@usesigil/kit 0.15.0 → 0.16.0

package/dist/agent-errors.js

@@ -5,7 +5,7 @@
  * Every error includes a category, retryability flag, and
  * recovery actions that tell the agent exactly what to do next.
  *
- * Maps all 81 on-chain error codes (6000-6080) plus 34 SDK
+ * Maps all 88 on-chain error codes (6000-6087) plus 34 SDK
  * error codes (7000-7033) to AgentError with machine-readable metadata.
  *
  * Zero dependency on @solana/web3.js or @coral-xyz/anchor.
@@ -130,23 +130,6 @@ export const ON_CHAIN_ERROR_MAP = {
         ],
     },
     6007: {
-        name: "LeverageTooHigh",
-        message: "Leverage exceeds maximum allowed by policy",
-        category: "POLICY_VIOLATION",
-        retryable: false,
-        recovery_actions: [
-            {
-                action: "reduce_leverage",
-                description: "Reduce leverage to within maxLeverageBps",
-            },
-            {
-                action: "check_limits",
-                description: "Check the vault's maxLeverageBps policy",
-                tool: "sigil_check_vault",
-            },
-        ],
-    },
-    6008: {
         name: "SessionNotAuthorized",
         message: "Session authority not authorized for this action",
         category: "PERMISSION",
@@ -158,7 +141,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6009: {
+    6008: {
         name: "InvalidSession",
         message: "Session does not belong to this vault or is invalid",
         category: "PERMISSION",
@@ -170,7 +153,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6010: {
+    6009: {
         name: "TooManyAllowedProtocols",
         message: "Policy configuration has too many allowed protocols (max 10)",
         category: "INPUT_VALIDATION",
@@ -182,7 +165,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6011: {
+    6010: {
         name: "AgentAlreadyRegistered",
         message: "Agent is already registered on this vault",
         category: "INPUT_VALIDATION",
@@ -195,7 +178,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6012: {
+    6011: {
         name: "NoAgentRegistered",
         message: "No agent registered on this vault",
         category: "RESOURCE_NOT_FOUND",
@@ -208,7 +191,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6013: {
+    6012: {
         name: "VaultNotFrozen",
         message: "Vault is not frozen (expected frozen for reactivation)",
         category: "INPUT_VALIDATION",
@@ -221,7 +204,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6014: {
+    6013: {
         name: "VaultAlreadyClosed",
         message: "Vault is permanently closed",
         category: "INPUT_VALIDATION",
@@ -234,7 +217,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6015: {
+    6014: {
         name: "InsufficientBalance",
         message: "Insufficient vault balance for this operation",
         category: "SPENDING_CAP",
@@ -255,7 +238,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6016: {
+    6015: {
         name: "DeveloperFeeTooHigh",
         message: "Developer fee rate exceeds maximum (500 / 1,000,000 = 5 BPS)",
         category: "INPUT_VALIDATION",
@@ -267,7 +250,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6017: {
+    6016: {
         name: "InvalidFeeDestination",
         message: "Fee destination account is invalid",
         category: "INPUT_VALIDATION",
@@ -279,7 +262,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6018: {
+    6017: {
         name: "InvalidProtocolTreasury",
         message: "Protocol treasury account does not match expected address",
         category: "INPUT_VALIDATION",
@@ -291,7 +274,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6019: {
+    6018: {
         name: "InvalidAgentKey",
         message: "Agent cannot be the zero address",
         category: "INPUT_VALIDATION",
@@ -303,7 +286,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6020: {
+    6019: {
         name: "AgentIsOwner",
         message: "Agent cannot be the vault owner",
         category: "INPUT_VALIDATION",
@@ -315,7 +298,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6021: {
+    6020: {
         name: "Overflow",
         message: "Arithmetic overflow in on-chain computation",
         category: "FATAL",
@@ -327,7 +310,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6022: {
+    6021: {
         name: "InvalidTokenAccount",
         message: "Token account does not belong to vault or has wrong mint",
