@usesigil/kit 0.1.0

package/dist/balance-tracker.js

@@ -0,0 +1,181 @@
+/**
+ * Balance tracking and P&L computation for Sigil vaults.
+ *
+ * Two complementary approaches:
+ * - `getVaultPnL()`: Lifetime P&L from on-chain cumulative counters (single RPC call)
+ * - `BalanceSnapshotStore` + `getBalancePnL()`: Session-scoped P&L from balance snapshots (for charts)
+ */
+import { isStablecoinMint } from "./types.js";
+import { resolveVaultStateForOwner } from "./state-resolver.js";
+import { resolveToken } from "./tokens.js";
+// ─── On-chain P&L (lifetime) ────────────────────────────────────────────────
+/**
+ * Compute lifetime P&L for a vault from on-chain cumulative counters.
+ * Single RPC call via resolveVaultStateForOwner. O(1) — no event parsing needed.
+ *
+ * P&L = current_stablecoin_balance - (total_deposited_usd - total_withdrawn_usd)
+ */
+export async function getVaultPnL(rpc, vault, network = "mainnet-beta") {
+    const state = await resolveVaultStateForOwner(rpc, vault, undefined, network);
+    const totalDeposited = state.vault.totalDepositedUsd;
+    const totalWithdrawn = state.vault.totalWithdrawnUsd;
+    const currentBalance = state.stablecoinBalances.usdc + state.stablecoinBalances.usdt;
+    const netInvestment = totalDeposited - totalWithdrawn;
+    const pnl = currentBalance - netInvestment;
+    const pnlPercent = netInvestment > 0n
+        ? Number((pnl * 10000n) / netInvestment) / 100
+        : 0;
+    return {
+        totalDeposited,
+        totalWithdrawn,
+        currentBalance,
+        netInvestment,
+        pnl,
+        pnlPercent,
+    };
+}
+// ─── Token balance query ────────────────────────────────────────────────────
+const TOKEN_PROGRAM_ADDRESS = "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";
+/**
+ * Fetch all SPL token balances for a vault PDA.
+ * Uses getTokenAccountsByOwner with jsonParsed encoding.
+ * Excludes zero-balance accounts. Resolves well-known symbols.
+ */
+export async function getVaultTokenBalances(rpc, vault, network = "mainnet-beta") {
+    const response = await rpc
+        .getTokenAccountsByOwner(vault, { programId: TOKEN_PROGRAM_ADDRESS }, { encoding: "jsonParsed" })
+        .send();
+    const balances = [];
+    for (const item of response.value) {
+        const data = item.account.data;
+        if (!data?.parsed?.info?.tokenAmount)
+            continue;
+        const info = data.parsed.info;
+        const mint = info.mint;
+        const amount = BigInt(info.tokenAmount.amount);
+        if (amount === 0n)
+            continue;
+        const resolved = resolveToken(mint, network);
+        const symbol = resolved ? resolved.symbol : mint.slice(0, 4) + "...";
+        const decimals = resolved ? resolved.decimals : info.tokenAmount.decimals;
+        balances.push({ mint, balance: amount, symbol, decimals });
+    }
+    return balances;
+}
+// ─── Balance Snapshot Store (client-side, session-scoped) ───────────────────
+/**
+ * Client-side balance snapshot store for P&L charts.
+ * Preserves baseline (first-ever snapshot, never evicted) for session-lifetime P&L.
+ * Supports JSON serialization for cross-session persistence (localStorage/IndexedDB).
+ */
+export class BalanceSnapshotStore {
+    baseline = null;
+    maxEntries;
+    snapshots = new Map();
+    orderedTimestamps = [];
+    constructor(maxEntries = 144) {
+        this.maxEntries = maxEntries;
+    }
+    snapshot(timestamp, balances) {
+        if (!this.baseline)
+            this.baseline = { timestamp, balances };
+        // Guard against duplicate timestamps — update existing, don't push duplicate
+        if (this.snapshots.has(timestamp)) {
+            this.snapshots.set(timestamp, balances);
+            return;
+        }
+        this.snapshots.set(timestamp, balances);
+        this.orderedTimestamps.push(timestamp);
+        while (this.orderedTimestamps.length > this.maxEntries) {
+            const oldest = this.orderedTimestamps.shift();
+            this.snapshots.delete(oldest);
+        }
+    }
+    getBaseline() {
+        return this.baseline;
+    }
+    getFirst() {
+        if (this.orderedTimestamps.length === 0)
+            return null;
+        const ts = this.orderedTimestamps[0];
+        return { timestamp: ts, balances: this.snapshots.get(ts) };
+    }
+    getLatest() {
+        if (this.orderedTimestamps.length === 0)
+            return null;
+        const ts = this.orderedTimestamps[this.orderedTimestamps.length - 1];
+        return { timestamp: ts, balances: this.snapshots.get(ts) };
+    }
+    get size() {
+        return this.orderedTimestamps.length;
+    }
+    clear() {
+        this.baseline = null;
+        this.snapshots.clear();
+        this.orderedTimestamps = [];
+    }
+    toJSON() {
+        return JSON.stringify({
+            baseline: this.baseline
+                ? {
+                    timestamp: this.baseline.timestamp.toString(),
+                    balances: this.baseline.balances.map((b) => ({
+                        ...b,
+                        balance: b.balance.toString(),
+                    })),
+                }
+                : null,
+            snapshots: Array.from(this.snapshots.entries()).map(([ts, bals]) => ({
+                timestamp: ts.toString(),
+                balances: bals.map((b) => ({ ...b, balance: b.balance.toString() })),
+            })),
+            maxEntries: this.maxEntries,
+        });
+    }
+    static fromJSON(json) {
+        const data = JSON.parse(json);
+        const maxEntries = Number.isInteger(data.maxEntries) ? data.maxEntries : 144;
+        const store = new BalanceSnapshotStore(maxEntries);
+        if (data.baseline) {
+            store.baseline = {
+                timestamp: BigInt(data.baseline.timestamp),
+                balances: data.baseline.balances.map((b) => ({
+                    ...b,
+                    balance: BigInt(b.balance),
+                })),
+            };
+        }
+        for (const snap of data.snapshots) {
+            const ts = BigInt(snap.timestamp);
+            const bals = snap.balances.map((b) => ({
+                ...b,
+                balance: BigInt(b.balance),
+            }));
+            store.snapshots.set(ts, bals);
+            store.orderedTimestamps.push(ts);
+        }
+        return store;
+    }
+}
+// ─── Session-scoped P&L (from snapshots) ────────────────────────────────────
+/**
+ * Session-scoped P&L from balance snapshots (for charts).
+ * Uses baseline → latest for session lifetime P&L.
+ * Aggregates stablecoin balances only (USDC + USDT).
+ */
+export function getBalancePnL(store, network = "mainnet-beta") {
+    const baseline = store.getBaseline();
+    const latest = store.getLatest();
+    if (!baseline || !latest || baseline.timestamp === latest.timestamp) {
+        return { startBalance: 0n, currentBalance: 0n, delta: 0n, percentChange: 0 };
+    }
+    const sumStablecoins = (balances) => balances.reduce((sum, b) => (isStablecoinMint(b.mint, network) ? sum + b.balance : sum), 0n);
+    const startBalance = sumStablecoins(baseline.balances);
+    const currentBalance = sumStablecoins(latest.balances);
+    const delta = currentBalance - startBalance;
+    const percentChange = startBalance > 0n
+        ? Number((delta * 10000n) / startBalance) / 100
+        : 0;
+    return { startBalance, currentBalance, delta, percentChange };
+}
+//# sourceMappingURL=balance-tracker.js.map

