@vultisig/core-chain 1.4.0 → 1.4.2

package/dist/chains/ton/messageBody/decode.js

@@ -0,0 +1,337 @@
+import { Cell } from '@ton/core';
+import { DEDUST_NATIVE_VAULTS, isKnownRouterAddress, STONFI_V2_PTON_WALLETS, STONFI_V2_ROUTERS, } from './knownRouters.js';
+import { TonOp } from './opcodes.js';
+/**
+ * `Address.toString()` defaults to URL-safe + bounceable, which matches the
+ * mainnet user-friendly form (`EQ.../UQ...`) the wallet UI shows everywhere
+ * else. Centralized so all decoded addresses share the same encoding.
+ */
+const formatAddress = (address) => address.toString();
+const safeDecode = (fn) => {
+    try {
+        return fn();
+    }
+    catch {
+        return null;
+    }
+};
+const HEX_BOC_MAGIC_PREFIXES = ['b5ee9c72', '68ff65f3', 'acc3a728'];
+const isHexBoc = (payload) => {
+    if (payload.length % 2 !== 0)
+        return false;
+    if (!/^[\da-f]+$/i.test(payload))
+        return false;
+    const lower = payload.toLowerCase();
+    return HEX_BOC_MAGIC_PREFIXES.some(magic => lower.startsWith(magic));
+};
+export const tonPayloadToBase64 = (payload) => {
+    if (!payload)
+        return null;
+    const value = payload.trim();
+    if (!isHexBoc(value))
+        return value;
+    return Buffer.from(value, 'hex').toString('base64');
+};
+const loadAddress = (slice) => formatAddress(slice.loadAddress());
+const loadMaybeAddress = (slice) => {
+    const address = slice.loadMaybeAddress();
+    return address ? formatAddress(address) : null;
+};
+const loadMaybeRef = (slice) => {
+    if (slice.remainingBits < 1) {
+        throw new Error('Maybe-^Cell discriminator missing');
+    }
+    const hasRef = slice.loadBit();
+    if (!hasRef)
+        return null;
+    if (slice.remainingRefs < 1) {
+        throw new Error('Maybe-^Cell discriminator set but no ref available');
+    }
+    return slice.loadRef();
+};
+const loadForwardPayload = (slice) => {
+    if (slice.remainingBits < 1) {
+        throw new Error('Either-Cell discriminator missing');
+    }
+    const isRef = slice.loadBit();
+    if (isRef) {
+        if (slice.remainingRefs < 1) {
+            throw new Error('Either-Cell discriminator set but no ref available');
+        }
+        return slice.loadRef();
+    }
+    return slice.asCell();
+};
+const parseStonfiV2Swap = (payload, offer) => safeDecode(() => {
+    const slice = payload.beginParse();
+    if (slice.remainingBits < 32)
+        return null;
+    const op = slice.loadUint(32);
+    if (op !== TonOp.STONFI_V2_SWAP)
+        return null;
+    const targetAddress = loadAddress(slice);
+    const refundAddress = loadAddress(slice);
+    const excessesAddress = loadAddress(slice);
+    slice.loadUintBig(64);
+    // additional_data ref shape (STON.fi v2 swap body — same layout used
+    // by both `createSwapBody` and `createCrossSwapBody` in the SDK):
+    //   min_out:Coins
+    //   receiver:MsgAddressInt
+    //   custom_payload_fwd_gas:Coins
+    //   custom_payload:(Maybe ^Cell)
+    //   refund_fwd_gas:Coins
+    //   refund_payload:(Maybe ^Cell)
+    //   referral_value:uint16
+    //   referral_address:MsgAddressInt
+    //
+    // Source: @ston-fi/sdk@2.x BaseRouterV2_1.createSwapBody
+    // (chunk-YSE6O2GU.cjs:96), confirmed against the v2 router smart-contract
+    // docs. We must consume ALL fields — without them, a body with a valid
+    // prefix (op + addresses + min_out + receiver) and garbage tail decodes
+    // as a "swap" because parseStonfiV2Swap stops after receiver. Codex
+    // adversarial review on PR #352 flagged this as fail-open.
+    //
+    // Reading all 8 fields turns "garbage tail" into a parse error caught
+    // by safeDecode. We DO NOT require the slice to be fully consumed
+    // afterwards — STON.fi may extend the cell shape with appended fields
+    // in a future protocol revision, and we want forward-compat over a
+    // brittle exact-shape assertion. The threshold is that an attacker
+    // must successfully encode all 8 typed fields before junk space, which
+    // is materially harder than just appending bits.
+    const additionalData = slice.loadRef().beginParse();
+    const minOut = additionalData.loadCoins();
+    const receiverAddress = loadAddress(additionalData);
+    additionalData.loadCoins(); // custom_payload_fwd_gas
+    loadMaybeRef(additionalData); // custom_payload
+    additionalData.loadCoins(); // refund_fwd_gas
+    loadMaybeRef(additionalData); // refund_payload
+    additionalData.loadUint(16); // referral_value (BPS)
+    additionalData.loadMaybeAddress(); // referral_address — addr_none on no-referral swaps; loadMaybeAddress tolerates that, plain loadAddress would throw and safeDecode would misclassify a real no-referral swap as a non-swap
+    return {
+        kind: 'swap',
+        provider: 'stonfi',
+        ...offer,
+        minOut,
+        receiverAddress,
+        refundAddress,
+        excessesAddress,
+        targetAddress,
+    };
+});
+const parseDedustSwapStep = (slice) => {
+    const targetAddress = loadAddress(slice);
+    // SwapStepParams: kind:SwapKind limit:Coins next:(Maybe ^SwapStep)
+    // SwapKind is a 1-bit prefix: given_in$0 | given_out$1, and per
+    // https://docs.dedust.io/reference/tlb-schemes the docs explicitly state
+    // given_out is "Not implemented." Fail closed on kind=1 so a body with
+    // garbage in the SwapKind slot (or one crafted to look like a swap but
+    // actually using an unsupported kind) doesn't surface as `swap`. Codex
+    // adversarial review on PR #352 flagged the original `slice.loadBit()`-
+    // and-discard as a should-fix.
+    const kind = slice.loadBit();
+    if (kind) {
+        throw new Error('DeDust SwapKind given_out (kind=1) is not implemented');
+    }
+    const minOut = slice.loadCoins();
+    loadMaybeRef(slice);
+    return { targetAddress, minOut };
+};
+const parseDedustSwapParams = (slice) => {
+    slice.loadUint(32);
+    const receiverAddress = loadMaybeAddress(slice);
+    loadMaybeAddress(slice);
+    loadMaybeRef(slice);
+    loadMaybeRef(slice);
+    return receiverAddress;
+};
+const parseDedustSwap = (payload, offer) => safeDecode(() => {
+    const slice = payload.beginParse();
+    if (slice.remainingBits < 32)
+        return null;
+    const op = slice.loadUint(32);
+    const isNativeSwap = op === TonOp.DEDUST_NATIVE_SWAP;
+    const isJettonSwap = op === TonOp.DEDUST_JETTON_SWAP;
+    if (!isNativeSwap && !isJettonSwap)
+        return null;
+    const normalizedOffer = isNativeSwap
+        ? (() => {
+            slice.loadUintBig(64);
+            return {
+                offerAsset: 'ton',
+                offerAmount: slice.loadCoins(),
+            };
+        })()
+        : offer;
+    const { targetAddress, minOut } = parseDedustSwapStep(slice);
+    const receiverAddress = parseDedustSwapParams(slice);
+    return {
