@anywalletkit/protocol-swap2-omniston 0.5.3 → 0.5.4

package/dist/validators.d.cts

@@ -34,12 +34,48 @@ interface EvmOutputValidationInput {
 type OmnistonEvmOutputRefusal = (reason: string, details?: Record<string, unknown>) => void;
 /** JSON-RPC over the caller's endpoints (`rpcUrls`) with public failover (reads only). */
 declare function omnistonEvmRpcRequest(chain: string, method: string, params: unknown[], rpcUrls?: OmnistonRpcUrls): Promise<unknown>;
+/**
+ * The operator behind an RPC endpoint, for counting a quorum: the registrable domain, approximated by the host's last
+ * two labels (`base-rpc.publicnode.com` → `publicnode.com`, `mainnet.base.org` → `base.org`); an IP literal is its own
+ * operator. Two endpoints of one company under different domains still count twice — pass `operatorOf` to merge them.
+ */
+declare function omnistonRpcOperator(url: string): string;
+/** The endpoints for `chain` — the caller's first, the public fallbacks after, each URL once — grouped by operator in first-seen order. */
+declare function omnistonRpcOperatorGroups(chain: string, rpcUrls?: OmnistonRpcUrls, operatorOf?: (url: string) => string): {
+    operator: string;
+    urls: string[];
+}[];
+/** Quorum options shared by the EVM output and input validators. */
+interface OmnistonRpcQuorumOptions {
+    /**
+     * Independent RPC operators that must each prove the position on their own before the secret is disclosed. The
+     * chain's endpoints (`rpcUrls`, then the public fallbacks) are grouped by operator ({@link omnistonRpcOperatorGroups});
+     * every group runs the whole validation — its state reads pinned to its own finalized block (head minus the chain's
+     * confirmations) instead of `latest` — and at least `quorum` groups must pass. With fewer operators configured than
+     * the quorum, nothing is disclosed. Default 1: one validation over the first answering endpoint, as before.
+     * Needs `rpcUrls` (or the public fallbacks); a single injected `request` cannot be split into operators.
+     */
+    quorum?: number;
+    /** The operator of an endpoint URL (default {@link omnistonRpcOperator}). */
+    operatorOf?: (url: string) => string;
+}
+/**
+ * Runs `once` against one request (quorum 1: the caller's `request`, or the endpoints with failover), or against every
+ * independent operator with pinned state reads (quorum ≥ 2) — true only when at least `quorum` of them prove it.
+ * Refusals from an operator's run carry its `operator`.
+ */
+declare function omnistonQuorumValidator<I extends {
+    chain: string;
+}>(options: {
+    request?: RpcRequest;
+    rpcUrls?: OmnistonRpcUrls;
+} & OmnistonRpcQuorumOptions, refuse: (reason: string, details?: Record<string, unknown>) => false, once: (request: RpcRequest, input: I, refuse: (reason: string, details?: Record<string, unknown>) => false) => Promise<boolean>): (input: I) => Promise<boolean>;
 declare function createOmnistonEvmOutputValidator(options?: {
     request?: RpcRequest;
     rpcUrls?: OmnistonRpcUrls;
     now?: () => number;
     onRefusal?: OmnistonEvmOutputRefusal;
-}): (input: EvmOutputValidationInput) => Promise<boolean>;
+} & OmnistonRpcQuorumOptions): (input: EvmOutputValidationInput) => Promise<boolean>;
 /**
  * Finds an Omniston EVM delivery: the ERC-20 `Transfer` from the destination
  * escrow to the recipient of at least `minUnits`, within the chain's lookback
@@ -79,12 +115,13 @@ interface EvmInputValidationInput {
 }
 /** Diagnostics hook: every refusal names its check and the numbers it compared (never a secret). */
 type OmnistonValidatorRefusal = (reason: string, details?: Record<string, unknown>) => void;
+/** `quorum` / `operatorOf`: see {@link OmnistonRpcQuorumOptions} — the same independent-operator check as the output validator. */
 declare function createOmnistonEvmInputValidator(options?: {
     request?: OmnistonRpcRequest;
     rpcUrls?: OmnistonRpcUrls;
     now?: () => number;
     onRefusal?: OmnistonValidatorRefusal;
-}): (input: EvmInputValidationInput) => Promise<boolean>;
+} & OmnistonRpcQuorumOptions): (input: EvmInputValidationInput) => Promise<boolean>;
 
