@gvnrdao/dh-sdk 0.0.341 → 0.0.343

package/dist/safe-delegation.js

@@ -60,7 +60,6 @@ var SEPOLIA_DEPLOYMENT = {
     PositionDelegateRegistry: "0x482369De283622E7b05731875ec137d4E3D208F9",
     FeeRecipientRegistry: "0x95795F8403DDb629E8527B2934C4e71f5fC0C374",
     BitcoinWithdrawalAddressRegistry: "0x6376D392097F0A81e51BD83960A97EA20eaf1dbe",
-    CarryAgentRegistry: "0x5595CB538D44E6Cf179D20364fD631D0477e69f7",
     AgentDelegationRegistry: "0x6AE7fc6bE0925126b9D25b1B7Ce5AD5d127ec025",
     DHAgentDelegate: "0xa5A14489ae883960df6E1463A41a47aBE9Ecc5AF",
     AgentModuleFactory: "0x1Fd3aCa2C030Cf77ce28Af9694D3Bb3034ACa2E5"
@@ -330,8 +329,6 @@ var SEPOLIA_DEPLOYMENT = {
     OPERATION_AUTHORIZATION_REGISTRY_IMPL: "0xe0D981B60351f0f8fFDA2b50C8180Fb37CeF3883",
     BITCOIN_WITHDRAWAL_ADDRESS_REGISTRY: "0x6376D392097F0A81e51BD83960A97EA20eaf1dbe",
     BITCOIN_WITHDRAWAL_ADDRESS_REGISTRY_IMPL: "0x76E0a2c9d89562fD7c50b5f554d7fa25957e39Db",
-    CARRY_AGENT_REGISTRY: "0x5595CB538D44E6Cf179D20364fD631D0477e69f7",
-    CARRY_AGENT_REGISTRY_IMPL: "0x1b11a3D5e46F3672E643c997f0d569DFf0b64a01",
     AGENT_DELEGATION_REGISTRY: "0x6AE7fc6bE0925126b9D25b1B7Ce5AD5d127ec025",
     AGENT_DELEGATION_REGISTRY_IMPL: "0xE931E4b9ceF2A48Ac7D57192da4B523756cFC310",
     DH_AGENT_DELEGATE: "0xa5A14489ae883960df6E1463A41a47aBE9Ecc5AF"

package/dist/safe-delegation.mjs

@@ -33,7 +33,6 @@ var SEPOLIA_DEPLOYMENT = {
     PositionDelegateRegistry: "0x482369De283622E7b05731875ec137d4E3D208F9",
     FeeRecipientRegistry: "0x95795F8403DDb629E8527B2934C4e71f5fC0C374",
     BitcoinWithdrawalAddressRegistry: "0x6376D392097F0A81e51BD83960A97EA20eaf1dbe",
-    CarryAgentRegistry: "0x5595CB538D44E6Cf179D20364fD631D0477e69f7",
     AgentDelegationRegistry: "0x6AE7fc6bE0925126b9D25b1B7Ce5AD5d127ec025",
     DHAgentDelegate: "0xa5A14489ae883960df6E1463A41a47aBE9Ecc5AF",
     AgentModuleFactory: "0x1Fd3aCa2C030Cf77ce28Af9694D3Bb3034ACa2E5"
@@ -303,8 +302,6 @@ var SEPOLIA_DEPLOYMENT = {
     OPERATION_AUTHORIZATION_REGISTRY_IMPL: "0xe0D981B60351f0f8fFDA2b50C8180Fb37CeF3883",
     BITCOIN_WITHDRAWAL_ADDRESS_REGISTRY: "0x6376D392097F0A81e51BD83960A97EA20eaf1dbe",
     BITCOIN_WITHDRAWAL_ADDRESS_REGISTRY_IMPL: "0x76E0a2c9d89562fD7c50b5f554d7fa25957e39Db",
-    CARRY_AGENT_REGISTRY: "0x5595CB538D44E6Cf179D20364fD631D0477e69f7",
-    CARRY_AGENT_REGISTRY_IMPL: "0x1b11a3D5e46F3672E643c997f0d569DFf0b64a01",
     AGENT_DELEGATION_REGISTRY: "0x6AE7fc6bE0925126b9D25b1B7Ce5AD5d127ec025",
     AGENT_DELEGATION_REGISTRY_IMPL: "0xE931E4b9ceF2A48Ac7D57192da4B523756cFC310",
     DH_AGENT_DELEGATE: "0xa5A14489ae883960df6E1463A41a47aBE9Ecc5AF"

package/dist/sign-guard.js

@@ -227,7 +227,6 @@ var SEPOLIA_CONTRACTS = {
   PositionDelegateRegistry: "0x482369De283622E7b05731875ec137d4E3D208F9",
   FeeRecipientRegistry: "0x95795F8403DDb629E8527B2934C4e71f5fC0C374",
   BitcoinWithdrawalAddressRegistry: "0x6376D392097F0A81e51BD83960A97EA20eaf1dbe",
-  CarryAgentRegistry: "0x5595CB538D44E6Cf179D20364fD631D0477e69f7",
   AgentDelegationRegistry: "0x6AE7fc6bE0925126b9D25b1B7Ce5AD5d127ec025",
   DHAgentDelegate: "0xa5A14489ae883960df6E1463A41a47aBE9Ecc5AF",
   AgentModuleFactory: "0x1Fd3aCa2C030Cf77ce28Af9694D3Bb3034ACa2E5"
@@ -670,7 +669,9 @@ function nextQuantumTimestamp(nowMs = Date.now()) {
   return currentQuantum + QUANTUM_SECONDS;
 }
 function isAuthFresh(issuedAtSec, nowSec) {
-  return issuedAtSec <= nowSec && nowSec - issuedAtSec < authValiditySec();
+  const sq = Math.floor(issuedAtSec / QUANTUM_SECONDS) * QUANTUM_SECONDS;
+  const cq = Math.floor(nowSec / QUANTUM_SECONDS) * QUANTUM_SECONDS;
+  return sq === cq - QUANTUM_SECONDS || sq === cq || sq === cq + QUANTUM_SECONDS;
 }
 function isStrictCurrentQuantum(issuedAtSec, nowSec) {
   return issuedAtSec <= nowSec && Math.floor(issuedAtSec / QUANTUM_SECONDS) === Math.floor(nowSec / QUANTUM_SECONDS);
@@ -939,6 +940,9 @@ var POSITION_DETAILS_ABI = [
 var TERM_MANAGER_ABI = [
   "function getTermFees(uint256 termMonths) view returns (uint88 originationFee, uint88 extensionFee)"
 ];
+function extendFeeUpperBoundWei(ucdDebt, extensionFeeRateBps) {
+  return ucdDebt * extensionFeeRateBps / 10000n;
+}
 async function computeExtendFeeUpperBound(provider, contracts, positionId, selectedTerm, onDegraded) {
   const degrade = (reason) => {
     onDegraded?.(reason);
@@ -973,7 +977,7 @@ async function computeExtendFeeUpperBound(provider, contracts, positionId, selec
   } catch (e) {
     return degrade(`getTermFees(${selectedTerm}) failed on ${termMgr}: ${e.message.slice(0, 160)}`);
   }
-  const upperBoundFeeWei = ucdDebt * extensionFeeRateBps / 10000n;
+  const upperBoundFeeWei = extendFeeUpperBoundWei(ucdDebt, extensionFeeRateBps);
   return { ucdDebt, extensionFeeRateBps, upperBoundFeeWei };
 }
 

