@perena/vault-sdk 1.0.49 → 1.0.50

package/README.md

@@ -565,9 +565,10 @@ The builder auto-detects external liquidity slot 0 and, when it finds an active
 Marginfi position for the asset, emits `execute_withdraw_from_external` instead
 of `execute_withdraw`. That route can pull from the vault's external position in
 the same transaction, so it draws on far more liquidity than the plain
-`execute_withdraw`: the external-liquidity integrity service keeps only ~0.5% of
-each holding in the vault's own token account (see
-`DEFAULT_TARGET_LOCAL_BPS`) and deploys the rest into Marginfi, so a plain
+`execute_withdraw`: the external-liquidity integrity service targets local USDC
+worth 1.5% of total vault TVL (`DEFAULT_TARGET_LOCAL_USDC_TVL_BPS`) and ~0.5% of
+each other holding (`DEFAULT_TARGET_LOCAL_BPS`), deploying the rest into Marginfi.
+It rebalances once local balances drift 20% from those targets, so a plain
 withdrawal is capped at that small local buffer and will fail for anything
 larger.
 

package/dist/browser/nest.d.mts

@@ -90,6 +90,29 @@ declare function decodeNestWithdrawalRequest(args: {
     txBase64: string;
 }): Promise<VaultTransactionPlan>;
 
+interface NestDepositPlan extends VaultTransactionPlan {
+    /** Pass through to prepareVaultTransaction; the keeper's signatures are not reusable. */
+    ephemeralSignerKeys: PublicKey[];
+}
+/** Build a manager-funded deposit, with one event account for Squads to sign. */
+declare function buildNestDepositRequest(args: {
+    connection: Connection;
+    owner: PublicKey;
+    rawAmountUsdc: bigint;
+    apiOptions?: NestApiOptions;
+}): Promise<NestDepositPlan>;
+/**
+ * Validate the USDC burn and Nest/Solana recipient. Replace the keeper rent payer
+ * with the manager, and expose the CCTP event signer for Squads PDA substitution.
+ * Nest remains trusted for the complete cross-chain payload and keeper delivery.
+ */
+declare function decodeNestDepositRequest(args: {
+    connection: Connection;
+    owner: PublicKey;
+    rawAmountUsdc: bigint;
+    txBase64: string;
+}): Promise<NestDepositPlan>;
+
 /**
  * {@link PriceSource} adapter over the `nest` package's price API, bound to the
  * Perena vault's Nest slug and share mint.
@@ -187,6 +210,8 @@ declare function prepareVaultTransaction(args: {
     /** Skip execution simulation when proposing a transaction that depends on future funding. */
     skipSimulation?: boolean;
     addressLookupTableAccounts?: AddressLookupTableAccount[];
+    /** Temporary signer keys used only in account metas, replaced by Squads PDAs. */
+    ephemeralSignerKeys?: readonly PublicKey[];
 }): Promise<PreparedVaultTransaction>;
 
 interface SquadsProposalUpload {
@@ -205,4 +230,4 @@ declare function prepareSquadsProposalUpload(args: {
     prepared: PreparedSquadsTransaction;
 }): Promise<SquadsProposalUpload>;
 
-export { NEST_RWA_SHARE_MINT, NEST_VAULT_SLUG, NestApiError, type NestApiOptions, type NestRedemptionQuote, type NestRedemptionStatus, type PreparedDirectTransaction, type PreparedSquadsTransaction, type PreparedVaultTransaction, type ResolvedSquadsWalletRoute, SquadsProposalExecutionSimulationError, type SquadsProposalUpload, type SquadsWalletRouteConfig, buildNestWithdrawalRequest, decodeNestWithdrawalRequest, fetchNestRedemptionQuote, fetchNestRedemptionStatus, findSquadsWalletRoute, prepareSquadsProposalUpload, prepareVaultTransaction, resolveSquadsWalletRoute, simulateSquadsProposalExecution, validateSquadsWalletRoutes, vaultAuthorityForWallet };
+export { NEST_RWA_SHARE_MINT, NEST_VAULT_SLUG, NestApiError, type NestApiOptions, type NestDepositPlan, type NestRedemptionQuote, type NestRedemptionStatus, type PreparedDirectTransaction, type PreparedSquadsTransaction, type PreparedVaultTransaction, type ResolvedSquadsWalletRoute, SquadsProposalExecutionSimulationError, type SquadsProposalUpload, type SquadsWalletRouteConfig, buildNestDepositRequest, buildNestWithdrawalRequest, decodeNestDepositRequest, decodeNestWithdrawalRequest, fetchNestRedemptionQuote, fetchNestRedemptionStatus, findSquadsWalletRoute, prepareSquadsProposalUpload, prepareVaultTransaction, resolveSquadsWalletRoute, simulateSquadsProposalExecution, validateSquadsWalletRoutes, vaultAuthorityForWallet };

package/dist/browser/nest.mjs

@@ -454,14 +454,148 @@ async function decodeNestWithdrawalRequest(args) {
   };
 }
 
