@eco-incorp/sauce 0.99.0

package/sdk/dist/svm/venues/defituna/index.js

@@ -0,0 +1,312 @@
+/**
+ * DefiTuna Fusion Pools (FusionAMM) — a Whirlpool-LINEAGE CLMM on Solana.
+ * DefiTuna's own docs describe FusionAMM as "a hybrid (CLMM + OrderBook) AMM
+ * contract... Modification based on Orca Whirlpools" (source headers in
+ * github.com/DefiTuna/fusionamm-sdk, FusionAMM SDK Source-Available License;
+ * the on-chain program itself is closed-source — only the client SDK + IDL
+ * are public). Program id fUSioN9YKKSa3CUC2YUc4tPkHJ5Y6XW1yz8y6F7qWz9,
+ * 906 live pools measured (dataSize 423) at integration time.
+ *
+ * Layout source: target/idl/fusionamm.json (FusionPool/TickArray account
+ * types) in the SDK repo above, CROSS-VERIFIED against a real mainnet dump
+ * (pool 7VuKeevbvbQQcxz6N4SNLmuq6PYy4AcGQRDssoqo4t65, SOL/USDC ts=4):
+ * FusionPool = 423 bytes, discriminator sha256('account:FusionPool')[0..8] =
+ * fe cc cf 62 19 b5 1d 43, token_mint_a@11, token_mint_b@43, token_vault_a@75,
+ * token_vault_b@107 (all pubkeys) — this matches the trimmed Whirlpool header
+ * (Whirlpool itself is 653 bytes; FusionPool drops the config/reward-related
+ * fields Whirlpool carries, keeping tick_spacing/fee_rate/liquidity/sqrt_price/
+ * tick_current_index in the same relative shape).
+ *
+ * THE KEY STRUCTURAL DIVERGENCE FROM ORCA WHIRLPOOL: FusionPool's TickArray
+ * account is VARIABLE-LENGTH, not the fixed 9988-byte layout Whirlpool uses.
+ * The IDL's `MaybeTick` is a Rust enum (Uninitialized | Initialized(TickData))
+ * Borsh-serialized as ONE tag byte (0 or 1) PLUS 112 bytes of TickData only
+ * when initialized — so an all-empty tick array is 132 bytes
+ * (8 + 4 + 32 + 88) and a fully-initialized one is 9988 bytes
+ * (8 + 4 + 32 + 88*113), confirmed empirically: 5 real tick arrays sampled at
+ * integration time measured 244/356/356/692/804 bytes, each solving
+ * `88 + 112*k` exactly for k = 1/2/2/5/6 initialized ticks. This means a
+ * tick's byte position within the account is NOT `offset * TICK_LEN` (the
+ * Whirlpool/raydium-clmm assumption) — it depends on how many EARLIER ticks
+ * in the array are initialized. Prepare-time resolution here does a
+ * SEQUENTIAL scan of the fetched bytes and bakes each shipped boundary's
+ * ABSOLUTE byte offset (not an index) as a compile-time constant — cheaper
+ * on-chain than Whirlpool's own `OFF_TA_TICKS + offset*TICK_LEN` (no
+ * multiply needed at all), but with a residual drift risk Whirlpool's fixed
+ * stride does not have: if some EARLIER tick in the same array flips
+ * initialized-state between prepare and execution, every LATER tick's true
+ * byte offset shifts. The tag-byte check every boundary read already does
+ * (`if (tag !== 1) skip` — identical to Whirlpool's own "removed since
+ * prepare" check) catches the common case (a shift landing on a 0 tag), and
+ * a residual false-tag-positive is bounded in the same way EVERY venue's
+ * quote-vs-execution drift already is in this codebase: `minOut` is the sole
+ * atomic revert/floor authority, never a per-venue model guarantee.
+ *
+ * Tick array PDA seeds are IDENTICAL to Whirlpool's own scheme
+ * (['tick_array', pool, start_tick_index.toString()] — confirmed from the
+ * SDK's rust-sdk/client/src/pda/tick_array.rs), so `windowStartTicks` is
+ * reused verbatim from the orca-whirlpool module (pure function of
+ * tick/spacing/direction, venue-agnostic). TICK_ARRAY_SIZE (88 slots/array)
+ * and the swap-sequence window-walk semantics (aToB searches DOWN from the
+ * live tick inclusive, bToA searches UP exclusive) are also unchanged from
+ * Whirlpool, and the Q64.64 sqrt-price / delta-A / delta-B / next-sqrt-price
+ * math is Whirlpool's verbatim (this module's `resolveWindow` reuses
+ * orca-whirlpool's own `whirlpoolSqrtPriceAtTick`), so a consumer's fragment
+ * can share one copy of the on-chain delta/next-sqrt helpers across an
+ * orca-whirlpool slot and a defituna slot.
+ *
+ * VALIDATED against the REAL fusionamm.so binary (dumped from mainnet-beta)
+ * executing on REAL mainnet pool + tick-array state via LiteSVM
+ * (test/svm/venues/defituna.test.ts's real-CPI cell / the realcpi e2e lane):
+ * at 0.05 SOL (single segment, no boundary crossed) our off-chain math is
+ * BIT-EXACT to the real program's realized output. At larger single-segment
+ * sizes (0.2 SOL, 1 SOL, same pool/state) we measured the real program
+ * delivering marginally LESS output than our pure-CLMM model predicts (up to
+ * ~0.01% at 1 SOL on the tested pool, growing with size) — most likely an
+ * undocumented protocol-level adjustment in the closed-source swap
+ * instruction (DefiTuna markets FusionAMM as more than plain-Whirlpool CLMM
+ * math; the FusionPool account also carries an `ma_sqrt_price` field with no
+ * public SDK documentation of how it feeds execution). This is a DISCLOSED,
+ * MEASURED, one-sided residual (never in the favourable direction beyond the
+ * exact match at small size) backstopped by `minOut` like every other venue's
+ * quote-vs-execution drift in this repo — not a fund-safety gap. Re-measure
+ * (ECO_SVM_CU_PRINT-style re-pin discipline) if this grows materially.
