@eco-incorp/sauce 0.99.0

package/sdk/dist/svm/venues/metric/index.d.ts

@@ -0,0 +1,118 @@
+import type { Address } from "@solana/kit";
+import type { AccountLoader, PoolConfig, SwapUser, VenueAccount, VenueSwap } from "../types.js";
+declare const SLUG = "metric";
+export declare const METRIC_PROGRAM_ID: Address<"Bvs46DPFxiFE6YHxLDLD6QAUcmy51FyRVPZJusPxLk3j">;
+export declare const METRIC_ORACLE_PROGRAM_ID: Address<"CvGnk4HouriGypBTZhYc76esyN5kWBepWueYVeSpR1L1">;
+export declare const OFF_MINT_A = 74;
+export declare const OFF_VAULT_A = 106;
+export declare const OFF_MINT_B = 138;
+export declare const OFF_VAULT_B = 170;
+export declare const OFF_ORACLE_CONFIG = 234;
+/** Byte offset of the paired price account's pubkey inside the oracle config account. */
+export declare const PRICE_ACCOUNT_OFFSET_IN_ORACLE_CONFIG = 103;
+/** `swap`'s single-byte discriminator. */
+export declare const METRIC_SWAP_DISCRIMINATOR = 1;
+/**
+ * Conservative quotable-capacity divisor (see module doc) — the ladder never quotes more than
+ * `liveReserveOut / CAP_DIVISOR` output. Mirrors zerofi's own CAP_DIVISOR precedent and rationale:
+ * the venue's real depth model (the pool's own variable-length bin tail) is unrecovered, so an
+ * unbounded flat-price quote would be unsafe; this is a deliberately conservative substitute, not a
+ * measured true capacity.
+ */
+export declare const CAP_DIVISOR = 20n;
+/**
+ * Conservative quote haircut, in parts-per-million, folded into the baked scale so the quote is a
+ * lower bound on the realized fill (never an over-quote).
+ *
+ * WHY IT EXISTS — a measured, not guessed, correction. A paired-differential simulation of the REAL
+ * swap on real mainnet pools (impersonating a funded recent trader; sizes spanning 667x — 3, 100 and
+ * 2000 tokens — pinned to one context slot) found the raw oracle-price prediction (`in * bid/2^64`)
+ * OVER-quotes the realized output by a small, strikingly SIZE-INDEPENDENT margin: 3, 3 and 4 ppm at
+ * x = 3, 100, 2000 tokens respectively. Size-independence is the decisive result — it confirms this
+ * oracle-priced PMM fills at a flat price with NO slippage curve (a capacity-aware bin-walk would
+ * address slippage that measurably does not exist here), so the flat stateless rung is correct and
+ * the only correction needed is this small constant offset. The offset itself is the oracle's own
+ * bid/ask micro-spread plus price drift between the off-chain bake and the on-chain cook slot, not a
+ * curve.
+ *
+ * The haircut is set an order of magnitude above the measured ~4 ppm so `predicted <= realized`
+ * holds with margin across the whole measured size range AND absorbs additional bake-to-cook oracle
+ * micro-drift over a real routing window. Priced INTO the scale (not deducted afterward), so
+ * `continuousFees` stays the identity — the same convention zerofi/obric-v2 use. An under-quote is
+ * safe (at worst Metric is not elected when it was marginally best); an over-quote is the hazard
+ * this removes, because Metric's own swap reverts if its `minOut` is unmet and the engine's CATCH is
+ * pre-flight-only, so an over-optimistic quote is a whole-cook-abort risk, not just a bad fill.
+ */
+export declare const METRIC_QUOTE_HAIRCUT_PPM = 50n;
+export interface MetricPoolConfig extends PoolConfig {
+    venue: typeof SLUG;
+    /** 0 = mintA -> mintB (bid applies), 1 = mintB -> mintA (ask, reciprocal, applies). */
+    direction: 0 | 1;
+    mintA: Address;
+    mintB: Address;
+    vaultA: Address;
+    vaultB: Address;
+    oracleConfig: Address;
+    priceAccount: Address;
+    tokenProgramA: Address;
+    tokenProgramB: Address;
+    decimalsA: number;
+    decimalsB: number;
+    /** Baked oracle read (32-byte off-chain oracle-read return data, u128 LE halves) — see module doc. */
+    bidQ64: bigint;
+    askQ64: bigint;
+    /**
+     * This direction's baked scale, already decimals-adjusted, haircut-folded
+     * (`METRIC_QUOTE_HAIRCUT_PPM`, so `out` is a conservative lower bound) and gcd-reduced:
+     * `out = in * scaleNum / scaleDen`.
+     */
+    scaleNum: bigint;
+    scaleDen: bigint;
+    /** This direction's baked price (bidQ64 for dir 0, askQ64 for dir 1) — informational; the quote uses scaleNum/scaleDen. */
+    bakedPrice: bigint;
+}
+/**
+ * Fold a Q64.64 price (quote-per-base atoms-agnostic) plus the two mints' decimals into a
+ * gcd-reduced (num, den) atoms-to-atoms scale: `outAtoms = inAtoms * num / den`.
+ * `reciprocal` computes the OTHER direction's scale from the SAME price (division, not a second
+ * baked value) — mirrors zerofi's ieee754ScaleParams direction-flip (swap num<->den AND which side
+ * carries the decimals adjustment).
