@anywalletkit/protocol-swap2-lifi 0.3.1 → 0.5.0

package/README.md

@@ -24,9 +24,13 @@ do the same: a same-chain swap (GenericSwapFacet / V3) pays the reviewed recipie
 reviewed minimum, spending the input token and delivering the requested one; a bridge call must be
 one of LI.FI's listed `startBridgeTokensVia*` / `swapAndStartBridgeTokensVia*` entry points (packed
 calls are refused) and its `BridgeData` must name the reviewed recipient and chain and bridge the
-input token (or what its source swaps make of it). Refused, because the recipient cannot be read
-from the calldata: routes with a destination call, and EVM-source routes to a non-EVM chain.
-Unknown calldata is refused.
+input token (or what its source swaps make of it). Every refund, depositor or fallback address a
+bridge carries in its own data (Stargate's LayerZero fee refund, an expired Across deposit or LI.FI
+intent, a Mayan Swift order's trader, Chainflip's refund address, …) must be the sender or the
+recipient. Refused, because the recipient cannot be read from the calldata: routes with a destination call, EVM-source routes to a non-EVM chain, and the
+bridges whose facet does not bind the delivery to `BridgeData` (Relay, Garden, deBridge DLN,
+ThorSwap, Squid, Symbiosis) — cross-chain requests ask LI.FI to route around Relay, Garden, Squid
+and Symbiosis, so their pairs get another bridge. Unknown calldata is refused.
 
 Every swap step is read, not only the ends: each must spend what the step before delivered, only
 steps that spend the input token may pull from the wallet (`requiresDeposit`), and together at most
@@ -44,8 +48,10 @@ reviewed minimum relies on LI.FI's API (or your `apiUrl` proxy) answering honest
 
 When the provider runs on your server, spread its pins into the app's stub:
 `remoteProvider({name: "lifi", baseUrl, ...lifiPins})`. The engine then lets the EVM route call and
-approve only the LI.FI Diamond of that chain, never an address the backend names; without the pins the stub gets no
-EVM calldata route (fail closed).
+approve only the LI.FI Diamond of that chain, never an address the backend names, and `lifiVerifyQuote` decodes the
+server's Diamond call on the device with the same check the provider runs on LI.FI's answer (receiver, minimum, input
+token and amount, output token, destination chain, refund addresses; value and approval for the input kind). Without the pins the stub
+gets no EVM calldata route (fail closed).
 
 ## Activity
 

package/dist/{chunk-Z27B4UI4.js → chunk-67QPKWAY.js}

@@ -26,144 +26,162 @@ var GENERIC_SWAPS = {
 var BRIDGE_INPUT_FEE_MAX_BPS = 100n;
 var kindOf = (asset) => /^0x0{40}$/i.test(asset) ? "native" : "erc20";
 var BRIDGE_CALLS = {
-  "0x1fd8010c": { sourceSwaps: false },
+  "0x1fd8010c": { sourceSwaps: false, facet: "Across" },
   // startBridgeTokensViaAcross (AcrossFacet)
-  "0x3a3f7332": { sourceSwaps: true },
+  "0x3a3f7332": { sourceSwaps: true, facet: "Across" },
   // swapAndStartBridgeTokensViaAcross (AcrossFacet)
-  "0xa1f1ce43": { sourceSwaps: false },
+  "0xa1f1ce43": { sourceSwaps: false, facet: "AcrossV4" },
   // startBridgeTokensViaAcrossV4 (AcrossFacetV4)
-  "0x1794958f": { sourceSwaps: true },
+  "0x1794958f": { sourceSwaps: true, facet: "AcrossV4" },
   // swapAndStartBridgeTokensViaAcrossV4 (AcrossFacetV4)
-  "0x6a90d66e": { sourceSwaps: false },
+  "0x6a90d66e": { sourceSwaps: false, facet: "AcrossV4Swap" },
   // startBridgeTokensViaAcrossV4Swap (AcrossV4SwapFacet)
-  "0x9b054bc4": { sourceSwaps: true },
+  "0x9b054bc4": { sourceSwaps: true, facet: "AcrossV4Swap" },
   // swapAndStartBridgeTokensViaAcrossV4Swap (AcrossV4SwapFacet)
-  "0x6a51e9a9": { sourceSwaps: false },
+  "0x6a51e9a9": { sourceSwaps: false, facet: "AllBridge" },
   // startBridgeTokensViaAllBridge (AllBridgeFacet)
-  "0x63267469": { sourceSwaps: true },
+  "0x63267469": { sourceSwaps: true, facet: "AllBridge" },
   // swapAndStartBridgeTokensViaAllBridge (AllBridgeFacet)
-  "0xc9851d0b": { sourceSwaps: false },
