@arkade-os/sdk 0.4.56 → 0.4.57

package/dist/wallet/expo/background.d.cts

@@ -1,6 +1,6 @@
-import { W as WalletRepository, C as ContractRepository } from '../../ark-Cgsd9tMd.cjs';
-import { A as AsyncStorageTaskQueue } from '../../asyncStorageTaskQueue-C0ZsDE60.cjs';
-import { T as TaskProcessor } from '../../taskRunner-BG1PRFps.cjs';
+import { W as WalletRepository, C as ContractRepository } from '../../ark-CJgH_pmn.cjs';
+import { a as AsyncStorageTaskQueue } from '../../asyncStorageTaskQueue-BlrsUUX_.cjs';
+import { T as TaskProcessor } from '../../taskRunner-CnGSTaAJ.cjs';
 import '@scure/btc-signer/transaction.js';
 import '@scure/btc-signer/utils.js';
 import '@scure/btc-signer/psbt.js';

package/dist/wallet/expo/background.d.ts

@@ -1,6 +1,6 @@
-import { W as WalletRepository, C as ContractRepository } from '../../ark-Cgsd9tMd.js';
-import { A as AsyncStorageTaskQueue } from '../../asyncStorageTaskQueue-CXz4PRBW.js';
-import { T as TaskProcessor } from '../../taskRunner-C46NnRsY.js';
+import { W as WalletRepository, C as ContractRepository } from '../../ark-CJgH_pmn.js';
+import { a as AsyncStorageTaskQueue } from '../../asyncStorageTaskQueue-BeeZbf-Q.js';
+import { T as TaskProcessor } from '../../taskRunner-F7tWzsrC.js';
 import '@scure/btc-signer/transaction.js';
 import '@scure/btc-signer/utils.js';
 import '@scure/btc-signer/psbt.js';

package/dist/wallet/expo/background.js

@@ -1,9 +1,9 @@
-import { contractPollProcessor, createTaskDependencies, runTasks, CONTRACT_POLL_TASK_TYPE } from '../../chunk-5IMBONCK.js';
-import { ExpoIndexerProvider, ExpoArkProvider } from '../../chunk-VNDVUM2W.js';
-import { getRandomId } from '../../chunk-T22257HW.js';
-import '../../chunk-NN7BNNF5.js';
-import '../../chunk-OOPDT2WV.js';
-import '../../chunk-IFGN2GB2.js';
+import { contractPollProcessor, createTaskDependencies, runTasks, CONTRACT_POLL_TASK_TYPE } from '../../chunk-C4SVRVNM.js';
+import { ExpoIndexerProvider, ExpoArkProvider } from '../../chunk-CPS7V4A3.js';
+import { getRandomId } from '../../chunk-NIZPFPUM.js';
+import '../../chunk-ASUJNZ63.js';
+import '../../chunk-P6L2W5IL.js';
+import '../../chunk-PUNBWFIV.js';
 import '../../chunk-NSBPE2FW.js';
 import * as TaskManager from 'expo-task-manager';
 import * as BackgroundTask from 'expo-background-task';

package/dist/wallet/expo/index.cjs

@@ -1,10 +1,10 @@
 'use strict';
 
-var chunkIMVKQQHU_cjs = require('../../chunk-IMVKQQHU.cjs');
-var chunkENRRZFZ4_cjs = require('../../chunk-ENRRZFZ4.cjs');
-require('../../chunk-24YNIQSW.cjs');
-require('../../chunk-37XKN5DZ.cjs');
-var chunkCDWLZQQW_cjs = require('../../chunk-CDWLZQQW.cjs');
+var chunkA7TOVUYG_cjs = require('../../chunk-A7TOVUYG.cjs');
+var chunkKEG4AAKX_cjs = require('../../chunk-KEG4AAKX.cjs');
+require('../../chunk-YK6NP5KX.cjs');
+require('../../chunk-OWTKOMJZ.cjs');
+var chunkKUN5ZRMW_cjs = require('../../chunk-KUN5ZRMW.cjs');
 require('../../chunk-5BLDMQED.cjs');
 var base = require('@scure/base');
 
@@ -58,18 +58,18 @@ var ExpoWallet = class _ExpoWallet {
    */
   static async setup(config) {
     warnOnRemovedBackgroundFields(config.background);
-    const wallet = await chunkENRRZFZ4_cjs.Wallet.create(config);
-    const processors = config.background.processors ?? [chunkIMVKQQHU_cjs.contractPollProcessor];
+    const wallet = await chunkKEG4AAKX_cjs.Wallet.create(config);
+    const processors = config.background.processors ?? [chunkA7TOVUYG_cjs.contractPollProcessor];
     const deps = {
       walletRepository: wallet.walletRepository,
       contractRepository: wallet.contractRepository,
       indexerProvider: wallet.indexerProvider,
       arkProvider: wallet.arkProvider,
-      extendVtxo: (vtxo, contract) => chunkENRRZFZ4_cjs.extendVirtualCoinForContract(vtxo, contract)
+      extendVtxo: (vtxo, contract) => chunkKEG4AAKX_cjs.extendVirtualCoinForContract(vtxo, contract)
     };
     const { taskQueue } = config.background;
     if ("persistConfig" in taskQueue) {
-      const arkServerUrl = config.arkServerUrl || (wallet.arkProvider instanceof chunkCDWLZQQW_cjs.RestArkProvider ? wallet.arkProvider.serverUrl : void 0);
+      const arkServerUrl = config.arkServerUrl || (wallet.arkProvider instanceof chunkKUN5ZRMW_cjs.RestArkProvider ? wallet.arkProvider.serverUrl : void 0);
       if (arkServerUrl) {
         const timelock = wallet.offchainTapscript.options.csvTimelock;
         const bgConfig = {
@@ -100,7 +100,7 @@ var ExpoWallet = class _ExpoWallet {
   }
   async runForegroundPoll() {
     if (this.cleared) return;
-    await chunkIMVKQQHU_cjs.runTasks(this.taskQueue, this.processors, this.deps);
+    await chunkA7TOVUYG_cjs.runTasks(this.taskQueue, this.processors, this.deps);
     const results = await this.taskQueue.getResults();
     if (results.length > 0) {
       await this.taskQueue.acknowledgeResults(results.map((r) => r.id));
@@ -109,18 +109,18 @@ var ExpoWallet = class _ExpoWallet {
     await this.seedContractPollTask();
   }
   async seedContractPollTask() {
-    const existing = await this.taskQueue.getTasks(chunkIMVKQQHU_cjs.CONTRACT_POLL_TASK_TYPE);
+    const existing = await this.taskQueue.getTasks(chunkA7TOVUYG_cjs.CONTRACT_POLL_TASK_TYPE);
     if (existing.length > 0) return;
     const task = {
-      id: chunkENRRZFZ4_cjs.getRandomId(),
-      type: chunkIMVKQQHU_cjs.CONTRACT_POLL_TASK_TYPE,
+      id: chunkKEG4AAKX_cjs.getRandomId(),
+      type: chunkA7TOVUYG_cjs.CONTRACT_POLL_TASK_TYPE,
       data: {},
       createdAt: Date.now()
     };
     await this.taskQueue.addTask(task);
   }
   async removeContractPollTasks() {
-    const tasks = await this.taskQueue.getTasks(chunkIMVKQQHU_cjs.CONTRACT_POLL_TASK_TYPE);
+    const tasks = await this.taskQueue.getTasks(chunkA7TOVUYG_cjs.CONTRACT_POLL_TASK_TYPE);
     for (const task of tasks) {
       await this.taskQueue.removeTask(task.id);
     }

