@vultisig/core-chain 2.24.0 → 2.24.1

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @vultisig/core-chain
 
+## 2.24.1
+
+### Patch Changes
+
+- [#1107](https://github.com/vultisig/vultisig-sdk/pull/1107) [`c5e89cb`](https://github.com/vultisig/vultisig-sdk/commit/c5e89cb317ae6f4ca00eb6c628ad6bac636e4821) Thanks [@gomesalexandre](https://github.com/gomesalexandre)! - fix(swap): populate 1inch affiliateFee for display (AGG-05) — 1inch general-swap quotes never populated `affiliateFee` on the returned `GeneralSwapQuote`, unlike Kyber and LI.FI, leaving the fee-transparency row blank for 1inch even though a real affiliate cut is taken via its `fee`/`referrer` params. `getOneInchSwapQuote` now grosses the post-fee `dstAmount` back up (same bps-based calc `getKyberSwapAffiliateFee` uses) to compute and attach a display-only `affiliateFee`.
+
+- [#1101](https://github.com/vultisig/vultisig-sdk/pull/1101) [`9a1fc02`](https://github.com/vultisig/vultisig-sdk/commit/9a1fc0276ddc8fc905fab392875499d39011520d) Thanks [@gomesalexandre](https://github.com/gomesalexandre)! - fix(swap): surface non-integer dstAmount drops + validate THORChain/MayaChain MsgDeposit memos (SDK-CORRECTNESS-04/06/08) — a drifted provider's non-integer `dstAmount` used to silently drop that quote from ranking with no signal it was a parse failure; `findSwapQuote` now `console.warn`s the provider + raw value before rethrowing. `prepareThorchainMsgDepositTxFromKeys` accepted an arbitrary memo string with no structural validation, unlike the fully-validated limit-swap memo path; it now fails closed on non-printable/oversized memos and unrecognized THORChain/MayaChain deposit actions (and, for the two documented LP actions, a malformed pool id), while still accepting non-LP operator-style memos (BOND, UNBOND, etc.) verbatim. Also replaced an `as any` cast on the deposit's chain-specific proto binding with per-chain branches so the `case`/`value` pairing is statically checked instead of bypassed.
+
 ## 2.24.0
 
 ### Minor Changes

package/dist/chains/cosmos/cosmosDecimal.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Exact-rational decimal parsing/fee math shared by every cosmos gas-price
+ * resolver (the generic node-config path and Osmosis's dynamic EIP-1559
+ * path). Kept in its own module so both can depend on it without a circular
+ * import between them.
+ */
+export type ParsedDecimal = {
+    numerator: bigint;
+    denominator: bigint;
+};
+/** Parses a non-negative decimal string (e.g. "0.030000000000000000") into an exact fraction. */
+export declare const parseDecimal: (value: string) => ParsedDecimal | undefined;
+/** ceil(gasLimit * gasPrice), computed as an exact fraction - never loses precision to IEEE-754 rounding. */
+export declare const getFeeAmountFromGasPrice: (gasLimit: bigint, gasPrice: ParsedDecimal) => bigint;
+//# sourceMappingURL=cosmosDecimal.d.ts.map

package/dist/chains/cosmos/cosmosDecimal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cosmosDecimal.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/cosmos/cosmosDecimal.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,iGAAiG;AACjG,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,KAAG,aAAa,GAAG,SAQ5D,CAAA;AAED,6GAA6G;AAC7G,eAAO,MAAM,wBAAwB,GAAI,UAAU,MAAM,EAAE,UAAU,aAAa,KAAG,MAIpF,CAAA"}

package/dist/chains/cosmos/cosmosDecimal.js

@@ -0,0 +1,15 @@
+/** Parses a non-negative decimal string (e.g. "0.030000000000000000") into an exact fraction. */
+export const parseDecimal = (value) => {
+    if (!/^\d+(?:\.\d+)?$/.test(value))
+        return undefined;
+    const [whole, fraction = ''] = value.split('.');
+    const denominator = 10n ** BigInt(fraction.length);
+    const numerator = BigInt(`${whole}${fraction}`);
+    return { numerator, denominator };
+};
+/** ceil(gasLimit * gasPrice), computed as an exact fraction - never loses precision to IEEE-754 rounding. */
+export const getFeeAmountFromGasPrice = (gasLimit, gasPrice) => {
+    const total = gasLimit * gasPrice.numerator;
+    return (total + gasPrice.denominator - 1n) / gasPrice.denominator;
+};
+//# sourceMappingURL=cosmosDecimal.js.map

package/dist/chains/cosmos/cosmosDecimal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cosmosDecimal.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/cosmos/cosmosDecimal.ts"],"names":[],"mappings":"AAWA,iGAAiG;AACjG,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAa,EAA6B,EAAE;IACvE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAEpD,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/C,MAAM,WAAW,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,KAAK,GAAG,QAAQ,EAAE,CAAC,CAAA;IAE/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAA;AACnC,CAAC,CAAA;AAED,6GAA6G;AAC7G,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,QAAgB,EAAE,QAAuB,EAAU,EAAE;IAC5F,MAAM,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAA;IAE3C,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,WAAW,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAA;AACnE,CAAC,CAAA"}

package/dist/chains/cosmos/gas.d.ts

@@ -1,16 +1,12 @@
 import { IbcEnabledCosmosChain } from '../../Chain.js';
 import type { CoinKey } from '../../coin/Coin.js';
+import { type ParsedDecimal } from './cosmosDecimal.js';
+export { getFeeAmountFromGasPrice } from './cosmosDecimal.js';
 export declare const cosmosGasRecord: Record<IbcEnabledCosmosChain, bigint>;
 type FetchOpts = {
     fetchImpl?: typeof fetch;
     signal?: AbortSignal;
 };
-type ParsedDecimal = {
-    numerator: bigint;
-    denominator: bigint;
-};
-export declare const getFeeAmountFromGasPrice: (gasLimit: bigint, gasPrice: ParsedDecimal) => bigint;
 export declare const getMinGasPriceForDenom: (minimumGasPrice: string, targetDenom: string) => ParsedDecimal | undefined;
 export declare const getCosmosFeeAmount: (coin: CoinKey<IbcEnabledCosmosChain>, opts?: FetchOpts) => Promise<bigint>;
-export {};
 //# sourceMappingURL=gas.d.ts.map

package/dist/chains/cosmos/gas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gas.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/cosmos/gas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAO9C,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,qBAAqB,EAAE,MAAM,CASjE,CAAA;AAED,KAAK,SAAS,GAAG;IACf,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,CAAA;AAMD,KAAK,aAAa,GAAG;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;CACpB,CAAA;AA2BD,eAAO,MAAM,wBAAwB,GAAI,UAAU,MAAM,EAAE,UAAU,aAAa,KAAG,MAIpF,CAAA;AAED,eAAO,MAAM,sBAAsB,GAAI,iBAAiB,MAAM,EAAE,aAAa,MAAM,KAAG,aAAa,GAAG,SAYrG,CAAA;AAyDD,eAAO,MAAM,kBAAkB,GAC7B,MAAM,OAAO,CAAC,qBAAqB,CAAC,EACpC,OAAM,SAAc,KACnB,OAAO,CAAC,MAAM,CAehB,CAAA"}
+{"version":3,"file":"gas.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/cosmos/gas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAA4B,KAAK,aAAa,EAAgB,MAAM,iBAAiB,CAAA;AAM5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAI1D,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,qBAAqB,EAAE,MAAM,CASjE,CAAA;AAED,KAAK,SAAS,GAAG;IACf,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,CAAA;AAqBD,eAAO,MAAM,sBAAsB,GAAI,iBAAiB,MAAM,EAAE,aAAa,MAAM,KAAG,aAAa,GAAG,SAYrG,CAAA;AA0ED,eAAO,MAAM,kBAAkB,GAC7B,MAAM,OAAO,CAAC,qBAAqB,CAAC,EACpC,OAAM,SAAc,KACnB,OAAO,CAAC,MAAM,CAehB,CAAA"}