package/dist/balance-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance-tracker.js","sourceRoot":"","sources":["../src/balance-tracker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,gBAAgB,EAAgB,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA8C3C,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAsB,EACtB,KAAc,EACd,UAAmB,cAAc;IAEjC,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAE9E,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACrD,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACrD,MAAM,cAAc,GAClB,KAAK,CAAC,kBAAkB,CAAC,IAAI,GAAG,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC;IAChE,MAAM,aAAa,GAAG,cAAc,GAAG,cAAc,CAAC;IACtD,MAAM,GAAG,GAAG,cAAc,GAAG,aAAa,CAAC;IAC3C,MAAM,UAAU,GACd,aAAa,GAAG,EAAE;QAChB,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,GAAG;QAC9C,CAAC,CAAC,CAAC,CAAC;IAER,OAAO;QACL,cAAc;QACd,cAAc;QACd,cAAc;QACd,aAAa;QACb,GAAG;QACH,UAAU;KACX,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,MAAM,qBAAqB,GACzB,6CAAwD,CAAC;AAY3D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAsB,EACtB,KAAc,EACd,UAAmB,cAAc;IAEjC,MAAM,QAAQ,GAAG,MAAM,GAAG;SACvB,uBAAuB,CACtB,KAAK,EACL,EAAE,SAAS,EAAE,qBAAqB,EAAE,EACpC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAC3B;SACA,IAAI,EAAE,CAAC;IAEV,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAyC,CAAC;QACpE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW;YAAE,SAAS;QAE/C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAe,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,EAAE;YAAE,SAAS;QAE5B,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAc,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,IAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;QACjF,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;QAC1E,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,OAAO,oBAAoB;IACvB,QAAQ,GAA2B,IAAI,CAAC;IAC/B,UAAU,CAAS;IACnB,SAAS,GAAgC,IAAI,GAAG,EAAE,CAAC;IAC5D,iBAAiB,GAAa,EAAE,CAAC;IAEzC,YAAY,UAAU,GAAG,GAAG;QAC1B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,QAAQ,CAAC,SAAiB,EAAE,QAAwB;QAClD,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAE5D,6EAA6E;QAC7E,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEvC,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACvD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAG,CAAC;YAC/C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,QAAQ;QACN,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAE,EAAE,CAAC;IAC9D,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAE,EAAE,CAAC;IAC9D,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;IACvC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,iBAAiB,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACrB,CAAC,CAAC;oBACE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE;oBAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC3C,GAAG,CAAC;wBACJ,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE;qBAC9B,CAAC,CAAC;iBACJ;gBACH,CAAC,CAAC,IAAI;YACR,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnE,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE;gBACxB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aACrE,CAAC,CAAC;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,IAAY;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7E,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,KAAK,CAAC,QAAQ,GAAG;gBACf,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC;oBACpE,GAAG,CAAC;oBACJ,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAiB,CAAC;iBACrC,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC;gBAC9D,GAAG,CAAC;gBACJ,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAiB,CAAC;aACrC,CAAC,CAAC,CAAC;YACJ,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9B,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,KAA2B,EAC3B,UAAmB,cAAc;IAEjC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;IACjC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QACpE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,QAAwB,EAAU,EAAE,CAC1D,QAAQ,CAAC,MAAM,CACb,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EACvE,EAAE,CACH,CAAC;IAEJ,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,cAAc,GAAG,YAAY,CAAC;IAC5C,MAAM,aAAa,GACjB,YAAY,GAAG,EAAE;QACf,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,GAAG;QAC/C,CAAC,CAAC,CAAC,CAAC;IAER,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AAChE,CAAC"}

