@anywalletkit/protocol-swap2-lifi 0.7.0 → 0.8.0

package/README.md

@@ -27,11 +27,47 @@ calls are refused) and its `BridgeData` must name the reviewed recipient and cha
 input token (or what its source swaps make of it). Every refund, depositor or fallback address a
 bridge carries in its own data (Stargate's LayerZero fee refund, an expired Across deposit or LI.FI
 intent, a Mayan Swift order's trader, Chainflip's refund address, …) must be the sender or the
-recipient. Refused, because the recipient cannot be read from the calldata: routes with a destination call, EVM-source routes to a non-EVM chain, and the
+recipient. Refused, because the recipient cannot be read from the calldata: routes with a destination call and the
 bridges whose facet does not bind the delivery to `BridgeData` (Relay, Garden, deBridge DLN,
 ThorSwap, Squid, Symbiosis) — cross-chain requests ask LI.FI to route around Relay, Garden, Squid
 and Symbiosis, and not to offer destination calls (`allowDestinationCall=false`), so their pairs get
-another bridge. Unknown calldata is refused.
+another bridge. **LI.FI Intents** (`lifiIntents`) is refused on every route from an EVM chain and denied in every
+cross-chain request from an EVM chain (Solana-source requests are unchanged): its escrowed order names its own input oracle, output oracle, output settler and
+output amount multiplier, none of which is pinned here, so a matching recipient would not bind the delivery (the
+escrow releases the input on the oracle's word). LI.FI serves those pairs through another bridge; where LI.FI Intents
+is its only one (Elysium, 2026-11-13) LI.FI has no route. Unknown calldata is refused.
+
+**EVM → Solana.** `BridgeData` names LI.FI's Solana chain id and, as its receiver, only LI.FI's non-EVM
+placeholder (`0x11f1…11F1`, required exactly); the recipient sits in the bridge's own data and is read there for
+the bridges whose delivery the transaction binds, then held to the requested owner (`destAddress`) and token:
+
+- **Mayan** (`mayan`, `mayanMCTP`, `mayanFastMCTP`): the facet's `nonEVMReceiver` and the destination address in
+  the Mayan order or transfer it forwards (Swift v2, MCTP `createOrder` / `bridgeWithFee`, Fast MCTP `createOrder`
+  / `bridge`) must both be the owner; the order must go to Solana (Wormhole chain 1 / CCTP domain 5), carry no
+  custom payload and name the requested mint (32 zero bytes for SOL); a plain CCTP transfer delivers USDC. Other
+  Mayan entry points are refused.
+- **Polymer CCTP** (`polymer`, `polymerStandard`): CCTP mints to the token account the calldata names, which the
+  facet cannot check; it must be the owner's USDC associated token account, derived on the device.
+- **Chainflip**: the vault swap's 32-byte destination address must be the owner and its asset the requested one
+  (SOL, USDC or USDT on Solana).
+
+These requests ask LI.FI for those bridges only (`allowBridges`; a `chooseRoute` pick is kept among them). NEAR
+Intents and LayerSwap pay a deposit address whose off-chain order names the recipient, and Smart Deposits a
+deposit address outright: deposits the device cannot verify, refused for this direction. LI.FI Intents to
+Solana is refused like everywhere else (see above). Any other bridge to Solana is refused as before. Solana-source
+requests are unchanged.
+
+**Dry quotes without an address.** A dry quote (`dry` not `false`) without `refundAddress` is priced for a
+placeholder sender (vitalik.eth on EVM, the public BIP-39 "abandon" account on Solana), and a dry EVM → Solana quote
+without `destAddress` for the "abandon" account as the recipient. Such a quote prices the route only: it carries no
+`txRequest` (its `providerData.placeholder` names the stand-in), `buildDeposit` refuses it, and `lifiVerifyQuote` /
+`lifiPins` refuse a quote for such a request that carries a transaction — LI.FI's transaction for a placeholder would
+pay or refund that public account from whichever wallet signs it. Quote again with both addresses to build. A dry
+EVM → EVM quote with a `refundAddress` but no recipient prices the sender's own address and keeps its transaction.
