@augustdigital/sdk 9.5.0 → 9.7.0

package/README.md

@@ -36,7 +36,7 @@ const sdk = new AugustSDK({
     -1: 'https://api.mainnet-beta.solana.com', // Solana
   },
   keys: {
-    august: 'YOUR_API_KEY', // Optional: required for allocations, health factors, and sub-account operations
+    august: 'YOUR_API_KEY', // Optional: vault reads, allocations and vault-linked sub-account reads work without it
   },
   monitoring: {
     env: 'DEV', // Optional: 'DEV' enables console logging (defaults to 'PROD')

package/lib/adapters/evm/index.d.ts

@@ -28,7 +28,7 @@ declare class EVMAdapter {
      * Get the normalized ethers-compatible signer
      * Converts viem WalletClient to ethers Signer if needed
      */
-    private getSigner;
+    private _getSigner;
     vaultApprove(options: IContractWriteOptions): Promise<string>;
     /**
      * Approve a vault to spend a deposit token, returning a discriminated

package/lib/adapters/evm/index.js

@@ -49,7 +49,7 @@ class EVMAdapter {
      * Get the normalized ethers-compatible signer
      * Converts viem WalletClient to ethers Signer if needed
      */
-    async getSigner() {
+    async _getSigner() {
         if (!this.rawSigner) {
             throw new Error('No signer provided');
         }
@@ -65,7 +65,7 @@ class EVMAdapter {
     }
     // Core EVM operations
     async vaultApprove(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, write_actions_1.vaultApprove)(signer, options);
     }
     /**
@@ -86,7 +86,7 @@ class EVMAdapter {
      * ```
      */
     async approve(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, write_actions_1.approve)(signer, options);
     }
     /**
@@ -112,7 +112,7 @@ class EVMAdapter {
      * ```
      */
     async vaultAllowance(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.vaultAllowance)(signer, options);
     }
     // Vault operations (delegate to modules)
@@ -143,7 +143,7 @@ class EVMAdapter {
      * ```
      */
     async vaultDeposit(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, write_actions_1.vaultDeposit)(signer, options);
     }
     /**
@@ -171,7 +171,7 @@ class EVMAdapter {
      * ```
      */
     async vaultRequestRedeem(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, write_actions_1.vaultRequestRedeem)(signer, options);
     }
     /**
@@ -197,7 +197,7 @@ class EVMAdapter {
      * ```
      */
     async depositNative(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, write_actions_1.depositNative)(signer, options);
     }
     /**
@@ -227,7 +227,7 @@ class EVMAdapter {
      * ```
      */
     async swapAndDeposit(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, write_actions_1.swapAndDeposit)(signer, options);
     }
     /**
@@ -239,7 +239,7 @@ class EVMAdapter {
      * @returns The transaction hash of the `deposit` call.
      */
     async depositViaSwapRouter(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, write_actions_1.depositViaSwapRouter)(signer, options);
     }
     /**
@@ -251,7 +251,7 @@ class EVMAdapter {
      * @returns The transaction hash of the `depositNativeToken` call.
      */
     async depositNativeViaSwapRouter(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, write_actions_1.depositNativeViaSwapRouter)(signer, options);
     }
     /**
@@ -277,7 +277,7 @@ class EVMAdapter {
      * ```
      */
     async swapRouterDeposit(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, write_actions_1.swapRouterDeposit)(signer, options);
     }
     /**
@@ -296,7 +296,7 @@ class EVMAdapter {
      * ```
      */
     async getSwapRouterDepositResult(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, swap_router_1.getSwapRouterDepositResult)(signer, options);
     }
     /**
@@ -329,7 +329,7 @@ class EVMAdapter {
      * ```
      */
     async vaultRedeem(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, write_actions_1.vaultRedeem)(signer, options);
     }
     /**
@@ -362,23 +362,23 @@ class EVMAdapter {
      * ```
      */
     async claimWithdrawal(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, write_actions_1.claimWithdrawal)(signer, options);
     }
     async sendersWhitelistAddress(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.sendersWhitelistAddress)(signer, options);
     }
     async isWhitelisted(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.isWhitelisted)(signer, options);
     }
     async getDeposited(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.getDeposited)(signer, options);
     }
     async getRemainingAllocations(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.getRemainingAllocations)(signer, options);
     }
     /**
@@ -397,7 +397,7 @@ class EVMAdapter {
      * ```
      */
     async previewDeposit(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.previewDeposit)(signer, options);
     }
     /**
@@ -415,7 +415,7 @@ class EVMAdapter {
      * ```
      */
     async previewRedeem(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.previewRedeem)(signer, options);
     }
     /**
@@ -430,7 +430,7 @@ class EVMAdapter {
      * ```
      */
     async allowance(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.allowance)(signer, options);
     }
     /**
@@ -444,7 +444,7 @@ class EVMAdapter {
      * ```
      */
     async balanceOf(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.balanceOf)(signer, options);
     }
     /**
@@ -459,7 +459,7 @@ class EVMAdapter {
      * ```
      */
     async maxDeposit(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.maxDeposit)(signer, options);
     }
     /**
@@ -475,7 +475,7 @@ class EVMAdapter {
      * ```
      */
     async getIdleLiquidity(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.getIdleLiquidity)(signer, options);
     }
     /**
@@ -489,7 +489,7 @@ class EVMAdapter {
      * ```
      */
     async lagDuration(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.lagDuration)(signer, options);
     }
     /**
@@ -504,7 +504,7 @@ class EVMAdapter {
      * ```
      */
     async getWithdrawalEpoch(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.getWithdrawalEpoch)(signer, options);
     }
     /**
@@ -521,7 +521,7 @@ class EVMAdapter {
      * ```
      */
     async getBurnableAmountByReceiver(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.getBurnableAmountByReceiver)(signer, options);
     }
     /**
@@ -536,7 +536,7 @@ class EVMAdapter {
      * ```
      */
     async getRequirementByDate(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.getRequirementByDate)(signer, options);
     }
     /**
@@ -551,7 +551,7 @@ class EVMAdapter {
      * ```
      */
     async getScheduledTransactionsByDate(options) {
-        const signer = await this.getSigner();
+        const signer = await this._getSigner();
         return (0, read_actions_1.getScheduledTransactionsByDate)(signer, options);
     }
 }