 /**
  * Settlement contracts this deployment trusts for Omniston, per CAIP-2 chain.
@@ -105,4 +142,4 @@ declare const AUDITED_OMNISTON_SETTLEMENT_CONTRACTS: Record<string, string[]>;
  */
 declare const AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS: Record<string, string[]>;
 
-export { AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS, AUDITED_OMNISTON_SETTLEMENT_CONTRACTS, type EvmInputValidationInput, type EvmOutputValidationInput, OMNISTON_EVM_LOOKBACK_BLOCKS, OMNISTON_EVM_MIN_CONFIRMATIONS, type OmnistonEvmOutputRefusal, type OmnistonRpcRequest, type OmnistonRpcUrls, type OmnistonValidatorRefusal, SRC_ESCROW_CREATED_TOPIC, createOmnistonEvmDeliveryLocator, createOmnistonEvmInputValidator, createOmnistonEvmOutputValidator, omnistonEvmRpcRequest };
+export { AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS, AUDITED_OMNISTON_SETTLEMENT_CONTRACTS, type EvmInputValidationInput, type EvmOutputValidationInput, OMNISTON_EVM_LOOKBACK_BLOCKS, OMNISTON_EVM_MIN_CONFIRMATIONS, type OmnistonEvmOutputRefusal, type OmnistonRpcQuorumOptions, type OmnistonRpcRequest, type OmnistonRpcUrls, type OmnistonValidatorRefusal, SRC_ESCROW_CREATED_TOPIC, createOmnistonEvmDeliveryLocator, createOmnistonEvmInputValidator, createOmnistonEvmOutputValidator, omnistonEvmRpcRequest, omnistonQuorumValidator, omnistonRpcOperator, omnistonRpcOperatorGroups };