-// src/utils/squads.ts
-import * as squads from "@sqds/multisig";
+// src/services/nestDepositService.ts
+import { address as address5 } from "@solana/kit";
 import {
+  ASSOCIATED_TOKEN_PROGRAM_ID as ASSOCIATED_TOKEN_PROGRAM_ID3,
+  createAssociatedTokenAccountIdempotentInstruction,
+  getAssociatedTokenAddressSync as getAssociatedTokenAddressSync3,
+  TOKEN_PROGRAM_ID as TOKEN_PROGRAM_ID2
+} from "@solana/spl-token";
+import {
+  ComputeBudgetProgram as ComputeBudgetProgram2,
   PublicKey as PublicKey4,
-  Transaction,
+  SystemProgram,
   TransactionMessage as TransactionMessage3,
   VersionedTransaction as VersionedTransaction3
 } from "@solana/web3.js";
+var Usdc = new PublicKey4("EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v");
+var Messenger = new PublicKey4("CCTPV2vPZJS2u2BBsUoscuikbYjnpFmbFsvVuJdgUMQe");
+var Transmitter = new PublicKey4(
+  "CCTPV2Sm4AdWt5296sk4P66VBZ7bEhcARwFaaS9YPbeC"
+);
+var Router = Buffer.from(
+  "0000000000000000000000007de01896d36bea9cf072ac64e41685418941d8be",
+  "hex"
+);
+var Composer = Buffer.from("908dcb5531691c2124c54e30bb645cf11647090d", "hex");
+var BurnWithHook = Buffer.from([111, 245, 62, 131, 204, 108, 223, 155]);
+var PerenaAssetId = Buffer.from(
+  "355750bed2d05a1eb92ab578335cc3ea6d572dd5f57a086088c68667f11e50d2",
+  "hex"
+);
+var MintAndSend = Buffer.from("fe030ec4", "hex");
+async function buildNestDepositRequest(args) {
+  if (args.rawAmountUsdc <= 0n || args.rawAmountUsdc > BigInt(Number.MAX_SAFE_INTEGER)) {
+    throw new Error(
+      "Nest deposit must be a positive, safely representable USDC base-unit amount"
+    );
+  }
+  const options = args.apiOptions ?? {};
+  const response = await (options.fetchFn ?? fetch)(
+    `${(options.baseUrl ?? NEST_API_BASE_URL).replace(
+      /\/$/,
+      ""
+    )}/solana/nest/mint/build-tx`,
+    {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      signal: options.signal,
+      body: JSON.stringify({
+        rawAmountUsdc: Number(args.rawAmountUsdc),
+        receiver: args.owner.toBase58(),
+        nestVaultSlug: NEST_VAULT_SLUG,
+        finality: "standard"
+      })
+    }
+  );
+  const payload = await response.json().catch(() => null);
+  if (!response.ok)
+    throw new Error(
+      `Nest deposit API (${response.status}): ${typeof payload?.error === "string" ? payload.error : response.statusText}`
+    );
+  if (typeof payload?.data?.txBase64 !== "string")
+    throw new Error("Nest API returned no deposit transaction");
+  return decodeNestDepositRequest({ ...args, txBase64: payload.data.txBase64 });
+}
+async function decodeNestDepositRequest(args) {
+  if (args.rawAmountUsdc <= 0n || args.rawAmountUsdc > BigInt(Number.MAX_SAFE_INTEGER)) {
+    throw new Error(
+      "Nest deposit must be a positive, safely representable USDC base-unit amount"
+    );
+  }
+  const message = VersionedTransaction3.deserialize(
+    Buffer.from(args.txBase64, "base64")
+  ).message;
+  if (!message.staticAccountKeys[0].equals(args.owner))
+    throw new Error("Nest deposit payer must be the manager");
+  const tables = await Promise.all(
+    message.addressTableLookups.map(async (lookup) => {
+      const { value } = await args.connection.getAddressLookupTable(
+        lookup.accountKey
+      );
+      if (!value)
+        throw new Error(`Nest lookup table not found: ${lookup.accountKey}`);
+      return value;
+    })
+  );
+  const instructions2 = TransactionMessage3.decompile(message, {
+    addressLookupTableAccounts: tables
+  }).instructions;
+  const shareMint = new PublicKey4(NEST_RWA_SHARE_MINT2);
+  const shareAta = getAssociatedTokenAddressSync3(shareMint, args.owner, true);
+  const usdcAta = getAssociatedTokenAddressSync3(Usdc, args.owner, true);
+  let burn;
+  for (const ix of instructions2) {
+    if (ix.programId.equals(ComputeBudgetProgram2.programId)) continue;
+    if (ix.programId.equals(ASSOCIATED_TOKEN_PROGRAM_ID3)) {
+      if (ix.data.length !== 1 || ix.data[0] !== 1 || !ix.keys[0]?.pubkey.equals(args.owner) || !ix.keys[1]?.pubkey.equals(shareAta) || !ix.keys[2]?.pubkey.equals(args.owner) || !ix.keys[3]?.pubkey.equals(shareMint) || !ix.keys[4]?.pubkey.equals(SystemProgram.programId) || !ix.keys[5]?.pubkey.equals(TOKEN_PROGRAM_ID2))
+        throw new Error("Unexpected Nest deposit token account creation");
+      continue;
+    }
+    const d = ix.data;
+    const matches = (index, key) => ix.keys[index]?.pubkey.equals(key);
+    if (burn || !ix.programId.equals(Messenger) || ix.keys.length !== 18 || d.length < 316 || !d.subarray(0, 8).equals(BurnWithHook) || d.readBigUInt64LE(8) !== args.rawAmountUsdc || d.readUInt32LE(16) !== 22 || !d.subarray(20, 52).equals(Router) || !d.subarray(52, 84).equals(Router) || d.readBigUInt64LE(84) !== 0n || d.readUInt32LE(92) !== 2e3 || d.readUInt32LE(96) !== d.length - 100 || !d.subarray(100, 120).equals(Composer) || !d.subarray(120, 124).equals(MintAndSend) || !d.subarray(124, 156).equals(PerenaAssetId) || BigInt(`0x${d.subarray(156, 188).toString("hex")}`) !== args.rawAmountUsdc || BigInt(`0x${d.subarray(188, 220).toString("hex")}`) !== 128n || !d.subarray(220, 252).equals(Buffer.concat([Buffer.alloc(12), Composer])) || BigInt(`0x${d.subarray(252, 284).toString("hex")}`) !== 30168n || !d.subarray(284, 316).equals(args.owner.toBuffer()) || !matches(0, args.owner) || !matches(3, usdcAta) || !matches(10, Usdc) || !matches(12, Transmitter) || !matches(13, Messenger) || !matches(14, TOKEN_PROGRAM_ID2) || !matches(15, SystemProgram.programId) || !matches(17, Messenger) || ![0, 1, 11].every((index) => ix.keys[index].isSigner) || ix.keys.some(
+      (meta, index) => meta.isSigner && ![0, 1, 11].includes(index)
+    )) {
+      throw new Error(
+        "Unexpected Nest deposit instruction, amount, or recipient"
+      );
+    }
+    burn = ix;
+  }
+  if (!burn) throw new Error("Nest deposit must contain one CCTP burn");
+  const eventKey = burn.keys[11].pubkey;
+  if (eventKey.equals(args.owner) || burn.keys.some(
+    (meta, index) => index !== 11 && meta.pubkey.equals(eventKey)
+  )) {
+    throw new Error("Nest deposit event signer must be a separate account");
+  }
+  burn.keys[1] = { pubkey: args.owner, isSigner: true, isWritable: true };
+  return {
+    instructions: [
+      createAssociatedTokenAccountIdempotentInstruction(
+        args.owner,
+        shareAta,
+        args.owner,
+        shareMint
+      ),
+      burn
+    ].map(toKitInstruction),
+    lookupTables: tables.map((table) => address5(table.key.toBase58())),
+    ephemeralSignerKeys: [eventKey]
+  };
+}
+
+// src/utils/squads.ts
+import * as squads from "@sqds/multisig";
+import {
+  PublicKey as PublicKey5,
+  Transaction,
+  TransactionInstruction as TransactionInstruction2,
+  TransactionMessage as TransactionMessage4,
+  VersionedTransaction as VersionedTransaction4
+} from "@solana/web3.js";
 var SQUADS_SIMULATION_COMMITMENT = "processed";
 var SquadsProposalExecutionSimulationError = class extends Error {
   constructor(transactionError, logs, unitsConsumed) {
@@ -485,8 +619,8 @@ function validateVaultIndex(vaultIndex) {
 }
 function resolveSquadsWalletRoute(route) {
   validateVaultIndex(route.vaultIndex);
-  const wallet = new PublicKey4(route.wallet);
-  const multisigPda = new PublicKey4(route.multisigPda);
+  const wallet = new PublicKey5(route.wallet);
+  const multisigPda = new PublicKey5(route.multisigPda);
   const [vaultPda] = squads.getVaultPda({
     multisigPda,
     index: route.vaultIndex
@@ -494,7 +628,7 @@ function resolveSquadsWalletRoute(route) {
   return { ...route, wallet, multisigPda, vaultPda };
 }
 function findSquadsWalletRoute(wallet, routes) {
-  const walletKey = typeof wallet === "string" ? new PublicKey4(wallet) : wallet;
+  const walletKey = typeof wallet === "string" ? new PublicKey5(wallet) : wallet;
   const route = routes.find(
     (candidate) => candidate.wallet === walletKey.toBase58()
   );
@@ -512,18 +646,18 @@ function validateSquadsWalletRoutes(routes) {
   }
 }
 function vaultAuthorityForWallet(wallet, routes) {
-  const walletKey = typeof wallet === "string" ? new PublicKey4(wallet) : wallet;
+  const walletKey = typeof wallet === "string" ? new PublicKey5(wallet) : wallet;
   return findSquadsWalletRoute(walletKey, routes)?.vaultPda ?? walletKey;
 }
 async function simulateSquadsProposalExecution(args) {
   const { connection, feePayer, instructions: instructions2 } = args;
   const recentBlockhash = args.recentBlockhash ?? (await connection.getLatestBlockhash(SQUADS_SIMULATION_COMMITMENT)).blockhash;
-  const message = new TransactionMessage3({
+  const message = new TransactionMessage4({
     payerKey: feePayer,
     recentBlockhash,
     instructions: [...instructions2]
   }).compileToV0Message(args.addressLookupTableAccounts);
-  const transaction = new VersionedTransaction3(message);
+  const transaction = new VersionedTransaction4(message);
   const { value } = await connection.simulateTransaction(transaction, {
     sigVerify: false,
     commitment: SQUADS_SIMULATION_COMMITMENT,
@@ -539,9 +673,13 @@ async function simulateSquadsProposalExecution(args) {
   return value;
 }
 async function prepareVaultTransaction(args) {
-  const { connection, proposer, instructions: instructions2 } = args;
+  const { connection, proposer } = args;
+  let instructions2 = [...args.instructions];
+  const ephemeralKeys = args.ephemeralSignerKeys ?? [];
   const route = findSquadsWalletRoute(proposer, args.squadsRoutes ?? []);
   if (!route) {
+    if (ephemeralKeys.length)
+      throw new Error("Ephemeral signers require a Squads route");
     return {
       kind: "direct",
       transaction: new Transaction().add(...instructions2),
@@ -569,6 +707,44 @@ async function prepareVaultTransaction(args) {
     );
   }
   const transactionIndex = BigInt(multisig.transactionIndex.toString()) + 1n;
+  if (ephemeralKeys.length > 255 || new Set(ephemeralKeys.map(String)).size !== ephemeralKeys.length) {
+    throw new Error("Invalid Squads ephemeral signer keys");
+  }
+  const [transactionPda] = squads.getTransactionPda({
+    multisigPda: route.multisigPda,
+    index: transactionIndex
+  });
+  const replacements = /* @__PURE__ */ new Map();
+  ephemeralKeys.forEach((key, index) => {
+    if (key.equals(proposer) || key.equals(route.vaultPda) || !instructions2.some(
+      (ix) => ix.keys.some((meta) => meta.isSigner && meta.pubkey.equals(key))
+    ) || instructions2.some(
+      (ix) => ix.programId.equals(key) || ix.data.includes(key.toBuffer())
+    )) {
+      throw new Error(
+        "Ephemeral signer must be a separate account-meta signer, never embedded in instruction data"
+      );
+    }
+    replacements.set(
+      key.toBase58(),
+      squads.getEphemeralSignerPda({
+        transactionPda,
+        ephemeralSignerIndex: index
+      })[0]
+    );
+  });
+  if (replacements.size) {
+    instructions2 = instructions2.map(
+      (ix) => new TransactionInstruction2({
+        programId: ix.programId,
+        data: ix.data,
+        keys: ix.keys.map((meta) => ({
+          ...meta,
+          pubkey: replacements.get(meta.pubkey.toBase58()) ?? meta.pubkey
+        }))
+      })
+    );
+  }
   const { blockhash } = await connection.getLatestBlockhash("confirmed");
   if (!args.skipSimulation) {
     await simulateSquadsProposalExecution({
@@ -579,7 +755,7 @@ async function prepareVaultTransaction(args) {
       addressLookupTableAccounts: args.addressLookupTableAccounts
     });
   }
-  const transactionMessage = new TransactionMessage3({
+  const transactionMessage = new TransactionMessage4({
     payerKey: route.vaultPda,
     recentBlockhash: blockhash,
     instructions: [...instructions2]
@@ -589,7 +765,7 @@ async function prepareVaultTransaction(args) {
     transactionIndex,
     creator: proposer,
     vaultIndex: route.vaultIndex,
-    ephemeralSigners: 0,
+    ephemeralSigners: ephemeralKeys.length,
     transactionMessage,
     addressLookupTableAccounts: args.addressLookupTableAccounts,
     memo: route.memo
@@ -625,8 +801,8 @@ async function prepareVaultTransaction(args) {
 // src/utils/squadsBuffer.ts
 import * as squads2 from "@sqds/multisig";
 import {
-  PublicKey as PublicKey5,
-  SystemProgram,
+  PublicKey as PublicKey6,
+  SystemProgram as SystemProgram2,
   Transaction as Transaction2
 } from "@solana/web3.js";
 var PacketSize = 1232;
@@ -637,7 +813,7 @@ async function prepareSquadsProposalUpload(args) {
   const transaction = prepared.transaction;
   const sizeProbe = new Transaction2({
     feePayer: proposer,
-    recentBlockhash: PublicKey5.default.toBase58()
+    recentBlockhash: PublicKey6.default.toBase58()
   }).add(...transaction.instructions);
   let fits = false;
   try {
@@ -657,7 +833,7 @@ async function prepareSquadsProposalUpload(args) {
   let bufferPda;
   let bufferIndex = 0;
   for (; bufferIndex <= 255; bufferIndex++) {
-    const [candidate] = PublicKey5.findProgramAddressSync(
+    const [candidate] = PublicKey6.findProgramAddressSync(
       [
         Buffer.from("multisig"),
         prepared.multisigPda.toBuffer(),
@@ -718,7 +894,7 @@ async function prepareSquadsProposalUpload(args) {
       vaultTransactionCreateItemTransaction: prepared.vaultTransactionPda,
       vaultTransactionCreateItemCreator: proposer,
       vaultTransactionCreateItemRentPayer: proposer,
-      vaultTransactionCreateItemSystemProgram: SystemProgram.programId,
+      vaultTransactionCreateItemSystemProgram: SystemProgram2.programId,
       transactionBuffer: bufferPda,
       creator: proposer
     },
@@ -743,7 +919,9 @@ export {
   NEST_VAULT_SLUG,
   NestApiError,
   SquadsProposalExecutionSimulationError,
+  buildNestDepositRequest,
   buildNestWithdrawalRequest,
+  decodeNestDepositRequest,
   decodeNestWithdrawalRequest,
   fetchNestRedemptionQuote,
   fetchNestRedemptionStatus,

package/dist/index.d.ts

@@ -12513,6 +12513,8 @@ declare function prepareVaultTransaction(args: {
     /** Skip execution simulation when proposing a transaction that depends on future funding. */
     skipSimulation?: boolean;
     addressLookupTableAccounts?: AddressLookupTableAccount[];
+    /** Temporary signer keys used only in account metas, replaced by Squads PDAs. */
+    ephemeralSignerKeys?: readonly PublicKey[];
 }): Promise<PreparedVaultTransaction>;
 
