@usesigil/kit 0.1.0

package/dist/inscribe.js

@@ -0,0 +1,149 @@
+/**
+ * Kit-native inscribe() + withVault() — Vault Provisioning
+ *
+ * inscribe(): Creates on-chain vault + registers agent
+ * withVault(): Convenience — shield + inscribe in one call
+ *
+ * Uses Codama-generated instruction builders directly.
+ * No Anchor, no web3.js.
+ */
+import { shield } from "./shield.js";
+import { getVaultPDA, getPolicyPDA, getPendingPolicyPDA, } from "./resolve-accounts.js";
+import { findVaultsByOwner } from "./state-resolver.js";
+import { fetchMaybeAgentVault } from "./generated/accounts/agentVault.js";
+import { SIGIL_PROGRAM_ADDRESS } from "./generated/programs/sigil.js";
+import { validateNetwork } from "./types.js";
+// ─── Policy Mapping ─────────────────────────────────────────────────────────
+/**
+ * Map resolved client-side policies to on-chain vault init parameters.
+ *
+ * Multiple per-token SpendLimits collapse to the largest value as the
+ * on-chain dailySpendingCap (conservative ceiling). Per-token granularity
+ * is enforced client-side only.
+ */
+export function mapPoliciesToVaultParams(resolved, vaultId, feeDestination, opts) {
+    // Collapse multiple spend limits to the largest (ceiling cap)
+    let maxCap = 0n;
+    for (const limit of resolved.spendLimits) {
+        if (limit.amount > maxCap) {
+            maxCap = limit.amount;
+        }
+    }
+    // Allowed protocols (Set<string>), cap at 10
+    const protocolArr = resolved.allowedProtocols
+        ? Array.from(resolved.allowedProtocols)
+        : [];
+    const protocols = protocolArr.slice(0, 10);
+    // Protocol mode: if protocols specified, use allowlist (1); else allow all (0)
+    const protocolMode = protocols.length > 0 ? 1 : 0;
+    // maxTransactionSize: use resolved value, fall back to dailySpendingCap
+    const maxTransactionSize = resolved.maxTransactionSize ?? maxCap;
+    return {
+        vaultId,
+        dailySpendingCap: maxCap,
+        maxTransactionSize,
+        protocolMode,
+        protocols,
+        maxLeverageBps: opts?.maxLeverageBps ?? 0,
+        maxConcurrentPositions: opts?.maxConcurrentPositions ?? 5,
+        feeDestination,
+        developerFeeRate: opts?.developerFeeRate ?? 0,
+        timelockDuration: opts?.timelockDuration ?? 0,
+        allowedDestinations: opts?.allowedDestinations ?? [],
+        maxSlippageBps: opts?.maxSlippageBps ?? 100,
+    };
+}
+// ─── Vault ID Probing ───────────────────────────────────────────────────────
+/**
+ * Probe vault PDAs starting from 0 to find the next available vault ID.
+ * Returns 0n for a new owner, or the first unused ID.
+ */
+export async function findNextVaultId(rpc, owner, programAddress = SIGIL_PROGRAM_ADDRESS) {
+    // Fast path: sequential probe for first 5 slots (common case)
+    for (let i = 0n; i < 5n; i++) {
+        const [vaultPda] = await getVaultPDA(owner, i, programAddress);
+        const account = await fetchMaybeAgentVault(rpc, vaultPda);
+        if (!account.exists) {
+            return i;
+        }
+    }
+    // Slow path: owner has 5+ vaults — batch-discover via GPA and find max ID
+    const vaults = await findVaultsByOwner(rpc, owner, 100);
+    if (vaults.length === 0)
+        return 0n;
+    let maxId = 0n;
+    for (const v of vaults) {
+        if (v.vaultId > maxId)
+            maxId = v.vaultId;
+    }
+    const nextId = maxId + 1n;
+    if (nextId >= 256n) {
+        throw new Error("All 256 vault slots are in use for this owner.");
+    }
+    return nextId;
+}
+// ─── Inscribe ─────────────────────────────────────────────────────────────────
+/**
+ * Create an on-chain vault and register an agent.
+ *
+ * This provisions the on-chain enforcement layer:
+ * 1. Derives vault PDA (auto-probes next ID if not specified)
+ * 2. Returns vault info (does NOT send transactions — caller composes)
+ *
+ * The actual transaction building and sending is the caller's responsibility
+ * using the Codama-generated instruction builders:
+ * - getInitializeVaultInstructionAsync()
+ * - getRegisterAgentInstructionAsync()
+ * - getUpdatePolicyInstructionAsync()
+ */
+export async function inscribe(options) {
+    const { rpc, network, owner, agent } = options;
+    validateNetwork(network);
+    // Validate owner ≠ agent
+    if (owner.address === agent.address) {
+        throw new Error("Owner and agent must be different keys. " +
+            "The owner has full vault authority; the agent has constrained execution only.");
+    }
+    // Resolve vault ID
+    const vaultId = options.vaultId ?? (await findNextVaultId(rpc, owner.address));
+    // Derive PDAs
+    const [vaultAddress] = await getVaultPDA(owner.address, vaultId);
+    const [policyAddress] = await getPolicyPDA(vaultAddress);
+    const [pendingPolicyAddress] = await getPendingPolicyPDA(vaultAddress);
+    return {
+        vaultAddress,
+        vaultId,
+        policyAddress,
+        pendingPolicyAddress,
+        agentAddress: agent.address,
+        ownerAddress: owner.address,
+    };
+}
+// ─── withVault ──────────────────────────────────────────────────────────────
+/**
+ * Convenience: shield + inscribe in one call.
+ *
+ * Creates both client-side (shield) and on-chain (vault) enforcement.
+ * Auto-configures shield's on-chain sync using the derived vault address.
+ * This is the primary entry point for the single-product model.
+ */
+export async function withVault(options) {
+    // Provision on-chain vault first (derives vault address)
+    const inscribeResult = await inscribe(options.inscribe);
+    // Auto-configure shield's on-chain sync using the derived vault address
+    const shieldOpts = {
+        ...options.shieldCallbacks,
+        onChainSync: {
+            rpc: options.inscribe.rpc,
+            vaultAddress: inscribeResult.vaultAddress,
+            agentAddress: options.inscribe.agent.address,
+            network: options.inscribe.network,
+        },
+    };
+    const shieldCtx = shield(options.policies, shieldOpts);
+    return {
+        shield: shieldCtx,
+        inscribe: inscribeResult,
+    };
+}
+//# sourceMappingURL=inscribe.js.map

