@xgamesfun/solana 0.25.4 → 0.26.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xgamesfun/solana",
-  "version": "0.25.4",
+  "version": "0.26.1",
   "mcpName": "io.github.XGamesFun/solana-kit",
   "description": "Loot boxes, gacha, shops, lotteries, auctions, NFT staking, crafting and rewards on Solana without writing a smart contract: one shared program, its JS client, a CLI, and an MCP server and skill so Claude Code, Codex or any AI agent can design, check, simulate and launch an economy.",
   "license": "Apache-2.0",

package/release.json

@@ -1,8 +1,8 @@
 {
-  "version": "0.25.0",
+  "version": "0.26.1",
   "programId": "9cwqM1TXytPnFZsLfmUyv2dg4uW6Ch9C6UJVPns7NFQ",
-  "sbfBytes": 1741840,
-  "sbfSha256": "ea19d15d03211f7bd0b25179d51f75544342225127fcb631e687eae6750c9ba7",
-  "idlSha256": "41e621990c17b8645f59bb2a170271645ad370d1c1bf9f1dbdd04f817b82d4cf",
-  "clientSha256": "849106b5d1a022aac13e1208172945c4cee0c4a55cafbd5f1c77e1be6948de04"
+  "sbfBytes": 1783800,
+  "sbfSha256": "af318ccfa4d2901076b85fcd1b4467b03253adf0de16e73a9dfc1ef8077b2c14",
+  "idlSha256": "0e88fc826a585cf17917cbc654e33b68232771769fe9aae1d5899a257940ff47",
+  "clientSha256": "01d85ff69999efc8b0641ce684dd060cf0ad421a8e125f91d620fef50bb5aedd"
 }

package/skills/xsolana-economy/SKILL.md

@@ -9,8 +9,8 @@ An economy is one JSON spec (`xsolana.json` in the project) on **loot**, a Solan
 writes or deploys a contract: the spec is checked, simulated and priced by the `xsolana_*` tools, and the project's
 owner puts it live by approving in their own wallet. It runs on **devnet** until the program is audited.
 
-The tools are the `xsolana_*` MCP tools. Without MCP, the same from a terminal: `npx -y @xgamesfun/solana@0.25.4 <guide|examples|check|simulate|cost|explain|review|publish|status> [xsolana.json]`,
-or `npx -y @xgamesfun/solana@0.25.4 tool <name> '<json>'` for any tool (always with the exact version).
+The tools are the `xsolana_*` MCP tools. Without MCP, the same from a terminal: `npx -y @xgamesfun/solana@0.26.1 <guide|examples|check|simulate|cost|explain|review|publish|status> [xsolana.json]`,
+or `npx -y @xgamesfun/solana@0.26.1 tool <name> '<json>'` for any tool (always with the exact version).
 
 ## Rules (always)
 
@@ -103,7 +103,15 @@ or `npx -y @xgamesfun/solana@0.25.4 tool <name> '<json>'` for any tool (always w
    don't say. `"pot": 0` keeps a pot from round to round: a seed, sponsors, shares of other sales and what earlier
    rounds left all count, and the next round starts with what the round before left (a jackpot that grows, a no-loss
    lottery). `"rest": "<destination>"` pays each round from its own ticket money alone, which nothing from outside can
-   change, and sends what the places leave there (`"treasury"`, a wallet, `"burn"`; never a pool or `"chosen"`).
+   change, and sends what the places leave there (`"treasury"`, a wallet, `"burn"`; never a pool or `"chosen"`). A
+   no-loss lottery closes its sales a while before each draw (`"closesBefore"`), and may weigh each purchase by the
+   time it is held (`"timeWeighted": true`). A place paid from a pool says what it gets when the pool is short
+   (`"whenShort"`): prizes of 1,000, 500 and 500 from a pool of 1,700 give 1,000, 500 and 0 `"inOrder"`, 850, 425 and
+   425 `"inProportion"`, or `"nothing"`.
+   A box says what a draw on an outcome that is out does (`"whenOut"`): stop selling and refund a paid miss (the
+   default), draw among what is left, or give nothing. The program takes much that only risks the project itself (a
+   price or prize of 0, a mission with no lock, a far date, a token a player can hold up): the checker warns of each
+   in words, and every warning goes to the person.
    Then say what stays the project's job (`references/telling-the-person.md`): the files behind every item's link
    (every value of a fresh item's `{attribute}`), a table's rent, and the collectible rent a pack's settle pays.
 6. **Iterate on what they say.** "Make legendaries 0.5%", "a bigger seed": change, check, simulate, explain again.
@@ -113,7 +121,7 @@ or `npx -y @xgamesfun/solana@0.25.4 tool <name> '<json>'` for any tool (always w
    level would cost. Run it again after every change that touches a route that pays.
 9. **When they say "put it live"**: `xsolana_publish` lists every step and its cost and gives the command. Tell them to
    run it themselves in the project folder, exactly as `xsolana_publish` gives it (it names the exact version:
-   `npx -y @xgamesfun/solana@0.25.4 approve xsolana.json`; never drop the version). It opens a page on their computer where
+   `npx -y @xgamesfun/solana@0.26.1 approve xsolana.json`; never drop the version). It opens a page on their computer where
    they connect a devnet wallet and approve; what lands is written back into `xsolana.json`. You publish nothing.
 10. **After it is live**: `xsolana_status` shows each part on chain; read it before acting on what the person says
     happened. A later change is the same loop: save, publish, and the approval sends only what changed. What only the

