@arkade-os/sdk 0.4.67 → 0.4.69

package/dist/contracts/handlers/index.cjs

@@ -1,38 +1,38 @@
 'use strict';
 
-var chunkOIZ2V2VD_cjs = require('../../chunk-OIZ2V2VD.cjs');
-require('../../chunk-2JV4VQ7C.cjs');
+var chunkWIFL5QYZ_cjs = require('../../chunk-WIFL5QYZ.cjs');
+require('../../chunk-5MLC2HU3.cjs');
 require('../../chunk-5BLDMQED.cjs');
 
 
 
 Object.defineProperty(exports, "ArkadeContractHandler", {
   enumerable: true,
-  get: function () { return chunkOIZ2V2VD_cjs.ArkadeContractHandler; }
+  get: function () { return chunkWIFL5QYZ_cjs.ArkadeContractHandler; }
 });
 Object.defineProperty(exports, "BoardingContractHandler", {
   enumerable: true,
-  get: function () { return chunkOIZ2V2VD_cjs.BoardingContractHandler; }
+  get: function () { return chunkWIFL5QYZ_cjs.BoardingContractHandler; }
 });
 Object.defineProperty(exports, "DefaultContractHandler", {
   enumerable: true,
-  get: function () { return chunkOIZ2V2VD_cjs.DefaultContractHandler; }
+  get: function () { return chunkWIFL5QYZ_cjs.DefaultContractHandler; }
 });
 Object.defineProperty(exports, "DelegateContractHandler", {
   enumerable: true,
-  get: function () { return chunkOIZ2V2VD_cjs.DelegateContractHandler; }
+  get: function () { return chunkWIFL5QYZ_cjs.DelegateContractHandler; }
 });
 Object.defineProperty(exports, "VHTLCContractHandler", {
   enumerable: true,
-  get: function () { return chunkOIZ2V2VD_cjs.VHTLCContractHandler; }
+  get: function () { return chunkWIFL5QYZ_cjs.VHTLCContractHandler; }
 });
 Object.defineProperty(exports, "VHTLCV2ContractHandler", {
   enumerable: true,
-  get: function () { return chunkOIZ2V2VD_cjs.VHTLCV2ContractHandler; }
+  get: function () { return chunkWIFL5QYZ_cjs.VHTLCV2ContractHandler; }
 });
 Object.defineProperty(exports, "contractHandlers", {
   enumerable: true,
-  get: function () { return chunkOIZ2V2VD_cjs.contractHandlers; }
+  get: function () { return chunkWIFL5QYZ_cjs.contractHandlers; }
 });
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/contracts/handlers/index.d.cts

@@ -1,7 +1,7 @@
-export { n as ArkadeContractHandler, B as BoardingContractHandler, o as BoardingContractParams, D as DefaultContractHandler, q as DefaultContractParams, t as DelegateContractHandler, u as DelegateContractParams, x as VHTLCContractHandler, y as VHTLCContractParams, z as VHTLCV2ContractHandler, E as VHTLCV2ContractParams, F as contractHandlers } from '../../index-D2GjZxBr.cjs';
-import '../../index-DU5o_hz7.cjs';
+export { n as ArkadeContractHandler, B as BoardingContractHandler, o as BoardingContractParams, D as DefaultContractHandler, q as DefaultContractParams, t as DelegateContractHandler, u as DelegateContractParams, x as VHTLCContractHandler, y as VHTLCContractParams, z as VHTLCV2ContractHandler, E as VHTLCV2ContractParams, F as contractHandlers } from '../../index-BqhpAqqj.cjs';
+import '../../index-dWRqYSdS.cjs';
 import '@scure/btc-signer/utils.js';
 import '@scure/btc-signer/transaction.js';
 import '@scure/btc-signer';
 import '@scure/btc-signer/psbt.js';
-import '../../delegate-Bz2e2zXY.cjs';
+import '../../delegate-DrwIar11.cjs';

package/dist/contracts/handlers/index.d.ts

@@ -1,7 +1,7 @@
-export { n as ArkadeContractHandler, B as BoardingContractHandler, o as BoardingContractParams, D as DefaultContractHandler, q as DefaultContractParams, t as DelegateContractHandler, u as DelegateContractParams, x as VHTLCContractHandler, y as VHTLCContractParams, z as VHTLCV2ContractHandler, E as VHTLCV2ContractParams, F as contractHandlers } from '../../index-BiACuWaf.js';
-import '../../index-DU5o_hz7.js';
+export { n as ArkadeContractHandler, B as BoardingContractHandler, o as BoardingContractParams, D as DefaultContractHandler, q as DefaultContractParams, t as DelegateContractHandler, u as DelegateContractParams, x as VHTLCContractHandler, y as VHTLCContractParams, z as VHTLCV2ContractHandler, E as VHTLCV2ContractParams, F as contractHandlers } from '../../index-TZJvbIaA.js';
+import '../../index-dWRqYSdS.js';
 import '@scure/btc-signer/utils.js';
 import '@scure/btc-signer/transaction.js';
 import '@scure/btc-signer';
 import '@scure/btc-signer/psbt.js';
-import '../../delegate-cdmzb2f9.js';
+import '../../delegate-BPdzTbwN.js';

package/dist/contracts/handlers/index.js

@@ -1,5 +1,5 @@
-export { ArkadeContractHandler, BoardingContractHandler, DefaultContractHandler, DelegateContractHandler, VHTLCContractHandler, VHTLCV2ContractHandler, contractHandlers } from '../../chunk-6TAQF6EV.js';
-import '../../chunk-3WIWNE4P.js';
+export { ArkadeContractHandler, BoardingContractHandler, DefaultContractHandler, DelegateContractHandler, VHTLCContractHandler, VHTLCV2ContractHandler, contractHandlers } from '../../chunk-2PPL3O7Z.js';
+import '../../chunk-L5SCQYHF.js';
 import '../../chunk-NSBPE2FW.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/{delegate-cdmzb2f9.d.ts → delegate-BPdzTbwN.d.ts}

@@ -1,5 +1,5 @@
 import { Bytes } from '@scure/btc-signer/utils.js';
-import { s as RelativeTimelock, V as VtxoScript, t as TapLeafScript } from './index-DU5o_hz7.js';
+import { s as RelativeTimelock, V as VtxoScript, t as TapLeafScript } from './index-dWRqYSdS.js';
 
 /**
  * DefaultVtxo is the default implementation of a VtxoScript.

package/dist/{delegate-Bz2e2zXY.d.cts → delegate-DrwIar11.d.cts}

@@ -1,5 +1,5 @@
 import { Bytes } from '@scure/btc-signer/utils.js';
-import { s as RelativeTimelock, V as VtxoScript, t as TapLeafScript } from './index-DU5o_hz7.cjs';
+import { s as RelativeTimelock, V as VtxoScript, t as TapLeafScript } from './index-dWRqYSdS.cjs';
 
 /**
  * DefaultVtxo is the default implementation of a VtxoScript.

package/dist/{hdWalletCapable-Hi12xjCJ.d.ts → hdWalletCapable-D4WH35z0.d.cts}

@@ -1,8 +1,8 @@
-import { s as RelativeTimelock, M as Network, P as CSVMultisigTapscript, Q as BatchStartedEvent, U as TreeSigningStartedEvent, X as TxTree, Y as TreeNoncesEvent, Z as BatchFinalizationEvent, _ as BatchFinalizedEvent, $ as BatchFailedEvent, a0 as TreeTxEvent, a1 as TreeSignatureEvent, k as SettlementEvent, b as WalletConfig, W as WalletRepository, C as ContractRepository, a2 as DescriptorProvider, f as IContractManager, a3 as IReadonlyWallet, a4 as ReadonlyIdentity, a5 as OnchainProvider, r as IndexerProvider, a6 as DelegateProvider, a7 as ReadonlyWalletConfig, B as IntentRepository, H as VirtualTxRepository, a8 as ExitCaptureMode, a9 as ExitDataSource, d as ActivityRegistry, aa as IReadonlyAssetManager, ab as ContractSyncState, ac as RecipientAddressContext, q as ArkProvider, ad as NetworkName, ae as ArkInfo, af as ArkAddress, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, ag as ContractWithVtxos, ah as selectPendingRecoveryOutpoints, A as ArkTransaction, e as Activity, E as ExtendedCoin, ai as Coin, w as ExtendedVirtualCoin, aj as ContractManager, ak as ContractManagerConfig, I as IWallet, a as Identity, g as GetNewAddressesOptions, h as NewAddress, al as SettlementConfig, m as IAssetManager, am as VtxoManager, i as IDelegateManager, S as SendBitcoinParams, j as SettleParams, R as Recipient, an as SignerSession, ao as SignedIntent, ap as Intent, l as SendParams, aq as TimeHeight } from './index-DU5o_hz7.js';
+import { s as RelativeTimelock, M as Network, P as CSVMultisigTapscript, Q as BatchStartedEvent, U as TreeSigningStartedEvent, X as TxTree, Y as TreeNoncesEvent, Z as BatchFinalizationEvent, _ as BatchFinalizedEvent, $ as BatchFailedEvent, a0 as TreeTxEvent, a1 as TreeSignatureEvent, k as SettlementEvent, b as WalletConfig, W as WalletRepository, C as ContractRepository, a2 as DescriptorProvider, f as IContractManager, a3 as IReadonlyWallet, a4 as ReadonlyIdentity, a5 as OnchainProvider, r as IndexerProvider, a6 as DelegateProvider, a7 as ReadonlyWalletConfig, B as IntentRepository, H as VirtualTxRepository, a8 as ExitCaptureMode, a9 as ExitDataSource, d as ActivityRegistry, aa as IReadonlyAssetManager, ab as ContractSyncState, ac as RecipientAddressContext, q as ArkProvider, ad as NetworkName, ae as ArkInfo, af as ArkAddress, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, ag as ContractWithVtxos, ah as selectPendingRecoveryOutpoints, A as ArkTransaction, e as Activity, E as ExtendedCoin, ai as Coin, w as ExtendedVirtualCoin, aj as ContractManager, ak as ContractManagerConfig, I as IWallet, a as Identity, g as GetNewAddressesOptions, h as NewAddress, al as SettlementConfig, m as IAssetManager, am as VtxoManager, i as IDelegateManager, S as SendBitcoinParams, j as SettleParams, R as Recipient, an as SignerSession, ao as SignedIntent, ap as Intent, l as SendParams, aq as TimeHeight } from './index-dWRqYSdS.cjs';
 import { Transaction } from '@scure/btc-signer';
 import { TransactionOutput } from '@scure/btc-signer/psbt.js';
 import { Bytes } from '@scure/btc-signer/utils.js';
-import { D as DefaultVtxo, a as DelegateVtxo } from './delegate-cdmzb2f9.js';
+import { D as DefaultVtxo, a as DelegateVtxo } from './delegate-DrwIar11.cjs';
 
