@usesigil/kit 0.5.0 → 0.6.0

package/dist/errors/context.d.ts

@@ -0,0 +1,213 @@
+/**
+ * SigilErrorContext — discriminated context map.
+ *
+ * For each `SigilErrorCode`, the corresponding context shape is bound at
+ * compile time. When `SigilError<TCode>` is narrowed (via `instanceof` or
+ * code check), `instance.context` is typed precisely.
+ *
+ * Pattern matches `@solana/kit`'s `SolanaErrorContext` map.
+ */
+import type { Address } from "@solana/kit";
+import type { SIGIL_ERROR__SHIELD__POLICY_DENIED, SIGIL_ERROR__SHIELD__CONFIG_INVALID, SIGIL_ERROR__SHIELD__RATE_LIMIT_EXCEEDED, SIGIL_ERROR__SHIELD__SESSION_BINDING, SIGIL_ERROR__TEE__ATTESTATION_FAILED, SIGIL_ERROR__TEE__CERT_CHAIN_INVALID, SIGIL_ERROR__TEE__PCR_MISMATCH, SIGIL_ERROR__COMPOSE__MISSING_PARAM, SIGIL_ERROR__COMPOSE__INVALID_BIGINT, SIGIL_ERROR__COMPOSE__UNSUPPORTED_ACTION, SIGIL_ERROR__X402__HEADER_MALFORMED, SIGIL_ERROR__X402__PAYMENT_FAILED, SIGIL_ERROR__X402__UNSUPPORTED, SIGIL_ERROR__X402__DESTINATION_BLOCKED, SIGIL_ERROR__X402__REPLAY, SIGIL_ERROR__SDK__INVALID_CONFIG, SIGIL_ERROR__SDK__INVALID_PARAMS, SIGIL_ERROR__SDK__INVALID_NETWORK, SIGIL_ERROR__SDK__INVALID_AMOUNT, SIGIL_ERROR__SDK__INVALID_CAPABILITY, SIGIL_ERROR__SDK__INVALID_ACTION_TYPE, SIGIL_ERROR__SDK__OWNER_AGENT_COLLISION, SIGIL_ERROR__SDK__VAULT_NOT_FOUND, SIGIL_ERROR__SDK__VAULT_INACTIVE, SIGIL_ERROR__SDK__VAULT_SLOTS_EXHAUSTED, SIGIL_ERROR__SDK__POLICY_NOT_FOUND, SIGIL_ERROR__SDK__AGENT_NOT_REGISTERED, SIGIL_ERROR__SDK__AGENT_PAUSED, SIGIL_ERROR__SDK__AGENT_ZERO_CAPABILITY, SIGIL_ERROR__SDK__SIGNER_INVALID, SIGIL_ERROR__SDK__SIGNATURE_INVALID, SIGIL_ERROR__SDK__SPL_TOKEN_OP_BLOCKED, SIGIL_ERROR__SDK__PROTOCOL_NOT_ALLOWED, SIGIL_ERROR__SDK__PROTOCOL_NOT_TARGETED, SIGIL_ERROR__SDK__INSTRUCTION_COUNT, SIGIL_ERROR__SDK__CAP_EXCEEDED, SIGIL_ERROR__SDK__ATA_NON_CANONICAL, SIGIL_ERROR__SDK__ALT_INTEGRITY, SIGIL_ERROR__SDK__ALT_NOT_DEPLOYED, SIGIL_ERROR__SDK__SEAL_FAILED, SIGIL_ERROR__SDK__UNKNOWN, SIGIL_ERROR__RPC__TX_FAILED, SIGIL_ERROR__RPC__CONFIRMATION_TIMEOUT, SIGIL_ERROR__RPC__SIMULATION_FAILED, SIGIL_ERROR__RPC__DRAIN_DETECTED, SIGIL_ERROR__RPC__TX_TOO_LARGE, SIGIL_ERROR__RPC__RATE_LIMITED, SIGIL_ERROR__RPC__INSTRUCTION_REQUIRED, SIGIL_ERROR__PROGRAM__GENERIC } from "./codes.js";
+interface PolicyViolationLike {
+    rule: string;
+    message: string;
+    suggestion: string;
+    details?: Record<string, unknown>;
+}
+interface AttestationResultLike {
+    status: string;
+    [key: string]: unknown;
+}
+/**
+ * Map every SigilErrorCode to its required context shape.
+ * `undefined` means the error has no required context fields.
+ *
+ * Leaf classes (e.g., ShieldDeniedError, X402ParseError) extend the base
+ * context with their own additional getter-accessed fields.
+ */
+export interface SigilErrorContext {
+    [SIGIL_ERROR__SHIELD__POLICY_DENIED]: {
+        violations: PolicyViolationLike[];
+    };
+    [SIGIL_ERROR__SHIELD__CONFIG_INVALID]: undefined;
+    [SIGIL_ERROR__SHIELD__RATE_LIMIT_EXCEEDED]: {
+        violations: PolicyViolationLike[];
+        windowMs?: number;
+        limitTx?: number;
+        countedTx?: number;
+    };
+    [SIGIL_ERROR__SHIELD__SESSION_BINDING]: {
+        violations: PolicyViolationLike[];
+    };
+    [SIGIL_ERROR__TEE__ATTESTATION_FAILED]: {
+        result?: AttestationResultLike;
+        provider?: string;
+    };
+    [SIGIL_ERROR__TEE__CERT_CHAIN_INVALID]: {
+        result?: AttestationResultLike;
+        provider?: string;
+    };
+    [SIGIL_ERROR__TEE__PCR_MISMATCH]: {
+        pcrIndex: number;
+        expected: string;
+        actual: string;
+        result?: AttestationResultLike;
+        provider?: string;
+    };
+    [SIGIL_ERROR__COMPOSE__MISSING_PARAM]: {
+        protocol: string;
+        fieldName: string;
+    };
+    [SIGIL_ERROR__COMPOSE__INVALID_BIGINT]: {
+        protocol: string;
+        fieldName: string;
+        receivedValue: unknown;
+    };
