@viwoapp/sdk 0.1.1 → 0.1.2

package/dist/index.d.mts

@@ -176,12 +176,24 @@ declare const SECURITY_CONSTANTS: {
     pendingScoreExpiry: number;
     maxPlatformFeeBps: number;
     minPlatformFeeBps: number;
+    merkleProofMaxSize: number;
+    maxEpochBitmap: number;
+    votingPowerVerifiedOnChain: boolean;
 };
 declare const VALID_URI_PREFIXES: readonly ["ipfs://", "https://", "ar://"];
 declare const MAX_URI_LENGTH = 128;
 declare const MERKLE_CONSTANTS: {
     leafDomainPrefix: string;
 };
+/** Maximum Merkle proof size (H-NEW-02) - prevents DoS attacks */
+declare const MERKLE_PROOF_MAX_SIZE = 32;
+/** Maximum supported epoch number with bitmap storage (H-NEW-04) */
+declare const MAX_EPOCH_BITMAP = 1023;
+/**
+ * @deprecated The legacy slash_tokens function is disabled (C-NEW-02).
+ * Use propose_slash -> approve_slash -> execute_slash flow instead.
+ */
+declare const LEGACY_SLASH_DEPRECATED = true;
 
 interface ConnectionConfig {
     endpoint: string;
@@ -287,6 +299,7 @@ declare enum SlashStatus {
 }
 interface SlashRequest {
     target: PublicKey;
+    requestId: BN;
     amount: BN;
     reason: Uint8Array;
     proposer: PublicKey;
@@ -331,6 +344,15 @@ declare enum ProposalStatus {
     Executed = 3,
     Cancelled = 4
 }
+/**
+ * Vote choice for governance voting (v2.8.0 C-NEW-01)
+ * Voting power params are now read from on-chain state, not passed as parameters
+ */
+declare enum VoteChoice {
+    Against = 0,
+    For = 1,
+    Abstain = 2
+}
 interface Proposal {
     id: BN;
     proposer: PublicKey;
@@ -382,7 +404,7 @@ interface UserClaim {
     claimsCount: number;
     claimedEpochsBitmap?: BN[];
     claimedEpochsBitmapExt?: BN[];
-    highEpochsClaimed?: BN[];
+    highEpochsBitmap?: BN[];
 }
 interface ClaimRewardsParams {
     epoch: BN;
@@ -677,6 +699,13 @@ declare class GovernanceClient {
     buildCreateProposalTransaction(params: CreateProposalParams): Promise<Transaction>;
     /**
      * Build vote transaction
+     *
+     * @note v2.8.0 (C-NEW-01): Voting power parameters (vevcoin_balance, five_a_score, tier)
+     * are now read from on-chain state, not passed as parameters. This prevents vote manipulation.
+     * The transaction only needs: proposal_id and choice (VoteChoice enum)
+     *
+     * @param proposalId - The proposal to vote on
+     * @param support - true = For, false = Against (use VoteChoice for more options)
      */
     buildVoteTransaction(proposalId: BN, support: boolean): Promise<Transaction>;
     /**
@@ -1323,4 +1352,4 @@ declare class StakingClient {
     buildExtendLockTransaction(newDuration: number): Promise<Transaction>;
 }
 
-export { ACTION_SCOPES, ActionType, CONTENT_CONSTANTS, type ClaimRewardsParams, type ConnectionConfig, ContentClient, type ContentRecord, ContentState, type CreateActionParams, type CreateProposalParams, type CreateSessionParams, type DecryptionShare, type Delegation, type EpochDistribution, FIVE_A_CONSTANTS, FeeMethod, FiveAClient, type FiveAConfig, type FiveAScore, GASLESS_CONSTANTS, GOVERNANCE_CONSTANTS, GaslessClient, type GaslessConfig, GovernanceClient, type GovernanceConfig, type HookConfig, type Identity, IdentityClient, type IdentityConfig, LOCK_DURATIONS, MAX_URI_LENGTH, MERKLE_CONSTANTS, PDAs, PROGRAM_IDS, type PendingAuthorityFields, type PendingScoreUpdate, type PrivateVotingConfig, type Proposal, ProposalStatus, type RegistryConfig, RewardsClient, type RewardsPoolConfig, SECURITY_CONSTANTS, SEEDS, SSCRE_CONSTANTS, STAKING_TIERS, type SessionKey, type SlashRequest, SlashStatus, type StakeParams, StakingClient, type StakingPool, StakingTier, TransactionBuilder, type UserClaim, type UserEnergy, type UserGaslessStats, type UserStake, VALID_URI_PREFIXES, VCOIN_DECIMALS, VCOIN_INITIAL_CIRCULATING, VCOIN_TOTAL_SUPPLY, type VCoinConfig, VEVCOIN_DECIMALS, VILINK_CONSTANTS, VerificationLevel, type ViLinkAction, ViLinkClient, type ViLinkConfig, ViWoClient, ViWoConnection, type VoteRecord, type VouchRecord, type WalletAdapter, dateToTimestamp, formatVCoin, getCurrentTimestamp, parseVCoin, timestampToDate };
+export { ACTION_SCOPES, ActionType, CONTENT_CONSTANTS, type ClaimRewardsParams, type ConnectionConfig, ContentClient, type ContentRecord, ContentState, type CreateActionParams, type CreateProposalParams, type CreateSessionParams, type DecryptionShare, type Delegation, type EpochDistribution, FIVE_A_CONSTANTS, FeeMethod, FiveAClient, type FiveAConfig, type FiveAScore, GASLESS_CONSTANTS, GOVERNANCE_CONSTANTS, GaslessClient, type GaslessConfig, GovernanceClient, type GovernanceConfig, type HookConfig, type Identity, IdentityClient, type IdentityConfig, LEGACY_SLASH_DEPRECATED, LOCK_DURATIONS, MAX_EPOCH_BITMAP, MAX_URI_LENGTH, MERKLE_CONSTANTS, MERKLE_PROOF_MAX_SIZE, PDAs, PROGRAM_IDS, type PendingAuthorityFields, type PendingScoreUpdate, type PrivateVotingConfig, type Proposal, ProposalStatus, type RegistryConfig, RewardsClient, type RewardsPoolConfig, SECURITY_CONSTANTS, SEEDS, SSCRE_CONSTANTS, STAKING_TIERS, type SessionKey, type SlashRequest, SlashStatus, type StakeParams, StakingClient, type StakingPool, StakingTier, TransactionBuilder, type UserClaim, type UserEnergy, type UserGaslessStats, type UserStake, VALID_URI_PREFIXES, VCOIN_DECIMALS, VCOIN_INITIAL_CIRCULATING, VCOIN_TOTAL_SUPPLY, type VCoinConfig, VEVCOIN_DECIMALS, VILINK_CONSTANTS, VerificationLevel, type ViLinkAction, ViLinkClient, type ViLinkConfig, ViWoClient, ViWoConnection, VoteChoice, type VoteRecord, type VouchRecord, type WalletAdapter, dateToTimestamp, formatVCoin, getCurrentTimestamp, parseVCoin, timestampToDate };

package/dist/index.d.ts

@@ -176,12 +176,24 @@ declare const SECURITY_CONSTANTS: {
     pendingScoreExpiry: number;
     maxPlatformFeeBps: number;
     minPlatformFeeBps: number;
+    merkleProofMaxSize: number;
+    maxEpochBitmap: number;
+    votingPowerVerifiedOnChain: boolean;
 };
 declare const VALID_URI_PREFIXES: readonly ["ipfs://", "https://", "ar://"];
 declare const MAX_URI_LENGTH = 128;
 declare const MERKLE_CONSTANTS: {
     leafDomainPrefix: string;
 };
+/** Maximum Merkle proof size (H-NEW-02) - prevents DoS attacks */
+declare const MERKLE_PROOF_MAX_SIZE = 32;
+/** Maximum supported epoch number with bitmap storage (H-NEW-04) */
+declare const MAX_EPOCH_BITMAP = 1023;
+/**
+ * @deprecated The legacy slash_tokens function is disabled (C-NEW-02).
+ * Use propose_slash -> approve_slash -> execute_slash flow instead.
+ */
+declare const LEGACY_SLASH_DEPRECATED = true;
 