+A bridge's native fee on top of the input (LayerZero's on Stargate, for instance) stays on the price-only quote as
+`providerData.nativeFee` (base units of the source chain's native coin), which the router's `usdValue` and
+`quoteValues` net out of its value as they do `txRequest.nativeFee`; `lifiVerifyQuote` refuses one that is not a
+base-unit integer.
 
 Every swap step is read, not only the ends: each must spend what the step before delivered, only
 steps that spend the input token may pull from the wallet (`requiresDeposit`), and together at most

package/dist/{chunk-HJRWHGMX.js → chunk-GWUGK4SG.js}

@@ -6,6 +6,70 @@ import {
   describeLifiActivity
 } from "./chunk-EU7XQVZQ.js";
 
+// src/solana-address.ts
+import { ed25519 } from "@noble/curves/ed25519.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+var ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+var BASE58 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
+var SOLANA_TOKEN_PROGRAM = "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";
+var ASSOCIATED_TOKEN_PROGRAM = "ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL";
+var PDA_MARKER = Uint8Array.from("ProgramDerivedAddress", (c) => c.charCodeAt(0));
+function base58(bytes) {
+  let n = 0n;
+  for (const b of bytes) n = n << 8n | BigInt(b);
+  let out = "";
+  while (n > 0n) {
+    out = ALPHABET[Number(n % 58n)] + out;
+    n /= 58n;
+  }
+  for (const b of bytes) {
+    if (b !== 0) break;
+    out = `1${out}`;
+  }
+  return out;
+}
+function solanaKey(address) {
+  if (!BASE58.test(address)) return null;
+  let n = 0n;
+  for (const ch of address) n = n * 58n + BigInt(ALPHABET.indexOf(ch));
+  let zeros = 0;
+  while (address[zeros] === "1") zeros++;
+  const body = [];
+  while (n > 0n) {
+    body.unshift(Number(n & 0xffn));
+    n >>= 8n;
+  }
+  if (zeros + body.length !== 32) return null;
+  const out = new Uint8Array(32);
+  out.set(body, zeros);
+  return out;
+}
+var onCurve = (bytes) => {
+  try {
+    ed25519.Point.fromBytes(bytes);
+    return true;
+  } catch {
+    return false;
+  }
+};
+function programAddress(seeds, program) {
+  for (let bump = 255; bump >= 0; bump--) {
+    const parts = [...seeds, Uint8Array.of(bump), program, PDA_MARKER];
+    const buf = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+    let at = 0;
+    for (const p of parts) {
+      buf.set(p, at);
+      at += p.length;
+    }
+    const hash = sha256(buf);
+    if (!onCurve(hash)) return hash;
+  }
+  throw new Error("no program address for these seeds");
+}
+function associatedTokenAccount(owner, mint, tokenProgram = solanaKey(SOLANA_TOKEN_PROGRAM)) {
+  return programAddress([owner, tokenProgram, mint], solanaKey(ASSOCIATED_TOKEN_PROGRAM));
+}
+
 // src/calldata.ts
 var GENERIC_SWAPS = {
   "0x4630a0d8": { single: false },
@@ -316,8 +380,9 @@ var FACET_DATA = {
   Frax: { inline: 5, refunds: [["refundRecipient", 3]], zeroRefused: true },
   Glacis: { inline: 4, refunds: [["refundAddress", 1]], zeroRefused: true },
   LayerSwap: { refunds: [["refundRecipient", 2]], zeroRefused: true },
+  // The escrow order's user. Not reached while LI.FI Intents is refused on every EVM-source route (INTENTS_UNPINNED); kept for when
+  // its oracles and settler are pinned.
