pangu-sdk 0.1.0

package/dist/feed-CY-pcUU2.d.mts

@@ -0,0 +1,269 @@
+import { PublicKey, TransactionInstruction, Connection } from '@solana/web3.js';
+import { F as FeedId, S as Sale } from './accounts-BuD-oCcr.mjs';
+
+/** The ceiling a sale can put on the curve price, against the real stock's price. */
+interface PriceBandInput {
+    /** How far above the live stock price a buy may leave the curve, in basis points. */
+    bps: number;
+    /** The Pyth feed carrying the stock price, as hex or 32 bytes. */
+    priceFeedId: FeedId;
+    /** Which Pyth shard to read. Defaults to Pangu's own, the one it refreshes. */
+    shard?: number;
+    /** How old the published price may be on a buy, in seconds. */
+    maxPriceAgeSecs: number;
+    /** The widest confidence interval this sale will buy against, in basis points. */
+    maxConfBps: number;
+}
+interface CreateSaleInput {
+    /** The pool's creator, who signs and pays. */
+    issuer: PublicKey;
+    /** The DBC hook pool, which must already exist. */
+    pool: PublicKey;
+    mint: PublicKey;
+    /** Most raw token units one wallet may hold, net of sells. */
+    cap: bigint;
+    accessMode: number;
+    /** Access mode 2 only: the verifier's credential and the schema that counts. */
+    credential?: PublicKey;
+    schema?: PublicKey;
+    band?: PriceBandInput;
+    /**
+     * The DBC launch template this pool was opened on. Needed in every mode: the
+     * program reads the fee mode off it before it will open a sale at all.
+     */
+    dbcConfig: PublicKey;
+    /**
+     * The token buyers pay in, the one the launch template names. Needed in every
+     * mode: the program stores it, refuses one the issuer can freeze, and on a
+     * banded sale reads its decimals and refuses wrapped SOL.
+     */
+    quoteMint: PublicKey;
+    /**
+     * Unix seconds at which the offering period ends and every rule lifts. Zero,
+     * the default, means no end: the rules hold until graduation.
+     */
+    endsAt?: number;
+}
+interface OpenBuyerRecordInput {
+    wallet: PublicKey;
+    mint: PublicKey;
+}
+interface ApproveBuyerInput {
+    issuer: PublicKey;
+    mint: PublicKey;
+    wallet: PublicKey;
+}
+type RevokeBuyerInput = ApproveBuyerInput;
+interface CloseBuyerRecordInput {
+    wallet: PublicKey;
+    mint: PublicKey;
+}
+/**
+ * Opens a sale: stores the rules for a mint and publishes the account list the
+ * transfer hook will be called with.
+ *
+ * The pool must already exist and the signer must be its creator. The pool's
+ * launch template and the token buyers pay in are needed in every mode,
+ * because the program reads the fee mode, the curve's supply and the paying
+ * token before it will open a sale at all. Access mode 2 needs a credential and
+ * a schema; a band needs the feed. Every input that could never pass on chain
+ * and can be judged without reading the chain is refused here, with the same
+ * limits the program holds.
+ *
+ * Throws PanguInputError. Sends nothing.
+ */
+declare function createSaleInstruction(input: CreateSaleInput): TransactionInstruction;
+/**
+ * Opens a wallet's own record, so a later buy has somewhere to count against.
+ * A transfer hook cannot create accounts, which is why this comes first. Safe to
+ * send twice.
+ */
+declare function openBuyerRecordInstruction(input: OpenBuyerRecordInput): TransactionInstruction;
+/**
+ * Puts a wallet on the issuer's approved list, in access mode 1. Creates the
+ * record if the wallet never opened one. Only the issuer named in the rules can
+ * send it, and it never resets what the wallet has already bought.
+ */
+declare function approveBuyerInstruction(input: ApproveBuyerInput): TransactionInstruction;
+/**
+ * Takes a wallet off the approved list. The wallet can still sell what it holds,
+ * which is why the record is not closed.
+ */
+declare function revokeBuyerInstruction(input: RevokeBuyerInput): TransactionInstruction;
+/**
+ * Closes a wallet's record and returns the rent.
