tapimo 0.13.0 → 0.14.0

package/src/internal/funding/providers/stargate.ts

@@ -1,16 +1,34 @@
-import { AbiFunction, Address, Hex, RpcTransport } from 'ox'
-import { createClient, custom, fallback, publicActions } from 'viem'
+import { AbiEvent, AbiFunction, Address, Hash, Hex } from 'ox'
+import {
+  BlockNotFoundError,
+  parseEventLogs,
+  publicActions,
+  TransactionReceiptNotFoundError,
+} from 'viem'
 import * as z from 'zod/mini'
 
+import * as Viem from '../../Viem.js'
 import * as Action from '../Action.js'
 import type * as Catalog from '../Catalog.js'
+import * as Chain from '../Chain.js'
 import * as FundingProvider from '../Provider.js'
 
 const approve = AbiFunction.from('function approve(address spender, uint256 amount)')
 const defaultFetch: FundingProvider.Fetch = (input, init) => globalThis.fetch(input, init)
 const destinationChainId = 'eip155:4217'
 const destinationEid = 30_410
+const destinationPool = '0x8c76e2f6c5ceda9aa7772e7eff30280226c44392'
 const destinationToken = '0x20C000000000000000000000b9537d11c60E8b50'
+const layerZeroEndpoint = '0x1a44076050125825900e736c501f859c50fE728c'
+const oftReceived = AbiEvent.from(
+  'event OFTReceived(bytes32 indexed guid, uint32 srcEid, address indexed toAddress, uint256 amountReceivedLD)',
+)
+const oftSent = AbiEvent.from(
+  'event OFTSent(bytes32 indexed guid, uint32 dstEid, address indexed fromAddress, uint256 amountSentLD, uint256 amountReceivedLD)',
+)
+const packetSent = AbiEvent.from(
+  'event PacketSent(bytes encodedPayload, bytes options, address sendLibrary)',
+)
 const quoteOft = AbiFunction.from(
   'function quoteOFT((uint32 dstEid, bytes32 to, uint256 amountLD, uint256 minAmountLD, bytes extraOptions, bytes composeMsg, bytes oftCmd) sendParam) view returns ((uint256 minAmountLD, uint256 maxAmountLD) limit, (int256 feeAmountLD, string description)[] oftFeeDetails, (uint256 amountSentLD, uint256 amountReceivedLD) receipt)',
 )
@@ -21,21 +39,48 @@ const sendToken = AbiFunction.from(
   'function sendToken((uint32 dstEid, bytes32 to, uint256 amountLD, uint256 minAmountLD, bytes extraOptions, bytes composeMsg, bytes oftCmd) sendParam, (uint256 nativeFee, uint256 lzTokenFee) fee, address refundAddress) payable returns ((bytes32 guid, uint64 nonce, (uint256 nativeFee, uint256 lzTokenFee) fee) msgReceipt, (uint256 amountSentLD, uint256 amountReceivedLD) oftReceipt, (uint72 ticketId, bytes passengerBytes) ticket)',
 )
 const quoteTtlMs = 60_000
+const maximumLogBlockRange = 100_000n
+const sourceEids = {
+  'eip155:1': 30_101,
+  'eip155:8453': 30_184,
+} as const
+const transferEvent = AbiEvent.from(
+  'event Transfer(address indexed from, address indexed to, uint256 value)',
+)
 const zeroAddress = '0x0000000000000000000000000000000000000000'
 
-const configuration = z
-  .strictObject({
-    poolAddress: z
-      .string()
-      .check(
-        z.regex(/^0x[0-9a-fA-F]{40}$/),
-        z.describe('Stargate pool contract on the source chain.'),
+/** Stargate provider schemas. */
+export namespace schema {
+  /** Configuration captured from one selected Stargate route. */
+  export const Configuration = z
+    .strictObject({
+      destinationPoolAddress: z.optional(
+        z
+          .string()
+          .check(
+            z.regex(/^0x[0-9a-fA-F]{40}$/),
+            z.describe('Stargate pool contract on the Tempo destination chain.'),
+          ),
       ),
-  })
-  .check(z.describe('Stargate configuration for one funding route.'))
+      poolAddress: z
+        .string()
+        .check(
+          z.regex(/^0x[0-9a-fA-F]{40}$/),
+          z.describe('Stargate pool contract on the source chain.'),
+        ),
+      sourceEid: z.optional(
+        z
+          .number()
+          .check(z.int(), z.positive(), z.describe('LayerZero endpoint ID for the source chain.')),
+      ),
+    })
+    .check(z.describe('Stargate configuration for one funding route.'))
+}
 
 type Deployment = {
+  destinationPool: Address.Address
   pool: Address.Address
+  sourceEid: number
   sourceToken: Address.Address
 }
 
