@arkade-os/swap 0.1.0-rc.3 → 0.1.0-rc.5

package/dist/advanced.cjs

@@ -739,7 +739,7 @@ var init_rfq = __esm({
         payment_hash: input.paymentHash,
         payout_address: input.payoutAddress,
         payout_pubkey: import_base7.hex.encode(input.payoutPubkey),
-        claim_packet: input.claimPacket
+        ...input.claimPacket === void 0 ? {} : { claim_packet: input.claimPacket }
       }
     });
     MIN_CLAIM_WINDOW_SECONDS = 30 * 60;
@@ -923,6 +923,7 @@ __export(advanced_exports, {
   CORRIDOR_FACTORIES: () => CORRIDOR_FACTORIES,
   CORRIDOR_PASS: () => CORRIDOR_PASS,
   ClientDisposed: () => ClientDisposed,
+  CovclaimdRevealError: () => CovclaimdRevealError,
   DEFAULT_INVOICE_EXPIRY_SECONDS: () => DEFAULT_INVOICE_EXPIRY_SECONDS,
   DiscoverySnapshotUnavailable: () => DiscoverySnapshotUnavailable,
   FEED_TTL_MS: () => FEED_TTL_MS,
@@ -970,6 +971,7 @@ __export(advanced_exports, {
   corridorOutcome: () => corridorOutcome,
   corridorRecordStore: () => corridorRecordStore,
   corridorSet: () => corridorSet,
+  covclaimdClient: () => covclaimdClient,
   createSwapClient: () => createSwapClient,
   createSwapDrive: () => createSwapDrive,
   decodeBolt11: () => decodeBolt11,
@@ -1029,6 +1031,8 @@ __export(advanced_exports, {
   resolveCorridorBase: () => resolveCorridorBase,
   resolveCorridorDeps: () => resolveCorridorDeps,
   resolveRoute: () => resolveRoute,
+  revealClaimPacket: () => revealClaimPacket,
+  revealFieldsFromScript: () => revealFieldsFromScript,
   rfqLeg: () => rfqLeg,
   rfqPairFor: () => rfqPairFor,
   rfqRecordOf: () => rfqRecordOf,
@@ -1145,6 +1149,7 @@ var swap_want_btc_program_default = {
 
 // src/coverage.ts
 var RETIRABLE = ["fulfilled", "cancelled"];
+var LOCKUP_RETIRABLE = ["settled", "refunded"];
 var issuedAt = /* @__PURE__ */ new Map();
 var inFlight = /* @__PURE__ */ new Map();
 async function serialize(script, task) {
@@ -3824,7 +3829,7 @@ async function restoreAssetSwaps(indexer, txs, existingIds, opts) {
     const vtxo = vtxoByScriptAndTxid.get(
       `${import_base11.hex.encode(offer.swapPkScript)}:${fundingTx.redeemTxid}`
     );
-    if (vtxo?.virtualStatus.state !== "spent") continue;
+    if (!vtxo?.isSpent) continue;
     for (const txid of spendTxidsOf(vtxo)) spendTxids.add(txid);
   }
   const spendTxByTxid = await fetchParsedTxs(indexer, [...spendTxids]);
@@ -3846,11 +3851,10 @@ async function restoreAssetSwaps(indexer, txs, existingIds, opts) {
       continue;
     }
     const fromAmount = depositAmount.toString();
-    const state = vtxo.virtualStatus.state;
-    const spentTxid = state === "spent" ? vtxo.arkTxId || vtxo.spentBy : void 0;
+    const spentTxid = vtxo.isSpent ? vtxo.arkTxId || vtxo.spentBy : void 0;
     let status = "pending";
-    if (state === "swept") status = "recoverable";
-    else if (state === "spent") {
+    if (vtxo.isSwept) status = "recoverable";
+    else if (vtxo.isSpent) {
       const spendTxs = spendTxidsOf(vtxo).map((id) => spendTxByTxid.get(id)).filter((tx) => tx !== void 0);
       const kind = classifyDepositSpend(offer, operatorPubkey, spendTxs, {
         txid: vtxo.txid,
@@ -3908,6 +3912,7 @@ var rfqRecordOf = (record) => ({
   updatedAt: record.updatedAt,
   ...record.refundTxid === void 0 ? {} : { refundTxid: record.refundTxid },
   ...record.lockupSpendTxids?.length ? { lockupSpendTxids: [...record.lockupSpendTxids] } : {},
+  ...record.settlementPreimageHex === void 0 ? {} : { settlementPreimageHex: record.settlementPreimageHex },
   ...record.failure === void 0 ? {} : { failure: record.failure },
   ...record.claimFailure === void 0 ? {} : { claimFailure: record.claimFailure },
   ...record.blockedReason === void 0 ? {} : { blockedReason: record.blockedReason }
@@ -3916,6 +3921,7 @@ var withRfqState = (record, state) => {
   const {
     refundTxid: _refundTxid,
     lockupSpendTxids: _lockupSpendTxids,
+    settlementPreimageHex: _settlementPreimageHex,
     failure: _failure,
     claimFailure: _claimFailure,
     blockedReason: _blockedReason,
@@ -3928,6 +3934,7 @@ var withRfqState = (record, state) => {
     updatedAt: state.updatedAt,
     ...state.refundTxid === void 0 ? {} : { refundTxid: state.refundTxid },
     ...state.lockupSpendTxids?.length ? { lockupSpendTxids: [...state.lockupSpendTxids] } : {},
+    ...state.settlementPreimageHex === void 0 ? {} : { settlementPreimageHex: state.settlementPreimageHex },
     ...state.failure === void 0 ? {} : { failure: state.failure },
     ...state.claimFailure === void 0 ? {} : { claimFailure: state.claimFailure },
     ...state.blockedReason === void 0 ? {} : { blockedReason: state.blockedReason }
@@ -4160,7 +4167,7 @@ var retireOfferScripts = async (wallet, repository, record) => {
 var isMissingVtxo = (error) => error instanceof NoSpendableDepositError;
 
 // src/client/drive.ts
-var import_sdk22 = require("@arkade-os/sdk");
+var import_sdk23 = require("@arkade-os/sdk");
 var import_base17 = require("@scure/base");
 
 // src/claim.ts
@@ -4337,6 +4344,7 @@ var managerState = (swap) => ({
   updatedAt: swap.updatedAt,
   ...swap.refundTxid ? { refundTxid: swap.refundTxid } : {},
   ...swap.lockupSpendTxids?.length ? { lockupSpendTxids: [...swap.lockupSpendTxids] } : {},
+  ...swap.settlementPreimageHex ? { settlementPreimageHex: swap.settlementPreimageHex } : {},
   ...swap.failure ? { failure: swap.failure } : {},
   ...swap.claimFailure ? { claimFailure: swap.claimFailure } : {},
   ...swap.blockedReason ? { blockedReason: swap.blockedReason } : {}
@@ -4372,6 +4380,7 @@ function updateRfqSwapRecord(record, swap) {
   const {
     refundTxid: _refundTxid,
     lockupSpendTxids: _lockupSpendTxids,
+    settlementPreimageHex: _settlementPreimageHex,
     failure: _failure,
     claimFailure: _claimFailure,
     blockedReason: _blockedReason,
@@ -4419,6 +4428,7 @@ function rebuildRfqSwap(record, params) {
     updatedAt: stored.updatedAt,
     ...stored.refundTxid ? { refundTxid: stored.refundTxid } : {},
     ...stored.lockupSpendTxids?.length ? { lockupSpendTxids: [...stored.lockupSpendTxids] } : {},
+    ...stored.settlementPreimageHex ? { settlementPreimageHex: stored.settlementPreimageHex } : {},
     ...stored.failure ? { failure: stored.failure } : {},
     ...stored.claimFailure ? { claimFailure: stored.claimFailure } : {},
     ...stored.blockedReason ? { blockedReason: stored.blockedReason } : {}
@@ -4437,6 +4447,7 @@ function shouldRetainRfqSwap(record, now) {
 
 // src/swapManager.ts
 var import_base15 = require("@scure/base");
+var import_sdk21 = require("@arkade-os/sdk");
 init_onchainHtlc();
 init_lockupContract();
 function nextOnchainAction(input) {
@@ -4935,6 +4946,7 @@ var RfqSwapManager = class {
         });
         return;
       }
+      if (!(0, import_sdk21.isContractVtxoEvent)(event)) return;
       const swap = this.byLockupScript.get(event.contractScript);
       if (!swap) return;
       void this.pollSwap(swap).catch(() => {
@@ -5008,6 +5020,7 @@ var RfqSwapManager = class {
    * script for its whole life. Best-effort — the swap is over either way. */
   retireContract(swap) {
     if (!this.deps.contracts || !this.registered.get(swap.rfqId)) return;
+    if (!LOCKUP_RETIRABLE.includes(swap.state)) return;
     void this.deps.contracts.setContractWatchState(import_base15.hex.encode(swap.lockupPkScript), "retained").catch((error) => this.emitFailed(swap, error));
   }
   arm() {
@@ -5047,6 +5060,7 @@ var RfqSwapManager = class {
     }
     if (fate.fate === "claimed" || fate.fate === "returned") {
       this.stampLockupSpends(swap, fate.spends);
+      if (fate.fate === "claimed") this.stampSettlementPreimage(swap, fate.preimage);
       this.setState(swap, fate.fate === "claimed" ? "settled" : "refunded");
       return;
     }
@@ -5345,6 +5359,19 @@ var RfqSwapManager = class {
     swap.lockupSpendTxids = txids;
     this.touch(swap);
   }
+  /**
+   * Keep the preimage that settled a Lightning send.
+   *
+   * Only that leg. A receive's `claimed` verdict reveals the wallet's own
+   * claim secret and an onchain send's reveals the one it minted — both
+   * already recoverable from `profile`, so stamping either would be a second
+   * home for a secret that has one.
+   */
+  stampSettlementPreimage(swap, preimage) {
+    if (swap.kind !== "lightning_send") return;
+    swap.settlementPreimageHex = import_base15.hex.encode(preimage);
+    this.touch(swap);
+  }
   touch(swap) {
     swap.updatedAt = this.config.now();
     this.dirty.add(swap.rfqId);
@@ -5480,7 +5507,7 @@ var outpointKey = (vtxo) => `${vtxo.txid}:${vtxo.vout}`;
 
