solvoid 1.0.0 → 1.1.1

package/dist/security/key-rotation.js

@@ -0,0 +1,354 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeyRotationManager = void 0;
+exports.getKeyManager = getKeyManager;
+exports.destroyKeyManager = destroyKeyManager;
+const web3_js_1 = require("@solana/web3.js");
+const buffer_1 = require("buffer");
+const crypto = __importStar(require("crypto"));
+/**
+ * Key Rotation Manager
+ * Provides secure key lifecycle management with automatic rotation
+ */
+class KeyRotationManager {
+    constructor(config = {}) {
+        this.keyHistory = new Map();
+        this.backups = new Map();
+        this.config = {
+            maxKeyAge: 24 * 60 * 60 * 1000, // 24 hours
+            rotationInterval: 60 * 60 * 1000, // 1 hour
+            backupEnabled: true,
+            encryptionEnabled: true,
+            ...config
+        };
+        this.currentKey = web3_js_1.Keypair.generate();
+        this.initializeCurrentKey();
+        this.startRotationTimer();
+    }
+    /**
+     * Initialize current key metadata
+     */
+    initializeCurrentKey() {
+        const keyId = this.generateKeyId();
+        const metadata = {
+            keyId,
+            publicKey: this.currentKey.publicKey.toBase58(),
+            createdAt: Date.now(),
+            lastUsed: Date.now(),
+            usageCount: 0,
+            isRetired: false
+        };
+        this.keyHistory.set(keyId, metadata);
+        if (this.config.backupEnabled) {
+            this.createBackup(keyId);
+        }
+    }
+    /**
+     * Generate unique key identifier
+     */
+    generateKeyId() {
+        const timestamp = Date.now().toString(36);
+        const random = crypto.randomBytes(8).toString('hex');
+        return `key_${timestamp}_${random}`;
+    }
+    /**
+     * Start automatic rotation timer
+     */
+    startRotationTimer() {
+        this.rotationTimer = setInterval(() => {
+            this.checkAndRotate();
+        }, this.config.rotationInterval);
+    }
+    /**
+     * Check if key needs rotation and perform if necessary
+     */
+    checkAndRotate() {
+        const currentMetadata = this.getCurrentKeyMetadata();
+        if (this.shouldRotate(currentMetadata)) {
+            this.rotateKey();
+        }
+    }
+    /**
+     * Determine if key should be rotated
+     */
+    shouldRotate(metadata) {
+        const now = Date.now();
+        const age = now - metadata.createdAt;
+        // Rotate based on age
+        if (age > this.config.maxKeyAge) {
+            return true;
+        }
+        // Rotate based on usage (optional: every 1000 uses)
+        if (metadata.usageCount > 1000) {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Perform key rotation
+     */
+    rotateKey() {
+        // Retire current key
+        const currentMetadata = this.getCurrentKeyMetadata();
+        currentMetadata.isRetired = true;
+        currentMetadata.retiredAt = Date.now();
+        // Generate new key
+        this.currentKey = web3_js_1.Keypair.generate();
+        this.initializeCurrentKey();
+        console.log(`Key rotated: ${currentMetadata.keyId} -> ${this.getCurrentKeyMetadata().keyId}`);
+        return this.currentKey;
+    }
+    /**
+     * Get current key metadata
+     */
+    getCurrentKeyMetadata() {
+        const currentKeyId = Array.from(this.keyHistory.values())