package/dist/wallet/expo/index.d.cts

@@ -1,10 +1,10 @@
-import { W as Wallet, P as ProviderConnectionState } from '../../wallet-1yWg75gN.cjs';
-import { I as IWallet, a as Identity, b as WalletConfig, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, E as ExtendedCoin, A as ArkTransaction, d as ActivityRegistry, e as Activity, f as IContractManager, g as IDelegateManager, S as SendBitcoinParams, h as SettleParams, i as SettlementEvent, R as Recipient, j as IAssetManager } from '../../ark-Cgsd9tMd.cjs';
-import { a as TaskQueue, T as TaskProcessor } from '../../taskRunner-BG1PRFps.cjs';
+import { W as Wallet, P as ProviderConnectionState } from '../../wallet-DvRIQBBY.cjs';
+import { I as IWallet, a as Identity, b as WalletConfig, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, E as ExtendedCoin, A as ArkTransaction, d as ActivityRegistry, e as Activity, f as IContractManager, g as IDelegateManager, S as SendBitcoinParams, h as SettleParams, i as SettlementEvent, R as Recipient, j as IAssetManager } from '../../ark-CJgH_pmn.cjs';
+import { c as TaskQueue, T as TaskProcessor } from '../../taskRunner-CnGSTaAJ.cjs';
 import '@scure/btc-signer';
 import '@scure/btc-signer/psbt.js';
 import '@scure/btc-signer/utils.js';
-import '../../delegate-xXT8O-Kn.cjs';
+import '../../delegate-Dk-OJVdf.cjs';
 import '@scure/btc-signer/transaction.js';
 
 /**

package/dist/wallet/expo/index.d.ts

@@ -1,10 +1,10 @@
-import { W as Wallet, P as ProviderConnectionState } from '../../wallet-DuCm55EC.js';
-import { I as IWallet, a as Identity, b as WalletConfig, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, E as ExtendedCoin, A as ArkTransaction, d as ActivityRegistry, e as Activity, f as IContractManager, g as IDelegateManager, S as SendBitcoinParams, h as SettleParams, i as SettlementEvent, R as Recipient, j as IAssetManager } from '../../ark-Cgsd9tMd.js';
-import { a as TaskQueue, T as TaskProcessor } from '../../taskRunner-C46NnRsY.js';
+import { W as Wallet, P as ProviderConnectionState } from '../../wallet-D6_S0n6B.js';
+import { I as IWallet, a as Identity, b as WalletConfig, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, E as ExtendedCoin, A as ArkTransaction, d as ActivityRegistry, e as Activity, f as IContractManager, g as IDelegateManager, S as SendBitcoinParams, h as SettleParams, i as SettlementEvent, R as Recipient, j as IAssetManager } from '../../ark-CJgH_pmn.js';
+import { c as TaskQueue, T as TaskProcessor } from '../../taskRunner-F7tWzsrC.js';
 import '@scure/btc-signer';
 import '@scure/btc-signer/psbt.js';
 import '@scure/btc-signer/utils.js';
-import '../../delegate-CZPXtd2F.js';
+import '../../delegate-DM3YECSY.js';
 import '@scure/btc-signer/transaction.js';
 
 /**

package/dist/wallet/expo/index.js

@@ -1,8 +1,8 @@
-import { contractPollProcessor, runTasks, CONTRACT_POLL_TASK_TYPE } from '../../chunk-5IMBONCK.js';
-import { Wallet, getRandomId, extendVirtualCoinForContract } from '../../chunk-T22257HW.js';
-import '../../chunk-NN7BNNF5.js';
-import '../../chunk-OOPDT2WV.js';
-import { RestArkProvider } from '../../chunk-IFGN2GB2.js';
+import { contractPollProcessor, runTasks, CONTRACT_POLL_TASK_TYPE } from '../../chunk-C4SVRVNM.js';
+import { Wallet, getRandomId, extendVirtualCoinForContract } from '../../chunk-NIZPFPUM.js';
+import '../../chunk-ASUJNZ63.js';
+import '../../chunk-P6L2W5IL.js';
+import { RestArkProvider } from '../../chunk-PUNBWFIV.js';
 import '../../chunk-NSBPE2FW.js';
 import { hex } from '@scure/base';
 