+ *
+ * A `METRIC_QUOTE_HAIRCUT_PPM` haircut is folded in (num scaled down by `(1e6 - haircut)/1e6`) so
+ * the result is a lower bound on the realized fill — see that constant's doc for the measurement
+ * that sized it. The haircut rides in the exact (num, den) pair, so `referenceQuote` stays lamport-
+ * exact against the SAME params the emitted fragment uses.
+ */
+export declare function metricScaleParams(priceQ64: bigint, decimalsIn: number, decimalsOut: number, reciprocal: boolean): {
+    num: bigint;
+    den: bigint;
+};
+export declare const metric: {
+    slug: string;
+    kind: "constant-product";
+    programId: Address<"Bvs46DPFxiFE6YHxLDLD6QAUcmy51FyRVPZJusPxLk3j">;
+    /**
+     * Off-chain gate + decode. `pool` is the variable-length pool account (see module doc — only the
+     * fixed 266-byte prefix is read; the trailing bin tail is not decoded). `fetchOracleQuote` is
+     * REQUIRED in practice (throws when absent): it must run the oracle program's `[0x02, feedByte]`
+     * read (any feedByte — see module doc) against `(oracleConfig, priceAccount)` and return its raw
+     * 32-byte CPI return data — a capability plain `AccountLoader` byte reads cannot provide. The
+     * consuming app supplies this via a real `simulateTransaction` (or a LiteSVM execution in tests);
+     * this adapter stays free of any RPC/simulate dependency itself.
+     */
+    fetchPoolConfig(load: AccountLoader, pool: Address, direction?: 0 | 1, fetchOracleQuote?: (oracleProgram: Address, oracleConfig: Address, priceAccount: Address) => Promise<Uint8Array>): Promise<MetricPoolConfig>;
+    quoteAccounts(cfg: PoolConfig): VenueAccount[];
+    /**
+     * v1 swap CPI (amount baked). disc(1) ++ amountIn u64 LE ++ [1] ++ direction u8 ++ minOut u128 LE=1.
+     */
+    buildSwap(cfg: PoolConfig, user: SwapUser, amountIn: bigint): VenueSwap;
+};
+/**
+ * The 15-account order for Metric's `swap` (disc 0x01) — see module doc. `userAtaA`/`userAtaB`
+ * ride FIXED slots 6/7 regardless of direction (always mintA's / mintB's side respectively); the
+ * direction BYTE in the instruction data (not account order) tells the program which way to move
+ * value.
+ */
+export declare function metricSwapAccounts(c: MetricPoolConfig, user: SwapUser, make: (ref: string, addr: Address, writable?: boolean) => VenueAccount, refFor?: (role: string) => string): VenueAccount[];
+export {};
+//# sourceMappingURL=index.d.ts.map

package/sdk/dist/svm/venues/metric/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/svm/venues/metric/index.ts"],"names":[],"mappings":"AAiFA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAIhG,QAAA,MAAM,IAAI,WAAW,CAAC;AACtB,eAAO,MAAM,iBAAiB,yDAA0D,CAAC;AACzF,eAAO,MAAM,wBAAwB,yDAA0D,CAAC;AAKhG,eAAO,MAAM,UAAU,KAAK,CAAC;AAC7B,eAAO,MAAM,WAAW,MAAM,CAAC;AAC/B,eAAO,MAAM,UAAU,MAAM,CAAC;AAC9B,eAAO,MAAM,WAAW,MAAM,CAAC;AAC/B,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAGrC,yFAAyF;AACzF,eAAO,MAAM,qCAAqC,MAAM,CAAC;AAGzD,0CAA0C;AAC1C,eAAO,MAAM,yBAAyB,IAAO,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,MAAM,CAAC;AAE/B;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAS5C,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IAClD,KAAK,EAAE,OAAO,IAAI,CAAC;IACnB,uFAAuF;IACvF,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,sGAAsG;IACtG,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,2HAA2H;IAC3H,UAAU,EAAE,MAAM,CAAC;CACpB;AAkBD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,OAAO,GAClB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAsB9B;AAED,eAAO,MAAM,MAAM;;;;IAKjB;;;;;;;;OAQG;0BAEK,aAAa,QACb,OAAO,cACF,CAAC,GAAG,CAAC,qBACG,CACjB,aAAa,EAAE,OAAO,EACtB,YAAY,EAAE,OAAO,EACrB,YAAY,EAAE,OAAO,KAClB,OAAO,CAAC,UAAU,CAAC,GACvB,OAAO,CAAC,gBAAgB,CAAC;uBA0GT,UAAU,GAAG,YAAY,EAAE;IAU9C;;OAEG;mBACY,UAAU,QAAQ,QAAQ,YAAY,MAAM,GAAG,SAAS;CAkBxE,CAAC;AAKF;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,CAAC,EAAE,gBAAgB,EACnB,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,KAAK,YAAY,EACtE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAChC,YAAY,EAAE,CAqBhB"}

package/sdk/dist/svm/venues/metric/index.js

@@ -0,0 +1,350 @@
+/**
+ * Metric venue adapter (program `Bvs46DPFxiFE6YHxLDLD6QAUcmy51FyRVPZJusPxLk3j`) — a closed-source,
+ * oracle-priced PMM. No IDL, no docs: the account layout below was recovered by scanning the
+ * deployed program's own accounts (`getProgramAccounts`) and cross-referencing a real landed swap's
+ * account list; the price mechanism was recovered by isolating the swap's own internal CPI.
