@arkade-os/swap 0.0.17 → 0.0.19

package/dist/nostr.cjs

@@ -39,9 +39,9 @@ __export(nostr_exports, {
 module.exports = __toCommonJS(nostr_exports);
 
 // src/rfq.ts
-var import_base4 = require("@scure/base");
+var import_base6 = require("@scure/base");
 var import_legacy2 = require("@noble/hashes/legacy.js");
-var import_sdk2 = require("@arkade-os/sdk");
+var import_sdk4 = require("@arkade-os/sdk");
 
 // src/onchainHtlc.ts
 var import_base = require("@scure/base");
@@ -58,7 +58,7 @@ var L1_NETWORKS = {
 };
 
 // src/rfq.ts
-var import_sdk3 = require("@arkade-os/sdk");
+var import_sdk5 = require("@arkade-os/sdk");
 
 // src/claimPacket.ts
 var import_base2 = require("@scure/base");
@@ -73,6 +73,111 @@ var HKDF_INFO = new TextEncoder().encode("covclaimd/preimage/v1");
 var import_base3 = require("@scure/base");
 var import_sdk = require("@arkade-os/sdk");
 
+// src/offer.ts
+var import_base5 = require("@scure/base");
+var import_utils2 = require("@scure/btc-signer/utils.js");
+var import_sdk3 = require("@arkade-os/sdk");
+
+// src/swap-want-asset.program.json
+var swap_want_asset_program_default = {
+  version: 0,
+  name: "banco-btc-to-asset",
+  params: [
+    { name: "makerWP", type: "pubkey" },
+    { name: "wantAmount", type: "int" },
+    { name: "wantAssetTxid", type: "hash" },
+    { name: "wantAssetGroupIndex", type: "int" },
+    { name: "server", type: "pubkey" },
+    { name: "user", type: "pubkey" }
+  ],
+  functions: {
+    fulfill: {
+      tapscript: { signers: ["$server"] },
+      arkadeScript: {
+        asm: [
+          0,
+          "$wantAssetTxid",
+          "$wantAssetGroupIndex",
+          "INSPECTOUTASSETLOOKUP",
+          "VERIFY",
+          "$wantAmount",
+          "GREATERTHANOREQUAL",
+          "VERIFY",
+          0,
+          "INSPECTOUTPUTSCRIPTPUBKEY",
+          1,
+          "EQUALVERIFY",
+          "$makerWP",
+          "EQUAL"
+        ]
+      }
+    },
+    cancel: {
+      tapscript: { signers: ["$user", "$server"] }
+    }
+  }
+};
+
+// src/swap-want-btc.program.json
+var swap_want_btc_program_default = {
+  version: 0,
+  name: "banco-asset-to-btc",
+  params: [
+    { name: "makerWP", type: "pubkey" },
+    { name: "wantAmount", type: "int" },
+    { name: "server", type: "pubkey" },
+    { name: "user", type: "pubkey" }
+  ],
+  functions: {
+    fulfill: {
+      tapscript: { signers: ["$server"] },
+      arkadeScript: {
+        asm: [
+          0,
+          "INSPECTOUTPUTVALUE",
+          "$wantAmount",
+          "GREATERTHANOREQUAL",
+          "VERIFY",
+          0,
+          "INSPECTOUTPUTSCRIPTPUBKEY",
+          1,
+          "EQUALVERIFY",
+          "$makerWP",
+          "EQUAL"
+        ]
+      }
+    },
+    cancel: {
+      tapscript: { signers: ["$user", "$server"] }
+    }
+  }
+};
+
+// src/store.ts
+var import_base4 = require("@scure/base");
+var import_sha23 = require("@noble/hashes/sha2.js");
+var import_sdk2 = require("@arkade-os/sdk");
+
+// src/offer.ts
+var swapPrograms = {
+  wantAsset: import_sdk3.arkade.parseArtifact(swap_want_asset_program_default),
+  wantBtc: import_sdk3.arkade.parseArtifact(swap_want_btc_program_default)
+};
+var FIELDS = {
+  swapPkScript: { tag: 1, width: 34 },
+  wantAmount: { tag: 2, width: 8 },
+  wantAsset: { tag: 3, width: void 0 },
+  makerPkScript: { tag: 5, width: 34 },
+  makerPublicKey: { tag: 7, width: 32 },
+  emulatorPubkey: { tag: 8, width: 32 },
+  ratioNum: { tag: 9, width: 8 },
+  ratioDen: { tag: 10, width: 8 },
+  offerAsset: { tag: 11, width: void 0 },
+  exitTimelock: { tag: 12, width: 9 }
+};
+var NAMES = Object.fromEntries(Object.entries(FIELDS).map(([k, f]) => [f.tag, k]));
+var ASSET_CARRIER_SATS = BigInt(import_sdk3.ASSET_CARRIER_SATS);
+
 // src/rfq.ts
 var ARKADE_BTC = "arkade:BTC";
 var LIGHTNING_BTC = "lightning:BTC";

package/dist/nostr.d.cts

@@ -1,4 +1,4 @@
-import { R as RfqTransport } from './rfq-DirJn_4k.cjs';
+import { R as RfqTransport } from './rfq-D96aLvCA.cjs';
 import { SimplePool } from 'nostr-tools';
 import '@arkade-os/sdk';
 

package/dist/nostr.d.ts

@@ -1,4 +1,4 @@
-import { R as RfqTransport } from './rfq-DirJn_4k.js';
+import { R as RfqTransport } from './rfq-D96aLvCA.js';
 import { SimplePool } from 'nostr-tools';
 import '@arkade-os/sdk';
 

package/dist/nostr.js

@@ -1,7 +1,7 @@
 import {
   expectQuote,
   pairOf
-} from "./chunk-IRDBAAJZ.js";
+} from "./chunk-D7GDHZCG.js";
 