@@ -72,7 +117,11 @@ export function stargate(options: stargate.Options = {}) {
         amount: candidate.sourceAmount.amount,
         recipient: zeroAddress,
       })
-      const [limit, feeDetails, receipt] = await client({ fetch, route, signal }).readContract({
+      const [limit, feeDetails, receipt] = await rpcClient({
+        fetch,
+        signal,
+        urls: route.source.chain.rpcUrls,
+      }).readContract({
         abi: [quoteOft],
         address: deployment.pool,
         args: [sendParam],
@@ -107,8 +156,8 @@ export function stargate(options: stargate.Options = {}) {
       })
       if (!deployment) throw new FundingProvider.ProviderUnavailableError()
       const sendParam = createSendParam({ amount: candidate.sourceAmount.amount, recipient })
-      const rpc = client({ fetch, route: candidate.route, signal })
-      const [[limit, feeDetails, receipt], messagingFee] = await Promise.all([
+      const rpc = rpcClient({ fetch, signal, urls: candidate.route.source.chain.rpcUrls })
+      const [[limit, feeDetails, receipt], messagingFee, destinationBlock] = await Promise.all([
         rpc.readContract({
           abi: [quoteOft],
           address: deployment.pool,
@@ -122,6 +171,11 @@ export function stargate(options: stargate.Options = {}) {
           args: [sendParam, false],
           functionName: 'quoteSend',
         }),
+        rpcClient({
+          fetch,
+          signal,
+          urls: candidate.route.destination.chain.rpcUrls,
+        }).getBlock({ blockTag: 'finalized', includeTransactions: false }),
       ])
       if (!isExactQuote({ amount: candidate.sourceAmount.amount, feeDetails, limit, receipt }))
         throw new FundingProvider.ProviderUnavailableError()
@@ -172,6 +226,10 @@ export function stargate(options: stargate.Options = {}) {
                   token: nativeToken(candidate.sourceChain.id),
                 },
               ],
+        providerState: {
+          destinationBlockNumber: destinationBlock.number.toString(),
+          routeConfiguration: candidate.configuration,
+        },
         quality: quality(),
         sampledAt: sampledAt.toISOString(),
       }
@@ -190,6 +248,62 @@ export function stargate(options: stargate.Options = {}) {
         }),
       }
     },
+    async verifySourceTransaction(
+      {
+        destinationChain,
+        providerState,
+        routeConfiguration,
+        sourceChain,
+        transactionHash,
+        transfer,
+      },
+      signal,
+    ) {
+      if (transfer.method !== 'transaction' || transfer.mode !== 'exactSource' || !transfer.sender)
+        return { type: 'invalid' }
+      const configuration = providerState?.['routeConfiguration'] ?? routeConfiguration
+      const evidence = await verifySourceTransaction({
+        configuration,
+        destinationTokenAddress: transfer.destinationToken.address,
+        fetch,
+        recipient: transfer.recipient,
+        sender: transfer.sender,
+        signal,
+        sourceAmount: transfer.sourceAmount.baseUnits,
+        sourceChain,
+        sourceTokenAddress: transfer.sourceToken.address,
+        transactionHash,
+        validAfter: transfer.quote.sampledAt,
+      })
+      if (evidence.type === 'invalid') return evidence
+      if (evidence.type !== 'verified') return { type: 'pending' }
+      const destinationBlockNumber =
+        typeof providerState?.['destinationBlockNumber'] === 'string' &&
+        /^\d+$/.test(providerState['destinationBlockNumber'])
+          ? providerState['destinationBlockNumber']
+          : await blockNumberBefore({
+              chain: destinationChain,
+              fetch,
+              signal,
+              timestamp: transfer.quote.sampledAt,
+            })
+      return {
+        providerState: {
+          ...providerState,
+          destinationBlockNumber,
+          routeConfiguration: configuration,
+          stargate: {
+            guid: evidence.guid,
+            sourceBlock: {
+              hash: evidence.sourceBlock.hash,
+              number: evidence.sourceBlock.number.toString(),
+            },
+            sourceEid: evidence.sourceEid,
+          },
+        },
+        type: 'verified',
+      }
+    },
   })
 }
 
