@agent-shield/sdk 0.1.6 → 0.3.0

package/dist/idl-json.d.ts

@@ -7,6 +7,183 @@ export declare const IDL: {
         readonly description: "AI Agent Financial Middleware for Solana - Permission controls, spending limits, and audit infrastructure for autonomous agents";
     };
     readonly instructions: readonly [{
+        readonly name: "agent_transfer";
+        readonly docs: readonly ["Transfer tokens from the vault to an allowed destination.", "Only the agent can call this. Respects destination allowlist,", "spending caps, and per-token limits."];
+        readonly discriminator: readonly [199, 111, 151, 49, 124, 13, 150, 44];
+        readonly accounts: readonly [{
+            readonly name: "agent";
+            readonly writable: true;
+            readonly signer: true;
+        }, {
+            readonly name: "vault";
+            readonly writable: true;
+            readonly pda: {
+                readonly seeds: readonly [{
+                    readonly kind: "const";
+                    readonly value: readonly [118, 97, 117, 108, 116];
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault.owner";
+                    readonly account: "AgentVault";
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault.vault_id";
+                    readonly account: "AgentVault";
+                }];
+            };
+            readonly relations: readonly ["policy", "tracker"];
+        }, {
+            readonly name: "policy";
+            readonly pda: {
+                readonly seeds: readonly [{
+                    readonly kind: "const";
+                    readonly value: readonly [112, 111, 108, 105, 99, 121];
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault";
+                }];
+            };
+        }, {
+            readonly name: "tracker";
+            readonly writable: true;
+            readonly pda: {
+                readonly seeds: readonly [{
+                    readonly kind: "const";
+                    readonly value: readonly [116, 114, 97, 99, 107, 101, 114];
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault";
+                }];
+            };
+        }, {
+            readonly name: "vault_token_account";
+            readonly docs: readonly ["Vault's PDA-owned token account (source)"];
+            readonly writable: true;
+        }, {
+            readonly name: "destination_token_account";
+            readonly docs: readonly ["Destination token account (must be in allowed destinations if configured)"];
+            readonly writable: true;
+        }, {
+            readonly name: "fee_destination_token_account";
+            readonly docs: readonly ["Developer fee destination token account — must match vault.fee_destination"];
+            readonly writable: true;
+            readonly optional: true;
+        }, {
+            readonly name: "protocol_treasury_token_account";
+            readonly docs: readonly ["Protocol treasury token account"];
+            readonly writable: true;
+            readonly optional: true;
+        }, {
+            readonly name: "token_program";
+            readonly address: "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";
+        }];
+        readonly args: readonly [{
+            readonly name: "amount";
+            readonly type: "u64";
+        }];
+    }, {
+        readonly name: "apply_pending_policy";
+        readonly docs: readonly ["Apply a queued policy update after the timelock period has expired.", "Closes the PendingPolicyUpdate PDA and returns rent to the owner."];
+        readonly discriminator: readonly [114, 212, 19, 227, 89, 199, 74, 62];
+        readonly accounts: readonly [{
+            readonly name: "owner";
+            readonly writable: true;
+            readonly signer: true;
+            readonly relations: readonly ["vault"];
+        }, {
+            readonly name: "vault";
+            readonly pda: {
+                readonly seeds: readonly [{
+                    readonly kind: "const";
+                    readonly value: readonly [118, 97, 117, 108, 116];
+                }, {
+                    readonly kind: "account";
+                    readonly path: "owner";
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault.vault_id";
+                    readonly account: "AgentVault";
+                }];
+            };
+            readonly relations: readonly ["policy", "tracker", "pending_policy"];
+        }, {
+            readonly name: "policy";
+            readonly writable: true;
+            readonly pda: {
+                readonly seeds: readonly [{
+                    readonly kind: "const";
+                    readonly value: readonly [112, 111, 108, 105, 99, 121];
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault";
+                }];
+            };
+        }, {
+            readonly name: "tracker";
+            readonly writable: true;
+            readonly pda: {
+                readonly seeds: readonly [{
+                    readonly kind: "const";
+                    readonly value: readonly [116, 114, 97, 99, 107, 101, 114];
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault";
+                }];
+            };
+        }, {
+            readonly name: "pending_policy";
+            readonly writable: true;
+            readonly pda: {
+                readonly seeds: readonly [{
+                    readonly kind: "const";
+                    readonly value: readonly [112, 101, 110, 100, 105, 110, 103, 95, 112, 111, 108, 105, 99, 121];
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault";
