@usesigil/kit 0.1.0

package/dist/tee/verify.js

@@ -0,0 +1,177 @@
+/**
+ * TEE Attestation Dispatcher
+ *
+ * Main entry point for TEE attestation verification.
+ * Detects the provider from the wallet, routes to the appropriate verifier,
+ * manages caching, and enforces requireAttestation + minAttestationLevel.
+ */
+import { isTeeWallet } from "./wallet-types.js";
+import { TeeAttestationError } from "./wallet-types.js";
+import { AttestationCache, DEFAULT_CACHE_TTL_MS } from "./cache.js";
+import { AttestationStatus, } from "./types.js";
+import { verifyCrossmint } from "./providers/crossmint.js";
+import { verifyPrivy } from "./providers/privy.js";
+import { verifyTurnkey } from "./providers/turnkey.js";
+/** Module-level singleton cache. */
+const globalCache = new AttestationCache(DEFAULT_CACHE_TTL_MS);
+/** Detect the TEE provider from a wallet. */
+function detectProvider(wallet) {
+    if (!isTeeWallet(wallet))
+        return null;
+    const provider = wallet.provider.toLowerCase();
+    if (provider === "crossmint" ||
+        provider === "turnkey" ||
+        provider === "privy") {
+        return provider;
+    }
+    return null;
+}
+/** Check if an attestation status meets the minimum required level. */
+function attestationStatusMeetsLevel(status, level) {
+    const levelOrder = {
+        provider_trusted: 0,
+        provider_verified: 1,
+        cryptographic: 2,
+    };
+    const statusToLevel = {
+        [AttestationStatus.ProviderTrusted]: 0,
+        [AttestationStatus.ProviderVerified]: 1,
+        [AttestationStatus.CryptographicallyVerified]: 2,
+    };
+    const statusLevel = statusToLevel[status];
+    if (statusLevel === undefined)
+        return false; // Failed/Unavailable never meet any level
+    return statusLevel >= levelOrder[level];
+}
+/**
+ * Verify TEE attestation for a wallet.
+ *
+ * Flow:
+ * 1. Check cache (unless cacheTtlMs === 0)
+ * 2. Detect provider from wallet
+ * 3. Route to provider-specific verifier
+ * 4. Cache result
+ * 5. Fire onVerified callback on success
+ * 6. If requireAttestation is true and verification failed, throw
+ * 7. If minAttestationLevel is set and not met, throw
+ */
+export async function verifyTeeAttestation(wallet, config) {
+    // Kit Address is already base58 — no conversion needed
+    const publicKey = wallet.publicKey;
+    const cacheTtlMs = config?.cacheTtlMs ?? DEFAULT_CACHE_TTL_MS;
+    const useCache = Number.isFinite(cacheTtlMs) && cacheTtlMs > 0;
+    // H3: Include config-sensitive params in cache key so different configs
+    // don't share results (e.g., different expectedPcr3 values).
+    const cacheKey = config?.expectedPcr3
+        ? `${publicKey}:pcr3=${config.expectedPcr3}`
+        : publicKey;
+    // Step 1: Cache check
+    let result;
+    if (useCache) {
+        result = globalCache.get(cacheKey);
+    }
+    // Step 2-3: Verify if not cached
+    if (!result) {
+        const provider = detectProvider(wallet);
+        if (!provider) {
+            // TeeProvider is required by AttestationResult — "crossmint" used as
+            // placeholder for unrecognized wallets. Status is Unavailable so the
+            // provider value is informational only and not acted upon.
+            result = {
+                status: AttestationStatus.Unavailable,
+                provider: "crossmint",
+                publicKey,
+                metadata: {
+                    provider: "crossmint",
+                    verifiedAt: Date.now(),
+                },
+                message: "Wallet does not expose a recognized TEE provider.",
+            };
+        }
+        else {
+            switch (provider) {
+                case "crossmint":
+                    result = await verifyCrossmint(wallet, config);
+                    break;
+                case "privy":
