@morpho-org/evm-simulation 2.0.2 → 4.0.0

package/lib/esm/types.d.ts

@@ -1,36 +1,34 @@
 import type { Address, BlockTag, Hex } from "viem";
 /**
- * Credentials and routing for the Tenderly REST simulation backend.
- * Omit from `SimulationConfig.tenderlyRest` to disable the Tenderly path entirely.
+ * Credentials for the Tenderly Node Web3 Gateway. The `rpcUrl` is the
+ * chain-specific gateway URL with the access key embedded in the path,
+ * e.g. `https://mainnet.gateway.tenderly.co/{ACCESS_KEY}`.
  */
-export interface TenderlyRestConfig {
-    /** e.g. "https://api.tenderly.co" */
-    apiBaseUrl: string;
-    accessToken: string;
-    accountSlug: string;
-    projectSlug: string;
-    /** Chain IDs that Tenderly supports for simulation */
-    supportedChainIds: Set<number>;
+export interface TenderlyRpcConfig {
+    rpcUrl: string;
 }
 /**
- * Per-chain capabilities. Stored as a `Map` value in
- * `SimulationConfig.chains`, keyed by chain ID.
+ * Per-chain backend capabilities. Exactly one configuration shape per chain;
+ * the discriminated union enforces that **at least one** of `tenderlyRpc`
+ * (primary) or `simulateV1Url` (fallback) is supplied.
  */
-export interface ChainSimulationConfig {
-    /** JSON-RPC URL supporting `eth_simulateV1`. undefined = not available for this chain. */
+export type ChainSimulationConfig = {
+    /** Tenderly RPC config — `tenderly_simulateTransaction` / `tenderly_simulateBundle`. */
+    tenderlyRpc: TenderlyRpcConfig;
+    /** JSON-RPC URL supporting `eth_simulateV1`. Optional when Tenderly is set. */
     simulateV1Url?: string;
-}
+} | {
+    tenderlyRpc?: TenderlyRpcConfig;
+    simulateV1Url: string;
+};
 /**
  * Top-level configuration for `simulate`.
  *
- * At least one backend must be reachable for a given chainId — either Tenderly
- * (via `tenderlyRest` with that chainId in `TenderlyRestConfig.supportedChainIds`)
- * or `ChainSimulationConfig.simulateV1Url` in the `chains` map. Otherwise the
- * orchestrator throws `UnsupportedChainError`.
+ * Every chain entry must declare at least one backend (Tenderly RPC primary,
+ * `eth_simulateV1` fallback, or both). Calling `simulate` for a `chainId`
+ * missing from `chains` throws `UnsupportedChainError`.
  */
 export interface SimulationConfig {
-    /** Tenderly REST API config. undefined = Tenderly not available. */
-    tenderlyRest?: TenderlyRestConfig;
     /** Per-chain simulation capabilities. */
     chains: Map<number, ChainSimulationConfig>;
     logger?: SimulationLogger;
@@ -66,6 +64,33 @@ export type SimulationAuthorization = {
     /** Defaults to maxUint256. Caller can set explicit amount for tokens that don't support max approval. */
     amount?: bigint;
 };
+/**
+ * Net balance change for a single asset (one token) within an account's entry.
+ * Native ETH uses viem's `ethAddress` sentinel as `token`. `symbol`/`decimals`
+ * are best-effort and may be absent, notably on the `eth_simulateV1` fallback.
+ */
+export interface AssetChange {
+    readonly token: Address;
+    readonly symbol?: string;
+    readonly decimals?: number;
+    /** Signed net change of the account's balance, in raw token units. */
+    readonly diff: bigint;
+}
+/**
+ * Net per-token balance changes for one account over the whole bundle. Returned
+ * for every account that nets a non-zero change, the sender and counterparties
+ * alike (the zero address is kept for mints/burns). Accounts and their `changes`
+ * are sorted by address for deterministic, cross-backend output.
+ *
+ * Native-ETH coverage differs by backend: Tenderly reports the full net ETH
+ * delta (including ETH moved via internal calls), while the `eth_simulateV1`
+ * fallback derives native ETH only from the top-level transaction `value`s —
+ * ETH moved internally (e.g. a `WETH.withdraw` refund) is not captured there.
+ */
+export interface AccountAssetChanges {
+    readonly account: Address;
+    readonly changes: readonly AssetChange[];
+}
 /**
  * A parsed ERC20 / WETH9 transfer extracted from simulation logs. Returned in
  * `SimulationResult.transfers`.
@@ -89,25 +114,25 @@ export interface Transfer {
  * - `simulationTxs` is the full resolved transaction list (including
  *   prepended authorization txs).
  * - `calls[i]` corresponds 1:1 with `simulationTxs[i]` — read raw logs,
- *   status, returnData/gasUsed, and (Tenderly only) assetChanges per tx.
+ *   status, returnData/gasUsed.
+ * - `assetChanges` is the net per-asset balance change over the whole bundle,
+ *   grouped by account (sender and counterparties), normalized to the same
+ *   shape across backends — see `AccountAssetChanges`.