 interface SquadsProposalUpload {
@@ -13953,10 +13955,10 @@ declare class ConsensusOracleService {
 /**
  * External Liquidity Integrity Service
  *
- * Keeps each vault holding's split between local (vault-owned token account)
- * and external (Marginfi) balances at its target ratio. A small share of every
- * holding is deliberately left local — see {@link DEFAULT_TARGET_LOCAL_BPS} —
- * so routine payouts can be served without a Marginfi round trip; everything
+ * Keeps USDC worth 1.5% of total vault TVL in the vault-owned token account.
+ * Other holdings keep a small share of their own balance local (see
+ * {@link DEFAULT_TARGET_LOCAL_BPS}) so routine payouts can be served without
+ * a Marginfi round trip; everything
  * above that target is deposited into the configured external position via
  * `protocol_interaction` (a Marginfi deposit CPI).
  *
@@ -14001,10 +14003,12 @@ interface ExternalLiquidityIntegrityOptions {
      */
     minAmountUi?: number;
     /**
-     * Share of each holding (local + external) to keep in the vault's own token
-     * account, in basis points. Defaults to {@link DEFAULT_TARGET_LOCAL_BPS}.
+     * Share of each non-USDC holding (local + external) to keep in the vault's
+     * own token account, in basis points. Defaults to {@link DEFAULT_TARGET_LOCAL_BPS}.
      */
     targetLocalBps?: number;
+    /** Share of total vault TVL to keep locally as USDC, in basis points. */
+    targetLocalUsdcTvlBps?: number;
     /**
      * Hysteresis band, in basis points *of the target local amount*: the local
      * balance must drift at least this far from target before a rebalance is
@@ -14014,14 +14018,17 @@ interface ExternalLiquidityIntegrityOptions {
 }
 declare const DEFAULT_MIN_AMOUNT_UI = 1;
 /**
- * Keep 0.5% of each holding local; the remaining 99.5% earns yield in Marginfi.
+ * Keep 0.5% of each non-USDC holding local; the rest earns yield in Marginfi.
  * Anything larger than this buffer is served by `execute_withdraw_from_external`,
  * which unwinds the Marginfi position in the same transaction.
  */
 declare const DEFAULT_TARGET_LOCAL_BPS = 50;
+/** Keep local USDC worth 1.5% of total vault TVL. */
+declare const DEFAULT_TARGET_LOCAL_USDC_TVL_BPS = 150;
 /**
  * Rebalance only once the local balance has drifted more than 20% away from its
- * target — i.e. outside 0.4%–0.6% of the holding at the default 0.5% target.
+ * target — i.e. outside 1.2%–1.8% of vault TVL for USDC, or 0.4%–0.6% of
+ * a non-USDC holding at its default 0.5% target.
  * Without this band every arriving deposit or payout would trigger its own
  * transaction; with it, each rebalance restores the exact target, so the next
  * one is a full band away rather than one dust movement later.
@@ -14042,6 +14049,8 @@ declare function planRebalance(params: {
     localAmount: bigint;
     externalAmount: bigint;
     targetLocalBps: number;
+    /** Override the holding-based target with a raw token amount (USDC/TVL). */
+    targetLocalAmount?: bigint;
     rebalanceBandBps: number;
     minRaw: bigint;
 }): {
@@ -14065,6 +14074,7 @@ declare class ExternalLiquidityIntegrityService {
         dryRun?: boolean;
         minAmountUi?: number;
         targetLocalBps?: number;
+        targetLocalUsdcTvlBps?: number;
         rebalanceBandBps?: number;
     }): Promise<ExternalLiquidityIntegrityResult>;
     /**
@@ -14081,14 +14091,19 @@ declare class ExternalLiquidityIntegrityService {
  * payouts can be served without unwinding yield positions on demand.
  *
  * Idle USDC is the live balance of the vault's USDC token account plus USDC
- * deposits in external-liquidity slot 0 (Marginfi), valued at the holding price.
+ * deposits in the first Project0 (Marginfi) external-liquidity position,
+ * valued at the holding price.
  * The holding's aggregate `external_amount` includes other deployed capital
  * and must not be used as the idle reserve.
  *
  * When idle USDC drops below {@link IDLE_RESERVE_FLOOR_BPS} of vault TVL, the
  * service swaps PST into USDC through the permissioned `jupiter_swap`
  * instruction, sizing the swap to land at {@link IDLE_RESERVE_TARGET_BPS} of
- * TVL. PST is never deployed externally, so the vault's local PST balance is
+ * TVL. Independently, local USDC plus withdrawable Project0 deposits must cover
+ * {@link WITHDRAWABLE_RESERVE_FLOOR_BPS} of TVL. Each bank contributes the lesser
+ * of this vault's deposits and its available liquidity (deposits minus borrows,
+ * floored at zero). The swap covers the larger of the two triggered shortfalls.
+ * PST is never deployed externally, so the vault's local PST balance is
  * the whole swappable inventory; if it cannot cover the full top-up the run is
  * skipped rather than partially filled.
  *
@@ -14101,6 +14116,8 @@ declare class ExternalLiquidityIntegrityService {
 declare const IDLE_RESERVE_FLOOR_BPS = 400;
 /** Top-ups are sized to land idle USDC at this share of TVL. */
 declare const IDLE_RESERVE_TARGET_BPS = 500;
+/** Local USDC + withdrawable Project0 deposits must cover 1.5% of TVL. */
+declare const WITHDRAWABLE_RESERVE_FLOOR_BPS = 150;
 declare const DEFAULT_SLIPPAGE_BPS = 30;
 declare const DEFAULT_CU_PRICE_MICRO_LAMPORTS = 10000;
 declare const DEFAULT_MAX_ACCOUNTS = 20;
@@ -14119,10 +14136,14 @@ interface IdleLiquidityResult {
     reason: string;
     /** Vault TVL in accounting units. */
     tvl: bigint;
-    /** Live vault USDC + slot-0 Marginfi USDC deposits, in accounting units. */
+    /** Live vault USDC + first Project0 USDC deposits, in accounting units. */
     idleValue: bigint;
     /** Idle USDC as a share of TVL, in bps. */
     idleBps: number;
+    /** Local USDC + bank-liquidity-capped deposits, in accounting units. */
+    withdrawableValue: bigint;
+    /** Withdrawable USDC as a share of TVL, in bps. */
+    withdrawableBps: number;
     /** USDC the swap needs to produce to reach the target, in raw USDC units. */
     shortfallUsdc: bigint;
     /** PST spent (0 unless a swap was executed or simulated). */
@@ -14272,4 +14293,27 @@ declare function decodeNestWithdrawalRequest(args: {
     txBase64: string;
 }): Promise<VaultTransactionPlan>;
 