package/dist/inscribe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inscribe.js","sourceRoot":"","sources":["../src/inscribe.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH,OAAO,EAAE,MAAM,EAA4C,MAAM,aAAa,CAAC;AAE/E,OAAO,EACL,WAAW,EACX,YAAY,EACZ,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,eAAe,EAAgB,MAAM,YAAY,CAAC;AAwE3D,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAA0B,EAC1B,OAAe,EACf,cAAuB,EACvB,IAOC;IAeD,8DAA8D;IAC9D,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YAC1B,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QACxB,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,gBAAgB;QAC3C,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACvC,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAc,CAAC;IAExD,+EAA+E;IAC/E,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAElD,wEAAwE;IACxE,MAAM,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB,IAAI,MAAM,CAAC;IAEjE,OAAO;QACL,OAAO;QACP,gBAAgB,EAAE,MAAM;QACxB,kBAAkB;QAClB,YAAY;QACZ,SAAS;QACT,cAAc,EAAE,IAAI,EAAE,cAAc,IAAI,CAAC;QACzC,sBAAsB,EAAE,IAAI,EAAE,sBAAsB,IAAI,CAAC;QACzD,cAAc;QACd,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,IAAI,CAAC;QAC7C,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,IAAI,CAAC;QAC7C,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,IAAI,EAAE;QACpD,cAAc,EAAE,IAAI,EAAE,cAAc,IAAI,GAAG;KAC5C,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAsB,EACtB,KAAc,EACd,iBAA0B,qBAAqB;IAE/C,8DAA8D;IAC9D,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,OAAO,GAAG,KAAK;YAAE,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC;IAC3C,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,GAAG,EAAE,CAAC;IAC1B,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACrD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC/C,eAAe,CAAC,OAAO,CAAC,CAAC;IAEzB,yBAAyB;IACzB,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,0CAA0C;YACxC,+EAA+E,CAClF,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,MAAM,OAAO,GACX,OAAO,CAAC,OAAO,IAAI,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAEjE,cAAc;IACd,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,CAAC,aAAa,CAAC,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;IACzD,MAAM,CAAC,oBAAoB,CAAC,GAAG,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAEvE,OAAO;QACL,YAAY;QACZ,OAAO;QACP,aAAa;QACb,oBAAoB;QACpB,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,YAAY,EAAE,KAAK,CAAC,OAAO;KAC5B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAyB;IAEzB,yDAAyD;IACzD,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAExD,wEAAwE;IACxE,MAAM,UAAU,GAAkB;QAChC,GAAG,OAAO,CAAC,eAAe;QAC1B,WAAW,EAAE;YACX,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG;YACzB,YAAY,EAAE,cAAc,CAAC,YAAY;YACzC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO;YAC5C,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;SAClC;KACF,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEvD,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,cAAc;KACzB,CAAC;AACJ,CAAC"}