 // src/watch.ts
 var import_base16 = require("@scure/base");
-var import_sdk21 = require("@arkade-os/sdk");
+var import_sdk22 = require("@arkade-os/sdk");
 var TERMINAL = ["fulfilled", "cancelled", "recoverable"];
 var assetSwapSource = (repository) => ({
   list: () => getAssetSwaps(repository),
@@ -5512,7 +5539,7 @@ async function watchOfferSwaps({
     wallet.getAddress(),
     wallet.getArkadeReader()
   ]);
-  const operatorPubkey = import_sdk21.ArkAddress.decode(address).serverPubKey;
+  const operatorPubkey = import_sdk22.ArkAddress.decode(address).serverPubKey;
   let queue = Promise.resolve();
   const enqueue = (task) => {
     queue = queue.then(task).catch(() => {
@@ -5527,7 +5554,7 @@ async function watchOfferSwaps({
       return classifyDepositSpend(
         decodeOffer(import_base16.hex.decode(swap.offerHex)),
         operatorPubkey,
-        txs.map((psbt) => import_sdk21.Transaction.fromPSBT(import_base16.base64.decode(psbt))),
+        txs.map((psbt) => import_sdk22.Transaction.fromPSBT(import_base16.base64.decode(psbt))),
         { txid: vtxo.txid, vout: vtxo.vout }
       );
     } catch {
@@ -5555,7 +5582,7 @@ async function watchOfferSwaps({
     }
   };
   const unsubscribe = manager.onContractEvent((event) => {
-    if (event.type !== "vtxo_spent") return;
+    if (!(0, import_sdk22.isContractVtxoEvent)(event) || event.type !== "vtxo_spent") return;
     enqueue(() => handleSpend(event));
   });
   return {
@@ -5738,7 +5765,7 @@ var createSwapDrive = (config) => {
       const secret = rfqClaimSecretOf(record);
       if (!secret) throw new Error(`rfq swap ${swap.rfqId} carries no claim secret`);
       const preimage = await preimageForSwapRecord(wallet, secret);
-      const signer = await (0, import_sdk22.contractSigner)(wallet, await (0, import_sdk22.identityDescriptor)(wallet.identity));
+      const signer = await (0, import_sdk23.contractSigner)(wallet, await (0, import_sdk23.identityDescriptor)(wallet.identity));
       const claimKey = record.profile.claimKey;
       if (typeof claimKey === "string") {
         const held = import_base17.hex.encode(await signer.xOnlyPublicKey());
@@ -5796,10 +5823,10 @@ var createSwapDrive = (config) => {
     return track(
       pushClaim(operator, {
         contract: script,
-        receiver: await (0, import_sdk22.contractSigner)(wallet, secret.signingDescriptor),
+        receiver: await (0, import_sdk23.contractSigner)(wallet, secret.signingDescriptor),
         preimage: await preimageForSwapRecord(wallet, secret),
         vtxos,
-        destinationPkScript: import_sdk22.ArkAddress.decode(payoutAddress).pkScript,
+        destinationPkScript: import_sdk23.ArkAddress.decode(payoutAddress).pkScript,
         // Passed straight through, both of them: the manager's own value
         // check decides WHEN to act, `pushClaim`'s decides whether `P` is
         // published, and it is the one with nothing between it and the
@@ -5879,7 +5906,7 @@ var createSwapDrive = (config) => {
       ...tx.createdAt ? { createdAt: Math.floor(tx.createdAt / 1e3) } : {}
     }));
     const { restored, scannedTxids } = await restoreAssetSwaps(indexer, txs, /* @__PURE__ */ new Set(), {
-      operatorPubkey: import_sdk22.ArkAddress.decode(address).serverPubKey,
+      operatorPubkey: import_sdk23.ArkAddress.decode(address).serverPubKey,
       scanned
     });
     const byDeposit = new Map(restored.map((s) => [`${s.swapPkScript}:${s.fundingTxid}`, s]));
@@ -6151,7 +6178,7 @@ var usableMarkets = (snapshot, policy) => {
   const allowed = policy?.allowedRegistries;
   return (allowed ? snapshot.markets.filter((card) => allowed.includes(card.source)) : snapshot.markets).filter(isAddressable);
 };
-var eligibleMarkets = (snapshot, legs, policy) => {
+var eligibleMarkets = (snapshot, legs, policy, takeAmount) => {
   const markets = usableMarkets(snapshot, policy);
   const { give, take } = legs;
   if (give.corridor === take.corridor && give.assetId === take.assetId) return [];
@@ -6165,7 +6192,8 @@ var eligibleMarkets = (snapshot, legs, policy) => {
       quoteCorridor: quote.corridor,
       // The trader receives the take leg, so that side must be one the
       // solver can pay out; a direction nobody solves yields no market.
-      wantSide: side === "base" ? "quote" : "base"
+      wantSide: side === "base" ? "quote" : "base",
+      ...takeAmount === void 0 ? {} : { wantAmount: takeAmount }
     }).map((card) => ({
       card,
       give: side,
@@ -6281,7 +6309,12 @@ var resolveRoute = async (input, deps) => {
     claimed?.instrument ?? (takeLeg.corridor === "arkade" ? { kind: "wallet" } : void 0)
   );
   const amount = pinAmount(input, take.instrument);
-  const candidates = eligibleMarkets(snapshot, { give: giveLeg, take: takeLeg }, deps.policy);
+  const candidates = eligibleMarkets(
+    snapshot,
+    { give: giveLeg, take: takeLeg },
+    deps.policy,
+    amount?.on === "take" ? amount.value : void 0
+  );
   const market = chooseMarket(candidates, deps.policy);
   const resolution = {
     give,
@@ -6572,17 +6605,17 @@ var verifyPlanLegs = (plan, legs, give) => {
 // src/client/quoteRfq.ts
 var import_base18 = require("@scure/base");
 var import_secp256k12 = require("@noble/curves/secp256k1.js");
-var import_sdk25 = require("@arkade-os/sdk");
+var import_sdk26 = require("@arkade-os/sdk");
 init_claimPacket();
 init_onchainHtlc();
 init_onchainHtlc();
 
 // src/payment/onchainSwap.ts
-var import_sdk24 = require("@arkade-os/sdk");
+var import_sdk25 = require("@arkade-os/sdk");
 init_onchainHtlc();
 
 // src/payment/swapRail.ts
-var import_sdk23 = require("@arkade-os/sdk");
+var import_sdk24 = require("@arkade-os/sdk");
 
 // src/client/sats.ts
 var satsOf = (value, field) => {
@@ -6633,14 +6666,14 @@ var parseRfqQuote = (quote) => ({
 
