@agent-shield/sdk 0.5.1 → 0.5.4

package/dist/idl.d.ts

@@ -17,8 +17,7 @@ export type AgentShield = {
             name: "agentTransfer";
             docs: [
                 "Transfer tokens from the vault to an allowed destination.",
-                "Only the agent can call this. Respects destination allowlist,",
-                "spending caps, and per-token limits."
+                "Only the agent can call this."
             ];
             discriminator: [199, 111, 151, 49, 124, 13, 150, 44];
             accounts: [
@@ -48,7 +47,7 @@ export type AgentShield = {
                             }
                         ];
                     };
-                    relations: ["policy", "tracker"];
+                    relations: ["policy"];
                 },
                 {
                     name: "policy";
@@ -67,6 +66,7 @@ export type AgentShield = {
                 },
                 {
                     name: "tracker";
+                    docs: ["Zero-copy SpendTracker"];
                     writable: true;
                     pda: {
                         seeds: [
@@ -81,23 +81,51 @@ export type AgentShield = {
                         ];
                     };
                 },
+                {
+                    name: "oracleRegistry";
+                    docs: ["Protocol-level oracle registry"];
+                    pda: {
+                        seeds: [
+                            {
+                                kind: "const";
+                                value: [
+                                    111,
+                                    114,
+                                    97,
+                                    99,
+                                    108,
+                                    101,
+                                    95,
+                                    114,
+                                    101,
+                                    103,
+                                    105,
+                                    115,
+                                    116,
+                                    114,
+                                    121
+                                ];
+                            }
+                        ];
+                    };
+                },
                 {
                     name: "vaultTokenAccount";
                     docs: ["Vault's PDA-owned token account (source)"];
                     writable: true;
                 },
+                {
+                    name: "tokenMintAccount";
+                    docs: ["Token mint account for decimals validation"];
+                },
                 {
                     name: "destinationTokenAccount";
-                    docs: [
-                        "Destination token account (must be in allowed destinations if configured)"
-                    ];
+                    docs: ["Destination token account (must be in allowed destinations)"];
                     writable: true;
                 },
                 {
                     name: "feeDestinationTokenAccount";
-                    docs: [
-                        "Developer fee destination token account — must match vault.fee_destination"
-                    ];
+                    docs: ["Developer fee destination token account"];
                     writable: true;
                     optional: true;
                 },
@@ -121,10 +149,7 @@ export type AgentShield = {
         },
         {
             name: "applyPendingPolicy";
-            docs: [
-                "Apply a queued policy update after the timelock period has expired.",
-                "Closes the PendingPolicyUpdate PDA and returns rent to the owner."
-            ];
+            docs: ["Apply a queued policy update after the timelock expires."];
             discriminator: [114, 212, 19, 227, 89, 199, 74, 62];
             accounts: [
                 {
@@ -152,7 +177,7 @@ export type AgentShield = {
                             }
                         ];
                     };
-                    relations: ["policy", "tracker", "pendingPolicy"];
+                    relations: ["policy", "pendingPolicy"];
                 },
                 {
                     name: "policy";
@@ -170,22 +195,6 @@ export type AgentShield = {
                         ];
                     };
                 },
-                {
-                    name: "tracker";
-                    writable: true;
-                    pda: {
-                        seeds: [
-                            {
-                                kind: "const";
-                                value: [116, 114, 97, 99, 107, 101, 114];
-                            },
-                            {
-                                kind: "account";
-                                path: "vault";
-                            }
-                        ];
-                    };
-                },
                 {
                     name: "pendingPolicy";
                     writable: true;
@@ -222,10 +231,7 @@ export type AgentShield = {
         },
         {
             name: "cancelPendingPolicy";
-            docs: [
-                "Cancel a queued policy update. Closes the PendingPolicyUpdate PDA",
-                "and returns rent to the owner."
-            ];
+            docs: ["Cancel a queued policy update."];
             discriminator: [153, 36, 104, 200, 50, 94, 207, 33];
             accounts: [
                 {
@@ -291,10 +297,7 @@ export type AgentShield = {
         },
         {
             name: "closeVault";
-            docs: [
-                "Close the vault entirely. Withdraws all remaining funds and closes all PDAs.",
-                "Reclaims rent. Vault must have no open positions. Only the owner can call this."
-            ];
+            docs: ["Close the vault entirely. Reclaims rent from all PDAs."];
             discriminator: [141, 103, 17, 126, 72, 75, 29, 29];
             accounts: [
                 {
@@ -323,7 +326,7 @@ export type AgentShield = {
                             }
                         ];
                     };
-                    relations: ["policy", "tracker"];
+                    relations: ["policy"];
                 },
                 {
                     name: "policy";
@@ -343,6 +346,7 @@ export type AgentShield = {
                 },
                 {
                     name: "tracker";
+                    docs: ["Zero-copy SpendTracker — close returns rent to owner"];
                     writable: true;
                     pda: {
                         seeds: [
@@ -607,9 +611,7 @@ export type AgentShield = {
             name: "finalizeSession";
             docs: [
                 "Finalize a session after the DeFi action completes.",
-                "Revokes token delegation, collects fees, closes the SessionAuthority PDA,",
-                "and records the transaction in the audit log.",
-                "Can be called by the agent or permissionlessly (for cleanup of expired sessions)."