 // src/nostr.ts
 import {

package/dist/repositories/realm/index.d.cts

@@ -1,8 +1,8 @@
 import { RealmLike } from '@arkade-os/sdk/repositories/realm';
-import { A as AssetSwapRepository, a as AssetSwap, R as RfqSwapRecord, M as MarketsCacheEntry } from '../../repository-rwU1Sv2-.cjs';
+import { A as AssetSwapRepository, a as AssetSwap, R as RfqSwapRecord, M as MarketsCacheEntry } from '../../repository-BXIcmIIC.cjs';
 import '@arkade-os/solver-discovery';
 import '@arkade-os/sdk';
-import '../../rfq-DirJn_4k.cjs';
+import '../../rfq-D96aLvCA.cjs';
 
 /**
  * Realm backend for React Native.

package/dist/repositories/realm/index.d.ts

@@ -1,8 +1,8 @@
 import { RealmLike } from '@arkade-os/sdk/repositories/realm';
-import { A as AssetSwapRepository, a as AssetSwap, R as RfqSwapRecord, M as MarketsCacheEntry } from '../../repository-DH5zjdw4.js';
+import { A as AssetSwapRepository, a as AssetSwap, R as RfqSwapRecord, M as MarketsCacheEntry } from '../../repository-B6VPDGHC.js';
 import '@arkade-os/solver-discovery';
 import '@arkade-os/sdk';
-import '../../rfq-DirJn_4k.js';
+import '../../rfq-D96aLvCA.js';
 
 /**
  * Realm backend for React Native.

package/dist/repositories/sqlite/index.d.cts

@@ -1,8 +1,8 @@
 import { SQLExecutor } from '@arkade-os/sdk/repositories/sqlite';
-import { A as AssetSwapRepository, a as AssetSwap, R as RfqSwapRecord, M as MarketsCacheEntry } from '../../repository-rwU1Sv2-.cjs';
+import { A as AssetSwapRepository, a as AssetSwap, R as RfqSwapRecord, M as MarketsCacheEntry } from '../../repository-BXIcmIIC.cjs';
 import '@arkade-os/solver-discovery';
 import '@arkade-os/sdk';
-import '../../rfq-DirJn_4k.cjs';
+import '../../rfq-D96aLvCA.cjs';
 
 /**
  * SQLite backend over the SDK's `SQLExecutor`, so any driver plugs in

package/dist/repositories/sqlite/index.d.ts

@@ -1,8 +1,8 @@
 import { SQLExecutor } from '@arkade-os/sdk/repositories/sqlite';
-import { A as AssetSwapRepository, a as AssetSwap, R as RfqSwapRecord, M as MarketsCacheEntry } from '../../repository-DH5zjdw4.js';
+import { A as AssetSwapRepository, a as AssetSwap, R as RfqSwapRecord, M as MarketsCacheEntry } from '../../repository-B6VPDGHC.js';
 import '@arkade-os/solver-discovery';
 import '@arkade-os/sdk';
-import '../../rfq-DirJn_4k.js';
+import '../../rfq-D96aLvCA.js';
 
 /**
  * SQLite backend over the SDK's `SQLExecutor`, so any driver plugs in

package/dist/{repository-DH5zjdw4.d.ts → repository-B6VPDGHC.d.ts}

@@ -1,6 +1,6 @@
 import { DiscoveredMarket } from '@arkade-os/solver-discovery';
 import { IWallet, ProvisionedKey, ProvisionedClaimSecret, RestArkProvider, RestIndexerProvider, VHTLC, Identity, IContractManager } from '@arkade-os/sdk';
-import { G as RfqStatus, R as RfqTransport, a as OnchainHtlc, f as ChainUtxo, C as ChainSource, v as OnchainHtlcPhase } from './rfq-DirJn_4k.js';
+import { G as RfqStatus, R as RfqTransport, a as OnchainHtlc, f as ChainUtxo, C as ChainSource, v as OnchainHtlcPhase } from './rfq-D96aLvCA.js';
 
 type AssetSwapStatus = "pending" | "cancelling" | "fulfilled" | "cancelled" | "recoverable" | "awaiting_fill" | "claimable" | "claimed" | "refunded_l1";
 /** The sentinel asset id for BTC itself, as opposed to a 68-hex asset id.
@@ -829,6 +829,9 @@ interface OnchainSendSwap extends RfqSwapCommon {
     htlc: OnchainHtlc;
     /** `profile.min_confirmations` from the quote. */
     minConfirmations: number;
+    /** The quote's `to_amount`, captured at REQUEST time: read at claim time it
+     * would be whatever the solver funded. */
+    expectedAmount: number;
     /** Where {@link RfqSwapManagerCallbacks.claimOnchain} pays; optional only
      * so records predating its profile slot still restore. */
     payoutPkScript?: Uint8Array;

package/dist/{repository-rwU1Sv2-.d.cts → repository-BXIcmIIC.d.cts}

@@ -1,6 +1,6 @@
 import { DiscoveredMarket } from '@arkade-os/solver-discovery';
 import { IWallet, ProvisionedKey, ProvisionedClaimSecret, RestArkProvider, RestIndexerProvider, VHTLC, Identity, IContractManager } from '@arkade-os/sdk';
-import { G as RfqStatus, R as RfqTransport, a as OnchainHtlc, f as ChainUtxo, C as ChainSource, v as OnchainHtlcPhase } from './rfq-DirJn_4k.cjs';
+import { G as RfqStatus, R as RfqTransport, a as OnchainHtlc, f as ChainUtxo, C as ChainSource, v as OnchainHtlcPhase } from './rfq-D96aLvCA.cjs';
 
 type AssetSwapStatus = "pending" | "cancelling" | "fulfilled" | "cancelled" | "recoverable" | "awaiting_fill" | "claimable" | "claimed" | "refunded_l1";
 /** The sentinel asset id for BTC itself, as opposed to a 68-hex asset id.
@@ -829,6 +829,9 @@ interface OnchainSendSwap extends RfqSwapCommon {
     htlc: OnchainHtlc;
     /** `profile.min_confirmations` from the quote. */
     minConfirmations: number;
+    /** The quote's `to_amount`, captured at REQUEST time: read at claim time it
+     * would be whatever the solver funded. */
+    expectedAmount: number;
     /** Where {@link RfqSwapManagerCallbacks.claimOnchain} pays; optional only
      * so records predating its profile slot still restore. */
     payoutPkScript?: Uint8Array;

package/dist/{rfq-DirJn_4k.d.ts → rfq-D96aLvCA.d.cts}

@@ -298,8 +298,11 @@ interface RfqQuote {
     type: "rfq_quote";
     rfq_id: string;
     pair: string;
-    from_amount: number;
-    to_amount: number;
+    /** Sats on HTLC-class corridors (number); canonical decimal string on
+     * arkade↔arkade asset legs (bigint range, see WIRE_ASSET_AMOUNT on the
+     * solver). */
+    from_amount: number | string;
+    to_amount: number | string;
     solver_pubkey: string;
     valid_until: number;
     /** HTLC-class quotes only; absent for arkade↔arkade. */
@@ -308,6 +311,9 @@ interface RfqQuote {
         [key: string]: unknown;
         payment_hash?: string;
         lockup_address?: string;
+        refund_without_receiver_delay?: number;
+        offer_address?: string;
+        offer_pk_script?: string;
     };
     [key: string]: unknown;
 }
@@ -335,20 +341,44 @@ declare const lightningSendRequest: (input: {
     refundAddress: string;
     senderPubkey: Uint8Array;
 }) => Record<string, unknown>;
-/** The rfq_request for an arkade↔arkade swap. Exactly one side may name an
- * asset id per direction (BTC has none), and the id is the leg itself — see
- * {@link arkadeAssetLeg}. Forward-looking: the wire shape is specified, the
- * reference solver does not serve it yet. */
+/** The rfq_request for an arkade↔arkade swap. At least one side names an asset
+ * id (BTC has none), and the id is the leg itself — see
+ * {@link arkadeAssetLeg}.
+ *
+ * Wire-compatible with the reference solver (`AssetRfqRequest`, strict):
+ * `amount` is a canonical decimal string of atomic units (never a JSON
+ * number — an Arkade asset's precision is not knowable client-side, so the
+ * losslessness carve-out cannot be checked), `amount_side` is exact-in only
+ * (`"from"`), and `profile` carries the trader's own covenant position
+ * (`maker_pk_script`, `maker_public_key`) — the fill pays that script, and
+ * `cancel` is signed by that key. */
 declare const arkadeSwapRequest: (input: {
     rfqId: string;
     /** Asset the trader deposits; omit when depositing BTC. */
     offerAsset?: asset.AssetId;
     /** Asset the trader wants; omit when wanting BTC. */
     wantAsset?: asset.AssetId;
-    amountSide: "from" | "to";
-    /** Integer base units of the side named by `amountSide`. */
-    amount: number;
+    /** Exact-in only. `"to"` is refused client-side: the solver answers
+     * `exact_out_unsupported`, since the two legs are different assets. */
+    amountSide?: "from" | "to";
+    /** Atomic units of the deposit (`from`) leg. bigint-safe: encoded as a
+     * canonical decimal string on the wire. */
+    amount: bigint | number | string;
+    /** Trader's own taproot scriptPubKey (34 bytes, `OP_1 <32-byte program>`),
+     * as bytes or lowercase hex. The covenant's `makerWP` minus its prefix. */
+    makerPkScript: Uint8Array | string;
+    /** Trader's own x-only key (32 bytes), as bytes or lowercase hex. The
+     * `cancel` path's `user` signer. */
+    makerPublicKey: Uint8Array | string;
 }) => Record<string, unknown>;
+/** Canonical decimal string of atomic units: ASCII digits, no sign, point,
+ * exponent, or leading zero (unless the value is exactly "0"). bigint passes
+ * through; number must be a safe integer; string must already be canonical. */
+declare const canonicalAssetAmount: (amount: bigint | number | string) => string;
+/** 34-byte taproot scriptPubKey (`OP_1 <32-byte program>`), lowercase hex. */
+declare const normalizeMakerPkScript: (value: Uint8Array | string) => string;
+/** 32-byte x-only key, lowercase hex. Never a 33-byte compressed key. */
+declare const normalizeMakerPublicKey: (value: Uint8Array | string) => string;
 /** Funding gate: refuse unless ≥90 min remain before the refund path opens.
  * 90 because the refund CLTV matures against median-time-past (BIP-113),
  * which lags wall clock by ~1h — a smaller wall-clock margin is no margin. */
@@ -502,6 +532,8 @@ declare function lightningSendVtxoScript(params: {
      * {@link unilateralRefundDelay} and {@link unilateralRefundWithoutReceiverDelay}
      * derive from this same value — one rounding, shared across all three tiers. */
     claimDelay: number;
+    /** Binding quote field. Optional only for rebuilding pre-upgrade scripts. */
+    refundWithoutReceiverDelay?: number;
     /** Emulator x-only key (32 bytes). */
     emulatorPubkey: Uint8Array;
     /** Where a refund must pay: the trader's P2TR pkScript (34 bytes). Also
@@ -619,6 +651,10 @@ declare function requestLightningSend(wallet: IWallet, arkServerUrl: string, tra
  * transaction that delivers the quoted want-amount to the trader, so the