package/lib/adapters/solana/types.d.ts

@@ -85,6 +85,10 @@ export interface ISolanaDepositOptions {
      * Skips the quote and the single snapshot read it needs. `0n` restores the
      * unguarded behaviour of the plain `deposit` instruction.
      *
+     * When the handler's `idl` predates `deposit_checked`, a non-zero floor or
+     * any `slippageBps` throws {@link AugustValidationError} instead of being
+     * silently dropped; with neither, the plain `deposit` is sent.
+     *
      * Must be a `bigint` in `0 .. 2^64-1`; anything else throws
      * {@link AugustValidationError} before the transaction is built.
      */
@@ -107,6 +111,10 @@ export interface ISolanaRedeemOptions {
      * Explicit floor in raw deposit-mint units, net of the withdrawal fee,
      * passed to `redeem_checked` as is. Skips the quote. `0n` restores the
      * unguarded behaviour of the plain `redeem` instruction.
+     *
+     * When the handler's `idl` predates `redeem_checked`, a non-zero floor or
+     * any `slippageBps` throws {@link AugustValidationError} instead of being
+     * silently dropped; with neither, the plain `redeem` is sent.
      */
     minAssetsOut?: bigint;
 }

package/lib/adapters/solana/vault.actions.d.ts

@@ -55,7 +55,9 @@ export declare function slippageHint(e: unknown): string;
  *   is given, the vault state and share mint are read to quote the shares this
  *   deposit should mint, and that quote lowered by `options.slippageBps`
  *   (default {@link DEFAULT_SLIPPAGE_BPS}) is passed as the floor; the program
- *   reverts with `SlippageExceeded` if execution would mint fewer.
+ *   reverts with `SlippageExceeded` if execution would mint fewer. An `idl`
+ *   that predates `deposit_checked` gets the plain `deposit` with no floor,
+ *   unless `options` asks for one — then it throws {@link AugustValidationError}.
  */
 export declare function handleSolanaDeposit({ provider, connection, network, vaultProgramId, vaultAddress, depositAmount, publicKey, idl, options, }: {
     vaultProgramId: PublicKey | string;
@@ -83,6 +85,9 @@ export declare function handleSolanaDeposit({ provider, connection, network, vau
  *   handler already reads, **net of the withdrawal fee**, and that quote
  *   lowered by `options.slippageBps` (default {@link DEFAULT_SLIPPAGE_BPS}) is
  *   passed as the floor; the program reverts with `SlippageExceeded` below it.
+ *   An `idl` that predates `redeem_checked` gets the plain `redeem` with no
+ *   floor, unless `options` asks for one — then it throws
+ *   {@link AugustValidationError}.
  * @throws AugustValidationError on missing wallet/programId or invalid amount,
  *   or when the wallet holds fewer shares than `redeemShares`.
  * @throws AugustSDKError when a candidate token account's balance cannot be