 /** Wall-clock floor for `batchExpiry` outside regtest. */
 declare const DEFAULT_MIN_BATCH_EXPIRY_SECONDS = 86400n;
@@ -1938,11 +1938,55 @@ declare function selectVirtualCoins(coins: ExtendedVirtualCoin[], targetAmount:
     changeAmount: bigint;
 };
 /**
- * Wait for incoming funds to the wallet
+ * Raised when a wait is cancelled through its `AbortSignal` or `timeoutMs`.
+ *
+ * `name` is `"AbortError"`, matching both the platform convention and the
+ * `error.name === "AbortError"` checks the provider layer already makes, so a
+ * caller can treat DOM and SDK aborts identically.
+ */
+declare class AbortError extends Error {
+    constructor(message?: string);
+}
+/** Options for {@link waitForIncomingFunds}. */
+interface WaitForIncomingFundsOptions {
+    /**
+     * Cancels the wait. On abort the underlying subscription is stopped and
+     * the returned promise rejects — with the signal's `reason` when the
+     * caller supplied an `Error`, otherwise an {@link AbortError}.
+     */
+    signal?: AbortSignal;
+    /**
+     * Cancels the wait after this many milliseconds, rejecting with an
+     * {@link AbortError}. Equivalent to passing an `AbortSignal.timeout`
+     * signal, without requiring that API on the target platform.
+     */
+    timeoutMs?: number;
+}
+/**
+ * Wait for incoming funds to the wallet.
+ *
+ * This opens live network watchers (an onchain address subscription plus the
+ * wallet's indexer stream) and keeps them open until it settles. **Cancel it
+ * if you are not going to await it to completion** — pass a `signal` or a
+ * `timeoutMs`. Racing an uncancelled call against a timer (`Promise.race`)
+ * abandons the loser without stopping its watchers, and repeating that in a
+ * loop stacks subscriptions until the process exits.
+ *
  * @param wallet - The wallet to wait for incoming funds
+ * @param options - Cancellation options; see {@link WaitForIncomingFundsOptions}
  * @returns A promise that resolves the next new coins received by the wallet's address
+ * @throws {AbortError} If cancelled via `signal` or `timeoutMs`
+ * @example
+ * ```typescript
+ * // Wake early on a deposit, but give up after 30s and release the watchers.
+ * try {
+ *   const funds = await waitForIncomingFunds(wallet, { timeoutMs: 30_000 })
+ * } catch (e) {
+ *   if ((e as Error).name !== "AbortError") throw e
+ * }
+ * ```
  */
-declare function waitForIncomingFunds(wallet: Wallet): Promise<IncomingFunds>;
+declare function waitForIncomingFunds(wallet: Wallet, options?: WaitForIncomingFundsOptions): Promise<IncomingFunds>;
 
 /**
  * Capability a wallet exposes so descriptor-blind consumers — Boltz swaps and
@@ -2110,4 +2154,4 @@ interface AddressAllocationCapable {
 /** Structural type guard for {@link AddressAllocationCapable}. */
 declare function isAddressAllocationCapable(value: unknown): value is AddressAllocationCapable;
 
-export { type AddressAllocationCapable as A, type BatchExpiryPolicy as B, type CheckpointExitDelayPolicy as C, DEFAULT_MIN_BATCH_EXPIRY_SECONDS as D, isArkError as E, ForeignDescriptorError as F, isHDAllocationCapable as G, type HDWalletCapable as H, type IncomingFunds as I, isHDWalletCapable as J, maybeArkError as K, resolveBatchExpiryPolicy as L, MAX_USED_SIGNING_DESCRIPTORS_LOOK_AHEAD as M, resolveCheckpointExitDelayPolicy as N, resolveDescriptorSigner as O, type ProviderConnectionState as P, selectVirtualCoins as Q, ReadonlyWallet as R, SIGNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as S, signingDescriptorIndex as T, strictSigningDescriptorIndex as U, waitForIncomingFunds as V, Wallet as W, type HDAllocationCapable as a, type ReceiveRotatorFactory as b, type ReceiveRotatorBootOpts as c, type ReceiveRotatorBoot as d, Batch as e, ArkError as f, ArkErrorName as g, type ArkadeCashClaimResult as h, ArkadeCashCreateError as i, type ArkadeCashUnclaimedReason as j, type ArkadeCashUnclaimedVtxo as k, type BoardingUtxoGroup as l, DEFAULT_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as m, MUTINYNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as n, type ProviderKind as o, ProviderUnavailableError as p, REGTEST_MIN_BATCH_EXPIRY_SECONDS as q, REGTEST_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as r, type ServerInfoSource as s, ServerResponseMismatchError as t, WalletCannotAllocateAddressError as u, assertValidBatchExpiry as v, assertValidServerUnrollScript as w, defaultBatchExpiryPolicy as x, defaultCheckpointExitDelayPolicy as y, isAddressAllocationCapable as z };
+export { type AddressAllocationCapable as A, type BatchExpiryPolicy as B, type CheckpointExitDelayPolicy as C, DEFAULT_MIN_BATCH_EXPIRY_SECONDS as D, defaultCheckpointExitDelayPolicy as E, ForeignDescriptorError as F, isAddressAllocationCapable as G, type HDWalletCapable as H, type IncomingFunds as I, isArkError as J, isHDAllocationCapable as K, isHDWalletCapable as L, MAX_USED_SIGNING_DESCRIPTORS_LOOK_AHEAD as M, maybeArkError as N, resolveBatchExpiryPolicy as O, type ProviderConnectionState as P, resolveCheckpointExitDelayPolicy as Q, ReadonlyWallet as R, SIGNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as S, resolveDescriptorSigner as T, selectVirtualCoins as U, signingDescriptorIndex as V, Wallet as W, strictSigningDescriptorIndex as X, waitForIncomingFunds as Y, type HDAllocationCapable as a, type ReceiveRotatorFactory as b, type ReceiveRotatorBootOpts as c, type ReceiveRotatorBoot as d, Batch as e, AbortError as f, ArkError as g, ArkErrorName as h, type ArkadeCashClaimResult as i, ArkadeCashCreateError as j, type ArkadeCashUnclaimedReason as k, type ArkadeCashUnclaimedVtxo as l, type BoardingUtxoGroup as m, DEFAULT_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as n, MUTINYNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as o, type ProviderKind as p, ProviderUnavailableError as q, REGTEST_MIN_BATCH_EXPIRY_SECONDS as r, REGTEST_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as s, type ServerInfoSource as t, ServerResponseMismatchError as u, type WaitForIncomingFundsOptions as v, WalletCannotAllocateAddressError as w, assertValidBatchExpiry as x, assertValidServerUnrollScript as y, defaultBatchExpiryPolicy as z };

