@ninsei-labs/sdk 0.49.0 → 0.51.0

package/CHANGELOG.md

@@ -1,3 +1,33 @@
+## 0.51.0 — 2026-10-22
+
+THE WITHDRAWAL AND THE ON-CHAIN SEARCH NOW CARRY EVERYTHING THE KEY CAN KNOW.
+
+- `sweep` keeps all 32 bytes of the revealed half; the old slice to 20 bytes made every real withdrawal fail.
+- The Monero node readers return the top block (`height - 1`) and accept the genesis timestamp, so `findSwaps` can
+  derive a start height instead of asking for a block that does not exist.
+- `quotes.firm` sends the taker's maker view half and requires the quote to echo it; without it a buy from the one
+  key could not be restored from the twelve words.
+- `quotes.sale` checks the signed claim tip with base plus priority fee, and `rankOffers` ranks a sale by
+  `amount × rate − claimTip`.
+- `sweep.restore` reports `window.fallback`; `findSwaps` returns `blockTime`, reads `xmrAmount` from the clone with
+  an `evmCode` reader, uses the factory's `deploymentBlock`, and names the native settlement while leaving the
+  paying token off-chain (`payToken: null`, `payTokenReason: "not-on-chain"`).
+- `sweep.fromOrder({ mnemonic, order })` builds the payload without a recovery file, and one wallet adapter now
+  serves both `sweep.restore` and `sweep.sign`.
+- The npm package ships the assets and `order-worker.js` its own code imports; Node floor is `>=24.22.1`.
+
+## 0.50.0 — 2026-10-21
+
+A CLAIM IS SENT BY ITS CLAIMER, AND A SALE IS RANKED AFTER THE TIP.
+
+- `actions.claim` compares the wallet's address with `request.claimer` or `expect.claimer` before it signs. A
+  third-party wallet, a missing claimer or a wallet without an address is a named `bad-input`; `claimSenderVerdict`
+  exposes the same rule. This is a deliberate tightening: a claim reveals the half to its sender.
+- `readQuote` keeps the signed `claimTip`, and `rankOffers` selects a sale by `amount × rate − claimTip`, not by
+  the headline rate. A buy, or a request without an amount, still ranks by rate.
+- `quotes.watch` uses that ranking for the chosen offer, so moving margin from the price into the tip no longer
+  wins a sale.
+
 ## 0.49.0 — 2026-10-21
 
 A ONE-KEY RECOVERY CAN WITHDRAW WITHOUT A FULL SCAN, AND A CLAIM TIP IS CHECKED.

package/README.md

@@ -155,6 +155,24 @@ the size is computed from the person's amount and is snapped to the node's grid
 range is not aligned: it is the provider's refusal, and it arrives as a code. Indicative quotes commit to nothing;
 `quotes.firm` commits (stage 2).
 
+## Found orders and the paying token
+
+`findSwaps` returns the orders whose commitment came from the recovery key. Each found order reports:
+
+- `amount` — the escrow's **native** amount in wei;
+- `settlementToken: "native"` — what the escrow receives;
+- `xmrAmount` — the XMR side, read from the clone's condition word 18 when an `evmCode` reader is passed;
+- `payToken: null` and `payTokenReason: "not-on-chain"` — the asset the person actually paid before the DEX leg.
+
+The reason is structural, not an omission. `OrderCreated` and the clone carry no token field, and the current escrow is
+native-only. A user may have paid USDC, USDT or DAI, but that happened in the DEX leg and lives in the quote/order
+record, not in the settlement contract. Inventing a token from the pair or the UI would be a claim the chain cannot
+support.
+
+When a token is needed, the order can be joined with an off-chain quote record by the caller. A future ERC-20 escrow
+would have to put the token into the signed quote and the clone (and therefore a new order format and factory); only
+then can `findSwaps` return it from the chain and set `payTokenReason` to something other than `not-on-chain`.
+
 ## Extending to other networks (Tron, Solana and beyond)
 
 The package name is deliberately common: the shared part — the quote client, the Monero leg, the state machine,