@debridge-finance/borderless-validation-sdk 0.4.1 → 0.5.1

package/dist/esm/validations/low-input-sweep.js

@@ -0,0 +1,291 @@
+import { maxUint64, maxUint256 } from "viem";
+import { ChainEngine, SpecialAmount, ViolationCode, } from "../types/index.js";
+import { addressEquals, getChainEngine, isAddressRepresentationValidForChain } from "../helpers/address.js";
+import { parseIntegerString } from "../helpers/integer.js";
+import { resolveChainId } from "../whitelists/subscription-to-chain-id.js";
+import { interactionsEqual } from "../helpers/interactions.js";
+import { hexEquals } from "../helpers/hex.js";
+import { isMaxAmountMode } from "../helpers/amount.js";
+import { validateLowInputSweepBundle } from "./low-input-sweep-bundle.js";
+// CRITICAL: a sweep may remove only its own request trade from intent validation.
+// The economic decision to sweep is delegated to the API, not recomputed from
+// response-supplied prices. Transfer authorization is checked separately.
+export function validateLowInputSweeps(request, response, quoteMode) {
+    const result = {
+        sweeps: [],
+        violations: validateLowInputSweepBundle(request, response, quoteMode),
+    };
+    // Safe skip: prohibited modes or missing surviving trades/intents are
+    // reported above. Their metadata cannot remove request trades from the
+    // ordinary validation flow.
+    if (result.violations.length > 0)
+        return result;
+    const seen = new Set();
+    const sweeps = response.lowInputSweeps ?? [];
+    for (let i = 0; i < sweeps.length; i++) {
+        const sweep = sweeps[i];
+        const violations = validateSweepIndex(sweep.tradeIndex, request.trades.length, seen, i);
+        seen.add(sweep.tradeIndex);
+        if (violations.length > 0) {
+            result.violations.push(...violations);
+            continue;
+        }
+        // Only entries without metadata/amount violations become sweep contexts.
+        // Their transfer hooks and recipients are validated in a separate pass.
+        const entry = validateSweepTrade(sweep, request.trades[sweep.tradeIndex], i);
+        result.violations.push(...entry.violations);
+        result.sweeps.push(...entry.sweeps);
+    }
+    return result;
+}
+// Checks that an index refers to an existing original request trade and has not
+// appeared in earlier sweep metadata. It is not an index into response.trades.
+function validateSweepIndex(tradeIndex, tradeCount, seen, sweepIndex) {
+    const violations = [];
+    const path = `response.lowInputSweeps[${sweepIndex}].tradeIndex`;
+    // CRITICAL: indices must identify distinct entries in the original request.
+    if (!Number.isSafeInteger(tradeIndex)
+        || tradeIndex < 0
+        || tradeIndex >= tradeCount) {
+        violations.push({
+            code: ViolationCode.LowInputSweepTradeIndexInvalid,
+            message: "lowInputSweeps.tradeIndex must identify an existing request trade",
+            path,
+            expected: { min: 0, maxExclusive: tradeCount },
+            actual: tradeIndex,
+        });
+    }
+    else if (seen.has(tradeIndex)) {
+        violations.push({
+            code: ViolationCode.LowInputSweepTradeDuplicate,
+            message: "a request trade must not be swept more than once",
+            path,
+            actual: tradeIndex,
+        });
+    }
+    return violations;
+}
+// Binds one sweep entry to its original request trade and parses its transfer amount.
+// Returns no sweep context when any check fails, so the trade remains in ordinary validation.
+function validateSweepTrade(sweep, trade, sweepIndex) {
+    const violations = [];
+    const realChainId = resolveChainId(trade.srcChainId);
+    const destinationChainId = resolveChainId(trade.dstChainId);
+    const basePath = `response.lowInputSweeps[${sweepIndex}]`;
+    // Both chains are needed to compare originalTrade addresses using the right formats.
+    if (realChainId === undefined || destinationChainId === undefined) {
+        violations.push({
+            code: ViolationCode.UnknownSubscriptionId,
+            message: "a swept request trade must use known source and destination subscriptionIds",
+            path: `request.trades[${sweep.tradeIndex}]`,
+            actual: { srcChainId: trade.srcChainId, dstChainId: trade.dstChainId },
+        });
+        return { sweeps: [], violations };
+    }
+    violations.push(...validateSweepIdentity(sweep, trade, realChainId, destinationChainId, basePath));
+    violations.push(...validateSweepSourceAuthority(trade, realChainId, basePath));
+    const amount = validateSweepAmount(sweep, trade, realChainId, basePath, violations);
+    if (violations.length > 0
+        || amount === undefined
+        || trade.srcChainAuthorityAddress === undefined) {
+        // Safe skip: invalid identity/authority and unbound amounts are reported
+        // above; these entries do not remove request trades.
+        return { sweeps: [], violations };
+    }
+    return {
+        sweeps: [{
+                sweepIndex,
+                requestIndex: sweep.tradeIndex,
+                realChainId,
+                trade,
+                sender: trade.srcChainAuthorityAddress,
+                amount,
+            }],
+        violations,
+    };
+}
+// Requires a valid source authority to bind the transfer.
+function validateSweepSourceAuthority(trade, realChainId, basePath) {
+    const violations = [];
+    // CRITICAL: the transfer must be bound to a valid source authority for its chain.
+    if (trade.srcChainAuthorityAddress === undefined
+        || !isAddressRepresentationValidForChain(realChainId, trade.srcChainAuthorityAddress)) {
+        violations.push({
+            code: ViolationCode.LowInputSweepSourceAuthorityInvalid,
+            message: "a swept trade must have a valid source authority",
+            path: `${basePath}.originalTrade.srcChainAuthorityAddress`,
+            actual: { address: trade.srcChainAuthorityAddress, realChainId },
+        });
+    }
+    return violations;
+}
+// Compares duplicated sweep metadata with the request, using chain-aware address
+// comparison and field-specific equivalence rules for the originalTrade echo.
+function validateSweepIdentity(sweep, trade, sourceChainId, destinationChainId, basePath) {
+    const violations = [];
+    // CRITICAL: the duplicated metadata cannot redefine the asset or source chain.
+    if (sweep.chainId !== trade.srcChainId) {
+        violations.push(sweepMismatch(ViolationCode.LowInputSweepChainIdMismatch, `${basePath}.chainId`, trade.srcChainId, sweep.chainId));
+    }
+    if (!addressEquals(sourceChainId, sweep.tokenAddress, trade.srcChainTokenIn)) {
+        violations.push(sweepMismatch(ViolationCode.LowInputSweepTokenAddressMismatch, `${basePath}.tokenAddress`, trade.srcChainTokenIn, sweep.tokenAddress));
+    }
+    return [
+        ...violations,
+        ...validateOriginalTrade(sweep, trade, sourceChainId, destinationChainId, basePath),
+    ];
+}
+// CRITICAL: preserve every request field except the explicitly supported
+// amount/default normalization.
