Skip to content

feat: Protocol Fee, Security Hardening & Solita SDK Refactor#43

Open
onspeedhp wants to merge 26 commits intomainfrom
feat/protocol-fee-and-secp256r1-fix
Open

feat: Protocol Fee, Security Hardening & Solita SDK Refactor#43
onspeedhp wants to merge 26 commits intomainfrom
feat/protocol-fee-and-secp256r1-fix

Conversation

@onspeedhp
Copy link
Copy Markdown
Member

@onspeedhp onspeedhp commented Mar 23, 2026

🚀 Comprehensive Update: Protocol Fee, Security Hardening & Solita SDK

This PR consolidates the implementation of global contract configuration, protocol fee collection mechanics, critical audit security hardening, and a complete revamp/E2E implementation of the Solita Client SDK framework.


🛠️ Key Modules & Changes

🦀 1. Rust Smart Contract (Core & Security)

  • Global Config & Treasury:
    • Added Config PDA and Treasury Shards mechanics for sharded fee collection.
    • Implemented collect_protocol_fee applied to initialization and action processors.
  • New Lifecycles: Added CloseWallet and CloseSession processors incorporating rent refunds procedures securely.
  • Audit Defenses & hardening:
    • Resolved SweepTreasury DoS, Config Spoofing, and Lamport Burn vulnerabilities.
    • Replay Protection: Appended wallet_pda strictly into payload hashes (ExtendedData) ensuring signatures bound strongly to local instance contexts.
    • Hardened accounts validation ordering sync outputs.

📜 2. TypeScript SDK & Test Infrastructure (solita-client)

  • Monorepo Split Layouts: Synchronized Shank-IDL dual-path exports for concurrent SDK generation triggers.
  • High-Level Client Builder wrapper: Introduced smarter setup defaults, simplified instructions packing, and native wrapper pipelines ergonomics.
  • Secp256r1 Native Mocking battery: Standardized use of Web Crypto API for low-S Passkey signature generation natively in place of dense overrides.
  • Suite Restructuring: Subdivided testing benchmarks into 8 granular feature-based files (01- config through 08-security) matching 70/71 passes sequences securely.

📚 3. Manuals & Docs

  • updated Architecture.md, README.md, and Guidelines bundles mapping fees, security checkpoints updates synchronized.

onspeedhp added 26 commits March 9, 2026 16:31
…n instruction account validation by reordering instruction accounts.
…ith a new client method, and remove outdated local test workflow documentation.
…utability and ordering, and remove `AccountDiscriminator` type.
…ers, setup streamline, and English translate
- Rename findWalletByOwner to findWalletsByEd25519Pubkey
- Rename findWalletByCredentialHash to findWalletsByCredentialHash
- Standardize addAuthority and transferOwnership param names (newAuthType, newAuthPubkey, newCredentialHash)
- Update all test files to use the new names
- Fix hardcoded origin in Secp256r1 WebAuthn payload builder
- Enforce stricter TypeScript boundaries on wrapper APIs
- Add comprehensive JSDocs mappings matching C-Struct byte offsets
- Refine naming conventions across pdas and builders
- Improve security, ownership, and execution tests
- All 69 E2E tests maintain 100% pass rate
@onspeedhp onspeedhp changed the title feat: Protocol Fee, Secp256r1 Support & SDK Refactoring feat: Protocol Fee & Secp256r1 Verification Fixes Mar 24, 2026
@onspeedhp onspeedhp changed the title feat: Protocol Fee & Secp256r1 Verification Fixes feat: Protocol Fee, Security Hardening & Solita SDK Refactor Mar 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant