@ignitionfi/spl-stake-pool 1.1.19 → 1.1.20

package/dist/index.iife.js

@@ -22732,6 +22732,7 @@ var solanaStakePool = (function (exports, node_buffer) {
 	     * Creates a transaction instruction to withdraw WSOL from a stake pool using a session.
 	     */
 	    static withdrawWsolWithSession(params) {
+	        var _a;
 	        const type = STAKE_POOL_INSTRUCTION_LAYOUTS.WithdrawWsolWithSession;
 	        const data = encodeData(type, {
 	            poolTokensIn: params.poolTokensIn,
@@ -22752,6 +22753,9 @@ var solanaStakePool = (function (exports, node_buffer) {
 	            { pubkey: params.tokenProgramId, isSigner: false, isWritable: false },
 	            { pubkey: params.wsolMint, isSigner: false, isWritable: false },
 	            { pubkey: params.programSigner, isSigner: false, isWritable: true },
+	            { pubkey: (_a = params.payer) !== null && _a !== void 0 ? _a : params.userTransferAuthority, isSigner: true, isWritable: true },
+	            { pubkey: params.userWallet, isSigner: false, isWritable: false },
+	            { pubkey: SystemProgram.programId, isSigner: false, isWritable: false },
 	        ];
 	        if (params.solWithdrawAuthority) {
 	            keys.push({
@@ -22760,6 +22764,8 @@ var solanaStakePool = (function (exports, node_buffer) {
 	                isWritable: false,
 	            });
 	        }
+	        // Associated Token Program must be last - only needed in transaction for CPI routing
+	        keys.push({ pubkey: ASSOCIATED_TOKEN_PROGRAM_ID, isSigner: false, isWritable: false });
 	        return new TransactionInstruction({
 	            programId: params.programId,
 	            keys,
@@ -23333,7 +23339,7 @@ var solanaStakePool = (function (exports, node_buffer) {
 	/**
 	 * Creates instructions required to withdraw wSOL from a stake pool.
 	 */
-	async function withdrawWsolWithSession(connection, stakePoolAddress, signerOrSession, userPubkey, amount, minimumLamportsOut = 0, solWithdrawAuthority) {
+	async function withdrawWsolWithSession(connection, stakePoolAddress, signerOrSession, userPubkey, amount, minimumLamportsOut = 0, solWithdrawAuthority, payer) {
 	    const stakePoolAccount = await getStakePoolAccount(connection, stakePoolAddress);
 	    const stakePoolProgramId = getStakePoolProgramId(connection.rpcEndpoint);
 	    const stakePool = stakePoolAccount.account.data;
@@ -23347,7 +23353,8 @@ var solanaStakePool = (function (exports, node_buffer) {
 	    const userWsolAccount = getAssociatedTokenAddressSync(NATIVE_MINT, userPubkey);
 	    const instructions = [];
 	    const signers = [];
-	    instructions.push(createAssociatedTokenAccountIdempotentInstruction(signerOrSession, userWsolAccount, userPubkey, NATIVE_MINT));
+	    // The program handles wSOL ATA creation internally
+	    // This prevents rent drain attacks where paymaster pays for ATA and user reclaims rent
 	    const [programSigner] = PublicKey.findProgramAddressSync([Buffer.from('fogo_session_program_signer')], stakePoolProgramId);
 	    const withdrawAuthority = await findWithdrawAuthorityProgramAddress(stakePoolProgramId, stakePoolAddress);
 	    instructions.push(StakePoolInstruction.withdrawWsolWithSession({
@@ -23364,6 +23371,8 @@ var solanaStakePool = (function (exports, node_buffer) {
 	        solWithdrawAuthority,
 	        wsolMint: NATIVE_MINT,
 	        programSigner,
+	        userWallet: userPubkey,
+	        payer,
 	        poolTokensIn: poolTokens,
 	        minimumLamportsOut,
 	    }));