@stablechain/sdk 1.0.6 → 1.0.8

package/dist/index.cjs

@@ -1738,6 +1738,7 @@ function isLiFiQuoteShape(v) {
 
 
 
+
 var C = CHAIN_CONFIGS;
 var XAUT0_DEPLOYMENTS = {
   ["ethereum" /* Ethereum */]: { address: "0x68749665FF8D2d112Fa859AA293F07A622782F38", decimals: 6, oftAdapter: "0xb9c2321BB7D0Db468f570D10A424d1Cc8EFd696C", approvalRequired: true },
@@ -1749,15 +1750,21 @@ var XAUT0_DEPLOYMENTS = {
   ["plasma" /* Plasma */]: { address: "0x1B64B9025EEbb9A6239575dF9Ea4b9Ac46D4d193", decimals: 6, oftAdapter: "0x63aB93cBC9d4ecD9c4947b1A38F458147C08E6F7", approvalRequired: false },
   ["bsc" /* BSC */]: { address: "0x21cAef8A43163Eea865baeE23b9C2E327696A3bf", decimals: 6, oftAdapter: "0x53C3A64c8942288e12813C1F8457Db45980BcfC2", approvalRequired: false }
 };
-function bridgeChain(chain, lzEid, blockTimeSec, usdt0Adapter) {
+var USDT0_LOCKBOX_CHAINS = /* @__PURE__ */ new Set(["ethereum" /* Ethereum */, "sepolia" /* Sepolia */]);
+function bridgeChain(chain, lzEid, blockTimeSec, usdt0Adapter, minDeliverySec) {
   const base = C[chain];
   const tokens = {};
   if (usdt0Adapter) {
-    tokens.usdt0 = { address: base.usdt, decimals: base.decimals, oftAdapter: usdt0Adapter };
+    tokens.usdt0 = {
+      address: base.usdt,
+      decimals: base.decimals,
+      oftAdapter: usdt0Adapter,
+      approvalRequired: USDT0_LOCKBOX_CHAINS.has(chain)
+    };
   }
   const xaut0 = XAUT0_DEPLOYMENTS[chain];
   if (xaut0) tokens.xaut0 = xaut0;
-  return { ...base, lzEid, blockTimeSec, tokens, oftAdapter: usdt0Adapter };
+  return { ...base, lzEid, blockTimeSec, minDeliverySec, tokens, oftAdapter: usdt0Adapter };
 }
 var BRIDGE_CHAIN_CONFIGS = {
   // ─── Testnet ───────────────────────────────────────────────────────────────
@@ -1765,18 +1772,18 @@ var BRIDGE_CHAIN_CONFIGS = {
   ["stable-testnet" /* StableTestnet */]: bridgeChain("stable-testnet" /* StableTestnet */, 40374, 0.7, "0x779Ded0c9e1022225f8E0630b35a9b54bE713736"),
   // ─── Mainnet ──────────────────────────────────────────────────────────────
   ["stable" /* Stable */]: bridgeChain("stable" /* Stable */, 30396, 0.7, "0xedaba024be4d87974d5aB11C6Dd586963CcCB027"),
-  ["ethereum" /* Ethereum */]: bridgeChain("ethereum" /* Ethereum */, 30101, 12, "0x6C96dE32CEa08842dcc4058c14d3aaAD7Fa41dee"),
-  ["arbitrum" /* Arbitrum */]: bridgeChain("arbitrum" /* Arbitrum */, 30110, 0.25, "0x14E4A1B13bf7F943c8ff7C51fb60FA964A298D92"),
+  ["ethereum" /* Ethereum */]: bridgeChain("ethereum" /* Ethereum */, 30101, 12, "0x6C96dE32CEa08842dcc4058c14d3aaAD7Fa41dee", 1170),
+  ["arbitrum" /* Arbitrum */]: bridgeChain("arbitrum" /* Arbitrum */, 30110, 0.25, "0x14E4A1B13bf7F943c8ff7C51fb60FA964A298D92", 1350),
   ["ink" /* Ink */]: bridgeChain("ink" /* Ink */, 30339, 1, "0x1cB6De532588fCA4a21B7209DE7C456AF8434A65"),
-  ["bera" /* Bera */]: bridgeChain("bera" /* Bera */, 30362, 2, "0x3Dc96399109df5ceb2C226664A086140bD0379cB"),
+  ["bera" /* Bera */]: bridgeChain("bera" /* Bera */, 30362, 2, "0x3Dc96399109df5ceb2C226664A086140bD0379cB", 135),
   ["megaeth" /* MegaETH */]: bridgeChain("megaeth" /* MegaETH */, 30398, 1, "0x9151434b16b9763660705744891fa906f660ecc5"),
   ["hyperevm" /* HyperEVM */]: bridgeChain("hyperevm" /* HyperEVM */, 30367, 1, "0x904861a24F30EC96ea7CFC3bE9EA4B476d237e98"),
-  ["polygon" /* Polygon */]: bridgeChain("polygon" /* Polygon */, 30109, 1.5, "0x6BA10300f0DC58B7a1e4c0e41f5daBb7D7829e13"),
+  ["polygon" /* Polygon */]: bridgeChain("polygon" /* Polygon */, 30109, 1.5, "0x6BA10300f0DC58B7a1e4c0e41f5daBb7D7829e13", 70),
   ["plasma" /* Plasma */]: bridgeChain("plasma" /* Plasma */, 30383, 1, "0x02ca37966753bDdDf11216B73B16C1dE756A7CF9"),
   ["optimism" /* Optimism */]: bridgeChain("optimism" /* Optimism */, 30111, 2, "0xF03b4d9AC1D5d1E7c4cEf54C2A313b9fe051A0aD"),
   ["unichain" /* Unichain */]: bridgeChain("unichain" /* Unichain */, 30320, 1, "0xc07bE8994D035631c36fb4a89C918CeFB2f03EC3"),
   ["sei" /* Sei */]: bridgeChain("sei" /* Sei */, 30280, 0.5, "0x56Fe74A2e3b484b921c447357203431a3485CC60"),
-  ["flare" /* Flare */]: bridgeChain("flare" /* Flare */, 30295, 1.1, "0x567287d2A9829215a37e3B88843d32f9221E7588"),
+  ["flare" /* Flare */]: bridgeChain("flare" /* Flare */, 30295, 1.1, "0x567287d2A9829215a37e3B88843d32f9221E7588", 600),
   ["xlayer" /* XLayer */]: bridgeChain("xlayer" /* XLayer */, 30274, 1, "0x94BCCa6bdfd6A61817Ab0E960bFedE4984505554"),
   ["rootstock" /* Rootstock */]: bridgeChain("rootstock" /* Rootstock */, 30333, 31, "0x1a594d5d5d1c426281C1064B07f23F57B2716B61"),
   // XAUt0 only — BSC has no USDT0 deployment. Block time measured 2026-08-20.
