@vultisig/core-chain 2.26.0 → 2.28.0

package/dist/chains/cosmos/qbtc/waitForQbtcTxInclusion.js

@@ -0,0 +1,33 @@
+import { qbtcRestUrl } from '@vultisig/core-chain/chains/cosmos/qbtc/tendermintRpcUrl';
+import { sleep } from '@vultisig/lib-utils/sleep';
+/**
+ * Polls `/cosmos/tx/v1beta1/txs/{txHash}` until the tx is included in a block (200 OK) or the
+ * timeout fires. 404 means "not yet included" and triggers a retry. Other non-2xx statuses
+ * propagate as errors so we don't mask infra failures as "still pending".
+ *
+ * QBTC broadcasts use `BROADCAST_MODE_SYNC`, which only surfaces the CheckTx (mempool-admission)
+ * code — a DeliverTx failure (out-of-gas, execution revert) still returns `code: 0` at broadcast
+ * time. Both the claim helper (broadcastClaimTx) and the send broadcast resolver
+ * (tx/broadcast/resolvers/qbtc) poll here and re-check the included `code` so an execution failure
+ * isn't reported as a successful broadcast.
+ */
+export const waitForQbtcTxInclusion = async ({ txHash, timeoutMs, intervalMs, }) => {
+    const url = `${qbtcRestUrl}/cosmos/tx/v1beta1/txs/${txHash}`;
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() <= deadline) {
+        const response = await fetch(url);
+        if (response.ok) {
+            const data = await response.json();
+            if (data.tx_response)
+                return data.tx_response;
+            throw new Error(`QBTC tx ${txHash}: missing tx_response on inclusion query`);
+        }
+        if (response.status !== 404) {
+            const text = await response.text();
+            throw new Error(`QBTC inclusion query failed (${response.status}): ${text}`);
+        }
+        await sleep(intervalMs);
+    }
+    throw new Error(`QBTC tx ${txHash} not included within ${timeoutMs}ms`);
+};
+//# sourceMappingURL=waitForQbtcTxInclusion.js.map

package/dist/chains/cosmos/qbtc/waitForQbtcTxInclusion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"waitForQbtcTxInclusion.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/chains/cosmos/qbtc/waitForQbtcTxInclusion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0DAA0D,CAAA;AACtF,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AAwBjD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EAAE,EAC3C,MAAM,EACN,SAAS,EACT,UAAU,GAKX,EAA2B,EAAE;IAC5B,MAAM,GAAG,GAAG,GAAG,WAAW,0BAA0B,MAAM,EAAE,CAAA;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;IAEvC,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAA;QAEjC,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,GAAyB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACxD,IAAI,IAAI,CAAC,WAAW;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAA;YAC7C,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,0CAA0C,CAAC,CAAA;QAC9E,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAClC,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAA;QAC9E,CAAC;QAED,MAAM,KAAK,CAAC,UAAU,CAAC,CAAA;IACzB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,wBAAwB,SAAS,IAAI,CAAC,CAAA;AACzE,CAAC,CAAA"}

package/dist/coin/balance/getEvmChainBalances.d.ts

@@ -6,6 +6,12 @@ export type GetEvmChainBalancesInput = {
     address: Address;
     coins: AccountCoinKey<EvmChain>[];
 };
+/**
+ * Balances keyed by `accountCoinKeyToString`. A key is present ONLY when the balance was actually
+ * READ: a present `0n` is a genuine zero balance, an ABSENT key means "unknown, the call failed".
+ * Callers must not conflate the two — caching/emitting a fabricated zero for a coin the user owns
+ * shows a real 0 for an owned asset until the cache expires.
+ */
 export type EvmChainBalances = Record<string, bigint>;
 export declare const getEvmChainBalances: (input: GetEvmChainBalancesInput) => Promise<EvmChainBalances>;
 //# sourceMappingURL=getEvmChainBalances.d.ts.map

package/dist/coin/balance/getEvmChainBalances.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getEvmChainBalances.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/balance/getEvmChainBalances.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAErD,OAAO,EAAE,cAAc,EAA0B,MAAM,uCAAuC,CAAA;AAE9F,OAAO,EAAE,OAAO,EAAsB,MAAM,MAAM,CAAA;AAMlD,MAAM,MAAM,wBAAwB,GAAG;IACrC,KAAK,EAAE,QAAQ,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAA;CAClC,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAkBrD,eAAO,MAAM,mBAAmB,GAAU,OAAO,wBAAwB,KAAG,OAAO,CAAC,gBAAgB,CAiDnG,CAAA"}
+{"version":3,"file":"getEvmChainBalances.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/balance/getEvmChainBalances.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAErD,OAAO,EAAE,cAAc,EAA0B,MAAM,uCAAuC,CAAA;AAE9F,OAAO,EAAE,OAAO,EAAsB,MAAM,MAAM,CAAA;AAMlD,MAAM,MAAM,wBAAwB,GAAG;IACrC,KAAK,EAAE,QAAQ,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAA;CAClC,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAmBrD,eAAO,MAAM,mBAAmB,GAAU,OAAO,wBAAwB,KAAG,OAAO,CAAC,gBAAgB,CAuDnG,CAAA"}

