@morpho-org/evm-simulation 4.1.9 → 4.2.0-next.1

package/lib/cjs/errors.d.ts

@@ -19,7 +19,7 @@ interface RetainedAsset {
     token: string | undefined;
     netRetained: string;
 }
-/** Funds would flow to restricted bundler3 or bundles contract addresses. Never bypassable. */
+/** Funds would flow to restricted standalone bundles contract addresses. Never bypassable. */
 export declare class BlacklistViolationError extends SimulationPackageError {
     readonly assetChanges?: RetainedAsset[] | undefined;
     readonly code = "BLACKLIST_ERROR";

package/lib/cjs/errors.js

@@ -24,7 +24,7 @@ class SimulationRevertedError extends SimulationPackageError {
     }
 }
 exports.SimulationRevertedError = SimulationRevertedError;
-/** Funds would flow to restricted bundler3 or bundles contract addresses. Never bypassable. */
+/** Funds would flow to restricted standalone bundles contract addresses. Never bypassable. */
 class BlacklistViolationError extends SimulationPackageError {
     assetChanges;
     code = "BLACKLIST_ERROR";

package/lib/cjs/simulate/asset-changes.d.ts

@@ -13,7 +13,7 @@ export interface AssetChangeEntry {
  * any real token address. `eth_simulateV1` synthesizes native moves from the
  * sentinel `0xeee…eee`, and Tenderly may echo it — in checksummed or any other
  * case — as an asset change's `contractAddress`. Native ETH is keyed by the exact
- * `ethAddress` constant here and in the bundler-retention guard, so a checksummed
+ * `ethAddress` constant here and in the bundles-retention guard, so a checksummed
  * sentinel would land on a separate map key and silently escape retention checks.
  * This is the single source of truth for token normalization shared by the
  * transfer-log parser and the Tenderly asset-change mapper.

package/lib/cjs/simulate/asset-changes.js

@@ -8,7 +8,7 @@ const viem_1 = require("viem");
  * any real token address. `eth_simulateV1` synthesizes native moves from the
  * sentinel `0xeee…eee`, and Tenderly may echo it — in checksummed or any other
  * case — as an asset change's `contractAddress`. Native ETH is keyed by the exact
- * `ethAddress` constant here and in the bundler-retention guard, so a checksummed
+ * `ethAddress` constant here and in the bundles-retention guard, so a checksummed
  * sentinel would land on a separate map key and silently escape retention checks.
  * This is the single source of truth for token normalization shared by the
  * transfer-log parser and the Tenderly asset-change mapper.

package/lib/cjs/simulate/parsing/transfers.d.ts

@@ -36,7 +36,7 @@ export declare const DEPOSIT_TOPIC = "0xe1fffcc4923d04b559f4d29a8bfc6cda04eb5b0d
  * atomically inside a single call frame. A **non-canonical wrapped-native**
  * that splits these emissions across two txs in the same bundle would leave
  * a phantom zero-address `Transfer` in the parsed output, which can be summed
- * by `assertNoBundlerRetention` and produce a false `BlacklistViolationError`.
+ * by `assertNoBundlesRetention` and produce a false `BlacklistViolationError`.
  * When its zero-address `Transfer` misses same-tx dedup, the parser emits a
  * `warn` so the assumption break is observable before it reaches retention.
  * None of `morpho-sdk`'s currently supported chains require cross-tx dedup;

package/lib/cjs/simulate/parsing/transfers.js

@@ -45,7 +45,7 @@ const UINT256_HEX_LENGTH = 66; // "0x" + 32 bytes
  * atomically inside a single call frame. A **non-canonical wrapped-native**
  * that splits these emissions across two txs in the same bundle would leave
  * a phantom zero-address `Transfer` in the parsed output, which can be summed
- * by `assertNoBundlerRetention` and produce a false `BlacklistViolationError`.
+ * by `assertNoBundlesRetention` and produce a false `BlacklistViolationError`.
  * When its zero-address `Transfer` misses same-tx dedup, the parser emits a
  * `warn` so the assumption break is observable before it reaches retention.
  * None of `morpho-sdk`'s currently supported chains require cross-tx dedup;

package/lib/cjs/simulate/pipeline/{bundler-retention.d.ts → bundles-retention.d.ts}

