@miradexio/client 0.1.0

package/dist/verification/index.js

@@ -0,0 +1,91 @@
+import { noopLogger } from '../interfaces/logger.js';
+import { VerificationError } from '../types/index.js';
+import { verifyAtomicSwap } from './atomic-swap.js';
+import { verifyThorchain } from './thorchain.js';
+import { verifyChainflip } from './chainflip.js';
+import { verifyNearIntents } from './near-intents.js';
+import { check } from './shared.js';
+export { parseThorchainMemo, requireMemoBindsDestination } from './memo.js';
+export { verifyAtomicSwap, verifyThorchain, verifyChainflip, verifyNearIntents };
+export { fetchThorchainVaults, verifyThorchainQuote } from './thorchain.js';
+export { verifyChainflipChannel } from './chainflip.js';
+export { CHAINFLIP_VERIFICATION_NETWORKS, chainflipEndpointsForNetwork, } from './chainflip-networks.js';
+export { THORCHAIN_VERIFICATION_NETWORKS, thorchainEndpointsForNetwork, } from './thorchain-networks.js';
+export { fetchNearIntentStatus, requireIntentBinds, requireIntentDeadlineMargin, verifyNearIntentOnChain, } from './near-intents.js';
+export { fetchConsensusRate } from './rate-oracle.js';
+export { VERIFY_FETCH_TIMEOUT_MS, VERIFY_MAX_ATTEMPTS, VERIFY_RETRY_DELAY_MS } from './constants.js';
+/**
+ * Verify a deposit address against the authoritative infrastructure for its
+ * provider. Common client-side checks (address presence, output amount,
+ * destination match) run for every provider.
+ *
+ * @throws {VerificationError} `E_PROVIDER_UNKNOWN` for an unrecognised
+ *   provider; `E_UNEXPECTED_TIMELOCK` when `timelock_blocks` is set for a
+ *   non-atomicswap provider.
+ */
+export async function verifyDepositAddress(params) {
+    const { depositAddress, verification, destAddress, refundAddress, toToken, amount, fromChain, toChain, fromToken, network = 'mainnet', protocol, expectedAmountOut, expectedDestAddress, fetchFn = globalThis.fetch, resume, logger = noopLogger, signal, } = params;
+    const verifyParams = {
+        destAddress,
+        refundAddress,
+        toToken,
+        amount,
+        fromChain,
+        toChain,
+        fromToken,
+    };
+    // AV-A.13 scope: timelock_blocks is only meaningful for atomicswap. If
+    // any other provider carries one, it's a client-side bug or a server
+    // confusion attempt — reject loudly.
+    if (verification.provider !== 'atomicswap' && protocol?.timelock_blocks !== undefined) {
+        throw new VerificationError('E_UNEXPECTED_TIMELOCK', `timelock_blocks is set for non-atomicswap provider ${verification.provider}`);
+    }
+    let providerResult;
+    switch (verification.provider) {
+        case 'thorchain':
+            providerResult = await verifyThorchain(depositAddress, verification, verifyParams, fetchFn, network, resume, signal);
+            break;
+        case 'chainflip':
+            providerResult = await verifyChainflip(depositAddress, verification, verifyParams, fetchFn, network, signal);
+            break;
+        case 'near_intents':
+            providerResult = await verifyNearIntents(verification, fetchFn, signal);
+            break;
+        case 'atomicswap':
+            providerResult = verifyAtomicSwap(verification, verifyParams, protocol);
+            break;
+        default: {
+            const unknown = verification;
+            throw new VerificationError('E_PROVIDER_UNKNOWN', `unknown provider: ${String(unknown.provider)}`);
+        }
+    }
+    const clientChecks = [];
+    clientChecks.push(check('Deposit address', !!depositAddress && depositAddress.length > 5, depositAddress ? `${depositAddress.slice(0, 12)}...` : 'Missing'));
+    if (expectedAmountOut) {
+        const amt = parseFloat(expectedAmountOut);
+        clientChecks.push(check('Output amount', amt > 0, `${expectedAmountOut} ${toToken}`));
+    }
+    if (expectedDestAddress) {
+        const match = expectedDestAddress === destAddress;
+        const truncDest = expectedDestAddress.length > 20
+            ? `${expectedDestAddress.slice(0, 6)}...${expectedDestAddress.slice(-6)}`
+            : expectedDestAddress;
+        clientChecks.push(check('Destination address', match, match ? truncDest : `MISMATCH: ${truncDest}`));
+    }
+    const allChecks = [...providerResult.checks, ...clientChecks];
+    const verified = allChecks.every((c) => c.passed);
+    const failed = allChecks.filter((c) => !c.passed).map((c) => c.name);
+    if (verified) {
+        logger.info({ provider: providerResult.provider, checks: allChecks.length }, 'Verification passed');
+    }
+    else {
+        logger.warn({ provider: providerResult.provider, failed }, 'Verification failed');
+    }
+    return {
+        verified,
+        provider: providerResult.provider,
+        checks: allChecks,
+        timestamp: Date.now(),
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/verification/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/verification/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAMrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAGpC,OAAO,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AAE5E,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAK5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAExD,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AAKjC,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AAKjC,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AA8BrG;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA2B;IAE3B,MAAM,EACJ,cAAc,EACd,YAAY,EACZ,WAAW,EACX,aAAa,EACb,OAAO,EACP,MAAM,EACN,SAAS,EACT,OAAO,EACP,SAAS,EACT,OAAO,GAAG,SAAS,EACnB,QAAQ,EACR,iBAAiB,EACjB,mBAAmB,EACnB,OAAO,GAAG,UAAU,CAAC,KAAK,EAC1B,MAAM,EACN,MAAM,GAAG,UAAU,EACnB,MAAM,GACP,GAAG,MAAM,CAAC;IAEX,MAAM,YAAY,GAAG;QACnB,WAAW;QACX,aAAa;QACb,OAAO;QACP,MAAM;QACN,SAAS;QACT,OAAO;QACP,SAAS;KACV,CAAC;IAEF,uEAAuE;IACvE,qEAAqE;IACrE,qCAAqC;IACrC,IAAI,YAAY,CAAC,QAAQ,KAAK,YAAY,IAAI,QAAQ,EAAE,eAAe,KAAK,SAAS,EAAE,CAAC;QACtF,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,sDAAsD,YAAY,CAAC,QAAQ,EAAE,CAC9E,CAAC;IACJ,CAAC;IAED,IAAI,cAAkC,CAAC;IACvC,QAAQ,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC9B,KAAK,WAAW;YACd,cAAc,GAAG,MAAM,eAAe,CACpC,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAC7E,CAAC;YACF,MAAM;QACR,KAAK,WAAW;YACd,cAAc,GAAG,MAAM,eAAe,CACpC,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,OAAO,EACP,OAAO,EACP,MAAM,CACP,CAAC;YACF,MAAM;QACR,KAAK,cAAc;YACjB,cAAc,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACxE,MAAM;QACR,KAAK,YAAY;YACf,cAAc,GAAG,gBAAgB,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM;QACR,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,OAAO,GAAU,YAAY,CAAC;YACpC,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,qBAAqB,MAAM,CAAE,OAAgC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAwB,EAAE,CAAC;IAE7C,YAAY,CAAC,IAAI,CACf,KAAK,CACH,iBAAiB,EACjB,CAAC,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAC7C,cAAc,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CACjE,CACF,CAAC;IAEF,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC1C,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,iBAAiB,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,mBAAmB,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,mBAAmB,KAAK,WAAW,CAAC;QAClD,MAAM,SAAS,GACb,mBAAmB,CAAC,MAAM,GAAG,EAAE;YAC7B,CAAC,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;YACzE,CAAC,CAAC,mBAAmB,CAAC;QAC1B,YAAY,CAAC,IAAI,CACf,KAAK,CAAC,qBAAqB,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,SAAS,EAAE,CAAC,CAClF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACtG,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACpF,CAAC;IACD,OAAO;QACL,QAAQ;QACR,QAAQ,EAAE,cAAc,CAAC,QAAQ;QACjC,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC"}

