feat(svm): optimize upto facilitator settlements with transaction v1

go/.changes/unreleased/changed-20260914-svm-exact-transaction-versions.yaml

@@ -0,0 +1,3 @@
+kind: changed
+body: 'SVM exact: facilitators (current and legacy x402 v1 wire) advertise extra.transactionVersions ([0]) in /supported, servers copy it into PaymentRequirements.extra, clients build an advertised version and refuse a facilitator that accepts none they can build, and verifiers reject any message version other than legacy or 0 with unsupported_transaction_version before inspecting signatures or instructions. Legacy messages remain accepted for backward compatibility but are deprecated and never advertised.'
+time: 2026-09-14T12:00:00Z

go/.changes/unreleased/changed-20260914-svm-upto-transaction-versions.yaml

@@ -0,0 +1,3 @@
+kind: changed
+body: 'SVM upto: negotiate version 0 for client-built opens (an unsupported open message version is rejected with unsupported_transaction_version) while independently building facilitator claim/reclaim transactions as v1 with inline resource limits; the settlement loaded-account-data budget defaults to 4 MiB and is configurable via SettleLoadedAccountsDataSizeLimit; reclaim cleanup now greedily packs against the 4,096-byte wire, 64-account, and 64-instruction ceilings.'
+time: 2026-09-14T12:05:00Z

go/.changes/unreleased/changed-20261026-svm-batch-transaction-versions.yaml

@@ -0,0 +1,3 @@
+kind: changed
+body: 'SVM batch-settlement: the facilitator advertises transactionVersions ([0]) in /supported, and the client refuses to build deposits, top-ups, or refunds with unsupported_transaction_version when the advertised set excludes every version it can build. The upto facilitator now advertises a copy of the version list instead of the shared slice.'
+time: 2026-10-26T12:00:00Z

go/.changes/unreleased/fixed-svm-v1-reclaim-batch-limit.yaml

@@ -0,0 +1,3 @@
+kind: fixed
+body: 'Honor explicit MaxReclaimsPerTx values above 16 for SVM v1 rent cleanup, including the public upto manager, with batches bounded by actual wire, account, and instruction limits. V1 cleanup now defaults to DefaultMaxReclaimsPerTxV1 (62), the most reclaims that fit one v1 transaction with a shared fee and rent payer; v0 keeps its default of 8, nonpositive-value fallback, and cap of 16.'
+time: 2026-10-07T16:27:54Z

go/.changes/unreleased/svm-channel-transaction-version-gates.yaml

@@ -0,0 +1,3 @@
+kind: fixed
+body: Reject unsupported transaction versions before inspecting client-supplied SVM top-up and request-close transactions.
+time: 2026-10-07T16:27:54Z

go/go.mod

@@ -7,7 +7,7 @@ toolchain go1.24.1
 require (
 	github.com/ethereum/go-ethereum v1.17.2
 	github.com/gagliardetto/binary v0.8.0
-	github.com/gagliardetto/solana-go v1.14.0
+	github.com/gagliardetto/solana-go v1.23.0
 	github.com/gin-gonic/gin v1.11.0
 	github.com/modelcontextprotocol/go-sdk v1.3.0
 	github.com/quic-go/quic-go v0.55.0 // indirect; Security fix for GHSA-47m2-4cr7-mhcw
@@ -18,18 +18,18 @@ require (
 require github.com/google/uuid v1.6.0
 
 require (
-	filippo.io/edwards25519 v1.0.0-rc.1
+	filippo.io/edwards25519 v1.2.0
 	github.com/labstack/echo/v4 v4.15.1
 	github.com/mr-tron/base58 v1.2.0
 	github.com/signinwithethereum/siwe-go v1.0.0
-	golang.org/x/net v0.48.0
+	golang.org/x/net v0.49.0
 )
 
