@aura-protocol/cli 0.1.3 → 0.3.0

package/dist/lib/ika.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Thin wrappers around the Ika Encrypt and dWallet gRPC clients.
+ *
+ * Both clients are pre-alpha — data is public plaintext on-chain, no real
+ * FHE or MPC security yet. The interfaces match the Rust smoke tests in
+ * smoke/aura-devnet/ so the full confidential + execution flow works end-to-end.
+ *
+ * Encrypt gRPC: pre-alpha-dev-1.encrypt.ika-network.net:443
+ * dWallet gRPC: pre-alpha-dev-1.ika.ika-network.net:443
+ */
+import { PublicKey } from "@solana/web3.js";
+import { DEVNET_PRE_ALPHA_GRPC_URL as ENCRYPT_GRPC_URL } from "../vendor/encrypt/grpc.js";
+import { type DKGAttestation } from "../vendor/ika/grpc.js";
+export type { DKGAttestation };
+declare const IKA_GRPC_URL = "pre-alpha-dev-1.ika.ika-network.net:443";
+export { ENCRYPT_GRPC_URL, IKA_GRPC_URL };
+/**
+ * The 32-byte network encryption public key used by the pre-alpha Encrypt service.
+ * Matches `ENCRYPT_NETWORK_KEY` in the Rust smoke tests.
+ */
+export declare const ENCRYPT_NETWORK_KEY: Buffer<ArrayBuffer>;
+/**
+ * Encrypts a single u64 value via the Ika Encrypt gRPC service and returns
+ * the on-chain ciphertext account pubkey.
+ *
+ * In pre-alpha mode the value is stored as plaintext — no real FHE yet.
+ * The returned pubkey is the `handlePda` that must be verified on-chain
+ * before it can be used in a confidential proposal.
+ *
+ * @param value       The u64 value to encrypt (as a number or bigint).
+ * @param authorized  The Solana pubkey authorized to use this ciphertext
+ *                    (typically the AURA program ID).
+ * @param grpcUrl     Override the gRPC endpoint (defaults to devnet pre-alpha).
+ */
+export declare function encryptU64(value: number | bigint, authorized: PublicKey, grpcUrl?: string): Promise<PublicKey>;
+/**
+ * Encrypts multiple u64 values in a single gRPC call (more efficient than
+ * calling `encryptU64` separately for each value).
+ *
+ * Returns one pubkey per input value in the same order.
+ */
+export declare function encryptU64Batch(values: (number | bigint)[], authorized: PublicKey, grpcUrl?: string): Promise<PublicKey[]>;
+/**
+ * Reads a decrypted ciphertext value from the Encrypt network.
+ *
+ * In pre-alpha mode this returns the plaintext directly.
+ * The returned buffer contains the raw bytes (8 bytes for u64 LE).
+ *
+ * @param ciphertextId  The on-chain ciphertext account pubkey.
+ * @param signer        The pubkey authorized to read this ciphertext.
+ * @param grpcUrl       Override the gRPC endpoint.
+ */
+export declare function readCiphertext(ciphertextId: PublicKey, signer: PublicKey, grpcUrl?: string): Promise<{
+    value: Buffer;
+    fheType: number;
+    digest: Buffer;
+}>;
+/**
+ * Reads a u64 ciphertext and returns the decoded value.
+ * Convenience wrapper around `readCiphertext` for u64 values.
+ */
+export declare function readU64Ciphertext(ciphertextId: PublicKey, signer: PublicKey, grpcUrl?: string): Promise<bigint>;
+/**
+ * Drives the dWallet presign + sign flow via the Ika dWallet gRPC service.
+ *
+ * This is called after `execute_pending` creates the `MessageApproval` account
+ * on-chain. The dWallet network processes the presign and sign requests and
+ * writes the signature back to the `MessageApproval` account.
+ *
+ * @param senderPubkey      The Solana pubkey of the transaction sender (payer).
+ * @param dwalletAddr       The on-chain dWallet account pubkey (32 bytes).