@@ -1,22 +1,22 @@
 import type { AccountAssetChanges, SimulationLogger, Transfer } from "../../types.js";
-interface AssertNoBundlerRetentionParams {
+interface AssertNoBundlesRetentionParams {
     chainId: number;
     transfers: Transfer[];
     assetChanges: readonly AccountAssetChanges[];
     logger?: SimulationLogger;
 }
 /**
- * Assert that no value is retained by restricted contract addresses — the
- * `bundler3` executor and adapters, plus the standalone `bundles` periphery
- * contracts (`VaultExitBundlesV1`, `VaultBundlesV1`, `BlueBundlesV1`).
+ * Assert that no value is retained by standalone `bundles` periphery contracts
+ * (`VaultExitBundlesV1`, `VaultBundlesV1`, `BlueBundlesV1`).
  *
  * Uses net flow (inbound minus outbound) per (restricted address, token) pair.
  * These contracts legitimately receive tokens as an intermediary (user →
- * bundler → vault), so gross inbound would fire false positives. We only block
- * positive net flow above `DUST_THRESHOLD` — value stuck in a restricted
- * address. Negative net flow means the simulated bundle sweeps a pre-existing or
- * state-overridden balance. That is useful telemetry, but not current-bundle
- * retention, so it is warned instead of raising a blacklist violation.
+ * bundles contract → vault), so gross inbound would fire false positives. We
+ * only block positive net flow above `DUST_THRESHOLD` — value stuck in a
+ * restricted address. Negative net flow means the simulated bundle sweeps a
+ * pre-existing or state-overridden balance. That is useful telemetry, but not
+ * current-bundle retention, so it is warned instead of raising a blacklist
+ * violation.
  *
  * **Two flow sources, one per asset class.** ERC20 / WETH9 retention is read
  * from parsed `transfers` (log-derived, identical across backends). Native ETH
@@ -25,19 +25,19 @@ interface AssertNoBundlerRetentionParams {
  * Native ETH is therefore read from `assetChanges`, the cross-backend source of
  * truth for native value: Tenderly derives it from its trace, and
  * `eth_simulateV1` derives it from the synthetic `traceTransfers` logs. Without
- * this, native ETH stuck in bundler3 would pass the guard undetected on the
- * Tenderly path (Cantina finding 1440).
+ * this, native ETH stuck in a bundles contract would pass the guard undetected
+ * on the Tenderly path (Cantina finding 1440).
  *
  * To avoid double-counting native ETH on `eth_simulateV1` — where the same
  * native move exists both as a synthetic `ethAddress` transfer log *and* in the
  * `assetChanges` derived from it — native transfer logs are only used as a
- * fallback for bundler addresses that carry no native `assetChanges` entry.
+ * fallback for bundles addresses that carry no native `assetChanges` entry.
  *
  * @internal Internal pipeline stage, composed by `simulate`; not part of the
  *   package's public API (only re-exported from the internal pipeline barrel).
- * @param params.chainId - Chain whose blue-sdk `bundler3` and `bundles`
- *   registries define the restricted address set. Chains cataloging neither are
- *   skipped (a `logger.warn` records the skip).
+ * @param params.chainId - Chain whose blue-sdk `bundles` registry defines the
+ *   restricted address set. Chains without one are skipped (a `logger.warn`
+ *   records the skip).
  * @param params.transfers - Parsed ERC20 / WETH9 transfer flows (plus the
  *   `eth_simulateV1` synthetic native sentinel) scanned for net retention.
  * @param params.assetChanges - Per-account native-ETH deltas, the cross-backend
@@ -47,7 +47,7 @@ interface AssertNoBundlerRetentionParams {
  * @returns Nothing. Returns silently when no restricted contract retains value
  *   above `DUST_THRESHOLD`; otherwise throws.
  * @throws {BlacklistViolationError} when net inbound flow to a restricted
- *   `bundler3` or `bundles` contract exceeds `DUST_THRESHOLD` for any token.
+ *   `bundles` contract exceeds `DUST_THRESHOLD` for any token.
  */
-export declare function assertNoBundlerRetention(params: AssertNoBundlerRetentionParams): void;
+export declare function assertNoBundlesRetention(params: AssertNoBundlesRetentionParams): void;
 export {};

