@eco-incorp/sauce 0.99.0

package/sdk/dist/svm/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/svm/loader.ts"],"names":[],"mappings":"AAgCA,qDAAqD;AACrD,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,+FAA+F;AAC/F,MAAM,6BAA6B,GAAG,EAAE,CAAC;AA0BzC;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAA4B,EAC5B,UAAmC,EAAE;IAErC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,qEAAqE,SAAS,EAAE,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,6BAA6B,CAAC;IACzF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,mBAAmB,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,+EAA+E,mBAAmB,EAAE,CACrG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAuC,IAAI,CAAC;IAEvD,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,UAAU,GAAG,KAAK,EACtB,KAAkC,EAClC,KAAgB,EACD,EAAE;QACjB,IAAI,OAAiC,CAAC;QACtC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,yBAAyB,OAAO,CAAC,MAAM,iBAAiB,KAAK,CAAC,MAAM,YAAY,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,MAAM,OAAO,IAAI,KAAK;gBAAE,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAE;oBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAE,EAAE,CAAC;gBACzC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBACpB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBACrB,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC7C,sFAAsF;oBACtF,yFAAyF;oBACzF,uDAAuD;oBACvD,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC7E,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,EAAE,KAAkC,EAAiB,EAAE;QACxE,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,+DAA+D;QAC/D,MAAM,MAAM,GAAgB,EAAE,CAAC;QAC/B,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,SAAS,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;YAC5C,OAAO,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAE,CAAC;gBAC9B,MAAM,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CAAC;QACF,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAClF,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,CAAC,OAAgB,EAAiC,EAAE,CACzD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,OAAO,CAAC;YACtB,cAAc,CAAC,GAAG,EAAE;gBAClB,OAAO,GAAG,IAAI,CAAC;gBACf,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;;YAClE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAA4B,EAC5B,UAAmC,EAAE;IAErC,MAAM,KAAK,GAAG,4BAA4B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE9D,OAAO,KAAK,EAAE,OAAgB,EAA8B,EAAE,CAC5D,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;AACzC,CAAC;AAYD,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,GAA2B;IAC/D,OAAO,KAAK,EAAE,SAA6B,EAAqC,EAAE;QAChF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1F,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC3B,OAAO,KAAK,IAAI;YACd,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAC3F,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/sdk/dist/svm/pda.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The engine exposes no PDA of its own.
+ *
+ * `deriveBufferPda` derived the pre-release engine's `["buffer", authority, seed]`. Buffers belong
+ * to the kitchen now — `deriveCodeBufferPda` / `deriveCodePda` in `kitchen.ts`. `EnginePda` stays
+ * because it is the shape those return and consumers destructure.
+ */
+import type { Address } from "@solana/kit";
+export interface EnginePda {
+    address: Address;
+    bump: number;
+}
+//# sourceMappingURL=pda.d.ts.map

package/sdk/dist/svm/pda.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pda.d.ts","sourceRoot":"","sources":["../../src/svm/pda.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd"}

package/sdk/dist/svm/pda.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=pda.js.map

package/sdk/dist/svm/pda.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pda.js","sourceRoot":"","sources":["../../src/svm/pda.ts"],"names":[],"mappings":""}

package/sdk/dist/svm/prepends.d.ts

@@ -0,0 +1,40 @@
+import type { Address, Instruction, TransactionSigner } from "@solana/kit";
+/** Wrapped SOL mint (not exported by @solana-program/token). */
+export declare const NATIVE_MINT: Address;
+/**
+ * RequestHeapFrame(262144) — REQUIRED on every execute/simulate transaction:
+ * interpreter memory lives in the transaction's 256 KiB BPF heap frame, and a
+ * transaction without the request aborts deterministically before any opcode.
+ * **Add-once** beside SetComputeUnitLimit — duplicate ComputeBudget instruction
+ * types fail the whole transaction (the client's execute flows attach it
+ * automatically; use this when assembling transactions by hand). Buffer
+ * staging transactions do not need it.
+ */
+export declare function buildHeapFramePrepend(bytes?: number): Instruction;
+export interface ComputeBudgetPrependInput {
+    unitLimit: number;
+    microLamportsPerCu?: number | bigint;
+}
+export declare function buildComputeBudgetPrepend({ unitLimit, microLamportsPerCu, }: ComputeBudgetPrependInput): Instruction[];
+export interface AtaPrependInput {
+    payer: TransactionSigner;
+    owner: Address;
+    mint: Address;
+    tokenProgram?: Address;
+}
+/** Idempotent ATA creation — safe to prepend whether or not the ATA already exists. */
+export declare function buildAtaPrepend({ payer, owner, mint, tokenProgram, }: AtaPrependInput): Promise<{
+    ata: Address;
+    instruction: Instruction;
+}>;
+export interface WrapSolPrependsInput {
+    payer: TransactionSigner;
+    owner: Address;
+    lamports: bigint;
+}
+/** Idempotent wSOL ATA + SOL transfer + SyncNative — wraps `lamports` into the owner's wSOL account. */
+export declare function buildWrapSolPrepends({ payer, owner, lamports, }: WrapSolPrependsInput): Promise<{
+    wsolAta: Address;
+    instructions: Instruction[];
+}>;
+//# sourceMappingURL=prepends.d.ts.map

