@across-protocol/sdk 4.4.11 → 4.4.13

package/dist/types/src/clients/BundleDataClient/utils/FillUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FillUtils.d.ts","sourceRoot":"","sources":["../../../../../../src/clients/BundleDataClient/utils/FillUtils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAwD,OAAO,EAAiB,MAAM,gBAAgB,CAAC;AAC9G,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;GAGG;AACH,KAAK,wBAAwB,GAAG,IAAI,GAAG;IAAE,aAAa,EAAE,OAAO,CAAA;CAAE,CAAC;AAElE;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,wBAAwB,EACnC,aAAa,EAAE,aAAa,EAC5B,wBAAwB,EAAE,MAAM,GAC/B;IACD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,OAAO,CAAC;CACzB,CA+BA;AACD;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,aAAa,EACpB,wBAAwB,EAAE,SAAS,CAAC,QAAQ,GAAG,WAAW,EAC1D,cAAc,EAAE,gBAAgB,EAChC,aAAa,EAAE,aAAa,EAC5B,wBAAwB,EAAE,MAAM,GAC/B,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAqEpC"}
+{"version":3,"file":"FillUtils.d.ts","sourceRoot":"","sources":["../../../../../../src/clients/BundleDataClient/utils/FillUtils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAKL,OAAO,EACP,UAAU,EAEX,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,UAAU,EAGE,CAAC;AAE7C;;;GAGG;AACH,KAAK,wBAAwB,GAAG,IAAI,GAAG;IAAE,aAAa,EAAE,OAAO,CAAA;CAAE,CAAC;AAElE;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,wBAAwB,EACnC,aAAa,EAAE,aAAa,EAC5B,wBAAwB,EAAE,MAAM,GAC/B;IACD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,OAAO,CAAC;CACzB,CA+BA;AACD;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,aAAa,EACpB,wBAAwB,EAAE,SAAS,CAAC,QAAQ,GAAG,WAAW,EAC1D,cAAc,EAAE,gBAAgB,EAChC,aAAa,EAAE,aAAa,EAC5B,wBAAwB,EAAE,MAAM,GAC/B,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CA0EpC"}

package/dist/types/src/providers/retryProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"retryProvider.d.ts","sourceRoot":"","sources":["../../../../src/providers/retryProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAO1D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,qBAAa,aAAc,SAAQ,MAAM,CAAC,SAAS,CAAC,qBAAqB;IAKrE,QAAQ,CAAC,mBAAmB,EAAE,MAAM;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM;IAO/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IAd1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB,EAAE,CAAC;gBAE3D,MAAM,EAAE,qBAAqB,CAAC,OAAO,MAAM,CAAC,SAAS,CAAC,qBAAqB,CAAC,EAAE,EAC9E,OAAO,EAAE,MAAM,EACN,mBAAmB,EAAE,MAAM,EAC3B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,cAAc,EAAE,MAAM,EAC/B,sBAAsB,EAAE,MAAM,EAC9B,iBAAiB,EAAE,MAAM,EACzB,WAAW,CAAC,EAAE,yBAAyB,EACvC,wBAAwB,CAAC,EAAE,MAAM,EACjC,kBAAkB,CAAC,EAAE,MAAM,EAC3B,gBAAgB,SAAqB,EAC5B,MAAM,CAAC,EAAE,MAAM,YAAA;IA2CX,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAqK7E,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO;IAO1E,gBAAgB,CACpB,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB,EAChD,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GACrB,OAAO,CAAC,OAAO,CAAC;IAiBnB;;;;;OAKG;IACH,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO;IAgC7D,QAAQ,CACZ,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB,EAChD,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GACrB,OAAO,CAAC,OAAO,CAAC;IAiBnB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,MAAM;CAqB3D"}
+{"version":3,"file":"retryProvider.d.ts","sourceRoot":"","sources":["../../../../src/providers/retryProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAa1D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,qBAAa,aAAc,SAAQ,MAAM,CAAC,SAAS,CAAC,qBAAqB;IAKrE,QAAQ,CAAC,mBAAmB,EAAE,MAAM;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM;IAO/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IAd1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB,EAAE,CAAC;gBAE3D,MAAM,EAAE,qBAAqB,CAAC,OAAO,MAAM,CAAC,SAAS,CAAC,qBAAqB,CAAC,EAAE,EAC9E,OAAO,EAAE,MAAM,EACN,mBAAmB,EAAE,MAAM,EAC3B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,cAAc,EAAE,MAAM,EAC/B,sBAAsB,EAAE,MAAM,EAC9B,iBAAiB,EAAE,MAAM,EACzB,WAAW,CAAC,EAAE,yBAAyB,EACvC,wBAAwB,CAAC,EAAE,MAAM,EACjC,kBAAkB,CAAC,EAAE,MAAM,EAC3B,gBAAgB,SAAqB,EAC5B,MAAM,CAAC,EAAE,MAAM,YAAA;IA2CX,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAgL7E,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO;IAO1E,gBAAgB,CACpB,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB,EAChD,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GACrB,OAAO,CAAC,OAAO,CAAC;IAiBnB;;;;;OAKG;IACH,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO;IAgC7D,QAAQ,CACZ,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB,EAChD,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GACrB,OAAO,CAAC,OAAO,CAAC;IAiBnB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,MAAM;CAqB3D"}