+                    result = await verifyPrivy(wallet, config);
+                    break;
+                case "turnkey":
+                    result = await verifyTurnkey(wallet, config);
+                    break;
+                default:
+                    result = {
+                        status: AttestationStatus.Unavailable,
+                        provider,
+                        publicKey,
+                        metadata: { provider, verifiedAt: Date.now() },
+                        message: `Unknown provider: ${provider}`,
+                    };
+            }
+        }
+        // M6: Only cache successful results — failed/unavailable should allow retry.
+        // Also skip caching ProviderTrusted results from API failures (custodyCheckFailed)
+        // so the next call can retry the custody API and potentially get ProviderVerified.
+        const isCustodyFallback = result.metadata.rawAttestation &&
+            typeof result.metadata.rawAttestation === "object" &&
+            result.metadata.rawAttestation
+                .custodyCheckFailed === true;
+        if (useCache &&
+            !isCustodyFallback &&
+            (result.status === AttestationStatus.CryptographicallyVerified ||
+                result.status === AttestationStatus.ProviderVerified ||
+                result.status === AttestationStatus.ProviderTrusted)) {
+            globalCache.set(cacheKey, result, cacheTtlMs);
+        }
+    }
+    // Step 5: onVerified callback
+    // H5: Wrap in try-catch to prevent user callback errors from aborting vault creation
+    if (result.status === AttestationStatus.CryptographicallyVerified ||
+        result.status === AttestationStatus.ProviderVerified ||
+        result.status === AttestationStatus.ProviderTrusted) {
+        try {
+            config?.onVerified?.(result);
+        }
+        catch {
+            // Attestation succeeded — callback errors are non-fatal
+        }
+    }
+    // C3: Enforce requireAttestation ALWAYS — including on cache hits.
+    // Previously, the early cache return bypassed this check entirely.
+    if (config?.requireAttestation) {
+        if (result.status !== AttestationStatus.CryptographicallyVerified &&
+            result.status !== AttestationStatus.ProviderVerified &&
+            result.status !== AttestationStatus.ProviderTrusted) {
+            throw new TeeAttestationError(`TEE attestation required but verification ${result.status}: ${result.message}`);
+        }
+    }
+    // Enforce minAttestationLevel — defaults to ProviderVerified when requireAttestation
+    // is true but no explicit level is set (prevents ProviderTrusted from passing silently)
+    const effectiveMinLevel = config?.minAttestationLevel ??
+        (config?.requireAttestation ? AttestationStatus.ProviderVerified : undefined);
+    if (effectiveMinLevel) {
+        if (!attestationStatusMeetsLevel(result.status, effectiveMinLevel)) {
+            throw new TeeAttestationError(`Attestation level ${result.status} does not meet minimum required level: ${effectiveMinLevel}`);
+        }
+    }
+    return result;
+}
+/** Clear the global attestation cache (useful for testing). */
+export function clearAttestationCache() {
+    globalCache.clear();
+}
+/** Delete a single entry from the global cache. */
+/** Delete all cache entries for a wallet (including PCR3-suffixed variants). */
+export function deleteFromAttestationCache(publicKey) {
+    const directDeleted = globalCache.delete(publicKey);
+    const prefixDeleted = globalCache.deleteByPrefix(`${publicKey}:`);
+    return directDeleted || prefixDeleted > 0;
+}
+/**
+ * Get the global attestation cache instance (for testing/inspection only).
+ * @internal
+ */
+export function getGlobalCache() {
+    return globalCache;
+}
+//# sourceMappingURL=verify.js.map