package/dist/{hdWalletCapable-BSjuUYOO.d.cts → hdWalletCapable-DyxCiNVE.d.ts}

@@ -1,8 +1,8 @@
-import { s as RelativeTimelock, M as Network, P as CSVMultisigTapscript, Q as BatchStartedEvent, U as TreeSigningStartedEvent, X as TxTree, Y as TreeNoncesEvent, Z as BatchFinalizationEvent, _ as BatchFinalizedEvent, $ as BatchFailedEvent, a0 as TreeTxEvent, a1 as TreeSignatureEvent, k as SettlementEvent, b as WalletConfig, W as WalletRepository, C as ContractRepository, a2 as DescriptorProvider, f as IContractManager, a3 as IReadonlyWallet, a4 as ReadonlyIdentity, a5 as OnchainProvider, r as IndexerProvider, a6 as DelegateProvider, a7 as ReadonlyWalletConfig, B as IntentRepository, H as VirtualTxRepository, a8 as ExitCaptureMode, a9 as ExitDataSource, d as ActivityRegistry, aa as IReadonlyAssetManager, ab as ContractSyncState, ac as RecipientAddressContext, q as ArkProvider, ad as NetworkName, ae as ArkInfo, af as ArkAddress, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, ag as ContractWithVtxos, ah as selectPendingRecoveryOutpoints, A as ArkTransaction, e as Activity, E as ExtendedCoin, ai as Coin, w as ExtendedVirtualCoin, aj as ContractManager, ak as ContractManagerConfig, I as IWallet, a as Identity, g as GetNewAddressesOptions, h as NewAddress, al as SettlementConfig, m as IAssetManager, am as VtxoManager, i as IDelegateManager, S as SendBitcoinParams, j as SettleParams, R as Recipient, an as SignerSession, ao as SignedIntent, ap as Intent, l as SendParams, aq as TimeHeight } from './index-DU5o_hz7.cjs';
+import { s as RelativeTimelock, M as Network, P as CSVMultisigTapscript, Q as BatchStartedEvent, U as TreeSigningStartedEvent, X as TxTree, Y as TreeNoncesEvent, Z as BatchFinalizationEvent, _ as BatchFinalizedEvent, $ as BatchFailedEvent, a0 as TreeTxEvent, a1 as TreeSignatureEvent, k as SettlementEvent, b as WalletConfig, W as WalletRepository, C as ContractRepository, a2 as DescriptorProvider, f as IContractManager, a3 as IReadonlyWallet, a4 as ReadonlyIdentity, a5 as OnchainProvider, r as IndexerProvider, a6 as DelegateProvider, a7 as ReadonlyWalletConfig, B as IntentRepository, H as VirtualTxRepository, a8 as ExitCaptureMode, a9 as ExitDataSource, d as ActivityRegistry, aa as IReadonlyAssetManager, ab as ContractSyncState, ac as RecipientAddressContext, q as ArkProvider, ad as NetworkName, ae as ArkInfo, af as ArkAddress, c as WalletBalance, G as GetVtxosFilter, N as NormalizedExtendedVirtualCoin, ag as ContractWithVtxos, ah as selectPendingRecoveryOutpoints, A as ArkTransaction, e as Activity, E as ExtendedCoin, ai as Coin, w as ExtendedVirtualCoin, aj as ContractManager, ak as ContractManagerConfig, I as IWallet, a as Identity, g as GetNewAddressesOptions, h as NewAddress, al as SettlementConfig, m as IAssetManager, am as VtxoManager, i as IDelegateManager, S as SendBitcoinParams, j as SettleParams, R as Recipient, an as SignerSession, ao as SignedIntent, ap as Intent, l as SendParams, aq as TimeHeight } from './index-dWRqYSdS.js';
 import { Transaction } from '@scure/btc-signer';
 import { TransactionOutput } from '@scure/btc-signer/psbt.js';
 import { Bytes } from '@scure/btc-signer/utils.js';
-import { D as DefaultVtxo, a as DelegateVtxo } from './delegate-Bz2e2zXY.cjs';
+import { D as DefaultVtxo, a as DelegateVtxo } from './delegate-BPdzTbwN.js';
 