@@ -1957,6 +1964,14 @@ function median(values) {
   const mid = Math.floor(sorted.length / 2);
   return sorted.length % 2 ? sorted[mid] : (sorted[mid - 1] + sorted[mid]) / 2;
 }
+function resolveDeliverySeconds(formulaSeconds, observedSeconds, minDeliverySec) {
+  const base = _nullishCoalesce(formulaSeconds, () => ( observedSeconds));
+  if (base === void 0) return void 0;
+  if (minDeliverySec !== void 0 && minDeliverySec > base) {
+    return { seconds: minDeliverySec, source: "floor" };
+  }
+  return { seconds: base, source: formulaSeconds !== void 0 ? "formula" : "observed" };
+}
 var WORKER_EXECUTOR = 1;
 var OPTION_LZRECEIVE = 1;
 var OPTION_NATIVE_DROP = 2;
@@ -1998,6 +2013,22 @@ function buildLzOptions(gasLimit = 0n, nativeDrop = 0n, dropReceiver) {
   ]);
 }
 var FALLBACK_SEND_GAS = 400000n;
+var DEFAULT_FEE_BUFFER_BPS = 500;
+var MAX_FEE_BUFFER_BPS = 1e4;
+function padFee(nativeFee, bufferBps) {
+  return nativeFee * BigInt(1e4 + bufferBps) / 10000n;
+}
+function resolveFeeBuffer(feeBufferBps, method) {
+  if (feeBufferBps === void 0) return DEFAULT_FEE_BUFFER_BPS;
+  if (!Number.isInteger(feeBufferBps) || feeBufferBps < 0 || feeBufferBps > MAX_FEE_BUFFER_BPS) {
+    throw new (0, _chunkQQ26UI3Fcjs.StableValidationError)(
+      "feeBufferBps",
+      feeBufferBps,
+      `${method}: feeBufferBps must be an integer between 0 and ${MAX_FEE_BUFFER_BPS}`
+    );
+  }
+  return feeBufferBps;
+}
 function usableQuote(quote, amountLD) {
   if (!_optionalChain([quote, 'optionalAccess', _41 => _41.oft])) return quote;
   return quote.oft.amountSentLD <= amountLD ? quote : void 0;
@@ -2006,20 +2037,46 @@ var ZERO_ADDRESS = "0x0000000000000000000000000000000000000000";
 var LayerZeroService = class {
   constructor(config) {
     this.config = config;
+    this.rpcById = new Map(
+      Object.entries(_nullishCoalesce(config.rpcOverrides, () => ( {}))).flatMap(([chain, rpc]) => {
+        const id = _optionalChain([CHAIN_CONFIGS, 'access', _42 => _42[chain], 'optionalAccess', _43 => _43.id]);
+        return id === void 0 || !rpc ? [] : [[id, rpc.replace(/\/$/, "")]];
+      })
+    );
+  }
+  /**
+   * The RPC to read and broadcast on for a chain: the caller's override when they
+   * gave one, else the built-in public endpoint. Every bridge read goes through
+   * here — a backend quoting on a loop needs an endpoint it controls.
+   */
+  rpcFor(cfg) {
+    return _nullishCoalesce(this.rpcById.get(cfg.id), () => ( cfg.rpc));
   }
   async quoteBridge(params) {
-    const plan = this.plan(params, "quoteBridge");
+    return this.buildQuote(this.plan(params, "quoteBridge"), params, "quoteBridge");
+  }
+  /**
+   * The full quote for a planned send. `quoteBridge` reports one; the unsigned
+   * build needs the same numbers and must not disagree with what a caller was
+   * shown, so both come from here.
+   *
+   * `account` is who the gas simulation runs as — this service's signer when it
+   * has one, and the address a prepared send will be signed by when it does not.
+   */
+  async buildQuote(plan, params, method, opts = {}) {
     const [{ fee, oft }, estimate] = await Promise.all([
-      this.quotePathway(plan, "quoteBridge"),
+      this.quotePathway(plan, method, opts.requireOft),
       this.estimateBridgeTime(params).catch(() => void 0)
     ]);
-    const srcGas = await this.estimateSendGas(plan, fee, oft);
+    const srcGas = await this.estimateSendGas(plan, fee, oft, opts.account);
     return {
       ...fee,
+      // What a send built from this quote will actually carry as its `value`.
+      nativeFeeMax: padFee(fee.nativeFee, plan.feeBufferBps),
       oft,
       // What the recipient is actually credited: input minus any OFT fee and
       // minus dust. Falls back to the input when quoteOFT could not be read.
-      toAmount: _nullishCoalesce(_optionalChain([oft, 'optionalAccess', _42 => _42.amountReceived]), () => ( params.amount)),
+      toAmount: _nullishCoalesce(_optionalChain([oft, 'optionalAccess', _44 => _44.amountReceived]), () => ( params.amount)),
       srcGas,
       totalCostWei: srcGas ? srcGas.costWei + fee.nativeFee : void 0,
       estimate
@@ -2029,10 +2086,15 @@ var LayerZeroService = class {
    * The LayerZero messaging fee for a send, plus the OFT's own accounting.
    *
    * The fee is required — a send cannot be built without it. The OFT accounting is
-   * best-effort: an adapter that does not answer `quoteOFT` costs us the fee
-   * breakdown and the exact output amount, not the whole quote.
+   * best-effort for a quote: an adapter that does not answer `quoteOFT` costs a
+   * caller the fee breakdown and the exact output amount, not the whole quote.
