@eco-incorp/sauce 0.99.0

package/sdk/dist/svm/venues/lemmingsfi/index.js

@@ -0,0 +1,269 @@
+/**
+ * LemmingsFi venue adapter — a closed-source, no-on-chain-IDL push-oracle AMM
+ * (program `BQEJZUB4CzoT6UhRffoCkqCyqQNrCPCSGHcPEmsdbEsX`, Anchor-based —
+ * confirmed by a real `AnchorError` log path, see "STALENESS" below). No IDL
+ * account exists at the standard Anchor PDA (this program owns only 3
+ * accounts total on all of mainnet: two 310-byte pools + one 76-byte global
+ * config — confirmed by a full `getProgramAccounts` sweep), so every byte
+ * offset and instruction field below is recovered by direct account/
+ * transaction archaeology: locating a real pool's own known vault/mint
+ * addresses as raw bytes inside its account (the same method obric-v2 /
+ * solfi-v2 used), cross-checked against 394 real landed swaps
+ * (`getSignaturesForAddress` + `getTransaction` on the pool's own SPL vaults
+ * — filtering on the VAULT, not the pool, cleanly separates real swaps from
+ * the keeper's `UpdateOracle` spam, which never touches a vault) and
+ * validated with our own `simulateTransaction` calls (`sigVerify:false`)
+ * against the deployed program.
+ *
+ * ── Pool account (310 bytes) ──
+ *   offset 0   : 8-byte Anchor discriminator
+ *   offset 8   : mintA (32 bytes) — the "base" mint
+ *   offset 40  : mintB (32 bytes) — the "quote" mint
+ *   offset 72  : vaultA (32 bytes) — mintA's SPL token vault
+ *   offset 104 : vaultB (32 bytes) — mintB's SPL token vault
+ *   offset 168 : priceTick, u64 LE — see "PRICING MODEL" below
+ *   offset 184 : lastUpdateTs, u64 LE, Unix seconds — EXACT match to the
+ *                blockTime of the most recent `UpdateOracle` call in every
+ *                sample checked (dozens, two different pools)
+ *   offset 192 : lastUpdateSlot, u64 LE — EXACT match to that same call's slot
+ * (offsets 176/200/202 are additional `UpdateOracle`-written fields that do
+ * NOT correlate with the realized swap price in any of 394 real trades
+ * spanning 5 distinct price epochs — see PRICING MODEL; not used here.)
+ *
+ * ── PRICING MODEL — a solved, exact formula (not a haircut-guarded
+ * approximation like humidifi's) ──
+ * This is a push-oracle design: an off-chain keeper periodically calls
+ * `UpdateOracle` (disc `70 29 d1 12 f8 e2 fc bc`, 28-byte data: disc ++ 2×u64
+ * ++ 2×u16) to write a fresh price tick into the pool account; `Swap` reads
+ * that tick live and prices the trade off it — the pool's OWN vault-balance
+ * RATIO is NOT the price (measured live: the raw ratio implied ~1.82
+ * USDC/GEOD at capture time vs. a real traded rate of ~0.12-0.15 USDC/GEOD, a
+ * ~13x gap — using the ratio directly would be a ~13x-FAVOURABLE error in
+ * the GEOD-in/USDC-out direction, the exact hazard this integration's brief
+ * warns about). The vault ratio is only used here for the relative-depth
+ * capacity signal, never for pricing.
+ *
+ * The `priceTick` (offset 168) turned out to encode price EXACTLY:
+ * `price (mintB per mintA, natural/whole-token units) = (priceTick + 2) / 1000`
+ * — solved by correlating 394 real (amountIn, amountOut) pairs (found by
+ * filtering the pool's own vault signature history for real SPL transfers,
+ * not `UpdateOracle` calls, which touch no vault) against the `priceTick`
+ * active at trade time, across 5 distinct price epochs (119, 121, 122, 123,
+ * and the pool's current 131) in BOTH directions:
+ *   - a=123 (tick+2=125): 5 independent trades, amountOut/amountIn = EXACTLY
+ *     8000/1 (integer, zero remainder) every time — `1e6/(a+2)`.
+ *   - a=122,121,119: matched to 5-6 significant digits against the SAME
+ *     `1e6/(a+2)` formula (1e6/124=8064.516129…, 1e6/123=8130.080996…,
+ *     1e6/121=8264.462809…) — the tiny residual (<3e-6 relative) is
+ *     consistent with the real venue's own integer truncation, not a
+ *     modeling error.
+ *   - the 2 real GEOD-in/USDC-out trades found solve back to `a+2=125`
+ *     (124.999998, 124.999998) to the same precision, confirming the
+ *     formula is symmetric/exact in BOTH directions.
+ * Generalized to arbitrary mint decimals (this venue's sampled mints are
+ * GEOD=9dp / USDC=6dp, giving the `1e6` constant above as
+ * `1000 * 10^(decA-decB)`):
+ *   mintA-out (mintB in) = floor(mintBIn * K / (priceTick + 2))
+ *   mintB-out (mintA in) = floor(mintAIn * (priceTick + 2) / K)
+ *   where K = 1000 * 10^decA / 10^decB, reduced to an integer numerator/
+ *   denominator pair (kNum, kDen) — computed OFF-CHAIN once per pool from
+ *   each mint's own `decimals` byte (standard SPL Mint layout, offset 44)
+ *   and threaded through as ladder PARAMS (paramCount 2), never baked into
+ *   the compiled fragment as a literal — so a future LemmingsFi pool with a
+ *   different decimals pair reuses the SAME compiled shape.
+ * No fee/spread beyond this is detectable in the samples (every match is
+ * exact or truncation-level), so no additional haircut is applied — this
+ * ladder replicates the real math rather than approximating it, the same
+ * epistemic tier as obric-v2/solfi-v2, not humidifi's "curve unrecoverable,
+ * haircut a proxy" tier. A CAPACITY CLAMP against the live output-vault
+ * balance still applies (a huge order the venue's own vault cannot fund
+ * would revert the real CPI; capped to the same amount here) — concave-by-
+ * construction (linear-then-flat), monotone non-decreasing.