package/lib/cjs/simulate/pipeline/{bundler-retention.js → bundles-retention.js}

@@ -1,32 +1,32 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertNoBundlerRetention = assertNoBundlerRetention;
+exports.assertNoBundlesRetention = assertNoBundlesRetention;
 const blue_sdk_1 = require("@morpho-org/blue-sdk");
 const morpho_ts_1 = require("@morpho-org/morpho-ts");
 const viem_1 = require("viem");
 const errors_js_1 = require("../../errors.js");
 /**
- * Dust tolerance for bundler retention, in raw token units.
+ * Dust tolerance for standalone bundles retention, in raw token units.
  *
  * 100 units is negligible for 18-decimal tokens (~1e-16). For low-decimal
  * tokens (e.g., 2-decimal stablecoins) this represents ~1.00 token — worth
  * keeping in mind. The threshold is intentionally token-agnostic: its purpose
- * is to absorb rounding noise from bundler3 routing, not to define an
- * acceptable retention amount.
+ * is to absorb routing rounding noise, not to define an acceptable retention
+ * amount.
  */
 const DUST_THRESHOLD = 100n;
 /**
- * Assert that no value is retained by restricted contract addresses — the
- * `bundler3` executor and adapters, plus the standalone `bundles` periphery
- * contracts (`VaultExitBundlesV1`, `VaultBundlesV1`, `BlueBundlesV1`).
+ * Assert that no value is retained by standalone `bundles` periphery contracts
+ * (`VaultExitBundlesV1`, `VaultBundlesV1`, `BlueBundlesV1`).
  *
  * Uses net flow (inbound minus outbound) per (restricted address, token) pair.
  * These contracts legitimately receive tokens as an intermediary (user →
- * bundler → vault), so gross inbound would fire false positives. We only block
- * positive net flow above `DUST_THRESHOLD` — value stuck in a restricted
- * address. Negative net flow means the simulated bundle sweeps a pre-existing or
- * state-overridden balance. That is useful telemetry, but not current-bundle
- * retention, so it is warned instead of raising a blacklist violation.
+ * bundles contract → vault), so gross inbound would fire false positives. We
+ * only block positive net flow above `DUST_THRESHOLD` — value stuck in a
+ * restricted address. Negative net flow means the simulated bundle sweeps a
+ * pre-existing or state-overridden balance. That is useful telemetry, but not
+ * current-bundle retention, so it is warned instead of raising a blacklist
+ * violation.
  *
  * **Two flow sources, one per asset class.** ERC20 / WETH9 retention is read
  * from parsed `transfers` (log-derived, identical across backends). Native ETH
@@ -35,19 +35,19 @@ const DUST_THRESHOLD = 100n;
  * Native ETH is therefore read from `assetChanges`, the cross-backend source of
  * truth for native value: Tenderly derives it from its trace, and
  * `eth_simulateV1` derives it from the synthetic `traceTransfers` logs. Without
- * this, native ETH stuck in bundler3 would pass the guard undetected on the
- * Tenderly path (Cantina finding 1440).
+ * this, native ETH stuck in a bundles contract would pass the guard undetected
+ * on the Tenderly path (Cantina finding 1440).
  *
  * To avoid double-counting native ETH on `eth_simulateV1` — where the same
  * native move exists both as a synthetic `ethAddress` transfer log *and* in the
  * `assetChanges` derived from it — native transfer logs are only used as a
- * fallback for bundler addresses that carry no native `assetChanges` entry.
+ * fallback for bundles addresses that carry no native `assetChanges` entry.
  *
  * @internal Internal pipeline stage, composed by `simulate`; not part of the
  *   package's public API (only re-exported from the internal pipeline barrel).
- * @param params.chainId - Chain whose blue-sdk `bundler3` and `bundles`
- *   registries define the restricted address set. Chains cataloging neither are
- *   skipped (a `logger.warn` records the skip).
+ * @param params.chainId - Chain whose blue-sdk `bundles` registry defines the
+ *   restricted address set. Chains without one are skipped (a `logger.warn`
+ *   records the skip).
  * @param params.transfers - Parsed ERC20 / WETH9 transfer flows (plus the
  *   `eth_simulateV1` synthetic native sentinel) scanned for net retention.
  * @param params.assetChanges - Per-account native-ETH deltas, the cross-backend
@@ -57,15 +57,12 @@ const DUST_THRESHOLD = 100n;
  * @returns Nothing. Returns silently when no restricted contract retains value
  *   above `DUST_THRESHOLD`; otherwise throws.
  * @throws {BlacklistViolationError} when net inbound flow to a restricted
- *   `bundler3` or `bundles` contract exceeds `DUST_THRESHOLD` for any token.
+ *   `bundles` contract exceeds `DUST_THRESHOLD` for any token.
  */
-function assertNoBundlerRetention(params) {
+function assertNoBundlesRetention(params) {
     const { chainId, transfers, assetChanges, logger } = params;
-    // Restricted address set: the full `bundler3` sub-registry (executor + every
-    // adapter) plus the standalone `bundles` periphery contracts
-    // (`VaultExitBundlesV1`, `VaultBundlesV1`, `BlueBundlesV1`). Both families are
-    // transient intermediaries that route user value and must never retain it, so
-    // both are guarded identically.
+    // Standalone bundles contracts are transient intermediaries that route user
+    // value and must never retain it.
     let addresses;
     try {
         addresses = (0, blue_sdk_1.getChainAddresses)(chainId);
@@ -82,18 +79,14 @@ function assertNoBundlerRetention(params) {
         throw error;
     }
     const restrictedAddresses = new Set();
-    if (addresses.bundler3) {
-        for (const addr of Object.values(addresses.bundler3).filter(morpho_ts_1.isDefined))
-            restrictedAddresses.add((0, viem_1.getAddress)(addr));
-    }
     if (addresses.bundles) {
         for (const addr of Object.values(addresses.bundles).filter(morpho_ts_1.isDefined))
             restrictedAddresses.add((0, viem_1.getAddress)(addr));
     }
     if (restrictedAddresses.size === 0) {
-        // blue-sdk knows the chain but cataloged neither bundler3 nor bundles for
-        // it. Treat the same as UnsupportedChainIdError — retention check skipped.
-        logger?.warn("Chain known to blue-sdk but has no bundler3 or bundles config, retention check skipped", { chainId });
+        // blue-sdk knows the chain but cataloged no bundles contracts. Treat the
+        // same as UnsupportedChainIdError — retention check skipped.
+        logger?.warn("Chain known to blue-sdk but has no bundles config, retention check skipped", { chainId });
         return;
     }
     // Map keyed by (address, token) → structured entry. Avoids string parse-back.
@@ -110,8 +103,8 @@ function assertNoBundlerRetention(params) {
         }
     };
     // Native ETH from `assetChanges` (authoritative, cross-backend). Track which
-    // bundlers already have a native entry here so the transfer-log pass below
-    // does not re-add the same native move on `eth_simulateV1`.
+    // restricted contracts already have a native entry here so the transfer-log
+    // pass below does not re-add the same native move on `eth_simulateV1`.
     const nativeFromAssetChanges = new Set();
     for (const { account, changes } of assetChanges) {
         if (!restrictedAddresses.has(account))
@@ -124,9 +117,9 @@ function assertNoBundlerRetention(params) {
         }
     }
     // ERC20 / WETH9 retention from transfer logs. Native ETH transfers (the
-    // `eth_simulateV1` synthetic sentinel) only backfill a bundler endpoint that
-    // is absent from `nativeFromAssetChanges`, so native is never summed on top
-    // of the `assetChanges` value already recorded for that address.
+    // `eth_simulateV1` synthetic sentinel) only backfill a restricted endpoint
+    // that is absent from `nativeFromAssetChanges`, so native is never summed on
+    // top of the `assetChanges` value already recorded for that address.
     const usesAssetChangeNative = (t, addr) => t.token === viem_1.ethAddress && nativeFromAssetChanges.has(addr.toLowerCase());
     for (const t of transfers) {
         if (restrictedAddresses.has(t.to) && !usesAssetChangeNative(t, t.to))
@@ -137,7 +130,7 @@ function assertNoBundlerRetention(params) {
     const entries = [...flow.values()];
     const drained = entries.filter((e) => e.netChange < -DUST_THRESHOLD);
     if (drained.length > 0) {
-        logger?.warn("Simulation detected pre-existing balance being swept from a restricted bundler or bundles contract", {
+        logger?.warn("Simulation detected pre-existing balance being swept from a restricted bundles contract", {
             changes: drained.map((e) => ({
                 address: e.address,
                 token: e.token,
@@ -147,7 +140,7 @@ function assertNoBundlerRetention(params) {
     }
     const retained = entries.filter((e) => e.netChange > DUST_THRESHOLD);
     if (retained.length > 0) {
-        throw new errors_js_1.BlacklistViolationError("Simulation detected asset transfers retained by restricted bundler or bundles contracts", retained.map((e) => ({
+        throw new errors_js_1.BlacklistViolationError("Simulation detected asset transfers retained by restricted bundles contracts", retained.map((e) => ({
             address: e.address,
             token: e.token,
             netRetained: e.netChange.toString(),