package/dist/coin/balance/getEvmChainBalances.js

@@ -11,10 +11,11 @@ const getFallbackBalances = async ({ chain, address, coins }) => {
             return [accountCoinKeyToString(input), await getEvmCoinBalance(input)];
         }
         catch {
-            return [accountCoinKeyToString(input), 0n];
+            // OMIT the key rather than reporting 0n: the read failed, so the balance is unknown.
+            return undefined;
         }
     }));
-    return Object.fromEntries(entries);
+    return Object.fromEntries(entries.filter(entry => entry !== undefined));
 };
 export const getEvmChainBalances = async (input) => {
     const { chain, address, coins } = input;
@@ -48,10 +49,15 @@ export const getEvmChainBalances = async (input) => {
     if (!results) {
         return getFallbackBalances(input);
     }
-    return Object.fromEntries(coins.map((coin, index) => {
+    return Object.fromEntries(coins.flatMap((coin, index) => {
         const result = results[index];
-        const amount = result?.status === 'success' ? BigInt(result.result) : 0n;
-        return [accountCoinKeyToString({ ...coin, chain, address }), amount];
+        // A reverted / failed sub-call (allowFailure keeps it in the array as status 'failure') carries
+        // NO balance. Omit it instead of decoding it as 0n, so the caller can tell an unread coin from a
+        // genuinely empty one and refetch it rather than caching a fabricated zero.
+        if (result?.status !== 'success') {
+            return [];
+        }
+        return [[accountCoinKeyToString({ ...coin, chain, address }), BigInt(result.result)]];
     }));
 };
 //# sourceMappingURL=getEvmChainBalances.js.map

package/dist/coin/balance/getEvmChainBalances.js.map

@@ -1 +1 @@
-{"version":3,"file":"getEvmChainBalances.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/balance/getEvmChainBalances.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AACrE,OAAO,EAAkB,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAA;AACrE,OAAO,EAAW,QAAQ,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAElD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAEnD,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAA;AAU/F,MAAM,mBAAmB,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAA4B,EAA6B,EAAE;IACnH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;QACrB,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;QAEzC,IAAI,CAAC;YACH,OAAO,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAU,CAAA;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,EAAE,CAAU,CAAA;QACrD,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IAED,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;AACpC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,KAA+B,EAA6B,EAAE;IACtG,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;IAEvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,iBAAiB,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAA;IAE5E,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACnC,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACjC,SAAS,CAAC,IAAI,CAAC;QACb,CAAC,CAAC;YACE,OAAO,EAAE,iBAAiB;YAC1B,GAAG,EAAE,aAAa;YAClB,YAAY,EAAE,eAAe;YAC7B,IAAI,EAAE,CAAC,OAAO,CAAC;SAChB;QACH,CAAC,CAAC;YACE,OAAO,EAAE,IAAI,CAAC,EAAa;YAC3B,GAAG,EAAE,QAAQ;YACb,YAAY,EAAE,WAAW;YACzB,IAAI,EAAE,CAAC,OAAO,CAAC;SAChB,CACN,CAAA;IAED,MAAM,OAAO,GAAG,MAAM,YAAY;SAC/B,SAAS,CAAC;QACT,YAAY,EAAE,IAAI;QAClB,SAAS;KACV,CAAC;SACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAEzB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACnC,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CACvB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;QAC7B,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAElF,OAAO,CAAC,sBAAsB,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAU,CAAA;IAC/E,CAAC,CAAC,CACH,CAAA;AACH,CAAC,CAAA"}
+{"version":3,"file":"getEvmChainBalances.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/balance/getEvmChainBalances.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AACrE,OAAO,EAAkB,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAA;AACrE,OAAO,EAAW,QAAQ,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAElD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAEnD,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAA;AAgB/F,MAAM,mBAAmB,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAA4B,EAA6B,EAAE;IACnH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;QACrB,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;QAEzC,IAAI,CAAC;YACH,OAAO,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAU,CAAA;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;YACrF,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IAED,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAA;AACzE,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,KAA+B,EAA6B,EAAE;IACtG,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;IAEvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,iBAAiB,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAA;IAE5E,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACnC,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACjC,SAAS,CAAC,IAAI,CAAC;QACb,CAAC,CAAC;YACE,OAAO,EAAE,iBAAiB;YAC1B,GAAG,EAAE,aAAa;YAClB,YAAY,EAAE,eAAe;YAC7B,IAAI,EAAE,CAAC,OAAO,CAAC;SAChB;QACH,CAAC,CAAC;YACE,OAAO,EAAE,IAAI,CAAC,EAAa;YAC3B,GAAG,EAAE,QAAQ;YACb,YAAY,EAAE,WAAW;YACzB,IAAI,EAAE,CAAC,OAAO,CAAC;SAChB,CACN,CAAA;IAED,MAAM,OAAO,GAAG,MAAM,YAAY;SAC/B,SAAS,CAAC;QACT,YAAY,EAAE,IAAI;QAClB,SAAS;KACV,CAAC;SACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAEzB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACnC,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CACvB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;QAE7B,gGAAgG;QAChG,iGAAiG;QACjG,4EAA4E;QAC5E,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,EAAE,CAAA;QACX,CAAC;QAED,OAAO,CAAC,CAAC,sBAAsB,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,MAAgB,CAAC,CAAU,CAAC,CAAA;IAC1G,CAAC,CAAC,CACH,CAAA;AACH,CAAC,CAAA"}