package/lib/adapters/solana/vault.actions.js

@@ -99,6 +99,52 @@ function validateExplicitFloor(value, label) {
     }
     return value;
 }
+/**
+ * Decide whether a handler can send the slippage-checked instruction, or must
+ * fall back to the plain one.
+ *
+ * `idl` is caller-supplied, and an IDL generated before the program shipped
+ * `deposit_checked` / `redeem_checked` produces a `Program` with no such
+ * method. Until 9.4.0 the handlers sent the plain instructions, so those same
+ * inputs used to work; calling the checked method on them throws a TypeError
+ * before anything is sent (AUGUST-8023). The program still accepts the plain
+ * instructions, with the behaviour a floor of `0` gives the checked ones, so
+ * falling back preserves what those callers had.
+ *
+ * The fallback is refused when the caller asked for protection — a non-zero
+ * explicit floor, or any `slippageBps` — since the plain instruction would
+ * silently drop it. An explicit floor of `0n` is the documented "no floor" and
+ * falls back.
+ *
+ * Probes `program.methods` rather than `idl.instructions`: that is the object
+ * the handler calls, and it already reflects Anchor's camelCase conversion.
+ *
+ * @param program - Anchor program built from the caller's IDL.
+ * @param checkedMethod - `'depositChecked'` or `'redeemChecked'`.
+ * @param floor - The caller's explicit `minSharesOut` / `minAssetsOut`, if any.
+ * @param slippageBps - The caller's tolerance, if any.
+ * @param handler - Handler name, for the log line and the error.
+ * @returns `true` to send the checked instruction, `false` for the plain one.
+ * @throws {@link AugustValidationError} when the IDL lacks the checked
+ *   instruction and the caller asked for a floor.
+ */
+function sendsCheckedInstruction({ program, checkedMethod, floor, slippageBps, handler, }) {
+    const methods = program.methods;
+    if (typeof methods[checkedMethod] === 'function')
+        return true;
+    const instruction = checkedMethod === 'depositChecked' ? 'deposit_checked' : 'redeem_checked';
+    const floorOption = checkedMethod === 'depositChecked' ? 'minSharesOut' : 'minAssetsOut';
+    if ((floor !== undefined && floor !== 0n) || slippageBps !== undefined) {
+        throw new core_1.AugustValidationError('INVALID_INPUT', `${handler}: the supplied IDL does not declare \`${instruction}\`, so ` +
+            `the requested ${floorOption} / slippageBps cannot be enforced. Pass ` +
+            "the SDK's bundled IDL (`Solana.constants.vaultIdl`), or omit both " +
+            'options to send the unguarded instruction.');
+    }
+    core_1.Logger.log.warn(handler, `Supplied IDL does not declare \`${instruction}\`; sending the plain ` +
+        "instruction without a slippage floor. Pass the SDK's bundled IDL to " +
+        'enable slippage protection.');
+    return false;
+}
 /**
  * The vault state and share-mint supply as of a **single slot**.
  *
@@ -265,7 +311,9 @@ async function resolveUserTokenAccountPair({ connection, owner, mints, }) {
  *   is given, the vault state and share mint are read to quote the shares this
  *   deposit should mint, and that quote lowered by `options.slippageBps`
  *   (default {@link DEFAULT_SLIPPAGE_BPS}) is passed as the floor; the program
- *   reverts with `SlippageExceeded` if execution would mint fewer.
+ *   reverts with `SlippageExceeded` if execution would mint fewer. An `idl`
+ *   that predates `deposit_checked` gets the plain `deposit` with no floor,
+ *   unless `options` asks for one — then it throws {@link AugustValidationError}.
  */
 async function handleSolanaDeposit({ provider, connection, network = constants_1.fallbackNetwork, vaultProgramId, vaultAddress, depositAmount, publicKey, idl, options = {}, }) {
     try {
@@ -281,6 +329,21 @@ async function handleSolanaDeposit({ provider, connection, network = constants_1