package/dist/composer.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Kit-native pipe() transaction composer for Sigil.
+ *
+ * Builds atomic composed transactions:
+ * [ComputeBudget, PriorityFee?, ValidateAndAuthorize, ...defiIxs, FinalizeSession]
+ */
+import type { Address, Instruction } from "@solana/kit";
+import type { AddressesByLookupTableAddress } from "@solana/kit";
+import { compileTransaction } from "@solana/kit";
+/** Maximum Solana transaction size in bytes */
+declare const MAX_TX_SIZE = 1232;
+export interface ComposeTransactionParams {
+    /** Fee payer (typically the agent) */
+    feePayer: Address;
+    /** The validate_and_authorize instruction */
+    validateIx: Instruction;
+    /** DeFi protocol instruction(s) to sandwich */
+    defiInstructions: Instruction[];
+    /** The finalize_session instruction */
+    finalizeIx: Instruction;
+    /** Recent blockhash for lifetime */
+    blockhash: {
+        blockhash: string;
+        lastValidBlockHeight: bigint;
+    };
+    /** Optional: override CU limit */
+    computeUnits?: number;
+    /** Optional: priority fee in microLamports per CU */
+    priorityFeeMicroLamports?: number;
+    /** Resolved address lookup tables for transaction compression */
+    addressLookupTables?: AddressesByLookupTableAddress;
+}
+/**
+ * Build an atomic composed transaction using Kit's pipe().
+ *
+ * Transaction order: [ComputeBudget, PriorityFee?, Validate, ...DeFi, Finalize]
+ * All instructions succeed or all revert atomically.
+ */
+export declare function composeSigilTransaction(params: ComposeTransactionParams): ReturnType<typeof compileTransaction>;
+/**
+ * Validate that a compiled transaction doesn't exceed the Solana size limit.
+ * Returns the base64-encoded wire transaction if valid, throws if too large.
+ */
+export declare function validateTransactionSize(compiledTx: ReturnType<typeof compileTransaction>): string;
+/**
+ * Measure transaction wire size without throwing.
+ * Non-throwing alternative to validateTransactionSize for pre-send checks.
+ */
+export declare function measureTransactionSize(compiledTx: ReturnType<typeof compileTransaction>): {
+    wireBase64: string;
+    byteLength: number;
+    withinLimit: boolean;
+};
+/** Exported for use in fallback checks */
+export { MAX_TX_SIZE };
+//# sourceMappingURL=composer.d.ts.map

package/dist/composer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composer.d.ts","sourceRoot":"","sources":["../src/composer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAOL,kBAAkB,EAEnB,MAAM,aAAa,CAAC;AAOrB,+CAA+C;AAC/C,QAAA,MAAM,WAAW,OAAQ,CAAC;AAE1B,MAAM,WAAW,wBAAwB;IACvC,sCAAsC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,6CAA6C;IAC7C,UAAU,EAAE,WAAW,CAAC;IACxB,+CAA+C;IAC/C,gBAAgB,EAAE,WAAW,EAAE,CAAC;IAChC,uCAAuC;IACvC,UAAU,EAAE,WAAW,CAAC;IACxB,oCAAoC;IACpC,SAAS,EAAE;QACT,SAAS,EAAE,MAAM,CAAC;QAClB,oBAAoB,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,kCAAkC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,iEAAiE;IACjE,mBAAmB,CAAC,EAAE,6BAA6B,CAAC;CACrD;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,wBAAwB,GAC/B,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAiDvC;AAgBD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,GAChD,MAAM,CAUR;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,GAChD;IACD,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;CACtB,CAIA;AAED,0CAA0C;AAC1C,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/composer.js