package/dist/chains/cosmos/gas.js

@@ -1,7 +1,10 @@
 import { Chain } from '../../Chain.js';
+import { getFeeAmountFromGasPrice, parseDecimal } from './cosmosDecimal.js';
 import { cosmosFeeCoinDenom } from './cosmosFeeCoinDenom.js';
 import { getCosmosGasLimit } from './cosmosGasLimitRecord.js';
 import { getCosmosRpcUrl } from './getCosmosRpcUrl.js';
+import { getOsmosisDynamicFeeFloor } from './osmosisDynamicFee.js';
+export { getFeeAmountFromGasPrice } from './cosmosDecimal.js';
 const defaultGas = 7500n;
 export const cosmosGasRecord = {
     [Chain.Cosmos]: defaultGas,
@@ -16,14 +19,6 @@ export const cosmosGasRecord = {
 const minGasPriceConfigPath = '/cosmos/base/node/v1beta1/config';
 const minGasPriceFetchTimeoutMs = 3_000;
 const maxLiveFeeMultiplier = 10n;
-const parseDecimal = (value) => {
-    if (!/^\d+(?:\.\d+)?$/.test(value))
-        return undefined;
-    const [whole, fraction = ''] = value.split('.');
-    const denominator = 10n ** BigInt(fraction.length);
-    const numerator = BigInt(`${whole}${fraction}`);
-    return { numerator, denominator };
-};
 const parseMinGasPriceEntry = (entry) => {
     const match = entry.trim().match(/^(\d+(?:\.\d+)?)([a-zA-Z][a-zA-Z0-9/._:-]*)$/);
     if (!match)
@@ -34,10 +29,6 @@ const parseMinGasPriceEntry = (entry) => {
         return undefined;
     return { ...decimal, denom };
 };
-export const getFeeAmountFromGasPrice = (gasLimit, gasPrice) => {
-    const total = gasLimit * gasPrice.numerator;
-    return (total + gasPrice.denominator - 1n) / gasPrice.denominator;
-};
 export const getMinGasPriceForDenom = (minimumGasPrice, targetDenom) => {
     for (const entry of minimumGasPrice.split(',')) {
         const parsed = parseMinGasPriceEntry(entry);
@@ -97,7 +88,7 @@ const fetchMinGasPrice = async (chain, { fetchImpl = fetch, signal } = {}) => {
         timeoutController.cleanup();
     }
 };
-export const getCosmosFeeAmount = async (coin, opts = {}) => {
+const getGenericCosmosFeeAmount = async (coin, opts) => {
     const floor = cosmosGasRecord[coin.chain];
     try {
         const minimumGasPrice = await fetchMinGasPrice(coin.chain, opts);
@@ -113,4 +104,20 @@ export const getCosmosFeeAmount = async (coin, opts = {}) => {
         return floor;
     }
 };
+export const getCosmosFeeAmount = async (coin, opts = {}) => {
+    if (coin.chain !== Chain.Osmosis)
+        return getGenericCosmosFeeAmount(coin, opts);
+    // Osmosis's real fee floor is enforced by its EIP-1559 `x/txfees` module,
+    // NOT the generic node-config `minimum-gas-price` (a per-node/operator-
+    // configurable value that doesn't track the live protocol floor, and can
+    // be clamped away by the anomaly guard above when it legitimately spikes).
+    // Run both lookups concurrently (each has its own timeout budget) rather
+    // than sequentially, and never pay less than the higher of the two -
+    // see osmosisDynamicFee.ts.
+    const [genericFee, dynamicFloor] = await Promise.all([
+        getGenericCosmosFeeAmount(coin, opts),
+        getOsmosisDynamicFeeFloor(getCosmosGasLimit(coin), opts),
+    ]);
+    return dynamicFloor !== null && dynamicFloor > genericFee ? dynamicFloor : genericFee;
+};
 //# sourceMappingURL=gas.js.map

