@vultisig/core-chain 5.0.0 → 5.2.0

package/dist/chains/ton/wallet.js

@@ -0,0 +1,54 @@
+import { Address } from '@ton/core';
+import { getTonV5R1Address, tonV5R1WalletId } from '@vultisig/core-chain/chains/ton/walletV5R1';
+import { match } from '@vultisig/lib-utils/match';
+/**
+ * The wallet contracts a Vultisig TON account can live in. The same Ed25519
+ * key yields a different address under each, so they are different accounts.
+ */
+export const tonWalletVersions = ['v4r2', 'v5r1'];
+/**
+ * The contract every Vultisig TON address has been derived from so far. W5 is
+ * an explicit opt-in: switching a key's default would silently move the user
+ * to an empty account.
+ */
+export const defaultTonWalletVersion = 'v4r2';
+export { tonV5R1WalletId };
+/**
+ * How many outgoing messages one external request may carry. V4 is limited by
+ * the wallet code; W5 by the 255-entry action list.
+ */
+export const tonMaxMessagesPerRequest = { v4r2: 4, v5r1: 255 };
+/**
+ * The user-friendly, non-bounceable (`UQ…`) address of this key's wallet
+ * under the given contract. V4R2 is WalletCore's own TON derivation; W5 is the
+ * hash of the StateInit the contract is deployed from, built with `@ton/core`
+ * from the key bytes alone — no WalletCore feature beyond the public key, so it
+ * also works on React Native, whose native bridge exposes no `TONWallet`.
+ */
+export const deriveTonAddress = ({ publicKey, walletCore, version }) => match(version, {
+    v4r2: () => walletCore.CoinTypeExt.deriveAddressFromPublicKey(walletCore.CoinType.ton, publicKey),
+    v5r1: () => getTonV5R1Address({ publicKey: publicKey.data() }).toString({
+        bounceable: false,
+        testOnly: false,
+        urlSafe: true,
+    }),
+});
+/**
+ * Which wallet contract an address is, for this key.
+ *
+ * The keysign payload carries no wallet-version field, so the sender address
+ * is the contract's identity: every co-signer derives both candidate addresses
+ * from the shared vault key and matches. An address that is neither is refused
+ * rather than assumed V4R2 — signing a V4R2 request for a wallet that is not
+ * one would either be rejected on chain or, worse, accepted by a contract we
+ * never meant to drive.
+ */
+export const resolveTonWalletVersion = ({ address, publicKey, walletCore }) => {
+    const account = Address.parse(address);
+    const version = tonWalletVersions.find(candidate => Address.parse(deriveTonAddress({ publicKey, walletCore, version: candidate })).equals(account));
+    if (!version) {
+        throw new Error(`TON address ${address} is not this key's V4R2 or W5 wallet; refusing to sign for an unknown wallet contract`);
+    }
+    return version;
+};
+//# sourceMappingURL=wallet.js.map

package/dist/chains/ton/wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/ton/wallet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAA;AAC/F,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AAEjD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAU,CAAA;AAI1D;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAqB,MAAM,CAAA;AAE/D,OAAO,EAAE,eAAe,EAAE,CAAA;AAE1B;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAqC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;AAQhG;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAyB,EAAU,EAAE,CACpG,KAAK,CAAC,OAAO,EAAE;IACb,IAAI,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,0BAA0B,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACjG,IAAI,EAAE,GAAG,EAAE,CACT,iBAAiB,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC;QAC1D,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;KACd,CAAC;CACL,CAAC,CAAA;AAQJ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAgC,EAAE,EAAE;IAC1G,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAEtC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CACjD,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAC/F,CAAA;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,eAAe,OAAO,uFAAuF,CAC9G,CAAA;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/dist/chains/ton/walletV5R1.d.ts

@@ -0,0 +1,27 @@
+import { Address, StateInit } from '@ton/core';
+/**
+ * W5R1 wallet id on mainnet, as the contract stores it: the network's global
+ * id (-239) XOR'd with the client context `1 | workchain 0 | version 0 |
+ * subwallet 0` (0x80000000), giving 0x7FFFFF11. WalletCore hardcodes this
+ * value for `WALLET_V5_R1`, so it is the only id that can be co-signed.
+ */
+export declare const tonV5R1WalletId = 2147483409;
+type BuildTonV5R1StateInitInput = {
+    /** The wallet's Ed25519 public key, 32 bytes. */
+    publicKey: Uint8Array;
+    /** Defaults to the mainnet id WalletCore uses. */
+    walletId?: number;
+};
+/**
+ * The W5R1 StateInit for a key: the published code cell plus the data cell
+ * `is_signature_allowed(1)=1 || seqno(32)=0 || wallet_id(int32) || publicKey(256) || bit(0)`
+ * (an empty extensions dictionary). Byte-identical to WalletCore's
+ * `WalletV5R1::state_init_impl`, but built from `@ton/core` alone so it runs
+ * wherever the key bytes are available — including React Native, whose native
+ * WalletCore bridge has no `TONWallet`.
+ */
+export declare const buildTonV5R1StateInit: ({ publicKey, walletId, }: BuildTonV5R1StateInitInput) => StateInit;
+/** The W5R1 wallet address (workchain 0) for a key: the hash of its StateInit. */
+export declare const getTonV5R1Address: (input: BuildTonV5R1StateInitInput) => Address;
+export {};
+//# sourceMappingURL=walletV5R1.d.ts.map

package/dist/chains/ton/walletV5R1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walletV5R1.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/ton/walletV5R1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAoC,SAAS,EAAE,MAAM,WAAW,CAAA;AAYhF;;;;;GAKG;AACH,eAAO,MAAM,eAAe,aAAa,CAAA;AAiBzC,KAAK,0BAA0B,GAAG;IAChC,iDAAiD;IACjD,SAAS,EAAE,UAAU,CAAA;IACrB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,GAAI,0BAGnC,0BAA0B,KAAG,SAc/B,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,GAAI,OAAO,0BAA0B,KAAG,OACR,CAAA"}

