@dexterai/vault 0.2.1 → 0.3.1

package/dist/idl/dexter_vault.json

@@ -0,0 +1,1417 @@
+{
+  "address": "Hg3wRaydFtJhYrdvYrKECacpJYDsC9Px7yKmpncj2fhc",
+  "metadata": {
+    "name": "dexter_vault",
+    "version": "0.1.0",
+    "spec": "0.1.0",
+    "description": "Created with Anchor"
+  },
+  "instructions": [
+    {
+      "name": "finalize_withdrawal",
+      "discriminator": [
+        178,
+        87,
+        206,
+        68,
+        201,
+        186,
+        164,
+        232
+      ],
+      "accounts": [
+        {
+          "name": "swig",
+          "docs": [
+            "Position 0 — REQUIRED at this index by Swig's ProgramExec authority",
+            "validator. When a Swig::SignV2 follows this instruction in the same",
+            "transaction, Swig's on-chain validator inspects accounts[0..1] of the",
+            "preceding instruction and rejects unless they're [swig, swig_wallet].",
+            "",
+            "We additionally enforce `swig.key() == vault.swig_address` via the",
+            "`address` constraint so a caller cannot pass an arbitrary Swig account",
+            "in here — defense in depth: even if Swig's own validation changes in a",
+            "future program upgrade, this vault keeps its own invariant.",
+            "",
+            "deserialize or dereference it."
+          ]
+        },
+        {
+          "name": "swig_wallet_address",
+          "docs": [
+            "Position 1 — required by Swig's ProgramExec validator (see `swig`).",
+            "The Swig wallet address is the PDA owning the SPL token ATA being",
+            "debited; it is derived under the Swig program at",
+            "`[\"swig-wallet-address\", swig_pubkey]`.",
+            "",
+            "We independently verify the canonical derivation via Anchor's `seeds`",
+            "+ `seeds::program` constraint. If a caller supplied a fake account, our",
+            "program rejects before any Swig CPI runs — we do not rely on Swig",
+            "catching it downstream.",
+            ""
+          ],
+          "pda": {
+            "seeds": [
+              {
+                "kind": "const",
+                "value": [
+                  115,
+                  119,
+                  105,
+                  103,
+                  45,
+                  119,
+                  97,
+                  108,
+                  108,
+                  101,
+                  116,
+                  45,
+                  97,
+                  100,
+                  100,
+                  114,
+                  101,
+                  115,
+                  115
+                ]
+              },
+              {
+                "kind": "account",
+                "path": "swig"
+              }
+            ],
+            "program": {
+              "kind": "const",
+              "value": [
+                13,
+                12,
+                233,
+                66,
+                225,
+                231,
+                197,
+                6,
+                226,
+                24,
+                223,
+                13,
+                125,
+                241,
+                197,
+                47,
+                175,
+                220,
+                53,
+                41,
+                228,
+                141,
+                103,
+                77,
+                29,
+                178,
+                76,
+                117,
+                181,
+                76,
+                204,
+                190
+              ]
+            }
+          }
+        },
+        {
+          "name": "vault",
+          "writable": true
+        },
+        {
+          "name": "instructions_sysvar",
+          "address": "Sysvar1nstructions1111111111111111111111111"
+        }
+      ],
+      "args": [
+        {
+          "name": "args",
+          "type": {
+            "defined": {
+              "name": "FinalizeWithdrawalArgs"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "force_release",
+      "discriminator": [
+        122,
+        190,
+        243,
+        252,
+        54,
+        202,
+        208,
+        234
+      ],
+      "accounts": [
+        {
+          "name": "vault",
+          "writable": true
+        },
+        {
+          "name": "instructions_sysvar",
+          "docs": [
+            "buyer's passkey signature via the SIMD-0075 precompile sibling."