         // Before any RPC: an unusable floor should cost the caller nothing.
         if (options.minSharesOut !== undefined)
             validateExplicitFloor(options.minSharesOut, 'minSharesOut');
+        const _vaultProgramId = new web3_js_1.PublicKey(vaultProgramId);
+        const program = utils_1.SolanaUtils.getProgram({
+            provider,
+            idl,
+            programId: _vaultProgramId.toBase58(),
+        });
+        // Also before any RPC: a floor the caller's IDL cannot enforce is refused
+        // on the spot rather than after the mint and token-account reads.
+        const checked = sendsCheckedInstruction({
+            program,
+            checkedMethod: 'depositChecked',
+            floor: options.minSharesOut,
+            slippageBps: options.slippageBps,
+            handler: 'handleSolanaDeposit',
+        });
         const { depositMint, shareMint, vaultVersion } = await utils_1.SolanaUtils.getVaultMints({
             network,
             connection,
@@ -291,14 +354,8 @@ async function handleSolanaDeposit({ provider, connection, network = constants_1
         if (!depositMint || !shareMint) {
             throw new Error('Failed to read vault mints from on-chain state');
         }
-        const _vaultProgramId = new web3_js_1.PublicKey(vaultProgramId);
         const _publicKey = new web3_js_1.PublicKey(publicKey);
         const _depositMint = new web3_js_1.PublicKey(depositMint);
-        const program = utils_1.SolanaUtils.getProgram({
-            provider,
-            idl,
-            programId: _vaultProgramId.toBase58(),
-        });
         core_1.Logger.log.info('handleSolanaDeposit', 'Program', program);
         const vaultStatePda = vaultAddress
             ? new web3_js_1.PublicKey(vaultAddress)
@@ -394,7 +451,10 @@ async function handleSolanaDeposit({ provider, connection, network = constants_1
         core_1.Logger.log.info('handleSolanaDeposit', 'Deposit mint', _depositMint?.toBase58());
         core_1.Logger.log.info('handleSolanaDeposit', 'Signer', _publicKey.toBase58());
         let minSharesOut;
-        if (options.minSharesOut !== undefined) {
+        if (!checked) {
+            // The plain instruction takes no floor, so there is nothing to quote.
+        }
+        else if (options.minSharesOut !== undefined) {
             minSharesOut = options.minSharesOut;
         }
         else {
@@ -417,9 +477,11 @@ async function handleSolanaDeposit({ provider, connection, network = constants_1
                 slippageBps: options.slippageBps ?? pricing_1.DEFAULT_SLIPPAGE_BPS,
             });
         }
-        core_1.Logger.log.info('handleSolanaDeposit', 'Min shares out (raw)', minSharesOut.toString());
-        const tx = await program.methods
-            .depositChecked(depositAmountRaw, new anchor_1.BN(minSharesOut.toString()))
+        core_1.Logger.log.info('handleSolanaDeposit', 'Min shares out (raw)', minSharesOut?.toString() ?? 'none (plain deposit)');
+        const methods = program.methods;
+        const tx = await (minSharesOut === undefined
+            ? methods.deposit(depositAmountRaw)
+            : methods.depositChecked(depositAmountRaw, new anchor_1.BN(minSharesOut.toString())))
             .accounts({
             vaultState: vaultStatePda,
             vaultTokenAta: vaultTokenAtaPda,
@@ -478,6 +540,9 @@ async function handleSolanaDeposit({ provider, connection, network = constants_1
  *   handler already reads, **net of the withdrawal fee**, and that quote
  *   lowered by `options.slippageBps` (default {@link DEFAULT_SLIPPAGE_BPS}) is
  *   passed as the floor; the program reverts with `SlippageExceeded` below it.
+ *   An `idl` that predates `redeem_checked` gets the plain `redeem` with no
+ *   floor, unless `options` asks for one — then it throws
