@gearbox-protocol/sdk 16.6.0-next.4 → 16.6.0-next.5

package/dist/cjs/dev/index.js

@@ -57,6 +57,7 @@ exports.getDrpcUrl = require_dev_providers.getDrpcUrl;
 exports.getErpcKey = require_dev_providers.getErpcKey;
 exports.getPublicCreate2Address = require_dev_create2.getPublicCreate2Address;
 exports.getRpcProviderUrl = require_dev_providers.getRpcProviderUrl;
+exports.getSecuritizeAdmin = require_dev_kycUtils.getSecuritizeAdmin;
 exports.getThirdWebUrl = require_dev_providers.getThirdWebUrl;
 exports.greenlistMidasGateway = require_dev_kycUtils.greenlistMidasGateway;
 exports.httpTransportOptionsSchema = require_dev_transports.httpTransportOptionsSchema;

package/dist/cjs/dev/kycUtils.js

@@ -8,19 +8,49 @@ const require_abi_rwa_iDSToken = require("../abi/rwa/iDSToken.js");
 const require_dev_midasUtils = require("./midasUtils.js");
 const require_dev_withdrawalAbi = require("./withdrawalAbi.js");
 let viem = require("viem");
-let viem_accounts = require("viem/accounts");
 //#region src/dev/kycUtils.ts
+const iMockDSTokenAdminAbi = (0, viem.parseAbi)(["function admin() view returns (address)"]);
 /**
-* Resolves the account that performs the DS registry writes: either the admin
-* private key, or the admin address impersonated on the fork
+* DS trust-service master of `token`: Ownable owner at storage slot 0 of the
+* trust service, same as periphery-v3 SecuritizeAttachHelper. MockDSToken
+* returns itself as the trust service, so `admin()` is used instead.
+*/
+async function getSecuritizeAdmin(anvil, token, logger) {
+	const trustServiceId = await anvil.readContract({
+		address: token,
+		abi: require_abi_rwa_iDSToken.iDSTokenAbi,
+		functionName: "TRUST_SERVICE"
+	});
+	const trustService = await anvil.readContract({
+		address: token,
+		abi: require_abi_rwa_iDSToken.iDSTokenAbi,
+		functionName: "getDSService",
+		args: [trustServiceId]
+	});
+	if ((0, viem.isAddressEqual)(trustService, token)) {
+		const admin = await anvil.readContract({
+			address: token,
+			abi: iMockDSTokenAdminAbi,
+			functionName: "admin"
+		});
+		logger?.debug(`securitize: found admin ${admin} for ${token} (token.admin)`);
+		return admin;
+	}
+	const word = await anvil.getStorageAt({
+		address: trustService,
+		slot: (0, viem.toHex)(0, { size: 32 })
+	});
+	if (!word) throw new Error(`securitize: empty trust-service owner slot on ${trustService}`);
+	const admin = (0, viem.getAddress)((0, viem.slice)(word, 12));
+	logger?.debug(`securitize: found admin ${admin} for ${token} (trust service ${trustService})`);
+	return admin;
+}
+/**
+* Impersonates the DS trust-service admin of `token` on the fork
 */
 async function useSecuritizeAdmin(props) {
-	const { anvil, adminPrivateKey, admin, logger } = props;
-	if (adminPrivateKey) return {
-		account: (0, viem_accounts.privateKeyToAccount)(adminPrivateKey),
-		release: async () => {}
-	};
-	if (!admin) throw new Error("securitize: either adminPrivateKey or admin address is required");
+	const { anvil, token, logger } = props;
+	const admin = await getSecuritizeAdmin(anvil, token, logger);
 	await anvil.impersonateAccount({ address: admin });
 	await anvil.setBalance({
 		address: admin,
@@ -295,17 +325,15 @@ async function findMidasGateway(props) {
 * result instead of aborting the whole run.
 */
 async function registerRWAInvestor(props) {
-	const { anvil, sdk, investor, adminPrivateKey, securitizeAdmin, midasAdmin = "0xd4195CF4df289a4748C1A7B6dDBE770e27bA1227", logger } = props;
+	const { anvil, sdk, investor, midasAdmin = "0xd4195CF4df289a4748C1A7B6dDBE770e27bA1227", logger } = props;
 	const securitizeTokens = [];
 	const midasGateways = [];
 	const failed = [];
 	const dsTokens = new require_onchain_utils_AddressSet.AddressSet(sdk.rwa.factories.flatMap((factory) => factory.getTokens()));
-	if (adminPrivateKey || securitizeAdmin) for (const token of dsTokens) try {
+	for (const token of dsTokens) try {
 		await registerSecuritizeInvestor({
 			anvil,
 			investor,
-			adminPrivateKey,
-			admin: securitizeAdmin,
 			token,
 			logger
 		});
@@ -318,7 +346,6 @@ async function registerRWAInvestor(props) {
 			error: e
 		});
 	}
-	else if (dsTokens.size > 0) logger?.warn(`securitize: no registry admin, skipping ${dsTokens.size} DSToken(s)`);
 	const gateways = await require_dev_midasUtils.collectMidasGateways(sdk);
 	for (const gateway of gateways) try {
 		await greenlistMidasGateway({
@@ -345,6 +372,7 @@ async function registerRWAInvestor(props) {
 	};
 }
 //#endregion
+exports.getSecuritizeAdmin = getSecuritizeAdmin;
 exports.greenlistMidasGateway = greenlistMidasGateway;
 exports.registerMidasInvestor = registerMidasInvestor;
 exports.registerRWAInvestor = registerRWAInvestor;