  * solver fills or nothing moves. There is no rfq_fill message and no refund
  * timelock; an unfilled offer is cancelled cooperatively (`cancelOffer`).
+ *
+ * For asset-to-asset, the offer contract commits to the wanted asset only.
+ * The offered/deposit asset is carried by the funding VTXO and its asset
+ * packet; it is not part of the covenant derivation.
  */
 declare const offerTermsFromQuote: (quote: RfqQuote, assets: {
     wantAsset?: asset.AssetId;
@@ -628,6 +664,80 @@ declare const offerTermsFromQuote: (quote: RfqQuote, assets: {
     wantAsset?: asset.AssetId;
     offerAsset?: asset.AssetId;
 };
+/** Compare-only check of the solver's offer address against YOUR OWN
+ * derivation — never extends trust, only narrows it. Funds only on an exact
+ * match of both the address (what the wallet sends to) and the script (what
+ * `offerVtxoScript` compiles to). Throws {@link AddressMismatch} otherwise. */
+declare const verifyOfferAddress: (quote: RfqQuote, derived: {
+    address: string;
+    swapPkScript: Uint8Array;
+}) => {
+    address: string;
+    swapPkScript: Uint8Array;
+};
+/** Gate an arkade↔arkade quote immediately before funding. No timelock exists
+ * on this class (neither `fulfill` nor `cancel` carries one), so the only
+ * clock is `valid_until`: funding after it is a deposit the solver will
+ * refuse to fill, reclaimable only via cooperative `cancelOffer`. */
+declare const assertArkadeFundable: (input: {
+    quote: RfqQuote;
+    now?: number;
+}) => void;
+/**
+ * The arkade↔arkade user flow, mirroring `requestLightningSend`'s shape:
+ * quote → derive locally → verify → gate. Pure of funding on purpose — it
+ * returns the offer and the deposit it must carry, and the caller funds with
+ * its own wallet before `quote.valid_until`, after which the user may go
+ * offline: filling is non-interactive. An unfilled offer is cancelled
+ * cooperatively (`cancelOffer`); there is no timelock refund.
+ *
+ * Maker keys are the wallet's own (address script + identity x-only key), read
+ * here so the request profile and the local `createOffer` derivation cannot
+ * diverge. The quote's `offer_address`/`offer_pk_script` are compare-only:
+ * a mismatch throws {@link AddressMismatch} and must never be funded.
+ *
+ * Works over any {@link RfqTransport} — HTTP, dev relay, or Nostr — since the
+ * negotiation is one `rfq_request` round trip. Throws {@link SwapRefusal}
+ * (closed reason), {@link AddressMismatch} (never fund), or a gate error with
+ * a stable `reason`.
+ *
+ * Funding (caller's job, immediately after, before `valid_until`):
+ * - BTC->asset (`wantAsset`): `wallet.send({ address, amount: Number(fundAmount), extensions: [extension] })`
+ * - asset->BTC or asset->asset (`offerAsset`): `wallet.send({ address, amount: Number(carrierSats), assets: [{ assetId: offerAsset, amount: fundAmount }], extensions: [extension] })`
+ */
+declare function requestArkadeSwap(wallet: IWallet, arkServerUrl: string, transport: RfqTransport, params: {
+    /** Asset the trader deposits; omit when depositing BTC. */
+    offerAsset?: asset.AssetId;
+    /** Asset the trader wants; omit when wanting BTC. */
+    wantAsset?: asset.AssetId;
+    /** Deposit amount, in atomic units of the `from` leg. */
+    amount: bigint | number | string;
+    rfqId?: string;
+    /** Co-signer key override (33-byte compressed hex); see `createOffer`. */
+    emulatorPubkey?: string;
+    now?: number;
+}): Promise<{
+    rfqId: string;
+    quote: RfqQuote;
+    pair: string;
+    /** The trader's OWN derivation — the only address to fund. */
+    address: string;
+    /** What the deposit must carry: the quote's `from_amount`. Sats for a BTC
+     * deposit, asset units for an asset deposit (plus a dust carrier). */
+    fundAmount: bigint;
+    /** Dust sats carrier for an asset deposit; 0n for a BTC deposit. */
+    carrierSats: bigint;
+    /** The covenant's scriptPubKey, for watching the deposit and its spend. */
+    swapPkScript: Uint8Array;
+    /** The encoded offer. Persist this — it is the only input `cancelOffer`
+     * needs, and the restore scan reads it back off the funding tx. */
+    offerHex: string;
+    /** Ready for `wallet.send`'s `extensions`. */
+    extension: {
+        type: number;
+        payload: Uint8Array;
+    };
+}>;
 /** The rfq_request for `arkade:BTC->onchain:BTC`. Exact-out means "this much
  * lands in the L1 HTLC". `senderPubkey` is the user's own key for the
  * VHTLC's sender-side leaves — same role as in {@link lightningSendRequest}.
@@ -724,6 +834,7 @@ declare function deriveOnchainSend(input: {
     refundLocktime: number;
     htlcLocktime: number;
     minConfirmations: number;
+    expectedAmount: number;
 };
 /**
  * The `arkade:BTC->onchain:BTC` user flow, mirroring `requestLightningSend`:
@@ -764,6 +875,8 @@ declare function requestOnchainSend(wallet: IWallet, arkServerUrl: string, trans
     /** The user's OWN arkade lockup derivation — the only address to fund. */
     address: string;
     fundAmount: number;
+    /** What the solver's L1 fill must carry — persist it with the record. */
+    expectedAmount: number;
     swapPkScript: Uint8Array;
     /** The arkade covenant itself — the record's `lockup` for
      * `RfqSwapManager`, same role as {@link requestLightningSend}'s. */
@@ -1081,4 +1194,4 @@ declare function requestOnchainReceive(wallet: IWallet, arkServerUrl: string, tr
     secrets: ProvisionedClaimSecret;
 }>;
 