+ *   {@link AugustValidationError}.
  * @throws AugustValidationError on missing wallet/programId or invalid amount,
  *   or when the wallet holds fewer shares than `redeemShares`.
  * @throws AugustSDKError when a candidate token account's balance cannot be
@@ -503,6 +568,20 @@ async function handleSolanaRedeem({ provider, connection, vaultProgramId, vaultA
         // Before any RPC: an unusable floor should cost the caller nothing.
         if (options.minAssetsOut !== undefined)
             validateExplicitFloor(options.minAssetsOut, 'minAssetsOut');
+        const _vaultProgramId = new web3_js_1.PublicKey(vaultProgramId);
+        const program = utils_1.SolanaUtils.getProgram({
+            provider,
+            idl,
+            programId: _vaultProgramId.toBase58(),
+        });
+        // See `handleSolanaDeposit`: refused before any RPC.
+        const checked = sendsCheckedInstruction({
+            program,
+            checkedMethod: 'redeemChecked',
+            floor: options.minAssetsOut,
+            slippageBps: options.slippageBps,
+            handler: 'handleSolanaRedeem',
+        });
         const { depositMint, shareMint, vaultVersion } = await utils_1.SolanaUtils.getVaultMints({
             network: provider.connection.rpcEndpoint.includes('devnet')
                 ? 'devnet'
@@ -515,14 +594,8 @@ async function handleSolanaRedeem({ provider, connection, vaultProgramId, vaultA
         if (!depositMint || !shareMint) {
             throw new Error('Failed to read vault mints from on-chain state');
         }
-        const _vaultProgramId = new web3_js_1.PublicKey(vaultProgramId);
         const _depositMint = new web3_js_1.PublicKey(depositMint);
         const _publicKey = new web3_js_1.PublicKey(publicKey);
-        const program = utils_1.SolanaUtils.getProgram({
-            provider,
-            idl,
-            programId: _vaultProgramId.toBase58(),
-        });
         const vaultStatePda = vaultAddress
             ? new web3_js_1.PublicKey(vaultAddress)
             : utils_1.SolanaUtils.deriveVaultStatePda(_vaultProgramId);
@@ -598,7 +671,10 @@ async function handleSolanaRedeem({ provider, connection, vaultProgramId, vaultA
         // No extra reads here: the share mint (supply) and vault state (assets,
         // offset, fee, fee recipient) came from the snapshot above.
         let minAssetsOut;
-        if (options.minAssetsOut !== undefined) {
+        if (!checked) {
+            // The plain instruction takes no floor, so there is nothing to quote.
+        }
+        else if (options.minAssetsOut !== undefined) {
             minAssetsOut = options.minAssetsOut;
         }
         else {
@@ -639,9 +715,11 @@ async function handleSolanaRedeem({ provider, connection, vaultProgramId, vaultA
         core_1.Logger.log.info('handleSolanaRedeem', 'Share mint:', shareMintAddr.toBase58());
         core_1.Logger.log.info('handleSolanaRedeem', 'Deposit mint:', _depositMint?.toBase58());
         core_1.Logger.log.info('handleSolanaRedeem', 'Signer:', _publicKey.toBase58());
-        core_1.Logger.log.info('handleSolanaRedeem', 'Min assets out, net of fee (raw):', minAssetsOut.toString());
-        const tx = await program.methods
-            .redeemChecked(redeemSharesRaw, new anchor_1.BN(minAssetsOut.toString()))
+        core_1.Logger.log.info('handleSolanaRedeem', 'Min assets out, net of fee (raw):', minAssetsOut?.toString() ?? 'none (plain redeem)');
+        const methods = program.methods;
+        const tx = await (minAssetsOut === undefined
+            ? methods.redeem(redeemSharesRaw)
+            : methods.redeemChecked(redeemSharesRaw, new anchor_1.BN(minAssetsOut.toString())))
             .accounts({
             vaultState: vaultStatePda,
             vaultDepositAta: vaultTokenAtaPda,

