@ninsei-labs/sdk 0.54.0 → 0.55.1

package/CHANGELOG.md

@@ -1,3 +1,23 @@
+## 0.55.1 — 2026-10-30
+
+- Restore the relay wire revision 13 public features type: it has no `capabilities` field. 0.55.0 added the
+  old revision 12 list back, so `verifyNodeFeatures` refused every features string the deployed relay serves.
+  The fixture is the relay's own revision 13 vector.
+- `@ninsei-labs/sdk/relay` keeps the digests, the verifier, the firm terms digest and the HPKE envelope.
+
+## 0.55.0 — 2026-10-30
+
+- `order.escrowNativeWei` reads the quote's own native amount (`payNative`) for a token-funded order and returns
+  its wei value. A quote without that figure is refused by name (`native-amount-unread`) instead of rescaling the
+  payment-token amount.
+- Relay public features now carry the `capabilities` list from relay wire revision 13, so a maker's signed
+  `node_features` has the type the relay verifies. A node without `firm/1` carries no HPKE key and no windows.
+- `@ninsei-labs/sdk/relay` exposes the relay digests, the node features verifier, the firm terms digest and the
+  HPKE view envelope for a node that embeds the SDK.
+- `swaps.start` keeps the exact atomic XMR amount from the signed order in the record's `escrow.expectedAtomic`.
+  The arrival check and a recovery file rebuilt from the chain compare that integer instead of the rounded
+  display number. A malformed or non-positive value is refused before the record is saved.
+
 ## 0.54.0 — 2026-10-29
 
 - `findSwaps` no longer walks the allocator's 100,000 v1 indices in one synchronous call. One call scans at most

package/LICENSE-POLICY.md

@@ -0,0 +1,46 @@
+# Dependency license policy
+
+The SDK is published as a public package under MIT. Its production dependency tree must stay compatible with
+that promise: a dependency with a copyleft, source-available, unknown or missing licence is a decision for a
+person, not something that enters a release by accident.
+
+## Allowed licences
+
+A production dependency may use one of these licences:
+
+- MIT
+- MIT-0
+- ISC
+- Apache-2.0
+- BSD-2-Clause
+- BSD-3-Clause
+- Unlicense
+- 0BSD
+- CC0-1.0
+- BlueOak-1.0.0
+
+An SPDX expression is read as written: `MIT OR Apache-2.0` is allowed when one branch is allowed, and
+`MIT AND ISC` is allowed when every branch is allowed. A `WITH` exception keeps the base licence's decision.
+`SEE LICENSE IN ...`, `UNLICENSED`, `UNKNOWN`, and every licence outside the list are refused.
+
+## How the check runs
+
+`pnpm licenses list --prod --json` reads the installed production tree, including transitive packages. The
+check is implemented in `tools/check-licenses.mjs`; CI runs it in the **License Compliance** workflow on every
+pull request and every push to `main`.
+
+```sh
+pnpm run check:licenses
+```
+
+The command prints the packages grouped by licence. If any package is outside the allowlist, it prints each
+package and its licence, then exits non-zero.
+
+## Notices travel with the package
+
+`pnpm run notices` regenerates `THIRD_PARTY_NOTICES.md` from the production tree, including the licence text and
+the `NOTICE` files each package ships. The file is published with the package and the same CI workflow checks that
+it is current. A dependency change that edits the lockfile but not the notices fails the check; run `pnpm run
+notices` and review the result with the dependency change.
+
+Development dependencies are not part of the published package and are not covered by these checks.

package/README.md

@@ -316,7 +316,10 @@ trigger where those exist; on another VM they simply do not appear, rather than
 5. **Workers and WASM are separate files** from `assetsBase`, so the interface's bundler (Astro/Vite) does not
    touch them: `atomic/order-worker.js`, the Monero bundles.
 6. **Strict CSP.** The package is designed for a policy without `eval` and inline.
-7. **Zero dependencies.**
+7. **Few dependencies, all permissive.** Every production dependency is checked in CI against an allowlist: MIT, MIT-0,
+   ISC, Apache-2.0, BSD-2-Clause, BSD-3-Clause, Unlicense, 0BSD, CC0-1.0 and BlueOak-1.0.0. Copyleft,
+   source-available, unknown or missing licences fail `pnpm run check:licenses`; the licence texts travel in
+   [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md), and the policy is in [LICENSE-POLICY.md](LICENSE-POLICY.md).
 