package/dist/tee/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/tee/verify.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,EACL,iBAAiB,GAKlB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,oCAAoC;AACpC,MAAM,WAAW,GAAG,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;AAE/D,6CAA6C;AAC7C,SAAS,cAAc,CAAC,MAAkB;IACxC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,QAAQ,GAAI,MAAoB,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC9D,IACE,QAAQ,KAAK,WAAW;QACxB,QAAQ,KAAK,SAAS;QACtB,QAAQ,KAAK,OAAO,EACpB,CAAC;QACD,OAAO,QAAuB,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uEAAuE;AACvE,SAAS,2BAA2B,CAClC,MAAyB,EACzB,KAAuB;IAEvB,MAAM,UAAU,GAAqC;QACnD,gBAAgB,EAAE,CAAC;QACnB,iBAAiB,EAAE,CAAC;QACpB,aAAa,EAAE,CAAC;KACjB,CAAC;IACF,MAAM,aAAa,GAA2B;QAC5C,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE,CAAC;QACtC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACvC,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,EAAE,CAAC;KACjD,CAAC;IACF,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,0CAA0C;IACvF,OAAO,WAAW,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkB,EAClB,MAA0B;IAE1B,uDAAuD;IACvD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,oBAAoB,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC;IAE/D,wEAAwE;IACxE,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,MAAM,EAAE,YAAY;QACnC,CAAC,CAAC,GAAG,SAAS,SAAS,MAAM,CAAC,YAAY,EAAE;QAC5C,CAAC,CAAC,SAAS,CAAC;IAEd,sBAAsB;IACtB,IAAI,MAAqC,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,iCAAiC;IACjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAExC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,qEAAqE;YACrE,qEAAqE;YACrE,2DAA2D;YAC3D,MAAM,GAAG;gBACP,MAAM,EAAE,iBAAiB,CAAC,WAAW;gBACrC,QAAQ,EAAE,WAA0B;gBACpC,SAAS;gBACT,QAAQ,EAAE;oBACR,QAAQ,EAAE,WAA0B;oBACpC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;iBACvB;gBACD,OAAO,EAAE,mDAAmD;aAC7D,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,QAAQ,QAAQ,EAAE,CAAC;gBACjB,KAAK,WAAW;oBACd,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC/C,MAAM;gBACR,KAAK,OAAO;oBACV,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC3C,MAAM;gBACR,KAAK,SAAS;oBACZ,MAAM,GAAG,MAAM,aAAa,CAAC,MAAmB,EAAE,MAAM,CAAC,CAAC;oBAC1D,MAAM;gBACR;oBACE,MAAM,GAAG;wBACP,MAAM,EAAE,iBAAiB,CAAC,WAAW;wBACrC,QAAQ;wBACR,SAAS;wBACT,QAAQ,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;wBAC9C,OAAO,EAAE,qBAAqB,QAAQ,EAAE;qBACzC,CAAC;YACN,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,mFAAmF;QACnF,mFAAmF;QACnF,MAAM,iBAAiB,GACrB,MAAM,CAAC,QAAQ,CAAC,cAAc;YAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,cAAc,KAAK,QAAQ;YACjD,MAAM,CAAC,QAAQ,CAAC,cAA0C;iBACxD,kBAAkB,KAAK,IAAI,CAAC;QACjC,IACE,QAAQ;YACR,CAAC,iBAAiB;YAClB,CAAC,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,yBAAyB;gBAC5D,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,gBAAgB;gBACpD,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,eAAe,CAAC,EACtD,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,qFAAqF;IACrF,IACE,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,yBAAyB;QAC7D,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,gBAAgB;QACpD,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,eAAe,EACnD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,mEAAmE;IACnE,IAAI,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC/B,IACE,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,yBAAyB;YAC7D,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,gBAAgB;YACpD,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,eAAe,EACnD,CAAC;YACD,MAAM,IAAI,mBAAmB,CAC3B,6CAA6C,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO,EAAE,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qFAAqF;IACrF,wFAAwF;IACxF,MAAM,iBAAiB,GACrB,MAAM,EAAE,mBAAmB;QAC3B,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChF,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,MAAM,CAAC,MAAM,0CAA0C,iBAAiB,EAAE,CAChG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,qBAAqB;IACnC,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,mDAAmD;AACnD,gFAAgF;AAChF,MAAM,UAAU,0BAA0B,CAAC,SAAiB;IAC1D,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,WAAW,CAAC,cAAc,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAClE,OAAO,aAAa,IAAI,aAAa,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/tee/wallet-types.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Wallet interface types for TEE attestation — Kit-native.
+ *
+ * Uses Kit's `Address` (branded base58 string) for public keys.
+ * Zero dependency on @solana/web3.js.
+ */
+import type { Address } from "@solana/kit";
+/**
+ * A wallet-like object with a Kit Address public key.
+ *
+ * Kit `Address` is a branded string (`string & { __brand: ... }`), so
+ * `wallet.publicKey` is ALREADY base58 — no `.toBase58()` needed.
+ */
+export interface WalletLike {
+    /** Base58-encoded public key as a Kit `Address`. */
+    readonly publicKey: Address;
+    /** Optional: sign a transaction. Generic — callers cast to specific type. */
+    signTransaction?(tx: unknown): Promise<unknown>;
+}
+/**
+ * A TEE-backed wallet with provider identification.
+ *
+ * Providers: "crossmint" (Intel TDX), "turnkey" (AWS Nitro), "privy" (AWS Nitro).
+ */
+export interface TeeWallet extends WalletLike {
+    /** Provider name: "crossmint" | "turnkey" | "privy". */
+    readonly provider: string;
+    /**
+     * API-based custody verification.
+     *
+     * Returns `true` if the provider API confirms this address is
+     * managed by their TEE infrastructure.
+     */
+    verifyProviderCustody?(): Promise<boolean>;
+    /**
+     * Retrieve a cryptographic attestation bundle.
+     *
+     * Used by Turnkey provider for COSE_Sign1 boot proof + P-256 app proof.
+     */
+    getAttestation?(): Promise<unknown>;
+}
+/** Known TEE wallet providers. */
+export declare const VALID_TEE_PROVIDERS: Set<string>;
+/** Type guard to detect TEE-backed wallets. */
+export declare function isTeeWallet(wallet: WalletLike): wallet is TeeWallet;
+/** Error class for TEE attestation failures. */
+export declare class TeeAttestationError extends Error {
+    constructor(message: string);
+}
+/** Error class for certificate chain validation failures. */
+export declare class AttestationCertChainError extends TeeAttestationError {
+    constructor(message: string);
+}
+/** Error class for PCR value mismatch. */
+export declare class AttestationPcrMismatchError extends TeeAttestationError {
+    readonly pcrIndex: number;
+    readonly expected: string;
+    readonly actual: string;
+    constructor(pcrIndex: number, expected: string, actual: string);
+}
+//# sourceMappingURL=wallet-types.d.ts.map

