@debridge-finance/borderless-validation-sdk 0.0.0-dev-dee2389

package/dist/esm/validations/evm-op-budget.js

@@ -0,0 +1,258 @@
+import { ViolationCode, EvmActionOperation, ApproveAmountFlag, } from "../types/index.js";
+import { isWhitelisted } from "../whitelists/types.js";
+import { decodeApproveCalldata } from "../helpers/evm-calldata.js";
+import { maxUint256 } from "viem";
+import { isNativeToken, resolveWrappedTokenAddress } from "../helpers/evm-token.js";
+import { addressEquals, normalizeAddress } from "../helpers/address.js";
+import { sumTradeAmounts } from "../helpers/evm-trade-amounts.js";
+import { getTransactionCalls, actionUsesTransactionCalls } from "../helpers/evm-action.js";
+export function validateBudgetOperations(actions, basePath, request, trades, realChainId, envConfig) {
+    const violations = [];
+    for (let i = 0; i < actions.length; i++) {
+        const action = actions[i];
+        if (!action.actions.includes(EvmActionOperation.Budget))
+            continue;
+        const actionPath = `${basePath}.requiredActions[${i}]`;
+        // Applies to ALL Budget actions regardless of type
+        violations.push(...validateBudgetApproveNone(request, actionPath));
+        // Token address and calldata checks only apply to actions that use transactionCalls
+        // (Transaction, Sign712MetaMask). For Permit/Permit2 (Sign712), these are validated
+        // by the permit/permit2 validators instead.
+        if (!actionUsesTransactionCalls(action))
+            continue;
+        violations.push(...validateBudgetTokenAddress(action, actionPath, trades, realChainId), ...validateBudgetCalldata(action, actionPath, request, trades, realChainId, envConfig));
+    }
+    return violations;
+}
+// CRITICAL: Budget forbidden when approveAmountFlag === 'none'
+function validateBudgetApproveNone(request, actionPath) {
+    if (request.approveAmountFlag === ApproveAmountFlag.None) {
+        return [{
+                code: ViolationCode.BudgetForbiddenWithApproveNone,
+                message: `Budget action is forbidden when approveAmountFlag="none"`,
+                path: `${actionPath}.actions`,
+                actual: ApproveAmountFlag.None,
+            }];
+    }
+    return [];
+}
+// CRITICAL: transactionCalls[].to == details.tokenAddress, non-zero, in trades
+function validateBudgetTokenAddress(action, actionPath, trades, realChainId) {
+    const violations = [];
+    const txCalls = getTransactionCalls(action);
+    const tokenAddress = action.details?.tokenAddress;
+    // CRITICAL: transactionCalls must be present
+    if (txCalls.length === 0) {
+        violations.push({
+            code: ViolationCode.BudgetTransactionCallsMissing,
+            message: `Budget must have at least one transactionCall`,
+            path: `${actionPath}.details.transactionCalls`,
+            actual: [],
+        });
+    }
+    // CRITICAL: tokenAddress must be present
+    if (!tokenAddress) {
+        violations.push({
+            code: ViolationCode.BudgetTokenAddressMissing,
+            message: `Budget must have details.tokenAddress`,
+            path: `${actionPath}.details.tokenAddress`,
+            actual: undefined,
+        });
+    }
+    // Skip further checks if critical data is missing.
+    // It's safe as we already reported the violations for missing the required fields.
+    if (txCalls.length === 0 || !tokenAddress)
+        return violations;
+    const txTo = txCalls[0].to;
+    // CRITICAL: transactionCalls[].to must equal details.tokenAddress
+    if (!txTo || !addressEquals(realChainId, txTo, tokenAddress)) {
+        violations.push({
+            code: ViolationCode.BudgetTokenAddressMismatch,
+            message: `Budget transactionCalls[0].to must equal details.tokenAddress`,
+            path: `${actionPath}.details.transactionCalls[0].to`,
+            expected: tokenAddress,
+            actual: txTo,
+        });
+    }
+    // CRITICAL: must be non-zero address
+    if (isNativeToken(tokenAddress)) {
+        violations.push({
+            code: ViolationCode.BudgetTokenAddressZero,
+            message: `Budget token address must not be the zero address`,
+            path: `${actionPath}.details.tokenAddress`,
+            actual: tokenAddress,
+        });
+    }
+    // CRITICAL: must be one of the trade tokens
+    // Resolve native token → WETH so that a Budget for WETH matches a trade with native input
+    const tradeTokens = trades.map(t => {
+        const resolved = resolveWrappedTokenAddress(t.srcChainTokenIn, realChainId);
+        return resolved ? normalizeAddress(realChainId, resolved) : normalizeAddress(realChainId, t.srcChainTokenIn);
+    });
+    const normalizedToken = normalizeAddress(realChainId, tokenAddress);
+    if (!tradeTokens.includes(normalizedToken)) {
+        violations.push({
+            code: ViolationCode.BudgetTokenNotInTrades,
+            message: `Budget token must be one of request trades srcChainTokenIn`,
+            path: `${actionPath}.details.tokenAddress`,
+            expected: tradeTokens,
+            actual: tokenAddress,
+        });
+    }
+    return violations;
+}
+// CRITICAL: decode approve calldata, validate spender + amount + allowanceHolder
+// Handles two-step approve: approve(spender, 0) reset + approve(spender, amount)
+function validateBudgetCalldata(action, actionPath, request, trades, realChainId, envConfig) {
+    const txCalls = getTransactionCalls(action);
+    // Missing txCalls is reported by validateBudgetTokenAddress
+    if (txCalls.length === 0)
+        return [];
+    const decoded = decodeBudgetApproveCalls(txCalls, actionPath);
+    if ("violations" in decoded)
+        return decoded.violations;
+    const violations = [];
+    violations.push(...validateBudgetAmount(decoded.amount, actionPath, decoded.mainApproveIndex, request, trades, action, realChainId), ...validateBudgetAllowanceHolder(decoded.spender, action, actionPath, decoded.mainApproveIndex, realChainId, envConfig));
+    return violations;
+}
+// Decodes one or two approve calls. Returns the "real" approve.