   LiFiIntentEscrowV2: { refunds: [["depositAndRefundAddress", 2]], zeroRefused: true },
-  // the escrow order's user
   M0: { inline: 7, refunds: [["refundRecipient", 1], ["orderOwner", 2]], zeroRefused: true, delivery: m0Delivery },
   // orderOwner gets a cancelled order back
   Mayan: { refunds: [["refundRecipient", 7]], nested: mayanRefunds, zeroRefused: true },
@@ -345,6 +410,86 @@ function refundMismatch(r, bridge, e) {
   }
   return null;
 }
+var NON_EVM_UNREAD = "the recipient on a non-EVM destination sits in bridge-specific data and cannot be checked here";
+var LIFI_SOLANA_CHAIN_ID = 1151111081099710n;
+var NON_EVM_ADDRESS = "0x11f111f111f111f111f111f111f111f111f111f1";
+var SOLANA_USDC = "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v";
+var WORMHOLE_SOLANA = 1n;
+var CCTP_DOMAIN_SOLANA = 5n;
+var CHAINFLIP_SOLANA_ASSETS = {
+  "11111111111111111111111111111111": 9n,
+  [SOLANA_USDC]: 10n,
+  Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB: 16n
+};
+var DEPOSIT_FACETS = /* @__PURE__ */ new Set(["NEARIntents", "LayerSwap", "Unit"]);
+var MAYAN_SOLANA = {
+  // Swift v2 createOrderWithToken(tokenIn, amountIn, (payloadType, trader, destAddr, destChainId, referrerAddr, tokenOut, minAmountOut, …), customPayload)
+  "0xa3a30834": { destAddr: 4, chain: 5, cctp: false, payloadType: [2, 1n], tokenOut: 7 },
+  // MCTP createOrder((tokenIn, amountIn, gasDrop, destAddr, destChain, tokenOut, minAmountOut, deadline, redeemFee, referrerAddr, referrerBps))
+  "0x1c59b7fc": { destAddr: 3, chain: 4, cctp: false, tokenOut: 5 },
+  // MCTP bridgeWithFee(tokenIn, amountIn, redeemFee, gasDrop, destAddr, destDomain, payloadType, customPayload): delivers USDC
+  "0x2072197f": { destAddr: 4, chain: 5, cctp: true, payloadType: [6, 1n] },
+  // Fast MCTP bridge(tokenIn, amountIn, redeemFee, circleMaxFee, gasDrop, destAddr, destDomain, referrerAddress, referrerBps, payloadType, minFinalityThreshold, customPayload): delivers USDC
+  "0xf58b6de8": { destAddr: 5, chain: 6, cctp: true, payloadType: [9, 1n] },
+  // Fast MCTP createOrder(tokenIn, amountIn, circleMaxFee, destDomain, minFinalityThreshold, (payloadType 3, destAddr, tokenOut, amountOutMin, …))
+  "0x2337e236": { destAddr: 6, chain: 3, cctp: true, payloadType: [5, 3n], tokenOut: 7 }
+};
+var hexOf = (b) => `0x${Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("")}`;
+var keyOf = (word) => base58(Uint8Array.from(word.slice(2).match(/../g) ?? [], (h) => Number.parseInt(h, 16)));
+function mayanToSolana(r, at, t) {
+  const declared = r.raw(at, 32);
+  if (declared !== t.ownerHex) return `Mayan's nonEVMReceiver is ${keyOf(declared)}, not the recipient ${t.e.receiver}`;
+  const p = r.bytes(at, at + 32 * 2);
+  const selector = p.raw(0, 4);
+  const o = MAYAN_SOLANA[selector];
+  if (!o) return `the Mayan call ${selector} is an entry point whose Solana recipient cannot be checked here`;
+  const word = (i) => 4 + 32 * i;
+  if (o.payloadType && p.word(word(o.payloadType[0])) !== o.payloadType[1]) return `the Mayan call ${selector} carries payload type ${p.word(word(o.payloadType[0]))}, not a plain delivery`;
+  const dest = p.raw(word(o.destAddr), 32);
+  if (dest !== t.ownerHex) return `the Mayan order pays ${keyOf(dest)} on Solana, not the recipient ${t.e.receiver}`;
+  const chain = p.word(word(o.chain));
+  if (chain !== (o.cctp ? CCTP_DOMAIN_SOLANA : WORMHOLE_SOLANA)) return `the Mayan order goes to ${o.cctp ? "CCTP domain" : "Wormhole chain"} ${chain}, not Solana`;
+  if (o.tokenOut === void 0) return t.e.toToken === SOLANA_USDC ? null : `a Mayan CCTP transfer delivers USDC, not ${t.e.toToken}`;
+  const token = p.raw(word(o.tokenOut), 32);
+  return token === t.mintHex ? null : `the Mayan order delivers ${keyOf(token)}, not ${t.e.toToken}`;
+}
+function polymerToSolana(r, at, t) {
+  const declared = r.raw(at + 32 * 2, 32);
+  if (declared !== t.ownerHex) return `Polymer CCTP's nonEVMReceiver is ${keyOf(declared)}, not the recipient ${t.e.receiver}`;
+  if (t.e.toToken !== SOLANA_USDC) return `Polymer CCTP delivers USDC, not ${t.e.toToken}`;
+  const mintTo = r.raw(at + 32 * 3, 32);
+  const account = hexOf(associatedTokenAccount(t.owner, t.mint));
+  return mintTo === account ? null : `the Polymer CCTP transfer mints to ${keyOf(mintTo)}, not the recipient's USDC account ${keyOf(account)}`;
+}
+function chainflipToSolana(r, at, t) {
+  const dst = r.bytes(at, at);
+  if (dst.length !== 32) return `Chainflip pays a ${dst.length}-byte address on Solana, not the recipient ${t.e.receiver}`;
+  if (dst.raw(0, 32) !== t.ownerHex) return `Chainflip pays ${keyOf(dst.raw(0, 32))} on Solana, not the recipient ${t.e.receiver}`;
+  const asset = r.word(at + 32);
+  const want = CHAINFLIP_SOLANA_ASSETS[t.e.toToken];
+  return want !== void 0 && asset === want ? null : `Chainflip delivers its asset ${asset}, not ${t.e.toToken}`;
+}
+var SOLANA_DELIVERY = {
+  Mayan: mayanToSolana,
+  PolymerCCTP: polymerToSolana,
+  Chainflip: chainflipToSolana
+};
+var INTENTS_TO_SOLANA = "a LI.FI Intents order to Solana names its own oracles, output settler and output amount, which cannot be checked here \u2014 its escrow could release the input without the delivery";
+var INTENTS_UNPINNED = "a LI.FI Intents order to an EVM chain names its own oracles, output settler and output amount, which cannot be checked here \u2014 its escrow could release the input without the delivery";
+var INTENTS_FACET = "LiFiIntentEscrowV2";
+function solanaRecipientMismatch(r, bridge, receiver, e) {
+  if (e.destChainId !== LIFI_SOLANA_CHAIN_ID) return NON_EVM_UNREAD;
+  if (!same(receiver, NON_EVM_ADDRESS)) return `BridgeData pays ${receiver}, not LI.FI's non-EVM placeholder ${NON_EVM_ADDRESS}, on a Solana route`;
+  if (DEPOSIT_FACETS.has(bridge.facet)) return `${bridge.facet} pays a deposit address whose off-chain order names the Solana recipient \u2014 the transaction does not bind it`;
+  if (bridge.facet === INTENTS_FACET) return INTENTS_TO_SOLANA;
+  const read = SOLANA_DELIVERY[bridge.facet];
+  if (!read) return NON_EVM_UNREAD;
+  const owner = solanaKey(e.receiver);
+  if (!owner) return `the recipient ${e.receiver} is not a Solana address`;
+  const mint = solanaKey(e.toToken);
+  if (!mint) return `the destination token ${e.toToken} is not a Solana mint`;
+  return read(r, facetDataAt(r, bridge, FACET_DATA[bridge.facet]), { owner, ownerHex: hexOf(owner), mint, mintHex: hexOf(mint), e });
+}
 function diamondCallMismatch(data, e) {
   let r;
   try {
@@ -373,6 +518,7 @@ function diamondCallMismatch(data, e) {
     if (unbound) return `${unbound} delivers to a recipient the transaction does not bind (an off-chain order or unchecked facet data)`;
     const bridge = BRIDGE_CALLS[selector];
     if (!bridge) return `unknown Diamond call ${selector}`;
+    if (bridge.facet === INTENTS_FACET && e.evmDestination) return INTENTS_UNPINNED;
     const head = r.small(4);
     if (head < (bridge.sourceSwaps ? 96 : 64) || head % 32 !== 0 || head > 32 * 32) return `unknown Diamond call ${selector}`;
     const at = 4 + head;
@@ -386,8 +532,10 @@ function diamondCallMismatch(data, e) {
     if (e.sameChain) return "a bridge call on a same-chain route";
     if (destinationChainId !== e.destChainId) return `bridges to chain ${destinationChainId}, not ${e.destChainId}`;
     if (hasDestinationCall) return "the route runs a call on the destination chain, whose recipient cannot be checked here";
-    if (!e.evmDestination) return "the recipient on a non-EVM destination sits in bridge-specific data and cannot be checked here";
-    if (!same(receiver, e.receiver)) return `pays ${receiver}, not ${e.receiver}`;
+    if (!e.evmDestination) {
+      const why = solanaRecipientMismatch(r, bridge, receiver, e);
+      if (why) return why;
+    } else if (!same(receiver, e.receiver)) return `pays ${receiver}, not ${e.receiver}`;
     if (hasSourceSwaps !== bridge.sourceSwaps) return `unknown Diamond call ${selector}`;
     const refund = refundMismatch(r, bridge, e);
     if (refund) return refund;
@@ -407,7 +555,6 @@ function diamondCallMismatch(data, e) {
 
 // src/solana.ts
 import { base64Bytes } from "@anywalletkit/protocol-swap2-core/util";
-var ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
 var MAYAN_ENTRY_PROGRAMS = /* @__PURE__ */ new Set([
   "D8C8iW6zmoKg5TRr8nQ7h14TMWqQX8FiBdj2ju5MF3wa",
   // CPI_PROXY_PROGRAM_ID
@@ -422,20 +569,6 @@ var MAYAN_ENTRY_PROGRAMS = /* @__PURE__ */ new Set([
 ]);
 var SYSTEM_PROGRAM = "11111111111111111111111111111111";
 var LIFI_SOLANA_FEE_WALLET = "34FKjAdVcTax2DHqV2XnbXa9J3zmyKcFuFKWbcmgxjgm";
-function base58(bytes) {
-  let n = 0n;
-  for (const b of bytes) n = n << 8n | BigInt(b);
-  let out = "";
-  while (n > 0n) {
-    out = ALPHABET[Number(n % 58n)] + out;
-    n /= 58n;
-  }
-  for (const b of bytes) {
-    if (b !== 0) break;
-    out = `1${out}`;
-  }
-  return out;
-}
 var Cursor = class {
   constructor(b) {
     this.b = b;
@@ -537,7 +670,8 @@ var LIFI_CHAIN = {
   "eip155:2818": "2818",
   "eip155:14": "14",
   // 2026-11-10: Elysium (Kinetiq; li.quest/v1/chains id 99901, key "ely"). LI.FI's bridges there are Relay (refused
-  // below: UNBOUND_TOOLS) and LI.FI Intents; same-chain swaps go through GenericSwapFacetV3 (KyberSwap, Nordstern).
+  // below: UNBOUND_TOOLS) and LI.FI Intents (refused too: UNPINNED_TOOLS), so it has no cross-chain LI.FI route for now;
+  // same-chain swaps go through GenericSwapFacetV3 (KyberSwap, Nordstern).