-export { ASSET_DECIMALS, ASSET_REBALANCE_COOLDOWN_SECS, type AccountBalanceResponse, AccountClient, type AccountYieldResponse, ActivateCircuitBreakerBuilder, type ActivateCircuitBreakerIxArgs, type ActivateCircuitBreakerTxArgs, type AddAprCashflowUpdateParams, type AddCashflowUpdateParams, type AddIncentiveRecipientArgs, AddIncentiveRecipientBuilder, type AddIncentiveRecipientIxArgs, AddIncentiveRecipientV3Builder, type AddIncentiveRecipientV3IxArgs, type AddIncentiveRecipientV3TxArgs, type AddNavCashflowUpdateParams, type AprAccountBalanceResponse, type AprAccountYieldResponse, type AssetPriceOracleConfigIxArgs, type AssetPriceOracleConfigTxArgs, type AssetPriceRefreshTarget, type AssetRefreshResult, type AssetType, BALANCE_CHANGE_BASELINE_MAX_AGE_SECS, type Bankineco, type BasicAuthCredentials, type Bigintish, type BuildMarginfiWithdrawInteractionArgs, CONSENSUS_ORACLE_VARIANT, type CancelIncentiveProposalArgs, CancelIncentiveProposalBuilder, CancelJuniorTrancheWithdrawBuilder, type CancelJuniorTrancheWithdrawIxArgs, type CancelJuniorTrancheWithdrawTxArgs, ClaimIncentiveBuilder, type ClaimIncentiveIxArgs, type ClaimIncentiveTxArgs, ClaimIncentiveV3Builder, type ClaimIncentiveV3IxArgs, type ClaimIncentiveV3TxArgs, type Clock, type CollectSamplesOptions, type ConsensusAssetUpdate, type ConsensusHoldingEntry, type ConsensusHoldingSimulation, type ConsensusOracleDeps, type ConsensusOracleHoldingConfig, ConsensusOracleService, type ConsensusOracleTarget, CrankNavBuilder, type CrankNavIxArgs, type CrankNavTxArgs, CrankPerformanceFeesBuilder, type CrankPerformanceFeesIxArgs, type CrankPerformanceFeesTxArgs, type CreateAccountParams, CreateAssetHoldingBuilder, type CreateAssetHoldingIxArgs, type CreateAssetHoldingTxArgs, CreateIncentiveBuilder, type CreateIncentiveIxArgs, type CreateIncentiveTxArgs, CreateIncentiveV3Builder, type CreateIncentiveV3IxArgs, type CreateIncentiveV3TxArgs, type CreateTokenMintIxs, CreateTrancheStateBuilder, type CreateTrancheStateIxArgs, type CreateTrancheStateTxArgs, CreateVaultBuilder, type CreateVaultClientOptions, type CreateVaultIxArgs, type CreateVaultParams, type CreateVaultTxArgs, type CreateYieldPaymentParams, DEFAULT_CU_PRICE_MICRO_LAMPORTS, DEFAULT_JUNIOR_EARLY_UNSTAKE_FEE_BPS, DEFAULT_JUNIOR_STANDARD_UNSTAKE_FEE_BPS, DEFAULT_JUNIOR_WITHDRAWAL_LOCKUP_SECS, DEFAULT_MAX_ACCEPTABLE_APY_BPS, DEFAULT_MAX_ACCOUNTS, DEFAULT_MINTS, DEFAULT_MIN_AMOUNT_UI, DEFAULT_ORACLE_STALENESS_THRESHOLD_SECS, DEFAULT_PRICE_ORACLE_ACCOUNT, DEFAULT_PRICE_STALENESS_SECS, DEFAULT_PRICE_STALENESS_THRESHOLD_SECS, DEFAULT_REBALANCE_BAND_BPS, DEFAULT_SLIPPAGE_BPS, DEFAULT_TARGET_LOCAL_BPS, DEFAULT_VAULT_ID, type DecodedHolding, type DecodedVault, type DecodedVaultTrancheState, type DeleteAccountParams, DisableCircuitBreakerBuilder, type DisableCircuitBreakerIxArgs, type DisableCircuitBreakerTxArgs, DistributeIncentiveBuilder, type DistributeIncentiveIxArgs, type DistributeIncentiveTxArgs, DistributeIncentiveV3Builder, type DistributeIncentiveV3IxArgs, type DistributeIncentiveV3TxArgs, EXTERNAL_POSITION_SAMPLES, ExecuteDepositBuilder, type ExecuteDepositIxArgs, type ExecuteDepositTxArgs, ExecuteShareSwapBuilder, type ExecuteShareSwapIxArgs, type ExecuteShareSwapTxArgs, ExecuteTrancheDepositBuilder, type ExecuteTrancheDepositIxArgs, type ExecuteTrancheDepositTxArgs, ExecuteTrancheWithdrawBuilder, type ExecuteTrancheWithdrawIxArgs, type ExecuteTrancheWithdrawTxArgs, ExecuteWithdrawBuilder, type ExecuteWithdrawIxArgs, type ExecuteWithdrawTxArgs, type ExternalLiquidityIntegrityOptions, type ExternalLiquidityIntegrityResult, ExternalLiquidityIntegrityService, type ExternalLiquidityIntegritySummary, type ExternalLiquiditySlot, type ExternalLiquiditySourceArgs, type ExternalPosition, type ExternalPositionContext, type ExternalPositionProvider, type ExternalPositionRef, ExternalPositionRegistry, FEE_VAULT_CACHE_CATEGORY, type FeeVaultAccountData, type FetchNestTokenPriceOptions, FulfillJuniorTrancheWithdrawBuilder, type FulfillJuniorTrancheWithdrawIxArgs, type FulfillJuniorTrancheWithdrawTxArgs, type FulfillSummary, type HoldingNavContribution, type HoldingUpdatePreview, IDL, IDLE_RESERVE_FLOOR_BPS, IDLE_RESERVE_TARGET_BPS, type IdleLiquidityOptions, type IdleLiquidityResult, IdleLiquidityService, type IdleLiquidityStatus, type IncentiveRecipient, type IncentiveTotals, type IncentiveUsdUpdateArgs, type IncentiveV3OracleState, type IncentiveV3Recipient, type IncentiveV3Totals, InitializeVaultRolesBuilder, type InitializeVaultRolesIxArgs, type InitializeVaultRolesTxArgs, type JuniorWithdrawalMode, JupiterPriceSource, type JupiterPriceSourceOptions, JupiterSwapBuilder, type JupiterSwapIxArgs, type JupiterSwapTxArgs, KaminoPositionProvider, LIVE_ORACLE_VARIANTS, LIVE_PRICE_REFRESH_INTERVAL_SECS, LOCAL_PROTOCOL_ADMIN, LargeBalanceChangeError, type LargeBalanceChangeViolation, type LiveConsensusOracleDepsOptions, LivePriceSource, type LivePriceSourceOptions, MANAGER_WALLET_NAV_DROP_TRIGGER_BPS, MANAGER_WALLET_NAV_TOLERANCE_BPS, MAX_APY_ANCHOR_WINDOW_SECS, MAX_BALANCE_CHANGE_BPS, MAX_CONSENSUS_SIGNERS, MAX_INCENTIVE_RECIPIENTS, MAX_INCENTIVE_REPORT_TTL, MAX_MANAGER_WITHDRAW_DESTINATIONS, MAX_PRICE_STALENESS_THRESHOLD_SECS, MIN_EXTERNAL_POSITION_SAMPLES, ManagerRedepositAssetBuilder, type ManagerRedepositAssetIxArgs, type ManagerRedepositAssetTxArgs, type ManagerWalletBalanceSource, type ManagerWalletReconciliation, ManagerWithdrawAssetBuilder, type ManagerWithdrawAssetIxArgs, type ManagerWithdrawAssetTxArgs, MarginfiPositionProvider, type MaxApyAnchorSnapshot, type MintConfig, type MintIdentifier, type MintInfo, MintRegistry, type MintRegistryOptions, type MockYieldAccountConfig, MockYieldTracker, type MockYieldTrackerOptions, NEST_API_BASE_URL, NEST_RWA_SHARE_MINT, NEST_VAULT_SLUG, type NavAccountBalanceResponse, type NavAccountValueResponse, type NavCrankBlocker, type NavCrankBlockerReason, type NavCrankReadiness, type NavCrankResult, type NavPriceConfig, type NavYieldAccount, NestApiError, type NestApiOptions, NestPriceSource, type NestPriceSourceOptions, type NestRedemptionQuote, type NestRedemptionStatus, ORACLE_ENTRIES_OFFSET, ORACLE_ENTRY_SIZE, ORACLE_SETTLED_NAV_TS_OFFSET, OracleService, PRICE_ORACLE_TYPES_BY_INDEX, PROGRAM_FEE_EXEMPT_OWNER_WHITELIST, PROTOCOL_ADMIN, PROTOCOL_FEE_RECIPIENT, PdaClient, type PendingConsensusSignerSet, type PreparedDirectTransaction, type PreparedSquadsTransaction, type PreparedVaultTransaction, type PriceOracleTypeArgs, type PriceSource, ProtocolInteractionBuilder, type ProtocolInteractionIxArgs, type ProtocolInteractionTxArgs, type QuoteFeeUnit, REPORTABLE_ORACLE_VARIANTS, type RealizedApySimulation, type RefreshLiveOraclePricesParams, RemoveAssetHoldingBuilder, type RemoveAssetHoldingIxArgs, type RemoveAssetHoldingTxArgs, ReportIncentiveV3Builder, type ReportIncentiveV3IxArgs, type ReportIncentiveV3TxArgs, RequestJuniorTrancheWithdrawBuilder, type RequestJuniorTrancheWithdrawIxArgs, type RequestJuniorTrancheWithdrawTxArgs, type ResolveExternalWithdrawArgs, type ResolvedExternalWithdraw, type ResolvedSquadsWalletRoute, type RollingLimitConfig, type RollingRebalanceLimitConfig, RpcManagerWalletBalanceSource, type RunLiveConsensusOracleOptions, type RunOptions, type RunSummary, SHARE_DECIMALS, SYSTEM_PROGRAM, SetAssetPriceOracleBuilder, type SetAssetPriceOracleIxArgs, type SetAssetPriceOracleTxArgs, SetExternalLiquidityBuilder, type SetExternalLiquidityIxArgs, type SetExternalLiquidityTxArgs, type SetIncentiveLimitsArgs, SetIncentiveLimitsBuilder, type SetIncentiveLimitsV3Args, SetIncentiveLimitsV3Builder, SetManagerWithdrawDestinationBuilder, type SetManagerWithdrawDestinationIxArgs, type SetManagerWithdrawDestinationTxArgs, SetProtocolFeeBuilder, type SetProtocolFeeIxArgs, type SetProtocolFeeTxArgs, SetVaultConfigBuilder, type SetVaultConfigIxArgs, type SetVaultConfigTxArgs, SettleIncentiveV3Builder, type SettleIncentiveV3IxArgs, type SettleIncentiveV3TxArgs, type SettleVaultParams, type SettleVaultResult, type SettlementSimulation, type SettlementSimulationSnapshot, type SimulateDryRunSettlementParams, type SimulateSettlementArgs, type SimulatedShareClass, SquadsProposalExecutionSimulationError, type SquadsProposalUpload, type SquadsWalletRouteConfig, type StaleBalanceChangeBypass, StaticPositionProvider, SubmitIncentiveBuilder, type SubmitIncentiveIxArgs, type SubmitIncentiveTxArgs, TOKEN_PROGRAM, TOKEN_PROGRAM_ID, type TimelockSettlementKind, type TimelockSettlementOptions, type TimelockSettlementRecord, TimelockSettlementService, type TimelockSettlementSummary, type TrackedAccountValue, type TrancheKindArgs, type TransactionBuilder, TransactionClient, USDC_MINT, USD_STAR_JUNIOR_MINT, USD_STAR_MINT, USD_STAR_PRINCIPAL_MINT, type UpdateAccountParams, UpdateAssetPriceBuilder, type UpdateAssetPriceIxArgs, type UpdateAssetPriceTxArgs, UpdateConsensusOracleBuilder, type UpdateConsensusOracleIxArgs, type UpdateConsensusOracleTxArgs, UpdateConsensusSignersBuilder, type UpdateConsensusSignersIxArgs, type UpdateConsensusSignersTxArgs, type UpdateDynamicAprParams, UpdateTrancheConfigBuilder, type UpdateTrancheConfigIxArgs, type UpdateTrancheConfigTxArgs, VAULT_CACHE_CATEGORY, VAULT_CREATOR_WHITELIST, VAULT_ENVIRONMENTS, VAULT_ORACLE_CACHE_CATEGORY, VAULT_PROGRAM_ID, VAULT_PROGRAM_IDS, VAULT_PROGRAM_PUBLIC_KEY, VAULT_ROLE_UPDATE_TIMELOCK_SECS, VAULT_TRANCHE_STATE_CACHE_CATEGORY, VAULT_TRANCHE_WITHDRAWAL_QUEUE_CACHE_CATEGORY, type Vault, type VaultAccountData, VaultBuilderBase, type VaultBuilderContext, type VaultCacheInvalidation, VaultClient, type VaultClientBundle, type VaultEnv, type VaultIncentiveAccount, type VaultIncentiveAccountData, type VaultIncentiveV3Account, type VaultIncentiveV3AccountData, type VaultOracleAccountData, type VaultOracleResult, type VaultPricingInputs, type VaultQuote, type VaultQuoteArgs, VaultQuoteClient, type VaultQuoteDirection, type VaultQuoteShareClass, VaultReallocationBuilder, type VaultReallocationIxArgs, type VaultReallocationTxArgs, type VaultTrancheStateAccountData, type VaultTrancheWithdrawalQueueAccountData, type VaultTransactionPlan, type WithdrawProtocolFeesIxArgs, type WithdrawProtocolFeesTxArgs, WithdrawalQueueService, type WithdrawalQueueSnapshot, type YieldAccount, type YieldAccountSnapshot, type YieldCalculationLog, type YieldCashflow, type YieldPaymentResponse, type YieldPaymentSnapshot, type YieldTracker, type YieldValuationModel, accountingUnitPriceToUsd, addCashflowUpdate, applyEffectiveApy, assertNoLargeBalanceChanges, assertNoUnconfirmedYieldPayments, buildHoldingUpdate, buildMarginfiWithdrawInteraction, buildNestWithdrawalRequest, buildUpdates, candidateGrossNav, coerceBool, collectSamples, confirmYieldPayment, createAccount, createLiveConsensusOracleDeps, createRpcFromConnection, createTokenMint, createTokenMintIxs, createVaultClient, createYieldPayment, dateToStr, decodeNestWithdrawalRequest, decodePendingConsensusSigners, defaultKeypairPath, deleteAccount, discoverVaultsForSigner, fetchExternalPositions, fetchNestRedemptionQuote, fetchNestRedemptionStatus, fetchNestTokenPrice, fetchReceiptMints, filterTargetHoldings, findLargeBalanceChanges, findSquadsWalletRoute, formatSettlementSimulation, fromUiAmount, gatherPricingInputs, getAccount, getAccounts, getAprYield, getBalance, getCashflows, getIncentiveRecipientShareAtas, getIncentiveRecipients, getIncentiveReportRecipients, getIncentiveTotals, getIncentiveV3OracleState, getIncentiveV3RecipientShareAtas, getIncentiveV3Recipients, getIncentiveV3Totals, getNavValue, getRpcUrl, getTotalOutstandingYield, getTotalTrackedValue, getTotalYield, getTrackedValue, getVaultProgramId, getYield, getYieldPayments, indexConfigByMint, isNavAccountBalance, isNavAccountValue, isNavYieldAccount, isVaultEnv, keypairAddress, loadKeypair, logProspectiveApy, makeProvider, managerReconciliationStateKey, mintTokensTo, mints, mostFrequent, parseExternalLiquidityRefs, planRebalance, prepareSquadsProposalUpload, prepareVaultTransaction, previousPhysicalNav, priceInAccountingUnit, readI64LE, readSplMintSupply, reconcileManagerWalletBalances, refreshLiveOraclePrices, resolveExternalWithdraw, resolveKeypairPath, resolveSquadsWalletRoute, resolveTrackedAmounts, roundToNextUtcMidnight, runLiveConsensusOracle, selectReportableHoldings, settleVault, signerInOracleData, simulateConsensusOracleSettlement, simulateDryRunSettlement, simulateSquadsProposalExecution, sumPositionsByMint, systemClock, toBigInt, toUiAmount, toWeb3AccountMeta, trackedValueFromResponse, updateAccount, updateDynamicApr, validateSquadsWalletRoutes, variantName, vaultAuthorityForWallet, withDiscoveredYieldAccounts };
+interface NestDepositPlan extends VaultTransactionPlan {
+    /** Pass through to prepareVaultTransaction; the keeper's signatures are not reusable. */
+    ephemeralSignerKeys: PublicKey[];
+}
+/** Build a manager-funded deposit, with one event account for Squads to sign. */
+declare function buildNestDepositRequest(args: {
+    connection: Connection;
+    owner: PublicKey;
+    rawAmountUsdc: bigint;
+    apiOptions?: NestApiOptions;
+}): Promise<NestDepositPlan>;
+/**
+ * Validate the USDC burn and Nest/Solana recipient. Replace the keeper rent payer
