@anywalletkit/protocol-swap2-omniston 0.5.3 → 0.5.5

package/README.md

@@ -117,6 +117,68 @@ resolver's calldata AND to derive, through the trusted factory's
 escrow address the factory announced; a decoy tuple or hidden immutables fail
 closed.
 
+### Trusted TON contracts
+
+TON ↔ EVM orders settle through Omniston's TON Escrow Minter. The audited
+table (`AUDITED_OMNISTON_SETTLEMENT_CONTRACTS["ton:-239"]`) and the position
+pin (`DEFAULT_OMNISTON_TON_CODE_HASHES.position`) trust rev2 only:
+
+| Minter | Code | Positions it deploys (EVM → TON) | Quoted | Trusted by default |
+|---|---|---|---|---|
+| `EQDybO88l2lrrAmALRUqpmgEE_tuxk510F4Yd4xjbQZxC9IA` (rev2) | `9737943f…` | `eb503578…` | since 2026-11-10 | yes |
+| `EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ` (rev1) | `f91c43d3…` | `e4d5115a…` | until 2026-11-10 (a few orders on 2026-11-12) | no (0.5.4 and older: yes) |
+
+Omniston's quotes moved to rev2 on 2026-11-10. rev2 checks the escrow and
+execution code of every order against a whitelist built into the contract;
+rev1 has no such whitelist. So a quote or a build that names rev1 is refused
+with its address in the reason ("untrusted TON settlement contract
+EQAbWJ3Y…", "the escrow transfer pays EQAbWJ3Y…, not an Omniston protocol
+contract this app trusts"), and a rev1 output position fails
+`position-code-hash`. Both minters stay in `OMNISTON_ESCROWS`, which
+recognizes history and grants no trust (see Activity).
+
+Orders already on rev1 need nothing from the trusted table:
+
+- History: `describeActivity` still tags rev1 orders (`OMNISTON_ESCROWS`).
+- Tracking: `trackIntent` reads no trust table. Every disclosure check
+  refuses a quote older than 6 hours, and the provider drops a quote context
+  after 6 hours, so a rev1 order quoted before Omniston's switch
+  (2026-11-10 ~19:00Z) can no longer be closed by any version. An order that
+  is not closed is cancelled after its timelocks, and the input goes back.
+- An order in flight while you upgrade: a TON → EVM order on rev1 still
+  completes (its disclosure checks only the EVM side). An EVM → TON order
+  quoted on rev1 less than 6 hours before you deploy the new version fails
+  `position-code-hash`, keeps its secret and is cancelled after its
+  timelocks. To let it complete, pin both position codes until 6 hours after
+  the deploy:
+
+  ```ts
+  const ton = createOmnistonTonValidators({
+    positionCodeHashes: [
+      "eb503578b4d9cd791c9c0ecd0da6da4064aae2bcb19d3c924d4001c493386bc5", // rev2 positions
+      "e4d5115a321ade7b827e38fb522c20d2f2cd46e4c6b0b5f7dd8b6b096792d77b", // rev1 positions, in-flight orders only
+    ],
+  });
+  ```
+
+  This pin trusts no new order: the provider takes the minter from the
+  quote, a new quote must name a trusted minter, and a position counts only
+  when that minter deployed it.
+
+Putting rev1 back into `trustedSettlementContracts` or
+`trustedProtocolAddresses` is something else: it trusts rev1 again for new
+quotes and builds, and it does not help close an old order.
+
+The provider compares TON addresses as strings, so a table of your own must
+spell them exactly as above; it replaces the built-in table, so it must list
+every network, with rev2 (not rev1) under `ton:-239`. A new minter is a new
+trust decision: its address goes into the settlement table and the code of
+its positions into `DEFAULT_OMNISTON_TON_CODE_HASHES.position`
+(`positionCodeHashes`), in the same release. With the address alone, EVM →
+TON orders fill and then fail the check before the secret is disclosed. The
+minters are admin-upgradable after a 7-day delay; the module watch reads the
+code and data of every trusted minter daily.
+
 ## Activity
 