+          ],
+          "address": "Sysvar1nstructions1111111111111111111111111"
+        }
+      ],
+      "args": [
+        {
+          "name": "args",
+          "type": {
+            "defined": {
+              "name": "ForceReleaseArgs"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "initialize_vault",
+      "discriminator": [
+        48,
+        191,
+        163,
+        44,
+        71,
+        129,
+        63,
+        164
+      ],
+      "accounts": [
+        {
+          "name": "vault",
+          "writable": true
+        },
+        {
+          "name": "payer",
+          "writable": true,
+          "signer": true
+        },
+        {
+          "name": "dexter_authority",
+          "docs": [
+            "The Dexter session authority to bind to this vault. Must sign init, so",
+            "a vault can only be created bound to an authority that consented. This",
+            "key may later mutate `pending_voucher_count` (settle_voucher /",
+            "force_release) — and only this key. It can never move funds."
+          ],
+          "signer": true
+        },
+        {
+          "name": "system_program",
+          "address": "11111111111111111111111111111111"
+        }
+      ],
+      "args": [
+        {
+          "name": "args",
+          "type": {
+            "defined": {
+              "name": "InitializeVaultArgs"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "prove_passkey",
+      "discriminator": [
+        35,
+        175,
+        41,
+        143,
+        201,
+        118,
+        49,
+        184
+      ],
+      "accounts": [
+        {
+          "name": "vault",
+          "docs": [
+            "Read-only: this instruction proves passkey control and mutates NOTHING."
+          ]
+        },
+        {
+          "name": "instructions_sysvar",
+          "docs": [
+            "passkey signature via the SIMD-0075 precompile sibling instruction."
+          ],
+          "address": "Sysvar1nstructions1111111111111111111111111"
+        }
+      ],
+      "args": [
+        {
+          "name": "args",
+          "type": {
+            "defined": {
+              "name": "ProvePasskeyArgs"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "register_session_key",
+      "discriminator": [
+        69,
+        94,
+        60,
+        44,
+        49,
+        199,
+        183,
+        233
+      ],
+      "accounts": [
+        {
+          "name": "vault",
+          "docs": [
+            "Receives the new `active_session`. Mutated, no signer required: the",
+            "passkey signature embedded in the args (verified via the SIMD-0075",
+            "precompile sibling) is what authorizes the mutation."
+          ],
+          "writable": true
+        },
+        {
+          "name": "instructions_sysvar",
+          "docs": [
+            "instruction in the transaction MUST be a secp256r1_verify call whose",
+            "signed message is `authenticatorData || sha256(clientDataJSON)` and",
+            "whose `clientDataJSON.challenge` decodes to sha256(registration_message)."
+          ],
+          "address": "Sysvar1nstructions1111111111111111111111111"
+        }
+      ],
+      "args": [
+        {
+          "name": "args",
+          "type": {
+            "defined": {
+              "name": "RegisterSessionKeyArgs"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "request_withdrawal",
+      "discriminator": [
+        251,
+        85,
+        121,
+        205,
+        56,
+        201,
+        12,
+        177
+      ],
+      "accounts": [
+        {
+          "name": "vault",
+          "writable": true
+        },
+        {
+          "name": "instructions_sysvar",
+          "address": "Sysvar1nstructions1111111111111111111111111"
+        }
+      ],
+      "args": [
+        {
+          "name": "args",
+          "type": {
+            "defined": {
+              "name": "RequestWithdrawalArgs"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "revoke_session_key",
+      "discriminator": [
+        81,
+        192,
+        32,
+        110,
+        104,
+        116,
+        144,
+        151
+      ],
+      "accounts": [
+        {
+          "name": "vault",
+          "docs": [
+            "Mutated to clear `active_session`. No signer required; the passkey",
+            "signature in the args is the authorization."
+          ],
+          "writable": true
+        },
+        {
+          "name": "instructions_sysvar",
+          "docs": [
+            "instruction in the transaction MUST be a secp256r1_verify call."