+ * @param message           The message bytes to sign (keccak256 digest of the proposal).
+ * @param txSignature       The Solana transaction signature from `execute_pending`
+ *                          (used as the approval proof).
+ * @param grpcUrl           Override the gRPC endpoint.
+ * @param secretKey         64-byte Ed25519 secret key for signing BCS request data.
+ * @param sessionIdentifier 32-byte session identifier from DKG (live.session_identifier).
+ * @param dkgAttestation    Full DKG attestation from requestDKG.
+ * @returns The dWallet signature bytes.
+ */
+export declare function requestDwalletSign(senderPubkey: PublicKey, _dwalletAddr: PublicKey, message: Buffer, txSignature: Buffer, grpcUrl?: string, secretKey?: Uint8Array, sessionIdentifier?: Uint8Array, dkgAttestation?: DKGAttestation): Promise<Buffer>;

package/dist/lib/ika.js

@@ -0,0 +1,192 @@
+/**
+ * Thin wrappers around the Ika Encrypt and dWallet gRPC clients.
+ *
+ * Both clients are pre-alpha — data is public plaintext on-chain, no real
+ * FHE or MPC security yet. The interfaces match the Rust smoke tests in
+ * smoke/aura-devnet/ so the full confidential + execution flow works end-to-end.
+ *
+ * Encrypt gRPC: pre-alpha-dev-1.encrypt.ika-network.net:443
+ * dWallet gRPC: pre-alpha-dev-1.ika.ika-network.net:443
+ */
+import { PublicKey } from "@solana/web3.js";
+import { createEncryptClient, DEVNET_PRE_ALPHA_GRPC_URL as ENCRYPT_GRPC_URL, Chain as EncryptChain, encodeReadCiphertextMessage, } from "../vendor/encrypt/grpc.js";
+import { createIkaClient } from "../vendor/ika/grpc.js";
+const IKA_GRPC_URL = "pre-alpha-dev-1.ika.ika-network.net:443";
+export { ENCRYPT_GRPC_URL, IKA_GRPC_URL };
+/**
+ * FHE type for u64 values — matches `ENCRYPT_FHE_UINT64` in the Rust program.
+ */
+const FHE_TYPE_UINT64 = 4;
+const U64_MAX = (1n << 64n) - 1n;
+/**
+ * The 32-byte network encryption public key used by the pre-alpha Encrypt service.
+ * Matches `ENCRYPT_NETWORK_KEY` in the Rust smoke tests.
+ */
+export const ENCRYPT_NETWORK_KEY = Buffer.alloc(32, 0x55);
+/**
+ * Encrypts a single u64 value via the Ika Encrypt gRPC service and returns
+ * the on-chain ciphertext account pubkey.
+ *
+ * In pre-alpha mode the value is stored as plaintext — no real FHE yet.
+ * The returned pubkey is the `handlePda` that must be verified on-chain
+ * before it can be used in a confidential proposal.
+ *
+ * @param value       The u64 value to encrypt (as a number or bigint).
+ * @param authorized  The Solana pubkey authorized to use this ciphertext
+ *                    (typically the AURA program ID).
+ * @param grpcUrl     Override the gRPC endpoint (defaults to devnet pre-alpha).
+ */
+export async function encryptU64(value, authorized, grpcUrl = ENCRYPT_GRPC_URL) {
+    const client = createEncryptClient(grpcUrl);
+    try {
+        const bigintValue = BigInt(value);
+        if (bigintValue < 0n || bigintValue > U64_MAX) {
+            throw new Error("encryptU64 value must fit in u64");
+        }
+        // Encode the value as 8 little-endian bytes (u64 LE)
+        const valueBuf = Buffer.alloc(8);
+        valueBuf.writeBigUInt64LE(bigintValue, 0);
+        const result = await client.createInput({
+            chain: EncryptChain.Solana,
+            inputs: [
+                {
+                    ciphertextBytes: valueBuf,
+                    fheType: FHE_TYPE_UINT64,
+                },
+            ],
+            proof: Buffer.alloc(0),
+            authorized: authorized.toBuffer(),
+            networkEncryptionPublicKey: ENCRYPT_NETWORK_KEY,
+        });
+        if (result.ciphertextIdentifiers[0]?.length !== 32) {
+            throw new Error("Encrypt service returned an invalid ciphertext identifier");
+        }
+        return new PublicKey(result.ciphertextIdentifiers[0]);
+    }
+    finally {
+        client.close();
+    }
+}
+/**
+ * Encrypts multiple u64 values in a single gRPC call (more efficient than
+ * calling `encryptU64` separately for each value).