package/dist/verification/memo.d.ts

@@ -0,0 +1,27 @@
+export interface ParsedThorchainMemo {
+    readonly asset: string;
+    readonly destAddress: string;
+    readonly minOut?: bigint;
+    readonly streamingInterval?: number;
+    readonly streamingQuantity?: number;
+    readonly affiliate?: string;
+    readonly affiliateFeeBps?: number;
+}
+/**
+ * Parse a THORChain memo string. Accepts `SWAP:`, `=:`, and `s:` prefixes
+ * followed by asset, destination, optional min-out (either a plain integer
+ * or the streaming form `LIMIT/INTERVAL/QUANTITY`), optional affiliate,
+ * optional affiliate fee in bps.
+ *
+ * @throws {VerificationError} `E_MEMO_MALFORMED` when the memo does not
+ *   match the canonical ABI.
+ */
+export declare function parseThorchainMemo(memo: string): ParsedThorchainMemo;
+/**
+ * Assert the parsed memo's destination field equals the expected address.
+ *
+ * @throws {VerificationError} `E_MEMO_DEST_MISMATCH` on mismatch.
+ * @throws {VerificationError} `E_MEMO_MALFORMED` if the memo fails to parse.
+ */
+export declare function requireMemoBindsDestination(memo: string, expectedDestAddress: string): void;
+//# sourceMappingURL=memo.d.ts.map

package/dist/verification/memo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memo.d.ts","sourceRoot":"","sources":["../../src/verification/memo.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CAepE;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAQ3F"}