  * - `transfers[k].txIdx` indexes into `simulationTxs` to attribute each
  *   transfer to its emitting transaction.
- * - `tenderlyUrl` is set only when `shareable: true` AND the Tenderly backend
- *   ran successfully (not the `eth_simulateV1` fallback).
  */
 export interface SimulationResult {
     /** The full resolved transaction list (including prepended authorization txs). */
     readonly simulationTxs: readonly SimulationTransaction[];
     /**
      * Per-transaction normalized output. `calls[i]` corresponds 1:1 with
-     * `simulationTxs[i]`. Use this to read raw logs, status, return data, gas
-     * used, and (Tenderly only) asset changes per transaction.
+     * `simulationTxs[i]`. Use this to read raw logs, status, return data, gas used.
      */
     readonly calls: readonly SimulationCall[];
     /** Parsed ERC-20 / WETH9 transfers from the simulation. */
     readonly transfers: readonly Transfer[];
-    /** Shareable Tenderly URL. Present only when `shareable: true` and Tenderly ran (not fallback). */
-    readonly tenderlyUrl?: string;
+    /** Net per-asset balance changes, grouped by account, over the whole bundle. */
+    readonly assetChanges: readonly AccountAssetChanges[];
 }
 /** Minimal structured logger the package calls for warnings and info. */
 export interface SimulationLogger {
@@ -128,15 +153,15 @@ export interface SimulateParams {
 /**
  * Internal raw result from a simulation adapter before normalization.
  * `calls[i]` corresponds 1:1 with the i-th transaction passed to the
- * backend.
+ * backend; `assetChanges` is the bundle-level aggregate grouped by account.
  */
 export interface RawSimulationResult {
     calls: RawCall[];
-    tenderlyUrl?: string;
+    assetChanges: AccountAssetChanges[];
 }
 /**
  * Normalized EVM log emitted by a single simulated call. The shape is the
- * common subset both backends (`eth_simulateV1` via viem and Tenderly REST)
+ * common subset both backends (`eth_simulateV1` via viem and Tenderly RPC)
  * produce after schema validation. Returned indirectly via
  * `SimulationCall.logs` and consumed by the SDK's transfer parser.
  */
@@ -156,15 +181,14 @@ export interface RawCall {
     status: boolean;
     returnData: Hex;
     gasUsed: bigint;
-    /** Tenderly-only `asset_changes` payload. Absent on `eth_simulateV1`. */
-    assetChanges?: unknown;
 }
 /**
  * Per-transaction normalized output from the simulation backend.
  *
  * `SimulationResult.calls[i]` corresponds 1:1 with
  * `SimulationResult.simulationTxs[i]`. Use this to read raw logs, status,
- * return data, gas used, and (Tenderly only) asset changes per transaction.
+ * return data, and gas used. Net asset changes are reported at the bundle
+ * level — see `SimulationResult.assetChanges`.
  */
 export interface SimulationCall {
     readonly logs: readonly RawLog[];
@@ -179,9 +203,4 @@ export interface SimulationCall {
     readonly returnData: Hex;
     /** Gas used by this call (root frame). */
     readonly gasUsed: bigint;
-    /**
-     * Tenderly-only `asset_changes` payload for this tx. Opaque `unknown` —
-     * do not destructure without validation. Absent on `eth_simulateV1`.
-     */
-    readonly assetChanges?: unknown;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@morpho-org/evm-simulation",
   "description": "EVM simulation engine for Morpho transactions.",
-  "version": "2.0.2",
+  "version": "4.0.0",
   "author": "Morpho Association <contact@morpho.org>",
   "contributors": [
     "Rubilmax <rmilon@gmail.com>"
@@ -25,8 +25,8 @@
   ],
   "dependencies": {
     "zod": "^4.4.3",
-    "@morpho-org/blue-sdk": "^6.0.1",
-    "@morpho-org/morpho-ts": "^2.5.3"
+    "@morpho-org/blue-sdk": "^6.1.0",
+    "@morpho-org/morpho-ts": "^2.6.0"
   },
   "peerDependencies": {
     "viem": "^2.0.0"
@@ -34,14 +34,16 @@
   "devDependencies": {
     "typescript": "^6.0.3",
     "viem": "^2.50.4",
-    "vitest": "^4.1.7"
+    "vitest": "^4.1.7",
+    "@morpho-org/test": "^2.8.1"
   },
   "scripts": {
     "prepublish": "$npm_execpath build",
     "build": "tsc --noEmit && $npm_execpath build:cjs && $npm_execpath build:esm",
     "build:cjs": "tsc --build tsconfig.build.cjs.json && echo '{\"type\":\"commonjs\"}' > lib/cjs/package.json",
     "build:esm": "tsc --build tsconfig.build.esm.json && echo '{\"type\":\"module\"}' > lib/esm/package.json",
-    "test": "vitest --root ../.. --project evm-simulation"
+    "test": "vitest --root ../.. --project evm-simulation",
+    "test:fork": "dotenv -- vitest --root ../.. --project evm-simulation-fork"
   },
   "exports": {
     ".": {

package/src/index.ts

@@ -2,7 +2,6 @@
 
 // Errors (for instanceof checks by consumers)
 export {
-  AddressScreeningError,
   BlacklistViolationError,
   ExternalServiceError,
   SimulationPackageError,
@@ -10,10 +9,11 @@ export {
   SimulationValidationError,
   UnsupportedChainError,
 } from "./errors.js";
-export { screenAddresses } from "./screen-addresses/index.js";
 export { simulate } from "./simulate/index.js";
 // Types
 export type {
+  AccountAssetChanges,
+  AssetChange,
   ChainSimulationConfig,
   RawLog,
   SimulateParams,
@@ -23,6 +23,6 @@ export type {
   SimulationLogger,
   SimulationResult,
   SimulationTransaction,
-  TenderlyRestConfig,
+  TenderlyRpcConfig,
   Transfer,
 } from "./types.js";

package/lib/cjs/screen-addresses/index.d.ts

@@ -1 +0,0 @@
-export { screenAddresses } from "./screen-addresses.js";

package/lib/cjs/screen-addresses/index.js

@@ -1,5 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.screenAddresses = void 0;
-var screen_addresses_js_1 = require("./screen-addresses.js");
-Object.defineProperty(exports, "screenAddresses", { enumerable: true, get: function () { return screen_addresses_js_1.screenAddresses; } });

package/lib/cjs/screen-addresses/sanctioned-addresses.d.ts

@@ -1,11 +0,0 @@
-/**
- * Static list of sanctioned/compromised addresses.
- * Ported from offchain-services-server/src/functions/screen/blacklist.ts.
- * These addresses are checked before calling the Chainalysis API (fast, no network).
- *
- * **Invariant** (enforced at module load, see below): every entry is a
- * well-formed lowercased EVM address. `screenAddresses` does
- * `sanctionedAddresses.has(addr.toLowerCase())` — a mixed-case entry would
- * never match and would silently bypass the sanctioned check.
- */
-export declare const sanctionedAddresses: Set<string>;

package/lib/cjs/screen-addresses/sanctioned-addresses.js

@@ -1,77 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.sanctionedAddresses = void 0;
-/**
- * Static list of sanctioned/compromised addresses.
- * Ported from offchain-services-server/src/functions/screen/blacklist.ts.
- * These addresses are checked before calling the Chainalysis API (fast, no network).
- *
- * **Invariant** (enforced at module load, see below): every entry is a
- * well-formed lowercased EVM address. `screenAddresses` does
- * `sanctionedAddresses.has(addr.toLowerCase())` — a mixed-case entry would
- * never match and would silently bypass the sanctioned check.
- */
-exports.sanctionedAddresses = new Set([
-    // Bybit hack addresses
-    "0x47666Fab8bd0Ac7003bce3f5C3585383F09486E2",
-    "0xA4B2Fd68593B6F34E51cB9eDB66E71c1B4Ab449e",
-    "0x36ed3C0213565530C35115d93A80F9c04d94E4Cb",
-    "0x1542368a03ad1f03d96D51B414f4738961Cf4443",
-    "0xdD90071D52F20e85c89802e5Dc1eC0A7B6475f92",
-    "0x40e98FeEEbaD7Ddb0F0534Ccaa617427eA10187e",
-    "0x30a822CDD2782D2B2A12a08526452e885978FA1D",
-    "0x6d46bd3AfF100f23C194e5312f93507978a6DC91",
-    "0x660BfcEa3A5FAF823e8f8bF57dd558db034dea1d",
-    "0x140c9Ab92347734641b1A7c124ffDeE58c20C3E3",
-    "0x8c7235e1A6EeF91b980D0FcA083347FBb7EE1806",
-    "0xb172F7e99452446f18FF49A71bfEeCf0873003b4",
-    "0xCd7eC020121Ead6f99855cbB972dF502dB5bC63a",
-    "0x0e8C1E2881F35Ef20343264862A242FB749d6b35",
-    "0x2290937A4498C96eFfb87b8371a33D108F8D433f",
-    "0x1bb0970508316DC735329752a4581E0a4bAbc6B4",
-    "0xf0a16603289eAF35F64077Ba3681af41194a1c09",
-    "0x5Af75eAB6BEC227657fA3E749a8BFd55f02e4b1D",
-    "0xB4a862A81aBB2f952FcA4C6f5510962e18c7f1A2",
-    "0x959c4CA19c4532C97A657D82d97acCBAb70e6fb4",
-    "0xB72334cB9D0b614D30C4c60e2bd12fF5Ed03c305",
-    "0xFc926659Dd8808f6e3e0a8d61B20B871F3Fa6465",
-    "0xfa3FcCCB897079fD83bfBA690E7D47Eb402d6c49",
-    "0x51E9d833Ecae4E8D9D8Be17300AEE6D3398C135D",
-    "0x1eB27f136BFe7947f80d6ceE3Cf0bfDf92b45e57",
-    "0x83Ef5E80faD88288F770152875Ab0bb16641a09E",
-    "0x52207Ec7B1b43AA5DB116931a904371ae2C1619e",
-    "0x23Db729908137cb60852f2936D2b5c6De0e1c887",
-    "0xAF620E6d32B1c67f3396EF5d2F7d7642Dc2e6CE9",
-    "0xCd1a4A457cA8b0931c3BF81Df3CFa227ADBdb6E9",
-    "0x96244D83DC15d36847C35209bBDc5bdDE9bEc3D8",
-    "0x09278b36863bE4cCd3d0c22d643E8062D7a11377",
-    "0x3A21F4E6Bbe527D347ca7c157F4233c935779847",
-    "0xBC3e5e8C10897a81b63933348f53f2e052F89a7E",
-    "0x9271EDdda0F0f2bB7b1A0c712bdF8dbD0A38d1Ab",
-    "0x4C198B3B5F3a4b1Aa706daC73D826c2B795ccd67",
-    "0x684d4b58Dc32af786BF6D572A792fF7A883428B9",
-    "0xD3C611AeD139107DEC2294032da3913BC26507fb",
-    "0x9eF42873Ae015AA3da0c4354AeF94a18D2B3407b",
-    "0xbdE2Cc5375fa9E0383309A2cA31213f2D6cabcbd",
-    "0xe69753Ddfbedbd249E703EB374452E78dae1ae49",
-    "0xE9bc552fdFa54b30296d95F147e3e0280FF7f7e6",
-    "0xBCA02B395747D62626a65016F2e64A20bd254A39",
-    "0xF302572594a68aA8F951faE64ED3aE7DA41c72Be",
-    "0x21032176B43d9f7E9410fB37290a78f4fEd6044C",
-    "0xD5b58Cf7813c1eDC412367b97876bD400ea5c489",
-    "0xA5A023E052243b7cce34Cbd4ba20180e8Dea6Ad6",
-    "0x723a7084028421994d4a7829108D63aB44658315",
-    "0x1512fcb09463A61862B73ec09B9b354aF1790268",
-    "0xEB0bAA3A556586192590CAD296b1e48dF62a8549",
-    "0xf03AfB1c6A11A7E370920ad42e6eE735dBedF0b1",
-    "0x55CCa2f5eB07907696afe4b9Db5102bcE5feB734",
-].map((a) => a.toLowerCase()));
-// Runtime invariant check at module load. Catches a future edit that adds an
-// entry via `sanctionedAddresses.add(...)` bypassing the `.map(toLowerCase)` or
-// inserts a malformed string. Throwing at load is the loudest signal — the
-// package won't import if the dataset is invalid.
-for (const entry of exports.sanctionedAddresses) {
-    if (!/^0x[0-9a-f]{40}$/.test(entry)) {
-        throw new Error(`sanctioned-addresses.ts: entry "${entry}" is not a well-formed lowercased EVM address. Every entry must match /^0x[0-9a-f]{40}$/ so lowercase lookup matches.`);
-    }
-}