 ## Releases and prereleases
 

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,656 @@
+# Third-party notices
+
+This file lists the production dependencies of `@ninsei-labs/sdk` and the licence text each package ships.
+It is generated from the installed production tree; do not edit it by hand.
+
+Generated by `tools/third-party-notices.mjs`. Licences accepted by the project are listed in
+[LICENSE-POLICY.md](LICENSE-POLICY.md).
+
+## @hpke/chacha20poly1305 1.8.0
+
+License: MIT
+Source: git+https://github.com/dajiaji/hpke-js.git
+
+### LICENSE
+
+```text
+MIT License
+
+Copyright (c) 2023 Ajitomi Daisuke
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## @hpke/common 1.10.1
+
+License: MIT
+Source: git+https://github.com/dajiaji/hpke-js.git
+
+### LICENSE
+
+```text
+MIT License
+
+Copyright (c) 2024 Ajitomi Daisuke
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## @hpke/core 1.9.0
+
+License: MIT
+Source: git+https://github.com/dajiaji/hpke-js.git
+
+### LICENSE
+
+```text
+MIT License
+
+Copyright (c) 2023 Ajitomi Daisuke
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## @hpke/dhkem-x25519 1.8.0
+
+License: MIT
+Source: git+https://github.com/dajiaji/hpke-js.git
+
+### LICENSE
+
+```text
+MIT License
+
+Copyright (c) 2023 Ajitomi Daisuke
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## @noble/curves 2.4.0
+
+License: MIT
+Source: git+https://github.com/paulmillr/noble-curves.git
+
+### LICENSE
+
+```text
+The MIT License (MIT)
+
+Copyright (c) 2022 Paul Miller (https://paulmillr.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the “Software”), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+```
+
+## @noble/hashes 2.4.0
+
+License: MIT
+Source: git+https://github.com/paulmillr/noble-hashes.git
+
+### LICENSE
+
+```text
+The MIT License (MIT)
+
+Copyright (c) 2022 Paul Miller (https://paulmillr.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the “Software”), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+```
+
+## @scure/bip39 2.4.0
+
+License: MIT
+Source: git+https://github.com/paulmillr/scure-bip39.git
+
+### LICENSE
+
+```text
+The MIT License (MIT)
+
+Copyright (c) 2022 Patricio Palladino, Paul Miller (paulmillr.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the “Software”), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+```
+
+## base64-js 1.5.1
+
+License: MIT
+Source: git://github.com/beatgammit/base64-js.git
+
+### LICENSE
+
+```text
+The MIT License (MIT)
+
+Copyright (c) 2014 Jameson Little
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+```
+
+## bn.js 5.2.5
+
+License: MIT
+Source: git@github.com:indutny/bn.js
+
+### LICENSE
+
+```text
+Copyright Fedor Indutny, 2015.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## buffer 6.0.3
+
+License: MIT
+Source: git://github.com/feross/buffer.git
+
+### LICENSE
+
+```text
+The MIT License (MIT)
+
+Copyright (c) Feross Aboukhadijeh, and other contributors.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+```
+
+## ieee754 1.2.1
+
+License: BSD-3-Clause