-export { extractPreimage as $, ARKADE_ASSET as A, type RfqRefusalDetail as B, type ChainSource as C, type RfqRefusalErrorCode as D, type RfqRefusalReason as E, type RfqRefusalUnit as F, type RfqStatus as G, type HtlcUtxo as H, type InvoiceFacts as I, SwapRefusal as J, arkadeAssetLeg as K, LIGHTNING_BTC as L, MAX_MIN_CONFIRMATIONS as M, arkadeSwapRequest as N, type OnchainNetwork as O, assertFundable as P, assertReceivable as Q, type RfqTransport as R, SOLO_REFUND_HEADROOM_SECONDS as S, awaitOnchainFill as T, buildHtlcClaim as U, buildHtlcRefund as V, claimOnchainFill as W, classifyOnchainHtlc as X, deriveLightningReceive as Y, deriveOnchainReceive as Z, deriveOnchainSend as _, type OnchainHtlc as a, httpTransport as a0, isRfqRefusalErrorCode as a1, l1ScriptForAddress as a2, lightningReceiveRequest as a3, lightningSendRequest as a4, lightningSendVtxoScript as a5, newPreimage as a6, newRfqId as a7, offerTermsFromQuote as a8, onchainHtlcScript as a9, onchainReceiveRequest as aa, onchainSendRequest as ab, paymentHashOf as ac, receiveVtxoScript as ad, relayTransport as ae, requestLightningReceive as af, requestOnchainReceive as ag, rfqPair as ah, unilateralClaimDelay as ai, unilateralRefundDelay as aj, unilateralRefundWithoutReceiverDelay as ak, verifyLockupAddress as al, verifyReceiveInvoice as am, type OnchainHtlcParams as b, requestLightningSend as c, ARKADE_BTC as d, AddressMismatch as e, type ChainUtxo as f, LIGHTNING_RECEIVE_PAIR as g, LIGHTNING_SEND_PAIR as h, LOCKTIME_THRESHOLD as i, type LightningReceiveTreeParams as j, type LightningSendTreeParams as k, MIN_CLAIM_WINDOW_SECONDS as l, MIN_HEADROOM_SECONDS as m, ONCHAIN_BTC as n, ONCHAIN_CLAIM_MARGIN_SECONDS as o, ONCHAIN_DUST_SATS as p, ONCHAIN_ORDER_MARGIN_SECONDS as q, requestOnchainSend as r, ONCHAIN_RECEIVE_PAIR as s, ONCHAIN_SECONDS_PER_BLOCK as t, ONCHAIN_SEND_PAIR as u, type OnchainHtlcPhase as v, RFQ_REFUSAL_ERROR_CODES as w, RFQ_TERMINAL_STATES as x, type RelaySocket as y, type RfqQuote as z };
+export { deriveOnchainReceive as $, ARKADE_ASSET as A, type RfqRefusalDetail as B, type ChainSource as C, type RfqRefusalErrorCode as D, type RfqRefusalReason as E, type RfqRefusalUnit as F, type RfqStatus as G, type HtlcUtxo as H, type InvoiceFacts as I, SwapRefusal as J, arkadeAssetLeg as K, LIGHTNING_BTC as L, MAX_MIN_CONFIRMATIONS as M, arkadeSwapRequest as N, type OnchainNetwork as O, assertArkadeFundable as P, assertFundable as Q, type RfqTransport as R, SOLO_REFUND_HEADROOM_SECONDS as S, assertReceivable as T, awaitOnchainFill as U, buildHtlcClaim as V, buildHtlcRefund as W, canonicalAssetAmount as X, claimOnchainFill as Y, classifyOnchainHtlc as Z, deriveLightningReceive as _, type OnchainHtlc as a, deriveOnchainSend as a0, extractPreimage as a1, httpTransport as a2, isRfqRefusalErrorCode as a3, l1ScriptForAddress as a4, lightningReceiveRequest as a5, lightningSendRequest as a6, lightningSendVtxoScript as a7, newPreimage as a8, newRfqId as a9, normalizeMakerPkScript as aa, normalizeMakerPublicKey as ab, offerTermsFromQuote as ac, onchainHtlcScript as ad, onchainReceiveRequest as ae, onchainSendRequest as af, paymentHashOf as ag, receiveVtxoScript as ah, relayTransport as ai, requestArkadeSwap as aj, requestLightningReceive as ak, requestOnchainReceive as al, rfqPair as am, unilateralClaimDelay as an, unilateralRefundDelay as ao, unilateralRefundWithoutReceiverDelay as ap, verifyLockupAddress as aq, verifyOfferAddress as ar, verifyReceiveInvoice as as, type OnchainHtlcParams as b, requestLightningSend as c, ARKADE_BTC as d, AddressMismatch as e, type ChainUtxo as f, LIGHTNING_RECEIVE_PAIR as g, LIGHTNING_SEND_PAIR as h, LOCKTIME_THRESHOLD as i, type LightningReceiveTreeParams as j, type LightningSendTreeParams as k, MIN_CLAIM_WINDOW_SECONDS as l, MIN_HEADROOM_SECONDS as m, ONCHAIN_BTC as n, ONCHAIN_CLAIM_MARGIN_SECONDS as o, ONCHAIN_DUST_SATS as p, ONCHAIN_ORDER_MARGIN_SECONDS as q, requestOnchainSend as r, ONCHAIN_RECEIVE_PAIR as s, ONCHAIN_SECONDS_PER_BLOCK as t, ONCHAIN_SEND_PAIR as u, type OnchainHtlcPhase as v, RFQ_REFUSAL_ERROR_CODES as w, RFQ_TERMINAL_STATES as x, type RelaySocket as y, type RfqQuote as z };

