@gibs/bridge-sdk 1.19.0 → 1.20.0

package/dist/hyperliquid-execution.js

@@ -1,61 +1,16 @@
 import { buildUrl } from '@gibs/common/url';
 import { parseSignature } from 'viem';
 import { relayApiBaseUrl } from './relay-quote.js';
-/**
- * Executing a Hyperliquid deposit, as pure data.
- *
- * Hyperliquid is the one origin whose deposit is never broadcast to a chain.
- * The user signs a typed-data ACTION and that signed action is posted to
- * Hyperliquid's own exchange API; Relay then observes the transfer and fills the
- * route. Two details make this impossible to derive from the quote alone, and
- * both are encoded here rather than rediscovered at a call site:
- *
- * 1. Relay's quote supplies `eip712Types`, `eip712PrimaryType` and the action,
- *    but NOT the signing domain. The domain is fixed by Hyperliquid and is
- *    reconstructed by {@link buildHyperliquidTypedData}.
- * 2. Hyperliquid wants the signature split into `r`/`s`/`v` components, not the
- *    concatenated hex string a wallet returns.
- *
- * Kept free of transport so it is fully testable: nothing here signs, fetches,
- * or reads a clock. The caller supplies the signature and performs the request.
- *
- * The shape mirrors Relay's own client, which is the only reference
- * implementation of this exchange — their public documentation covers the
- * generic `signature` step but not this action-bearing `transaction` step.
- */
-/** Where a signed Hyperliquid action is submitted. Hyperliquid's API, not Relay's. */
 export const hyperliquidExchangeUrl = 'https://api.hyperliquid.xyz/exchange';
-/** The signing domain Hyperliquid requires. Fixed; never supplied by the quote. */
 export const hyperliquidDomainName = 'HyperliquidSignTransaction';
-/** The signing domain's version. Fixed alongside {@link hyperliquidDomainName}. */
 export const hyperliquidDomainVersion = '1';
-/**
- * The domain's `verifyingContract`. Hyperliquid actions are verified off-chain,
- * so no contract is involved and the field is the all-zero address.
- */
 export const hyperliquidVerifyingContract = '0x0000000000000000000000000000000000000000';
-/** The standard typed-data domain type, which the action's type table must include. */
 const eip712DomainType = [
     { name: 'name', type: 'string' },
     { name: 'version', type: 'string' },
     { name: 'chainId', type: 'uint256' },
     { name: 'verifyingContract', type: 'address' },
 ];
-/**
- * Builds the typed-data payload for a Hyperliquid deposit.
- *
- * The message is the action's parameters plus the action `type` and a
- * `signatureChainId`; the latter is the signing chain in hex and MUST agree
- * with `domain.chainId`, because Hyperliquid recovers the signer using both.
- * They are derived from the single `signatureChainId` argument so they cannot
- * disagree.
- *
- * @param deposit - the parsed Hyperliquid origin deposit
- * @param options.signatureChainId - the chain id the connected wallet signs
- *   under. Not the Relay origin chain id: it identifies the signing domain, and
- *   Relay's own client uses the wallet's active chain here.
- * @returns the payload to sign, whose `message` doubles as the submitted action
- */
 export const buildHyperliquidTypedData = (deposit, { signatureChainId }) => ({
     domain: {
         name: hyperliquidDomainName,
@@ -74,67 +29,24 @@ export const buildHyperliquidTypedData = (deposit, { signatureChainId }) => ({
         signatureChainId: `0x${signatureChainId.toString(16)}`,
     },
 });
-/**
- * Builds the exchange request for an action the user has signed.
- *
- * The nonce is read back out of the signed message rather than passed in: it is
- * covered by the signature, so any independently supplied value could disagree
- * with what was signed and be rejected.