+  "0xc9851d0b": { sourceSwaps: false, facet: "ArbitrumBridge" },
   // startBridgeTokensViaArbitrumBridge (ArbitrumBridgeFacet)
-  "0x3cc9517b": { sourceSwaps: true },
+  "0x3cc9517b": { sourceSwaps: true, facet: "ArbitrumBridge" },
   // swapAndStartBridgeTokensViaArbitrumBridge (ArbitrumBridgeFacet)
-  "0xe0a4201c": { sourceSwaps: false },
+  "0xe0a4201c": { sourceSwaps: false, facet: "CelerCircleBridge" },
   // startBridgeTokensViaCelerCircleBridge (CelerCircleBridgeFacet)
-  "0x4f3b0759": { sourceSwaps: true },
+  "0x4f3b0759": { sourceSwaps: true, facet: "CelerCircleBridge" },
   // swapAndStartBridgeTokensViaCelerCircleBridge (CelerCircleBridgeFacet)
-  "0x0315138f": { sourceSwaps: false },
+  "0x0315138f": { sourceSwaps: false, facet: "Centrifuge" },
   // startBridgeTokensViaCentrifuge (CentrifugeFacet)
-  "0x8fd4d4dd": { sourceSwaps: true },
+  "0x8fd4d4dd": { sourceSwaps: true, facet: "Centrifuge" },
   // swapAndStartBridgeTokensViaCentrifuge (CentrifugeFacet)
-  "0x0ad553b3": { sourceSwaps: false },
+  "0x0ad553b3": { sourceSwaps: false, facet: "Chainflip" },
   // startBridgeTokensViaChainflip (ChainflipFacet)
-  "0xee3314a1": { sourceSwaps: true },
+  "0xee3314a1": { sourceSwaps: true, facet: "Chainflip" },
   // swapAndStartBridgeTokensViaChainflip (ChainflipFacet)
-  "0x4004633e": { sourceSwaps: false },
-  // startBridgeTokensViaDeBridgeDln (DeBridgeDlnFacet)
-  "0x2c7d2db0": { sourceSwaps: true },
-  // swapAndStartBridgeTokensViaDeBridgeDln (DeBridgeDlnFacet)
-  "0xbff90b61": { sourceSwaps: false },
+  "0xbff90b61": { sourceSwaps: false, facet: "Eco" },
   // startBridgeTokensViaEco (EcoFacet)
-  "0x762aea18": { sourceSwaps: true },
+  "0x762aea18": { sourceSwaps: true, facet: "Eco" },
   // swapAndStartBridgeTokensViaEco (EcoFacet)
-  "0x678786ea": { sourceSwaps: false },
+  "0x678786ea": { sourceSwaps: false, facet: "Frax" },
   // startBridgeTokensViaFrax (FraxFacet)
-  "0x07b8e4c7": { sourceSwaps: true },
+  "0x07b8e4c7": { sourceSwaps: true, facet: "Frax" },
   // swapAndStartBridgeTokensViaFrax (FraxFacet)
-  "0x5f9af35d": { sourceSwaps: false },
-  // startBridgeTokensViaGarden (GardenFacet)
-  "0x76ad76fe": { sourceSwaps: true },
-  // swapAndStartBridgeTokensViaGarden (GardenFacet)
-  "0xfc5f1003": { sourceSwaps: false },
+  "0xfc5f1003": { sourceSwaps: false, facet: "GasZip" },
   // startBridgeTokensViaGasZip (GasZipFacet)
-  "0x606326ff": { sourceSwaps: true },
+  "0x606326ff": { sourceSwaps: true, facet: "GasZip" },
   // swapAndStartBridgeTokensViaGasZip (GasZipFacet)
-  "0x6f9206ba": { sourceSwaps: false },
+  "0x6f9206ba": { sourceSwaps: false, facet: "Glacis" },
   // startBridgeTokensViaGlacis (GlacisFacet)
-  "0x9c4b6dd9": { sourceSwaps: true },
+  "0x9c4b6dd9": { sourceSwaps: true, facet: "Glacis" },
   // swapAndStartBridgeTokensViaGlacis (GlacisFacet)
-  "0xf66fe519": { sourceSwaps: false },
+  "0xf66fe519": { sourceSwaps: false, facet: "GnosisBridge" },
   // startBridgeTokensViaGnosisBridge (GnosisBridgeFacet)
-  "0x7bf96e0a": { sourceSwaps: true },
+  "0x7bf96e0a": { sourceSwaps: true, facet: "GnosisBridge" },
   // swapAndStartBridgeTokensViaGnosisBridge (GnosisBridgeFacet)
-  "0xee9e98e0": { sourceSwaps: false },
+  "0xee9e98e0": { sourceSwaps: false, facet: "LayerSwap" },
   // startBridgeTokensViaLayerSwap (LayerSwapFacet)
-  "0x4c279d6b": { sourceSwaps: true },
+  "0x4c279d6b": { sourceSwaps: true, facet: "LayerSwap" },
   // swapAndStartBridgeTokensViaLayerSwap (LayerSwapFacet)
-  "0x7dbcf1d9": { sourceSwaps: false },
+  "0x7dbcf1d9": { sourceSwaps: false, facet: "LiFiIntentEscrowV2" },
   // startBridgeTokensViaLiFiIntentEscrowV2 (LiFiIntentEscrowFacetV2)
-  "0x6d21c5df": { sourceSwaps: true },
+  "0x6d21c5df": { sourceSwaps: true, facet: "LiFiIntentEscrowV2" },
   // swapAndStartBridgeTokensViaLiFiIntentEscrowV2 (LiFiIntentEscrowFacetV2)
-  "0x65782c4b": { sourceSwaps: false },
+  "0x65782c4b": { sourceSwaps: false, facet: "M0" },
   // startBridgeTokensViaM0 (M0Facet)
-  "0xb9eaf86d": { sourceSwaps: true },
+  "0xb9eaf86d": { sourceSwaps: true, facet: "M0" },