+function validateOriginalTrade(sweep, trade, sourceChainId, destinationChainId, basePath) {
+    const violations = [];
+    // Max-like amounts are resolved before sweep planning, with operating expenses
+    // no longer prepended to that trade. All other fields retain their request values.
+    const expectedTrade = isMaxAmountMode(trade.srcChainTokenInAmount)
+        ? { ...trade, srcChainTokenInAmount: sweep.amount, prependOperatingExpenses: false }
+        : trade;
+    // Inspect fields from both objects so an added response field is not silently ignored.
+    // A sweep replaces the whole trade, including its trade-level calls. Echoing
+    // those calls does not authorize executing them: the hook matcher accepts only
+    // the bound transfer and permitted auxiliary instructions. Bundle hooks are unchanged.
+    const fields = new Set([
+        ...Object.keys(expectedTrade),
+        ...Object.keys(sweep.originalTrade),
+    ]);
+    for (const field of fields) {
+        if (!originalTradeFieldMatches(field, expectedTrade, sweep.originalTrade, sourceChainId, destinationChainId)) {
+            violations.push(sweepMismatch(ViolationCode.LowInputSweepOriginalTradeMismatch, `${basePath}.originalTrade.${field}`, expectedTrade[field], sweep.originalTrade[field]));
+        }
+    }
+    return violations;
+}
+const SOURCE_ADDRESS_FIELDS = [
+    "srcChainTokenIn", "srcChainAuthorityAddress", "srcAllowedCancelBeneficiary",
+];
+const DESTINATION_ADDRESS_FIELDS = [
+    "dstChainTokenOut", "dstChainTokenOutRecipient", "dstChainAuthorityAddress", "allowedTaker",
+];
+// Compares one echoed request field without requiring identical address casing or
+// numeric spelling. Returns false for any difference outside the accepted field rules.
+function originalTradeFieldMatches(field, requestTrade, originalTrade, sourceChainId, destinationChainId) {
+    const expected = requestTrade[field];
+    const actual = originalTrade[field];
+    // These request flags default to false; explicit false and omission are equivalent.
+    if (field === "prependOperatingExpenses" || field === "ptp") {
+        return (expected ?? false) === (actual ?? false);
+    }
+    if (field === "preInteractions" || field === "postInteractions") {
+        return interactionsEqual(sourceChainId, requestTrade[field], originalTrade[field]);
+    }
+    // An omitted destination amount means 'auto', including in the echoed original trade.
+    if (field === "dstChainTokenOutAmount") {
+        return integerOrLiteralEquals(expected === undefined ? SpecialAmount.Auto : String(expected), actual === undefined ? SpecialAmount.Auto : String(actual));
+    }
+    // For other fields, omission must match before applying representation equivalence.
+    if (expected === undefined || actual === undefined)
+        return expected === actual;
+    if (SOURCE_ADDRESS_FIELDS.includes(field) || DESTINATION_ADDRESS_FIELDS.includes(field)) {
+        const chainId = SOURCE_ADDRESS_FIELDS.includes(field) ? sourceChainId : destinationChainId;
+        return typeof expected === "string"
+            && typeof actual === "string"
+            && addressEquals(chainId, expected, actual);
+    }
+    if (field === "srcChainTokenInAmount") {
+        return integerOrLiteralEquals(String(expected), String(actual));
+    }
+    if (field === "dlnMetadata")
+        return hexEquals(requestTrade[field], originalTrade[field]);
+    return expected === actual;
+}
+// Accepts identical literals or equal parsed integers. Different non-numeric
+// amount modes cannot be treated as equivalent and return false.
+function integerOrLiteralEquals(expected, actual) {
+    if (expected === actual)
+        return true;
+    try {
+        return parseIntegerString(expected) === parseIntegerString(actual);
+    }
+    catch {
+        // Non-numeric amount modes must have the same literal spelling.
+        return false;
+    }
+}
+// Returns the parsed transfer amount and records violations through the supplied array.
+// Auto is rejected; fixed amounts must match the request; max-like amounts are API-resolved.
+// A returned amount does not imply success: the caller must also check accumulated violations.
+function validateSweepAmount(sweep, trade, realChainId, basePath, violations) {
+    // HIGH: auto source amounts cannot be replaced by sweep transfers.
+    if (trade.srcChainTokenInAmount === SpecialAmount.Auto) {
+        violations.push({
+            code: ViolationCode.LowInputSweepWithAutoSourceAmount,
+            message: "low-input sweeps are not allowed when srcChainTokenInAmount=auto",
+            path: `request.trades[${sweep.tradeIndex}].srcChainTokenInAmount`,
+            actual: trade.srcChainTokenInAmount,
+        });
+        return undefined;
+    }
+    const amount = parseSweepTransferAmount(sweep.amount, realChainId, `${basePath}.amount`, violations);
+    // Safe skip: malformed/out-of-range metadata amounts are reported by the parser.
+    if (amount === undefined)
+        return undefined;
+    // Max-like requests authorize API balance resolution, not a fixed number.
+    // The SDK cannot independently verify the balance or reserved portion.
+    // Hook validation still requires the exact resolved amount and whitelisted recipient.
+    if (isMaxAmountMode(trade.srcChainTokenInAmount))
+        return amount;
+    violations.push(...validateFixedSweepAmount(amount, trade.srcChainTokenInAmount, sweep, realChainId, basePath));
+    return amount;
+}
+// Parses a positive transfer amount within the source engine's integer range.
+// Returns `undefined` and appends a violation for malformed or out-of-range values.
+function parseSweepTransferAmount(value, realChainId, path, violations) {
+    try {
+        const amount = parseIntegerString(value);
+        // Solana transfer instructions encode uint64; EVM/Tron amounts use uint256.
+        const maximum = getChainEngine(realChainId) === ChainEngine.Solana ? maxUint64 : maxUint256;
+        // CRITICAL: fixed and API-resolved transfer amounts must be positive and encodable.
+        if (amount > 0n && amount <= maximum)
+            return amount;
+        violations.push({
+            code: ViolationCode.LowInputSweepAmountOutOfRange,
+            message: "amount must be > 0 and fit the source chain transfer amount",
+            path,
+            expected: { min: "1", max: maximum.toString() },
+            actual: value,
+        });
+    }
+    catch (error) {
+        violations.push({
+            code: ViolationCode.LowInputSweepAmountNotInteger,
+            message: "amount must be an integer",
+            path,
+            actual: value,
+            details: error,
+        });
+    }
+    return undefined;
+}
+// Checks a fixed request amount's format/range and requires exact numeric equality
+// with the metadata amount. The transfer instruction is compared separately.
+function validateFixedSweepAmount(amount, requestAmount, sweep, realChainId, basePath) {
+    const violations = [];
+    const requested = parseSweepTransferAmount(requestAmount, realChainId, `request.trades[${sweep.tradeIndex}].srcChainTokenInAmount`, violations);
+    // Safe skip: an invalid fixed request amount is reported by the parser.
+    if (requested === undefined)
+        return violations;
+    // CRITICAL: fixed requests retain their exact spending limit.
+    if (amount !== requested) {
+        violations.push({
+            code: ViolationCode.LowInputSweepAmountMismatch,
+            message: "sweep amount must equal the fixed request source amount",
+            path: `${basePath}.amount`,
+            expected: requested.toString(),
+            actual: sweep.amount,
+        });
+    }
+    return violations;
+}
+function sweepMismatch(code, path, expected, actual, message = "low-input sweep metadata must match the original request trade") {
+    return { code, message, path, expected, actual };
+}
+//# sourceMappingURL=low-input-sweep.js.map

package/dist/esm/validations/low-input-sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"low-input-sweep.js","sourceRoot":"","sources":["../../../src/validations/low-input-sweep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC7C,OAAO,EAGH,WAAW,EAIX,aAAa,EAEb,aAAa,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,oCAAoC,EAAE,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAiBvE,kFAAkF;AAClF,8EAA8E;AAC9E,0EAA0E;AAC1E,MAAM,UAAU,sBAAsB,CAClC,OAA8B,EAC9B,QAAgC,EAChC,SAAkB;IAElB,MAAM,MAAM,GAAwB;QAChC,MAAM,EAAE,EAAE;QACV,UAAU,EAAE,2BAA2B,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;KACxE,CAAC;IAEF,sEAAsE;IACtE,uEAAuE;IACvE,4BAA4B;IAC5B,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAEhD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAC;IAE7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAE3B,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;YACtC,SAAS;QACb,CAAC;QAED,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,SAAS,kBAAkB,CACvB,UAAkB,EAClB,UAAkB,EAClB,IAAyB,EACzB,UAAkB;IAElB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,2BAA2B,UAAU,cAAc,CAAC;IAEjE,4EAA4E;IAC5E,IACI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;WAC9B,UAAU,GAAG,CAAC;WACd,UAAU,IAAI,UAAU,EAC7B,CAAC;QACC,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,8BAA8B;YAClD,OAAO,EAAE,mEAAmE;YAC5E,IAAI;YACJ,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE;YAC9C,MAAM,EAAE,UAAU;SACrB,CAAC,CAAC;IACP,CAAC;SAAM,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,2BAA2B;YAC/C,OAAO,EAAE,kDAAkD;YAC3D,IAAI;YACJ,MAAM,EAAE,UAAU;SACrB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,sFAAsF;AACtF,8FAA8F;AAC9F,SAAS,kBAAkB,CACvB,KAA4B,EAC5B,KAAmB,EACnB,UAAkB;IAElB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,kBAAkB,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,2BAA2B,UAAU,GAAG,CAAC;IAE1D,qFAAqF;IACrF,IAAI,WAAW,KAAK,SAAS,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAChE,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,qBAAqB;YACzC,OAAO,EAAE,6EAA6E;YACtF,IAAI,EAAE,kBAAkB,KAAK,CAAC,UAAU,GAAG;YAC3C,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE;SACzE,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;IACtC,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnG,UAAU,CAAC,IAAI,CAAC,GAAG,4BAA4B,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEpF,IACI,UAAU,CAAC,MAAM,GAAG,CAAC;WAClB,MAAM,KAAK,SAAS;WACpB,KAAK,CAAC,wBAAwB,KAAK,SAAS,EACjD,CAAC;QACC,yEAAyE;QACzE,qDAAqD;QACrD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;IACtC,CAAC;IAED,OAAO;QACH,MAAM,EAAE,CAAC;gBACL,UAAU;gBACV,YAAY,EAAE,KAAK,CAAC,UAAU;gBAC9B,WAAW;gBACX,KAAK;gBACL,MAAM,EAAE,KAAK,CAAC,wBAAwB;gBACtC,MAAM;aACT,CAAC;QACF,UAAU;KACb,CAAC;AACN,CAAC;AAED,0DAA0D;AAC1D,SAAS,4BAA4B,CACjC,KAAmB,EACnB,WAAoB,EACpB,QAAgB;IAEhB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,kFAAkF;IAClF,IACI,KAAK,CAAC,wBAAwB,KAAK,SAAS;WACzC,CAAC,oCAAoC,CAAC,WAAW,EAAE,KAAK,CAAC,wBAAwB,CAAC,EACvF,CAAC;QACC,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,mCAAmC;YACvD,OAAO,EAAE,kDAAkD;YAC3D,IAAI,EAAE,GAAG,QAAQ,yCAAyC;YAC1D,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,wBAAwB,EAAE,WAAW,EAAE;SACnE,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,iFAAiF;AACjF,8EAA8E;AAC9E,SAAS,qBAAqB,CAC1B,KAA4B,EAC5B,KAAmB,EACnB,aAAsB,EACtB,kBAA2B,EAC3B,QAAgB;IAEhB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,+EAA+E;IAC/E,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACrC,UAAU,CAAC,IAAI,CAAC,aAAa,CACzB,aAAa,CAAC,4BAA4B,EAC1C,GAAG,QAAQ,UAAU,EACrB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,OAAO,CAChB,CAAC,CAAC;IACP,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3E,UAAU,CAAC,IAAI,CAAC,aAAa,CACzB,aAAa,CAAC,iCAAiC,EAC/C,GAAG,QAAQ,eAAe,EAC1B,KAAK,CAAC,eAAe,EACrB,KAAK,CAAC,YAAY,CACrB,CAAC,CAAC;IACP,CAAC;IAED,OAAO;QACH,GAAG,UAAU;QACb,GAAG,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,QAAQ,CAAC;KACtF,CAAC;AACN,CAAC;AAED,yEAAyE;AACzE,gCAAgC;AAChC,SAAS,qBAAqB,CAC1B,KAA4B,EAC5B,KAAmB,EACnB,aAAsB,EACtB,kBAA2B,EAC3B,QAAgB;IAEhB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,+EAA+E;IAC/E,mFAAmF;IACnF,MAAM,aAAa,GAAiB,eAAe,CAAC,KAAK,CAAC,qBAAqB,CAAC;QAC5E,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,qBAAqB,EAAE,KAAK,CAAC,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE;QACpF,CAAC,CAAC,KAAK,CAAC;IAEZ,uFAAuF;IACvF,6EAA6E;IAC7E,+EAA+E;IAC/E,uFAAuF;IACvF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAqB;QACvC,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAA2B;QACvD,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAA2B;KAChE,CAAC,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,yBAAyB,CAC1B,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,aAAa,EAAE,kBAAkB,CAC/E,EAAE,CAAC;YACA,UAAU,CAAC,IAAI,CAAC,aAAa,CACzB,aAAa,CAAC,kCAAkC,EAChD,GAAG,QAAQ,kBAAkB,KAAK,EAAE,EACpC,aAAa,CAAC,KAAK,CAAC,EACpB,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAC7B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,MAAM,qBAAqB,GAAoC;IAC3D,iBAAiB,EAAE,0BAA0B,EAAE,6BAA6B;CAC/E,CAAC;AACF,MAAM,0BAA0B,GAAoC;IAChE,kBAAkB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,cAAc;CAC9F,CAAC;AAEF,kFAAkF;AAClF,uFAAuF;AACvF,SAAS,yBAAyB,CAC9B,KAAyB,EACzB,YAA0B,EAC1B,aAA2B,EAC3B,aAAsB,EACtB,kBAA2B;IAE3B,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAEpC,oFAAoF;IACpF,IAAI,KAAK,KAAK,0BAA0B,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAC1D,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;QAC9D,OAAO,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,sFAAsF;IACtF,IAAI,KAAK,KAAK,wBAAwB,EAAE,CAAC;QACrC,OAAO,sBAAsB,CACzB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAC9D,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAC7D,CAAC;IACN,CAAC;IAED,oFAAoF;IACpF,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,QAAQ,KAAK,MAAM,CAAC;IAE/E,IAAI,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtF,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC3F,OAAO,OAAO,QAAQ,KAAK,QAAQ;eAC5B,OAAO,MAAM,KAAK,QAAQ;eAC1B,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;QACpC,OAAO,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,KAAK,KAAK,aAAa;QAAE,OAAO,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAEzF,OAAO,QAAQ,KAAK,MAAM,CAAC;AAC/B,CAAC;AAED,6EAA6E;AAC7E,iEAAiE;AACjE,SAAS,sBAAsB,CAAC,QAAgB,EAAE,MAAc;IAC5D,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAErC,IAAI,CAAC;QACD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,KAAK,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACL,gEAAgE;QAChE,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,wFAAwF;AACxF,6FAA6F;AAC7F,+FAA+F;AAC/F,SAAS,mBAAmB,CACxB,KAA4B,EAC5B,KAAmB,EACnB,WAAoB,EACpB,QAAgB,EAChB,UAAuB;IAEvB,mEAAmE;IACnE,IAAI,KAAK,CAAC,qBAAqB,KAAK,aAAa,CAAC,IAAI,EAAE,CAAC;QACrD,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,iCAAiC;YACrD,OAAO,EAAE,kEAAkE;YAC3E,IAAI,EAAE,kBAAkB,KAAK,CAAC,UAAU,yBAAyB;YACjE,MAAM,EAAE,KAAK,CAAC,qBAAqB;SACtC,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,QAAQ,SAAS,EAAE,UAAU,CAAC,CAAC;IAErG,iFAAiF;IACjF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAE3C,0EAA0E;IAC1E,uEAAuE;IACvE,sFAAsF;IACtF,IAAI,eAAe,CAAC,KAAK,CAAC,qBAAqB,CAAC;QAAE,OAAO,MAAM,CAAC;IAEhE,UAAU,CAAC,IAAI,CAAC,GAAG,wBAAwB,CACvC,MAAM,EAAE,KAAK,CAAC,qBAAqB,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,CACpE,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,oFAAoF;AACpF,SAAS,wBAAwB,CAC7B,KAAa,EACb,WAAoB,EACpB,IAAY,EACZ,UAAuB;IAEvB,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACzC,4EAA4E;QAC5E,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;QAE5F,oFAAoF;QACpF,IAAI,MAAM,GAAG,EAAE,IAAI,MAAM,IAAI,OAAO;YAAE,OAAO,MAAM,CAAC;QAEpD,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,6BAA6B;YACjD,OAAO,EAAE,6DAA6D;YACtE,IAAI;YACJ,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE;YAC/C,MAAM,EAAE,KAAK;SAChB,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,6BAA6B;YACjD,OAAO,EAAE,2BAA2B;YACpC,IAAI;YACJ,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,KAAK;SACjB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,mFAAmF;AACnF,6EAA6E;AAC7E,SAAS,wBAAwB,CAC7B,MAAc,EACd,aAAqB,EACrB,KAA4B,EAC5B,WAAoB,EACpB,QAAgB;IAEhB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,wBAAwB,CACtC,aAAa,EAAE,WAAW,EAAE,kBAAkB,KAAK,CAAC,UAAU,yBAAyB,EAAE,UAAU,CACtG,CAAC;IAEF,wEAAwE;IACxE,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAE/C,8DAA8D;IAC9D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACvB,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,2BAA2B;YAC/C,OAAO,EAAE,yDAAyD;YAClE,IAAI,EAAE,GAAG,QAAQ,SAAS;YAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;SACvB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAClB,IAEsD,EACtD,IAAY,EACZ,QAAiB,EACjB,MAAe,EACf,OAAO,GAAG,gEAAgE;IAE1E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACrD,CAAC"}

package/dist/esm/validations/on-chain-intent-submission.js

@@ -1,9 +1,9 @@
-import { ChainEngine, ViolationCode, } from "../types/index.js";
+import { ApprovalMode, ChainEngine, ViolationCode, } from "../types/index.js";
 import { getChainEngine } from "../helpers/address.js";
 import { resolveChainId } from "../whitelists/subscription-to-chain-id.js";
 const SUPPORTED_ON_CHAIN_INTENT_SOURCE_ENGINES = [
     ChainEngine.EVM,
-    ChainEngine.Tron,
+    ChainEngine.Solana,
 ];
 export function validateOnChainIntentSubmission(request) {
     if (request.intentOnChainSubmission !== true)
@@ -11,9 +11,22 @@ export function validateOnChainIntentSubmission(request) {
     return [
         ...validateAccountAbstractionDisabled(request),
         ...validateRefillDisabled(request),
+        ...validatePermitDisabled(request),
         ...validateSupportedSourceChains(request),
     ];
 }
+// HIGH: on-chain intent submission does not use a permit action.