package/dist/chains/cosmos/gas.js.map

@@ -1 +1 @@
-{"version":3,"file":"gas.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/cosmos/gas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAyB,MAAM,aAAa,CAAA;AAE1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,MAAM,UAAU,GAAG,KAAK,CAAA;AAExB,MAAM,CAAC,MAAM,eAAe,GAA0C;IACpE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU;IAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK;IACtB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU;IAC1B,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,UAAU;IACzB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,iBAAiB;IAC/B,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,SAAS;IAC/B,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM;IACrB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO;CACvB,CAAA;AAgBD,MAAM,qBAAqB,GAAG,kCAAkC,CAAA;AAChE,MAAM,yBAAyB,GAAG,KAAK,CAAA;AACvC,MAAM,oBAAoB,GAAG,GAAG,CAAA;AAEhC,MAAM,YAAY,GAAG,CAAC,KAAa,EAA6B,EAAE;IAChE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAEpD,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/C,MAAM,WAAW,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,KAAK,GAAG,QAAQ,EAAE,CAAC,CAAA;IAE/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAA;AACnC,CAAC,CAAA;AAED,MAAM,qBAAqB,GAAG,CAAC,KAAa,EAAE,EAAE;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAA;IAChF,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAE5B,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,KAAK,CAAA;IAC/B,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IAE9B,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAA;AAC9B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,QAAgB,EAAE,QAAuB,EAAU,EAAE;IAC5F,MAAM,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAA;IAE3C,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,WAAW,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAA;AACnE,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,eAAuB,EAAE,WAAmB,EAA6B,EAAE;IAChH,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;QAC3C,IAAI,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9D,OAAO;gBACL,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,oBAAoB,GAAG,CAAC,MAAoB,EAAE,EAAE;IACpD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IAExC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;IACtC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,KAAK,EAAE,CAAA;IACT,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED,OAAO;QACL,UAAU;QACV,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC7C,CAAC;KACF,CAAA;AACH,CAAC,CAAA;AAED,MAAM,gBAAgB,GAAG,KAAK,EAAE,KAA4B,EAAE,EAAE,SAAS,GAAG,KAAK,EAAE,MAAM,KAAgB,EAAE,EAAE,EAAE;IAC7G,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,yBAAyB,CAAC,CAAA;IACjG,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,aAAa,GAAG,GAAG,EAAE,CACzB,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,yBAAyB,IAAI,CAAC,CAAC,CAAA;QACnG,IAAI,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAChD,aAAa,EAAE,CAAA;YACf,OAAM;QACR,CAAC;QAED,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,CAAC,KAAK,IAAI,EAAE;gBACV,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,qBAAqB,EAAE,EAAE;oBACpF,MAAM,EAAE,iBAAiB,CAAC,UAAU,CAAC,MAAM;iBAC5C,CAAC,CAAA;gBAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,mCAAmC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;gBACtF,CAAC;gBAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAA;gBAEhE,OAAO,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAA;YACrC,CAAC,CAAC,EAAE;YACJ,cAAc;SACf,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAA;QACrB,iBAAiB,CAAC,OAAO,EAAE,CAAA;IAC7B,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,IAAoC,EACpC,OAAkB,EAAE,EACH,EAAE;IACnB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAEzC,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAChE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,eAAe,EAAE,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACxF,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAA;QAE3B,MAAM,WAAW,GAAG,wBAAwB,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC/E,IAAI,WAAW,GAAG,KAAK,GAAG,oBAAoB;YAAE,OAAO,KAAK,CAAA;QAE5D,OAAO,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAA;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA"}
+{"version":3,"file":"gas.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/cosmos/gas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAyB,MAAM,aAAa,CAAA;AAE1D,OAAO,EAAE,wBAAwB,EAAsB,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC5F,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAE/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAE1D,MAAM,UAAU,GAAG,KAAK,CAAA;AAExB,MAAM,CAAC,MAAM,eAAe,GAA0C;IACpE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU;IAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK;IACtB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU;IAC1B,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,UAAU;IACzB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,iBAAiB;IAC/B,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,SAAS;IAC/B,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM;IACrB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO;CACvB,CAAA;AAWD,MAAM,qBAAqB,GAAG,kCAAkC,CAAA;AAChE,MAAM,yBAAyB,GAAG,KAAK,CAAA;AACvC,MAAM,oBAAoB,GAAG,GAAG,CAAA;AAEhC,MAAM,qBAAqB,GAAG,CAAC,KAAa,EAAE,EAAE;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAA;IAChF,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAE5B,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,KAAK,CAAA;IAC/B,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IAE9B,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAA;AAC9B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,eAAuB,EAAE,WAAmB,EAA6B,EAAE;IAChH,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;QAC3C,IAAI,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9D,OAAO;gBACL,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,oBAAoB,GAAG,CAAC,MAAoB,EAAE,EAAE;IACpD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IAExC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;IACtC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,KAAK,EAAE,CAAA;IACT,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED,OAAO;QACL,UAAU;QACV,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC7C,CAAC;KACF,CAAA;AACH,CAAC,CAAA;AAED,MAAM,gBAAgB,GAAG,KAAK,EAAE,KAA4B,EAAE,EAAE,SAAS,GAAG,KAAK,EAAE,MAAM,KAAgB,EAAE,EAAE,EAAE;IAC7G,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,yBAAyB,CAAC,CAAA;IACjG,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,aAAa,GAAG,GAAG,EAAE,CACzB,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,yBAAyB,IAAI,CAAC,CAAC,CAAA;QACnG,IAAI,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAChD,aAAa,EAAE,CAAA;YACf,OAAM;QACR,CAAC;QAED,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,CAAC,KAAK,IAAI,EAAE;gBACV,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,qBAAqB,EAAE,EAAE;oBACpF,MAAM,EAAE,iBAAiB,CAAC,UAAU,CAAC,MAAM;iBAC5C,CAAC,CAAA;gBAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,mCAAmC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;gBACtF,CAAC;gBAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAA;gBAEhE,OAAO,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAA;YACrC,CAAC,CAAC,EAAE;YACJ,cAAc;SACf,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAA;QACrB,iBAAiB,CAAC,OAAO,EAAE,CAAA;IAC7B,CAAC;AACH,CAAC,CAAA;AAED,MAAM,yBAAyB,GAAG,KAAK,EAAE,IAAoC,EAAE,IAAe,EAAmB,EAAE;IACjH,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAEzC,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAChE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,eAAe,EAAE,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACxF,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAA;QAE3B,MAAM,WAAW,GAAG,wBAAwB,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC/E,IAAI,WAAW,GAAG,KAAK,GAAG,oBAAoB;YAAE,OAAO,KAAK,CAAA;QAE5D,OAAO,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAA;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,IAAoC,EACpC,OAAkB,EAAE,EACH,EAAE;IACnB,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO;QAAE,OAAO,yBAAyB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAE9E,0EAA0E;IAC1E,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,qEAAqE;IACrE,4BAA4B;IAC5B,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,yBAAyB,CAAC,IAAI,EAAE,IAAI,CAAC;QACrC,yBAAyB,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;KACzD,CAAC,CAAA;IACF,OAAO,YAAY,KAAK,IAAI,IAAI,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAA;AACvF,CAAC,CAAA"}

package/dist/chains/cosmos/osmosisDynamicFee.d.ts

@@ -0,0 +1,13 @@
+type FetchOpts = {
+    fetchImpl?: typeof fetch;
+    signal?: AbortSignal;
+};
+/**
+ * Live fee floor for Osmosis (base-denom units for `gasLimit`), or null when
+ * the lookup failed OR the computed floor exceeds the sanity ceiling
+ * (fail-open in both cases - caller should fall back to its own static or
+ * generically-derived fee).
+ */
+export declare function getOsmosisDynamicFeeFloor(gasLimit: bigint, opts?: FetchOpts): Promise<bigint | null>;
+export {};
+//# sourceMappingURL=osmosisDynamicFee.d.ts.map

package/dist/chains/cosmos/osmosisDynamicFee.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"osmosisDynamicFee.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/cosmos/osmosisDynamicFee.ts"],"names":[],"mappings":"AAiDA,KAAK,SAAS,GAAG;IACf,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,CAAA;AA8CD;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,SAAc,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAa9G"}

