@dfm-fi/agent 0.2.0

package/dist/submit.js

@@ -0,0 +1,165 @@
+/**
+ * Transaction submission + confirmation for the WRITE path.
+ *
+ * Only used by the gated zap-v2 / create lifecycles. Reads `config.rpcUrl`
+ * (Helius on mainnet — public RPC is refused for mainnet in config). The agent
+ * submits the locally-signed base64 v0 transactions returned by the `/prepare`
+ * endpoints.
+ *
+ * Robustness model:
+ *   - One Connection per process (cached).
+ *   - Each tx is resent while its blockhash is still valid; we poll the
+ *     signature status ourselves rather than trusting a single
+ *     `confirmTransaction`, so a dropped tx is rebroadcast inside the window.
+ *   - On blockhash expiry we throw `BlockhashExpiredError` (a distinct,
+ *     catchable type) so the caller can RE-PREPARE (the only correct recovery
+ *     for an expired v0 tx — you cannot re-sign it with a new blockhash without
+ *     re-fetching the instructions from the API).
+ *   - On-chain failure throws with the decoded program error logs attached so an
+ *     agent can act on the reason instead of an opaque `{"Custom":6040}`.
+ *
+ * REVIEW: real-money path — parent must review before enabling.
+ */
+import { Connection, VersionedTransaction } from '@solana/web3.js';
+let cachedConn = null;
+/** Thrown when a tx could not confirm before its blockhash expired. */
+export class BlockhashExpiredError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'BlockhashExpiredError';
+    }
+}
+/** Thrown when a tx landed but the program reverted. Carries decoded logs. */
+export class OnChainRevertError extends Error {
+    signature;
+    logs;
+    constructor(message, signature, logs) {
+        super(message);
+        this.signature = signature;
+        this.logs = logs;
+        this.name = 'OnChainRevertError';
+    }
+}
+function getConnection(config) {
+    if (!config.rpcUrl) {
+        throw new Error('No RPC endpoint configured. Set HELIUS_RPC_URL (or DFM_RPC_URL) to submit ' +
+            'signed transactions. The read tools do not need it.');
+    }
+    if (!cachedConn) {
+        cachedConn = new Connection(config.rpcUrl, 'confirmed');
+    }
+    return cachedConn;
+}
+async function sleep(ms) {
+    await new Promise((r) => setTimeout(r, ms));
+}
+/**
+ * Submit ONE locally-signed base64 v0 transaction and wait for `confirmed`.
+ * Returns the signature. Rebroadcasts while the blockhash is valid (durable
+ * against dropped txs), then:
+ *   - throws {@link BlockhashExpiredError} if the window closed un-confirmed,
+ *   - throws {@link OnChainRevertError} (with logs) if the program reverted.
+ *
+ * `blockhash` + `lastValidBlockHeight` come from the `/prepare` response.
+ */
+export async function submitSignedTx(config, signedBase64, blockhash, lastValidBlockHeight) {
+    const conn = getConnection(config);
+    const raw = VersionedTransaction.deserialize(Buffer.from(signedBase64, 'base64')).serialize();
+    // First broadcast. skipPreflight=false so a malformed/failing tx surfaces its
+    // simulation error immediately rather than silently never landing.
+    let signature;
+    try {
+        signature = await conn.sendRawTransaction(raw, { skipPreflight: false, maxRetries: 5 });
+    }
+    catch (e) {
+        throw enrichSendError(e);
+    }
+    // Poll-and-rebroadcast loop. We drive confirmation ourselves (instead of a
+    // single `confirmTransaction`) so we can re-send the SAME signed tx while the
+    // blockhash is valid — the RPC may drop the first broadcast under load.
+    const POLL_MS = 2_000;
+    const REBROADCAST_EVERY = 2; // re-send every ~4s
+    let ticks = 0;
+    for (;;) {
+        const { value } = await conn.getSignatureStatus(signature, { searchTransactionHistory: false });
+        if (value) {
+            if (value.err) {
+                const logs = await fetchLogs(conn, signature);
+                throw new OnChainRevertError(`Transaction ${signature} reverted on-chain: ${JSON.stringify(value.err)}` +
+                    (logs?.length ? `\nProgram logs:\n${logs.join('\n')}` : ''), signature, logs);
+            }
+            if (value.confirmationStatus === 'confirmed' || value.confirmationStatus === 'finalized') {
+                return signature;
+            }
+        }
+        // Has the blockhash expired? Once the cluster's block height passes
+        // lastValidBlockHeight, the tx can never land — re-prepare is the only fix.
