@anywalletkit/protocol-swap2-symbiosis 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,232 @@
-# Temporary Holding Version
+# @anywalletkit/protocol-swap2-symbiosis
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[![npm](https://img.shields.io/npm/v/@anywalletkit/protocol-swap2-symbiosis?label=npm)](https://www.npmjs.com/package/@anywalletkit/protocol-swap2-symbiosis)
+
+[Symbiosis](https://docs.symbiosis.finance) as a swap2 provider: any-to-any
+cross-chain swaps between Ethereum, BNB Chain, Avalanche, Polygon, Arbitrum,
+Optimism, Base, Tron and TON, with Tron and TON as **sources** too. Quotes and
+calldata come from Symbiosis' public REST API
+(`api.symbiosis.finance/crosschain`); the transaction is decoded and bound to
+the request on the device before a quote is shown and again before anything is
+signed. No API key is needed, no partner id is set, and this module adds no fee
+of its own.
+
+## Install
+
+```sh
+npm install @anywalletkit/protocol-swap2-symbiosis @anywalletkit/core
+# or: pnpm add @anywalletkit/protocol-swap2-symbiosis @anywalletkit/core  ·  yarn add @anywalletkit/protocol-swap2-symbiosis @anywalletkit/core
+```
+
+On npm: [@anywalletkit/protocol-swap2-symbiosis](https://www.npmjs.com/package/@anywalletkit/protocol-swap2-symbiosis), published from the [release workflow](https://github.com/ultratestbro/anywalletkit/blob/main/RELEASING.md) with provenance.
+
+```ts
+import {symbiosisProvider} from "@anywalletkit/protocol-swap2-symbiosis/provider";
+import {RouterSwap2Protocol} from "@anywalletkit/protocol-swap2-router/swap2/router";
+
+const swap2 = new RouterSwap2Protocol(bscAccount, {fromChain: "eip155:56", providers: [symbiosisProvider()]});
+const res = await swap2.swap2({fromToken: "USDC", toToken: "USDT", toChain: "ton:-239", recipient: tonAddress, fromTokenAmount: 1_500n * 10n ** 18n});
+const status = await swap2.getSwap2Status(res.id); // pending → completed | partial | refund-pending → refunded
+```
+
+| From (sources) | How the swap is sent | Default |
+|---|---|---|
+| Ethereum, BNB Chain, Avalanche, Polygon, Arbitrum, Optimism, Base | one `metaRoute` call on the chain's MetaRouterGateway; a token sale gets an exact approval to the same gateway first | on |
+| TON (jettons) | one jetton transfer to Symbiosis' TON Portal with the bridge request in the forward payload | on |
+| Tron (TRC-20) | one `metaRoute` call on the Tron MetaRouterGateway (`TPuaJ6gnYfE9gLUDFrbWbPx3tMnjG8max1`) | **off** — `tronSource: true` |
+| Bitcoin | a deposit address the API names | **off** — `btcSource: true` |
+
+Destinations: every chain above except Bitcoin. Tokens are the ones the shared
+catalog (`@anywalletkit/swap2-assets`) knows on those chains; which pairs get a
+route is Symbiosis' answer at that moment.
+
+Not served: TON's native coin as a source (Symbiosis sends it through a partner
+exchange), TRX as a source (no swap router is allow-listed on Tron), same-chain
+swaps, and any route labelled `partner-swap`, `semi-centralized` or `intent`,
+where a third party holds the funds (ChangeNOW-style legs, THORChain and
+Chainflip bridges inside Symbiosis).
+
+## What is checked before signing
+
+`getQuote` never forwards the API's transaction blindly. It decodes every level
+of it, requires each level to re-encode to exactly the same bytes, and refuses
+the quote unless all of the following hold. `preflightDeposit` and the pins'
+`verifyQuote` / `verifyBuild` run the same code again on the device right before
+signing, so a server-side instance of this provider is trusted no more than the
+API is.
+
+**EVM and Tron source**
+
+- the contract called is the chain's pinned MetaRouterGateway, the function is
+  `metaRoute`, the chain id is the source chain, `amount` is the sell amount, the
+  transaction value is the sell amount for a native sale and 0 for a token sale,
+  the first approved token is the sell token, and an approval names only that
+  gateway;
+- before the bridge there is nothing, the wrap of the native coin, or **one**
+  swap on an allow-listed router (below) decoded to: sell token and amount in,
+  the bridged token out to the chain's pinned MetaRouter, no partial fill;
+- the relay recipient is the chain's pinned Portal, and it gets
+  `metaSynthesize` naming the pinned host-chain Synthesis and Bridge, the host
+  chain id, the user as `syntCaller`, and only the user's own addresses — or
+  Symbiosis' revert service, see below — as `chain2address` /
+  `revertableAddress`;
+- the swap on Symbiosis' host chain is `multicall` on the pinned
+  MulticallRouter; every step is `swap(tokenIndexFrom, tokenIndexTo, dx, minDy,
+  to, deadline)` on a **pinned Symbiosis pool**, between that pool's pinned
+  tokens, paid to the MulticallRouter, with the running amount written into
+  `dx` and nowhere else; the path is the swap token list and the result goes to
+  the pinned host-chain MetaRouter;
+- the token burned on the host chain is the one the pools pay out, and it is
+  the **pinned synthetic of a token on the destination chain** (`pools.ts`,
+  read from the host chain's SyntFabric); the burn names the destination chain
+  id, its pinned Portal and Bridge, and the user's address as receiver;
+- after the bridge there is either nothing — then the released token is the
+  quoted token and the last pool minimum less the relayers' fee is not below
+  the quote's minimum — or Symbiosis' pinned Unwrapper `unwrap(amount, to)`
+  paying the recipient, or **one** swap on an allow-listed router decoded to:
+  the released token in, the quoted token out to the recipient, a minimum not
+  below the quote's minimum. Anything else is refused;
+- every place a contract writes a running amount into the next call
+  (`finalOffset`, the multicall `offsets[]`) is the amount word of the function
+  it patches.
+
+**Tron source, additionally.** The call is the same `metaRoute` ABI on the
+pinned Tron gateway; the fee limit the API asks for is capped
+(`tronFeeLimitCap`, default 300 TRX). The engine does not execute contract
+calls on Tron yet, so `tronSource` is off by default. With it on, an app builds
+the transaction itself: `symbiosisTronCall(quote)` returns the node request and
+the exact `expected` transaction for `@anywalletkit/wallet-tron`'s
+`assertNodeBuild` — txID = sha256(raw_data_hex), one `TriggerSmartContract`,
+owner = the user, contract = the pinned gateway, calldata = the checked bytes,
+call value and fee limit as checked.