package/dist/chains/ton/walletV5R1.js

@@ -0,0 +1,53 @@
+import { beginCell, Cell, contractAddress } from '@ton/core';
+import { Buffer } from 'buffer';
+/**
+ * Wallet V5R1 (W5) compiled code cell, base64 — the StateInit WalletCore 4.7
+ * emits for `WALLET_V5_R1`, code hash
+ * 20834b7b72b112147e1b2fb457b84e74d1a30f04f737d4f62a668e9552d2b72f, the
+ * published W5R1 mainnet code. Keep it copy-paste identical; do not reformat.
+ */
+const walletV5R1CodeBase64 = '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';
+/**
+ * W5R1 wallet id on mainnet, as the contract stores it: the network's global
+ * id (-239) XOR'd with the client context `1 | workchain 0 | version 0 |
+ * subwallet 0` (0x80000000), giving 0x7FFFFF11. WalletCore hardcodes this
+ * value for `WALLET_V5_R1`, so it is the only id that can be co-signed.
+ */
+export const tonV5R1WalletId = 2147483409;
+const baseWorkchain = 0;
+let cachedCodeCell;
+/** Parsed on first use: `Cell.fromBoc` needs the Buffer polyfill, which a React Native entry installs at startup. */
+const getWalletV5R1CodeCell = () => {
+    if (!cachedCodeCell) {
+        const [cell] = Cell.fromBoc(Buffer.from(walletV5R1CodeBase64, 'base64'));
+        if (!cell) {
+            throw new Error('TON W5 code cell failed to parse');
+        }
+        cachedCodeCell = cell;
+    }
+    return cachedCodeCell;
+};
+/**
+ * The W5R1 StateInit for a key: the published code cell plus the data cell
+ * `is_signature_allowed(1)=1 || seqno(32)=0 || wallet_id(int32) || publicKey(256) || bit(0)`
+ * (an empty extensions dictionary). Byte-identical to WalletCore's
+ * `WalletV5R1::state_init_impl`, but built from `@ton/core` alone so it runs
+ * wherever the key bytes are available — including React Native, whose native
+ * WalletCore bridge has no `TONWallet`.
+ */
+export const buildTonV5R1StateInit = ({ publicKey, walletId = tonV5R1WalletId, }) => {
+    if (publicKey.length !== 32) {
+        throw new Error(`TON Ed25519 public key must be 32 bytes, got ${publicKey.length}`);
+    }
+    const data = beginCell()
+        .storeBit(true)
+        .storeUint(0, 32)
+        .storeInt(walletId, 32)
+        .storeBuffer(Buffer.from(publicKey))
+        .storeBit(false)
+        .endCell();
+    return { code: getWalletV5R1CodeCell(), data };
+};
+/** The W5R1 wallet address (workchain 0) for a key: the hash of its StateInit. */
+export const getTonV5R1Address = (input) => contractAddress(baseWorkchain, buildTonV5R1StateInit(input));
+//# sourceMappingURL=walletV5R1.js.map

package/dist/chains/ton/walletV5R1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walletV5R1.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/ton/walletV5R1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,SAAS,EAAE,IAAI,EAAE,eAAe,EAAa,MAAM,WAAW,CAAA;AAChF,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B;;;;;GAKG;AACH,MAAM,oBAAoB,GACxB,82BAA82B,CAAA;AAEh3B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAA;AAEzC,MAAM,aAAa,GAAG,CAAC,CAAA;AAEvB,IAAI,cAAgC,CAAA;AACpC,qHAAqH;AACrH,MAAM,qBAAqB,GAAG,GAAS,EAAE;IACvC,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAA;QACxE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrD,CAAC;QACD,cAAc,GAAG,IAAI,CAAA;IACvB,CAAC;IACD,OAAO,cAAc,CAAA;AACvB,CAAC,CAAA;AASD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,EACpC,SAAS,EACT,QAAQ,GAAG,eAAe,GACC,EAAa,EAAE;IAC1C,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,gDAAgD,SAAS,CAAC,MAAM,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,EAAE;SACrB,QAAQ,CAAC,IAAI,CAAC;SACd,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;SAChB,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC;SACtB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;SACnC,QAAQ,CAAC,KAAK,CAAC;SACf,OAAO,EAAE,CAAA;IAEZ,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,IAAI,EAAE,CAAA;AAChD,CAAC,CAAA;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAiC,EAAW,EAAE,CAC9E,eAAe,CAAC,aAAa,EAAE,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAA"}

package/dist/coin/balance/resolvers/ripple.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ripple.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/chain/coin/balance/resolvers/ripple.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAsCjD;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,eAAO,MAAM,4BAA4B,GAAU,SAAS,MAAM,KAAG,OAAO,CAAC,yBAAyB,CAsCrG,CAAA;AAQD,eAAO,MAAM,oBAAoB,EAAE,mBAM3B,CAAA"}
+{"version":3,"file":"ripple.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/chain/coin/balance/resolvers/ripple.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAmCjD;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,eAAO,MAAM,4BAA4B,GAAU,SAAS,MAAM,KAAG,OAAO,CAAC,yBAAyB,CAsCrG,CAAA;AAQD,eAAO,MAAM,oBAAoB,EAAE,mBAM3B,CAAA"}

package/dist/coin/balance/resolvers/ripple.js

@@ -1,7 +1,8 @@
 import { getRippleAccountInfo } from '@vultisig/core-chain/chains/ripple/account/info';
 import { getRippleAccountLines } from '@vultisig/core-chain/chains/ripple/account/lines';
-import { parseIssuedCurrencyValue, parseRippleTokenId, toXrplCurrencyCode, } from '@vultisig/core-chain/chains/ripple/issuedCurrency';
+import { parseIssuedCurrencyValue, parseRippleTokenId } from '@vultisig/core-chain/chains/ripple/issuedCurrency';
 import { getRippleNetworkInfo } from '@vultisig/core-chain/chains/ripple/network/info';
+import { findRippleTrustLine } from '@vultisig/core-chain/chains/ripple/trustLine';
 import { isFeeCoin } from '@vultisig/core-chain/coin/utils/isFeeCoin';
 import { shouldBePresent } from '@vultisig/lib-utils/assert/shouldBePresent';
 import { attempt } from '@vultisig/lib-utils/attempt';
@@ -24,7 +25,7 @@ const getRippleIssuedCurrencyBalance = async ({ address, id }) => {
         }
         throw linesResult.error;
     }
-    const line = linesResult.data.find(({ account, currency: lineCurrency }) => account === issuer && toXrplCurrencyCode(lineCurrency) === toXrplCurrencyCode(currency));
+    const line = findRippleTrustLine({ lines: linesResult.data, currency, issuer });
     if (!line) {
         return BigInt(0);
     }

package/dist/coin/balance/resolvers/ripple.js.map

@@ -1 +1 @@
-{"version":3,"file":"ripple.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/coin/balance/resolvers/ripple.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAA;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAA;AACxF,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,mDAAmD,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAA;AACtF,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAA;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAI/D;;;;;;;GAOG;AACH,MAAM,8BAA8B,GAAG,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAmC,EAAmB,EAAE;IACjH,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAA;IAEnD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAA;IAEjE,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;QAC3B,uEAAuE;QACvE,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,mBAAmB,EAAE,aAAa,CAAC,EAAE,CAAC;YACrE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;QAClB,CAAC;QAED,MAAM,WAAW,CAAC,KAAK,CAAA;IACzB,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAChC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,CACtC,OAAO,KAAK,MAAM,IAAI,kBAAkB,CAAC,YAAY,CAAC,KAAK,kBAAkB,CAAC,QAAQ,CAAC,CAC1F,CAAA;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAEtD,OAAO,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AAC1C,CAAC,CAAA;AAeD,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,EAAE,OAAe,EAAsC,EAAE;IACxG,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACvD,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,oBAAoB,EAAE,CAAC;KAChC,CAAC,CAAA;IAEF,IAAI,OAAO,IAAI,aAAa,EAAE,CAAC;QAC7B,IAAI,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,mBAAmB,EAAE,aAAa,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;QACvE,CAAC;QAED,MAAM,aAAa,CAAC,KAAK,CAAA;IAC3B,CAAC;IAED,IAAI,OAAO,IAAI,aAAa,EAAE,CAAC;QAC7B,MAAM,aAAa,CAAC,KAAK,CAAA;IAC3B,CAAC;IAED,MAAM,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC,IAAI,CAAA;IAC3C,MAAM,EAAE,gBAAgB,EAAE,GAAG,aAAa,CAAC,IAAI,CAAA;IAE/C,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;IACjD,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAA;IAEvE,+EAA+E;IAC/E,wDAAwD;IACxD,MAAM,kBAAkB,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAA;IACvG,MAAM,OAAO,GAAG,kBAAkB,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAA;IAErF,OAAO;QACL,KAAK,EAAE,YAAY;QACnB,OAAO;QACP,SAAS,EAAE,YAAY,GAAG,OAAO;KAClC,CAAA;AACH,CAAC,CAAA;AAED,6EAA6E;AAC7E,MAAM,sBAAsB,GAAG,KAAK,EAAE,OAAe,EAAmB,EAAE;IACxE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,4BAA4B,CAAC,OAAO,CAAC,CAAA;IACjE,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAwB,KAAK,EAAC,KAAK,EAAC,EAAE,CACrE,SAAS,CAAC,KAAK,CAAC;IACd,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC;IACvC,CAAC,CAAC,8BAA8B,CAAC;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,EAAE,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,iBAAiB,CAAC;KACjD,CAAC,CAAA"}
+{"version":3,"file":"ripple.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/coin/balance/resolvers/ripple.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAA;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAA;AACxF,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAA;AAChH,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAA;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAA;AAClF,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAA;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAI/D;;;;;;;GAOG;AACH,MAAM,8BAA8B,GAAG,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAmC,EAAmB,EAAE;IACjH,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAA;IAEnD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAA;IAEjE,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;QAC3B,uEAAuE;QACvE,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,mBAAmB,EAAE,aAAa,CAAC,EAAE,CAAC;YACrE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;QAClB,CAAC;QAED,MAAM,WAAW,CAAC,KAAK,CAAA;IACzB,CAAC;IAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IAE/E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAEtD,OAAO,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AAC1C,CAAC,CAAA;AAeD,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,EAAE,OAAe,EAAsC,EAAE;IACxG,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACvD,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,oBAAoB,EAAE,CAAC;KAChC,CAAC,CAAA;IAEF,IAAI,OAAO,IAAI,aAAa,EAAE,CAAC;QAC7B,IAAI,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,mBAAmB,EAAE,aAAa,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;QACvE,CAAC;QAED,MAAM,aAAa,CAAC,KAAK,CAAA;IAC3B,CAAC;IAED,IAAI,OAAO,IAAI,aAAa,EAAE,CAAC;QAC7B,MAAM,aAAa,CAAC,KAAK,CAAA;IAC3B,CAAC;IAED,MAAM,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC,IAAI,CAAA;IAC3C,MAAM,EAAE,gBAAgB,EAAE,GAAG,aAAa,CAAC,IAAI,CAAA;IAE/C,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;IACjD,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAA;IAEvE,+EAA+E;IAC/E,wDAAwD;IACxD,MAAM,kBAAkB,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAA;IACvG,MAAM,OAAO,GAAG,kBAAkB,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAA;IAErF,OAAO;QACL,KAAK,EAAE,YAAY;QACnB,OAAO;QACP,SAAS,EAAE,YAAY,GAAG,OAAO;KAClC,CAAA;AACH,CAAC,CAAA;AAED,6EAA6E;AAC7E,MAAM,sBAAsB,GAAG,KAAK,EAAE,OAAe,EAAmB,EAAE;IACxE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,4BAA4B,CAAC,OAAO,CAAC,CAAA;IACjE,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAwB,KAAK,EAAC,KAAK,EAAC,EAAE,CACrE,SAAS,CAAC,KAAK,CAAC;IACd,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC;IACvC,CAAC,CAAC,8BAA8B,CAAC;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,EAAE,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,iBAAiB,CAAC;KACjD,CAAC,CAAA"}

package/dist/coin/find/CoinFinderChainKind.d.ts

@@ -1,3 +1,3 @@
-export declare const coinFinderChainKinds: readonly ["evm", "cosmos", "solana", "cardano", "ripple"];
+export declare const coinFinderChainKinds: readonly ["evm", "cosmos", "solana", "cardano", "ripple", "ton"];
 export type CoinFinderChainKind = (typeof coinFinderChainKinds)[number];
 //# sourceMappingURL=CoinFinderChainKind.d.ts.map

package/dist/coin/find/CoinFinderChainKind.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CoinFinderChainKind.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/find/CoinFinderChainKind.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,2DAA4D,CAAA;AAC7F,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAA"}
+{"version":3,"file":"CoinFinderChainKind.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/find/CoinFinderChainKind.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,kEAAmE,CAAA;AACpG,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/coin/find/CoinFinderChainKind.js