+ *
+ * ── STALENESS — a REAL, MEASURED, currently-active self-drop condition ──
+ * The pool's `UpdateOracle` keeper (previously pinging every ~6s, 24/7, for
+ * months — pool2 alone shows 15,000+ calls in a 27-hour window) stopped
+ * 2026-05-09 (well over two months before this integration): `lastUpdateTs`
+ * on the ONLY currently-populated pool has not advanced since. Constructing
+ * our own `Swap` instruction (correct discriminator/accounts/data — see
+ * below) and `simulateTransaction`-ing it against the REAL deployed program
+ * at 6 sizes across both directions reproduces the SAME real, on-chain,
+ * business-logic revert every time:
+ *   `AnchorError thrown in programs/lemmingsfi/src/instructions/
+ *    swap_common.rs:74. Error Code: StaleOracle. Error Number: 6003.`
+ * — proof the instruction format below is byte-correct (the program parses
+ * it and reaches its OWN logic, not an accounts/data-shape rejection) AND
+ * that a cook including this venue TODAY would revert the CPI. Since an SVM
+ * CPI failure aborts the whole transaction (no per-venue catch/re-route at
+ * execution time), `gate` (wired in the consuming app SVM solver entry's `FAMILIES.
+ * lemmingsfi.gate`) self-drops any candidate whose `lastUpdateTs` is more
+ * than `STALE_AFTER_SECONDS` old — a SEQUENCING condition, not a permanent
+ * disable: the instant the keeper posts a fresh tick, `lastUpdateTs`
+ * advances and this venue re-admits itself with zero code changes. 60s is
+ * chosen deliberately STRICT (well under the keeper's own historical ~6s
+ * cadence) so an admitted candidate is essentially guaranteed to still be
+ * fresh by cook time; the real on-chain threshold itself is not recovered
+ * (no live/fresh pool was available to bisect it against), so erring
+ * stricter is the only safe direction.
+ *
+ * ── Swap instruction — TWO discriminators exist; this adapter uses the
+ * PERMISSIONLESS one ──
+ * Real transaction history shows two distinct swap-family discriminators on
+ * this program:
+ *   - `Swap2` (`41 4b 3f 4c eb 5b 5b 88`, 26-byte data): its 9th account is
+ *     `8xeaWCsJYxRoudEZGJWURdfrtFhLYZz9b4iHJnW5tb3d`, a fixed
+ *     partner/integrator account every real `Swap2` sample requires as a
+ *     cosigner — a signer this recipe cannot produce autonomously.
+ *   - `Swap` (`f8 c6 9e 91 e1 75 87 c8`, 25-byte data): its 9th account is
+ *     the PUBLIC `Sysvar1nstructions1111111111111111111111111` — no special
+ *     signer, fully permissionless. THIS is the instruction this adapter
+ *     emits (never `Swap2`), so LemmingsFi needs no whitelist/partner
+ *     cosign to execute for real.
+ * `Swap`'s 25-byte data: `disc(8) ++ packed(8) ++ zero(9)`. `packed` (u64 LE)
+ * is NOT the plain amountIn — it is `(amountIn << 8) | directionBit`,
+ * PROVEN exactly (integer division, zero remainder) across all 394 real
+ * samples: `packed / 256n === amountIn` and `packed % 256n === directionBit`
+ * (0 = mintB-in/mintA-out, 1 = mintA-in/mintB-out) for every one. The 9
+ * trailing zero bytes (min-out + padding, never observed non-zero in any
+ * real sample) are emitted as-is; the recipe's own terminal realized-delta
+ * `minOut` check is the real floor. Reproducing this exact left-shifted
+ * encoding needs a small, additive codegen extension
+ * (`SvmRouteSlot.patchMultiplierIn`) since the existing patch pipeline
+ * (XOR, then optional divide) had no multiply step; every other family
+ * leaves it unset and is byte-for-byte unaffected.
+ *
+ * ── Accounts (9, fixed order regardless of direction) ──
+ *   0 signer (writable, signer) — the trader
+ *   1 config (readonly) — `6DZQsK3i1YtvyQCsWxZpY1Ski8dmSjqYnjCUPQiMqT1Z`, the
+ *     ONLY 76-byte account this program owns anywhere on mainnet — a
+ *     program-wide singleton (both pools' real swaps use this SAME address)
+ *   2 pool (writable)
+ *   3 vaultA (writable)
+ *   4 vaultB (writable)
+ *   5 user ata for mintA (writable)
+ *   6 user ata for mintB (writable)
+ *   7 TOKEN_PROGRAM (readonly)
+ *   8 Sysvar1nstructions (readonly)
+ */
+import { address, getAddressCodec } from "@solana/kit";
+import { readUintLE } from "../math.js";
+import { TOKEN_2022_PROGRAM_ID, classifyMintProgram } from "../../token-program.js";
+import { parseMintExtensions } from "../../token-extensions.js";
+const SLUG = "lemmingsfi";
+export const LEMMINGSFI_PROGRAM_ID = address("BQEJZUB4CzoT6UhRffoCkqCyqQNrCPCSGHcPEmsdbEsX");
+/**
+ * The program's only 76-byte owned account, anywhere — a global singleton
+ * both real pools' real swaps pass as account[1]. See file header.