 interface ConnectionConfig {
     endpoint: string;
@@ -287,6 +299,7 @@ declare enum SlashStatus {
 }
 interface SlashRequest {
     target: PublicKey;
+    requestId: BN;
     amount: BN;
     reason: Uint8Array;
     proposer: PublicKey;
@@ -331,6 +344,15 @@ declare enum ProposalStatus {
     Executed = 3,
     Cancelled = 4
 }
+/**
+ * Vote choice for governance voting (v2.8.0 C-NEW-01)
+ * Voting power params are now read from on-chain state, not passed as parameters
+ */
+declare enum VoteChoice {
+    Against = 0,
+    For = 1,
+    Abstain = 2
+}
 interface Proposal {
     id: BN;
     proposer: PublicKey;
@@ -382,7 +404,7 @@ interface UserClaim {
     claimsCount: number;
     claimedEpochsBitmap?: BN[];
     claimedEpochsBitmapExt?: BN[];
-    highEpochsClaimed?: BN[];
+    highEpochsBitmap?: BN[];
 }
 interface ClaimRewardsParams {
     epoch: BN;
@@ -677,6 +699,13 @@ declare class GovernanceClient {
     buildCreateProposalTransaction(params: CreateProposalParams): Promise<Transaction>;
     /**
      * Build vote transaction
+     *
+     * @note v2.8.0 (C-NEW-01): Voting power parameters (vevcoin_balance, five_a_score, tier)
+     * are now read from on-chain state, not passed as parameters. This prevents vote manipulation.
+     * The transaction only needs: proposal_id and choice (VoteChoice enum)
+     *
+     * @param proposalId - The proposal to vote on
+     * @param support - true = For, false = Against (use VoteChoice for more options)
      */
     buildVoteTransaction(proposalId: BN, support: boolean): Promise<Transaction>;
     /**
@@ -1323,4 +1352,4 @@ declare class StakingClient {
     buildExtendLockTransaction(newDuration: number): Promise<Transaction>;
 }
 
