Feature Gate Multisig Tool

A command-line tool for rapidly provisioning minimal Squads multisig setups specifically designed for Solana feature gate governance. This tool enables parties to create multisig wallets where the default vault address can be mapped to feature gate account addresses, allowing collective voting on whether new Solana features should be implemented.

🎯 Purpose

This tool is designed to streamline the creation of governance multisigs for Solana feature gates. Feature gates are mechanisms that control the activation of new blockchain features, and this tool enables decentralized governance by allowing multiple parties to collectively vote on feature implementations through a multisig structure.

✨ Key Features

🚀 Rapid Provisioning: Quickly create Squads multisig wallets with minimal configuration
🌐 Multi-Network Deployment: Deploy the same configuration across multiple Solana networks with automatic or manual deployment modes
👥 Member Management: Interactive collection of member public keys with automatic permission assignment
📋 Persistent Configuration: Same create key across deployments ensures consistent addresses
🎨 Rich CLI Experience: Colored output and professional table formatting
📊 Comprehensive Reporting: Detailed deployment summary with all addresses and transaction signatures

🛠 Installation

# Clone the repository
git clone https://github.com/Squads-Protocol/feature-gate-multisig.git
cd feature-gate-multisig

# Build the project
cargo build --release

# The binary will be available at ./target/release/feature-gate-multisig-tool

📖 Usage

Command Line Arguments

feature-gate-multisig-tool [COMMAND]

Commands

Command	Description
`create`	Create a new multisig wallet
`show <ADDRESS>`	Show feature multisig details for a given address
`interactive`	Start interactive mode (default when no command specified)
`config`	Show current configuration including networks array

Create Command Options

feature-gate-multisig-tool create [OPTIONS]

Options:
  -t, --threshold <THRESHOLD>    Number of required signatures (will be prompted if not provided)
  -s, --signers <SIGNERS>       Signers (currently unused - members are collected interactively)
  -k, --keypair <KEYPAIR>       Keypair file path for paying transaction fees (e.g., ~/.config/solana/id.json)
  -h, --help                    Print help information

Examples:

# Create with specific fee payer
feature-gate-multisig-tool create --keypair ~/.config/solana/my-wallet.json

# Create with threshold and fee payer
feature-gate-multisig-tool create --threshold 2 --keypair ~/.config/solana/my-wallet.json

# Create interactively (will prompt for fee payer)
feature-gate-multisig-tool create

Config Command Example

View your current configuration including the networks array:

feature-gate-multisig-tool config

Output:

📋 Configuration:
  Config file: "/Users/user/.feature-gate-multisig-tool/config.json"
  Default threshold: 2
  Fee payer keypair: ~/.config/solana/id.json
  Saved networks: 3 networks
    Network 1: https://api.devnet.solana.com
    Network 2: https://api.testnet.solana.com
    Network 3: https://api.mainnet-beta.solana.com
  Saved members: 2 members
    Member 1: 9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM
    Member 2: 7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU

Show Command Example

Query details of an existing multisig with smart network discovery:

feature-gate-multisig-tool show GWVKaMd1faaxaH9HozFWikNQ9YUCiesEoNdKsfNSxVDD

Output:

🔍 Fetching multisig details...

Available networks to search:
  1: https://api.devnet.solana.com
  2: https://api.mainnet-beta.solana.com

🌐 Trying network: https://api.devnet.solana.com
✅ Found account on: https://api.devnet.solana.com

📡 Using network: https://api.devnet.solana.com
🎯 Multisig address: GWVKaMd1faaxaH9HozFWikNQ9YUCiesEoNdKsfNSxVDD

📊 Account data length: 198 bytes
✅ Multisig deserialized successfully!

