@brainai/satp-client 2.0.3 → 2.0.5

package/README.md

@@ -1,8 +1,9 @@
 # SATP V3 SDK - `@brainai/satp-client`
 
-**Solana Agent Token Protocol** - JavaScript/TypeScript SDK for interacting with the SATP V3 devnet programs.
+**Solana Agent Trust Protocol** - JavaScript/TypeScript SDK for reading and
+building reviewed SATP V3 program interactions.
 
-Current stable npm package: **@brainai/satp-client@2.0.1** | reviewed rc artifact: **@brainai/satp-client@2.0.2-rc.0** | Programs: **6**
+Current stable npm package: **@brainai/satp-client@2.0.3** | rc dist-tag: **@brainai/satp-client@2.0.2** | Programs: **6**
 
 ## Installation
 
@@ -10,31 +11,30 @@ Choose stable, rc, or Git based on what the consumer needs to prove:
 
 | Channel | Use when | Command |
 | --- | --- | --- |
-| Stable npm | Default production-style consumption of the stable public package. | `npm install @brainai/satp-client@2.0.1` |
-| Release candidate npm | Validating the reviewed rc package before promotion or producing reproducible rc manifests. | `npm install @brainai/satp-client@2.0.2-rc.0` |
-| Release candidate tag | Quick rc opt-in where a moving dist-tag is acceptable. | `npm install @brainai/satp-client@rc` |
+| Stable npm | Default production-style consumption of the stable public package. | `npm install @brainai/satp-client@2.0.3` |
+| Historical rc exact version | Explicit HQ-assigned reproduction or lockfile evidence for the historical pre-stable artifact. | `npm install @brainai/satp-client@2.0.2` |
+| Release candidate tag | Explicit HQ-assigned rc validation where a moving dist-tag is acceptable and the task names the tag as the target. | `npm install @brainai/satp-client@rc` |
 | Reviewed Git commit | PR coordination or source-review installs tied to an exact SATP commit. | `npm install git+https://github.com/brainAI-bot/satp.git#<SATP_COMMIT>` |
 
-The npm `latest` tag still resolves to `@brainai/satp-client@2.0.1`.
-Historical rc-tag readback may still show the older `0.1.0-rc.0` package until
-the rc channel is promoted. The reviewed RC-S6 artifact in this source tree is
-`@brainai/satp-client@2.0.2-rc.0`; downstream apps that need reproducible
-manifests should pin that exact version after promotion instead of relying on
-the moving `@rc` tag.
+Registry readback on 2026-07-26 shows npm `latest` resolves to
+`@brainai/satp-client@2.0.3` and the `rc` dist-tag resolves to `2.0.2`.
+Stable consumers should use `latest`/`2.0.3` unless HQ assigns an explicit
+release-candidate validation task.
 
 For stable consumer installs, pin the current published npm package:
 
 ```bash
-npm install @brainai/satp-client@2.0.1
+npm install @brainai/satp-client@2.0.3
 ```
 
-For exact rc validation:
+For rc validation:
 
 ```bash
-npm install @brainai/satp-client@2.0.2-rc.0
+npm install @brainai/satp-client@2.0.2
 ```
 
-For short-lived rc opt-in:
+Use `@rc` only when the HQ task names the moving tag itself as the validation
+target:
 
 ```bash
 npm install @brainai/satp-client@rc
@@ -49,14 +49,30 @@ npm install git+https://github.com/brainAI-bot/satp.git#<SATP_COMMIT>
 The old `0.0.0-extraction` label was extraction-branch metadata and is not the
 current consumer package. Do not treat branch-only Git installs as npm latest.
 
-Mainnet program IDs are intentionally not enabled in this release candidate.
-Constructors and helpers fail closed for `network: 'mainnet'` until an approved
-mainnet decision packet provides production program IDs.
+Mainnet program IDs are present for the reviewed V3 registry, but availability
+is not action approval. Mainnet writes, deploys, keypair use, authority changes,
+value-bearing escrow actions, npm promotion, and production claims still require
+a separate HQ approval and the relevant owner-gated runbook. See
+`docs/mainnet-authority-decision-packet-6c8a5545.md` for the public authority
+decision packet.
+
+RC-S6 semantic uncertainty outcomes are covered by the offline conformance gate
+merged in `93db1b3` (PR #53, `[#43394290]`) and runnable with
+`npm run test:conformance:rc-s6` from the repository root. Treat positive
+fixtures as deterministic SDK/schema compatibility only. Treat stale, revoked,
+malformed, unsupported-issuer, score-meaning, review-weight, escrow-reference,
+and AgentFolio copy-boundary fixtures as warning or fail-closed outcomes; do
+not convert them into verified badges, ranking, eligibility, payment state,
+escrow readiness, mainnet readiness, npm latest adoption, or product approval.
 
 **Runtime dependency:** `@solana/web3.js ^1.98.4`
 
 ## Quick Start
 
+For the root consumer quickstart covering stable npm, rc validation, Git-review
+pins, read-only trust packets, conformance checks, and network boundaries, see
+[`docs/quickstart.md`](../../docs/quickstart.md).
+
 ```javascript
 const { SATPV3SDK } = require('@brainai/satp-client');
 