+ *
+ * PRICE MECHANISM (the thing that makes this venue different from every other prop-AMM already in
+ * this tree): Metric's swap does NOT price itself from a plaintext account field. Mid-swap it CPIs
+ * a SEPARATE oracle program (`CvGnk4HouriGypBTZhYc76esyN5kWBepWueYVeSpR1L1`) with instruction data
+ * `[0x02, feedIndex]` and gets back 32 bytes of RETURN DATA: two u128 LE Q64.64 fixed-point prices
+ * (bid, then ask), quote-per-base. `feedIndex` (the oracle config account's own byte at +135) was
+ * checked across 8 candidate values (0/1/10/17/18/19/20/21) — all return the IDENTICAL 32 bytes, so
+ * it is a single-feed account and the byte is not load-bearing; any value works.
+ *
+ * A standalone, single-instruction `simulateTransaction` (sigVerify:false) that calls ONLY the
+ * oracle program directly (no Metric CPI wrapper needed to observe the price) reproduces this
+ * exactly: 3,398 CU, and — on the live USDC/USDT pool this adapter was ground-truthed against —
+ * decoded bid/ask sat at approximately 1.00078 / 1.00079 (a ~1bp spread), consistent with a
+ * cross-checked venue on the same pair the same minute.
+ *
+ * THE ORACLE RETURN DATA CANNOT BE REPRODUCED FROM PLAIN ACCOUNT BYTES (unlike zerofi's IEEE-754
+ * oracle, or obric-v2's plaintext level): a byte-for-byte scan of the price account's own 849 bytes
+ * for the measured bid/ask u128 values found no match at any offset. The oracle's internal price
+ * transform is closed and unrecovered. This has one real consequence for this adapter's shape,
+ * unlike every OTHER adapter in this tree: `fetchPoolConfig` cannot derive the price from
+ * `AccountLoader` byte reads alone — decoding it requires actually EXECUTING the oracle's own CPI
+ * (a capability `AccountLoader`, a plain byte-getter, does not have). `fetchPoolConfig` therefore
+ * takes an explicit, OPTIONAL, but REQUIRED-IN-PRACTICE `fetchOracleQuote` callback: a
+ * caller-supplied function that runs the oracle CPI (via `simulateTransaction` against a real RPC,
+ * or a LiteSVM execution in a test) and returns its raw 32-byte return data. This keeps
+ * `fetchPoolConfig` itself free of any RPC/simulate dependency (it still only calls `load`), while
+ * making the one genuinely-CPI-only value an explicit, typed, refuse-don't-guess input rather than
+ * a silently-wrong byte-scan guess. Missing `fetchOracleQuote` throws, naming the gate — the same
+ * "refuse, don't guess" posture zerofi's fee catalog and authority table already use.
+ *
+ * The baked (bid, ask) become part of `MetricPoolConfig` (`paramsFor`-visible) and are what the
+ * emitted fragment's quote math uses. The emitted
+ * fragment issues NO on-chain oracle CPI — it multiplies by the baked scale and caps at a reserve
+ * fraction. That is deliberate and load-bearing: the oracle program CAN revert
+ * post-invoke() (measured live, not hypothetical — program error Custom:20 when its price account
+ * is stale), and SVM's CATCH is PRE-FLIGHT-ONLY, so an in-quote CPI revert would abort the WHOLE
+ * cook — every co-merged venue's fill, not just this slot. A baked scale can never revert, so this
+ * quote can never take down a cook; `minOut` is the sole atomic backstop, the same read-off-chain-
+ * and-bake posture zerofi/WOOFi/BisonFi already use. If a later pass recovers the oracle's byte
+ * transform, the off-chain read collapses to a plain account decode — a simplification, not a
+ * redesign. (The venue's OWN swap instruction still prices via the oracle — its business, only when
+ * Metric is elected — a normal per-slot swap failure, never a quote-time whole-cook abort.)
+ *
+ * POOL ACCOUNT LAYOUT (variable length — 8 distinct sizes observed across a live sweep, 780 through
+ * 1932 bytes, gcd of the size deltas 36 — a variable-length tail this adapter does not decode; see
+ * the caveat below):
+ *   +74   mintA (32B)          +106  vaultA (32B, SPL)
+ *   +138  mintB (32B)          +170  vaultB (32B, SPL)
+ *   +234  oracleConfig (32B, oracle-program-owned)
+ *
+ * ORACLE CONFIG ACCOUNT: oracle-program-owned, 277 bytes on the ground-truth pool. The paired
+ * PRICE account (a DIFFERENT oracle-program-owned account, NOT embedded in the pool itself) sits at
+ * a fixed byte offset inside the oracle config account — recovered directly (`Buffer.indexOf` of the
+ * known price account's raw pubkey bytes into the known oracle config's raw bytes): offset 103.
+ *
+ * SWAP INSTRUCTION (disc `0x01`, 27 bytes: `[0x01] ++ amountIn:u64 LE ++ [0x01] ++ direction:u8
+ * (1 = mintA in / 0 = mintB in) ++ minOut:u128 LE`). 15 accounts, FIXED order regardless of
+ * direction:
+ *   0 owner (signer)     1 pool (writable)      2 mintA            3 mintB
+ *   4 vaultA (writable)  5 vaultB (writable)    6 userAtaA (writable, ALWAYS mintA's side)
+ *   7 userAtaB (writable, ALWAYS mintB's side)  8 tokenProgram(A)  9 tokenProgram(B)
+ *   10 systemProgram      11 self (this program's own id)  12 oracleProgram
+ *   13 oracleConfig       14 priceAccount
+ *
+ * CAPACITY: the pool's variable-length tail (36-byte stride) is a real depth/bin model this
+ * adapter does NOT decode (unresolved — see the module doc's own caveat on this). Rather than
+ * assume the flat oracle price holds at unbounded size (measured flat only across the oracle
+ * itself, never against the venue's real fill depth), the ladder caps every quote at
+ * `liveReserveOut / CAP_DIVISOR` — the same conservative, deliberately-narrow posture zerofi's own
+ * `CAP_DIVISOR` doc explains for the identical reason (an unmeasured true depth model + a flat
+ * price is unsafe unbounded; a reserve-fraction ceiling is a safe, real, measurable substitute).