+                "Revokes delegation, collects fees, closes the SessionAuthority PDA."
             ];
             discriminator: [34, 148, 144, 47, 37, 130, 206, 161];
             accounts: [
@@ -639,7 +641,7 @@ export type AgentShield = {
                             }
                         ];
                     };
-                    relations: ["policy", "tracker", "session"];
+                    relations: ["policy", "session"];
                 },
                 {
                     name: "policy";
@@ -656,27 +658,10 @@ export type AgentShield = {
                         ];
                     };
                 },
-                {
-                    name: "tracker";
-                    writable: true;
-                    pda: {
-                        seeds: [
-                            {
-                                kind: "const";
-                                value: [116, 114, 97, 99, 107, 101, 114];
-                            },
-                            {
-                                kind: "account";
-                                path: "vault";
-                            }
-                        ];
-                    };
-                },
                 {
                     name: "session";
                     docs: [
-                        "Session rent is returned to the session's agent (who paid for it),",
-                        "not the arbitrary payer, to prevent rent theft.",
+                        "Session rent is returned to the session's agent (who paid for it).",
                         "Seeds include token_mint for per-token concurrent sessions."
                     ];
                     writable: true;
@@ -705,30 +690,23 @@ export type AgentShield = {
                 },
                 {
                     name: "sessionRentRecipient";
-                    docs: ["Validated in handler to equal session.agent."];
                     writable: true;
                 },
                 {
                     name: "vaultTokenAccount";
-                    docs: [
-                        "Vault's PDA token account for the session's token (fee source + delegation revocation)"
-                    ];
+                    docs: ["Vault's PDA token account for the session's token"];
                     writable: true;
                     optional: true;
                 },
                 {
                     name: "feeDestinationTokenAccount";
-                    docs: [
-                        "Developer fee destination token account — must match vault.fee_destination"
-                    ];
+                    docs: ["Developer fee destination token account"];
                     writable: true;
                     optional: true;
                 },
                 {
                     name: "protocolTreasuryTokenAccount";
-                    docs: [
-                        "Protocol treasury token account — must be owned by PROTOCOL_TREASURY"
-                    ];
+                    docs: ["Protocol treasury token account"];
                     writable: true;
                     optional: true;
                 },
@@ -748,12 +726,71 @@ export type AgentShield = {
                 }
             ];
         },
+        {
+            name: "initializeOracleRegistry";
+            docs: [
+                "Initialize the protocol-level oracle registry.",
+                "Only called once. The authority becomes the registry admin."
+            ];
+            discriminator: [190, 92, 228, 114, 56, 71, 101, 220];
+            accounts: [
+                {
+                    name: "authority";
+                    writable: true;
+                    signer: true;
+                },
+                {
+                    name: "oracleRegistry";
+                    writable: true;
+                    pda: {
+                        seeds: [
+                            {
+                                kind: "const";
+                                value: [
+                                    111,
+                                    114,
+                                    97,
+                                    99,
+                                    108,
+                                    101,
+                                    95,
+                                    114,
+                                    101,
+                                    103,
+                                    105,
+                                    115,
+                                    116,
+                                    114,
+                                    121
+                                ];
+                            }
+                        ];
+                    };
+                },
+                {
+                    name: "systemProgram";
+                    address: "11111111111111111111111111111111";
+                }
+            ];
+            args: [
+                {
+                    name: "entries";
+                    type: {
+                        vec: {
+                            defined: {
+                                name: "oracleEntry";
+                            };
+                        };
+                    };
+                }
+            ];
+        },
         {
             name: "initializeVault";
             docs: [
                 "Initialize a new agent vault with policy configuration.",
-                "Only the owner can call this. Creates vault PDA, policy PDA, and spend tracker PDA.",
-                "`tracker_tier`: 0 = Standard (200 entries), 1 = Pro (500), 2 = Max (1000)."
+                "Only the owner can call this. Creates vault PDA, policy PDA,",
+                "and zero-copy spend tracker PDA."
             ];
             discriminator: [48, 191, 163, 44, 71, 129, 63, 164];
             accounts: [
@@ -800,6 +837,7 @@ export type AgentShield = {
                 },
                 {
                     name: "tracker";
+                    docs: ["Zero-copy SpendTracker — 2,352 bytes fixed size"];
                     writable: true;
                     pda: {
                         seeds: [
@@ -816,7 +854,6 @@ export type AgentShield = {
                 },
                 {
                     name: "feeDestination";
-                    docs: ["The protocol treasury that receives fees"];
                 },
                 {
                     name: "systemProgram";
@@ -837,17 +874,11 @@ export type AgentShield = {
                     type: "u64";
                 },
                 {
-                    name: "allowedTokens";
-                    type: {
-                        vec: {
-                            defined: {
-                                name: "allowedToken";
-                            };
-                        };
-                    };
+                    name: "protocolMode";
+                    type: "u8";
                 },
                 {
-                    name: "allowedProtocols";
+                    name: "protocols";
                     type: {
                         vec: "pubkey";
                     };
@@ -873,20 +904,12 @@ export type AgentShield = {
                     type: {
                         vec: "pubkey";
                     };
-                },
-                {
-                    name: "trackerTier";
-                    type: "u8";
                 }
             ];
         },
         {
             name: "queuePolicyUpdate";
-            docs: [
-                "Queue a policy update when timelock is active.",
-                "Creates a PendingPolicyUpdate PDA that becomes executable after",
-                "the timelock period expires."
