@arkade-os/sdk 0.4.60 → 0.4.62

package/dist/{wallet-C_MYHyOj.d.ts → wallet-H3f14est.d.cts}

@@ -1,8 +1,8 @@
-import { a as Identity, p as RelativeTimelock, J as Network, K as CSVMultisigTapscript, L as BatchStartedEvent, M as TreeSigningStartedEvent, P as TxTree, Q as TreeNoncesEvent, U as BatchFinalizationEvent, X as BatchFinalizedEvent, Y as BatchFailedEvent, Z as TreeTxEvent, _ as TreeSignatureEvent, i as SettlementEvent, b as WalletConfig, W as WalletRepository, C as ContractRepository, $ as DescriptorProvider, f as IContractManager, a0 as IReadonlyWallet, a1 as ReadonlyIdentity, a2 as OnchainProvider, o as IndexerProvider, a3 as DelegateProvider, a4 as ReadonlyWalletConfig, x as IntentRepository, B as VirtualTxRepository, a5 as ExitCaptureMode, a6 as ExitDataSource, d as ActivityRegistry, a7 as IReadonlyAssetManager, a8 as ContractSyncState, a9 as RecipientAddressContext, n as ArkProvider, aa as NetworkName, ab as ArkInfo, ac as ArkAddress, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, ad as ContractWithVtxos, ae as selectPendingRecoveryOutpoints, A as ArkTransaction, e as Activity, E as ExtendedCoin, af as Coin, t as ExtendedVirtualCoin, ag as ContractManager, ah as ContractManagerConfig, I as IWallet, ai as SettlementConfig, j as IAssetManager, aj as VtxoManager, g as IDelegateManager, S as SendBitcoinParams, h as SettleParams, R as Recipient, ak as SignerSession, al as SignedIntent, am as Intent, an as TimeHeight } from './ark-D2_yNhfz.js';
+import { a as Identity, K as DescriptorProvider, q as RelativeTimelock, L as Network, M as CSVMultisigTapscript, P as BatchStartedEvent, Q as TreeSigningStartedEvent, U as TxTree, X as TreeNoncesEvent, Y as BatchFinalizationEvent, Z as BatchFinalizedEvent, _ as BatchFailedEvent, $ as TreeTxEvent, a0 as TreeSignatureEvent, i as SettlementEvent, b as WalletConfig, W as WalletRepository, C as ContractRepository, f as IContractManager, a1 as IReadonlyWallet, a2 as ReadonlyIdentity, a3 as OnchainProvider, p as IndexerProvider, a4 as DelegateProvider, a5 as ReadonlyWalletConfig, y as IntentRepository, D as VirtualTxRepository, a6 as ExitCaptureMode, a7 as ExitDataSource, d as ActivityRegistry, a8 as IReadonlyAssetManager, a9 as ContractSyncState, aa as RecipientAddressContext, o as ArkProvider, ab as NetworkName, ac as ArkInfo, ad as ArkAddress, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, ae as ContractWithVtxos, af as selectPendingRecoveryOutpoints, A as ArkTransaction, e as Activity, E as ExtendedCoin, ag as Coin, u as ExtendedVirtualCoin, ah as ContractManager, ai as ContractManagerConfig, I as IWallet, aj as SettlementConfig, k as IAssetManager, ak as VtxoManager, g as IDelegateManager, S as SendBitcoinParams, h as SettleParams, R as Recipient, al as SignerSession, am as SignedIntent, an as Intent, j as SendParams, ao as TimeHeight } from './index-CwBr7qzV.cjs';
 import { Transaction } from '@scure/btc-signer';
 import { TransactionOutput } from '@scure/btc-signer/psbt.js';
 import { Bytes } from '@scure/btc-signer/utils.js';
-import { D as DefaultVtxo, a as DelegateVtxo } from './delegate-DidNTsKm.js';
+import { D as DefaultVtxo, a as DelegateVtxo } from './delegate-CC1gcvuC.cjs';
 