package/dist/coin/price/resolveTokenPriceId.d.ts

@@ -6,17 +6,15 @@ import type { Chain } from '../../Chain.js';
  * - When `denomOrAddress` is omitted, empty, or whitespace-only, returns the
  *   native chain coin's priceProviderId from chainFeeCoin (e.g.
  *   resolveTokenPriceId('Ethereum') -> 'ethereum').
- * - When `denomOrAddress` is provided, it is trimmed and lowercased, then
- *   looked up in knownTokensIndex[chain]. The lookup is case-insensitive (the
- *   index stores all keys lowercased) and tolerant of incidental surrounding
- *   whitespace from upstream string sources. Note: lowercasing is locale-
- *   independent (String.prototype.toLowerCase, not toLocaleLowerCase) and the
- *   index keys are built with the same call, so the build/lookup casing is
- *   always symmetric.
+ * - When `denomOrAddress` is provided, incidental surrounding whitespace is
+ *   trimmed. EVM contract addresses are matched case-insensitively; identifiers
+ *   for every other chain are matched exactly because Solana mints, Cosmos
+ *   denoms, TON jettons, and other non-EVM identifiers may be case-sensitive.
  *
- * Returns `undefined` if no registry entry exists — never guesses or
- * fabricates an id. The caller decides whether to fall back to CoinGecko
- * search, DeFiLlama, or surface a `price_unavailable` to the user.
+ * The native Cosmos fee denom is also resolved to its chain fee coin's
+ * priceProviderId. Other unknown identifiers return `undefined` — the caller
+ * decides whether to fall back to CoinGecko search, DeFiLlama, or surface a
+ * `price_unavailable` to the user.
  *
  * Referenced by vultisig/mcp-ts#255 — registry-driven price resolution.
  */

package/dist/coin/price/resolveTokenPriceId.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolveTokenPriceId.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/price/resolveTokenPriceId.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAIxC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAM7F"}
+{"version":3,"file":"resolveTokenPriceId.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/price/resolveTokenPriceId.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAMxC;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAe7F"}

package/dist/coin/price/resolveTokenPriceId.js

@@ -1,5 +1,7 @@
+import { getChainKind } from '../../ChainKind.js';
+import { cosmosFeeCoinDenom } from '../../chains/cosmos/cosmosFeeCoinDenom.js';
 import { chainFeeCoin } from '../chainFeeCoin.js';
-import { knownTokensIndex } from '../knownTokens/index.js';
+import { knownTokens, knownTokensIndex } from '../knownTokens/index.js';
 /**
  * Resolve a token's CoinGecko price-provider id from the SDK's curated
  * registry. Pure synchronous lookup, no I/O.
@@ -7,25 +9,30 @@ import { knownTokensIndex } from '../knownTokens/index.js';
  * - When `denomOrAddress` is omitted, empty, or whitespace-only, returns the
  *   native chain coin's priceProviderId from chainFeeCoin (e.g.
  *   resolveTokenPriceId('Ethereum') -> 'ethereum').
- * - When `denomOrAddress` is provided, it is trimmed and lowercased, then
- *   looked up in knownTokensIndex[chain]. The lookup is case-insensitive (the
- *   index stores all keys lowercased) and tolerant of incidental surrounding
- *   whitespace from upstream string sources. Note: lowercasing is locale-
- *   independent (String.prototype.toLowerCase, not toLocaleLowerCase) and the
- *   index keys are built with the same call, so the build/lookup casing is
- *   always symmetric.
+ * - When `denomOrAddress` is provided, incidental surrounding whitespace is
+ *   trimmed. EVM contract addresses are matched case-insensitively; identifiers
+ *   for every other chain are matched exactly because Solana mints, Cosmos
+ *   denoms, TON jettons, and other non-EVM identifiers may be case-sensitive.
  *
- * Returns `undefined` if no registry entry exists — never guesses or
- * fabricates an id. The caller decides whether to fall back to CoinGecko
- * search, DeFiLlama, or surface a `price_unavailable` to the user.
+ * The native Cosmos fee denom is also resolved to its chain fee coin's
+ * priceProviderId. Other unknown identifiers return `undefined` — the caller
+ * decides whether to fall back to CoinGecko search, DeFiLlama, or surface a
+ * `price_unavailable` to the user.
  *
  * Referenced by vultisig/mcp-ts#255 — registry-driven price resolution.
  */
 export function resolveTokenPriceId(chain, denomOrAddress) {
-    const normalized = denomOrAddress?.trim().toLowerCase();
-    if (!normalized) {
+    const identifier = denomOrAddress?.trim();
+    if (!identifier) {
         return chainFeeCoin[chain]?.priceProviderId || undefined;
     }
-    return knownTokensIndex[chain]?.[normalized]?.priceProviderId || undefined;
+    const knownPriceProviderId = getChainKind(chain) === 'evm'
+        ? knownTokensIndex[chain]?.[identifier.toLowerCase()]?.priceProviderId
+        : knownTokens[chain]?.find(coin => coin.id === identifier)?.priceProviderId;
+    if (knownPriceProviderId)
+        return knownPriceProviderId;
+    return cosmosFeeCoinDenom[chain] === identifier
+        ? chainFeeCoin[chain]?.priceProviderId || undefined
+        : undefined;
 }
 //# sourceMappingURL=resolveTokenPriceId.js.map