+        const height = await conn.getBlockHeight('confirmed');
+        if (height > lastValidBlockHeight) {
+            // Final status check to avoid a race where it confirmed on the last tick.
+            const final = await conn.getSignatureStatus(signature, { searchTransactionHistory: true });
+            if (final.value && !final.value.err)
+                return signature;
+            throw new BlockhashExpiredError(`Transaction ${signature} (blockhash ${blockhash.slice(0, 8)}…) did not confirm before ` +
+                `its blockhash expired (block height ${height} > lastValid ${lastValidBlockHeight}). ` +
+                `Re-prepare and resubmit — an expired v0 transaction cannot be re-signed with a new blockhash.`);
+        }
+        ticks += 1;
+        if (ticks % REBROADCAST_EVERY === 0) {
+            // Best-effort rebroadcast; ignore send errors here (the poll loop owns the
+            // success/expiry decision).
+            try {
+                await conn.sendRawTransaction(raw, { skipPreflight: true, maxRetries: 0 });
+            }
+            catch {
+                /* transient — the next poll re-evaluates */
+            }
+        }
+        await sleep(POLL_MS);
+    }
+}
+/**
+ * Submit a batch of signed base64 txs IN ORDER, confirming each before the next.
+ * The zap-v2 open/close `/prepare` endpoints can return more than one tx (large
+ * baskets / split-VAA); they share one blockhash and MUST land sequentially.
+ *
+ * Propagates {@link BlockhashExpiredError} / {@link OnChainRevertError} from the
+ * first failing tx with the index annotated.
+ */
+export async function submitSignedTxsSequential(config, signedBase64Txs, blockhash, lastValidBlockHeight) {
+    const sigs = [];
+    for (let i = 0; i < signedBase64Txs.length; i++) {
+        try {
+            sigs.push(await submitSignedTx(config, signedBase64Txs[i], blockhash, lastValidBlockHeight));
+        }
+        catch (e) {
+            const prefix = signedBase64Txs.length > 1 ? `tx ${i + 1}/${signedBase64Txs.length}: ` : '';
+            if (e instanceof Error)
+                e.message = prefix + e.message;
+            throw e;
+        }
+    }
+    return sigs;
+}
+/** Attach simulation logs to a send-time failure when the RPC provides them. */
+function enrichSendError(e) {
+    const err = e;
+    if (Array.isArray(err.logs) && err.logs.length > 0) {
+        return new Error(`${err.message}\nProgram logs:\n${err.logs.join('\n')}`);
+    }
+    return err instanceof Error ? err : new Error(String(e));
+}
+/** Best-effort fetch of the confirmed tx's program logs for diagnostics. */
+async function fetchLogs(conn, signature) {
+    try {
+        const tx = await conn.getTransaction(signature, {
+            maxSupportedTransactionVersion: 0,
+            commitment: 'confirmed',
+        });
+        return tx?.meta?.logMessages ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=submit.js.map

package/dist/submit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit.js","sourceRoot":"","sources":["../src/submit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAGnE,IAAI,UAAU,GAAsB,IAAI,CAAC;AAEzC,uEAAuE;AACvE,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGhC;IACA;IAHX,YACE,OAAe,EACN,SAAiB,EACjB,IAAqB;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,cAAS,GAAT,SAAS,CAAQ;QACjB,SAAI,GAAJ,IAAI,CAAiB;QAG9B,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,SAAS,aAAa,CAAC,MAAmB;IACxC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,4EAA4E;YAC1E,qDAAqD,CACxD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,EAAU;IAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAmB,EACnB,YAAoB,EACpB,SAAiB,EACjB,oBAA4B;IAE5B,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAE9F,8EAA8E;IAC9E,mEAAmE;IACnE,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,eAAe,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,OAAO,GAAG,KAAK,CAAC;IACtB,MAAM,iBAAiB,GAAG,CAAC,CAAC,CAAC,oBAAoB;IACjD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,CAAC;QACR,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChG,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;gBACd,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC9C,MAAM,IAAI,kBAAkB,CAC1B,eAAe,SAAS,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;oBACxE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC7D,SAAS,EACT,IAAI,CACL,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,kBAAkB,KAAK,WAAW,IAAI,KAAK,CAAC,kBAAkB,KAAK,WAAW,EAAE,CAAC;gBACzF,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,4EAA4E;QAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,MAAM,GAAG,oBAAoB,EAAE,CAAC;YAClC,0EAA0E;YAC1E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3F,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC;YACtD,MAAM,IAAI,qBAAqB,CAC7B,eAAe,SAAS,eAAe,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,4BAA4B;gBACtF,uCAAuC,MAAM,gBAAgB,oBAAoB,KAAK;gBACtF,+FAA+F,CAClG,CAAC;QACJ,CAAC;QAED,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,KAAK,GAAG,iBAAiB,KAAK,CAAC,EAAE,CAAC;YACpC,2EAA2E;YAC3E,4BAA4B;YAC5B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7E,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAmB,EACnB,eAAyB,EACzB,SAAiB,EACjB,oBAA4B;IAE5B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,IAAI,CAAC,YAAY,KAAK;gBAAE,CAAC,CAAC,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC;YACvD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAS,eAAe,CAAC,CAAU;IACjC,MAAM,GAAG,GAAG,CAAgC,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,oBAAoB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,SAAS,CAAC,IAAgB,EAAE,SAAiB;IAC1D,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE;YAC9C,8BAA8B,EAAE,CAAC;YACjC,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,191 @@
+/**
+ * Shared types for agent responses.