package/dist/verification/memo.js

@@ -0,0 +1,52 @@
+/**
+ * THORChain memo parsing and strict binding.
+ *
+ * Old code used `memo.includes(destAddress)` which matches any memo where the
+ * destination address is a substring. An attacker-controlled memo of the form
+ * `SWAP:ETH.ETH:0xATTACKER:0:affid_<USER_ADDR>:10` would pass that check.
+ *
+ * The strict parser matches the THORChain memo ABI and compares the
+ * destination field only.
+ *
+ * @security Closes AV-A.14 variant / AV-K.6.
+ */
+import { VerificationError } from '../types/index.js';
+const THORCHAIN_MEMO_RE = /^(?:SWAP|=|s):([A-Z0-9./-]+):([A-Za-z0-9_./]+)(?::(\d+)(?:\/(\d+)\/(\d+))?)?(?::([A-Za-z0-9]+))?(?::(\d+))?$/;
+/**
+ * Parse a THORChain memo string. Accepts `SWAP:`, `=:`, and `s:` prefixes
+ * followed by asset, destination, optional min-out (either a plain integer
+ * or the streaming form `LIMIT/INTERVAL/QUANTITY`), optional affiliate,
+ * optional affiliate fee in bps.
+ *
+ * @throws {VerificationError} `E_MEMO_MALFORMED` when the memo does not
+ *   match the canonical ABI.
+ */
+export function parseThorchainMemo(memo) {
+    const match = memo.trim().match(THORCHAIN_MEMO_RE);
+    if (!match) {
+        throw new VerificationError('E_MEMO_MALFORMED', `memo does not parse: ${memo}`);
+    }
+    const [, asset = '', destAddress = '', minOut, streamingInterval, streamingQuantity, affiliate, feeBps] = match;
+    return {
+        asset,
+        destAddress,
+        minOut: minOut !== undefined ? BigInt(minOut) : undefined,
+        streamingInterval: streamingInterval !== undefined ? Number(streamingInterval) : undefined,
+        streamingQuantity: streamingQuantity !== undefined ? Number(streamingQuantity) : undefined,
+        affiliate,
+        affiliateFeeBps: feeBps !== undefined ? Number(feeBps) : undefined,
+    };
+}
+/**
+ * Assert the parsed memo's destination field equals the expected address.
+ *
+ * @throws {VerificationError} `E_MEMO_DEST_MISMATCH` on mismatch.
+ * @throws {VerificationError} `E_MEMO_MALFORMED` if the memo fails to parse.
+ */
+export function requireMemoBindsDestination(memo, expectedDestAddress) {
+    const parsed = parseThorchainMemo(memo);
+    if (parsed.destAddress !== expectedDestAddress) {
+        throw new VerificationError('E_MEMO_DEST_MISMATCH', `memo destination ${parsed.destAddress} differs from expected ${expectedDestAddress}`);
+    }
+}
+//# sourceMappingURL=memo.js.map

package/dist/verification/memo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memo.js","sourceRoot":"","sources":["../../src/verification/memo.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,iBAAiB,GACrB,8GAA8G,CAAC;AAYjH;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,wBAAwB,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,WAAW,GAAG,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IAChH,OAAO;QACL,KAAK;QACL,WAAW;QACX,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACzD,iBAAiB,EAAE,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC1F,iBAAiB,EAAE,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;QAC1F,SAAS;QACT,eAAe,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;KACnE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAY,EAAE,mBAA2B;IACnF,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,WAAW,KAAK,mBAAmB,EAAE,CAAC;QAC/C,MAAM,IAAI,iBAAiB,CACzB,sBAAsB,EACtB,oBAAoB,MAAM,CAAC,WAAW,0BAA0B,mBAAmB,EAAE,CACtF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/verification/near-intents.d.ts

@@ -0,0 +1,91 @@
+import type { NearIntentsVerification, VerificationResult } from '../types/index.js';
+import { type NearIntentStatusResponse } from '../wire/near-intents.zod.js';
+/**
+ * Verify a NEAR-Intents deposit address against the 1Click status endpoint.
+ * Uses an explicit status enum switch (no `!== 'NOT_FOUND'` substring).
+ */
+export declare function verifyNearIntents(v: NearIntentsVerification, fetchFn: typeof globalThis.fetch, externalSignal?: AbortSignal): Promise<VerificationResult>;
+export interface FetchNearIntentStatusInput {
+    readonly statusUrl: string;
+    readonly fetchFn: typeof globalThis.fetch;
+    readonly timeoutMs?: number;
+}
+/**
+ * Fetch 1Click `/v0/status` and return a flattened intent view. Performs an
+ * exhaustive enum switch over the 7 real status values.
+ *
+ * Mapping of HTTP / status to error codes:
+ *   - HTTP 404 → `E_NEAR_INTENT_NOT_REGISTERED` (deposit address unknown to 1Click)
+ *   - HTTP non-2xx (non-404) → `E_NEAR_INTENT_FAILED` (network / server error)
+ *   - status === 'FAILED' → `E_NEAR_INTENT_FAILED`
+ *   - status in {PENDING_DEPOSIT, KNOWN_DEPOSIT_TX, INCOMPLETE_DEPOSIT,
+ *     PROCESSING, SUCCESS, REFUNDED} → returns the flattened response.
+ *
+ * 1Click does not surface an "EXPIRED" status. Past-deadline detection is
+ * performed via `requireIntentDeadlineMargin` against `quote.deadline`.
+ *
+ * @throws {VerificationError} `E_NEAR_INTENT_NOT_REGISTERED` on HTTP 404.
+ * @throws {VerificationError} `E_NEAR_INTENT_FAILED` on HTTP error or
+ *   `status === 'FAILED'`.
+ */
+export declare function fetchNearIntentStatus(input: FetchNearIntentStatusInput): Promise<NearIntentStatusResponse>;
+export interface RequireIntentBindsInput {
+    readonly destinationAddress: string;
+    /**
+     * Optional 1Click destination-asset ID (e.g.
+     * `nep141:eth-0xa0b8…omft.near`). Pass it to assert the intent really
+     * targets the destination chain you expect — 1Click's `/v0/status`
+     * exposes the chain only inside this asset ID, not as a separate field.
+     */
+    readonly destinationAssetId?: string;
+    readonly refundAddress?: string;
+}
+/**
+ * Assert the returned intent binds the caller's expected destination address,
+ * destination asset, and (optional) refund address.
+ *
+ * @throws {VerificationError} `E_NEAR_INTENT_MISBINDING` on any mismatch.
+ */
+export declare function requireIntentBinds(intent: NearIntentStatusResponse, expected: RequireIntentBindsInput): void;
+/**
+ * Enforce the quote deadline has at least the safety margin (90 min) before
+ * it expires relative to `Date.now()`. The deadline lives at
+ * `quoteResponse.quote.deadline` in the raw 1Click response and is surfaced
+ * as `intent.deadline` after flattening.
+ *
+ * Returns silently if `intent.deadline` is null (1Click's dry-run quotes
+ * omit the deadline; we cannot enforce expiry against an absent value).
+ *
+ * @throws {VerificationError} `E_NEAR_INTENT_EXPIRING` when the deadline is
+ *   sooner than the safety margin.
+ */
+export declare function requireIntentDeadlineMargin(intent: NearIntentStatusResponse): void;
+export interface VerifyNearIntentOnChainInput {
+    readonly intentHash: string;
+    readonly expected: {
+        readonly destinationAddress: string;
+        readonly expectedOutputAmount: string;
+    };
+    readonly nearRpcUrl: string;
+    readonly fetchFn: typeof globalThis.fetch;
+    readonly timeoutMs?: number;
+}
+/**
+ * **Direct-blockchain near-intents only — NOT for 1Click swaps.**
+ *
+ * Queries the NEAR contract `intents.near` via JSON-RPC `get_intent` and
+ * cross-checks that an intent hash binds the expected destination + amount.
+ * This is the verification path for swaps that go through the solver-relay
+ * directly. 1Click swaps do not surface usable on-chain intent hashes
+ * suitable for this query — for 1Click, use `fetchNearIntentStatus` +
+ * `requireIntentBinds` against the `/v0/status` URL instead.
+ *
+ * Kept available for a future direct-blockchain near_intents provider
+ * (`packages/miradex-client/src/...` / `daemons/near/`).
+ *
+ * @throws {VerificationError} `E_NEAR_INTENT_FAILED` on RPC error.
+ * @throws {VerificationError} `E_NEAR_INTENT_CHAIN_DEST` on destination mismatch.
+ * @throws {VerificationError} `E_NEAR_INTENT_CHAIN_AMOUNT` on amount mismatch.
+ */
+export declare function verifyNearIntentOnChain(input: VerifyNearIntentOnChainInput): Promise<void>;
+//# sourceMappingURL=near-intents.d.ts.map

