@rebelfi/agent-sdk 1.0.1

package/dist/cjs/verify/decoders/spl-token.js

@@ -0,0 +1,125 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeSplToken = decodeSplToken;
+const amount_utils_js_1 = require("../../amount-utils.js");
+// SPL Token instruction discriminator is u8 at byte 0
+const IX = {
+    InitializeMint: 0,
+    InitializeAccount: 1,
+    Transfer: 3,
+    Approve: 4,
+    Revoke: 5,
+    MintTo: 7,
+    Burn: 8,
+    CloseAccount: 9,
+    FreezeAccount: 10,
+    ThawAccount: 11,
+    TransferChecked: 12,
+    ApproveChecked: 13,
+    MintToChecked: 14,
+    BurnChecked: 15,
+    SyncNative: 17,
+};
+function decodeSplToken(data, accounts, tokenSymbol) {
+    if (data.length < 1)
+        return null;
+    const index = data[0];
+    switch (index) {
+        case IX.Transfer: {
+            // [source, destination, authority], amount: u64 at bytes 1-8
+            if (data.length < 9)
+                return null;
+            const amount = data.readBigUInt64LE(1);
+            return {
+                type: 'transfer',
+                params: {
+                    source: accounts[0] ?? null,
+                    destination: accounts[1] ?? null,
+                    authority: accounts[2] ?? null,
+                    amount: amount.toString(),
+                },
+            };
+        }
+        case IX.TransferChecked: {
+            // [source, mint, destination, authority], amount: u64 at bytes 1-8, decimals: u8 at byte 9
+            if (data.length < 10)
+                return null;
+            const amount = data.readBigUInt64LE(1);
+            const decimals = data[9];
+            const mint = accounts[1] ?? null;
+            const symbol = mint ? tokenSymbol(mint) : 'unknown';
+            const humanAmount = mint
+                ? (0, amount_utils_js_1.formatUnits)(amount, decimals)
+                : amount.toString();
+            return {
+                type: 'transfer_checked',
+                params: {
+                    source: accounts[0] ?? null,
+                    mint,
+                    destination: accounts[2] ?? null,
+                    authority: accounts[3] ?? null,
+                    amount: amount.toString(),
+                    decimals,
+                    amountHuman: `${humanAmount} ${symbol}`,
+                },
+            };
+        }
+        case IX.MintTo:
+        case IX.MintToChecked: {
+            if (data.length < 9)
+                return null;
+            const amount = data.readBigUInt64LE(1);
+            return {
+                type: index === IX.MintTo ? 'mint_to' : 'mint_to_checked',
+                params: {
+                    mint: accounts[0] ?? null,
+                    destination: accounts[1] ?? null,
+                    authority: accounts[2] ?? null,
+                    amount: amount.toString(),
+                },
+            };
+        }
+        case IX.Burn:
+        case IX.BurnChecked: {
+            if (data.length < 9)
+                return null;
+            const amount = data.readBigUInt64LE(1);
+            return {
+                type: index === IX.Burn ? 'burn' : 'burn_checked',
+                params: {
+                    account: accounts[0] ?? null,
+                    mint: accounts[1] ?? null,
+                    authority: accounts[2] ?? null,
+                    amount: amount.toString(),
+                },
+            };
+        }
+        case IX.CloseAccount:
+            return {
+                type: 'close_account',
+                params: {
+                    account: accounts[0] ?? null,
+                    destination: accounts[1] ?? null,
+                    authority: accounts[2] ?? null,
+                },
+            };
+        case IX.InitializeAccount:
+            return {
+                type: 'initialize_account',
+                params: {
+                    account: accounts[0] ?? null,
+                    mint: accounts[1] ?? null,
+                    owner: accounts[2] ?? null,
+                },
+            };
+        case IX.SyncNative:
+            return { type: 'sync_native', params: { account: accounts[0] ?? null } };
+        case IX.FreezeAccount:
+            return { type: 'freeze_account', params: { account: accounts[0] ?? null, mint: accounts[1] ?? null } };
+        case IX.ThawAccount:
+            return { type: 'thaw_account', params: { account: accounts[0] ?? null, mint: accounts[1] ?? null } };
+        default:
+            return { type: `unknown_spl_ix_${index}`, params: {} };
+    }
+}
+//# sourceMappingURL=spl-token.js.map