@@ -1,2 +1,2 @@
-export const coinFinderChainKinds = ['evm', 'cosmos', 'solana', 'cardano', 'ripple'];
+export const coinFinderChainKinds = ['evm', 'cosmos', 'solana', 'cardano', 'ripple', 'ton'];
 //# sourceMappingURL=CoinFinderChainKind.js.map

package/dist/coin/find/CoinFinderChainKind.js.map

@@ -1 +1 @@
-{"version":3,"file":"CoinFinderChainKind.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/find/CoinFinderChainKind.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAA"}
+{"version":3,"file":"CoinFinderChainKind.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/find/CoinFinderChainKind.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAU,CAAA"}

package/dist/coin/find/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/find/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAKlD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAe9C,eAAO,MAAM,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAW9C,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/find/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAKlD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAiB9C,eAAO,MAAM,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAW9C,CAAA"}

package/dist/coin/find/index.js

@@ -6,12 +6,14 @@ import { findCosmosCoins } from './resolvers/cosmos.js';
 import { findEvmCoins } from './resolvers/evm/index.js';
 import { findRippleCoins } from './resolvers/ripple.js';
 import { findSolanaCoins } from './resolvers/solana/index.js';
+import { findTonCoins } from './resolvers/ton.js';
 const resolvers = {
     cosmos: findCosmosCoins,
     evm: findEvmCoins,
     solana: findSolanaCoins,
     cardano: findCardanoCoins,
     ripple: findRippleCoins,
+    ton: findTonCoins,
 };
 export const findCoins = async (input) => {
     const chainKind = getChainKind(input.chain);

package/dist/coin/find/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/find/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAA;AAE3D,OAAO,EAAuB,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAEjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAEpD,MAAM,SAAS,GAAwD;IACrE,MAAM,EAAE,eAAe;IACvB,GAAG,EAAE,YAAY;IACjB,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,gBAAgB;IACzB,MAAM,EAAE,eAAe;CACxB,CAAA;AAED,MAAM,CAAC,MAAM,SAAS,GAA6B,KAAK,EAAC,KAAK,EAAC,EAAE;IAC/D,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3C,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,sCAAsC,SAAS,sBAAsB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvG,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;IAErC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/coin/find/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAA;AAE3D,OAAO,EAAuB,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAEjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,SAAS,GAAwD;IACrE,MAAM,EAAE,eAAe;IACvB,GAAG,EAAE,YAAY;IACjB,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,gBAAgB;IACzB,MAAM,EAAE,eAAe;IACvB,GAAG,EAAE,YAAY;CAClB,CAAA;AAED,MAAM,CAAC,MAAM,SAAS,GAA6B,KAAK,EAAC,KAAK,EAAC,EAAE;IAC/D,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3C,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,sCAAsC,SAAS,sBAAsB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvG,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;IAErC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC,CAAA"}

package/dist/coin/find/resolvers/ton.d.ts

@@ -0,0 +1,15 @@
+import { OtherChain } from '@vultisig/core-chain/Chain';
+import { FindCoinsResolver } from '@vultisig/core-chain/coin/find/resolver';
+/**
+ * Discovers the jettons held at `address` that pass verification.
+ *
+ * Only `verified` jettons are returned. TON wallets are carpet-bombed with
+ * airdropped counterfeits (fake USDT above all) and spam, and auto-adding those
+ * to a vault would put a "USDT" balance on the home screen that the user never
+ * received. Unverified and scam jettons can still be added by hand, where the
+ * UI labels them. Toncenter's indexer metadata rides along in the wallet
+ * listing, so no per-jetton call is needed; curated metadata wins for jettons
+ * we ship ourselves.
+ */
+export declare const findTonCoins: FindCoinsResolver<OtherChain.Ton>;
+//# sourceMappingURL=ton.d.ts.map

package/dist/coin/find/resolvers/ton.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ton.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/chain/coin/find/resolvers/ton.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AAMvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAA;AAM3E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,EAAE,iBAAiB,CAAC,UAAU,CAAC,GAAG,CA8C1D,CAAA"}

package/dist/coin/find/resolvers/ton.js

@@ -0,0 +1,61 @@
+import { tonAddressToBounceable } from '@vultisig/core-chain/chains/ton/address';
+import { getOwnerJettonWallets } from '@vultisig/core-chain/chains/ton/api';
+import { resolveTonJettonVerification } from '@vultisig/core-chain/chains/ton/jetton/verification';
+import { getTonVerifiedJettonRegistry } from '@vultisig/core-chain/chains/ton/jetton/verifiedRegistry';
+import { knownTokensIndex } from '@vultisig/core-chain/coin/knownTokens';
+import { without } from '@vultisig/lib-utils/array/without';
+const defaultJettonDecimals = 9;
+/**
+ * Discovers the jettons held at `address` that pass verification.
+ *
+ * Only `verified` jettons are returned. TON wallets are carpet-bombed with
+ * airdropped counterfeits (fake USDT above all) and spam, and auto-adding those
+ * to a vault would put a "USDT" balance on the home screen that the user never
+ * received. Unverified and scam jettons can still be added by hand, where the
+ * UI labels them. Toncenter's indexer metadata rides along in the wallet
+ * listing, so no per-jetton call is needed; curated metadata wins for jettons
+ * we ship ourselves.
+ */
+export const findTonCoins = async ({ address, chain }) => {
+    const [{ wallets, masters, userFriendlyAddresses }, registry] = await Promise.all([
+        getOwnerJettonWallets(address),
+        getTonVerifiedJettonRegistry(),
+    ]);
+    const coins = wallets.map(({ jettonMasterAddress, balance }) => {
+        if (balance <= 0n)
+            return;
+        const master = masters[jettonMasterAddress];
+        const verification = resolveTonJettonVerification({
+            address: jettonMasterAddress,
+            symbol: master?.symbol,
+            name: master?.name,
+            isFlaggedScam: master?.isFlaggedScam,
+            registry,
+        });
+        if (verification !== 'verified')
+            return;
+        const id = tonAddressToBounceable(userFriendlyAddresses[jettonMasterAddress] ?? jettonMasterAddress);
+        const known = knownTokensIndex[chain][id.toLowerCase()];
+        if (known) {
+            return { ...known, chain, id, address };
+        }
+        const verified = registry.byAddress[jettonMasterAddress];
+        if (!verified)
+            return;
+        const ticker = master?.symbol ?? verified.symbol;
+        if (!ticker)
+            return;
+        const priceProviderId = verified.priceProviderId;
+        return {
+            chain,
+            id,
+            address,
+            ticker,
+            decimals: master?.decimals ?? verified.decimals ?? defaultJettonDecimals,
+            logo: master?.logo ?? verified.logo,
+            ...(priceProviderId === undefined ? {} : { priceProviderId }),
+        };
+    });
+    return without(coins, undefined);
+};
+//# sourceMappingURL=ton.js.map