package/dist/verification/near-intents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"near-intents.d.ts","sourceRoot":"","sources":["../../src/verification/near-intents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAqB,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAGxG,OAAO,EAIL,KAAK,wBAAwB,EAC9B,MAAM,6BAA6B,CAAC;AAkBrC;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,CAAC,EAAE,uBAAuB,EAC1B,OAAO,EAAE,OAAO,UAAU,CAAC,KAAK,EAChC,cAAc,CAAC,EAAE,WAAW,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CA2C7B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,wBAAwB,CAAC,CAoDnC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,wBAAwB,EAChC,QAAQ,EAAE,uBAAuB,GAChC,IAAI,CAyBN;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,wBAAwB,GAC/B,IAAI,CAWN;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAA;KAAE,CAAC;IAClG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,IAAI,CAAC,CA4Cf"}

package/dist/verification/near-intents.js

@@ -0,0 +1,213 @@
+import { check, errMsg, failOf, resultOf } from './shared.js';
+import { VerificationError } from '../types/index.js';
+import { NearIntentRawStatusSchema, NearIntentOnChainSchema, NearRpcResponseSchema, } from '../wire/near-intents.zod.js';
+import { VERIFY_FETCH_TIMEOUT_MS } from './constants.js';
+// Mirrors the canonical 1Click status enum (7 values). INCOMPLETE_DEPOSIT
+// means "deposit observed but below bridge minimum"; from a verification
+// standpoint the intent is registered and the address is real, so it counts
+// as active. Source: 1Click OpenAPI v0.1.10 + live captures.
+const ACTIVE_STATUSES = [
+    'PENDING_DEPOSIT',
+    'KNOWN_DEPOSIT_TX',
+    'INCOMPLETE_DEPOSIT',
+    'PROCESSING',
+    'SUCCESS',
+    'REFUNDED',
+];
+const INTENT_DEADLINE_MARGIN_MS = 90 * 60 * 1000;
+/**
+ * Verify a NEAR-Intents deposit address against the 1Click status endpoint.
+ * Uses an explicit status enum switch (no `!== 'NOT_FOUND'` substring).
+ */
+export async function verifyNearIntents(v, fetchFn, externalSignal) {
+    const checks = [];
+    // Server schema permits a null status_url (e.g. when the engine declines to
+    // emit a public-clickable URL). Without one we cannot run the live check —
+    // surface that explicitly rather than calling fetch() on null.
+    if (!v.status_url) {
+        return failOf('near_intents', [
+            check('NEAR reachable', false, 'No public status URL available'),
+        ]);
+    }
+    try {
+        const res = await fetchFn(v.status_url, {
+            signal: externalSignal !== undefined
+                ? AbortSignal.any([AbortSignal.timeout(VERIFY_FETCH_TIMEOUT_MS), externalSignal])
+                : AbortSignal.timeout(VERIFY_FETCH_TIMEOUT_MS),
+        });
+        if (!res.ok) {
+            return failOf('near_intents', [check('NEAR reachable', false, `HTTP ${res.status}`)]);
+        }
+        const rawNear = await res.json();
+        if (typeof rawNear !== 'object' || rawNear === null) {
+            return failOf('near_intents', [check('NEAR response', false, 'Expected object')]);
+        }
+        const data = rawNear;
+        checks.push(check('NEAR reachable', true, 'Status endpoint responded'));
+        const status = data.status;
+        const registered = typeof status === 'string' && ACTIVE_STATUSES.includes(status);
+        checks.push(check('Intent registered', registered, registered ? `Status: ${status}` : `Status: ${status ?? 'unknown'}`));
+    }
+    catch (err) {
+        checks.push(check('NEAR verification', false, errMsg(err)));
+    }
+    return resultOf('near_intents', checks);
+}
+/**
+ * Fetch 1Click `/v0/status` and return a flattened intent view. Performs an
+ * exhaustive enum switch over the 7 real status values.
+ *
+ * Mapping of HTTP / status to error codes:
+ *   - HTTP 404 → `E_NEAR_INTENT_NOT_REGISTERED` (deposit address unknown to 1Click)
+ *   - HTTP non-2xx (non-404) → `E_NEAR_INTENT_FAILED` (network / server error)
+ *   - status === 'FAILED' → `E_NEAR_INTENT_FAILED`
+ *   - status in {PENDING_DEPOSIT, KNOWN_DEPOSIT_TX, INCOMPLETE_DEPOSIT,
+ *     PROCESSING, SUCCESS, REFUNDED} → returns the flattened response.
+ *
+ * 1Click does not surface an "EXPIRED" status. Past-deadline detection is
+ * performed via `requireIntentDeadlineMargin` against `quote.deadline`.
+ *
+ * @throws {VerificationError} `E_NEAR_INTENT_NOT_REGISTERED` on HTTP 404.
+ * @throws {VerificationError} `E_NEAR_INTENT_FAILED` on HTTP error or
+ *   `status === 'FAILED'`.
+ */
+export async function fetchNearIntentStatus(input) {
+    const timeoutMs = input.timeoutMs ?? VERIFY_FETCH_TIMEOUT_MS;
+    const res = await input.fetchFn(input.statusUrl, { signal: AbortSignal.timeout(timeoutMs) });
+    if (res.status === 404) {
+        throw new VerificationError('E_NEAR_INTENT_NOT_REGISTERED', 'deposit address unknown to 1Click (HTTP 404)');
+    }
+    if (!res.ok) {
+        throw new VerificationError('E_NEAR_INTENT_FAILED', `HTTP ${String(res.status)}`);
+    }
+    const raw = await res.json();
+    const parsed = NearIntentRawStatusSchema.parse(raw);
+    if (parsed.status === 'FAILED') {
+        throw new VerificationError('E_NEAR_INTENT_FAILED', `intent failed on 1Click${parsed.swapDetails.refundReason ? ` (${parsed.swapDetails.refundReason})` : ''}`);
+    }
+    // Flatten the nested response. The user-visible binding fields live under
+    // `quoteResponse.quoteRequest` (recipient, refundTo, originAsset, …) and
+    // `quoteResponse.quote` (depositAddress, depositMemo, deadline, amounts).
+    const qr = parsed.quoteResponse;
+    const request = qr?.quoteRequest ?? {};
+    const quote = qr?.quote;
+    const recipient = typeof request.recipient === 'string' ? request.recipient : null;
+    const refundTo = typeof request.refundTo === 'string' ? request.refundTo : null;
