@debridge-finance/borderless-validation-sdk 0.0.1 → 0.0.3

package/README.md

@@ -0,0 +1,164 @@
+# @debridge-finance/borderless-validation-sdk
+
+Validation SDK for deBridge **borderless intents** API (`POST /v1.0/bundle`) responses.
+
+## Purpose
+
+When a user submits a bundle request to the deBridge API, the response contains transactions and signable payloads (EIP-712 messages, permits, Solana transactions, etc.) that the user is expected to sign.
+
+**Every field the user signs is a potential attack vector.** If the API is compromised (MITM, server bug, malicious rewrite), the user could unknowingly sign a transaction that drains their funds.
+
+This SDK runs on the client and independently verifies that every signable field in the response matches the original request — before the user signs anything.
+
+### Threats mitigated
+
+- **MITM attacks** against the API endpoint.
+- **Bugs on the API side** that produce subtly wrong responses.
+- **Reduced API trust** — the client no longer has to take API responses on faith.
+- **Regression safety net** when testing new API versions.
+
+## Installation
+
+```bash
+npm install @debridge-finance/borderless-validation-sdk
+```
+
+Peer dependencies:
+
+```bash
+npm install viem zod bs58 @solana/web3.js
+```
+
+## Basic usage
+
+```ts
+import { createValidator, Environment } from "@debridge-finance/borderless-validation-sdk";
+
+const validator = createValidator({ environment: Environment.Prod });
+
+const url = "https://cross-chain-api.debridge.finance/v1.0/bundle";
+
+const response = await fetch(url, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(request),
+}).then(res => res.json());
+
+const result = validator.validate(url, request, response);
+
+if (!result.ok) {
+    console.error("Validation failed:", result.violations);
+    // Do NOT let the user sign anything.
+    return;
+}
+
+// Safe to proceed with signing.
+```
+
+### API
+
+```ts
+createValidator(config: { environment: Environment }): Validator
+
+type Validator = {
+    validate(url: string, request: object, response: object): ValidationResult;
+};
+
+type ValidationResult = {
+    ok: boolean;             // true if no violations
+    violations: Violation[]; // all issues found
+};
+
+type Violation = {
+    code: ViolationCode;     // machine-readable identifier
+    message: string;         // human-readable description
+    path: string;            // JSON path of the offending field
+    expected?: unknown;
+    actual?: unknown;
+    details?: unknown;
+};
+```
+
+`validator.validate()` **never throws** — every error condition is reported as a `Violation`. Safe to call in any code path.
+
+## Integration guide for UI teams
+
+The SDK is designed to run **between** receiving the API response and presenting it to the user for signing. Wire it into that seam.
+
+### 1. Where to call
+
+```
+┌──────────────┐     ┌─────────┐     ┌─────────────────-─┐     ┌──────────────┐
+│ Build request│ ──▶ │ fetch() │ ──▶ │ validator.validate│ ──▶ │ Sign / submit│
+└──────────────┘     └─────────┘     └──────────────────-┘     └──────────────┘
+                                              │
+                                              ▼
+                                     ok ? proceed : block
+```
+
+- **Before `validate`:** the user has not yet seen or signed anything.
+- **After `validate`:** if `result.ok === false`, **do not forward any signable payload** (intent message, permit, transaction) to the wallet. The API response cannot be trusted.
+
+### 2. Choosing the environment
+
+```ts
+import { Environment } from "@debridge-finance/borderless-validation-sdk";
+```
+
+- `Environment.Prod` — production.
+- `Environment.Hanoi`, `Environment.Dubai`, `Environment.Madrid` — non-prod deployments (may have empty whitelists; ask the SDK team before use).
+
+Pass the same environment your app is already configured for — don't make it user-selectable.
+
+### 3. Pass the exact URL you called
+
+```ts
+const url = "https://cross-chain-api.debridge.finance/v1.0/bundle";
+const response = await fetch(url, { ... });
+const result = validator.validate(url, request, response);
+```
+
+The `url` argument is checked against a per-environment whitelist. Passing a hardcoded constant defeats the check — pass the same string you handed to `fetch`.
+
+### 4. Handling violations
+
+On `result.ok === false`:
+
+1. **Block the signing flow.** Do not show a wallet popup or write any pending tx to state.
+2. **Log the full `violations` array** to your error reporting system (Sentry / Datadog / etc.). Include `code`, `path`, `expected`, `actual`, `details`.
+3. **Show the user a generic error.** Do not leak raw `Violation` data into the UI — messages are for developers, not end-users. A single "Quote is invalid, please retry" is enough.
+4. **Do not retry automatically.** If the API is compromised, retries make it worse. Let the user manually trigger a retry.
+
+### 5. Browser compatibility
+
+The SDK is published as both CJS and ESM and uses only browser-compatible APIs (no `fs`, `crypto`, `Buffer`, `process`). It has been smoke-tested in a plain `<script type="module">` environment — see [`tmp/front/`](./tmp/front/) for a minimal example.
+
+Tree-shaking: the ESM build preserves named exports. Importing only `createValidator` will not pull in unused validators.
+
+### 6. Bundle size
+
+Roughly 1 MB unpacked (a lot of it is source maps — drop them in production). The heaviest peer dep is `@solana/web3.js`; if your app only deals with EVM trades, your bundler's tree-shaking should eliminate most of it.
+
+### 7. TypeScript
+
+Full type declarations ship in `dist/types/`. `ValidatorConfig`, `ValidationResult`, `Violation`, and `ViolationCode` are all exported — use them directly, don't re-declare.
+
+### 8. What NOT to do
+
+- ❌ **Don't skip validation** because "the API is our own." Compromise detection is the whole point.
+- ❌ **Don't mutate `request` or `response`** between the API call and `validate()` — the validator needs the exact payload the user received.
+- ❌ **Don't interpret `violations[].message` programmatically** — message wording may change between versions. Branch on `code` instead.
+- ❌ **Don't cache the validator if `environment` changes.** Create a new instance via `createValidator` for each environment.
+
+## Development
+
+See [`CLAUDE.md`](./CLAUDE.md) for project conventions, validation rules, and security guidelines.
+
+- Unit tests: `npm test`
+- Coverage: `npm run coverage`
+- E2E tests (hit the staging API): `npm run test:e2e`
+- Build: `npm run build`
+
+## License
+
+BUSL-1.1

