@anywalletkit/protocol-swap2-omniston 0.3.1 → 0.4.0

package/README.md

@@ -62,6 +62,19 @@ Every route is fail-closed until its allowlists and validators are configured:
   engine then signs only an `Order` whose verifying contract is a pinned
   spender, whose maker is this account and that sells exactly the swap's input
   of the source token; a `Permit` or any other typed message is refused.
+  The rest of the order is the app's to check, and the engine signs a remote
+  typed order only with `verifyBuild`: `remoteProvider({name: "omniston",
+  baseUrl, ...omnistonPins(AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS), verifyBuild:
+  omnistonVerifyBuild({...createOmnistonTonValidators()})})`. The build carries
+  the `orderExtension` the order's salt commits to, and `omnistonVerifyBuild`
+  opens both: the v4 domain on a trusted order protocol, the exact Order schema,
+  `takingAmount` at least the quote's minimum, a single-fill order with no
+  allowed sender and an expiry minutes away, the pinned v1beta8 auction and fee
+  terms, one trusted escrow factory (`trustedSettlementContracts`, default the
+  audited table) as the extension target, the whitelisted resolver as the
+  order's receiver, the destination chain and token, the audited timelocks, the
+  TON token and recipient and the quote id. The hashlock is the server's: the
+  server holds the HTLC secret. The same applies to EVM → EVM.
   `validateEvmTypedOrder` is exported for apps that hold the settlement data.
 - **EVM → EVM** (gasless order, same order protocol as EVM → TON): the signed
   extension's ExtraDataArgs name the destination chain, token and deposit and

package/dist/chunk-JWYDIW4V.js

@@ -0,0 +1,37 @@
+// src/validators/settlement.ts
+var AUDITED_OMNISTON_SETTLEMENT_CONTRACTS = {
+  "ton:-239": ["EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ"],
+  "eip155:1": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
+  "eip155:56": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
+  "eip155:137": ["0x41A392062A4307a6961d48e30FF20bF6823715B8"],
+  "eip155:4663": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
+  "eip155:8453": ["0xACa3E2F9b61a44892926bC6c3e104192E7D1c3cd"],
+  "eip155:42161": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
+  "eip155:43114": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
+  // 2026-10-20: one factory address on X Layer, HyperEVM and Plasma. Runtime
+  // bytecode equals Ethereum's 0xafCF… byte for byte except the immutable slots
+  // (escrow implementations, its order protocol, domain hash); it references
+  // the order protocol trusted below on the same chain.
+  "eip155:196": ["0xd602079AFa5c38F550510a2a988CbFa698Fa0189"],
+  "eip155:999": ["0xd602079AFa5c38F550510a2a988CbFa698Fa0189"],
+  "eip155:9745": ["0xd602079AFa5c38F550510a2a988CbFa698Fa0189"]
+};
+var AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS = {
+  "eip155:1": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
+  "eip155:56": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
+  "eip155:137": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
+  "eip155:8453": ["0xe7405fAcDEDB2512e91F2886BDff13231343aF5E"],
+  "eip155:42161": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
+  "eip155:43114": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
+  // 2026-10-20: bytecode equals Ethereum's 0xb581… except immutables (wrapped
+  // native, own address, chain id 196 / 9745 / 999 at the chain-id slot).
+  "eip155:196": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
+  "eip155:9745": ["0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9"],
+  "eip155:999": ["0xD84778bbeEC5D2a8d17c6424249C438EC0b1ABE3"]
+};
+
+export {
+  AUDITED_OMNISTON_SETTLEMENT_CONTRACTS,
+  AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS
+};
+//# sourceMappingURL=chunk-JWYDIW4V.js.map

package/dist/chunk-JWYDIW4V.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/validators/settlement.ts"],"sourcesContent":["/**\n * Settlement contracts this deployment trusts for Omniston, per CAIP-2 chain.\n * Audited public addresses — no secret — so both the server wiring and the\n * browser-side provider import them from here.\n * See how-to-project/OMNISTON-NETWORK-ONBOARDING.md before adding a network.\n */\nexport const AUDITED_OMNISTON_SETTLEMENT_CONTRACTS: Record<string, string[]> = {\n  \"ton:-239\": [\"EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ\"],\n  \"eip155:1\": [\"0xafCF681272AF10959736f45616eeCBC22D7095E2\"],\n  \"eip155:56\": [\"0xafCF681272AF10959736f45616eeCBC22D7095E2\"],\n  \"eip155:137\": [\"0x41A392062A4307a6961d48e30FF20bF6823715B8\"],\n  \"eip155:4663\": [\"0xafCF681272AF10959736f45616eeCBC22D7095E2\"],\n  \"eip155:8453\": [\"0xACa3E2F9b61a44892926bC6c3e104192E7D1c3cd\"],\n  \"eip155:42161\": [\"0xafCF681272AF10959736f45616eeCBC22D7095E2\"],\n  \"eip155:43114\": [\"0xafCF681272AF10959736f45616eeCBC22D7095E2\"],\n  // 2026-10-20: one factory address on X Layer, HyperEVM and Plasma. Runtime\n  // bytecode equals Ethereum's 0xafCF… byte for byte except the immutable slots\n  // (escrow implementations, its order protocol, domain hash); it references\n  // the order protocol trusted below on the same chain.\n  \"eip155:196\": [\"0xd602079AFa5c38F550510a2a988CbFa698Fa0189\"],\n  \"eip155:999\": [\"0xd602079AFa5c38F550510a2a988CbFa698Fa0189\"],\n  \"eip155:9745\": [\"0xd602079AFa5c38F550510a2a988CbFa698Fa0189\"],\n};\n\n/**\n * EVM order protocols (Omniston's fork of the 1inch Limit Order Protocol v4 —\n * NOT the canonical 1inch deployment) an EVM→TON order is signed against. The\n * wallet approves this contract for the input amount and signs an EIP-712\n * order whose domain names it; on fill it moves the input into the escrow the\n * factory above deploys. One address, different roles per chain (0xafCF… is\n * the factory elsewhere and the order protocol on Polygon), so this table is\n * separate from the factory table and CAIP-scoped. Runtime code hashes are in\n * how-to-project/OMNISTON-NETWORK-ONBOARDING.md (snapshot 2026-10-16).\n */\nexport const AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS: Record<string, string[]> = {\n  \"eip155:1\": [\"0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9\"],\n  \"eip155:56\": [\"0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9\"],\n  \"eip155:137\": [\"0xafCF681272AF10959736f45616eeCBC22D7095E2\"],\n  \"eip155:8453\": [\"0xe7405fAcDEDB2512e91F2886BDff13231343aF5E\"],\n  \"eip155:42161\": [\"0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9\"],\n  \"eip155:43114\": [\"0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9\"],\n  // 2026-10-20: bytecode equals Ethereum's 0xb581… except immutables (wrapped\n  // native, own address, chain id 196 / 9745 / 999 at the chain-id slot).