   // swapAndStartBridgeTokensViaM0 (M0Facet)
-  "0xb4875292": { sourceSwaps: false },
+  "0xb4875292": { sourceSwaps: false, facet: "Mayan" },
   // startBridgeTokensViaMayan (MayanFacet)
-  "0x80c65808": { sourceSwaps: true },
+  "0x80c65808": { sourceSwaps: true, facet: "Mayan" },
   // swapAndStartBridgeTokensViaMayan (MayanFacet)
-  "0x4213dfff": { sourceSwaps: false },
+  "0x4213dfff": { sourceSwaps: false, facet: "MegaETHBridge" },
   // startBridgeTokensViaMegaETHBridge (MegaETHBridgeFacet)
-  "0x22256e89": { sourceSwaps: true },
+  "0x22256e89": { sourceSwaps: true, facet: "MegaETHBridge" },
   // swapAndStartBridgeTokensViaMegaETHBridge (MegaETHBridgeFacet)
-  "0x4698f032": { sourceSwaps: false },
+  "0x4698f032": { sourceSwaps: false, facet: "NEARIntents" },
   // startBridgeTokensViaNEARIntents (NEARIntentsFacet)
-  "0x02631b09": { sourceSwaps: true },
+  "0x02631b09": { sourceSwaps: true, facet: "NEARIntents" },
   // swapAndStartBridgeTokensViaNEARIntents (NEARIntentsFacet)
-  "0x782621d8": { sourceSwaps: false },
+  "0x782621d8": { sourceSwaps: false, facet: "OmniBridge" },
   // startBridgeTokensViaOmniBridge (OmniBridgeFacet)
-  "0x95726782": { sourceSwaps: true },
+  "0x95726782": { sourceSwaps: true, facet: "OmniBridge" },
   // swapAndStartBridgeTokensViaOmniBridge (OmniBridgeFacet)
-  "0xce8a97a5": { sourceSwaps: false },
+  "0xce8a97a5": { sourceSwaps: false, facet: "OptimismBridge" },
   // startBridgeTokensViaOptimismBridge (OptimismBridgeFacet)
-  "0x5bb5d448": { sourceSwaps: true },
+  "0x5bb5d448": { sourceSwaps: true, facet: "OptimismBridge" },
   // swapAndStartBridgeTokensViaOptimismBridge (OptimismBridgeFacet)
-  "0xaf62c7d6": { sourceSwaps: false },
+  "0xaf62c7d6": { sourceSwaps: false, facet: "PolygonBridge" },
   // startBridgeTokensViaPolygonBridge (PolygonBridgeFacet)
-  "0xb4f37581": { sourceSwaps: true },
+  "0xb4f37581": { sourceSwaps: true, facet: "PolygonBridge" },
   // swapAndStartBridgeTokensViaPolygonBridge (PolygonBridgeFacet)
-  "0xf434d6ca": { sourceSwaps: false },
+  "0xf434d6ca": { sourceSwaps: false, facet: "PolymerCCTP" },
   // startBridgeTokensViaPolymerCCTP (PolymerCCTPFacet)
-  "0x17917a4e": { sourceSwaps: true },
+  "0x17917a4e": { sourceSwaps: true, facet: "PolymerCCTP" },
   // swapAndStartBridgeTokensViaPolymerCCTP (PolymerCCTPFacet)
-  "0x092e8fa4": { sourceSwaps: false },
-  // startBridgeTokensViaRelayDepository (RelayDepositoryFacet)
-  "0xa3443faa": { sourceSwaps: true },
-  // swapAndStartBridgeTokensViaRelayDepository (RelayDepositoryFacet)
-  "0x3f313808": { sourceSwaps: false },
-  // startBridgeTokensViaSquid (SquidFacet)
-  "0xa8f66666": { sourceSwaps: true },
-  // swapAndStartBridgeTokensViaSquid (SquidFacet)
-  "0x14d53077": { sourceSwaps: false },
+  "0x14d53077": { sourceSwaps: false, facet: "Stargate" },
   // startBridgeTokensViaStargate (StargateFacetV2)
-  "0xa6010a66": { sourceSwaps: true },
+  "0xa6010a66": { sourceSwaps: true, facet: "Stargate" },
   // swapAndStartBridgeTokensViaStargate (StargateFacetV2)
-  "0x0691ff78": { sourceSwaps: false },
+  "0x0691ff78": { sourceSwaps: false, facet: "Superset" },
   // startBridgeTokensViaSuperset (SupersetFacet)
-  "0xf26e657f": { sourceSwaps: true },
+  "0xf26e657f": { sourceSwaps: true, facet: "Superset" },
   // swapAndStartBridgeTokensViaSuperset (SupersetFacet)
-  "0xe23b7a08": { sourceSwaps: false },
-  // startBridgeTokensViaSymbiosis (SymbiosisFacet)
-  "0xc46059b2": { sourceSwaps: true },
-  // swapAndStartBridgeTokensViaSymbiosis (SymbiosisFacet)
-  "0x2541ec57": { sourceSwaps: false },
-  // startBridgeTokensViaThorSwap (ThorSwapFacet)
-  "0xad673d88": { sourceSwaps: true },
-  // swapAndStartBridgeTokensViaThorSwap (ThorSwapFacet)
-  "0x64261d58": { sourceSwaps: false },
+  "0x64261d58": { sourceSwaps: false, facet: "Unit" },
   // startBridgeTokensViaUnit (UnitFacet)
-  "0x21a3af52": { sourceSwaps: true }
+  "0x21a3af52": { sourceSwaps: true, facet: "Unit" }
   // swapAndStartBridgeTokensViaUnit (UnitFacet)