package/lib/cjs/simulate/pipeline/index.d.ts

@@ -1,4 +1,4 @@
 export { buildSimulationTxs } from "./build-simulation-txs.js";
-export { assertNoBundlerRetention } from "./bundler-retention.js";
+export { assertNoBundlesRetention } from "./bundles-retention.js";
 export { executeSimulation } from "./execute-simulation.js";
 export { validateInput } from "./validate-input.js";

package/lib/cjs/simulate/pipeline/index.js

@@ -1,10 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateInput = exports.executeSimulation = exports.assertNoBundlerRetention = exports.buildSimulationTxs = void 0;
+exports.validateInput = exports.executeSimulation = exports.assertNoBundlesRetention = exports.buildSimulationTxs = void 0;
 var build_simulation_txs_js_1 = require("./build-simulation-txs.js");
 Object.defineProperty(exports, "buildSimulationTxs", { enumerable: true, get: function () { return build_simulation_txs_js_1.buildSimulationTxs; } });
-var bundler_retention_js_1 = require("./bundler-retention.js");
-Object.defineProperty(exports, "assertNoBundlerRetention", { enumerable: true, get: function () { return bundler_retention_js_1.assertNoBundlerRetention; } });
+var bundles_retention_js_1 = require("./bundles-retention.js");
+Object.defineProperty(exports, "assertNoBundlesRetention", { enumerable: true, get: function () { return bundles_retention_js_1.assertNoBundlesRetention; } });
 var execute_simulation_js_1 = require("./execute-simulation.js");
 Object.defineProperty(exports, "executeSimulation", { enumerable: true, get: function () { return execute_simulation_js_1.executeSimulation; } });
 var validate_input_js_1 = require("./validate-input.js");

package/lib/cjs/simulate/simulate.d.ts

@@ -7,7 +7,7 @@ import type { SimulateParams, SimulationConfig, SimulationResult } from "../type
  * budget → parses ERC20 transfers and WETH9 events from per-tx logs, restricting WETH9
  * events to the registered wrapped-native token, rejecting them on known tokenless chains,
  * and retaining signature-based parsing for unknown chains → asserts no funds are retained
- * by `bundler3` or the standalone `bundles` periphery contracts → returns the full result
+ * by standalone `bundles` periphery contracts → returns the full result
  * set. The caller reads whichever fields they need:
  *
  * - `transfers` → user-facing preview / server-side verification.
@@ -34,8 +34,8 @@ import type { SimulateParams, SimulationConfig, SimulationResult } from "../type
  * @throws {UnsupportedChainError} when the chain is not configured for any backend.
  * @throws {SimulationRevertedError} when the bundle reverts on either backend.
  * @throws {BlacklistViolationError} when the simulation leaves value retained beyond
- *   the dust threshold by a restricted `bundler3` address or a `bundles` periphery
- *   contract (VaultExitBundlesV1, VaultBundlesV1, BlueBundlesV1). Never bypassable.
+ *   the dust threshold by a `bundles` periphery contract (VaultExitBundlesV1,
+ *   VaultBundlesV1, BlueBundlesV1). Never bypassable.
  * @throws {ExternalServiceError} (a) when both backends are unavailable within the
  *   timeout budget, or (b) when a backend returns a `calls` array whose length does
  *   not match the resolved `simulationTxs` — refusing to map transfers with mismatched

package/lib/cjs/simulate/simulate.js

@@ -13,7 +13,7 @@ const index_js_2 = require("./pipeline/index.js");
  * budget → parses ERC20 transfers and WETH9 events from per-tx logs, restricting WETH9
  * events to the registered wrapped-native token, rejecting them on known tokenless chains,
  * and retaining signature-based parsing for unknown chains → asserts no funds are retained
- * by `bundler3` or the standalone `bundles` periphery contracts → returns the full result
+ * by standalone `bundles` periphery contracts → returns the full result
  * set. The caller reads whichever fields they need:
  *
  * - `transfers` → user-facing preview / server-side verification.
@@ -40,8 +40,8 @@ const index_js_2 = require("./pipeline/index.js");
  * @throws {UnsupportedChainError} when the chain is not configured for any backend.
  * @throws {SimulationRevertedError} when the bundle reverts on either backend.
  * @throws {BlacklistViolationError} when the simulation leaves value retained beyond
- *   the dust threshold by a restricted `bundler3` address or a `bundles` periphery
- *   contract (VaultExitBundlesV1, VaultBundlesV1, BlueBundlesV1). Never bypassable.
+ *   the dust threshold by a `bundles` periphery contract (VaultExitBundlesV1,
+ *   VaultBundlesV1, BlueBundlesV1). Never bypassable.
  * @throws {ExternalServiceError} (a) when both backends are unavailable within the
  *   timeout budget, or (b) when a backend returns a `calls` array whose length does
  *   not match the resolved `simulationTxs` — refusing to map transfers with mismatched
@@ -88,7 +88,7 @@ async function simulate(config, params) {
         wNative,
         logger: config.logger,
     });
-    (0, index_js_2.assertNoBundlerRetention)({
+    (0, index_js_2.assertNoBundlesRetention)({
         chainId: params.chainId,
         transfers,
         assetChanges: result.assetChanges,

