@morpho-org/evm-simulation 2.0.2 → 3.0.0

package/lib/esm/simulate/simulate.d.ts

@@ -3,20 +3,19 @@ import type { SimulateParams, SimulationConfig, SimulationResult } from "../type
  * Simulate a bundle of EVM transactions.
  *
  * Validates input → resolves authorizations into prepended approve txs → runs the bundle
- * through Tenderly REST (primary) or `eth_simulateV1` (fallback) with a shared timeout
+ * through Tenderly RPC (primary) or `eth_simulateV1` (fallback) with a shared timeout
  * budget → parses ERC20/WETH transfers from per-tx logs → asserts no funds are retained
  * by `bundler3` → returns the full result set. The caller reads whichever fields they need:
  *
- * - `transfers` + `tenderlyUrl` → user-facing preview.
- * - `simulationTxs` + `transfers` → server-side verification before broadcast, then pass
- *   both to `screenAddresses` for compliance.
+ * - `transfers` → user-facing preview / server-side verification.
+ * - `simulationTxs` + `transfers` → server-side verification before broadcast.
  * - `calls[i]` → per-tx raw backend output (`logs`, `status`, `returnData`, `gasUsed`,
  *   and Tenderly-only `assetChanges`). Aligned 1:1 with `simulationTxs[i]`.
  * - `transfers[k].txIdx` → index into `simulationTxs` of the tx that emitted the
  *   underlying log; consumers map back via `simulationTxs[transfer.txIdx]`.
  *
- * @param config - Backend configuration: Tenderly credentials, per-chain RPC URLs, optional
- *   logger, and the overall timeout budget.
+ * @param config - Backend configuration: per-chain Tenderly RPC and/or `eth_simulateV1`
+ *   URL, optional logger, and the overall timeout budget.
  * @param params - Per-call simulation input.
  * @param params.chainId - Chain id the bundle targets.
  * @param params.transactions - The bundle's transactions, in execution order. All must share the
@@ -24,10 +23,6 @@ import type { SimulateParams, SimulationConfig, SimulationResult } from "../type
  * @param params.authorizations - Optional token authorizations resolved into prepended approve
  *   transactions before the main bundle runs.
  * @param params.blockNumber - Optional pinned block number or `BlockTag`. Defaults to `latest`.
- * @param options - Per-call simulation options.
- * @param options.shareable - When `true`, persists the simulation in Tenderly and returns a
- *   shareable `tenderlyUrl`. Honored only on the Tenderly backend, not on the `eth_simulateV1`
- *   fallback. Defaults to `false`.
  * @throws {SimulationValidationError} for invalid input (mixed senders, bad addresses,
  *   empty transactions, malformed authorizations).
  * @throws {UnsupportedChainError} when the chain is not configured for any backend.
@@ -39,14 +34,21 @@ import type { SimulateParams, SimulationConfig, SimulationResult } from "../type
  *   not match the resolved `simulationTxs` — refusing to map transfers with mismatched
  *   per-tx output.
  * @returns A {@link SimulationResult} carrying the resolved `simulationTxs`, per-tx
- *   `calls` (aligned 1:1 with `simulationTxs`), parsed `transfers` (each stamped with
- *   `txIdx`), and the optional `tenderlyUrl`.
+ *   `calls` (aligned 1:1 with `simulationTxs`), and parsed `transfers` (each stamped
+ *   with `txIdx`).
  * @example
  * ```ts
  * import { simulate } from "@morpho-org/evm-simulation";
  *
  * const result = await simulate(
- *   { chains: new Map([[1, { simulateV1Url: rpcUrl }]]) },
+ *   {
+ *     chains: new Map([
+ *       [1, {
+ *         tenderlyRpc: { rpcUrl: process.env.TENDERLY_RPC_URL! },
+ *         simulateV1Url: process.env.MAINNET_RPC_URL,
+ *       }],
+ *     ]),
+ *   },
  *   {
  *     chainId: 1,
  *     transactions: [{ from: user, to: vaultAddress, data: encodedCalldata, value: 0n }],
@@ -55,11 +57,4 @@ import type { SimulateParams, SimulationConfig, SimulationResult } from "../type
  * // result satisfies SimulationResult
  * ```
  */
-export declare function simulate(config: SimulationConfig, params: SimulateParams, options?: {
-    /**
-     * When true, persist the simulation in Tenderly and return a shareable
-     * `tenderlyUrl` in the result. Only honored when the Tenderly backend runs
-     * (not the `eth_simulateV1` fallback). Defaults to `false`.
-     */
-    shareable?: boolean;
-}): Promise<SimulationResult>;
+export declare function simulate(config: SimulationConfig, params: SimulateParams): Promise<SimulationResult>;

