@perena/vault-sdk 1.0.63 → 1.0.65

package/dist/index.d.ts

@@ -14424,9 +14424,9 @@ interface ConsensusOracleDeps {
     priceSource: PriceSource;
     /** Optional; omitted ⇒ no live-LP balances are folded in. */
     externalPositions?: ExternalPositionProvider;
-    /** Optional NAV-drop recovery source; configured by the live runtime. */
+    /** Optional manager base balances, included on every pass by the live runtime. */
     managerWalletBalances?: ManagerWalletBalanceSource;
-    /** MPC base tokens and Marginfi deposits, subject to the same NAV gate. */
+    /** MPC base tokens and Marginfi deposits, included independently of pending Nest. */
     mpcWalletBalances?: MpcWalletBalanceSource;
     /** Optional; omitted ⇒ no yield accrual is folded in. */
     yieldTracker?: YieldTracker;
@@ -14457,13 +14457,13 @@ interface HoldingUpdatePreview {
     trackedPrincipalAmount: bigint;
     /** Complete tracked value, including NAV accounts (base units). */
     trackedValueAmount: bigint;
-    /** Manager base tokens admitted by the ±0.05% NAV reconciliation (base units). */
+    /** Observed manager base tokens (base units), independent of pending Nest. */
     managerWalletAmount?: bigint;
-    /** MPC base tokens admitted by the same reconciliation (base units). */
+    /** Observed MPC base tokens (base units). */
     mpcWalletAmount?: bigint;
-    /** MPC Marginfi base-asset deposits admitted by reconciliation (base units). */
+    /** Observed MPC Marginfi base-asset deposits (base units). */
     mpcMarginfiAmount?: bigint;
-    /** Withdrawn nPERENA retained until the wallet NAV rule matches proceeds. */
+    /** Withdrawn nPERENA retained until wallet USDC matches its value within ±5%. */
     pendingNestAmount?: bigint;
     /** LP + tracked value + pending Nest + manager tokens + MPC tokens/deposits. */
     externalAmount: bigint;
@@ -14861,16 +14861,23 @@ interface RefreshLiveOraclePricesParams {
 /** Returns true when at least one price was actually refreshed on-chain. */
 declare function refreshLiveOraclePrices({ oracle, signer, vault, vaultState, nowSecs, log, dryRun, }: RefreshLiveOraclePricesParams): Promise<boolean>;
 
-/** A NAV drop of at least 0.1% triggers the manager-wallet lookup. */
+/** @deprecated Wallet balances are now read on every pass. */
 declare const MANAGER_WALLET_NAV_DROP_TRIGGER_BPS = 10n;
-/** The adjusted NAV must be within ±0.05%, including both boundaries. */
+/** @deprecated Total NAV no longer gates wallet inclusion or Nest replacement. */
 declare const MANAGER_WALLET_NAV_TOLERANCE_BPS = 5n;
+/** Wallet USDC must match pending Nest value within ±5%, inclusively. */
+declare const NEST_WITHDRAWAL_MATCH_TOLERANCE_BPS = 500n;
+/** Maximum per-holding external-value drift while preparing a report. */
+declare const RECONCILIATION_EXTERNAL_VALUE_TOLERANCE_BPS = 3n;
 /** Previous physical NAV, including banked APY, adjusted for recorded cash flows. */
 declare function previousPhysicalNav(state: DecodedVault): bigint;
 /** Same per-holding integer valuation as the program's gross_nav_from_holdings. */
 declare function candidateGrossNav(state: DecodedVault, updates: readonly HoldingUpdatePreview[]): bigint;
 interface ManagerWalletReconciliation {
+    /** True only when wallet USDC replaces the carried pending Nest claim. */
     accepted: boolean;
+    /** Even zero balances must be rechecked before publishing a live report. */
+    walletBalancesChecked: boolean;
     updates: HoldingUpdatePreview[];
     previousNav: bigint;
     candidateNav: bigint;
@@ -14888,8 +14895,18 @@ declare function reconcileManagerWalletBalances({ vault, vaultState, updates, so
     mpcSource?: MpcWalletBalanceSource;
     log?: (message: string) => void;
 }): Promise<ManagerWalletReconciliation>;
-/** The vault fields whose changes would invalidate a wallet reconciliation. */
+/** Exempt only the matched Nest-to-USDC conversion from the per-asset guard. */
+declare function walletReconciliationGuardUpdates(state: DecodedVault, reconciliation: ManagerWalletReconciliation): HoldingUpdatePreview[];
+/** Holding identities and local token balances must still match exactly. */
 declare function managerReconciliationStateKey(state: DecodedVault): string;
+/**
+ * Capture immutable external amount × price numerators, optionally overlaying
+ * the report. Decimal scales cancel in a per-holding comparison; keeping the
+ * numerators avoids rounding away changes in small or high-precision holdings.
+ */
+declare function reconciliationExternalValues(state: DecodedVault, updates?: readonly HoldingUpdatePreview[]): bigint[];
+/** Inclusive ±3 bps against each initial value; zero must remain zero. */
+declare function assertReconciliationExternalValues(initial: readonly bigint[], current: readonly bigint[], errorPrefix: string): void;
 
 declare function gatherPricingInputs(deps: ConsensusOracleDeps, target: ConsensusOracleTarget, vaultState: DecodedVault, reportableHoldings: ConsensusHoldingEntry[], log?: (msg: string) => void): Promise<VaultPricingInputs>;
 /**
@@ -14970,8 +14987,9 @@ declare function discoverVaultsForSigner(client: VaultClient, signer: Keypair, o
 
 /**
  * Fail closed while any configured yield account has an unsettled payment.
- * Confirmed payments reduce tracked value; the oracle does not add the payout's
- * destination balance to the reported external amount.
+ * Confirmed payments reduce tracked value. Proceeds in the manager or configured
+ * MPC wallet are counted separately by wallet reconciliation; arbitrary payout
+ * destinations are not discovered from payment records.
