Use solana GOR token payments to deploy apps (#1)

Part of https://www.notion.so/Laconic-Mainnet-Plan-1eca6b22d47280569cd0d1e6d711d949

Co-authored-by: Shreerang Kale <shreerangkale@gmail.com>
Co-authored-by: Nabarun <nabarun@deepstacksoft.com>
Reviewed-on: #1
Co-authored-by: shreerang <shreerang@noreply.git.vdb.to>
Co-committed-by: shreerang <shreerang@noreply.git.vdb.to>

src/utils/solanaVerify.ts

@@ -0,0 +1,131 @@
+import BN from 'bn.js';
+
+import { Connection, PublicKey } from '@solana/web3.js';
+import { getAssociatedTokenAddressSync, TOKEN_PROGRAM_ID } from '@solana/spl-token';
+
+// Simplified transaction info extraction following reference implementation
+const extractTxInfo = async (connection: Connection, transactionSignature: string): Promise<{ authority: string; amount: string }> => {
+  const result = await connection.getParsedTransaction(transactionSignature, 'confirmed');
+
+  if (!result) {
+    throw new Error('Transaction not found');
+  }
+
+  const transferInstruction = result.transaction.message.instructions.find(
+    (instr) => 'parsed' in instr && instr.programId.equals(TOKEN_PROGRAM_ID)
+  );
+
+  if (!transferInstruction || !('parsed' in transferInstruction)) {
+    throw new Error('Transfer instruction not found');
+  }
+
+  const { info: { amount, authority } } = transferInstruction.parsed;
+  return { authority, amount };
+};
+
+export const verifyUnusedSolanaPayment = async (
+  connection: Connection,
+  transactionSignature: string,
+  tokenAmount: BN
+): Promise<{
+  valid: boolean,
+  reason?: string,
+  amount?: string,
+  sender?: string
+}> => {
+  try {
+    // TODO: Check if provided signature is already used
+
+    // Fetch transaction details
+    const transactionResult = await connection.getParsedTransaction(transactionSignature, 'confirmed');
+
+    if (!transactionResult) {
+      return {
+        valid: false,
+        reason: 'Transaction not found on Solana blockchain'
+      };
+    }
+
+    // Check if transaction was successful
+    if (transactionResult.meta?.err) {
+      return {
+        valid: false,
+        reason: `Transaction failed: ${JSON.stringify(transactionResult.meta.err)}`
+      };
+    }
+
+    // Check transaction timestamp (5-minute window)
+    const txTimestamp = transactionResult.blockTime ? new Date(transactionResult.blockTime * 1000) : null;
+    if (!txTimestamp) {
+      return {
+        valid: false,
+        reason: 'Transaction timestamp not available'
+      };
+    }
+
+    const now = new Date();
+    const timeDiffMs = now.getTime() - txTimestamp.getTime();
+    const timeWindowMs = 5 * 60 * 1000; // 5 minutes
+
+    if (timeDiffMs > timeWindowMs) {
+      return {
+        valid: false,
+        reason: `Transaction is older than 5 minutes (${Math.round(timeDiffMs / 60000)} minutes old)`
+      };
+    }
+
+    // Extract transaction info using simplified approach
+    const { amount, authority } = await extractTxInfo(connection, transactionSignature);
+
+    // Verify amount using BN comparison like in reference
+    const transactionAmount = new BN(amount);
+    if (transactionAmount.lt(tokenAmount)) {
+      return {
+        valid: false,
+        reason: `Payment amount (${amount}) is less than required (${tokenAmount.toString()})`
+      };
+    }
+
+    const expectedTokenAccount = getAssociatedTokenAddressSync(
+      new PublicKey(process.env.NEXT_PUBLIC_SOLANA_TOKEN_MINT_ADDRESS!),
+      new PublicKey(process.env.NEXT_PUBLIC_SOLANA_TOKEN_RECIPIENT_ADDRESS!),
+      // Allow recipient account address to be off the curve (i.e now having a private key)
+      true
+    );
+
+    // Verify recipient address by checking the transaction instructions
+    let foundValidTransfer = false;
+
+    for (const instruction of transactionResult.transaction.message.instructions) {
+      if ('parsed' in instruction && instruction.programId.equals(TOKEN_PROGRAM_ID)) {
+        const parsed = instruction.parsed;
+        if (parsed.type === 'transferChecked' || parsed.type === 'transfer') {
+          // Verify amount and recipient's associated token address
+          if (parsed.info.amount === amount && parsed.info.destination === expectedTokenAccount.toBase58() ) {
+            foundValidTransfer = true;
+            break;
+          }
+        }
+      }
+    }
+
+    if (!foundValidTransfer) {
+      return {
+        valid: false,
+        reason: 'Valid Solana token transfer not found in transaction'
+      };
+    }
+
+    return {
+      valid: true,
+      amount,
+      sender: authority
+    };
+  } catch (error) {
+    console.error('Error verifying Solana payment:', error);
+    return {
+      valid: false,
+      reason: `Failed to verify transaction: ${error instanceof Error ? error.message : 'Unknown error'}`
+    };
+  }
+};