+ *
+ * Gates (named errors caught by the orchestrator's TOCTOU self-drop):
+ * - account size / discriminator / owner (fetch-time);
+ * - non-Tokenkeg mints (the swap accounts below are classic-SPL only);
+ * - a direction with NO shipped boundaries and no edge (readable === 0),
+ *   wired the same way as orca-whirlpool/raydium-clmm/byreal via the
+ *   recipe's SvmWindowDriftError in the consuming app SVM solver entry's FAMILIES entry;
+ * - a shipped boundary carrying an ACTIVE resting limit order
+ *   (open_orders_input > 0 or part_filled_orders_remaining_input > 0) —
+ *   FusionAMM's hybrid CLMM+orderbook model may fill resting orders at a
+ *   crossed tick beyond plain liquidity_net math, which this pure-CLMM
+ *   ladder does not model; every REAL tick sampled at integration time
+ *   carried all-zero order fields (this is the common case), but a pool
+ *   that DOES have one is self-dropped rather than risk a silently wrong
+ *   quote — recoverable (an order fills/cancels), so it is the SAME
+ *   SvmWindowDriftError self-drop class, wired via `window.hasActiveOrder`.
+ */
+import { address, getAddressCodec } from "@solana/kit";
+import { MAX_TICK_INDEX, MIN_TICK_INDEX, whirlpoolSqrtPriceAtTick, } from "../orca-whirlpool/tick-math.js";
+import { readUintLE } from "../math.js";
+import { memoizedGetProgramDerivedAddress } from "../pda-memo.js";
+import { windowStartTicks } from "../orca-whirlpool/index.js";
+import { TOKEN_2022_PROGRAM_ID, classifyMintProgram } from "../../token-program.js";
+import { parseMintExtensions } from "../../token-extensions.js";
+const SLUG = "defituna";
+export const DEFITUNA_PROGRAM_ID = address("fUSioN9YKKSa3CUC2YUc4tPkHJ5Y6XW1yz8y6F7qWz9");
+const TOKEN_PROGRAM = address("TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA");
+export const FUSION_POOL_ACCOUNT_SIZE = 423;
+/** sha256('account:FusionPool')[0..8] (IDL-given: [254,204,207,98,25,181,29,67]). */
+export const FUSION_POOL_DISCRIMINATOR = [0xfe, 0xcc, 0xcf, 0x62, 0x19, 0xb5, 0x1d, 0x43];
+/** sha256('account:TickArray')[0..8] (IDL-given: [85,1,199,2,188,97,101,139]). */
+export const TICK_ARRAY_DISCRIMINATOR = [85, 1, 199, 2, 188, 97, 101, 139];
+export const TICK_ARRAY_SIZE = 88;
+/** Borsh-tagged-enum per-tick size when Initialized (1-byte tag + 112-byte TickData); 1 byte when Uninitialized. */
+export const TICK_LEN_INITIALIZED = 113;
+/** Minimum possible TickArray account length (all 88 ticks uninitialized): 8 + 4 + 32 + 88. */
+export const TICK_ARRAY_MIN_LEN = 132;
+// FusionPool offsets (fusionamm.json's FusionPool type, declared-field order, Borsh-packed).
+const OFF_MINT_A = 11;
+const OFF_MINT_B = 43;
+const OFF_VAULT_A = 75;
+const OFF_VAULT_B = 107;
+const OFF_TICK_SPACING = 139;
+const OFF_FEE_RATE = 143;
+const OFF_LIQUIDITY = 151;
+const OFF_SQRT_PRICE = 167;
+const OFF_TICK_CURRENT = 183;
+// TickArray offsets.
+const OFF_TA_START = 8;
+const OFF_TA_TICKS = 44;
+/**
+ * Shipped initialized-tick boundaries per direction — same budget class as
+ * orca-whirlpool/raydium-clmm (2 rungs default, degrade-first CU kind).
+ */
+export const DEFITUNA_MAX_BOUNDARIES = 4;
+const readI32 = (data, offset) => {
+    const u = Number(readUintLE(data, offset, 4));
+    return u >= 0x8000_0000 ? u - 0x1_0000_0000 : u;
+};
+function hasDiscriminator(data, discriminator) {
+    return discriminator.every((byte, i) => data[i] === byte);
+}
+function getAddressEncoded(value) {
+    return new Uint8Array(getAddressCodec().encode(value));
+}
+async function deriveTickArrayPda(pool, startTick) {
+    return memoizedGetProgramDerivedAddress(DEFITUNA_PROGRAM_ID, [
+        new TextEncoder().encode("tick_array"),
+        getAddressEncoded(pool),
+        new TextEncoder().encode(String(startTick)),
+    ]);
+}
+/**
+ * Sequential Borsh-tagged-enum scan of one TickArray's raw bytes (see header
+ * — NOT a fixed stride). Stops defensively on an unrecognized tag byte
+ * (foreign/corrupt data) rather than misreading the rest of the account.