+
+**TON source.** The message body is parsed (BOC) as a jetton transfer of
+exactly the sell amount to the pinned TON Portal, excess back to the sender, no
+custom payload, forwarding less TON than the message attaches (itself capped at
+1 TON); the forward payload is Symbiosis' bridge request, and its host-chain and
+destination legs go through the same checks as above. The message is addressed
+to the sender's own jetton wallet; that address is derived and checked by the
+wallet engine (`wallet-ton`), not by this module.
+
+**Allow-listed swap routers.** 1inch AggregationRouterV6 and KyberSwap
+MetaAggregationRouterV2 (same address on every EVM chain here, non-upgradable,
+source-verified), and a Uniswap-V2-style router on BNB Chain (PancakeSwap),
+Polygon (QuickSwap) and Base. A leg on any other venue (0x, OpenOcean, Bitget,
+…) is not read: the provider asks the API again with that venue switched off,
+up to four requests a second apart, and refuses if nothing readable comes back.
+1inch calls carry a tracking tag after their arguments, which is not the
+canonical encoding of one swap; such an answer is asked for again without
+1inch.
+
+## What is still trusted
+
+- **Symbiosis itself**: its contracts, relayers (an MPC group signs the
+  cross-chain messages), pools and the relayers' fee (`stableBridgingFee`,
+  bound only to "the minimum still holds after it").
+- **The revert path.** On every route the API writes Symbiosis' own revert
+  service (`0x67f9…851D`) as `revertableAddress` of the bridge request, and a
+  request cannot change that. A stuck swap is reverted by that service, not by
+  the user's key. The quote carries `providerData.serviceReverts = "1"` so an
+  app can say so.
+- **Inside an aggregator swap**: which venues the executor trades on. What
+  holds is the router's own guarantee: it reverts unless the receiver got at
+  least the decoded minimum of the decoded token.
+- **The price of a swap before the bridge.** Its minimum is tied to the amounts
+  the API states and to the route's final minimum, not to a market price. A
+  route can be poor value and still pass (live 2026-11-10: Tron USDT → Base
+  USDC through the Base V2 router lost about 3 %). Showing that is the app's
+  job; `providerData.priceImpact` carries the API's figure.
+- **The minimum itself** comes from the quote (`minDestAmount`); the checks
+  hold the route to it, they do not judge it.
+- **The pinned tables** (`config.ts`, `pools.ts`). They were read from
+  Symbiosis' published configuration **and** from the chains; the public
+  configuration alone is not enough (parts of it trail the live deployment).
+  `scripts/build-pins.mjs --check` re-derives the pool and synthetic-token
+  tables from the host chain, `scripts/verify-live.mjs` re-reads every pinned
+  contract, and `watch.json` puts the EVM and host-chain ones (code, proxy
+  implementations, pool token counts, the Unwrappers' `wrapper()`) under the
+  module watch. The Tron contracts are not under the watch (it has no Tron
+  reader); `verify-live.mjs` checks them.
+- **Bitcoin source.** The deposit address is assigned by the API and cannot be
+  verified on the device. It is off by default, quoted with
+  `providerData.depositAddressAssigned = "1"`, and the pins open it only as
+  `depositAddressRoutes` when `btcSource` is set. Whether to offer such a route
+  is the app's policy. Symbiosis currently serves Bitcoin sources only through
+  the partner routes this module switches off, so no real Bitcoin quote has
+  been seen (2026-11-10).
+
+## Fees and limits
+
+Every fee the API reports is on the quote (`fees[]`, token, amount, where it is
+taken) and summed into `feeUsd`; a response without readable fees, or with a
+fee that has no price, is refused. All fees are included in the quoted output.
+Observed 2026-11-10: about $0.50 between EVM chains and from Tron, $0.60 to
+TON, $3 to Tron, plus pool fees inside the amount.
+
+`GET /v1/swap-limits` is cached for five minutes and enforced locally: a sell
+amount below the source token's minimum, or a result above the destination
+token's maximum, is refused before a quote is asked for. On 2026-11-10 that was
+0.3 – 200 000 for the bridged stablecoins and 0.0001 – 50 for ETH.
+
+Slippage is the caller's `slippageBps`, else the config's, else
+`suggestSlippage` from swap2-core for the pair. It is sent to the API as is.
+
+## Status
+
+`trackIntent` reads `GET /v2/tx/{chainId}/{hash}` (`SYMBIOSIS_STATUS`):
+
+| API | State | What it means |
+|---|---|---|
+| not found | `pending` | the source transaction is not indexed yet |
+| Pending | `pending`, or `refund-pending` when the hash is on `/v1/stucked/{address}` | in flight, or stuck |
+| Success | `completed`; `partial` if another token or chain was paid | a failed destination swap delivers the bridged token instead |
+| Stuck | `refund-pending` | Symbiosis reverts it itself, usually within an hour |
+| Reverted | `refunded` **only with the revert transaction in the answer**, else `refund-pending` | the revert pays the token that crossed the bridge to the sender on the source chain, less the bridge fee — not always the token sold |
+
+When neither side is an EVM chain (Tron ↔ TON) a failed last leg leaves
+synthetic tokens on Symbiosis' host chain at `fallbackReceiver`, which must be
+the user's own EVM address; the provider refuses such a route without it.
+
+## Behind `remoteProvider`
+
+When the provider runs on your server, spread its pins into the app's stub:
+`remoteProvider({name: "symbiosis", baseUrl, ...symbiosisPinsFor({fallbackReceiver})})`.
+The engine then lets an EVM route call and approve only the pinned
+MetaRouterGateways, and `verifyQuote` / `verifyBuild` run the full decode above
+on the device.
+
+## Config
+
+```ts
+symbiosisProvider({
+  enabled: true,            // default
+  apiUrl: "https://api.symbiosis.finance/crosschain",
+  tronSource: false,        // quote Tron sources (the app signs them through symbiosisTronCall)
+  btcSource: false,         // quote Bitcoin sources (API-assigned deposit address)
+  boundSourceOnly: false,   // true: refuse routes that swap on the source chain before bridging
+  fallbackReceiver,         // the user's EVM address; required for Tron ↔ TON
+  slippageBps,              // default when the caller names none
+  quoteTtlMs: 60_000,
+  tronFeeLimitCap: 300_000_000n,
+  partnerAddress, partnerId, apiKey, // optional, never set by default; keep a key on your proxy, not in the app
+})
+```
+
+The API serves about one quote per second per client.
+
+## Activity
+
+`describeActivity` (`./activity`) names a wallet's `metaRoute` transactions and
+TON bridge transfers as swaps from their own bytes, with the destination chain
+and recipient.