package/dist/{rfq-DirJn_4k.d.cts → rfq-D96aLvCA.d.ts}

@@ -298,8 +298,11 @@ interface RfqQuote {
     type: "rfq_quote";
     rfq_id: string;
     pair: string;
-    from_amount: number;
-    to_amount: number;
+    /** Sats on HTLC-class corridors (number); canonical decimal string on
+     * arkade↔arkade asset legs (bigint range, see WIRE_ASSET_AMOUNT on the
+     * solver). */
+    from_amount: number | string;
+    to_amount: number | string;
     solver_pubkey: string;
     valid_until: number;
     /** HTLC-class quotes only; absent for arkade↔arkade. */
@@ -308,6 +311,9 @@ interface RfqQuote {
         [key: string]: unknown;
         payment_hash?: string;
         lockup_address?: string;
+        refund_without_receiver_delay?: number;
+        offer_address?: string;
+        offer_pk_script?: string;
     };
     [key: string]: unknown;
 }
@@ -335,20 +341,44 @@ declare const lightningSendRequest: (input: {
     refundAddress: string;
     senderPubkey: Uint8Array;
 }) => Record<string, unknown>;
-/** The rfq_request for an arkade↔arkade swap. Exactly one side may name an
- * asset id per direction (BTC has none), and the id is the leg itself — see
- * {@link arkadeAssetLeg}. Forward-looking: the wire shape is specified, the
- * reference solver does not serve it yet. */
+/** The rfq_request for an arkade↔arkade swap. At least one side names an asset
+ * id (BTC has none), and the id is the leg itself — see
+ * {@link arkadeAssetLeg}.
+ *
+ * Wire-compatible with the reference solver (`AssetRfqRequest`, strict):
+ * `amount` is a canonical decimal string of atomic units (never a JSON
+ * number — an Arkade asset's precision is not knowable client-side, so the
+ * losslessness carve-out cannot be checked), `amount_side` is exact-in only
+ * (`"from"`), and `profile` carries the trader's own covenant position
+ * (`maker_pk_script`, `maker_public_key`) — the fill pays that script, and
+ * `cancel` is signed by that key. */
 declare const arkadeSwapRequest: (input: {
     rfqId: string;
     /** Asset the trader deposits; omit when depositing BTC. */
     offerAsset?: asset.AssetId;
     /** Asset the trader wants; omit when wanting BTC. */
     wantAsset?: asset.AssetId;
-    amountSide: "from" | "to";
-    /** Integer base units of the side named by `amountSide`. */
-    amount: number;
+    /** Exact-in only. `"to"` is refused client-side: the solver answers
+     * `exact_out_unsupported`, since the two legs are different assets. */
+    amountSide?: "from" | "to";
+    /** Atomic units of the deposit (`from`) leg. bigint-safe: encoded as a
+     * canonical decimal string on the wire. */
+    amount: bigint | number | string;
+    /** Trader's own taproot scriptPubKey (34 bytes, `OP_1 <32-byte program>`),
+     * as bytes or lowercase hex. The covenant's `makerWP` minus its prefix. */
+    makerPkScript: Uint8Array | string;
+    /** Trader's own x-only key (32 bytes), as bytes or lowercase hex. The
+     * `cancel` path's `user` signer. */
+    makerPublicKey: Uint8Array | string;
 }) => Record<string, unknown>;
+/** Canonical decimal string of atomic units: ASCII digits, no sign, point,
+ * exponent, or leading zero (unless the value is exactly "0"). bigint passes
+ * through; number must be a safe integer; string must already be canonical. */
+declare const canonicalAssetAmount: (amount: bigint | number | string) => string;
+/** 34-byte taproot scriptPubKey (`OP_1 <32-byte program>`), lowercase hex. */
+declare const normalizeMakerPkScript: (value: Uint8Array | string) => string;
+/** 32-byte x-only key, lowercase hex. Never a 33-byte compressed key. */
+declare const normalizeMakerPublicKey: (value: Uint8Array | string) => string;
 /** Funding gate: refuse unless ≥90 min remain before the refund path opens.
  * 90 because the refund CLTV matures against median-time-past (BIP-113),
  * which lags wall clock by ~1h — a smaller wall-clock margin is no margin. */
@@ -502,6 +532,8 @@ declare function lightningSendVtxoScript(params: {
      * {@link unilateralRefundDelay} and {@link unilateralRefundWithoutReceiverDelay}
      * derive from this same value — one rounding, shared across all three tiers. */
     claimDelay: number;
+    /** Binding quote field. Optional only for rebuilding pre-upgrade scripts. */
+    refundWithoutReceiverDelay?: number;
     /** Emulator x-only key (32 bytes). */
     emulatorPubkey: Uint8Array;
     /** Where a refund must pay: the trader's P2TR pkScript (34 bytes). Also
@@ -619,6 +651,10 @@ declare function requestLightningSend(wallet: IWallet, arkServerUrl: string, tra
  * transaction that delivers the quoted want-amount to the trader, so the
  * solver fills or nothing moves. There is no rfq_fill message and no refund
  * timelock; an unfilled offer is cancelled cooperatively (`cancelOffer`).
+ *
+ * For asset-to-asset, the offer contract commits to the wanted asset only.
+ * The offered/deposit asset is carried by the funding VTXO and its asset
+ * packet; it is not part of the covenant derivation.
  */