package/lib/esm/simulate/simulate.js

@@ -5,20 +5,19 @@ import { assertNoBundlerRetention, buildSimulationTxs, executeSimulation, valida
  * Simulate a bundle of EVM transactions.
  *
  * Validates input → resolves authorizations into prepended approve txs → runs the bundle
- * through Tenderly REST (primary) or `eth_simulateV1` (fallback) with a shared timeout
+ * through Tenderly RPC (primary) or `eth_simulateV1` (fallback) with a shared timeout
  * budget → parses ERC20/WETH transfers from per-tx logs → asserts no funds are retained
  * by `bundler3` → returns the full result set. The caller reads whichever fields they need:
  *
- * - `transfers` + `tenderlyUrl` → user-facing preview.
- * - `simulationTxs` + `transfers` → server-side verification before broadcast, then pass
- *   both to `screenAddresses` for compliance.
+ * - `transfers` → user-facing preview / server-side verification.
+ * - `simulationTxs` + `transfers` → server-side verification before broadcast.
  * - `calls[i]` → per-tx raw backend output (`logs`, `status`, `returnData`, `gasUsed`,
  *   and Tenderly-only `assetChanges`). Aligned 1:1 with `simulationTxs[i]`.
  * - `transfers[k].txIdx` → index into `simulationTxs` of the tx that emitted the
  *   underlying log; consumers map back via `simulationTxs[transfer.txIdx]`.
  *
- * @param config - Backend configuration: Tenderly credentials, per-chain RPC URLs, optional
- *   logger, and the overall timeout budget.
+ * @param config - Backend configuration: per-chain Tenderly RPC and/or `eth_simulateV1`
+ *   URL, optional logger, and the overall timeout budget.
  * @param params - Per-call simulation input.
  * @param params.chainId - Chain id the bundle targets.
  * @param params.transactions - The bundle's transactions, in execution order. All must share the
@@ -26,10 +25,6 @@ import { assertNoBundlerRetention, buildSimulationTxs, executeSimulation, valida
  * @param params.authorizations - Optional token authorizations resolved into prepended approve
  *   transactions before the main bundle runs.
  * @param params.blockNumber - Optional pinned block number or `BlockTag`. Defaults to `latest`.
- * @param options - Per-call simulation options.
- * @param options.shareable - When `true`, persists the simulation in Tenderly and returns a
- *   shareable `tenderlyUrl`. Honored only on the Tenderly backend, not on the `eth_simulateV1`
- *   fallback. Defaults to `false`.
  * @throws {SimulationValidationError} for invalid input (mixed senders, bad addresses,
  *   empty transactions, malformed authorizations).
  * @throws {UnsupportedChainError} when the chain is not configured for any backend.
@@ -41,14 +36,21 @@ import { assertNoBundlerRetention, buildSimulationTxs, executeSimulation, valida
  *   not match the resolved `simulationTxs` — refusing to map transfers with mismatched
  *   per-tx output.
  * @returns A {@link SimulationResult} carrying the resolved `simulationTxs`, per-tx
- *   `calls` (aligned 1:1 with `simulationTxs`), parsed `transfers` (each stamped with
- *   `txIdx`), and the optional `tenderlyUrl`.
+ *   `calls` (aligned 1:1 with `simulationTxs`), and parsed `transfers` (each stamped
+ *   with `txIdx`).
  * @example
  * ```ts
  * import { simulate } from "@morpho-org/evm-simulation";
  *
  * const result = await simulate(
- *   { chains: new Map([[1, { simulateV1Url: rpcUrl }]]) },
+ *   {
+ *     chains: new Map([
+ *       [1, {
+ *         tenderlyRpc: { rpcUrl: process.env.TENDERLY_RPC_URL! },
+ *         simulateV1Url: process.env.MAINNET_RPC_URL,
+ *       }],
+ *     ]),
+ *   },
  *   {
  *     chainId: 1,
  *     transactions: [{ from: user, to: vaultAddress, data: encodedCalldata, value: 0n }],
@@ -57,9 +59,7 @@ import { assertNoBundlerRetention, buildSimulationTxs, executeSimulation, valida
  * // result satisfies SimulationResult
  * ```
  */
-// biome-ignore lint/complexity/useMaxParams: TODO refactor to ≤2 params
-export async function simulate(config, params, options = {}) {
-    const { shareable = false } = options;
+export async function simulate(config, params) {
     validateInput(params);
     const simulationTxs = buildSimulationTxs(params);
     const result = await executeSimulation({
@@ -67,7 +67,6 @@ export async function simulate(config, params, options = {}) {
         chainId: params.chainId,
         transactions: simulationTxs,
         blockNumber: params.blockNumber,
-        shareable,
     });
     if (result.calls.length !== simulationTxs.length) {
         throw new ExternalServiceError(`Backend returned ${result.calls.length} call result(s) for ${simulationTxs.length} transaction(s) — refusing to map transfers with mismatched lengths`);
@@ -82,6 +81,5 @@ export async function simulate(config, params, options = {}) {
         simulationTxs,
         calls: result.calls,
         transfers,
-        tenderlyUrl: result.tenderlyUrl,
     };
 }

