@usesigil/kit 0.16.0 → 0.18.0

package/dist/post-assertions/cross-field-lte.js

@@ -1,129 +0,0 @@
-// ─── Constants ────────────────────────────────────────────────────────────
-/**
- * Jupiter Perpetuals program. Owner of Position + PositionRequest accounts.
- *
- * This is the ONLY Jupiter program the `leverageCapLteBps` builder refuses
- * at authoring time (see the docblock above for why — UX rail, not on-chain
- * security). Other Jupiter programs (V6 Aggregator, Lend, Earn, Borrow)
- * execute synchronously in the user's transaction and work fine with
- * post-execution assertions.
- */
-export const JUPITER_PERPS_PROGRAM_ADDRESS = "PERPHjGBqRHArX4DySjwM6UJHiR3sWAatqfdBS2qQJu";
-/**
- * CrossFieldLte enable bit — bit 0 of `cross_field_flags`.
- * Every other bit is reserved; the on-chain validator rejects unknown flags.
- */
-const CROSS_FIELD_LTE_FLAG = 0x01;
-/**
- * Both field_A and field_B are parsed as `u64::from_le_bytes(bytes[0..8])`
- * on-chain when CrossFieldLte is enabled. Entry's `value_len` MUST be 8.
- */
-const CROSS_FIELD_VALUE_LEN = 8;
-/**
- * CrossFieldLte only composes with Absolute assertion_mode. Delta modes
- * (1/2/3) would re-interpret the snapshot bytes as field_A, which is
- * semantically nonsensical — on-chain hard-rejects.
- */
-const ABSOLUTE_ASSERTION_MODE = 0;
-/**
- * Lte operator (3). Not actually consulted at runtime when the CrossField
- * flag is set — the on-chain code branches to the ratio check and ignores
- * operator/expected_value. Set to 3 here as a semantic hint for anyone
- * inspecting the raw entry: "this is a less-than-or-equal check."
- */
-const LTE_OPERATOR = 3;
-/**
- * u16 range guard for byte offsets. Account data is at most ~10MB but
- * PostAssertionEntry.offset is a u16 on-chain, capping at 65535.
- */
-const MAX_U16 = 0xffff;
-/**
- * u32 range guard for `cross_field_multiplier_bps`. The on-chain type is
- * u32. Values above this would overflow deserialization.
- */
-const MAX_U32 = 0xffffffff;
-// ─── Errors ───────────────────────────────────────────────────────────────
-/**
- * Thrown by {@link leverageCapLteBps} when the target account is owned by
- * the Jupiter Perpetuals program. Carries a long, copy-paste-friendly
- * explanation so the error bubbling to the dashboard is actionable.
- */
-export class JupiterPerpsPostAssertionUnsupportedError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "JupiterPerpsPostAssertionUnsupportedError";
-        Object.setPrototypeOf(this, JupiterPerpsPostAssertionUnsupportedError.prototype);
-    }
-}
-/**
- * Build a PostAssertionEntry that enforces a leverage cap via the
- * CrossFieldLte ratio check.
- *
- * Validates inputs, rejects Jupiter Perpetuals Position accounts at the
- * call site, and returns an entry ready to pass to
- * `createPostAssertions(rpc, vault, owner, network, [entry])`.
- *
- * @throws {JupiterPerpsPostAssertionUnsupportedError}
- *   When `targetAccountOwnerProgram` matches
- *   {@link JUPITER_PERPS_PROGRAM_ADDRESS}. See file header for why.
- * @throws {RangeError}
- *   When offsets are not integers in `0..=65535`, are equal to each other,
- *   or when `maxBps` is not a positive integer in `1..=u32::MAX`.
- */
-export function leverageCapLteBps(opts) {
-    // Runtime Jupiter Perps reject (Phase 2 ISC-37, anti-criterion ISC-A1).
-    // Fails before any further validation so the error surface points at
-    // the real problem rather than incidental validation failures.
-    if (opts.targetAccountOwnerProgram === JUPITER_PERPS_PROGRAM_ADDRESS) {
-        throw new JupiterPerpsPostAssertionUnsupportedError(`Post-execution CrossFieldLte is NOT viable on Jupiter Perpetuals Position accounts.\n\n` +
-            `Reason: Jupiter Perps uses a 2-transaction keeper-fulfillment model. The user's tx writes ` +
-            `to a PositionRequest account; a Jupiter-hosted keeper executes the actual position change ` +
-            `up to 45 seconds later in a separate tx. Sigil's finalize_session reads account state in ` +
-            `the user's tx — at that point the Jupiter Position account still reflects pre-trade state. ` +
-            `The leverage check would always pass trivially, creating a silent constraint bypass.\n\n` +
-            `Jupiter Perps remains a fully supported protocol for agent use. Configure constraints ` +
-            `via pre-execution InstructionConstraints instead — @sigil-trade/constraints compiles ` +
-            `byte-level checks on Jupiter instruction args (sizeUsd, collateralUsd in the request) ` +
-            `that are enforced BEFORE the request hits the keeper.\n\n` +
-            `See docs/LEVERAGE-ENFORCEMENT.md — "Jupiter Perps — use pre-execution constraints".`);
-    }
-    // Offset range / integrality checks (u16 on-chain).
-    requireIntegerInRange(opts.fieldAOffset, "fieldAOffset", 0, MAX_U16);
-    requireIntegerInRange(opts.fieldBOffset, "fieldBOffset", 0, MAX_U16);
-    if (opts.fieldAOffset === opts.fieldBOffset) {
-        throw new RangeError(`leverageCapLteBps: fieldAOffset and fieldBOffset must differ — ratio of a field against itself is nonsensical (got ${opts.fieldAOffset})`);
-    }
-    // Multiplier range / integrality check (u32 on-chain, must be > 0).
-    requireIntegerInRange(opts.maxBps, "maxBps", 1, MAX_U32);
-    // All-zero expected_value — the on-chain CrossField path ignores this
-    // field, but validate_entries still requires `expected_value.len() >=
-    // value_len`. We ship exactly `CROSS_FIELD_VALUE_LEN` (8) bytes to
-    // satisfy the size invariant without wasting space.
-    const expectedValue = new Uint8Array(CROSS_FIELD_VALUE_LEN);
-    return {
-        targetAccount: opts.targetAccount,
-        offset: opts.fieldAOffset,
-        valueLen: CROSS_FIELD_VALUE_LEN,
-        operator: LTE_OPERATOR,
-        expectedValue,
-        assertionMode: ABSOLUTE_ASSERTION_MODE,
-        crossFieldOffsetB: opts.fieldBOffset,
-        crossFieldMultiplierBps: opts.maxBps,
-        crossFieldFlags: CROSS_FIELD_LTE_FLAG,
-    };
-}
-// ─── Internal ─────────────────────────────────────────────────────────────
-/**
- * Guard that rejects non-integer, out-of-range, or non-finite values.
- * Matches JS's pre-coercion discipline: a string `"8"` should NOT silently
- * pass an integer check, and `NaN` / `Infinity` must not sneak through.
- */
-function requireIntegerInRange(value, field, min, max) {
-    if (typeof value !== "number" || !Number.isInteger(value)) {
-        throw new RangeError(`leverageCapLteBps: ${field} must be an integer, got ${JSON.stringify(value)} (${typeof value})`);
-    }
-    if (value < min || value > max) {
-        throw new RangeError(`leverageCapLteBps: ${field} must be in ${min}..=${max}, got ${value}`);
-    }
-}
-//# sourceMappingURL=cross-field-lte.js.map