+// If two calls: first must be approve(spender, 0), second is the real one.
+function decodeBudgetApproveCalls(txCalls, actionPath) {
+    const calldataPath = `${actionPath}.details.transactionCalls`;
+    // CRITICAL: at most 2 transactionCalls
+    if (txCalls.length > 2) {
+        return { violations: [{
+                    code: ViolationCode.BudgetTooManyTransactionCalls,
+                    message: `Budget must have at most 2 transactionCalls (reset + approve)`,
+                    path: calldataPath,
+                    expected: 2,
+                    actual: txCalls.length,
+                }] };
+    }
+    const mainApproveIndex = txCalls.length - 1;
+    // Decode last call — this is always the "real" approve
+    let mainApprove;
+    try {
+        mainApprove = decodeApproveCalldata(txCalls[mainApproveIndex].data);
+    }
+    catch (e) {
+        return { violations: [{
+                    code: ViolationCode.BudgetCalldataInvalid,
+                    message: `Budget calldata is not valid approve`,
+                    path: `${calldataPath}[${mainApproveIndex}].data`,
+                    actual: txCalls[mainApproveIndex].data,
+                    details: e,
+                }] };
+    }
+    // If two calls, the first must be a reset: approve(same spender, 0)
+    if (txCalls.length === 2) {
+        const resetViolations = validateBudgetResetCall(txCalls[0], mainApprove.spender, calldataPath);
+        if (resetViolations.length > 0) {
+            return { violations: resetViolations };
+        }
+    }
+    return { ...mainApprove, mainApproveIndex };
+}
+// Validates the reset call: must be approve(same spender, 0)
+function validateBudgetResetCall(txCall, expectedSpender, calldataPath) {
+    let resetApprove;
+    try {
+        resetApprove = decodeApproveCalldata(txCall.data);
+    }
+    catch (e) {
+        return [{
+                code: ViolationCode.BudgetCalldataInvalid,
+                message: `Budget reset calldata is not valid approve`,
+                path: `${calldataPath}[0].data`,
+                actual: txCall.data,
+                details: e,
+            }];
+    }
+    const violations = [];
+    // CRITICAL: reset amount must be 0
+    if (resetApprove.amount !== 0n) {
+        violations.push({
+            code: ViolationCode.BudgetCalldataInvalid,
+            message: `Budget two-step approve: first call must be approve(spender, 0)`,
+            path: `${calldataPath}[0].data`,
+            expected: "0",
+            actual: resetApprove.amount.toString(),
+        });
+    }
+    // CRITICAL: reset spender must match main spender
+    if (resetApprove.spender !== expectedSpender) {
+        violations.push({
+            code: ViolationCode.BudgetCalldataInvalid,
+            message: `Budget two-step approve: reset spender must match main spender`,
+            path: `${calldataPath}[0].data`,
+            expected: expectedSpender,
+            actual: resetApprove.spender,
+        });
+    }
+    return violations;
+}
+// CRITICAL: approve amount validation
+function validateBudgetAmount(approveAmount, actionPath, mainIndex, request, trades, action, realChainId) {
+    const flag = request.approveAmountFlag;
+    const dataPath = `${actionPath}.details.transactionCalls[${mainIndex}].data`;
+    // unlimited: must be maxUint256
+    if (flag === ApproveAmountFlag.Unlimited) {
+        if (approveAmount !== maxUint256) {
+            return [{
+                    code: ViolationCode.BudgetAmountMismatch,
+                    message: `Budget approve amount must be maxUint256 when approveAmountFlag="unlimited"`,
+                    path: dataPath,
+                    expected: maxUint256.toString(),
+                    actual: approveAmount.toString(),
+                }];
+        }
+        return [];
+    }
+    // exactApproveAmount (or undefined): check numeric trade amounts
+    const tokenAddress = action.details?.tokenAddress;
+    // Skip if tokenAddress is missing — already reported by validateBudgetTokenAddress
+    if (!tokenAddress)
+        return [];
+    const sumResult = sumTradeAmounts(trades, tokenAddress, realChainId);
+    if (sumResult.violations)
+        return sumResult.violations;
+    if (sumResult.skip)
+        return [];
+    if (approveAmount !== sumResult.sum) {
+        return [{
+                code: ViolationCode.BudgetAmountMismatch,
+                message: `Budget approve amount does not match sum of trade amounts`,
+                path: dataPath,
+                expected: sumResult.sum.toString(),
+                actual: approveAmount.toString(),
+            }];
+    }
+    return [];
+}
