jiminy-core 0.17.0

//! PDA derivation utilities and ATA helpers.
//!
//! Macros and helpers for deriving program addresses without manual
//! seed-array construction. Wraps [`derive_address`], [`derive_address_const`],
//! and `Address::find_program_address`.

use core::mem::MaybeUninit;

use hopper_runtime::{
    address::{MAX_SEEDS, PDA_MARKER},
    ProgramError,
    Address,
};
use sha2_const_stable::Sha256;

/// Derive a [program address](https://solana.com/docs/core/pda) from the
/// given seeds, optional bump, and program id.
///
/// Uses the `sol_sha256` syscall directly - avoids the cost of
/// `create_program_address` (~1500 CU) at the expense of no curve-point
/// validation.
#[inline(always)]
pub fn derive_address<const N: usize>(
    seeds: &[&[u8]; N],
    bump: Option<u8>,
    program_id: &[u8; 32],
) -> [u8; 32] {
    const {
        assert!(N < MAX_SEEDS, "number of seeds must be less than MAX_SEEDS");
    }

    const UNINIT: MaybeUninit<&[u8]> = MaybeUninit::<&[u8]>::uninit();
    let mut data = [UNINIT; MAX_SEEDS + 2];
    let mut i = 0;

    while i < N {
        // SAFETY: i < N < MAX_SEEDS (compile-time assert above), so index is in bounds.
        unsafe {
            data.get_unchecked_mut(i).write(seeds.get_unchecked(i));
        }
        i += 1;
    }

    let bump_seed = [bump.unwrap_or_default()];

    // SAFETY: After the seed loop, i <= N < MAX_SEEDS. With bump at most i = N+1.
    // MAX_SEEDS + 2 elements in data, so i+1 is always in bounds.
    unsafe {
        if bump.is_some() {
            data.get_unchecked_mut(i).write(&bump_seed);
            i += 1;
        }
        data.get_unchecked_mut(i).write(program_id.as_ref());
        data.get_unchecked_mut(i + 1).write(PDA_MARKER.as_ref());
    }

    #[cfg(target_os = "solana")]
    {
        let mut pda = MaybeUninit::<[u8; 32]>::uninit();

        // SAFETY: sol_sha256 writes 32 bytes to the output pointer.
        // data contains (i + 2) initialized (ptr, len) pairs.
        unsafe {
            hopper_runtime::syscalls::sol_sha256(
                data.as_ptr() as *const u8,
                (i + 2) as u64,
                pda.as_mut_ptr() as *mut u8,
            );
        }

        // SAFETY: sol_sha256 wrote 32 bytes into pda, so it is fully initialized.
        unsafe { pda.assume_init() }
    }

    #[cfg(not(target_os = "solana"))]
    {
        let _ = data;
        unreachable!("deriving a pda is only available on target `solana`");
    }
}

/// Compile-time version of [`derive_address`].
///
/// Uses pure-Rust SHA-256 (`sha2-const-stable`) so the result is computed at
/// compile time with zero runtime cost.
#[inline(always)]
pub const fn derive_address_const<const N: usize>(
    seeds: &[&[u8]; N],
    bump: Option<u8>,
    program_id: &[u8; 32],
) -> [u8; 32] {
    const {
        assert!(N < MAX_SEEDS, "number of seeds must be less than MAX_SEEDS");
    }

    let mut hasher = Sha256::new();
    let mut i = 0;

    while i < seeds.len() {
        hasher = hasher.update(seeds[i]);
        i += 1;
    }

    if let Some(bump) = bump {
        hasher
            .update(&[bump])
            .update(program_id)
            .update(PDA_MARKER)
            .finalize()
    } else {
        hasher.update(program_id).update(PDA_MARKER).finalize()
    }
}

/// Derive the associated token account (ATA) address for a wallet + mint pair.
#[cfg(feature = "programs")]
#[inline(always)]
pub fn derive_ata(
    wallet: &Address,
    mint: &Address,
) -> Result<(Address, u8), ProgramError> {
    derive_ata_with_program(wallet, mint, &crate::programs::TOKEN)
}

/// Derive an ATA address with an explicit token program (SPL Token or Token-2022).
#[cfg(feature = "programs")]
#[inline(always)]
pub fn derive_ata_with_program(
    wallet: &Address,
    mint: &Address,
    token_program: &Address,
) -> Result<(Address, u8), ProgramError> {
    #[cfg(target_os = "solana")]
    {
        let seeds: &[&[u8]] = &[
            wallet.as_ref(),
            token_program.as_ref(),
            mint.as_ref(),
        ];
        let (address, bump) = Address::find_program_address(seeds, &crate::programs::ASSOCIATED_TOKEN);
        Ok((address, bump))
    }
    #[cfg(not(target_os = "solana"))]
    {
        let _ = (wallet, mint, token_program);
        Err(ProgramError::InvalidSeeds)
    }
}