+    [SIGIL_ERROR__COMPOSE__UNSUPPORTED_ACTION]: {
+        protocol: string;
+        action: string;
+    };
+    [SIGIL_ERROR__X402__HEADER_MALFORMED]: {
+        legacyNumericCode: 7024;
+    };
+    [SIGIL_ERROR__X402__PAYMENT_FAILED]: {
+        legacyNumericCode: 7025;
+    };
+    [SIGIL_ERROR__X402__UNSUPPORTED]: {
+        legacyNumericCode: 7026;
+    };
+    [SIGIL_ERROR__X402__DESTINATION_BLOCKED]: {
+        payTo: string;
+        legacyNumericCode: 7027;
+    };
+    [SIGIL_ERROR__X402__REPLAY]: {
+        nonceKey: string;
+        legacyNumericCode: 7028;
+    };
+    [SIGIL_ERROR__SDK__INVALID_CONFIG]: {
+        field: string;
+        expected?: string;
+    };
+    [SIGIL_ERROR__SDK__INVALID_PARAMS]: {
+        field?: string;
+        received?: unknown;
+    };
+    [SIGIL_ERROR__SDK__INVALID_NETWORK]: {
+        received: string;
+        valid: readonly string[];
+    };
+    [SIGIL_ERROR__SDK__INVALID_AMOUNT]: {
+        received: unknown;
+    };
+    [SIGIL_ERROR__SDK__INVALID_CAPABILITY]: {
+        capability: number;
+        valid: readonly number[];
+    };
+    [SIGIL_ERROR__SDK__INVALID_ACTION_TYPE]: {
+        received: string;
+        valid: readonly string[];
+    };
+    [SIGIL_ERROR__SDK__OWNER_AGENT_COLLISION]: {
+        owner: Address;
+        agent: Address;
+    };
+    [SIGIL_ERROR__SDK__VAULT_NOT_FOUND]: {
+        vault: Address;
+    };
+    [SIGIL_ERROR__SDK__VAULT_INACTIVE]: {
+        vault: Address;
+        status: string;
+    };
+    [SIGIL_ERROR__SDK__VAULT_SLOTS_EXHAUSTED]: {
+        owner: Address;
+    };
+    [SIGIL_ERROR__SDK__POLICY_NOT_FOUND]: {
+        vault: Address;
+    };
+    [SIGIL_ERROR__SDK__AGENT_NOT_REGISTERED]: {
+        vault: Address;
+        agent: Address;
+    };
+    [SIGIL_ERROR__SDK__AGENT_PAUSED]: {
+        vault: Address;
+        agent: Address;
+    };
+    [SIGIL_ERROR__SDK__AGENT_ZERO_CAPABILITY]: {
+        vault: Address;
+        agent: Address;
+    };
+    [SIGIL_ERROR__SDK__SIGNER_INVALID]: {
+        reason: string;
+    };
+    [SIGIL_ERROR__SDK__SIGNATURE_INVALID]: {
+        reason: string;
+    };
+    [SIGIL_ERROR__SDK__SPL_TOKEN_OP_BLOCKED]: {
+        operation: string;
+        vault?: Address;
+    };
+    [SIGIL_ERROR__SDK__PROTOCOL_NOT_ALLOWED]: {
+        protocol: Address;
+        vault: Address;
+    };
+    [SIGIL_ERROR__SDK__PROTOCOL_NOT_TARGETED]: undefined;
+    [SIGIL_ERROR__SDK__INSTRUCTION_COUNT]: {
+        expected: number;
+        got: number;
+    };
+    [SIGIL_ERROR__SDK__CAP_EXCEEDED]: {
+        vault: Address;
+        agent: Address;
+        cap: bigint;
+        attempted: bigint;
+    };
+    [SIGIL_ERROR__SDK__ATA_NON_CANONICAL]: {
+        expected: Address;
+        got: Address;
+    };
+    [SIGIL_ERROR__SDK__ALT_INTEGRITY]: {
+        altAddress: Address;
+        missing: number;
+    };
+    [SIGIL_ERROR__SDK__ALT_NOT_DEPLOYED]: {
+        network: string;
+    };
+    [SIGIL_ERROR__SDK__SEAL_FAILED]: {
+        vault: Address;
+        agent: Address;
+    };
+    [SIGIL_ERROR__SDK__UNKNOWN]: {
+        rawCode?: string;
+        rawMessage?: string;
+    };
+    [SIGIL_ERROR__RPC__TX_FAILED]: {
+        signature?: string;
+        logs?: string[];
+    };
+    [SIGIL_ERROR__RPC__CONFIRMATION_TIMEOUT]: {
+        signature: string;
+        timeoutMs: number;
+    };
+    [SIGIL_ERROR__RPC__SIMULATION_FAILED]: {
+        signature?: string;
+        logs?: string[];
+    };
+    [SIGIL_ERROR__RPC__DRAIN_DETECTED]: {
+        reason: string;
+    };
+    [SIGIL_ERROR__RPC__TX_TOO_LARGE]: {
+        byteLength: number;
+        limit: number;
+    };
+    [SIGIL_ERROR__RPC__RATE_LIMITED]: {
+        statusCode?: number;
+    };
+    [SIGIL_ERROR__RPC__INSTRUCTION_REQUIRED]: undefined;
+    [SIGIL_ERROR__PROGRAM__GENERIC]: {
+        anchorCode?: number;
+        anchorName?: string;
+    };
+}
+export {};
+//# sourceMappingURL=context.d.ts.map