 };
-var Reader = class {
+var UNBOUND_BRIDGES = {
+  "0x092e8fa4": "Relay",
+  // startBridgeTokensViaRelayDepository
+  "0xa3443faa": "Relay",
+  // swapAndStartBridgeTokensViaRelayDepository
+  "0x5f9af35d": "Garden",
+  // startBridgeTokensViaGarden
+  "0x76ad76fe": "Garden",
+  // swapAndStartBridgeTokensViaGarden
+  "0x4004633e": "deBridge DLN",
+  // startBridgeTokensViaDeBridgeDln
+  "0x2c7d2db0": "deBridge DLN",
+  // swapAndStartBridgeTokensViaDeBridgeDln
+  "0x2541ec57": "ThorSwap",
+  // startBridgeTokensViaThorSwap
+  "0xad673d88": "ThorSwap",
+  // swapAndStartBridgeTokensViaThorSwap
+  "0x3f313808": "Squid",
+  // startBridgeTokensViaSquid
+  "0xa8f66666": "Squid",
+  // swapAndStartBridgeTokensViaSquid
+  "0xe23b7a08": "Symbiosis",
+  // startBridgeTokensViaSymbiosis
+  "0xc46059b2": "Symbiosis"
+  // swapAndStartBridgeTokensViaSymbiosis
+};
+var Reader = class _Reader {
   b;
-  constructor(hex) {
-    if (!/^0x([0-9a-fA-F]{2})*$/.test(hex)) throw new Error("not hex");
-    this.b = Uint8Array.from(hex.slice(2).match(/../g) ?? [], (h) => Number.parseInt(h, 16));
+  constructor(src) {
+    if (typeof src !== "string") {
+      this.b = src;
+      return;
+    }
+    if (!/^0x([0-9a-fA-F]{2})*$/.test(src)) throw new Error("not hex");
+    this.b = Uint8Array.from(src.slice(2).match(/../g) ?? [], (h) => Number.parseInt(h, 16));
   }
   get length() {
     return this.b.length;
   }
+  /** `n` raw bytes at `at`, as 0x-hex. */
+  raw(at, n) {
+    if (at < 0 || at + n > this.b.length) throw new Error("out of bounds");
+    return `0x${Array.from(this.b.subarray(at, at + n), (x) => x.toString(16).padStart(2, "0")).join("")}`;
+  }
+  /** The `bytes` whose offset word sits at `head` (relative to `base`), as a reader over its contents only. */
+  bytes(base, head) {
+    const at = base + this.small(head);
+    const n = this.small(at);
+    if (at + 32 + n > this.b.length) throw new Error("bytes out of bounds");
+    return new _Reader(this.b.subarray(at + 32, at + 32 + n));
+  }
   word(at) {
     if (at < 0 || at + 32 > this.b.length) throw new Error("out of bounds");
     let v = 0n;
@@ -221,6 +239,79 @@ function checkSteps(steps, e, finalAsset) {
   if (!same(last.receivingAssetId, finalAsset)) return `delivers ${last.receivingAssetId}, not ${finalAsset}`;
   return null;
 }
+var MAYAN_REFUND_AT = {
+  "0xa3a30834": 4 + 32 * 3,
+  // Swift v2 createOrderWithToken(tokenIn, amountIn, (payloadType, trader, destAddr, …), customPayload)
+  "0x6147435b": 4 + 32 * 3,
+  // Swift v2 createOrderWithSig: the same order tuple
+  "0xb866e173": 4,
+  // Swift createOrderWithEth((trader, tokenOut, …))
+  "0x8e8d142b": 4 + 32 * 2,
+  // Swift createOrderWithToken(tokenIn, amountIn, (trader, tokenOut, …))
+  "0x6111ad25": 4 + 32 * 9,
+  // MayanSwap swap(relayerFees, (mayanAddr, mayanChainId, auctionAddr, destAddr, destChainId, referrer, refundAddr), …)
+  "0x1eb1cff0": 4 + 32 * 9
+  // MayanSwap wrapAndSwapETH: the same recipient tuple
+};
+function mayanRefunds(r, at) {
+  const p = r.bytes(at, at + 32 * 2);
+  const pos = MAYAN_REFUND_AT[p.raw(0, 4)];
+  return pos === void 0 ? [] : [["the Mayan order's refund address", p.address(pos)]];
+}
+function chainflipRefunds(r, at) {
+  const p = r.bytes(at, at + 32 * 5);
+  if (p.length < 25 || p.raw(0, 1) !== "0x01") throw new Error("unknown Chainflip parameters");
+  return [["the Chainflip refund address", p.raw(5, 20)]];
+}
+function acrossSwapRefunds(r, at) {
+  const target = r.word(at);
+  const c = r.bytes(at, at + 32);
+  if (target === 0n) return [["the Across deposit's depositor", c.address(c.small(0)), true]];
+  if (target === 1n) {
+    const swap = c.small(0);
+    return [["the Across deposit's depositor", c.address(swap + c.small(swap + 64) + 96), true]];
+  }
+  if (target === 2n) return [["the sponsored OFT refund recipient", c.address(c.small(0) + 32), true]];
+  if (target === 3n) return [["the sponsored CCTP refund recipient", c.address(64), true]];
+  throw new Error("unknown Across Swap API target");
