@liquidium/client 0.7.0 → 0.8.0

package/README.md

@@ -62,6 +62,8 @@ Amounts use `bigint` values in each asset's smallest unit. Read pool decimals be
 
 `Asset.ETH` supports native ETH on `Chain.ETH` and ckETH ICRC transfers on `Chain.ICP`. Both routes use 18 decimals, so amounts are expressed in wei (`0.005 ETH` is `5_000_000_000_000_000n`). For native ETH deposits and repayments, select `mechanism: "transfer"` to send ETH to a generated deposit address or `mechanism: "contractInteraction"` to send ETH through the payable deposit helper. Transfer is the default when `mechanism` is omitted. ckETH routes use the generated ICRC target.
 
+Native ETH borrows and withdrawals do not support addresses with deployed contract bytecode, including smart contract wallets. The same restriction applies to Simple Loan borrow destinations and native ETH collateral refund destinations.
+
 See the [quick start](https://liquidium-inc.github.io/liquidium-sdk/getting-started/quick-start/) for LTV validation, repayment, and recovery.
 
 ## Examples

package/dist/index.cjs

@@ -47,6 +47,7 @@ var LiquidiumErrorCode = {
   WITHDRAW_TOO_LOW: "WITHDRAW_TOO_LOW",
   REPAYMENT_EXCEEDS_DEBT: "REPAYMENT_EXCEEDS_DEBT",
   INVALID_ADDRESS: "INVALID_ADDRESS",
+  CONTRACT_DESTINATION_UNSUPPORTED: "CONTRACT_DESTINATION_UNSUPPORTED",
   DEPOSIT_ADDRESS_ERROR: "DEPOSIT_ADDRESS_ERROR",
   // Transport
   NETWORK_ERROR: "NETWORK_ERROR",
@@ -320,6 +321,12 @@ function appendErrorContext(message, context) {
   return `${message} (${details.join(", ")})`;
 }
 function createCanisterContext(opts) {
+  if (opts.agent) {
+    return {
+      agent: opts.agent,
+      canisterIds: opts.canisterIds
+    };
+  }
   const host = resolveHost(opts.icHost);
   const agent$1 = agent.HttpAgent.createSync({
     host,
@@ -1787,6 +1794,11 @@ var HISTORY_ACTIVITIES = `${SDK_API_V2_PATH}/history/activities`;
 var HISTORY_USERS = `${SDK_API_V2_PATH}/history/users`;
 var INFLOW = `${SDK_API_V2_PATH}/inflow`;
 var SIMPLE_LOANS = `${SDK_API_V1_PATH}/instant-loans`;
+function buildEthereumAddressBytecodePath(request) {
+  return `${SDK_API_V2_PATH}/ethereum/addresses/${encodeURIComponent(
+    request.address
+  )}/bytecode`;
+}
 function buildHistoryUserTransactionsPath(profileId, query) {
   const base = `${HISTORY_USERS}/${encodeURIComponent(profileId)}/transactions`;
   const qs = query.toString();
@@ -3343,6 +3355,71 @@ function accountTypeToString(accountType) {
       return `Principal:${accountType.data}`;
   }
 }
+var EMPTY_EVM_BYTECODE = "0x";
+var LAST_ETHEREUM_MAINNET_PRECOMPILE_ADDRESS = 0x11n;
+var CONTRACT_DESTINATION_UNSUPPORTED_MESSAGE = "Contract addresses are not supported for native ETH withdrawals or borrowing";
+var RESERVED_DESTINATION_MESSAGE = "Ethereum outflow destination must not be the zero address or a precompile";
+async function guardEthereumOutflowDestination({
+  address,
+  apiClient,
+  asset,
+  chain,
+  evmReadClient
+}) {
+  if (chain !== Chain.ETH) {
+    return;
+  }
+  const normalizedAddress = viem.getAddress(address);
+  if (BigInt(normalizedAddress) <= LAST_ETHEREUM_MAINNET_PRECOMPILE_ADDRESS) {
+    throw new LiquidiumError(
+      LiquidiumErrorCode.INVALID_ADDRESS,
+      RESERVED_DESTINATION_MESSAGE
+    );
+  }
+  if (asset !== Asset.ETH) {
+    return;
+  }
+  if (evmReadClient?.chain?.id === chains.mainnet.id && evmReadClient.getCode) {
+    let bytecode;
+    try {
+      bytecode = await evmReadClient.getCode({
+        address: normalizedAddress
+      });
+    } catch {
+      return;
+    }
+    if (bytecode === void 0 || bytecode === EMPTY_EVM_BYTECODE) {
+      return;
+    }
+    if (typeof bytecode !== "string" || !/^0x(?:[0-9a-fA-F]{2})*$/.test(bytecode)) {
+      return;
+    }
+    throw new LiquidiumError(
+      LiquidiumErrorCode.CONTRACT_DESTINATION_UNSUPPORTED,
+      CONTRACT_DESTINATION_UNSUPPORTED_MESSAGE
+    );
+  }
+  if (!apiClient) {
+    return;
+  }
+  let response;
+  try {
+    response = await apiClient.get(
+      buildEthereumAddressBytecodePath({ address: normalizedAddress })
+    );
+  } catch {
+    return;
+  }
+  if (!response || typeof response !== "object" || !("hasDeployedBytecode" in response) || typeof response.hasDeployedBytecode !== "boolean") {
+    return;
+  }
+  if (response.hasDeployedBytecode) {
+    throw new LiquidiumError(
+      LiquidiumErrorCode.CONTRACT_DESTINATION_UNSUPPORTED,
+      CONTRACT_DESTINATION_UNSUPPORTED_MESSAGE
+    );
+  }
+}
 