+    const destinationAsset = typeof request.destinationAsset === 'string' ? request.destinationAsset : null;
+    return {
+        status: parsed.status,
+        correlationId: parsed.correlationId,
+        updatedAt: parsed.updatedAt,
+        depositAddress: quote?.depositAddress ?? null,
+        depositMemo: quote?.depositMemo ?? null,
+        destinationAddress: recipient,
+        destinationAssetId: destinationAsset,
+        refundAddress: refundTo,
+        deadline: quote?.deadline ?? null,
+        expectedOutputAmount: quote?.amountOut ?? null,
+        actualOutputAmount: parsed.swapDetails.amountOut ?? null,
+        intentHash: parsed.swapDetails.intentHashes[0] ?? null,
+        originTxHashes: parsed.swapDetails.originChainTxHashes.map((t) => t.hash),
+        destinationTxHashes: parsed.swapDetails.destinationChainTxHashes.map((t) => t.hash),
+        refundReason: parsed.swapDetails.refundReason ?? null,
+    };
+}
+/**
+ * Assert the returned intent binds the caller's expected destination address,
+ * destination asset, and (optional) refund address.
+ *
+ * @throws {VerificationError} `E_NEAR_INTENT_MISBINDING` on any mismatch.
+ */
+export function requireIntentBinds(intent, expected) {
+    if (intent.destinationAddress !== expected.destinationAddress) {
+        throw new VerificationError('E_NEAR_INTENT_MISBINDING', `intent destination ${String(intent.destinationAddress)} != expected ${expected.destinationAddress}`);
+    }
+    if (expected.destinationAssetId !== undefined &&
+        intent.destinationAssetId !== expected.destinationAssetId) {
+        throw new VerificationError('E_NEAR_INTENT_MISBINDING', `intent destinationAsset ${String(intent.destinationAssetId)} != expected ${expected.destinationAssetId}`);
+    }
+    if (expected.refundAddress !== undefined &&
+        intent.refundAddress !== expected.refundAddress) {
+        throw new VerificationError('E_NEAR_INTENT_MISBINDING', `intent refund ${String(intent.refundAddress)} != expected ${expected.refundAddress}`);
+    }
+}
+/**
+ * Enforce the quote deadline has at least the safety margin (90 min) before
+ * it expires relative to `Date.now()`. The deadline lives at
+ * `quoteResponse.quote.deadline` in the raw 1Click response and is surfaced
+ * as `intent.deadline` after flattening.
+ *
+ * Returns silently if `intent.deadline` is null (1Click's dry-run quotes
+ * omit the deadline; we cannot enforce expiry against an absent value).
+ *
+ * @throws {VerificationError} `E_NEAR_INTENT_EXPIRING` when the deadline is
+ *   sooner than the safety margin.
+ */
+export function requireIntentDeadlineMargin(intent) {
+    if (intent.deadline === null)
+        return;
+    const deadlineMs = new Date(intent.deadline).getTime();
+    if (Number.isNaN(deadlineMs))
+        return;
+    const remaining = deadlineMs - Date.now();
+    if (remaining < INTENT_DEADLINE_MARGIN_MS) {
+        throw new VerificationError('E_NEAR_INTENT_EXPIRING', `intent deadline in ${(remaining / 60_000).toFixed(1)} minutes, below safety margin`);
+    }
+}
+/**
+ * **Direct-blockchain near-intents only — NOT for 1Click swaps.**
+ *
+ * Queries the NEAR contract `intents.near` via JSON-RPC `get_intent` and
+ * cross-checks that an intent hash binds the expected destination + amount.
+ * This is the verification path for swaps that go through the solver-relay
+ * directly. 1Click swaps do not surface usable on-chain intent hashes
+ * suitable for this query — for 1Click, use `fetchNearIntentStatus` +
+ * `requireIntentBinds` against the `/v0/status` URL instead.
+ *
+ * Kept available for a future direct-blockchain near_intents provider
+ * (`packages/miradex-client/src/...` / `daemons/near/`).
+ *
+ * @throws {VerificationError} `E_NEAR_INTENT_FAILED` on RPC error.
+ * @throws {VerificationError} `E_NEAR_INTENT_CHAIN_DEST` on destination mismatch.
+ * @throws {VerificationError} `E_NEAR_INTENT_CHAIN_AMOUNT` on amount mismatch.
+ */
+export async function verifyNearIntentOnChain(input) {
+    const timeoutMs = input.timeoutMs ?? VERIFY_FETCH_TIMEOUT_MS;
+    const body = {
+        jsonrpc: '2.0',
+        id: 1,
+        method: 'query',
+        params: {
+            request_type: 'call_function',
+            finality: 'final',
+            account_id: 'intents.near',
+            method_name: 'get_intent',
+            args_base64: Buffer.from(JSON.stringify({ hash: input.intentHash })).toString('base64'),
+        },
+    };
+    const res = await input.fetchFn(input.nearRpcUrl, {
+        method: 'POST',
+        body: JSON.stringify(body),
+        headers: { 'content-type': 'application/json' },
+        signal: AbortSignal.timeout(timeoutMs),
+    });
+    if (!res.ok) {
+        throw new VerificationError('E_NEAR_INTENT_FAILED', `NEAR RPC HTTP ${String(res.status)}`);
+    }
+    const raw = await res.json();
+    const envelope = NearRpcResponseSchema.parse(raw);
+    const result = envelope.result;
+    if (!result || !Array.isArray(result.result)) {
+        throw new VerificationError('E_NEAR_INTENT_CHAIN_AMOUNT', 'NEAR RPC returned no function result');
+    }
+    const bytes = new Uint8Array(result.result);
+    const decoded = new TextDecoder().decode(bytes);
+    const parsed = NearIntentOnChainSchema.parse(JSON.parse(decoded));
+    if (parsed.destinationAddress !== input.expected.destinationAddress) {
+        throw new VerificationError('E_NEAR_INTENT_CHAIN_DEST', `on-chain destination ${parsed.destinationAddress} != expected`);
+    }
+    if (BigInt(parsed.expectedOutputAmount) !== BigInt(input.expected.expectedOutputAmount)) {
+        throw new VerificationError('E_NEAR_INTENT_CHAIN_AMOUNT', `on-chain amount ${parsed.expectedOutputAmount} != expected ${input.expected.expectedOutputAmount}`);
+    }
+}
+//# sourceMappingURL=near-intents.js.map