package/dist/post-assertions/cross-field-lte.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cross-field-lte.js","sourceRoot":"","sources":["../../src/post-assertions/cross-field-lte.ts"],"names":[],"mappings":"AAmDA,6EAA6E;AAE7E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6BAA6B,GACxC,6CAAwD,CAAC;AAE3D;;;GAGG;AACH,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC;;;GAGG;AACH,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAElC;;;;;GAKG;AACH,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB;;;GAGG;AACH,MAAM,OAAO,GAAG,MAAM,CAAC;AAEvB;;;GAGG;AACH,MAAM,OAAO,GAAG,UAAU,CAAC;AAE3B,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,OAAO,yCAA0C,SAAQ,KAAK;IAClE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2CAA2C,CAAC;QACxD,MAAM,CAAC,cAAc,CACnB,IAAI,EACJ,yCAAyC,CAAC,SAAS,CACpD,CAAC;IACJ,CAAC;CACF;AAsDD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAwB;IAExB,wEAAwE;IACxE,qEAAqE;IACrE,+DAA+D;IAC/D,IAAI,IAAI,CAAC,yBAAyB,KAAK,6BAA6B,EAAE,CAAC;QACrE,MAAM,IAAI,yCAAyC,CACjD,yFAAyF;YACvF,4FAA4F;YAC5F,4FAA4F;YAC5F,2FAA2F;YAC3F,6FAA6F;YAC7F,0FAA0F;YAC1F,wFAAwF;YACxF,uFAAuF;YACvF,wFAAwF;YACxF,2DAA2D;YAC3D,qFAAqF,CACxF,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,qBAAqB,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACrE,qBAAqB,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,IAAI,UAAU,CAClB,sHAAsH,IAAI,CAAC,YAAY,GAAG,CAC3I,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAEzD,sEAAsE;IACtE,sEAAsE;IACtE,mEAAmE;IACnE,oDAAoD;IACpD,MAAM,aAAa,GAAG,IAAI,UAAU,CAClC,qBAAqB,CACW,CAAC;IAEnC,OAAO;QACL,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,MAAM,EAAE,IAAI,CAAC,YAAY;QACzB,QAAQ,EAAE,qBAAqB;QAC/B,QAAQ,EAAE,YAAY;QACtB,aAAa;QACb,aAAa,EAAE,uBAAuB;QACtC,iBAAiB,EAAE,IAAI,CAAC,YAAY;QACpC,uBAAuB,EAAE,IAAI,CAAC,MAAM;QACpC,eAAe,EAAE,oBAAoB;KACtC,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,KAAa,EACb,KAAa,EACb,GAAW,EACX,GAAW;IAEX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,UAAU,CAClB,sBAAsB,KAAK,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,OAAO,KAAK,GAAG,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAC/B,MAAM,IAAI,UAAU,CAClB,sBAAsB,KAAK,eAAe,GAAG,MAAM,GAAG,SAAS,KAAK,EAAE,CACvE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/post-assertions/index.d.ts