@@ -218,32 +332,25 @@ export function validateAction(options: validateAction.Options): readonly Action
     const [approval, execution] = action.calls
     if (
       !Address.isEqual(approval!.to as Address.Address, deployment.sourceToken) ||
-      BigInt(approval!.value) !== 0n ||
-      !Address.isEqual(execution!.to as Address.Address, deployment.pool)
+      BigInt(approval!.value) !== 0n
     )
       throw new FundingProvider.ProviderPayloadError()
 
     const [spender, approvalAmount] = AbiFunction.decodeData(approve, approval!.data as Hex.Hex)
-    const [sendParam, messagingFee, refundAddress] = AbiFunction.decodeData(
-      sendToken,
-      execution!.data as Hex.Hex,
-    )
-    const nativeValue = BigInt(execution!.value)
     if (
       !Address.isEqual(spender, deployment.pool) ||
-      approvalAmount !== BigInt(options.sourceAmount) ||
-      sendParam.amountLD !== BigInt(options.sourceAmount) ||
-      sendParam.composeMsg !== '0x' ||
-      sendParam.dstEid !== destinationEid ||
-      sendParam.extraOptions !== '0x' ||
-      sendParam.minAmountLD !== BigInt(options.sourceAmount) ||
-      sendParam.oftCmd !== '0x' ||
-      !Hex.isEqual(sendParam.to, recipientBytes32(options.recipient)) ||
-      messagingFee.lzTokenFee !== 0n ||
-      messagingFee.nativeFee !== nativeValue ||
-      !Address.isEqual(refundAddress, options.sender as Address.Address)
+      approvalAmount !== BigInt(options.sourceAmount)
     )
       throw new FundingProvider.ProviderPayloadError()
+    validateSend({
+      data: execution!.data as Hex.Hex,
+      nativeValue: BigInt(execution!.value),
+      pool: deployment.pool,
+      recipient: options.recipient,
+      sender: options.sender,
+      sourceAmount: options.sourceAmount,
+      to: execution!.to as Address.Address,
+    })
     return [{ to: execution!.to, value: execution!.value }]
   } catch (cause) {
     if (cause instanceof FundingProvider.ProviderPayloadError) throw cause
@@ -273,28 +380,331 @@ export declare namespace validateAction {
   }
 }
 