+ *
+ * A record with nothing left in it closes at any time, mid-sale included, since
+ * it holds no count anybody could lose. A record that still counts tokens waits
+ * for the sale to finish, which is the moment the mint stops naming Pangu as its
+ * hook or the offering period in the rules ends; until then the program answers
+ * SaleStillRunning. Reopening later is safe, and in the issuer-list mode the
+ * wallet has to be approved again.
+ */
+declare function closeBuyerRecordInstruction(input: CloseBuyerRecordInput): TransactionInstruction;
+
+/** One of the program's own refusals, matched out of a transaction's logs. */
+interface PanguError {
+    code: number;
+    name: PanguErrorName;
+    /** The program's own message, as written in the IDL. */
+    message: string;
+}
+/**
+ * Every error the program can return, read straight out of the IDL so a new one
+ * cannot be missed here.
+ */
+declare const PANGU_ERRORS: readonly PanguError[];
+/**
+ * Finds Pangu's own refusal in a transaction's logs.
+ *
+ * Covers the two shapes a refusal arrives in: the Anchor line that names the
+ * error, and the bare code the runtime prints when the program fails.
+ *
+ * A code only means something next to the program that raised it: DBC's 6002
+ * is its slippage refusal, and Pangu's 6002 is WrongMint. So the lines are
+ * walked as the runtime prints them, each "invoke" opening a frame and each
+ * "success" or "failed" closing one, and the first "failed" names the program
+ * the transaction really stopped in. The runtime aborts on the innermost
+ * failure, so every later "failed" is only a caller passing it up. A refusal is
+ * Pangu's only when that program is Pangu, and only lines printed inside
+ * Pangu's own frame are read for its name. Pangu having run earlier in the same
+ * transaction, which it does on every first buy when it opens the buyer
+ * record, counts for nothing.
+ *
+ * A fragment that names no program at all is read as Pangu's, because there is
+ * nobody else it could belong to.
+ *
+ * Does not cover: errors Pangu never raises, such as Anchor's own account checks
+ * or the token program's, and logs cut short before the failing line when the
+ * frame that failed is not Pangu's. Those come back as null and the caller should
+ * show the raw message.
+ */
+declare function panguErrorFromLogs(logs: string[]): PanguError | null;
+/**
+ * One sentence a buyer can read for each refusal.
+ *
+ * Every name in the IDL has an entry. A name that is not Pangu's gets a sentence
+ * that says so, rather than a guess.
+ */
+declare const EXPLANATIONS: {
+    readonly NotTransferring: "This token only moves through a real transfer, and this was not one.";
+    readonly ReceivingAccountOwnerCanChange: "The account you are buying into could be handed to someone else later, so the sale will not send tokens to it. Use the wallet's ordinary holding account for this token, the one your wallet app makes by itself.";
+    readonly WrongMint: "That account belongs to a different token than this sale.";
+    readonly WrongBuyerRecord: "The buyer record sent with this transfer belongs to another wallet.";
+    readonly BuyerRecordMissing: "This wallet has no record in the sale yet. Open one first, then buy.";
+    readonly NotApproved: "The issuer has not approved this wallet to buy in this sale.";
+    readonly CredentialInvalid: "This wallet does not carry a valid approval from the verifier this sale trusts.";
+    readonly CredentialExpired: "The verifier's approval for this wallet has run out.";
+    readonly CredentialSignerNotAuthorized: "The key that signed this wallet's approval is no longer allowed to sign for that verifier.";
+    readonly OverCap: "This purchase would take your wallet past the limit for this sale.";
+    readonly WalletToWalletDuringSale: "This token cannot be sent from one wallet to another while the sale is running.";
+    readonly PriceStale: "The stock price this sale checks against is too old to use. Refresh it and try again. Outside market hours there is no fresh price to get, so the sale stays shut until the market opens.";
+    readonly PriceOutsideBand: "This purchase would push the price too far above the real stock price.";
+    readonly WrongPriceAccount: "The price account sent with this transfer is not the one this sale names.";
+    readonly PriceNotFullyVerified: "The price update has not been signed by two thirds of Pyth's guardians, and this sale will not price against a half signed number.";