         category: "INPUT_VALIDATION",
@@ -340,7 +323,7 @@ export const ON_CHAIN_ERROR_MAP = {
         ],
     },
     // --- Timelock + Destination errors ---
-    6023: {
+    6022: {
         name: "TimelockNotExpired",
         message: "Timelock period has not expired yet",
         category: "POLICY_VIOLATION",
@@ -353,7 +336,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6024: {
+    6023: {
         name: "NoTimelockConfigured",
         message: "No timelock configured on this vault",
         category: "INPUT_VALIDATION",
@@ -365,7 +348,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6025: {
+    6024: {
         name: "DestinationNotAllowed",
         message: "Destination address not in vault's allowed destinations list",
         category: "POLICY_VIOLATION",
@@ -382,7 +365,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6026: {
+    6025: {
         name: "TooManyDestinations",
         message: "Too many destinations in allowlist (max 10)",
         category: "INPUT_VALIDATION",
@@ -394,7 +377,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6027: {
+    6026: {
         name: "InvalidProtocolMode",
         message: "Invalid protocol mode (must be 0=all, 1=allowlist, or 2=denylist)",
         category: "INPUT_VALIDATION",
@@ -407,19 +390,7 @@ export const ON_CHAIN_ERROR_MAP = {
         ],
     },
     // --- Flash Trade expansion errors ---
-    6028: {
-        name: "InvalidNonSpendingAmount",
-        message: "Non-spending action must have amount = 0",
-        category: "INPUT_VALIDATION",
-        retryable: false,
-        recovery_actions: [
-            {
-                action: "set_zero_amount",
-                description: "Set amount to 0 for non-spending actions (close, cancel, etc.)",
-            },
-        ],
-    },
-    6029: {
+    6027: {
         name: "CpiCallNotAllowed",
         message: "Instruction must be top-level (CPI calls not allowed for validate/finalize)",
         category: "FATAL",
@@ -431,7 +402,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6030: {
+    6028: {
         name: "MissingFinalizeInstruction",
         message: "Transaction must include finalize_session after validate_and_authorize",
         category: "INPUT_VALIDATION",
@@ -444,7 +415,7 @@ export const ON_CHAIN_ERROR_MAP = {
         ],
     },
     // --- Stablecoin-only enforcement errors ---
-    6031: {
+    6029: {
         name: "NonTrackedSwapMustReturnStablecoin",
         message: "Non-stablecoin swap must return stablecoin (vault stablecoin balance did not increase)",
         category: "INPUT_VALIDATION",
@@ -456,7 +427,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6032: {
+    6030: {
         name: "SwapSlippageExceeded",
         message: "Swap slippage exceeds policy max_slippage_bps or quoted output is zero",
         category: "POLICY_VIOLATION",
@@ -473,7 +444,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6033: {
+    6031: {
         name: "InvalidJupiterInstruction",
         message: "Cannot parse Jupiter swap instruction data",
         category: "INPUT_VALIDATION",
@@ -485,7 +456,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6034: {
+    6032: {
         name: "UnauthorizedTokenTransfer",
         message: "Top-level SPL Token transfer not allowed between validate and finalize",
         category: "POLICY_VIOLATION",
@@ -497,7 +468,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6035: {
+    6033: {
         name: "SlippageBpsTooHigh",
         message: "Slippage BPS exceeds maximum allowed (5000 = 50%)",
         category: "INPUT_VALIDATION",
@@ -509,7 +480,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6036: {
+    6034: {
         name: "ProtocolMismatch",
         message: "DeFi instruction program does not match the declared target_protocol",
         category: "INPUT_VALIDATION",
@@ -521,7 +492,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6037: {
+    6035: {
         name: "TooManyDeFiInstructions",
         message: "Non-stablecoin swap allows exactly one DeFi instruction",
         category: "INPUT_VALIDATION",
@@ -534,7 +505,7 @@ export const ON_CHAIN_ERROR_MAP = {
         ],
     },
     // --- Multi-Agent errors ---
-    6038: {
+    6036: {
         name: "MaxAgentsReached",
         message: "Maximum agents per vault reached (limit: 10)",
         category: "INPUT_VALIDATION",
