nos-rescue 0.1.0

package/dist/lib/rescue.js

@@ -0,0 +1,293 @@
+import { findAssociatedTokenPda } from '@solana-program/token';
+import { NOS_DECIMALS, NOS_MINT, TOKEN_PROGRAM } from './constants.js';
+import { buildCloseStakeInstruction, buildUnstakePlan, buildWithdrawInstruction, fetchStakeInfo, } from './stake.js';
+import { buildSweepInstructions } from './sweep.js';
+import { createWaker, watchWalletActivity } from './watch.js';
+/** below this the fee payer cannot cover the two signatures of a rescue transaction reliably — pause and alert */
+const FEE_PAYER_PAUSE_LAMPORTS = 20000n;
+/** below 0.01 SOL start nagging every pass (an ATA creation alone costs ~0.002 SOL in rent) */
+const FEE_PAYER_WARN_LAMPORTS = 10000000n;
+export function formatNos(amount) {
+    const d = 10n ** BigInt(NOS_DECIMALS);
+    return `${amount / d}.${(amount % d).toString().padStart(NOS_DECIMALS, '0')} NOS`;
+}
+export function formatSol(lamports) {
+    return `${Number(lamports) / 1e9} SOL`;
+}
+/** Derive (and if needed create, rent paid by the rescue payer) the safe wallet's NOS ATA. */
+export async function ensureSafeNosAta(ctx) {
+    const mint = NOS_MINT[ctx.network];
+    const [ata] = await findAssociatedTokenPda({
+        mint,
+        owner: ctx.safe,
+        tokenProgram: TOKEN_PROGRAM,
+    });
+    const createIx = await ctx.client.solana.getCreateATAInstructionIfNeeded(ata, mint, ctx.safe, ctx.payer);
+    if (createIx) {
+        ctx.log(`Creating safe wallet NOS token account ${ata} (rent paid by fee payer)...`);
+        await send(ctx, [createIx]);
+    }
+    return ata;
+}
+async function send(ctx, instructions) {
+    if (ctx.dryRun)
+        return simulateOnly(ctx, instructions);
+    const signature = await ctx.client.solana.buildSignAndSend(instructions, {
+        feePayer: ctx.payer,
+        commitment: 'confirmed',
+    });
+    return signature;
+}
+/**
+ * Dry-run path: build and sign the exact transaction that would be sent, but
+ * run it through simulateTransaction instead of broadcasting. Throws (like a
+ * failed send) when the simulation errors, so callers report it identically.
+ */
+async function simulateOnly(ctx, instructions) {
+    const message = await ctx.client.solana.buildTransaction(instructions, { feePayer: ctx.payer });
+    const signed = await ctx.client.solana.signTransaction(message);
+    const encoded = ctx.client.solana.serializeTransaction(signed);
+    const sim = await ctx.client.solana.rpc
+        .simulateTransaction(encoded, { encoding: 'base64', sigVerify: true })
+        .send();
+    if (sim.value.err) {
+        const logs = (sim.value.logs ?? []).slice(-4).join(' | ');
+        throw new Error(`dry-run simulation failed: ${JSON.stringify(sim.value.err)}${logs ? ` — ${logs}` : ''}`);
+    }
+    return `dry-run: simulated OK (${sim.value.unitsConsumed ?? 0n} CU), nothing sent`;
+}
+/** Sweep all SOL + SPL balances out of the hacked wallet. Returns number of assets moved. */
+export async function sweepOnce(ctx) {
+    const items = await buildSweepInstructions(ctx.client, {
+        hacked: ctx.hacked,
+        safe: ctx.safe,
+        payer: ctx.payer,
+    });
+    for (const item of items) {
+        try {
+            const sig = await send(ctx, item.instructions);
+            ctx.log(`Swept ${item.label} → ${ctx.safe} (${sig})`);
+        }
+        catch (err) {
+            ctx.log(`Sweep of ${item.label} failed: ${errMsg(err)}`);
+        }
+    }
+    return items.length;
+}
+/** Claim rewards, close the rewards account and unstake — atomically. */
+export async function unstakeNow(ctx, stake, safeNosAta) {
+    const plan = await buildUnstakePlan(ctx.client, {
+        stake,
+        authority: ctx.hacked,
+        safeNosAta,
+    });
+    if (plan.reward) {
+        ctx.log(`Reward account found with ~${formatNos(plan.pendingRewards)} pending; claiming to safe wallet, closing it, then unstaking (one transaction).`);
+    }
+    else {
+        ctx.log('No reward account; sending unstake.');
+    }
+    try {
+        const sig = await send(ctx, plan.instructions);
+        ctx.log(`Unstake transaction confirmed: ${sig}`);
+    }
+    catch (err) {
+        if (plan.instructions.length === plan.fallbackInstructions.length)
+            throw err;
+        ctx.log(`Unstake with rewards claim failed (${errMsg(err)}); retrying without claim...`);
+        const sig = await send(ctx, plan.fallbackInstructions);
+        ctx.log(`Unstake transaction confirmed (rewards claim skipped): ${sig}`);
+    }
+}
+/**
+ * Withdraw all currently-released NOS from the (unstaked) vault straight to the
+ * safe wallet, and — if the stake is fully vested — close the stake account to
+ * release its rent (which the sweep then collects). Safe to call any time; it
+ * fetches fresh stake state and no-ops when there's nothing to do. This is the
+ * single path shared by the loop, the CLI `withdraw` command, and the web button.