+                }];
+            };
+        }];
+        readonly args: readonly [];
+    }, {
+        readonly name: "cancel_pending_policy";
+        readonly docs: readonly ["Cancel a queued policy update. Closes the PendingPolicyUpdate PDA", "and returns rent to the owner."];
+        readonly discriminator: readonly [153, 36, 104, 200, 50, 94, 207, 33];
+        readonly accounts: readonly [{
+            readonly name: "owner";
+            readonly writable: true;
+            readonly signer: true;
+            readonly relations: readonly ["vault"];
+        }, {
+            readonly name: "vault";
+            readonly pda: {
+                readonly seeds: readonly [{
+                    readonly kind: "const";
+                    readonly value: readonly [118, 97, 117, 108, 116];
+                }, {
+                    readonly kind: "account";
+                    readonly path: "owner";
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault.vault_id";
+                    readonly account: "AgentVault";
+                }];
+            };
+            readonly relations: readonly ["pending_policy"];
+        }, {
+            readonly name: "pending_policy";
+            readonly writable: true;
+            readonly pda: {
+                readonly seeds: readonly [{
+                    readonly kind: "const";
+                    readonly value: readonly [112, 101, 110, 100, 105, 110, 103, 95, 112, 111, 108, 105, 99, 121];
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault";
+                }];
+            };
+        }];
+        readonly args: readonly [];
+    }, {
         readonly name: "close_vault";
         readonly docs: readonly ["Close the vault entirely. Withdraws all remaining funds and closes all PDAs.", "Reclaims rent. Vault must have no open positions. Only the owner can call this."];
         readonly discriminator: readonly [141, 103, 17, 126, 72, 75, 29, 29];
@@ -143,7 +320,7 @@ export declare const IDL: {
         }];
     }, {
         readonly name: "finalize_session";
-        readonly docs: readonly ["Finalize a session after the DeFi action completes.", "Closes the SessionAuthority PDA and records the transaction in the audit log.", "Can be called by the agent or permissionlessly (for cleanup of expired sessions)."];
+        readonly docs: readonly ["Finalize a session after the DeFi action completes.", "Revokes token delegation, collects fees, closes the SessionAuthority PDA,", "and records the transaction in the audit log.", "Can be called by the agent or permissionlessly (for cleanup of expired sessions)."];
         readonly discriminator: readonly [34, 148, 144, 47, 37, 130, 206, 161];
         readonly accounts: readonly [{
             readonly name: "payer";
@@ -192,7 +369,7 @@ export declare const IDL: {
             };
         }, {
             readonly name: "session";
-            readonly docs: readonly ["Session rent is returned to the session's agent (who paid for it),", "not the arbitrary payer, to prevent rent theft."];
+            readonly docs: readonly ["Session rent is returned to the session's agent (who paid for it),", "not the arbitrary payer, to prevent rent theft.", "Seeds include token_mint for per-token concurrent sessions."];
             readonly writable: true;
             readonly pda: {
                 readonly seeds: readonly [{
@@ -205,6 +382,10 @@ export declare const IDL: {
                     readonly kind: "account";
                     readonly path: "session.agent";
                     readonly account: "SessionAuthority";
+                }, {
+                    readonly kind: "account";
+                    readonly path: "session.authorized_token";
+                    readonly account: "SessionAuthority";
                 }];
             };
         }, {
@@ -213,7 +394,7 @@ export declare const IDL: {
             readonly writable: true;
         }, {
             readonly name: "vault_token_account";
-            readonly docs: readonly ["Vault's PDA token account for the session's token (fee source)"];
+            readonly docs: readonly ["Vault's PDA token account for the session's token (fee source + delegation revocation)"];
             readonly writable: true;
             readonly optional: true;
         }, {
@@ -239,7 +420,7 @@ export declare const IDL: {
         }];
     }, {
         readonly name: "initialize_vault";
-        readonly docs: readonly ["Initialize a new agent vault with policy configuration.", "Only the owner can call this. Creates vault PDA, policy PDA, and spend tracker PDA."];
+        readonly docs: readonly ["Initialize a new agent vault with policy configuration.", "Only the owner can call this. Creates vault PDA, policy PDA, and spend tracker PDA.", "`tracker_tier`: 0 = Standard (200 entries), 1 = Pro (500), 2 = Max (1000)."];
         readonly discriminator: readonly [48, 191, 163, 44, 71, 129, 63, 164];
         readonly accounts: readonly [{
             readonly name: "owner";
@@ -295,15 +476,19 @@ export declare const IDL: {
             readonly name: "vault_id";
             readonly type: "u64";
         }, {
-            readonly name: "daily_spending_cap";
+            readonly name: "daily_spending_cap_usd";
             readonly type: "u64";
         }, {
-            readonly name: "max_transaction_size";
+            readonly name: "max_transaction_size_usd";
             readonly type: "u64";
         }, {
             readonly name: "allowed_tokens";
             readonly type: {
-                readonly vec: "pubkey";