package/lib/core/analytics/app-name.js

@@ -29,7 +29,7 @@ const errors_1 = require("../errors");
  *   characters, or is shaped like an EVM address.
  */
 function validateAppName(value) {
-    const docsHint = 'See https://docs.augustdigital.io/developers/typescript-sdk#app-name';
+    const docsHint = 'See https://docs.augustdigital.io/developers/typescript-sdk/javascript-sdk#app-name';
     if (typeof value !== 'string' || value.trim().length === 0) {
         throw new errors_1.AugustValidationError('INVALID_INPUT', `August SDK: \`appName\` is required. Pass a stable kebab-case slug identifying your application (e.g. "acme-trader"). ${docsHint}`);
     }

package/lib/core/analytics/constants.d.ts

@@ -3,3 +3,13 @@
  * This is an internal constant - not exposed to SDK users.
  */
 export declare const SENTRY_DSN = "https://ca39246016d0b43154f0640314cbd3b5@o4507215496609792.ingest.de.sentry.io/4511864614813776";
+/**
+ * `appName` slugs of applications August/Upshift operate themselves.
+ *
+ * Traffic from these is tagged `partner.tier: 'internal'` so that
+ * `partner.tier:unverified` in Sentry already means "external integrator"
+ * before the backend verification endpoint exists. Anything not listed stays
+ * `unverified`; the future verified flow adds a `verified` tier alongside
+ * rather than replacing this list.
+ */
+export declare const FIRST_PARTY_APP_NAMES: ReadonlySet<string>;

package/lib/core/analytics/constants.js

@@ -1,9 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SENTRY_DSN = void 0;
+exports.FIRST_PARTY_APP_NAMES = exports.SENTRY_DSN = void 0;
 /**
  * Sentry DSN for SDK analytics.
  * This is an internal constant - not exposed to SDK users.
  */
 exports.SENTRY_DSN = 'https://ca39246016d0b43154f0640314cbd3b5@o4507215496609792.ingest.de.sentry.io/4511864614813776';
+/**
+ * `appName` slugs of applications August/Upshift operate themselves.
+ *
+ * Traffic from these is tagged `partner.tier: 'internal'` so that
+ * `partner.tier:unverified` in Sentry already means "external integrator"
+ * before the backend verification endpoint exists. Anything not listed stays
+ * `unverified`; the future verified flow adds a `verified` tier alongside
+ * rather than replacing this list.
+ */
+exports.FIRST_PARTY_APP_NAMES = new Set([
+    'upshift-web-app',
+    'upshift-earn',
+    'upshift-prime',
+    'august-cli',
+    'august-mcp',
+]);
 //# sourceMappingURL=constants.js.map