+        kind: 'swap',
+        provider: 'dedust',
+        ...normalizedOffer,
+        minOut,
+        receiverAddress,
+        refundAddress: null,
+        excessesAddress: null,
+        targetAddress,
+    };
+});
+/**
+ * Swap classification of the inner `forward_payload` of a STON.fi v2 jetton
+ * transfer. Caller MUST already have verified that the jetton transfer's
+ * inner destination is a known STON.fi v2 router; without that binding the
+ * STON.fi swap opcode is forgeable and can be used to mislabel a transfer to
+ * an attacker as a swap.
+ */
+const parseStonfiSwapPayload = (payload, offer) => parseStonfiV2Swap(payload, offer);
+const parsePtonTransferSwap = (slice) => safeDecode(() => {
+    slice.loadUintBig(64);
+    const offerAmount = slice.loadCoins();
+    slice.loadAddress();
+    const forwardPayload = loadForwardPayload(slice);
+    if (!forwardPayload)
+        return null;
+    return parseStonfiSwapPayload(forwardPayload, {
+        offerAsset: 'ton',
+        offerAmount,
+    });
+});
+const parseJettonTransfer = (slice) => {
+    return safeDecode(() => {
+        const queryId = slice.loadUintBig(64);
+        const amount = slice.loadCoins();
+        const destination = slice.loadAddress();
+        const responseDestination = slice.loadMaybeAddress();
+        // custom_payload is `Maybe ^Cell` — load and discard; we don't surface it.
+        loadMaybeRef(slice);
+        const forwardTonAmount = slice.loadCoins();
+        const forwardPayload = loadForwardPayload(slice);
+        const innerDestination = formatAddress(destination);
+        // Swap classification is gated on the jetton transfer's inner destination
+        // being a known STON.fi v2 router. DeDust jetton swaps are intentionally
+        // not classified — DeDust uses one vault per jetton, and the vault set is
+        // not statically enumerable. Callers needing DeDust jetton-swap detection
+        // must verify the destination via DeDust factory `get_vault_address`.
+        const swapIntent = forwardPayload && isKnownRouterAddress(innerDestination, STONFI_V2_ROUTERS)
+            ? parseStonfiSwapPayload(forwardPayload, {
+                offerAsset: 'jetton',
+                offerAmount: amount,
+            })
+            : null;
+        if (swapIntent)
+            return swapIntent;
+        return {
+            kind: 'jettonTransfer',
+            queryId,
+            amount,
+            destination: innerDestination,
+            responseDestination: responseDestination
+                ? formatAddress(responseDestination)
+                : null,
+            forwardTonAmount,
+        };
+    });
+};
+const parseNftTransfer = (slice) => {
+    return safeDecode(() => {
+        const queryId = slice.loadUintBig(64);
+        const newOwner = slice.loadAddress();
+        const responseDestination = slice.loadMaybeAddress();
+        loadMaybeRef(slice);
+        const forwardAmount = slice.loadCoins();
+        // forward_payload:(Either Cell ^Cell) — required by TEP-62; we don't
+        // surface its content, but we must consume it to reject bodies truncated
+        // before this field.
+        loadForwardPayload(slice);
+        return {
+            kind: 'nftTransfer',
+            queryId,
+            newOwner: formatAddress(newOwner),
+            responseDestination: responseDestination
+                ? formatAddress(responseDestination)
+                : null,
+            forwardAmount,
+        };
+    });
+};
+const parseExcesses = (slice) => {
+    return safeDecode(() => ({
+        kind: 'excesses',
+        queryId: slice.loadUintBig(64),
+    }));
+};
+/**
+ * Decode the body BOC of a TON internal message into a structured intent.
+ *
+ * Accepts the base64 BOC carried in `TonMessage.payload` (Vultisig's keysign
+ * payload schema) along with the outer message destination. Returns `null`
+ * when the payload is empty, not a parseable BOC, has no opcode header, or
+ * carries an opcode this decoder doesn't yet handle — callers should fall
+ * back to displaying the raw TON transfer.
+ *
+ * **Router binding.** Opcodes are contract-local in TON, so an attacker can
+ * craft a body whose leading 32 bits collide with a known DEX swap opcode. To
+ * prevent the keysign UI from labeling such a body as a "swap":
+ *
+ * - `DEDUST_NATIVE_SWAP` is dispatched only when `outerDestination` is a
+ *   known DeDust **native vault** (NOT the factory — the factory only
+ *   receives `create_vault`/`create_pool` ops; `swap#ea06185d` lives on
+ *   the per-asset vault contracts per
+ *   https://docs.dedust.io/reference/tlb-schemes).
+ * - `PTON_TRANSFER` (STON.fi v2 TON-side swap) is dispatched only when
+ *   `outerDestination` is a known STON.fi v2 pTON wallet.
+ * - STON.fi v2 jetton-swap detection inside `JETTON_TRANSFER` is gated on
+ *   the inner `destination` field being a known STON.fi v2 router.
+ *
+ * DeDust jetton-swap detection is intentionally not provided — DeDust vaults
+ * are per-jetton and not statically enumerable.
+ *
+ * Note: dApps sometimes prefix a jetton transfer body with an empty 32-bit
+ * "text comment" header (op = 0). In that case, we look at the next 32 bits.
+ */
+export const decodeTonMessageBody = ({ payload: payloadBase64, outerDestination, }) => {
+    const payload = tonPayloadToBase64(payloadBase64);
+    if (!payload)
+        return null;
+    const cell = safeDecode(() => Cell.fromBase64(payload));
+    if (!cell)
+        return null;
+    const slice = safeDecode(() => cell.beginParse());
+    if (!slice)
+        return null;
+    const dispatch = (op) => {
+        if (op === TonOp.JETTON_TRANSFER)
+            return parseJettonTransfer(slice);
+        if (op === TonOp.NFT_TRANSFER)
+            return parseNftTransfer(slice);
+        if (op === TonOp.EXCESSES)
+            return parseExcesses(slice);
+        if (op === TonOp.PTON_TRANSFER) {
+            if (!isKnownRouterAddress(outerDestination, STONFI_V2_PTON_WALLETS)) {
+                return null;
+            }
+            return parsePtonTransferSwap(slice);
+        }
+        if (op === TonOp.DEDUST_NATIVE_SWAP) {
+            if (!isKnownRouterAddress(outerDestination, DEDUST_NATIVE_VAULTS)) {
+                return null;
+            }
+            return parseDedustSwap(cell, { offerAsset: 'ton', offerAmount: 0n });
+        }
+        return null;
+    };
+    if (slice.remainingBits < 32)
+        return null;
+    const op = safeDecode(() => slice.loadUint(32));
+    if (op === null)
+        return null;
+    if (op === 0) {
+        if (slice.remainingBits < 32)
+            return null;
+        const nestedOp = safeDecode(() => slice.loadUint(32));
+        if (nestedOp === null)
+            return null;
+        return dispatch(nestedOp);
+    }
+    return dispatch(op);
+};
+//# sourceMappingURL=decode.js.map