@@ -547,7 +518,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6039: {
+    6037: {
         name: "InsufficientPermissions",
         message: "Agent lacks permission for this action type",
         category: "PERMISSION",
@@ -564,7 +535,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6040: {
+    6038: {
         name: "InvalidPermissions",
         message: "Capability exceeds the on-chain maximum (valid values: 0 = Disabled, 1 = Observer, 2 = Operator)",
         category: "INPUT_VALIDATION",
@@ -577,7 +548,7 @@ export const ON_CHAIN_ERROR_MAP = {
         ],
     },
     // --- Escrow errors ---
-    6041: {
+    6039: {
         name: "EscrowNotActive",
         message: "Escrow is not in Active status",
         category: "RESOURCE_NOT_FOUND",
@@ -589,7 +560,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6042: {
+    6040: {
         name: "EscrowExpired",
         message: "Escrow has expired — can only be refunded now",
         category: "RESOURCE_NOT_FOUND",
@@ -602,7 +573,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6043: {
+    6041: {
         name: "EscrowNotExpired",
         message: "Escrow has not expired yet — cannot refund before expiry",
         category: "INPUT_VALIDATION",
@@ -619,7 +590,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6044: {
+    6042: {
         name: "InvalidEscrowVault",
         message: "Invalid escrow vault — source or destination vault mismatch",
         category: "INPUT_VALIDATION",
@@ -631,7 +602,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6045: {
+    6043: {
         name: "EscrowConditionsNotMet",
         message: "Escrow settlement conditions not met (SHA-256 proof invalid)",
         category: "INPUT_VALIDATION",
@@ -643,7 +614,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6046: {
+    6044: {
         name: "EscrowDurationExceeded",
         message: "Escrow duration exceeds maximum (30 days)",
         category: "INPUT_VALIDATION",
@@ -656,7 +627,7 @@ export const ON_CHAIN_ERROR_MAP = {
         ],
     },
     // --- Instruction constraints errors ---
-    6047: {
+    6045: {
         name: "InvalidConstraintConfig",
         message: "Invalid constraint configuration: bounds exceeded",
         category: "INPUT_VALIDATION",
@@ -668,7 +639,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6048: {
+    6046: {
         name: "ConstraintViolated",
         message: "Instruction violated a configured constraint",
         category: "POLICY_VIOLATION",
@@ -685,7 +656,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6049: {
+    6047: {
         name: "InvalidConstraintsPda",
         message: "Invalid constraints PDA: wrong owner or vault",
         category: "INPUT_VALIDATION",
@@ -697,7 +668,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6050: {
+    6048: {
         name: "InvalidPendingConstraintsPda",
         message: "Invalid pending constraints PDA: wrong owner or vault",
         category: "INPUT_VALIDATION",
@@ -710,7 +681,7 @@ export const ON_CHAIN_ERROR_MAP = {
         ],
     },
     // --- Per-agent spend limit errors ---
-    6051: {
+    6049: {
         name: "AgentSpendLimitExceeded",
         message: "Agent's rolling 24h spend exceeds their individual spending limit",
         category: "SPENDING_CAP",
@@ -732,7 +703,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6052: {
+    6050: {
         name: "OverlaySlotExhausted",
         message: "Per-agent overlay is full — cannot register agent with spending limit",
         category: "INPUT_VALIDATION",
@@ -745,7 +716,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6053: {
+    6051: {
         name: "AgentSlotNotFound",
         message: "Agent has per-agent spending limit but no overlay tracking slot",
         category: "RESOURCE_NOT_FOUND",
@@ -757,7 +728,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6054: {
+    6052: {
         name: "UnauthorizedTokenApproval",
         message: "Unauthorized SPL Token Approve detected between validate and finalize",
         category: "POLICY_VIOLATION",
@@ -769,7 +740,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6055: {
+    6053: {
         name: "InvalidSessionExpiry",
         message: "Session expiry slots out of range (10-450)",
         category: "INPUT_VALIDATION",
@@ -781,7 +752,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6056: {
+    6054: {
