@gearbox-protocol/sdk 16.6.0-next.4 → 16.6.0-next.6

package/dist/cjs/dev/index.js

@@ -29,6 +29,7 @@ const require_dev_withdrawalUtils = require("./withdrawalUtils.js");
 exports.AccountOpener = require_dev_AccountOpener.AccountOpener;
 exports.Create2Deployer = require_dev_create2.Create2Deployer;
 exports.DEFAULT_CREATE2_SALT = require_dev_create2.DEFAULT_CREATE2_SALT;
+exports.DEFAULT_MIDAS_ADMIN = require_dev_kycUtils.DEFAULT_MIDAS_ADMIN;
 exports.EthCallSpy = require_dev_EthCallSpy.EthCallSpy;
 exports.NoAvailableTransportsError = require_dev_RevolverTransport.NoAvailableTransportsError;
 exports.ONCHAIN_EXECUTION_ID_ADDRESS = require_dev_verifyTestnet.ONCHAIN_EXECUTION_ID_ADDRESS;
@@ -42,12 +43,13 @@ exports.calcLiquidatableLTs = require_dev_calcLiquidatableLTs.calcLiquidatableLT
 exports.claimDSToken = require_dev_securitizeUtils.claimDSToken;
 exports.claimDSTokens = require_dev_securitizeUtils.claimDSTokens;
 exports.claimFromFaucet = require_dev_claimFromFaucet.claimFromFaucet;
-exports.collectMidasGateways = require_dev_midasUtils.collectMidasGateways;
-exports.collectMidasMTokens = require_dev_midasUtils.collectMidasMTokens;
 exports.createAnvilClient = require_dev_createAnvilClient.createAnvilClient;
 exports.createMinter = require_dev_mint_factory.createMinter;
 exports.deployUsingPublicCreate2 = require_dev_create2.deployUsingPublicCreate2;
 exports.detectChain = require_dev_detectChain.detectChain;
+exports.discoverMidasCreditSuites = require_dev_midasUtils.discoverMidasCreditSuites;
+exports.discoverMidasGateways = require_dev_midasUtils.discoverMidasGateways;
+exports.discoverMidasMTokens = require_dev_midasUtils.discoverMidasMTokens;
 exports.enableDSTokenBackDating = require_dev_securitizeUtils.enableDSTokenBackDating;
 exports.evmMineDetailed = require_dev_createAnvilClient.evmMineDetailed;
 exports.extendAnvilClient = require_dev_createAnvilClient.extendAnvilClient;
@@ -57,6 +59,7 @@ exports.getDrpcUrl = require_dev_providers.getDrpcUrl;
 exports.getErpcKey = require_dev_providers.getErpcKey;
 exports.getPublicCreate2Address = require_dev_create2.getPublicCreate2Address;
 exports.getRpcProviderUrl = require_dev_providers.getRpcProviderUrl;
+exports.getSecuritizeAdmin = require_dev_kycUtils.getSecuritizeAdmin;
 exports.getThirdWebUrl = require_dev_providers.getThirdWebUrl;
 exports.greenlistMidasGateway = require_dev_kycUtils.greenlistMidasGateway;
 exports.httpTransportOptionsSchema = require_dev_transports.httpTransportOptionsSchema;

package/dist/cjs/dev/kycUtils.js

@@ -8,19 +8,49 @@ const require_abi_rwa_iDSToken = require("../abi/rwa/iDSToken.js");
 const require_dev_midasUtils = require("./midasUtils.js");
 const require_dev_withdrawalAbi = require("./withdrawalAbi.js");
 let viem = require("viem");
-let viem_accounts = require("viem/accounts");
 //#region src/dev/kycUtils.ts
+const iMockDSTokenAdminAbi = (0, viem.parseAbi)(["function admin() view returns (address)"]);
 /**
-* Resolves the account that performs the DS registry writes: either the admin
-* private key, or the admin address impersonated on the fork
+* DS trust-service master of `token`: Ownable owner at storage slot 0 of the
+* trust service, same as periphery-v3 SecuritizeAttachHelper. MockDSToken
+* returns itself as the trust service, so `admin()` is used instead.
+*/
+async function getSecuritizeAdmin(anvil, token, logger) {
+	const trustServiceId = await anvil.readContract({
+		address: token,
+		abi: require_abi_rwa_iDSToken.iDSTokenAbi,
+		functionName: "TRUST_SERVICE"
+	});
+	const trustService = await anvil.readContract({
+		address: token,
+		abi: require_abi_rwa_iDSToken.iDSTokenAbi,
+		functionName: "getDSService",
+		args: [trustServiceId]
+	});
+	if ((0, viem.isAddressEqual)(trustService, token)) {
+		const admin = await anvil.readContract({
+			address: token,
+			abi: iMockDSTokenAdminAbi,
+			functionName: "admin"
+		});
+		logger?.debug(`securitize: found admin ${admin} for ${token} (token.admin)`);
+		return admin;
+	}
+	const word = await anvil.getStorageAt({
+		address: trustService,
+		slot: (0, viem.toHex)(0, { size: 32 })
+	});
+	if (!word) throw new Error(`securitize: empty trust-service owner slot on ${trustService}`);
+	const admin = (0, viem.getAddress)((0, viem.slice)(word, 12));
+	logger?.debug(`securitize: found admin ${admin} for ${token} (trust service ${trustService})`);
+	return admin;
+}
+/**
+* Impersonates the DS trust-service admin of `token` on the fork
 */
 async function useSecuritizeAdmin(props) {
-	const { anvil, adminPrivateKey, admin, logger } = props;
-	if (adminPrivateKey) return {
-		account: (0, viem_accounts.privateKeyToAccount)(adminPrivateKey),
-		release: async () => {}
-	};
-	if (!admin) throw new Error("securitize: either adminPrivateKey or admin address is required");
+	const { anvil, token, logger } = props;
+	const admin = await getSecuritizeAdmin(anvil, token, logger);
 	await anvil.impersonateAccount({ address: admin });
 	await anvil.setBalance({
 		address: admin,
@@ -260,8 +290,7 @@ async function greenlistMidasGateway(props) {
 	}
 }
 /**
-* Finds the Midas gateway that issues `token` by scanning the Midas gateway
-* adapters of all loaded credit managers and the gateways of Midas degen NFTs
+* Finds the Midas gateway that issues `token` among the loaded credit managers.
 */
 async function findMidasGateway(props) {
 	const { anvil, token, marketConfigurators, logger } = props;
@@ -273,21 +302,19 @@ async function findMidasGateway(props) {
 		});
 		await sdk.attach({ marketConfigurators });
 	}
-	const candidates = await require_dev_midasUtils.collectMidasGateways(sdk);
-	if (candidates.length === 0) throw new Error("no midas gateway adapters or midas degen NFTs found in loaded markets");
-	const index = (await anvil.multicall({
-		allowFailure: false,
-		contracts: candidates.map((address) => ({
-			address,
-			abi: require_dev_withdrawalAbi.midasGatewayAbi,
-			functionName: "mToken"
-		}))
-	})).findIndex((mToken) => (0, viem.isAddressEqual)(mToken, token));
-	if (index === -1) throw new Error(`no midas gateway found for token ${token}`);
-	logger?.debug(`midas: gateway for ${token} is ${candidates[index]}`);
-	return candidates[index];
+	const suites = await require_dev_midasUtils.discoverMidasCreditSuites(sdk);
+	if (suites.length === 0) throw new Error("no midas gateway adapters or midas degen NFTs found in loaded markets");
+	const suite = suites.find(({ mToken }) => (0, viem.isAddressEqual)(mToken, token));
+	if (!suite) throw new Error(`no midas gateway found for token ${token}`);
+	logger?.debug(`midas: gateway for ${token} is ${suite.gateway}`);
+	return suite.gateway;
 }
 /**
+* Midas access control admin on mainnet. Holds the admin role of the greenlist
+* operator role.
+*/
+const DEFAULT_MIDAS_ADMIN = "0xd4195CF4df289a4748C1A7B6dDBE770e27bA1227";
+/**
 * Registers a wallet as an investor (fake KYC) in every Securitize DSToken and
 * every Midas gateway of the markets loaded by `sdk`.
 *
@@ -295,17 +322,15 @@ async function findMidasGateway(props) {
 * result instead of aborting the whole run.
 */
 async function registerRWAInvestor(props) {
-	const { anvil, sdk, investor, adminPrivateKey, securitizeAdmin, midasAdmin = "0xd4195CF4df289a4748C1A7B6dDBE770e27bA1227", logger } = props;
+	const { anvil, sdk, investor, midasAdmin = DEFAULT_MIDAS_ADMIN, logger } = props;
 	const securitizeTokens = [];
 	const midasGateways = [];
 	const failed = [];
 	const dsTokens = new require_onchain_utils_AddressSet.AddressSet(sdk.rwa.factories.flatMap((factory) => factory.getTokens()));
-	if (adminPrivateKey || securitizeAdmin) for (const token of dsTokens) try {
+	for (const token of dsTokens) try {
 		await registerSecuritizeInvestor({
 			anvil,
 			investor,
-			adminPrivateKey,
-			admin: securitizeAdmin,
 			token,
 			logger
 		});
@@ -318,8 +343,7 @@ async function registerRWAInvestor(props) {
 			error: e
 		});
 	}
-	else if (dsTokens.size > 0) logger?.warn(`securitize: no registry admin, skipping ${dsTokens.size} DSToken(s)`);
-	const gateways = await require_dev_midasUtils.collectMidasGateways(sdk);
+	const gateways = await require_dev_midasUtils.discoverMidasGateways(sdk);
 	for (const gateway of gateways) try {
 		await greenlistMidasGateway({
 			anvil,
@@ -345,6 +369,8 @@ async function registerRWAInvestor(props) {
 	};
 }
 //#endregion
+exports.DEFAULT_MIDAS_ADMIN = DEFAULT_MIDAS_ADMIN;
+exports.getSecuritizeAdmin = getSecuritizeAdmin;
 exports.greenlistMidasGateway = greenlistMidasGateway;
 exports.registerMidasInvestor = registerMidasInvestor;
 exports.registerRWAInvestor = registerRWAInvestor;