+            .find(metadata => !metadata.isRetired)?.keyId;
+        if (!currentKeyId) {
+            throw new Error('No active key found');
+        }
+        return this.keyHistory.get(currentKeyId);
+    }
+    /**
+     * Get current keypair
+     */
+    getCurrentKey() {
+        this.updateKeyUsage();
+        return this.currentKey;
+    }
+    /**
+     * Update key usage statistics
+     */
+    updateKeyUsage() {
+        const metadata = this.getCurrentKeyMetadata();
+        metadata.lastUsed = Date.now();
+        metadata.usageCount++;
+    }
+    /**
+     * Create encrypted backup of private key
+     */
+    createBackup(keyId) {
+        if (!this.config.encryptionEnabled) {
+            return;
+        }
+        const metadata = this.keyHistory.get(keyId);
+        if (!metadata) {
+            throw new Error(`Key ${keyId} not found`);
+        }
+        // Find the keypair for this keyId
+        const keypair = this.findKeypairById(keyId);
+        if (!keypair) {
+            throw new Error(`Keypair for ${keyId} not found`);
+        }
+        // Generate encryption key from environment or secure source
+        const encryptionKey = this.getEncryptionKey();
+        // Encrypt private key
+        const privateKeyBytes = keypair.secretKey;
+        const iv = crypto.randomBytes(16);
+        const cipher = crypto.createCipheriv('aes-256-cbc', encryptionKey, iv);
+        let encrypted = cipher.update(privateKeyBytes);
+        encrypted = buffer_1.Buffer.concat([encrypted, cipher.final()]);
+        const backup = {
+            keyId,
+            encryptedPrivateKey: buffer_1.Buffer.concat([iv, encrypted]).toString('base64'),
+            publicKey: metadata.publicKey,
+            createdAt: metadata.createdAt,
+            encryptionAlgorithm: 'aes-256-cbc'
+        };
+        this.backups.set(keyId, backup);
+    }
+    /**
+     * Get encryption key (in production, use secure key management)
+     */
+    getEncryptionKey() {
+        // In production, use proper key management like AWS KMS, HashiCorp Vault, etc.
+        const envKey = process.env.SOLVOID_ENCRYPTION_KEY;
+        if (envKey) {
+            return buffer_1.Buffer.from(envKey, 'hex');
+        }
+        // Fallback: derive from system-specific entropy
+        return crypto.createHash('sha256')
+            .update('solvoid-key-rotation-backup')
+            .update(crypto.randomBytes(32))
+            .digest();
+    }
+    /**
+     * Find keypair by ID (simplified implementation)
+     */
+    findKeypairById(keyId) {
+        // In a real implementation, you'd store keypairs securely
+        // For now, we only have access to the current key
+        const currentMetadata = this.getCurrentKeyMetadata();
+        if (currentMetadata.keyId === keyId) {
+            return this.currentKey;
+        }
+        return null;
+    }
+    /**
+     * Restore key from backup
+     */
+    restoreFromBackup(keyId, encryptionKey) {
+        const backup = this.backups.get(keyId);
+        if (!backup) {
+            throw new Error(`Backup for key ${keyId} not found`);
+        }
+        const key = encryptionKey || this.getEncryptionKey().toString('hex');
+        const encryptedData = buffer_1.Buffer.from(backup.encryptedPrivateKey, 'base64');
+        const iv = encryptedData.slice(0, 16);
+        const encrypted = encryptedData.slice(16);