  */
 declare function assertNoUnconfirmedYieldPayments(yieldTracker: YieldTracker | undefined, target: ConsensusOracleTarget): Promise<void>;
 /**
@@ -15310,7 +15328,7 @@ declare function formatSettlementSimulation(simulation: SettlementSimulation): s
 
 interface LiveConsensusOracleDepsOptions {
     log?: (msg: string) => void;
-    /** @deprecated Ignored. The NAV-gated manager-wallet check is always enabled. */
+    /** @deprecated Ignored. Manager-wallet balances are always included. */
     rpcOnly?: boolean;
     includeExternalPositions?: boolean;
 }
@@ -15321,7 +15339,7 @@ interface RunLiveConsensusOracleOptions extends RunOptions {
     rpcUrl?: string;
     /** Override the vault program id. Defaults to the environment's configured program. */
     programId?: Address;
-    /** @deprecated Ignored. The NAV-gated manager-wallet check is always enabled. */
+    /** @deprecated Ignored. Manager-wallet balances are always included. */
     rpcOnly?: boolean;
     /** Include live Kamino/Marginfi positions in external amount updates. Defaults to true. */
     includeExternalPositions?: boolean;
@@ -15771,4 +15789,4 @@ declare function collectVaultLookupTableAccounts(client: VaultClient, vault: Add
     extraAccounts?: Address[];
 }): Promise<Address[]>;
 
-export { ASSET_DECIMALS, ASSET_REBALANCE_COOLDOWN_SECS, type AccountBalanceResponse, AccountClient, type AccountYieldResponse, ActivateCircuitBreakerBuilder, type ActivateCircuitBreakerIxArgs, type ActivateCircuitBreakerTxArgs, type AddAprCashflowUpdateParams, type AddCashflowUpdateParams, type AddIncentiveRecipientArgs, AddIncentiveRecipientBuilder, type AddIncentiveRecipientIxArgs, AddIncentiveRecipientV3Builder, type AddIncentiveRecipientV3IxArgs, type AddIncentiveRecipientV3TxArgs, type AddNavCashflowUpdateParams, type AprAccountBalanceResponse, type AprAccountYieldResponse, type AssetPriceOracleConfigIxArgs, type AssetPriceOracleConfigTxArgs, type AssetPriceRefreshTarget, type AssetRefreshResult, type AssetType, BALANCE_CHANGE_BASELINE_MAX_AGE_SECS, type Bankineco, type BasicAuthCredentials, type Bigintish, type BuildMarginfiWithdrawInteractionArgs, CONSENSUS_ORACLE_VARIANT, type CancelIncentiveProposalArgs, CancelIncentiveProposalBuilder, CancelJuniorTrancheWithdrawBuilder, type CancelJuniorTrancheWithdrawIxArgs, type CancelJuniorTrancheWithdrawTxArgs, ClaimIncentiveBuilder, type ClaimIncentiveIxArgs, type ClaimIncentiveTxArgs, ClaimIncentiveV3Builder, type ClaimIncentiveV3IxArgs, type ClaimIncentiveV3TxArgs, type Clock, type CollectSamplesOptions, type ConsensusAssetUpdate, type ConsensusHoldingEntry, type ConsensusHoldingSimulation, type ConsensusOracleDeps, type ConsensusOracleHoldingConfig, ConsensusOracleService, type ConsensusOracleTarget, CrankNavBuilder, type CrankNavIxArgs, type CrankNavTxArgs, CrankPerformanceFeesBuilder, type CrankPerformanceFeesIxArgs, type CrankPerformanceFeesTxArgs, type CreateAccountParams, CreateAssetHoldingBuilder, type CreateAssetHoldingIxArgs, type CreateAssetHoldingTxArgs, CreateIncentiveBuilder, type CreateIncentiveIxArgs, type CreateIncentiveTxArgs, CreateIncentiveV3Builder, type CreateIncentiveV3IxArgs, type CreateIncentiveV3TxArgs, type CreateTokenMintIxs, CreateTrancheStateBuilder, type CreateTrancheStateIxArgs, type CreateTrancheStateTxArgs, CreateVaultBuilder, type CreateVaultClientOptions, type CreateVaultIxArgs, type CreateVaultParams, type CreateVaultTxArgs, type CreateYieldPaymentParams, DEFAULT_CU_PRICE_MICRO_LAMPORTS, DEFAULT_EXTERNAL_WEIGHT_BAND_BPS, DEFAULT_JUNIOR_EARLY_UNSTAKE_FEE_BPS, DEFAULT_JUNIOR_STANDARD_UNSTAKE_FEE_BPS, DEFAULT_JUNIOR_WITHDRAWAL_LOCKUP_SECS, DEFAULT_MARGINFI_WEIGHT_BPS, DEFAULT_MAX_ACCEPTABLE_APY_BPS, DEFAULT_MINTS, DEFAULT_MIN_AMOUNT_UI, DEFAULT_ORACLE_STALENESS_THRESHOLD_SECS, DEFAULT_PRICE_ORACLE_ACCOUNT, DEFAULT_PRICE_STALENESS_SECS, DEFAULT_PRICE_STALENESS_THRESHOLD_SECS, DEFAULT_REBALANCE_BAND_BPS, DEFAULT_SLIPPAGE_BPS, DEFAULT_TARGET_LOCAL_BPS, DEFAULT_TARGET_LOCAL_USDC_TVL_BPS, DEFAULT_VAULT_ID, type DecodedHolding, type DecodedVault, type DecodedVaultTrancheState, type DeleteAccountParams, DepositCuratorFeesBuilder, type DepositCuratorFeesIxArgs, type DepositCuratorFeesTxArgs, DisableCircuitBreakerBuilder, type DisableCircuitBreakerIxArgs, type DisableCircuitBreakerTxArgs, DistributeIncentiveBuilder, type DistributeIncentiveIxArgs, type DistributeIncentiveTxArgs, DistributeIncentiveV3Builder, type DistributeIncentiveV3IxArgs, type DistributeIncentiveV3TxArgs, EXTERNAL_POSITION_SAMPLES, type EvmCallArg, type EvmContractCall, type EvmContractNavPriceConfig, ExecuteDepositBuilder, type ExecuteDepositIxArgs, type ExecuteDepositTxArgs, ExecuteShareSwapBuilder, type ExecuteShareSwapIxArgs, type ExecuteShareSwapTxArgs, ExecuteTrancheDepositBuilder, type ExecuteTrancheDepositIxArgs, type ExecuteTrancheDepositTxArgs, ExecuteTrancheWithdrawBuilder, type ExecuteTrancheWithdrawIxArgs, type ExecuteTrancheWithdrawTxArgs, ExecuteWithdrawBuilder, type ExecuteWithdrawIxArgs, type ExecuteWithdrawTxArgs, type ExternalLiquidityIntegrityOptions, type ExternalLiquidityIntegrityResult, ExternalLiquidityIntegrityService, type ExternalLiquidityIntegritySummary, type ExternalLiquiditySlot, type ExternalLiquiditySourceArgs, type ExternalPosition, type ExternalPositionContext, type ExternalPositionProvider, type ExternalPositionRef, ExternalPositionRegistry, FEE_VAULT_CACHE_CATEGORY, type FeeVaultAccountData, type FetchNestTokenPriceOptions, FulfillJuniorTrancheWithdrawBuilder, type FulfillJuniorTrancheWithdrawIxArgs, type FulfillJuniorTrancheWithdrawTxArgs, type FulfillSummary, type HoldingNavContribution, type HoldingUpdatePreview, type HttpJsonNavPriceConfig, IDL, IDLE_RESERVE_FLOOR_BPS, IDLE_RESERVE_TARGET_BPS, type IdleLiquidityOptions, type IdleLiquidityResult, IdleLiquidityService, type IdleLiquidityStatus, type IncentiveRecipient, type IncentiveTotals, type IncentiveUsdUpdateArgs, type IncentiveV3OracleState, type IncentiveV3Recipient, type IncentiveV3Totals, InitializeVaultRolesBuilder, type InitializeVaultRolesIxArgs, type InitializeVaultRolesTxArgs, type JuniorWithdrawalMode, JupiterPriceSource, type JupiterPriceSourceOptions, JupiterSwapBuilder, type JupiterSwapIxArgs, type JupiterSwapTxArgs, KaminoLendPositionProvider, KaminoPositionProvider, LIVE_ORACLE_VARIANTS, LIVE_PRICE_REFRESH_INTERVAL_SECS, LOCAL_PROTOCOL_ADMIN, LargeBalanceChangeError, type LargeBalanceChangeViolation, type LiveConsensusOracleDepsOptions, LivePriceSource, type LivePriceSourceOptions, MANAGER_WALLET_NAV_DROP_TRIGGER_BPS, MANAGER_WALLET_NAV_TOLERANCE_BPS, MAX_APY_ANCHOR_WINDOW_SECS, MAX_APY_PREVIOUS_ANCHOR_AGE_SECS, MAX_BALANCE_CHANGE_BPS, MAX_CONSENSUS_SIGNERS, MAX_INCENTIVE_RECIPIENTS, MAX_INCENTIVE_REPORT_TTL, MAX_LUT_ADDRESSES, MAX_MANAGER_WITHDRAW_DESTINATIONS, MAX_ORACLE_IMPLIED_APY_BPS, MAX_PRICE_STALENESS_THRESHOLD_SECS, MIN_EXTERNAL_POSITION_SAMPLES, ManagerRedepositAssetBuilder, type ManagerRedepositAssetIxArgs, type ManagerRedepositAssetTxArgs, type ManagerWalletBalanceSource, type ManagerWalletReconciliation, ManagerWithdrawAssetBuilder, type ManagerWithdrawAssetIxArgs, type ManagerWithdrawAssetTxArgs, MarginfiPositionProvider, type MaxApyAnchorSnapshot, type MintConfig, type MintIdentifier, type MintInfo, MintRegistry, type MintRegistryOptions, type MockYieldAccountConfig, MockYieldTracker, type MockYieldTrackerOptions, type MpcWalletBalanceSource, type MpcWalletBalances, type MpcWalletConfig, NEST_API_BASE_URL, NEST_RWA_SHARE_MINT, NEST_VAULT_SLUG, type NavAccountBalanceResponse, type NavAccountValueResponse, type NavCrankBlocker, type NavCrankBlockerReason, type NavCrankReadiness, type NavCrankResult, type NavPriceConfig, type NavPricePreview, type NavPriceProvenance, type NavYieldAccount, NestApiError, type NestApiOptions, type NestDepositPlan, NestPriceSource, type NestPriceSourceOptions, type NestRedemptionQuote, type NestRedemptionStatus, ORACLE_ENTRIES_OFFSET, ORACLE_ENTRY_SIZE, ORACLE_SETTLED_NAV_TS_OFFSET, OracleService, PRICE_ORACLE_TYPES_BY_INDEX, PROGRAM_FEE_EXEMPT_OWNER_WHITELIST, PROTOCOL_ADMIN, PROTOCOL_FEE_RECIPIENT, PST_TO_USDC_MAX_SLIPPAGE_BPS, PdaClient, type PendingConsensusSignerSet, type PreparedDirectTransaction, type PreparedSquadsTransaction, type PreparedVaultTransaction, type PreviewNavPriceParams, type PriceOracleTypeArgs, type PriceSource, ProtocolInteractionBuilder, type ProtocolInteractionIxArgs, type ProtocolInteractionTxArgs, type QuoteFeeUnit, REPORTABLE_ORACLE_VARIANTS, type RealizedApySimulation, type RefreshLiveOraclePricesParams, RemoveAssetHoldingBuilder, type RemoveAssetHoldingIxArgs, type RemoveAssetHoldingTxArgs, ReportIncentiveV3Builder, type ReportIncentiveV3IxArgs, type ReportIncentiveV3TxArgs, RequestJuniorTrancheWithdrawBuilder, type RequestJuniorTrancheWithdrawIxArgs, type RequestJuniorTrancheWithdrawTxArgs, type ResolveExternalWithdrawArgs, type ResolvedExternalWithdraw, type ResolvedSquadsWalletRoute, type RollingLimitConfig, type RollingRebalanceLimitConfig, RpcManagerWalletBalanceSource, RpcMpcWalletBalanceSource, type RunLiveConsensusOracleOptions, type RunOptions, type RunSummary, SHARE_DECIMALS, SYSTEM_PROGRAM, SetAssetPriceOracleBuilder, type SetAssetPriceOracleIxArgs, type SetAssetPriceOracleTxArgs, SetExternalLiquidityBuilder, type SetExternalLiquidityIxArgs, type SetExternalLiquidityTxArgs, type SetIncentiveLimitsArgs, SetIncentiveLimitsBuilder, type SetIncentiveLimitsV3Args, SetIncentiveLimitsV3Builder, SetManagerWithdrawDestinationBuilder, type SetManagerWithdrawDestinationIxArgs, type SetManagerWithdrawDestinationTxArgs, SetProtocolFeeBuilder, type SetProtocolFeeIxArgs, type SetProtocolFeeTxArgs, SetVaultConfigBuilder, type SetVaultConfigIxArgs, type SetVaultConfigTxArgs, SettleIncentiveV3Builder, type SettleIncentiveV3IxArgs, type SettleIncentiveV3TxArgs, type SettleVaultParams, type SettleVaultResult, type SettlementSimulation, type SettlementSimulationSnapshot, type SimulateDryRunSettlementParams, type SimulateSettlementArgs, type SimulatedShareClass, SquadsProposalExecutionSimulationError, type SquadsProposalUpload, type SquadsWalletRouteConfig, type StaleBalanceChangeBypass, StaticPositionProvider, SubmitIncentiveBuilder, type SubmitIncentiveIxArgs, type SubmitIncentiveTxArgs, TOKEN_PROGRAM, TOKEN_PROGRAM_ID, type TimelockSettlementKind, type TimelockSettlementOptions, type TimelockSettlementRecord, TimelockSettlementService, type TimelockSettlementSummary, type TrackedAccountValue, type TrancheKindArgs, type TransactionBuilder, TransactionClient, USDC_MINT, USD_STAR_JUNIOR_MINT, USD_STAR_MINT, USD_STAR_PRINCIPAL_MINT, type UpdateAccountParams, UpdateAssetPriceBuilder, type UpdateAssetPriceIxArgs, type UpdateAssetPriceTxArgs, UpdateConsensusOracleBuilder, type UpdateConsensusOracleIxArgs, type UpdateConsensusOracleTxArgs, UpdateConsensusSignersBuilder, type UpdateConsensusSignersIxArgs, type UpdateConsensusSignersTxArgs, type UpdateDynamicAprParams, UpdateTrancheConfigBuilder, type UpdateTrancheConfigIxArgs, type UpdateTrancheConfigTxArgs, VAULT_CACHE_CATEGORY, VAULT_CREATOR_WHITELIST, VAULT_ENVIRONMENTS, VAULT_LOOKUP_TABLES, VAULT_ORACLE_CACHE_CATEGORY, VAULT_PROGRAM_ID, VAULT_PROGRAM_IDS, VAULT_PROGRAM_PUBLIC_KEY, VAULT_ROLE_UPDATE_TIMELOCK_SECS, VAULT_TRANCHE_STATE_CACHE_CATEGORY, VAULT_TRANCHE_WITHDRAWAL_QUEUE_CACHE_CATEGORY, type Vault, type VaultAccountData, VaultBuilderBase, type VaultBuilderContext, type VaultCacheInvalidation, VaultClient, type VaultClientBundle, type VaultEnv, type VaultIncentiveAccount, type VaultIncentiveAccountData, type VaultIncentiveV3Account, type VaultIncentiveV3AccountData, type VaultLookupTableMap, VaultLutManager, type VaultOracleAccountData, type VaultOracleResult, type VaultPricingInputs, type VaultQuote, type VaultQuoteArgs, VaultQuoteClient, type VaultQuoteDirection, type VaultQuoteShareClass, VaultReallocationBuilder, type VaultReallocationIxArgs, type VaultReallocationTxArgs, type VaultTrancheStateAccountData, type VaultTrancheWithdrawalQueueAccountData, type VaultTransactionPlan, WITHDRAWABLE_RESERVE_FLOOR_BPS, type WithdrawProtocolFeesIxArgs, type WithdrawProtocolFeesTxArgs, type WithdrawalLeg, type WithdrawalPlan, type WithdrawalPricing, WithdrawalQueueService, type WithdrawalQueueSnapshot, type YieldAccount, type YieldAccountSnapshot, type YieldCalculationLog, type YieldCashflow, type YieldPaymentResponse, type YieldPaymentSnapshot, type YieldTracker, type