package/dist/types/src/providers/solana/utils.d.ts

@@ -65,7 +65,8 @@ export interface JitoInterface extends SolanaRpcApi {
 }
 /**
  * Render an RPC error for log/wrap messages. For SolanaErrors, includes the numeric JSON-RPC
- * code alongside the server message; otherwise falls back to stack/toString.
+ * code alongside the server message; otherwise falls back to a short, log-safe summary
+ * (`error.stack` / `error.toString()` can embed the failed RPC URL, including its API key).
  */
 export declare function formatRpcError(error: unknown): string;
 /**

package/dist/types/src/providers/solana/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../../src/providers/solana/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ3C;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAElC,OAAO,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;IAIlC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;CAChC;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,qBAAqB,EAAE,iBAAiB,EAAE,CAAC;IAC3C,oBAAoB,EAAE,iBAAiB,EAAE,CAAC;IAC1C,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAGF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,KAAK,EAAE;QACL,OAAO,EAAE,WAAW,GAAG;YAAE,MAAM,EAAE;gBAAE,KAAK,EAAE;oBAAE,kBAAkB,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;iBAAE,CAAC;gBAAC,YAAY,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;QACpH,kBAAkB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;KAC9C,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAErD,2BAA2B,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IAC9F,4BAA4B,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;CAChG,CAAC;AAGF,MAAM,WAAW,aAAc,SAAQ,YAAY;IAEjD,cAAc,CAAC,YAAY,EAAE;QAAE,mBAAmB,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,sBAAsB,CAAC;CAChH;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQrD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAkB3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAe1E"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../../src/providers/solana/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAElC,OAAO,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;IAIlC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;CAChC;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,qBAAqB,EAAE,iBAAiB,EAAE,CAAC;IAC3C,oBAAoB,EAAE,iBAAiB,EAAE,CAAC;IAC1C,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAGF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,KAAK,EAAE;QACL,OAAO,EAAE,WAAW,GAAG;YAAE,MAAM,EAAE;gBAAE,KAAK,EAAE;oBAAE,kBAAkB,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;iBAAE,CAAC;gBAAC,YAAY,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;QACpH,kBAAkB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;KAC9C,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAErD,2BAA2B,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IAC9F,4BAA4B,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;CAChG,CAAC;AAGF,MAAM,WAAW,aAAc,SAAQ,YAAY;IAEjD,cAAc,CAAC,YAAY,EAAE;QAAE,mBAAmB,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,sBAAsB,CAAC;CAChH;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAOrD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAkB3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAe1E"}

package/dist/types/src/providers/utils.d.ts

@@ -33,6 +33,18 @@ export interface RateLimitTask {
  */
 export declare function formatProviderError(provider: providers.StaticJsonRpcProvider, rawErrorText: string): string;
 export declare function createSendErrorWithMessage(message: string, sendError: unknown): Error;
+/**
+ * Render a single-line, log-safe summary of a provider error.
+ *
+ * Prefers the parsed JSON-RPC error message (e.g. `execution reverted: …`),
+ * falling back to ethers' short `.reason` and `.code` fields. Avoids
+ * `err.message` / `err.stack` for ethers-shaped errors because, at the
+ * transport layer, they embed the failed RPC URL with its API key.
+ *
+ * The original error remains reachable via `error.cause` on the aggregate
+ * thrown error, so callers that want full forensic detail still have it.
+ */
+export declare function summarizeProviderError(err: unknown): string;
 /**
  * Validate and parse a possible JSON-RPC error response.
  * @param error An unknown error object received in response to a JSON-RPC request.

