@agent-shield/mcp 0.1.0 → 0.2.0

package/README.md

@@ -105,7 +105,7 @@ pnpm install
 # Build
 pnpm build
 
-# Run tests (78 tests)
+# Run tests (82 tests)
 pnpm test
 
 # Smoke test
@@ -117,7 +117,7 @@ AGENTSHIELD_WALLET_PATH=~/.config/solana/id.json node dist/index.js
 - **Transport**: stdio only (local subprocess of the AI tool)
 - **Credentials**: Environment variables (keypair file paths)
 - **SDK**: Wraps `AgentShieldClient` from `@agent-shield/sdk` — every tool delegates to a client method
-- **Error handling**: All 28 Anchor error codes mapped to human-readable messages with actionable suggestions
+- **Error handling**: All 37 Anchor error codes mapped to human-readable messages with actionable suggestions
 
 ## License
 

package/dist/config.d.ts

@@ -1,12 +1,29 @@
 import { Keypair } from "@solana/web3.js";
 import { AgentShieldClient } from "@agent-shield/sdk";
+/** Supported custody providers for MCP server. */
+export type McpCustodyProvider = "crossmint" | "turnkey" | "privy";
 export interface McpConfig {
-    walletPath: string;
+    /** Path to owner wallet keypair JSON. Not needed when using custody. */
+    walletPath?: string;
     rpcUrl: string;
     agentKeypairPath?: string;
+    /** TEE custody provider — when set, walletPath is not required. */
+    custodyProvider?: McpCustodyProvider;
+    /** Crossmint API key (when custodyProvider = "crossmint"). */
+    crossmintApiKey?: string;
+    /** Crossmint wallet locator (optional — creates new wallet if omitted). */
+    crossmintLocator?: string;
 }
 export declare function loadConfig(): McpConfig;
 export declare function loadKeypair(path: string): Keypair;
 export declare function createClient(config: McpConfig): AgentShieldClient;
+/**
+ * Create a WalletLike from a TEE custody provider.
+ * Dynamically imports the provider adapter to avoid hard dependencies.
+ */
+export declare function createCustodyWallet(config: McpConfig): Promise<{
+    publicKey: import("@solana/web3.js").PublicKey;
+    signTransaction: Function;
+}>;
 export declare function loadAgentKeypair(config: McpConfig): Keypair;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,OAAO,EAAiB,MAAM,iBAAiB,CAAC;AAErE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,UAAU,IAAI,SAAS,CAgBtC;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOjD;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,iBAAiB,CAKjE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAQ3D"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,OAAO,EAAiB,MAAM,iBAAiB,CAAC;AAErE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD,kDAAkD;AAClD,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;AAEnE,MAAM,WAAW,SAAS;IACxB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC,8DAA8D;IAC9D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,UAAU,IAAI,SAAS,CAgCtC;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOjD;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,iBAAiB,CAWjE;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IACpE,SAAS,EAAE,OAAO,iBAAiB,EAAE,SAAS,CAAC;IAC/C,eAAe,EAAE,QAAQ,CAAC;CAC3B,CAAC,CAuCD;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAQ3D"}

