@eco-incorp/sauce 0.99.3 → 0.99.5

package/sdk/dist/verify/wire.d.ts

@@ -3,7 +3,7 @@ export declare const SETTLE_WIRE: {
     /** Byte length of the compiled `settle.sauce.ts` program. It is INVARIANT: the program takes its
      *  `(tokens, minOut, recipient)` as runtime entry arguments, so nothing about the caller's values
      *  reaches the compiler. This length is what locates the argument tail. */
-    readonly PROGRAM_BYTES: 356;
+    readonly PROGRAM_BYTES: 435;
     /** Which compiler produced the bytes `PROGRAM_HASH` pins. The dependency is a caret range, and on
      *  `^2.0.0` that is the whole `2.x` line — a far wider window than the `0.7.x` a `^0.7.0` caret
      *  admitted, since a caret on `0.x` pins the minor. Any `2.x` that changes codegen makes a
@@ -26,13 +26,30 @@ export declare const SETTLE_WIRE: {
      *  frontend REFUSES, so nothing this program already compiled to could move. 2.2.1 → 2.3.0
      *  DOES: 362 → 356, with a new hash after the optimizer updates. So a compiler bump
      *  is not evidence either way: this string changes
-     *  every time, the hash only when the output does, and the tests above tell them apart. */
-    readonly PROGRAM_COMPILER: "@eco-incorp/sauce-compiler@2.3.0";
+     *  every time, the hash only when the output does, and the tests above tell them apart.
+     *
+     *  The TEMPLATE moved them once on 2.3.0 with the compiler unchanged: 356 → 435, when the sweep's
+     *  `transfer` became the SDK's SafeERC20 transfer (`token/safe.ts`). Through `IERC20` it decoded a
+     *  `bool` from a no-return token's empty returndata, which reverts on this engine, so USDT could not
+     *  be swept; and nothing checked the `bool`, so a token answering `false` read as swept.
+     *
+     *  Compiler 2.4.0 keeps the length at 435 bytes but changes the ABI encoding instructions
+     *  and therefore the program hash.
+     *
+     *  Pins that shipped before this one, for `validateSettleProgram`'s `accepted` list so payloads
+     *  built against them stay readable:
+     *    - `{ hash: "0x35d103dc1f3a6077d987dc2a65daed650f2ed4e2a1fdd386608373e2aa4e2b40", bytes: 435 }`
+     *      (compiler 2.3.0, SafeERC20 settlement template)
+     *    - `{ hash: "0xf9fffd262b32ad0cb07f2748f813626363497e09e4f4da134bed1b8da0c5d5fe", bytes: 356 }`
+     *      (0.99.2 – 0.99.4)
+     *    - `{ hash: "0x2da5c63da0ed3e934f4bb09985a38723de1f2a8e9a9a97ef3993e526cb649d11", bytes: 362 }`
+     *      (0.99.0 – 0.99.1) */
+    readonly PROGRAM_COMPILER: "@eco-incorp/sauce-compiler@2.4.0";
     /** `keccak256` of those `PROGRAM_BYTES` bytes — the authenticity pin `validateSettleProgram`
      *  enforces, and the reason a matching payload runs the audited program and nothing else.
      *  Whole-program, not a body slice: program and arguments are disjoint byte regions on this wire.
      *  `verify.compile.test.ts` recomputes it from source every run and fails before any consumer does. */
-    readonly PROGRAM_HASH: "0xf9fffd262b32ad0cb07f2748f813626363497e09e4f4da134bed1b8da0c5d5fe";
+    readonly PROGRAM_HASH: "0x9460111670cb654d7c56d685ef3caea67bfe90e0dca350a471d9ca9f97699ab6";
     /** Every argument word is 32 bytes, big-endian. */
     readonly WORD_BYTES: 32;
     /** An address occupies the LOW 20 bytes of its word; the upper 12 MUST be zero (§4). */

