@debridge-finance/borderless-validation-sdk 0.0.1 → 0.0.2

package/dist/cjs/validations/intent-tokens.js

@@ -0,0 +1,347 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateIntentTokens = validateIntentTokens;
+const types_1 = require("../types");
+const address_1 = require("../helpers/address");
+const evm_token_1 = require("../helpers/evm-token");
+const subscription_to_chain_id_1 = require("../whitelists/subscription-to-chain-id");
+function validateIntentTokens(ctx, basePath) {
+    const intent = ctx.intentPayload.intent;
+    const group = ctx.tradeGroup;
+    const resolution = resolveGroupInputTokens(group);
+    return [
+        ...resolution.violations,
+        ...validateInputTokens(intent.inputToken, ctx, resolution.expected, `${basePath}.inputToken`),
+        ...validateGiveTokens(intent, group, `${basePath}.giveToken`),
+        ...validateTakeTokens(intent, group, `${basePath}.takeToken`),
+    ];
+}
+// Resolves every request trade's srcChainTokenIn to its expected on-chain
+// address (wrapped mint for native tokens) and returns the deduplicated set.
+// A trade fails to resolve when it specifies a native token for a chain that
+// has no WETH mapping in our whitelist. Each failure emits a dedicated violation
+// so the caller knows which trade is unverifiable.
+function resolveGroupInputTokens(group) {
+    const expected = new Set();
+    const violations = [];
+    for (let i = 0; i < group.trades.length; i++) {
+        const trade = group.trades[i];
+        const resolved = (0, evm_token_1.resolveWrappedTokenAddress)(trade.srcChainTokenIn, group.realChainId);
+        if (resolved === undefined) {
+            violations.push({
+                code: types_1.ViolationCode.IntentInputTokenWrappedAddressUnknown,
+                message: "cannot resolve wrapped token address: native token on a"
+                    + " chain with no WETH mapping in the whitelist",
+                path: `request.trades[${group.tradeIndices[i]}].srcChainTokenIn`,
+                actual: trade.srcChainTokenIn,
+            });
+            continue;
+        }
+        expected.add((0, address_1.normalizeAddress)(group.realChainId, resolved));
+    }
+    return { expected, violations };
+}
+// CRITICAL: intent.inputToken[] must represent exactly the set of unique
+// srcChainTokenIn addresses from the group's trades (native → wrapped).
+// Missing expected addresses, duplicate entries, and unknown addresses are
+// each reported as specific violations.
+function validateInputTokens(inputTokens, ctx, expectedTokens, basePath) {
+    const group = ctx.tradeGroup;
+    const actual = inputTokens ?? [];
+    const violations = [];
+    const actualAddresses = actual.map(t => (0, address_1.normalizeAddress)(group.realChainId, t.address));
+    const firstOccurrence = new Map();
+    for (let i = 0; i < actualAddresses.length; i++) {
+        const address = actualAddresses[i];
+        const earlier = firstOccurrence.get(address);
+        if (earlier !== undefined) {
+            violations.push({
+                code: types_1.ViolationCode.IntentInputTokenDuplicate,
+                message: `intent.inputToken[${i}] duplicates the entry at index `
+                    + `${earlier} — each srcChainTokenIn (or its wrapped `
+                    + `equivalent) must appear once`,
+                path: `${basePath}[${i}].address`,
+                actual: address,
+            });
+        }
+        else {
+            firstOccurrence.set(address, i);
+        }
+    }
+    for (const expectedToken of expectedTokens) {
+        if (!firstOccurrence.has(expectedToken)) {
+            violations.push({
+                code: types_1.ViolationCode.IntentInputTokenMissing,
+                message: "an expected srcChainTokenIn address (or its wrapped "
+                    + "equivalent) is missing from intent.inputToken[]",
+                path: basePath,
+                expected: expectedToken,
+            });
+        }
+    }
+    // Validate each unique entry (duplicates were already reported above)
+    for (const [address, i] of firstOccurrence) {
+        if (!expectedTokens.has(address)) {
+            violations.push({
+                code: types_1.ViolationCode.IntentInputTokenAddressMismatch,
+                message: "intent.inputToken[].address does not match any request"
+                    + " srcChainTokenIn (including native-to-wrapped resolution)",
+                path: `${basePath}[${i}].address`,
+                expected: Array.from(expectedTokens),
+                actual: address,
+            });
+            continue;
+        }
+        violations.push(...validateConstraintBudget(actual[i], ctx, address, `${basePath}[${i}]`));
+    }
+    return violations;
+}
+// CRITICAL: constraintBudget equals the sum of request amounts for trades
+// whose srcChainTokenIn resolves to this inputToken.address. Sums only the
+// trades the API folded into THIS intent (one trade group can split into
+// several intents by dlnHook/metadata).
+// Skipped when any contributing trade has non-numeric amount ('auto'/'max')
+// or when any has prependOperatingExpenses=true (API adds unpredictable costs).
+function validateConstraintBudget(inputToken, ctx, normalizedAddress, basePath) {
+    const realChainId = ctx.tradeGroup.realChainId;
+    const contributingTrades = ctx.intentTrades.filter(trade => {
+        const resolved = (0, evm_token_1.resolveWrappedTokenAddress)(trade.srcChainTokenIn, realChainId);
+        // Safe skip: unresolved input tokens are already reported by
+        // resolveGroupInputTokens.