 `describeActivity(tx, ctx)` recognizes TON-side transactions by their
@@ -126,10 +188,16 @@ at the destination contract and both sides of every transfer:
 - STON.fi DEX router (`STONFI_ROUTERS` in `src/activity.ts`; v2.2
   `EQCS4UEa…cN3` is what the wallet's swaps hit, v1 kept for older history) →
   `swap`, "Swapped GRAM → USD₮" / "Swapped USD₮ → GRAM", subtitle "STON.fi · TON".
-- Omniston HTLC escrow (`OMNISTON_ESCROWS`, the Escrow Minter
-  `EQAbWJ3Y…mrZ` that every live quote names as `srcProtocolContractAddress`) →
-  `bridge`, "Bridged USD₮", subtitle "Omniston · STON.fi". The EVM leg is paid by
-  the resolver and is not recognizable offline.
+- Omniston HTLC escrow (`OMNISTON_ESCROWS`, the Escrow Minters a quote names as
+  `srcProtocolContractAddress`: `EQAbWJ3Y…mrZ` until 2026-11-10, `EQDybO88…9IA`
+  since; both stay listed for history, though only rev2 is trusted for new
+  orders) → `bridge`, "Bridged USD₮", subtitle "Omniston · STON.fi". The EVM
+  leg is paid by the resolver and is not recognizable offline. A refund
+  backstop that looks for the input coming back from a minter should read this
+  list too, not only the trusted table: the trusted table no longer has rev1,
+  and a table of your own may hold a minter this list does not. It is
+  exported by the package root (`@anywalletkit/protocol-swap2-omniston`),
+  not by `/validators`.
 
 EVM → TON: the EVM leg is an off-chain signature (no transaction to
 recognize); the delivery is a jetton transfer from the same escrow contract and

package/dist/activity.cjs

@@ -33,7 +33,10 @@ var STONFI_ROUTERS = [
   "EQCS4UEa5UaJLzOyyKieqQOQ2P9M-7kXpkO5HnP3Bv250cN3",
   "EQB3ncyBUTjZUA5EnFKR5_EnOMI9V1tTEAAPaiU71gc4TiUt"
 ];
-var OMNISTON_ESCROWS = ["EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ"];
+var OMNISTON_ESCROWS = [
+  "EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ",
+  "EQDybO88l2lrrAmALRUqpmgEE_tuxk510F4Yd4xjbQZxC9IA"
+];
 function raw(address) {
   if (!address) return null;
   try {