+ */
+export async function withdrawReleased(ctx, safeNosAta, opts = {}) {
+    const minWithdraw = opts.minWithdraw ?? 0n;
+    const stake = await fetchStakeInfo(ctx.client, ctx.hacked.address);
+    if (!stake)
+        return { withdrawn: 0n, closed: false, stake: null };
+    if (stake.timeUnstake === 0n) {
+        ctx.log('Stake is still staked (not unstaked); nothing to withdraw yet.');
+        return { withdrawn: 0n, closed: false, stake };
+    }
+    const now = BigInt(Math.floor(Date.now() / 1000));
+    const fullyVested = stake.fullyVestedAt !== null && now > stake.fullyVestedAt;
+    let withdrawn = 0n;
+    if (stake.withdrawable > 0n && (fullyVested || stake.withdrawable >= minWithdraw)) {
+        const ix = buildWithdrawInstruction({ stake, authority: ctx.hacked, safeNosAta });
+        const sig = await send(ctx, [ix]);
+        withdrawn = stake.withdrawable;
+        ctx.log(`Withdrew ~${formatNos(withdrawn)} to safe wallet (${sig})`);
+    }
+    let closed = false;
+    if (fullyVested) {
+        // The vault is drained after the withdraw above; close to release the rent.
+        try {
+            const ix = buildCloseStakeInstruction({ stake, authority: ctx.hacked, safeNosAta });
+            const sig = await send(ctx, [ix]);
+            ctx.log(`Stake account closed, rent released (${sig}). Staked NOS fully rescued.`);
+            closed = true;
+        }
+        catch (err) {
+            ctx.log(`Close stake failed (will retry next pass): ${errMsg(err)}`);
+        }
+    }
+    return { withdrawn, closed, stake };
+}
+function errMsg(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+function sleep(ms, signal) {
+    return new Promise((resolve) => {
+        const t = setTimeout(done, ms);
+        function done() {
+            signal?.removeEventListener('abort', done);
+            clearTimeout(t);
+            resolve();
+        }
+        signal?.addEventListener('abort', done);
+    });
+}
+/**
+ * The full rescue daemon:
+ *   1. sweep whatever is in the hacked wallet right now
+ *   2. unstake immediately (claim + close rewards + unstake, atomic)
+ *   3. loop: keep sweeping incoming SOL/tokens (the defense — this starves the
+ *      attacker of the SOL they'd need to move anything), and, if auto-withdraw
+ *      is on, withdraw released NOS to the safe wallet on the configured cadence
+ *      (not every slice — a slice accrues every second)
+ *   4. re-unstake if the attacker restakes to grief the vest
+ *   5. at full vest: withdraw the remainder, close the stake account, sweep the rent
+ *
+ * Sweeping is event-driven: a websocket watcher on the wallet and its token
+ * accounts wakes the loop the moment value lands (sub-second reaction); the
+ * sweepInterval polling is the backup when the websocket is down.
+ *
+ * Runs until aborted; after the stake is fully rescued it keeps sweeping.
+ */
+export async function runRescue(ctx, options = {}) {
+    const sweepInterval = (options.sweepIntervalSeconds ?? 15) * 1000;
+    const autoWithdraw = options.autoWithdraw ?? true;
+    const withdrawIntervalMs = (options.withdrawIntervalSeconds ?? 3600) * 1000;
+    const minWithdraw = options.minWithdraw ?? 0n;
+    const signal = options.signal;
+    if (ctx.dryRun) {
+        ctx.log('DRY RUN: every transaction is simulated instead of sent; one pass, then exit.');
+    }
+    ctx.log(`Compromised wallet: ${ctx.hacked.address}`);
+    ctx.log(`Safe wallet:        ${ctx.safe}`);
+    ctx.log(`Fee payer:          ${ctx.payer.address}`);
+    ctx.log(autoWithdraw
+        ? `Auto-withdraw:      every ${withdrawIntervalMs === 0 ? 'full-vest only' : formatDuration(withdrawIntervalMs / 1000)} (plus at full vest)`
+        : 'Auto-withdraw:      off (manual withdraw only)');
+    const payerBalance = await ctx.client.solana.getBalance(ctx.payer.address);
+    ctx.log(`Fee payer balance:  ${formatSol(payerBalance)}`);
+    const safeNosAta = await ensureSafeNosAta(ctx);
+    // Event-driven defense: wake the loop the instant the websocket sees value
+    // land in the wallet, instead of waiting out the polling interval.
+    const waker = createWaker();
+    let wokenByEvent = false;
+    if (!ctx.dryRun) {
+        watchWalletActivity({
+            client: ctx.client,
+            owner: ctx.hacked.address,
+            log: ctx.log,
+            signal,
+            onActivity: (source) => {
+                ctx.log(`Websocket: incoming value detected (${source}); sweeping immediately`);
+                wokenByEvent = true;
+                waker.wake();
+            },
+        });
+    }
+    let stakeClosed = false;
+    let lastWithdrawMs = 0;
+    let payerPaused = false;
+    async function rescuePass(eventPass) {
+        // The fee payer is the lifeline: with it dry, every transaction fails.
+        // Check every pass; pause sends and keep alerting until it is funded again.
+        const payerLamports = await ctx.client.solana.getBalance(ctx.payer.address);
+        if (payerLamports < FEE_PAYER_PAUSE_LAMPORTS) {
+            ctx.log(`ALERT: fee payer ${ctx.payer.address} is down to ${formatSol(payerLamports)} — it cannot pay for a transaction. ` +
+                'Rescue is PAUSED (no sweeps or withdrawals) until you fund it.');
+            payerPaused = true;
+            return;
+        }
+        if (payerPaused) {
+            payerPaused = false;
+            ctx.log(`Fee payer funded again (${formatSol(payerLamports)}); resuming rescue.`);
+        }
+        else if (payerLamports < FEE_PAYER_WARN_LAMPORTS) {
+            ctx.log(`WARNING: fee payer balance is low (${formatSol(payerLamports)}); top it up — every rescue transaction depends on it.`);
+        }
+        // Sweep first — this is the race against the attacker.
+        let moved = await sweepOnce(ctx);
+        if (eventPass && moved === 0) {
+            // The notification fires at 'processed'; the balances we sweep are read
+            // at 'confirmed' and can lag it by a slot or two. Retry briefly.
+            for (let i = 0; i < 3 && moved === 0 && !signal?.aborted; i++) {
+                await sleep(750, signal);
+                moved = await sweepOnce(ctx);
+            }
+        }
+        if (!stakeClosed) {
+            const stake = await fetchStakeInfo(ctx.client, ctx.hacked.address);
+            if (!stake) {
+                ctx.log('No stake account (closed or never existed); continuing in sweep-only mode.');
+                stakeClosed = true;
+            }
+            else if (stake.timeUnstake === 0n) {
+                // still staked — either first run or the attacker restaked to grief us
+                await unstakeNow(ctx, stake, safeNosAta);
+            }
+            else {
+                const now = BigInt(Math.floor(Date.now() / 1000));
+                const fullyVested = stake.fullyVestedAt !== null && now > stake.fullyVestedAt;
+                const nowMs = Date.now();
+                const cadenceDue = withdrawIntervalMs > 0 && nowMs - lastWithdrawMs >= withdrawIntervalMs;
+                if (autoWithdraw && (fullyVested || cadenceDue)) {
+                    const res = await withdrawReleased(ctx, safeNosAta, { minWithdraw });
+                    lastWithdrawMs = nowMs;
+                    if (res.closed)
+                        stakeClosed = true;
+                }
+                else if (stake.fullyVestedAt !== null) {
+                    const remaining = Number(stake.fullyVestedAt - now);
+                    ctx.log(`Vault: ${formatNos(stake.vaultBalance)}, withdrawable now: ${formatNos(stake.withdrawable)}, fully vested in ${formatDuration(remaining)}`);
+                }
+            }
+        }
+    }
+    while (!signal?.aborted) {
+        const eventPass = wokenByEvent;
+        wokenByEvent = false;
+        try {
+            await rescuePass(eventPass);
+        }
+        catch (err) {
+            ctx.log(`Loop error: ${errMsg(err)} (retrying in ${sweepInterval / 1000}s)`);
+        }
+        if (ctx.dryRun) {
+            ctx.log('Dry run complete — everything above was simulated, nothing was sent.');
+            return;
+        }
+        await waker.wait(sweepInterval, signal);
+    }
+}
+export function formatDuration(seconds) {
+    if (seconds <= 0)
+        return '0s';
+    const d = Math.floor(seconds / 86400);
+    const h = Math.floor((seconds % 86400) / 3600);
+    const m = Math.floor((seconds % 3600) / 60);
+    const s = Math.floor(seconds % 60);
+    return [d && `${d}d`, h && `${h}h`, m && `${m}m`, (s || (!d && !h && !m)) && `${s}s`]
+        .filter(Boolean)
+        .join(' ');
+}
+//# sourceMappingURL=rescue.js.map

package/dist/lib/rescue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rescue.js","sourceRoot":"","sources":["../../src/lib/rescue.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,wBAAwB,EACxB,cAAc,GAEf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE9D,kHAAkH;AAClH,MAAM,wBAAwB,GAAG,MAAO,CAAC;AACzC,+FAA+F;AAC/F,MAAM,uBAAuB,GAAG,SAAW,CAAC;AAkD5C,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,MAAM,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC;IACtC,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC;AACzC,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAkB;IACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,sBAAsB,CAAC;QACzC,IAAI;QACJ,KAAK,EAAE,GAAG,CAAC,IAAI;QACf,YAAY,EAAE,aAAa;KAC5B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,+BAA+B,CACtE,GAAG,EACH,IAAI,EACJ,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,KAAK,CACV,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,CAAC,0CAA0C,GAAG,8BAA8B,CAAC,CAAC;QACrF,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,GAAkB,EAAE,YAA2B;IACjE,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE;QACvE,QAAQ,EAAE,GAAG,CAAC,KAAK;QACnB,UAAU,EAAE,WAAW