@vultisig/core-mpc 1.13.0 → 1.14.1

package/dist/keysign/swap/getKeysignLimitSwapOrder.d.ts

@@ -0,0 +1,41 @@
+import { Chain } from '@vultisig/core-chain/Chain';
+import { LimitSwapExpiryHours, ParsedLimitSwapMemo } from '@vultisig/core-chain/swap/native/limitSwapMemo';
+import { KeysignPayload } from '../../types/vultisig/keysign/v1/keysign_message_pb.js';
+export type KeysignLimitSwapOrder = ParsedLimitSwapMemo & {
+    /** The buy chain, when the target asset's prefix is one this SDK can route. */
+    targetChain?: Chain;
+    /**
+     * Guaranteed-minimum received, as a decimal string in the target asset's
+     * display units. Formatted from the LIM with THORChain's 8 decimals, matching
+     * how `toAmountDecimal` is formatted for market swaps.
+     */
+    minimumReceivedDecimal: string;
+    /** The order's resting lifetime, when the interval maps to one this SDK builds. */
+    expiryHours?: LimitSwapExpiryHours;
+};
+/**
+ * Decode the limit order a keysign payload is about to place, for review.
+ *
+ * Returns `undefined` for any payload that is not a limit order, so a caller can
+ * branch on it directly.
+ *
+ * **This is how a *joining* device reviews a limit order.** The builder attaches
+ * a `swapPayload` only for ERC20 sources — RUNE and native-gas-asset orders are
+ * plain deposits — so a co-signer keying off the swap payload alone sees a
+ * generic send to an opaque address with an opaque memo, and cannot tell what is
+ * being bought, where it pays out, or at what floor.
+ *
+ * Deriving the terms from `keysignPayload.memo` fixes that uniformly, because
+ * the memo is present on every source branch. It is also the *only* trustworthy
+ * source: the memo is the exact string THORChain executes, so terms read from it
+ * cannot disagree with the order that gets signed. A display field carried
+ * alongside the memo can — it is supplied by the initiating device, and a
+ * co-signer has no way to tell a mistaken one from a malicious one.
+ *
+ * Parsing is fail-closed on a malformed memo, but a caller reviewing an
+ * arbitrary payload wants "not a limit order" rather than a throw, so a memo
+ * that does not parse is reported as not-a-limit-order. Signing still rejects it:
+ * `buildLimitSwapKeysignPayload` parses the same memo and throws.
+ */
+export declare const getKeysignLimitSwapOrder: ({ memo }: Pick<KeysignPayload, "memo">) => KeysignLimitSwapOrder | undefined;
+//# sourceMappingURL=getKeysignLimitSwapOrder.d.ts.map

package/dist/keysign/swap/getKeysignLimitSwapOrder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getKeysignLimitSwapOrder.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/mpc/keysign/swap/getKeysignLimitSwapOrder.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAElD,OAAO,EAEL,oBAAoB,EAGpB,mBAAmB,EAEpB,MAAM,gDAAgD,CAAA;AAIvD,OAAO,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAA;AASnF,MAAM,MAAM,qBAAqB,GAAG,mBAAmB,GAAG;IACxD,+EAA+E;IAC/E,WAAW,CAAC,EAAE,KAAK,CAAA;IACnB;;;;OAIG;IACH,sBAAsB,EAAE,MAAM,CAAA;IAC9B,mFAAmF;IACnF,WAAW,CAAC,EAAE,oBAAoB,CAAA;CACnC,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,wBAAwB,GAAI,UAAU,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,KAAG,qBAAqB,GAAG,SAkBzG,CAAA"}