@@ -1,28 +0,0 @@
-/**
- * `@usesigil/kit/post-assertions` — builders for post-execution assertion
- * entries.
- *
- * This barrel exposes the typed helpers a dashboard or headless caller
- * needs to author `PostAssertionEntry` values for the
- * `createPostAssertions(...)` mutation without reaching into codegen
- * (covenant D1: no imports from `src/generated/**`).
- *
- * Currently exported:
- * - `leverageCapLteBps({ ... })` — generic CrossFieldLte builder for a
- *   "field_A ≤ maxBps × field_B" ratio check
- * - `JupiterPerpsPostAssertionUnsupportedError` — thrown when a caller
- *   tries to build a leverage cap against a Jupiter Perpetuals Position
- *   account (keeper-fulfillment model breaks post-execution semantics)
- * - `JUPITER_PERPS_PROGRAM_ADDRESS` — re-exported so callers can do their
- *   own pre-check if they prefer reporting over throwing
- *
- * Protocol-specific presets (e.g. `flashTradeLeverageCap`) land in a
- * `./presets/` sub-directory as they ship — one preset per protocol,
- * each backed by a committed IDL with a CI drift-check.
- */
-export { JUPITER_PERPS_PROGRAM_ADDRESS, JupiterPerpsPostAssertionUnsupportedError, leverageCapLteBps, } from "./cross-field-lte.js";
-export type { LeverageCapLteOpts } from "./cross-field-lte.js";
-export { FLASH_TRADE_PROGRAM_ADDRESS, FLASH_TRADE_POSITION_SIZE_USD_OFFSET, FLASH_TRADE_POSITION_COLLATERAL_USD_OFFSET, MIN_LEVERAGE_X, MAX_LEVERAGE_X, FlashTradeLeverageOutOfRangeError, flashTradeLeverageCap, } from "./presets/flash-trade.js";
-export type { FlashTradeLeverageCapOpts } from "./presets/flash-trade.js";
-export type { PostAssertionEntry } from "../generated/types/postAssertionEntry.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/post-assertions/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/post-assertions/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACL,6BAA6B,EAC7B,yCAAyC,EACzC,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAK/D,OAAO,EACL,2BAA2B,EAC3B,oCAAoC,EACpC,0CAA0C,EAC1C,cAAc,EACd,cAAc,EACd,iCAAiC,EACjC,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAK1E,YAAY,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC"}

package/dist/post-assertions/index.js

@@ -1,28 +0,0 @@
-/**
- * `@usesigil/kit/post-assertions` — builders for post-execution assertion
- * entries.
- *
- * This barrel exposes the typed helpers a dashboard or headless caller
- * needs to author `PostAssertionEntry` values for the
- * `createPostAssertions(...)` mutation without reaching into codegen
- * (covenant D1: no imports from `src/generated/**`).
- *
- * Currently exported:
- * - `leverageCapLteBps({ ... })` — generic CrossFieldLte builder for a
- *   "field_A ≤ maxBps × field_B" ratio check
- * - `JupiterPerpsPostAssertionUnsupportedError` — thrown when a caller
- *   tries to build a leverage cap against a Jupiter Perpetuals Position
- *   account (keeper-fulfillment model breaks post-execution semantics)
- * - `JUPITER_PERPS_PROGRAM_ADDRESS` — re-exported so callers can do their
- *   own pre-check if they prefer reporting over throwing
- *
- * Protocol-specific presets (e.g. `flashTradeLeverageCap`) land in a
- * `./presets/` sub-directory as they ship — one preset per protocol,
- * each backed by a committed IDL with a CI drift-check.
- */
-export { JUPITER_PERPS_PROGRAM_ADDRESS, JupiterPerpsPostAssertionUnsupportedError, leverageCapLteBps, } from "./cross-field-lte.js";
-// Protocol-specific presets — one file per protocol under `./presets/`.
-// Each preset is backed by a committed IDL source with a drift-check test so
-// any future SDK bump that shifts field offsets fails before shipping.
-export { FLASH_TRADE_PROGRAM_ADDRESS, FLASH_TRADE_POSITION_SIZE_USD_OFFSET, FLASH_TRADE_POSITION_COLLATERAL_USD_OFFSET, MIN_LEVERAGE_X, MAX_LEVERAGE_X, FlashTradeLeverageOutOfRangeError, flashTradeLeverageCap, } from "./presets/flash-trade.js";
-//# sourceMappingURL=index.js.map

