@anywalletkit/protocol-swap2-omniston 0.3.0 → 0.4.0

package/dist/validators.cjs

@@ -531,6 +531,40 @@ function createOmnistonEvmInputValidator(options = {}) {
 var import_buffer = require("buffer");
 var import_core2 = require("@ton/core");
 var import_core3 = require("@anywalletkit/core");
+
+// src/validators/settlement.ts
+var AUDITED_OMNISTON_SETTLEMENT_CONTRACTS = {
+  "ton:-239": ["EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ"],
+  "eip155:1": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
+  "eip155:56": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
+  "eip155:137": ["0x41A392062A4307a6961d48e30FF20bF6823715B8"],
+  "eip155:4663": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
+  "eip155:8453": ["0xACa3E2F9b61a44892926bC6c3e104192E7D1c3cd"],
+  "eip155:42161": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
+  "eip155:43114": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
+  // 2026-10-20: one factory address on X Layer, HyperEVM and Plasma. Runtime
+  // bytecode equals Ethereum's 0xafCF… byte for byte except the immutable slots
+  // (escrow implementations, its order protocol, domain hash); it references
+  // the order protocol trusted below on the same chain.
+  "eip155:196": ["0xd602079AFa5c38F550510a2a988CbFa698Fa0189"],
+  "eip155:999": ["0xd602079AFa5c38F550510a2a988CbFa698Fa0189"],
+  "eip155:9745": ["0xd602079AFa5c38F550510a2a988CbFa698Fa0189"]
+};
+var AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS = {
+  "eip155:1": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
+  "eip155:56": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
+  "eip155:137": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
+  "eip155:8453": ["0xe7405fAcDEDB2512e91F2886BDff13231343aF5E"],
+  "eip155:42161": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
+  "eip155:43114": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
+  // 2026-10-20: bytecode equals Ethereum's 0xb581… except immutables (wrapped
+  // native, own address, chain id 196 / 9745 / 999 at the chain-id slot).
+  "eip155:196": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
+  "eip155:9745": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
+  "eip155:999": ["0xD84778bbeEC5D2a8d17c6424249C438EC0b1ABE3"]
+};
+
+// src/validators/ton.ts
 var JETTON_TRANSFER_OP = 260734629;
 var ESCROW_CREATE_OP = 3232100569;
 var ESCROW_CONFIG_OP = 4073126499;
@@ -707,6 +741,11 @@ function exactCellEnd(slice) {
   return slice.remainingBits === 0 && slice.remainingRefs === 0;
 }
 function destinationChainId(chain) {
+  const caip2 = /^eip155:([0-9]{1,10})$/.exec(chain);
+  if (caip2) {
+    const id = BigInt(caip2[1]);
+    return [1n, 56n, 137n, 4663n, 8453n, 42161n, 43114n, 196n, 999n, 9745n].includes(id) ? id : null;
+  }
   const ids = {
     ethereum: 1n,
     bnb: 56n,
@@ -721,6 +760,65 @@ function destinationChainId(chain) {
   };
   return ids[chain] ?? null;
 }
+function readTonEscrowBody(payloadBocHex) {
+  const outer = oneRoot(payloadBocHex, "payload").beginParse();
+  if (outer.loadUint(32) !== JETTON_TRANSFER_OP) throw new Error("not a jetton transfer");
+  outer.loadUintBig(64);
+  const amount = outer.loadCoins();
+  const protocol = outer.loadAddressAny();
+  if (!(protocol instanceof import_core2.Address)) throw new Error("no protocol address");
+  outer.loadAddressAny();
+  if (outer.loadMaybeRef() !== null) throw new Error("custom payload");
+  outer.loadCoins();
+  if (!outer.loadBit() || outer.remainingRefs !== 1) throw new Error("no forward payload");
+  const forward = outer.loadRef();
+  const root = forward.beginParse();
+  if (root.loadUint(32) !== ESCROW_CREATE_OP) throw new Error("not an escrow create");
+  const quoteId = import_buffer.Buffer.from(root.loadBuffer(32)).toString("hex");
+  root.loadBit();
+  root.loadAddressAny();