+ */
+export const LEMMINGSFI_CONFIG = address("6DZQsK3i1YtvyQCsWxZpY1Ski8dmSjqYnjCUPQiMqT1Z");
+const POOL_ACCOUNT_SIZE = 310;
+export const OFF_MINT_A = 8;
+export const OFF_MINT_B = 40;
+export const OFF_VAULT_A = 72;
+export const OFF_VAULT_B = 104;
+export const OFF_PRICE_TICK = 168;
+export const OFF_LAST_UPDATE_TS = 184;
+/** Standard SPL Mint layout: `decimals` is a single byte at offset 44. */
+const MINT_DECIMALS_OFFSET = 44;
+const MINT_ACCOUNT_MIN_SIZE = 45;
+const PRICE_TICK_SCALE = 1000n;
+/**
+ * Self-drop threshold — see the file header's STALENESS section. Deliberately
+ * far stricter than the keeper's own historical ~6s cadence; the real
+ * on-chain threshold is not independently recovered.
+ */
+export const STALE_AFTER_SECONDS = 60n;
+function gcd(a, b) {
+    a = a < 0n ? -a : a;
+    b = b < 0n ? -b : b;
+    while (b !== 0n) {
+        [a, b] = [b, a % b];
+    }
+    return a;
+}
+/** Reduced (num, den) for `1000 * 10^decA / 10^decB`. */
+function priceScaleFactor(decA, decB) {
+    let num = PRICE_TICK_SCALE * 10n ** BigInt(decA);
+    let den = 10n ** BigInt(decB);
+    const g = gcd(num, den);
+    if (g > 1n) {
+        num /= g;
+        den /= g;
+    }
+    return { kNum: num, kDen: den };
+}
+const codec = getAddressCodec();
+const pubkeyAt = (data, offset) => codec.decode(data.subarray(offset, offset + 32));
+function lemmingsfiConfig(cfg) {
+    if (cfg.venue !== SLUG)
+        throw new Error(`${SLUG} ladder adapter got a '${cfg.venue}' pool config`);
+    return cfg;
+}
+function mintDecimalsFrom(mint, data) {
+    if (data === null)
+        throw new Error(`${SLUG} mint ${mint} account not found`);
+    if (data.length < MINT_ACCOUNT_MIN_SIZE) {
+        throw new Error(`${SLUG} mint ${mint} account is ${data.length} bytes, too small for an SPL Mint`);
+    }
+    return data[MINT_DECIMALS_OFFSET];
+}
+export async function fetchLemmingsFiPoolConfig(load, pool) {
+    const data = await load(pool);
+    if (data === null)
+        throw new Error(`${SLUG} pool ${pool} account not found`);
+    if (data.length !== POOL_ACCOUNT_SIZE) {
+        throw new Error(`${SLUG} pool ${pool} account data is ${data.length} bytes, expected ${POOL_ACCOUNT_SIZE}`);
+    }
+    const mintA = pubkeyAt(data, OFF_MINT_A);
+    const mintB = pubkeyAt(data, OFF_MINT_B);
+    // Load each mint ONCE — the same bytes serve both T22 detection and the
+    // decimals read below. The `Swap` ix is legacy-SPL only (Tokenkeg account[7]),
+    // so SELF-DROP a Token-2022 mint (or one carrying an un-routable extension) by
+    // throwing — the SvmRoute orchestrator catches a fetchPoolConfig throw and
+    // drops the venue. An unreadable mint would fail the decimals read below anyway.
+    const [mintAData, mintBData] = await Promise.all([load(mintA), load(mintB)]);
+    for (const [mint, mintData] of [
+        [mintA, mintAData],
+        [mintB, mintBData],
+    ]) {
+        if (mintData === null)
+            continue;
+        if (classifyMintProgram(mint, mintData) === TOKEN_2022_PROGRAM_ID) {
+            throw new Error(`${SLUG}: dropping pool ${pool} — mint ${mint} is Token-2022 (this venue's swap is legacy-SPL only)`);
+        }
+        const { blocking } = parseMintExtensions(mintData);
+        if (blocking.length > 0) {
+            throw new Error(`${SLUG}: dropping pool ${pool} — mint ${mint} is un-routable: ${blocking.join("; ")}`);
+        }
+    }
+    const decA = mintDecimalsFrom(mintA, mintAData);
+    const decB = mintDecimalsFrom(mintB, mintBData);
+    const { kNum, kDen } = priceScaleFactor(decA, decB);
+    return {
+        venue: SLUG,
+        pool,
+        direction: 0,
+        mintA,
+        mintB,
+        vaultA: pubkeyAt(data, OFF_VAULT_A),
+        vaultB: pubkeyAt(data, OFF_VAULT_B),
+        kNum,
+        kDen,
+        lastUpdateTs: readUintLE(data, OFF_LAST_UPDATE_TS, 8),
+    };
+}
+function quoteAccounts(base) {
+    const cfg = lemmingsfiConfig(base);
+    return [
+        { ref: "vaultA", address: cfg.vaultA },
+        { ref: "vaultB", address: cfg.vaultB },
+    ];
+}
+export const lemmingsfi = {
+    slug: SLUG,
+    kind: "constant-product",
+    programId: LEMMINGSFI_PROGRAM_ID,
+    fetchPoolConfig: fetchLemmingsFiPoolConfig,
+    quoteAccounts,
+};
+//# sourceMappingURL=index.js.map

package/sdk/dist/svm/venues/lemmingsfi/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/svm/venues/lemmingsfi/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkJG;AACH,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGvD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,IAAI,GAAG,YAAY,CAAC;AAC1B,MAAM,CAAC,MAAM,qBAAqB,GAChC,OAAO,CAAC,8CAA8C,CAAC,CAAC;AAC1D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4D,OAAO,CAC/F,8CAA8C,CAC/C,CAAC;AAEF,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAC5B,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAC;AAC7B,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAC9B,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAC/B,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AAClC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,0EAA0E;AAC1E,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS;IAC/B,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,yDAAyD;AACzD,SAAS,gBAAgB,CAAC,IAAY,EAAE,IAAY;IAClD,IAAI,GAAG,GAAG,gBAAgB,GAAG,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACX,GAAG,IAAI,CAAC,CAAC;QACT,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;AAChC,MAAM,QAAQ,GAAG,CAAC,IAAgB,EAAE,MAAc,EAAW,EAAE,CAC7D,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AAiBnD,SAAS,gBAAgB,CAAC,GAAe;IACvC,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI;QACpB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,GAAG,CAAC,KAAK,eAAe,CAAC,CAAC;IAC7E,OAAO,GAA2B,CAAC;AACrC,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAa,EAAE,IAAuB;IAC9D,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,SAAS,IAAI,oBAAoB,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,SAAS,IAAI,eAAe,IAAI,CAAC,MAAM,mCAAmC,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAmB,EACnB,IAAa;IAEb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,SAAS,IAAI,oBAAoB,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,SAAS,IAAI,oBAAoB,IAAI,CAAC,MAAM,oBAAoB,iBAAiB,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzC,wEAAwE;IACxE,+EAA+E;IAC/E,+EAA+E;IAC/E,2EAA2E;IAC3E,iFAAiF;IACjF,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7E,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI;QAC7B,CAAC,KAAK,EAAE,SAAS,CAAC;QAClB,CAAC,KAAK,EAAE,SAAS,CAAC;KACV,EAAE,CAAC;QACX,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,IAAI,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,qBAAqB,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,mBAAmB,IAAI,WAAW,IAAI,uDAAuD,CACrG,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,mBAAmB,IAAI,WAAW,IAAI,oBAAoB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,OAAO;QACL,KAAK,EAAE,IAAI;QACX,IAAI;QACJ,SAAS,EAAE,CAAC;QACZ,KAAK;QACL,KAAK;QACL,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QACnC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QACnC,IAAI;QACJ,IAAI;QACJ,YAAY,EAAE,UAAU,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAgB;IACrC,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO;QACL,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE;QACtC,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,kBAA2B;IACjC,SAAS,EAAE,qBAAqB;IAChC,eAAe,EAAE,yBAAyB;IAC1C,aAAa;CACd,CAAC"}

package/sdk/dist/svm/venues/manifest/index.d.ts

@@ -0,0 +1,80 @@
+import type { Address } from "@solana/kit";
+import type { AccountLoader, PoolConfig } from "../types.js";
+declare const SLUG = "manifest";
+export declare const MANIFEST_PROGRAM_ID: Address<"MNFSTqtC93rEfYHB6hF82sKdZpUDFWkViLByLd1k1Ms">;
+/** MarketFixed size — the dynamic RB-tree/free-list region begins here. */
+export declare const MARKET_FIXED_SIZE = 256;
+/** sha256-independent packed discriminant (u64 LE @0) — MARKET_FIXED_DISCRIMINANT. */
+export declare const MARKET_DISCRIMINANT = 4859840929024028656n;
+/** Price is stored as QuoteAtomsPerBaseAtom.inner = price * 1e18 (u128 LE). */
+export declare const PRICE_D18 = 1000000000000000000n;
+export declare const OFF_BASE_MINT_DECIMALS = 9;
+export declare const OFF_QUOTE_MINT_DECIMALS = 10;
+export declare const OFF_BIDS_ROOT = 156;
+export declare const OFF_BIDS_BEST = 160;
+export declare const OFF_ASKS_ROOT = 164;
+export declare const OFF_ASKS_BEST = 168;
+export declare const OFF_NODE_LEFT = 0;
+export declare const OFF_NODE_RIGHT = 4;
+export declare const OFF_NODE_PARENT = 8;
+export declare const OFF_ORDER_PRICE = 16;
+export declare const OFF_ORDER_SIZE = 32;
+export declare const OFF_ORDER_SEQ = 40;
+export declare const OFF_ORDER_LAST_VALID_SLOT = 52;
+export declare const OFF_ORDER_IS_BID = 56;
+export declare const OFF_ORDER_TYPE = 57;
+/** u32::MAX — the tree/free-list null pointer (state/hypertree.rs). */
+export declare const NIL = 4294967295;
+/** OrderType::Global — draws from a separate global account; a taker halts at it. */
+export declare const ORDER_TYPE_GLOBAL = 3;
+/** RestingOrder.last_valid_slot sentinel for "no expiration". */
+export declare const NO_EXPIRATION_LAST_VALID_SLOT = 0;
+/**
+ * Shipped top-of-book levels per direction. Each level is ~2 cfg words
+ * (DataIndex + sequence_number) + one walk iteration; sized against the
+ * interpreter's per-order cost (measured in budget.ts / the CU suite). Moves
+ * in lockstep with the fragment's unrolled setup (ladder.ts) and the mirror.
+ */
+export declare const MANIFEST_MAX_ORDERS = 16;
+export interface ManifestOrder {
+    /** Byte offset of the order's block within the dynamic region (DataIndex). */
+    dataIndex: number;
+    /** Monotonic per-order id — the drift-invariant live identity anchor. */
+    sequenceNumber: bigint;
+}
+export interface ManifestWindow {
+    /** Best-first resting orders (walk order) — the taker's match sequence. */
+    orders: ManifestOrder[];
+}
+export interface ManifestPoolConfig extends PoolConfig {
+    venue: typeof SLUG;
+    /** 'baseIn' (default) sells base for quote; 'quoteIn' buys base with quote. */
+    direction: "baseIn" | "quoteIn";
+    baseMint: Address;
+    quoteMint: Address;
+    baseVault: Address;
+    quoteVault: Address;
+    baseDecimals: number;
+    quoteDecimals: number;
+    /** Direction-keyed prepare-declared order windows (see the header). */
+    windows: {
+        baseIn: ManifestWindow;
+        quoteIn: ManifestWindow;
+    };
+}
+/**
+ * Fetch + gate one Manifest market (see the header for the gate list) and
+ * freeze both directions' top-of-book order windows. Read-only against the
+ * loader; the whole book is in this one account, so a quote needs no other
+ * account.