 // src/core/pool-ledger-assets.ts
 function getPoolLedgerAssetRoute(params) {
@@ -4725,6 +4802,13 @@ var LendingModule = class {
       poolChain: selectedPool.chain,
       destinationChain: request.chain
     });
+    await guardEthereumOutflowDestination({
+      address: receiver.address,
+      apiClient: this.apiClient,
+      asset: selectedAsset,
+      chain: request.chain,
+      evmReadClient: this.evmReadClient
+    });
     const lendingActor = createLendingActor(this.canisterContext);
     try {
       const expiryTimestamp = computeExpiryTimestampFromNow();
@@ -4743,7 +4827,9 @@ var LendingModule = class {
       };
       const withdrawSubmissionData = {
         ...withdrawActionData,
-        receiverAccount: receiver.canisterAccount
+        asset: selectedAsset,
+        receiverAccount: receiver.canisterAccount,
+        receiverAddress: receiver.address
       };
       return {
         kind: WalletActionKind.createWithdraw,
@@ -4775,6 +4861,13 @@ var LendingModule = class {
     }
   }
   async submitWithdraw(request, signatureInfo) {
+    await guardEthereumOutflowDestination({
+      address: request.receiverAddress,
+      apiClient: this.apiClient,
+      asset: request.asset,
+      chain: request.chain,
+      evmReadClient: this.evmReadClient
+    });
     try {
       const result = await createLendingActor(this.canisterContext).withdraw(
         principal.Principal.fromText(request.profileId),
@@ -4879,6 +4972,13 @@ var LendingModule = class {
       poolChain: selectedPool.chain,
       destinationChain: request.chain
     });
+    await guardEthereumOutflowDestination({
+      address: receiver.address,
+      apiClient: this.apiClient,
+      asset: selectedAsset,
+      chain: request.chain,
+      evmReadClient: this.evmReadClient
+    });
     await this.guardBorrowSameAssetPolicy({
       profileId: request.profileId,
       pool: selectedPool
@@ -4901,7 +5001,9 @@ var LendingModule = class {
       };
       const borrowSubmissionData = {
         ...borrowActionData,
-        receiverAccount: receiver.canisterAccount
+        asset: selectedAsset,
+        receiverAccount: receiver.canisterAccount,
+        receiverAddress: receiver.address
       };
       return {
         kind: WalletActionKind.createBorrow,
@@ -4930,6 +5032,13 @@ var LendingModule = class {
     }
   }
   async submitBorrow(request, signatureInfo) {
+    await guardEthereumOutflowDestination({
+      address: request.receiverAddress,
+      apiClient: this.apiClient,
+      asset: request.asset,
+      chain: request.chain,
+      evmReadClient: this.evmReadClient
+    });
     try {
       const result = await createLendingActor(
         this.canisterContext
@@ -7622,6 +7731,7 @@ var LiquidiumClient = class {
     const canisterIds = resolveCanisterIds(environment, config.canisterIds);
     const timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
     this.canisterContext = createCanisterContext({
+      agent: config.agent,
       icHost: config.icHost,
       identity: config.identity,
       canisterIds