package/sdk/dist/svm/prepends.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepends.d.ts","sourceRoot":"","sources":["../../src/svm/prepends.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAe3E,gEAAgE;AAChE,eAAO,MAAM,WAAW,EAAE,OAAgE,CAAC;AAE3F;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,GAAE,MAAyB,GAAG,WAAW,CAEnF;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACtC;AAED,wBAAgB,yBAAyB,CAAC,EACxC,SAAS,EACT,kBAAkB,GACnB,EAAE,yBAAyB,GAAG,WAAW,EAAE,CAQ3C;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,iBAAiB,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,uFAAuF;AACvF,wBAAsB,eAAe,CAAC,EACpC,KAAK,EACL,KAAK,EACL,IAAI,EACJ,YAAY,GACb,EAAE,eAAe,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAE,CAAC,CAYvE;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,iBAAiB,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wGAAwG;AACxG,wBAAsB,oBAAoB,CAAC,EACzC,KAAK,EACL,KAAK,EACL,QAAQ,GACT,EAAE,oBAAoB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC,CAUnF"}

package/sdk/dist/svm/prepends.js

@@ -0,0 +1,51 @@
+import { address } from "@solana/kit";
+import { getRequestHeapFrameInstruction, getSetComputeUnitLimitInstruction, getSetComputeUnitPriceInstruction, } from "@solana-program/compute-budget";
+import { HEAP_FRAME_BYTES } from "./engine.js";
+import { TOKEN_PROGRAM_ADDRESS, findAssociatedTokenPda, getCreateAssociatedTokenIdempotentInstruction, getSyncNativeInstruction, } from "@solana-program/token";
+import { getTransferSolInstruction } from "@solana-program/system";
+/** Wrapped SOL mint (not exported by @solana-program/token). */
+export const NATIVE_MINT = address("So11111111111111111111111111111111111111112");
+/**
+ * RequestHeapFrame(262144) — REQUIRED on every execute/simulate transaction:
+ * interpreter memory lives in the transaction's 256 KiB BPF heap frame, and a
+ * transaction without the request aborts deterministically before any opcode.
+ * **Add-once** beside SetComputeUnitLimit — duplicate ComputeBudget instruction
+ * types fail the whole transaction (the client's execute flows attach it
+ * automatically; use this when assembling transactions by hand). Buffer
+ * staging transactions do not need it.
+ */
+export function buildHeapFramePrepend(bytes = HEAP_FRAME_BYTES) {
+    return getRequestHeapFrameInstruction({ bytes });
+}
+export function buildComputeBudgetPrepend({ unitLimit, microLamportsPerCu, }) {
+    const instructions = [getSetComputeUnitLimitInstruction({ units: unitLimit })];
+    if (microLamportsPerCu !== undefined) {
+        instructions.push(getSetComputeUnitPriceInstruction({ microLamports: microLamportsPerCu }));
+    }
+    return instructions;
+}
+/** Idempotent ATA creation — safe to prepend whether or not the ATA already exists. */
+export async function buildAtaPrepend({ payer, owner, mint, tokenProgram, }) {
+    const program = tokenProgram ?? TOKEN_PROGRAM_ADDRESS;
+    const [ata] = await findAssociatedTokenPda({ owner, mint, tokenProgram: program });
+    const instruction = getCreateAssociatedTokenIdempotentInstruction({
+        payer,
+        ata,
+        owner,
+        mint,
+        tokenProgram: program,
+    });
+    return { ata, instruction };
+}
+/** Idempotent wSOL ATA + SOL transfer + SyncNative — wraps `lamports` into the owner's wSOL account. */
+export async function buildWrapSolPrepends({ payer, owner, lamports, }) {
+    const { ata, instruction: createAta } = await buildAtaPrepend({
+        payer,
+        owner,
+        mint: NATIVE_MINT,
+    });
+    const transfer = getTransferSolInstruction({ source: payer, destination: ata, amount: lamports });
+    const sync = getSyncNativeInstruction({ account: ata });
+    return { wsolAta: ata, instructions: [createAta, transfer, sync] };
+}
+//# sourceMappingURL=prepends.js.map

package/sdk/dist/svm/prepends.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepends.js","sourceRoot":"","sources":["../../src/svm/prepends.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,6CAA6C,EAC7C,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAEnE,gEAAgE;AAChE,MAAM,CAAC,MAAM,WAAW,GAAY,OAAO,CAAC,6CAA6C,CAAC,CAAC;AAE3F;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,gBAAgB;IACpE,OAAO,8BAA8B,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AACnD,CAAC;AAOD,MAAM,UAAU,yBAAyB,CAAC,EACxC,SAAS,EACT,kBAAkB,GACQ;IAC1B,MAAM,YAAY,GAAkB,CAAC,iCAAiC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAE9F,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,YAAY,CAAC,IAAI,CAAC,iCAAiC,CAAC,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AASD,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,KAAK,EACL,KAAK,EACL,IAAI,EACJ,YAAY,GACI;IAChB,MAAM,OAAO,GAAG,YAAY,IAAI,qBAAqB,CAAC;IACtD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,sBAAsB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IACnF,MAAM,WAAW,GAAG,6CAA6C,CAAC;QAChE,KAAK;QACL,GAAG;QACH,KAAK;QACL,IAAI;QACJ,YAAY,EAAE,OAAO;KACtB,CAAC,CAAC;IAEH,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AAC9B,CAAC;AAQD,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,KAAK,EACL,KAAK,EACL,QAAQ,GACa;IACrB,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAAC;QAC5D,KAAK;QACL,KAAK;QACL,IAAI,EAAE,WAAW;KAClB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,yBAAyB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClG,MAAM,IAAI,GAAG,wBAAwB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAExD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;AACrE,CAAC"}

