@gvnrdao/dh-sdk 0.0.327 → 0.0.329

package/dist/index.js

@@ -546,6 +546,14 @@ var init_deployment_addresses = __esm({
           reason: "2026-08 agent-stack release. The mainnet PositionManagerViews at 0x9225647a was deployed as a BARE implementation (EIP-1967 slot 0x00), so upgradeToAndCall reverts UUPSUnauthorizedCallContext \u2014 it could never be upgraded. PositionManager.setViews (added in the same Execute B batch) removed the repoint blocker, so Views was replaced behind a new proxy rather than upgraded. This makes the Pashov F3 renewal debt-ceiling check REACHABLE for the first time: ExceedsMaxLoan (0x499e7985) is present in 0xE68DC096 and absent from 0x9225647a. Views holds no protocol state (8 wiring slots + roles + pause), which is what made replacement safe. The old contract is ABANDONED, not decommissioned \u2014 it stays live and callable as the rollback target for setViews. NOTE: VERSION reads 1.1.1 on both sides; verify by address.",
           executeTx: "0xf1f8d5fc13f45d7a3f932bf1a2d6e29381fdd41cd31298ad785bf7688df07fe6",
           block: 25673200
+        },
+        AgentDelegationRegistry: {
+          newImplementation: "0xa9fF405Edd4329fc3159a64F56B37EBD253e4928",
+          upgradedAt: "2026-07-31T22:03:35.000Z",
+          upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f in tx 0x8fed0ab7eee3aaaa3792a35b40b0ef74bd09cfb1a175934afd846bee546048d4 (block 25655710)",
+          reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+          executeTx: "0x8fed0ab7eee3aaaa3792a35b40b0ef74bd09cfb1a175934afd846bee546048d4",
+          block: 25655710
         }
       },
       latestEnv: {
@@ -678,9 +686,9 @@ var init_deployment_addresses = __esm({
   }
 });
 
-// node_modules/@gvnrdao/dh-lit-actions/pkg-dist/pkg-src/index.js
+// ../../../../../../../../Users/rusty/Development/gvnr/diamond-hands/sdk/node_modules/@gvnrdao/dh-lit-actions/pkg-dist/pkg-src/index.js
 var require_pkg_src = __commonJS({
-  "node_modules/@gvnrdao/dh-lit-actions/pkg-dist/pkg-src/index.js"(exports, module2) {
+  "../../../../../../../../Users/rusty/Development/gvnr/diamond-hands/sdk/node_modules/@gvnrdao/dh-lit-actions/pkg-dist/pkg-src/index.js"(exports, module2) {
     "use strict";
     var __defProp2 = Object.defineProperty;
     var __getOwnPropDesc2 = Object.getOwnPropertyDescriptor;
@@ -1363,7 +1371,7 @@ var require_pkg_src = __commonJS({
         description: "Production Btc Transaction Signer",
         version: "1.1.1",
         deployed: true,
-        deployedAt: 1786113907707,
+        deployedAt: 1786465606156,
         size: 67999,
         hash: "83f3644c68819215e05ba8db3225571354a009458fc1437f606df6cb9142d3f9"
       },
@@ -1376,7 +1384,7 @@ var require_pkg_src = __commonJS({
         description: "Production Ucd Mint Validator",
         version: "1.2.1",
         deployed: true,
-        deployedAt: 1786113908489,
+        deployedAt: 1786465627201,
         size: 82739,
         hash: "2bdd9aebdaad58a43a4731d5b7284f2531b7a9caaf8caf5719d891c4ed33cb2e",
         validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
@@ -1394,7 +1402,7 @@ var require_pkg_src = __commonJS({
         description: "Production Process Payment Validator",
         version: "1.2.1",
         deployed: true,
-        deployedAt: 1786113909138,
+        deployedAt: 1786465654796,
         size: 78736,
         hash: "17191ecc9c009e0fa5ab52c876330beb2a9a75d30cccb92e7c0c04f169df088b",
         validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
@@ -1412,7 +1420,7 @@ var require_pkg_src = __commonJS({
         description: "Production Extend Position Validator",
         version: "1.2.1",
         deployed: true,
-        deployedAt: 1786113909872,
+        deployedAt: 1786465681874,
         size: 76515,
         hash: "1d4e085335af80f194a663a577876902c83015177e95906a0b461fa93bd5da08",
         validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
@@ -1422,21 +1430,17 @@ var require_pkg_src = __commonJS({
         }
       },
       btcWithdrawal: {
-        cid: "QmZuR3qSBajutXfRd91ffpyFrRMgmaMh7fDEHRiQQF8Ljp",
+        cid: "QmRYVoTTDxk2McvBqxSm9M7YcaBGdTqjnZGPX4Y191DaZh",
         authorizedCidHex: cidToHex(
-          "QmZuR3qSBajutXfRd91ffpyFrRMgmaMh7fDEHRiQQF8Ljp"
+          "QmRYVoTTDxk2McvBqxSm9M7YcaBGdTqjnZGPX4Y191DaZh"
         ),
         name: "Btc Withdrawal",
         description: "Production Btc Withdrawal",
-        // Monotonic per action, NOT a shared release train — the EIP-1271 rotation
-        // stamped its cohort 1.2.1, but this action was already at 1.2.3 from the vout
-        // canonicalization fix. Reusing the cohort stamp made a newer CID read as older
-        // than the one it replaced, which a rotation ceremony would treat as a rollback.
