@anywalletkit/protocol-swap2-lifi 0.6.1 → 0.8.0

package/dist/index.js

@@ -1,15 +1,15 @@
 import {
   LifiSwap2Protocol
-} from "./chunk-YABKNR7N.js";
+} from "./chunk-OYGVC7DJ.js";
 import {
   lifiPins,
   lifiProvider,
   lifiVerifyQuote
-} from "./chunk-IZ7TP4KT.js";
+} from "./chunk-GWUGK4SG.js";
 import {
   LIFI_SOLANA_CAIP2,
   lifi
-} from "./chunk-6N4HZ5XX.js";
+} from "./chunk-AARB4MBP.js";
 import {
   LIFI_MODULE,
   LIFI_SAME_CHAIN_SELECTORS,

package/dist/protocol.cjs

@@ -28,7 +28,7 @@ var import_single = require("@anywalletkit/protocol-swap2-core/swap2/single");
 // src/config.ts
 var import_util = require("@anywalletkit/protocol-swap2-core/util");
 var LIFI_SOLANA_CAIP2 = "solana:mainnet";
-var LIFI_EVM = /* @__PURE__ */ new Set([1, 8453, 56, 137, 42161, 10, 100, 143, 130, 999, 4663, 43114, 534352, 80094, 324, 42220, 4326, 9745, 59144, 146, 480, 1329, 57073, 98866, 196, 5042, 5e3, 747474, 2818, 14]);
+var LIFI_EVM = /* @__PURE__ */ new Set([1, 8453, 56, 137, 42161, 10, 100, 143, 130, 999, 4663, 43114, 534352, 80094, 324, 42220, 4326, 9745, 59144, 146, 480, 1329, 57073, 98866, 196, 5042, 5e3, 747474, 2818, 14, 99901]);
 var lifi = {
   enabled: () => true,
   apiKey: () => void 0,
@@ -73,6 +73,70 @@ function describeLifiActivity(tx, ctx, isDiamond) {
   });
 }
 
+// src/solana-address.ts
+var import_ed25519 = require("@noble/curves/ed25519.js");
+var import_sha2 = require("@noble/hashes/sha2.js");
+var ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+var BASE58 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
+var SOLANA_TOKEN_PROGRAM = "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";
+var ASSOCIATED_TOKEN_PROGRAM = "ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL";
+var PDA_MARKER = Uint8Array.from("ProgramDerivedAddress", (c) => c.charCodeAt(0));
+function base58(bytes) {
+  let n = 0n;
+  for (const b of bytes) n = n << 8n | BigInt(b);
+  let out = "";
+  while (n > 0n) {
+    out = ALPHABET[Number(n % 58n)] + out;
+    n /= 58n;
+  }
+  for (const b of bytes) {
+    if (b !== 0) break;
+    out = `1${out}`;
+  }
+  return out;
+}
+function solanaKey(address) {
+  if (!BASE58.test(address)) return null;
+  let n = 0n;
+  for (const ch of address) n = n * 58n + BigInt(ALPHABET.indexOf(ch));
+  let zeros = 0;
+  while (address[zeros] === "1") zeros++;
+  const body = [];
+  while (n > 0n) {
+    body.unshift(Number(n & 0xffn));
+    n >>= 8n;
+  }
+  if (zeros + body.length !== 32) return null;
+  const out = new Uint8Array(32);
+  out.set(body, zeros);
+  return out;
+}
+var onCurve = (bytes) => {
+  try {
+    import_ed25519.ed25519.Point.fromBytes(bytes);
+    return true;
+  } catch {
+    return false;
+  }
+};
+function programAddress(seeds, program) {
+  for (let bump = 255; bump >= 0; bump--) {
+    const parts = [...seeds, Uint8Array.of(bump), program, PDA_MARKER];
+    const buf = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+    let at = 0;
+    for (const p of parts) {
+      buf.set(p, at);
+      at += p.length;
+    }
+    const hash = (0, import_sha2.sha256)(buf);
+    if (!onCurve(hash)) return hash;
+  }
+  throw new Error("no program address for these seeds");
+}
+function associatedTokenAccount(owner, mint, tokenProgram = solanaKey(SOLANA_TOKEN_PROGRAM)) {
+  return programAddress([owner, tokenProgram, mint], solanaKey(ASSOCIATED_TOKEN_PROGRAM));
+}
+
 // src/calldata.ts
 var GENERIC_SWAPS = {
   "0x4630a0d8": { single: false },
@@ -383,8 +447,9 @@ var FACET_DATA = {
   Frax: { inline: 5, refunds: [["refundRecipient", 3]], zeroRefused: true },
   Glacis: { inline: 4, refunds: [["refundAddress", 1]], zeroRefused: true },
   LayerSwap: { refunds: [["refundRecipient", 2]], zeroRefused: true },
+  // The escrow order's user. Not reached while LI.FI Intents is refused on every EVM-source route (INTENTS_UNPINNED); kept for when
+  // its oracles and settler are pinned.
