@rhea-finance/cross-chain-aggregation-dex 2.0.4 → 2.0.6

package/dist/index.js

@@ -97,14 +97,49 @@ var ApiClient = class {
       retryableOperation: true,
       query: {
         sender: params.sender,
+        mode: params.mode,
         pageNumber: params.pageNumber,
         pageSize: params.pageSize
-      }
+      },
+      ...params.mode === "confidential" && params.walletToken ? { authenticationToken: params.walletToken } : {}
+    });
+  }
+  createHistoryAuthChallenge(body, options = {}) {
+    return this.request("/api/swap/history/auth/challenge", "history", {
+      ...options,
+      method: "POST",
+      body
+    });
+  }
+  verifyHistoryAuthChallenge(body, options = {}) {
+    return this.request("/api/swap/history/auth/verify", "history", {
+      ...options,
+      method: "POST",
+      body
+    });
+  }
+  getFromTokenRows(chainId, options = {}) {
+    return this.request("/get_chain_prices", "tokens", {
+      ...options,
+      method: "GET",
+      retryableOperation: true,
+      query: { chain: chainId }
+    });
+  }
+  getCrossChainToTokenRows(chainId, options = {}) {
+    return this.request("/api/swap/supported_to_tokens", "tokens", {
+      ...options,
+      method: "GET",
+      retryableOperation: true,
+      query: { chain: chainId }
     });
   }
   async request(path, stage, options) {
     const url = this.buildUrl(path, options.query);
-    const headers = await this.buildHeaders(options.idempotencyKey);
+    const headers = await this.buildHeaders(
+      options.idempotencyKey,
+      options.authenticationToken
+    );
     const retry = this.retryConfig();
     let attempt = 1;
     for (; ; ) {
@@ -256,12 +291,13 @@ var ApiClient = class {
     const suffix = search.toString();
     return suffix ? `${this.baseUrl}${path}?${suffix}` : `${this.baseUrl}${path}`;
   }
-  async buildHeaders(idempotencyKey) {
+  async buildHeaders(idempotencyKey, authenticationToken) {
     const configured = typeof this.config.headers === "function" ? await this.config.headers() : this.config.headers ?? {};
     const token = this.config.getAccessToken ? await this.config.getAccessToken() : this.config.apiKey;
     return {
       "Content-Type": "application/json",
       ...token ? { Authorization: `Bearer ${token}` } : {},
+      ...authenticationToken ? { Authentication: `Bearer ${authenticationToken}` } : {},
       ...idempotencyKey ? { "Idempotency-Key": idempotencyKey } : {},
       ...configured
     };
@@ -637,7 +673,7 @@ function normalizeBuild(raw, executionId = createExecutionId(), request) {
     const lane = laneFromChainType(common.chainType, fromChain);
     assertLaneMatchesChain(lane, fromChain);
     const execution = normalizeExecution(raw, lane, fromChain);
-    const order = normalizeOrder(raw, execution);
+    const order = normalizeOrder(raw, execution, request);
     const deposit = normalizeDeposit(raw.deposit);
     return {
       executionId,
@@ -868,11 +904,12 @@ function assertKind(actual, allowed) {
     );
   }
 }
-function normalizeOrder(raw, execution) {
+function normalizeOrder(raw, execution, request) {
   const depositOrderId = readRecordString(raw.deposit, "orderId");
-  const orderId = raw.orderId ?? depositOrderId;
-  if (!orderId) return void 0;
   const router = raw.statusRouter ?? (execution.kind === "evm-signature" ? execution.request.router : void 0) ?? raw.router;
+  const confidentialNearIntentsStatusKey = request?.confidentiality === "basic" && router.toLowerCase().includes("nearintents") ? readRecordString(raw.deposit, "depositAddress") : void 0;
+  const orderId = raw.orderId ?? depositOrderId ?? confidentialNearIntentsStatusKey;
+  if (!orderId) return void 0;
   const chainId = execution.kind === "evm-signature" ? String(execution.request.chainId) : execution.kind === "evm-transaction" ? String(execution.tx.chainId) : void 0;