+ * Tokenkeg-only (both mints on the ground-truth pool are plain Tokenkeg; a Token-2022 leg is out of
+ * scope, unverified against this adapter, matching every other Tokenkeg-only adapter's own scope
+ * note).
+ */
+import { address, getAddressCodec } from "@solana/kit";
+import { readUintLE } from "../math.js";
+import { TOKEN_2022_PROGRAM_ID, classifyMintProgram } from "../../token-program.js";
+import { parseMintExtensions } from "../../token-extensions.js";
+const SLUG = "metric";
+export const METRIC_PROGRAM_ID = address("Bvs46DPFxiFE6YHxLDLD6QAUcmy51FyRVPZJusPxLk3j");
+export const METRIC_ORACLE_PROGRAM_ID = address("CvGnk4HouriGypBTZhYc76esyN5kWBepWueYVeSpR1L1");
+const TOKEN_PROGRAM = address("TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA");
+const SYSTEM_PROGRAM = address("11111111111111111111111111111111");
+// Pool account layout (see module doc — ground-truthed against a live pool).
+export const OFF_MINT_A = 74;
+export const OFF_VAULT_A = 106;
+export const OFF_MINT_B = 138;
+export const OFF_VAULT_B = 170;
+export const OFF_ORACLE_CONFIG = 234;
+const POOL_MIN_LENGTH = OFF_ORACLE_CONFIG + 32;
+/** Byte offset of the paired price account's pubkey inside the oracle config account. */
+export const PRICE_ACCOUNT_OFFSET_IN_ORACLE_CONFIG = 103;
+const ORACLE_CONFIG_MIN_LENGTH = PRICE_ACCOUNT_OFFSET_IN_ORACLE_CONFIG + 32;
+/** `swap`'s single-byte discriminator. */
+export const METRIC_SWAP_DISCRIMINATOR = 0x01;
+/**
+ * Conservative quotable-capacity divisor (see module doc) — the ladder never quotes more than
+ * `liveReserveOut / CAP_DIVISOR` output. Mirrors zerofi's own CAP_DIVISOR precedent and rationale:
+ * the venue's real depth model (the pool's own variable-length bin tail) is unrecovered, so an
+ * unbounded flat-price quote would be unsafe; this is a deliberately conservative substitute, not a
+ * measured true capacity.
+ */
+export const CAP_DIVISOR = 20n;
+/**
+ * Conservative quote haircut, in parts-per-million, folded into the baked scale so the quote is a
+ * lower bound on the realized fill (never an over-quote).
+ *
+ * WHY IT EXISTS — a measured, not guessed, correction. A paired-differential simulation of the REAL
+ * swap on real mainnet pools (impersonating a funded recent trader; sizes spanning 667x — 3, 100 and
+ * 2000 tokens — pinned to one context slot) found the raw oracle-price prediction (`in * bid/2^64`)
+ * OVER-quotes the realized output by a small, strikingly SIZE-INDEPENDENT margin: 3, 3 and 4 ppm at
+ * x = 3, 100, 2000 tokens respectively. Size-independence is the decisive result — it confirms this
+ * oracle-priced PMM fills at a flat price with NO slippage curve (a capacity-aware bin-walk would
+ * address slippage that measurably does not exist here), so the flat stateless rung is correct and
+ * the only correction needed is this small constant offset. The offset itself is the oracle's own
+ * bid/ask micro-spread plus price drift between the off-chain bake and the on-chain cook slot, not a
+ * curve.
+ *
+ * The haircut is set an order of magnitude above the measured ~4 ppm so `predicted <= realized`
+ * holds with margin across the whole measured size range AND absorbs additional bake-to-cook oracle
+ * micro-drift over a real routing window. Priced INTO the scale (not deducted afterward), so
+ * `continuousFees` stays the identity — the same convention zerofi/obric-v2 use. An under-quote is
+ * safe (at worst Metric is not elected when it was marginally best); an over-quote is the hazard
+ * this removes, because Metric's own swap reverts if its `minOut` is unmet and the engine's CATCH is
+ * pre-flight-only, so an over-optimistic quote is a whole-cook-abort risk, not just a bad fill.
+ */
+export const METRIC_QUOTE_HAIRCUT_PPM = 50n;
+/** SPL Mint `decimals` byte offset. */
+const MINT_DECIMALS_OFFSET = 44;
+const codec = getAddressCodec();
+const pubkeyAt = (data, offset) => codec.decode(data.subarray(offset, offset + 32));
+function metricConfig(cfg) {
+    if (cfg.venue !== SLUG)
+        throw new Error(`${SLUG} adapter got a config for venue '${cfg.venue}'`);
+    const c = cfg;
+    if (c.direction !== 0 && c.direction !== 1) {
+        throw new Error(`${SLUG} direction must be 0 or 1, got '${String(c.direction)}'`);
+    }
+    return c;
+}
+function gcd(a, b) {
+    let x = a < 0n ? -a : a;
+    let y = b < 0n ? -b : b;
+    while (y !== 0n)
+        [x, y] = [y, x % y];
+    return x === 0n ? 1n : x;
+}
+/**
+ * Fold a Q64.64 price (quote-per-base atoms-agnostic) plus the two mints' decimals into a
+ * gcd-reduced (num, den) atoms-to-atoms scale: `outAtoms = inAtoms * num / den`.