package/dist/sign-guard.mjs

@@ -153,7 +153,6 @@ var SEPOLIA_CONTRACTS = {
   PositionDelegateRegistry: "0x482369De283622E7b05731875ec137d4E3D208F9",
   FeeRecipientRegistry: "0x95795F8403DDb629E8527B2934C4e71f5fC0C374",
   BitcoinWithdrawalAddressRegistry: "0x6376D392097F0A81e51BD83960A97EA20eaf1dbe",
-  CarryAgentRegistry: "0x5595CB538D44E6Cf179D20364fD631D0477e69f7",
   AgentDelegationRegistry: "0x6AE7fc6bE0925126b9D25b1B7Ce5AD5d127ec025",
   DHAgentDelegate: "0xa5A14489ae883960df6E1463A41a47aBE9Ecc5AF",
   AgentModuleFactory: "0x1Fd3aCa2C030Cf77ce28Af9694D3Bb3034ACa2E5"
@@ -596,7 +595,9 @@ function nextQuantumTimestamp(nowMs = Date.now()) {
   return currentQuantum + QUANTUM_SECONDS;
 }
 function isAuthFresh(issuedAtSec, nowSec) {
-  return issuedAtSec <= nowSec && nowSec - issuedAtSec < authValiditySec();
+  const sq = Math.floor(issuedAtSec / QUANTUM_SECONDS) * QUANTUM_SECONDS;
+  const cq = Math.floor(nowSec / QUANTUM_SECONDS) * QUANTUM_SECONDS;
+  return sq === cq - QUANTUM_SECONDS || sq === cq || sq === cq + QUANTUM_SECONDS;
 }
 function isStrictCurrentQuantum(issuedAtSec, nowSec) {
   return issuedAtSec <= nowSec && Math.floor(issuedAtSec / QUANTUM_SECONDS) === Math.floor(nowSec / QUANTUM_SECONDS);
@@ -865,6 +866,9 @@ var POSITION_DETAILS_ABI = [
 var TERM_MANAGER_ABI = [
   "function getTermFees(uint256 termMonths) view returns (uint88 originationFee, uint88 extensionFee)"
 ];
+function extendFeeUpperBoundWei(ucdDebt, extensionFeeRateBps) {
+  return ucdDebt * extensionFeeRateBps / 10000n;
+}
 async function computeExtendFeeUpperBound(provider, contracts, positionId, selectedTerm, onDegraded) {
   const degrade = (reason) => {
     onDegraded?.(reason);
@@ -899,7 +903,7 @@ async function computeExtendFeeUpperBound(provider, contracts, positionId, selec
   } catch (e) {
     return degrade(`getTermFees(${selectedTerm}) failed on ${termMgr}: ${e.message.slice(0, 160)}`);
   }
-  const upperBoundFeeWei = ucdDebt * extensionFeeRateBps / 10000n;
+  const upperBoundFeeWei = extendFeeUpperBoundWei(ucdDebt, extensionFeeRateBps);
   return { ucdDebt, extensionFeeRateBps, upperBoundFeeWei };
 }
 

package/dist/utils/agent-delegation.utils.d.ts

@@ -42,14 +42,21 @@ export type AgentBindingPlan = {
  * needs a NEW agent address (AR-1 burns an address on first bind). Treating "not active" as
  * "register" minted a billed PKP and then reverted, on every attempt, once an agent expired.
  *
- * `isAgentActive` also folds in the registry's pause. An UNEXPIRED `Active` record that reads
- * inactive means paused: both `registerAgent` and `rotateAgent` are `whenNotPaused`, so this
- * throws rather than let the caller mint a PKP for a transaction that cannot land.
+ * PAUSE is read explicitly (`registry.paused()`) and refused BEFORE anything else except reuse:
+ * both `registerAgent` and `rotateAgent` are `whenNotPaused`, so any plan other than `reuse` would
+ * mint a billed PKP for a transaction that cannot land. Inferring the pause from "an unexpired
+ * `Active` record reads inactive" (the previous rule) missed a paused registry whenever the
+ * record was expired, `None` or `Revoked` (plan A4, `formal/lean/DH/AgentBinding.lean`).
  *
+ * Formal model and proofs: `formal/lean/DH/AgentBinding.lean` (replayed by
+ * `tests/shared/unit/lean-vectors.test.ts`).
+ *
+ * @param paused `registry.paused()`, read in the same batch as `isActive` and `record`
  * @param nowSeconds chain time (latest block timestamp), not the local clock
  */
 export declare function planAgentBinding(params: {
     isActive: boolean;
+    paused: boolean;
     record: {
         agent: string;
         validUntil: bigint | number;