package/skills/xsolana-economy/references/after-launch.md

@@ -11,7 +11,7 @@ winner nobody pays.
 | A box's roll and settle, a shop buy                                                                                              | the player, in their own purchase (`js/play` does both in one prompt)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | the player, a key the player named for the order (`settler`) or the project's owner or authority settle a rolled order, a normal item too (the app's backend delivers it from the `OrderSettled` receipt of a finalized transaction whose `meta.err` is null, once per order: `loot.receipts(tx)` gives none for a transaction with an error, whose logs can still read as all-success; a truncated log stays truncated when read again, so it then goes by the order's account); a roll that failed or never came refunds (`app.refund`)                                                                                                                                                                                                                             |
 | A lottery draw, then each part pulled                                                                                            | **anyone**: the page (`app.claims()` lists each available step), or a sweep. The draw's ask fixes the round's money (what its places take of the pot, or of the round's own ticket money for a lottery with `rest`; each pool's prize) and opens the next round at once; paid from a pot, it first moves in what the round before left that pot, so the next round always sees it, whoever pulls and whenever. A pull pays one part into its owner's account, opened in the same transaction when it is not there (the sender pays its rent): an entry's own (a refund, a ticket back), its places' part of the pot or their prizes (a raffled NFT, an item, tokens, a roll), or a part owed in common (a share, what the places leave: to the pot, or to `rest`; a burned `rest` stays for the close to burn) | selling stops at draw time. A round nobody draws waits, with no deadline. Once drawn, every part waits in the round for its own pull, in any order, holding up nobody else; the pull that leaves nothing owed closes the round, and the rent of its record goes back to whoever fronted it (the lottery's `roundRent`, or its first buyer). An NFT that can't move is made a hold for its winner. If the oracle never answers a draw (7 days after it was first asked for), the next ask cancels it, and every buyer's refund is pulled; the page pulls the sender's own refund in the cancel's own transaction. A due round's draw rides in front of the next ticket purchase. An empty round moves on with the next ticket. A one-time lottery ends after its round |
 | A schedule that is due (an emission, rent, a drip)                                                                               | the project's owner or authority, or who it pays (a wallet, the treasury): `app.runSchedule` signed by one of them, or their sweep (a sealed burn: anyone)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | **a run missed is missed**: one sent late pays once, for the latest run due, and the runs before it lapse, so keep a key of the project's sending it on time. Only a sealed schedule's fixed amount pays every run due (a backlog of years takes a few calls)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
-| Ending an auction                                                                                                                | **anyone**: usually the winner, from the page                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | it waits: whenever it is ended, the lot goes to the highest bidder. A seller whose account can't take the money then doesn't hold up the winner: the lot goes, the auction stays open owing it (`app.auctions()`: `delivered`, `proceedsOwed`), and the next end, anyone's, pays and closes it                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
+| Ending an auction                                                                                                                | **anyone**: usually the winner, from the page (`app.endAuction`). The lot and the money move together; an NFT lot that can't move right now makes the end wait, and it is sent again later. The project's keys can call such a sale off (`app.callOffSale`): the bid goes back and the lot goes home                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | it waits: whenever it is ended, the lot goes to the highest bidder. A seller whose account can't take the money then doesn't hold up the winner: the lot goes, the auction stays open owing it (`app.auctions()`: `delivered`, `proceedsOwed`), and the next end, anyone's, pays and closes it                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
 | Catching a farm up (`walk_farm`), when it has passed more of its seats' end times than a move can walk                           | **anyone**, for free: `app.claims()` lists it, `app.walkFarm(key)` sends it in parts (`app.farmWalk(key)` says how many)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | moves of that farm fail until it is walked; nothing is lost by the wait: what each seat earned by its end is exact                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
 | A contest's entries back when it is off, or a winner's part of a contest with no prize or picks                                  | **anyone** (each entry's money goes only to its player); a winner's first claim with a prize or picks: the **winner or the project's keys**, and past 30 days the project's keys may pick for them                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | they wait; nothing is lost. Each winner's part is written at the decision (the pot then, and a split prize's vault), so the order of claims changes nothing; tokens sent to the pot after it go to nobody (burned at the close), and a split prize's part a winner gives up goes back to its pool, not to later winners                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | Opening a contest                                                                                                                | the **authority** (the owner's wallet by default)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | nothing happens                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |

package/skills/xsolana-economy/references/apps.md

@@ -33,7 +33,7 @@ const app = solanaApp({ spec, rpcUrl: 'https://api.devnet.solana.com', wallet: w
 
 const shop = await app.shop(); // [{ key, name, price, priceUnits, currency, active, left }]
 await app.buy('badge', { listing: shop.find(l => l.key === 'badge') }); // the price shown is the most it pays
-const boxes = await app.boxes(); // each box's price, outcome chances and whenOut (show it: stops selling, or draws among what is left)
+const boxes = await app.boxes(); // each box's price, outcome chances and whenOut (show it: stops selling, draws among what is left, or a miss gives nothing)
 await app.openBox('chest', { listing: boxes.find(l => l.key === 'chest') }); // pays, waits for the roll, settles
 await app.pay('entry'); // a payment of the spec
 const lotteries = await app.lotteries(); // [{ key, name, price, currency, status, round, sold, drawsAt, nftTicket, … }]
@@ -159,7 +159,16 @@ assetId, tree }` after a `loot.proveLeafIx` in the same transaction. `app.stakeN
   (`{ "staked": … }`) needs nothing from the page: js/play passes the player's seat and the farm, and says plainly when
   the stake is too small or its lock is over (show the farm's locked tiers next to the gate).
 - **A no-loss lottery** (`noLoss`): once the round is drawn every ticket is owed back to its buyer (a pull, which
-  anyone may send, so say "your tickets come back after the draw"), and the winners then collect the pot.
+  anyone may send, so say "your tickets come back after the draw"), and the winners then collect the pot. Sales close
+  `closesBefore` before each draw. A lottery weighed by time (`timeWeighted`) shows each buyer, on the buy screen,
+  what this purchase would weigh now (its tickets times the seconds left until sales close) and their share of the
+  round's weight, and that the same tickets bought later weigh less.
+- **Sending for a player through a session key** (a delegate on their token account): a payment by a delegate is
+  refused whole when one of its shares would land back on the account it pays from (a rebate naming that player, a
+  share to the holder of a collectible that player holds). Pay such a purchase with the player's own signature.
+- **Reading results from logs**: a transaction's log holds 10,000 bytes and a sender can fill it before the program
+  writes. Read the accounts as the record of what is owed and held; treat a missing receipt as unknown, not as "did
+  not happen".
 - **A lottery round** finishes in a few steps whatever its size: `app.claims()` lists the draw (`reveal`, whose ask
   fixes the round's money and opens the next round at once), what this player is owed (`pull`: a refund, a place's
   part of the pot, its prize; a raffled NFT; a roll asked for in the same transaction and settled in the same prompt)