package/dist/tee/wallet-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-types.d.ts","sourceRoot":"","sources":["../../src/tee/wallet-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,oDAAoD;IACpD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,6EAA6E;IAC7E,eAAe,CAAC,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjD;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAU,SAAQ,UAAU;IAC3C,wDAAwD;IACxD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,qBAAqB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C;;;;OAIG;IACH,cAAc,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CACrC;AAED,kCAAkC;AAClC,eAAO,MAAM,mBAAmB,aAA6C,CAAC;AAE9E,+CAA+C;AAC/C,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,IAAI,SAAS,CAQnE;AAED,gDAAgD;AAChD,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAED,6DAA6D;AAC7D,qBAAa,yBAA0B,SAAQ,mBAAmB;gBACpD,OAAO,EAAE,MAAM;CAI5B;AAED,0CAA0C;AAC1C,qBAAa,2BAA4B,SAAQ,mBAAmB;IAClE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAO/D"}

package/dist/tee/wallet-types.js

@@ -0,0 +1,42 @@
+/**
+ * Wallet interface types for TEE attestation — Kit-native.
+ *
+ * Uses Kit's `Address` (branded base58 string) for public keys.
+ * Zero dependency on @solana/web3.js.
+ */
+/** Known TEE wallet providers. */
+export const VALID_TEE_PROVIDERS = new Set(["crossmint", "privy", "turnkey"]);
+/** Type guard to detect TEE-backed wallets. */
+export function isTeeWallet(wallet) {
+    return ("provider" in wallet &&
+        typeof wallet.provider === "string" &&
+        VALID_TEE_PROVIDERS.has(wallet.provider));
+}
+/** Error class for TEE attestation failures. */
+export class TeeAttestationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "TeeAttestationError";
+    }
+}
+/** Error class for certificate chain validation failures. */
+export class AttestationCertChainError extends TeeAttestationError {
+    constructor(message) {
+        super(message);
+        this.name = "AttestationCertChainError";
+    }
+}
+/** Error class for PCR value mismatch. */
+export class AttestationPcrMismatchError extends TeeAttestationError {
+    pcrIndex;
+    expected;
+    actual;
+    constructor(pcrIndex, expected, actual) {
+        super(`PCR${pcrIndex} mismatch: expected ${expected}, got ${actual}`);
+        this.name = "AttestationPcrMismatchError";
+        this.pcrIndex = pcrIndex;
+        this.expected = expected;
+        this.actual = actual;
+    }
+}
+//# sourceMappingURL=wallet-types.js.map

package/dist/tee/wallet-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-types.js","sourceRoot":"","sources":["../../src/tee/wallet-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAwCH,kCAAkC;AAClC,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAE9E,+CAA+C;AAC/C,MAAM,UAAU,WAAW,CAAC,MAAkB;IAC5C,OAAO,CACL,UAAU,IAAI,MAAM;QACpB,OAAQ,MAAkC,CAAC,QAAQ,KAAK,QAAQ;QAChE,mBAAmB,CAAC,GAAG,CACpB,MAAkC,CAAC,QAAkB,CACvD,CACF,CAAC;AACJ,CAAC;AAED,gDAAgD;AAChD,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,6DAA6D;AAC7D,MAAM,OAAO,yBAA0B,SAAQ,mBAAmB;IAChE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,0CAA0C;AAC1C,MAAM,OAAO,2BAA4B,SAAQ,mBAAmB;IACzD,QAAQ,CAAS;IACjB,QAAQ,CAAS;IACjB,MAAM,CAAS;IAExB,YAAY,QAAgB,EAAE,QAAgB,EAAE,MAAc;QAC5D,KAAK,CAAC,MAAM,QAAQ,uBAAuB,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF"}

package/dist/testing/devnet.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Kit-native Devnet Test Helpers
+ *
+ * Pure @solana/kit for RPC, signers, and vault operations.
+ * Uses @solana/spl-token + @solana/web3.js for stablecoin mint setup only.
+ *
+ * NOTE: This module imports node:fs and @solana/web3.js — do NOT re-export
+ * from the barrel (index.ts) to avoid breaking browser bundlers.
+ * Import directly: import { ... } from "@usesigil/kit/testing/devnet"
+ */
+import { type Address, type Instruction, type KeyPairSigner, type Rpc, type SolanaRpcApi } from "@solana/kit";
+/**
+ * Create a Kit-native Rpc with throttled fetch.
+ */
+export declare function createDevnetRpc(): Rpc<SolanaRpcApi>;
+/**
+ * Load the owner keypair from ANCHOR_WALLET (same file as Anchor CLI).
+ */
+export declare function loadOwnerSigner(): Promise<{
+    signer: KeyPairSigner;
+    bytes: Uint8Array;
+}>;
+/**
+ * Create a funded agent keypair (transfers SOL from owner).
+ * Uses a manual SystemProgram transfer instruction to avoid @solana-program/system dep.
+ */
+export declare function createFundedAgent(rpc: Rpc<SolanaRpcApi>, owner: KeyPairSigner, lamports?: number): Promise<KeyPairSigner>;
+/**
+ * Ensure the owner has stablecoin tokens for vault deposit.
+ * Uses @solana/spl-token + @solana/web3.js for mint setup only.
+ */
+export declare function ensureStablecoinBalance(rpcUrl: string, ownerSecretKey: Uint8Array, mintAddress: string, amount: number): Promise<void>;
+export interface ProvisionVaultOpts {
+    dailySpendingCapUsd?: bigint;
+    maxTransactionSizeUsd?: bigint;
+    protocolMode?: number;
+    depositAmount?: bigint;
+    permissions?: bigint;
+    spendingLimitUsd?: bigint;
+    skipDeposit?: boolean;
+}
+export interface ProvisionVaultResult {
+    vaultAddress: Address;
+    policyAddress: Address;
+    trackerPDA: Address;
+    vaultId: bigint;
+    overlayPDA: Address;
+}
+/**
+ * Provision a vault using Kit-native Codama builders.
+ *
+ * 1. Call inscribe() for PDA derivation + vault ID probing
+ * 2. Build + send initializeVault IX via Codama
+ * 3. Build + send registerAgent IX via Codama
+ * 4. Build + send depositFunds IX via Codama (optional)
+ */
+export declare function provisionVault(rpc: Rpc<SolanaRpcApi>, owner: KeyPairSigner, agent: KeyPairSigner, mint?: Address, opts?: ProvisionVaultOpts): Promise<ProvisionVaultResult>;
+/**
+ * Build, sign, and send a Kit-native transaction.
+ *
+ * Uses pipe() + signTransactionMessageWithSigners() + sendAndConfirmTransaction().
+ */
+export declare function sendKitTransaction(rpc: Rpc<SolanaRpcApi>, signer: KeyPairSigner, instructions: Instruction[]): Promise<string>;
+//# sourceMappingURL=devnet.d.ts.map