-function client(options: client.Options) {
-  if (options.route.source.chain.rpcUrls.length === 0)
+/** Verifies a submitted Stargate source transaction against stored transfer terms. */
+export async function verifySourceTransaction(
+  options: verifySourceTransaction.Options,
+): Promise<verifySourceTransaction.Result> {
+  const deployment = resolveDeployment({
+    configuration: options.configuration,
+    destinationChainId,
+    destinationTokenAddress: options.destinationTokenAddress,
+    sourceChainId: options.sourceChain.id,
+    sourceTokenAddress: options.sourceTokenAddress,
+  })
+  if (
+    !deployment ||
+    options.sourceChain.kind !== 'evm' ||
+    !Hash.validate(options.transactionHash) ||
+    !Address.validate(options.recipient, { strict: false }) ||
+    !Address.validate(options.sender, { strict: false })
+  )
+    return { type: 'invalid' }
+
+  const rpc = rpcClient({
+    fetch: options.fetch ?? defaultFetch,
+    signal: options.signal,
+    urls: options.sourceChain.rpcUrls,
+  })
+  const hash = options.transactionHash as Hex.Hex
+  const [chainId, receipt] = await Promise.all([
+    rpc.getChainId(),
+    rpc.getTransactionReceipt({ hash }).catch((cause) => {
+      if (cause instanceof TransactionReceiptNotFoundError) return undefined
+      throw cause
+    }),
+  ])
+  if (chainId !== Number(Chain.eip155Id(options.sourceChain))) return { type: 'invalid' }
+  const block =
+    !receipt || receipt.blockNumber === null
+      ? undefined
+      : await rpc
+          .getBlock({ blockNumber: receipt.blockNumber, includeTransactions: false })
+          .catch((cause) => {
+            if (cause instanceof BlockNotFoundError) return undefined
+            throw cause
+          })
+  if (
+    !receipt ||
+    receipt.blockNumber === null ||
+    !block ||
+    !Hex.isEqual(block.hash, receipt.blockHash)
+  ) {
+    if (!options.sourceBlock) return { type: 'pending' }
+    const finalized = await rpc.getBlock({ blockTag: 'finalized', includeTransactions: false })
+    if (finalized.number < options.sourceBlock.number) return { type: 'pending' }
+    const canonical = await rpc
+      .getBlock({ blockNumber: options.sourceBlock.number, includeTransactions: false })
+      .catch((cause) => {
+        if (cause instanceof BlockNotFoundError) return undefined
+        throw cause
+      })
+    if (!canonical || Hex.isEqual(canonical.hash, options.sourceBlock.hash))
+      return { type: 'pending' }
+    return { type: 'reorged' }
+  }
+  if (receipt.status !== 'success') return { type: 'invalid' }
+  const validAfter = Math.floor(Date.parse(options.validAfter) / 1_000)
+  if (!Number.isSafeInteger(validAfter) || block.timestamp < BigInt(validAfter))
+    return { type: 'invalid' }
+
+  const amount = BigInt(options.sourceAmount)
+  const sourceEvents = parseEventLogs({ abi: [oftSent], logs: receipt.logs, strict: true }).filter(
+    ({ address, args }) =>
+      Address.isEqual(address, deployment.pool) &&
+      args.dstEid === destinationEid &&
+      Address.isEqual(args.fromAddress, options.sender as Address.Address) &&
+      args.amountSentLD === amount &&
+      args.amountReceivedLD === amount,
+  )
+  const transfers = parseEventLogs({
+    abi: [transferEvent],
+    logs: receipt.logs,
+    strict: true,
+  }).filter(
+    ({ address, args }) =>
+      Address.isEqual(address, deployment.sourceToken) &&
+      Address.isEqual(args.from, options.sender as Address.Address) &&
+      Address.isEqual(args.to, deployment.pool) &&
+      args.value === amount,
+  )
+  if (sourceEvents.length !== 1 || transfers.length !== 1) return { type: 'invalid' }
+  const guid = sourceEvents[0]!.args.guid
+  // PacketV1's 113-byte header is followed by Stargate's type, asset id, recipient, and amount.
+  const packets = parseEventLogs({ abi: [packetSent], logs: receipt.logs, strict: true }).filter(
+    ({ address, args }) => {
+      const packet = args.encodedPayload
+      return (
+        Address.isEqual(address, layerZeroEndpoint) &&
+        Hex.size(packet) === 156 &&
+        Hex.toNumber(Hex.slice(packet, 0, 1)) === 1 &&
+        Hex.toNumber(Hex.slice(packet, 9, 13)) === deployment.sourceEid &&