+ * with the manager, and expose the CCTP event signer for Squads PDA substitution.
+ * Nest remains trusted for the complete cross-chain payload and keeper delivery.
+ */
+declare function decodeNestDepositRequest(args: {
+    connection: Connection;
+    owner: PublicKey;
+    rawAmountUsdc: bigint;
+    txBase64: string;
+}): Promise<NestDepositPlan>;
+
+export { ASSET_DECIMALS, ASSET_REBALANCE_COOLDOWN_SECS, type AccountBalanceResponse, AccountClient, type AccountYieldResponse, ActivateCircuitBreakerBuilder, type ActivateCircuitBreakerIxArgs, type ActivateCircuitBreakerTxArgs, type AddAprCashflowUpdateParams, type AddCashflowUpdateParams, type AddIncentiveRecipientArgs, AddIncentiveRecipientBuilder, type AddIncentiveRecipientIxArgs, AddIncentiveRecipientV3Builder, type AddIncentiveRecipientV3IxArgs, type AddIncentiveRecipientV3TxArgs, type AddNavCashflowUpdateParams, type AprAccountBalanceResponse, type AprAccountYieldResponse, type AssetPriceOracleConfigIxArgs, type AssetPriceOracleConfigTxArgs, type AssetPriceRefreshTarget, type AssetRefreshResult, type AssetType, BALANCE_CHANGE_BASELINE_MAX_AGE_SECS, type Bankineco, type BasicAuthCredentials, type Bigintish, type BuildMarginfiWithdrawInteractionArgs, CONSENSUS_ORACLE_VARIANT, type CancelIncentiveProposalArgs, CancelIncentiveProposalBuilder, CancelJuniorTrancheWithdrawBuilder, type CancelJuniorTrancheWithdrawIxArgs, type CancelJuniorTrancheWithdrawTxArgs, ClaimIncentiveBuilder, type ClaimIncentiveIxArgs, type ClaimIncentiveTxArgs, ClaimIncentiveV3Builder, type ClaimIncentiveV3IxArgs, type ClaimIncentiveV3TxArgs, type Clock, type CollectSamplesOptions, type ConsensusAssetUpdate, type ConsensusHoldingEntry, type ConsensusHoldingSimulation, type ConsensusOracleDeps, type ConsensusOracleHoldingConfig, ConsensusOracleService, type ConsensusOracleTarget, CrankNavBuilder, type CrankNavIxArgs, type CrankNavTxArgs, CrankPerformanceFeesBuilder, type CrankPerformanceFeesIxArgs, type CrankPerformanceFeesTxArgs, type CreateAccountParams, CreateAssetHoldingBuilder, type CreateAssetHoldingIxArgs, type CreateAssetHoldingTxArgs, CreateIncentiveBuilder, type CreateIncentiveIxArgs, type CreateIncentiveTxArgs, CreateIncentiveV3Builder, type CreateIncentiveV3IxArgs, type CreateIncentiveV3TxArgs, type CreateTokenMintIxs, CreateTrancheStateBuilder, type CreateTrancheStateIxArgs, type CreateTrancheStateTxArgs, CreateVaultBuilder, type CreateVaultClientOptions, type CreateVaultIxArgs, type CreateVaultParams, type CreateVaultTxArgs, type CreateYieldPaymentParams, DEFAULT_CU_PRICE_MICRO_LAMPORTS, DEFAULT_JUNIOR_EARLY_UNSTAKE_FEE_BPS, DEFAULT_JUNIOR_STANDARD_UNSTAKE_FEE_BPS, DEFAULT_JUNIOR_WITHDRAWAL_LOCKUP_SECS, DEFAULT_MAX_ACCEPTABLE_APY_BPS, DEFAULT_MAX_ACCOUNTS, DEFAULT_MINTS, DEFAULT_MIN_AMOUNT_UI, DEFAULT_ORACLE_STALENESS_THRESHOLD_SECS, DEFAULT_PRICE_ORACLE_ACCOUNT, DEFAULT_PRICE_STALENESS_SECS, DEFAULT_PRICE_STALENESS_THRESHOLD_SECS, DEFAULT_REBALANCE_BAND_BPS, DEFAULT_SLIPPAGE_BPS, DEFAULT_TARGET_LOCAL_BPS, DEFAULT_TARGET_LOCAL_USDC_TVL_BPS, DEFAULT_VAULT_ID, type DecodedHolding, type DecodedVault, type DecodedVaultTrancheState, type DeleteAccountParams, DisableCircuitBreakerBuilder, type DisableCircuitBreakerIxArgs, type DisableCircuitBreakerTxArgs, DistributeIncentiveBuilder, type DistributeIncentiveIxArgs, type DistributeIncentiveTxArgs, DistributeIncentiveV3Builder, type DistributeIncentiveV3IxArgs, type DistributeIncentiveV3TxArgs, EXTERNAL_POSITION_SAMPLES, ExecuteDepositBuilder, type ExecuteDepositIxArgs, type ExecuteDepositTxArgs, ExecuteShareSwapBuilder, type ExecuteShareSwapIxArgs, type ExecuteShareSwapTxArgs, ExecuteTrancheDepositBuilder, type ExecuteTrancheDepositIxArgs, type ExecuteTrancheDepositTxArgs, ExecuteTrancheWithdrawBuilder, type ExecuteTrancheWithdrawIxArgs, type ExecuteTrancheWithdrawTxArgs, ExecuteWithdrawBuilder, type ExecuteWithdrawIxArgs, type ExecuteWithdrawTxArgs, type ExternalLiquidityIntegrityOptions, type ExternalLiquidityIntegrityResult, ExternalLiquidityIntegrityService, type ExternalLiquidityIntegritySummary, type ExternalLiquiditySlot, type ExternalLiquiditySourceArgs, type ExternalPosition, type ExternalPositionContext, type ExternalPositionProvider, type ExternalPositionRef, ExternalPositionRegistry, FEE_VAULT_CACHE_CATEGORY, type FeeVaultAccountData, type FetchNestTokenPriceOptions, FulfillJuniorTrancheWithdrawBuilder, type FulfillJuniorTrancheWithdrawIxArgs, type FulfillJuniorTrancheWithdrawTxArgs, type FulfillSummary, type HoldingNavContribution, type HoldingUpdatePreview, IDL, IDLE_RESERVE_FLOOR_BPS, IDLE_RESERVE_TARGET_BPS, type IdleLiquidityOptions, type IdleLiquidityResult, IdleLiquidityService, type IdleLiquidityStatus, type IncentiveRecipient, type IncentiveTotals, type IncentiveUsdUpdateArgs, type IncentiveV3OracleState, type IncentiveV3Recipient, type IncentiveV3Totals, InitializeVaultRolesBuilder, type InitializeVaultRolesIxArgs, type InitializeVaultRolesTxArgs, type JuniorWithdrawalMode, JupiterPriceSource, type JupiterPriceSourceOptions, JupiterSwapBuilder, type JupiterSwapIxArgs, type JupiterSwapTxArgs, KaminoPositionProvider, LIVE_ORACLE_VARIANTS, LIVE_PRICE_REFRESH_INTERVAL_SECS, LOCAL_PROTOCOL_ADMIN, LargeBalanceChangeError, type LargeBalanceChangeViolation, type LiveConsensusOracleDepsOptions, LivePriceSource, type LivePriceSourceOptions, MANAGER_WALLET_NAV_DROP_TRIGGER_BPS, MANAGER_WALLET_NAV_TOLERANCE_BPS, MAX_APY_ANCHOR_WINDOW_SECS, MAX_BALANCE_CHANGE_BPS, MAX_CONSENSUS_SIGNERS, MAX_INCENTIVE_RECIPIENTS, MAX_INCENTIVE_REPORT_TTL, MAX_MANAGER_WITHDRAW_DESTINATIONS, MAX_PRICE_STALENESS_THRESHOLD_SECS, MIN_EXTERNAL_POSITION_SAMPLES, ManagerRedepositAssetBuilder, type ManagerRedepositAssetIxArgs, type ManagerRedepositAssetTxArgs, type ManagerWalletBalanceSource, type ManagerWalletReconciliation, ManagerWithdrawAssetBuilder, type ManagerWithdrawAssetIxArgs, type ManagerWithdrawAssetTxArgs, MarginfiPositionProvider, type MaxApyAnchorSnapshot, type MintConfig, type MintIdentifier, type MintInfo, MintRegistry, type MintRegistryOptions, type MockYieldAccountConfig, MockYieldTracker, type MockYieldTrackerOptions, NEST_API_BASE_URL, NEST_RWA_SHARE_MINT, NEST_VAULT_SLUG, type NavAccountBalanceResponse, type NavAccountValueResponse, type NavCrankBlocker, type NavCrankBlockerReason, type NavCrankReadiness, type NavCrankResult, type NavPriceConfig, type NavYieldAccount, NestApiError, type NestApiOptions, type NestDepositPlan, NestPriceSource, type NestPriceSourceOptions, type NestRedemptionQuote, type NestRedemptionStatus, ORACLE_ENTRIES_OFFSET, ORACLE_ENTRY_SIZE, ORACLE_SETTLED_NAV_TS_OFFSET, OracleService, PRICE_ORACLE_TYPES_BY_INDEX, PROGRAM_FEE_EXEMPT_OWNER_WHITELIST, PROTOCOL_ADMIN, PROTOCOL_FEE_RECIPIENT, PdaClient, type PendingConsensusSignerSet, type PreparedDirectTransaction, type PreparedSquadsTransaction, type PreparedVaultTransaction, type PriceOracleTypeArgs, type PriceSource, ProtocolInteractionBuilder, type ProtocolInteractionIxArgs, type ProtocolInteractionTxArgs, type QuoteFeeUnit, REPORTABLE_ORACLE_VARIANTS, type RealizedApySimulation, type RefreshLiveOraclePricesParams, RemoveAssetHoldingBuilder, type RemoveAssetHoldingIxArgs, type RemoveAssetHoldingTxArgs, ReportIncentiveV3Builder, type ReportIncentiveV3IxArgs, type ReportIncentiveV3TxArgs, RequestJuniorTrancheWithdrawBuilder, type RequestJuniorTrancheWithdrawIxArgs, type RequestJuniorTrancheWithdrawTxArgs, type ResolveExternalWithdrawArgs, type ResolvedExternalWithdraw, type ResolvedSquadsWalletRoute, type RollingLimitConfig, type RollingRebalanceLimitConfig, RpcManagerWalletBalanceSource, type RunLiveConsensusOracleOptions, type RunOptions, type RunSummary, SHARE_DECIMALS, SYSTEM_PROGRAM, SetAssetPriceOracleBuilder, type SetAssetPriceOracleIxArgs, type SetAssetPriceOracleTxArgs, SetExternalLiquidityBuilder, type SetExternalLiquidityIxArgs, type SetExternalLiquidityTxArgs, type SetIncentiveLimitsArgs, SetIncentiveLimitsBuilder, type SetIncentiveLimitsV3Args, SetIncentiveLimitsV3Builder, SetManagerWithdrawDestinationBuilder, type SetManagerWithdrawDestinationIxArgs, type SetManagerWithdrawDestinationTxArgs, SetProtocolFeeBuilder, type SetProtocolFeeIxArgs, type SetProtocolFeeTxArgs, SetVaultConfigBuilder, type SetVaultConfigIxArgs, type SetVaultConfigTxArgs, SettleIncentiveV3Builder, type SettleIncentiveV3IxArgs, type SettleIncentiveV3TxArgs, type SettleVaultParams, type SettleVaultResult, type SettlementSimulation, type SettlementSimulationSnapshot, type SimulateDryRunSettlementParams, type SimulateSettlementArgs, type SimulatedShareClass, SquadsProposalExecutionSimulationError, type SquadsProposalUpload, type SquadsWalletRouteConfig, type StaleBalanceChangeBypass, StaticPositionProvider, SubmitIncentiveBuilder, type SubmitIncentiveIxArgs, type SubmitIncentiveTxArgs, TOKEN_PROGRAM, TOKEN_PROGRAM_ID, type TimelockSettlementKind, type TimelockSettlementOptions, type TimelockSettlementRecord, TimelockSettlementService, type TimelockSettlementSummary, type TrackedAccountValue, type TrancheKindArgs, type TransactionBuilder, TransactionClient, USDC_MINT, USD_STAR_JUNIOR_MINT, USD_STAR_MINT, USD_STAR_PRINCIPAL_MINT, type UpdateAccountParams, UpdateAssetPriceBuilder, type UpdateAssetPriceIxArgs, type UpdateAssetPriceTxArgs, UpdateConsensusOracleBuilder, type UpdateConsensusOracleIxArgs, type UpdateConsensusOracleTxArgs, UpdateConsensusSignersBuilder, type UpdateConsensusSignersIxArgs, type UpdateConsensusSignersTxArgs, type UpdateDynamicAprParams, UpdateTrancheConfigBuilder, type UpdateTrancheConfigIxArgs, type UpdateTrancheConfigTxArgs, VAULT_CACHE_CATEGORY, VAULT_CREATOR_WHITELIST, VAULT_ENVIRONMENTS, VAULT_ORACLE_CACHE_CATEGORY, VAULT_PROGRAM_ID, VAULT_PROGRAM_IDS, VAULT_PROGRAM_PUBLIC_KEY, VAULT_ROLE_UPDATE_TIMELOCK_SECS, VAULT_TRANCHE_STATE_CACHE_CATEGORY, VAULT_TRANCHE_WITHDRAWAL_QUEUE_CACHE_CATEGORY, type Vault, type VaultAccountData, VaultBuilderBase, type VaultBuilderContext, type VaultCacheInvalidation, VaultClient, type VaultClientBundle, type VaultEnv, type VaultIncentiveAccount, type VaultIncentiveAccountData, type VaultIncentiveV3Account, type VaultIncentiveV3AccountData, type VaultOracleAccountData, type VaultOracleResult, type VaultPricingInputs, type VaultQuote, type VaultQuoteArgs, VaultQuoteClient, type VaultQuoteDirection, type VaultQuoteShareClass, VaultReallocationBuilder, type VaultReallocationIxArgs, type VaultReallocationTxArgs, type VaultTrancheStateAccountData, type VaultTrancheWithdrawalQueueAccountData, type VaultTransactionPlan, WITHDRAWABLE_RESERVE_FLOOR_BPS, type WithdrawProtocolFeesIxArgs, type WithdrawProtocolFeesTxArgs, WithdrawalQueueService, type WithdrawalQueueSnapshot, type YieldAccount, type YieldAccountSnapshot, type YieldCalculationLog, type YieldCashflow, type YieldPaymentResponse, type YieldPaymentSnapshot, type YieldTracker, type YieldValuationModel, accountingUnitPriceToUsd, addCashflowUpdate, applyEffectiveApy, assertNoLargeBalanceChanges, assertNoUnconfirmedYieldPayments, buildHoldingUpdate, buildMarginfiWithdrawInteraction, buildNestDepositRequest, buildNestWithdrawalRequest, buildUpdates, candidateGrossNav, coerceBool, collectSamples, confirmYieldPayment, createAccount, createLiveConsensusOracleDeps, createRpcFromConnection, createTokenMint, createTokenMintIxs, createVaultClient, createYieldPayment, dateToStr, decodeNestDepositRequest, decodeNestWithdrawalRequest, decodePendingConsensusSigners, defaultKeypairPath, deleteAccount, discoverVaultsForSigner, fetchExternalPositions, fetchNestRedemptionQuote, fetchNestRedemptionStatus, fetchNestTokenPrice, fetchReceiptMints, filterTargetHoldings, findLargeBalanceChanges, findSquadsWalletRoute, formatSettlementSimulation, fromUiAmount, gatherPricingInputs, getAccount, getAccounts, getAprYield, getBalance, getCashflows, getIncentiveRecipientShareAtas, getIncentiveRecipients, getIncentiveReportRecipients, getIncentiveTotals, getIncentiveV3OracleState, getIncentiveV3RecipientShareAtas, getIncentiveV3Recipients, getIncentiveV3Totals, getNavValue, getRpcUrl, getTotalOutstandingYield, getTotalTrackedValue, getTotalYield, getTrackedValue, getVaultProgramId, getYield, getYieldPayments, indexConfigByMint, isNavAccountBalance, isNavAccountValue, isNavYieldAccount, isVaultEnv, keypairAddress, loadKeypair, logProspectiveApy, makeProvider, managerReconciliationStateKey, mintTokensTo, mints, mostFrequent, parseExternalLiquidityRefs, planRebalance, prepareSquadsProposalUpload, prepareVaultTransaction, previousPhysicalNav, priceInAccountingUnit, readI64LE, readSplMintSupply, reconcileManagerWalletBalances, refreshLiveOraclePrices, resolveExternalWithdraw, resolveKeypairPath, resolveSquadsWalletRoute, resolveTrackedAmounts, roundToNextUtcMidnight, runLiveConsensusOracle, selectReportableHoldings, settleVault, signerInOracleData, simulateConsensusOracleSettlement, simulateDryRunSettlement, simulateSquadsProposalExecution, sumPositionsByMint, systemClock, toBigInt, toUiAmount, toWeb3AccountMeta, trackedValueFromResponse, updateAccount, updateDynamicApr, validateSquadsWalletRoutes, variantName, vaultAuthorityForWallet, withDiscoveredYieldAccounts };