package/dist/utils/btc-dust.utils.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Bitcoin dust limit for a DESTINATION address — the SDK side of the table the Lit Action applies
+ * by scriptPubKey (`lit-actions/src/modules/bitcoin/dust.ts`, `dustLimitForScript`):
+ *
+ *   P2WPKH (witness v0, 20-byte program) → 294
+ *   P2WSH  (witness v0, 32-byte program) → 330
+ *   P2TR   (witness v1, 32-byte program) → 330
+ *   anything else (legacy P2PKH / P2SH, unknown) → 546
+ *
+ * The SDK has addresses, not scripts, so the witness version and program length are read from the
+ * bech32/bech32m data part. Checksums are NOT verified here — call `safeValidateBitcoinAddress`
+ * first; this only classifies. Both sides replay `formal/lean/vectors/dust.json`
+ * (`formal/lean/DH/BtcFee.lean`), so the two tables cannot drift apart.
+ */
+/** Witness version and program length (bytes) of a segwit address, or `null` if not bech32. */
+export declare function segwitProgramShape(address: string): {
+    version: number;
+    programBytes: number;
+} | null;
+export declare function dustLimitForAddress(address: string): number;
+/**
+ * Phase-2 guard (plan A5): the dust limit the net payout `targetAmount - networkFee` falls short
+ * of, or `null` when it relays. Mirrors the Lit signer's refusal.
+ */
+export declare function destinationDustShortfall(targetAmount: number, networkFee: number, destination: string): number | null;

package/dist/utils/loan-helpers.utils.d.ts

@@ -64,6 +64,8 @@ export declare function selectBitcoinAddress(addresses: BitcoinAddresses, bitcoi
  * This function is purely local (no RPC calls) and mirrors ProtocolConstants logic:
  *   12 months = 365 days; other terms = 30 days/month.
  *
+ * Formal model and proofs: `formal/lean/DH/TailFee.lean`.
+ *
  * @param mintAmount     - Amount of UCD to mint (in wei, bigint)
  * @param mintTimestamp  - Unix timestamp of the mint (seconds)
  * @param originationFeeBps - Origination fee in basis points (e.g. 50 = 0.5%)
@@ -104,12 +106,33 @@ export declare function debtAfterMintExceedsLoanCap(params: {
     maxLoanWei: bigint;
 }): boolean;
 /**
- * Largest principal (wei) that still fits under the cap once its base fee is
- * added: `floor((maxLoan - currentDebt) * 10000 / (10000 + bps))`; zero when
- * the position is already at or above the cap.
+ * The LARGEST principal (wei) that still fits under the cap once its BASE fee is added:
+ * `floor(((room + 1) * 10000 - 1) / (10000 + bps))` with `room = maxLoan - currentDebt`;
+ * zero when the position is already at or above the cap. Proved exact in
+ * `formal/lean/DH/LoanCap.lean` (`maxPrincipal_exact`: it fits, one wei more does not).
+ * Base fee only — for a suggestion that includes the post-renewal tail fee, use
+ * `maxPrincipalForFee` with the validator's full fee (`calculateMintFee`).
  */
 export declare function maxPrincipalWithinLoanCap(params: {
     maxLoanWei: bigint;
     currentDebtWei: bigint;
     originationFeeBps: number;
 }): bigint;
+/**
+ * Collateral ratio in basis points exactly as the contract computes it
+ * (`SafeCalculations.safeCollateralValue` then `safeCollateralRatio`):
+ * `floor(sats * price8 * 100 * 10000 / debtWei)`. `price8` is USD per BTC with 8 decimals;
+ * `debtWei` is UCD with 18 decimals. Proved against `formal/lean/DH/Collateral.lean`
+ * `contractRatio` (vectors: `collateral.json`).
+ */
+export declare function collateralRatioBps(sats: bigint, price8: bigint, debtWei: bigint): bigint;
+/** `collateralRatioBps` as a percentage string with two decimals, truncated like the contract. */
+export declare function collateralRatioPercentString(sats: bigint, price8: bigint, debtWei: bigint): string;
+/**
+ * The largest principal `p <= room` with `p + fee(p) <= room`, for any fee that is monotone in the
+ * principal with `fee(0) == 0` (the validator's full mint fee, base + tail, is). Binary search;
+ * proved exact in `formal/lean/DH/MintSuggestion.lean` (`maxPrincipalFor_exact`), and a suggestion
+ * computed with an earlier authorization stamp is proved accepted at any later stamp
+ * (`suggestion_accepted_later`).
+ */
+export declare function maxPrincipalForFee(room: bigint, fee: (principal: bigint) => bigint): bigint;