package/skills/xsolana-economy/references/sentence-to-spec.md

@@ -16,7 +16,7 @@ maps to a part of the spec (`xsolana_guide` has every field).
 | "sealed bids", "nobody sees the bids", "second-price", "Vickrey"                                                                           | loot cannot: say so, and offer an open auction (`auctions`)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
 | "loot box", "gacha", "mystery box", "60/25/10/4/1"                                                                                         | `boxes` with `outcomes` of `gives: "item"` and a `chance` each                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 | "pity", "guaranteed legendary by pull 90", "soft pity"                                                                                     | a soulbound charm each player holds, which the pull box rolls on (`rollsOn`, `then: "back"`): misses shift its `pity` +1, the rare shifts it by -1000000 (it stops at 0: a reset), the rare's `odds` add a percent a point. It never trades; a pity token minted on misses can be sold and never resets                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
-| "stop selling when the rare is gone", "keep selling what's left", "what happens when an item sells out"                                    | a box's `whenOut`: `"stopSales"` (the default: it isn't sold while any outcome can't be given, so the odds stay as written) or `"drawLeft"` (it keeps selling, drawing among what is left, the rest's chances rising: a player can empty a common outcome to make a rare likelier). Tell the person the trade-off                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
+| "stop selling when the rare is gone", "keep selling what's left", "what happens when an item sells out"                                    | a box's `whenOut`: `"stopSales"` (the default: it isn't sold while any outcome can't be given, so the odds stay as written, and a paid miss is refunded), `"drawLeft"` (it keeps selling, drawing among what is left, the rest's chances rising: a player can empty a common outcome to make a rare likelier) or `"giveNothing"` (it keeps selling on the odds written, and a draw on an outcome that is out gives nothing, never refunded). Tell the person the trade-off                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
 | "a booster of five", "a pack of 5 random cards", "three cards in one pack"                                                                 | a box with `"slots": [{ "count": 5 }]`: each open draws five outcomes by their chances, all from one oracle answer, in one purchase and one wallet prompt. `"distinct": true` on the slot for five different outcomes ("a hand of different cards")                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
 | "a guaranteed rare", "one rare or better in every pack", "four commons and a rare"                                                         | slots that name outcomes by their place in `outcomes` (from 0): `[{ "count": 4, "share": 60 }, { "count": 1, "from": [8, 9, 10], "share": 40 }]` is four draws among all and one among the rares, the rare slot worth 40% of the price. Slots that name outcomes each need a `share`, 100 together: a draw that can't be made (its slot sold out) gives its slot's worth back, so a guaranteed rare keeps its value when the commons run out; ask what the rare is worth                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | "10-pull", "open ten at once", "buy 3 packs"                                                                                               | the same box: the page opens several in one purchase (`app.openBox(key, { listing, count: 10 })`), one wallet prompt and one oracle answer, each open at the price the one before it left (`maxPrice` is a pack's). Nothing to add to the spec                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
@@ -83,7 +83,7 @@ maps to a part of the spec (`xsolana_guide` has every field).
 | "trade in any NFT of ours for 10 gold", "swap an NFT of another collection for a badge", "we keep what's traded in and give it away again" | a recipe line `{ "takes": "trade", "collection": "<address>" (left out: the project's own), "then": "burn" \| { "stash": "<key>" } \| { "giveTo": "<wallet>" } }`: the NFT is the price. Into a stash, it becomes another player's prize (a box outcome `{ "gives": "stash" }` resells it)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
 | "a trade-in box: give an NFT, roll for a new one"                                                                                          | a box with `rollsOn` (which NFTs it takes) and `"then": { "stash": "<key>" }` (or `"burn"`): every outcome keeps the NFT paid, and its outcomes give the prizes                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
 | "tickets cost an NFT", "sacrifice an NFT for a raffle ticket"                                                                              | a lottery's `ticketNft`: `{ "rule": { "item": key } or { "collection": address }, "then": "burn" or { "stash": key } }`, with no `price`, `split` or `ticketCurrency`; with `"pot": 0` the pot is its `seed` and what others send it, plus its places' prizes. An NFT spent on a ticket is never refunded (`W-NFT-PRICE`)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
-| "no-loss lottery", "prize savings", "you never lose your ticket", "the sponsor pays the prize"                                             | a lottery with `"noLoss": true` and `"pot": 0`: every ticket (tokens or an NFT) goes back to its buyer once the round is drawn, and the winners take only the pot: its `seed`, a sponsor's payments, shares of other sales (`"lottery:<key>"`). No `split`, `cutPercent` or `ticketCurrency`. Say that tickets are not weighted by time: someone may buy most of them right before the draw and risk only the fees                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