+function validatePermitDisabled(request) {
+    if (request.approvalMode !== ApprovalMode.Permit)
+        return [];
+    return [{
+            code: ViolationCode.OnChainIntentForbiddenWithPermit,
+            message: "on-chain intent submission is incompatible with permit approval mode",
+            path: "request.approvalMode",
+            expected: ApprovalMode.Approve,
+            actual: request.approvalMode,
+        }];
+}
 // HIGH: on-chain intent submission is incompatible with account abstraction.
 function validateAccountAbstractionDisabled(request) {
     if (!request.enableAccountAbstraction)
@@ -38,9 +51,7 @@ function validateRefillDisabled(request) {
             actual: request.useRefill,
         }];
 }
-// HIGH: on-chain intent submission uses the EVM-compatible flow supported by
-// EVM and Tron source chains (Solana is not currently supported by the API for
-// this flow).
+// HIGH: reject only source engines for which the API has no on-chain submission flow.
 function validateSupportedSourceChains(request) {
     const violations = [];
     for (let i = 0; i < request.trades.length; i++) {
@@ -54,7 +65,7 @@ function validateSupportedSourceChains(request) {
             continue;
         violations.push({
             code: ViolationCode.OnChainIntentUnsupportedSourceChain,
-            message: "on-chain intent submission requires an EVM or Tron source chain",
+            message: "on-chain intent submission requires an EVM or Solana source chain",
             path: `request.trades[${i}].srcChainId`,
             expected: {
                 chainEngines: SUPPORTED_ON_CHAIN_INTENT_SOURCE_ENGINES.map(engine => ChainEngine[engine]),

package/dist/esm/validations/on-chain-intent-submission.js.map

@@ -1 +1 @@
-{"version":3,"file":"on-chain-intent-submission.js","sourceRoot":"","sources":["../../../src/validations/on-chain-intent-submission.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,WAAW,EAEX,aAAa,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAExE,MAAM,wCAAwC,GAA2B;IACrE,WAAW,CAAC,GAAG;IACf,WAAW,CAAC,IAAI;CACnB,CAAC;AAEF,MAAM,UAAU,+BAA+B,CAC3C,OAA8B;IAE9B,IAAI,OAAO,CAAC,uBAAuB,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAExD,OAAO;QACH,GAAG,kCAAkC,CAAC,OAAO,CAAC;QAC9C,GAAG,sBAAsB,CAAC,OAAO,CAAC;QAClC,GAAG,6BAA6B,CAAC,OAAO,CAAC;KAC5C,CAAC;AACN,CAAC;AAED,6EAA6E;AAC7E,SAAS,kCAAkC,CAAC,OAA8B;IACtE,IAAI,CAAC,OAAO,CAAC,wBAAwB;QAAE,OAAO,EAAE,CAAC;IAEjD,OAAO,CAAC;YACJ,IAAI,EAAE,aAAa,CAAC,4BAA4B;YAChD,OAAO,EAAE,qEAAqE;YAC9E,IAAI,EAAE,kCAAkC;YACxC,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,OAAO,CAAC,wBAAwB;SAC3C,CAAC,CAAC;AACP,CAAC;AAED,gEAAgE;AAChE,SAAS,sBAAsB,CAAC,OAA8B;IAC1D,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAE1C,OAAO,CAAC;YACJ,IAAI,EAAE,aAAa,CAAC,gCAAgC;YACpD,OAAO,EAAE,wDAAwD;YACjE,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,OAAO,CAAC,SAAS;SAC5B,CAAC,CAAC;AACP,CAAC;AAED,6EAA6E;AAC7E,+EAA+E;AAC/E,cAAc;AACd,SAAS,6BAA6B,CAAC,OAA8B;IACjE,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAErD,qFAAqF;QACrF,IAAI,WAAW,KAAK,SAAS;YAAE,SAAS;QAExC,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,wCAAwC,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,SAAS;QAE7E,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,mCAAmC;YACvD,OAAO,EAAE,iEAAiE;YAC1E,IAAI,EAAE,kBAAkB,CAAC,cAAc;YACvC,QAAQ,EAAE;gBACN,YAAY,EAAE,wCAAwC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;aAC5F;YACD,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,CAAC,EAAE;SAC/E,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}
+{"version":3,"file":"on-chain-intent-submission.js","sourceRoot":"","sources":["../../../src/validations/on-chain-intent-submission.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,YAAY,EACZ,WAAW,EAEX,aAAa,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAExE,MAAM,wCAAwC,GAA2B;IACrE,WAAW,CAAC,GAAG;IACf,WAAW,CAAC,MAAM;CACrB,CAAC;AAEF,MAAM,UAAU,+BAA+B,CAC3C,OAA8B;IAE9B,IAAI,OAAO,CAAC,uBAAuB,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAExD,OAAO;QACH,GAAG,kCAAkC,CAAC,OAAO,CAAC;QAC9C,GAAG,sBAAsB,CAAC,OAAO,CAAC;QAClC,GAAG,sBAAsB,CAAC,OAAO,CAAC;QAClC,GAAG,6BAA6B,CAAC,OAAO,CAAC;KAC5C,CAAC;AACN,CAAC;AAED,iEAAiE;AACjE,SAAS,sBAAsB,CAAC,OAA8B;IAC1D,IAAI,OAAO,CAAC,YAAY,KAAK,YAAY,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAE5D,OAAO,CAAC;YACJ,IAAI,EAAE,aAAa,CAAC,gCAAgC;YACpD,OAAO,EAAE,sEAAsE;YAC/E,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,YAAY,CAAC,OAAO;YAC9B,MAAM,EAAE,OAAO,CAAC,YAAY;SAC/B,CAAC,CAAC;AACP,CAAC;AAED,6EAA6E;AAC7E,SAAS,kCAAkC,CAAC,OAA8B;IACtE,IAAI,CAAC,OAAO,CAAC,wBAAwB;QAAE,OAAO,EAAE,CAAC;IAEjD,OAAO,CAAC;YACJ,IAAI,EAAE,aAAa,CAAC,4BAA4B;YAChD,OAAO,EAAE,qEAAqE;YAC9E,IAAI,EAAE,kCAAkC;YACxC,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,OAAO,CAAC,wBAAwB;SAC3C,CAAC,CAAC;AACP,CAAC;AAED,gEAAgE;AAChE,SAAS,sBAAsB,CAAC,OAA8B;IAC1D,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAE1C,OAAO,CAAC;YACJ,IAAI,EAAE,aAAa,CAAC,gCAAgC;YACpD,OAAO,EAAE,wDAAwD;YACjE,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,OAAO,CAAC,SAAS;SAC5B,CAAC,CAAC;AACP,CAAC;AAED,sFAAsF;AACtF,SAAS,6BAA6B,CAAC,OAA8B;IACjE,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAErD,qFAAqF;QACrF,IAAI,WAAW,KAAK,SAAS;YAAE,SAAS;QAExC,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,wCAAwC,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,SAAS;QAE7E,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,mCAAmC;YACvD,OAAO,EAAE,mEAAmE;YAC5E,IAAI,EAAE,kBAAkB,CAAC,cAAc;YACvC,QAAQ,EAAE;gBACN,YAAY,EAAE,wCAAwC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;aAC5F;YACD,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,CAAC,EAAE;SAC/E,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/esm/validations/ptp.js

@@ -1,30 +1,28 @@
 import { ViolationCode, SpecialAmount, } from "../types/index.js";
 import { parseIntegerString } from "../helpers/integer.js";
 import { isMaxAmountMode } from "../helpers/amount.js";
-// CRITICAL: for each trade where request.ptp === true:
+// CRITICAL: for each matched trade pair where requestTrade.ptp === true:
 //   - for fixed (not max-like/auto) source amounts,
-//     response.trades[i].srcChainTokenIn.amount === request.trades[i].srcChainTokenInAmount
-//   - response.trades[i].dstChainTokenOut.amount === request.trades[i].dstChainTokenOutAmount
-//   - response.trades[i].dstChainTokenOut.recommendedAmount
-//     === response.trades[i].dstChainTokenOut.amount
+//     responseTrade.srcChainTokenIn.amount === requestTrade.srcChainTokenInAmount
+//   - responseTrade.dstChainTokenOut.amount === requestTrade.dstChainTokenOutAmount
+//   - responseTrade.dstChainTokenOut.recommendedAmount
+//     === responseTrade.dstChainTokenOut.amount
 //
 // The source request may use a max-like mode that the API resolves before
 // building the response. Other accepted PTP amounts must be numeric.
