@velocity-exchange/sdk 0.7.0 → 0.8.0

package/lib/browser/adminClient.d.ts

@@ -894,9 +894,13 @@ export declare class AdminClient extends VelocityClient {
      * `updateWithdrawGuardThreshold` — in particular, the `oracle` param must equal
      * `spotMarket.oracle` (enforced by the `has_one` constraint) and is auto-resolved when
      * omitted. Throws if the spot market account can't be found when not subscribed.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateWithdrawGuardThreshold` instruction.
      */
-    getUpdateWithdrawGuardThresholdIx(spotMarketIndex: number, withdrawGuardThreshold: BN, oracle?: PublicKey): Promise<TransactionInstruction>;
+    getUpdateWithdrawGuardThresholdIx(spotMarketIndex: number, withdrawGuardThreshold: BN, oracle?: PublicKey, admin?: PublicKey): Promise<TransactionInstruction>;
     /**
      * Sets a spot market's lending-gain carveouts: the share of deposit interest routed to the
      * insurance fund (`ifFeeFactor`) and to the withdrawable protocol fee pool
@@ -913,9 +917,13 @@ export declare class AdminClient extends VelocityClient {
     /**
      * Builds the `updateSpotMarketIfFactor` instruction without sending it. See
      * `updateSpotMarketIfFactor` for units and validation.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateSpotMarketIfFactor` instruction.
      */
-    getUpdateSpotMarketIfFactorIx(spotMarketIndex: number, ifFeeFactor: number, protocolFeeFactor: number): Promise<TransactionInstruction>;
+    getUpdateSpotMarketIfFactorIx(spotMarketIndex: number, ifFeeFactor: number, protocolFeeFactor: number, admin?: PublicKey): Promise<TransactionInstruction>;
     /**
      * Sets how often a spot market's revenue pool may be settled to the insurance fund.
      * Requires warm admin (`check_warm`).
@@ -943,6 +951,10 @@ export declare class AdminClient extends VelocityClient {
      * @returns The unsigned `updateSpotMarketMaxTokenDeposits` instruction.
      */
     getUpdateSpotMarketMaxTokenDepositsIx(spotMarketIndex: number, maxTokenDeposits: BN): Promise<TransactionInstruction>;
+    updateSpotMarketWithdrawCircuitBreaker(spotMarketIndex: number, withdrawCircuitBreakerBps: number): Promise<TransactionSignature>;
+    getUpdateSpotMarketWithdrawCircuitBreakerIx(spotMarketIndex: number, withdrawCircuitBreakerBps: number): Promise<TransactionInstruction>;
+    updateSpotMarketDepositCap(spotMarketIndex: number, depositGuardThreshold: BN, maxDepositBpsPerDay: number): Promise<TransactionSignature>;
+    getUpdateSpotMarketDepositCapIx(spotMarketIndex: number, depositGuardThreshold: BN, maxDepositBpsPerDay: number): Promise<TransactionInstruction>;
     /**
      * Caps a spot market's total borrows as a fraction of its `maxTokenDeposits`, rather than
      * an absolute token amount. Requires warm admin (`check_warm`). On-chain, the effective cap
@@ -971,9 +983,13 @@ export declare class AdminClient extends VelocityClient {
     /**
      * Builds the `updateSpotMarketScaleInitialAssetWeightStart` instruction without sending it.
      * See `updateSpotMarketScaleInitialAssetWeightStart`.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateSpotMarketScaleInitialAssetWeightStart` instruction.
      */
-    getUpdateSpotMarketScaleInitialAssetWeightStartIx(spotMarketIndex: number, scaleInitialAssetWeightStart: BN): Promise<TransactionInstruction>;
+    getUpdateSpotMarketScaleInitialAssetWeightStartIx(spotMarketIndex: number, scaleInitialAssetWeightStart: BN, admin?: PublicKey): Promise<TransactionInstruction>;
     /**
      * Sets how long an insurance-fund staker's unstake request must sit in escrow before it can
      * be completed for a given spot market. Requires warm admin (`check_warm`).
@@ -1258,9 +1274,13 @@ export declare class AdminClient extends VelocityClient {
     /**
      * Builds the `updateSpotMarketStatus` instruction without sending it. See
      * `updateSpotMarketStatus`.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateSpotMarketStatus` instruction.
      */
-    getUpdateSpotMarketStatusIx(spotMarketIndex: number, marketStatus: MarketStatus): Promise<TransactionInstruction>;
+    getUpdateSpotMarketStatusIx(spotMarketIndex: number, marketStatus: MarketStatus, admin?: PublicKey): Promise<TransactionInstruction>;
     /**
      * Sets a spot market's operation pause bitmask (`SpotOperation`: `UpdateCumulativeInterest`
      * 0b00001, `Fill` 0b00010, `Deposit` 0b00100, `Withdraw` 0b01000, `Liquidation` 0b10000).

