@debridge-finance/borderless-validation-sdk 0.0.0-dev-dee2389

package/dist/cjs/validations/solana-op-budget.js

@@ -0,0 +1,293 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateSolanaBudgetInstructions = validateSolanaBudgetInstructions;
+const types_1 = require("../types");
+const address_1 = require("../helpers/address");
+const constants_1 = require("../helpers/constants");
+const solana_instruction_1 = require("../helpers/solana-instruction");
+const programs_1 = require("../whitelists/solana/programs");
+const TOKEN_PROGRAMS = new Set([programs_1.SPL_TOKEN_PROGRAM, programs_1.SPL_TOKEN_2022_PROGRAM]);
+// =============================================
+// Entry point
+// =============================================
+// Validates Budget (approve) instructions within a decoded Solana transaction.
+// Called for both Transaction (AA=false) and SignTransaction (AA=true) actions.
+function validateSolanaBudgetInstructions(action, resolvedInstructions, actionPath, request, trades, realChainId, quoteMode, srcChainAuthorityAddress, envConfig) {
+    const hasBudgetAction = action.actions.includes(types_1.SolanaActionOperation.Budget);
+    // CRITICAL: Budget forbidden when approveAmountFlag === "none"
+    if (hasBudgetAction && request.approveAmountFlag === types_1.ApproveAmountFlag.None) {
+        return [{
+                code: types_1.ViolationCode.SolanaBudgetForbiddenWithApproveNone,
+                message: "Budget action is forbidden when approveAmountFlag=\"none\"",
+                path: `${actionPath}.actions`,
+            }];
+    }
+    // Find all approve instructions in the transaction
+    const approveInstructions = collectApproveInstructions(resolvedInstructions, envConfig.solanaIntentProgram);
+    // HIGH: if actions[] contains "Budget" at least one approve instruction must be present
+    if (hasBudgetAction && approveInstructions.length === 0) {
+        return [{
+                code: types_1.ViolationCode.SolanaBudgetNoApproveInstruction,
+                message: "actions[] contains \"Budget\" but no approve instruction found in transaction",
+                path: `${actionPath}.data.data`,
+            }];
+    }
+    // If no budget action declared and no approve instructions — nothing to validate
+    if (!hasBudgetAction)
+        return [];
+    const violations = [];
+    for (let i = 0; i < approveInstructions.length; i++) {
+        const approve = approveInstructions[i];
+        const ixLabel = `approve instruction #${i}`;
+        if (approve.kind === solana_instruction_1.ApproveKind.Classic) {
+            violations.push(...validateClassicApprove(approve, actionPath, ixLabel, request, trades, realChainId, quoteMode, srcChainAuthorityAddress, envConfig));
+        }
+        else {
+            violations.push(...validateCustomApprove(approve, actionPath, ixLabel, request, trades, realChainId, quoteMode, srcChainAuthorityAddress, envConfig));
+        }
+    }
+    return violations;
+}
+// =============================================
+// Collect approve instructions
+// =============================================
+function collectApproveInstructions(instructions, intentProgram) {
+    const result = [];
+    for (const ix of instructions) {
+        if ((0, solana_instruction_1.isClassicApprove)(ix)) {
+            result.push((0, solana_instruction_1.decodeClassicApprove)(ix));
+        }
+        else if ((0, solana_instruction_1.isCustomApprove)(ix, intentProgram)) {
+            result.push((0, solana_instruction_1.decodeCustomApprove)(ix));
+        }
+    }
+    return result;
+}
+// =============================================
+// Classic SPL Token Approve validation
+// =============================================
+function validateClassicApprove(approve, actionPath, ixLabel, request, trades, realChainId, quoteMode, srcChainAuthorityAddress, envConfig) {
+    const violations = [];
+    // CRITICAL: programId (SPL Token or Token-2022) and discriminator (4 = Approve)
+    // are already verified by isClassicApprove() before this function is called.
+    // CRITICAL: delegate must be whitelisted AllowanceHolder
+    if (approve.delegate !== envConfig.solanaAllowanceHolder) {
+        violations.push({
+            code: types_1.ViolationCode.SolanaBudgetClassicDelegateNotWhitelisted,
+            message: `${ixLabel}: delegate is not a whitelisted AllowanceHolder`,
+            path: `${actionPath}.data.data`,
+            actual: approve.delegate,
+        });
+    }
+    // HIGH: owner must equal srcChainAuthorityAddress (execution mode only)
+    if (!quoteMode && srcChainAuthorityAddress) {
+        if (!(0, address_1.addressEquals)(realChainId, approve.owner, srcChainAuthorityAddress)) {
+            violations.push({
+                code: types_1.ViolationCode.SolanaBudgetClassicOwnerMismatch,
+                message: `${ixLabel}: owner must equal srcChainAuthorityAddress`,
+                path: `${actionPath}.data.data`,
+                expected: srcChainAuthorityAddress,
+                actual: approve.owner,
+            });
+        }
+    }
+    // CRITICAL: ATA must correspond to the trade token (execution mode only)
+    if (!quoteMode && srcChainAuthorityAddress) {
+        violations.push(...validateClassicAta(approve, actionPath, ixLabel, trades, realChainId, srcChainAuthorityAddress));
+    }
+    // CRITICAL: approve amount must match approveAmountFlag
+    violations.push(...validateApproveAmount(approve.amount, actionPath, ixLabel, request, trades, realChainId, types_1.ViolationCode.SolanaBudgetClassicAmountMismatch, false));
+    return violations;
+}
+// CRITICAL: Verify ATA matches expected (mint, owner, tokenProgram)
+function validateClassicAta(approve, actionPath, ixLabel, trades, realChainId, srcChainAuthorityAddress) {
+    // Try each trade's srcChainTokenIn as mint — if any matches, the ATA is valid
+    const expectedAtas = [];
+    for (const trade of trades) {
+        try {
+            const expectedAta = (0, solana_instruction_1.deriveAta)(srcChainAuthorityAddress, trade.srcChainTokenIn, approve.tokenProgramId);
+            if ((0, address_1.addressEquals)(realChainId, approve.ataAddress, expectedAta)) {
+                return [];
+            }
+            expectedAtas.push({ mint: trade.srcChainTokenIn, ata: expectedAta });
+        }
+        catch {
+            // Invalid PublicKey — skip this trade, continue checking others
+            continue;
+        }
+    }
+    return [{
+            code: types_1.ViolationCode.SolanaBudgetClassicAtaMismatch,
+            message: `${ixLabel}: ATA does not match any trade token`
+                + " (derived from srcChainTokenIn, srcChainAuthorityAddress, tokenProgram)",
+            path: `${actionPath}.data.data`,
+            expected: expectedAtas,
+            actual: approve.ataAddress,
+        }];
+}
+// =============================================
+// Custom approve (approveProtocolTransfers) validation
+// =============================================
+function validateCustomApprove(approve, actionPath, ixLabel, request, trades, realChainId, quoteMode, srcChainAuthorityAddress, envConfig) {
+    const violations = [];
+    // CRITICAL: programId (DEBRIDGE_INTENT_PROGRAM) and discriminator (8-byte Anchor hash)
+    // are already verified by isCustomApprove() before this function is called.