+   *
+   * `requireOft` flips that for the paths that go on to build a send. Without the
+   * receipt the only slippage floor left is the full input amount, which reverts
+   * with `SlippageExceeded` the moment a pathway charges a fee — so a send that
+   * cannot read `quoteOFT` is one to refuse loudly rather than assemble blind.
    */
-  async quotePathway(plan, method) {
+  async quotePathway(plan, method, requireOft = false) {
     const sendParam = this.buildSendParams(plan, 0n);
     const [msgFee, oft] = await Promise.all([
       plan.pc.readContract({
@@ -2047,39 +2109,43 @@ var LayerZeroService = class {
           cause: err
         });
       }),
-      this.readOftQuote(plan, sendParam)
+      this.readOftQuote(plan, sendParam).catch((err) => {
+        if (!requireOft) return void 0;
+        throw new (0, _chunkQQ26UI3Fcjs.StableQuoteError)({
+          provider: "layerzero",
+          shortMessage: `${method}: quoteOFT call failed \u2014 the adapter's receipt is what floors the send at what it would actually deliver, and there is no safe default for it`,
+          cause: err
+        });
+      })
     ]);
     const { nativeFee, lzTokenFee } = msgFee;
     return { fee: { nativeFee, lzTokenFee }, oft };
   }
   /**
    * The adapter's own view of a send: accepted range, its fees, and what lands on
-   * the far side. Resolves to `undefined` rather than throwing — see `quoteSend`.
+   * the far side. Throws when the adapter will not answer; `quotePathway` decides
+   * whether that is fatal for the caller it is serving.
    */
   async readOftQuote(plan, sendParam) {
-    try {
-      const [limit, feeDetails, receipt] = await plan.pc.readContract({
-        address: plan.oftAdapter,
-        abi: OFT_ADAPTER_ABI,
-        functionName: "quoteOFT",
-        args: [sendParam]
-      });
-      const decimals = plan.srcToken.decimals;
-      return {
-        amountSentLD: receipt.amountSentLD,
-        amountReceivedLD: receipt.amountReceivedLD,
-        amountReceived: Number(_viem.formatUnits.call(void 0, receipt.amountReceivedLD, decimals)),
-        fees: feeDetails.map((detail) => ({
-          amountLD: detail.feeAmountLD,
-          amount: Number(_viem.formatUnits.call(void 0, detail.feeAmountLD, decimals)),
-          description: detail.description
-        })),
-        minAmountLD: limit.minAmountLD,
-        maxAmountLD: limit.maxAmountLD
-      };
-    } catch (e5) {
-      return void 0;
-    }
+    const [limit, feeDetails, receipt] = await plan.pc.readContract({
+      address: plan.oftAdapter,
+      abi: OFT_ADAPTER_ABI,
+      functionName: "quoteOFT",
+      args: [sendParam]
+    });
+    const decimals = plan.srcToken.decimals;
+    return {
+      amountSentLD: receipt.amountSentLD,
+      amountReceivedLD: receipt.amountReceivedLD,
+      amountReceived: Number(_viem.formatUnits.call(void 0, receipt.amountReceivedLD, decimals)),
+      fees: feeDetails.map((detail) => ({
+        amountLD: detail.feeAmountLD,
+        amount: Number(_viem.formatUnits.call(void 0, detail.feeAmountLD, decimals)),
+        description: detail.description
+      })),
+      minAmountLD: limit.minAmountLD,
+      maxAmountLD: limit.maxAmountLD
+    };
   }
   /**
    * Source-chain cost of the `send` transaction.
@@ -2089,28 +2155,32 @@ var LayerZeroService = class {
    * before approving does not have. When the simulation reverts, fall back to a
    * measured constant so the caller still has a cost to show, flagged as such.
    */
-  async estimateSendGas(plan, fee, oft) {
+  async estimateSendGas(plan, fee, oft, sender) {
     const gasPriceWei = await this.gasPrice(plan);
     if (gasPriceWei === void 0) return void 0;
     let gas = FALLBACK_SEND_GAS;
     let source = "fallback";
-    const account = this.signerAddress();
+    const account = _nullishCoalesce(sender, () => ( this.signerAddress()));
     if (account) {
+      const sendFee = {
+        nativeFee: padFee(fee.nativeFee, plan.feeBufferBps),
+        lzTokenFee: fee.lzTokenFee
+      };
       try {
         gas = await plan.pc.estimateContractGas({
           address: plan.oftAdapter,
           abi: OFT_ADAPTER_ABI,
           functionName: "send",
           args: [
-            this.buildSendParams(plan, _nullishCoalesce(_optionalChain([oft, 'optionalAccess', _43 => _43.amountReceivedLD]), () => ( plan.amountLD))),
-            fee,
+            this.buildSendParams(plan, _nullishCoalesce(_optionalChain([oft, 'optionalAccess', _45 => _45.amountReceivedLD]), () => ( plan.amountLD))),
+            sendFee,
             account
           ],
           account,
-          value: fee.nativeFee
+          value: sendFee.nativeFee
         });
         source = "simulated";
-      } catch (e6) {
+      } catch (e5) {
       }
     }
     return { gas, gasPriceWei, costWei: gas * gasPriceWei, source };
@@ -2121,41 +2191,58 @@ var LayerZeroService = class {
       const fees = await plan.pc.estimateFeesPerGas();
       const price = _nullishCoalesce(fees.maxFeePerGas, () => ( fees.gasPrice));
       if (price !== void 0) return price;
-    } catch (e7) {
+    } catch (e6) {
     }
     try {
       return await plan.pc.getGasPrice();
-    } catch (e8) {
+    } catch (e7) {
       return void 0;
     }
   }
   /**
-   * Top the adapter's allowance up to `amountLD` when it is short. Only the
-   * lockbox chain reaches here — remote deployments burn from the caller.
+   * The `approve` amounts to send, in order, before `send` can pull `amountLD` —
+   * empty when the adapter needs no allowance or the existing one already covers
+   * the send.
+   *
+   * A short but non-zero allowance takes two approvals, not one. Legacy USDT on
+   * Ethereum — the only token a lockbox pathway ever approves — refuses to
+   * overwrite a non-zero allowance with another non-zero value:
+   *
+   *     require(!((_value != 0) && (allowed[msg.sender][_spender] != 0)))
+   *
+   * so a holder who once approved 5 USDT and now bridges 10 gets a reverted
+   * approve and pays the gas for nothing. Zeroing first is harmless on every
+   * other ERC-20, so it is unconditional rather than sniffed per token.