package/dist/config.js

@@ -36,19 +36,33 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.loadConfig = loadConfig;
 exports.loadKeypair = loadKeypair;
 exports.createClient = createClient;
+exports.createCustodyWallet = createCustodyWallet;
 exports.loadAgentKeypair = loadAgentKeypair;
 const web3_js_1 = require("@solana/web3.js");
 const anchor_1 = require("@coral-xyz/anchor");
 const sdk_1 = require("@agent-shield/sdk");
 const fs = __importStar(require("fs"));
 function loadConfig() {
+    const rpcUrl = process.env.AGENTSHIELD_RPC_URL || (0, web3_js_1.clusterApiUrl)("devnet");
+    const agentKeypairPath = process.env.AGENTSHIELD_AGENT_KEYPAIR_PATH || undefined;
+    const custodyProvider = process.env.AGENTSHIELD_CUSTODY;
+    if (custodyProvider) {
+        // TEE custody path — no wallet file needed
+        return {
+            rpcUrl,
+            agentKeypairPath,
+            custodyProvider,
+            crossmintApiKey: process.env.CROSSMINT_API_KEY || undefined,
+            crossmintLocator: process.env.CROSSMINT_WALLET_LOCATOR || undefined,
+        };
+    }
+    // Legacy path — keypair file required
     const walletPath = process.env.AGENTSHIELD_WALLET_PATH;
     if (!walletPath) {
-        throw new Error("AGENTSHIELD_WALLET_PATH is required. " +
-            "Set it to the path of your Solana keypair JSON file.");
+        throw new Error("AGENTSHIELD_WALLET_PATH is required (or set AGENTSHIELD_CUSTODY " +
+            "to a custody provider: crossmint, turnkey, privy). " +
+            "Set AGENTSHIELD_WALLET_PATH to the path of your Solana keypair JSON file.");
     }
-    const rpcUrl = process.env.AGENTSHIELD_RPC_URL || (0, web3_js_1.clusterApiUrl)("devnet");
-    const agentKeypairPath = process.env.AGENTSHIELD_AGENT_KEYPAIR_PATH || undefined;
     return { walletPath, rpcUrl, agentKeypairPath };
 }
 function loadKeypair(path) {
@@ -60,11 +74,50 @@ function loadKeypair(path) {
     return web3_js_1.Keypair.fromSecretKey(secretKey);
 }
 function createClient(config) {
+    if (!config.walletPath) {
+        throw new Error("createClient requires walletPath. " +
+            "For custody-based wallets, use createCustodyClient() instead.");
+    }
     const keypair = loadKeypair(config.walletPath);
     const wallet = new anchor_1.Wallet(keypair);
     const connection = new web3_js_1.Connection(config.rpcUrl, "confirmed");
     return new sdk_1.AgentShieldClient(connection, wallet);
 }
+/**
+ * Create a WalletLike from a TEE custody provider.
+ * Dynamically imports the provider adapter to avoid hard dependencies.
+ */
+async function createCustodyWallet(config) {
+    switch (config.custodyProvider) {
+        case "crossmint": {
+            if (!config.crossmintApiKey) {
+                throw new Error("CROSSMINT_API_KEY is required when AGENTSHIELD_CUSTODY=crossmint.");
+            }
+            // Dynamic require to avoid hard dependency on custody adapter.
+            let mod;
+            try {
+                mod = require("@agent-shield/custody-crossmint");
+            }
+            catch {
+                throw new Error("@agent-shield/custody-crossmint is not installed. " +
+                    "Run: npm install @agent-shield/custody-crossmint");
+            }
+            return mod.crossmint({
+                apiKey: config.crossmintApiKey,
+                locator: config.crossmintLocator,
+            });
+        }
+        case "turnkey":
+            throw new Error("Turnkey custody adapter is not yet available. " +
+                "Install @agent-shield/custody-turnkey when released.");
+        case "privy":
+            throw new Error("Privy custody adapter is not yet available. " +
+                "Install @agent-shield/custody-privy when released.");
+        default:
+            throw new Error(`Unknown custody provider '${config.custodyProvider}'. ` +
+                "Supported: crossmint, turnkey, privy.");
+    }
+}
 function loadAgentKeypair(config) {
     if (!config.agentKeypairPath) {
         throw new Error("AGENTSHIELD_AGENT_KEYPAIR_PATH is required for agent-signed operations. " +

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,gCAgBC;AAED,kCAOC;AAED,oCAKC;AAED,4CAQC;AArDD,6CAAqE;AACrE,8CAA2C;AAC3C,2CAAsD;AACtD,uCAAyB;AAQzB,SAAgB,UAAU;IACxB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACvD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,uCAAuC;YACrC,sDAAsD,CACzD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAA,uBAAa,EAAC,QAAQ,CAAC,CAAC;IAE7D,MAAM,gBAAgB,GACpB,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,SAAS,CAAC;IAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;AAClD,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACnC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,OAAO,iBAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED,SAAgB,YAAY,CAAC,MAAiB;IAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,oBAAU,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC9D,OAAO,IAAI,uBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAiB;IAChD,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,6DAA6D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,gCAgCC;AAED,kCAOC;AAED,oCAWC;AAMD,kDA0CC;AAED,4CAQC;AArID,6CAAqE;AACrE,8CAA2C;AAC3C,2CAAsD;AACtD,uCAAyB;AAkBzB,SAAgB,UAAU;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAA,uBAAa,EAAC,QAAQ,CAAC,CAAC;IAE1E,MAAM,gBAAgB,GACpB,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,SAAS,CAAC;IAE1D,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,mBAEvB,CAAC;IAEd,IAAI,eAAe,EAAE,CAAC;QACpB,2CAA2C;QAC3C,OAAO;YACL,MAAM;YACN,gBAAgB;YAChB,eAAe;YACf,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS;YAC3D,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,SAAS;SACpE,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACvD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,kEAAkE;YAChE,qDAAqD;YACrD,2EAA2E,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;AAClD,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACnC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,OAAO,iBAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED,SAAgB,YAAY,CAAC,MAAiB;IAC5C,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,oCAAoC;YAClC,+DAA+D,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,oBAAU,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC9D,OAAO,IAAI,uBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,mBAAmB,CAAC,MAAiB;IAIzD,QAAQ,MAAM,CAAC,eAAe,EAAE,CAAC;QAC/B,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,+DAA+D;YAC/D,IAAI,GAAQ,CAAC;YACb,IAAI,CAAC;gBACH,GAAG,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,oDAAoD;oBAClD,kDAAkD,CACrD,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE,MAAM,CAAC,eAAe;gBAC9B,OAAO,EAAE,MAAM,CAAC,gBAAgB;aACjC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,SAAS;YACZ,MAAM,IAAI,KAAK,CACb,gDAAgD;gBAC9C,sDAAsD,CACzD,CAAC;QACJ,KAAK,OAAO;YACV,MAAM,IAAI,KAAK,CACb,8CAA8C;gBAC5C,oDAAoD,CACvD,CAAC;QACJ;YACE,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,CAAC,eAAe,KAAK;gBACtD,uCAAuC,CAC1C,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAiB;IAChD,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,6DAA6D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAC9C,CAAC"}

package/dist/errors.d.ts

@@ -5,7 +5,7 @@ export interface ErrorInfo {
     suggestion: string;
 }
 /**
- * Maps all 28 AgentShield Anchor error codes (6000–6027) to
+ * Maps all 40 AgentShield Anchor error codes (6000–6039) to
  * human-readable messages with actionable suggestions for AI tools.
  */
 declare const ERROR_MAP: Record<number, ErrorInfo>;