+ * `reciprocal` computes the OTHER direction's scale from the SAME price (division, not a second
+ * baked value) — mirrors zerofi's ieee754ScaleParams direction-flip (swap num<->den AND which side
+ * carries the decimals adjustment).
+ *
+ * A `METRIC_QUOTE_HAIRCUT_PPM` haircut is folded in (num scaled down by `(1e6 - haircut)/1e6`) so
+ * the result is a lower bound on the realized fill — see that constant's doc for the measurement
+ * that sized it. The haircut rides in the exact (num, den) pair, so `referenceQuote` stays lamport-
+ * exact against the SAME params the emitted fragment uses.
+ */
+export function metricScaleParams(priceQ64, decimalsIn, decimalsOut, reciprocal) {
+    if (priceQ64 <= 0n)
+        throw new Error(`${SLUG} price must be positive, got ${priceQ64}`);
+    const d = decimalsOut - decimalsIn;
+    const decNum = d >= 0 ? 10n ** BigInt(d) : 1n;
+    const decDen = d >= 0 ? 1n : 10n ** BigInt(-d);
+    let num;
+    let den;
+    if (!reciprocal) {
+        // outAtoms = inAtoms * price / 2^64, decimals-adjusted.
+        num = priceQ64 * decNum;
+        den = (1n << 64n) * decDen;
+    }
+    else {
+        // outAtoms = inAtoms * 2^64 / price, decimals-adjusted.
+        num = (1n << 64n) * decNum;
+        den = priceQ64 * decDen;
+    }
+    // Fold the conservative haircut into the exact ratio (never a rounded float): out is now a lower
+    // bound on the realized fill, so predicted <= realized on every measured cell.
+    num *= 1000000n - METRIC_QUOTE_HAIRCUT_PPM;
+    den *= 1000000n;
+    const g = gcd(num, den);
+    return { num: num / g, den: den / g };
+}
+export const metric = {
+    slug: SLUG,
+    kind: "constant-product",
+    programId: METRIC_PROGRAM_ID,
+    /**
+     * Off-chain gate + decode. `pool` is the variable-length pool account (see module doc — only the
+     * fixed 266-byte prefix is read; the trailing bin tail is not decoded). `fetchOracleQuote` is
+     * REQUIRED in practice (throws when absent): it must run the oracle program's `[0x02, feedByte]`
+     * read (any feedByte — see module doc) against `(oracleConfig, priceAccount)` and return its raw
+     * 32-byte CPI return data — a capability plain `AccountLoader` byte reads cannot provide. The
+     * consuming app supplies this via a real `simulateTransaction` (or a LiteSVM execution in tests);
+     * this adapter stays free of any RPC/simulate dependency itself.
+     */
+    async fetchPoolConfig(load, pool, direction = 0, fetchOracleQuote) {
+        const data = await load(pool);
+        if (data === null)
+            throw new Error(`${SLUG} pool ${pool} account not found`);
+        if (data.length < POOL_MIN_LENGTH) {
+            throw new Error(`${SLUG} pool ${pool} account is ${data.length} bytes, too short for the fixed layout (need >= ${POOL_MIN_LENGTH})`);
+        }
+        const mintA = pubkeyAt(data, OFF_MINT_A);
+        const mintB = pubkeyAt(data, OFF_MINT_B);
+        const vaultA = pubkeyAt(data, OFF_VAULT_A);
+        const vaultB = pubkeyAt(data, OFF_VAULT_B);
+        const oracleConfig = pubkeyAt(data, OFF_ORACLE_CONFIG);
+        const oracleConfigData = await load(oracleConfig);
+        if (oracleConfigData === null)
+            throw new Error(`${SLUG} pool ${pool} oracleConfig ${oracleConfig} account not found`);
+        if (oracleConfigData.length < ORACLE_CONFIG_MIN_LENGTH) {
+            throw new Error(`${SLUG} pool ${pool} oracleConfig ${oracleConfig} is ${oracleConfigData.length} bytes, too short to hold the price account pubkey at offset ${PRICE_ACCOUNT_OFFSET_IN_ORACLE_CONFIG}`);
+        }
+        const priceAccount = pubkeyAt(oracleConfigData, PRICE_ACCOUNT_OFFSET_IN_ORACLE_CONFIG);
+        const [mintAData, mintBData] = await Promise.all([load(mintA), load(mintB)]);
+        if (mintAData === null || mintBData === null) {
+            throw new Error(`${SLUG} pool ${pool} mint account(s) not found`);
+        }
+        if (mintAData.length < MINT_DECIMALS_OFFSET + 1 ||
+            mintBData.length < MINT_DECIMALS_OFFSET + 1) {
+            throw new Error(`${SLUG} pool ${pool} mint account(s) too short to be an SPL mint`);
+        }
+        const decimalsA = mintAData[MINT_DECIMALS_OFFSET];
+        const decimalsB = mintBData[MINT_DECIMALS_OFFSET];
+        // Token-2022 safety: this venue's swap ix is legacy-SPL (Tokenkeg) only, so
+        // a Token-2022 mint (or one carrying an un-routable extension) SELF-DROPS the
+        // pool via a thrown, clearly-described error — the SvmRoute orchestrator
+        // catches a fetchPoolConfig throw and drops the venue. The legacy path stays
+        // byte-identical: a classic 82-byte mint classifies as legacy → no throw. We
+        // reuse the mint bytes already loaded above for the decimals decode.