    */
-  async ensureAllowance(plan, wc, owner, amountLD) {
-    const { src, asset, srcToken, oftAdapter, pc, chain: srcChain } = plan;
-    const allowance = await pc.readContract({
-      address: srcToken.address,
+  async approvalPlan(plan, owner, amountLD) {
+    if (plan.srcToken.approvalRequired === false) return [];
+    const allowance = await plan.pc.readContract({
+      address: plan.srcToken.address,
       abi: _viem.erc20Abi,
       functionName: "allowance",
-      args: [owner, oftAdapter]
+      args: [owner, plan.oftAdapter]
     });
-    if (allowance >= amountLD) return;
+    if (allowance >= amountLD) return [];
+    return allowance > 0n ? [0n, amountLD] : [amountLD];
+  }
+  /** Send one `approve` and wait for it to land. */
+  async sendApprove(plan, wc, value) {
+    const { src, asset, srcToken, oftAdapter, pc, chain: srcChain } = plan;
+    const what = value === 0n ? "allowance reset" : "approve";
     let approveHash;
     try {
       approveHash = await wc.writeContract({
         address: srcToken.address,
         abi: _viem.erc20Abi,
         functionName: "approve",
-        args: [oftAdapter, amountLD],
+        args: [oftAdapter, value],
         account: wc.account,
         chain: srcChain
       });
     } catch (err) {
       throw new (0, _chunkQQ26UI3Fcjs.StableTransactionError)({
         phase: "approve",
-        shortMessage: `bridge: ${asset} approve failed`,
+        shortMessage: `bridge: ${asset} ${what} failed`,
         chainId: src.id,
         cause: err
       });
@@ -2164,7 +2251,7 @@ var LayerZeroService = class {
     if (approveReceipt.status === "reverted") {
       throw new (0, _chunkQQ26UI3Fcjs.StableTransactionError)({
         phase: "approve",
-        shortMessage: `bridge: ${asset} approve reverted on-chain`,
+        shortMessage: `bridge: ${asset} ${what} reverted on-chain`,
         txHash: approveReceipt.transactionHash,
         chainId: src.id
       });
@@ -2180,11 +2267,18 @@ var LayerZeroService = class {
       );
     }
     const plan = this.plan({ ...params, recipient: _nullishCoalesce(params.recipient, () => ( from)) }, "bridge");
-    const { src, srcToken, oftAdapter, amountLD, chain: srcChain } = plan;
+    const { src, oftAdapter, amountLD, chain: srcChain } = plan;
+    const refundAddress = this.resolveRefundAddress(params.refundAddress, from, "bridge");
     const wc = _nullishCoalesce(this.config.walletClient, () => ( _viem.createWalletClient.call(void 0, {
       account: this.config.account,
       chain: srcChain,
-      transport: _nullishCoalesce(this.config.transport, () => ( _viem.http.call(void 0, src.rpc)))
+      // `config.transport` is the caller's *Stable-chain* transport. A browser
+      // wallet transport is chain-agnostic — the wallet holds the keys and picks
+      // the network — but an HTTP one is a broadcast channel bound to a single
+      // chain, and broadcasting an Ethereum send to the Stable RPC fails. With a
+      // local account we sign here and only need somewhere to broadcast, so the
+      // source chain's own endpoint is always the right answer.
+      transport: this.config.account ? _viem.http.call(void 0, plan.rpc) : _nullishCoalesce(this.config.transport, () => ( _viem.http.call(void 0, plan.rpc)))
     })));
     try {
       await wc.switchChain({ id: src.id });
@@ -2197,22 +2291,23 @@ var LayerZeroService = class {
       });
     }
     const quote = usableQuote(params.quote, amountLD);
-    const { nativeFee, lzTokenFee, oft } = _optionalChain([quote, 'optionalAccess', _44 => _44.nativeFee]) !== void 0 && _optionalChain([quote, 'optionalAccess', _45 => _45.lzTokenFee]) !== void 0 ? { nativeFee: quote.nativeFee, lzTokenFee: quote.lzTokenFee, oft: quote.oft } : await this.quotePathway(plan, "bridge").then((r) => ({ ...r.fee, oft: r.oft }));
-    const sendParams = this.buildSendParams(plan, _nullishCoalesce(_optionalChain([oft, 'optionalAccess', _46 => _46.amountReceivedLD]), () => ( amountLD)));
-    if (srcToken.approvalRequired !== false) {
-      await this.ensureAllowance(plan, wc, from, amountLD);
+    const { nativeFee, lzTokenFee, oft } = _optionalChain([quote, 'optionalAccess', _46 => _46.nativeFee]) !== void 0 && _optionalChain([quote, 'optionalAccess', _47 => _47.lzTokenFee]) !== void 0 ? { nativeFee: quote.nativeFee, lzTokenFee: quote.lzTokenFee, oft: quote.oft } : await this.quotePathway(plan, "bridge", true).then((r) => ({ ...r.fee, oft: r.oft }));
+    const sendParams = this.buildSendParams(plan, _nullishCoalesce(_optionalChain([oft, 'optionalAccess', _48 => _48.amountReceivedLD]), () => ( amountLD)));
+    const sendFee = padFee(nativeFee, plan.feeBufferBps);
+    for (const value of await this.approvalPlan(plan, from, amountLD)) {
+      await this.sendApprove(plan, wc, value);
     }
     try {
       const hash = await wc.writeContract({
         address: oftAdapter,
         abi: OFT_ADAPTER_ABI,
         functionName: "send",
-        args: [sendParams, { nativeFee, lzTokenFee }, from],
-        value: nativeFee,
+        args: [sendParams, { nativeFee: sendFee, lzTokenFee }, refundAddress],
+        value: sendFee,
         account: wc.account,
         chain: srcChain
       });
-      return { txHash: hash, toAmount: _nullishCoalesce(_optionalChain([oft, 'optionalAccess', _47 => _47.amountReceived]), () => ( params.amount)) };
+      return { txHash: hash, toAmount: _nullishCoalesce(_optionalChain([oft, 'optionalAccess', _49 => _49.amountReceived]), () => ( params.amount)) };
     } catch (err) {
       throw new (0, _chunkQQ26UI3Fcjs.StableTransactionError)({
         phase: "send",
@@ -2222,19 +2317,96 @@ var LayerZeroService = class {
       });
     }
   }
+  /**
+   * Everything needed to send a bridge, without signing or sending any of it: the
+   * ordered transactions, the quote they were built from, and the `SendParam` the
+   * send step encodes, decoded.