package/lib/browser/adminClient.js

@@ -1767,9 +1767,13 @@ class AdminClient extends velocityClient_1.VelocityClient {
      * `updateWithdrawGuardThreshold` — in particular, the `oracle` param must equal
      * `spotMarket.oracle` (enforced by the `has_one` constraint) and is auto-resolved when
      * omitted. Throws if the spot market account can't be found when not subscribed.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateWithdrawGuardThreshold` instruction.
      */
-    async getUpdateWithdrawGuardThresholdIx(spotMarketIndex, withdrawGuardThreshold, oracle) {
+    async getUpdateWithdrawGuardThresholdIx(spotMarketIndex, withdrawGuardThreshold, oracle, admin) {
         const spotMarketPublicKey = await (0, pda_1.getSpotMarketPublicKey)(this.program.programId, spotMarketIndex);
         if (!oracle) {
             const cachedSpotMarket = this.isSubscribed
@@ -1789,9 +1793,9 @@ class AdminClient extends velocityClient_1.VelocityClient {
         }
         return await this.program.instruction.updateWithdrawGuardThreshold(withdrawGuardThreshold, {
             accounts: {
-                admin: this.isSubscribed
+                admin: admin !== null && admin !== void 0 ? admin : (this.isSubscribed
                     ? this.getStateAccount().coldAdmin
-                    : this.wallet.publicKey,
+                    : this.wallet.publicKey),
                 state: await this.getStatePublicKey(),
                 spotMarket: spotMarketPublicKey,
                 oracle,
@@ -1819,14 +1823,18 @@ class AdminClient extends velocityClient_1.VelocityClient {
     /**
      * Builds the `updateSpotMarketIfFactor` instruction without sending it. See
      * `updateSpotMarketIfFactor` for units and validation.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateSpotMarketIfFactor` instruction.
      */
-    async getUpdateSpotMarketIfFactorIx(spotMarketIndex, ifFeeFactor, protocolFeeFactor) {
+    async getUpdateSpotMarketIfFactorIx(spotMarketIndex, ifFeeFactor, protocolFeeFactor, admin) {
         return await this.program.instruction.updateSpotMarketIfFactor(spotMarketIndex, ifFeeFactor, protocolFeeFactor, {
             accounts: {
-                admin: this.isSubscribed
+                admin: admin !== null && admin !== void 0 ? admin : (this.isSubscribed
                     ? this.getStateAccount().coldAdmin
-                    : this.wallet.publicKey,
+                    : this.wallet.publicKey),
                 state: await this.getStatePublicKey(),
                 spotMarket: await (0, pda_1.getSpotMarketPublicKey)(this.program.programId, spotMarketIndex),
             },
@@ -1889,6 +1897,40 @@ class AdminClient extends velocityClient_1.VelocityClient {
             },
         });
     }
+    async updateSpotMarketWithdrawCircuitBreaker(spotMarketIndex, withdrawCircuitBreakerBps) {
+        const ix = await this.getUpdateSpotMarketWithdrawCircuitBreakerIx(spotMarketIndex, withdrawCircuitBreakerBps);
+        const tx = await this.buildTransaction(ix);
+        const { txSig } = await this.sendTransaction(tx, [], this.opts);
+        return txSig;
+    }
+    async getUpdateSpotMarketWithdrawCircuitBreakerIx(spotMarketIndex, withdrawCircuitBreakerBps) {
+        return this.program.instruction.updateSpotMarketWithdrawCircuitBreaker(withdrawCircuitBreakerBps, {
+            accounts: {
+                admin: this.isSubscribed
+                    ? this.getStateAccount().coldAdmin
+                    : this.wallet.publicKey,
+                state: await this.getStatePublicKey(),
+                spotMarket: await (0, pda_1.getSpotMarketPublicKey)(this.program.programId, spotMarketIndex),
+            },
+        });
+    }