@@ -0,0 +1,77 @@
+/**
+ * Kit-native pipe() transaction composer for Sigil.
+ *
+ * Builds atomic composed transactions:
+ * [ComputeBudget, PriorityFee?, ValidateAndAuthorize, ...defiIxs, FinalizeSession]
+ */
+import { pipe, createTransactionMessage, setTransactionMessageFeePayer, appendTransactionMessageInstructions, setTransactionMessageLifetimeUsingBlockhash, compressTransactionMessageUsingAddressLookupTables, compileTransaction, getBase64EncodedWireTransaction, } from "@solana/kit";
+import { getSetComputeUnitLimitInstruction, getSetComputeUnitPriceInstruction, } from "@solana-program/compute-budget";
+import { estimateComposedCU } from "./priority-fees.js";
+/** Maximum Solana transaction size in bytes */
+const MAX_TX_SIZE = 1_232;
+/**
+ * Build an atomic composed transaction using Kit's pipe().
+ *
+ * Transaction order: [ComputeBudget, PriorityFee?, Validate, ...DeFi, Finalize]
+ * All instructions succeed or all revert atomically.
+ */
+export function composeSigilTransaction(params) {
+    const units = params.computeUnits ?? estimateComposedCU(params.defiInstructions);
+    const computeBudgetIx = getSetComputeUnitLimitInstruction({ units });
+    const allInstructions = [computeBudgetIx];
+    if (params.priorityFeeMicroLamports !== undefined &&
+        params.priorityFeeMicroLamports > 0) {
+        const priorityFeeIx = getSetComputeUnitPriceInstruction({
+            microLamports: params.priorityFeeMicroLamports,
+        });
+        allInstructions.push(priorityFeeIx);
+    }
+    allInstructions.push(params.validateIx, ...params.defiInstructions, params.finalizeIx);
+    let txMessage = pipe(createTransactionMessage({ version: 0 }), (tx) => setTransactionMessageFeePayer(params.feePayer, tx), (tx) => setTransactionMessageLifetimeUsingBlockhash(params.blockhash, tx), (tx) => appendTransactionMessageInstructions(allInstructions, tx));
+    // Apply ALT compression if lookup tables provided
+    if (params.addressLookupTables &&
+        Object.keys(params.addressLookupTables).length > 0) {
+        txMessage = compressTransactionMessageUsingAddressLookupTables(txMessage, params.addressLookupTables);
+    }
+    return compileTransaction(txMessage);
+}
+/**
+ * Compute actual byte length from a padded base64 string.
+ * The naive `Math.ceil(len * 3 / 4)` overestimates by 1-2 bytes
+ * when padding is present (RFC 4648). At the 1232-byte TX limit,
+ * this causes false rejections of valid transactions.
+ */
+function base64ByteLength(b64) {
+    const len = b64.length;
+    let padding = 0;
+    if (len > 0 && b64[len - 1] === "=")
+        padding++;
+    if (len > 1 && b64[len - 2] === "=")
+        padding++;
+    return (len / 4) * 3 - padding;
+}
+/**
+ * Validate that a compiled transaction doesn't exceed the Solana size limit.
+ * Returns the base64-encoded wire transaction if valid, throws if too large.
+ */
+export function validateTransactionSize(compiledTx) {
+    const wireBytes = getBase64EncodedWireTransaction(compiledTx);
+    const byteLength = base64ByteLength(wireBytes);
+    if (byteLength > MAX_TX_SIZE) {
+        throw new Error(`Transaction size ${byteLength} bytes exceeds limit of ${MAX_TX_SIZE} bytes. ` +
+            `Use address lookup tables or reduce instruction count.`);
+    }
+    return wireBytes;
+}
+/**
+ * Measure transaction wire size without throwing.
+ * Non-throwing alternative to validateTransactionSize for pre-send checks.
+ */
+export function measureTransactionSize(compiledTx) {
+    const wireBase64 = getBase64EncodedWireTransaction(compiledTx);
+    const byteLength = base64ByteLength(wireBase64);
+    return { wireBase64, byteLength, withinLimit: byteLength <= MAX_TX_SIZE };
+}
+/** Exported for use in fallback checks */
+export { MAX_TX_SIZE };
+//# sourceMappingURL=composer.js.map