+   *
+   * This is the split-responsibility shape — a backend quotes, builds and checks
+   * while the holder's wallet only signs — and the only way to inspect a bridge
+   * before it exists. Send `steps` in order from `from`, each one confirmed before
+   * the next: an allowance reset and an approve where the lockbox pathway needs
+   * them, then the OFT `send` carrying its fee as `value`.
+   *
+   * Refuses to build when the adapter will not answer `quoteOFT`: the receipt is
+   * what floors the send at what it would actually deliver, and guessing the floor
+   * is how a send reverts with `SlippageExceeded` after the gas is spent.
+   */
+  async prepareBridgeCalldata(params) {
+    const method = "prepareBridgeCalldata";
+    const from = params.from;
+    if (!_viem.isAddress.call(void 0, from)) {
+      throw new (0, _chunkQQ26UI3Fcjs.StableValidationError)(
+        "from",
+        params.from,
+        `${method}: invalid from address "${params.from}" \u2014 the address that will sign these transactions`
+      );
+    }
+    const refundAddress = this.resolveRefundAddress(params.refundAddress, from, method);
+    const plan = this.plan({ ...params, recipient: _nullishCoalesce(params.recipient, () => ( from)) }, method);
+    const supplied = usableQuote(params.quote, plan.amountLD);
+    const quote = _optionalChain([supplied, 'optionalAccess', _50 => _50.oft]) && supplied.nativeFee !== void 0 && supplied.lzTokenFee !== void 0 ? supplied : await this.buildQuote(plan, params, method, { account: from, requireOft: true });
+    const oft = quote.oft;
+    const nativeFee = padFee(quote.nativeFee, plan.feeBufferBps);
+    const lzTokenFee = quote.lzTokenFee;
+    const sendParam = this.buildSendParams(plan, oft.amountReceivedLD);
+    const steps = (await this.approvalPlan(plan, from, plan.amountLD)).map((value) => ({
+      chainId: plan.src.id,
+      to: plan.srcToken.address,
+      data: _viem.encodeFunctionData.call(void 0, {
+        abi: _viem.erc20Abi,
+        functionName: "approve",
+        args: [plan.oftAdapter, value]
+      }),
+      value: 0n
+    }));
+    steps.push({
+      chainId: plan.src.id,
+      to: plan.oftAdapter,
+      data: _viem.encodeFunctionData.call(void 0, {
+        abi: OFT_ADAPTER_ABI,
+        functionName: "send",
+        args: [sendParam, { nativeFee, lzTokenFee }, refundAddress]
+      }),
+      value: nativeFee
+    });
+    return {
+      steps,
+      chainId: plan.src.id,
+      asset: plan.asset,
+      quote,
+      send: {
+        dstEid: sendParam.dstEid,
+        recipient: plan.recipient,
+        to: sendParam.to,
+        amountLD: sendParam.amountLD,
+        minAmountLD: sendParam.minAmountLD,
+        extraOptions: sendParam.extraOptions,
+        nativeFee,
+        lzTokenFee,
+        refundAddress
+      }
+    };
+  }
   /**
    * Estimate how long a USDT0 bridge will take, end to end.
    *
-   * Two independent inputs, both cheap:
-   *  - **observed** — median delivery time of recent messages LayerZero Scan has
-   *    already settled on this exact pathway.
-   *  - **formula** — LayerZero's documented estimate from the on-chain ULN config:
-   *    `srcBlockTime × confirmations + dstBlockTime × (2 + dvnCount)`.
+   * The number comes from the pathway's live ULN config:
+   * `srcBlockTime × confirmations + dstBlockTime × (2 + dvnCount)`, floored at the
+   * source chain's {@link BridgeChainConfig.minDeliverySec} where the confirmation
+   * count is not the whole wait. This is what the DVNs are actually bound by, so it
+   * tracks a config change the moment it lands — and on every pathway that is purely
+   * confirmation-bound it agrees with both usdt0.to's own estimate and the delivery
+   * times Scan reports to well under a percent.
    *
-   * `observed` wins when available. The formula assumes `confirmations` is the whole
-   * wait, which holds for L1 sources but badly understates rollups: Arbitrum→Stable
-   * computes to ~15s (60 blocks × 0.25s) while real deliveries take ~18min, because
-   * the DVNs wait for the L2 batch to finalize on L1.
+   * The observed median of recent deliveries on this exact pathway is fetched too
+   * and reported as {@link BridgeTimeEstimate.observedSeconds}, but it no longer
+   * drives `seconds`. History lags the config: after Optimism→Stable was raised to
+   * 1000 confirmations, a 50-message window still reaching back 261 days put the
+   * median at ~15min against a real ~33min, and pathways quiet for months (Unichain,
+   * XAUt0 from Arbitrum) were answering from configs that no longer exist. It stays
+   * the fallback for the case the formula cannot be computed at all — an RPC that
+   * will not serve the ULN read.