package/dist/types/src/providers/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/providers/utils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGnC,OAAO,EAA0B,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAiB5E;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,IAAI,WAAW,CAE7E;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CACpB,QAAQ,EAAE,WAAW,EACrB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,YAAsB,GAChC,MAAM,CAIR;AAmBD,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,MAAM,EAAE,EACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAOT;AAED,wBAAgB,kCAAkC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAUnH;AA8BD;;GAEG;AACH,MAAM,WAAW,aAAa;IAE5B,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAInC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,qBAAqB,EAAE,YAAY,EAAE,MAAM,UAElG;AAID,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,KAAK,CAErF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,CAelH;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAkBnG;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAEvG;AAED,oBAAY,SAAS;IACnB,IAAI,IAAA,CAAE,eAAe;IACrB,QAAQ,IAAA,CAAE,iBAAiB;IAC3B,MAAM,IAAA,CAAE,0BAA0B;IAClC,oBAAoB,IAAA;CACrB"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/providers/utils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGnC,OAAO,EAA0B,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAiB5E;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,IAAI,WAAW,CAE7E;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CACpB,QAAQ,EAAE,WAAW,EACrB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,YAAsB,GAChC,MAAM,CAIR;AAmBD,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,MAAM,EAAE,EACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAOT;AAED,wBAAgB,kCAAkC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAUnH;AA8BD;;GAEG;AACH,MAAM,WAAW,aAAa;IAE5B,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAInC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,qBAAqB,EAAE,YAAY,EAAE,MAAM,UAElG;AAID,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,KAAK,CAErF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAoC3D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,CAelH;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAkBnG;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAEvG;AAED,oBAAY,SAAS;IACnB,IAAI,IAAA,CAAE,eAAe;IACrB,QAAQ,IAAA,CAAE,iBAAiB;IAC3B,MAAM,IAAA,CAAE,0BAA0B;IAClC,oBAAoB,IAAA;CACrB"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@across-protocol/sdk",
   "author": "UMA Team",
-  "version": "4.4.11",
+  "version": "4.4.13",
   "license": "AGPL-3.0",
   "homepage": "https://docs.across.to/reference/sdk",
   "repository": {

package/src/arch/svm/eventsClient.ts

@@ -17,6 +17,20 @@ import { Deposit, DepositWithTime, Fill, FillWithTime } from "../../interfaces";
 import { unwrapEventData } from "./";
 import assert from "assert";
 
+/**
+ * Anchor emits CPI events (`emit_cpi!`) as a *self*-invocation of the program that targets its
+ * `__event_authority` PDA and prefixes the instruction data with this fixed 8-byte discriminator,
+ * followed by the 8-byte event discriminator and the Borsh event payload. The wire bytes are the
+ * little-endian encoding of Anchor's `EVENT_IX_TAG: u64 = 0x1d9acb512ea545e4` (the first 8 bytes of
+ * `sha256("anchor:event")` read as a big-endian u64) — i.e. the digest prefix in *reversed* byte
+ * order. Checking this prefix is what proves an inner instruction is a genuine emitted event and
+ * not just some other instruction that happens to touch the program. Without it, any program can
+ * forge an event by CPI-ing into the SpokePool with the event authority passed as the sole account
+ * and attacker-controlled trailing data (e.g. via the read-only `GetUnsafeDepositId` instruction),
+ * which the client would otherwise decode as a real FundsDeposited/FilledRelay event.
+ */
+const ANCHOR_CPI_EVENT_DISCRIMINATOR = Buffer.from([0xe4, 0x45, 0xa5, 0x2e, 0x51, 0xcb, 0x9a, 0x1d]);
+
 // Utility type to extract the return type for the JSON encoding overload. We only care about the overload where the
 // configuration parameter (C) has the optional property 'encoding' set to 'json'.
 type ExtractJsonOverload<T> = T extends (signature: infer _S, config: infer C) => infer R
@@ -213,7 +227,17 @@ export class SvmCpiEventsClient {
           this.programEventAuthority === singleIxAccount
         ) {
           const ixData = bs58.decode(ix.data);
-          // Skip the first 8 bytes (assumed header) and encode the rest.
+          // Only decode genuine Anchor CPI events. The instruction data of an emitted event is
+          // prefixed with the Anchor event discriminator; requiring it prevents an arbitrary CPI
+          // into the program (with the event authority as its sole account and crafted trailing
+          // bytes) from being decoded as a forged event.
+          if (
+            ixData.length < ANCHOR_CPI_EVENT_DISCRIMINATOR.length ||
+            !ANCHOR_CPI_EVENT_DISCRIMINATOR.equals(Buffer.from(ixData.slice(0, ANCHOR_CPI_EVENT_DISCRIMINATOR.length)))
+          ) {
+            continue;
+          }
+          // Skip the 8-byte Anchor event discriminator and decode the remaining event payload.
           const eventData = Buffer.from(ixData.slice(8)).toString("base64");
           const { name, data } = decodeEvent(this.idl, eventData);
           events.push({ program: this.programAddress, name, data });