package/dist/inspector.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Instruction Inspector — Kit-native
+ *
+ * Analyzes Kit Instruction[] arrays (pre-compilation) to extract:
+ *   - Unique program IDs involved
+ *   - SPL Token transfers (Transfer and TransferChecked)
+ *   - Estimated USD value of outgoing transfers
+ *
+ */
+import type { Address } from "@solana/kit";
+import type { ConstraintEntry } from "./generated/types/constraintEntry.js";
+/**
+ * Kit-native instruction shape for inspection.
+ * Compatible with Kit's IInstruction interface.
+ */
+export interface InspectableInstruction {
+    programAddress: Address;
+    accounts?: readonly {
+        address: Address;
+    }[];
+    data?: Uint8Array;
+}
+/** Parsed SPL Token transfer info */
+export interface TokenTransferInfo {
+    /** Token mint address (only available for TransferChecked, null for Transfer) */
+    mint: Address | null;
+    /** Transfer amount in base units */
+    amount: bigint;
+    /** Source token account */
+    source: Address;
+    /** Destination token account */
+    destination: Address;
+    /** Authority (signer) of the transfer */
+    authority: Address;
+}
+/** A dangerous SPL Token operation detected by the inspector. */
+export interface DangerousTokenOperation {
+    /** Type of dangerous operation */
+    type: "approve" | "setAuthority" | "closeAccount" | "revoke";
+    /** The token account being affected */
+    account: Address;
+}
+/** Result of analyzing a set of instructions */
+export interface InstructionAnalysis {
+    /** Unique program IDs referenced across all instructions */
+    programIds: Address[];
+    /** Detected SPL Token transfers */
+    tokenTransfers: TokenTransferInfo[];
+    /** Sum of outgoing transfer amounts (where authority === signerAddress) */
+    estimatedValue: bigint;
+    /** Dangerous SPL Token operations (approve, setAuthority, closeAccount) */
+    dangerousOperations: DangerousTokenOperation[];
+}
+/**
+ * Analyze a set of Kit instructions to extract program IDs, token transfers,
+ * and estimated outgoing value.
+ *
+ * @param instructions - Kit-native instructions to analyze
+ * @param signerAddress - The signer's address (to determine transfer direction)
+ * @returns Analysis result with program IDs, transfers, and estimated value
+ */
+export declare function analyzeInstructions(instructions: InspectableInstruction[], signerAddress: Address): InstructionAnalysis;
+export interface ConstraintSummary {
+    /** 0-based index in the constraints array. */
+    index: number;
+    /** Protocol program address this constraint targets. */
+    program: Address;
+    /** Human-readable protocol name (e.g. "Jupiter") or shortened address. */
+    programName: string;
+    /** Number of data constraints (byte-level rules). */
+    dataConstraintCount: number;
+    /** Number of account constraints (address-level rules). */
+    accountConstraintCount: number;
+    /** Human-readable description of each rule. */
+    rules: string[];
+}
+/**
+ * Inspect an InstructionConstraints account and return a human-readable
+ * summary of each constraint entry.
+ *
+ * @param entries - The constraint entries from the InstructionConstraints PDA.
+ *   Obtain via: `(await resolveVaultState(rpc, vault, agent)).constraints?.entries`
+ */
+export declare function inspectConstraints(entries: ConstraintEntry[]): ConstraintSummary[];
+//# sourceMappingURL=inspector.d.ts.map

package/dist/inspector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspector.d.ts","sourceRoot":"","sources":["../src/inspector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAmB5E;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,SAAS;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAC3C,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,qCAAqC;AACrC,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,2BAA2B;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,gCAAgC;IAChC,WAAW,EAAE,OAAO,CAAC;IACrB,yCAAyC;IACzC,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,iEAAiE;AACjE,MAAM,WAAW,uBAAuB;IACtC,kCAAkC;IAClC,IAAI,EAAE,SAAS,GAAG,cAAc,GAAG,cAAc,GAAG,QAAQ,CAAC;IAC7D,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,gDAAgD;AAChD,MAAM,WAAW,mBAAmB;IAClC,4DAA4D;IAC5D,UAAU,EAAE,OAAO,EAAE,CAAC;IACtB,mCAAmC;IACnC,cAAc,EAAE,iBAAiB,EAAE,CAAC;IACpC,2EAA2E;IAC3E,cAAc,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,mBAAmB,EAAE,uBAAuB,EAAE,CAAC;CAChD;AAID;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,sBAAsB,EAAE,EACtC,aAAa,EAAE,OAAO,GACrB,mBAAmB,CAiHrB;AAID,MAAM,WAAW,iBAAiB;IAChC,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,OAAO,EAAE,OAAO,CAAC;IACjB,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,2DAA2D;IAC3D,sBAAsB,EAAE,MAAM,CAAC;IAC/B,+CAA+C;IAC/C,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAYD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,eAAe,EAAE,GACzB,iBAAiB,EAAE,CAmCrB"}