;KACxB,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAAC,GAAkB,EAAE,YAA2B;IACzE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAiC,CAAC;IAC/F,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;SACpC,mBAAmB,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SACrE,IAAI,EAAE,CAAC;IACV,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,0BAA0B,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,oBAAoB,CAAC;AACrF,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAkB;IAChD,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,MAAM,EAAE;QACrD,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC,CAAC;IACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YAC/C,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,KAAK,MAAM,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,KAAK,YAAY,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAkB,EAAE,KAAgB,EAAE,UAAmB;IACxF,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE;QAC9C,KAAK;QACL,SAAS,EAAE,GAAG,CAAC,MAAM;QACrB,UAAU;KACX,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,GAAG,CAAC,8BAA8B,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,kFAAkF,CAAC,CAAC;IAC1J,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,GAAG,CAAC,GAAG,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,IAAI,CAAC,oBAAoB,CAAC,MAAM;YAAE,MAAM,GAAG,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,sCAAsC,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QACzF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACvD,GAAG,CAAC,GAAG,CAAC,0DAA0D,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkB,EAClB,UAAmB,EACnB,OAAiC,EAAE;IAEnC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACjE,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QAC7B,GAAG,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;QAC1E,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,aAAa,CAAC;IAE9E,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,KAAK,CAAC,YAAY,GAAG,EAAE,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,YAAY,IAAI,WAAW,CAAC,EAAE,CAAC;QAClF,MAAM,EAAE,GAAG,wBAAwB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAClF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAClC,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC;QAC/B,GAAG,CAAC,GAAG,CAAC,aAAa,SAAS,CAAC,SAAS,CAAC,oBAAoB,GAAG,GAAG,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,WAAW,EAAE,CAAC;QAChB,4EAA4E;QAC5E,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,0BAA0B,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YACpF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAClC,GAAG,CAAC,GAAG,CAAC,wCAAwC,GAAG,8BAA8B,CAAC,CAAC;YACnF,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,8CAA8C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,MAAM,CAAC,GAAY;IAC1B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/B,SAAS,IAAI;YACX,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC3C,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAkB,EAAE,UAAyB,EAAE;IAC7E,MAAM,aAAa,GAAG,CAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAClE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;IAClD,MAAM,kBAAkB,GAAG,CAAC,OAAO,CAAC,uBAAuB,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAE9B,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,GAAG,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;IAC3F,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,uBAAuB,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACrD,GAAG,CAAC,GAAG,CAAC,uBAAuB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,GAAG,CAAC,GAAG,CAAC,uBAAuB,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACpD,GAAG,CAAC,GAAG,CACL,YAAY;QACV,CAAC,CAAC,6BAA6B,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC,kBAAkB,GAAG,IAAI,CAAC,sBAAsB;QAC5I,CAAC,CAAC,gDAAgD,CACrD,CAAC;IAEF,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3E,GAAG,CAAC,GAAG,CAAC,uBAAuB,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAE1D,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE/C,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,mBAAmB,CAAC;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO;YACzB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM;YACN,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE;gBACrB,GAAG,CAAC,GAAG,CAAC,uCAAuC,MAAM,yBAAyB,CAAC,CAAC;gBAChF,YAAY,GAAG,IAAI,CAAC;gBACpB,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,KAAK,UAAU,UAAU,CAAC,SAAkB;QAC1C,uEAAuE;QACvE,4EAA4E;QAC5E,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5E,IAAI,aAAa,GAAG,wBAAwB,EAAE,CAAC;YAC7C,GAAG,CAAC,GAAG,CACL,oBAAoB,GAAG,CAAC,KAAK,CAAC,OAAO,eAAe,SAAS,CAAC,aAAa,CAAC,sCAAsC;gBAChH,gEAAgE,CACnE,CAAC;YACF,WAAW,GAAG,IAAI,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YAChB,WAAW,GAAG,KAAK,CAAC;YACpB,GAAG,CAAC,GAAG,CAAC,2BAA2B,SAAS,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;QACpF,CAAC;aAAM,IAAI,aAAa,GAAG,uBAAuB,EAAE,CAAC;YACnD,GAAG,CAAC,GAAG,CACL,sCAAsC,SAAS,CAAC,aAAa,CAAC,wDAAwD,CACvH,CAAC;QACJ,CAAC;QAED,uDAAuD;QACvD,IAAI,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,SAAS,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAC7B,wEAAwE;YACxE,iEAAiE;YACjE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC9D,MAAM,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACzB,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;gBACtF,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;gBACpC,uEAAuE;gBACvE,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;gBAClD,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,aAAa,CAAC;gBAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzB,MAAM,UAAU,GAAG,kBAAkB,GAAG,CAAC,IAAI,KAAK,GAAG,cAAc,IAAI,kBAAkB,CAAC;gBAE1F,IAAI,YAAY,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC,EAAE,CAAC;oBAChD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;oBACrE,cAAc,GAAG,KAAK,CAAC;oBACvB,IAAI,GAAG,CAAC,MAAM;wBAAE,WAAW,GAAG,IAAI,CAAC;gBACrC,CAAC;qBAAM,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;oBACxC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CACL,UAAU,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,uBAAuB,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,qBAAqB,cAAc,CAAC,SAAS,CAAC,EAAE,CAC5I,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,YAAY,CAAC;QAC/B,YAAY,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,GAAG,CAAC,iBAAiB,aAAa,GAAG,IAAI,IAAI,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC;SAClF,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/lib/rewards.d.ts