package/dist/testing/devnet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"devnet.d.ts","sourceRoot":"","sources":["../../src/testing/devnet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAaL,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,GAAG,EACR,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AA6DrB;;GAEG;AACH,wBAAgB,eAAe,IAAI,GAAG,CAAC,YAAY,CAAC,CAInD;AAID;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC,CAO7F;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,EACtB,KAAK,EAAE,aAAa,EACpB,QAAQ,GAAE,MAAoB,GAC7B,OAAO,CAAC,aAAa,CAAC,CAQxB;AA4BD;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,UAAU,EAC1B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAgDf;AAID,MAAM,WAAW,kBAAkB;IACjC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,EACtB,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,aAAa,EACpB,IAAI,GAAE,OAA0B,EAChC,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CA6E/B;AAMD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,EACtB,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,WAAW,EAAE,GAC1B,OAAO,CAAC,MAAM,CAAC,CAuBjB"}

package/dist/testing/devnet.js

@@ -0,0 +1,222 @@
+/**
+ * Kit-native Devnet Test Helpers
+ *
+ * Pure @solana/kit for RPC, signers, and vault operations.
+ * Uses @solana/spl-token + @solana/web3.js for stablecoin mint setup only.
+ *
+ * NOTE: This module imports node:fs and @solana/web3.js — do NOT re-export
+ * from the barrel (index.ts) to avoid breaking browser bundlers.
+ * Import directly: import { ... } from "@usesigil/kit/testing/devnet"
+ */
+import { createSolanaRpc, createKeyPairSignerFromBytes, generateKeyPairSigner, pipe, createTransactionMessage, setTransactionMessageFeePayer, appendTransactionMessageInstructions, setTransactionMessageLifetimeUsingBlockhash, getBase64EncodedWireTransaction, signTransactionMessageWithSigners, addSignersToTransactionMessage, } from "@solana/kit";
+import { getSetComputeUnitLimitInstruction, } from "@solana-program/compute-budget";
+import { readFileSync } from "node:fs";
+import { getInitializeVaultInstructionAsync, } from "../generated/instructions/initializeVault.js";
+import { getRegisterAgentInstruction, } from "../generated/instructions/registerAgent.js";
+import { getDepositFundsInstructionAsync, } from "../generated/instructions/depositFunds.js";
+import { inscribe, } from "../inscribe.js";
+import { getAgentOverlayPDA, getTrackerPDA, } from "../resolve-accounts.js";
+import { sendAndConfirmTransaction, BlockhashCache, } from "../rpc-helpers.js";
+import { USDC_MINT_DEVNET, FULL_PERMISSIONS, PROTOCOL_TREASURY, } from "../types.js";
+// ─── Rate Limiter (5 RPS against Helius 10 RPS limit) ──────────────────────
+const RPC_MAX_RPS = 5;
+const RPC_MIN_GAP_MS = Math.ceil(1000 / RPC_MAX_RPS);
+// Shared state — all throttled fetch instances coordinate on one counter
+const sharedLimiter = { nextSlot: 0 };
+function createThrottledFetch() {
+    const original = globalThis.fetch.bind(globalThis);
+    return async function throttledFetch(...args) {
+        const now = Date.now();
+        const mySlot = Math.max(now, sharedLimiter.nextSlot);
+        sharedLimiter.nextSlot = mySlot + RPC_MIN_GAP_MS;
+        const wait = mySlot - now;
+        if (wait > 0) {
+            await new Promise((r) => setTimeout(r, wait));
+        }
+        return original(...args);
+    };
+}
+// ─── RPC ────────────────────────────────────────────────────────────────────
+/**
+ * Create a Kit-native Rpc with throttled fetch.
+ */
+export function createDevnetRpc() {
+    const url = process.env.ANCHOR_PROVIDER_URL || "https://api.devnet.solana.com";
+    // Cast config to bypass missing 'fetch' in TS types (works at runtime)
+    return createSolanaRpc(url, { fetch: createThrottledFetch() });
+}
+// ─── Signers ────────────────────────────────────────────────────────────────
+/**
+ * Load the owner keypair from ANCHOR_WALLET (same file as Anchor CLI).
+ */
+export async function loadOwnerSigner() {
+    const walletPath = process.env.ANCHOR_WALLET || `${process.env.HOME}/.config/solana/id.json`;
+    const raw = JSON.parse(readFileSync(walletPath, "utf-8"));
+    const bytes = new Uint8Array(raw);
+    const signer = await createKeyPairSignerFromBytes(bytes);
+    return { signer, bytes };
+}
+/**
+ * Create a funded agent keypair (transfers SOL from owner).
+ * Uses a manual SystemProgram transfer instruction to avoid @solana-program/system dep.
+ */
+export async function createFundedAgent(rpc, owner, lamports = 100_000_000) {
+    const agent = await generateKeyPairSigner();
+    // Manual SystemProgram transfer (program 11111111..., instruction index 2)
+    const transferIx = buildSystemTransferIx(owner.address, agent.address, BigInt(lamports));
+    await sendKitTransaction(rpc, owner, [transferIx]);
+    return agent;
+}
+/**
+ * Build a SystemProgram Transfer instruction (index=2) without @solana-program/system.
+ * Layout: u32le(2) + u64le(lamports) = 12 bytes
+ */
+function buildSystemTransferIx(from, to, lamports) {
+    const data = new Uint8Array(12);
+    const view = new DataView(data.buffer);
+    view.setUint32(0, 2, true); // Transfer instruction index
+    view.setBigUint64(4, lamports, true);
+    return {
+        programAddress: "11111111111111111111111111111111",
+        accounts: [
+            { address: from, role: 3 }, // writable signer
+            { address: to, role: 1 }, // writable
+        ],
+        data,
+    };
+}
+// ─── Stablecoin Setup (uses @solana/spl-token — test setup only) ────────────
+/**
+ * Ensure the owner has stablecoin tokens for vault deposit.
