@arkade-os/sdk 0.4.66 → 0.4.68

package/dist/{chunk-PXPPZF5K.cjs → chunk-6YUACVX4.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkZIRFXBKL_cjs = require('./chunk-ZIRFXBKL.cjs');
+var chunkEJOFL5WH_cjs = require('./chunk-EJOFL5WH.cjs');
 var chunk5BLDMQED_cjs = require('./chunk-5BLDMQED.cjs');
 var base = require('@scure/base');
 var descriptorsScure = require('@bitcoinerlab/descriptors-scure');
@@ -76,14 +76,14 @@ var ContractHandlerRegistry = class {
 var contractHandlers = new ContractHandlerRegistry();
 exports.DefaultVtxo = void 0;
 ((DefaultVtxo2) => {
-  class Script3 extends chunkZIRFXBKL_cjs.VtxoScript {
+  class Script3 extends chunkEJOFL5WH_cjs.VtxoScript {
     /** Create the default virtual output script with one forfeit path and one exit path. */
     constructor(options) {
       const { pubKey, serverPubKey, csvTimelock } = options;
-      const forfeitScript = chunkZIRFXBKL_cjs.MultisigTapscript.encode({
+      const forfeitScript = chunkEJOFL5WH_cjs.MultisigTapscript.encode({
         pubkeys: [pubKey, serverPubKey]
       }).script;
-      const exitScript = chunkZIRFXBKL_cjs.CSVMultisigTapscript.encode({
+      const exitScript = chunkEJOFL5WH_cjs.CSVMultisigTapscript.encode({
         timelock: csvTimelock,
         pubkeys: [pubKey]
       }).script;
@@ -288,7 +288,7 @@ function extractPubKeyBytes(value) {
   return base.hex.decode(extractPubKey(normalizeToDescriptor(value)));
 }
 function deserializeCsvTimelock(value) {
-  return value !== void 0 && value !== "" ? chunkZIRFXBKL_cjs.sequenceToTimelock(Number(value)) : exports.DefaultVtxo.Script.DEFAULT_TIMELOCK;
+  return value !== void 0 && value !== "" ? chunkEJOFL5WH_cjs.sequenceToTimelock(Number(value)) : exports.DefaultVtxo.Script.DEFAULT_TIMELOCK;
 }
 var CLTV_HEIGHT_THRESHOLD = 500000000n;
 function isCltvSatisfied(context, locktime) {
@@ -330,7 +330,7 @@ function assertVhtlcSpendableNow(contract, context) {
 function isCsvSpendable(context, sequence) {
   if (sequence === void 0) return true;
   if (!context.vtxo) return false;
-  const timelock = chunkZIRFXBKL_cjs.sequenceToTimelock(sequence);
+  const timelock = chunkEJOFL5WH_cjs.sequenceToTimelock(sequence);
   if (timelock.type === "blocks") {
     if (context.blockHeight === void 0 || context.vtxo.status.block_height === void 0) {
       return false;
@@ -388,21 +388,21 @@ function forfeitExitSpendablePaths(script, contract, context) {
 async function detectUsedScripts(indexerProvider, scriptHexes) {
   const used = /* @__PURE__ */ new Set();
   const unique = [...new Set(scriptHexes)];
-  for (let offset = 0; offset < unique.length; offset += chunkZIRFXBKL_cjs.SCRIPT_QUERY_CHUNK_SIZE) {
-    const scripts = unique.slice(offset, offset + chunkZIRFXBKL_cjs.SCRIPT_QUERY_CHUNK_SIZE);
+  for (let offset = 0; offset < unique.length; offset += chunkEJOFL5WH_cjs.SCRIPT_QUERY_CHUNK_SIZE) {
+    const scripts = unique.slice(offset, offset + chunkEJOFL5WH_cjs.SCRIPT_QUERY_CHUNK_SIZE);
     const remaining = new Set(scripts);
     let pageIndex = 0;
     let hasMore = true;
     while (hasMore && remaining.size > 0) {
-      const { vtxos, page } = await chunkZIRFXBKL_cjs.getNormalizedVtxos(indexerProvider, {
+      const { vtxos, page } = await chunkEJOFL5WH_cjs.getNormalizedVtxos(indexerProvider, {
         scripts,
         pageIndex,
-        pageSize: chunkZIRFXBKL_cjs.DEFAULT_PAGE_SIZE
+        pageSize: chunkEJOFL5WH_cjs.DEFAULT_PAGE_SIZE
       });
       for (const vtxo of vtxos) {
         if (remaining.delete(vtxo.script)) used.add(vtxo.script);
       }
-      hasMore = page ? vtxos.length === chunkZIRFXBKL_cjs.DEFAULT_PAGE_SIZE : false;
+      hasMore = page ? vtxos.length === chunkEJOFL5WH_cjs.DEFAULT_PAGE_SIZE : false;
       pageIndex++;
     }
   }
@@ -463,7 +463,7 @@ var DefaultContractHandler = {
     return {
       pubKey: base.hex.encode(params.pubKey),
       serverPubKey: base.hex.encode(params.serverPubKey),
-      csvTimelock: chunkZIRFXBKL_cjs.timelockToSequence(params.csvTimelock).toString()
+      csvTimelock: chunkEJOFL5WH_cjs.timelockToSequence(params.csvTimelock).toString()