package/dist/activity.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/activity.ts"],"sourcesContent":["/**\n * Activity recognition for Omniston on TON.\n *\n * Same-chain swaps settle through the STON.fi DEX router (the wallet pays TON /\n * a jetton to the router and the output jetton or TON comes back) → `swap`.\n * TON → EVM orders lock the input in the Omniston HTLC escrow (\"Omniston Escrow\n * Minter\", the `srcProtocolContractAddress` of every live quote) → `bridge`;\n * the EVM leg is paid by the resolver and is not recognizable offline.\n * Addresses are compared in raw form, so friendly (EQ…/UQ…) and raw (0:…)\n * notations all match.\n */\nimport {Address} from \"@ton/core\";\nimport type {ActivityItem, ChainTx, DescribeActivityContext} from \"@anywalletkit/core\";\nimport {describeSwapLike} from \"@anywalletkit/protocol-swap2-core/activity\";\n\nexport const OMNISTON_MODULE = \"@anywalletkit/protocol-swap2-omniston\";\n\n/** STON.fi DEX routers (tonapi \"STON.fi DEX\"; v2.2 observed in the test wallet's swaps, v1 kept for older history). */\nexport const STONFI_ROUTERS: readonly string[] = [\n  \"EQCS4UEa5UaJLzOyyKieqQOQ2P9M-7kXpkO5HnP3Bv250cN3\",\n  \"EQB3ncyBUTjZUA5EnFKR5_EnOMI9V1tTEAAPaiU71gc4TiUt\",\n];\n/** Omniston HTLC escrow on TON (Omniston Escrow Minter) — the `srcProtocolContractAddress` of TON→EVM orders. */\nexport const OMNISTON_ESCROWS: readonly string[] = [\"EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ\"];\n\nfunction raw(address: string | null | undefined): string | null {\n  if (!address) return null;\n  try {\n    return Address.parse(address).toRawString();\n  } catch {\n    return null;\n  }\n}\n\nconst ROUTER_RAW = new Set(STONFI_ROUTERS.map((a) => raw(a)!));\nconst ESCROW_RAW = new Set(OMNISTON_ESCROWS.map((a) => raw(a)!));\n\n/** Every non-own party of the transaction in raw form: the destination contract and each transfer's other side. */\nfunction counterparties(tx: ChainTx, own: Set<string>): string[] {\n  const ownRaw = new Set<string>();\n  for (const a of own) {\n    const r = raw(a);\n    if (r) ownRaw.add(r);\n  }\n  const out = new Set<string>();\n  const add = (a: string | null | undefined) => {\n    const r = raw(a);\n    if (r && !ownRaw.has(r)) out.add(r);\n  };\n  add(tx.call?.to);\n  add(tx.to);\n  for (const t of tx.transfers) {\n    add(t.from);\n    add(t.to);\n  }\n  return [...out];\n}\n\nexport function describeOmnistonActivity(tx: ChainTx, ctx: DescribeActivityContext): ActivityItem | null {\n  if (!tx.chain.startsWith(\"ton:\")) return null;\n  const parties = counterparties(tx, ctx.own);\n  const escrow = parties.find((p) => ESCROW_RAW.has(p));\n  if (escrow) {\n    return describeSwapLike(tx, ctx, {protocol: OMNISTON_MODULE, subtitle: \"Omniston · STON.fi\", kind: \"bridge\", counterparty: tx.call?.to ?? tx.to ?? escrow});\n  }\n  const router = parties.find((p) => ROUTER_RAW.has(p));\n  if (router) {\n    return describeSwapLike(tx, ctx, {protocol: OMNISTON_MODULE, subtitle: \"STON.fi · TON\", kind: \"swap\", counterparty: tx.call?.to ?? tx.to ?? router});\n  }\n  return null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWA,kBAAsB;AAEtB,sBAA+B;AAExB,IAAM,kBAAkB;AAGxB,IAAM,iBAAoC;AAAA,EAC/C;AAAA,EACA;AACF;AAEO,IAAM,mBAAsC,CAAC,kDAAkD;AAEtG,SAAS,IAAI,SAAmD;AAC9D,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI;AACF,WAAO,oBAAQ,MAAM,OAAO,EAAE,YAAY;AAAA,EAC5C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,IAAM,aAAa,IAAI,IAAI,eAAe,IAAI,CAAC,MAAM,IAAI,CAAC,CAAE,CAAC;AAC7D,IAAM,aAAa,IAAI,IAAI,iBAAiB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAE,CAAC;AAG/D,SAAS,eAAe,IAAa,KAA4B;AAC/D,QAAM,SAAS,oBAAI,IAAY;AAC/B,aAAW,KAAK,KAAK;AACnB,UAAM,IAAI,IAAI,CAAC;AACf,QAAI,EAAG,QAAO,IAAI,CAAC;AAAA,EACrB;AACA,QAAM,MAAM,oBAAI,IAAY;AAC5B,QAAM,MAAM,CAAC,MAAiC;AAC5C,UAAM,IAAI,IAAI,CAAC;AACf,QAAI,KAAK,CAAC,OAAO,IAAI,CAAC,EAAG,KAAI,IAAI,CAAC;AAAA,EACpC;AACA,MAAI,GAAG,MAAM,EAAE;AACf,MAAI,GAAG,EAAE;AACT,aAAW,KAAK,GAAG,WAAW;AAC5B,QAAI,EAAE,IAAI;AACV,QAAI,EAAE,EAAE;AAAA,EACV;AACA,SAAO,CAAC,GAAG,GAAG;AAChB;AAEO,SAAS,yBAAyB,IAAa,KAAmD;AACvG,MAAI,CAAC,GAAG,MAAM,WAAW,MAAM,EAAG,QAAO;AACzC,QAAM,UAAU,eAAe,IAAI,IAAI,GAAG;AAC1C,QAAM,SAAS,QAAQ,KAAK,CAAC,MAAM,WAAW,IAAI,CAAC,CAAC;AACpD,MAAI,QAAQ;AACV,eAAO,kCAAiB,IAAI,KAAK,EAAC,UAAU,iBAAiB,UAAU,yBAAsB,MAAM,UAAU,cAAc,GAAG,MAAM,MAAM,GAAG,MAAM,OAAM,CAAC;AAAA,EAC5J;AACA,QAAM,SAAS,QAAQ,KAAK,CAAC,MAAM,WAAW,IAAI,CAAC,CAAC;AACpD,MAAI,QAAQ;AACV,eAAO,kCAAiB,IAAI,KAAK,EAAC,UAAU,iBAAiB,UAAU,oBAAiB,MAAM,QAAQ,cAAc,GAAG,MAAM,MAAM,GAAG,MAAM,OAAM,CAAC;AAAA,EACrJ;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/activity.ts"],"sourcesContent":["/**\n * Activity recognition for Omniston on TON.\n *\n * Same-chain swaps settle through the STON.fi DEX router (the wallet pays TON /\n * a jetton to the router and the output jetton or TON comes back) → `swap`.\n * TON → EVM orders lock the input in the Omniston HTLC escrow (\"Omniston Escrow\n * Minter\", the `srcProtocolContractAddress` of every live quote) → `bridge`;\n * the EVM leg is paid by the resolver and is not recognizable offline.\n * Addresses are compared in raw form, so friendly (EQ…/UQ…) and raw (0:…)\n * notations all match.\n */\nimport {Address} from \"@ton/core\";\nimport type {ActivityItem, ChainTx, DescribeActivityContext} from \"@anywalletkit/core\";\nimport {describeSwapLike} from \"@anywalletkit/protocol-swap2-core/activity\";\n\nexport const OMNISTON_MODULE = \"@anywalletkit/protocol-swap2-omniston\";\n\n/** STON.fi DEX routers (tonapi \"STON.fi DEX\"; v2.2 observed in the test wallet's swaps, v1 kept for older history). */\nexport const STONFI_ROUTERS: readonly string[] = [\n  \"EQCS4UEa5UaJLzOyyKieqQOQ2P9M-7kXpkO5HnP3Bv250cN3\",\n  \"EQB3ncyBUTjZUA5EnFKR5_EnOMI9V1tTEAAPaiU71gc4TiUt\",\n];\n/**\n * Omniston HTLC escrow on TON (Omniston Escrow Minter) — the `srcProtocolContractAddress` of TON→EVM orders.\n * Every minter that ever held an order stays here: this list recognizes history (activity, and a refund from a\n * minter back to the trader), it grants no trust. New orders follow `AUDITED_OMNISTON_SETTLEMENT_CONTRACTS`, which\n * lists only rev2 in the releases after 0.5.4. Quotes named EQAbWJ3Y… (rev1) until 2026-11-10, EQDybO88… (rev2)\n * since 2026-11-10 ~19:00Z. Exported by the package root only, not by `/validators`.\n */\nexport const OMNISTON_ESCROWS: readonly string[] = [\n  \"EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ\",\n  \"EQDybO88l2lrrAmALRUqpmgEE_tuxk510F4Yd4xjbQZxC9IA\",\n];\n\nfunction raw(address: string | null | undefined): string | null {\n  if (!address) return null;\n  try {\n    return Address.parse(address).toRawString();\n  } catch {\n    return null;\n  }\n}\n\nconst ROUTER_RAW = new Set(STONFI_ROUTERS.map((a) => raw(a)!));\nconst ESCROW_RAW = new Set(OMNISTON_ESCROWS.map((a) => raw(a)!));\n\n/** Every non-own party of the transaction in raw form: the destination contract and each transfer's other side. */\nfunction counterparties(tx: ChainTx, own: Set<string>): string[] {\n  const ownRaw = new Set<string>();\n  for (const a of own) {\n    const r = raw(a);\n    if (r) ownRaw.add(r);\n  }\n  const out = new Set<string>();\n  const add = (a: string | null | undefined) => {\n    const r = raw(a);\n    if (r && !ownRaw.has(r)) out.add(r);\n  };\n  add(tx.call?.to);\n  add(tx.to);\n  for (const t of tx.transfers) {\n    add(t.from);\n    add(t.to);\n  }\n  return [...out];\n}\n\nexport function describeOmnistonActivity(tx: ChainTx, ctx: DescribeActivityContext): ActivityItem | null {\n  if (!tx.chain.startsWith(\"ton:\")) return null;\n  const parties = counterparties(tx, ctx.own);\n  const escrow = parties.find((p) => ESCROW_RAW.has(p));\n  if (escrow) {\n    return describeSwapLike(tx, ctx, {protocol: OMNISTON_MODULE, subtitle: \"Omniston · STON.fi\", kind: \"bridge\", counterparty: tx.call?.to ?? tx.to ?? escrow});\n  }\n  const router = parties.find((p) => ROUTER_RAW.has(p));\n  if (router) {\n    return describeSwapLike(tx, ctx, {protocol: OMNISTON_MODULE, subtitle: \"STON.fi · TON\", kind: \"swap\", counterparty: tx.call?.to ?? tx.to ?? router});\n  }\n  return null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWA,kBAAsB;AAEtB,sBAA+B;AAExB,IAAM,kBAAkB;AAGxB,IAAM,iBAAoC;AAAA,EAC/C;AAAA,EACA;AACF;AAQO,IAAM,mBAAsC;AAAA,EACjD;AAAA,EACA;AACF;AAEA,SAAS,IAAI,SAAmD;AAC9D,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI;AACF,WAAO,oBAAQ,MAAM,OAAO,EAAE,YAAY;AAAA,EAC5C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,IAAM,aAAa,IAAI,IAAI,eAAe,IAAI,CAAC,MAAM,IAAI,CAAC,CAAE,CAAC;AAC7D,IAAM,aAAa,IAAI,IAAI,iBAAiB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAE,CAAC;AAG/D,SAAS,eAAe,IAAa,KAA4B;AAC/D,QAAM,SAAS,oBAAI,IAAY;AAC/B,aAAW,KAAK,KAAK;AACnB,UAAM,IAAI,IAAI,CAAC;AACf,QAAI,EAAG,QAAO,IAAI,CAAC;AAAA,EACrB;AACA,QAAM,MAAM,oBAAI,IAAY;AAC5B,QAAM,MAAM,CAAC,MAAiC;AAC5C,UAAM,IAAI,IAAI,CAAC;AACf,QAAI,KAAK,CAAC,OAAO,IAAI,CAAC,EAAG,KAAI,IAAI,CAAC;AAAA,EACpC;AACA,MAAI,GAAG,MAAM,EAAE;AACf,MAAI,GAAG,EAAE;AACT,aAAW,KAAK,GAAG,WAAW;AAC5B,QAAI,EAAE,IAAI;AACV,QAAI,EAAE,EAAE;AAAA,EACV;AACA,SAAO,CAAC,GAAG,GAAG;AAChB;AAEO,SAAS,yBAAyB,IAAa,KAAmD;AACvG,MAAI,CAAC,GAAG,MAAM,WAAW,MAAM,EAAG,QAAO;AACzC,QAAM,UAAU,eAAe,IAAI,IAAI,GAAG;AAC1C,QAAM,SAAS,QAAQ,KAAK,CAAC,MAAM,WAAW,IAAI,CAAC,CAAC;AACpD,MAAI,QAAQ;AACV,eAAO,kCAAiB,IAAI,KAAK,EAAC,UAAU,iBAAiB,UAAU,yBAAsB,MAAM,UAAU,cAAc,GAAG,MAAM,MAAM,GAAG,MAAM,OAAM,CAAC;AAAA,EAC5J;AACA,QAAM,SAAS,QAAQ,KAAK,CAAC,MAAM,WAAW,IAAI,CAAC,CAAC;AACpD,MAAI,QAAQ;AACV,eAAO,kCAAiB,IAAI,KAAK,EAAC,UAAU,iBAAiB,UAAU,oBAAiB,MAAM,QAAQ,cAAc,GAAG,MAAM,MAAM,GAAG,MAAM,OAAM,CAAC;AAAA,EACrJ;AACA,SAAO;AACT;","names":[]}

package/dist/activity.d.cts

@@ -3,7 +3,13 @@ import { ChainTx, DescribeActivityContext, ActivityItem } from '@anywalletkit/co
 declare const OMNISTON_MODULE = "@anywalletkit/protocol-swap2-omniston";
 /** STON.fi DEX routers (tonapi "STON.fi DEX"; v2.2 observed in the test wallet's swaps, v1 kept for older history). */
 declare const STONFI_ROUTERS: readonly string[];
-/** Omniston HTLC escrow on TON (Omniston Escrow Minter) — the `srcProtocolContractAddress` of TON→EVM orders. */
+/**
+ * Omniston HTLC escrow on TON (Omniston Escrow Minter) — the `srcProtocolContractAddress` of TON→EVM orders.
+ * Every minter that ever held an order stays here: this list recognizes history (activity, and a refund from a
+ * minter back to the trader), it grants no trust. New orders follow `AUDITED_OMNISTON_SETTLEMENT_CONTRACTS`, which
+ * lists only rev2 in the releases after 0.5.4. Quotes named EQAbWJ3Y… (rev1) until 2026-11-10, EQDybO88… (rev2)
+ * since 2026-11-10 ~19:00Z. Exported by the package root only, not by `/validators`.
+ */
 declare const OMNISTON_ESCROWS: readonly string[];
 declare function describeOmnistonActivity(tx: ChainTx, ctx: DescribeActivityContext): ActivityItem | null;
 

package/dist/activity.d.ts

@@ -3,7 +3,13 @@ import { ChainTx, DescribeActivityContext, ActivityItem } from '@anywalletkit/co
 declare const OMNISTON_MODULE = "@anywalletkit/protocol-swap2-omniston";
 /** STON.fi DEX routers (tonapi "STON.fi DEX"; v2.2 observed in the test wallet's swaps, v1 kept for older history). */
 declare const STONFI_ROUTERS: readonly string[];
-/** Omniston HTLC escrow on TON (Omniston Escrow Minter) — the `srcProtocolContractAddress` of TON→EVM orders. */
+/**
+ * Omniston HTLC escrow on TON (Omniston Escrow Minter) — the `srcProtocolContractAddress` of TON→EVM orders.
+ * Every minter that ever held an order stays here: this list recognizes history (activity, and a refund from a
+ * minter back to the trader), it grants no trust. New orders follow `AUDITED_OMNISTON_SETTLEMENT_CONTRACTS`, which
+ * lists only rev2 in the releases after 0.5.4. Quotes named EQAbWJ3Y… (rev1) until 2026-11-10, EQDybO88… (rev2)
+ * since 2026-11-10 ~19:00Z. Exported by the package root only, not by `/validators`.
+ */
 declare const OMNISTON_ESCROWS: readonly string[];
 declare function describeOmnistonActivity(tx: ChainTx, ctx: DescribeActivityContext): ActivityItem | null;
 

package/dist/activity.js

@@ -3,7 +3,7 @@ import {
   OMNISTON_MODULE,
   STONFI_ROUTERS,
   describeOmnistonActivity
-} from "./chunk-AIWAM7BS.js";
+} from "./chunk-ENAEOF7N.js";
 export {
   OMNISTON_ESCROWS,
   OMNISTON_MODULE,

package/dist/{chunk-AIWAM7BS.js → chunk-ENAEOF7N.js}

@@ -6,7 +6,10 @@ var STONFI_ROUTERS = [
   "EQCS4UEa5UaJLzOyyKieqQOQ2P9M-7kXpkO5HnP3Bv250cN3",
   "EQB3ncyBUTjZUA5EnFKR5_EnOMI9V1tTEAAPaiU71gc4TiUt"
 ];
-var OMNISTON_ESCROWS = ["EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ"];
+var OMNISTON_ESCROWS = [
+  "EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ",
+  "EQDybO88l2lrrAmALRUqpmgEE_tuxk510F4Yd4xjbQZxC9IA"
+];
 function raw(address) {
   if (!address) return null;
   try {
@@ -56,4 +59,4 @@ export {
   OMNISTON_ESCROWS,
   describeOmnistonActivity
 };
-//# sourceMappingURL=chunk-AIWAM7BS.js.map
+//# sourceMappingURL=chunk-ENAEOF7N.js.map

package/dist/chunk-ENAEOF7N.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/activity.ts"],"sourcesContent":["/**\n * Activity recognition for Omniston on TON.\n *\n * Same-chain swaps settle through the STON.fi DEX router (the wallet pays TON /\n * a jetton to the router and the output jetton or TON comes back) → `swap`.\n * TON → EVM orders lock the input in the Omniston HTLC escrow (\"Omniston Escrow\n * Minter\", the `srcProtocolContractAddress` of every live quote) → `bridge`;\n * the EVM leg is paid by the resolver and is not recognizable offline.\n * Addresses are compared in raw form, so friendly (EQ…/UQ…) and raw (0:…)\n * notations all match.\n */\nimport {Address} from \"@ton/core\";\nimport type {ActivityItem, ChainTx, DescribeActivityContext} from \"@anywalletkit/core\";\nimport {describeSwapLike} from \"@anywalletkit/protocol-swap2-core/activity\";\n\nexport const OMNISTON_MODULE = \"@anywalletkit/protocol-swap2-omniston\";\n\n/** STON.fi DEX routers (tonapi \"STON.fi DEX\"; v2.2 observed in the test wallet's swaps, v1 kept for older history). */\nexport const STONFI_ROUTERS: readonly string[] = [\n  \"EQCS4UEa5UaJLzOyyKieqQOQ2P9M-7kXpkO5HnP3Bv250cN3\",\n  \"EQB3ncyBUTjZUA5EnFKR5_EnOMI9V1tTEAAPaiU71gc4TiUt\",\n];\n/**\n * Omniston HTLC escrow on TON (Omniston Escrow Minter) — the `srcProtocolContractAddress` of TON→EVM orders.\n * Every minter that ever held an order stays here: this list recognizes history (activity, and a refund from a\n * minter back to the trader), it grants no trust. New orders follow `AUDITED_OMNISTON_SETTLEMENT_CONTRACTS`, which\n * lists only rev2 in the releases after 0.5.4. Quotes named EQAbWJ3Y… (rev1) until 2026-11-10, EQDybO88… (rev2)\n * since 2026-11-10 ~19:00Z. Exported by the package root only, not by `/validators`.\n */\nexport const OMNISTON_ESCROWS: readonly string[] = [\n  \"EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ\",\n  \"EQDybO88l2lrrAmALRUqpmgEE_tuxk510F4Yd4xjbQZxC9IA\",\n];\n\nfunction raw(address: string | null | undefined): string | null {\n  if (!address) return null;\n  try {\n    return Address.parse(address).toRawString();\n  } catch {\n    return null;\n  }\n}\n\nconst ROUTER_RAW = new Set(STONFI_ROUTERS.map((a) => raw(a)!));\nconst ESCROW_RAW = new Set(OMNISTON_ESCROWS.map((a) => raw(a)!));\n\n/** Every non-own party of the transaction in raw form: the destination contract and each transfer's other side. */\nfunction counterparties(tx: ChainTx, own: Set<string>): string[] {\n  const ownRaw = new Set<string>();\n  for (const a of own) {\n    const r = raw(a);\n    if (r) ownRaw.add(r);\n  }\n  const out = new Set<string>();\n  const add = (a: string | null | undefined) => {\n    const r = raw(a);\n    if (r && !ownRaw.has(r)) out.add(r);\n  };\n  add(tx.call?.to);\n  add(tx.to);\n  for (const t of tx.transfers) {\n    add(t.from);\n    add(t.to);\n  }\n  return [...out];\n}\n\nexport function describeOmnistonActivity(tx: ChainTx, ctx: DescribeActivityContext): ActivityItem | null {\n  if (!tx.chain.startsWith(\"ton:\")) return null;\n  const parties = counterparties(tx, ctx.own);\n  const escrow = parties.find((p) => ESCROW_RAW.has(p));\n  if (escrow) {\n    return describeSwapLike(tx, ctx, {protocol: OMNISTON_MODULE, subtitle: \"Omniston · STON.fi\", kind: \"bridge\", counterparty: tx.call?.to ?? tx.to ?? escrow});\n  }\n  const router = parties.find((p) => ROUTER_RAW.has(p));\n  if (router) {\n    return describeSwapLike(tx, ctx, {protocol: OMNISTON_MODULE, subtitle: \"STON.fi · TON\", kind: \"swap\", counterparty: tx.call?.to ?? tx.to ?? router});\n  }\n  return null;\n}\n"],"mappings":";AAWA,SAAQ,eAAc;AAEtB,SAAQ,wBAAuB;AAExB,IAAM,kBAAkB;AAGxB,IAAM,iBAAoC;AAAA,EAC/C;AAAA,EACA;AACF;AAQO,IAAM,mBAAsC;AAAA,EACjD;AAAA,EACA;AACF;AAEA,SAAS,IAAI,SAAmD;AAC9D,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI;AACF,WAAO,QAAQ,MAAM,OAAO,EAAE,YAAY;AAAA,EAC5C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,IAAM,aAAa,IAAI,IAAI,eAAe,IAAI,CAAC,MAAM,IAAI,CAAC,CAAE,CAAC;AAC7D,IAAM,aAAa,IAAI,IAAI,iBAAiB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAE,CAAC;AAG/D,SAAS,eAAe,IAAa,KAA4B;AAC/D,QAAM,SAAS,oBAAI,IAAY;AAC/B,aAAW,KAAK,KAAK;AACnB,UAAM,IAAI,IAAI,CAAC;AACf,QAAI,EAAG,QAAO,IAAI,CAAC;AAAA,EACrB;AACA,QAAM,MAAM,oBAAI,IAAY;AAC5B,QAAM,MAAM,CAAC,MAAiC;AAC5C,UAAM,IAAI,IAAI,CAAC;AACf,QAAI,KAAK,CAAC,OAAO,IAAI,CAAC,EAAG,KAAI,IAAI,CAAC;AAAA,EACpC;AACA,MAAI,GAAG,MAAM,EAAE;AACf,MAAI,GAAG,EAAE;AACT,aAAW,KAAK,GAAG,WAAW;AAC5B,QAAI,EAAE,IAAI;AACV,QAAI,EAAE,EAAE;AAAA,EACV;AACA,SAAO,CAAC,GAAG,GAAG;AAChB;AAEO,SAAS,yBAAyB,IAAa,KAAmD;AACvG,MAAI,CAAC,GAAG,MAAM,WAAW,MAAM,EAAG,QAAO;AACzC,QAAM,UAAU,eAAe,IAAI,IAAI,GAAG;AAC1C,QAAM,SAAS,QAAQ,KAAK,CAAC,MAAM,WAAW,IAAI,CAAC,CAAC;AACpD,MAAI,QAAQ;AACV,WAAO,iBAAiB,IAAI,KAAK,EAAC,UAAU,iBAAiB,UAAU,yBAAsB,MAAM,UAAU,cAAc,GAAG,MAAM,MAAM,GAAG,MAAM,OAAM,CAAC;AAAA,EAC5J;AACA,QAAM,SAAS,QAAQ,KAAK,CAAC,MAAM,WAAW,IAAI,CAAC,CAAC;AACpD,MAAI,QAAQ;AACV,WAAO,iBAAiB,IAAI,KAAK,EAAC,UAAU,iBAAiB,UAAU,oBAAiB,MAAM,QAAQ,cAAc,GAAG,MAAM,MAAM,GAAG,MAAM,OAAM,CAAC;AAAA,EACrJ;AACA,SAAO;AACT;","names":[]}

package/dist/{chunk-4JOTKQOT.js → chunk-FDSTD34Z.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-QDXFC6BC.js";
 import {
   describeOmnistonActivity
-} from "./chunk-AIWAM7BS.js";
+} from "./chunk-ENAEOF7N.js";
 import {
   AUDITED_OMNISTON_EVM_ORDER_PROTOCOLS,
   AUDITED_OMNISTON_SETTLEMENT_CONTRACTS
-} from "./chunk-JWYDIW4V.js";
+} from "./chunk-IDRZHWWL.js";
 
 // src/provider.ts
 import { Address as TonAddress, Cell as TonCell } from "@ton/core";
@@ -1853,6 +1853,9 @@ function omnistonProvider(opts = {}) {
     const inputToken = assetContract(q.inputAsset);
     const outputToken = assetContract(q.outputAsset);
     const destChainId = tonDest ? null : evmRef(destChain);
+    if (factory?.chain.$case === destCase && !isTrusted(destChain, factory.chain.value)) {
+      throw new Error(`omniston: untrusted ${destChain} settlement contract ${factory.chain.value}`);
+    }
     if (protocol.chain.$case !== srcCase || !isTrustedOrderProtocol(srcChain, protocol.chain.value) || resolver?.chain.$case !== srcCase || !validEvmAddress(resolver.chain.value) || factory?.chain.$case !== destCase || !isTrusted(destChain, factory.chain.value) || !inputToken || !outputToken || !Number.isSafeInteger(settlement.protocolFeePips) || !tonDest && (destChainId === null || !validEvmAddress(outputToken) || !isPositiveInteger(settlement.dstSecurityDepositUnits ?? ""))) throw new Error("omniston: incomplete EVM order settlement binding in quote");
     const { secrets, created } = await secretsFor(ref, q, 1);
     const hashes = secrets.map((secret) => hashlock(secret, settlement.htlcHashingFunction));
@@ -2097,6 +2100,10 @@ function omnistonProvider(opts = {}) {
       const destCase = q.outputAsset.chain.$case;
       const traderDst = destCase === "ton" ? null : { chain: { $case: destCase, value: getAddress(ref.dest) } };
       if (!traderDst) throw new Error("omniston: TON-destination orders are not supported");
+      const minter = q.settlementData.value.srcProtocolContractAddress;
+      if (minter.chain.$case !== "ton" || !isTrusted(srcChain, minter.chain.value)) {
+        throw new Error(`omniston: untrusted TON settlement contract ${minter.chain.value}`);
+      }
       const settlement = q.settlementData;
       const hashingFunction = settlement.$case === "order" ? settlement.value.htlcHashingFunction : void 0;
       const { secrets, created } = await secretsFor(ref, q, maxExecutions);
@@ -2425,4 +2432,4 @@ export {
   omnistonVerifyBuild,
   omnistonProvider
 };
-//# sourceMappingURL=chunk-4JOTKQOT.js.map
+//# sourceMappingURL=chunk-FDSTD34Z.js.map