+    // HIGH: maker must equal srcChainAuthorityAddress (execution mode only)
+    if (!quoteMode && srcChainAuthorityAddress) {
+        if (!(0, address_1.addressEquals)(realChainId, approve.maker, srcChainAuthorityAddress)) {
+            violations.push({
+                code: types_1.ViolationCode.SolanaBudgetCustomMakerMismatch,
+                message: `${ixLabel}: maker must equal srcChainAuthorityAddress`,
+                path: `${actionPath}.data.data`,
+                expected: srcChainAuthorityAddress,
+                actual: approve.maker,
+            });
+        }
+    }
+    // MEDIUM: state PDA must match expected derivation
+    if (!(0, address_1.addressEquals)(realChainId, approve.statePda, envConfig.solanaExpectedStatePdaBase58)) {
+        violations.push({
+            code: types_1.ViolationCode.SolanaBudgetCustomStatePdaMismatch,
+            message: `${ixLabel}: state PDA does not match expected derivation`,
+            path: `${actionPath}.data.data`,
+            expected: envConfig.solanaExpectedStatePdaBase58,
+            actual: approve.statePda,
+        });
+    }
+    // CRITICAL: tokenProgram must be SPL Token or Token-2022
+    if (!TOKEN_PROGRAMS.has(approve.tokenProgramId)) {
+        violations.push({
+            code: types_1.ViolationCode.SolanaBudgetCustomTokenProgramInvalid,
+            message: `${ixLabel}: tokenProgram must be SPL Token or Token-2022`,
+            path: `${actionPath}.data.data`,
+            expected: [...TOKEN_PROGRAMS],
+            actual: approve.tokenProgramId,
+        });
+    }
+    // MEDIUM: vec_length must equal number of remaining accounts
+    if (approve.vecLength !== approve.ataAddresses.length) {
+        violations.push({
+            code: types_1.ViolationCode.SolanaBudgetCustomVecLengthMismatch,
+            message: `${ixLabel}: vec_length (${approve.vecLength})`
+                + ` does not match remaining accounts count (${approve.ataAddresses.length})`,
+            path: `${actionPath}.data.data`,
+            expected: approve.ataAddresses.length,
+            actual: approve.vecLength,
+        });
+    }
+    // CRITICAL: each ATA must correspond to a trade token (execution mode only)
+    if (!quoteMode && srcChainAuthorityAddress) {
+        violations.push(...validateCustomAtas(approve, actionPath, ixLabel, trades, realChainId, srcChainAuthorityAddress));
+    }
+    // CRITICAL: each amount must match approveAmountFlag
+    for (let i = 0; i < approve.amounts.length; i++) {
+        violations.push(...validateApproveAmount(approve.amounts[i], actionPath, `${ixLabel} amounts[${i}]`, request, trades, realChainId, types_1.ViolationCode.SolanaBudgetCustomAmountMismatch, true));
+    }
+    return violations;
+}
+// CRITICAL: Verify each ATA in custom approve matches expected (mint, owner, tokenProgram)
+function validateCustomAtas(approve, actionPath, ixLabel, trades, realChainId, srcChainAuthorityAddress) {
+    const violations = [];
+    for (let i = 0; i < approve.ataAddresses.length; i++) {
+        const ata = approve.ataAddresses[i];
+        let matched = false;
+        const expectedAtas = [];
+        for (const trade of trades) {
+            try {
+                const expectedAta = (0, solana_instruction_1.deriveAta)(srcChainAuthorityAddress, trade.srcChainTokenIn, approve.tokenProgramId);
+                if ((0, address_1.addressEquals)(realChainId, ata, expectedAta)) {
+                    matched = true;
+                    break;
+                }
+                expectedAtas.push({ mint: trade.srcChainTokenIn, ata: expectedAta });
+            }
+            catch {
+                continue;
+            }
+        }
+        if (!matched) {
+            violations.push({
+                code: types_1.ViolationCode.SolanaBudgetCustomAtaMismatch,
+                message: `${ixLabel} accounts[${i + solana_instruction_1.CUSTOM_APPROVE_FIRST_ATA_INDEX}]:`
+                    + " ATA does not match any trade token"
+                    + " (derived from srcChainTokenIn, srcChainAuthorityAddress, tokenProgram)",
+                path: `${actionPath}.data.data`,
+                expected: expectedAtas,
+                actual: ata,
+            });
+        }
+    }
+    return violations;
+}
+// =============================================
+// Approve amount validation (shared by classic and custom)
+// =============================================
+// allowDelta: when true, amount <= sum is accepted (not just ===).
+// Custom approve (approveProtocolTransfers) works as a delta on-chain: the program
+// adds the instruction amount to the existing allowance. The API may send a smaller
+// amount if the user already has partial allowance. Classic SPL approve sets an
+// absolute value, so it must match exactly.
+function validateApproveAmount(amount, actionPath, ixLabel, request, trades, realChainId, violationCode, allowDelta) {
+    const flag = request.approveAmountFlag;
+    // unlimited: must be max u64
+    if (flag === types_1.ApproveAmountFlag.Unlimited) {
+        if (amount !== constants_1.MAX_U64) {
+            return [{
+                    code: violationCode,
+                    message: `${ixLabel}: approve amount must be max u64`
+                        + " when approveAmountFlag=\"unlimited\"",
+                    path: `${actionPath}.data.data`,
+                    expected: constants_1.MAX_U64.toString(),
+                    actual: amount.toString(),
+                }];
+        }
+        return [];
+    }
+    // exactApproveAmount (or undefined): check against trade amounts
+    const sumResult = sumSolanaTradeAmounts(trades, realChainId);
+    if (sumResult.skip)
+        return [];
+    if (sumResult.violations)
+        return sumResult.violations;
+    const mismatch = allowDelta
+        ? (amount > sumResult.sum)
+        : (amount !== sumResult.sum);
+    if (mismatch) {
+        return [{
+                code: violationCode,
+                message: allowDelta
+                    ? `${ixLabel}: approve amount must be <= sum of trade amounts`
+                    : `${ixLabel}: approve amount does not match sum of trade amounts`,
+                path: `${actionPath}.data.data`,
+                expected: sumResult.sum.toString(),
+                actual: amount.toString(),
+            }];
+    }
+    return [];
+}
+// Sums srcChainTokenInAmount across all matching trades.
+// For Solana, no native→wrapped resolution is needed (unlike EVM).