 // src/client/quoteRfq.ts
 var covenantInputs = (input) => {
-  const network = (0, import_sdk25.networkFromArkadeInfo)(input.info);
+  const network = (0, import_sdk26.networkFromArkadeInfo)(input.info);
   const arkade2 = input.corridors.get("arkade").deps;
   return {
-    operatorPubkey: (0, import_sdk25.toXOnly)(import_base18.hex.decode(input.info.signerPubkey), "ark signer key"),
+    operatorPubkey: (0, import_sdk26.toXOnly)(import_base18.hex.decode(input.info.signerPubkey), "ark signer key"),
     // The per-network pin the arkade module already resolved, never a key
     // the operator reports about itself: this one ends up in a covenant leaf
     // that decides who can move the funds.
-    emulatorPubkey: (0, import_sdk25.toXOnly)(import_base18.hex.decode(arkade2.emulatorPubkey), "emulator signer key"),
+    emulatorPubkey: (0, import_sdk26.toXOnly)(import_base18.hex.decode(arkade2.emulatorPubkey), "emulator signer key"),
     claimDelay: unilateralClaimDelay(Number(input.info.unilateralExitDelay)),
     hrp: network.hrp
   };
@@ -6686,7 +6719,7 @@ var quoteLightningSend = async (input) => {
   }
   const pair = rfqPairFor(input.legs.give, input.legs.take);
   const rfqId = newRfqId();
-  const secrets = await (0, import_sdk25.provisionRefundKey)(input.wallet);
+  const secrets = await (0, import_sdk26.provisionRefundKey)(input.wallet);
   const wire = await input.transport.requestQuote(
     lightningSendRequest({
       rfqId,
@@ -6758,7 +6791,7 @@ var quoteLightningReceive = async (input) => {
   const pinned = pinnedFor(input);
   const pair = rfqPairFor(input.legs.give, input.legs.take);
   const rfqId = newRfqId();
-  const secrets = await (0, import_sdk25.provisionClaimSecret)(input.wallet);
+  const secrets = await (0, import_sdk26.provisionClaimSecret)(input.wallet);
   const paymentHash = import_base18.hex.encode(secrets.paymentHash);
   const payoutAddress = await input.wallet.getAddress();
   const lightning = input.corridors.get("lightning").deps;
@@ -6883,8 +6916,8 @@ var quoteOnchainSend = async (input) => {
     claimVsize: onchain.claimVsize
   }) : void 0;
   const quoted = claimFee === void 0 ? pinned : { on: pinned.on, value: pinned.value + claimFee, source: pinned.source };
-  const secrets = await (0, import_sdk25.provisionClaimSecret)(input.wallet);
-  const payoutKey = await (0, import_sdk25.provisionRefundKey)(input.wallet);
+  const secrets = await (0, import_sdk26.provisionClaimSecret)(input.wallet);
+  const payoutKey = await (0, import_sdk26.provisionRefundKey)(input.wallet);
   const paymentHash = import_base18.hex.encode(secrets.paymentHash);
   const wire = await input.transport.requestQuote(
     withCanonicalAmount(
@@ -6991,7 +7024,7 @@ var quoteOnchainSend = async (input) => {
 };
 
 // src/client/verbs.ts
-var import_sdk26 = require("@arkade-os/sdk");
+var import_sdk27 = require("@arkade-os/sdk");
 var enforceFeeCeiling = (quote, call, policy) => {
   let ceiling;
   for (const [source, limit] of [
@@ -7016,9 +7049,9 @@ var settle = async (deps, input, maxFee) => {
   return deps.accept(quote);
 };
 var pay = async (deps, destination, options = {}) => {
-  const arkade2 = (0, import_sdk26.arkTarget)(destination);
+  const arkade2 = (0, import_sdk27.arkTarget)(destination);
   if (arkade2 !== void 0) {
-    const amount = (0, import_sdk26.resolveSendAmount)(
+    const amount = (0, import_sdk27.resolveSendAmount)(
       "ark",
       destination,
       options.amount === void 0 ? void 0 : satsOf(options.amount, "amount")
@@ -7333,6 +7366,129 @@ var createSwapClient = (config) => {
   };
   return client;
 };
+
+// src/reveal.ts
+var import_base20 = require("@scure/base");
+var import_legacy4 = require("@noble/hashes/legacy.js");
+var import_sha26 = require("@noble/hashes/sha2.js");
+var import_sdk28 = require("@arkade-os/sdk");
+init_claimPacket();
+var CovclaimdRevealError = class extends Error {
+  name = "CovclaimdRevealError";
+  status;
+  detail;
+  retryable;
+  constructor(what, status, detail) {
+    super(`covclaimd ${what} failed: ${status || "no response"} ${detail}`.trimEnd());
+    this.status = status;
+    this.detail = detail;
+    this.retryable = status === 0 || status === 429 || status >= 500;
+  }
+};
+var decodeKey = (value, field) => {
+  if (typeof value !== "string") throw new Error(`covclaimd info: ${field} is not a string`);
+  let bytes;
+  try {
+    bytes = import_base20.hex.decode(value);
+  } catch {