YieldValuationModel, accountingUnitPriceToUsd, addCashflowUpdate, applyEffectiveApy, assertNoLargeBalanceChanges, assertNoUnconfirmedYieldPayments, assertOracleImpliedApy, buildHoldingUpdate, buildKaminoDepositInteraction, buildKaminoWithdrawInteraction, buildMarginfiWithdrawInteraction, buildNestDepositRequest, buildNestWithdrawalRequest, buildUpdates, candidateGrossNav, coerceBool, collectSamples, collectVaultLookupTableAccounts, confirmYieldPayment, createAccount, createLiveConsensusOracleDeps, createRpcFromConnection, createTokenMint, createTokenMintIxs, createVaultClient, createYieldPayment, dateToStr, decodeNestDepositRequest, decodeNestWithdrawalRequest, decodePendingConsensusSigners, defaultKeypairPath, deleteAccount, discoverVaultsForSigner, externalWithdrawComputeBudget, externalWithdrawLookupTables, fetchExternalPositions, fetchNestRedemptionQuote, fetchNestRedemptionStatus, fetchNestTokenPrice, fetchReceiptMints, filterTargetHoldings, findLargeBalanceChanges, findSquadsWalletRoute, formatSettlementSimulation, fromUiAmount, gatherPricingInputs, getAccount, getAccounts, getAprYield, getBalance, getCashflows, getIncentiveRecipientShareAtas, getIncentiveRecipients, getIncentiveReportRecipients, getIncentiveTotals, getIncentiveV3OracleState, getIncentiveV3RecipientShareAtas, getIncentiveV3Recipients, getIncentiveV3Totals, getNavValue, getRpcUrl, getTotalOutstandingYield, getTotalTrackedValue, getTotalYield, getTrackedValue, getVaultLookupTables, getVaultProgramId, getYield, getYieldPayments, indexConfigByMint, isEvmNavPriceConfig, isNavAccountBalance, isNavAccountValue, isNavYieldAccount, isVaultEnv, keypairAddress, loadKaminoDeposit, loadKaminoWithdrawal, loadKeypair, logProspectiveApy, makeProvider, managerReconciliationStateKey, mintTokensTo, mints, mostFrequent, parseExternalLiquidityRefs, planExternalAllocation, planRebalance, planWithdrawalLegs, prepareSquadsProposalUpload, prepareVaultTransaction, previewNavPrice, previousPhysicalNav, priceInAccountingUnit, publishedConsensusBlockers, readI64LE, readSplMintSupply, reconcileManagerWalletBalances, refreshLiveOraclePrices, resolveExternalWithdraw, resolveKeypairPath, resolveSquadsWalletRoute, resolveTrackedAmounts, resolveWithdrawalPlan, roundToNextUtcMidnight, runLiveConsensusOracle, selectReportableHoldings, settleVault, signerInOracleData, simulateConsensusOracleSettlement, simulateDryRunSettlement, simulateOraclePublication, simulateSquadsProposalExecution, sumPositionsByMint, systemClock, toBigInt, toUiAmount, toWeb3AccountMeta, trackedValueFromResponse, uniqueLutAddresses, updateAccount, updateDynamicApr, validateSquadsWalletRoutes, variantName, vaultAuthorityForWallet, withDiscoveredYieldAccounts, withVaultLookupTables, withdrawalComputeBudget };
+export { ASSET_DECIMALS, ASSET_REBALANCE_COOLDOWN_SECS, type AccountBalanceResponse, AccountClient, type AccountYieldResponse, ActivateCircuitBreakerBuilder, type ActivateCircuitBreakerIxArgs, type ActivateCircuitBreakerTxArgs, type AddAprCashflowUpdateParams, type AddCashflowUpdateParams, type AddIncentiveRecipientArgs, AddIncentiveRecipientBuilder, type AddIncentiveRecipientIxArgs, AddIncentiveRecipientV3Builder, type AddIncentiveRecipientV3IxArgs, type AddIncentiveRecipientV3TxArgs, type AddNavCashflowUpdateParams, type AprAccountBalanceResponse, type AprAccountYieldResponse, type AssetPriceOracleConfigIxArgs, type AssetPriceOracleConfigTxArgs, type AssetPriceRefreshTarget, type AssetRefreshResult, type AssetType, BALANCE_CHANGE_BASELINE_MAX_AGE_SECS, type Bankineco, type BasicAuthCredentials, type Bigintish, type BuildMarginfiWithdrawInteractionArgs, CONSENSUS_ORACLE_VARIANT, type CancelIncentiveProposalArgs, CancelIncentiveProposalBuilder, CancelJuniorTrancheWithdrawBuilder, type CancelJuniorTrancheWithdrawIxArgs, type CancelJuniorTrancheWithdrawTxArgs, ClaimIncentiveBuilder, type ClaimIncentiveIxArgs, type ClaimIncentiveTxArgs, ClaimIncentiveV3Builder, type ClaimIncentiveV3IxArgs, type ClaimIncentiveV3TxArgs, type Clock, type CollectSamplesOptions, type ConsensusAssetUpdate, type ConsensusHoldingEntry, type ConsensusHoldingSimulation, type ConsensusOracleDeps, type ConsensusOracleHoldingConfig, ConsensusOracleService, type ConsensusOracleTarget, CrankNavBuilder, type CrankNavIxArgs, type CrankNavTxArgs, CrankPerformanceFeesBuilder, type CrankPerformanceFeesIxArgs, type CrankPerformanceFeesTxArgs, type CreateAccountParams, CreateAssetHoldingBuilder, type CreateAssetHoldingIxArgs, type CreateAssetHoldingTxArgs, CreateIncentiveBuilder, type CreateIncentiveIxArgs, type CreateIncentiveTxArgs, CreateIncentiveV3Builder, type CreateIncentiveV3IxArgs, type CreateIncentiveV3TxArgs, type CreateTokenMintIxs, CreateTrancheStateBuilder, type CreateTrancheStateIxArgs, type CreateTrancheStateTxArgs, CreateVaultBuilder, type CreateVaultClientOptions, type CreateVaultIxArgs, type CreateVaultParams, type CreateVaultTxArgs, type CreateYieldPaymentParams, DEFAULT_CU_PRICE_MICRO_LAMPORTS, DEFAULT_EXTERNAL_WEIGHT_BAND_BPS, DEFAULT_JUNIOR_EARLY_UNSTAKE_FEE_BPS, DEFAULT_JUNIOR_STANDARD_UNSTAKE_FEE_BPS, DEFAULT_JUNIOR_WITHDRAWAL_LOCKUP_SECS, DEFAULT_MARGINFI_WEIGHT_BPS, DEFAULT_MAX_ACCEPTABLE_APY_BPS, DEFAULT_MINTS, DEFAULT_MIN_AMOUNT_UI, DEFAULT_ORACLE_STALENESS_THRESHOLD_SECS, DEFAULT_PRICE_ORACLE_ACCOUNT, DEFAULT_PRICE_STALENESS_SECS, DEFAULT_PRICE_STALENESS_THRESHOLD_SECS, DEFAULT_REBALANCE_BAND_BPS, DEFAULT_SLIPPAGE_BPS, DEFAULT_TARGET_LOCAL_BPS, DEFAULT_TARGET_LOCAL_USDC_TVL_BPS, DEFAULT_VAULT_ID, type DecodedHolding, type DecodedVault, type DecodedVaultTrancheState, type DeleteAccountParams, DepositCuratorFeesBuilder, type DepositCuratorFeesIxArgs, type DepositCuratorFeesTxArgs, DisableCircuitBreakerBuilder, type DisableCircuitBreakerIxArgs, type DisableCircuitBreakerTxArgs, DistributeIncentiveBuilder, type DistributeIncentiveIxArgs, type DistributeIncentiveTxArgs, DistributeIncentiveV3Builder, type DistributeIncentiveV3IxArgs, type DistributeIncentiveV3TxArgs, EXTERNAL_POSITION_SAMPLES, type EvmCallArg, type EvmContractCall, type EvmContractNavPriceConfig, ExecuteDepositBuilder, type ExecuteDepositIxArgs, type ExecuteDepositTxArgs, ExecuteShareSwapBuilder, type ExecuteShareSwapIxArgs, type ExecuteShareSwapTxArgs, ExecuteTrancheDepositBuilder, type ExecuteTrancheDepositIxArgs, type ExecuteTrancheDepositTxArgs, ExecuteTrancheWithdrawBuilder, type ExecuteTrancheWithdrawIxArgs, type ExecuteTrancheWithdrawTxArgs, ExecuteWithdrawBuilder, type ExecuteWithdrawIxArgs, type ExecuteWithdrawTxArgs, type ExternalLiquidityIntegrityOptions, type ExternalLiquidityIntegrityResult, ExternalLiquidityIntegrityService, type ExternalLiquidityIntegritySummary, type ExternalLiquiditySlot, type ExternalLiquiditySourceArgs, type ExternalPosition, type ExternalPositionContext, type ExternalPositionProvider, type ExternalPositionRef, ExternalPositionRegistry, FEE_VAULT_CACHE_CATEGORY, type FeeVaultAccountData, type FetchNestTokenPriceOptions, FulfillJuniorTrancheWithdrawBuilder, type FulfillJuniorTrancheWithdrawIxArgs, type FulfillJuniorTrancheWithdrawTxArgs, type FulfillSummary, type HoldingNavContribution, type HoldingUpdatePreview, type