@usesigil/kit 0.15.0 → 0.17.0

package/dist/generated/accounts/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/generated/accounts/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/generated/accounts/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oCAAoC,CAAC;AACnD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC"}

package/dist/generated/accounts/pendingAgentGrant.d.ts

@@ -0,0 +1,199 @@
+/**
+ * This code was AUTOGENERATED using the Codama library.
+ * Please DO NOT EDIT THIS FILE, instead use visitors
+ * to add features, then rerun Codama to update it.
+ *
+ * @see https://github.com/codama-idl/codama
+ */
+import { fetchEncodedAccount, fetchEncodedAccounts, type Account, type Address, type EncodedAccount, type FetchAccountConfig, type FetchAccountsConfig, type FixedSizeCodec, type FixedSizeDecoder, type FixedSizeEncoder, type MaybeAccount, type MaybeEncodedAccount, type ReadonlyUint8Array } from "@solana/kit";
+export declare const PENDING_AGENT_GRANT_DISCRIMINATOR: Uint8Array<ArrayBuffer>;
+export declare function getPendingAgentGrantDiscriminatorBytes(): ReadonlyUint8Array<ArrayBuffer>;
+export type PendingAgentGrant = {
+    discriminator: ReadonlyUint8Array;
+    /** PDA-bound vault. Defense-in-depth duplicate of the seeds vault prefix. */
+    vault: Address;
+    /**
+     * Agent pubkey being granted. Validated against the existing
+     * `vault.is_agent` set at apply time (the Anchor `init` of the PDA
+     * itself prevents double-queue per agent because the seed includes the
+     * vault only — apply also re-checks for double-registration).
+     */
+    agent: Address;
+    /**
+     * Target capability. Hard-rejected at queue time unless `>= CAPABILITY_OPERATOR`
+     * — this is the WHOLE POINT of the queued path. Stored as u8 for wire
+     * compatibility with `vault.agents[i].capability`.
+     */
+    capability: number;
+    /**
+     * Per-agent rolling-24h spend limit (USDC face value, 6 decimals).
+     * Mirrors `register_agent`'s arg.
+     */
+    spendingLimitUsd: bigint;
+    /**
+     * `Clock::unix_timestamp` at queue time. Timelock enforced as
+     * `clock.unix_timestamp - queued_at >= min_delay_seconds`.
+     */
+    queuedAt: bigint;
+    /**
+     * Owner-configurable timelock window (seconds). Defaults to
+     * `Self::DEFAULT_MIN_DELAY = 172_800s = 48h` — matches the
+     * `PendingOwnershipTransfer` 48h window so an OPERATOR-class grant
+     * (which is at least as elevated as ownership transfer in capability
+     * terms) gets the full observation window for the owner to detect a
+     * phished-key queue and cancel via `cancel_agent_grant`.
+     *
+     * Phase 8 §RP Fix-Up B (PEN-02a CRITICAL, audit 2026-05-19): raised
+     * from 30min → 48h. The previous default gave a phished owner only
+     * 30 minutes to react. 48h matches the ownership-transfer floor; a
+     * future SDK call may permit owner-configurable shortening if
+     * `policy.timelock_duration` permits, but the V1 default is the
+     * 48h floor for safety.
+     */
+    minDelaySeconds: bigint;
+    /** PDA bump. */
+    bump: number;
+    /**
+     * 6-byte alignment cushion + additive headroom for future v1.1
+     * extensions (e.g. cooldown_seconds binding). Zero-init on `init`.
+     */
+    padding: ReadonlyUint8Array;
+    /**
+     * M-5 close (Bucket 2, Phase 10 PEN-CROSS-3): SHA-256 over the
+     * canonical byte encoding of the pending content (vault + agent +
+     * capability + spending_limit_usd + queued_at + min_delay_seconds +
+     * queued_at_slot — CH-1 close Bucket-3 audit 2026-05-23 folded
+     * queued_at_slot into the canonical encoder at position 7).
+     * Written once at `queue_agent_grant` and re-asserted at
+     * `apply_agent_grant` before any mutation of `vault.agents`.
+     *
+     * Defense-in-depth against discriminator-collision overwrite of
+     * this pending PDA's body between queue and apply: even if a future
+     * bug allowed a same-seed CPI to rewrite the grant fields, the
+     * digest recorded at queue time pins the owner-attested content,
+     * and the apply-time recompute would diverge and reject with
+     * `ErrPendingAgentGrantDigestMismatch`.
+     *
+     * Alignment: Anchor's `#[account]` uses Borsh on-the-wire layout, so
+     * the byte arithmetic is purely additive: 104 + 32 + 8 = 144 bytes
+     * total (CH-1 Bucket-3 added 8 bytes for queued_at_slot).
+     * `[u8; 32]` has alignment 1, so no padding is required regardless of
+     * the preceding `u8` + `[u8; 6]` shape.
+     */
+    pendingContentDigest: ReadonlyUint8Array;
+    /**
+     * CH-1 close (Bucket-3 audit 2026-05-23): slot at queue time for
+     * F-10 freshness check. Paired with `MAX_APPLY_AGE_SLOTS_TIMELOCKED_ADMIN`
+     * to defend against the Drift-April-2026 durable-nonce pre-signing
+     * attack class: a compromised owner key can pre-sign queue+apply ix
+     * in the same slot, queue NOW, then replay the pre-signed apply
+     * weeks later. Slot-based F-10 catches the "weeks later" case.
+     *
+     * Note: `queued_at: i64` above is the existing unix-timestamp used
+     * by the 48h timelock countdown — that semantic is unchanged. This
+     * slot field is additive and load-bearing only for the F-10 fresh-
+     * ness check.
+     */
+    queuedAtSlot: bigint;
+};
+export type PendingAgentGrantArgs = {
+    /** PDA-bound vault. Defense-in-depth duplicate of the seeds vault prefix. */
+    vault: Address;
+    /**
+     * Agent pubkey being granted. Validated against the existing
+     * `vault.is_agent` set at apply time (the Anchor `init` of the PDA
+     * itself prevents double-queue per agent because the seed includes the
+     * vault only — apply also re-checks for double-registration).
+     */
+    agent: Address;
+    /**
+     * Target capability. Hard-rejected at queue time unless `>= CAPABILITY_OPERATOR`
+     * — this is the WHOLE POINT of the queued path. Stored as u8 for wire
+     * compatibility with `vault.agents[i].capability`.
+     */
+    capability: number;
+    /**
+     * Per-agent rolling-24h spend limit (USDC face value, 6 decimals).
+     * Mirrors `register_agent`'s arg.
+     */
+    spendingLimitUsd: number | bigint;
+    /**
+     * `Clock::unix_timestamp` at queue time. Timelock enforced as
+     * `clock.unix_timestamp - queued_at >= min_delay_seconds`.
+     */
+    queuedAt: number | bigint;
+    /**
+     * Owner-configurable timelock window (seconds). Defaults to
+     * `Self::DEFAULT_MIN_DELAY = 172_800s = 48h` — matches the
+     * `PendingOwnershipTransfer` 48h window so an OPERATOR-class grant
+     * (which is at least as elevated as ownership transfer in capability
+     * terms) gets the full observation window for the owner to detect a
+     * phished-key queue and cancel via `cancel_agent_grant`.
+     *
+     * Phase 8 §RP Fix-Up B (PEN-02a CRITICAL, audit 2026-05-19): raised
+     * from 30min → 48h. The previous default gave a phished owner only
+     * 30 minutes to react. 48h matches the ownership-transfer floor; a
+     * future SDK call may permit owner-configurable shortening if
+     * `policy.timelock_duration` permits, but the V1 default is the
+     * 48h floor for safety.
+     */
+    minDelaySeconds: number | bigint;
+    /** PDA bump. */
+    bump: number;
+    /**
+     * 6-byte alignment cushion + additive headroom for future v1.1
+     * extensions (e.g. cooldown_seconds binding). Zero-init on `init`.
+     */
+    padding: ReadonlyUint8Array;
+    /**
+     * M-5 close (Bucket 2, Phase 10 PEN-CROSS-3): SHA-256 over the
+     * canonical byte encoding of the pending content (vault + agent +
+     * capability + spending_limit_usd + queued_at + min_delay_seconds +
+     * queued_at_slot — CH-1 close Bucket-3 audit 2026-05-23 folded
+     * queued_at_slot into the canonical encoder at position 7).
+     * Written once at `queue_agent_grant` and re-asserted at
+     * `apply_agent_grant` before any mutation of `vault.agents`.
+     *
+     * Defense-in-depth against discriminator-collision overwrite of
+     * this pending PDA's body between queue and apply: even if a future
+     * bug allowed a same-seed CPI to rewrite the grant fields, the
+     * digest recorded at queue time pins the owner-attested content,
+     * and the apply-time recompute would diverge and reject with
+     * `ErrPendingAgentGrantDigestMismatch`.
+     *
+     * Alignment: Anchor's `#[account]` uses Borsh on-the-wire layout, so
+     * the byte arithmetic is purely additive: 104 + 32 + 8 = 144 bytes
+     * total (CH-1 Bucket-3 added 8 bytes for queued_at_slot).
+     * `[u8; 32]` has alignment 1, so no padding is required regardless of
+     * the preceding `u8` + `[u8; 6]` shape.
+     */
+    pendingContentDigest: ReadonlyUint8Array;
+    /**
+     * CH-1 close (Bucket-3 audit 2026-05-23): slot at queue time for
+     * F-10 freshness check. Paired with `MAX_APPLY_AGE_SLOTS_TIMELOCKED_ADMIN`
+     * to defend against the Drift-April-2026 durable-nonce pre-signing
+     * attack class: a compromised owner key can pre-sign queue+apply ix
+     * in the same slot, queue NOW, then replay the pre-signed apply
+     * weeks later. Slot-based F-10 catches the "weeks later" case.
+     *
+     * Note: `queued_at: i64` above is the existing unix-timestamp used
+     * by the 48h timelock countdown — that semantic is unchanged. This
+     * slot field is additive and load-bearing only for the F-10 fresh-
+     * ness check.
+     */
+    queuedAtSlot: number | bigint;
+};
+/** Gets the encoder for {@link PendingAgentGrantArgs} account data. */
+export declare function getPendingAgentGrantEncoder(): FixedSizeEncoder<PendingAgentGrantArgs>;
+/** Gets the decoder for {@link PendingAgentGrant} account data. */
+export declare function getPendingAgentGrantDecoder(): FixedSizeDecoder<PendingAgentGrant>;
+/** Gets the codec for {@link PendingAgentGrant} account data. */
+export declare function getPendingAgentGrantCodec(): FixedSizeCodec<PendingAgentGrantArgs, PendingAgentGrant>;
+export declare function decodePendingAgentGrant<TAddress extends string = string>(encodedAccount: EncodedAccount<TAddress>): Account<PendingAgentGrant, TAddress>;
+export declare function decodePendingAgentGrant<TAddress extends string = string>(encodedAccount: MaybeEncodedAccount<TAddress>): MaybeAccount<PendingAgentGrant, TAddress>;
+export declare function fetchPendingAgentGrant<TAddress extends string = string>(rpc: Parameters<typeof fetchEncodedAccount>[0], address: Address<TAddress>, config?: FetchAccountConfig): Promise<Account<PendingAgentGrant, TAddress>>;
+export declare function fetchMaybePendingAgentGrant<TAddress extends string = string>(rpc: Parameters<typeof fetchEncodedAccount>[0], address: Address<TAddress>, config?: FetchAccountConfig): Promise<MaybeAccount<PendingAgentGrant, TAddress>>;
+export declare function fetchAllPendingAgentGrant(rpc: Parameters<typeof fetchEncodedAccounts>[0], addresses: Array<Address>, config?: FetchAccountsConfig): Promise<Account<PendingAgentGrant>[]>;
+export declare function fetchAllMaybePendingAgentGrant(rpc: Parameters<typeof fetchEncodedAccounts>[0], addresses: Array<Address>, config?: FetchAccountsConfig): Promise<MaybeAccount<PendingAgentGrant>[]>;
+export declare function getPendingAgentGrantSize(): number;
+//# sourceMappingURL=pendingAgentGrant.d.ts.map