+// CRITICAL: approve target == details.allowanceHolder, both whitelisted
+function validateBudgetAllowanceHolder(approveSpender, action, actionPath, mainIndex, realChainId, envConfig) {
+    const violations = [];
+    const allowanceHolder = action.details?.allowanceHolder;
+    // CRITICAL: approve target must equal details.allowanceHolder
+    if (allowanceHolder === undefined ||
+        !addressEquals(realChainId, approveSpender, allowanceHolder)) {
+        violations.push({
+            code: ViolationCode.BudgetAllowanceHolderMismatch,
+            message: `Budget approve spender must equal details.allowanceHolder`,
+            path: `${actionPath}.details.allowanceHolder`,
+            expected: approveSpender,
+            actual: allowanceHolder,
+        });
+    }
+    // CRITICAL: must be whitelisted AllowanceHolder
+    if (!isWhitelisted(envConfig.allowanceHolderContracts, realChainId, approveSpender)) {
+        violations.push({
+            code: ViolationCode.BudgetAllowanceHolderNotWhitelisted,
+            message: `Budget approve spender is not a whitelisted AllowanceHolder`,
+            path: `${actionPath}.details.transactionCalls[${mainIndex}].data`,
+            actual: approveSpender,
+        });
+    }
+    return violations;
+}
+//# sourceMappingURL=evm-op-budget.js.map

package/dist/esm/validations/evm-op-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-op-budget.js","sourceRoot":"","sources":["../../../src/validations/evm-op-budget.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,aAAa,EAGb,kBAAkB,EAClB,iBAAiB,GAGpB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAkB,MAAM,yBAAyB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAExF,MAAM,UAAU,wBAAwB,CACpC,OAA4B,EAC5B,QAAgB,EAChB,OAA8B,EAC9B,MAAsB,EACtB,WAAoB,EACpB,SAA4B;IAE5B,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,MAAM,CAAC;YAAE,SAAS;QAElE,MAAM,UAAU,GAAG,GAAG,QAAQ,oBAAoB,CAAC,GAAG,CAAC;QAEvD,mDAAmD;QACnD,UAAU,CAAC,IAAI,CAAC,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QAEnE,oFAAoF;QACpF,oFAAoF;QACpF,4CAA4C;QAC5C,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC;YAAE,SAAS;QAElD,UAAU,CAAC,IAAI,CACX,GAAG,0BAA0B,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,EACtE,GAAG,sBAAsB,CACrB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,CAC9D,CACJ,CAAC;IACN,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,+DAA+D;AAC/D,SAAS,yBAAyB,CAC9B,OAA8B,EAC9B,UAAkB;IAElB,IAAI,OAAO,CAAC,iBAAiB,KAAK,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACvD,OAAO,CAAC;gBACJ,IAAI,EAAE,aAAa,CAAC,8BAA8B;gBAClD,OAAO,EAAE,0DAA0D;gBACnE,IAAI,EAAE,GAAG,UAAU,UAAU;gBAC7B,MAAM,EAAE,iBAAiB,CAAC,IAAI;aACjC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,SAAS,0BAA0B,CAC/B,MAAyB,EACzB,UAAkB,EAClB,MAAsB,EACtB,WAAoB;IAEpB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC;IAElD,6CAA6C;IAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,6BAA6B;YACjD,OAAO,EAAE,+CAA+C;YACxD,IAAI,EAAE,GAAG,UAAU,2BAA2B;YAC9C,MAAM,EAAE,EAAE;SACb,CAAC,CAAC;IACP,CAAC;IAED,yCAAyC;IACzC,IAAI,CAAC,YAAY,EAAE,CAAC;QAChB,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,yBAAyB;YAC7C,OAAO,EAAE,uCAAuC;YAChD,IAAI,EAAE,GAAG,UAAU,uBAAuB;YAC1C,MAAM,EAAE,SAAS;SACpB,CAAC,CAAC;IACP,CAAC;IAED,mDAAmD;IACnD,mFAAmF;IACnF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY;QAAE,OAAO,UAAU,CAAC;IAE7D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3B,kEAAkE;IAClE,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;QAC3D,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,0BAA0B;YAC9C,OAAO,EAAE,+DAA+D;YACxE,IAAI,EAAE,GAAG,UAAU,iCAAiC;YACpD,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,IAAI;SACf,CAAC,CAAC;IACP,CAAC;IAED,qCAAqC;IACrC,IAAI,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,sBAAsB;YAC1C,OAAO,EAAE,mDAAmD;YAC5D,IAAI,EAAE,GAAG,UAAU,uBAAuB;YAC1C,MAAM,EAAE,YAAY;SACvB,CAAC,CAAC;IACP,CAAC;IAED,4CAA4C;IAC5C,0FAA0F;IAC1F,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC/B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,CAAC,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;QAC5E,OAAO,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;IACjH,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,gBAAgB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACpE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,sBAAsB;YAC1C,OAAO,EAAE,4DAA4D;YACrE,IAAI,EAAE,GAAG,UAAU,uBAAuB;YAC1C,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,YAAY;SACvB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,iFAAiF;AACjF,iFAAiF;AACjF,SAAS,sBAAsB,CAC3B,MAAyB,EACzB,UAAkB,EAClB,OAA8B,EAC9B,MAAsB,EACtB,WAAoB,EACpB,SAA4B;IAE5B,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5C,4DAA4D;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,OAAO,GAAG,