package/src/clients/BundleDataClient/BundleDataClient.ts

@@ -49,6 +49,7 @@ import {
 } from "../../utils";
 import winston from "winston";
 import {
+  BLOCKED_ADDRESSES,
   BundleDataSS,
   BundleData as PersistedArweaveBundleData,
   getRefundInformationFromFill,
@@ -71,6 +72,11 @@ function updateExpiredDepositsV3(dict: ExpiredDepositsToRefundV3, deposit: V3Dep
     return;
   }
 
+  // Protocol rule: never refund deposits from blocked depositors.
+  if (BLOCKED_ADDRESSES.some((blockedAddress) => blockedAddress.eq(deposit.depositor))) {
+    return;
+  }
+
   const { originChainId, inputToken } = deposit;
   dict[originChainId] ??= {};
   dict[originChainId][inputToken.toBytes32()] ??= [];
@@ -149,6 +155,12 @@ function updateBundleSlowFills(dict: BundleSlowFills, deposit: V3DepositWithBloc
     return;
   }
 
+  // Protocol rule: never slow fill deposits with blocked recipients; the deposit instead expires and is
+  // refunded to the depositor.
+  if (BLOCKED_ADDRESSES.some((blockedAddress) => blockedAddress.eq(deposit.recipient))) {
+    return;
+  }
+
   const { destinationChainId, outputToken } = deposit;
   dict[destinationChainId] ??= {};
   dict[destinationChainId][outputToken.toBytes32()] ??= [];

package/src/clients/BundleDataClient/utils/FillUtils.ts

@@ -2,10 +2,27 @@ import _ from "lodash";
 import assert from "assert";
 import { providers } from "ethers";
 import { DepositWithBlock, Fill, FillWithBlock } from "../../../interfaces";
-import { isSlowFill, isValidEvmAddress, isDefined, chainIsEvm, Address, toAddressType } from "../../../utils";
+import {
+  isSlowFill,
+  isValidEvmAddress,
+  isDefined,
+  chainIsEvm,
+  Address,
+  EvmAddress,
+  toAddressType,
+} from "../../../utils";
 import { HubPoolClient } from "../../HubPoolClient";
 import { SVMProvider } from "../../../arch/svm";
 
+/**
+ * @notice Addresses that must never be paid out of a root bundle (as repayment, deposit refund, or slow fill).
+ * Protocol rule: all proposers and validators must apply this list identically.
+ */
+export const BLOCKED_ADDRESSES: EvmAddress[] = [
+  "0xA6fb971F3B7a9b9F76EdA76bc89268fe26560189",
+  "0xa0c0e9f307b5a26ca3fb5891c19154fc7a02bef7",
+].map((address) => EvmAddress.from(address));
+
 /**
  * @notice FillRepaymentInformation is a fill with additional properties required to determine where it can
  * be repaid.
@@ -62,7 +79,7 @@ export function getRefundInformationFromFill(
  * @notice Verifies that the fill can be repaid. If the repayment address is not
  * valid for the requested repayment chain, then this function will attempt to change the fill's repayment chain
  * to the destination chain and its repayment address to the  msg.sender and if this is possible,
- * return the fill. Otherwise, return undefined.
+ * return the fill. Otherwise, return undefined. Fills repaying a BLOCKED_ADDRESSES entry are always unrepayable.
  * @param _fill Fill with a requested repayment chain and address
  * @return Fill with the applied repayment chain (depends on the validity of the requested repayment address)
  * and applied repayment address, or undefined if the applied repayment address is not valid for the
@@ -139,6 +156,11 @@ export async function verifyFillRepayment(
     }
   }
 