📋 MULTISIG DETAILS
═══════════════════════════════════════════════════════════════════════════════

╭─────────────────────────┬──────────────────────────────────────────────╮
│ Property                │ Value                                        │
├─────────────────────────┼──────────────────────────────────────────────┤
│ Multisig Address        │ GWVKaMd1faaxaH9HozFWikNQ9YUCiesEoNdKsfNSxVDD │
│ Threshold               │ 1 of 2                                       │
│ Default Vault Address   │ G39AVSauH1gyYDgbWp4Bqw8njUS7e1KQLei5YbQypWyU │
╰─────────────────────────┴──────────────────────────────────────────────╯

👥 MEMBERS (2 total)
╭───┬──────────────────────────────────────────────┬─────────────────────────┬─────────╮
│ # │ Public Key                                   │ Permissions             │ Bitmask │
├───┼──────────────────────────────────────────────┼─────────────────────────┼─────────┤
│ 1 │ seanNDjjAuqnPjschE1sPxLVtD9amiT7mzNjsRYQY4E  │ Initiate, Vote, Execute │ 7       │
│ 2 │ GmRj6WF6J5aoBDmT1QBubAQv6L7LsTxo6VhnF6RGfqro │ Initiate                │ 1       │
╰───┴──────────────────────────────────────────────┴─────────────────────────┴─────────╯

🎮 Interactive Mode

The tool is designed to work primarily in interactive mode, providing a guided experience:

1. Configuration Setup

Config Review: Checks for existing saved configuration and asks for confirmation
Fee Payer Setup: Prompts for fee payer keypair file path with intelligent defaults
Member Loading: If config exists, loads saved members with full permissions
Interactive Fallback: If no config or user declines, collects members interactively
Contributor Generation: Always generates fresh ephemeral contributor keypair (never saved)
Create Key: Creates persistent key for consistent addresses across networks

2. Member Collection

Contributor is automatically added with Initiate-only permissions (bitmask 1)
Interactive prompts to add additional members
Additional members receive full permissions with bitmask 7 (Initiate | Vote | Execute)
Real-time validation of public key formats

3. Multi-Network Deployment

The tool supports two deployment modes:

🔄 Automatic Deployment Mode

Configure multiple networks in your config file using the networks array
Deploy to all saved networks automatically with a single confirmation
Consistent addresses across all networks using the same create key

⚙️ Manual Deployment Mode

Enter RPC endpoints one by one during deployment
Choose to continue or stop after each deployment
Flexible for ad-hoc deployments to custom networks

📦 Pre-deployment Preview For each deployment, the tool shows:

Create key and contributor key
Derived multisig PDA and vault PDA (index 0)
All member keys with their permissions

4. Deployment Summary

Professional summary tables showing:

Configuration details (create key, threshold, members)
Members & permissions table
Network deployments with addresses
Transaction signatures for each deployment

🏗 How It Works

Multisig Creation Process

Key Generation: Creates persistent create key and contributor keypair
Member Setup: Collects member public keys interactively
Address Derivation: Calculates multisig and vault PDAs using Squads program
Transaction Building: Constructs MultisigCreateV2 instruction with:
- 8-byte discriminator
- Borsh-serialized arguments
- Proper account metadata
Multi-Network Support: Deploys identical configuration across different networks
Confirmation: Provides comprehensive deployment summary

Key Components

Create Key: Persistent across deployments, ensures consistent addresses
Multisig PDA: Derived from create key using Squads program seeds
Vault PDA: Default vault (index 0) that can be mapped to feature gate addresses
Members: Contributor receives Initiate-only permissions; additional members receive full permissions for governance participation

🎯 Feature Gate Integration

The primary goal is to create multisig structures for Solana feature gate governance:

Feature Gate Mapping

The default vault address (index 0) serves as the governance account
This vault can be mapped to specific feature gate account addresses
Enables decentralized voting on feature activation/deactivation

Governance Workflow

Multisig Creation: Use this tool to create governance multisig
Feature Gate Mapping: Map vault address to feature gate account
Proposal Creation: Members can initiate proposals for feature changes
Voting Process: Members vote using their multisig permissions
Execution: Approved changes are executed through the multisig

🌐 Network Support

Supports deployment to any Solana network:

Mainnet Beta: https://api.mainnet-beta.solana.com
Devnet: https://api.devnet.solana.com (default)
Testnet: https://api.testnet.solana.com
Custom RPC: Any valid Solana RPC endpoint

📋 Configuration

The tool maintains configuration in ~/.feature-gate-multisig-tool/config.json:

Single Network Configuration (Legacy)

{
  "threshold": 2,
  "members": [
    "9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM",
    "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU"
  ],
  "network": "https://api.devnet.solana.com"
}

Multi-Network Configuration (Recommended)

{
  "threshold": 2,
  "members": [
    "9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM",
    "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU",
    "4Qkev8aNZcqFNSRhQzwyLMFSsi94jHqE8WNVTJzTP6kQ"
  ],
  "networks": [
    "https://api.devnet.solana.com",
    "https://api.testnet.solana.com",
    "https://api.mainnet-beta.solana.com"
  ],
  "network": "https://api.devnet.solana.com"
}

Configuration Features

Automatic Saving: After successful deployments, member lists and threshold are saved
Config Review: On startup, shows existing configuration and asks if you want to use it
Member Preloading: Saved members are automatically loaded with full permissions (Initiate, Vote, Execute)
Network Array Support: Configure multiple networks for automatic deployment using the networks array
Deployment Mode Selection: Choose between automatic deployment to saved networks or manual entry
Contributor Exclusion: The ephemeral contributor key is never saved to config
Backward Compatibility: Supports legacy single network field alongside new networks array

Config Example

A config.example.json file is provided showing the expected format:

{
  "threshold": 2,
  "members": [
    "9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM",
    "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU",
    "4Qkev8aNZcqFNSRhQzwyLMFSsi94jHqE8WNVTJzTP6kQ"
  ],
  "network": "https://api.devnet.solana.com",
  "fee_payer_path": "~/.config/solana/id.json"
}

💳 Fee Payer Support

The tool now supports configurable fee payer keypairs for transaction costs:

Command Line Usage

# Specify fee payer directly via CLI
feature-gate-multisig-tool create --keypair ~/.config/solana/my-wallet.json

# Interactive mode will prompt for fee payer path
feature-gate-multisig-tool interactive

Configuration Support

Config Storage: Fee payer path is saved in ~/.feature-gate-multisig-tool/config.json
Interactive Prompts: Fee payer keypair path is requested during interactive multisig creation
Fallback Logic: If no fee payer is specified, the contributor keypair pays transaction fees
Tilde Expansion: Paths starting with ~/ are automatically expanded to home directory

🎯 Advanced Functionality

Transaction and Proposal Creation

The tool includes advanced functionality for creating multisig transactions and proposals:

// Create transaction and proposal message for multisig governance
pub fn create_transaction_and_proposal_message(
    program_id: Option<&Pubkey>,
    fee_payer_pubkey: &Pubkey,
    contributor_pubkey: &Pubkey,
    multisig_address: &Pubkey,
    transaction_index: u64,          // Use 1 for fresh multisigs
    vault_index: u8,                 // Use 0 for default vault
    transaction_message: VaultTransactionMessage,
    priority_fee: Option<u32>,
    recent_blockhash: Hash,
) -> eyre::Result<(Message, Pubkey, Pubkey)>

Key Features:

Dual Instructions: Creates both transaction (index 1) and proposal (index 1) in a single message
PDA Derivation: Automatically derives transaction and proposal PDAs using Squads program logic
Priority Fee Support: Optional compute budget instruction for transaction prioritization
Message-Only: Returns Solana Message object for flexible signing and sending

Smart Network Discovery

The tool now intelligently searches across multiple networks:

# Tool automatically tries all configured networks to find multisig
feature-gate-multisig-tool show GWVKaMd1faaxaH9HozFWikNQ9YUCiesEoNdKsfNSxVDD

Network Discovery Features:

Multi-Network Search: Tries all configured networks in order
Real-time Feedback: Shows progress with colored status indicators
Error Recovery: Continues searching if account not found on one network
Performance Optimized: Stops on first successful network discovery