package/dist/cjs/helpers/address.js

@@ -3,12 +3,16 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AddressFormat = exports.TRON_NATIVE_ADDRESS = void 0;
-exports.getAddressFormat = getAddressFormat;
+exports.TRON_NATIVE_ADDRESS = void 0;
+exports.getChainEngine = getChainEngine;
 exports.isTronAddress = isTronAddress;
 exports.tronAddressToEvmHex = tronAddressToEvmHex;
 exports.normalizeAddress = normalizeAddress;
+exports.detectChainEngine = detectChainEngine;
+exports.normalizeAddressByValue = normalizeAddressByValue;
 exports.addressEquals = addressEquals;
+exports.addressToHex = addressToHex;
+exports.addressToHexByValue = addressToHexByValue;
 exports.isNativeToken = isNativeToken;
 const viem_1 = require("viem");
 const bs58_1 = __importDefault(require("bs58"));
@@ -16,18 +20,12 @@ const enums_1 = require("../types/enums");
 const solana_1 = require("../whitelists/solana");
 // Tron-specific addresses (Base58Check format)
 exports.TRON_NATIVE_ADDRESS = "T9yD14Nj9j7xAB4dbGeiX9h8unkKHxuWwb";
-var AddressFormat;
-(function (AddressFormat) {
-    AddressFormat[AddressFormat["EVM"] = 0] = "EVM";
-    AddressFormat[AddressFormat["Tron"] = 1] = "Tron";
-    AddressFormat[AddressFormat["Solana"] = 2] = "Solana";
-})(AddressFormat || (exports.AddressFormat = AddressFormat = {}));
-function getAddressFormat(chainId) {
+function getChainEngine(chainId) {
     if (chainId === enums_1.ChainId.Tron)
-        return AddressFormat.Tron;
+        return enums_1.ChainEngine.Tron;
     if (chainId === enums_1.ChainId.Solana)
-        return AddressFormat.Solana;
-    return AddressFormat.EVM;
+        return enums_1.ChainEngine.Solana;
+    return enums_1.ChainEngine.EVM;
 }
 function isTronAddress(address) {
     if (!address)
@@ -50,10 +48,26 @@ function tronAddressToEvmHex(tronAddress) {
     const addressBytes = decoded.slice(1, 21);
     return (0, viem_1.bytesToHex)(addressBytes);
 }
-// Normalizes address for comparison based on chain format
+// Normalizes address for comparison based on chain engine
 function normalizeAddress(chainId, address) {
-    const format = getAddressFormat(chainId);
-    if (format === AddressFormat.Tron || format === AddressFormat.Solana) {
+    const engine = getChainEngine(chainId);
+    return applyEngineNormalization(address, engine);
+}
+// Detects the chain engine from the address value alone (no chainId required).
+// Useful when a chain is not fixed (e.g. destinationChainIds = "any").
+function detectChainEngine(address) {
+    if (address.startsWith("0x"))
+        return enums_1.ChainEngine.EVM;
+    if (isTronAddress(address))
+        return enums_1.ChainEngine.Tron;
+    return enums_1.ChainEngine.Solana;
+}
+// Normalizes an address using only its own value — no chainId needed.
+function normalizeAddressByValue(address) {
+    return applyEngineNormalization(address, detectChainEngine(address));
+}
+function applyEngineNormalization(address, engine) {
+    if (engine === enums_1.ChainEngine.Tron || engine === enums_1.ChainEngine.Solana) {
         return address; // case-sensitive
     }
     return address.toLowerCase(); // EVM: case-insensitive
@@ -62,12 +76,33 @@ function normalizeAddress(chainId, address) {
 function addressEquals(chainId, a, b) {
     return normalizeAddress(chainId, a) === normalizeAddress(chainId, b);
 }
-// Checks if address is native token for the given chain
+// Raw byte representation, used when an address flows into the intent ID
+// keccak256 hash. EVM → 20 bytes, Tron → 20 bytes (after stripping 0x41
+// prefix and checksum), Solana → 32 bytes (base58, no checksum).
+function addressToHex(chainId, address) {
+    return applyEngineToHex(address, getChainEngine(chainId));
+}
+// Same as addressToHex but infers the engine from the address value alone.
+// Use when the chainId is unknown (e.g. destinationChainIds = "any").
+function addressToHexByValue(address) {
+    return applyEngineToHex(address, detectChainEngine(address));
+}
+function applyEngineToHex(address, engine) {
+    if (engine === enums_1.ChainEngine.EVM) {
+        return address.toLowerCase();
+    }
+    if (engine === enums_1.ChainEngine.Tron) {
+        return tronAddressToEvmHex(address);
+    }
+    return (0, viem_1.bytesToHex)(bs58_1.default.decode(address));
+}
+// Checks if address is the native token for the given chain.
 function isNativeToken(address, chainId) {
-    if (chainId === enums_1.ChainId.Tron) {
+    const engine = getChainEngine(chainId);
+    if (engine === enums_1.ChainEngine.Tron) {
         return address === exports.TRON_NATIVE_ADDRESS;
     }
-    if (chainId === enums_1.ChainId.Solana) {
+    if (engine === enums_1.ChainEngine.Solana) {
         return address === solana_1.SYSTEM_PROGRAM;
     }
     return address.toLowerCase() === viem_1.zeroAddress;