\n  \"eip155:196\": [\"0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9\"],\n  \"eip155:9745\": [\"0xb5810aCfD45D85Eaa938bF90a5857295513DA7E9\"],\n  \"eip155:999\": [\"0xD84778bbeEC5D2a8d17c6424249C438EC0b1ABE3\"],\n};\n"],"mappings":";AAMO,IAAM,wCAAkE;AAAA,EAC7E,YAAY,CAAC,kDAAkD;AAAA,EAC/D,YAAY,CAAC,4CAA4C;AAAA,EACzD,aAAa,CAAC,4CAA4C;AAAA,EAC1D,cAAc,CAAC,4CAA4C;AAAA,EAC3D,eAAe,CAAC,4CAA4C;AAAA,EAC5D,eAAe,CAAC,4CAA4C;AAAA,EAC5D,gBAAgB,CAAC,4CAA4C;AAAA,EAC7D,gBAAgB,CAAC,4CAA4C;AAAA;AAAA;AAAA;AAAA;AAAA,EAK7D,cAAc,CAAC,4CAA4C;AAAA,EAC3D,cAAc,CAAC,4CAA4C;AAAA,EAC3D,eAAe,CAAC,4CAA4C;AAC9D;AAYO,IAAM,uCAAiE;AAAA,EAC5E,YAAY,CAAC,4CAA4C;AAAA,EACzD,aAAa,CAAC,4CAA4C;AAAA,EAC1D,cAAc,CAAC,4CAA4C;AAAA,EAC3D,eAAe,CAAC,4CAA4C;AAAA,EAC5D,gBAAgB,CAAC,4CAA4C;AAAA,EAC7D,gBAAgB,CAAC,4CAA4C;AAAA;AAAA;AAAA,EAG7D,cAAc,CAAC,4CAA4C;AAAA,EAC3D,eAAe,CAAC,4CAA4C;AAAA,EAC5D,cAAc,CAAC,4CAA4C;AAC7D;","names":[]}

package/dist/{chunk-HOTFZYSW.js → chunk-R6B2CV5Z.js}

@@ -4,6 +4,10 @@ import {
 import {
   describeOmnistonActivity
 } from "./chunk-AIWAM7BS.js";
+import {
+  AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS,
+  AUDITED_OMNISTON_SETTLEMENT_CONTRACTS
+} from "./chunk-JWYDIW4V.js";
 
 // src/provider.ts
 import { Address as TonAddress, Cell as TonCell } from "@ton/core";
@@ -522,9 +526,9 @@ function validEvmAddress(value) {
   }
 }
 var EVM_DEST_PROTOCOL_FEE_RECIPIENTS = /* @__PURE__ */ new Set(["0x076268146b4ec6d21fc49c27586cfa91b9079a00"]);
-async function validateEvmToTonOrderExtension(extension, expected) {
-  const evmDest = expected.dstChainId !== void 0;
-  if (evmDest && (!Number.isSafeInteger(expected.dstChainId) || expected.dstChainId <= 0)) throw new Error("omniston: invalid EVM destination chain id");
+var EVM_AUCTION_POINTS = [[800000n, 100n], [700000n, 100n], [600000n, 100n], [500000n, 100n], [400000n, 100n]];
+var EVM_TIMELOCKS = [1n, 120n, 240n, 300n, 1n, 120n, 180n, 0n].reduce((packed, value, index) => packed | value << BigInt(index * 32), 0n);
+function readEvmOrderExtension(extension) {
   if (extension.length < 32) throw new Error("omniston: malformed EVM order extension");
   const view = new DataView(extension.buffer, extension.byteOffset, extension.byteLength);
   const fields = [];
@@ -544,54 +548,48 @@ async function validateEvmToTonOrderExtension(extension, expected) {
   }
   let target;
   for (const index of [2, 3, 7]) {
-    const field = fields[index];
-    if (field.length <= 20) throw new Error("omniston: incomplete EVM order extension program");
-    const address = getAddress(`0x${bytesToHex(field.slice(0, 20))}`);
-    if (!expected.trustedTarget(address) || target !== void 0 && getAddress(target) !== address) {
+    const field2 = fields[index];
+    if (field2.length <= 20) throw new Error("omniston: incomplete EVM order extension program");
+    const address = getAddress(`0x${bytesToHex(field2.slice(0, 20))}`);
+    if (target !== void 0 && getAddress(target) !== address) {
       throw new Error("omniston: EVM order extension target is not independently trusted");
     }
     target = address;
   }
-  const getter = fields[2];
+  const field = fields[2];
   let cursor = 20;
-  const gasBump = readBigEndian(getter, cursor, 3);
+  const gasBump = readBigEndian(field, cursor, 3);
   cursor += 3;
-  const gasPrice = readBigEndian(getter, cursor, 4);
+  const gasPrice = readBigEndian(field, cursor, 4);
   cursor += 4;
-  const auctionStart = readBigEndian(getter, cursor, 4);
+  const auctionStart = readBigEndian(field, cursor, 4);
   cursor += 4;
-  const duration = readBigEndian(getter, cursor, 3);