HttpJsonNavPriceConfig, IDL, IDLE_RESERVE_FLOOR_BPS, IDLE_RESERVE_TARGET_BPS, type IdleLiquidityOptions, type IdleLiquidityResult, IdleLiquidityService, type IdleLiquidityStatus, type IncentiveRecipient, type IncentiveTotals, type IncentiveUsdUpdateArgs, type IncentiveV3OracleState, type IncentiveV3Recipient, type IncentiveV3Totals, InitializeVaultRolesBuilder, type InitializeVaultRolesIxArgs, type InitializeVaultRolesTxArgs, type JuniorWithdrawalMode, JupiterPriceSource, type JupiterPriceSourceOptions, JupiterSwapBuilder, type JupiterSwapIxArgs, type JupiterSwapTxArgs, KaminoLendPositionProvider, KaminoPositionProvider, LIVE_ORACLE_VARIANTS, LIVE_PRICE_REFRESH_INTERVAL_SECS, LOCAL_PROTOCOL_ADMIN, LargeBalanceChangeError, type LargeBalanceChangeViolation, type LiveConsensusOracleDepsOptions, LivePriceSource, type LivePriceSourceOptions, MANAGER_WALLET_NAV_DROP_TRIGGER_BPS, MANAGER_WALLET_NAV_TOLERANCE_BPS, MAX_APY_ANCHOR_WINDOW_SECS, MAX_APY_PREVIOUS_ANCHOR_AGE_SECS, MAX_BALANCE_CHANGE_BPS, MAX_CONSENSUS_SIGNERS, MAX_INCENTIVE_RECIPIENTS, MAX_INCENTIVE_REPORT_TTL, MAX_LUT_ADDRESSES, MAX_MANAGER_WITHDRAW_DESTINATIONS, MAX_ORACLE_IMPLIED_APY_BPS, MAX_PRICE_STALENESS_THRESHOLD_SECS, MIN_EXTERNAL_POSITION_SAMPLES, ManagerRedepositAssetBuilder, type ManagerRedepositAssetIxArgs, type ManagerRedepositAssetTxArgs, type ManagerWalletBalanceSource, type ManagerWalletReconciliation, ManagerWithdrawAssetBuilder, type ManagerWithdrawAssetIxArgs, type ManagerWithdrawAssetTxArgs, MarginfiPositionProvider, type MaxApyAnchorSnapshot, type MintConfig, type MintIdentifier, type MintInfo, MintRegistry, type MintRegistryOptions, type MockYieldAccountConfig, MockYieldTracker, type MockYieldTrackerOptions, type MpcWalletBalanceSource, type MpcWalletBalances, type MpcWalletConfig, NEST_API_BASE_URL, NEST_RWA_SHARE_MINT, NEST_VAULT_SLUG, NEST_WITHDRAWAL_MATCH_TOLERANCE_BPS, type NavAccountBalanceResponse, type NavAccountValueResponse, type NavCrankBlocker, type NavCrankBlockerReason, type NavCrankReadiness, type NavCrankResult, type NavPriceConfig, type NavPricePreview, type NavPriceProvenance, type NavYieldAccount, NestApiError, type NestApiOptions, type NestDepositPlan, NestPriceSource, type NestPriceSourceOptions, type NestRedemptionQuote, type NestRedemptionStatus, ORACLE_ENTRIES_OFFSET, ORACLE_ENTRY_SIZE, ORACLE_SETTLED_NAV_TS_OFFSET, OracleService, PRICE_ORACLE_TYPES_BY_INDEX, PROGRAM_FEE_EXEMPT_OWNER_WHITELIST, PROTOCOL_ADMIN, PROTOCOL_FEE_RECIPIENT, PST_TO_USDC_MAX_SLIPPAGE_BPS, PdaClient, type PendingConsensusSignerSet, type PreparedDirectTransaction, type PreparedSquadsTransaction, type PreparedVaultTransaction, type PreviewNavPriceParams, type PriceOracleTypeArgs, type PriceSource, ProtocolInteractionBuilder, type ProtocolInteractionIxArgs, type ProtocolInteractionTxArgs, type QuoteFeeUnit, RECONCILIATION_EXTERNAL_VALUE_TOLERANCE_BPS, REPORTABLE_ORACLE_VARIANTS, type RealizedApySimulation, type RefreshLiveOraclePricesParams, RemoveAssetHoldingBuilder, type RemoveAssetHoldingIxArgs, type RemoveAssetHoldingTxArgs, ReportIncentiveV3Builder, type ReportIncentiveV3IxArgs, type ReportIncentiveV3TxArgs, RequestJuniorTrancheWithdrawBuilder, type RequestJuniorTrancheWithdrawIxArgs, type RequestJuniorTrancheWithdrawTxArgs, type ResolveExternalWithdrawArgs, type ResolvedExternalWithdraw, type ResolvedSquadsWalletRoute, type RollingLimitConfig, type RollingRebalanceLimitConfig, RpcManagerWalletBalanceSource, RpcMpcWalletBalanceSource, type RunLiveConsensusOracleOptions, type RunOptions, type RunSummary, SHARE_DECIMALS, SYSTEM_PROGRAM, SetAssetPriceOracleBuilder, type SetAssetPriceOracleIxArgs, type SetAssetPriceOracleTxArgs, SetExternalLiquidityBuilder, type SetExternalLiquidityIxArgs, type SetExternalLiquidityTxArgs, type SetIncentiveLimitsArgs, SetIncentiveLimitsBuilder, type SetIncentiveLimitsV3Args, SetIncentiveLimitsV3Builder, SetManagerWithdrawDestinationBuilder, type SetManagerWithdrawDestinationIxArgs, type SetManagerWithdrawDestinationTxArgs, SetProtocolFeeBuilder, type SetProtocolFeeIxArgs, type SetProtocolFeeTxArgs, SetVaultConfigBuilder, type SetVaultConfigIxArgs, type SetVaultConfigTxArgs, SettleIncentiveV3Builder, type SettleIncentiveV3IxArgs, type SettleIncentiveV3TxArgs, type SettleVaultParams, type SettleVaultResult, type SettlementSimulation, type SettlementSimulationSnapshot, type SimulateDryRunSettlementParams, type SimulateSettlementArgs, type SimulatedShareClass, SquadsProposalExecutionSimulationError, type SquadsProposalUpload, type SquadsWalletRouteConfig, type StaleBalanceChangeBypass, StaticPositionProvider, SubmitIncentiveBuilder, type SubmitIncentiveIxArgs, type SubmitIncentiveTxArgs, TOKEN_PROGRAM, TOKEN_PROGRAM_ID, type TimelockSettlementKind, type TimelockSettlementOptions, type TimelockSettlementRecord, TimelockSettlementService, type TimelockSettlementSummary, type TrackedAccountValue, type TrancheKindArgs, type TransactionBuilder, TransactionClient, USDC_MINT, USD_STAR_JUNIOR_MINT, USD_STAR_MINT, USD_STAR_PRINCIPAL_MINT, type UpdateAccountParams, UpdateAssetPriceBuilder, type UpdateAssetPriceIxArgs, type UpdateAssetPriceTxArgs, UpdateConsensusOracleBuilder, type UpdateConsensusOracleIxArgs, type UpdateConsensusOracleTxArgs, UpdateConsensusSignersBuilder, type UpdateConsensusSignersIxArgs, type UpdateConsensusSignersTxArgs, type UpdateDynamicAprParams, UpdateTrancheConfigBuilder, type UpdateTrancheConfigIxArgs, type UpdateTrancheConfigTxArgs, VAULT_CACHE_CATEGORY, VAULT_CREATOR_WHITELIST, VAULT_ENVIRONMENTS, VAULT_LOOKUP_TABLES, VAULT_ORACLE_CACHE_CATEGORY, VAULT_PROGRAM_ID, VAULT_PROGRAM_IDS, VAULT_PROGRAM_PUBLIC_KEY, VAULT_ROLE_UPDATE_TIMELOCK_SECS, VAULT_TRANCHE_STATE_CACHE_CATEGORY, VAULT_TRANCHE_WITHDRAWAL_QUEUE_CACHE_CATEGORY, type Vault, type VaultAccountData, VaultBuilderBase, type VaultBuilderContext, type VaultCacheInvalidation, VaultClient, type VaultClientBundle, type VaultEnv, type VaultIncentiveAccount, type VaultIncentiveAccountData, type VaultIncentiveV3Account, type VaultIncentiveV3AccountData, type VaultLookupTableMap, VaultLutManager, type VaultOracleAccountData, type VaultOracleResult, type VaultPricingInputs, type VaultQuote, type VaultQuoteArgs, VaultQuoteClient, type VaultQuoteDirection, type VaultQuoteShareClass, VaultReallocationBuilder, type VaultReallocationIxArgs, type VaultReallocationTxArgs, type VaultTrancheStateAccountData, type VaultTrancheWithdrawalQueueAccountData, type VaultTransactionPlan, WITHDRAWABLE_RESERVE_FLOOR_BPS, type WithdrawProtocolFeesIxArgs, type WithdrawProtocolFeesTxArgs, type WithdrawalLeg, type WithdrawalPlan, type WithdrawalPricing, WithdrawalQueueService, type WithdrawalQueueSnapshot, type YieldAccount, type YieldAccountSnapshot, type YieldCalculationLog, type YieldCashflow, type YieldPaymentResponse, type YieldPaymentSnapshot, type YieldTracker, type YieldValuationModel, accountingUnitPriceToUsd, addCashflowUpdate, applyEffectiveApy, assertNoLargeBalanceChanges, assertNoUnconfirmedYieldPayments, assertOracleImpliedApy, assertReconciliationExternalValues, buildHoldingUpdate, buildKaminoDepositInteraction, buildKaminoWithdrawInteraction, buildMarginfiWithdrawInteraction, buildNestDepositRequest, buildNestWithdrawalRequest, buildUpdates, candidateGrossNav, coerceBool, collectSamples, collectVaultLookupTableAccounts, confirmYieldPayment, createAccount, createLiveConsensusOracleDeps, createRpcFromConnection, createTokenMint, createTokenMintIxs, createVaultClient, createYieldPayment, dateToStr, decodeNestDepositRequest, decodeNestWithdrawalRequest, decodePendingConsensusSigners, defaultKeypairPath, deleteAccount, discoverVaultsForSigner, externalWithdrawComputeBudget, externalWithdrawLookupTables, fetchExternalPositions, fetchNestRedemptionQuote, fetchNestRedemptionStatus, fetchNestTokenPrice, fetchReceiptMints, filterTargetHoldings, findLargeBalanceChanges, findSquadsWalletRoute, formatSettlementSimulation, fromUiAmount, gatherPricingInputs, getAccount, getAccounts, getAprYield, getBalance, getCashflows, getIncentiveRecipientShareAtas, getIncentiveRecipients, getIncentiveReportRecipients, getIncentiveTotals, getIncentiveV3OracleState, getIncentiveV3RecipientShareAtas, getIncentiveV3Recipients, getIncentiveV3Totals, getNavValue, getRpcUrl, getTotalOutstandingYield, getTotalTrackedValue, getTotalYield, getTrackedValue, getVaultLookupTables, getVaultProgramId, getYield, getYieldPayments, indexConfigByMint, isEvmNavPriceConfig, isNavAccountBalance, isNavAccountValue, isNavYieldAccount, isVaultEnv, keypairAddress, loadKaminoDeposit, loadKaminoWithdrawal, loadKeypair, logProspectiveApy, makeProvider, managerReconciliationStateKey, mintTokensTo, mints, mostFrequent, parseExternalLiquidityRefs, planExternalAllocation, planRebalance, planWithdrawalLegs, prepareSquadsProposalUpload, prepareVaultTransaction, previewNavPrice, previousPhysicalNav, priceInAccountingUnit, publishedConsensusBlockers, readI64LE, readSplMintSupply, reconcileManagerWalletBalances, reconciliationExternalValues, refreshLiveOraclePrices, resolveExternalWithdraw, resolveKeypairPath, resolveSquadsWalletRoute, resolveTrackedAmounts, resolveWithdrawalPlan, roundToNextUtcMidnight, runLiveConsensusOracle, selectReportableHoldings, settleVault, signerInOracleData, simulateConsensusOracleSettlement, simulateDryRunSettlement, simulateOraclePublication, simulateSquadsProposalExecution, sumPositionsByMint, systemClock, toBigInt, toUiAmount, toWeb3AccountMeta, trackedValueFromResponse, uniqueLutAddresses, updateAccount, updateDynamicApr, validateSquadsWalletRoutes, variantName, vaultAuthorityForWallet, walletReconciliationGuardUpdates, withDiscoveredYieldAccounts, withVaultLookupTables, withdrawalComputeBudget };

package/dist/index.js

@@ -2133,6 +2133,7 @@ __export(index_exports, {
   NEST_API_BASE_URL: () => import_nest2.NEST_API_BASE_URL,
   NEST_RWA_SHARE_MINT: () => NEST_RWA_SHARE_MINT,
   NEST_VAULT_SLUG: () => NEST_VAULT_SLUG,
+  NEST_WITHDRAWAL_MATCH_TOLERANCE_BPS: () => NEST_WITHDRAWAL_MATCH_TOLERANCE_BPS,
   NestApiError: () => import_nest4.NestApiError,
   NestPriceSource: () => NestPriceSource,
   ORACLE_ENTRIES_OFFSET: () => ORACLE_ENTRIES_OFFSET,
@@ -2146,6 +2147,7 @@ __export(index_exports, {
   PST_TO_USDC_MAX_SLIPPAGE_BPS: () => PST_TO_USDC_MAX_SLIPPAGE_BPS,
   PdaClient: () => PdaClient,
   ProtocolInteractionBuilder: () => ProtocolInteractionBuilder,
+  RECONCILIATION_EXTERNAL_VALUE_TOLERANCE_BPS: () => RECONCILIATION_EXTERNAL_VALUE_TOLERANCE_BPS,
   REPORTABLE_ORACLE_VARIANTS: () => REPORTABLE_ORACLE_VARIANTS,
   RemoveAssetHoldingBuilder: () => RemoveAssetHoldingBuilder,
   ReportIncentiveV3Builder: () => ReportIncentiveV3Builder,
@@ -2202,6 +2204,7 @@ __export(index_exports, {
   assertNoLargeBalanceChanges: () => assertNoLargeBalanceChanges,
   assertNoUnconfirmedYieldPayments: () => assertNoUnconfirmedYieldPayments,
   assertOracleImpliedApy: () => assertOracleImpliedApy,
+  assertReconciliationExternalValues: () => assertReconciliationExternalValues,
   buildHoldingUpdate: () => buildHoldingUpdate,
   buildKaminoDepositInteraction: () => buildKaminoDepositInteraction,
   buildKaminoWithdrawInteraction: () => buildKaminoWithdrawInteraction,
@@ -2293,6 +2296,7 @@ __export(index_exports, {
   readI64LE: () => readI64LE,
   readSplMintSupply: () => readSplMintSupply,
   reconcileManagerWalletBalances: () => reconcileManagerWalletBalances,
+  reconciliationExternalValues: () => reconciliationExternalValues,
   refreshLiveOraclePrices: () => refreshLiveOraclePrices,
   resolveExternalWithdraw: () => resolveExternalWithdraw,
   resolveKeypairPath: () => resolveKeypairPath,
@@ -2320,6 +2324,7 @@ __export(index_exports, {
   validateSquadsWalletRoutes: () => validateSquadsWalletRoutes,
   variantName: () => variantName2,
   vaultAuthorityForWallet: () => vaultAuthorityForWallet,
+  walletReconciliationGuardUpdates: () => walletReconciliationGuardUpdates,
   withDiscoveredYieldAccounts: () => withDiscoveredYieldAccounts,
   withVaultLookupTables: () => withVaultLookupTables,
   withdrawalComputeBudget: () => withdrawalComputeBudget
@@ -21491,6 +21496,8 @@ var NestPriceSource = class {
 // src/services/consensusOracle/pipeline/managerWalletReconciliation.ts
 var MANAGER_WALLET_NAV_DROP_TRIGGER_BPS = 10n;
 var MANAGER_WALLET_NAV_TOLERANCE_BPS = 5n;
+var NEST_WITHDRAWAL_MATCH_TOLERANCE_BPS = 500n;
+var RECONCILIATION_EXTERNAL_VALUE_TOLERANCE_BPS = 3n;
 var BPS = 10000n;
 var U64_MAX2 = 0xffffffffffffffffn;
 function previousPhysicalNav(state) {
@@ -21556,24 +21563,15 @@ async function reconcileManagerWalletBalances({
     throw new Error("Manager reconciliation requires fresh source amounts");
   }
   const pendingUpdates = retainPendingNestShares(vaultState, updates);
-  if (!source || previousNav <= 0n) {
-    return {
-      accepted: false,
-      updates: pendingUpdates,
-      previousNav,
-      candidateNav: 0n
-    };
-  }
   const candidateNav = candidateGrossNav(vaultState, updates);
   const result = {
     accepted: false,
+    walletBalancesChecked: false,
     updates: pendingUpdates,