package/dist/{wallet-DuCm55EC.d.ts → wallet-D6_S0n6B.d.ts}

@@ -1,8 +1,8 @@
-import { a as Identity, J as SignerSet, K as BatchStartedEvent, L as TreeSigningStartedEvent, M as TxTree, P as TreeNoncesEvent, Q as BatchFinalizationEvent, U as BatchFinalizedEvent, X as BatchFailedEvent, Y as TreeTxEvent, Z as TreeSignatureEvent, i as SettlementEvent, b as WalletConfig, W as WalletRepository, C as ContractRepository, _ as DescriptorProvider, f as IContractManager, $ as IReadonlyWallet, a0 as ReadonlyIdentity, a1 as Network, a2 as OnchainProvider, o as IndexerProvider, a3 as DelegateProvider, a4 as ReadonlyWalletConfig, x as IntentRepository, B as VirtualTxRepository, a5 as ExitCaptureMode, a6 as ExitDataSource, p as RelativeTimelock, d as ActivityRegistry, a7 as IReadonlyAssetManager, a8 as ContractSyncState, n as ArkProvider, a9 as NetworkName, aa as ArkInfo, ab as ArkAddress, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, A as ArkTransaction, e as Activity, E as ExtendedCoin, ac as Coin, t as ExtendedVirtualCoin, ad as ContractManager, ae as ContractManagerConfig, I as IWallet, af as CSVMultisigTapscript, ag as SettlementConfig, j as IAssetManager, ah as VtxoManager, g as IDelegateManager, S as SendBitcoinParams, h as SettleParams, R as Recipient, ai as SignerSession, aj as SignedIntent, ak as Intent, al as TimeHeight } from './ark-Cgsd9tMd.js';
+import { a as Identity, p as RelativeTimelock, J as Network, K as CSVMultisigTapscript, L as SignerSet, M as BatchStartedEvent, P as TreeSigningStartedEvent, Q as TxTree, U as TreeNoncesEvent, X as BatchFinalizationEvent, Y as BatchFinalizedEvent, Z as BatchFailedEvent, _ as TreeTxEvent, $ as TreeSignatureEvent, i as SettlementEvent, b as WalletConfig, W as WalletRepository, C as ContractRepository, a0 as DescriptorProvider, f as IContractManager, a1 as IReadonlyWallet, a2 as ReadonlyIdentity, a3 as OnchainProvider, o as IndexerProvider, a4 as DelegateProvider, a5 as ReadonlyWalletConfig, x as IntentRepository, B as VirtualTxRepository, a6 as ExitCaptureMode, a7 as ExitDataSource, d as ActivityRegistry, a8 as IReadonlyAssetManager, a9 as ContractSyncState, n as ArkProvider, aa as NetworkName, ab as ArkInfo, ac as ArkAddress, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, A as ArkTransaction, e as Activity, E as ExtendedCoin, ad as Coin, t as ExtendedVirtualCoin, ae as ContractManager, af as ContractManagerConfig, I as IWallet, ag as SettlementConfig, j as IAssetManager, ah as VtxoManager, g as IDelegateManager, S as SendBitcoinParams, h as SettleParams, R as Recipient, ai as SignerSession, aj as SignedIntent, ak as Intent, al as TimeHeight } from './ark-CJgH_pmn.js';
 import { Transaction } from '@scure/btc-signer';
 import { TransactionOutput } from '@scure/btc-signer/psbt.js';
 import { Bytes } from '@scure/btc-signer/utils.js';
-import { D as DefaultVtxo, a as DelegateVtxo } from './delegate-CZPXtd2F.js';
+import { D as DefaultVtxo, a as DelegateVtxo } from './delegate-DM3YECSY.js';
 
 /**
  * Capability a wallet exposes so descriptor-blind consumers — Boltz swaps and
@@ -36,6 +36,101 @@ interface HDWalletCapable {
 /** Structural type guard for {@link HDWalletCapable}. */
 declare function isHDWalletCapable(value: unknown): value is HDWalletCapable;
 
