@gvnrdao/dh-sdk 0.0.304 → 0.0.305

package/dist/deployments.js

@@ -413,9 +413,13 @@ var MAINNET_DEPLOYMENT = {
       reason: "Validator gas fix (#420): BitcoinAddressValidator packed-table lookups; VERSION 1.0.0 -> 1.0.1"
     },
     UCDController: {
+      previousImplementation: "0x16f94AcC78cE87bEeBCfF90552091B3EfC071E48",
       newImplementation: "0x28B8cAB89D89B3F83581FD2290de2Ce84535bd0A",
-      upgradedBy: "Reconciled from chain \u2014 Upgraded event log unavailable; provenance omitted (never fabricated)",
-      reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)"
+      upgradedAt: "2026-07-06T10:41:59.000Z",
+      upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f in tx 0xf6609d3fa43b460d953c85d8d7265b59bf177723042db79a6a700571bad777b7 (block 25472962)",
+      reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+      executeTx: "0xf6609d3fa43b460d953c85d8d7265b59bf177723042db79a6a700571bad777b7",
+      block: 25472962
     },
     PositionManagerCoreModule: {
       previousImplementation: "0x6C8b0FB93F8d0239254aefaC24d4264cA2F8AAeB",

package/dist/deployments.mjs

@@ -380,9 +380,13 @@ var MAINNET_DEPLOYMENT = {
       reason: "Validator gas fix (#420): BitcoinAddressValidator packed-table lookups; VERSION 1.0.0 -> 1.0.1"
     },
     UCDController: {
+      previousImplementation: "0x16f94AcC78cE87bEeBCfF90552091B3EfC071E48",
       newImplementation: "0x28B8cAB89D89B3F83581FD2290de2Ce84535bd0A",
-      upgradedBy: "Reconciled from chain \u2014 Upgraded event log unavailable; provenance omitted (never fabricated)",
-      reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)"
+      upgradedAt: "2026-07-06T10:41:59.000Z",
+      upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f in tx 0xf6609d3fa43b460d953c85d8d7265b59bf177723042db79a6a700571bad777b7 (block 25472962)",
+      reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+      executeTx: "0xf6609d3fa43b460d953c85d8d7265b59bf177723042db79a6a700571bad777b7",
+      block: 25472962
     },
     PositionManagerCoreModule: {
       previousImplementation: "0x6C8b0FB93F8d0239254aefaC24d4264cA2F8AAeB",