+}
+var FACET_DATA = {
+  AcrossV4: { refunds: [["refundAddress", 1]], zeroRefused: true },
+  // the SpokePool depositor: an expired deposit refunds the input there
+  AcrossV4Swap: { nested: acrossSwapRefunds },
+  Centrifuge: { inline: 2, refunds: [["refundRecipient", 1]], zeroRefused: true },
+  Chainflip: { nested: chainflipRefunds },
+  Eco: { refunds: [["refundRecipient", 5]], zeroRefused: true },
+  // the intent's creator, refunded its reward (the input) on expiry
+  Frax: { inline: 5, refunds: [["refundRecipient", 3]], zeroRefused: true },
+  Glacis: { inline: 4, refunds: [["refundAddress", 1]], zeroRefused: true },
+  LayerSwap: { refunds: [["refundRecipient", 2]], zeroRefused: true },
+  LiFiIntentEscrowV2: { refunds: [["depositAndRefundAddress", 2]], zeroRefused: true },
+  // the escrow order's user
+  M0: { inline: 7, refunds: [["refundRecipient", 1], ["orderOwner", 2]], zeroRefused: true },
+  // orderOwner gets a cancelled order back
+  Mayan: { refunds: [["refundRecipient", 7]], nested: mayanRefunds, zeroRefused: true },
+  NEARIntents: { refunds: [["refundRecipient", 6]], zeroRefused: true },
+  // also the 1Click quote's refundTo
+  PolymerCCTP: { refunds: [["refundRecipient", 5]], zeroRefused: true },
+  Stargate: { refunds: [["refundAddress", 4]] },
+  // (assetId, sendParams, fee.nativeFee, fee.lzTokenFee, refundAddress): LayerZero's fee refund
+  Superset: { refunds: [["refundAddress", 2], ["fallbackEoA", 3]], zeroRefused: true }
+};
+var NO_REFUND_FIELDS = /* @__PURE__ */ new Set(["Across", "AllBridge", "ArbitrumBridge", "CelerCircleBridge", "GasZip", "GnosisBridge", "MegaETHBridge", "OmniBridge", "OptimismBridge", "PolygonBridge", "Unit"]);
+function refundMismatch(r, bridge, e) {
+  const spec = FACET_DATA[bridge.facet];
+  if (!spec) return NO_REFUND_FIELDS.has(bridge.facet) ? null : `no known refund layout for ${bridge.facet}`;
+  const slot = 4 + (bridge.sourceSwaps ? 64 : 32);
+  const at = spec.inline ? slot : 4 + r.small(slot);
+  const paid = (spec.refunds ?? []).map(([field, word]) => [`${bridge.facet} ${field}`, r.address(at + 32 * word), spec.zeroRefused === true]);
+  paid.push(...spec.nested?.(r, at) ?? []);
+  for (const [what, to, zeroRefused] of paid) {
+    if (zeroRefused && /^0x0{40}$/.test(to)) continue;
+    if (!same(to, e.sender) && !same(to, e.receiver)) return `${what} pays ${to}, neither the sender ${e.sender} nor the recipient`;
+  }
+  return null;
+}
 function diamondCallMismatch(data, e) {
   let r;
   try {
@@ -245,6 +336,8 @@ function diamondCallMismatch(data, e) {
       }
       return checkSteps(steps, e, e.toToken);
     }
+    const unbound = UNBOUND_BRIDGES[selector];
+    if (unbound) return `${unbound} delivers to a recipient the transaction does not bind (an off-chain order or unchecked facet data)`;
     const bridge = BRIDGE_CALLS[selector];
     if (!bridge) return `unknown Diamond call ${selector}`;
     const head = r.small(4);
@@ -263,6 +356,8 @@ function diamondCallMismatch(data, e) {
     if (!e.evmDestination) return "the recipient on a non-EVM destination sits in bridge-specific data and cannot be checked here";
     if (!same(receiver, e.receiver)) return `pays ${receiver}, not ${e.receiver}`;
     if (hasSourceSwaps !== bridge.sourceSwaps) return `unknown Diamond call ${selector}`;
+    const refund = refundMismatch(r, bridge, e);
+    if (refund) return refund;
     if (hasSourceSwaps) {
       if (minAmount === 0n) return "bridges nothing after the source swaps";
       return checkSteps(swapsAt(r, 4, 4 + 32), e, sendingAssetId);
@@ -274,8 +369,98 @@ function diamondCallMismatch(data, e) {
   }
 }
 
+// src/solana.ts
+import { base64Bytes } from "@anywalletkit/protocol-swap2-core/util";
+var ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+var MAYAN_ENTRY_PROGRAMS = /* @__PURE__ */ new Set([
+  "D8C8iW6zmoKg5TRr8nQ7h14TMWqQX8FiBdj2ju5MF3wa",
+  // CPI_PROXY_PROGRAM_ID
+  "BLZRi6frs4X4DNLw56V4EXai1b6QVESN1BhHBTYM9VcY",
+  // SWIFT_PROGRAM_ID
+  "mayan34VedncxdK2XobtvWFDXQASUTBXhUVzt2kKgny",