     };
   },
   deserializeParams(params) {
@@ -498,7 +498,7 @@ function defaultCandidatesAt(_index, descriptor, deps) {
     params: {
       pubKey: base.hex.encode(c.pubKey),
       serverPubKey: base.hex.encode(c.serverPubKey),
-      csvTimelock: chunkZIRFXBKL_cjs.timelockToSequence(c.csvTimelock).toString()
+      csvTimelock: chunkEJOFL5WH_cjs.timelockToSequence(c.csvTimelock).toString()
     },
     script: c.scriptHex,
     address: c.script.address(deps.network.hrp, c.serverPubKey).encode()
@@ -514,12 +514,12 @@ function discoverDefaultRange(entries, deps) {
 }
 exports.DelegateVtxo = void 0;
 ((DelegateVtxo2) => {
-  class Script3 extends chunkZIRFXBKL_cjs.VtxoScript {
+  class Script3 extends chunkEJOFL5WH_cjs.VtxoScript {
     /** Create a delegated virtual output script with forfeit, exit, and delegate paths. */
     constructor(options) {
       const defaultVtxo = new exports.DefaultVtxo.Script(options);
       const { delegatePubKey, pubKey, serverPubKey } = options;
-      const delegateScript = chunkZIRFXBKL_cjs.MultisigTapscript.encode({
+      const delegateScript = chunkEJOFL5WH_cjs.MultisigTapscript.encode({
         pubkeys: [pubKey, delegatePubKey, serverPubKey]
       }).script;
       super([...defaultVtxo.scripts, delegateScript]);
@@ -558,7 +558,7 @@ var DelegateContractHandler = {
       pubKey: base.hex.encode(params.pubKey),
       serverPubKey: base.hex.encode(params.serverPubKey),
       delegatePubKey: base.hex.encode(params.delegatePubKey),
-      csvTimelock: chunkZIRFXBKL_cjs.timelockToSequence(params.csvTimelock).toString()
+      csvTimelock: chunkEJOFL5WH_cjs.timelockToSequence(params.csvTimelock).toString()
     };
   },
   deserializeParams(params) {
@@ -602,7 +602,7 @@ function delegateCandidatesAt(_index, descriptor, deps) {
       pubKey: base.hex.encode(c.pubKey),
       serverPubKey: base.hex.encode(c.serverPubKey),
       delegatePubKey: base.hex.encode(delegatePubKey),
-      csvTimelock: chunkZIRFXBKL_cjs.timelockToSequence(c.csvTimelock).toString()
+      csvTimelock: chunkEJOFL5WH_cjs.timelockToSequence(c.csvTimelock).toString()
     },
     script: c.scriptHex,
     address: c.script.address(deps.network.hrp, c.serverPubKey).encode()
@@ -1445,7 +1445,7 @@ function computeArkadeScriptPublicKey(pubKey, script) {
 // src/script/vhtlc.ts
 exports.VHTLC = void 0;
 ((VHTLC2) => {
-  class BaseScript extends chunkZIRFXBKL_cjs.VtxoScript {
+  class BaseScript extends chunkEJOFL5WH_cjs.VtxoScript {
     options;
     claimScript;
     refundScript;
@@ -1457,6 +1457,8 @@ exports.VHTLC = void 0;
     nonInteractiveClaimArkadeScript;
     nonInteractiveRefundScript;
     nonInteractiveRefundArkadeScript;
+    nonInteractiveRefundWithoutReceiverScript;
+    nonInteractiveRefundWithoutReceiverArkadeScript;
     constructor(options, preimageCondition) {
       validateOptions(options);
       const {
@@ -1470,27 +1472,27 @@ exports.VHTLC = void 0;
         unilateralRefundWithoutReceiverDelay
       } = options;
       const conditionScript = preimageCondition(preimageHash);
-      const claimScript = chunkZIRFXBKL_cjs.ConditionMultisigTapscript.encode({
+      const claimScript = chunkEJOFL5WH_cjs.ConditionMultisigTapscript.encode({
         conditionScript,
         pubkeys: [receiver, server]
       }).script;
-      const refundScript = chunkZIRFXBKL_cjs.MultisigTapscript.encode({
+      const refundScript = chunkEJOFL5WH_cjs.MultisigTapscript.encode({
         pubkeys: [sender, receiver, server]
       }).script;
-      const refundWithoutReceiverScript = chunkZIRFXBKL_cjs.CLTVMultisigTapscript.encode({
+      const refundWithoutReceiverScript = chunkEJOFL5WH_cjs.CLTVMultisigTapscript.encode({
         absoluteTimelock: refundLocktime,
         pubkeys: [sender, server]
       }).script;
-      const unilateralClaimScript = chunkZIRFXBKL_cjs.ConditionCSVMultisigTapscript.encode({
+      const unilateralClaimScript = chunkEJOFL5WH_cjs.ConditionCSVMultisigTapscript.encode({
         conditionScript,