+Source: git://github.com/feross/ieee754.git
+
+### LICENSE
+
+```text
+Copyright 2008 Fair Oaks Labs, Inc.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+```
+
+## inherits 2.0.4
+
+License: ISC
+Source: git://github.com/isaacs/inherits
+
+### LICENSE
+
+```text
+The ISC License
+
+Copyright (c) Isaac Z. Schlueter
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
+FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+```
+
+## keccak 3.0.4
+
+License: MIT
+Source: https://github.com/cryptocoinjs/keccak.git
+
+### LICENSE
+
+```text
+The MIT License (MIT)
+
+Copyright (c) 2016-2019 https://github.com/cryptocoinjs/keccak contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+```
+
+## keccak256 1.0.6
+
+License: MIT
+Source: https://github.com/miguelmota/keccak256
+
+### LICENSE.md
+
+```text
+MIT license
+
+Copyright (C) 2015 Miguel Mota
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## node-addon-api 2.0.2
+
+License: MIT
+Source: git://github.com/nodejs/node-addon-api.git
+
+### LICENSE.md
+
+```text
+The MIT License (MIT)
+=====================
+
+Copyright (c) 2017 Node.js API collaborators
+-----------------------------------
+
+*Node.js API collaborators listed at <https://github.com/nodejs/node-addon-api#collaborators>*
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+```
+
+## node-gyp-build 4.8.4
+
+License: MIT
+Source: https://github.com/prebuild/node-gyp-build.git
+
+### LICENSE
+
+```text
+The MIT License (MIT)
+
+Copyright (c) 2017 Mathias Buus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+```
+
+## readable-stream 3.6.2
+
+License: MIT
+Source: git://github.com/nodejs/readable-stream
+
+### LICENSE
+
+```text
+Node.js is licensed for use as follows:
+
+"""
+Copyright Node.js contributors. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+This license applies to parts of Node.js originating from the
+https://github.com/joyent/node repository:
+
+"""
+Copyright Joyent, Inc. and other Node contributors. All rights reserved.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+```
+
+## safe-buffer 5.2.1
+
+License: MIT
+Source: git://github.com/feross/safe-buffer.git
+
+### LICENSE
+
+```text
+The MIT License (MIT)
+
+Copyright (c) Feross Aboukhadijeh
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+```
+
+## string_decoder 1.3.0
+
+License: MIT
+Source: git://github.com/nodejs/string_decoder.git
+
+### LICENSE
+
+```text
+Node.js is licensed for use as follows:
+
+"""
+Copyright Node.js contributors. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+
+This license applies to parts of Node.js originating from the
+https://github.com/joyent/node repository:
+
+"""
+Copyright Joyent, Inc. and other Node contributors. All rights reserved.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
+IN THE SOFTWARE.
+"""
+```
+
+## util-deprecate 1.0.2
+
+License: MIT
+Source: git://github.com/TooTallNate/util-deprecate.git
+
+### LICENSE
+
+```text
+(The MIT License)
+
+Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+```