@@ -0,0 +1,48 @@
+import { type Address, type Instruction, type TransactionSigner } from '@solana/kit';
+import type { NosanaClient } from '@nosana/kit';
+export interface RewardAccountData {
+    address: Address;
+    authority: Address;
+    reflection: bigint;
+    xnos: bigint;
+}
+export interface ReflectionAccountData {
+    address: Address;
+    rate: bigint;
+    totalReflection: bigint;
+    totalXnos: bigint;
+    vault: Address;
+}
+/** PDA of a user's reward account: ["reward", authority] */
+export declare function rewardPda(authority: Address): Promise<Address>;
+/** PDA of the global reflection account: ["reflection"] */
+export declare function reflectionPda(): Promise<Address>;
+/** Fetch and decode the user's RewardAccount, or null if it doesn't exist (already closed). */
+export declare function fetchRewardAccount(client: NosanaClient, authority: Address): Promise<RewardAccountData | null>;
+/** Fetch and decode the global ReflectionAccount. */
+export declare function fetchReflectionAccount(client: NosanaClient): Promise<ReflectionAccountData>;
+/** Pending (claimable) rewards in NOS base units: reflection / rate - xnos */
+export declare function pendingRewards(reward: RewardAccountData, reflection: ReflectionAccountData): bigint;
+/**
+ * nosana-rewards `claim`: pays out pending rewards from the rewards vault to `user`.
+ * `user` is any NOS token account — we point it at the SAFE wallet's ATA so
+ * rewards never touch the compromised wallet.
+ * Only valid while the stake is NOT unstaked (claim before unstaking).
+ */
+export declare function buildClaimRewardsInstruction(params: {
+    user: Address;
+    rewardsVault: Address;
+    reflection: Address;
+    reward: Address;
+    stake: Address;
+    authority: TransactionSigner;
+}): Instruction;
+/**
+ * nosana-rewards `close`: closes the user's reward account (required before `unstake`).
+ * Rent is returned to the (compromised) authority — the sweep loop picks it up.
+ */
+export declare function buildCloseRewardsInstruction(params: {
+    reflection: Address;
+    reward: Address;
+    authority: TransactionSigner;
+}): Instruction;

package/dist/lib/rewards.js

@@ -0,0 +1,105 @@
+import { AccountRole, getAddressEncoder, getAddressDecoder, getProgramDerivedAddress, getBase64Encoder, } from '@solana/kit';
+import { ANCHOR_DISCRIMINATORS, REWARDS_PROGRAM, TOKEN_PROGRAM } from './constants.js';
+const addressEncoder = getAddressEncoder();
+const addressDecoder = getAddressDecoder();
+/** PDA of a user's reward account: ["reward", authority] */
+export async function rewardPda(authority) {
+    const [addr] = await getProgramDerivedAddress({
+        programAddress: REWARDS_PROGRAM,
+        seeds: ['reward', addressEncoder.encode(authority)],
+    });
+    return addr;
+}
+/** PDA of the global reflection account: ["reflection"] */
+export async function reflectionPda() {
+    const [addr] = await getProgramDerivedAddress({
+        programAddress: REWARDS_PROGRAM,
+        seeds: ['reflection'],
+    });
+    return addr;
+}
+function readU128LE(bytes, offset) {
+    let v = 0n;
+    for (let i = 15; i >= 0; i--)
+        v = (v << 8n) | BigInt(bytes[offset + i]);
+    return v;
+}
+async function fetchRawAccount(client, addr) {
+    const res = await client.solana.rpc.getAccountInfo(addr, { encoding: 'base64' }).send();
+    if (!res.value)
+        return null;
+    return new Uint8Array(getBase64Encoder().encode(res.value.data[0]));
+}
+/** Fetch and decode the user's RewardAccount, or null if it doesn't exist (already closed). */
+export async function fetchRewardAccount(client, authority) {
+    const addr = await rewardPda(authority);
+    const data = await fetchRawAccount(client, addr);
+    if (!data)
+        return null;
+    // discriminator(8) | authority(32) | bump(1) | reflection(u128) | xnos(u128)
+    return {
+        address: addr,
+        authority: addressDecoder.decode(data.subarray(8, 40)),
+        reflection: readU128LE(data, 41),
+        xnos: readU128LE(data, 57),
+    };
+}
+/** Fetch and decode the global ReflectionAccount. */
+export async function fetchReflectionAccount(client) {
+    const addr = await reflectionPda();
+    const data = await fetchRawAccount(client, addr);
+    if (!data)
+        throw new Error('Rewards reflection account not found on this network');
+    // discriminator(8) | rate(u128) | totalReflection(u128) | totalXnos(u128) | vault(32) | vaultBump(1)
+    return {
+        address: addr,
+        rate: readU128LE(data, 8),
+        totalReflection: readU128LE(data, 24),
+        totalXnos: readU128LE(data, 40),
+        vault: addressDecoder.decode(data.subarray(56, 88)),
+    };
+}
+/** Pending (claimable) rewards in NOS base units: reflection / rate - xnos */
+export function pendingRewards(reward, reflection) {
+    const amount = reward.reflection / reflection.rate - reward.xnos;
+    return amount > 0n ? amount : 0n;
+}
+/**
+ * nosana-rewards `claim`: pays out pending rewards from the rewards vault to `user`.