+          ],
+          "address": "Sysvar1nstructions1111111111111111111111111"
+        }
+      ],
+      "args": [
+        {
+          "name": "args",
+          "type": {
+            "defined": {
+              "name": "RevokeSessionKeyArgs"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "rotate_dexter_authority",
+      "discriminator": [
+        145,
+        60,
+        4,
+        119,
+        180,
+        205,
+        236,
+        134
+      ],
+      "accounts": [
+        {
+          "name": "vault",
+          "writable": true
+        },
+        {
+          "name": "dexter_authority",
+          "docs": [
+            "Must equal the vault's CURRENT `dexter_authority`. Only the current",
+            "authority can hand off to a new one — so the session-master key can be",
+            "rotated without bricking existing vaults."
+          ],
+          "signer": true,
+          "relations": [
+            "vault"
+          ]
+        }
+      ],
+      "args": [
+        {
+          "name": "args",
+          "type": {
+            "defined": {
+              "name": "RotateDexterAuthorityArgs"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "rotate_passkey",
+      "discriminator": [
+        28,
+        134,
+        49,
+        89,
+        196,
+        34,
+        58,
+        174
+      ],
+      "accounts": [
+        {
+          "name": "vault",
+          "writable": true
+        },
+        {
+          "name": "instructions_sysvar",
+          "docs": [
+            "CURRENT passkey signature via the SIMD-0075 precompile sibling."
+          ],
+          "address": "Sysvar1nstructions1111111111111111111111111"
+        }
+      ],
+      "args": [
+        {
+          "name": "args",
+          "type": {
+            "defined": {
+              "name": "RotatePasskeyArgs"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "set_swig",
+      "discriminator": [
+        253,
+        229,
+        89,
+        206,
+        192,
+        118,
+        137,
+        165
+      ],
+      "accounts": [
+        {
+          "name": "vault",
+          "writable": true
+        },
+        {
+          "name": "instructions_sysvar",
+          "address": "Sysvar1nstructions1111111111111111111111111"
+        }
+      ],
+      "args": [
+        {
+          "name": "args",
+          "type": {
+            "defined": {
+              "name": "SetSwigArgs"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "set_swig_atomic",
+      "discriminator": [
+        119,
+        111,
+        247,
+        215,
+        190,
+        3,
+        170,
+        23
+      ],
+      "accounts": [
+        {
+          "name": "vault",
+          "docs": [
+            "The dexter-vault PDA — initialized by initialize_vault, mutated here",
+            "(we set swig_address)."
+          ],
+          "writable": true
+        },
+        {
+          "name": "fee_payer",
+          "docs": [
+            "The fee payer + role-0 bootstrap authority. MUST be a tx-level signer."
+          ],
+          "writable": true,
+          "signer": true
+        },
+        {
+          "name": "swig_account",
+          "docs": [
+            "The Swig state account, derived as `findProgramAddress([swig_id], swig_program)`.",
+            "Swig will initialize it during the CreateV1 CPI."
+          ],
+          "writable": true
+        },
+        {
+          "name": "swig_wallet_address",
+          "docs": [
+            "The Swig wallet PDA (different from swig_account — it's the spending",
+            "authority address). CPI'd into by CreateV1."
+          ],
+          "writable": true
+        },
+        {
+          "name": "swig_program",
+          "docs": [
+            "The Swig program itself."
+          ],
+          "address": "swigypWHEksbC64pWKwah1WTeh9JXwx8H1rJHLdbQMB"
+        },
+        {
+          "name": "system_program",
+          "docs": [
+            "System program — Swig CreateV1 needs it to create the state account."
+          ],
+          "address": "11111111111111111111111111111111"
+        },
+        {
+          "name": "instructions_sysvar",
+          "docs": [
+            "Instructions sysvar — read by verify_passkey_signed."