+  // Protocol rule: never repay blocked addresses (checked after any msg.sender overwrite above).
+  if (BLOCKED_ADDRESSES.some((blockedAddress) => blockedAddress.eq(fill.relayer))) {
+    return undefined;
+  }
+
   // Repayment address is now valid and repayment chain is either origin chain for lite chain or the destination
   // chain for cases where the repayment address was invalid. Fill should be valid now.
   fill.repaymentChainId = repaymentChainId;

package/src/providers/retryProvider.ts

@@ -4,7 +4,13 @@ import { CHAIN_IDs } from "../constants";
 import { delay, isDefined, isPromiseFulfilled, isPromiseRejected } from "../utils";
 import { getOriginFromURL } from "../utils/NetworkUtils";
 import { CacheProvider } from "./cachedProvider";
-import { compareRpcResults, createSendErrorWithMessage, formatProviderError, parseJsonRpcError } from "./utils";
+import {
+  compareRpcResults,
+  createSendErrorWithMessage,
+  formatProviderError,
+  parseJsonRpcError,
+  summarizeProviderError,
+} from "./utils";
 import { PROVIDER_CACHE_TTL } from "./constants";
 import { Logger } from "winston";
 
@@ -82,9 +88,11 @@ export class RetryProvider extends ethers.providers.StaticJsonRpcProvider {
       return this._trySend(provider, method, params)
         .then((result): [ethers.providers.StaticJsonRpcProvider, unknown] => [provider, result])
         .catch((err: unknown) => {
-          // Append the provider and error to the error array.
-          // eslint-disable-next-line @typescript-eslint/no-explicit-any
-          errors.push([provider, (err as any)?.stack || err?.toString()]);
+          // Record a short, log-safe summary of the failure. We intentionally do not retain
+          // `err.stack` / `err.toString()` here: for ethers transport errors those embed the
+          // failed RPC URL (including its API key) and a multi-line stack trace, which then
+          // get concatenated into the aggregate error message and surfaced to logs.
+          errors.push([provider, summarizeProviderError(err)]);
 
           // If there are no new fallback providers to use, terminate the recursion by throwing an error.
           // Otherwise, we can try to call another provider.
@@ -128,7 +136,10 @@ export class RetryProvider extends ethers.providers.StaticJsonRpcProvider {
       return values[0][1];
     }
 
-    const getMismatchedProviders = (values: [ethers.providers.StaticJsonRpcProvider, unknown][]) => {
+    const getMismatchedProviders = (
+      quorumResult: unknown,
+      values: [ethers.providers.StaticJsonRpcProvider, unknown][]
+    ) => {
       return values
         .filter(([, result]) => !compareRpcResults(method, result, quorumResult))
         .map(([provider]) => getOriginFromURL(provider.connection.url));
@@ -153,10 +164,16 @@ export class RetryProvider extends ethers.providers.StaticJsonRpcProvider {
       });
     };
 
-    const throwQuorumError = (fallbackValues?: [ethers.providers.StaticJsonRpcProvider, unknown][]) => {
+    const throwQuorumError = (quorum?: {
+      quorumResult: unknown;
+      fallbackValues: [ethers.providers.StaticJsonRpcProvider, unknown][];
+    }) => {
       const errorTexts = errors.map(([provider, errorText]) => formatProviderError(provider, errorText));
       const successfulProviderUrls = values.map(([provider]) => getOriginFromURL(provider.connection.url));
-      const mismatchedProviders = getMismatchedProviders([...values, ...(fallbackValues || [])]);
+      // On the early-exit path (no fallback providers left) no quorum result exists to compare mismatches against.
+      const mismatchedProviders = quorum
+        ? getMismatchedProviders(quorum.quorumResult, [...values, ...quorum.fallbackValues])
+        : [];
       logQuorumMismatchOrFailureDetails(method, params, successfulProviderUrls, mismatchedProviders, errors);
       throw new Error(
         "Not enough providers agreed to meet quorum.\n" +
@@ -178,7 +195,7 @@ export class RetryProvider extends ethers.providers.StaticJsonRpcProvider {
         this._trySend(provider, method, params)
           .then((result): [ethers.providers.StaticJsonRpcProvider, unknown] => [provider, result])
           .catch((err) => {
-            errors.push([provider, err?.stack || err?.toString()]);
+            errors.push([provider, summarizeProviderError(err)]);
             throw new Error("No fallbacks during quorum search");
           })
       )
@@ -216,11 +233,11 @@ export class RetryProvider extends ethers.providers.StaticJsonRpcProvider {
 