package/dist/inspector.js

@@ -0,0 +1,188 @@
+/**
+ * Instruction Inspector — Kit-native
+ *
+ * Analyzes Kit Instruction[] arrays (pre-compilation) to extract:
+ *   - Unique program IDs involved
+ *   - SPL Token transfers (Transfer and TransferChecked)
+ *   - Estimated USD value of outgoing transfers
+ *
+ */
+import { resolveProtocolName } from "./protocol-names.js";
+// ─── Constants ───────────────────────────────────────────────────────────────
+const TOKEN_PROGRAM_ID = "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";
+const TOKEN_2022_PROGRAM_ID = "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb";
+/** SPL Token instruction discriminators */
+const SPL_TRANSFER_DISCRIMINATOR = 3;
+const SPL_APPROVE_DISCRIMINATOR = 4;
+const SPL_REVOKE_DISCRIMINATOR = 5;
+const SPL_SET_AUTHORITY_DISCRIMINATOR = 6;
+const SPL_CLOSE_ACCOUNT_DISCRIMINATOR = 9;
+const SPL_TRANSFER_CHECKED_DISCRIMINATOR = 12;
+const SPL_APPROVE_CHECKED_DISCRIMINATOR = 13;
+// ─── Core ────────────────────────────────────────────────────────────────────
+/**
+ * Analyze a set of Kit instructions to extract program IDs, token transfers,
+ * and estimated outgoing value.
+ *
+ * @param instructions - Kit-native instructions to analyze
+ * @param signerAddress - The signer's address (to determine transfer direction)
+ * @returns Analysis result with program IDs, transfers, and estimated value
+ */
+export function analyzeInstructions(instructions, signerAddress) {
+    const programIdSet = new Set();
+    const tokenTransfers = [];
+    const dangerousOperations = [];
+    let estimatedValue = 0n;
+    for (const ix of instructions) {
+        // Collect unique program IDs
+        programIdSet.add(ix.programAddress);
+        // Check for token program instructions
+        if (ix.programAddress !== TOKEN_PROGRAM_ID &&
+            ix.programAddress !== TOKEN_2022_PROGRAM_ID) {
+            continue;
+        }
+        if (!ix.data || ix.data.length === 0)
+            continue;
+        const discriminator = ix.data[0];
+        const accounts = ix.accounts ?? [];
+        if (discriminator === SPL_TRANSFER_DISCRIMINATOR) {
+            // Transfer layout: [1 byte disc][8 bytes amount LE]
+            // Accounts: [source, destination, authority]
+            if (ix.data.length < 9 || accounts.length < 3)
+                continue;
+            const amount = readU64LE(ix.data, 1);
+            const source = accounts[0].address;
+            const destination = accounts[1].address;
+            const authority = accounts[2].address;
+            const transfer = {
+                mint: null, // Not available in Transfer instruction (only TransferChecked provides mint)
+                amount,
+                source,
+                destination,
+                authority,
+            };
+            tokenTransfers.push(transfer);
+            // Sum outgoing transfers
+            if (authority === signerAddress) {
+                estimatedValue += amount;
+            }
+        }
+        else if (discriminator === SPL_TRANSFER_CHECKED_DISCRIMINATOR) {
+            // TransferChecked layout: [1 byte disc][8 bytes amount LE][1 byte decimals]
+            // Accounts: [source, mint, destination, authority]
+            if (ix.data.length < 10 || accounts.length < 4)
+                continue;
+            const amount = readU64LE(ix.data, 1);
+            const source = accounts[0].address;
+            const mint = accounts[1].address;
+            const destination = accounts[2].address;
+            const authority = accounts[3].address;
+            const transfer = {
+                mint,
+                amount,
+                source,
+                destination,
+                authority,
+            };
+            tokenTransfers.push(transfer);
+            // Sum outgoing transfers
+            if (authority === signerAddress) {
+                estimatedValue += amount;
+            }
+        }
+        // Detect dangerous token operations (approve, setAuthority, closeAccount, revoke)
+        if (discriminator === SPL_APPROVE_DISCRIMINATOR ||
+            discriminator === SPL_APPROVE_CHECKED_DISCRIMINATOR) {
+            if (accounts.length >= 1) {
+                dangerousOperations.push({
+                    type: "approve",
+                    account: accounts[0].address,
+                });
+            }
+        }
+        else if (discriminator === SPL_SET_AUTHORITY_DISCRIMINATOR) {
+            if (accounts.length >= 1) {
+                dangerousOperations.push({
+                    type: "setAuthority",
+                    account: accounts[0].address,
+                });
+            }
+        }
+        else if (discriminator === SPL_CLOSE_ACCOUNT_DISCRIMINATOR) {
+            if (accounts.length >= 1) {
+                dangerousOperations.push({
+                    type: "closeAccount",
+                    account: accounts[0].address,
+                });
+            }
+        }
+        else if (discriminator === SPL_REVOKE_DISCRIMINATOR) {
+            if (accounts.length >= 1) {
+                dangerousOperations.push({
+                    type: "revoke",
+                    account: accounts[0].address,
+                });
+            }
+        }
+    }
+    return {
+        programIds: Array.from(programIdSet),
+        tokenTransfers,
+        estimatedValue,
+        dangerousOperations,
+    };
+}
+const OPERATOR_NAMES = {
+    0: "==",
+    1: "!=",
+    2: "<",
+    3: "<=",
+    4: ">",
+    5: ">=",
+    6: "contains",
+};
+/**
+ * Inspect an InstructionConstraints account and return a human-readable
+ * summary of each constraint entry.
+ *
+ * @param entries - The constraint entries from the InstructionConstraints PDA.
+ *   Obtain via: `(await resolveVaultState(rpc, vault, agent)).constraints?.entries`
+ */
+export function inspectConstraints(entries) {
+    return entries
+        .map((entry, index) => {
+        const program = entry.programId;
+        const programName = resolveProtocolName(String(program));
+        const rules = [];
+        // Data constraints: { offset, operator: ConstraintOperator, value: ReadonlyUint8Array }
+        for (const dc of entry.dataConstraints ?? []) {
+            const opNum = typeof dc.operator === "number" ? dc.operator : dc.operator.__kind ? 0 : 0;
+            const op = OPERATOR_NAMES[opNum] ?? `op(${String(dc.operator)})`;
+            const bytes = new Uint8Array(dc.value);
+            const valueHex = Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
+            rules.push(`data[${dc.offset}..+${bytes.length}] ${op} 0x${valueHex}`);
+        }
+        // Account constraints: { index, expected: Address }
+        for (const ac of entry.accountConstraints ?? []) {
+            rules.push(`account[${ac.index}] == ${ac.expected}`);
+        }
+        return {
+            index,
+            program,
+            programName,
+            dataConstraintCount: entry.dataConstraints?.length ?? 0,
+            accountConstraintCount: entry.accountConstraints?.length ?? 0,
+            rules,
+        };
+    })
+        .filter((s) => s.rules.length > 0);
+}
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+/**
+ * Read a u64 (8 bytes) in little-endian from a Uint8Array.
+ */
+function readU64LE(data, offset) {
+    const view = new DataView(data.buffer, data.byteOffset, data.byteLength);
+    return view.getBigUint64(offset, true);
+}
+//# sourceMappingURL=inspector.js.map