package/dist/post-assertions/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/post-assertions/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACL,6BAA6B,EAC7B,yCAAyC,EACzC,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAG9B,wEAAwE;AACxE,6EAA6E;AAC7E,uEAAuE;AACvE,OAAO,EACL,2BAA2B,EAC3B,oCAAoC,EACpC,0CAA0C,EAC1C,cAAc,EACd,cAAc,EACd,iCAAiC,EACjC,qBAAqB,GACtB,MAAM,0BAA0B,CAAC"}

package/dist/post-assertions/presets/flash-trade.d.ts

@@ -1,139 +0,0 @@
-/**
- * `@usesigil/kit/post-assertions/presets/flash-trade` — Flash Trade leverage cap preset.
- *
- * Convenience wrapper around `leverageCapLteBps` that fills in the byte offsets
- * of a Flash Trade Position account's `size_usd` and `collateral_usd` fields.
- *
- * Callers provide a position account address + a leverage cap expressed in
- * "x" (multiples), and the preset returns a `PostAssertionEntry` that the
- * on-chain program enforces as:
- *
- *     size_usd × 10000 ≤ maxLeverage × 10000 × collateral_usd
- *     ⇔ leverage (= size_usd / collateral_usd) ≤ maxLeverage
- *
- * ## Field offsets (pinned to flash-sdk@15.x Perpetuals IDL)
- *
- * Derived from the Anchor IDL shipped with `flash-sdk@^15.14.1`
- * (`node_modules/flash-sdk/dist/idl/perpetuals.json`). Position account
- * Borsh layout, starting after the 8-byte Anchor discriminator:
- *
- *     offset  field                  type   size
- *         8   owner                  pubkey 32
- *        40   market                 pubkey 32
- *        72   delegate               pubkey 32
- *       104   open_time              i64    8
- *       112   update_time            i64    8
- *       120   entry_price            OraclePrice { price: u64, exponent: i32 } 12
- *       132   size_amount            u64    8
- *    → 140   size_usd                u64    8
- *       148   locked_amount          u64    8
- *       156   locked_usd             u64    8
- *       164   price_impact_usd       u64    8
- *    → 172   collateral_usd          u64    8
- *       ...
- *
- * A drift-check unit test (`presets/flash-trade.test.ts`) reloads the Anchor
- * IDL from `flash-sdk` at test time and recomputes offsets — any future
- * flash-sdk bump that shifts these fields fails the test before a broken
- * preset can ship.
- *
- * ## Jupiter Perps is NOT supported here
- *
- * Flash Trade executes position changes synchronously in the user's tx, so
- * post-execution assertions are meaningful. Jupiter Perpetuals uses a 2-tx
- * keeper-fulfillment model that silently bypasses post-assertions — that gate
- * is enforced upstream in `leverageCapLteBps` via
- * `JupiterPerpsPostAssertionUnsupportedError`, so a caller who mistakenly
- * plugs a Jupiter Perps Position address here gets an explicit error.
- *
- * ## Bounds on `maxLeverage`
- *
- * `maxLeverage` is an integer multiplier (e.g., 5 = 5x cap). We reject
- * values outside [1, 100]:
- *   - 0 would encode `size_usd ≤ 0` — any non-zero position fails, effectively
- *     a kill-switch. Safer to reject and let callers use `closePostAssertions`
- *     if they want to disable the cap entirely.
- *   - Values > 100 exceed any practical Flash Trade leverage (current mainnet
- *     caps sit around 25-50x) and are almost certainly caller bugs.
- *
- * @see programs/sigil/src/state/post_assertions.rs — on-chain CrossFieldLte enforcer
- * @see `@usesigil/kit/post-assertions/cross-field-lte.ts` — underlying builder
- */
-import type { Address } from "@solana/kit";
-import type { PostAssertionEntry } from "../../generated/types/postAssertionEntry.js";
-/**
- * Flash Trade Perpetuals program address (mainnet-beta). Owner of Position
- * accounts that this preset targets.
- *
- * Source: `constants` module in `flash-sdk@^15.14.1`. Hard-coded here so the
- * preset is importable without loading the full flash-sdk runtime.
- */
-export declare const FLASH_TRADE_PROGRAM_ADDRESS: Address;
-/**
- * Byte offset of `size_usd` (u64, little-endian) inside Flash Trade Position
- * account data, starting from byte 0 of the account (NOT after discriminator).
- *
- * Pinned to flash-sdk@^15.14.1 Perpetuals IDL. A drift-check unit test
- * reloads the IDL and asserts this value matches.
- */
-export declare const FLASH_TRADE_POSITION_SIZE_USD_OFFSET = 140;
-/**
- * Byte offset of `collateral_usd` (u64, little-endian) inside Flash Trade
- * Position account data.
- *
- * Pinned to flash-sdk@^15.14.1 Perpetuals IDL. Drift-check test guards this.
- */
-export declare const FLASH_TRADE_POSITION_COLLATERAL_USD_OFFSET = 172;
-/**
- * Lowest permitted `maxLeverage` input — 1x. Zero would encode a kill-switch.
- */
-export declare const MIN_LEVERAGE_X = 1;
-/**
- * Highest permitted `maxLeverage` input. 100x is a generous upper bound above
- * any practical Flash Trade cap.
- */
-export declare const MAX_LEVERAGE_X = 100;
-/**
- * Thrown when `maxLeverage` is outside [MIN_LEVERAGE_X, MAX_LEVERAGE_X] or
- * not an integer. Carries a DxError-compatible shape so FE can branch on
- * `.code` without `instanceof` checks that break across module realms.
- */
-export declare class FlashTradeLeverageOutOfRangeError extends Error {
-    /** DxError-compatible numeric code. 7009 reserved for preset validation. */
-    readonly code: number;
-    readonly recovery: readonly string[];
-    /**
-     * Always `false` — thrown at CLIENT validation time, before any RPC
-     * round-trip. Present to satisfy DxError's structural contract (every
-     * DxError carries `onChainReverted`; see v2.2 contract C2).
-     */
-    readonly onChainReverted: boolean;
-    readonly received: unknown;
-    constructor(received: unknown);
-}
-export interface FlashTradeLeverageCapOpts {
-    /** Base-58 pubkey of the Flash Trade Position account to monitor. */
-    readonly positionAccount: Address;
-    /**
-     * Maximum leverage in "x" units (e.g. 5 = 5x). Integer in [1, 100].
-     * The preset throws `FlashTradeLeverageOutOfRangeError` on anything else.
-     */
-    readonly maxLeverage: number;
-}
-/**
- * Build a post-assertion entry that caps Flash Trade leverage at `maxLeverage` × .
- *
- * Equivalent to calling {@link leverageCapLteBps} with Flash Trade's Position
- * `size_usd` / `collateral_usd` offsets filled in, `targetAccountOwnerProgram`
- * set to {@link FLASH_TRADE_PROGRAM_ADDRESS}, and `maxBps = maxLeverage * 10000`.
- *
- * @throws {FlashTradeLeverageOutOfRangeError} if `maxLeverage` is not an
- * integer in [1, 100].
- * @throws {import("../cross-field-lte.js").JupiterPerpsPostAssertionUnsupportedError}
- * re-thrown by the underlying builder if `targetAccountOwnerProgram` ever
- * drifts to Jupiter Perps (defense-in-depth — Flash Trade's program address
- * is hard-coded here, so this throw indicates either a preset bug or a
- * caller who hand-mutated the returned entry before submitting).
- */
-export declare function flashTradeLeverageCap(opts: FlashTradeLeverageCapOpts): PostAssertionEntry;
-//# sourceMappingURL=flash-trade.d.ts.map