+  const duration = readBigEndian(field, cursor, 3);
   cursor += 3;
-  const initialRateBump = readBigEndian(getter, cursor, 3);
+  const initialRateBump = readBigEndian(field, cursor, 3);
   cursor += 3;
-  const pointCount = bigintToNumber(readBigEndian(getter, cursor, 1));
+  const pointCount = bigintToNumber(readBigEndian(field, cursor, 1));
   cursor += 1;
   if (pointCount !== 5) throw new Error("omniston: unsupported EVM auction profile");
   const points = [];
   for (let index = 0; index < pointCount; index++) {
-    points.push([readBigEndian(getter, cursor, 3), readBigEndian(getter, cursor + 3, 2)]);
+    points.push([readBigEndian(field, cursor, 3), readBigEndian(field, cursor + 3, 2)]);
     cursor += 5;
   }
-  const integratorFee = readBigEndian(getter, cursor, 2);
+  const integratorFee = readBigEndian(field, cursor, 2);
   cursor += 2;
-  const integratorShare = readBigEndian(getter, cursor, 1);
+  const integratorShare = readBigEndian(field, cursor, 1);
   cursor += 1;
-  const resolverFee = readBigEndian(getter, cursor, 2);
+  const resolverFee = readBigEndian(field, cursor, 2);
   cursor += 2;
-  const whitelistDiscount = readBigEndian(getter, cursor, 1);
+  const whitelistDiscount = readBigEndian(field, cursor, 1);
   cursor += 1;
-  const getterWhitelistCount = bigintToNumber(readBigEndian(getter, cursor, 1));
+  const getterWhitelistCount = bigintToNumber(readBigEndian(field, cursor, 1));
   cursor += 1;
-  if (getterWhitelistCount !== 1 || cursor + getterWhitelistCount * 10 !== getter.length) {
+  if (getterWhitelistCount !== 1 || cursor + getterWhitelistCount * 10 !== field.length) {
     throw new Error("omniston: malformed EVM amount-getter whitelist");
   }
-  const getterResolver = readBigEndian(getter, cursor, 10);
-  const expectedPoints = [[800000n, 100n], [700000n, 100n], [600000n, 100n], [500000n, 100n], [400000n, 100n]];
-  const quoteResolverFee = expected.protocolFeePips % 10 === 0 ? BigInt(expected.protocolFeePips / 10) : -1n;
-  const resolverLow80 = BigInt(getAddress(expected.initialResolverAddress)) & (1n << 80n) - 1n;
-  if (gasBump !== 0n || gasPrice !== 0n || !within(auctionStart, expected.quoteTimestamp, 5, 5) || duration !== 1800n || initialRateBump !== 900000n || points.some((point, index) => point[0] !== expectedPoints[index][0] || point[1] !== expectedPoints[index][1]) || expected.integratorFeePips !== 0 || integratorFee !== 0n || integratorShare !== 100n || quoteResolverFee < 0n || resolverFee !== quoteResolverFee || whitelistDiscount !== 50n || getterResolver !== resolverLow80) {
-    throw new Error("omniston: EVM amount-getter terms do not match the pinned v1beta8 profile");
-  }
+  const getter = { gasBump, gasPrice, auctionStart, duration, initialRateBump, points, integratorFee, integratorShare, resolverFee, whitelistDiscount, resolver: readBigEndian(field, cursor, 10) };
   const post = fields[7];
   cursor = 20;
   const integratorRecipient = post.slice(cursor, cursor + 20);
@@ -617,28 +615,51 @@ async function validateEvmToTonOrderExtension(extension, expected) {
   cursor += 10;
   const resolverTimeDelta = readBigEndian(post, cursor, 2);
   cursor += 2;
-  if (!zeroBytes(integratorRecipient) || !(zeroBytes(protocolRecipient) || evmDest && EVM_DEST_PROTOCOL_FEE_RECIPIENTS.has(`0x${bytesToHex(protocolRecipient)}`)) || postIntegratorFee !== 0n || postIntegratorShare !== 100n || postResolverFee !== quoteResolverFee || postDiscount !== 50n || !within(allowedTime, expected.quoteTimestamp, 60, 5) || postResolver !== resolverLow80 || resolverTimeDelta !== 0n) {