   return { orderId, router, ...chainId ? { chainId } : {} };
 }
@@ -932,6 +969,8 @@ function assertBaseUnitAmount(value) {
 
 // src/normalizers/quote.ts
 var DEFAULT_QUOTE_WAITING_TIME_MS = 3e3;
+var DEFAULT_SAME_CHAIN_TIMEOUT_MS = 500;
+var DEFAULT_CROSS_CHAIN_TIMEOUT_MS = 3e3;
 function serializeQuoteRequest(request) {
   validateQuoteRequest(request);
   return {
@@ -943,6 +982,9 @@ function serializeQuoteRequest(request) {
     amountIn: request.amountIn,
     slippage: request.slippageBps,
     quoteWaitingTimeMs: request.quoteWaitingTimeMs ?? DEFAULT_QUOTE_WAITING_TIME_MS,
+    sameChainTimeoutMs: request.sameChainTimeoutMs ?? DEFAULT_SAME_CHAIN_TIMEOUT_MS,
+    crossChainTimeoutMs: request.crossChainTimeoutMs ?? DEFAULT_CROSS_CHAIN_TIMEOUT_MS,
+    ...request.confidentiality ? { confidentiality: request.confidentiality } : {},
     sender: request.sender.trim(),
     ...request.recipient?.trim() ? { recipient: request.recipient.trim() } : {}
   };
@@ -953,7 +995,11 @@ function normalizeQuote(request, raw, receivedAt = Date.now()) {
     throw invalidQuote("Quote response does not contain a valid best route");
   }
   const quoteId = readOptionalString(raw.bestQuote.quoteId);
-  const apiRequest = Object.freeze({ ...serializeQuoteRequest(request) });
+  const apiRequest = { ...serializeQuoteRequest(request) };
+  delete apiRequest.quoteWaitingTimeMs;
+  delete apiRequest.sameChainTimeoutMs;
+  delete apiRequest.crossChainTimeoutMs;
+  Object.freeze(apiRequest);
   const buildContext = Object.freeze({
     request: apiRequest,
     router: bestRoute.router,
@@ -1021,6 +1067,14 @@ function validateQuoteRequest(request) {
       "quoteWaitingTimeMs must be a non-negative integer"
     );
   }
+  validateQuoteTimingParameter(
+    request.sameChainTimeoutMs,
+    "sameChainTimeoutMs"
+  );
+  validateQuoteTimingParameter(
+    request.crossChainTimeoutMs,
+    "crossChainTimeoutMs"
+  );
   if (!request.sender.trim()) {
     throw new SwapSdkError(
       "INVALID_REQUEST",
@@ -1043,6 +1097,15 @@ function validateQuoteRequest(request) {
     );
   }
 }
+function validateQuoteTimingParameter(value, field) {
+  if (value !== void 0 && (!Number.isFinite(value) || !Number.isInteger(value) || value < 0)) {
+    throw new SwapSdkError(
+      "INVALID_REQUEST",
+      "quote",
+      `${field} must be a non-negative integer`
+    );
+  }
+}
 function normalizeRoute(raw, required) {
   const router = readOptionalString(raw.router);
   const amountOutValue = raw.amountOut ?? raw.estimatedOut;
@@ -1215,6 +1278,243 @@ function normalizeTimestamp(value) {
   return Number.isNaN(date.getTime()) ? void 0 : date.toISOString();
 }
 
+// src/normalizers/tokens.ts
+var TOKEN_LIST_CHAIN_METADATA = /* @__PURE__ */ new Map([
+  [1, { chain: "1", blockchain: "eth" }],
+  [10, { chain: "10", blockchain: "op" }],
+  [43114, { chain: "43114", blockchain: "avax" }],
+  [4663, { chain: "4663", blockchain: "robinhood" }],
+  [747474, { chain: "747474", blockchain: "katana" }],
+  [146, { chain: "146", blockchain: "sonic" }],
+  [130, { chain: "130", blockchain: "unichain" }],
+  [1672, { chain: "1672", blockchain: "pharos" }],
+  [4217, { chain: "4217", blockchain: "tempo" }],
+  [56, { chain: "56", blockchain: "bsc" }],
+  [100, { chain: "100", blockchain: "gnosis" }],
+  [137, { chain: "137", blockchain: "pol" }],
+  [143, { chain: "143", blockchain: "monad" }],
+  [196, { chain: "196", blockchain: "xlayer" }],
+  [8453, { chain: "8453", blockchain: "base" }],
+  [9745, { chain: "9745", blockchain: "plasma" }],
+  [42161, { chain: "42161", blockchain: "arb" }],
+  [80094, { chain: "80094", blockchain: "bera" }],
+  [195, { chain: "tron", blockchain: "tron" }],
+  [501, { chain: "solana", blockchain: "sol" }],
+  [784, { chain: "sui", blockchain: "sui" }],
+  [900001, { chain: "near", blockchain: "near" }],