+function sumSolanaTradeAmounts(trades, _realChainId) {
+    let sum = 0n;
+    for (let i = 0; i < trades.length; i++) {
+        const amount = trades[i].srcChainTokenInAmount;
+        if (amount === types_1.SpecialAmount.Max || amount === types_1.SpecialAmount.Auto) {
+            return { skip: true };
+        }
+        try {
+            sum += BigInt(amount);
+        }
+        catch {
+            return {
+                violations: [{
+                        code: types_1.ViolationCode.TradeAmountInvalid,
+                        message: "trade srcChainTokenInAmount is not a valid number",
+                        path: `request.trades[${i}].srcChainTokenInAmount`,
+                        actual: amount,
+                    }],
+            };
+        }
+    }
+    return { sum };
+}
+//# sourceMappingURL=solana-op-budget.js.map

package/dist/cjs/validations/solana-op-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana-op-budget.js","sourceRoot":"","sources":["../../../src/validations/solana-op-budget.ts"],"names":[],"mappings":";;AAwCA,4EA6EC;AArHD,oCAUkB;AAClB,gDAAmD;AACnD,oDAA+C;AAC/C,sEAYuC;AACvC,4DAGuC;AAGvC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,4BAAiB,EAAE,iCAAsB,CAAC,CAAC,CAAC;AAE5E,gDAAgD;AAChD,cAAc;AACd,gDAAgD;AAEhD,+EAA+E;AAC/E,gFAAgF;AAChF,SAAgB,gCAAgC,CAC5C,MAA4B,EAC5B,oBAA2C,EAC3C,UAAkB,EAClB,OAA8B,EAC9B,MAAsB,EACtB,WAAoB,EACpB,SAAkB,EAClB,wBAA4C,EAC5C,SAA4B;IAE5B,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,6BAAqB,CAAC,MAAM,CAAC,CAAC;IAE9E,+DAA+D;IAC/D,IAAI,eAAe,IAAI,OAAO,CAAC,iBAAiB,KAAK,yBAAiB,CAAC,IAAI,EAAE,CAAC;QAC1E,OAAO,CAAC;gBACJ,IAAI,EAAE,qBAAa,CAAC,oCAAoC;gBACxD,OAAO,EAAE,4DAA4D;gBACrE,IAAI,EAAE,GAAG,UAAU,UAAU;aAChC,CAAC,CAAC;IACP,CAAC;IAED,mDAAmD;IACnD,MAAM,mBAAmB,GAAG,0BAA0B,CAClD,oBAAoB,EAAE,SAAS,CAAC,mBAAmB,CACtD,CAAC;IAEF,wFAAwF;IACxF,IAAI,eAAe,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC;gBACJ,IAAI,EAAE,qBAAa,CAAC,gCAAgC;gBACpD,OAAO,EAAE,+EAA+E;gBACxF,IAAI,EAAE,GAAG,UAAU,YAAY;aAClC,CAAC,CAAC;IACP,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC,eAAe;QAAE,OAAO,EAAE,CAAC;IAEhC,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,mBAAmB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,wBAAwB,CAAC,EAAE,CAAC;QAE5C,IAAI,OAAO,CAAC,IAAI,KAAK,gCAAW,CAAC,OAAO,EAAE,CAAC;YACvC,UAAU,CAAC,IAAI,CACX,GAAG,sBAAsB,CACrB,OAAO,EACP,UAAU,EACV,OAAO,EACP,OAAO,EACP,MAAM,EACN,WAAW,EACX,SAAS,EACT,wBAAwB,EACxB,SAAS,CACZ,CACJ,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,UAAU,CAAC,IAAI,CACX,GAAG,qBAAqB,CACpB,OAAO,EACP,UAAU,EACV,OAAO,EACP,OAAO,EACP,MAAM,EACN,WAAW,EACX,SAAS,EACT,wBAAwB,EACxB,SAAS,CACZ,CACJ,CAAC;QACN,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,gDAAgD;AAChD,+BAA+B;AAC/B,gDAAgD;AAEhD,SAAS,0BAA0B,CAC/B,YAAmC,EACnC,aAAqB;IAErB,MAAM,MAAM,GAAyB,EAAE,CAAC;IAExC,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;QAC5B,IAAI,IAAA,qCAAgB,EAAC,EAAE,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,IAAA,yCAAoB,EAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,IAAA,oCAAe,EAAC,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,IAAA,wCAAmB,EAAC,EAAE,CAAC,CAAC,CAAC;QACzC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,gDAAgD;AAChD,uCAAuC;AACvC,gDAAgD;AAEhD,SAAS,sBAAsB,CAC3B,OAAuB,EACvB,UAAkB,EAClB,OAAe,EACf,OAA8B,EAC9B,MAAsB,EACtB,WAAoB,EACpB,SAAkB,EAClB,wBAA4C,EAC5C,SAA4B;IAE5B,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,gFAAgF;IAChF,6EAA6E;IAE7E,yDAAyD;IACzD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,qBAAqB,EAAE,CAAC;QACvD,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,yCAAyC;YAC7D,OAAO,EAAE,GAAG,OAAO,iDAAiD;YACpE,IAAI,EAAE,GAAG,UAAU,YAAY;YAC/B,MAAM,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;IACP,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC,SAAS,IAAI,wBAAwB,EAAE,CAAC;QACzC,IAAI,CAAC,IAAA,uBAAa,EAAC,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,wBAAwB,CAAC,EAAE,CAAC;YACvE,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,gCAAgC;gBACpD,OAAO,EAAE,GAAG,OAAO,6CAA6C;gBAChE,IAAI,EAAE,GAAG,UAAU,YAAY;gBAC/B,QAAQ,EAAE,wBAAwB;gBAClC,MAAM,EAAE,OAAO,CAAC,KAAK;aACxB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,IAAI,CAAC,SAAS,IAAI,wBAAwB,EAAE,CAAC;QACzC,UAAU,CAAC,IAAI,CACX,GAAG,kBAAkB,CACjB,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,wBAAwB,CAC9E,CACJ,CAAC;IACN,CAAC;IAED,wDAAwD;IACxD,UAAU,CAAC,IAAI,CACX,GAAG,qBAAqB,CACpB,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EACpD,WAAW,EAAE,qBAAa,CAAC,iCAAiC,EAAE,KAAK,CACtE,CACJ,CAAC;IAEF,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,oEAAoE;AACpE,SAAS,kBAAkB,CACvB,OAAuB,EACvB,UAAkB,EAClB,OAAe,EACf,MAAsB,EACtB,WAAoB,EACpB,wBAAgC;IAEhC,8EAA8E;IAC9E,MAAM,YAAY,GAAoC,EAAE,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC;YACD,MAAM,WAAW,GAAG,IAAA,8BAAS,EACzB,wBAAwB,EACxB,KAAK,CAAC,eAAe,EACrB,OAAO,CAAC,cAAc,CACzB,CAAC;YACF,IAAI,IAAA,uBAAa,EAAC,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC9D,OAAO,EAAE,CAAC;YACd,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACL,gEAAgE;YAChE,SAAS;QACb,CAAC;IACL,CAAC;IAED,OAAO,CAAC;YACJ,IAAI,EAAE,qBAAa,CAAC,8BAA8B;YAClD,OAAO,EACH,GAAG,OAAO,sCAAsC;kBAC9C,yEAAyE;YAC/E,IAAI,EAAE,GAAG,UAAU,YAAY;YAC/B,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,OAAO,CAAC,UAAU;SAC7B,CAAC,CAAC;AACP,CAAC;AAED,gDAAgD;AAChD,uDAAuD;AACvD,gDAAgD;AAEhD,SAAS,qBAAqB,CAC1B,OAAsB,EACtB,UAAkB,EAClB,OAAe,EACf,OAA8B,EAC9B,MAAsB,EACtB,WAAoB,EACpB,SAAkB,EAClB,wBAA4C,EAC5C,SAA4B;IAE5B,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,uFAAuF;IACvF,4EAA4E;IAE5E,wEAAwE;IACxE,IAAI,CAAC,SAAS,IAAI,wBAAwB,EAAE,CAAC;QACzC,IAAI,CAAC,IAAA,uBAAa,EAAC,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,wBAAwB,CAAC,EAAE,CAAC;YACvE,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,+BAA+B;gBACnD,OAAO,EAAE,GAAG,OAAO,6CAA6C;gBAChE,IAAI,EAAE,GAAG,UAAU,YAAY;gBAC/B,QAAQ,EAAE,wBAAwB;gBAClC,MAAM,EAAE,OAAO,CAAC,KAAK;aACxB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,mDAAmD;IACnD,IAAI,CAAC,IAAA,uBAAa,EAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,4BAA4B,CAAC,EAAE,CAAC;QACxF,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,kCAAkC;YACtD,OAAO,EAAE,GAAG,OAAO,gDAAgD;YACnE,IAAI,EAAE,GAAG,UAAU,YAAY;YAC/B,QAAQ,EAAE,SAAS,CAAC,4BAA4B;YAChD,MAAM,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;IACP,CAAC;IAED,yDAAyD;IACzD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9C,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,qCAAqC;YACzD,OAAO,EAAE,GAAG,OAAO,gDAAgD;YACnE,IAAI,EAAE,GAAG,UAAU,YAAY;YAC/B,QAAQ,EAAE,CAAC,GAAG,cAAc,CAAC;YAC7B,MAAM,EAAE,OAAO,CAAC,cAAc;SACjC,CAAC,CAAC;IACP,CAAC;IAED,6DAA6D;IAC7D,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QACpD,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,mCAAmC;YACvD,OAAO,EACH,GAAG,OAAO,iBAAiB,OAAO,CAAC,SAAS,GAAG;kBAC7C,6CAA6C,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG;YACjF,IAAI,EAAE,GAAG,UAAU,YAAY;YAC/B,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM;YACrC,MAAM,EAAE,OAAO,CAAC,SAAS;SAC5B,CAAC,CAAC;IACP,CAAC;IAED,4EAA4E;IAC5E,IAAI,CAAC,SAAS,IAAI,wBAAwB,EAAE,CAAC;QACzC,UAAU,CAAC,IAAI,CACX,GAAG,kBAAkB,CACjB,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,wBAAwB,CAC9E,CACJ,CAAC;IACN,CAAC;IAED,qDAAqD;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,UAAU,CAAC,IAAI,CACX,GAAG,qBAAqB,CACpB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAClB,UAAU,EACV,GAAG,OAAO,YAAY,CAAC,GAAG,EAC1B,OAAO,EACP,MAAM,EACN,WAAW,EACX,qBAAa,CAAC,gCAAgC,EAC9C,IAAI,CACP,CACJ,CAAC;IACN,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,2FAA2F;AAC3F,SAAS,kBAAkB,CACvB,OAAsB,EACtB,UAAkB,EAClB,OAAe,EACf,MAAsB,EACtB,WAAoB,EACpB,wBAAgC;IAEhC,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,YAAY,GAAoC,EAAE,CAAC;QAEzD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC;gBACD,MAAM,WAAW,GAAG,IAAA,8BAAS,EACzB,wBAAwB,EACxB,KAAK,CAAC,eAAe,EACrB,OAAO,CAAC,cAAc,CACzB,CAAC;gBACF,IAAI,IAAA,uBAAa,EAAC,WAAW,EAAE,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;oBAC/C,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM;gBACV,CAAC;gBACD,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;YACzE,CAAC;YAAC,MAAM,CAAC;gBACL,SAAS;YACb,CAAC;QACL,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,6BAA6B;gBACjD,OAAO,EACH,GAAG,OAAO,aAAa,CAAC,GAAG,mDAA8B,IAAI;sBAC3D,qCAAqC;sBACrC,yEAAyE;gBAC/E,IAAI,EAAE,GAAG,UAAU,YAAY;gBAC/B,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,GAAG;aACd,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,gDAAgD;AAChD,2DAA2D;AAC3D,gDAAgD;AAEhD,mEAAmE;AACnE,mFAAmF;AACnF,oFAAoF;AACpF,gFAAgF;AAChF,4CAA4C;AAC5C,SAAS,qBAAqB,CAC1B,MAAc,EACd,UAAkB,EAClB,OAAe,EACf,OAA8B,EAC9B,MAAsB,EACtB,WAAoB,EACpB,aAA4B,EAC5B,UAAmB;IAEnB,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAEvC,6BAA6B;IAC7B,IAAI,IAAI,KAAK,yBAAiB,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,MAAM,KAAK,mBAAO,EAAE,CAAC;YACrB,OAAO,CAAC;oBACJ,IAAI,EAAE,aAAa;oBACnB,OAAO,EACH,GAAG,OAAO,kCAAkC;0BAC1C,uCAAuC;oBAC7C,IAAI,EAAE,GAAG,UAAU,YAAY;oBAC/B,QAAQ,EAAE,mBAAO,CAAC,QAAQ,EAAE;oBAC5B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;iBAC5B,CAAC,CAAC;QACP,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAED,iEAAiE;IACjE,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,SAAS,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,SAAS,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC,UAAU,CAAC;IAEtD,MAAM,QAAQ,GAAG,UAAU;QACvB,CAAC,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC;QAC1B,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,GAAG,CAAC,CAAC;IAEjC,IAAI,QAAQ,EAAE,CAAC;QACX,OAAO,CAAC;gBACJ,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,UAAU;oBACf,CAAC,CAAC,GAAG,OAAO,kDAAkD;oBAC9D,CAAC,CAAC,GAAG,OAAO,sDAAsD;gBACtE,IAAI,EAAE,GAAG,UAAU,YAAY;gBAC/B,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAClC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5B,CAAC,CAAC;IACP,CAAC;IAED,OAAO,EAAE,CAAC;AACd,CAAC;AAWD,yDAAyD;AACzD,mEAAmE;AACnE,SAAS,qBAAqB,CAC1B,MAAsB,EACtB,YAAqB;IAErB,IAAI,GAAG,GAAG,EAAE,CAAC;IAEb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC;QAE/C,IAAI,MAAM,KAAK,qBAAa,CAAC,GAAG,IAAI,MAAM,KAAK,qBAAa,CAAC,IAAI,EAAE,CAAC;YAChE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC;YACD,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO;gBACH,UAAU,EAAE,CAAC;wBACT,IAAI,EAAE,qBAAa,CAAC,kBAAkB;wBACtC,OAAO,EAAE,mDAAmD;wBAC5D,IAAI,EAAE,kBAAkB,CAAC,yBAAyB;wBAClD,MAAM,EAAE,MAAM;qBACjB,CAAC;aACL,CAAC;QACN,CAAC;IACL,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,CAAC;AACnB,CAAC"}

package/dist/cjs/validations/solana-op-wrap.js

@@ -0,0 +1,191 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateSolanaWrapInstructions = validateSolanaWrapInstructions;
+const types_1 = require("../types");
+const address_1 = require("../helpers/address");
+const solana_instruction_1 = require("../helpers/solana-instruction");
+const programs_1 = require("../whitelists/solana/programs");
+// =============================================
+// Entry point
+// =============================================
+// Validates Wrap (SOL → wSOL) instructions within a decoded Solana transaction.