package/dist/validators.d.ts

@@ -34,12 +34,48 @@ interface EvmOutputValidationInput {
 type OmnistonEvmOutputRefusal = (reason: string, details?: Record<string, unknown>) => void;
 /** JSON-RPC over the caller's endpoints (`rpcUrls`) with public failover (reads only). */
 declare function omnistonEvmRpcRequest(chain: string, method: string, params: unknown[], rpcUrls?: OmnistonRpcUrls): Promise<unknown>;
+/**
+ * The operator behind an RPC endpoint, for counting a quorum: the registrable domain, approximated by the host's last
+ * two labels (`base-rpc.publicnode.com` → `publicnode.com`, `mainnet.base.org` → `base.org`); an IP literal is its own
+ * operator. Two endpoints of one company under different domains still count twice — pass `operatorOf` to merge them.
+ */
+declare function omnistonRpcOperator(url: string): string;
+/** The endpoints for `chain` — the caller's first, the public fallbacks after, each URL once — grouped by operator in first-seen order. */
+declare function omnistonRpcOperatorGroups(chain: string, rpcUrls?: OmnistonRpcUrls, operatorOf?: (url: string) => string): {
+    operator: string;
+    urls: string[];
+}[];
+/** Quorum options shared by the EVM output and input validators. */
+interface OmnistonRpcQuorumOptions {
+    /**
+     * Independent RPC operators that must each prove the position on their own before the secret is disclosed. The
+     * chain's endpoints (`rpcUrls`, then the public fallbacks) are grouped by operator ({@link omnistonRpcOperatorGroups});
+     * every group runs the whole validation — its state reads pinned to its own finalized block (head minus the chain's
+     * confirmations) instead of `latest` — and at least `quorum` groups must pass. With fewer operators configured than
+     * the quorum, nothing is disclosed. Default 1: one validation over the first answering endpoint, as before.
+     * Needs `rpcUrls` (or the public fallbacks); a single injected `request` cannot be split into operators.
+     */
+    quorum?: number;
+    /** The operator of an endpoint URL (default {@link omnistonRpcOperator}). */
+    operatorOf?: (url: string) => string;
+}
+/**
+ * Runs `once` against one request (quorum 1: the caller's `request`, or the endpoints with failover), or against every
+ * independent operator with pinned state reads (quorum ≥ 2) — true only when at least `quorum` of them prove it.
+ * Refusals from an operator's run carry its `operator`.
+ */
+declare function omnistonQuorumValidator<I extends {
+    chain: string;
+}>(options: {
+    request?: RpcRequest;
+    rpcUrls?: OmnistonRpcUrls;
+} & OmnistonRpcQuorumOptions, refuse: (reason: string, details?: Record<string, unknown>) => false, once: (request: RpcRequest, input: I, refuse: (reason: string, details?: Record<string, unknown>) => false) => Promise<boolean>): (input: I) => Promise<boolean>;
 declare function createOmnistonEvmOutputValidator(options?: {
     request?: RpcRequest;
     rpcUrls?: OmnistonRpcUrls;
     now?: () => number;
     onRefusal?: OmnistonEvmOutputRefusal;
-}): (input: EvmOutputValidationInput) => Promise<boolean>;
+} & OmnistonRpcQuorumOptions): (input: EvmOutputValidationInput) => Promise<boolean>;
 /**
  * Finds an Omniston EVM delivery: the ERC-20 `Transfer` from the destination
  * escrow to the recipient of at least `minUnits`, within the chain's lookback
@@ -79,12 +115,13 @@ interface EvmInputValidationInput {
 }
 /** Diagnostics hook: every refusal names its check and the numbers it compared (never a secret). */
 type OmnistonValidatorRefusal = (reason: string, details?: Record<string, unknown>) => void;
+/** `quorum` / `operatorOf`: see {@link OmnistonRpcQuorumOptions} — the same independent-operator check as the output validator. */
 declare function createOmnistonEvmInputValidator(options?: {
     request?: OmnistonRpcRequest;
     rpcUrls?: OmnistonRpcUrls;
     now?: () => number;
     onRefusal?: OmnistonValidatorRefusal;
-}): (input: EvmInputValidationInput) => Promise<boolean>;
+} & OmnistonRpcQuorumOptions): (input: EvmInputValidationInput) => Promise<boolean>;
 
 /**
  * Settlement contracts this deployment trusts for Omniston, per CAIP-2 chain.
@@ -105,4 +142,4 @@ declare const AUDITED_OMNISTON_SETTLEMENT_CONTRACTS: Record<string, string[]>;
  */
 declare const AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS: Record<string, string[]>;
 
-export { AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS, AUDITED_OMNISTON_SETTLEMENT_CONTRACTS, type EvmInputValidationInput, type EvmOutputValidationInput, OMNISTON_EVM_LOOKBACK_BLOCKS, OMNISTON_EVM_MIN_CONFIRMATIONS, type OmnistonEvmOutputRefusal, type OmnistonRpcRequest, type OmnistonRpcUrls, type OmnistonValidatorRefusal, SRC_ESCROW_CREATED_TOPIC, createOmnistonEvmDeliveryLocator, createOmnistonEvmInputValidator, createOmnistonEvmOutputValidator, omnistonEvmRpcRequest };
+export { AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS, AUDITED_OMNISTON_SETTLEMENT_CONTRACTS, type EvmInputValidationInput, type EvmOutputValidationInput, OMNISTON_EVM_LOOKBACK_BLOCKS, OMNISTON_EVM_MIN_CONFIRMATIONS, type OmnistonEvmOutputRefusal, type OmnistonRpcQuorumOptions, type OmnistonRpcRequest, type OmnistonRpcUrls, type OmnistonValidatorRefusal, SRC_ESCROW_CREATED_TOPIC, createOmnistonEvmDeliveryLocator, createOmnistonEvmInputValidator, createOmnistonEvmOutputValidator, omnistonEvmRpcRequest, omnistonQuorumValidator, omnistonRpcOperator, omnistonRpcOperatorGroups };