 /** Wall-clock floor for `batchExpiry` outside regtest. */
 declare const DEFAULT_MIN_BATCH_EXPIRY_SECONDS = 86400n;
@@ -1938,11 +1938,55 @@ declare function selectVirtualCoins(coins: ExtendedVirtualCoin[], targetAmount:
     changeAmount: bigint;
 };
 /**
- * Wait for incoming funds to the wallet
+ * Raised when a wait is cancelled through its `AbortSignal` or `timeoutMs`.
+ *
+ * `name` is `"AbortError"`, matching both the platform convention and the
+ * `error.name === "AbortError"` checks the provider layer already makes, so a
+ * caller can treat DOM and SDK aborts identically.
+ */
+declare class AbortError extends Error {
+    constructor(message?: string);
+}
+/** Options for {@link waitForIncomingFunds}. */
+interface WaitForIncomingFundsOptions {
+    /**
+     * Cancels the wait. On abort the underlying subscription is stopped and
+     * the returned promise rejects — with the signal's `reason` when the
+     * caller supplied an `Error`, otherwise an {@link AbortError}.
+     */
+    signal?: AbortSignal;
+    /**
+     * Cancels the wait after this many milliseconds, rejecting with an
+     * {@link AbortError}. Equivalent to passing an `AbortSignal.timeout`
+     * signal, without requiring that API on the target platform.
+     */
+    timeoutMs?: number;
+}
+/**
+ * Wait for incoming funds to the wallet.
+ *
+ * This opens live network watchers (an onchain address subscription plus the
+ * wallet's indexer stream) and keeps them open until it settles. **Cancel it
+ * if you are not going to await it to completion** — pass a `signal` or a
+ * `timeoutMs`. Racing an uncancelled call against a timer (`Promise.race`)
+ * abandons the loser without stopping its watchers, and repeating that in a
+ * loop stacks subscriptions until the process exits.
+ *
  * @param wallet - The wallet to wait for incoming funds
+ * @param options - Cancellation options; see {@link WaitForIncomingFundsOptions}
  * @returns A promise that resolves the next new coins received by the wallet's address
+ * @throws {AbortError} If cancelled via `signal` or `timeoutMs`
+ * @example
+ * ```typescript
+ * // Wake early on a deposit, but give up after 30s and release the watchers.
+ * try {
+ *   const funds = await waitForIncomingFunds(wallet, { timeoutMs: 30_000 })
+ * } catch (e) {
+ *   if ((e as Error).name !== "AbortError") throw e
+ * }
+ * ```
  */
-declare function waitForIncomingFunds(wallet: Wallet): Promise<IncomingFunds>;
+declare function waitForIncomingFunds(wallet: Wallet, options?: WaitForIncomingFundsOptions): Promise<IncomingFunds>;
 
 /**
  * Capability a wallet exposes so descriptor-blind consumers — Boltz swaps and
@@ -2110,4 +2154,4 @@ interface AddressAllocationCapable {
 /** Structural type guard for {@link AddressAllocationCapable}. */
 declare function isAddressAllocationCapable(value: unknown): value is AddressAllocationCapable;
 
-export { type AddressAllocationCapable as A, type BatchExpiryPolicy as B, type CheckpointExitDelayPolicy as C, DEFAULT_MIN_BATCH_EXPIRY_SECONDS as D, isArkError as E, ForeignDescriptorError as F, isHDAllocationCapable as G, type HDWalletCapable as H, type IncomingFunds as I, isHDWalletCapable as J, maybeArkError as K, resolveBatchExpiryPolicy as L, MAX_USED_SIGNING_DESCRIPTORS_LOOK_AHEAD as M, resolveCheckpointExitDelayPolicy as N, resolveDescriptorSigner as O, type ProviderConnectionState as P, selectVirtualCoins as Q, ReadonlyWallet as R, SIGNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as S, signingDescriptorIndex as T, strictSigningDescriptorIndex as U, waitForIncomingFunds as V, Wallet as W, type HDAllocationCapable as a, type ReceiveRotatorFactory as b, type ReceiveRotatorBootOpts as c, type ReceiveRotatorBoot as d, Batch as e, ArkError as f, ArkErrorName as g, type ArkadeCashClaimResult as h, ArkadeCashCreateError as i, type ArkadeCashUnclaimedReason as j, type ArkadeCashUnclaimedVtxo as k, type BoardingUtxoGroup as l, DEFAULT_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as m, MUTINYNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as n, type ProviderKind as o, ProviderUnavailableError as p, REGTEST_MIN_BATCH_EXPIRY_SECONDS as q, REGTEST_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as r, type ServerInfoSource as s, ServerResponseMismatchError as t, WalletCannotAllocateAddressError as u, assertValidBatchExpiry as v, assertValidServerUnrollScript as w, defaultBatchExpiryPolicy as x, defaultCheckpointExitDelayPolicy as y, isAddressAllocationCapable as z };
+export { type AddressAllocationCapable as A, type BatchExpiryPolicy as B, type CheckpointExitDelayPolicy as C, DEFAULT_MIN_BATCH_EXPIRY_SECONDS as D, defaultCheckpointExitDelayPolicy as E, ForeignDescriptorError as F, isAddressAllocationCapable as G, type HDWalletCapable as H, type IncomingFunds as I, isArkError as J, isHDAllocationCapable as K, isHDWalletCapable as L, MAX_USED_SIGNING_DESCRIPTORS_LOOK_AHEAD as M, maybeArkError as N, resolveBatchExpiryPolicy as O, type ProviderConnectionState as P, resolveCheckpointExitDelayPolicy as Q, ReadonlyWallet as R, SIGNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as S, resolveDescriptorSigner as T, selectVirtualCoins as U, signingDescriptorIndex as V, Wallet as W, strictSigningDescriptorIndex as X, waitForIncomingFunds as Y, type HDAllocationCapable as a, type ReceiveRotatorFactory as b, type ReceiveRotatorBootOpts as c, type ReceiveRotatorBoot as d, Batch as e, AbortError as f, ArkError as g, ArkErrorName as h, type ArkadeCashClaimResult as i, ArkadeCashCreateError as j, type ArkadeCashUnclaimedReason as k, type ArkadeCashUnclaimedVtxo as l, type BoardingUtxoGroup as m, DEFAULT_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as n, MUTINYNET_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as o, type ProviderKind as p, ProviderUnavailableError as q, REGTEST_MIN_BATCH_EXPIRY_SECONDS as r, REGTEST_MIN_CHECKPOINT_EXIT_DELAY_SECONDS as s, type ServerInfoSource as t, ServerResponseMismatchError as u, type WaitForIncomingFundsOptions as v, WalletCannotAllocateAddressError as w, assertValidBatchExpiry as x, assertValidServerUnrollScript as y, defaultBatchExpiryPolicy as z };

