@ar.io/sdk 4.0.0-solana.17 → 4.0.0-solana.19

package/lib/esm/solana/escrow.js

@@ -274,10 +274,36 @@ export class ANTEscrow {
         }
     }
 }
+/**
+ * Forward clock-skew buffer (seconds) added to `vault_end_timestamp` before
+ * the SDK considers a vault claimable. The SDK reads wall-clock time
+ * (`Date.now()`) while the on-chain gate reads Solana cluster time, and
+ * the two can disagree by several seconds. The buffer biases every skew
+ * race into the *friendly* direction: the SDK rejects when the chain
+ * would actually accept (user retries 30s later, succeeds), never the
+ * reverse (user submits a doomed tx and sees the raw on-chain error).
+ *
+ * 30s is conservative — Solana cluster clock typically drifts <2s vs
+ * wall clock — but matches the order of magnitude of the previously-used
+ * `60s` introspection tolerance in the removed `vault_introspect` module.
+ */
+export const CLOCK_SKEW_TOLERANCE_SECONDS = 30n;
+/**
+ * Returns `true` when a vault escrow is past its unlock timestamp by at
+ * least {@link CLOCK_SKEW_TOLERANCE_SECONDS}. Non-throwing companion to
+ * {@link assertVaultClaimable} for UI gating (e.g. enabling/disabling a
+ * Submit button without showing an error).
+ */
+export function isVaultClaimable(escrow) {
+    const nowSeconds = BigInt(Math.floor(Date.now() / 1000));
+    return nowSeconds >= escrow.vaultEndTimestamp + CLOCK_SKEW_TOLERANCE_SECONDS;
+}
 /**
  * Pre-flight the on-chain `VaultStillLocked` gate (ADR-022): refuse to build
- * a claim tx while the vault is still locked. Surfaces the unlock timestamp
- * so callers / UIs can show "claimable after <date>" instead of a doomed tx.
+ * a claim tx while the vault is still locked, with a small forward
+ * {@link CLOCK_SKEW_TOLERANCE_SECONDS} buffer so wall/cluster clock skew
+ * biases into the friendly direction. Surfaces the unlock timestamp so
+ * callers / UIs can show "claimable after <date>" instead of a doomed tx.
  *
  * Exported for unit-testability; not part of the public SDK surface — call the
  * high-level `claimVaultArweave` / `claimVaultEthereum` instead, which invoke
@@ -286,14 +312,15 @@ export class ANTEscrow {
  * @internal
  */
 export function assertVaultClaimable(escrow) {
-    const nowSeconds = BigInt(Math.floor(Date.now() / 1000));
-    if (escrow.vaultEndTimestamp > nowSeconds) {
+    if (!isVaultClaimable(escrow)) {
         const unlockIso = new Date(Number(escrow.vaultEndTimestamp) * 1000).toISOString();
         throw new Error(`Vault escrow is still locked until ${unlockIso} ` +
-            `(vault_end_timestamp=${escrow.vaultEndTimestamp}). ` +
-            `Active (still-locked) vault claims are not supported (ADR-022 / ` +
-            `VaultStillLocked) — wait until after the unlock timestamp, then ` +
-            `claim again to receive the tokens liquid.`);
+            `(vault_end_timestamp=${escrow.vaultEndTimestamp}; ` +
+            `the SDK adds a ${CLOCK_SKEW_TOLERANCE_SECONDS}s clock-skew buffer ` +
+            `before allowing a claim). Active (still-locked) vault claims are ` +
+            `rejected on-chain with VaultStillLocked (ADR-022) — wait until ` +
+            `after the unlock timestamp + buffer, then claim again to receive ` +
+            `the tokens liquid.`);
     }
 }
 /** Map the Codama-generated `EscrowToken` raw decoded type to our public