package/dist/chains/cosmos/osmosisDynamicFee.js

@@ -0,0 +1,108 @@
+import { Chain } from '../../Chain.js';
+import { getFeeAmountFromGasPrice, parseDecimal } from './cosmosDecimal.js';
+import { getCosmosRpcUrl } from './getCosmosRpcUrl.js';
+/**
+ * Osmosis runs an EIP-1559-style dynamic base fee (`x/txfees` module): the
+ * real minimum required fee floats and is enforced at the protocol/consensus
+ * level, separate from a node's own locally-configured `minimum-gas-prices`
+ * (the generic `/cosmos/base/node/v1beta1/config` value `getCosmosFeeAmount`
+ * otherwise queries for every ibc-enabled chain). A tx priced against only
+ * the generic node config can still be rejected at broadcast with sdk error
+ * code 13 ("insufficient fees") when the live EIP-1559 base fee has risen
+ * above it.
+ *
+ * Live-verified in production (vultiagent-app): a broadcast failed with
+ * "base fee was 0.03 -> required 12000uosmo" - the generic min-gas-price
+ * mechanism did not reflect the real floor.
+ *
+ * Query Osmosis's own `cur_eip_base_fee` endpoint directly and apply
+ * headroom, rather than relying on the generic node-config value.
+ *
+ * Trust boundary (review finding, 2026-07-08): this floor feeds directly
+ * into the SIGNABLE fee, so a compromised/malfunctioning/MITM'd LCD (this
+ * endpoint honors a user-configured RPC override) returning a pathological
+ * `base_fee` must never (a) inflate the signable fee unboundedly, or (b)
+ * crash fee resolution outright (violating the fail-open contract every
+ * other error path here honors). Both are closed by computing the floor
+ * with exact rational arithmetic (no IEEE-754 `Number`, so no
+ * overflow-to-Infinity path) and clamping the result to a generous sanity
+ * ceiling before returning it.
+ */
+const OSMOSIS_BASE_FEE_HEADROOM = { numerator: 5n, denominator: 4n }; // 1.25x, exact
+// Hard ceiling on the base-fee lookup: fail-open only covers ERRORS - a
+// stalled txfees LCD (TCP up, no bytes) would otherwise hang the fee
+// resolution indefinitely.
+const OSMOSIS_BASE_FEE_TIMEOUT_MS = 5_000;
+// Sanity backstop on the computed floor itself, independent of the fetch
+// succeeding: the live-verified real incident this guards against needed
+// ~12_000 uosmo against a 9_000n static floor (~1.3x) - 1000x is enormous
+// headroom above any realistic base-fee spike while still bounding a
+// pathological/malicious LCD response (e.g. a `base_fee` of "1000" would
+// otherwise compute a ~375 OSMO fee for a standard send).
+const OSMOSIS_DYNAMIC_FLOOR_MAX_MULTIPLIER = 1000n;
+const OSMOSIS_STATIC_FLOOR = 9000n; // must match cosmosGasRecord[Chain.Osmosis] in gas.ts
+async function fetchOsmosisBaseFeePerGas({ fetchImpl = fetch, signal } = {}) {
+    const controller = new AbortController();
+    const onAbort = () => controller.abort();
+    if (signal?.aborted) {
+        controller.abort();
+    }
+    else {
+        signal?.addEventListener('abort', onAbort, { once: true });
+    }
+    const timeout = setTimeout(() => controller.abort(), OSMOSIS_BASE_FEE_TIMEOUT_MS);
+    const timeoutPromise = new Promise((_resolve, reject) => {
+        const rejectTimeout = () => reject(new Error('Osmosis base-fee request timed out'));
+        if (controller.signal.aborted) {
+            rejectTimeout();
+            return;
+        }
+        controller.signal.addEventListener('abort', rejectTimeout, { once: true });
+    });
+    try {
+        const body = await Promise.race([
+            (async () => {
+                const res = await fetchImpl(`${getCosmosRpcUrl(Chain.Osmosis)}/osmosis/txfees/v1beta1/cur_eip_base_fee`, {
+                    signal: controller.signal,
+                });
+                if (!res.ok)
+                    throw new Error(`Osmosis base-fee request failed: ${res.status}`);
+                return (await res.json());
+            })(),
+            timeoutPromise,
+        ]);
+        const baseFee = body?.base_fee;
+        if (typeof baseFee !== 'string')
+            return null;
+        // Exact rational parse - no `Number()` coercion, so no path to
+        // overflow-to-Infinity on a pathologically long-but-regex-valid string.
+        return parseDecimal(baseFee) ?? null;
+    }
+    catch {
+        return null;
+    }
+    finally {
+        clearTimeout(timeout);
+        signal?.removeEventListener('abort', onAbort);
+    }
+}
+/**
+ * Live fee floor for Osmosis (base-denom units for `gasLimit`), or null when
+ * the lookup failed OR the computed floor exceeds the sanity ceiling
+ * (fail-open in both cases - caller should fall back to its own static or
+ * generically-derived fee).
+ */
+export async function getOsmosisDynamicFeeFloor(gasLimit, opts = {}) {
+    const baseFee = await fetchOsmosisBaseFeePerGas(opts);
+    if (baseFee === null)
+        return null;
+    const withHeadroom = {
+        numerator: baseFee.numerator * OSMOSIS_BASE_FEE_HEADROOM.numerator,
+        denominator: baseFee.denominator * OSMOSIS_BASE_FEE_HEADROOM.denominator,
+    };
+    const fee = getFeeAmountFromGasPrice(gasLimit, withHeadroom);
+    if (fee > OSMOSIS_STATIC_FLOOR * OSMOSIS_DYNAMIC_FLOOR_MAX_MULTIPLIER)
+        return null;
+    return fee;
+}
+//# sourceMappingURL=osmosisDynamicFee.js.map

package/dist/chains/cosmos/osmosisDynamicFee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"osmosisDynamicFee.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/cosmos/osmosisDynamicFee.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACnC,OAAO,EAAE,wBAAwB,EAAsB,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,yBAAyB,GAAkB,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAA,CAAC,eAAe;AACnG,wEAAwE;AACxE,qEAAqE;AACrE,2BAA2B;AAC3B,MAAM,2BAA2B,GAAG,KAAK,CAAA;AACzC,yEAAyE;AACzE,yEAAyE;AACzE,0EAA0E;AAC1E,qEAAqE;AACrE,yEAAyE;AACzE,0DAA0D;AAC1D,MAAM,oCAAoC,GAAG,KAAM,CAAA;AACnD,MAAM,oBAAoB,GAAG,KAAM,CAAA,CAAC,sDAAsD;AAW1F,KAAK,UAAU,yBAAyB,CAAC,EAAE,SAAS,GAAG,KAAK,EAAE,MAAM,KAAgB,EAAE;IACpF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;IACxC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,UAAU,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,2BAA2B,CAAC,CAAA;IACjF,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAA;QACnF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,aAAa,EAAE,CAAA;YACf,OAAM;QACR,CAAC;QACD,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAC9B,CAAC,KAAK,IAAI,EAAE;gBACV,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,0CAA0C,EAAE;oBACvG,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAA;gBACF,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;gBAC9E,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2B,CAAA;YACrD,CAAC,CAAC,EAAE;YACJ,cAAc;SACf,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,IAAI,EAAE,QAAQ,CAAA;QAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QAE5C,+DAA+D;QAC/D,wEAAwE;QACxE,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAA;QACrB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,QAAgB,EAAE,OAAkB,EAAE;IACpF,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,CAAA;IACrD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAEjC,MAAM,YAAY,GAAkB;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS,GAAG,yBAAyB,CAAC,SAAS;QAClE,WAAW,EAAE,OAAO,CAAC,WAAW,GAAG,yBAAyB,CAAC,WAAW;KACzE,CAAA;IACD,MAAM,GAAG,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IAE5D,IAAI,GAAG,GAAG,oBAAoB,GAAG,oCAAoC;QAAE,OAAO,IAAI,CAAA;IAElF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/chains/cosmos/resolveCosmosGasFee.d.ts

@@ -11,6 +11,18 @@
  * the extra gas. Below or equal to the static limit, both values are left
  * untouched, keeping the non-dynamic path byte-identical.
  */
+/**
+ * COSMOS-02: an IBC transfer (ICS-20 `MsgTransfer`, optionally PFM-forwarded
+ * via memo) does measurably more work on the source leg than a plain bank
+ * send — channel-state writes plus a relayer event — so the flat per-chain
+ * limit (calibrated for `MsgSend`) is undersized and can run out of gas
+ * mid-execution: the fee is spent, the transfer fails, and funds don't move
+ * but the fee is still burned. PFM hops are budgeted by each forwarding
+ * chain, not the source leg here, so ×2 headroom on the source leg is
+ * sufficient. Mirrors the app's own `IBC_GAS_MULTIPLIER`
+ * (vultiagent-app/src/services/cosmosTx.ts).
+ */
+export declare const IBC_GAS_MULTIPLIER = 2n;
 type ResolveCosmosGasFeeInput = {
     /** static per-chain fee amount already stored in `CosmosSpecific.gas` */
     gas: bigint;
@@ -18,11 +30,20 @@ type ResolveCosmosGasFeeInput = {
     relayedGasLimit: bigint | undefined;
     /** static per-chain gas limit (`getCosmosGasLimit`) */
     staticGasLimit: bigint;
+    /**
+     * Whether this tx is an IBC transfer (`MsgTransfer`, optionally
+     * PFM-forwarded). Applies `IBC_GAS_MULTIPLIER` to both the static gas
+     * limit and its matching fee before resolving against a relayed limit.
+     * Defaults to `false` so every other Cosmos message (plain sends, wasm
+     * executes, staking) keeps paying the calibrated flat fee — a blanket
+     * multiplier on all Cosmos messages would overpay non-IBC sends.
+     */
+    isIbcTransfer?: boolean;
 };
 type ResolveCosmosGasFeeResult = {
     resolvedGasLimit: bigint;
     feeAmount: bigint;
 };
-export declare const resolveCosmosGasFee: ({ gas, relayedGasLimit, staticGasLimit, }: ResolveCosmosGasFeeInput) => ResolveCosmosGasFeeResult;
+export declare const resolveCosmosGasFee: ({ gas, relayedGasLimit, staticGasLimit, isIbcTransfer, }: ResolveCosmosGasFeeInput) => ResolveCosmosGasFeeResult;
 export {};
 //# sourceMappingURL=resolveCosmosGasFee.d.ts.map