package/dist/verification/near-intents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"near-intents.js","sourceRoot":"","sources":["../../src/verification/near-intents.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,GAEtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,0EAA0E;AAC1E,yEAAyE;AACzE,4EAA4E;AAC5E,6DAA6D;AAC7D,MAAM,eAAe,GAAsB;IACzC,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,YAAY;IACZ,SAAS;IACT,UAAU;CACX,CAAC;AAEF,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,CAA0B,EAC1B,OAAgC,EAChC,cAA4B;IAE5B,MAAM,MAAM,GAAwB,EAAE,CAAC;IAEvC,4EAA4E;IAC5E,2EAA2E;IAC3E,+DAA+D;IAC/D,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAClB,OAAO,MAAM,CAAC,cAAc,EAAE;YAC5B,KAAK,CAAC,gBAAgB,EAAE,KAAK,EAAE,gCAAgC,CAAC;SACjE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE;YACtC,MAAM,EAAE,cAAc,KAAK,SAAS;gBAClC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,cAAc,CAAC,CAAC;gBACjF,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,uBAAuB,CAAC;SACjD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,MAAM,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,OAAO,GAAY,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO,MAAM,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,IAAI,GAAG,OAA8B,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE,2BAA2B,CAAC,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,UAAU,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClF,MAAM,CAAC,IAAI,CACT,KAAK,CACH,mBAAmB,EACnB,UAAU,EACV,UAAU,CAAC,CAAC,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC,WAAW,MAAM,IAAI,SAAS,EAAE,CACpE,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAQD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAiC;IAEjC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAC7D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7F,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAiB,CACzB,8BAA8B,EAC9B,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,QAAQ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAiB,CACzB,sBAAsB,EACtB,0BACE,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,WAAW,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,EAC9E,EAAE,CACH,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,EAAE,GAAG,MAAM,CAAC,aAAa,CAAC;IAChC,MAAM,OAAO,GAAG,EAAE,EAAE,YAAY,IAAI,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,EAAE,EAAE,KAAK,CAAC;IAExB,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,MAAM,gBAAgB,GACpB,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;IAEjF,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,KAAK,EAAE,cAAc,IAAI,IAAI;QAC7C,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,IAAI;QACvC,kBAAkB,EAAE,SAAS;QAC7B,kBAAkB,EAAE,gBAAgB;QACpC,aAAa,EAAE,QAAQ;QACvB,QAAQ,EAAE,KAAK,EAAE,QAAQ,IAAI,IAAI;QACjC,oBAAoB,EAAE,KAAK,EAAE,SAAS,IAAI,IAAI;QAC9C,kBAAkB,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,IAAI,IAAI;QACxD,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI;QACtD,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,mBAAmB,EAAE,MAAM,CAAC,WAAW,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACnF,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY,IAAI,IAAI;KACtD,CAAC;AACJ,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAgC,EAChC,QAAiC;IAEjC,IAAI,MAAM,CAAC,kBAAkB,KAAK,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAC9D,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,sBAAsB,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,QAAQ,CAAC,kBAAkB,EAAE,CACrG,CAAC;IACJ,CAAC;IACD,IACE,QAAQ,CAAC,kBAAkB,KAAK,SAAS;QACzC,MAAM,CAAC,kBAAkB,KAAK,QAAQ,CAAC,kBAAkB,EACzD,CAAC;QACD,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,2BAA2B,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,QAAQ,CAAC,kBAAkB,EAAE,CAC1G,CAAC;IACJ,CAAC;IACD,IACE,QAAQ,CAAC,aAAa,KAAK,SAAS;QACpC,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,EAC/C,CAAC;QACD,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,iBAAiB,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,QAAQ,CAAC,aAAa,EAAE,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAgC;IAEhC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO;IACrC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;IACvD,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO;IACrC,MAAM,SAAS,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC1C,IAAI,SAAS,GAAG,yBAAyB,EAAE,CAAC;QAC1C,MAAM,IAAI,iBAAiB,CACzB,wBAAwB,EACxB,sBAAsB,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CACrF,CAAC;IACJ,CAAC;AACH,CAAC;AAUD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAmC;IAEnC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAC7D,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,CAAC;QACL,MAAM,EAAE,OAAO;QACf,MAAM,EAAE;YACN,YAAY,EAAE,eAAe;YAC7B,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,cAAc;YAC1B,WAAW,EAAE,YAAY;YACzB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACxF;KACF,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE;QAChD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;KACvC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,iBAAiB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAsC,CAAC;IAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,iBAAiB,CAAC,4BAA4B,EAAE,sCAAsC,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,kBAAkB,KAAK,KAAK,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QACpE,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,wBAAwB,MAAM,CAAC,kBAAkB,cAAc,CAChE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,EAC5B,mBAAmB,MAAM,CAAC,oBAAoB,gBAAgB,KAAK,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CACpG,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/verification/rate-oracle.d.ts