+                readonly vec: {
+                    readonly defined: {
+                        readonly name: "AllowedToken";
+                    };
+                };
             };
         }, {
             readonly name: "allowed_protocols";
@@ -314,11 +499,135 @@ export declare const IDL: {
             readonly name: "max_leverage_bps";
             readonly type: "u16";
         }, {
-            readonly name: "max_concurrent_positions";
-            readonly type: "u8";
+            readonly name: "max_concurrent_positions";
+            readonly type: "u8";
+        }, {
+            readonly name: "developer_fee_rate";
+            readonly type: "u16";
+        }, {
+            readonly name: "timelock_duration";
+            readonly type: "u64";
+        }, {
+            readonly name: "allowed_destinations";
+            readonly type: {
+                readonly vec: "pubkey";
+            };
+        }, {
+            readonly name: "tracker_tier";
+            readonly type: "u8";
+        }];
+    }, {
+        readonly name: "queue_policy_update";
+        readonly docs: readonly ["Queue a policy update when timelock is active.", "Creates a PendingPolicyUpdate PDA that becomes executable after", "the timelock period expires."];
+        readonly discriminator: readonly [149, 18, 76, 197, 179, 193, 91, 77];
+        readonly accounts: readonly [{
+            readonly name: "owner";
+            readonly writable: true;
+            readonly signer: true;
+            readonly relations: readonly ["vault"];
+        }, {
+            readonly name: "vault";
+            readonly pda: {
+                readonly seeds: readonly [{
+                    readonly kind: "const";
+                    readonly value: readonly [118, 97, 117, 108, 116];
+                }, {
+                    readonly kind: "account";
+                    readonly path: "owner";
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault.vault_id";
+                    readonly account: "AgentVault";
+                }];
+            };
+            readonly relations: readonly ["policy"];
+        }, {
+            readonly name: "policy";
+            readonly pda: {
+                readonly seeds: readonly [{
+                    readonly kind: "const";
+                    readonly value: readonly [112, 111, 108, 105, 99, 121];
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault";
+                }];
+            };
+        }, {
+            readonly name: "pending_policy";
+            readonly writable: true;
+            readonly pda: {
+                readonly seeds: readonly [{
+                    readonly kind: "const";
+                    readonly value: readonly [112, 101, 110, 100, 105, 110, 103, 95, 112, 111, 108, 105, 99, 121];
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault";
+                }];
+            };
+        }, {
+            readonly name: "system_program";
+            readonly address: "11111111111111111111111111111111";
+        }];
+        readonly args: readonly [{
+            readonly name: "daily_spending_cap_usd";
+            readonly type: {
+                readonly option: "u64";
+            };
+        }, {
+            readonly name: "max_transaction_amount_usd";
+            readonly type: {
+                readonly option: "u64";
+            };
+        }, {
+            readonly name: "allowed_tokens";
+            readonly type: {
+                readonly option: {
+                    readonly vec: {
+                        readonly defined: {
+                            readonly name: "AllowedToken";
+                        };
+                    };
+                };
+            };
+        }, {
+            readonly name: "allowed_protocols";
+            readonly type: {
+                readonly option: {
+                    readonly vec: "pubkey";
+                };
+            };
+        }, {
+            readonly name: "max_leverage_bps";
+            readonly type: {
+                readonly option: "u16";
+            };
+        }, {
+            readonly name: "can_open_positions";
+            readonly type: {
+                readonly option: "bool";
+            };
+        }, {
+            readonly name: "max_concurrent_positions";
+            readonly type: {
+                readonly option: "u8";
+            };
+        }, {
+            readonly name: "developer_fee_rate";
+            readonly type: {
+                readonly option: "u16";
+            };
+        }, {
+            readonly name: "timelock_duration";
+            readonly type: {
+                readonly option: "u64";
+            };
         }, {
-            readonly name: "developer_fee_rate";
-            readonly type: "u16";
+            readonly name: "allowed_destinations";
+            readonly type: {
+                readonly option: {
+                    readonly vec: "pubkey";
+                };
+            };
         }];
     }, {
         readonly name: "reactivate_vault";
@@ -408,7 +717,7 @@ export declare const IDL: {
         readonly args: readonly [];
     }, {
         readonly name: "update_policy";
-        readonly docs: readonly ["Update the policy configuration for a vault.", "Only the owner can call this. Cannot be called by the agent."];
+        readonly docs: readonly ["Update the policy configuration for a vault.", "Only the owner can call this. Cannot be called by the agent.", "Blocked when timelock_duration > 0 — use queue_policy_update instead."];
         readonly discriminator: readonly [212, 245, 246, 7, 163, 151, 18, 57];