package/lib/core/analytics/index.d.ts

@@ -2,9 +2,10 @@
  * Analytics module for SDK usage tracking via Sentry.
  *
  * Features:
- * - User identification (API key hash, wallet, fingerprint, session)
- * - Method call tracking with timing
- * - Cache hit/miss rate monitoring
+ * - User identification (API key hash, wallet, domain, fingerprint, session)
+ * - Method call tracking with timing, classified by {@link METHOD_CATEGORIES}
+ * - Application attribution (`app.name`, `partner.id`, `partner.tier`,
+ *   `sdk.surface`) on every event and span
  * - API response time tracking
  * - Chain/network usage distribution
  *
@@ -12,12 +13,14 @@
  * ```typescript
  * // Analytics enabled by default
  * const sdk = new AugustSDK({
+ *   appName: 'acme-trader',
  *   providers: { 1: 'https://...' },
  *   keys: { august: '...' },
  * });
  *
  * // Opt-out of analytics
  * const sdk = new AugustSDK({
+ *   appName: 'acme-trader',
  *   providers: { 1: 'https://...' },
  *   keys: { august: '...' },
  *   analytics: { enabled: false },
@@ -29,7 +32,7 @@ export { hashApiKey, getSessionId, generateFingerprint, createUserIdentity, getU
 export { initializeSentry, updateUser, clearUser, isAnalyticsEnabled, getSentry, resetAnalytics, captureSdkException, } from './sentry';
 export { getSentrySDK, getSentryRuntime } from './sentry-runtime';
 export { readEnv, isAnalyticsDisabledViaEnv, isAnalyticsForcedOnViaEnv, isNodeDevOrTestEnv, } from './env';
-export { trackApiCall, trackNetworkSwitch, getCacheStats, resetCacheStats, } from './metrics';
+export { trackApiCall, trackNetworkSwitch, trackKeyVerification, getCacheStats, resetCacheStats, } from './metrics';
 export { sanitizeArgs, sanitizeObject, computeArgShape } from './sanitize';
 export { withMethodTracking, withSyncMethodTracking, instrumentClass, } from './instrumentation';
 export { METHOD_CATEGORIES, getMethodCategory, type MethodCategory, } from './method-taxonomy';

package/lib/core/analytics/index.js

@@ -3,9 +3,10 @@
  * Analytics module for SDK usage tracking via Sentry.
  *
  * Features:
- * - User identification (API key hash, wallet, fingerprint, session)
- * - Method call tracking with timing
- * - Cache hit/miss rate monitoring
+ * - User identification (API key hash, wallet, domain, fingerprint, session)
+ * - Method call tracking with timing, classified by {@link METHOD_CATEGORIES}
+ * - Application attribution (`app.name`, `partner.id`, `partner.tier`,
+ *   `sdk.surface`) on every event and span
  * - API response time tracking
  * - Chain/network usage distribution
  *
@@ -13,12 +14,14 @@
  * ```typescript
  * // Analytics enabled by default
  * const sdk = new AugustSDK({
+ *   appName: 'acme-trader',
  *   providers: { 1: 'https://...' },
  *   keys: { august: '...' },
  * });
  *
  * // Opt-out of analytics
  * const sdk = new AugustSDK({
+ *   appName: 'acme-trader',
  *   providers: { 1: 'https://...' },
  *   keys: { august: '...' },
  *   analytics: { enabled: false },
@@ -26,7 +29,7 @@
  * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.chainIdToTagValue = exports.getMethodCategory = exports.METHOD_CATEGORIES = exports.instrumentClass = exports.withSyncMethodTracking = exports.withMethodTracking = exports.computeArgShape = exports.sanitizeObject = exports.sanitizeArgs = exports.resetCacheStats = exports.getCacheStats = exports.trackNetworkSwitch = exports.trackApiCall = exports.isNodeDevOrTestEnv = exports.isAnalyticsForcedOnViaEnv = exports.isAnalyticsDisabledViaEnv = exports.readEnv = exports.getSentryRuntime = exports.getSentrySDK = exports.captureSdkException = exports.resetAnalytics = exports.getSentry = exports.isAnalyticsEnabled = exports.clearUser = exports.updateUser = exports.initializeSentry = exports.getUserId = exports.createUserIdentity = exports.generateFingerprint = exports.getSessionId = exports.hashApiKey = void 0;
+exports.chainIdToTagValue = exports.getMethodCategory = exports.METHOD_CATEGORIES = exports.instrumentClass = exports.withSyncMethodTracking = exports.withMethodTracking = exports.computeArgShape = exports.sanitizeObject = exports.sanitizeArgs = exports.resetCacheStats = exports.getCacheStats = exports.trackKeyVerification = exports.trackNetworkSwitch = exports.trackApiCall = exports.isNodeDevOrTestEnv = exports.isAnalyticsForcedOnViaEnv = exports.isAnalyticsDisabledViaEnv = exports.readEnv = exports.getSentryRuntime = exports.getSentrySDK = exports.captureSdkException = exports.resetAnalytics = exports.getSentry = exports.isAnalyticsEnabled = exports.clearUser = exports.updateUser = exports.initializeSentry = exports.getUserId = exports.createUserIdentity = exports.generateFingerprint = exports.getSessionId = exports.hashApiKey = void 0;
 // User identity utilities
 var user_identity_1 = require("./user-identity");
 Object.defineProperty(exports, "hashApiKey", { enumerable: true, get: function () { return user_identity_1.hashApiKey; } });
@@ -57,6 +60,7 @@ Object.defineProperty(exports, "isNodeDevOrTestEnv", { enumerable: true, get: fu
 var metrics_1 = require("./metrics");
 Object.defineProperty(exports, "trackApiCall", { enumerable: true, get: function () { return metrics_1.trackApiCall; } });
 Object.defineProperty(exports, "trackNetworkSwitch", { enumerable: true, get: function () { return metrics_1.trackNetworkSwitch; } });
+Object.defineProperty(exports, "trackKeyVerification", { enumerable: true, get: function () { return metrics_1.trackKeyVerification; } });
 Object.defineProperty(exports, "getCacheStats", { enumerable: true, get: function () { return metrics_1.getCacheStats; } });
 Object.defineProperty(exports, "resetCacheStats", { enumerable: true, get: function () { return metrics_1.resetCacheStats; } });
 // Sanitization utilities