 /**
  * Capability a wallet exposes so descriptor-blind consumers — Boltz swaps and
@@ -34,11 +34,47 @@ interface HDWalletCapable {
     }): Promise<string[]>;
     /**
      * An {@link Identity} whose keys and signatures are those of `descriptor`.
-     * Returns the wallet identity itself when the wallet has no descriptor
-     * signer.
+     * Returns the wallet identity itself when `descriptor` is the identity's
+     * own key (a static wallet's descriptor, or an HD wallet's baseline key).
+     *
+     * Throws {@link ForeignDescriptorError} for a descriptor this wallet
+     * cannot sign for. Never silently substitutes another key: an identity
+     * handed out for a foreign descriptor signs happily with the wrong key,
+     * and that surfaces only as a rejected transaction or a dead script —
+     * far from the call that caused it.
+     *
+     * The returned identity must actually sign — `sign`, `signMessage` and
+     * `signerSession`, not just `xOnlyPublicKey`. A watch-only identity
+     * carrying the right key is not a signer, and `contractSigner` refuses it
+     * as `WalletCannotSignError`: returning one here would otherwise pass
+     * every check and throw at push time, after the contract is funded.
      */
     signerForDescriptor(descriptor: string): Promise<Identity>;
 }
+/**
+ * Thrown by {@link HDWalletCapable.signerForDescriptor} when the wallet holds
+ * no key for the requested descriptor — it belongs to another seed, or to an
+ * identity this wallet does not carry. A typed refusal so callers can tell
+ * "not my key" from transient signing failures.
+ */
+declare class ForeignDescriptorError extends Error {
+    readonly descriptor: string;
+    readonly name = "ForeignDescriptorError";
+    constructor(descriptor: string, options?: {
+        cause?: unknown;
+    });
+}
+/** Anything that can derive and sign for a descriptor it claims. */
+type DescriptorOwner = Pick<DescriptorProvider, "isOurs" | "signWithDescriptor" | "signMessageWithDescriptor">;
+/**
+ * The identity that signs `descriptor`, or {@link ForeignDescriptorError}.
+ *
+ * Shared by every {@link HDWalletCapable.signerForDescriptor} implementation
+ * so they cannot drift: the page-side and worker-side wallets answering
+ * differently for one descriptor is a signer that passes a public-key check
+ * and then throws on every signature — after the artifact is funded.
+ */
+declare function resolveDescriptorSigner(descriptor: string, identity: Identity, provider?: DescriptorOwner): Promise<Identity>;
 /** Structural type guard for {@link HDWalletCapable}. */
 declare function isHDWalletCapable(value: unknown): value is HDWalletCapable;
 /**
@@ -54,21 +90,35 @@ declare function isHDWalletCapable(value: unknown): value is HDWalletCapable;
  */
 interface HDAllocationCapable {
     /**
-     * Allocate the next descriptor, advancing the watermark. `undefined` for
-     * static / `auto` wallets, which cannot allocate.
+     * The signing descriptor a new artifact (a swap, an invoice, a contract)
+     * should bind to. **The wallet decides what that means**: an HD wallet
+     * allocates a fresh index, advancing the watermark; a static wallet
+     * answers with its one `tr(pubkey)` descriptor every time. Consumers must
+     * not probe the wallet's shape or mint key material of their own — they
+     * ask, and use what comes back with
+     * {@link HDWalletCapable.signerForDescriptor}.
+     *
+     * `undefined` only for implementations that genuinely cannot answer;
+     * `Wallet` always answers. Callers that must work against such wallets
+     * fall back to the identity key — never to a random one.
      *
      * Distinct from {@link HDWalletCapable.getCurrentSigningDescriptor}, which
-     * peeks: two artifacts bound to a peek share a key.
+     * peeks: on an HD wallet, two artifacts bound to a peek share a key.
+     * Whether the returned descriptor is unique per call is a property of the
+     * wallet, not of this method — anything deriving per-artifact secrets
+     * from the descriptor must check the descriptor's shape, not the wallet's.
      */
     getNextSigningDescriptor(): Promise<string | undefined>;
     /**
      * Move the allocation watermark to `descriptor`'s index so later
      * allocations cannot reissue it. Monotonic — a lower index is a no-op.
+     * On a static wallet there is no watermark: the wallet's own descriptor
+     * is accepted as a no-op.
      *
-     * Throws on a descriptor this wallet cannot derive, or one with no
-     * parseable trailing child index: silently mapping those to index 0 would
-     * move the watermark nowhere and let a restored artifact's index be handed
-     * out again.
+     * Throws on a descriptor this wallet cannot derive, or an HD descriptor
+     * with no parseable trailing child index: silently mapping those to index
+     * 0 would move the watermark nowhere and let a restored artifact's index
+     * be handed out again.
      */
     advanceSigningDescriptorWatermark(descriptor: string): Promise<void>;
 }
@@ -1449,11 +1499,19 @@ declare class Wallet extends ReadonlyWallet implements IWallet, HDWalletCapable
      */
     getCurrentSigningDescriptor(): Promise<string | undefined>;
     /**
-     * @see HDWalletCapable.getNextSigningDescriptor
+     * @see HDAllocationCapable.getNextSigningDescriptor
+     *
+     * Every `Wallet` answers — this is where the wallet's key-provisioning
+     * policy lives, so consumers never have to branch on wallet shape:
+     * - HD: allocate a fresh index through the contract manager (which owns
+     *   cross-context serialization and the look-ahead band).
+     * - custom provider: whatever the provider allocates.
+     * - static / `auto`: the identity key as a bare `tr(pubkey)` descriptor —
+     *   the same answer every call, because that IS the static policy.
      */
     getNextSigningDescriptor(): Promise<string | undefined>;
     /**
-     * @see HDWalletCapable.advanceSigningDescriptorWatermark
+     * @see HDAllocationCapable.advanceSigningDescriptorWatermark
      */
     advanceSigningDescriptorWatermark(descriptor: string): Promise<void>;
     /**
@@ -1469,6 +1527,13 @@ declare class Wallet extends ReadonlyWallet implements IWallet, HDWalletCapable
     }): Promise<string[]>;
     /**
      * @see HDWalletCapable.signerForDescriptor
+     *
+     * Fail-loud contract: the returned identity is always the descriptor's
+     * own key. A descriptor this wallet cannot sign for throws
+     * {@link ForeignDescriptorError} instead of silently substituting the
+     * baseline identity — that identity would sign happily with the wrong
+     * key, and the failure would only surface as a rejected transaction or a
+     * dead script, far from the call that caused it.
      */
     signerForDescriptor(descriptor: string): Promise<Identity>;
     /**
@@ -1771,10 +1836,13 @@ declare class Wallet extends ReadonlyWallet implements IWallet, HDWalletCapable
     /** Sum the outputs of an ark tx PSBT that pay the given scriptPubKey. */
     private arkTxAmountPaidTo;
     /**
-     * Send BTC and/or assets to one or more recipients.
+     * Send BTC and/or assets to one or more recipients, passed either as
+     * variadic `Recipient`s or as a single `SendParams` object — the latter
+     * also carries the virtual outputs to spend.
      *
-     * @param args - Recipients with their addresses, BTC amounts, and assets
+     * @param args - Recipients, or a `SendParams` object
      * @returns Promise resolving to the Arkade transaction ID
+     * @see SendParams
      *
      * @example
      * ```typescript
@@ -1783,9 +1851,15 @@ declare class Wallet extends ReadonlyWallet implements IWallet, HDWalletCapable
      *     amount: 1000, // (optional, default to dust) btc amount to send to the output
      *     assets: [{ assetId: 'abc123...', amount: 50n }] // (optional) list of assets to send
      * });
+     *
+     * // choosing the inputs as well as the outputs
+     * const txid = await wallet.send({
+     *     recipients: [{ address: 'ark1q...', amount: 1000 }],
+     *     selectedVtxos: mine, // spent as given, nothing added
+     * });
      * ```
      */
-    send(...args: [Recipient, ...Recipient[]]): Promise<string>;
+    send(...args: [SendParams] | [Recipient, ...Recipient[]]): Promise<string>;
     private _sendImpl;
     /**
      * Shared tail of every Ark-transaction spend path (`send`, selected-VTXO
@@ -1845,4 +1919,4 @@ declare function selectVirtualCoins(coins: ExtendedVirtualCoin[], targetAmount:
  */
 declare function waitForIncomingFunds(wallet: Wallet): Promise<IncomingFunds>;
 
-export { ArkError as A, type BatchExpiryPolicy as B, type CheckpointExitDelayPolicy as C, DEFAULT_MIN_BATCH_EXPIRY_SECONDS as D, maybeArkError as E, resolveBatchExpiryPolicy as F, resolveCheckpointExitDelayPolicy as G, type HDWalletCapable as H, type IncomingFunds as I, selectVirtualCoins as J, signingDescriptorIndex as K, strictSigningDescriptorIndex as L, MAX_USED_SIGNING_DESCRIPTORS_LOOK_AHEAD as M, waitForIncomingFunds as N, type ProviderConnectionState as P, ReadonlyWallet as R, SIGNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as S, Wallet as W, type ReceiveRotatorFactory as a, type ReceiveRotatorBootOpts as b, type ReceiveRotatorBoot as c, type HDAllocationCapable as d, Batch as e, ArkErrorName as f, type ArkadeCashClaimResult as g, ArkadeCashCreateError as h, type ArkadeCashUnclaimedReason as i, type ArkadeCashUnclaimedVtxo as j, type BoardingUtxoGroup as k, DEFAULT_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as l, MUTINYNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as m, type ProviderKind as n, ProviderUnavailableError as o, REGTEST_MIN_BATCH_EXPIRY_SECONDS as p, REGTEST_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as q, type ServerInfoSource as r, ServerResponseMismatchError as s, assertValidBatchExpiry as t, assertValidServerUnrollScript as u, defaultBatchExpiryPolicy as v, defaultCheckpointExitDelayPolicy as w, isArkError as x, isHDAllocationCapable as y, isHDWalletCapable as z };
+export { ArkError as A, type BatchExpiryPolicy as B, type CheckpointExitDelayPolicy as C, DEFAULT_MIN_BATCH_EXPIRY_SECONDS as D, maybeArkError as E, ForeignDescriptorError as F, resolveBatchExpiryPolicy as G, type HDWalletCapable as H, type IncomingFunds as I, resolveCheckpointExitDelayPolicy as J, resolveDescriptorSigner as K, selectVirtualCoins as L, MAX_USED_SIGNING_DESCRIPTORS_LOOK_AHEAD as M, signingDescriptorIndex as N, strictSigningDescriptorIndex as O, type ProviderConnectionState as P, waitForIncomingFunds as Q, ReadonlyWallet as R, SIGNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as S, Wallet as W, type HDAllocationCapable as a, type ReceiveRotatorFactory as b, type ReceiveRotatorBootOpts as c, type ReceiveRotatorBoot as d, Batch as e, ArkErrorName as f, type ArkadeCashClaimResult as g, ArkadeCashCreateError as h, type ArkadeCashUnclaimedReason as i, type ArkadeCashUnclaimedVtxo as j, type BoardingUtxoGroup as k, DEFAULT_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as l, MUTINYNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as m, type ProviderKind as n, ProviderUnavailableError as o, REGTEST_MIN_BATCH_EXPIRY_SECONDS as p, REGTEST_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as q, type ServerInfoSource as r, ServerResponseMismatchError as s, assertValidBatchExpiry as t, assertValidServerUnrollScript as u, defaultBatchExpiryPolicy as v, defaultCheckpointExitDelayPolicy as w, isArkError as x, isHDAllocationCapable as y, isHDWalletCapable as z };