package/dist/errors/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/errors/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EACV,kCAAkC,EAClC,mCAAmC,EACnC,wCAAwC,EACxC,oCAAoC,EACpC,oCAAoC,EACpC,oCAAoC,EACpC,8BAA8B,EAC9B,mCAAmC,EACnC,oCAAoC,EACpC,wCAAwC,EACxC,mCAAmC,EACnC,iCAAiC,EACjC,8BAA8B,EAC9B,sCAAsC,EACtC,yBAAyB,EACzB,gCAAgC,EAChC,gCAAgC,EAChC,iCAAiC,EACjC,gCAAgC,EAChC,oCAAoC,EACpC,qCAAqC,EACrC,uCAAuC,EACvC,iCAAiC,EACjC,gCAAgC,EAChC,uCAAuC,EACvC,kCAAkC,EAClC,sCAAsC,EACtC,8BAA8B,EAC9B,uCAAuC,EACvC,gCAAgC,EAChC,mCAAmC,EACnC,sCAAsC,EACtC,sCAAsC,EACtC,uCAAuC,EACvC,mCAAmC,EACnC,8BAA8B,EAC9B,mCAAmC,EACnC,+BAA+B,EAC/B,kCAAkC,EAClC,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,EAC3B,sCAAsC,EACtC,mCAAmC,EACnC,gCAAgC,EAChC,8BAA8B,EAC9B,8BAA8B,EAC9B,sCAAsC,EACtC,6BAA6B,EAC9B,MAAM,YAAY,CAAC;AAMpB,UAAU,mBAAmB;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,UAAU,qBAAqB;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,CAAC,kCAAkC,CAAC,EAAE;QAAE,UAAU,EAAE,mBAAmB,EAAE,CAAA;KAAE,CAAC;IAC5E,CAAC,mCAAmC,CAAC,EAAE,SAAS,CAAC;IACjD,CAAC,wCAAwC,CAAC,EAAE;QAC1C,UAAU,EAAE,mBAAmB,EAAE,CAAC;QAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,CAAC,oCAAoC,CAAC,EAAE;QAAE,UAAU,EAAE,mBAAmB,EAAE,CAAA;KAAE,CAAC;IAE9E,CAAC,oCAAoC,CAAC,EAAE;QACtC,MAAM,CAAC,EAAE,qBAAqB,CAAC;QAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,CAAC,oCAAoC,CAAC,EAAE;QACtC,MAAM,CAAC,EAAE,qBAAqB,CAAC;QAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,CAAC,8BAA8B,CAAC,EAAE;QAChC,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,qBAAqB,CAAC;QAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IAEF,CAAC,mCAAmC,CAAC,EAAE;QACrC,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,CAAC,oCAAoC,CAAC,EAAE;QACtC,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,CAAC,wCAAwC,CAAC,EAAE;QAC1C,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IAEF,CAAC,mCAAmC,CAAC,EAAE;QAAE,iBAAiB,EAAE,IAAI,CAAA;KAAE,CAAC;IACnE,CAAC,iCAAiC,CAAC,EAAE;QAAE,iBAAiB,EAAE,IAAI,CAAA;KAAE,CAAC;IACjE,CAAC,8BAA8B,CAAC,EAAE;QAAE,iBAAiB,EAAE,IAAI,CAAA;KAAE,CAAC;IAC9D,CAAC,sCAAsC,CAAC,EAAE;QACxC,KAAK,EAAE,MAAM,CAAC;QACd,iBAAiB,EAAE,IAAI,CAAC;KACzB,CAAC;IACF,CAAC,yBAAyB,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,IAAI,CAAA;KAAE,CAAC;IAE3E,CAAC,gCAAgC,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,CAAC,gCAAgC,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3E,CAAC,iCAAiC,CAAC,EAAE;QACnC,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;KAC1B,CAAC;IACF,CAAC,gCAAgC,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1D,CAAC,oCAAoC,CAAC,EAAE;QACtC,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;KAC1B,CAAC;IACF,CAAC,qCAAqC,CAAC,EAAE;QACvC,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;KAC1B,CAAC;IACF,CAAC,uCAAuC,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9E,CAAC,iCAAiC,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IACxD,CAAC,gCAAgC,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,CAAC,uCAAuC,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9D,CAAC,kCAAkC,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IACzD,CAAC,sCAAsC,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7E,CAAC,8BAA8B,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IACrE,CAAC,uCAAuC,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9E,CAAC,gCAAgC,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,CAAC,mCAAmC,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,CAAC,sCAAsC,CAAC,EAAE;QACxC,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,CAAC,sCAAsC,CAAC,EAAE;QACxC,QAAQ,EAAE,OAAO,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC;IACF,CAAC,uCAAuC,CAAC,EAAE,SAAS,CAAC;IACrD,CAAC,mCAAmC,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,CAAC,8BAA8B,CAAC,EAAE;QAChC,KAAK,EAAE,OAAO,CAAC;QACf,KAAK,EAAE,OAAO,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,CAAC,mCAAmC,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3E,CAAC,+BAA+B,CAAC,EAAE;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5E,CAAC,kCAAkC,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,CAAC,6BAA6B,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IACpE,CAAC,yBAAyB,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAEvE,CAAC,2BAA2B,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACvE,CAAC,sCAAsC,CAAC,EAAE;QACxC,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,CAAC,mCAAmC,CAAC,EAAE;QACrC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IACF,CAAC,gCAAgC,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,CAAC,8BAA8B,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE,CAAC,8BAA8B,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,CAAC,sCAAsC,CAAC,EAAE,SAAS,CAAC;IAEpD,CAAC,6BAA6B,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/E"}