/// Derive an ATA address with a known bump. Skips the bump search.
#[cfg(feature = "programs")]
#[inline(always)]
pub fn derive_ata_with_bump(
    wallet: &Address,
    mint: &Address,
    bump: u8,
) -> Address {
    Address::new_from_array(derive_address(
        &[wallet.as_ref(), crate::programs::TOKEN.as_array().as_ref(), mint.as_ref()],
        Some(bump),
        crate::programs::ASSOCIATED_TOKEN.as_array(),
    ))
}

/// Derive an ATA address at compile time. Requires known bump.
#[cfg(feature = "programs")]
#[macro_export]
macro_rules! derive_ata_const {
    ($wallet:expr, $mint:expr, $bump:expr) => {{
        const TOKEN_BYTES: [u8; 32] = $crate::programs::TOKEN.to_bytes();
        const ATA_BYTES: [u8; 32] = $crate::programs::ASSOCIATED_TOKEN.to_bytes();
        ::hopper_runtime::Address::new_from_array($crate::check::pda::derive_address_const(
            &[&$wallet, &TOKEN_BYTES, &$mint],
            Some($bump),
            &ATA_BYTES,
        ))
    }};
}

// ── Macros ───────────────────────────────────────────────────────────────────

/// Find a PDA and return `(Address, u8)` with the canonical bump.
///
/// Uses the `find_program_address` syscall. Only available on-chain.
#[macro_export]
macro_rules! find_pda {
    ($program_id:expr, $($seed:expr),+ $(,)?) => {{
        #[cfg(target_os = "solana")]
        {
            let seeds: &[&[u8]] = &[$($seed.as_ref()),+];
            ::hopper_runtime::Address::find_program_address(seeds, $program_id)
        }
        #[cfg(not(target_os = "solana"))]
        {
            let _ = ($program_id, $($seed),+);
            unreachable!("find_pda! is only available on target solana")
        }
    }};
}

/// Derive a PDA with a known bump. Cheap (~100 CU, no curve check).
///
/// Wraps [`derive_address`]. The bump is appended automatically. Returns `Address`.
#[macro_export]
macro_rules! derive_pda {
    ($program_id:expr, $bump:expr, $($seed:expr),+ $(,)?) => {{
        ::hopper_runtime::Address::new_from_array($crate::check::pda::derive_address(
            &[$($seed.as_ref()),+],
            Some($bump),
            ($program_id).as_array(),
        ))
    }};
}

/// Derive a PDA at compile time. Requires `const` seeds and bump.
#[macro_export]
macro_rules! derive_pda_const {
    ($program_id:expr, $bump:expr, $($seed:expr),+ $(,)?) => {
        ::hopper_runtime::Address::new_from_array($crate::check::pda::derive_address_const(
            &[$(&$seed),+],
            Some($bump),
            &$program_id,
        ))
    };
}

/// Verify a token account is the correct ATA for a wallet + mint pair.
#[cfg(feature = "programs")]
#[inline(always)]
pub fn check_ata(
    account: &hopper_runtime::AccountView,
    wallet: &Address,
    mint: &Address,
) -> hopper_runtime::ProgramResult {
    let (expected, _) = derive_ata(wallet, mint)?;
    if *account.address() != expected {
        return Err(ProgramError::InvalidSeeds);
    }
    Ok(())
}

/// Verify a token account is the correct ATA for a specific token program.
#[cfg(feature = "programs")]
#[inline(always)]
pub fn check_ata_with_program(
    account: &hopper_runtime::AccountView,
    wallet: &Address,
    mint: &Address,
    token_program: &Address,
) -> hopper_runtime::ProgramResult {
    let (expected, _) = derive_ata_with_program(wallet, mint, token_program)?;
    if *account.address() != expected {
        return Err(ProgramError::InvalidSeeds);
    }
    Ok(())
}

/// Derive a PDA from seeds, verify the account matches, and return the bump.
///
/// Wraps [`assert_pda`](super::assert_pda) as a macro so you can pass
/// seeds inline without manual slice construction.
///
/// ```rust,ignore
/// let bump = require_pda!(vault_account, program_id, b"vault", user.address())?;
/// ```
#[macro_export]
macro_rules! require_pda {
    ($account:expr, $program_id:expr, $($seed:expr),+ $(,)?) => {{
        let seeds: &[&[u8]] = &[$($seed.as_ref()),+];
        $crate::check::assert_pda($account, seeds, $program_id)
    }};
}