+  root.loadCoins();
+  root.loadBit();
+  if (root.remainingRefs !== 4) throw new Error("escrow refs");
+  const config = root.loadRef().beginParse();
+  if (config.loadUint(32) !== ESCROW_CONFIG_OP) throw new Error("escrow config");
+  const resolver = config.loadAddressAny();
+  if (!(resolver instanceof import_core2.Address)) throw new Error("no resolver");
+  if (config.loadBit()) config.loadBuffer(32);
+  const exclusivity = config.loadUintBig(64);
+  config.loadUintBig(64);
+  if (config.remainingRefs !== 2) throw new Error("escrow config refs");
+  const state = config.loadRef();
+  if (!config.loadBit()) throw new Error("no destination");
+  const destination = config.loadRef().beginParse();
+  if (state.refs.length !== 2) throw new Error("escrow state");
+  const execution = state.refs[1].beginParse();
+  execution.loadUint(32);
+  const secretHash = new Uint8Array(execution.loadBuffer(32));
+  execution.loadAddressAny();
+  for (let i = 0; i < 4; i++) execution.loadUintBig(64);
+  const ownerData = execution.loadRef().beginParse();
+  ownerData.loadAddressAny();
+  ownerData.loadBit();
+  const deposit = ownerData.loadCoins();
+  destination.loadUintBig(64);
+  destination.loadBuffer(20);
+  destination.loadBuffer(20);
+  const resolverSends = destination.loadCoins();
+  if (exclusivity > BigInt(MAX_OMNISTON_EXCLUSIVITY_SECONDS)) throw new Error("exclusivity");
+  return {
+    amount,
+    protocolAddress: protocol.toString(),
+    forwardPayloadBocHex: import_buffer.Buffer.from(forward.toBoc()).toString("hex"),
+    quoteId,
+    initialResolverAddress: resolver.toString(),
+    exclusivityTimeout: Number(exclusivity.toString()),
+    // bounded above
+    secretHash,
+    depositUnits: deposit.toString(),
+    resolverSendsUnits: resolverSends.toString()
+  };
+}
 function validatePayload(input, trusted) {
   const exclusivityTimeout = input.exclusivityTimeout;
   if (typeof exclusivityTimeout !== "number" || !Number.isSafeInteger(exclusivityTimeout) || exclusivityTimeout < 1 || exclusivityTimeout > MAX_OMNISTON_EXCLUSIVITY_SECONDS) return false;
@@ -838,6 +936,7 @@ function createOmnistonTonValidators(options = {}) {
     position: new Set((options.positionCodeHashes ?? DEFAULT_OMNISTON_TON_CODE_HASHES.position).map((value) => value.toLowerCase())),
     outputEscrow: new Set((options.outputEscrowCodeHashes ?? DEFAULT_OMNISTON_TON_CODE_HASHES.outputEscrow).map((value) => value.toLowerCase()))
   };
+  const trustedProtocols = new Set((options.trustedProtocolAddresses ?? AUDITED_OMNISTON_SETTLEMENT_CONTRACTS["ton:-239"] ?? []).map((value) => import_core2.Address.parse(value).toRawString()));
   const jettonWalletOf = async (ownerAddress, jettonMasterAddress) => {
     const response = await get(`/v2/accounts/${encodeURIComponent(ownerAddress)}/jettons/${encodeURIComponent(jettonMasterAddress)}`);
     if (!response.ok) return null;
@@ -869,6 +968,51 @@ function createOmnistonTonValidators(options = {}) {
         return false;
       }
     },
+    /**
+     * The app's own check of a TON → EVM escrow build behind `remoteProvider` (through `omnistonVerifyBuild`): the
+     * structural check `validateTonEscrowPayload` runs on the server, with every field that decides where the
+     * trader's money goes taken from the app — the jetton amount, the owner the excess and refunds go to, the
+     * destination chain, address and token, a delivery of at least `minResolverSendsUnits`, and a protocol contract
+     * from `trustedProtocolAddresses`. The fields the server and the resolver choose (quote id, resolver, hashlock,
+     * exclusivity, deposit) are read from the body and held to the same pins and bounds: audited escrow and
+     * execution code, authority key, one execution, the reviewed timelocks, no Dutch auction. A reason, or `null`.