package/dist/cjs/dev/midasUtils.js

@@ -147,29 +147,56 @@ async function unpauseMidasIssuanceVault(props) {
 		}
 	};
 }
-function* midasGatewayAdapters(sdk) {
-	for (const cm of sdk.marketRegister.creditManagers) for (const adapter of cm.creditManager.adapters.values()) if (adapter instanceof require_onchain_market_adapters_contracts_MidasGatewayAdapterContract.MidasGatewayAdapterContract) yield adapter;
+/**
+* Midas credit suites of the loaded credit managers.
+*
+* A manager with a gateway adapter is a suite on its own, so its degen NFT
+* is not consulted. Suites that only have a Midas degen NFT read `mToken`
+* from the gateway.
+*/
+async function discoverMidasCreditSuites(sdk) {
+	const suites = [];
+	for (const cm of sdk.marketRegister.creditManagers) {
+		const creditManager = cm.creditManager.address;
+		let hasAdapter = false;
+		for (const adapter of cm.creditManager.adapters.values()) if (adapter instanceof require_onchain_market_adapters_contracts_MidasGatewayAdapterContract.MidasGatewayAdapterContract) {
+			hasAdapter = true;
+			suites.push({
+				creditManager,
+				gateway: adapter.gateway,
+				mToken: adapter.mToken
+			});
+		}
+		if (hasAdapter) continue;
+		const nft = await cm.degenNFT();
+		if (nft instanceof require_onchain_market_rwa_midas_MidasDegenNFT.MidasDegenNFT) {
+			const [mToken] = await nft.getTokens();
+			suites.push({
+				creditManager,
+				gateway: nft.gateway,
+				mToken
+			});
+		}
+	}
+	return suites;
 }
 /**
-* Target contracts of all Midas gateway adapters of the loaded credit managers,
-* plus gateways of Midas degen NFTs (permissioned-mode suites with no gateway adapter).
+* Gateways of the Midas credit suites of the loaded credit managers.
 */
-async function collectMidasGateways(sdk) {
-	const gateways = new require_onchain_utils_AddressSet.AddressSet();
-	for (const adapter of midasGatewayAdapters(sdk)) gateways.add(adapter.targetContract);
-	const nfts = await Promise.all(sdk.marketRegister.creditManagers.map((cm) => cm.degenNFT()));
-	for (const nft of nfts) if (nft instanceof require_onchain_market_rwa_midas_MidasDegenNFT.MidasDegenNFT) gateways.add(nft.gateway);
-	return gateways.asArray();
+async function discoverMidasGateways(sdk) {
+	const suites = await discoverMidasCreditSuites(sdk);
+	return new require_onchain_utils_AddressSet.AddressSet(suites.map((suite) => suite.gateway)).asArray();
 }
 /**
 * mTokens of all Midas gateway adapters of the loaded credit managers
 */
-function collectMidasMTokens(sdk) {
+function discoverMidasMTokens(sdk) {
 	const mTokens = new require_onchain_utils_AddressSet.AddressSet();
-	for (const adapter of midasGatewayAdapters(sdk)) mTokens.add(adapter.mToken);
+	for (const cm of sdk.marketRegister.creditManagers) for (const adapter of cm.creditManager.adapters.values()) if (adapter instanceof require_onchain_market_adapters_contracts_MidasGatewayAdapterContract.MidasGatewayAdapterContract) mTokens.add(adapter.mToken);
 	return mTokens.asArray();
 }
 //#endregion
-exports.collectMidasGateways = collectMidasGateways;
-exports.collectMidasMTokens = collectMidasMTokens;
+exports.discoverMidasCreditSuites = discoverMidasCreditSuites;
+exports.discoverMidasGateways = discoverMidasGateways;
+exports.discoverMidasMTokens = discoverMidasMTokens;
 exports.unpauseMidasIssuanceVault = unpauseMidasIssuanceVault;