package/sdk/dist/svm/quoteSim.d.ts

@@ -0,0 +1,17 @@
+import type { Address, GetAccountInfoApi, Instruction, Rpc, SimulateTransactionApi, TransactionSigner } from "@solana/kit";
+export interface QuoteViaSimulationInput {
+    rpc: Rpc<SimulateTransactionApi & GetAccountInfoApi>;
+    /** The venue swap instruction, exactly as it would be sent. */
+    swapIx: Instruction;
+    /** Fee payer / signer of the simulated transaction (signature not verified). */
+    payer: TransactionSigner;
+    /** The user's output-token account — the quote is its balance delta. */
+    outAta: Address;
+}
+/**
+ * Simulates `swapIx` as a standalone single-instruction transaction and
+ * returns the outAta token-balance delta (post − pre) as the quoted output.
+ * See the module doc for the staleness contract.
+ */
+export declare function quoteViaSimulation({ rpc, swapIx, payer, outAta, }: QuoteViaSimulationInput): Promise<bigint>;
+//# sourceMappingURL=quoteSim.d.ts.map

package/sdk/dist/svm/quoteSim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quoteSim.d.ts","sourceRoot":"","sources":["../../src/svm/quoteSim.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EACV,OAAO,EAEP,iBAAiB,EACjB,WAAW,EACX,GAAG,EACH,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,aAAa,CAAC;AAgBrB,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,GAAG,CAAC,sBAAsB,GAAG,iBAAiB,CAAC,CAAC;IACrD,+DAA+D;IAC/D,MAAM,EAAE,WAAW,CAAC;IACpB,gFAAgF;IAChF,KAAK,EAAE,iBAAiB,CAAC;IACzB,wEAAwE;IACxE,MAAM,EAAE,OAAO,CAAC;CACjB;AAeD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,GAAG,EACH,MAAM,EACN,KAAK,EACL,MAAM,GACP,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,CAiC3C"}

package/sdk/dist/svm/quoteSim.js

@@ -0,0 +1,66 @@
+/**
+ * External-quote helper for solswapBest: quote a swap instruction by
+ * simulating it as a standalone transaction and reading the out token
+ * account's balance delta. This is the only quoting path for venues whose
+ * math cannot be reproduced from account reads (closed-source prop AMMs,
+ * aggregator routes).
+ *
+ * STALENESS CONTRACT: the returned quote is exact at simulate time ONLY —
+ * any state change between the simulation and the on-chain execution
+ * (someone else trades, fees change, an oracle ticks) silently invalidates
+ * it. A baked external quote is therefore a candidate value for the best
+ * scan, never a guarantee; the recipe's post-swap outAta delta check
+ * (`throw "out"` when `after - before < minOut`) is the on-chain safety net.
+ */
+import { appendTransactionMessageInstructions, createTransactionMessage, getBase64EncodedWireTransaction, getBase64Encoder, pipe, setTransactionMessageFeePayerSigner, setTransactionMessageLifetimeUsingBlockhash, signTransactionMessageWithSigners, } from "@solana/kit";
+import { readUintLE } from "./venues/math.js";
+/** SPL token account amount: u64 LE at offset 64 (Tokenkeg and Token-2022). */
+const TOKEN_AMOUNT_OFFSET = 64;
+const TOKEN_ACCOUNT_MIN_LENGTH = TOKEN_AMOUNT_OFFSET + 8;
+// The simulation replaces the blockhash server-side (replaceRecentBlockhash),
+// so the signed message carries this placeholder — no getLatestBlockhash
+// round-trip, and the payer's signature is never checked (sigVerify defaults
+// to false).
+const PLACEHOLDER_BLOCKHASH = {
+    blockhash: "11111111111111111111111111111111",
+    lastValidBlockHeight: 0n,
+};
+function decodeBase64(data) {
+    return new Uint8Array(getBase64Encoder().encode(data));
+}
+function tokenAmount(data, outAta, when) {
+    if (data.length < TOKEN_ACCOUNT_MIN_LENGTH) {
+        throw new Error(`out token account ${outAta} data is ${data.length} bytes ${when}, expected an SPL token account`);
+    }
+    return readUintLE(data, TOKEN_AMOUNT_OFFSET, 8);
+}
+/**
+ * Simulates `swapIx` as a standalone single-instruction transaction and
+ * returns the outAta token-balance delta (post − pre) as the quoted output.
+ * See the module doc for the staleness contract.
+ */
+export async function quoteViaSimulation({ rpc, swapIx, payer, outAta, }) {
+    const { value: preAccount } = await rpc.getAccountInfo(outAta, { encoding: "base64" }).send();
+    if (preAccount === null)
+        throw new Error(`out token account ${outAta} not found`);
+    const preAmount = tokenAmount(decodeBase64(preAccount.data[0]), outAta, "before the swap");
+    const message = pipe(createTransactionMessage({ version: 0 }), (m) => setTransactionMessageFeePayerSigner(payer, m), (m) => appendTransactionMessageInstructions([swapIx], m), (m) => setTransactionMessageLifetimeUsingBlockhash(PLACEHOLDER_BLOCKHASH, m));
+    const transaction = await signTransactionMessageWithSigners(message);
+    const { value } = await rpc
+        .simulateTransaction(getBase64EncodedWireTransaction(transaction), {
+        encoding: "base64",
+        replaceRecentBlockhash: true,
+        accounts: { encoding: "base64", addresses: [outAta] },
+    })
+        .send();
+    if (value.err !== null) {
+        throw new Error(`swap simulation failed: ${JSON.stringify(value.err)}${value.logs ? `\n${value.logs.join("\n")}` : ""}`);
+    }
+    const postAccount = value.accounts?.[0];
+    if (postAccount === null || postAccount === undefined) {
+        throw new Error(`swap simulation did not return the out token account ${outAta}`);
+    }
+    const postAmount = tokenAmount(decodeBase64(postAccount.data[0]), outAta, "after the swap");
+    return postAmount - preAmount;
+}
+//# sourceMappingURL=quoteSim.js.map