+    async updateSpotMarketDepositCap(spotMarketIndex, depositGuardThreshold, maxDepositBpsPerDay) {
+        const ix = await this.getUpdateSpotMarketDepositCapIx(spotMarketIndex, depositGuardThreshold, maxDepositBpsPerDay);
+        const tx = await this.buildTransaction(ix);
+        const { txSig } = await this.sendTransaction(tx, [], this.opts);
+        return txSig;
+    }
+    async getUpdateSpotMarketDepositCapIx(spotMarketIndex, depositGuardThreshold, maxDepositBpsPerDay) {
+        return this.program.instruction.updateSpotMarketDepositCap(depositGuardThreshold, maxDepositBpsPerDay, {
+            accounts: {
+                admin: this.isSubscribed
+                    ? this.getStateAccount().coldAdmin
+                    : this.wallet.publicKey,
+                state: await this.getStatePublicKey(),
+                spotMarket: await (0, pda_1.getSpotMarketPublicKey)(this.program.programId, spotMarketIndex),
+            },
+        });
+    }
     /**
      * Caps a spot market's total borrows as a fraction of its `maxTokenDeposits`, rather than
      * an absolute token amount. Requires warm admin (`check_warm`). On-chain, the effective cap
@@ -1937,14 +1979,18 @@ class AdminClient extends velocityClient_1.VelocityClient {
     /**
      * Builds the `updateSpotMarketScaleInitialAssetWeightStart` instruction without sending it.
      * See `updateSpotMarketScaleInitialAssetWeightStart`.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateSpotMarketScaleInitialAssetWeightStart` instruction.
      */
-    async getUpdateSpotMarketScaleInitialAssetWeightStartIx(spotMarketIndex, scaleInitialAssetWeightStart) {
+    async getUpdateSpotMarketScaleInitialAssetWeightStartIx(spotMarketIndex, scaleInitialAssetWeightStart, admin) {
         return this.program.instruction.updateSpotMarketScaleInitialAssetWeightStart(scaleInitialAssetWeightStart, {
             accounts: {
-                admin: this.isSubscribed
+                admin: admin !== null && admin !== void 0 ? admin : (this.isSubscribed
                     ? this.getStateAccount().coldAdmin
-                    : this.wallet.publicKey,
+                    : this.wallet.publicKey),
                 state: await this.getStatePublicKey(),
                 spotMarket: await (0, pda_1.getSpotMarketPublicKey)(this.program.programId, spotMarketIndex),
             },
@@ -2492,14 +2538,18 @@ class AdminClient extends velocityClient_1.VelocityClient {
     /**
      * Builds the `updateSpotMarketStatus` instruction without sending it. See
      * `updateSpotMarketStatus`.
+     * @param admin - Overrides the `admin` signer account. The instruction is warm-gated
+     *   on-chain, so pass the key that will actually sign at execution — e.g. a Squads warm-admin
+     *   vault PDA when the ix is wrapped in a multisig proposal. Defaults to `state.coldAdmin`
+     *   (or the wallet if not subscribed).
      * @returns The unsigned `updateSpotMarketStatus` instruction.
      */
-    async getUpdateSpotMarketStatusIx(spotMarketIndex, marketStatus) {
+    async getUpdateSpotMarketStatusIx(spotMarketIndex, marketStatus, admin) {
         return await this.program.instruction.updateSpotMarketStatus(marketStatus, {
             accounts: {
-                admin: this.isSubscribed
+                admin: admin !== null && admin !== void 0 ? admin : (this.isSubscribed
                     ? this.getStateAccount().coldAdmin
-                    : this.wallet.publicKey,
+                    : this.wallet.publicKey),
                 state: await this.getStatePublicKey(),
                 spotMarket: await (0, pda_1.getSpotMarketPublicKey)(this.program.programId, spotMarketIndex),
             },