+ *
+ * Returns one pubkey per input value in the same order.
+ */
+export async function encryptU64Batch(values, authorized, grpcUrl = ENCRYPT_GRPC_URL) {
+    if (values.length === 0) {
+        return [];
+    }
+    const client = createEncryptClient(grpcUrl);
+    try {
+        const inputs = values.map((value) => {
+            const valueBuf = Buffer.alloc(8);
+            const bigintValue = BigInt(value);
+            if (bigintValue < 0n || bigintValue > U64_MAX) {
+                throw new Error("encryptU64Batch values must fit in u64");
+            }
+            valueBuf.writeBigUInt64LE(bigintValue, 0);
+            return { ciphertextBytes: valueBuf, fheType: FHE_TYPE_UINT64 };
+        });
+        const result = await client.createInput({
+            chain: EncryptChain.Solana,
+            inputs,
+            proof: Buffer.alloc(0),
+            authorized: authorized.toBuffer(),
+            networkEncryptionPublicKey: ENCRYPT_NETWORK_KEY,
+        });
+        if (result.ciphertextIdentifiers.length !== values.length) {
+            throw new Error(`Encrypt service returned ${result.ciphertextIdentifiers.length} identifiers for ${values.length} inputs`);
+        }
+        return result.ciphertextIdentifiers.map((id) => {
+            if (id?.length !== 32) {
+                throw new Error("Encrypt service returned an invalid ciphertext identifier");
+            }
+            return new PublicKey(id);
+        });
+    }
+    finally {
+        client.close();
+    }
+}
+/**
+ * Reads a decrypted ciphertext value from the Encrypt network.
+ *
+ * In pre-alpha mode this returns the plaintext directly.
+ * The returned buffer contains the raw bytes (8 bytes for u64 LE).
+ *
+ * @param ciphertextId  The on-chain ciphertext account pubkey.
+ * @param signer        The pubkey authorized to read this ciphertext.
+ * @param grpcUrl       Override the gRPC endpoint.
+ */
+export async function readCiphertext(ciphertextId, signer, grpcUrl = ENCRYPT_GRPC_URL) {
+    const client = createEncryptClient(grpcUrl);
+    try {
+        // Build a BCS-encoded ReadCiphertextMessage
+        // In pre-alpha, signature and reencryption key can be zero-filled
+        const message = encodeReadCiphertextMessage(0, // chain = Solana
+        ciphertextId.toBuffer(), Buffer.alloc(32), // zero reencryption key (pre-alpha: plaintext returned directly)
+        1n);
+        const result = await client.readCiphertext({
+            message,
+            signature: Buffer.alloc(64), // zero signature (pre-alpha: not validated)
+            signer: signer.toBuffer(),
+        });
+        return {
+            value: result.value,
+            fheType: result.fheType,
+            digest: result.digest,
+        };
+    }
+    finally {
+        client.close();
+    }
+}
+/**
+ * Reads a u64 ciphertext and returns the decoded value.
+ * Convenience wrapper around `readCiphertext` for u64 values.
+ */
+export async function readU64Ciphertext(ciphertextId, signer, grpcUrl = ENCRYPT_GRPC_URL) {
+    const { value } = await readCiphertext(ciphertextId, signer, grpcUrl);
+    if (value.length < 8) {
+        throw new Error(`Expected 8 bytes for u64, got ${value.length}`);
+    }
+    return value.readBigUInt64LE(0);
+}
+/**
+ * Drives the dWallet presign + sign flow via the Ika dWallet gRPC service.