- *
- * @param options.typedData - the payload that was signed
- * @param options.signature - the wallet's signature over it
- * @returns the request body, or null when the signed action carries no usable nonce
- */
 export const buildHyperliquidExchangeRequest = ({ typedData, signature, }) => {
-    // Hyperliquid names it `nonce`; the older action shapes name it `time`.
     const rawNonce = typedData.message.nonce ?? typedData.message.time;
     if (typeof rawNonce !== 'number' && typeof rawNonce !== 'bigint') {
         return null;
     }
     const { r, s, v, yParity } = parseSignature(signature);
     return {
-        // The exchange wants the 27/28 form. A signature whose final byte is the
-        // PARITY form (0 or 1) — which some hardware wallets and smart-account flows
-        // produce — parses with `v` absent and the parity carried separately, so
-        // reading `v` alone and defaulting would send recovery value 0: not a value
-        // the exchange accepts, and the deposit dies for those wallets only. The
-        // parity is the same fact in the other encoding, so shift it rather than
-        // guess.
         signature: { r, s, v: v === undefined ? yParity + 27 : Number(v) },
         nonce: Number(rawNonce),
         action: typedData.message,
     };
 };
-/**
- * Whether an exchange response reports success. Hyperliquid answers with HTTP
- * 200 even for a rejected action, so the body's own status is the only reliable
- * signal — treating the status code as the outcome would report a failed
- * transfer as a completed one.
- *
- * @param payload - the parsed response body
- * @returns true only when the body explicitly reports success
- */
 export const isHyperliquidExchangeSuccess = (payload) => {
     if (typeof payload !== 'object' || payload === null) {
         return false;
     }
     return payload.status === 'ok';
 };
-/**
- * The typed-data payload for the authorization that must be completed BEFORE
- * the action is submitted.
- *
- * Relay builds the authorization against a chain it picks when quoting, but the
- * signature is produced by whichever chain the wallet is actually on. Both the
- * domain here and `signatureChainId` in {@link buildHyperliquidAuthorizationRequest}
- * are therefore overridden with the active wallet chain; leaving Relay's value in
- * place makes the recovered signer disagree with the submitted one and the
- * authorization is rejected.
- *
- * @param authorization - the authorization carried by the deposit
- * @param options.signatureChainId - the chain id the connected wallet signs under
- * @returns the payload to sign
- */
 export const buildHyperliquidAuthorizationTypedData = (authorization, { signatureChainId }) => ({
     domain: {
         ...authorization.sign.domain,
@@ -144,16 +56,6 @@ export const buildHyperliquidAuthorizationTypedData = (authorization, { signatur
     primaryType: authorization.sign.primaryType,
     message: authorization.sign.value,
 });
-/**
- * Builds the authorization submission for a signed authorization.
- *
- * @param options.authorization - the authorization that was signed
- * @param options.signature - the wallet's signature over its typed data
- * @param options.signatureChainId - the chain id the wallet signed under, which
- *   replaces the value Relay quoted so the body agrees with the signature
- * @param options.baseUrl - Relay's API root; the step's endpoint is relative
- * @returns the request to perform, or null when the endpoint is not a usable path
- */
 export const buildHyperliquidAuthorizationRequest = ({ authorization, signature, signatureChainId, baseUrl = relayApiBaseUrl, }) => {
     const { endpoint, method, body } = authorization.post;
     if (!endpoint.startsWith('/')) {

package/dist/image-links.js

@@ -2,96 +2,25 @@ import { getAddress, zeroAddress } from 'viem';
 import { depositAddressChainIds } from './chain-names.js';
 import { isNativeAsset } from './ecosystems.js';
 let imageRoot = 'https://gib.show';
-/**
- * Sets the image root for the bridge
- * @param root - the root
- */
 export const setImageRoot = (root) => {
     imageRoot = root;
 };
-/**
- * Returns the image root for the bridge
- * @returns the image root
- */
 export const getImageRoot = () => imageRoot;
-/**
- * Returns the list image for the given path
- * @param path - the path
- * @returns the list image
- */
 export const list = (path) => {
     return `${imageRoot}/list${path}`;
 };
-/**
- * Returns the network image for the given chain id
- * @param chainId - the chain id
- * @returns the network image
- */
 export const network = (chainId) => `${imageRoot}/image/${Number(chainId)}`;
-/**
- * gib.show's own key for a chain this package can only name by a LOCAL,
- * INVENTED identifier — a pay-by-hand origin (see `depositAddressChainIds`)
- * rather than a real chain id gib.show's numeric endpoint recognizes.