package/dist/keysign/swap/getKeysignLimitSwapOrder.js

@@ -0,0 +1,50 @@
+import { fromChainAmountDisplay } from '@vultisig/core-chain/amount/fromChainAmountExact';
+import { Chain } from '@vultisig/core-chain/Chain';
+import { chainFeeCoin } from '@vultisig/core-chain/coin/chainFeeCoin';
+import { limitSwapExpiryHours, getLimitSwapIntervalBlocks, limitSwapMemoPrefix, parseLimitSwapMemo, } from '@vultisig/core-chain/swap/native/limitSwapMemo';
+import { thorchainAssetPrefixToChain } from '@vultisig/core-chain/swap/native/thorchainMemoAsset';
+import { attempt } from '@vultisig/lib-utils/attempt';
+/** THORChain's fixed point for pool amounts, which the memo's LIM is expressed in. */
+const thorchainDecimals = chainFeeCoin[Chain.THORChain].decimals;
+const intervalBlocksToExpiryHours = Object.freeze(Object.fromEntries(limitSwapExpiryHours.map(hours => [getLimitSwapIntervalBlocks(hours), hours])));
+/**
+ * Decode the limit order a keysign payload is about to place, for review.
+ *
+ * Returns `undefined` for any payload that is not a limit order, so a caller can
+ * branch on it directly.
+ *
+ * **This is how a *joining* device reviews a limit order.** The builder attaches
+ * a `swapPayload` only for ERC20 sources — RUNE and native-gas-asset orders are
+ * plain deposits — so a co-signer keying off the swap payload alone sees a
+ * generic send to an opaque address with an opaque memo, and cannot tell what is
+ * being bought, where it pays out, or at what floor.
+ *
+ * Deriving the terms from `keysignPayload.memo` fixes that uniformly, because
+ * the memo is present on every source branch. It is also the *only* trustworthy
+ * source: the memo is the exact string THORChain executes, so terms read from it
+ * cannot disagree with the order that gets signed. A display field carried
+ * alongside the memo can — it is supplied by the initiating device, and a
+ * co-signer has no way to tell a mistaken one from a malicious one.
+ *
+ * Parsing is fail-closed on a malformed memo, but a caller reviewing an
+ * arbitrary payload wants "not a limit order" rather than a throw, so a memo
+ * that does not parse is reported as not-a-limit-order. Signing still rejects it:
+ * `buildLimitSwapKeysignPayload` parses the same memo and throws.
+ */
+export const getKeysignLimitSwapOrder = ({ memo }) => {
+    if (!memo?.startsWith(limitSwapMemoPrefix)) {
+        return undefined;
+    }
+    const parsed = attempt(() => parseLimitSwapMemo(memo));
+    if ('error' in parsed) {
+        return undefined;
+    }
+    const { data: order } = parsed;
+    return {
+        ...order,
+        targetChain: thorchainAssetPrefixToChain[order.targetAsset.split('.')[0].toUpperCase()],
+        minimumReceivedDecimal: fromChainAmountDisplay(order.limit, thorchainDecimals),
+        expiryHours: intervalBlocksToExpiryHours[order.intervalBlocks],
+    };
+};
+//# sourceMappingURL=getKeysignLimitSwapOrder.js.map

package/dist/keysign/swap/getKeysignLimitSwapOrder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getKeysignLimitSwapOrder.js","sourceRoot":"","sources":["../../../../../../packages/core/mpc/keysign/swap/getKeysignLimitSwapOrder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kDAAkD,CAAA;AACzF,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AACrE,OAAO,EACL,oBAAoB,EAEpB,0BAA0B,EAC1B,mBAAmB,EAEnB,kBAAkB,GACnB,MAAM,gDAAgD,CAAA;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAA;AACjG,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AAIrD,sFAAsF;AACtF,MAAM,iBAAiB,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAA;AAEhE,MAAM,2BAA2B,GAA4D,MAAM,CAAC,MAAM,CACxG,MAAM,CAAC,WAAW,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAClG,CAAA;AAeD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,EAAE,IAAI,EAAgC,EAAqC,EAAE;IACpH,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAA;IACtD,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;IAE9B,OAAO;QACL,GAAG,KAAK;QACR,WAAW,EAAE,2BAA2B,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACvF,sBAAsB,EAAE,sBAAsB,CAAC,KAAK,CAAC,KAAK,EAAE,iBAAiB,CAAC;QAC9E,WAAW,EAAE,2BAA2B,CAAC,KAAK,CAAC,cAAc,CAAC;KAC/D,CAAA;AACH,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/core-mpc",
-  "version": "1.13.0",
+  "version": "1.14.1",
   "description": "MPC, keysign, and vault types shared across Vultisig clients",
   "license": "MIT",
   "repository": {
@@ -601,6 +601,11 @@
       "import": "./dist/keysign/swap/cowswap/buildCowSwapApprovalSigningInput.js",
       "default": "./dist/keysign/swap/cowswap/buildCowSwapApprovalSigningInput.js"
     },
+    "./keysign/swap/getKeysignLimitSwapOrder": {
+      "types": "./dist/keysign/swap/getKeysignLimitSwapOrder.d.ts",
+      "import": "./dist/keysign/swap/getKeysignLimitSwapOrder.js",
+      "default": "./dist/keysign/swap/getKeysignLimitSwapOrder.js"
+    },
     "./keysign/swap/getKeysignSwapPayload": {
       "types": "./dist/keysign/swap/getKeysignSwapPayload.d.ts",
       "import": "./dist/keysign/swap/getKeysignSwapPayload.js",
@@ -1068,13 +1073,13 @@
   },
   "dependencies": {
     "7z-wasm": "^1.2.0",
-    "@bufbuild/protobuf": "^2.12.0",
+    "@bufbuild/protobuf": "^2.13.0",
     "@cosmjs/encoding": "^0.39.0",
-    "@mysten/sui": "^2.20.3",
+    "@mysten/sui": "^2.22.1",
     "@noble/hashes": "^1.8.0",
     "@solana/web3.js": "^1.98.4",
     "@trustwallet/wallet-core": "^4.7.0",
-    "@vultisig/core-chain": "2.28.0",
+    "@vultisig/core-chain": "2.29.1",
     "@vultisig/core-config": "0.9.1",
     "@vultisig/lib-dkls": "0.9.0",
     "@vultisig/lib-mldsa": "0.9.0",