-            ];
+            docs: ["Queue a policy update when timelock is active."];
             discriminator: [149, 18, 76, 197, 179, 193, 91, 77];
             accounts: [
                 {
@@ -981,19 +1004,13 @@ export type AgentShield = {
                     };
                 },
                 {
-                    name: "allowedTokens";
+                    name: "protocolMode";
                     type: {
-                        option: {
-                            vec: {
-                                defined: {
-                                    name: "allowedToken";
-                                };
-                            };
-                        };
+                        option: "u8";
                     };
                 },
                 {
-                    name: "allowedProtocols";
+                    name: "protocols";
                     type: {
                         option: {
                             vec: "pubkey";
@@ -1042,10 +1059,7 @@ export type AgentShield = {
         },
         {
             name: "reactivateVault";
-            docs: [
-                "Reactivate a frozen vault. Optionally rotate the agent key.",
-                "Only the owner can call this."
-            ];
+            docs: ["Reactivate a frozen vault. Optionally rotate the agent key."];
             discriminator: [245, 50, 143, 70, 114, 220, 25, 251];
             accounts: [
                 {
@@ -1129,8 +1143,8 @@ export type AgentShield = {
         {
             name: "revokeAgent";
             docs: [
-                "Kill switch. Immediately freezes the vault, preventing all agent actions.",
-                "Only the owner can call this. Funds can still be withdrawn by the owner."
+                "Kill switch. Immediately freezes the vault.",
+                "Only the owner can call this."
             ];
             discriminator: [227, 60, 209, 125, 240, 117, 163, 73];
             accounts: [
@@ -1163,12 +1177,71 @@ export type AgentShield = {
             ];
             args: [];
         },
+        {
+            name: "updateOracleRegistry";
+            docs: [
+                "Add or remove entries from the oracle registry.",
+                "Only the registry authority can call this."
+            ];
+            discriminator: [184, 234, 19, 21, 41, 240, 100, 14];
+            accounts: [
+                {
+                    name: "authority";
+                    signer: true;
+                },
+                {
+                    name: "oracleRegistry";
+                    writable: true;
+                    pda: {
+                        seeds: [
+                            {
+                                kind: "const";
+                                value: [
+                                    111,
+                                    114,
+                                    97,
+                                    99,
+                                    108,
+                                    101,
+                                    95,
+                                    114,
+                                    101,
+                                    103,
+                                    105,
+                                    115,
+                                    116,
+                                    114,
+                                    121
+                                ];
+                            }
+                        ];
+                    };
+                }
+            ];
+            args: [
+                {
+                    name: "entriesToAdd";
+                    type: {
+                        vec: {
+                            defined: {
+                                name: "oracleEntry";
+                            };
+                        };
+                    };
+                },
+                {
+                    name: "mintsToRemove";
+                    type: {
+                        vec: "pubkey";
+                    };
+                }
+            ];
+        },
         {
             name: "updatePolicy";
             docs: [
                 "Update the policy configuration for a vault.",
-                "Only the owner can call this. Cannot be called by the agent.",
-                "Blocked when timelock_duration > 0 — use queue_policy_update instead."
+                "Only the owner can call this. Blocked when timelock > 0."
             ];
             discriminator: [212, 245, 246, 7, 163, 151, 18, 57];
             accounts: [
@@ -1196,7 +1269,7 @@ export type AgentShield = {
                             }
                         ];
                     };
-                    relations: ["policy", "tracker"];
+                    relations: ["policy"];
                 },
                 {
                     name: "policy";
@@ -1213,22 +1286,6 @@ export type AgentShield = {
                             }
                         ];
                     };
-                },
-                {
-                    name: "tracker";
-                    writable: true;
-                    pda: {
-                        seeds: [
-                            {
-                                kind: "const";
-                                value: [116, 114, 97, 99, 107, 101, 114];
-                            },
-                            {
-                                kind: "account";
-                                path: "vault";
-                            }
-                        ];
-                    };
                 }
             ];
             args: [
@@ -1245,19 +1302,13 @@ export type AgentShield = {
                     };
                 },
                 {
-                    name: "allowedTokens";
+                    name: "protocolMode";
                     type: {
-                        option: {
-                            vec: {
-                                defined: {
-                                    name: "allowedToken";
-                                };
-                            };
-                        };
+                        option: "u8";
                     };
                 },
                 {
-                    name: "allowedProtocols";
+                    name: "protocols";
                     type: {
                         option: {
                             vec: "pubkey";
@@ -1308,10 +1359,8 @@ export type AgentShield = {
             name: "validateAndAuthorize";
             docs: [
                 "Core permission check. Called by the agent before a DeFi action.",
-                "Validates the action against all policy constraints (USD caps, per-token caps).",
-                "If approved, creates a SessionAuthority PDA, delegates tokens to agent,",
-                "and updates spend tracking.",
-                "If denied, reverts the entire transaction (including subsequent DeFi instructions)."