package/dist/coin/price/resolveTokenPriceId.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolveTokenPriceId.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/price/resolveTokenPriceId.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAEjD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAY,EAAE,cAAuB;IACvE,MAAM,UAAU,GAAG,cAAc,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACvD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,YAAY,CAAC,KAAK,CAAC,EAAE,eAAe,IAAI,SAAS,CAAA;IAC1D,CAAC;IACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,eAAe,IAAI,SAAS,CAAA;AAC5E,CAAC"}
+{"version":3,"file":"resolveTokenPriceId.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/price/resolveTokenPriceId.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAE9D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAY,EAAE,cAAuB;IACvE,MAAM,UAAU,GAAG,cAAc,EAAE,IAAI,EAAE,CAAA;IACzC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,YAAY,CAAC,KAAK,CAAC,EAAE,eAAe,IAAI,SAAS,CAAA;IAC1D,CAAC;IAED,MAAM,oBAAoB,GACxB,YAAY,CAAC,KAAK,CAAC,KAAK,KAAK;QAC3B,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,eAAe;QACtE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE,eAAe,CAAA;IAC/E,IAAI,oBAAoB;QAAE,OAAO,oBAAoB,CAAA;IAErD,OAAO,kBAAkB,CAAC,KAAwC,CAAC,KAAK,UAAU;QAChF,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,eAAe,IAAI,SAAS;QACnD,CAAC,CAAC,SAAS,CAAA;AACf,CAAC"}

package/dist/swap/general/GeneralSwapQuote.d.ts

@@ -10,6 +10,22 @@ export type GeneralSwapTx = {
         value: string;
         gasLimit?: bigint;
         affiliateFee?: SwapFee;
+        /**
+         * The address that will be called as `transferFrom` spender for the
+         * input ERC-20 token. Set by LI.FI quotes from `estimate.approvalAddress`
+         * when it differs from `to` (e.g. when 1inch or another inner executor
+         * does the token pull directly instead of the Diamond/router).
+         *
+         * On-chain proof of the gap: tx 0xa3aadf17 (Ethereum, block 25415989)
+         * reverted with "ERC20: transfer amount exceeds allowance" because the
+         * vault had 9.41 USDC approved to the Diamond (`to` = 0x9025B8ff…) but
+         * zero allowance to the 1inch executor (`approvalAddress`). The Diamond
+         * being approved is not sufficient when an inner executor does the pull.
+         *
+         * Consumers building an ERC-20 approve leg MUST use this field as the
+         * spender when present, falling back to `to` only when absent.
+         */
+        approvalAddress?: string;
     };
 } | {
     solana: {
@@ -56,9 +72,9 @@ export type GeneralSwapTx = {
  * Consumers building a "View on Explorer" link should call
  * `getSwapExplorerUrl({ provider, txHash, fromChain })` from
  * `@vultisig/core-chain/swap/utils/getSwapExplorerUrl` instead of routing
- * by hand — the helper covers the LI.FI / Helius scanners and falls back to
- * the source-chain explorer for `1inch` / `jupiter` / `kyber` / `swapkit` (none of which
- * expose a per-tx aggregator page).
+ * by hand — the helper covers LI.FI / Helius and SwapKit scanners, accepts the
+ * provider-specific CoW order UID for pending CowSwap orders, and falls back to
+ * the source-chain explorer for `1inch` / `jupiter` / `kyber`.
  */
 export type GeneralSwapQuote = {
     dstAmount: string;