package/lib/esm/errors.d.ts

@@ -19,7 +19,7 @@ interface RetainedAsset {
     token: string | undefined;
     netRetained: string;
 }
-/** Funds would flow to restricted bundler3 or bundles contract addresses. Never bypassable. */
+/** Funds would flow to restricted standalone bundles contract addresses. Never bypassable. */
 export declare class BlacklistViolationError extends SimulationPackageError {
     readonly assetChanges?: RetainedAsset[] | undefined;
     readonly code = "BLACKLIST_ERROR";

package/lib/esm/errors.js

@@ -19,7 +19,7 @@ export class SimulationRevertedError extends SimulationPackageError {
         this.details = details;
     }
 }
-/** Funds would flow to restricted bundler3 or bundles contract addresses. Never bypassable. */
+/** Funds would flow to restricted standalone bundles contract addresses. Never bypassable. */
 export class BlacklistViolationError extends SimulationPackageError {
     assetChanges;
     code = "BLACKLIST_ERROR";

package/lib/esm/simulate/asset-changes.d.ts

@@ -13,7 +13,7 @@ export interface AssetChangeEntry {
  * any real token address. `eth_simulateV1` synthesizes native moves from the
  * sentinel `0xeee…eee`, and Tenderly may echo it — in checksummed or any other
  * case — as an asset change's `contractAddress`. Native ETH is keyed by the exact
- * `ethAddress` constant here and in the bundler-retention guard, so a checksummed
+ * `ethAddress` constant here and in the bundles-retention guard, so a checksummed
  * sentinel would land on a separate map key and silently escape retention checks.
  * This is the single source of truth for token normalization shared by the
  * transfer-log parser and the Tenderly asset-change mapper.

package/lib/esm/simulate/asset-changes.js

@@ -4,7 +4,7 @@ import { ethAddress, getAddress } from "viem";
  * any real token address. `eth_simulateV1` synthesizes native moves from the
  * sentinel `0xeee…eee`, and Tenderly may echo it — in checksummed or any other
  * case — as an asset change's `contractAddress`. Native ETH is keyed by the exact
- * `ethAddress` constant here and in the bundler-retention guard, so a checksummed
+ * `ethAddress` constant here and in the bundles-retention guard, so a checksummed
  * sentinel would land on a separate map key and silently escape retention checks.
  * This is the single source of truth for token normalization shared by the
  * transfer-log parser and the Tenderly asset-change mapper.

package/lib/esm/simulate/parsing/transfers.d.ts

@@ -36,7 +36,7 @@ export declare const DEPOSIT_TOPIC = "0xe1fffcc4923d04b559f4d29a8bfc6cda04eb5b0d
  * atomically inside a single call frame. A **non-canonical wrapped-native**
  * that splits these emissions across two txs in the same bundle would leave
  * a phantom zero-address `Transfer` in the parsed output, which can be summed
- * by `assertNoBundlerRetention` and produce a false `BlacklistViolationError`.
+ * by `assertNoBundlesRetention` and produce a false `BlacklistViolationError`.
  * When its zero-address `Transfer` misses same-tx dedup, the parser emits a
  * `warn` so the assumption break is observable before it reaches retention.
  * None of `morpho-sdk`'s currently supported chains require cross-tx dedup;

package/lib/esm/simulate/parsing/transfers.js

@@ -41,7 +41,7 @@ const UINT256_HEX_LENGTH = 66; // "0x" + 32 bytes
  * atomically inside a single call frame. A **non-canonical wrapped-native**
  * that splits these emissions across two txs in the same bundle would leave
  * a phantom zero-address `Transfer` in the parsed output, which can be summed
- * by `assertNoBundlerRetention` and produce a false `BlacklistViolationError`.
+ * by `assertNoBundlesRetention` and produce a false `BlacklistViolationError`.
  * When its zero-address `Transfer` misses same-tx dedup, the parser emits a
  * `warn` so the assumption break is observable before it reaches retention.
  * None of `morpho-sdk`'s currently supported chains require cross-tx dedup;

package/lib/esm/simulate/pipeline/{bundler-retention.d.ts → bundles-retention.d.ts}