package/lib/cjs/screen-addresses/screen-addresses.d.ts

@@ -1,50 +0,0 @@
-import type { SimulationLogger, SimulationTransaction, Transfer } from "../types.js";
-/**
- * Screens every address that appears in a simulated bundle (transfer senders and recipients,
- * plus tx `from` / `to`) against the static {@link sanctionedAddresses} list and, when
- * configured, the Chainalysis Entity API.
- *
- * Addresses are deduped and lowercased; the zero address is removed. Checks run in order:
- *
- * 1. **Static sanctioned list** — always on, no network. Throws on the first hit.
- * 2. **Chainalysis Entity API** — one lookup per address, lookups parallelized. Only runs when
- *    `chainalysisApiKey` is provided.
- *    - **Fail-open on transport errors before registration** (network / timeout / non-ok POST):
- *      treat the address as clean and log a warn. A Chainalysis outage must not block all
- *      simulations.
- *    - **Fail-closed on partial registration**: if the registration POST succeeded but the
- *      lookup GET fails, treat the address as Severe.
- *    - **Fail-closed on schema drift**: an unknown risk tier or unparsed body is treated as
- *      Severe so a future stricter tier is not silently downgraded.
- *
- * Intended to be called after {@link simulate}, passing the returned `simulationTxs` and
- * `transfers`.
- *
- * @param params.simulationTxs - The resolved transactions returned by `simulate()`.
- * @param params.transfers - The parsed transfers returned by `simulate()`.
- * @param params.chainalysisApiKey - Optional Chainalysis token. When absent, only the static
- *   sanctioned list runs.
- * @param params.signal - Optional `AbortSignal` propagated to every Chainalysis request.
- * @param params.logger - Optional `SimulationLogger` for warn-level diagnostics.
- * @returns Resolves to `void` on a clean screening; throws on any Severe hit.
- * @throws {AddressScreeningError} when any address matches the static sanctioned list or
- *   resolves to Severe via Chainalysis.
- * @example
- * ```ts
- * import { screenAddresses, simulate } from "@morpho-org/evm-simulation";
- *
- * const result = await simulate(config, params);
- * await screenAddresses({
- *   simulationTxs: result.simulationTxs,
- *   transfers: result.transfers,
- *   chainalysisApiKey: process.env.CHAINALYSIS_API_KEY,
- * });
- * ```
- */
-export declare function screenAddresses(params: {
-    simulationTxs: SimulationTransaction[];
-    transfers: Transfer[];
-    chainalysisApiKey?: string;
-    signal?: AbortSignal;
-    logger?: SimulationLogger;
-}): Promise<void>;