+                "Validates against policy constraints + oracle registry.",
+                "Creates a SessionAuthority PDA, delegates tokens to agent."
             ];
             discriminator: [22, 183, 48, 222, 218, 11, 197, 152];
             accounts: [
@@ -1341,7 +1390,7 @@ export type AgentShield = {
                             }
                         ];
                     };
-                    relations: ["policy", "tracker"];
+                    relations: ["policy"];
                 },
                 {
                     name: "policy";
@@ -1360,6 +1409,7 @@ export type AgentShield = {
                 },
                 {
                     name: "tracker";
+                    docs: ["Zero-copy SpendTracker"];
                     writable: true;
                     pda: {
                         seeds: [
@@ -1374,6 +1424,34 @@ export type AgentShield = {
                         ];
                     };
                 },
+                {
+                    name: "oracleRegistry";
+                    docs: ["Protocol-level oracle registry (shared across all vaults)"];
+                    pda: {
+                        seeds: [
+                            {
+                                kind: "const";
+                                value: [
+                                    111,
+                                    114,
+                                    97,
+                                    99,
+                                    108,
+                                    101,
+                                    95,
+                                    114,
+                                    101,
+                                    103,
+                                    105,
+                                    115,
+                                    116,
+                                    114,
+                                    121
+                                ];
+                            }
+                        ];
+                    };
+                },
                 {
                     name: "session";
                     docs: [
@@ -1404,9 +1482,7 @@ export type AgentShield = {
                 },
                 {
                     name: "vaultTokenAccount";
-                    docs: [
-                        "Vault's PDA-owned token account for the spend token (delegation source)"
-                    ];
+                    docs: ["Vault's PDA-owned token account for the spend token"];
                     writable: true;
                 },
                 {
@@ -1453,10 +1529,7 @@ export type AgentShield = {
         },
         {
             name: "withdrawFunds";
-            docs: [
-                "Withdraw tokens from the vault back to the owner.",
-                "Works in any vault status (Active or Frozen). Only the owner can call this."
-            ];
+            docs: ["Withdraw tokens from the vault back to the owner."];
             discriminator: [241, 36, 29, 111, 208, 31, 104, 217];
             accounts: [
                 {
@@ -1688,6 +1761,10 @@ export type AgentShield = {
             name: "agentVault";
             discriminator: [232, 220, 237, 164, 157, 9, 215, 194];
         },
+        {
+            name: "oracleRegistry";
+            discriminator: [94, 153, 19, 250, 94, 0, 12, 172];
+        },
         {
             name: "pendingPolicyUpdate";
             discriminator: [77, 255, 2, 51, 79, 237, 183, 239];
@@ -1710,10 +1787,6 @@ export type AgentShield = {
             name: "actionAuthorized";
             discriminator: [85, 90, 59, 218, 126, 8, 179, 63];
         },
-        {
-            name: "actionDenied";
-            discriminator: [243, 239, 240, 51, 151, 100, 10, 100];
-        },
         {
             name: "agentRegistered";
             discriminator: [191, 78, 217, 54, 232, 100, 189, 85];
@@ -1742,6 +1815,14 @@ export type AgentShield = {
             name: "fundsWithdrawn";
             discriminator: [56, 130, 230, 154, 35, 92, 11, 118];
         },
+        {
+            name: "oracleRegistryInitialized";
+            discriminator: [88, 111, 7, 92, 74, 14, 114, 205];
+        },
+        {
+            name: "oracleRegistryUpdated";
+            discriminator: [25, 85, 137, 57, 175, 133, 14, 77];
+        },
         {
             name: "policyChangeApplied";
             discriminator: [104, 89, 5, 100, 180, 202, 52, 73];
@@ -1793,13 +1874,13 @@ export type AgentShield = {
         },
         {
             code: 6003;
-            name: "tokenNotAllowed";
-            msg: "Token not in allowed list";
+            name: "tokenNotRegistered";
+            msg: "Token not registered in oracle registry";
         },
         {
             code: 6004;
             name: "protocolNotAllowed";
-            msg: "Protocol not in allowed list";
+            msg: "Protocol not allowed by policy";
         },
         {
             code: 6005;
@@ -1848,163 +1929,163 @@ export type AgentShield = {
         },
         {
             code: 6014;
-            name: "tooManyAllowedTokens";
-            msg: "Policy configuration invalid: too many allowed tokens";
-        },
-        {
-            code: 6015;
             name: "tooManyAllowedProtocols";
             msg: "Policy configuration invalid: too many allowed protocols";
         },
         {
-            code: 6016;
+            code: 6015;
             name: "agentAlreadyRegistered";
             msg: "Agent already registered for this vault";
         },
         {
-            code: 6017;
+            code: 6016;
             name: "noAgentRegistered";
             msg: "No agent registered for this vault";
         },
         {
-            code: 6018;
+            code: 6017;
             name: "vaultNotFrozen";
             msg: "Vault is not frozen (expected frozen for reactivation)";
         },
         {
-            code: 6019;
+            code: 6018;
             name: "vaultAlreadyClosed";
             msg: "Vault is already closed";
         },
         {
-            code: 6020;
+            code: 6019;
             name: "insufficientBalance";
             msg: "Insufficient vault balance for withdrawal";
         },
         {
-            code: 6021;
+            code: 6020;
             name: "developerFeeTooHigh";
             msg: "Developer fee rate exceeds maximum (500 / 1,000,000 = 5 BPS)";
