstants_1.PERCENTAGE_PRECISION)
-            .mul(market.marketStats.fundingPeriod.sub(timeLeftUntilFundingUpdate))
+            .mul(market.marketStats.fundingPeriod.sub(timeSinceFundingUpdate))
             .div(market.marketStats.fundingPeriod)
             .div(new anchor_1.BN(1000)); // FUNDING_RATE_BUFFER
         return lastFundingBasis;
@@ -312,17 +319,17 @@ function getLastFundingBasis(market, oraclePrice, now) {
  * Implements the same logic as the Rust clamp_trigger_price function
  */
 function clampTriggerPrice(market, oraclePrice, medianPrice) {
-    let maxBpsDiff;
+    let clampDivisor;
     const tier = market.contractTier;
     if ((0, types_1.isVariant)(tier, 'a') || (0, types_1.isVariant)(tier, 'b')) {
-        maxBpsDiff = new anchor_1.BN(500); // 20 BPS
+        clampDivisor = new anchor_1.BN(500); // oracle / 500 = 20 bps
     }
     else if ((0, types_1.isVariant)(tier, 'c')) {
-        maxBpsDiff = new anchor_1.BN(100); // 100 BPS
+        clampDivisor = new anchor_1.BN(100); // oracle / 100 = 100 bps
     }
     else {
-        maxBpsDiff = new anchor_1.BN(40); // 250 BPS
+        clampDivisor = new anchor_1.BN(40); // oracle / 40 = 250 bps
     }
-    const maxOracleDiff = oraclePrice.div(maxBpsDiff);
+    const maxOracleDiff = oraclePrice.div(clampDivisor);
     return anchor_1.BN.min(anchor_1.BN.max(medianPrice, oraclePrice.sub(maxOracleDiff)), oraclePrice.add(maxOracleDiff));
 }

package/lib/browser/math/oracles.d.ts

@@ -88,7 +88,7 @@ export declare function isMarkOracleTooDivergent(priceSpreadPct: BN, oracleGuard
  * @param period TWAP window length in seconds — pass `FIVE_MINUTE` for the 5-minute TWAP, otherwise the funding period is assumed.
  * @returns Live-projected oracle TWAP, PRICE_PRECISION (1e6).
  */
-export declare function calculateLiveOracleTwap(histOracleData: HistoricalOracleData, oraclePriceData: OraclePriceData, now: BN, period: BN): BN;
+export declare function calculateLiveOracleTwap(histOracleData: HistoricalOracleData, oraclePriceData: Pick<OraclePriceData, 'price'>, now: BN, period: BN): BN;
 /**
  * Live-projected oracle price standard deviation, combining the live oracle price's
  * deviation from the freshly-projected 1hr and 5min TWAPs with the decayed stored
@@ -98,7 +98,7 @@ export declare function calculateLiveOracleTwap(histOracleData: HistoricalOracle
  * @param now Current unix timestamp (seconds).
  * @returns Live oracle price standard deviation, PRICE_PRECISION (1e6).
  */
-export declare function calculateLiveOracleStd(marketStats: MarketStats, oraclePriceData: OraclePriceData, now: BN): BN;
+export declare function calculateLiveOracleStd(marketStats: MarketStats, oraclePriceData: Pick<OraclePriceData, 'price'>, now: BN): BN;
 /**
  * Live-projected oracle confidence interval as a fraction of `reservePrice`, floored by a
  * decaying lower bound derived from the market's last stored confidence (so confidence
@@ -111,7 +111,7 @@ export declare function calculateLiveOracleStd(marketStats: MarketStats, oracleP
  * @param now Current unix timestamp (seconds).
  * @returns Oracle confidence as a fraction of price, BID_ASK_SPREAD_PRECISION (1e6).
  */
-export declare function getNewOracleConfPct(marketStats: MarketStats, oraclePriceData: OraclePriceData, reservePrice: BN, now: BN): BN;
+export declare function getNewOracleConfPct(marketStats: MarketStats, oraclePriceData: Pick<OraclePriceData, 'confidence'>, reservePrice: BN, now: BN): BN;
 /**
  * Returns the scale factor to convert a price quoted under `firstOracleSource` into the
  * equivalent price under `secondOracleSource`, for the Pyth Lazer "scaled" variants