    */
   async estimateBridgeTime({
     fromChain,
@@ -2244,8 +2416,8 @@ var LayerZeroService = class {
   }) {
     const src = BRIDGE_CHAIN_CONFIGS[fromChain];
     const dst = BRIDGE_CHAIN_CONFIGS[toChain];
-    const from = _nullishCoalesce(fromToken, () => ( _optionalChain([src, 'optionalAccess', _48 => _48.tokens, 'access', _49 => _49.usdt0, 'optionalAccess', _50 => _50.address])));
-    const to = _nullishCoalesce(toToken, () => ( _optionalChain([dst, 'optionalAccess', _51 => _51.tokens, 'access', _52 => _52.usdt0, 'optionalAccess', _53 => _53.address])));
+    const from = _nullishCoalesce(fromToken, () => ( _optionalChain([src, 'optionalAccess', _51 => _51.tokens, 'access', _52 => _52.usdt0, 'optionalAccess', _53 => _53.address])));
+    const to = _nullishCoalesce(toToken, () => ( _optionalChain([dst, 'optionalAccess', _54 => _54.tokens, 'access', _55 => _55.usdt0, 'optionalAccess', _56 => _56.address])));
     if (!(src && from)) {
       throw new (0, _chunkQQ26UI3Fcjs.StableValidationError)("fromChain", fromChain, `estimateBridgeTime: no OFT adapter for "${fromChain}"`);
     }
@@ -2265,19 +2437,18 @@ var LayerZeroService = class {
       );
       formulaSeconds = Number.isFinite(computed) ? computed : void 0;
     }
-    const seconds = _nullishCoalesce(observedSeconds, () => ( formulaSeconds));
-    if (seconds === void 0) {
+    const resolved = resolveDeliverySeconds(formulaSeconds, observedSeconds, src.minDeliverySec);
+    if (!resolved) {
       throw new (0, _chunkQQ26UI3Fcjs.StableQuoteError)({
         provider: "layerzero",
         shortMessage: `estimateBridgeTime: no pathway data for ${fromChain}\u2192${toChain}`
       });
     }
     return {
-      seconds,
-      source: observedSeconds !== void 0 ? "observed" : "formula",
+      ...resolved,
       observedSeconds,
       formulaSeconds,
-      confirmations: Number.isFinite(_optionalChain([uln, 'optionalAccess', _54 => _54.confirmations])) ? _optionalChain([uln, 'optionalAccess', _55 => _55.confirmations]) : void 0,
+      confirmations: Number.isFinite(_optionalChain([uln, 'optionalAccess', _57 => _57.confirmations])) ? _optionalChain([uln, 'optionalAccess', _58 => _58.confirmations]) : void 0,
       dvnCount: Number.isFinite(dvnCount) ? dvnCount : void 0
     };
   }
@@ -2290,7 +2461,7 @@ var LayerZeroService = class {
     const scanUrl = `${LZ_SCAN_UI}/tx/${srcTxHash}`;
     let message;
     try {
-      message = await _asyncOptionalChain([(await scanFetch(`/messages/tx/${srcTxHash}`)), 'optionalAccess', async _56 => _56.data, 'optionalAccess', async _57 => _57[0]]);
+      message = await _asyncOptionalChain([(await scanFetch(`/messages/tx/${srcTxHash}`)), 'optionalAccess', async _59 => _59.data, 'optionalAccess', async _60 => _60[0]]);
     } catch (err) {
       if (err instanceof ScanHttpError && err.status === 404) {
         return { state: "pending", srcTxHash, scanUrl };
@@ -2302,15 +2473,15 @@ var LayerZeroService = class {
       });
     }
     if (!message) return { state: "pending", srcTxHash, scanUrl };
-    const raw = _nullishCoalesce(_optionalChain([message, 'access', _58 => _58.status, 'optionalAccess', _59 => _59.name]), () => ( ""));
-    const sentAt = _optionalChain([message, 'access', _60 => _60.source, 'optionalAccess', _61 => _61.tx, 'optionalAccess', _62 => _62.blockTimestamp]);
+    const raw = _nullishCoalesce(_optionalChain([message, 'access', _61 => _61.status, 'optionalAccess', _62 => _62.name]), () => ( ""));
+    const sentAt = _optionalChain([message, 'access', _63 => _63.source, 'optionalAccess', _64 => _64.tx, 'optionalAccess', _65 => _65.blockTimestamp]);
     return {
       // Everything terminal that is not DELIVERED means the tokens will not land
       // on their own; `raw` carries which of those it was.
       state: raw === "DELIVERED" ? "delivered" : TERMINAL_FAILURE_STATUSES.has(raw) ? "failed" : "inflight",
       raw,
       srcTxHash,
-      dstTxHash: _optionalChain([message, 'access', _63 => _63.destination, 'optionalAccess', _64 => _64.tx, 'optionalAccess', _65 => _65.txHash]),
+      dstTxHash: _optionalChain([message, 'access', _66 => _66.destination, 'optionalAccess', _67 => _67.tx, 'optionalAccess', _68 => _68.txHash]),
       elapsedSeconds: sentAt ? Math.max(0, Math.floor(Date.now() / 1e3) - sentAt) : void 0,
       scanUrl
     };
@@ -2318,7 +2489,8 @@ var LayerZeroService = class {
   /** Effective ULN config the DVNs enforce for this pathway, read from the source chain. */
   async getUlnConfig(src, dst, oapp) {
     return cached(`uln:${src.lzEid}-${dst.lzEid}-${oapp.toLowerCase()}`, CACHE_TTL_MS, async () => {
-      const pc = _viem.createPublicClient.call(void 0, { chain: makeChain(src.id, src.rpc), transport: _viem.http.call(void 0, src.rpc) });
+      const rpc = this.rpcFor(src);
+      const pc = _viem.createPublicClient.call(void 0, { chain: makeChain(src.id, rpc), transport: _viem.http.call(void 0, rpc) });
       const endpoint = await pc.readContract({ address: oapp, abi: OAPP_ABI, functionName: "endpoint" });
       const sendLib = await pc.readContract({
         address: endpoint,
@@ -2344,7 +2516,7 @@ var LayerZeroService = class {
     const pathwayId = `${src.lzEid}-${dst.lzEid}-${srcOapp.toLowerCase()}-${dstOapp.toLowerCase()}`;
     return cached(`observed:${pathwayId}`, CACHE_TTL_MS, async () => {
       const { data } = await scanFetch(`/messages/pathway/${pathwayId}?limit=50`);
-      const durations = (_nullishCoalesce(data, () => ( []))).filter((m) => _optionalChain([m, 'access', _66 => _66.status, 'optionalAccess', _67 => _67.name]) === "DELIVERED").map((m) => (_nullishCoalesce(_optionalChain([m, 'access', _68 => _68.destination, 'optionalAccess', _69 => _69.tx, 'optionalAccess', _70 => _70.blockTimestamp]), () => ( 0))) - (_nullishCoalesce(_optionalChain([m, 'access', _71 => _71.source, 'optionalAccess', _72 => _72.tx, 'optionalAccess', _73 => _73.blockTimestamp]), () => ( 0)))).filter((d) => d > 0);