   LiFiIntentEscrowV2: { refunds: [["depositAndRefundAddress", 2]], zeroRefused: true },
-  // the escrow order's user
   M0: { inline: 7, refunds: [["refundRecipient", 1], ["orderOwner", 2]], zeroRefused: true, delivery: m0Delivery },
   // orderOwner gets a cancelled order back
   Mayan: { refunds: [["refundRecipient", 7]], nested: mayanRefunds, zeroRefused: true },
@@ -412,6 +477,86 @@ function refundMismatch(r, bridge, e) {
   }
   return null;
 }
+var NON_EVM_UNREAD = "the recipient on a non-EVM destination sits in bridge-specific data and cannot be checked here";
+var LIFI_SOLANA_CHAIN_ID = 1151111081099710n;
+var NON_EVM_ADDRESS = "0x11f111f111f111f111f111f111f111f111f111f1";
+var SOLANA_USDC = "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v";
+var WORMHOLE_SOLANA = 1n;
+var CCTP_DOMAIN_SOLANA = 5n;
+var CHAINFLIP_SOLANA_ASSETS = {
+  "11111111111111111111111111111111": 9n,
+  [SOLANA_USDC]: 10n,
+  Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB: 16n
+};
+var DEPOSIT_FACETS = /* @__PURE__ */ new Set(["NEARIntents", "LayerSwap", "Unit"]);
+var MAYAN_SOLANA = {
+  // Swift v2 createOrderWithToken(tokenIn, amountIn, (payloadType, trader, destAddr, destChainId, referrerAddr, tokenOut, minAmountOut, …), customPayload)
+  "0xa3a30834": { destAddr: 4, chain: 5, cctp: false, payloadType: [2, 1n], tokenOut: 7 },
+  // MCTP createOrder((tokenIn, amountIn, gasDrop, destAddr, destChain, tokenOut, minAmountOut, deadline, redeemFee, referrerAddr, referrerBps))
+  "0x1c59b7fc": { destAddr: 3, chain: 4, cctp: false, tokenOut: 5 },
+  // MCTP bridgeWithFee(tokenIn, amountIn, redeemFee, gasDrop, destAddr, destDomain, payloadType, customPayload): delivers USDC
+  "0x2072197f": { destAddr: 4, chain: 5, cctp: true, payloadType: [6, 1n] },
+  // Fast MCTP bridge(tokenIn, amountIn, redeemFee, circleMaxFee, gasDrop, destAddr, destDomain, referrerAddress, referrerBps, payloadType, minFinalityThreshold, customPayload): delivers USDC
+  "0xf58b6de8": { destAddr: 5, chain: 6, cctp: true, payloadType: [9, 1n] },
+  // Fast MCTP createOrder(tokenIn, amountIn, circleMaxFee, destDomain, minFinalityThreshold, (payloadType 3, destAddr, tokenOut, amountOutMin, …))
+  "0x2337e236": { destAddr: 6, chain: 3, cctp: true, payloadType: [5, 3n], tokenOut: 7 }
+};
+var hexOf = (b) => `0x${Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("")}`;
+var keyOf = (word) => base58(Uint8Array.from(word.slice(2).match(/../g) ?? [], (h) => Number.parseInt(h, 16)));
+function mayanToSolana(r, at, t) {
+  const declared = r.raw(at, 32);
+  if (declared !== t.ownerHex) return `Mayan's nonEVMReceiver is ${keyOf(declared)}, not the recipient ${t.e.receiver}`;
+  const p = r.bytes(at, at + 32 * 2);