package/dist/utils/sign-guard/extend-fee-bound.d.ts

@@ -1,5 +1,10 @@
 import { ethers } from "ethers";
 import type { ContractRegistry } from "./tx-validator";
+/**
+ * The H-3 baseline `ucdDebt × extensionFeeRateBps / 10000`. Proved in
+ * `formal/lean/DH/RenewalFee.lean` to bound the validator's pro-rata fee for all inputs.
+ */
+export declare function extendFeeUpperBoundWei(ucdDebt: bigint, extensionFeeRateBps: bigint): bigint;
 export interface ExtendFeeBound {
     ucdDebt: bigint;
     extensionFeeRateBps: bigint;

package/dist/utils/sign-guard/op-envelope.d.ts

@@ -20,7 +20,13 @@ export declare function authValiditySec(): number;
  * advance, or the authorization is born at the edge of its window.
  */
 export declare function nextQuantumTimestamp(nowMs?: number): number;
-/** General ops (mint/repay/extend): issued within the last 3 windows and never in the future. */
+/**
+ * General ops (mint/repay/extend): the Lit validator's rule — the signature's quantum is the
+ * PAST, CURRENT or NEXT quantum of `nowSec`. The next quantum is allowed because authorizations
+ * are STAMPED with `nextQuantumTimestamp`. A sliding "`nowSec - issuedAtSec < 180`, never in the
+ * future" check rejected every such stamp and accepted signatures three quanta back that the
+ * validator refuses (plan A10, `formal/lean/DH/Quantum.lean` `client_fresh_iff_lit`).
+ */
 export declare function isAuthFresh(issuedAtSec: number, nowSec: number): boolean;
 /** Withdrawal (`strictCurrentQuantum`): issued in the SAME quantum window as now. */
 export declare function isStrictCurrentQuantum(issuedAtSec: number, nowSec: number): boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gvnrdao/dh-sdk",
-  "version": "0.0.341",
+  "version": "0.0.343",
   "description": "TypeScript SDK for Diamond Hands Protocol",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -100,22 +100,17 @@
   },
   "sideEffects": false,
   "dependencies": {
+    "@gvnrdao/dh-lit-actions": "^0.0.323",
+    "@gvnrdao/dh-lit-ops": "^0.0.318",
     "@noble/hashes": "^1.5.0",
     "axios": "^1.17.0",
     "bech32": "^2.0.0",
     "bip66": "^2.0.0",
     "bitcoinjs-lib": "^6.1.0",
-    "bn.js": "^5.2.3",
     "bs58check": "^3.0.1",
     "crypto-js": "^4.2.0",
     "dotenv": "^17.4.2",
-    "elliptic": "^6.6.1",
-    "ethers": "6.16.0",
-    "uuid": "^9.0.1"
-  },
-  "optionalDependencies": {
-    "@gvnrdao/dh-lit-actions": "^0.0.322",
-    "@gvnrdao/dh-lit-ops": "^0.0.316"
+    "ethers": "6.16.0"
   },
   "devDependencies": {
     "@babel/preset-env": "7.29.7",