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9D,IAAI,YAAY,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC;IAEvD,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,UAAU,CAAC,IAAI,CACX,GAAG,oBAAoB,CACnB,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,gBAAgB,EACpD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CACvC,EACD,GAAG,6BAA6B,CAC5B,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,gBAAgB,EAAE,WAAW,EAAE,SAAS,CACxF,CACJ,CAAC;IAEF,OAAO,UAAU,CAAC;AACtB,CAAC;AAID,gEAAgE;AAChE,2EAA2E;AAC3E,SAAS,wBAAwB,CAC7B,OAAsD,EACtD,UAAkB;IAElB,MAAM,YAAY,GAAG,GAAG,UAAU,2BAA2B,CAAC;IAE9D,uCAAuC;IACvC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,UAAU,EAAE,CAAC;oBAClB,IAAI,EAAE,aAAa,CAAC,6BAA6B;oBACjD,OAAO,EAAE,+DAA+D;oBACxE,IAAI,EAAE,YAAY;oBAClB,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,OAAO,CAAC,MAAM;iBACzB,CAAC,EAAE,CAAC;IACT,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAE5C,uDAAuD;IACvD,IAAI,WAA2B,CAAC;IAChC,IAAI,CAAC;QACD,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,EAAE,UAAU,EAAE,CAAC;oBAClB,IAAI,EAAE,aAAa,CAAC,qBAAqB;oBACzC,OAAO,EAAE,sCAAsC;oBAC/C,IAAI,EAAE,GAAG,YAAY,IAAI,gBAAgB,QAAQ;oBACjD,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,IAAI;oBACtC,OAAO,EAAE,CAAC;iBACb,CAAC,EAAE,CAAC;IACT,CAAC;IAED,oEAAoE;IACpE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,eAAe,GAAG,uBAAuB,CAC3C,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,OAAO,EAAE,YAAY,CAChD,CAAC;QACF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;QAC3C,CAAC;IACL,CAAC;IAED,OAAO,EAAE,GAAG,WAAW,EAAE,gBAAgB,EAAE,CAAC;AAChD,CAAC;AAED,6DAA6D;AAC7D,SAAS,uBAAuB,CAC5B,MAAmD,EACnD,eAAuB,EACvB,YAAoB;IAEpB,IAAI,YAA4B,CAAC;IACjC,IAAI,CAAC;QACD,YAAY,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,CAAC;gBACJ,IAAI,EAAE,aAAa,CAAC,qBAAqB;gBACzC,OAAO,EAAE,4CAA4C;gBACrD,IAAI,EAAE,GAAG,YAAY,UAAU;gBAC/B,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,OAAO,EAAE,CAAC;aACb,CAAC,CAAC;IACP,CAAC;IAED,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,mCAAmC;IACnC,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,qBAAqB;YACzC,OAAO,EAAE,iEAAiE;YAC1E,IAAI,EAAE,GAAG,YAAY,UAAU;YAC/B,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE;SACzC,CAAC,CAAC;IACP,CAAC;IAED,kDAAkD;IAClD,IAAI,YAAY,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QAC3C,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,qBAAqB;YACzC,OAAO,EAAE,gEAAgE;YACzE,IAAI,EAAE,GAAG,YAAY,UAAU;YAC/B,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,YAAY,CAAC,OAAO;SAC/B,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,sCAAsC;AACtC,SAAS,oBAAoB,CACzB,aAAqB,EACrB,UAAkB,EAClB,SAAiB,EACjB,OAA8B,EAC9B,MAAsB,EACtB,MAAyB,EACzB,WAAoB;IAEpB,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAG,UAAU,6BAA6B,SAAS,QAAQ,CAAC;IAE7E,gCAAgC;IAChC,IAAI,IAAI,KAAK,iBAAiB,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,CAAC;oBACJ,IAAI,EAAE,aAAa,CAAC,oBAAoB;oBACxC,OAAO,EAAE,6EAA6E;oBACtF,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;oBAC/B,MAAM,EAAE,aAAa,CAAC,QAAQ,EAAE;iBACnC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAED,iEAAiE;IACjE,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC;IAClD,mFAAmF;IACnF,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAE7B,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IACrE,IAAI,SAAS,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC,UAAU,CAAC;IACtD,IAAI,SAAS,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAE9B,IAAI,aAAa,KAAK,SAAS,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO,CAAC;gBACJ,IAAI,EAAE,aAAa,CAAC,oBAAoB;gBACxC,OAAO,EAAE,2DAA2D;gBACpE,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAClC,MAAM,EAAE,aAAa,CAAC,QAAQ,EAAE;aACnC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAGD,wEAAwE;AACxE,SAAS,6BAA6B,CAClC,cAAsB,EACtB,MAAyB,EACzB,UAAkB,EAClB,SAAiB,EACjB,WAAoB,EACpB,SAA4B;IAE5B,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC;IAExD,8DAA8D;IAC9D,IACI,eAAe,KAAK,SAAS;QAC7B,CAAC,aAAa,CAAC,WAAW,EAAE,cAAc,EAAE,eAAe,CAAC,EAC9D,CAAC;QACC,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,6BAA6B;YACjD,OAAO,EAAE,2DAA2D;YACpE,IAAI,EAAE,GAAG,UAAU,0BAA0B;YAC7C,QAAQ,EAAE,cAAc;YACxB,MAAM,EAAE,eAAe;SAC1B,CAAC,CAAC;IACP,CAAC;IAED,gDAAgD;IAChD,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,wBAAwB,EAAE,WAAW,EAAE,cAAc,CAAC,EAAE,CAAC;QAClF,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,mCAAmC;YACvD,OAAO,EAAE,6DAA6D;YACtE,IAAI,EAAE,GAAG,UAAU,6BAA6B,SAAS,QAAQ;YACjE,MAAM,EAAE,cAAc;SACzB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/esm/validations/evm-op-gas-compensation.js

@@ -0,0 +1,149 @@
+import { ViolationCode, EvmActionOperation, } from "../types/index.js";
+import { decodeTransferCalldata } from "../helpers/evm-calldata.js";