package/dist/generated/accounts/pendingAgentGrant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pendingAgentGrant.d.ts","sourceRoot":"","sources":["../../../src/generated/accounts/pendingAgentGrant.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAKL,mBAAmB,EACnB,oBAAoB,EAgBpB,KAAK,OAAO,EACZ,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,iCAAiC,yBAE5C,CAAC;AAEH,wBAAgB,sCAAsC,oCAIrD;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,EAAE,kBAAkB,CAAC;IAClC,6EAA6E;IAC7E,KAAK,EAAE,OAAO,CAAC;IACf;;;;;OAKG;IACH,KAAK,EAAE,OAAO,CAAC;IACf;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;OAcG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,OAAO,EAAE,kBAAkB,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,oBAAoB,EAAE,kBAAkB,CAAC;IACzC;;;;;;;;;;;;OAYG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,6EAA6E;IAC7E,KAAK,EAAE,OAAO,CAAC;IACf;;;;;OAKG;IACH,KAAK,EAAE,OAAO,CAAC;IACf;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC;;;OAGG;IACH,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B;;;;;;;;;;;;;;OAcG;IACH,eAAe,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,OAAO,EAAE,kBAAkB,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,oBAAoB,EAAE,kBAAkB,CAAC;IACzC;;;;;;;;;;;;OAYG;IACH,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;CAC/B,CAAC;AAEF,uEAAuE;AACvE,wBAAgB,2BAA2B,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAiBrF;AAED,mEAAmE;AACnE,wBAAgB,2BAA2B,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAcjF;AAED,iEAAiE;AACjE,wBAAgB,yBAAyB,IAAI,cAAc,CACzD,qBAAqB,EACrB,iBAAiB,CAClB,CAKA;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,EACtE,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,GACvC,OAAO,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;AACxC,wBAAgB,uBAAuB,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,EACtE,cAAc,EAAE,mBAAmB,CAAC,QAAQ,CAAC,GAC5C,YAAY,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;AAY7C,wBAAsB,sBAAsB,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,EAC3E,GAAG,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAC9C,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAC1B,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAI/C;AAED,wBAAsB,2BAA2B,CAC/C,QAAQ,SAAS,MAAM,GAAG,MAAM,EAEhC,GAAG,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAC9C,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAC1B,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAGpD;AAED,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAC/C,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EACzB,MAAM,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAQvC;AAED,wBAAsB,8BAA8B,CAClD,GAAG,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAC/C,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EACzB,MAAM,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAK5C;AAED,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD"}