- * `network(chainId)` 404s for one of these, and the browser draws that 404 as
- * a broken image on every chain badge and route mark drawn through it.
- *
- * Every route producer that draws a chain badge for a token needs this, not
- * only the deposit-address ones: a route can START on a deposit-address chain
- * and cross through ordinary Ethereum-Virtual-Machine chains after, so the
- * predicate has to run on every chain id a route touches, not only the one
- * the reader picked. Kept beside `network` rather than in the client that also
- * resolves Relay's pseudo chains (`@gibs/bridge-client/image`'s
- * `chainLogoUrl`) because that client sits ABOVE this package — it imports
- * FROM `bridge-sdk` — so this package importing back from it would be a
- * cycle. `chainLogoUrl` still adds a Relay-icon fallback for chains gib.show
- * does not carry at ALL (Eclipse, Hyperliquid); this table is only the
- * chains gib.show DOES carry, under a key other than their numeric id.
- *
- * EXPORTED, and this is the ONLY place a pay-by-hand chain's gib.show key is
- * declared. `@gibs/bridge-client`'s `image.ts` used to hard-code its own copy
- * of the same `zcash → 'bip122-133'` entry; it now spreads this map into its
- * own icon table instead, because the dependency runs one way — the client
- * already imports from this package — so there was never a cycle stopping it.
- */
 export const pseudoChainGibShowIdentifierByChain = {
     zcash: 'bip122-133',
 };
-/** {@link pseudoChainGibShowIdentifierByChain}, keyed by chain id for lookup. */
 export const pseudoChainGibShowIdentifier = Object.fromEntries(Object.keys(depositAddressChainIds).map((chain) => [
     depositAddressChainIds[chain],
     pseudoChainGibShowIdentifierByChain[chain],
 ]));
-/**
- * The network image for a chain id, honouring a pseudo chain's own gib.show
- * key when its numeric id is not one gib.show's `/image/<id>` endpoint knows.
- *
- * @param chainId - the chain id, a deposit-address chain's local identifier included
- * @returns a working network/chain-badge image url
- */
 export const networkOrPseudo = (chainId) => {
     const identifier = pseudoChainGibShowIdentifier[chainId];
     return identifier !== undefined ? `${imageRoot}/image/${identifier}` : network(chainId);
 };
-/**
- * Returns the image url for the given token info.
- *
- * The gas token is asked for by BOTH of its keys, because the service keys it
- * two ways and each chain carries only one of them. `<chain>/<zero address>` is
- * a dedicated picture — Ethereum's ether diamond, PulseChain's mark — and
- * Binance Smart Chain has none, so asking for it there returns a 404 the browser
- * draws as a broken image. The empty-address form `<chain>/` is the chain's own
- * mark, which every chain has.
- *
- * The order is NOT interchangeable. The service serves the first source that
- * resolves, so a chain with a dedicated picture keeps it; reversed, Ethereum
- * would show the network logo where the ether logo belongs (the two are
- * genuinely different files). The pair is for the gas token alone: pairing an
- * ordinary contract address with the chain mark would hide a missing token logo
- * behind the network's, showing the wrong token rather than an honest fallback.
