@xoxno/sdk-js 1.0.218 → 1.0.219

package/dist/sdk/stellar/__tests__/auth-policy.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sdk/stellar/__tests__/route-verify.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sdk/stellar/auth-policy.d.ts

@@ -0,0 +1,106 @@
+/**
+ * Pre-signing allowlist for the Soroban authorization tree of a PREPARED
+ * transaction.
+ *
+ * Simulation records every `require_auth` that code on the call stack makes
+ * for the caller — including one made by a rogue pool or token inside a swap
+ * hop, e.g. `any_token.transfer(caller, attacker, x)`. The wallet signature
+ * covers the whole tree, so whatever `prepareTransaction` returns is what the
+ * user authorizes. Each policy below is the set of sub-invocations the
+ * contracts legitimately request from the caller, with the source that proves
+ * it (paths are in the `rs-lending-xlm` repository):
+ *
+ * | Entrypoint | Caller sub-invocations | Source |
+ * |---|---|---|
+ * | controller `supply` | `asset.transfer(caller, pool, <= amount)` per asset | `contracts/controller/src/positions/supply.rs:118` |
+ * | controller `repay` | `asset.transfer(caller, pool, <= amount)` per asset | `contracts/controller/src/positions/debt.rs:144` |
+ * | controller `liquidate` | `asset.transfer(liquidator, pool, <= payment)` per asset | `contracts/controller/src/positions/liquidation/apply.rs:50` |
+ * | controller `multiply` | `asset.transfer(caller, controller, <= initial_payment)` when present | `contracts/controller/src/strategies/multiply.rs:169` |
+ * | controller `migrate_from_blend` | `blend_pool.submit(caller, controller, controller, [withdraw / withdraw_collateral / repay])`, at most twice | `contracts/controller/src/external/blend.rs:46-97` |
+ * | controller `borrow`, `withdraw`, `swap_debt`, `swap_collateral`, `repay_debt_with_collateral`, `flash_loan`, `flash_position`, any other | none | the controller funds these from its own custody (`strategies/legs.rs:50`, `strategies/flash_position.rs:285`) |
+ * | governance, any | none | proposer auth only |
+ * | router `execute_strategy` | `token_in.transfer(sender, router, <= total_in)` | `contracts/swap-aggregator/src/execute/mod.rs:81` |
+ */
+import { xdr } from '@stellar/stellar-sdk';
+import { type StellarNetwork } from './contracts.js';
+export type StellarAuthPolicyErrorCode = 'MALFORMED_TRANSACTION' | 'INVOCATION_CHANGED' | 'UNSUPPORTED_CONTRACT' | 'CALLER_MISMATCH' | 'DUPLICATE_ENTRY' | 'UNEXPECTED_ROOT' | 'UNEXPECTED_CALL' | 'NESTED_INVOCATION' | 'UNEXPECTED_TOKEN' | 'UNEXPECTED_SENDER' | 'UNEXPECTED_RECIPIENT' | 'AMOUNT_EXCEEDED';
+/** The invocation that broke the policy, in readable form. */
+export interface StellarAuthOffender {
+    contract: string;
+    fn: string;
+    args: string[];
+}
+/** Thrown when the authorization tree holds anything the policy does not allow. */
+export declare class StellarAuthPolicyError extends Error {
+    readonly code: StellarAuthPolicyErrorCode;
+    readonly offender?: StellarAuthOffender;
+    constructor(code: StellarAuthPolicyErrorCode, message: string, offender?: StellarAuthOffender);
+}
+/** Total the caller may send to `to` in `token` across all sub-invocations. */
+export interface StellarAuthTransferAllowance {
+    token: string;
+    to: string;
+    maxAmount: bigint;
+}
+/** A non-transfer sub-invocation the caller legitimately authorizes. */
+export interface StellarAuthCallAllowance {
+    contract: string;
+    fn: string;
+    maxCount: number;
+    /** Returns why `args` are not acceptable, or `undefined` when they are. */
+    reject: (args: xdr.ScVal[]) => string | undefined;
+}
+export interface StellarAuthPolicy {
+    caller: string;
+    root: {
+        contract: string;
+        fn: string;
+    };
+    transfers: StellarAuthTransferAllowance[];
+    calls?: StellarAuthCallAllowance[];
+}
+/**
+ * Enforce `policy` on the authorization entries of a prepared transaction.