package/dist/cjs/helpers/address.js.map

@@ -1 +1 @@
-{"version":3,"file":"address.js","sourceRoot":"","sources":["../../../src/helpers/address.ts"],"names":[],"mappings":";;;;;;AAcA,4CAIC;AAED,sCAOC;AAKD,kDAKC;AAGD,4CAMC;AAGD,sCAEC;AAGD,sCAQC;AA9DD,+BAA+C;AAC/C,gDAAwB;AACxB,0CAAyC;AACzC,iDAAsD;AAEtD,+CAA+C;AAClC,QAAA,mBAAmB,GAAG,oCAAoC,CAAC;AAExE,IAAY,aAIX;AAJD,WAAY,aAAa;IACrB,+CAAG,CAAA;IACH,iDAAI,CAAA;IACJ,qDAAM,CAAA;AACV,CAAC,EAJW,aAAa,6BAAb,aAAa,QAIxB;AAED,SAAgB,gBAAgB,CAAC,OAAe;IAC5C,IAAI,OAAO,KAAK,eAAO,CAAC,IAAI;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC;IACxD,IAAI,OAAO,KAAK,eAAO,CAAC,MAAM;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC;IAC5D,OAAO,aAAa,CAAC,GAAG,CAAC;AAC7B,CAAC;AAED,SAAgB,aAAa,CAAC,OAAe;IACzC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACxC,4DAA4D;IAC5D,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,8DAA8D;AAC9D,4EAA4E;AAC5E,oEAAoE;AACpE,SAAgB,mBAAmB,CAAC,WAAmB;IACnD,MAAM,OAAO,GAAG,cAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,4DAA4D;IAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,IAAA,iBAAU,EAAC,YAAY,CAAC,CAAC;AACpC,CAAC;AAED,0DAA0D;AAC1D,SAAgB,gBAAgB,CAAC,OAAe,EAAE,OAAe;IAC7D,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,aAAa,CAAC,IAAI,IAAI,MAAM,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;QACnE,OAAO,OAAO,CAAC,CAAC,iBAAiB;IACrC,CAAC;IACD,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,wBAAwB;AAC1D,CAAC;AAED,wDAAwD;AACxD,SAAgB,aAAa,CAAC,OAAe,EAAE,CAAS,EAAE,CAAS;IAC/D,OAAO,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,wDAAwD;AACxD,SAAgB,aAAa,CAAC,OAAe,EAAE,OAAgB;IAC3D,IAAI,OAAO,KAAK,eAAO,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,OAAO,KAAK,2BAAmB,CAAC;IAC3C,CAAC;IACD,IAAI,OAAO,KAAK,eAAO,CAAC,MAAM,EAAE,CAAC;QAC7B,OAAO,OAAO,KAAK,uBAAc,CAAC;IACtC,CAAC;IACD,OAAO,OAAO,CAAC,WAAW,EAAE,KAAK,kBAAW,CAAC;AACjD,CAAC"}
+{"version":3,"file":"address.js","sourceRoot":"","sources":["../../../src/helpers/address.ts"],"names":[],"mappings":";;;;;;AAQA,wCAIC;AAED,sCAOC;AAKD,kDAKC;AAGD,4CAGC;AAID,8CAIC;AAGD,0DAEC;AAUD,sCAEC;AAKD,oCAEC;AAID,kDAEC;AAaD,sCASC;AAjGD,+BAA+C;AAC/C,gDAAwB;AACxB,0CAAsD;AACtD,iDAAsD;AAEtD,+CAA+C;AAClC,QAAA,mBAAmB,GAAG,oCAAoC,CAAC;AAExE,SAAgB,cAAc,CAAC,OAAe;IAC1C,IAAI,OAAO,KAAK,eAAO,CAAC,IAAI;QAAE,OAAO,mBAAW,CAAC,IAAI,CAAC;IACtD,IAAI,OAAO,KAAK,eAAO,CAAC,MAAM;QAAE,OAAO,mBAAW,CAAC,MAAM,CAAC;IAC1D,OAAO,mBAAW,CAAC,GAAG,CAAC;AAC3B,CAAC;AAED,SAAgB,aAAa,CAAC,OAAe;IACzC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACxC,4DAA4D;IAC5D,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,8DAA8D;AAC9D,4EAA4E;AAC5E,oEAAoE;AACpE,SAAgB,mBAAmB,CAAC,WAAmB;IACnD,MAAM,OAAO,GAAG,cAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,4DAA4D;IAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,IAAA,iBAAU,EAAC,YAAY,CAAC,CAAC;AACpC,CAAC;AAED,0DAA0D;AAC1D,SAAgB,gBAAgB,CAAC,OAAe,EAAE,OAAe;IAC7D,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,+EAA+E;AAC/E,uEAAuE;AACvE,SAAgB,iBAAiB,CAAC,OAAe;IAC7C,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,mBAAW,CAAC,GAAG,CAAC;IACrD,IAAI,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,mBAAW,CAAC,IAAI,CAAC;IACpD,OAAO,mBAAW,CAAC,MAAM,CAAC;AAC9B,CAAC;AAED,sEAAsE;AACtE,SAAgB,uBAAuB,CAAC,OAAe;IACnD,OAAO,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe,EAAE,MAAmB;IAClE,IAAI,MAAM,KAAK,mBAAW,CAAC,IAAI,IAAI,MAAM,KAAK,mBAAW,CAAC,MAAM,EAAE,CAAC;QAC/D,OAAO,OAAO,CAAC,CAAC,iBAAiB;IACrC,CAAC;IACD,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,wBAAwB;AAC1D,CAAC;AAED,wDAAwD;AACxD,SAAgB,aAAa,CAAC,OAAe,EAAE,CAAS,EAAE,CAAS;IAC/D,OAAO,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,yEAAyE;AACzE,wEAAwE;AACxE,iEAAiE;AACjE,SAAgB,YAAY,CAAC,OAAe,EAAE,OAAe;IACzD,OAAO,gBAAgB,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,2EAA2E;AAC3E,sEAAsE;AACtE,SAAgB,mBAAmB,CAAC,OAAe;IAC/C,OAAO,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,MAAmB;IAC1D,IAAI,MAAM,KAAK,mBAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,WAAW,EAAmB,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,KAAK,mBAAW,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,mBAAmB,CAAC,OAAO,CAAkB,CAAC;IACzD,CAAC;IACD,OAAO,IAAA,iBAAU,EAAC,cAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,6DAA6D;AAC7D,SAAgB,aAAa,CAAC,OAAe,EAAE,OAAe;IAC1D,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,mBAAW,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,OAAO,KAAK,2BAAmB,CAAC;IAC3C,CAAC;IACD,IAAI,MAAM,KAAK,mBAAW,CAAC,MAAM,EAAE,CAAC;QAChC,OAAO,OAAO,KAAK,uBAAc,CAAC;IACtC,CAAC;IACD,OAAO,OAAO,CAAC,WAAW,EAAE,KAAK,kBAAW,CAAC;AACjD,CAAC"}