package/lib/esm/types.d.ts

@@ -1,36 +1,34 @@
 import type { Address, BlockTag, Hex } from "viem";
 /**
- * Credentials and routing for the Tenderly REST simulation backend.
- * Omit from `SimulationConfig.tenderlyRest` to disable the Tenderly path entirely.
+ * Credentials for the Tenderly Node Web3 Gateway. The `rpcUrl` is the
+ * chain-specific gateway URL with the access key embedded in the path,
+ * e.g. `https://mainnet.gateway.tenderly.co/{ACCESS_KEY}`.
  */
-export interface TenderlyRestConfig {
-    /** e.g. "https://api.tenderly.co" */
-    apiBaseUrl: string;
-    accessToken: string;
-    accountSlug: string;
-    projectSlug: string;
-    /** Chain IDs that Tenderly supports for simulation */
-    supportedChainIds: Set<number>;
+export interface TenderlyRpcConfig {
+    rpcUrl: string;
 }
 /**
- * Per-chain capabilities. Stored as a `Map` value in
- * `SimulationConfig.chains`, keyed by chain ID.
+ * Per-chain backend capabilities. Exactly one configuration shape per chain;
+ * the discriminated union enforces that **at least one** of `tenderlyRpc`
+ * (primary) or `simulateV1Url` (fallback) is supplied.
  */
-export interface ChainSimulationConfig {
-    /** JSON-RPC URL supporting `eth_simulateV1`. undefined = not available for this chain. */
+export type ChainSimulationConfig = {
+    /** Tenderly RPC config — `tenderly_simulateTransaction` / `tenderly_simulateBundle`. */
+    tenderlyRpc: TenderlyRpcConfig;
+    /** JSON-RPC URL supporting `eth_simulateV1`. Optional when Tenderly is set. */
     simulateV1Url?: string;
-}
+} | {
+    tenderlyRpc?: TenderlyRpcConfig;
+    simulateV1Url: string;
+};
 /**
  * Top-level configuration for `simulate`.
  *
- * At least one backend must be reachable for a given chainId — either Tenderly
- * (via `tenderlyRest` with that chainId in `TenderlyRestConfig.supportedChainIds`)
- * or `ChainSimulationConfig.simulateV1Url` in the `chains` map. Otherwise the
- * orchestrator throws `UnsupportedChainError`.
+ * Every chain entry must declare at least one backend (Tenderly RPC primary,
+ * `eth_simulateV1` fallback, or both). Calling `simulate` for a `chainId`
+ * missing from `chains` throws `UnsupportedChainError`.
  */
 export interface SimulationConfig {
-    /** Tenderly REST API config. undefined = Tenderly not available. */
-    tenderlyRest?: TenderlyRestConfig;
     /** Per-chain simulation capabilities. */
     chains: Map<number, ChainSimulationConfig>;
     logger?: SimulationLogger;
@@ -92,8 +90,6 @@ export interface Transfer {
  *   status, returnData/gasUsed, and (Tenderly only) assetChanges per tx.
  * - `transfers[k].txIdx` indexes into `simulationTxs` to attribute each
  *   transfer to its emitting transaction.
- * - `tenderlyUrl` is set only when `shareable: true` AND the Tenderly backend
- *   ran successfully (not the `eth_simulateV1` fallback).
  */
 export interface SimulationResult {
     /** The full resolved transaction list (including prepended authorization txs). */
@@ -106,8 +102,6 @@ export interface SimulationResult {
     readonly calls: readonly SimulationCall[];
     /** Parsed ERC-20 / WETH9 transfers from the simulation. */
     readonly transfers: readonly Transfer[];
-    /** Shareable Tenderly URL. Present only when `shareable: true` and Tenderly ran (not fallback). */
-    readonly tenderlyUrl?: string;
 }
 /** Minimal structured logger the package calls for warnings and info. */
 export interface SimulationLogger {
@@ -132,11 +126,10 @@ export interface SimulateParams {
  */
 export interface RawSimulationResult {
     calls: RawCall[];
-    tenderlyUrl?: string;
 }
 /**
  * Normalized EVM log emitted by a single simulated call. The shape is the
- * common subset both backends (`eth_simulateV1` via viem and Tenderly REST)
+ * common subset both backends (`eth_simulateV1` via viem and Tenderly RPC)
  * produce after schema validation. Returned indirectly via
  * `SimulationCall.logs` and consumed by the SDK's transfer parser.
  */
@@ -156,7 +149,7 @@ export interface RawCall {
     status: boolean;
     returnData: Hex;
     gasUsed: bigint;
-    /** Tenderly-only `asset_changes` payload. Absent on `eth_simulateV1`. */
+    /** Tenderly-only `assetChanges` payload. Absent on `eth_simulateV1`. */
     assetChanges?: unknown;
 }
 /**
@@ -180,7 +173,7 @@ export interface SimulationCall {
     /** Gas used by this call (root frame). */
     readonly gasUsed: bigint;
     /**
-     * Tenderly-only `asset_changes` payload for this tx. Opaque `unknown` —
+     * Tenderly-only `assetChanges` payload for this tx. Opaque `unknown` —
      * do not destructure without validation. Absent on `eth_simulateV1`.
      */
     readonly assetChanges?: unknown;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@morpho-org/evm-simulation",
   "description": "EVM simulation engine for Morpho transactions.",
-  "version": "2.0.2",
+  "version": "3.0.0",
   "author": "Morpho Association <contact@morpho.org>",
   "contributors": [
     "Rubilmax <rmilon@gmail.com>"
@@ -25,8 +25,8 @@
   ],
   "dependencies": {
     "zod": "^4.4.3",
-    "@morpho-org/blue-sdk": "^6.0.1",
-    "@morpho-org/morpho-ts": "^2.5.3"
+    "@morpho-org/blue-sdk": "^6.1.0",
+    "@morpho-org/morpho-ts": "^2.6.0"
   },
   "peerDependencies": {
     "viem": "^2.0.0"

