@typesol/cli 0.13.0 → 0.14.0

package/CHANGELOG.md

@@ -5,6 +5,20 @@ until 1.0, a minor version may change the language, the IDL layout or error code
 
 ## Unreleased
 
+## 0.14.0 — 2026-10-27
+
+PDAs are derived without the PDA syscalls, so instructions that create, check or search for PDAs use up to a few
+thousand fewer compute units. No language, IDL or error-code changes. Not externally audited (see SECURITY.md).
+
+### Performance
+- PDAs are derived with the `sol_sha256` and `sol_curve_validate_point` syscalls instead of
+  `sol_try_find_program_address` / `sol_create_program_address` (1,500 CU per bump tried): the
+  same addresses, bumps and limits (16 seeds to check, 15 to search, 32 bytes each). `init` with seeds, `Seeds<…>`,
+  `create`, `signer` and `findProgramAddress` all use it. Benchmarks: counter.initialize 3,030 → 1,872 CU,
+  escrow.make 5,974 → 3,638; in the official examples escrow take_offer 14,519 → 7,117 and close_user 1,728 → 586.
+  Binaries grow 0.4–1.2 KB. New tests compare it with @solana/kit's derivation over random seeds, canonical bumps
+  below 255 and on-curve bumps. Needs the curve25519 syscalls (active on mainnet-beta since epoch 637).
+
 ## 0.13.0 — 2026-10-27
 
 Every program in solana-developers/program-examples now ports to TypeSOL: PDA seeds from account fields, remaining

package/README.md

@@ -227,19 +227,20 @@ shows mean compute units per call (generated by `scripts/readme-bench.ts` from t
 <!-- bench:table -->
 | Instruction | TypeSOL | Pinocchio 0.10 | Native Rust | Anchor 1.0.2 |
 | --- | ---: | ---: | ---: | ---: |
-| counter.initialize | **3,030** | 3,186 | 4,601 | 6,573 |
+| counter.initialize | **1,872** | 3,186 | 4,601 | 6,573 |
 | counter.increment | **110** | 113 | 857 | 2,323 |
-| vault.open | **3,044** | 3,185 | 4,613 | 6,627 |
+| vault.open | **1,891** | 3,185 | 4,613 | 6,627 |
 | vault.deposit | **1,314** | 1,377 | 2,832 | 4,355 |
 | vault.withdraw | **315** | 370 | 1,176 | 3,628 |
 | vault.shut | **161** | 167 | 950 | 2,024 |
-| escrow.make | **5,974** | 6,179 | 9,240 | 13,304 |
+| escrow.make | **3,638** | 6,179 | 9,240 | 13,304 |
 | escrow.take | **4,035** | 4,051 | 8,500 | 14,365 |
 | escrow.refund | **2,716** | 2,769 | 5,695 | 8,449 |
-| binary, counter / vault / escrow | 12.8 / 16.1 / 23.5 KB | 19.6 / 22.9 / 29.4 KB | 27.9 / 35.0 / 46.5 KB | 145.2 / 158.9 / 190.7 KB |
+| binary, counter / vault / escrow | 13.2 / 16.5 / 24.0 KB | 19.6 / 22.9 / 29.4 KB | 27.9 / 35.0 / 46.5 KB | 145.2 / 158.9 / 190.7 KB |
 <!-- /bench:table -->
 
-`initialize`, `open` and `make` include the PDA bump search, which costs the same in every implementation. The
+`initialize`, `open` and `make` include the PDA bump search. TypeSOL hashes PDA candidates with the sha256 and
+curve-check syscalls instead of the 1,500-CU PDA syscalls the others call, with the same results. The
 escrow moves SPL tokens through CPIs (`take` makes three). Like Pinocchio, TypeSOL reads accounts in place and builds
 CPI account records only for the accounts a call lists. It uses fewer compute units than Pinocchio on every
 instruction here, while also refusing duplicate writable accounts as Anchor does. Fewer compute
@@ -275,7 +276,7 @@ Details are in [docs/testing.md](docs/testing.md).
 