package/dist/composer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composer.js","sourceRoot":"","sources":["../src/composer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EACL,IAAI,EACJ,wBAAwB,EACxB,6BAA6B,EAC7B,oCAAoC,EACpC,2CAA2C,EAC3C,kDAAkD,EAClD,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAuB,MAAM,oBAAoB,CAAC;AAE7E,+CAA+C;AAC/C,MAAM,WAAW,GAAG,KAAK,CAAC;AAwB1B;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAgC;IAEhC,MAAM,KAAK,GACT,MAAM,CAAC,YAAY,IAAI,kBAAkB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAErE,MAAM,eAAe,GAAG,iCAAiC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAErE,MAAM,eAAe,GAAkB,CAAC,eAAe,CAAC,CAAC;IAEzD,IACE,MAAM,CAAC,wBAAwB,KAAK,SAAS;QAC7C,MAAM,CAAC,wBAAwB,GAAG,CAAC,EACnC,CAAC;QACD,MAAM,aAAa,GAAG,iCAAiC,CAAC;YACtD,aAAa,EAAE,MAAM,CAAC,wBAAwB;SAC/C,CAAC,CAAC;QACH,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtC,CAAC;IAED,eAAe,CAAC,IAAI,CAClB,MAAM,CAAC,UAAU,EACjB,GAAG,MAAM,CAAC,gBAAgB,EAC1B,MAAM,CAAC,UAAU,CAClB,CAAC;IAEF,IAAI,SAAS,GAAG,IAAI,CAClB,wBAAwB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EACxC,CAAC,EAAE,EAAE,EAAE,CAAC,6BAA6B,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,EAC1D,CAAC,EAAE,EAAE,EAAE,CACL,2CAA2C,CACzC,MAAM,CAAC,SAEH,EACJ,EAAE,CACH,EACH,CAAC,EAAE,EAAE,EAAE,CAAC,oCAAoC,CAAC,eAAe,EAAE,EAAE,CAAC,CAClE,CAAC;IAEF,kDAAkD;IAClD,IACE,MAAM,CAAC,mBAAmB;QAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,GAAG,CAAC,EAClD,CAAC;QACD,SAAS,GAAG,kDAAkD,CAC5D,SAAqF,EACrF,MAAM,CAAC,mBAAmB,CACP,CAAC;IACxB,CAAC;IAED,OAAO,kBAAkB,CAAC,SAAqD,CAAC,CAAC;AACnF,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACvB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IAC/C,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IAC/C,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAiD;IAEjD,MAAM,SAAS,GAAG,+BAA+B,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,UAAU,GAAG,WAAW,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,oBAAoB,UAAU,2BAA2B,WAAW,UAAU;YAC5E,wDAAwD,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAiD;IAMjD,MAAM,UAAU,GAAG,+BAA+B,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAChD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,IAAI,WAAW,EAAE,CAAC;AAC5E,CAAC;AAED,0CAA0C;AAC1C,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/core/engine.d.ts

@@ -0,0 +1,17 @@
+import { PolicyViolation } from "./errors.js";
+import { ResolvedPolicies, TransactionAnalysis } from "./policies.js";
+import { ShieldState } from "./state.js";
+/**
+ * Evaluate a transaction against resolved policies and current state.
+ * Returns an array of violations (empty = transaction allowed).
+ */
+export declare function evaluatePolicy(analysis: TransactionAnalysis, policies: ResolvedPolicies, state: ShieldState): PolicyViolation[];
+/**
+ * Evaluate policies and throw ShieldDeniedError if any violations found.
+ */
+export declare function enforcePolicy(analysis: TransactionAnalysis, policies: ResolvedPolicies, state: ShieldState): void;
+/**
+ * After a transaction is signed, record the spend and transaction in state.
+ */
+export declare function recordTransaction(analysis: TransactionAnalysis, state: ShieldState): void;
+//# sourceMappingURL=engine.d.ts.map

package/dist/core/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/core/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEtE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAKzC;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,mBAAmB,EAC7B,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,WAAW,GACjB,eAAe,EAAE,CAmBnB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,mBAAmB,EAC7B,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,WAAW,GACjB,IAAI,CAKN;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,mBAAmB,EAC7B,KAAK,EAAE,WAAW,GACjB,IAAI,CAcN"}

package/dist/core/engine.js

@@ -0,0 +1,177 @@
+import { ShieldDeniedError } from "./errors.js";
+import { isSystemProgram, isKnownProtocol, getTokenInfo } from "./registry.js";
+/** Base58 encoding of a 32-byte zero key (PublicKey.default) */
+const DEFAULT_ADDRESS = "11111111111111111111111111111111";
+/**
+ * Evaluate a transaction against resolved policies and current state.
+ * Returns an array of violations (empty = transaction allowed).
+ */
+export function evaluatePolicy(analysis, policies, state) {
+    const violations = [];
+    // 1. Check protocol allowlist / unknown program blocking
+    checkPrograms(analysis, policies, violations);
+    // 2. Check token allowlist
+    checkTokens(analysis, policies, violations);
+    // 3. Check spending caps
+    checkSpendingCaps(analysis, policies, state, violations);
+    // 4. Check per-transaction size limit
+    checkTransactionSize(analysis, policies, violations);
+    // 5. Check rate limit
+    checkRateLimit(policies, state, violations);
+    return violations;
+}
+/**
+ * Evaluate policies and throw ShieldDeniedError if any violations found.
+ */
+export function enforcePolicy(analysis, policies, state) {
+    const violations = evaluatePolicy(analysis, policies, state);
+    if (violations.length > 0) {
+        throw new ShieldDeniedError(violations);
+    }
+}
+/**
+ * After a transaction is signed, record the spend and transaction in state.
+ */
+export function recordTransaction(analysis, state) {
+    // Record each outgoing transfer
+    for (const transfer of analysis.transfers) {
+        if (transfer.direction === "outgoing") {
+            const mintKey = transfer.mint === DEFAULT_ADDRESS || transfer.mint === ""
+                ? "unknown"
+                : transfer.mint;
+            state.recordSpend(mintKey, transfer.amount);
+        }
+    }
+    // Record the transaction for rate limiting
+    state.recordTransaction();
+}
+// --- Internal check functions ---
+function checkPrograms(analysis, policies, violations) {
+    for (const programId of analysis.programIds) {
+        // System programs are always allowed
+        if (isSystemProgram(programId))
+            continue;
+        // If explicit allowlist is set, only those protocols are allowed
+        if (policies.allowedProtocols) {
+            if (!policies.allowedProtocols.has(programId)) {
+                violations.push({
+                    rule: "protocol_not_allowed",
+                    message: `Protocol ${programId} is not in the allowlist`,
+                    suggestion: "Add this protocol to allowedProtocols in your shield config.",
+                    details: { programId },
+                });
+            }
+            continue;
+        }
+        // If blockUnknownPrograms is set, block unregistered protocols
+        if (policies.blockUnknownPrograms && !isKnownProtocol(programId)) {
+            violations.push({
+                rule: "unknown_program",
+                message: `Unknown program ${programId} — not in the known protocol registry`,
+                suggestion: "Add this program ID to allowedProtocols or set blockUnknownPrograms: false.",
+                details: { programId },
+            });
+        }
+    }
+}
+function checkTokens(analysis, policies, violations) {
+    if (!policies.allowedTokens)
+        return;
+    for (const transfer of analysis.transfers) {
+        if (transfer.direction !== "outgoing")
+            continue;
+        if (transfer.mint === DEFAULT_ADDRESS || transfer.mint === "")
+            continue;
+        if (!policies.allowedTokens.has(transfer.mint)) {
+            const tokenInfo = getTokenInfo(transfer.mint);
+            violations.push({
+                rule: "token_not_allowed",
+                message: `Token ${tokenInfo?.symbol ?? transfer.mint} is not in the allowed token list`,
+                suggestion: "Add this token mint to allowedTokens in your shield config.",
+                details: { tokenMint: transfer.mint },
+            });
+        }
+    }
+}
+function checkSpendingCaps(analysis, policies, state, violations) {
+    for (const limit of policies.spendLimits) {
+        const mintKey = limit.mint;
+        const windowMs = limit.windowMs ?? 86_400_000;
+        // Sum outgoing transfers for this token in this transaction
+        let txSpend = BigInt(0);
+        for (const transfer of analysis.transfers) {
+            if (transfer.direction !== "outgoing")
+                continue;
+            const transferMint = transfer.mint === DEFAULT_ADDRESS || transfer.mint === ""
+                ? "unknown"
+                : transfer.mint;
+            if (transferMint === mintKey) {
+                txSpend += transfer.amount;
+            }
+        }
+        if (txSpend === BigInt(0))
+            continue;
+        // Check against rolling window
+        const currentSpend = state.getSpendInWindow(mintKey, windowMs);
+        const totalAfterTx = currentSpend + txSpend;
+        if (totalAfterTx > limit.amount) {
+            const tokenInfo = getTokenInfo(mintKey);
+            const symbol = tokenInfo?.symbol ?? "tokens";
+            const decimals = tokenInfo?.decimals ?? 0;
+            const remaining = limit.amount > currentSpend ? limit.amount - currentSpend : BigInt(0);
+            violations.push({
+                rule: "spending_cap",
+                message: `Spending cap exceeded for ${symbol}: attempting ${formatAmount(txSpend, decimals)}, limit ${formatAmount(limit.amount, decimals)}, already spent ${formatAmount(currentSpend, decimals)}`,
+                suggestion: `Reduce the transaction amount to ${formatAmount(remaining, decimals)} ${symbol} or wait for the spending window to roll over.`,
+                details: {
+                    limit: limit.amount,
+                    attempted: txSpend,
+                    remaining,
+                    tokenMint: mintKey,
+                },
+            });
+        }
+    }
+}
+function checkTransactionSize(analysis, policies, violations) {
+    if (!policies.maxTransactionSize)
+        return;
+    if (analysis.estimatedValueLamports > policies.maxTransactionSize) {
+        violations.push({
+            rule: "transaction_size",
+            message: `Transaction value ${analysis.estimatedValueLamports} exceeds max transaction size ${policies.maxTransactionSize}`,
+            suggestion: "Split this into smaller transactions or increase maxTransactionSize.",
+            details: {
+                limit: policies.maxTransactionSize,
+                attempted: analysis.estimatedValueLamports,
+            },
+        });
+    }
+}
+function checkRateLimit(policies, state, violations) {
+    const { maxTransactions, windowMs } = policies.rateLimit;
+    const count = state.getTransactionCountInWindow(windowMs);
+    if (count >= maxTransactions) {
+        const windowDesc = windowMs >= 3_600_000
+            ? `${windowMs / 3_600_000}h`
+            : `${windowMs / 60_000}min`;
+        violations.push({
+            rule: "rate_limit",
+            message: `Rate limit exceeded: ${count}/${maxTransactions} transactions in the last ${windowDesc}`,
+            suggestion: `Wait for the rate limit window to reset or increase rateLimit.maxTransactions.`,
+        });
+    }
+}
+/** Format a token amount with decimals for display */
+function formatAmount(amount, decimals) {
+    if (decimals === 0)
+        return amount.toString();
+    const divisor = BigInt(10 ** decimals);
+    const whole = amount / divisor;
+    const frac = amount % divisor;
+    if (frac === BigInt(0))
+        return whole.toString();
+    const fracStr = frac.toString().padStart(decimals, "0").replace(/0+$/, "");
+    return `${whole}.${fracStr}`;
+}
+//# sourceMappingURL=engine.js.map