package/dist/{index-BiACuWaf.d.ts → index-BqhpAqqj.d.cts}

@@ -1,5 +1,5 @@
-import { bg as ContractHandler, s as RelativeTimelock, bs as Discoverable, V as VtxoScript, t as TapLeafScript, d4 as TapscriptDeriving } from './index-DU5o_hz7.js';
-import { D as DefaultVtxo, a as DelegateVtxo } from './delegate-cdmzb2f9.js';
+import { bg as ContractHandler, s as RelativeTimelock, bs as Discoverable, V as VtxoScript, t as TapLeafScript, d5 as TapscriptDeriving } from './index-dWRqYSdS.cjs';
+import { D as DefaultVtxo, a as DelegateVtxo } from './delegate-DrwIar11.cjs';
 import { Bytes } from '@scure/btc-signer/utils.js';
 
 /**
@@ -114,96 +114,79 @@ declare namespace VHTLC {
         unilateralRefundDelay: RelativeTimelock;
         unilateralRefundWithoutReceiverDelay: RelativeTimelock;
         /**
-         * Optional non-interactive claim leaf: `server` plus a covenant-tweaked
-         * emulator co-signer, pinned to `receiverPkScript`. Lets the receiver's
-         * claim be pushed by the emulator without the receiver being online.
+         * The emulator covenant leaves, ALL OR NOTHING. Present, this adds the
+         * three non-interactive leaves the emulator co-signs under a covenant
+         * pinning the payout to a pre-committed destination:
+         *
+         *  - `nonInteractiveClaim`: `server` + a covenant-tweaked emulator
+         *    co-signer, paying `receiverPkScript` — the receiver's claim can
+         *    be pushed without the receiver being online.
+         *  - `nonInteractiveRefund`: `server` + `receiver` + a covenant-tweaked
+         *    emulator co-signer, paying `senderPkScript`, no timelock — lets
+         *    server and receiver release the refund the moment they agree the
+         *    swap has failed, and recoverable even if the sender's own key is
+         *    lost, since no OTHER refund-side leaf survives that.
+         *  - `nonInteractiveRefundWithoutReceiver`: `server` + the SAME
+         *    covenant-tweaked co-signer as `nonInteractiveRefund`, paying
+         *    `senderPkScript` after `refundLocktime` — the only refund tier
+         *    needing no participant signature at all, so a sender who funded
+         *    a lockup and vanished is refundable through it alone.
+         *
+         * WHY ONE FLAG AND NOT A SWITCH PER LEAF. The three are one mechanism
+         * — the same emulator key, the same `enforcePayTo` covenant pointed
+         * at a per-role destination — and they protect opposite directions of
+         * the same swap, so no real configuration wants a subset. A subset
+         * would cost, not buy: every optional leaf multiplies the tree shapes
+         * a counterparty must derive to verify an address (nothing on the
+         * wire says which leaves a quote carries), so per-leaf toggling turns
+         * one address comparison into a combinatorial guess. All-or-nothing
+         * keeps the shape count at two: suite, or no suite.
+         *
+         * Leaf order fixes the taproot merkle root, so the suite is appended
+         * after the six signature leaves in a fixed order (claim, refund,
+         * timelocked refund) and a script built with this option NEVER
+         * collides with one built without it — which is what makes "did this
+         * quote opt in" a question an address comparison answers.
+         *
+         * STABLE PER RELEASE: what this option builds does not change within
+         * a published SDK version. A future covenant leaf joins the suite
+         * only behind a NEW option, so re-deriving a lockup with the SDK
+         * that quoted it reproduces its address byte-for-byte.
          */
-        nonInteractiveClaim?: {
-            receiverPkScript: Bytes;
+        nonInteractiveParameters?: {
+            /**
+             * The emulator service's public key, 32-byte x-only or 33-byte
+             * compressed. ONE key, tweaked per covenant destination, becomes
+             * the co-signer of every leaf in the suite — the leaves share it
+             * structurally, and BIP-341 tapscript sighashes committing to the
+             * tapleaf hash are what keep a signature for one leaf from
+             * replaying against another.
+             */
             emulatorPubkey: Bytes;
             /**
-             * OPT-IN: also require the claim to pay at least these amounts.
-             *
-             * The covenant's default bound is conservation (`out >= in`) — see
-             * {@link enforcePayTo} for why a quote is normally not the
-             * covenant's business. This is the escape hatch for a consumer that
-             * wants the quote enforced in script rather than at its own
-             * admission layer.
-             *
-             * ADDITIVE, NEVER A REPLACEMENT. The conservation bound stays. On
-             * its own, `out >= quoted` leaves everything ABOVE the quote
-             * unconstrained, so an overfunded lockup's surplus could be routed
-             * anywhere by whoever assembles the spend — trading an underfunding
-             * hole for a skimming one. Both bounds together admit neither.
-             *
-             * WHAT IT COSTS, and it is not only opcodes:
-             *