package/dist/inspector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspector.js","sourceRoot":"","sources":["../src/inspector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,gFAAgF;AAEhF,MAAM,gBAAgB,GAAG,6CAA6C,CAAC;AACvE,MAAM,qBAAqB,GAAG,6CAA6C,CAAC;AAE5E,2CAA2C;AAC3C,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AACpC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAC1C,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAC1C,MAAM,kCAAkC,GAAG,EAAE,CAAC;AAC9C,MAAM,iCAAiC,GAAG,EAAE,CAAC;AAgD7C,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAsC,EACtC,aAAsB;IAEtB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,cAAc,GAAwB,EAAE,CAAC;IAC/C,MAAM,mBAAmB,GAA8B,EAAE,CAAC;IAC1D,IAAI,cAAc,GAAG,EAAE,CAAC;IAExB,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;QAC9B,6BAA6B;QAC7B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAEpC,uCAAuC;QACvC,IACE,EAAE,CAAC,cAAc,KAAK,gBAAgB;YACtC,EAAE,CAAC,cAAc,KAAK,qBAAqB,EAC3C,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAE/C,MAAM,aAAa,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;QAEnC,IAAI,aAAa,KAAK,0BAA0B,EAAE,CAAC;YACjD,oDAAoD;YACpD,6CAA6C;YAC7C,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAExD,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACnC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACxC,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAEtC,MAAM,QAAQ,GAAsB;gBAClC,IAAI,EAAE,IAAI,EAAE,6EAA6E;gBACzF,MAAM;gBACN,MAAM;gBACN,WAAW;gBACX,SAAS;aACV,CAAC;YACF,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAE9B,yBAAyB;YACzB,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;gBAChC,cAAc,IAAI,MAAM,CAAC;YAC3B,CAAC;QACH,CAAC;aAAM,IAAI,aAAa,KAAK,kCAAkC,EAAE,CAAC;YAChE,4EAA4E;YAC5E,mDAAmD;YACnD,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAEzD,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACjC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACxC,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAEtC,MAAM,QAAQ,GAAsB;gBAClC,IAAI;gBACJ,MAAM;gBACN,MAAM;gBACN,WAAW;gBACX,SAAS;aACV,CAAC;YACF,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAE9B,yBAAyB;YACzB,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;gBAChC,cAAc,IAAI,MAAM,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,kFAAkF;QAClF,IACE,aAAa,KAAK,yBAAyB;YAC3C,aAAa,KAAK,iCAAiC,EACnD,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACzB,mBAAmB,CAAC,IAAI,CAAC;oBACvB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,aAAa,KAAK,+BAA+B,EAAE,CAAC;YAC7D,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACzB,mBAAmB,CAAC,IAAI,CAAC;oBACvB,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,aAAa,KAAK,+BAA+B,EAAE,CAAC;YAC7D,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACzB,mBAAmB,CAAC,IAAI,CAAC;oBACvB,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,aAAa,KAAK,wBAAwB,EAAE,CAAC;YACtD,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACzB,mBAAmB,CAAC,IAAI,CAAC;oBACvB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAc;QACjD,cAAc;QACd,cAAc;QACd,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAmBD,MAAM,cAAc,GAA2B;IAC7C,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,UAAU;CACd,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA0B;IAE1B,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACpB,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC;QAChC,MAAM,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACzD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,wFAAwF;QACxF,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,QAA+B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjH,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,MAAM,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;YACjE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,KAAqC,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxF,KAAK,CAAC,IAAI,CACR,QAAQ,EAAE,CAAC,MAAM,MAAM,KAAK,CAAC,MAAM,KAAK,EAAE,MAAM,QAAQ,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,oDAAoD;QACpD,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;YAChD,KAAK,CAAC,IAAI,CACR,WAAW,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,QAAQ,EAAE,CACzC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,KAAK;YACL,OAAO;YACP,WAAW;YACX,mBAAmB,EAAE,KAAK,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC;YACvD,sBAAsB,EAAE,KAAK,CAAC,kBAAkB,EAAE,MAAM,IAAI,CAAC;YAC7D,KAAK;SACN,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,gFAAgF;AAEhF;;GAEG;AACH,SAAS,SAAS,CAAC,IAAgB,EAAE,MAAc;IACjD,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC"}