+| "no-loss lottery", "prize savings", "you never lose your ticket", "the sponsor pays the prize"                                             | a lottery with `"noLoss": true` and `"pot": 0`: every ticket (tokens or an NFT) goes back to its buyer once the round is drawn, and the winners take only the pot: its `seed`, a sponsor's payments, shares of other sales (`"lottery:<key>"`) (or with `"rest"`, only its places' prizes). No `split`, `cutPercent` or `ticketCurrency`. Give it `"closesBefore"` (sales close that long before each draw) and, for "the longer you hold, the better your chance", `"timeWeighted": true`: each purchase weighs its tickets times the seconds until sales close, and the buy screen shows what it weighs. Without it, say someone may buy most of the tickets right before the draw and risk only the fees                                                                                                                                                                                                                                            |
 | "stake an NFT on the duel", "winner takes the loser's NFT"                                                                                 | a contest's `stakeNft` (a rule): each entry stakes one NFT; the winners share the losers' NFTs, each picking its share (`losersEach` caps it: 1 for "winner takes one"), and the opener gets what the winners leave. Losers send nothing                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | "places 2 to 101 each win 1%", "100 runners-up each get a badge"                                                                           | a lottery place with `times`: `{ "percent": 1, "times": 100 }` is a hundred places alike (not for a named NFT or a roll; at most 64 runs)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
 | "raffle 200 NFTs", "each winner gets a random NFT from the collection"                                                                     | a lottery that draws once, its `nfts` (put in its own stash at go-live, a group a call) and a place `{ "prize": { "gives": "raffled" }, "times": 200 }`: each winner draws one at random                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
@@ -102,7 +102,7 @@ maps to a part of the spec (`xsolana_guide` has every field).
 | "several signers must approve spending", "a multisig"                                                                                      | loot isn't a multisig: the money goes to their multisig's vault (for example Squads): `"treasury": "wallet:<vault>"`, or a `wallet:` share; spending from it is approved in the multisig                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | "60% to me, 40% to my co-designer", "10% to our charity", "split with my partners"                                                         | split shares `"to": "wallet:<their wallet address>"` (ask for each address). Going live opens each wallet's account for the currency. Use `account:` only for a token account that already exists                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
 | "our partner gets 4%" (one fixed wallet)                                                                                                   | a split share `"to": "wallet:<their address>"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
-| "referral links", "each streamer gets 6% of what they bring", "tip the artist I pick"                                                      | a box's, shop item's, lottery's or payment's split share `"to": "chosen"`: the buyer names the wallet when they buy (the page passes it from the link: `app.buy(key, { listing, chosenRecipient: referrer })`, `app.pay(key, { chosenRecipient: referrer })`), never their own (a second wallet of theirs still works, so a referral share is at most a rebate: price it so); with none it goes to the treasury                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
+| "referral links", "each streamer gets 6% of what they bring", "tip the artist I pick"                                                      | a box's, shop item's, lottery's or payment's split share `"to": "chosen"`: the buyer names the wallet when they buy (the page passes it from the link: `app.buy(key, { listing, chosenRecipient: referrer })`, `app.pay(key, { chosenRecipient: referrer })`), their own too (so a referral share is at most a rebate the buyer controls: price it so; a grant's vouchers prove a real referral); with none it goes to the treasury                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
 | "a fee to the owner of the workshop I craft at", "the venue's owner gets a cut"                                                            | a split share `"to": "chosen:<item key>"`: the buyer names a collectible of that item, and whoever holds it is paid (`{ chosenRecipient: <its address> }`)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
 | "the holder of the deed gets 3%"                                                                                                           | a split share `"to": "holder:<collectible address>"`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
 | "duel", "bet on a side", "prediction", "the winner takes the pot"                                                                          | `contests` with `sides` and a rake in `split`; the authority decides, or a results server's key in `deciders` signs the result (anyone sends it)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |

package/skills/xsolana-economy/references/telling-the-person.md

@@ -72,9 +72,14 @@ money; it holds no files and serves nothing.
   the project restocks or edits the box to sell again (a pool holds its prize for every draw waiting; a named NFT is in
   one waiting purchase at a time). With `"drawLeft"` the box keeps selling and draws among what is left, by the written
   weights: the others' chances rise as one runs out, so anyone watching the stock can empty a common outcome and then
-  open for the rare at better odds. Put it as: "stop selling keeps your odds honest; keep selling never stalls but lets
-  a player tilt the odds". A box selling a rare prize keeps the default; `drawLeft` suits a box of alike prizes, or one
-  only other routes roll (a grant's, a mission's), where nothing is sold. `xsolana_check` says what each does to the
+  open for the rare at better odds. With `"giveNothing"` the box keeps selling on the odds written, and a draw that lands
+  on an outcome that is out gives nothing: a paid draw is not refunded, a free roll is over, and anyone who empties a
+  source the box shares makes its rolls miss. Put it as: "stop selling keeps your odds honest and refunds a miss; keep
+  selling never stalls but lets a player tilt the odds; give nothing keeps the odds and never refunds". Under
+  `"stopSales"`, a roll another route gives (a grant, a mission, a recipe, a lottery's place) is still given after the
+  box has stopped, and is asked again until it hits, so with one outcome dry it always ends on what is left. A box
+  selling a rare prize keeps the default; `drawLeft` suits a box of alike prizes, or one only other routes roll (a
+  grant's, a mission's), where nothing is sold. `xsolana_check` says what each does to the
   box (W-WHEN-OUT, W-OUT-OF-STOCK, W-PRIZE-SEED, W-STASH) and `xsolana_simulate` the day it stops or each outcome runs out.
 - **A prize the program can't give right now is out of stock, not an error.** A prize in a token with a transfer hook
   (or confidential transfers) is never moved by a roll. An outcome emptied by another route after a purchase (another
@@ -83,7 +88,20 @@ money; it holds no files and serves nothing.
   free roll waits to be asked again, and a box with nothing in stock is refused (SoldOut).
 - **The oracle's answer reads at most 21 accounts**, so a box's distinct prize accounts (its items, pools, stashes,
   the mints and vaults of its tokens, a fresh item's tables) are bounded by that, however many outcomes it has.
-  `xsolana_check` counts them.
+  `xsolana_check` counts them. One answer also holds only so much of a box (measured: 128 outcomes that give
+  nothing, 29 of token amounts, 18 each of its own item; 41 slots; 72 odds rules; 16 token prizes or 18 collectibles
+  in one outcome; 340 texts in a gate; fewer where outcomes name pools or stashes, since the write counts finding
+  each one's address): a box past that is refused when written. Put a long weighted list in a table
+  or a stash, drawn by one outcome.
+- **The program takes any time, and the checker says a far one's date in words (W-FAR-TIME).** A time that looks like
+  milliseconds, or lands more than three years out, locks the bids, tickets, NFTs or vault that wait on it until then.
+  Read the date to the person before they sign.
+- **Much of what the program used to refuse is the project's own choice now, warned of in words, never refused**: a
+  price or a prize of 0, a mission with no lock, a contest of NFTs whose winners take none of the losers' NFTs, a
+  sealed schedule of any length paying any address the program doesn't own, a lottery, contest or auction in a token a
+  player can hold a payment up in (a frozen default, confidential transfers), a farm that mints a token the project is
+  not yet the authority of (it pays nothing until it is, and that time is never paid). Tell the person each warning
+  `xsolana_check` gives, in its own words.
 
 Don'ts:
 

package/skills/xsolana-economy/references/trust-and-cheating.md

@@ -107,11 +107,21 @@ Run `xsolana_review` and go through what it reports; these are the points behind
 12. **The page is untrusted.** A page builds the player's transactions, and a cheater builds their own: the program's
     checks are what count, never the page's. Anything the page decides (a score, a reward amount, who won) is only as
     good as the server that checks it.
-13. **Ordering.** A lottery's tickets are not weighted by time: one buyer can take most of a round right before the
-    draw. Anyone, the seller included, can bid an auction up. A box that keeps selling when an outcome runs out
-    (`drawLeft`) lets someone watching the stock empty a common outcome to make a rare likelier.
-14. **Contests.** Players' stakes go to the side the authority or a decider key names: keep contests for results the
-    server decides, or that anyone can check outside the game.
+13. **Ordering.** A lottery's tickets count one each unless it weighs them by time (`timeWeighted`, no-loss
+    lotteries only): then one buyer can't take most of a round right before the draw for the fees alone, and the buy
+    screen shows what a purchase weighs. A no-loss lottery should close its sales a while before the draw
+    (`closesBefore`). Anyone, the seller included, can bid an auction up; an auction with no extension or no least
+    raise lets two wallets topping each other in the last seconds keep every other bid out. A box that keeps selling
+    when an outcome runs out (`drawLeft`) lets someone watching the stock empty a common outcome to make a rare
+    likelier; one that gives nothing for a miss (`giveNothing`) lets anyone emptying a shared source make its rolls
+    miss.
+14. **Contests.** Players' stakes go to the side the authority or a decider key names, and whoever names it can also
+    enter: keep contests for results the server decides, or that anyone can check outside the game. A prize to each
+    winning entry with no stake and no gate pays one person with many wallets once a wallet.
+15. **NFTs the project doesn't control.** The creator of an NFT with a permanent delegate can pull it back out of a
+    hold, a stake, a loan or a listing, and a collection the project is only an update delegate of lets its owner and
+    every other delegate mint NFTs that read as the project's own items. Name only collections whose every writer the
+    project trusts.
 