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,QAAA,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAsMxC,CAAC;AAEF;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CASnD;AA6BD;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAmClD;AAED,OAAO,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,QAAA,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAiRxC,CAAC;AAEF;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CASnD;AA6BD;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAmClD;AAED,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/dist/errors.js

@@ -4,7 +4,7 @@ exports.ERROR_MAP = void 0;
 exports.lookupError = lookupError;
 exports.formatError = formatError;
 /**
- * Maps all 28 AgentShield Anchor error codes (6000–6027) to
+ * Maps all 40 AgentShield Anchor error codes (6000–6039) to
  * human-readable messages with actionable suggestions for AI tools.
  */
 const ERROR_MAP = {
@@ -42,13 +42,13 @@ const ERROR_MAP = {
         code: 6005,
         name: "TransactionTooLarge",
         message: "Transaction exceeds maximum single transaction size",
-        suggestion: "Reduce the amount or use shield_update_policy to increase maxTransactionSize.",
+        suggestion: "Reduce the amount or use shield_update_policy to increase maxTransactionSizeUsd.",
     },
     6006: {
         code: 6006,
         name: "DailyCapExceeded",
         message: "Daily spending cap would be exceeded",
-        suggestion: "Wait for the 24h rolling window to reset, or use shield_update_policy to increase dailySpendingCap.",
+        suggestion: "Wait for the 24h rolling window to reset, or use shield_update_policy to increase dailySpendingCapUsd.",
     },
     6007: {
         code: 6007,
@@ -176,6 +176,78 @@ const ERROR_MAP = {
         message: "Arithmetic overflow",
         suggestion: "The amount is too large. Reduce the value and try again.",
     },
+    6028: {
+        code: 6028,
+        name: "DelegationFailed",
+        message: "Token delegation approval failed",
+        suggestion: "The vault may not have sufficient token balance. Check vault balance and try again.",
+    },
+    6029: {
+        code: 6029,
+        name: "RevocationFailed",
+        message: "Token delegation revocation failed",
+        suggestion: "The session may have already been finalized. Check session status.",
+    },
+    6030: {
+        code: 6030,
+        name: "OracleFeedStale",
+        message: "Oracle feed value is too stale",
+        suggestion: "The oracle price data is outdated. Wait for a fresh price update and retry.",
+    },
+    6031: {
+        code: 6031,
+        name: "OracleFeedInvalid",
+        message: "Cannot parse oracle feed data",
+        suggestion: "The oracle feed account data is malformed or the account key doesn't match the policy. Verify the oracle configuration.",
+    },
+    6032: {
+        code: 6032,
+        name: "TokenSpendBlocked",
+        message: "Unpriced token cannot be spent (receive-only)",
+        suggestion: "This token is configured as receive-only and cannot be used for spending.",
+    },
+    6033: {
+        code: 6033,
+        name: "InvalidTokenAccount",
+        message: "Token account does not belong to vault or has wrong mint",
+        suggestion: "Ensure the token account is owned by the vault PDA and matches the token mint.",
+    },
+    6034: {
+        code: 6034,
+        name: "OracleAccountMissing",
+        message: "Oracle-priced token requires feed account in remaining_accounts",
+        suggestion: "Pass the oracle feed account when transacting with oracle-priced tokens. The SDK resolves this automatically.",
+    },
+    6035: {
+        code: 6035,
+        name: "PerTokenCapExceeded",
+        message: "Per-token daily spending cap would be exceeded",
+        suggestion: "Wait for the 24h rolling window to reset, or use shield_update_policy to increase the per-token cap.",
+    },
+    6036: {
+        code: 6036,
+        name: "PerTokenTxLimitExceeded",
+        message: "Per-token single transaction limit exceeded",
+        suggestion: "Reduce the amount or use shield_update_policy to increase the per-token transaction limit.",
+    },
+    6037: {
+        code: 6037,
+        name: "OracleConfidenceTooWide",
+        message: "Oracle price confidence interval too wide",
+        suggestion: "The oracle price has high uncertainty (>10% confidence interval). Wait for more stable market conditions and retry.",
+    },
+    6038: {
+        code: 6038,
+        name: "OracleUnsupportedType",
+        message: "Oracle account owner is not a recognized oracle program",
+        suggestion: "The oracle feed account must be owned by either Pyth Receiver or Switchboard On-Demand program. Check the policy configuration.",
+    },
+    6039: {
+        code: 6039,
+        name: "OracleNotVerified",
+        message: "Pyth price update not fully verified by Wormhole",
+        suggestion: "The Pyth price update has not been verified by Wormhole guardians. Use a fully verified price feed.",
+    },
 };
 exports.ERROR_MAP = ERROR_MAP;
 /**