+/** Wall-clock floor for `batchExpiry` outside regtest. */
+declare const DEFAULT_MIN_BATCH_EXPIRY_SECONDS = 86400n;
+/** Wall-clock floor for `batchExpiry` on regtest (~10 blocks). */
+declare const REGTEST_MIN_BATCH_EXPIRY_SECONDS = 6000n;
+/** Bounds applied to a server-supplied `BatchStartedEvent.batchExpiry`. */
+type BatchExpiryPolicy = {
+    /** Minimum wall-clock delay in seconds, after normalization. */
+    minSeconds: bigint;
+    /**
+     * Reject block-typed timelocks. Mirrors arkd, which allows a block-typed
+     * vtxo tree expiry only on regtest.
+     */
+    requireSeconds: boolean;
+    /** When advertised by the operator, `batchExpiry` must equal it exactly. */
+    advertisedVtxoTreeExpiry?: bigint;
+};
+/**
+ * Default policy for a network.
+ *
+ * Derive it from the locally held {@link Network} — pinned at wallet setup —
+ * rather than from a per-round server field, so the permissive regtest branch
+ * can't be selected by the operator at event time.
+ */
+declare function defaultBatchExpiryPolicy(network: Network): BatchExpiryPolicy;
+/** Resolve a policy for `network`, applying any caller overrides on top. */
+declare function resolveBatchExpiryPolicy(network: Network, overrides?: Partial<BatchExpiryPolicy>): BatchExpiryPolicy;
+/**
+ * Check a server-supplied batch expiry against `policy` and return the timelock
+ * to commit to.
+ *
+ * The sweep leaf of the shared batch output is derived from this value, so it
+ * is never reconstructible from anything else the server sends: validating the
+ * tree only proves it is consistent with whatever value was chosen. Callers
+ * must encode the returned timelock rather than re-deriving their own.
+ *
+ * @throws {ServerResponseMismatchError} if the value is out of policy.
+ */
+declare function assertValidBatchExpiry(batchExpiry: bigint, policy: BatchExpiryPolicy): RelativeTimelock;
+
+/** Wall-clock floor for the checkpoint exit delay outside regtest. Matches arkd's own default. */
+declare const DEFAULT_MIN_CHECKPOINT_EXIT_DELAY_SECONDS = 86400n;
+/**
+ * Wall-clock floor for the checkpoint exit delay on regtest (~2 blocks nominal).
+ *
+ * Deliberately lower than {@link REGTEST_MIN_BATCH_EXPIRY_SECONDS "../wallet/batchExpiry"} — this
+ * repo's own regtest envs run `ARKD_CHECKPOINT_EXIT_DELAY` as low as 5 blocks
+ * (`packages/boltz-swap/.env.regtest`), so the floor must clear that while still rejecting a
+ * 1-block attack.
+ */
+declare const REGTEST_MIN_CHECKPOINT_EXIT_DELAY_SECONDS = 1200n;
+/** Bounds applied to a server-supplied `ArkInfo.checkpointTapscript`. */
+type CheckpointExitDelayPolicy = {
+    /** Minimum wall-clock delay in seconds, after normalization. */
+    minSeconds: bigint;
+    /**
+     * Reject block-typed timelocks. Mirrors arkd, which allows a block-typed
+     * checkpoint exit delay only on regtest.
+     */
+    requireSeconds: boolean;
+    /**
+     * When set, the script's embedded pubkey must equal this x-only key.
+     *
+     * arkd always builds the checkpoint tapscript from its own `forfeitPubkey`
+     * (`internal/core/application/service.go`), so this should be the
+     * `forfeitPubkey` the caller already trusts — pinned wallet state where one
+     * exists, otherwise the same `ArkInfo` response's own `forfeitPubkey` field
+     * as a self-consistency check.
+     */
+    advertisedForfeitPubkey?: Bytes;
+};
+/**
+ * Default policy for a network.
+ *
+ * Derive it from the locally held {@link Network} — pinned at wallet setup —
+ * rather than from server data, so the permissive regtest branch can't be
+ * selected by the operator.
+ */
+declare function defaultCheckpointExitDelayPolicy(network: Network): CheckpointExitDelayPolicy;
+/** Resolve a policy for `network`, applying any caller overrides on top. */
+declare function resolveCheckpointExitDelayPolicy(network: Network, overrides?: Partial<CheckpointExitDelayPolicy>): CheckpointExitDelayPolicy;
+/**
+ * Decode and validate a server-supplied `checkpointTapscript` against `policy`.
+ *
+ * Every offchain send/claim builds its checkpoint outputs' server-claim leaf
+ * straight from this script — undecodable, sub-floor or wrong-pubkey values
+ * let the operator sweep an in-flight checkpoint before it settles. This is
+ * the sole gate: callers must use the returned script rather than decoding
+ * their own copy.
+ *
+ * @throws {ServerResponseMismatchError} if the script fails to decode, its
+ *   timelock is out of policy, or its pubkey does not match
+ *   `policy.advertisedForfeitPubkey` (when set).
+ */
+declare function assertValidServerUnrollScript(checkpointTapscript: string, policy: CheckpointExitDelayPolicy): CSVMultisigTapscript.Type;
+
 declare function getRandomId(): string;
 /**
  * What a recipient Arkade address must match. An address failing either check
@@ -1062,6 +1157,10 @@ declare class Wallet extends ReadonlyWallet implements IWallet, HDWalletCapable
     readonly arkProvider: ArkProvider;
     readonly forfeitOutputScript: Bytes;
     readonly forfeitPubkey: Bytes;
+    /** Overrides for the `batchExpiry` bounds; defaults derive from `network`. */
+    protected readonly batchExpiryPolicy?: Partial<BatchExpiryPolicy> | undefined;
+    /** Overrides for the checkpoint exit delay bounds; defaults derive from `network`. */
+    protected readonly checkpointExitDelayPolicy?: Partial<CheckpointExitDelayPolicy> | undefined;
     static MIN_FEE_RATE: number;
     readonly identity: Identity;
     private readonly _delegateManager?;
@@ -1305,7 +1404,11 @@ declare class Wallet extends ReadonlyWallet implements IWallet, HDWalletCapable
     readonly settlementConfig: SettlementConfig | false;
     protected constructor(identity: Identity, network: Network, onchainProvider: OnchainProvider, arkProvider: ArkProvider, indexerProvider: IndexerProvider, arkServerPublicKey: Bytes, offchainTapscript: DefaultVtxo.Script | DelegateVtxo.Script, boardingTapscript: DefaultVtxo.Script, serverUnrollScript: CSVMultisigTapscript.Type, forfeitOutputScript: Bytes, forfeitPubkey: Bytes, dustAmount: bigint, walletRepository: WalletRepository, contractRepository: ContractRepository, 
     /** @deprecated Use settlementConfig */
-    renewalConfig?: WalletConfig["renewalConfig"], delegateProvider?: DelegateProvider, watcherConfig?: WalletConfig["watcherConfig"], settlementConfig?: WalletConfig["settlementConfig"], walletContractTimelocks?: RelativeTimelock[], receiveRotator?: WalletReceiveRotator, descriptorProvider?: DescriptorProvider, lookAheadWindow?: number);
+    renewalConfig?: WalletConfig["renewalConfig"], delegateProvider?: DelegateProvider, watcherConfig?: WalletConfig["watcherConfig"], settlementConfig?: WalletConfig["settlementConfig"], walletContractTimelocks?: RelativeTimelock[], receiveRotator?: WalletReceiveRotator, descriptorProvider?: DescriptorProvider, lookAheadWindow?: number, 
+    /** Overrides for the `batchExpiry` bounds; defaults derive from `network`. */
+    batchExpiryPolicy?: Partial<BatchExpiryPolicy> | undefined, 
+    /** Overrides for the checkpoint exit delay bounds; defaults derive from `network`. */
+    checkpointExitDelayPolicy?: Partial<CheckpointExitDelayPolicy> | undefined);
     get assetManager(): IAssetManager;
     getVtxoManager(): Promise<VtxoManager>;
     dispose(): Promise<void>;
@@ -1583,4 +1686,4 @@ declare function selectVirtualCoins(coins: ExtendedVirtualCoin[], targetAmount:
  */
 declare function waitForIncomingFunds(wallet: Wallet): Promise<IncomingFunds>;
 