+          ],
+          "address": "Sysvar1nstructions1111111111111111111111111"
+        }
+      ],
+      "args": [
+        {
+          "name": "args",
+          "type": {
+            "defined": {
+              "name": "SetSwigAtomicArgs"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "settle_tab_voucher",
+      "discriminator": [
+        173,
+        22,
+        98,
+        31,
+        110,
+        129,
+        59,
+        161
+      ],
+      "accounts": [
+        {
+          "name": "swig",
+          "docs": [
+            "Position 0 — REQUIRED at this index by Swig's ProgramExec authority",
+            "validator. When a Swig::SignV2 follows this instruction in the same",
+            "transaction, Swig's on-chain validator inspects accounts[0..1] of",
+            "the preceding instruction and rejects unless they're",
+            "[swig, swig_wallet], AND that the preceding instruction's data",
+            "starts with a registered marker discriminator.",
+            "",
+            "Also bound to `vault.swig_address` via the Anchor `address`",
+            "constraint, so a caller cannot pass an arbitrary Swig account here.",
+            "",
+            "deserialize or dereference it."
+          ]
+        },
+        {
+          "name": "swig_wallet_address",
+          "docs": [
+            "Position 1 — required by Swig's ProgramExec validator (see `swig`).",
+            "The Swig wallet address is the PDA owning the SPL token ATA being",
+            "debited; derived under the Swig program at",
+            "`[\"swig-wallet-address\", swig_pubkey]`.",
+            ""
+          ],
+          "pda": {
+            "seeds": [
+              {
+                "kind": "const",
+                "value": [
+                  115,
+                  119,
+                  105,
+                  103,
+                  45,
+                  119,
+                  97,
+                  108,
+                  108,
+                  101,
+                  116,
+                  45,
+                  97,
+                  100,
+                  100,
+                  114,
+                  101,
+                  115,
+                  115
+                ]
+              },
+              {
+                "kind": "account",
+                "path": "swig"
+              }
+            ],
+            "program": {
+              "kind": "const",
+              "value": [
+                13,
+                12,
+                233,
+                66,
+                225,
+                231,
+                197,
+                6,
+                226,
+                24,
+                223,
+                13,
+                125,
+                241,
+                197,
+                47,
+                175,
+                220,
+                53,
+                41,
+                228,
+                141,
+                103,
+                77,
+                29,
+                178,
+                76,
+                117,
+                181,
+                76,
+                204,
+                190
+              ]
+            }
+          }
+        },
+        {
+          "name": "vault",
+          "writable": true
+        },
+        {
+          "name": "dexter_authority",
+          "docs": [
+            "Must equal `vault.dexter_authority` — only the recorded authority",
+            "can drive the gate-counter decrement. The buyer's session-key",
+            "signature is what authorizes the SPEND amount; this signer is what",
+            "authorizes the counter mutation. Same model as the existing",
+            "`settle_voucher`. NOTE: this signer does NOT sign the Swig transfer",
+            "in [N+1] — that's signed by the swig wallet PDA via Swig's",
+            "ProgramExec authority, gated by the vault program being the",
+            "ProgramExec authority on the Swig."
+          ],
+          "signer": true,
+          "relations": [
+            "vault"
+          ]
+        },
+        {
+          "name": "instructions_sysvar",
+          "address": "Sysvar1nstructions1111111111111111111111111"
+        }
+      ],
+      "args": [
+        {
+          "name": "args",
+          "type": {
+            "defined": {
+              "name": "SettleTabVoucherArgs"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "name": "settle_voucher",
+      "discriminator": [
+        144,
+        176,
+        128,
+        220,
+        156,
+        79,
+        41,
+        54
+      ],
+      "accounts": [
+        {
+          "name": "vault",
+          "writable": true
+        },
+        {
+          "name": "dexter_authority",
+          "docs": [
+            "Must equal the `dexter_authority` recorded on the vault at init.",
+            "`has_one` enforces this — closing Finding B (previously any signer",
+            "could mutate the counter)."