package/src/index.ts

@@ -2,7 +2,6 @@
 
 // Errors (for instanceof checks by consumers)
 export {
-  AddressScreeningError,
   BlacklistViolationError,
   ExternalServiceError,
   SimulationPackageError,
@@ -10,7 +9,6 @@ export {
   SimulationValidationError,
   UnsupportedChainError,
 } from "./errors.js";
-export { screenAddresses } from "./screen-addresses/index.js";
 export { simulate } from "./simulate/index.js";
 // Types
 export type {
@@ -23,6 +21,6 @@ export type {
   SimulationLogger,
   SimulationResult,
   SimulationTransaction,
-  TenderlyRestConfig,
+  TenderlyRpcConfig,
   Transfer,
 } from "./types.js";

package/lib/cjs/screen-addresses/index.d.ts

@@ -1 +0,0 @@
-export { screenAddresses } from "./screen-addresses.js";

package/lib/cjs/screen-addresses/index.js

@@ -1,5 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.screenAddresses = void 0;
-var screen_addresses_js_1 = require("./screen-addresses.js");
-Object.defineProperty(exports, "screenAddresses", { enumerable: true, get: function () { return screen_addresses_js_1.screenAddresses; } });

package/lib/cjs/screen-addresses/sanctioned-addresses.d.ts

@@ -1,11 +0,0 @@
-/**
- * Static list of sanctioned/compromised addresses.
- * Ported from offchain-services-server/src/functions/screen/blacklist.ts.
- * These addresses are checked before calling the Chainalysis API (fast, no network).
- *
- * **Invariant** (enforced at module load, see below): every entry is a
- * well-formed lowercased EVM address. `screenAddresses` does
- * `sanctionedAddresses.has(addr.toLowerCase())` — a mixed-case entry would
- * never match and would silently bypass the sanctioned check.
- */
-export declare const sanctionedAddresses: Set<string>;

package/lib/cjs/screen-addresses/sanctioned-addresses.js

@@ -1,77 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.sanctionedAddresses = void 0;
-/**
- * Static list of sanctioned/compromised addresses.
- * Ported from offchain-services-server/src/functions/screen/blacklist.ts.
- * These addresses are checked before calling the Chainalysis API (fast, no network).
- *
- * **Invariant** (enforced at module load, see below): every entry is a
- * well-formed lowercased EVM address. `screenAddresses` does
- * `sanctionedAddresses.has(addr.toLowerCase())` — a mixed-case entry would
- * never match and would silently bypass the sanctioned check.
- */
-exports.sanctionedAddresses = new Set([
-    // Bybit hack addresses
-    "0x47666Fab8bd0Ac7003bce3f5C3585383F09486E2",
-    "0xA4B2Fd68593B6F34E51cB9eDB66E71c1B4Ab449e",
-    "0x36ed3C0213565530C35115d93A80F9c04d94E4Cb",
-    "0x1542368a03ad1f03d96D51B414f4738961Cf4443",
-    "0xdD90071D52F20e85c89802e5Dc1eC0A7B6475f92",
-    "0x40e98FeEEbaD7Ddb0F0534Ccaa617427eA10187e",
-    "0x30a822CDD2782D2B2A12a08526452e885978FA1D",
-    "0x6d46bd3AfF100f23C194e5312f93507978a6DC91",
-    "0x660BfcEa3A5FAF823e8f8bF57dd558db034dea1d",
-    "0x140c9Ab92347734641b1A7c124ffDeE58c20C3E3",
-    "0x8c7235e1A6EeF91b980D0FcA083347FBb7EE1806",
-    "0xb172F7e99452446f18FF49A71bfEeCf0873003b4",
-    "0xCd7eC020121Ead6f99855cbB972dF502dB5bC63a",
-    "0x0e8C1E2881F35Ef20343264862A242FB749d6b35",
-    "0x2290937A4498C96eFfb87b8371a33D108F8D433f",
-    "0x1bb0970508316DC735329752a4581E0a4bAbc6B4",
-    "0xf0a16603289eAF35F64077Ba3681af41194a1c09",
-    "0x5Af75eAB6BEC227657fA3E749a8BFd55f02e4b1D",
-    "0xB4a862A81aBB2f952FcA4C6f5510962e18c7f1A2",
-    "0x959c4CA19c4532C97A657D82d97acCBAb70e6fb4",
-    "0xB72334cB9D0b614D30C4c60e2bd12fF5Ed03c305",
-    "0xFc926659Dd8808f6e3e0a8d61B20B871F3Fa6465",
-    "0xfa3FcCCB897079fD83bfBA690E7D47Eb402d6c49",
-    "0x51E9d833Ecae4E8D9D8Be17300AEE6D3398C135D",
-    "0x1eB27f136BFe7947f80d6ceE3Cf0bfDf92b45e57",
-    "0x83Ef5E80faD88288F770152875Ab0bb16641a09E",
-    "0x52207Ec7B1b43AA5DB116931a904371ae2C1619e",
-    "0x23Db729908137cb60852f2936D2b5c6De0e1c887",
-    "0xAF620E6d32B1c67f3396EF5d2F7d7642Dc2e6CE9",
-    "0xCd1a4A457cA8b0931c3BF81Df3CFa227ADBdb6E9",
-    "0x96244D83DC15d36847C35209bBDc5bdDE9bEc3D8",
-    "0x09278b36863bE4cCd3d0c22d643E8062D7a11377",
-    "0x3A21F4E6Bbe527D347ca7c157F4233c935779847",
-    "0xBC3e5e8C10897a81b63933348f53f2e052F89a7E",
-    "0x9271EDdda0F0f2bB7b1A0c712bdF8dbD0A38d1Ab",
-    "0x4C198B3B5F3a4b1Aa706daC73D826c2B795ccd67",
-    "0x684d4b58Dc32af786BF6D572A792fF7A883428B9",
-    "0xD3C611AeD139107DEC2294032da3913BC26507fb",
-    "0x9eF42873Ae015AA3da0c4354AeF94a18D2B3407b",
-    "0xbdE2Cc5375fa9E0383309A2cA31213f2D6cabcbd",
-    "0xe69753Ddfbedbd249E703EB374452E78dae1ae49",
-    "0xE9bc552fdFa54b30296d95F147e3e0280FF7f7e6",
-    "0xBCA02B395747D62626a65016F2e64A20bd254A39",
-    "0xF302572594a68aA8F951faE64ED3aE7DA41c72Be",
-    "0x21032176B43d9f7E9410fB37290a78f4fEd6044C",
-    "0xD5b58Cf7813c1eDC412367b97876bD400ea5c489",
-    "0xA5A023E052243b7cce34Cbd4ba20180e8Dea6Ad6",
-    "0x723a7084028421994d4a7829108D63aB44658315",
-    "0x1512fcb09463A61862B73ec09B9b354aF1790268",
-    "0xEB0bAA3A556586192590CAD296b1e48dF62a8549",
-    "0xf03AfB1c6A11A7E370920ad42e6eE735dBedF0b1",
-    "0x55CCa2f5eB07907696afe4b9Db5102bcE5feB734",
-].map((a) => a.toLowerCase()));
-// Runtime invariant check at module load. Catches a future edit that adds an
-// entry via `sanctionedAddresses.add(...)` bypassing the `.map(toLowerCase)` or
-// inserts a malformed string. Throwing at load is the loudest signal — the
-// package won't import if the dataset is invalid.
-for (const entry of exports.sanctionedAddresses) {
-    if (!/^0x[0-9a-f]{40}$/.test(entry)) {
-        throw new Error(`sanctioned-addresses.ts: entry "${entry}" is not a well-formed lowercased EVM address. Every entry must match /^0x[0-9a-f]{40}$/ so lowercase lookup matches.`);
-    }
-}

package/lib/cjs/screen-addresses/screen-addresses.d.ts

@@ -1,50 +0,0 @@
-import type { SimulationLogger, SimulationTransaction, Transfer } from "../types.js";
-/**
- * Screens every address that appears in a simulated bundle (transfer senders and recipients,
- * plus tx `from` / `to`) against the static {@link sanctionedAddresses} list and, when
- * configured, the Chainalysis Entity API.
- *
- * Addresses are deduped and lowercased; the zero address is removed. Checks run in order:
- *
- * 1. **Static sanctioned list** — always on, no network. Throws on the first hit.
- * 2. **Chainalysis Entity API** — one lookup per address, lookups parallelized. Only runs when
- *    `chainalysisApiKey` is provided.
- *    - **Fail-open on transport errors before registration** (network / timeout / non-ok POST):
- *      treat the address as clean and log a warn. A Chainalysis outage must not block all
- *      simulations.
- *    - **Fail-closed on partial registration**: if the registration POST succeeded but the
- *      lookup GET fails, treat the address as Severe.
- *    - **Fail-closed on schema drift**: an unknown risk tier or unparsed body is treated as
- *      Severe so a future stricter tier is not silently downgraded.
- *
- * Intended to be called after {@link simulate}, passing the returned `simulationTxs` and
- * `transfers`.
- *
- * @param params.simulationTxs - The resolved transactions returned by `simulate()`.
- * @param params.transfers - The parsed transfers returned by `simulate()`.
- * @param params.chainalysisApiKey - Optional Chainalysis token. When absent, only the static
- *   sanctioned list runs.
- * @param params.signal - Optional `AbortSignal` propagated to every Chainalysis request.
- * @param params.logger - Optional `SimulationLogger` for warn-level diagnostics.
- * @returns Resolves to `void` on a clean screening; throws on any Severe hit.
- * @throws {AddressScreeningError} when any address matches the static sanctioned list or
- *   resolves to Severe via Chainalysis.
- * @example
- * ```ts
- * import { screenAddresses, simulate } from "@morpho-org/evm-simulation";
- *
- * const result = await simulate(config, params);
- * await screenAddresses({
- *   simulationTxs: result.simulationTxs,
- *   transfers: result.transfers,
- *   chainalysisApiKey: process.env.CHAINALYSIS_API_KEY,
- * });
- * ```
- */
-export declare function screenAddresses(params: {
-    simulationTxs: SimulationTransaction[];
-    transfers: Transfer[];
-    chainalysisApiKey?: string;
-    signal?: AbortSignal;
-    logger?: SimulationLogger;
-}): Promise<void>;