+import { isNativeToken } from "../helpers/evm-token.js";
+import { normalizeAddress } from "../helpers/address.js";
+import { getTransactionCalls } from "../helpers/evm-action.js";
+export function validateGasCompensationOperations(actions, basePath, request, realChainId) {
+    const violations = [];
+    const gasCompensationGroups = groupGasCompensationInfo(request);
+    for (let i = 0; i < actions.length; i++) {
+        const action = actions[i];
+        if (!action.actions.includes(EvmActionOperation.GasCompensation)) {
+            continue;
+        }
+        const actionPath = `${basePath}.requiredActions[${i}]`;
+        const txCalls = getTransactionCalls(action);
+        // CRITICAL: transactionCalls must be present
+        if (txCalls.length === 0) {
+            violations.push({
+                code: ViolationCode.GasCompensationTransactionCallsMissing,
+                message: `GasCompensation must have at least one transactionCall`,
+                path: `${actionPath}.details.transactionCalls`,
+                actual: [],
+            });
+            continue;
+        }
+        // CRITICAL: GasCompensation must have exactly one transactionCall
+        if (txCalls.length > 1) {
+            violations.push({
+                code: ViolationCode.GasCompensationTooManyTransactionCalls,
+                message: `GasCompensation must have exactly 1 transactionCall`,
+                path: `${actionPath}.details.transactionCalls`,
+                expected: 1,
+                actual: txCalls.length,
+            });
+        }
+        violations.push(...validateGasCompensationPreHook(action, actionPath, gasCompensationGroups, realChainId), ...validateGasCompensationCalldata(txCalls[0], actionPath, gasCompensationGroups, realChainId));
+    }
+    return violations;
+}
+// CRITICAL: must have a corresponding preHook with gasCompensationInfo
+function validateGasCompensationPreHook(_action, actionPath, groups, _realChainId) {
+    if (groups.length === 0) {
+        return [{
+                code: ViolationCode.GasCompensationNoMatchingPreHook,
+                message: `GasCompensation has no corresponding preHook with gasCompensationInfo`,
+                path: `${actionPath}.actions`,
+            }];
+    }
+    // AI: for now we check that at least one gasCompensationInfo group exists.
+    // A more precise matching (action <-> specific group) can be added later.
+    return [];
+}
+// CRITICAL: validate calldata based on token type (ERC20 vs native)
+// Token type is determined by gasCompensationInfo.tokenAddress
+// CRITICAL: txCall.to must match a gasCompensationInfo group
+//
+// Note: `gasCompensationInfo` also has `sender` and `chainId`, but they cannot
+// be verified from the `transactionCall` data:
+// - `sender` maps to the hook's `from` field, not present in `requiredAction`
+// - `chainId` is implicitly matched by the trade group's `realChainId`
+function validateGasCompensationCalldata(txCall, actionPath, groups, realChainId) {
+    // Check for native token group
+    if (groups.some(g => isNativeToken(g.tokenAddress))) {
+        return validateGasCompensationNative(txCall, actionPath);
+    }
+    // Check for ERC20: txCall.to must match a group's tokenAddress
+    const erc20Match = groups.some(g => normalizeAddress(realChainId, g.tokenAddress) === normalizeAddress(realChainId, txCall.to));
+    if (erc20Match) {
+        return validateGasCompensationErc20(txCall, actionPath);
+    }
+    // txCall.to doesn't match any gasCompensationInfo group
+    return [{
+            code: ViolationCode.GasCompensationToMismatch,
+            message: `GasCompensation transactionCalls[0].to does not match any gasCompensationInfo.tokenAddress`,
+            path: `${actionPath}.details.transactionCalls[0].to`,
+            expected: groups.map(g => g.tokenAddress),
+            actual: txCall.to,
+        }];
+}
+// CRITICAL: for native: data === "0x", value > 0
+function validateGasCompensationNative(txCall, actionPath) {
+    const violations = [];
+    // CRITICAL: data must be empty for native token transfer
+    if (txCall.data !== "0x") {
+        violations.push({
+            code: ViolationCode.GasCompensationCalldataInvalid,
+            message: `GasCompensation native transfer must have data="0x"`,
+            path: `${actionPath}.details.transactionCalls[0].data`,
+            expected: "0x",
+            actual: txCall.data,
+        });
+    }
+    try {
+        if (BigInt(txCall.value) <= 0n) {
+            violations.push({
+                code: ViolationCode.GasCompensationNativeValueZero,
+                message: `GasCompensation native value must be > 0`,