+ * Uses @solana/spl-token + @solana/web3.js for mint setup only.
+ */
+export async function ensureStablecoinBalance(rpcUrl, ownerSecretKey, mintAddress, amount) {
+    // Dynamic import to keep these as optional deps
+    const { Connection, Keypair, PublicKey } = await import("@solana/web3.js");
+    const { getOrCreateAssociatedTokenAccount, mintTo, } = await import("@solana/spl-token");
+    const connection = new Connection(rpcUrl, {
+        commitment: "confirmed",
+        fetch: createThrottledFetch(),
+    });
+    const payer = Keypair.fromSecretKey(ownerSecretKey);
+    const mint = new PublicKey(mintAddress);
+    // Check if the mint exists (for devnet test mints controlled by owner)
+    const mintInfo = await connection.getAccountInfo(mint);
+    if (!mintInfo) {
+        // This is a test-controlled mint — create it at the deterministic address
+        // Only works if the mint keypair matches USDC_MINT_DEVNET
+        // For real devnet USDC, the mint already exists
+        throw new Error(`Mint ${mintAddress} does not exist on devnet. ` +
+            `Use a mint that already exists or create it first.`);
+    }
+    // Create/get owner ATA
+    const ata = await getOrCreateAssociatedTokenAccount(connection, payer, mint, payer.publicKey);
+    // Check if we already have sufficient balance
+    if (Number(ata.amount) >= amount)
+        return;
+    // Try to mint (works only if owner is mint authority — devnet test mints)
+    try {
+        await mintTo(connection, payer, mint, ata.address, payer.publicKey, amount);
+    }
+    catch (mintError) {
+        const msg = mintError instanceof Error ? mintError.message : String(mintError);
+        throw new Error(`Cannot mint tokens for ${mintAddress}: ${msg}. ` +
+            `If owner is not the mint authority, fund the ATA manually.`);
+    }
+}
+/**
+ * Provision a vault using Kit-native Codama builders.
+ *
+ * 1. Call inscribe() for PDA derivation + vault ID probing
+ * 2. Build + send initializeVault IX via Codama
+ * 3. Build + send registerAgent IX via Codama
+ * 4. Build + send depositFunds IX via Codama (optional)
+ */
+export async function provisionVault(rpc, owner, agent, mint = USDC_MINT_DEVNET, opts = {}) {
+    const dailyCap = opts.dailySpendingCapUsd ?? 500000000n;
+    const maxTx = opts.maxTransactionSizeUsd ?? 100000000n;
+    const protocolMode = opts.protocolMode ?? 0; // allow all
+    const permissions = opts.permissions ?? FULL_PERMISSIONS;
+    const spendingLimitUsd = opts.spendingLimitUsd ?? 0n;
+    // 1. Derive PDAs via inscribe()
+    const inscribeResult = await inscribe({
+        rpc,
+        network: "devnet",
+        owner,
+        agent,
+        unsafeSkipTeeCheck: true,
+    });
+    const { vaultAddress, vaultId, policyAddress } = inscribeResult;
+    const [overlayPDA] = await getAgentOverlayPDA(vaultAddress, 0);
+    // 2. Build and send initializeVault
+    const initIx = await getInitializeVaultInstructionAsync({
+        owner,
+        agentSpendOverlay: overlayPDA,
+        feeDestination: PROTOCOL_TREASURY,
+        vaultId,
+        dailySpendingCapUsd: dailyCap,
+        maxTransactionSizeUsd: maxTx,
+        protocolMode,
+        protocols: [],
+        maxLeverageBps: 0,
+        maxConcurrentPositions: 5,
+        developerFeeRate: 0,
+        maxSlippageBps: 500,
+        timelockDuration: 0n,
+        allowedDestinations: [],
+        protocolCaps: [],
+    });
+    await sendKitTransaction(rpc, owner, [
+        getSetComputeUnitLimitInstruction({ units: 400_000 }),
+        initIx,
+    ]);
+    // 3. Build and send registerAgent
+    const registerIx = getRegisterAgentInstruction({
+        owner,
+        vault: vaultAddress,
+        agentSpendOverlay: overlayPDA,
+        agent: agent.address,
+        permissions,
+        spendingLimitUsd,
+    });
+    await sendKitTransaction(rpc, owner, [registerIx]);
+    // 4. Deposit funds (optional)
+    if (!opts.skipDeposit) {
+        const depositAmount = opts.depositAmount ?? 1000000000n;
+        const depositIx = await getDepositFundsInstructionAsync({
+            owner,
+            vault: vaultAddress,
+            mint,
+            amount: depositAmount,
+        });
+        await sendKitTransaction(rpc, owner, [depositIx]);
+    }
+    const [trackerPDA] = await getTrackerPDA(vaultAddress);
+    return {
+        vaultAddress,
+        policyAddress,
+        trackerPDA,
+        vaultId,
+        overlayPDA,
+    };
+}
+// ─── Transaction Helper ─────────────────────────────────────────────────────
+const blockhashCache = new BlockhashCache(15_000);
+/**
+ * Build, sign, and send a Kit-native transaction.
+ *
+ * Uses pipe() + signTransactionMessageWithSigners() + sendAndConfirmTransaction().
+ */
+export async function sendKitTransaction(rpc, signer, instructions) {
+    const blockhash = await blockhashCache.get(rpc);
+    const txMessage = pipe(createTransactionMessage({ version: 0 }), (tx) => setTransactionMessageFeePayer(signer.address, tx), (tx) => setTransactionMessageLifetimeUsingBlockhash(blockhash, tx), (tx) => appendTransactionMessageInstructions(instructions, tx));
+    // Attach fee payer signer so signTransactionMessageWithSigners can sign it
+    const txWithSigners = addSignersToTransactionMessage([signer], txMessage);
+    const signedTx = await signTransactionMessageWithSigners(txWithSigners);
+    const wireBase64 = getBase64EncodedWireTransaction(signedTx);
+    return sendAndConfirmTransaction(rpc, wireBase64, {
+        timeoutMs: 60_000,
+        commitment: "confirmed",
+    });
+}
+//# sourceMappingURL=devnet.js.map