package/sdk/dist/svm/quoteSim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quoteSim.js","sourceRoot":"","sources":["../../src/svm/quoteSim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,oCAAoC,EACpC,wBAAwB,EACxB,+BAA+B,EAC/B,gBAAgB,EAChB,IAAI,EACJ,mCAAmC,EACnC,2CAA2C,EAC3C,iCAAiC,GAClC,MAAM,aAAa,CAAC;AAUrB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,+EAA+E;AAC/E,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,wBAAwB,GAAG,mBAAmB,GAAG,CAAC,CAAC;AAEzD,8EAA8E;AAC9E,yEAAyE;AACzE,6EAA6E;AAC7E,aAAa;AACb,MAAM,qBAAqB,GAAG;IAC5B,SAAS,EAAE,kCAA+C;IAC1D,oBAAoB,EAAE,EAAE;CAChB,CAAC;AAYX,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,IAAgB,EAAE,MAAe,EAAE,IAAY;IAClE,IAAI,IAAI,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,qBAAqB,MAAM,YAAY,IAAI,CAAC,MAAM,UAAU,IAAI,iCAAiC,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,GAAG,EACH,MAAM,EACN,KAAK,EACL,MAAM,GACkB;IACxB,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9F,IAAI,UAAU,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,YAAY,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,WAAW,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAE3F,MAAM,OAAO,GAAG,IAAI,CAClB,wBAAwB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EACxC,CAAC,CAAC,EAAE,EAAE,CAAC,mCAAmC,CAAC,KAAK,EAAE,CAAC,CAAC,EACpD,CAAC,CAAC,EAAE,EAAE,CAAC,oCAAoC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EACxD,CAAC,CAAC,EAAE,EAAE,CAAC,2CAA2C,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAC7E,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAErE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG;SACxB,mBAAmB,CAAC,+BAA+B,CAAC,WAAW,CAAC,EAAE;QACjE,QAAQ,EAAE,QAAQ;QAClB,sBAAsB,EAAE,IAAI;QAC5B,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;KACtD,CAAC;SACD,IAAI,EAAE,CAAC;IAEV,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACxG,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,wDAAwD,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAE5F,OAAO,UAAU,GAAG,SAAS,CAAC;AAChC,CAAC"}

package/sdk/dist/svm/recipes/index.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Upper bound on generated escrows. Each escrow attaches THREE accounts — `escrow_i` (source),
+ * `mint_i` (read for decimals by TransferChecked), `dest_i` (the recipient's ATA) — on top of the
+ * two token-program slots and the shared `owner`. So N escrows is `3N + 3` accounts; a large N needs
+ * an address lookup table to fit the transaction, which is why this is capped.
+ */
+export declare const SVM_MAX_ESCROWS = 16;
+/** Absolute path to the checked-in N=1 instance of `svmSettleSource()`, inside THIS installed
+ *  package — readable on its own, and pinned equal to the generator's output by
+ *  `sdk/test/svm-settle.compile.test.ts` so the two can never drift. */
+export declare const SVM_SETTLE_SOURCE_PATH: string;
+/**
+ * The SVM `settle` program text for `escrowCount` escrows — the SVM twin of
+ * the EVM `settle.sauce.ts`, statement for statement, differing only where the VM forces it (see this
+ * module's header). Generated rather than static because the escrow count is a compile-time property
+ * on SVM; the returned text is exactly what gets compiled.
+ */
+export declare function svmSettleSource(escrowCount?: number): string;
+/**
+ * The account refs a generated program declares, in manifest order, for `escrowCount` escrows:
+ * `tokenProgram0`, `tokenProgram1`, then per escrow `escrow_i` (source, writable), `mint_i`
+ * (read for decimals), `dest_i` (recipient ATA, writable) — with the shared `owner` (signer) landing
+ * right after escrow 0's group, which is simply the order `main` declares its params in. A caller's
+ * `AccountResolution` must cover
+ * exactly these; `sdk/test/svm-settle.compile.test.ts` pins this against a real compile for several
+ * escrow counts so it can never drift from what the compiler actually emits.
+ */
+export declare function svmSettleRefs(escrowCount?: number): string[];
+//# sourceMappingURL=index.d.ts.map

package/sdk/dist/svm/recipes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/svm/recipes/index.ts"],"names":[],"mappings":"AA8DA;;;;;GAKG;AACH,eAAO,MAAM,eAAe,KAAK,CAAC;AAkElC;;wEAEwE;AACxE,eAAO,MAAM,sBAAsB,EAAE,MAA2C,CAAC;AAUjF;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,WAAW,GAAE,MAAU,GAAG,MAAM,CA+C/D;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,WAAW,GAAE,MAAU,GAAG,MAAM,EAAE,CAS/D"}