+ *
+ * These mirror the LIVE DFM v2 API (`/api/v2`, NestJS) response shapes as
+ * verified against https://n2-api.dfm.finance — NOT the older zap-v1 shapes the
+ * previous version of this file assumed. Key corrections vs the stale version:
+ *   - vault identity field is `address` (base58 PDA), not `id`
+ *   - name/symbol are `vaultName` / `vaultSymbol`
+ *   - `tvl`, `totalSupply`, `totalAssets` are STRING-encoded (raw integers or
+ *     decimal strings) — never assume `number`
+ *   - basket lives in `underlyingAssets`, each `{ mint, allocationBps, ... }`
+ *   - `GET /vaults/:address` wraps the doc under `{ vault, status, ... }`
+ *   - `GET /portfolio` reads the wallet from the JWT (no address param)
+ */
+/** One basket leg as stored on the vault doc (`underlyingAssets[]`). */
+export interface UnderlyingAsset {
+    mint: string;
+    /** Target weight in bps (sums to 10_000 across the basket). */
+    allocationBps?: number;
+    /** Some payloads also surface a live/current weight; optional. */
+    currentBps?: number;
+    symbol?: string;
+    decimals?: number;
+    /** Live USD weight (%), when the detail endpoint computes it. */
+    weightPercent?: number;
+}
+/**
+ * Vault list item as returned by `GET /vaults` (under `{ vaults: [...] }`).
+ * Only the fields the agent surfaces are typed strictly; the rest are loose.
+ */
+export interface VaultListItem {
+    address: string;
+    vaultName: string;
+    vaultSymbol: string;
+    dtfType?: 'index' | 'yield' | 'perps' | string;
+    status?: 'active' | 'paused' | 'closed' | string;
+    paused?: boolean;
+    closed?: boolean;
+    category?: string;
+    /** STRING-encoded — raw USDC (6dp) or decimal string depending on endpoint. */
+    tvl?: string | number;
+    /** Share price as a number (USDC per share). */
+    sharePrice?: number;
+    entryFeeBps?: number;
+    exitFeeBps?: number;
+    managementFeeBps?: number;
+    totalSupply?: string;
+    totalShares?: string;
+    totalDepositors?: number;
+    apy?: number;
+    performance7d?: number;
+    underlyingAssets?: UnderlyingAsset[];
+}
+/** `GET /vaults` envelope. */
+export interface VaultListResponse {
+    vaults: VaultListItem[];
+    total: number;
+    page: number;
+    limit: number;
+    totalPages: number;
+}
+/** `GET /vaults/:address` envelope (the vault doc is nested under `vault`). */
+export interface VaultDetailResponse {
+    vault: VaultListItem & Record<string, unknown>;
+    status?: unknown;
+    currentWeights?: unknown;
+    deviations?: unknown;
+    feeStructure?: unknown;
+    maxVaultTvlUsdc?: string | number;
+}
+/**
+ * Decoded `ZapEscrowV2` from `GET /vaults/:address/zap-v2/status/:user`.
+ * Returns `null` when the user has no open escrow for that vault. Auth-gated:
+ * the caller JWT wallet must equal `:user` (or be the vault admin).
+ * `mode`: 0 = zap-in (deposit), 1 = zap-out (redeem).