@@ -167,6 +183,34 @@ builds a runtime policy action descriptor. It asserts
 `paymentAuthorization: false`, `actionAuthorization: false`,
 `spendAuthorized: false`, and `livePaymentRequired: false`.
 
+### Runtime Policy Adapter Helper
+
+`createRuntimePolicyAdapter(opts)` provides a host-oriented wrapper around the
+offline runtime policy helpers:
+
+```javascript
+const { createRuntimePolicyAdapter } = require('@brainai/satp-client');
+
+const adapter = createRuntimePolicyAdapter({
+  defaultActionType: 'mcp_protected_tool',
+  now: () => '2026-05-21T00:00:00Z',
+  policy: { minimumTrustScore: 70, maxAutoSpendUsd: 0 },
+});
+
+const action = adapter.action({
+  resource: 'mcp://protected/readiness',
+  capability: 'mcp:read',
+});
+const result = adapter.evaluate(identityPayload, action);
+const trace = adapter.auditTrace(identityPayload, action, { result });
+const summary = adapter.explain(result);
+```
+
+The adapter only builds local descriptors, local decisions, redacted audit
+traces, and display-safe reason summaries. It does not call RPC, read keypairs,
+sign, send transactions, approve x402 spend, treat payment as action
+authorization, write Solana state, deploy, publish, or restart production.
+
 ### Wallet-Control Challenge Helpers
 
 `buildWalletControlChallenge(opts)` creates a canonical, offline challenge that
@@ -213,7 +257,7 @@ if (!verification.ok) throw new Error(verification.errors.join('; '));
 
 ```javascript
 const sdk = new SATPV3SDK({ network, rpcUrl });
-// network: 'devnet' (default). 'mainnet' fails closed until approved IDs exist.
+// network: 'devnet' (default) or 'mainnet'.
 // rpcUrl: optional custom RPC endpoint
 ```
 
@@ -446,7 +490,7 @@ node test-v3-devnet.js
 # CPI integration tests (35)
 cd .. && node tests/devnet-cpi-integration.js
 
-# Release-safety defaults and mainnet fail-closed checks
+# Release-safety defaults and network-boundary checks
 node test-release-safety.js
 ```
 
@@ -462,8 +506,8 @@ const sdk = new SATPV3SDK({ network: 'devnet' });
 // Custom RPC
 const sdk = new SATPV3SDK({ rpcUrl: 'https://my-rpc.example.com' });
 
-// Mainnet currently fails closed until approved program IDs are configured
-assert.throws(() => new SATPV3SDK({ network: 'mainnet' }));
+// Mainnet uses the V3 registry IDs documented in Anchor.toml [programs.mainnet].
+const sdk = new SATPV3SDK({ network: 'mainnet' });
 ```
 
 ## Borsh Deserialization Helpers (v3.6.0)

package/examples/runtime-policy-adapter.js

@@ -1,14 +1,18 @@
 #!/usr/bin/env node
 'use strict';
 
-const { evaluateRuntimePolicy } = require('..');
+const {
+  buildRuntimePolicyActionDescriptor,
+  buildRuntimePolicyAuditTrace,
+  evaluateRuntimePolicy,
+} = require('..');
 
 const trustedIdentity = {
   agentId: 'brainchain-demo',
   active: true,
   satpVerified: true,
   trustScore: 88,
-  capabilities: ['mcp:deploy-readiness', 'satp:trust-read'],
+  capabilities: ['mcp:deploy-readiness', 'satp:trust-read', 'agentfolio:trust-read'],
   evidenceUpdatedAt: '2026-05-21T00:00:00Z',
 };
 