+    throw new Error(`covclaimd info: ${field} is not hex`);
+  }
+  if (bytes.length !== 33) {
+    throw new Error(`covclaimd info: ${field} must be 33-byte compressed, got ${bytes.length}`);
+  }
+  return bytes;
+};
+var LOOPBACK = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]"]);
+var assertTransportSecure = (baseUrl, allowInsecureHttp) => {
+  const { protocol, hostname } = new URL(baseUrl);
+  if (protocol === "https:" || allowInsecureHttp) return;
+  if (protocol === "http:" && LOOPBACK.has(hostname)) return;
+  throw new Error(
+    `covclaimd URL must be https (got ${protocol}//${hostname}): the key it serves is the one the preimage gets sealed to. Pass allowInsecureHttp to override.`
+  );
+};
+var covclaimdClient = (baseUrl, options = {}) => {
+  assertTransportSecure(baseUrl, options.allowInsecureHttp === true);
+  const url = baseUrl.replace(/\/+$/, "");
+  const fetchImpl = options.fetchImpl ?? fetch;
+  const timeoutMs = options.timeoutMs ?? 3e4;
+  const send = async (what, path, init) => {
+    let response;
+    try {
+      response = await fetchImpl(`${url}${path}`, {
+        ...init,
+        // a redirect would move the key fetch off the vetted origin
+        redirect: "error",
+        signal: AbortSignal.timeout(timeoutMs)
+      });
+    } catch (error) {
+      throw new CovclaimdRevealError(what, 0, String(error));
+    }
+    if (!response.ok) {
+      throw new CovclaimdRevealError(what, response.status, await response.text());
+    }
+    return response;
+  };
+  const readJson = async (what, response) => {
+    const body = await response.text();
+    try {
+      return JSON.parse(body);
+    } catch {
+      throw new CovclaimdRevealError(
+        what,
+        response.status,
+        `non-JSON body: ${body.slice(0, 200)}`
+      );
+    }
+  };
+  return {
+    async info() {
+      const response = await send("info", "/v1/preimage/covclaimd-pubkey", {
+        method: "GET"
+      });
+      const body = await readJson("info", response);
+      return {
+        covclaimdPubkey: decodeKey(body?.covclaimd_pub_key, "covclaimd_pub_key"),
+        emulatorPubkey: import_base20.hex.encode(decodeKey(body?.emulator_pub_key, "emulator_pub_key"))
+      };
+    },
+    async reveal(params) {
+      await send("reveal", "/v1/reveal", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+          swap_address: params.swapAddress,
+          packet: { ciphertext: params.ciphertext, arkade_script: params.arkadeScript },
+          taptree: params.taptree
+        })
+      });
+    }
+  };
+};
+function revealFieldsFromScript(script) {
+  if (!script.nonInteractiveClaimArkadeScript) {
+    throw new Error("this covenant has no non-interactive claim leaf to reveal against");
+  }
+  return {
+    arkadeScript: import_base20.base64.encode(script.nonInteractiveClaimArkadeScript),
+    taptree: import_base20.hex.encode(script.encode())
+  };
+}
+async function revealClaimPacket(client, input) {
+  const fields = revealFieldsFromScript(input.script);
+  if (import_base20.hex.encode(import_sdk28.ArkAddress.decode(input.address).pkScript) !== import_base20.hex.encode(input.script.pkScript)) {
+    throw new Error("address does not belong to this covenant");
+  }
+  if (import_base20.hex.encode((0, import_legacy4.ripemd160)((0, import_sha26.sha256)(input.preimage))) !== import_base20.hex.encode(input.script.options.preimageHash)) {
+    throw new Error("preimage does not match the covenant's payment hash");
+  }
+  const { ciphertext } = await sealClaimPacket({
+    preimage: input.preimage,
+    covclaimdPubkey: (await client.info()).covclaimdPubkey
+  });
+  await client.reveal({ swapAddress: input.address, ciphertext, ...fields });
+  return { ciphertext };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ACTIVITY_TOKEN,
@@ -7350,6 +7506,7 @@ var createSwapClient = (config) => {
   CORRIDOR_FACTORIES,
   CORRIDOR_PASS,
   ClientDisposed,
+  CovclaimdRevealError,
   DEFAULT_INVOICE_EXPIRY_SECONDS,
   DiscoverySnapshotUnavailable,
   FEED_TTL_MS,
@@ -7397,6 +7554,7 @@ var createSwapClient = (config) => {
   corridorOutcome,
   corridorRecordStore,
   corridorSet,
+  covclaimdClient,
   createSwapClient,
   createSwapDrive,
   decodeBolt11,
@@ -7456,6 +7614,8 @@ var createSwapClient = (config) => {
   resolveCorridorBase,
   resolveCorridorDeps,
   resolveRoute,
+  revealClaimPacket,
+  revealFieldsFromScript,
   rfqLeg,
   rfqPairFor,
   rfqRecordOf,