+ */
+export declare function fetchManifestConfig(load: AccountLoader, pool: Address): Promise<ManifestPoolConfig>;
+/** Family facade for the recipe orchestrator (ladder-only — no v1 adapter, not in the v1 registry). */
+export declare const manifest: {
+    slug: string;
+    programId: Address<"MNFSTqtC93rEfYHB6hF82sKdZpUDFWkViLByLd1k1Ms">;
+    tokenProgram: Address<"TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA">;
+    fetchPoolConfig: typeof fetchManifestConfig;
+};
+export {};
+//# sourceMappingURL=index.d.ts.map

package/sdk/dist/svm/venues/manifest/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/svm/venues/manifest/index.ts"],"names":[],"mappings":"AAyEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAI7D,QAAA,MAAM,IAAI,aAAa,CAAC;AAExB,eAAO,MAAM,mBAAmB,wDAAyD,CAAC;AAG1F,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,sFAAsF;AACtF,eAAO,MAAM,mBAAmB,uBAA6B,CAAC;AAC9D,+EAA+E;AAC/E,eAAO,MAAM,SAAS,uBAA6B,CAAC;AAGpD,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAK1C,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,aAAa,MAAM,CAAC;AAKjC,eAAO,MAAM,aAAa,IAAI,CAAC;AAC/B,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,eAAO,MAAM,eAAe,IAAI,CAAC;AACjC,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,eAAO,MAAM,cAAc,KAAK,CAAC;AACjC,eAAO,MAAM,aAAa,KAAK,CAAC;AAChC,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAC5C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,uEAAuE;AACvE,eAAO,MAAM,GAAG,aAAc,CAAC;AAC/B,qFAAqF;AACrF,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,iEAAiE;AACjE,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,kBAAmB,SAAQ,UAAU;IACpD,KAAK,EAAE,OAAO,IAAI,CAAC;IACnB,+EAA+E;IAC/E,SAAS,EAAE,QAAQ,GAAG,SAAS,CAAC;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,OAAO,EAAE;QAAE,MAAM,EAAE,cAAc,CAAC;QAAC,OAAO,EAAE,cAAc,CAAA;KAAE,CAAC;CAC9D;AA0ED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,aAAa,EACnB,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,kBAAkB,CAAC,CAsE7B;AAED,uGAAuG;AACvG,eAAO,MAAM,QAAQ;;;;;CAKpB,CAAC"}

package/sdk/dist/svm/venues/manifest/index.js

@@ -0,0 +1,262 @@
+/**
+ * Manifest CLOB venue — market decoding, scope gates and the prepare-declared
+ * TOP-OF-BOOK ORDER WINDOW for the SvmRoute ladder fragment (./ladder.ts).
+ * Like orca-whirlpool this family is LADDER-ONLY (adapter contract v2): a CLOB
+ * quote is a best-first walk over a red-black tree of resting orders that lives
+ * inside ONE market account, which does not fit the one-adapter-one-pool v1
+ * shape — so there is no SvmVenueAdapter here and the venue is not in the v1
+ * registry.
+ *
+ * Layout source-verified against github.com/CKS-Systems/manifest
+ * (programs/manifest/src/state/{market,resting_order}.rs, lib/src/
+ * red_black_tree.rs, program/{instruction,processor/swap}.rs, quantities.rs)
+ * AND a mainnet dump of the SOL/USDC market ENhU8LsaR7... (238,896 bytes,
+ * sdk/test/svm/fixtures/manifest/): MarketFixed = 256 bytes, discriminant
+ * (u64 LE @0) = 4859840929024028656; the dynamic byte array after the header
+ * holds 80-byte blocks (a 16-byte red-black-tree node overhead + a 64-byte
+ * RestingOrder / ClaimedSeat payload) interleaved as three RB trees (bids,
+ * asks, seats) + a free list — the "hypertree". A RestingOrder payload:
+ * price QuoteAtomsPerBaseAtom (u128 LE = price * 1e18) @+0, num_base_atoms u64
+ * @+16, sequence_number u64 @+24, trader_index u32 @+32, last_valid_slot u32
+ * @+36, is_bid u8 @+40, order_type u8 @+41. All integers little-endian.
+ *
+ * THE WINDOW (the pinned Phase 2 CLOB design, the whirlpool net-cache thesis
+ * transplanted to a book): an in-VM red-black-tree successor walk is
+ * unaffordable AND unbounded on the interpreter (get_next_lower_index chases
+ * parent/child pointers with a data-dependent inner loop — the same class as
+ * whirlpool's rejected in-VM tick discovery). So prepare walks the tree
+ * OFF-CHAIN from the side's best index (bids_best for a base-in sell, asks_best
+ * for a quote-in buy) following the venue's own get_next_lower_index taker
+ * order, and ships up to MANIFEST_MAX_ORDERS price levels as per-trade cfg
+ * params — each level a (block DataIndex, sequence_number) pair. Everything
+ * value-bearing stays LIVE: the fragment reads each shipped order's price and
+ * num_base_atoms from the market account at cook time. The sequence_number is
+ * the drift-invariant identity anchor: a monotonic per-order counter, stable
+ * across partial fills (reduce() keeps the block + seq, only shrinks the size),
+ * unique across the free-list reuse a cancel/fill would cause. Drift semantics:
+ * - a shipped order partially filled since prepare: exact (live size read);
+ * - a shipped order fully filled / cancelled (block freed or reused): the live
+ *   sequence_number no longer matches → the fragment STOPS the walk there and
+ *   deactivates the remaining shipped levels (conservative — the venue may fill
+ *   from levels that moved up, favorable, minOut enforced);
+ * - a NEW better limit order inside the shipped range: the model misses it — a
+ *   better price only improves the realized output, minOut enforced (favorable,
+ *   like the whirlpool new-tick-in-a-gap case);
+ * - the whole shipped set consumed (trade exceeds top-of-book depth): the venue
+ *   SELF-DEACTIVATES past capacity (quote clamps, no out-of-window fallback).