package/dist/errors/context.js

@@ -0,0 +1,11 @@
+/**
+ * SigilErrorContext — discriminated context map.
+ *
+ * For each `SigilErrorCode`, the corresponding context shape is bound at
+ * compile time. When `SigilError<TCode>` is narrowed (via `instanceof` or
+ * code check), `instance.context` is typed precisely.
+ *
+ * Pattern matches `@solana/kit`'s `SolanaErrorContext` map.
+ */
+export {};
+//# sourceMappingURL=context.js.map

package/dist/errors/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/errors/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/errors/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * @usesigil/kit error taxonomy — public barrel.
+ *
+ * Re-exports the SigilError base, all four domain classes, the SigilErrorCode
+ * union + per-domain subsets, the SigilErrorContext map, and the walk helper.
+ *
+ * Leaf classes (ShieldDeniedError, X402ParseError, TeeAttestationError, etc.)
+ * are exported from their existing modules — re-exported through src/index.ts
+ * for backwards compatibility.
+ */
+export { SigilError, SIGIL_KIT_VERSION, type SigilErrorParameters, } from "./base.js";
+export { SigilShieldError } from "./shield.js";
+export { SigilTeeError } from "./tee.js";
+export { SigilX402Error } from "./x402.js";
+export { SigilComposeError } from "./compose.js";
+export { SigilSdkDomainError } from "./sdk.js";
+export { SigilRpcError } from "./rpc.js";
+export { walk } from "./walk.js";
+export type { SigilErrorCode, SigilShieldErrorCode, SigilTeeErrorCode, SigilComposeErrorCode, SigilX402ErrorCode, SigilSdkErrorCode, SigilRpcErrorCode, SigilProgramErrorCode, } from "./codes.js";
+export { SIGIL_ERROR__SHIELD__POLICY_DENIED, SIGIL_ERROR__SHIELD__CONFIG_INVALID, SIGIL_ERROR__SHIELD__RATE_LIMIT_EXCEEDED, SIGIL_ERROR__SHIELD__SESSION_BINDING, SIGIL_ERROR__TEE__ATTESTATION_FAILED, SIGIL_ERROR__TEE__CERT_CHAIN_INVALID, SIGIL_ERROR__TEE__PCR_MISMATCH, SIGIL_ERROR__COMPOSE__MISSING_PARAM, SIGIL_ERROR__COMPOSE__INVALID_BIGINT, SIGIL_ERROR__COMPOSE__UNSUPPORTED_ACTION, SIGIL_ERROR__X402__HEADER_MALFORMED, SIGIL_ERROR__X402__PAYMENT_FAILED, SIGIL_ERROR__X402__UNSUPPORTED, SIGIL_ERROR__X402__DESTINATION_BLOCKED, SIGIL_ERROR__X402__REPLAY, SIGIL_ERROR__SDK__INVALID_CONFIG, SIGIL_ERROR__SDK__INVALID_PARAMS, SIGIL_ERROR__SDK__INVALID_NETWORK, SIGIL_ERROR__SDK__INVALID_AMOUNT, SIGIL_ERROR__SDK__INVALID_CAPABILITY, SIGIL_ERROR__SDK__INVALID_ACTION_TYPE, SIGIL_ERROR__SDK__OWNER_AGENT_COLLISION, SIGIL_ERROR__SDK__VAULT_NOT_FOUND, SIGIL_ERROR__SDK__VAULT_INACTIVE, SIGIL_ERROR__SDK__VAULT_SLOTS_EXHAUSTED, SIGIL_ERROR__SDK__POLICY_NOT_FOUND, SIGIL_ERROR__SDK__AGENT_NOT_REGISTERED, SIGIL_ERROR__SDK__AGENT_PAUSED, SIGIL_ERROR__SDK__AGENT_ZERO_CAPABILITY, SIGIL_ERROR__SDK__SIGNER_INVALID, SIGIL_ERROR__SDK__SIGNATURE_INVALID, SIGIL_ERROR__SDK__SPL_TOKEN_OP_BLOCKED, SIGIL_ERROR__SDK__PROTOCOL_NOT_ALLOWED, SIGIL_ERROR__SDK__PROTOCOL_NOT_TARGETED, SIGIL_ERROR__SDK__INSTRUCTION_COUNT, SIGIL_ERROR__SDK__CAP_EXCEEDED, SIGIL_ERROR__SDK__ATA_NON_CANONICAL, SIGIL_ERROR__SDK__ALT_INTEGRITY, SIGIL_ERROR__SDK__ALT_NOT_DEPLOYED, SIGIL_ERROR__SDK__SEAL_FAILED, SIGIL_ERROR__SDK__UNKNOWN, SIGIL_ERROR__RPC__TX_FAILED, SIGIL_ERROR__RPC__CONFIRMATION_TIMEOUT, SIGIL_ERROR__RPC__SIMULATION_FAILED, SIGIL_ERROR__RPC__DRAIN_DETECTED, SIGIL_ERROR__RPC__TX_TOO_LARGE, SIGIL_ERROR__RPC__RATE_LIMITED, SIGIL_ERROR__RPC__INSTRUCTION_REQUIRED, SIGIL_ERROR__PROGRAM__GENERIC, } from "./codes.js";
+export type { SigilErrorContext } from "./context.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAEL,kCAAkC,EAClC,mCAAmC,EACnC,wCAAwC,EACxC,oCAAoC,EAEpC,oCAAoC,EACpC,oCAAoC,EACpC,8BAA8B,EAE9B,mCAAmC,EACnC,oCAAoC,EACpC,wCAAwC,EAExC,mCAAmC,EACnC,iCAAiC,EACjC,8BAA8B,EAC9B,sCAAsC,EACtC,yBAAyB,EAEzB,gCAAgC,EAChC,gCAAgC,EAChC,iCAAiC,EACjC,gCAAgC,EAChC,oCAAoC,EACpC,qCAAqC,EACrC,uCAAuC,EACvC,iCAAiC,EACjC,gCAAgC,EAChC,uCAAuC,EACvC,kCAAkC,EAClC,sCAAsC,EACtC,8BAA8B,EAC9B,uCAAuC,EACvC,gCAAgC,EAChC,mCAAmC,EACnC,sCAAsC,EACtC,sCAAsC,EACtC,uCAAuC,EACvC,mCAAmC,EACnC,8BAA8B,EAC9B,mCAAmC,EACnC,+BAA+B,EAC/B,kCAAkC,EAClC,6BAA6B,EAC7B,yBAAyB,EAEzB,2BAA2B,EAC3B,sCAAsC,EACtC,mCAAmC,EACnC,gCAAgC,EAChC,8BAA8B,EAC9B,8BAA8B,EAC9B,sCAAsC,EAEtC,6BAA6B,GAC9B,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC"}