package/dist/index.js

@@ -149,7 +149,7 @@ var require_compat = __commonJS({
     exports2.fromWeb3PublicKey = fromWeb3PublicKey;
     exports2.toWeb3PublicKey = toWeb3PublicKey;
     exports2.asWeb3PublicKey = asWeb3PublicKey2;
-    exports2.toKitInstruction = toKitInstruction35;
+    exports2.toKitInstruction = toKitInstruction36;
     exports2.fromKitInstruction = fromKitInstruction3;
     var kit_1 = require("@solana/kit");
     var web3_js_1 = require("@solana/web3.js");
@@ -165,7 +165,7 @@ var require_compat = __commonJS({
     exports2.toAddress = fromWeb3PublicKey;
     exports2.fromWeb3Pk = fromWeb3PublicKey;
     exports2.toWeb3Pk = toWeb3PublicKey;
-    function toKitInstruction35(ix) {
+    function toKitInstruction36(ix) {
       return {
         programAddress: ix.programId.toBase58(),
         data: new Uint8Array(ix.data),
@@ -253,9 +253,9 @@ var require_meta = __commonJS({
     exports2.toCustomAccountMeta = toCustomAccountMeta;
     exports2.toCustomAccountMetaFromWeb3AccountMeta = toCustomAccountMetaFromWeb3AccountMeta;
     var roles_1 = require_roles();
-    function toCustomAccountMeta(address14, isWritable, requiredAtaDetails, isSigner) {
+    function toCustomAccountMeta(address15, isWritable, requiredAtaDetails, isSigner) {
       const role = (0, roles_1.getAccountRole)(isWritable ?? false, isSigner ?? false);
-      return { address: address14, role, isRequiredAta: requiredAtaDetails };
+      return { address: address15, role, isRequiredAta: requiredAtaDetails };
     }
     function toCustomAccountMetaFromWeb3AccountMeta(web3AccountMeta) {
       return toCustomAccountMeta(web3AccountMeta.pubkey.toBase58(), web3AccountMeta.isWritable, void 0, web3AccountMeta.isSigner);
@@ -1236,8 +1236,8 @@ var require_cpiClient = __commonJS({
     var kit_1 = require("@solana/kit");
     var common_1 = require_dist();
     var constants_1 = require_constants3();
-    function account(address14, role) {
-      return { address: address14, role };
+    function account(address15, role) {
+      return { address: address15, role };
     }
     function requiredAddress(value, label) {
       if (!value) {
@@ -1326,7 +1326,7 @@ var require_cpiClient = __commonJS({
         });
         const bankAndOracleRemainingAccounts = [
           account(this.accounts.bank, kit_1.AccountRole.READONLY),
-          ...this.accounts.oracleAccounts.map((address14) => account(address14, kit_1.AccountRole.READONLY))
+          ...this.accounts.oracleAccounts.map((address15) => account(address15, kit_1.AccountRole.READONLY))
         ];
         return {
           cpiType: params.cpiType ?? common_1.CpiTypes.MARGINFI_WITHDRAW,
@@ -2978,12 +2978,12 @@ var require_routePreInstructions = __commonJS({
         if (existingAta.value) {
           continue;
         }
-        instructions2.push(toKitInstruction35((0, spl_token_1.createAssociatedTokenAccountIdempotentInstruction)(new web3_js_1.PublicKey(payer), new web3_js_1.PublicKey(ata), new web3_js_1.PublicKey(user), new web3_js_1.PublicKey(mint), new web3_js_1.PublicKey(tokenProgram), spl_token_1.ASSOCIATED_TOKEN_PROGRAM_ID)));
+        instructions2.push(toKitInstruction36((0, spl_token_1.createAssociatedTokenAccountIdempotentInstruction)(new web3_js_1.PublicKey(payer), new web3_js_1.PublicKey(ata), new web3_js_1.PublicKey(user), new web3_js_1.PublicKey(mint), new web3_js_1.PublicKey(tokenProgram), spl_token_1.ASSOCIATED_TOKEN_PROGRAM_ID)));
         postSuccessCacheInvalidations.push({ address: ata });
       }
       return { instructions: instructions2, postSuccessCacheInvalidations };
     }
-    function toKitInstruction35(ix) {
+    function toKitInstruction36(ix) {
       return {
         programAddress: ix.programId.toBase58(),
         accounts: ix.keys.map((account) => ({
@@ -3302,7 +3302,7 @@ __export(index_exports, {
   DEFAULT_JUNIOR_WITHDRAWAL_LOCKUP_SECS: () => DEFAULT_JUNIOR_WITHDRAWAL_LOCKUP_SECS,
   DEFAULT_MAX_ACCEPTABLE_APY_BPS: () => DEFAULT_MAX_ACCEPTABLE_APY_BPS,
   DEFAULT_MAX_ACCOUNTS: () => DEFAULT_MAX_ACCOUNTS,
-  DEFAULT_MINTS: () => import_common61.DEFAULT_MINTS,
+  DEFAULT_MINTS: () => import_common62.DEFAULT_MINTS,
   DEFAULT_MIN_AMOUNT_UI: () => DEFAULT_MIN_AMOUNT_UI,
   DEFAULT_ORACLE_STALENESS_THRESHOLD_SECS: () => DEFAULT_ORACLE_STALENESS_THRESHOLD_SECS,
   DEFAULT_PRICE_ORACLE_ACCOUNT: () => DEFAULT_PRICE_ORACLE_ACCOUNT,
@@ -3311,6 +3311,7 @@ __export(index_exports, {
   DEFAULT_REBALANCE_BAND_BPS: () => DEFAULT_REBALANCE_BAND_BPS,
   DEFAULT_SLIPPAGE_BPS: () => DEFAULT_SLIPPAGE_BPS,
   DEFAULT_TARGET_LOCAL_BPS: () => DEFAULT_TARGET_LOCAL_BPS,
+  DEFAULT_TARGET_LOCAL_USDC_TVL_BPS: () => DEFAULT_TARGET_LOCAL_USDC_TVL_BPS,
   DEFAULT_VAULT_ID: () => DEFAULT_VAULT_ID,
   DisableCircuitBreakerBuilder: () => DisableCircuitBreakerBuilder,
   DistributeIncentiveBuilder: () => DistributeIncentiveBuilder,
@@ -3351,7 +3352,7 @@ __export(index_exports, {
   ManagerRedepositAssetBuilder: () => ManagerRedepositAssetBuilder,
   ManagerWithdrawAssetBuilder: () => ManagerWithdrawAssetBuilder,
   MarginfiPositionProvider: () => MarginfiPositionProvider,
-  MintRegistry: () => import_common61.MintRegistry,
+  MintRegistry: () => import_common62.MintRegistry,
   MockYieldTracker: () => MockYieldTracker,
   NEST_API_BASE_URL: () => import_nest2.NEST_API_BASE_URL,
   NEST_RWA_SHARE_MINT: () => NEST_RWA_SHARE_MINT,
@@ -3412,6 +3413,7 @@ __export(index_exports, {
   VaultClient: () => VaultClient,
   VaultQuoteClient: () => VaultQuoteClient,
   VaultReallocationBuilder: () => VaultReallocationBuilder,
+  WITHDRAWABLE_RESERVE_FLOOR_BPS: () => WITHDRAWABLE_RESERVE_FLOOR_BPS,
   WithdrawalQueueService: () => WithdrawalQueueService,
   accountingUnitPriceToUsd: () => accountingUnitPriceToUsd,
   addCashflowUpdate: () => addCashflowUpdate,
@@ -3421,6 +3423,7 @@ __export(index_exports, {
   assertNoUnconfirmedYieldPayments: () => assertNoUnconfirmedYieldPayments,
   buildHoldingUpdate: () => buildHoldingUpdate,
   buildMarginfiWithdrawInteraction: () => buildMarginfiWithdrawInteraction,
+  buildNestDepositRequest: () => buildNestDepositRequest,
   buildNestWithdrawalRequest: () => buildNestWithdrawalRequest,
   buildUpdates: () => buildUpdates,
   candidateGrossNav: () => candidateGrossNav,
@@ -3435,6 +3438,7 @@ __export(index_exports, {
   createVaultClient: () => createVaultClient,
   createYieldPayment: () => createYieldPayment,
   dateToStr: () => dateToStr,
+  decodeNestDepositRequest: () => decodeNestDepositRequest,
   decodeNestWithdrawalRequest: () => decodeNestWithdrawalRequest,
   decodePendingConsensusSigners: () => decodePendingConsensusSigners,
   defaultKeypairPath: () => defaultKeypairPath,
@@ -3484,7 +3488,7 @@ __export(index_exports, {
   makeProvider: () => makeProvider,
   managerReconciliationStateKey: () => managerReconciliationStateKey,
   mintTokensTo: () => mintTokensTo,
-  mints: () => import_common61.mints,
+  mints: () => import_common62.mints,
   mostFrequent: () => mostFrequent,
   parseExternalLiquidityRefs: () => parseExternalLiquidityRefs,
   planRebalance: () => planRebalance,
@@ -17840,9 +17844,13 @@ async function simulateSquadsProposalExecution(args) {
   return value;
 }
 async function prepareVaultTransaction(args) {
-  const { connection, proposer, instructions: instructions2 } = args;
+  const { connection, proposer } = args;
+  let instructions2 = [...args.instructions];
+  const ephemeralKeys = args.ephemeralSignerKeys ?? [];
   const route = findSquadsWalletRoute(proposer, args.squadsRoutes ?? []);
   if (!route) {
+    if (ephemeralKeys.length)
+      throw new Error("Ephemeral signers require a Squads route");
     return {
       kind: "direct",
       transaction: new import_web324.Transaction().add(...instructions2),
@@ -17870,6 +17878,44 @@ async function prepareVaultTransaction(args) {
     );
   }
   const transactionIndex = BigInt(multisig.transactionIndex.toString()) + 1n;
+  if (ephemeralKeys.length > 255 || new Set(ephemeralKeys.map(String)).size !== ephemeralKeys.length) {
+    throw new Error("Invalid Squads ephemeral signer keys");
+  }
+  const [transactionPda] = squads.getTransactionPda({
+    multisigPda: route.multisigPda,
+    index: transactionIndex
+  });
+  const replacements = /* @__PURE__ */ new Map();
+  ephemeralKeys.forEach((key, index) => {
+    if (key.equals(proposer) || key.equals(route.vaultPda) || !instructions2.some(
+      (ix) => ix.keys.some((meta) => meta.isSigner && meta.pubkey.equals(key))
+    ) || instructions2.some(
+      (ix) => ix.programId.equals(key) || ix.data.includes(key.toBuffer())
+    )) {
+      throw new Error(
+        "Ephemeral signer must be a separate account-meta signer, never embedded in instruction data"
+      );
+    }
+    replacements.set(
+      key.toBase58(),
+      squads.getEphemeralSignerPda({
+        transactionPda,
+        ephemeralSignerIndex: index
+      })[0]
+    );
+  });
+  if (replacements.size) {
+    instructions2 = instructions2.map(
+      (ix) => new import_web324.TransactionInstruction({
+        programId: ix.programId,
+        data: ix.data,
+        keys: ix.keys.map((meta) => ({
+          ...meta,
+          pubkey: replacements.get(meta.pubkey.toBase58()) ?? meta.pubkey
+        }))
+      })
+    );
+  }
   const { blockhash } = await connection.getLatestBlockhash("confirmed");
   if (!args.skipSimulation) {
     await simulateSquadsProposalExecution({
@@ -17890,7 +17936,7 @@ async function prepareVaultTransaction(args) {
     transactionIndex,
     creator: proposer,
     vaultIndex: route.vaultIndex,
-    ephemeralSigners: 0,
+    ephemeralSigners: ephemeralKeys.length,
     transactionMessage,
     addressLookupTableAccounts: args.addressLookupTableAccounts,
     memo: route.memo
@@ -21730,6 +21776,7 @@ var import_common57 = __toESM(require_dist());
 var import_marginfi3 = __toESM(require_dist2());
 var DEFAULT_MIN_AMOUNT_UI = 1;
 var DEFAULT_TARGET_LOCAL_BPS = 50;
+var DEFAULT_TARGET_LOCAL_USDC_TVL_BPS = 150;
 var DEFAULT_REBALANCE_BAND_BPS = 2e3;
 var BPS_DENOMINATOR4 = 10000n;
 function toRawAmount(uiAmount, decimals) {
@@ -21773,11 +21820,12 @@ function planRebalance(params) {
     localAmount,
     externalAmount,
     targetLocalBps,
+    targetLocalAmount,
     rebalanceBandBps,
     minRaw
   } = params;
   const total = localAmount + externalAmount;
-  const targetLocal = total * BigInt(Math.round(targetLocalBps)) / BPS_DENOMINATOR4;
+  const targetLocal = targetLocalAmount ?? total * BigInt(Math.round(targetLocalBps)) / BPS_DENOMINATOR4;