package/dist/generated/accounts/pendingAgentGrant.js

@@ -0,0 +1,75 @@
+/**
+ * This code was AUTOGENERATED using the Codama library.
+ * Please DO NOT EDIT THIS FILE, instead use visitors
+ * to add features, then rerun Codama to update it.
+ *
+ * @see https://github.com/codama-idl/codama
+ */
+import { assertAccountExists, assertAccountsExist, combineCodec, decodeAccount, fetchEncodedAccount, fetchEncodedAccounts, fixDecoderSize, fixEncoderSize, getAddressDecoder, getAddressEncoder, getBytesDecoder, getBytesEncoder, getI64Decoder, getI64Encoder, getStructDecoder, getStructEncoder, getU64Decoder, getU64Encoder, getU8Decoder, getU8Encoder, transformEncoder, } from "@solana/kit";
+export const PENDING_AGENT_GRANT_DISCRIMINATOR = new Uint8Array([
+    164, 188, 119, 39, 18, 133, 78, 66,
+]);
+export function getPendingAgentGrantDiscriminatorBytes() {
+    return fixEncoderSize(getBytesEncoder(), 8).encode(PENDING_AGENT_GRANT_DISCRIMINATOR);
+}
+/** Gets the encoder for {@link PendingAgentGrantArgs} account data. */
+export function getPendingAgentGrantEncoder() {
+    return transformEncoder(getStructEncoder([
+        ["discriminator", fixEncoderSize(getBytesEncoder(), 8)],
+        ["vault", getAddressEncoder()],
+        ["agent", getAddressEncoder()],
+        ["capability", getU8Encoder()],
+        ["spendingLimitUsd", getU64Encoder()],
+        ["queuedAt", getI64Encoder()],
+        ["minDelaySeconds", getU64Encoder()],
+        ["bump", getU8Encoder()],
+        ["padding", fixEncoderSize(getBytesEncoder(), 6)],
+        ["pendingContentDigest", fixEncoderSize(getBytesEncoder(), 32)],
+        ["queuedAtSlot", getU64Encoder()],
+    ]), (value) => ({ ...value, discriminator: PENDING_AGENT_GRANT_DISCRIMINATOR }));
+}
+/** Gets the decoder for {@link PendingAgentGrant} account data. */
+export function getPendingAgentGrantDecoder() {
+    return getStructDecoder([
+        ["discriminator", fixDecoderSize(getBytesDecoder(), 8)],
+        ["vault", getAddressDecoder()],
+        ["agent", getAddressDecoder()],
+        ["capability", getU8Decoder()],
+        ["spendingLimitUsd", getU64Decoder()],
+        ["queuedAt", getI64Decoder()],
+        ["minDelaySeconds", getU64Decoder()],
+        ["bump", getU8Decoder()],
+        ["padding", fixDecoderSize(getBytesDecoder(), 6)],
+        ["pendingContentDigest", fixDecoderSize(getBytesDecoder(), 32)],
+        ["queuedAtSlot", getU64Decoder()],
+    ]);
+}
+/** Gets the codec for {@link PendingAgentGrant} account data. */
+export function getPendingAgentGrantCodec() {
+    return combineCodec(getPendingAgentGrantEncoder(), getPendingAgentGrantDecoder());
+}
+export function decodePendingAgentGrant(encodedAccount) {
+    return decodeAccount(encodedAccount, getPendingAgentGrantDecoder());
+}
+export async function fetchPendingAgentGrant(rpc, address, config) {
+    const maybeAccount = await fetchMaybePendingAgentGrant(rpc, address, config);
+    assertAccountExists(maybeAccount);
+    return maybeAccount;
+}
+export async function fetchMaybePendingAgentGrant(rpc, address, config) {
+    const maybeAccount = await fetchEncodedAccount(rpc, address, config);
+    return decodePendingAgentGrant(maybeAccount);
+}
+export async function fetchAllPendingAgentGrant(rpc, addresses, config) {
+    const maybeAccounts = await fetchAllMaybePendingAgentGrant(rpc, addresses, config);
+    assertAccountsExist(maybeAccounts);
+    return maybeAccounts;
+}
+export async function fetchAllMaybePendingAgentGrant(rpc, addresses, config) {
+    const maybeAccounts = await fetchEncodedAccounts(rpc, addresses, config);
+    return maybeAccounts.map((maybeAccount) => decodePendingAgentGrant(maybeAccount));
+}
+export function getPendingAgentGrantSize() {
+    return 144;
+}
+//# sourceMappingURL=pendingAgentGrant.js.map