package/dist/swap/general/GeneralSwapQuote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GeneralSwapQuote.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/swap/general/GeneralSwapQuote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAA;AAE3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAE3D,MAAM,MAAM,aAAa,GACrB;IACE,GAAG,EAAE;QACH,IAAI,EAAE,MAAM,CAAA;QACZ,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,YAAY,CAAC,EAAE,OAAO,CAAA;KACvB,CAAA;CACF,GACD;IACE,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAA;QACZ,UAAU,EAAE,MAAM,CAAA;QAClB,OAAO,EAAE,OAAO,CAAA;KACjB,CAAA;CACF,GACD;IACE,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAA;QACV,MAAM,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,SAAS,CAAC,EAAE,UAAU,CAAA;QACtB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,CAAA;CACF,GACD;IACE,aAAa,EAAE;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,UAAU,EAAE,MAAM,CAAA;QAClB,SAAS,EAAE,MAAM,CAAA;QACjB,OAAO,EAAE,MAAM,CAAA;QACf,OAAO,EAAE,MAAM,CAAA;QACf,WAAW,EAAE,MAAM,CAAA;QACnB,SAAS,EAAE,MAAM,CAAA;QACjB,IAAI,EAAE,gBAAgB,CAAA;QACtB,iBAAiB,EAAE,OAAO,CAAA;QAC1B,gBAAgB,EAAE,mBAAmB,CAAA;QACrC,eAAe,EAAE,mBAAmB,CAAA;QACpC,OAAO,EAAE,MAAM,CAAA;QACf,OAAO,EAAE,MAAM,CAAA;QACf;;kFAE0E;QAC1E,cAAc,CAAC,EAAE,IAAI,CAAA;KACtB,CAAA;CACF,CAAA;AAEL;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,EAAE,EAAE,aAAa,CAAA;CAClB,CAAA"}
+{"version":3,"file":"GeneralSwapQuote.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/swap/general/GeneralSwapQuote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAA;AAE3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAE3D,MAAM,MAAM,aAAa,GACrB;IACE,GAAG,EAAE;QACH,IAAI,EAAE,MAAM,CAAA;QACZ,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,YAAY,CAAC,EAAE,OAAO,CAAA;QACtB;;;;;;;;;;;;;;WAcG;QACH,eAAe,CAAC,EAAE,MAAM,CAAA;KACzB,CAAA;CACF,GACD;IACE,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAA;QACZ,UAAU,EAAE,MAAM,CAAA;QAClB,OAAO,EAAE,OAAO,CAAA;KACjB,CAAA;CACF,GACD;IACE,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAA;QACV,MAAM,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,SAAS,CAAC,EAAE,UAAU,CAAA;QACtB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,CAAA;CACF,GACD;IACE,aAAa,EAAE;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,UAAU,EAAE,MAAM,CAAA;QAClB,SAAS,EAAE,MAAM,CAAA;QACjB,OAAO,EAAE,MAAM,CAAA;QACf,OAAO,EAAE,MAAM,CAAA;QACf,WAAW,EAAE,MAAM,CAAA;QACnB,SAAS,EAAE,MAAM,CAAA;QACjB,IAAI,EAAE,gBAAgB,CAAA;QACtB,iBAAiB,EAAE,OAAO,CAAA;QAC1B,gBAAgB,EAAE,mBAAmB,CAAA;QACrC,eAAe,EAAE,mBAAmB,CAAA;QACpC,OAAO,EAAE,MAAM,CAAA;QACf,OAAO,EAAE,MAAM,CAAA;QACf;;kFAE0E;QAC1E,cAAc,CAAC,EAAE,IAAI,CAAA;KACtB,CAAA;CACF,CAAA;AAEL;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,EAAE,EAAE,aAAa,CAAA;CAClB,CAAA"}

package/dist/swap/general/cowswap/sign/buildCowSwapOrderTypedData.d.ts

@@ -98,15 +98,6 @@ type BuildCowSwapOrderTypedDataInput = {
     order: CowSwapOrder;
     chainId: number;
 };
-/**
- * Build the `eth_signTypedData_v4` document for a CowSwap order.
- *
- * The resulting digest (EIP-712 hash of this document) is what the MPC ceremony
- * signs; the 65-byte `r||s||v` signature is submitted to the orderbook alongside
- * the order via `submitCowSwapOrder`. The order's `appDataHash` becomes the
- * signed `appData` field — the orderbook verifies it matches the `appData`
- * string in the submitted order.
- */
 export declare const buildCowSwapOrderTypedData: ({ order, chainId, }: BuildCowSwapOrderTypedDataInput) => CowSwapOrderTypedData;
 export {};
 //# sourceMappingURL=buildCowSwapOrderTypedData.d.ts.map