package/dist/math-utils.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Shared math utilities for analytics modules.
+ */
+/**
+ * Herfindahl-Hirschman Index (0-1) for concentration analysis.
+ *
+ * H ≈ 1/N: evenly distributed among N entities.
+ * H = 1: single entity dominates.
+ *
+ * Uses bigint-safe computation: share is calculated in bigint space (scaled
+ * to 10000 BPS) before converting to Number, avoiding precision loss for
+ * values up to ~$900 trillion.
+ */
+export declare function computeHerfindahl(values: bigint[]): number;
+//# sourceMappingURL=math-utils.d.ts.map

package/dist/math-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"math-utils.d.ts","sourceRoot":"","sources":["../src/math-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAc1D"}

package/dist/math-utils.js

@@ -0,0 +1,29 @@
+/**
+ * Shared math utilities for analytics modules.
+ */
+/**
+ * Herfindahl-Hirschman Index (0-1) for concentration analysis.
+ *
+ * H ≈ 1/N: evenly distributed among N entities.
+ * H = 1: single entity dominates.
+ *
+ * Uses bigint-safe computation: share is calculated in bigint space (scaled
+ * to 10000 BPS) before converting to Number, avoiding precision loss for
+ * values up to ~$900 trillion.
+ */
+export function computeHerfindahl(values) {
+    const total = values.reduce((sum, v) => sum + v, 0n);
+    if (total === 0n)
+        return 0;
+    let sumSquares = 0;
+    for (const v of values) {
+        if (v === 0n)
+            continue;
+        // Compute share in bigint space (BPS precision) to avoid Number() on raw bigints
+        const shareBps = Number((v * 10000n) / total);
+        const share = shareBps / 10000;
+        sumSquares += share * share;
+    }
+    return sumSquares;
+}
+//# sourceMappingURL=math-utils.js.map