package/dist/advanced.d.cts

@@ -1,13 +1,13 @@
-import { A as AssetAliasTable, C as CorridorFactory, a as ArkadeCorridorDeps, L as LightningCorridorDeps, O as OnchainCorridorDeps, b as CorridorSet, D as DiscoveryIndex, S as SwapPolicy, c as DiscoveryLeg, M as MarketCandidate, d as DiscoverySnapshot } from './errors-CcvUMXEF.cjs';
-export { e as AcceptConflict, f as AcceptInput, g as AmbiguousDestination, h as AmountEncodingUnsupported, i as AmountMismatch, j as AttestingRfqTransport, k as CORRIDOR_FACTORIES, l as CancelInput, m as CancelOutcome, n as ClaimedDestination, o as ClientDisposed, p as CorridorBase, q as CorridorClaim, r as CorridorCovenant, s as CorridorDeadline, t as CorridorDeps, u as CorridorDepsByCorridor, v as CorridorDrive, w as CorridorLockup, x as CorridorModule, y as CorridorOverrides, z as CorridorPass, B as DiscoveryConfig, E as DiscoveryIndexInput, F as DiscoverySnapshotUnavailable, G as DriveMode, H as DriveRefusal, I as ExchangeOptions, J as FEED_TTL_MS, K as FeeCeiling, N as FeedFetch, P as FeedQuoteInput, Q as INDEXED_NETWORKS, R as InconsistentRoute, T as InsufficientFunds, U as LockupOwner, V as Market, W as MaxFeeExceeded, X as MissingCorridorDep, Y as NotCancellable, Z as ONCHAIN_CLAIM_FEE_RATE_SATVB, _ as ObservationSeam, $ as OfferPreparation, a0 as OnchainClaim, a1 as OperatorUnreachable, a2 as ParsedRfqQuote, a3 as PayOptions, a4 as PayResult, a5 as QuoteCheck, a6 as QuoteExpired, a7 as QuotePreparation, a8 as QuoteVerificationFailed, a9 as REGISTRY_URL, aa as ReceiveArtifact, ab as ReceiveOptions, ac as ReceiveRequest, ad as RecoveryResult, ae as RegisteredAsset, af as RfqAuctionPolicy, ag as RfqPreparation, ah as RfqQuoteInput, ai as RfqRendezvous, aj as RfqTransportFactory, ak as RouteSide, al as SWAP_ERROR_NAMES, am as SwapClient, an as SwapClientConfig, ao as SwapDrive, ap as SwapDriveConfig, aq as SwapDriveRefusedError, ar as SwapError, as as SwapErrorName, at as SwapFilter, au as UnsupportedRoute, av as VerbDeps, aw as acceptQuote, ax as attesting, ay as cancelSwap, az as canonicalAssetId, aA as cardMarketOf, aB as chooseMarket, aC as conflictingFields, aD as corridorSet, aE as createSwapClient, aF as createSwapDrive, aG as discoveryIndex, aH as eligibleMarkets, aI as enforceFeeCeiling, aJ as exchange, aK as feedFetch, aL as isAddressable, aM as isCardMarket, aN as isIndexedNetwork, aO as isSwapError, aP as isUsableCard, aQ as liveArkadeInfo, aR as marketBackendOf, aS as marketKeyOf, aT as marketRefOf, aU as nostrTransportFactory, aV as parseRfqQuote, aW as pay, aX as quoteFromFeed, aY as quoteViaRfq, aZ as readableRecord, a_ as receive, a$ as resolveCorridorBase, b0 as resolveCorridorDeps, b1 as rfqLeg, b2 as rfqPairFor, b3 as swapRecordOf, b4 as toDiscoveryLeg, b5 as usableMarkets, b6 as withCanonicalAmount } from './errors-CcvUMXEF.cjs';
+import { A as AssetAliasTable, C as CorridorFactory, a as ArkadeCorridorDeps, L as LightningCorridorDeps, O as OnchainCorridorDeps, b as CorridorSet, D as DiscoveryIndex, S as SwapPolicy, c as DiscoveryLeg, M as MarketCandidate, d as DiscoverySnapshot } from './errors-DUTOiyH2.cjs';
+export { e as AcceptConflict, f as AcceptInput, g as AmbiguousDestination, h as AmountEncodingUnsupported, i as AmountMismatch, j as AttestingRfqTransport, k as CORRIDOR_FACTORIES, l as CancelInput, m as CancelOutcome, n as ClaimedDestination, o as ClientDisposed, p as CorridorBase, q as CorridorClaim, r as CorridorCovenant, s as CorridorDeadline, t as CorridorDeps, u as CorridorDepsByCorridor, v as CorridorDrive, w as CorridorLockup, x as CorridorModule, y as CorridorOverrides, z as CorridorPass, B as DiscoveryConfig, E as DiscoveryIndexInput, F as DiscoverySnapshotUnavailable, G as DriveMode, H as DriveRefusal, I as ExchangeOptions, J as FEED_TTL_MS, K as FeeCeiling, N as FeedFetch, P as FeedQuoteInput, Q as INDEXED_NETWORKS, R as InconsistentRoute, T as InsufficientFunds, U as LockupOwner, V as Market, W as MaxFeeExceeded, X as MissingCorridorDep, Y as NotCancellable, Z as ONCHAIN_CLAIM_FEE_RATE_SATVB, _ as ObservationSeam, $ as OfferPreparation, a0 as OnchainClaim, a1 as OperatorUnreachable, a2 as ParsedRfqQuote, a3 as PayOptions, a4 as PayResult, a5 as QuoteCheck, a6 as QuoteExpired, a7 as QuotePreparation, a8 as QuoteVerificationFailed, a9 as REGISTRY_URL, aa as ReceiveArtifact, ab as ReceiveOptions, ac as ReceiveRequest, ad as RecoveryResult, ae as RegisteredAsset, af as RfqAuctionPolicy, ag as RfqPreparation, ah as RfqQuoteInput, ai as RfqRendezvous, aj as RfqTransportFactory, ak as RouteSide, al as SWAP_ERROR_NAMES, am as SwapClient, an as SwapClientConfig, ao as SwapDrive, ap as SwapDriveConfig, aq as SwapDriveRefusedError, ar as SwapError, as as SwapErrorName, at as SwapFilter, au as UnsupportedRoute, av as VerbDeps, aw as acceptQuote, ax as attesting, ay as cancelSwap, az as canonicalAssetId, aA as cardMarketOf, aB as chooseMarket, aC as conflictingFields, aD as corridorSet, aE as createSwapClient, aF as createSwapDrive, aG as discoveryIndex, aH as eligibleMarkets, aI as enforceFeeCeiling, aJ as exchange, aK as feedFetch, aL as isAddressable, aM as isCardMarket, aN as isIndexedNetwork, aO as isSwapError, aP as isUsableCard, aQ as liveArkadeInfo, aR as marketBackendOf, aS as marketKeyOf, aT as marketRefOf, aU as nostrTransportFactory, aV as parseRfqQuote, aW as pay, aX as quoteFromFeed, aY as quoteViaRfq, aZ as readableRecord, a_ as receive, a$ as resolveCorridorBase, b0 as resolveCorridorDeps, b1 as rfqLeg, b2 as rfqPairFor, b3 as swapRecordOf, b4 as toDiscoveryLeg, b5 as usableMarkets, b6 as withCanonicalAmount } from './errors-DUTOiyH2.cjs';