+          ],
+          "signer": true,
+          "relations": [
+            "vault"
+          ]
+        }
+      ],
+      "args": [
+        {
+          "name": "args",
+          "type": {
+            "defined": {
+              "name": "SettleVoucherArgs"
+            }
+          }
+        }
+      ]
+    }
+  ],
+  "accounts": [
+    {
+      "name": "Vault",
+      "discriminator": [
+        211,
+        8,
+        232,
+        43,
+        2,
+        152,
+        117,
+        119
+      ]
+    }
+  ],
+  "errors": [
+    {
+      "code": 6000,
+      "name": "CoolingOffNotElapsed",
+      "msg": "Cooling-off period has not elapsed"
+    },
+    {
+      "code": 6001,
+      "name": "PendingVouchersExist",
+      "msg": "Pending vouchers must settle before withdrawal can finalize"
+    },
+    {
+      "code": 6002,
+      "name": "NoPendingWithdrawal",
+      "msg": "No pending withdrawal request"
+    },
+    {
+      "code": 6003,
+      "name": "PasskeyVerificationFailed",
+      "msg": "Passkey signature verification failed"
+    },
+    {
+      "code": 6004,
+      "name": "InvalidVoucherSignature",
+      "msg": "Voucher signature does not match Dexter session key"
+    },
+    {
+      "code": 6005,
+      "name": "ForceReleaseTooEarly",
+      "msg": "force_release grace period has not elapsed"
+    },
+    {
+      "code": 6006,
+      "name": "NothingToRelease",
+      "msg": "No stuck voucher to force-release"
+    },
+    {
+      "code": 6007,
+      "name": "UnsupportedVaultVersion",
+      "msg": "Vault account version is not supported by this program"
+    },
+    {
+      "code": 6008,
+      "name": "SessionAlreadyActive",
+      "msg": "A session is already active on this vault and has not expired"
+    },
+    {
+      "code": 6009,
+      "name": "SessionExpiryInPast",
+      "msg": "Session expiry must be in the future"
+    },
+    {
+      "code": 6010,
+      "name": "SessionCapZero",
+      "msg": "Session max_amount must be greater than zero"
+    },
+    {
+      "code": 6011,
+      "name": "NoActiveSession",
+      "msg": "No active session to revoke"
+    },
+    {
+      "code": 6012,
+      "name": "SessionPubkeyMismatch",
+      "msg": "Revocation message session pubkey does not match the active session"
+    }
+  ],
+  "types": [
+    {
+      "name": "FinalizeWithdrawalArgs",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "client_data_json",
+            "docs": [
+              "WebAuthn clientDataJSON; challenge must be sha256(operation_message)."
+            ],
+            "type": "bytes"
+          },
+          {
+            "name": "authenticator_data",
+            "type": "bytes"
+          }
+        ]
+      }
+    },
+    {
+      "name": "ForceReleaseArgs",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "client_data_json",
+            "docs": [
+              "WebAuthn clientDataJSON; challenge must be sha256(operation_message)."
+            ],
+            "type": "bytes"
+          },
+          {
+            "name": "authenticator_data",
+            "type": "bytes"
+          }
+        ]
+      }
+    },
+    {
+      "name": "InitializeVaultArgs",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "passkey_pubkey",
+            "type": {
+              "array": [
+                "u8",
+                33
+              ]
+            }
+          },
+          {
+            "name": "cooling_off_seconds",
+            "docs": [
+              "Withdrawal cooling-off in seconds. Zero = instant. See §7.1 of the v2",
+              "design doc for why this tightened from i64 to u32."
+            ],
+            "type": "u32"
+          },
+          {
+            "name": "identity_claim",
+            "docs": [
+              "Operator-defined opaque identity bytes. The protocol doesn't interpret",
+              "these. Dexter writes a Supabase UUID into the first 16 bytes and zeros",
+              "the rest; future operators may use whichever scheme they want."