package/dist/cjs/dev/securitizeUtils.js

@@ -5,7 +5,6 @@ require("../onchain/index.js");
 const require_abi_rwa_iDSToken = require("../abi/rwa/iDSToken.js");
 const require_dev_kycUtils = require("./kycUtils.js");
 let viem = require("viem");
-let viem_accounts = require("viem/accounts");
 //#region src/dev/securitizeUtils.ts
 /**
 * `COMPLIANCE_CONFIGURATION_SERVICE` id in the DS protocol service registry
@@ -111,7 +110,7 @@ async function issueDSTokens(props) {
 * Tokens without one (e.g. MockDSToken) are skipped
 */
 async function getComplianceConfigurationServices({ anvil, tokens, logger }) {
-	const services = new require_onchain_utils_AddressSet.AddressSet();
+	const services = /* @__PURE__ */ new Map();
 	for (const token of new require_onchain_utils_AddressSet.AddressSet(tokens)) try {
 		const service = await anvil.readContract({
 			address: token,
@@ -123,11 +122,16 @@ async function getComplianceConfigurationServices({ anvil, tokens, logger }) {
 			logger?.debug(`${token} has no compliance configuration service`);
 			continue;
 		}
-		services.add(service);
+		const checksummed = (0, viem.getAddress)(service);
+		if (services.has(checksummed)) continue;
+		services.set(checksummed, await require_dev_kycUtils.getSecuritizeAdmin(anvil, token, logger));
 	} catch (e) {
 		logger?.debug(`Failed to get compliance configuration service of ${token}: ${e}`);
 	}
-	return [...services];
+	return [...services].map(([service, admin]) => ({
+		service,
+		admin
+	}));
 }
 /**
 * Sets `disallowBackDating` to false on compliance configuration services of
@@ -135,18 +139,17 @@ async function getComplianceConfigurationServices({ anvil, tokens, logger }) {
 * honoured: DS protocol silently replaces it with `block.timestamp` otherwise,
 * and freshly minted tokens stay under lock-up.
 *
-* Must be signed by a DS admin with sufficient trust (same key as
-* `issueTokens` / registerInvestor); Ownable `owner()` alone is not enough.
+* Impersonates the DS trust-service admin of each token. Ownable `owner()` of
+* the compliance configuration service alone is not enough.
 *
 * The flag is only read while tokens are issued, so restoring it does not
 * re-lock tokens minted in the meantime.
 */
 async function enableDSTokenBackDating(props) {
-	const { anvil, adminPrivateKey, logger } = props;
-	const account = (0, viem_accounts.privateKeyToAccount)(adminPrivateKey);
+	const { anvil, logger } = props;
 	const services = await getComplianceConfigurationServices(props);
 	let toRestore = [];
-	for (const service of services) {
+	for (const { service, admin } of services) {
 		let disallowBackDating;
 		try {
 			disallowBackDating = await anvil.readContract({
@@ -163,32 +166,53 @@ async function enableDSTokenBackDating(props) {
 			continue;
 		}
 		logger?.info(`Allowing back-dating on ${service}`);
-		await anvil.writeContractSync({
-			account,
-			chain: anvil.chain,
-			address: service,
-			abi: iDSComplianceConfigurationServiceAbi,
-			functionName: "setDisallowBackDating",
-			args: [false],
-			throwOnReceiptRevert: true
+		await anvil.impersonateAccount({ address: admin });
+		try {
+			await anvil.setBalance({
+				address: admin,
+				value: (0, viem.parseEther)("100")
+			});
+			await anvil.writeContractSync({
+				account: admin,
+				chain: anvil.chain,
+				address: service,
+				abi: iDSComplianceConfigurationServiceAbi,
+				functionName: "setDisallowBackDating",
+				args: [false],
+				throwOnReceiptRevert: true
+			});
+		} finally {
+			await anvil.stopImpersonatingAccount({ address: admin });
+		}
+		toRestore.push({
+			service,
+			admin
 		});
-		toRestore.push(service);
 	}
 	return async () => {
 		const services = toRestore;
 		toRestore = [];
-		for (const service of services) {
+		for (const { service, admin } of services) {
 			logger?.info(`Disallowing back-dating on ${service}`);
 			try {
-				await anvil.writeContractSync({
-					account,
-					chain: anvil.chain,
-					address: service,
-					abi: iDSComplianceConfigurationServiceAbi,
-					functionName: "setDisallowBackDating",
-					args: [true],
-					throwOnReceiptRevert: true
-				});
+				await anvil.impersonateAccount({ address: admin });
+				try {
+					await anvil.setBalance({
+						address: admin,
+						value: (0, viem.parseEther)("100")
+					});
+					await anvil.writeContractSync({
+						account: admin,
+						chain: anvil.chain,
+						address: service,
+						abi: iDSComplianceConfigurationServiceAbi,
+						functionName: "setDisallowBackDating",
+						args: [true],
+						throwOnReceiptRevert: true
+					});
+				} finally {
+					await anvil.stopImpersonatingAccount({ address: admin });
+				}
 			} catch (e) {
 				logger?.warn(`Failed to restore disallowBackDating on ${service}: ${e}`);
 			}
@@ -196,8 +220,7 @@ async function enableDSTokenBackDating(props) {
 	};
 }
 async function claimDSToken(props) {
-	const { anvil, investor, adminPrivateKey, token, marketConfigurators, rwaFactories, usdAmount: usdAmountProp = "100000" } = props;
-	const account = (0, viem_accounts.privateKeyToAccount)(adminPrivateKey);
+	const { anvil, investor, token, marketConfigurators, rwaFactories, usdAmount: usdAmountProp = "100000" } = props;
 	const symbol = await anvil.readContract({
 		address: token,
 		abi: viem.erc20Abi,
@@ -221,18 +244,31 @@ async function claimDSToken(props) {
 	if (amount === 0n) throw new Error(`No market found for token ${token}`);
 	logger?.debug(`${usdAmountProp} USD === ${amount} ${symbol}`);
 	await require_dev_kycUtils.registerSecuritizeInvestor({
-		...props,
-		logger
-	});
-	logger?.debug(`Issuing ${amount} tokens to ${investor}...`);
-	const mintHash = await issueDSTokens({
 		anvil,
-		account,
-		token,
 		investor,
-		amount,
+		token,
 		logger
 	});
+	const admin = await require_dev_kycUtils.getSecuritizeAdmin(anvil, token, logger);
+	logger?.debug(`Issuing ${amount} tokens to ${investor}...`);
+	await anvil.impersonateAccount({ address: admin });
+	let mintHash;
+	try {
+		await anvil.setBalance({
+			address: admin,
+			value: (0, viem.parseEther)("100")
+		});
+		mintHash = await issueDSTokens({
+			anvil,
+			account: admin,
+			token,
+			investor,
+			amount,
+			logger
+		});
+	} finally {
+		await anvil.stopImpersonatingAccount({ address: admin });
+	}
 	logger?.debug(`Done! tx: ${mintHash}`);
 	const balance = await anvil.readContract({
 		address: token,