🔧 Technical Details

Dependencies

Solana SDK: Blockchain interaction
Squads Protocol: Multisig program integration
Borsh: Serialization/deserialization
Colored: Terminal output formatting
Tabled: Professional table formatting
Inquire: Interactive prompts
Dialoguer: Confirmation dialogs
Eyre: Error handling
Dirs: Cross-platform directory handling

Testing Infrastructure

The project includes comprehensive test coverage with modern testing practices:

# Run all tests
cargo test

# Run specific test module
cargo test provision::tests

# Run with output
cargo test -- --nocapture

Test Features:

Randomized Keys: Tests use Pubkey::new_unique() for better isolation and reliability
Comprehensive Coverage: 7 test cases covering serialization, PDA derivation, and message creation
Real-world Scenarios: Tests both priority fee and no-fee transaction scenarios
Deterministic Logic: While using random keys, test logic remains deterministic and reliable
Multi-run Stability: Tests pass consistently across multiple executions

Test Modules:

test_create_transaction_data_serialization - Transaction instruction format validation
test_create_proposal_data_serialization - Proposal instruction format validation
test_vault_transaction_message_serialization - Transaction message payload testing
test_pda_derivation - Program Derived Address generation verification
test_account_metas_generation - Account metadata structure validation
test_create_transaction_and_proposal_message - Full message creation with priority fees
test_create_transaction_and_proposal_message_no_priority_fee - Message creation optimization

Key Addresses Generated

Multisig PDA: Main multisig account
Vault PDA (index 0): Default vault for feature gate mapping
Program Config: Squads program configuration account

🚨 Important Notes

Persistent Keys: The same create key is used across all deployments
Permission Model: Contributor has Initiate-only (bitmask 1); additional members have full permissions (bitmask 7)
Network Consistency: Identical addresses across different networks

📈 Recent Improvements

v0.1.0+ Features

✅ Enhanced Fee Payer Support: CLI args, interactive prompts, and config persistence
✅ Smart Network Discovery: Multi-network search with intelligent fallback
✅ Transaction/Proposal Creation: Advanced multisig governance message building
✅ Improved Testing: Randomized test keys for better reliability and isolation
✅ Better Error Handling: Enhanced error messages and recovery scenarios
✅ Config Enhancements: Fee payer path storage and tilde expansion support

Performance & Reliability

Optimized Network Queries: Stops searching on first successful network
Deterministic Testing: Consistent test results across multiple runs
Memory Efficient: Minimal resource usage for transaction building
Cross-platform: Works on macOS, Linux, and Windows

Developer Experience

Comprehensive Documentation: Updated README with all new features
Rich CLI Help: Detailed help text for all commands and options
Error Guidance: Helpful hints for common issues and solutions
Test Coverage: 100% test coverage for critical transaction building logic
Transaction Fees: Requires SOL for transaction fees on target networks
Security: Generated keys are ephemeral - save important addresses from output

📊 Example Output

Automatic Deployment to Multiple Networks

🚀 Creating feature gate multisig configuration

📋 Found existing configuration:
  Threshold: 2
  Saved networks: 3 networks
    Network 1: https://api.devnet.solana.com
    Network 2: https://api.testnet.solana.com
    Network 3: https://api.mainnet-beta.solana.com
  Saved members: 2 members
    Member 1: 9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM
    Member 2: 7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU

✅ Use these saved members and settings? Yes

🔄 Deploy to all saved networks automatically? Yes

🌐 Automatic deployment mode - deploying to 3 networks

✅ Using saved configuration

📋 Final Configuration:
  Contributor public key: 4Qkev8aNZcqFNSRhQzwyLMFSsi94jHqE8WNVTJzTP6kQ
  Create key: 8xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU
  Threshold: 2

👥 All Members:
  ✓ Contributor: 4Qkev8aNZcqFNSRhQzwyLMFSsi94jHqE8WNVTJzTP6kQ (Initiate)
  ✓ Member 1: 9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM (Initiate, Vote, Execute)
  ✓ Member 2: 7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU (Initiate, Vote, Execute)