@@ -1,22 +1,22 @@
 import type { AccountAssetChanges, SimulationLogger, Transfer } from "../../types.js";
-interface AssertNoBundlerRetentionParams {
+interface AssertNoBundlesRetentionParams {
     chainId: number;
     transfers: Transfer[];
     assetChanges: readonly AccountAssetChanges[];
     logger?: SimulationLogger;
 }
 /**
- * Assert that no value is retained by restricted contract addresses — the
- * `bundler3` executor and adapters, plus the standalone `bundles` periphery
- * contracts (`VaultExitBundlesV1`, `VaultBundlesV1`, `BlueBundlesV1`).
+ * Assert that no value is retained by standalone `bundles` periphery contracts
+ * (`VaultExitBundlesV1`, `VaultBundlesV1`, `BlueBundlesV1`).
  *
  * Uses net flow (inbound minus outbound) per (restricted address, token) pair.
  * These contracts legitimately receive tokens as an intermediary (user →
- * bundler → vault), so gross inbound would fire false positives. We only block
- * positive net flow above `DUST_THRESHOLD` — value stuck in a restricted
- * address. Negative net flow means the simulated bundle sweeps a pre-existing or
- * state-overridden balance. That is useful telemetry, but not current-bundle
- * retention, so it is warned instead of raising a blacklist violation.
+ * bundles contract → vault), so gross inbound would fire false positives. We
+ * only block positive net flow above `DUST_THRESHOLD` — value stuck in a
+ * restricted address. Negative net flow means the simulated bundle sweeps a
+ * pre-existing or state-overridden balance. That is useful telemetry, but not
+ * current-bundle retention, so it is warned instead of raising a blacklist
+ * violation.
  *
  * **Two flow sources, one per asset class.** ERC20 / WETH9 retention is read
  * from parsed `transfers` (log-derived, identical across backends). Native ETH
@@ -25,19 +25,19 @@ interface AssertNoBundlerRetentionParams {
  * Native ETH is therefore read from `assetChanges`, the cross-backend source of
  * truth for native value: Tenderly derives it from its trace, and
  * `eth_simulateV1` derives it from the synthetic `traceTransfers` logs. Without
- * this, native ETH stuck in bundler3 would pass the guard undetected on the
- * Tenderly path (Cantina finding 1440).
+ * this, native ETH stuck in a bundles contract would pass the guard undetected
+ * on the Tenderly path (Cantina finding 1440).
  *
  * To avoid double-counting native ETH on `eth_simulateV1` — where the same
  * native move exists both as a synthetic `ethAddress` transfer log *and* in the
  * `assetChanges` derived from it — native transfer logs are only used as a
- * fallback for bundler addresses that carry no native `assetChanges` entry.
+ * fallback for bundles addresses that carry no native `assetChanges` entry.
  *
  * @internal Internal pipeline stage, composed by `simulate`; not part of the
  *   package's public API (only re-exported from the internal pipeline barrel).
- * @param params.chainId - Chain whose blue-sdk `bundler3` and `bundles`
- *   registries define the restricted address set. Chains cataloging neither are
- *   skipped (a `logger.warn` records the skip).
+ * @param params.chainId - Chain whose blue-sdk `bundles` registry defines the
+ *   restricted address set. Chains without one are skipped (a `logger.warn`
+ *   records the skip).
  * @param params.transfers - Parsed ERC20 / WETH9 transfer flows (plus the
  *   `eth_simulateV1` synthetic native sentinel) scanned for net retention.
  * @param params.assetChanges - Per-account native-ETH deltas, the cross-backend
@@ -47,7 +47,7 @@ interface AssertNoBundlerRetentionParams {
  * @returns Nothing. Returns silently when no restricted contract retains value
  *   above `DUST_THRESHOLD`; otherwise throws.
  * @throws {BlacklistViolationError} when net inbound flow to a restricted
- *   `bundler3` or `bundles` contract exceeds `DUST_THRESHOLD` for any token.
+ *   `bundles` contract exceeds `DUST_THRESHOLD` for any token.
  */
-export declare function assertNoBundlerRetention(params: AssertNoBundlerRetentionParams): void;
+export declare function assertNoBundlesRetention(params: AssertNoBundlesRetentionParams): void;
 export {};