-export { ArkError as A, Batch as B, type HDWalletCapable as H, type IncomingFunds as I, type ProviderConnectionState as P, ReadonlyWallet as R, type ServerInfoSource as S, Wallet as W, type ReceiveRotatorFactory as a, type ReceiveRotatorBootOpts as b, type ReceiveRotatorBoot as c, ArkErrorName as d, type ArkadeCashClaimResult as e, ArkadeCashCreateError as f, type ArkadeCashUnclaimedReason as g, type ArkadeCashUnclaimedVtxo as h, type BoardingUtxoGroup as i, type ProviderKind as j, ProviderUnavailableError as k, ServerResponseMismatchError as l, getRandomId as m, isArkError as n, isHDWalletCapable as o, maybeArkError as p, selectVirtualCoins as s, waitForIncomingFunds as w };
+export { ArkError as A, type BatchExpiryPolicy as B, type CheckpointExitDelayPolicy as C, DEFAULT_MIN_BATCH_EXPIRY_SECONDS as D, selectVirtualCoins as E, waitForIncomingFunds as F, type HDWalletCapable as H, type IncomingFunds as I, type ProviderConnectionState as P, ReadonlyWallet as R, type ServerInfoSource as S, Wallet as W, type ReceiveRotatorFactory as a, type ReceiveRotatorBootOpts as b, type ReceiveRotatorBoot as c, Batch as d, ArkErrorName as e, type ArkadeCashClaimResult as f, ArkadeCashCreateError as g, type ArkadeCashUnclaimedReason as h, type ArkadeCashUnclaimedVtxo as i, type BoardingUtxoGroup as j, DEFAULT_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as k, type ProviderKind as l, ProviderUnavailableError as m, REGTEST_MIN_BATCH_EXPIRY_SECONDS as n, REGTEST_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as o, ServerResponseMismatchError as p, assertValidBatchExpiry as q, assertValidServerUnrollScript as r, defaultBatchExpiryPolicy as s, defaultCheckpointExitDelayPolicy as t, getRandomId as u, isArkError as v, isHDWalletCapable as w, maybeArkError as x, resolveBatchExpiryPolicy as y, resolveCheckpointExitDelayPolicy as z };

package/dist/{wallet-1yWg75gN.d.cts → wallet-DvRIQBBY.d.cts}

@@ -1,8 +1,8 @@
-import { a as Identity, J as SignerSet, K as BatchStartedEvent, L as TreeSigningStartedEvent, M as TxTree, P as TreeNoncesEvent, Q as BatchFinalizationEvent, U as BatchFinalizedEvent, X as BatchFailedEvent, Y as TreeTxEvent, Z as TreeSignatureEvent, i as SettlementEvent, b as WalletConfig, W as WalletRepository, C as ContractRepository, _ as DescriptorProvider, f as IContractManager, $ as IReadonlyWallet, a0 as ReadonlyIdentity, a1 as Network, a2 as OnchainProvider, o as IndexerProvider, a3 as DelegateProvider, a4 as ReadonlyWalletConfig, x as IntentRepository, B as VirtualTxRepository, a5 as ExitCaptureMode, a6 as ExitDataSource, p as RelativeTimelock, d as ActivityRegistry, a7 as IReadonlyAssetManager, a8 as ContractSyncState, n as ArkProvider, a9 as NetworkName, aa as ArkInfo, ab as ArkAddress, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, A as ArkTransaction, e as Activity, E as ExtendedCoin, ac as Coin, t as ExtendedVirtualCoin, ad as ContractManager, ae as ContractManagerConfig, I as IWallet, af as CSVMultisigTapscript, ag as SettlementConfig, j as IAssetManager, ah as VtxoManager, g as IDelegateManager, S as SendBitcoinParams, h as SettleParams, R as Recipient, ai as SignerSession, aj as SignedIntent, ak as Intent, al as TimeHeight } from './ark-Cgsd9tMd.cjs';
+import { a as Identity, p as RelativeTimelock, J as Network, K as CSVMultisigTapscript, L as SignerSet, M as BatchStartedEvent, P as TreeSigningStartedEvent, Q as TxTree, U as TreeNoncesEvent, X as BatchFinalizationEvent, Y as BatchFinalizedEvent, Z as BatchFailedEvent, _ as TreeTxEvent, $ as TreeSignatureEvent, i as SettlementEvent, b as WalletConfig, W as WalletRepository, C as ContractRepository, a0 as DescriptorProvider, f as IContractManager, a1 as IReadonlyWallet, a2 as ReadonlyIdentity, a3 as OnchainProvider, o as IndexerProvider, a4 as DelegateProvider, a5 as ReadonlyWalletConfig, x as IntentRepository, B as VirtualTxRepository, a6 as ExitCaptureMode, a7 as ExitDataSource, d as ActivityRegistry, a8 as IReadonlyAssetManager, a9 as ContractSyncState, n as ArkProvider, aa as NetworkName, ab as ArkInfo, ac as ArkAddress, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, A as ArkTransaction, e as Activity, E as ExtendedCoin, ad as Coin, t as ExtendedVirtualCoin, ae as ContractManager, af as ContractManagerConfig, I as IWallet, ag as SettlementConfig, j as IAssetManager, ah as VtxoManager, g as IDelegateManager, S as SendBitcoinParams, h as SettleParams, R as Recipient, ai as SignerSession, aj as SignedIntent, ak as Intent, al as TimeHeight } from './ark-CJgH_pmn.cjs';
 import { Transaction } from '@scure/btc-signer';
 import { TransactionOutput } from '@scure/btc-signer/psbt.js';
 import { Bytes } from '@scure/btc-signer/utils.js';
-import { D as DefaultVtxo, a as DelegateVtxo } from './delegate-xXT8O-Kn.cjs';
+import { D as DefaultVtxo, a as DelegateVtxo } from './delegate-Dk-OJVdf.cjs';
 
