@arkade-os/sdk 0.4.67 → 0.4.68

package/dist/{chunk-AEWJU6NZ.js → chunk-VBHXBI7F.js}

@@ -1,6 +1,6 @@
-import { AssetId, AssetGroup, AssetInput, AssetOutput, Metadata, Packet, BufferReader, BufferWriter, AssetRef, RestIndexerProvider } from './chunk-X3VEMUVV.js';
-import { witnessRefToBytes, validateProgram, toASM, stringifyArtifact, serializeArkadeContractParams, resolveAsm, parseArtifact, getOpcodeValue, getOpcodeName, fromASM, deserializeArkadeContractParams, computeArkadeScriptPublicKey, bytesToASM, asmToBytes, arkadeWitnessHash, arkadeScriptHash, SUPPORTED_PROGRAM_VERSION, OPCODE_VALUES, OPCODE_NAMES, bignum_exports, ArkadeScript, ArkadeProgramScript, ARKADE_OPS, ARKADE_OPCODE_VALUES, ARKADE_OPCODE_NAMES, ARKADE_OPCODES, ARKADE_OP, toXOnly, inputName, contractHandlers, isMainnetDescriptor, descriptorIsOurs, deriveDescriptorLeafPubKey, deriveDescriptorLeafCompressedPubKey, parseHDDescriptor, identityDescriptor, DefaultVtxo, speculativeReceiveMetadata, DelegateVtxo, WALLET_RECEIVE_SOURCE, BoardingContractHandler } from './chunk-6TAQF6EV.js';
-import { VtxoScript, Transaction, isRecoverable, CSVMultisigTapscript, DEFAULT_NETWORK, resolveEmulatorPubkey, hasTerminalSpend, getNormalizedVtxos, setArkPsbtField, PrevArkTxField, ConditionWitness, craftToSpendTx, ArkAddress, isVirtualCoin, getArkPsbtFields, CosignerPublicKey, ServerResponseMismatchError, OP_RETURN_EMPTY_PKSCRIPT, canSweepOnchain, sequenceToTimelock, decodeTapscript, scriptFromTapLeafScript, CLTVMultisigTapscript, VtxoTaprootTree, timelockToSequence, baseFetch, Intent, rateGate, DEFAULT_NETWORK_NAME, normalizeVtxo, getSequence, toBatchExpiry, maybeArkError, isArkError, ArkErrorName, toOffchainInputFeeParams, canRecoverOnchain, getNetwork, MultisigTapscript, isEventSourceError, isEventSourceUnavailableError, isRetryableProviderError, getAllNormalizedVtxos, DEFAULT_PAGE_SIZE, RestArkProvider, toVirtualStatus, ArkError, TapTreeCoder, resolveTimeHeight, canSpendOffchain, parseLegacyExpiry, isExpired, PrevoutTxField, DEFAULT_ARKADE_SERVER_URL, ProviderUnavailableError, networks as networks$1, isPastExpiry, fetchVtxoCreatedAtByTxid } from './chunk-3WIWNE4P.js';
+import { AssetId, AssetGroup, AssetInput, AssetOutput, Metadata, Packet, BufferReader, BufferWriter, AssetRef, RestIndexerProvider } from './chunk-33Q2RFET.js';
+import { witnessRefToBytes, validateProgram, toASM, stringifyArtifact, serializeArkadeContractParams, resolveAsm, parseArtifact, getOpcodeValue, getOpcodeName, fromASM, deserializeArkadeContractParams, computeArkadeScriptPublicKey, bytesToASM, asmToBytes, arkadeWitnessHash, arkadeScriptHash, SUPPORTED_PROGRAM_VERSION, OPCODE_VALUES, OPCODE_NAMES, bignum_exports, ArkadeScript, ArkadeProgramScript, ARKADE_OPS, ARKADE_OPCODE_VALUES, ARKADE_OPCODE_NAMES, ARKADE_OPCODES, ARKADE_OP, toXOnly, inputName, contractHandlers, isMainnetDescriptor, descriptorIsOurs, deriveDescriptorLeafPubKey, deriveDescriptorLeafCompressedPubKey, parseHDDescriptor, identityDescriptor, DefaultVtxo, speculativeReceiveMetadata, DelegateVtxo, WALLET_RECEIVE_SOURCE, BoardingContractHandler } from './chunk-45FKMOJH.js';