@@ -16,23 +20,24 @@ const examples = [
   {
     name: 'MCP protected tool',
     identity: trustedIdentity,
-    action: {
+    action: buildRuntimePolicyActionDescriptor({
       type: 'mcp_protected_tool',
       resource: 'mcp://protected/deploy-readiness',
       operation: 'read',
-      requiresCapability: 'mcp:deploy-readiness',
-      requiresFreshEvidence: true,
+      capability: 'mcp:deploy-readiness',
+    }),
+    options: {
+      now: '2026-05-21T00:00:00Z',
     },
   },
   {
     name: 'x402 paid endpoint',
     identity: trustedIdentity,
-    action: {
+    action: buildRuntimePolicyActionDescriptor('x402_endpoint', {
       type: 'x402_endpoint',
       resource: 'https://api.example.test/reputation',
-      operation: 'lookup',
       costUsd: 0.05,
-    },
+    }),
     options: {
       actionPaymentPreapproved: true,
       policy: { maxAutoSpendUsd: 0.01 },
@@ -41,12 +46,13 @@ const examples = [
   {
     name: 'Host trust-score degrade',
     identity: { ...trustedIdentity, trustScore: 62 },
-    action: {
-      type: 'host_trust_gate',
-      resource: 'satp://trust-score',
-      operation: 'gate',
+    action: buildRuntimePolicyActionDescriptor({
+      type: 'agentfolio_trust_gate',
+      profileId: 'brainchain-demo',
       minimumTrustScore: 80,
-      allowDegraded: true,
+    }),
+    options: {
+      now: '2026-05-21T00:00:00Z',
     },
   },
   {
@@ -73,3 +79,17 @@ for (const item of examples) {
   const result = evaluateRuntimePolicy(item.identity, item.action, item.options);
   console.log(JSON.stringify({ name: item.name, ...result }, null, 2));
 }
+
+const auditTrace = buildRuntimePolicyAuditTrace(
+  trustedIdentity,
+  {
+    type: 'mcp_protected_tool',
+    resource: 'mcp://protected/deploy-readiness',
+    operation: 'read',
+    requiresCapability: 'mcp:deploy-readiness',
+    requiresFreshEvidence: true,
+  },
+  { now: '2026-05-21T00:00:00Z' }
+);
+
+console.log(JSON.stringify({ name: 'Redacted audit trace', ...auditTrace }, null, 2));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainai/satp-client",
-  "version": "2.0.3",
+  "version": "2.0.5",
   "description": "SATP client SDK surface prepared for release-candidate review; publish only after the release packet passes.",
   "main": "src/index.js",
   "types": "src/index.d.ts",
@@ -31,6 +31,7 @@
     "runtime-policy:example": "node examples/runtime-policy-adapter.js",
     "test:wallet-control": "node test-wallet-control-challenge.js",
     "test:x402-discovery": "node test-x402-discovery.js",
+    "test:signer-policy": "node test-signer-policy.js",
     "check:exports": "node test-release-safety.js"
   },
   "keywords": [
@@ -43,7 +44,7 @@
     "web3"
   ],
   "author": "brainAI",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/brainAI-bot/satp.git"
@@ -55,11 +56,13 @@
   "dependencies": {
     "@solana/web3.js": "^1.98.4",
     "borsh": "^2.0.0",
-    "bs58": "^6.0.0"
+    "bs58": "^6.0.0",
+    "rpc-websockets": "9.3.5"
   },
   "private": false,
   "overrides": {
     "ws": "^8.21.0",
+    "rpc-websockets": "9.3.5",
     "jayson": {
       "uuid": "^11.1.1"
     }

package/src/borsh-reader.d.ts

@@ -137,6 +137,11 @@ export interface ParsedEscrowV3 {
   descriptionHash: string;
   deadline: number;
   nonce: number;
+  currency: 'SOL' | 'USDC' | string;
+  currencyCode: number;
+  tokenMint: string | null;
+  tokenVault: string | null;
+  tokenDecimals: number | null;
   status: EscrowStatusV3 | string;
   statusCode: number;
   minVerificationLevel: number;

package/src/borsh-reader.js

@@ -18,6 +18,7 @@
  */
 
 const { PublicKey } = require('@solana/web3.js');
+const { V3_IDL_ACCOUNT_DISCRIMINATORS } = require('./v3-idl-discriminators');
 
