@vultisig/core-chain 2.35.1 → 2.36.0

package/dist/swap/quote/getSwapQuoteSafetyFingerprint.d.ts

@@ -0,0 +1,20 @@
+import type { AccountCoin } from '@vultisig/core-chain/coin/AccountCoin';
+import type { SwapQuoteResult } from './SwapQuote.js';
+type Input = {
+    from: AccountCoin;
+    to: AccountCoin;
+    requestedAmount: bigint;
+    expiresAt: number;
+    quote: SwapQuoteResult;
+};
+export declare const cloneSwapSafetyValue: <T>(value: T) => T;
+/**
+ * Detects accidental mutation and stale or mismatched reuse by binding a
+ * canonical quote to the exact request identity and signable transaction it
+ * was returned with. This unkeyed digest is not an authenticity boundary.
+ * Pure and platform-neutral so preparation can recompute the same value before
+ * any wallet/key/payload work.
+ */
+export declare const getSwapQuoteSafetyFingerprint: ({ from, to, requestedAmount, expiresAt, quote }: Input) => string;
+export {};
+//# sourceMappingURL=getSwapQuoteSafetyFingerprint.d.ts.map

package/dist/swap/quote/getSwapQuoteSafetyFingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSwapQuoteSafetyFingerprint.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/swap/quote/getSwapQuoteSafetyFingerprint.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAA;AAExE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,KAAK,KAAK,GAAG;IACX,IAAI,EAAE,WAAW,CAAA;IACjB,EAAE,EAAE,WAAW,CAAA;IACf,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,eAAe,CAAA;CACvB,CAAA;AAED,eAAO,MAAM,oBAAoB,GAAI,CAAC,EAAE,OAAO,CAAC,KAAG,CAWlD,CAAA;AA0CD;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,GAAI,iDAAiD,KAAK,KAAG,MAcpG,CAAA"}

package/dist/swap/quote/getSwapQuoteSafetyFingerprint.js

@@ -0,0 +1,67 @@
+import { sha256 } from '@noble/hashes/sha256';
+import { bytesToHex } from '@noble/hashes/utils';
+export const cloneSwapSafetyValue = (value) => {
+    if (value === null || typeof value !== 'object')
+        return value;
+    if (value instanceof Uint8Array)
+        return new Uint8Array(value);
+    if (Array.isArray(value))
+        return value.map(cloneSwapSafetyValue);
+    return Object.fromEntries(Object.entries(value).map(([key, nestedValue]) => [
+        key,
+        cloneSwapSafetyValue(nestedValue),
+    ]));
+};
+const canonicalize = (value) => {
+    if (value === null)
+        return 'null';
+    if (value instanceof Uint8Array)
+        return `{"$bytes":${JSON.stringify(bytesToHex(value))}}`;
+    if (Array.isArray(value)) {
+        return `[${Array.from({ length: value.length }, (_, index) => index in value && value[index] !== undefined ? canonicalize(value[index]) : '{"$undefined":true}').join(',')}]`;
+    }
+    switch (typeof value) {
+        case 'bigint':
+            return `{"$bigint":${JSON.stringify(value.toString())}}`;
+        case 'boolean':
+        case 'number':
+        case 'string':
+            return JSON.stringify(value);
+        case 'object': {
+            const record = value;
+            return `{${Object.keys(record)
+                .filter(key => record[key] !== undefined)
+                .sort()
+                // `$...` is reserved for canonical type tags above. Escape real object
+                // keys in that namespace so, for example, `5n` cannot collide with a
+                // provider object shaped like `{ $bigint: '5' }`.
+                .map(key => `${JSON.stringify(key.startsWith('$') ? `$${key}` : key)}:${canonicalize(record[key])}`)
+                .join(',')}}`;
+        }
+        default:
+            throw new Error(`Unsupported swap quote safety value: ${typeof value}`);
+    }
+};
+const coinIdentity = ({ chain, address, id, ticker, decimals }) => ({
+    chain,
+    address,
+    id,
+    ticker,
+    decimals,
+});
+/**
+ * Detects accidental mutation and stale or mismatched reuse by binding a
+ * canonical quote to the exact request identity and signable transaction it
+ * was returned with. This unkeyed digest is not an authenticity boundary.
+ * Pure and platform-neutral so preparation can recompute the same value before
+ * any wallet/key/payload work.
+ */
+export const getSwapQuoteSafetyFingerprint = ({ from, to, requestedAmount, expiresAt, quote }) => bytesToHex(sha256(new TextEncoder().encode(canonicalize({
+    version: 1,
+    from: coinIdentity(from),
+    to: coinIdentity(to),
+    requestedAmount,
+    expiresAt,
+    quote,
+}))));
+//# sourceMappingURL=getSwapQuoteSafetyFingerprint.js.map