package/engine/evm/funding.js

@@ -99,6 +99,43 @@ export function toWei(human, decimals = 18) {
   return BigInt(intPart || "0") * 10n ** BigInt(decimals) + BigInt(frac || "0");
 }
 
+// THE ONE NATIVE AMOUNT OF A TOKEN-FUNDED ORDER.
+//
+// The escrow holds the network's NATIVE coin; a quote paid in USDC/USDT carries a different number in the token.
+// The native figure is the quote's own `payNative`, in the network's native decimals. A quote without that figure
+// is a NAMED refusal, never a fallback to the payment amount: rescaling the payment amount is a known wrong answer
+// (10^12 on a 6-decimal token), not a smaller error. This is the rule both the intent target and the escrow order
+// read, so the two cannot diverge.
+export function escrowNativeWei({ quote = null, nativeDecimals = 18 } = {}) {
+  const raw = quote ? quote.payNative : null;
+  if (raw === null || raw === undefined || raw === "") {
+    return { ok: false, code: "native-amount-unread", reason: "the quote carries no native amount" };
+  }
+  const n = Number(raw);
+  if (!Number.isFinite(n) || n <= 0) {
+    return { ok: false, code: "native-amount-unread", reason: "the quote's native amount is not a positive number" };
+  }
+  const dec = Number(nativeDecimals);
+  if (!Number.isInteger(dec) || dec < 0) {
+    return { ok: false, code: "native-amount-unread", reason: "the native decimals are not a whole number" };
+  }
+  // THE QUOTE'S OWN DIGITS, NOT A RE-ROUNDED COPY. An exponent form falls back to toFixed(18), as the rest of the
+  // page does; everything else keeps exactly the digits it was typed with.
+  const text = /e/i.test(String(raw)) ? n.toFixed(18) : String(raw);
+  // DECIMAL DIGITS ONLY. BigInt accepts "0x10", and a native amount read as a hex literal would silently become
+  // sixteen times the token amount; a quote carries decimal text.
+  if (!/^(?:0|[1-9]\d*)(?:\.\d+)?$/.test(text)) {
+    return { ok: false, code: "native-amount-unread", reason: "the native amount is not a decimal number" };
+  }
+  let wei;
+  try { wei = toWei(text, dec); }
+  catch { return { ok: false, code: "native-amount-unread", reason: "the native amount is not a decimal number" }; }
+  if (wei <= 0n) {
+    return { ok: false, code: "native-amount-unread", reason: "the native amount rounds to zero wei" };
+  }
+  return { ok: true, wei: wei.toString(), source: "native" };
+}
+
 // WE SET THE GAS OURSELVES, WITH A MARGIN - A CURE FOR A REAL BUG, NOT CAUTION.
 // createOrderAndFund goes as ONE transaction, but the wallet estimates it at an address where the escrow does NOT
 // exist yet: instead of cloning and recording the deposit it counts a plain transfer (21000 plus data). The wallet

package/index.d.ts

@@ -1699,7 +1699,11 @@ export interface SweepRunResult {
 
 // --- Recovery// --- Recovery ------------------------------------------------------------------------------
 
-/** Order checks. Both are BEFORE the signature: after it there is nothing to fix. */
+/** Order checks and pure order helpers. Checks are BEFORE the signature: after it there is nothing to fix. */
+export type EscrowNativeAmount =
+  | { readonly ok: true; readonly wei: string; readonly source: "native" }
+  | { readonly ok: false; readonly code: "native-amount-unread"; readonly reason: string };
+
 export interface OrderApi {
   /** The order context string the proof and the quote signature are bound to. */
   context(terms: Readonly<Record<string, unknown>>): string;
@@ -1707,6 +1711,13 @@ export interface OrderApi {
   verifyCounterparty(request: { readonly side: unknown; readonly order: Readonly<Record<string, unknown>>; readonly sealed?: unknown; readonly ownEncPriv?: unknown }): unknown;
   /** The joint Monero address from your own spend half and the other's point. */
   jointAddress(request: { readonly ownSpendHalf: string; readonly ownViewHalf: string; readonly otherSpendPoint: string; readonly otherViewPoint: string; readonly network?: string }): unknown;
+  /**
+   * The ONE native amount of a token-funded order: the quote's `payNative` in the network's native decimals.
+   * The escrow holds native coin, so the token amount is never used as the escrow amount (a 6-decimal token
+   * would be off by 10^12). A quote without a native figure answers `{ ok: false, code: "native-amount-unread" }`;
+   * it is never replaced by the payment amount.
+   */
+  escrowNativeWei(request?: { readonly quote?: Readonly<Record<string, unknown>> | null; readonly nativeDecimals?: number }): EscrowNativeAmount;
   /**
    * The order state, READ FROM THE CHAIN (escrow status()): which of the four states the order is in. The state is
    * read by a call, not guessed from logs. It is read by the same chain-read seam as the actions (`evmCall`), so