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;AAuNA,kCASC;AAgCD,kCAmCC;AA5RD;;;GAGG;AACH,MAAM,SAAS,GAA8B;IAC3C,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,qBAAqB;QAC9B,UAAU,EACR,kFAAkF;KACrF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,kDAAkD;QAC3D,UAAU,EACR,iFAAiF;KACpF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,6CAA6C;QACtD,UAAU,EACR,kFAAkF;KACrF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,2BAA2B;QACpC,UAAU,EACR,sFAAsF;KACzF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,8BAA8B;QACvC,UAAU,EACR,mEAAmE;KACtE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,qDAAqD;QAC9D,UAAU,EACR,+EAA+E;KAClF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,sCAAsC;QAC/C,UAAU,EACR,qGAAqG;KACxG;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,kCAAkC;QAC3C,UAAU,EACR,yEAAyE;KAC5E;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,2CAA2C;QACpD,UAAU,EACR,0FAA0F;KAC7F;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,8CAA8C;QACvD,UAAU,EACR,2DAA2D;KAC9D;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,qBAAqB;QAC9B,UAAU,EACR,+FAA+F;KAClG;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,wBAAwB;QACjC,UAAU,EACR,4FAA4F;KAC/F;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,gDAAgD;QACzD,UAAU,EACR,kEAAkE;KACrE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,wCAAwC;QACjD,UAAU,EACR,oDAAoD;KACvD;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,uDAAuD;QAChE,UAAU,EACR,8DAA8D;KACjE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,0DAA0D;QACnE,UAAU,EACR,oEAAoE;KACvE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,yCAAyC;QAClD,UAAU,EACR,6DAA6D;KAChE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,oCAAoC;QAC7C,UAAU,EACR,yEAAyE;KAC5E;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,wDAAwD;QACjE,UAAU,EACR,yEAAyE;KAC5E;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,yBAAyB;QAClC,UAAU,EACR,qEAAqE;KACxE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,2CAA2C;QACpD,UAAU,EACR,gGAAgG;KACnG;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EACL,+DAA+D;QACjE,UAAU,EACR,sDAAsD;KACzD;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,iCAAiC;QAC1C,UAAU,EACR,4DAA4D;KAC/D;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,2DAA2D;QACpE,UAAU,EACR,wEAAwE;KAC3E;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EACL,uEAAuE;QACzE,UAAU,EACR,+DAA+D;KAClE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,2CAA2C;QACpD,UAAU,EAAE,kDAAkD;KAC/D;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,gDAAgD;QACzD,UAAU,EACR,+EAA+E;KAClF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,qBAAqB;QAC9B,UAAU,EACR,0DAA0D;KAC7D;CACF,CAAC;AAoFO,8BAAS;AAlFlB;;;GAGG;AACH,SAAgB,WAAW,CAAC,IAAY;IACtC,OAAO,CACL,SAAS,CAAC,IAAI,CAAC,IAAI;QACjB,IAAI;QACJ,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,6BAA6B,IAAI,EAAE;QAC5C,UAAU,EAAE,yCAAyC;KACtD,CACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,wDAAwD;QACxD,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CAAC;QAChB,CAAC;QACD,qBAAqB;QACrB,IACE,CAAC,CAAC,KAAK;YACP,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAC3B,OAAQ,CAAC,CAAC,KAAiC,CAAC,SAAS,KAAK,QAAQ,EAClE,CAAC;YACD,MAAM,SAAS,GAAI,CAAC,CAAC,KAAiC;iBACnD,SAAoC,CAAC;YACxC,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,SAAS,CAAC,MAAM,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,KAAc;IACxC,uBAAuB;IACvB,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,CACL,UAAU,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,KAAK;YAC5D,eAAe,IAAI,CAAC,UAAU,EAAE,CACjC,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YACpD,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EACvD,CAAC;YACD,OAAO,CACL,uBAAuB,KAAK,CAAC,OAAO,IAAI;gBACxC,+FAA+F,CAChG,CAAC;QACJ,CAAC;QACD,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YAChD,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAChD,CAAC;YACD,OAAO,CACL,sBAAsB,KAAK,CAAC,OAAO,IAAI;gBACvC,2FAA2F,CAC5F,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC;IACnC,CAAC;IAED,OAAO,UAAU,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACnC,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;AAkSA,kCASC;AAgCD,kCAmCC;AAvWD;;;GAGG;AACH,MAAM,SAAS,GAA8B;IAC3C,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,qBAAqB;QAC9B,UAAU,EACR,kFAAkF;KACrF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,kDAAkD;QAC3D,UAAU,EACR,iFAAiF;KACpF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,6CAA6C;QACtD,UAAU,EACR,kFAAkF;KACrF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,2BAA2B;QACpC,UAAU,EACR,sFAAsF;KACzF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,8BAA8B;QACvC,UAAU,EACR,mEAAmE;KACtE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,qDAAqD;QAC9D,UAAU,EACR,kFAAkF;KACrF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,sCAAsC;QAC/C,UAAU,EACR,wGAAwG;KAC3G;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,kCAAkC;QAC3C,UAAU,EACR,yEAAyE;KAC5E;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,2CAA2C;QACpD,UAAU,EACR,0FAA0F;KAC7F;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,8CAA8C;QACvD,UAAU,EAAE,2DAA2D;KACxE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,qBAAqB;QAC9B,UAAU,EACR,+FAA+F;KAClG;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,wBAAwB;QACjC,UAAU,EACR,4FAA4F;KAC/F;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,gDAAgD;QACzD,UAAU,EACR,kEAAkE;KACrE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,wCAAwC;QACjD,UAAU,EAAE,oDAAoD;KACjE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,uDAAuD;QAChE,UAAU,EAAE,8DAA8D;KAC3E;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,0DAA0D;QACnE,UAAU,EACR,oEAAoE;KACvE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,yCAAyC;QAClD,UAAU,EAAE,6DAA6D;KAC1E;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,oCAAoC;QAC7C,UAAU,EACR,yEAAyE;KAC5E;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,wDAAwD;QACjE,UAAU,EACR,yEAAyE;KAC5E;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,yBAAyB;QAClC,UAAU,EACR,qEAAqE;KACxE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,2CAA2C;QACpD,UAAU,EACR,gGAAgG;KACnG;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,+DAA+D;QACxE,UAAU,EAAE,sDAAsD;KACnE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,iCAAiC;QAC1C,UAAU,EAAE,4DAA4D;KACzE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,2DAA2D;QACpE,UAAU,EACR,wEAAwE;KAC3E;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EACL,uEAAuE;QACzE,UAAU,EAAE,+DAA+D;KAC5E;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,2CAA2C;QACpD,UAAU,EAAE,kDAAkD;KAC/D;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,gDAAgD;QACzD,UAAU,EACR,+EAA+E;KAClF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,qBAAqB;QAC9B,UAAU,EAAE,0DAA0D;KACvE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,kCAAkC;QAC3C,UAAU,EACR,qFAAqF;KACxF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,oCAAoC;QAC7C,UAAU,EACR,oEAAoE;KACvE;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,gCAAgC;QACzC,UAAU,EACR,6EAA6E;KAChF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,+BAA+B;QACxC,UAAU,EACR,yHAAyH;KAC5H;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,+CAA+C;QACxD,UAAU,EACR,2EAA2E;KAC9E;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,0DAA0D;QACnE,UAAU,EACR,gFAAgF;KACnF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,iEAAiE;QAC1E,UAAU,EACR,+GAA+G;KAClH;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,gDAAgD;QACzD,UAAU,EACR,sGAAsG;KACzG;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,6CAA6C;QACtD,UAAU,EACR,4FAA4F;KAC/F;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,2CAA2C;QACpD,UAAU,EACR,qHAAqH;KACxH;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,yDAAyD;QAClE,UAAU,EACR,iIAAiI;KACpI;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,kDAAkD;QAC3D,UAAU,EACR,qGAAqG;KACxG;CACF,CAAC;AAoFO,8BAAS;AAlFlB;;;GAGG;AACH,SAAgB,WAAW,CAAC,IAAY;IACtC,OAAO,CACL,SAAS,CAAC,IAAI,CAAC,IAAI;QACjB,IAAI;QACJ,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,6BAA6B,IAAI,EAAE;QAC5C,UAAU,EAAE,yCAAyC;KACtD,CACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,wDAAwD;QACxD,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CAAC;QAChB,CAAC;QACD,qBAAqB;QACrB,IACE,CAAC,CAAC,KAAK;YACP,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAC3B,OAAQ,CAAC,CAAC,KAAiC,CAAC,SAAS,KAAK,QAAQ,EAClE,CAAC;YACD,MAAM,SAAS,GAAI,CAAC,CAAC,KAAiC;iBACnD,SAAoC,CAAC;YACxC,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,SAAS,CAAC,MAAM,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,KAAc;IACxC,uBAAuB;IACvB,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,CACL,UAAU,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,KAAK;YAC5D,eAAe,IAAI,CAAC,UAAU,EAAE,CACjC,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YACpD,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EACvD,CAAC;YACD,OAAO,CACL,uBAAuB,KAAK,CAAC,OAAO,IAAI;gBACxC,+FAA+F,CAChG,CAAC;QACJ,CAAC;QACD,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YAChD,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAChD,CAAC;YACD,OAAO,CACL,sBAAsB,KAAK,CAAC,OAAO,IAAI;gBACvC,2FAA2F,CAC5F,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC;IACnC,CAAC;IAED,OAAO,UAAU,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACnC,CAAC"}

