@augustdigital/sdk 8.22.1 → 8.25.0

package/lib/adapters/solana/idl/vault-idl.js

@@ -4,21 +4,21 @@ exports.vaultIdl = void 0;
 /**
  * august_vault program IDL (Anchor).
  *
- * GENERATED — do not edit by hand. The versioned multi-vault interface the SDK
- * targets, generated from the devnet on-chain IDL of `C8B1…` — the only
- * deployment that publishes one matching this file. Refresh with
- * `anchor idl fetch C8B1… -u devnet`.
- *
- * At runtime the SDK targets the canonical `up12…` instead, whose own published
- * IDL is STALE (an Anchor IDL upload is not refreshed by a program upgrade), so
- * it can't be used as the generation source. The solana-idl-drift check (CI)
- * therefore validates `up12…` by pinning its deployed binary and by decoding
- * live VaultState accounts against this file — see
- * tests/vaults/solana-idl-drift.test.ts.
+ * GENERATED — do not edit by hand. Source of truth is the program repo's build
+ * artifact: solana-vaults `frontend/idl/august_vault.json` (synced from the
+ * vendored program by `scripts/sync-idl.sh`). Regenerate from there, NOT with
+ * `anchor idl fetch`: an Anchor IDL upload is not refreshed by a program
+ * upgrade, so every IDL published for this program lineage is stale — both
+ * `up12…` on mainnet (last written 2026-01-21) and the `C8B1…` devnet reference
+ * (2026-01-23) predate the ProgramConfig build deployed on 2026-08-06.
  *
  * `address` is a build stamp (the mainnet id), NOT network-aware. Never rely on
  * it: SolanaAdapter/getProgram resolve the real program id per network from
  * programIds, or from an explicit `programId` override.
+ *
+ * Drift is guarded by tests/vaults/solana-idl-drift.test.ts: the deployed binary
+ * is pinned, every discriminator declared here must appear in that binary, and
+ * live VaultState accounts must decode against this file.
  */
 exports.vaultIdl = {
     accounts: [
@@ -26,6 +26,10 @@ exports.vaultIdl = {
             discriminator: [195, 131, 96, 55, 140, 253, 93, 195],
             name: 'NominatedAdmin',
         },
+        {
+            discriminator: [196, 210, 90, 231, 144, 149, 140, 63],
+            name: 'ProgramConfig',
+        },
         {
             discriminator: [228, 196, 82, 165, 98, 210, 235, 152],
             name: 'VaultState',
@@ -113,6 +117,31 @@ exports.vaultIdl = {
             msg: 'Vault must be empty to close',
             name: 'VaultNotEmpty',
         },
+        {
+            code: 6016,
+            msg: 'Signer is not the protocol authority',
+            name: 'NotProtocolAuthority',
+        },
+        {
+            code: 6017,
+            msg: 'Authority must not be the zero key',
+            name: 'InvalidAuthority',
+        },
+        {
+            code: 6018,
+            msg: "Received fewer shares than the caller's minimum",
+            name: 'SlippageExceeded',
+        },
+        {
+            code: 6019,
+            msg: 'Vault holds no assets while shares are outstanding; share price is undefined',
+            name: 'SharePriceUndefined',
+        },
+        {
+            code: 6020,
+            msg: 'Share offset must be a power of ten within the permitted range',
+            name: 'InvalidShareOffset',
+        },
     ],
     events: [
         {
@@ -339,6 +368,8 @@ exports.vaultIdl = {
                 'Deposit funds in the Vault',
                 'Mint Vault shares',
                 '',
+                'No slippage bound — prefer `deposit_checked` in new integrations.',
+                '',
                 '### Parameters',
                 '- `amount` - The amount to deposit',
             ],
@@ -351,19 +382,134 @@ exports.vaultIdl = {
                     writable: true,
                 },
                 {
-                    name: 'share_mint',
+                    name: 'vault_token_ata',
                     writable: true,
                 },
                 {
-                    name: 'vault_token_ata',
+                    name: 'sender_token_account',
+                    writable: true,
+                },
+                {
+                    name: 'sender_share_account',
+                    writable: true,
+                },
+                {
+                    name: 'share_mint',
                     writable: true,
                 },
                 {
                     name: 'deposit_mint',
+                    writable: true,
+                },
+                {
+                    name: 'signer',
+                    signer: true,
+                    writable: true,
+                },
+                {
+                    name: 'token_program',
+                },
+            ],
+            args: [
+                {
+                    name: 'amount',
+                    type: 'u64',
+                },
+                {
+                    name: 'min_shares_out',
+                    type: 'u64',
+                },
+            ],
+            discriminator: [216, 117, 3, 197, 107, 28, 130, 111],