package/dist/chains/cosmos/resolveCosmosGasFee.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolveCosmosGasFee.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/cosmos/resolveCosmosGasFee.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,KAAK,wBAAwB,GAAG;IAC9B,yEAAyE;IACzE,GAAG,EAAE,MAAM,CAAA;IACX,gFAAgF;IAChF,eAAe,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,uDAAuD;IACvD,cAAc,EAAE,MAAM,CAAA;CACvB,CAAA;AAED,KAAK,yBAAyB,GAAG;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,mBAAmB,GAAI,2CAIjC,wBAAwB,KAAG,yBAO7B,CAAA"}
+{"version":3,"file":"resolveCosmosGasFee.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/cosmos/resolveCosmosGasFee.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,KAAK,CAAA;AAEpC,KAAK,wBAAwB,GAAG;IAC9B,yEAAyE;IACzE,GAAG,EAAE,MAAM,CAAA;IACX,gFAAgF;IAChF,eAAe,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,uDAAuD;IACvD,cAAc,EAAE,MAAM,CAAA;IACtB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB,CAAA;AAED,KAAK,yBAAyB,GAAG;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,mBAAmB,GAAI,0DAKjC,wBAAwB,KAAG,yBAY7B,CAAA"}

package/dist/chains/cosmos/resolveCosmosGasFee.js

@@ -1,6 +1,35 @@
-export const resolveCosmosGasFee = ({ gas, relayedGasLimit, staticGasLimit, }) => {
-    const resolvedGasLimit = relayedGasLimit && relayedGasLimit > 0n ? relayedGasLimit : staticGasLimit;
-    const feeAmount = resolvedGasLimit > staticGasLimit ? (gas * resolvedGasLimit + staticGasLimit - 1n) / staticGasLimit : gas;
+/**
+ * Resolves the effective Cosmos gas limit and fee amount for a native send,
+ * honoring a relayed dynamic `gas_limit` when present.
+ *
+ * Shared by the signing-inputs resolver (what gets signed) and the fee-display
+ * resolver (what the user sees) so the shown and signed fee can never drift —
+ * the gas limit is part of the SignDoc, so both sides MUST agree.
+ *
+ * When the relayed limit exceeds the static per-chain limit, the fee amount is
+ * scaled proportionally with a ceiling (exact integer math) so the tx pays for
+ * the extra gas. Below or equal to the static limit, both values are left
+ * untouched, keeping the non-dynamic path byte-identical.
+ */
+/**
+ * COSMOS-02: an IBC transfer (ICS-20 `MsgTransfer`, optionally PFM-forwarded
+ * via memo) does measurably more work on the source leg than a plain bank
+ * send — channel-state writes plus a relayer event — so the flat per-chain
+ * limit (calibrated for `MsgSend`) is undersized and can run out of gas
+ * mid-execution: the fee is spent, the transfer fails, and funds don't move
+ * but the fee is still burned. PFM hops are budgeted by each forwarding
+ * chain, not the source leg here, so ×2 headroom on the source leg is
+ * sufficient. Mirrors the app's own `IBC_GAS_MULTIPLIER`
+ * (vultiagent-app/src/services/cosmosTx.ts).
+ */
+export const IBC_GAS_MULTIPLIER = 2n;
+export const resolveCosmosGasFee = ({ gas, relayedGasLimit, staticGasLimit, isIbcTransfer = false, }) => {
+    const effectiveStaticGasLimit = isIbcTransfer ? staticGasLimit * IBC_GAS_MULTIPLIER : staticGasLimit;
+    const effectiveGas = isIbcTransfer ? gas * IBC_GAS_MULTIPLIER : gas;
+    const resolvedGasLimit = relayedGasLimit && relayedGasLimit > 0n ? relayedGasLimit : effectiveStaticGasLimit;
+    const feeAmount = resolvedGasLimit > effectiveStaticGasLimit
+        ? (effectiveGas * resolvedGasLimit + effectiveStaticGasLimit - 1n) / effectiveStaticGasLimit
+        : effectiveGas;
     return { resolvedGasLimit, feeAmount };
 };
 //# sourceMappingURL=resolveCosmosGasFee.js.map

package/dist/chains/cosmos/resolveCosmosGasFee.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolveCosmosGasFee.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/cosmos/resolveCosmosGasFee.ts"],"names":[],"mappings":"AA2BA,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,EAClC,GAAG,EACH,eAAe,EACf,cAAc,GACW,EAA6B,EAAE;IACxD,MAAM,gBAAgB,GAAG,eAAe,IAAI,eAAe,GAAG,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,cAAc,CAAA;IAEnG,MAAM,SAAS,GACb,gBAAgB,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,gBAAgB,GAAG,cAAc,GAAG,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAA;IAE3G,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAA;AACxC,CAAC,CAAA"}
+{"version":3,"file":"resolveCosmosGasFee.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/cosmos/resolveCosmosGasFee.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAyBpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,EAClC,GAAG,EACH,eAAe,EACf,cAAc,EACd,aAAa,GAAG,KAAK,GACI,EAA6B,EAAE;IACxD,MAAM,uBAAuB,GAAG,aAAa,CAAC,CAAC,CAAC,cAAc,GAAG,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAA;IACpG,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAA;IAEnE,MAAM,gBAAgB,GAAG,eAAe,IAAI,eAAe,GAAG,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,uBAAuB,CAAA;IAE5G,MAAM,SAAS,GACb,gBAAgB,GAAG,uBAAuB;QACxC,CAAC,CAAC,CAAC,YAAY,GAAG,gBAAgB,GAAG,uBAAuB,GAAG,EAAE,CAAC,GAAG,uBAAuB;QAC5F,CAAC,CAAC,YAAY,CAAA;IAElB,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAA;AACxC,CAAC,CAAA"}

package/dist/chains/utxo/minUtxo.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"minUtxo.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/utxo/minUtxo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,cAAc,EAAE,MAAM,aAAa,CAAA;AAEnD,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAQlD,CAAA"}
+{"version":3,"file":"minUtxo.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/utxo/minUtxo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,cAAc,EAAE,MAAM,aAAa,CAAA;AAEnD,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAclD,CAAA"}