package/dist/index.js

@@ -438,9 +438,13 @@ var init_deployment_addresses = __esm({
           reason: "Validator gas fix (#420): BitcoinAddressValidator packed-table lookups; VERSION 1.0.0 -> 1.0.1"
         },
         UCDController: {
+          previousImplementation: "0x16f94AcC78cE87bEeBCfF90552091B3EfC071E48",
           newImplementation: "0x28B8cAB89D89B3F83581FD2290de2Ce84535bd0A",
-          upgradedBy: "Reconciled from chain \u2014 Upgraded event log unavailable; provenance omitted (never fabricated)",
-          reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)"
+          upgradedAt: "2026-07-06T10:41:59.000Z",
+          upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f in tx 0xf6609d3fa43b460d953c85d8d7265b59bf177723042db79a6a700571bad777b7 (block 25472962)",
+          reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+          executeTx: "0xf6609d3fa43b460d953c85d8d7265b59bf177723042db79a6a700571bad777b7",
+          block: 25472962
         },
         PositionManagerCoreModule: {
           previousImplementation: "0x6C8b0FB93F8d0239254aefaC24d4264cA2F8AAeB",
@@ -1287,7 +1291,7 @@ var require_pkg_src = __commonJS({
         description: "Production Pkp Validator",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1783106284785,
+        deployedAt: 1784569687492,
         size: 4140,
         hash: "4c0d65bf1f33cdac22a78fd8c4764319cc3fe00650e0fe7fa8a6090d9a318a7b",
         validatorWalletAddress: "0x82db9f515957aa380b596c6ea2bd30cef181f236",
@@ -1364,17 +1368,17 @@ var require_pkg_src = __commonJS({
         }
       },
       btcWithdrawal: {
-        cid: "QmYG1o9qMBZsEMDE9DNsJMzQmvxfj6jTu9V37WwuJZAtC2",
+        cid: "QmexvpfHPacjsVcqNHHLyJhSnnAPLgbWmWd9N3NDLDvYds",
         authorizedCidHex: cidToHex(
-          "QmYG1o9qMBZsEMDE9DNsJMzQmvxfj6jTu9V37WwuJZAtC2"
+          "QmexvpfHPacjsVcqNHHLyJhSnnAPLgbWmWd9N3NDLDvYds"
         ),
         name: "Btc Withdrawal",
         description: "Production Btc Withdrawal",
-        version: "1.2.1",
+        version: "1.2.3",
         deployed: true,
-        deployedAt: 1784316549409,
-        size: 90692,
-        hash: "ca7276763142fe1fc812b70f6319973000faf338a91c531f898f8f6406035c64",
+        deployedAt: 1784585746901,
+        size: 92027,
+        hash: "7b4f4eab1f0c08b8b5b1c9cdb1064dd403ec13f57765919f62dec67fb8ba3c69",
         validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
         pkp: {
           publicKey: "0x043616787c5432415c24378c4ef48de2bcd6bb7b575b837e3cff09171802662da7105d79586c7659677a0ecbaddac4cce06cb2a11f69a16fa0c4d7002ac7d51a4d",
@@ -3746,12 +3750,23 @@ ${auth.clientId}`;
           if (!data.vout || !Array.isArray(data.vout)) {
             return null;
           }
-          return data.vout.map((output, index) => ({
-            index,
-            scriptpubkey: output.scriptpubkey,
-            scriptpubkey_address: output.scriptpubkey_address,
-            value: output.value ?? 0
-          }));
+          return data.vout.map((output, index) => {
+            if (output.value === void 0) {
+              throw new Error(
+                `getTransactionOutputs(${txid}): output ${index} is missing its value \u2014 malformed provider response, refusing to return outputs that cannot be value-verified`
+              );
+            }
+            assertSaneSatoshis(
+              output.value,
+              `getTransactionOutputs(${txid}) output ${index}`
+            );
+            return {
+              index,
+              scriptpubkey: output.scriptpubkey,
+              scriptpubkey_address: output.scriptpubkey_address,
+              value: output.value
+            };
+          });
         } catch (error) {
           clearTimeout(timeoutId);
           if (isAbortError(error)) {
@@ -20754,7 +20769,9 @@ Message: ${causeMessage}${quantumContext}${mintDebtDiagnostics}`
         gasUsed: receipt.gasUsed?.toString() || "unknown",
         utxoTxid: validationResponse.utxoTxid,
         utxoVout: validationResponse.utxoVout,
-        utxoSatoshis: validationResponse.utxoSatoshis
+        utxoSatoshis: validationResponse.utxoSatoshis,
+        // Phase B: full consensus-validated spend set (absent on older actions).
+        confirmedUtxos: validationResponse.confirmedUtxos
       };
     } catch (error) {
       const errorMsg = error instanceof Error ? error.message : String(error);
@@ -21437,7 +21454,12 @@ Message: ${causeMessage}${quantumContext}${mintDebtDiagnostics}`
         log.info("\u{1F50D} Found vault UTXO for execution", { utxoIdentifier });
       }
       let executionUtxos;
-      const gatheredUtxos = await this.fetchConfirmedVaultUtxos(positionId);
+      const gatheredUtxos = authResult.confirmedUtxos && authResult.confirmedUtxos.length > 0 ? authResult.confirmedUtxos.map((u) => ({
+        txid: u.txid,
+        vout: Number(u.vout),
+        value: Number(u.value),
+        confirmations: 0
+      })) : await this.fetchConfirmedVaultUtxos(positionId);
       if (gatheredUtxos.length > 0) {
         const normTxid = (t) => String(t).toLowerCase().replace(/^0x/, "");
         const byOutpoint = /* @__PURE__ */ new Map();