 // Parse errors are still reported defensively for malformed input or response data.
-export function validatePtp(request, response) {
+export function validatePtp(tradePairs) {
     const violations = [];
-    const pairCount = Math.min(request.trades.length, response.trades.length);
-    for (let i = 0; i < pairCount; i++) {
-        const reqTrade = request.trades[i];
-        if (reqTrade.ptp !== true)
+    for (const pair of tradePairs) {
+        if (pair.requestTrade.ptp !== true)
             continue;
-        violations.push(...validatePtpTrade(reqTrade, response.trades[i], i));
+        violations.push(...validatePtpTrade(pair.requestTrade, pair.responseTrade, pair.requestIndex, pair.responseIndex));
     }
     return violations;
 }
-function validatePtpTrade(reqTrade, resTrade, tradeIndex) {
+function validatePtpTrade(reqTrade, resTrade, requestIndex, responseIndex) {
     const violations = [];
-    const basePath = `response.trades[${tradeIndex}]`;
+    const basePath = `response.trades[${responseIndex}]`;
     // CRITICAL: srcChainTokenIn.amount must mirror request srcChainTokenInAmount.
     const reqSrc = reqTrade.srcChainTokenInAmount;
     // Safe skip: max-like source amounts are resolved from dynamic wallet state.
@@ -40,7 +38,7 @@ function validatePtpTrade(reqTrade, resTrade, tradeIndex) {
             violations.push({
                 code: ViolationCode.PtpAmountInvalid,
                 message: "request.trades[].srcChainTokenInAmount is not a valid integer",
-                path: `request.trades[${tradeIndex}].srcChainTokenInAmount`,
+                path: `request.trades[${requestIndex}].srcChainTokenInAmount`,
                 actual: reqSrc,
                 details: error,
             });
@@ -82,7 +80,7 @@ function validatePtpTrade(reqTrade, resTrade, tradeIndex) {
             violations.push({
                 code: ViolationCode.PtpAmountInvalid,
                 message: "request.trades[].dstChainTokenOutAmount is not a valid integer",
-                path: `request.trades[${tradeIndex}].dstChainTokenOutAmount`,
+                path: `request.trades[${requestIndex}].dstChainTokenOutAmount`,
                 actual: reqDst,
                 details: error,
             });

package/dist/esm/validations/ptp.js.map

@@ -1 +1 @@
-{"version":3,"file":"ptp.js","sourceRoot":"","sources":["../../../src/validations/ptp.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,aAAa,EAKb,aAAa,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,uDAAuD;AACvD,oDAAoD;AACpD,4FAA4F;AAC5F,8FAA8F;AAC9F,4DAA4D;AAC5D,qDAAqD;AACrD,EAAE;AACF,0EAA0E;AAC1E,qEAAqE;AACrE,oFAAoF;AACpF,MAAM,UAAU,WAAW,CACvB,OAA8B,EAC9B,QAAgC;IAEhC,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE1E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI;YAAE,SAAS;QACpC,UAAU,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,gBAAgB,CACrB,QAAsB,EACtB,QAAuB,EACvB,UAAkB;IAElB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,mBAAmB,UAAU,GAAG,CAAC;IAElD,8EAA8E;IAC9E,MAAM,MAAM,GAAG,QAAQ,CAAC,qBAAqB,CAAC;IAC9C,6EAA6E;IAC7E,qFAAqF;IACrF,IAAI,MAAM,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,GAAG,QAAQ,yBAAyB,CAAC;QAClD,IAAI,SAAiB,CAAC;QACtB,IAAI,MAAc,CAAC;QAEnB,IAAI,CAAC;YACD,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB;gBACpC,OAAO,EAAE,+DAA+D;gBACxE,IAAI,EAAE,kBAAkB,UAAU,yBAAyB;gBAC3D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,SAAS,GAAG,EAAE,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACD,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB;gBACpC,OAAO,EAAE,iEAAiE;gBAC1E,IAAI;gBACJ,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,MAAM;gBACvC,OAAO,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,MAAM,GAAG,SAAS,CAAC;QACvB,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,oBAAoB;gBACxC,OAAO,EACH,+EAA+E;gBACnF,IAAI;gBACJ,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,MAAM;aAC1C,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,MAAM,MAAM,GAAG,QAAQ,CAAC,sBAAsB,CAAC;IAC/C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,aAAa,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,GAAG,QAAQ,0BAA0B,CAAC;QACnD,IAAI,SAAiB,CAAC;QACtB,IAAI,MAAc,CAAC;QAEnB,IAAI,CAAC;YACD,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB;gBACpC,OAAO,EAAE,gEAAgE;gBACzE,IAAI,EAAE,kBAAkB,UAAU,0BAA0B;gBAC5D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,SAAS,GAAG,EAAE,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACD,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB;gBACpC,OAAO,EAAE,kEAAkE;gBAC3E,IAAI;gBACJ,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;gBACxC,OAAO,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,MAAM,GAAG,SAAS,CAAC;QACvB,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,oBAAoB;gBACxC,OAAO,EACH,iFAAiF;gBACrF,IAAI;gBACJ,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;aAC3C,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,MAAM,WAAW,GAAG,QAAQ,CAAC,gBAAgB,CAAC,iBAAiB,CAAC;IAChE,MAAM,eAAe,GAAG,GAAG,QAAQ,qCAAqC,CAAC;IACzE,IAAI,cAAsB,CAAC;IAC3B,IAAI,SAAiB,CAAC;IAEtB,IAAI,CAAC;QACD,cAAc,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB;YACpC,OAAO,EACH,6EAA6E;YACjF,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,IAAI,CAAC;QACD,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB;YACpC,OAAO,EAAE,kEAAkE;YAC3E,IAAI,EAAE,GAAG,QAAQ,0BAA0B;YAC3C,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;YACxC,OAAO,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,4BAA4B;YAChD,OAAO,EACH,uEAAuE;kBACrE,gBAAgB;YACtB,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;YAC1C,MAAM,EAAE,WAAW;SACtB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}