package/dist/errors/index.js

@@ -0,0 +1,34 @@
+/**
+ * @usesigil/kit error taxonomy — public barrel.
+ *
+ * Re-exports the SigilError base, all four domain classes, the SigilErrorCode
+ * union + per-domain subsets, the SigilErrorContext map, and the walk helper.
+ *
+ * Leaf classes (ShieldDeniedError, X402ParseError, TeeAttestationError, etc.)
+ * are exported from their existing modules — re-exported through src/index.ts
+ * for backwards compatibility.
+ */
+export { SigilError, SIGIL_KIT_VERSION, } from "./base.js";
+export { SigilShieldError } from "./shield.js";
+export { SigilTeeError } from "./tee.js";
+export { SigilX402Error } from "./x402.js";
+export { SigilComposeError } from "./compose.js";
+export { SigilSdkDomainError } from "./sdk.js";
+export { SigilRpcError } from "./rpc.js";
+export { walk } from "./walk.js";
+export { 
+// Shield
+SIGIL_ERROR__SHIELD__POLICY_DENIED, SIGIL_ERROR__SHIELD__CONFIG_INVALID, SIGIL_ERROR__SHIELD__RATE_LIMIT_EXCEEDED, SIGIL_ERROR__SHIELD__SESSION_BINDING, 
+// TEE
+SIGIL_ERROR__TEE__ATTESTATION_FAILED, SIGIL_ERROR__TEE__CERT_CHAIN_INVALID, SIGIL_ERROR__TEE__PCR_MISMATCH, 
+// Compose
+SIGIL_ERROR__COMPOSE__MISSING_PARAM, SIGIL_ERROR__COMPOSE__INVALID_BIGINT, SIGIL_ERROR__COMPOSE__UNSUPPORTED_ACTION, 
+// x402
+SIGIL_ERROR__X402__HEADER_MALFORMED, SIGIL_ERROR__X402__PAYMENT_FAILED, SIGIL_ERROR__X402__UNSUPPORTED, SIGIL_ERROR__X402__DESTINATION_BLOCKED, SIGIL_ERROR__X402__REPLAY, 
+// SDK
+SIGIL_ERROR__SDK__INVALID_CONFIG, SIGIL_ERROR__SDK__INVALID_PARAMS, SIGIL_ERROR__SDK__INVALID_NETWORK, SIGIL_ERROR__SDK__INVALID_AMOUNT, SIGIL_ERROR__SDK__INVALID_CAPABILITY, SIGIL_ERROR__SDK__INVALID_ACTION_TYPE, SIGIL_ERROR__SDK__OWNER_AGENT_COLLISION, SIGIL_ERROR__SDK__VAULT_NOT_FOUND, SIGIL_ERROR__SDK__VAULT_INACTIVE, SIGIL_ERROR__SDK__VAULT_SLOTS_EXHAUSTED, SIGIL_ERROR__SDK__POLICY_NOT_FOUND, SIGIL_ERROR__SDK__AGENT_NOT_REGISTERED, SIGIL_ERROR__SDK__AGENT_PAUSED, SIGIL_ERROR__SDK__AGENT_ZERO_CAPABILITY, SIGIL_ERROR__SDK__SIGNER_INVALID, SIGIL_ERROR__SDK__SIGNATURE_INVALID, SIGIL_ERROR__SDK__SPL_TOKEN_OP_BLOCKED, SIGIL_ERROR__SDK__PROTOCOL_NOT_ALLOWED, SIGIL_ERROR__SDK__PROTOCOL_NOT_TARGETED, SIGIL_ERROR__SDK__INSTRUCTION_COUNT, SIGIL_ERROR__SDK__CAP_EXCEEDED, SIGIL_ERROR__SDK__ATA_NON_CANONICAL, SIGIL_ERROR__SDK__ALT_INTEGRITY, SIGIL_ERROR__SDK__ALT_NOT_DEPLOYED, SIGIL_ERROR__SDK__SEAL_FAILED, SIGIL_ERROR__SDK__UNKNOWN, 
+// RPC
+SIGIL_ERROR__RPC__TX_FAILED, SIGIL_ERROR__RPC__CONFIRMATION_TIMEOUT, SIGIL_ERROR__RPC__SIMULATION_FAILED, SIGIL_ERROR__RPC__DRAIN_DETECTED, SIGIL_ERROR__RPC__TX_TOO_LARGE, SIGIL_ERROR__RPC__RATE_LIMITED, SIGIL_ERROR__RPC__INSTRUCTION_REQUIRED, 
+// Program
+SIGIL_ERROR__PROGRAM__GENERIC, } from "./codes.js";
+//# sourceMappingURL=index.js.map

package/dist/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,UAAU,EACV,iBAAiB,GAElB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAajC,OAAO;AACL,SAAS;AACT,kCAAkC,EAClC,mCAAmC,EACnC,wCAAwC,EACxC,oCAAoC;AACpC,MAAM;AACN,oCAAoC,EACpC,oCAAoC,EACpC,8BAA8B;AAC9B,UAAU;AACV,mCAAmC,EACnC,oCAAoC,EACpC,wCAAwC;AACxC,OAAO;AACP,mCAAmC,EACnC,iCAAiC,EACjC,8BAA8B,EAC9B,sCAAsC,EACtC,yBAAyB;AACzB,MAAM;AACN,gCAAgC,EAChC,gCAAgC,EAChC,iCAAiC,EACjC,gCAAgC,EAChC,oCAAoC,EACpC,qCAAqC,EACrC,uCAAuC,EACvC,iCAAiC,EACjC,gCAAgC,EAChC,uCAAuC,EACvC,kCAAkC,EAClC,sCAAsC,EACtC,8BAA8B,EAC9B,uCAAuC,EACvC,gCAAgC,EAChC,mCAAmC,EACnC,sCAAsC,EACtC,sCAAsC,EACtC,uCAAuC,EACvC,mCAAmC,EACnC,8BAA8B,EAC9B,mCAAmC,EACnC,+BAA+B,EAC/B,kCAAkC,EAClC,6BAA6B,EAC7B,yBAAyB;AACzB,MAAM;AACN,2BAA2B,EAC3B,sCAAsC,EACtC,mCAAmC,EACnC,gCAAgC,EAChC,8BAA8B,EAC9B,8BAA8B,EAC9B,sCAAsC;AACtC,UAAU;AACV,6BAA6B,GAC9B,MAAM,YAAY,CAAC"}