         timelock: unilateralClaimDelay,
         pubkeys: [receiver]
       }).script;
-      const unilateralRefundScript = chunkZIRFXBKL_cjs.CSVMultisigTapscript.encode({
+      const unilateralRefundScript = chunkEJOFL5WH_cjs.CSVMultisigTapscript.encode({
         timelock: unilateralRefundDelay,
         pubkeys: [sender, receiver]
       }).script;
-      const unilateralRefundWithoutReceiverScript = chunkZIRFXBKL_cjs.CSVMultisigTapscript.encode({
+      const unilateralRefundWithoutReceiverScript = chunkEJOFL5WH_cjs.CSVMultisigTapscript.encode({
         timelock: unilateralRefundWithoutReceiverDelay,
         pubkeys: [sender]
       }).script;
@@ -1504,42 +1506,36 @@ exports.VHTLC = void 0;
       ];
       let arkadeScriptNic;
       let nonInteractiveClaimScript;
-      if (options.nonInteractiveClaim) {
-        arkadeScriptNic = enforcePayToMaybeAsset(
-          options.nonInteractiveClaim.receiverPkScript,
-          options.asset,
-          options.nonInteractiveClaim.strict
-        );
-        nonInteractiveClaimScript = chunkZIRFXBKL_cjs.ConditionMultisigTapscript.encode({
+      let arkadeScriptNir;
+      let nonInteractiveRefundScript;
+      let nonInteractiveRefundWithoutReceiverScript;
+      const covenants = options.nonInteractiveParameters;
+      if (covenants) {
+        arkadeScriptNic = enforcePayToMaybeAsset(covenants.receiverPkScript, options.asset);
+        nonInteractiveClaimScript = chunkEJOFL5WH_cjs.ConditionMultisigTapscript.encode({
           conditionScript,
           pubkeys: [
             server,
-            computeArkadeScriptPublicKey(
-              options.nonInteractiveClaim.emulatorPubkey,
-              arkadeScriptNic
-            )
+            computeArkadeScriptPublicKey(covenants.emulatorPubkey, arkadeScriptNic)
           ]
         }).script;
         scripts.push(nonInteractiveClaimScript);
-      }
-      let arkadeScriptNir;
-      let nonInteractiveRefundScript;
-      if (options.nonInteractiveRefund) {
-        arkadeScriptNir = enforcePayToMaybeAsset(
-          options.nonInteractiveRefund.senderPkScript,
-          options.asset
+        arkadeScriptNir = enforcePayToMaybeAsset(covenants.senderPkScript, options.asset);
+        const nirCosigner = computeArkadeScriptPublicKey(
+          covenants.emulatorPubkey,
+          arkadeScriptNir
         );
-        nonInteractiveRefundScript = chunkZIRFXBKL_cjs.MultisigTapscript.encode({
-          pubkeys: [
-            server,
-            receiver,
-            computeArkadeScriptPublicKey(
-              options.nonInteractiveRefund.emulatorPubkey,
-              arkadeScriptNir
-            )
-          ]
+        nonInteractiveRefundScript = chunkEJOFL5WH_cjs.MultisigTapscript.encode({
+          pubkeys: [server, receiver, nirCosigner]
         }).script;
         scripts.push(nonInteractiveRefundScript);
+        if (covenants.legacy !== "preTimelockedRefund") {
+          nonInteractiveRefundWithoutReceiverScript = chunkEJOFL5WH_cjs.CLTVMultisigTapscript.encode({
+            absoluteTimelock: refundLocktime,
+            pubkeys: [server, nirCosigner]
+          }).script;
+          scripts.push(nonInteractiveRefundWithoutReceiverScript);
+        }
       }
       super(scripts);
       this.options = options;
@@ -1559,6 +1555,12 @@ exports.VHTLC = void 0;
         this.nonInteractiveRefundScript = base.hex.encode(nonInteractiveRefundScript);
         this.nonInteractiveRefundArkadeScript = arkadeScriptNir;
       }
+      if (nonInteractiveRefundWithoutReceiverScript) {
+        this.nonInteractiveRefundWithoutReceiverScript = base.hex.encode(
+          nonInteractiveRefundWithoutReceiverScript
+        );
+        this.nonInteractiveRefundWithoutReceiverArkadeScript = arkadeScriptNir;
+      }
     }
     /** Return the collaborative claim tapleaf script. */
     claim() {
@@ -1604,6 +1606,67 @@ exports.VHTLC = void 0;
         this.nonInteractiveRefundArkadeScript
       ];
     }
+    /**
+     * Return the timelocked non-interactive refund tapleaf and its ArkadeScript.