+ */
+function scanTickArray(data, startTick, tickSpacing) {
+    const out = [];
+    let pos = OFF_TA_TICKS;
+    for (let slot = 0; slot < TICK_ARRAY_SIZE && pos < data.length; slot++) {
+        const tag = data[pos];
+        if (tag === 0) {
+            pos += 1;
+            continue;
+        }
+        if (tag !== 1)
+            break; // defensive: unrecognized encoding, stop rather than misread
+        if (pos + TICK_LEN_INITIALIZED > data.length)
+            break; // truncated tail, stop rather than misread
+        const liquidityNetRaw = readUintLE(data, pos + 1, 16);
+        const openOrdersInput = readUintLE(data, pos + 73, 8);
+        const partFilledRemaining = readUintLE(data, pos + 89, 8);
+        out.push({
+            tick: startTick + slot * tickSpacing,
+            byteOffset: pos,
+            liquidityNetRaw,
+            hasOrder: openOrdersInput > 0n || partFilledRemaining > 0n,
+        });
+        pos += TICK_LEN_INITIALIZED;
+    }
+    return out;
+}
+/**
+ * Scan the readable window for initialized-tick boundaries in walk order —
+ * identical direction semantics to orca-whirlpool's resolveWindow (aToB
+ * searches DOWN from the live tick inclusive, bToA searches UP exclusive;
+ * later arrays search their full span), adapted for the variable-length
+ * per-array scan above instead of a fixed-offset walk.
+ */
+async function resolveWindow(load, pool, tickCurrentIndex, tickSpacing, aToB) {
+    const startTicks = windowStartTicks(tickCurrentIndex, tickSpacing, aToB);
+    const tickArrays = (await Promise.all(startTicks.map((start) => deriveTickArrayPda(pool, start))));
+    // allSettled (not all) keeps the break-on-first-invalid contract exact: a
+    // rejection is re-thrown only if the readable prefix actually reaches it.
+    const loaded = await Promise.allSettled(tickArrays.map((a) => load(a)));
+    const arrays = [];
+    let readable = 0;
+    for (let i = 0; i < 3; i++) {
+        const settled = loaded[i];
+        if (settled.status === "rejected")
+            throw settled.reason;
+        const data = settled.value;
+        const valid = data !== null &&
+            data.length >= TICK_ARRAY_MIN_LEN &&
+            hasDiscriminator(data, TICK_ARRAY_DISCRIMINATOR) &&
+            readI32(data, OFF_TA_START) === startTicks[i];
+        if (!valid)
+            break;
+        arrays.push(data);
+        readable += 1;
+    }
+    const boundaries = [];
+    let hasActiveOrder = false;
+    let maxStopped = false;
+    for (let a = 0; a < readable && !maxStopped; a++) {
+        const decoded = scanTickArray(arrays[a], startTicks[a], tickSpacing);
+        const candidates = a === 0
+            ? aToB
+                ? decoded.filter((t) => t.tick <= tickCurrentIndex).sort((x, y) => y.tick - x.tick)
+                : decoded.filter((t) => t.tick > tickCurrentIndex).sort((x, y) => x.tick - y.tick)
+            : aToB
+                ? [...decoded].sort((x, y) => y.tick - x.tick)
+                : [...decoded].sort((x, y) => x.tick - y.tick);
+        for (const c of candidates) {
+            boundaries.push({
+                arrayIndex: a,
+                byteOffset: c.byteOffset,
+                tick: c.tick,
+                sqrtPrice: whirlpoolSqrtPriceAtTick(c.tick),
+            });
+            if (c.hasOrder)
+                hasActiveOrder = true;
+            if (boundaries.length === DEFITUNA_MAX_BOUNDARIES) {
+                maxStopped = true;
+                break;
+            }
+        }
+    }
+    let edge = null;
+    if (readable > 0 && !maxStopped) {
+        const lastStart = startTicks[readable - 1];
+        let tick;
+        if (aToB) {
+            tick = Math.max(lastStart, MIN_TICK_INDEX);
+        }
+        else {
+            tick = lastStart + TICK_ARRAY_SIZE * tickSpacing - 1;
+            if (lastStart + TICK_ARRAY_SIZE * tickSpacing > MAX_TICK_INDEX)
+                tick = MAX_TICK_INDEX;
+        }
+        edge = { tick, sqrtPrice: whirlpoolSqrtPriceAtTick(tick) };
+    }
+    return { tickArrays, startTicks, boundaries, edge, readable, hasActiveOrder };
+}
+/** Fetch + decode one FusionPool and freeze both directions' boundary windows. Read-only against the loader. */
+export async function fetchDefiTunaPoolConfig(load, pool) {
+    const data = await load(pool);
+    if (data === null)
+        throw new Error(`${SLUG}: pool account ${pool} not found`);
+    if (data.length !== FUSION_POOL_ACCOUNT_SIZE) {
+        throw new Error(`${SLUG}: pool ${pool} has ${data.length} bytes, expected ${FUSION_POOL_ACCOUNT_SIZE}`);
+    }
+    if (!hasDiscriminator(data, FUSION_POOL_DISCRIMINATOR)) {
+        throw new Error(`${SLUG}: pool ${pool} has a foreign discriminator (not a FusionPool account)`);
+    }
+    const codec = getAddressCodec();
+    const tokenMintA = codec.decode(data.subarray(OFF_MINT_A, OFF_MINT_A + 32));
+    const tokenMintB = codec.decode(data.subarray(OFF_MINT_B, OFF_MINT_B + 32));
+    // The swap accounts here are classic-SPL only, so a Token-2022 mint (or one
+    // carrying an un-routable extension) SELF-DROPS this pool: the thrown error is
+    // the graceful-drop signal the SvmRoute orchestrator catches. An unreadable
+    // mint falls back to the legacy assumption (a classic 82-byte mint classifies
+    // legacy → no throw → config built byte-identically to before).