package/lib/browser/math/orders.d.ts

@@ -89,7 +89,7 @@ export declare function calculateBaseAssetAmountForAmmToFulfill(order: Order, ma
  * @param mmOraclePriceData Current MM oracle price data.
  * @returns Fillable base asset amount up to the limit price, BASE_PRECISION (1e9).
  */
-export declare function calculateBaseAssetAmountToFillUpToLimitPrice(order: Order, amm: AMM, marketStats: MarketStats, orderStepSize: BN, orderTickSize: BN, limitPrice: BN, mmOraclePriceData: MMOraclePriceData): BN;
+export declare function calculateBaseAssetAmountToFillUpToLimitPrice(order: Order, amm: AMM, marketStats: MarketStats, orderStepSize: BN, orderTickSize: BN, limitPrice: BN, mmOraclePriceData: Pick<MMOraclePriceData, 'price' | 'confidence'>): BN;
 /**
  * True if `order.maxTs` has passed as of `ts`. Never true for trigger orders, non-`open`
  * orders, or orders with no expiry (`maxTs == 0`).

package/lib/browser/math/spotBalance.d.ts

@@ -241,6 +241,19 @@ export declare function calculateWithdrawLimit(spotMarket: SpotMarketAccount, no
     currentDepositAmount: BN;
     currentBorrowAmount: BN;
 };
+/**
+ * Mirror of the program's `calculate_max_deposit_token_amount`. Returns the max
+ * resulting deposit token amount permitted by the daily deposit cap: growth up
+ * to `maxDepositBpsPerDay` above the 24h deposit TWAP, but never below the
+ * deposit guard threshold. Returns null when the cap is disabled (pct == 0).
+ */
+export declare function calculateMaxDepositTokenAmount(depositTokenTwap: BN, depositGuardThreshold: BN, maxDepositBpsPerDay: number): BN | null;
+/**
+ * Mirror of the program's `check_deposit_limits`. Returns true if the market's
+ * current deposit level is within the daily deposit cap (always true when the
+ * cap is disabled).
+ */
+export declare function checkDepositLimits(spotMarket: SpotMarketAccount): boolean;
 /**
  * Calculates the margin-weighted value of a spot deposit, mirroring the asset-side of the
  * program's collateral valuation (`get_strict_token_value` + `get_asset_weight`). Uses the