+ *
+ * Gates (named errors, everything else is a live read):
+ * - account size / discriminant;
+ * - non-classic-SPL mints (the Swap ix is Tokenkeg-only here; a Token-2022
+ *   market needs the optional mint accounts + swap_v2-style plumbing — a
+ *   follow-up, mirroring the whirlpool Tokenkeg gate);
+ * - a direction with NO shippable levels (empty book side — nothing to walk).
+ *
+ * GLOBAL orders (order_type 3) draw from a separate global account the swap
+ * would need extra accounts for; a taker IOC order BREAKS at the first global
+ * maker when those accounts are absent (place_order / impact_base_atoms). So
+ * the off-chain walk STOPS at the first global order (never shipping past it) —
+ * exactly reproducing the venue's taker halt. EXPIRING orders (last_valid_slot
+ * != 0) are also a stop: the in-VM model carries no clock, so the walk ships
+ * only the non-expiring (last_valid_slot == 0) prefix; the venue may match an
+ * expiring order beyond it (favorable) — minOut enforced.
+ *
+ * NOTE — RELOCATED LADDER. This venue's merge-decomposition ladder used to sit
+ * next to this file as `./ladder.ts`; it now lives in the consuming recipes
+ * package, which defines every `*Ladder`, window selector and rung-feeding
+ * decomposition helper itself. The SDK keeps only the generic venue
+ * integration below (pool-account decode, program ids, pool-config types, and
+ * the AMM/tick math the decode needs). Every `ladder.ts` reference in the text
+ * above therefore points at that relocated module, not at a file in this
+ * directory.
+ */
+import { address, getAddressCodec } from "@solana/kit";
+import { readUintLE } from "../math.js";
+import { makeTreeWalkBudget } from "../tree-walk.js";
+import { TOKEN_2022_PROGRAM_ID, classifyMintProgram } from "../../token-program.js";
+import { parseMintExtensions } from "../../token-extensions.js";
+const SLUG = "manifest";
+export const MANIFEST_PROGRAM_ID = address("MNFSTqtC93rEfYHB6hF82sKdZpUDFWkViLByLd1k1Ms");
+const TOKEN_PROGRAM = address("TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA");
+/** MarketFixed size — the dynamic RB-tree/free-list region begins here. */
+export const MARKET_FIXED_SIZE = 256;
+/** sha256-independent packed discriminant (u64 LE @0) — MARKET_FIXED_DISCRIMINANT. */
+export const MARKET_DISCRIMINANT = 4859840929024028656n;
+/** Price is stored as QuoteAtomsPerBaseAtom.inner = price * 1e18 (u128 LE). */
+export const PRICE_D18 = 1000000000000000000n;
+// MarketFixed offsets (state/market.rs declared order, repr(C)).
+export const OFF_BASE_MINT_DECIMALS = 9;
+export const OFF_QUOTE_MINT_DECIMALS = 10;
+const OFF_BASE_MINT = 16;
+const OFF_QUOTE_MINT = 48;
+const OFF_BASE_VAULT = 80;
+const OFF_QUOTE_VAULT = 112;
+export const OFF_BIDS_ROOT = 156;
+export const OFF_BIDS_BEST = 160;
+export const OFF_ASKS_ROOT = 164;
+export const OFF_ASKS_BEST = 168;
+// Block layout: 16-byte RBNode overhead then the 64-byte RestingOrder payload.
+// Offsets are RELATIVE TO the block base (= MARKET_FIXED_SIZE + DataIndex).
+const BLOCK_SIZE = 80;
+export const OFF_NODE_LEFT = 0;
+export const OFF_NODE_RIGHT = 4;
+export const OFF_NODE_PARENT = 8;
+export const OFF_ORDER_PRICE = 16; // u128 LE = price * 1e18
+export const OFF_ORDER_SIZE = 32; // num_base_atoms u64
+export const OFF_ORDER_SEQ = 40; // sequence_number u64
+export const OFF_ORDER_LAST_VALID_SLOT = 52; // u32
+export const OFF_ORDER_IS_BID = 56; // u8
+export const OFF_ORDER_TYPE = 57; // u8
+/** u32::MAX — the tree/free-list null pointer (state/hypertree.rs). */
+export const NIL = 0xffff_ffff;
+/** OrderType::Global — draws from a separate global account; a taker halts at it. */
+export const ORDER_TYPE_GLOBAL = 3;
+/** RestingOrder.last_valid_slot sentinel for "no expiration". */
+export const NO_EXPIRATION_LAST_VALID_SLOT = 0;
+/**
+ * Shipped top-of-book levels per direction. Each level is ~2 cfg words
+ * (DataIndex + sequence_number) + one walk iteration; sized against the
+ * interpreter's per-order cost (measured in budget.ts / the CU suite). Moves
+ * in lockstep with the fragment's unrolled setup (ladder.ts) and the mirror.
+ */
+export const MANIFEST_MAX_ORDERS = 16;
+// --- off-chain red-black-tree helpers over the raw market bytes ---
+const nodeBase = (dataIndex) => MARKET_FIXED_SIZE + dataIndex;
+const treeLeft = (data, idx) => Number(readUintLE(data, nodeBase(idx) + OFF_NODE_LEFT, 4));
+const treeRight = (data, idx) => Number(readUintLE(data, nodeBase(idx) + OFF_NODE_RIGHT, 4));
+const treeParent = (data, idx) => Number(readUintLE(data, nodeBase(idx) + OFF_NODE_PARENT, 4));
+function isLeftChild(data, idx) {
+    const parent = treeParent(data, idx);
+    return parent !== NIL && treeLeft(data, parent) === idx;
+}
+/**
+ * The venue's get_next_lower_index (red_black_tree.rs): the in-order
+ * predecessor in the tree's Ord, which — because the tree's max is the BEST
+ * order (bids Ord by price, asks Ord by inverse price) — is the taker's next
+ * match. Every pointer hop draws from the caller's whole-walk budget;
+ * unaffordable in-VM.