 // ═══════════════════════════════════════════════════
 //  BorshReader — streaming Borsh deserializer
@@ -377,6 +378,7 @@ function deserializeEscrowV3(data) {
     'Active', 'WorkSubmitted', 'Released',
     'Cancelled', 'Disputed', 'Resolved',
   ];
+  const ESCROW_CURRENCY_MAP = ['SOL', 'USDC'];
 
   const client = r.readPubkeyBase58();
   const agent = r.readPubkeyBase58();
@@ -386,6 +388,10 @@ function deserializeEscrowV3(data) {
   const descriptionHash = r.readFixedBytes32().toString('hex');
   const deadline = r.readI64();
   const nonce = r.readU64Num();
+  const currencyByte = r.readU8();
+  const tokenMint = r.readOptionPubkey();
+  const tokenVault = r.readOptionPubkey();
+  const tokenDecimals = r.readOption(() => r.readU8());
   const statusByte = r.readU8();
   const minVerificationLevel = r.readU8();
   const requireBorn = r.readBool();
@@ -408,6 +414,11 @@ function deserializeEscrowV3(data) {
     descriptionHash,
     deadline,
     nonce,
+    currency: ESCROW_CURRENCY_MAP[currencyByte] || `Unknown(${currencyByte})`,
+    currencyCode: currencyByte,
+    tokenMint,
+    tokenVault,
+    tokenDecimals,
     status: ESCROW_STATUS_MAP[statusByte] || `Unknown(${statusByte})`,
     statusCode: statusByte,
     minVerificationLevel,
@@ -437,17 +448,20 @@ function accountDiscriminator(accountName) {
     .slice(0, 8);
 }
 
-// Pre-compute discriminators for all V3 account types
-const DISCRIMINATORS = {
-  GenesisRecord: accountDiscriminator('GenesisRecord'),
-  LinkedWallet: accountDiscriminator('LinkedWallet'),
-  MintTracker: accountDiscriminator('MintTracker'),
-  NameRegistry: accountDiscriminator('NameRegistry'),
-  Review: accountDiscriminator('Review'),
-  ReviewCounter: accountDiscriminator('ReviewCounter'),
-  Attestation: accountDiscriminator('Attestation'),
-  EscrowV3: accountDiscriminator('EscrowV3'),
-};
+function loadGeneratedIdlDiscriminators() {
+  const discriminators = {};
+
+  for (const [accountName, discriminator] of Object.entries(V3_IDL_ACCOUNT_DISCRIMINATORS)) {
+    if (!Array.isArray(discriminator) || discriminator.length !== 8) {
+      throw new Error(`${accountName} is missing an 8-byte V3 IDL discriminator`);
+    }
+    discriminators[accountName] = Buffer.from(discriminator);
+  }
+
+  return Object.freeze(discriminators);
+}
+
+const DISCRIMINATORS = loadGeneratedIdlDiscriminators();
 
 const DESERIALIZERS = {
   GenesisRecord: deserializeGenesisRecord,

package/src/index.d.ts

@@ -151,11 +151,15 @@ export interface RuntimePolicyIdentityPayload {
 }
 
 export interface RuntimePolicyActionDescriptor {
+  schemaVersion?: string;
+  surface?: string;
   type?: string;
   resource?: string;
   operation?: string;
+  capability?: string;
   requiresCapability?: string;
   minimumTrustScore?: number;
+  trustScoreMinimum?: number;
   allowDegraded?: boolean;
   requiresFreshEvidence?: boolean;
   costUsd?: number;
@@ -168,6 +172,32 @@ export interface RuntimePolicyActionDescriptor {
   } | X402EvidenceLookup;
 }
 
+export interface RuntimePolicyActionDescriptorBuildInput extends RuntimePolicyActionDescriptor {
+  profileId?: string;
+}
+
+export interface RuntimePolicyHostActionDescriptor extends RuntimePolicyActionDescriptor {
+  schemaVersion: 'satp.runtimePolicyHostActionDescriptor.v1';
+  type: string;
+  resource: string | null;
+  operation: string | null;
+  requiresCapability: string | null;
+  minimumTrustScore: number | null;
+  allowDegraded: boolean;
+  requiresFreshEvidence: boolean;
+  costUsd: number;
+  protectedTool: boolean;
+  operatorApprovalRequired: boolean;
+  guardrails: {
+    localDecisionOnly: true;
+    writesSolanaState: false;
+    usesKeypairs: false;
+    deploysPrograms: false;
+    publishesPackages: false;
+    livePaymentRequired: false;
+  };
+}
+
 export interface RuntimePolicyConfig {
   minimumTrustScore?: number;
   denyTrustScoreBelow?: number;
@@ -184,6 +214,13 @@ export interface RuntimePolicyOptions {
   policy?: RuntimePolicyConfig;
 }
 