package/lib/cjs/screen-addresses/screen-addresses.js

@@ -1,171 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.screenAddresses = screenAddresses;
-const viem_1 = require("viem");
-const zod_1 = require("zod");
-const errors_js_1 = require("../errors.js");
-const sanctioned_addresses_js_1 = require("./sanctioned-addresses.js");
-const CHAINALYSIS_API_URL = "https://api.chainalysis.com/api/risk/v2/entities";
-const CHAINALYSIS_TIMEOUT_MS = 5_000;
-/**
- * Known tiers whose presence means NOT severe. Any other value (unknown future
- * tier, malformed field) is treated as Severe so a stricter tier Chainalysis
- * might introduce later isn't silently downgraded to clean.
- */
-const NON_SEVERE_TIERS = new Set(["High", "Medium", "Low"]);
-const chainalysisEntitySchema = zod_1.z
-    .object({
-    risk: zod_1.z.string().nullable(),
-})
-    .passthrough();
-/**
- * Screens every address that appears in a simulated bundle (transfer senders and recipients,
- * plus tx `from` / `to`) against the static {@link sanctionedAddresses} list and, when
- * configured, the Chainalysis Entity API.
- *
- * Addresses are deduped and lowercased; the zero address is removed. Checks run in order:
- *
- * 1. **Static sanctioned list** — always on, no network. Throws on the first hit.
- * 2. **Chainalysis Entity API** — one lookup per address, lookups parallelized. Only runs when
- *    `chainalysisApiKey` is provided.
- *    - **Fail-open on transport errors before registration** (network / timeout / non-ok POST):
- *      treat the address as clean and log a warn. A Chainalysis outage must not block all
- *      simulations.
- *    - **Fail-closed on partial registration**: if the registration POST succeeded but the
- *      lookup GET fails, treat the address as Severe.
- *    - **Fail-closed on schema drift**: an unknown risk tier or unparsed body is treated as
- *      Severe so a future stricter tier is not silently downgraded.
- *
- * Intended to be called after {@link simulate}, passing the returned `simulationTxs` and
- * `transfers`.
- *
- * @param params.simulationTxs - The resolved transactions returned by `simulate()`.
- * @param params.transfers - The parsed transfers returned by `simulate()`.
- * @param params.chainalysisApiKey - Optional Chainalysis token. When absent, only the static
- *   sanctioned list runs.
- * @param params.signal - Optional `AbortSignal` propagated to every Chainalysis request.
- * @param params.logger - Optional `SimulationLogger` for warn-level diagnostics.
- * @returns Resolves to `void` on a clean screening; throws on any Severe hit.
- * @throws {AddressScreeningError} when any address matches the static sanctioned list or
- *   resolves to Severe via Chainalysis.
- * @example
- * ```ts
- * import { screenAddresses, simulate } from "@morpho-org/evm-simulation";
- *
- * const result = await simulate(config, params);
- * await screenAddresses({
- *   simulationTxs: result.simulationTxs,
- *   transfers: result.transfers,
- *   chainalysisApiKey: process.env.CHAINALYSIS_API_KEY,
- * });
- * ```
- */
-async function screenAddresses(params) {
-    const { simulationTxs, transfers, chainalysisApiKey, signal, logger } = params;
-    const addressesToScreen = new Set();
-    for (const transfer of transfers) {
-        addressesToScreen.add(transfer.from.toLowerCase());
-        addressesToScreen.add(transfer.to.toLowerCase());
-    }
-    for (const tx of simulationTxs) {
-        addressesToScreen.add(tx.from.toLowerCase());
-        addressesToScreen.add(tx.to.toLowerCase());
-    }
-    addressesToScreen.delete(viem_1.zeroAddress);
-    // 1. Static sanctioned list — always on, no network.
-    const sanctioned = [];
-    for (const addr of addressesToScreen) {
-        if (sanctioned_addresses_js_1.sanctionedAddresses.has(addr))
-            sanctioned.push((0, viem_1.getAddress)(addr));
-    }
-    if (sanctioned.length > 0) {
-        throw new errors_js_1.AddressScreeningError("Transaction involves sanctioned addresses", sanctioned);
-    }
-    // 2. Chainalysis (optional).
-    if (!chainalysisApiKey) {
-        logger?.warn("Chainalysis screening skipped: no API key configured");