+            docs: [
+                'Deposit funds in the Vault, refusing to mint fewer than',
+                '`min_shares_out` shares.',
+                '',
+                'Same accounts and semantics as `deposit`, plus a caller-stated worst',
+                'acceptable rate. Additive rather than a change to `deposit`, so existing',
+                'integrations keep working; pass 0 for identical behaviour.',
+                '',
+                '### Parameters',
+                '- `amount` - The amount to deposit',
+                '- `min_shares_out` - Revert with `SlippageExceeded` below this many shares',
+            ],
+            name: 'deposit_checked',
+        },
+        {
+            accounts: [
+                {
+                    docs: [
+                        'Gates vault creation: it is restricted to the authority recorded in',
+                        '`ProgramConfig`, rather than being open to any paying signer.',
+                        '',
+                        '**Declared first so a missing config fails closed early.** Anchor',
+                        'deserializes fields in declaration order, so if this account does not',
+                        'exist the instruction aborts with `AccountNotInitialized` before any',
+                        'account is created. That much *is* order-sensitive.',
+                        '',
+                        'The authority comparison below is **not**. It is a `constraint` on a',
+                        'non-`init` field, and `anchor_syn::codegen::accounts::try_accounts::',
+                        "generate_constraints` emits every `init` field's creation CPI ahead of",
+                        '*all* non-init access checks, regardless of declaration order — and',
+                        'within a single field `linearize` orders `Init` before `Raw`, so moving',
+                        'the constraint onto an `init` account would not help either. An',
+                        'unauthorized caller who is also their own `payer` and cannot fund the',
+                        'rent therefore fails with a System Program "insufficient lamports" error',
+                        'rather than `NotProtocolAuthority`.',
+                        '',
+                        'Authorization is still enforced in every case — only the error surfaced',
+                        "depends on the caller's balance. Pinned by",
+                        '`unauthorized_signer_creates_nothing_whatever_their_balance`.',
+                        '',
+                        '**Namespace note**: `vault_version` is a `u8` seed byte, so each deposit',
+                        'mint has 256 namespaces and each is single-use. `close_vault` cannot',
+                        'close the share mint (classic SPL Token has no close-mint instruction)',
+                        'and revokes its mint authority irreversibly, so a retired version can',
+                        'never be re-initialized. Retiring a vault therefore consumes one of the',
+                        '256 permanently and strands its share-mint rent.',
+                    ],
+                    name: 'program_config',
+                    pda: {
+                        seeds: [
+                            {
+                                kind: 'const',
+                                value: [
+                                    112, 114, 111, 103, 114, 97, 109, 95, 99, 111, 110, 102, 105,
+                                    103,
+                                ],
+                            },
+                        ],
+                    },
                 },
                 {
+                    docs: [
+                        'The protocol authority. Authorizes creation but does not fund it, so a',
+                        'cold or MPC-held key can hold this role without carrying SOL.',
+                    ],
                     name: 'signer',
                     signer: true,
+                },
+                {
+                    docs: [
+                        'Funds the three accounts below. May be the same key as `signer`.',
+                    ],
+                    name: 'payer',
+                    signer: true,
+                    writable: true,
+                },
+                {
+                    name: 'deposit_mint',
+                },
+                {
+                    name: 'vault_state',
+                    writable: true,
+                },
+                {
+                    name: 'share_mint',
+                    writable: true,
+                },
+                {
+                    name: 'vault_token_ata',
                     writable: true,
                 },
                 {
@@ -395,20 +541,118 @@ exports.vaultIdl = {
                     name: 'vault_version',
                     type: 'u8',
                 },
+                {
+                    name: 'share_offset',
+                    type: 'u64',
+                },