+  [900002, { chain: "btc", blockchain: "btc" }],
+  [900010, { chain: "zcash", blockchain: "zec" }],
+  [900012, { chain: "aptos", blockchain: "aptos" }]
+]);
+function normalizeFromTokenList(raw, chainId) {
+  if (!isRecord2(raw) || Array.isArray(raw)) {
+    throw invalidTokenList("From-token response data must be an object");
+  }
+  return normalizeRows(Object.values(raw), chainId);
+}
+function normalizeCrossChainToTokenList(raw, chainId) {
+  if (!isRecord2(raw) || !Array.isArray(raw.tokens)) {
+    throw invalidTokenList(
+      "Cross-chain to-token response data must contain a tokens array"
+    );
+  }
+  return normalizeRows(raw.tokens, chainId);
+}
+function normalizeRows(rows, chainId) {
+  const tokens = rows.map((row) => normalizeRow(row, chainId)).filter((token) => token !== void 0);
+  if (rows.length > 0 && tokens.length === 0) {
+    throw invalidTokenList("Token-list response contains no valid token rows");
+  }
+  return tokens;
+}
+function normalizeRow(value, chainId) {
+  if (!isRecord2(value)) return void 0;
+  const row = value;
+  const assetId = readString(row.assetId) ?? readString(row.address) ?? readString(row.contractAddress) ?? readString(row.coinType);
+  const symbol = readString(row.symbol);
+  const decimals = readDecimals(row.decimals);
+  if (!assetId || !symbol || decimals === void 0) return void 0;
+  const metadata = TOKEN_LIST_CHAIN_METADATA.get(chainId);
+  const chain = metadata?.chain ?? String(chainId);
+  const blockchain = readString(row.blockchain)?.toLowerCase() ?? metadata?.blockchain ?? String(chainId);
+  const rawAddress = readString(row.contractAddress) ?? readString(row.address) ?? readString(row.coinType);
+  const isNative = isNativeToken({
+    row,
+    chain,
+    blockchain,
+    assetId,
+    rawAddress,
+    symbol
+  });
+  const sources = Array.isArray(row.sources) ? row.sources.filter(
+    (source) => typeof source === "string" && source.trim().length > 0
+  ) : readString(row.platform) ? [readString(row.platform)] : [];
+  const price = typeof row.price === "string" || typeof row.price === "number" ? row.price : null;
+  const priceUpdatedAt = typeof row.updated_at === "number" && Number.isFinite(row.updated_at) ? row.updated_at : null;
+  return {
+    chain,
+    address: assetId,
+    symbol,
+    decimals,
+    isNative,
+    tokenListChainId: chainId,
+    blockchain,
+    assetId,
+    contractAddress: isNative ? null : rawAddress ?? null,
+    coinType: readString(row.coinType) ?? null,
+    name: readString(row.name) ?? null,
+    logoURI: readString(row.logoURI) ?? null,
+    price,
+    priceUpdatedAt,
+    sources,
+    raw: { ...row }
+  };
+}
+function isNativeToken(input) {
+  if (input.row.isNative === true) return true;
+  const address = (input.rawAddress ?? "").toLowerCase();
+  const assetId = input.assetId.toLowerCase();
+  const coinType = readString(input.row.coinType)?.toLowerCase() ?? "";
+  if (/^[1-9]\d*$/.test(input.chain)) {
+    return address === "0x0000000000000000000000000000000000000000" || address === "0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee" || (input.blockchain === "pol" || input.blockchain === "polygon") && address === "0x0000000000000000000000000000000000001010";
+  }
+  if (input.chain === "solana") {
+    return address === "11111111111111111111111111111111" || assetId === "nep141:sol.omft.near";
+  }
+  if (input.chain === "tron") {
+    return input.symbol.toUpperCase() === "TRX";
+  }
+  if (input.chain === "sui") {
+    return address.endsWith("::sui::sui");
+  }
+  if (input.chain === "aptos") {
+    if (coinType === "0x1::aptos_coin::aptoscoin") return true;
+    if (!/^0x[0-9a-f]+$/.test(address)) return false;
+    const compactAddress = address.slice(2).replace(/^0+/, "") || "0";
+    return compactAddress === "a";
+  }
+  return false;
+}
+function readString(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function readDecimals(value) {