package/sdk/dist/verify/wire.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../src/verify/wire.ts"],"names":[],"mappings":"AAkBA,yEAAyE;AACzE,eAAO,MAAM,WAAW;IACtB;;+EAE2E;;IAE3E;;;;;;;;;;;;;;;;;;;;;;+FAsB2F;;IAE3F;;;2GAGuG;;IAEvG,mDAAmD;;IAEnD,wFAAwF;;IAExF,iGAAiG;;IAEjG;;8CAE0C;;CAElC,CAAC"}
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../src/verify/wire.ts"],"names":[],"mappings":"AAkBA,yEAAyE;AACzE,eAAO,MAAM,WAAW;IACtB;;+EAE2E;;IAE3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAuC4B;;IAE5B;;;2GAGuG;;IAEvG,mDAAmD;;IAEnD,wFAAwF;;IAExF,iGAAiG;;IAEjG;;8CAE0C;;CAElC,CAAC"}

package/sdk/dist/verify/wire.js

@@ -20,7 +20,7 @@ export const SETTLE_WIRE = {
     /** Byte length of the compiled `settle.sauce.ts` program. It is INVARIANT: the program takes its
      *  `(tokens, minOut, recipient)` as runtime entry arguments, so nothing about the caller's values
      *  reaches the compiler. This length is what locates the argument tail. */
-    PROGRAM_BYTES: 356,
+    PROGRAM_BYTES: 435,
     /** Which compiler produced the bytes `PROGRAM_HASH` pins. The dependency is a caret range, and on
      *  `^2.0.0` that is the whole `2.x` line — a far wider window than the `0.7.x` a `^0.7.0` caret
      *  admitted, since a caret on `0.x` pins the minor. Any `2.x` that changes codegen makes a
@@ -43,13 +43,30 @@ export const SETTLE_WIRE = {
      *  frontend REFUSES, so nothing this program already compiled to could move. 2.2.1 → 2.3.0
      *  DOES: 362 → 356, with a new hash after the optimizer updates. So a compiler bump
      *  is not evidence either way: this string changes
-     *  every time, the hash only when the output does, and the tests above tell them apart. */
-    PROGRAM_COMPILER: "@eco-incorp/sauce-compiler@2.3.0",
+     *  every time, the hash only when the output does, and the tests above tell them apart.
+     *
+     *  The TEMPLATE moved them once on 2.3.0 with the compiler unchanged: 356 → 435, when the sweep's
+     *  `transfer` became the SDK's SafeERC20 transfer (`token/safe.ts`). Through `IERC20` it decoded a
+     *  `bool` from a no-return token's empty returndata, which reverts on this engine, so USDT could not
+     *  be swept; and nothing checked the `bool`, so a token answering `false` read as swept.
+     *
+     *  Compiler 2.4.0 keeps the length at 435 bytes but changes the ABI encoding instructions
+     *  and therefore the program hash.
+     *
+     *  Pins that shipped before this one, for `validateSettleProgram`'s `accepted` list so payloads
+     *  built against them stay readable:
+     *    - `{ hash: "0x35d103dc1f3a6077d987dc2a65daed650f2ed4e2a1fdd386608373e2aa4e2b40", bytes: 435 }`
+     *      (compiler 2.3.0, SafeERC20 settlement template)
+     *    - `{ hash: "0xf9fffd262b32ad0cb07f2748f813626363497e09e4f4da134bed1b8da0c5d5fe", bytes: 356 }`
+     *      (0.99.2 – 0.99.4)
+     *    - `{ hash: "0x2da5c63da0ed3e934f4bb09985a38723de1f2a8e9a9a97ef3993e526cb649d11", bytes: 362 }`
+     *      (0.99.0 – 0.99.1) */
+    PROGRAM_COMPILER: "@eco-incorp/sauce-compiler@2.4.0",
     /** `keccak256` of those `PROGRAM_BYTES` bytes — the authenticity pin `validateSettleProgram`
      *  enforces, and the reason a matching payload runs the audited program and nothing else.
      *  Whole-program, not a body slice: program and arguments are disjoint byte regions on this wire.
      *  `verify.compile.test.ts` recomputes it from source every run and fails before any consumer does. */
-    PROGRAM_HASH: "0xf9fffd262b32ad0cb07f2748f813626363497e09e4f4da134bed1b8da0c5d5fe",
+    PROGRAM_HASH: "0x9460111670cb654d7c56d685ef3caea67bfe90e0dca350a471d9ca9f97699ab6",
     /** Every argument word is 32 bytes, big-endian. */
     WORD_BYTES: 32,
     /** An address occupies the LOW 20 bytes of its word; the upper 12 MUST be zero (§4). */