 ## Telling the person
 

package/types/chain/token2022.d.ts

@@ -8,8 +8,9 @@ export declare function hookProgramOf(mintData: any): string | null;
 /**
  * Whether a mint's new accounts start frozen, or can be made to (as the program judges it): a Token-2022
  * mint carrying `DefaultAccountState` set to frozen, or set to anything while it has a freeze authority, which can switch
- * it to frozen whenever it likes. An auction, a contest, a lottery, an offer and a sealed schedule refuse such a mint:
- * each reads the setting once, as it opens, and a refund or payout opened into a frozen account would never land.
+ * it to frozen whenever it likes. The program takes such a mint everywhere: it is the project's choice. A refund or a
+ * payout opened into an account that starts frozen does not land until its issuer thaws it, so the tools warn the
+ * project, and a bidder or a borrower before they sign.
  */
 export declare function mayStartFrozen({ owner, data }: {
     data: any;

package/types/client/accounts.d.ts

@@ -206,26 +206,50 @@ export declare const leftoverTo: (lotteryAddress: any, terms: any) => any;
 export declare const lotteryPots: (lottery: any) => number[];
 /** A share the buyer chooses (a referrer, a collectible's holder): paid out of the price as they buy, from their own account. */
 export declare const chosenAtPurchase: (share: any) => boolean;
-/** The bytes of one entry of a round: buyer, word, what arrived (`fee`: a fee mint, or a chosen share), the NFT ticket. */
-export declare const entryWidth: (fee: any, nft: any) => number;
+/** The bytes of one entry of a round: buyer, word, what arrived (`fee`: a fee mint, a chosen share, or a weighted
+ * round of paid tickets), where its weight ends (`weighted`: a round that weighs its tickets by time), the NFT ticket. */
+export declare const entryWidth: (fee: any, nft: any, weighted?: boolean) => number;
+/** What a round's draw picks a point below: the weight sold in a weighted round, the tickets sold otherwise. */
+export declare const roundTotal: (r: any) => bigint;
 /**
  * A lottery round (`["round", lottery, incarnation, round]`): its header (`status` 'Open' | 'Drawing' | 'Drawn' |
- * 'Cancelled', the terms it copied, `sold`, `owed`, the draw and the money the ask fixed, `nfts` the NFT of the
- * lottery's own stash each such place got), and `entries`, one a purchase: { buyer, start, end (its tickets), paid (its
- * own part's bit), amount (what reached the round), nft (its NFT ticket) }.
+ * 'Cancelled', the terms it copied, `sold`, `weight` (null in a round that doesn't weigh its tickets), `owed`, the draw
+ * and the money the ask fixed, `nfts` the NFT of the lottery's own stash each such place got), and `entries`, one a
+ * purchase: { buyer, start, end (its slice of the draw: its tickets, or in a weighted round its weight), tickets (how
+ * many it bought), paid (its own part's bit), amount (what reached the round), nft (its NFT ticket) }.
  */
 export declare function decodeRound(data: any): any;
+/** When a lottery's sales close (`terms`: a Lottery's or a round's): `closes_before` seconds before its draw. */
+export declare const salesCloseAt: (terms: any) => bigint;
+/**
+ * What a purchase of `count` tickets at `now` (Unix seconds, the chain's clock) weighs in a round's draw: one a ticket,
+ * or in a lottery that weighs tickets by time (`terms.time_weighted`) each ticket the seconds from the purchase to the
+ * close of sales (`salesCloseAt`). 0 once sales have closed: nothing more is sold. The same tickets bought later weigh less.
+ */
+export declare function ticketWeight(terms: any, count: any, now: any): bigint;
+/**
+ * A buyer's chance before they buy: { weight, total, share } of a purchase of `count` tickets at `now` into `round` (its
+ * decoded record, null when nobody bought into it yet; `terms` the lottery's then): what it would weigh, the round's
+ * weight with it, and its share of that (a number from 0 to 1). Each place is drawn over the round's whole weight, so a
+ * share is the purchase's chance at one place as things stand: later purchases make it smaller.
+ */
+export declare function purchaseOdds(round: any, terms: any, count: any, now: any): {
+    weight: bigint;
+    total: bigint;
+    share: number;
+};
 /** How many places a lottery's (or a round's) `places` are, every run counted (`Place.times`). */
 export declare const placeCount: (places: any) => any;