package/dist/post-assertions/presets/flash-trade.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"flash-trade.d.ts","sourceRoot":"","sources":["../../../src/post-assertions/presets/flash-trade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAKtF;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EACY,OAAO,CAAC;AAE5D;;;;;;GAMG;AACH,eAAO,MAAM,oCAAoC,MAAM,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,0CAA0C,MAAM,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC;;;GAGG;AACH,eAAO,MAAM,cAAc,MAAM,CAAC;AAIlC;;;;GAIG;AACH,qBAAa,iCAAkC,SAAQ,KAAK;IAC1D,4EAA4E;IAC5E,SAAgB,IAAI,EAAE,MAAM,CAAQ;IACpC,SAAgB,QAAQ,EAAE,SAAS,MAAM,EAAE,CAGzC;IACF;;;;OAIG;IACH,SAAgB,eAAe,EAAE,OAAO,CAAS;IACjD,SAAgB,QAAQ,EAAE,OAAO,CAAC;gBAEtB,QAAQ,EAAE,OAAO;CAQ9B;AAID,MAAM,WAAW,yBAAyB;IACxC,qEAAqE;IACrE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAID;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,yBAAyB,GAC9B,kBAAkB,CAkBpB"}

package/dist/post-assertions/presets/flash-trade.js

@@ -1,154 +0,0 @@
-/**
- * `@usesigil/kit/post-assertions/presets/flash-trade` — Flash Trade leverage cap preset.
- *
- * Convenience wrapper around `leverageCapLteBps` that fills in the byte offsets
- * of a Flash Trade Position account's `size_usd` and `collateral_usd` fields.
- *
- * Callers provide a position account address + a leverage cap expressed in
- * "x" (multiples), and the preset returns a `PostAssertionEntry` that the
- * on-chain program enforces as:
- *
- *     size_usd × 10000 ≤ maxLeverage × 10000 × collateral_usd
- *     ⇔ leverage (= size_usd / collateral_usd) ≤ maxLeverage
- *
- * ## Field offsets (pinned to flash-sdk@15.x Perpetuals IDL)
- *
- * Derived from the Anchor IDL shipped with `flash-sdk@^15.14.1`
- * (`node_modules/flash-sdk/dist/idl/perpetuals.json`). Position account
- * Borsh layout, starting after the 8-byte Anchor discriminator:
- *
- *     offset  field                  type   size
- *         8   owner                  pubkey 32
- *        40   market                 pubkey 32
- *        72   delegate               pubkey 32
- *       104   open_time              i64    8
- *       112   update_time            i64    8
- *       120   entry_price            OraclePrice { price: u64, exponent: i32 } 12
- *       132   size_amount            u64    8
- *    → 140   size_usd                u64    8
- *       148   locked_amount          u64    8
- *       156   locked_usd             u64    8
- *       164   price_impact_usd       u64    8
- *    → 172   collateral_usd          u64    8
- *       ...
- *
- * A drift-check unit test (`presets/flash-trade.test.ts`) reloads the Anchor
- * IDL from `flash-sdk` at test time and recomputes offsets — any future
- * flash-sdk bump that shifts these fields fails the test before a broken
- * preset can ship.
- *
- * ## Jupiter Perps is NOT supported here
- *
- * Flash Trade executes position changes synchronously in the user's tx, so
- * post-execution assertions are meaningful. Jupiter Perpetuals uses a 2-tx
- * keeper-fulfillment model that silently bypasses post-assertions — that gate
- * is enforced upstream in `leverageCapLteBps` via
- * `JupiterPerpsPostAssertionUnsupportedError`, so a caller who mistakenly
- * plugs a Jupiter Perps Position address here gets an explicit error.
- *
- * ## Bounds on `maxLeverage`
- *
- * `maxLeverage` is an integer multiplier (e.g., 5 = 5x cap). We reject
- * values outside [1, 100]:
- *   - 0 would encode `size_usd ≤ 0` — any non-zero position fails, effectively
- *     a kill-switch. Safer to reject and let callers use `closePostAssertions`
- *     if they want to disable the cap entirely.
- *   - Values > 100 exceed any practical Flash Trade leverage (current mainnet
- *     caps sit around 25-50x) and are almost certainly caller bugs.
- *
- * @see programs/sigil/src/state/post_assertions.rs — on-chain CrossFieldLte enforcer
- * @see `@usesigil/kit/post-assertions/cross-field-lte.ts` — underlying builder
- */
-import { leverageCapLteBps } from "../cross-field-lte.js";
-// ─── Constants ────────────────────────────────────────────────────────────
-/**