+// Called for both Transaction (AA=false) and SignTransaction (AA=true) actions.
+function validateSolanaWrapInstructions(action, resolvedInstructions, actionPath, trades, realChainId, quoteMode, srcChainAuthorityAddress) {
+    if (!action.actions.includes(types_1.SolanaActionOperation.Wrap))
+        return [];
+    const violations = [];
+    const createAtaIxs = findCreateAtaInstructions(resolvedInstructions);
+    const transferIxs = findSystemTransferInstructions(resolvedInstructions);
+    const syncNativeIxs = findSyncNativeInstructions(resolvedInstructions);
+    // CRITICAL: SystemProgram.Transfer is mandatory
+    if (transferIxs.length === 0) {
+        violations.push({
+            code: types_1.ViolationCode.SolanaWrapNoTransferInstruction,
+            message: "Wrap declared but no SystemProgram.Transfer instruction found",
+            path: `${actionPath}.data.data`,
+        });
+        return violations;
+    }
+    // CRITICAL: SyncNative is mandatory
+    if (syncNativeIxs.length === 0) {
+        violations.push({
+            code: types_1.ViolationCode.SolanaWrapNoSyncNativeInstruction,
+            message: "Wrap declared but no SyncNative instruction found",
+            path: `${actionPath}.data.data`,
+        });
+    }
+    // Compute expected wSOL ATA (only in execution mode)
+    const expectedWsolAta = computeExpectedWsolAta(quoteMode, srcChainAuthorityAddress);
+    // Validate CreateAssociatedTokenAccountIdempotent (optional)
+    for (const ix of createAtaIxs) {
+        violations.push(...validateCreateAtaInstruction(ix, actionPath, realChainId, quoteMode, srcChainAuthorityAddress, expectedWsolAta));
+    }
+    // Validate SystemProgram.Transfer
+    for (const ix of transferIxs) {
+        violations.push(...validateTransferInstruction(ix, actionPath, realChainId, trades, expectedWsolAta));
+    }
+    // Validate SyncNative
+    for (const ix of syncNativeIxs) {
+        violations.push(...validateSyncNativeInstruction(ix, actionPath, expectedWsolAta));
+    }
+    return violations;
+}
+function findSystemTransferInstructions(ixs) {
+    return ixs.filter(solana_instruction_1.isSystemTransfer);
+}
+function findSyncNativeInstructions(ixs) {
+    return ixs.filter(solana_instruction_1.isSyncNative);
+}
+function findCreateAtaInstructions(ixs) {
+    return ixs.filter(solana_instruction_1.isCreateAtaIdempotent);
+}
+// =============================================
+// CreateAssociatedTokenAccountIdempotent validation
+// =============================================
+// Accounts layout for createAssociatedTokenAccountIdempotent:
+// [0] = payer, [1] = associatedToken, [2] = owner, [3] = mint,
+// [4] = systemProgram, [5] = tokenProgram
+function validateCreateAtaInstruction(ix, actionPath, realChainId, quoteMode, srcChainAuthorityAddress, expectedWsolAta) {
+    const violations = [];
+    // accounts[2] = owner
+    const owner = ix.accountKeys[2];
+    // accounts[3] = mint
+    const mint = ix.accountKeys[3];
+    // accounts[1] = associatedToken (the ATA being created)
+    const associatedToken = ix.accountKeys[1];
+    // CRITICAL (execution): owner must equal srcChainAuthorityAddress
+    if (!quoteMode && srcChainAuthorityAddress) {
+        if (!(0, address_1.addressEquals)(realChainId, owner, srcChainAuthorityAddress)) {
+            violations.push({
+                code: types_1.ViolationCode.SolanaWrapCreateAtaOwnerMismatch,
+                message: "CreateATA owner must equal srcChainAuthorityAddress",
+                path: `${actionPath}.data.data`,
+                expected: srcChainAuthorityAddress,
+                actual: owner,
+            });
+        }
+    }
+    // CRITICAL: CreateATA mint must be wSOL
+    if (!(0, address_1.addressEquals)(realChainId, mint, programs_1.SPL_NATIVE_MINT)) {
+        violations.push({
+            code: types_1.ViolationCode.SolanaWrapCreateAtaMintMismatch,
+            message: `CreateATA mint must be wSOL (${programs_1.SPL_NATIVE_MINT})`,
+            path: `${actionPath}.data.data`,
+            expected: programs_1.SPL_NATIVE_MINT,
+            actual: mint,
+        });
+    }
+    // CRITICAL (execution): associatedToken must match derived wSOL ATA
+    // Skipped in quote mode: expectedWsolAta is undefined because srcChainAuthorityAddress is a placeholder.
+    if (expectedWsolAta && !(0, address_1.addressEquals)(realChainId, associatedToken, expectedWsolAta)) {
+        violations.push({
+            code: types_1.ViolationCode.SolanaWrapCreateAtaAddressMismatch,
+            message: "CreateATA associatedToken must match derived wSOL ATA",
+            path: `${actionPath}.data.data`,
+            expected: expectedWsolAta,
+            actual: associatedToken,
+        });
+    }
+    return violations;
+}
+// =============================================
+// SystemProgram.Transfer validation
+// =============================================
+function validateTransferInstruction(ix, actionPath, realChainId, trades, expectedWsolAta) {
+    const violations = [];
+    // CRITICAL (execution): transfer.to (accounts[1]) must be wSOL ATA.
+    // Skipped in quote mode: expectedWsolAta is undefined because srcChainAuthorityAddress is a placeholder.