+    const mintList = [tokenMintA, tokenMintB];
+    const mintDatas = await Promise.all(mintList.map((mint) => load(mint)));
+    for (let mi = 0; mi < mintList.length; mi++) {
+        const mint = mintList[mi];
+        const mintData = mintDatas[mi];
+        if (mintData === null)
+            continue;
+        if (classifyMintProgram(mint, mintData) === TOKEN_2022_PROGRAM_ID) {
+            throw new Error(`${SLUG}: dropping pool ${pool} — mint ${mint} is Token-2022 (this venue's swap is legacy-SPL only)`);
+        }
+        const { blocking } = parseMintExtensions(mintData);
+        if (blocking.length > 0) {
+            throw new Error(`${SLUG}: dropping pool ${pool} — mint ${mint} is un-routable: ${blocking.join("; ")}`);
+        }
+    }
+    const tickSpacing = Number(readUintLE(data, OFF_TICK_SPACING, 2));
+    const tickCurrentIndex = readI32(data, OFF_TICK_CURRENT);
+    const [aToB, bToA] = await Promise.all([
+        resolveWindow(load, pool, tickCurrentIndex, tickSpacing, true),
+        resolveWindow(load, pool, tickCurrentIndex, tickSpacing, false),
+    ]);
+    return {
+        venue: SLUG,
+        pool,
+        direction: "aToB",
+        tokenMintA,
+        tokenMintB,
+        tokenVaultA: codec.decode(data.subarray(OFF_VAULT_A, OFF_VAULT_A + 32)),
+        tokenVaultB: codec.decode(data.subarray(OFF_VAULT_B, OFF_VAULT_B + 32)),
+        tickSpacing,
+        feeRate: Number(readUintLE(data, OFF_FEE_RATE, 2)),
+        liquidity: readUintLE(data, OFF_LIQUIDITY, 16),
+        sqrtPrice: readUintLE(data, OFF_SQRT_PRICE, 16),
+        tickCurrentIndex,
+        windows: { aToB, bToA },
+    };
+}
+/** Family facade for the recipe orchestrator (ladder-only, like orca-whirlpool/raydium-clmm/byreal). */
+export const defituna = {
+    slug: SLUG,
+    programId: DEFITUNA_PROGRAM_ID,
+    tokenProgram: TOKEN_PROGRAM,
+    fetchPoolConfig: fetchDefiTunaPoolConfig,
+};
+//# sourceMappingURL=index.js.map

package/sdk/dist/svm/venues/defituna/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/svm/venues/defituna/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFG;AACH,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,EACL,cAAc,EACd,cAAc,EACd,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,gCAAgC,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,6CAA6C,CAAC,CAAC;AAC1F,MAAM,aAAa,GAAG,OAAO,CAAC,6CAA6C,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAC5C,qFAAqF;AACrF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC1F,kFAAkF;AAClF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,oHAAoH;AACpH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,+FAA+F;AAC/F,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC,6FAA6F;AAC7F,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,qBAAqB;AACrB,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAoCzC,MAAM,OAAO,GAAG,CAAC,IAAgB,EAAE,MAAc,EAAU,EAAE;IAC3D,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,OAAO,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC;AACF,SAAS,gBAAgB,CAAC,IAAgB,EAAE,aAAgC;IAC1E,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAC5D,CAAC;AACD,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACzD,CAAC;AACD,KAAK,UAAU,kBAAkB,CAAC,IAAa,EAAE,SAAiB;IAChE,OAAO,gCAAgC,CAAC,mBAAmB,EAAE;QAC3D,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;QACtC,iBAAiB,CAAC,IAAI,CAAC;QACvB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC;AASD;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAgB,EAAE,SAAiB,EAAE,WAAmB;IAC7E,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,IAAI,GAAG,GAAG,YAAY,CAAC;IACvB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,eAAe,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;YACd,GAAG,IAAI,CAAC,CAAC;YACT,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,CAAC;YAAE,MAAM,CAAC,6DAA6D;QACnF,IAAI,GAAG,GAAG,oBAAoB,GAAG,IAAI,CAAC,MAAM;YAAE,MAAM,CAAC,2CAA2C;QAChG,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACtD,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,mBAAmB,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,SAAS,GAAG,IAAI,GAAG,WAAW;YACpC,UAAU,EAAE,GAAG;YACf,eAAe;YACf,QAAQ,EAAE,eAAe,GAAG,EAAE,IAAI,mBAAmB,GAAG,EAAE;SAC3D,CAAC,CAAC;QACH,GAAG,IAAI,oBAAoB,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAC1B,IAAmB,EACnB,IAAa,EACb,gBAAwB,EACxB,WAAmB,EACnB,IAAa;IAEb,MAAM,UAAU,GAAG,gBAAgB,CAAC,gBAAgB,EAAE,WAAW,EAAE,IAAI,CAItE,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CACnC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAC3D,CAAgC,CAAC;IAClC,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU;YAAE,MAAM,OAAO,CAAC,MAAM,CAAC;QACxD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,MAAM,KAAK,GACT,IAAI,KAAK,IAAI;YACb,IAAI,CAAC,MAAM,IAAI,kBAAkB;YACjC,gBAAgB,CAAC,IAAI,EAAE,wBAAwB,CAAC;YAChD,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,MAAM;QAClB,MAAM,CAAC,IAAI,CAAC,IAAkB,CAAC,CAAC;QAChC,QAAQ,IAAI,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,UAAU,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAC;QACvE,MAAM,UAAU,GACd,CAAC,KAAK,CAAC;YACL,CAAC,CAAC,IAAI;gBACJ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnF,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;YACpF,CAAC,CAAC,IAAI;gBACJ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC9C,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC;gBACd,UAAU,EAAE,CAAC;gBACb,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC;aAC5C,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,QAAQ;gBAAE,cAAc,GAAG,IAAI,CAAC;YACtC,IAAI,UAAU,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;gBAClD,UAAU,GAAG,IAAI,CAAC;gBAClB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,GAA+C,IAAI,CAAC;IAC5D,IAAI,QAAQ,