- * Flash Trade Perpetuals program address (mainnet-beta). Owner of Position
- * accounts that this preset targets.
- *
- * Source: `constants` module in `flash-sdk@^15.14.1`. Hard-coded here so the
- * preset is importable without loading the full flash-sdk runtime.
- */
-export const FLASH_TRADE_PROGRAM_ADDRESS = "FLaSh6f6Y5bLsmcfiaxvqRJC3WQLKYh1iCfAsh7uMH8z";
-/**
- * Byte offset of `size_usd` (u64, little-endian) inside Flash Trade Position
- * account data, starting from byte 0 of the account (NOT after discriminator).
- *
- * Pinned to flash-sdk@^15.14.1 Perpetuals IDL. A drift-check unit test
- * reloads the IDL and asserts this value matches.
- */
-export const FLASH_TRADE_POSITION_SIZE_USD_OFFSET = 140;
-/**
- * Byte offset of `collateral_usd` (u64, little-endian) inside Flash Trade
- * Position account data.
- *
- * Pinned to flash-sdk@^15.14.1 Perpetuals IDL. Drift-check test guards this.
- */
-export const FLASH_TRADE_POSITION_COLLATERAL_USD_OFFSET = 172;
-/**
- * Lowest permitted `maxLeverage` input — 1x. Zero would encode a kill-switch.
- */
-export const MIN_LEVERAGE_X = 1;
-/**
- * Highest permitted `maxLeverage` input. 100x is a generous upper bound above
- * any practical Flash Trade cap.
- */
-export const MAX_LEVERAGE_X = 100;
-// ─── Errors ───────────────────────────────────────────────────────────────
-/**
- * Thrown when `maxLeverage` is outside [MIN_LEVERAGE_X, MAX_LEVERAGE_X] or
- * not an integer. Carries a DxError-compatible shape so FE can branch on
- * `.code` without `instanceof` checks that break across module realms.
- */
-export class FlashTradeLeverageOutOfRangeError extends Error {
-    /** DxError-compatible numeric code. 7009 reserved for preset validation. */
-    code = 7009;
-    recovery = [
-        `Pass a whole number between ${MIN_LEVERAGE_X} and ${MAX_LEVERAGE_X}.`,
-        "To disable an existing leverage cap, call `closePostAssertions(...)`.",
-    ];
-    /**
-     * Always `false` — thrown at CLIENT validation time, before any RPC
-     * round-trip. Present to satisfy DxError's structural contract (every
-     * DxError carries `onChainReverted`; see v2.2 contract C2).
-     */
-    onChainReverted = false;
-    received;
-    constructor(received) {
-        super(`flashTradeLeverageCap: maxLeverage must be an integer in [${MIN_LEVERAGE_X}, ${MAX_LEVERAGE_X}] (got ${String(received)})`);
-        this.name = "FlashTradeLeverageOutOfRangeError";
-        this.received = received;
-        // TS target=ES2020 preserves .name/.message across supers; no extra handling needed.
-    }
-}
-// ─── Builder ──────────────────────────────────────────────────────────────
-/**
- * Build a post-assertion entry that caps Flash Trade leverage at `maxLeverage` × .
- *
- * Equivalent to calling {@link leverageCapLteBps} with Flash Trade's Position
- * `size_usd` / `collateral_usd` offsets filled in, `targetAccountOwnerProgram`
- * set to {@link FLASH_TRADE_PROGRAM_ADDRESS}, and `maxBps = maxLeverage * 10000`.
- *
- * @throws {FlashTradeLeverageOutOfRangeError} if `maxLeverage` is not an
- * integer in [1, 100].
- * @throws {import("../cross-field-lte.js").JupiterPerpsPostAssertionUnsupportedError}
- * re-thrown by the underlying builder if `targetAccountOwnerProgram` ever
- * drifts to Jupiter Perps (defense-in-depth — Flash Trade's program address
- * is hard-coded here, so this throw indicates either a preset bug or a
- * caller who hand-mutated the returned entry before submitting).
- */
-export function flashTradeLeverageCap(opts) {
-    if (!Number.isInteger(opts.maxLeverage) ||
-        opts.maxLeverage < MIN_LEVERAGE_X ||
-        opts.maxLeverage > MAX_LEVERAGE_X) {
-        throw new FlashTradeLeverageOutOfRangeError(opts.maxLeverage);
-    }
-    const maxBps = opts.maxLeverage * 10_000;
-    return leverageCapLteBps({
-        targetAccount: opts.positionAccount,
-        targetAccountOwnerProgram: FLASH_TRADE_PROGRAM_ADDRESS,
-        fieldAOffset: FLASH_TRADE_POSITION_SIZE_USD_OFFSET,
-        fieldBOffset: FLASH_TRADE_POSITION_COLLATERAL_USD_OFFSET,
-        maxBps,
-    });
-}
-//# sourceMappingURL=flash-trade.js.map