         name: "UnconstrainedProgramBlocked",
         message: "Program has no constraint entry and strict mode is enabled",
         category: "POLICY_VIOLATION",
@@ -799,7 +770,7 @@ export const ON_CHAIN_ERROR_MAP = {
         ],
     },
     // --- Per-protocol spend cap errors ---
-    6057: {
+    6055: {
         name: "ProtocolCapExceeded",
         message: "Per-protocol rolling 24h spending cap would be exceeded",
         category: "SPENDING_CAP",
@@ -820,7 +791,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6058: {
+    6056: {
         name: "ProtocolCapsMismatch",
         message: "protocol_caps length must match protocols length when has_protocol_caps is true",
         category: "INPUT_VALIDATION",
@@ -833,7 +804,7 @@ export const ON_CHAIN_ERROR_MAP = {
         ],
     },
     // --- Vault closure guard errors ---
-    6059: {
+    6057: {
         name: "ActiveEscrowsExist",
         message: "Active escrow deposits exist — close them before closing vault",
         category: "RESOURCE_NOT_FOUND",
@@ -845,7 +816,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6060: {
+    6058: {
         name: "ConstraintsNotClosed",
         message: "Instruction constraints PDA still exists — close it before closing vault",
         category: "RESOURCE_NOT_FOUND",
@@ -857,7 +828,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6061: {
+    6059: {
         name: "PendingPolicyExists",
         message: "A pending policy update exists — apply or cancel it before closing vault",
         category: "RESOURCE_NOT_FOUND",
@@ -870,7 +841,7 @@ export const ON_CHAIN_ERROR_MAP = {
         ],
     },
     // --- Agent pause errors ---
-    6062: {
+    6060: {
         name: "AgentPaused",
         message: "Agent is paused — unpause before executing actions",
         category: "PERMISSION",
@@ -882,7 +853,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6063: {
+    6061: {
         name: "AgentAlreadyPaused",
         message: "Agent is already paused",
         category: "INPUT_VALIDATION",
@@ -894,7 +865,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6064: {
+    6062: {
         name: "AgentNotPaused",
         message: "Agent is not paused — cannot unpause",
         category: "INPUT_VALIDATION",
@@ -906,7 +877,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6065: {
+    6063: {
         name: "UnauthorizedPostFinalizeInstruction",
         message: "Instructions after finalize_session must be ComputeBudget or SystemProgram only",
         category: "POLICY_VIOLATION",
@@ -918,7 +889,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6066: {
+    6064: {
         name: "UnexpectedBalanceDecrease",
         message: "Vault stablecoin balance decreased more than the session authorized amount. " +
             "This indicates a compromised DeFi program attempted to drain vault tokens via CPI.",
@@ -938,7 +909,7 @@ export const ON_CHAIN_ERROR_MAP = {
         ],
     },
     // --- TOCTOU + timelock hardening errors ---
-    6067: {
+    6065: {
         name: "TimelockTooShort",
         message: "Timelock duration is below the minimum (1800 seconds / 30 minutes).",
         category: "INPUT_VALIDATION",
@@ -950,7 +921,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6068: {
+    6066: {
         name: "PolicyVersionMismatch",
         message: "Policy version changed since agent's last RPC read. Re-resolve vault state and retry.",
         category: "TRANSIENT",
@@ -963,31 +934,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6069: {
-        name: "PendingAgentPermsExists",
-        message: "A pending agent permissions update already exists for this agent.",
-        category: "RESOURCE_NOT_FOUND",
-        retryable: false,
-        recovery_actions: [
-            {
-                action: "apply_or_cancel_pending",
-                description: "Apply or cancel the existing pending update before queuing a new one.",
-            },
-        ],
-    },
-    6070: {
-        name: "PendingCloseConstraintsExists",
-        message: "A pending close constraints operation already exists for this vault.",
-        category: "RESOURCE_NOT_FOUND",
-        retryable: false,
-        recovery_actions: [
-            {
-                action: "apply_or_cancel_pending",
-                description: "Apply or cancel the existing pending close constraints before queuing a new one.",
-            },
-        ],