package/lib/browser/math/spotBalance.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getSpotLiabilityValue = exports.getSpotAssetValue = exports.calculateWithdrawLimit = exports.calculateTokenUtilizationLimits = exports.calculateInterestAccumulated = exports.calculateBorrowRate = exports.calculateDepositRate = exports.calculateInterestRate = exports.calculateSpotMarketBorrowCapacity = exports.calculateUtilization = exports.calculateLiabilityWeight = exports.calculateScaledInitialAssetWeight = exports.calculateAssetWeight = exports.getTokenValue = exports.getStrictTokenValue = exports.getSignedTokenAmount = exports.getTokenAmount = exports.getBalance = void 0;
+exports.getSpotLiabilityValue = exports.getSpotAssetValue = exports.checkDepositLimits = exports.calculateMaxDepositTokenAmount = exports.calculateWithdrawLimit = exports.calculateTokenUtilizationLimits = exports.calculateInterestAccumulated = exports.calculateBorrowRate = exports.calculateDepositRate = exports.calculateInterestRate = exports.calculateSpotMarketBorrowCapacity = exports.calculateUtilization = exports.calculateLiabilityWeight = exports.calculateScaledInitialAssetWeight = exports.calculateAssetWeight = exports.getTokenValue = exports.getStrictTokenValue = exports.getSignedTokenAmount = exports.getTokenAmount = exports.getBalance = void 0;
 const types_1 = require("../types");
 const anchor_1 = require("../isomorphic/anchor");
 const numericConstants_1 = require("../constants/numericConstants");
@@ -571,7 +571,14 @@ function calculateWithdrawLimit(spotMarket, now) {
     else {
         maxBorrowTokensTwap = anchor_1.BN.max(spotMarket.withdrawGuardThreshold, anchor_1.BN.min(anchor_1.BN.max(lesserDepositAmount.div(new anchor_1.BN(2)), borrowTokenTwapLive.add(lesserDepositAmount.div(new anchor_1.BN(3)))), lesserDepositAmount.sub(lesserDepositAmount.div(new anchor_1.BN(20))))); // isolated pools between 50-95% utilization with friction on twap in 33% increments
     }
-    const minDepositTokensTwap = depositTokenTwapLive.sub(anchor_1.BN.max(depositTokenTwapLive.div(new anchor_1.BN(4)), anchor_1.BN.min(spotMarket.withdrawGuardThreshold, depositTokenTwapLive)));
+    // 0 is treated as the default 25% (2500 bps) so markets created before the
+    // field existed keep prior behavior (mirrors calculate_min_deposit_token_amount).
+    // withdrawCircuitBreakerBps is in basis points (BPS_PRECISION = 10_000 = 100%).
+    const breakerPct = spotMarket.withdrawCircuitBreakerBps === 0
+        ? numericConstants_2.BPS_PRECISION.divn(4)
+        : new anchor_1.BN(spotMarket.withdrawCircuitBreakerBps);
+    const maxDrop = depositTokenTwapLive.mul(breakerPct).div(numericConstants_2.BPS_PRECISION);
+    const minDepositTokensTwap = depositTokenTwapLive.sub(anchor_1.BN.max(maxDrop, anchor_1.BN.min(spotMarket.withdrawGuardThreshold, depositTokenTwapLive)));
     const { minDepositTokensForUtilization, maxBorrowTokensForUtilization } = calculateTokenUtilizationLimits(marketDepositTokenAmount, marketBorrowTokenAmount, spotMarket);
     const minDepositTokens = anchor_1.BN.max(minDepositTokensForUtilization, minDepositTokensTwap);
     let maxBorrowTokens = anchor_1.BN.min(maxBorrowTokensForUtilization, maxBorrowTokensTwap);
@@ -599,6 +606,40 @@ function calculateWithdrawLimit(spotMarket, now) {
     };
 }
 exports.calculateWithdrawLimit = calculateWithdrawLimit;
+/**
+ * Mirror of the program's `calculate_max_deposit_token_amount`. Returns the max
+ * resulting deposit token amount permitted by the daily deposit cap: growth up
+ * to `maxDepositBpsPerDay` above the 24h deposit TWAP, but never below the
+ * deposit guard threshold. Returns null when the cap is disabled (pct == 0).
+ */
+function calculateMaxDepositTokenAmount(depositTokenTwap, depositGuardThreshold, maxDepositBpsPerDay) {
+    if (maxDepositBpsPerDay === 0) {
+        return null; // disabled
+    }
+    // maxDepositBpsPerDay is in basis points (BPS_PRECISION = 10_000 = 100%).
+    const maxIncrease = depositTokenTwap
+        .mul(new anchor_1.BN(maxDepositBpsPerDay))
+        .div(numericConstants_2.BPS_PRECISION);
+    return anchor_1.BN.max(depositTokenTwap.add(maxIncrease), depositGuardThreshold);
+}
+exports.calculateMaxDepositTokenAmount = calculateMaxDepositTokenAmount;
+/**
+ * Mirror of the program's `check_deposit_limits`. Returns true if the market's
+ * current deposit level is within the daily deposit cap (always true when the
+ * cap is disabled).
+ */
+function checkDepositLimits(spotMarket) {
+    if (spotMarket.maxDepositBpsPerDay === 0) {
+        return true;
+    }
+    const depositTokenAmount = getTokenAmount(spotMarket.depositBalance, spotMarket, types_1.SpotBalanceType.DEPOSIT);
+    const maxDepositToken = calculateMaxDepositTokenAmount(spotMarket.depositTokenTwap, spotMarket.depositGuardThreshold, spotMarket.maxDepositBpsPerDay);
+    if (maxDepositToken === null) {
+        return true;
+    }
+    return depositTokenAmount.lte(maxDepositToken);
+}
+exports.checkDepositLimits = checkDepositLimits;
 /**
  * Calculates the margin-weighted value of a spot deposit, mirroring the asset-side of the
  * program's collateral valuation (`get_strict_token_value` + `get_asset_weight`). Uses the