 import { DiscoveredMarket } from '@arkade-os/solver-discovery';
-import { N as NetworkRef, C as Corridor, A as AssetId, R as Rail, a as RfqSwapRecordStore, b as CorridorSwapRecord, Q as QuoteId, S as SwapRecord, O as OfferSwapRecord, c as AssetSwapRepository, d as RfqSwapRecord, L as LockupSpendIndexer, e as AssetSwapStatus, f as RouteResolution, g as ResolvedEndpoint, P as PinnedAmount, I as Instrument, h as Route, i as QuoteInput, j as Pubkey } from './repository-B8MJY64N.cjs';
-export { k as ACTIVITY_TOKEN, l as ARKADE_ASSET_NAMESPACE, m as Amount, n as AmountFormatError, o as AmountOn, p as AmountRefusal, q as Artifact, r as AssetIdError, s as AssetIdRefusal, t as AssetNamespace, u as AssetOn, v as AssetPart, w as AssetRef, x as AssetScale, y as AssetSwapId, z as AtomicDecimal, B as AuctionMarketRef, D as AuctionProvenance, E as BITCOIN_RAILS, F as BTC_ASSET_PART, G as BitcoinRail, H as CORRIDORS, J as CORRIDOR_PASS, K as CardMarketRef, M as CorridorId, T as CorridorKind, U as DepositArtifact, V as DisplayDecimal, W as Endpoint, X as Ep, Y as Hex, Z as LOCKUP_OWNER, _ as MarketBackend, $ as MarketRef, a0 as OFFER_SWAP_ID_PREFIX, a1 as Outcome, a2 as ParsedAssetId, a3 as Quote, a4 as QuoteLeg, a5 as RAILS, a6 as RFQ_SWAP_ID_PREFIX, a7 as RailOf, a8 as RankedBid, a9 as RawState, aa as RecordedArtifact, ab as RecordedEndpoint, ac as RecordedInstrument, ad as RecordedLeg, ae as RfqAmountSide, af as SnapshotRef, ag as Swap, ah as SwapFamily, ai as SwapRecordCommon, aj as SwapUpdate, ak as Unsubscribe, al as arkadeAsset, am as artifactOf, an as assetPartOf, ao as assetSwapIdOf, ap as bitcoinNetworkOf, aq as btcOn, ar as corridorOfRail, as as corridorOutcome, at as decodeRfqAmount, au as encodeRfqAmount, av as familyOfSwapId, aw as formatAssetId, ax as fromAtomicDecimal, ay as fromRfqAmountSide, az as fundsFromWallet, aA as instrumentOf, aB as isAssetId, aC as isAtomicDecimal, aD as isNetworkRef, aE as issuanceOf, aF as legOf, aG as offerOutcome, aH as parseAssetId, aI as quoteIdOfSwapId, aJ as railOf, aK as railOfCorridor, aL as readsChain, aM as recordArtifact, aN as recordEndpoint, aO as recordInstrument, aP as recordLeg, aQ as recordOutcome, aR as sameAsset, aS as swapOf, aT as toAtomicDecimal, aU as toRfqAmountSide, aV as toSafeNumber } from './repository-B8MJY64N.cjs';
-import { I as InvoiceFacts, C as ChainSource, R as RfqQuote } from './rfq-CSgBQkjl.cjs';
-export { S as SwapRefusal } from './rfq-CSgBQkjl.cjs';
+import { N as NetworkRef, C as Corridor, A as AssetId, R as Rail, a as RfqSwapRecordStore, b as CorridorSwapRecord, Q as QuoteId, S as SwapRecord, O as OfferSwapRecord, c as AssetSwapRepository, d as RfqSwapRecord, L as LockupSpendIndexer, e as AssetSwapStatus, f as RouteResolution, g as ResolvedEndpoint, P as PinnedAmount, I as Instrument, h as Route, i as QuoteInput, j as Pubkey } from './repository-CDlK003C.cjs';
+export { k as ACTIVITY_TOKEN, l as ARKADE_ASSET_NAMESPACE, m as Amount, n as AmountFormatError, o as AmountOn, p as AmountRefusal, q as Artifact, r as AssetIdError, s as AssetIdRefusal, t as AssetNamespace, u as AssetOn, v as AssetPart, w as AssetRef, x as AssetScale, y as AssetSwapId, z as AtomicDecimal, B as AuctionMarketRef, D as AuctionProvenance, E as BITCOIN_RAILS, F as BTC_ASSET_PART, G as BitcoinRail, H as CORRIDORS, J as CORRIDOR_PASS, K as CardMarketRef, M as CorridorId, T as CorridorKind, U as DepositArtifact, V as DisplayDecimal, W as Endpoint, X as Ep, Y as Hex, Z as LOCKUP_OWNER, _ as MarketBackend, $ as MarketRef, a0 as OFFER_SWAP_ID_PREFIX, a1 as Outcome, a2 as ParsedAssetId, a3 as Quote, a4 as QuoteLeg, a5 as RAILS, a6 as RFQ_SWAP_ID_PREFIX, a7 as RailOf, a8 as RankedBid, a9 as RawState, aa as RecordedArtifact, ab as RecordedEndpoint, ac as RecordedInstrument, ad as RecordedLeg, ae as RfqAmountSide, af as SnapshotRef, ag as Swap, ah as SwapFamily, ai as SwapRecordCommon, aj as SwapUpdate, ak as Unsubscribe, al as arkadeAsset, am as artifactOf, an as assetPartOf, ao as assetSwapIdOf, ap as bitcoinNetworkOf, aq as btcOn, ar as corridorOfRail, as as corridorOutcome, at as decodeRfqAmount, au as encodeRfqAmount, av as familyOfSwapId, aw as formatAssetId, ax as fromAtomicDecimal, ay as fromRfqAmountSide, az as fundsFromWallet, aA as instrumentOf, aB as isAssetId, aC as isAtomicDecimal, aD as isNetworkRef, aE as issuanceOf, aF as legOf, aG as offerOutcome, aH as parseAssetId, aI as quoteIdOfSwapId, aJ as railOf, aK as railOfCorridor, aL as readsChain, aM as recordArtifact, aN as recordEndpoint, aO as recordInstrument, aP as recordLeg, aQ as recordOutcome, aR as sameAsset, aS as swapOf, aT as toAtomicDecimal, aU as toRfqAmountSide, aV as toSafeNumber } from './repository-CDlK003C.cjs';
+import { I as InvoiceFacts, C as ChainSource, R as RfqQuote } from './rfq-RONK76D7.cjs';
+export { S as SwapRefusal } from './rfq-RONK76D7.cjs';
 import * as btc from '@scure/btc-signer';
-import { OnchainProvider, NetworkName, IWallet } from '@arkade-os/sdk';
-import { O as OfferSpendChanges, a as OfferSwapFacts, b as OfferSwapSource } from './watch-BjMc3SFo.cjs';
+import { OnchainProvider, NetworkName, IWallet, VHTLC } from '@arkade-os/sdk';
+import { O as OfferSpendChanges, a as OfferSwapFacts, b as OfferSwapSource } from './watch-JawNDXBr.cjs';
 