package/dist/swap/general/cowswap/sign/buildCowSwapOrderTypedData.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buildCowSwapOrderTypedData.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/swap/general/cowswap/sign/buildCowSwapOrderTypedData.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAqB,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAErE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAa3B,CAAA;AAEV,QAAA,MAAM,kBAAkB;;;;;;;;;;;;EAKd,CAAA;AAEV;;yDAEyD;AACzD,MAAM,MAAM,yBAAyB,GAAG;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,iBAAiB,EAAE,OAAO,CAAA;IAC1B,gBAAgB,EAAE,MAAM,CAAA;IACxB,eAAe,EAAE,MAAM,CAAA;CACxB,CAAA;AAED;;;gEAGgE;AAChE,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE,OAAO,CAAA;IACpB,MAAM,EAAE,YAAY,CAAA;IACpB,KAAK,EAAE;QACL,YAAY,EAAE,OAAO,kBAAkB,CAAA;QACvC,KAAK,EAAE,OAAO,wBAAwB,CAAA;KACvC,CAAA;IACD,OAAO,EAAE,yBAAyB,CAAA;CACnC,CAAA;AAED,KAAK,+BAA+B,GAAG;IACrC,KAAK,EAAE,YAAY,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,GAAI,qBAGxC,+BAA+B,KAAG,qBAqBnC,CAAA"}
+{"version":3,"file":"buildCowSwapOrderTypedData.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/swap/general/cowswap/sign/buildCowSwapOrderTypedData.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAqB,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAErE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAa3B,CAAA;AAEV,QAAA,MAAM,kBAAkB;;;;;;;;;;;;EAKd,CAAA;AAEV;;yDAEyD;AACzD,MAAM,MAAM,yBAAyB,GAAG;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,iBAAiB,EAAE,OAAO,CAAA;IAC1B,gBAAgB,EAAE,MAAM,CAAA;IACxB,eAAe,EAAE,MAAM,CAAA;CACxB,CAAA;AAED;;;gEAGgE;AAChE,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE,OAAO,CAAA;IACpB,MAAM,EAAE,YAAY,CAAA;IACpB,KAAK,EAAE;QACL,YAAY,EAAE,OAAO,kBAAkB,CAAA;QACvC,KAAK,EAAE,OAAO,wBAAwB,CAAA;KACvC,CAAA;IACD,OAAO,EAAE,yBAAyB,CAAA;CACnC,CAAA;AAED,KAAK,+BAA+B,GAAG;IACrC,KAAK,EAAE,YAAY,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AA4CD,eAAO,MAAM,0BAA0B,GAAI,qBAGxC,+BAA+B,KAAG,qBAyBpC,CAAA"}

package/dist/swap/general/cowswap/sign/buildCowSwapOrderTypedData.js

@@ -42,26 +42,56 @@ const eip712DomainFields = [
  * signed `appData` field — the orderbook verifies it matches the `appData`
  * string in the submitted order.
  */
-export const buildCowSwapOrderTypedData = ({ order, chainId, }) => ({
-    primaryType: 'Order',
-    domain: buildEip712Domain(chainId),
-    types: {
-        EIP712Domain: eip712DomainFields,
-        Order: cowSwapOrderEip712Fields,
-    },
-    message: {
-        sellToken: order.sellToken,
-        buyToken: order.buyToken,
-        receiver: order.receiver,
-        sellAmount: order.sellAmount,
-        buyAmount: order.buyAmount,
-        validTo: order.validTo,
-        appData: order.appDataHash,
-        feeAmount: order.feeAmount,
-        kind: order.kind,
-        partiallyFillable: order.partiallyFillable,
-        sellTokenBalance: order.sellTokenBalance,
-        buyTokenBalance: order.buyTokenBalance,
-    },
-});
+// Matches a checksummed or lowercase EVM address (case-insensitive 0x prefix, per findSwapQuote's
+// isEvmAddress) — CowSwap is EVM-only, so the receiver is always an EVM address.
+const isEvmAddress = (address) => /^0x[0-9a-fA-F]{40}$/i.test(address);
+const ZERO_EVM_ADDRESS = '0x0000000000000000000000000000000000000000';
+const BURN_EVM_ADDRESS = '0x000000000000000000000000000000000000dead';
+/**
+ * Fund-safety re-check on the SIGNING side (sdk#1358 class). `assertValidCustomRecipient`
+ * (findSwapQuote.ts) rejects a zero/burn/malformed CowSwap receiver at QUOTE construction, but the
+ * MPC co-signer never sees the quote — it decodes a `cowswap-order:` blob from the KeysignPayload
+ * (decodeCowSwapKeysignData, which validates SHAPE only) and builds THIS EIP-712 digest to sign. A
+ * hand-built payload with `receiver = 0x…dead` (or the zero address, or a malformed address) would
+ * otherwise be signed into an unrecoverable order. This is the digest-construction choke point every
+ * signer funnels through, so guarding here binds the receiver the signature actually covers.
+ *
+ * vultisig always sets an explicit receiver (`normalizedRecipient ?? from.address`,
+ * findSwapQuote.ts) — never CowSwap's `address(0)` "pay-the-owner" sentinel — so rejecting zero here
+ * matches the quote-time guard and cannot false-block a legitimately-produced order.
+ */
+const assertCowSwapReceiverSafe = (receiver) => {
+    if (!isEvmAddress(receiver)) {
+        throw new Error(`CowSwap order receiver "${receiver}" is not a valid EVM address — refusing to sign an order to a malformed recipient.`);
+    }
+    const lower = receiver.toLowerCase();
+    if (lower === ZERO_EVM_ADDRESS || lower === BURN_EVM_ADDRESS) {
+        throw new Error(`CowSwap order receiver "${receiver}" is a zero/burn address — the swap output would be unrecoverable; refusing to sign.`);
+    }
+};
+export const buildCowSwapOrderTypedData = ({ order, chainId, }) => {
+    assertCowSwapReceiverSafe(order.receiver);
+    return {
+        primaryType: 'Order',
+        domain: buildEip712Domain(chainId),
+        types: {
+            EIP712Domain: eip712DomainFields,
+            Order: cowSwapOrderEip712Fields,
+        },
+        message: {
+            sellToken: order.sellToken,
+            buyToken: order.buyToken,
+            receiver: order.receiver,
+            sellAmount: order.sellAmount,
+            buyAmount: order.buyAmount,
+            validTo: order.validTo,
+            appData: order.appDataHash,
+            feeAmount: order.feeAmount,
+            kind: order.kind,
+            partiallyFillable: order.partiallyFillable,
+            sellTokenBalance: order.sellTokenBalance,
+            buyTokenBalance: order.buyTokenBalance,
+        },
+    };
+};
 //# sourceMappingURL=buildCowSwapOrderTypedData.js.map