package/lib/esm/simulate/pipeline/{bundler-retention.js → bundles-retention.js}

@@ -3,27 +3,27 @@ import { isDefined } from "@morpho-org/morpho-ts";
 import { ethAddress, getAddress } from "viem";
 import { BlacklistViolationError } from "../../errors.js";
 /**
- * Dust tolerance for bundler retention, in raw token units.
+ * Dust tolerance for standalone bundles retention, in raw token units.
  *
  * 100 units is negligible for 18-decimal tokens (~1e-16). For low-decimal
  * tokens (e.g., 2-decimal stablecoins) this represents ~1.00 token — worth
  * keeping in mind. The threshold is intentionally token-agnostic: its purpose
- * is to absorb rounding noise from bundler3 routing, not to define an
- * acceptable retention amount.
+ * is to absorb routing rounding noise, not to define an acceptable retention
+ * amount.
  */
 const DUST_THRESHOLD = 100n;
 /**
- * Assert that no value is retained by restricted contract addresses — the
- * `bundler3` executor and adapters, plus the standalone `bundles` periphery
- * contracts (`VaultExitBundlesV1`, `VaultBundlesV1`, `BlueBundlesV1`).
+ * Assert that no value is retained by standalone `bundles` periphery contracts
+ * (`VaultExitBundlesV1`, `VaultBundlesV1`, `BlueBundlesV1`).
  *
  * Uses net flow (inbound minus outbound) per (restricted address, token) pair.
  * These contracts legitimately receive tokens as an intermediary (user →
- * bundler → vault), so gross inbound would fire false positives. We only block
- * positive net flow above `DUST_THRESHOLD` — value stuck in a restricted
- * address. Negative net flow means the simulated bundle sweeps a pre-existing or
- * state-overridden balance. That is useful telemetry, but not current-bundle
- * retention, so it is warned instead of raising a blacklist violation.
+ * bundles contract → vault), so gross inbound would fire false positives. We
+ * only block positive net flow above `DUST_THRESHOLD` — value stuck in a
+ * restricted address. Negative net flow means the simulated bundle sweeps a
+ * pre-existing or state-overridden balance. That is useful telemetry, but not
+ * current-bundle retention, so it is warned instead of raising a blacklist
+ * violation.
  *
  * **Two flow sources, one per asset class.** ERC20 / WETH9 retention is read
  * from parsed `transfers` (log-derived, identical across backends). Native ETH
@@ -32,19 +32,19 @@ const DUST_THRESHOLD = 100n;
  * Native ETH is therefore read from `assetChanges`, the cross-backend source of
  * truth for native value: Tenderly derives it from its trace, and
  * `eth_simulateV1` derives it from the synthetic `traceTransfers` logs. Without
- * this, native ETH stuck in bundler3 would pass the guard undetected on the
- * Tenderly path (Cantina finding 1440).
+ * this, native ETH stuck in a bundles contract would pass the guard undetected
+ * on the Tenderly path (Cantina finding 1440).
  *
  * To avoid double-counting native ETH on `eth_simulateV1` — where the same
  * native move exists both as a synthetic `ethAddress` transfer log *and* in the
  * `assetChanges` derived from it — native transfer logs are only used as a
- * fallback for bundler addresses that carry no native `assetChanges` entry.
+ * fallback for bundles addresses that carry no native `assetChanges` entry.
  *
  * @internal Internal pipeline stage, composed by `simulate`; not part of the
  *   package's public API (only re-exported from the internal pipeline barrel).
- * @param params.chainId - Chain whose blue-sdk `bundler3` and `bundles`
- *   registries define the restricted address set. Chains cataloging neither are
- *   skipped (a `logger.warn` records the skip).
+ * @param params.chainId - Chain whose blue-sdk `bundles` registry defines the
+ *   restricted address set. Chains without one are skipped (a `logger.warn`
+ *   records the skip).
  * @param params.transfers - Parsed ERC20 / WETH9 transfer flows (plus the
  *   `eth_simulateV1` synthetic native sentinel) scanned for net retention.
  * @param params.assetChanges - Per-account native-ETH deltas, the cross-backend
@@ -54,15 +54,12 @@ const DUST_THRESHOLD = 100n;
  * @returns Nothing. Returns silently when no restricted contract retains value
  *   above `DUST_THRESHOLD`; otherwise throws.
  * @throws {BlacklistViolationError} when net inbound flow to a restricted
- *   `bundler3` or `bundles` contract exceeds `DUST_THRESHOLD` for any token.
+ *   `bundles` contract exceeds `DUST_THRESHOLD` for any token.
  */
-export function assertNoBundlerRetention(params) {
+export function assertNoBundlesRetention(params) {
     const { chainId, transfers, assetChanges, logger } = params;
-    // Restricted address set: the full `bundler3` sub-registry (executor + every
-    // adapter) plus the standalone `bundles` periphery contracts
-    // (`VaultExitBundlesV1`, `VaultBundlesV1`, `BlueBundlesV1`). Both families are
-    // transient intermediaries that route user value and must never retain it, so
-    // both are guarded identically.
+    // Standalone bundles contracts are transient intermediaries that route user
+    // value and must never retain it.
     let addresses;
     try {
         addresses = getChainAddresses(chainId);
@@ -79,18 +76,14 @@ export function assertNoBundlerRetention(params) {
         throw error;
     }
     const restrictedAddresses = new Set();
-    if (addresses.bundler3) {
-        for (const addr of Object.values(addresses.bundler3).filter(isDefined))
-            restrictedAddresses.add(getAddress(addr));
-    }
     if (addresses.bundles) {
         for (const addr of Object.values(addresses.bundles).filter(isDefined))
             restrictedAddresses.add(getAddress(addr));
     }
     if (restrictedAddresses.size === 0) {
-        // blue-sdk knows the chain but cataloged neither bundler3 nor bundles for
-        // it. Treat the same as UnsupportedChainIdError — retention check skipped.
-        logger?.warn("Chain known to blue-sdk but has no bundler3 or bundles config, retention check skipped", { chainId });
+        // blue-sdk knows the chain but cataloged no bundles contracts. Treat the
+        // same as UnsupportedChainIdError — retention check skipped.
+        logger?.warn("Chain known to blue-sdk but has no bundles config, retention check skipped", { chainId });
         return;
     }
     // Map keyed by (address, token) → structured entry. Avoids string parse-back.
@@ -107,8 +100,8 @@ export function assertNoBundlerRetention(params) {
         }
     };
     // Native ETH from `assetChanges` (authoritative, cross-backend). Track which
-    // bundlers already have a native entry here so the transfer-log pass below
-    // does not re-add the same native move on `eth_simulateV1`.
+    // restricted contracts already have a native entry here so the transfer-log
+    // pass below does not re-add the same native move on `eth_simulateV1`.
     const nativeFromAssetChanges = new Set();
     for (const { account, changes } of assetChanges) {
         if (!restrictedAddresses.has(account))
@@ -121,9 +114,9 @@ export function assertNoBundlerRetention(params) {
         }
     }
     // ERC20 / WETH9 retention from transfer logs. Native ETH transfers (the
-    // `eth_simulateV1` synthetic sentinel) only backfill a bundler endpoint that
-    // is absent from `nativeFromAssetChanges`, so native is never summed on top
-    // of the `assetChanges` value already recorded for that address.
+    // `eth_simulateV1` synthetic sentinel) only backfill a restricted endpoint
+    // that is absent from `nativeFromAssetChanges`, so native is never summed on
+    // top of the `assetChanges` value already recorded for that address.
     const usesAssetChangeNative = (t, addr) => t.token === ethAddress && nativeFromAssetChanges.has(addr.toLowerCase());
     for (const t of transfers) {
         if (restrictedAddresses.has(t.to) && !usesAssetChangeNative(t, t.to))
@@ -134,7 +127,7 @@ export function assertNoBundlerRetention(params) {
     const entries = [...flow.values()];
     const drained = entries.filter((e) => e.netChange < -DUST_THRESHOLD);
     if (drained.length > 0) {
-        logger?.warn("Simulation detected pre-existing balance being swept from a restricted bundler or bundles contract", {
+        logger?.warn("Simulation detected pre-existing balance being swept from a restricted bundles contract", {
             changes: drained.map((e) => ({
                 address: e.address,
                 token: e.token,
@@ -144,7 +137,7 @@ export function assertNoBundlerRetention(params) {
     }
     const retained = entries.filter((e) => e.netChange > DUST_THRESHOLD);
     if (retained.length > 0) {
-        throw new BlacklistViolationError("Simulation detected asset transfers retained by restricted bundler or bundles contracts", retained.map((e) => ({
+        throw new BlacklistViolationError("Simulation detected asset transfers retained by restricted bundles contracts", retained.map((e) => ({
             address: e.address,
             token: e.token,
             netRetained: e.netChange.toString(),