package/dist/validators.js

@@ -152,6 +152,9 @@ function decodeFeeParameters(parameters) {
 async function omnistonEvmRpcRequest(chain, method, params, rpcUrls) {
   const urls = [...rpcUrls?.[chain] ?? [], ...DEFAULT_RPC_URLS[chain] ?? []].filter((url) => !!url);
   if (!urls.length) throw new Error(`omniston: no RPC configured for ${chain}`);
+  return await rpcOver(urls, chain, method, params);
+}
+async function rpcOver(urls, chain, method, params) {
   let lastError;
   for (const url of urls) {
     try {
@@ -171,6 +174,62 @@ async function omnistonEvmRpcRequest(chain, method, params, rpcUrls) {
   }
   throw lastError instanceof Error ? lastError : new Error(`omniston: RPC failed for ${chain}`);
 }
+function omnistonRpcOperator(url) {
+  const host = new URL(url).hostname.toLowerCase().replace(/\.$/, "");
+  if (/^[\d.]+$/.test(host) || host.includes(":") || host.startsWith("[")) return host;
+  return host.split(".").slice(-2).join(".");
+}
+function omnistonRpcOperatorGroups(chain, rpcUrls, operatorOf = omnistonRpcOperator) {
+  const groups = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const url of [...rpcUrls?.[chain] ?? [], ...DEFAULT_RPC_URLS[chain] ?? []]) {
+    if (!url || seen.has(url)) continue;
+    seen.add(url);
+    let operator;
+    try {
+      operator = operatorOf(url);
+    } catch {
+      continue;
+    }
+    const group = groups.find((g) => g.operator === operator);
+    if (group) group.urls.push(url);
+    else groups.push({ operator, urls: [url] });
+  }
+  return groups;
+}
+function pinnedStateRequest(request) {
+  let pinned = null;
+  return async (chain, method, params) => {
+    if (method === "eth_blockNumber") {
+      const head = await request(chain, method, params);
+      const latest = BigInt(head);
+      const confirmations = OMNISTON_EVM_MIN_CONFIRMATIONS[chain] ?? 20n;
+      pinned = quantity(latest >= confirmations ? latest - confirmations : 0n);
+      return head;
+    }
+    if (pinned && (method === "eth_call" || method === "eth_getCode" || method === "eth_getBalance") && params.at(-1) === "latest") {
+      return await request(chain, method, [...params.slice(0, -1), pinned]);
+    }
+    return await request(chain, method, params);
+  };
+}
+function omnistonQuorumValidator(options, refuse, once) {
+  const quorum = options.quorum ?? 1;
+  if (!Number.isSafeInteger(quorum) || quorum < 1) throw new Error("omniston: quorum must be a positive integer");
+  if (quorum === 1) {
+    const request = options.request ?? ((chain, method, params) => omnistonEvmRpcRequest(chain, method, params, options.rpcUrls));
+    return (input) => once(request, input, refuse);
+  }
+  if (options.request) throw new Error("omniston: an RPC quorum needs rpcUrls (one request per operator), not a single request");
+  return async (input) => {
+    const groups = omnistonRpcOperatorGroups(input.chain, options.rpcUrls, options.operatorOf);
+    const operators = groups.map((g) => g.operator);
+    if (groups.length < quorum) return refuse("rpc-quorum-unavailable", { chain: input.chain, operators, quorum });
+    const results = await Promise.all(groups.map((g) => once(pinnedStateRequest((chain, method, params) => rpcOver(g.urls, chain, method, params)), input, (reason, details) => refuse(reason, { ...details, operator: g.operator })).catch(() => false)));
+    const agreed = operators.filter((_, i) => results[i]);
+    return agreed.length >= quorum || refuse("rpc-quorum-not-met", { chain: input.chain, agreed, operators, quorum });