+import { VtxoScript, Transaction, isRecoverable, CSVMultisigTapscript, DEFAULT_NETWORK, resolveEmulatorPubkey, hasTerminalSpend, getNormalizedVtxos, setArkPsbtField, PrevArkTxField, ConditionWitness, craftToSpendTx, ArkAddress, isVirtualCoin, getArkPsbtFields, CosignerPublicKey, ServerResponseMismatchError, OP_RETURN_EMPTY_PKSCRIPT, canSweepOnchain, sequenceToTimelock, decodeTapscript, scriptFromTapLeafScript, CLTVMultisigTapscript, VtxoTaprootTree, timelockToSequence, assertAllowedSighashTypes, baseFetch, Intent, rateGate, DEFAULT_NETWORK_NAME, formatSighash, normalizeVtxo, getSequence, toBatchExpiry, maybeArkError, isArkError, ArkErrorName, toOffchainInputFeeParams, canRecoverOnchain, getNetwork, MultisigTapscript, isEventSourceError, isEventSourceUnavailableError, isRetryableProviderError, getAllNormalizedVtxos, DEFAULT_PAGE_SIZE, RestArkProvider, toVirtualStatus, ArkError, TapTreeCoder, resolveTimeHeight, canSpendOffchain, parseLegacyExpiry, isExpired, PrevoutTxField, DEFAULT_ARKADE_SERVER_URL, ProviderUnavailableError, networks as networks$1, isPastExpiry, fetchVtxoCreatedAtByTxid } from './chunk-4CMXV5SF.js';
 import { __export } from './chunk-NSBPE2FW.js';
 import { sha256 as sha256$1, equalBytes, hash160, sha256x2, concatBytes, randomPrivateKeyBytes, pubECDSA, pubSchnorr } from '@scure/btc-signer/utils.js';
 import { SigHash, Script, OP, OutScript, Address, RawWitness, p2tr, p2wpkh, TaprootControlBlock, DEFAULT_SEQUENCE, Transaction as Transaction$2 } from '@scure/btc-signer';
@@ -272,7 +272,7 @@ function getPrevOutput(finalKey, graph, sharedOutputAmount, tx) {
     script: pkScript
   };
 }
-var ALL_SIGHASH = Object.values(SigHash).filter((x) => typeof x === "number");
+var ALLOWED_SIGHASH = [SigHash.DEFAULT, SigHash.ALL, SigHash.ALL_ANYONECANPAY];
 var SingleKey = class _SingleKey {
   key;
   constructor(key) {
@@ -301,8 +301,9 @@ var SingleKey = class _SingleKey {
   async sign(tx, inputIndexes) {
     const txCpy = tx.clone();
     if (!inputIndexes) {
+      assertAllowedSighashTypes(txCpy, ALLOWED_SIGHASH);
       try {
-        if (!txCpy.sign(this.key, ALL_SIGHASH)) {
+        if (!txCpy.sign(this.key, ALLOWED_SIGHASH)) {
           throw new Error("Failed to sign transaction");
         }
       } catch (e) {
@@ -313,7 +314,7 @@ var SingleKey = class _SingleKey {
       return txCpy;
     }
     for (const inputIndex of inputIndexes) {
-      if (!txCpy.signIdx(this.key, inputIndex, ALL_SIGHASH)) {
+      if (!txCpy.signIdx(this.key, inputIndex, ALLOWED_SIGHASH)) {
         throw new Error(`Failed to sign input #${inputIndex}`);
       }
     }
@@ -378,7 +379,7 @@ var ReadonlySingleKey = class _ReadonlySingleKey {
     return Promise.resolve(this.publicKey);
   }
 };
-var ALL_SIGHASH2 = Object.values(SigHash).filter((x) => typeof x === "number");
+var ALLOWED_SIGHASH2 = [SigHash.DEFAULT, SigHash.ALL, SigHash.ALL_ANYONECANPAY];
 var seedBytes = /* @__PURE__ */ new WeakMap();
 var mnemonicMeta = /* @__PURE__ */ new WeakMap();
 var SeedIdentity = class _SeedIdentity {
@@ -581,8 +582,9 @@ var SeedIdentity = class _SeedIdentity {
   signTxWithKey(tx, key, inputIndexes) {
     const txCpy = tx.clone();
     if (!inputIndexes) {
+      assertAllowedSighashTypes(txCpy, ALLOWED_SIGHASH2);
       try {
-        if (!txCpy.sign(key, ALL_SIGHASH2)) {
+        if (!txCpy.sign(key, ALLOWED_SIGHASH2)) {
           throw new Error("Failed to sign transaction");
         }
       } catch (e) {
@@ -592,7 +594,7 @@ var SeedIdentity = class _SeedIdentity {
       }
     } else {
       for (const idx of inputIndexes) {
-        if (!txCpy.signIdx(key, idx, ALL_SIGHASH2)) {
+        if (!txCpy.signIdx(key, idx, ALLOWED_SIGHASH2)) {
           throw new Error(`Failed to sign input #${idx}`);
         }
       }
@@ -3085,9 +3087,6 @@ function hasBoardingTxExpired(coin, boardingTimelock, chainTipHeight) {
   const blockTime = BigInt(Math.floor(coin.status.block_time));
   return blockTime + boardingTimelock.value <= now;
 }
-function formatSighash(type) {
-  return `0x${type.toString(16).padStart(2, "0")}`;
-}
 function verifyTapscriptSignatures(tx, inputIndex, requiredSigners, excludePubkeys = [], allowedSighashTypes = [SigHash.DEFAULT], expectedLeafHash) {
   const input = tx.getInput(inputIndex);
   const prevoutScripts = [];
@@ -3305,6 +3304,15 @@ async function submitOffchainTx(provider, offchainTx, signer, hooks, options) {
   assertSubmittedArkTxid(response, signedArkTx, "submitTx");
   const { arkTxid, signedCheckpointTxs } = response;
   const matched = matchServerCheckpoints(signedCheckpointTxs, offchainTx.checkpoints, "submitTx");
+  matched.forEach(({ server }, index) => {
+    try {
+      assertAllowedSighashTypes(server);
+    } catch (error) {
+      throw new ServerResponseMismatchError(
+        `submitTx checkpoint ${index}: ${error instanceof Error ? error.message : String(error)}`
+      );
+    }
+  });
   const verify = options?.verifyServerSignatures;
   if (verify) {
     if (response.finalArkTx === void 0) {
@@ -3906,6 +3914,7 @@ function getRecoverableWithSubdust(vtxos, dustAmount, now) {
   };
 }
 function isVtxoExpiringSoon(vtxo, thresholdMs) {
+  if (vtxo.isUnrolled) return false;
   const realThresholdMs = thresholdMs <= 100 ? DEFAULT_THRESHOLD_MS : thresholdMs;
   const expiresAt = normalizeVtxo(vtxo).expiresAt;
   if (expiresAt === void 0) return false;
@@ -3916,7 +3925,9 @@ function isVtxoExpiringSoon(vtxo, thresholdMs) {
 }
 function getExpiringAndRecoverableVtxos(vtxos, thresholdMs, dustAmount, now) {
   return vtxos.filter(
-    (vtxo) => isVtxoExpiringSoon(vtxo, thresholdMs) || canRecoverOnchain(vtxo, now) || isSubdust(vtxo, dustAmount)
+    // The leading exclusion covers the `isSubdust` arm too, which is a value
+    // property and would otherwise re-admit an exited coin on its own.
+    (vtxo) => !vtxo.isUnrolled && (isVtxoExpiringSoon(vtxo, thresholdMs) || canRecoverOnchain(vtxo, now) || isSubdust(vtxo, dustAmount))
   );
 }
 function isMigrationCapable(wallet) {
@@ -6448,6 +6459,13 @@ var TxTree = class {
     if (nbOfInputs !== 1) {
       throw new Error(`unexpected number of inputs: ${nbOfInputs}, expected 1`);
     }
+    if (this.root.lockTime !== 0) {
+      throw new Error(`unexpected locktime: ${this.root.lockTime}, expected 0`);
+    }
+    const sequence = this.root.getInput(0).sequence;
+    if (sequence !== void 0 && sequence !== DEFAULT_SEQUENCE) {
+      throw new Error(`unexpected sequence: ${sequence}, expected ${DEFAULT_SEQUENCE}`);
+    }
     if (this.children.size > nbOfOutputs - 1) {
       throw new Error(
         `unexpected number of children: ${this.children.size}, expected maximum ${nbOfOutputs - 1}`
@@ -12079,6 +12097,7 @@ function filterSnapshotVtxos(snapshot, filter, pendingSpendOutpoints) {
   });
 }
 var PENDING_RECOVERY_REASON = "is past its operator signer's rotation cutoff \u2014 the operator will not co-sign it until it recovers";
+var UNROLLED_REASON = "was unilaterally exited and lives onchain \u2014 `Unroll.completeUnroll` is the only spend that reaches it";
 function omittedOutpoints(before, after) {
   if (before.length === after.length) return /* @__PURE__ */ new Set();
   const kept = new Set(after.map((vtxo) => `${vtxo.txid}:${vtxo.vout}`));
@@ -12651,6 +12670,13 @@ var ReadonlyWallet = class _ReadonlyWallet {
         "is locked by an in-flight settlement intent"
       )
     ]);
+    if (!filter?.withUnrolled) {
+      logExcludedVtxos(
+        "getSpendableVtxos",
+        snapshot.flatMap((contract) => contract.vtxos).filter((vtxo) => vtxo.isUnrolled && !hasTerminalSpend(vtxo)),
+        [() => UNROLLED_REASON]
+      );
+    }
     return unlocked;
   }
   /**
@@ -15203,9 +15229,11 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
           seen.add(pendingTx.arkTxid);
           batchPending.push(pendingTx.arkTxid);
           try {
-            const checkpointTxs = pendingTx.signedCheckpointTxs.map(
-              (c) => Transaction$2.fromPSBT(base64.decode(c))
-            );
+            const checkpointTxs = pendingTx.signedCheckpointTxs.map((c) => {
+              const tx = Transaction$2.fromPSBT(base64.decode(c));
+              assertAllowedSighashTypes(tx);
+              return tx;
+            });
             assertCheckpointsMatchInputs(
               checkpointTxs,
               checkpointInputs,
@@ -15373,7 +15401,9 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const myPkScript = ArkAddress.decode(await this.getAddress()).pkScript;
     let { spendable, unclaimed } = this.classifyCashVtxos(vtxos);
     let swept = 0;
-    const drainable = vtxos.filter((vtxo) => !isSubdust(vtxo, this.dustAmount));
+    const drainable = vtxos.filter(
+      (vtxo) => !isSubdust(vtxo, this.dustAmount) && !vtxo.isUnrolled
+    );
     if (drainable.length > 0) {
       let drained = { count: 0, swept: 0, claimed: /* @__PURE__ */ new Set() };
       try {
@@ -15533,9 +15563,11 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const unrollCandidates = this.checkpointUnrollCandidates(await this.arkProvider.getInfo());
     for (const pendingTx of pendingTxs) {
       try {
-        const checkpointTxs = pendingTx.signedCheckpointTxs.map(
-          (checkpoint) => Transaction$2.fromPSBT(base64.decode(checkpoint))
-        );
+        const checkpointTxs = pendingTx.signedCheckpointTxs.map((checkpoint) => {
+          const tx = Transaction$2.fromPSBT(base64.decode(checkpoint));
+          assertAllowedSighashTypes(tx);
+          return tx;
+        });
         assertCheckpointsMatchInputs(
           checkpointTxs,
           inputs.map((input) => ({
@@ -22834,6 +22866,10 @@ var ArkadeContract = class _ArkadeContract {
    * When a `contractManager` is configured and this contract is registered,
    * reads the repository-backed state (offline-first, kept fresh by the
    * contract watcher). Otherwise falls back to a direct indexer query.