+        Hex.toNumber(Hex.slice(packet, 45, 49)) === destinationEid &&
+        Hex.isEqual(Hex.slice(packet, 81, 113), guid) &&
+        Hex.toNumber(Hex.slice(packet, 113, 114)) === 1 &&
+        Hex.isEqual(Hex.slice(packet, 116, 148), recipientBytes32(options.recipient)) &&
+        Hex.toBigInt(Hex.slice(packet, 148, 156)) === amount
+      )
+    },
+  )
+  if (packets.length !== 1) return { type: 'invalid' }
+  return {
+    guid,
+    sourceBlock: { hash: block.hash, number: block.number },
+    sourceEid: deployment.sourceEid,
+    type: 'verified',
+  }
+}
+
+export declare namespace verifySourceTransaction {
+  /** Canonical source block that originally contained the transaction. */
+  type Block = {
+    /** Source block hash. */
+    hash: Hex.Hex
+    /** Source block number. */
+    number: bigint
+  }
+
+  /** Stored terms and chain access needed to verify one source transaction. */
+  type Options = {
+    /** Stargate configuration for the selected route. */
+    configuration: unknown
+    /** Curated Tempo destination token. */
+    destinationTokenAddress: string
+    /** Fetch implementation override for chain RPC requests. */
+    fetch?: FundingProvider.Fetch | undefined
+    /** Tempo beneficiary encoded in the Stargate send. */
+    recipient: string
+    /** Source account and LayerZero refund recipient. */
+    sender: string
+    /** Optional request cancellation signal. */
+    signal?: AbortSignal | undefined
+    /** Exact source amount in base units. */
+    sourceAmount: string
+    /** Canonical block captured during initial verification. */
+    sourceBlock?: Block | undefined
+    /** Source chain and RPC endpoints. */
+    sourceChain: Chain.Chain
+    /** Curated source token. */
+    sourceTokenAddress: string
+    /** Submitted EVM transaction hash. */
+    transactionHash: string
+    /** Earliest accepted source block timestamp. */
+    validAfter: string
+  }
+
+  /** Source transaction verification outcome. */
+  type Result =
+    | { type: 'invalid' }
+    | { type: 'pending' }
+    | { type: 'reorged' }
+    | { guid: Hex.Hex; sourceBlock: Block; sourceEid: number; type: 'verified' }
+}
+
+/** Finds and verifies the finalized Stargate delivery directly on Tempo. */
+export async function verifyDestinationDelivery(
+  options: verifyDestinationDelivery.Options,
+): Promise<verifyDestinationDelivery.Result> {
+  const deployment = resolveDeployment({
+    configuration: options.configuration,
+    destinationChainId: options.destinationChain.id,
+    destinationTokenAddress: options.destinationTokenAddress,
+    sourceChainId: options.sourceChainId,
+    sourceTokenAddress: options.sourceTokenAddress,
+  })
+  if (
+    !deployment ||
+    options.destinationChain.kind !== 'evm' ||
+    !/^\d+$/.test(options.destinationBlockNumber) ||
+    !Hash.validate(options.guid) ||
+    !Address.validate(options.recipient, { strict: false })
+  )
+    return { type: 'invalid' }
+
+  const rpc = rpcClient({
+    fetch: options.fetch ?? defaultFetch,
+    urls: options.destinationChain.rpcUrls,
+  })
+  const [chainId, finalized] = await Promise.all([
+    rpc.getChainId(),
+    rpc.getBlock({ blockTag: 'finalized', includeTransactions: false }),
+  ])
+  if (chainId !== Number(Chain.eip155Id(options.destinationChain))) return { type: 'invalid' }
+  const amount = BigInt(options.destinationAmount)
+  const discovered = await (async () => {
+    for (
+      let fromBlock = BigInt(options.destinationBlockNumber);
+      fromBlock <= finalized.number;
+      fromBlock += maximumLogBlockRange
+    ) {
+      const toBlock = fromBlock + maximumLogBlockRange - 1n
+      const logs = await rpc.getLogs({
+        address: deployment.destinationPool,
+        args: { guid: options.guid, toAddress: options.recipient as Address.Address },
+        event: oftReceived,
+        fromBlock,
+        strict: true,
+        toBlock: toBlock > finalized.number ? finalized.number : toBlock,
+      })
+      const matches = logs.filter(
+        ({ args, transactionHash }) =>
+          transactionHash &&
+          args.srcEid === deployment.sourceEid &&
+          args.amountReceivedLD === amount,
+      )