package/dist/coin/find/resolvers/ton.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ton.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/coin/find/resolvers/ton.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAA;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAA;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,qDAAqD,CAAA;AAClG,OAAO,EAAE,4BAA4B,EAAE,MAAM,yDAAyD,CAAA;AAGtG,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAA;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAA;AAE3D,MAAM,qBAAqB,GAAG,CAAC,CAAA;AAE/B;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAAsC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;IAC1F,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAChF,qBAAqB,CAAC,OAAO,CAAC;QAC9B,4BAA4B,EAAE;KAC/B,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAA2C,EAAE;QACtG,IAAI,OAAO,IAAI,EAAE;YAAE,OAAM;QAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAC3C,MAAM,YAAY,GAAG,4BAA4B,CAAC;YAChD,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,MAAM,EAAE,MAAM;YACtB,IAAI,EAAE,MAAM,EAAE,IAAI;YAClB,aAAa,EAAE,MAAM,EAAE,aAAa;YACpC,QAAQ;SACT,CAAC,CAAA;QACF,IAAI,YAAY,KAAK,UAAU;YAAE,OAAM;QAEvC,MAAM,EAAE,GAAG,sBAAsB,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,IAAI,mBAAmB,CAAC,CAAA;QAEpG,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;QACvD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAA;QACzC,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;QACxD,IAAI,CAAC,QAAQ;YAAE,OAAM;QAErB,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAA;QAChD,IAAI,CAAC,MAAM;YAAE,OAAM;QAEnB,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAA;QAEhD,OAAO;YACL,KAAK;YACL,EAAE;YACF,OAAO;YACP,MAAM;YACN,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,qBAAqB;YACxE,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,QAAQ,CAAC,IAAI;YACnC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;SAC9D,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;AAClC,CAAC,CAAA"}

package/dist/coin/tokenVerification.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Trust tier a wallet can attach to a discovered or user-added token.
+ *
+ * - `verified`: listed in a curated registry we trust (our own known-token list
+ *   or a chain ecosystem whitelist).
+ * - `scam`: positively identified as malicious, typically because it
+ *   impersonates a verified token's symbol or name while living at a different
+ *   contract address, or because the indexer flagged it.
+ * - `unverified`: neither — a real holding we know nothing about.
+ */
+export declare const tokenVerifications: readonly ["verified", "unverified", "scam"];
+export type TokenVerification = (typeof tokenVerifications)[number];
+//# sourceMappingURL=tokenVerification.d.ts.map

package/dist/coin/tokenVerification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenVerification.d.ts","sourceRoot":"","sources":["../../../../../packages/core/chain/coin/tokenVerification.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,6CAA8C,CAAA;AAE7E,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/coin/tokenVerification.js

@@ -0,0 +1,12 @@
+/**
+ * Trust tier a wallet can attach to a discovered or user-added token.
+ *
+ * - `verified`: listed in a curated registry we trust (our own known-token list
+ *   or a chain ecosystem whitelist).
+ * - `scam`: positively identified as malicious, typically because it
+ *   impersonates a verified token's symbol or name while living at a different
+ *   contract address, or because the indexer flagged it.
+ * - `unverified`: neither — a real holding we know nothing about.
+ */
+export const tokenVerifications = ['verified', 'unverified', 'scam'];
+//# sourceMappingURL=tokenVerification.js.map

package/dist/coin/tokenVerification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenVerification.js","sourceRoot":"","sources":["../../../../../packages/core/chain/coin/tokenVerification.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,CAAU,CAAA"}

package/dist/publicKey/address/deriveAddress.d.ts

@@ -1,10 +1,17 @@
 import { PublicKey, WalletCore } from '@trustwallet/wallet-core/dist/src/wallet-core';
 import { Chain } from '@vultisig/core-chain/Chain';
+import { TonWalletVersion } from '@vultisig/core-chain/chains/ton/wallet';
 type DeriveAddressInput = {
     chain: Chain;
     publicKey: PublicKey;
     walletCore: WalletCore;
+    /**
+     * TON only: which wallet contract to derive for. Defaults to V4R2, the
+     * contract every existing Vultisig TON address uses; W5 is a different
+     * account for the same key and must be an explicit choice.
+     */
+    tonWalletVersion?: TonWalletVersion;
 };
-export declare const deriveAddress: ({ chain, publicKey, walletCore }: DeriveAddressInput) => string;
+export declare const deriveAddress: ({ chain, publicKey, walletCore, tonWalletVersion }: DeriveAddressInput) => string;
 export {};
 //# sourceMappingURL=deriveAddress.d.ts.map

