Modular security infrastructure for Solana financial flows.

// MORA · lock once, sign an 84-byte voucher offline, settle later
import { AnchorProvider, BN, Idl, Program } from "@coral-xyz/anchor";
import { Ed25519Program, Keypair, PublicKey, Transaction } from "@solana/web3.js";
import nacl from "tweetnacl";
import idl from "./mora.json"; // IDL from the MORA repo

// Prerequisites: provider (AnchorProvider on devnet),
// alice (payer Keypair), bob (payee PublicKey)
const program = new Program(idl as Idl, provider); // program ID comes from the IDL
const u64 = (n: BN) => n.toArrayLike(Buffer, "le", 8);

// 1) Online, once: lock SOL into the escrow PDA
const seed = new BN(Date.now());
const expiresAt = new BN(Math.floor(Date.now() / 1000) + 7 * 24 * 3600); // 7 days
const [escrow] = PublicKey.findProgramAddressSync(
  [Buffer.from("escrow"), alice.publicKey.toBuffer(), u64(seed)], program.programId);

await program.methods
  .createEscrow(seed, new BN(100_000_000), expiresAt) // 0.1 SOL
  .accounts({ authority: alice.publicKey })
  .signers([alice])
  .rpc();

// 2) Offline: sign the 84-byte voucher. No RPC call.
// "MORA"(4) | escrow(32) | nonce(8) | payee(32) | amount(8)
const nonce = new BN(1);
const amount = new BN(10_000_000); // 0.01 SOL
const message = Buffer.concat([Buffer.from("MORA"), escrow.toBuffer(),
  u64(nonce), bob.toBuffer(), u64(amount)]);
const signature = nacl.sign.detached(message, alice.secretKey);

// 3) Back online: Ed25519 verify + settle in one transaction.
// The receipt PDA for this nonce makes a replay fail.
const [receipt] = PublicKey.findProgramAddressSync(
  [Buffer.from("receipt"), escrow.toBuffer(), u64(nonce)], program.programId);
const settleIx = await program.methods
  .settle(nonce, amount)
  .accountsPartial({ submitter: provider.wallet.publicKey, escrow, payee: bob, receipt })
  .instruction();

await provider.sendAndConfirm(new Transaction().add(
  Ed25519Program.createInstructionWithPublicKey({
    publicKey: alice.publicKey.toBytes(), message, signature }),
  settleIx));