package/dist/generated/accounts/pendingAgentGrant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pendingAgentGrant.js","sourceRoot":"","sources":["../../../src/generated/accounts/pendingAgentGrant.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,gBAAgB,GAYjB,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,UAAU,CAAC;IAC9D,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE;CACnC,CAAC,CAAC;AAEH,MAAM,UAAU,sCAAsC;IACpD,OAAO,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAChD,iCAAiC,CAClC,CAAC;AACJ,CAAC;AAmLD,uEAAuE;AACvE,MAAM,UAAU,2BAA2B;IACzC,OAAO,gBAAgB,CACrB,gBAAgB,CAAC;QACf,CAAC,eAAe,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC9B,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC9B,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC;QAC9B,CAAC,kBAAkB,EAAE,aAAa,EAAE,CAAC;QACrC,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;QAC7B,CAAC,iBAAiB,EAAE,aAAa,EAAE,CAAC;QACpC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;QACxB,CAAC,SAAS,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC,sBAAsB,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC,cAAc,EAAE,aAAa,EAAE,CAAC;KAClC,CAAC,EACF,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,iCAAiC,EAAE,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,2BAA2B;IACzC,OAAO,gBAAgB,CAAC;QACtB,CAAC,eAAe,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC9B,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC9B,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC;QAC9B,CAAC,kBAAkB,EAAE,aAAa,EAAE,CAAC;QACrC,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;QAC7B,CAAC,iBAAiB,EAAE,aAAa,EAAE,CAAC;QACpC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;QACxB,CAAC,SAAS,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC,sBAAsB,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC,cAAc,EAAE,aAAa,EAAE,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,yBAAyB;IAIvC,OAAO,YAAY,CACjB,2BAA2B,EAAE,EAC7B,2BAA2B,EAAE,CAC9B,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,uBAAuB,CACrC,cAAwE;IAIxE,OAAO,aAAa,CAClB,cAA+C,EAC/C,2BAA2B,EAAE,CAC9B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAA8C,EAC9C,OAA0B,EAC1B,MAA2B;IAE3B,MAAM,YAAY,GAAG,MAAM,2BAA2B,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7E,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAClC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAG/C,GAA8C,EAC9C,OAA0B,EAC1B,MAA2B;IAE3B,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrE,OAAO,uBAAuB,CAAC,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAA+C,EAC/C,SAAyB,EACzB,MAA4B;IAE5B,MAAM,aAAa,GAAG,MAAM,8BAA8B,CACxD,GAAG,EACH,SAAS,EACT,MAAM,CACP,CAAC;IACF,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACnC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,GAA+C,EAC/C,SAAyB,EACzB,MAA4B;IAE5B,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACzE,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CACxC,uBAAuB,CAAC,YAAY,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/generated/accounts/pendingAgentPermissionsUpdate.d.ts

@@ -17,7 +17,45 @@ export type PendingAgentPermissionsUpdate = {
     spendingLimitUsd: bigint;
     queuedAt: bigint;
     executesAt: bigint;
+    /**
+     * Slot number when this update was queued. Paired with `MAX_APPLY_AGE_SLOTS`
+     * to enforce a freshness ceiling — defends against durable-nonce pre-signing
+     * attacks (F-10 audit fix, Drift Protocol April 2026 $285M analog).
+     */
+    queuedAtSlot: bigint;
     bump: number;
+    /**
+     * TA-06 (Phase 3): per-agent cooldown in seconds. 0 disables. Bound
+     * at apply time onto `AgentSpendOverlay.cooldown_seconds[slot]`.
+     * APPENDED at end per F-14 APPEND-ONLY rule for Borsh stability.
+     */
+    cooldownSeconds: bigint;
+    /**
+     * Round 2 F-RP3-2 fix (audit 2026-05-19): cosign-binding digest for
+     * elevated mutations. When `queue_agent_permissions_update` detects
+     * that the request RAISES an agent's capability, RAISES the spending
+     * limit, or SHORTENS the cooldown — AND `policy.cosign_required ==
+     * true` — the owner MUST supply a co-signing session in the accounts.
+     * The queue handler computes a sha256 over the canonical pending args
+     * and stores it here; `apply_agent_permissions_update` re-asserts the
+     * digest equality.
+     *
+     * `[0u8; 32]` = no cosign required (non-elevated mutation OR cosign
+     * not opted in on this vault). Any non-zero digest indicates this
+     * pending was bound to a specific cosign and the apply handler MUST
+     * re-compute and equal-check.
+     *
+     * APPENDED at end per F-14 APPEND-ONLY rule for Borsh stability.
+     */
+    cosignDigest: ReadonlyUint8Array;
+    /**
+     * Round 2 F-RP3-2 fix (audit 2026-05-19): pubkey of the session that
+     * co-signed this queue. Recorded for audit. `Pubkey::default()` =
+     * no cosign (non-elevated OR not opted in).
+     *
+     * APPENDED at end per F-14 APPEND-ONLY rule for Borsh stability.
+     */
+    cosignSession: Address;
 };
 export type PendingAgentPermissionsUpdateArgs = {
     vault: Address;
@@ -27,7 +65,45 @@ export type PendingAgentPermissionsUpdateArgs = {
     spendingLimitUsd: number | bigint;
     queuedAt: number | bigint;
     executesAt: number | bigint;
+    /**
+     * Slot number when this update was queued. Paired with `MAX_APPLY_AGE_SLOTS`
+     * to enforce a freshness ceiling — defends against durable-nonce pre-signing
+     * attacks (F-10 audit fix, Drift Protocol April 2026 $285M analog).
+     */
+    queuedAtSlot: number | bigint;
     bump: number;
+    /**
+     * TA-06 (Phase 3): per-agent cooldown in seconds. 0 disables. Bound
+     * at apply time onto `AgentSpendOverlay.cooldown_seconds[slot]`.
+     * APPENDED at end per F-14 APPEND-ONLY rule for Borsh stability.
+     */
+    cooldownSeconds: number | bigint;
+    /**
+     * Round 2 F-RP3-2 fix (audit 2026-05-19): cosign-binding digest for
+     * elevated mutations. When `queue_agent_permissions_update` detects
+     * that the request RAISES an agent's capability, RAISES the spending
+     * limit, or SHORTENS the cooldown — AND `policy.cosign_required ==
+     * true` — the owner MUST supply a co-signing session in the accounts.
+     * The queue handler computes a sha256 over the canonical pending args
+     * and stores it here; `apply_agent_permissions_update` re-asserts the
+     * digest equality.
+     *
+     * `[0u8; 32]` = no cosign required (non-elevated mutation OR cosign
+     * not opted in on this vault). Any non-zero digest indicates this
+     * pending was bound to a specific cosign and the apply handler MUST
+     * re-compute and equal-check.
+     *
+     * APPENDED at end per F-14 APPEND-ONLY rule for Borsh stability.
+     */
+    cosignDigest: ReadonlyUint8Array;
+    /**
+     * Round 2 F-RP3-2 fix (audit 2026-05-19): pubkey of the session that
+     * co-signed this queue. Recorded for audit. `Pubkey::default()` =
+     * no cosign (non-elevated OR not opted in).
+     *
+     * APPENDED at end per F-14 APPEND-ONLY rule for Borsh stability.
+     */
+    cosignSession: Address;
 };
 /** Gets the encoder for {@link PendingAgentPermissionsUpdateArgs} account data. */
 export declare function getPendingAgentPermissionsUpdateEncoder(): FixedSizeEncoder<PendingAgentPermissionsUpdateArgs>;