@@ -0,0 +1,32 @@
+/**
+ * External rate oracles for cross-checking engine quotes.
+ *
+ * The client queries two independent oracles (e.g., CoinGecko + CryptoCompare)
+ * and demands they agree within a band before allowing a swap to proceed.
+ * Any wider disagreement surfaces as `E_ORACLE_SPREAD`; too few responses as
+ * `E_ORACLE_QUORUM`.
+ *
+ * @security Closes AV-D.4 / AV-H.12 — protects against sidecar + proxy
+ * collusion on rate quotes.
+ */
+import type { Logger } from '../interfaces/logger.js';
+export interface RateOracleConfig {
+    readonly oracleUrls: ReadonlyArray<string>;
+    readonly fetchFn: typeof globalThis.fetch;
+    readonly timeoutMs?: number;
+    readonly quorum: number;
+    readonly logger?: Logger;
+}
+/**
+ * Query every configured oracle in parallel, extract a numeric rate from each
+ * response, and return the median if at least `quorum` oracles agree within
+ * a 2 % band.
+ *
+ * @param input Oracle URLs, fetch function, timeout, quorum, logger.
+ * @param extractRate Per-oracle adapter that pulls the rate out of the body.
+ * @returns The median rate across all agreeing oracles.
+ * @throws {VerificationError} `E_ORACLE_QUORUM` when fewer than `quorum`
+ *   oracles respond; `E_ORACLE_SPREAD` when the rates span more than 2 %.
+ */
+export declare function fetchConsensusRate(input: RateOracleConfig, extractRate: (url: string, body: unknown) => number): Promise<number>;
+//# sourceMappingURL=rate-oracle.d.ts.map