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ninsei-labs/sdk",
-  "version": "0.54.0",
+  "version": "0.55.1",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"
@@ -55,6 +55,9 @@
     "check:order-proof": "node tools/check-order-proof.mjs",
     "check:daemon-address": "node tools/check-daemon-address.mjs",
     "check:ci-scripts": "node tools/check-ci-scripts.mjs",
+    "check:licenses": "node tools/check-licenses.mjs",
+    "notices": "node tools/third-party-notices.mjs",
+    "check:notices": "node tools/third-party-notices.mjs --check",
     "check:factory-selectors": "node tools/check-factory-selectors.mjs",
     "check:fee-estimate": "node tools/check-fee-estimate.mjs",
     "check:deadline-scale": "node tools/check-deadline-scale.mjs",
@@ -70,7 +73,8 @@
     "check:packed-consumer": "node tools/check-packed-consumer.mjs",
     "check:quote-binding": "node tools/check-quote-binding.mjs",
     "check:types-consumer": "node node_modules/typescript/bin/tsc -p tools/ts-consumer/tsconfig.json",
-    "check:monero-live": "node tools/check-monero-live.mjs"
+    "check:monero-live": "node tools/check-monero-live.mjs",
+    "check:native-amount": "node tools/check-native-amount.mjs"
   },
   "types": "./index.d.ts",
   "exports": {
@@ -109,6 +113,10 @@
     "./provider": {
       "types": "./src/public/provider.d.ts",
       "default": "./src/public/provider.mjs"
+    },
+    "./relay": {
+      "types": "./src/public/relay.d.ts",
+      "default": "./src/public/relay.mjs"
     }
   },
   "files": [
@@ -118,7 +126,9 @@
     "index.d.ts",
     "README.md",
     "CHANGELOG.md",
-    "LICENSE"
+    "LICENSE",
+    "LICENSE-POLICY.md",
+    "THIRD_PARTY_NOTICES.md"
   ],
   "engines": {
     "node": ">=24.22.1"

package/src/index.mjs

@@ -249,6 +249,10 @@ export function createNinsei(options) {
       context: (terms) => contextOf(terms),
       verifyCounterparty: (request) => verifyCounterparty(request),
       jointAddress: (request) => jointAddress(request),
+      // THE ONE NATIVE AMOUNT OF A TOKEN-FUNDED ORDER. The escrow holds native coin, while a stablecoin quote
+      // carries a different number in the token; this reads the quote's native figure. A quote without it is a
+      // named refusal (`native-amount-unread`), never a rescale of the payment amount.
+      escrowNativeWei: (request) => engine.evm.escrowNativeWei(request),
       // ORDER STATE FROM THE CHAIN (escrow slot 3): which of the four states the order is in. Read, not guessed
       // from logs - the very call the engine used to make from www/js/core/swap-flow.js.
       status: (escrow) => orderFlow.orderStatus(escrow, orderDeps),

package/src/public/relay.d.ts

@@ -0,0 +1,77 @@
+export declare const RELAY_FEATURES_TYPE_NAME: "NodeFeatures";
+export declare const RELAY_DOMAIN_NAME: "Ninsei Relay";
+export declare const RELAY_DOMAIN_VERSION: "1";
+export declare const FIRM_WINDOW_TYPE: string;
+export declare const NODE_FEATURES_TYPE: string;
+export declare const FIRM_WINDOW_FIELDS: ReadonlyArray<readonly [string, string]>;
+export declare const NODE_FEATURES_FIELDS: ReadonlyArray<readonly [string, string]>;
+
+export interface RelayFirmWindow {
+  market: string;
+  side: "ask" | "bid";
+  xmrNetwork: string;
+  readyMinSeconds: number;
+  readyMaxSeconds: number;
+  settlementMinSeconds: number;
+  settlementMaxSeconds: number;
+  quoteTtlSeconds: number;
+}
+
+export interface RelayNodeFeatures {
+  type: "node_features";
+  version: 1;
+  relayId: string;
+  provider: string;
+  quoteKey: string;
+  registry: string;
+  capabilities: string[];
+  hpkeKey: string;
+  firmWindows: RelayFirmWindow[];
+  time: number;
+  nonce: string;
+  signature: string;
+}
+
+export interface RelayVerifyTerms {
+  market: string;
+  side: "ask" | "bid";
+  maker: string;
+  registry: string;
+  xmrNetwork: string;
+}
+
+export declare function nodeFeaturesStructHash(features: RelayNodeFeatures): Uint8Array;
+export declare function nodeFeaturesDomainSeparator(): Uint8Array;
+export declare function nodeFeaturesDigest(features: RelayNodeFeatures): Uint8Array;
+export declare function verifyNodeFeatures(input: { features: RelayNodeFeatures; terms?: RelayVerifyTerms | null }): {
+  featuresHash: string;
+  hpkeKey: string;
+  window: RelayFirmWindow | null;
+};
+export declare function nodeFeaturesMissingFields(features: Partial<RelayNodeFeatures>): string[];
+
+export declare function firmTermsDigest(input: { crypto: { keccak256(bytes: Uint8Array): Uint8Array }; terms: Record<string, unknown> }): Uint8Array;
+export declare function firmTermsMissingFields(terms: Record<string, unknown>): string[];
+
+export declare const RELAY_VIEW_INFO_PREFIX: string;
+export declare function relayViewInfo(input: {
+  termsDigest: string;
+  commitHalf: string;
+  edPoint: string;
+  edViewPointClient: string;
+  edViewPointNode: string;
+}): Uint8Array;
+export declare function sealViewEnvelope(input: { hpkeKey: string; info: Uint8Array; plaintext: Uint8Array }): Promise<{ enc: string; ciphertext: string }>;
+export declare function openViewEnvelope(input: { privateKey: string; enc: string; ciphertext: string; info: Uint8Array }): Promise<Uint8Array>;
+
+export declare const RELAY_QUOTE_TYPE: string;
+export declare function relayQuoteStructHash(answer: Record<string, unknown>): Uint8Array;
+export declare function relayQuoteDomainSeparator(): Uint8Array;
+export declare function relayQuoteDigest(answer: Record<string, unknown>): Uint8Array;
+export declare function verifyRelayQuoteFrame(answer: Record<string, unknown>, quoteKey: string): Record<string, unknown>;
+export declare function verifyFirmAnswer(input: {
+  answer: Record<string, unknown>;
+  features: RelayNodeFeatures;
+  request: { terms: Record<string, unknown>; edViewPointClient: string; edViewPointNode: string };
+  now?: number | null;
+}): Record<string, unknown>;

package/src/public/relay.mjs

@@ -0,0 +1,37 @@
+// THE RELAY EXCHANGE FOR A NODE THAT EMBEDS THE SDK.
+//
+// A maker needs the other half of the same rules a client uses: the public features digest it signs, the terms
+// digest, the HPKE view envelope it opens, and the answer verifier. Names only; no second implementation.
+
+export {
+  RELAY_FEATURES_TYPE_NAME,
+  RELAY_DOMAIN_NAME,
+  RELAY_DOMAIN_VERSION,
+  FIRM_WINDOW_TYPE,
+  NODE_FEATURES_TYPE,
+  FIRM_WINDOW_FIELDS,
+  NODE_FEATURES_FIELDS,
+  nodeFeaturesStructHash,
+  nodeFeaturesDomainSeparator,
+  nodeFeaturesDigest,
+  verifyNodeFeatures,
+  nodeFeaturesMissingFields,
+} from "../relayFeatures.mjs";
+
+export { firmTermsDigest, firmTermsMissingFields } from "../relayTerms.mjs";
+
+export {
+  RELAY_VIEW_INFO_PREFIX,
+  relayViewInfo,
+  sealViewEnvelope,
+  openViewEnvelope,
+} from "../relayView.mjs";
+
+export {
+  RELAY_QUOTE_TYPE,
+  relayQuoteStructHash,
+  relayQuoteDomainSeparator,
+  relayQuoteDigest,
+  verifyRelayQuoteFrame,
+  verifyFirmAnswer,
+} from "../relayQuote.mjs";