package/dist/errors/rpc.d.ts

@@ -0,0 +1,16 @@
+/**
+ * SigilRpcError — domain class for RPC + transaction lifecycle errors.
+ *
+ * Use for: tx confirmation timeout, simulation failures, drain detection,
+ * tx-too-large, RPC rate limiting, transport errors that don't already
+ * fit into Shield/TEE/X402/Compose.
+ *
+ * Wrap upstream `@solana/kit` `SolanaError` instances via `cause` to
+ * preserve the chain (use `walkSigilCause` to traverse).
+ */
+import { SigilError } from "./base.js";
+import type { SigilRpcErrorCode } from "./codes.js";
+export declare class SigilRpcError<TCode extends SigilRpcErrorCode = SigilRpcErrorCode> extends SigilError<TCode> {
+    name: string;
+}
+//# sourceMappingURL=rpc.d.ts.map

package/dist/errors/rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../src/errors/rpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,qBAAa,aAAa,CACxB,KAAK,SAAS,iBAAiB,GAAG,iBAAiB,CACnD,SAAQ,UAAU,CAAC,KAAK,CAAC;IAChB,IAAI,EAAE,MAAM,CAAmB;CACzC"}

package/dist/errors/rpc.js

@@ -0,0 +1,15 @@
+/**
+ * SigilRpcError — domain class for RPC + transaction lifecycle errors.
+ *
+ * Use for: tx confirmation timeout, simulation failures, drain detection,
+ * tx-too-large, RPC rate limiting, transport errors that don't already
+ * fit into Shield/TEE/X402/Compose.
+ *
+ * Wrap upstream `@solana/kit` `SolanaError` instances via `cause` to
+ * preserve the chain (use `walkSigilCause` to traverse).
+ */
+import { SigilError } from "./base.js";
+export class SigilRpcError extends SigilError {
+    name = "SigilRpcError";
+}
+//# sourceMappingURL=rpc.js.map

package/dist/errors/rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../src/errors/rpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGvC,MAAM,OAAO,aAEX,SAAQ,UAAiB;IAChB,IAAI,GAAW,eAAe,CAAC;CACzC"}

package/dist/errors/sdk.d.ts

@@ -0,0 +1,31 @@
+/**
+ * SigilSdkDomainError — domain class for SDK-level errors (validation,
+ * config, state, runtime guards) raised from sdk/kit/src.
+ *
+ * Named with `Domain` suffix to disambiguate from the existing
+ * `SigilSdkError` in `src/agent-errors.ts` which implements the AgentError
+ * interface contract (deferred from PR 2.A rebasing per UD3 + R4).
+ *
+ * Use this class for new typed throws in SDK code where AgentError
+ * conformance is NOT required. Example:
+ *
+ *   import {
+ *     SigilSdkDomainError as SigilSdkError,
+ *     SIGIL_ERROR__SDK__VAULT_INACTIVE,
+ *   } from "./errors/index.js";
+ *
+ *   throw new SigilSdkDomainError(
+ *     SIGIL_ERROR__SDK__VAULT_INACTIVE,
+ *     `Vault is not active (status: ${status})`,
+ *     { context: { vault, status } as never },
+ *   );
+ *
+ * Future cleanup PR: promote AgentError to SigilAgentError class, then
+ * unify these two SDK error classes under a single hierarchy.
+ */
+import { SigilError } from "./base.js";
+import type { SigilSdkErrorCode } from "./codes.js";
+export declare class SigilSdkDomainError<TCode extends SigilSdkErrorCode = SigilSdkErrorCode> extends SigilError<TCode> {
+    name: string;
+}
+//# sourceMappingURL=sdk.d.ts.map

package/dist/errors/sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.d.ts","sourceRoot":"","sources":["../../src/errors/sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,qBAAa,mBAAmB,CAC9B,KAAK,SAAS,iBAAiB,GAAG,iBAAiB,CACnD,SAAQ,UAAU,CAAC,KAAK,CAAC;IAChB,IAAI,EAAE,MAAM,CAAyB;CAC/C"}

package/dist/errors/sdk.js

@@ -0,0 +1,30 @@
+/**
+ * SigilSdkDomainError — domain class for SDK-level errors (validation,
+ * config, state, runtime guards) raised from sdk/kit/src.
+ *
+ * Named with `Domain` suffix to disambiguate from the existing
+ * `SigilSdkError` in `src/agent-errors.ts` which implements the AgentError
+ * interface contract (deferred from PR 2.A rebasing per UD3 + R4).
+ *
+ * Use this class for new typed throws in SDK code where AgentError
+ * conformance is NOT required. Example:
+ *
+ *   import {
+ *     SigilSdkDomainError as SigilSdkError,
+ *     SIGIL_ERROR__SDK__VAULT_INACTIVE,
+ *   } from "./errors/index.js";
+ *
+ *   throw new SigilSdkDomainError(
+ *     SIGIL_ERROR__SDK__VAULT_INACTIVE,
+ *     `Vault is not active (status: ${status})`,
+ *     { context: { vault, status } as never },
+ *   );
+ *
+ * Future cleanup PR: promote AgentError to SigilAgentError class, then
+ * unify these two SDK error classes under a single hierarchy.
+ */
+import { SigilError } from "./base.js";
+export class SigilSdkDomainError extends SigilError {
+    name = "SigilSdkDomainError";
+}
+//# sourceMappingURL=sdk.js.map

package/dist/errors/sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../../src/errors/sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGvC,MAAM,OAAO,mBAEX,SAAQ,UAAiB;IAChB,IAAI,GAAW,qBAAqB,CAAC;CAC/C"}