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAE,CAAC;QAC5C,IAAI,IAAY,CAAC;QACjB,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,GAAG,eAAe,GAAG,WAAW,GAAG,CAAC,CAAC;YACrD,IAAI,SAAS,GAAG,eAAe,GAAG,WAAW,GAAG,cAAc;gBAAE,IAAI,GAAG,cAAc,CAAC;QACxF,CAAC;QACD,IAAI,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7D,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;AAChF,CAAC;AAED,gHAAgH;AAChH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAmB,EACnB,IAAa;IAEb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kBAAkB,IAAI,YAAY,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,UAAU,IAAI,QAAQ,IAAI,CAAC,MAAM,oBAAoB,wBAAwB,EAAE,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,yBAAyB,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,UAAU,IAAI,yDAAyD,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,EAAE,CAAC,CAAY,CAAC;IACvF,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,EAAE,CAAC,CAAY,CAAC;IACvF,4EAA4E;IAC5E,+EAA+E;IAC/E,4EAA4E;IAC5E,8EAA8E;IAC9E,gEAAgE;IAChE,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,IAAI,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,qBAAqB,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,mBAAmB,IAAI,WAAW,IAAI,uDAAuD,CACrG,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,mBAAmB,IAAI,WAAW,IAAI,oBAAoB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACzD,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,IAAI,CAAC;QAC9D,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,KAAK,CAAC;KAChE,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE,IAAI;QACX,IAAI;QACJ,SAAS,EAAE,MAAM;QACjB,UAAU;QACV,UAAU;QACV,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,EAAE,CAAC,CAAY;QAClF,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,EAAE,CAAC,CAAY;QAClF,WAAW;QACX,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAClD,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC;QAC9C,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;QAC/C,gBAAgB;QAChB,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,IAAI,EAAE,IAAI;IACV,SAAS,EAAE,mBAAmB;IAC9B,YAAY,EAAE,aAAa;IAC3B,eAAe,EAAE,uBAAuB;CACzC,CAAC"}

package/sdk/dist/svm/venues/denali/index.d.ts

@@ -0,0 +1,39 @@
+import type { Address } from "@solana/kit";
+import type { AccountLoader, PoolConfig, VenueAccount } from "../types.js";
+declare const SLUG = "denali";
+export declare const DENALI_PROGRAM_ID: Address<"DNL1tgEj3nJovHw9jtyCCQD3arssCJzkmpDizknwzey4">;
+/** Owner of every pool's per-pool oracle PDA — see the file header. */
+export declare const DENALI_ORACLE_PROGRAM_ID: Address<"DZNTS5ujuiyx1mazqCPdYPzEyE2VrTPPb6QbqBUftJbY">;
+/**
+ * Protocol-wide global config account — constant across every pool
+ * (real-chain-confirmed across 5 transactions on 2 different pools). Read-only,
+ * not a signer.
+ */
+export declare const DENALI_GLOBAL_CONFIG: Address<"46TF9vo4oqnLuY7LrueQybyJoLsgMeauUhTHFYfcgFyJ">;
+export declare const OFF_MINT_A = 72;
+export declare const OFF_MINT_B = 104;
+export declare const OFF_VAULT_A = 136;
+export declare const OFF_VAULT_B = 168;
+export interface DenaliPoolConfig extends PoolConfig {
+    venue: typeof SLUG;
+    /** 0 = mintA in / mintB out, 1 = mintB in / mintA out. */
+    direction: 0 | 1;
+    mintA: Address;
+    mintB: Address;
+    vaultA: Address;
+    vaultB: Address;
+    /** Per-pool PDA, derived off `pool` — see the file header. */
+    oracle: Address;
+}
+export declare function fetchDenaliPoolConfig(load: AccountLoader, pool: Address): Promise<DenaliPoolConfig>;
+declare function quoteAccounts(base: PoolConfig): VenueAccount[];
+/** Family facade for the recipe orchestrator. */
+export declare const denali: {
+    slug: string;
+    kind: "constant-product";
+    programId: Address<"DNL1tgEj3nJovHw9jtyCCQD3arssCJzkmpDizknwzey4">;
+    fetchPoolConfig: typeof fetchDenaliPoolConfig;
+    quoteAccounts: typeof quoteAccounts;
+};
+export {};
+//# sourceMappingURL=index.d.ts.map

package/sdk/dist/svm/venues/denali/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/svm/venues/denali/index.ts"],"names":[],"mappings":"AA4IA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3E,QAAA,MAAM,IAAI,WAAW,CAAC;AACtB,eAAO,MAAM,iBAAiB,yDAA0D,CAAC;AACzF,uEAAuE;AACvE,eAAO,MAAM,wBAAwB,yDAA0D,CAAC;AAChG;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,yDAA0D,CAAC;AAG5F,eAAO,MAAM,UAAU,KAAK,CAAC;AAC7B,eAAO,MAAM,UAAU,MAAM,CAAC;AAC9B,eAAO,MAAM,WAAW,MAAM,CAAC;AAC/B,eAAO,MAAM,WAAW,MAAM,CAAC;AAO/B,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IAClD,KAAK,EAAE,OAAO,IAAI,CAAC;IACnB,0DAA0D;IAC1D,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,MAAM,EAAE,OAAO,CAAC;CACjB;AAQD,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,aAAa,EACnB,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,gBAAgB,CAAC,CAkD3B;AAED,iBAAS,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,EAAE,CAMvD;AAED,iDAAiD;AACjD,eAAO,MAAM,MAAM;;;;;;CAMlB,CAAC"}

package/sdk/dist/svm/venues/denali/index.js

@@ -0,0 +1,226 @@
+/**
+ * Denali venue adapter — a closed-source, oracle-anchored AMM (program
+ * `DNL1tgEj3nJovHw9jtyCCQD3arssCJzkmpDizknwzey4`). No on-chain Anchor IDL
+ * ships for this program, so the account layout, swap instruction, CPI plan
+ * and quote curve below are all recovered by binary/account inspection and
+ * transaction archaeology (`getSignaturesForAddress` + `getTransaction`,
+ * jsonParsed, on 5 real landed swaps across 2 real pools), cross-validated by
+ * our own `simulateTransaction` calls (`sigVerify:false` — the account-meta
+ * signer BIT drives execution without needing that key's real signature) at
+ * 6 (size, direction) combinations against the DEPLOYED program on live
+ * mainnet state, 2026-07-31.
+ *
+ * ── Pool account (517 bytes, FIXED size — confirmed on all 19 live pools via
+ * a `getProgramAccounts` dataSize:517 sweep) ──
+ * Recovered by locating the KNOWN mint/vault addresses of two real pools as
+ * raw bytes inside their own accounts (the same technique bisonfi/obric-v2/
+ * solfi-v2 used), then confirmed identical on all 19:
+ *   disc (8 bytes, Anchor-style, constant: dbbed53700e3c69a) @ 0
+ *   OFF_MINT_A  = 72   (pubkey, 32 bytes)
+ *   OFF_MINT_B  = 104  (pubkey, 32 bytes — every one of the 19 live pools has
+ *                       mintB == USDC; Denali reads as a USDC-quoted-only AMM
+ *                       in the observed universe, though nothing in the
+ *                       decode below assumes that)
+ *   OFF_VAULT_A = 136  (pubkey, 32 bytes — mintA's SPL vault)
+ *   OFF_VAULT_B = 168  (pubkey, 32 bytes — mintB's SPL vault)
+ * bytes[8:40]/bytes[40:72] are two protocol-wide constant pubkeys (identical
+ * across every pool inspected — an admin/config authority pair, not
+ * per-pool state); bytes[200:] hold further config/state this integration
+ * does not decode (see "Quote curve" below).
+ *
+ * ── The oracle account is a DERIVABLE PDA, not caller-supplied freely ──
+ * Denali's swap CPI takes a per-pool oracle account (105 bytes, owned by a
+ * SEPARATE closed-source program `DZNTS5ujuiyx1mazqCPdYPzEyE2VrTPPb6QbqBUftJbY`)
+ * that is NOT embedded anywhere in the pool's own 517 bytes. It IS, however,
+ * an exact PDA: `findProgramAddress(["oracle", poolAddress], DZNTS5uj...)` —
+ * verified bit-for-bit against the real oracle account address on FOUR
+ * separate pools (the 2 pools this file's evidence otherwise cites, plus 2
+ * more sampled cold from the dataSize:517 sweep, all four owned by
+ * DZNTS5uj... at the derived address). `fetchPoolConfig` derives it directly
+ * via `@solana/kit`'s `getProgramDerivedAddress` — no extra RPC round trip,
+ * no hardcoded per-pool table.
+ *
+ * ── Global config account — a single protocol-wide constant, NOT per-pool
+ * (identical across every one of the 5 real transactions inspected, 2
+ * different pools): `46TF9vo4oqnLuY7LrueQybyJoLsgMeauUhTHFYfcgFyJ` (139
+ * bytes, owned by the Denali program itself).
+ *
+ * ── Swap instruction (disc 0x68688356a1bdb4d8, 25 bytes total) — fully
+ * reverse-engineered from 5 real landed swaps (jsonParsed inner-instruction
+ * decode of the `transferChecked` CPIs Denali itself issues, which name
+ * source/destination/authority/mint/amount unambiguously) plus 6 of our own
+ * direct `simulateTransaction` probes ──
+ *   bytes[0:8]  : discriminator, constant, 68688356a1bdb4d8
+ *   byte[8]     : direction — 0 = mintA in / mintB out, 1 = mintB in / mintA
+ *                 out (real-chain-confirmed BOTH ways: a real mintA->mintB
+ *                 trade carried 0, a real mintB->mintA trade on a DIFFERENT
+ *                 pool carried 1, with the identical instruction shape)
+ *   bytes[9:17] : amountIn, u64 LE (EXACT — confirmed against the real
+ *                 vault-delta on every one of the 5 real swaps, and against
+ *                 the program's own emitted event on all 6 of our probes)
+ *   bytes[17:25]: minAmountOut, u64 LE — 0 in every real sample observed;
+ *                 kept 0 here too (Sauce's own `minOut`/`avgPriceLimit` at
+ *                 the merge level is the real floor, same convention as
+ *                 every other venue-min-out-rides-1 ladder in this repo)
+ *
+ * ── Accounts (12, FIXED order regardless of direction — confirmed: the SAME
+ * 12-account order recovered a real mintA->mintB swap AND a real mintB->mintA
+ * swap on a different pool; only the `direction` byte and which side of the
+ * transferCheckeds Denali issues flips, never the account list) ──
+ *   0  trader (signer, writable)          — token authority for the deposit side
+ *   1  pool   (writable)                  — the 517-byte pool account; ALSO the
+ *                                            vault-authority PDA that signs the
+ *                                            withdrawal-side transferChecked
+ *                                            (Denali's own invoke_signed — the
+ *                                            caller never marks it as signer)
+ *   2  mintA  (readonly)
+ *   3  mintB  (readonly)
+ *   4  vaultA (writable)
+ *   5  vaultB (writable)
+ *   6  TOKEN_PROGRAM (readonly)
+ *   7  TOKEN_PROGRAM (readonly, listed TWICE — real-chain-confirmed, not a
+ *      transcription artifact, same pattern bisonfi's CPI carries)
+ *   8  oracle (readonly, per-pool PDA — see above)
+ *   9  global config (readonly, protocol-wide constant — see above)
+ *   10 userAtaA (writable)
+ *   11 userAtaB (writable)
+ *
+ * There is NO extra required signer beyond the trader itself — accounts
+ * 1/8/9 are all `signer:false` in every real transaction inspected (account
+ * 1's withdrawal-side signature is internal, program-derived). This venue
+ * has NO whitelisting/authority blocker at the CPI level: a Sauce-built cook
+ * can land a real Denali swap today.