package/sdk/dist/svm/recipes/index.js

@@ -0,0 +1,206 @@
+/**
+ * @eco-incorp/sauce/svm — the SVM `settle` recipe, shipped as SOURCE.
+ *
+ * This is the SVM twin of the EVM `settle.sauce.ts` (`@eco-incorp/sauce/recipes`): enforce a
+ * minimum-output floor on the FIRST escrow's balance, then sweep every listed escrow's whole balance
+ * to one recipient. Same contract as the EVM program, same "compiled by the ordinary compiler"
+ * delivery — a partner recompiles the exact source we ship and byte-compares. Only the VM mechanics
+ * differ: a balance is read out of an SPL token account's own data (no `balanceOf` call), and moved
+ * with an SPL `TransferChecked` CPI (no ERC20 `transfer`).
+ *
+ * ```ts
+ * import { compile } from "@eco-incorp/sauce-compiler";
+ * import { svmSettleSource } from "@eco-incorp/sauce/svm";
+ *
+ * const { bytecode, manifest } = compile({
+ *   target: "svm",
+ *   entry: "main.js",
+ *   resolve: (path) => (path === "main.js" ? Buffer.from(svmSettleSource(3)) : undefined),
+ *   defines: [["SETTLE_MIN_OUT", String(minOut)], ["SETTLE_SPL_COUNT", String(splCount)]],
+ * });
+ * // `bytecode` is a deterministic function of (escrowCount, minOut, splCount) — and ONLY those.
+ * // Every account identity is an attach slot, so one blob still serves every mint/recipient.
+ * ```
+ *
+ * The shape, and why each piece differs from EVM's single loop:
+ *   - N IS A COMPILE-TIME PROPERTY. An SVM token account must be ATTACHED to the instruction and
+ *     addressed by a LITERAL index, so the source can't loop a runtime-length list the way the EVM
+ *     twin loops a heap array — the generator emits N unrolled sweeps. It returns the exact text
+ *     that gets compiled, so a partner still byte-compares source they can read.
+ *   - ONE RECIPIENT, N DESTINATIONS. The caller passes a single recipient WALLET; the SDK derives
+ *     that wallet's ATA per mint and fills the `dest_i` slots — an SPL token account holds one mint,
+ *     so N mints need N destination accounts even for one recipient. (A derivable address still has
+ *     to be attached: Solana requires every touched account in the instruction's account list.)
+ *   - `SETTLE_SPL_COUNT` (a compile-time define) groups escrows by token program: the first
+ *     `splCount` sweep via `tokenProgram0`, the rest via `tokenProgram1` — classic SPL and
+ *     Token-2022 in one settle. All-classic? attach the same program at both slots and Solana dedups
+ *     it.
+ *   - `TransferChecked` (ix 12), so it is correct for Token-2022 fee mints (PYUSD et al.), not only
+ *     classic SPL. That is why each escrow also attaches its `mint_i` — TransferChecked reads
+ *     decimals from it (the program reads them on-chain, so decimals are never an argument).
+ *     Transfer-HOOK mints are out of scope; a resolver should reject one with a clear error.
+ *
+ * `svmSettleRefs(n)` gives the manifest order to resolve against. There is no
+ * `decodeSvmSettleProgram` and there cannot be one: the account identities are never in the bytecode
+ * on SVM (Solana requires them attached), so there is nothing in the program to parse them back out
+ * of. The EVM side decodes because its values ride an argument TAIL appended after the program, not
+ * because they are embedded in it. Verification is by RECOMPILE, in `@eco-incorp/sauce/svm/verify`:
+ * `verifySvmSettleProgram` recompiles this source with the caller's expected
+ * `(escrowCount, minOut, splCount)` and byte-compares — proving the logic is genuine AND pinning
+ * those two scalars, since both are folded in. The resolved account identities come from the
+ * executed instruction's account list, matched against these refs.
+ */
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+/** Offset of the SPL token account's u64 `amount` field (identical in classic SPL + Token-2022). */
+const SPL_AMOUNT_OFFSET = 64;
+/** Offset of the mint's `decimals` byte (identical in the first 82 bytes of both programs' mints). */
+const MINT_DECIMALS_OFFSET = 44;
+/**
+ * Upper bound on generated escrows. Each escrow attaches THREE accounts — `escrow_i` (source),
+ * `mint_i` (read for decimals by TransferChecked), `dest_i` (the recipient's ATA) — on top of the
+ * two token-program slots and the shared `owner`. So N escrows is `3N + 3` accounts; a large N needs
+ * an address lookup table to fit the transaction, which is why this is capped.
+ */
+export const SVM_MAX_ESCROWS = 16;
+/** The generated program's doc header — one copy, emitted verbatim for every escrow count. */
+const SVM_HEADER = `// settle.sauce.ts — a STANDALONE, reusable SVM Sauce program: enforce a minimum-output
+// floor on the FIRST escrow SPL token account's CURRENT balance, then sweep every listed escrow's
+// whole balance to ONE recipient.
+//
+// This is the SVM twin of the EVM \`settle.sauce.ts\` (@eco-incorp/sauce/recipes), statement for
+// statement: read the floor token's balance, revert if it is below \`minOut\`, then sweep each token
+// in turn, skipping empty ones, and return the floor balance. Only the VM mechanics differ — there
+// is no Pot and no \`balanceOf\` call: a balance lives IN the escrow account's own data, and moving it
+// is an SPL Token \`TransferChecked\` CPI rather than an ERC20 call.
+//
+// GENERATED, NOT HAND-WRITTEN — by \`svmSettleSource(escrowCount)\` (sdk/src/svm/recipes/index.ts).
+// On EVM the token list is DATA, so one static program loops over it at runtime; on SVM a token
+// account must be ATTACHED to the instruction and addressed by a LITERAL account index, so the
+// escrow count is a compile-time property and the sweeps are unrolled. The generator returns the
+// EXACT text that gets compiled, so a partner still reads precisely what they byte-compare.
+//
+// It is deliberately NOT tied to any recipe, protocol, or product. Nothing below knows what produced
+// the escrows' balances — a swap, a bridge, an airdrop, or nothing at all. Keep it that way: no
+// caller-specific names, in the code OR in the revert string (identical to the EVM twin's).
+//
+// THE SHAPE: \`main(<accounts…>)\` with \`SETTLE_MIN_OUT\` / \`SETTLE_SPL_COUNT\` supplied as compile-time
+// \`defines\`. Every ACCOUNT is a \`main\` parameter, declared in the order a caller attaches them —
+// that declaration is the account manifest.
+//   - \`SETTLE_MIN_OUT\` is the direct mirror of the EVM twin's \`minOut\` — and applies
+//     to \`escrow0\` ONLY, exactly as the EVM floor applies to \`tokens[0]\`. Every other escrow is swept
+//     unconditionally (a dust sweep).
+//   - \`splCount\` groups escrows by token program: escrow i sweeps via \`tokenProgram0\` when