package/dist/cjs/verify/decoders/spl-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spl-token.js","sourceRoot":"","sources":["../../../../src/verify/decoders/spl-token.ts"],"names":[],"mappings":";;AA0BA,wCAqGC;AA/HD,2DAAoD;AAOpD,sDAAsD;AACtD,MAAM,EAAE,GAAG;IACT,cAAc,EAAE,CAAC;IACjB,iBAAiB,EAAE,CAAC;IACpB,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,YAAY,EAAE,CAAC;IACf,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE,EAAE;IACf,eAAe,EAAE,EAAE;IACnB,cAAc,EAAE,EAAE;IAClB,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE,EAAE;IACf,UAAU,EAAE,EAAE;CACN,CAAC;AAEX,SAAgB,cAAc,CAC5B,IAAY,EACZ,QAAkB,EAClB,WAAqC;IAErC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAEtB,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjB,6DAA6D;YAC7D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACvC,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAC3B,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAChC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;iBAC1B;aACF,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;YACxB,2FAA2F;YAC3F,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI;gBACtB,CAAC,CAAC,IAAA,6BAAW,EAAC,MAAM,EAAE,QAAQ,CAAC;gBAC/B,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO;gBACL,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAC3B,IAAI;oBACJ,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAChC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACzB,QAAQ;oBACR,WAAW,EAAE,GAAG,WAAW,IAAI,MAAM,EAAE;iBACxC;aACF,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;YACtB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACvC,OAAO;gBACL,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB;gBACzD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBACzB,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAChC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;iBAC1B;aACF,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,CAAC,IAAI,CAAC;QACb,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YACpB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACvC,OAAO;gBACL,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc;gBACjD,MAAM,EAAE;oBACN,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAC5B,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBACzB,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;iBAC1B;aACF,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,CAAC,YAAY;YAClB,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE;oBACN,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAC5B,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAChC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;iBAC/B;aACF,CAAC;QACJ,KAAK,EAAE,CAAC,iBAAiB;YACvB,OAAO;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE;oBACN,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAC5B,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBACzB,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;iBAC3B;aACF,CAAC;QACJ,KAAK,EAAE,CAAC,UAAU;YAChB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QAC3E,KAAK,EAAE,CAAC,aAAa;YACnB,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACzG,KAAK,EAAE,CAAC,WAAW;YACjB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACvG;YACE,OAAO,EAAE,IAAI,EAAE,kBAAkB,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3D,CAAC;AACH,CAAC"}

package/dist/cjs/verify/decoders/system.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeSystem = decodeSystem;
+const web3_js_1 = require("@solana/web3.js");
+// System Program instruction indices (u32 LE at bytes 0-3)
+const IX = {
+    CreateAccount: 0,
+    Assign: 1,
+    Transfer: 2,
+    CreateAccountWithSeed: 3,
+    AdvanceNonceAccount: 4,
+    WithdrawNonceAccount: 5,
+    InitializeNonceAccount: 6,
+    AuthorizeNonceAccount: 7,
+    Allocate: 8,
+    AllocateWithSeed: 9,
+    AssignWithSeed: 10,
+    TransferWithSeed: 11,
+};
+function decodeSystem(data, accounts) {
+    if (data.length < 4)
+        return null;
+    const index = data.readUInt32LE(0);
+    switch (index) {
+        case IX.Transfer: {
+            if (data.length < 12)
+                return null;
+            const lamports = data.readBigUInt64LE(4);
+            return {
+                type: 'transfer',
+                params: {
+                    from: accounts[0] ?? null,
+                    to: accounts[1] ?? null,
+                    lamports: lamports.toString(),
+                    sol: (Number(lamports) / 1e9).toFixed(9).replace(/\.?0+$/, ''),
+                },
+            };
+        }
+        case IX.CreateAccount: {
+            if (data.length < 52)
+                return null;
+            const lamports = data.readBigUInt64LE(4);
+            const space = data.readBigUInt64LE(12);
+            const programId = new web3_js_1.PublicKey(data.subarray(20, 52)).toBase58();
+            return {
+                type: 'create_account',
+                params: {
+                    from: accounts[0] ?? null,
+                    newAccount: accounts[1] ?? null,
+                    lamports: lamports.toString(),
+                    sol: (Number(lamports) / 1e9).toFixed(9).replace(/\.?0+$/, ''),
+                    space: space.toString(),
+                    owner: programId,
+                },
+            };
+        }
+        case IX.Assign: {
+            if (data.length < 36)
+                return null;
+            const programId = new web3_js_1.PublicKey(data.subarray(4, 36)).toBase58();
+            return {
+                type: 'assign',
+                params: {
+                    account: accounts[0] ?? null,
+                    owner: programId,
+                },
+            };
+        }
+        case IX.Allocate: {
+            if (data.length < 12)
+                return null;
+            const space = data.readBigUInt64LE(4);
+            return {
+                type: 'allocate',
+                params: {
+                    account: accounts[0] ?? null,
+                    space: space.toString(),
+                },
+            };
+        }
+        case IX.AdvanceNonceAccount:
+            return { type: 'advance_nonce_account', params: { nonce: accounts[0] ?? null } };
+        default:
+            return { type: `unknown_system_ix_${index}`, params: {} };
+    }
+}
+//# sourceMappingURL=system.js.map