package/dist/esm/dev/index.js

@@ -13,8 +13,8 @@ import { detectChain } from "./detectChain.js";
 import { isOutOfSyncError } from "./isOutOfSyncError.js";
 import { isRateLimitError } from "./isRateLimitError.js";
 import { isTransientError } from "./isTransientError.js";
-import { collectMidasGateways, collectMidasMTokens, unpauseMidasIssuanceVault } from "./midasUtils.js";
-import { greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor } from "./kycUtils.js";
+import { discoverMidasCreditSuites, discoverMidasGateways, discoverMidasMTokens, unpauseMidasIssuanceVault } from "./midasUtils.js";
+import { DEFAULT_MIDAS_ADMIN, getSecuritizeAdmin, greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor } from "./kycUtils.js";
 import { isRangeError, logSplitterTransport } from "./logSplitterTransport.js";
 import { setLTZero, setLTs } from "./ltUtils.js";
 import { migrateFaucet } from "./migrateFaucet.js";
@@ -25,4 +25,4 @@ import { claimDSToken, claimDSTokens, enableDSTokenBackDating } from "./securiti
 import "./types.js";
 import { ONCHAIN_EXECUTION_ID_ADDRESS, verifyTestnet } from "./verifyTestnet.js";
 import { makePendingWithdrawalsClaimable } from "./withdrawalUtils.js";
-export { AccountOpener, Create2Deployer, DEFAULT_CREATE2_SALT, EthCallSpy, NoAvailableTransportsError, ONCHAIN_EXECUTION_ID_ADDRESS, OpenTxRevertedError, PUBLIC_CREATE2_FACTORY, RevolverTransport, SUPPORTED_RPC_PROVIDERS, SelectionStrategy, anvilNodeInfo, calcLiquidatableLTs, claimDSToken, claimDSTokens, claimFromFaucet, collectMidasGateways, collectMidasMTokens, createAnvilClient, createMinter, deployUsingPublicCreate2, detectChain, enableDSTokenBackDating, evmMineDetailed, extendAnvilClient, getAlchemyUrl, getAnkrUrl, getDrpcUrl, getErpcKey, getPublicCreate2Address, getRpcProviderUrl, getThirdWebUrl, greenlistMidasGateway, httpTransportOptionsSchema, iDegenNftv2Abi, iFaucetAbi, iOnchainExecutionIdAbi, iOwnableAbi, iaclTraitAbi, isAnvil, isDeployedUsingPublicCreate2, isOutOfSyncError, isRangeError, isRateLimitError, isTransientError, logSplitterTransport, makePendingWithdrawalsClaimable, migrateFaucet, providerConfigSchema, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor, replaceStorage, resilientTransport, resilientTransportOptionsSchema, revolverTransportConfigBaseSchema, revolverTransportConfigSchema, rpcProvidersSchema, setLTZero, setLTs, unpauseMidasIssuanceVault, verifyTestnet, writeContractSync };
+export { AccountOpener, Create2Deployer, DEFAULT_CREATE2_SALT, DEFAULT_MIDAS_ADMIN, EthCallSpy, NoAvailableTransportsError, ONCHAIN_EXECUTION_ID_ADDRESS, OpenTxRevertedError, PUBLIC_CREATE2_FACTORY, RevolverTransport, SUPPORTED_RPC_PROVIDERS, SelectionStrategy, anvilNodeInfo, calcLiquidatableLTs, claimDSToken, claimDSTokens, claimFromFaucet, createAnvilClient, createMinter, deployUsingPublicCreate2, detectChain, discoverMidasCreditSuites, discoverMidasGateways, discoverMidasMTokens, enableDSTokenBackDating, evmMineDetailed, extendAnvilClient, getAlchemyUrl, getAnkrUrl, getDrpcUrl, getErpcKey, getPublicCreate2Address, getRpcProviderUrl, getSecuritizeAdmin, getThirdWebUrl, greenlistMidasGateway, httpTransportOptionsSchema, iDegenNftv2Abi, iFaucetAbi, iOnchainExecutionIdAbi, iOwnableAbi, iaclTraitAbi, isAnvil, isDeployedUsingPublicCreate2, isOutOfSyncError, isRangeError, isRateLimitError, isTransientError, logSplitterTransport, makePendingWithdrawalsClaimable, migrateFaucet, providerConfigSchema, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor, replaceStorage, resilientTransport, resilientTransportOptionsSchema, revolverTransportConfigBaseSchema, revolverTransportConfigSchema, rpcProvidersSchema, setLTZero, setLTs, unpauseMidasIssuanceVault, verifyTestnet, writeContractSync };

package/dist/esm/dev/kycUtils.js

@@ -4,22 +4,52 @@ import { OnchainSDK } from "../onchain/OnchainSDK.js";
 import "../onchain/index.js";
 import { iDSRegistryServiceAbi } from "../abi/rwa/iDSRegistryService.js";
 import { iDSTokenAbi } from "../abi/rwa/iDSToken.js";
-import { collectMidasGateways } from "./midasUtils.js";
+import { discoverMidasCreditSuites, discoverMidasGateways } from "./midasUtils.js";
 import { midasGatewayAbi } from "./withdrawalAbi.js";
-import { isAddressEqual, parseAbi, parseEther, zeroAddress } from "viem";
-import { privateKeyToAccount } from "viem/accounts";
+import { getAddress, isAddressEqual, parseAbi, parseEther, slice, toHex, zeroAddress } from "viem";
 //#region src/dev/kycUtils.ts
+const iMockDSTokenAdminAbi = parseAbi(["function admin() view returns (address)"]);
 /**
-* Resolves the account that performs the DS registry writes: either the admin
-* private key, or the admin address impersonated on the fork
+* DS trust-service master of `token`: Ownable owner at storage slot 0 of the
+* trust service, same as periphery-v3 SecuritizeAttachHelper. MockDSToken
+* returns itself as the trust service, so `admin()` is used instead.
+*/
+async function getSecuritizeAdmin(anvil, token, logger) {
+	const trustServiceId = await anvil.readContract({
+		address: token,
+		abi: iDSTokenAbi,
+		functionName: "TRUST_SERVICE"
+	});
+	const trustService = await anvil.readContract({
+		address: token,
+		abi: iDSTokenAbi,
+		functionName: "getDSService",
+		args: [trustServiceId]
+	});
+	if (isAddressEqual(trustService, token)) {
+		const admin = await anvil.readContract({
+			address: token,
+			abi: iMockDSTokenAdminAbi,
+			functionName: "admin"
+		});
+		logger?.debug(`securitize: found admin ${admin} for ${token} (token.admin)`);
+		return admin;
+	}
+	const word = await anvil.getStorageAt({
+		address: trustService,
+		slot: toHex(0, { size: 32 })
+	});
+	if (!word) throw new Error(`securitize: empty trust-service owner slot on ${trustService}`);
+	const admin = getAddress(slice(word, 12));
+	logger?.debug(`securitize: found admin ${admin} for ${token} (trust service ${trustService})`);
+	return admin;
+}
+/**
+* Impersonates the DS trust-service admin of `token` on the fork
 */
 async function useSecuritizeAdmin(props) {
-	const { anvil, adminPrivateKey, admin, logger } = props;
-	if (adminPrivateKey) return {
-		account: privateKeyToAccount(adminPrivateKey),
-		release: async () => {}
-	};
-	if (!admin) throw new Error("securitize: either adminPrivateKey or admin address is required");
+	const { anvil, token, logger } = props;
+	const admin = await getSecuritizeAdmin(anvil, token, logger);
 	await anvil.impersonateAccount({ address: admin });
 	await anvil.setBalance({
 		address: admin,
@@ -259,8 +289,7 @@ async function greenlistMidasGateway(props) {
 	}
 }
 /**
-* Finds the Midas gateway that issues `token` by scanning the Midas gateway
-* adapters of all loaded credit managers and the gateways of Midas degen NFTs
+* Finds the Midas gateway that issues `token` among the loaded credit managers.
 */
 async function findMidasGateway(props) {
 	const { anvil, token, marketConfigurators, logger } = props;
@@ -272,21 +301,19 @@ async function findMidasGateway(props) {
 		});
 		await sdk.attach({ marketConfigurators });
 	}
-	const candidates = await collectMidasGateways(sdk);
-	if (candidates.length === 0) throw new Error("no midas gateway adapters or midas degen NFTs found in loaded markets");
-	const index = (await anvil.multicall({
-		allowFailure: false,
-		contracts: candidates.map((address) => ({
-			address,
-			abi: midasGatewayAbi,
-			functionName: "mToken"
-		}))
-	})).findIndex((mToken) => isAddressEqual(mToken, token));
-	if (index === -1) throw new Error(`no midas gateway found for token ${token}`);
-	logger?.debug(`midas: gateway for ${token} is ${candidates[index]}`);
-	return candidates[index];
+	const suites = await discoverMidasCreditSuites(sdk);
+	if (suites.length === 0) throw new Error("no midas gateway adapters or midas degen NFTs found in loaded markets");
+	const suite = suites.find(({ mToken }) => isAddressEqual(mToken, token));
+	if (!suite) throw new Error(`no midas gateway found for token ${token}`);
+	logger?.debug(`midas: gateway for ${token} is ${suite.gateway}`);
+	return suite.gateway;
 }
 /**
+* Midas access control admin on mainnet. Holds the admin role of the greenlist
+* operator role.
+*/
+const DEFAULT_MIDAS_ADMIN = "0xd4195CF4df289a4748C1A7B6dDBE770e27bA1227";
+/**
 * Registers a wallet as an investor (fake KYC) in every Securitize DSToken and
 * every Midas gateway of the markets loaded by `sdk`.
 *
@@ -294,17 +321,15 @@ async function findMidasGateway(props) {
 * result instead of aborting the whole run.
 */
 async function registerRWAInvestor(props) {
-	const { anvil, sdk, investor, adminPrivateKey, securitizeAdmin, midasAdmin = "0xd4195CF4df289a4748C1A7B6dDBE770e27bA1227", logger } = props;
+	const { anvil, sdk, investor, midasAdmin = DEFAULT_MIDAS_ADMIN, logger } = props;
 	const securitizeTokens = [];
 	const midasGateways = [];
 	const failed = [];
 	const dsTokens = new AddressSet(sdk.rwa.factories.flatMap((factory) => factory.getTokens()));
-	if (adminPrivateKey || securitizeAdmin) for (const token of dsTokens) try {
+	for (const token of dsTokens) try {
 		await registerSecuritizeInvestor({
 			anvil,
 			investor,
-			adminPrivateKey,
-			admin: securitizeAdmin,
 			token,
 			logger
 		});
@@ -317,8 +342,7 @@ async function registerRWAInvestor(props) {
 			error: e
 		});
 	}
-	else if (dsTokens.size > 0) logger?.warn(`securitize: no registry admin, skipping ${dsTokens.size} DSToken(s)`);
-	const gateways = await collectMidasGateways(sdk);
+	const gateways = await discoverMidasGateways(sdk);
 	for (const gateway of gateways) try {
 		await greenlistMidasGateway({
 			anvil,
@@ -344,4 +368,4 @@ async function registerRWAInvestor(props) {
 	};
 }
 //#endregion
-export { greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor };
+export { DEFAULT_MIDAS_ADMIN, getSecuritizeAdmin, greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor };

package/dist/esm/dev/midasUtils.js

@@ -146,27 +146,53 @@ async function unpauseMidasIssuanceVault(props) {
 		}
 	};
 }
-function* midasGatewayAdapters(sdk) {
-	for (const cm of sdk.marketRegister.creditManagers) for (const adapter of cm.creditManager.adapters.values()) if (adapter instanceof MidasGatewayAdapterContract) yield adapter;
+/**
+* Midas credit suites of the loaded credit managers.
+*
+* A manager with a gateway adapter is a suite on its own, so its degen NFT
+* is not consulted. Suites that only have a Midas degen NFT read `mToken`
+* from the gateway.
+*/
+async function discoverMidasCreditSuites(sdk) {
+	const suites = [];
+	for (const cm of sdk.marketRegister.creditManagers) {
+		const creditManager = cm.creditManager.address;
+		let hasAdapter = false;
+		for (const adapter of cm.creditManager.adapters.values()) if (adapter instanceof MidasGatewayAdapterContract) {
+			hasAdapter = true;
+			suites.push({
+				creditManager,
+				gateway: adapter.gateway,
+				mToken: adapter.mToken
+			});
+		}
+		if (hasAdapter) continue;
+		const nft = await cm.degenNFT();
+		if (nft instanceof MidasDegenNFT) {
+			const [mToken] = await nft.getTokens();
+			suites.push({
+				creditManager,
+				gateway: nft.gateway,
+				mToken
+			});
+		}
+	}
+	return suites;
 }
 /**
-* Target contracts of all Midas gateway adapters of the loaded credit managers,
-* plus gateways of Midas degen NFTs (permissioned-mode suites with no gateway adapter).
+* Gateways of the Midas credit suites of the loaded credit managers.
 */
-async function collectMidasGateways(sdk) {
-	const gateways = new AddressSet();
-	for (const adapter of midasGatewayAdapters(sdk)) gateways.add(adapter.targetContract);
-	const nfts = await Promise.all(sdk.marketRegister.creditManagers.map((cm) => cm.degenNFT()));
-	for (const nft of nfts) if (nft instanceof MidasDegenNFT) gateways.add(nft.gateway);
-	return gateways.asArray();
+async function discoverMidasGateways(sdk) {
+	const suites = await discoverMidasCreditSuites(sdk);
+	return new AddressSet(suites.map((suite) => suite.gateway)).asArray();
 }
 /**
 * mTokens of all Midas gateway adapters of the loaded credit managers
 */
-function collectMidasMTokens(sdk) {
+function discoverMidasMTokens(sdk) {
 	const mTokens = new AddressSet();
-	for (const adapter of midasGatewayAdapters(sdk)) mTokens.add(adapter.mToken);
+	for (const cm of sdk.marketRegister.creditManagers) for (const adapter of cm.creditManager.adapters.values()) if (adapter instanceof MidasGatewayAdapterContract) mTokens.add(adapter.mToken);
 	return mTokens.asArray();
 }
 //#endregion
-export { collectMidasGateways, collectMidasMTokens, unpauseMidasIssuanceVault };
+export { discoverMidasCreditSuites, discoverMidasGateways, discoverMidasMTokens, unpauseMidasIssuanceVault };