package/dist/cjs/dev/securitizeUtils.js

@@ -5,7 +5,6 @@ require("../onchain/index.js");
 const require_abi_rwa_iDSToken = require("../abi/rwa/iDSToken.js");
 const require_dev_kycUtils = require("./kycUtils.js");
 let viem = require("viem");
-let viem_accounts = require("viem/accounts");
 //#region src/dev/securitizeUtils.ts
 /**
 * `COMPLIANCE_CONFIGURATION_SERVICE` id in the DS protocol service registry
@@ -111,7 +110,7 @@ async function issueDSTokens(props) {
 * Tokens without one (e.g. MockDSToken) are skipped
 */
 async function getComplianceConfigurationServices({ anvil, tokens, logger }) {
-	const services = new require_onchain_utils_AddressSet.AddressSet();
+	const services = /* @__PURE__ */ new Map();
 	for (const token of new require_onchain_utils_AddressSet.AddressSet(tokens)) try {
 		const service = await anvil.readContract({
 			address: token,
@@ -123,11 +122,16 @@ async function getComplianceConfigurationServices({ anvil, tokens, logger }) {
 			logger?.debug(`${token} has no compliance configuration service`);
 			continue;
 		}
-		services.add(service);
+		const checksummed = (0, viem.getAddress)(service);
+		if (services.has(checksummed)) continue;
+		services.set(checksummed, await require_dev_kycUtils.getSecuritizeAdmin(anvil, token, logger));
 	} catch (e) {
 		logger?.debug(`Failed to get compliance configuration service of ${token}: ${e}`);
 	}
-	return [...services];
+	return [...services].map(([service, admin]) => ({
+		service,
+		admin
+	}));
 }
 /**
 * Sets `disallowBackDating` to false on compliance configuration services of
@@ -135,18 +139,17 @@ async function getComplianceConfigurationServices({ anvil, tokens, logger }) {
 * honoured: DS protocol silently replaces it with `block.timestamp` otherwise,
 * and freshly minted tokens stay under lock-up.
 *
-* Must be signed by a DS admin with sufficient trust (same key as
-* `issueTokens` / registerInvestor); Ownable `owner()` alone is not enough.
+* Impersonates the DS trust-service admin of each token. Ownable `owner()` of
+* the compliance configuration service alone is not enough.
 *
 * The flag is only read while tokens are issued, so restoring it does not
 * re-lock tokens minted in the meantime.
 */
 async function enableDSTokenBackDating(props) {
-	const { anvil, adminPrivateKey, logger } = props;
-	const account = (0, viem_accounts.privateKeyToAccount)(adminPrivateKey);
+	const { anvil, logger } = props;
 	const services = await getComplianceConfigurationServices(props);
 	let toRestore = [];
-	for (const service of services) {
+	for (const { service, admin } of services) {
 		let disallowBackDating;
 		try {
 			disallowBackDating = await anvil.readContract({
@@ -163,32 +166,53 @@ async function enableDSTokenBackDating(props) {
 			continue;
 		}
 		logger?.info(`Allowing back-dating on ${service}`);
-		await anvil.writeContractSync({
-			account,
-			chain: anvil.chain,
-			address: service,
-			abi: iDSComplianceConfigurationServiceAbi,
-			functionName: "setDisallowBackDating",
-			args: [false],
-			throwOnReceiptRevert: true
+		await anvil.impersonateAccount({ address: admin });
+		try {
+			await anvil.setBalance({
+				address: admin,
+				value: (0, viem.parseEther)("100")
+			});
+			await anvil.writeContractSync({
+				account: admin,
+				chain: anvil.chain,
+				address: service,
+				abi: iDSComplianceConfigurationServiceAbi,
+				functionName: "setDisallowBackDating",
+				args: [false],
+				throwOnReceiptRevert: true
+			});
+		} finally {
+			await anvil.stopImpersonatingAccount({ address: admin });
+		}
+		toRestore.push({
+			service,
+			admin
 		});
-		toRestore.push(service);
 	}
 	return async () => {
 		const services = toRestore;
 		toRestore = [];
-		for (const service of services) {
+		for (const { service, admin } of services) {
 			logger?.info(`Disallowing back-dating on ${service}`);
 			try {
-				await anvil.writeContractSync({
-					account,
-					chain: anvil.chain,
-					address: service,
-					abi: iDSComplianceConfigurationServiceAbi,
-					functionName: "setDisallowBackDating",
-					args: [true],
-					throwOnReceiptRevert: true
-				});
+				await anvil.impersonateAccount({ address: admin });
+				try {
+					await anvil.setBalance({
+						address: admin,
+						value: (0, viem.parseEther)("100")
+					});
+					await anvil.writeContractSync({
+						account: admin,
+						chain: anvil.chain,
+						address: service,
+						abi: iDSComplianceConfigurationServiceAbi,
+						functionName: "setDisallowBackDating",
+						args: [true],
+						throwOnReceiptRevert: true
+					});
+				} finally {
+					await anvil.stopImpersonatingAccount({ address: admin });
+				}
 			} catch (e) {
 				logger?.warn(`Failed to restore disallowBackDating on ${service}: ${e}`);
 			}
@@ -196,8 +220,7 @@ async function enableDSTokenBackDating(props) {
 	};
 }
 async function claimDSToken(props) {
-	const { anvil, investor, adminPrivateKey, token, marketConfigurators, rwaFactories, usdAmount: usdAmountProp = "100000" } = props;
-	const account = (0, viem_accounts.privateKeyToAccount)(adminPrivateKey);
+	const { anvil, investor, token, marketConfigurators, rwaFactories, usdAmount: usdAmountProp = "100000" } = props;
 	const symbol = await anvil.readContract({
 		address: token,
 		abi: viem.erc20Abi,
@@ -221,18 +244,31 @@ async function claimDSToken(props) {
 	if (amount === 0n) throw new Error(`No market found for token ${token}`);
 	logger?.debug(`${usdAmountProp} USD === ${amount} ${symbol}`);
 	await require_dev_kycUtils.registerSecuritizeInvestor({
-		...props,
-		logger
-	});
-	logger?.debug(`Issuing ${amount} tokens to ${investor}...`);
-	const mintHash = await issueDSTokens({
 		anvil,
-		account,
-		token,
 		investor,
-		amount,
+		token,
 		logger
 	});
+	const admin = await require_dev_kycUtils.getSecuritizeAdmin(anvil, token, logger);
+	logger?.debug(`Issuing ${amount} tokens to ${investor}...`);
+	await anvil.impersonateAccount({ address: admin });
+	let mintHash;
+	try {
+		await anvil.setBalance({
+			address: admin,
+			value: (0, viem.parseEther)("100")
+		});
+		mintHash = await issueDSTokens({
+			anvil,
+			account: admin,
+			token,
+			investor,
+			amount,
+			logger
+		});
+	} finally {
+		await anvil.stopImpersonatingAccount({ address: admin });
+	}
 	logger?.debug(`Done! tx: ${mintHash}`);
 	const balance = await anvil.readContract({
 		address: token,