package/dist/testing/devnet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"devnet.js","sourceRoot":"","sources":["../../src/testing/devnet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,eAAe,EACf,4BAA4B,EAC5B,qBAAqB,EACrB,IAAI,EACJ,wBAAwB,EACxB,6BAA6B,EAC7B,oCAAoC,EACpC,2CAA2C,EAE3C,+BAA+B,EAC/B,iCAAiC,EACjC,8BAA8B,GAM/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iCAAiC,GAClC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EACL,kCAAkC,GACnC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,2BAA2B,GAC5B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,+BAA+B,GAChC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,QAAQ,GACT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,EACzB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAE9E,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,CAAC;AAErD,yEAAyE;AACzE,MAAM,aAAa,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAEtC,SAAS,oBAAoB;IAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEnD,OAAO,KAAK,UAAU,cAAc,CAClC,GAAG,IAA8B;QAEjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrD,aAAa,CAAC,QAAQ,GAAG,MAAM,GAAG,cAAc,CAAC;QAEjD,MAAM,IAAI,GAAG,MAAM,GAAG,GAAG,CAAC;QAC1B,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3B,CAAiB,CAAC;AACpB,CAAC;AAED,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,+BAA+B,CAAC;IAC/E,uEAAuE;IACvE,OAAO,eAAe,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAS,CAAC,CAAC;AACxE,CAAC;AAED,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,UAAU,GACd,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,yBAAyB,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAa,CAAC;IACtE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACzD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAsB,EACtB,KAAoB,EACpB,WAAmB,WAAW;IAE9B,MAAM,KAAK,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAE5C,2EAA2E;IAC3E,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzF,MAAM,kBAAkB,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEnD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAC5B,IAAa,EACb,EAAW,EACX,QAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,6BAA6B;IACzD,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAErC,OAAO;QACL,cAAc,EAAE,kCAA6C;QAC7D,QAAQ,EAAE;YACR,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAQ,EAAE,EAAE,kBAAkB;YACrD,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAQ,EAAE,EAAI,WAAW;SAC/C;QACD,IAAI;KACL,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,cAA0B,EAC1B,WAAmB,EACnB,MAAc;IAEd,gDAAgD;IAChD,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC3E,MAAM,EACJ,iCAAiC,EACjC,MAAM,GACP,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE;QACxC,UAAU,EAAE,WAAW;QACvB,KAAK,EAAE,oBAAoB,EAAE;KAC9B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC;IAExC,uEAAuE;IACvE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,0EAA0E;QAC1E,0DAA0D;QAC1D,gDAAgD;QAChD,MAAM,IAAI,KAAK,CACb,QAAQ,WAAW,6BAA6B;YAChD,oDAAoD,CACrD,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,MAAM,GAAG,GAAG,MAAM,iCAAiC,CACjD,UAAU,EACV,KAAK,EACL,IAAI,EACJ,KAAK,CAAC,SAAS,CAChB,CAAC;IAEF,8CAA8C;IAC9C,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM;QAAE,OAAO;IAEzC,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,SAAkB,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/E,MAAM,IAAI,KAAK,CACb,0BAA0B,WAAW,KAAK,GAAG,IAAI;YACjD,4DAA4D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAsBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAsB,EACtB,KAAoB,EACpB,KAAoB,EACpB,OAAgB,gBAAgB,EAChC,OAA2B,EAAE;IAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,IAAI,UAAY,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,qBAAqB,IAAI,UAAY,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,YAAY;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,gBAAgB,CAAC;IACzD,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAErD,gCAAgC;IAChC,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC;QACpC,GAAG;QACH,OAAO,EAAE,QAAQ;QACjB,KAAK;QACL,KAAK;QACL,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;IAEH,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,cAAc,CAAC;IAChE,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,kBAAkB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAE/D,oCAAoC;IACpC,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC;QACtD,KAAK;QACL,iBAAiB,EAAE,UAAU;QAC7B,cAAc,EAAE,iBAAiB;QACjC,OAAO;QACP,mBAAmB,EAAE,QAAQ;QAC7B,qBAAqB,EAAE,KAAK;QAC5B,YAAY;QACZ,SAAS,EAAE,EAAE;QACb,cAAc,EAAE,CAAC;QACjB,sBAAsB,EAAE,CAAC;QACzB,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,GAAG;QACnB,gBAAgB,EAAE,EAAE;QACpB,mBAAmB,EAAE,EAAE;QACvB,YAAY,EAAE,EAAE;KACjB,CAAC,CAAC;IAEH,MAAM,kBAAkB,CAAC,GAAG,EAAE,KAAK,EAAE;QACnC,iCAAiC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACrD,MAAqB;KACtB,CAAC,CAAC;IAEH,kCAAkC;IAClC,MAAM,UAAU,GAAG,2BAA2B,CAAC;QAC7C,KAAK;QACL,KAAK,EAAE,YAAY;QACnB,iBAAiB,EAAE,UAAU;QAC7B,KAAK,EAAE,KAAK,CAAC,OAAO;QACpB,WAAW;QACX,gBAAgB;KACjB,CAAC,CAAC;IAEH,MAAM,kBAAkB,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,UAAyB,CAAC,CAAC,CAAC;IAElE,8BAA8B;IAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,WAAc,CAAC;QAC3D,MAAM,SAAS,GAAG,MAAM,+BAA+B,CAAC;YACtD,KAAK;YACL,KAAK,EAAE,YAAY;YACnB,IAAI;YACJ,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;QAEH,MAAM,kBAAkB,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,SAAwB,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;IAEvD,OAAO;QACL,YAAY;QACZ,aAAa;QACb,UAAU;QACV,OAAO;QACP,UAAU;KACX,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAsB,EACtB,MAAqB,EACrB,YAA2B;IAE3B,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEhD,MAAM,SAAS,GAAG,IAAI,CACpB,wBAAwB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EACxC,CAAC,EAAE,EAAE,EAAE,CAAC,6BAA6B,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EACzD,CAAC,EAAE,EAAE,EAAE,CACL,2CAA2C,CACzC,SAA8E,EAC9E,EAAE,CACH,EACH,CAAC,EAAE,EAAE,EAAE,CAAC,oCAAoC,CAAC,YAAY,EAAE,EAAE,CAAC,CAC/D,CAAC;IAEF,2EAA2E;IAC3E,MAAM,aAAa,GAAG,8BAA8B,CAAC,CAAC,MAAM,CAAC,EAAE,SAAgB,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,MAAM,iCAAiC,CAAC,aAAoB,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,+BAA+B,CAAC,QAAe,CAAC,CAAC;IAEpE,OAAO,yBAAyB,CAAC,GAAG,EAAE,UAAU,EAAE;QAChD,SAAS,EAAE,MAAM;QACjB,UAAU,EAAE,WAAW;KACxB,CAAC,CAAC;AACL,CAAC"}

