@vultisig/rujira 1.0.0

package/dist/utils/type-guards.js

@@ -0,0 +1,27 @@
+/**
+ * Type guard to check if an object is a valid Asset with a secured FIN denom.
+ * Secured assets follow the `chain-symbol` pattern (e.g., `btc-btc`, `eth-usdc-0xa0b8...`).
+ * Native tokens (`rune`, `tcy`) and module tokens (`x/ruji`) are excluded.
+ * @internal
+ */
+export function isFinAsset(obj) {
+    if (!obj || typeof obj !== 'object')
+        return false;
+    const asset = obj;
+    return (typeof asset.formats === 'object' &&
+        asset.formats !== null &&
+        typeof asset.formats.fin === 'string' &&
+        asset.formats.fin.includes('-'));
+}
+/**
+ * Parse a THORChain asset string into chain and symbol components.
+ * @param asset - Asset string (e.g., "BTC.BTC", "ETH.USDC-0xA0b8...")
+ * @internal
+ */
+export function parseAsset(asset) {
+    const parts = asset.split('.');
+    return {
+        chain: parts[0]?.toUpperCase() || '',
+        symbol: parts.slice(1).join('.') || '',
+    };
+}

package/dist/validation/address-validator.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Address validation for L1 chains and THORChain
+ * @module validation/address-validator
+ */
+/**
+ * Validate an L1 chain address.
+ * Throws RujiraError if the address is invalid.
+ */
+export declare function validateL1Address(chain: string, address: string): void;
+/**
+ * Validate a THORChain bech32 address (thor1...).
+ * Throws RujiraError if the address is invalid.
+ */
+export declare function validateThorAddress(address: string): void;
+//# sourceMappingURL=address-validator.d.ts.map

package/dist/validation/address-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address-validator.d.ts","sourceRoot":"","sources":["../../src/validation/address-validator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA6BH;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAmBtE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAwCzD"}

package/dist/validation/address-validator.js

@@ -0,0 +1,75 @@
+/**
+ * Address validation for L1 chains and THORChain
+ * @module validation/address-validator
+ */
+import { fromBech32 } from '@cosmjs/encoding';
+import { RujiraError, RujiraErrorCode } from '../errors.js';
+const evmValidator = (addr) => /^0x[a-fA-F0-9]{40}$/.test(addr);
+const L1_ADDRESS_VALIDATORS = {
+    BTC: addr => /^(1|3)[a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(addr) || /^bc1[a-z0-9]{39,87}$/.test(addr),
+    ETH: evmValidator,
+    BSC: evmValidator,
+    AVAX: evmValidator,
+    BASE: evmValidator,
+    ARB: evmValidator,
+    GAIA: addr => /^cosmos1[a-z0-9]{38}$/.test(addr),
+    NOBLE: addr => /^noble1[a-z0-9]{38}$/.test(addr),
+    DOGE: addr => /^D[a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(addr),
+    DASH: addr => /^[X7][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(addr),
+    LTC: addr => /^[LM3][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(addr) || /^ltc1[a-z0-9]{39,87}$/.test(addr),
+    BCH: addr => /^(1|3)[a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(addr) ||
+        /^bitcoincash:[qp][a-z0-9]{41}$/.test(addr) ||
+        /^[qp][a-z0-9]{41}$/.test(addr),
+    XRP: addr => /^r[1-9A-HJ-NP-Za-km-z]{24,34}$/.test(addr),
+    TRON: addr => /^T[a-zA-Z0-9]{33}$/.test(addr),
+    ZEC: addr => /^t1[a-km-zA-HJ-NP-Z1-9]{33}$/.test(addr) || /^t3[a-km-zA-HJ-NP-Z1-9]{33}$/.test(addr),
+};
+/**
+ * Validate an L1 chain address.
+ * Throws RujiraError if the address is invalid.
+ */
+export function validateL1Address(chain, address) {
+    if (!address || address.trim().length === 0) {
+        throw new RujiraError(RujiraErrorCode.INVALID_ADDRESS, `${chain} address is required`);
+    }
+    const validator = L1_ADDRESS_VALIDATORS[chain.toUpperCase()];
+    if (validator) {
+        if (!validator(address)) {
+            throw new RujiraError(RujiraErrorCode.INVALID_ADDRESS, `Invalid ${chain} address: ${address}`);
+        }
+    }
+    else {
+        // Fallback: non-empty, reasonable length
+        if (address.length < 10 || address.length > 128) {
+            throw new RujiraError(RujiraErrorCode.INVALID_ADDRESS, `Invalid ${chain} address: expected 10-128 characters, got ${address.length}`);
+        }
+    }
+}
+/**
+ * Validate a THORChain bech32 address (thor1...).
+ * Throws RujiraError if the address is invalid.
+ */
+export function validateThorAddress(address) {
+    if (!address || typeof address !== 'string') {
+        throw new RujiraError(RujiraErrorCode.INVALID_ADDRESS, 'Destination address is required');
+    }
+    const trimmed = address.trim();
+    if (!trimmed.startsWith('thor1')) {
+        throw new RujiraError(RujiraErrorCode.INVALID_ADDRESS, `Invalid destination address format: must start with 'thor1'. Got: ${address.substring(0, 10)}...`);
+    }
+    try {
+        const decoded = fromBech32(trimmed);
+        if (decoded.prefix !== 'thor') {
+            throw new RujiraError(RujiraErrorCode.INVALID_ADDRESS, `Invalid address prefix: expected 'thor', got '${decoded.prefix}'`);
+        }
+        if (decoded.data.length !== 20 && decoded.data.length !== 32) {
+            throw new RujiraError(RujiraErrorCode.INVALID_ADDRESS, `Invalid address data length: expected 20 or 32 bytes, got ${decoded.data.length}`);
+        }
+    }
+    catch (error) {
+        if (error instanceof RujiraError) {
+            throw error;
+        }
+        throw new RujiraError(RujiraErrorCode.INVALID_ADDRESS, `Invalid bech32 address: ${error instanceof Error ? error.message : 'checksum verification failed'}`);
+    }
+}