+  };
+}
 async function ethCall(request, chain, to, data) {
   return await request(chain, "eth_call", [{ to, data }, "latest"]);
 }
@@ -204,16 +263,15 @@ function locateImmutables(input, secretHash) {
   }
 }
 function createOmnistonEvmOutputValidator(options = {}) {
-  const refuse = (reason, details) => {
+  const report = (reason, details) => {
     try {
       options.onRefusal?.(reason, details);
     } catch {
     }
     return false;
   };
-  const request = options.request ?? ((chain, method, params) => omnistonEvmRpcRequest(chain, method, params, options.rpcUrls));
   const now = options.now ?? Date.now;
-  return async (input) => {
+  return omnistonQuorumValidator(options, report, async (request, input, refuse) => {
     try {
       if (!OMNISTON_EVM_LOOKBACK_BLOCKS[input.chain] || input.executionIndex !== 0 || !isAddress(input.positionAddress) || !isAddress(input.factoryAddress) || !isAddress(input.recipientAddress) || !isAddress(input.outputTokenAddress) || !Number.isInteger(input.quoteTimestamp) || input.quoteTimestamp * 1e3 > now() + 12e4 || now() - input.quoteTimestamp * 1e3 > 6 * 60 * 60 * 1e3) return refuse("input-shape");
       const position = getAddress(input.positionAddress);
@@ -310,7 +368,7 @@ function createOmnistonEvmOutputValidator(options = {}) {
     } catch (error) {
       return refuse("error", { message: error instanceof Error ? error.message : String(error) });
     }
-  };
+  });
 }
 var TRANSFER_TOPIC = keccak256(stringToHex("Transfer(address,address,uint256)"));
 var topicAddress = (address) => `0x${getAddress(address).slice(2).toLowerCase().padStart(64, "0")}`;
@@ -421,16 +479,15 @@ async function ethCall2(request, chain, to, data) {
   return await request(chain, "eth_call", [{ to, data }, "latest"]);
 }
 function createOmnistonEvmInputValidator(options = {}) {
-  const refuse = (reason, details) => {
+  const report = (reason, details) => {
     try {
       options.onRefusal?.(reason, details);
     } catch {
     }
     return false;
   };
-  const request = options.request ?? ((chain, method, params) => omnistonEvmRpcRequest(chain, method, params, options.rpcUrls));
   const now = options.now ?? Date.now;
-  return async (input) => {
+  return omnistonQuorumValidator(options, report, async (request, input, refuse) => {
     try {
       if (!OMNISTON_EVM_LOOKBACK_BLOCKS[input.chain] || !isAddress2(input.positionAddress) || !isAddress2(input.factoryAddress) || !isAddress2(input.orderProtocolAddress) || !isAddress2(input.ownerAddress) || !isAddress2(input.resolverAddress) || !isAddress2(input.inputTokenAddress) || !Number.isInteger(input.quoteTimestamp) || input.quoteTimestamp * 1e3 > now() + 12e4 || now() - input.quoteTimestamp * 1e3 > 6 * 60 * 60 * 1e3 || input.secretHash.length !== 32) return refuse("input-shape");
       const position = getAddress2(input.positionAddress);
@@ -505,7 +562,7 @@ function createOmnistonEvmInputValidator(options = {}) {
     } catch (error) {
       return refuse("error", { message: error instanceof Error ? error.message : String(error) });
     }
-  };
+  });
 }
 
 // src/validators/ton.ts
@@ -1145,6 +1202,9 @@ export {
   createOmnistonEvmOutputValidator,
   createOmnistonTonDeliveryLocator,
   createOmnistonTonValidators,
-  omnistonEvmRpcRequest
+  omnistonEvmRpcRequest,
+  omnistonQuorumValidator,
+  omnistonRpcOperator,
+  omnistonRpcOperatorGroups
 };
 //# sourceMappingURL=validators.js.map