+  const decimals = typeof value === "number" ? value : typeof value === "string" && value.trim() ? Number(value) : Number.NaN;
+  return Number.isInteger(decimals) && decimals >= 0 ? decimals : void 0;
+}
+function isRecord2(value) {
+  return typeof value === "object" && value !== null;
+}
+function invalidTokenList(message) {
+  return new SwapSdkError("INVALID_API_RESPONSE", "tokens", message);
+}
+
+// src/mca/collateral.ts
+function resolveMcaWithdrawPolicy(input) {
+  const decreaseCollateral = resolveMcaRequiredCollateralDecrease({
+    amountBurrow: input.amountBurrow,
+    suppliedBalance: input.suppliedBalance
+  });
+  const available = parseDecimal(input.availableBalance, "availableBalance");
+  const amount = parseDecimal(input.amountIn, "amountIn");
+  return {
+    ...decreaseCollateral,
+    withdrawAll: input.isMax || available.digits > 0n && isAtLeastWithdrawAllThreshold(amount, available)
+  };
+}
+function resolveMcaRequiredCollateralDecrease(input) {
+  const amount = parseBurrowDecimal(input.amountBurrow, "amountBurrow");
+  const supplied = parseBurrowDecimal(
+    input.suppliedBalance,
+    "suppliedBalance"
+  );
+  const [amountScaled, suppliedScaled] = alignScale(amount, supplied);
+  const decreaseScaled = amountScaled > suppliedScaled ? amountScaled - suppliedScaled : 0n;
+  return resolveParsedMcaDecreaseCollateral({
+    digits: decreaseScaled,
+    scale: Math.max(amount.scale, supplied.scale)
+  });
+}
+function resolveMcaDecreaseCollateral(decreaseAmountBurrow, field = "decreaseAmountBurrow") {
+  const parsed = parseBurrowDecimal(decreaseAmountBurrow, field);
+  return resolveParsedMcaDecreaseCollateral(parsed);
+}
+function resolveParsedMcaDecreaseCollateral(parsed) {
+  const needDecrease = parsed.digits > 0n;
+  return {
+    needDecrease,
+    decreaseAmountBurrow: needDecrease ? formatDecimal(parsed) : "0"
+  };
+}
+function isAtLeastWithdrawAllThreshold(amount, available) {
+  const [amountScaled, availableScaled] = alignScale(amount, available);
+  return amountScaled * 1000000n >= availableScaled * 999999n;
+}
+function alignScale(a, b) {
+  const scale = Math.max(a.scale, b.scale);
+  return [
+    a.digits * pow10(scale - a.scale),
+    b.digits * pow10(scale - b.scale)
+  ];
+}
+function parseDecimal(value, field) {
+  const trimmed = value.trim();
+  if (!/^(?:0|[1-9]\d*)(?:\.\d+)?$/.test(trimmed)) {
+    throw new SwapSdkError(
+      "INVALID_REQUEST",
+      "quote",
+      `${field} must be a non-negative decimal string`
+    );
+  }
+  const [integer = "0", fraction = ""] = trimmed.split(".");
+  return {
+    digits: BigInt(`${integer}${fraction}`),
+    scale: fraction.length
+  };
+}
+function parseBurrowDecimal(value, field) {
+  const trimmed = value.trim();
+  const match = /^(?:([0-9]+)(?:\.([0-9]*))?|\.([0-9]+))(?:[eE]([+-]?[0-9]+))?$/.exec(
+    trimmed
+  );
+  if (!match) {
+    throw new SwapSdkError(
+      "INVALID_REQUEST",
+      "quote",
+      `${field} must be a non-negative decimal string`
+    );
+  }
+  const integer = match[1] ?? "0";
+  const fraction = match[2] ?? match[3] ?? "";
+  const exponent = Number(match[4] ?? "0");
+  if (!Number.isSafeInteger(exponent) || Math.abs(exponent) > 1e5) {
+    throw new SwapSdkError(
+      "INVALID_REQUEST",
+      "quote",
+      `${field} exponent is out of range`
+    );
+  }
+  let digits = BigInt(`${integer}${fraction}` || "0");
+  let scale = fraction.length - exponent;
+  if (scale < 0) {
+    digits *= pow10(-scale);
+    scale = 0;
+  }
+  return { digits, scale };
+}
+function formatDecimal(value) {
+  if (value.digits === 0n) return "0";
+  if (value.scale === 0) return value.digits.toString();
+  const padded = value.digits.toString().padStart(value.scale + 1, "0");
+  const splitAt = padded.length - value.scale;
+  const integer = padded.slice(0, splitAt);
