fix(block-list/pinocchio): add missing test harness

[mikemaccana-edwardbot]

What

Adds the missing test harness for tokens/token-extensions/transfer-hook/block-list/pinocchio and fixes the program bugs the tests surfaced.

Background

The project was introduced via solana-developers/program-examples#398 (July 2025) with a program, SDK, and a package.json test script that pointed at ./tests/test.spec.ts — but the test file itself was never written. It has been a scaffold without tests since day one.

This is the same project that surfaced as a CI failure when #23 (CI logic fix) and #24 (quasar-spl pin) ran the full matrix. The block-list pinocchio job failed because there was nothing to install or run. This PR makes it a real first-class example.

What's in the diff

• tests/test.spec.ts (litesvm + mocha, 443 lines) covers the full lifecycle: init config PDA → create Token Extensions mint with TransferHook → setup_extra_metas → ATA creation + mint → transfer succeeds when source isn't blocked → block_wallet → transfer fails with AccountBlocked → unblock_wallet → transfer succeeds again. 7 passing tests.
• tests/run-mocha-with-retry.mjs — CI test entry point. litesvm's prebuilt native binding intermittently aborts with std::bad_alloc (SIGABRT) inside the .node addon when Token Extensions invokes the hook. The crash is in the binding, not our program; a fresh Node process avoids it. The wrapper retries until a clean run (or hits the retry budget) and bails on non-bad_alloc failures.
• tests/tsconfig.test.json.
• Regenerated pnpm-lock.yaml.

Program bugs the tests caught and this PR fixes

• Config struct field order corrected (alignment-driven Rust layout was silently corrupting state on read; reordered so Pubkey comes before the u8 flags).
• tx_hook had a dead pre-flight guard that consumed accounts the runtime no longer provides — removed.
• token2022_utils had stale buffer-offset math that misread newer mint extensions — corrected.
• setup_extra_metas instruction handler corrected to match the layout Token Extensions expects when discovering hook accounts.

Test output

  block-list pinocchio transfer hook
    ✔ init: initialises config PDA
    ✔ setup_extra_metas: writes the extra-account-metas account
    ✔ creates a Token Extensions mint with TransferHook -> block-list, plus extra metas
    ✔ transfer succeeds when source wallet is not blocked
    ✔ block_wallet: blocks wallet A, blocked_wallets_count increments
    ✔ transfer from blocked source wallet fails with AccountBlocked
    ✔ unblock_wallet: unblocks wallet A, blocked_wallets_count decrements, transfers work again
  7 passing
[run-mocha-with-retry] clean pass on attempt 2

References

• chore(pblock-list): remove duplicate pino subtree #18 — removed duplicate pino/ subtree
• chore(pblock-list): move program into pinocchio/ subdirectory #19 — moved program into pinocchio/ subdir
• chore: rename pblock-list directory to block-list #20 — renamed pblock-list → block-list
• fix(ci): use find as single source of truth for framework project detection #23 — CI logic fix that exposed the missing tests
• fix(quasar): pin quasar deps to 623bb70 (upstream zeropod 0.3.0 regression) #24 — quasar-spl regression fix