package/dist/index.mjs

@@ -444,9 +444,13 @@ var init_deployment_addresses = __esm({
           reason: "Validator gas fix (#420): BitcoinAddressValidator packed-table lookups; VERSION 1.0.0 -> 1.0.1"
         },
         UCDController: {
+          previousImplementation: "0x16f94AcC78cE87bEeBCfF90552091B3EfC071E48",
           newImplementation: "0x28B8cAB89D89B3F83581FD2290de2Ce84535bd0A",
-          upgradedBy: "Reconciled from chain \u2014 Upgraded event log unavailable; provenance omitted (never fabricated)",
-          reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)"
+          upgradedAt: "2026-07-06T10:41:59.000Z",
+          upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f in tx 0xf6609d3fa43b460d953c85d8d7265b59bf177723042db79a6a700571bad777b7 (block 25472962)",
+          reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+          executeTx: "0xf6609d3fa43b460d953c85d8d7265b59bf177723042db79a6a700571bad777b7",
+          block: 25472962
         },
         PositionManagerCoreModule: {
           previousImplementation: "0x6C8b0FB93F8d0239254aefaC24d4264cA2F8AAeB",
@@ -1293,7 +1297,7 @@ var require_pkg_src = __commonJS({
         description: "Production Pkp Validator",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1783106284785,
+        deployedAt: 1784569687492,
         size: 4140,
         hash: "4c0d65bf1f33cdac22a78fd8c4764319cc3fe00650e0fe7fa8a6090d9a318a7b",
         validatorWalletAddress: "0x82db9f515957aa380b596c6ea2bd30cef181f236",
@@ -1370,17 +1374,17 @@ var require_pkg_src = __commonJS({
         }
       },
       btcWithdrawal: {
-        cid: "QmYG1o9qMBZsEMDE9DNsJMzQmvxfj6jTu9V37WwuJZAtC2",
+        cid: "QmexvpfHPacjsVcqNHHLyJhSnnAPLgbWmWd9N3NDLDvYds",
         authorizedCidHex: cidToHex(
-          "QmYG1o9qMBZsEMDE9DNsJMzQmvxfj6jTu9V37WwuJZAtC2"
+          "QmexvpfHPacjsVcqNHHLyJhSnnAPLgbWmWd9N3NDLDvYds"
         ),
         name: "Btc Withdrawal",
         description: "Production Btc Withdrawal",
-        version: "1.2.1",
+        version: "1.2.3",
         deployed: true,
-        deployedAt: 1784316549409,
-        size: 90692,
-        hash: "ca7276763142fe1fc812b70f6319973000faf338a91c531f898f8f6406035c64",
+        deployedAt: 1784585746901,
+        size: 92027,
+        hash: "7b4f4eab1f0c08b8b5b1c9cdb1064dd403ec13f57765919f62dec67fb8ba3c69",
         validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
         pkp: {
           publicKey: "0x043616787c5432415c24378c4ef48de2bcd6bb7b575b837e3cff09171802662da7105d79586c7659677a0ecbaddac4cce06cb2a11f69a16fa0c4d7002ac7d51a4d",
@@ -3752,12 +3756,23 @@ ${auth.clientId}`;
           if (!data.vout || !Array.isArray(data.vout)) {
             return null;
           }
-          return data.vout.map((output, index) => ({
-            index,
-            scriptpubkey: output.scriptpubkey,
-            scriptpubkey_address: output.scriptpubkey_address,
-            value: output.value ?? 0
-          }));
+          return data.vout.map((output, index) => {
+            if (output.value === void 0) {
+              throw new Error(
+                `getTransactionOutputs(${txid}): output ${index} is missing its value \u2014 malformed provider response, refusing to return outputs that cannot be value-verified`
+              );
+            }
+            assertSaneSatoshis(
+              output.value,
+              `getTransactionOutputs(${txid}) output ${index}`
+            );
+            return {
+              index,
+              scriptpubkey: output.scriptpubkey,
+              scriptpubkey_address: output.scriptpubkey_address,
+              value: output.value
+            };
+          });
         } catch (error) {
           clearTimeout(timeoutId);
           if (isAbortError(error)) {
@@ -20682,7 +20697,9 @@ Message: ${causeMessage}${quantumContext}${mintDebtDiagnostics}`
         gasUsed: receipt.gasUsed?.toString() || "unknown",
         utxoTxid: validationResponse.utxoTxid,
         utxoVout: validationResponse.utxoVout,
-        utxoSatoshis: validationResponse.utxoSatoshis
+        utxoSatoshis: validationResponse.utxoSatoshis,
+        // Phase B: full consensus-validated spend set (absent on older actions).
+        confirmedUtxos: validationResponse.confirmedUtxos
       };
     } catch (error) {
       const errorMsg = error instanceof Error ? error.message : String(error);
@@ -21365,7 +21382,12 @@ Message: ${causeMessage}${quantumContext}${mintDebtDiagnostics}`
         log.info("\u{1F50D} Found vault UTXO for execution", { utxoIdentifier });
       }
       let executionUtxos;
-      const gatheredUtxos = await this.fetchConfirmedVaultUtxos(positionId);
+      const gatheredUtxos = authResult.confirmedUtxos && authResult.confirmedUtxos.length > 0 ? authResult.confirmedUtxos.map((u) => ({
+        txid: u.txid,
+        vout: Number(u.vout),
+        value: Number(u.value),
+        confirmations: 0
+      })) : await this.fetchConfirmedVaultUtxos(positionId);
       if (gatheredUtxos.length > 0) {
         const normTxid = (t) => String(t).toLowerCase().replace(/^0x/, "");
         const byOutpoint = /* @__PURE__ */ new Map();

package/dist/interfaces/chunks/loan-operations.i.d.ts

@@ -233,6 +233,16 @@ export interface BTCWithdrawalResult {
     utxoVout?: number;
     /** Full satoshi value of the authorized UTXO; needed by Phase 2 broadcast. */
     utxoSatoshis?: string;
+    /**
+     * Phase B: the FULL consensus-validated confirmed UTXO set the Lit Action
+     * spends, so a multi-UTXO consolidation withdrawal can sign the whole set
+     * without the temporary /vault-utxos endpoint. Absent on older Lit Actions.
+     */
+    confirmedUtxos?: Array<{
+        txid: string;
+        vout: number;
+        value: string;
+    }>;
     error?: string;
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gvnrdao/dh-sdk",
-  "version": "0.0.304",
+  "version": "0.0.305",
   "description": "TypeScript SDK for Diamond Hands Protocol - Bitcoin-backed lending with LIT Protocol PKPs",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -82,8 +82,8 @@
   },
   "sideEffects": false,
   "dependencies": {
-    "@gvnrdao/dh-lit-actions": "^0.0.314",
-    "@gvnrdao/dh-lit-ops": "^0.0.304",
+    "@gvnrdao/dh-lit-actions": "^0.0.315",
+    "@gvnrdao/dh-lit-ops": "^0.0.305",
     "@noble/hashes": "^1.5.0",
     "axios": "^1.17.0",
     "bech32": "^2.0.0",