package/dist/swap/quote/getSwapQuoteSafetyFingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSwapQuoteSafetyFingerprint.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/swap/quote/getSwapQuoteSafetyFingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAahD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAI,KAAQ,EAAK,EAAE;IACrD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC7D,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,IAAI,UAAU,CAAC,KAAK,CAAM,CAAA;IAClE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAM,CAAA;IAErE,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC;QAC3E,GAAG;QACH,oBAAoB,CAAC,WAAW,CAAC;KAClC,CAAC,CACE,CAAA;AACR,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,KAAc,EAAU,EAAE;IAC9C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IACjC,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,aAAa,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAA;IACzF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAC3D,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAClG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IAChB,CAAC;IAED,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,cAAc,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAA;QAC1D,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC9B,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,KAAgC,CAAA;YAC/C,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;iBAC3B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;iBACxC,IAAI,EAAE;gBACP,uEAAuE;gBACvE,qEAAqE;gBACrE,kDAAkD;iBACjD,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;iBACnG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;QACjB,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,KAAK,EAAE,CAAC,CAAA;IAC3E,CAAC;AACH,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAe,EAAE,EAAE,CAAC,CAAC;IAC/E,KAAK;IACL,OAAO;IACP,EAAE;IACF,MAAM;IACN,QAAQ;CACT,CAAC,CAAA;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAS,EAAU,EAAE,CAC9G,UAAU,CACR,MAAM,CACJ,IAAI,WAAW,EAAE,CAAC,MAAM,CACtB,YAAY,CAAC;IACX,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC;IACxB,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC;IACpB,eAAe;IACf,SAAS;IACT,KAAK;CACN,CAAC,CACH,CACF,CACF,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/core-chain",
-  "version": "2.35.1",
+  "version": "2.36.0",
   "description": "Blockchain chain logic shared across Vultisig clients",
   "license": "MIT",
   "repository": {
@@ -1708,6 +1708,11 @@
       "import": "./dist/swap/general/lifi/api/lifiSlippage.js",
       "default": "./dist/swap/general/lifi/api/lifiSlippage.js"
     },
+    "./swap/general/lifi/api/lifiSwapFeeChain": {
+      "types": "./dist/swap/general/lifi/api/lifiSwapFeeChain.d.ts",
+      "import": "./dist/swap/general/lifi/api/lifiSwapFeeChain.js",
+      "default": "./dist/swap/general/lifi/api/lifiSwapFeeChain.js"
+    },
     "./swap/general/lifi/config": {
       "types": "./dist/swap/general/lifi/config.d.ts",
       "import": "./dist/swap/general/lifi/config.js",
@@ -1908,6 +1913,11 @@
       "import": "./dist/swap/quote/getSwapQuoteProviderName.js",
       "default": "./dist/swap/quote/getSwapQuoteProviderName.js"
     },
+    "./swap/quote/getSwapQuoteSafetyFingerprint": {
+      "types": "./dist/swap/quote/getSwapQuoteSafetyFingerprint.d.ts",
+      "import": "./dist/swap/quote/getSwapQuoteSafetyFingerprint.js",
+      "default": "./dist/swap/quote/getSwapQuoteSafetyFingerprint.js"
+    },
     "./swap/quote/SwapQuote": {
       "types": "./dist/swap/quote/SwapQuote.d.ts",
       "import": "./dist/swap/quote/SwapQuote.js",