-export { ACTION_SCOPES, ActionType, CONTENT_CONSTANTS, type ClaimRewardsParams, type ConnectionConfig, ContentClient, type ContentRecord, ContentState, type CreateActionParams, type CreateProposalParams, type CreateSessionParams, type DecryptionShare, type Delegation, type EpochDistribution, FIVE_A_CONSTANTS, FeeMethod, FiveAClient, type FiveAConfig, type FiveAScore, GASLESS_CONSTANTS, GOVERNANCE_CONSTANTS, GaslessClient, type GaslessConfig, GovernanceClient, type GovernanceConfig, type HookConfig, type Identity, IdentityClient, type IdentityConfig, LOCK_DURATIONS, MAX_URI_LENGTH, MERKLE_CONSTANTS, PDAs, PROGRAM_IDS, type PendingAuthorityFields, type PendingScoreUpdate, type PrivateVotingConfig, type Proposal, ProposalStatus, type RegistryConfig, RewardsClient, type RewardsPoolConfig, SECURITY_CONSTANTS, SEEDS, SSCRE_CONSTANTS, STAKING_TIERS, type SessionKey, type SlashRequest, SlashStatus, type StakeParams, StakingClient, type StakingPool, StakingTier, TransactionBuilder, type UserClaim, type UserEnergy, type UserGaslessStats, type UserStake, VALID_URI_PREFIXES, VCOIN_DECIMALS, VCOIN_INITIAL_CIRCULATING, VCOIN_TOTAL_SUPPLY, type VCoinConfig, VEVCOIN_DECIMALS, VILINK_CONSTANTS, VerificationLevel, type ViLinkAction, ViLinkClient, type ViLinkConfig, ViWoClient, ViWoConnection, type VoteRecord, type VouchRecord, type WalletAdapter, dateToTimestamp, formatVCoin, getCurrentTimestamp, parseVCoin, timestampToDate };
+export { ACTION_SCOPES, ActionType, CONTENT_CONSTANTS, type ClaimRewardsParams, type ConnectionConfig, ContentClient, type ContentRecord, ContentState, type CreateActionParams, type CreateProposalParams, type CreateSessionParams, type DecryptionShare, type Delegation, type EpochDistribution, FIVE_A_CONSTANTS, FeeMethod, FiveAClient, type FiveAConfig, type FiveAScore, GASLESS_CONSTANTS, GOVERNANCE_CONSTANTS, GaslessClient, type GaslessConfig, GovernanceClient, type GovernanceConfig, type HookConfig, type Identity, IdentityClient, type IdentityConfig, LEGACY_SLASH_DEPRECATED, LOCK_DURATIONS, MAX_EPOCH_BITMAP, MAX_URI_LENGTH, MERKLE_CONSTANTS, MERKLE_PROOF_MAX_SIZE, PDAs, PROGRAM_IDS, type PendingAuthorityFields, type PendingScoreUpdate, type PrivateVotingConfig, type Proposal, ProposalStatus, type RegistryConfig, RewardsClient, type RewardsPoolConfig, SECURITY_CONSTANTS, SEEDS, SSCRE_CONSTANTS, STAKING_TIERS, type SessionKey, type SlashRequest, SlashStatus, type StakeParams, StakingClient, type StakingPool, StakingTier, TransactionBuilder, type UserClaim, type UserEnergy, type UserGaslessStats, type UserStake, VALID_URI_PREFIXES, VCOIN_DECIMALS, VCOIN_INITIAL_CIRCULATING, VCOIN_TOTAL_SUPPLY, type VCoinConfig, VEVCOIN_DECIMALS, VILINK_CONSTANTS, VerificationLevel, type ViLinkAction, ViLinkClient, type ViLinkConfig, ViWoClient, ViWoConnection, VoteChoice, type VoteRecord, type VouchRecord, type WalletAdapter, dateToTimestamp, formatVCoin, getCurrentTimestamp, parseVCoin, timestampToDate };

package/dist/index.js

@@ -34,9 +34,12 @@ __export(index_exports, {
   GaslessClient: () => GaslessClient,
   GovernanceClient: () => GovernanceClient,
   IdentityClient: () => IdentityClient,
+  LEGACY_SLASH_DEPRECATED: () => LEGACY_SLASH_DEPRECATED,
   LOCK_DURATIONS: () => LOCK_DURATIONS,
+  MAX_EPOCH_BITMAP: () => MAX_EPOCH_BITMAP,
   MAX_URI_LENGTH: () => MAX_URI_LENGTH,
   MERKLE_CONSTANTS: () => MERKLE_CONSTANTS,
+  MERKLE_PROOF_MAX_SIZE: () => MERKLE_PROOF_MAX_SIZE,
   PDAs: () => PDAs,
   PROGRAM_IDS: () => PROGRAM_IDS,
   ProposalStatus: () => ProposalStatus,
@@ -59,6 +62,7 @@ __export(index_exports, {
   ViLinkClient: () => ViLinkClient,
   ViWoClient: () => ViWoClient,
   ViWoConnection: () => ViWoConnection,
+  VoteChoice: () => VoteChoice,
   dateToTimestamp: () => dateToTimestamp,
   formatVCoin: () => formatVCoin,
   getCurrentTimestamp: () => getCurrentTimestamp,
@@ -288,8 +292,15 @@ var SECURITY_CONSTANTS = {
   // M-02: Platform fee bounds (ViLink)
   maxPlatformFeeBps: 1e3,
   // 10% max
-  minPlatformFeeBps: 10
+  minPlatformFeeBps: 10,
   // 0.1% min
+  // v2.8.0 Phase 5 additions
+  merkleProofMaxSize: 32,
+  // H-NEW-02: Max proof levels (supports 4B+ users)
+  maxEpochBitmap: 1023,
+  // H-NEW-04: Max epoch with bitmap storage (85+ years)
+  votingPowerVerifiedOnChain: true
+  // C-NEW-01: Params read from chain, not passed
 };
 var VALID_URI_PREFIXES = ["ipfs://", "https://", "ar://"];
 var MAX_URI_LENGTH = 128;
@@ -297,6 +308,9 @@ var MERKLE_CONSTANTS = {
   leafDomainPrefix: "SSCRE_CLAIM_V1"
   // Domain separation for merkle leaves
 };
+var MERKLE_PROOF_MAX_SIZE = 32;
+var MAX_EPOCH_BITMAP = 1023;
+var LEGACY_SLASH_DEPRECATED = true;
 