   "eip155:99901": "99901",
   [LIFI_SOLANA_CAIP2]: "1151111081099710"
 };
@@ -547,12 +681,12 @@ var SOLANA_NATIVE = "11111111111111111111111111111111";
 var EVM_PLACEHOLDER = "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045";
 var SOLANA_PLACEHOLDER = "HAgk14JpMQLgt6rVgv7cBQFJWFto5Dqxi472uT3DKpqk";
 var isSolana = (chain) => chain === LIFI_SOLANA_CAIP2;
-var BASE58 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
+var BASE582 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
 var BASE64 = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
 var SAME_CHAIN_MAX_SECONDS = 90;
 var MAX_INPUT_FEE_BPS = 300;
 function sameChainAddress(chain, actual, expected) {
-  if (isSolana(chain)) return !!actual && BASE58.test(actual) && actual === expected;
+  if (isSolana(chain)) return !!actual && BASE582.test(actual) && actual === expected;
   return sameAddress(actual, expected);
 }
 function nativeFor(chain, token) {
@@ -641,7 +775,16 @@ function headers(key) {
 }
 var TOOL_KEY = /^[A-Za-z0-9_-]{1,64}$/;
 var UNBOUND_TOOLS = Object.freeze(["relaydepository", "garden", "squid", "symbiosis"]);
-function routeOptions(body, excluded) {
+var UNPINNED_TOOLS = Object.freeze(["lifiIntents"]);
+var REFUSED_EVM_TOOLS = Object.freeze([...UNBOUND_TOOLS, ...UNPINNED_TOOLS]);
+var SOLANA_DESTINATION_TOOLS = Object.freeze(["mayan", "mayanMCTP", "mayanFastMCTP", "polymer", "polymerStandard", "chainflip"]);
+var SMART_DEPOSITS_TOOL = /^smartdeposits?$/i;
+var dryRecipient = (params, fromAddress) => !isSolana(params.sourceChain) && isSolana(params.destChain) ? SOLANA_PLACEHOLDER : fromAddress;
+function placeholderIn(params) {
+  if (!params.refundAddress) return "sender";
+  return !params.destAddress && dryRecipient(params, params.refundAddress) !== params.refundAddress ? "recipient" : null;
+}
+function routeOptions(body, excluded, allowed) {
   const routes = body?.routes;
   if (!Array.isArray(routes)) return [];
   const out = [];
@@ -651,7 +794,7 @@ function routeOptions(body, excluded) {
     const cross = Array.isArray(step.includedSteps) ? step.includedSteps.find((i) => i?.type === "cross")?.tool : void 0;
     const tool = typeof cross === "string" ? cross : step.tool;
     const eta = step.estimate?.executionDuration;
-    if (typeof tool !== "string" || !TOOL_KEY.test(tool) || excluded.includes(tool) || typeof eta !== "number" || !Number.isFinite(eta) || eta < 0) continue;
+    if (typeof tool !== "string" || !TOOL_KEY.test(tool) || excluded.includes(tool) || allowed && !allowed.includes(tool) || typeof eta !== "number" || !Number.isFinite(eta) || eta < 0) continue;
     if (typeof r.toAmount !== "string" || typeof r.toAmountMin !== "string" || !/^\d{1,60}$/.test(r.toAmount) || !/^\d{1,60}$/.test(r.toAmountMin)) continue;
     out.push({
       tool,
@@ -716,13 +859,15 @@ function lifiProvider(config = {}) {
       if (!fromToken) return null;
       const solanaSource = isSolana(params.sourceChain);
       const crossChain = params.sourceChain !== params.destChain;
+      const evmToSolana = !solanaSource && isSolana(params.destChain);
       const noDestinationCall = crossChain && !solanaSource;
       let routeScope = config.routeWideSlippage === true && !solanaSource && !isSolana(params.destChain);
       const dry = params.dry !== false;
       const fromAddress = params.refundAddress || (dry ? solanaSource ? SOLANA_PLACEHOLDER : EVM_PLACEHOLDER : "");
-      const toAddress = params.destAddress || (dry ? fromAddress : "");
+      const toAddress = params.destAddress || (dry ? dryRecipient(params, fromAddress) : "");
       if (!fromAddress) return reject("a live quote needs the sender's address");
       if (!toAddress) return reject("a live quote needs a recipient");
+      const placeholder = dry ? placeholderIn(params) : null;
       const slippageBps = params.slippageBps ?? defaultSlippageBps;
       let sentSlippage = slippageBps / 1e4;
       let deadline;
@@ -743,7 +888,7 @@ function lifiProvider(config = {}) {
               options: {
                 slippage: slippageBps / 1e4,
                 ...routeScope ? { slippageScope: "route" } : {},
-                ...solanaSource ? {} : { bridges: { deny: UNBOUND_TOOLS } },