+      const durations = (_nullishCoalesce(data, () => ( []))).filter((m) => _optionalChain([m, 'access', _69 => _69.status, 'optionalAccess', _70 => _70.name]) === "DELIVERED").map((m) => (_nullishCoalesce(_optionalChain([m, 'access', _71 => _71.destination, 'optionalAccess', _72 => _72.tx, 'optionalAccess', _73 => _73.blockTimestamp]), () => ( 0))) - (_nullishCoalesce(_optionalChain([m, 'access', _74 => _74.source, 'optionalAccess', _75 => _75.tx, 'optionalAccess', _76 => _76.blockTimestamp]), () => ( 0)))).filter((d) => d > 0);
       return durations.length >= 3 ? Math.round(median(durations)) : void 0;
     });
   }
@@ -2424,13 +2596,22 @@ var LayerZeroService = class {
         `${method}: dstNativeDrop must not be negative`
       );
     }
+    const feeBufferBps = resolveFeeBuffer(params.feeBufferBps, method);
     const { src, dst, asset, srcToken, dstToken } = this.resolveRoute(
       fromChain,
       toChain,
       fromToken,
       toToken
     );
-    const chain = makeChain(src.id, src.rpc);
+    if (params.fromDecimals !== void 0 && params.fromDecimals !== srcToken.decimals) {
+      throw new (0, _chunkQQ26UI3Fcjs.StableValidationError)(
+        "fromDecimals",
+        params.fromDecimals,
+        `${method}: ${asset} has ${srcToken.decimals} decimals on "${fromChain}", not ${params.fromDecimals}. The native OFT route parses the amount with the token's own decimals; fromDecimals applies to LI.FI routes only.`
+      );
+    }
+    const rpc = this.rpcFor(src);
+    const chain = makeChain(src.id, rpc);
     return {
       src,
       dst,
@@ -2441,13 +2622,31 @@ var LayerZeroService = class {
       amountLD: _viem.parseUnits.call(void 0, String(amount), srcToken.decimals),
       recipient: recipientAddr,
       nativeDrop: _nullishCoalesce(dstNativeDrop, () => ( 0n)),
+      rpc,
+      feeBufferBps,
       chain,
-      pc: _viem.createPublicClient.call(void 0, { chain, transport: _viem.http.call(void 0, src.rpc) })
+      pc: _viem.createPublicClient.call(void 0, { chain, transport: _viem.http.call(void 0, rpc) })
     };
   }
+  /**
+   * Where `send` returns messaging fee it did not need. Defaults to the sender,
+   * which is what a caller wants unless they are routing refunds somewhere of
+   * their own — a backend paying the fee on a user's behalf, say.
+   */
+  resolveRefundAddress(refundAddress, sender, method) {
+    if (refundAddress === void 0) return sender;
+    if (!_viem.isAddress.call(void 0, refundAddress)) {
+      throw new (0, _chunkQQ26UI3Fcjs.StableValidationError)(
+        "refundAddress",
+        refundAddress,
+        `${method}: invalid refundAddress "${refundAddress}"`
+      );
+    }
+    return refundAddress;
+  }
   /** The address that will sign, or undefined when this service has no signer. */
   signerAddress() {
-    return _nullishCoalesce(_optionalChain([this, 'access', _74 => _74.config, 'access', _75 => _75.walletClient, 'optionalAccess', _76 => _76.account, 'optionalAccess', _77 => _77.address]), () => ( _optionalChain([this, 'access', _78 => _78.config, 'access', _79 => _79.account, 'optionalAccess', _80 => _80.address])));
+    return _nullishCoalesce(_optionalChain([this, 'access', _77 => _77.config, 'access', _78 => _78.walletClient, 'optionalAccess', _79 => _79.account, 'optionalAccess', _80 => _80.address]), () => ( _optionalChain([this, 'access', _81 => _81.config, 'access', _82 => _82.account, 'optionalAccess', _83 => _83.address])));
   }
   /**
    * `SendParam` for one call. `minAmountLD` is the caller's slippage floor: 0 when
@@ -2542,7 +2741,7 @@ async function resolveTokenDecimals(publicClient, token, tokenDecimals) {
       abi: _viem.erc20Abi,
       functionName: "decimals"
     });
-  } catch (e9) {
+  } catch (e8) {
     throw new (0, _chunkQQ26UI3Fcjs.StableValidationError)(
       "tokenDecimals",
       void 0,
@@ -2576,6 +2775,7 @@ async function executeTokenTransfer(wc, publicClient, token, to, amount, tokenDe
 function createStable({
   network = "mainnet" /* Mainnet */,
   rpc: rpcOverride,
+  rpcOverrides,
   account,
   transport,
   walletClient,
@@ -2589,7 +2789,7 @@ function createStable({
   );
   const signerConfig = { account, transport, walletClient };
   const lifi = new LiFiService({ ...signerConfig, rpc, chainId: chain.id });
-  const lz = new LayerZeroService(signerConfig);
+  const lz = new LayerZeroService({ ...signerConfig, rpcOverrides });
   const merkl = new MerklService({ ...signerConfig, rpc, chainId: chain.id, merklApiBase });
   const morpho = earnConfig ? new MorphoService({
     ...signerConfig,
@@ -2614,7 +2814,7 @@ function createStable({
     return morpho;
   }
   function requireSignerAddress() {
-    const from = _nullishCoalesce(_optionalChain([walletClient, 'optionalAccess', _81 => _81.account, 'optionalAccess', _82 => _82.address]), () => ( _optionalChain([account, 'optionalAccess', _83 => _83.address])));
+    const from = _nullishCoalesce(_optionalChain([walletClient, 'optionalAccess', _84 => _84.account, 'optionalAccess', _85 => _85.address]), () => ( _optionalChain([account, 'optionalAccess', _86 => _86.address])));
     if (!from) {
       throw new (0, _chunkQQ26UI3Fcjs.StableValidationError)(
         "signer",
@@ -2627,7 +2827,7 @@ function createStable({
   async function transfer(params) {
     validateTransferParams(params);
     const { from, to, amount, token, tokenDecimals } = params;
-    const acc = _nullishCoalesce(_nullishCoalesce(_optionalChain([walletClient, 'optionalAccess', _84 => _84.account]), () => ( account)), () => ( from));
+    const acc = _nullishCoalesce(_nullishCoalesce(_optionalChain([walletClient, 'optionalAccess', _87 => _87.account]), () => ( account)), () => ( from));
     const wc = _nullishCoalesce(walletClient, () => ( _viem.createWalletClient.call(void 0, {
       account: acc,
       chain,
@@ -2683,6 +2883,16 @@ function createStable({
     // promise like every other validation error, not a synchronous throw.