             ],
             discriminator: [175, 175, 109, 31, 13, 152, 155, 237],
             docs: [
                 'Initialize the Vault state',
                 'Mint Vault shares',
                 '',
+                'Requires the signer to be the protocol authority from `ProgramConfig`.',
+                '',
                 '### Parameters',
                 '- `admin` - The Admin of the Vault',
                 '- `operator` - The Operator of the Vault',
                 '- `fee_recipient` - The Fee recipient of the Vault',
                 '- `vault_version` - Version number for the vault (allows multiple vaults per deposit mint)',
+                "- `share_offset` - This vault's virtual-share offset, in base units of the",
+                'deposit mint. Must be a power of ten within',
+                '`MIN_SHARE_OFFSET..=MAX_SHARE_OFFSET`. It is fixed for the life of the',
+                'vault and also sets the minimum first deposit',
+                '(`MIN_SUPPLY_MULTIPLE * share_offset`), so choose it for what a base',
+                'unit of this mint is worth: a larger offset buys a wider margin against',
+                'share-burn price manipulation, a smaller one keeps a high-value mint',
+                'launchable.',
             ],
             name: 'initialize',
         },
+        {
+            accounts: [
+                {
+                    docs: ["Must be the program's current upgrade authority."],
+                    name: 'upgrade_authority',
+                    signer: true,
+                },
+                {
+                    docs: [
+                        "This program's `ProgramData`. The seed constraint pins it to *this*",
+                        'program, so a caller cannot present the `ProgramData` of some unrelated',
+                        'program they happen to control.',
+                        '',
+                        'Note that declaration order does **not** make this check run before',
+                        "`program_config` is created: Anchor emits every `init` field's creation",
+                        'CPI ahead of all non-init access checks. An upgrade-authority mismatch is',
+                        'still always caught — the whole transaction reverts — but a caller who',
+                        "cannot fund the config's rent sees the System Program's error rather than",
+                        '`NotProtocolAuthority`.',
+                    ],
+                    name: 'program_data',
+                    pda: {
+                        program: {
+                            kind: 'const',
+                            value: [
+                                2, 168, 246, 145, 78, 136, 161, 176, 226, 16, 21, 62, 247, 99,
+                                174, 43, 0, 194, 185, 61, 22, 193, 36, 210, 192, 83, 122, 16, 4,
+                                128, 0, 0,
+                            ],
+                        },
+                        seeds: [
+                            {
+                                kind: 'const',
+                                value: [
+                                    13, 135, 88, 126, 126, 197, 36, 47, 73, 223, 215, 77, 214,
+                                    167, 161, 118, 224, 21, 117, 226, 241, 67, 46, 100, 19, 247,
+                                    103, 179, 29, 106, 67, 143,
+                                ],
+                            },
+                        ],
+                    },
+                },
+                {
+                    name: 'payer',
+                    signer: true,
+                    writable: true,
+                },
+                {
+                    name: 'program_config',
+                    pda: {
+                        seeds: [
+                            {
+                                kind: 'const',
+                                value: [
+                                    112, 114, 111, 103, 114, 97, 109, 95, 99, 111, 110, 102, 105,
+                                    103,
+                                ],
+                            },
+                        ],
+                    },
+                    writable: true,
+                },
+                {
+                    address: '11111111111111111111111111111111',
+                    name: 'system_program',
+                },
+            ],
+            args: [
+                {
+                    name: 'authority',
+                    type: 'pubkey',
+                },
+            ],
+            discriminator: [208, 127, 21, 1, 194, 190, 196, 70],
+            docs: [
+                'Create the singleton program config, naming the key permitted to create',
+                "vaults. Callable only by the program's current upgrade authority, and",
+                'only once.',
+                '',
+                '### Parameters',
+                '- `authority` - The key that may call `initialize` from now on',
+            ],