package/lib/esm/version.js

@@ -14,4 +14,4 @@
  * limitations under the License.
  */
 // AUTOMATICALLY GENERATED FILE - DO NOT TOUCH
-export const version = '4.0.0-solana.17';
+export const version = '4.0.0-solana.19';

package/lib/types/solana/escrow.d.ts

@@ -16,15 +16,13 @@
  * Borsh codec, and account-meta wiring derived from the on-chain IDL.
  */
 import { type Address, type Commitment, type Instruction, type TransactionSigner } from '@solana/kit';
+import { type EscrowAnt, type EscrowToken } from '@ar.io/solana-contracts/ant-escrow';
 import type { ILogger } from '../common/logger.js';
 import type { SolanaRpc, SolanaRpcSubscriptions } from './types.js';
 export type EscrowProtocol = 'arweave' | 'ethereum';
 export interface EscrowAntState {
-    version: {
-        major: number;
-        minor: number;
-        patch: number;
-    };
+    /** On-chain schema version, as decoded by the generated client. */
+    version: EscrowAnt['version'];
     bump: number;
     depositor: Address;
     antMint: Address;
@@ -172,11 +170,8 @@ export declare class ANTEscrow {
 }
 export type EscrowAssetType = 'token' | 'vault';
 export interface EscrowTokenState {
-    version: {
-        major: number;
-        minor: number;
-        patch: number;
-    };
+    /** On-chain schema version, as decoded by the generated client. */
+    version: EscrowToken['version'];
     bump: number;
     depositor: Address;
     assetType: EscrowAssetType;
@@ -190,10 +185,33 @@ export interface EscrowTokenState {
     vaultEndTimestamp: bigint;
     vaultRevocable: boolean;
 }
+/**
+ * Forward clock-skew buffer (seconds) added to `vault_end_timestamp` before
+ * the SDK considers a vault claimable. The SDK reads wall-clock time
+ * (`Date.now()`) while the on-chain gate reads Solana cluster time, and
+ * the two can disagree by several seconds. The buffer biases every skew
+ * race into the *friendly* direction: the SDK rejects when the chain
+ * would actually accept (user retries 30s later, succeeds), never the
+ * reverse (user submits a doomed tx and sees the raw on-chain error).
+ *
+ * 30s is conservative — Solana cluster clock typically drifts <2s vs
+ * wall clock — but matches the order of magnitude of the previously-used
+ * `60s` introspection tolerance in the removed `vault_introspect` module.
+ */
+export declare const CLOCK_SKEW_TOLERANCE_SECONDS = 30n;
+/**
+ * Returns `true` when a vault escrow is past its unlock timestamp by at
+ * least {@link CLOCK_SKEW_TOLERANCE_SECONDS}. Non-throwing companion to
+ * {@link assertVaultClaimable} for UI gating (e.g. enabling/disabling a
+ * Submit button without showing an error).
+ */
+export declare function isVaultClaimable(escrow: EscrowTokenState): boolean;
 /**
  * Pre-flight the on-chain `VaultStillLocked` gate (ADR-022): refuse to build
- * a claim tx while the vault is still locked. Surfaces the unlock timestamp
- * so callers / UIs can show "claimable after <date>" instead of a doomed tx.
+ * a claim tx while the vault is still locked, with a small forward
+ * {@link CLOCK_SKEW_TOLERANCE_SECONDS} buffer so wall/cluster clock skew
+ * biases into the friendly direction. Surfaces the unlock timestamp so
+ * callers / UIs can show "claimable after <date>" instead of a doomed tx.
  *
  * Exported for unit-testability; not part of the public SDK surface — call the
  * high-level `claimVaultArweave` / `claimVaultEthereum` instead, which invoke

package/lib/types/version.d.ts

@@ -13,4 +13,4 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-export declare const version = "4.0.0-solana.16";
+export declare const version = "4.0.0-solana.18";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ar.io/sdk",
-  "version": "4.0.0-solana.17",
+  "version": "4.0.0-solana.19",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ar-io/ar-io-sdk.git"