package/lib/browser/testClient.js

@@ -4,11 +4,22 @@ exports.TestClient = void 0;
 const adminClient_1 = require("./adminClient");
 class TestClient extends adminClient_1.AdminClient {
     constructor(config) {
-        var _a;
+        var _a, _b, _c;
         config.txVersion = 'legacy';
         if (((_a = config.accountSubscription) === null || _a === void 0 ? void 0 : _a.type) !== 'polling') {
             throw new Error('Test client must be polling');
         }
+        // Blockhash caching keys its TTL off the wall clock, which is incompatible
+        // with bankrun's simulated clock: within a single 2s wall-clock window the
+        // bankrun validator advances many slots (and its blockhash), so a cached
+        // blockhash goes stale and sequential builds collide into identical
+        // transactions ("already processed") or reference an expired blockhash
+        // ("Blockhash not found"). There is also no real RPC to save in bankrun.
+        // Force fresh fetches unless a test explicitly opts back in.
+        config.txHandlerConfig = {
+            ...config.txHandlerConfig,
+            blockhashCachingEnabled: (_c = (_b = config.txHandlerConfig) === null || _b === void 0 ? void 0 : _b.blockhashCachingEnabled) !== null && _c !== void 0 ? _c : false,
+        };
         super(config);
     }
     async sendTransaction(tx, additionalSigners, opts, preSigned) {

package/lib/browser/tx/txHandler.d.ts

@@ -37,7 +37,13 @@ export type TxBuildingProps = {
 };
 /** Configuration for `TxHandler`'s blockhash-fetching strategy. */
 export type TxHandlerConfig = {
-    /** If `true`, use a `CachedBlockhashFetcher` (reduces RPC calls during bursts of tx construction); otherwise fetch fresh every time via `BaseBlockhashFetcher`. */
+    /**
+     * Blockhash-fetching strategy. Defaults to `true`: a `CachedBlockhashFetcher`
+     * reuses a recent blockhash for `RECENT_BLOCKHASH_STALE_TIME_MS` (2s) to avoid a
+     * `getLatestBlockhash` RPC call on every transaction build — this is safe because a
+     * blockhash stays valid on-chain far longer than the cache TTL. Set to `false` to
+     * force a fresh RPC fetch on every build via `BaseBlockhashFetcher`.
+     */
     blockhashCachingEnabled?: boolean;
     /** Tuning for `CachedBlockhashFetcher` when `blockhashCachingEnabled` is `true`; each field defaults if omitted (see `BLOCKHASH_FETCH_RETRY_COUNT`/`BLOCKHASH_FETCH_RETRY_SLEEP`/`RECENT_BLOCKHASH_STALE_TIME_MS`). */
     blockhashCachingConfig?: {