+            name: 'initialize_config',
+        },
         {
             accounts: [
                 {
@@ -477,12 +721,8 @@ exports.vaultIdl = {
                                 path: 'operator',
                             },
                             {
-                                kind: 'const',
-                                value: [
-                                    6, 221, 246, 225, 215, 101, 161, 147, 217, 203, 225, 70, 206,
-                                    235, 121, 172, 28, 180, 133, 237, 95, 91, 55, 145, 58, 140,
-                                    245, 133, 126, 255, 0, 169,
-                                ],
+                                kind: 'account',
+                                path: 'token_program',
                             },
                             {
                                 kind: 'account',
@@ -578,12 +818,8 @@ exports.vaultIdl = {
                                 path: 'operator',
                             },
                             {
-                                kind: 'const',
-                                value: [
-                                    6, 221, 246, 225, 215, 101, 161, 147, 217, 203, 225, 70, 206,
-                                    235, 121, 172, 28, 180, 133, 237, 95, 91, 55, 145, 58, 140,
-                                    245, 133, 126, 255, 0, 169,
-                                ],
+                                kind: 'account',
+                                path: 'token_program',
                             },
                             {
                                 kind: 'account',
@@ -621,6 +857,72 @@ exports.vaultIdl = {
             ],
             name: 'operator_withdraw',
         },
+        {
+            accounts: [
+                {
+                    name: 'program_config',
+                    pda: {
+                        seeds: [
+                            {
+                                kind: 'const',
+                                value: [
+                                    112, 114, 111, 103, 114, 97, 109, 95, 99, 111, 110, 102, 105,
+                                    103,
+                                ],
+                            },
+                        ],
+                    },
+                    writable: true,
+                },
+                {
+                    docs: ["Must be the program's current upgrade authority."],
+                    name: 'upgrade_authority',
+                    signer: true,
+                },
+                {
+                    docs: [
+                        "This program's `ProgramData`, pinned by seeds so a caller cannot present",
+                        'the `ProgramData` of an unrelated program they happen to control.',
+                    ],
+                    name: 'program_data',
+                    pda: {
+                        program: {
+                            kind: 'const',
+                            value: [
+                                2, 168, 246, 145, 78, 136, 161, 176, 226, 16, 21, 62, 247, 99,
+                                174, 43, 0, 194, 185, 61, 22, 193, 36, 210, 192, 83, 122, 16, 4,
+                                128, 0, 0,
+                            ],
+                        },
+                        seeds: [
+                            {
+                                kind: 'const',
+                                value: [
+                                    13, 135, 88, 126, 126, 197, 36, 47, 73, 223, 215, 77, 214,
+                                    167, 161, 118, 224, 21, 117, 226, 241, 67, 46, 100, 19, 247,
+                                    103, 179, 29, 106, 67, 143,
+                                ],
+                            },
+                        ],
+                    },
+                },
+            ],
+            args: [
+                {
+                    name: 'new_authority',
+                    type: 'pubkey',
+                },
+            ],
+            discriminator: [49, 53, 195, 205, 146, 192, 154, 236],
+            docs: [
+                "Reset the vault-creation authority using the program's **upgrade",
+                'authority**, for when the current config authority is wrong or lost.',
+                '',
+                '### Parameters',
+                '- `new_authority` - The replacement authority (must not be the zero key)',
+            ],
+            name: 'override_config_authority',
+        },
         {
             accounts: [
                 {
@@ -694,11 +996,79 @@ exports.vaultIdl = {
                 'Redeem funds from the Vault',
                 'Burn shared',
                 'Get tokens out',
+                '',
+                'No slippage bound — prefer `redeem_checked` in new integrations.',
+                '',
                 '### Parameters',
                 '- `shares` - The amount of shares to burn',
             ],
             name: 'redeem',
         },
+        {
+            accounts: [
