[edo-chan]

Summary

Import the Solana TypeScript protocol SDK authorization-lock changes from swig-ts#193 into the four packages under solana/typescript/packages/. Source pin: swig-ts@96dd3470c6fe2b6a7bcd2db8287d6e55c73a3914.

The port adds lock instruction builders, permission and tail codecs, account helpers, and tests. This PR also aligns strict tail validation with the pinned program, selects the session signer as the default payer for lock calls, and forwards user pre/post instructions across Ed25519, secp256k1, and secp256r1 builders. The secp256r1 verification instruction remains immediately before the Swig instruction.

Validation

• bun run build, bun run typecheck, bun run lint, and bun run format: pass.
• bun run test: 456 passed, 1 skipped, 0 failed. Runtime cases cover Ed25519, session key, signed secp256k1 and secp256r1, ProgramExec, SPL Token, Token-2022, exact balance rejection with unchanged account bytes, and lock removal.
• Packed all four npm packages and verified Node default/CJS imports, strict NodeNext/bundler consumers, codecs, and negative type cases.
• Independent re-review of the final local tree found no concrete merge blocker.
• git diff --check: pass.

Release note

The matching on-chain implementation is still open in swig-wallet#226, and this repository currently pins its program fixture to that branch. Repin to the merged on-chain revision before releasing these SDK changes. The source swig-wallet repository is outside this merge.