+ *
+ * ── Quote curve — HONEST LIMITATION ──
+ * The program's own emitted event (an Anchor `emit!`, disc 96a61ae11c59264f,
+ * decoded from our 6 real `simulateTransaction` probes: pool pubkey,
+ * direction, amountIn, amountOut, slot) shows Denali's REAL pricing is close
+ * to a FLAT, oracle-anchored per-slot RATE rather than a reserve-ratio curve:
+ * at 100/2,000/10,000 (x1e-8 units) mintA-in the realized rate was EXACTLY
+ * 0.92785058 all three sizes (a 100x size range, zero measurable curvature);
+ * at 1/20/100 (x1e-6 units) mintB-in it was 1.074637 at the two sizes sharing
+ * a slot and 1.07455614 one slot later (a ~0.0075% move attributable to the
+ * oracle price ticking, not to trade size). Separately, real landed-trade
+ * archaeology (5 samples, pre-dating the probes above) showed a plain
+ * virtual constant-product curve over the two vaults' OWN live SPL balances
+ * would have been ~14.0-14.3% BELOW the real output in the mintA->mintB
+ * direction (safe) but ~6.8-6.9% ABOVE the real output in the mintB->mintA
+ * direction on a DIFFERENT pool (UNSAFE — a favourable error) — i.e. the
+ * vault ratio is only weakly, not reliably, coupled to Denali's real
+ * (oracle-driven) execution price, and can drift either side of it depending
+ * on how skewed a pool's inventory currently sits relative to the live
+ * oracle feed. The oracle account's own 105-byte encoding (owned by a
+ * separate closed-source program) was not recovered within this
+ * integration's time budget, so this ladder cannot read the true live rate
+ * on-chain.
+ *
+ * Given that, this ships a DELIBERATELY conservative virtual constant-product
+ * curve over the vaults' own live balances, with the output side discounted
+ * by OUT_DISCOUNT_NUM/DEN = 2/3 (a 33% haircut) — comfortably past (~4.8x)
+ * the largest UNSAFE gap measured above (6.9%). This keeps the modeled quote
+ * safely BELOW the real venue's output at every rung observed so far — safe
+ * for election (a worse model never wins a share it doesn't deserve) and
+ * trivially monotone/concave (a plain x/(r+x) curve). The real Denali CPI
+ * still delivers its own authoritative output at cook time; this quote only
+ * shapes off-chain ranking and the on-chain slot's own predicted-output
+ * bookkeeping, never the real transfer. Recovering the true oracle encoding
+ * (and thus a tighter, less lossy quote) is a legitimate follow-up, not a
+ * blocker.
+ *
+ * ── CU (measured 2026-07-31, REAL mainnet `simulateTransaction` against the
+ * DEPLOYED program, sigVerify:false, pool 8njE4Rq7...) ──
+ * direction=0 (sell mintA for mintB): 23,460 CU FLAT at 1/20/100
+ * mintA-token-equivalent sizes (a 100x range) — no measurable size
+ * dependence, consistent with the flat-rate pricing above. direction=1 (buy
+ * mintA with mintB): 32,253-32,517 CU across 1/20/100 mintB-token-equivalent
+ * sizes — likewise essentially flat. This is Denali's OWN native CPI cost
+ * only, not this ladder's own setup-read + interpreter overhead.
+ */
+import { address, getAddressCodec, getAddressEncoder } from "@solana/kit";
+import { memoizedGetProgramDerivedAddress } from "../pda-memo.js";
+import { TOKEN_2022_PROGRAM_ID, classifyMintProgram } from "../../token-program.js";
+import { parseMintExtensions } from "../../token-extensions.js";
+const SLUG = "denali";
+export const DENALI_PROGRAM_ID = address("DNL1tgEj3nJovHw9jtyCCQD3arssCJzkmpDizknwzey4");
+/** Owner of every pool's per-pool oracle PDA — see the file header. */
+export const DENALI_ORACLE_PROGRAM_ID = address("DZNTS5ujuiyx1mazqCPdYPzEyE2VrTPPb6QbqBUftJbY");
+/**
+ * Protocol-wide global config account — constant across every pool
+ * (real-chain-confirmed across 5 transactions on 2 different pools). Read-only,
+ * not a signer.