 declare const offerTermsFromQuote: (quote: RfqQuote, assets: {
     wantAsset?: asset.AssetId;
@@ -628,6 +664,80 @@ declare const offerTermsFromQuote: (quote: RfqQuote, assets: {
     wantAsset?: asset.AssetId;
     offerAsset?: asset.AssetId;
 };
+/** Compare-only check of the solver's offer address against YOUR OWN
+ * derivation — never extends trust, only narrows it. Funds only on an exact
+ * match of both the address (what the wallet sends to) and the script (what
+ * `offerVtxoScript` compiles to). Throws {@link AddressMismatch} otherwise. */
+declare const verifyOfferAddress: (quote: RfqQuote, derived: {
+    address: string;
+    swapPkScript: Uint8Array;
+}) => {
+    address: string;
+    swapPkScript: Uint8Array;
+};
+/** Gate an arkade↔arkade quote immediately before funding. No timelock exists
+ * on this class (neither `fulfill` nor `cancel` carries one), so the only
+ * clock is `valid_until`: funding after it is a deposit the solver will
+ * refuse to fill, reclaimable only via cooperative `cancelOffer`. */
+declare const assertArkadeFundable: (input: {
+    quote: RfqQuote;
+    now?: number;
+}) => void;
+/**
+ * The arkade↔arkade user flow, mirroring `requestLightningSend`'s shape:
+ * quote → derive locally → verify → gate. Pure of funding on purpose — it
+ * returns the offer and the deposit it must carry, and the caller funds with
+ * its own wallet before `quote.valid_until`, after which the user may go
+ * offline: filling is non-interactive. An unfilled offer is cancelled
+ * cooperatively (`cancelOffer`); there is no timelock refund.
+ *
+ * Maker keys are the wallet's own (address script + identity x-only key), read
+ * here so the request profile and the local `createOffer` derivation cannot
+ * diverge. The quote's `offer_address`/`offer_pk_script` are compare-only:
+ * a mismatch throws {@link AddressMismatch} and must never be funded.
+ *
+ * Works over any {@link RfqTransport} — HTTP, dev relay, or Nostr — since the
+ * negotiation is one `rfq_request` round trip. Throws {@link SwapRefusal}
+ * (closed reason), {@link AddressMismatch} (never fund), or a gate error with
+ * a stable `reason`.
+ *
+ * Funding (caller's job, immediately after, before `valid_until`):
+ * - BTC->asset (`wantAsset`): `wallet.send({ address, amount: Number(fundAmount), extensions: [extension] })`
+ * - asset->BTC or asset->asset (`offerAsset`): `wallet.send({ address, amount: Number(carrierSats), assets: [{ assetId: offerAsset, amount: fundAmount }], extensions: [extension] })`
+ */
+declare function requestArkadeSwap(wallet: IWallet, arkServerUrl: string, transport: RfqTransport, params: {
+    /** Asset the trader deposits; omit when depositing BTC. */
+    offerAsset?: asset.AssetId;
+    /** Asset the trader wants; omit when wanting BTC. */
+    wantAsset?: asset.AssetId;
+    /** Deposit amount, in atomic units of the `from` leg. */
+    amount: bigint | number | string;
+    rfqId?: string;
+    /** Co-signer key override (33-byte compressed hex); see `createOffer`. */
+    emulatorPubkey?: string;
+    now?: number;
+}): Promise<{
+    rfqId: string;
+    quote: RfqQuote;
+    pair: string;
+    /** The trader's OWN derivation — the only address to fund. */
+    address: string;
+    /** What the deposit must carry: the quote's `from_amount`. Sats for a BTC
+     * deposit, asset units for an asset deposit (plus a dust carrier). */
+    fundAmount: bigint;
+    /** Dust sats carrier for an asset deposit; 0n for a BTC deposit. */
+    carrierSats: bigint;
+    /** The covenant's scriptPubKey, for watching the deposit and its spend. */
+    swapPkScript: Uint8Array;
+    /** The encoded offer. Persist this — it is the only input `cancelOffer`
+     * needs, and the restore scan reads it back off the funding tx. */
+    offerHex: string;
+    /** Ready for `wallet.send`'s `extensions`. */
+    extension: {
+        type: number;
+        payload: Uint8Array;
+    };
+}>;
 /** The rfq_request for `arkade:BTC->onchain:BTC`. Exact-out means "this much
  * lands in the L1 HTLC". `senderPubkey` is the user's own key for the
  * VHTLC's sender-side leaves — same role as in {@link lightningSendRequest}.
@@ -724,6 +834,7 @@ declare function deriveOnchainSend(input: {
     refundLocktime: number;
     htlcLocktime: number;
     minConfirmations: number;
+    expectedAmount: number;
 };
 /**
  * The `arkade:BTC->onchain:BTC` user flow, mirroring `requestLightningSend`:
@@ -764,6 +875,8 @@ declare function requestOnchainSend(wallet: IWallet, arkServerUrl: string, trans
     /** The user's OWN arkade lockup derivation — the only address to fund. */
     address: string;
     fundAmount: number;
+    /** What the solver's L1 fill must carry — persist it with the record. */
+    expectedAmount: number;
     swapPkScript: Uint8Array;
     /** The arkade covenant itself — the record's `lockup` for
      * `RfqSwapManager`, same role as {@link requestLightningSend}'s. */
@@ -1081,4 +1194,4 @@ declare function requestOnchainReceive(wallet: IWallet, arkServerUrl: string, tr
     secrets: ProvisionedClaimSecret;
 }>;
 