package/dist/cjs/verify/decoders/system.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.js","sourceRoot":"","sources":["../../../../src/verify/decoders/system.ts"],"names":[],"mappings":";;AAuBA,oCAiEC;AAxFD,6CAA4C;AAO5C,2DAA2D;AAC3D,MAAM,EAAE,GAAG;IACT,aAAa,EAAE,CAAC;IAChB,MAAM,EAAE,CAAC;IACT,QAAQ,EAAE,CAAC;IACX,qBAAqB,EAAE,CAAC;IACxB,mBAAmB,EAAE,CAAC;IACtB,oBAAoB,EAAE,CAAC;IACvB,sBAAsB,EAAE,CAAC;IACzB,qBAAqB,EAAE,CAAC;IACxB,QAAQ,EAAE,CAAC;IACX,gBAAgB,EAAE,CAAC;IACnB,cAAc,EAAE,EAAE;IAClB,gBAAgB,EAAE,EAAE;CACZ,CAAC;AAEX,SAAgB,YAAY,CAC1B,IAAY,EACZ,QAAkB;IAElB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAEnC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjB,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACzC,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBACzB,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;oBAC7B,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;iBAC/D;aACF,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;YACtB,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,mBAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YAClE,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBACzB,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;oBAC7B,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAC9D,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;oBACvB,KAAK,EAAE,SAAS;iBACjB;aACF,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACf,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;YAClC,MAAM,SAAS,GAAG,IAAI,mBAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACjE,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE;oBACN,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAC5B,KAAK,EAAE,SAAS;iBACjB;aACF,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjB,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACtC,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE;oBACN,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI;oBAC5B,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;iBACxB;aACF,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,CAAC,mBAAmB;YACzB,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACnF;YACE,OAAO,EAAE,IAAI,EAAE,qBAAqB,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC"}

package/dist/cjs/verify/flags.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyGlobalFlags = applyGlobalFlags;
+exports.applyTokenTransferFlags = applyTokenTransferFlags;
+// Known program IDs that are safe to receive SOL from System Program transfers
+// (e.g. rent payments, account creation). Transfers to these are not flagged.
+const KNOWN_SAFE_PROGRAMS = new Set([
+    '11111111111111111111111111111111', // System Program itself
+    'TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA', // SPL Token
+    'ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJe1bC5', // ATA
+    'ComputeBudget111111111111111111111111111111', // Compute Budget
+    'MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr', // Memo
+    'HANDu9uNdnraNbcueGfXhd3UPu6BXfQroKAsSxFhPXEQ', // Handshake
+    'SiLKos3MCFggwLsjSeuRiCdcs2MLoJNwq59XwTvEwcS', // Silkysig
+    'JUP6LkbZbjS1jKKwapdHNy74zcZ3tLUZoi5QNyVTaV4', // Jupiter v6
+    'SysvarRent111111111111111111111111111111111', // Sysvar Rent
+    'SysvarC1ock11111111111111111111111111111111', // Sysvar Clock
+]);
+function applyGlobalFlags(instructions, feePayer, knownAddresses) {
+    const flags = [];
+    // Collect all addresses involved in the transaction (for context)
+    const txAddresses = new Set([feePayer, ...knownAddresses]);
+    for (const ix of instructions) {
+        if (ix.programId)
+            txAddresses.add(ix.programId);
+    }
+    for (const ix of instructions) {
+        // Rule: UNKNOWN_PROGRAM
+        if (!ix.known) {
+            flags.push({
+                severity: 'error',
+                code: 'UNKNOWN_PROGRAM',
+                message: `Instruction ${ix.index} calls unknown program ${ix.programId} — this instruction cannot be verified.`,
+                instructionIndex: ix.index,
+            });
+        }
+        // Rule: UNEXPECTED_SOL_DRAIN
+        // A System Program transfer to an address that isn't the fee payer, a new account
+        // being created, or a known safe program is suspicious.
+        if (ix.programId === '11111111111111111111111111111111' &&
+            ix.type === 'transfer' &&
+            ix.params) {
+            const to = ix.params['to'];
+            if (to && !txAddresses.has(to) && !KNOWN_SAFE_PROGRAMS.has(to)) {
+                flags.push({
+                    severity: 'error',
+                    code: 'UNEXPECTED_SOL_DRAIN',
+                    message: `Instruction ${ix.index} transfers SOL to unrecognized address ${to} — potential drain.`,
+                    instructionIndex: ix.index,
+                });
+            }
+        }
+        // Rule: LARGE_COMPUTE_BUDGET
+        if (ix.programId === 'ComputeBudget111111111111111111111111111111' &&
+            ix.type === 'set_compute_unit_price') {
+            flags.push({
+                severity: 'info',
+                code: 'LARGE_COMPUTE_BUDGET',
+                message: `Instruction ${ix.index} sets a priority fee (${ix.params['microLamports']} microLamports/CU).`,
+                instructionIndex: ix.index,
+            });
+        }
+    }
+    return flags;
+}
+function applyTokenTransferFlags(instructions, intentAddresses) {
+    const flags = [];
+    for (const ix of instructions) {
+        // Rule: UNEXPECTED_TOKEN_TRANSFER
+        // SPL Token transfer/transfer_checked where the destination isn't in the intent's known addresses
+        if (ix.programId === 'TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA' &&
+            (ix.type === 'transfer' || ix.type === 'transfer_checked') &&
+            ix.params) {
+            const destination = ix.params['destination'];
+            if (destination && intentAddresses.size > 0 && !intentAddresses.has(destination)) {
+                flags.push({
+                    severity: 'warning',
+                    code: 'UNEXPECTED_TOKEN_TRANSFER',
+                    message: `Instruction ${ix.index} transfers tokens to ${destination}, which is not part of the requested intent.`,
+                    instructionIndex: ix.index,
+                });
+            }
+        }
+    }
+    return flags;
+}
+//# sourceMappingURL=flags.js.map