package/dist/esm/dev/index.js

@@ -14,7 +14,7 @@ import { isOutOfSyncError } from "./isOutOfSyncError.js";
 import { isRateLimitError } from "./isRateLimitError.js";
 import { isTransientError } from "./isTransientError.js";
 import { collectMidasGateways, collectMidasMTokens, unpauseMidasIssuanceVault } from "./midasUtils.js";
-import { greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor } from "./kycUtils.js";
+import { getSecuritizeAdmin, greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor } from "./kycUtils.js";
 import { isRangeError, logSplitterTransport } from "./logSplitterTransport.js";
 import { setLTZero, setLTs } from "./ltUtils.js";
 import { migrateFaucet } from "./migrateFaucet.js";
@@ -25,4 +25,4 @@ import { claimDSToken, claimDSTokens, enableDSTokenBackDating } from "./securiti
 import "./types.js";
 import { ONCHAIN_EXECUTION_ID_ADDRESS, verifyTestnet } from "./verifyTestnet.js";
 import { makePendingWithdrawalsClaimable } from "./withdrawalUtils.js";
-export { AccountOpener, Create2Deployer, DEFAULT_CREATE2_SALT, EthCallSpy, NoAvailableTransportsError, ONCHAIN_EXECUTION_ID_ADDRESS, OpenTxRevertedError, PUBLIC_CREATE2_FACTORY, RevolverTransport, SUPPORTED_RPC_PROVIDERS, SelectionStrategy, anvilNodeInfo, calcLiquidatableLTs, claimDSToken, claimDSTokens, claimFromFaucet, collectMidasGateways, collectMidasMTokens, createAnvilClient, createMinter, deployUsingPublicCreate2, detectChain, enableDSTokenBackDating, evmMineDetailed, extendAnvilClient, getAlchemyUrl, getAnkrUrl, getDrpcUrl, getErpcKey, getPublicCreate2Address, getRpcProviderUrl, getThirdWebUrl, greenlistMidasGateway, httpTransportOptionsSchema, iDegenNftv2Abi, iFaucetAbi, iOnchainExecutionIdAbi, iOwnableAbi, iaclTraitAbi, isAnvil, isDeployedUsingPublicCreate2, isOutOfSyncError, isRangeError, isRateLimitError, isTransientError, logSplitterTransport, makePendingWithdrawalsClaimable, migrateFaucet, providerConfigSchema, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor, replaceStorage, resilientTransport, resilientTransportOptionsSchema, revolverTransportConfigBaseSchema, revolverTransportConfigSchema, rpcProvidersSchema, setLTZero, setLTs, unpauseMidasIssuanceVault, verifyTestnet, writeContractSync };
+export { AccountOpener, Create2Deployer, DEFAULT_CREATE2_SALT, EthCallSpy, NoAvailableTransportsError, ONCHAIN_EXECUTION_ID_ADDRESS, OpenTxRevertedError, PUBLIC_CREATE2_FACTORY, RevolverTransport, SUPPORTED_RPC_PROVIDERS, SelectionStrategy, anvilNodeInfo, calcLiquidatableLTs, claimDSToken, claimDSTokens, claimFromFaucet, collectMidasGateways, collectMidasMTokens, createAnvilClient, createMinter, deployUsingPublicCreate2, detectChain, enableDSTokenBackDating, evmMineDetailed, extendAnvilClient, getAlchemyUrl, getAnkrUrl, getDrpcUrl, getErpcKey, getPublicCreate2Address, getRpcProviderUrl, getSecuritizeAdmin, getThirdWebUrl, greenlistMidasGateway, httpTransportOptionsSchema, iDegenNftv2Abi, iFaucetAbi, iOnchainExecutionIdAbi, iOwnableAbi, iaclTraitAbi, isAnvil, isDeployedUsingPublicCreate2, isOutOfSyncError, isRangeError, isRateLimitError, isTransientError, logSplitterTransport, makePendingWithdrawalsClaimable, migrateFaucet, providerConfigSchema, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor, replaceStorage, resilientTransport, resilientTransportOptionsSchema, revolverTransportConfigBaseSchema, revolverTransportConfigSchema, rpcProvidersSchema, setLTZero, setLTs, unpauseMidasIssuanceVault, verifyTestnet, writeContractSync };