+
+## Tests
+
+```sh
+pnpm --filter @anywalletkit/protocol-swap2-symbiosis test         # 300 tests over recorded API answers
+pnpm --filter @anywalletkit/protocol-swap2-symbiosis verify:live  # read-only: pins on-chain, live quotes through the provider, eth_call / Tron node builds
+```
+
+`verify:live` signs and sends nothing. Fixtures are real answers recorded by
+`scripts/record-fixtures.mjs`; the Bitcoin build tests use synthetic answers
+and say so.

package/dist/activity.cjs

@@ -0,0 +1,140 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/activity.ts
+var activity_exports = {};
+__export(activity_exports, {
+  SYMBIOSIS_META_ROUTE: () => SYMBIOSIS_META_ROUTE,
+  SYMBIOSIS_MODULE: () => SYMBIOSIS_MODULE,
+  describeSymbiosisActivity: () => describeSymbiosisActivity
+});
+module.exports = __toCommonJS(activity_exports);
+var import_activity = require("@anywalletkit/protocol-swap2-core/activity");
+var import_util2 = require("@anywalletkit/protocol-swap2-core/util");
+
+// src/config.ts
+var import_base = require("@scure/base");
+var import_sha2 = require("@noble/hashes/sha2.js");
+var import_viem = require("viem");
+var import_swap2_assets = require("@anywalletkit/swap2-assets");
+var import_util = require("@anywalletkit/protocol-swap2-core/util");
+var SYMBIOSIS_HOST = Object.freeze({
+  synthesis: "0x45CFd6FB7999328F189aaD2739Fba4Be6C45E5bf",
+  bridge: "0x1a039cE63AE35a67Bf0E9F6DbFaE969639D59eC8",
+  /** MulticallRouter: the only contract a route's host-chain pool swaps may call. */
+  multicallRouter: "0xBbAD2fe9558e55EbfA04b3B5Bff0b6c4E2ffDD2C"
+});
+var SYMBIOSIS_AGGREGATORS = Object.freeze({
+  oneInchV6: "0x111111125421cA6dc452d289314280a0f8842A65",
+  kyberV2: "0x6131B5fae19EA4f9D964eAc0408E4408b66337b5"
+});
+var SYMBIOSIS_V2_ROUTERS = Object.freeze({
+  56: "0x10ED43C718714eb63d5aA57B78B54704E256024E",
+  137: "0xa5E0829CaCEd8fFDD4De3c43696c57F7D7A678ff",
+  8453: "0x327Df1E6de05895d2ab08513aaDD9313Fe505d86"
+});
+var SYMBIOSIS_UNWRAPPERS = Object.freeze({
+  1: { unwrapper: "0x5ad095DE83693ba063941f2f2C5A0dF02383B651", wrapped: "0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2" },
+  10: { unwrapper: "0x88139ad1199e8c78a0804d4bEBF4FbAD89EF9D89", wrapped: "0x4200000000000000000000000000000000000006" },
+  42161: { unwrapper: "0x5Eb4ED9F745531221FAE41906e11d37642B15da6", wrapped: "0x82aF49447D8a07e3bd95BD0d56f35241523fBab1" },
+  8453: { unwrapper: "0x8e1d36F9da8CFe842bCf8670A12ACd51c26d195D", wrapped: "0x4200000000000000000000000000000000000006" }
+});
+var SYMBIOSIS_TON_PORTAL_RAW = "0:5987d0a92d9c8d97023b6a6d0f1e9572f13f33749c408651b79b7c4c8b406855";
+var SYMBIOSIS_TRON_CHAIN_ID = 728126428;
+var SYMBIOSIS_TON_CHAIN_ID = 85918;
+var SYMBIOSIS_BTC_CHAIN_ID = 3652501241;
+var evm = (id, name, gateway, executor, portal, bridge) => Object.freeze({ caip2: `eip155:${id}`, family: "evm", id, name, gateway, executor, portal, bridge });
+var LIST = [
+  evm(1, "Ethereum", "0xB4769e9c5bE31199a25ecD1B0C6609183fa72521", "0xc227b3a439EE6ae3A22500757125f4dE91d8008E", "0xb8f275fBf7A959F4BCE59999A2EF122A099e81A8", "0x5523985926Aa12BA58DC5Ad00DDca99678D7227E"),
+  evm(56, "BNB Chain", "0x851B43189de721dD94AbA767AAd9E6F6d6a95CCA", "0x980447DdcEf79A7499Da4538Da8FC59BAcAD6997", "0x5Aa5f7f84eD0E5db0a4a85C3947eA16B53352FD4", "0xb8f275fBf7A959F4BCE59999A2EF122A099e81A8"),
+  evm(43114, "Avalanche", "0xfeC09BE39F82b13471D2e0E7d72e6ee589c631c6", "0x4494b8cBC69c794d82Bd2d820A6ff6f62D7D841A", "0xE75C7E85FE6ADd07077467064aD15847E6ba9877", "0x292fC50e4eB66C3f6514b9E402dBc25961824D62"),
+  evm(137, "Polygon", "0x2eE9559387b806E88fd46b9DA160D64A29CE7Da0", "0x7a73a0bA4919778C5442f026bd01795b4f2A4cB8", "0xb8f275fBf7A959F4BCE59999A2EF122A099e81A8", "0x5523985926Aa12BA58DC5Ad00DDca99678D7227E"),
+  evm(42161, "Arbitrum", "0x3743c756b64ECd0770f1d4f47696A73d2A46dcbe", "0xf37E321e1c275d249B7A9c825aE802A9f464Eb94", "0x01A3c8E513B758EBB011F7AFaf6C37616c9C24d9", "0x5523985926Aa12BA58DC5Ad00DDca99678D7227E"),
+  evm(10, "Optimism", "0xA9A96Ee51dD54B9f51d46b1fbD2A19c1295Ec75b", "0x356d322BF762d4022D8c241428770565f236c2EA", "0x292fC50e4eB66C3f6514b9E402dBc25961824D62", "0x5523985926Aa12BA58DC5Ad00DDca99678D7227E"),
+  evm(8453, "Base", "0xa18348e793E77239EC68CAa51b74c5Cdc82c8a9d", "0xCbFD5DcaD860f49D0BD2fDaD78d9d943CAeBedef", "0xEE981B2459331AD268cc63CE6167b446AF4161f8", "0x8097f0B9f06C27AF9579F75762F971D745bb222F"),
+  Object.freeze({
+    caip2: "tron:728126428",
+    family: "tron",
+    id: SYMBIOSIS_TRON_CHAIN_ID,
+    name: "Tron",
+    gateway: "0x98e1df4e3200e1001610365e2eb133a953bbe3e0",
+    // TPuaJ6gnYfE9gLUDFrbWbPx3tMnjG8max1
+    executor: "0xd076ab0d4b74aef1aec7b1d4f106787e0d5f9163",