package/dist/chains/utxo/minUtxo.js

@@ -3,7 +3,13 @@ export const minUtxo = {
     [Chain.Cardano]: 1400000n,
     [Chain.Bitcoin]: 546n,
     [Chain.Dogecoin]: 1000000n,
-    [Chain.Litecoin]: 1000n,
+    // UTXO-02 (audit r2): Litecoin's DUST_RELAY_TX_FEE is ~10x Bitcoin's, so its real standard dust threshold
+    // is ~2_940 litoshi for a P2WPKH output (the scriptType LTC uses), ~5_460 legacy P2PKH — NOT 1_000. At the
+    // old 1_000n, a change output of 1_001..2_939 litoshi was treated as spendable but is non-standard dust, so
+    // the tx could be rejected by relays / get stuck. Use the P2WPKH standard (2_940). KEEP IN SYNC with the
+    // per-chain dustLimit map in packages/sdk/src/chains/utxo/tx.ts (UTXO_SPECS). BCH/Dash/Zcash stay at 1_000n
+    // — that's already at/above their real ~546 dust (BTC-like relay fee), so it's conservative, not dangerous.
+    [Chain.Litecoin]: 2940n,
     [Chain.BitcoinCash]: 1000n,
     [Chain.Dash]: 1000n,
     [Chain.Zcash]: 1000n,

package/dist/chains/utxo/minUtxo.js.map

@@ -1 +1 @@
-{"version":3,"file":"minUtxo.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/utxo/minUtxo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAkB,MAAM,aAAa,CAAA;AAEnD,MAAM,CAAC,MAAM,OAAO,GAAmC;IACrD,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAU;IAC3B,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI;IACrB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAU;IAC5B,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAM;IACxB,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,KAAM;IAC3B,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAM;IACpB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAM;CACtB,CAAA"}
+{"version":3,"file":"minUtxo.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/utxo/minUtxo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAkB,MAAM,aAAa,CAAA;AAEnD,MAAM,CAAC,MAAM,OAAO,GAAmC;IACrD,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAU;IAC3B,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI;IACrB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAU;IAC5B,0GAA0G;IAC1G,2GAA2G;IAC3G,4GAA4G;IAC5G,yGAAyG;IACzG,4GAA4G;IAC5G,4GAA4G;IAC5G,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAM;IACxB,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,KAAM;IAC3B,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAM;IACpB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAM;CACtB,CAAA"}

package/dist/coin/utils/findByTicker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"findByTicker.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/utils/findByTicker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAE9B,KAAK,iBAAiB,CAAC,CAAC,SAAS,IAAI,IAAI;IACvC,KAAK,EAAE,CAAC,EAAE,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,eAAO,MAAM,YAAY,GAAI,CAAC,SAAS,IAAI,EAAE,mBAAmB,iBAAiB,CAAC,CAAC,CAAC,KAAG,CAAC,GAAG,IAC7C,CAAA"}
+{"version":3,"file":"findByTicker.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/utils/findByTicker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAE9B,KAAK,iBAAiB,CAAC,CAAC,SAAS,IAAI,IAAI;IACvC,KAAK,EAAE,CAAC,EAAE,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAOD,eAAO,MAAM,YAAY,GAAI,CAAC,SAAS,IAAI,EAAE,mBAAmB,iBAAiB,CAAC,CAAC,CAAC,KAAG,CAAC,GAAG,IAU1F,CAAA"}

package/dist/coin/utils/findByTicker.js

@@ -1,2 +1,16 @@
-export const findByTicker = ({ coins, ticker }) => coins.find(c => c.ticker === ticker) ?? null;
+// SDK2-02 (audit r2): a bare ticker like "USDC" exists on many chains (Ethereum/Polygon/Arbitrum/Base/…).
+// The old `coins.find(c => c.ticker === ticker)` returned the ARRAY-ORDER first match — if this ever got
+// wired into a fund path, "USDC" would silently resolve to whichever chain happened to be first, sending to
+// the wrong network. Refuse to guess: return the unique match (or null when absent), and THROW when the
+// ticker is ambiguous across more than one chain so the caller must disambiguate by chain.
+export const findByTicker = ({ coins, ticker }) => {
+    const matches = coins.filter(c => c.ticker === ticker);
+    if (matches.length === 0)
+        return null;
+    const chains = new Set(matches.map(c => c.chain));
+    if (chains.size > 1) {
+        throw new Error(`findByTicker: ticker "${ticker}" is ambiguous across ${chains.size} chains (${[...chains].join(', ')}); pass a chain-scoped lookup instead of a bare ticker`);
+    }
+    return matches[0] ?? null;
+};
 //# sourceMappingURL=findByTicker.js.map

package/dist/coin/utils/findByTicker.js.map

@@ -1 +1 @@
-{"version":3,"file":"findByTicker.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/utils/findByTicker.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,MAAM,YAAY,GAAG,CAAiB,EAAE,KAAK,EAAE,MAAM,EAAwB,EAAY,EAAE,CAChG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,CAAA"}
+{"version":3,"file":"findByTicker.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/utils/findByTicker.ts"],"names":[],"mappings":"AAOA,0GAA0G;AAC1G,yGAAyG;AACzG,4GAA4G;AAC5G,wGAAwG;AACxG,2FAA2F;AAC3F,MAAM,CAAC,MAAM,YAAY,GAAG,CAAiB,EAAE,KAAK,EAAE,MAAM,EAAwB,EAAY,EAAE;IAChG,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;IACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IACjD,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,yBAAyB,MAAM,CAAC,IAAI,YAAY,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,wDAAwD,CAC9J,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;AAC3B,CAAC,CAAA"}

package/dist/swap/general/cowswap/api/getCowSwapQuote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getCowSwapQuote.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/swap/general/cowswap/api/getCowSwapQuote.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAGL,kBAAkB,EAEnB,MAAM,WAAW,CAAA;AAiBlB,KAAK,oBAAoB,GAAG;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,kBAAkB,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAsB,eAAe,CAAC,EACpC,SAAS,EACT,QAAQ,EACR,UAAU,EACV,IAAI,EACJ,QAAQ,EACR,WAAW,EACX,YAAY,GACb,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA+DlD"}
+{"version":3,"file":"getCowSwapQuote.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/swap/general/cowswap/api/getCowSwapQuote.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAIL,kBAAkB,EAEnB,MAAM,WAAW,CAAA;AAiBlB,KAAK,oBAAoB,GAAG;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,kBAAkB,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AASD,wBAAsB,eAAe,CAAC,EACpC,SAAS,EACT,QAAQ,EACR,UAAU,EACV,IAAI,EACJ,QAAQ,EACR,WAAW,EACX,YAAY,GACb,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsIlD"}