+   *
+   * Both branches refuse a spent or unilaterally exited output. They are not
+   * otherwise interchangeable: the fallback asks `spendableOnly`, which also
+   * drops swept coins — the manager branch keeps those.
    */
   async getUtxos() {
     const manager = this.client.contractManager;
@@ -22854,7 +22890,7 @@ var ArkadeContract = class _ArkadeContract {
       scripts: [scriptHex],
       spendableOnly: true
     });
-    return vtxos;
+    return vtxos.filter((v) => !hasTerminalSpend(v) && !v.isUnrolled);
   }
   /** Total spendable balance (requires an indexer). */
   async getBalance() {
@@ -23473,5 +23509,5 @@ function createDefaultPaymentRouter(wallet) {
 */
 
 export { ARKADE_MAGIC, ARKADE_SALTED_PREIMAGE_TAG, ARKADE_SWAP_PREIMAGE_TAG, ActivityRegistry, AmbiguousRouteError, ArkNote, ArkadeCash, ArkadeCashCreateError, AssetManager, BIP21, BIP21Error, BIP322, BLOCKED_UPGRADE_TIMEOUT_MS, Batch, CachingArkProvider, ChainedTxType, ConnectionDisposedError, ContractManager, ContractRepositoryImpl, ContractWatcher, DB_VERSION, DEFAULT_MESSAGE_TIMEOUTS, DEFAULT_MIN_BATCH_EXPIRY_SECONDS, DEFAULT_MIN_CHECKPOINT_EXIT_DELAY_SECONDS, DatabaseUpgradeBlockedError, DelegateManagerImpl, DelegateNotConfiguredError, DelegatorManagerImpl, DelegatorNotConfiguredError, DescriptorIdentity, DescriptorSigningProviderMissingError, DustChangeError, ELECTRUM_TCP_HOST, ELECTRUM_WS_URL, ESPLORA_URL, ElectrumOnchainProvider, EmulatorPacket, EsploraProvider, Estimator, Extension, ExtensionNotFoundError, ForeignDescriptorError, HDDescriptorProvider, INTENT_TERMINAL_STATES, InMemoryContractRepository, InMemoryIntentRepository, InMemoryVirtualTxRepository, InMemoryWalletRepository, IndexedDBContractRepository, IndexedDBIntentRepository, IndexedDBVirtualTxRepository, IndexedDBWalletRepository, MAX_USED_SIGNING_DESCRIPTORS_LOOK_AHEAD, MESSAGE_BUS_INITIALIZING, MESSAGE_BUS_NOT_INITIALIZED, MIGRATION_KEY, MUTINYNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS, MessageBus, MessageBusInitializingError, MessageBusNotInitializedError, MissingSigningDescriptorError, MnemonicIdentity, OnchainWallet, P2A, PaymentRouter, PrevTxUnavailableError, REGTEST_MIN_BATCH_EXPIRY_SECONDS, REGTEST_MIN_CHECKPOINT_EXIT_DELAY_SECONDS, Ramps, ReadonlyAssetManager, ReadonlyDescriptorIdentity, ReadonlySingleKey, ReadonlyWallet, ReadonlyWalletError, RestDelegateProvider, RestDelegatorProvider, RestEmulatorProvider, SIGNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS, SeedIdentity, ServiceWorkerReadonlyWallet, ServiceWorkerTimeoutError, ServiceWorkerWallet, SingleKey, TxTree, TxType, TxWeightEstimator, UnannotatableInputError, UnilateralExit, UnknownPacket, Unroll, VtxoManager, Wallet2 as