+    portal: "0x21fb7f70b95d119f7594267a79e2897290a21caf",
+    // TD4tamFrCq7KvQEB1LArNXr9sKFC6GaAmt
+    bridge: "0x9c4C6918f9d4CfC4B7C9cF080ce3C4D50B948323"
+  }),
+  Object.freeze({ caip2: "ton:-239", family: "ton", id: SYMBIOSIS_TON_CHAIN_ID, name: "TON" }),
+  Object.freeze({ caip2: "bitcoin:mainnet", family: "bitcoin", id: SYMBIOSIS_BTC_CHAIN_ID, name: "Bitcoin" })
+];
+var SYMBIOSIS_CHAINS = Object.freeze(Object.fromEntries(LIST.map((c) => [c.caip2, c])));
+var SYMBIOSIS_BY_ID = Object.freeze(Object.fromEntries(LIST.map((c) => [c.id, c])));
+function symbiosisChain(caip2) {
+  return SYMBIOSIS_CHAINS[(0, import_swap2_assets.catalogChainId)(caip2)];
+}
+function evmToTron(address) {
+  if (!(0, import_viem.isAddress)(address, { strict: false })) throw new Error(`symbiosis: not a 20-byte address: ${address}`);
+  const body = new Uint8Array(21);
+  body[0] = 65;
+  const raw = address.slice(2);
+  for (let i = 0; i < 20; i++) body[i + 1] = parseInt(raw.slice(i * 2, i * 2 + 2), 16);
+  const out = new Uint8Array(25);
+  out.set(body);
+  out.set((0, import_sha2.sha256)((0, import_sha2.sha256)(body)).subarray(0, 4), 21);
+  return import_base.base58.encode(out);
+}
+var symbiosis = Object.freeze({
+  /** A chain this module knows (as a source or a destination). */
+  supportsChain: (caip2) => symbiosisChain(caip2) !== void 0,
+  /** Two different chains this module knows; Bitcoin is never a destination. */
+  supports(fromChain, toChain) {
+    const a = symbiosisChain(fromChain);
+    const b = symbiosisChain(toChain);
+    return !!a && !!b && a !== b && b.family !== "bitcoin";
+  }
+});
+
+// src/activity.ts
+var SYMBIOSIS_MODULE = "@anywalletkit/protocol-swap2-symbiosis";
+var SYMBIOSIS_META_ROUTE = "0xa11b1198";
+function describeSymbiosisActivity(tx, ctx) {
+  const chain = symbiosisChain(tx.chain);
+  if (!chain) return null;
+  const subtitle = `Symbiosis \xB7 ${(0, import_activity.chainLabel)(chain.caip2)}`;
+  if (chain.family === "evm" && chain.gateway) {
+    if (!(0, import_activity.matchesCall)(tx, [chain.gateway], [SYMBIOSIS_META_ROUTE])) return null;
+    return (0, import_activity.describeSwapLike)(tx, ctx, { protocol: SYMBIOSIS_MODULE, subtitle, kind: "bridge", outVerb: "Bridged" });
+  }
+  if (chain.family === "tron" && chain.gateway) {
+    if (!(0, import_activity.matchesCall)(tx, [evmToTron(chain.gateway), chain.gateway, `0x41${chain.gateway.slice(2)}`], [SYMBIOSIS_META_ROUTE])) return null;
+    return (0, import_activity.describeSwapLike)(tx, ctx, { protocol: SYMBIOSIS_MODULE, subtitle, kind: "bridge", outVerb: "Bridged", counterparty: evmToTron(chain.gateway) });
+  }
+  if (chain.family === "ton") {
+    const own = /* @__PURE__ */ new Set();
+    for (const a of ctx.own) {
+      const raw = (0, import_util2.tonRawAddress)(a);
+      if (raw) own.add(raw);
+    }
+    const sent = tx.transfers.some((t) => t.token !== null && (0, import_util2.tonRawAddress)(t.to) === SYMBIOSIS_TON_PORTAL_RAW && own.has((0, import_util2.tonRawAddress)(t.from) ?? ""));
+    if (!sent) return null;
+    return (0, import_activity.describeSwapLike)(tx, ctx, { protocol: SYMBIOSIS_MODULE, subtitle, kind: "bridge", outVerb: "Bridged" });
+  }
+  return null;
+}
+//# sourceMappingURL=activity.cjs.map

package/dist/activity.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/activity.ts","../src/config.ts"],"sourcesContent":["/**\n * Activity recognition for Symbiosis source transactions:\n *  - EVM and Tron: `metaRoute` on the chain's pinned MetaRouterGateway — the one call every source\n *    transaction of this module is (\"Bridged USDT\");\n *  - TON: a jetton transfer from the owner to the pinned TON Portal.\n * The delivery on the destination chain is a relayer's transaction the user signs nothing in; it is\n * left to the wallet's plain \"received\" item.\n */\nimport type {ActivityItem, ChainTx, DescribeActivityContext} from \"@anywalletkit/core\";\nimport {chainLabel, describeSwapLike, matchesCall} from \"@anywalletkit/protocol-swap2-core/activity\";\nimport {tonRawAddress} from \"@anywalletkit/protocol-swap2-core/util\";\nimport {SYMBIOSIS_TON_PORTAL_RAW, evmToTron, symbiosisChain} from \"./config.js\";\n\nexport const SYMBIOSIS_MODULE = \"@anywalletkit/protocol-swap2-symbiosis\";\n/** `metaRoute((bytes,bytes,address[],address,address,uint256,bool,address,bytes))` — MetaRouterGateway. */\nexport const SYMBIOSIS_META_ROUTE = \"0xa11b1198\";\n\nexport function describeSymbiosisActivity(tx: ChainTx, ctx: DescribeActivityContext): ActivityItem | null {\n  const chain = symbiosisChain(tx.chain);\n  if (!chain) return null;\n  const subtitle = `Symbiosis · ${chainLabel(chain.caip2)}`;\n  if (chain.family === \"evm\" && chain.gateway) {\n    if (!matchesCall(tx, [chain.gateway], [SYMBIOSIS_META_ROUTE])) return null;\n    return describeSwapLike(tx, ctx, {protocol: SYMBIOSIS_MODULE, subtitle, kind: \"bridge\", outVerb: \"Bridged\"});\n  }\n  if (chain.family === \"tron\" && chain.gateway) {\n    // A Tron history source names the contract in base58 or in 20-byte hex, depending on the indexer.