-export { extractPreimage as $, ARKADE_ASSET as A, type RfqRefusalDetail as B, type ChainSource as C, type RfqRefusalErrorCode as D, type RfqRefusalReason as E, type RfqRefusalUnit as F, type RfqStatus as G, type HtlcUtxo as H, type InvoiceFacts as I, SwapRefusal as J, arkadeAssetLeg as K, LIGHTNING_BTC as L, MAX_MIN_CONFIRMATIONS as M, arkadeSwapRequest as N, type OnchainNetwork as O, assertFundable as P, assertReceivable as Q, type RfqTransport as R, SOLO_REFUND_HEADROOM_SECONDS as S, awaitOnchainFill as T, buildHtlcClaim as U, buildHtlcRefund as V, claimOnchainFill as W, classifyOnchainHtlc as X, deriveLightningReceive as Y, deriveOnchainReceive as Z, deriveOnchainSend as _, type OnchainHtlc as a, httpTransport as a0, isRfqRefusalErrorCode as a1, l1ScriptForAddress as a2, lightningReceiveRequest as a3, lightningSendRequest as a4, lightningSendVtxoScript as a5, newPreimage as a6, newRfqId as a7, offerTermsFromQuote as a8, onchainHtlcScript as a9, onchainReceiveRequest as aa, onchainSendRequest as ab, paymentHashOf as ac, receiveVtxoScript as ad, relayTransport as ae, requestLightningReceive as af, requestOnchainReceive as ag, rfqPair as ah, unilateralClaimDelay as ai, unilateralRefundDelay as aj, unilateralRefundWithoutReceiverDelay as ak, verifyLockupAddress as al, verifyReceiveInvoice as am, type OnchainHtlcParams as b, requestLightningSend as c, ARKADE_BTC as d, AddressMismatch as e, type ChainUtxo as f, LIGHTNING_RECEIVE_PAIR as g, LIGHTNING_SEND_PAIR as h, LOCKTIME_THRESHOLD as i, type LightningReceiveTreeParams as j, type LightningSendTreeParams as k, MIN_CLAIM_WINDOW_SECONDS as l, MIN_HEADROOM_SECONDS as m, ONCHAIN_BTC as n, ONCHAIN_CLAIM_MARGIN_SECONDS as o, ONCHAIN_DUST_SATS as p, ONCHAIN_ORDER_MARGIN_SECONDS as q, requestOnchainSend as r, ONCHAIN_RECEIVE_PAIR as s, ONCHAIN_SECONDS_PER_BLOCK as t, ONCHAIN_SEND_PAIR as u, type OnchainHtlcPhase as v, RFQ_REFUSAL_ERROR_CODES as w, RFQ_TERMINAL_STATES as x, type RelaySocket as y, type RfqQuote as z };
+export { deriveOnchainReceive as $, ARKADE_ASSET as A, type RfqRefusalDetail as B, type ChainSource as C, type RfqRefusalErrorCode as D, type RfqRefusalReason as E, type RfqRefusalUnit as F, type RfqStatus as G, type HtlcUtxo as H, type InvoiceFacts as I, SwapRefusal as J, arkadeAssetLeg as K, LIGHTNING_BTC as L, MAX_MIN_CONFIRMATIONS as M, arkadeSwapRequest as N, type OnchainNetwork as O, assertArkadeFundable as P, assertFundable as Q, type RfqTransport as R, SOLO_REFUND_HEADROOM_SECONDS as S, assertReceivable as T, awaitOnchainFill as U, buildHtlcClaim as V, buildHtlcRefund as W, canonicalAssetAmount as X, claimOnchainFill as Y, classifyOnchainHtlc as Z, deriveLightningReceive as _, type OnchainHtlc as a, deriveOnchainSend as a0, extractPreimage as a1, httpTransport as a2, isRfqRefusalErrorCode as a3, l1ScriptForAddress as a4, lightningReceiveRequest as a5, lightningSendRequest as a6, lightningSendVtxoScript as a7, newPreimage as a8, newRfqId as a9, normalizeMakerPkScript as aa, normalizeMakerPublicKey as ab, offerTermsFromQuote as ac, onchainHtlcScript as ad, onchainReceiveRequest as ae, onchainSendRequest as af, paymentHashOf as ag, receiveVtxoScript as ah, relayTransport as ai, requestArkadeSwap as aj, requestLightningReceive as ak, requestOnchainReceive as al, rfqPair as am, unilateralClaimDelay as an, unilateralRefundDelay as ao, unilateralRefundWithoutReceiverDelay as ap, verifyLockupAddress as aq, verifyOfferAddress as ar, verifyReceiveInvoice as as, type OnchainHtlcParams as b, requestLightningSend as c, ARKADE_BTC as d, AddressMismatch as e, type ChainUtxo as f, LIGHTNING_RECEIVE_PAIR as g, LIGHTNING_SEND_PAIR as h, LOCKTIME_THRESHOLD as i, type LightningReceiveTreeParams as j, type LightningSendTreeParams as k, MIN_CLAIM_WINDOW_SECONDS as l, MIN_HEADROOM_SECONDS as m, ONCHAIN_BTC as n, ONCHAIN_CLAIM_MARGIN_SECONDS as o, ONCHAIN_DUST_SATS as p, ONCHAIN_ORDER_MARGIN_SECONDS as q, requestOnchainSend as r, ONCHAIN_RECEIVE_PAIR as s, ONCHAIN_SECONDS_PER_BLOCK as t, ONCHAIN_SEND_PAIR as u, type OnchainHtlcPhase as v, RFQ_REFUSAL_ERROR_CODES as w, RFQ_TERMINAL_STATES as x, type RelaySocket as y, type RfqQuote as z };