+ */
+function nextLower(data, idx, spendHop) {
+    if (idx === NIL)
+        return NIL;
+    const left = treeLeft(data, idx);
+    if (left !== NIL) {
+        let cur = left;
+        while (treeRight(data, cur) !== NIL) {
+            spendHop();
+            cur = treeRight(data, cur);
+        }
+        return cur;
+    }
+    let cur = idx;
+    while (isLeftChild(data, cur)) {
+        spendHop();
+        cur = treeParent(data, cur);
+    }
+    return treeParent(data, cur);
+}
+/**
+ * Walk a book side best-first, collecting the shippable prefix: non-global,
+ * non-expiring orders up to MANIFEST_MAX_ORDERS. STOPS at the first global
+ * order (the venue's IOC taker halts there without the global accounts) or the
+ * first expiring order (the in-VM model carries no clock). Skips zero-size
+ * orders (the venue removes them mid-walk) but keeps walking past them.
+ * `spendHop` is the whole-walk iteration budget — a market whose tree pointers
+ * cycle exhausts it and throws rather than spinning.
+ */
+function resolveWindow(data, bestOffset, spendHop) {
+    const orders = [];
+    let cur = Number(readUintLE(data, bestOffset, 4));
+    while (cur !== NIL && orders.length < MANIFEST_MAX_ORDERS) {
+        const base = nodeBase(cur);
+        const orderType = data[base + OFF_ORDER_TYPE];
+        const lastValidSlot = Number(readUintLE(data, base + OFF_ORDER_LAST_VALID_SLOT, 4));
+        if (orderType === ORDER_TYPE_GLOBAL)
+            break; // taker IOC halts at the first global maker
+        if (lastValidSlot !== NO_EXPIRATION_LAST_VALID_SLOT)
+            break; // the model carries no clock
+        const size = readUintLE(data, base + OFF_ORDER_SIZE, 8);
+        if (size > 0n) {
+            orders.push({ dataIndex: cur, sequenceNumber: readUintLE(data, base + OFF_ORDER_SEQ, 8) });
+        }
+        spendHop();
+        cur = nextLower(data, cur, spendHop);
+    }
+    return { orders };
+}
+function hasDiscriminant(data) {
+    return readUintLE(data, 0, 8) === MARKET_DISCRIMINANT;
+}
+/**
+ * Fetch + gate one Manifest market (see the header for the gate list) and
+ * freeze both directions' top-of-book order windows. Read-only against the
+ * loader; the whole book is in this one account, so a quote needs no other
+ * account.
+ */
+export async function fetchManifestConfig(load, pool) {
+    const data = await load(pool);
+    if (data === null)
+        throw new Error(`${SLUG}: market account ${pool} not found`);
+    if (data.length < MARKET_FIXED_SIZE) {
+        throw new Error(`${SLUG}: market ${pool} has ${data.length} bytes, expected >= ${MARKET_FIXED_SIZE}`);
+    }
+    if (!hasDiscriminant(data)) {
+        throw new Error(`${SLUG}: market ${pool} has a foreign discriminant (not a Manifest MarketFixed account)`);
+    }
+    const codec = getAddressCodec();
+    const baseMint = codec.decode(data.subarray(OFF_BASE_MINT, OFF_BASE_MINT + 32));
+    const quoteMint = codec.decode(data.subarray(OFF_QUOTE_MINT, OFF_QUOTE_MINT + 32));
+    // The on-chain Swap ix here is genuinely Tokenkeg-only (a Token-2022 market
+    // needs the optional mint accounts + swap_v2-style plumbing — a per-venue
+    // follow-up). So detect the real token program per mint via the shared
+    // resolver (data-shape based) instead of the old fragile size check, and
+    // SELF-DROP a Token-2022 mint or one carrying an un-routable extension. The
+    // drop is expressed as a thrown, clearly-described error — the SvmRoute
+    // orchestrator catches a fetchPoolConfig throw and silently drops the venue
+    // (the same graceful-degradation path an unsupported direction uses). The
+    // LEGACY path is byte-identical to before: a classic mint classifies as
+    // Tokenkeg, parses no extensions, and the config is built unchanged.
+    const _mints = [baseMint, quoteMint];
+    const _mintDatas = await Promise.all(_mints.map((mint) => load(mint)));
+    for (let _i = 0; _i < _mints.length; _i++) {
+        const mint = _mints[_i];
+        const mintData = _mintDatas[_i];
+        if (mintData === null)
+            throw new Error(`${SLUG}: mint ${mint} of market ${pool} not found`);
+        if (classifyMintProgram(mint, mintData) === TOKEN_2022_PROGRAM_ID) {
+            throw new Error(`${SLUG}: dropping market ${pool} — mint ${mint} is a Token-2022 mint (the Swap ix is Tokenkeg-only for now)`);
+        }
+        const { blocking } = parseMintExtensions(mintData);
+        if (blocking.length > 0) {
+            throw new Error(`${SLUG}: dropping market ${pool} — mint ${mint} is un-routable: ${blocking.join("; ")}`);
+        }
+    }
+    // ONE budget for both sides: the bids and asks trees share the account's
+    // block region, so sizing the bound on the whole region covers a full
+    // traversal of both of them together (see makeTreeWalkBudget).
+    const spendHop = makeTreeWalkBudget(SLUG, Math.floor((data.length - MARKET_FIXED_SIZE) / BLOCK_SIZE));
+    return {
+        venue: SLUG,
+        pool,
+        direction: "baseIn",
+        baseMint,
+        quoteMint,
+        baseVault: codec.decode(data.subarray(OFF_BASE_VAULT, OFF_BASE_VAULT + 32)),
+        quoteVault: codec.decode(data.subarray(OFF_QUOTE_VAULT, OFF_QUOTE_VAULT + 32)),
+        baseDecimals: data[OFF_BASE_MINT_DECIMALS],
+        quoteDecimals: data[OFF_QUOTE_MINT_DECIMALS],
+        windows: {
+            // base-in sells base -> matches the BIDS; quote-in buys base -> matches the ASKS.