package/dist/cjs/helpers/evm-action.js

@@ -3,14 +3,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.actionUsesTransactionCalls = actionUsesTransactionCalls;
 exports.getTransactionCalls = getTransactionCalls;
 const types_1 = require("../types");
-// Transaction and Sign712MetaMask actions carry transactionCalls;
+// Transaction and Sign712MetaMaskCaveats actions carry transactionCalls;
 // Sign712 (Permit/Permit2) and Sign7702Authorization do not.
 function actionUsesTransactionCalls(action) {
     return action.type === types_1.EvmActionKind.Transaction
-        || action.type === types_1.EvmActionKind.Sign712MetaMask;
+        || action.type === types_1.EvmActionKind.Sign712MetaMaskCaveats;
 }
 // For Transaction-type actions (non-AA), the call is in action.data directly.
-// For Sign712MetaMask-type actions (AA), the calls are in details.transactionCalls.
+// For Sign712MetaMaskCaveats-type actions (AA), the calls are in details.transactionCalls.
 function getTransactionCalls(action) {
     if (action.type === types_1.EvmActionKind.Transaction) {
         return [action.data];

package/dist/cjs/helpers/evm-action.js.map

@@ -1 +1 @@
-{"version":3,"file":"evm-action.js","sourceRoot":"","sources":["../../../src/helpers/evm-action.ts"],"names":[],"mappings":";;AAIA,gEAGC;AAID,kDAKC;AAhBD,oCAAgF;AAEhF,kEAAkE;AAClE,6DAA6D;AAC7D,SAAgB,0BAA0B,CAAC,MAAyB;IAChE,OAAO,MAAM,CAAC,IAAI,KAAK,qBAAa,CAAC,WAAW;WACzC,MAAM,CAAC,IAAI,KAAK,qBAAa,CAAC,eAAe,CAAC;AACzD,CAAC;AAED,8EAA8E;AAC9E,oFAAoF;AACpF,SAAgB,mBAAmB,CAAC,MAAyB;IACzD,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAa,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,IAA0B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC;AAClD,CAAC"}
+{"version":3,"file":"evm-action.js","sourceRoot":"","sources":["../../../src/helpers/evm-action.ts"],"names":[],"mappings":";;AAIA,gEAGC;AAID,kDAKC;AAhBD,oCAAgF;AAEhF,yEAAyE;AACzE,6DAA6D;AAC7D,SAAgB,0BAA0B,CAAC,MAAyB;IAChE,OAAO,MAAM,CAAC,IAAI,KAAK,qBAAa,CAAC,WAAW;WACzC,MAAM,CAAC,IAAI,KAAK,qBAAa,CAAC,sBAAsB,CAAC;AAChE,CAAC;AAED,8EAA8E;AAC9E,2FAA2F;AAC3F,SAAgB,mBAAmB,CAAC,MAAyB;IACzD,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAa,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,IAA0B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC;AAClD,CAAC"}