package/dist/chains/ton/messageBody/decode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/chains/ton/messageBody/decode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,IAAI,EAAS,MAAM,WAAW,CAAA;AAEhD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAGjC;;;;GAIG;AACH,MAAM,aAAa,GAAG,CAAC,OAAgB,EAAU,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAA;AAEtE,MAAM,UAAU,GAAG,CAAI,EAAW,EAAY,EAAE;IAC9C,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED,MAAM,sBAAsB,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAU,CAAA;AAE5E,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAE,EAAE;IACnC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IAE9C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAA;IACnC,OAAO,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;AACtE,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAuB,EAAiB,EAAE;IAC3E,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAEzB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAElC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AACrD,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,KAAY,EAAU,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;AAEhF,MAAM,gBAAgB,GAAG,CAAC,KAAY,EAAiB,EAAE;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAA;IACxC,OAAO,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAChD,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,KAAY,EAAe,EAAE;IACjD,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;IAC9B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAExB,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IAED,OAAO,KAAK,CAAC,OAAO,EAAE,CAAA;AACxB,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAG,CAAC,KAAY,EAAe,EAAE;IACvD,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;IAC7B,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,EAAE,CAAA;IACxB,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,EAAE,CAAA;AACvB,CAAC,CAAA;AAOD,MAAM,iBAAiB,GAAG,CACxB,OAAa,EACb,KAAmB,EACG,EAAE,CACxB,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,CAAA;IAElC,IAAI,KAAK,CAAC,aAAa,GAAG,EAAE;QAAE,OAAO,IAAI,CAAA;IAEzC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC7B,IAAI,EAAE,KAAK,KAAK,CAAC,cAAc;QAAE,OAAO,IAAI,CAAA;IAE5C,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,eAAe,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IAE1C,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IAErB,qEAAqE;IACrE,kEAAkE;IAClE,kBAAkB;IAClB,2BAA2B;IAC3B,iCAAiC;IACjC,iCAAiC;IACjC,yBAAyB;IACzB,iCAAiC;IACjC,0BAA0B;IAC1B,mCAAmC;IACnC,EAAE;IACF,yDAAyD;IACzD,0EAA0E;IAC1E,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,2DAA2D;IAC3D,EAAE;IACF,sEAAsE;IACtE,kEAAkE;IAClE,sEAAsE;IACtE,mEAAmE;IACnE,mEAAmE;IACnE,uEAAuE;IACvE,iDAAiD;IACjD,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,CAAA;IACnD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,CAAA;IACzC,MAAM,eAAe,GAAG,WAAW,CAAC,cAAc,CAAC,CAAA;IACnD,cAAc,CAAC,SAAS,EAAE,CAAA,CAAC,yBAAyB;IACpD,YAAY,CAAC,cAAc,CAAC,CAAA,CAAC,iBAAiB;IAC9C,cAAc,CAAC,SAAS,EAAE,CAAA,CAAC,iBAAiB;IAC5C,YAAY,CAAC,cAAc,CAAC,CAAA,CAAC,iBAAiB;IAC9C,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA,CAAC,uBAAuB;IACnD,cAAc,CAAC,gBAAgB,EAAE,CAAA,CAAC,2LAA2L;IAE7N,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,QAAQ;QAClB,GAAG,KAAK;QACR,MAAM;QACN,eAAe;QACf,aAAa;QACb,eAAe;QACf,aAAa;KACd,CAAA;AACH,CAAC,CAAC,CAAA;AAEJ,MAAM,mBAAmB,GAAG,CAAC,KAAY,EAAE,EAAE;IAC3C,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IACxC,mEAAmE;IACnE,gEAAgE;IAChE,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,+BAA+B;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;IAC5B,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;IAChC,YAAY,CAAC,KAAK,CAAC,CAAA;IAEnB,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAA;AAClC,CAAC,CAAA;AAED,MAAM,qBAAqB,GAAG,CAAC,KAAY,EAAE,EAAE;IAC7C,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAClB,MAAM,eAAe,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IAC/C,gBAAgB,CAAC,KAAK,CAAC,CAAA;IACvB,YAAY,CAAC,KAAK,CAAC,CAAA;IACnB,YAAY,CAAC,KAAK,CAAC,CAAA;IAEnB,OAAO,eAAe,CAAA;AACxB,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CACtB,OAAa,EACb,KAAmB,EACG,EAAE,CACxB,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,CAAA;IAElC,IAAI,KAAK,CAAC,aAAa,GAAG,EAAE;QAAE,OAAO,IAAI,CAAA;IAEzC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC7B,MAAM,YAAY,GAAG,EAAE,KAAK,KAAK,CAAC,kBAAkB,CAAA;IACpD,MAAM,YAAY,GAAG,EAAE,KAAK,KAAK,CAAC,kBAAkB,CAAA;IACpD,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAA;IAE/C,MAAM,eAAe,GAAG,YAAY;QAClC,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;YACrB,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE;aACR,CAAA;QAC1B,CAAC,CAAC,EAAE;QACN,CAAC,CAAC,KAAK,CAAA;IAET,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAC5D,MAAM,eAAe,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;IAEpD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,QAAQ;QAClB,GAAG,eAAe;QAClB,MAAM;QACN,eAAe;QACf,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,IAAI;QACrB,aAAa;KACd,CAAA;AACH,CAAC,CAAC,CAAA;AAEJ;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,CAC7B,OAAa,EACb,KAAmB,EACG,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;AAE5D,MAAM,qBAAqB,GAAG,CAAC,KAAY,EAAwB,EAAE,CACnE,UAAU,CAAC,GAAG,EAAE;IACd,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACrB,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;IACrC,KAAK,CAAC,WAAW,EAAE,CAAA;IAEnB,MAAM,cAAc,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAChD,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAA;IAEhC,OAAO,sBAAsB,CAAC,cAAc,EAAE;QAC5C,UAAU,EAAE,KAAK;QACjB,WAAW;KACZ,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEJ,MAAM,mBAAmB,GAAG,CAAC,KAAY,EAA+B,EAAE;IACxE,OAAO,UAAU,CAAC,GAAG,EAAE;QACrB,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;QACrC,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;QAChC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;QACvC,MAAM,mBAAmB,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAA;QACpD,2EAA2E;QAC3E,YAAY,CAAC,KAAK,CAAC,CAAA;QACnB,MAAM,gBAAgB,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;QAC1C,MAAM,cAAc,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;QAEhD,MAAM,gBAAgB,GAAG,aAAa,CAAC,WAAW,CAAC,CAAA;QAEnD,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,UAAU,GACd,cAAc,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;YACzE,CAAC,CAAC,sBAAsB,CAAC,cAAc,EAAE;gBACrC,UAAU,EAAE,QAAQ;gBACpB,WAAW,EAAE,MAAM;aACpB,CAAC;YACJ,CAAC,CAAC,IAAI,CAAA;QAEV,IAAI,UAAU;YAAE,OAAO,UAAU,CAAA;QAEjC,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO;YACP,MAAM;YACN,WAAW,EAAE,gBAAgB;YAC7B,mBAAmB,EAAE,mBAAmB;gBACtC,CAAC,CAAC,aAAa,CAAC,mBAAmB,CAAC;gBACpC,CAAC,CAAC,IAAI;YACR,gBAAgB;SACjB,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,gBAAgB,GAAG,CAAC,KAAY,EAA+B,EAAE;IACrE,OAAO,UAAU,CAAC,GAAG,EAAE;QACrB,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;QACpC,MAAM,mBAAmB,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAA;QACpD,YAAY,CAAC,KAAK,CAAC,CAAA;QACnB,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;QACvC,qEAAqE;QACrE,yEAAyE;QACzE,qBAAqB;QACrB,kBAAkB,CAAC,KAAK,CAAC,CAAA;QACzB,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,OAAO;YACP,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC;YACjC,mBAAmB,EAAE,mBAAmB;gBACtC,CAAC,CAAC,aAAa,CAAC,mBAAmB,CAAC;gBACpC,CAAC,CAAC,IAAI;YACR,aAAa;SACd,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,KAAY,EAA+B,EAAE;IAClE,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;QACvB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;KAC/B,CAAC,CAAC,CAAA;AACL,CAAC,CAAA;AAYD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,EACnC,OAAO,EAAE,aAAa,EACtB,gBAAgB,GACU,EAA+B,EAAE;IAC3D,MAAM,OAAO,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAA;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAEzB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAA;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAEtB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,MAAM,QAAQ,GAAG,CAAC,EAAU,EAA+B,EAAE;QAC3D,IAAI,EAAE,KAAK,KAAK,CAAC,eAAe;YAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAA;QACnE,IAAI,EAAE,KAAK,KAAK,CAAC,YAAY;YAAE,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAC7D,IAAI,EAAE,KAAK,KAAK,CAAC,QAAQ;YAAE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAA;QACtD,IAAI,EAAE,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;YAC/B,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,EAAE,CAAC;gBACpE,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAA;QACrC,CAAC;QACD,IAAI,EAAE,KAAK,KAAK,CAAC,kBAAkB,EAAE,CAAC;YACpC,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,EAAE,CAAC;gBAClE,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,eAAe,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAA;QACtE,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IAED,IAAI,KAAK,CAAC,aAAa,GAAG,EAAE;QAAE,OAAO,IAAI,CAAA;IAEzC,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/C,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAE5B,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QACb,IAAI,KAAK,CAAC,aAAa,GAAG,EAAE;YAAE,OAAO,IAAI,CAAA;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;QACrD,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAClC,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC3B,CAAC;IAED,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAA;AACrB,CAAC,CAAA"}