package/dist/esm/dev/securitizeUtils.js

@@ -2,9 +2,8 @@ import { AddressSet } from "../onchain/utils/AddressSet.js";
 import { OnchainSDK } from "../onchain/OnchainSDK.js";
 import "../onchain/index.js";
 import { iDSTokenAbi } from "../abi/rwa/iDSToken.js";
-import { registerSecuritizeInvestor } from "./kycUtils.js";
-import { erc20Abi, isAddressEqual, parseAbi, zeroAddress } from "viem";
-import { privateKeyToAccount } from "viem/accounts";
+import { getSecuritizeAdmin, registerSecuritizeInvestor } from "./kycUtils.js";
+import { erc20Abi, getAddress, isAddressEqual, parseAbi, parseEther, zeroAddress } from "viem";
 //#region src/dev/securitizeUtils.ts
 /**
 * `COMPLIANCE_CONFIGURATION_SERVICE` id in the DS protocol service registry
@@ -110,7 +109,7 @@ async function issueDSTokens(props) {
 * Tokens without one (e.g. MockDSToken) are skipped
 */
 async function getComplianceConfigurationServices({ anvil, tokens, logger }) {
-	const services = new AddressSet();
+	const services = /* @__PURE__ */ new Map();
 	for (const token of new AddressSet(tokens)) try {
 		const service = await anvil.readContract({
 			address: token,
@@ -122,11 +121,16 @@ async function getComplianceConfigurationServices({ anvil, tokens, logger }) {
 			logger?.debug(`${token} has no compliance configuration service`);
 			continue;
 		}
-		services.add(service);
+		const checksummed = getAddress(service);
+		if (services.has(checksummed)) continue;
+		services.set(checksummed, await getSecuritizeAdmin(anvil, token, logger));
 	} catch (e) {
 		logger?.debug(`Failed to get compliance configuration service of ${token}: ${e}`);
 	}
-	return [...services];
+	return [...services].map(([service, admin]) => ({
+		service,
+		admin
+	}));
 }
 /**
 * Sets `disallowBackDating` to false on compliance configuration services of
@@ -134,18 +138,17 @@ async function getComplianceConfigurationServices({ anvil, tokens, logger }) {
 * honoured: DS protocol silently replaces it with `block.timestamp` otherwise,
 * and freshly minted tokens stay under lock-up.
 *
-* Must be signed by a DS admin with sufficient trust (same key as
-* `issueTokens` / registerInvestor); Ownable `owner()` alone is not enough.
+* Impersonates the DS trust-service admin of each token. Ownable `owner()` of
+* the compliance configuration service alone is not enough.
 *
 * The flag is only read while tokens are issued, so restoring it does not
 * re-lock tokens minted in the meantime.
 */
 async function enableDSTokenBackDating(props) {
-	const { anvil, adminPrivateKey, logger } = props;
-	const account = privateKeyToAccount(adminPrivateKey);
+	const { anvil, logger } = props;
 	const services = await getComplianceConfigurationServices(props);
 	let toRestore = [];
-	for (const service of services) {
+	for (const { service, admin } of services) {
 		let disallowBackDating;
 		try {
 			disallowBackDating = await anvil.readContract({
@@ -162,32 +165,53 @@ async function enableDSTokenBackDating(props) {
 			continue;
 		}
 		logger?.info(`Allowing back-dating on ${service}`);
-		await anvil.writeContractSync({
-			account,
-			chain: anvil.chain,
-			address: service,
-			abi: iDSComplianceConfigurationServiceAbi,
-			functionName: "setDisallowBackDating",
-			args: [false],
-			throwOnReceiptRevert: true
+		await anvil.impersonateAccount({ address: admin });
+		try {
+			await anvil.setBalance({
+				address: admin,
+				value: parseEther("100")
+			});
+			await anvil.writeContractSync({
+				account: admin,
+				chain: anvil.chain,
+				address: service,
+				abi: iDSComplianceConfigurationServiceAbi,
+				functionName: "setDisallowBackDating",
+				args: [false],
+				throwOnReceiptRevert: true
+			});
+		} finally {
+			await anvil.stopImpersonatingAccount({ address: admin });
+		}
+		toRestore.push({
+			service,
+			admin
 		});
-		toRestore.push(service);
 	}
 	return async () => {
 		const services = toRestore;
 		toRestore = [];
-		for (const service of services) {
+		for (const { service, admin } of services) {
 			logger?.info(`Disallowing back-dating on ${service}`);
 			try {
-				await anvil.writeContractSync({
-					account,
-					chain: anvil.chain,
-					address: service,
-					abi: iDSComplianceConfigurationServiceAbi,
-					functionName: "setDisallowBackDating",
-					args: [true],
-					throwOnReceiptRevert: true
-				});
+				await anvil.impersonateAccount({ address: admin });
+				try {
+					await anvil.setBalance({
+						address: admin,
+						value: parseEther("100")
+					});
+					await anvil.writeContractSync({
+						account: admin,
+						chain: anvil.chain,
+						address: service,
+						abi: iDSComplianceConfigurationServiceAbi,
+						functionName: "setDisallowBackDating",
+						args: [true],
+						throwOnReceiptRevert: true
+					});
+				} finally {
+					await anvil.stopImpersonatingAccount({ address: admin });
+				}
 			} catch (e) {
 				logger?.warn(`Failed to restore disallowBackDating on ${service}: ${e}`);
 			}
@@ -195,8 +219,7 @@ async function enableDSTokenBackDating(props) {
 	};
 }
 async function claimDSToken(props) {
-	const { anvil, investor, adminPrivateKey, token, marketConfigurators, rwaFactories, usdAmount: usdAmountProp = "100000" } = props;
-	const account = privateKeyToAccount(adminPrivateKey);
+	const { anvil, investor, token, marketConfigurators, rwaFactories, usdAmount: usdAmountProp = "100000" } = props;
 	const symbol = await anvil.readContract({
 		address: token,
 		abi: erc20Abi,
@@ -220,18 +243,31 @@ async function claimDSToken(props) {
 	if (amount === 0n) throw new Error(`No market found for token ${token}`);
 	logger?.debug(`${usdAmountProp} USD === ${amount} ${symbol}`);
 	await registerSecuritizeInvestor({
-		...props,
-		logger
-	});
-	logger?.debug(`Issuing ${amount} tokens to ${investor}...`);
-	const mintHash = await issueDSTokens({
 		anvil,
-		account,
-		token,
 		investor,
-		amount,
+		token,
 		logger
 	});
+	const admin = await getSecuritizeAdmin(anvil, token, logger);
+	logger?.debug(`Issuing ${amount} tokens to ${investor}...`);
+	await anvil.impersonateAccount({ address: admin });
+	let mintHash;
+	try {
+		await anvil.setBalance({
+			address: admin,
+			value: parseEther("100")
+		});
+		mintHash = await issueDSTokens({
+			anvil,
+			account: admin,
+			token,
+			investor,
+			amount,
+			logger
+		});
+	} finally {
+		await anvil.stopImpersonatingAccount({ address: admin });
+	}
 	logger?.debug(`Done! tx: ${mintHash}`);
 	const balance = await anvil.readContract({
 		address: token,

package/dist/esm/sdk/prepare/PrepareApi.js

@@ -55,7 +55,7 @@ var PrepareApi = class extends MultichainConstruct {
 			const at = stateBlock(sdk);
 			const intent = resumable(params.intent ?? params.claimable.intent);
 			if (!intent) return sdkErr(noRecordedIntent());
-			const creditAccount = await slice(sdk, position.creditAccount);
+			const creditAccount = await slice$1(sdk, position.creditAccount);
 			if (!creditAccount) return sdkErr(creditAccountNotFound(position.creditAccount));
 			return finalized(await service(sdk).finishIntent({
 				intent,
@@ -404,7 +404,7 @@ var PrepareApi = class extends MultichainConstruct {
 	* described, see {@link IOpportunitiesPrepare.maxWithdraw}.
 	**/
 	async #account(sdk, position) {
-		const creditAccount = await slice(sdk, position.creditAccount);
+		const creditAccount = await slice$1(sdk, position.creditAccount);
 		if (!creditAccount) throw new Error(creditAccountNotFound(position.creditAccount).message);
 		return creditAccount;
 	}
@@ -421,7 +421,7 @@ var PrepareApi = class extends MultichainConstruct {
 		try {
 			const sdk = await this.#chain(position.chainId);
 			const at = stateBlock(sdk);
-			const creditAccount = await slice(sdk, position.creditAccount);
+			const creditAccount = await slice$1(sdk, position.creditAccount);
 			if (!creditAccount) return neitherRoute(creditAccountNotFound(position.creditAccount));
 			return routed(await service(sdk).intentRoutes({
 				intent,
@@ -447,7 +447,7 @@ var PrepareApi = class extends MultichainConstruct {
 		try {
 			const sdk = await this.#chain(position.chainId);
 			const at = stateBlock(sdk);
-			const creditAccount = await slice(sdk, position.creditAccount);
+			const creditAccount = await slice$1(sdk, position.creditAccount);
 			if (!creditAccount) return sdkErr(creditAccountNotFound(position.creditAccount));
 			return planned(await service(sdk).startIntent({
 				intent,
@@ -479,7 +479,7 @@ function stateBlock(sdk) {
 * connected to hold no such account — closed since it was listed, or named on
 * the wrong chain. Read rather than thrown, so the caller gets a code for it.
 **/
-async function slice(sdk, creditAccount) {
+async function slice$1(sdk, creditAccount) {
 	const data = await sdk.accounts.getCreditAccountData(creditAccount);
 	return data && toCreditAccountSlice(data);
 }
@@ -497,7 +497,7 @@ async function slice(sdk, creditAccount) {
 **/
 async function reusable(sdk, strategy, creditAccount) {
 	if (!creditAccount) return;
-	const account = await slice(sdk, creditAccount);
+	const account = await slice$1(sdk, creditAccount);
 	if (!account || !isAddressEqual(account.creditManager, strategy.creditManager)) return sdkErr(creditAccountNotFound(creditAccount));
 	if (account.totalDebt > 0n || account.tokens.some((t) => t.quota > 0n)) return sdkErr(creditAccountNotEmpty(creditAccount));
 	return { account };