package/dist/math-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"math-utils.js","sourceRoot":"","sources":["../src/math-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAgB;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,CAAC,CAAC;IAE3B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE;YAAE,SAAS;QACvB,iFAAiF;QACjF,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,QAAQ,GAAG,KAAK,CAAC;QAC/B,UAAU,IAAI,KAAK,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/owner-transaction.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Owner-side transaction builder for Sigil dashboard.
+ *
+ * Builds complete versioned transactions for owner-only instructions
+ * (freeze, deposit, withdraw, policy changes, agent management, constraints).
+ * Returns compiled (unsigned) transactions for wallet adapter signing.
+ *
+ * Unlike composeSigilTransaction() which builds the agent-side
+ * validate→DeFi→finalize sandwich, owner transactions are direct
+ * program calls with compute budget and ALT compression.
+ */
+import type { Instruction, Rpc, SolanaRpcApi, TransactionSigner, AddressesByLookupTableAddress } from "@solana/kit";
+import { compileTransaction } from "@solana/kit";
+import { type Blockhash } from "./rpc-helpers.js";
+export interface BuildOwnerTransactionParams {
+    /** RPC client for blockhash + ALT resolution. */
+    rpc: Rpc<SolanaRpcApi>;
+    /** Owner signer (fee payer). */
+    owner: TransactionSigner;
+    /** One or more Sigil owner instructions. */
+    instructions: Instruction[];
+    /** Network for ALT resolution. */
+    network: "devnet" | "mainnet";
+    /** Override compute units. Default: CU_OWNER_ACTION (200,000). */
+    computeUnits?: number;
+    /** Priority fee in microLamports per CU. Default: 0 (no priority fee). */
+    priorityFeeMicroLamports?: number;
+    /** Pre-resolved ALTs. If omitted, resolves Sigil ALT automatically. */
+    addressLookupTables?: AddressesByLookupTableAddress;
+    /** Pre-fetched blockhash. If omitted, fetches via RPC. */
+    blockhash?: Blockhash;
+}
+export interface OwnerTransactionResult {
+    /** Compiled versioned transaction (caller signs with wallet adapter). */
+    transaction: ReturnType<typeof compileTransaction>;
+    /** Wire size in bytes. */
+    txSizeBytes: number;
+    /** Base64-encoded wire transaction (for display/debugging). */
+    wireBase64: string;
+}
+export declare function buildOwnerTransaction(params: BuildOwnerTransactionParams): Promise<OwnerTransactionResult>;
+//# sourceMappingURL=owner-transaction.d.ts.map

package/dist/owner-transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-transaction.d.ts","sourceRoot":"","sources":["../src/owner-transaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAEV,WAAW,EACX,GAAG,EACH,YAAY,EACZ,iBAAiB,EACjB,6BAA6B,EAC9B,MAAM,aAAa,CAAC;AACrB,OAAO,EAOL,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAMrB,OAAO,EAAkB,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAQlE,MAAM,WAAW,2BAA2B;IAC1C,iDAAiD;IACjD,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IACvB,gCAAgC;IAChC,KAAK,EAAE,iBAAiB,CAAC;IACzB,4CAA4C;IAC5C,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,kCAAkC;IAClC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC9B,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uEAAuE;IACvE,mBAAmB,CAAC,EAAE,6BAA6B,CAAC;IACpD,0DAA0D;IAC1D,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,yEAAyE;IACzE,WAAW,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;IACnD,0BAA0B;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;CACpB;AASD,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,2BAA2B,GAClC,OAAO,CAAC,sBAAsB,CAAC,CAgFjC"}