         readonly accounts: readonly [{
             readonly name: "owner";
@@ -429,7 +738,7 @@ export declare const IDL: {
                     readonly account: "AgentVault";
                 }];
             };
-            readonly relations: readonly ["policy"];
+            readonly relations: readonly ["policy", "tracker"];
         }, {
             readonly name: "policy";
             readonly writable: true;
@@ -442,14 +751,26 @@ export declare const IDL: {
                     readonly path: "vault";
                 }];
             };
+        }, {
+            readonly name: "tracker";
+            readonly writable: true;
+            readonly pda: {
+                readonly seeds: readonly [{
+                    readonly kind: "const";
+                    readonly value: readonly [116, 114, 97, 99, 107, 101, 114];
+                }, {
+                    readonly kind: "account";
+                    readonly path: "vault";
+                }];
+            };
         }];
         readonly args: readonly [{
-            readonly name: "daily_spending_cap";
+            readonly name: "daily_spending_cap_usd";
             readonly type: {
                 readonly option: "u64";
             };
         }, {
-            readonly name: "max_transaction_size";
+            readonly name: "max_transaction_size_usd";
             readonly type: {
                 readonly option: "u64";
             };
@@ -457,7 +778,11 @@ export declare const IDL: {
             readonly name: "allowed_tokens";
             readonly type: {
                 readonly option: {
-                    readonly vec: "pubkey";
+                    readonly vec: {
+                        readonly defined: {
+                            readonly name: "AllowedToken";
+                        };
+                    };
                 };
             };
         }, {
@@ -487,10 +812,22 @@ export declare const IDL: {
             readonly type: {
                 readonly option: "u16";
             };
+        }, {
+            readonly name: "timelock_duration";
+            readonly type: {
+                readonly option: "u64";
+            };
+        }, {
+            readonly name: "allowed_destinations";
+            readonly type: {
+                readonly option: {
+                    readonly vec: "pubkey";
+                };
+            };
         }];
     }, {
         readonly name: "validate_and_authorize";
-        readonly docs: readonly ["Core permission check. Called by the agent before a DeFi action.", "Validates the action against all policy constraints.", "If approved, creates a SessionAuthority PDA and updates spend tracking.", "If denied, reverts the entire transaction (including subsequent DeFi instructions)."];
+        readonly docs: readonly ["Core permission check. Called by the agent before a DeFi action.", "Validates the action against all policy constraints (USD caps, per-token caps).", "If approved, creates a SessionAuthority PDA, delegates tokens to agent,", "and updates spend tracking.", "If denied, reverts the entire transaction (including subsequent DeFi instructions)."];
         readonly discriminator: readonly [22, 183, 48, 222, 218, 11, 197, 152];
         readonly accounts: readonly [{
             readonly name: "agent";
@@ -539,7 +876,7 @@ export declare const IDL: {
             };
         }, {
             readonly name: "session";
-            readonly docs: readonly ["Ephemeral session PDA — `init` ensures no double-authorization"];
+            readonly docs: readonly ["Ephemeral session PDA — `init` ensures no double-authorization.", "Seeds include token_mint for per-token concurrent sessions."];
             readonly writable: true;
             readonly pda: {
                 readonly seeds: readonly [{
@@ -551,8 +888,21 @@ export declare const IDL: {
                 }, {
                     readonly kind: "account";
                     readonly path: "agent";
+                }, {
+                    readonly kind: "arg";
+                    readonly path: "token_mint";
                 }];
             };
+        }, {
+            readonly name: "vault_token_account";
+            readonly docs: readonly ["Vault's PDA-owned token account for the spend token (delegation source)"];
+            readonly writable: true;
+        }, {
+            readonly name: "token_mint_account";
+            readonly docs: readonly ["The token mint being spent"];
+        }, {
+            readonly name: "token_program";
+            readonly address: "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";
         }, {
             readonly name: "system_program";
             readonly address: "11111111111111111111111111111111";
@@ -657,6 +1007,9 @@ export declare const IDL: {
     readonly accounts: readonly [{
         readonly name: "AgentVault";
         readonly discriminator: readonly [232, 220, 237, 164, 157, 9, 215, 194];
+    }, {
+        readonly name: "PendingPolicyUpdate";
+        readonly discriminator: readonly [77, 255, 2, 51, 79, 237, 183, 239];
     }, {
         readonly name: "PolicyConfig";
         readonly discriminator: readonly [219, 7, 79, 84, 175, 51, 148, 146];
@@ -679,6 +1032,12 @@ export declare const IDL: {
     }, {
         readonly name: "AgentRevoked";
         readonly discriminator: readonly [12, 251, 249, 166, 122, 83, 162, 116];
+    }, {
+        readonly name: "AgentTransferExecuted";
+        readonly discriminator: readonly [88, 52, 117, 69, 112, 152, 167, 40];
+    }, {