+            ],
+            "type": {
+              "array": [
+                "u8",
+                32
+              ]
+            }
+          }
+        ]
+      }
+    },
+    {
+      "name": "PendingWithdrawal",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "amount",
+            "type": "u64"
+          },
+          {
+            "name": "destination",
+            "type": "pubkey"
+          },
+          {
+            "name": "requested_at",
+            "type": "i64"
+          }
+        ]
+      }
+    },
+    {
+      "name": "ProvePasskeyArgs",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "challenge",
+            "docs": [
+              "The 32-byte challenge to prove control over (e.g. a SIWX login nonce /",
+              "digest). The passkey must have signed `\"siwx_login\" || challenge`."
+            ],
+            "type": {
+              "array": [
+                "u8",
+                32
+              ]
+            }
+          },
+          {
+            "name": "client_data_json",
+            "docs": [
+              "WebAuthn clientDataJSON; its `challenge` field must base64url-decode to",
+              "`sha256(\"siwx_login\" || challenge)`."
+            ],
+            "type": "bytes"
+          },
+          {
+            "name": "authenticator_data",
+            "type": "bytes"
+          }
+        ]
+      }
+    },
+    {
+      "name": "RegisterSessionKeyArgs",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "session_pubkey",
+            "docs": [
+              "Ed25519 pubkey the buyer's SDK generated in memory. The passkey is",
+              "endorsing this exact key — only this key can sign vouchers for the",
+              "duration of the session."
+            ],
+            "type": {
+              "array": [
+                "u8",
+                32
+              ]
+            }
+          },
+          {
+            "name": "max_amount",
+            "docs": [
+              "Cumulative cap in atomic units. The seller's middleware AND any future",
+              "on-chain consumer of `active_session.spent` enforces this."
+            ],
+            "type": "u64"
+          },
+          {
+            "name": "expires_at",
+            "docs": [
+              "Wall-clock expiry, unix seconds. Must be strictly in the future."
+            ],
+            "type": "i64"
+          },
+          {
+            "name": "allowed_counterparty",
+            "docs": [
+              "The seller this session is bound to. Any voucher claiming a different",
+              "counterparty MUST be rejected by the seller's verification path."
+            ],
+            "type": "pubkey"
+          },
+          {
+            "name": "nonce",
+            "docs": [
+              "Per-session nonce. Combined with `expires_at`, gives each session a",
+              "unique fingerprint for off-chain replay protection. Caller picks; the",
+              "program does not enforce monotonicity (a non-monotonic nonce is the",
+              "buyer's own footgun, not a protocol attack)."
+            ],
+            "type": "u32"
+          },
+          {
+            "name": "client_data_json",
+            "docs": [
+              "WebAuthn `clientDataJSON`. Its `challenge` field must base64url-decode",
+              "to sha256(registration_message)."
+            ],
+            "type": "bytes"
+          },
+          {
+            "name": "authenticator_data",
+            "docs": [
+              "WebAuthn `authenticatorData` (37+ bytes)."
+            ],
+            "type": "bytes"
+          }
+        ]
+      }
+    },
+    {
+      "name": "RequestWithdrawalArgs",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "amount",
+            "type": "u64"
+          },
+          {
+            "name": "destination",
+            "type": "pubkey"
+          },
+          {
+            "name": "signed_at",
+            "type": "i64"
+          },
+          {
+            "name": "client_data_json",
+            "docs": [
+              "WebAuthn `clientDataJSON` from the browser. Its `challenge` field",
+              "must base64url-decode to `sha256(operation_message)`."
+            ],
+            "type": "bytes"
+          },
+          {
+            "name": "authenticator_data",
+            "docs": [
+              "WebAuthn `authenticatorData` (37+ bytes)."