+ */
+export interface ZapV2Status {
+    escrowPda: string;
+    vault: string;
+    user: string;
+    mode: number;
+    state: number;
+    nAssets: number;
+    assetMints: string[];
+    filledMask: number;
+    legProgress: boolean[];
+    legsFilled: number;
+    legsTotal: number;
+    /** True once every leg is cranked AND the escrow is in its terminal pre-close state. */
+    readyToClose: boolean;
+    legFailures: Array<{
+        count: number;
+        lastError: string;
+    } | null>;
+    openedAt: number;
+    expiresAt: number;
+    isExpired: boolean;
+    slippageBps: number;
+    plannedAmountIn: string[];
+    minOuts: string[];
+    actualOuts: string[];
+    inputAmount: string;
+    sharesIn: string;
+    minSharesOut: string;
+    minUsdcOut: string;
+}
+/**
+ * Common HTTP shape for the zap-v2 user-signed boundary builders
+ * (`zap-in-v2/open`, `zap-in-v2/close`, `zap-out-v2/open`, `zap-out-v2/close`).
+ * `transactions` are base64-encoded v0 `VersionedTransaction`s sharing one
+ * blockhash; the agent must sign EACH locally with the test keypair, then submit.
+ */
+export interface ZapV2PrepareResponse {
+    transactions: string[];
+    blockhash: string;
+    lastValidBlockHeight: number;
+    computeUnits: number;
+    escrowPda: string;
+    /** zap-out OPEN additionally returns these (redeem economics). */
+    minUsdcOut?: string;
+    expectedUsdc?: string;
+    minOuts?: string[];
+}
+/** Single-tx cancel/update-envelope prepare shape. */
+export interface ZapV2SingleTxResponse {
+    transaction: string;
+    blockhash: string;
+    lastValidBlockHeight: number;
+}
+/**
+ * One basket leg as the create flow takes it. The API's `UnderlyingAssetDto`
+ * requires `mint` + `symbol` + `mintBps` (target weight, bps). `pythFeedId` is
+ * OPTIONAL — the API auto-looks-it-up from its `MINT_TO_PYTH_FEED` map and
+ * rejects an unmapped non-USD mint, so for known assets the agent can omit it.
+ */
+export interface CreateAssetInput {
+    mint: string;
+    symbol: string;
+    /** Target weight in bps; the basket must sum to 10_000. */
+    mintBps: number;
+    pythFeedId?: string;
+}
+/**
+ * `POST /vaults/create/prepare` response. The create tx is a SINGLE v0
+ * `VersionedTransaction` (base64 `transaction`). `vaultAddress` is the PDA the
+ * vault will live at once the tx confirms — needed verbatim for `/create/confirm`.
+ * A server-built per-create ALT (`altAddress`) is referenced by the tx.
+ */
+export interface CreatePrepareResponse {
+    transaction: string;
+    versioned: boolean;
+    blockhash: string;
+    lastValidBlockHeight: number;
+    computeUnits?: number;
+    vaultAddress: string;
+    vaultMint: string;
+    vaultIndex: number;
+    altAddress: string;
+    /** Factory per-vault TVL cap (raw 6dp USDC; "0" = unlimited). Best-effort. */
+    maxVaultTvlUsdc?: string;
+}
+/**
+ * `POST /vaults/create/confirm` response. The API records the vault doc AFTER
+ * the on-chain create tx has confirmed. The confirm MUST land inside the
+ * prepare-cache TTL (~15 min) or it 400s ("Prepare session expired") — the
+ * on-chain vault still exists, but the Mongo record won't be written.
+ */
+export interface CreateConfirmResponse {
+    status: string;
+    signature: string;
+    vault: Record<string, unknown>;
+}
+/** SIWS nonce response (`POST /auth/nonce`). */
+export interface NonceResponse {
+    nonce: string;
+    /** The EXACT message the wallet must sign — do not rebuild it client-side. */
+    message: string;
+}
+/** SIWS sign-in response for a `native` client (`POST /auth/siws`). */
+export interface NativeAuthTokens {
+    accessToken: string;
+    refreshToken: string;
+    wallet: string;
+    expiresIn: string;
+}
+/** Public access-gate status (`GET /access/status?wallet=`). */
+export interface AccessStatus {
+    enabled: boolean;
+    allowed: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,wEAAwE;AACxE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IAC/C,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACjD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,gDAAgD;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;CACtC;AAED,8BAA8B;AAC9B,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,+EAA+E;AAC/E,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,uEAAuE;AACvE,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB"}

package/dist/types.js

@@ -0,0 +1,16 @@
+/**
+ * Shared types for agent responses.
+ *
+ * These mirror the LIVE DFM v2 API (`/api/v2`, NestJS) response shapes as
+ * verified against https://n2-api.dfm.finance — NOT the older zap-v1 shapes the
+ * previous version of this file assumed. Key corrections vs the stale version:
+ *   - vault identity field is `address` (base58 PDA), not `id`
+ *   - name/symbol are `vaultName` / `vaultSymbol`
+ *   - `tvl`, `totalSupply`, `totalAssets` are STRING-encoded (raw integers or
+ *     decimal strings) — never assume `number`
+ *   - basket lives in `underlyingAssets`, each `{ mint, allocationBps, ... }`
+ *   - `GET /vaults/:address` wraps the doc under `{ vault, status, ... }`
+ *   - `GET /portfolio` reads the wallet from the JWT (no address param)
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/zap-v2-flow.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Zap-v2 deposit/redeem LIFECYCLE driver (the real-money WRITE path).
+ *
+ * ⚠️ GATED. Reachable only when DFM_AGENT_WRITE_ENABLED=true. Every method here
+ * moves real funds on mainnet. The parent must review before enabling.
+ * REVIEW: real-money path — parent must review before enabling.
+ *
+ * ─── Why a driver (not a single call) ──────────────────────────────────────
+ * zap-v2 is a STATEFUL lifecycle, NOT a one-shot. The Jupiter swaps run as
+ * PERMISSIONLESS per-leg cranks executed by the BACKEND orchestrator
+ * (ZapSwapOrchestratorService) — the agent does NOT crank them. The agent only
+ * signs the two user-side boundary transactions:
+ *
+ *   DEPOSIT (zap-in):
+ *     1. POST zap-in-v2/open/prepare  → sign+submit  (pulls USDC, pins plan,
+ *        creates escrow + per-asset ATAs)
+ *     2. POLL  zap-v2/status/:user until `readyToClose` (orchestrator cranks the
+ *        USDC→asset legs server-side; `filledMask` fills in)
+ *     3. POST zap-in-v2/close/prepare → sign+submit  (CPI mint_in_kind_v2,
+ *        forward shares, close escrow)
+ *
+ *   REDEEM (zap-out):
+ *     1. POST zap-out-v2/open/prepare → sign+submit  (burn shares → escrow
+ *        basket via finalize_redeem_in_kind, pin plan)
+ *     2. POLL  zap-v2/status/:user until `readyToClose` (orchestrator cranks the
+ *        asset→USDC legs)
+ *     3. POST zap-out-v2/close/prepare → sign+submit (exit fee, pay net USDC)
+ *
+ * If a deposit/redeem STALLS mid-crank (a leg can't meet its pinned floor), the
+ * recovery levers are `update-envelope` (loosen floors) or `cancel` (return
+ * escrow holdings as-is). Those are EXPOSED as separate tools, not auto-driven
+ * here — recovery is an operator decision, not something to silently retry.
+ * ───────────────────────────────────────────────────────────────────────────
+ */
+import type { AgentConfig } from './config.js';
+import type { DfmApiClient } from './api-client.js';
+import type { ZapV2Status } from './types.js';
+export interface ZapFlowResult {
+    ok: boolean;
+    vault: string;
+    /** 'deposit' | 'redeem' */
+    kind: 'deposit' | 'redeem';
+    openSignatures: string[];
+    closeSignatures: string[];
+    escrowPda: string;
+    /** Final escrow status snapshot just before close (for diagnostics). */
+    finalStatus?: ZapV2Status | null;
+    message: string;
+}
+interface PollOptions {
+    /** Max seconds to wait for the orchestrator to fill all legs. */
+    timeoutSecs: number;
+    /** Seconds between status polls. */
+    intervalSecs: number;
+}
+/**
+ * Drive a full DEPOSIT (USDC → basket → shares). `usdcAmountRaw` is 6-dp raw
+ * units (e.g. "12000000" = $12). Returns when shares are minted (close confirmed)
+ * or throws with a recovery hint.
+ */
+export declare function runDeposit(config: AgentConfig, api: DfmApiClient, user: string, vault: string, usdcAmountRaw: string, opts?: {
+    slippageBps?: number;
+    expirySecs?: number;
+    poll?: Partial<PollOptions>;
+}): Promise<ZapFlowResult>;
+/**
+ * Drive a full REDEEM (shares → basket → USDC). `sharesRaw` is 6-dp raw units.
+ * Returns when net USDC is paid (close confirmed) or throws with a recovery hint.
