@anywalletkit/protocol-swap2-omniston 0.5.3 → 0.5.5

package/dist/provider.d.cts

@@ -1,2 +1,2 @@
-export { A as AssetId, C as ChainAddress, E as EscrowMessage, H as HtlcSecretStore, O as ObservableLike, a as OmnistonClientLike, b as OmnistonProviderOptions, c as OmnistonQuote, d as OmnistonQuoteStore, e as OrderEvent, f as OrderExecution, g as OrderSettlement, h as OrderSnapshot, Q as QuoteRequest, R as RfqEvent, S as SwapSettlement, i as SwapTrackEvent, T as TON_SWAP_PROTOCOL_LAYOUTS, j as TonSwapCheckInput, k as TonSwapCheckResult, l as TonSwapLeg, m as TonSwapPayloadError, n as checkTonSwapPayload, o as encodeTypedMessage, p as inMemoryQuoteStore, q as inMemorySecretStore, r as omnistonPins, s as omnistonProvider, t as omnistonVerifyBuild, v as validateEvmToTonOrderExtension, u as validateEvmTypedOrder } from './provider-CcCZB-Cj.cjs';
+export { A as AssetId, C as ChainAddress, E as EscrowMessage, H as HtlcSecretStore, O as ObservableLike, a as OmnistonClientLike, b as OmnistonProviderOptions, c as OmnistonQuote, d as OmnistonQuoteStore, e as OrderEvent, f as OrderExecution, g as OrderSettlement, h as OrderSnapshot, Q as QuoteRequest, R as RfqEvent, S as SwapSettlement, i as SwapTrackEvent, T as TON_SWAP_PROTOCOL_LAYOUTS, j as TonSwapCheckInput, k as TonSwapCheckResult, l as TonSwapLeg, m as TonSwapPayloadError, n as checkTonSwapPayload, o as encodeTypedMessage, p as inMemoryQuoteStore, q as inMemorySecretStore, r as omnistonPins, s as omnistonProvider, t as omnistonVerifyBuild, v as validateEvmToTonOrderExtension, u as validateEvmTypedOrder } from './provider-BQzNkVvW.cjs';
 import '@anywalletkit/protocol-swap2-core/types';

package/dist/provider.d.ts

@@ -1,2 +1,2 @@
-export { A as AssetId, C as ChainAddress, E as EscrowMessage, H as HtlcSecretStore, O as ObservableLike, a as OmnistonClientLike, b as OmnistonProviderOptions, c as OmnistonQuote, d as OmnistonQuoteStore, e as OrderEvent, f as OrderExecution, g as OrderSettlement, h as OrderSnapshot, Q as QuoteRequest, R as RfqEvent, S as SwapSettlement, i as SwapTrackEvent, T as TON_SWAP_PROTOCOL_LAYOUTS, j as TonSwapCheckInput, k as TonSwapCheckResult, l as TonSwapLeg, m as TonSwapPayloadError, n as checkTonSwapPayload, o as encodeTypedMessage, p as inMemoryQuoteStore, q as inMemorySecretStore, r as omnistonPins, s as omnistonProvider, t as omnistonVerifyBuild, v as validateEvmToTonOrderExtension, u as validateEvmTypedOrder } from './provider-CcCZB-Cj.js';
+export { A as AssetId, C as ChainAddress, E as EscrowMessage, H as HtlcSecretStore, O as ObservableLike, a as OmnistonClientLike, b as OmnistonProviderOptions, c as OmnistonQuote, d as OmnistonQuoteStore, e as OrderEvent, f as OrderExecution, g as OrderSettlement, h as OrderSnapshot, Q as QuoteRequest, R as RfqEvent, S as SwapSettlement, i as SwapTrackEvent, T as TON_SWAP_PROTOCOL_LAYOUTS, j as TonSwapCheckInput, k as TonSwapCheckResult, l as TonSwapLeg, m as TonSwapPayloadError, n as checkTonSwapPayload, o as encodeTypedMessage, p as inMemoryQuoteStore, q as inMemorySecretStore, r as omnistonPins, s as omnistonProvider, t as omnistonVerifyBuild, v as validateEvmToTonOrderExtension, u as validateEvmTypedOrder } from './provider-BQzNkVvW.js';
 import '@anywalletkit/protocol-swap2-core/types';

package/dist/provider.js

@@ -10,10 +10,10 @@ import {
   omnistonVerifyBuild,
   validateEvmToTonOrderExtension,
   validateEvmTypedOrder
-} from "./chunk-4JOTKQOT.js";
+} from "./chunk-FDSTD34Z.js";
 import "./chunk-QDXFC6BC.js";
-import "./chunk-AIWAM7BS.js";
-import "./chunk-JWYDIW4V.js";
+import "./chunk-ENAEOF7N.js";
+import "./chunk-IDRZHWWL.js";
 export {
   TON_SWAP_PROTOCOL_LAYOUTS,
   TonSwapPayloadError,

package/dist/validators.cjs

@@ -34,7 +34,10 @@ __export(validators_exports, {
   createOmnistonEvmOutputValidator: () => createOmnistonEvmOutputValidator,
   createOmnistonTonDeliveryLocator: () => createOmnistonTonDeliveryLocator,
   createOmnistonTonValidators: () => createOmnistonTonValidators,
-  omnistonEvmRpcRequest: () => omnistonEvmRpcRequest
+  omnistonEvmRpcRequest: () => omnistonEvmRpcRequest,
+  omnistonQuorumValidator: () => omnistonQuorumValidator,
+  omnistonRpcOperator: () => omnistonRpcOperator,
+  omnistonRpcOperatorGroups: () => omnistonRpcOperatorGroups
 });
 module.exports = __toCommonJS(validators_exports);
 
@@ -179,6 +182,9 @@ function decodeFeeParameters(parameters) {
 async function omnistonEvmRpcRequest(chain, method, params, rpcUrls) {
   const urls = [...rpcUrls?.[chain] ?? [], ...DEFAULT_RPC_URLS[chain] ?? []].filter((url) => !!url);
   if (!urls.length) throw new Error(`omniston: no RPC configured for ${chain}`);
+  return await rpcOver(urls, chain, method, params);
+}
+async function rpcOver(urls, chain, method, params) {
   let lastError;
   for (const url of urls) {
     try {
@@ -198,6 +204,62 @@ async function omnistonEvmRpcRequest(chain, method, params, rpcUrls) {
   }
   throw lastError instanceof Error ? lastError : new Error(`omniston: RPC failed for ${chain}`);
 }
+function omnistonRpcOperator(url) {
+  const host = new URL(url).hostname.toLowerCase().replace(/\.$/, "");
+  if (/^[\d.]+$/.test(host) || host.includes(":") || host.startsWith("[")) return host;
+  return host.split(".").slice(-2).join(".");
+}
+function omnistonRpcOperatorGroups(chain, rpcUrls, operatorOf = omnistonRpcOperator) {
+  const groups = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const url of [...rpcUrls?.[chain] ?? [], ...DEFAULT_RPC_URLS[chain] ?? []]) {
+    if (!url || seen.has(url)) continue;
+    seen.add(url);
+    let operator;
+    try {
+      operator = operatorOf(url);
+    } catch {
+      continue;
+    }
+    const group = groups.find((g) => g.operator === operator);
+    if (group) group.urls.push(url);
+    else groups.push({ operator, urls: [url] });
+  }
+  return groups;
+}
+function pinnedStateRequest(request) {
+  let pinned = null;
+  return async (chain, method, params) => {
+    if (method === "eth_blockNumber") {
+      const head = await request(chain, method, params);
+      const latest = BigInt(head);
+      const confirmations = OMNISTON_EVM_MIN_CONFIRMATIONS[chain] ?? 20n;
+      pinned = quantity(latest >= confirmations ? latest - confirmations : 0n);
+      return head;
+    }
+    if (pinned && (method === "eth_call" || method === "eth_getCode" || method === "eth_getBalance") && params.at(-1) === "latest") {
+      return await request(chain, method, [...params.slice(0, -1), pinned]);
+    }
+    return await request(chain, method, params);
+  };
+}
+function omnistonQuorumValidator(options, refuse, once) {
+  const quorum = options.quorum ?? 1;
+  if (!Number.isSafeInteger(quorum) || quorum < 1) throw new Error("omniston: quorum must be a positive integer");
+  if (quorum === 1) {
+    const request = options.request ?? ((chain, method, params) => omnistonEvmRpcRequest(chain, method, params, options.rpcUrls));
+    return (input) => once(request, input, refuse);
+  }
+  if (options.request) throw new Error("omniston: an RPC quorum needs rpcUrls (one request per operator), not a single request");
+  return async (input) => {
+    const groups = omnistonRpcOperatorGroups(input.chain, options.rpcUrls, options.operatorOf);
+    const operators = groups.map((g) => g.operator);
+    if (groups.length < quorum) return refuse("rpc-quorum-unavailable", { chain: input.chain, operators, quorum });
+    const results = await Promise.all(groups.map((g) => once(pinnedStateRequest((chain, method, params) => rpcOver(g.urls, chain, method, params)), input, (reason, details) => refuse(reason, { ...details, operator: g.operator })).catch(() => false)));
+    const agreed = operators.filter((_, i) => results[i]);
+    return agreed.length >= quorum || refuse("rpc-quorum-not-met", { chain: input.chain, agreed, operators, quorum });
+  };
+}
 async function ethCall(request, chain, to, data) {
   return await request(chain, "eth_call", [{ to, data }, "latest"]);
 }
@@ -231,16 +293,15 @@ function locateImmutables(input, secretHash) {
   }
 }
 function createOmnistonEvmOutputValidator(options = {}) {
-  const refuse = (reason, details) => {
+  const report = (reason, details) => {
     try {
       options.onRefusal?.(reason, details);
     } catch {
     }
     return false;
   };
-  const request = options.request ?? ((chain, method, params) => omnistonEvmRpcRequest(chain, method, params, options.rpcUrls));
   const now = options.now ?? Date.now;
-  return async (input) => {
+  return omnistonQuorumValidator(options, report, async (request, input, refuse) => {
     try {
       if (!OMNISTON_EVM_LOOKBACK_BLOCKS[input.chain] || input.executionIndex !== 0 || !(0, import_viem.isAddress)(input.positionAddress) || !(0, import_viem.isAddress)(input.factoryAddress) || !(0, import_viem.isAddress)(input.recipientAddress) || !(0, import_viem.isAddress)(input.outputTokenAddress) || !Number.isInteger(input.quoteTimestamp) || input.quoteTimestamp * 1e3 > now() + 12e4 || now() - input.quoteTimestamp * 1e3 > 6 * 60 * 60 * 1e3) return refuse("input-shape");
       const position = (0, import_viem.getAddress)(input.positionAddress);
@@ -337,7 +398,7 @@ function createOmnistonEvmOutputValidator(options = {}) {
     } catch (error) {
       return refuse("error", { message: error instanceof Error ? error.message : String(error) });
     }
-  };
+  });
 }
 var TRANSFER_TOPIC = (0, import_viem.keccak256)((0, import_viem.stringToHex)("Transfer(address,address,uint256)"));
 var topicAddress = (address) => `0x${(0, import_viem.getAddress)(address).slice(2).toLowerCase().padStart(64, "0")}`;
@@ -440,16 +501,15 @@ async function ethCall2(request, chain, to, data) {
   return await request(chain, "eth_call", [{ to, data }, "latest"]);
 }
 function createOmnistonEvmInputValidator(options = {}) {
-  const refuse = (reason, details) => {
+  const report = (reason, details) => {
     try {
       options.onRefusal?.(reason, details);
     } catch {
     }
     return false;
   };
-  const request = options.request ?? ((chain, method, params) => omnistonEvmRpcRequest(chain, method, params, options.rpcUrls));
   const now = options.now ?? Date.now;
-  return async (input) => {
+  return omnistonQuorumValidator(options, report, async (request, input, refuse) => {
     try {
       if (!OMNISTON_EVM_LOOKBACK_BLOCKS[input.chain] || !(0, import_viem2.isAddress)(input.positionAddress) || !(0, import_viem2.isAddress)(input.factoryAddress) || !(0, import_viem2.isAddress)(input.orderProtocolAddress) || !(0, import_viem2.isAddress)(input.ownerAddress) || !(0, import_viem2.isAddress)(input.resolverAddress) || !(0, import_viem2.isAddress)(input.inputTokenAddress) || !Number.isInteger(input.quoteTimestamp) || input.quoteTimestamp * 1e3 > now() + 12e4 || now() - input.quoteTimestamp * 1e3 > 6 * 60 * 60 * 1e3 || input.secretHash.length !== 32) return refuse("input-shape");
       const position = (0, import_viem2.getAddress)(input.positionAddress);
@@ -524,7 +584,7 @@ function createOmnistonEvmInputValidator(options = {}) {
     } catch (error) {
       return refuse("error", { message: error instanceof Error ? error.message : String(error) });
     }
-  };
+  });
 }
 
 // src/validators/ton.ts
@@ -534,7 +594,44 @@ var import_core3 = require("@anywalletkit/core");
 
 // src/validators/settlement.ts
 var AUDITED_OMNISTON_SETTLEMENT_CONTRACTS = {
-  "ton:-239": ["EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ"],
+  // The TON Escrow Minter a new TON <-> EVM order may name. The provider
+  // compares TON addresses as these exact strings, so it is kept in the form
+  // Omniston's quotes use.
+  // - EQDybO88… (code 9737943f…, "rev2"): Omniston's TON <-> EVM quotes name it
+  //   since 2026-11-10 ~19:00Z. Reviewed 2026-11-12, read-only:
+  //   - Deploy tx fkabfHcN8DcrqQyazmlB+UprljBDeEkvFlgaVOi905g=
+  //     (2026-11-10 18:47:06Z). Code and data still equal that StateInit:
+  //     no upgrade since, none pending (no pendingCode, upgradeAfter 0).
+  //   - Same admin (0:408fff62…) as rev1; it is also the admin_address of the
+  //     STON.fi DEX v2 routers api.ston.fi lists. Deployed from the same
+  //     wallet as rev1 (a weak signal on TON: anyone can send a StateInit).
+  //   - The bytecode diff to rev1: escrow / execution code must be in an
+  //     embedded whitelist (9e77…, f6ed…, d304…, pinned in ton.ts, plus 9fe4…
+  //     for TON <-> TON, which the SDK does not pin), the escrow sub-VM must
+  //     return one value, and a failed position deploy now credits the amount
+  //     back to the same account contract instead of aborting (the only new
+  //     path that moves value; no real message has used it). Fees, timelocks,
+  //     payouts, admin and the 7-day upgrade delay are unchanged. Replayed
+  //     through both codes, the real traffic of both minters (~42k
+  //     transactions) and of ~1,070 of their positions gave the same outputs.
+  //   - It deploys positions with code eb503578…, the only code in
+  //     DEFAULT_OMNISTON_TON_CODE_HASHES.position. The address and that pin
+  //     go together: without the pin every EVM -> TON order on this minter
+  //     fills and then fails the disclosure check.
+  // - EQAbWJ3Y… (code f91c43d3…, "rev1", deployed 2026-06-09) is no longer
+  //   trusted by default (2026-11-12). Omniston's quotes moved to rev2 on
+  //   2026-11-10 (rev1 still took a few orders on 2026-11-12), and rev1 lacks the escrow-code whitelist rev2 added: on
+  //   rev1 only the SDK's own pins check the escrow and execution code an
+  //   order carries. A quote that names rev1 is refused with its address
+  //   in the reason, and so is building one cached under an older table; its positions (code e4d5115a…) fail
+  //   position-code-hash. It stays in OMNISTON_ESCROWS (activity.ts), which
+  //   recognizes history and grants no trust. Old orders need nothing from
+  //   this table: trackIntent reads no trust table, and every disclosure
+  //   check refuses a quote older than 6 h, so a rev1 order quoted before
+  //   the switch cannot be closed by any version. Listing rev1 here or in
+  //   trustedProtocolAddresses trusts it again for NEW orders; it does not
+  //   help close an old one.
+  "ton:-239": ["EQDybO88l2lrrAmALRUqpmgEE_tuxk510F4Yd4xjbQZxC9IA"],
   "eip155:1": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
   "eip155:56": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
   "eip155:137": ["0x41A392062A4307a6961d48e30FF20bF6823715B8"],
@@ -576,8 +673,24 @@ var DEFAULT_OMNISTON_TON_CODE_HASHES = {
   authorityKeys: ["ed210da12aa96ea42de4f2f61dc172bbaa3da86051a1b2a6f342f69a777d2770"],
   /** EVM→TON output position: the contract the factory deploys for the
    *  resolver's jetton lock (observed on every resolver-created position,
-   *  2026-10-15/16), and the escrow code cell it carries in its state. */
-  position: ["e4d5115a321ade7b827e38fb522c20d2f2cd46e4c6b0b5f7dd8b6b096792d77b"],
+   *  2026-10-15/16), and the escrow code cell it carries in its state.
+   *  A position counts only when a trusted factory itself sent its deploy
+   *  message, and a minter deploys only the position code stored in its own
+   *  data, so this list follows the trusted minters in
+   *  AUDITED_OMNISTON_SETTLEMENT_CONTRACTS["ton:-239"]:
+   *  - eb503578…: positions of the rev2 Escrow Minter EQDybO88… (the position
+   *    code stored in its data; reviewed 2026-11-12). The diff to rev1's
+   *    e4d5115a… is 13 sub-VM calls in another mode (RUNVMX 20 -> 276) and 2
+   *    escrow-code whitelist checks. The state layout is the same, and live
+   *    and settled rev2 positions pass every check of
+   *    validateTonOutputPosition.
+   *  - e4d5115a… (positions of the rev1 minter EQAbWJ3Y…) left the default
+   *    with rev1 on 2026-11-12. Only an EVM -> TON order quoted on rev1 less
+   *    than 6 h before an app upgrades can still need it (positionCodeHashes
+   *    with both codes, until those 6 h are over). That pin alone trusts no
+   *    new order: a new quote must name a trusted minter, and a position
+   *    counts only when the minter its quote named deployed it. */
+  position: ["eb503578b4d9cd791c9c0ecd0da6da4064aae2bcb19d3c924d4001c493386bc5"],
   outputEscrow: ["d30423575384773abaad8d3c6f763898afa3d57a5693005904b7c61e95cee630"]
 };
 var POSITION_DEPLOY_OP = "0xf240cd30";