package/package.json

@@ -0,0 +1,98 @@
+{
+  "name": "@vultisig/rujira",
+  "version": "1.0.0",
+  "type": "module",
+  "description": "Rujira DEX integration for Vultisig SDK - Modular TypeScript SDK for swaps and limit orders on THORChain",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./swap": {
+      "import": "./dist/modules/swap.js",
+      "types": "./dist/modules/swap.d.ts"
+    },
+    "./orderbook": {
+      "import": "./dist/modules/orderbook.js",
+      "types": "./dist/modules/orderbook.d.ts"
+    },
+    "./signer": {
+      "import": "./dist/signer/vultisig-provider.js",
+      "types": "./dist/signer/vultisig-provider.d.ts"
+    },
+    "./utils": {
+      "import": "./dist/utils/format.js",
+      "types": "./dist/utils/format.d.ts"
+    },
+    "./assets": {
+      "import": "./dist/assets/index.js",
+      "types": "./dist/assets/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -b",
+    "clean": "rm -rf dist",
+    "dev": "tsc -w",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@bufbuild/protobuf": "^2.10.2",
+    "@cosmjs/cosmwasm-stargate": "^0.32.4",
+    "@cosmjs/proto-signing": "^0.32.4",
+    "@cosmjs/stargate": "^0.32.4",
+    "big.js": "^7.0.1",
+    "cosmjs-types": "^0.9.0"
+  },
+  "devDependencies": {
+    "@types/big.js": "^6.2.2",
+    "@types/node": "^22.13.10",
+    "@vultisig/sdk": "0.5.0",
+    "typescript": "^5.8.2",
+    "vitest": "^3.0.9"
+  },
+  "peerDependencies": {
+    "@vultisig/sdk": ">=0.5.0"
+  },
+  "peerDependenciesMeta": {
+    "@vultisig/sdk": {
+      "optional": true
+    }
+  },
+  "keywords": [
+    "vultisig",
+    "rujira",
+    "thorchain",
+    "dex",
+    "swap",
+    "defi",
+    "cosmwasm",
+    "cosmos",
+    "crypto",
+    "wallet"
+  ],
+  "author": "Vultisig",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/vultisig/vultisig-sdk.git",
+    "directory": "packages/rujira"
+  },
+  "bugs": {
+    "url": "https://github.com/vultisig/vultisig-sdk/issues"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/src/__tests__/live/README.md

@@ -0,0 +1,47 @@
+# Live Verification Tests
+
+Tests that query THORChain mainnet to verify SDK correctness against live data.
+
+## Running Live Tests
+
+```bash
+# Run all live tests
+LIVE_TESTS=1 yarn workspace @vultisig/rujira test
+
+# Run specific live test file
+LIVE_TESTS=1 yarn workspace @vultisig/rujira test src/__tests__/orderside-serialization.test.ts
+LIVE_TESTS=1 yarn workspace @vultisig/rujira test src/__tests__/outbound-fee.test.ts
+```
+
+## Test Files
+
+### `orderside-serialization.test.ts`
+- Verifies FIN contract OrderSide format (base/quote vs buy/sell)
+- Queries live FIN contracts to confirm book structure
+- **Audit Item:** H1
+
+### `outbound-fee.test.ts`
+- Verifies hardcoded fallback fees against THORNode
+- Checks all chain fees are within 3x tolerance
+- **Audit Item:** L2
+
+## When to Run
+
+1. **After updating hardcoded values** - Verify they match mainnet
+2. **Before releases** - Ensure no regression
+3. **Periodically** - Detect stale configurations
+
+## Adding New Live Tests
+
+Use the `describe.skipIf(!process.env.LIVE_TESTS)` pattern:
+
+```typescript
+describe.skipIf(!process.env.LIVE_TESTS)('Live Test Name', () => {
+  it('queries mainnet', async () => {
+    const response = await fetch('https://thornode.ninerealms.com/...');
+    // assertions
+  });
+});
+```
+
+This ensures tests are skipped in normal CI runs but can be enabled explicitly.