- *
- * @param t - the token info
- * @returns the image url
- */
 export const image = (t) => {
     if (t.logoURI)
         return t.logoURI;
@@ -100,43 +29,6 @@ export const image = (t) => {
     }
     return `${network(t.chainId)}/${getAddress(t.address)}`;
 };
-/**
- * Whether `address` is a real Ethereum-Virtual-Machine address {@link image}
- * can ask the service about — the zero address included, since that is
- * {@link isNativeAsset}'s own case and {@link image} handles it without
- * `getAddress` ever running.
- *
- * @param address - the address to check
- * @returns true when `getAddress` can checksum it without throwing
- */
 const isResolvableEvmAddress = (address) => /^0x[0-9a-fA-F]{40}$/.test(address);
-/**
- * {@link image}, but falling back to the token's own CHAIN mark rather than
- * throwing or asking the service for a picture that was never going to exist,
- * when the token carries no address a picture can be resolved from yet.
- *
- * WHY THIS EXISTS SEPARATELY FROM `image`. A route producer can reach the
- * moment it draws a DELIVERED token's picture before that token's exact
- * on-chain address is known — a not-yet-bridged token's `assetOutAddress` is
- * documented to arrive `null` (see the repository's own "Not-Yet-Bridged
- * Tokens" gotcha), and a deferred crossing's landing token is exactly this
- * case: the reader has not yet signed the leg that would settle it. `image`
- * either throws (`getAddress` refuses a malformed or empty string) or, for a
- * caller that swallows the throw, silently draws nothing — the same "blank
- * disc" defect the carrier marks were fixed for, one token lower. The chain's
- * own mark is a real, recognisable picture that is honest about what is
- * known: THIS chain, a token not yet resolved on it — the same trade
- * `trackerView.ts`'s `depositAddressChainLogoFallback` already makes for a
- * pay-by-hand ORIGIN with no address of its own.
- *
- * @param t - the token to draw
- * @returns the token's own picture, or its chain's mark when the token's
- *   address cannot be resolved into one
- */
 export const tokenImageOrChainFallback = (t) => isResolvableEvmAddress(t.address) ? image(t) : networkOrPseudo(t.chainId);
-/**
- * Returns a url that will lookup all sources for the given array
- * @param sources - the sources
- * @returns the images
- */
 export const images = (sources) => `${imageRoot}/image/?${sources.map((s) => `i=${s}`).join('&')}`;

package/dist/lifi-execution-guard.js

@@ -1,14 +1,4 @@
 import { decodeAbiParameters, zeroAddress } from 'viem';
-/**
- * Thrown by {@link verifyLifiEvmExecution} instead of returning a deposit a
- * wallet could sign.
- *
- * NAMED AND TYPED SO A REFUSAL IS NEVER A SILENT DROP. Every caller that
- * catches this can read `refusal.reason` and show, or log, exactly which
- * check failed — the same discipline `@gibs/quotes`'s `ProviderQuoteError`
- * applies to a provider declining a quote, applied here to a provider's
- * ANSWER disagreeing with itself.
- */
 export class LifiExecutionRefusedError extends Error {
     refusal;
     constructor(refusal) {
@@ -20,102 +10,72 @@ export class LifiExecutionRefusedError extends Error {
 const refuse = (reason, detail) => {
     throw new LifiExecutionRefusedError({ reason, detail });
 };
-/**
- * LI.FI's Diamond entryway contract address, by chain id.
- *
- * SOURCE. `lifinance/contracts` (https://github.com/lifinance/contracts),
- * commit `025989955bb373739737ee78ddff01620638ae3b` (2026-09-23): the
- * `LiFiDiamond` address in `deployments/<network>.json`, matched to its
- * chain id in `config/networks.json`, for every network whose `status` is
- * `"active"` and `"type"` is `"mainnet"`. LI.FI's own documentation
- * (https://docs.li.fi/introduction/lifi-architecture/smart-contract-addresses)
- * states the address is `0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE` "on most
- * supported networks" but differs on some — confirmed here directly against
- * the deployment records rather than assumed: 39 of the 65 active mainnet
- * networks use a DIFFERENT address, almost all of them newer or lower-volume
- * chains (0G, Abstract, ApeChain, Arbitrum Nova, Berachain, Flare, zkSync
- * Era, and more).