+        readonly name: "DelegationRevoked";
+        readonly discriminator: readonly [59, 158, 142, 49, 164, 116, 220, 8];
     }, {
         readonly name: "FeesCollected";
         readonly discriminator: readonly [233, 23, 117, 225, 107, 178, 254, 8];
@@ -688,6 +1047,15 @@ export declare const IDL: {
     }, {
         readonly name: "FundsWithdrawn";
         readonly discriminator: readonly [56, 130, 230, 154, 35, 92, 11, 118];
+    }, {
+        readonly name: "PolicyChangeApplied";
+        readonly discriminator: readonly [104, 89, 5, 100, 180, 202, 52, 73];
+    }, {
+        readonly name: "PolicyChangeCancelled";
+        readonly discriminator: readonly [200, 158, 226, 255, 25, 211, 30, 151];
+    }, {
+        readonly name: "PolicyChangeQueued";
+        readonly discriminator: readonly [73, 231, 182, 136, 141, 120, 32, 79];
     }, {
         readonly name: "PolicyUpdated";
         readonly discriminator: readonly [225, 112, 112, 67, 95, 236, 245, 161];
@@ -816,6 +1184,78 @@ export declare const IDL: {
         readonly code: 6027;
         readonly name: "Overflow";
         readonly msg: "Arithmetic overflow";
+    }, {
+        readonly code: 6028;
+        readonly name: "DelegationFailed";
+        readonly msg: "Token delegation approval failed";
+    }, {
+        readonly code: 6029;
+        readonly name: "RevocationFailed";
+        readonly msg: "Token delegation revocation failed";
+    }, {
+        readonly code: 6030;
+        readonly name: "OracleFeedStale";
+        readonly msg: "Oracle feed value is too stale";
+    }, {
+        readonly code: 6031;
+        readonly name: "OracleFeedInvalid";
+        readonly msg: "Cannot parse oracle feed data";
+    }, {
+        readonly code: 6032;
+        readonly name: "TokenSpendBlocked";
+        readonly msg: "Unpriced token cannot be spent (receive-only)";
+    }, {
+        readonly code: 6033;
+        readonly name: "InvalidTokenAccount";
+        readonly msg: "Token account does not belong to vault or has wrong mint";
+    }, {
+        readonly code: 6034;
+        readonly name: "OracleAccountMissing";
+        readonly msg: "Oracle-priced token requires feed account in remaining_accounts";
+    }, {
+        readonly code: 6035;
+        readonly name: "PerTokenCapExceeded";
+        readonly msg: "Per-token daily spending cap would be exceeded";
+    }, {
+        readonly code: 6036;
+        readonly name: "PerTokenTxLimitExceeded";
+        readonly msg: "Per-token single transaction limit exceeded";
+    }, {
+        readonly code: 6037;
+        readonly name: "OracleConfidenceTooWide";
+        readonly msg: "Oracle price confidence interval too wide";
+    }, {
+        readonly code: 6038;
+        readonly name: "OracleUnsupportedType";
+        readonly msg: "Oracle account owner is not a recognized oracle program";
+    }, {
+        readonly code: 6039;
+        readonly name: "OracleNotVerified";
+        readonly msg: "Pyth price update not fully verified by Wormhole";
+    }, {
+        readonly code: 6040;
+        readonly name: "TimelockNotExpired";
+        readonly msg: "Timelock period has not expired yet";
+    }, {
+        readonly code: 6041;
+        readonly name: "TimelockActive";
+        readonly msg: "Vault has timelock active — use queue_policy_update instead";
+    }, {
+        readonly code: 6042;
+        readonly name: "NoTimelockConfigured";
+        readonly msg: "No timelock configured on this vault";
+    }, {
+        readonly code: 6043;
+        readonly name: "DestinationNotAllowed";
+        readonly msg: "Destination not in allowed list";
+    }, {
+        readonly code: 6044;
+        readonly name: "TooManyDestinations";
+        readonly msg: "Too many destinations (max 10)";
+    }, {
+        readonly code: 6045;
+        readonly name: "InvalidTrackerTier";
+        readonly msg: "Invalid tracker tier (must be 0, 1, or 2)";
     }];
     readonly types: readonly [{
         readonly name: "ActionAuthorized";
@@ -840,15 +1280,31 @@ export declare const IDL: {
             }, {
                 readonly name: "amount";
                 readonly type: "u64";
+            }, {
+                readonly name: "usd_amount";
+                readonly type: "u64";
             }, {
                 readonly name: "protocol";
                 readonly type: "pubkey";
             }, {
-                readonly name: "rolling_spend_after";
+                readonly name: "rolling_spend_usd_after";
                 readonly type: "u64";
             }, {
-                readonly name: "daily_cap";
+                readonly name: "daily_cap_usd";
                 readonly type: "u64";
+            }, {
+                readonly name: "delegated";
+                readonly type: "bool";
+            }, {
+                readonly name: "oracle_price";
+                readonly type: {
+                    readonly option: "i128";
+                };
+            }, {
+                readonly name: "oracle_source";
+                readonly type: {
+                    readonly option: "u8";
+                };
             }, {
                 readonly name: "timestamp";
                 readonly type: "i64";
@@ -891,6 +1347,8 @@ export declare const IDL: {
                 readonly name: "Deposit";
             }, {
                 readonly name: "Withdraw";
+            }, {
+                readonly name: "Transfer";
             }];
         };
     }, {
@@ -923,6 +1381,24 @@ export declare const IDL: {
                 readonly type: "i64";
             }];