package/dist/chains/ton/messageBody/knownRouters.d.ts

@@ -0,0 +1,19 @@
+/** STON.fi v2 router addresses on TON mainnet (jetton-swap destinations). */
+export declare const STONFI_V2_ROUTERS: ReadonlySet<string>;
+/** STON.fi v2 pTON wallet addresses on TON mainnet (TON-swap destinations). */
+export declare const STONFI_V2_PTON_WALLETS: ReadonlySet<string>;
+/**
+ * DeDust mainnet TON Native Vault addresses — the destinations for the
+ * `swap#ea06185d` op when offering native TON. Used to gate
+ * DEDUST_NATIVE_SWAP classification so the keysign UI only labels a
+ * message as a "swap" when it's actually addressed to a real vault.
+ */
+export declare const DEDUST_NATIVE_VAULTS: ReadonlySet<string>;
+/**
+ * Returns whether `address` matches any entry in `routerSet`. Both sides are
+ * normalised to user-friendly bounceable form so URL-safe and raw variants of
+ * the same address compare as equal. Returns false on null/undefined or any
+ * unparseable address.
+ */
+export declare const isKnownRouterAddress: (address: string | null | undefined, routerSet: ReadonlySet<string>) => boolean;
+//# sourceMappingURL=knownRouters.d.ts.map

package/dist/chains/ton/messageBody/knownRouters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"knownRouters.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/chain/chains/ton/messageBody/knownRouters.ts"],"names":[],"mappings":"AAiKA,6EAA6E;AAC7E,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CACR,CAAA;AAE1C,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAEtD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CACR,CAAA;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,GAC/B,SAAS,MAAM,GAAG,IAAI,GAAG,SAAS,EAClC,WAAW,WAAW,CAAC,MAAM,CAAC,KAC7B,OAOF,CAAA"}