+ * Entries that belong to other addresses are ignored. For the caller: at most
+ * one entry, the expected root, and only allowlisted leaf sub-invocations.
+ * @param sourceAccount - Account that source-account credentials stand for
+ * (the operation source, else the transaction source). When omitted, such
+ * entries are treated as the caller's.
+ * @throws StellarAuthPolicyError
+ */
+export declare function assertStellarAuthEntries(entries: readonly xdr.SorobanAuthorizationEntry[], policy: StellarAuthPolicy, sourceAccount?: string): void;
+/** Contract addresses a policy is derived against. */
+export interface StellarAuthDeployment {
+    lendingController: string;
+    lendingPool: string;
+    aggregatorRouter: string;
+    governance: string;
+}
+/**
+ * Derive the policy for one contract invocation from its own arguments. The
+ * arguments are what the application built from the user's intent, so the
+ * allowed transfers are bounded by exactly what the user asked to pay.
+ * @throws StellarAuthPolicyError for a contract outside `deployment`.
+ */
+export declare function stellarAuthPolicyForInvocation(caller: string, invocation: xdr.InvokeContractArgs, deployment: StellarAuthDeployment): StellarAuthPolicy;
+export interface StellarPreparedTxAuthOptions {
+    network: StellarNetwork;
+    /** The wallet address that will sign. */
+    caller: string;
+    /**
+     * The unsigned builder output that was sent to `prepareTransaction`. When
+     * given, the prepared invocation must be byte-identical to it.
+     */
+    builtXdr?: string;
+    /** Replaces the derived policy (other contracts, custom flash receivers). */
+    policy?: StellarAuthPolicy;
+    /** Overrides manifest addresses for a non-standard deployment. */
+    deployment?: Partial<StellarAuthDeployment>;
+}
+/**
+ * Check a prepared transaction (base64 XDR, as `prepareTransaction` returns
+ * it) before it is passed to a wallet. Takes XDR strings so no live SDK object
+ * crosses the consumer's bundle boundary. Never sign when this throws.
+ * @throws StellarAuthPolicyError | StellarRouteVerificationError
+ */
+export declare function assertStellarPreparedTxAuth(preparedXdr: string, opts: StellarPreparedTxAuthOptions): void;

package/dist/sdk/stellar/contracts.d.ts

@@ -20,6 +20,8 @@ export interface StellarDeployment {
     readonly aquariusApiUrl: string;
     readonly aquariusRouter: string;
     readonly lendingController: string;
+    /** The controller's single liquidity pool: the recipient of supply, repay and liquidation transfers. */
+    readonly lendingPool: string;
     readonly aggregatorRouter: string;
     readonly governance: string;
     readonly priceAggregator: string;