+  const selector = p.raw(0, 4);
+  const o = MAYAN_SOLANA[selector];
+  if (!o) return `the Mayan call ${selector} is an entry point whose Solana recipient cannot be checked here`;
+  const word = (i) => 4 + 32 * i;
+  if (o.payloadType && p.word(word(o.payloadType[0])) !== o.payloadType[1]) return `the Mayan call ${selector} carries payload type ${p.word(word(o.payloadType[0]))}, not a plain delivery`;
+  const dest = p.raw(word(o.destAddr), 32);
+  if (dest !== t.ownerHex) return `the Mayan order pays ${keyOf(dest)} on Solana, not the recipient ${t.e.receiver}`;
+  const chain = p.word(word(o.chain));
+  if (chain !== (o.cctp ? CCTP_DOMAIN_SOLANA : WORMHOLE_SOLANA)) return `the Mayan order goes to ${o.cctp ? "CCTP domain" : "Wormhole chain"} ${chain}, not Solana`;
+  if (o.tokenOut === void 0) return t.e.toToken === SOLANA_USDC ? null : `a Mayan CCTP transfer delivers USDC, not ${t.e.toToken}`;
+  const token = p.raw(word(o.tokenOut), 32);
+  return token === t.mintHex ? null : `the Mayan order delivers ${keyOf(token)}, not ${t.e.toToken}`;
+}
+function polymerToSolana(r, at, t) {
+  const declared = r.raw(at + 32 * 2, 32);
+  if (declared !== t.ownerHex) return `Polymer CCTP's nonEVMReceiver is ${keyOf(declared)}, not the recipient ${t.e.receiver}`;
+  if (t.e.toToken !== SOLANA_USDC) return `Polymer CCTP delivers USDC, not ${t.e.toToken}`;
+  const mintTo = r.raw(at + 32 * 3, 32);
+  const account = hexOf(associatedTokenAccount(t.owner, t.mint));
+  return mintTo === account ? null : `the Polymer CCTP transfer mints to ${keyOf(mintTo)}, not the recipient's USDC account ${keyOf(account)}`;
+}
+function chainflipToSolana(r, at, t) {
+  const dst = r.bytes(at, at);
+  if (dst.length !== 32) return `Chainflip pays a ${dst.length}-byte address on Solana, not the recipient ${t.e.receiver}`;
+  if (dst.raw(0, 32) !== t.ownerHex) return `Chainflip pays ${keyOf(dst.raw(0, 32))} on Solana, not the recipient ${t.e.receiver}`;
+  const asset = r.word(at + 32);
+  const want = CHAINFLIP_SOLANA_ASSETS[t.e.toToken];
+  return want !== void 0 && asset === want ? null : `Chainflip delivers its asset ${asset}, not ${t.e.toToken}`;
+}
+var SOLANA_DELIVERY = {
+  Mayan: mayanToSolana,
+  PolymerCCTP: polymerToSolana,
+  Chainflip: chainflipToSolana
+};
+var INTENTS_TO_SOLANA = "a LI.FI Intents order to Solana names its own oracles, output settler and output amount, which cannot be checked here \u2014 its escrow could release the input without the delivery";
+var INTENTS_UNPINNED = "a LI.FI Intents order to an EVM chain names its own oracles, output settler and output amount, which cannot be checked here \u2014 its escrow could release the input without the delivery";
+var INTENTS_FACET = "LiFiIntentEscrowV2";