   const band = targetLocal * BigInt(Math.round(rebalanceBandBps)) / BPS_DENOMINATOR4;
   const threshold = band > minRaw ? band : minRaw;
   if (localAmount > targetLocal) {
@@ -21805,6 +21853,7 @@ var ExternalLiquidityIntegrityService = class {
     const dryRun = opts.dryRun ?? false;
     const minAmountUi = opts.minAmountUi ?? DEFAULT_MIN_AMOUNT_UI;
     const targetLocalBps = opts.targetLocalBps ?? DEFAULT_TARGET_LOCAL_BPS;
+    const targetLocalUsdcTvlBps = opts.targetLocalUsdcTvlBps ?? DEFAULT_TARGET_LOCAL_USDC_TVL_BPS;
     const rebalanceBandBps = opts.rebalanceBandBps ?? DEFAULT_REBALANCE_BAND_BPS;
     if (dryRun) {
       log(
@@ -21812,7 +21861,12 @@ var ExternalLiquidityIntegrityService = class {
       );
     }
     log(`Minimum rebalance: ${minAmountUi} token(s) (~$${minAmountUi})`);
-    log(`Target local share: ${targetLocalBps / 100}% of each holding`);
+    log(
+      `Target local USDC: ${targetLocalUsdcTvlBps / 100}% of total vault TVL`
+    );
+    log(
+      `Target local share: ${targetLocalBps / 100}% of each non-USDC holding`
+    );
     log(
       `Rebalance band: ${rebalanceBandBps / 100}% of target (${targetLocalBps * (1 - rebalanceBandBps / 1e4) / 100}%\u2013${targetLocalBps * (1 + rebalanceBandBps / 1e4) / 100}% of holding)`
     );
@@ -21832,7 +21886,13 @@ var ExternalLiquidityIntegrityService = class {
         vaultState,
         hwManager,
         log,
-        { dryRun, minAmountUi, targetLocalBps, rebalanceBandBps }
+        {
+          dryRun,
+          minAmountUi,
+          targetLocalBps,
+          targetLocalUsdcTvlBps,
+          rebalanceBandBps
+        }
       );
       summary.vaultsProcessed++;
       summary.totalDeposited += result.deposited;
@@ -21850,6 +21910,7 @@ var ExternalLiquidityIntegrityService = class {
     const dryRun = opts.dryRun ?? false;
     const minAmountUi = opts.minAmountUi ?? DEFAULT_MIN_AMOUNT_UI;
     const targetLocalBps = opts.targetLocalBps ?? DEFAULT_TARGET_LOCAL_BPS;
+    const targetLocalUsdcTvlBps = opts.targetLocalUsdcTvlBps ?? DEFAULT_TARGET_LOCAL_USDC_TVL_BPS;
     const rebalanceBandBps = opts.rebalanceBandBps ?? DEFAULT_REBALANCE_BAND_BPS;
     const result = {
       vault,
@@ -21898,10 +21959,27 @@ var ExternalLiquidityIntegrityService = class {
         const externalAmount = toBigInt3(holding.externalAmount);
         const decimals = Number(holding.decimals ?? 0);
         const minRaw = toRawAmount(minAmountUi, decimals);
+        let targetLocalAmount;
+        if (mintAddress === import_common57.USDC_MINT) {
+          const tvl = toBigInt3(vaultState.accounting.tvl);
+          const price = toBigInt3(holding.price);
+          const stalenessThreshold = Number(toBigInt3(vaultState.config.priceStalenessThresholdSecs)) || DEFAULT_PRICE_STALENESS_THRESHOLD_SECS;
+          if (tvl <= 0n || price <= 0n || Math.floor(Date.now() / 1e3) - Number(toBigInt3(holding.lastUpdateTs)) > stalenessThreshold) {
+            log(
+              `Vault ${vault}: cannot size local USDC target without TVL and a fresh USDC price \u2014 skipping`
+            );
+            result.skipped++;
+            continue;
+          }
+          const numerator = tvl * BigInt(Math.round(targetLocalUsdcTvlBps)) * 10n ** BigInt(decimals);
+          const denominator = BPS_DENOMINATOR4 * price;
+          targetLocalAmount = (numerator + denominator - 1n) / denominator;
+        }
         const plan = planRebalance({
           localAmount,
           externalAmount,
           targetLocalBps,
+          targetLocalAmount,
           rebalanceBandBps,
           minRaw
         });
@@ -22052,6 +22130,7 @@ var import_jupiter2 = __toESM(require_dist4());
 var import_marginfi4 = __toESM(require_dist2());
 var IDLE_RESERVE_FLOOR_BPS = 400;
 var IDLE_RESERVE_TARGET_BPS = 500;
+var WITHDRAWABLE_RESERVE_FLOOR_BPS = 150;
 var DEFAULT_SLIPPAGE_BPS = 30;
 var DEFAULT_CU_PRICE_MICRO_LAMPORTS = 1e4;
 var DEFAULT_MAX_ACCOUNTS = 20;
@@ -22205,13 +22284,20 @@ var IdleLiquidityService = class {
       }
       localAmount = tokenAccount.amount;
     }
-    const data = vaultState.externalLiquidity[0]?.data;
-    if (!data || data.length < 40) {
-      throw new Error("Invalid external-liquidity slot 0");
+    const slotIndex = vaultState.externalLiquidity.findIndex(
+      (slot) => slot.data[0] === 1
+    );
+    if (slotIndex === -1) {
+      return {
+        localAmount,
+        marginfiAmount: 0n,
+        withdrawableMarginfiAmount: 0n,
+        slotIndex
+      };
     }
-    if (data[0] === 0) return { localAmount, marginfiAmount: 0n };
-    if (data[0] !== 1) {
-      throw new Error("External-liquidity slot 0 is not Marginfi");
+    const data = vaultState.externalLiquidity[slotIndex].data;
+    if (data.length < 40) {
+      throw new Error(`Invalid Project0 external-liquidity slot ${slotIndex}`);
     }
     const positionPk = new import_web334.PublicKey(new Uint8Array(data.slice(8, 40)));
     const positionInfo = await connection.getAccountInfo(
@@ -22220,7 +22306,7 @@ var IdleLiquidityService = class {
     );
     if (!positionInfo || !positionInfo.owner.equals(new import_web334.PublicKey(import_marginfi4.MARGINFI_PROGRAM_ID))) {
       throw new Error(
-        `Invalid Marginfi slot-0 account: ${positionPk.toBase58()}`
+        `Invalid Project0 slot-${slotIndex} account: ${positionPk.toBase58()}`
       );
     }
     const marginfi = await (0, import_marginfi4.createMarginfiReadClient)(
@@ -22229,9 +22315,10 @@ var IdleLiquidityService = class {
     );
     const position = await import_marginfi_client_v2.MarginfiAccountWrapper.fetch(positionPk, marginfi);
     if (!position.authority.equals(vaultPk)) {
-      throw new Error("Marginfi slot-0 authority is not the vault");
+      throw new Error(`Project0 slot-${slotIndex} authority is not the vault`);
     }
     let marginfiAmount = 0n;
+    let withdrawableMarginfiAmount = 0n;
     for (const balance of position.activeBalances) {
       const bank = marginfi.getBankByPk(balance.bankPk);
       if (!bank) {
@@ -22240,11 +22327,22 @@ var IdleLiquidityService = class {
         );
       }
       if (!bank.mint.equals(usdcMint)) continue;
-      marginfiAmount += BigInt(
+      const deposited = BigInt(
         balance.computeQuantity(bank).assets.toFixed(0, 1)
       );
+      const available = BigInt(
+        bank.getTotalAssetQuantity().minus(bank.getTotalLiabilityQuantity()).toFixed(0, 1)
+      );
+      const bankLiquidity = available > 0n ? available : 0n;
+      marginfiAmount += deposited;
+      withdrawableMarginfiAmount += deposited < bankLiquidity ? deposited : bankLiquidity;
     }
-    return { localAmount, marginfiAmount };
+    return {
+      localAmount,
+      marginfiAmount,
+      withdrawableMarginfiAmount,
+      slotIndex
+    };
   }
   /**
    * Decide whether a top-up is warranted. Returns either a terminal `result`
@@ -22259,6 +22357,8 @@ var IdleLiquidityService = class {
       tvl,
       idleValue: 0n,
       idleBps: 0,
+      withdrawableValue: 0n,
+      withdrawableBps: 0,
       shortfallUsdc: 0n,
       pstSpent: 0n,
       usdcReceived: 0n
@@ -22303,7 +22403,16 @@ var IdleLiquidityService = class {
     const idleAmount = balances.localAmount + balances.marginfiAmount;
     const idleValue = holdingValue2(usdc, idleAmount);
     const idleBps = Number(idleValue * 10000n / tvl);
-    const base = { ...empty, idleValue, idleBps };
+    const withdrawableAmount = balances.localAmount + balances.withdrawableMarginfiAmount;
+    const withdrawableValue = holdingValue2(usdc, withdrawableAmount);
+    const withdrawableBps = Number(withdrawableValue * 10000n / tvl);
+    const base = {
+      ...empty,
+      idleValue,
+      idleBps,
+      withdrawableValue,
+      withdrawableBps
+    };
     log(
       `Vault ${vault}: idle USDC ${formatUi2(
         idleAmount,
@@ -22311,13 +22420,21 @@ var IdleLiquidityService = class {
       )} (vault token account ${formatUi2(
         balances.localAmount,
         usdc.decimals
-      )} + Marginfi slot 0 ${formatUi2(
+      )} + Project0 slot ${balances.slotIndex} ${formatUi2(
         balances.marginfiAmount,
         usdc.decimals
       )}) = ${idleBps}bps of TVL (floor ${IDLE_RESERVE_FLOOR_BPS}bps, target ${IDLE_RESERVE_TARGET_BPS}bps)`
     );
-    if (idleBps >= IDLE_RESERVE_FLOOR_BPS) {
-      const reason = `idle USDC ${idleBps}bps is at or above the ${IDLE_RESERVE_FLOOR_BPS}bps floor`;
+    log(
+      `Vault ${vault}: withdrawable USDC ${formatUi2(
+        withdrawableAmount,
+        usdc.decimals
+      )} = ${withdrawableBps}bps of TVL (floor ${WITHDRAWABLE_RESERVE_FLOOR_BPS}bps)`
+    );
+    const idleBelowFloor = idleBps < IDLE_RESERVE_FLOOR_BPS;
+    const withdrawableBelowFloor = withdrawableBps < WITHDRAWABLE_RESERVE_FLOOR_BPS;
+    if (!idleBelowFloor && !withdrawableBelowFloor) {
+      const reason = `idle USDC ${idleBps}bps and withdrawable USDC ${withdrawableBps}bps are at or above their floors`;
       return { result: { ...base, status: "above-floor", reason } };
     }
     for (const [name, holding] of [
@@ -22330,8 +22447,11 @@ var IdleLiquidityService = class {
         return { result: { ...base, status: "rebalance-cooldown", reason } };
       }
     }
-    const targetValue = tvl * BigInt(IDLE_RESERVE_TARGET_BPS) / 10000n;
-    let shortfallValue = targetValue - idleValue;
+    const targetValue = (tvl * BigInt(IDLE_RESERVE_TARGET_BPS) + 9999n) / 10000n;
+    const withdrawableTargetValue = (tvl * BigInt(WITHDRAWABLE_RESERVE_FLOOR_BPS) + 9999n) / 10000n;
+    const idleShortfall = idleBelowFloor ? targetValue - idleValue : 0n;
+    const withdrawableShortfall = withdrawableBelowFloor ? withdrawableTargetValue - withdrawableValue : 0n;
+    let shortfallValue = idleShortfall > withdrawableShortfall ? idleShortfall : withdrawableShortfall;
     const allowance = this.remainingRebalanceAllowance(vaultState, tvl, now);
     if (allowance !== void 0 && allowance < shortfallValue) {
       if (allowance === 0n) {
@@ -22344,7 +22464,7 @@ var IdleLiquidityService = class {
       );
       shortfallValue = allowance;
     }
-    const shortfallUsdc = shortfallValue * 10n ** BigInt(usdc.decimals) / usdc.price;
+    const shortfallUsdc = (shortfallValue * 10n ** BigInt(usdc.decimals) + usdc.price - 1n) / usdc.price;
     if (shortfallUsdc <= 0n) {
       const reason = "computed shortfall rounds to zero";
       return { result: { ...base, status: "above-floor", reason } };
@@ -22841,8 +22961,132 @@ async function decodeNestWithdrawalRequest(args) {
   };
 }
 