+                path: `${actionPath}.details.transactionCalls[0].value`,
+                actual: txCall.value,
+            });
+        }
+    }
+    catch {
+        violations.push({
+            code: ViolationCode.GasCompensationNativeValueZero,
+            message: `GasCompensation native value is not a valid number`,
+            path: `${actionPath}.details.transactionCalls[0].value`,
+            actual: txCall.value,
+        });
+    }
+    return violations;
+}
+// CRITICAL: for ERC20: data must be valid transfer(address,uint256)
+function validateGasCompensationErc20(txCall, actionPath) {
+    try {
+        decodeTransferCalldata(txCall.data);
+    }
+    catch (e) {
+        return [{
+                code: ViolationCode.GasCompensationCalldataInvalid,
+                message: `GasCompensation calldata is not valid ERC20 transfer`,
+                path: `${actionPath}.details.transactionCalls[0].data`,
+                actual: txCall.data,
+                details: e,
+            }];
+    }
+    return [];
+}
+// Groups gasCompensationInfo from preHooks by (chainId, tokenAddress, sender)
+function groupGasCompensationInfo(request) {
+    const seen = new Set();
+    const groups = [];
+    for (const hook of request.preHooks ?? []) {
+        const info = hook.gasCompensationInfo;
+        if (!info)
+            continue;
+        const key = `${info.chainId}:${normalizeAddress(info.chainId, info.tokenAddress)}:${normalizeAddress(info.chainId, info.sender)}`;
+        if (!seen.has(key)) {
+            seen.add(key);
+            groups.push({
+                chainId: info.chainId,
+                tokenAddress: info.tokenAddress,
+                sender: info.sender,
+            });
+        }
+    }
+    return groups;
+}
+//# sourceMappingURL=evm-op-gas-compensation.js.map

package/dist/esm/validations/evm-op-gas-compensation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-op-gas-compensation.js","sourceRoot":"","sources":["../../../src/validations/evm-op-gas-compensation.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,aAAa,EAGb,kBAAkB,GAErB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAQ5D,MAAM,UAAU,iCAAiC,CAC7C,OAA4B,EAC5B,QAAgB,EAChB,OAA8B,EAC9B,WAAoB;IAEpB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAEhE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/D,SAAS;QACb,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,QAAQ,oBAAoB,CAAC,GAAG,CAAC;QACvD,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAE5C,6CAA6C;QAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,sCAAsC;gBAC1D,OAAO,EAAE,wDAAwD;gBACjE,IAAI,EAAE,GAAG,UAAU,2BAA2B;gBAC9C,MAAM,EAAE,EAAE;aACb,CAAC,CAAC;YACH,SAAS;QACb,CAAC;QAED,kEAAkE;QAClE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,sCAAsC;gBAC1D,OAAO,EAAE,qDAAqD;gBAC9D,IAAI,EAAE,GAAG,UAAU,2BAA2B;gBAC9C,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,OAAO,CAAC,MAAM;aACzB,CAAC,CAAC;QACP,CAAC;QAED,UAAU,CAAC,IAAI,CACX,GAAG,8BAA8B,CAC7B,MAAM,EAAE,UAAU,EAAE,qBAAqB,EAAE,WAAW,CACzD,EACD,GAAG,+BAA+B,CAC9B,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,qBAAqB,EAAE,WAAW,CAC7D,CACJ,CAAC;IACN,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,uEAAuE;AACvE,SAAS,8BAA8B,CACnC,OAA0B,EAC1B,UAAkB,EAClB,MAA4B,EAC5B,YAAqB;IAErB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC;gBACJ,IAAI,EAAE,aAAa,CAAC,gCAAgC;gBACpD,OAAO,EAAE,uEAAuE;gBAChF,IAAI,EAAE,GAAG,UAAU,UAAU;aAChC,CAAC,CAAC;IACP,CAAC;IACD,2EAA2E;IAC3E,0EAA0E;IAC1E,OAAO,EAAE,CAAC;AACd,CAAC;AAED,oEAAoE;AACpE,+DAA+D;AAC/D,6DAA6D;AAC7D,EAAE;AACF,+EAA+E;AAC/E,+CAA+C;AAC/C,8EAA8E;AAC9E,uEAAuE;AACvE,SAAS,+BAA+B,CACpC,MAAmD,EACnD,UAAkB,EAClB,MAA4B,EAC5B,WAAoB;IAEpB,+BAA+B;IAC/B,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,6BAA6B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC7D,CAAC;IAED,+DAA+D;IAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAC1B,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,gBAAgB,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,CAClG,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACb,OAAO,4BAA4B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5D,CAAC;IAED,wDAAwD;IACxD,OAAO,CAAC;YACJ,IAAI,EAAE,aAAa,CAAC,yBAAyB;YAC7C,OAAO,EAAE,4FAA4F;YACrG,IAAI,EAAE,GAAG,UAAU,iCAAiC;YACpD,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;YACzC,MAAM,EAAE,MAAM,CAAC,EAAE;SACpB,CAAC,CAAC;AACP,CAAC;AAED,iDAAiD;AACjD,SAAS,6BAA6B,CAClC,MAAmD,EACnD,UAAkB;IAElB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,yDAAyD;IACzD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvB,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,8BAA8B;YAClD,OAAO,EAAE,qDAAqD;YAC9D,IAAI,EAAE,GAAG,UAAU,mCAAmC;YACtD,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,MAAM,CAAC,IAAI;SACtB,CAAC,