+function solanaRecipientMismatch(r, bridge, receiver, e) {
+  if (e.destChainId !== LIFI_SOLANA_CHAIN_ID) return NON_EVM_UNREAD;
+  if (!same(receiver, NON_EVM_ADDRESS)) return `BridgeData pays ${receiver}, not LI.FI's non-EVM placeholder ${NON_EVM_ADDRESS}, on a Solana route`;
+  if (DEPOSIT_FACETS.has(bridge.facet)) return `${bridge.facet} pays a deposit address whose off-chain order names the Solana recipient \u2014 the transaction does not bind it`;
+  if (bridge.facet === INTENTS_FACET) return INTENTS_TO_SOLANA;
+  const read = SOLANA_DELIVERY[bridge.facet];
+  if (!read) return NON_EVM_UNREAD;
+  const owner = solanaKey(e.receiver);
+  if (!owner) return `the recipient ${e.receiver} is not a Solana address`;
+  const mint = solanaKey(e.toToken);
+  if (!mint) return `the destination token ${e.toToken} is not a Solana mint`;
+  return read(r, facetDataAt(r, bridge, FACET_DATA[bridge.facet]), { owner, ownerHex: hexOf(owner), mint, mintHex: hexOf(mint), e });
+}
 function diamondCallMismatch(data, e) {
   let r;
   try {
@@ -440,6 +585,7 @@ function diamondCallMismatch(data, e) {
     if (unbound) return `${unbound} delivers to a recipient the transaction does not bind (an off-chain order or unchecked facet data)`;
     const bridge = BRIDGE_CALLS[selector];
     if (!bridge) return `unknown Diamond call ${selector}`;
+    if (bridge.facet === INTENTS_FACET && e.evmDestination) return INTENTS_UNPINNED;
     const head = r.small(4);
     if (head < (bridge.sourceSwaps ? 96 : 64) || head % 32 !== 0 || head > 32 * 32) return `unknown Diamond call ${selector}`;
     const at = 4 + head;
@@ -453,8 +599,10 @@ function diamondCallMismatch(data, e) {
     if (e.sameChain) return "a bridge call on a same-chain route";
     if (destinationChainId !== e.destChainId) return `bridges to chain ${destinationChainId}, not ${e.destChainId}`;
     if (hasDestinationCall) return "the route runs a call on the destination chain, whose recipient cannot be checked here";
-    if (!e.evmDestination) return "the recipient on a non-EVM destination sits in bridge-specific data and cannot be checked here";
-    if (!same(receiver, e.receiver)) return `pays ${receiver}, not ${e.receiver}`;
+    if (!e.evmDestination) {
+      const why = solanaRecipientMismatch(r, bridge, receiver, e);
+      if (why) return why;
+    } else if (!same(receiver, e.receiver)) return `pays ${receiver}, not ${e.receiver}`;
     if (hasSourceSwaps !== bridge.sourceSwaps) return `unknown Diamond call ${selector}`;
     const refund = refundMismatch(r, bridge, e);
     if (refund) return refund;
@@ -474,7 +622,6 @@ function diamondCallMismatch(data, e) {
 
 // src/solana.ts