package/dist/chains/ton/messageBody/knownRouters.js

@@ -0,0 +1,179 @@
+import { Address } from '@ton/core';
+/**
+ * Known router/factory addresses used to bind opcode-based swap classification
+ * to specific contracts. Without these checks, an attacker could craft a body
+ * that decodes as a "swap" and have it labeled as such in the keysign UI even
+ * though it is actually a transfer to an attacker-controlled destination — the
+ * TON message-body opcodes are contract-local, not globally unique.
+ *
+ * **Refresh:** STON.fi addresses are sourced from
+ * <https://api.ston.fi/v1/routers>, filtered to `major_version >= 2`. To
+ * regenerate this list, run:
+ *
+ * ```sh
+ * curl -s https://api.ston.fi/v1/routers | jq -r '
+ *   [.[] | select(.major_version >= 2)] |
+ *   { routers: ([.[].address] | sort | unique),
+ *     pton_wallets: ([.[].pton_wallet_address] | sort | unique) }
+ * '
+ * ```
+ *
+ * The DeDust mainnet **native vault** address is the destination of
+ * `swap#ea06185d` per https://docs.dedust.io/reference/tlb-schemes (the
+ * factory at `EQBfBWT7…` only receives `create_vault` / `create_pool` ops).
+ * The native vault is a singleton on mainnet; its address is computed
+ * deterministically from the factory's `get_vault_address(asset.native())`
+ * TVM call. Verified live against mainnet via:
+ *
+ * ```ts
+ * import { TonClient4 } from '@ton/ton'
+ * import { Factory, MAINNET_FACTORY_ADDR } from '@dedust/sdk'
+ * const factory = new TonClient4({ endpoint: 'https://mainnet-v4.tonhubapi.com' })
+ *   .open(Factory.createFromAddress(MAINNET_FACTORY_ADDR))
+ * console.log((await factory.getNativeVault()).address.toString())
+ * // → EQDa4VOnTYlLvDJ0gZjNYm5PXfSmmtL6Vs6A_CZEtXCNICq_
+ * ```
+ *
+ * A future revision could resolve the address dynamically via the same
+ * factory call so we don't need to chase a redeploy, but the current
+ * mainnet vault is the only one in production.
+ */
+const stonfiV2RouterAddresses = [
+    'EQABT9GCyDI60CbC4c6uS33HFDwaqd6MddiwIIw7CXTgNR3A',
+    'EQACn16m9OrZ-mw186M4NlIpVP8Tb3q6SV9aX8NjSgVfJTo9',
+    'EQADEFMTMnC-gu5v2U0ZY8AYaGhAOk9TcECg1TOquAW3r-IE',
+    'EQAGV9vw11tKW2QOCYCXEmIdyufM3p5CfcgHcY9NiiBLfZGH',
+    'EQAJG5pyZPWEiQiMVJdf7bDRgRLzg6QR57qKeRsOrMO-ncZN',
+    'EQAQYbnb1EGK0Wb8mk3vEW4vbHTyv7cOcfJlPWQ87_6_qfzR',
+    'EQATvO_BXfkFocOXhlve01EZfsiyFjoV-0k9CLmpgwtzVtcN',
+    'EQAgERF5tvrNn0AM2Rrrvk-MutGP60ZL70bJPuqvCTGY-17_',
+    'EQAiLV677BgHNXEUuDJ3Cw8K5WOiJSO86xh8YQq2LthJEoED',
+    'EQAiv3IuxYA6ZGEunOgZSTuMBzbpjwRbWw09-WsE-iqKKMrK',
+    'EQAyD7O8CvVdR8AEJcr96fHI1ifFq21S8QMt1czi5IfJPyfA',
+    'EQAyY2lBQ6RsVe88CKTmeH3BWWsUCWu7ugQNaf5kwLDYAoKt',
+    'EQAz1D0ZUiG_9XCyjrJ1-xTx-CnmnQ3J3LMKQ7sZTr-XlNZP',
+    'EQBCl1JANkTpMpJ9N3lZktPMpp2btRe2vVwHon0la8ibRied',
+    'EQBCtlN7Zy96qx-3yH0Yi4V0SNtQ-8RbhYaNs65MC4Hwfq31',
+    'EQBQErJi0DHgKYseIHtrQk4N5CQLCr3XYwkQIEw0HNs470OG',
+    'EQBQ_UBQvR9ryUjKDwijtoiyyga2Wl-yJm6Y8gl0k-HDh_5x',
+    'EQBSNX_5mSikBVttWhIaIb0f8jJU7fL6kvyyFVppd7dWRO6M',
+    'EQBZj7nhXNhB4O9rRCn4qGS82DZaPUPlyM2k6ZrbvQ1j3Ge7',