+        for (const [mint, mintData] of [
+            [mintA, mintAData],
+            [mintB, mintBData],
+        ]) {
+            if (mintData === null)
+                continue;
+            if (classifyMintProgram(mint, mintData) === TOKEN_2022_PROGRAM_ID) {
+                throw new Error(`${SLUG}: dropping pool ${pool} — mint ${mint} is Token-2022 (this venue's swap is legacy-SPL only)`);
+            }
+            const { blocking } = parseMintExtensions(mintData);
+            if (blocking.length > 0) {
+                throw new Error(`${SLUG}: dropping pool ${pool} — mint ${mint} is un-routable: ${blocking.join("; ")}`);
+            }
+        }
+        if (fetchOracleQuote === undefined) {
+            throw new Error(`${SLUG} pool ${pool} has no fetchOracleQuote supplied — this venue's price cannot be derived from account ` +
+                `bytes alone (the oracle's transform is closed/unrecovered, see module doc); the caller must run the ` +
+                `oracle CPI (simulateTransaction / LiteSVM) and pass its 32-byte return data`);
+        }
+        const quoteBytes = await fetchOracleQuote(METRIC_ORACLE_PROGRAM_ID, oracleConfig, priceAccount);
+        if (quoteBytes.length !== 32) {
+            throw new Error(`${SLUG} pool ${pool} oracle CPI returned ${quoteBytes.length} bytes, expected 32 (bid:u128 LE ++ ask:u128 LE)`);
+        }
+        const bidQ64 = readUintLE(quoteBytes, 0, 16);
+        const askQ64 = readUintLE(quoteBytes, 16, 16);
+        const bakedPrice = direction === 0 ? bidQ64 : askQ64;
+        const { num: scaleNum, den: scaleDen } = direction === 0
+            ? metricScaleParams(bidQ64, decimalsA, decimalsB, false)
+            : metricScaleParams(askQ64, decimalsB, decimalsA, true);
+        return {
+            venue: SLUG,
+            pool,
+            direction,
+            mintA,
+            mintB,
+            vaultA,
+            vaultB,
+            oracleConfig,
+            priceAccount,
+            tokenProgramA: TOKEN_PROGRAM,
+            tokenProgramB: TOKEN_PROGRAM,
+            decimalsA,
+            decimalsB,
+            bidQ64,
+            askQ64,
+            scaleNum,
+            scaleDen,
+            bakedPrice,
+        };
+    },
+    quoteAccounts(cfg) {
+        const c = metricConfig(cfg);
+        const vaultOut = c.direction === 0 ? c.vaultB : c.vaultA;
+        return [
+            { ref: c.oracleConfig, address: c.oracleConfig },
+            { ref: c.priceAccount, address: c.priceAccount },
+            { ref: vaultOut, address: vaultOut },
+        ];
+    },
+    /**
+     * v1 swap CPI (amount baked). disc(1) ++ amountIn u64 LE ++ [1] ++ direction u8 ++ minOut u128 LE=1.
+     */
+    buildSwap(cfg, user, amountIn) {
+        const c = metricConfig(cfg);
+        const U64_MAX = (1n << 64n) - 1n;
+        if (amountIn <= 0n || amountIn > U64_MAX) {
+            throw new Error(`${SLUG} buildSwap amountIn must be a positive u64, got ${amountIn}`);
+        }
+        const data = new Uint8Array(27);
+        data[0] = METRIC_SWAP_DISCRIMINATOR;
+        for (let b = 0; b < 8; b++)
+            data[1 + b] = Number((amountIn >> BigInt(8 * b)) & 0xffn);
+        data[9] = 1;
+        data[10] = c.direction === 0 ? 1 : 0;
+        data[11] = 1; // minOut u128 LE = 1 (the consuming app's terminal delta owns the real bound)
+        return {
+            programId: METRIC_PROGRAM_ID,
+            data,
+            accounts: metricSwapAccounts(c, user, (ref, addr, w) => fixed(ref, addr, w)),
+        };
+    },
+};
+const fixed = (ref, addr, writable) => writable ? { ref, address: addr, writable: true } : { ref, address: addr };
+/**
+ * The 15-account order for Metric's `swap` (disc 0x01) — see module doc. `userAtaA`/`userAtaB`
+ * ride FIXED slots 6/7 regardless of direction (always mintA's / mintB's side respectively); the
+ * direction BYTE in the instruction data (not account order) tells the program which way to move
+ * value.