package/dist/errors/shield.d.ts

@@ -0,0 +1,16 @@
+/**
+ * SigilShieldError — domain class for policy enforcement errors.
+ *
+ * Leaf classes (`ShieldDeniedError`, `ShieldConfigError`) extend this and live
+ * in `src/shield.ts` / `src/core/errors.ts` for blame-history continuity. They
+ * are NOT defined here.
+ *
+ * Step 4 of the migration adds this class. Step 5 collapses the dual
+ * `ShieldDeniedError` definition and re-homes both leaves under this domain.
+ */
+import { SigilError } from "./base.js";
+import type { SigilShieldErrorCode } from "./codes.js";
+export declare class SigilShieldError<TCode extends SigilShieldErrorCode = SigilShieldErrorCode> extends SigilError<TCode> {
+    name: string;
+}
+//# sourceMappingURL=shield.d.ts.map

package/dist/errors/shield.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield.d.ts","sourceRoot":"","sources":["../../src/errors/shield.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,qBAAa,gBAAgB,CAC3B,KAAK,SAAS,oBAAoB,GAAG,oBAAoB,CACzD,SAAQ,UAAU,CAAC,KAAK,CAAC;IAChB,IAAI,EAAE,MAAM,CAAsB;CAC5C"}

package/dist/errors/shield.js

@@ -0,0 +1,15 @@
+/**
+ * SigilShieldError — domain class for policy enforcement errors.
+ *
+ * Leaf classes (`ShieldDeniedError`, `ShieldConfigError`) extend this and live
+ * in `src/shield.ts` / `src/core/errors.ts` for blame-history continuity. They
+ * are NOT defined here.
+ *
+ * Step 4 of the migration adds this class. Step 5 collapses the dual
+ * `ShieldDeniedError` definition and re-homes both leaves under this domain.
+ */
+import { SigilError } from "./base.js";
+export class SigilShieldError extends SigilError {
+    name = "SigilShieldError";
+}
+//# sourceMappingURL=shield.js.map

package/dist/errors/shield.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield.js","sourceRoot":"","sources":["../../src/errors/shield.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGvC,MAAM,OAAO,gBAEX,SAAQ,UAAiB;IAChB,IAAI,GAAW,kBAAkB,CAAC;CAC5C"}

package/dist/errors/tee.d.ts

@@ -0,0 +1,18 @@
+/**
+ * SigilTeeError — domain class for TEE attestation + custody errors.
+ *
+ * Leaf classes (`TeeAttestationError`, `AttestationCertChainError`,
+ * `AttestationPcrMismatchError`) extend this and live in
+ * `src/tee/wallet-types.ts`. They are NOT defined here.
+ *
+ * Step 4 of the migration adds this class. Step 6 re-homes the leaves under
+ * this domain. The two `instanceof TeeAttestationError` re-throw guards in
+ * `src/tee/providers/turnkey.ts:359, :563` continue to work because the
+ * leaf class name is preserved and the prototype chain only grows upward.
+ */
+import { SigilError } from "./base.js";
+import type { SigilTeeErrorCode } from "./codes.js";
+export declare class SigilTeeError<TCode extends SigilTeeErrorCode = SigilTeeErrorCode> extends SigilError<TCode> {
+    name: string;
+}
+//# sourceMappingURL=tee.d.ts.map

package/dist/errors/tee.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tee.d.ts","sourceRoot":"","sources":["../../src/errors/tee.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,qBAAa,aAAa,CACxB,KAAK,SAAS,iBAAiB,GAAG,iBAAiB,CACnD,SAAQ,UAAU,CAAC,KAAK,CAAC;IAChB,IAAI,EAAE,MAAM,CAAmB;CACzC"}

package/dist/errors/tee.js

@@ -0,0 +1,17 @@
+/**
+ * SigilTeeError — domain class for TEE attestation + custody errors.
+ *
+ * Leaf classes (`TeeAttestationError`, `AttestationCertChainError`,
+ * `AttestationPcrMismatchError`) extend this and live in
+ * `src/tee/wallet-types.ts`. They are NOT defined here.
+ *
+ * Step 4 of the migration adds this class. Step 6 re-homes the leaves under
+ * this domain. The two `instanceof TeeAttestationError` re-throw guards in
+ * `src/tee/providers/turnkey.ts:359, :563` continue to work because the
+ * leaf class name is preserved and the prototype chain only grows upward.
+ */
+import { SigilError } from "./base.js";
+export class SigilTeeError extends SigilError {
+    name = "SigilTeeError";
+}
+//# sourceMappingURL=tee.js.map

package/dist/errors/tee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tee.js","sourceRoot":"","sources":["../../src/errors/tee.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGvC,MAAM,OAAO,aAEX,SAAQ,UAAiB;IAChB,IAAI,GAAW,eAAe,CAAC;CACzC"}

package/dist/errors/walk.d.ts

@@ -0,0 +1,3 @@
+export declare function walk(err: unknown): Error;
+export declare function walk(err: unknown, fn: (e: unknown) => boolean): Error | null;
+//# sourceMappingURL=walk.d.ts.map

package/dist/errors/walk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk.d.ts","sourceRoot":"","sources":["../../src/errors/walk.ts"],"names":[],"mappings":"AA8BA,wBAAgB,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,CAAC;AAC1C,wBAAgB,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,GAAG,KAAK,GAAG,IAAI,CAAC"}