         };
+    }, {
+        readonly name: "AgentTransferExecuted";
+        readonly type: {
+            readonly kind: "struct";
+            readonly fields: readonly [{
+                readonly name: "vault";
+                readonly type: "pubkey";
+            }, {
+                readonly name: "destination";
+                readonly type: "pubkey";
+            }, {
+                readonly name: "amount";
+                readonly type: "u64";
+            }, {
+                readonly name: "mint";
+                readonly type: "pubkey";
+            }];
+        };
     }, {
         readonly name: "AgentVault";
         readonly type: {
@@ -937,7 +1413,7 @@ export declare const IDL: {
                 readonly type: "pubkey";
             }, {
                 readonly name: "fee_destination";
-                readonly docs: readonly ["Developer fee destination — the wallet that receives developer fees", "on every finalized transaction. Set at vault creation, immutable after", "initialization. Protocol fees go to PROTOCOL_TREASURY separately."];
+                readonly docs: readonly ["Developer fee destination — the wallet that receives developer fees", "on every finalized transaction. IMMUTABLE after initialization — only", "`initialize_vault` writes this field. This prevents a compromised owner", "key from redirecting fees. Protocol fees go to PROTOCOL_TREASURY separately."];
                 readonly type: "pubkey";
             }, {
                 readonly name: "vault_id";
@@ -975,6 +1451,56 @@ export declare const IDL: {
                 readonly name: "total_fees_collected";
                 readonly docs: readonly ["Cumulative developer fees collected from this vault (token base units).", "Protocol fees are tracked separately via events."];
                 readonly type: "u64";
+            }, {
+                readonly name: "tracker_tier";
+                readonly docs: readonly ["Tracker capacity tier chosen at vault creation"];
+                readonly type: {
+                    readonly defined: {
+                        readonly name: "TrackerTier";
+                    };
+                };
+            }];
+        };
+    }, {
+        readonly name: "AllowedToken";
+        readonly docs: readonly ["Per-token configuration including oracle feed and per-token caps.", "Replaces the old `Vec<Pubkey>` allowed_tokens with richer metadata.", "", "Oracle feed classification:", "- `Pubkey::default()` = stablecoin (1:1 USD, no oracle needed)", "- `UNPRICED_SENTINEL` ([0xFF; 32]) = unpriced token (receive-only)", "- Any other pubkey = Oracle feed account (Pyth PriceUpdateV2 or Switchboard PullFeed)"];
+        readonly type: {
+            readonly kind: "struct";
+            readonly fields: readonly [{
+                readonly name: "mint";
+                readonly docs: readonly ["Token mint address"];
+                readonly type: "pubkey";
+            }, {
+                readonly name: "oracle_feed";
+                readonly docs: readonly ["Oracle feed account (Pyth PriceUpdateV2 or Switchboard PullFeed) for USD pricing.", "`Pubkey::default()` = stablecoin (1:1 USD).", "`UNPRICED_SENTINEL` = unpriced (receive-only, cannot be spent)."];
+                readonly type: "pubkey";
+            }, {
+                readonly name: "decimals";
+                readonly docs: readonly ["Token decimals (e.g., 6 for USDC, 9 for SOL)"];
+                readonly type: "u8";
+            }, {
+                readonly name: "daily_cap_base";
+                readonly docs: readonly ["Per-token daily cap in base units (0 = no per-token limit,", "only the aggregate USD cap applies)"];
+                readonly type: "u64";
+            }, {
+                readonly name: "max_tx_base";
+                readonly docs: readonly ["Per-token max single transaction in base units", "(0 = no per-token tx limit, only USD tx limit applies)"];
+                readonly type: "u64";
+            }];
+        };
+    }, {
+        readonly name: "DelegationRevoked";
+        readonly type: {
+            readonly kind: "struct";
+            readonly fields: readonly [{
+                readonly name: "vault";
+                readonly type: "pubkey";
+            }, {
+                readonly name: "token_account";
+                readonly type: "pubkey";
+            }, {
+                readonly name: "timestamp";
+                readonly type: "i64";
             }];
         };
     }, {
@@ -1055,6 +1581,122 @@ export declare const IDL: {
                 readonly type: "i64";
             }];
         };
+    }, {
+        readonly name: "PendingPolicyUpdate";
+        readonly docs: readonly ["Queued policy update that becomes executable after a timelock period.", "Created by `queue_policy_update`, applied by `apply_pending_policy`,", "or cancelled by `cancel_pending_policy`.", "", "PDA seeds: `[b\"pending_policy\", vault.key().as_ref()]`"];
+        readonly type: {
+            readonly kind: "struct";
+            readonly fields: readonly [{
+                readonly name: "vault";
+                readonly docs: readonly ["Associated vault pubkey"];
+                readonly type: "pubkey";
+            }, {
+                readonly name: "queued_at";
+                readonly docs: readonly ["Unix timestamp when this update was queued"];
+                readonly type: "i64";
+            }, {
+                readonly name: "executes_at";
+                readonly docs: readonly ["Unix timestamp when this update becomes executable"];