+     *
+     * SPENDING THIS LEAF, CONCRETELY — confirmed from this SDK's own
+     * emulator client and covenant-spend builder ({@link
+     * EmulatorProvider} in `src/providers/emulator.ts`, and {@link
+     * ArkadeTransactionBuilder} in `src/arkade/contract.ts`), which is
+     * the general machinery every covenant leaf in this file goes
+     * through:
+     *
+     *  1. Build the ark tx spending this leaf (this method's {@link
+     *     TapLeafScript} as `tapLeafScript`, this script's {@link
+     *     VtxoScript.encode} as `tapTree`), plus its checkpoint tx.
+     *  2. Attach the ArkadeScript this method returns to the spent
+     *     input via an `EmulatorPacket` (type 1) — `{ vin, script:
+     *     <this ArkadeScript>, witness: <empty> }`, empty because the
+     *     script pushes its own input/output index with
+     *     `PUSHCURRENTINPUTINDEX` rather than reading one from the
+     *     witness — wrapped in an `Extension` OP_RETURN output on the
+     *     ark tx.
+     *  3. Attach the spent input's OWN creating ark tx as `PrevArkTx` on
+     *     input 0 — required so the emulator can resolve that input's
+     *     prevout pkScript/value; it does not otherwise have them.
+     *  4. POST the (base64-PSBT) ark tx and checkpoint(s) as `{ arkTx,
+     *     checkpointTxs }` to the emulator's `POST /v1/tx`.
+     *
+     * THE COVENANT CHECK the emulator runs against that ArkadeScript —
+     * `enforcePayTo(senderPkScript)`, see that function above — is: the
+     * output at this SAME input's index is a v1 P2TR output paying
+     * `senderPkScript`, with a value at least the input's. Only on that
+     * check passing does the emulator sign for `nirCosigner` (the
+     * `emulatorPubkey` tweaked by this ArkadeScript's hash); the
+     * response carries the fully co-signed `signedArkTx` and
+     * `signedCheckpointTxs` — `ArkadeTransactionBuilder.send()`'s own
+     * comment on this path: "the emulator executes the arkade script
+     * and finalizes with arkd" — no separate call to arkd is made by
+     * this SDK for a covenant spend.
+     * Neither `server` nor `receiver` play any part in that check: this
+     * leaf's tapscript still requires `server`'s own signature
+     * alongside `nirCosigner`'s (see the class doc above), but that is
+     * consensus-level multisig, not something the covenant enforces.
+     *
+     * NOT SPENDABLE UNTIL `refundLocktime` MATURES — the tapscript's
+     * `OP_CHECKLOCKTIMEVERIFY` is arkd's concern, not the emulator's;
+     * the emulator will happily co-sign an immature spend and arkd will
+     * then refuse it. A block-height-typed `refundLocktime` (below the
+     * standard height/timestamp boundary this SDK names
+     * `CLTV_HEIGHT_THRESHOLD`, 500,000,000, in
+     * `src/contracts/handlers/helpers.ts`) is refused by arkd for a
+     * forfeit-eligible leaf independent of maturity — use a
+     * seconds-typed (absolute Unix timestamp) value.
+     */
+    nonInteractiveRefundWithoutReceiver() {
+      if (!this.nonInteractiveRefundWithoutReceiverScript || !this.nonInteractiveRefundWithoutReceiverArkadeScript) {
+        throw new Error("VHTLC has no non-interactive refund-without-receiver leaf");
+      }
+      return [
+        this.findLeaf(this.nonInteractiveRefundWithoutReceiverScript),
+        this.nonInteractiveRefundWithoutReceiverArkadeScript
+      ];
+    }
   }
   class Script3 extends BaseScript {
     constructor(options) {
@@ -1631,47 +1694,25 @@ exports.VHTLC = void 0;
     if (!preimageHash || preimageHash.length !== 20) {
       throw new Error("preimage hash must be 20 bytes");
     }
-    if (options.asset !== void 0 && !options.nonInteractiveClaim && !options.nonInteractiveRefund) {
-      throw new Error(
-        "asset has no effect without nonInteractiveClaim or nonInteractiveRefund"
-      );
-    }
-    const strict = options.nonInteractiveClaim?.strict;
-    if (strict !== void 0) {
-      if (strict.amount <= 0n) {
-        throw new Error(`strict claim amount must be positive, got ${strict.amount}`);
-      }
-      if (options.asset !== void 0 && strict.assetAmount === void 0) {