package/sdk/dist/verify/wire.js.map

@@ -1 +1 @@
-{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../src/verify/wire.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,kGAAkG;AAClG,qEAAqE;AACrE,EAAE;AACF,0FAA0F;AAC1F,4FAA4F;AAC5F,EAAE;AACF,8FAA8F;AAC9F,oGAAoG;AACpG,kGAAkG;AAClG,mGAAmG;AACnG,kFAAkF;AAClF,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,qGAAqG;AACrG,0FAA0F;AAE1F,yEAAyE;AACzE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB;;+EAE2E;IAC3E,aAAa,EAAE,GAAG;IAClB;;;;;;;;;;;;;;;;;;;;;;+FAsB2F;IAC3F,gBAAgB,EAAE,kCAAkC;IACpD;;;2GAGuG;IACvG,YAAY,EAAE,oEAAoE;IAClF,mDAAmD;IACnD,UAAU,EAAE,EAAE;IACd,wFAAwF;IACxF,aAAa,EAAE,EAAE;IACjB,iGAAiG;IACjG,UAAU,EAAE,CAAC;IACb;;8CAE0C;IAC1C,UAAU,EAAE,EAAE;CACN,CAAC"}
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../src/verify/wire.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,kGAAkG;AAClG,qEAAqE;AACrE,EAAE;AACF,0FAA0F;AAC1F,4FAA4F;AAC5F,EAAE;AACF,8FAA8F;AAC9F,oGAAoG;AACpG,kGAAkG;AAClG,mGAAmG;AACnG,kFAAkF;AAClF,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,qGAAqG;AACrG,0FAA0F;AAE1F,yEAAyE;AACzE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB;;+EAE2E;IAC3E,aAAa,EAAE,GAAG;IAClB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAuC4B;IAC5B,gBAAgB,EAAE,kCAAkC;IACpD;;;2GAGuG;IACvG,YAAY,EAAE,oEAAoE;IAClF,mDAAmD;IACnD,UAAU,EAAE,EAAE;IACd,wFAAwF;IACxF,aAAa,EAAE,EAAE;IACjB,iGAAiG;IACjG,UAAU,EAAE,CAAC;IACb;;8CAE0C;IAC1C,UAAU,EAAE,EAAE;CACN,CAAC"}

