txs

type AtomicInput struct {
	UTXOID ids.ID `json:"utxoId"`
	Asset  ids.ID `json:"asset"`
	Amount uint64 `json:"amount"`
}

type AtomicOutput struct {
	Rail   Rail        `json:"rail,omitempty"`
	Owner  ids.ShortID `json:"owner"`
	Asset  ids.ID      `json:"asset"`
	Amount uint64      `json:"amount"`
	// Spent is the matched INPUT amount (in the locked/input asset's units) that produced
	// this output, set ONLY on a swap PROCEEDS leg (RailSwap, output asset != locked
	// asset). It rides the shared-memory object so the C-side ImportSettlement can enforce
	// the taker's OWN recorded slippage limit (proceeds >= spent * worstRate) INDEPENDENTLY
	// of the keeper that built the relay — the taker-authenticated MEV/sandwich floor. It is
	// 0 on a REFUND leg (output asset == locked asset; the per-taker principal cap governs
	// that leg) and on every LP leg. It is informational to value conservation (the object's
	// Amount alone moves value); it is the price-binding witness the proceeds floor checks.
	Spent uint64 `json:"spent,omitempty"`
}

type BaseTx struct {
	TxID      ids.ID      `json:"-"`
	TxType    TxType      `json:"type"`
	From      ids.ShortID `json:"from"`
	Nonce     uint64      `json:"nonce"`
	GasPrice  uint64      `json:"gasPrice"`
	GasLimit  uint64      `json:"gasLimit"`
	CreatedAt int64       `json:"createdAt"`
	Signature []byte      `json:"signature"`
	// contains filtered or unexported fields
}

type CancelOrderTx struct {
	BaseTx
	PoolID  [32]byte `json:"poolId"`
	OrderID uint64   `json:"orderId"`
}

type ExportTx struct {
	BaseTx
	DestinationChain ids.ID         `json:"destinationChain"`
	ExportedOutputs  []AtomicOutput `json:"exportedOutputs"`
	// FillRef binds this settlement to the d-chain relay receipt whose confirmed
	// fills justify the exported amounts (replay-idempotency / audit).
	FillRef ids.ID `json:"fillRef"`
}

type ImportTx struct {
	BaseTx
	SourceChain    ids.ID         `json:"sourceChain"`
	ImportedInputs []AtomicInput  `json:"importedInputs"`
	Outputs        []AtomicOutput `json:"outputs"`
}

type PlaceOrderTx struct {
	BaseTx
	// PoolID is the 32-byte market identity (V4 poolId) the d-chain keys by.
	PoolID [32]byte `json:"poolId"`
	Side   uint8    `json:"side"` // 0 = Buy/bid, 1 = Sell/ask
	Price  uint64   `json:"price"`
	Size   uint64   `json:"size"`
	// CollateralRef references the Import whose locked value backs this order.
	CollateralRef ids.ID `json:"collateralRef"`
}

type Rail uint8

type RelayOrderTx struct {
	BaseTx
	// Method is the ZAP CLOB method ("clob_submit", "clob_place", "clob_cancel").
	Method string `json:"method"`
	// Payload is the opaque, byte-identical clob_* frame forwarded verbatim.
	Payload []byte `json:"payload"`
	// CollateralRef references the Import whose locked value backs this order.
	CollateralRef ids.ID `json:"collateralRef"`
	// AssetOut is the REAL injective output-asset id the taker receives for a settling
	// clob_submit — the OPPOSITE side of the market this order trades on, the same
	// assetID(currency_out) the C-side ImportSettlement requires (recAsset==claim.Asset,
	// the id that keys seamReserve[assetOut]). The HIGH-1 fix: settleFromFills exports
	// the PROCEEDS leg under THIS id, NOT a SHA256(ref||leg) routing handle (which never
	// matched, so a swap's output was permanently unclaimable). It is keeper-asserted and
	// signature-bound (JSON-covered by SigningBytes); a wrong value can only break the
	// taker's OWN liveness — ImportSettlement equality-rejects a mismatched asset (no
	// theft, no mint), the same bounded surface as the carried-fills proposer-trust model.
	// PriceLimit is the worst-acceptable CLOB price (quote-per-base, float64-bits) for a
	// settling clob_submit, derived from the V4 SqrtPriceLimitX96. settleFromFills refuses
	// any carried fill WORSE than this (BUY: price above the limit; SELL: price below it),
	// enforcing the taker's slippage floor against a sandwich/MEV move. Zero = no limit.
	// LimitIsUpper records the direction the limit bounds (true: reject price ABOVE the
	// limit, the BUY/exact-input ceiling; false: reject price BELOW it, the SELL floor).
	// Empty/zero for place/cancel (non-settling) relays.
	AssetOut     ids.ID `json:"assetOut,omitempty"`
	PriceLimit   uint64 `json:"priceLimit,omitempty"`
	LimitIsUpper bool   `json:"limitIsUpper,omitempty"`
}

type Tx interface {
	// ID returns the unique identifier for this transaction.
	ID() ids.ID
	// Type returns the transaction type.
	Type() TxType
	// Sender returns the sender's address.
	Sender() ids.ShortID
	// Timestamp returns when the transaction was created.
	Timestamp() int64
	// Bytes returns the serialized transaction.
	Bytes() []byte
	// Verify validates the transaction.
	Verify() error
}

type TxParser struct{}

type TxType uint8