package/dist/core/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/core/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG/E,gEAAgE;AAChE,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAE3D;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,QAA6B,EAC7B,QAA0B,EAC1B,KAAkB;IAElB,MAAM,UAAU,GAAsB,EAAE,CAAC;IAEzC,yDAAyD;IACzD,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE9C,2BAA2B;IAC3B,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE5C,yBAAyB;IACzB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAEzD,sCAAsC;IACtC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAErD,sBAAsB;IACtB,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAE5C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,QAA6B,EAC7B,QAA0B,EAC1B,KAAkB;IAElB,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAA6B,EAC7B,KAAkB;IAElB,gCAAgC;IAChC,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACtC,MAAM,OAAO,GACX,QAAQ,CAAC,IAAI,KAAK,eAAe,IAAI,QAAQ,CAAC,IAAI,KAAK,EAAE;gBACvD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YACpB,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,iBAAiB,EAAE,CAAC;AAC5B,CAAC;AAED,mCAAmC;AAEnC,SAAS,aAAa,CACpB,QAA6B,EAC7B,QAA0B,EAC1B,UAA6B;IAE7B,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5C,qCAAqC;QACrC,IAAI,eAAe,CAAC,SAAS,CAAC;YAAE,SAAS;QAEzC,iEAAiE;QACjE,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC9B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9C,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,YAAY,SAAS,0BAA0B;oBACxD,UAAU,EACR,8DAA8D;oBAChE,OAAO,EAAE,EAAE,SAAS,EAAE;iBACvB,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QAED,+DAA+D;QAC/D,IAAI,QAAQ,CAAC,oBAAoB,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;YACjE,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,mBAAmB,SAAS,uCAAuC;gBAC5E,UAAU,EACR,6EAA6E;gBAC/E,OAAO,EAAE,EAAE,SAAS,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,QAA6B,EAC7B,QAA0B,EAC1B,UAA6B;IAE7B,IAAI,CAAC,QAAQ,CAAC,aAAa;QAAE,OAAO;IAEpC,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU;YAAE,SAAS;QAChD,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe,IAAI,QAAQ,CAAC,IAAI,KAAK,EAAE;YAAE,SAAS;QAExE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9C,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,SAAS,SAAS,EAAE,MAAM,IAAI,QAAQ,CAAC,IAAI,mCAAmC;gBACvF,UAAU,EACR,6DAA6D;gBAC/D,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,QAA6B,EAC7B,QAA0B,EAC1B,KAAkB,EAClB,UAA6B;IAE7B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,UAAU,CAAC;QAE9C,4DAA4D;QAC5D,IAAI,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC1C,IAAI,QAAQ,CAAC,SAAS,KAAK,UAAU;gBAAE,SAAS;YAChD,MAAM,YAAY,GAChB,QAAQ,CAAC,IAAI,KAAK,eAAe,IAAI,QAAQ,CAAC,IAAI,KAAK,EAAE;gBACvD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YACpB,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;gBAC7B,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC;YAAE,SAAS;QAEpC,+BAA+B;QAC/B,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,YAAY,GAAG,OAAO,CAAC;QAE5C,IAAI,YAAY,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,SAAS,EAAE,MAAM,IAAI,QAAQ,CAAC;YAC7C,MAAM,QAAQ,GAAG,SAAS,EAAE,QAAQ,IAAI,CAAC,CAAC;YAC1C,MAAM,SAAS,GACb,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAExE,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,6BAA6B,MAAM,gBAAgB,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,mBAAmB,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE;gBACnM,UAAU,EAAE,oCAAoC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,gDAAgD;gBAC3I,OAAO,EAAE;oBACP,KAAK,EAAE,KAAK,CAAC,MAAM;oBACnB,SAAS,EAAE,OAAO;oBAClB,SAAS;oBACT,SAAS,EAAE,OAAO;iBACnB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAA6B,EAC7B,QAA0B,EAC1B,UAA6B;IAE7B,IAAI,CAAC,QAAQ,CAAC,kBAAkB;QAAE,OAAO;IAEzC,IAAI,QAAQ,CAAC,sBAAsB,GAAG,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAClE,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,qBAAqB,QAAQ,CAAC,sBAAsB,iCAAiC,QAAQ,CAAC,kBAAkB,EAAE;YAC3H,UAAU,EACR,sEAAsE;YACxE,OAAO,EAAE;gBACP,KAAK,EAAE,QAAQ,CAAC,kBAAkB;gBAClC,SAAS,EAAE,QAAQ,CAAC,sBAAsB;aAC3C;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,QAA0B,EAC1B,KAAkB,EAClB,UAA6B;IAE7B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IAE1D,IAAI,KAAK,IAAI,eAAe,EAAE,CAAC;QAC7B,MAAM,UAAU,GACd,QAAQ,IAAI,SAAS;YACnB,CAAC,CAAC,GAAG,QAAQ,GAAG,SAAS,GAAG;YAC5B,CAAC,CAAC,GAAG,QAAQ,GAAG,MAAM,KAAK,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,wBAAwB,KAAK,IAAI,eAAe,6BAA6B,UAAU,EAAE;YAClG,UAAU,EAAE,gFAAgF;SAC7F,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,sDAAsD;AACtD,SAAS,YAAY,CAAC,MAAc,EAAE,QAAgB;IACpD,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;IAE7C,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,IAAI,QAAQ,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC;IAE9B,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAEhD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3E,OAAO,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC;AAC/B,CAAC"}