package/dist/publicKey/address/deriveAddress.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deriveAddress.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/publicKey/address/deriveAddress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,+CAA+C,CAAA;AACrF,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAMlD,KAAK,kBAAkB,GAAG;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,UAAU,EAAE,UAAU,CAAA;CACvB,CAAA;AAID,eAAO,MAAM,aAAa,GAAI,kCAAkC,kBAAkB,WA+BjF,CAAA"}
+{"version":3,"file":"deriveAddress.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/publicKey/address/deriveAddress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,+CAA+C,CAAA;AACrF,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAA6C,gBAAgB,EAAE,MAAM,wCAAwC,CAAA;AAMpH,KAAK,kBAAkB,GAAG;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ,SAAS,EAAE,SAAS,CAAA;IACpB,UAAU,EAAE,UAAU,CAAA;IACtB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;CACpC,CAAA;AAID,eAAO,MAAM,aAAa,GAAI,oDAAoD,kBAAkB,WAmCnG,CAAA"}

package/dist/publicKey/address/deriveAddress.js

@@ -1,9 +1,13 @@
 import { Chain } from '@vultisig/core-chain/Chain';
+import { defaultTonWalletVersion, deriveTonAddress } from '@vultisig/core-chain/chains/ton/wallet';
 import { getCoinType } from '@vultisig/core-chain/coin/coinType';
 import { deriveBittensorAddress } from './bittensor.js';
 import { deriveCardanoAddress } from './cardano.js';
 const bitcoinCashPrefix = 'bitcoincash:';
-export const deriveAddress = ({ chain, publicKey, walletCore }) => {
+export const deriveAddress = ({ chain, publicKey, walletCore, tonWalletVersion }) => {
+    if (chain === Chain.Ton) {
+        return deriveTonAddress({ publicKey, walletCore, version: tonWalletVersion ?? defaultTonWalletVersion });
+    }
     const coinType = getCoinType({
         chain,
         walletCore,

package/dist/publicKey/address/deriveAddress.js.map

@@ -1 +1 @@
-{"version":3,"file":"deriveAddress.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/publicKey/address/deriveAddress.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AAEhE,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAQhD,MAAM,iBAAiB,GAAG,cAAc,CAAA;AAExC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAsB,EAAE,EAAE;IACpF,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC3B,KAAK;QACL,UAAU;KACX,CAAC,CAAA;IAEF,IAAI,KAAK,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC9B,OAAO,UAAU,CAAC,UAAU,CAAC,yBAAyB,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;IACnG,CAAC;IAED,IAAI,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,oBAAoB,CAAC;YAC1B,SAAS;YACT,UAAU;SACX,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,KAAK,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC9B,OAAO,sBAAsB,CAAC;YAC5B,SAAS;YACT,UAAU;SACX,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,0BAA0B,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IAEtF,IAAI,KAAK,KAAK,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzE,OAAO,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAChD,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}
+{"version":3,"file":"deriveAddress.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/publicKey/address/deriveAddress.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAoB,MAAM,wCAAwC,CAAA;AACpH,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AAEhE,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAchD,MAAM,iBAAiB,GAAG,cAAc,CAAA;AAExC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAsB,EAAE,EAAE;IACtG,IAAI,KAAK,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;QACxB,OAAO,gBAAgB,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,gBAAgB,IAAI,uBAAuB,EAAE,CAAC,CAAA;IAC1G,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC3B,KAAK;QACL,UAAU;KACX,CAAC,CAAA;IAEF,IAAI,KAAK,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC9B,OAAO,UAAU,CAAC,UAAU,CAAC,yBAAyB,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;IACnG,CAAC;IAED,IAAI,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,oBAAoB,CAAC;YAC1B,SAAS;YACT,UAAU;SACX,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,KAAK,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC9B,OAAO,sBAAsB,CAAC;YAC5B,SAAS;YACT,UAAU;SACX,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,0BAA0B,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IAEtF,IAAI,KAAK,KAAK,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzE,OAAO,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAChD,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/dist/publicKey/address/getChainAddress.d.ts

@@ -1,5 +1,6 @@
 import { WalletCore } from '@trustwallet/wallet-core';
 import { Chain } from '@vultisig/core-chain/Chain';
+import { TonWalletVersion } from '@vultisig/core-chain/chains/ton/wallet';
 import { PublicKeys } from '@vultisig/core-chain/publicKey/PublicKeys';
 type GetChainAddressInput = {
     chain: Chain;
@@ -8,8 +9,10 @@ type GetChainAddressInput = {
     publicKeys: PublicKeys;
     publicKeyMldsa?: string;
     chainPublicKeys?: Partial<Record<Chain, string>>;
+    /** TON only: wallet contract to derive for. Defaults to V4R2. */
+    tonWalletVersion?: TonWalletVersion;
 };
 /** Derives the on-chain address for any chain, including MLDSA-based chains like QBTC. */
-export declare const getChainAddress: ({ chain, walletCore, hexChainCode, publicKeys, publicKeyMldsa, chainPublicKeys, }: GetChainAddressInput) => string;
+export declare const getChainAddress: ({ chain, walletCore, hexChainCode, publicKeys, publicKeyMldsa, chainPublicKeys, tonWalletVersion, }: GetChainAddressInput) => string;
 export {};
 //# sourceMappingURL=getChainAddress.d.ts.map

package/dist/publicKey/address/getChainAddress.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getChainAddress.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/publicKey/address/getChainAddress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAIlD,OAAO,EAAE,UAAU,EAAE,MAAM,2CAA2C,CAAA;AAGtE,KAAK,oBAAoB,GAAG;IAC1B,KAAK,EAAE,KAAK,CAAA;IACZ,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,UAAU,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;CACjD,CAAA;AAED,0FAA0F;AAC1F,eAAO,MAAM,eAAe,GAAI,mFAO7B,oBAAoB,KAAG,MAczB,CAAA"}
+{"version":3,"file":"getChainAddress.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/publicKey/address/getChainAddress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA;AAIzE,OAAO,EAAE,UAAU,EAAE,MAAM,2CAA2C,CAAA;AAGtE,KAAK,oBAAoB,GAAG;IAC1B,KAAK,EAAE,KAAK,CAAA;IACZ,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,UAAU,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;IAChD,iEAAiE;IACjE,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;CACpC,CAAA;AAED,0FAA0F;AAC1F,eAAO,MAAM,eAAe,GAAI,qGAQ7B,oBAAoB,KAAG,MAczB,CAAA"}