-             *  - THE ADDRESS BECOMES A FUNCTION OF THE QUOTE. These amounts
-             *    compile into the leaf, hence the emulator key, hence the
-             *    pkScript. A re-quote is a different address, and cannot be
-             *    applied to a lockup already funded.
-             *  - AN UNDERFUNDED LOCKUP BECOMES UNCLAIMABLE. Its only exit is the
-             *    refund path, which waits out the CLTV. That is the intended
-             *    incentive and it lands on whoever misfunded — but it converts
-             *    "claim the short amount now and settle up" into "wait for the
-             *    timelock".
-             *
-             * Omit for the default. Omitting leaves every script byte unchanged,
-             * so contracts already funded keep their addresses.
+             * Where the claim covenant pays: the receiver's own P2TR
+             * pkScript, 34 bytes.
+             */
+            receiverPkScript: Bytes;
+            /**
+             * Where BOTH refund covenants pay: the sender's own P2TR
+             * pkScript, 34 bytes. One destination shared by both refund
+             * leaves, so they cannot diverge on where a refund goes.
              */
-            strict?: {
-                /** Sats the claim must pay. Positive. */
-                amount: bigint;
-                /**
-                 * Asset base units the claim must pay.
-                 *
-                 * Required iff {@link VHTLC.Options.asset} is set, and refused
-                 * otherwise. Strict-on-sats-only against an asset-denominated
-                 * contract would pin the sat CARRIER and say nothing about the
-                 * asset that is the actual amount — half-enforcement that reads
-                 * like enforcement, which is the failure this option exists to
-                 * avoid rather than introduce.
-                 */
-                assetAmount?: bigint;
-            };
-        };
-        /**
-         * Optional non-interactive refund leaf: `server` + `receiver` + a
-         * covenant-tweaked emulator co-signer, pinned to `senderPkScript`, no
-         * timelock. Every OTHER refund-side leaf in this contract requires
-         * the sender's own signature — if the sender permanently loses that
-         * key, none of them are reachable. This leaf is the one exception:
-         * it needs neither the sender's presence nor their key, so funds
-         * remain recoverable to the sender's pre-committed address even
-         * then. It still needs the receiver (unlike `nonInteractiveClaim`,
-         * which needs only server + emulator) — deliberately: this is what
-         * lets server + receiver release the refund immediately, the moment
-         * they agree the swap has failed, rather than making the sender wait
-         * out `refundLocktime` the way {@link Script.refundWithoutReceiver}
-         * does.
-         */
-        nonInteractiveRefund?: {
             senderPkScript: Bytes;
-            emulatorPubkey: Bytes;
             /**
-             * Also emit the timelocked twin: `server` plus the SAME
-             * covenant-tweaked co-signer, spendable after `refundLocktime`
-             * with no receiver signature and no sender signature.
+             * LEGACY REBUILD ONLY — never for a new lockup.
              *
-             * This is the only refund tier that needs nobody: `refund` and
-             * `refundWithoutReceiver` need the sender's key,
-             * `nonInteractiveRefund` needs the receiver's. A sender who
-             * funded a lockup and vanished is refundable through this leaf
-             * alone, by anyone, to their pre-committed address.
-             *
-             * Off by default: it is an additional leaf, appended last, so
-             * enabling it changes the taproot merkle root and therefore the
-             * address. `nonInteractiveClaim` and `nonInteractiveRefund` are
-             * independently optional, so this is the NINTH leaf only in the
-             * full swap-corridor configuration where both are set — on its
-             * own, it is the eighth.
+             * `"preTimelockedRefund"` builds the suite WITHOUT its timelocked
+             * refund leaf: the shape every emulator-covenant lockup funded
+             * before that leaf shipped carries. Lockups already funded in that
+             * shape keep it permanently — a leaf cannot be retrofitted onto an
+             * address already committed — so re-deriving such a lockup (to
+             * spend it, or to verify an old quote's address) needs this. A new
+             * lockup that omits the leaf gives up the one refund tier needing
+             * nobody, for nothing.
              */
-            withoutReceiver?: boolean;
+            legacy?: "preTimelockedRefund";
         };
         /**
          * Optional: denominate this contract in an Arkade ASSET rather than in
@@ -360,35 +343,33 @@ declare namespace VHTLC {
      * - **unilateralClaim**: Receiver can claim unilaterally after delay
      * - **unilateralRefund**: Sender and receiver can refund unilaterally after delay
      * - **unilateralRefundWithoutReceiver**: Sender can refund unilaterally after delay