+    const toAddress = ix.accountKeys[1];
+    if (expectedWsolAta && !(0, address_1.addressEquals)(realChainId, toAddress, expectedWsolAta)) {
+        violations.push({
+            code: types_1.ViolationCode.SolanaWrapTransferToMismatch,
+            message: "SystemProgram.Transfer destination must be wSOL ATA for wrap operation",
+            path: `${actionPath}.data.data`,
+            expected: expectedWsolAta,
+            actual: toAddress,
+        });
+    }
+    // CRITICAL: transfer amount must match sum of native SOL trades
+    const lamports = readU64LE(ix.data, 4);
+    const expectedAmount = sumNativeSolTradeAmounts(trades, realChainId);
+    // Skip amount validation if any trade has special amount (max/auto)
+    if (expectedAmount !== undefined && lamports !== expectedAmount) {
+        violations.push({
+            code: types_1.ViolationCode.SolanaWrapTransferAmountMismatch,
+            message: "SystemProgram.Transfer lamports does not match sum of native SOL trades",
+            path: `${actionPath}.data.data`,
+            expected: expectedAmount.toString(),
+            actual: lamports.toString(),
+        });
+    }
+    return violations;
+}
+// =============================================
+// SyncNative validation
+// =============================================
+function validateSyncNativeInstruction(ix, actionPath, expectedWsolAta) {
+    // CRITICAL (execution): SyncNative account (accounts[0]) must be wSOL ATA.
+    // Skipped in quote mode: expectedWsolAta is undefined because srcChainAuthorityAddress is a placeholder.
+    const account = ix.accountKeys[0];
+    if (expectedWsolAta && account !== expectedWsolAta) {
+        return [{
+                code: types_1.ViolationCode.SolanaWrapSyncNativeAccountMismatch,
+                message: "SyncNative account must be wSOL ATA",
+                path: `${actionPath}.data.data`,
+                expected: expectedWsolAta,
+                actual: account,
+            }];
+    }
+    return [];
+}
+// =============================================
+// Helpers
+// =============================================
+function computeExpectedWsolAta(quoteMode, srcChainAuthorityAddress) {
+    if (quoteMode || !srcChainAuthorityAddress)
+        return undefined;
+    // wSOL uses standard SPL Token program
+    return (0, solana_instruction_1.deriveAta)(srcChainAuthorityAddress, programs_1.SPL_NATIVE_MINT, programs_1.SPL_TOKEN_PROGRAM);
+}
+// Sums srcChainTokenInAmount for all trades that use native SOL.
+// Returns undefined if any matching trade has a special amount (max/auto).
+function sumNativeSolTradeAmounts(trades, realChainId) {
+    let total = 0n;
+    for (const trade of trades) {
+        if (!(0, address_1.addressEquals)(realChainId, trade.srcChainTokenIn, programs_1.SPL_NATIVE_MINT))
+            continue;
+        const raw = trade.srcChainTokenInAmount;
+        if (raw === types_1.SpecialAmount.Max || raw === types_1.SpecialAmount.Auto)
+            return undefined;
+        total += BigInt(raw);
+    }
+    return total;
+}
+function readU64LE(data, offset) {
+    let value = 0n;
+    for (let i = 0; i < 8; i++) {
+        value |= BigInt(data[offset + i]) << BigInt(i * 8);
+    }
+    return value;
+}
+//# sourceMappingURL=solana-op-wrap.js.map

package/dist/cjs/validations/solana-op-wrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana-op-wrap.js","sourceRoot":"","sources":["../../../src/validations/solana-op-wrap.ts"],"names":[],"mappings":";;AA4BA,wEAmEC;AA/FD,oCAQkB;AAClB,gDAAmD;AACnD,sEAMuC;AACvC,4DAGuC;AAEvC,gDAAgD;AAChD,cAAc;AACd,gDAAgD;AAEhD,gFAAgF;AAChF,gFAAgF;AAChF,SAAgB,8BAA8B,CAC1C,MAA4B,EAC5B,oBAA2C,EAC3C,UAAkB,EAClB,MAAsB,EACtB,WAAoB,EACpB,SAAkB,EAClB,wBAA4C;IAE5C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,6BAAqB,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpE,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,MAAM,YAAY,GAAG,yBAAyB,CAAC,oBAAoB,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,8BAA8B,CAAC,oBAAoB,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,0BAA0B,CAAC,oBAAoB,CAAC,CAAC;IAEvE,gDAAgD;IAChD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,+BAA+B;YACnD,OAAO,EAAE,+DAA+D;YACxE,IAAI,EAAE,GAAG,UAAU,YAAY;SAClC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,oCAAoC;IACpC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,iCAAiC;YACrD,OAAO,EAAE,mDAAmD;YAC5D,IAAI,EAAE,GAAG,UAAU,YAAY;SAClC,CAAC,CAAC;IACP,CAAC;IAED,qDAAqD;IACrD,MAAM,eAAe,GAAG,sBAAsB,CAC1C,SAAS,EAAE,wBAAwB,CACtC,CAAC;IAEF,6DAA6D;IAC7D,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CACX,GAAG,4BAA4B,CAC3B,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,wBAAwB,EAAE,eAAe,CACpF,CACJ,CAAC;IACN,CAAC;IAED,kCAAkC;IAClC,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC3B,UAAU,CAAC,IAAI,CACX,GAAG,2BAA2B,CAC1B,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,CACvD,CACJ,CAAC;IACN,CAAC;IAED,sBAAsB;IACtB,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;QAC7B,UAAU,CAAC,IAAI,CACX,GAAG,6BAA6B,CAAC,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,CACpE,CAAC;IACN,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,8BAA8B,CAAC,GAA0B;IAC9D,OAAO,GAAG,CAAC,MAAM,CAAC,qCAAgB,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,0BAA0B,CAAC,GAA0B;IAC1D,OAAO,GAAG,CAAC,MAAM,CAAC,iCAAY,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,yBAAyB,CAAC,GAA0B;IACzD,OAAO,GAAG,CAAC,MAAM,CAAC,0CAAqB,CAAC,CAAC;AAC7C,CAAC;AAED,gDAAgD;AAChD,oDAAoD;AACpD,gDAAgD;AAEhD,8DAA8D;AAC9D,+DAA+D;AAC/D,0CAA0C;AAC1C,SAAS,4BAA4B,CACjC,EAAuB,EACvB,UAAkB,EAClB,WAAoB,EACpB,SAAkB,EAClB,wBAA4C,EAC5C,eAAmC;IAEnC,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