package/lib/browser/core/VelocityCore.d.ts

@@ -224,6 +224,7 @@ export declare class VelocityCore {
      * @param args.state - the global `State` PDA.
      * @param args.filler - the keeper's `User` account submitting the trigger.
      * @param args.user - the order owner's `User` account.
+     * @param args.userStats - the order owner's `UserStats` account (authority-wide equity breaker).
      * @param args.authority - signer that must own or be a registered delegate of `filler`.
      * @param args.remainingAccounts - oracle/market `AccountMeta[]` for the order's market.
      * @returns the unsigned `triggerOrder` `TransactionInstruction`.
@@ -234,6 +235,7 @@ export declare class VelocityCore {
         state: PublicKey;
         filler: PublicKey;
         user: PublicKey;
+        userStats: PublicKey;
         authority: PublicKey;
         remainingAccounts: AccountMeta[];
     }): Promise<TransactionInstruction>;

package/lib/browser/core/VelocityCore.js

@@ -202,6 +202,7 @@ class VelocityCore {
      * @param args.state - the global `State` PDA.
      * @param args.filler - the keeper's `User` account submitting the trigger.
      * @param args.user - the order owner's `User` account.
+     * @param args.userStats - the order owner's `UserStats` account (authority-wide equity breaker).
      * @param args.authority - signer that must own or be a registered delegate of `filler`.
      * @param args.remainingAccounts - oracle/market `AccountMeta[]` for the order's market.
      * @returns the unsigned `triggerOrder` `TransactionInstruction`.

package/lib/browser/core/instructions/trigger.d.ts

@@ -11,6 +11,9 @@ import type { VelocityProgram } from '../../config';
  * @param args.state - the global `State` PDA.
  * @param args.filler - the keeper's `User` account submitting the trigger.
  * @param args.user - the order owner's `User` account.
+ * @param args.userStats - the order owner's `UserStats` account (checked for the
+ *   authority-wide equity breaker; a risk-increasing trigger order is cancelled
+ *   rather than activated while the breaker is tripped).
  * @param args.authority - signer that must own or be a registered delegate of `filler`.
  * @param args.remainingAccounts - oracle/market `AccountMeta[]` for the order's market.
  * @returns the unsigned `triggerOrder` `TransactionInstruction`.
@@ -21,6 +24,7 @@ export declare function buildTriggerOrderInstruction(args: {
     state: PublicKey;
     filler: PublicKey;
     user: PublicKey;
+    userStats: PublicKey;
     authority: PublicKey;
     remainingAccounts: AccountMeta[];
 }): Promise<TransactionInstruction>;

package/lib/browser/core/instructions/trigger.js

@@ -12,6 +12,9 @@ exports.buildTriggerOrderInstruction = void 0;
  * @param args.state - the global `State` PDA.
  * @param args.filler - the keeper's `User` account submitting the trigger.
  * @param args.user - the order owner's `User` account.
+ * @param args.userStats - the order owner's `UserStats` account (checked for the
+ *   authority-wide equity breaker; a risk-increasing trigger order is cancelled
+ *   rather than activated while the breaker is tripped).
  * @param args.authority - signer that must own or be a registered delegate of `filler`.
  * @param args.remainingAccounts - oracle/market `AccountMeta[]` for the order's market.
  * @returns the unsigned `triggerOrder` `TransactionInstruction`.
@@ -22,6 +25,7 @@ async function buildTriggerOrderInstruction(args) {
             state: args.state,
             filler: args.filler,
             user: args.user,
+            userStats: args.userStats,
             authority: args.authority,
         },
         remainingAccounts: args.remainingAccounts,

package/lib/browser/idl/velocity.d.ts

@@ -8,7 +8,7 @@ export type Velocity = {
     "address": "vELoC1audYbSYVRXn1vPaV8Axoa9oU6BYmNGZZBDZ1P";
     "metadata": {
         "name": "velocity";
-        "version": "2.163.1";
+        "version": "2.164.0";
         "spec": "0.1.0";
         "description": "Created with Anchor";
     };
@@ -4426,6 +4426,9 @@ export type Velocity = {
                     "name": "liquidator";
                     "writable": true;
                 },
+                {
+                    "name": "liquidatorStats";
+                },
                 {
                     "name": "user";
                     "writable": true;
@@ -6289,6 +6292,9 @@ export type Velocity = {
                 52
             ];
             "accounts": [
+                {
+                    "name": "state";
+                },
                 {
                     "name": "spotMarket";
                     "writable": true;
@@ -6333,6 +6339,40 @@ export type Velocity = {
                         "userStats"
                     ];
                 },
+                {
+                    "name": "spotMarketVault";
+                    "writable": true;
+                    "pda": {
+                        "seeds": [
+                            {
+                                "kind": "const";
+                                "value": [
+                                    115,
+                                    112,
+                                    111,
+                                    116,
+                                    95,
+                                    109,
+                                    97,
+                                    114,
+                                    107,
+                                    101,
+                                    116,
+                                    95,
+                                    118,
+                                    97,
+                                    117,
+                                    108,
+                                    116
+                                ];
+                            },
+                            {
+                                "kind": "arg";
+                                "path": "marketIndex";
+                            }
+                        ];
+                    };
+                },
                 {
                     "name": "insuranceFundVault";
                     "writable": true;
@@ -6369,6 +6409,12 @@ export type Velocity = {
                             }
                         ];
                     };
+                },
+                {
+                    "name": "velocitySigner";
+                },
+                {
+                    "name": "tokenProgram";
                 }
             ];
             "args": [
@@ -6544,12 +6590,6 @@ export type Velocity = {
                 },
                 {
                     "name": "authority";
-                    "relations": [
-                        "user"
-                    ];
-                },
-                {
-                    "name": "user";
                 },
                 {
                     "name": "payer";
@@ -8244,6 +8284,9 @@ export type Velocity = {
                 {
                     "name": "user";
                     "writable": true;
+                },
+                {
+                    "name": "userStats";
                 }
             ];
             "args": [
@@ -11437,6 +11480,42 @@ export type Velocity = {
             ];
             "args": [];
         },
+        {
+            "name": "updateSpotMarketDepositCap";
+            "discriminator": [
+                76,
+                21,
+                179,
+                154,
+                28,
+                161,
+                174,
+                107
+            ];
+            "accounts": [
+                {
+                    "name": "admin";
+                    "signer": true;
+                },
+                {
+                    "name": "state";
+                },
+                {
+                    "name": "spotMarket";
+                    "writable": true;
+                }
+            ];
+            "args": [
+                {
+                    "name": "depositGuardThreshold";
+                    "type": "u64";
+                },
+                {
+                    "name": "maxDepositBpsPerDay";
+                    "type": "u16";
+                }
+            ];
+        },
         {
             "name": "updateSpotMarketExpiry";
             "discriminator": [
@@ -12076,6 +12155,38 @@ export type Velocity = {
                 }
             ];
         },
+        {
+            "name": "updateSpotMarketWithdrawCircuitBreaker";
+            "discriminator": [
+                2,
+                97,
+                135,
+                97,
+                117,
+                169,
+                65,
+                223