+//     \`i < splCount\`, else \`tokenProgram1\`. Classic SPL and Token-2022 in one settle; order escrows
+//     classic-first. When every mint shares one program, pass \`tokenProgram1 == tokenProgram0\`.
+//   - Every identity — which escrows, which recipient ATAs, which owner authorizes, which token
+//     programs — binds at EXECUTION time via the manifest's slots, so one blob serves every
+//     mint/recipient. The bytecode varies ONLY with (escrowCount, minOut, splCount).
+//
+// ONE RECIPIENT, N DESTINATIONS: the \`dest_i\` refs are the ONE recipient wallet's associated token
+// account per mint. An SPL token account holds a single mint, so N mints need N destination accounts
+// even for a single recipient; the SDK derives them from the recipient wallet + each mint. This is
+// the SPL-shaped equivalent of the EVM twin's single \`recipient\` address.
+//
+// TransferChecked (ix 12), NOT the legacy Transfer (ix 3): legacy Transfer reverts on a Token-2022
+// mint with a transfer fee (e.g. PYUSD), so it cannot honour "works for SPL or Token-2022".
+// TransferChecked is uniform across both programs and reads the mint's decimals to self-check — the
+// reason each escrow attaches its \`mint_i\`, and the reason decimals are read on-chain rather than
+// passed as an argument. Transfer-HOOK mints (rare; compliance/allowlist tokens) are out of scope:
+// they need per-mint hook accounts a generic program cannot enumerate, and a transfer targeting one
+// reverts atomically. A resolver should reject a hook-configured mint up front with a clear error.
+//
+// EACH \`tokenProgram_p\` IS ONE BINDING: it is an \`Account\` parameter, and \`svm.call\` takes that
+// same account as its CPI target — so there is nothing for a caller to keep in sync. Nothing here
+// pins WHICH program arrives at that slot, though: whoever attaches the accounts chooses, so a
+// caller that cares must compare the attached account itself.
+//
+// KNOWN PROPERTY, DOCUMENTED AND ACCEPTED — NOT DEFENDED AGAINST: the floor and the sweeps read
+// CURRENT balances, not a delta against a baseline, so a donated balance counts toward \`minOut\` and
+// rides along. Same accepted property as the EVM twin — but materially EASIER to trigger here, since
+// an associated token account is a public address anyone can permissionlessly transfer into. Do not
+// add baseline/delta machinery; the chosen model is the escrows ending clean.
+//
+// u64-ONLY ARITHMETIC: \`le8\` is a 64-bit byteswap, sound because both the SPL \`amount\` field and the
+// \`minOut\` argument are u64-shaped.
+//
+// PARTNER VERIFY: recompile \`svmSettleSource(n)\` yourself with the options in
+// sdk/src/svm/recipes/index.ts and byte-compare against what you were handed. There is no golden hash.`;
+/** Absolute path to the checked-in N=1 instance of `svmSettleSource()`, inside THIS installed
+ *  package — readable on its own, and pinned equal to the generator's output by
+ *  `sdk/test/svm-settle.compile.test.ts` so the two can never drift. */
+export const SVM_SETTLE_SOURCE_PATH = join(__dirname, "settle.sauce.ts");
+function assertEscrowCount(fn, escrowCount) {
+    if (!Number.isInteger(escrowCount) || escrowCount < 1 || escrowCount > SVM_MAX_ESCROWS) {
+        throw new Error(`${fn}: escrowCount must be an integer 1..${SVM_MAX_ESCROWS}, got ${escrowCount}`);
+    }
+}
+/**
+ * The SVM `settle` program text for `escrowCount` escrows — the SVM twin of
+ * the EVM `settle.sauce.ts`, statement for statement, differing only where the VM forces it (see this
+ * module's header). Generated rather than static because the escrow count is a compile-time property
+ * on SVM; the returned text is exactly what gets compiled.
+ */
+export function svmSettleSource(escrowCount = 1) {
+    assertEscrowCount("svmSettleSource", escrowCount);
+    const sweep = (i) => `
+  // escrow ${i}: read balance then decimals, then TransferChecked the whole balance to this
+  // recipient's ATA, via this escrow's token program (tokenProgram0 for the first
+  // \`SETTLE_SPL_COUNT\` escrows, tokenProgram1 for the rest).
+  const bal${i} = svm.sload(escrow${i}, ${SPL_AMOUNT_OFFSET}, 8).toLe();
+  const dec${i} = svm.sload(mint${i}, ${MINT_DECIMALS_OFFSET}, 1).toLe();
+  if (bal${i} > 0) {
+    const tp${i} = ${i} < SETTLE_SPL_COUNT ? tokenProgram0 : tokenProgram1;
+    const tag${i} = hex\`0c\`;                                   // TransferChecked
+    const data${i} = tag${i}.concat(bal${i}.toBytesLe(8)).concat(dec${i}.toBytesLe(1));
+    svm.call(tp${i}, [escrow${i}, mint${i}, dest${i}, owner], data${i});
+  }`;
+    // Accounts are main() PARAMS, declared in exactly `svmSettleRefs` order — that declaration IS
+    // the manifest the caller attaches against.
+    const params = ["tokenProgram0: Account", "tokenProgram1: Account"];
+    for (let i = 0; i < escrowCount; i++) {
+        params.push(`escrow${i}: Account<Writable>`, `mint${i}: Account`, `dest${i}: Account<Writable>`);
+        if (i === 0)
+            params.push("owner: Account<Signer>");
+    }
+    return `${SVM_HEADER}
+// Per-execution values arrive as \`defines\`, which replace these declarations and constant-fold, so
+// a given (minOut, splCount) pair yields fixed bytecode. The defaults keep this file compilable and
+// readable on its own.
+const SETTLE_MIN_OUT = 0n;
+const SETTLE_SPL_COUNT = 0n;
+
+function main(${params.join(", ")}): Uint256 {
+  const floorBal = svm.sload(escrow0, ${SPL_AMOUNT_OFFSET}, 8).toLe();
+  if (SETTLE_MIN_OUT > 0) {
+    if (floorBal < SETTLE_MIN_OUT) {
+      throw "settle: balance below minOut";
+    }
+  }
+${Array.from({ length: escrowCount }, (_, i) => sweep(i)).join("\n")}
+
+  return floorBal;
+}
+`;
+}
+/**
+ * The account refs a generated program declares, in manifest order, for `escrowCount` escrows:
+ * `tokenProgram0`, `tokenProgram1`, then per escrow `escrow_i` (source, writable), `mint_i`
+ * (read for decimals), `dest_i` (recipient ATA, writable) — with the shared `owner` (signer) landing
+ * right after escrow 0's group, which is simply the order `main` declares its params in. A caller's
+ * `AccountResolution` must cover
+ * exactly these; `sdk/test/svm-settle.compile.test.ts` pins this against a real compile for several
+ * escrow counts so it can never drift from what the compiler actually emits.
+ */
+export function svmSettleRefs(escrowCount = 1) {
+    assertEscrowCount("svmSettleRefs", escrowCount);
+    const refs = ["tokenProgram0", "tokenProgram1"];
+    for (let i = 0; i < escrowCount; i++) {
+        refs.push(`escrow${i}`, `mint${i}`, `dest${i}`);
+        if (i === 0)
+            refs.push("owner");
+    }
+    return refs;
+}
+//# sourceMappingURL=index.js.map