package/dist/verification/rate-oracle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-oracle.d.ts","sourceRoot":"","sources":["../../src/verification/rate-oracle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAKtD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,gBAAgB,EACvB,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,MAAM,GAClD,OAAO,CAAC,MAAM,CAAC,CAoCjB"}

package/dist/verification/rate-oracle.js

@@ -0,0 +1,43 @@
+import { noopLogger } from '../interfaces/logger.js';
+import { VerificationError } from '../types/index.js';
+import { VERIFY_FETCH_TIMEOUT_MS } from './constants.js';
+const DEFAULT_SPREAD_CAP = 0.02; // 2 %
+/**
+ * Query every configured oracle in parallel, extract a numeric rate from each
+ * response, and return the median if at least `quorum` oracles agree within
+ * a 2 % band.
+ *
+ * @param input Oracle URLs, fetch function, timeout, quorum, logger.
+ * @param extractRate Per-oracle adapter that pulls the rate out of the body.
+ * @returns The median rate across all agreeing oracles.
+ * @throws {VerificationError} `E_ORACLE_QUORUM` when fewer than `quorum`
+ *   oracles respond; `E_ORACLE_SPREAD` when the rates span more than 2 %.
+ */
+export async function fetchConsensusRate(input, extractRate) {
+    const timeoutMs = input.timeoutMs ?? VERIFY_FETCH_TIMEOUT_MS;
+    const log = input.logger ?? noopLogger;
+    const attempts = input.oracleUrls.map(async (url) => {
+        const res = await input.fetchFn(url, { signal: AbortSignal.timeout(timeoutMs) });
+        if (!res.ok)
+            throw new Error(`HTTP ${String(res.status)}`);
+        const body = await res.json();
+        return extractRate(url, body);
+    });
+    const settled = await Promise.allSettled(attempts);
+    const rates = settled
+        .filter((s) => s.status === 'fulfilled')
+        .map((s) => s.value)
+        .filter((r) => Number.isFinite(r) && r > 0);
+    if (rates.length < input.quorum) {
+        throw new VerificationError('E_ORACLE_QUORUM', `only ${String(rates.length)} of ${String(input.oracleUrls.length)} oracles responded`);
+    }
+    const sorted = [...rates].sort((a, b) => a - b);
+    const median = sorted[Math.floor(sorted.length / 2)] ?? 0;
+    const spread = (Math.max(...rates) - Math.min(...rates)) / median;
+    if (spread > DEFAULT_SPREAD_CAP) {
+        throw new VerificationError('E_ORACLE_SPREAD', `oracles disagree by ${(spread * 100).toFixed(2)}% (cap ${(DEFAULT_SPREAD_CAP * 100).toFixed(2)}%)`);
+    }
+    log.debug({ median, spread, samples: rates.length }, 'Oracle consensus reached');
+    return median;
+}
+//# sourceMappingURL=rate-oracle.js.map

package/dist/verification/rate-oracle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-oracle.js","sourceRoot":"","sources":["../../src/verification/rate-oracle.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAUzD,MAAM,kBAAkB,GAAG,IAAI,CAAC,CAAC,MAAM;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAuB,EACvB,WAAmD;IAEnD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC;IAEvC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAClD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO;SAClB,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC;SAC5E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE9C,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,iBAAiB,CACzB,iBAAiB,EACjB,QAAQ,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,oBAAoB,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC;IAClE,IAAI,MAAM,GAAG,kBAAkB,EAAE,CAAC;QAChC,MAAM,IAAI,iBAAiB,CACzB,iBAAiB,EACjB,uBAAuB,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACpG,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;IACjF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/verification/shared.d.ts

@@ -0,0 +1,20 @@
+import type { VerificationCheck, VerificationResult } from '../types/index.js';
+export interface VerifyParams {
+    readonly destAddress: string;
+    readonly refundAddress: string;
+    readonly toToken: string;
+    readonly amount: string;
+    readonly fromChain?: string;
+    readonly toChain?: string;
+    readonly fromToken?: string;
+}
+export interface ProtocolContext {
+    readonly psbt?: string;
+    readonly lock_address?: string;
+    readonly timelock_blocks?: number;
+}
+export declare function check(name: string, passed: boolean, detail: string): VerificationCheck;
+export declare function resultOf(provider: string, checks: readonly VerificationCheck[]): VerificationResult;
+export declare function failOf(provider: string, checks: readonly VerificationCheck[]): VerificationResult;
+export declare function errMsg(err: unknown): string;
+//# sourceMappingURL=shared.d.ts.map

package/dist/verification/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/verification/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE/E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAEtF;AAED,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,SAAS,iBAAiB,EAAE,GACnC,kBAAkB,CAOpB;AAED,wBAAgB,MAAM,CACpB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,SAAS,iBAAiB,EAAE,GACnC,kBAAkB,CAEpB;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAM3C"}