+    readonly PriceTooUncertain: "Pyth's own publishers disagree about this stock's price by more than this sale allows, so there is no ceiling worth measuring against right now.";
+    readonly NotPoolCreator: "Only the wallet that created the pool can open its sale.";
+    readonly NotAHookPool: "That account is not a Meteora bonding curve pool of the kind Pangu works with.";
+    readonly HookProgramMismatch: "This token does not name Pangu as its transfer hook, so Pangu cannot hold its rules.";
+    readonly MintAuthorityStillSet: "This token can still be minted, so Pangu will not open a sale on it. Launch it with the minting power revoked.";
+    readonly WrongLaunchTemplate: "That launch template is not the one this pool was opened on.";
+    readonly FeesNotInQuoteToken: "This sale's template collects fees in the sale token, and Pangu only accepts templates that collect them in the paying token.";
+    readonly ZeroCap: "A sale needs a per-wallet limit above zero.";
+    readonly InvalidAccessMode: "That access mode does not exist, or the settings do not match the mode chosen.";
+    readonly InvalidBand: "The price band settings are incomplete or out of range.";
+    readonly SaleStillRunning: "The sale is still running and this record still counts tokens, so it cannot be closed yet. Sell them back or wait for the sale to finish.";
+    readonly NotIssuer: "Only the issuer of this sale can do that.";
+    readonly MathOverflow: "The sale's counters cannot go any higher.";
+    readonly WrongLayoutVersion: "These sale rules were written by an older build of the program, so this build will not act on them.";
+    readonly BandNeedsDollarQuote: "A price ceiling needs buyers to pay in a dollar token the program recognises (USDC, or on devnet the demo dollar). Turn the ceiling off, or pick a dollar paying token.";
+    readonly IssuerControlsPayingToken: "You hold the freeze authority of the token buyers pay in, which would let you stop sellers being paid. Pick a paying token whose freeze authority is not yours.";
+    readonly CapCoversWholeSale: "The per-wallet limit is as large as everything the curve sells, so one wallet could buy the whole sale. Set a limit below the curve's supply.";
+    readonly EndInThePast: "The end of the offering period has to be later than now. Pick a future time, or leave it at zero for no end.";
+};
+type PanguErrorName = keyof typeof EXPLANATIONS;
+declare function explainPanguError(name: PanguErrorName | string): string;
+
+/** What one Pyth price feed account carries. */
+interface PriceUpdate {
+    /** The key Pyth's receiver program recorded as having written this update. */
+    writeAuthority: PublicKey;
+    /** True when two thirds of the Wormhole guardians signed it. */
+    fullyVerified: boolean;
+    /** Lowercase hex, no prefix, matching Sale.priceFeedId. */
+    feedId: string;
+    /** Pyth's whole number. The dollar price is this times ten to the exponent. */
+    price: bigint;
+    /** How wide the publishers' disagreement is, in the same units as the price. */
+    conf: bigint;
+    exponent: number;
+    /** Unix seconds Pyth's publishers agreed this price. */
+    publishTime: number;
+    prevPublishTime: number;
+    /** The Solana slot the update was posted in. */
+    postedSlot: bigint;
+}
+/** A sale's live stock price, and whether a buy could use it right now. */
+interface PriceReading {
+    /** The Pyth price feed account this sale reads. */
+    address: PublicKey;
+    /** The stock price in dollars, scaled by 1e18. Zero when there is none. */
+    price: bigint;
+    /** The same price as an ordinary number, for display. */
+    priceDollars: number;
+    /** Unix seconds the price was published, or zero when unknown. */
+    publishTime: number;
+    /** How old it is, in seconds, against the chain's own clock. */
+    ageSecs: number;
+    /** Pyth's confidence interval as basis points of the price, rounded up. */
+    confBps: number;
+    /** True when two thirds of the Wormhole guardians signed the update. */
+    fullyVerified: boolean;
+    usable: boolean;
+    /** Why it cannot be used, as the program's own refusal. Null when usable. */
+    error: PanguErrorName | null;
+    /** One sentence for a buyer. Null when usable. */
+    reason: string | null;
+}
+/**
+ * Reads a Pyth price feed account without the Pyth package.
+ *
+ * Every offset is the one `programs/pangu/src/price.rs` reads on chain through
+ * Pyth's own Rust SDK, checked against the real account bytes in
+ * docs/measurements/price-band-pyth.md. Safe in a browser: it is arithmetic
+ * over bytes the caller already has, and it pulls in nothing.