package/sdk/dist/wasm-compiler.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The SDK's one import of the SauceScript compiler — `sauce-compiler`, the published
+ * `@eco-incorp/sauce-compiler` WebAssembly package. Every compile the SDK runs goes through here.
+ *
+ * A plain ESM import, so the package's own `exports` conditions choose its build: `node` for Node,
+ * `browser` (or `default`) for a bundler. It is one code path over two builds of the same wasm,
+ * which differ in one respect. The Node build instantiates its wasm while it loads, so `compile`
+ * works at once, as it always has. The browser build cannot fetch synchronously: `ready()`
+ * initializes it, and until that has resolved every compile throws `NOT_READY` — the SDK's own
+ * message, instead of the glue's `TypeError` about an undefined `wasm`.
+ */
+import { type CompileOptions, type CompileResult } from "sauce-compiler";
+import { type WasmSource } from "sauce-compiler/ready";
+export type { WasmSource };
+/**
+ * Initialize the compiler's WebAssembly where the environment needs it, once.
+ *
+ * In a browser, with no `source`, the wasm is fetched from beside the compiler's own module —
+ * the `new URL("sauce_wasm_bg.wasm", import.meta.url)` a bundler rewrites to an asset URL. Pass the
+ * bytes (an `ArrayBuffer` or typed array) or a URL where that does not apply. In Node this resolves
+ * at once and ignores `source`. Safe to call repeatedly and concurrently; a failed attempt is not
+ * remembered, so calling again retries.
+ */
+export declare function ready(source?: WasmSource): Promise<void>;
+/**
+ * Compile a SauceScript program to Sauce bytecode — the compiler's own `compile`, after a check
+ * that its wasm is initialized. Synchronous in every environment once `ready()` has resolved, and
+ * in Node without it.
+ */
+export declare function compile(options: CompileOptions): CompileResult;
+//# sourceMappingURL=wasm-compiler.d.ts.map

package/sdk/dist/wasm-compiler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasm-compiler.d.ts","sourceRoot":"","sources":["../src/wasm-compiler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAE3E,YAAY,EAAE,UAAU,EAAE,CAAC;AAS3B;;;;;;;;GAQG;AACH,wBAAsB,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAG9D;AAaD;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,aAAa,CAI9D"}

package/sdk/dist/wasm-compiler.js

@@ -0,0 +1,52 @@
+/**
+ * The SDK's one import of the SauceScript compiler — `sauce-compiler`, the published
+ * `@eco-incorp/sauce-compiler` WebAssembly package. Every compile the SDK runs goes through here.
+ *
+ * A plain ESM import, so the package's own `exports` conditions choose its build: `node` for Node,
+ * `browser` (or `default`) for a bundler. It is one code path over two builds of the same wasm,
+ * which differ in one respect. The Node build instantiates its wasm while it loads, so `compile`
+ * works at once, as it always has. The browser build cannot fetch synchronously: `ready()`
+ * initializes it, and until that has resolved every compile throws `NOT_READY` — the SDK's own
+ * message, instead of the glue's `TypeError` about an undefined `wasm`.
+ */
+import { compile as compileWasm, functionCacheStats, } from "sauce-compiler";
+import { ready as readyWasm } from "sauce-compiler/ready";
+const NOT_READY = "The SauceScript compiler's WebAssembly is not initialized: `await ready()` (exported by " +
+    "@eco-incorp/sauce and @eco-incorp/sauce/compiler) before compiling. A browser loads the wasm " +
+    "asynchronously; in Node it is ready on import.";
+let initialized = false;
+/**
+ * Initialize the compiler's WebAssembly where the environment needs it, once.
+ *
+ * In a browser, with no `source`, the wasm is fetched from beside the compiler's own module —
+ * the `new URL("sauce_wasm_bg.wasm", import.meta.url)` a bundler rewrites to an asset URL. Pass the
+ * bytes (an `ArrayBuffer` or typed array) or a URL where that does not apply. In Node this resolves
+ * at once and ignores `source`. Safe to call repeatedly and concurrently; a failed attempt is not
+ * remembered, so calling again retries.
+ */
+export async function ready(source) {
+    await readyWasm(source);
+    initialized = true;
+}
+/** Throws `NOT_READY` unless the wasm is usable. The probe is the cheapest export that reaches it. */
+function assertReady() {
+    if (initialized)
+        return;
+    try {
+        functionCacheStats();
+    }
+    catch (cause) {
+        throw new Error(NOT_READY, { cause });
+    }
+    initialized = true;
+}
+/**
+ * Compile a SauceScript program to Sauce bytecode — the compiler's own `compile`, after a check
+ * that its wasm is initialized. Synchronous in every environment once `ready()` has resolved, and
+ * in Node without it.
+ */
+export function compile(options) {
+    assertReady();
+    return compileWasm(options);
+}
+//# sourceMappingURL=wasm-compiler.js.map

package/sdk/dist/wasm-compiler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasm-compiler.js","sourceRoot":"","sources":["../src/wasm-compiler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,OAAO,IAAI,WAAW,EACtB,kBAAkB,GAGnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,KAAK,IAAI,SAAS,EAAmB,MAAM,sBAAsB,CAAC;AAI3E,MAAM,SAAS,GACb,0FAA0F;IAC1F,+FAA+F;IAC/F,gDAAgD,CAAC;AAEnD,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,MAAmB;IAC7C,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACxB,WAAW,GAAG,IAAI,CAAC;AACrB,CAAC;AAED,sGAAsG;AACtG,SAAS,WAAW;IAClB,IAAI,WAAW;QAAE,OAAO;IACxB,IAAI,CAAC;QACH,kBAAkB,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,WAAW,GAAG,IAAI,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,OAAuB;IAC7C,WAAW,EAAE,CAAC;IAEd,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC"}

package/sdk/src/protocols/aave-v4/AaveV4HubABI.json

@@ -0,0 +1,67 @@
+{
+  "abi": [
+    {
+      "name": "getAssetId",
+      "type": "function",
+      "stateMutability": "view",
+      "inputs": [
+        {
+          "name": "underlying",
+          "type": "address"
+        }
+      ],
+      "outputs": [
+        {
+          "name": "",
+          "type": "uint256"
+        }
+      ]
+    },
+    {
+      "name": "getAssetCount",
+      "type": "function",
+      "stateMutability": "view",
+      "inputs": [],
+      "outputs": [
+        {
+          "name": "",
+          "type": "uint256"
+        }
+      ]
+    },
+    {
+      "name": "getAssetLiquidity",
+      "type": "function",
+      "stateMutability": "view",
+      "inputs": [
+        {
+          "name": "assetId",
+          "type": "uint256"
+        }
+      ],
+      "outputs": [
+        {
+          "name": "",
+          "type": "uint256"
+        }
+      ]
+    },
+    {
+      "name": "isUnderlyingListed",
+      "type": "function",
+      "stateMutability": "view",
+      "inputs": [
+        {
+          "name": "underlying",
+          "type": "address"
+        }
+      ],
+      "outputs": [
+        {
+          "name": "",
+          "type": "bool"
+        }
+      ]
+    }
+  ]
+}