+        if (resolved === undefined)
+            return false;
+        return (0, address_1.normalizeAddress)(realChainId, resolved) === normalizedAddress;
+    });
+    if (!canPredictBudget(contributingTrades)) {
+        return [];
+    }
+    const expectedSum = contributingTrades.reduce((acc, trade) => acc + BigInt(trade.srcChainTokenInAmount), 0n);
+    let actualBudget;
+    try {
+        actualBudget = BigInt(inputToken.constraintBudget);
+    }
+    catch (error) {
+        return [{
+                code: types_1.ViolationCode.IntentNumericValueInvalid,
+                message: "intent.inputToken[].constraintBudget is not a valid number",
+                path: `${basePath}.constraintBudget`,
+                actual: inputToken.constraintBudget,
+                details: error,
+            }];
+    }
+    if (actualBudget !== expectedSum) {
+        return [{
+                code: types_1.ViolationCode.IntentConstraintBudgetMismatch,
+                message: "intent.inputToken[].constraintBudget must equal the sum of"
+                    + " request srcChainTokenInAmount values for the matching trades",
+                path: `${basePath}.constraintBudget`,
+                expected: expectedSum.toString(),
+                actual: inputToken.constraintBudget,
+            }];
+    }
+    return [];
+}
+function canPredictBudget(trades) {
+    return trades.every(trade => isNumericAmount(trade.srcChainTokenInAmount) &&
+        trade.prependOperatingExpenses !== true);
+}
+function isNumericAmount(amount) {
+    if (amount === types_1.SpecialAmount.Auto || amount === types_1.SpecialAmount.Max)
+        return false;
+    try {
+        BigInt(amount);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// CRITICAL: each giveToken[].inputTokenAddress must equal one of
+// intent.inputToken[].address that is used by at least one cross-chain trade
+// in the group. Same-chain trades do not produce giveToken entries.
+// inputToken[] is separately validated against the request, so this rule
+// forms a chain of trust: give → input → request.
+function validateGiveTokens(intent, group, basePath) {
+    const allowed = collectInputAddressesForCrossChainTrades(intent, group);
+    const giveTokens = intent.giveToken ?? [];
+    if (allowed.size === 0) {
+        if (giveTokens.length > 0) {
+            return [{
+                    code: types_1.ViolationCode.IntentGiveTokenNotEmptyForSameChain,
+                    message: "intent.giveToken[] must be empty or undefined when no"
+                        + " trade in the group is cross-chain",
+                    path: basePath,
+                    expected: 0,
+                    actual: giveTokens.length,
+                }];
+        }
+        return [];
+    }
+    const violations = [];
+    const expectedFormat = (0, address_1.getChainEngine)(group.realChainId);
+    for (let i = 0; i < giveTokens.length; i++) {
+        const normalized = (0, address_1.normalizeAddress)(group.realChainId, giveTokens[i].inputTokenAddress);
+        if (!allowed.has(normalized)) {
+            violations.push({
+                code: types_1.ViolationCode.IntentGiveTokenInputAddressMismatch,
+                message: "intent.giveToken[].inputTokenAddress must equal one of"
+                    + " intent.inputToken[].address used by a cross-chain"
+                    + " trade in the group",
+                path: `${basePath}[${i}].inputTokenAddress`,
+                expected: Array.from(allowed),
+                actual: giveTokens[i].inputTokenAddress,
+            });
+        }
+        // CRITICAL: giveTokenAddress is a bridge token in src chain — its value
+        // is API-determined and unpredictable, but its format must match the
+        // intent chain's engine.
+        const actualFormat = (0, address_1.detectChainEngine)(giveTokens[i].giveTokenAddress);
+        if (actualFormat !== expectedFormat) {
+            violations.push({
+                code: types_1.ViolationCode.IntentGiveTokenAddressFormatMismatch,
+                message: `intent.giveToken[].giveTokenAddress format (${types_1.ChainEngine[actualFormat]})`
+                    + ` does not match the intent chain engine`
+                    + ` (${types_1.ChainEngine[expectedFormat]})`,
+                path: `${basePath}[${i}].giveTokenAddress`,
+                expected: types_1.ChainEngine[expectedFormat],
+                actual: giveTokens[i].giveTokenAddress,
+            });
+        }
+    }
+    return violations;
+}
+// Returns the subset of intent.inputToken[].address values that also appear
+// as the (native-resolved) srcChainTokenIn of a cross-chain trade in the group.
+function collectInputAddressesForCrossChainTrades(intent, group) {
+    const inputAddresses = new Set((intent.inputToken ?? []).map(t => (0, address_1.normalizeAddress)(group.realChainId, t.address)));
+    const result = new Set();
+    for (const trade of group.trades) {
+        if (!isCrossChain(trade))
+            continue;
+        const resolved = (0, evm_token_1.resolveWrappedTokenAddress)(trade.srcChainTokenIn, group.realChainId);
+        // Safe skip: unresolved input tokens are already reported by
+        // resolveGroupInputTokens.
+        if (resolved === undefined)
+            continue;
+        const normalized = (0, address_1.normalizeAddress)(group.realChainId, resolved);
+        if (inputAddresses.has(normalized)) {
+            result.add(normalized);
+        }
+    }
+    return result;
+}
+function isCrossChain(trade) {
+    return trade.srcChainId !== trade.dstChainId;
+}
+// CRITICAL: intent.takeToken[] must represent exactly the set of unique
+// (dstChainId, dstChainTokenOut) pairs from the group's trades. Missing pairs,
+// duplicate entries, and unknown chainId/address combinations are each reported
+// as specific violations.
+// CRITICAL: fromTokenAddress must be in inputToken[] (same-chain) or giveToken[]
+// (cross-chain).
+function validateTakeTokens(intent, group, basePath) {
+    const violations = [];
+    const expectedTakeTokens = buildExpectedTakeTokens(group);
+    const actualKeys = intent.takeToken.map(takeToken => buildTakeTokenKey(takeToken));
+    const firstOccurrence = new Map();
+    for (let i = 0; i < actualKeys.length; i++) {
+        const key = actualKeys[i];
+        const earlier = firstOccurrence.get(key);
+        if (earlier !== undefined) {
+            violations.push({
+                code: types_1.ViolationCode.IntentTakeTokenDuplicate,
+                message: `intent.takeToken[${i}] duplicates the entry at`
+                    + ` index ${earlier} — each (takeTokenChainId,`
+                    + ` takeTokenAddress) pair must appear once`,
+                path: `${basePath}[${i}]`,
+                actual: key,
+            });
+        }
+        else {
+            firstOccurrence.set(key, i);
+        }
+    }
+    for (const expectedTakeToken of expectedTakeTokens) {
+        if (!firstOccurrence.has(expectedTakeToken)) {
+            violations.push({
+                code: types_1.ViolationCode.IntentTakeTokenMissing,
+                message: "an expected (dstChainId, dstChainTokenOut) pair is"
+                    + " missing from intent.takeToken[]",
+                path: basePath,
+                expected: expectedTakeToken,
+            });
+        }
+    }
+    // Validate each unique entry (duplicates are already reported above)
+    for (const [, i] of firstOccurrence) {
+        violations.push(...validateSingleTakeToken(intent, intent.takeToken[i], group, expectedTakeTokens, `${basePath}[${i}]`));
+    }
+    return violations;
+}
+// Single source of truth for the "chainId:normalizedAddress" key format used
+// to compare takeToken entries as a set. If realChainId is unknown we skip
+// normalization so the function can still produce a deterministic key for
+// duplicate detection; the chainId mismatch is flagged separately.
+function buildChainTokenKey(chainId, realChainId, address) {
+    const normalized = realChainId !== undefined
+        ? (0, address_1.normalizeAddress)(realChainId, address)
+        : address;
+    return `${chainId}:${normalized}`;
+}
+function buildTakeTokenKey(takeToken) {
+    return buildChainTokenKey(takeToken.takeTokenChainId, (0, subscription_to_chain_id_1.resolveChainId)(takeToken.takeTokenChainId), takeToken.takeTokenAddress);
+}
+function buildExpectedTakeTokens(group) {
+    const set = new Set();
+    for (const trade of group.trades) {
+        const dstRealChainId = (0, subscription_to_chain_id_1.resolveChainId)(trade.dstChainId);
+        // Safe skip: unknown subscriptionId for dstChainId is reported elsewhere
+        // (validateTrades reports UnknownSubscriptionId for dstChainId)
+        if (dstRealChainId === undefined)
+            continue;
+        set.add(buildChainTokenKey(trade.dstChainId, dstRealChainId, trade.dstChainTokenOut));
+    }
+    return set;
+}
+function validateSingleTakeToken(intent, takeToken, group, expected, basePath) {
+    const violations = [];
+    const dstRealChainId = (0, subscription_to_chain_id_1.resolveChainId)(takeToken.takeTokenChainId);
+    // Safe skip: unknown subscriptionId for dstChainId is reported elsewhere
+    // (validateTrades reports UnknownSubscriptionId for dstChainId)
+    if (dstRealChainId !== undefined) {
+        const key = buildChainTokenKey(takeToken.takeTokenChainId, dstRealChainId, takeToken.takeTokenAddress);
+        if (!expected.has(key)) {
+            violations.push({
+                code: types_1.ViolationCode.IntentTakeTokenAddressMismatch,
+                message: "intent.takeToken[] (takeTokenChainId, takeTokenAddress)"