package/dist/cjs/helpers/evm-dln-hook-pack.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.packEvmHookV1 = packEvmHookV1;
+exports.packEvmTransactionCall = packEvmTransactionCall;
+exports.serializeDlnHook = serializeDlnHook;
+const viem_1 = require("viem");
+const enums_1 = require("../types/enums");
+// Hook envelope: ABI-encoded tuple prefixed with a `uint8 version=1` byte.
+// keccak256 of these bytes is what ends up in `intent.externalCallHash`.
+const ENVELOPE_TUPLE = {
+    type: "tuple",
+    components: [
+        { name: "fallbackAddress", type: "address" },
+        { name: "executorAddress", type: "address" },
+        { name: "executionFee", type: "uint160" },
+        { name: "allowDelayedExecution", type: "bool" },
+        { name: "requireSuccessfullExecution", type: "bool" },
+        { name: "payload", type: "bytes" },
+    ],
+};
+const ENVELOPE_VERSION_PREFIX = "0x01";
+function packEvmHookV1(data) {
+    const tuple = (0, viem_1.encodeAbiParameters)([ENVELOPE_TUPLE], [{
+            fallbackAddress: data.fallbackAddress,
+            executorAddress: data.target,
+            executionFee: BigInt(data.reward),
+            allowDelayedExecution: data.isNonAtomic,
+            requireSuccessfullExecution: data.isSuccessRequired,
+            payload: data.targetPayload,
+        }]);
+    return (0, viem_1.concatHex)([ENVELOPE_VERSION_PREFIX, tuple]);
+}
+// `evm_transaction_call` wraps the user-supplied (to, gas, calldata) tuple in
+// the same envelope, with fixed field values:
+//   executionFee = 0
+//   allowDelayedExecution = false
+//   requireSuccessfullExecution = true
+//   fallbackAddress = dstChainAuthorityAddress
+//   executorAddress = 0x0
+function packEvmTransactionCall(data, dstChainAuthorityAddress) {
+    const inner = (0, viem_1.encodeAbiParameters)([{
+            type: "tuple",
+            components: [
+                { name: "to", type: "address" },
+                { name: "txGas", type: "uint32" },
+                { name: "callData", type: "bytes" },
+            ],
+        }], [{
+            to: data.to,
+            txGas: Number(data.gas ?? 0),
+            callData: data.calldata,
+        }]);
+    return packEvmHookV1({
+        fallbackAddress: dstChainAuthorityAddress,
+        target: viem_1.zeroAddress,
+        reward: "0",
+        isNonAtomic: false,
+        isSuccessRequired: true,
+        targetPayload: inner,
+    });
+}
+// Parses a request trade's `dlnHook` JSON and returns the bytes the API
+// hashes into `intent.externalCallHash`. Returns `undefined` when the trade
+// has no hook. Throws on unknown / Solana hook types — Solana hooks live in
+// the response under their own validator and never feed into this hash.
+function serializeDlnHook(trade) {
+    if (!trade.dlnHook)
+        return undefined;
+    const hook = JSON.parse(trade.dlnHook);
+    switch (hook.type) {
+        case enums_1.DlnHookType.EvmHookV1:
+            return packEvmHookV1(hook.data);
+        case enums_1.DlnHookType.EvmTransactionCall: {
+            if (trade.dstChainAuthorityAddress === undefined) {
+                throw new Error("evm_transaction_call hook requires dstChainAuthorityAddress on the trade");
+            }
+            return packEvmTransactionCall(hook.data, trade.dstChainAuthorityAddress);
+        }
+        case enums_1.DlnHookType.SolanaSerializedInstructions:
+            throw new Error("Solana hook types are not folded into externalCallHash");
+        default: {
+            const exhaustive = hook;
+            throw new Error(`Unknown dlnHook type: ${JSON.stringify(exhaustive)}`);
+        }
+    }
+}
+//# sourceMappingURL=evm-dln-hook-pack.js.map

package/dist/cjs/helpers/evm-dln-hook-pack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-dln-hook-pack.js","sourceRoot":"","sources":["../../../src/helpers/evm-dln-hook-pack.ts"],"names":[],"mappings":";;AAwCA,sCAaC;AASD,wDA4BC;AAMD,4CAuBC;AAvHD,+BAAmE;AACnE,0CAA6C;AAG7C,2EAA2E;AAC3E,yEAAyE;AACzE,MAAM,cAAc,GAAG;IACnB,IAAI,EAAE,OAAO;IACb,UAAU,EAAE;QACR,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC5C,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC5C,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE;QACzC,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,MAAM,EAAE;QAC/C,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,MAAM,EAAE;QACrD,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;KACrC;CACK,CAAC;AAEX,MAAM,uBAAuB,GAAkB,MAAM,CAAC;AAsBtD,SAAgB,aAAa,CAAC,IAAmB;IAC7C,MAAM,KAAK,GAAG,IAAA,0BAAmB,EAC7B,CAAC,cAAc,CAAC,EAChB,CAAC;YACG,eAAe,EAAE,IAAI,CAAC,eAAgC;YACtD,eAAe,EAAE,IAAI,CAAC,MAAuB;YAC7C,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACjC,qBAAqB,EAAE,IAAI,CAAC,WAAW;YACvC,2BAA2B,EAAE,IAAI,CAAC,iBAAiB;YACnD,OAAO,EAAE,IAAI,CAAC,aAA8B;SAC/C,CAAC,CACL,CAAC;IACF,OAAO,IAAA,gBAAS,EAAC,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,8EAA8E;AAC9E,8CAA8C;AAC9C,qBAAqB;AACrB,kCAAkC;AAClC,uCAAuC;AACvC,+CAA+C;AAC/C,0BAA0B;AAC1B,SAAgB,sBAAsB,CAClC,IAA4B,EAC5B,wBAAgC;IAEhC,MAAM,KAAK,GAAG,IAAA,0BAAmB,EAC7B,CAAC;YACG,IAAI,EAAE,OAAO;YACb,UAAU,EAAE;gBACR,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE;aACtC;SACJ,CAAC,EACF,CAAC;YACG,EAAE,EAAE,IAAI,CAAC,EAAmB;YAC5B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAyB;SAC3C,CAAC,CACL,CAAC;IAEF,OAAO,aAAa,CAAC;QACjB,eAAe,EAAE,wBAAwB;QACzC,MAAM,EAAE,kBAAW;QACnB,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,KAAK;QAClB,iBAAiB,EAAE,IAAI;QACvB,aAAa,EAAE,KAAK;KACvB,CAAC,CAAC;AACP,CAAC;AAED,wEAAwE;AACxE,4EAA4E;AAC5E,4EAA4E;AAC5E,wEAAwE;AACxE,SAAgB,gBAAgB,CAAC,KAAmB;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAErC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;IAEtD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,mBAAW,CAAC,SAAS;YACtB,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,mBAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CACX,0EAA0E,CAC7E,CAAC;YACN,CAAC;YACD,OAAO,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,mBAAW,CAAC,4BAA4B;YACzC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC9E,OAAO,CAAC,CAAC,CAAC;YACN,MAAM,UAAU,GAAU,IAAI,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;IACL,CAAC;AACL,CAAC"}