package/dist/cjs/verify/flags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flags.js","sourceRoot":"","sources":["../../../src/verify/flags.ts"],"names":[],"mappings":";;AAiBA,4CA0DC;AAED,0DA2BC;AAtGD,+EAA+E;AAC/E,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,kCAAkC,EAAa,wBAAwB;IACvE,6CAA6C,EAAE,YAAY;IAC3D,8CAA8C,EAAE,MAAM;IACtD,6CAA6C,EAAE,iBAAiB;IAChE,6CAA6C,EAAE,OAAO;IACtD,8CAA8C,EAAE,YAAY;IAC5D,6CAA6C,EAAG,WAAW;IAC3D,6CAA6C,EAAG,aAAa;IAC7D,6CAA6C,EAAK,cAAc;IAChE,6CAA6C,EAAK,eAAe;CAClE,CAAC,CAAC;AAEH,SAAgB,gBAAgB,CAC9B,YAAmC,EACnC,QAAgB,EAChB,cAA2B;IAE3B,MAAM,KAAK,GAAe,EAAE,CAAC;IAE7B,kEAAkE;IAClE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC;IACnE,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;QAC9B,IAAI,EAAE,CAAC,SAAS;YAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;QAC9B,wBAAwB;QACxB,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,eAAe,EAAE,CAAC,KAAK,0BAA0B,EAAE,CAAC,SAAS,yCAAyC;gBAC/G,gBAAgB,EAAE,EAAE,CAAC,KAAK;aAC3B,CAAC,CAAC;QACL,CAAC;QAED,6BAA6B;QAC7B,kFAAkF;QAClF,wDAAwD;QACxD,IACE,EAAE,CAAC,SAAS,KAAK,kCAAkC;YACnD,EAAE,CAAC,IAAI,KAAK,UAAU;YACtB,EAAE,CAAC,MAAM,EACT,CAAC;YACD,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAkB,CAAC;YAC5C,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC/D,KAAK,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,eAAe,EAAE,CAAC,KAAK,0CAA0C,EAAE,qBAAqB;oBACjG,gBAAgB,EAAE,EAAE,CAAC,KAAK;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,IACE,EAAE,CAAC,SAAS,KAAK,6CAA6C;YAC9D,EAAE,CAAC,IAAI,KAAK,wBAAwB,EACpC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,eAAe,EAAE,CAAC,KAAK,yBAAyB,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,qBAAqB;gBACxG,gBAAgB,EAAE,EAAE,CAAC,KAAK;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CACrC,YAAmC,EACnC,eAA4B;IAE5B,MAAM,KAAK,GAAe,EAAE,CAAC;IAE7B,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;QAC9B,kCAAkC;QAClC,kGAAkG;QAClG,IACE,EAAE,CAAC,SAAS,KAAK,6CAA6C;YAC9D,CAAC,EAAE,CAAC,IAAI,KAAK,UAAU,IAAI,EAAE,CAAC,IAAI,KAAK,kBAAkB,CAAC;YAC1D,EAAE,CAAC,MAAM,EACT,CAAC;YACD,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAkB,CAAC;YAC9D,IAAI,WAAW,IAAI,eAAe,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjF,KAAK,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,2BAA2B;oBACjC,OAAO,EAAE,eAAe,EAAE,CAAC,KAAK,wBAAwB,WAAW,8CAA8C;oBACjH,gBAAgB,EAAE,EAAE,CAAC,KAAK;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}