package/dist/generated/accounts/pendingAgentPermissionsUpdate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pendingAgentPermissionsUpdate.d.ts","sourceRoot":"","sources":["../../../src/generated/accounts/pendingAgentPermissionsUpdate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAKL,mBAAmB,EACnB,oBAAoB,EAgBpB,KAAK,OAAO,EACZ,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,8CAA8C,yBAEzD,CAAC;AAEH,wBAAgB,kDAAkD,oCAIjE;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,aAAa,EAAE,kBAAkB,CAAC;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,kBAAkB,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,kBAAkB,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,mFAAmF;AACnF,wBAAgB,uCAAuC,IAAI,gBAAgB,CAAC,iCAAiC,CAAC,CAkB7G;AAED,+EAA+E;AAC/E,wBAAgB,uCAAuC,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAYzG;AAED,6EAA6E;AAC7E,wBAAgB,qCAAqC,IAAI,cAAc,CACrE,iCAAiC,EACjC,6BAA6B,CAC9B,CAKA;AAED,wBAAgB,mCAAmC,CACjD,QAAQ,SAAS,MAAM,GAAG,MAAM,EAEhC,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,GACvC,OAAO,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;AACpD,wBAAgB,mCAAmC,CACjD,QAAQ,SAAS,MAAM,GAAG,MAAM,EAEhC,cAAc,EAAE,mBAAmB,CAAC,QAAQ,CAAC,GAC5C,YAAY,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;AAczD,wBAAsB,kCAAkC,CACtD,QAAQ,SAAS,MAAM,GAAG,MAAM,EAEhC,GAAG,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAC9C,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAC1B,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,OAAO,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC,CAQ3D;AAED,wBAAsB,uCAAuC,CAC3D,QAAQ,SAAS,MAAM,GAAG,MAAM,EAEhC,GAAG,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAC9C,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAC1B,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC,CAGhE;AAED,wBAAsB,qCAAqC,CACzD,GAAG,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAC/C,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EACzB,MAAM,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,OAAO,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAQnD;AAED,wBAAsB,0CAA0C,CAC9D,GAAG,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAC/C,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EACzB,MAAM,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAKxD;AAED,wBAAgB,oCAAoC,IAAI,MAAM,CAE7D"}
+{"version":3,"file":"pendingAgentPermissionsUpdate.d.ts","sourceRoot":"","sources":["../../../src/generated/accounts/pendingAgentPermissionsUpdate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAKL,mBAAmB,EACnB,oBAAoB,EAgBpB,KAAK,OAAO,EACZ,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,8CAA8C,yBAEzD,CAAC;AAEH,wBAAgB,kDAAkD,oCAIjE;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,aAAa,EAAE,kBAAkB,CAAC;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,kBAAkB,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,EAAE,kBAAkB,CAAC;IACjC;;;;;;OAMG;IACH,aAAa,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,kBAAkB,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B;;;;OAIG;IACH,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,eAAe,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,EAAE,kBAAkB,CAAC;IACjC;;;;;;OAMG;IACH,aAAa,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,mFAAmF;AACnF,wBAAgB,uCAAuC,IAAI,gBAAgB,CAAC,iCAAiC,CAAC,CAsB7G;AAED,+EAA+E;AAC/E,wBAAgB,uCAAuC,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAgBzG;AAED,6EAA6E;AAC7E,wBAAgB,qCAAqC,IAAI,cAAc,CACrE,iCAAiC,EACjC,6BAA6B,CAC9B,CAKA;AAED,wBAAgB,mCAAmC,CACjD,QAAQ,SAAS,MAAM,GAAG,MAAM,EAEhC,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,GACvC,OAAO,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;AACpD,wBAAgB,mCAAmC,CACjD,QAAQ,SAAS,MAAM,GAAG,MAAM,EAEhC,cAAc,EAAE,mBAAmB,CAAC,QAAQ,CAAC,GAC5C,YAAY,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;AAczD,wBAAsB,kCAAkC,CACtD,QAAQ,SAAS,MAAM,GAAG,MAAM,EAEhC,GAAG,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAC9C,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAC1B,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,OAAO,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC,CAQ3D;AAED,wBAAsB,uCAAuC,CAC3D,QAAQ,SAAS,MAAM,GAAG,MAAM,EAEhC,GAAG,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAC9C,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAC1B,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC,CAGhE;AAED,wBAAsB,qCAAqC,CACzD,GAAG,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAC/C,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EACzB,MAAM,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,OAAO,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAQnD;AAED,wBAAsB,0CAA0C,CAC9D,GAAG,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAC/C,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EACzB,MAAM,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAKxD;AAED,wBAAgB,oCAAoC,IAAI,MAAM,CAE7D"}