-        version: "1.2.4",
+        version: "1.2.7",
         deployed: true,
-        deployedAt: 1786113910531,
-        size: 95313,
-        hash: "ce12f11e3b5469953bc919586e4f3b8b5d594224b58b799dd9a3b60e3749559c",
+        deployedAt: 1786446046614,
+        size: 97456,
+        hash: "3cae8250861832f91ee3c573abeb50ff27b9acd34148176071cbfbabb359fc91",
         validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
         pkp: {
           publicKey: "0x043616787c5432415c24378c4ef48de2bcd6bb7b575b837e3cff09171802662da7105d79586c7659677a0ecbaddac4cce06cb2a11f69a16fa0c4d7002ac7d51a4d",
@@ -1548,19 +1552,17 @@ var require_pkg_src = __commonJS({
         hash: "03ee5be239c91c735d2c95db89a0d1b77e602cfc18af8eb64b3281fddcd90a72"
       },
       agentModuleExecutor: {
-        // Bound to the isolated Sepolia agent group 7 ("DH-Agent-Sepolia"), which
-        // holds this action and no PKPs until an agent is minted into it. NOT yet
-        // bound on mainnet — the Base `DH-Agent-Mainnet` group is created at rollout.
-        cid: "QmVgjGXUuxoGf8XyddW8a7btaazT9yEotpKoBgb65oPvcF",
+        cid: "QmdhC18wF7PFGMQ8aThdPsEVSpuDewA27dFvbA3bG6kVDQ",
         authorizedCidHex: cidToHex(
-          "QmVgjGXUuxoGf8XyddW8a7btaazT9yEotpKoBgb65oPvcF"
+          "QmdhC18wF7PFGMQ8aThdPsEVSpuDewA27dFvbA3bG6kVDQ"
         ),
         name: "Agent Module Executor",
-        description: "Capability gate for multi-sig Safe agent delegation: binds the agent PKP to the AgentDelegationRegistry record before signing (authorize | execute modes)",
-        version: "1.0.0",
+        description: "Production Agent Module Executor",
+        version: "1.1.1",
         deployed: true,
-        size: 11785,
-        hash: "fa294e164273c2158f9ef11a0ccfd735c343c0e3759fcb4b37e0f8a5d1ab0d29"
+        deployedAt: 1786446108348,
+        size: 11655,
+        hash: "d4e2149f843d6c2699fc61114d54b268ba4ed2c46ebdaee1145e0f101ec2a1ec"
       },
       staleSpendRecoveryValidator: {
         cid: "QmXQWT8V4wjuvH8BbC7xrkYxsVu5AKfvfWcS7jnYfrexYm",
@@ -1589,7 +1591,7 @@ var require_pkg_src = __commonJS({
         description: "Production Btc Utxo Invalidator",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1786113911948,
+        deployedAt: 1786465704240,
         size: 62553,
         hash: "1dcea2b49e545c423195be22e072dc5e3039ed1c95a8490b23505956029f5b33"
       }
@@ -12126,6 +12128,169 @@ function normalizePkpId2(pkpId) {
   }
   return pkpId;
 }
+function hasLoanEventsFilter(filter) {
+  if (!filter)
+    return false;
+  return filter.eventTypes !== void 0 || filter.fromTimestamp !== void 0 || filter.toTimestamp !== void 0 || filter.fromBlock !== void 0 || filter.toBlock !== void 0 || filter.limit !== void 0 || filter.orderDirection !== void 0;
+}
+var WALLET_LOAN_EVENTS_QUERY = `
+      query GetWalletLoanEvents($borrower: Bytes!, $first: Int!, $limit: Int!, $orderDirection: OrderDirection!) {
+        positions(where: { borrower: $borrower }, first: $first, orderBy: id) {
+          id
+          payments(first: $limit, orderBy: timestamp, orderDirection: $orderDirection) {
+            id
+            payer { id }
+            amount
+            type
+            transactionHash
+            timestamp
+            blockNumber
+            logIndex
+            newDebt
+            newCollateralRatio
+          }
+          statusUpdates(first: $limit, orderBy: timestamp, orderDirection: $orderDirection) {
+            id
+            oldStatus
+            newStatus
+            reason
+            timestamp
+            blockNumber
+            transactionHash
+          }
+          liquidation {
+            id
+            liquidator
+            liquidatedAmount
+            collateralSeized
+            transactionHash
+            timestamp
+            blockNumber
+            commitHash
+            commitTimestamp
+            revealDelay
+          }
+          withdrawals(first: $limit, orderBy: timestamp, orderDirection: $orderDirection) {
+            id
+            withdrawalAmount
+            withdrawalAddress
+            networkFee
+            timestamp
+            blockNumber
+            transactionHash
+            logIndex
+          }
+          renewals(first: $limit, orderBy: timestamp, orderDirection: $orderDirection) {