+ *
+ * A partly verified update is decoded rather than refused, because the caller
+ * has to be able to say which of the two it is. `fullyVerified` is the answer,
+ * and `readPrice` refuses on it.
+ *
+ * Throws PanguInputError for anything that is not a well formed price update.
+ */
+declare function decodePriceUpdate(data: Uint8Array): PriceUpdate;
+/**
+ * The live stock price a banded sale checks against, read straight off the
+ * chain, plus whether a buy could use it this moment.
+ *
+ * Runs the hook's own checks in the hook's own order: the account sits at the
+ * one address this sale's shard and feed id produce, it is owned by Pyth's
+ * receiver program, its bytes are a price update, two thirds of the guardians
+ * signed it, the feed inside it is this sale's feed, it is no older than the
+ * sale allows, it was not published in the future, the price is above zero, and
+ * Pyth's confidence interval is inside the sale's limit. Any doubt comes back
+ * as `usable: false` with the program's own error name, because that is what
+ * the buy would hit.
+ *
+ * The age is measured against the chain's own clock, the same clock the hook
+ * compares against, rather than this machine's. If the Clock sysvar cannot be
+ * read, this machine's clock stands in.
+ *
+ * Does not cover the Wormhole guardian signatures. Nothing can redo those from
+ * the account's bytes: what stands in for them is the owner check, because only
+ * Pyth's receiver program can write an account it owns and it checks them
+ * first.
+ *
+ * Throws PanguInputError when the sale has no price band.
+ */
+declare function readPrice(connection: Connection, sale: Sale): Promise<PriceReading>;
+
+export { type ApproveBuyerInput as A, type CloseBuyerRecordInput as C, type OpenBuyerRecordInput as O, type PriceBandInput as P, type RevokeBuyerInput as R, type PanguErrorName as a, type PriceReading as b, type CreateSaleInput as c, PANGU_ERRORS as d, type PanguError as e, type PriceUpdate as f, approveBuyerInstruction as g, closeBuyerRecordInstruction as h, createSaleInstruction as i, decodePriceUpdate as j, explainPanguError as k, revokeBuyerInstruction as l, openBuyerRecordInstruction as o, panguErrorFromLogs as p, readPrice as r };

package/dist/feed-Zwu1irEx.d.ts

@@ -0,0 +1,269 @@
+import { PublicKey, TransactionInstruction, Connection } from '@solana/web3.js';
+import { F as FeedId, S as Sale } from './accounts-BuD-oCcr.js';
+
+/** The ceiling a sale can put on the curve price, against the real stock's price. */
+interface PriceBandInput {
+    /** How far above the live stock price a buy may leave the curve, in basis points. */
+    bps: number;
+    /** The Pyth feed carrying the stock price, as hex or 32 bytes. */
+    priceFeedId: FeedId;
+    /** Which Pyth shard to read. Defaults to Pangu's own, the one it refreshes. */
+    shard?: number;
+    /** How old the published price may be on a buy, in seconds. */
+    maxPriceAgeSecs: number;
+    /** The widest confidence interval this sale will buy against, in basis points. */
+    maxConfBps: number;
+}
+interface CreateSaleInput {
+    /** The pool's creator, who signs and pays. */
+    issuer: PublicKey;
+    /** The DBC hook pool, which must already exist. */
+    pool: PublicKey;
+    mint: PublicKey;
+    /** Most raw token units one wallet may hold, net of sells. */
+    cap: bigint;
+    accessMode: number;
+    /** Access mode 2 only: the verifier's credential and the schema that counts. */
+    credential?: PublicKey;
+    schema?: PublicKey;
+    band?: PriceBandInput;
+    /**
+     * The DBC launch template this pool was opened on. Needed in every mode: the
+     * program reads the fee mode off it before it will open a sale at all.
+     */
+    dbcConfig: PublicKey;
+    /**
+     * The token buyers pay in, the one the launch template names. Needed in every
+     * mode: the program stores it, refuses one the issuer can freeze, and on a
+     * banded sale reads its decimals and refuses wrapped SOL.
+     */
+    quoteMint: PublicKey;
+    /**
+     * Unix seconds at which the offering period ends and every rule lifts. Zero,
+     * the default, means no end: the rules hold until graduation.