-        throw new Error(
-          "strict claim needs assetAmount when the contract is denominated in an asset: bounding only the sats would leave the asset amount unenforced"
-        );
-      }
-      if (options.asset === void 0 && strict.assetAmount !== void 0) {
-        throw new Error("strict claim assetAmount has no effect without asset");
-      }
-      if (strict.assetAmount !== void 0 && strict.assetAmount <= 0n) {
-        throw new Error(
-          `strict claim assetAmount must be positive, got ${strict.assetAmount}`
-        );
-      }
+    if (options.asset !== void 0 && !options.nonInteractiveParameters) {
+      throw new Error("asset has no effect without nonInteractiveParameters");
     }
-    if (options.nonInteractiveClaim) {
-      const { emulatorPubkey, receiverPkScript } = options.nonInteractiveClaim;
+    if (options.nonInteractiveParameters) {
+      const { emulatorPubkey, receiverPkScript, senderPkScript, legacy } = options.nonInteractiveParameters;
       if (!emulatorPubkey || emulatorPubkey.length !== 32 && emulatorPubkey.length !== 33) {
         throw new Error("Invalid public key length (emulator)");
       }
       if (!receiverPkScript || !isP2trPkScript(receiverPkScript)) {
         throw new Error("Invalid P2TR script");
       }
-    }
-    if (options.nonInteractiveRefund) {
-      const { emulatorPubkey, senderPkScript } = options.nonInteractiveRefund;
-      if (!emulatorPubkey || emulatorPubkey.length !== 32 && emulatorPubkey.length !== 33) {
-        throw new Error("Invalid public key length (emulator)");
-      }
       if (!senderPkScript || !isP2trPkScript(senderPkScript)) {
         throw new Error("Invalid P2TR script");
       }
+      if (legacy !== void 0 && legacy !== "preTimelockedRefund") {
+        throw new Error(
+          `nonInteractiveParameters.legacy must be "preTimelockedRefund" when set, got ${JSON.stringify(legacy)}`
+        );
+      }
     }
     if (!receiver || receiver.length !== 32) {
       throw new Error("Invalid public key length (receiver)");
@@ -1723,7 +1764,7 @@ function preimageConditionScriptV2(preimageHash) {
 function isP2trPkScript(pkScript) {
   return pkScript.length === 34 && pkScript[0] === 81 && pkScript[1] === 32;
 }
-function satClause(destinationPkScript, quotedSats) {
+function satClause(destinationPkScript) {
   return [
     "PUSHCURRENTINPUTINDEX",
     "DUP",
@@ -1733,21 +1774,18 @@ function satClause(destinationPkScript, quotedSats) {
     destinationPkScript.subarray(2),
     "EQUALVERIFY",
     "INSPECTOUTPUTVALUE",
-    // `DUP` because the output value is needed twice: once against the
-    // quote, once against the input.
-    ...quotedSats === void 0 ? [] : ["DUP", quotedSats, "GREATERTHANOREQUAL", "VERIFY"],
     "PUSHCURRENTINPUTINDEX",
     "INSPECTINPUTVALUE",
     "GREATERTHANOREQUAL"
   ];
 }
-function enforcePayTo(destinationPkScript, quotedSats) {
+function enforcePayTo(destinationPkScript) {
   if (!isP2trPkScript(destinationPkScript)) {
     throw new Error("invalid P2TR script");
   }
-  return ArkadeScript.encode(satClause(destinationPkScript, quotedSats));
+  return ArkadeScript.encode(satClause(destinationPkScript));
 }
-function enforcePayToAsset(destinationPkScript, asset, strict) {
+function enforcePayToAsset(destinationPkScript, asset) {
   if (!isP2trPkScript(destinationPkScript)) {
     throw new Error("invalid P2TR script");
   }
@@ -1771,10 +1809,6 @@ function enforcePayToAsset(destinationPkScript, asset, strict) {
     "INSPECTOUTASSETLOOKUP",
     "VERIFY",
     // PRESENT on the output, not merely "zero of it"
-    // The quoted bound, when the caller opted in — added to the input
-    // comparison below, not substituted for it. `DUP` because the output's
-    // asset amount is needed twice.
-    ...strict?.assetAmount === void 0 ? [] : ["DUP", strict.assetAmount, "GREATERTHANOREQUAL", "VERIFY"],
     "PUSHCURRENTINPUTINDEX",
     inspectionTxid,
     asset.groupIndex,
@@ -1789,11 +1823,11 @@ function enforcePayToAsset(destinationPkScript, asset, strict) {
     1,
     "EQUALVERIFY",
     // ...then the sat covenant, the same tokens `enforcePayTo` emits.