CAAC;IACP,CAAC;IAED,IAAI,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,8BAA8B;gBAClD,OAAO,EAAE,0CAA0C;gBACnD,IAAI,EAAE,GAAG,UAAU,oCAAoC;gBACvD,MAAM,EAAE,MAAM,CAAC,KAAK;aACvB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,8BAA8B;YAClD,OAAO,EAAE,oDAAoD;YAC7D,IAAI,EAAE,GAAG,UAAU,oCAAoC;YACvD,MAAM,EAAE,MAAM,CAAC,KAAK;SACvB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,oEAAoE;AACpE,SAAS,4BAA4B,CACjC,MAAmD,EACnD,UAAkB;IAElB,IAAI,CAAC;QACD,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,CAAC;gBACJ,IAAI,EAAE,aAAa,CAAC,8BAA8B;gBAClD,OAAO,EAAE,sDAAsD;gBAC/D,IAAI,EAAE,GAAG,UAAU,mCAAmC;gBACtD,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,OAAO,EAAE,CAAC;aACb,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,SAAS,wBAAwB,CAC7B,OAA8B;IAE9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAyB,EAAE,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,CAAC,IAAI,CAAC;gBACR,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;aACtB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/esm/validations/evm-op-hook.js

@@ -0,0 +1,5 @@
+// TODO: Hook operation validation rules
+export function validateHookOperations(_actions, _basePath) {
+    return [];
+}
+//# sourceMappingURL=evm-op-hook.js.map

package/dist/esm/validations/evm-op-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-op-hook.js","sourceRoot":"","sources":["../../../src/validations/evm-op-hook.ts"],"names":[],"mappings":"AAEA,wCAAwC;AAExC,MAAM,UAAU,sBAAsB,CAClC,QAA6B,EAC7B,SAAiB;IAEjB,OAAO,EAAE,CAAC;AACd,CAAC"}

package/dist/esm/validations/evm-op-wrap.js

@@ -0,0 +1,109 @@
+import { ViolationCode, EvmActionOperation, } from "../types/index.js";
+import { zeroAddress } from "viem";
+import { isWhitelisted } from "../whitelists/types.js";
+import { WETH_CONTRACTS } from "../whitelists/evm/index.js";
+import { isDepositCalldata, DEPOSIT_SELECTOR } from "../helpers/evm-calldata.js";
+import { isNativeToken } from "../helpers/evm-token.js";
+import { sumTradeAmounts } from "../helpers/evm-trade-amounts.js";
+import { getTransactionCalls } from "../helpers/evm-action.js";
+export function validateWrapOperations(actions, basePath, trades, realChainId) {
+    const violations = [];
+    for (let i = 0; i < actions.length; i++) {
+        const action = actions[i];
+        if (!action.actions.includes(EvmActionOperation.Wrap))
+            continue;
+        const actionPath = `${basePath}.requiredActions[${i}]`;
+        const txCalls = getTransactionCalls(action);
+        // CRITICAL: transactionCalls must be present
+        if (txCalls.length === 0) {
+            violations.push({
+                code: ViolationCode.WrapTransactionCallsMissing,
+                message: `Wrap must have at least one transactionCall`,
+                path: `${actionPath}.details.transactionCalls`,
+                actual: [],
+            });
+            continue;
+        }
+        // CRITICAL: Wrap must have exactly one transactionCall (deposit)
+        if (txCalls.length > 1) {
+            violations.push({
+                code: ViolationCode.WrapTooManyTransactionCalls,
+                message: `Wrap must have exactly 1 transactionCall`,
+                path: `${actionPath}.details.transactionCalls`,
+                expected: 1,
+                actual: txCalls.length,
+            });
+        }
+        violations.push(...validateWrapNativeToken(trades, actionPath), ...validateWrapTo(txCalls[0], actionPath, realChainId), ...validateWrapCalldata(txCalls[0], actionPath), ...validateWrapAmount(txCalls[0], actionPath, trades, realChainId));
+    }
+    return violations;
+}
+// CRITICAL: native token must be present in trades
+function validateWrapNativeToken(trades, actionPath) {
+    const hasNative = trades.some(t => isNativeToken(t.srcChainTokenIn));
+    if (!hasNative) {
+        return [{
+                code: ViolationCode.WrapNativeTokenNotInTrades,
+                message: `Wrap requires a native token in request trades`,
+                path: `${actionPath}.actions`,
+            }];
+    }
+    return [];
+}
+// CRITICAL: transactionCalls[].to must be a WETH contract
+function validateWrapTo(txCall, actionPath, realChainId) {
+    if (!isWhitelisted(WETH_CONTRACTS, realChainId, txCall.to)) {
+        return [{
+                code: ViolationCode.WrapToNotWeth,
+                message: `Wrap transactionCalls[0].to must be a WETH contract`,
+                path: `${actionPath}.details.transactionCalls[0].to`,
+                actual: txCall.to,
+            }];
+    }
+    return [];
+}
+// CRITICAL: calldata must be deposit() selector
+function validateWrapCalldata(txCall, actionPath) {
+    if (!isDepositCalldata(txCall.data)) {