+     */
+    endsAt?: number;
+}
+interface OpenBuyerRecordInput {
+    wallet: PublicKey;
+    mint: PublicKey;
+}
+interface ApproveBuyerInput {
+    issuer: PublicKey;
+    mint: PublicKey;
+    wallet: PublicKey;
+}
+type RevokeBuyerInput = ApproveBuyerInput;
+interface CloseBuyerRecordInput {
+    wallet: PublicKey;
+    mint: PublicKey;
+}
+/**
+ * Opens a sale: stores the rules for a mint and publishes the account list the
+ * transfer hook will be called with.
+ *
+ * The pool must already exist and the signer must be its creator. The pool's
+ * launch template and the token buyers pay in are needed in every mode,
+ * because the program reads the fee mode, the curve's supply and the paying
+ * token before it will open a sale at all. Access mode 2 needs a credential and
+ * a schema; a band needs the feed. Every input that could never pass on chain
+ * and can be judged without reading the chain is refused here, with the same
+ * limits the program holds.
+ *
+ * Throws PanguInputError. Sends nothing.
+ */
+declare function createSaleInstruction(input: CreateSaleInput): TransactionInstruction;
+/**
+ * Opens a wallet's own record, so a later buy has somewhere to count against.
+ * A transfer hook cannot create accounts, which is why this comes first. Safe to
+ * send twice.
+ */
+declare function openBuyerRecordInstruction(input: OpenBuyerRecordInput): TransactionInstruction;
+/**
+ * Puts a wallet on the issuer's approved list, in access mode 1. Creates the
+ * record if the wallet never opened one. Only the issuer named in the rules can
+ * send it, and it never resets what the wallet has already bought.
+ */
+declare function approveBuyerInstruction(input: ApproveBuyerInput): TransactionInstruction;
+/**
+ * Takes a wallet off the approved list. The wallet can still sell what it holds,
+ * which is why the record is not closed.
+ */
+declare function revokeBuyerInstruction(input: RevokeBuyerInput): TransactionInstruction;
+/**
+ * Closes a wallet's record and returns the rent.
+ *
+ * A record with nothing left in it closes at any time, mid-sale included, since
+ * it holds no count anybody could lose. A record that still counts tokens waits
+ * for the sale to finish, which is the moment the mint stops naming Pangu as its
+ * hook or the offering period in the rules ends; until then the program answers
+ * SaleStillRunning. Reopening later is safe, and in the issuer-list mode the
+ * wallet has to be approved again.
+ */
+declare function closeBuyerRecordInstruction(input: CloseBuyerRecordInput): TransactionInstruction;
+
+/** One of the program's own refusals, matched out of a transaction's logs. */
+interface PanguError {
+    code: number;
+    name: PanguErrorName;
+    /** The program's own message, as written in the IDL. */
+    message: string;
+}
+/**
+ * Every error the program can return, read straight out of the IDL so a new one
+ * cannot be missed here.
+ */
+declare const PANGU_ERRORS: readonly PanguError[];
+/**
+ * Finds Pangu's own refusal in a transaction's logs.
+ *
+ * Covers the two shapes a refusal arrives in: the Anchor line that names the
+ * error, and the bare code the runtime prints when the program fails.
+ *
+ * A code only means something next to the program that raised it: DBC's 6002
+ * is its slippage refusal, and Pangu's 6002 is WrongMint. So the lines are
+ * walked as the runtime prints them, each "invoke" opening a frame and each
+ * "success" or "failed" closing one, and the first "failed" names the program
+ * the transaction really stopped in. The runtime aborts on the innermost
+ * failure, so every later "failed" is only a caller passing it up. A refusal is
+ * Pangu's only when that program is Pangu, and only lines printed inside
+ * Pangu's own frame are read for its name. Pangu having run earlier in the same
+ * transaction, which it does on every first buy when it opens the buyer
+ * record, counts for nothing.
+ *
+ * A fragment that names no program at all is read as Pangu's, because there is
+ * nobody else it could belong to.
+ *
+ * Does not cover: errors Pangu never raises, such as Anchor's own account checks
+ * or the token program's, and logs cut short before the failing line when the
+ * frame that failed is not Pangu's. Those come back as null and the caller should
+ * show the raw message.
+ */
+declare function panguErrorFromLogs(logs: string[]): PanguError | null;
+/**
+ * One sentence a buyer can read for each refusal.