package/dist/cjs/helpers/evm-gas-compensation-tx.js

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateEvmGasCompensationTx = validateEvmGasCompensationTx;
+const evm_calldata_1 = require("./evm-calldata");
+const evm_token_1 = require("./evm-token");
+const address_1 = require("./address");
+// Validates an EVM `{to, data, value}` triplet that is expected to encode a
+// gas-compensation transfer. `groups` are the gas-compensation groups
+// associated with this triplet's source (already filtered to the relevant
+// `(chainId, sender)` pair by the caller).
+//
+// Classification: dispatched on `triplet.data`:
+//   - `data === "0x"` → native compensation (data="0x", value > 0,
+//     and at least one group must carry a native token).
+//   - otherwise → ERC20 compensation (`triplet.to` matches some non-native
+//     group's tokenAddress, data is `transfer(...)`, value === "0").
+function validateEvmGasCompensationTx(triplet, groups, realChainId, basePath, codes) {
+    if (triplet.data === "0x") {
+        return validateNativeCompensation(triplet, groups, basePath, codes);
+    }
+    return validateErc20Compensation(triplet, groups, realChainId, basePath, codes);
+}
+function validateNativeCompensation(triplet, groups, basePath, codes) {
+    const violations = [];
+    // CRITICAL: data="0x" implies native — must have at least one native group.
+    const hasNativeGroup = groups.some(g => (0, evm_token_1.isNativeToken)(g.tokenAddress, g.realChainId));
+    if (!hasNativeGroup) {
+        violations.push({
+            code: codes.dataInvalid,
+            message: "data=\"0x\" implies native compensation but no group has a native token",
+            path: `${basePath}.data`,
+            expected: groups.map(g => g.tokenAddress),
+            actual: "0x",
+        });
+    }
+    // HIGH: native compensation value must parse and be > 0.
+    violations.push(...validateNativeValue(triplet.value, basePath, codes));
+    return violations;
+}
+function validateNativeValue(rawValue, basePath, codes) {
+    try {
+        if (BigInt(rawValue) <= 0n) {
+            return [{
+                    code: codes.valueInvalid,
+                    message: "native compensation must have value > 0",
+                    path: `${basePath}.value`,
+                    actual: rawValue,
+                }];
+        }
+        return [];
+    }
+    catch (error) {
+        return [{
+                code: codes.valueInvalid,
+                message: "native compensation value is not a valid number",
+                path: `${basePath}.value`,
+                actual: rawValue,
+                details: error,
+            }];
+    }
+}
+function validateErc20Compensation(triplet, groups, realChainId, basePath, codes) {
+    const violations = [];
+    // CRITICAL: `to` must equal some non-native group's tokenAddress.
+    const erc20Groups = groups.filter(g => !(0, evm_token_1.isNativeToken)(g.tokenAddress, g.realChainId));
+    const matches = erc20Groups.some(g => (0, address_1.normalizeAddress)(g.realChainId, g.tokenAddress)
+        === (0, address_1.normalizeAddress)(realChainId, triplet.to));
+    if (!matches) {
+        violations.push({
+            code: codes.toMismatch,
+            message: "ERC20 compensation `to` does not match any group's tokenAddress",
+            path: `${basePath}.to`,
+            expected: erc20Groups.map(g => g.tokenAddress),
+            actual: triplet.to,
+        });
+    }
+    // CRITICAL: data must be a valid ERC20 transfer calldata.
+    try {
+        (0, evm_calldata_1.decodeTransferCalldata)(triplet.data);
+    }
+    catch (error) {
+        violations.push({
+            code: codes.dataInvalid,
+            message: "ERC20 compensation data is not a valid transfer calldata",
+            path: `${basePath}.data`,
+            actual: triplet.data,
+            details: error,
+        });
+    }
+    // HIGH: ERC20 compensation must have value="0".
+    if (triplet.value !== "0") {
+        violations.push({
+            code: codes.valueInvalid,
+            message: "ERC20 compensation must have value=\"0\"",
+            path: `${basePath}.value`,
+            expected: "0",
+            actual: triplet.value,
+        });
+    }
+    return violations;
+}
+//# sourceMappingURL=evm-gas-compensation-tx.js.map