+    'EQBigMnbY4NU1uwdvzertV5mv_yI7282R-ffW7XZFWPEVRDG',
+    'EQBjK_kjY5R_DoyTRff109VzFrSlKFCC_gOOWIMtyEvCcv2J',
+    'EQBjM7B2PKa82IPKrUFbMFaKeQDFGTMRnrvY1TmptC7Kxz7B',
+    'EQBqgCTdrtSod76UrcOeALSiLCp3WuNIFQBQvyjjlQMvwLkc',
+    'EQBwpBGEAb-NgjUxpmARAgVl8C4F_5GsXxZ3dpsA1qzQerNl',
+    'EQByADL5Ra2dldrMSBctgfSm2X2W1P61NVW2RYDb8eJNJGx6',
+    'EQBzkqAN4ViYdS24lD2fFPe8odHn2rUkfMYbEJ88EBKBAS1b',
+    'EQC67o2-2UzR1cJFrUGL5M7OAnLgG8oY_tHaTgGmR63LQNV-',
+    'EQCCdNmj4QbNjrg_PM-JJE-B9f_czXLkYmrO7P9UkA6tt95m',
+    'EQCDT9dCT52pdfsLNW0e6qP5T3cgq7M4Ug72zkGYgP17tsWD',
+    'EQCRgwuFbPRR7TGodkJwbjiBtNtb0hfzJIliV-5kY6lKr_18',
+    'EQCS4UEa5UaJLzOyyKieqQOQ2P9M-7kXpkO5HnP3Bv250cN3',
+    'EQChoROpuUM4cpN6IRzqNTrkP9iVZHYoHgxMABDVU28vlUiG',
+    'EQCiypoBWNIEPlarBp04UePyEj5zH0ZDHxuRNqJ1WQx3FCY-',
+    'EQCiz74FCV2lYlvFPEYhL3Jql8WwIO7QvbvYT-LQH0SmtCgI',
+    'EQCpuYtq55nhkwYDmL4OWjsrdYy83gj5_49nNRQ5CrPOze49',
+    'EQCx0HDJ_DxLxDSQyfsEqHI8Rs65nygvdmeD9Ra7rY15OWN8',
+    'EQCxkYVQcfXKw9uJ-MMtutvR2Cu0DVCZFfLNBp6NwXgO8vQY',
+    'EQD11suHkrO_1Mb5IIdYFx5ZPy38MuHoeHx6dA-QRaD8w0UJ',
+    'EQDAPye7HAPAAl4WXpz5jOCdhf2H9h9QkkzRQ-6K5usiuQeC',
+    'EQDBYUj5KEPUQrbj7da742UYJIeT9QU5C2dKsi12SdQ3yh9a',
+    'EQDQ6j53q21HuZtw6oclm7z4LU2cG6S2OKvpSSMH548d7kJT',
+    'EQDTb1w1TCohFqnNcyPrrbbBJQdAwwPn8DbCoaSUd0S5T4fB',
+    'EQDgebEMA6yriI7SMffE65DIVA9rzSRmfGV_gy3ylIhLicY8',
+    'EQDh5oHPvfRwPu2bORBGCoLEO4WQZKL4fk5DD1gydeNG9oEH',
+    'EQDi1eWU3HWWst8owY8OMq2Dz9nJJEHUROza8R-_wEGb8yu6',
+    'EQDkncuJ267Py3EmL2XAN7YsSNQMUu8u-GHsW9jVljcH8fr5',
+    'EQDwyjgjnTXJVPjXji3OPtUilcCjceGVQOLGwr9_sRLjImfG',
+    'EQDx--jUU9PUtHltPYZX7wdzIi0SPY3KZ8nvOs0iZvQJd6Ql',
+];
+const stonfiV2PtonWalletAddresses = [
+    'EQA2O81nzig4IUsCp_8dpzglywsCx-1ESPFzl0ygs1hFYUa2',
+    'EQACuz151snlY46PKdUOkyiCf0zzcxMsN6XmKQkSKZjkvyFH',
+    'EQAD2AcAb4blnbeGPPugZoxSpeibAMTB5kyDMIpUgKrsqk-z',
+    'EQADMtjROtxVRcr1PZ8Zoq6Uxv-5O6uRw7v2XktW0WRtZDnK',
+    'EQAGM0cbPP-HmOONE_RBFnPtHJDkY5qZ_crocAns0QW25e8p',
+    'EQAIuYlddISZbBf7iymZ-WPP9zHaVj9Kg45OH-PgntVz9QbQ',
+    'EQAKz7pQ4mi88Br4WKWcRozQbuRP3xi3eNnwlKa12ECcPfZG',
+    'EQARZ1hF4v95ELsH7pCPMN79_UeqKOOgOjt8xrkW9HhIM-u1',
+    'EQARs8oCeUBx5sWfazL6gZzTFAA9-RgnicsGhHBA8tDLIXgS',
+    'EQAg3Rfrs5JAy31xPIv0hVsAkjDmF8yTxxxkygNvpzNBcJAB',
+    'EQAgXtyQlqVF2V3F4mKlbvYzUijlGjUmJbPWkWuiFNdpzWL_',
+    'EQAmV2BzRi6c-S1263Ar9HhyCLrvtMEae_qfEzhxnK7qSpr0',
+    'EQAyEwoQcmDv0385t9szG-XIUcWMpYlUAOpA5I4HAViY-FnW',
+    'EQAyvcnP0RexLvnsQMXfKYnk18Bzl3Y-iGt6bXqFB75ugXmE',
+    'EQBB_dTiG6u4IIbDT80yirqwmLpwRp7cDGkdrmvQ3Xs_39xM',
+    'EQBDOw08nLEwr9TTXyXDiPuBogHZM_1Rk42Ks8h-FQkP330_',
+    'EQBS0OA18gacX-knOwi7kYuZms3JFwSs4A6j3DvowxfCX9aC',
+    'EQBSDTCjmP35i5CnqT0IiankTmJeOBnUzq7eJ19oO6JgOPgs',
+    'EQBTYCx7TGgVgaIr3tuJ3r_91E6FUBBWLtT73lTYYmrIc5gb',
+    'EQBiLHuQjDj4fNyCD7Ch5HwpNGldlb5g-LMwQ1kStQ4NM5kv',
+    'EQBicl-T79f0FwI_nygtAm_ISq15BVusRKEbZnC2_2QFjH34',
+    'EQBiy9ltu3lkML1i_MAVW2yaXOsPeJ3NXCXQLlcAx-6lKrN1',
+    'EQBvwdaM2LT9JPZGYdqYMCtIuLzjjAqHDSdaJW8fErAU7JUM',
+    'EQBwU5CgFHiNsGKIBetAsMqnoDCtEQIcC3m8HW12GGDz6KfN',
+    'EQByjaOja6-prxDrniGIzs-lBmNnP-nsvGxH1X2y4M3M5sjm',