+ * `user` is any NOS token account — we point it at the SAFE wallet's ATA so
+ * rewards never touch the compromised wallet.
+ * Only valid while the stake is NOT unstaked (claim before unstaking).
+ */
+export function buildClaimRewardsInstruction(params) {
+    const accounts = [
+        { address: params.user, role: AccountRole.WRITABLE },
+        { address: params.rewardsVault, role: AccountRole.WRITABLE },
+        { address: params.reflection, role: AccountRole.WRITABLE },
+        { address: params.reward, role: AccountRole.WRITABLE },
+        { address: params.stake, role: AccountRole.READONLY },
+        { address: params.authority.address, role: AccountRole.WRITABLE_SIGNER, signer: params.authority },
+        { address: TOKEN_PROGRAM, role: AccountRole.READONLY },
+    ];
+    return {
+        programAddress: REWARDS_PROGRAM,
+        accounts,
+        data: ANCHOR_DISCRIMINATORS.claim,
+    };
+}
+/**
+ * nosana-rewards `close`: closes the user's reward account (required before `unstake`).
+ * Rent is returned to the (compromised) authority — the sweep loop picks it up.
+ */
+export function buildCloseRewardsInstruction(params) {
+    const accounts = [
+        { address: params.reflection, role: AccountRole.WRITABLE },
+        { address: params.reward, role: AccountRole.WRITABLE },
+        { address: params.authority.address, role: AccountRole.WRITABLE_SIGNER, signer: params.authority },
+    ];
+    return {
+        programAddress: REWARDS_PROGRAM,
+        accounts,
+        data: ANCHOR_DISCRIMINATORS.close,
+    };
+}
+//# sourceMappingURL=rewards.js.map

package/dist/lib/rewards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rewards.js","sourceRoot":"","sources":["../../src/lib/rewards.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACxB,gBAAgB,GAMjB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEvF,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;AAC3C,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;AAiB3C,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,SAAkB;IAChD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,wBAAwB,CAAC;QAC5C,cAAc,EAAE,eAAe;QAC/B,KAAK,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;KACpD,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,wBAAwB,CAAC;QAC5C,cAAc,EAAE,eAAe;QAC/B,KAAK,EAAE,CAAC,YAAY,CAAC;KACtB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB,EAAE,MAAc;IACnD,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAoB,EAAE,IAAa;IAChE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxF,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,SAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,6EAA6E;IAC7E,OAAO;QACL,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtD,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAoB;IAC/D,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACnF,qGAAqG;IACrG,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,eAAe,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,MAAyB,EAAE,UAAiC;IACzF,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACjE,OAAO,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAO5C;IACC,MAAM,QAAQ,GAAwC;QACpD,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;QACpD,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;QAC5D,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;QAC1D,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;QACtD,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;QACrD,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE;QAClG,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;KACvD,CAAC;IACF,OAAO;QACL,cAAc,EAAE,eAAe;QAC/B,QAAQ;QACR,IAAI,EAAE,qBAAqB,CAAC,KAAK;KAClC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAI5C;IACC,MAAM,QAAQ,GAAwC;QACpD,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;QAC1D,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;QACtD,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE;KACnG,CAAC;IACF,OAAO;QACL,cAAc,EAAE,eAAe;QAC/B,QAAQ;QACR,IAAI,EAAE,qBAAqB,CAAC,KAAK;KAClC,CAAC;AACJ,CAAC"}

package/dist/lib/stake.d.ts

@@ -0,0 +1,61 @@
+import type { Address, Instruction, TransactionSigner } from '@solana/kit';
+import { type NosanaClient } from '@nosana/kit';
+import { type RewardAccountData } from './rewards.js';
+export interface StakeInfo {
+    address: Address;
+    authority: Address;
+    /** total staked NOS in base units */
+    amount: bigint;
+    /** unstake release period in seconds */
+    duration: bigint;
+    /** unix timestamp of unstake, 0n when still staked */
+    timeUnstake: bigint;
+    vault: Address;
+    /** NOS currently in the stake vault (base units) */
+    vaultBalance: bigint;
+    /** NOS withdrawable right now (base units) */
+    withdrawable: bigint;
+    /** unix timestamp when the full amount is released (null while staked) */
+    fullyVestedAt: bigint | null;
+}
+/**
+ * Port of StakeAccount::withdraw from nosana-staking state.rs.