-    throw new Error("omniston: EVM post-interaction terms do not match the pinned v1beta8 profile");
-  }
   const extra = Array.from({ length: 5 }, () => {
     const value = readBigEndian(post, cursor, 32);
     cursor += 32;
     return value;
   });
+  const customData = extension.slice(32 + begin);
+  if (customData.length !== 131) throw new Error("omniston: malformed EVM order extension custom data");
+  return {
+    target,
+    getter,
+    post: { integratorRecipient, protocolRecipient, integratorFee: postIntegratorFee, integratorShare: postIntegratorShare, resolverFee: postResolverFee, discount: postDiscount, allowedTime, resolver: postResolver, resolverTimeDelta },
+    extra,
+    customData
+  };
+}
+async function validateEvmToTonOrderExtension(extension, expected) {
+  const evmDest = expected.dstChainId !== void 0;
+  if (evmDest && (!Number.isSafeInteger(expected.dstChainId) || expected.dstChainId <= 0)) throw new Error("omniston: invalid EVM destination chain id");
+  const { target, getter, post, extra, customData } = readEvmOrderExtension(extension);
+  if (!expected.trustedTarget(target)) throw new Error("omniston: EVM order extension target is not independently trusted");
+  const quoteResolverFee = expected.protocolFeePips % 10 === 0 ? BigInt(expected.protocolFeePips / 10) : -1n;
+  const resolverLow80 = BigInt(getAddress(expected.initialResolverAddress)) & (1n << 80n) - 1n;
+  if (getter.gasBump !== 0n || getter.gasPrice !== 0n || !within(getter.auctionStart, expected.quoteTimestamp, 5, 5) || getter.duration !== 1800n || getter.initialRateBump !== 900000n || getter.points.some((point, index) => point[0] !== EVM_AUCTION_POINTS[index][0] || point[1] !== EVM_AUCTION_POINTS[index][1]) || expected.integratorFeePips !== 0 || getter.integratorFee !== 0n || getter.integratorShare !== 100n || quoteResolverFee < 0n || getter.resolverFee !== quoteResolverFee || getter.whitelistDiscount !== 50n || getter.resolver !== resolverLow80) {
+    throw new Error("omniston: EVM amount-getter terms do not match the pinned v1beta8 profile");
+  }
+  if (!zeroBytes(post.integratorRecipient) || !(zeroBytes(post.protocolRecipient) || evmDest && EVM_DEST_PROTOCOL_FEE_RECIPIENTS.has(`0x${bytesToHex(post.protocolRecipient)}`)) || post.integratorFee !== 0n || post.integratorShare !== 100n || post.resolverFee !== quoteResolverFee || post.discount !== 50n || !within(post.allowedTime, expected.quoteTimestamp, 60, 5) || post.resolver !== resolverLow80 || post.resolverTimeDelta !== 0n) {
+    throw new Error("omniston: EVM post-interaction terms do not match the pinned v1beta8 profile");
+  }
   const hashlock2 = readBigEndian(expected.secretHash, 0, expected.secretHash.length);
   const dstToken = evmDest ? BigInt(getAddress(expected.outputTokenAddress)) : BigInt(getAddress(expected.takerAsset));
   const deposits = BigInt(expected.srcSecurityDepositUnits) << 128n | BigInt(expected.dstSecurityDepositUnits);
-  const timelocks = [1n, 120n, 240n, 300n, 1n, 120n, 180n, 0n].reduce((packed, value, index) => packed | value << BigInt(index * 32), 0n);
-  if (expected.secretHash.length !== 32 || extra[0] !== hashlock2 || extra[1] !== (evmDest ? BigInt(expected.dstChainId) : 0n) || extra[2] !== dstToken || extra[3] !== deposits || extra[4] !== timelocks) {