         },
         {
-            code: 6022;
+            code: 6021;
             name: "invalidFeeDestination";
             msg: "Fee destination account invalid";
         },
         {
-            code: 6023;
+            code: 6022;
             name: "invalidProtocolTreasury";
             msg: "Protocol treasury account does not match expected address";
         },
         {
-            code: 6024;
-            name: "tooManySpendEntries";
-            msg: "Spend entry limit reached (too many active entries in rolling window)";
-        },
-        {
-            code: 6025;
+            code: 6023;
             name: "invalidAgentKey";
             msg: "Invalid agent: cannot be the zero address";
         },
         {
-            code: 6026;
+            code: 6024;
             name: "agentIsOwner";
             msg: "Invalid agent: agent cannot be the vault owner";
         },
         {
-            code: 6027;
+            code: 6025;
             name: "overflow";
             msg: "Arithmetic overflow";
         },
         {
-            code: 6028;
+            code: 6026;
             name: "delegationFailed";
             msg: "Token delegation approval failed";
         },
         {
-            code: 6029;
+            code: 6027;
             name: "revocationFailed";
             msg: "Token delegation revocation failed";
         },
         {
-            code: 6030;
+            code: 6028;
             name: "oracleFeedStale";
             msg: "Oracle feed value is too stale";
         },
         {
-            code: 6031;
+            code: 6029;
             name: "oracleFeedInvalid";
             msg: "Cannot parse oracle feed data";
         },
         {
-            code: 6032;
+            code: 6030;
             name: "tokenSpendBlocked";
             msg: "Unpriced token cannot be spent (receive-only)";
         },
         {
-            code: 6033;
+            code: 6031;
             name: "invalidTokenAccount";
             msg: "Token account does not belong to vault or has wrong mint";
         },
         {
-            code: 6034;
+            code: 6032;
             name: "oracleAccountMissing";
             msg: "Oracle-priced token requires feed account in remaining_accounts";
         },
         {
-            code: 6035;
-            name: "perTokenCapExceeded";
-            msg: "Per-token daily spending cap would be exceeded";
-        },
-        {
-            code: 6036;
-            name: "perTokenTxLimitExceeded";
-            msg: "Per-token single transaction limit exceeded";
-        },
-        {
-            code: 6037;
+            code: 6033;
             name: "oracleConfidenceTooWide";
             msg: "Oracle price confidence interval too wide";
         },
         {
-            code: 6038;
+            code: 6034;
             name: "oracleUnsupportedType";
             msg: "Oracle account owner is not a recognized oracle program";
         },
         {
-            code: 6039;
+            code: 6035;
             name: "oracleNotVerified";
             msg: "Pyth price update not fully verified by Wormhole";
         },
         {
-            code: 6040;
+            code: 6036;
             name: "timelockNotExpired";
             msg: "Timelock period has not expired yet";
         },
         {
-            code: 6041;
+            code: 6037;
             name: "timelockActive";
             msg: "Vault has timelock active — use queue_policy_update instead";
         },
         {
-            code: 6042;
+            code: 6038;
             name: "noTimelockConfigured";
             msg: "No timelock configured on this vault";
         },
         {
-            code: 6043;
+            code: 6039;
             name: "destinationNotAllowed";
             msg: "Destination not in allowed list";
         },
         {
-            code: 6044;
+            code: 6040;
             name: "tooManyDestinations";
             msg: "Too many destinations (max 10)";
         },
+        {
+            code: 6041;
+            name: "invalidProtocolMode";
+            msg: "Invalid protocol mode (must be 0, 1, or 2)";
+        },
+        {
+            code: 6042;
+            name: "oracleRegistryFull";
+            msg: "Oracle registry is full (max 105 entries)";
+        },
+        {
+            code: 6043;
+            name: "unauthorizedRegistryAdmin";
+            msg: "Unauthorized: not the oracle registry authority";
+        },
+        {
+            code: 6044;
+            name: "oraclePriceDivergence";
+            msg: "Primary and fallback oracle prices diverge beyond threshold";
+        },
         {
             code: 6045;
-            name: "invalidTrackerTier";
-            msg: "Invalid tracker tier (must be 0, 1, or 2)";
+            name: "oracleBothFeedsFailed";
+            msg: "Both primary and fallback oracle feeds failed";
         }
     ];
     types: [
@@ -2076,30 +2157,6 @@ export type AgentShield = {
                 ];
             };
         },
-        {
-            name: "actionDenied";
-            type: {
-                kind: "struct";
-                fields: [
-                    {
-                        name: "vault";
-                        type: "pubkey";
-                    },
-                    {
-                        name: "agent";
-                        type: "pubkey";
-                    },
-                    {
-                        name: "reason";
-                        type: "string";
-                    },
-                    {
-                        name: "timestamp";
-                        type: "i64";
-                    }
-                ];
-            };
-        },
         {
             name: "actionType";
             docs: ["Action types that agents can request"];
@@ -2217,10 +2274,8 @@ export type AgentShield = {
                     {
                         name: "feeDestination";
                         docs: [
-                            "Developer fee destination — the wallet that receives developer fees",
-                            "on every finalized transaction. IMMUTABLE after initialization — only",
-                            "`initialize_vault` writes this field. This prevents a compromised owner",
-                            "key from redirecting fees. Protocol fees go to PROTOCOL_TREASURY separately."