 var import_util2 = require("@anywalletkit/protocol-swap2-core/util");
-var ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
 var MAYAN_ENTRY_PROGRAMS = /* @__PURE__ */ new Set([
   "D8C8iW6zmoKg5TRr8nQ7h14TMWqQX8FiBdj2ju5MF3wa",
   // CPI_PROXY_PROGRAM_ID
@@ -489,20 +636,6 @@ var MAYAN_ENTRY_PROGRAMS = /* @__PURE__ */ new Set([
 ]);
 var SYSTEM_PROGRAM = "11111111111111111111111111111111";
 var LIFI_SOLANA_FEE_WALLET = "34FKjAdVcTax2DHqV2XnbXa9J3zmyKcFuFKWbcmgxjgm";
-function base58(bytes) {
-  let n = 0n;
-  for (const b of bytes) n = n << 8n | BigInt(b);
-  let out = "";
-  while (n > 0n) {
-    out = ALPHABET[Number(n % 58n)] + out;
-    n /= 58n;
-  }
-  for (const b of bytes) {
-    if (b !== 0) break;
-    out = `1${out}`;
-  }
-  return out;
-}
 var Cursor = class {
   constructor(b) {
     this.b = b;
@@ -603,6 +736,10 @@ var LIFI_CHAIN = {
   "eip155:747474": "747474",
   "eip155:2818": "2818",
   "eip155:14": "14",
+  // 2026-11-10: Elysium (Kinetiq; li.quest/v1/chains id 99901, key "ely"). LI.FI's bridges there are Relay (refused
+  // below: UNBOUND_TOOLS) and LI.FI Intents (refused too: UNPINNED_TOOLS), so it has no cross-chain LI.FI route for now;
+  // same-chain swaps go through GenericSwapFacetV3 (KyberSwap, Nordstern).
+  "eip155:99901": "99901",
   [LIFI_SOLANA_CAIP2]: "1151111081099710"
 };
 var CAIP2_BY_LIFI_CHAIN = Object.fromEntries(Object.entries(LIFI_CHAIN).map(([caip2, id]) => [id, caip2]));
@@ -611,12 +748,12 @@ var SOLANA_NATIVE = "11111111111111111111111111111111";
 var EVM_PLACEHOLDER = "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045";
 var SOLANA_PLACEHOLDER = "HAgk14JpMQLgt6rVgv7cBQFJWFto5Dqxi472uT3DKpqk";
 var isSolana = (chain) => chain === LIFI_SOLANA_CAIP2;
-var BASE58 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
+var BASE582 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
 var BASE64 = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
 var SAME_CHAIN_MAX_SECONDS = 90;
 var MAX_INPUT_FEE_BPS = 300;
 function sameChainAddress(chain, actual, expected) {
-  if (isSolana(chain)) return !!actual && BASE58.test(actual) && actual === expected;
+  if (isSolana(chain)) return !!actual && BASE582.test(actual) && actual === expected;
   return sameAddress(actual, expected);
 }
 function nativeFor(chain, token) {
@@ -655,6 +792,10 @@ var LIFI_DIAMONDS = {
   // Morph
   "eip155:14": "0x198FC70Dfe05E755C81e54bd67Bff3F729344B9b",
   // Flare (li.quest diamondAddress 2026-10-14; the canonical 0x1231… has no code there)
+  // Elysium: li.quest diamondAddress = deployments/elysium.json LiFiDiamond; code on 99901, DiamondLoupe facets() serves
+  // GenericSwapFacetV3 + LiFiIntentEscrowFacetV2; the canonical 0x1231… has no code there (all read 2026-11-10).