package/dist/esm/dev/kycUtils.js

@@ -6,20 +6,50 @@ import { iDSRegistryServiceAbi } from "../abi/rwa/iDSRegistryService.js";
 import { iDSTokenAbi } from "../abi/rwa/iDSToken.js";
 import { collectMidasGateways } from "./midasUtils.js";
 import { midasGatewayAbi } from "./withdrawalAbi.js";
-import { isAddressEqual, parseAbi, parseEther, zeroAddress } from "viem";
-import { privateKeyToAccount } from "viem/accounts";
+import { getAddress, isAddressEqual, parseAbi, parseEther, slice, toHex, zeroAddress } from "viem";
 //#region src/dev/kycUtils.ts
+const iMockDSTokenAdminAbi = parseAbi(["function admin() view returns (address)"]);
 /**
-* Resolves the account that performs the DS registry writes: either the admin
-* private key, or the admin address impersonated on the fork
+* DS trust-service master of `token`: Ownable owner at storage slot 0 of the
+* trust service, same as periphery-v3 SecuritizeAttachHelper. MockDSToken
+* returns itself as the trust service, so `admin()` is used instead.
+*/
+async function getSecuritizeAdmin(anvil, token, logger) {
+	const trustServiceId = await anvil.readContract({
+		address: token,
+		abi: iDSTokenAbi,
+		functionName: "TRUST_SERVICE"
+	});
+	const trustService = await anvil.readContract({
+		address: token,
+		abi: iDSTokenAbi,
+		functionName: "getDSService",
+		args: [trustServiceId]
+	});
+	if (isAddressEqual(trustService, token)) {
+		const admin = await anvil.readContract({
+			address: token,
+			abi: iMockDSTokenAdminAbi,
+			functionName: "admin"
+		});
+		logger?.debug(`securitize: found admin ${admin} for ${token} (token.admin)`);
+		return admin;
+	}
+	const word = await anvil.getStorageAt({
+		address: trustService,
+		slot: toHex(0, { size: 32 })
+	});
+	if (!word) throw new Error(`securitize: empty trust-service owner slot on ${trustService}`);
+	const admin = getAddress(slice(word, 12));
+	logger?.debug(`securitize: found admin ${admin} for ${token} (trust service ${trustService})`);
+	return admin;
+}
+/**
+* Impersonates the DS trust-service admin of `token` on the fork
 */
 async function useSecuritizeAdmin(props) {
-	const { anvil, adminPrivateKey, admin, logger } = props;
-	if (adminPrivateKey) return {
-		account: privateKeyToAccount(adminPrivateKey),
-		release: async () => {}
-	};
-	if (!admin) throw new Error("securitize: either adminPrivateKey or admin address is required");
+	const { anvil, token, logger } = props;
+	const admin = await getSecuritizeAdmin(anvil, token, logger);
 	await anvil.impersonateAccount({ address: admin });
 	await anvil.setBalance({
 		address: admin,
@@ -294,17 +324,15 @@ async function findMidasGateway(props) {
 * result instead of aborting the whole run.
 */
 async function registerRWAInvestor(props) {
-	const { anvil, sdk, investor, adminPrivateKey, securitizeAdmin, midasAdmin = "0xd4195CF4df289a4748C1A7B6dDBE770e27bA1227", logger } = props;
+	const { anvil, sdk, investor, midasAdmin = "0xd4195CF4df289a4748C1A7B6dDBE770e27bA1227", logger } = props;
 	const securitizeTokens = [];
 	const midasGateways = [];
 	const failed = [];
 	const dsTokens = new AddressSet(sdk.rwa.factories.flatMap((factory) => factory.getTokens()));
-	if (adminPrivateKey || securitizeAdmin) for (const token of dsTokens) try {
+	for (const token of dsTokens) try {
 		await registerSecuritizeInvestor({
 			anvil,
 			investor,
-			adminPrivateKey,
-			admin: securitizeAdmin,
 			token,
 			logger
 		});
@@ -317,7 +345,6 @@ async function registerRWAInvestor(props) {
 			error: e
 		});
 	}
-	else if (dsTokens.size > 0) logger?.warn(`securitize: no registry admin, skipping ${dsTokens.size} DSToken(s)`);
 	const gateways = await collectMidasGateways(sdk);
 	for (const gateway of gateways) try {
 		await greenlistMidasGateway({
@@ -344,4 +371,4 @@ async function registerRWAInvestor(props) {
 	};
 }
 //#endregion
-export { greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor };
+export { getSecuritizeAdmin, greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor };

package/dist/esm/dev/securitizeUtils.js

@@ -2,9 +2,8 @@ import { AddressSet } from "../onchain/utils/AddressSet.js";
 import { OnchainSDK } from "../onchain/OnchainSDK.js";
 import "../onchain/index.js";
 import { iDSTokenAbi } from "../abi/rwa/iDSToken.js";
-import { registerSecuritizeInvestor } from "./kycUtils.js";
-import { erc20Abi, isAddressEqual, parseAbi, zeroAddress } from "viem";
-import { privateKeyToAccount } from "viem/accounts";
+import { getSecuritizeAdmin, registerSecuritizeInvestor } from "./kycUtils.js";
+import { erc20Abi, getAddress, isAddressEqual, parseAbi, parseEther, zeroAddress } from "viem";
 //#region src/dev/securitizeUtils.ts
 /**
 * `COMPLIANCE_CONFIGURATION_SERVICE` id in the DS protocol service registry
@@ -110,7 +109,7 @@ async function issueDSTokens(props) {
 * Tokens without one (e.g. MockDSToken) are skipped
 */
 async function getComplianceConfigurationServices({ anvil, tokens, logger }) {
-	const services = new AddressSet();
+	const services = /* @__PURE__ */ new Map();
 	for (const token of new AddressSet(tokens)) try {
 		const service = await anvil.readContract({
 			address: token,
@@ -122,11 +121,16 @@ async function getComplianceConfigurationServices({ anvil, tokens, logger }) {
 			logger?.debug(`${token} has no compliance configuration service`);
 			continue;
 		}
-		services.add(service);
+		const checksummed = getAddress(service);
+		if (services.has(checksummed)) continue;
+		services.set(checksummed, await getSecuritizeAdmin(anvil, token, logger));
 	} catch (e) {
 		logger?.debug(`Failed to get compliance configuration service of ${token}: ${e}`);
 	}
-	return [...services];
+	return [...services].map(([service, admin]) => ({
+		service,
+		admin
+	}));
 }
 /**
 * Sets `disallowBackDating` to false on compliance configuration services of
@@ -134,18 +138,17 @@ async function getComplianceConfigurationServices({ anvil, tokens, logger }) {
 * honoured: DS protocol silently replaces it with `block.timestamp` otherwise,
 * and freshly minted tokens stay under lock-up.
 *
-* Must be signed by a DS admin with sufficient trust (same key as
-* `issueTokens` / registerInvestor); Ownable `owner()` alone is not enough.
+* Impersonates the DS trust-service admin of each token. Ownable `owner()` of
+* the compliance configuration service alone is not enough.
 *
 * The flag is only read while tokens are issued, so restoring it does not
 * re-lock tokens minted in the meantime.
 */
 async function enableDSTokenBackDating(props) {
-	const { anvil, adminPrivateKey, logger } = props;
-	const account = privateKeyToAccount(adminPrivateKey);
+	const { anvil, logger } = props;
 	const services = await getComplianceConfigurationServices(props);
 	let toRestore = [];
-	for (const service of services) {
+	for (const { service, admin } of services) {
 		let disallowBackDating;
 		try {
 			disallowBackDating = await anvil.readContract({
@@ -162,32 +165,53 @@ async function enableDSTokenBackDating(props) {
 			continue;
 		}
 		logger?.info(`Allowing back-dating on ${service}`);
-		await anvil.writeContractSync({
-			account,
-			chain: anvil.chain,
-			address: service,
-			abi: iDSComplianceConfigurationServiceAbi,
-			functionName: "setDisallowBackDating",
-			args: [false],
-			throwOnReceiptRevert: true
+		await anvil.impersonateAccount({ address: admin });
+		try {
+			await anvil.setBalance({
+				address: admin,
+				value: parseEther("100")
+			});
+			await anvil.writeContractSync({
+				account: admin,
+				chain: anvil.chain,
+				address: service,
+				abi: iDSComplianceConfigurationServiceAbi,
+				functionName: "setDisallowBackDating",
+				args: [false],
+				throwOnReceiptRevert: true
+			});
+		} finally {
+			await anvil.stopImpersonatingAccount({ address: admin });
+		}
+		toRestore.push({
+			service,
+			admin
 		});
-		toRestore.push(service);
 	}
 	return async () => {
 		const services = toRestore;
 		toRestore = [];
-		for (const service of services) {
+		for (const { service, admin } of services) {
 			logger?.info(`Disallowing back-dating on ${service}`);
 			try {
-				await anvil.writeContractSync({
-					account,
-					chain: anvil.chain,
-					address: service,
-					abi: iDSComplianceConfigurationServiceAbi,
-					functionName: "setDisallowBackDating",
-					args: [true],
-					throwOnReceiptRevert: true
-				});
+				await anvil.impersonateAccount({ address: admin });
+				try {
+					await anvil.setBalance({
+						address: admin,
+						value: parseEther("100")
+					});
+					await anvil.writeContractSync({
+						account: admin,
+						chain: anvil.chain,
+						address: service,
+						abi: iDSComplianceConfigurationServiceAbi,
+						functionName: "setDisallowBackDating",
+						args: [true],
+						throwOnReceiptRevert: true
+					});
+				} finally {
+					await anvil.stopImpersonatingAccount({ address: admin });
+				}
 			} catch (e) {
 				logger?.warn(`Failed to restore disallowBackDating on ${service}: ${e}`);
 			}
@@ -195,8 +219,7 @@ async function enableDSTokenBackDating(props) {
 	};
 }
 async function claimDSToken(props) {
-	const { anvil, investor, adminPrivateKey, token, marketConfigurators, rwaFactories, usdAmount: usdAmountProp = "100000" } = props;
-	const account = privateKeyToAccount(adminPrivateKey);
+	const { anvil, investor, token, marketConfigurators, rwaFactories, usdAmount: usdAmountProp = "100000" } = props;
 	const symbol = await anvil.readContract({
 		address: token,
 		abi: erc20Abi,
@@ -220,18 +243,31 @@ async function claimDSToken(props) {
 	if (amount === 0n) throw new Error(`No market found for token ${token}`);
 	logger?.debug(`${usdAmountProp} USD === ${amount} ${symbol}`);
 	await registerSecuritizeInvestor({
-		...props,
-		logger
-	});
-	logger?.debug(`Issuing ${amount} tokens to ${investor}...`);
-	const mintHash = await issueDSTokens({
 		anvil,
-		account,
-		token,
 		investor,
-		amount,
+		token,
 		logger
 	});
+	const admin = await getSecuritizeAdmin(anvil, token, logger);
+	logger?.debug(`Issuing ${amount} tokens to ${investor}...`);
+	await anvil.impersonateAccount({ address: admin });
+	let mintHash;
+	try {
+		await anvil.setBalance({
+			address: admin,
+			value: parseEther("100")
+		});
+		mintHash = await issueDSTokens({
+			anvil,
+			account: admin,
+			token,
+			investor,
+			amount,
+			logger
+		});
+	} finally {
+		await anvil.stopImpersonatingAccount({ address: admin });
+	}
 	logger?.debug(`Done! tx: ${mintHash}`);
 	const balance = await anvil.readContract({
 		address: token,