 ## Status
 
-**TypeSOL is pre-1.0 (0.13).** Releases follow the organization's
+**TypeSOL is pre-1.0 (0.14).** Releases follow the organization's
 [versioning policy](https://github.com/typesol/.github/blob/main/VERSIONING.md); [CHANGELOG.md](CHANGELOG.md) lists every
 change.
 - The compiler, runtime and tooling have been through internal security reviews and are covered by the tests above.

package/dist/compiler/emit/calls.js

@@ -361,7 +361,7 @@ export class CallEmitter extends ExpressionEmitter {
                 const t = this.tmp("pda");
                 const b = this.tmp("bump");
                 this.line(`SolPubkey ${t}; uint8_t ${b};`);
-                this.line(`if (sol_try_find_program_address(${seeds.name}, ${seeds.count}, ${program.c}, &${t}, &${b}) != SUCCESS) TS_FAIL(TS_ERR_SEEDS, "TypeSOL: no program address for these seeds");`);
+                this.line(`if (ts_find_pda(${seeds.name}, ${seeds.count}, ${program.c}, &${t}, &${b}) != SUCCESS) TS_FAIL(TS_ERR_SEEDS, "TypeSOL: no program address for these seeds");`);
                 return { c: `(&${t})`, type: PUBKEY };
             }
             case "metadataAddress": {

package/dist/compiler/emit/function.js

@@ -444,7 +444,7 @@ export class FunctionEmitter extends StatementEmitter {
                 else {
                     bumpDecls.push(`  uint8_t sb_${a.name}; (void)sb_${a.name};`);
                     out.push(`  { SolPubkey pda_${a.name};`);
-                    out.push(`    if (sol_try_find_program_address(${seeds}, ${parts.length}, ${program}, &pda_${a.name}, &sb_${a.name}) != SUCCESS || !ts_key_eq(&pda_${a.name}, &a_${a.name}->key)) TS_FAIL(TS_ERR_SEEDS, "TypeSOL: ${a.name} is not the expected PDA"); }`);
+                    out.push(`    if (ts_find_pda(${seeds}, ${parts.length}, ${program}, &pda_${a.name}, &sb_${a.name}) != SUCCESS || !ts_key_eq(&pda_${a.name}, &a_${a.name}->key)) TS_FAIL(TS_ERR_SEEDS, "TypeSOL: ${a.name} is not the expected PDA"); }`);
                     this.bumps.set(a.name, `sb_${a.name}`);
                 }
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@typesol/cli",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Compile a TypeScript-syntax language directly to Solana SBF programs.",
   "type": "module",
   "license": "MIT",

package/runtime/typesol_rt.h

@@ -305,6 +305,55 @@ static inline __attribute__((always_inline)) uint64_t ts_invoke(TsParams *params
   return sol_invoke_signed(ix, infos, ix->account_len, signers, nsigners);
 }
 