package/lib/core/analytics/instrumentation.js

@@ -40,6 +40,10 @@ function withMethodTracking(methodName, method, getChainId) {
                 op: 'sdk.method',
                 name: methodName,
                 attributes: {
+                    // Scope tags only reach the root span in Sentry's span dataset;
+                    // child spans need the identity copied on as attributes or they
+                    // cannot be filtered by app or partner.
+                    ...(0, sentry_1.getSpanAttributes)(),
                     chainId: chainId?.toString() || 'unknown',
                     'sdk.chain': (0, chain_name_1.chainIdToTagValue)(chainId),
                     'sdk.category': category,
@@ -222,12 +226,12 @@ function trackSyncMethodCall(methodName, metrics, args) {
         // Measurements omitted: sync methods have no span of their own, so setMeasurement
         // would attach to whatever parent transaction happens to be active on the scope,
         // overwriting its counters. The breadcrumb above already captures success/failure.
+        // `sdk.category` and `sdk.chain` stay off the global scope: concurrent sync
+        // calls would race on them and stamp stale values onto unrelated events (the
+        // breadcrumb above carries both per call). `sdk.last_chainId` stays because
+        // `isMutedChainEvent` in sentry.ts reads it to drop muted-chain events.
         sdk.setTag('sdk.last_sync_method', methodName);
-        if (metrics.category) {
-            sdk.setTag('sdk.category', metrics.category);
-        }
         if (metrics.chainId !== undefined) {
-            sdk.setTag('sdk.chain', (0, chain_name_1.chainIdToTagValue)(metrics.chainId));
             sdk.setTag('sdk.last_chainId', metrics.chainId.toString());
         }
     }