+export interface RuntimePolicyAdapterOptions {
+  policy?: RuntimePolicyConfig;
+  now?: string | number | Date | (() => string | number | Date);
+  redact?: (value: string) => string;
+  defaultActionType?: string;
+}
+
 export interface RuntimePolicyResult {
   decision: RuntimePolicyDecision;
   reasonCodes: string[];
@@ -191,6 +228,126 @@ export interface RuntimePolicyResult {
   checks: Record<string, unknown>;
 }
 
+export interface RuntimePolicyAuditTrace {
+  schemaVersion: 'satp.runtimePolicyAuditTrace.v1';
+  mode: 'offline-local-runtime-policy-trace';
+  generatedAt: string;
+  decision: RuntimePolicyDecision;
+  reasonCodes: string[];
+  message: string;
+  subject: {
+    agentId: string | null;
+    active: boolean;
+    verified: boolean;
+    trustScoreBand: '90-100' | '80-89' | '70-79' | '50-69' | '25-49' | '0-24';
+    evidenceUpdatedAt: string | number | Date | null;
+    capabilityCount: number;
+  };
+  action: {
+    type: string;
+    operation: string | null;
+    resourceKind: string | null;
+    resourceLabel: string | null;
+    requiresCapability: string | null;
+    requiresFreshEvidence: boolean;
+    protectedTool: boolean;
+    operatorApprovalRequired: boolean;
+    costUsd: number | null;
+    evidenceLookup: {
+      type: string | null;
+      configured: true;
+      maxCostUsd: number | null;
+    } | null;
+  };
+  checks: Record<string, unknown>;
+  guardrails: {
+    localDecisionOnly: true;
+    writesSolanaState: false;
+    usesKeypairs: false;
+    deploysPrograms: false;
+    publishesPackages: false;
+    authorizesPayment: false;
+    authorizesAgentActionFromPayment: false;
+  };
+}
+
+export interface RuntimePolicyAdapter {
+  action(
+    input?: RuntimePolicyActionDescriptorBuildInput | string,
+    overrides?: RuntimePolicyActionDescriptorBuildInput
+  ): RuntimePolicyHostActionDescriptor;
+  evaluate(
+    identityPayload: RuntimePolicyIdentityPayload,
+    actionDescriptor: RuntimePolicyActionDescriptor,
+    options?: RuntimePolicyOptions
+  ): RuntimePolicyResult;
+  auditTrace(
+    identityPayload: RuntimePolicyIdentityPayload,
+    actionDescriptor: RuntimePolicyActionDescriptor,
+    options?: RuntimePolicyOptions & { result?: RuntimePolicyResult }
+  ): RuntimePolicyAuditTrace;
+  explain(result: RuntimePolicyResult): string[];
+}
+
+export type SatpSignerRole = 'operational_signer' | 'owner_upgrade_authority';
+
+export type SatpOperationalSignerAction =
+  | 'devnet_fee_payment'
+  | 'devnet_transaction_submission'
+  | 'offline_transaction_preparation'
+  | 'read_only_rpc';
+
+export type SatpOwnerGatedAction =
+  | 'program_upgrade'
+  | 'authority_transfer'
+  | 'key_generation'
+  | 'key_rotation'
+  | 'mainnet_deploy'
+  | 'devnet_deploy'
+  | 'npm_publish'
+  | 'funds_custody'
+  | 'funds_transfer';
+
+export interface SignerSeparationOptions {
+  network?: Network;
+  operationalSignerPublicKey: PublicKey | string;
+  ownerUpgradeAuthorityPublicKey: PublicKey | string;
+  operationalAllowedActions?: SatpOperationalSignerAction[];
+}
+
+export interface SignerSeparationConfig {
+  schemaVersion: 'satp.signerSeparation.v1';
+  network: Network;
+  operationalSigner: {
+    role: 'operational_signer';
+    publicKey: string;
+    allowedActions: SatpOperationalSignerAction[];
+    blockedActions: SatpOwnerGatedAction[];
+    authorityBoundary: 'no_upgrade_authority_no_key_management_no_funds_custody';
+  };
+  ownerUpgradeAuthority: {
+    role: 'owner_upgrade_authority';
+    publicKey: string;
+    custody: 'owner_held';
+    operationalSignerMayUse: false;
+  };
+  flags: {
+    publicKeysOnly: true;
+    readsKeypairs: false;
+    generatesKeypairs: false;
+    transfersAuthority: false;
+    deploysPrograms: false;
+    publishesPackages: false;
+    writesSolanaState: false;
+  };
+}
+
+export interface SignerSeparationValidation {
+  ok: boolean;
+  errors: string[];
+  normalized: SignerSeparationConfig | null;
+}
+
 export const DECISIONS: Readonly<{
   ALLOW: 'allow';
   DENY: 'deny';
@@ -199,14 +356,47 @@ export const DECISIONS: Readonly<{
 }>;
 