- *
- * DELIBERATELY A FIXED, BAKED-IN TABLE, NEVER A LIVE LOOKUP. LI.FI's own
- * `/v1/chains` endpoint carries a `diamondAddress` per chain, and this
- * codebase already fetches it for other purposes — but that endpoint is
- * reached through the SAME configurable, potentially-compromised host this
- * module exists to distrust. Trusting it here would make the whole guard
- * circular: a compromised proxy could simply report its own malicious
- * address as the "correct" one. This table is real code, reviewed and
- * shipped with the application, and can only change through a new release.
- *
- * UNKNOWN CHAIN, UNKNOWN ADDRESS. A chain id absent from this table refuses
- * rather than falling back to the common address — LI.FI adds networks
- * continuously, and assuming a newly-added chain shares the common address
- * would be exactly the kind of guess this module exists to avoid making.
- */
 export const lifiDiamondAddressByChainId = new Map([
-    [1, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // mainnet
-    [10, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // optimism
-    [14, '0x198FC70Dfe05E755C81e54bd67Bff3F729344B9b'], // flare
-    [25, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // cronos
-    [30, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // rootstock
-    [40, '0xa7cd44521903C65915648385E3FE881E49171582'], // telos
-    [50, '0x055d4612Ec74aD799C6cB4dF72C0Ab8dbDBCBAfa'], // xdc
-    [56, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // bsc
-    [88, '0x198FC70Dfe05E755C81e54bd67Bff3F729344B9b'], // viction
-    [100, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // gnosis
-    [122, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // fuse
-    [130, '0x864b314D4C5a0399368609581d3E8933a63b9232'], // unichain
-    [137, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // polygon
-    [143, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'], // monad
-    [146, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // sonic
-    [196, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // xlayer
-    [204, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // opbnb
-    [232, '0xF3B20515d9B193531c48E47c18aF16d1e5d28f9a'], // lens
-    [252, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // fraxtal
-    [288, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // boba
-    [324, '0x341e94069f53234fE6DabeF707aD424830525715'], // zksync
-    [480, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // worldchain
-    [747, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'], // flow
-    [988, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'], // stable
-    [1088, '0x24ca98fB6972F5eE05f0dB00595c7f68D9FaFd68'], // metis
-    [1135, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // lisk
-    [1329, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // sei
-    [1480, '0x198FC70Dfe05E755C81e54bd67Bff3F729344B9b'], // vana
-    [1625, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // gravity
-    [1672, '0xFf70F4A1d11995621854F3692acF286d8aCd04b2'], // pharos
-    [1776, '0xeCeC3970Ca674278DA8D9B1c484ACaF6B20181F5'], // injective
-    [1868, '0x864b314D4C5a0399368609581d3E8933a63b9232'], // soneium
-    [2020, '0x452Cf1B8597E6319Cd21abd847312bF17E26d8d1'], // ronin
-    [2741, '0x4f8C9056bb8A3616693a76922FA35d53C056E5b3'], // abstract
-    [2818, '0xF7aB42D00D2399f8A4Fba2F15466Be40709fe307'], // morph
-    [4217, '0x2cAcAE8e22418E65dcf7651c67aEbe6288EB8243'], // tempo
-    [4326, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'], // megaeth
-    [4663, '0xB477751B76CF82d00a686A1232f5fCD772414Af3'], // robinhood
-    [5000, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // mantle
-    [5031, '0x0bc413CAe89C5b3Ba3AA87FB98dCA23425E1828f'], // somnia
-    [5042, '0xA4072583658Fae592A3506A42431cb6316a8d40b'], // arc