+                    + " pair does not match any request (dstChainId,"
+                    + " dstChainTokenOut) pair in the trade group",
+                path: basePath,
+                expected: Array.from(expected),
+                actual: key,
+            });
+        }
+    }
+    violations.push(...validateTakeTokenFromAddress(intent, takeToken, group, basePath));
+    return violations;
+}
+function validateTakeTokenFromAddress(intent, takeToken, group, basePath) {
+    const isSameChain = takeToken.takeTokenChainId === group.srcChainId;
+    const normalized = (0, address_1.normalizeAddress)(group.realChainId, takeToken.fromTokenAddress);
+    const allowedSet = isSameChain
+        ? new Set((intent.inputToken ?? []).map(t => (0, address_1.normalizeAddress)(group.realChainId, t.address)))
+        : new Set((intent.giveToken ?? []).map(t => (0, address_1.normalizeAddress)(group.realChainId, t.giveTokenAddress)));
+    if (!allowedSet.has(normalized)) {
+        return [{
+                code: types_1.ViolationCode.IntentTakeTokenFromAddressInvalid,
+                message: isSameChain
+                    ? "intent.takeToken[].fromTokenAddress must be present in intent.inputToken[].address for same-chain trades"
+                    : "intent.takeToken[].fromTokenAddress must be present in intent.giveToken[].giveTokenAddress for cross-chain trades",
+                path: `${basePath}.fromTokenAddress`,
+                expected: Array.from(allowedSet),
+                actual: takeToken.fromTokenAddress,
+            }];
+    }
+    return [];
+}
+//# sourceMappingURL=intent-tokens.js.map

package/dist/cjs/validations/intent-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent-tokens.js","sourceRoot":"","sources":["../../../src/validations/intent-tokens.ts"],"names":[],"mappings":";;AAoBA,oDAgBC;AApCD,oCAUkB;AAElB,gDAI4B;AAC5B,oDAAkE;AAClE,qFAAwE;AAExE,SAAgB,oBAAoB,CAChC,GAAkB,EAClB,QAAgB;IAEhB,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC;IAC7B,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAElD,OAAO;QACH,GAAG,UAAU,CAAC,UAAU;QACxB,GAAG,mBAAmB,CAClB,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,GAAG,QAAQ,aAAa,CACxE;QACD,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,YAAY,CAAC;QAC7D,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,YAAY,CAAC;KAChE,CAAC;AACN,CAAC;AAED,0EAA0E;AAC1E,6EAA6E;AAC7E,6EAA6E;AAC7E,iFAAiF;AACjF,mDAAmD;AACnD,SAAS,uBAAuB,CAAC,KAAiB;IAI9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAE9B,MAAM,QAAQ,GAAG,IAAA,sCAA0B,EACvC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,WAAW,CAC3C,CAAC;QAEF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,qCAAqC;gBACzD,OAAO,EACH,yDAAyD;sBACvD,8CAA8C;gBACpD,IAAI,EAAE,kBAAkB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,mBAAmB;gBAChE,MAAM,EAAE,KAAK,CAAC,eAAe;aAChC,CAAC,CAAC;YACH,SAAS;QACb,CAAC;QAED,QAAQ,CAAC,GAAG,CAAC,IAAA,0BAAgB,EAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACpC,CAAC;AAED,yEAAyE;AACzE,wEAAwE;AACxE,2EAA2E;AAC3E,wCAAwC;AACxC,SAAS,mBAAmB,CACxB,WAA6C,EAC7C,GAAkB,EAClB,cAA2B,EAC3B,QAAgB;IAEhB,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC;IAC7B,MAAM,MAAM,GAAG,WAAW,IAAI,EAAE,CAAC;IACjC,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAC9B,CAAC,CAAC,EAAE,CAAC,IAAA,0BAAgB,EAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CACtD,CAAC;IAEF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,yBAAyB;gBAC7C,OAAO,EACH,qBAAqB,CAAC,kCAAkC;sBACtD,GAAG,OAAO,0CAA0C;sBACpD,8BAA8B;gBACpC,IAAI,EAAE,GAAG,QAAQ,IAAI,CAAC,WAAW;gBACjC,MAAM,EAAE,OAAO;aAClB,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;QACzC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,uBAAuB;gBAC3C,OAAO,EACH,sDAAsD;sBACpD,iDAAiD;gBACvD,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,aAAa;aAC1B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,+BAA+B;gBACnD,OAAO,EACH,wDAAwD;sBACtD,2DAA2D;gBACjE,IAAI,EAAE,GAAG,QAAQ,IAAI,CAAC,WAAW;gBACjC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;gBACpC,MAAM,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,SAAS;QACb,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,GAAG,wBAAwB,CACvC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,QAAQ,IAAI,CAAC,GAAG,CAC/C,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,wCAAwC;AACxC,4EAA4E;AAC5E,gFAAgF;AAChF,SAAS,wBAAwB,CAC7B,UAA8B,EAC9B,GAAkB,EAClB,iBAAyB,EACzB,QAAgB;IAEhB,MAAM,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;IAC/C,MAAM,kBAAkB,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACvD,MAAM,QAAQ,GAAG,IAAA,sCAA0B,EACvC,KAAK,CAAC,eAAe,EAAE,WAAW,CACrC,CAAC;QACF,6DAA6D;QAC7D,2BAA2B;QAC3B,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACzC,OAAO,IAAA,0BAAgB,EAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,iBAAiB,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CACzC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,EAAE,CAChE,CAAC;IAEF,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACD,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC;gBACJ,IAAI,EAAE,qBAAa,CAAC,yBAAyB;gBAC7C,OAAO,EAAE,4DAA4D;gBACrE,IAAI,EAAE,GAAG,QAAQ,mBAAmB;gBACpC,MAAM,EAAE,UAAU,CAAC,gBAAgB;gBACnC,OAAO,EAAE,KAAK;aACjB,CAAC,CAAC;IACP,CAAC;IAED,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QAC/B,OAAO,CAAC;gBACJ,IAAI,EAAE,qBAAa,CAAC,8BAA8B;gBAClD,OAAO,EACH,4DAA4D;sBAC1D,+DAA+D;gBACrE,IAAI,EAAE,GAAG,QAAQ,mBAAmB;gBACpC,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE;gBAChC,MAAM,EAAE,UAAU,CAAC,gBAAgB;aACtC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,EAAE,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAsB;IAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CACxB,eAAe,CAAC,KAAK,CAAC,qBAAqB,CAAC;QAC5C,KAAK,CAAC,wBAAwB,KAAK,IAAI,CAC1C,CAAC;AACN,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACnC,IAAI,MAAM,KAAK,qBAAa,CAAC,IAAI,IAAI,MAAM,KAAK,qBAAa,CAAC,GAAG;QAC7D,OAAO,KAAK,CAAC;IAEjB,IAAI,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,CAAC;QACf,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,iEAAiE;AACjE,6EAA6E;AAC7E,oEAAoE;AACpE,yEAAyE;AACzE,kDAAkD;AAClD,SAAS,kBAAkB,CACvB,MAAsB,EACtB,KAAiB,EACjB,QAAgB;IAEhB,MAAM,OAAO,GAAG,wCAAwC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IAE1C,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC;oBACJ,IAAI,EAAE,qBAAa,CAAC,mCAAmC;oBACvD,OAAO,EACH,uDAAuD;0BACrD,oCAAoC;oBAC1C,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC5B,CAAC,CAAC;QACP,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,cAAc,GAAG,IAAA,wBAAc,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAEzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAA,0BAAgB,EAC/B,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,iBAAiB,CACrD,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,mCAAmC;gBACvD,OAAO,EACH,wDAAwD;sBACtD,oDAAoD;sBACpD,qBAAqB;gBAC3B,IAAI,EAAE,GAAG,QAAQ,IAAI,CAAC,qBAAqB;gBAC3C,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,iBAAiB;aAC1C,CAAC,CAAC;QACP,CAAC;QAED,wEAAwE;QACxE,qEAAqE;QACrE,yBAAyB;QACzB,MAAM,YAAY,GAAG,IAAA,2BAAiB,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QACvE,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;YAClC,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,oCAAoC;gBACxD,OAAO,EACH,+CAA+C,mBAAW,CAAC,YAAY,CAAC,GAAG;sBACzE,yCAAyC;sBACzC,KAAK,mBAAW,CAAC,cAAc,CAAC,GAAG;gBACzC,IAAI,EAAE,GAAG,QAAQ,IAAI,CAAC,oBAAoB;gBAC1C,QAAQ,EAAE,mBAAW,CAAC,cAAc,CAAC;gBACrC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,gBAAgB;aACzC,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,4EAA4E;AAC5E,gFAAgF;AAChF,SAAS,wCAAwC,CAC7C,MAAsB,EACtB,KAAiB;IAEjB,MAAM,cAAc,GAAG,IAAI,GAAG,CAC1B,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CACzB,CAAC,CAAC,EAAE,CAAC,IAAA,0BAAgB,EAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CACtD,CACJ,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAAE,SAAS;QAEnC,MAAM,QAAQ,GAAG,IAAA,sCAA0B,EACvC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,WAAW,CAC3C,CAAC;QACF,6DAA6D;QAC7D,2BAA2B;QAC3B,IAAI,QAAQ,KAAK,SAAS;YAAE,SAAS;QAErC,MAAM,UAAU,GAAG,IAAA,0BAAgB,EAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACjE,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,KAAmB;IACrC,OAAO,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC;AACjD,CAAC;AAED,wEAAwE;AACxE,+EAA+E;AAC/E,gFAAgF;AAChF,0BAA0B;AAC1B,iFAAiF;AACjF,iBAAiB;AACjB,SAAS,kBAAkB,CACvB,MAAsB,EACtB,KAAiB,EACjB,QAAgB;IAEhB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;IAEnF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,wBAAwB;gBAC5C,OAAO,EACH,oBAAoB,CAAC,2BAA2B;sBAC9C,UAAU,OAAO,4BAA4B;sBAC7C,0CAA0C;gBAChD,IAAI,EAAE,GAAG,QAAQ,IAAI,CAAC,GAAG;gBACzB,MAAM,EAAE,GAAG;aACd,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAChC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,iBAAiB,IAAI,kBAAkB,EAAE,CAAC;QACjD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,sBAAsB;gBAC1C,OAAO,EACH,oDAAoD;sBAClD,kCAAkC;gBACxC,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,iBAAiB;aAC9B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,GAAG,uBAAuB,CACtC