+                            "Developer fee destination — IMMUTABLE after initialization.",
+                            "Prevents a compromised owner from redirecting fees."
                         ];
                         type: "pubkey";
                     },
@@ -2270,91 +2325,55 @@ export type AgentShield = {
                     {
                         name: "totalFeesCollected";
                         docs: [
-                            "Cumulative developer fees collected from this vault (token base units).",
-                            "Protocol fees are tracked separately via events."
+                            "Cumulative developer fees collected from this vault (token base units)"
                         ];
                         type: "u64";
-                    },
-                    {
-                        name: "trackerTier";
-                        docs: ["Tracker capacity tier chosen at vault creation"];
-                        type: {
-                            defined: {
-                                name: "trackerTier";
-                            };
-                        };
                     }
                 ];
             };
         },
         {
-            name: "allowedToken";
-            docs: [
-                "Per-token configuration including oracle feed and per-token caps.",
-                "Replaces the old `Vec<Pubkey>` allowed_tokens with richer metadata.",
-                "",
-                "Oracle feed classification:",
-                "- `Pubkey::default()` = stablecoin (1:1 USD, no oracle needed)",
-                "- `UNPRICED_SENTINEL` ([0xFF; 32]) = unpriced token (receive-only)",
-                "- Any other pubkey = Oracle feed account (Pyth PriceUpdateV2 or Switchboard PullFeed)"
-            ];
+            name: "delegationRevoked";
             type: {
                 kind: "struct";
                 fields: [
                     {
-                        name: "mint";
-                        docs: ["Token mint address"];
+                        name: "vault";
                         type: "pubkey";
                     },
                     {
-                        name: "oracleFeed";
-                        docs: [
-                            "Oracle feed account (Pyth PriceUpdateV2 or Switchboard PullFeed) for USD pricing.",
-                            "`Pubkey::default()` = stablecoin (1:1 USD).",
-                            "`UNPRICED_SENTINEL` = unpriced (receive-only, cannot be spent)."
-                        ];
+                        name: "tokenAccount";
                         type: "pubkey";
                     },
                     {
-                        name: "decimals";
-                        docs: ["Token decimals (e.g., 6 for USDC, 9 for SOL)"];
-                        type: "u8";
-                    },
-                    {
-                        name: "dailyCapBase";
-                        docs: [
-                            "Per-token daily cap in base units (0 = no per-token limit,",
-                            "only the aggregate USD cap applies)"
-                        ];
-                        type: "u64";
-                    },
-                    {
-                        name: "maxTxBase";
-                        docs: [
-                            "Per-token max single transaction in base units",
-                            "(0 = no per-token tx limit, only USD tx limit applies)"
-                        ];
-                        type: "u64";
+                        name: "timestamp";
+                        type: "i64";
                     }
                 ];
             };
         },
         {
-            name: "delegationRevoked";
+            name: "epochBucket";
+            docs: [
+                "A single epoch bucket tracking aggregate USD spend.",
+                "16 bytes per bucket. USD-only — rate limiting stays client-side."
+            ];
+            serialization: "bytemuck";
+            repr: {
+                kind: "c";
+            };
             type: {
                 kind: "struct";
                 fields: [
                     {
-                        name: "vault";
-                        type: "pubkey";
-                    },
-                    {
-                        name: "tokenAccount";
-                        type: "pubkey";
+                        name: "epochId";
+                        docs: ["Epoch identifier: unix_timestamp / EPOCH_DURATION"];
+                        type: "i64";
                     },
                     {
-                        name: "timestamp";
-                        type: "i64";
+                        name: "usdAmount";
+                        docs: ["Aggregate USD spent in this epoch (6 decimals)"];
+                        type: "u64";
                     }
                 ];
             };
@@ -2463,6 +2482,116 @@ export type AgentShield = {
                 ];
             };
         },
+        {
+            name: "oracleEntry";
+            docs: ["Individual entry mapping a token mint to its oracle feed."];
+            type: {
+                kind: "struct";
+                fields: [
+                    {
+                        name: "mint";
+                        docs: ["SPL token mint address"];
+                        type: "pubkey";
+                    },
+                    {
+                        name: "oracleFeed";
+                        docs: [
+                            "Pyth or Switchboard oracle feed account.",
+                            "Ignored when is_stablecoin is true."