-        return;
-    }
-    const results = await Promise.allSettled([...addressesToScreen].map(async (addr) => {
-        const verdict = await screenWithChainalysis(addr, chainalysisApiKey, signal);
-        return { addr, verdict };
-    }));
-    const flagged = [];
-    for (const r of results) {
-        if (r.status === "fulfilled") {
-            if (r.value.verdict === "severe")
-                flagged.push((0, viem_1.getAddress)(r.value.addr));
-        }
-        else {
-            // Transport fail-open: registration POST couldn't even complete, so the
-            // address was never registered with Chainalysis and the package's
-            // fail-open posture applies.
-            logger?.warn("Chainalysis screening failed (fail-open)", {
-                error: r.reason instanceof Error ? r.reason.message : String(r.reason),
-            });
-        }
-    }
-    if (flagged.length > 0) {
-        throw new errors_js_1.AddressScreeningError("Transaction involves addresses flagged as Severe risk", flagged);
-    }
-}
-/**
- * Run the Chainalysis Entity flow for one address.
- *
- * Returns `'severe'` or `'clean'`. Throws only if the initial registration POST
- * fails before any server-side side effect — then the outer handler treats the
- * rejection as fail-open. After registration succeeds, every error path returns
- * `'severe'` so the check fails closed.
- *
- * A SINGLE deadline covers both the POST and the GET, keeping the per-address
- * wall-time budget at `CHAINALYSIS_TIMEOUT_MS` (5 s) rather than doubling it.
- *
- * @internal
- */
-// biome-ignore lint/complexity/useMaxParams: TODO refactor to ≤2 params
-async function screenWithChainalysis(address, apiKey, parentSignal) {
-    const headers = {
-        "Content-Type": "application/json",
-        token: apiKey,
-    };
-    const deadline = AbortSignal.timeout(CHAINALYSIS_TIMEOUT_MS);
-    const signal = parentSignal
-        ? AbortSignal.any([parentSignal, deadline])
-        : deadline;
-    // POST to register. Pre-registration failure → fail-open via thrown Error.
-    const registration = await fetch(CHAINALYSIS_API_URL, {
-        headers,
-        method: "POST",
-        body: JSON.stringify({ address }),
-        signal,
-    });
-    if (!registration.ok) {
-        throw new Error(`Chainalysis registration failed: ${registration.status} ${registration.statusText}`);
-    }
-    // From here on we've already told Chainalysis about the address — fail closed.
-    let response;
-    try {
-        response = await fetch(`${CHAINALYSIS_API_URL}/${encodeURIComponent(address)}`, {
-            method: "GET",
-            headers,
-            signal,
-        });
-    }
-    catch {
-        return "severe";
-    }
-    if (!response.ok)
-        return "severe";
-    let parsed;
-    try {
-        parsed = chainalysisEntitySchema.parse(await response.json());
-    }
-    catch {
-        return "severe";
-    }
-    if (parsed.risk === null)
-        return "clean";
-    if (NON_SEVERE_TIERS.has(parsed.risk))
-        return "clean";
-    return "severe";
-}

package/lib/cjs/simulate/backends/tenderly-rest.d.ts

@@ -1,20 +0,0 @@
-import { type BlockTag } from "viem";
-import type { RawSimulationResult, SimulationLogger, SimulationTransaction, TenderlyRestConfig } from "../../types.js";
-/**
- * Simulate transactions using Tenderly REST API.
- *
- * @param shareable - true persists the simulation in Tenderly and returns a shareable URL;
- *   false runs ephemerally with no URL. Translates to Tenderly's `save` wire field
- *   (`save_if_fails` is also set to `shareable` — so failed preview simulations are
- *   ALSO persisted and shareable. Callers that preview sensitive calldata should be
- *   aware this persists in Tenderly's dashboard regardless of success/failure).
- */
-export declare function simulateTenderlyRest(params: {
-    config: TenderlyRestConfig;
-    chainId: number;
-    transactions: SimulationTransaction[];
-    blockNumber?: bigint | BlockTag;
-    shareable: boolean;
-    signal?: AbortSignal;
-    logger?: SimulationLogger;
-}): Promise<RawSimulationResult>;