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,QAAQ,IAAI,CAAC,GAAG,CAC9E,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,mEAAmE;AACnE,SAAS,kBAAkB,CACvB,OAAe,EACf,WAAgC,EAChC,OAAe;IAEf,MAAM,UAAU,GAAG,WAAW,KAAK,SAAS;QACxC,CAAC,CAAC,IAAA,0BAAgB,EAAC,WAAW,EAAE,OAAO,CAAC;QACxC,CAAC,CAAC,OAAO,CAAC;IAEd,OAAO,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CAAC,SAA4B;IACnD,OAAO,kBAAkB,CACrB,SAAS,CAAC,gBAAgB,EAC1B,IAAA,yCAAc,EAAC,SAAS,CAAC,gBAAgB,CAAC,EAC1C,SAAS,CAAC,gBAAgB,CAC7B,CAAC;AACN,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAiB;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,cAAc,GAAG,IAAA,yCAAc,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACxD,yEAAyE;QACzE,gEAAgE;QAChE,IAAI,cAAc,KAAK,SAAS;YAAE,SAAS;QAE3C,GAAG,CAAC,GAAG,CAAC,kBAAkB,CACtB,KAAK,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAC3D,CAAC,CAAC;IACP,CAAC;IAED,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAC5B,MAAsB,EACtB,SAA4B,EAC5B,KAAiB,EACjB,QAAqB,EACrB,QAAgB;IAEhB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,cAAc,GAAG,IAAA,yCAAc,EAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAElE,yEAAyE;IACzE,gEAAgE;IAChE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,kBAAkB,CAC1B,SAAS,CAAC,gBAAgB,EAAE,cAAc,EAAE,SAAS,CAAC,gBAAgB,CACzE,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,8BAA8B;gBAClD,OAAO,EACH,yDAAyD;sBACvD,+CAA+C;sBAC/C,4CAA4C;gBAClD,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC9B,MAAM,EAAE,GAAG;aACd,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,GAAG,4BAA4B,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAErF,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,4BAA4B,CACjC,MAAsB,EACtB,SAA4B,EAC5B,KAAiB,EACjB,QAAgB;IAEhB,MAAM,WAAW,GAAG,SAAS,CAAC,gBAAgB,KAAK,KAAK,CAAC,UAAU,CAAC;IACpE,MAAM,UAAU,GAAG,IAAA,0BAAgB,EAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAEnF,MAAM,UAAU,GAAG,WAAW;QAC1B,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CACnC,CAAC,CAAC,EAAE,CAAC,IAAA,0BAAgB,EAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CACtD,CAAC;QACF,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAClC,CAAC,CAAC,EAAE,CAAC,IAAA,0BAAgB,EAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAC/D,CAAC,CAAC;IAEP,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC;gBACJ,IAAI,EAAE,qBAAa,CAAC,iCAAiC;gBACrD,OAAO,EAAE,WAAW;oBAChB,CAAC,CAAC,0GAA0G;oBAC5G,CAAC,CAAC,mHAAmH;gBACzH,IAAI,EAAE,GAAG,QAAQ,mBAAmB;gBACpC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;gBAChC,MAAM,EAAE,SAAS,CAAC,gBAAgB;aACrC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,EAAE,CAAC;AACd,CAAC"}

package/dist/cjs/validations/intent.js

@@ -0,0 +1,288 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateIntents = validateIntents;
+const viem_1 = require("viem");
+const types_1 = require("../types");
+const address_1 = require("../helpers/address");
+const sets_1 = require("../helpers/sets");
+const evm_intent_id_1 = require("../helpers/evm-intent-id");
+const solana_intent_id_1 = require("../helpers/solana-intent-id");
+const evm_dln_hook_pack_1 = require("../helpers/evm-dln-hook-pack");
+const hex_1 = require("../helpers/hex");
+const intent_tokens_1 = require("./intent-tokens");
+const intent_destinations_1 = require("./intent-destinations");
+function validateIntents(contexts, quoteMode, envConfig) {
+    const violations = [];
+    for (const ctx of contexts) {
+        violations.push(...validateSingleIntent(ctx, quoteMode, envConfig));
+    }
+    return violations;
+}
+function validateSingleIntent(ctx, quoteMode, envConfig) {
+    const basePath = `response.intents[${ctx.intentIndex}].intent`;
+    const intent = ctx.intentPayload.intent;
+    const group = ctx.tradeGroup;
+    const violations = [
+        ...validateNonNegativeNumerics(intent, basePath),
+        ...validateIntentDifferentiationFields(intent, group, basePath),
+        ...(0, intent_tokens_1.validateIntentTokens)(ctx, basePath),
+        ...(0, intent_destinations_1.validateIntentDestinations)(intent, group, basePath, quoteMode),
+    ];
+    if (!quoteMode) {
+        violations.push(...validateExecutionIdentity(intent, group, basePath, envConfig), ...validateAllowedCancelBeneficiary(intent, group, basePath), ...validateSrcAllowedSender(intent, group, basePath));
+    }
+    return violations;
+}
+// CRITICAL (execution): intentOwner and intentAuthority must equal srcChainAuthorityAddress.
+// CRITICAL (execution): intentId must equal the hash/PDA computed from the intent struct.