package/dist/swap/general/cowswap/sign/buildCowSwapOrderTypedData.js.map

@@ -1 +1 @@
-{"version":3,"file":"buildCowSwapOrderTypedData.js","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/swap/general/cowswap/sign/buildCowSwapOrderTypedData.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAgB,MAAM,qBAAqB,CAAA;AAErE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;IACtC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;IACrC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;IACrC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;IACtC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;IACnC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACpC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;IACtC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;IAChC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE;IAC3C,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC5C,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE;CACnC,CAAA;AAEV,MAAM,kBAAkB,GAAG;IACzB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;IAChC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;IACnC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACpC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;CACtC,CAAA;AAuCV;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,EACzC,KAAK,EACL,OAAO,GACyB,EAAyB,EAAE,CAAC,CAAC;IAC7D,WAAW,EAAE,OAAO;IACpB,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC;IAClC,KAAK,EAAE;QACL,YAAY,EAAE,kBAAkB;QAChC,KAAK,EAAE,wBAAwB;KAChC;IACD,OAAO,EAAE;QACP,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,WAAW;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,eAAe,EAAE,KAAK,CAAC,eAAe;KACvC;CACF,CAAC,CAAA"}
+{"version":3,"file":"buildCowSwapOrderTypedData.js","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/swap/general/cowswap/sign/buildCowSwapOrderTypedData.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAgB,MAAM,qBAAqB,CAAA;AAErE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;IACtC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;IACrC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;IACrC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;IACtC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;IACnC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACpC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;IACtC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;IAChC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE;IAC3C,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC5C,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE;CACnC,CAAA;AAEV,MAAM,kBAAkB,GAAG;IACzB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;IAChC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;IACnC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACpC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;CACtC,CAAA;AAuCV;;;;;;;;GAQG;AACH,kGAAkG;AAClG,iFAAiF;AACjF,MAAM,YAAY,GAAG,CAAC,OAAe,EAAW,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AACvF,MAAM,gBAAgB,GAAG,4CAA4C,CAAA;AACrE,MAAM,gBAAgB,GAAG,4CAA4C,CAAA;AAErE;;;;;;;;;;;;GAYG;AACH,MAAM,yBAAyB,GAAG,CAAC,QAAgB,EAAQ,EAAE;IAC3D,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,2BAA2B,QAAQ,oFAAoF,CACxH,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAA;IACpC,IAAI,KAAK,KAAK,gBAAgB,IAAI,KAAK,KAAK,gBAAgB,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,2BAA2B,QAAQ,sFAAsF,CAC1H,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,EACzC,KAAK,EACL,OAAO,GACyB,EAAyB,EAAE;IAC3D,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAEzC,OAAO;QACL,WAAW,EAAE,OAAO;QACpB,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC;QAClC,KAAK,EAAE;YACL,YAAY,EAAE,kBAAkB;YAChC,KAAK,EAAE,wBAAwB;SAChC;QACD,OAAO,EAAE;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,WAAW;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/swap/general/knownAggregatorRouters.d.ts