package/lib/esm/simulate/pipeline/index.d.ts

@@ -1,4 +1,4 @@
 export { buildSimulationTxs } from "./build-simulation-txs.js";
-export { assertNoBundlerRetention } from "./bundler-retention.js";
+export { assertNoBundlesRetention } from "./bundles-retention.js";
 export { executeSimulation } from "./execute-simulation.js";
 export { validateInput } from "./validate-input.js";

package/lib/esm/simulate/pipeline/index.js

@@ -1,4 +1,4 @@
 export { buildSimulationTxs } from "./build-simulation-txs.js";
-export { assertNoBundlerRetention } from "./bundler-retention.js";
+export { assertNoBundlesRetention } from "./bundles-retention.js";
 export { executeSimulation } from "./execute-simulation.js";
 export { validateInput } from "./validate-input.js";

package/lib/esm/simulate/simulate.d.ts

@@ -7,7 +7,7 @@ import type { SimulateParams, SimulationConfig, SimulationResult } from "../type
  * budget → parses ERC20 transfers and WETH9 events from per-tx logs, restricting WETH9
  * events to the registered wrapped-native token, rejecting them on known tokenless chains,
  * and retaining signature-based parsing for unknown chains → asserts no funds are retained
- * by `bundler3` or the standalone `bundles` periphery contracts → returns the full result
+ * by standalone `bundles` periphery contracts → returns the full result
  * set. The caller reads whichever fields they need:
  *
  * - `transfers` → user-facing preview / server-side verification.
@@ -34,8 +34,8 @@ import type { SimulateParams, SimulationConfig, SimulationResult } from "../type
  * @throws {UnsupportedChainError} when the chain is not configured for any backend.
  * @throws {SimulationRevertedError} when the bundle reverts on either backend.
  * @throws {BlacklistViolationError} when the simulation leaves value retained beyond
- *   the dust threshold by a restricted `bundler3` address or a `bundles` periphery
- *   contract (VaultExitBundlesV1, VaultBundlesV1, BlueBundlesV1). Never bypassable.
+ *   the dust threshold by a `bundles` periphery contract (VaultExitBundlesV1,
+ *   VaultBundlesV1, BlueBundlesV1). Never bypassable.
  * @throws {ExternalServiceError} (a) when both backends are unavailable within the
  *   timeout budget, or (b) when a backend returns a `calls` array whose length does
  *   not match the resolved `simulationTxs` — refusing to map transfers with mismatched

package/lib/esm/simulate/simulate.js

@@ -1,7 +1,7 @@
 import { _try, getChainAddresses, UnsupportedChainIdError, } from "@morpho-org/blue-sdk";
 import { ExternalServiceError } from "../errors.js";
 import { parseTransfers } from "./parsing/index.js";
-import { assertNoBundlerRetention, buildSimulationTxs, executeSimulation, validateInput, } from "./pipeline/index.js";
+import { assertNoBundlesRetention, buildSimulationTxs, executeSimulation, validateInput, } from "./pipeline/index.js";
 /**
  * Simulate a bundle of EVM transactions.
  *
@@ -10,7 +10,7 @@ import { assertNoBundlerRetention, buildSimulationTxs, executeSimulation, valida
  * budget → parses ERC20 transfers and WETH9 events from per-tx logs, restricting WETH9
  * events to the registered wrapped-native token, rejecting them on known tokenless chains,
  * and retaining signature-based parsing for unknown chains → asserts no funds are retained
- * by `bundler3` or the standalone `bundles` periphery contracts → returns the full result
+ * by standalone `bundles` periphery contracts → returns the full result
  * set. The caller reads whichever fields they need:
  *
  * - `transfers` → user-facing preview / server-side verification.
@@ -37,8 +37,8 @@ import { assertNoBundlerRetention, buildSimulationTxs, executeSimulation, valida
  * @throws {UnsupportedChainError} when the chain is not configured for any backend.
  * @throws {SimulationRevertedError} when the bundle reverts on either backend.
  * @throws {BlacklistViolationError} when the simulation leaves value retained beyond
- *   the dust threshold by a restricted `bundler3` address or a `bundles` periphery
- *   contract (VaultExitBundlesV1, VaultBundlesV1, BlueBundlesV1). Never bypassable.
+ *   the dust threshold by a `bundles` periphery contract (VaultExitBundlesV1,
+ *   VaultBundlesV1, BlueBundlesV1). Never bypassable.
  * @throws {ExternalServiceError} (a) when both backends are unavailable within the
  *   timeout budget, or (b) when a backend returns a `calls` array whose length does
  *   not match the resolved `simulationTxs` — refusing to map transfers with mismatched
@@ -85,7 +85,7 @@ export async function simulate(config, params) {
         wNative,
         logger: config.logger,
     });
-    assertNoBundlerRetention({
+    assertNoBundlesRetention({
         chainId: params.chainId,
         transfers,
         assetChanges: result.assetChanges,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@morpho-org/evm-simulation",
   "description": "EVM simulation engine for Morpho transactions.",
-  "version": "4.1.9",
+  "version": "4.2.0-next.1",
   "author": "Morpho Association <contact@morpho.org>",
   "contributors": [
     "Rubilmax <rmilon@gmail.com>"
@@ -25,8 +25,8 @@
   ],
   "dependencies": {
     "zod": "^4.4.3",
-    "@morpho-org/blue-sdk": "^6.10.0",
-    "@morpho-org/morpho-ts": "^2.14.0"
+    "@morpho-org/blue-sdk": "^7.0.0-next.1",
+    "@morpho-org/morpho-ts": "^3.0.0-next.0"
   },
   "peerDependencies": {
     "viem": "^2.0.0"