+    'EQBzIe_KYGrezmSS3ua9buM0P8vzEnMFDrsv1prFnwP43hFk',
+    'EQC4V6MEH2RGiHw5a9g74AXEjyPR1qA-N9mzMEIs9hOSZzVP',
+    'EQCCcuEVMGOSBQwv8Wmak1zbB8WpIuQbfavZYc3cL3QPNlK7',
+    'EQCCgTcJEugMCmQjJDJLTFlu56od9fJDfkTSNv4QEGpHihJx',
+    'EQCSIMGBps_qzRG3uPYhON8bucyCtu0mYdL1-u4gSz77IBa3',
+    'EQCSQy327bW5cik1IycFmY4Qvsmgt-o4F6Ze54-lv2AOPBSk',
+    'EQCcM8n2_K5D9Gu-YkyxM2W35WFs7ekYSbV9lgjXUDYofYt4',
+    'EQCh82fvi6mY0FdoKprvfDLE2q-nE9FIU3SWTVLgNqMJliOO',
+    'EQChdJmlvKnQVkiOwUYnUKJU_zgoyLT81XIyYxVH6RO8OtlH',
+    'EQCjEo7QNUH5S2tVjYgFFdEh1pherydH9K-nrHx0aScsq7U5',
+    'EQClcxRtn7nhZ3zzwsLk_itGaSe0r1r0Dj8fBLAxonkKNsZh',
+    'EQCyfHYh17xx-KwZvcc1t61tLVVCxSk0jYxwRznbpHqQ-R0k',
+    'EQCzUiz7TFS7p7ByYXt-c3lJDmyGvmHTQIm0vhwSiiiaLpVj',
+    'EQD-zKpOa1GjFQDOMnP4A-tX3ntmgV7vs127m0tS_SrJY3kG',
+    'EQDARm-e3yRFmxAabT5OfXKjFp23PS6p7hXBwwrgmvkdbXCr',
+    'EQDBXpJBctAKlbAMWqH2iTPyBPfdBPeQZ6CGRp1oKBqQkEDL',
+    'EQDTN22aBi-Pa_GyDWi8wBuVUxLhOwfAklgN5-bbTk87-uBh',
+    'EQDTx6o7gmGo8cuJt_3EHEgO1RmGnLtGTzgTOsG5pAYs0uYd',
+    'EQDgXEo6f94Bq90eHGFTVK0LyhGaePDhXEgiv1JK6LHFEYRP',
+    'EQDiolbUI-wbmncBen7bYEG1pK_F27RKlqoRWCzSSA8mpqfe',
+    'EQDix2qMOc-QO05Nn9X7oKFnYTb3bvtxN7ySmzoGljrFv2bX',
+    'EQDwOyDlewGw8MkeXgZ_oOmPTIhJIlaJwhJmf4ffIPKv-294',
+    'EQDwVbvZWrXEWQ_lL_69WehyNkNKm4pkswOSeJQtzx1gcHMF',
+];
+/**
+ * DeDust mainnet TON Native Vault — the contract that receives the
+ * `swap#ea06185d` op for native-TON-in swaps. NOT the factory: the factory
+ * only handles `create_vault` / `create_pool`. See file-level comment for
+ * the dynamic-resolution recipe.
+ */
+const dedustNativeVaultAddresses = [
+    'EQDa4VOnTYlLvDJ0gZjNYm5PXfSmmtL6Vs6A_CZEtXCNICq_',
+];
+const normalizeAddress = (address) => Address.parse(address).toString();
+const buildAddressSet = (addresses) => new Set(addresses.map(normalizeAddress));
+/** STON.fi v2 router addresses on TON mainnet (jetton-swap destinations). */
+export const STONFI_V2_ROUTERS = buildAddressSet(stonfiV2RouterAddresses);
+/** STON.fi v2 pTON wallet addresses on TON mainnet (TON-swap destinations). */
+export const STONFI_V2_PTON_WALLETS = buildAddressSet(stonfiV2PtonWalletAddresses);
+/**
+ * DeDust mainnet TON Native Vault addresses — the destinations for the
+ * `swap#ea06185d` op when offering native TON. Used to gate
+ * DEDUST_NATIVE_SWAP classification so the keysign UI only labels a
+ * message as a "swap" when it's actually addressed to a real vault.
+ */
+export const DEDUST_NATIVE_VAULTS = buildAddressSet(dedustNativeVaultAddresses);
+/**
+ * Returns whether `address` matches any entry in `routerSet`. Both sides are
+ * normalised to user-friendly bounceable form so URL-safe and raw variants of
+ * the same address compare as equal. Returns false on null/undefined or any
+ * unparseable address.
+ */
+export const isKnownRouterAddress = (address, routerSet) => {
+    if (!address)
+        return false;
+    try {
+        return routerSet.has(normalizeAddress(address));
+    }
+    catch {
+        return false;
+    }
+};
+//# sourceMappingURL=knownRouters.js.map