+     */
+    verifyTonEscrowBuild(input) {
+      let body;
+      try {
+        body = readTonEscrowBody(input.payloadBocHex);
+      } catch {
+        return "the escrow body is not an Omniston escrow transfer";
+      }
+      if (!trustedProtocols.has(import_core2.Address.parse(body.protocolAddress).toRawString())) return `the escrow transfer pays ${body.protocolAddress}, not an Omniston protocol contract this app trusts`;
+      if (!/^\d{1,40}$/.test(input.inputUnits) || body.amount !== BigInt(input.inputUnits)) return `the escrow transfer moves ${body.amount}, not the ${input.inputUnits} this swap sells`;
+      if (!/^\d{1,80}$/.test(input.minResolverSendsUnits) || BigInt(body.resolverSendsUnits) < BigInt(input.minResolverSendsUnits)) {
+        return `the resolver is bound to deliver ${body.resolverSendsUnits}, under the quote's minimum ${input.minResolverSendsUnits}`;
+      }
+      let ok = false;
+      try {
+        ok = validatePayload({
+          payloadBocHex: input.payloadBocHex,
+          forwardPayloadBocHex: body.forwardPayloadBocHex,
+          quoteId: body.quoteId,
+          inputUnits: input.inputUnits,
+          resolverSendsUnits: body.resolverSendsUnits,
+          srcHtlcSecurityDepositUnits: body.depositUnits,
+          protocolAddress: body.protocolAddress,
+          ownerAddress: input.ownerAddress,
+          destinationChain: input.destinationChain,
+          destinationAddress: input.destinationAddress,
+          outputTokenAddress: input.outputTokenAddress,
+          initialResolverAddress: body.initialResolverAddress,
+          secretHashes: [body.secretHash],
+          hashingFunction: "HASHING_FUNCTION_KECCAK256",
+          exclusivityTimeout: body.exclusivityTimeout
+        }, trusted);
+      } catch {
+        ok = false;
+      }
+      return ok ? null : "the escrow body is not this swap's (owner, destination chain, address or token) or not the audited escrow (code, authority, timelocks)";
+    },
     /**
      * EVM→TON: the position the tracking feed named must be (1) an active
      * contract with the pinned position code, (2) carrying state that binds
@@ -1039,36 +1183,4 @@ function createOmnistonTonDeliveryLocator(options = {}) {
     }
   };
 }
-
-// src/validators/settlement.ts
-var AUDITED_OMNISTON_SETTLEMENT_CONTRACTS = {
-  "ton:-239": ["EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ"],
-  "eip155:1": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
-  "eip155:56": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
-  "eip155:137": ["0x41A392062A4307a6961d48e30FF20bF6823715B8"],
-  "eip155:4663": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
-  "eip155:8453": ["0xACa3E2F9b61a44892926bC6c3e104192E7D1c3cd"],
-  "eip155:42161": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
-  "eip155:43114": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
-  // 2026-10-20: one factory address on X Layer, HyperEVM and Plasma. Runtime
-  // bytecode equals Ethereum's 0xafCF… byte for byte except the immutable slots
-  // (escrow implementations, its order protocol, domain hash); it references
-  // the order protocol trusted below on the same chain.
-  "eip155:196": ["0xd602079AFa5c38F550510a2a988CbFa698Fa0189"],
-  "eip155:999": ["0xd602079AFa5c38F550510a2a988CbFa698Fa0189"],
-  "eip155:9745": ["0xd602079AFa5c38F550510a2a988CbFa698Fa0189"]
-};
-var AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS = {
-  "eip155:1": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
-  "eip155:56": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
-  "eip155:137": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
-  "eip155:8453": ["0xe7405fAcDEDB2512e91F2886BDff13231343aF5E"],
-  "eip155:42161": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
-  "eip155:43114": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
-  // 2026-10-20: bytecode equals Ethereum's 0xb581… except immutables (wrapped
-  // native, own address, chain id 196 / 9745 / 999 at the chain-id slot).
-  "eip155:196": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
-  "eip155:9745": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
-  "eip155:999": ["0xD84778bbeEC5D2a8d17c6424249C438EC0b1ABE3"]
-};
 //# sourceMappingURL=validators.cjs.map