+                readonly type: "i64";
+            }, {
+                readonly name: "daily_spending_cap_usd";
+                readonly type: {
+                    readonly option: "u64";
+                };
+            }, {
+                readonly name: "max_transaction_amount_usd";
+                readonly type: {
+                    readonly option: "u64";
+                };
+            }, {
+                readonly name: "allowed_tokens";
+                readonly type: {
+                    readonly option: {
+                        readonly vec: {
+                            readonly defined: {
+                                readonly name: "AllowedToken";
+                            };
+                        };
+                    };
+                };
+            }, {
+                readonly name: "allowed_protocols";
+                readonly type: {
+                    readonly option: {
+                        readonly vec: "pubkey";
+                    };
+                };
+            }, {
+                readonly name: "max_leverage_bps";
+                readonly type: {
+                    readonly option: "u16";
+                };
+            }, {
+                readonly name: "can_open_positions";
+                readonly type: {
+                    readonly option: "bool";
+                };
+            }, {
+                readonly name: "max_concurrent_positions";
+                readonly type: {
+                    readonly option: "u8";
+                };
+            }, {
+                readonly name: "developer_fee_rate";
+                readonly type: {
+                    readonly option: "u16";
+                };
+            }, {
+                readonly name: "timelock_duration";
+                readonly type: {
+                    readonly option: "u64";
+                };
+            }, {
+                readonly name: "allowed_destinations";
+                readonly type: {
+                    readonly option: {
+                        readonly vec: "pubkey";
+                    };
+                };
+            }, {
+                readonly name: "bump";
+                readonly docs: readonly ["Bump seed for PDA"];
+                readonly type: "u8";
+            }];
+        };
+    }, {
+        readonly name: "PolicyChangeApplied";
+        readonly type: {
+            readonly kind: "struct";
+            readonly fields: readonly [{
+                readonly name: "vault";
+                readonly type: "pubkey";
+            }, {
+                readonly name: "applied_at";
+                readonly type: "i64";
+            }];
+        };
+    }, {
+        readonly name: "PolicyChangeCancelled";
+        readonly type: {
+            readonly kind: "struct";
+            readonly fields: readonly [{
+                readonly name: "vault";
+                readonly type: "pubkey";
+            }];
+        };
+    }, {
+        readonly name: "PolicyChangeQueued";
+        readonly type: {
+            readonly kind: "struct";
+            readonly fields: readonly [{
+                readonly name: "vault";
+                readonly type: "pubkey";
+            }, {
+                readonly name: "executes_at";
+                readonly type: "i64";
+            }];
+        };
     }, {
         readonly name: "PolicyConfig";
         readonly type: {
@@ -1064,18 +1706,22 @@ export declare const IDL: {
                 readonly docs: readonly ["Associated vault pubkey"];
                 readonly type: "pubkey";
             }, {
-                readonly name: "daily_spending_cap";
-                readonly docs: readonly ["Maximum spend per rolling 24h period (in token base units)"];
+                readonly name: "daily_spending_cap_usd";
+                readonly docs: readonly ["Maximum aggregate spend per rolling 24h period in USD (6 decimals).", "$500 = 500_000_000. This is the primary spending cap."];
                 readonly type: "u64";
             }, {
-                readonly name: "max_transaction_size";
-                readonly docs: readonly ["Maximum single transaction size (in token base units)"];
+                readonly name: "max_transaction_size_usd";
+                readonly docs: readonly ["Maximum single transaction size in USD (6 decimals)."];
                 readonly type: "u64";
             }, {
                 readonly name: "allowed_tokens";
-                readonly docs: readonly ["Allowed token mints the agent can interact with", "Bounded to MAX_ALLOWED_TOKENS entries"];
+                readonly docs: readonly ["Allowed token mints with oracle feeds and per-token caps.", "Bounded to MAX_ALLOWED_TOKENS entries."];
                 readonly type: {
-                    readonly vec: "pubkey";
+                    readonly vec: {
+                        readonly defined: {
+                            readonly name: "AllowedToken";
+                        };
+                    };
                 };
             }, {
                 readonly name: "allowed_protocols";
@@ -1099,6 +1745,16 @@ export declare const IDL: {
                 readonly name: "developer_fee_rate";
                 readonly docs: readonly ["Developer fee rate (rate / 1,000,000). Applied to every finalized", "transaction. Fee deducted from vault, transferred to vault's", "fee_destination. Max MAX_DEVELOPER_FEE_RATE (50 = 0.5 BPS).", "Set to 0 for no developer fee. Protocol fee is always applied", "separately at PROTOCOL_FEE_RATE."];
                 readonly type: "u16";
+            }, {