+        const decipher = crypto.createDecipheriv('aes-256-cbc', buffer_1.Buffer.from(key, 'hex'), iv);
+        let decrypted = decipher.update(encrypted);
+        decrypted = buffer_1.Buffer.concat([decrypted, decipher.final()]);
+        return web3_js_1.Keypair.fromSecretKey(decrypted);
+    }
+    /**
+     * Get key metadata by public key
+     */
+    getKeyMetadata(publicKey) {
+        return Array.from(this.keyHistory.values())
+            .find(metadata => metadata.publicKey === publicKey);
+    }
+    /**
+     * Get all key metadata
+     */
+    getAllKeyMetadata() {
+        return Array.from(this.keyHistory.values());
+    }
+    /**
+     * Get backup information
+     */
+    getBackupInfo() {
+        return Array.from(this.backups.values());
+    }
+    /**
+     * Force immediate rotation
+     */
+    forceRotation() {
+        return this.rotateKey();
+    }
+    /**
+     * Stop rotation timer
+     */
+    stopRotation() {
+        if (this.rotationTimer) {
+            clearInterval(this.rotationTimer);
+            this.rotationTimer = undefined;
+        }
+    }
+    /**
+     * Resume rotation timer
+     */
+    resumeRotation() {
+        if (!this.rotationTimer) {
+            this.startRotationTimer();
+        }
+    }
+    /**
+     * Cleanup old keys and backups
+     */
+    cleanup(maxAge = 7 * 24 * 60 * 60 * 1000) {
+        const now = Date.now();
+        const cutoff = now - maxAge;
+        // Remove old keys
+        for (const [keyId, metadata] of this.keyHistory.entries()) {
+            if (metadata.createdAt < cutoff && metadata.isRetired) {
+                this.keyHistory.delete(keyId);
+                this.backups.delete(keyId);
+            }
+        }
+    }
+    /**
+     * Export configuration for persistence
+     */
+    exportConfig() {
+        return {
+            config: this.config,
+            keyHistory: Array.from(this.keyHistory.values()),
+            backups: Array.from(this.backups.values())
+        };
+    }
+    /**
+     * Import configuration
+     */
+    importConfig(data) {
+        this.config = data.config;
+        this.keyHistory.clear();
+        this.backups.clear();
+        data.keyHistory.forEach(metadata => {
+            this.keyHistory.set(metadata.keyId, metadata);
+        });
+        data.backups.forEach(backup => {
+            this.backups.set(backup.keyId, backup);
+        });
+        // Restart rotation with new config
+        this.stopRotation();
+        this.startRotationTimer();
+    }
+    /**
+     * Destroy sensitive data
+     */
+    destroy() {
+        this.stopRotation();
+        this.keyHistory.clear();
+        this.backups.clear();
+        // Zero out current key
+        this.currentKey.secretKey.fill(0);
+    }
+}
+exports.KeyRotationManager = KeyRotationManager;
+/**
+ * Singleton instance for global key management
+ */
+let globalKeyManager = null;
+/**
+ * Get global key manager instance
+ */
+function getKeyManager(config) {
+    if (!globalKeyManager) {
+        globalKeyManager = new KeyRotationManager(config);
+    }
+    return globalKeyManager;
+}
+/**
+ * Destroy global key manager
+ */
+function destroyKeyManager() {
+    if (globalKeyManager) {
+        globalKeyManager.destroy();
+        globalKeyManager = null;
+    }
+}
+//# sourceMappingURL=key-rotation.js.map

package/dist/security/key-rotation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-rotation.js","sourceRoot":"","sources":["../../security/key-rotation.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiZA,sCAKC;AAKD,8CAKC;AAhaD,6CAA0C;AAC1C,mCAAgC;AAChC,+CAAiC;AAoCjC;;;GAGG;AACH,MAAa,kBAAkB;IAO3B,YAAY,SAAqC,EAAE;QAL3C,eAAU,GAA6B,IAAI,GAAG,EAAE,CAAC;QACjD,YAAO,GAAoC,IAAI,GAAG,EAAE,CAAC;QAKzD,IAAI,CAAC,MAAM,GAAG;YACV,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,WAAW;YAC3C,gBAAgB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS;YAC3C,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,IAAI;YACvB,GAAG,MAAM;SACZ,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,iBAAO,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5B,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,oBAAoB;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAgB;YAC1B,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE;YAC/C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,UAAU,EAAE,CAAC;YACb,SAAS,EAAE,KAAK;SACnB,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAErC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;IACL,CAAC;IAED;;OAEG;IACK,aAAa;QACjB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,OAAO,SAAS,IAAI,MAAM,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACK,kBAAkB;QACtB,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1B,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,cAAc;QAClB,MAAM,eAAe,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAErD,IAAI,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,SAAS,EAAE,CAAC;QACrB,CAAC;IACL,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,QAAqB;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC;QAErC,sBAAsB;QACtB,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,oDAAoD;QACpD,IAAI,QAAQ,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACI,SAAS;QACZ,qBAAqB;QACrB,MAAM,eAAe,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACrD,eAAe,CAAC,SAAS,GAAG,IAAI,CAAC;QACjC,eAAe,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvC,mBAAmB;QACnB,IAAI,CAAC,UAAU,GAAG,iBAAO,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,eAAe,CAAC,KAAK,OAAO,IAAI,CAAC,qBAAqB,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAE9F,OAAO,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,qBAAqB;QACzB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;aACpD,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;QAElD,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACI,aAAa;QAChB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,cAAc;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC9C,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,QAAQ,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,KAAa;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACjC,OAAO;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC;QAC9C,CAAC;QAED,kCAAkC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,4DAA4D;QAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9C,sBAAsB;QACtB,MAAM,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC;QAC1C,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QAEvE,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC/C,SAAS,GAAG,eAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAuB;YAC/B,KAAK;YACL,mBAAmB,EAAE,eAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACtE,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,mBAAmB,EAAE,aAAa;SACrC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,gBAAgB;QACpB,+EAA+E;QAC/E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAClD,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,eAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QAED,gDAAgD;QAChD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;aAC7B,MAAM,CAAC,6BAA6B,CAAC;aACrC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;aAC9B,MAAM,EAAE,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,KAAa;QACjC,0DAA0D;QAC1D,kDAAkD;QAClD,MAAM,eAAe,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACrD,IAAI,eAAe,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,UAAU,CAAC;QAC3B,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACI,iBAAiB,CAAC,KAAa,EAAE,aAAsB;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,YAAY,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,GAAG,GAAG,aAAa,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,aAAa,GAAG,eAAM,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;QAExE,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE1C,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,SAAS,GAAG,eAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAEzD,OAAO,iBAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACI,cAAc,CAAC,SAAiB;QACnC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;aACtC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACI,iBAAiB;QACpB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACI,aAAa;QAChB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACI,aAAa;QAChB,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACI,YAAY;QACf,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClC,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACnC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,cAAc;QACjB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9B,CAAC;IACL,CAAC;IAED;;OAEG;IACI,OAAO,CAAC,SAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC;QAE5B,kBAAkB;QAClB,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACxD,IAAI,QAAQ,CAAC,SAAS,GAAG,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACpD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;QACL,CAAC;IACL,CAAC;IAED;;OAEG;IACI,YAAY;QAKf,OAAO;YACH,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAChD,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;SAC7C,CAAC;IACN,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,IAInB;QACG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,mCAAmC;QACnC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACI,OAAO;QACV,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,uBAAuB;QACvB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;CACJ;AA7VD,gDA6VC;AAED;;GAEG;AACH,IAAI,gBAAgB,GAA8B,IAAI,CAAC;AAEvD;;GAEG;AACH,SAAgB,aAAa,CAAC,MAAmC;IAC7D,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpB,gBAAgB,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB;IAC7B,IAAI,gBAAgB,EAAE,CAAC;QACnB,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC3B,gBAAgB,GAAG,IAAI,CAAC;IAC5B,CAAC;AACL,CAAC"}