package/dist/publicKey/address/getChainAddress.js

@@ -4,7 +4,7 @@ import { deriveQbtcAddress } from '@vultisig/core-chain/publicKey/address/derive
 import { getPublicKey } from '@vultisig/core-chain/publicKey/getPublicKey';
 import { shouldBePresent } from '@vultisig/lib-utils/assert/shouldBePresent';
 /** Derives the on-chain address for any chain, including MLDSA-based chains like QBTC. */
-export const getChainAddress = ({ chain, walletCore, hexChainCode, publicKeys, publicKeyMldsa, chainPublicKeys, }) => {
+export const getChainAddress = ({ chain, walletCore, hexChainCode, publicKeys, publicKeyMldsa, chainPublicKeys, tonWalletVersion, }) => {
     if (chain === Chain.QBTC) {
         return deriveQbtcAddress(shouldBePresent(publicKeyMldsa, 'MLDSA public key'));
     }
@@ -15,6 +15,6 @@ export const getChainAddress = ({ chain, walletCore, hexChainCode, publicKeys, p
         publicKeys,
         chainPublicKeys,
     });
-    return deriveAddress({ chain, publicKey, walletCore });
+    return deriveAddress({ chain, publicKey, walletCore, tonWalletVersion });
 };
 //# sourceMappingURL=getChainAddress.js.map

package/dist/publicKey/address/getChainAddress.js.map

@@ -1 +1 @@
-{"version":3,"file":"getChainAddress.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/publicKey/address/getChainAddress.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,sDAAsD,CAAA;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0DAA0D,CAAA;AAC5F,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAA;AAE1E,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAA;AAW5E,0FAA0F;AAC1F,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAC9B,KAAK,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,cAAc,EACd,eAAe,GACM,EAAU,EAAE;IACjC,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QACzB,OAAO,iBAAiB,CAAC,eAAe,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAC/E,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,KAAK;QACL,UAAU;QACV,YAAY;QACZ,UAAU;QACV,eAAe;KAChB,CAAC,CAAA;IAEF,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;AACxD,CAAC,CAAA"}
+{"version":3,"file":"getChainAddress.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/publicKey/address/getChainAddress.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAElD,OAAO,EAAE,aAAa,EAAE,MAAM,sDAAsD,CAAA;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0DAA0D,CAAA;AAC5F,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAA;AAE1E,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAA;AAa5E,0FAA0F;AAC1F,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAC9B,KAAK,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,cAAc,EACd,eAAe,EACf,gBAAgB,GACK,EAAU,EAAE;IACjC,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QACzB,OAAO,iBAAiB,CAAC,eAAe,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAC/E,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,KAAK;QACL,UAAU;QACV,YAAY;QACZ,UAAU;QACV,eAAe;KAChB,CAAC,CAAA;IAEF,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAA;AAC1E,CAAC,CAAA"}

package/dist/swap/general/swapkit/api/getSwapKitQuote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getSwapKitQuote.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/swap/general/swapkit/api/getSwapKitQuote.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAA;AAGnE,OAAO,EAAE,gBAAgB,EAAiB,MAAM,oDAAoD,CAAA;AA2BpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAGzE,KAAK,KAAK,GAAG,MAAM,CAAC,iBAAiB,EAAE,WAAW,CAAC,GAAG;IACpD,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,CAAA;AAo4BD,eAAO,MAAM,eAAe,GAAU,+CAMnC,KAAK,KAAG,OAAO,CAAC,gBAAgB,CAwElC,CAAA"}
+{"version":3,"file":"getSwapKitQuote.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/swap/general/swapkit/api/getSwapKitQuote.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAA;AAGnE,OAAO,EAAE,gBAAgB,EAAiB,MAAM,oDAAoD,CAAA;AA4BpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAGzE,KAAK,KAAK,GAAG,MAAM,CAAC,iBAAiB,EAAE,WAAW,CAAC,GAAG;IACpD,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,CAAA;AA++BD,eAAO,MAAM,eAAe,GAAU,+CAMnC,KAAK,KAAG,OAAO,CAAC,gBAAgB,CAwElC,CAAA"}