 /**
  * Capability a wallet exposes so descriptor-blind consumers — Boltz swaps and
@@ -36,6 +36,101 @@ interface HDWalletCapable {
 /** Structural type guard for {@link HDWalletCapable}. */
 declare function isHDWalletCapable(value: unknown): value is HDWalletCapable;
 
+/** Wall-clock floor for `batchExpiry` outside regtest. */
+declare const DEFAULT_MIN_BATCH_EXPIRY_SECONDS = 86400n;
+/** Wall-clock floor for `batchExpiry` on regtest (~10 blocks). */
+declare const REGTEST_MIN_BATCH_EXPIRY_SECONDS = 6000n;
+/** Bounds applied to a server-supplied `BatchStartedEvent.batchExpiry`. */
+type BatchExpiryPolicy = {
+    /** Minimum wall-clock delay in seconds, after normalization. */
+    minSeconds: bigint;
+    /**
+     * Reject block-typed timelocks. Mirrors arkd, which allows a block-typed
+     * vtxo tree expiry only on regtest.
+     */
+    requireSeconds: boolean;
+    /** When advertised by the operator, `batchExpiry` must equal it exactly. */
+    advertisedVtxoTreeExpiry?: bigint;
+};
+/**
+ * Default policy for a network.
+ *
+ * Derive it from the locally held {@link Network} — pinned at wallet setup —
+ * rather than from a per-round server field, so the permissive regtest branch
+ * can't be selected by the operator at event time.
+ */
+declare function defaultBatchExpiryPolicy(network: Network): BatchExpiryPolicy;
+/** Resolve a policy for `network`, applying any caller overrides on top. */
+declare function resolveBatchExpiryPolicy(network: Network, overrides?: Partial<BatchExpiryPolicy>): BatchExpiryPolicy;
+/**
+ * Check a server-supplied batch expiry against `policy` and return the timelock
+ * to commit to.
+ *
+ * The sweep leaf of the shared batch output is derived from this value, so it
+ * is never reconstructible from anything else the server sends: validating the
+ * tree only proves it is consistent with whatever value was chosen. Callers
+ * must encode the returned timelock rather than re-deriving their own.
+ *
+ * @throws {ServerResponseMismatchError} if the value is out of policy.
+ */
+declare function assertValidBatchExpiry(batchExpiry: bigint, policy: BatchExpiryPolicy): RelativeTimelock;
+
+/** Wall-clock floor for the checkpoint exit delay outside regtest. Matches arkd's own default. */
+declare const DEFAULT_MIN_CHECKPOINT_EXIT_DELAY_SECONDS = 86400n;
+/**
+ * Wall-clock floor for the checkpoint exit delay on regtest (~2 blocks nominal).
+ *
+ * Deliberately lower than {@link REGTEST_MIN_BATCH_EXPIRY_SECONDS "../wallet/batchExpiry"} — this
+ * repo's own regtest envs run `ARKD_CHECKPOINT_EXIT_DELAY` as low as 5 blocks
+ * (`packages/boltz-swap/.env.regtest`), so the floor must clear that while still rejecting a
+ * 1-block attack.
+ */
+declare const REGTEST_MIN_CHECKPOINT_EXIT_DELAY_SECONDS = 1200n;
+/** Bounds applied to a server-supplied `ArkInfo.checkpointTapscript`. */
+type CheckpointExitDelayPolicy = {
+    /** Minimum wall-clock delay in seconds, after normalization. */
+    minSeconds: bigint;
+    /**
+     * Reject block-typed timelocks. Mirrors arkd, which allows a block-typed
+     * checkpoint exit delay only on regtest.
+     */
+    requireSeconds: boolean;
+    /**
+     * When set, the script's embedded pubkey must equal this x-only key.
+     *
+     * arkd always builds the checkpoint tapscript from its own `forfeitPubkey`
+     * (`internal/core/application/service.go`), so this should be the
+     * `forfeitPubkey` the caller already trusts — pinned wallet state where one
+     * exists, otherwise the same `ArkInfo` response's own `forfeitPubkey` field
+     * as a self-consistency check.
+     */
+    advertisedForfeitPubkey?: Bytes;
+};
+/**
+ * Default policy for a network.
+ *
+ * Derive it from the locally held {@link Network} — pinned at wallet setup —
+ * rather than from server data, so the permissive regtest branch can't be
+ * selected by the operator.
+ */
+declare function defaultCheckpointExitDelayPolicy(network: Network): CheckpointExitDelayPolicy;
+/** Resolve a policy for `network`, applying any caller overrides on top. */
+declare function resolveCheckpointExitDelayPolicy(network: Network, overrides?: Partial<CheckpointExitDelayPolicy>): CheckpointExitDelayPolicy;
+/**
+ * Decode and validate a server-supplied `checkpointTapscript` against `policy`.
+ *
+ * Every offchain send/claim builds its checkpoint outputs' server-claim leaf
+ * straight from this script — undecodable, sub-floor or wrong-pubkey values
+ * let the operator sweep an in-flight checkpoint before it settles. This is
+ * the sole gate: callers must use the returned script rather than decoding
+ * their own copy.
+ *
+ * @throws {ServerResponseMismatchError} if the script fails to decode, its
+ *   timelock is out of policy, or its pubkey does not match
+ *   `policy.advertisedForfeitPubkey` (when set).
+ */
+declare function assertValidServerUnrollScript(checkpointTapscript: string, policy: CheckpointExitDelayPolicy): CSVMultisigTapscript.Type;
+
 declare function getRandomId(): string;
 /**
  * What a recipient Arkade address must match. An address failing either check
@@ -1062,6 +1157,10 @@ declare class Wallet extends ReadonlyWallet implements IWallet, HDWalletCapable
     readonly arkProvider: ArkProvider;
     readonly forfeitOutputScript: Bytes;
     readonly forfeitPubkey: Bytes;
+    /** Overrides for the `batchExpiry` bounds; defaults derive from `network`. */
+    protected readonly batchExpiryPolicy?: Partial<BatchExpiryPolicy> | undefined;
+    /** Overrides for the checkpoint exit delay bounds; defaults derive from `network`. */
+    protected readonly checkpointExitDelayPolicy?: Partial<CheckpointExitDelayPolicy> | undefined;
     static MIN_FEE_RATE: number;
     readonly identity: Identity;
     private readonly _delegateManager?;
@@ -1305,7 +1404,11 @@ declare class Wallet extends ReadonlyWallet implements IWallet, HDWalletCapable
     readonly settlementConfig: SettlementConfig | false;
     protected constructor(identity: Identity, network: Network, onchainProvider: OnchainProvider, arkProvider: ArkProvider, indexerProvider: IndexerProvider, arkServerPublicKey: Bytes, offchainTapscript: DefaultVtxo.Script | DelegateVtxo.Script, boardingTapscript: DefaultVtxo.Script, serverUnrollScript: CSVMultisigTapscript.Type, forfeitOutputScript: Bytes, forfeitPubkey: Bytes, dustAmount: bigint, walletRepository: WalletRepository, contractRepository: ContractRepository, 
     /** @deprecated Use settlementConfig */
-    renewalConfig?: WalletConfig["renewalConfig"], delegateProvider?: DelegateProvider, watcherConfig?: WalletConfig["watcherConfig"], settlementConfig?: WalletConfig["settlementConfig"], walletContractTimelocks?: RelativeTimelock[], receiveRotator?: WalletReceiveRotator, descriptorProvider?: DescriptorProvider, lookAheadWindow?: number);
+    renewalConfig?: WalletConfig["renewalConfig"], delegateProvider?: DelegateProvider, watcherConfig?: WalletConfig["watcherConfig"], settlementConfig?: WalletConfig["settlementConfig"], walletContractTimelocks?: RelativeTimelock[], receiveRotator?: WalletReceiveRotator, descriptorProvider?: DescriptorProvider, lookAheadWindow?: number, 
+    /** Overrides for the `batchExpiry` bounds; defaults derive from `network`. */
+    batchExpiryPolicy?: Partial<BatchExpiryPolicy> | undefined, 
+    /** Overrides for the checkpoint exit delay bounds; defaults derive from `network`. */
+    checkpointExitDelayPolicy?: Partial<CheckpointExitDelayPolicy> | undefined);
     get assetManager(): IAssetManager;
     getVtxoManager(): Promise<VtxoManager>;
     dispose(): Promise<void>;
@@ -1583,4 +1686,4 @@ declare function selectVirtualCoins(coins: ExtendedVirtualCoin[], targetAmount:
  */
 declare function waitForIncomingFunds(wallet: Wallet): Promise<IncomingFunds>;
 