🎉 DEPLOYMENT SUMMARY
════════════════════════════════════════════════════════════════════════════════

📋 Configuration:
  Create Key: 4Qkev8aNZcqFNSRhQzwyLMFSsi94jHqE8WNVTJzTP6kQ
  Threshold: 2
  Total Members: 2

👥 Members & Permissions:
╭─────┬────────────────────────────────────────────────┬─────────────────────────╮
│ #   │ Public Key                                     │ Permissions             │
├─────┼────────────────────────────────────────────────┼─────────────────────────┤
│ 1   │ 7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU (Contributor) │ Initiate               │
│ 2   │ 9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM   │ Initiate, Vote, Execute │
╰─────┴────────────────────────────────────────────────┴─────────────────────────╯

🌐 Network Deployments:
╭─────┬───────────────────────────────────────┬──────────────────────────────────────────────────┬──────────────────────────────────────────────────┬─────────────────────────────────────────────╮
│ #   │ Network                               │ Multisig Address                                 │ Vault Address                                    │ Transaction Signature                       │
├─────┼───────────────────────────────────────┼──────────────────────────────────────────────────┼──────────────────────────────────────────────────┼─────────────────────────────────────────────┤
│ 1   │ https://api.devnet.solana.com         │ 8xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU     │ 4Qkev8aNZcqFNSRhQzwyLMFSsi94jHqE8WNVTJzTP6kQ     │ 5J7...xyz                                   │
│ 2   │ https://api.testnet.solana.com        │ 8xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU     │ 4Qkev8aNZcqFNSRhQzwyLMFSsi94jHqE8WNVTJzTP6kQ     │ 9B2...abc                                   │
│ 3   │ https://api.mainnet-beta.solana.com   │ 8xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU     │ 4Qkev8aNZcqFNSRhQzwyLMFSsi94jHqE8WNVTJzTP6kQ     │ 3F8...def                                   │
╰─────┴───────────────────────────────────────┴──────────────────────────────────────────────────┴──────────────────────────────────────────────────┴─────────────────────────────────────────────╯

✅ Successfully deployed to 3 network(s)!

💾 Configuration saved for future use

Manual Network Entry Mode

🚀 Creating feature gate multisig configuration

🔄 Manual network entry mode

Enter RPC URL for deployment: https://api.devnet.solana.com

🌐 Deploying to: https://api.devnet.solana.com
📦 All public keys for this deployment:
  Create key: 8xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU
  Contributor: 4Qkev8aNZcqFNSRhQzwyLMFSsi94jHqE8WNVTJzTP6kQ
  Multisig PDA: 7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU
  Vault PDA (index 0): 9WzDXwBbmkg8ZTbNMqUxvQRAyrZzDsGYdLVL9zYtAWWM

✅ Deployment successful on https://api.devnet.solana.com

Deploy to another network with the same configuration? No

🤝 Contributing

Contributions are welcome! Please ensure:

Code follows Rust conventions
All tests pass
Documentation is updated for new features
Security best practices are maintained

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

The MIT License provides:

✅ Commercial use - Use this tool in commercial projects
✅ Modification - Modify and adapt the code for your needs
✅ Distribution - Share and distribute the tool
✅ Private use - Use privately without restrictions
ℹ️ Attribution - Include the original license notice
⚠️ No warranty - Software provided "as is" without warranty

🆘 Support

For support, please:

Check existing issues in the repository
Create a new issue with detailed information
Include relevant logs and configuration details

Name		Name	Last commit message	Last commit date
Latest commit History 7 Commits
src		src
.gitignore		.gitignore
Cargo.lock		Cargo.lock
Cargo.toml		Cargo.toml
LICENSE		LICENSE
README.md		README.md
config.example.json		config.example.json

License

Squads-Protocol/feature-gate-multisig

Folders and files

Latest commit

History

Repository files navigation