+            ];
+            "accounts": [
+                {
+                    "name": "admin";
+                    "signer": true;
+                },
+                {
+                    "name": "state";
+                },
+                {
+                    "name": "spotMarket";
+                    "writable": true;
+                }
+            ];
+            "args": [
+                {
+                    "name": "withdrawCircuitBreakerBps";
+                    "type": "u16";
+                }
+            ];
+        },
         {
             "name": "updateStateMaxInitializeUserFee";
             "discriminator": [
@@ -16163,6 +16274,31 @@ export type Velocity = {
             "code": 6359;
             "name": "invalidEquityFloorTransfer";
             "msg": "Invalid equity floor transfer between subaccounts";
+        },
+        {
+            "code": 6360;
+            "name": "ifDepositMintsZeroShares";
+            "msg": "Insurance fund deposit would mint zero shares";
+        },
+        {
+            "code": 6361;
+            "name": "liquidationWorsensAccountHealth";
+            "msg": "Liquidation would worsen the account's margin shortage";
+        },
+        {
+            "code": 6362;
+            "name": "perpBankruptcyMustPrecedeSpot";
+            "msg": "Perp bankruptcies must be resolved before spot bankruptcies";
+        },
+        {
+            "code": 6363;
+            "name": "invalidRevenueShareRecipient";
+            "msg": "Revenue share recipient user must be sub_account_id 0";
+        },
+        {
+            "code": 6364;
+            "name": "dailyDepositLimit";
+            "msg": "Spot market daily deposit limit hit";
         }
     ];
     "types": [
@@ -21210,19 +21346,24 @@ export type Velocity = {
                         };
                     },
                     {
-                        "name": "paddingAlignAmm";
+                        "name": "pendingRevenueShare";
                         "docs": [
-                            "8 bytes of explicit padding so MarketStats (216 bytes) plus this",
-                            "padding equals 224 bytes — the offset Rust naturally inserts to",
-                            "16-align AMM's leading u128. Making it explicit keeps the IDL byte",
-                            "layout aligned with `repr(C)`."
+                            "Aggregate accrued builder/referrer revenue-share owed out of this",
+                            "market's `pnl_pool` but not yet paid: incremented as builder and",
+                            "referrer fees accrue on fills (mirrors the per-order",
+                            "`RevenueShareOrder.fees_accrued` writes) and decremented as",
+                            "`sweep_completed_revenue_share_for_market` pays them. The",
+                            "permissionless fee sweep reserves it (like `max(net_user_pnl, 0)` and",
+                            "the floored IF tranche) so a protocol-fee drain can't move the tokens",
+                            "backing already-owed revenue share out of the pnl pool and leave those",
+                            "claims temporarily unpayable. precision: QUOTE_PRECISION.",
+                            "",
+                            "Occupies the 8 bytes Rust naturally inserts to 16-align AMM's leading",
+                            "u128 (formerly explicit `_padding_align_amm`): a u64 at the same",
+                            "8-aligned offset keeps every downstream byte offset and the total size",
+                            "unchanged, so legacy accounts read 0 (nothing owed) until fees accrue."
                         ];
-                        "type": {
-                            "array": [
-                                "u8",
-                                8
-                            ];
-                        };
+                        "type": "u64";
                     },
                     {
                         "name": "amm";
@@ -23004,15 +23145,44 @@ export type Velocity = {
                     {
                         "name": "paddingAlignPfp";
                         "docs": [
-                            "Aligns `protocol_fee_pool`'s leading u128 to a 16-byte struct offset so",
-                            "host (x86_64, align 16) and SBF (align 8) layouts agree. Do not reorder."
+                            "Explicit filler carved from the alignment gap before `protocol_fee_pool`",
+                            "(which must stay at struct offset 752 so host/SBF layouts agree and the",
+                            "borsh/IDL packed offset matches). The gap is 13 bytes; the three",
+                            "configurable-limit fields below plus this 1-byte filler fill it exactly,",
+                            "so `protocol_fee_pool` and every field after it keep their offsets and the",
+                            "account size is unchanged. Reads 0 on markets created before these fields",
