Struct MigrateHeaderV1 

pub struct MigrateHeaderV1<'info> {
    pub authority: Signer<'info>,
    pub market: UncheckedAccount<'info>,
}

One-time migration from the v0 (136-byte) MarketHeader layout used by percli v0.9.x to the v1 (168-byte) layout used by percli v1.0+.

Detection uses a version byte at offset [7] of the discriminator:

• v0: b"percmrkt" (last byte = 0x74, ASCII t)
• v1: b"percmrk\x01" (last byte = 0x01)

We can’t use absolute size comparisons because host (size_of::<RiskEngine>() at host compile time) and SBF (size_of at on-chain compile time) disagree on the size of RiskEngine due to platform-specific alignment of i128/ u128 and the large [Account; MAX_ACCOUNTS] array. The discrepancy is constant (~536 bytes), but it makes any “expected total size” comparison fragile across host/SBF boundaries.

Migration is performed in-place without realloc: we shift the engine bytes forward by 32 bytes (from [144..) to [176..)) inside the existing account buffer. This works because real v0.9 mainnet accounts were created with the v0.9 host-side constant 8 + 136 + size_host(RiskEngine), which is strictly larger than the SBF v1 size 8 + 168 + size_sbf(RiskEngine), so the existing buffer already has enough room.

This instruction:

1. Verifies the account is owned by this program.
2. Verifies the discriminator at [0..7] is b"percmrk".
3. Verifies the version byte at [7] is 0x74 (t, the v0 marker).
4. Verifies the signer matches the authority encoded in the v0 header.
5. Shifts the engine bytes forward by 32 bytes (back-to-front via copy_within).
6. Writes a fresh v1 header at [8..176) with pending_authority = Pubkey::default() (all other fields copied from the v0 header).
7. Stamps the version byte at [7] to 0x01.
8. Emits HeaderMigrated.

migrate_header_v1 is idempotent-by-rejection: calling it a second time fails the version-byte check with AlreadyMigrated.

Fields

authority: Signer<'info>

market: UncheckedAccount<'info>

CHECK: Manually validated — owner, discriminator/version-byte, and authority match are all checked inside the handler. We deliberately don’t enforce a seeds/bump constraint here because we re-derive and verify the PDA bump inside the handler against the v0 header bytes, which is the same security guarantee with explicit error reporting.

Trait Implementations

impl<'info> Accounts<'info, MigrateHeaderV1Bumps> for MigrateHeaderV1<'info>

where 'info: 'info,

fn try_accounts( __program_id: &Pubkey, __accounts: &mut &'info [AccountInfo<'info>], __ix_data: &[u8], __bumps: &mut MigrateHeaderV1Bumps, __reallocs: &mut BTreeSet<Pubkey>, ) -> Result<Self>

Returns the validated accounts struct. What constitutes “valid” is program dependent. However, users of these types should never have to worry about account substitution attacks. For example, if a program expects a Mint account from the SPL token program in a particular field, then it should be impossible for this method to return Ok if any other account type is given–from the SPL token program or elsewhere.

impl<'info> AccountsExit<'info> for MigrateHeaderV1<'info>

where 'info: 'info,

fn exit(&self, program_id: &Pubkey) -> Result<()>

program_id is the currently executing program.

impl<'info> Bumps for MigrateHeaderV1<'info>

where 'info: 'info,

type Bumps = MigrateHeaderV1Bumps

Struct to hold account bump seeds.

impl<'info> DuplicateMutableAccountKeys for MigrateHeaderV1<'info>

where 'info: 'info,

fn duplicate_mutable_account_keys(&self) -> Vec<Pubkey>

impl<'info> ToAccountInfos<'info> for MigrateHeaderV1<'info>

where 'info: 'info,

fn to_account_infos(&self) -> Vec<AccountInfo<'info>>

impl<'info> ToAccountMetas for MigrateHeaderV1<'info>

fn to_account_metas(&self, is_signer: Option<bool>) -> Vec<AccountMeta>

is_signer is given as an optional override for the signer meta field. This covers the edge case when a program-derived-address needs to relay a transaction from a client to another program but sign the transaction before the relay. The client cannot mark the field as a signer, and so we have to override the is_signer meta field given by the client.