+                ...solanaSource ? {} : { bridges: { ...evmToSolana ? { allow: SOLANA_DESTINATION_TOOLS } : {}, deny: REFUSED_EVM_TOOLS } },
                 ...noDestinationCall ? { allowDestinationCall: false } : {},
                 ...integrator().trim() ? { integrator: integrator().trim() } : {}
               }
@@ -751,7 +896,7 @@ function lifiProvider(config = {}) {
             signal: signal ?? timeoutSignal(8e3)
           });
           if (res.ok) {
-            const options = routeOptions(await res.json(), solanaSource ? [] : UNBOUND_TOOLS);
+            const options = routeOptions(await res.json(), solanaSource ? [] : REFUSED_EVM_TOOLS, evmToSolana ? SOLANA_DESTINATION_TOOLS : void 0);
             if (options.length) choice = cleanChoice(config.chooseRoute(options, params));
           }
         } catch {
@@ -773,8 +918,10 @@ function lifiProvider(config = {}) {
         }
         if (routeScope) url.searchParams.set("slippageScope", "route");
         if (noDestinationCall) url.searchParams.set("allowDestinationCall", "false");
-        const unbound = crossChain && !solanaSource ? UNBOUND_TOOLS : [];
-        for (const t of (choice?.allowBridges ?? []).filter((b) => solanaSource || !UNBOUND_TOOLS.includes(b))) url.searchParams.append("allowBridges", t);
+        const unbound = crossChain && !solanaSource ? REFUSED_EVM_TOOLS : [];
+        const allow = (choice?.allowBridges ?? []).filter((b) => solanaSource || !REFUSED_EVM_TOOLS.includes(b));
+        const solanaAllow = evmToSolana ? allow.filter((b) => SOLANA_DESTINATION_TOOLS.includes(b)) : [];
+        for (const t of evmToSolana ? solanaAllow.length ? solanaAllow : SOLANA_DESTINATION_TOOLS : allow) url.searchParams.append("allowBridges", t);
         for (const t of /* @__PURE__ */ new Set([...choice?.denyBridges ?? [], ...unbound])) url.searchParams.append("denyBridges", t);
         if (choice?.order) url.searchParams.set("order", choice.order);
         deadline = signal ? void 0 : timeoutSignal(12e3);
@@ -798,6 +945,13 @@ function lifiProvider(config = {}) {
         }
         const q = await res.json();
         const receivedAt = Date.now();
+        if (evmToSolana) {
+          const steps = q.includedSteps;
+          const tools = [q.tool, ...Array.isArray(steps) ? steps.map((i) => i?.tool) : []];
+          if (tools.some((t) => typeof t === "string" && SMART_DEPOSITS_TOOL.test(t))) {
+            return reject("LI.FI Smart Deposits pay a deposit address whose recipient the transaction does not bind \u2014 refused for a Solana destination");
+          }
+        }
         const action = q.action;
         const est = q.estimate;
         const tr = q.transactionRequest;
@@ -838,6 +992,7 @@ function lifiProvider(config = {}) {
           if (!trustedAddress(params.sourceChain, est.approvalAddress, trustedApprovalAddresses)) return reject("the approval target is not a trusted LI.FI contract");
         }
         let txRequest;
+        let nativeFee = 0n;
         if (solanaSource) {
           txRequest = { serializedTx: tr.data, value: sourceIsToken ? "0" : params.amountIn };
         } else {
@@ -847,7 +1002,7 @@ function lifiProvider(config = {}) {
             return reject("the transaction value or gas limit is not a number");
           }
           const value = BigInt(tr.value);
-          const nativeFee = sourceIsToken ? value : value > BigInt(params.amountIn) ? value - BigInt(params.amountIn) : 0n;
+          nativeFee = sourceIsToken ? value : value > BigInt(params.amountIn) ? value - BigInt(params.amountIn) : 0n;
           if (!sourceIsToken && value < BigInt(params.amountIn)) return reject("the transaction sends less native coin than the input");
           txRequest = {
             to: tr.to,
@@ -908,7 +1063,10 @@ function lifiProvider(config = {}) {
           intentId: `lifi:${fromChain}:${toChain}`,
           depositAddress: "",
           depositMemo: null,
-          txRequest,
+          // Every check above ran on LI.FI's transaction; one built for a placeholder is not handed out (placeholderIn).
+          // Its bridge fee on top of the input still is, as `providerData.nativeFee`, so the router's value nets it out
+          // (usdValue reads it when there is no txRequest) instead of ranking the route on its gross output.