+                        ];
+                        type: "pubkey";
+                    },
+                    {
+                        name: "isStablecoin";
+                        docs: ["If true, token is 1:1 USD (no oracle read needed)"];
+                        type: "bool";
+                    },
+                    {
+                        name: "fallbackFeed";
+                        docs: [
+                            "Optional fallback oracle feed. Pubkey::default() = no fallback.",
+                            "Used when primary is stale/invalid. Cross-checked for divergence",
+                            "when both are available."
+                        ];
+                        type: "pubkey";
+                    }
+                ];
+            };
+        },
+        {
+            name: "oracleRegistry";
+            docs: [
+                "Protocol-level oracle registry — maps token mints to oracle feeds.",
+                "Maintained by protocol admin. Shared across ALL vaults.",
+                "Any vault can use any registered token without per-vault configuration.",
+                "",
+                'Seeds: `[b"oracle_registry"]`'
+            ];
+            type: {
+                kind: "struct";
+                fields: [
+                    {
+                        name: "authority";
+                        docs: [
+                            "Authority who can add/remove entries (upgradeable to multisig/DAO)"
+                        ];
+                        type: "pubkey";
+                    },
+                    {
+                        name: "entries";
+                        docs: ["Token mint → oracle feed mappings"];
+                        type: {
+                            vec: {
+                                defined: {
+                                    name: "oracleEntry";
+                                };
+                            };
+                        };
+                    },
+                    {
+                        name: "bump";
+                        docs: ["Bump seed for PDA"];
+                        type: "u8";
+                    }
+                ];
+            };
+        },
+        {
+            name: "oracleRegistryInitialized";
+            type: {
+                kind: "struct";
+                fields: [
+                    {
+                        name: "authority";
+                        type: "pubkey";
+                    },
+                    {
+                        name: "entryCount";
+                        type: "u16";
+                    }
+                ];
+            };
+        },
+        {
+            name: "oracleRegistryUpdated";
+            type: {
+                kind: "struct";
+                fields: [
+                    {
+                        name: "addedCount";
+                        type: "u16";
+                    },
+                    {
+                        name: "removedCount";
+                        type: "u16";
+                    },
+                    {
+                        name: "totalEntries";
+                        type: "u16";
+                    }
+                ];
+            };
+        },
         {
             name: "pendingPolicyUpdate";
             docs: [
@@ -2503,19 +2632,13 @@ export type AgentShield = {
                         };
                     },
                     {
-                        name: "allowedTokens";
+                        name: "protocolMode";
                         type: {
-                            option: {
-                                vec: {
-                                    defined: {
-                                        name: "allowedToken";
-                                    };
-                                };
-                            };
+                            option: "u8";
                         };
                     },
                     {
-                        name: "allowedProtocols";
+                        name: "protocols";
                         type: {
                             option: {
                                 vec: "pubkey";
@@ -2636,24 +2759,20 @@ export type AgentShield = {
                         type: "u64";
                     },
                     {
-                        name: "allowedTokens";
+                        name: "protocolMode";
                         docs: [
-                            "Allowed token mints with oracle feeds and per-token caps.",
-                            "Bounded to MAX_ALLOWED_TOKENS entries."
+                            "Protocol access control mode:",
+                            "0 = all allowed (protocols list ignored)",
+                            "1 = allowlist (only protocols in list)",
+                            "2 = denylist (all except protocols in list)"
                         ];
-                        type: {
-                            vec: {
-                                defined: {
-                                    name: "allowedToken";
-                                };
-                            };
-                        };
+                        type: "u8";
                     },
                     {
-                        name: "allowedProtocols";
+                        name: "protocols";
                         docs: [
-                            "Allowed program IDs the agent can call (Jupiter, Flash Trade, etc.)",
-                            "Bounded to MAX_ALLOWED_PROTOCOLS entries"
+                            "Protocol pubkeys for allowlist/denylist.",
+                            "Bounded to MAX_ALLOWED_PROTOCOLS entries."
                         ];
                         type: {
                             vec: "pubkey";
@@ -2662,7 +2781,7 @@ export type AgentShield = {
                     {
                         name: "maxLeverageBps";
                         docs: [
-                            "Maximum leverage multiplier in basis points (e.g., 10000 = 100x, 1000 = 10x)",
+                            "Maximum leverage multiplier in basis points (e.g., 10000 = 100x)",
                             "Set to 0 to disallow leveraged positions entirely"
                         ];
                         type: "u16";
@@ -2683,19 +2802,14 @@ export type AgentShield = {
                         name: "developerFeeRate";
                         docs: [
                             "Developer fee rate (rate / 1,000,000). Applied to every finalized",
-                            "transaction. Fee deducted from vault, transferred to vault's",
-                            "fee_destination. Max MAX_DEVELOPER_FEE_RATE (500 = 5 BPS).",
-                            "Set to 0 for no developer fee. Protocol fee is always applied",
-                            "separately at PROTOCOL_FEE_RATE."
+                            "transaction. Max MAX_DEVELOPER_FEE_RATE (500 = 5 BPS)."
                         ];
                         type: "u16";
                     },
                     {
                         name: "timelockDuration";
                         docs: [
-                            "Timelock duration in seconds for policy changes. 0 = no timelock",
-                            "(immediate updates allowed). When > 0, policy changes must go",
-                            "through queue_policy_update → apply_pending_policy."