+  const fraction = padded.slice(splitAt).replace(/0+$/, "");
+  return fraction ? `${integer}.${fraction}` : integer;
+}
+function pow10(exponent) {
+  return 10n ** BigInt(exponent);
+}
+
 // src/mca/quote.ts
 function serializeMcaQuoteRequest(request, signer) {
   const mcaAccountId = request.mcaAccountId.trim();
@@ -1230,13 +1530,10 @@ function serializeMcaQuoteRequest(request, signer) {
   if (!identityKey) {
     throw invalidRequest("signer identityKey is required");
   }
-  if (request.flow === "withdraw" && !/^(?:0|[1-9]\d*)(?:\.\d+)?$/.test(
-    request.collateral.decreaseAmountBurrow.trim()
-  )) {
-    throw invalidRequest(
-      "collateral.decreaseAmountBurrow must be a non-negative decimal string"
-    );
-  }
+  const decreaseCollateral = request.flow === "withdraw" ? resolveMcaDecreaseCollateral(
+    request.collateral.decreaseAmountBurrow,
+    "collateral.decreaseAmountBurrow"
+  ) : void 0;
   const mca = {
     flow: request.flow,
     mcaAccountId,
@@ -1245,8 +1542,8 @@ function serializeMcaQuoteRequest(request, signer) {
       identityKey
     },
     ...request.flow === "deposit" ? { useAsCollateral: request.collateral.useAsCollateral } : {
-      needDecreaseCollateral: request.collateral.needDecrease,
-      decreaseCollateralAmountBurrow: request.collateral.decreaseAmountBurrow,
+      needDecreaseCollateral: decreaseCollateral.needDecrease,
+      decreaseCollateralAmountBurrow: decreaseCollateral.decreaseAmountBurrow,
       ...request.collateral.withdrawAll ? { withdrawAll: true } : {}
     },
     ...request.recipientMsgSignatures ? { recipientMsgSignatures: [...request.recipientMsgSignatures] } : {},
@@ -1275,7 +1572,7 @@ function normalizeMcaQuote(request, signer, quote) {
     mca: Object.freeze({ ...mca })
   };
   if (request.flow === "deposit") {
-    if (readString(quote.raw.nearDepositTxError)) {
+    if (readString2(quote.raw.nearDepositTxError)) {
       throw invalidResponse(String(quote.raw.nearDepositTxError));
     }
     return {
@@ -1286,7 +1583,7 @@ function normalizeMcaQuote(request, signer, quote) {
       ...quote.raw.nearDepositTx === void 0 ? {} : { nearDepositTx: quote.raw.nearDepositTx }
     };
   }
-  if (readString(quote.raw.nearMcaWithdrawTxError)) {
+  if (readString2(quote.raw.nearMcaWithdrawTxError)) {
     throw invalidResponse(String(quote.raw.nearMcaWithdrawTxError));
   }
   const mode = resolveWithdrawMode(request);
@@ -1314,7 +1611,7 @@ function resolveWithdrawMode(request) {
 function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function readString(value) {
+function readString2(value) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
 function invalidRequest(message) {
@@ -1802,7 +2099,7 @@ var McaSwapService = class {
           "MCA relayer preview is missing business"
         );
       }
-      const message = readString2(input.quote.preview.messageToSign);
+      const message = readString3(input.quote.preview.messageToSign);
       if (!message) {
         throw new SwapSdkError(
           "INVALID_API_RESPONSE",
@@ -1811,7 +2108,7 @@ var McaSwapService = class {
         );
       }
       const depositAddress = extractMcaWithdrawDepositAddress({
-        snapshotDepositAddress: readString2(input.quote.raw.depositAddress),
+        snapshotDepositAddress: readString3(input.quote.raw.depositAddress),
         preview: input.quote.preview,
         bestQuote: input.quote.raw.bestQuote
       });
@@ -1876,8 +2173,8 @@ var McaSwapService = class {
         signal: input.signal,
         idempotencyKey: input.idempotencyKey
       });
-      const orderId = readString2(raw.orderId) ?? readRecordString2(raw.deposit, "orderId");
-      const router = readString2(raw.router) ?? input.quote.route.router;
+      const orderId = readString3(raw.orderId) ?? readRecordString2(raw.deposit, "orderId");