package/sdk/src/protocols/aave-v4/AaveV4SpokeABI.json

@@ -0,0 +1,215 @@
+{
+  "abi": [
+    {
+      "name": "supply",
+      "type": "function",
+      "stateMutability": "nonpayable",
+      "inputs": [
+        {
+          "name": "reserveId",
+          "type": "uint256"
+        },
+        {
+          "name": "amount",
+          "type": "uint256"
+        },
+        {
+          "name": "onBehalfOf",
+          "type": "address"
+        }
+      ],
+      "outputs": [
+        {
+          "name": "",
+          "type": "uint256"
+        },
+        {
+          "name": "",
+          "type": "uint256"
+        }
+      ]
+    },
+    {
+      "name": "withdraw",
+      "type": "function",
+      "stateMutability": "nonpayable",
+      "inputs": [
+        {
+          "name": "reserveId",
+          "type": "uint256"
+        },
+        {
+          "name": "amount",
+          "type": "uint256"
+        },
+        {
+          "name": "onBehalfOf",
+          "type": "address"
+        }
+      ],
+      "outputs": [
+        {
+          "name": "",
+          "type": "uint256"
+        },
+        {
+          "name": "",
+          "type": "uint256"
+        }
+      ]
+    },
+    {
+      "name": "borrow",
+      "type": "function",
+      "stateMutability": "nonpayable",
+      "inputs": [
+        {
+          "name": "reserveId",
+          "type": "uint256"
+        },
+        {
+          "name": "amount",
+          "type": "uint256"
+        },
+        {
+          "name": "onBehalfOf",
+          "type": "address"
+        }
+      ],
+      "outputs": [
+        {
+          "name": "",
+          "type": "uint256"
+        },
+        {
+          "name": "",
+          "type": "uint256"
+        }
+      ]
+    },
+    {
+      "name": "repay",
+      "type": "function",
+      "stateMutability": "nonpayable",
+      "inputs": [
+        {
+          "name": "reserveId",
+          "type": "uint256"
+        },
+        {
+          "name": "amount",
+          "type": "uint256"
+        },
+        {
+          "name": "onBehalfOf",
+          "type": "address"
+        }
+      ],
+      "outputs": [
+        {
+          "name": "",
+          "type": "uint256"
+        },
+        {
+          "name": "",
+          "type": "uint256"
+        }
+      ]
+    },
+    {
+      "name": "setUsingAsCollateral",
+      "type": "function",
+      "stateMutability": "nonpayable",
+      "inputs": [
+        {
+          "name": "reserveId",
+          "type": "uint256"
+        },
+        {
+          "name": "usingAsCollateral",
+          "type": "bool"
+        },
+        {
+          "name": "onBehalfOf",
+          "type": "address"
+        }
+      ],
+      "outputs": []
+    },
+    {
+      "name": "getReserveId",
+      "type": "function",
+      "stateMutability": "view",
+      "inputs": [
+        {
+          "name": "hub",
+          "type": "address"
+        },
+        {
+          "name": "assetId",
+          "type": "uint256"
+        }
+      ],
+      "outputs": [
+        {
+          "name": "",
+          "type": "uint256"
+        }
+      ]
+    },
+    {
+      "name": "getReserveCount",
+      "type": "function",
+      "stateMutability": "view",
+      "inputs": [],
+      "outputs": [
+        {
+          "name": "",
+          "type": "uint256"
+        }
+      ]
+    },
+    {
+      "name": "getUserSuppliedAssets",
+      "type": "function",
+      "stateMutability": "view",
+      "inputs": [
+        {
+          "name": "reserveId",
+          "type": "uint256"
+        },
+        {
+          "name": "user",
+          "type": "address"
+        }
+      ],
+      "outputs": [
+        {
+          "name": "",
+          "type": "uint256"
+        }
+      ]
+    },
+    {
+      "name": "getUserTotalDebt",
+      "type": "function",
+      "stateMutability": "view",
+      "inputs": [
+        {
+          "name": "reserveId",
+          "type": "uint256"
+        },
+        {
+          "name": "user",
+          "type": "address"
+        }
+      ],
+      "outputs": [
+        {
+          "name": "",
+          "type": "uint256"
+        }
+      ]
+    }
+  ]
+}

package/sdk/src/protocols/aave-v4/abis.ts

@@ -0,0 +1,139 @@
+// Spoke — the user-facing Aave V4 market. Fragments from the verified SpokeInstance (Ethereum 0x7a603b73…7450).
+export const AaveV4SpokeABI = [
+  {
+    name: "supply",
+    type: "function",
+    stateMutability: "nonpayable",
+    inputs: [
+      { name: "reserveId", type: "uint256" },
+      { name: "amount", type: "uint256" },
+      { name: "onBehalfOf", type: "address" },
+    ],
+    outputs: [
+      { name: "", type: "uint256" },
+      { name: "", type: "uint256" },
+    ],
+  },
+  {
+    name: "withdraw",
+    type: "function",
+    stateMutability: "nonpayable",
+    inputs: [
+      { name: "reserveId", type: "uint256" },
+      { name: "amount", type: "uint256" },
+      { name: "onBehalfOf", type: "address" },
+    ],
+    outputs: [
+      { name: "", type: "uint256" },
+      { name: "", type: "uint256" },
+    ],
+  },
+  {
+    name: "borrow",
+    type: "function",
+    stateMutability: "nonpayable",
+    inputs: [
+      { name: "reserveId", type: "uint256" },
+      { name: "amount", type: "uint256" },
+      { name: "onBehalfOf", type: "address" },
+    ],
+    outputs: [
+      { name: "", type: "uint256" },
+      { name: "", type: "uint256" },
+    ],
+  },
+  {
+    name: "repay",
+    type: "function",
+    stateMutability: "nonpayable",
+    inputs: [
+      { name: "reserveId", type: "uint256" },
+      { name: "amount", type: "uint256" },
+      { name: "onBehalfOf", type: "address" },
+    ],
+    outputs: [
+      { name: "", type: "uint256" },
+      { name: "", type: "uint256" },
+    ],
+  },
+  {
+    name: "setUsingAsCollateral",
+    type: "function",
+    stateMutability: "nonpayable",
+    inputs: [
+      { name: "reserveId", type: "uint256" },
+      { name: "usingAsCollateral", type: "bool" },
+      { name: "onBehalfOf", type: "address" },
+    ],
+    outputs: [],
+  },
+  {
+    name: "getReserveId",
+    type: "function",
+    stateMutability: "view",
+    inputs: [
+      { name: "hub", type: "address" },
+      { name: "assetId", type: "uint256" },
+    ],
+    outputs: [{ name: "", type: "uint256" }],
+  },
+  {
+    name: "getReserveCount",
+    type: "function",
+    stateMutability: "view",
+    inputs: [],
+    outputs: [{ name: "", type: "uint256" }],
+  },
+  {
+    name: "getUserSuppliedAssets",
+    type: "function",
+    stateMutability: "view",
+    inputs: [
+      { name: "reserveId", type: "uint256" },
+      { name: "user", type: "address" },
+    ],
+    outputs: [{ name: "", type: "uint256" }],
+  },
+  {
+    name: "getUserTotalDebt",
+    type: "function",
+    stateMutability: "view",
+    inputs: [
+      { name: "reserveId", type: "uint256" },
+      { name: "user", type: "address" },
+    ],
+    outputs: [{ name: "", type: "uint256" }],
+  },
+] as const;
+
+// Hub — the shared Aave V4 liquidity hub Spokes draw from. Fragments from the verified HubInstance (Ethereum 0xfe89fd96…f704).
+export const AaveV4HubABI = [
+  {
+    name: "getAssetId",
+    type: "function",
+    stateMutability: "view",
+    inputs: [{ name: "underlying", type: "address" }],
+    outputs: [{ name: "", type: "uint256" }],
+  },
+  {
+    name: "getAssetCount",
+    type: "function",
+    stateMutability: "view",
+    inputs: [],
+    outputs: [{ name: "", type: "uint256" }],
+  },
+  {
+    name: "getAssetLiquidity",
+    type: "function",
+    stateMutability: "view",
+    inputs: [{ name: "assetId", type: "uint256" }],
+    outputs: [{ name: "", type: "uint256" }],
+  },
+  {
+    name: "isUnderlyingListed",
+    type: "function",
+    stateMutability: "view",
+    inputs: [{ name: "underlying", type: "address" }],
+    outputs: [{ name: "", type: "bool" }],
+  },
+] as const;