package/dist/cjs/helpers/evm-gas-compensation-tx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-gas-compensation-tx.js","sourceRoot":"","sources":["../../../src/helpers/evm-gas-compensation-tx.ts"],"names":[],"mappings":";;AAwBA,oEAWC;AAlCD,iDAAwD;AACxD,2CAA4C;AAC5C,uCAA6C;AAW7C,4EAA4E;AAC5E,sEAAsE;AACtE,0EAA0E;AAC1E,2CAA2C;AAC3C,EAAE;AACF,gDAAgD;AAChD,mEAAmE;AACnE,yDAAyD;AACzD,2EAA2E;AAC3E,qEAAqE;AACrE,SAAgB,4BAA4B,CACxC,OAAoD,EACpD,MAA8B,EAC9B,WAAoB,EACpB,QAAgB,EAChB,KAA+B;IAE/B,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,0BAA0B,CAC/B,OAAoD,EACpD,MAA8B,EAC9B,QAAgB,EAChB,KAA+B;IAE/B,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,4EAA4E;IAC5E,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,CAAC,IAAA,yBAAa,EAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,CACpD,CAAC;IACF,IAAI,CAAC,cAAc,EAAE,CAAC;QAClB,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,OAAO,EACH,yEAAyE;YAC7E,IAAI,EAAE,GAAG,QAAQ,OAAO;YACxB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;YACzC,MAAM,EAAE,IAAI;SACf,CAAC,CAAC;IACP,CAAC;IAED,yDAAyD;IACzD,UAAU,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAExE,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,mBAAmB,CACxB,QAAgB,EAChB,QAAgB,EAChB,KAA+B;IAE/B,IAAI,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACzB,OAAO,CAAC;oBACJ,IAAI,EAAE,KAAK,CAAC,YAAY;oBACxB,OAAO,EAAE,yCAAyC;oBAClD,IAAI,EAAE,GAAG,QAAQ,QAAQ;oBACzB,MAAM,EAAE,QAAQ;iBACnB,CAAC,CAAC;QACP,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC;gBACJ,IAAI,EAAE,KAAK,CAAC,YAAY;gBACxB,OAAO,EAAE,iDAAiD;gBAC1D,IAAI,EAAE,GAAG,QAAQ,QAAQ;gBACzB,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,KAAK;aACjB,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED,SAAS,yBAAyB,CAC9B,OAAoD,EACpD,MAA8B,EAC9B,WAAoB,EACpB,QAAgB,EAChB,KAA+B;IAE/B,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,kEAAkE;IAClE,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,CAAC,CAAC,IAAA,yBAAa,EAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,CACrD,CAAC;IACF,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACjC,IAAA,0BAAgB,EAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC;YACvC,IAAA,0BAAgB,EAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,CACpD,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,OAAO,EACH,iEAAiE;YACrE,IAAI,EAAE,GAAG,QAAQ,KAAK;YACtB,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;YAC9C,MAAM,EAAE,OAAO,CAAC,EAAE;SACrB,CAAC,CAAC;IACP,CAAC;IAED,0DAA0D;IAC1D,IAAI,CAAC;QACD,IAAA,qCAAsB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,OAAO,EAAE,0DAA0D;YACnE,IAAI,EAAE,GAAG,QAAQ,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,IAAI;YACpB,OAAO,EAAE,KAAK;SACjB,CAAC,CAAC;IACP,CAAC;IAED,gDAAgD;IAChD,IAAI,OAAO,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;QACxB,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,KAAK,CAAC,YAAY;YACxB,OAAO,EAAE,0CAA0C;YACnD,IAAI,EAAE,GAAG,QAAQ,QAAQ;YACzB,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,OAAO,CAAC,KAAK;SACxB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/cjs/helpers/evm-intent-id.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.computeIntentId = computeIntentId;
 const viem_1 = require("viem");
 const evm_intent_id_abi_1 = require("./evm-intent-id-abi");
+const address_1 = require("./address");
+const subscription_to_chain_id_1 = require("../whitelists/subscription-to-chain-id");
 function computeIntentId(intent) {
     const struct = convertToIntentStruct(intent);
     const encoded = (0, viem_1.encodeAbiParameters)(evm_intent_id_abi_1.SUBMIT_INTENT_ABI_PARAMS, [struct]);
@@ -20,7 +22,7 @@ function convertToIntentStruct(intent) {
         intentTimestamp: BigInt(intent.intentTimestamp),
         srcAllowedSender: (intent.srcAllowedSender ?? []),
         executionMetadata: (intent.executionMetadata ?? viem_1.zeroHash),
-        isAnyDlnMetadataAllowed: true,
+        isAnyDlnMetadataAllowed: !intent.dlnMetadata,
         dlnMetadata: (intent.dlnMetadata ?? "0x"),
         externalCallHash: (intent.externalCallHash ?? viem_1.zeroHash),
         combinedInteractions: "0x",
@@ -29,14 +31,22 @@ function convertToIntentStruct(intent) {
         intentAuthority: intent.intentAuthority,
     };
 }
+// Encodes addresses as raw bytes — non-EVM strings can't be passed as-is.
 function convertAllowedAddresses(details) {
     if (!details)
         return [];
-    return details.map(d => ({
-        allowedAddress: d.address,
-        chains: d.destinationChainIds === "any" ? [] : d.destinationChainIds,
-        isAnyChain: d.destinationChainIds === "any",
-    }));
+    return details.map(d => {
+        const isAnyChain = d.destinationChainIds === "any";
+        const chains = isAnyChain ? [] : d.destinationChainIds;
+        // All chains within one entry share the same address family (validated
+        // elsewhere), so any chainId in the list resolves the address family
+        // identically. For "any" / empty chains, the family is inferred from
+        // the address itself.
+        const allowedAddress = chains.length > 0
+            ? (0, address_1.addressToHex)((0, subscription_to_chain_id_1.resolveChainId)(chains[0]) ?? chains[0], d.address)
+            : (0, address_1.addressToHexByValue)(d.address);
+        return { allowedAddress, chains, isAnyChain };
+    });
 }
 function convertInputTokens(tokens) {
     if (!tokens)
@@ -58,13 +68,17 @@ function convertGiveTokens(tokens) {
         denominator: Number(t.denominator),
     }));
 }
+// Encode addresses as raw bytes — non-EVM strings can't be passed as-is.
 function convertTakeTokens(tokens) {
-    return tokens.map(t => ({
-        giveToken: t.fromTokenAddress,
-        takeTokenChain: t.takeTokenChainId,
-        takeToken: t.takeTokenAddress,
-        numerator: BigInt(t.numerator),
-        denominator: Number(t.denominator),
-    }));
+    return tokens.map(t => {
+        const realChainId = (0, subscription_to_chain_id_1.resolveChainId)(t.takeTokenChainId) ?? t.takeTokenChainId;
+        return {
+            giveToken: t.fromTokenAddress,
+            takeTokenChain: t.takeTokenChainId,
+            takeToken: (0, address_1.addressToHex)(realChainId, t.takeTokenAddress),
+            numerator: BigInt(t.numerator),
+            denominator: Number(t.denominator),
+        };
+    });
 }
 //# sourceMappingURL=evm-intent-id.js.map