+/*
+ * ---- Program derived addresses ------------------------------------------------
+ * The same addresses sol_create_program_address / sol_try_find_program_address compute — sha256 of the seeds, the
+ * program id and "ProgramDerivedAddress", valid only off the ed25519 curve — from the sha256 and curve-validation
+ * syscalls, which cost a fraction of the 1500 compute units the PDA syscalls charge per attempt. The seed limits are the
+ * syscalls' (at most 16 seeds of at most 32 bytes, the bump included), and so is the result for every input.
+ */
+uint64_t sol_curve_validate_point(uint64_t curve_id, const uint8_t *point, uint8_t *result);
+#define TS_MAX_PDA_SEEDS 16
+
+/* The address of `seeds` (and `bump`, when given) under `program`; false when it lies on the curve (no PDA). */
+static inline bool ts_pda_hash(const SolSignerSeed *seeds, int n, const uint8_t *bump, const SolPubkey *program, SolPubkey *out) {
+  SolBytes parts[TS_MAX_PDA_SEEDS + 2];
+  int k = 0;
+  for (int i = 0; i < n; i++) parts[k++] = (SolBytes){seeds[i].addr, seeds[i].len};
+  if (bump) parts[k++] = (SolBytes){bump, 1};
+  parts[k++] = (SolBytes){program->x, 32};
+  parts[k++] = (SolBytes){(const uint8_t *)"ProgramDerivedAddress", 21};
+  sol_sha256(parts, k, out->x);
+  uint8_t ignored;
+  return sol_curve_validate_point(0 /* CURVE25519_EDWARDS */, out->x, &ignored) != 0; /* 0: a valid curve point */
+}
+
+static inline bool ts_pda_seeds_ok(const SolSignerSeed *seeds, int n, int max) {
+  if (n > max) return false;
+  for (int i = 0; i < n; i++)
+    if (seeds[i].len > 32) return false;
+  return true;
+}
+
+/* sol_create_program_address: the bump is the last of `seeds`. */
+static inline uint64_t ts_create_pda_address(const SolSignerSeed *seeds, int n, const SolPubkey *program, SolPubkey *out) {
+  if (!ts_pda_seeds_ok(seeds, n, TS_MAX_PDA_SEEDS) || !ts_pda_hash(seeds, n, NULL, program, out)) return 1; /* not SUCCESS: the PDA syscalls fail the same inputs */
+  return SUCCESS;
+}
+
+/* sol_try_find_program_address: the canonical (highest) bump. */
+static inline uint64_t ts_find_pda(const SolSignerSeed *seeds, int n, const SolPubkey *program, SolPubkey *out, uint8_t *bump_out) {
+  if (!ts_pda_seeds_ok(seeds, n, TS_MAX_PDA_SEEDS - 1)) return 1; /* not SUCCESS: the PDA syscalls fail the same inputs */
+  for (int b = 255; b >= 0; b--) {
+    uint8_t bump = (uint8_t)b;
+    if (ts_pda_hash(seeds, n, &bump, program, out)) {
+      *bump_out = bump;
+      return SUCCESS;
+    }
+  }
+  return 1; /* not SUCCESS: the PDA syscalls fail the same inputs */
+}
+
 /* ---- Account checks ------------------------------------------------------ */
 /* Copy between two places of the same type: distinct, or the very same place (then nothing to do). */
 static inline void ts_copy(void *dst, const void *src, uint64_t n) {
@@ -461,7 +510,7 @@ static inline uint64_t ts_check_program_data(const TsAccount *a, const SolPubkey
   SolSignerSeed seed = {(const uint8_t *)program_id, 32};
   SolPubkey expected;
   uint8_t bump;
-  if (sol_try_find_program_address(&seed, 1, &TS_BPF_UPGRADEABLE_LOADER_ID, &expected, &bump) != SUCCESS || !ts_key_eq(&expected, &a->key))
+  if (ts_find_pda(&seed, 1, &TS_BPF_UPGRADEABLE_LOADER_ID, &expected, &bump) != SUCCESS || !ts_key_eq(&expected, &a->key))
     TS_FAIL(TS_ERR_ADDRESS, "TypeSOL: not this program's ProgramData account");
   return SUCCESS;
 }
@@ -471,7 +520,7 @@ static const uint8_t TS_EVENT_IX_TAG[8] = {0xe4, 0x45, 0xa5, 0x2e, 0x51, 0xcb, 0
 static inline uint64_t ts_check_event_authority(const TsAccount *a, const SolPubkey *program_id, uint8_t *bump) {
   SolSignerSeed seed = {(const uint8_t *)"__event_authority", 17};
   SolPubkey expected;
-  if (sol_try_find_program_address(&seed, 1, program_id, &expected, bump) != SUCCESS || !ts_key_eq(&expected, &a->key))
+  if (ts_find_pda(&seed, 1, program_id, &expected, bump) != SUCCESS || !ts_key_eq(&expected, &a->key))