package/dist/{sdk/semantics → semantics}/analyzer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analyzer.d.ts","sourceRoot":"","sources":["../../../sdk/semantics/analyzer.ts"],"names":[],"mappings":""}
+{"version":3,"file":"analyzer.d.ts","sourceRoot":"","sources":["../../semantics/analyzer.ts"],"names":[],"mappings":""}

package/dist/{sdk/semantics → semantics}/analyzer.js.map

@@ -1 +1 @@
-{"version":3,"file":"analyzer.js","sourceRoot":"","sources":["../../../sdk/semantics/analyzer.ts"],"names":[],"mappings":""}
+{"version":3,"file":"analyzer.js","sourceRoot":"","sources":["../../semantics/analyzer.ts"],"names":[],"mappings":""}

package/dist/semantics/decoder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decoder.d.ts","sourceRoot":"","sources":["../../semantics/decoder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAE9B,qBAAa,kBAAkB;IAC3B,OAAO,CAAC,IAAI,CAA+B;IAEpC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG;IAIvC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG;CAgBvD"}

package/dist/semantics/decoder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decoder.js","sourceRoot":"","sources":["../../semantics/decoder.ts"],"names":[],"mappings":";;;AAEA,MAAa,kBAAkB;IAA/B;QACY,SAAI,GAAqB,IAAI,GAAG,EAAE,CAAC;IAsB/C,CAAC;IApBU,WAAW,CAAC,SAAiB,EAAE,GAAQ;QAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAEM,MAAM,CAAC,SAAiB,EAAE,KAAa;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,6DAA6D;QAC7D,wCAAwC;QACxC,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YAChC,IAAI,CAAC;gBACD,0CAA0C;gBAC1C,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACL,SAAS;YACb,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAvBD,gDAuBC"}

package/dist/{sdk/semantics → semantics}/graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../../sdk/semantics/graph.ts"],"names":[],"mappings":""}
+{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../semantics/graph.ts"],"names":[],"mappings":""}

package/dist/{sdk/semantics → semantics}/graph.js.map

@@ -1 +1 @@
-{"version":3,"file":"graph.js","sourceRoot":"","sources":["../../../sdk/semantics/graph.ts"],"names":[],"mappings":""}
+{"version":3,"file":"graph.js","sourceRoot":"","sources":["../../semantics/graph.ts"],"names":[],"mappings":""}

package/dist/semantics/idl-registry.d.ts

@@ -0,0 +1,8 @@
+import { Idl } from './types';
+export declare class IdlRegistry {
+    private readonly cache;
+    constructor();
+    fetchIdl(programId: string): Promise<Idl | null>;
+    registerIdl(programId: string, idl: Idl): void;
+}
+//# sourceMappingURL=idl-registry.d.ts.map

package/dist/semantics/idl-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idl-registry.d.ts","sourceRoot":"","sources":["../../semantics/idl-registry.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAgE9B,qBAAa,WAAW;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;;IAS5B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAsCtD,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI;CAGxD"}

package/dist/{sdk/semantics → semantics}/idl-registry.js

@@ -3,7 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.IdlRegistry = void 0;
 const logger_1 = require("../utils/logger");
 const idl_fetcher_1 = require("../registry/idl-fetcher");
-// Mock IDL suitable for System Program transfers
+const integrity_1 = require("../integrity");
+// Reference IDL suitable for System Program transfers
 const SYSTEM_IDL = {
     version: "0.1.0",
     name: "system_program",
@@ -21,7 +22,7 @@ const SYSTEM_IDL = {
         }
     ]
 };
-// Mock IDL for SPL Token
+// Reference IDL for SPL Token
 const SPL_TOKEN_IDL = {
     version: "0.1.0",
     name: "spl_token",
@@ -40,7 +41,7 @@ const SPL_TOKEN_IDL = {
         }
     ]
 };
-// Mock IDL for a generic DeFi swap
+// Reference IDL for a generic DeFi swap
 const DEFI_SWAP_IDL = {
     version: "1.0.0",
     name: "super_swap",
@@ -70,19 +71,34 @@ class IdlRegistry {
         this.cache.set("DeFi111111111111111111111111111111111111111", DEFI_SWAP_IDL);
     }
     async fetchIdl(programId) {
+        // Boundary check (Rule 10)
+        (0, integrity_1.enforce)(integrity_1.PublicKeySchema, programId, {
+            origin: integrity_1.DataOrigin.INTERNAL_LOGIC,
+            trust: integrity_1.DataTrust.TRUSTED,
+            createdAt: Date.now(),
+            owner: 'IdlRegistry'
+        });
         if (this.cache.has(programId)) {
-            return this.cache.get(programId);
+            return this.cache.get(programId) ?? null;
         }
         try {
             const fetcher = new idl_fetcher_1.OnChainIdlFetcher("https://api.mainnet-beta.solana.com");
-            const idl = await fetcher.fetchIdl(programId);
-            if (idl) {
+            const rawIdl = await fetcher.fetchIdl(programId);
+            if (rawIdl) {
+                // Boundary Enforcement: Chain -> Logic (Rule 10)
+                const enforced = (0, integrity_1.enforce)(integrity_1.IdlSchema, rawIdl, {
+                    origin: integrity_1.DataOrigin.CHAIN,
+                    trust: integrity_1.DataTrust.SEMI_TRUSTED,
+                    createdAt: Date.now(),
+                    owner: 'Solana RPC'
+                });
+                const idl = enforced.value;
                 this.cache.set(programId, idl);
                 return idl;
             }
         }
         catch (e) {
-            // Fallback to null
+            logger_1.logger.error(`[IdlRegistry] Failed to fetch IDL for ${programId}:`, e);
         }
         logger_1.logger.debug(`[IdlRegistry] IDL not found on-chain for ${programId}`);
         return null;

