@anywalletkit/protocol-swap2-core 0.10.3 → 0.11.0

package/dist/index.cjs

@@ -22,6 +22,7 @@ var src_exports = {};
 __export(src_exports, {
   BaseSwap2Protocol: () => BaseSwap2Protocol,
   NATIVE_DECIMALS: () => NATIVE_DECIMALS,
+  NATIVE_FEE_CEILING_MAX_MULTIPLE: () => NATIVE_FEE_CEILING_MAX_MULTIPLE,
   SLIPPAGE_ROUNDING_BPS: () => SLIPPAGE_ROUNDING_BPS,
   SWAP2_CHAIN_ALIASES: () => SWAP2_CHAIN_ALIASES,
   SWAP2_ID_PREFIX: () => SWAP2_ID_PREFIX,
@@ -498,12 +499,62 @@ var NATIVE_FEE_CAP = Object.freeze({
   // 0.1 HYPE
 });
 var DEFAULT_NATIVE_FEE_CAP = 5000000000000000n;
-function declaredNativeFee(q, chain) {
+var NATIVE_FEE_CEILING_MAX_MULTIPLE = 20n;
+function describeCeilingAnswer(value) {
+  if (value === null) return "null";
+  if (typeof value === "bigint") return String(value);
+  if (typeof value === "string") return `the string "${value.slice(0, 40)}"`;
+  if (typeof value === "number" || typeof value === "boolean") return `the ${typeof value} ${String(value)}`;
+  if (typeof value === "function") return "a function";
+  let thenable = false;
+  try {
+    thenable = typeof value.then === "function";
+    if (thenable) value.then(void 0, () => {
+    });
+  } catch {
+  }
+  return thenable ? "a Promise (the hook must answer synchronously)" : typeof value === "object" ? "an object" : `a ${typeof value}`;
+}
+function nativeFeeCap(chain, fee, route) {
+  const defaultCap = NATIVE_FEE_CAP[chain] ?? DEFAULT_NATIVE_FEE_CAP;
+  const hook = route?.ceiling;
+  if (hook === void 0) return defaultCap;
+  const maxCeiling = defaultCap * NATIVE_FEE_CEILING_MAX_MULTIPLE;
+  const where = `${route.provider} ${chain} \u2192 ${route.destChain}`;
+  if (typeof hook !== "function") {
+    throw new Swap2ConfigurationError(`swap2: nativeFeeCeiling is ${describeCeilingAnswer(hook)}, not a function \u2014 the native fee of ${where} is refused`);
+  }
+  const ctx = Object.freeze({
+    provider: route.provider,
+    intentId: route.intentId,
+    fromChain: chain,
+    destChain: route.destChain,
+    nativeFee: fee,
+    defaultCap,
+    maxCeiling
+  });
+  let answer;
+  try {
+    answer = hook(ctx);
+  } catch (error) {
+    const why = (error instanceof Error ? error.message : String(error)).slice(0, 160);
+    throw new Swap2ConfigurationError(`swap2: nativeFeeCeiling threw for ${where} (${why}) \u2014 the native fee is refused`, { cause: error });
+  }
+  if (answer === void 0) return defaultCap;
+  if (typeof answer !== "bigint" || answer < 0n) {
+    throw new Swap2ConfigurationError(`swap2: nativeFeeCeiling returned ${describeCeilingAnswer(answer)} for ${where}, not a non-negative bigint or undefined \u2014 the native fee is refused`);
+  }
+  if (answer > maxCeiling) {
+    throw new Swap2ConfigurationError(`swap2: nativeFeeCeiling returned ${answer} for ${where}, above the hard maximum ${maxCeiling} (${NATIVE_FEE_CEILING_MAX_MULTIPLE} \xD7 the default cap ${defaultCap}) \u2014 the native fee is refused`);
+  }
+  return answer;
+}
+function declaredNativeFee(q, chain, route) {
   const raw = q.txRequest?.nativeFee;
   if (raw === void 0) return 0n;
   if (!/^\d+$/.test(raw)) throw new Error("swap2: quote declares a malformed native fee");
   const fee = BigInt(raw);
-  const cap = NATIVE_FEE_CAP[chain] ?? DEFAULT_NATIVE_FEE_CAP;
+  const cap = nativeFeeCap(chain, fee, route);
   if (fee > cap) throw new Error(`swap2: quoted native fee ${fee} exceeds the cap ${cap} for ${chain}`);
   return fee;
 }
@@ -1127,16 +1178,18 @@ var BaseSwap2Protocol = class extends import_core.Swap2Protocol {
     const source = this.sourceAsset(executionOptions);
     if (!source) throw new Error(`swap2: unknown source token '${executionOptions.fromToken}' on ${this.fromChain}`);
     const executionValue = BigInt(unsigned.value);
+    const ceiling = this._config.nativeFeeCeiling;
+    const feeRoute = { provider: q.provider, intentId: q.intentId, destChain: params.destChain, ...ceiling !== void 0 ? { ceiling } : {} };
     if (serialized) {
       if (executionValue !== (source.contract ? 0n : BigInt(q.sourceAmount))) {
         throw new Error("swap2: provider execution amount does not match the validated quote");
       }
     } else if (source.contract && this.fromChain.startsWith("eip155:")) {
-      const declared = declaredNativeFee(q, this.fromChain);
+      const declared = declaredNativeFee(q, this.fromChain, feeRoute);
       if (executionValue !== declared) {
         throw new Error(declared === 0n ? "swap2: token execution attempted to attach native value" : `swap2: token execution value ${executionValue} does not match the quoted native fee ${declared}`);
       }
-    } else if (!unsigned.typedData && !unsigned.bodyBoc && executionValue !== BigInt(q.sourceAmount) + declaredNativeFee(q, this.fromChain)) {
+    } else if (!unsigned.typedData && !unsigned.bodyBoc && executionValue !== BigInt(q.sourceAmount) + declaredNativeFee(q, this.fromChain, feeRoute)) {
       throw new Error("swap2: provider execution amount does not match the validated quote");
     }
     let tonBody;
@@ -1145,13 +1198,13 @@ var BaseSwap2Protocol = class extends import_core.Swap2Protocol {
         throw new Swap2ValidationError(`swap2: TON cell-body build refused \u2014 ${why}`);
       };
       const raw = this._config.tonGasCeiling;
-      const ceiling = raw === void 0 ? DEFAULT_TON_GAS_CEILING : BigInt(raw);
-      if (ceiling < 0n) throw new Swap2ConfigurationError("swap2: tonGasCeiling must be non-negative");
+      const ceiling2 = raw === void 0 ? DEFAULT_TON_GAS_CEILING : BigInt(raw);
+      if (ceiling2 < 0n) throw new Swap2ConfigurationError("swap2: tonGasCeiling must be non-negative");
       if (provider.remote === true && provider.verifiesBuilds !== true) refuse("a remote provider's cell body needs the app's own validator (remoteProvider verifyBuild)");
       tonBody = readTonBody(cellBody);
       const input = BigInt(q.sourceAmount);
       if (source.contract) {
-        if (executionValue > ceiling) refuse(`it attaches ${executionValue} nanoTON to a jetton transfer, more than the ${ceiling} gas ceiling`);
+        if (executionValue > ceiling2) refuse(`it attaches ${executionValue} nanoTON to a jetton transfer, more than the ${ceiling2} gas ceiling`);
         const t = tonBody.jettonTransfer;
         if (!t) refuse("a jetton-source body must be a jetton transfer");
         if (t.amount !== input) refuse(`the jetton transfer moves ${t.amount}, not the swap's ${input}`);
@@ -1161,7 +1214,7 @@ var BaseSwap2Protocol = class extends import_core.Swap2Protocol {
         if (!own) refuse("the account cannot name its own jetton wallet (getJettonWalletAddress), so the target cannot be checked");
         if (tonRawAddress(unsigned.to) !== own) refuse(`it is sent to ${unsigned.to}, not this account's ${source.symbol ?? "source"} jetton wallet`);
       } else {
-        if (executionValue < input || executionValue - input > ceiling) refuse(`it attaches ${executionValue} nanoTON for a ${input} input, more than the ${ceiling} gas ceiling on top`);
+        if (executionValue < input || executionValue - input > ceiling2) refuse(`it attaches ${executionValue} nanoTON for a ${input} input, more than the ${ceiling2} gas ceiling on top`);
         const pinned = provider.remote === true ? [...provider.callTargets?.(this.fromChain) ?? [], ...q.depositAddress ? [q.depositAddress] : []].map(tonRawAddress).filter((a) => !!a) : [];
         if (pinned.length && !pinned.includes(tonRawAddress(unsigned.to) ?? "")) refuse(`remote provider '${q.provider}' sends it to ${unsigned.to}, which the app did not pin (remoteProvider callTargets)`);
       }