+  "eip155:99901": "0x24E6dA91AA4A8FEe2447F542c92E006243bd6Dc5",
+  // Elysium
   "eip155:4326": "0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37"
   // MegaETH (deployments/megaeth.json, matches a live quote 2026-10-12)
 };
@@ -701,7 +842,16 @@ function headers(key) {
 }
 var TOOL_KEY = /^[A-Za-z0-9_-]{1,64}$/;
 var UNBOUND_TOOLS = Object.freeze(["relaydepository", "garden", "squid", "symbiosis"]);
-function routeOptions(body, excluded) {
+var UNPINNED_TOOLS = Object.freeze(["lifiIntents"]);
+var REFUSED_EVM_TOOLS = Object.freeze([...UNBOUND_TOOLS, ...UNPINNED_TOOLS]);
+var SOLANA_DESTINATION_TOOLS = Object.freeze(["mayan", "mayanMCTP", "mayanFastMCTP", "polymer", "polymerStandard", "chainflip"]);
+var SMART_DEPOSITS_TOOL = /^smartdeposits?$/i;
+var dryRecipient = (params, fromAddress) => !isSolana(params.sourceChain) && isSolana(params.destChain) ? SOLANA_PLACEHOLDER : fromAddress;
+function placeholderIn(params) {
+  if (!params.refundAddress) return "sender";
+  return !params.destAddress && dryRecipient(params, params.refundAddress) !== params.refundAddress ? "recipient" : null;
+}
+function routeOptions(body, excluded, allowed) {
   const routes = body?.routes;
   if (!Array.isArray(routes)) return [];
   const out = [];
@@ -711,7 +861,7 @@ function routeOptions(body, excluded) {
     const cross = Array.isArray(step.includedSteps) ? step.includedSteps.find((i) => i?.type === "cross")?.tool : void 0;
     const tool = typeof cross === "string" ? cross : step.tool;
     const eta = step.estimate?.executionDuration;
-    if (typeof tool !== "string" || !TOOL_KEY.test(tool) || excluded.includes(tool) || typeof eta !== "number" || !Number.isFinite(eta) || eta < 0) continue;
+    if (typeof tool !== "string" || !TOOL_KEY.test(tool) || excluded.includes(tool) || allowed && !allowed.includes(tool) || typeof eta !== "number" || !Number.isFinite(eta) || eta < 0) continue;
     if (typeof r.toAmount !== "string" || typeof r.toAmountMin !== "string" || !/^\d{1,60}$/.test(r.toAmount) || !/^\d{1,60}$/.test(r.toAmountMin)) continue;
     out.push({
       tool,
@@ -776,13 +926,15 @@ function lifiProvider(config = {}) {
       if (!fromToken) return null;
       const solanaSource = isSolana(params.sourceChain);
       const crossChain = params.sourceChain !== params.destChain;
+      const evmToSolana = !solanaSource && isSolana(params.destChain);
       const noDestinationCall = crossChain && !solanaSource;
       let routeScope = config.routeWideSlippage === true && !solanaSource && !isSolana(params.destChain);
       const dry = params.dry !== false;
       const fromAddress = params.refundAddress || (dry ? solanaSource ? SOLANA_PLACEHOLDER : EVM_PLACEHOLDER : "");
-      const toAddress = params.destAddress || (dry ? fromAddress : "");
+      const toAddress = params.destAddress || (dry ? dryRecipient(params, fromAddress) : "");
       if (!fromAddress) return reject("a live quote needs the sender's address");
       if (!toAddress) return reject("a live quote needs a recipient");
+      const placeholder = dry ? placeholderIn(params) : null;
       const slippageBps = params.slippageBps ?? defaultSlippageBps;
       let sentSlippage = slippageBps / 1e4;
       let deadline;
@@ -803,7 +955,7 @@ function lifiProvider(config = {}) {
               options: {
                 slippage: slippageBps / 1e4,
                 ...routeScope ? { slippageScope: "route" } : {},
-                ...solanaSource ? {} : { bridges: { deny: UNBOUND_TOOLS } },
+                ...solanaSource ? {} : { bridges: { ...evmToSolana ? { allow: SOLANA_DESTINATION_TOOLS } : {}, deny: REFUSED_EVM_TOOLS } },
                 ...noDestinationCall ? { allowDestinationCall: false } : {},
                 ...integrator().trim() ? { integrator: integrator().trim() } : {}
               }
@@ -811,7 +963,7 @@ function lifiProvider(config = {}) {
             signal: signal ?? (0, import_util3.timeoutSignal)(8e3)