+{"version":3,"file":"ptp.js","sourceRoot":"","sources":["../../../src/validations/ptp.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,aAAa,EAGb,aAAa,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,yEAAyE;AACzE,oDAAoD;AACpD,kFAAkF;AAClF,oFAAoF;AACpF,uDAAuD;AACvD,gDAAgD;AAChD,EAAE;AACF,0EAA0E;AAC1E,qEAAqE;AACrE,oFAAoF;AACpF,MAAM,UAAU,WAAW,CACvB,UAAuB;IAEvB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,KAAK,IAAI;YAAE,SAAS;QAE7C,UAAU,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAC/B,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,aAAa,CACrB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,gBAAgB,CACrB,QAAsB,EACtB,QAAuB,EACvB,YAAoB,EACpB,aAAqB;IAErB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,mBAAmB,aAAa,GAAG,CAAC;IAErD,8EAA8E;IAC9E,MAAM,MAAM,GAAG,QAAQ,CAAC,qBAAqB,CAAC;IAC9C,6EAA6E;IAC7E,qFAAqF;IACrF,IAAI,MAAM,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,GAAG,QAAQ,yBAAyB,CAAC;QAClD,IAAI,SAAiB,CAAC;QACtB,IAAI,MAAc,CAAC;QAEnB,IAAI,CAAC;YACD,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB;gBACpC,OAAO,EAAE,+DAA+D;gBACxE,IAAI,EAAE,kBAAkB,YAAY,yBAAyB;gBAC7D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,SAAS,GAAG,EAAE,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACD,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB;gBACpC,OAAO,EAAE,iEAAiE;gBAC1E,IAAI;gBACJ,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,MAAM;gBACvC,OAAO,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,MAAM,GAAG,SAAS,CAAC;QACvB,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,oBAAoB;gBACxC,OAAO,EACH,+EAA+E;gBACnF,IAAI;gBACJ,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,MAAM;aAC1C,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,MAAM,MAAM,GAAG,QAAQ,CAAC,sBAAsB,CAAC;IAC/C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,aAAa,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,GAAG,QAAQ,0BAA0B,CAAC;QACnD,IAAI,SAAiB,CAAC;QACtB,IAAI,MAAc,CAAC;QAEnB,IAAI,CAAC;YACD,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB;gBACpC,OAAO,EAAE,gEAAgE;gBACzE,IAAI,EAAE,kBAAkB,YAAY,0BAA0B;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,SAAS,GAAG,EAAE,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACD,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB;gBACpC,OAAO,EAAE,kEAAkE;gBAC3E,IAAI;gBACJ,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;gBACxC,OAAO,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,MAAM,GAAG,SAAS,CAAC;QACvB,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,oBAAoB;gBACxC,OAAO,EACH,iFAAiF;gBACrF,IAAI;gBACJ,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;aAC3C,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,MAAM,WAAW,GAAG,QAAQ,CAAC,gBAAgB,CAAC,iBAAiB,CAAC;IAChE,MAAM,eAAe,GAAG,GAAG,QAAQ,qCAAqC,CAAC;IACzE,IAAI,cAAsB,CAAC;IAC3B,IAAI,SAAiB,CAAC;IAEtB,IAAI,CAAC;QACD,cAAc,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB;YACpC,OAAO,EACH,6EAA6E;YACjF,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,IAAI,CAAC;QACD,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB;YACpC,OAAO,EAAE,kEAAkE;YAC3E,IAAI,EAAE,GAAG,QAAQ,0BAA0B;YAC3C,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;YACxC,OAAO,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,4BAA4B;YAChD,OAAO,EACH,uEAAuE;kBACrE,gBAAgB;YACtB,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,CAAC,MAAM;YAC1C,MAAM,EAAE,WAAW;SACtB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/esm/validations/solana-embedded-intent.js

@@ -0,0 +1,184 @@
+import { PublicKey } from "@solana/web3.js";
+import { bytesToHex } from "viem";
+import { SolanaActionKind, SolanaActionOperation, ViolationCode, } from "../types/index.js";
+import { encodeSolanaIntent } from "../helpers/solana-intent-id.js";
+import { decodeSolanaVersionedTransaction } from "../helpers/solana-transaction-decode.js";
+import { resolveInstructions, isInitIntentInstruction, isUpdateIntentInstruction, } from "../helpers/solana-instruction.js";
+import { getSolanaIntentInitialSpace, readSolanaInitIntent, readSolanaUpdateIntent, SolanaIntentDataOrigin, } from "../helpers/solana-intent-instruction.js";
+import { validateSolanaInitIntentAccounts, validateSolanaUpdateIntentAccounts, } from "./solana-intent-accounts.js";
+// CRITICAL: embedded transactions must create the same intent that was validated
+// against the request. This also checks a quote's executable payload when present;
+// an absent quote payload or a separate Sign action does not require an embedded one.