package/lib/browser/tx/txHandler.js

@@ -64,9 +64,13 @@ class TxHandler {
         this.confirmationOptions = props.confirmationOptions;
         this.blockhashCommitment =
             (_f = (_e = (_c = (_b = props.confirmationOptions) === null || _b === void 0 ? void 0 : _b.preflightCommitment) !== null && _c !== void 0 ? _c : (_d = props === null || props === void 0 ? void 0 : props.connection) === null || _d === void 0 ? void 0 : _d.commitment) !== null && _e !== void 0 ? _e : this.blockhashCommitment) !== null && _f !== void 0 ? _f : 'confirmed';
-        this.blockHashFetcher = ((_g = props === null || props === void 0 ? void 0 : props.config) === null || _g === void 0 ? void 0 : _g.blockhashCachingEnabled)
-            ? new cachedBlockhashFetcher_1.CachedBlockhashFetcher(this.connection, this.blockhashCommitment, (_k = (_j = (_h = props === null || props === void 0 ? void 0 : props.config) === null || _h === void 0 ? void 0 : _h.blockhashCachingConfig) === null || _j === void 0 ? void 0 : _j.retryCount) !== null && _k !== void 0 ? _k : BLOCKHASH_FETCH_RETRY_COUNT, (_o = (_m = (_l = props === null || props === void 0 ? void 0 : props.config) === null || _l === void 0 ? void 0 : _l.blockhashCachingConfig) === null || _m === void 0 ? void 0 : _m.retrySleepTimeMs) !== null && _o !== void 0 ? _o : BLOCKHASH_FETCH_RETRY_SLEEP, (_r = (_q = (_p = props === null || props === void 0 ? void 0 : props.config) === null || _p === void 0 ? void 0 : _p.blockhashCachingConfig) === null || _q === void 0 ? void 0 : _q.staleCacheTimeMs) !== null && _r !== void 0 ? _r : RECENT_BLOCKHASH_STALE_TIME_MS)
-            : new baseBlockhashFetcher_1.BaseBlockhashFetcher(this.connection, this.blockhashCommitment);
+        // Cache by default: only opt out when a consumer explicitly disables it. This
+        // collapses per-build `getLatestBlockhash` RPC calls (crankers dominate these)
+        // into at most one fetch per staleCacheTimeMs window.
+        this.blockHashFetcher =
+            ((_g = props === null || props === void 0 ? void 0 : props.config) === null || _g === void 0 ? void 0 : _g.blockhashCachingEnabled) === false
+                ? new baseBlockhashFetcher_1.BaseBlockhashFetcher(this.connection, this.blockhashCommitment)
+                : new cachedBlockhashFetcher_1.CachedBlockhashFetcher(this.connection, this.blockhashCommitment, (_k = (_j = (_h = props === null || props === void 0 ? void 0 : props.config) === null || _h === void 0 ? void 0 : _h.blockhashCachingConfig) === null || _j === void 0 ? void 0 : _j.retryCount) !== null && _k !== void 0 ? _k : BLOCKHASH_FETCH_RETRY_COUNT, (_o = (_m = (_l = props === null || props === void 0 ? void 0 : props.config) === null || _l === void 0 ? void 0 : _l.blockhashCachingConfig) === null || _m === void 0 ? void 0 : _m.retrySleepTimeMs) !== null && _o !== void 0 ? _o : BLOCKHASH_FETCH_RETRY_SLEEP, (_r = (_q = (_p = props === null || props === void 0 ? void 0 : props.config) === null || _p === void 0 ? void 0 : _p.blockhashCachingConfig) === null || _q === void 0 ? void 0 : _q.staleCacheTimeMs) !== null && _r !== void 0 ? _r : RECENT_BLOCKHASH_STALE_TIME_MS);
         // #Optionals
         this.returnBlockHeightsWithSignedTxCallbackData =
             (_t = (_s = props.opts) === null || _s === void 0 ? void 0 : _s.returnBlockHeightsWithSignedTxCallbackData) !== null && _t !== void 0 ? _t : false;

package/lib/browser/types.d.ts

@@ -1207,6 +1207,8 @@ export type PerpMarketAccount = {
     feePoolBufferTarget: BN;
     /** PERCENTAGE_PRECISION (1e6 = 100%); fraction of OI notional (at the oracle TWAP) the sweep leaves behind in `feeLedger.pendingIfFee` as a standing bankruptcy first-loss tranche; 0 disables */
     bankruptcyIfFloorPct: number;
+    /** QUOTE_PRECISION (1e6); aggregate builder/referrer revenue share accrued but not yet paid out of this market's pnl pool. The fee sweep reserves it (like `max(net_user_pnl, 0)` and the floored IF tranche) so a protocol-fee drain can't leave accrued revenue-share claims temporarily unpayable */
+    pendingRevenueShare: BN;
     /** MARGIN_PRECISION (1e4); scales margin ratio up for large positions */
     imfFactor: number;
     /** MARGIN_PRECISION (1e4); discounts positive-unrealized-pnl asset weight for large positions */
@@ -1357,6 +1359,10 @@ export type SpotMarketAccount = {
     protocolLiquidationFee: number;
     /** IF_FACTOR_PRECISION (1e6); protocol's carveout of lending deposit-interest gains */
     protocolFeeFactor: number;
+    /** token mint precision; IF vault balance recorded at the last revenue settle, used as a
+     * donation-proof base for the per-period revenue-settle APR cap (see `settle_revenue_to_insurance_fund`);
+     * `0` = uninitialized (pre-upgrade accounts, seeded on first settle) */
+    ifLastSettleVaultAmount: BN;
     /** token mint decimals; token-mint precision throughout this account is 10^decimals */
     decimals: number;
     /** SPOT_UTILIZATION_PRECISION (1e6) */
@@ -1439,6 +1445,9 @@ export type SpotMarketAccount = {
     poolId: number;
     /** -100 to 100; percentage adjustment applied to the base fee rate */
     feeAdjustment: number;
+    depositGuardThreshold: BN;
+    withdrawCircuitBreakerBps: number;
+    maxDepositBpsPerDay: number;
 };
 /** A scaled token balance inside a market's internal pools (pnl pool, protocol fee pool, revenue pool, spot fee pool, AMM fee pool). Multiply `scaledBalance` (SPOT_BALANCE_PRECISION, 1e9) by the referenced spot market's `cumulativeDepositInterest`/`cumulativeBorrowInterest` to get the token amount. */
 export type PoolBalance = {