package/dist/cjs/helpers/evm-intent-id.js.map

@@ -1 +1 @@
-{"version":3,"file":"evm-intent-id.js","sourceRoot":"","sources":["../../../src/helpers/evm-intent-id.ts"],"names":[],"mappings":";;AAIA,0CAIC;AARD,+BAA6E;AAE7E,2DAA+D;AAE/D,SAAgB,eAAe,CAAC,MAAsB;IAClD,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAA,0BAAmB,EAAC,4CAAwB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,OAAO,IAAA,gBAAS,EAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAsB;IACjD,OAAO;QACH,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,WAAW,EAAE,MAAM,CAAC,WAA4B;QAChD,eAAe,EAAE,uBAAuB,CAAC,MAAM,CAAC,eAAe,CAAC;QAChE,UAAU,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC;QACjD,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC;QAC9C,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC;QAC9C,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACvD,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;QAC/C,gBAAgB,EAAE,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAoB;QACpE,iBAAiB,EAAE,CAAC,MAAM,CAAC,iBAAiB,IAAI,eAAQ,CAAkB;QAC1E,uBAAuB,EAAE,IAAI;QAC7B,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAkB;QAC1D,gBAAgB,EAAE,CAAC,MAAM,CAAC,gBAAgB,IAAI,eAAQ,CAAkB;QACxE,oBAAoB,EAAE,IAAqB;QAC3C,wBAAwB,EAAE,CAAC,MAAM,CAAC,wBAAwB,IAAI,kBAAW,CAAkB;QAC3F,mBAAmB,EAAE,uBAAuB,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACxE,eAAe,EAAE,MAAM,CAAC,eAAgC;KAC3D,CAAC;AACN,CAAC;AAED,SAAS,uBAAuB,CAC5B,OAAsE;IAEtE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,cAAc,EAAE,CAAC,CAAC,OAAwB;QAC1C,MAAM,EAAE,CAAC,CAAC,mBAAmB,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB;QACpE,UAAU,EAAE,CAAC,CAAC,mBAAmB,KAAK,KAAK;KAC9C,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAS,kBAAkB,CACvB,MAA4G;IAE5G,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,OAAwB;QACjC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC5C,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC5C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;KACrC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAS,iBAAiB,CACtB,MAA0G;IAE1G,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,UAAU,EAAE,CAAC,CAAC,iBAAkC;QAChD,SAAS,EAAE,CAAC,CAAC,gBAAiC;QAC9C,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;KACrC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAS,iBAAiB,CACtB,MAAkI;IAElI,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,gBAAiC;QAC9C,cAAc,EAAE,CAAC,CAAC,gBAAgB;QAClC,SAAS,EAAE,CAAC,CAAC,gBAAiC;QAC9C,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;KACrC,CAAC,CAAC,CAAC;AACR,CAAC"}
+{"version":3,"file":"evm-intent-id.js","sourceRoot":"","sources":["../../../src/helpers/evm-intent-id.ts"],"names":[],"mappings":";;AAMA,0CAIC;AAVD,+BAA6E;AAE7E,2DAA+D;AAC/D,uCAA8D;AAC9D,qFAAwE;AAExE,SAAgB,eAAe,CAAC,MAAsB;IAClD,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAA,0BAAmB,EAAC,4CAAwB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,OAAO,IAAA,gBAAS,EAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAsB;IACjD,OAAO;QACH,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,WAAW,EAAE,MAAM,CAAC,WAA4B;QAChD,eAAe,EAAE,uBAAuB,CAAC,MAAM,CAAC,eAAe,CAAC;QAChE,UAAU,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC;QACjD,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC;QAC9C,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC;QAC9C,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACvD,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;QAC/C,gBAAgB,EAAE,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAoB;QACpE,iBAAiB,EAAE,CAAC,MAAM,CAAC,iBAAiB,IAAI,eAAQ,CAAkB;QAC1E,uBAAuB,EAAE,CAAC,MAAM,CAAC,WAAW;QAC5C,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAkB;QAC1D,gBAAgB,EAAE,CAAC,MAAM,CAAC,gBAAgB,IAAI,eAAQ,CAAkB;QACxE,oBAAoB,EAAE,IAAqB;QAC3C,wBAAwB,EAAE,CAAC,MAAM,CAAC,wBAAwB,IAAI,kBAAW,CAAkB;QAC3F,mBAAmB,EAAE,uBAAuB,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACxE,eAAe,EAAE,MAAM,CAAC,eAAgC;KAC3D,CAAC;AACN,CAAC;AAED,0EAA0E;AAC1E,SAAS,uBAAuB,CAC5B,OAAsE;IAEtE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACnB,MAAM,UAAU,GAAG,CAAC,CAAC,mBAAmB,KAAK,KAAK,CAAC;QACnD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,mBAAgC,CAAC;QACrE,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,sBAAsB;QACtB,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC;YACpC,CAAC,CAAC,IAAA,sBAAY,EAAC,IAAA,yCAAc,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;YACjE,CAAC,CAAC,IAAA,6BAAmB,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAErC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,kBAAkB,CACvB,MAA4G;IAE5G,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,OAAwB;QACjC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC5C,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC5C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;KACrC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAS,iBAAiB,CACtB,MAA0G;IAE1G,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,UAAU,EAAE,CAAC,CAAC,iBAAkC;QAChD,SAAS,EAAE,CAAC,CAAC,gBAAiC;QAC9C,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;KACrC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,yEAAyE;AACzE,SAAS,iBAAiB,CACtB,MAMG;IAEH,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAClB,MAAM,WAAW,GAAG,IAAA,yCAAc,EAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC;QAC7E,OAAO;YACH,SAAS,EAAE,CAAC,CAAC,gBAAiC;YAC9C,cAAc,EAAE,CAAC,CAAC,gBAAgB;YAClC,SAAS,EAAE,IAAA,sBAAY,EAAC,WAAW,EAAE,CAAC,CAAC,gBAAgB,CAAC;YACxD,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9B,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;SACrC,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}