package/src/record.mjs

@@ -54,6 +54,16 @@ export function createRecord(input, { order = null, side: knownSide = null } = {
     // both the slot check against the chain and the address check read them.
     half: halfHex(side.half), viewHalf: halfHex(side.viewHalf),
     edPointLocker: norm(side.pub.ed), edViewPointLocker: norm(side.viewPub) };
+  // THE XMR AMOUNT THE PROVIDER SIGNED, IN ATOMIC UNITS. The record's `xmrAmount` is a display number rounded
+  // from the quote; the signed order carries the exact integer. The arrival check compares against the signed
+  // figure, so it must survive the record and the recovery file unchanged (never re-derived from the display
+  // number). A malformed value is a refusal before anything is saved.
+  if (input.expectedAtomic !== undefined && input.expectedAtomic !== null) {
+    let atomic;
+    try { atomic = BigInt(String(input.expectedAtomic)); } catch { throw new SdkError("bad-input", { field: "expectedAtomic" }); }
+    if (atomic <= 0n) throw new SdkError("bad-input", { field: "expectedAtomic" });
+    escrow.expectedAtomic = atomic.toString();
+  }
   // THE SIDE'S ENCRYPTION KEY - only the public one: the private one stays with the side and never enters the record.
   if (side.enc && side.enc.pub) escrow.encPub = norm(side.enc.pub);
   const record = { ...swap, escrow };

package/src/swaps.mjs

@@ -295,6 +295,10 @@ const recordInputOf = (request) => {
     payToken: quote.asset ? String(quote.asset).toLowerCase() : undefined,
     payAmount: quote.amount !== undefined ? quote.amount : undefined,
     xmrAmount: quote.size !== undefined ? quote.size : undefined,
+    // THE SIGNED INTEGER, NOT THE DISPLAY NUMBER. `quote.size` is a rounded view of the XMR amount; the signed
+    // order's `xmrAmount` is the exact atomic value the maker will pay, and the arrival check compares that one.
+    expectedAtomic: request.order && request.order.xmrAmount !== undefined && request.order.xmrAmount !== null
+      ? request.order.xmrAmount : undefined,
     // THE ORDER-QUOTE ID IS PART OF THE RECORD, NOT A DETAIL OF THE SCREEN (a defect found): our service uses it to
     // tie the created escrow to the provider node's record, and without it the node cannot take the ETH
     // (sdk/src/swap-flow.mjs: quoteId: quote.id -> swap.orderQuoteId; markBodyOf reads exactly this field).

package/src/sweep.mjs

@@ -85,7 +85,16 @@ const payloadFromOrder = async (request) => {
     ownSpendHalf: halves.spendHalf, ownViewHalf: halves.viewHalf,
     otherSpendPoint, otherViewPoint, network: moneroNetwork,
   });
-  const escrow = { address: order.escrow, readyBy: order.readyBy, t1: order.t1 };
+  // THE SIGNED XMR AMOUNT TRAVELS WITH THE ESCROW. A recovery file rebuilt from the chain must compare the
+  // arrival against the exact integer the order carries, not against the rounded display number.
+  const signedAtomic = (() => {
+    try {
+      const atomic = BigInt(String(order.xmrAmount));
+      return atomic > 0n ? atomic.toString() : null;
+    } catch { return null; }
+  })();
+  const escrow = { address: order.escrow, readyBy: order.readyBy, t1: order.t1,
+    ...(signedAtomic ? { expectedAtomic: signedAtomic } : {}) };
   const payload = engine.recoveryFile.buildPayload({
     swap: {
       id: order.escrow, side, network, moneroNetwork,

package/src/version.mjs

@@ -6,4 +6,4 @@
 // tools/sync-version.mjs. Do not edit it by hand - set the version in package.json and run `npm run sync:version`.
 // The `version` check in tools/check.mjs refuses a mismatch, and refuses a runtime read of package.json here.
 
-export const SDK_VERSION = "0.54.0";
+export const SDK_VERSION = "0.55.1";