Wallet, WalletCannotAllocateAddressError, WalletCannotSignError, WalletMessageHandler, WalletNotInitializedError, WalletRepositoryImpl, WsElectrumChainSource, adoptContractDescriptor, arkRail, arkTarget, arkade_exports, assertFinalCommitmentMatchesValidated, assertIntentIdUnique, assertSendableAmount, assertSubmittedArkTxid, assertValidBatchExpiry, assertValidServerUnrollScript, assetMintResolver, attachPrevArkTxs, attachPrevoutTxs, awaitTransaction, boardingResolver, btcTarget, buildForfeitTx, buildOffchainTx, buildPreimageMessage, buildSaltedPreimageMessage, claimWithPreimageIdentity, classifyAgainstSignerSet, classifyContractSigner, closeDatabase, collabExitResolver, combineTapscriptSigs, contractFromArkContract, contractFromArkContractWithAddress, contractPreimage, contractSigner, createAssetPacket, createDefaultActivityRegistry, createDefaultPaymentRouter, createExitChainResolver, createManagedConnection, decodeArkContract, defaultBatchExpiryPolicy, defaultCheckpointExitDelayPolicy, deleteByIndex, deserializeAssets, deserializeExitPackage, deserializeUtxo, deserializeVtxo, encodeArkContract, exitObserverFor, extendVirtualCoinForContract, extractArkProviderUrl, gateExclusion, gatedContracts, getAllByIndexValues, getMigrationStatus, getRandomId, hasBoardingTxExpired, hasCandidates, intentMatchesFilter, intentPageBounds, invoiceTarget, isAddressAllocationCapable, isArkContract, isBatchSignable, isBtcAddress, isContractGenericallySpendable, isCooperativelyMigratable, isDeterministicSigner, isDiscoverable, isHDAllocationCapable, isHDDeterministicSignCapable, isHDWalletCapable, isLightningInvoice, isLnurl, isMessageBusInitializingError, isMessageBusNotInitializedError, isPerArtifactDescriptor, isSigningIdentity, isSubdust, isTerminalIntentState, isValidArkAddress, isVtxoExpiringSoon, isVtxoForScript, isWatchedContract, logExcludedVtxos, makeHandle, matchServerCheckpoints, mergeChainedTxType, migrateWalletRepository, notifyExitObserved, onchainRail, openDatabase, outpointExclusion, outpointReasons, promisifyRequest, provisionClaimSecret, provisionRefundKey, requiresMigration, resolveBatchExpiryPolicy, resolveCheckpointExitDelayPolicy, resolveDescriptorSigner, resolvePrevTxs, resolveSendAmount, rollbackMigration, saveVtxosForContract, scriptFromArkAddress, selectCoinsWithAsset, selectVirtualCoins, serializeAssets, serializeExitPackage, serializeUtxo, serializeVtxo, setupServiceWorker, signAndSubmitOffchainTx, signerSetFromInfo, signingDescriptorIndex, strictSigningDescriptorIndex, toXOnlySignerHex, tryResolveSendAmount, validateBatchRecipients, validateConnectorsTxGraph, validateVtxoTxGraph, verifyTapscriptSignatures, waitForIncomingFunds, warnAndFilterVtxosForScript, withPrevTxs };
-//# sourceMappingURL=chunk-AEWJU6NZ.js.map
-//# sourceMappingURL=chunk-AEWJU6NZ.js.map
+//# sourceMappingURL=chunk-VBHXBI7F.js.map
+//# sourceMappingURL=chunk-VBHXBI7F.js.map