+function validateExecutionIdentity(intent, group, basePath, envConfig) {
+    const violations = [];
+    const expectedOwner = group.srcChainAuthorityAddress;
+    const ownerUnverifiable = expectedOwner === undefined;
+    if (ownerUnverifiable
+        || !(0, address_1.addressEquals)(group.realChainId, intent.intentOwner, expectedOwner)) {
+        violations.push({
+            code: types_1.ViolationCode.IntentOwnerMismatch,
+            message: ownerUnverifiable
+                ? "cannot verify intent.intentOwner: request trade has no srcChainAuthorityAddress in execution mode"
+                : "intent.intentOwner must equal srcChainAuthorityAddress",
+            path: `${basePath}.intentOwner`,
+            expected: expectedOwner,
+            actual: intent.intentOwner,
+        });
+    }
+    if (ownerUnverifiable
+        || !(0, address_1.addressEquals)(group.realChainId, intent.intentAuthority, expectedOwner)) {
+        violations.push({
+            code: types_1.ViolationCode.IntentAuthorityMismatch,
+            message: ownerUnverifiable
+                ? "cannot verify intent.intentAuthority: request trade has no srcChainAuthorityAddress in execution mode"
+                : "intent.intentAuthority must equal srcChainAuthorityAddress",
+            path: `${basePath}.intentAuthority`,
+            expected: expectedOwner,
+            actual: intent.intentAuthority,
+        });
+    }
+    violations.push(...validateIntentIdMatches(intent, group, basePath, envConfig));
+    return violations;
+}
+function validateIntentIdMatches(intent, group, basePath, envConfig) {
+    let computed;
+    try {
+        computed = group.realChainId === types_1.ChainId.Solana
+            ? (0, solana_intent_id_1.computeSolanaIntentId)(intent, group.realChainId, envConfig.solanaIntentProgram)
+            : (0, evm_intent_id_1.computeIntentId)(intent);
+    }
+    catch (error) {
+        return [{
+                code: types_1.ViolationCode.IntentIdComputeError,
+                message: "failed to compute intentId from intent struct",
+                path: `${basePath}.intentId`,
+                details: error,
+            }];
+    }
+    if (!(0, hex_1.hexEquals)(intent.intentId, computed)) {
+        return [{
+                code: types_1.ViolationCode.IntentIdMismatch,
+                message: "intent.intentId does not match the hash of the intent struct",
+                path: `${basePath}.intentId`,
+                expected: computed,
+                actual: intent.intentId,
+            }];
+    }
+    return [];
+}
+// CRITICAL (execution): allowedCancelBeneficiary must equal request
+// srcAllowedCancelBeneficiary (if specified) or fall back to
+// srcChainAuthorityAddress.
+function validateAllowedCancelBeneficiary(intent, group, basePath) {
+    const requestValue = group.trades[0].srcAllowedCancelBeneficiary;
+    const expected = requestValue ?? group.srcChainAuthorityAddress;
+    const actual = intent.allowedCancelBeneficiary;
+    // Mixed-mode edge case: the group's authority is undefined AND the request
+    // has no srcAllowedCancelBeneficiary, so there is no expected value.
+    // See the note on validateExecutionIdentity above.
+    if (expected === undefined) {
+        return [{
+                code: types_1.ViolationCode.IntentAllowedCancelBeneficiaryMismatch,
+                message: "cannot verify intent.allowedCancelBeneficiary: request trade"
+                    + " has neither srcAllowedCancelBeneficiary nor srcChainAuthorityAddress"
+                    + " in execution mode",
+                path: `${basePath}.allowedCancelBeneficiary`,
+                expected: undefined,
+                actual,
+            }];
+    }
+    if (actual === undefined || !(0, address_1.addressEquals)(group.realChainId, actual, expected)) {
+        return [{
+                code: types_1.ViolationCode.IntentAllowedCancelBeneficiaryMismatch,
+                message: requestValue !== undefined
+                    ? "intent.allowedCancelBeneficiary must equal request srcAllowedCancelBeneficiary"
+                    : "intent.allowedCancelBeneficiary must fall back to srcChainAuthorityAddress",
+                path: `${basePath}.allowedCancelBeneficiary`,
+                expected,
+                actual,
+            }];
+    }
+    return [];
+}
+// CRITICAL (execution): if any trade in the group has srcAllowedSender,
+// intent.srcAllowedSender must contain exactly those addresses. If none
+// specified, API substitutes its own delegate address (not verifiable — see
+// accepted gap).
+function validateSrcAllowedSender(intent, group, basePath) {
+    const requested = group.trades
+        .map(t => t.srcAllowedSender)
+        .filter((s) => s !== undefined);
+    // Safe skip: when no trade specifies srcAllowedSender, the API uses a delegate
+    // address from its internal config — we have no whitelist to verify it
+    if (requested.length === 0)
+        return [];
+    const expectedSet = new Set(requested.map(addr => (0, address_1.normalizeAddress)(group.realChainId, addr)));
+    const actualList = intent.srcAllowedSender ?? [];
+    const actualSet = new Set(actualList.map(addr => (0, address_1.normalizeAddress)(group.realChainId, addr)));
+    if (!(0, sets_1.setsEqual)(expectedSet, actualSet)) {
+        return [{
+                code: types_1.ViolationCode.IntentSrcAllowedSenderMismatch,
+                message: "intent.srcAllowedSender must contain exactly the addresses"
+                    + " from request srcAllowedSender fields (no extras, no omissions)",
+                path: `${basePath}.srcAllowedSender`,
+                expected: Array.from(expectedSet),
+                actual: actualList,
+            }];
+    }
+    return [];
+}
+// Fields that drive group-to-intent splitting: the API groups request trades by
+// (srcChainId, srcChainAuthorityAddress, dlnHook, dlnMetadata) and produces a separate
+// intent for each unique combination. These fields on the intent must reflect the
+// corresponding request trade fields.