package/dist/generated/accounts/pendingAgentPermissionsUpdate.js

@@ -23,7 +23,11 @@ export function getPendingAgentPermissionsUpdateEncoder() {
         ["spendingLimitUsd", getU64Encoder()],
         ["queuedAt", getI64Encoder()],
         ["executesAt", getI64Encoder()],
+        ["queuedAtSlot", getU64Encoder()],
         ["bump", getU8Encoder()],
+        ["cooldownSeconds", getU64Encoder()],
+        ["cosignDigest", fixEncoderSize(getBytesEncoder(), 32)],
+        ["cosignSession", getAddressEncoder()],
     ]), (value) => ({
         ...value,
         discriminator: PENDING_AGENT_PERMISSIONS_UPDATE_DISCRIMINATOR,
@@ -40,7 +44,11 @@ export function getPendingAgentPermissionsUpdateDecoder() {
         ["spendingLimitUsd", getU64Decoder()],
         ["queuedAt", getI64Decoder()],
         ["executesAt", getI64Decoder()],
+        ["queuedAtSlot", getU64Decoder()],
         ["bump", getU8Decoder()],
+        ["cooldownSeconds", getU64Decoder()],
+        ["cosignDigest", fixDecoderSize(getBytesDecoder(), 32)],
+        ["cosignSession", getAddressDecoder()],
     ]);
 }
 /** Gets the codec for {@link PendingAgentPermissionsUpdate} account data. */
@@ -69,6 +77,6 @@ export async function fetchAllMaybePendingAgentPermissionsUpdate(rpc, addresses,
     return maybeAccounts.map((maybeAccount) => decodePendingAgentPermissionsUpdate(maybeAccount));
 }
 export function getPendingAgentPermissionsUpdateSize() {
-    return 105;
+    return 185;
 }
 //# sourceMappingURL=pendingAgentPermissionsUpdate.js.map

package/dist/generated/accounts/pendingAgentPermissionsUpdate.js.map

@@ -1 +1 @@
-{"version":3,"file":"pendingAgentPermissionsUpdate.js","sourceRoot":"","sources":["../../../src/generated/accounts/pendingAgentPermissionsUpdate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,gBAAgB,GAYjB,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,8CAA8C,GAAG,IAAI,UAAU,CAAC;IAC3E,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,UAAU,kDAAkD;IAChE,OAAO,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAChD,8CAA8C,CAC/C,CAAC;AACJ,CAAC;AAyBD,mFAAmF;AACnF,MAAM,UAAU,uCAAuC;IACrD,OAAO,gBAAgB,CACrB,gBAAgB,CAAC;QACf,CAAC,eAAe,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC9B,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC9B,CAAC,eAAe,EAAE,YAAY,EAAE,CAAC;QACjC,CAAC,aAAa,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC,kBAAkB,EAAE,aAAa,EAAE,CAAC;QACrC,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;QAC7B,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC;QAC/B,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;KACzB,CAAC,EACF,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACV,GAAG,KAAK;QACR,aAAa,EAAE,8CAA8C;KAC9D,CAAC,CACH,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,uCAAuC;IACrD,OAAO,gBAAgB,CAAC;QACtB,CAAC,eAAe,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC9B,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC9B,CAAC,eAAe,EAAE,YAAY,EAAE,CAAC;QACjC,CAAC,aAAa,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC,kBAAkB,EAAE,aAAa,EAAE,CAAC;QACrC,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;QAC7B,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC;QAC/B,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;KACzB,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,qCAAqC;IAInD,OAAO,YAAY,CACjB,uCAAuC,EAAE,EACzC,uCAAuC,EAAE,CAC1C,CAAC;AACJ,CAAC;AAYD,MAAM,UAAU,mCAAmC,CAGjD,cAAwE;IAIxE,OAAO,aAAa,CAClB,cAA+C,EAC/C,uCAAuC,EAAE,CAC1C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAGtD,GAA8C,EAC9C,OAA0B,EAC1B,MAA2B;IAE3B,MAAM,YAAY,GAAG,MAAM,uCAAuC,CAChE,GAAG,EACH,OAAO,EACP,MAAM,CACP,CAAC;IACF,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAClC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAG3D,GAA8C,EAC9C,OAA0B,EAC1B,MAA2B;IAE3B,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrE,OAAO,mCAAmC,CAAC,YAAY,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,GAA+C,EAC/C,SAAyB,EACzB,MAA4B;IAE5B,MAAM,aAAa,GAAG,MAAM,0CAA0C,CACpE,GAAG,EACH,SAAS,EACT,MAAM,CACP,CAAC;IACF,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACnC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0CAA0C,CAC9D,GAA+C,EAC/C,SAAyB,EACzB,MAA4B;IAE5B,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACzE,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CACxC,mCAAmC,CAAC,YAAY,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oCAAoC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"pendingAgentPermissionsUpdate.js","sourceRoot":"","sources":["../../../src/generated/accounts/pendingAgentPermissionsUpdate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,gBAAgB,GAYjB,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,8CAA8C,GAAG,IAAI,UAAU,CAAC;IAC3E,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,UAAU,kDAAkD;IAChE,OAAO,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAChD,8CAA8C,CAC/C,CAAC;AACJ,CAAC;AAqGD,mFAAmF;AACnF,MAAM,UAAU,uCAAuC;IACrD,OAAO,gBAAgB,CACrB,gBAAgB,CAAC;QACf,CAAC,eAAe,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC9B,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC9B,CAAC,eAAe,EAAE,YAAY,EAAE,CAAC;QACjC,CAAC,aAAa,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC,kBAAkB,EAAE,aAAa,EAAE,CAAC;QACrC,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;QAC7B,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC;QAC/B,CAAC,cAAc,EAAE,aAAa,EAAE,CAAC;QACjC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;QACxB,CAAC,iBAAiB,EAAE,aAAa,EAAE,CAAC;QACpC,CAAC,cAAc,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,CAAC,eAAe,EAAE,iBAAiB,EAAE,CAAC;KACvC,CAAC,EACF,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACV,GAAG,KAAK;QACR,aAAa,EAAE,8CAA8C;KAC9D,CAAC,CACH,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,uCAAuC;IACrD,OAAO,gBAAgB,CAAC;QACtB,CAAC,eAAe,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC9B,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC9B,CAAC,eAAe,EAAE,YAAY,EAAE,CAAC;QACjC,CAAC,aAAa,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC,kBAAkB,EAAE,aAAa,EAAE,CAAC;QACrC,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;QAC7B,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC;QAC/B,CAAC,cAAc,EAAE,aAAa,EAAE,CAAC;QACjC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;QACxB,CAAC,iBAAiB,EAAE,aAAa,EAAE,CAAC;QACpC,CAAC,cAAc,EAAE,cAAc,CAAC,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,CAAC,eAAe,EAAE,iBAAiB,EAAE,CAAC;KACvC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,qCAAqC;IAInD,OAAO,YAAY,CACjB,uCAAuC,EAAE,EACzC,uCAAuC,EAAE,CAC1C,CAAC;AACJ,CAAC;AAYD,MAAM,UAAU,mCAAmC,CAGjD,cAAwE;IAIxE,OAAO,aAAa,CAClB,cAA+C,EAC/C,uCAAuC,EAAE,CAC1C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAGtD,GAA8C,EAC9C,OAA0B,EAC1B,MAA2B;IAE3B,MAAM,YAAY,GAAG,MAAM,uCAAuC,CAChE,GAAG,EACH,OAAO,EACP,MAAM,CACP,CAAC;IACF,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAClC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAG3D,GAA8C,EAC9C,OAA0B,EAC1B,MAA2B;IAE3B,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrE,OAAO,mCAAmC,CAAC,YAAY,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,GAA+C,EAC/C,SAAyB,EACzB,MAA4B;IAE5B,MAAM,aAAa,GAAG,MAAM,0CAA0C,CACpE,GAAG,EACH,SAAS,EACT,MAAM,CACP,CAAC;IACF,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACnC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0CAA0C,CAC9D,GAA+C,EAC/C,SAAyB,EACzB,MAA4B;IAE5B,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACzE,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CACxC,mCAAmC,CAAC,YAAY,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oCAAoC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/generated/accounts/pendingOwnershipTransfer.d.ts