package/dist/post-assertions/presets/flash-trade.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"flash-trade.js","sourceRoot":"","sources":["../../../src/post-assertions/presets/flash-trade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,6EAA6E;AAE7E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GACtC,8CAAyD,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,CAAC;AAExD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAG,GAAG,CAAC;AAE9D;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEhC;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AAElC,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAC1D,4EAA4E;IAC5D,IAAI,GAAW,IAAI,CAAC;IACpB,QAAQ,GAAsB;QAC5C,+BAA+B,cAAc,QAAQ,cAAc,GAAG;QACtE,uEAAuE;KACxE,CAAC;IACF;;;;OAIG;IACa,eAAe,GAAY,KAAK,CAAC;IACjC,QAAQ,CAAU;IAElC,YAAY,QAAiB;QAC3B,KAAK,CACH,6DAA6D,cAAc,KAAK,cAAc,UAAU,MAAM,CAAC,QAAQ,CAAC,GAAG,CAC5H,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,qFAAqF;IACvF,CAAC;CACF;AAcD,6EAA6E;AAE7E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAA+B;IAE/B,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,cAAc;QACjC,IAAI,CAAC,WAAW,GAAG,cAAc,EACjC,CAAC;QACD,MAAM,IAAI,iCAAiC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;IAEzC,OAAO,iBAAiB,CAAC;QACvB,aAAa,EAAE,IAAI,CAAC,eAAe;QACnC,yBAAyB,EAAE,2BAA2B;QACtD,YAAY,EAAE,oCAAoC;QAClD,YAAY,EAAE,0CAA0C;QACxD,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}

package/dist/protocol-registry/annotations/drift.json

@@ -1,7 +0,0 @@
-{
-    "programId": "dRiftyHA39MWEi3m9aunc5MzRF1JYuBsbn6VPcn33UH",
-    "name": "Drift",
-    "verified": true,
-    "category": "perps",
-    "notes": "Drift Protocol perpetuals + spot. Not instruction-count-limited. Default CU: 800,000."
-}

package/dist/protocol-registry/annotations/flash-trade.json

@@ -1,7 +0,0 @@
-{
-    "programId": "FLASH6Lo6h3iasJKWDs2F8TkW2UKf3s15C8PMGuVfgBn",
-    "name": "Flash Trade",
-    "verified": true,
-    "category": "perps",
-    "notes": "Flash Trade perpetuals DEX. Instruction-count-limited in the Sigil on-chain program. Default CU: 800,000."
-}