package/dist/swap/general/swapkit/api/getSwapKitQuote.js

@@ -1,6 +1,7 @@
 import { base64Decode } from '@bufbuild/protobuf/wire';
 import { toChainAmount } from '@vultisig/core-chain/amount/toChainAmount';
 import { Chain } from '@vultisig/core-chain/Chain';
+import { areEqualTonAddresses, tonAddressToBounceable } from '@vultisig/core-chain/chains/ton/address';
 import { chainFeeCoin } from '@vultisig/core-chain/coin/chainFeeCoin';
 import { usdc } from '@vultisig/core-chain/coin/knownTokens';
 import { assertSwapKitAddressReputation, assertSwapKitDestinationMatchesTarget, } from '@vultisig/core-chain/swap/general/knownAggregatorRouters';
@@ -9,6 +10,7 @@ import { isSwapKitSourceChain, } from '@vultisig/core-chain/swap/general/swapkit
 import { SwapKitAmountBelowMinimumError, SwapKitFeeShapeError, SwapKitNoEligibleRoutesError, } from '@vultisig/core-chain/swap/general/swapkit/SwapKitErrors';
 import { isSwapKitPairSupported, normalizeSwapKitProvider, resolveSwapKitChainMetadata, swapKitAllowedProviders, swapKitExcludedProviders, } from '@vultisig/core-chain/swap/general/swapkit/SwapKitProviders';
 import { isOneOf } from '@vultisig/lib-utils/array/isOneOf';
+import { attempt } from '@vultisig/lib-utils/attempt';
 import { withoutUndefinedFields } from '@vultisig/lib-utils/record/withoutUndefinedFields';
 import { address as btcAddress, networks, Psbt } from 'bitcoinjs-lib';
 const swapKitProviderQuoteAttempts = [
@@ -332,17 +334,97 @@ const toTransferAmount = (value, decimals) => {
     }
     return value.includes('.') ? toChainAmount(value, decimals) : BigInt(value);
 };
+const isTransferAmountValue = (value) => typeof value === 'string' || typeof value === 'number' || typeof value === 'bigint';
 const getTransferAmount = ({ depositAmount, tx }, amount, decimals) => {
     if (depositAmount) {
         return toChainAmount(depositAmount, decimals);
     }
-    if (Array.isArray(tx) &&
-        isRecord(tx[0]) &&
-        (typeof tx[0].amount === 'string' || typeof tx[0].amount === 'number' || typeof tx[0].amount === 'bigint')) {
+    if (Array.isArray(tx) && isRecord(tx[0]) && isTransferAmountValue(tx[0].amount)) {
         return toTransferAmount(tx[0].amount, decimals);
     }
     return amount;
 };
+/**
+ * The single transfer SwapKit describes in its `tx[]` array, or `undefined`
+ * when `tx` is any other shape — an EVM object, an opaque PSBT / PTB string, or
+ * absent because `disableBuildTx` was sent.
+ *
+ * More than one entry is rejected rather than ignored: only `tx[0]` is ever
+ * built, so a multi-transfer route would be signed as a partial deposit that
+ * under-funds the swap. The count is checked before the entry shape so a
+ * malformed trailing entry cannot slip a multi-transfer array past this guard.
+ */
+const getTransferTxEntry = (tx) => {
+    if (!Array.isArray(tx) || tx.length === 0) {
+        return undefined;
+    }
+    if (tx.length > 1) {
+        throw new Error(`SwapKit transfer route returned ${tx.length} transfers; only the first would be signed, so the swap would be under-funded.`);
+    }
+    return isRecord(tx[0]) ? tx[0] : undefined;
+};
+/**
+ * The agreed TON deposit destination in its bounceable (`EQ…`) form.
+ *
+ * `assertTransferAgreement` compares TON spellings by account, so a route whose
+ * fields spell one account as `UQ…`, raw `0:hex` and `EQ…` passes — and the
+ * spelling that wins the precedence order is what the signer would otherwise
+ * read the bounce flag from. A deposit that goes out non-bounceable to a
+ * rejecting contract is absorbed instead of refunded, so the agreed account is
+ * re-spelled bounceable here, whichever field it came from. A string that is
+ * not a TON address at all cannot be a deposit destination and is refused.
+ */
+const toCanonicalTonDeposit = (destination) => {
+    const canonical = attempt(() => tonAddressToBounceable(destination));
+    if ('error' in canonical) {
+        throw new Error(`SwapKit transfer route returned an invalid TON deposit address: ${destination}`);
+    }
+    return canonical.data;
+};
+const areEqualTransferAddresses = (left, right, chain) => chain === Chain.Ton ? areEqualTonAddresses(left, right) : left === right;
+/**
+ * Fail closed when the `/v3/swap` response disagrees with itself about where
+ * the deposit goes or how large it is.
+ *
+ * `targetAddress`, `depositAddress` and `tx[]` are independent fields carrying
+ * the same fact, and the resolvers above take the first one that is present and
+ * never look at the rest. So a response whose halves diverge — a provider bug,
+ * an API change, a tampered payload — signs whichever field happens to win the
+ * precedence order while the others name a different recipient or size, and
+ * nothing downstream can tell. Neither field is authoritative enough to pick a
+ * winner from, so a divergence is refused instead of resolved.
+ *
+ * Addresses are compared per chain because TON spells one account as `EQ…`,
+ * `UQ…` or raw `workchain:hex` — comparing those as strings would reject
+ * healthy routes.
+ */
+const assertTransferAgreement = (response, chain, decimals) => {
+    const entry = getTransferTxEntry(response.tx);
+    const destinations = [
+        { field: 'targetAddress', value: response.targetAddress },
+        { field: 'depositAddress', value: response.depositAddress },
+        { field: 'tx[0].address', value: typeof entry?.address === 'string' ? entry.address : undefined },
+    ].flatMap(({ field, value }) => (value?.trim() ? [{ field, value: value.trim() }] : []));
+    const [primaryDestination, ...otherDestinations] = destinations;
+    if (primaryDestination) {
+        const divergent = otherDestinations.find(({ value }) => !areEqualTransferAddresses(value, primaryDestination.value, chain));
+        if (divergent) {
+            throw new Error(`SwapKit transfer route disagrees with itself about the destination: ` +
+                `${primaryDestination.field} is ${primaryDestination.value} but ${divergent.field} is ${divergent.value}.`);
+        }
+    }
+    const txAmountValue = entry && isTransferAmountValue(entry.amount) ? entry.amount : undefined;
+    if (txAmountValue === undefined || !response.depositAmount) {
+        return;
+    }
+    const txAmount = toTransferAmount(txAmountValue, decimals);
+    const depositAmount = toChainAmount(response.depositAmount, decimals);
+    if (txAmount !== depositAmount) {
+        throw new Error(`SwapKit transfer route disagrees with itself about the amount: ` +
+            `depositAmount is ${response.depositAmount} (${depositAmount} base units) ` +
+            `but tx[0].amount is ${txAmountValue} (${txAmount} base units).`);
+    }
+};
 const shouldUseTransferTx = (chain) => isOneOf(chain, swapKitTransferSourceChains);
 // Transfer-arm chains that still need SwapKit to BUILD the transaction, so
 // `/v3/swap` must not be sent `disableBuildTx`. Bitcoin gets a PSBT and Sui a
@@ -397,10 +479,12 @@ const getBitcoinPsbtDestinationAmount = ({ txPayload, senderAddress, targetAddre
     }
 };
 const buildTransferTx = (response, from, amount) => {
-    const to = getTransferTargetAddress(response);
-    if (!to) {
+    assertTransferAgreement(response, from.chain, from.decimals);
+    const agreedDestination = getTransferTargetAddress(response);
+    if (!agreedDestination) {
         throw new Error('SwapKit transfer route did not return a target address.');
     }
+    const to = from.chain === Chain.Ton ? toCanonicalTonDeposit(agreedDestination) : agreedDestination;
     // SwapKit renames base64 tx types on the wire without versioning — `SOLANA`
     // became `SERIALIZED_BASE64` and `CARDANO` became `CBOR` mid-flight (iOS
     // accepts both spellings in `SwapKitSwapResponse.decodeTx`). A Sui route's