     // If this count is less than we need for quorum, throw the quorum error.
     if (count < quorumThreshold) {
-      throwQuorumError(fallbackValues);
+      throwQuorumError({ quorumResult, fallbackValues });
     }
 
     // If we've achieved quorum, then we should still log the providers that mismatched with the quorum result.
-    const mismatchedProviders = getMismatchedProviders([...values, ...fallbackValues]);
+    const mismatchedProviders = getMismatchedProviders(quorumResult, [...values, ...fallbackValues]);
     const quorumProviders = [...values, ...fallbackValues]
       .filter(([, result]) => compareRpcResults(method, result, quorumResult))
       .map(([provider]) => getOriginFromURL(provider.connection.url));

package/src/providers/solana/utils.ts

@@ -6,6 +6,7 @@ import {
   SVM_LONG_TERM_STORAGE_SLOT_SKIPPED,
   SVM_TRANSACTION_PREFLIGHT_FAILURE,
 } from "../../arch/svm";
+import { summarizeProviderError } from "../utils";
 
 /**
  * This is the type we pass to define a Solana RPC request "task".
@@ -65,7 +66,8 @@ export interface JitoInterface extends SolanaRpcApi {
 
 /**
  * Render an RPC error for log/wrap messages. For SolanaErrors, includes the numeric JSON-RPC
- * code alongside the server message; otherwise falls back to stack/toString.
+ * code alongside the server message; otherwise falls back to a short, log-safe summary
+ * (`error.stack` / `error.toString()` can embed the failed RPC URL, including its API key).
  */
 export function formatRpcError(error: unknown): string {
   if (isSolanaError(error)) {
@@ -73,8 +75,7 @@ export function formatRpcError(error: unknown): string {
     const message = serverMessage ?? (error as { message?: string }).message ?? "";
     return `SolanaError [${code}]: ${message}`;
   }
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  return (error as any)?.stack || (error as any)?.toString?.() || String(error);
+  return summarizeProviderError(error);
 }
 
 /**

package/src/providers/utils.ts

@@ -147,6 +147,55 @@ export function createSendErrorWithMessage(message: string, sendError: unknown):
   return new Error(message, { cause: sendError });
 }
 
+/**
+ * Render a single-line, log-safe summary of a provider error.
+ *
+ * Prefers the parsed JSON-RPC error message (e.g. `execution reverted: …`),
+ * falling back to ethers' short `.reason` and `.code` fields. Avoids
+ * `err.message` / `err.stack` for ethers-shaped errors because, at the
+ * transport layer, they embed the failed RPC URL with its API key.
+ *
+ * The original error remains reachable via `error.cause` on the aggregate
+ * thrown error, so callers that want full forensic detail still have it.
+ */
+export function summarizeProviderError(err: unknown): string {
+  if (err === null || err === undefined) {
+    return "unknown error";
+  }
+  if (typeof err === "string") {
+    return err;
+  }
+  if (typeof err !== "object") {
+    return String(err);
+  }
+  const e = err as { error?: unknown; reason?: string; code?: string; message?: string };
+
+  // Ethers may carry the upstream JSON-RPC body either on the top-level error (SERVER_ERROR shape)
+  // or one level down on `err.error`. Surface its `message` if we can parse it.
+  const rpcError = parseJsonRpcError(err) ?? parseJsonRpcError(e.error);
+  if (rpcError?.message) {
+    return rpcError.message;
+  }
+
+  // Ethers populates `.reason` with a short, URL-free description ("processing response error",
+  // "execution reverted", etc.) — safe to surface.
+  if (typeof e.reason === "string" && e.reason.length > 0) {
+    return e.reason;
+  }
+
+  // Non-ethers errors (no `code` / no `reason`) — fall back to `.message`, which is safe here
+  // because there's no transport-layer URL to leak.
+  if (e.code === undefined && typeof e.message === "string" && e.message.length > 0) {
+    return e.message;
+  }
+
+  if (typeof e.code === "string" && e.code.length > 0) {
+    return e.code;
+  }
+
+  return "unknown error";
+}
+
 /**
  * Validate and parse a possible JSON-RPC error response.
  * @param error An unknown error object received in response to a JSON-RPC request.