+ */
+export const DENALI_GLOBAL_CONFIG = address("46TF9vo4oqnLuY7LrueQybyJoLsgMeauUhTHFYfcgFyJ");
+const POOL_ACCOUNT_SIZE = 517;
+export const OFF_MINT_A = 72;
+export const OFF_MINT_B = 104;
+export const OFF_VAULT_A = 136;
+export const OFF_VAULT_B = 168;
+const codec = getAddressCodec();
+const encoder = getAddressEncoder();
+const pubkeyAt = (data, offset) => codec.decode(data.subarray(offset, offset + 32));
+function denaliConfig(cfg) {
+    if (cfg.venue !== SLUG)
+        throw new Error(`${SLUG} ladder adapter got a '${cfg.venue}' pool config`);
+    return cfg;
+}
+export async function fetchDenaliPoolConfig(load, pool) {
+    const data = await load(pool);
+    if (data === null)
+        throw new Error(`${SLUG} pool ${pool} account not found`);
+    if (data.length !== POOL_ACCOUNT_SIZE) {
+        throw new Error(`${SLUG} pool ${pool} account data is ${data.length} bytes, expected ${POOL_ACCOUNT_SIZE}`);
+    }
+    const mintA = pubkeyAt(data, OFF_MINT_A);
+    const mintB = pubkeyAt(data, OFF_MINT_B);
+    // This venue's on-chain swap ix is legacy-SPL (Tokenkeg) only, so a
+    // Token-2022 mint (or one carrying an un-routable extension) must SELF-DROP
+    // the pool rather than be silently assumed legacy. The thrown error IS the
+    // graceful-drop signal (the SvmRoute orchestrator catches it and drops the
+    // venue). An unreadable mint falls back to the legacy assumption, keeping the
+    // classic 82-byte path byte-identical.
+    const mintList = [mintA, mintB];
+    const mintDatas = await Promise.all(mintList.map((mint) => load(mint)));
+    for (let mi = 0; mi < mintList.length; mi++) {
+        const mint = mintList[mi];
+        const mintData = mintDatas[mi];
+        if (mintData === null)
+            continue;
+        if (classifyMintProgram(mint, mintData) === TOKEN_2022_PROGRAM_ID) {
+            throw new Error(`${SLUG}: dropping pool ${pool} — mint ${mint} is Token-2022 (this venue's swap is legacy-SPL only)`);
+        }
+        const { blocking } = parseMintExtensions(mintData);
+        if (blocking.length > 0) {
+            throw new Error(`${SLUG}: dropping pool ${pool} — mint ${mint} is un-routable: ${blocking.join("; ")}`);
+        }
+    }
+    const oracle = await memoizedGetProgramDerivedAddress(DENALI_ORACLE_PROGRAM_ID, [
+        new TextEncoder().encode("oracle"),
+        encoder.encode(pool),
+    ]);
+    return {
+        venue: SLUG,
+        pool,
+        direction: 0,
+        mintA,
+        mintB,
+        vaultA: pubkeyAt(data, OFF_VAULT_A),
+        vaultB: pubkeyAt(data, OFF_VAULT_B),
+        oracle,
+    };
+}
+function quoteAccounts(base) {
+    const cfg = denaliConfig(base);
+    return [
+        { ref: "vaultA", address: cfg.vaultA },
+        { ref: "vaultB", address: cfg.vaultB },
+    ];
+}
+/** Family facade for the recipe orchestrator. */
+export const denali = {
+    slug: SLUG,
+    kind: "constant-product",
+    programId: DENALI_PROGRAM_ID,
+    fetchPoolConfig: fetchDenaliPoolConfig,
+    quoteAccounts,
+};
+//# sourceMappingURL=index.js.map

package/sdk/dist/svm/venues/denali/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/svm/venues/denali/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyIG;AACH,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAE,MAAM,gBAAgB,CAAC;AAGlE,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,IAAI,GAAG,QAAQ,CAAC;AACtB,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,8CAA8C,CAAC,CAAC;AACzF,uEAAuE;AACvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC,8CAA8C,CAAC,CAAC;AAChG;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC,8CAA8C,CAAC,CAAC;AAE5F,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAC;AAC7B,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,CAAC;AAC9B,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAC/B,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAE/B,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;AAChC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;AACpC,MAAM,QAAQ,GAAG,CAAC,IAAgB,EAAE,MAAc,EAAW,EAAE,CAC7D,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AAcnD,SAAS,YAAY,CAAC,GAAe;IACnC,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI;QACpB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,GAAG,CAAC,KAAK,eAAe,CAAC,CAAC;IAC7E,OAAO,GAAuB,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAmB,EACnB,IAAa;IAEb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,SAAS,IAAI,oBAAoB,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,SAAS,IAAI,oBAAoB,IAAI,CAAC,MAAM,oBAAoB,iBAAiB,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAEzC,oEAAoE;IACpE,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,uCAAuC;IACvC,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,IAAI,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,qBAAqB,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,mBAAmB,IAAI,WAAW,IAAI,uDAAuD,CACrG,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,mBAAmB,IAAI,WAAW,IAAI,oBAAoB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,wBAAwB,EAAE;QAC9E,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAe;KACnC,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,IAAI;QACX,IAAI;QACJ,SAAS,EAAE,CAAC;QACZ,KAAK;QACL,KAAK;QACL,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QACnC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QACnC,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAgB;IACrC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO;QACL,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE;QACtC,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,kBAA2B;IACjC,SAAS,EAAE,iBAAiB;IAC5B,eAAe,EAAE,qBAAqB;IACtC,aAAa;CACd,CAAC"}