-    ...satClause(destinationPkScript, strict?.amount)
+    ...satClause(destinationPkScript)
   ]);
 }
-function enforcePayToMaybeAsset(destinationPkScript, asset, strict) {
-  return asset === void 0 ? enforcePayTo(destinationPkScript, strict?.amount) : enforcePayToAsset(destinationPkScript, asset, strict);
+function enforcePayToMaybeAsset(destinationPkScript, asset) {
+  return asset === void 0 ? enforcePayTo(destinationPkScript) : enforcePayToAsset(destinationPkScript, asset);
 }
 
 // src/contracts/handlers/vhtlc.ts
@@ -1810,9 +1844,9 @@ var VHTLCContractHandler = {
       server: base.hex.encode(params.server),
       hash: base.hex.encode(params.preimageHash),
       refundLocktime: params.refundLocktime.toString(),
-      claimDelay: chunkZIRFXBKL_cjs.timelockToSequence(params.unilateralClaimDelay).toString(),
-      refundDelay: chunkZIRFXBKL_cjs.timelockToSequence(params.unilateralRefundDelay).toString(),
-      refundNoReceiverDelay: chunkZIRFXBKL_cjs.timelockToSequence(
+      claimDelay: chunkEJOFL5WH_cjs.timelockToSequence(params.unilateralClaimDelay).toString(),
+      refundDelay: chunkEJOFL5WH_cjs.timelockToSequence(params.unilateralRefundDelay).toString(),
+      refundNoReceiverDelay: chunkEJOFL5WH_cjs.timelockToSequence(
         params.unilateralRefundWithoutReceiverDelay
       ).toString()
     };
@@ -1824,9 +1858,9 @@ var VHTLCContractHandler = {
       server: base.hex.decode(params.server),
       preimageHash: base.hex.decode(params.hash),
       refundLocktime: BigInt(params.refundLocktime),
-      unilateralClaimDelay: chunkZIRFXBKL_cjs.sequenceToTimelock(Number(params.claimDelay)),
-      unilateralRefundDelay: chunkZIRFXBKL_cjs.sequenceToTimelock(Number(params.refundDelay)),
-      unilateralRefundWithoutReceiverDelay: chunkZIRFXBKL_cjs.sequenceToTimelock(
+      unilateralClaimDelay: chunkEJOFL5WH_cjs.sequenceToTimelock(Number(params.claimDelay)),
+      unilateralRefundDelay: chunkEJOFL5WH_cjs.sequenceToTimelock(Number(params.refundDelay)),
+      unilateralRefundWithoutReceiverDelay: chunkEJOFL5WH_cjs.sequenceToTimelock(
         Number(params.refundNoReceiverDelay)
       )
     };
@@ -2065,46 +2099,46 @@ var VHTLCV2ContractHandler = {
     return new exports.VHTLC.ScriptV2(typed);
   },
   serializeParams(params) {
+    const covenants = params.nonInteractiveParameters;
     return {
       sender: base.hex.encode(params.sender),
       receiver: base.hex.encode(params.receiver),
       server: base.hex.encode(params.server),
       hash: base.hex.encode(params.preimageHash),
       refundLocktime: params.refundLocktime.toString(),
-      claimDelay: chunkZIRFXBKL_cjs.timelockToSequence(params.unilateralClaimDelay).toString(),
-      refundDelay: chunkZIRFXBKL_cjs.timelockToSequence(params.unilateralRefundDelay).toString(),
-      refundNoReceiverDelay: chunkZIRFXBKL_cjs.timelockToSequence(
+      claimDelay: chunkEJOFL5WH_cjs.timelockToSequence(params.unilateralClaimDelay).toString(),
+      refundDelay: chunkEJOFL5WH_cjs.timelockToSequence(params.unilateralRefundDelay).toString(),
+      refundNoReceiverDelay: chunkEJOFL5WH_cjs.timelockToSequence(
         params.unilateralRefundWithoutReceiverDelay
       ).toString(),
+      // The on-disk keys keep their per-leaf names even though the typed
+      // param is ONE group: rows written by older SDKs carry exactly
+      // these keys, and changing the storage encoding would orphan them.
+      // The group maps onto them without loss — one emulator key serves
+      // both covenant destinations by construction (see the option's doc
+      // on VHTLC.Options), so the two emulator-key columns always hold
+      // the same value on a row written from here.
+      //
       // Spread rather than written as `undefined`: a `Record<string,
       // string>` round-tripped through a repository must not gain keys
       // whose value is the string "undefined".
-      ...params.nonInteractiveClaim && {
-        nonInteractiveClaimReceiverPkScript: base.hex.encode(
-          params.nonInteractiveClaim.receiverPkScript
-        ),
-        nonInteractiveClaimEmulatorPubkey: base.hex.encode(
-          params.nonInteractiveClaim.emulatorPubkey
-        ),
-        // The opt-in quoted bound. Dropping it re-derives the DEFAULT
-        // claim covenant — a strictly weaker one — and registration dies
-        // at `upsertContractRow` with an opaque `Script mismatch`. Same
-        // silent-drop class as the asset keys above.