package/sdk/src/protocols/aave-v4/addresses.ts

@@ -0,0 +1,66 @@
+import type { ChainDeployment } from "../../core/types.js";
+
+// Aave V4 is hub-and-spoke: a chain carries one or more Hubs, and users act through Spokes. Every
+// address is from bgd-labs/aave-address-book (src/ts/AaveV4<Chain>.ts, HUBS.* and SPOKES.*), and
+// every one is an EIP-1967 proxy. The Treasury Spoke each chain also lists is fee plumbing, not a
+// market, so it is not registered. Every hub is verified by isUnderlyingListed(<chain's USDC>)
+// == true and every spoke by ORACLE() == the address book's <SPOKE>_ORACLE; each dispatches every
+// function in abis.ts. The hub implementation code hash is the same on all four chains.
+export const deployments: ChainDeployment[] = [
+  {
+    // Ethereum (1) — AaveV4Ethereum.ts. Verified on-chain 2026-09-28 at block 26079947.
+    chainId: 1,
+    chainName: "Ethereum",
+    addresses: {
+      coreHub: "0xCca852Bc40e560adC3b1Cc58CA5b55638ce826c9",
+      plusHub: "0x06002e9c4412CB7814a791eA3666D905871E536A",
+      primeHub: "0x943827DCA022D0F354a8a8c332dA1e5Eb9f9F931",
+      globalDollarHub: "0x62d63197660c080236193CA60b70E49A08E90368",
+      mainSpoke: "0x94e7A5dCbE816e498b89aB752661904E2F56c485",
+      forexSpoke: "0xD8B93635b8C6d0fF98CbE90b5988E3F2d1Cd9da1",
+      bluechipSpoke: "0x973a023A77420ba610f06b3858aD991Df6d85A08",
+      ethenaCorrelatedSpoke: "0x58131E79531caB1d52301228d1f7b842F26B9649",
+      ethenaEcosystemSpoke: "0xba1B3D55D249692b669A164024A838309B7508AF",
+      goldSpoke: "0x65407b940966954b23dfA3caA5C0702bB42984DC",
+      paxgGoldSpoke: "0xAD75cE6354f87F3135cE10621d385d8D1e2562C2",
+      lombardBtcSpoke: "0x7EC68b5695e803e98a21a9A05d744F28b0a7753D",
+      usdgPendleSpoke: "0x956d8e0A89cfa3744428C4641b5a53B56167a7f9",
+      etherfiESpoke: "0xbF10BDfE177dE0336aFD7fcCF80A904E15386219",
+      kelpESpoke: "0x3131FE68C4722e726fe6B2819ED68e514395B9a4",
+      lidoESpoke: "0xe1900480ac69f0B296841Cd01cC37546d92F35Cd",
+      usdgMapleESpoke: "0x774b9655413c34809c1f1b16b654465A89EBE989",
+    },
+  },
+  {
+    // Base (8453) — AaveV4Base.ts: an equities market only (tokenized stocks plus USDC), no core
+    // hub. Verified on-chain 2026-09-28 at block 51928656.
+    chainId: 8453,
+    chainName: "Base",
+    addresses: {
+      equitiesHub: "0xa4d5947Eb727A052bae69C593FfC84247EC9864E",
+      mag7Spoke: "0x17905Db0e4A3514467539956c084180616AE7B8D",
+    },
+  },
+  {
+    // Avalanche (43114) — AaveV4Avalanche.ts. Verified on-chain 2026-09-28 at block 96360036.
+    chainId: 43114,
+    chainName: "Avalanche",
+    addresses: {
+      coreHub: "0xd07369fAE4A5BB13c9Ce446B052c7867B1AbDf6e",
+      mainSpoke: "0x435272CefF93a1E657E8ABfdf0A13e95900A3a56",
+      forexSpoke: "0x6a37776B5E026dBdF043b4F933c323C84DD1B514",
+      avaxCorrelatedSpoke: "0x3b517594277c67307CF2d7CBE6FE1D4399B68c41",
+    },
+  },
+  {
+    // Arc (5042) — AaveV4Arc.ts. Verified on-chain 2026-09-28 (Arc mainnet, blocks 23287436
+    // and 23293327). The core hub's implementation code is byte-identical to Ethereum's.
+    chainId: 5042,
+    chainName: "Arc",
+    addresses: {
+      coreHub: "0x17288dfc86205301064577b98B02b81017e6F79C",
+      mainSpoke: "0xB843bdC3a87A05E77E07Df9FE48928b3A34b134d",
+      forexSpoke: "0x4164EBCAF74670aa74C8D4F59de6157c0780F1bB",
+    },
+  },
+];