package/lib/browser/user.d.ts

@@ -957,8 +957,8 @@ export declare class User {
     getPerpPositionHealth({ marginCategory, perpPosition, oraclePriceData, quoteOraclePriceData, includeOpenOrders, }: {
         marginCategory: MarginCategory;
         perpPosition: PerpPosition;
-        oraclePriceData?: OraclePriceData;
-        quoteOraclePriceData?: OraclePriceData;
+        oraclePriceData?: Pick<OraclePriceData, 'price'>;
+        quoteOraclePriceData?: Pick<OraclePriceData, 'price'>;
         includeOpenOrders?: boolean;
     }): HealthComponent;
     /**

package/lib/browser/userMap/userMap.d.ts

@@ -10,6 +10,7 @@ import { PublicKey } from '@solana/web3.js';
 import { UserAccountFilterCriteria as UserFilterCriteria, UserMapConfig } from './userMapConfig';
 import StrictEventEmitter from 'strict-event-emitter-types';
 import { EventEmitter } from 'events';
+export declare const USER_ACCOUNT_SIZE_BYTES = 4496;
 /** Public surface implemented by `UserMap`. */
 export interface UserMapInterface {
     eventEmitter: StrictEventEmitter<EventEmitter, UserEvents>;

package/lib/browser/userMap/userMap.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.UserMap = void 0;
+exports.UserMap = exports.USER_ACCOUNT_SIZE_BYTES = void 0;
 const user_1 = require("../user");
 const DLOB_1 = require("../dlob/DLOB");
 const oneShotUserAccountSubscriber_1 = require("../accounts/oneShotUserAccountSubscriber");
@@ -13,11 +13,7 @@ const PollingSubscription_1 = require("./PollingSubscription");
 const user_2 = require("../decode/user");
 const grpcSubscription_1 = require("./grpcSubscription");
 const events_1 = require("events");
-// Velocity's User account is 4496 bytes (8-byte discriminator + 4488 struct);
-// drift's was 4376. This caps the zstd-decompressed buffer in defaultSync — if it's
-// smaller than the real account, the buffer is truncated and decodeUser reads past
-// the end (RangeError: ERR_BUFFER_OUT_OF_BOUNDS). Must be >= the on-chain User size.
-const MAX_USER_ACCOUNT_SIZE_BYTES = 4496;
+exports.USER_ACCOUNT_SIZE_BYTES = 4496;
 /**
  * In-memory cache of every `User` account on the program, keyed by the
  * `User` account's own public key.
@@ -393,7 +389,7 @@ class UserMap {
                 const compressedUserData = buffer_1.Buffer.from(programAccount.account.data[0], 'base64');
                 const decoder = new zstddec_1.ZSTDDecoder();
                 await decoder.init();
-                const userBuffer = decoder.decode(compressedUserData, MAX_USER_ACCOUNT_SIZE_BYTES);
+                const userBuffer = decoder.decode(compressedUserData, exports.USER_ACCOUNT_SIZE_BYTES);
                 programAccountBufferMap.set(programAccount.pubkey.toString(), buffer_1.Buffer.from(userBuffer));
             });
             await Promise.all(decodingPromises);