package/dist/protocol-registry/annotations/jupiter-borrow.json

@@ -1,7 +0,0 @@
-{
-    "programId": "jupr81YtYssSyPt8jbnGuiWon5f6x9TcDEFxYe3Bdzi",
-    "name": "Jupiter Borrow",
-    "verified": true,
-    "category": "borrow",
-    "notes": "Jupiter Borrow protocol. Instruction-count-limited in the Sigil on-chain program. Default CU: 400,000."
-}

package/dist/protocol-registry/annotations/jupiter-earn.json

@@ -1,7 +0,0 @@
-{
-    "programId": "jup3YeL8QhtSx1e253b2FDvsMNC87fDrgQZivbrndc9",
-    "name": "Jupiter Earn",
-    "verified": true,
-    "category": "yield",
-    "notes": "Jupiter Earn protocol. Instruction-count-limited in the Sigil on-chain program. Default CU: 400,000."
-}

package/dist/protocol-registry/annotations/jupiter-lend.json

@@ -1,7 +0,0 @@
-{
-    "programId": "JLend2fEim9xUFcaHsyGePEoBzFLvkjMi3MnPcSuCdu",
-    "name": "Jupiter Lend",
-    "verified": true,
-    "category": "lending",
-    "notes": "Jupiter Lend protocol. Instruction-count-limited in the Sigil on-chain program. Default CU: 400,000."
-}

package/dist/protocol-registry/annotations/jupiter.json

@@ -1,7 +0,0 @@
-{
-    "programId": "JUP6LkbZbjS1jKKwapdHNy74zcZ3tLUZoi5QNyVTaV4",
-    "name": "Jupiter",
-    "verified": true,
-    "category": "swap-aggregator",
-    "notes": "Jupiter V6 aggregator. Instruction-count-limited in the Sigil on-chain program. Default CU: 600,000."
-}

package/dist/protocol-registry/annotations/kamino.json

@@ -1,7 +0,0 @@
-{
-    "programId": "KLend2g3cP87ber8CzRaqeECGwNvLFM9acPVcRkRHvM",
-    "name": "Kamino",
-    "verified": true,
-    "category": "lending",
-    "notes": "Kamino Finance lending (klend). Not instruction-count-limited. Default CU: 400,000."
-}

package/dist/protocol-registry/index.d.ts

@@ -1,45 +0,0 @@
-/**
- * Single Verified-tier annotation shape. Byte-identical to the dashboard's
- * pre-migration interface at `sigil-dashboard/src/lib/protocol-registry/index.ts`
- * so consumers switching from local imports to `@usesigil/kit` see zero
- * behavioral drift.
- */
-export interface ProtocolAnnotation {
-    /** Canonical base58 programId. Hand-verified against the deployed program. */
-    readonly programId: string;
-    /** Human-readable display name, e.g. "Jupiter V6". */
-    readonly name: string;
-    /** Always `true` for annotations shipped in this registry. */
-    readonly verified: boolean;
-    /** Bucket for UI grouping, e.g. "swap-aggregator", "perps", "lending". */
-    readonly category: string;
-    /** Optional free-form context (CU budget, known quirks, caveats). */
-    readonly notes?: string;
-}
-/**
- * All registered annotations in display order (most-used first). Consumers
- * should NOT mutate — the array is `readonly` at the type level; the
- * underlying data is also `as const` below to guard against runtime edits.
- */
-export declare const PROTOCOL_ANNOTATIONS: readonly ProtocolAnnotation[];
-/**
- * The set of programIds in the Verified tier. Computed once at module
- * load. `VERIFIED_PROGRAMS.has(programId)` is the canonical synchronous
- * check for "does Sigil have hand-curated metadata for this program."
- *
- * Consumers (dashboard `/api/resolve-protocol`, mobile tier UI, MCP)
- * should query this set — NOT filter PROTOCOL_ANNOTATIONS linearly on the
- * hot path. Use `lookupProtocolAnnotation()` when metadata is also needed.
- */
-export declare const VERIFIED_PROGRAMS: ReadonlySet<string>;
-/**
- * Look up a protocol annotation by programId. Returns `null` if the
- * programId is NOT in the Verified registry.
- *
- * Currently an O(n) linear search across 7 entries — fast enough that a
- * `Map` lookup would be premature optimization. If the registry grows
- * past ~50 entries, swap to a `Map<string, ProtocolAnnotation>` built
- * once at module load.
- */
-export declare function lookupProtocolAnnotation(programId: string): ProtocolAnnotation | null;
-//# sourceMappingURL=index.d.ts.map

package/dist/protocol-registry/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/protocol-registry/index.ts"],"names":[],"mappings":"AAwCA;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,kBAAkB,EAQpD,CAAC;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAEjD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,GAChB,kBAAkB,GAAG,IAAI,CAE3B"}