-    [5734951, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'], // jovay
-    [6900, '0x926c22Dc753E543Cf9CaB75CeEB46ecf865d006a'], // nibiru
-    [8217, '0x1255d17c1BC2f764d087536410879F2d0D8772fD'], // kaia
-    [8453, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // base
-    [9745, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'], // plasma
-    [13371, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // immutablezkevm
-    [16661, '0x213A83c67E1Fc0334eF684571ABCB820708A6536'], // 0g
-    [33139, '0x2dea447e7dc6cd2f10b31bF10dCB30F87E838417'], // apechain
-    [34443, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // mode
-    [42161, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // arbitrum
-    [42170, '0xFf70F4A1d11995621854F3692acF286d8aCd04b2'], // arbitrumnova
-    [42220, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // celo
-    [42793, '0x977474593c982cFa8b197cAE302e6d01f789435b'], // etherlink
-    [43111, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'], // hemi
-    [43114, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // avalanche
-    [57073, '0x864b314D4C5a0399368609581d3E8933a63b9232'], // ink
-    [59144, '0xDE1E598b81620773454588B85D6b5D4eEC32573e'], // linea
-    [60808, '0x452Cf1B8597E6319Cd21abd847312bF17E26d8d1'], // bob
-    [80094, '0xf909c4Ae16622898b885B89d7F839E0244851c66'], // berachain
-    [81457, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // blast
-    [98866, '0x6f5C8Bb0C5Fe4ECeAC40EE1C238EaB6bbb29761c'], // plume
-    [534352, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'], // scroll
-    [747474, '0xC59fe32C9549e3E8B5dCcdAbC45BD287Bd5bA2bc'], // katana
-    [999, '0x0a0758d937d1059c356D4714e57F5df0239bce1A'], // hyperevm
+    [1, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [10, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [14, '0x198FC70Dfe05E755C81e54bd67Bff3F729344B9b'],
+    [25, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [30, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [40, '0xa7cd44521903C65915648385E3FE881E49171582'],
+    [50, '0x055d4612Ec74aD799C6cB4dF72C0Ab8dbDBCBAfa'],
+    [56, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [88, '0x198FC70Dfe05E755C81e54bd67Bff3F729344B9b'],
+    [100, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [122, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [130, '0x864b314D4C5a0399368609581d3E8933a63b9232'],
+    [137, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [143, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'],
+    [146, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [196, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [204, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [232, '0xF3B20515d9B193531c48E47c18aF16d1e5d28f9a'],
+    [252, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [288, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [324, '0x341e94069f53234fE6DabeF707aD424830525715'],
+    [480, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [747, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'],
+    [988, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'],
+    [1088, '0x24ca98fB6972F5eE05f0dB00595c7f68D9FaFd68'],
+    [1135, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [1329, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [1480, '0x198FC70Dfe05E755C81e54bd67Bff3F729344B9b'],
+    [1625, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [1672, '0xFf70F4A1d11995621854F3692acF286d8aCd04b2'],
+    [1776, '0xeCeC3970Ca674278DA8D9B1c484ACaF6B20181F5'],
+    [1868, '0x864b314D4C5a0399368609581d3E8933a63b9232'],
+    [2020, '0x452Cf1B8597E6319Cd21abd847312bF17E26d8d1'],
+    [2741, '0x4f8C9056bb8A3616693a76922FA35d53C056E5b3'],
+    [2818, '0xF7aB42D00D2399f8A4Fba2F15466Be40709fe307'],