+                readonly name: "timelock_duration";
+                readonly docs: readonly ["Timelock duration in seconds for policy changes. 0 = no timelock", "(immediate updates allowed). When > 0, policy changes must go", "through queue_policy_update → apply_pending_policy."];
+                readonly type: "u64";
+            }, {
+                readonly name: "allowed_destinations";
+                readonly docs: readonly ["Allowed destination addresses for agent transfers.", "Empty = any destination allowed. Bounded to MAX_ALLOWED_DESTINATIONS."];
+                readonly type: {
+                    readonly vec: "pubkey";
+                };
             }, {
                 readonly name: "bump";
                 readonly docs: readonly ["Bump seed for PDA"];
@@ -1113,10 +1769,10 @@ export declare const IDL: {
                 readonly name: "vault";
                 readonly type: "pubkey";
             }, {
-                readonly name: "daily_cap";
+                readonly name: "daily_cap_usd";
                 readonly type: "u64";
             }, {
-                readonly name: "max_transaction_size";
+                readonly name: "max_transaction_size_usd";
                 readonly type: "u64";
             }, {
                 readonly name: "allowed_tokens_count";
@@ -1173,6 +1829,14 @@ export declare const IDL: {
                 readonly name: "expires_at_slot";
                 readonly docs: readonly ["Slot-based expiry: session is valid until this slot"];
                 readonly type: "u64";
+            }, {
+                readonly name: "delegated";
+                readonly docs: readonly ["Whether token delegation was set up (approve CPI)"];
+                readonly type: "bool";
+            }, {
+                readonly name: "delegation_token_account";
+                readonly docs: readonly ["The vault's token account that was delegated to the agent", "(only meaningful when delegated == true)"];
+                readonly type: "pubkey";
             }, {
                 readonly name: "bump";
                 readonly docs: readonly ["Bump seed for PDA"];
@@ -1192,6 +1856,9 @@ export declare const IDL: {
             }, {
                 readonly name: "success";
                 readonly type: "bool";
+            }, {
+                readonly name: "is_expired";
+                readonly type: "bool";
             }, {
                 readonly name: "timestamp";
                 readonly type: "i64";
@@ -1202,10 +1869,16 @@ export declare const IDL: {
         readonly type: {
             readonly kind: "struct";
             readonly fields: readonly [{
-                readonly name: "token_mint";
-                readonly type: "pubkey";
+                readonly name: "token_index";
+                readonly docs: readonly ["Index into PolicyConfig.allowed_tokens[] (0-9).", "Compact representation — avoids storing full 32-byte Pubkey per entry.", "Invalidated when token list changes (rolling_spends is cleared)."];
+                readonly type: "u8";
             }, {
-                readonly name: "amount_spent";
+                readonly name: "usd_amount";
+                readonly docs: readonly ["USD value of this spend (6 decimals, e.g., $500 = 500_000_000)"];
+                readonly type: "u64";
+            }, {
+                readonly name: "base_amount";
+                readonly docs: readonly ["Original amount in token base units (for per-token cap checks)"];
                 readonly type: "u64";
             }, {
                 readonly name: "timestamp";
@@ -1220,9 +1893,21 @@ export declare const IDL: {
                 readonly name: "vault";
                 readonly docs: readonly ["Associated vault pubkey"];
                 readonly type: "pubkey";
+            }, {
+                readonly name: "tracker_tier";
+                readonly docs: readonly ["Tracker capacity tier (Standard/Pro/Max)"];
+                readonly type: {
+                    readonly defined: {
+                        readonly name: "TrackerTier";
+                    };
+                };
+            }, {
+                readonly name: "max_spend_entries";
+                readonly docs: readonly ["Maximum spend entries for this tracker (derived from tier at init)"];
+                readonly type: "u32";
             }, {
                 readonly name: "rolling_spends";
-                readonly docs: readonly ["Rolling spend entries: (token_mint, amount, timestamp)", "Entries older than ROLLING_WINDOW_SECONDS are pruned on each access"];
+                readonly docs: readonly ["Rolling spend entries: (token_mint, usd_amount, base_amount, timestamp)", "Entries older than ROLLING_WINDOW_SECONDS are pruned on each access"];
                 readonly type: {
                     readonly vec: {
                         readonly defined: {
@@ -1246,6 +1931,19 @@ export declare const IDL: {
                 readonly type: "u8";
             }];
         };
+    }, {
+        readonly name: "TrackerTier";
+        readonly docs: readonly ["Tracker capacity tiers — chosen at vault creation, determines", "max rolling spend entries and SpendTracker account size."];
+        readonly type: {
+            readonly kind: "enum";
+            readonly variants: readonly [{
+                readonly name: "Standard";
+            }, {
+                readonly name: "Pro";
+            }, {
+                readonly name: "Max";
+            }];
+        };
     }, {
         readonly name: "TransactionRecord";
         readonly type: {