package/dist/swap/general/cowswap/api/getCowSwapQuote.js

@@ -1,6 +1,12 @@
 import { queryUrl } from '@vultisig/lib-utils/query/queryUrl';
-import { COWSWAP_DEFAULT_AFFILIATE_BPS, COWSWAP_FEE_RECIPIENT, KNOWN_PERMIT_TOKENS, } from '../config.js';
+import { COWSWAP_DEFAULT_AFFILIATE_BPS, COWSWAP_FEE_RECIPIENT, COWSWAP_VALID_TO_SECONDS, KNOWN_PERMIT_TOKENS, } from '../config.js';
 import { buildCowSwapAppData, keccak256Hex } from '../sign/buildCowSwapOrder.js';
+// This SDK only ever requests a sell order that must fill completely — named here (rather than
+// inlined at both the request body below AND the AGG-01 response-echo checks) so the two stay
+// in lockstep if that ever changes; comparing against a variable is more robust than duplicating
+// the literal in two places (codex review, PR #1082).
+const REQUESTED_KIND = 'sell';
+const REQUESTED_PARTIALLY_FILLABLE = false;
 export async function getCowSwapQuote({ sellToken, buyToken, sellAmount, from, receiver, chainConfig, affiliateBps, }) {
     const bps = affiliateBps ?? COWSWAP_DEFAULT_AFFILIATE_BPS;
     const appData = buildCowSwapAppData(bps, COWSWAP_FEE_RECIPIENT);
@@ -11,9 +17,9 @@ export async function getCowSwapQuote({ sellToken, buyToken, sellAmount, from, r
         sellAmountBeforeFee: sellAmount.toString(),
         from: from.toLowerCase(),
         receiver: receiver.toLowerCase(),
-        kind: 'sell',
+        kind: REQUESTED_KIND,
         signingScheme: 'eip712',
-        partiallyFillable: false,
+        partiallyFillable: REQUESTED_PARTIALLY_FILLABLE,
         appData,
         appDataHash,
     };
@@ -22,6 +28,52 @@ export async function getCowSwapQuote({ sellToken, buyToken, sellAmount, from, r
         body,
     });
     const { quote } = response;
+    // AGG-01 fund-safety fix (round-2 spec-level audit): sellToken/buyToken/kind/
+    // partiallyFillable were previously taken straight from this untrusted /quote response and
+    // signed as-is via the EIP-712 GPv2 Order struct (buildCowSwapOrderTypedData.ts). `receiver`
+    // just below already uses the caller-supplied local, not quote.receiver — the "don't trust
+    // the API for security-critical fields" pattern already existed here, just not applied to
+    // these 4 fields. A compromised/buggy apiBase response substituting a token address, or
+    // flipping `kind` from 'sell' to 'buy', would get signed: a `kind` flip specifically inverts
+    // GPv2's semantics (sell: sellAmount is authoritative post-fee; buy: buyAmount is the fixed
+    // target, sellAmount becomes a ceiling) while grossSellAmount below is computed assuming
+    // sell-order semantics — the SDK would sign a fundamentally different economic contract than
+    // the one it believes it built. This SDK only ever requests kind:'sell' + partiallyFillable:
+    // false (the request body above), so any other value in the response is definitionally wrong.
+    if (quote.sellToken.toLowerCase() !== sellToken.toLowerCase()) {
+        throw new Error(`CowSwap quote returned a mismatched sellToken (requested ${sellToken}, got ${quote.sellToken}) — refusing to sign.`);
+    }
+    if (quote.buyToken.toLowerCase() !== buyToken.toLowerCase()) {
+        throw new Error(`CowSwap quote returned a mismatched buyToken (requested ${buyToken}, got ${quote.buyToken}) — refusing to sign.`);
+    }
+    if (quote.kind !== REQUESTED_KIND) {
+        throw new Error(`CowSwap quote returned kind '${quote.kind}' (requested '${REQUESTED_KIND}') — refusing to sign.`);
+    }
+    if (quote.partiallyFillable !== REQUESTED_PARTIALLY_FILLABLE) {
+        throw new Error(`CowSwap quote returned partiallyFillable=${quote.partiallyFillable} (requested ${REQUESTED_PARTIALLY_FILLABLE}) — refusing to sign.`);
+    }
+    // AGG-01 follow-up (codex review, PR #1082): validTo is entirely server-determined (the
+    // request sends no validTo of its own, so there is no request-side value to equality-check
+    // against — unlike the fields above). Still part of the signed Order struct, so bound it to a
+    // generous ceiling (buildCowSwapOrder.ts's sibling implementation computes its OWN local
+    // validTo instead of trusting the response at all — this is the softer version of that same
+    // instinct): reject a response whose validTo is unreasonably far in the future (a malicious/
+    // malfunctioning response making the order executable far beyond user intent) or already in
+    // the past (an expired/garbage quote).
+    //
+    // The ceiling is 4x COWSWAP_VALID_TO_SECONDS, not 2x — live-verified (2026-07-08, real
+    // api.cow.fi/mainnet request) that CoW's actual returned validTo is `now + 1800s` (30 min),
+    // NOT ~15 min as COWSWAP_VALID_TO_SECONDS alone would suggest (that constant is
+    // buildCowSwapOrder.ts's OWN locally-computed TTL, a different value from what the live API
+    // returns). A 2x/30-min cap would have sat RIGHT AT the observed real value with zero headroom
+    // for clock skew or normal timing variance — exactly the false-block risk the zkSync router
+    // case flagged (team-lead review). 4x/60-min gives real headroom over the observed 30-min
+    // reality while still catching genuinely-absurd values (hours/days out — the actual threat).
+    const nowSeconds = Math.floor(Date.now() / 1000);
+    const maxReasonableValidTo = nowSeconds + 4 * COWSWAP_VALID_TO_SECONDS;
+    if (quote.validTo <= nowSeconds || quote.validTo > maxReasonableValidTo) {
+        throw new Error(`CowSwap quote returned an unreasonable validTo (${quote.validTo}, now=${nowSeconds}, max=${maxReasonableValidTo}) — refusing to sign.`);
+    }
     const permitRequired = KNOWN_PERMIT_TOKENS[chainConfig.chainId]?.some(addr => addr.toLowerCase() === sellToken.toLowerCase());
     // The CoW orderbook requires submitted orders to carry `feeAmount = 0` — the
     // network/solver fee is folded into the price (taken from order surplus), not
@@ -32,6 +84,19 @@ export async function getCowSwapQuote({ sellToken, buyToken, sellAmount, from, r
     // quoted for the net amount. This value is signed AND submitted, so both stay
     // consistent.
     const grossSellAmount = (BigInt(quote.sellAmount) + BigInt(quote.feeAmount)).toString();
+    // AGG-01 follow-up (codex review, PR #1082): grossSellAmount becomes the signed Order's
+    // sellAmount — the SDK's authorized spend — and was, like the 4 fields above, taken entirely
+    // from the untrusted response with no check against what was actually requested. CoW's
+    // `sellAmountBeforeFee` request param is specifically designed so the API solves for
+    // `quote.sellAmount + quote.feeAmount === sellAmountBeforeFee` exactly — live-verified against
+    // the real api.cow.fi/mainnet quote endpoint on two different pairs/amounts on 2026-07-08,
+    // both matched byte-for-byte, not just approximately. A compromised/buggy response inflating
+    // sellAmount or feeAmount would sign authorization to sell MORE than the user requested —
+    // the most direct fund-safety consequence of any field in this struct. Same "refuse to sign
+    // on mismatch" treatment as the fields above.
+    if (grossSellAmount !== sellAmount.toString()) {
+        throw new Error(`CowSwap quote's sellAmount+feeAmount (${grossSellAmount}) does not match the requested sellAmountBeforeFee (${sellAmount}) — refusing to sign.`);
+    }
     return {
         dstAmount: quote.buyAmount,
         provider: 'cowswap',