+                {
+                    name: 'vault_state',
+                    writable: true,
+                },
+                {
+                    name: 'vault_deposit_ata',
+                    writable: true,
+                },
+                {
+                    name: 'sender_token_account',
+                    writable: true,
+                },
+                {
+                    name: 'sender_share_account',
+                    writable: true,
+                },
+                {
+                    name: 'fee_recipient_account',
+                    writable: true,
+                },
+                {
+                    name: 'share_mint',
+                    writable: true,
+                },
+                {
+                    name: 'deposit_mint',
+                    writable: true,
+                },
+                {
+                    name: 'signer',
+                    signer: true,
+                    writable: true,
+                },
+                {
+                    name: 'token_program',
+                },
+            ],
+            args: [
+                {
+                    name: 'shares',
+                    type: 'u64',
+                },
+                {
+                    name: 'min_assets_out',
+                    type: 'u64',
+                },
+            ],
+            discriminator: [37, 136, 51, 20, 129, 161, 11, 218],
+            docs: [
+                'Redeem funds from the Vault, refusing to pay out less than',
+                '`min_assets_out`.',
+                '',
+                'Same accounts and semantics as `redeem`, plus a caller-stated worst',
+                'acceptable payout, measured **net of the withdrawal fee** — what the',
+                'caller actually receives. Additive rather than a change to `redeem`, so',
+                'existing integrations keep working; pass 0 for identical behaviour.',
+                '',
+                '### Parameters',
+                '- `shares` - The amount of shares to burn',
+                '- `min_assets_out` - Revert with `SlippageExceeded` below this payout',
+            ],
+            name: 'redeem_checked',
+        },
         {
             accounts: [
                 {
@@ -733,6 +1103,44 @@ exports.vaultIdl = {
             ],
             name: 'set_aum_limits',
         },
+        {
+            accounts: [
+                {
+                    name: 'program_config',
+                    pda: {
+                        seeds: [
+                            {
+                                kind: 'const',
+                                value: [
+                                    112, 114, 111, 103, 114, 97, 109, 95, 99, 111, 110, 102, 105,
+                                    103,
+                                ],
+                            },
+                        ],
+                    },
+                    writable: true,
+                },
+                {
+                    name: 'authority',
+                    signer: true,
+                },
+            ],
+            args: [
+                {
+                    name: 'new_authority',
+                    type: 'pubkey',
+                },
+            ],
+            discriminator: [16, 200, 212, 18, 95, 43, 107, 89],
+            docs: [
+                'Rotate the key permitted to create vaults. Signed by the current',
+                'authority; see `override_config_authority` for the recovery path.',
+                '',
+                '### Parameters',
+                '- `new_authority` - The replacement authority (must not be the zero key)',
+            ],
+            name: 'set_config_authority',
+        },
         {
             accounts: [
                 {
@@ -813,9 +1221,13 @@ exports.vaultIdl = {
             docs: [
                 'Admin Updates the Withdrawal Fee',
                 '',
-                'Fee should discourage users from sandwiching operator_update_aum',
+                'Fee should discourage users from sandwiching operator_update_aum.',
                 '### Parameters',
-                '- `new_fee` - Max value 100% is 1_000_000',
+                '- `new_fee` - Fee in units of `FEE_RATE_DENOMINATOR_VALUE` (full denominator',
+                '≡ 100%). The handler caps `new_fee` strictly below',
+                '`FEE_RATE_DENOMINATOR_VALUE / 10` (i.e. < 10%); see',
+                '`set_withdrawal_fee::handler` for the exact cap expression. Higher',
+                'inputs revert with `WithdrawalFeeTooHigh`.',
             ],
             name: 'set_withdrawal_fee',
         },
@@ -981,6 +1393,55 @@ exports.vaultIdl = {
                 kind: 'struct',
             },
         },
+        {
+            docs: [
+                'Program-wide configuration.',
+                '',
+                'Exists so vault creation is authenticated rather than open to any paying',
+                'signer. See the namespace note in `initialize.rs` for why a',