-// src/index.ts
+// src/services/nestDepositService.ts
+var import_kit19 = require("@solana/kit");
+var import_spl_token23 = require("@solana/spl-token");
+var import_web337 = require("@solana/web3.js");
 var import_common61 = __toESM(require_dist());
+var import_nest5 = __toESM(require_dist3());
+var Usdc = new import_web337.PublicKey("EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v");
+var Messenger = new import_web337.PublicKey("CCTPV2vPZJS2u2BBsUoscuikbYjnpFmbFsvVuJdgUMQe");
+var Transmitter = new import_web337.PublicKey(
+  "CCTPV2Sm4AdWt5296sk4P66VBZ7bEhcARwFaaS9YPbeC"
+);
+var Router = Buffer.from(
+  "0000000000000000000000007de01896d36bea9cf072ac64e41685418941d8be",
+  "hex"
+);
+var Composer = Buffer.from("908dcb5531691c2124c54e30bb645cf11647090d", "hex");
+var BurnWithHook = Buffer.from([111, 245, 62, 131, 204, 108, 223, 155]);
+var PerenaAssetId = Buffer.from(
+  "355750bed2d05a1eb92ab578335cc3ea6d572dd5f57a086088c68667f11e50d2",
+  "hex"
+);
+var MintAndSend = Buffer.from("fe030ec4", "hex");
+async function buildNestDepositRequest(args) {
+  if (args.rawAmountUsdc <= 0n || args.rawAmountUsdc > BigInt(Number.MAX_SAFE_INTEGER)) {
+    throw new Error(
+      "Nest deposit must be a positive, safely representable USDC base-unit amount"
+    );
+  }
+  const options = args.apiOptions ?? {};
+  const response = await (options.fetchFn ?? fetch)(
+    `${(options.baseUrl ?? import_nest5.NEST_API_BASE_URL).replace(
+      /\/$/,
+      ""
+    )}/solana/nest/mint/build-tx`,
+    {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      signal: options.signal,
+      body: JSON.stringify({
+        rawAmountUsdc: Number(args.rawAmountUsdc),
+        receiver: args.owner.toBase58(),
+        nestVaultSlug: NEST_VAULT_SLUG,
+        finality: "standard"
+      })
+    }
+  );
+  const payload = await response.json().catch(() => null);
+  if (!response.ok)
+    throw new Error(
+      `Nest deposit API (${response.status}): ${typeof payload?.error === "string" ? payload.error : response.statusText}`
+    );
+  if (typeof payload?.data?.txBase64 !== "string")
+    throw new Error("Nest API returned no deposit transaction");
+  return decodeNestDepositRequest({ ...args, txBase64: payload.data.txBase64 });
+}
+async function decodeNestDepositRequest(args) {
+  if (args.rawAmountUsdc <= 0n || args.rawAmountUsdc > BigInt(Number.MAX_SAFE_INTEGER)) {
+    throw new Error(
+      "Nest deposit must be a positive, safely representable USDC base-unit amount"
+    );
+  }
+  const message2 = import_web337.VersionedTransaction.deserialize(
+    Buffer.from(args.txBase64, "base64")
+  ).message;
+  if (!message2.staticAccountKeys[0].equals(args.owner))
+    throw new Error("Nest deposit payer must be the manager");
+  const tables = await Promise.all(
+    message2.addressTableLookups.map(async (lookup) => {
+      const { value } = await args.connection.getAddressLookupTable(
+        lookup.accountKey
+      );
+      if (!value)
+        throw new Error(`Nest lookup table not found: ${lookup.accountKey}`);
+      return value;
+    })
+  );
+  const instructions2 = import_web337.TransactionMessage.decompile(message2, {
+    addressLookupTableAccounts: tables
+  }).instructions;
+  const shareMint = new import_web337.PublicKey(NEST_RWA_SHARE_MINT);
+  const shareAta = (0, import_spl_token23.getAssociatedTokenAddressSync)(shareMint, args.owner, true);
+  const usdcAta = (0, import_spl_token23.getAssociatedTokenAddressSync)(Usdc, args.owner, true);
+  let burn;
+  for (const ix of instructions2) {
+    if (ix.programId.equals(import_web337.ComputeBudgetProgram.programId)) continue;
+    if (ix.programId.equals(import_spl_token23.ASSOCIATED_TOKEN_PROGRAM_ID)) {
+      if (ix.data.length !== 1 || ix.data[0] !== 1 || !ix.keys[0]?.pubkey.equals(args.owner) || !ix.keys[1]?.pubkey.equals(shareAta) || !ix.keys[2]?.pubkey.equals(args.owner) || !ix.keys[3]?.pubkey.equals(shareMint) || !ix.keys[4]?.pubkey.equals(import_web337.SystemProgram.programId) || !ix.keys[5]?.pubkey.equals(import_spl_token23.TOKEN_PROGRAM_ID))
+        throw new Error("Unexpected Nest deposit token account creation");
+      continue;
+    }
+    const d = ix.data;
+    const matches = (index, key) => ix.keys[index]?.pubkey.equals(key);
+    if (burn || !ix.programId.equals(Messenger) || ix.keys.length !== 18 || d.length < 316 || !d.subarray(0, 8).equals(BurnWithHook) || d.readBigUInt64LE(8) !== args.rawAmountUsdc || d.readUInt32LE(16) !== 22 || !d.subarray(20, 52).equals(Router) || !d.subarray(52, 84).equals(Router) || d.readBigUInt64LE(84) !== 0n || d.readUInt32LE(92) !== 2e3 || d.readUInt32LE(96) !== d.length - 100 || !d.subarray(100, 120).equals(Composer) || !d.subarray(120, 124).equals(MintAndSend) || !d.subarray(124, 156).equals(PerenaAssetId) || BigInt(`0x${d.subarray(156, 188).toString("hex")}`) !== args.rawAmountUsdc || BigInt(`0x${d.subarray(188, 220).toString("hex")}`) !== 128n || !d.subarray(220, 252).equals(Buffer.concat([Buffer.alloc(12), Composer])) || BigInt(`0x${d.subarray(252, 284).toString("hex")}`) !== 30168n || !d.subarray(284, 316).equals(args.owner.toBuffer()) || !matches(0, args.owner) || !matches(3, usdcAta) || !matches(10, Usdc) || !matches(12, Transmitter) || !matches(13, Messenger) || !matches(14, import_spl_token23.TOKEN_PROGRAM_ID) || !matches(15, import_web337.SystemProgram.programId) || !matches(17, Messenger) || ![0, 1, 11].every((index) => ix.keys[index].isSigner) || ix.keys.some(
+      (meta, index) => meta.isSigner && ![0, 1, 11].includes(index)
+    )) {
+      throw new Error(
+        "Unexpected Nest deposit instruction, amount, or recipient"
+      );
+    }
+    burn = ix;
+  }
+  if (!burn) throw new Error("Nest deposit must contain one CCTP burn");
+  const eventKey = burn.keys[11].pubkey;
+  if (eventKey.equals(args.owner) || burn.keys.some(
+    (meta, index) => index !== 11 && meta.pubkey.equals(eventKey)
+  )) {
+    throw new Error("Nest deposit event signer must be a separate account");
+  }
+  burn.keys[1] = { pubkey: args.owner, isSigner: true, isWritable: true };
+  return {
+    instructions: [
+      (0, import_spl_token23.createAssociatedTokenAccountIdempotentInstruction)(
+        args.owner,
+        shareAta,
+        args.owner,
+        shareMint
+      ),
+      burn
+    ].map(import_common61.toKitInstruction),
+    lookupTables: tables.map((table) => (0, import_kit19.address)(table.key.toBase58())),
+    ephemeralSignerKeys: [eventKey]
+  };
+}
+
+// src/index.ts
+var import_common62 = __toESM(require_dist());
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ASSET_DECIMALS,
@@ -22880,6 +23124,7 @@ var import_common61 = __toESM(require_dist());
   DEFAULT_REBALANCE_BAND_BPS,
   DEFAULT_SLIPPAGE_BPS,
   DEFAULT_TARGET_LOCAL_BPS,
+  DEFAULT_TARGET_LOCAL_USDC_TVL_BPS,
   DEFAULT_VAULT_ID,
   DisableCircuitBreakerBuilder,
   DistributeIncentiveBuilder,
@@ -22981,6 +23226,7 @@ var import_common61 = __toESM(require_dist());
   VaultClient,
   VaultQuoteClient,
   VaultReallocationBuilder,
+  WITHDRAWABLE_RESERVE_FLOOR_BPS,
   WithdrawalQueueService,
   accountingUnitPriceToUsd,
   addCashflowUpdate,
@@ -22990,6 +23236,7 @@ var import_common61 = __toESM(require_dist());
   assertNoUnconfirmedYieldPayments,
   buildHoldingUpdate,
   buildMarginfiWithdrawInteraction,
+  buildNestDepositRequest,
   buildNestWithdrawalRequest,
   buildUpdates,
   candidateGrossNav,
@@ -23004,6 +23251,7 @@ var import_common61 = __toESM(require_dist());
   createVaultClient,
   createYieldPayment,
   dateToStr,
+  decodeNestDepositRequest,
   decodeNestWithdrawalRequest,
   decodePendingConsensusSigners,
   defaultKeypairPath,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@perena/vault-sdk",
-  "version": "1.0.49",
+  "version": "1.0.50",
   "description": "Vault program helpers for Bankineco integrations.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",