-        ...params.nonInteractiveClaim.strict && {
-          strictClaimAmount: params.nonInteractiveClaim.strict.amount.toString(),
-          ...params.nonInteractiveClaim.strict.assetAmount !== void 0 && {
-            strictClaimAssetAmount: params.nonInteractiveClaim.strict.assetAmount.toString()
-          }
+      ...covenants && {
+        nonInteractiveClaimReceiverPkScript: base.hex.encode(covenants.receiverPkScript),
+        nonInteractiveClaimEmulatorPubkey: base.hex.encode(covenants.emulatorPubkey),
+        nonInteractiveRefundSenderPkScript: base.hex.encode(covenants.senderPkScript),
+        nonInteractiveRefundEmulatorPubkey: base.hex.encode(covenants.emulatorPubkey),
+        // The legacy marker is precisely the ABSENCE of this key: a
+        // row carrying it re-derives the full suite (nine leaves), a
+        // row lacking it the pre-timelocked-refund eight — the same
+        // encoding older SDKs wrote for eight-leaf rows, so those rows
+        // read back unchanged. Spread rather than a "false"/"undefined"
+        // string: a dropped flag re-derives the EIGHT-leaf script, a
+        // different pkScript, and registration dies at
+        // `upsertContractRow` with an opaque `Script mismatch`.
+        ...covenants.legacy === void 0 && {
+          nonInteractiveRefundWithoutReceiver: "1"
         }
       },
-      ...params.nonInteractiveRefund && {
-        nonInteractiveRefundSenderPkScript: base.hex.encode(
-          params.nonInteractiveRefund.senderPkScript
-        ),
-        nonInteractiveRefundEmulatorPubkey: base.hex.encode(
-          params.nonInteractiveRefund.emulatorPubkey
-        )
-      },
       // The asset must round-trip, and its absence here used to be silent
       // in the worst way. `ContractManager` re-derives a contract from
       // these params; dropping the asset derives the SAT-ONLY script, so
@@ -2133,14 +2167,34 @@ var VHTLCV2ContractHandler = {
       "nonInteractiveRefundEmulatorPubkey",
       "nonInteractiveRefund"
     );
+    if (claim === void 0 !== (refund === void 0)) {
+      throw new Error(
+        "emulator covenant params are all-or-nothing: the claim keys (nonInteractiveClaim*) and the refund keys (nonInteractiveRefund*) must both be present or both absent \u2014 a row carrying one side was written for a leaf subset this handler no longer derives"
+      );
+    }
+    if (claim && refund && base.hex.encode(claim.emulatorPubkey) !== base.hex.encode(refund.emulatorPubkey)) {
+      throw new Error(
+        "emulator covenant params name two different emulator pubkeys: the suite derives both covenant cosigners from ONE key, so this row cannot be rebuilt as a group"
+      );
+    }
     if (params.assetTxid === void 0 !== (params.assetGroupIndex === void 0)) {
       throw new Error(
         "asset params are incomplete: assetTxid and assetGroupIndex must both be present or both absent"
       );
     }
-    if (params.strictClaimAssetAmount !== void 0 && params.strictClaimAmount === void 0) {
+    if (params.strictClaimAmount !== void 0 || params.strictClaimAssetAmount !== void 0) {
       throw new Error(
-        "strictClaimAssetAmount without strictClaimAmount: reading this as 'not strict' would re-derive the default claim covenant, which is weaker than the row asked for"
+        "strict claim params on a stored row: the strict claim bound was removed and this row's lockup cannot be re-derived without it \u2014 restore it with the SDK version that wrote it"
+      );
+    }
+    if (params.nonInteractiveRefundWithoutReceiver !== void 0 && !refund) {
+      throw new Error(
+        "nonInteractiveRefundWithoutReceiver without the emulator covenant keys it extends: reading this as 'not set' would re-derive a script without the leaf"
+      );
+    }
+    if (params.nonInteractiveRefundWithoutReceiver !== void 0 && params.nonInteractiveRefundWithoutReceiver !== "1") {
+      throw new Error(
+        `nonInteractiveRefundWithoutReceiver must be "1" when present, got ` + JSON.stringify(params.nonInteractiveRefundWithoutReceiver)
       );
     }
     const asset = params.assetTxid !== void 0 && params.assetGroupIndex !== void 0 ? {
@@ -2154,30 +2208,22 @@ var VHTLCV2ContractHandler = {
       preimageHash: base.hex.decode(params.hash),
       refundLocktime: BigInt(params.refundLocktime),
       ...asset && { asset },
-      unilateralClaimDelay: chunkZIRFXBKL_cjs.sequenceToTimelock(Number(params.claimDelay)),
-      unilateralRefundDelay: chunkZIRFXBKL_cjs.sequenceToTimelock(Number(params.refundDelay)),
-      unilateralRefundWithoutReceiverDelay: chunkZIRFXBKL_cjs.sequenceToTimelock(
+      unilateralClaimDelay: chunkEJOFL5WH_cjs.sequenceToTimelock(Number(params.claimDelay)),
+      unilateralRefundDelay: chunkEJOFL5WH_cjs.sequenceToTimelock(Number(params.refundDelay)),
+      unilateralRefundWithoutReceiverDelay: chunkEJOFL5WH_cjs.sequenceToTimelock(
         Number(params.refundNoReceiverDelay)
       ),
-      ...claim && {
-        nonInteractiveClaim: {
+      ...claim && refund && {
+        nonInteractiveParameters: {
           receiverPkScript: claim.destination,
+          senderPkScript: refund.destination,
           emulatorPubkey: claim.emulatorPubkey,
-          ...params.strictClaimAmount !== void 0 && {
-            strict: {
-              amount: BigInt(params.strictClaimAmount),
-              ...params.strictClaimAssetAmount !== void 0 && {
-                assetAmount: BigInt(params.strictClaimAssetAmount)
-              }
-            }
+          // Absence of the flag IS the legacy marker — the same
+          // encoding older SDKs wrote for eight-leaf rows.