+            id
+            extensionTerm
+            extensionFee
+            newExpiryDate
+            timestamp
+            blockNumber
+            transactionHash
+            logIndex
+          }
+          operationFailures(first: $limit, orderBy: timestamp, orderDirection: $orderDirection) {
+            id
+            operationType
+            reason
+            errorCode
+            amount
+            timestamp
+            blockNumber
+            transactionHash
+            logIndex
+          }
+          mintRequests(first: $limit, orderBy: timestamp, orderDirection: $orderDirection) {
+            id
+            pkpId
+            borrower { id }
+            mintAmount
+            originationFee
+            newDebt
+            newCollateralRatio
+            btcPrice
+            quantumTimestamp
+            opId
+            timestamp
+            blockNumber
+            transactionHash
+            logIndex
+          }
+          burnRequests(first: $limit, orderBy: timestamp, orderDirection: $orderDirection) {
+            id
+            pkpId
+            borrower { id }
+            burnAmount
+            remainingDebt
+            newCollateralRatio
+            opId
+            timestamp
+            blockNumber
+            transactionHash
+            logIndex
+          }
+          mintingFees(first: $limit, orderBy: timestamp, orderDirection: $orderDirection) {
+            id
+            borrower { id }
+            feeAmount
+            mintAmount
+            newDebt
+            btcPrice
+            quantumTimestamp
+            timestamp
+            blockNumber
+            transactionHash
+            logIndex
+          }
+          renewalFees(first: $limit, orderBy: timestamp, orderDirection: $orderDirection) {
+            id
+            borrower { id }
+            feeAmount
+            extensionTerm
+            newExpiryDate
+            timestamp
+            blockNumber
+            transactionHash
+            logIndex
+          }
+          positionCreatedEvents(first: 1, orderBy: timestamp, orderDirection: asc) {
+            id
+            pkpId
+            borrower { id }
+            requestedCollateralRatio
+            selectedTerm
+            expiryAt
+            timestamp
+            blockNumber
+            transactionHash
+          }
+        }
+        ucdmintEvents(where: { position_: { borrower: $borrower } }, first: $limit, orderBy: timestamp, orderDirection: $orderDirection) {
+          id
+          position { id }
+          amount
+          proof
+          minter { id }
+          isCommunityMint
+          timestamp
+          blockNumber
+          transactionHash
+        }
+        collateralEvents(where: { position_: { borrower: $borrower } }, first: $limit, orderBy: timestamp, orderDirection: $orderDirection) {
+          id
+          position { id }
+          eventType
+          networkFee
+          remainingCollateral
+          collateralRatio
+          timestamp
+          blockNumber
+          transactionHash
+          logIndex
+        }
+      }
+    `;
 var DiamondHandsGraph = class {
   client;
   defaultPageSize;
@@ -12231,7 +12396,7 @@ var DiamondHandsGraph = class {
   /**
    * Get user positions from subgraph
    */
-  async getUserPositions(userAddress, first, skip, orderBy, orderDirection) {
+  async getUserPositionsOnly(userAddress, first, skip, orderBy, orderDirection) {
     const query = `
       query GetUserPositions($borrower: Bytes!, $first: Int, $skip: Int, $orderBy: Position_orderBy, $orderDirection: OrderDirection) {
         user(id: $borrower) {
@@ -12272,17 +12437,28 @@ var DiamondHandsGraph = class {
       query,
       variables
     );
-    const total = await this.getTotalCountPaginated("{ borrower: $borrower }", {
-      borrower: userAddress.toLowerCase()
-    });
     let positions = [];
     if (result && result.user && Array.isArray(result.user.positions)) {
       positions = result.user.positions.filter((p) => p != null).map((p) => this.transformGraphPositionToLoanData(p));
     }
-    return {
-      positions,
-      total
-    };
+    return positions;
+  }
+  /**
+   * Get user positions, plus an accurate total count.