     previousNav,
     candidateNav
   };
-  if ((previousNav - candidateNav) * BPS < previousNav * MANAGER_WALLET_NAV_DROP_TRIGGER_BPS) {
-    return result;
-  }
+  if (!source) return result;
   const baseUpdates = updates.filter(
     (update) => coerceBool3(vaultState.holdings[update.holdingIndex].isBase)
   );
@@ -21594,7 +21592,7 @@ async function reconcileManagerWalletBalances({
     throw new Error("Invalid manager wallet for NAV reconciliation");
   }
   log(
-    `vault ${vault}: NAV ${candidateNav} is at least 0.1% below ${previousNav}; checking manager ${manager}`
+    `vault ${vault}: checking manager ${manager} and configured MPC base balances`
   );
   const [amounts, mpc] = await Promise.all([
     source.fetchBalances(manager, mints2),
@@ -21617,10 +21615,9 @@ async function reconcileManagerWalletBalances({
       mpc?.marginfi.get(update.mint) ?? 0n,
       "MPC Marginfi"
     );
-    if (mpc)
-      log(
-        `vault ${vault}: MPC ${mpc.wallet} mint ${update.mint}: tokens=${mpcTokens} marginfi=${mpcMarginfi}`
-      );
+    log(
+      `vault ${vault}: mint ${update.mint}: manager=${amount}` + (mpc ? ` MPC ${mpc.wallet}: tokens=${mpcTokens} marginfi=${mpcMarginfi}` : "")
+    );
     return {
       ...update,
       managerWalletAmount: amount,
@@ -21628,36 +21625,97 @@ async function reconcileManagerWalletBalances({
       externalAmount: update.externalAmount + amount + mpcTokens + mpcMarginfi
     };
   });
-  const adjustedNav = candidateGrossNav(vaultState, adjusted);
-  const delta = adjustedNav - previousNav;
+  const pendingNestValue = candidateGrossNav(vaultState, pendingUpdates) - candidateNav;
+  const walletUsdcValue = candidateGrossNav(
+    vaultState,
+    updates.map(
+      (update, index) => update.mint === USDC_MINT ? adjusted[index] : update
+    )
+  ) - candidateNav;
+  const delta = walletUsdcValue - pendingNestValue;
   const absoluteDelta = delta < 0n ? -delta : delta;
-  const accepted = adjustedNav > candidateNav && absoluteDelta * BPS <= previousNav * MANAGER_WALLET_NAV_TOLERANCE_BPS;
+  const accepted = pendingNestValue > 0n && absoluteDelta * BPS <= pendingNestValue * NEST_WITHDRAWAL_MATCH_TOLERANCE_BPS;
+  const finalUpdates = accepted ? adjusted : retainPendingNestShares(vaultState, adjusted);
+  const adjustedNav = candidateGrossNav(vaultState, finalUpdates);
   log(
-    `vault ${vault}: manager${mpc ? " + MPC wallets" : " wallet"} ${accepted ? "accepted" : "rejected"}; adjusted NAV ${adjustedNav}, previous NAV ${previousNav}, allowed difference \xB10.05%`
+    `vault ${vault}: wallet balances included; pending Nest ${accepted ? "replaced by wallet USDC" : "retained"}; wallet USDC value=${walletUsdcValue}, pending Nest value=${pendingNestValue}, replacement tolerance \xB15%; adjusted NAV ${adjustedNav}, previous NAV ${previousNav}`
   );
   return {
     accepted,
-    updates: accepted ? adjusted : pendingUpdates,
+    walletBalancesChecked: true,
+    updates: finalUpdates,
     previousNav,
     candidateNav,
     adjustedNav
   };
 }
+function walletReconciliationGuardUpdates(state, reconciliation) {
+  if (!reconciliation.accepted) return reconciliation.updates;
+  return reconciliation.updates.map((update) => {
+    const previous = toBigInt2(
+      state.holdings[update.holdingIndex].externalAmount
+    );
+    if (update.mint === NEST_RWA_SHARE_MINT) {
+      return {
+        ...update,
+        externalAmount: previous > update.externalAmount ? previous : update.externalAmount
+      };
+    }
+    if (update.mint !== USDC_MINT || update.externalAmount <= previous)
+      return update;
+    const walletAmount = (update.managerWalletAmount ?? 0n) + (update.mpcWalletAmount ?? 0n) + (update.mpcMarginfiAmount ?? 0n);
+    const increase = update.externalAmount - previous;
+    return {
+      ...update,
+      externalAmount: update.externalAmount - (walletAmount < increase ? walletAmount : increase)
+    };
+  });
+}
 function managerReconciliationStateKey(state) {
   return JSON.stringify({
     manager: (0, import_common55.fromWeb3Pk)(state.roles.manager),
-    previousNav: previousPhysicalNav(state).toString(),
+    assetDecimals: state.config.assetDecimals,
     holdings: state.holdings.map((holding) => [
       (0, import_common55.fromWeb3Pk)(holding.mint),
       holding.decimals,
       variantName2(holding.priceOracleType),
+      holding.priceOracleAccount ? (0, import_common55.fromWeb3Pk)(holding.priceOracleAccount) : void 0,
       coerceBool3(holding.isBase),
-      toBigInt2(holding.localAmount).toString(),
-      toBigInt2(holding.externalAmount).toString(),
-      toBigInt2(holding.price).toString()
+      toBigInt2(holding.localAmount).toString()
     ])
   });
 }
+function reconciliationExternalValues(state, updates = []) {
+  const byIndex = new Map(
+    updates.map((update) => [update.holdingIndex, update])
+  );
+  return state.holdings.map((holding, index) => {
+    const update = byIndex.get(index);
+    const amount = update?.externalAmount ?? toBigInt2(holding.externalAmount);
+    const price = update && variantName2(holding.priceOracleType).toLowerCase() === CONSENSUS_ORACLE_VARIANT ? update.price : toBigInt2(holding.price);
+    if (amount < 0n || amount > U64_MAX2 || price < 0n || amount > 0n && price === 0n) {
+      throw new Error(`Invalid external value for holding #${index}`);
+    }
+    return amount * price;
+  });
+}
+function assertReconciliationExternalValues(initial, current, errorPrefix) {
+  if (initial.length !== current.length) {
+    throw new Error(
+      `${errorPrefix}: holding count changed; retry with fresh inputs`
+    );
+  }
+  for (let index = 0; index < initial.length; index++) {
+    const before = initial[index];
+    const after = current[index];
+    const delta = after >= before ? after - before : before - after;
+    if (before < 0n || after < 0n || delta * BPS > before * RECONCILIATION_EXTERNAL_VALUE_TOLERANCE_BPS) {
+      throw new Error(
+        `${errorPrefix}: holding #${index} external value changed by more than ${RECONCILIATION_EXTERNAL_VALUE_TOLERANCE_BPS} bps; retry with fresh inputs`
+      );
+    }
+  }
+}
 
 // src/services/consensusOracle/pipeline/pricingInputs.ts
 var import_common56 = __toESM(require_dist());
@@ -23903,20 +23961,21 @@ var ConsensusOracleService = class {
       log
     });
     const updates = reconciliation.updates;
-    const needsRevalidation = reconciliation.accepted || // A new withdrawal can be queued after the first vault read, too.