package/dist/core/errors.d.ts

@@ -0,0 +1,24 @@
+export interface PolicyViolation {
+    /** Which policy rule was violated */
+    rule: "spending_cap" | "transaction_size" | "protocol_not_allowed" | "token_not_allowed" | "rate_limit" | "unknown_program";
+    /** Human-readable description of the violation */
+    message: string;
+    /** Actionable suggestion for the developer */
+    suggestion: string;
+    /** Additional context */
+    details?: {
+        limit?: bigint;
+        attempted?: bigint;
+        remaining?: bigint;
+        programId?: string;
+        tokenMint?: string;
+    };
+}
+export declare class ShieldDeniedError extends Error {
+    readonly violations: PolicyViolation[];
+    constructor(violations: PolicyViolation[]);
+}
+export declare class ShieldConfigError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,qCAAqC;IACrC,IAAI,EACA,cAAc,GACd,kBAAkB,GAClB,sBAAsB,GACtB,mBAAmB,GACnB,YAAY,GACZ,iBAAiB,CAAC;IACtB,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,UAAU,EAAE,eAAe,EAAE,CAAC;gBAE3B,UAAU,EAAE,eAAe,EAAE;CAM1C;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B"}

package/dist/core/errors.js

@@ -0,0 +1,16 @@
+export class ShieldDeniedError extends Error {
+    violations;
+    constructor(violations) {
+        const summary = violations.map((v) => v.message).join("; ");
+        super(`Transaction denied by Sigil: ${summary}`);
+        this.name = "ShieldDeniedError";
+        this.violations = violations;
+    }
+}
+export class ShieldConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ShieldConfigError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAuBA,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,UAAU,CAAoB;IAEvC,YAAY,UAA6B;QACvC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,KAAK,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF"}

package/dist/core/index.d.ts

@@ -0,0 +1,9 @@
+export { ShieldDeniedError, ShieldConfigError } from "./errors.js";
+export type { PolicyViolation } from "./errors.js";
+export type { ShieldPolicies, SpendLimit, RateLimitConfig, PolicyCheckResult, TransactionAnalysis, TokenTransfer, ResolvedPolicies, } from "./policies.js";
+export { parseSpendLimit, resolvePolicies, DEFAULT_POLICIES } from "./policies.js";
+export { KNOWN_PROTOCOLS, KNOWN_TOKENS, SYSTEM_PROGRAMS, getTokenInfo, getProtocolName, isSystemProgram, isKnownProtocol, } from "./registry.js";
+export { ShieldState } from "./state.js";
+export type { ShieldStorage, SpendEntry, TxEntry } from "./state.js";
+export { evaluatePolicy, enforcePolicy, recordTransaction } from "./engine.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD,YAAY,EACV,cAAc,EACd,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGnF,OAAO,EACL,eAAe,EACf,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGrE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/core/index.js

@@ -0,0 +1,10 @@
+// Errors
+export { ShieldDeniedError, ShieldConfigError } from "./errors.js";
+export { parseSpendLimit, resolvePolicies, DEFAULT_POLICIES } from "./policies.js";
+// Protocol & token registry
+export { KNOWN_PROTOCOLS, KNOWN_TOKENS, SYSTEM_PROGRAMS, getTokenInfo, getProtocolName, isSystemProgram, isKnownProtocol, } from "./registry.js";
+// Client-side state
+export { ShieldState } from "./state.js";
+// Policy engine
+export { evaluatePolicy, enforcePolicy, recordTransaction } from "./engine.js";
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,SAAS;AACT,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAanE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEnF,4BAA4B;AAC5B,OAAO,EACL,eAAe,EACf,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,eAAe,CAAC;AAEvB,oBAAoB;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGzC,gBAAgB;AAChB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}