+ * Linear release of `amount` over `duration` starting at `timeUnstake`,
+ * minus what was already withdrawn (amount - vaultBalance).
+ */
+export declare function withdrawableAmount(amount: bigint, duration: bigint, timeUnstake: bigint, vaultBalance: bigint, now: bigint): bigint;
+/** Fetch the stake account (with vault balance and live withdrawable amount), or null if none exists. */
+export declare function fetchStakeInfo(client: NosanaClient, owner: Address): Promise<StakeInfo | null>;
+export interface UnstakePlan {
+    /** instructions to execute atomically: [claim?, closeRewards?, unstake] */
+    instructions: Instruction[];
+    /** same plan without the claim instruction, as fallback if claim constraints fail */
+    fallbackInstructions: Instruction[];
+    reward: RewardAccountData | null;
+    pendingRewards: bigint;
+}
+/**
+ * Build the atomic unstake transaction. The on-chain `unstake` requires the
+ * rewards account to be closed, so this packs (in one transaction):
+ *   1. claim pending rewards → SAFE wallet ATA (if a reward account exists)
+ *   2. close the reward account
+ *   3. unstake
+ */
+export declare function buildUnstakePlan(client: NosanaClient, params: {
+    stake: StakeInfo;
+    authority: TransactionSigner;
+    /** NOS token account (safe wallet ATA) that receives claimed rewards */
+    safeNosAta: Address;
+}): Promise<UnstakePlan>;
+/** Withdraw released NOS from the stake vault directly to the SAFE wallet's NOS ATA. */
+export declare function buildWithdrawInstruction(params: {
+    stake: StakeInfo;
+    authority: TransactionSigner;
+    safeNosAta: Address;
+}): Instruction;
+/** Close the (empty, fully vested) stake account; rent goes to the compromised authority and is swept. */
+export declare function buildCloseStakeInstruction(params: {
+    stake: StakeInfo;
+    authority: TransactionSigner;
+    safeNosAta: Address;
+}): Instruction;

package/dist/lib/stake.js

@@ -0,0 +1,111 @@
+import { StakingClient } from '@nosana/kit';
+import { buildClaimRewardsInstruction, buildCloseRewardsInstruction, fetchReflectionAccount, fetchRewardAccount, pendingRewards, reflectionPda, rewardPda, } from './rewards.js';
+const U64_MAX = 18446744073709551615n;
+/**
+ * Port of StakeAccount::withdraw from nosana-staking state.rs.
+ * Linear release of `amount` over `duration` starting at `timeUnstake`,
+ * minus what was already withdrawn (amount - vaultBalance).
+ */
+export function withdrawableAmount(amount, duration, timeUnstake, vaultBalance, now) {
+    if (timeUnstake === 0n || vaultBalance === 0n)
+        return 0n;
+    const elapsed = now - timeUnstake;
+    if (elapsed >= duration)
+        return vaultBalance;
+    const max = amount > elapsed ? amount : elapsed;
+    const precision = U64_MAX / max - 1n;
+    const released = ((elapsed * precision) / duration) * amount / precision;
+    const available = released - (amount - vaultBalance);
+    return available > 0n ? available : 0n;
+}
+/** Fetch the stake account (with vault balance and live withdrawable amount), or null if none exists. */
+export async function fetchStakeInfo(client, owner) {
+    const stakeAddress = await client.stake.getAddress(owner);
+    const maybe = await StakingClient.fetchMaybeStakeAccount(client.solana.rpc, stakeAddress);
+    if (!maybe.exists)
+        return null;
+    const acc = maybe.data;
+    let vaultBalance = 0n;
+    try {
+        const bal = await client.solana.rpc.getTokenAccountBalance(acc.vault).send();
+        vaultBalance = BigInt(bal.value.amount);
+    }
+    catch {
+        // vault already closed
+    }
+    const now = BigInt(Math.floor(Date.now() / 1000));
+    return {
+        address: stakeAddress,
+        authority: acc.authority,
+        amount: acc.amount,
+        duration: acc.duration,
+        timeUnstake: acc.timeUnstake,
+        vault: acc.vault,
+        vaultBalance,
+        withdrawable: withdrawableAmount(acc.amount, acc.duration, acc.timeUnstake, vaultBalance, now),
+        fullyVestedAt: acc.timeUnstake === 0n ? null : acc.timeUnstake + acc.duration,
+    };
+}
+/**
+ * Build the atomic unstake transaction. The on-chain `unstake` requires the
+ * rewards account to be closed, so this packs (in one transaction):
+ *   1. claim pending rewards → SAFE wallet ATA (if a reward account exists)
+ *   2. close the reward account
+ *   3. unstake
+ */
+export async function buildUnstakePlan(client, params) {
+    const reward = await fetchRewardAccount(client, params.stake.authority);