,sBAAsB;IACtB,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,qBAAqB;IACrB,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/B,wDAAwD;IACxD,MAAM,eAAe,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAE1C,kEAAkE;IAClE,IAAI,CAAC,SAAS,IAAI,wBAAwB,EAAE,CAAC;QACzC,IAAI,CAAC,IAAA,uBAAa,EAAC,WAAW,EAAE,KAAK,EAAE,wBAAwB,CAAC,EAAE,CAAC;YAC/D,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,gCAAgC;gBACpD,OAAO,EAAE,qDAAqD;gBAC9D,IAAI,EAAE,GAAG,UAAU,YAAY;gBAC/B,QAAQ,EAAE,wBAAwB;gBAClC,MAAM,EAAE,KAAK;aAChB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,wCAAwC;IACxC,IAAI,CAAC,IAAA,uBAAa,EAAC,WAAW,EAAE,IAAI,EAAE,0BAAe,CAAC,EAAE,CAAC;QACrD,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,+BAA+B;YACnD,OAAO,EAAE,gCAAgC,0BAAe,GAAG;YAC3D,IAAI,EAAE,GAAG,UAAU,YAAY;YAC/B,QAAQ,EAAE,0BAAe;YACzB,MAAM,EAAE,IAAI;SACf,CAAC,CAAC;IACP,CAAC;IAED,oEAAoE;IACpE,yGAAyG;IACzG,IAAI,eAAe,IAAI,CAAC,IAAA,uBAAa,EAAC,WAAW,EAAE,eAAe,EAAE,eAAe,CAAC,EAAE,CAAC;QACnF,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,kCAAkC;YACtD,OAAO,EAAE,uDAAuD;YAChE,IAAI,EAAE,GAAG,UAAU,YAAY;YAC/B,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,eAAe;SAC1B,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,gDAAgD;AAChD,oCAAoC;AACpC,gDAAgD;AAEhD,SAAS,2BAA2B,CAChC,EAAuB,EACvB,UAAkB,EAClB,WAAoB,EACpB,MAAsB,EACtB,eAAmC;IAEnC,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,oEAAoE;IACpE,yGAAyG;IACzG,MAAM,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,eAAe,IAAI,CAAC,IAAA,uBAAa,EAAC,WAAW,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC;QAC7E,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,4BAA4B;YAChD,OAAO,EAAE,wEAAwE;YACjF,IAAI,EAAE,GAAG,UAAU,YAAY;YAC/B,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,SAAS;SACpB,CAAC,CAAC;IACP,CAAC;IAED,gEAAgE;IAChE,MAAM,QAAQ,GAAG,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,wBAAwB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAErE,oEAAoE;IACpE,IAAI,cAAc,KAAK,SAAS,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAC9D,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,gCAAgC;YACpD,OAAO,EAAE,yEAAyE;YAClF,IAAI,EAAE,GAAG,UAAU,YAAY;YAC/B,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;YACnC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE;SAC9B,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,gDAAgD;AAChD,wBAAwB;AACxB,gDAAgD;AAEhD,SAAS,6BAA6B,CAClC,EAAuB,EACvB,UAAkB,EAClB,eAAmC;IAEnC,2EAA2E;IAC3E,yGAAyG;IACzG,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,eAAe,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QACjD,OAAO,CAAC;gBACJ,IAAI,EAAE,qBAAa,CAAC,mCAAmC;gBACvD,OAAO,EAAE,qCAAqC;gBAC9C,IAAI,EAAE,GAAG,UAAU,YAAY;gBAC/B,QAAQ,EAAE,eAAe;gBACzB,MAAM,EAAE,OAAO;aAClB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,EAAE,CAAC;AACd,CAAC;AAED,gDAAgD;AAChD,UAAU;AACV,gDAAgD;AAEhD,SAAS,sBAAsB,CAC3B,SAAkB,EAClB,wBAA4C;IAE5C,IAAI,SAAS,IAAI,CAAC,wBAAwB;QAAE,OAAO,SAAS,CAAC;IAE7D,uCAAuC;IACvC,OAAO,IAAA,8BAAS,EAAC,wBAAwB,EAAE,0BAAe,EAAE,4BAAiB,CAAC,CAAC;AACnF,CAAC;AAED,iEAAiE;AACjE,2EAA2E;AAC3E,SAAS,wBAAwB,CAC7B,MAAsB,EACtB,WAAoB;IAEpB,IAAI,KAAK,GAAG,EAAE,CAAC;IAEf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,IAAA,uBAAa,EAAC,WAAW,EAAE,KAAK,CAAC,eAAe,EAAE,0BAAe,CAAC;YAAE,SAAS;QAElF,MAAM,GAAG,GAAG,KAAK,CAAC,qBAAqB,CAAC;QACxC,IAAI,GAAG,KAAK,qBAAa,CAAC,GAAG,IAAI,GAAG,KAAK,qBAAa,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAE9E,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB,EAAE,MAAc;IAC/C,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/cjs/validations/solana-required-actions.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateSolanaRequiredActions = validateSolanaRequiredActions;
+const types_1 = require("../types");
+const solana_transaction_1 = require("./solana-transaction");
+const solana_sign_1 = require("./solana-sign");
+function validateSolanaRequiredActions(request, actions, basePath, realChainId, quoteMode, trades, srcChainAuthorityAddress, intent, envConfig) {
+    return [
+        ...validateUniqueActionIds(actions, basePath),
+        ...validateRequiredActionsOrder(actions, basePath, quoteMode),
+        ...validateAAConstraints(request, actions, basePath),
+        ...validateNoOperationActions(actions, basePath),
+        ...validateNoCompensationActions(actions, basePath),
+        ...(0, solana_transaction_1.validateSolanaTransactionActions)(actions, basePath, realChainId, quoteMode, srcChainAuthorityAddress, request, trades, envConfig),
+        ...(0, solana_transaction_1.validateSolanaSignTransactionActions)(actions, basePath, realChainId, quoteMode, srcChainAuthorityAddress, request, trades, envConfig),
+        ...(0, solana_sign_1.validateSolanaSignActions)(actions, basePath, realChainId, quoteMode, intent, envConfig),
+    ];
+}
+// HIGH: Each actionId must be unique (no duplicates in the list)
+function validateUniqueActionIds(actions, basePath) {
+    const seen = new Map();
+    const violations = [];
+    for (let i = 0; i < actions.length; i++) {
+        const actionId = actions[i].actionId;
+        const firstIndex = seen.get(actionId);
+        if (firstIndex !== undefined) {
+            violations.push({
+                code: types_1.ViolationCode.SolanaDuplicateActionId,
+                message: `duplicate actionId "${actionId}" at indices ${firstIndex} and ${i}`,
+                path: `${basePath}.requiredActions[${i}].actionId`,
+                actual: actionId,
+            });
+        }
+        else {
+            seen.set(actionId, i);
+        }
+    }
+    return violations;
+}
+// MEDIUM: `Sign (Intent)` must be the last action.
+// In quote mode, `Sign (Intent)` might be absent.
+function validateRequiredActionsOrder(actions, basePath, quoteMode) {
+    const violations = [];
+    for (let i = 0; i < actions.length; i++) {
+        const action = actions[i];
+        const isSignIntent = action.type === types_1.SolanaActionKind.Sign
+            && action.actions.includes(types_1.SolanaActionOperation.Intent);
+        if (!isSignIntent)
+            continue;
+        if (!quoteMode && i !== actions.length - 1) {
+            violations.push({
+                code: types_1.ViolationCode.SolanaRequiredActionsOrder,
+                message: "Sign (Intent) action must be the last required action",
+                path: `${basePath}.requiredActions[${i}].type`,
+                expected: actions.length - 1,
+                actual: i,
+            });
+        }
+    }
+    return violations;
+}
+// CRITICAL: AA constraints
+function validateAAConstraints(request, actions, basePath) {
+    const violations = [];
+    for (let i = 0; i < actions.length; i++) {
+        const action = actions[i];
+        if (request.enableAccountAbstraction) {
+            // CRITICAL: AA=true → no Transaction type actions
+            if (action.type === types_1.SolanaActionKind.Transaction) {
+                violations.push({
+                    code: types_1.ViolationCode.SolanaForbiddenTransactionWithAA,
+                    message: "Transaction action is forbidden when enableAccountAbstraction=true",
+                    path: `${basePath}.requiredActions[${i}].type`,
+                    actual: action.type,
+                });
+            }
+        }
+        else {
+            // CRITICAL: AA=false → no SignTransaction type actions
+            if (action.type === types_1.SolanaActionKind.SignTransaction) {
+                violations.push({
+                    code: types_1.ViolationCode.SolanaForbiddenSignTransactionWithoutAA,
+                    message: "SignTransaction action is forbidden when enableAccountAbstraction=false",
+                    path: `${basePath}.requiredActions[${i}].type`,
+                    actual: action.type,
+                });
+            }
+        }
+    }
+    return violations;
+}
+// HIGH: Operation actions must be absent
+function validateNoOperationActions(actions, basePath) {
+    const violations = [];
+    for (let i = 0; i < actions.length; i++) {
+        if (actions[i].actions.includes(types_1.SolanaActionOperation.Operation)) {
+            violations.push({
+                code: types_1.ViolationCode.SolanaForbiddenOperationAction,
+                message: "Operation action is not expected in current API version",
+                path: `${basePath}.requiredActions[${i}].actions`,
+                actual: actions[i].actions,
+            });
+        }
+    }
+    return violations;
+}
+// HIGH: Compensation actions must be absent (disabled in current API version)
+function validateNoCompensationActions(actions, basePath) {
+    const violations = [];
+    for (let i = 0; i < actions.length; i++) {
+        if (actions[i].actions.includes(types_1.SolanaActionOperation.Compensation)) {
+            violations.push({
+                code: types_1.ViolationCode.SolanaForbiddenCompensationAction,
+                message: "Compensation action is not expected in current API version",
+                path: `${basePath}.requiredActions[${i}].actions`,
+                actual: actions[i].actions,
+            });
+        }
+    }
+    return violations;
+}
+//# sourceMappingURL=solana-required-actions.js.map

package/dist/cjs/validations/solana-required-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana-required-actions.js","sourceRoot":"","sources":["../../../src/validations/solana-required-actions.ts"],"names":[],"mappings":";;AAkBA,sEA2BC;AA7CD,oCAUkB;AAClB,6DAG8B;AAC9B,+CAA0D;AAG1D,SAAgB,6BAA6B,CACzC,OAA8B,EAC9B,OAA+B,EAC/B,QAAgB,EAChB,WAAoB,EACpB,SAAkB,EAClB,MAAsB,EACtB,wBAA4C,EAC5C,MAAsB,EACtB,SAA4B;IAE5B,OAAO;QACH,GAAG,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC7C,GAAG,4BAA4B,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC7D,GAAG,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;QACpD,GAAG,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC;QAChD,GAAG,6BAA6B,CAAC,OAAO,EAAE,QAAQ,CAAC;QACnD,GAAG,IAAA,qDAAgC,EAC/B,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAClG;QACD,GAAG,IAAA,yDAAoC,EACnC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAClG;QACD,GAAG,IAAA,uCAAyB,EACxB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAC/D;KACJ,CAAC;AACN,CAAC;AAED,iEAAiE;AACjE,SAAS,uBAAuB,CAC5B,OAA+B,EAC/B,QAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,uBAAuB;gBAC3C,OAAO,EAAE,uBAAuB,QAAQ,gBAAgB,UAAU,QAAQ,CAAC,EAAE;gBAC7E,IAAI,EAAE,GAAG,QAAQ,oBAAoB,CAAC,YAAY;gBAClD,MAAM,EAAE,QAAQ;aACnB,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC1B,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,mDAAmD;AACnD,kDAAkD;AAClD,SAAS,4BAA4B,CACjC,OAA+B,EAC/B,QAAgB,EAChB,SAAkB;IAElB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,KAAK,wBAAgB,CAAC,IAAI;eACnD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,6BAAqB,CAAC,MAAM,CAAC,CAAC;QAE7D,IAAI,CAAC,YAAY;YAAE,SAAS;QAE5B,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,0BAA0B;gBAC9C,OAAO,EAAE,uDAAuD;gBAChE,IAAI,EAAE,GAAG,QAAQ,oBAAoB,CAAC,QAAQ;gBAC9C,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;gBAC5B,MAAM,EAAE,CAAC;aACZ,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,2BAA2B;AAC3B,SAAS,qBAAqB,CAC1B,OAA8B,EAC9B,OAA+B,EAC/B,QAAgB;IAEhB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE1B,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACnC,kDAAkD;YAClD,IAAI,MAAM,CAAC,IAAI,KAAK,wBAAgB,CAAC,WAAW,EAAE,CAAC;gBAC/C,UAAU,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,qBAAa,CAAC,gCAAgC;oBACpD,OAAO,EAAE,oEAAoE;oBAC7E,IAAI,EAAE,GAAG,QAAQ,oBAAoB,CAAC,QAAQ;oBAC9C,MAAM,EAAE,MAAM,CAAC,IAAI;iBACtB,CAAC,CAAC;YACP,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,uDAAuD;YACvD,IAAI,MAAM,CAAC,IAAI,KAAK,wBAAgB,CAAC,eAAe,EAAE,CAAC;gBACnD,UAAU,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,qBAAa,CAAC,uCAAuC;oBAC3D,OAAO,EACH,yEAAyE;oBAC7E,IAAI,EAAE,GAAG,QAAQ,oBAAoB,CAAC,QAAQ;oBAC9C,MAAM,EAAE,MAAM,CAAC,IAAI;iBACtB,CAAC,CAAC;YACP,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,yCAAyC;AACzC,SAAS,0BAA0B,CAC/B,OAA+B,EAC/B,QAAgB;IAEhB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,6BAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/D,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,8BAA8B;gBAClD,OAAO,EAAE,yDAAyD;gBAClE,IAAI,EAAE,GAAG,QAAQ,oBAAoB,CAAC,WAAW;gBACjD,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO;aAC7B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,8EAA8E;AAC9E,SAAS,6BAA6B,CAClC,OAA+B,EAC/B,QAAgB;IAEhB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,6BAAqB,CAAC,YAAY,CAAC,EAAE,CAAC;YAClE,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,iCAAiC;gBACrD,OAAO,EAAE,4DAA4D;gBACrE,IAAI,EAAE,GAAG,QAAQ,oBAAoB,CAAC,WAAW;gBACjD,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO;aAC7B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}