package/dist/swap/general/cowswap/api/getCowSwapQuote.js.map

@@ -1 +1 @@
-{"version":3,"file":"getCowSwapQuote.js","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/swap/general/cowswap/api/getCowSwapQuote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAA;AAG7D,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EAErB,mBAAmB,GACpB,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AA0B7E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,SAAS,EACT,QAAQ,EACR,UAAU,EACV,IAAI,EACJ,QAAQ,EACR,WAAW,EACX,YAAY,GACS;IACrB,MAAM,GAAG,GAAG,YAAY,IAAI,6BAA6B,CAAA;IACzD,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAA;IAC/D,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IAEzC,MAAM,IAAI,GAAwB;QAChC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;QAClC,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE;QAChC,mBAAmB,EAAE,UAAU,CAAC,QAAQ,EAAE;QAC1C,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;QACxB,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE;QAChC,IAAI,EAAE,MAAM;QACZ,aAAa,EAAE,QAAQ;QACvB,iBAAiB,EAAE,KAAK;QACxB,OAAO;QACP,WAAW;KACZ,CAAA;IAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAA0B,GAAG,WAAW,CAAC,OAAO,eAAe,EAAE;QAC9F,MAAM,EAAE,MAAM;QACd,IAAI;KACL,CAAC,CAAA;IAEF,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAA;IAE1B,MAAM,cAAc,GAAG,mBAAmB,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,CACnE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,CACvD,CAAA;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,+DAA+D;IAC/D,4EAA4E;IAC5E,+EAA+E;IAC/E,4EAA4E;IAC5E,8EAA8E;IAC9E,cAAc;IACd,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAEvF,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,SAAS;QACnB,EAAE,EAAE;YACF,aAAa,EAAE;gBACb,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ;gBACR,UAAU,EAAE,eAAe;gBAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO;gBACP,WAAW;gBACX,SAAS,EAAE,GAAG;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,gBAAgB,EAAE,OAAO;gBACzB,eAAe,EAAE,OAAO;gBACxB,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD;SACF;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"getCowSwapQuote.js","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/swap/general/cowswap/api/getCowSwapQuote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAA;AAG7D,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,wBAAwB,EAExB,mBAAmB,GACpB,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AA0B7E,+FAA+F;AAC/F,8FAA8F;AAC9F,iGAAiG;AACjG,sDAAsD;AACtD,MAAM,cAAc,GAAG,MAAe,CAAA;AACtC,MAAM,4BAA4B,GAAG,KAAc,CAAA;AAEnD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,SAAS,EACT,QAAQ,EACR,UAAU,EACV,IAAI,EACJ,QAAQ,EACR,WAAW,EACX,YAAY,GACS;IACrB,MAAM,GAAG,GAAG,YAAY,IAAI,6BAA6B,CAAA;IACzD,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAA;IAC/D,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IAEzC,MAAM,IAAI,GAAwB;QAChC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;QAClC,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE;QAChC,mBAAmB,EAAE,UAAU,CAAC,QAAQ,EAAE;QAC1C,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;QACxB,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE;QAChC,IAAI,EAAE,cAAc;QACpB,aAAa,EAAE,QAAQ;QACvB,iBAAiB,EAAE,4BAA4B;QAC/C,OAAO;QACP,WAAW;KACZ,CAAA;IAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAA0B,GAAG,WAAW,CAAC,OAAO,eAAe,EAAE;QAC9F,MAAM,EAAE,MAAM;QACd,IAAI;KACL,CAAC,CAAA;IAEF,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAA;IAE1B,8EAA8E;IAC9E,2FAA2F;IAC3F,6FAA6F;IAC7F,2FAA2F;IAC3F,0FAA0F;IAC1F,wFAAwF;IACxF,6FAA6F;IAC7F,4FAA4F;IAC5F,yFAAyF;IACzF,6FAA6F;IAC7F,6FAA6F;IAC7F,8FAA8F;IAC9F,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,4DAA4D,SAAS,SAAS,KAAK,CAAC,SAAS,uBAAuB,CACrH,CAAA;IACH,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,2DAA2D,QAAQ,SAAS,KAAK,CAAC,QAAQ,uBAAuB,CAClH,CAAA;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,CAAC,IAAI,iBAAiB,cAAc,wBAAwB,CAAC,CAAA;IACpH,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,4BAA4B,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,4CAA4C,KAAK,CAAC,iBAAiB,eAAe,4BAA4B,uBAAuB,CACtI,CAAA;IACH,CAAC;IACD,wFAAwF;IACxF,2FAA2F;IAC3F,8FAA8F;IAC9F,yFAAyF;IACzF,4FAA4F;IAC5F,6FAA6F;IAC7F,4FAA4F;IAC5F,uCAAuC;IACvC,EAAE;IACF,uFAAuF;IACvF,4FAA4F;IAC5F,gFAAgF;IAChF,4FAA4F;IAC5F,+FAA+F;IAC/F,4FAA4F;IAC5F,0FAA0F;IAC1F,6FAA6F;IAC7F,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IAChD,MAAM,oBAAoB,GAAG,UAAU,GAAG,CAAC,GAAG,wBAAwB,CAAA;IACtE,IAAI,KAAK,CAAC,OAAO,IAAI,UAAU,IAAI,KAAK,CAAC,OAAO,GAAG,oBAAoB,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,mDAAmD,KAAK,CAAC,OAAO,SAAS,UAAU,SAAS,oBAAoB,uBAAuB,CACxI,CAAA;IACH,CAAC;IAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,CACnE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,CACvD,CAAA;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,+DAA+D;IAC/D,4EAA4E;IAC5E,+EAA+E;IAC/E,4EAA4E;IAC5E,8EAA8E;IAC9E,cAAc;IACd,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAEvF,wFAAwF;IACxF,6FAA6F;IAC7F,uFAAuF;IACvF,qFAAqF;IACrF,+FAA+F;IAC/F,2FAA2F;IAC3F,6FAA6F;IAC7F,0FAA0F;IAC1F,4FAA4F;IAC5F,8CAA8C;IAC9C,IAAI,eAAe,KAAK,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,yCAAyC,eAAe,uDAAuD,UAAU,uBAAuB,CACjJ,CAAA;IACH,CAAC;IAED,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,SAAS;QACnB,EAAE,EAAE;YACF,aAAa,EAAE;gBACb,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ;gBACR,UAAU,EAAE,eAAe;gBAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO;gBACP,WAAW;gBACX,SAAS,EAAE,GAAG;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,gBAAgB,EAAE,OAAO;gBACzB,eAAe,EAAE,OAAO;gBACxB,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD;SACF;KACF,CAAA;AACH,CAAC"}

package/dist/swap/general/jupiter/api/getJupiterSwapQuote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getJupiterSwapQuote.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/swap/general/jupiter/api/getJupiterSwapQuote.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAA;AACrF,OAAO,EAEL,KAAK,sBAAsB,EAG5B,MAAM,kDAAkD,CAAA;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oEAAoE,CAAA;AAC5G,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAUzE,KAAK,KAAK,GAAG,MAAM,CAAC,iBAAiB,EAAE,WAAW,CAAC,uBAAuB,CAAC,CAAC,GAAG;IAC7E,MAAM,EAAE,MAAM,CAAA;IACd,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,sBAAsB,CAAA;IACtC,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AA2CD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,GAAU,iEAOvC,KAAK,KAAG,OAAO,CAAC,gBAAgB,CAuFlC,CAAA"}
+{"version":3,"file":"getJupiterSwapQuote.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/swap/general/jupiter/api/getJupiterSwapQuote.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAA;AACrF,OAAO,EAEL,KAAK,sBAAsB,EAG5B,MAAM,kDAAkD,CAAA;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oEAAoE,CAAA;AAE5G,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAUzE,KAAK,KAAK,GAAG,MAAM,CAAC,iBAAiB,EAAE,WAAW,CAAC,uBAAuB,CAAC,CAAC,GAAG;IAC7E,MAAM,EAAE,MAAM,CAAA;IACd,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,sBAAsB,CAAA;IACtC,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AA2CD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,GAAU,iEAOvC,KAAK,KAAG,OAAO,CAAC,gBAAgB,CA8FlC,CAAA"}