+                            "existed. Every byte is explicit so no implicit `#[repr(C)]` pad desyncs",
+                            "off-chain borsh decoders. Do not reorder or resize."
                         ];
-                        "type": {
-                            "array": [
-                                "u8",
-                                8
-                            ];
-                        };
+                        "type": "u8";
+                    },
+                    {
+                        "name": "withdrawCircuitBreakerBps";
+                        "docs": [
+                            "Daily withdraw circuit-breaker size: the max fraction of the 24h deposit",
+                            "TWAP that may be withdrawn per 24h window. `0` is treated as the default",
+                            "(2500 bps = 25%) so markets created before this field existed keep prior",
+                            "behavior. precision: basis points (10_000 = 100%)"
+                        ];
+                        "type": "u16";
+                    },
+                    {
+                        "name": "maxDepositBpsPerDay";
+                        "docs": [
+                            "Daily deposit rate limit: the max fraction above the 24h deposit TWAP that",
+                            "resulting deposits may reach per 24h window. Disabled when `0`.",
+                            "precision: basis points (10_000 = 100%)"
+                        ];
+                        "type": "u16";
+                    },
+                    {
+                        "name": "depositGuardThreshold";
+                        "docs": [
+                            "No deposit rate limit when resulting deposits are below this threshold.",
+                            "Mirrors `withdraw_guard_threshold` on the deposit side.",
+                            "precision: token mint precision"
+                        ];
+                        "type": "u64";
                     },
                     {
                         "name": "protocolFeePool";
@@ -23048,13 +23218,33 @@ export type Velocity = {
                         "type": "u32";
                     },
                     {
-                        "name": "padding";
-                        "type": {
-                            "array": [
-                                "u8",
-                                8
-                            ];
-                        };
+                        "name": "ifLastSettleVaultAmount";
+                        "docs": [
+                            "Donation-proof accounted balance of the insurance-fund vault. It is moved",
+                            "by the same signed delta as the real SPL vault on *every* instruction that",
+                            "moves the vault, so it stays a faithful shadow of the vault minus raw",
+                            "donations. Inflows grow it: staker deposits (`add_insurance_fund_stake`)",
+                            "and settled revenue (`settle_revenue_to_insurance_fund`). Outflows/draws",
+                            "shrink it (saturating at 0): staker withdrawals",
+                            "(`remove_insurance_fund_stake`) and every IF draw that covers a loss —",
+                            "`resolve_perp_pnl_deficit`, `resolve_perp_bankruptcy`,",
+                            "`resolve_spot_bankruptcy`. The one movement deliberately *excluded* is a",
+                            "raw SPL transfer straight into the vault: it runs no instruction, so it",
+                            "never enters this balance — that is exactly the donation the shadow must",
+                            "not see. Consumed by the per-period revenue-settle APR cap in",
+                            "`settle_revenue_to_insurance_fund`, sized off `min(live_if_vault, this)`,",
+                            "so a donation spiked into the live vault right before a settle cannot",
+                            "inflate the cap while legitimate stakes and real settled revenue (which",
+                            "this balance tracks) still do. (The unstake-cancel share forfeiture is",
+                            "donation-proofed differently — by withdraw-and-restake at the active share",
+                            "price — and does *not* read this field.) Repurposed from trailing padding —",
+                            "layout/size unchanged; `0` means \"uninitialized\" (existing account",
+                            "pre-upgrade, or an accounted balance legitimately drained to empty — an",
+                            "empty IF vault has no user shares, so this is safe), and is seeded from the",
+                            "live balance on the next add/settle and treated as \"fall back to live\" by",
+                            "the consumers."
+                        ];
+                        "type": "u64";
                     }
                 ];
             };