+      if (logs.length !== matches.length || matches.length > 1) return { type: 'invalid' as const }
+      if (matches[0]?.transactionHash)
+        return { transactionHash: matches[0].transactionHash, type: 'found' as const }
+    }
+    return { type: 'pending' as const }
+  })()
+  if (discovered.type !== 'found') return discovered
+  const { transactionHash } = discovered
+  const receipt = await rpc.getTransactionReceipt({ hash: transactionHash }).catch((cause) => {
+    if (cause instanceof TransactionReceiptNotFoundError) return undefined
+    throw cause
+  })
+  if (!receipt || receipt.blockNumber === null) return { type: 'pending' }
+  if (receipt.status !== 'success' || receipt.blockNumber > finalized.number)
+    return { type: 'invalid' }
+
+  const transfers = parseEventLogs({
+    abi: [transferEvent],
+    logs: receipt.logs,
+    strict: true,
+  }).filter(
+    ({ address, args }) =>
+      Address.isEqual(address, destinationToken as Address.Address) &&
+      Address.isEqual(args.from, zeroAddress) &&
+      Address.isEqual(args.to, options.recipient as Address.Address) &&
+      args.value === amount,
+  )
+  if (transfers.length !== 1) return { type: 'invalid' }
+  return { transactionHash, type: 'verified' }
+}
+
+export declare namespace verifyDestinationDelivery {
+  /** Stored terms and chain access needed to discover and verify one delivery. */
+  type Options = {
+    /** Stargate configuration for the selected route. */
+    configuration: unknown
+    /** Exact destination amount in base units. */
+    destinationAmount: string
+    /** Tempo block captured before the source transaction was broadcast. */
+    destinationBlockNumber: string
+    /** Tempo chain and RPC endpoints. */
+    destinationChain: Chain.Chain
+    /** Curated Tempo destination token. */
+    destinationTokenAddress: string
+    /** Fetch implementation override for Tempo RPC requests. */
+    fetch?: FundingProvider.Fetch | undefined
+    /** GUID emitted by the verified source Stargate pool. */
+    guid: Hex.Hex
+    /** Tempo beneficiary. */
+    recipient: string
+    /** Source chain CAIP-2 id. */
+    sourceChainId: string
+    /** Curated source token. */
+    sourceTokenAddress: string
+  }
+
+  /** Destination delivery verification outcome. */
+  type Result =
+    | { type: 'invalid' }
+    | { type: 'pending' }
+    | { transactionHash: Hex.Hex; type: 'verified' }
+}
+
+function rpcClient(options: rpcClient.Options) {
+  if (options.urls.length === 0) throw new FundingProvider.ProviderConfigurationError()
+  return Viem.createEvmClient(options).extend(publicActions)
+}
+
+declare namespace rpcClient {
+  type Options = {
+    fetch: FundingProvider.Fetch
+    signal?: AbortSignal | undefined
+    urls: readonly string[]
+  }
+}
+
+async function blockNumberBefore(options: blockNumberBefore.Options) {
+  if (options.chain.kind !== 'evm') throw new FundingProvider.ProviderConfigurationError()
+  const timestamp = Date.parse(options.timestamp)
+  if (!Number.isFinite(timestamp)) throw new FundingProvider.ProviderPayloadError()
+  const rpc = rpcClient({
+    fetch: options.fetch,
+    signal: options.signal,
+    urls: options.chain.rpcUrls,
+  })
+  const [chainId, finalized] = await Promise.all([
+    rpc.getChainId(),
+    rpc.getBlock({ blockTag: 'finalized', includeTransactions: false }),
+  ])
+  if (chainId !== Number(Chain.eip155Id(options.chain)))
     throw new FundingProvider.ProviderConfigurationError()
-  return createClient({
-    transport: fallback(
-      options.route.source.chain.rpcUrls.map((url) =>
-        custom(
-          RpcTransport.fromHttp(url, {
-            fetchFn: (input, init) => options.fetch(input, { ...init, signal: options.signal }),
-          }),
-          { retryCount: 0 },
-        ),
-      ),
-    ),
-  }).extend(publicActions)
+
+  const target = BigInt(Math.floor(timestamp / 1_000) - 1)
+  let lower = 0n
+  let upper = finalized.number
+  while (lower < upper) {
+    const middle = (lower + upper + 1n) / 2n
+    const block = await rpc.getBlock({ blockNumber: middle, includeTransactions: false })
+    if (block.timestamp <= target) lower = middle
+    else upper = middle - 1n
+  }
+  return lower.toString()
 }
 