package/lib/cjs/screen-addresses/screen-addresses.js

@@ -1,171 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.screenAddresses = screenAddresses;
-const viem_1 = require("viem");
-const zod_1 = require("zod");
-const errors_js_1 = require("../errors.js");
-const sanctioned_addresses_js_1 = require("./sanctioned-addresses.js");
-const CHAINALYSIS_API_URL = "https://api.chainalysis.com/api/risk/v2/entities";
-const CHAINALYSIS_TIMEOUT_MS = 5_000;
-/**
- * Known tiers whose presence means NOT severe. Any other value (unknown future
- * tier, malformed field) is treated as Severe so a stricter tier Chainalysis
- * might introduce later isn't silently downgraded to clean.
- */
-const NON_SEVERE_TIERS = new Set(["High", "Medium", "Low"]);
-const chainalysisEntitySchema = zod_1.z
-    .object({
-    risk: zod_1.z.string().nullable(),
-})
-    .passthrough();
-/**
- * Screens every address that appears in a simulated bundle (transfer senders and recipients,
- * plus tx `from` / `to`) against the static {@link sanctionedAddresses} list and, when
- * configured, the Chainalysis Entity API.
- *
- * Addresses are deduped and lowercased; the zero address is removed. Checks run in order:
- *
- * 1. **Static sanctioned list** — always on, no network. Throws on the first hit.
- * 2. **Chainalysis Entity API** — one lookup per address, lookups parallelized. Only runs when
- *    `chainalysisApiKey` is provided.
- *    - **Fail-open on transport errors before registration** (network / timeout / non-ok POST):
- *      treat the address as clean and log a warn. A Chainalysis outage must not block all
- *      simulations.
- *    - **Fail-closed on partial registration**: if the registration POST succeeded but the
- *      lookup GET fails, treat the address as Severe.
- *    - **Fail-closed on schema drift**: an unknown risk tier or unparsed body is treated as
- *      Severe so a future stricter tier is not silently downgraded.
- *
- * Intended to be called after {@link simulate}, passing the returned `simulationTxs` and
- * `transfers`.
- *
- * @param params.simulationTxs - The resolved transactions returned by `simulate()`.
- * @param params.transfers - The parsed transfers returned by `simulate()`.
- * @param params.chainalysisApiKey - Optional Chainalysis token. When absent, only the static
- *   sanctioned list runs.
- * @param params.signal - Optional `AbortSignal` propagated to every Chainalysis request.
- * @param params.logger - Optional `SimulationLogger` for warn-level diagnostics.
- * @returns Resolves to `void` on a clean screening; throws on any Severe hit.
- * @throws {AddressScreeningError} when any address matches the static sanctioned list or
- *   resolves to Severe via Chainalysis.
- * @example
- * ```ts
- * import { screenAddresses, simulate } from "@morpho-org/evm-simulation";
- *
- * const result = await simulate(config, params);
- * await screenAddresses({
- *   simulationTxs: result.simulationTxs,
- *   transfers: result.transfers,
- *   chainalysisApiKey: process.env.CHAINALYSIS_API_KEY,
- * });
- * ```
- */
-async function screenAddresses(params) {
-    const { simulationTxs, transfers, chainalysisApiKey, signal, logger } = params;
-    const addressesToScreen = new Set();
-    for (const transfer of transfers) {
-        addressesToScreen.add(transfer.from.toLowerCase());
-        addressesToScreen.add(transfer.to.toLowerCase());
-    }
-    for (const tx of simulationTxs) {
-        addressesToScreen.add(tx.from.toLowerCase());
-        addressesToScreen.add(tx.to.toLowerCase());
-    }
-    addressesToScreen.delete(viem_1.zeroAddress);
-    // 1. Static sanctioned list — always on, no network.
-    const sanctioned = [];
-    for (const addr of addressesToScreen) {
-        if (sanctioned_addresses_js_1.sanctionedAddresses.has(addr))
-            sanctioned.push((0, viem_1.getAddress)(addr));
-    }
-    if (sanctioned.length > 0) {
-        throw new errors_js_1.AddressScreeningError("Transaction involves sanctioned addresses", sanctioned);
-    }
-    // 2. Chainalysis (optional).
-    if (!chainalysisApiKey) {
-        logger?.warn("Chainalysis screening skipped: no API key configured");