+function validateIntentDifferentiationFields(intent, group, basePath) {
+    return [
+        ...validateExecutionMetadata(intent, basePath),
+        ...validateDlnMetadata(intent, group, basePath),
+        ...validateExternalCallHash(intent, group, basePath),
+    ];
+}
+// CRITICAL: executionMetadata is hardcoded to undefined in the API intent
+// service and never populated.
+// TODO: this logic should be updated when API will start setting executionMetadata.
+function validateExecutionMetadata(intent, basePath) {
+    if ((0, hex_1.isEmptyHex)(intent.executionMetadata))
+        return [];
+    return [{
+            code: types_1.ViolationCode.IntentExecutionMetadataMismatch,
+            message: "intent.executionMetadata must be undefined or empty per current API contract",
+            path: `${basePath}.executionMetadata`,
+            expected: undefined,
+            actual: intent.executionMetadata,
+        }];
+}
+// CRITICAL: intent.dlnMetadata must match request.trades[].dlnMetadata from one of
+// the trades in the group. When no trade in the group has dlnMetadata, the intent
+// field must be empty/undefined.
+function validateDlnMetadata(intent, group, basePath) {
+    const expected = new Set();
+    for (const trade of group.trades)
+        expected.add(trade.dlnMetadata);
+    if (matchesAnyHex(intent.dlnMetadata, expected))
+        return [];
+    return [{
+            code: types_1.ViolationCode.IntentDlnMetadataMismatch,
+            message: "intent.dlnMetadata must match one of request.trades[].dlnMetadata"
+                + " values from the trade group",
+            path: `${basePath}.dlnMetadata`,
+            expected: Array.from(expected),
+            actual: intent.dlnMetadata,
+        }];
+}
+// CRITICAL: intent.externalCallHash must match the keccak256 of the API's
+// serialized hook envelope for one of the trades in the group (see
+// `serializeDlnHook`). When no trade has a dlnHook, the intent field must be
+// empty/zero.
+function validateExternalCallHash(intent, group, basePath) {
+    const expected = new Set();
+    for (const trade of group.trades) {
+        try {
+            const packed = (0, evm_dln_hook_pack_1.serializeDlnHook)(trade);
+            expected.add(packed === undefined ? undefined : (0, viem_1.keccak256)(packed));
+        }
+        catch (error) {
+            return [{
+                    code: types_1.ViolationCode.IntentExternalCallHashMismatch,
+                    message: "failed to serialize request.trades[].dlnHook",
+                    path: `${basePath}.externalCallHash`,
+                    actual: intent.externalCallHash,
+                    details: error,
+                }];
+        }
+    }
+    if (matchesAnyHex(intent.externalCallHash, expected))
+        return [];
+    return [{
+            code: types_1.ViolationCode.IntentExternalCallHashMismatch,
+            message: "intent.externalCallHash must match keccak256 of one of"
+                + " request.trades[].dlnHook values from the trade group",
+            path: `${basePath}.externalCallHash`,
+            expected: Array.from(expected),
+            actual: intent.externalCallHash,
+        }];
+}
+function matchesAnyHex(actual, expected) {
+    for (const exp of expected) {
+        if ((0, hex_1.hexEquals)(actual, exp))
+            return true;
+    }
+    return false;
+}
+// CRITICAL: all numeric values in intent must be non-negative.
+function validateNonNegativeNumerics(intent, basePath) {
+    const violations = [];
+    const numberFields = [
+        { name: "expirationTimestamp", value: intent.expirationTimestamp },
+        { name: "intentTimestamp", value: intent.intentTimestamp },
+    ];
+    for (const { name, value } of numberFields) {
+        if (value < 0) {
+            violations.push({
+                code: types_1.ViolationCode.IntentNumericValueNegative,
+                message: `intent.${name} must be non-negative`,
+                path: `${basePath}.${name}`,
+                actual: value,
+            });
+        }
+    }
+    violations.push(...checkBigIntFields(intent.inputToken ?? [], `${basePath}.inputToken`, ["minPartialAmount", "maxPartialAmount", "constraintBudget"]));
+    violations.push(...checkBigIntFields(intent.giveToken ?? [], `${basePath}.giveToken`, ["numerator", "denominator"]));
+    violations.push(...checkBigIntFields(intent.takeToken, `${basePath}.takeToken`, ["numerator", "denominator"]));
+    return violations;
+}
+function checkBigIntFields(items, basePath, fieldNames) {
+    const violations = [];
+    for (let i = 0; i < items.length; i++) {
+        for (const fieldName of fieldNames) {
+            const raw = items[i][fieldName];
+            try {
+                if (BigInt(raw) < 0n) {
+                    violations.push({
+                        code: types_1.ViolationCode.IntentNumericValueNegative,
+                        message: `${basePath}[${i}].${fieldName} must be non-negative`,
+                        path: `${basePath}[${i}].${fieldName}`,
+                        actual: raw,
+                    });
+                }
+            }
+            catch (error) {
+                violations.push({
+                    code: types_1.ViolationCode.IntentNumericValueInvalid,
+                    message: `${basePath}[${i}].${fieldName} is not a valid number`,
+                    path: `${basePath}[${i}].${fieldName}`,
+                    actual: raw,
+                    details: error,
+                });
+            }
+        }
+    }
+    return violations;
+}
+//# sourceMappingURL=intent.js.map