-     * - **nonInteractiveClaim** (optional): server + emulator can push the
-     *   receiver's claim, pinned to a pre-committed destination
-     * - **nonInteractiveRefund** (optional): server + receiver + emulator
-     *   can push the sender's refund immediately, no timelock, pinned to a
-     *   pre-committed destination — recoverable even if the sender's own key
-     *   is lost
-     * - **nonInteractiveRefundWithoutReceiver** (optional): server + emulator
-     *   can push the sender's refund after `refundLocktime`, pinned to a
-     *   pre-committed destination — the only refund tier needing no
-     *   participant signature at all
+     * - **nonInteractiveClaim** (with `nonInteractiveParameters`): server + emulator
+     *   can push the receiver's claim, pinned to a pre-committed destination
+     * - **nonInteractiveRefund** (with `nonInteractiveParameters`): server + receiver
+     *   + emulator can push the sender's refund immediately, no timelock,
+     *   pinned to a pre-committed destination — recoverable even if the
+     *   sender's own key is lost
+     * - **nonInteractiveRefundWithoutReceiver** (with `nonInteractiveParameters`):
+     *   server + emulator can push the sender's refund after `refundLocktime`,
+     *   pinned to a pre-committed destination — the only refund tier needing
+     *   no participant signature at all
      *
      * See {@link ScriptV2} for the current recommended construction — same
      * leaf ladder, same options shape, an added length check on the claim
      * preimage. This class is unchanged and stays available as-is.
      *
-     * **Pre-existing limitation, widened rather than introduced by
-     * `nonInteractiveRefundWithoutReceiver`.** `nonInteractiveClaim` and
-     * `nonInteractiveRefund` (and now its `withoutReceiver` leaf) build on
-     * this class exactly as they do on {@link ScriptV2} — both extend the
-     * same `BaseScript` where these leaves are constructed. But the `vhtlc`
+     * **Pre-existing limitation: the `vhtlc` contract handler registers none
+     * of the covenant leaves.** `nonInteractiveParameters` builds on this class
+     * exactly as it does on {@link ScriptV2} — both extend the same
+     * `BaseScript` where those leaves are constructed. But the `vhtlc`
      * contract handler (`src/contracts/handlers/vhtlc.ts`) round-trips none
      * of them: its params type carries no covenant fields, and
      * `createScript` only ever builds the six signature-only leaves. A V1
-     * script built with either covenant option therefore compiles and can
+     * script built with the covenant suite therefore compiles and can
      * be funded, but cannot be registered as a `vhtlc` contract — the
      * handler would derive a different (six-leaf) script for the same
-     * params and `ContractManager` refuses the mismatch. This was already
-     * true before `withoutReceiver` existed; it now applies to one more
-     * option than before, not to a newly-exposed one.
+     * params and `ContractManager` refuses the mismatch. Register through
+     * the `vhtlc-v2` handler instead, which round-trips the suite.
      *
      * @example
      * ```typescript
@@ -460,9 +441,9 @@ declare const VHTLCContractHandler: ContractHandler<VHTLCContractParams, VHTLC.S
  * The eight mandatory fields are `VHTLCContractParams` verbatim — the two
  * script versions take the same {@link VHTLC.Options}, so a divergent shape
  * here would be a difference with no cause. What V1's handler has no field for
- * is the two optional covenant leaves, and those are exactly what the swap
- * corridor's lockup carries, so leaving them out would make this handler unable
- * to round-trip the contract it exists to serve.
+ * is the emulator covenant suite, and that is exactly what the swap corridor's
+ * lockup carries, so leaving it out would make this handler unable to
+ * round-trip the contract it exists to serve.
  */
 interface VHTLCV2ContractParams {
     sender: Uint8Array;
@@ -484,22 +465,18 @@ interface VHTLCV2ContractParams {
         /** The asset group index within that genesis transaction. */
         groupIndex: number;
     };
-    /** @see VHTLC.Options.nonInteractiveClaim */
-    nonInteractiveClaim?: {
+    /**
+     * The emulator covenant suite, all or nothing — mirrors {@link
+     * VHTLC.Options.nonInteractiveParameters} exactly, including the legacy selector:
+     * a row funded before the timelocked refund leaf shipped round-trips with
+     * `legacy: "preTimelockedRefund"` and re-derives its eight-leaf shape.
+     */
+    nonInteractiveParameters?: {
         receiverPkScript: Uint8Array;
         emulatorPubkey: Uint8Array;
-        /** @see VHTLC.Options.nonInteractiveClaim.strict */
-        strict?: {
-            amount: bigint;
-            assetAmount?: bigint;
-        };
-    };
-    /** @see VHTLC.Options.nonInteractiveRefund */
-    nonInteractiveRefund?: {
         senderPkScript: Uint8Array;
-        emulatorPubkey: Uint8Array;
-        /** @see VHTLC.Options.nonInteractiveRefund.withoutReceiver */
-        withoutReceiver?: boolean;
+        /** @see VHTLC.Options.nonInteractiveParameters.legacy */
+        legacy?: "preTimelockedRefund";
     };
 }
 /**