+ */
+export declare function runRedeem(config: AgentConfig, api: DfmApiClient, user: string, vault: string, sharesRaw: string, opts?: {
+    slippageBps?: number;
+    expirySecs?: number;
+    poll?: Partial<PollOptions>;
+}): Promise<ZapFlowResult>;
+export {};
+//# sourceMappingURL=zap-v2-flow.d.ts.map

package/dist/zap-v2-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zap-v2-flow.d.ts","sourceRoot":"","sources":["../src/zap-v2-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAwB,MAAM,YAAY,CAAC;AAIpE,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,WAAW;IACnB,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,YAAY,EAAE,MAAM,CAAC;CACtB;AAoHD;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,WAAW,EACnB,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;CAAE,GAChF,OAAO,CAAC,aAAa,CAAC,CA+CxB;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAC7B,MAAM,EAAE,WAAW,EACnB,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;CAAE,GAChF,OAAO,CAAC,aAAa,CAAC,CA6CxB"}

package/dist/zap-v2-flow.js

@@ -0,0 +1,176 @@
+import { signBase64Transaction } from './signing.js';
+import { submitSignedTxsSequential, BlockhashExpiredError } from './submit.js';
+const DEFAULT_POLL = { timeoutSecs: 180, intervalSecs: 4 };
+async function sleep(secs) {
+    await new Promise((r) => setTimeout(r, secs * 1000));
+}
+/** Sign every tx in a prepare response locally, submit them in order. */
+async function signAndSubmit(config, prepared) {
+    const signed = prepared.transactions.map((t) => signBase64Transaction(config, t));
+    return submitSignedTxsSequential(config, signed, prepared.blockhash, prepared.lastValidBlockHeight);
+}
+/**
+ * Submit the OPEN side. On blockhash expiry we DON'T auto-retry (the open pulls
+ * funds + creates the escrow — re-running blindly could double-open), but we
+ * rewrite the error into an actionable hint: check zap_status to see whether an
+ * escrow was created (poll → close) or not (safe to re-run the deposit/redeem).
+ */
+async function submitOpen(config, prepared, kind) {
+    try {
+        return await signAndSubmit(config, prepared);
+    }
+    catch (e) {
+        if (e instanceof BlockhashExpiredError) {
+            throw new Error(`The ${kind} OPEN tx did not confirm before its blockhash expired. Check zap_status: ` +
+                `if an escrow now EXISTS, the open landed — poll it then close (re-run this ${kind} call ` +
+                `once an escrow is open will resume it); if NO escrow exists, nothing happened and it is ` +
+                `safe to re-run the ${kind}. Original: ${e.message}`);
+        }
+        throw e;
+    }
+}
+/**
+ * Run the CLOSE side with a blockhash-expiry retry. The escrow is already
+ * READY_TO_CLOSE at this point, so re-preparing + re-signing the close is safe
+ * and idempotent (it does not re-pull funds). We retry only on blockhash expiry
+ * — an on-chain revert is surfaced immediately. Up to `attempts` re-prepares.
+ */
+async function closeWithRetry(config, prepareClose, attempts = 3) {
+    let lastErr = null;
+    for (let i = 0; i < attempts; i++) {
+        try {
+            const close = await prepareClose();
+            return await signAndSubmit(config, close);
+        }
+        catch (e) {
+            if (e instanceof BlockhashExpiredError) {
+                lastErr = e;
+                continue; // re-prepare with a fresh blockhash; escrow stays ready.
+            }
+            throw e;
+        }
+    }
+    throw new Error(`Close did not confirm within ${attempts} fresh-blockhash attempts (last: ${lastErr?.message}). ` +
+        `The escrow is still READY — re-run the same deposit/redeem call to retry the close, ` +
+        `or inspect with zap_status.`);
+}
+/**
+ * Poll `zap-v2/status` until the escrow is `readyToClose`, it expires, or we
+ * time out. Returns the last status seen. Throws on expiry/timeout so the caller
+ * can surface a clear recovery hint (update-envelope / cancel).
+ */
+async function pollUntilReady(api, vault, user, poll) {
+    const deadline = Date.now() + poll.timeoutSecs * 1000;
+    let last = null;
+    while (Date.now() < deadline) {
+        last = await api.getZapV2Status(vault, user);
+        if (!last) {
+            throw new Error('Escrow disappeared during polling (cancelled or already closed?).');
+        }
+        if (last.readyToClose)
+            return last;
+        if (last.isExpired) {
+            throw new Error(`Escrow expired before all legs filled (${last.legsFilled}/${last.legsTotal}). ` +
+                `Use zap_v2_cancel to recover the held funds, or zap_v2_update_envelope to ` +
+                `loosen floors and retry.`);
+        }
+        await sleep(poll.intervalSecs);
+    }
+    const tail = last
+        ? `${last.legsFilled}/${last.legsTotal} legs filled; lastFailures=${JSON.stringify(last.legFailures)}`
+        : 'no status';
+    throw new Error(`Timed out after ${poll.timeoutSecs}s waiting for the orchestrator to fill all legs (${tail}). ` +
+        `The escrow is still open — poll zap_status, then zap_v2_update_envelope or zap_v2_cancel.`);
+}
+/**
+ * Drive a full DEPOSIT (USDC → basket → shares). `usdcAmountRaw` is 6-dp raw
+ * units (e.g. "12000000" = $12). Returns when shares are minted (close confirmed)
+ * or throws with a recovery hint.