+  // SWIFT_V2_PROGRAM_ID
+  "dkpZqrxHFrhziEMQ931GLtfy11nFkCsfMftH9u6QwBU",
+  // MCTP_PROGRAM_ID
+  "Gx9rivpS3YR8pBFwMuP6omYqVxunpLvLkNn7ubNyuZZ5"
+  // FAST_MCTP_PROGRAM_ID
+]);
+var SYSTEM_PROGRAM = "11111111111111111111111111111111";
+var LIFI_SOLANA_FEE_WALLET = "34FKjAdVcTax2DHqV2XnbXa9J3zmyKcFuFKWbcmgxjgm";
+function base58(bytes) {
+  let n = 0n;
+  for (const b of bytes) n = n << 8n | BigInt(b);
+  let out = "";
+  while (n > 0n) {
+    out = ALPHABET[Number(n % 58n)] + out;
+    n /= 58n;
+  }
+  for (const b of bytes) {
+    if (b !== 0) break;
+    out = `1${out}`;
+  }
+  return out;
+}
+var Cursor = class {
+  constructor(b) {
+    this.b = b;
+  }
+  b;
+  at = 0;
+  byte() {
+    if (this.at >= this.b.length) throw new Error("truncated");
+    return this.b[this.at++];
+  }
+  bytes(n) {
+    if (n < 0 || this.at + n > this.b.length) throw new Error("truncated");
+    const out = this.b.subarray(this.at, this.at + n);
+    this.at += n;
+    return out;
+  }
+  /** compact-u16 */
+  short() {
+    let v = 0;
+    for (let shift = 0; shift < 21; shift += 7) {
+      const b = this.byte();
+      v |= (b & 127) << shift;
+      if (!(b & 128)) return v;
+    }
+    throw new Error("bad length");
+  }
+};
+function solanaBridgeTxMismatch(base64, sender) {
+  const bytes = base64Bytes(base64);
+  if (!bytes) return "the Solana transaction is not base64";
+  const c = new Cursor(bytes);
+  try {
+    c.bytes(64 * c.short());
+    const first = c.byte();
+    if ((first & 128) === 0) c.at--;
+    c.bytes(3);
+    const keys = Array.from({ length: c.short() }, () => base58(c.bytes(32)));
+    if (keys[0] !== sender) return `the Solana transaction is paid by ${keys[0] ?? "nobody"}, not the sender ${sender}`;
+    c.bytes(32);
+    let mayan = false;
+    const payees = [];
+    const n = c.short();
+    for (let i = 0; i < n; i++) {
+      const program = keys[c.byte()];
+      const accounts = Array.from(c.bytes(c.short()));
+      const data = c.bytes(c.short());
+      if (program !== void 0 && MAYAN_ENTRY_PROGRAMS.has(program)) mayan = true;
+      if (program === SYSTEM_PROGRAM && data.length === 12 && data[0] === 2 && data[1] === 0 && data[2] === 0 && data[3] === 0) {
+        const to = keys[accounts[1] ?? -1];
+        if (to !== void 0 && to !== sender && to !== LIFI_SOLANA_FEE_WALLET) payees.push(to);
+      }
+    }
+    return mayan && payees.length ? `the Solana transaction transfers SOL to ${payees[0]}, which is neither the sender nor LI.FI's fee wallet` : null;
+  } catch (err) {
+    return `the Solana transaction does not decode (${err instanceof Error ? err.message : String(err)})`;
+  }
+}
+
 // src/provider.ts
 import { timeoutSignal, sourceAssetOf } from "@anywalletkit/protocol-swap2-core/util";
+import { slippageFloor } from "@anywalletkit/protocol-swap2-core/validate";
 import { bigintToNumber } from "@anywalletkit/core";
 var DEFAULT_LIFI_BASE = "https://li.quest/v1";
 var LIFI_CHAIN = {
@@ -412,7 +597,8 @@ function headers(key) {
   return h;
 }
 var TOOL_KEY = /^[A-Za-z0-9_-]{1,64}$/;
-function routeOptions(body) {
+var UNBOUND_TOOLS = Object.freeze(["relaydepository", "garden", "squid", "symbiosis"]);
+function routeOptions(body, excluded) {
   const routes = body?.routes;
   if (!Array.isArray(routes)) return [];
   const out = [];
@@ -422,7 +608,7 @@ function routeOptions(body) {
     const cross = Array.isArray(step.includedSteps) ? step.includedSteps.find((i) => i?.type === "cross")?.tool : void 0;
     const tool = typeof cross === "string" ? cross : step.tool;
     const eta = step.estimate?.executionDuration;
-    if (typeof tool !== "string" || !TOOL_KEY.test(tool) || typeof eta !== "number" || !Number.isFinite(eta) || eta < 0) continue;
+    if (typeof tool !== "string" || !TOOL_KEY.test(tool) || excluded.includes(tool) || typeof eta !== "number" || !Number.isFinite(eta) || eta < 0) continue;
     if (typeof r.toAmount !== "string" || typeof r.toAmountMin !== "string" || !/^\d{1,60}$/.test(r.toAmount) || !/^\d{1,60}$/.test(r.toAmountMin)) continue;