package/sdk/dist/svm/recipes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/svm/recipes/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,oGAAoG;AACpG,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,sGAAsG;AACtG,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAElC,8FAA8F;AAC9F,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wGA6DqF,CAAC;AAEzG;;wEAEwE;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAW,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAEjF,SAAS,iBAAiB,CAAC,EAAU,EAAE,WAAmB;IACxD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,eAAe,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CACb,GAAG,EAAE,uCAAuC,eAAe,SAAS,WAAW,EAAE,CAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,cAAsB,CAAC;IACrD,iBAAiB,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAElD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC;cACzB,CAAC;;;aAGF,CAAC,sBAAsB,CAAC,KAAK,iBAAiB;aAC9C,CAAC,oBAAoB,CAAC,KAAK,oBAAoB;WACjD,CAAC;cACE,CAAC,MAAM,CAAC;eACP,CAAC;gBACA,CAAC,SAAS,CAAC,cAAc,CAAC,4BAA4B,CAAC;iBACtD,CAAC,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,iBAAiB,CAAC;IACjE,CAAC;IAEH,8FAA8F;IAC9F,4CAA4C;IAC5C,MAAM,MAAM,GAAG,CAAC,wBAAwB,EAAE,wBAAwB,CAAC,CAAC;IACpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CACT,SAAS,CAAC,qBAAqB,EAC/B,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,qBAAqB,CAC9B,CAAC;QACF,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,GAAG,UAAU;;;;;;;gBAON,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;wCACO,iBAAiB;;;;;;EAMvD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;CAInE,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,cAAsB,CAAC;IACnD,iBAAiB,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAEhD,MAAM,IAAI,GAAG,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/sdk/dist/svm/recipes/settle.sauce.ts