+            baseIn: resolveWindow(data, OFF_BIDS_BEST, spendHop),
+            quoteIn: resolveWindow(data, OFF_ASKS_BEST, spendHop),
+        },
+    };
+}
+/** Family facade for the recipe orchestrator (ladder-only — no v1 adapter, not in the v1 registry). */
+export const manifest = {
+    slug: SLUG,
+    programId: MANIFEST_PROGRAM_ID,
+    tokenProgram: TOKEN_PROGRAM,
+    fetchPoolConfig: fetchManifestConfig,
+};
+//# sourceMappingURL=index.js.map

package/sdk/dist/svm/venues/manifest/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/svm/venues/manifest/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AACH,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGrD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,IAAI,GAAG,UAAU,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,6CAA6C,CAAC,CAAC;AAC1F,MAAM,aAAa,GAAG,OAAO,CAAC,6CAA6C,CAAC,CAAC;AAE7E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,sFAAsF;AACtF,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAA0B,CAAC;AAC9D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,SAAS,GAAG,oBAA0B,CAAC;AAEpD,iEAAiE;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAC1C,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AAEjC,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAChC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AACjC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC,CAAC,yBAAyB;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC,CAAC,qBAAqB;AACvD,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC,CAAC,sBAAsB;AACvD,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC,CAAC,MAAM;AACnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC,CAAC,KAAK;AACzC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC,CAAC,KAAK;AAEvC,uEAAuE;AACvE,MAAM,CAAC,MAAM,GAAG,GAAG,WAAW,CAAC;AAC/B,qFAAqF;AACrF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,iEAAiE;AACjE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AA4BtC,qEAAqE;AACrE,MAAM,QAAQ,GAAG,CAAC,SAAiB,EAAU,EAAE,CAAC,iBAAiB,GAAG,SAAS,CAAC;AAC9E,MAAM,QAAQ,GAAG,CAAC,IAAgB,EAAE,GAAW,EAAU,EAAE,CACzD,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7D,MAAM,SAAS,GAAG,CAAC,IAAgB,EAAE,GAAW,EAAU,EAAE,CAC1D,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9D,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAE,GAAW,EAAU,EAAE,CAC3D,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC;AAE/D,SAAS,WAAW,CAAC,IAAgB,EAAE,GAAW;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,OAAO,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,IAAgB,EAAE,GAAW,EAAE,QAAkB;IAClE,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC;IAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,IAAI,GAAG,GAAG,IAAI,CAAC;QACf,OAAO,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;YACpC,QAAQ,EAAE,CAAC;YACX,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9B,QAAQ,EAAE,CAAC;QACX,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,IAAgB,EAAE,UAAkB,EAAE,QAAkB;IAC7E,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,GAAG,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,yBAAyB,EAAE,CAAC,CAAC,CAAC,CAAC;QACpF,IAAI,SAAS,KAAK,iBAAiB;YAAE,MAAM,CAAC,4CAA4C;QACxF,IAAI,aAAa,KAAK,6BAA6B;YAAE,MAAM,CAAC,6BAA6B;QACzF,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,cAAc,EAAE,CAAC,CAAC,CAAC;QACxD,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,cAAc,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,QAAQ,EAAE,CAAC;QACX,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,IAAgB;IACvC,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,mBAAmB,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAmB,EACnB,IAAa;IAEb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,IAAI,YAAY,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,YAAY,IAAI,QAAQ,IAAI,CAAC,MAAM,uBAAuB,iBAAiB,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,YAAY,IAAI,kEAAkE,CAC1F,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,EAAE,CAAC,CAAC,CAAC;IACnF,4EAA4E;IAC5E,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvE,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,CAAE,CAAC;QACjC,IAAI,QAAQ,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,UAAU,IAAI,cAAc,IAAI,YAAY,CAAC,CAAC;QAC5F,IAAI,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,qBAAqB,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,qBAAqB,IAAI,WAAW,IAAI,8DAA8D,CAC9G,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,qBAAqB,IAAI,WAAW,IAAI,oBAAoB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,sEAAsE;IACtE,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,kBAAkB,CACjC,IAAI,EACJ,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,GAAG,UAAU,CAAC,CAC3D,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,IAAI;QACX,IAAI;QACJ,SAAS,EAAE,QAAQ;QACnB,QAAQ;QACR,SAAS;QACT,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,EAAE,CAAC,CAAC;QAC3E,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,eAAe,GAAG,EAAE,CAAC,CAAC;QAC9E,YAAY,EAAE,IAAI,CAAC,sBAAsB,CAAC;QAC1C,aAAa,EAAE,IAAI,CAAC,uBAAuB,CAAC;QAC5C,OAAO,EAAE;YACP,kFAAkF;YAClF,MAAM,EAAE,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,CAAC;YACpD,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,CAAC;SACtD;KACF,CAAC;AACJ,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,IAAI,EAAE,IAAI;IACV,SAAS,EAAE,mBAAmB;IAC9B,YAAY,EAAE,aAAa;IAC3B,eAAe,EAAE,mBAAmB;CACrC,CAAC"}

package/sdk/dist/svm/venues/math.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Shared bigint helpers for venue adapters. All venue math is bigint with
+ * floors/ceils exactly as docs/svm-venues.md states; division floors natively.
+ */
+/** Ceiling division: smallest q with q * b >= a. Non-negative dividends only. */
+export declare function ceilDiv(a: bigint, b: bigint): bigint;
+/**
+ * Little-endian unsigned field read — the TS mirror of the compiler's
+ * accountUint(ref, offset, width). All seven venues are pure-LE; BE never
+ * occurs. width is in bytes, 1..=32 (SPL token amount = readUintLE(data, 64, 8)).
+ */
+export declare function readUintLE(data: Uint8Array, offset: number, width: number): bigint;
+//# sourceMappingURL=math.d.ts.map