package/dist/esm/sdk/prepare/PrepareApi.js

@@ -55,7 +55,7 @@ var PrepareApi = class extends MultichainConstruct {
 			const at = stateBlock(sdk);
 			const intent = resumable(params.intent ?? params.claimable.intent);
 			if (!intent) return sdkErr(noRecordedIntent());
-			const creditAccount = await slice(sdk, position.creditAccount);
+			const creditAccount = await slice$1(sdk, position.creditAccount);
 			if (!creditAccount) return sdkErr(creditAccountNotFound(position.creditAccount));
 			return finalized(await service(sdk).finishIntent({
 				intent,
@@ -404,7 +404,7 @@ var PrepareApi = class extends MultichainConstruct {
 	* described, see {@link IOpportunitiesPrepare.maxWithdraw}.
 	**/
 	async #account(sdk, position) {
-		const creditAccount = await slice(sdk, position.creditAccount);
+		const creditAccount = await slice$1(sdk, position.creditAccount);
 		if (!creditAccount) throw new Error(creditAccountNotFound(position.creditAccount).message);
 		return creditAccount;
 	}
@@ -421,7 +421,7 @@ var PrepareApi = class extends MultichainConstruct {
 		try {
 			const sdk = await this.#chain(position.chainId);
 			const at = stateBlock(sdk);
-			const creditAccount = await slice(sdk, position.creditAccount);
+			const creditAccount = await slice$1(sdk, position.creditAccount);
 			if (!creditAccount) return neitherRoute(creditAccountNotFound(position.creditAccount));
 			return routed(await service(sdk).intentRoutes({
 				intent,
@@ -447,7 +447,7 @@ var PrepareApi = class extends MultichainConstruct {
 		try {
 			const sdk = await this.#chain(position.chainId);
 			const at = stateBlock(sdk);
-			const creditAccount = await slice(sdk, position.creditAccount);
+			const creditAccount = await slice$1(sdk, position.creditAccount);
 			if (!creditAccount) return sdkErr(creditAccountNotFound(position.creditAccount));
 			return planned(await service(sdk).startIntent({
 				intent,
@@ -479,7 +479,7 @@ function stateBlock(sdk) {
 * connected to hold no such account — closed since it was listed, or named on
 * the wrong chain. Read rather than thrown, so the caller gets a code for it.
 **/
-async function slice(sdk, creditAccount) {
+async function slice$1(sdk, creditAccount) {
 	const data = await sdk.accounts.getCreditAccountData(creditAccount);
 	return data && toCreditAccountSlice(data);
 }
@@ -497,7 +497,7 @@ async function slice(sdk, creditAccount) {
 **/
 async function reusable(sdk, strategy, creditAccount) {
 	if (!creditAccount) return;
-	const account = await slice(sdk, creditAccount);
+	const account = await slice$1(sdk, creditAccount);
 	if (!account || !isAddressEqual(account.creditManager, strategy.creditManager)) return sdkErr(creditAccountNotFound(creditAccount));
 	if (account.totalDebt > 0n || account.tokens.some((t) => t.quota > 0n)) return sdkErr(creditAccountNotEmpty(creditAccount));
 	return { account };