-        return;
-    }
-    const results = await Promise.allSettled([...addressesToScreen].map(async (addr) => {
-        const verdict = await screenWithChainalysis(addr, chainalysisApiKey, signal);
-        return { addr, verdict };
-    }));
-    const flagged = [];
-    for (const r of results) {
-        if (r.status === "fulfilled") {
-            if (r.value.verdict === "severe")
-                flagged.push((0, viem_1.getAddress)(r.value.addr));
-        }
-        else {
-            // Transport fail-open: registration POST couldn't even complete, so the
-            // address was never registered with Chainalysis and the package's
-            // fail-open posture applies.
-            logger?.warn("Chainalysis screening failed (fail-open)", {
-                error: r.reason instanceof Error ? r.reason.message : String(r.reason),
-            });
-        }
-    }
-    if (flagged.length > 0) {
-        throw new errors_js_1.AddressScreeningError("Transaction involves addresses flagged as Severe risk", flagged);
-    }
-}
-/**
- * Run the Chainalysis Entity flow for one address.
- *
- * Returns `'severe'` or `'clean'`. Throws only if the initial registration POST
- * fails before any server-side side effect — then the outer handler treats the
- * rejection as fail-open. After registration succeeds, every error path returns
- * `'severe'` so the check fails closed.
- *
- * A SINGLE deadline covers both the POST and the GET, keeping the per-address
- * wall-time budget at `CHAINALYSIS_TIMEOUT_MS` (5 s) rather than doubling it.
- *
- * @internal
- */
-// biome-ignore lint/complexity/useMaxParams: TODO refactor to ≤2 params
-async function screenWithChainalysis(address, apiKey, parentSignal) {
-    const headers = {
-        "Content-Type": "application/json",
-        token: apiKey,
-    };
-    const deadline = AbortSignal.timeout(CHAINALYSIS_TIMEOUT_MS);
-    const signal = parentSignal
-        ? AbortSignal.any([parentSignal, deadline])
-        : deadline;
-    // POST to register. Pre-registration failure → fail-open via thrown Error.
-    const registration = await fetch(CHAINALYSIS_API_URL, {
-        headers,
-        method: "POST",
-        body: JSON.stringify({ address }),
-        signal,
-    });
-    if (!registration.ok) {
-        throw new Error(`Chainalysis registration failed: ${registration.status} ${registration.statusText}`);
-    }
-    // From here on we've already told Chainalysis about the address — fail closed.
-    let response;
-    try {
-        response = await fetch(`${CHAINALYSIS_API_URL}/${encodeURIComponent(address)}`, {
-            method: "GET",
-            headers,
-            signal,
-        });
-    }
-    catch {
-        return "severe";
-    }
-    if (!response.ok)
-        return "severe";
-    let parsed;
-    try {
-        parsed = chainalysisEntitySchema.parse(await response.json());
-    }
-    catch {
-        return "severe";
-    }
-    if (parsed.risk === null)
-        return "clean";
-    if (NON_SEVERE_TIERS.has(parsed.risk))
-        return "clean";
-    return "severe";
-}

package/lib/cjs/simulate/backends/tenderly-rest.d.ts

@@ -1,20 +0,0 @@
-import { type BlockTag } from "viem";
-import type { RawSimulationResult, SimulationLogger, SimulationTransaction, TenderlyRestConfig } from "../../types.js";
-/**
- * Simulate transactions using Tenderly REST API.
- *
- * @param shareable - true persists the simulation in Tenderly and returns a shareable URL;
- *   false runs ephemerally with no URL. Translates to Tenderly's `save` wire field
- *   (`save_if_fails` is also set to `shareable` — so failed preview simulations are
- *   ALSO persisted and shareable. Callers that preview sensitive calldata should be
- *   aware this persists in Tenderly's dashboard regardless of success/failure).
- */
-export declare function simulateTenderlyRest(params: {
-    config: TenderlyRestConfig;
-    chainId: number;
-    transactions: SimulationTransaction[];
-    blockNumber?: bigint | BlockTag;
-    shareable: boolean;
-    signal?: AbortSignal;
-    logger?: SimulationLogger;
-}): Promise<RawSimulationResult>;