+    const reflection = await reflectionPda();
+    const unstakeIx = StakingClient.getUnstakeInstruction({
+        stake: params.stake.address,
+        reward: await rewardPda(params.stake.authority),
+        authority: params.authority,
+    });
+    if (!reward) {
+        return {
+            instructions: [unstakeIx],
+            fallbackInstructions: [unstakeIx],
+            reward: null,
+            pendingRewards: 0n,
+        };
+    }
+    const reflectionAccount = await fetchReflectionAccount(client);
+    const closeIx = buildCloseRewardsInstruction({
+        reflection,
+        reward: reward.address,
+        authority: params.authority,
+    });
+    const claimIx = buildClaimRewardsInstruction({
+        user: params.safeNosAta,
+        rewardsVault: reflectionAccount.vault,
+        reflection,
+        reward: reward.address,
+        stake: params.stake.address,
+        authority: params.authority,
+    });
+    return {
+        instructions: [claimIx, closeIx, unstakeIx],
+        fallbackInstructions: [closeIx, unstakeIx],
+        reward,
+        pendingRewards: pendingRewards(reward, reflectionAccount),
+    };
+}
+/** Withdraw released NOS from the stake vault directly to the SAFE wallet's NOS ATA. */
+export function buildWithdrawInstruction(params) {
+    return StakingClient.getWithdrawInstruction({
+        user: params.safeNosAta,
+        vault: params.stake.vault,
+        stake: params.stake.address,
+        authority: params.authority,
+    });
+}
+/** Close the (empty, fully vested) stake account; rent goes to the compromised authority and is swept. */
+export function buildCloseStakeInstruction(params) {
+    return StakingClient.getCloseInstruction({
+        user: params.safeNosAta,
+        stake: params.stake.address,
+        vault: params.stake.vault,
+        authority: params.authority,
+    });
+}
+//# sourceMappingURL=stake.js.map

package/dist/lib/stake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stake.js","sourceRoot":"","sources":["../../src/lib/stake.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAqB,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,SAAS,GAEV,MAAM,cAAc,CAAC;AAoBtB,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,QAAgB,EAChB,WAAmB,EACnB,YAAoB,EACpB,GAAW;IAEX,IAAI,WAAW,KAAK,EAAE,IAAI,YAAY,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,GAAG,GAAG,WAAW,CAAC;IAClC,IAAI,OAAO,IAAI,QAAQ;QAAE,OAAO,YAAY,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,GAAG,GAAG,GAAG,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,GAAG,SAAS,CAAC,GAAG,QAAQ,CAAC,GAAG,MAAM,GAAG,SAAS,CAAC;IACzE,MAAM,SAAS,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC;IACrD,OAAO,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAoB,EACpB,KAAc;IAEd,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC1F,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC;IAEvB,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7E,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAClD,OAAO;QACL,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,YAAY;QACZ,YAAY,EAAE,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC;QAC9F,aAAa,EAAE,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,QAAQ;KAC9E,CAAC;AACJ,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAoB,EACpB,MAKC;IAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,CAAC;IAEzC,MAAM,SAAS,GAAG,aAAa,CAAC,qBAAqB,CAAC;QACpD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;QAC3B,MAAM,EAAE,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;QAC/C,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,YAAY,EAAE,CAAC,SAAS,CAAC;YACzB,oBAAoB,EAAE,CAAC,SAAS,CAAC;YACjC,MAAM,EAAE,IAAI;YACZ,cAAc,EAAE,EAAE;SACnB,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,4BAA4B,CAAC;QAC3C,UAAU;QACV,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,4BAA4B,CAAC;QAC3C,IAAI,EAAE,MAAM,CAAC,UAAU;QACvB,YAAY,EAAE,iBAAiB,CAAC,KAAK;QACrC,UAAU;QACV,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IAEH,OAAO;QACL,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC;QAC3C,oBAAoB,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;QAC1C,MAAM;QACN,cAAc,EAAE,cAAc,CAAC,MAAM,EAAE,iBAAiB,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,wBAAwB,CAAC,MAIxC;IACC,OAAO,aAAa,CAAC,sBAAsB,CAAC;QAC1C,IAAI,EAAE,MAAM,CAAC,UAAU;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,0BAA0B,CAAC,MAI1C;IACC,OAAO,aAAa,CAAC,mBAAmB,CAAC;QACvC,IAAI,EAAE,MAAM,CAAC,UAAU;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;AACL,CAAC"}