-declare namespace client {
+declare namespace blockNumberBefore {
   type Options = {
+    /** Destination chain whose block history is searched. */
+    chain: Chain.Chain
+    /** Fetch implementation used for RPC requests. */
     fetch: FundingProvider.Fetch
-    route: FundingProvider.QuoteCandidate['route']
-    signal: AbortSignal
+    /** Optional request cancellation signal. */
+    signal?: AbortSignal | undefined
+    /** Exclusive ISO 8601 timestamp upper bound. */
+    timestamp: string
   }
 }
 
@@ -365,10 +775,45 @@ function recipientBytes32(recipient: string) {
   return Hex.padLeft(recipient as Hex.Hex, 32)
 }
 
+function validateSend(options: validateSend.Options) {
+  const [sendParam, messagingFee, refundAddress] = AbiFunction.decodeData(sendToken, options.data)
+  const amount = BigInt(options.sourceAmount)
+  if (
+    !Address.isEqual(options.to, options.pool) ||
+    sendParam.amountLD !== amount ||
+    sendParam.composeMsg !== '0x' ||
+    sendParam.dstEid !== destinationEid ||
+    sendParam.extraOptions !== '0x' ||
+    sendParam.minAmountLD !== amount ||
+    sendParam.oftCmd !== '0x' ||
+    !Hex.isEqual(sendParam.to, recipientBytes32(options.recipient)) ||
+    messagingFee.lzTokenFee !== 0n ||
+    messagingFee.nativeFee !== options.nativeValue ||
+    !Address.isEqual(refundAddress, options.sender as Address.Address)
+  )
+    throw new FundingProvider.ProviderPayloadError()
+}
+
+declare namespace validateSend {
+  type Options = {
+    data: Hex.Hex
+    nativeValue: bigint
+    pool: Address.Address
+    recipient: string
+    sender: string
+    sourceAmount: string
+    to: Address.Address
+  }
+}
+
 function resolveDeployment(options: resolveDeployment.Options): Deployment | undefined {
-  const parsed = configuration.safeParse(options.configuration)
+  const parsed = schema.Configuration.safeParse(options.configuration)
+  const sourceEid =
+    parsed.success &&
+    (parsed.data.sourceEid ?? sourceEids[options.sourceChainId as keyof typeof sourceEids])
   if (
     !parsed.success ||
+    !sourceEid ||
     options.destinationChainId !== destinationChainId ||
     !options.sourceChainId.startsWith('eip155:') ||
     !Address.validate(options.destinationTokenAddress, { strict: false }) ||
@@ -377,14 +822,16 @@ function resolveDeployment(options: resolveDeployment.Options): Deployment | und
   )
     return undefined
   return {
+    destinationPool: Address.checksum(parsed.data.destinationPoolAddress ?? destinationPool),
     pool: Address.checksum(parsed.data.poolAddress),
+    sourceEid,
     sourceToken: Address.checksum(options.sourceTokenAddress),
   }
 }
 
 declare namespace resolveDeployment {
   type Options = {
-    configuration?: Catalog.Configuration | undefined
+    configuration: unknown
     destinationChainId: string
     destinationTokenAddress: string
     sourceChainId: string

package/src/internal/webhookDestinations/slack.ts

@@ -42,6 +42,7 @@ type Block =
 const friendlyName: Record<Webhooks.Envelope['type'], string> = {
   'block:created': ':link: Block created',
   'funding:deposit.updated': ':inbox_tray: Funding deposit updated',
+  'funding:transfer.updated': ':arrows_counterclockwise: Funding transfer updated',
   'log:emitted': ':label: Log emitted',
   ping: ':bell: Webhook test ping',
   'token:transfer': ':money_with_wings: Token transfer',
@@ -152,6 +153,7 @@ function renderEvent(
   if (type === 'log:emitted') return logLayout(data, base)
   if (type === 'block:created') return blockLayout(data, base)
   if (type === 'funding:deposit.updated') return fundingDepositLayout(data)
+  if (type === 'funding:transfer.updated') return fundingTransferLayout(data)
   return pingLayout()
 }
 
@@ -168,6 +170,19 @@ function fundingDepositLayout(data: Record<string, unknown>): Layout {
   }
 }
 
+function fundingTransferLayout(data: Record<string, unknown>): Layout {
+  const fields: Field[] = []
+  field(fields, 'Transfer', escape(str(data['id']) ?? 'unknown'))
+  field(fields, 'Status', escape(str(data['status']) ?? 'unknown'))
+  const recipient = str(data['recipient'])
+  if (recipient !== undefined) field(fields, 'Recipient', escape(recipient))
+  return {
+    fields,
+    header: friendlyName['funding:transfer.updated'],
+    text: `Funding transfer updated · ${str(data['status']) ?? 'unknown'}`,
+  }
+}
+
 function transferLayout(data: Record<string, unknown>, base: string | undefined): Layout {
   const amount = str(data['amount'])
   const token =