\n    if (!matchesCall(tx, [evmToTron(chain.gateway), chain.gateway, `0x41${chain.gateway.slice(2)}`], [SYMBIOSIS_META_ROUTE])) return null;\n    return describeSwapLike(tx, ctx, {protocol: SYMBIOSIS_MODULE, subtitle, kind: \"bridge\", outVerb: \"Bridged\", counterparty: evmToTron(chain.gateway)});\n  }\n  if (chain.family === \"ton\") {\n    const own = new Set<string>();\n    for (const a of ctx.own) { const raw = tonRawAddress(a); if (raw) own.add(raw); }\n    const sent = tx.transfers.some((t) => t.token !== null && tonRawAddress(t.to) === SYMBIOSIS_TON_PORTAL_RAW && own.has(tonRawAddress(t.from) ?? \"\"));\n    if (!sent) return null;\n    return describeSwapLike(tx, ctx, {protocol: SYMBIOSIS_MODULE, subtitle, kind: \"bridge\", outVerb: \"Bridged\"});\n  }\n  return null;\n}\n","import {base58} from \"@scure/base\";\nimport {sha256} from \"@noble/hashes/sha2.js\";\nimport {getAddress, isAddress} from \"viem\";\nimport {catalogChainId} from \"@anywalletkit/swap2-assets\";\nimport {tonRawAddress} from \"@anywalletkit/protocol-swap2-core/util\";\n\n/**\n * Symbiosis deployments this module is bound to. Every address below is taken from\n * Symbiosis' own published configuration and re-read on-chain (`scripts/verify-live.mjs`):\n *\n *  - `gateway` — MetaRouterGateway: the ONLY contract a source transaction calls and the\n *    ONLY spender an ERC-20 / TRC-20 approval may name. It pulls the sell amount and hands\n *    it to the chain's MetaRouter (`executor`), which is never approved by a user.\n *  - `portal` / `bridge` — the chain's Portal (locks and releases real tokens) and the\n *    relayers' Bridge entry; the calldata names both for the destination leg.\n *  - host chain — Symbiosis' own chain (id 13863860) where every swap is routed through the\n *    stable pools (\"octopool\"): its Synthesis and Bridge are named in every source call. Its pools,\n *    their token indexes and the synthetic-token map are pinned in `pools.ts`.\n *\n * Chains Symbiosis serves that are not listed here are simply not offered by this module.\n */\n\nexport const SYMBIOSIS_API = \"https://api.symbiosis.finance/crosschain\";\n/** Symbiosis' host chain (where synthetic tokens are minted, swapped and burned). */\nexport const SYMBIOSIS_HOST_CHAIN_ID = 13863860;\nexport const SYMBIOSIS_HOST = Object.freeze({\n  synthesis: \"0x45CFd6FB7999328F189aaD2739Fba4Be6C45E5bf\",\n  bridge: \"0x1a039cE63AE35a67Bf0E9F6DbFaE969639D59eC8\",\n  /** MulticallRouter: the only contract a route's host-chain pool swaps may call. */\n  multicallRouter: \"0xBbAD2fe9558e55EbfA04b3B5Bff0b6c4E2ffDD2C\",\n});\n/**\n * The aggregator routers a route may swap on before or after the bridge. Together with the V2\n * routers below they are the only third-party contracts this module lets a route approve. Both are non-upgradable, deployed at the same address\n * on every EVM chain listed below, and source-verified there (Sourcify: AggregationRouterV6,\n * MetaAggregationRouterV2). Tron has neither, so a Tron leg never swaps.\n */\nexport const SYMBIOSIS_AGGREGATORS = Object.freeze({\n  oneInchV6: \"0x111111125421cA6dc452d289314280a0f8842A65\",\n  kyberV2: \"0x6131B5fae19EA4f9D964eAc0408E4408b66337b5\",\n});\n/**\n * Uniswap-V2-style routers a route may swap on (Symbiosis' own configuration names one per chain):\n * only the ones that are source-verified as a plain V2 `Router02` (Sourcify: PancakeRouter on\n * BNB Chain and Base, UniswapV2Router02 on Polygon) and non-upgradable. Their two exact-input\n * functions are fully decodable: path, receiver and minimum are plain arguments.\n */\nexport const SYMBIOSIS_V2_ROUTERS: Readonly<Record<number, string>> = Object.freeze({\n  56: \"0x10ED43C718714eb63d5aA57B78B54704E256024E\",\n  137: \"0xa5E0829CaCEd8fFDD4De3c43696c57F7D7A678ff\",\n  8453: \"0x327Df1E6de05895d2ab08513aaDD9313Fe505d86\",\n});\n/**\n * Symbiosis' Unwrapper per chain — `unwrap(amount, to)` pulls the wrapped native token from the\n * caller, unwraps it and sends the coin to `to` — and the wrapped token it is set to (`wrapper()`),\n * read on-chain. Source-verified (Sourcify: Unwrapper); its owner can repoint `wrapper`, which is\n * why the watch list re-reads it.