@@ -1,5 +1,62 @@
 import { Chain } from '../../Chain.js';
-export type EnforcedRouterProvider = '1inch' | 'kyber';
+export type EnforcedRouterProvider = '1inch' | 'kyber' | 'cowswap';
+/**
+ * Signing-path re-assert (sdk#1358): the same allow-list check as {@link assertKnownAggregatorRouter},
+ * but keyed off an arbitrary provider STRING (the value carried in KeysignSwapPayload.general.provider,
+ * which is a plain `string`). Enforced providers (1inch/kyber/cowswap) fail closed; the small closed set
+ * of genuinely unenforceable providers (li.fi/swapkit, plus the legacy `''` unattributed provider - see
+ * RECOGNIZED_UNENFORCED_PROVIDERS) fall through to the same log-only path they take at quote construction;
+ * anything else is rejected outright (sdk#1457, see below).
+ *
+ * WHY THIS EXISTS SEPARATELY FROM quote construction: a compromised initiator (or server composing the
+ * intent) can hand a co-signer a KeysignPayload whose swapPayload.quote.tx.to was NEVER run through the
+ * quote-time check - every co-signer independently rebuilds the signing input from that payload, so the
+ * guard has to run HERE too, on the signing-input path, or a co-signer (e.g. VultiServer in a 2-of-2)
+ * signs a destination it never validated. Mirrors the Ripple resolver's in-resolver fail-closed binding.
+ *
+ * THREAT MODEL / TRUST OF `provider` (CodeRabbit security review; sdk#1457): `provider` here is the free
+ * `provider` STRING on the OneInchSwapPayload proto (the `oneinchSwapPayload` oneof case carries
+ * 1inch/li.fi/cowswap/kyber with only this string to tell them apart; swapkit's dedicated transfer route
+ * is the one general provider that has its own oneof case - see getKeysignSwapPayload.ts). It is
+ * therefore part of the attacker-influenceable payload, NOT a trusted oneof discriminant, and a payload
+ * whose `provider` disagrees with its actual executing shape (an attacker relabeling to dodge
+ * enforcement) is a real, closable gap - not just a theoretical one.
+ *
+ * sdk#1457 FIX: two structural improvements that need no proto change. (1) CowSwap is now enforced -
+ * unlike li.fi/swapkit it settles through ONE fixed, deterministic contract (the GPv2VaultRelayer, see
+ * assertKnownAggregatorRouter), so its destination is exactly as allow-listable as 1inch/Kyber's; a
+ * payload can no longer relabel itself 'cowswap' to dodge a router check the way it previously could. (2)
+ * the log-only fallback is now a CLOSED list of the provider values the codebase legitimately produces
+ * (li.fi/swapkit, plus the legacy `''` unattributed provider) - a `provider` string outside every known
+ * value (enforced or unenforced) is unrecognized and REJECTED, not silently passed through. Together
+ * these shrink "relabel to escape enforcement" from "any string at all" down to exactly li.fi, swapkit,
+ * and the legacy `''`, which remain unenforceable by address because they legitimately route through
+ * many different contracts by design (see the file doc comment) - closing that residual gap needs the
+ * provider identity to be a trusted wire discriminant instead of a free string, i.e. a proto oneof case
+ * per provider (tracked in sdk#1457, not attempted here: a schema change on the shared commondata proto
+ * is a cross-repo, cross-consumer change every native client (iOS/Android/Windows) also builds against).
+ *
+ * This guard remains MONOTONIC beyond that residual gap: it only ever THROWS (rejects) or no-ops - it
+ * never makes anything signable that wasn't already.
+ */
+export declare function assertKnownAggregatorRouterOnSigningPath(provider: string, address: string, chain: Chain): void;
+/**
+ * Signing-path approval-spender bind (sdk#1358 review follow-up, requested by neavra). The
+ * follow-on to {@link assertKnownAggregatorRouterOnSigningPath}: that guard validates the swap-leg
+ * destination (`quote.tx.to`), but a general swap that needs an allowance also carries a SEPARATE,
+ * independent wire field - `erc20ApprovePayload.spender` - which the approve resolver (erc20.ts)
+ * reads verbatim and nothing binds to `quote.tx.to`. So a payload can pass the router check with a
+ * genuine 1inch/kyber `tx.to` yet still carry an approve granting an ATTACKER an allowance over the
+ * user's token (a classic approval-drain the co-signer would otherwise sign blind).
+ *
+ * On the initiator these coincide by construction (build.ts sets the approve spender to
+ * `getSwapDestinationAddress` === `tx.to`), so this only ever fires on a hand-built/tampered payload.
+ * Enforced providers (1inch/kyber/cowswap) MUST have `spender === routerDestination`; unenforced
+ * providers (li.fi/swapkit) are NOT bound. CowSwap's spender IS its `tx.to` (both are the fixed
+ * GPv2VaultRelayer - see getSwapDestinationAddress.ts), so it binds the same way 1inch/kyber do. Like
+ * its sibling this is a MONOTONIC gate: it only throws or no-ops, never changes the signed bytes.
+ */
+export declare function assertEnforcedSwapApprovalSpenderBound(provider: string, spender: string, routerDestination: string, chain: Chain): void;
 /**
  * Throws if `address` isn't the known router for `provider` on `chain`. Call this at quote
  * construction, before a GeneralSwapQuote carrying `address` as `tx.evm.to` can exist.
@@ -10,5 +67,5 @@ export declare function assertKnownAggregatorRouter(provider: EnforcedRouterProv
  * contracts. Structured so the data is queryable (provider + address) and a future allowlist
  * is easy to build if a stable pattern emerges from real usage.
  */
-export declare function logUnenforcedAggregatorDestination(provider: 'li.fi' | 'swapkit', address: string): void;
+export declare function logUnenforcedAggregatorDestination(provider: string, address: string): void;
 //# sourceMappingURL=knownAggregatorRouters.d.ts.map

package/dist/swap/general/knownAggregatorRouters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"knownAggregatorRouters.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/swap/general/knownAggregatorRouters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AA8DnC,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,OAAO,CAAA;AAEtD;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAcjH;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAKvG"}
+{"version":3,"file":"knownAggregatorRouters.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/swap/general/knownAggregatorRouters.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAmEnC,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAA;AAclE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,wCAAwC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAkB9G;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sCAAsC,CACpD,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,MAAM,EACzB,KAAK,EAAE,KAAK,GACX,IAAI,CASN;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAwBjH;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAK1F"}