package/dist/chains/ton/messageBody/knownRouters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knownRouters.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/chains/ton/messageBody/knownRouters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,MAAM,uBAAuB,GAAG;IAC9B,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;CAC1C,CAAA;AAEV,MAAM,2BAA2B,GAAG;IAClC,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;IAClD,kDAAkD;CAC1C,CAAA;AAEV;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG;IACjC,kDAAkD;CAC1C,CAAA;AAEV,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAU,EAAE,CACnD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;AAEnC,MAAM,eAAe,GAAG,CACtB,SAA4B,EACP,EAAE,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAA;AAElE,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAC5B,eAAe,CAAC,uBAAuB,CAAC,CAAA;AAE1C,+EAA+E;AAC/E,MAAM,CAAC,MAAM,sBAAsB,GAAwB,eAAe,CACxE,2BAA2B,CAC5B,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAC/B,eAAe,CAAC,0BAA0B,CAAC,CAAA;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAkC,EAClC,SAA8B,EACrB,EAAE;IACX,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1B,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA"}

package/dist/chains/ton/messageBody/opcodes.d.ts

@@ -0,0 +1,23 @@
+/**
+ * TON internal-message body opcodes for the operations Vultisig surfaces in
+ * keysign verify/done screens. The opcode is encoded as the first 32 bits of
+ * the message body cell.
+ *
+ * Sources:
+ *  - Jetton transfer: TEP-74 (https://github.com/ton-blockchain/TEPs/blob/master/text/0074-jettons-standard.md)
+ *  - NFT transfer:    TEP-62 (https://github.com/ton-blockchain/TEPs/blob/master/text/0062-nft-standard.md)
+ *  - Excesses:        TEP-74 (return-of-gas notification)
+ *  - STON.fi v2 swap: https://docs.ston.fi/developer-section/api-reference-v2/ops
+ *  - DeDust swaps:    https://docs.tact-lang.org/cookbook/dexes/dedust/
+ */
+export declare const TonOp: {
+    readonly JETTON_TRANSFER: 260734629;
+    readonly NFT_TRANSFER: 1607220500;
+    readonly EXCESSES: 3576854235;
+    readonly PTON_TRANSFER: 32736093;
+    readonly STONFI_V2_SWAP: 1717886506;
+    readonly DEDUST_NATIVE_SWAP: 3926267997;
+    readonly DEDUST_JETTON_SWAP: 3818968194;
+};
+export type TonOp = (typeof TonOp)[keyof typeof TonOp];
+//# sourceMappingURL=opcodes.d.ts.map

package/dist/chains/ton/messageBody/opcodes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opcodes.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/chain/chains/ton/messageBody/opcodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,KAAK;;;;;;;;CAQR,CAAA;AAEV,MAAM,MAAM,KAAK,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,OAAO,KAAK,CAAC,CAAA"}

package/dist/chains/ton/messageBody/opcodes.js

@@ -0,0 +1,22 @@
+/**
+ * TON internal-message body opcodes for the operations Vultisig surfaces in
+ * keysign verify/done screens. The opcode is encoded as the first 32 bits of
+ * the message body cell.
+ *
+ * Sources:
+ *  - Jetton transfer: TEP-74 (https://github.com/ton-blockchain/TEPs/blob/master/text/0074-jettons-standard.md)
+ *  - NFT transfer:    TEP-62 (https://github.com/ton-blockchain/TEPs/blob/master/text/0062-nft-standard.md)
+ *  - Excesses:        TEP-74 (return-of-gas notification)
+ *  - STON.fi v2 swap: https://docs.ston.fi/developer-section/api-reference-v2/ops
+ *  - DeDust swaps:    https://docs.tact-lang.org/cookbook/dexes/dedust/
+ */
+export const TonOp = {
+    JETTON_TRANSFER: 0x0f8a7ea5,
+    NFT_TRANSFER: 0x5fcc3d14,
+    EXCESSES: 0xd53276db,
+    PTON_TRANSFER: 0x01f3835d,
+    STONFI_V2_SWAP: 0x6664de2a,
+    DEDUST_NATIVE_SWAP: 0xea06185d,
+    DEDUST_JETTON_SWAP: 0xe3a0d482,
+};
+//# sourceMappingURL=opcodes.js.map

package/dist/chains/ton/messageBody/opcodes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opcodes.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/chains/ton/messageBody/opcodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,eAAe,EAAE,UAAU;IAC3B,YAAY,EAAE,UAAU;IACxB,QAAQ,EAAE,UAAU;IACpB,aAAa,EAAE,UAAU;IACzB,cAAc,EAAE,UAAU;IAC1B,kBAAkB,EAAE,UAAU;IAC9B,kBAAkB,EAAE,UAAU;CACtB,CAAA"}