\n */\nexport const SYMBIOSIS_UNWRAPPERS: Readonly<Record<number, {unwrapper: string; wrapped: string}>> = Object.freeze({\n  1: {unwrapper: \"0x5ad095DE83693ba063941f2f2C5A0dF02383B651\", wrapped: \"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\"},\n  10: {unwrapper: \"0x88139ad1199e8c78a0804d4bEBF4FbAD89EF9D89\", wrapped: \"0x4200000000000000000000000000000000000006\"},\n  42161: {unwrapper: \"0x5Eb4ED9F745531221FAE41906e11d37642B15da6\", wrapped: \"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1\"},\n  8453: {unwrapper: \"0x8e1d36F9da8CFe842bCf8670A12ACd51c26d195D\", wrapped: \"0x4200000000000000000000000000000000000006\"},\n});\n/**\n * Symbiosis' own address the API writes as `revertableAddress` whenever a leg touches Tron or\n * TON, and as the default `fallbackReceiver`: their service that reverts a stuck swap. A request\n * cannot replace it on those routes — see the README (\"What is still trusted\").\n */\nexport const SYMBIOSIS_REVERTER = \"0x67f9b3E561383493B3f874fEAE0c53c2cD23851D\";\n/** Symbiosis' Portal on TON: the only destination a TON-source jetton transfer may name. */\nexport const SYMBIOSIS_TON_PORTAL = \"EQBZh9CpLZyNlwI7am0PHpVy8T8zdJxAhlG3m3xMi0BoVaUh\";\nexport const SYMBIOSIS_TON_PORTAL_RAW = \"0:5987d0a92d9c8d97023b6a6d0f1e9572f13f33749c408651b79b7c4c8b406855\";\n\nexport const SYMBIOSIS_TRON_CHAIN_ID = 728126428;\nexport const SYMBIOSIS_TON_CHAIN_ID = 85918;\nexport const SYMBIOSIS_BTC_CHAIN_ID = 3652501241;\n\nexport type SymbiosisFamily = \"evm\" | \"tron\" | \"ton\" | \"bitcoin\";\n\nexport interface SymbiosisChain {\n  /** Catalog CAIP-2 id. */\n  caip2: string;\n  family: SymbiosisFamily;\n  /** The chain id Symbiosis' API and contracts use. */\n  id: number;\n  name: string;\n  /** MetaRouterGateway (EVM form; Tron: the 20 bytes of the base58 address). */\n  gateway?: string;\n  /** MetaRouter the gateway forwards to — read from `gateway.metaRouterExecutorDontApprove()` on-chain, never approved by a user. */\n  executor?: string;\n  portal?: string;\n  bridge?: string;\n}\n\nconst evm = (id: number, name: string, gateway: string, executor: string, portal: string, bridge: string): SymbiosisChain =>\n  Object.freeze({caip2: `eip155:${id}`, family: \"evm\" as const, id, name, gateway, executor, portal, bridge});\n\nconst LIST: readonly SymbiosisChain[] = [\n  evm(1, \"Ethereum\", \"0xB4769e9c5bE31199a25ecD1B0C6609183fa72521\", \"0xc227b3a439EE6ae3A22500757125f4dE91d8008E\", \"0xb8f275fBf7A959F4BCE59999A2EF122A099e81A8\", \"0x5523985926Aa12BA58DC5Ad00DDca99678D7227E\"),\n  evm(56, \"BNB Chain\", \"0x851B43189de721dD94AbA767AAd9E6F6d6a95CCA\", \"0x980447DdcEf79A7499Da4538Da8FC59BAcAD6997\", \"0x5Aa5f7f84eD0E5db0a4a85C3947eA16B53352FD4\", \"0xb8f275fBf7A959F4BCE59999A2EF122A099e81A8\"),\n  evm(43114, \"Avalanche\", \"0xfeC09BE39F82b13471D2e0E7d72e6ee589c631c6\", \"0x4494b8cBC69c794d82Bd2d820A6ff6f62D7D841A\", \"0xE75C7E85FE6ADd07077467064aD15847E6ba9877\", \"0x292fC50e4eB66C3f6514b9E402dBc25961824D62\"),\n  evm(137, \"Polygon\", \"0x2eE9559387b806E88fd46b9DA160D64A29CE7Da0\", \"0x7a73a0bA4919778C5442f026bd01795b4f2A4cB8\", \"0xb8f275fBf7A959F4BCE59999A2EF122A099e81A8\", \"0x5523985926Aa12BA58DC5Ad00DDca99678D7227E\"),\n  evm(42161, \"Arbitrum\", \"0x3743c756b64ECd0770f1d4f47696A73d2A46dcbe\", \"0xf37E321e1c275d249B7A9c825aE802A9f464Eb94\", \"0x01A3c8E513B758EBB011F7AFaf6C37616c9C24d9\", \"0x5523985926Aa12BA58DC5Ad00DDca99678D7227E\"),\n  evm(10, \"Optimism\", \"0xA9A96Ee51dD54B9f51d46b1fbD2A19c1295Ec75b\", \"0x356d322BF762d4022D8c241428770565f236c2EA\", \"0x292fC50e4eB66C3f6514b9E402dBc25961824D62\", \"0x5523985926Aa12BA58DC5Ad00DDca99678D7227E\"),\n  evm(8453, \"Base\", \"0xa18348e793E77239EC68CAa51b74c5Cdc82c8a9d\", \"0xCbFD5DcaD860f49D0BD2fDaD78d9d943CAeBedef\", \"0xEE981B2459331AD268cc63CE6167b446AF4161f8\", \"0x8097f0B9f06C27AF9579F75762F971D745bb222F\"),\n  Object.freeze({\n    caip2: \"tron:728126428\", family: \"tron\" as const, id: SYMBIOSIS_TRON_CHAIN_ID, name: \"Tron\",\n    gateway: \"0x98e1df4e3200e1001610365e2eb133a953bbe3e0\", // TPuaJ6gnYfE9gLUDFrbWbPx3tMnjG8max1\n    executor: \"0xd076ab0d4b74aef1aec7b1d4f106787e0d5f9163\",\n    portal: \"0x21fb7f70b95d119f7594267a79e2897290a21caf\", // TD4tamFrCq7KvQEB1LArNXr9sKFC6GaAmt\n    bridge: \"0x9c4C6918f9d4CfC4B7C9cF080ce3C4D50B948323\",\n  }),\n  Object.freeze({caip2: \"ton:-239\", family: \"ton\" as const, id: SYMBIOSIS_TON_CHAIN_ID, name: \"TON\"}),\n  Object.freeze({caip2: \"bitcoin:mainnet\", family: \"bitcoin\" as const, id: SYMBIOSIS_BTC_CHAIN_ID, name: \"Bitcoin\"}),\n];\n\n/** By catalog CAIP-2 id. */\nexport const SYMBIOSIS_CHAINS: Readonly<Record<string, SymbiosisChain>> = Object.freeze(Object.fromEntries(LIST.map((c) => [c.caip2, c])));\n/** By Symbiosis chain id. */\nexport const