-    },
-    6071: {
+    6067: {
         name: "ActiveSessionsExist",
         message: "Cannot close vault with active sessions. Finalize all pending sessions first.",
         category: "POLICY_VIOLATION",
@@ -1001,7 +948,7 @@ export const ON_CHAIN_ERROR_MAP = {
         ],
     },
     // --- Post-execution assertions (Phase B scaffolding) ---
-    6072: {
+    6068: {
         name: "PostAssertionFailed",
         message: "Post-execution assertion failed: account state did not satisfy constraint.",
         category: "POLICY_VIOLATION",
@@ -1013,7 +960,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6073: {
+    6069: {
         name: "InvalidPostAssertionIndex",
         message: "Post-assertion references an invalid instruction index.",
         category: "INPUT_VALIDATION",
@@ -1025,7 +972,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6074: {
+    6070: {
         name: "UnauthorizedPreValidateInstruction",
         message: "Non-infrastructure instruction detected before validate_and_authorize.",
         category: "PERMISSION",
@@ -1037,7 +984,7 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
-    6075: {
+    6071: {
         name: "SnapshotNotCaptured",
         message: "Delta assertion snapshot was not captured in validate_and_authorize.",
         category: "INPUT_VALIDATION",
@@ -1049,63 +996,201 @@ export const ON_CHAIN_ERROR_MAP = {
             },
         ],
     },
+    6072: {
+        name: "InvalidConstraintOperator",
+        message: "Constraint operator value is not a valid ConstraintOperator discriminant.",
+        category: "INPUT_VALIDATION",
+        retryable: false,
+        recovery_actions: [
+            {
+                action: "fix_constraints",
+                description: "Ensure constraint operators are valid (0-6).",
+            },
+        ],
+    },
+    6073: {
+        name: "ConstraintsVaultMismatch",
+        message: "Zero-copy constraints account has wrong vault.",
+        category: "INPUT_VALIDATION",
+        retryable: false,
+        recovery_actions: [
+            {
+                action: "verify_pda",
+                description: "The constraints PDA does not belong to this vault.",
+            },
+        ],
+    },
+    6074: {
+        name: "BlockedSplOpcode",
+        message: "SPL opcode is blocked at runtime and cannot be used in constraints.",
+        category: "INPUT_VALIDATION",
+        retryable: false,
+        recovery_actions: [
+            {
+                action: "fix_constraints",
+                description: "Remove blocked SPL opcode from the constraint entry — use allowlisted opcodes only.",
+            },
+        ],
+    },
+    // F-10 audit fix: durable-nonce pre-signing defense
+    6075: {
+        name: "QueuedUpdateExpired",
+        message: "Queued update is too old (>MAX_APPLY_AGE_SLOTS) — re-queue to apply. Defends against durable-nonce pre-signing.",
+        category: "POLICY_VIOLATION",
+        retryable: false,
+        recovery_actions: [
+            {
+                action: "requeue",
+                description: "Re-queue the update via queue_policy_update / queue_constraints_update / queue_close_constraints / queue_agent_permissions_update — the original queued update is past the freshness window.",
+            },
+        ],
+    },
     6076: {
-        name: "ConstraintIndexOutOfBounds",
-        message: "Constraint entry index out of bounds for zero-copy array.",
+        name: "AccountWritabilityMismatch",
+        message: "Account writability flag does not match the constraint requirement (read-only vs writable).",
         category: "INPUT_VALIDATION",
         retryable: false,
         recovery_actions: [
             {
                 action: "fix_constraints",
-                description: "Ensure constraint entries do not exceed max 64 entries.",
+                description: "Match the writability flag (read-only or writable) of the account passed to the instruction with the constraint's is_writable_required value.",
             },
         ],
     },
+    // M11 SIMD-0296 pad-attack DoS guard
     6077: {
-        name: "InvalidConstraintOperator",
-        message: "Constraint operator value is not a valid ConstraintOperator discriminant.",
+        name: "SysvarScanBoundExceeded",
+        message: "Sysvar instruction scan exceeded the per-tx safety bound (MAX_SYSVAR_SCAN_ITERATIONS=64).",