     TS_FAIL(TS_ERR_SEEDS, "TypeSOL: not this program's event authority");
   return SUCCESS;
 }
@@ -510,7 +559,7 @@ static inline uint64_t ts_init_zeroed(TsAccount *a, const SolPubkey *program_id,
 static inline uint64_t ts_require_pda(const TsAccount *a, const SolSignerSeed *seeds, int n,
                                       const SolPubkey *program_id) {
   SolPubkey derived;
-  if (sol_create_program_address(seeds, n, program_id, &derived) != SUCCESS || !ts_key_eq(&derived, &a->key))
+  if (ts_create_pda_address(seeds, n, program_id, &derived) != SUCCESS || !ts_key_eq(&derived, &a->key))
     TS_FAIL(TS_ERR_SEEDS, "TypeSOL: PDA seeds do not match account");
   return SUCCESS;
 }
@@ -536,7 +585,7 @@ static inline uint64_t ts_create_pda(TsParams *params, TsAccount *payer, TsAccou
                                      uint8_t *bump_out) {
   SolPubkey derived;
   uint8_t bump;
-  if (sol_try_find_program_address(seeds, n, params->program_id, &derived, &bump) != SUCCESS ||
+  if (ts_find_pda(seeds, n, params->program_id, &derived, &bump) != SUCCESS ||
       !ts_key_eq(&derived, &acct->key))
     TS_FAIL(TS_ERR_SEEDS, "TypeSOL: PDA seeds do not match account");
   if (acct->data_len != 0 || !ts_key_eq(&acct->owner, &TS_SYSTEM_PROGRAM_ID))
@@ -627,7 +676,7 @@ static inline uint64_t ts_create_pda_if_needed(TsParams *params, TsAccount *paye
   if (ts_key_eq(&acct->owner, params->program_id)) {
     SolPubkey derived;
     uint8_t bump;
-    if (sol_try_find_program_address(seeds, n, params->program_id, &derived, &bump) != SUCCESS ||
+    if (ts_find_pda(seeds, n, params->program_id, &derived, &bump) != SUCCESS ||
         !ts_key_eq(&derived, &acct->key))
       TS_FAIL(TS_ERR_SEEDS, "TypeSOL: PDA seeds do not match account");
     if (acct->data_len < space) TS_FAIL(TS_ERR_ACCOUNT_TOO_SMALL, "TypeSOL: account data too small");
@@ -1105,7 +1154,7 @@ static const SolPubkey TS_MPL_METADATA_ID = {{11,112,101,177,227,209,124,69,56,1
 static inline uint64_t ts_ata_address(const SolPubkey *owner, const SolPubkey *mint, const SolPubkey *token_program, SolPubkey *out) {
   SolSignerSeed seeds[3] = {{(const uint8_t *)owner, 32}, {(const uint8_t *)token_program, 32}, {(const uint8_t *)mint, 32}};
   uint8_t bump;
-  if (sol_try_find_program_address(seeds, 3, &TS_ATA_PROGRAM_ID, out, &bump) != SUCCESS)
+  if (ts_find_pda(seeds, 3, &TS_ATA_PROGRAM_ID, out, &bump) != SUCCESS)
     TS_FAIL(TS_ERR_SEEDS, "TypeSOL: cannot derive the associated token address");
   return SUCCESS;
 }
@@ -1155,7 +1204,7 @@ static inline uint64_t ts_t22_init_metadata(TsParams *params, const TsAccount *p
 static inline uint64_t ts_metadata_address(const SolPubkey *mint, SolPubkey *out) {
   SolSignerSeed seeds[3] = {{(const uint8_t *)"metadata", 8}, {(const uint8_t *)&TS_MPL_METADATA_ID, 32}, {(const uint8_t *)mint, 32}};
   uint8_t bump;
-  if (sol_try_find_program_address(seeds, 3, &TS_MPL_METADATA_ID, out, &bump) != SUCCESS)
+  if (ts_find_pda(seeds, 3, &TS_MPL_METADATA_ID, out, &bump) != SUCCESS)
     TS_FAIL(TS_ERR_SEEDS, "TypeSOL: cannot derive the metadata address");
   return SUCCESS;
 }
@@ -1225,7 +1274,7 @@ static inline uint64_t ts_update_extra_metas(TsParams *params, TsAccount *payer,
   SolSignerSeed seeds[2] = {{(const uint8_t *)"extra-account-metas", 19}, {(const uint8_t *)mint, 32}};
   SolPubkey pda;
   uint8_t bump;
-  if (sol_try_find_program_address(seeds, 2, params->program_id, &pda, &bump) != SUCCESS || !ts_key_eq(&pda, &acct->key))
+  if (ts_find_pda(seeds, 2, params->program_id, &pda, &bump) != SUCCESS || !ts_key_eq(&pda, &acct->key))
     TS_FAIL(TS_ERR_SEEDS, "TypeSOL: not the mint's extra-account-metas PDA");
   if (!ts_key_eq(&acct->owner, params->program_id)) TS_FAIL(TS_ERR_WRONG_OWNER, "TypeSOL: the extra-account-metas account is not this program's");
   if (acct->data_len < 16 || ts_ld64(acct->data) != ts_ld64(TS_TRANSFER_HOOK_EXECUTE_DISC))