 require (
 	github.com/Microsoft/go-winio v0.6.2 // indirect
 	github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20251001021608-1fe7b43fc4d6 // indirect
 	github.com/StackExchange/wmi v1.2.1 // indirect
-	github.com/andres-erbsen/clock v0.0.0-20160526145045-9e14626cd129 // indirect
+	github.com/benbjohnson/clock v1.3.5 // indirect
 	github.com/bits-and-blooms/bitset v1.20.0 // indirect
 	github.com/blendle/zapdriver v1.3.1 // indirect
 	github.com/bytedance/sonic v1.14.0 // indirect
@@ -42,7 +42,7 @@ require (
 	github.com/deckarep/golang-set/v2 v2.6.0 // indirect
 	github.com/decred/dcrd/dcrec/secp256k1/v4 v4.1.0 // indirect
 	github.com/ethereum/c-kzg-4844/v2 v2.1.6 // indirect
-	github.com/fatih/color v1.16.0 // indirect
+	github.com/fatih/color v1.18.0 // indirect
 	github.com/gabriel-vasile/mimetype v1.4.8 // indirect
 	github.com/gagliardetto/treeout v0.1.4 // indirect
 	github.com/gin-contrib/sse v1.1.0 // indirect
@@ -52,13 +52,13 @@ require (
 	github.com/go-playground/locales v0.14.1 // indirect
 	github.com/go-playground/universal-translator v0.18.1 // indirect
 	github.com/go-playground/validator/v10 v10.27.0 // indirect
-	github.com/goccy/go-json v0.10.4 // indirect
+	github.com/goccy/go-json v0.10.6 // indirect
 	github.com/goccy/go-yaml v1.18.0 // indirect
 	github.com/google/jsonschema-go v0.4.2 // indirect
-	github.com/gorilla/websocket v1.4.2 // indirect
+	github.com/gorilla/websocket v1.5.3 // indirect
 	github.com/holiman/uint256 v1.3.2 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
-	github.com/klauspost/compress v1.17.8 // indirect
+	github.com/klauspost/compress v1.18.0 // indirect
 	github.com/klauspost/cpuid/v2 v2.3.0 // indirect
 	github.com/labstack/gommon v0.4.2 // indirect
 	github.com/leodido/go-urn v1.4.0 // indirect
@@ -69,11 +69,12 @@ require (
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/mostynb/zstdpool-freelist v0.0.0-20201229113212-927304c0c3b1 // indirect
+	github.com/oasisprotocol/curve25519-voi v0.0.0-20251114093237-2ab5a27a1729 // indirect
 	github.com/pelletier/go-toml/v2 v2.2.4 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/quic-go/qpack v0.5.1 // indirect
 	github.com/shirou/gopsutil v3.21.4-0.20210419000835-c7a38de76ee5+incompatible // indirect
-	github.com/streamingfast/logging v0.0.0-20230608130331-f22c91403091 // indirect
+	github.com/streamingfast/logging v0.0.0-20250404134358-92b15d2fbd2e // indirect
 	github.com/supranational/blst v0.3.16 // indirect
 	github.com/tklauser/go-sysconf v0.3.12 // indirect
 	github.com/tklauser/numcpus v0.6.1 // indirect
@@ -84,25 +85,24 @@ require (
 	github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f // indirect
 	github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
 	github.com/yosida95/uritemplate/v3 v3.0.2 // indirect
-	go.mongodb.org/mongo-driver v1.12.2 // indirect
+	go.mongodb.org/mongo-driver/v2 v2.5.0 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
 	go.opentelemetry.io/otel v1.40.0 // indirect
 	go.opentelemetry.io/otel/metric v1.40.0 // indirect
 	go.opentelemetry.io/otel/trace v1.40.0 // indirect
-	go.uber.org/atomic v1.7.0 // indirect
-	go.uber.org/multierr v1.6.0 // indirect
-	go.uber.org/ratelimit v0.2.0 // indirect
-	go.uber.org/zap v1.21.0 // indirect
+	go.uber.org/multierr v1.11.0 // indirect
+	go.uber.org/ratelimit v0.3.1 // indirect
+	go.uber.org/zap v1.27.0 // indirect
 	golang.org/x/arch v0.20.0 // indirect
-	golang.org/x/crypto v0.46.0 // indirect
-	golang.org/x/mod v0.30.0 // indirect
-	golang.org/x/oauth2 v0.30.0 // indirect
+	golang.org/x/crypto v0.47.0 // indirect
+	golang.org/x/mod v0.31.0 // indirect
+	golang.org/x/oauth2 v0.34.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
 	golang.org/x/sys v0.40.0 // indirect
-	golang.org/x/term v0.38.0 // indirect
-	golang.org/x/text v0.32.0 // indirect
+	golang.org/x/term v0.39.0 // indirect
+	golang.org/x/text v0.33.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
-	golang.org/x/tools v0.39.0 // indirect
+	golang.org/x/tools v0.40.0 // indirect
 	google.golang.org/protobuf v1.36.11 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )