@anywalletkit/protocol-swap2-omniston 0.5.4 → 0.5.5

package/dist/provider.d.cts

@@ -1,2 +1,2 @@
-export { A as AssetId, C as ChainAddress, E as EscrowMessage, H as HtlcSecretStore, O as ObservableLike, a as OmnistonClientLike, b as OmnistonProviderOptions, c as OmnistonQuote, d as OmnistonQuoteStore, e as OrderEvent, f as OrderExecution, g as OrderSettlement, h as OrderSnapshot, Q as QuoteRequest, R as RfqEvent, S as SwapSettlement, i as SwapTrackEvent, T as TON_SWAP_PROTOCOL_LAYOUTS, j as TonSwapCheckInput, k as TonSwapCheckResult, l as TonSwapLeg, m as TonSwapPayloadError, n as checkTonSwapPayload, o as encodeTypedMessage, p as inMemoryQuoteStore, q as inMemorySecretStore, r as omnistonPins, s as omnistonProvider, t as omnistonVerifyBuild, v as validateEvmToTonOrderExtension, u as validateEvmTypedOrder } from './provider-CcCZB-Cj.cjs';
+export { A as AssetId, C as ChainAddress, E as EscrowMessage, H as HtlcSecretStore, O as ObservableLike, a as OmnistonClientLike, b as OmnistonProviderOptions, c as OmnistonQuote, d as OmnistonQuoteStore, e as OrderEvent, f as OrderExecution, g as OrderSettlement, h as OrderSnapshot, Q as QuoteRequest, R as RfqEvent, S as SwapSettlement, i as SwapTrackEvent, T as TON_SWAP_PROTOCOL_LAYOUTS, j as TonSwapCheckInput, k as TonSwapCheckResult, l as TonSwapLeg, m as TonSwapPayloadError, n as checkTonSwapPayload, o as encodeTypedMessage, p as inMemoryQuoteStore, q as inMemorySecretStore, r as omnistonPins, s as omnistonProvider, t as omnistonVerifyBuild, v as validateEvmToTonOrderExtension, u as validateEvmTypedOrder } from './provider-BQzNkVvW.cjs';
 import '@anywalletkit/protocol-swap2-core/types';

package/dist/provider.d.ts

@@ -1,2 +1,2 @@
-export { A as AssetId, C as ChainAddress, E as EscrowMessage, H as HtlcSecretStore, O as ObservableLike, a as OmnistonClientLike, b as OmnistonProviderOptions, c as OmnistonQuote, d as OmnistonQuoteStore, e as OrderEvent, f as OrderExecution, g as OrderSettlement, h as OrderSnapshot, Q as QuoteRequest, R as RfqEvent, S as SwapSettlement, i as SwapTrackEvent, T as TON_SWAP_PROTOCOL_LAYOUTS, j as TonSwapCheckInput, k as TonSwapCheckResult, l as TonSwapLeg, m as TonSwapPayloadError, n as checkTonSwapPayload, o as encodeTypedMessage, p as inMemoryQuoteStore, q as inMemorySecretStore, r as omnistonPins, s as omnistonProvider, t as omnistonVerifyBuild, v as validateEvmToTonOrderExtension, u as validateEvmTypedOrder } from './provider-CcCZB-Cj.js';
+export { A as AssetId, C as ChainAddress, E as EscrowMessage, H as HtlcSecretStore, O as ObservableLike, a as OmnistonClientLike, b as OmnistonProviderOptions, c as OmnistonQuote, d as OmnistonQuoteStore, e as OrderEvent, f as OrderExecution, g as OrderSettlement, h as OrderSnapshot, Q as QuoteRequest, R as RfqEvent, S as SwapSettlement, i as SwapTrackEvent, T as TON_SWAP_PROTOCOL_LAYOUTS, j as TonSwapCheckInput, k as TonSwapCheckResult, l as TonSwapLeg, m as TonSwapPayloadError, n as checkTonSwapPayload, o as encodeTypedMessage, p as inMemoryQuoteStore, q as inMemorySecretStore, r as omnistonPins, s as omnistonProvider, t as omnistonVerifyBuild, v as validateEvmToTonOrderExtension, u as validateEvmTypedOrder } from './provider-BQzNkVvW.js';
 import '@anywalletkit/protocol-swap2-core/types';

package/dist/provider.js

@@ -10,10 +10,10 @@ import {
   omnistonVerifyBuild,
   validateEvmToTonOrderExtension,
   validateEvmTypedOrder
-} from "./chunk-4JOTKQOT.js";
+} from "./chunk-FDSTD34Z.js";
 import "./chunk-QDXFC6BC.js";
-import "./chunk-AIWAM7BS.js";
-import "./chunk-JWYDIW4V.js";
+import "./chunk-ENAEOF7N.js";
+import "./chunk-IDRZHWWL.js";
 export {
   TON_SWAP_PROTOCOL_LAYOUTS,
   TonSwapPayloadError,

package/dist/validators.cjs

@@ -594,7 +594,44 @@ var import_core3 = require("@anywalletkit/core");
 