package/dist/testing/index.d.ts

@@ -0,0 +1,3 @@
+export { MOCK_VAULT, MOCK_AGENT, MOCK_OWNER, MOCK_POLICY, MOCK_SIGNATURE, MOCK_BLOCKHASH, USDC_MINT, SOL_MINT, createMockRpc, createMockAgent, type MockRpcOverrides, } from "./mock-rpc.js";
+export { createMockVaultState, type MockVaultStateOverrides, } from "./mock-state.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,UAAU,EACV,UAAU,EACV,UAAU,EACV,WAAW,EACX,cAAc,EACd,cAAc,EACd,SAAS,EACT,QAAQ,EACR,aAAa,EACb,eAAe,EACf,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,oBAAoB,EACpB,KAAK,uBAAuB,GAC7B,MAAM,iBAAiB,CAAC"}

package/dist/testing/index.js

@@ -0,0 +1,9 @@
+// @usesigil/kit/testing — Test utilities for consumers of the Sigil SDK.
+//
+// Mock utilities (unit tests — no network)
+export { MOCK_VAULT, MOCK_AGENT, MOCK_OWNER, MOCK_POLICY, MOCK_SIGNATURE, MOCK_BLOCKHASH, USDC_MINT, SOL_MINT, createMockRpc, createMockAgent, } from "./mock-rpc.js";
+export { createMockVaultState, } from "./mock-state.js";
+// NOTE: Devnet utilities intentionally NOT re-exported here.
+// devnet.ts imports node:fs + @solana/web3.js — breaks browser bundlers.
+// Import directly: import { ... } from "@usesigil/kit/testing/devnet"
+//# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,2CAA2C;AAE3C,OAAO,EACL,UAAU,EACV,UAAU,EACV,UAAU,EACV,WAAW,EACX,cAAc,EACd,cAAc,EACd,SAAS,EACT,QAAQ,EACR,aAAa,EACb,eAAe,GAEhB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,oBAAoB,GAErB,MAAM,iBAAiB,CAAC;AAEzB,6DAA6D;AAC7D,yEAAyE;AACzE,sEAAsE"}