+ */
+export async function runDeposit(config, api, user, vault, usdcAmountRaw, opts) {
+    const poll = { ...DEFAULT_POLL, ...(opts?.poll ?? {}) };
+    // 0. RESUME GUARD — if an escrow is ALREADY open for this (vault, user), don't
+    //    re-open (the escrow PDA is Anchor-`init` → a second open reverts, and we'd
+    //    risk double-pulling USDC). Resume it: poll → close. This makes the deposit
+    //    call idempotent against a prior open whose close never landed.
+    const existing = await api.getZapV2Status(vault, user);
+    let openSignatures = [];
+    let escrowPda;
+    if (existing) {
+        if (existing.mode !== 0) {
+            throw new Error(`An open REDEEM escrow already exists for this vault+wallet — cancel or finish it ` +
+                `(zap_v2_cancel / redeem) before depositing.`);
+        }
+        escrowPda = existing.escrowPda;
+    }
+    else {
+        // 1. OPEN — pull USDC into escrow, pin the plan.
+        const open = await api.prepareZapInOpenV2(vault, usdcAmountRaw, {
+            slippageBps: opts?.slippageBps,
+            expirySecs: opts?.expirySecs,
+        });
+        openSignatures = await submitOpen(config, open, 'deposit');
+        escrowPda = open.escrowPda;
+    }
+    // 2. POLL — wait for the backend orchestrator to crank every USDC→asset leg.
+    const ready = await pollUntilReady(api, vault, user, poll);
+    // 3. CLOSE — mint_in_kind_v2, forward shares, close escrow. Retries on
+    //    blockhash expiry (escrow stays READY between attempts).
+    const closeSignatures = await closeWithRetry(config, () => api.prepareZapInCloseV2(vault));
+    return {
+        ok: true,
+        vault,
+        kind: 'deposit',
+        openSignatures,
+        closeSignatures,
+        escrowPda,
+        finalStatus: ready,
+        message: (existing ? 'Resumed an already-open deposit escrow. ' : '') +
+            `Deposit complete: ${usdcAmountRaw} raw USDC → vault ${vault.slice(0, 8)}…. Shares minted.`,
+    };
+}
+/**
+ * Drive a full REDEEM (shares → basket → USDC). `sharesRaw` is 6-dp raw units.
+ * Returns when net USDC is paid (close confirmed) or throws with a recovery hint.
+ */
+export async function runRedeem(config, api, user, vault, sharesRaw, opts) {
+    const poll = { ...DEFAULT_POLL, ...(opts?.poll ?? {}) };
+    // 0. RESUME GUARD — mirror the deposit path: if a redeem escrow is already
+    //    open, resume it rather than re-burning shares into a second escrow.
+    const existing = await api.getZapV2Status(vault, user);
+    let openSignatures = [];
+    let escrowPda;
+    if (existing) {
+        if (existing.mode !== 1) {
+            throw new Error(`An open DEPOSIT escrow already exists for this vault+wallet — finish or cancel it ` +
+                `(deposit / zap_v2_cancel) before redeeming.`);
+        }
+        escrowPda = existing.escrowPda;
+    }
+    else {
+        // 1. OPEN — burn shares → escrow basket (oracle-free pro-rata), pin the plan.
+        const open = await api.prepareZapOutOpenV2(vault, sharesRaw, {
+            slippageBps: opts?.slippageBps,
+            expirySecs: opts?.expirySecs,
+        });
+        openSignatures = await submitOpen(config, open, 'redeem');
+        escrowPda = open.escrowPda;
+    }
+    // 2. POLL — wait for the orchestrator to crank every asset→USDC leg.
+    const ready = await pollUntilReady(api, vault, user, poll);
+    // 3. CLOSE — apply exit fee, pay net USDC, close escrow. Retries on blockhash
+    //    expiry (escrow stays READY between attempts).