package/dist/index.js

@@ -18,6 +18,12 @@ const reactivate_vault_1 = require("./tools/reactivate-vault");
 const execute_swap_1 = require("./tools/execute-swap");
 const open_position_1 = require("./tools/open-position");
 const close_position_1 = require("./tools/close-position");
+const provision_1 = require("./tools/provision");
+const queue_policy_update_1 = require("./tools/queue-policy-update");
+const apply_pending_policy_1 = require("./tools/apply-pending-policy");
+const cancel_pending_policy_1 = require("./tools/cancel-pending-policy");
+const check_pending_policy_1 = require("./tools/check-pending-policy");
+const agent_transfer_1 = require("./tools/agent-transfer");
 // Resources
 const policy_1 = require("./resources/policy");
 const spending_1 = require("./resources/spending");
@@ -58,9 +64,17 @@ async function main() {
     });
     // ── Read-Only Tools ──────────────────────────────────────────
     registerTool(server, "shield_check_vault", "Check the status and policy configuration of an AgentShield vault", {
-        vault: zod_1.z.string().describe("Vault PDA address (base58). Provide this OR owner+vaultId."),
-        owner: zod_1.z.string().optional().describe("Owner public key (base58). Used with vaultId."),
-        vaultId: zod_1.z.string().optional().describe("Vault ID number. Used with owner."),
+        vault: zod_1.z
+            .string()
+            .describe("Vault PDA address (base58). Provide this OR owner+vaultId."),
+        owner: zod_1.z
+            .string()
+            .optional()
+            .describe("Owner public key (base58). Used with vaultId."),
+        vaultId: zod_1.z
+            .string()
+            .optional()
+            .describe("Vault ID number. Used with owner."),
     }, async (input) => ({
         content: [{ type: "text", text: await (0, check_vault_1.checkVault)(client, input) }],
     }));
@@ -69,17 +83,51 @@ async function main() {
     }, async (input) => ({
         content: [{ type: "text", text: await (0, check_spending_1.checkSpending)(client, input) }],
     }));
+    registerTool(server, "shield_check_pending_policy", "Check if a pending timelocked policy update exists for a vault", {
+        vault: zod_1.z.string().describe("Vault PDA address (base58)"),
+    }, async (input) => ({
+        content: [
+            { type: "text", text: await (0, check_pending_policy_1.checkPendingPolicy)(client, input) },
+        ],
+    }));
     // ── Owner-Signed Write Tools ────────────────────────────────
     registerTool(server, "shield_create_vault", "Create a new AgentShield vault with policy configuration", {
         vaultId: zod_1.z.string().describe("Unique vault ID number"),
-        dailySpendingCap: zod_1.z.string().describe("Max daily spending in token base units"),
-        maxTransactionSize: zod_1.z.string().describe("Max single transaction size in token base units"),
-        allowedTokens: zod_1.z.array(zod_1.z.string()).describe("Allowed token mint addresses (base58). Max 10."),
-        allowedProtocols: zod_1.z.array(zod_1.z.string()).describe("Allowed protocol program IDs (base58). Max 10."),
-        maxLeverageBps: zod_1.z.number().describe("Max leverage in basis points (e.g. 30000 = 3x)"),
-        maxConcurrentPositions: zod_1.z.number().describe("Max concurrent open positions"),
-        feeDestination: zod_1.z.string().describe("Fee destination wallet address (base58). Immutable."),
-        developerFeeRate: zod_1.z.number().optional().default(0).describe("Developer fee rate (max 50 = 0.5 BPS)"),
+        dailySpendingCapUsd: zod_1.z
+            .string()
+            .describe("Max daily spending in USD base units"),
+        maxTransactionSizeUsd: zod_1.z
+            .string()
+            .describe("Max single transaction size in USD base units"),
+        allowedTokens: zod_1.z
+            .array(zod_1.z.string())
+            .describe("Allowed token mint addresses (base58). Max 10."),
+        allowedProtocols: zod_1.z
+            .array(zod_1.z.string())
+            .describe("Allowed protocol program IDs (base58). Max 10."),
+        maxLeverageBps: zod_1.z
+            .number()
+            .describe("Max leverage in basis points (e.g. 30000 = 3x)"),
+        maxConcurrentPositions: zod_1.z
+            .number()
+            .describe("Max concurrent open positions"),
+        feeDestination: zod_1.z
+            .string()
+            .describe("Fee destination wallet address (base58). Immutable."),
+        developerFeeRate: zod_1.z
+            .number()
+            .optional()
+            .default(0)
+            .describe("Developer fee rate (max 50 = 0.5 BPS)"),
+        allowedDestinations: zod_1.z
+            .array(zod_1.z.string())
+            .optional()
+            .describe("Allowed destination addresses for agent transfers (base58). Max 10."),
+        timelockDuration: zod_1.z
+            .number()
+            .optional()
+            .default(0)
+            .describe("Timelock duration in seconds (0 = immediate policy updates)"),
     }, async (input) => ({
         content: [{ type: "text", text: await (0, create_vault_1.createVault)(client, input) }],
     }));
@@ -105,17 +153,104 @@ async function main() {
     }));
     registerTool(server, "shield_update_policy", "Update the policy configuration for a vault (owner-only)", {
         vault: zod_1.z.string().describe("Vault PDA address (base58)"),
-        dailySpendingCap: zod_1.z.string().optional().describe("New daily spending cap"),
-        maxTransactionSize: zod_1.z.string().optional().describe("New max transaction size"),