+                            "Timelock duration in seconds for policy changes. 0 = no timelock."
                         ];
                         type: "u64";
                     },
@@ -2735,11 +2849,11 @@ export type AgentShield = {
                         type: "u64";
                     },
                     {
-                        name: "allowedTokensCount";
+                        name: "protocolMode";
                         type: "u8";
                     },
                     {
-                        name: "allowedProtocolsCount";
+                        name: "protocolsCount";
                         type: "u8";
                     },
                     {
@@ -2857,43 +2971,20 @@ export type AgentShield = {
                 ];
             };
         },
-        {
-            name: "spendEntry";
-            type: {
-                kind: "struct";
-                fields: [
-                    {
-                        name: "tokenIndex";
-                        docs: [
-                            "Index into PolicyConfig.allowed_tokens[] (0-9).",
-                            "Compact representation — avoids storing full 32-byte Pubkey per entry.",
-                            "Invalidated when token list changes (rolling_spends is cleared)."
-                        ];
-                        type: "u8";
-                    },
-                    {
-                        name: "usdAmount";
-                        docs: [
-                            "USD value of this spend (6 decimals, e.g., $500 = 500_000_000)"
-                        ];
-                        type: "u64";
-                    },
-                    {
-                        name: "baseAmount";
-                        docs: [
-                            "Original amount in token base units (for per-token cap checks)"
-                        ];
-                        type: "u64";
-                    },
-                    {
-                        name: "timestamp";
-                        type: "i64";
-                    }
-                ];
-            };
-        },
         {
             name: "spendTracker";
+            docs: [
+                "Zero-copy 144-epoch circular buffer for rolling 24h USD spend tracking.",
+                "Each bucket covers a 10-minute epoch. Boundary correction ensures",
+                "functionally exact accuracy (~$0.000001 worst-case rounding).",
+                "Rounding direction: slightly permissive (under-counts by at most $0.000001).",
+                "",
+                'Seeds: `[b"tracker", vault.key().as_ref()]`'
+            ];
+            serialization: "bytemuck";
+            repr: {
+                kind: "c";
+            };
             type: {
                 kind: "struct";
                 fields: [
@@ -2903,114 +2994,30 @@ export type AgentShield = {
                         type: "pubkey";
                     },
                     {
-                        name: "trackerTier";
-                        docs: ["Tracker capacity tier (Standard/Pro/Max)"];
-                        type: {
-                            defined: {
-                                name: "trackerTier";
-                            };
-                        };
-                    },
-                    {
-                        name: "maxSpendEntries";
-                        docs: [
-                            "Maximum spend entries for this tracker (derived from tier at init)"
-                        ];
-                        type: "u32";
-                    },
-                    {
-                        name: "rollingSpends";
-                        docs: [
-                            "Rolling spend entries: (token_mint, usd_amount, base_amount, timestamp)",
-                            "Entries older than ROLLING_WINDOW_SECONDS are pruned on each access"
-                        ];
-                        type: {
-                            vec: {
-                                defined: {
-                                    name: "spendEntry";
-                                };
-                            };
-                        };
-                    },
-                    {
-                        name: "recentTransactions";
-                        docs: [
-                            "Recent transaction log for on-chain audit trail",
-                            "Bounded to MAX_RECENT_TRANSACTIONS, oldest entries evicted (ring buffer)"
-                        ];
+                        name: "buckets";
+                        docs: ["144 epoch buckets for rolling 24h spend tracking"];
                         type: {
-                            vec: {
-                                defined: {
-                                    name: "transactionRecord";
-                                };
-                            };
+                            array: [
+                                {
+                                    defined: {
+                                        name: "epochBucket";
+                                    };
+                                },
+                                144
+                            ];
                         };
                     },
                     {
                         name: "bump";
                         docs: ["Bump seed for PDA"];
                         type: "u8";
-                    }
-                ];
-            };
-        },
-        {
-            name: "trackerTier";
-            docs: [
-                "Tracker capacity tiers — chosen at vault creation, determines",
-                "max rolling spend entries and SpendTracker account size."
-            ];
-            type: {
-                kind: "enum";
-                variants: [
-                    {
-                        name: "standard";
                     },
                     {
-                        name: "pro";
-                    },
-                    {
-                        name: "max";
-                    }
-                ];
-            };
-        },
-        {
-            name: "transactionRecord";
-            type: {
-                kind: "struct";
-                fields: [
-                    {
-                        name: "timestamp";
-                        type: "i64";
-                    },
-                    {
-                        name: "actionType";
+                        name: "padding";
+                        docs: ["Padding for 8-byte alignment"];
                         type: {
-                            defined: {
-                                name: "actionType";
-                            };
+                            array: ["u8", 7];
                         };
-                    },
-                    {
-                        name: "tokenMint";
-                        type: "pubkey";
-                    },
-                    {
-                        name: "amount";
-                        type: "u64";
-                    },
-                    {
-                        name: "protocol";
-                        type: "pubkey";
-                    },
-                    {
-                        name: "success";
-                        type: "bool";
-                    },
-                    {
-                        name: "slot";
-                        type: "u64";
                     }
                 ];
             };