package/dist/types/dev/index.d.ts

@@ -11,10 +11,10 @@ import { detectChain } from "./detectChain.js";
 import { isOutOfSyncError } from "./isOutOfSyncError.js";
 import { isRateLimitError } from "./isRateLimitError.js";
 import { isTransientError } from "./isTransientError.js";
-import { GreenlistMidasGatewayProps, RWAKycFailure, RegisterMidasInvestorProps, RegisterRWAInvestorProps, RegisterRWAInvestorResult, RegisterSecuritizeInvestorProps, greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor } from "./kycUtils.js";
+import { DEFAULT_MIDAS_ADMIN, GreenlistMidasGatewayProps, RWAKycFailure, RegisterMidasInvestorProps, RegisterRWAInvestorProps, RegisterRWAInvestorResult, RegisterSecuritizeInvestorProps, getSecuritizeAdmin, greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor } from "./kycUtils.js";
 import { LogSplitterTransportOptions, isRangeError, logSplitterTransport } from "./logSplitterTransport.js";
 import { setLTZero, setLTs } from "./ltUtils.js";
-import { RestoreMidasIssuanceVaultPause, UnpauseMidasIssuanceVaultProps, collectMidasGateways, collectMidasMTokens, unpauseMidasIssuanceVault } from "./midasUtils.js";
+import { MidasCreditSuite, RestoreMidasIssuanceVaultPause, UnpauseMidasIssuanceVaultProps, discoverMidasCreditSuites, discoverMidasGateways, discoverMidasMTokens, unpauseMidasIssuanceVault } from "./midasUtils.js";
 import { migrateFaucet } from "./migrateFaucet.js";
 import { IMinter } from "./mint/types.js";
 import { createMinter } from "./mint/factory.js";
@@ -26,4 +26,4 @@ import { EnableDSTokenBackDatingProps, RestoreDSTokenBackDating, claimDSToken, c
 import { httpTransportOptionsSchema } from "./transports.js";
 import { ONCHAIN_EXECUTION_ID_ADDRESS, VerifyTestnetParams, verifyTestnet } from "./verifyTestnet.js";
 import { MakePendingWithdrawalsClaimableOptions, makePendingWithdrawalsClaimable } from "./withdrawalUtils.js";
-export { AccountOpener, AccountOpenerOptions, AnvilActions, AnvilClient, AnvilClientConfig, AnvilDealParameters, AnvilNodeInfo, AnvilRPCSchema, CheckMulticallFn, Create2Deployer, Create2Parameters, DEFAULT_CREATE2_SALT, DetectedCall, EnableDSTokenBackDatingProps, EnsureExistsUsingPublicCreate2ReturnType, EthCallMethod, EthCallRequest, EthCallSpy, GetCreate2AddressParameters, GreenlistMidasGatewayProps, IMinter, type LogSplitterTransportOptions, MakePendingWithdrawalsClaimableOptions, NoAvailableTransportsError, ONCHAIN_EXECUTION_ID_ADDRESS, OpenAccountHumanizedPreview, OpenAccountResult, OpenAccountsResult, OpenTxRevertedError, PUBLIC_CREATE2_FACTORY, PoolDepositResult, ProviderConfig, ProviderStatus, RWAKycFailure, RegisterMidasInvestorProps, RegisterRWAInvestorProps, RegisterRWAInvestorResult, RegisterSecuritizeInvestorProps, ReplaceStorageParams, ResilientTransportOptions, RestoreDSTokenBackDating, RestoreMidasIssuanceVaultPause, RevolverTransport, RevolverTransportConfig, RevolverTransportValue, RpcErrorResult, RpcProvider, RpcResponse, RpcSuccessResult, SUPPORTED_RPC_PROVIDERS, SelectionStrategy, TargetAccount, UnpauseMidasIssuanceVaultProps, VerifyTestnetParams, anvilNodeInfo, calcLiquidatableLTs, claimDSToken, claimDSTokens, claimFromFaucet, collectMidasGateways, collectMidasMTokens, createAnvilClient, createMinter, deployUsingPublicCreate2, detectChain, enableDSTokenBackDating, evmMineDetailed, extendAnvilClient, getAlchemyUrl, getAnkrUrl, getDrpcUrl, getErpcKey, getPublicCreate2Address, getRpcProviderUrl, getThirdWebUrl, greenlistMidasGateway, httpTransportOptionsSchema, iDegenNftv2Abi, iFaucetAbi, iOnchainExecutionIdAbi, iOwnableAbi, iaclTraitAbi, isAnvil, isDeployedUsingPublicCreate2, isOutOfSyncError, isRangeError, isRateLimitError, isTransientError, logSplitterTransport, makePendingWithdrawalsClaimable, migrateFaucet, providerConfigSchema, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor, replaceStorage, resilientTransport, resilientTransportOptionsSchema, revolverTransportConfigBaseSchema, revolverTransportConfigSchema, rpcProvidersSchema, setLTZero, setLTs, unpauseMidasIssuanceVault, verifyTestnet, writeContractSync };
+export { AccountOpener, AccountOpenerOptions, AnvilActions, AnvilClient, AnvilClientConfig, AnvilDealParameters, AnvilNodeInfo, AnvilRPCSchema, CheckMulticallFn, Create2Deployer, Create2Parameters, DEFAULT_CREATE2_SALT, DEFAULT_MIDAS_ADMIN, DetectedCall, EnableDSTokenBackDatingProps, EnsureExistsUsingPublicCreate2ReturnType, EthCallMethod, EthCallRequest, EthCallSpy, GetCreate2AddressParameters, GreenlistMidasGatewayProps, IMinter, type LogSplitterTransportOptions, MakePendingWithdrawalsClaimableOptions, MidasCreditSuite, NoAvailableTransportsError, ONCHAIN_EXECUTION_ID_ADDRESS, OpenAccountHumanizedPreview, OpenAccountResult, OpenAccountsResult, OpenTxRevertedError, PUBLIC_CREATE2_FACTORY, PoolDepositResult, ProviderConfig, ProviderStatus, RWAKycFailure, RegisterMidasInvestorProps, RegisterRWAInvestorProps, RegisterRWAInvestorResult, RegisterSecuritizeInvestorProps, ReplaceStorageParams, ResilientTransportOptions, RestoreDSTokenBackDating, RestoreMidasIssuanceVaultPause, RevolverTransport, RevolverTransportConfig, RevolverTransportValue, RpcErrorResult, RpcProvider, RpcResponse, RpcSuccessResult, SUPPORTED_RPC_PROVIDERS, SelectionStrategy, TargetAccount, UnpauseMidasIssuanceVaultProps, VerifyTestnetParams, anvilNodeInfo, calcLiquidatableLTs, claimDSToken, claimDSTokens, claimFromFaucet, createAnvilClient, createMinter, deployUsingPublicCreate2, detectChain, discoverMidasCreditSuites, discoverMidasGateways, discoverMidasMTokens, enableDSTokenBackDating, evmMineDetailed, extendAnvilClient, getAlchemyUrl, getAnkrUrl, getDrpcUrl, getErpcKey, getPublicCreate2Address, getRpcProviderUrl, getSecuritizeAdmin, getThirdWebUrl, greenlistMidasGateway, httpTransportOptionsSchema, iDegenNftv2Abi, iFaucetAbi, iOnchainExecutionIdAbi, iOwnableAbi, iaclTraitAbi, isAnvil, isDeployedUsingPublicCreate2, isOutOfSyncError, isRangeError, isRateLimitError, isTransientError, logSplitterTransport, makePendingWithdrawalsClaimable, migrateFaucet, providerConfigSchema, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor, replaceStorage, resilientTransport, resilientTransportOptionsSchema, revolverTransportConfigBaseSchema, revolverTransportConfigSchema, rpcProvidersSchema, setLTZero, setLTs, unpauseMidasIssuanceVault, verifyTestnet, writeContractSync };