+  if (expected.secretHash.length !== 32 || extra[0] !== hashlock2 || extra[1] !== (evmDest ? BigInt(expected.dstChainId) : 0n) || extra[2] !== dstToken || extra[3] !== deposits || extra[4] !== EVM_TIMELOCKS) {
     throw new Error("omniston: signed EVM HTLC terms do not match the validated order details");
   }
-  const customData = extension.slice(32 + begin);
-  if (customData.length !== 131) throw new Error("omniston: malformed EVM order extension custom data");
-  if (evmDest) {
+  await checkOrderCustomData(customData, { evmDest, outputToken: expected.outputTokenAddress, traderDst: expected.traderDstAddress, quoteId: expected.quoteId });
+  if (expected.tradeStartDeadline < expected.quoteTimestamp) {
+    throw new Error("omniston: invalid EVM order quote deadline");
+  }
+}
+async function checkOrderCustomData(customData, expected) {
+  if (expected.evmDest) {
     if (!zeroBytes(customData.slice(0, 66))) throw new Error("omniston: unexpected TON addresses in an EVM-destination order");
   } else {
     const { Address: Address2 } = await import("@ton/core");
-    const expectedTon = [expected.outputTokenAddress, expected.traderDstAddress].map((value) => Address2.parse(value));
+    const expectedTon = [expected.outputToken, expected.traderDst].map((value) => Address2.parse(value));
     for (let index = 0; index < expectedTon.length; index++) {
       const offset = index * 33;
       const workchain = customData[offset] === 255 ? -1 : customData[offset];
@@ -654,9 +675,6 @@ async function validateEvmToTonOrderExtension(extension, expected) {
   if (!QUOTE_ID.test(quoteId) || !sliceEqual(customData.slice(99), hexToBytes(quoteId.padStart(64, "0")))) {
     throw new Error("omniston: EVM order extension custom data is not bound to the quote id");
   }
-  if (expected.tradeStartDeadline < expected.quoteTimestamp) {
-    throw new Error("omniston: invalid EVM order quote deadline");
-  }
 }
 function validateEvmTypedOrder(td, expected) {
   const value = td;
@@ -1108,8 +1126,101 @@ function omnistonPins(trustedEvmOrderProtocols) {
   const byChain = new Map(Object.entries(trustedEvmOrderProtocols).map(([chain, list]) => [chain, list.map((a) => getAddress(a))]));
   return Object.freeze({ callTargets: () => [], spenders: (chain) => byChain.get(chain) ?? [] });
 }
+var MAX_EVM_ORDER_LIFETIME_S = 900;
+async function checkRemoteEvmOrder(quote, tx, params, trusted) {
+  const chainId = evmRef(params.sourceChain);
+  if (chainId === null || !params.sourceChain.startsWith("eip155:")) return "a typed order needs an EVM source";
+  const intent = decodeIntent(quote.intentId.replace(/~[0-9a-f]{32}$/, ""));
+  if (!intent || intent.kind !== "order" || intent.srcChain !== params.sourceChain) return "the quote's intent is not an order from this chain";
+  if (!tx.orderExtension || !/^0x(?:[0-9a-fA-F]{2})+$/.test(tx.orderExtension)) return "the build carries no order extension to check";
+  const source = ccAsset(params.sourceChain, params.sourceToken);
+  if (!source?.contract) return "unknown source token";
+  const tonDest = isTon(params.destChain);
+  const destChainId = tonDest ? null : evmRef(params.destChain);
+  if (!tonDest && (destChainId === null || !params.destChain.startsWith("eip155:"))) return "the destination is neither TON nor an EVM chain";
+  const outputToken = ccAssetByToken(params.destChain, params.destToken)?.contract ?? params.destToken;
+  const listed = (table, chain, address) => typeof address === "string" && validEvmAddress(address) && (table[chain] ?? []).some((a) => validEvmAddress(a) && getAddress(a) === getAddress(address));