+export function validateSolanaEmbeddedIntentActions(actions, basePath, realChainId, intent, intentProgram) {
+    return actions.flatMap((action, i) => {
+        if (!action.actions.includes(SolanaActionOperation.Intent)
+            || (action.type !== SolanaActionKind.Transaction
+                && action.type !== SolanaActionKind.SignTransaction))
+            return [];
+        return validateEmbeddedIntentAction(action, `${basePath}.requiredActions[${i}].data.data`, realChainId, intent, intentProgram);
+    });
+}
+function validateEmbeddedIntentAction(action, path, realChainId, intent, intentProgram) {
+    const decoded = decodeSolanaVersionedTransaction(action.data.data, path, ViolationCode.SolanaTransactionDecodeError, ViolationCode.SolanaTransactionVersionInvalid);
+    if (!decoded.ok)
+        return decoded.violations;
+    let expected;
+    try {
+        expected = buildExpectedIntent(intent, realChainId, intentProgram);
+    }
+    catch (error) {
+        return [{
+                code: ViolationCode.SolanaEmbeddedIntentComputeError,
+                message: "cannot derive the expected embedded Solana intent",
+                path,
+                details: error,
+            }];
+    }
+    return validateInstructions(decoded.transaction, expected, path);
+}
+function buildExpectedIntent(intent, realChainId, intentProgram) {
+    const encoded = encodeSolanaIntent(intent, realChainId, intentProgram);
+    const program = new PublicKey(intentProgram);
+    const maker = new PublicKey(intent.intentOwner);
+    const derive = (seed, ...seeds) => PublicKey.findProgramAddressSync([new TextEncoder().encode(seed), ...seeds], program)[0].toBase58();
+    return {
+        ...encoded,
+        space: getSolanaIntentInitialSpace(encoded.serializedIntent.length, (intent.inputToken ?? []).length),
+        accounts: {
+            program: program.toBase58(),
+            maker: maker.toBase58(),
+            makerInfo: derive("maker_info", maker.toBytes()),
+            state: derive("state"),
+            intentStorage: derive("intent_storage", encoded.intentId),
+            eventAuthority: derive("__event_authority"),
+        },
+    };
+}
+// HIGH: initialize exactly once, then seal exactly once. An inline update carries
+// the entire intent; it is not a chunk to be appended. Repeated updates cannot
+// overwrite a sealed intent, and extra initializations can allocate other storage.
+function validateInstructions(transaction, expected, path) {
+    const unresolvedPrograms = transaction.message.compiledInstructions.flatMap((instruction, i) => transaction.message.staticAccountKeys[instruction.programIdIndex] === undefined
+        ? [i]
+        : []);
+    // HIGH: do not classify instructions whose program is unresolved. This also
+    // preserves the original instruction indices when resolving account operands.
+    if (unresolvedPrograms.length > 0) {
+        return [{
+                code: ViolationCode.SolanaIntentInstructionAccountsUnresolved,
+                message: "embedded intent transaction contains unresolved instruction programs",
+                path,
+                actual: { instructionIndices: unresolvedPrograms },
+            }];
+    }
+    const resolved = resolveInstructions(transaction.message.compiledInstructions, transaction.message.staticAccountKeys.map(key => key.toBase58()));
+    const program = expected.accounts.program;
+    const initIndices = resolved.flatMap((instruction, i) => isInitIntentInstruction(instruction, program) ? [i] : []);
+    const updateIndices = resolved.flatMap((instruction, i) => isUpdateIntentInstruction(instruction, program) ? [i] : []);
+    return validateIntentSequence(transaction, resolved, initIndices, updateIndices, expected, path);
+}
+function validateIntentSequence(transaction, resolved, initIndices, updateIndices, expected, path) {
+    if (initIndices.length !== 1
+        || updateIndices.length !== 1
+        || initIndices[0] >= updateIndices[0]) {
+        return [{
+                code: ViolationCode.SolanaIntentInstructionSequenceInvalid,
+                message: "embedded intent requires one initialization followed by one complete update",
+                path,
+                actual: { initIndices, updateIndices },
+            }];
+    }
+    return [
+        ...validateInit(transaction, resolved[initIndices[0]], initIndices[0], expected, path),
+        ...validateUpdate(transaction, resolved[updateIndices[0]], updateIndices[0], expected, path),
+    ];
+}
+function validateInit(transaction, instruction, instructionIndex, expected, path) {
+    try {
+        const data = readSolanaInitIntent(instruction);
+        return [
+            ...validateInitData(data, expected, path, instructionIndex),
+            ...validateSolanaInitIntentAccounts(transaction, instructionIndex, data.kind, expected.accounts, path),
+        ];
+    }
+    catch (error) {
+        return invalidInstruction(path, instructionIndex, error);
+    }
+}
+// CRITICAL: the initialization hash commits to the checked intent. Its allocation
+// must match that intent's storage budget, not an arbitrary rent expense.
+function validateInitData(data, expected, path, instructionIndex) {
+    const violations = [];
+    if (!bytesEqual(data.encodedIntentHash, expected.encodedIntentHash)) {
+        violations.push({
+            code: ViolationCode.SolanaIntentInstructionHashMismatch,
+            message: "initialization hash does not match the checked intent",
+            path,
+            expected: bytesToHex(expected.encodedIntentHash),
+            actual: bytesToHex(data.encodedIntentHash),
+            details: { instructionIndex },
+        });
+    }
+    if (data.space !== expected.space) {
+        violations.push({
+            code: ViolationCode.SolanaIntentInstructionSpaceMismatch,
+            message: "initialization allocation does not match the checked intent storage budget",
+            path,
+            expected: expected.space,
+            actual: data.space,
+            details: { instructionIndex },
+        });
+    }
+    return violations;
+}
+function validateUpdate(transaction, instruction, instructionIndex, expected, path) {
+    try {
+        const data = readSolanaUpdateIntent(instruction);
+        // CRITICAL: a reference to external account bytes is not proof of their
+        // contents. Reject this unverifiable representation rather than accepting
+        // a hash alone; inline updates supply the full payload for comparison.
+        if (data.origin === SolanaIntentDataOrigin.Buffer) {
+            return [{
+                    code: ViolationCode.SolanaIntentUpdateBufferUnverifiable,
+                    message: "external-buffer intent update cannot be verified from the bundle response",
+                    path,
+                    actual: { origin: SolanaIntentDataOrigin[data.origin], offset: data.offset, length: data.length },
+                    details: { instructionIndex },
+                }];
+        }
+        return [
+            ...validateUpdateData(data.data, expected.serializedIntent, path, instructionIndex),
+            ...validateSolanaUpdateIntentAccounts(transaction, instructionIndex, expected.accounts, path),
+        ];
+    }
+    catch (error) {
+        return invalidInstruction(path, instructionIndex, error);
+    }
+}
+// CRITICAL: the complete update payload must encode the checked intent, not just
+// start with an allowed discriminator. Chunking into different transactions is
+// not inferred from labels; the update must itself contain the complete bytes.
+function validateUpdateData(actual, expected, path, instructionIndex) {
+    if (bytesEqual(actual, expected))
+        return [];
+    return [{
+            code: ViolationCode.SolanaIntentInstructionDataMismatch,
+            message: "embedded update payload does not match the checked intent",
+            path,
+            expected: bytesToHex(expected),
+            actual: bytesToHex(actual),
+            details: { instructionIndex },
+        }];
+}
+function invalidInstruction(path, instructionIndex, error) {
+    return [{
+            code: ViolationCode.SolanaIntentInstructionDataInvalid,
+            message: "embedded intent instruction data or accounts could not be decoded",
+            path,
+            details: { instructionIndex, error },
+        }];
+}
+function bytesEqual(actual, expected) {
+    return actual.length === expected.length && actual.every((byte, i) => byte === expected[i]);
+}
+//# sourceMappingURL=solana-embedded-intent.js.map