SYMBIOSIS_BY_ID: Readonly<Record<number, SymbiosisChain>> = Object.freeze(Object.fromEntries(LIST.map((c) => [c.id, c])));\n\n/** The chain entry for a CAIP-2 id an account or the catalog uses (`tron:0x2b6653dc` and `tron:728126428` are one chain). */\nexport function symbiosisChain(caip2: string): SymbiosisChain | undefined {\n  return SYMBIOSIS_CHAINS[catalogChainId(caip2)];\n}\n\n// ── Addresses ────────────────────────────────────────────────────────────────\n\nconst hex = (b: Uint8Array): string => Array.from(b, (x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n\n/** A Tron base58check address (`T…`) as the 20-byte EVM form the contracts and the API use; null for anything else. */\nexport function tronToEvm(address: string): string | null {\n  if (typeof address !== \"string\" || !/^T[1-9A-HJ-NP-Za-km-z]{33}$/.test(address)) return null;\n  let b: Uint8Array;\n  try { b = base58.decode(address); } catch { return null; }\n  if (b.length !== 25 || b[0] !== 0x41) return null;\n  const check = sha256(sha256(b.subarray(0, 21))).subarray(0, 4);\n  if (hex(check) !== hex(b.subarray(21))) return null;\n  return getAddress(`0x${hex(b.subarray(1, 21))}`);\n}\n\n/** The base58check spelling (`T…`) of a 20-byte address. */\nexport function evmToTron(address: string): string {\n  if (!isAddress(address, {strict: false})) throw new Error(`symbiosis: not a 20-byte address: ${address}`);\n  const body = new Uint8Array(21);\n  body[0] = 0x41;\n  const raw = address.slice(2);\n  for (let i = 0; i < 20; i++) body[i + 1] = parseInt(raw.slice(i * 2, i * 2 + 2), 16);\n  const out = new Uint8Array(25);\n  out.set(body);\n  out.set(sha256(sha256(body)).subarray(0, 4), 21);\n  return base58.encode(out);\n}\n\n/**\n * The 20 bytes an account or contract is named by inside Symbiosis calldata, lowercase hex with\n * `0x`: an EVM address as it is, a Tron address without its 0x41 prefix. Null for another family\n * or a malformed address.\n */\nexport function account20(chain: SymbiosisChain, address: string): string | null {\n  if (chain.family === \"evm\") return typeof address === \"string\" && isAddress(address) ? address.toLowerCase() : null;\n  if (chain.family === \"tron\") return tronToEvm(address)?.toLowerCase() ?? null;\n  return null;\n}\n\n/** Whether `address` is a well-formed address of the chain's family (EVM hex with a valid checksum, Tron base58check, TON workchain 0). */\nexport function validAddress(chain: SymbiosisChain, address: string): boolean {\n  if (typeof address !== \"string\" || address.length === 0 || address.length > 128) return false;\n  if (chain.family === \"evm\") return isAddress(address) && !/^0x0{40}$/i.test(address);\n  if (chain.family === \"tron\") return tronToEvm(address) !== null;\n  if (chain.family === \"ton\") return (tonRawAddress(address) ?? \"\").startsWith(\"0:\");\n  // bech32 / bech32m / base58 — only the shape; a Bitcoin address is never a destination here.\n  return /^(bc1[02-9ac-hj-np-z]{11,71}|[13][1-9A-HJ-NP-Za-km-z]{25,34})$/.test(address);\n}\n\n/**\n * How Symbiosis names a token: EVM contracts as they are, Tron contracts in 20-byte form, a TON\n * jetton by the last 20 bytes of its master's hash plus the master itself in `attributes.ton`\n * (the rule their token list follows for every TON entry), the native coin as an empty string.\n */\nexport function symbiosisToken(chain: SymbiosisChain, contract: string | null | undefined): {address: string; ton?: string} | null {\n  if (!contract) return {address: \"\"};\n  if (chain.family === \"evm\") return isAddress(contract) ? {address: getAddress(contract)} : null;\n  if (chain.family === \"tron\") { const a = tronToEvm(contract); return a ? {address: a.toLowerCase()} : null; }\n  if (chain.family === \"ton\") {\n    const raw = tonRawAddress(contract);\n    if (!raw || !raw.startsWith(\"0:\")) return null;\n    return {address: getAddress(`0x${raw.slice(-40)}`), ton: contract};\n  }\n  return null;\n}\n\nexport const symbiosis = Object.freeze({\n  /** A chain this module knows (as a source or a destination). */\n  supportsChain: (caip2: string): boolean => symbiosisChain(caip2) !== undefined,\n  /** Two different chains this module knows; Bitcoin is never a destination. */\n  supports(fromChain: string, toChain: string): boolean {\n    const a = symbiosisChain(fromChain);\n    const b = symbiosisChain(toChain);\n    return !!a && !!b && a !== b && b.family !