+ *
+ * Every name in the IDL has an entry. A name that is not Pangu's gets a sentence
+ * that says so, rather than a guess.
+ */
+declare const EXPLANATIONS: {
+    readonly NotTransferring: "This token only moves through a real transfer, and this was not one.";
+    readonly ReceivingAccountOwnerCanChange: "The account you are buying into could be handed to someone else later, so the sale will not send tokens to it. Use the wallet's ordinary holding account for this token, the one your wallet app makes by itself.";
+    readonly WrongMint: "That account belongs to a different token than this sale.";
+    readonly WrongBuyerRecord: "The buyer record sent with this transfer belongs to another wallet.";
+    readonly BuyerRecordMissing: "This wallet has no record in the sale yet. Open one first, then buy.";
+    readonly NotApproved: "The issuer has not approved this wallet to buy in this sale.";
+    readonly CredentialInvalid: "This wallet does not carry a valid approval from the verifier this sale trusts.";
+    readonly CredentialExpired: "The verifier's approval for this wallet has run out.";
+    readonly CredentialSignerNotAuthorized: "The key that signed this wallet's approval is no longer allowed to sign for that verifier.";
+    readonly OverCap: "This purchase would take your wallet past the limit for this sale.";
+    readonly WalletToWalletDuringSale: "This token cannot be sent from one wallet to another while the sale is running.";
+    readonly PriceStale: "The stock price this sale checks against is too old to use. Refresh it and try again. Outside market hours there is no fresh price to get, so the sale stays shut until the market opens.";
+    readonly PriceOutsideBand: "This purchase would push the price too far above the real stock price.";
+    readonly WrongPriceAccount: "The price account sent with this transfer is not the one this sale names.";
+    readonly PriceNotFullyVerified: "The price update has not been signed by two thirds of Pyth's guardians, and this sale will not price against a half signed number.";
+    readonly PriceTooUncertain: "Pyth's own publishers disagree about this stock's price by more than this sale allows, so there is no ceiling worth measuring against right now.";
+    readonly NotPoolCreator: "Only the wallet that created the pool can open its sale.";
+    readonly NotAHookPool: "That account is not a Meteora bonding curve pool of the kind Pangu works with.";
+    readonly HookProgramMismatch: "This token does not name Pangu as its transfer hook, so Pangu cannot hold its rules.";
+    readonly MintAuthorityStillSet: "This token can still be minted, so Pangu will not open a sale on it. Launch it with the minting power revoked.";
+    readonly WrongLaunchTemplate: "That launch template is not the one this pool was opened on.";
+    readonly FeesNotInQuoteToken: "This sale's template collects fees in the sale token, and Pangu only accepts templates that collect them in the paying token.";
+    readonly ZeroCap: "A sale needs a per-wallet limit above zero.";
+    readonly InvalidAccessMode: "That access mode does not exist, or the settings do not match the mode chosen.";
+    readonly InvalidBand: "The price band settings are incomplete or out of range.";
+    readonly SaleStillRunning: "The sale is still running and this record still counts tokens, so it cannot be closed yet. Sell them back or wait for the sale to finish.";
+    readonly NotIssuer: "Only the issuer of this sale can do that.";
+    readonly MathOverflow: "The sale's counters cannot go any higher.";
+    readonly WrongLayoutVersion: "These sale rules were written by an older build of the program, so this build will not act on them.";
+    readonly BandNeedsDollarQuote: "A price ceiling needs buyers to pay in a dollar token the program recognises (USDC, or on devnet the demo dollar). Turn the ceiling off, or pick a dollar paying token.";
+    readonly IssuerControlsPayingToken: "You hold the freeze authority of the token buyers pay in, which would let you stop sellers being paid. Pick a paying token whose freeze authority is not yours.";
+    readonly CapCoversWholeSale: "The per-wallet limit is as large as everything the curve sells, so one wallet could buy the whole sale. Set a limit below the curve's supply.";
+    readonly EndInThePast: "The end of the offering period has to be later than now. Pick a future time, or leave it at zero for no end.";
+};
+type PanguErrorName = keyof typeof EXPLANATIONS;