+        return [{
+                code: ViolationCode.WrapCalldataInvalid,
+                message: `Wrap calldata must be deposit() function selector`,
+                path: `${actionPath}.details.transactionCalls[0].data`,
+                expected: DEPOSIT_SELECTOR,
+                actual: txCall.data,
+            }];
+    }
+    return [];
+}
+// CRITICAL: deposit amount (from value) must match sum of native trade amounts
+function validateWrapAmount(txCall, actionPath, trades, realChainId) {
+    const sumResult = sumTradeAmounts(trades, zeroAddress, realChainId);
+    if (sumResult.violations)
+        return sumResult.violations;
+    if (sumResult.skip)
+        return [];
+    const sum = sumResult.sum;
+    try {
+        const depositAmount = BigInt(txCall.value);
+        if (depositAmount !== sum) {
+            return [{
+                    code: ViolationCode.WrapAmountMismatch,
+                    message: `Wrap deposit amount does not match sum of native trade amounts`,
+                    path: `${actionPath}.details.transactionCalls[0].value`,
+                    expected: sum.toString(),
+                    actual: depositAmount.toString(),
+                }];
+        }
+    }
+    catch {
+        return [{
+                code: ViolationCode.WrapAmountMismatch,
+                message: `Wrap deposit value is not a valid number`,
+                path: `${actionPath}.details.transactionCalls[0].value`,
+                expected: sum.toString(),
+                actual: txCall.value,
+            }];
+    }
+    return [];
+}
+//# sourceMappingURL=evm-op-wrap.js.map

package/dist/esm/validations/evm-op-wrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-op-wrap.js","sourceRoot":"","sources":["../../../src/validations/evm-op-wrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,aAAa,EAEb,kBAAkB,GAIrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,UAAU,sBAAsB,CAClC,OAA4B,EAC5B,QAAgB,EAChB,MAAsB,EACtB,WAAoB;IAEpB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAAE,SAAS;QAEhE,MAAM,UAAU,GAAG,GAAG,QAAQ,oBAAoB,CAAC,GAAG,CAAC;QACvD,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAE5C,6CAA6C;QAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,2BAA2B;gBAC/C,OAAO,EAAE,6CAA6C;gBACtD,IAAI,EAAE,GAAG,UAAU,2BAA2B;gBAC9C,MAAM,EAAE,EAAE;aACb,CAAC,CAAC;YACH,SAAS;QACb,CAAC;QAED,iEAAiE;QACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,2BAA2B;gBAC/C,OAAO,EAAE,0CAA0C;gBACnD,IAAI,EAAE,GAAG,UAAU,2BAA2B;gBAC9C,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,OAAO,CAAC,MAAM;aACzB,CAAC,CAAC;QACP,CAAC;QAED,UAAU,CAAC,IAAI,CACX,GAAG,uBAAuB,CAAC,MAAM,EAAE,UAAU,CAAC,EAC9C,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,EACtD,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAC/C,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CACrE,CAAC;IACN,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,mDAAmD;AACnD,SAAS,uBAAuB,CAC5B,MAAsB,EACtB,UAAkB;IAElB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,OAAO,CAAC;gBACJ,IAAI,EAAE,aAAa,CAAC,0BAA0B;gBAC9C,OAAO,EAAE,gDAAgD;gBACzD,IAAI,EAAE,GAAG,UAAU,UAAU;aAChC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,0DAA0D;AAC1D,SAAS,cAAc,CACnB,MAA0B,EAC1B,UAAkB,EAClB,WAAoB;IAEpB,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC;gBACJ,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO,EAAE,qDAAqD;gBAC9D,IAAI,EAAE,GAAG,UAAU,iCAAiC;gBACpD,MAAM,EAAE,MAAM,CAAC,EAAE;aACpB,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,gDAAgD;AAChD,SAAS,oBAAoB,CACzB,MAA0B,EAC1B,UAAkB;IAElB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC;gBACJ,IAAI,EAAE,aAAa,CAAC,mBAAmB;gBACvC,OAAO,EAAE,mDAAmD;gBAC5D,IAAI,EAAE,GAAG,UAAU,mCAAmC;gBACtD,QAAQ,EAAE,gBAAgB;gBAC1B,MAAM,EAAE,MAAM,CAAC,IAAI;aACtB,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,SAAS,kBAAkB,CACvB,MAA0B,EAC1B,UAAkB,EAClB,MAAsB,EACtB,WAAoB;IAEpB,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IACpE,IAAI,SAAS,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC,UAAU,CAAC;IACtD,IAAI,SAAS,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAE9B,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC;IAC1B,IAAI,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO,CAAC;oBACJ,IAAI,EAAE,aAAa,CAAC,kBAAkB;oBACtC,OAAO,EAAE,gEAAgE;oBACzE,IAAI,EAAE,GAAG,UAAU,oCAAoC;oBACvD,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;oBACxB,MAAM,EAAE,aAAa,CAAC,QAAQ,EAAE;iBACnC,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,CAAC;gBACJ,IAAI,EAAE,aAAa,CAAC,kBAAkB;gBACtC,OAAO,EAAE,0CAA0C;gBACnD,IAAI,EAAE,GAAG,UAAU,oCAAoC;gBACvD,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;gBACxB,MAAM,EAAE,MAAM,CAAC,KAAK;aACvB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,EAAE,CAAC;AACd,CAAC"}