           });
           if (res.ok) {
-            const options = routeOptions(await res.json(), solanaSource ? [] : UNBOUND_TOOLS);
+            const options = routeOptions(await res.json(), solanaSource ? [] : REFUSED_EVM_TOOLS, evmToSolana ? SOLANA_DESTINATION_TOOLS : void 0);
             if (options.length) choice = cleanChoice(config.chooseRoute(options, params));
           }
         } catch {
@@ -833,8 +985,10 @@ function lifiProvider(config = {}) {
         }
         if (routeScope) url.searchParams.set("slippageScope", "route");
         if (noDestinationCall) url.searchParams.set("allowDestinationCall", "false");
-        const unbound = crossChain && !solanaSource ? UNBOUND_TOOLS : [];
-        for (const t of (choice?.allowBridges ?? []).filter((b) => solanaSource || !UNBOUND_TOOLS.includes(b))) url.searchParams.append("allowBridges", t);
+        const unbound = crossChain && !solanaSource ? REFUSED_EVM_TOOLS : [];
+        const allow = (choice?.allowBridges ?? []).filter((b) => solanaSource || !REFUSED_EVM_TOOLS.includes(b));
+        const solanaAllow = evmToSolana ? allow.filter((b) => SOLANA_DESTINATION_TOOLS.includes(b)) : [];
+        for (const t of evmToSolana ? solanaAllow.length ? solanaAllow : SOLANA_DESTINATION_TOOLS : allow) url.searchParams.append("allowBridges", t);
         for (const t of /* @__PURE__ */ new Set([...choice?.denyBridges ?? [], ...unbound])) url.searchParams.append("denyBridges", t);
         if (choice?.order) url.searchParams.set("order", choice.order);
         deadline = signal ? void 0 : (0, import_util3.timeoutSignal)(12e3);
@@ -858,6 +1012,13 @@ function lifiProvider(config = {}) {
         }
         const q = await res.json();
         const receivedAt = Date.now();
+        if (evmToSolana) {
+          const steps = q.includedSteps;
+          const tools = [q.tool, ...Array.isArray(steps) ? steps.map((i) => i?.tool) : []];
+          if (tools.some((t) => typeof t === "string" && SMART_DEPOSITS_TOOL.test(t))) {
+            return reject("LI.FI Smart Deposits pay a deposit address whose recipient the transaction does not bind \u2014 refused for a Solana destination");
+          }
+        }
         const action = q.action;
         const est = q.estimate;
         const tr = q.transactionRequest;
@@ -898,6 +1059,7 @@ function lifiProvider(config = {}) {
           if (!trustedAddress(params.sourceChain, est.approvalAddress, trustedApprovalAddresses)) return reject("the approval target is not a trusted LI.FI contract");
         }
         let txRequest;
+        let nativeFee = 0n;
         if (solanaSource) {
           txRequest = { serializedTx: tr.data, value: sourceIsToken ? "0" : params.amountIn };
         } else {
@@ -907,7 +1069,7 @@ function lifiProvider(config = {}) {
             return reject("the transaction value or gas limit is not a number");
           }
           const value = BigInt(tr.value);
-          const nativeFee = sourceIsToken ? value : value > BigInt(params.amountIn) ? value - BigInt(params.amountIn) : 0n;
+          nativeFee = sourceIsToken ? value : value > BigInt(params.amountIn) ? value - BigInt(params.amountIn) : 0n;
           if (!sourceIsToken && value < BigInt(params.amountIn)) return reject("the transaction sends less native coin than the input");
           txRequest = {
             to: tr.to,
@@ -968,7 +1130,10 @@ function lifiProvider(config = {}) {
           intentId: `lifi:${fromChain}:${toChain}`,
           depositAddress: "",
           depositMemo: null,
-          txRequest,
+          // Every check above ran on LI.FI's transaction; one built for a placeholder is not handed out (placeholderIn).
+          // Its bridge fee on top of the input still is, as `providerData.nativeFee`, so the router's value nets it out
+          // (usdValue reads it when there is no txRequest) instead of ranking the route on its gross output.