package/dist/owner-transaction.js

@@ -0,0 +1,71 @@
+/**
+ * Owner-side transaction builder for Sigil dashboard.
+ *
+ * Builds complete versioned transactions for owner-only instructions
+ * (freeze, deposit, withdraw, policy changes, agent management, constraints).
+ * Returns compiled (unsigned) transactions for wallet adapter signing.
+ *
+ * Unlike composeSigilTransaction() which builds the agent-side
+ * validate→DeFi→finalize sandwich, owner transactions are direct
+ * program calls with compute budget and ALT compression.
+ */
+import { pipe, createTransactionMessage, setTransactionMessageFeePayer, appendTransactionMessageInstructions, setTransactionMessageLifetimeUsingBlockhash, compressTransactionMessageUsingAddressLookupTables, compileTransaction, } from "@solana/kit";
+import { getSetComputeUnitLimitInstruction, getSetComputeUnitPriceInstruction, } from "@solana-program/compute-budget";
+import { measureTransactionSize, MAX_TX_SIZE } from "./composer.js";
+import { BlockhashCache } from "./rpc-helpers.js";
+import { AltCache } from "./alt-loader.js";
+import { getSigilAltAddress } from "./alt-config.js";
+import { CU_OWNER_ACTION } from "./priority-fees.js";
+import { normalizeNetwork } from "./types.js";
+// ─── Module-level caches (same pattern as wrap.ts) ──────────────────────────
+const blockhashCache = new BlockhashCache();
+const altCache = new AltCache();
+// ─── buildOwnerTransaction ──────────────────────────────────────────────────
+export async function buildOwnerTransaction(params) {
+    // 1. Validate inputs
+    if (!params.instructions.length) {
+        throw new Error("At least one instruction is required.");
+    }
+    // 2. Resolve blockhash + ALTs in parallel (independent RPC calls)
+    const net = normalizeNetwork(params.network);
+    const [blockhash, addressLookupTables] = await Promise.all([
+        params.blockhash
+            ? Promise.resolve(params.blockhash)
+            : blockhashCache.get(params.rpc),
+        params.addressLookupTables
+            ? Promise.resolve(params.addressLookupTables)
+            : altCache.resolve(params.rpc, [getSigilAltAddress(net)]),
+    ]);
+    // 3. Build compute budget instructions
+    const computeUnits = params.computeUnits ?? CU_OWNER_ACTION;
+    const allInstructions = [
+        getSetComputeUnitLimitInstruction({ units: computeUnits }),
+    ];
+    if (params.priorityFeeMicroLamports !== undefined &&
+        params.priorityFeeMicroLamports > 0) {
+        allInstructions.push(getSetComputeUnitPriceInstruction({
+            microLamports: params.priorityFeeMicroLamports,
+        }));
+    }
+    // 4. Append owner instructions
+    allInstructions.push(...params.instructions);
+    // 5. Build transaction message via pipe()
+    let txMessage = pipe(createTransactionMessage({ version: 0 }), (tx) => setTransactionMessageFeePayer(params.owner.address, tx), (tx) => setTransactionMessageLifetimeUsingBlockhash(blockhash, tx), (tx) => appendTransactionMessageInstructions(allInstructions, tx));
+    // 6. Apply ALT compression
+    if (addressLookupTables && Object.keys(addressLookupTables).length > 0) {
+        txMessage = compressTransactionMessageUsingAddressLookupTables(txMessage, addressLookupTables);
+    }
+    // 7. Compile and validate size
+    const compiledTx = compileTransaction(txMessage);
+    const { wireBase64, byteLength, withinLimit } = measureTransactionSize(compiledTx);
+    if (!withinLimit) {
+        throw new Error(`Owner transaction size ${byteLength} bytes exceeds limit of ${MAX_TX_SIZE} bytes. ` +
+            `Reduce instruction count or use address lookup tables.`);
+    }
+    return {
+        transaction: compiledTx,
+        txSizeBytes: byteLength,
+        wireBase64,
+    };
+}
+//# sourceMappingURL=owner-transaction.js.map

package/dist/owner-transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-transaction.js","sourceRoot":"","sources":["../src/owner-transaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH,OAAO,EACL,IAAI,EACJ,wBAAwB,EACxB,6BAA6B,EAC7B,oCAAoC,EACpC,2CAA2C,EAC3C,kDAAkD,EAClD,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,cAAc,EAAkB,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAgB,MAAM,YAAY,CAAC;AAgC5D,+EAA+E;AAE/E,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;AAC5C,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;AAEhC,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAmC;IAEnC,qBAAqB;IACrB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,kEAAkE;IAClE,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,MAAM,CAAC,SAAS;YACd,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YACnC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;QAClC,MAAM,CAAC,mBAAmB;YACxB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAC7C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;KAC5D,CAAC,CAAC;IAEH,uCAAuC;IACvC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,eAAe,CAAC;IAC5D,MAAM,eAAe,GAAkB;QACrC,iCAAiC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;KAC3D,CAAC;IAEF,IACE,MAAM,CAAC,wBAAwB,KAAK,SAAS;QAC7C,MAAM,CAAC,wBAAwB,GAAG,CAAC,EACnC,CAAC;QACD,eAAe,CAAC,IAAI,CAClB,iCAAiC,CAAC;YAChC,aAAa,EAAE,MAAM,CAAC,wBAAwB;SAC/C,CAAC,CACH,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,eAAe,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAE7C,0CAA0C;IAC1C,IAAI,SAAS,GAAG,IAAI,CAClB,wBAAwB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EACxC,CAAC,EAAE,EAAE,EAAE,CAAC,6BAA6B,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,EAC/D,CAAC,EAAE,EAAE,EAAE,CACL,2CAA2C,CACzC,SAEI,EACJ,EAAE,CACH,EACH,CAAC,EAAE,EAAE,EAAE,CAAC,oCAAoC,CAAC,eAAe,EAAE,EAAE,CAAC,CAClE,CAAC;IAEF,2BAA2B;IAC3B,IAAI,mBAAmB,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,SAAS,GAAG,kDAAkD,CAC5D,SAEI,EACJ,mBAAmB,CACA,CAAC;IACxB,CAAC;IAED,+BAA+B;IAC/B,MAAM,UAAU,GAAG,kBAAkB,CACnC,SAAqD,CACtD,CAAC;IACF,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,GAC3C,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAErC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,0BAA0B,UAAU,2BAA2B,WAAW,UAAU;YAClF,wDAAwD,CAC3D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,UAAU;QACvB,UAAU;KACX,CAAC;AACJ,CAAC"}