== \"bitcoin\";\n  },\n});\n\n/** The gateway of a chain in the spelling a wallet of that family uses (EVM checksum / Tron base58). */\nexport function gatewayAddress(chain: SymbiosisChain): string | null {\n  if (!chain.gateway) return null;\n  return chain.family === \"tron\" ? evmToTron(chain.gateway) : getAddress(chain.gateway);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASA,sBAAwD;AACxD,IAAAA,eAA4B;;;ACV5B,kBAAqB;AACrB,kBAAqB;AACrB,kBAAoC;AACpC,0BAA6B;AAC7B,kBAA4B;AAqBrB,IAAM,iBAAiB,OAAO,OAAO;AAAA,EAC1C,WAAW;AAAA,EACX,QAAQ;AAAA;AAAA,EAER,iBAAiB;AACnB,CAAC;AAOM,IAAM,wBAAwB,OAAO,OAAO;AAAA,EACjD,WAAW;AAAA,EACX,SAAS;AACX,CAAC;AAOM,IAAM,uBAAyD,OAAO,OAAO;AAAA,EAClF,IAAI;AAAA,EACJ,KAAK;AAAA,EACL,MAAM;AACR,CAAC;AAOM,IAAM,uBAAuF,OAAO,OAAO;AAAA,EAChH,GAAG,EAAC,WAAW,8CAA8C,SAAS,6CAA4C;AAAA,EAClH,IAAI,EAAC,WAAW,8CAA8C,SAAS,6CAA4C;AAAA,EACnH,OAAO,EAAC,WAAW,8CAA8C,SAAS,6CAA4C;AAAA,EACtH,MAAM,EAAC,WAAW,8CAA8C,SAAS,6CAA4C;AACvH,CAAC;AASM,IAAM,2BAA2B;AAEjC,IAAM,0BAA0B;AAChC,IAAM,yBAAyB;AAC/B,IAAM,yBAAyB;AAmBtC,IAAM,MAAM,CAAC,IAAY,MAAc,SAAiB,UAAkB,QAAgB,WACxF,OAAO,OAAO,EAAC,OAAO,UAAU,EAAE,IAAI,QAAQ,OAAgB,IAAI,MAAM,SAAS,UAAU,QAAQ,OAAM,CAAC;AAE5G,IAAM,OAAkC;AAAA,EACtC,IAAI,GAAG,YAAY,8CAA8C,8CAA8C,8CAA8C,4CAA4C;AAAA,EACzM,IAAI,IAAI,aAAa,8CAA8C,8CAA8C,8CAA8C,4CAA4C;AAAA,EAC3M,IAAI,OAAO,aAAa,8CAA8C,8CAA8C,8CAA8C,4CAA4C;AAAA,EAC9M,IAAI,KAAK,WAAW,8CAA8C,8CAA8C,8CAA8C,4CAA4C;AAAA,EAC1M,IAAI,OAAO,YAAY,8CAA8C,8CAA8C,8CAA8C,4CAA4C;AAAA,EAC7M,IAAI,IAAI,YAAY,8CAA8C,8CAA8C,8CAA8C,4CAA4C;AAAA,EAC1M,IAAI,MAAM,QAAQ,8CAA8C,8CAA8C,8CAA8C,4CAA4C;AAAA,EACxM,OAAO,OAAO;AAAA,IACZ,OAAO;AAAA,IAAkB,QAAQ;AAAA,IAAiB,IAAI;AAAA,IAAyB,MAAM;AAAA,IACrF,SAAS;AAAA;AAAA,IACT,UAAU;AAAA,IACV,QAAQ;AAAA;AAAA,IACR,QAAQ;AAAA,EACV,CAAC;AAAA,EACD,OAAO,OAAO,EAAC,OAAO,YAAY,QAAQ,OAAgB,IAAI,wBAAwB,MAAM,MAAK,CAAC;AAAA,EAClG,OAAO,OAAO,EAAC,OAAO,mBAAmB,QAAQ,WAAoB,IAAI,wBAAwB,MAAM,UAAS,CAAC;AACnH;AAGO,IAAM,mBAA6D,OAAO,OAAO,OAAO,YAAY,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAElI,IAAM,kBAA4D,OAAO,OAAO,OAAO,YAAY,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAG9H,SAAS,eAAe,OAA2C;AACxE,SAAO,qBAAiB,oCAAe,KAAK,CAAC;AAC/C;AAkBO,SAAS,UAAU,SAAyB;AACjD,MAAI,KAAC,uBAAU,SAAS,EAAC,QAAQ,MAAK,CAAC,EAAG,OAAM,IAAI,MAAM,qCAAqC,OAAO,EAAE;AACxG,QAAM,OAAO,IAAI,WAAW,EAAE;AAC9B,OAAK,CAAC,IAAI;AACV,QAAM,MAAM,QAAQ,MAAM,CAAC;AAC3B,WAAS,IAAI,GAAG,IAAI,IAAI,IAAK,MAAK,IAAI,CAAC,IAAI,SAAS,IAAI,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;AACnF,QAAM,MAAM,IAAI,WAAW,EAAE;AAC7B,MAAI,IAAI,IAAI;AACZ,MAAI,QAAI,wBAAO,oBAAO,IAAI,CAAC,EAAE,SAAS,GAAG,CAAC,GAAG,EAAE;AAC/C,SAAO,mBAAO,OAAO,GAAG;AAC1B;AAwCO,IAAM,YAAY,OAAO,OAAO;AAAA;AAAA,EAErC,eAAe,CAAC,UAA2B,eAAe,KAAK,MAAM;AAAA;AAAA,EAErE,SAAS,WAAmB,SAA0B;AACpD,UAAM,IAAI,eAAe,SAAS;AAClC,UAAM,IAAI,eAAe,OAAO;AAChC,WAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,MAAM,KAAK,EAAE,WAAW;AAAA,EAC/C;AACF,CAAC;;;AD7LM,IAAM,mBAAmB;AAEzB,IAAM,uBAAuB;AAE7B,SAAS,0BAA0B,IAAa,KAAmD;AACxG,QAAM,QAAQ,eAAe,GAAG,KAAK;AACrC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,WAAW,sBAAe,4BAAW,MAAM,KAAK,CAAC;AACvD,MAAI,MAAM,WAAW,SAAS,MAAM,SAAS;AAC3C,QAAI,KAAC,6BAAY,IAAI,CAAC,MAAM,OAAO,GAAG,CAAC,oBAAoB,CAAC,EAAG,QAAO;AACtE,eAAO,kCAAiB,IAAI,KAAK,EAAC,UAAU,kBAAkB,UAAU,MAAM,UAAU,SAAS,UAAS,CAAC;AAAA,EAC7G;AACA,MAAI,MAAM,WAAW,UAAU,MAAM,SAAS;AAE5C,QAAI,KAAC,6BAAY,IAAI,CAAC,UAAU,MAAM,OAAO,GAAG,MAAM,SAAS,OAAO,MAAM,QAAQ,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,oBAAoB,CAAC,EAAG,QAAO;AACjI,eAAO,kCAAiB,IAAI,KAAK,EAAC,UAAU,kBAAkB,UAAU,MAAM,UAAU,SAAS,WAAW,cAAc,UAAU,MAAM,OAAO,EAAC,CAAC;AAAA,EACrJ;AACA,MAAI,MAAM,WAAW,OAAO;AAC1B,UAAM,MAAM,oBAAI,IAAY;AAC5B,eAAW,KAAK,IAAI,KAAK;AAAE,YAAM,UAAM,4BAAc,CAAC;AAAG,UAAI,IAAK,KAAI,IAAI,GAAG;AAAA,IAAG;AAChF,UAAM,OAAO,GAAG,UAAU,KAAK,CAAC,MAAM,EAAE,UAAU,YAAQ,4BAAc,EAAE,EAAE,MAAM,4BAA4B,IAAI,QAAI,4BAAc,EAAE,IAAI,KAAK,EAAE,CAAC;AAClJ,QAAI,CAAC,KAAM,QAAO;AAClB,eAAO,kCAAiB,IAAI,KAAK,EAAC,UAAU,kBAAkB,UAAU,MAAM,UAAU,SAAS,UAAS,CAAC;AAAA,EAC7G;AACA,SAAO;AACT;","names":["import_util"]}

package/dist/activity.d.cts

@@ -0,0 +1,17 @@
+import { ChainTx, DescribeActivityContext, ActivityItem } from '@anywalletkit/core';
+
+/**
+ * Activity recognition for Symbiosis source transactions:
+ *  - EVM and Tron: `metaRoute` on the chain's pinned MetaRouterGateway — the one call every source
+ *    transaction of this module is ("Bridged USDT");
+ *  - TON: a jetton transfer from the owner to the pinned TON Portal.
+ * The delivery on the destination chain is a relayer's transaction the user signs nothing in; it is
+ * left to the wallet's plain "received" item.
+ */
+
+declare const SYMBIOSIS_MODULE = "@anywalletkit/protocol-swap2-symbiosis";
+/** `metaRoute((bytes,bytes,address[],address,address,uint256,bool,address,bytes))` — MetaRouterGateway. */
+declare const SYMBIOSIS_META_ROUTE = "0xa11b1198";
+declare function describeSymbiosisActivity(tx: ChainTx, ctx: DescribeActivityContext): ActivityItem | null;
+
+export { SYMBIOSIS_META_ROUTE, SYMBIOSIS_MODULE, describeSymbiosisActivity };