     out.push({
       tool,
@@ -508,12 +694,12 @@ function lifiProvider(config = {}) {
               fromAmount: params.amountIn,
               fromAddress,
               toAddress,
-              options: { slippage: slippageBps / 1e4, ...integrator().trim() ? { integrator: integrator().trim() } : {} }
+              options: { slippage: slippageBps / 1e4, ...solanaSource ? {} : { bridges: { deny: UNBOUND_TOOLS } }, ...integrator().trim() ? { integrator: integrator().trim() } : {} }
             }),
             signal: signal ?? timeoutSignal(8e3)
           });
           if (res.ok) {
-            const options = routeOptions(await res.json());
+            const options = routeOptions(await res.json(), solanaSource ? [] : UNBOUND_TOOLS);
             if (options.length) choice = cleanChoice(config.chooseRoute(options, params));
           }
         } catch {
@@ -533,8 +719,9 @@ function lifiProvider(config = {}) {
         if (sentSlippage !== void 0) {
           url.searchParams.set("slippage", String(sentSlippage));
         }
-        for (const t of choice?.allowBridges ?? []) url.searchParams.append("allowBridges", t);
-        for (const t of choice?.denyBridges ?? []) url.searchParams.append("denyBridges", t);
+        const unbound = params.sourceChain !== params.destChain && !solanaSource ? UNBOUND_TOOLS : [];
+        for (const t of (choice?.allowBridges ?? []).filter((b) => solanaSource || !UNBOUND_TOOLS.includes(b))) url.searchParams.append("allowBridges", t);
+        for (const t of /* @__PURE__ */ new Set([...choice?.denyBridges ?? [], ...unbound])) url.searchParams.append("denyBridges", t);
         if (choice?.order) url.searchParams.set("order", choice.order);
         deadline = signal ? void 0 : timeoutSignal(12e3);
         const res = await fetch(url, { headers: headers(apiKey()), signal: signal ?? deadline });
@@ -578,6 +765,10 @@ function lifiProvider(config = {}) {
         if (solanaSource) {
           if (!tr.data || tr.data.length < 64 || tr.data.length % 4 !== 0 || !BASE64.test(tr.data)) return reject("the Solana transaction is not base64");
           if (tr.to !== void 0 || tr.value !== void 0 || tr.gasLimit !== void 0) return reject("the Solana transaction carries EVM fields");
+          if (fromChain !== toChain) {
+            const why = solanaBridgeTxMismatch(tr.data, fromAddress);
+            if (why) return reject(why);
+          }
         } else if (!isHexData(tr.data) || !normalizeAddress(tr.to) || !normalizeAddress(tr.from) || tr.chainId !== expectedFromChain || !tr.value || !tr.gasLimit || !trustedAddress(params.sourceChain, tr.to, trustedTransactionTargets) || !sameAddress(tr.from, fromAddress)) return reject("the transaction is malformed or targets an untrusted contract");
         if (sentSlippage !== void 0 && (typeof action.slippage !== "number" || Math.abs(action.slippage - sentSlippage) > 1e-12)) return reject("the quote ignored the requested slippage");
         const sourceIsToken = fromToken !== EVM_ZERO && fromToken !== SOLANA_NATIVE;
@@ -615,7 +806,7 @@ function lifiProvider(config = {}) {
         if (sentSlippage !== void 0) {
           const dest = BigInt(est.toAmount);
           const min = BigInt(minDestAmount);
-          if (dest > 0n && min < dest * BigInt(1e4 - slippageBps) / 10000n) {
+          if (dest > 0n && min < slippageFloor(dest, slippageBps)) {
             const effective = bigintToNumber((dest - min) * 1000000n / dest) / 1e6;
             const requested = slippageBps / 1e4;
             const scaled = Math.floor(sentSlippage * requested / effective * 0.995 * 1e6) / 1e6;
@@ -644,6 +835,7 @@ function lifiProvider(config = {}) {
             toToken: expectedToToken,
             amountIn: BigInt(params.amountIn),
             receiver: toAddress,
+            sender: fromAddress,
             minOut: BigInt(minDestAmount),
             destChainId: BigInt(toChain),
             sameChain: fromChain === toChain,
@@ -662,6 +854,7 @@ function lifiProvider(config = {}) {
           sourceAmount: params.amountIn,
           destAmount: est.toAmount,
           minDestAmount,
+          ...Number.isInteger(action.toToken?.decimals) && action.toToken.decimals >= 0 && action.toToken.decimals <= 36 ? { destDecimals: action.toToken.decimals } : {},
           feeUsd,
           etaSeconds: est.executionDuration ?? 120,
           reliability: 0.97,
@@ -723,13 +916,67 @@ function lifiProvider(config = {}) {
     }
   };
 }
+function lifiVerifyQuote(params, quote) {
+  const fromChain = LIFI_CHAIN[params.sourceChain];
+  const toChain = LIFI_CHAIN[params.destChain];
+  if (!fromChain || !toChain) return "not a LI.FI chain pair";
+  const tx = quote.txRequest;
+  if (!tx) return "the quote carries no transaction";
+  if (isSolana(params.sourceChain)) {
+    if (!tx.serializedTx || tx.data !== void 0 || tx.to !== void 0) return "a Solana source carries a serialized transaction only";
+    return fromChain === toChain ? null : solanaBridgeTxMismatch(tx.serializedTx, params.refundAddress || (params.dry !== false ? SOLANA_PLACEHOLDER : ""));
+  }
+  if (!isHexData(tx.data) || !tx.to || tx.serializedTx !== void 0) return "the quote carries no Diamond call";
+  if (!sameAddress(tx.to, diamondFor(params.sourceChain))) return `the call targets ${tx.to}, not the LI.FI Diamond`;
+  if (tx.chainId !== void 0 && String(tx.chainId) !== fromChain) return `the call is for chain ${tx.chainId}, not ${fromChain}`;
+  const fromToken = lifiToken(params);
+  if (!fromToken) return `unknown source token ${params.sourceToken}`;
+  const sourceIsToken = fromToken !== EVM_ZERO;
+  const dry = params.dry !== false;
+  const fromAddress = params.refundAddress || (dry ? EVM_PLACEHOLDER : "");
+  const toAddress = params.destAddress || (dry ? fromAddress : "");
+  if (!fromAddress || !toAddress) return "a live quote needs the sender and the recipient";
+  let amountIn, minOut, value, nativeFee;
+  try {
+    amountIn = BigInt(params.amountIn);
+    minOut = BigInt(quote.minDestAmount);
+    value = BigInt(tx.value ?? "0");
+    nativeFee = BigInt(tx.nativeFee ?? "0");
+  } catch {
+    return "the quote's amounts are not integers";
+  }
+  if (BigInt(quote.sourceAmount) !== amountIn) return `the quote spends ${quote.sourceAmount}, not the ${amountIn} input`;
+  if (params.minAmountOut !== void 0 && minOut < BigInt(params.minAmountOut)) return `the quoted minimum ${minOut} is below the caller's floor ${params.minAmountOut}`;
+  if (sourceIsToken) {
+    if (value !== nativeFee) return "a token input attaches only its declared bridge fee";
+    if (!tx.approvalAddress || !sameAddress(tx.approvalAddress, diamondFor(params.sourceChain))) return "a token input approves the LI.FI Diamond";
+  } else {
+    if (value < amountIn || value - amountIn !== nativeFee) return "a native input is paid as the input plus its declared bridge fee";
+    if (tx.approvalAddress !== void 0) return "a native input approves nothing";
+  }
+  if (quote.intentId.replace(/~[0-9a-f]{32}$/, "") !== `lifi:${fromChain}:${toChain}`) return "the intent id does not name this route";
+  const why = diamondCallMismatch(tx.data, {
+    fromToken,
+    toToken: nativeFor(params.destChain, params.destToken),
+    amountIn,
+    receiver: toAddress,
+    sender: fromAddress,
+    minOut,
+    destChainId: BigInt(toChain),
+    sameChain: fromChain === toChain,
+    evmDestination: !isSolana(params.destChain)
+  });
+  return why ? `the transaction does not match the request: ${why}` : null;
+}
 var lifiPins = Object.freeze({
   callTargets: (chain) => /^eip155:[0-9]+$/.test(chain) ? [diamondFor(chain)] : [],
-  spenders: (chain) => /^eip155:[0-9]+$/.test(chain) ? [diamondFor(chain)] : []
+  spenders: (chain) => /^eip155:[0-9]+$/.test(chain) ? [diamondFor(chain)] : [],
+  verifyQuote: lifiVerifyQuote
 });
 
 export {
   lifiProvider,
+  lifiVerifyQuote,
   lifiPins
 };
-//# sourceMappingURL=chunk-Z27B4UI4.js.map
+//# sourceMappingURL=chunk-67QPKWAY.js.map