package/dist/worker/expo/index.cjs

@@ -1,10 +1,10 @@
 'use strict';
 
-var chunk2XLNQHG4_cjs = require('../../chunk-2XLNQHG4.cjs');
-require('../../chunk-KNS5MTTI.cjs');
-require('../../chunk-PRFL62ID.cjs');
-require('../../chunk-MZNLCMUP.cjs');
-require('../../chunk-4A4GRSTB.cjs');
+var chunkPWWA4DBL_cjs = require('../../chunk-PWWA4DBL.cjs');
+require('../../chunk-Z2OZMKFV.cjs');
+require('../../chunk-I6EDUE75.cjs');
+require('../../chunk-G53HASDV.cjs');
+require('../../chunk-OH2XLTXE.cjs');
 require('../../chunk-5BLDMQED.cjs');
 
 // src/worker/expo/taskQueue.ts
@@ -121,19 +121,19 @@ var AsyncStorageTaskQueue = class {
 
 Object.defineProperty(exports, "CONTRACT_POLL_TASK_TYPE", {
   enumerable: true,
-  get: function () { return chunk2XLNQHG4_cjs.CONTRACT_POLL_TASK_TYPE; }
+  get: function () { return chunkPWWA4DBL_cjs.CONTRACT_POLL_TASK_TYPE; }
 });
 Object.defineProperty(exports, "contractPollProcessor", {
   enumerable: true,
-  get: function () { return chunk2XLNQHG4_cjs.contractPollProcessor; }
+  get: function () { return chunkPWWA4DBL_cjs.contractPollProcessor; }
 });
 Object.defineProperty(exports, "createTaskDependencies", {
   enumerable: true,
-  get: function () { return chunk2XLNQHG4_cjs.createTaskDependencies; }
+  get: function () { return chunkPWWA4DBL_cjs.createTaskDependencies; }
 });
 Object.defineProperty(exports, "runTasks", {
   enumerable: true,
-  get: function () { return chunk2XLNQHG4_cjs.runTasks; }
+  get: function () { return chunkPWWA4DBL_cjs.runTasks; }
 });
 exports.AsyncStorageTaskQueue = AsyncStorageTaskQueue;
 exports.InMemoryTaskQueue = InMemoryTaskQueue;