+    [4217, '0x2cAcAE8e22418E65dcf7651c67aEbe6288EB8243'],
+    [4326, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'],
+    [4663, '0xB477751B76CF82d00a686A1232f5fCD772414Af3'],
+    [5000, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [5031, '0x0bc413CAe89C5b3Ba3AA87FB98dCA23425E1828f'],
+    [5042, '0xA4072583658Fae592A3506A42431cb6316a8d40b'],
+    [5734951, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'],
+    [6900, '0x926c22Dc753E543Cf9CaB75CeEB46ecf865d006a'],
+    [8217, '0x1255d17c1BC2f764d087536410879F2d0D8772fD'],
+    [8453, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [9745, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'],
+    [13371, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [16661, '0x213A83c67E1Fc0334eF684571ABCB820708A6536'],
+    [33139, '0x2dea447e7dc6cd2f10b31bF10dCB30F87E838417'],
+    [34443, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [42161, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [42170, '0xFf70F4A1d11995621854F3692acF286d8aCd04b2'],
+    [42220, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [42793, '0x977474593c982cFa8b197cAE302e6d01f789435b'],
+    [43111, '0x026F252016A7C47CDEf1F05a3Fc9E20C92a49C37'],
+    [43114, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [57073, '0x864b314D4C5a0399368609581d3E8933a63b9232'],
+    [59144, '0xDE1E598b81620773454588B85D6b5D4eEC32573e'],
+    [60808, '0x452Cf1B8597E6319Cd21abd847312bF17E26d8d1'],
+    [80094, '0xf909c4Ae16622898b885B89d7F839E0244851c66'],
+    [81457, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [98866, '0x6f5C8Bb0C5Fe4ECeAC40EE1C238EaB6bbb29761c'],
+    [534352, '0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaE'],
+    [747474, '0xC59fe32C9549e3E8B5dCcdAbC45BD287Bd5bA2bc'],
+    [999, '0x0a0758d937d1059c356D4714e57F5df0239bce1A'],
 ]);
 const bridgeDataAbiType = {
     type: 'tuple',
@@ -144,32 +104,14 @@ const swapDataArrayAbiType = {
         { name: 'requiresDeposit', type: 'bool' },
     ],
 };
-/** Decodes `BridgeData` and the leading `SwapData` entry, shared by every verified decoder. */
 const decodeBridgeDataAndLeadingSwap = (encodedTail) => {
     const [bridgeData, swapData] = decodeAbiParameters([bridgeDataAbiType, swapDataArrayAbiType], encodedTail);
-    // EVERY VERIFIED SELECTOR IS A `swapAndStartBridgeTokensViaX` FUNCTION,
-    // whose `containsSourceSwaps` modifier requires a non-empty `SwapData[]`
-    // on a genuine call. An empty array here — whether from `hasSourceSwaps`
-    // being forged false or the array itself being emptied — means this
-    // module cannot identify what was actually pulled from the depositor, so
-    // it refuses rather than reading past the end of the array.
     const leadingSwap = swapData[0];
     if (!bridgeData.hasSourceSwaps || leadingSwap === undefined) {
         return null;
     }
     return { bridgeData, leadingSwap };
 };
-/**
- * `swapAndStartBridgeTokensViaAcrossV4((BridgeData),(SwapData[]),(AcrossV4Data))`.
- *
- * Selector `0x1794958f`, verified against
- * `packages/bridge-sdk/src/__fixtures__/lifi/contract-quote-success-eth-to-base-usdc.json`
- * (a real `GET /v1/quote` response) — signature and struct layout read from
- * `lifinance/contracts/src/Facets/AcrossFacetV4.sol`. `AcrossV4Data` carries
- * no native-fee field, so {@link DecodedLifiFacetCall.extraNativeFee} is
- * always `0n`. `outputAmount` is Across's own destination-side guarantee —
- * confirmed equal to the SAME response's `estimate.toAmountMin`.
- */
 const decodeAcrossV4SwapAndStart = (data) => {
     const acrossV4DataAbiType = {
         type: 'tuple',
@@ -202,19 +144,6 @@ const decodeAcrossV4SwapAndStart = (data) => {
         destinationMinimum: acrossData.outputAmount,
     };
 };
-/**
- * `swapAndStartBridgeTokensViaLayerSwap((BridgeData),(SwapData[]),(LayerSwapData))`.