package/dist/errors/walk.js

@@ -0,0 +1,71 @@
+/**
+ * walk — recursive cause-chain traversal.
+ *
+ * Returns the root cause when called without a predicate, or the first error
+ * matching the predicate when called with one. Handles cyclic cause chains
+ * via a visited set + max-depth fuse so a malformed chain can never cause
+ * infinite recursion.
+ *
+ * PR 2.A silent-failure-hunter fix (Finding 1):
+ *   - MAX_WALK_DEPTH raised from 10 → 32 (matches viem's BaseError
+ *     behavior; real-world chains routinely exceed 10 when SDK + Solana +
+ *     Anchor + custody layers stack). Emits a one-shot console.warn when
+ *     the fuse triggers so chain-truncation is observable.
+ *   - Predicate variant now also tests non-Error causes (e.g., undici's
+ *     `cause: { code: "ECONNRESET" }` shape) by passing them to fn before
+ *     bailing. Previously these were silently dropped from the search.
+ */
+const MAX_WALK_DEPTH = 32;
+let depthFuseWarned = false;
+function warnFuseTrip() {
+    if (depthFuseWarned)
+        return;
+    depthFuseWarned = true;
+    console.warn(`[@usesigil/kit/walk] cause-chain depth exceeded ${MAX_WALK_DEPTH} levels — ` +
+        `chain truncated. If this is a real chain (not a cycle), file an issue at ` +
+        `https://github.com/Sigil-Trade/sigil/issues with reproduction.`);
+}
+export function walk(err, fn) {
+    // Predicate variant — find first match in the chain (including non-Error causes).
+    if (fn) {
+        return walkPredicate(err, fn, new Set(), 0);
+    }
+    // No-arg variant — find root cause.
+    return walkRoot(err, new Set(), 0);
+}
+function walkPredicate(err, fn, visited, depth) {
+    if (depth >= MAX_WALK_DEPTH) {
+        warnFuseTrip();
+        return null;
+    }
+    if (visited.has(err))
+        return null;
+    visited.add(err);
+    // Run predicate on ANY cause (including non-Error values like undici's
+    // `cause: { code: "ECONNRESET" }`). Only Error instances may have a
+    // further `.cause` chain to descend into.
+    if (fn(err))
+        return err instanceof Error ? err : new Error(String(err));
+    if (err instanceof Error && err.cause !== undefined) {
+        return walkPredicate(err.cause, fn, visited, depth + 1);
+    }
+    return null;
+}
+function walkRoot(err, visited, depth) {
+    // For non-Error inputs, wrap so the contract (returns Error) holds.
+    if (!(err instanceof Error)) {
+        return new Error(typeof err === "string" ? err : "non-Error cause");
+    }
+    if (visited.has(err))
+        return err;
+    if (depth >= MAX_WALK_DEPTH) {
+        warnFuseTrip();
+        return err;
+    }
+    visited.add(err);
+    if (err.cause !== undefined && err.cause !== err) {
+        return walkRoot(err.cause, visited, depth + 1);
+    }
+    return err;
+}
+//# sourceMappingURL=walk.js.map

package/dist/errors/walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk.js","sourceRoot":"","sources":["../../src/errors/walk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,IAAI,eAAe,GAAG,KAAK,CAAC;AAE5B,SAAS,YAAY;IACnB,IAAI,eAAe;QAAE,OAAO;IAC5B,eAAe,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,IAAI,CACV,mDAAmD,cAAc,YAAY;QAC3E,2EAA2E;QAC3E,gEAAgE,CACnE,CAAC;AACJ,CAAC;AAID,MAAM,UAAU,IAAI,CAAC,GAAY,EAAE,EAA4B;IAC7D,kFAAkF;IAClF,IAAI,EAAE,EAAE,CAAC;QACP,OAAO,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,oCAAoC;IACpC,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,aAAa,CACpB,GAAY,EACZ,EAA2B,EAC3B,OAAqB,EACrB,KAAa;IAEb,IAAI,KAAK,IAAI,cAAc,EAAE,CAAC;QAC5B,YAAY,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjB,uEAAuE;IACvE,oEAAoE;IACpE,0CAA0C;IAC1C,IAAI,EAAE,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY,EAAE,OAAqB,EAAE,KAAa;IAClE,oEAAoE;IACpE,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,KAAK,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACjC,IAAI,KAAK,IAAI,cAAc,EAAE,CAAC;QAC5B,YAAY,EAAE,CAAC;QACf,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;QACjD,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/errors/x402.d.ts

@@ -0,0 +1,20 @@
+/**
+ * SigilX402Error — domain class for HTTP 402 payment errors.
+ *
+ * Leaf classes (`X402ParseError`, `X402PaymentError`, `X402UnsupportedError`,
+ * `X402DestinationBlockedError`, `X402ReplayError`) extend this and live in
+ * `src/x402/errors.ts`. They are NOT defined here.
+ *
+ * Step 7 re-homes the leaves and migrates `.code` from numeric literals
+ * (7024-7028) to canonical SigilErrorCode strings, preserving the numeric
+ * values via `.legacyNumericCode` getter for one-minor migration ramp.
+ *
+ * The `instanceof X402ParseError` re-throw guard in `src/x402/codec.ts:87`
+ * continues to work — leaf class name preserved.
+ */
+import { SigilError } from "./base.js";
+import type { SigilX402ErrorCode } from "./codes.js";
+export declare class SigilX402Error<TCode extends SigilX402ErrorCode = SigilX402ErrorCode> extends SigilError<TCode> {
+    name: string;
+}
+//# sourceMappingURL=x402.d.ts.map

package/dist/errors/x402.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402.d.ts","sourceRoot":"","sources":["../../src/errors/x402.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,qBAAa,cAAc,CACzB,KAAK,SAAS,kBAAkB,GAAG,kBAAkB,CACrD,SAAQ,UAAU,CAAC,KAAK,CAAC;IAChB,IAAI,EAAE,MAAM,CAAoB;CAC1C"}

package/dist/errors/x402.js

@@ -0,0 +1,19 @@
+/**
+ * SigilX402Error — domain class for HTTP 402 payment errors.
+ *
+ * Leaf classes (`X402ParseError`, `X402PaymentError`, `X402UnsupportedError`,
+ * `X402DestinationBlockedError`, `X402ReplayError`) extend this and live in
+ * `src/x402/errors.ts`. They are NOT defined here.
+ *
+ * Step 7 re-homes the leaves and migrates `.code` from numeric literals
+ * (7024-7028) to canonical SigilErrorCode strings, preserving the numeric
+ * values via `.legacyNumericCode` getter for one-minor migration ramp.
+ *
+ * The `instanceof X402ParseError` re-throw guard in `src/x402/codec.ts:87`
+ * continues to work — leaf class name preserved.
+ */
+import { SigilError } from "./base.js";
+export class SigilX402Error extends SigilError {
+    name = "SigilX402Error";
+}
+//# sourceMappingURL=x402.js.map