 // src/core/index.ts
 var ViWoConnection = class {
@@ -588,6 +602,12 @@ var ProposalStatus = /* @__PURE__ */ ((ProposalStatus2) => {
   ProposalStatus2[ProposalStatus2["Cancelled"] = 4] = "Cancelled";
   return ProposalStatus2;
 })(ProposalStatus || {});
+var VoteChoice = /* @__PURE__ */ ((VoteChoice2) => {
+  VoteChoice2[VoteChoice2["Against"] = 0] = "Against";
+  VoteChoice2[VoteChoice2["For"] = 1] = "For";
+  VoteChoice2[VoteChoice2["Abstain"] = 2] = "Abstain";
+  return VoteChoice2;
+})(VoteChoice || {});
 var ActionType = /* @__PURE__ */ ((ActionType2) => {
   ActionType2[ActionType2["Tip"] = 0] = "Tip";
   ActionType2[ActionType2["Vouch"] = 1] = "Vouch";
@@ -988,6 +1008,13 @@ var GovernanceClient = class {
   }
   /**
    * Build vote transaction
+   * 
+   * @note v2.8.0 (C-NEW-01): Voting power parameters (vevcoin_balance, five_a_score, tier) 
+   * are now read from on-chain state, not passed as parameters. This prevents vote manipulation.
+   * The transaction only needs: proposal_id and choice (VoteChoice enum)
+   * 
+   * @param proposalId - The proposal to vote on
+   * @param support - true = For, false = Against (use VoteChoice for more options)
    */
   async buildVoteTransaction(proposalId, support) {
     if (!this.client.publicKey) {
@@ -998,6 +1025,7 @@ var GovernanceClient = class {
       throw new Error("Already voted on this proposal");
     }
     const tx = new import_web34.Transaction();
+    const choice = support ? 1 /* For */ : 0 /* Against */;
     return tx;
   }
   /**
@@ -2390,9 +2418,12 @@ var ViWoClient = class {
   GaslessClient,
   GovernanceClient,
   IdentityClient,
+  LEGACY_SLASH_DEPRECATED,
   LOCK_DURATIONS,
+  MAX_EPOCH_BITMAP,
   MAX_URI_LENGTH,
   MERKLE_CONSTANTS,
+  MERKLE_PROOF_MAX_SIZE,
   PDAs,
   PROGRAM_IDS,
   ProposalStatus,
@@ -2415,6 +2446,7 @@ var ViWoClient = class {
   ViLinkClient,
   ViWoClient,
   ViWoConnection,
+  VoteChoice,
   dateToTimestamp,
   formatVCoin,
   getCurrentTimestamp,