+ *
+ * This is called after `execute_pending` creates the `MessageApproval` account
+ * on-chain. The dWallet network processes the presign and sign requests and
+ * writes the signature back to the `MessageApproval` account.
+ *
+ * @param senderPubkey      The Solana pubkey of the transaction sender (payer).
+ * @param dwalletAddr       The on-chain dWallet account pubkey (32 bytes).
+ * @param message           The message bytes to sign (keccak256 digest of the proposal).
+ * @param txSignature       The Solana transaction signature from `execute_pending`
+ *                          (used as the approval proof).
+ * @param grpcUrl           Override the gRPC endpoint.
+ * @param secretKey         64-byte Ed25519 secret key for signing BCS request data.
+ * @param sessionIdentifier 32-byte session identifier from DKG (live.session_identifier).
+ * @param dkgAttestation    Full DKG attestation from requestDKG.
+ * @returns The dWallet signature bytes.
+ */
+export async function requestDwalletSign(senderPubkey, _dwalletAddr, message, txSignature, grpcUrl = IKA_GRPC_URL, secretKey, sessionIdentifier, dkgAttestation) {
+    if (!sessionIdentifier || !dkgAttestation) {
+        throw new Error("requestDwalletSign requires sessionIdentifier and dkgAttestation from DKG. " +
+            "Pass the values returned by provisionDwallet().");
+    }
+    const client = createIkaClient(grpcUrl, secretKey);
+    try {
+        const senderBytes = senderPubkey.toBuffer();
+        // Step 1: request presign using the DKG session identifier
+        const presignId = await client.requestPresign(senderBytes, sessionIdentifier);
+        // Step 2: request sign with the presign ID, approval proof, and DKG attestation
+        const signature = await client.requestSign(senderBytes, sessionIdentifier, message, presignId, txSignature, dkgAttestation);
+        return Buffer.from(signature);
+    }
+    finally {
+        client.close();
+    }
+}
+//# sourceMappingURL=ika.js.map

package/dist/lib/ika.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ika.js","sourceRoot":"","sources":["../../src/lib/ika.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,mBAAmB,EACnB,yBAAyB,IAAI,gBAAgB,EAC7C,KAAK,IAAI,YAAY,EACrB,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAuB,MAAM,uBAAuB,CAAC;AAI7E,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAE/D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC;AAE1C;;GAEG;AACH,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;AAEjC;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AAE1D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAsB,EACtB,UAAqB,EACrB,UAAkB,gBAAgB;IAElC,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,WAAW,GAAG,EAAE,IAAI,WAAW,GAAG,OAAO,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,qDAAqD;QACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjC,QAAQ,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;YACtC,KAAK,EAAE,YAAY,CAAC,MAAM;YAC1B,MAAM,EAAE;gBACN;oBACE,eAAe,EAAE,QAAQ;oBACzB,OAAO,EAAE,eAAe;iBACzB;aACF;YACD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtB,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;YACjC,0BAA0B,EAAE,mBAAmB;SAChD,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAA2B,EAC3B,UAAqB,EACrB,UAAkB,gBAAgB;IAElC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,WAAW,GAAG,EAAE,IAAI,WAAW,GAAG,OAAO,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;YACD,QAAQ,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;YACtC,KAAK,EAAE,YAAY,CAAC,MAAM;YAC1B,MAAM;YACN,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtB,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;YACjC,0BAA0B,EAAE,mBAAmB;SAChD,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,qBAAqB,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CACb,4BAA4B,MAAM,CAAC,qBAAqB,CAAC,MAAM,oBAAoB,MAAM,CAAC,MAAM,SAAS,CAC1G,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YAC7C,IAAI,EAAE,EAAE,MAAM,KAAK,EAAE,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,YAAuB,EACvB,MAAiB,EACjB,UAAkB,gBAAgB;IAElC,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,4CAA4C;QAC5C,kEAAkE;QAClE,MAAM,OAAO,GAAG,2BAA2B,CACzC,CAAC,EAAE,iBAAiB;QACpB,YAAY,CAAC,QAAQ,EAAE,EACvB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,iEAAiE;QACnF,EAAE,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC;YACzC,OAAO;YACP,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,4CAA4C;YACzE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;SAC1B,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAe;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAgB;SAChC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,YAAuB,EACvB,MAAiB,EACjB,UAAkB,gBAAgB;IAElC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAuB,EACvB,YAAuB,EACvB,OAAe,EACf,WAAmB,EACnB,UAAkB,YAAY,EAC9B,SAAsB,EACtB,iBAA8B,EAC9B,cAA+B;IAE/B,IAAI,CAAC,iBAAiB,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,6EAA6E;YAC3E,iDAAiD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;QAE5C,2DAA2D;QAC3D,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,cAAc,CAC3C,WAAW,EACX,iBAAiB,CAClB,CAAC;QAEF,gFAAgF;QAChF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,CACxC,WAAW,EACX,iBAAiB,EACjB,OAAO,EACP,SAAS,EACT,WAAW,EACX,cAAc,CACf,CAAC;QAEF,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/lib/instructions.d.ts

@@ -0,0 +1,79 @@
+import { type AuraClient } from "@aura-protocol/sdk-ts";
+import { PublicKey, type TransactionInstruction } from "@solana/web3.js";
+type JsonRecord = Record<string, unknown>;
+export interface ProgramInstructionInput {
+    instruction: string;
+    accounts: JsonRecord;
+    args: JsonRecord | unknown[];
+}
+export interface InstructionAccountSchema {
+    name: string;
+    camelName: string;
+    signer: boolean;
+    writable: boolean;
+    optional: boolean;
+    address?: string;
+}
+export interface InstructionArgSchema {
+    name: string;
+    camelName: string;
+    type: unknown;
+    typeLabel: string;
+    sample: unknown;
+}
+export interface ProgramInstructionSchema {
+    name: string;
+    camelName: string;
+    accounts: InstructionAccountSchema[];
+    args: InstructionArgSchema[];
+}
+export interface ProgramInstructionBuild {
+    schema: ProgramInstructionSchema;
+    normalizedAccounts: JsonRecord;
+    normalizedArgs: unknown[];
+    instruction: TransactionInstruction;
+    requiredSigners: string[];
+}
+export declare function toCamelCase(value: string): string;
+export declare function getProgramInstructionSchema(name: string): ProgramInstructionSchema;
+export declare function getProgramInstructionCatalog(): {
+    domains: {
+        instructions: {
+            schema: ProgramInstructionSchema | null;
+            name: string;
+            label: string;
+            description: string;
+            maturity: import("@aura-protocol/sdk-ts").AuraFeatureMaturity;
+        }[];
+        id: import("@aura-protocol/sdk-ts").AuraFeatureDomainId;
+        label: string;
+        description: string;
+    }[];
+    totals: {
+        domains: number;
+        instructions: 161;
+    };
+};
+export declare function buildProgramInstruction(client: AuraClient, input: ProgramInstructionInput, options: {
+    programId: PublicKey;
+    defaultSigner?: PublicKey;
+}): Promise<ProgramInstructionBuild>;
+export declare function parseJsonInput(value: string | undefined, label: string): JsonRecord | unknown[];
+export declare function parseKeyValuePairs(values: string[] | undefined): JsonRecord;
+export declare function mergeJsonInput(base: JsonRecord | unknown[], overrides: JsonRecord): JsonRecord | unknown[];
+export declare function serializeInstructionBuild(build: ProgramInstructionBuild): {
+    schema: ProgramInstructionSchema;
+    normalizedAccounts: JsonRecord;
+    normalizedArgs: unknown[];
+    instruction: {
+        programId: string;
+        accounts: {
+            pubkey: string;
+            isSigner: boolean;
+            isWritable: boolean;
+        }[];
+        dataBase64: string;
+    };
+    requiredSigners: string[];
+};
+export {};