     quoteBridge: async (params) => selectBridge(params) === "oft" ? lz.quoteBridge(params) : lifi.quoteBridge(params),
     bridge: async (params) => selectBridge(params) === "oft" ? lz.bridge(params) : lifi.bridge(params),
+    prepareBridgeCalldata: async (params) => {
+      if (selectBridge(params) !== "oft") {
+        throw new (0, _chunkQQ26UI3Fcjs.StableValidationError)(
+          "route",
+          _nullishCoalesce(params.route, () => ( "auto")),
+          `prepareBridgeCalldata: only the native OFT route can be built unsigned, and ${params.fromChain}\u2192${params.toChain} resolved to LI.FI`
+        );
+      }
+      return lz.prepareBridgeCalldata(params);
+    },
     estimateBridgeTime: (params) => lz.estimateBridgeTime(params),
     trackBridge: (srcTxHash) => lz.trackBridge(srcTxHash),
     quoteSwap: (params) => lifi.quoteSwap(params),
@@ -2751,4 +2961,6 @@ function createStableReader(config) {
 
 
 
-exports.BRIDGE_CHAIN_CONFIGS = BRIDGE_CHAIN_CONFIGS; exports.CHAIN_CONFIGS = CHAIN_CONFIGS; exports.Chain = Chain; exports.ERC3009_ABI = _chunkQQ26UI3Fcjs.ERC3009_ABI; exports.Network = Network; exports.STABLE_USDT_ADDRESS = _chunkQQ26UI3Fcjs.STABLE_USDT_ADDRESS; exports.STABLE_VAULT_ADDRESS = _chunkQQ26UI3Fcjs.STABLE_VAULT_ADDRESS; exports.StableBulkError = _chunkQQ26UI3Fcjs.StableBulkError; exports.StableError = _chunkQQ26UI3Fcjs.StableError; exports.StableNetworkError = _chunkQQ26UI3Fcjs.StableNetworkError; exports.StableQuoteError = _chunkQQ26UI3Fcjs.StableQuoteError; exports.StableTransactionError = _chunkQQ26UI3Fcjs.StableTransactionError; exports.StableValidationError = _chunkQQ26UI3Fcjs.StableValidationError; exports.bridgeAssetFor = bridgeAssetFor; exports.cancelAuthorization = _chunkQQ26UI3Fcjs.cancelAuthorization; exports.clearBridgeEstimateCache = clearBridgeEstimateCache; exports.createStable = createStable; exports.createStableReader = createStableReader; exports.erc3009Actions = _chunkQQ26UI3Fcjs.erc3009Actions; exports.getAuthorizationState = _chunkQQ26UI3Fcjs.getAuthorizationState; exports.getAuthorizationUsage = _chunkQQ26UI3Fcjs.getAuthorizationUsage; exports.prepareTransferWithAuthorization = _chunkQQ26UI3Fcjs.prepareTransferWithAuthorization; exports.receiveWithAuthorization = _chunkQQ26UI3Fcjs.receiveWithAuthorization; exports.signReceiveAuthorization = _chunkQQ26UI3Fcjs.signReceiveAuthorization; exports.signTransferAuthorization = _chunkQQ26UI3Fcjs.signTransferAuthorization; exports.transferWithAuthorization = _chunkQQ26UI3Fcjs.transferWithAuthorization; exports.verifyAuthorization = _chunkQQ26UI3Fcjs.verifyAuthorization;
+
+
+exports.BRIDGE_CHAIN_CONFIGS = BRIDGE_CHAIN_CONFIGS; exports.CHAIN_CONFIGS = CHAIN_CONFIGS; exports.Chain = Chain; exports.ERC3009_ABI = _chunkQQ26UI3Fcjs.ERC3009_ABI; exports.Network = Network; exports.OFT_ADAPTER_ABI = OFT_ADAPTER_ABI; exports.STABLE_USDT_ADDRESS = _chunkQQ26UI3Fcjs.STABLE_USDT_ADDRESS; exports.STABLE_VAULT_ADDRESS = _chunkQQ26UI3Fcjs.STABLE_VAULT_ADDRESS; exports.StableBulkError = _chunkQQ26UI3Fcjs.StableBulkError; exports.StableError = _chunkQQ26UI3Fcjs.StableError; exports.StableNetworkError = _chunkQQ26UI3Fcjs.StableNetworkError; exports.StableQuoteError = _chunkQQ26UI3Fcjs.StableQuoteError; exports.StableTransactionError = _chunkQQ26UI3Fcjs.StableTransactionError; exports.StableValidationError = _chunkQQ26UI3Fcjs.StableValidationError; exports.bridgeAssetFor = bridgeAssetFor; exports.buildLzOptions = buildLzOptions; exports.cancelAuthorization = _chunkQQ26UI3Fcjs.cancelAuthorization; exports.clearBridgeEstimateCache = clearBridgeEstimateCache; exports.createStable = createStable; exports.createStableReader = createStableReader; exports.erc3009Actions = _chunkQQ26UI3Fcjs.erc3009Actions; exports.getAuthorizationState = _chunkQQ26UI3Fcjs.getAuthorizationState; exports.getAuthorizationUsage = _chunkQQ26UI3Fcjs.getAuthorizationUsage; exports.prepareTransferWithAuthorization = _chunkQQ26UI3Fcjs.prepareTransferWithAuthorization; exports.receiveWithAuthorization = _chunkQQ26UI3Fcjs.receiveWithAuthorization; exports.signReceiveAuthorization = _chunkQQ26UI3Fcjs.signReceiveAuthorization; exports.signTransferAuthorization = _chunkQQ26UI3Fcjs.signTransferAuthorization; exports.transferWithAuthorization = _chunkQQ26UI3Fcjs.transferWithAuthorization; exports.verifyAuthorization = _chunkQQ26UI3Fcjs.verifyAuthorization;