+  let td;
+  try {
+    td = JSON.parse(tx.typedData ?? "");
+  } catch {
+    return "the typed data is not JSON";
+  }
+  const domain = td.domain ?? {};
+  const contract = domain.verifyingContract;
+  if (domain.name !== "1inch Limit Order Protocol" || domain.version !== "4") return "the domain is not the 1inch Limit Order Protocol v4";
+  if (!listed(trusted.orderProtocols, params.sourceChain, contract) || !tx.approvalAddress || getAddress(tx.approvalAddress) !== getAddress(String(contract))) {
+    return `${String(contract)} is not a trusted order protocol on ${params.sourceChain}`;
+  }
+  if (Number(domain.chainId) !== chainId || tx.chainId !== void 0 && tx.chainId !== chainId) return "the domain chainId is not the source chain";
+  const order = td.types?.Order;
+  const message = td.message;
+  if (td.primaryType !== "Order" || !Array.isArray(order) || order.length !== ORDER_FIELDS.length || !order.every((field, i) => field.name === ORDER_FIELDS[i][0] && field.type === ORDER_FIELDS[i][1]) || !message || Object.keys(message).length !== ORDER_FIELDS.length || !ORDER_FIELDS.every(([name]) => Object.hasOwn(message, name)) || !ORDER_FIELDS.every(([name, type]) => type === "address" ? validEvmAddress(message[name]) : validUint256(message[name]))) {
+    return "the typed data is not exactly a v4 Order";
+  }
+  if (!validEvmAddress(intent.trader) || getAddress(String(message.maker)) !== getAddress(intent.trader)) return "the maker is not the trader";
+  if (getAddress(String(message.makerAsset)) !== getAddress(source.contract)) return "the makerAsset is not the source token";
+  if (BigInt(message.makingAmount) !== BigInt(quote.sourceAmount)) return "the makingAmount is not the input";
+  if (getAddress(String(message.takerAsset)) === getAddress(String(message.makerAsset))) return "the takerAsset is the makerAsset";
+  const floor = [quote.minDestAmount, params.minAmountOut ?? "0"].filter((v) => /^\d{1,80}$/.test(v)).map((v) => BigInt(v)).reduce((a, b) => a > b ? a : b, 0n);
+  if (floor <= 0n || BigInt(message.takingAmount) < floor) return `takingAmount ${String(message.takingAmount)} is below the quote's minimum ${floor}`;
+  const traits = BigInt(message.makerTraits);
+  const flags = traits & (1n << 56n) - 1n << 200n;
+  const baseFlags = 1n << 251n | 1n << 249n;
+  if (flags !== baseFlags && flags !== (baseFlags | 1n << 255n)) return "the makerTraits flags are not a single-fill order with its extension";
+  if ((traits & (1n << 80n) - 1n) !== 0n || (traits >> 160n & (1n << 40n) - 1n) !== 0n) return "the makerTraits restrict the taker or the series";
+  const now = BigInt(Math.floor(Date.now() / 1e3));
+  const expiration = traits >> 80n & (1n << 40n) - 1n;
+  if (expiration <= now || expiration > now + BigInt(MAX_EVM_ORDER_LIFETIME_S)) return "the order's expiry is not minutes away";
+  const extension = viemHexToBytes(tx.orderExtension);
+  const mask = (1n << 160n) - 1n;
+  if ((BigInt(message.salt) & mask) !== (BigInt(keccak256(extension)) & mask)) return "the salt does not commit the order extension";
+  let parsed;
+  try {
+    parsed = readEvmOrderExtension(extension);
+  } catch (e) {
+    return e instanceof Error ? e.message.replace(/^omniston: /, "") : String(e);
+  }
+  const { target, getter, post, extra, customData } = parsed;