+          ...placeholder ? { providerData: { placeholder, ...nativeFee > 0n ? { nativeFee: nativeFee.toString() } : {} } } : { txRequest },
           // What the wallet spends (action.fromAmount, = the input); an input-side bridge fee is inside destAmount.
           sourceAmount: params.amountIn,
           destAmount: est.toAmount,
@@ -928,6 +1086,10 @@ function lifiProvider(config = {}) {
       return null;
     },
     async buildDeposit(quote) {
+      const placeholder = quote.providerData?.placeholder;
+      if (placeholder !== void 0) {
+        throw new Error(`swap2: this LI.FI quote was priced for a placeholder ${String(placeholder).slice(0, 20)} (a dry quote without that address) and has no transaction to build \u2014 quote again with the sender and the recipient`);
+      }
       const tx = quote.txRequest;
       if (!tx) throw new Error("swap2: LI.FI quote has no transaction request");
       const [, fromChain] = quote.intentId.split(":");
@@ -979,6 +1141,11 @@ function lifiVerifyQuote(params, quote) {
   const fromChain = LIFI_CHAIN[params.sourceChain];
   const toChain = LIFI_CHAIN[params.destChain];
   if (!fromChain || !toChain) return "not a LI.FI chain pair";
+  const placeholder = params.dry !== false ? placeholderIn(params) : null;
+  if (placeholder) {
+    if (quote.txRequest !== void 0) return `a dry quote priced for a placeholder ${placeholder} carries a transaction \u2014 it would pay or refund that placeholder, not the wallet that signs it`;
+    return priceOnlyMismatch(params, quote, `lifi:${fromChain}:${toChain}`);
+  }
   const tx = quote.txRequest;
   if (!tx) return "the quote carries no transaction";
   if (isSolana(params.sourceChain)) {
@@ -993,7 +1160,7 @@ function lifiVerifyQuote(params, quote) {
   const sourceIsToken = fromToken !== EVM_ZERO;
   const dry = params.dry !== false;
   const fromAddress = params.refundAddress || (dry ? EVM_PLACEHOLDER : "");
-  const toAddress = params.destAddress || (dry ? fromAddress : "");
+  const toAddress = params.destAddress || (dry ? dryRecipient(params, fromAddress) : "");
   if (!fromAddress || !toAddress) return "a live quote needs the sender and the recipient";
   let amountIn, minOut, value, nativeFee;
   try {
@@ -1027,6 +1194,19 @@ function lifiVerifyQuote(params, quote) {
   });
   return why ? `the transaction does not match the request: ${why}` : null;
 }
+function priceOnlyMismatch(params, quote, route) {
+  if (quote.depositAddress !== "") return `a LI.FI quote pays no deposit address, but this one names ${String(quote.depositAddress).slice(0, 64)}`;
+  const fee = quote.providerData?.nativeFee;
+  if (fee !== void 0 && !/^\d{1,80}$/.test(String(fee))) return `the price-only quote declares a native fee of ${String(fee).slice(0, 40)}, not a base-unit integer`;
+  try {
+    if (BigInt(quote.sourceAmount) !== BigInt(params.amountIn)) return `the quote spends ${quote.sourceAmount}, not the ${params.amountIn} input`;
+    const minOut = BigInt(quote.minDestAmount);
+    if (params.minAmountOut !== void 0 && minOut < BigInt(params.minAmountOut)) return `the quoted minimum ${minOut} is below the caller's floor ${params.minAmountOut}`;
+  } catch {
+    return "the quote's amounts are not integers";
+  }
+  return quote.intentId.replace(/~[0-9a-f]{32}$/, "") === route ? null : "the intent id does not name this route";
+}
 var lifiPins = Object.freeze({
   callTargets: (chain) => /^eip155:[0-9]+$/.test(chain) ? [diamondFor(chain)] : [],
   spenders: (chain) => /^eip155:[0-9]+$/.test(chain) ? [diamondFor(chain)] : [],
@@ -1038,4 +1218,4 @@ export {
   lifiVerifyQuote,
   lifiPins
 };
-//# sourceMappingURL=chunk-HJRWHGMX.js.map
+//# sourceMappingURL=chunk-GWUGK4SG.js.map