 /** The places of a round that have a winner: every place, but no more than tickets. */
 export declare const roundWinners: (r: any) => number;
-/** The ticket that wins `place` of a drawn round: even steps around the list from first place's ticket. */
+/** The point that wins `place` of a drawn round: even steps of the draw's total around the list from first place's
+ * (a ticket's number, or in a weighted round a point of its weight). */
 export declare function ticketOfPlace(r: any, place: any): bigint;
 /** The run of places that holds `place`, and its first place. */
 export declare function runOf(r: any, place: any): any[];
 /** The places of run `run` with a winner: [first, end). */
 export declare function runPlaces(r: any, run: any): number[];
-/** The places of run `run` whose ticket is in `start..end` (an entry's), in order. */
+/** The places of run `run` whose point is in `start..end` (an entry's slice of the draw), in order. */
 export declare function placesIn(r: any, run: any, start: any, end: any): any[];
 /**
  * What place `place` (counted from the first place of `runs`) takes of a pass-through amount, as the program splits it:
@@ -285,11 +309,10 @@ export declare const roundFinished: (r: any) => boolean;
 export declare const placeSet: (place: any) => boolean;
 /** The address of a lottery's current round's record (there or not). */
 export declare const roundAddress: (lotteryAddress: any, lottery: any) => any;
-/** Whether a lottery (decoded) drew once and has ended. */
+/** Whether a lottery (decoded) drew its last round and has ended: it draws once (`every` 0) and is past round `last`. */
 export declare const lotteryEnded: (lottery: any) => boolean;
-/** The round a lottery's close, its write again and its own stash's moves name (`lottery::check_idle`): its current
- * round's, or once a lottery that draws once has ended, round 0's (which keeps its stash's NFTs until its places took
- * them out). */
+/** The round a lottery's close, its write again and its own stash's moves name (`Lottery::waits_on`): its current
+ * round's, or once it has ended, its last round's (which keeps its stash's NFTs until its places took them out). */
 export declare const idleRound: (lotteryAddress: any, lottery: any) => any;
 /**
  * Who rents a listed NFT at `now` (Unix seconds), from its decoded Listing (or null for none): the renter's wallet while

package/types/client/idl/loot.d.ts

@@ -1006,11 +1006,20 @@ declare const _default: {
         args: ({
             name: string;
             type: {
+                defined?: undefined;
                 array: (string | number)[];
             };
         } | {
             name: string;
             type: string;
+        } | {
+            name: string;
+            type: {
+                array?: undefined;
+                defined: {
+                    name: string;
+                };
+            };
         })[];
     } | {
         name: string;
@@ -3618,6 +3627,10 @@ declare const _default: {
                 docs?: undefined;
                 name: string;
                 type: string;
+            } | {
+                name: string;
+                docs: string[];
+                type: string;
             } | {
                 docs?: undefined;
                 name: string;
@@ -3627,10 +3640,6 @@ declare const _default: {
                         name: string;
                     };
                 };
-            } | {
-                name: string;
-                docs: string[];
-                type: string;
             } | {
                 docs?: undefined;
                 name: string;
@@ -4339,17 +4348,29 @@ declare const _default: {
         type: {
             kind: string;
             fields: ({
+                docs?: undefined;
                 name: string;
                 type: string;
             } | {
+                docs?: undefined;
                 name: string;
                 type: {
+                    defined?: undefined;
                     option: {
                         defined: {
                             name: string;
                         };
                     };
                 };
+            } | {
+                name: string;
+                docs: string[];
+                type: {
+                    option?: undefined;
+                    defined: {
+                        name: string;
+                    };
+                };
             })[];
             variants?: undefined;
         };