package/lib/browser/velocityClient.d.ts

@@ -433,25 +433,24 @@ export declare class VelocityClient {
         externalWallet?: PublicKey;
     }): Promise<[PublicKey, TransactionInstruction]>;
     /**
-     * Grows an existing `SignedMsgUserOrders` account to hold more order-message slots. The program
-     * only allows growing, never shrinking.
+     * Resizes an existing `SignedMsgUserOrders` account. Growing (adding order-message slots) is
+     * permitted for any payer; shrinking is only permitted when the payer is the account's
+     * `authority`, because the account is authority-scoped and shared across all of the authority's
+     * subaccounts — a shrink evicts replay-protection UUIDs for every subaccount.
      * @param authority - Authority whose account is resized.
-     * @param numOrders - New (larger) number of order-message slots.
-     * @param userSubaccountId - Sub-account id used to derive the `user` account passed to the
-     * instruction; defaults to `0`.
+     * @param numOrders - New number of order-message slots.
      * @param txParams - Optional compute-unit/priority-fee overrides for the transaction.
      * @returns The transaction signature.
      */
-    resizeSignedMsgUserOrders(authority: PublicKey, numOrders: number, userSubaccountId?: number, txParams?: TxParams): Promise<TransactionSignature>;
+    resizeSignedMsgUserOrders(authority: PublicKey, numOrders: number, txParams?: TxParams): Promise<TransactionSignature>;
     /**
      * Builds the `resizeSignedMsgUserOrders` instruction. See `resizeSignedMsgUserOrders` for
      * semantics.
      * @param authority - Authority whose account is resized.
-     * @param numOrders - New (larger) number of order-message slots.
-     * @param userSubaccountId - Sub-account id used to derive the `user` account; defaults to `0`.
+     * @param numOrders - New number of order-message slots.
      * @returns The resize instruction.
      */
-    getResizeSignedMsgUserOrdersInstruction(authority: PublicKey, numOrders: number, userSubaccountId?: number): Promise<TransactionInstruction>;
+    getResizeSignedMsgUserOrdersInstruction(authority: PublicKey, numOrders: number): Promise<TransactionInstruction>;
     /**
      * Initializes `authority`'s `SignedMsgWsDelegates` account, which lists wallets authorized to
      * co-sign/relay that authority's signed-message ("swift") orders over a websocket connection
@@ -1574,9 +1573,11 @@ export declare class VelocityClient {
      * @param fromSubAccountId - Sub-account id to debit.
      * @param toSubAccountId - Sub-account id to credit.
      * @param equityFloorDelta - Equity floor (QUOTE_PRECISION) to move from the debited to the credited
-     * sub-account along with the funds, keeping the sum of floors constant. The debited side must stay
-     * at/above its reduced floor and the credited side's collateral (after the transfer lands) must back
-     * its increased floor, else the transfer reverts with `InvalidEquityFloorTransfer`. Pass `'auto'`
+     * sub-account along with the funds, keeping the sum of floors constant. The debited side must not
+     * already be below the floor being reduced (a below-floor sub-account cannot shed floor to defuse a
+     * pending equity-breaker trip), must stay at/above its reduced floor, and the credited side's
+     * collateral (after the transfer lands) must back its increased floor, else the transfer reverts with
+     * `InvalidEquityFloorTransfer`. Pass `'auto'`
      * (quote market only) to move the minimal floor needed for the debited side to stay at/above its
      * floor: `max(0, amount - (collateral - floor))`, capped at the debited side's floor. The auto delta
      * never exceeds `amount`, so the credited side stays backed whenever it was before. Client-side
@@ -3220,7 +3221,8 @@ export declare class VelocityClient {
      * position to the calling liquidator's sub-account at the oracle price (subject to `limitPrice`
      * and the on-chain liquidation fee). Reverts if `userAccountPublicKey` equals the liquidator's
      * own user account. Permissionless — any signer can act as liquidator, taking on the position
-     * and its PnL themselves.
+     * and its PnL themselves. Reverts with `EquityBelowFloor` if the liquidator's authority-wide
+     * equity breaker is tripped (a tripped authority is barred from position-acquiring liquidations).
      * @param userAccountPublicKey - Public key of the user account being liquidated.
      * @param userAccount - Decoded user account being liquidated.
      * @param marketIndex - Perp market index of the position to liquidate.
@@ -3272,7 +3274,9 @@ export declare class VelocityClient {
      * debt from the user to the liquidator's own sub-account in exchange for `assetMarketIndex`