+   *
+   * The count is a SECOND round trip (`getTotalCountPaginated`, which pages to handle
+   * >1000 items). Callers that only need the rows should use `getUserPositionsOnly` and
+   * skip it — the event paths did not, and paid for a count they immediately discarded on
+   * every activity refresh.
+   */
+  async getUserPositions(userAddress, first, skip, orderBy, orderDirection) {
+    const [positions, total] = await Promise.all([
+      this.getUserPositionsOnly(userAddress, first, skip, orderBy, orderDirection),
+      this.getTotalCountPaginated("{ borrower: $borrower }", {
+        borrower: userAddress.toLowerCase()
+      })
+    ]);
+    return { positions, total };
   }
   /**
    * Get user positions with enriched Bitcoin balance data
@@ -13373,6 +13549,16 @@ var DiamondHandsGraph = class {
       orderDirection
     };
     const result = await this.client.execute(query, variables);
+    return this.assembleLoanEvents(positionId, result);
+  }
+  /**
+   * Map one position's raw event payload into `LoanEvents`.
+   *
+   * Extracted verbatim from getLoanEvents so the wallet-collapsed path produces
+   * byte-identical objects by construction rather than by a second implementation
+   * that has to be kept in step by hand.
+   */
+  assembleLoanEvents(positionId, result) {
     const rawCreated = result.positionCreatedEvents?.[0];
     const positionCreated = rawCreated ? {
       id: rawCreated.id,
@@ -13577,7 +13763,22 @@ var DiamondHandsGraph = class {
    * @returns One LoanEvents object per position; empty array if the wallet has none.
    */
   async getWalletLoanEvents(userAddress, filter) {
-    const { positions } = await this.getUserPositions(userAddress);
+    if (!hasLoanEventsFilter(filter)) {
+      return this.getWalletLoanEventsCollapsed(userAddress);
+    }
+    return this.getWalletLoanEventsFanout(userAddress, filter);
+  }
+  /**
+   * The per-position path: enumerate the wallet's positions, then one `GetLoanEvents` each.
+   *
+   * Used for filtered calls, and as the completeness fallback when the collapsed document
+   * hits a page limit. Costs `1 + N` requests, which is exactly why it is not the default.
+   */
+  async getWalletLoanEventsFanout(userAddress, filter) {
+    const positions = await this.getUserPositionsOnly(
+      userAddress,
+      THE_GRAPH_MAX_BATCH_SIZE
+    );
     const positionIds = positions.map((p) => p?.id != null ? String(p.id) : "").filter((id) => id.length > 0);
     if (positionIds.length === 0)
       return [];
@@ -13592,6 +13793,81 @@ var DiamondHandsGraph = class {
     }
     return results;
   }
+  /**
+   * The whole wallet's event history in ONE request.
+   *
+   * Replaces `1 + N` round trips (one position enumeration plus one per position) with a
+   * single document. Measured on Sepolia: a wallet holding 44 positions cost 46 requests
+   * per activity refresh against a per-wallet budget of 30/min — this makes it 1.