 export const REASON_CODES: Readonly<Record<string, string>>;
+export const RUNTIME_POLICY_AUDIT_TRACE_SCHEMA_VERSION: 'satp.runtimePolicyAuditTrace.v1';
+export const RUNTIME_POLICY_HOST_ACTION_DESCRIPTOR_SCHEMA_VERSION: 'satp.runtimePolicyHostActionDescriptor.v1';
 export const DEFAULT_POLICY: Readonly<Required<RuntimePolicyConfig>>;
 
+export const SATP_SIGNER_ROLES: Readonly<{
+  OPERATIONAL_SIGNER: 'operational_signer';
+  OWNER_UPGRADE_AUTHORITY: 'owner_upgrade_authority';
+}>;
+
+export const OPERATIONAL_SIGNER_ALLOWED_ACTIONS: Readonly<SatpOperationalSignerAction[]>;
+export const OWNER_UPGRADE_AUTHORITY_BLOCKED_ACTIONS: Readonly<SatpOwnerGatedAction[]>;
+
+export function buildSignerSeparationConfig(
+  opts: SignerSeparationOptions
+): SignerSeparationConfig;
+
+export function validateSignerSeparationConfig(
+  config: SignerSeparationConfig | Record<string, unknown> | null | undefined
+): SignerSeparationValidation;
+
 export function evaluateRuntimePolicy(
   identityPayload: RuntimePolicyIdentityPayload,
   actionDescriptor: RuntimePolicyActionDescriptor,
   options?: RuntimePolicyOptions
 ): RuntimePolicyResult;
 
+export function buildRuntimePolicyActionDescriptor(
+  input?: RuntimePolicyActionDescriptorBuildInput | string,
+  overrides?: RuntimePolicyActionDescriptorBuildInput
+): RuntimePolicyHostActionDescriptor;
+
+export function buildRuntimePolicyAuditTrace(
+  identityPayload: RuntimePolicyIdentityPayload,
+  actionDescriptor: RuntimePolicyActionDescriptor,
+  options?: RuntimePolicyOptions & { result?: RuntimePolicyResult }
+): RuntimePolicyAuditTrace;
+
+export function createRuntimePolicyAdapter(
+  options?: RuntimePolicyAdapterOptions
+): RuntimePolicyAdapter;
+
 export interface WalletControlChallengeOptions {
   agentId: string;
   wallet: PublicKey | string;
@@ -393,7 +583,26 @@ export function anchorDiscriminator(ixName: string): Buffer;
 
 // ─── V3 PDA Helpers ─────────────────────────────────────
 
-export { getV3ProgramIds, hashAgentId, hashName, getGenesisPDA, getV3ReputationAuthorityPDA, getV3ValidationAuthorityPDA, getV3MintTrackerPDA, getNameRegistryPDA, getLinkedWalletPDA, getV3ReviewPDA, getV3ReviewCounterPDA, getV3AttestationPDA, getV3EscrowPDA } from './v3-pda';
+export {
+  getV3ProgramIds,
+  hashAgentId,
+  hashName,
+  getGenesisPDA,
+  getV3ReputationAuthorityPDA,
+  getV3ValidationAuthorityPDA,
+  getV3MintTrackerPDA,
+  getNameRegistryPDA,
+  getLinkedWalletPDA,
+  getV3ReviewPDA,
+  getV3ReviewCounterPDA,
+  getV3AttestationPDA,
+  getV3EscrowPDA,
+  getAssociatedTokenAddress,
+  getV3EscrowVaultATA,
+  V3_DEVNET_TOKEN_MINTS,
+  SPL_TOKEN_PROGRAM_ID,
+  ASSOCIATED_TOKEN_PROGRAM_ID,
+} from './v3-pda';
 
 export function prepareIdentityAttestationRequest(
   opts: IdentityAttestationRequestOptions