@anywalletkit/protocol-swap2-omniston 0.3.0 → 0.3.1

package/README.md

@@ -34,12 +34,14 @@ Every route is fail-closed until its allowlists and validators are configured:
   wallets, pTON wallet ownership and DeDust pool pairs on chain.
   `tonSwapPayloadCheck: "report"` traces `ton-swap-payload <reason>` instead
   of refusing (default `"enforce"`).
-  Behind `remoteProvider`, the app checks the built swap itself:
-  `remoteProvider({name: "omniston", baseUrl, verifyBuild: omnistonVerifyBuild({validateTonSwapTarget,
-  validateTonSwapLeg})})` opens the body with `checkTonSwapPayload` against the app's own request
-  (receiver, refund, on-chain minimum, input; the quote carries `routeSteps`) and asks the app's
-  validators about the DEX it pays. Without `verifyBuild` the engine refuses remote cell bodies; a
-  TON → EVM escrow body cannot be checked on the client and is refused by this helper.
+  Behind `remoteProvider`, the app checks the built body itself:
+  `remoteProvider({name: "omniston", baseUrl, verifyBuild: omnistonVerifyBuild({...createOmnistonTonValidators()})})`.
+  A TON → TON swap body is opened with `checkTonSwapPayload` against the app's own request (receiver,
+  refund, on-chain minimum, input; the quote carries `routeSteps`) and the DEX it pays is confirmed with
+  the app's validators. A TON → EVM escrow body goes to `verifyTonEscrowBuild`: the jetton amount, the
+  trader as owner, the destination chain, address and token and the quote's minimum delivery come from
+  the app, the protocol contract from `trustedProtocolAddresses`, and the escrow code, authority key and
+  timelocks are the audited ones. Without `verifyBuild` the engine refuses remote cell bodies.
 - **TON → EVM** (HTLC order, the wallet pays a jetton escrow): factory
   allowlisted on both chains, `validateTonJettonWallet`,
   `validateTonEscrowPayload`, `validateEvmOutputPosition`.

package/dist/{chunk-JVFDD7PV.js → chunk-HOTFZYSW.js}

@@ -1112,7 +1112,27 @@ function omnistonVerifyBuild(hooks) {
   return async (quote, tx, params) => {
     if (tx.bodyBoc === void 0) return null;
     if (!params) return "the request this quote answered is unknown";
-    if (quote.providerData?.settlement !== "swap") return "only TON swap bodies can be checked on the client";
+    if (quote.providerData?.settlement !== "swap") {
+      if (params.sourceChain.startsWith("ton:") && params.destChain.startsWith("eip155:")) {
+        if (!hooks.verifyTonEscrowBuild) return "a TON \u2192 EVM escrow body needs verifyTonEscrowBuild (createOmnistonTonValidators)";
+        if (!params.refundAddress) return "the trader's TON address (refundAddress) is unknown";
+        const floor = [quote.minDestAmount, params.minAmountOut ?? "0"].filter((v) => /^\d{1,80}$/.test(v)).map((v) => BigInt(v)).reduce((a, b) => a > b ? a : b, 0n);
+        try {
+          return await hooks.verifyTonEscrowBuild({
+            payloadBocHex: Buffer2.from(tx.bodyBoc, "base64").toString("hex"),
+            ownerAddress: params.refundAddress,
+            inputUnits: quote.sourceAmount,
+            destinationChain: params.destChain,
+            destinationAddress: params.destAddress,
+            outputTokenAddress: params.destToken,
+            minResolverSendsUnits: floor.toString()
+          });
+        } catch {
+          return "the escrow body could not be checked";
+        }
+      }
+      return "only TON swap and TON \u2192 EVM escrow bodies can be checked on the client";
+    }
     let steps;
     try {
       steps = JSON.parse(quote.providerData.routeSteps ?? "");
@@ -2253,4 +2273,4 @@ export {
   omnistonVerifyBuild,
   omnistonProvider
 };
-//# sourceMappingURL=chunk-JVFDD7PV.js.map
+//# sourceMappingURL=chunk-HOTFZYSW.js.map