@@ -41,6 +43,7 @@ export declare const STELLAR_NETWORKS: {
         readonly aquariusApiUrl: "https://amm-api.aqua.network";
         readonly aquariusRouter: "CBQDHNBFBZYE4MKPWBSJOPIYLW4SFSXAXUTSXJN76GNKYVYPCKWC6QUK";
         readonly lendingController: "CAUCMIN5KSXEVZ7NMXR3LZATGD5EFIEUI5XWTFLYRO2R5OTXI22WE5JX";
+        readonly lendingPool: "CBXRNDQMAJFG4VUKMKFEMFS75UUXE2SPSNV4LEEFCSNBCN66PYRWBKXO";
         readonly aggregatorRouter: "CCVENFSVCBYDHVOACFZXMNNYVOZ3LKXPZYU5LUI4N7KTXOKRVYD7F3TR";
         readonly governance: "CC44PEQW7HSEPKAZ5ZRPH2JS5M5KVJXCUBLJ2ZX4E3WCDKMNFILHC2AD";
         readonly priceAggregator: "CBGUF2G2Q7HCVCWYISDXBHPVBGMYNXA7PG2VET66YBZX6IKOOV27NSMV";
@@ -56,6 +59,7 @@ export declare const STELLAR_NETWORKS: {
         readonly aquariusApiUrl: "https://amm-api-testnet.aqua.network";
         readonly aquariusRouter: "CBCFTQSPDBAIZ6R6PJQKSQWKNKWH2QIV3I4J72SHWBIK3ADRRAM5A6GD";
         readonly lendingController: "CCXRWJ6SIU2WPFEGLFGJVITPL57QAYIMIO6OAM2NBGNDQSSCK2FFV3F3";
+        readonly lendingPool: "CBSGF6QOQAMPFBEVSYPEQHSZRIHJ6RCGUPCRDMUX36DEKRWFAO2PZB5A";
         readonly aggregatorRouter: "CDNTWMWW2WGYTKIZTJYNGNVQQZI4KTC5BQRZ3275KESRX5T4O3AYECL5";
         readonly governance: "CDS33JDOYH3F3FL4QUQ6DV4WKHML2AKHF4LADTZ57FRUAEBTE7NMY5FQ";
         readonly priceAggregator: "CAALOOTIDXCX7D7FMQIBSSAJLPKOM3GMXS4UUSTDIG42JCRRJHOPUHOP";
@@ -74,6 +78,7 @@ export declare const stellarNetworks: {
         readonly aquariusApiUrl: "https://amm-api.aqua.network";
         readonly aquariusRouter: "CBQDHNBFBZYE4MKPWBSJOPIYLW4SFSXAXUTSXJN76GNKYVYPCKWC6QUK";
         readonly lendingController: "CAUCMIN5KSXEVZ7NMXR3LZATGD5EFIEUI5XWTFLYRO2R5OTXI22WE5JX";
+        readonly lendingPool: "CBXRNDQMAJFG4VUKMKFEMFS75UUXE2SPSNV4LEEFCSNBCN66PYRWBKXO";
         readonly aggregatorRouter: "CCVENFSVCBYDHVOACFZXMNNYVOZ3LKXPZYU5LUI4N7KTXOKRVYD7F3TR";
         readonly governance: "CC44PEQW7HSEPKAZ5ZRPH2JS5M5KVJXCUBLJ2ZX4E3WCDKMNFILHC2AD";
         readonly priceAggregator: "CBGUF2G2Q7HCVCWYISDXBHPVBGMYNXA7PG2VET66YBZX6IKOOV27NSMV";
@@ -89,6 +94,7 @@ export declare const stellarNetworks: {
         readonly aquariusApiUrl: "https://amm-api-testnet.aqua.network";
         readonly aquariusRouter: "CBCFTQSPDBAIZ6R6PJQKSQWKNKWH2QIV3I4J72SHWBIK3ADRRAM5A6GD";
         readonly lendingController: "CCXRWJ6SIU2WPFEGLFGJVITPL57QAYIMIO6OAM2NBGNDQSSCK2FFV3F3";
+        readonly lendingPool: "CBSGF6QOQAMPFBEVSYPEQHSZRIHJ6RCGUPCRDMUX36DEKRWFAO2PZB5A";
         readonly aggregatorRouter: "CDNTWMWW2WGYTKIZTJYNGNVQQZI4KTC5BQRZ3275KESRX5T4O3AYECL5";
         readonly governance: "CDS33JDOYH3F3FL4QUQ6DV4WKHML2AKHF4LADTZ57FRUAEBTE7NMY5FQ";
         readonly priceAggregator: "CAALOOTIDXCX7D7FMQIBSSAJLPKOM3GMXS4UUSTDIG42JCRRJHOPUHOP";