package/dist/types/dev/index.d.ts

@@ -11,7 +11,7 @@ import { detectChain } from "./detectChain.js";
 import { isOutOfSyncError } from "./isOutOfSyncError.js";
 import { isRateLimitError } from "./isRateLimitError.js";
 import { isTransientError } from "./isTransientError.js";
-import { GreenlistMidasGatewayProps, RWAKycFailure, RegisterMidasInvestorProps, RegisterRWAInvestorProps, RegisterRWAInvestorResult, RegisterSecuritizeInvestorProps, greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor } from "./kycUtils.js";
+import { GreenlistMidasGatewayProps, RWAKycFailure, RegisterMidasInvestorProps, RegisterRWAInvestorProps, RegisterRWAInvestorResult, RegisterSecuritizeInvestorProps, getSecuritizeAdmin, greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor } from "./kycUtils.js";
 import { LogSplitterTransportOptions, isRangeError, logSplitterTransport } from "./logSplitterTransport.js";
 import { setLTZero, setLTs } from "./ltUtils.js";
 import { RestoreMidasIssuanceVaultPause, UnpauseMidasIssuanceVaultProps, collectMidasGateways, collectMidasMTokens, unpauseMidasIssuanceVault } from "./midasUtils.js";
@@ -26,4 +26,4 @@ import { EnableDSTokenBackDatingProps, RestoreDSTokenBackDating, claimDSToken, c
 import { httpTransportOptionsSchema } from "./transports.js";
 import { ONCHAIN_EXECUTION_ID_ADDRESS, VerifyTestnetParams, verifyTestnet } from "./verifyTestnet.js";
 import { MakePendingWithdrawalsClaimableOptions, makePendingWithdrawalsClaimable } from "./withdrawalUtils.js";
-export { AccountOpener, AccountOpenerOptions, AnvilActions, AnvilClient, AnvilClientConfig, AnvilDealParameters, AnvilNodeInfo, AnvilRPCSchema, CheckMulticallFn, Create2Deployer, Create2Parameters, DEFAULT_CREATE2_SALT, DetectedCall, EnableDSTokenBackDatingProps, EnsureExistsUsingPublicCreate2ReturnType, EthCallMethod, EthCallRequest, EthCallSpy, GetCreate2AddressParameters, GreenlistMidasGatewayProps, IMinter, type LogSplitterTransportOptions, MakePendingWithdrawalsClaimableOptions, NoAvailableTransportsError, ONCHAIN_EXECUTION_ID_ADDRESS, OpenAccountHumanizedPreview, OpenAccountResult, OpenAccountsResult, OpenTxRevertedError, PUBLIC_CREATE2_FACTORY, PoolDepositResult, ProviderConfig, ProviderStatus, RWAKycFailure, RegisterMidasInvestorProps, RegisterRWAInvestorProps, RegisterRWAInvestorResult, RegisterSecuritizeInvestorProps, ReplaceStorageParams, ResilientTransportOptions, RestoreDSTokenBackDating, RestoreMidasIssuanceVaultPause, RevolverTransport, RevolverTransportConfig, RevolverTransportValue, RpcErrorResult, RpcProvider, RpcResponse, RpcSuccessResult, SUPPORTED_RPC_PROVIDERS, SelectionStrategy, TargetAccount, UnpauseMidasIssuanceVaultProps, VerifyTestnetParams, anvilNodeInfo, calcLiquidatableLTs, claimDSToken, claimDSTokens, claimFromFaucet, collectMidasGateways, collectMidasMTokens, createAnvilClient, createMinter, deployUsingPublicCreate2, detectChain, enableDSTokenBackDating, evmMineDetailed, extendAnvilClient, getAlchemyUrl, getAnkrUrl, getDrpcUrl, getErpcKey, getPublicCreate2Address, getRpcProviderUrl, getThirdWebUrl, greenlistMidasGateway, httpTransportOptionsSchema, iDegenNftv2Abi, iFaucetAbi, iOnchainExecutionIdAbi, iOwnableAbi, iaclTraitAbi, isAnvil, isDeployedUsingPublicCreate2, isOutOfSyncError, isRangeError, isRateLimitError, isTransientError, logSplitterTransport, makePendingWithdrawalsClaimable, migrateFaucet, providerConfigSchema, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor, replaceStorage, resilientTransport, resilientTransportOptionsSchema, revolverTransportConfigBaseSchema, revolverTransportConfigSchema, rpcProvidersSchema, setLTZero, setLTs, unpauseMidasIssuanceVault, verifyTestnet, writeContractSync };
+export { AccountOpener, AccountOpenerOptions, AnvilActions, AnvilClient, AnvilClientConfig, AnvilDealParameters, AnvilNodeInfo, AnvilRPCSchema, CheckMulticallFn, Create2Deployer, Create2Parameters, DEFAULT_CREATE2_SALT, DetectedCall, EnableDSTokenBackDatingProps, EnsureExistsUsingPublicCreate2ReturnType, EthCallMethod, EthCallRequest, EthCallSpy, GetCreate2AddressParameters, GreenlistMidasGatewayProps, IMinter, type LogSplitterTransportOptions, MakePendingWithdrawalsClaimableOptions, NoAvailableTransportsError, ONCHAIN_EXECUTION_ID_ADDRESS, OpenAccountHumanizedPreview, OpenAccountResult, OpenAccountsResult, OpenTxRevertedError, PUBLIC_CREATE2_FACTORY, PoolDepositResult, ProviderConfig, ProviderStatus, RWAKycFailure, RegisterMidasInvestorProps, RegisterRWAInvestorProps, RegisterRWAInvestorResult, RegisterSecuritizeInvestorProps, ReplaceStorageParams, ResilientTransportOptions, RestoreDSTokenBackDating, RestoreMidasIssuanceVaultPause, RevolverTransport, RevolverTransportConfig, RevolverTransportValue, RpcErrorResult, RpcProvider, RpcResponse, RpcSuccessResult, SUPPORTED_RPC_PROVIDERS, SelectionStrategy, TargetAccount, UnpauseMidasIssuanceVaultProps, VerifyTestnetParams, anvilNodeInfo, calcLiquidatableLTs, claimDSToken, claimDSTokens, claimFromFaucet, collectMidasGateways, collectMidasMTokens, createAnvilClient, createMinter, deployUsingPublicCreate2, detectChain, enableDSTokenBackDating, evmMineDetailed, extendAnvilClient, getAlchemyUrl, getAnkrUrl, getDrpcUrl, getErpcKey, getPublicCreate2Address, getRpcProviderUrl, getSecuritizeAdmin, getThirdWebUrl, greenlistMidasGateway, httpTransportOptionsSchema, iDegenNftv2Abi, iFaucetAbi, iOnchainExecutionIdAbi, iOwnableAbi, iaclTraitAbi, isAnvil, isDeployedUsingPublicCreate2, isOutOfSyncError, isRangeError, isRateLimitError, isTransientError, logSplitterTransport, makePendingWithdrawalsClaimable, migrateFaucet, providerConfigSchema, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor, replaceStorage, resilientTransport, resilientTransportOptionsSchema, revolverTransportConfigBaseSchema, revolverTransportConfigSchema, rpcProvidersSchema, setLTZero, setLTs, unpauseMidasIssuanceVault, verifyTestnet, writeContractSync };