package/dist/worker/expo/index.d.cts

@@ -1,11 +1,11 @@
-import { T as TaskProcessor } from '../../taskRunner-BEQNFEa4.cjs';
-export { C as CreateTaskDependenciesOptions, I as InMemoryTaskQueue, a as TaskDependencies, b as TaskItem, c as TaskQueue, d as TaskResult, e as createTaskDependencies, r as runTasks } from '../../taskRunner-BEQNFEa4.cjs';
-export { A as AsyncStorageLike, a as AsyncStorageTaskQueue } from '../../asyncStorageTaskQueue-CqijAAPG.cjs';
-import '../../ark-D2_yNhfz.cjs';
-import '@scure/btc-signer/transaction.js';
+import { T as TaskProcessor } from '../../taskRunner-BMUndClz.cjs';
+export { C as CreateTaskDependenciesOptions, I as InMemoryTaskQueue, b as TaskDependencies, c as TaskItem, a as TaskQueue, d as TaskResult, e as createTaskDependencies, r as runTasks } from '../../taskRunner-BMUndClz.cjs';
+export { a as AsyncStorageLike, A as AsyncStorageTaskQueue } from '../../asyncStorageTaskQueue-B53mOTCw.cjs';
+import '../../index-CwBr7qzV.cjs';
 import '@scure/btc-signer/utils.js';
-import '@scure/btc-signer/psbt.js';
+import '@scure/btc-signer/transaction.js';
 import '@scure/btc-signer';
+import '@scure/btc-signer/psbt.js';
 
 declare const CONTRACT_POLL_TASK_TYPE = "contract-poll";
 /**

package/dist/worker/expo/index.d.ts

@@ -1,11 +1,11 @@
-import { T as TaskProcessor } from '../../taskRunner-9gnlYEpb.js';
-export { C as CreateTaskDependenciesOptions, I as InMemoryTaskQueue, a as TaskDependencies, b as TaskItem, c as TaskQueue, d as TaskResult, e as createTaskDependencies, r as runTasks } from '../../taskRunner-9gnlYEpb.js';
-export { A as AsyncStorageLike, a as AsyncStorageTaskQueue } from '../../asyncStorageTaskQueue-Vsp6uk8e.js';
-import '../../ark-D2_yNhfz.js';
-import '@scure/btc-signer/transaction.js';
+import { T as TaskProcessor } from '../../taskRunner-DZWUsSzA.js';
+export { C as CreateTaskDependenciesOptions, I as InMemoryTaskQueue, b as TaskDependencies, c as TaskItem, a as TaskQueue, d as TaskResult, e as createTaskDependencies, r as runTasks } from '../../taskRunner-DZWUsSzA.js';
+export { a as AsyncStorageLike, A as AsyncStorageTaskQueue } from '../../asyncStorageTaskQueue-Df-CTfTE.js';
+import '../../index-CwBr7qzV.js';
 import '@scure/btc-signer/utils.js';
-import '@scure/btc-signer/psbt.js';
+import '@scure/btc-signer/transaction.js';
 import '@scure/btc-signer';
+import '@scure/btc-signer/psbt.js';
 
 declare const CONTRACT_POLL_TASK_TYPE = "contract-poll";
 /**

package/dist/worker/expo/index.js

@@ -1,8 +1,8 @@
-export { CONTRACT_POLL_TASK_TYPE, contractPollProcessor, createTaskDependencies, runTasks } from '../../chunk-B66RYHTB.js';
-import '../../chunk-Y54MUBT7.js';
-import '../../chunk-FSKANUV4.js';
-import '../../chunk-2DINXHGQ.js';
-import '../../chunk-JBULXTCC.js';
+export { CONTRACT_POLL_TASK_TYPE, contractPollProcessor, createTaskDependencies, runTasks } from '../../chunk-I7RLG6VX.js';
+import '../../chunk-2IZW6AEK.js';
+import '../../chunk-RMBI6P4N.js';
+import '../../chunk-L7S5KC5B.js';
+import '../../chunk-URT2RVGB.js';
 import '../../chunk-NSBPE2FW.js';
 
 // src/worker/expo/taskQueue.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arkade-os/sdk",
-  "version": "0.4.60",
+  "version": "0.4.62",
   "description": "TypeScript SDK for building Bitcoin wallets using the Arkade protocol",
   "repository": {
     "type": "git",