@@ -0,0 +1,131 @@
+/**
+ * This code was AUTOGENERATED using the Codama library.
+ * Please DO NOT EDIT THIS FILE, instead use visitors
+ * to add features, then rerun Codama to update it.
+ *
+ * @see https://github.com/codama-idl/codama
+ */
+import { fetchEncodedAccount, fetchEncodedAccounts, type Account, type Address, type EncodedAccount, type FetchAccountConfig, type FetchAccountsConfig, type FixedSizeCodec, type FixedSizeDecoder, type FixedSizeEncoder, type MaybeAccount, type MaybeEncodedAccount, type ReadonlyUint8Array } from "@solana/kit";
+export declare const PENDING_OWNERSHIP_TRANSFER_DISCRIMINATOR: Uint8Array<ArrayBuffer>;
+export declare function getPendingOwnershipTransferDiscriminatorBytes(): ReadonlyUint8Array<ArrayBuffer>;
+export type PendingOwnershipTransfer = {
+    discriminator: ReadonlyUint8Array;
+    /**
+     * PDA-bound vault. Defense-in-depth duplicate of the [b"pending_owner",
+     * vault.key()] seed — also lets handlers reject stale accounts that were
+     * re-created against a different vault during a close-then-reuse race.
+     */
+    vault: Address;
+    /**
+     * Owner pubkey at queue time. `cancel_ownership_transfer` requires the
+     * signer match this field exactly (in addition to `has_one = owner` on
+     * the vault), and the PDA's rent reverts here on cancel.
+     */
+    currentOwner: Address;
+    /**
+     * Target owner. `accept_ownership_transfer` requires the signer match
+     * this field exactly (standard EOA path). Multisig variant in Batch 4
+     * will also bind here when `is_multisig_target == true`.
+     */
+    newOwner: Address;
+    /**
+     * `Clock::unix_timestamp` at queue time. Timelock is enforced as
+     * `clock.unix_timestamp - queued_at >= min_delay_seconds`.
+     */
+    queuedAt: bigint;
+    /**
+     * Owner-configurable timelock (seconds). Defaults to
+     * `Self::DEFAULT_MIN_DELAY` (172,800 / 48h). Owner can shorten in a
+     * future SDK call if `policy.timelock_duration` permits, but Batch 3
+     * pins the default — extension hook lives in Batch 4+.
+     */
+    minDelaySeconds: bigint;
+    /**
+     * `true` means the accept path will be `accept_ownership_transfer_multisig`
+     * (Batch 4 — Squads V4 vault-PDA-signs flow). `false` means the standard
+     * EOA accept path. Today's `accept_ownership_transfer` HARD-REJECTS when
+     * this is `true` so the multisig flow cannot be silently taken by the
+     * regular handler before Batch 4 ships.
+     */
+    isMultisigTarget: boolean;
+    /** PDA bump. */
+    bump: number;
+    /**
+     * 8-byte alignment cushion + additive headroom for Batch 4+ extensions
+     * (e.g. cooldown packing, multisig-attestation digest). Zero-init on
+     * `init` and unread today.
+     */
+    padding: ReadonlyUint8Array;
+    /**
+     * CH-1 close (Bucket-3 audit 2026-05-23): slot at queue time for
+     * F-10 freshness. See pending_agent_grant.rs for the threat model.
+     */
+    queuedAtSlot: bigint;
+};
+export type PendingOwnershipTransferArgs = {
+    /**
+     * PDA-bound vault. Defense-in-depth duplicate of the [b"pending_owner",
+     * vault.key()] seed — also lets handlers reject stale accounts that were
+     * re-created against a different vault during a close-then-reuse race.
+     */
+    vault: Address;
+    /**
+     * Owner pubkey at queue time. `cancel_ownership_transfer` requires the
+     * signer match this field exactly (in addition to `has_one = owner` on
+     * the vault), and the PDA's rent reverts here on cancel.
+     */
+    currentOwner: Address;
+    /**
+     * Target owner. `accept_ownership_transfer` requires the signer match
+     * this field exactly (standard EOA path). Multisig variant in Batch 4
+     * will also bind here when `is_multisig_target == true`.
+     */
+    newOwner: Address;
+    /**
+     * `Clock::unix_timestamp` at queue time. Timelock is enforced as
+     * `clock.unix_timestamp - queued_at >= min_delay_seconds`.
+     */
+    queuedAt: number | bigint;
+    /**
+     * Owner-configurable timelock (seconds). Defaults to
+     * `Self::DEFAULT_MIN_DELAY` (172,800 / 48h). Owner can shorten in a
+     * future SDK call if `policy.timelock_duration` permits, but Batch 3
+     * pins the default — extension hook lives in Batch 4+.
+     */
+    minDelaySeconds: number | bigint;
+    /**
+     * `true` means the accept path will be `accept_ownership_transfer_multisig`
+     * (Batch 4 — Squads V4 vault-PDA-signs flow). `false` means the standard
+     * EOA accept path. Today's `accept_ownership_transfer` HARD-REJECTS when
+     * this is `true` so the multisig flow cannot be silently taken by the
+     * regular handler before Batch 4 ships.
+     */
+    isMultisigTarget: boolean;
+    /** PDA bump. */
+    bump: number;
+    /**
+     * 8-byte alignment cushion + additive headroom for Batch 4+ extensions
+     * (e.g. cooldown packing, multisig-attestation digest). Zero-init on
+     * `init` and unread today.
+     */
+    padding: ReadonlyUint8Array;
+    /**
+     * CH-1 close (Bucket-3 audit 2026-05-23): slot at queue time for
+     * F-10 freshness. See pending_agent_grant.rs for the threat model.
+     */
+    queuedAtSlot: number | bigint;
+};
+/** Gets the encoder for {@link PendingOwnershipTransferArgs} account data. */
+export declare function getPendingOwnershipTransferEncoder(): FixedSizeEncoder<PendingOwnershipTransferArgs>;
+/** Gets the decoder for {@link PendingOwnershipTransfer} account data. */
+export declare function getPendingOwnershipTransferDecoder(): FixedSizeDecoder<PendingOwnershipTransfer>;
+/** Gets the codec for {@link PendingOwnershipTransfer} account data. */
+export declare function getPendingOwnershipTransferCodec(): FixedSizeCodec<PendingOwnershipTransferArgs, PendingOwnershipTransfer>;
+export declare function decodePendingOwnershipTransfer<TAddress extends string = string>(encodedAccount: EncodedAccount<TAddress>): Account<PendingOwnershipTransfer, TAddress>;
+export declare function decodePendingOwnershipTransfer<TAddress extends string = string>(encodedAccount: MaybeEncodedAccount<TAddress>): MaybeAccount<PendingOwnershipTransfer, TAddress>;
+export declare function fetchPendingOwnershipTransfer<TAddress extends string = string>(rpc: Parameters<typeof fetchEncodedAccount>[0], address: Address<TAddress>, config?: FetchAccountConfig): Promise<Account<PendingOwnershipTransfer, TAddress>>;
+export declare function fetchMaybePendingOwnershipTransfer<TAddress extends string = string>(rpc: Parameters<typeof fetchEncodedAccount>[0], address: Address<TAddress>, config?: FetchAccountConfig): Promise<MaybeAccount<PendingOwnershipTransfer, TAddress>>;
+export declare function fetchAllPendingOwnershipTransfer(rpc: Parameters<typeof fetchEncodedAccounts>[0], addresses: Array<Address>, config?: FetchAccountsConfig): Promise<Account<PendingOwnershipTransfer>[]>;
+export declare function fetchAllMaybePendingOwnershipTransfer(rpc: Parameters<typeof fetchEncodedAccounts>[0], addresses: Array<Address>, config?: FetchAccountsConfig): Promise<MaybeAccount<PendingOwnershipTransfer>[]>;
+export declare function getPendingOwnershipTransferSize(): number;
+//# sourceMappingURL=pendingOwnershipTransfer.d.ts.map