+      const router = readString3(raw.router) ?? input.quote.route.router;
       const submittedDepositAddress = readRecordString2(raw.deposit, "depositAddress") ?? depositAddress;
       if (!orderId || !router) {
         throw new SwapSdkError(
@@ -1901,7 +2198,8 @@ var McaSwapService = class {
         is_cross_chain: true,
         tx_type: "mca-withdraw-relayer",
         multi_addr: input.quote.mcaAccountId,
-        swapId: orderId
+        swapId: orderId,
+        ...request.confidentiality ? { confidentiality: request.confidentiality } : {}
       };
       this.relayerReports.set(executionId, reportRequest);
       const result = {
@@ -2009,14 +2307,14 @@ function assertSignerMatchesQuote(signer, expected) {
     );
   }
 }
-function readString2(value) {
+function readString3(value) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
 function readRecordString2(value, field) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
     return void 0;
   }
-  return readString2(value[field]);
+  return readString3(value[field]);
 }
 
 // src/client/SwapClient.ts
@@ -2024,6 +2322,8 @@ var SwapClient = class {
   constructor(config) {
     this.inFlight = /* @__PURE__ */ new Set();
     this.reportRequests = /* @__PURE__ */ new Map();
+    this.tokenListCache = /* @__PURE__ */ new Map();
+    this.tokenListInflight = /* @__PURE__ */ new Map();
     this.config = config;
     this.api = new ApiClient(config);
     this.registry = new ExecutorRegistry(config.executors ?? []);
@@ -2056,6 +2356,55 @@ var SwapClient = class {
   buildRaw(request, options = {}) {
     return this.api.build(request, options);
   }
+  async getFromTokens(request, options = {}) {
+    return this.loadTokenList("from", request, options, async () => {
+      const raw = await this.api.getFromTokenRows(request.chainId, options);
+      return normalizeFromTokenList(raw, request.chainId);
+    });
+  }
+  async getCrossChainToTokens(request, options = {}) {
+    return this.loadTokenList("cross-chain-to", request, options, async () => {
+      const raw = await this.api.getCrossChainToTokenRows(
+        request.chainId,
+        options
+      );
+      return normalizeCrossChainToTokenList(raw, request.chainId);
+    });
+  }
+  async loadTokenList(direction, request, options, load) {
+    if (!Number.isSafeInteger(request.chainId) || request.chainId <= 0) {
+      throw new SwapSdkError(
+        "INVALID_REQUEST",
+        "tokens",
+        `Token-list chainId must be a positive safe integer: ${String(
+          request.chainId
+        )}`
+      );
+    }
+    const ttlMs = Math.max(0, this.config.tokenListCacheTtlMs ?? 6e5);
+    const key = `${direction}:${request.chainId}`;
+    const cached = this.tokenListCache.get(key);
+    if (ttlMs > 0 && cached && cached.expiresAt > this.now()) {
+      return cloneTokenList(cached.tokens);
+    }
+    const existing = options.signal ? void 0 : this.tokenListInflight.get(key);
+    if (existing) return cloneTokenList(await existing);
+    const pending = load().then((tokens) => {
+      if (ttlMs > 0) {
+        this.tokenListCache.set(key, {
+          expiresAt: this.now() + ttlMs,
+          tokens: cloneTokenList(tokens)
+        });
+      }
+      return tokens;
+    }).finally(() => {
+      if (this.tokenListInflight.get(key) === pending) {
+        this.tokenListInflight.delete(key);
+      }
+    });
+    if (!options.signal) this.tokenListInflight.set(key, pending);
+    return cloneTokenList(await pending);
+  }
   async buildSwap(input) {
     if (isMcaQuote(input.quote)) {
       return this.managedSwapFlow.build({
@@ -2186,7 +2535,23 @@ var SwapClient = class {
           emit({ type: "warning", executionId: build.executionId, warning });
         }
       }
-      if ((input.waitFor ?? "submitted") === "completed" && orderId) {
+      const waitsForCompletion = (input.waitFor ?? "submitted") === "completed";