package/dist/index.mjs

@@ -223,8 +223,15 @@ var SECURITY_CONSTANTS = {
   // M-02: Platform fee bounds (ViLink)
   maxPlatformFeeBps: 1e3,
   // 10% max
-  minPlatformFeeBps: 10
+  minPlatformFeeBps: 10,
   // 0.1% min
+  // v2.8.0 Phase 5 additions
+  merkleProofMaxSize: 32,
+  // H-NEW-02: Max proof levels (supports 4B+ users)
+  maxEpochBitmap: 1023,
+  // H-NEW-04: Max epoch with bitmap storage (85+ years)
+  votingPowerVerifiedOnChain: true
+  // C-NEW-01: Params read from chain, not passed
 };
 var VALID_URI_PREFIXES = ["ipfs://", "https://", "ar://"];
 var MAX_URI_LENGTH = 128;
@@ -232,6 +239,9 @@ var MERKLE_CONSTANTS = {
   leafDomainPrefix: "SSCRE_CLAIM_V1"
   // Domain separation for merkle leaves
 };
+var MERKLE_PROOF_MAX_SIZE = 32;
+var MAX_EPOCH_BITMAP = 1023;
+var LEGACY_SLASH_DEPRECATED = true;
 
 // src/core/index.ts
 var ViWoConnection = class {
@@ -523,6 +533,12 @@ var ProposalStatus = /* @__PURE__ */ ((ProposalStatus2) => {
   ProposalStatus2[ProposalStatus2["Cancelled"] = 4] = "Cancelled";
   return ProposalStatus2;
 })(ProposalStatus || {});
+var VoteChoice = /* @__PURE__ */ ((VoteChoice2) => {
+  VoteChoice2[VoteChoice2["Against"] = 0] = "Against";
+  VoteChoice2[VoteChoice2["For"] = 1] = "For";
+  VoteChoice2[VoteChoice2["Abstain"] = 2] = "Abstain";
+  return VoteChoice2;
+})(VoteChoice || {});
 var ActionType = /* @__PURE__ */ ((ActionType2) => {
   ActionType2[ActionType2["Tip"] = 0] = "Tip";
   ActionType2[ActionType2["Vouch"] = 1] = "Vouch";
@@ -923,6 +939,13 @@ var GovernanceClient = class {
   }
   /**
    * Build vote transaction
+   * 
+   * @note v2.8.0 (C-NEW-01): Voting power parameters (vevcoin_balance, five_a_score, tier) 
+   * are now read from on-chain state, not passed as parameters. This prevents vote manipulation.
+   * The transaction only needs: proposal_id and choice (VoteChoice enum)
+   * 
+   * @param proposalId - The proposal to vote on
+   * @param support - true = For, false = Against (use VoteChoice for more options)
    */
   async buildVoteTransaction(proposalId, support) {
     if (!this.client.publicKey) {
@@ -933,6 +956,7 @@ var GovernanceClient = class {
       throw new Error("Already voted on this proposal");
     }
     const tx = new Transaction3();
+    const choice = support ? 1 /* For */ : 0 /* Against */;
     return tx;
   }
   /**
@@ -2324,9 +2348,12 @@ export {
   GaslessClient,
   GovernanceClient,
   IdentityClient,
+  LEGACY_SLASH_DEPRECATED,
   LOCK_DURATIONS,
+  MAX_EPOCH_BITMAP,
   MAX_URI_LENGTH,
   MERKLE_CONSTANTS,
+  MERKLE_PROOF_MAX_SIZE,
   PDAs,
   PROGRAM_IDS,
   ProposalStatus,
@@ -2349,6 +2376,7 @@ export {
   ViLinkClient,
   ViWoClient,
   ViWoConnection,
+  VoteChoice,
   dateToTimestamp,
   formatVCoin,
   getCurrentTimestamp,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viwoapp/sdk",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "ViWoApp SDK - TypeScript SDK for VCoin Protocol Integration",
   "main": "dist/index.js",
   "module": "dist/index.esm.js",