-export { ArkError as A, Batch as B, type HDWalletCapable as H, type IncomingFunds as I, type ProviderConnectionState as P, ReadonlyWallet as R, type ServerInfoSource as S, Wallet as W, type ReceiveRotatorFactory as a, type ReceiveRotatorBootOpts as b, type ReceiveRotatorBoot as c, ArkErrorName as d, type ArkadeCashClaimResult as e, ArkadeCashCreateError as f, type ArkadeCashUnclaimedReason as g, type ArkadeCashUnclaimedVtxo as h, type BoardingUtxoGroup as i, type ProviderKind as j, ProviderUnavailableError as k, ServerResponseMismatchError as l, getRandomId as m, isArkError as n, isHDWalletCapable as o, maybeArkError as p, selectVirtualCoins as s, waitForIncomingFunds as w };
+export { ArkError as A, type BatchExpiryPolicy as B, type CheckpointExitDelayPolicy as C, DEFAULT_MIN_BATCH_EXPIRY_SECONDS as D, selectVirtualCoins as E, waitForIncomingFunds as F, type HDWalletCapable as H, type IncomingFunds as I, type ProviderConnectionState as P, ReadonlyWallet as R, type ServerInfoSource as S, Wallet as W, type ReceiveRotatorFactory as a, type ReceiveRotatorBootOpts as b, type ReceiveRotatorBoot as c, Batch as d, ArkErrorName as e, type ArkadeCashClaimResult as f, ArkadeCashCreateError as g, type ArkadeCashUnclaimedReason as h, type ArkadeCashUnclaimedVtxo as i, type BoardingUtxoGroup as j, DEFAULT_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as k, type ProviderKind as l, ProviderUnavailableError as m, REGTEST_MIN_BATCH_EXPIRY_SECONDS as n, REGTEST_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as o, ServerResponseMismatchError as p, assertValidBatchExpiry as q, assertValidServerUnrollScript as r, defaultBatchExpiryPolicy as s, defaultCheckpointExitDelayPolicy as t, getRandomId as u, isArkError as v, isHDWalletCapable as w, maybeArkError as x, resolveBatchExpiryPolicy as y, resolveCheckpointExitDelayPolicy as z };

package/dist/worker/expo/index.cjs

@@ -1,10 +1,10 @@
 'use strict';
 