+declare function explainPanguError(name: PanguErrorName | string): string;
+
+/** What one Pyth price feed account carries. */
+interface PriceUpdate {
+    /** The key Pyth's receiver program recorded as having written this update. */
+    writeAuthority: PublicKey;
+    /** True when two thirds of the Wormhole guardians signed it. */
+    fullyVerified: boolean;
+    /** Lowercase hex, no prefix, matching Sale.priceFeedId. */
+    feedId: string;
+    /** Pyth's whole number. The dollar price is this times ten to the exponent. */
+    price: bigint;
+    /** How wide the publishers' disagreement is, in the same units as the price. */
+    conf: bigint;
+    exponent: number;
+    /** Unix seconds Pyth's publishers agreed this price. */
+    publishTime: number;
+    prevPublishTime: number;
+    /** The Solana slot the update was posted in. */
+    postedSlot: bigint;
+}
+/** A sale's live stock price, and whether a buy could use it right now. */
+interface PriceReading {
+    /** The Pyth price feed account this sale reads. */
+    address: PublicKey;
+    /** The stock price in dollars, scaled by 1e18. Zero when there is none. */
+    price: bigint;
+    /** The same price as an ordinary number, for display. */
+    priceDollars: number;
+    /** Unix seconds the price was published, or zero when unknown. */
+    publishTime: number;
+    /** How old it is, in seconds, against the chain's own clock. */
+    ageSecs: number;
+    /** Pyth's confidence interval as basis points of the price, rounded up. */
+    confBps: number;
+    /** True when two thirds of the Wormhole guardians signed the update. */
+    fullyVerified: boolean;
+    usable: boolean;
+    /** Why it cannot be used, as the program's own refusal. Null when usable. */
+    error: PanguErrorName | null;
+    /** One sentence for a buyer. Null when usable. */
+    reason: string | null;
+}
+/**
+ * Reads a Pyth price feed account without the Pyth package.
+ *
+ * Every offset is the one `programs/pangu/src/price.rs` reads on chain through
+ * Pyth's own Rust SDK, checked against the real account bytes in
+ * docs/measurements/price-band-pyth.md. Safe in a browser: it is arithmetic
+ * over bytes the caller already has, and it pulls in nothing.
+ *
+ * A partly verified update is decoded rather than refused, because the caller
+ * has to be able to say which of the two it is. `fullyVerified` is the answer,
+ * and `readPrice` refuses on it.
+ *
+ * Throws PanguInputError for anything that is not a well formed price update.
+ */
+declare function decodePriceUpdate(data: Uint8Array): PriceUpdate;
+/**
+ * The live stock price a banded sale checks against, read straight off the
+ * chain, plus whether a buy could use it this moment.
+ *
+ * Runs the hook's own checks in the hook's own order: the account sits at the
+ * one address this sale's shard and feed id produce, it is owned by Pyth's
+ * receiver program, its bytes are a price update, two thirds of the guardians
+ * signed it, the feed inside it is this sale's feed, it is no older than the
+ * sale allows, it was not published in the future, the price is above zero, and
+ * Pyth's confidence interval is inside the sale's limit. Any doubt comes back
+ * as `usable: false` with the program's own error name, because that is what
+ * the buy would hit.
+ *
+ * The age is measured against the chain's own clock, the same clock the hook
+ * compares against, rather than this machine's. If the Clock sysvar cannot be
+ * read, this machine's clock stands in.
+ *
+ * Does not cover the Wormhole guardian signatures. Nothing can redo those from
+ * the account's bytes: what stands in for them is the owner check, because only
+ * Pyth's receiver program can write an account it owns and it checks them
+ * first.
+ *
+ * Throws PanguInputError when the sale has no price band.
+ */
+declare function readPrice(connection: Connection, sale: Sale): Promise<PriceReading>;
+
+export { type ApproveBuyerInput as A, type CloseBuyerRecordInput as C, type OpenBuyerRecordInput as O, type PriceBandInput as P, type RevokeBuyerInput as R, type PanguErrorName as a, type PriceReading as b, type CreateSaleInput as c, PANGU_ERRORS as d, type PanguError as e, type PriceUpdate as f, approveBuyerInstruction as g, closeBuyerRecordInstruction as h, createSaleInstruction as i, decodePriceUpdate as j, explainPanguError as k, revokeBuyerInstruction as l, openBuyerRecordInstruction as o, panguErrorFromLogs as p, readPrice as r };