 /**
  * The alias table, filled from discovery.
@@ -583,4 +583,75 @@ declare const verifyQuotedAmount: (input: {
     readonly take: bigint;
 }) => void;
 
-export { type AddressParams, ArkadeCorridorDeps, AssetAliasTable, AssetId, type ChainSourceBackend, Corridor, CorridorFactory, type CorridorRecordStore, CorridorSet, CorridorSwapRecord, DEFAULT_INVOICE_EXPIRY_SECONDS, DiscoveryIndex, DiscoveryLeg, DiscoverySnapshot, INVOICE_HRPS, Instrument, type L1Tip, LIGHTNING_DRIVE, LightningCorridorDeps, MarketCandidate, NetworkRef, ONCHAIN_DRIVE, OfferSwapRecord, OnchainCorridorDeps, PinnedAmount, Pubkey, QuoteId, QuoteInput, Rail, type RecordSink, type ResolveDeps, ResolvedEndpoint, type ResolvedRoute, Route, RouteResolution, SwapPolicy, SwapRecord, aliasTableFrom, applyOfferSpend, arkadeCorridor, assembleRoute, chainSourceOver, corridorRecordStore, decodeBolt11, esploraChainSource, esploraTip, lightningCorridor, networksOfInvoiceHrp, offerFactsOf, offerRecordSource, onchainCorridor, publicAssetId, resolveRoute, rfqRecordOf, satsOf, scopedToRail, splitRecords, verifyPair, verifyQuoteTtl, verifyQuotedAmount, verifyReceiveInvoiceFacts, verifyReceiveWindow, verifyResponder, verifySendInvoice, verifySendWindow, verifyingDerivation, walletLockupIndexer, withOfferStatus, withRfqState };
+/**
+ * `retryable` is the point of the type: a 400 says the packet does not bind to
+ * this address at this daemon — wrong key, script or taptree — and retrying
+ * changes none of them. Only a full registry (429) and a transport fault (5xx,
+ * or `status` 0 for a throwing `fetch`) are worth trying again.
+ */
+declare class CovclaimdRevealError extends Error {
+    readonly name = "CovclaimdRevealError";
+    readonly status: number;
+    readonly detail: string;
+    readonly retryable: boolean;
+    constructor(what: string, status: number, detail: string);
+}
+interface CovclaimdInfo {
+    /** 33-byte compressed — feeds {@link sealClaimPacket} unchanged. */
+    covclaimdPubkey: Uint8Array;
+    /** Compressed hex — feeds `requestLightningReceive`'s `emulatorPubkey`. */
+    emulatorPubkey: string;
+}
+/** The four fields `POST /v1/reveal` takes. */
+interface RevealParams {
+    /** The funded lockup's Arkade address, bech32m. */
+    swapAddress: string;
+    /** `sealClaimPacket(...).ciphertext`, base64. */
+    ciphertext: string;
+    /** The covenant's `enforcePayTo` ArkadeScript, base64. */
+    arkadeScript: string;
+    /** The lockup's serialized taptree, hex. */
+    taptree: string;
+}
+interface CovclaimdClient {
+    info(): Promise<CovclaimdInfo>;
+    reveal(params: RevealParams): Promise<void>;
+}
+/** `fetchImpl` is injectable, matching `httpTransport` in `rfq.ts`. */
+declare const covclaimdClient: (baseUrl: string, options?: {
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+    /** Opt out of the TLS requirement — a private network you trust. */
+    allowInsecureHttp?: boolean;
+}) => CovclaimdClient;
+/**
+ * The two wire fields that are functions of the covenant alone.
+ *
+ * A client-derived `arkadeScript` can differ from the funder's only if the
+ * covenants differ: the script is tweaked into the non-interactive claim leaf's
+ * co-signer key, so a different one is a different leaf, root, and lockup
+ * address — already covered by the address check made before funding.
+ */
+declare function revealFieldsFromScript(script: InstanceType<typeof VHTLC.ScriptV2>): {
+    arkadeScript: string;
+    taptree: string;
+};
+/**
+ * Seal `P` to the daemon `client` speaks to and register it there, so covclaimd
+ * claims the lockup once the solver funds it and the trader can go offline.
+ *
+ * Registration EXPIRES — covclaimd drops it 15 minutes after the last reveal —
+ * and re-revealing refreshes rather than duplicates it, so a caller waiting on
+ * a slow funding should reveal again, not once. The two gates below name a
+ * cause covclaimd would otherwise report as an opaque 400.
+ */
+declare function revealClaimPacket(client: CovclaimdClient, input: {
+    script: InstanceType<typeof VHTLC.ScriptV2>;
+    address: string;
+    /** `P`, 32 bytes, from the swap's `secrets`. */
+    preimage: Uint8Array;
+}): Promise<{
+    ciphertext: string;
+}>;
+
+export { type AddressParams, ArkadeCorridorDeps, AssetAliasTable, AssetId, type ChainSourceBackend, Corridor, CorridorFactory, type CorridorRecordStore, CorridorSet, CorridorSwapRecord, type CovclaimdClient, type CovclaimdInfo, CovclaimdRevealError, DEFAULT_INVOICE_EXPIRY_SECONDS, DiscoveryIndex, DiscoveryLeg, DiscoverySnapshot, INVOICE_HRPS, Instrument, type L1Tip, LIGHTNING_DRIVE, LightningCorridorDeps, MarketCandidate, NetworkRef, ONCHAIN_DRIVE, OfferSwapRecord, OnchainCorridorDeps, PinnedAmount, Pubkey, QuoteId, QuoteInput, Rail, type RecordSink, type ResolveDeps, ResolvedEndpoint, type ResolvedRoute, type RevealParams, Route, RouteResolution, SwapPolicy, SwapRecord, aliasTableFrom, applyOfferSpend, arkadeCorridor, assembleRoute, chainSourceOver, corridorRecordStore, covclaimdClient, decodeBolt11, esploraChainSource, esploraTip, lightningCorridor, networksOfInvoiceHrp, offerFactsOf, offerRecordSource, onchainCorridor, publicAssetId, resolveRoute, revealClaimPacket, revealFieldsFromScript, rfqRecordOf, satsOf, scopedToRail, splitRecords, verifyPair, verifyQuoteTtl, verifyQuotedAmount, verifyReceiveInvoiceFacts, verifyReceiveWindow, verifyResponder, verifySendInvoice, verifySendWindow, verifyingDerivation, walletLockupIndexer, withOfferStatus, withRfqState };