         category: "INPUT_VALIDATION",
         retryable: false,
         recovery_actions: [
             {
-                action: "fix_constraints",
-                description: "Ensure constraint operators are valid (0-6).",
+                action: "fix_transaction_shape",
+                description: "Reduce the number of instructions in the transaction. The on-chain sysvar walk is bounded at 64 ix to defend against pad-attack DoS (M11 / SIMD-0296). Legitimate flows fit well under this cap.",
             },
         ],
     },
+    // C4 audit fix: async-fulfillment program deny
     6078: {
-        name: "ConstraintsVaultMismatch",
-        message: "Zero-copy constraints account has wrong vault.",
-        category: "INPUT_VALIDATION",
+        name: "AsyncFulfillmentNotPermitted",
+        message: "Async-fulfillment programs (Jupiter Perps, Drift v2, Drift JIT) are not permitted in V1 — keeper-driven settlement happens after finalize_session returns and cannot be measured against the spending cap.",
+        category: "POLICY_VIOLATION",
         retryable: false,
         recovery_actions: [
             {
-                action: "verify_pda",
-                description: "The constraints PDA does not belong to this vault.",
+                action: "use_supported_protocol",
+                description: "Use a synchronous protocol (Jupiter swap, Jupiter Lend, etc.). V1.1 will add a sanctioned async-friendly path with settlement-tracked counters or post-execution attestation.",
             },
         ],
     },
+    // Orphan constraints PDA cleanup (F3-H1 audit fix)
     6079: {
-        name: "ConstraintEntryCountExceeded",
-        message: "Cannot pack entries: entry count exceeds MAX_CONSTRAINT_ENTRIES (64).",
+        name: "ConstraintsAlreadyPopulated",
+        message: "Cannot clean an active constraints PDA via cleanup_orphan_constraints_pda — use queue_close_constraints + apply_close_constraints instead.",
         category: "INPUT_VALIDATION",
         retryable: false,
         recovery_actions: [
             {
-                action: "reduce_entries",
-                description: "Reduce the number of constraint entries to 64 or fewer.",
+                action: "use_close_path",
+                description: "Route through the timelocked close-constraints path; the orphan-cleanup instruction only operates on never-populated PDAs (partial allocate+extend chain).",
             },
         ],
     },
     6080: {
-        name: "BlockedSplOpcode",
-        message: "SPL opcode is blocked at runtime and cannot be used in constraints.",
+        name: "OrphanPdaWrongOwner",
+        message: "PDA at the constraints seeds is not owned by the Sigil program.",
         category: "INPUT_VALIDATION",
         retryable: false,
         recovery_actions: [
             {
-                action: "fix_constraints",
-                description: "Remove blocked SPL opcode from the constraint entry — use allowlisted opcodes only.",
+                action: "verify_pda",
+                description: "Verify the PDA derivation: it must be owned by the Sigil program and match seeds (vault, constraints).",
+            },
+        ],
+    },
+    6081: {
+        name: "OrphanPdaPopulated",
+        message: "PDA is fully populated (carries the Anchor discriminator) — not an orphan; cannot be cleaned.",
+        category: "INPUT_VALIDATION",
+        retryable: false,
+        recovery_actions: [
+            {
+                action: "use_close_path",
+                description: "Route fully-populated constraints PDAs through queue_close_constraints + apply_close_constraints.",
+            },
+        ],
+    },
+    // PR 7: Token-2022 opcode blocks (M3 + Pentester HIGH/MED + third-pass audit)
+    6082: {
+        name: "ConfidentialTransferBlocked",
+        message: "Token-2022 ConfidentialTransfer is not permitted between validate_and_authorize and finalize_session.",
+        category: "POLICY_VIOLATION",
+        retryable: false,
+        recovery_actions: [
+            {
+                action: "use_supported_protocol",
+                description: "Token-2022 ConfidentialTransfer (opcode 27/42) hides spending amounts from sysvar accounting and cannot be tracked. Use the standard SPL Token transfer or Jupiter swap path instead.",
+            },
+        ],
+    },