-        allowedTokens: zod_1.z.array(zod_1.z.string()).optional().describe("New allowed token mints (base58)"),
-        allowedProtocols: zod_1.z.array(zod_1.z.string()).optional().describe("New allowed protocols (base58)"),
+        dailySpendingCapUsd: zod_1.z
+            .string()
+            .optional()
+            .describe("New daily spending cap in USD"),
+        maxTransactionSizeUsd: zod_1.z
+            .string()
+            .optional()
+            .describe("New max transaction size in USD"),
+        allowedTokens: zod_1.z
+            .array(zod_1.z.string())
+            .optional()
+            .describe("New allowed token mints (base58)"),
+        allowedProtocols: zod_1.z
+            .array(zod_1.z.string())
+            .optional()
+            .describe("New allowed protocols (base58)"),
         maxLeverageBps: zod_1.z.number().optional().describe("New max leverage in BPS"),
-        canOpenPositions: zod_1.z.boolean().optional().describe("Whether agent can open positions"),
-        maxConcurrentPositions: zod_1.z.number().optional().describe("New max concurrent positions"),
-        developerFeeRate: zod_1.z.number().optional().describe("New developer fee rate (max 50)"),
+        canOpenPositions: zod_1.z
+            .boolean()
+            .optional()
+            .describe("Whether agent can open positions"),
+        maxConcurrentPositions: zod_1.z
+            .number()
+            .optional()
+            .describe("New max concurrent positions"),
+        developerFeeRate: zod_1.z
+            .number()
+            .optional()
+            .describe("New developer fee rate (max 50)"),
+        allowedDestinations: zod_1.z
+            .array(zod_1.z.string())
+            .optional()
+            .describe("New allowed destinations (base58)"),
+        timelockDuration: zod_1.z
+            .number()
+            .optional()
+            .describe("New timelock duration in seconds"),
     }, async (input) => ({
         content: [{ type: "text", text: await (0, update_policy_1.updatePolicy)(client, input) }],
     }));
+    registerTool(server, "shield_queue_policy_update", "Queue a timelocked policy change (required when timelock_duration > 0)", {
+        vault: zod_1.z.string().describe("Vault PDA address (base58)"),
+        dailySpendingCapUsd: zod_1.z
+            .string()
+            .optional()
+            .describe("New daily spending cap in USD"),
+        maxTransactionSizeUsd: zod_1.z
+            .string()
+            .optional()
+            .describe("New max transaction size in USD"),
+        allowedTokens: zod_1.z
+            .array(zod_1.z.string())
+            .optional()
+            .describe("New allowed token mints (base58)"),
+        allowedProtocols: zod_1.z
+            .array(zod_1.z.string())
+            .optional()
+            .describe("New allowed protocols (base58)"),
+        allowedDestinations: zod_1.z
+            .array(zod_1.z.string())
+            .optional()
+            .describe("New allowed destinations (base58)"),
+        maxLeverageBps: zod_1.z.number().optional().describe("New max leverage in BPS"),
+        canOpenPositions: zod_1.z
+            .boolean()
+            .optional()
+            .describe("Whether agent can open positions"),
+        maxConcurrentPositions: zod_1.z
+            .number()
+            .optional()
+            .describe("New max concurrent positions"),
+        timelockDuration: zod_1.z
+            .number()
+            .optional()
+            .describe("New timelock duration in seconds"),
+        developerFeeRate: zod_1.z
+            .number()
+            .optional()
+            .describe("New developer fee rate (max 50)"),
+    }, async (input) => ({
+        content: [
+            { type: "text", text: await (0, queue_policy_update_1.queuePolicyUpdate)(client, input) },
+        ],
+    }));
+    registerTool(server, "shield_apply_pending_policy", "Apply a pending timelocked policy update after timelock expires", {
+        vault: zod_1.z.string().describe("Vault PDA address (base58)"),
+    }, async (input) => ({
+        content: [
+            { type: "text", text: await (0, apply_pending_policy_1.applyPendingPolicy)(client, input) },
+        ],
+    }));
+    registerTool(server, "shield_cancel_pending_policy", "Cancel a pending timelocked policy update before it takes effect", {
+        vault: zod_1.z.string().describe("Vault PDA address (base58)"),
+    }, async (input) => ({
+        content: [
+            { type: "text", text: await (0, cancel_pending_policy_1.cancelPendingPolicy)(client, input) },
+        ],
+    }));
     registerTool(server, "shield_revoke_agent", "Emergency kill switch — revokes agent and freezes vault immediately", {
         vault: zod_1.z.string().describe("Vault PDA address (base58)"),
     }, async (input) => ({
@@ -123,39 +258,105 @@ async function main() {
     }));
     registerTool(server, "shield_reactivate_vault", "Reactivate a frozen vault, optionally with a new agent", {
         vault: zod_1.z.string().describe("Vault PDA address (base58)"),
-        newAgent: zod_1.z.string().optional().describe("Optional new agent public key (base58)"),
+        newAgent: zod_1.z
+            .string()
+            .optional()
+            .describe("Optional new agent public key (base58)"),
     }, async (input) => ({
         content: [{ type: "text", text: await (0, reactivate_vault_1.reactivateVault)(client, input) }],
     }));
     // ── Agent-Signed Tools ──────────────────────────────────────