+            ],
+            "type": "bytes"
+          }
+        ]
+      }
+    },
+    {
+      "name": "RevokeSessionKeyArgs",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "client_data_json",
+            "type": "bytes"
+          },
+          {
+            "name": "authenticator_data",
+            "type": "bytes"
+          }
+        ]
+      }
+    },
+    {
+      "name": "RotateDexterAuthorityArgs",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "new_dexter_authority",
+            "type": "pubkey"
+          }
+        ]
+      }
+    },
+    {
+      "name": "RotatePasskeyArgs",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "new_passkey_pubkey",
+            "type": {
+              "array": [
+                "u8",
+                33
+              ]
+            }
+          },
+          {
+            "name": "client_data_json",
+            "docs": [
+              "WebAuthn clientDataJSON; challenge must be sha256(operation_message)."
+            ],
+            "type": "bytes"
+          },
+          {
+            "name": "authenticator_data",
+            "type": "bytes"
+          }
+        ]
+      }
+    },
+    {
+      "name": "SessionRegistration",
+      "docs": [
+        "On-chain record of an authorized session key.",
+        "",
+        "The session pubkey is an ordinary ed25519 keypair the buyer's SDK generated",
+        "in memory at tab-open time. The passkey signed a 180-byte registration",
+        "message (see docs/DESIGN-vault-v2-session-keys.md §2.2) endorsing these",
+        "scope limits. From this point on, the seller's middleware accepts vouchers",
+        "signed by `session_pubkey` for this vault, up to `max_amount` and before",
+        "`expires_at`, only for `allowed_counterparty`.",
+        "",
+        "`spent` is the running cumulative — incremented by settle paths that close",
+        "vouchers — so we can enforce the cap across the lifetime of the session",
+        "without an additional read."
+      ],
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "session_pubkey",
+            "type": {
+              "array": [
+                "u8",
+                32
+              ]
+            }
+          },
+          {
+            "name": "max_amount",
+            "type": "u64"
+          },
+          {
+            "name": "expires_at",
+            "type": "i64"
+          },
+          {
+            "name": "allowed_counterparty",
+            "type": "pubkey"
+          },
+          {
+            "name": "nonce",
+            "type": "u32"
+          },
+          {
+            "name": "spent",
+            "type": "u64"
+          }
+        ]
+      }
+    },
+    {
+      "name": "SetSwigArgs",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "swig_address",
+            "type": "pubkey"
+          },
+          {
+            "name": "client_data_json",
+            "docs": [
+              "WebAuthn `clientDataJSON` produced by the browser. Must contain a",
+              "`challenge` field equal to base64url(sha256(operation_message))."
+            ],
+            "type": "bytes"
+          },
+          {
+            "name": "authenticator_data",
+            "docs": [
+              "WebAuthn `authenticatorData` produced by the authenticator (37+ bytes)."
+            ],
+            "type": "bytes"
+          }
+        ]
+      }
+    },
+    {
+      "name": "SetSwigAtomicArgs",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "swig_id",
+            "docs": [
+              "32-byte Swig ID (HMAC-derived client-side from identity_seed + hmac_key)."
+            ],
+            "type": {
+              "array": [
+                "u8",
+                32
+              ]
+            }
+          },
+          {
+            "name": "swig_account_bump",
+            "docs": [
+              "Bump for swig_account."
+            ],
+            "type": "u8"
+          },
+          {
+            "name": "swig_wallet_address_bump",
+            "docs": [
+              "Bump for swig_wallet_address PDA."
+            ],
+            "type": "u8"
+          },
+          {
+            "name": "dexter_master_pubkey",
+            "docs": [
+              "Becomes role-2 (Ed25519Session) authority."
+            ],
+            "type": "pubkey"
+          },
+          {
+            "name": "client_data_json",
+            "docs": [
+              "WebAuthn clientDataJSON (challenge = sha256(\"set_swig\" || swig_address_bytes))."
+            ],
+            "type": "bytes"
+          },
+          {
+            "name": "authenticator_data",
+            "docs": [
+              "WebAuthn authenticatorData (37+ bytes)."