+          ...params.nonInteractiveRefundWithoutReceiver !== "1" && {
+            legacy: "preTimelockedRefund"
           }
         }
-      },
-      ...refund && {
-        nonInteractiveRefund: {
-          senderPkScript: refund.destination,
-          emulatorPubkey: refund.emulatorPubkey
-        }
       }
     };
   },
@@ -2437,7 +2483,7 @@ var BoardingContractHandler = {
     const coins = await deps.onchainProvider.getCoins(onchainAddress);
     if (coins.length === 0) return [];
     const scriptHex = base.hex.encode(script.pkScript);
-    const boardingSeq = chunkZIRFXBKL_cjs.timelockToSequence(deps.boardingTimelock);
+    const boardingSeq = chunkEJOFL5WH_cjs.timelockToSequence(deps.boardingTimelock);
     return [
       {
         type: "boarding",
@@ -2598,27 +2644,27 @@ function encodeTapscriptSegment(seg, pubkeys, args) {
   if (seg.csv) {
     const timelock = { type: seg.csv.type, value: resolveTimelockValue(seg.csv.value, args) };
     if (seg.asm) {
-      return chunkZIRFXBKL_cjs.ConditionCSVMultisigTapscript.encode({
+      return chunkEJOFL5WH_cjs.ConditionCSVMultisigTapscript.encode({
         conditionScript: resolveAsm(seg.asm, args),
         timelock,
         pubkeys
       });
     }
-    return chunkZIRFXBKL_cjs.CSVMultisigTapscript.encode({ timelock, pubkeys });
+    return chunkEJOFL5WH_cjs.CSVMultisigTapscript.encode({ timelock, pubkeys });
   }
   if (seg.cltv !== void 0) {
-    return chunkZIRFXBKL_cjs.CLTVMultisigTapscript.encode({
+    return chunkEJOFL5WH_cjs.CLTVMultisigTapscript.encode({
       absoluteTimelock: resolveTimelockValue(seg.cltv, args),
       pubkeys
     });
   }
   if (seg.asm) {
-    return chunkZIRFXBKL_cjs.ConditionMultisigTapscript.encode({
+    return chunkEJOFL5WH_cjs.ConditionMultisigTapscript.encode({
       conditionScript: resolveAsm(seg.asm, args),
       pubkeys
     });
   }
-  return chunkZIRFXBKL_cjs.MultisigTapscript.encode({ pubkeys });
+  return chunkEJOFL5WH_cjs.MultisigTapscript.encode({ pubkeys });
 }
 function compileFunctions(program, args, keys) {
   if (program.version !== SUPPORTED_PROGRAM_VERSION) {
@@ -2648,7 +2694,7 @@ function compileFunctions(program, args, keys) {
     return { name: names[i], def, leafScript, arkadeScript, signerKeys: pubkeys };
   });
 }
-var ArkadeProgramScript = class extends chunkZIRFXBKL_cjs.VtxoScript {
+var ArkadeProgramScript = class extends chunkEJOFL5WH_cjs.VtxoScript {
   constructor(program, args, keys) {
     const partial = compileFunctions(program, args, keys);
     super(partial.map((p) => p.leafScript));
@@ -2861,7 +2907,7 @@ function pathsFor(script, context, opts) {
       continue;
     }
     if (requiresServer) continue;
-    const sequence = csv ? Number(chunkZIRFXBKL_cjs.timelockToSequence(csv)) : void 0;
+    const sequence = csv ? Number(chunkEJOFL5WH_cjs.timelockToSequence(csv)) : void 0;
     if (opts.checkTimelocks && csv && !isCsvSpendable(context, sequence)) continue;
     if (opts.checkTimelocks && cltv !== void 0 && !isCltvSatisfied(context, cltv)) {
       continue;
@@ -2990,5 +3036,5 @@ exports.toASM = toASM;
 exports.toXOnly = toXOnly;
 exports.validateProgram = validateProgram;
 exports.witnessRefToBytes = witnessRefToBytes;
-//# sourceMappingURL=chunk-PXPPZF5K.cjs.map
-//# sourceMappingURL=chunk-PXPPZF5K.cjs.map
+//# sourceMappingURL=chunk-6YUACVX4.cjs.map
+//# sourceMappingURL=chunk-6YUACVX4.cjs.map