-var chunkIMVKQQHU_cjs = require('../../chunk-IMVKQQHU.cjs');
-require('../../chunk-ENRRZFZ4.cjs');
-require('../../chunk-24YNIQSW.cjs');
-require('../../chunk-37XKN5DZ.cjs');
-require('../../chunk-CDWLZQQW.cjs');
+var chunkA7TOVUYG_cjs = require('../../chunk-A7TOVUYG.cjs');
+require('../../chunk-KEG4AAKX.cjs');
+require('../../chunk-YK6NP5KX.cjs');
+require('../../chunk-OWTKOMJZ.cjs');
+require('../../chunk-KUN5ZRMW.cjs');
 require('../../chunk-5BLDMQED.cjs');
 
 // src/worker/expo/taskQueue.ts
@@ -121,19 +121,19 @@ var AsyncStorageTaskQueue = class {
 
 Object.defineProperty(exports, "CONTRACT_POLL_TASK_TYPE", {
   enumerable: true,
-  get: function () { return chunkIMVKQQHU_cjs.CONTRACT_POLL_TASK_TYPE; }
+  get: function () { return chunkA7TOVUYG_cjs.CONTRACT_POLL_TASK_TYPE; }
 });
 Object.defineProperty(exports, "contractPollProcessor", {
   enumerable: true,
-  get: function () { return chunkIMVKQQHU_cjs.contractPollProcessor; }
+  get: function () { return chunkA7TOVUYG_cjs.contractPollProcessor; }
 });
 Object.defineProperty(exports, "createTaskDependencies", {
   enumerable: true,
-  get: function () { return chunkIMVKQQHU_cjs.createTaskDependencies; }
+  get: function () { return chunkA7TOVUYG_cjs.createTaskDependencies; }
 });
 Object.defineProperty(exports, "runTasks", {
   enumerable: true,
-  get: function () { return chunkIMVKQQHU_cjs.runTasks; }
+  get: function () { return chunkA7TOVUYG_cjs.runTasks; }
 });
 exports.AsyncStorageTaskQueue = AsyncStorageTaskQueue;
 exports.InMemoryTaskQueue = InMemoryTaskQueue;

package/dist/worker/expo/index.d.cts

@@ -1,7 +1,7 @@
-import { T as TaskProcessor } from '../../taskRunner-BG1PRFps.cjs';
-export { C as CreateTaskDependenciesOptions, I as InMemoryTaskQueue, b as TaskDependencies, c as TaskItem, a as TaskQueue, d as TaskResult, e as createTaskDependencies, r as runTasks } from '../../taskRunner-BG1PRFps.cjs';
-export { a as AsyncStorageLike, A as AsyncStorageTaskQueue } from '../../asyncStorageTaskQueue-C0ZsDE60.cjs';
-import '../../ark-Cgsd9tMd.cjs';
+import { T as TaskProcessor } from '../../taskRunner-CnGSTaAJ.cjs';
+export { C as CreateTaskDependenciesOptions, I as InMemoryTaskQueue, a as TaskDependencies, b as TaskItem, c as TaskQueue, d as TaskResult, e as createTaskDependencies, r as runTasks } from '../../taskRunner-CnGSTaAJ.cjs';
+export { A as AsyncStorageLike, a as AsyncStorageTaskQueue } from '../../asyncStorageTaskQueue-BlrsUUX_.cjs';
+import '../../ark-CJgH_pmn.cjs';
 import '@scure/btc-signer/transaction.js';
 import '@scure/btc-signer/utils.js';
 import '@scure/btc-signer/psbt.js';

package/dist/worker/expo/index.d.ts

@@ -1,7 +1,7 @@
-import { T as TaskProcessor } from '../../taskRunner-C46NnRsY.js';
-export { C as CreateTaskDependenciesOptions, I as InMemoryTaskQueue, b as TaskDependencies, c as TaskItem, a as TaskQueue, d as TaskResult, e as createTaskDependencies, r as runTasks } from '../../taskRunner-C46NnRsY.js';
-export { a as AsyncStorageLike, A as AsyncStorageTaskQueue } from '../../asyncStorageTaskQueue-CXz4PRBW.js';
-import '../../ark-Cgsd9tMd.js';
+import { T as TaskProcessor } from '../../taskRunner-F7tWzsrC.js';
+export { C as CreateTaskDependenciesOptions, I as InMemoryTaskQueue, a as TaskDependencies, b as TaskItem, c as TaskQueue, d as TaskResult, e as createTaskDependencies, r as runTasks } from '../../taskRunner-F7tWzsrC.js';
+export { A as AsyncStorageLike, a as AsyncStorageTaskQueue } from '../../asyncStorageTaskQueue-BeeZbf-Q.js';
+import '../../ark-CJgH_pmn.js';
 import '@scure/btc-signer/transaction.js';
 import '@scure/btc-signer/utils.js';
 import '@scure/btc-signer/psbt.js';

package/dist/worker/expo/index.js

@@ -1,8 +1,8 @@
-export { CONTRACT_POLL_TASK_TYPE, contractPollProcessor, createTaskDependencies, runTasks } from '../../chunk-5IMBONCK.js';
-import '../../chunk-T22257HW.js';
-import '../../chunk-NN7BNNF5.js';
-import '../../chunk-OOPDT2WV.js';
-import '../../chunk-IFGN2GB2.js';
+export { CONTRACT_POLL_TASK_TYPE, contractPollProcessor, createTaskDependencies, runTasks } from '../../chunk-C4SVRVNM.js';
+import '../../chunk-NIZPFPUM.js';
+import '../../chunk-ASUJNZ63.js';
+import '../../chunk-P6L2W5IL.js';
+import '../../chunk-PUNBWFIV.js';
 import '../../chunk-NSBPE2FW.js';
 
 // src/worker/expo/taskQueue.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arkade-os/sdk",
-  "version": "0.4.56",
+  "version": "0.4.57",
   "description": "TypeScript SDK for building Bitcoin wallets using the Arkade protocol",
   "type": "module",
   "main": "./dist/index.cjs",