+            ],
+            "type": "bytes"
+          }
+        ]
+      }
+    },
+    {
+      "name": "SettleTabVoucherArgs",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "channel_id",
+            "docs": [
+              "Channel id from the voucher's payload — first 32 bytes of the",
+              "44-byte message the session key signed."
+            ],
+            "type": {
+              "array": [
+                "u8",
+                32
+              ]
+            }
+          },
+          {
+            "name": "cumulative_amount",
+            "docs": [
+              "Total cumulative amount this voucher authorizes. Must be > the",
+              "vault's recorded `active_session.spent` (monotonic) and <= the",
+              "session's `max_amount` cap."
+            ],
+            "type": "u64"
+          },
+          {
+            "name": "sequence_number",
+            "docs": [
+              "Monotonic sequence number from the voucher payload. Stored as-is in",
+              "the signed message; not currently used for replay defense (the",
+              "`spent` monotonicity check covers replay) but reserved for future",
+              "out-of-order voucher detection."
+            ],
+            "type": "u32"
+          }
+        ]
+      }
+    },
+    {
+      "name": "SettleVoucherArgs",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "amount",
+            "type": "u64"
+          },
+          {
+            "name": "increment",
+            "type": "bool"
+          }
+        ]
+      }
+    },
+    {
+      "name": "Vault",
+      "type": {
+        "kind": "struct",
+        "fields": [
+          {
+            "name": "version",
+            "docs": [
+              "Layout version. MUST be the first field so byte 0 of the deserialized",
+              "account directly indicates which Vault generation this is. A program",
+              "bound to v2 rejects (`VaultError::UnsupportedVaultVersion`) anything",
+              "that isn't `VAULT_VERSION_V2`."
+            ],
+            "type": "u8"
+          },
+          {
+            "name": "bump",
+            "type": "u8"
+          },
+          {
+            "name": "passkey_pubkey",
+            "type": {
+              "array": [
+                "u8",
+                33
+              ]
+            }
+          },
+          {
+            "name": "swig_address",
+            "type": "pubkey"
+          },
+          {
+            "name": "cooling_off_seconds",
+            "docs": [
+              "Minimum delay between `request_withdrawal` and `finalize_withdrawal`.",
+              "`u32` because negative is meaningless and 136 years of seconds is plenty."
+            ],
+            "type": "u32"
+          },
+          {
+            "name": "pending_voucher_count",
+            "type": "u32"
+          },
+          {
+            "name": "pending_withdrawal",
+            "type": {
+              "option": {
+                "defined": {
+                  "name": "PendingWithdrawal"
+                }
+              }
+            }
+          },
+          {
+            "name": "identity_claim",
+            "docs": [
+              "Operator-defined opaque identity claim (formerly `supabase_user_id`).",
+              "The protocol does not interpret these bytes; Dexter writes a Supabase",
+              "UUID prefix, future operators may write whatever they want. Documented",
+              "in the OTS spec as \"operator-defined\"."
+            ],
+            "type": {
+              "array": [
+                "u8",
+                32
+              ]
+            }
+          },
+          {
+            "name": "dexter_authority",
+            "docs": [
+              "The session authority recorded at init — the ONLY key permitted to",
+              "mutate `pending_voucher_count` (settle_voucher / force_release)."
+            ],
+            "type": "pubkey"
+          },
+          {
+            "name": "active_session",
+            "docs": [
+              "Currently-authorized session key, if any. Written by `register_session_key`",
+              "(passkey-signed), cleared by `revoke_session_key` (passkey-signed) or by",
+              "the program when expiry is observed during a future read. v2 enforces",
+              "at most one active session per vault; multi-seller / multi-session is",
+              "future work (issue #5)."
+            ],
+            "type": {
+              "option": {
+                "defined": {
+                  "name": "SessionRegistration"
+                }
+              }
+            }
+          }
+        ]
+      }
+    }
+  ]
+}