+                '`(deposit_mint, vault_version)` pair cannot be reused once retired.',
+                '',
+                'The authority is stored here rather than hardcoded so it can be rotated with',
+                '`set_config_authority` instead of a program upgrade (upgrades require a',
+                'Fordefi-signed verified deploy).',
+            ],
+            name: 'ProgramConfig',
+            type: {
+                fields: [
+                    {
+                        docs: ['The only key permitted to call `initialize`.'],
+                        name: 'authority',
+                        type: 'pubkey',
+                    },
+                    {
+                        docs: [
+                            'Bump of this PDA, stored so callers need not recompute it.',
+                        ],
+                        name: 'bump',
+                        type: {
+                            array: ['u8', 1],
+                        },
+                    },
+                    {
+                        docs: [
+                            'Reserved. Lets a future change add policy fields (for example an',
+                            'allowlist of approved vault creators) without resizing the account.',
+                            'New fields must be carved **out of** this array, keeping `LEN` at 169:',
+                            '`initialize_config` uses `init` and can never be re-run, so once the',
+                            'config exists on mainnet a larger `LEN` would make Anchor allocate a',
+                            'different size for new deployments while the live account stays 169 and',
+                            'stops deserializing. Enforced by a compile-time assertion in',
+                            '`programs/august-vault/src/state/config.rs`.',
+                        ],
+                        name: 'padding',
+                        type: {
+                            array: ['u64', 16],
+                        },
+                    },
+                ],
+                kind: 'struct',
+            },
+        },
         {
             name: 'VaultState',
             type: {
@@ -1042,9 +1503,41 @@ exports.vaultIdl = {
                         type: 'bool',
                     },
                     {
+                        docs: [
+                            "This vault's virtual-share offset, in base units.",
+                            '',
+                            'Per-vault rather than global because the right value depends on what a',
+                            'base unit of the deposit mint is *worth*. The offset must dominate a',
+                            '1-unit retained sliver (so it is an absolute count), while',
+                            '`MIN_SUPPLY_MULTIPLE * offset` is the minimum first deposit — whose cost',
+                            'is that count times the base-unit price. One global constant cannot serve',
+                            'both a 6-decimal dollar stablecoin and an 8-decimal asset worth ~$100k.',
+                            '',
+                            '**Zero means "not set" and maps to [`EXTRA_SHARES`].** Vaults created',
+                            'before this field existed have zeroed padding, so they read 0 — both live',
+                            'mainnet vaults are in that state. Never read this field directly: on-chain',
+                            'use `VaultState::share_offset()`, and off-chain use',
+                            '`resolved_share_offset()` from the generated Rust client, which mirrors it.',
+                            'A raw 0 collapses the pricing to pure pro-rata, which agrees with the',
+                            'program only while the vault sits exactly at par.',
+                        ],
+                        name: 'share_offset',
+                        type: 'u64',
+                    },
+                    {
+                        docs: [
+                            'Reserved. New fields must be carved **out of** this array so `LEN` stays',
+                            '455, the size of the live mainnet vault accounts — enforced by the `const`',
+                            'assertion below the struct.',
+                            '',
+                            '**Declare them AFTER `share_offset`, never before it.** Inserting a field',
+                            'earlier shifts `share_offset` off byte 199, and every vault storing a',
+                            'non-default offset would then silently read 0 and fall back to the default.',
+                            '`share_offset_stays_at_its_byte_offset` fails if that happens.',
+                        ],
                         name: 'padding',
                         type: {
-                            array: ['u64', 32],
+                            array: ['u64', 31],
                         },
                     },
                 ],