package/dist/semantics/idl-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idl-registry.js","sourceRoot":"","sources":["../../semantics/idl-registry.ts"],"names":[],"mappings":";;;AAAA,4CAAyC;AACzC,yDAA4D;AAC5D,4CAMsB;AAGtB,sDAAsD;AACtD,MAAM,UAAU,GAAQ;IACpB,OAAO,EAAE,OAAO;IAChB,IAAI,EAAE,gBAAgB;IACtB,YAAY,EAAE;QACV;YACI,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE;gBACN,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC7C,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC/C;YACD,IAAI,EAAE;gBACF,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE;aACpC;YACD,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SAC9B;KACJ;CACJ,CAAC;AAEF,8BAA8B;AAC9B,MAAM,aAAa,GAAQ;IACvB,OAAO,EAAE,OAAO;IAChB,IAAI,EAAE,WAAW;IACjB,YAAY,EAAE;QACV;YACI,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE;gBACN,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAChD,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;gBACrD,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;aACtD;YACD,IAAI,EAAE;gBACF,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE;aAClC;YACD,aAAa,EAAE,CAAC,CAAC,CAAC;SACrB;KACJ;CACJ,CAAC;AAEF,wCAAwC;AACxC,MAAM,aAAa,GAAQ;IACvB,OAAO,EAAE,OAAO;IAChB,IAAI,EAAE,YAAY;IAClB,YAAY,EAAE;QACV;YACI,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE;gBACN,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACxD,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;gBACrD,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;gBACrD,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;gBACnD,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;aACtD;YACD,IAAI,EAAE;gBACF,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE;gBAClC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE;aACnC;YACD,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;SAC1D;KACJ;CACJ,CAAC;AAEF,MAAa,WAAW;IAGpB;QACI,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,EAAE,UAAU,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,6CAA6C,EAAE,aAAa,CAAC,CAAC;QAC7E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,6CAA6C,EAAE,aAAa,CAAC,CAAC;IACjF,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,SAAiB;QACnC,2BAA2B;QAC3B,IAAA,mBAAO,EAAC,2BAAe,EAAE,SAAS,EAAE;YAChC,MAAM,EAAE,sBAAU,CAAC,cAAc;YACjC,KAAK,EAAE,qBAAS,CAAC,OAAO;YACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK,EAAE,aAAa;SACvB,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,+BAAiB,CAAC,qCAAqC,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAEjD,IAAI,MAAM,EAAE,CAAC;gBACT,iDAAiD;gBACjD,MAAM,QAAQ,GAAG,IAAA,mBAAO,EAAC,qBAAS,EAAE,MAAM,EAAE;oBACxC,MAAM,EAAE,sBAAU,CAAC,KAAK;oBACxB,KAAK,EAAE,qBAAS,CAAC,YAAY;oBAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,KAAK,EAAE,YAAY;iBACtB,CAAC,CAAC;gBAEH,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAuB,CAAC;gBAC7C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBAC/B,OAAO,GAAG,CAAC;YACf,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,eAAM,CAAC,KAAK,CAAC,yCAAyC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;QAED,eAAM,CAAC,KAAK,CAAC,4CAA4C,SAAS,EAAE,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IAChB,CAAC;IAEM,WAAW,CAAC,SAAiB,EAAE,GAAQ;QAC1C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;CACJ;AAnDD,kCAmDC"}