+    const closeSignatures = await closeWithRetry(config, () => api.prepareZapOutCloseV2(vault));
+    return {
+        ok: true,
+        vault,
+        kind: 'redeem',
+        openSignatures,
+        closeSignatures,
+        escrowPda,
+        finalStatus: ready,
+        message: (existing ? 'Resumed an already-open redeem escrow. ' : '') +
+            `Redeem complete: ${sharesRaw} raw shares from vault ${vault.slice(0, 8)}…. Net USDC paid.`,
+    };
+}
+//# sourceMappingURL=zap-v2-flow.js.map

package/dist/zap-v2-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zap-v2-flow.js","sourceRoot":"","sources":["../src/zap-v2-flow.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAsB/E,MAAM,YAAY,GAAgB,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;AAExE,KAAK,UAAU,KAAK,CAAC,IAAY;IAC/B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,aAAa,CAC1B,MAAmB,EACnB,QAA8B;IAE9B,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,OAAO,yBAAyB,CAC9B,MAAM,EACN,MAAM,EACN,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,oBAAoB,CAC9B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,UAAU,CACvB,MAAmB,EACnB,QAA8B,EAC9B,IAA0B;IAE1B,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,qBAAqB,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,OAAO,IAAI,2EAA2E;gBACpF,8EAA8E,IAAI,QAAQ;gBAC1F,0FAA0F;gBAC1F,sBAAsB,IAAI,eAAe,CAAC,CAAC,OAAO,EAAE,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,cAAc,CAC3B,MAAmB,EACnB,YAAiD,EACjD,QAAQ,GAAG,CAAC;IAEZ,IAAI,OAAO,GAAiB,IAAI,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;YACnC,OAAO,MAAM,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,qBAAqB,EAAE,CAAC;gBACvC,OAAO,GAAG,CAAC,CAAC;gBACZ,SAAS,CAAC,yDAAyD;YACrE,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAQ,oCAAoC,OAAO,EAAE,OAAO,KAAK;QAC/F,sFAAsF;QACtF,6BAA6B,CAChC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAC3B,GAAiB,EACjB,KAAa,EACb,IAAY,EACZ,IAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IACtD,IAAI,IAAI,GAAuB,IAAI,CAAC;IACpC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,0CAA0C,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,KAAK;gBAC9E,4EAA4E;gBAC5E,0BAA0B,CAC7B,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI;QACf,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,8BAA8B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;QACtG,CAAC,CAAC,WAAW,CAAC;IAChB,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,CAAC,WAAW,oDAAoD,IAAI,KAAK;QAC9F,2FAA2F,CAC9F,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAmB,EACnB,GAAiB,EACjB,IAAY,EACZ,KAAa,EACb,aAAqB,EACrB,IAAiF;IAEjF,MAAM,IAAI,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IAExD,+EAA+E;IAC/E,gFAAgF;IAChF,gFAAgF;IAChF,oEAAoE;IACpE,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,cAAc,GAAa,EAAE,CAAC;IAClC,IAAI,SAAiB,CAAC;IACtB,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,mFAAmF;gBACjF,6CAA6C,CAChD,CAAC;QACJ,CAAC;QACD,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,iDAAiD;QACjD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,aAAa,EAAE;YAC9D,WAAW,EAAE,IAAI,EAAE,WAAW;YAC9B,UAAU,EAAE,IAAI,EAAE,UAAU;SAC7B,CAAC,CAAC;QACH,cAAc,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC3D,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAC7B,CAAC;IAED,6EAA6E;IAC7E,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAE3D,uEAAuE;IACvE,6DAA6D;IAC7D,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3F,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK;QACL,IAAI,EAAE,SAAS;QACf,cAAc;QACd,eAAe;QACf,SAAS;QACT,WAAW,EAAE,KAAK;QAClB,OAAO,EACL,CAAC,QAAQ,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,qBAAqB,aAAa,qBAAqB,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB;KAC9F,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAmB,EACnB,GAAiB,EACjB,IAAY,EACZ,KAAa,EACb,SAAiB,EACjB,IAAiF;IAEjF,MAAM,IAAI,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IAExD,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,cAAc,GAAa,EAAE,CAAC;IAClC,IAAI,SAAiB,CAAC;IACtB,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,oFAAoF;gBAClF,6CAA6C,CAChD,CAAC;QACJ,CAAC;QACD,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,8EAA8E;QAC9E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,KAAK,EAAE,SAAS,EAAE;YAC3D,WAAW,EAAE,IAAI,EAAE,WAAW;YAC9B,UAAU,EAAE,IAAI,EAAE,UAAU;SAC7B,CAAC,CAAC;QACH,cAAc,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1D,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAC7B,CAAC;IAED,qEAAqE;IACrE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAE3D,8EAA8E;IAC9E,mDAAmD;IACnD,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IAE5F,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK;QACL,IAAI,EAAE,QAAQ;QACd,cAAc;QACd,eAAe;QACf,SAAS;QACT,WAAW,EAAE,KAAK;QAClB,OAAO,EACL,CAAC,QAAQ,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,oBAAoB,SAAS,0BAA0B,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB;KAC9F,CAAC;AACJ,CAAC"}