+      const requiresOrderStatus = build.isCrossChain || build.request?.confidentiality === "basic";
+      if (waitsForCompletion && requiresOrderStatus && !orderId) {
+        throw new SwapSdkError(
+          "INVALID_API_RESPONSE",
+          "status",
+          "Swap submitted, but the API did not provide a status key",
+          {
+            details: {
+              executionId: build.executionId,
+              ...result.txHash ? { txHash: result.txHash } : {},
+              router: orderRouter ?? build.router
+            }
+          }
+        );
+      }
+      if (waitsForCompletion && orderId) {
         const status = await this.waitForOrder({
           orderId,
           router: orderRouter ?? build.router,
@@ -2298,10 +2663,30 @@ var SwapClient = class {
   getHistoryRaw(params, options = {}) {
     return this.api.getHistory(params, options);
   }
+  createHistoryAuthChallenge(request, options = {}) {
+    return this.api.createHistoryAuthChallenge(request, options);
+  }
+  verifyHistoryAuthChallenge(request, options = {}) {
+    return this.api.verifyHistoryAuthChallenge(request, options);
+  }
+  async authorizeConfidentialHistory(request, signChallenge, options = {}) {
+    const challenge = await this.createHistoryAuthChallenge(request, options);
+    assertHistoryChallengeMatchesRequest(challenge, request);
+    const proof = await signChallenge(challenge);
+    const verifyRequest = {
+      challengeId: challenge.challengeId,
+      proof
+    };
+    const token = await this.verifyHistoryAuthChallenge(verifyRequest, options);
+    assertHistoryTokenMatchesChallenge(token, challenge);
+    return token;
+  }
   async getHistory(request, options = {}) {
     const raw = await this.api.getHistory(
       {
         sender: request.sender,
+        ...request.mode ? { mode: request.mode } : {},
+        ...request.walletToken ? { walletToken: request.walletToken } : {},
         ...request.page !== void 0 ? { pageNumber: request.page } : {},
         ...request.pageSize !== void 0 ? { pageSize: request.pageSize } : {}
       },
@@ -2352,10 +2737,39 @@ var SwapClient = class {
       router: build.router,
       tx_type: reportContext?.txType ?? (build.isCrossChain ? "cross-chain" : "same-chain"),
       ...reportContext?.multiAddr ? { multi_addr: reportContext.multiAddr } : {},
-      ...reportContext?.swapId ?? result.orderId ? { swapId: reportContext?.swapId ?? result.orderId } : {}
+      ...reportContext?.swapId ?? result.orderId ? { swapId: reportContext?.swapId ?? result.orderId } : {},
+      ...request.confidentiality ? { confidentiality: request.confidentiality } : {}
     };
   }
 };
+function assertHistoryChallengeMatchesRequest(challenge, request) {
+  const expectedMca = request.mcaAccountId?.trim();
+  const principalMatches = expectedMca ? challenge.principalType === "mca" && challenge.mcaAccountId?.toLowerCase() === expectedMca.toLowerCase() : challenge.principalType === "wallet" && !challenge.mcaAccountId;
+  const identityMatches = request.identityKey ? normalizeHistoryIdentity(challenge.chainFamily, challenge.identityKey) === normalizeHistoryIdentity(challenge.chainFamily, request.identityKey) : true;
+  if (challenge.chainFamily !== request.chainFamily || challenge.chainId !== request.chainId || normalizeHistoryAddress(challenge.chainFamily, challenge.walletAddress) !== normalizeHistoryAddress(request.chainFamily, request.walletAddress) || !identityMatches || !principalMatches || !challenge.queryAddress) {
+    throw new SwapSdkError(
+      "INVALID_API_RESPONSE",
+      "history",
+      "Confidential history challenge does not match the requested wallet or MCA"
+    );
+  }
+}
+function assertHistoryTokenMatchesChallenge(token, challenge) {