+          ...placeholder ? { providerData: { placeholder, ...nativeFee > 0n ? { nativeFee: nativeFee.toString() } : {} } } : { txRequest },
           // What the wallet spends (action.fromAmount, = the input); an input-side bridge fee is inside destAmount.
           sourceAmount: params.amountIn,
           destAmount: est.toAmount,
@@ -988,6 +1153,10 @@ function lifiProvider(config = {}) {
       return null;
     },
     async buildDeposit(quote) {
+      const placeholder = quote.providerData?.placeholder;
+      if (placeholder !== void 0) {
+        throw new Error(`swap2: this LI.FI quote was priced for a placeholder ${String(placeholder).slice(0, 20)} (a dry quote without that address) and has no transaction to build \u2014 quote again with the sender and the recipient`);
+      }
       const tx = quote.txRequest;
       if (!tx) throw new Error("swap2: LI.FI quote has no transaction request");
       const [, fromChain] = quote.intentId.split(":");
@@ -1039,6 +1208,11 @@ function lifiVerifyQuote(params, quote) {
   const fromChain = LIFI_CHAIN[params.sourceChain];
   const toChain = LIFI_CHAIN[params.destChain];
   if (!fromChain || !toChain) return "not a LI.FI chain pair";
+  const placeholder = params.dry !== false ? placeholderIn(params) : null;
+  if (placeholder) {
+    if (quote.txRequest !== void 0) return `a dry quote priced for a placeholder ${placeholder} carries a transaction \u2014 it would pay or refund that placeholder, not the wallet that signs it`;
+    return priceOnlyMismatch(params, quote, `lifi:${fromChain}:${toChain}`);
+  }
   const tx = quote.txRequest;
   if (!tx) return "the quote carries no transaction";
   if (isSolana(params.sourceChain)) {
@@ -1053,7 +1227,7 @@ function lifiVerifyQuote(params, quote) {
   const sourceIsToken = fromToken !== EVM_ZERO;
   const dry = params.dry !== false;
   const fromAddress = params.refundAddress || (dry ? EVM_PLACEHOLDER : "");
-  const toAddress = params.destAddress || (dry ? fromAddress : "");
+  const toAddress = params.destAddress || (dry ? dryRecipient(params, fromAddress) : "");
   if (!fromAddress || !toAddress) return "a live quote needs the sender and the recipient";
   let amountIn, minOut, value, nativeFee;
   try {
@@ -1087,6 +1261,19 @@ function lifiVerifyQuote(params, quote) {
   });
   return why ? `the transaction does not match the request: ${why}` : null;
 }
+function priceOnlyMismatch(params, quote, route) {
+  if (quote.depositAddress !== "") return `a LI.FI quote pays no deposit address, but this one names ${String(quote.depositAddress).slice(0, 64)}`;
+  const fee = quote.providerData?.nativeFee;
+  if (fee !== void 0 && !/^\d{1,80}$/.test(String(fee))) return `the price-only quote declares a native fee of ${String(fee).slice(0, 40)}, not a base-unit integer`;
+  try {
+    if (BigInt(quote.sourceAmount) !== BigInt(params.amountIn)) return `the quote spends ${quote.sourceAmount}, not the ${params.amountIn} input`;
+    const minOut = BigInt(quote.minDestAmount);
+    if (params.minAmountOut !== void 0 && minOut < BigInt(params.minAmountOut)) return `the quoted minimum ${minOut} is below the caller's floor ${params.minAmountOut}`;
+  } catch {
+    return "the quote's amounts are not integers";
+  }
+  return quote.intentId.replace(/~[0-9a-f]{32}$/, "") === route ? null : "the intent id does not name this route";
+}
 var lifiPins = Object.freeze({
   callTargets: (chain) => /^eip155:[0-9]+$/.test(chain) ? [diamondFor(chain)] : [],
   spenders: (chain) => /^eip155:[0-9]+$/.test(chain) ? [diamondFor(chain)] : [],