+    registerTool(server, "shield_agent_transfer", "Transfer tokens from a vault to an allowed destination (agent-signed)", {
+        vault: zod_1.z.string().describe("Vault PDA address (base58)"),
+        destination: zod_1.z
+            .string()
+            .describe("Destination wallet address (base58). Must be in allowed_destinations if configured."),
+        mint: zod_1.z.string().describe("Token mint address (base58)"),
+        amount: zod_1.z.string().describe("Amount in token base units"),
+    }, async (input) => ({
+        content: [
+            { type: "text", text: await (0, agent_transfer_1.agentTransfer)(client, input) },
+        ],
+    }));
     registerTool(server, "shield_execute_swap", "Execute a Jupiter token swap through an AgentShield vault", {
         vault: zod_1.z.string().describe("Vault PDA address (base58)"),
         inputMint: zod_1.z.string().describe("Input token mint address (base58)"),
         outputMint: zod_1.z.string().describe("Output token mint address (base58)"),
         amount: zod_1.z.string().describe("Input amount in token base units"),
-        slippageBps: zod_1.z.number().optional().default(50).describe("Slippage tolerance in BPS (default: 50)"),
+        slippageBps: zod_1.z
+            .number()
+            .optional()
+            .default(50)
+            .describe("Slippage tolerance in BPS (default: 50)"),
     }, async (input) => ({
-        content: [{ type: "text", text: await (0, execute_swap_1.executeSwap)(client, config, input) }],
+        content: [
+            { type: "text", text: await (0, execute_swap_1.executeSwap)(client, config, input) },
+        ],
     }));
     registerTool(server, "shield_open_position", "Open a leveraged perpetual position via Flash Trade through a vault", {
         vault: zod_1.z.string().describe("Vault PDA address (base58)"),
         market: zod_1.z.string().describe("Market/pool name (e.g. 'SOL', 'ETH')"),
-        collateralMint: zod_1.z.string().describe("Collateral token mint address (base58)"),
-        collateralAmount: zod_1.z.string().describe("Collateral amount in token base units"),
+        collateralMint: zod_1.z
+            .string()
+            .describe("Collateral token mint address (base58)"),
+        collateralAmount: zod_1.z
+            .string()
+            .describe("Collateral amount in token base units"),
         sizeUsd: zod_1.z.string().describe("Position size in USD base units"),
         side: zod_1.z.enum(["long", "short"]).describe("Position side"),
-        leverageBps: zod_1.z.number().describe("Leverage in basis points (e.g. 20000 = 2x)"),
+        leverageBps: zod_1.z
+            .number()
+            .describe("Leverage in basis points (e.g. 20000 = 2x)"),
     }, async (input) => ({
-        content: [{ type: "text", text: await (0, open_position_1.openPosition)(client, config, input) }],
+        content: [
+            { type: "text", text: await (0, open_position_1.openPosition)(client, config, input) },
+        ],
     }));
     registerTool(server, "shield_close_position", "Close a leveraged perpetual position via Flash Trade through a vault", {
         vault: zod_1.z.string().describe("Vault PDA address (base58)"),
         market: zod_1.z.string().describe("Market/pool name (e.g. 'SOL', 'ETH')"),
         side: zod_1.z.enum(["long", "short"]).describe("Position side"),
         priceWithSlippage: zod_1.z.string().describe("Exit price in base units"),
-        priceExponent: zod_1.z.number().optional().default(0).describe("Price exponent (default: 0)"),
+        priceExponent: zod_1.z
+            .number()
+            .optional()
+            .default(0)
+            .describe("Price exponent (default: 0)"),
+    }, async (input) => ({
+        content: [
+            { type: "text", text: await (0, close_position_1.closePosition)(client, config, input) },
+        ],
+    }));
+    // ── Platform Tools ─────────────────────────────────────────
+    registerTool(server, "shield_provision", "Generate a Solana Action URL (Blink) for one-click vault provisioning. The user clicks the link to approve — no agent signing needed.", {
+        platformUrl: zod_1.z
+            .string()
+            .optional()
+            .default("https://agent-middleware.vercel.app")
+            .describe("AgentShield Actions server URL"),
+        template: zod_1.z
+            .enum(["conservative", "moderate", "aggressive"])
+            .optional()
+            .default("conservative")
+            .describe("Policy template"),
+        dailyCap: zod_1.z
+            .number()
+            .optional()
+            .describe("Custom daily spending cap in USDC"),
+        agentPubkey: zod_1.z
+            .string()
+            .optional()
+            .describe("Agent public key (base58) to register in the vault"),
+        allowedProtocols: zod_1.z
+            .array(zod_1.z.string())
+            .optional()
+            .describe("Custom allowed protocol program IDs (base58)"),
+        maxLeverageBps: zod_1.z
+            .number()
+            .optional()
+            .describe("Custom max leverage in basis points"),
     }, async (input) => ({
-        content: [{ type: "text", text: await (0, close_position_1.closePosition)(client, config, input) }],
+        content: [{ type: "text", text: await (0, provision_1.provision)(client, input) }],
     }));
     // ── MCP Resources ───────────────────────────────────────────
     server.resource("vault-policy", "shield://vault/{address}/policy", { description: "Current policy configuration for a vault" }, async (uri) => {