package/dist/generated/accounts/pendingOwnershipTransfer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pendingOwnershipTransfer.d.ts","sourceRoot":"","sources":["../../../src/generated/accounts/pendingOwnershipTransfer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAKL,mBAAmB,EACnB,oBAAoB,EAkBpB,KAAK,OAAO,EACZ,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,wCAAwC,yBAEnD,CAAC;AAEH,wBAAgB,6CAA6C,oCAI5D;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,aAAa,EAAE,kBAAkB,CAAC;IAClC;;;;OAIG;IACH,KAAK,EAAE,OAAO,CAAC;IACf;;;;OAIG;IACH,YAAY,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,EAAE,kBAAkB,CAAC;IAC5B;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC;;;;OAIG;IACH,KAAK,EAAE,OAAO,CAAC;IACf;;;;OAIG;IACH,YAAY,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,eAAe,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC;;;;;;OAMG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,EAAE,kBAAkB,CAAC;IAC5B;;;OAGG;IACH,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;CAC/B,CAAC;AAEF,8EAA8E;AAC9E,wBAAgB,kCAAkC,IAAI,gBAAgB,CAAC,4BAA4B,CAAC,CAmBnG;AAED,0EAA0E;AAC1E,wBAAgB,kCAAkC,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAa/F;AAED,wEAAwE;AACxE,wBAAgB,gCAAgC,IAAI,cAAc,CAChE,4BAA4B,EAC5B,wBAAwB,CACzB,CAKA;AAED,wBAAgB,8BAA8B,CAC5C,QAAQ,SAAS,MAAM,GAAG,MAAM,EAEhC,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,GACvC,OAAO,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC;AAC/C,wBAAgB,8BAA8B,CAC5C,QAAQ,SAAS,MAAM,GAAG,MAAM,EAEhC,cAAc,EAAE,mBAAmB,CAAC,QAAQ,CAAC,GAC5C,YAAY,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC;AAcpD,wBAAsB,6BAA6B,CACjD,QAAQ,SAAS,MAAM,GAAG,MAAM,EAEhC,GAAG,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAC9C,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAC1B,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,OAAO,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC,CAQtD;AAED,wBAAsB,kCAAkC,CACtD,QAAQ,SAAS,MAAM,GAAG,MAAM,EAEhC,GAAG,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAC9C,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAC1B,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC,CAG3D;AAED,wBAAsB,gCAAgC,CACpD,GAAG,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAC/C,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EACzB,MAAM,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAQ9C;AAED,wBAAsB,qCAAqC,CACzD,GAAG,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAC/C,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EACzB,MAAM,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAKnD;AAED,wBAAgB,+BAA+B,IAAI,MAAM,CAExD"}