@@ -0,0 +1,90 @@
+// settle.sauce.ts — a STANDALONE, reusable SVM Sauce program: enforce a minimum-output
+// floor on the FIRST escrow SPL token account's CURRENT balance, then sweep every listed escrow's
+// whole balance to ONE recipient.
+//
+// This is the SVM twin of the EVM `settle.sauce.ts` (@eco-incorp/sauce/recipes), statement for
+// statement: read the floor token's balance, revert if it is below `minOut`, then sweep each token
+// in turn, skipping empty ones, and return the floor balance. Only the VM mechanics differ — there
+// is no Pot and no `balanceOf` call: a balance lives IN the escrow account's own data, and moving it
+// is an SPL Token `TransferChecked` CPI rather than an ERC20 call.
+//
+// GENERATED, NOT HAND-WRITTEN — by `svmSettleSource(escrowCount)` (sdk/src/svm/recipes/index.ts).
+// On EVM the token list is DATA, so one static program loops over it at runtime; on SVM a token
+// account must be ATTACHED to the instruction and addressed by a LITERAL account index, so the
+// escrow count is a compile-time property and the sweeps are unrolled. The generator returns the
+// EXACT text that gets compiled, so a partner still reads precisely what they byte-compare.
+//
+// It is deliberately NOT tied to any recipe, protocol, or product. Nothing below knows what produced
+// the escrows' balances — a swap, a bridge, an airdrop, or nothing at all. Keep it that way: no
+// caller-specific names, in the code OR in the revert string (identical to the EVM twin's).
+//
+// THE SHAPE: `main(<accounts…>)` with `SETTLE_MIN_OUT` / `SETTLE_SPL_COUNT` supplied as compile-time
+// `defines`. Every ACCOUNT is a `main` parameter, declared in the order a caller attaches them —
+// that declaration is the account manifest.
+//   - `SETTLE_MIN_OUT` is the direct mirror of the EVM twin's `minOut` — and applies
+//     to `escrow0` ONLY, exactly as the EVM floor applies to `tokens[0]`. Every other escrow is swept
+//     unconditionally (a dust sweep).
+//   - `splCount` groups escrows by token program: escrow i sweeps via `tokenProgram0` when
+//     `i < splCount`, else `tokenProgram1`. Classic SPL and Token-2022 in one settle; order escrows
+//     classic-first. When every mint shares one program, pass `tokenProgram1 == tokenProgram0`.
+//   - Every identity — which escrows, which recipient ATAs, which owner authorizes, which token
+//     programs — binds at EXECUTION time via the manifest's slots, so one blob serves every
+//     mint/recipient. The bytecode varies ONLY with (escrowCount, minOut, splCount).
+//
+// ONE RECIPIENT, N DESTINATIONS: the `dest_i` refs are the ONE recipient wallet's associated token
+// account per mint. An SPL token account holds a single mint, so N mints need N destination accounts
+// even for a single recipient; the SDK derives them from the recipient wallet + each mint. This is
+// the SPL-shaped equivalent of the EVM twin's single `recipient` address.
+//
+// TransferChecked (ix 12), NOT the legacy Transfer (ix 3): legacy Transfer reverts on a Token-2022
+// mint with a transfer fee (e.g. PYUSD), so it cannot honour "works for SPL or Token-2022".
+// TransferChecked is uniform across both programs and reads the mint's decimals to self-check — the
+// reason each escrow attaches its `mint_i`, and the reason decimals are read on-chain rather than
+// passed as an argument. Transfer-HOOK mints (rare; compliance/allowlist tokens) are out of scope:
+// they need per-mint hook accounts a generic program cannot enumerate, and a transfer targeting one
+// reverts atomically. A resolver should reject a hook-configured mint up front with a clear error.
+//
+// EACH `tokenProgram_p` IS ONE BINDING: it is an `Account` parameter, and `svm.call` takes that
+// same account as its CPI target — so there is nothing for a caller to keep in sync. Nothing here
+// pins WHICH program arrives at that slot, though: whoever attaches the accounts chooses, so a
+// caller that cares must compare the attached account itself.
+//
+// KNOWN PROPERTY, DOCUMENTED AND ACCEPTED — NOT DEFENDED AGAINST: the floor and the sweeps read
+// CURRENT balances, not a delta against a baseline, so a donated balance counts toward `minOut` and
+// rides along. Same accepted property as the EVM twin — but materially EASIER to trigger here, since
+// an associated token account is a public address anyone can permissionlessly transfer into. Do not
+// add baseline/delta machinery; the chosen model is the escrows ending clean.
+//
+// u64-ONLY ARITHMETIC: `le8` is a 64-bit byteswap, sound because both the SPL `amount` field and the
+// `minOut` argument are u64-shaped.
+//
+// PARTNER VERIFY: recompile `svmSettleSource(n)` yourself with the options in
+// sdk/src/svm/recipes/index.ts and byte-compare against what you were handed. There is no golden hash.
+// Per-execution values arrive as `defines`, which replace these declarations and constant-fold, so
+// a given (minOut, splCount) pair yields fixed bytecode. The defaults keep this file compilable and
+// readable on its own.
+const SETTLE_MIN_OUT = 0n;
+const SETTLE_SPL_COUNT = 0n;
+
+function main(tokenProgram0: Account, tokenProgram1: Account, escrow0: Account<Writable>, mint0: Account, dest0: Account<Writable>, owner: Account<Signer>): Uint256 {
+  const floorBal = svm.sload(escrow0, 64, 8).toLe();
+  if (SETTLE_MIN_OUT > 0) {
+    if (floorBal < SETTLE_MIN_OUT) {
+      throw "settle: balance below minOut";
+    }
+  }
+
+  // escrow 0: read balance then decimals, then TransferChecked the whole balance to this
+  // recipient's ATA, via this escrow's token program (tokenProgram0 for the first
+  // `SETTLE_SPL_COUNT` escrows, tokenProgram1 for the rest).
+  const bal0 = svm.sload(escrow0, 64, 8).toLe();
+  const dec0 = svm.sload(mint0, 44, 1).toLe();
+  if (bal0 > 0) {
+    const tp0 = 0 < SETTLE_SPL_COUNT ? tokenProgram0 : tokenProgram1;
+    const tag0 = hex`0c`;                                   // TransferChecked
+    const data0 = tag0.concat(bal0.toBytesLe(8)).concat(dec0.toBytesLe(1));
+    svm.call(tp0, [escrow0, mint0, dest0, owner], data0);
+  }
+
+  return floorBal;
+}