+  if (!listed(trusted.factories, params.sourceChain, target)) return `the extension targets ${target}, not a trusted escrow factory on ${params.sourceChain}`;
+  const receiverLow80 = BigInt(getAddress(String(message.receiver))) & (1n << 80n) - 1n;
+  if (getter.resolver !== receiverLow80 || post.resolver !== receiverLow80) return "the order's receiver is not the resolver its extension whitelists";
+  if (getter.gasBump !== 0n || getter.gasPrice !== 0n || getter.duration !== 1800n || getter.initialRateBump !== 900000n || getter.points.some((point, index) => point[0] !== EVM_AUCTION_POINTS[index][0] || point[1] !== EVM_AUCTION_POINTS[index][1]) || getter.integratorFee !== 0n || getter.integratorShare !== 100n || getter.whitelistDiscount !== 50n || !within(getter.auctionStart, bigintToNumber(now), MAX_EVM_ORDER_LIFETIME_S, 60)) {
+    return "the amount-getter terms do not match the pinned v1beta8 profile";
+  }
+  if (!zeroBytes(post.integratorRecipient) || !(zeroBytes(post.protocolRecipient) || !tonDest && EVM_DEST_PROTOCOL_FEE_RECIPIENTS.has(`0x${bytesToHex(post.protocolRecipient)}`)) || post.integratorFee !== 0n || post.integratorShare !== 100n || post.resolverFee !== getter.resolverFee || post.discount !== 50n || post.resolverTimeDelta !== 0n || !within(post.allowedTime, bigintToNumber(getter.auctionStart), 60, 5)) {
+    return "the post-interaction terms do not match the pinned v1beta8 profile";
+  }
+  let dstToken;
+  try {
+    dstToken = tonDest ? BigInt(getAddress(String(message.takerAsset))) : BigInt(getAddress(outputToken));
+  } catch {
+    return "the destination token is not an EVM address";
+  }
+  if (extra[1] !== (tonDest ? 0n : BigInt(destChainId)) || extra[2] !== dstToken || extra[4] !== EVM_TIMELOCKS) {
+    return "the signed HTLC terms name another destination chain or token, or other timelocks";
+  }
+  try {
+    await checkOrderCustomData(customData, { evmDest: !tonDest, outputToken, traderDst: params.destAddress, quoteId: intent.quoteId });
+  } catch (e) {
+    return e instanceof Error ? e.message.replace(/^omniston: /, "") : String(e);
+  }
+  return null;
+}
 function omnistonVerifyBuild(hooks) {
+  const trusted = {
+    orderProtocols: hooks.trustedEvmOrderProtocols ?? AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS,
+    factories: hooks.trustedSettlementContracts ?? AUDITED_OMNISTON_SETTLEMENT_CONTRACTS
+  };
   return async (quote, tx, params) => {
+    if (tx.typedData !== void 0) {
+      if (!params) return "the request this quote answered is unknown";
+      try {
+        return await checkRemoteEvmOrder(quote, tx, params, trusted);
+      } catch {
+        return "the typed order could not be checked";
+      }
+    }
     if (tx.bodyBoc === void 0) return null;
     if (!params) return "the request this quote answered is unknown";
     if (quote.providerData?.settlement !== "swap") {
@@ -1799,7 +1910,7 @@ function omnistonProvider(opts = {}) {
       }
     });
     const orderProtocol = getAddress(protocol.chain.value);
-    return { chain: srcChain, to: orderProtocol, value: "0", chainId, approvalAddress: orderProtocol, typedData };
+    return { chain: srcChain, to: orderProtocol, value: "0", chainId, approvalAddress: orderProtocol, typedData, orderExtension: `0x${bytesToHex(payload.orderExtension)}` };
   }
   return {
     name: "omniston",
@@ -2273,4 +2384,4 @@ export {
   omnistonVerifyBuild,
   omnistonProvider
 };
-//# sourceMappingURL=chunk-HOTFZYSW.js.map
+//# sourceMappingURL=chunk-R6B2CV5Z.js.map