package/dist/semantics/types.d.ts

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+import { IdlSchema, IdlInstructionSchema, IdlAccountSchema, IdlTypeSchema, IdlEventSchema, IdlErrorSchema, IdlFieldSchema } from '../integrity';
+export type Idl = z.infer<typeof IdlSchema>;
+export type IdlInstruction = z.infer<typeof IdlInstructionSchema>;
+export type IdlAccount = z.infer<typeof IdlAccountSchema>;
+export type IdlType = z.infer<typeof IdlTypeSchema>;
+export type IdlEvent = z.infer<typeof IdlEventSchema>;
+export type IdlError = z.infer<typeof IdlErrorSchema>;
+export type IdlField = z.infer<typeof IdlFieldSchema>;
+//# sourceMappingURL=types.d.ts.map

package/dist/semantics/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../semantics/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACH,SAAS,EACT,oBAAoB,EACpB,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,cAAc,EACd,cAAc,EACjB,MAAM,cAAc,CAAC;AAEtB,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAC5C,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AACpD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/{sdk → semantics}/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../sdk/types.ts"],"names":[],"mappings":""}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../semantics/types.ts"],"names":[],"mappings":""}

package/dist/types.d.ts

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+import { LeakSchema, LeakTypeSchema, VisibilityScopeSchema, TransactionJSONSchema } from './integrity';
+export type LeakType = z.infer<typeof LeakTypeSchema>;
+export type VisibilityScope = z.infer<typeof VisibilityScopeSchema>;
+export type Leak = z.infer<typeof LeakSchema>;
+export interface GovernanceResult {
+    readonly status: "SURFACE_SCAN_PASSED" | "REGRESSION";
+    readonly unacceptedLiabilities: {
+        readonly leak: Leak;
+        readonly reason: string;
+    }[];
+    readonly remediationHints: readonly string[];
+    readonly privacyScore: number;
+}
+export type TransactionJSON = z.infer<typeof TransactionJSONSchema>;
+export interface GeyserTransactionEvents {
+    readonly signature: string;
+    readonly accountUpdates: {
+        readonly pubkey: string;
+        readonly data: string;
+    }[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACH,UAAU,EACV,cAAc,EACd,qBAAqB,EACrB,qBAAqB,EACxB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAE9C,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,GAAG,YAAY,CAAC;IACtD,QAAQ,CAAC,qBAAqB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnF,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,MAAM,WAAW,uBAAuB;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE;QACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACzB,EAAE,CAAC;CACP"}

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../types.ts"],"names":[],"mappings":""}

package/dist/utils/address.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Universal address-to-string conversion.
+ */
+export declare const toAddressString: (address: any) => string;
+/**
+ * Universal conversion to a PublicKey-compatible object.
+ * This ensures the object has toBase58() which internal web3.js methods often call.
+ */
+export declare const toPublicKey: (address: any) => any;
+//# sourceMappingURL=address.d.ts.map

package/dist/utils/address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.d.ts","sourceRoot":"","sources":["../../utils/address.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,eAAe,GAAI,SAAS,GAAG,KAAG,MAM9C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,WAAW,GAAI,SAAS,GAAG,KAAG,GAkB1C,CAAC"}