+    6083: {
+        name: "PermanentDelegateBlocked",
+        message: "Token-2022 PermanentDelegate is not permitted between validate_and_authorize and finalize_session.",
+        category: "POLICY_VIOLATION",
+        retryable: false,
+        recovery_actions: [
+            {
+                action: "use_supported_protocol",
+                description: "Token-2022 PermanentDelegate (opcode 35) installs a session-bound delegate that survives finalize. Reject up-front; use a per-tx Approve instead.",
+            },
+        ],
+    },
+    6084: {
+        name: "TransferHookBlocked",
+        message: "Token-2022 TransferHook is not permitted between validate_and_authorize and finalize_session.",
+        category: "POLICY_VIOLATION",
+        retryable: false,
+        recovery_actions: [
+            {
+                action: "use_supported_protocol",
+                description: "Token-2022 TransferHook (opcode 36) routes mid-tx control to attacker-chosen code. Use a non-hook mint or whitelist the hook program in V1.1.",
+            },
+        ],
+    },
+    6085: {
+        name: "LamportDrainBlocked",
+        message: "Token-2022 destructive-balance instruction (opcode 38/45/46) is not permitted between validate_and_authorize and finalize_session.",
+        category: "POLICY_VIOLATION",
+        retryable: false,
+        recovery_actions: [
+            {
+                action: "use_supported_protocol",
+                description: "WithdrawExcessLamports/UnwrapLamports/PermissionedBurnExtension drain SOL or balances outside the spending-cap path. Block at the gate; V1.1 may add an owner-allowlist for legitimate uses.",
+            },
+        ],
+    },
+    6086: {
+        name: "BatchInstructionBlocked",
+        message: "Token-2022 Batch instruction (opcode 255) is blocked outright — wraps inner instructions and bypasses the byte-0 blocklist.",
+        category: "POLICY_VIOLATION",
+        retryable: false,
+        recovery_actions: [
+            {
+                action: "use_supported_protocol",
+                description: "Token-2022 Batch (opcode 255) wraps inner TokenInstructions; the byte-0 blocklist cannot see them. Submit each inner ix as its own top-level instruction so guards can inspect each.",
+            },
+        ],
+    },
+    // F-4 audit fix: explicit destination_mode (default Restricted closes default-allow drain)
+    6087: {
+        name: "InvalidDestinationMode",
+        message: "Invalid destination mode (must be 0 = Restricted or 1 = OpenWithCap).",
+        category: "INPUT_VALIDATION",
+        retryable: false,
+        recovery_actions: [
+            {
+                action: "fix_policy",
+                description: "Pass destination_mode = 0 (Restricted, default) or 1 (OpenWithCap, explicit opt-in to drain blast radius).",
             },
         ],
     },
@@ -1609,7 +1694,7 @@ const SDK_ERRORS = {
  * Convert any error into a structured AgentError.
  *
  * Handles:
- * - On-chain Anchor errors (code 6000-6080)
+ * - On-chain Anchor errors (code 6000-6087)
  * - SDK errors (code 7000-7033)
  * - Network/RPC errors (from message patterns)
  * - Unknown errors (wrapped as FATAL)
@@ -1911,7 +1996,7 @@ function extractErrorCode(error) {
         return null;
     const e = error;
     // Direct code property
-    if (typeof e.code === "number" && e.code >= 6000 && e.code <= 6080)
+    if (typeof e.code === "number" && e.code >= 6000 && e.code <= 6087)
         return e.code;
     // Anchor error structure
     if (e.error && typeof e.error === "object") {
@@ -1927,7 +2012,7 @@ function extractErrorCode(error) {
         const match = e.message.match(/custom program error: 0x([0-9a-fA-F]+)/);
         if (match) {
             const code = parseInt(match[1], 16);
-            if (code >= 6000 && code <= 6080)
+            if (code >= 6000 && code <= 6087)
                 return code;
         }
     }
@@ -2144,7 +2229,7 @@ export class SigilSdkError extends Error {
  * Returns a SigilSdkError (extends Error) so instanceof Error checks still work.
  *
  * Processing order:
- * 1. Try on-chain error extraction via toAgentError() (numeric codes 6000-6080)
+ * 1. Try on-chain error extraction via toAgentError() (numeric codes 6000-6087)
  * 2. Pattern-match SDK error messages (11 patterns from seal.ts throw sites)
  * 3. Fallback to UNKNOWN/FATAL
  */