+   *
+   * Three subgraph facts make it possible, all verified against the deployed schema rather
+   * than assumed:
+   *   - ten event collections are `@derivedFrom` on Position, so they nest under a
+   *     borrower-filtered `positions(...)`;
+   *   - `positionCreatedEvents` is ALSO derived on Position — `getLoanEvents` queries it
+   *     top-level, which it never needed to;
+   *   - `ucdmintEvents` / `collateralEvents` are not derived and carry no `borrower`
+   *     field, but graph-node's nested `position_: { borrower }` filter reaches them.
+   *     Without that last one this would be two requests, not one.
+   */
+  async getWalletLoanEventsCollapsed(userAddress) {
+    const borrower = userAddress.toLowerCase();
+    const pageSize = THE_GRAPH_MAX_BATCH_SIZE;
+    const result = await this.client.execute(
+      WALLET_LOAN_EVENTS_QUERY,
+      {
+        borrower,
+        first: pageSize,
+        limit: pageSize,
+        orderDirection: "desc"
+      }
+    );
+    const positions = result.positions || [];
+    const ucdmintEvents = result.ucdmintEvents || [];
+    const collateralEvents = result.collateralEvents || [];
+    const truncated = positions.length >= pageSize || ucdmintEvents.length >= pageSize || collateralEvents.length >= pageSize;
+    if (truncated) {
+      log.warn(
+        "[DiamondHandsGraph] wallet event page limit reached \u2014 falling back to the per-position path to avoid returning a partial history",
+        {
+          borrower,
+          pageSize,
+          positions: positions.length,
+          ucdmintEvents: ucdmintEvents.length,
+          collateralEvents: collateralEvents.length
+        }
+      );
+      return this.getWalletLoanEventsFanout(userAddress);
+    }
+    if (positions.length === 0)
+      return [];
+    const mintsByPosition = /* @__PURE__ */ new Map();
+    for (const m of result.ucdmintEvents || []) {
+      const key = m.position?.id;
+      if (!key)
+        continue;
+      const bucket = mintsByPosition.get(key) || [];
+      bucket.push(m);
+      mintsByPosition.set(key, bucket);
+    }
+    const collateralByPosition = /* @__PURE__ */ new Map();
+    for (const c of result.collateralEvents || []) {
+      const key = c.position?.id;
+      if (!key)
+        continue;
+      const bucket = collateralByPosition.get(key) || [];
+      bucket.push(c);
+      collateralByPosition.set(key, bucket);
+    }
+    return positions.map(
+      (p) => this.assembleLoanEvents(p.id, {
+        position: p,
+        positionCreatedEvents: p.positionCreatedEvents || [],
+        ucdmintEvents: mintsByPosition.get(p.id) || [],
+        collateralEvents: collateralByPosition.get(p.id) || []
+      })
+    );
+  }
   // ============================================================================
   // Protocol-wide Events
   // ============================================================================
@@ -18502,16 +18778,6 @@ var import_dh_lit_ops = require("@gvnrdao/dh-lit-ops");
 var import_dh_lit_actions2 = __toESM(require_pkg_src());
 
 // src/utils/telegram-messaging.utils.ts
-var TelegramBot = null;
-try {
-  if (typeof window === "undefined" && typeof global !== "undefined") {
-    TelegramBot = require("node-telegram-bot-api");
-  }
-} catch (error) {
-  log.warn("Telegram bot API not available", {
-    error: error instanceof Error ? error.message : String(error)
-  });
-}
 function formatMintMessage(mintAmount, loanId, txHash) {
   return `\u2705 DH SDK: ${mintAmount} UCD was minted for loan id: ${loanId} Tx: https://sepolia.etherscan.io/tx/${txHash}`;
 }
@@ -24511,6 +24777,13 @@ Message: ${causeMessage}${quantumContext}${mintDebtDiagnostics}`
             error: "ethRpcUrl required for recoverStaleSpend \u2014 set DiamondHandsSDKConfig.ethRpcUrl or pass rpcUrl"
           };
         }
+        if (!this.config.contractSigner) {
+          return {
+            success: false,
+            failedStep: "config",
+            error: "Contract signer not configured \u2014 recoverStaleSpend submits its own recovery transaction in direct mode. Set DiamondHandsSDKConfig.contractSigner, or use service mode, where the server relays and pays for it."
+          };
+        }
         const sdkBitcoinProviderUrl = this.config.bitcoinProviders?.[0]?.url;
         attRes = await this.litOps.requestStaleSpendRecoveryAttestation({
           chainId,