package/dist/utils/address.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toPublicKey = exports.toAddressString = void 0;
+const web3_js_1 = require("@solana/web3.js");
+/**
+ * Universal address-to-string conversion.
+ */
+const toAddressString = (address) => {
+    if (!address)
+        return '';
+    if (typeof address === 'string')
+        return address;
+    if (typeof address.toBase58 === 'function')
+        return address.toBase58();
+    if (typeof address.toString === 'function')
+        return address.toString();
+    return String(address);
+};
+exports.toAddressString = toAddressString;
+/**
+ * Universal conversion to a PublicKey-compatible object.
+ * This ensures the object has toBase58() which internal web3.js methods often call.
+ */
+const toPublicKey = (address) => {
+    if (!address)
+        return null;
+    // If it already has toBase58, it might work directly
+    if (typeof address.toBase58 === 'function')
+        return address;
+    try {
+        return new web3_js_1.PublicKey((0, exports.toAddressString)(address));
+    }
+    catch (e) {
+        // Fallback for objects that might be PublicKeys but lost their prototype
+        const str = (0, exports.toAddressString)(address);
+        return {
+            toBase58: () => str,
+            toString: () => str,
+            equals: (other) => (0, exports.toAddressString)(other) === str,
+            toBuffer: () => Buffer.from([]) // Dummy buffer as some methods might call it
+        };
+    }
+};
+exports.toPublicKey = toPublicKey;
+//# sourceMappingURL=address.js.map

package/dist/utils/address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.js","sourceRoot":"","sources":["../../utils/address.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAE5C;;GAEG;AACI,MAAM,eAAe,GAAG,CAAC,OAAY,EAAU,EAAE;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;IACtE,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;IACtE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC,CAAC;AANW,QAAA,eAAe,mBAM1B;AAEF;;;GAGG;AACI,MAAM,WAAW,GAAG,CAAC,OAAY,EAAO,EAAE;IAC7C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,qDAAqD;IACrD,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC;IAE3D,IAAI,CAAC;QACD,OAAO,IAAI,mBAAS,CAAC,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,yEAAyE;QACzE,MAAM,GAAG,GAAG,IAAA,uBAAe,EAAC,OAAO,CAAC,CAAC;QACrC,OAAO;YACH,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG;YACnB,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG;YACnB,MAAM,EAAE,CAAC,KAAU,EAAE,EAAE,CAAC,IAAA,uBAAe,EAAC,KAAK,CAAC,KAAK,GAAG;YACtD,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,6CAA6C;SAChF,CAAC;IACN,CAAC;AACL,CAAC,CAAC;AAlBW,QAAA,WAAW,eAkBtB"}

package/dist/utils/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../utils/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAI1C,MAAM,WAAW,SAAS;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,YAAY;IACrB,OAAO,CAAC,MAAM,CAAY;;IAWnB,SAAS,IAAI,MAAM;IAInB,SAAS,IAAI,OAAO,GAAG,IAAI;IAkB3B,WAAW,IAAI,MAAM,GAAG,SAAS;CAG3C"}

package/dist/utils/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../utils/config.ts"],"names":[],"mappings":";;;AAAA,6CAA0C;AAW1C,MAAa,YAAY;IAGrB;QACI,IAAI,CAAC,MAAM,GAAG;YACV,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,qCAAqC;YACpE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;YACjC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;YAC7C,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;SAC7C,CAAC;IACN,CAAC;IAEM,SAAS;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC9B,CAAC;IAEM,SAAS;QACZ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAExC,IAAI,CAAC;YACD,wBAAwB;YACxB,6BAA6B;YAC7B,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxC,OAAO,iBAAO,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,iBAAiB;YACjB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7B,OAAO,iBAAO,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAEM,WAAW;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;IACrC,CAAC;CACJ;AArCD,oCAqCC"}

package/dist/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../utils/logger.ts"],"names":[],"mappings":"AACA,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,eAAO,MAAM,MAAM,gBAcjB,CAAC"}

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../utils/logger.ts"],"names":[],"mappings":";;;;;;AACA,sDAA8B;AAEjB,QAAA,MAAM,GAAG,iBAAO,CAAC,YAAY,CAAC;IACvC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM;IACtC,MAAM,EAAE,iBAAO,CAAC,MAAM,CAAC,OAAO,CAC1B,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAC1B,iBAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CACxB;IACD,UAAU,EAAE;QACR,IAAI,iBAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAC3B,MAAM,EAAE,iBAAO,CAAC,MAAM,CAAC,OAAO,CAC1B,iBAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EACzB,iBAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAC1B;SACJ,CAAC;KACL;CACJ,CAAC,CAAC"}