+  const principalMatches = token.principalType === challenge.principalType && (challenge.principalType === "mca" ? token.mcaAccountId?.toLowerCase() === challenge.mcaAccountId?.toLowerCase() : !token.mcaAccountId);
+  if (!principalMatches || token.queryAddress !== challenge.queryAddress) {
+    throw new SwapSdkError(
+      "INVALID_API_RESPONSE",
+      "history",
+      "Confidential history authorization returned a different principal"
+    );
+  }
+}
+function normalizeHistoryAddress(chain, value) {
+  return chain === "evm" || chain === "aptos" || chain === "sui" ? value.toLowerCase() : value;
+}
+function normalizeHistoryIdentity(chain, value) {
+  return chain === "evm" || chain === "aptos" || chain === "sui" || chain === "btc" || chain === "zcash" ? value.toLowerCase().replace(/^0x/, "") : value;
+}
 function isMcaQuoteRequest(request) {
   if (!("flow" in request) || !("mcaAccountId" in request)) return false;
   const flow = Reflect.get(request, "flow");
@@ -2372,6 +2786,13 @@ function isMcaQuote(quote) {
 function readNonEmptyString(value) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
+function cloneTokenList(tokens) {
+  return tokens.map((token) => ({
+    ...token,
+    sources: [...token.sources],
+    raw: { ...token.raw }
+  }));
+}
 function delay(ms, signal) {
   return new Promise((resolve, reject) => {
     if (signal?.aborted) {
@@ -2402,48 +2823,6 @@ function delay(ms, signal) {
   });
 }
 
-// src/mca/collateral.ts
-function resolveMcaWithdrawPolicy(input) {
-  const collateral = parseDecimal(input.collateralBalance, "collateralBalance");
-  const available = parseDecimal(input.availableBalance, "availableBalance");
-  const amount = parseDecimal(input.amountIn, "amountIn");
-  const needDecrease = collateral.digits > 0n;
-  return {
-    needDecrease,
-    decreaseAmountBurrow: needDecrease ? input.collateralBalance.trim() : "0",
-    withdrawAll: input.isMax || available.digits > 0n && isAtLeastWithdrawAllThreshold(amount, available)
-  };
-}
-function isAtLeastWithdrawAllThreshold(amount, available) {
-  const [amountScaled, availableScaled] = alignScale(amount, available);
-  return amountScaled * 1000000n >= availableScaled * 999999n;
-}
-function alignScale(a, b) {
-  const scale = Math.max(a.scale, b.scale);
-  return [
-    a.digits * pow10(scale - a.scale),
-    b.digits * pow10(scale - b.scale)
-  ];
-}
-function parseDecimal(value, field) {
-  const trimmed = value.trim();
-  if (!/^(?:0|[1-9]\d*)(?:\.\d+)?$/.test(trimmed)) {
-    throw new SwapSdkError(
-      "INVALID_REQUEST",
-      "quote",
-      `${field} must be a non-negative decimal string`
-    );
-  }
-  const [integer = "0", fraction = ""] = trimmed.split(".");
-  return {
-    digits: BigInt(`${integer}${fraction}`),
-    scale: fraction.length
-  };
-}
-function pow10(exponent) {
-  return 10n ** BigInt(exponent);
-}
-
 exports.ApiClient = ApiClient;
 exports.DEFAULT_MCA_SIGNER_PRIORITY = DEFAULT_MCA_SIGNER_PRIORITY;
 exports.ExecutorRegistry = ExecutorRegistry;
@@ -2462,12 +2841,16 @@ exports.formatUnits = formatUnits;
 exports.fromApiChain = fromApiChain;
 exports.isSameMcaSignerIdentity = isSameMcaSignerIdentity;
 exports.normalizeBuild = normalizeBuild;
+exports.normalizeCrossChainToTokenList = normalizeCrossChainToTokenList;
+exports.normalizeFromTokenList = normalizeFromTokenList;
 exports.normalizeHistory = normalizeHistory;
 exports.normalizeHistoryStatus = normalizeHistoryStatus;
 exports.normalizeMcaQuote = normalizeMcaQuote;
 exports.normalizeOrderStatus = normalizeOrderStatus;
 exports.normalizeQuote = normalizeQuote;
 exports.parseUnits = parseUnits;
+exports.resolveMcaDecreaseCollateral = resolveMcaDecreaseCollateral;
+exports.resolveMcaRequiredCollateralDecrease = resolveMcaRequiredCollateralDecrease;
 exports.resolveMcaWithdrawPolicy = resolveMcaWithdrawPolicy;
 exports.selectMcaSigner = selectMcaSigner;
 exports.serializeMcaQuoteRequest = serializeMcaQuoteRequest;