+ */
+export function metricSwapAccounts(c, user, make, refFor) {
+    const r = refFor ?? ((role) => role);
+    const userAtaA = c.direction === 0 ? user.inAta : user.outAta;
+    const userAtaB = c.direction === 0 ? user.outAta : user.inAta;
+    return [
+        { ref: user.owner, signer: true },
+        make(r("pool"), c.pool, true),
+        make(r("ma"), c.mintA),
+        make(r("mb"), c.mintB),
+        make(r("va"), c.vaultA, true),
+        make(r("vb"), c.vaultB, true),
+        { ref: userAtaA, writable: true },
+        { ref: userAtaB, writable: true },
+        make(r("tpa"), c.tokenProgramA),
+        make(r("tpb"), c.tokenProgramB),
+        make(r("sys"), SYSTEM_PROGRAM),
+        make(r("self"), METRIC_PROGRAM_ID),
+        make(r("oracleProg"), METRIC_ORACLE_PROGRAM_ID),
+        make(r("oracleConfig"), c.oracleConfig, true),
+        make(r("price"), c.priceAccount, true),
+    ];
+}
+//# sourceMappingURL=index.js.map

package/sdk/dist/svm/venues/metric/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/svm/venues/metric/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AACH,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,IAAI,GAAG,QAAQ,CAAC;AACtB,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,8CAA8C,CAAC,CAAC;AACzF,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC,8CAA8C,CAAC,CAAC;AAChG,MAAM,aAAa,GAAG,OAAO,CAAC,6CAA6C,CAAC,CAAC;AAC7E,MAAM,cAAc,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAEnE,6EAA6E;AAC7E,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAC;AAC7B,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAC/B,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,CAAC;AAC9B,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAC/B,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,MAAM,eAAe,GAAG,iBAAiB,GAAG,EAAE,CAAC;AAE/C,yFAAyF;AACzF,MAAM,CAAC,MAAM,qCAAqC,GAAG,GAAG,CAAC;AACzD,MAAM,wBAAwB,GAAG,qCAAqC,GAAG,EAAE,CAAC;AAE5E,0CAA0C;AAC1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAE/B;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAE5C,uCAAuC;AACvC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;AAChC,MAAM,QAAQ,GAAG,CAAC,IAAgB,EAAE,MAAc,EAAW,EAAE,CAC7D,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AA8BnD,SAAS,YAAY,CAAC,GAAe;IACnC,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oCAAoC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;IACjG,MAAM,CAAC,GAAG,GAAuB,CAAC;IAClC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mCAAmC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS;IAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,CAAC,KAAK,EAAE;QAAE,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,UAAkB,EAClB,WAAmB,EACnB,UAAmB;IAEnB,IAAI,QAAQ,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gCAAgC,QAAQ,EAAE,CAAC,CAAC;IACvF,MAAM,CAAC,GAAG,WAAW,GAAG,UAAU,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,GAAW,CAAC;IAChB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,wDAAwD;QACxD,GAAG,GAAG,QAAQ,GAAG,MAAM,CAAC;QACxB,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,wDAAwD;QACxD,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC;QAC3B,GAAG,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC1B,CAAC;IACD,iGAAiG;IACjG,+EAA+E;IAC/E,GAAG,IAAI,QAAU,GAAG,wBAAwB,CAAC;IAC7C,GAAG,IAAI,QAAU,CAAC;IAClB,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,kBAA2B;IACjC,SAAS,EAAE,iBAAiB;IAE5B;;;;;;;;OAQG;IACH,KAAK,CAAC,eAAe,CACnB,IAAmB,EACnB,IAAa,EACb,YAAmB,CAAC,EACpB,gBAIwB;QAExB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,SAAS,IAAI,oBAAoB,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,SAAS,IAAI,eAAe,IAAI,CAAC,MAAM,mDAAmD,eAAe,GAAG,CACpH,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAEvD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,gBAAgB,KAAK,IAAI;YAC3B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,SAAS,IAAI,iBAAiB,YAAY,oBAAoB,CAAC,CAAC;QACzF,IAAI,gBAAgB,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,SAAS,IAAI,iBAAiB,YAAY,OAAO,gBAAgB,CAAC,MAAM,gEAAgE,qCAAqC,EAAE,CACvL,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,QAAQ,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;QAEvF,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,SAAS,IAAI,4BAA4B,CAAC,CAAC;QACpE,CAAC;QACD,IACE,SAAS,CAAC,MAAM,GAAG,oBAAoB,GAAG,CAAC;YAC3C,SAAS,CAAC,MAAM,GAAG,oBAAoB,GAAG,CAAC,EAC3C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,SAAS,IAAI,8CAA8C,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,SAAS,GAAG,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAElD,4EAA4E;QAC5E,8EAA8E;QAC9E,yEAAyE;QACzE,6EAA6E;QAC7E,6EAA6E;QAC7E,qEAAqE;QACrE,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI;YAC7B,CAAC,KAAK,EAAE,SAAS,CAAC;YAClB,CAAC,KAAK,EAAE,SAAS,CAAC;SACV,EAAE,CAAC;YACX,IAAI,QAAQ,KAAK,IAAI;gBAAE,SAAS;YAChC,IAAI,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,qBAAqB,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,mBAAmB,IAAI,WAAW,IAAI,uDAAuD,CACrG,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,mBAAmB,IAAI,WAAW,IAAI,oBAAoB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,SAAS,IAAI,wFAAwF;gBAC1G,sGAAsG;gBACtG,6EAA6E,CAChF,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,wBAAwB,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAChG,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,SAAS,IAAI,wBAAwB,UAAU,CAAC,MAAM,kDAAkD,CAChH,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAE9C,MAAM,UAAU,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACrD,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GACpC,SAAS,KAAK,CAAC;YACb,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC;YACxD,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAE5D,OAAO;YACL,KAAK,EAAE,IAAI;YACX,IAAI;YACJ,SAAS;YACT,KAAK;YACL,KAAK;YACL,MAAM;YACN,MAAM;YACN,YAAY;YACZ,YAAY;YACZ,aAAa,EAAE,aAAa;YAC5B,aAAa,EAAE,aAAa;YAC5B,SAAS;YACT,SAAS;YACT,MAAM;YACN,MAAM;YACN,QAAQ;YACR,QAAQ;YACR,UAAU;SACX,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,GAAe;QAC3B,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACzD,OAAO;YACL,EAAE,GAAG,EAAE,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,EAAE;YAChD,EAAE,GAAG,EAAE,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,EAAE;YAChD,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;SACrC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,GAAe,EAAE,IAAc,EAAE,QAAgB;QACzD,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QACjC,IAAI,QAAQ,IAAI,EAAE,IAAI,QAAQ,GAAG,OAAO,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mDAAmD,QAAQ,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC,CAAC,GAAG,yBAAyB,CAAC;QACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QACtF,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACZ,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,8EAA8E;QAC5F,OAAO;YACL,SAAS,EAAE,iBAAiB;YAC5B,IAAI;YACJ,QAAQ,EAAE,kBAAkB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;SAC7E,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,IAAa,EAAE,QAAkB,EAAgB,EAAE,CAC7E,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAE7E;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,CAAmB,EACnB,IAAc,EACd,IAAsE,EACtE,MAAiC;IAEjC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAC9D,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAC9D,OAAO;QACL,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;QACjC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7B,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACjC,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACjC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC;QAC/B,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC;QAC/B,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;QAC9B,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;QAClC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,wBAAwB,CAAC;QAC/C,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC;QAC7C,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC;KACvC,CAAC;AACJ,CAAC"}

package/sdk/dist/svm/venues/moonit/index.d.ts

@@ -0,0 +1,41 @@
+import type { Address } from "@solana/kit";
+import type { AccountLoader, PoolConfig } from "../types.js";
+declare const SLUG: "moonit";
+export declare const MOONIT_PROGRAM_ID: Address;
+/** Floor integer square root (mirrors the engine's SQRT op — same algorithm as obric-v2's isqrt). */
+declare function isqrt(value: bigint): bigint;
+export interface MoonitPoolConfig extends PoolConfig {
+    venue: typeof SLUG;
+    /** exactIn side: 'quoteToBase' (default, buy: SOL in, tokens out) | 'baseToQuote' (sell). */
+    direction: "quoteToBase" | "baseToQuote";
+    mint: Address;
+    curveTokenAccount: Address;
+    dexFee: Address;
+    helioFee: Address;
+    /** coefA baked as (hi,lo) u64 halves at SCALE_A — see the module header. */
+    awHi: bigint;
+    awLo: bigint;
+    /** coefB baked at SCALE_B (always fits a single u64). */
+    bwFixed: bigint;
+    /** 10^decimals. */
+    tdScale: bigint;
+    feeBps: bigint;
+}
+/** Derive coefA/coefB's fixed-point bakes from the CurveAccount's static fields (exact bigint, no rounding until the single final step). */
+declare function bakeCoefficients(totalSupplyRaw: bigint, coefBRaw: bigint, marketcapThresholdRaw: bigint, decimals: bigint): {
+    awHi: bigint;
+    awLo: bigint;
+    bwFixed: bigint;
+    tdScale: bigint;
+};
+export declare const moonit: {
+    slug: "moonit";
+    programId: Address;
+    fetchPoolConfig(load: AccountLoader, pool: Address): Promise<MoonitPoolConfig>;
+};
+/** BUY: exact gross collateral `y` in (fee taken off the input) -> tokens out, capped at the curve's live inventory. */
+declare function referenceBuy(y: bigint, m: bigint, aw: bigint, bw: bigint, td: bigint, feeBps: bigint, curveAmount: bigint): bigint;
+/** SELL: exact tokens `x` in (fee taken off the output) -> collateral out. Saturates at the live sold position (never over-sells). */
+declare function referenceSell(x: bigint, m: bigint, aw: bigint, bw: bigint, td: bigint, feeBps: bigint): bigint;
+export { referenceBuy as _referenceBuyForTest, referenceSell as _referenceSellForTest, bakeCoefficients as _bakeCoefficientsForTest, isqrt as _isqrtForTest, };
+//# sourceMappingURL=index.d.ts.map

package/sdk/dist/svm/venues/moonit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/svm/venues/moonit/index.ts"],"names":[],"mappings":"AAqHA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAI7D,QAAA,MAAM,IAAI,EAAG,QAAiB,CAAC;AAE/B,eAAO,MAAM,iBAAiB,SAA0D,CAAC;AA4CzF,qGAAqG;AACrG,iBAAS,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUpC;AAED,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IAClD,KAAK,EAAE,OAAO,IAAI,CAAC;IACnB,6FAA6F;IAC7F,SAAS,EAAE,aAAa,GAAG,aAAa,CAAC;IACzC,IAAI,EAAE,OAAO,CAAC;IACd,iBAAiB,EAAE,OAAO,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,4IAA4I;AAC5I,iBAAS,gBAAgB,CACvB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,EAChB,qBAAqB,EAAE,MAAM,EAC7B,QAAQ,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAwBlE;AAED,eAAO,MAAM,MAAM;;;0BAGW,aAAa,QAAQ,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAqFrF,CAAC;AAEF,wHAAwH;AACxH,iBAAS,YAAY,CACnB,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,MAAM,CAgBR;AAED,sIAAsI;AACtI,iBAAS,aAAa,CACpB,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,GACb,MAAM,CAaR;AAED,OAAO,EACL,YAAY,IAAI,oBAAoB,EACpC,aAAa,IAAI,qBAAqB,EACtC,gBAAgB,IAAI,wBAAwB,EAC5C,KAAK,IAAI,aAAa,GACvB,CAAC"}