- *
- * Selector `0x4c279d6b`, verified against
- * `packages/bridge-sdk/src/__fixtures__/lifi/quote-plain-base-to-polygon.json`
- * (a real `GET /v1/quote` response) — signature and struct layout read from
- * `lifinance/contracts/src/Facets/LayerSwapFacet.sol`. `LayerSwapData`
- * carries no native-fee field ({@link DecodedLifiFacetCall.extraNativeFee}
- * is always `0n`) and, unlike Across or Stargate, NO destination-amount
- * field at all — LayerSwap's delivered amount is attested off-chain by an
- * EIP-712 signature over `requestId`, not provable from this calldata, so
- * {@link DecodedLifiFacetCall.destinationMinimum} is always `null`.
- */
 const decodeLayerSwapSwapAndStart = (data) => {
     const layerSwapDataAbiType = {
         type: 'tuple',
@@ -241,22 +170,6 @@ const decodeLayerSwapSwapAndStart = (data) => {
         destinationMinimum: null,
     };
 };
-/**
- * `swapAndStartBridgeTokensViaStargate((BridgeData),(SwapData[]),(StargateData))`.
- *
- * Selector `0xa6010a66`, verified against two live captures of
- * `POST /v1/quote/contractCalls`
- * (`packages/bridge-sdk/src/__fixtures__/lifi/contract-calls-native-base-to-eth-mediator.json`
- * and its `-erc20-` sibling) — signature and struct layout read from
- * `lifinance/contracts/src/Facets/StargateFacetV2.sol` and
- * `src/Interfaces/IStargate.sol`. `StargateData.fee.nativeFee` is a
- * LayerZero messaging fee that rides in `msg.value` ON TOP of any deposited
- * native amount — confirmed by both fixtures: `transactionRequest.value`
- * equalled `originAmount + fee.nativeFee` exactly (origin ETH) and
- * `fee.nativeFee` alone when the origin amount was an ERC20 (USD Coin, no
- * native component). `sendParams.minAmountLD` is Stargate's own
- * destination-side guarantee.
- */
 const decodeStargateSwapAndStart = (data) => {
     const stargateDataAbiType = {
         type: 'tuple',
@@ -301,32 +214,12 @@ const decodeStargateSwapAndStart = (data) => {
         destinationMinimum: stargateData.sendParams.minAmountLD,
     };
 };
-/**
- * Every LI.FI facet function this module can decode, keyed by its four-byte
- * selector. AN UNKNOWN SELECTOR IS NEVER DECODED — {@link verifyLifiEvmExecution}
- * refuses it outright. Extending this table means capturing a real fixture
- * for the new tool first; see this module's top-of-file doc comment.
- */
 const lifiFacetDecoders = {
     '0x1794958f': decodeAcrossV4SwapAndStart,
     '0x4c279d6b': decodeLayerSwapSwapAndStart,
     '0xa6010a66': decodeStargateSwapAndStart,
 };
 const sameAddress = (a, b) => a.toLowerCase() === b.toLowerCase();
-/**
- * Verifies a LI.FI EVM execution transaction against what this application
- * asked for, throwing {@link LifiExecutionRefusedError} on any disagreement.
- * Returns normally — carrying nothing, since the caller already holds the
- * transaction it validated — when every check passes.
- *
- * See this module's top-of-file doc comment for what is checked and why.
- *
- * @param transactionRequest - the parsed `to`/`data`/`value`/`chainId` this
- *   application is about to hand to a wallet
- * @param approvalAddress - `estimate.approvalAddress` from the same
- *   response, or `null` when the route needs no token approval
- * @param expectation - what this application actually asked for
- */
 export const verifyLifiEvmExecution = (transactionRequest, approvalAddress, expectation) => {
     const router = lifiDiamondAddressByChainId.get(transactionRequest.chainId);
     if (router === undefined) {