+    const needsRevalidation = reconciliation.walletBalancesChecked || // A new withdrawal can be queued after the first vault read, too.
     updates.some((update) => update.mint === NEST_RWA_SHARE_MINT);
     const reconciliationStateKey = needsRevalidation ? managerReconciliationStateKey(vaultState) : void 0;
-    if (!reconciliation.accepted) {
-      assertNoLargeBalanceChanges(
-        target.vault,
-        vaultState,
-        updates,
-        this.nowSecs(),
-        log
-      );
-    } else {
+    const initialExternalValues = needsRevalidation ? reconciliationExternalValues(vaultState) : [];
+    const initialReportExternalValues = needsRevalidation ? reconciliationExternalValues(vaultState, updates) : [];
+    assertNoLargeBalanceChanges(
+      target.vault,
+      vaultState,
+      walletReconciliationGuardUpdates(vaultState, reconciliation),
+      this.nowSecs(),
+      log
+    );
+    if (reconciliation.accepted) {
       log(
-        `vault ${target.vault}: manager NAV reconciliation passed; allowing cross-asset external balance changes`
+        `vault ${target.vault}: wallet USDC matches pending Nest within \xB15%; allowing that conversion's external balance changes`
       );
     }
     if (dryRun) {
@@ -23977,21 +24036,56 @@ var ConsensusOracleService = class {
             "Vault changed during manager-wallet reconciliation; retry with fresh inputs"
           );
         }
-        if (!reconciliation.accepted) return;
-        const fresh = await reconcileManagerWalletBalances({
+        assertReconciliationExternalValues(
+          initialExternalValues,
+          reconciliationExternalValues(freshState),
+          "Vault changed during manager-wallet reconciliation"
+        );
+        if (reconciliation.walletBalancesChecked) {
+          const fresh = await reconcileManagerWalletBalances({
+            vault: target.vault,
+            vaultState: freshState,
+            updates: sourcedUpdates,
+            source: this.deps.managerWalletBalances,
+            mpcSource: this.deps.mpcWalletBalances
+          });
+          if (!fresh.walletBalancesChecked || fresh.accepted !== reconciliation.accepted) {
+            throw new Error(
+              "Manager wallet changed or MPC balances changed during reconciliation; retry with fresh inputs"
+            );
+          }
+          assertReconciliationExternalValues(
+            initialReportExternalValues,
+            reconciliationExternalValues(freshState, fresh.updates),
+            "Manager wallet changed or MPC balances changed during reconciliation"
+          );
+        }
+        assertNoLargeBalanceChanges(
+          target.vault,
+          freshState,
+          walletReconciliationGuardUpdates(freshState, reconciliation),
+          this.nowSecs(),
+          log
+        );
+        const simulations = await simulateOraclePublication({
+          client: this.client,
+          signer,
           vault: target.vault,
           vaultState: freshState,
-          updates: sourcedUpdates,
-          source: this.deps.managerWalletBalances,
-          mpcSource: this.deps.mpcWalletBalances
+          updates,
+          nowSecs: this.nowSecs()
         });
-        if (!fresh.accepted || fresh.updates.some(
-          (update, index) => update.externalAmount !== updates[index].externalAmount || update.managerWalletAmount !== updates[index].managerWalletAmount || update.mpcWalletAmount !== updates[index].mpcWalletAmount || update.mpcMarginfiAmount !== updates[index].mpcMarginfiAmount
-        )) {
-          throw new Error(
-            "Manager wallet changed or MPC balances changed during reconciliation; retry with fresh inputs"
+        assertOracleImpliedApy(
+          target.vault,
+          simulations.proposed,
+          "proposed report"
+        );
+        if (simulations.consensus.realizedApy)
+          assertOracleImpliedApy(
+            target.vault,
+            simulations.consensus,
+            "current consensus"
           );
-        }
       } : void 0
     });
     return {
@@ -26093,6 +26187,7 @@ var import_common68 = __toESM(require_dist());
   NEST_API_BASE_URL,
   NEST_RWA_SHARE_MINT,
   NEST_VAULT_SLUG,
+  NEST_WITHDRAWAL_MATCH_TOLERANCE_BPS,
   NestApiError,
   NestPriceSource,
   ORACLE_ENTRIES_OFFSET,
@@ -26106,6 +26201,7 @@ var import_common68 = __toESM(require_dist());
   PST_TO_USDC_MAX_SLIPPAGE_BPS,
   PdaClient,
   ProtocolInteractionBuilder,
+  RECONCILIATION_EXTERNAL_VALUE_TOLERANCE_BPS,
   REPORTABLE_ORACLE_VARIANTS,
   RemoveAssetHoldingBuilder,
   ReportIncentiveV3Builder,
@@ -26162,6 +26258,7 @@ var import_common68 = __toESM(require_dist());
   assertNoLargeBalanceChanges,
   assertNoUnconfirmedYieldPayments,
   assertOracleImpliedApy,
+  assertReconciliationExternalValues,
   buildHoldingUpdate,
   buildKaminoDepositInteraction,
   buildKaminoWithdrawInteraction,
@@ -26253,6 +26350,7 @@ var import_common68 = __toESM(require_dist());
   readI64LE,
   readSplMintSupply,
   reconcileManagerWalletBalances,
+  reconciliationExternalValues,
   refreshLiveOraclePrices,
   resolveExternalWithdraw,
   resolveKeypairPath,
@@ -26280,6 +26378,7 @@ var import_common68 = __toESM(require_dist());
   validateSquadsWalletRoutes,
   variantName,
   vaultAuthorityForWallet,
+  walletReconciliationGuardUpdates,
   withDiscoveredYieldAccounts,
   withVaultLookupTables,
   withdrawalComputeBudget

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@perena/vault-sdk",
-  "version": "1.0.63",
+  "version": "1.0.65",
   "description": "Vault program helpers for Bankineco integrations.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",