package/dist/types/dev/kycUtils.d.ts

@@ -2,7 +2,7 @@ import { ILogger } from "../onchain/types/logger.js";
 import { OnchainSDK } from "../onchain/OnchainSDK.js";
 import "../onchain/index.js";
 import { AnvilClient } from "./createAnvilClient.js";
-import { Address, Hex } from "viem";
+import { Address } from "viem";
 //#region src/dev/kycUtils.d.ts
 interface RegisterSecuritizeInvestorProps {
   anvil: AnvilClient;
@@ -10,20 +10,18 @@ interface RegisterSecuritizeInvestorProps {
    * Wallet to register in the Securitize DS registry
    */
   investor: Address;
-  /**
-   * Private key of the DS registry admin, signs the registry writes
-   */
-  adminPrivateKey?: Hex;
-  /**
-   * DS registry admin, impersonated on the fork when no private key is given
-   */
-  admin?: Address;
   /**
    * DSToken address
    */
   token: Address;
   logger?: ILogger;
 }
+/**
+ * DS trust-service master of `token`: Ownable owner at storage slot 0 of the
+ * trust service, same as periphery-v3 SecuritizeAttachHelper. MockDSToken
+ * returns itself as the trust service, so `admin()` is used instead.
+ */
+declare function getSecuritizeAdmin(anvil: AnvilClient, token: Address, logger?: ILogger): Promise<Address>;
 /**
  * Registers a wallet as a Securitize investor (fake KYC) in the DS registry
  * service of a DSToken.
@@ -82,6 +80,11 @@ interface GreenlistMidasGatewayProps {
  * Greenlists an investor in the access control of a single Midas gateway
  */
 declare function greenlistMidasGateway(props: GreenlistMidasGatewayProps): Promise<void>;
+/**
+ * Midas access control admin on mainnet. Holds the admin role of the greenlist
+ * operator role.
+ */
+declare const DEFAULT_MIDAS_ADMIN: Address;
 interface RegisterRWAInvestorProps {
   anvil: AnvilClient;
   /**
@@ -93,16 +96,8 @@ interface RegisterRWAInvestorProps {
    */
   investor: Address;
   /**
-   * Private key of the Securitize registry admin, DSTokens are skipped when
-   * neither this nor `securitizeAdmin` is set
-   */
-  adminPrivateKey?: Hex;
-  /**
-   * Securitize registry admin, impersonated on the fork
-   */
-  securitizeAdmin?: Address;
-  /**
-   * Override midas access control admin address
+   * Midas access control admin, impersonated on the fork.
+   * Defaults to {@link DEFAULT_MIDAS_ADMIN}.
    */
   midasAdmin?: Address;
   logger?: ILogger;
@@ -134,4 +129,4 @@ interface RegisterRWAInvestorResult {
  */
 declare function registerRWAInvestor(props: RegisterRWAInvestorProps): Promise<RegisterRWAInvestorResult>;
 //#endregion
-export { GreenlistMidasGatewayProps, RWAKycFailure, RegisterMidasInvestorProps, RegisterRWAInvestorProps, RegisterRWAInvestorResult, RegisterSecuritizeInvestorProps, greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor };
+export { DEFAULT_MIDAS_ADMIN, GreenlistMidasGatewayProps, RWAKycFailure, RegisterMidasInvestorProps, RegisterRWAInvestorProps, RegisterRWAInvestorResult, RegisterSecuritizeInvestorProps, getSecuritizeAdmin, greenlistMidasGateway, registerMidasInvestor, registerRWAInvestor, registerSecuritizeInvestor };

package/dist/types/dev/midasUtils.d.ts

@@ -34,13 +34,29 @@ type RestoreMidasIssuanceVaultPause = () => Promise<void>;
  */
 declare function unpauseMidasIssuanceVault(props: UnpauseMidasIssuanceVaultProps): Promise<RestoreMidasIssuanceVaultPause>;
 /**
- * Target contracts of all Midas gateway adapters of the loaded credit managers,
- * plus gateways of Midas degen NFTs (permissioned-mode suites with no gateway adapter).
+ * One Midas credit suite: a credit manager with a Midas gateway adapter,
+ * or with a Midas degen NFT when it has no such adapter.
  */
-declare function collectMidasGateways(sdk: OnchainSDK): Promise<Address[]>;
+interface MidasCreditSuite {
+  creditManager: Address;
+  gateway: Address;
+  mToken: Address;
+}
+/**
+ * Midas credit suites of the loaded credit managers.
+ *
+ * A manager with a gateway adapter is a suite on its own, so its degen NFT
+ * is not consulted. Suites that only have a Midas degen NFT read `mToken`
+ * from the gateway.
+ */
+declare function discoverMidasCreditSuites(sdk: OnchainSDK): Promise<MidasCreditSuite[]>;
+/**
+ * Gateways of the Midas credit suites of the loaded credit managers.
+ */
+declare function discoverMidasGateways(sdk: OnchainSDK): Promise<Address[]>;
 /**
  * mTokens of all Midas gateway adapters of the loaded credit managers
  */
-declare function collectMidasMTokens(sdk: OnchainSDK): Address[];
+declare function discoverMidasMTokens(sdk: OnchainSDK): Address[];
 //#endregion
-export { RestoreMidasIssuanceVaultPause, UnpauseMidasIssuanceVaultProps, collectMidasGateways, collectMidasMTokens, unpauseMidasIssuanceVault };
+export { MidasCreditSuite, RestoreMidasIssuanceVaultPause, UnpauseMidasIssuanceVaultProps, discoverMidasCreditSuites, discoverMidasGateways, discoverMidasMTokens, unpauseMidasIssuanceVault };

package/dist/types/dev/securitizeUtils.d.ts

@@ -1,12 +1,11 @@
 import { ILogger } from "../onchain/types/logger.js";
 import "../onchain/index.js";
 import { AnvilClient } from "./createAnvilClient.js";
-import { Address, Hex } from "viem";
+import { Address } from "viem";
 //#region src/dev/securitizeUtils.d.ts
 interface ClaimDSTokenProps {
   anvil: AnvilClient;
   investor: Address;
-  adminPrivateKey: Hex;
   /**
    * DSToken addresses
    */
@@ -24,11 +23,6 @@ type ClaimDSTokensProps = Omit<ClaimDSTokenProps, "token"> & {
 };
 interface EnableDSTokenBackDatingProps {
   anvil: AnvilClient;
-  /**
-   * Securitize DS admin with sufficient trust to call compliance setters
-   * (same key used for issueTokens / registerInvestor)
-   */
-  adminPrivateKey: Hex;
   /**
    * DSToken addresses whose compliance configuration should allow back-dating
    */
@@ -46,8 +40,8 @@ type RestoreDSTokenBackDating = () => Promise<void>;
  * honoured: DS protocol silently replaces it with `block.timestamp` otherwise,
  * and freshly minted tokens stay under lock-up.
  *
- * Must be signed by a DS admin with sufficient trust (same key as
- * `issueTokens` / registerInvestor); Ownable `owner()` alone is not enough.
+ * Impersonates the DS trust-service admin of each token. Ownable `owner()` of
+ * the compliance configuration service alone is not enough.
  *
  * The flag is only read while tokens are issued, so restoring it does not
  * re-lock tokens minted in the meantime.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gearbox-protocol/sdk",
-  "version": "16.6.0-next.4",
+  "version": "16.6.0-next.6",
   "description": "Gearbox SDK",
   "license": "MIT",
   "repository": {