 // src/validators/settlement.ts
 var AUDITED_OMNISTON_SETTLEMENT_CONTRACTS = {
-  "ton:-239": ["EQAbWJ3Y1HgIIvcMq1prG1anlDC0T3cZlAU7luPT6LmTpmrZ"],
+  // The TON Escrow Minter a new TON <-> EVM order may name. The provider
+  // compares TON addresses as these exact strings, so it is kept in the form
+  // Omniston's quotes use.
+  // - EQDybO88… (code 9737943f…, "rev2"): Omniston's TON <-> EVM quotes name it
+  //   since 2026-11-10 ~19:00Z. Reviewed 2026-11-12, read-only:
+  //   - Deploy tx fkabfHcN8DcrqQyazmlB+UprljBDeEkvFlgaVOi905g=
+  //     (2026-11-10 18:47:06Z). Code and data still equal that StateInit:
+  //     no upgrade since, none pending (no pendingCode, upgradeAfter 0).
+  //   - Same admin (0:408fff62…) as rev1; it is also the admin_address of the
+  //     STON.fi DEX v2 routers api.ston.fi lists. Deployed from the same
+  //     wallet as rev1 (a weak signal on TON: anyone can send a StateInit).
+  //   - The bytecode diff to rev1: escrow / execution code must be in an
+  //     embedded whitelist (9e77…, f6ed…, d304…, pinned in ton.ts, plus 9fe4…
+  //     for TON <-> TON, which the SDK does not pin), the escrow sub-VM must
+  //     return one value, and a failed position deploy now credits the amount
+  //     back to the same account contract instead of aborting (the only new
+  //     path that moves value; no real message has used it). Fees, timelocks,
+  //     payouts, admin and the 7-day upgrade delay are unchanged. Replayed
+  //     through both codes, the real traffic of both minters (~42k
+  //     transactions) and of ~1,070 of their positions gave the same outputs.
+  //   - It deploys positions with code eb503578…, the only code in
+  //     DEFAULT_OMNISTON_TON_CODE_HASHES.position. The address and that pin
+  //     go together: without the pin every EVM -> TON order on this minter
+  //     fills and then fails the disclosure check.
+  // - EQAbWJ3Y… (code f91c43d3…, "rev1", deployed 2026-06-09) is no longer
+  //   trusted by default (2026-11-12). Omniston's quotes moved to rev2 on
+  //   2026-11-10 (rev1 still took a few orders on 2026-11-12), and rev1 lacks the escrow-code whitelist rev2 added: on
+  //   rev1 only the SDK's own pins check the escrow and execution code an
+  //   order carries. A quote that names rev1 is refused with its address
+  //   in the reason, and so is building one cached under an older table; its positions (code e4d5115a…) fail
+  //   position-code-hash. It stays in OMNISTON_ESCROWS (activity.ts), which
+  //   recognizes history and grants no trust. Old orders need nothing from
+  //   this table: trackIntent reads no trust table, and every disclosure
+  //   check refuses a quote older than 6 h, so a rev1 order quoted before
+  //   the switch cannot be closed by any version. Listing rev1 here or in
+  //   trustedProtocolAddresses trusts it again for NEW orders; it does not
+  //   help close an old one.
+  "ton:-239": ["EQDybO88l2lrrAmALRUqpmgEE_tuxk510F4Yd4xjbQZxC9IA"],
   "eip155:1": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
   "eip155:56": ["0xafCF681272AF10959736f45616eeCBC22D7095E2"],
   "eip155:137": ["0x41A392062A4307a6961d48e30FF20bF6823715B8"],
@@ -636,8 +673,24 @@ var DEFAULT_OMNISTON_TON_CODE_HASHES = {
   authorityKeys: ["ed210da12aa96ea42de4f2f61dc172bbaa3da86051a1b2a6f342f69a777d2770"],
   /** EVM→TON output position: the contract the factory deploys for the
    *  resolver's jetton lock (observed on every resolver-created position,
-   *  2026-10-15/16), and the escrow code cell it carries in its state. */
-  position: ["e4d5115a321ade7b827e38fb522c20d2f2cd46e4c6b0b5f7dd8b6b096792d77b"],
+   *  2026-10-15/16), and the escrow code cell it carries in its state.
+   *  A position counts only when a trusted factory itself sent its deploy
+   *  message, and a minter deploys only the position code stored in its own
+   *  data, so this list follows the trusted minters in
+   *  AUDITED_OMNISTON_SETTLEMENT_CONTRACTS["ton:-239"]:
+   *  - eb503578…: positions of the rev2 Escrow Minter EQDybO88… (the position
+   *    code stored in its data; reviewed 2026-11-12). The diff to rev1's
+   *    e4d5115a… is 13 sub-VM calls in another mode (RUNVMX 20 -> 276) and 2
+   *    escrow-code whitelist checks. The state layout is the same, and live
+   *    and settled rev2 positions pass every check of
+   *    validateTonOutputPosition.
+   *  - e4d5115a… (positions of the rev1 minter EQAbWJ3Y…) left the default
+   *    with rev1 on 2026-11-12. Only an EVM -> TON order quoted on rev1 less
+   *    than 6 h before an app upgrades can still need it (positionCodeHashes
+   *    with both codes, until those 6 h are over). That pin alone trusts no
+   *    new order: a new quote must name a trusted minter, and a position
+   *    counts only when the minter its quote named deployed it. */
+  position: ["eb503578b4d9cd791c9c0ecd0da6da4064aae2bcb19d3c924d4001c493386bc5"],
   outputEscrow: ["d30423575384773abaad8d3c6f763898afa3d57a5693005904b7c61e95cee630"]
 };
 var POSITION_DEPLOY_OP = "0xf240cd30";