      * collateral, when the user is below maintenance margin (or already flagged `beingLiquidated`).
      * Reverts if `userAccountPublicKey` equals the liquidator's own user account. Permissionless —
-     * any signer can act as liquidator.
+     * any signer can act as liquidator. Reverts with `EquityBelowFloor` if the liquidator's
+     * authority-wide equity breaker is tripped (a tripped authority is barred from position-acquiring
+     * liquidations).
      * @param userAccountPublicKey - Public key of the user account being liquidated.
      * @param userAccount - Decoded user account being liquidated.
      * @param assetMarketIndex - Spot market index of the collateral the liquidator receives.
@@ -3381,7 +3385,9 @@ export declare class VelocityClient {
      * PnL in `perpMarketIndex`. Only usable once the user's position size in `perpMarketIndex` is
      * zero (the PnL must already be fully unrealized/settled-out, not backed by an open position).
      * Reverts if `userAccountPublicKey` equals the liquidator's own user account. Permissionless —
-     * any signer can act as liquidator.
+     * any signer can act as liquidator. Reverts with `EquityBelowFloor` if the liquidator's
+     * authority-wide equity breaker is tripped (a tripped authority is barred from
+     * balance-acquiring liquidations).
      * @param userAccountPublicKey - Public key of the user account being liquidated.
      * @param userAccount - Decoded user account being liquidated.
      * @param perpMarketIndex - Perp market index whose unsettled PnL backs the transfer, QUOTE_PRECISION (1e6).
@@ -3412,7 +3418,9 @@ export declare class VelocityClient {
      * `perpMarketIndex` from the user to the liquidator in exchange for `assetMarketIndex` spot
      * collateral (the inverse of `liquidateBorrowForPerpPnl`). Only usable once the user's position
      * size in `perpMarketIndex` is zero. Reverts if `userAccountPublicKey` equals the liquidator's
-     * own user account. Permissionless — any signer can act as liquidator.
+     * own user account. Permissionless — any signer can act as liquidator. Reverts with
+     * `EquityBelowFloor` if the liquidator's authority-wide equity breaker is tripped (a tripped
+     * authority is barred from balance-acquiring liquidations).
      * @param userAccountPublicKey - Public key of the user account being liquidated.
      * @param userAccount - Decoded user account being liquidated.
      * @param perpMarketIndex - Perp market index of the negative unsettled PnL being absorbed.
@@ -3693,8 +3701,10 @@ export declare class VelocityClient {
     }): Promise<TransactionInstruction[]>;
     /**
      * Starts the unstaking cooldown for this wallet's insurance fund stake in `marketIndex`, locking
-     * in the number of IF shares corresponding to `amount` at the current share price. The actual
-     * withdrawal must be completed with `removeInsuranceFundStake` after
+     * in the number of IF shares corresponding to `amount` at the current share price. Any revenue
+     * already due to the insurance fund is settled first (mirroring `addInsuranceFundStake`), so the
+     * frozen exit value includes the staker's share of it rather than forfeiting it to the remaining
+     * stakers. The actual withdrawal must be completed with `removeInsuranceFundStake` after
      * `spotMarket.insuranceFund.unstakingPeriod` seconds have elapsed; only one request may be
      * in-flight per stake account (`cancelRequestRemoveInsuranceFundStake` to reset). A caller may
      * only act on their own stake account.
@@ -3770,8 +3780,10 @@ export declare class VelocityClient {
      * `pendingAmmProvision` into the AMM's fee pool (both leave `feePoolBufferTarget` behind). Every
      * drain reserves `max(netUserPnl, 0)` so user claims stay backed. This runs inline on every
      * `settlePNL` already — this instruction lets a keeper run it on demand without settling anyone's
-     * PnL. Gates the oracle price used to value `netUserPnl` the same way `settlePNL` does (price-band
-     * + validity/divergence checks when the market has curve updates enabled).
+     * PnL. Values `netUserPnl` at the market's fixed `expiryPrice` when the market is in `settlement`
+     * status (expired positions settle at that price, not the live oracle, so no live-oracle gate is
+     * applied); otherwise it uses the live oracle price and gates it the same way `settlePNL` does
+     * (price-band + validity/divergence checks when the market has curve updates enabled).
      * @param perpMarketIndex - Perp market index to sweep fees for.
      * @param txParams - Optional compute-unit/priority-fee overrides.
      * @returns The transaction signature.