package/dist/types/dev/kycUtils.d.ts

@@ -2,7 +2,7 @@ import { ILogger } from "../onchain/types/logger.js";
 import { OnchainSDK } from "../onchain/OnchainSDK.js";
 import "../onchain/index.js";
 import { AnvilClient } from "./createAnvilClient.js";
-import { Address, Hex } from "viem";
+import { Address } from "viem";
 //#region src/dev/kycUtils.d.ts
 interface RegisterSecuritizeInvestorProps {
   anvil: AnvilClient;
@@ -10,20 +10,18 @@ interface RegisterSecuritizeInvestorProps {
    * Wallet to register in the Securitize DS registry
    */
   investor: Address;
-  /**
-   * Private key of the DS registry admin, signs the registry writes
-   */
-  adminPrivateKey?: Hex;
-  /**
-   * DS registry admin, impersonated on the fork when no private key is given
-   */
-  admin?: Address;
   /**
    * DSToken address
    */
   token: Address;
   logger?: ILogger;
 }
+/**
+ * DS trust-service master of `token`: Ownable owner at storage slot 0 of the
+ * trust service, same as periphery-v3 SecuritizeAttachHelper. MockDSToken
+ * returns itself as the trust service, so `admin()` is used instead.
+ */
+declare function getSecuritizeAdmin(anvil: AnvilClient, token: Address, logger?: ILogger): Promise<Address>;
 /**
  * Registers a wallet as a Securitize investor (fake KYC) in the DS registry
  * service of a DSToken.
@@ -92,15 +90,6 @@ interface RegisterRWAInvestorProps {
    * Wallet to pass the KYC of every RWA token
    */
   investor: Address;
-  /**
-   * Private key of the Securitize registry admin, DSTokens are skipped when
-   * neither this nor `securitizeAdmin` is set
-   */
-  adminPrivateKey?: Hex;
-  /**
-   * Securitize registry admin, impersonated on the fork
-   */
-  securitizeAdmin?: Address;
   /**
    * Override midas access control admin address
    */
@@ -134,4 +123,4 @@ interface RegisterRWAInvestorResult {
  */
 declare function registerRWAInvestor(props: RegisterRWAInvestorProps): Promise<RegisterRWAInvestorResult>;
 //#endregion
-export { GreenlistMidasGatewayProps, RWAKycFailure, RegisterMidasInvestorProps, RegisterRWAInvestorProps, RegisterRWAInvestorResult, RegisterSecuritizeInvestorProps, greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor };
+export { GreenlistMidasGatewayProps, RWAKycFailure, RegisterMidasInvestorProps, RegisterRWAInvestorProps, RegisterRWAInvestorResult, RegisterSecuritizeInvestorProps, getSecuritizeAdmin, greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor };

package/dist/types/dev/securitizeUtils.d.ts

@@ -1,12 +1,11 @@
 import { ILogger } from "../onchain/types/logger.js";
 import "../onchain/index.js";
 import { AnvilClient } from "./createAnvilClient.js";
-import { Address, Hex } from "viem";
+import { Address } from "viem";
 //#region src/dev/securitizeUtils.d.ts
 interface ClaimDSTokenProps {
   anvil: AnvilClient;
   investor: Address;
-  adminPrivateKey: Hex;
   /**
    * DSToken addresses
    */
@@ -24,11 +23,6 @@ type ClaimDSTokensProps = Omit<ClaimDSTokenProps, "token"> & {
 };
 interface EnableDSTokenBackDatingProps {
   anvil: AnvilClient;
-  /**
-   * Securitize DS admin with sufficient trust to call compliance setters
-   * (same key used for issueTokens / registerInvestor)
-   */
-  adminPrivateKey: Hex;
   /**
    * DSToken addresses whose compliance configuration should allow back-dating
    */
@@ -46,8 +40,8 @@ type RestoreDSTokenBackDating = () => Promise<void>;
  * honoured: DS protocol silently replaces it with `block.timestamp` otherwise,
  * and freshly minted tokens stay under lock-up.
  *
- * Must be signed by a DS admin with sufficient trust (same key as
- * `issueTokens` / registerInvestor); Ownable `owner()` alone is not enough.
+ * Impersonates the DS trust-service admin of each token. Ownable `owner()` of
+ * the compliance configuration service alone is not enough.
  *
  * The flag is only read while tokens are issued, so restoring it does not
  * re-lock tokens minted in the meantime.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gearbox-protocol/sdk",
-  "version": "16.6.0-next.4",
+  "version": "16.6.0-next.5",
   "description": "Gearbox SDK",
   "license": "MIT",
   "repository": {