@quaivault/sdk 0.2.0 → 0.2.1

package/dist/index.d.cts

@@ -63,6 +63,34 @@ interface NetworkConfig {
  * is removed (approval epochs), so they must never gate a signature.
  */
 type Consistency = 'auto' | 'indexed' | 'chain';
+/**
+ * Source of "now", in Unix **seconds**, for decisions compared against chain time.
+ *
+ * The contracts decide with `block.timestamp`. Everything the SDK derives locally —
+ * a transaction's `ready` vs `timelocked`, what a caller may do next, whether a
+ * recovery period has elapsed — is a *prediction* of that, and a machine whose clock is
+ * wrong predicts wrongly. Containers, CI runners and VMs resumed from a snapshot drift
+ * in ways a desktop usually does not.
+ *
+ * Supplying a clock lets a consumer that has measured the offset feed it back in:
+ *
+ * ```ts
+ * const skew = localSeconds - blockTimestamp;      // positive: local clock is ahead
+ * connect({ now: () => Date.now() / 1000 - skew });
+ * ```
+ *
+ * A function rather than a scalar offset on purpose. An offset needs a sign convention,
+ * and getting it backwards doubles the error instead of cancelling it — silently. Here
+ * the arithmetic sits in the caller's own code, where it reads as what it means.
+ *
+ * This never affects elapsed-time measurement (retry backoff, timeouts, poll
+ * intervals). Those are durations: if the clock is 12 seconds fast, 30 seconds is still
+ * 30 seconds.
+ *
+ * Detection is deliberately not the SDK's job — it would mean an RPC call on behalf of
+ * a consumer who may not want one, and a cached value with no clear invalidation.
+ */
+type Clock = () => number;
 interface ClientOptions {
     network?: NetworkConfig | NetworkName;
     provider?: Provider;
@@ -77,6 +105,11 @@ interface ClientOptions {
     maxIndexerLagBlocks?: number;
     /** Read env vars for anything not passed explicitly. Default true. */
     useEnv?: boolean;
+    /**
+     * Source of "now" for time compared against chain timestamps. See {@link Clock}.
+     * Defaults to the local clock.
+     */
+    now?: Clock;
     /**
      * Retry policy for transient RPC and indexer failures. Applies to reads only —
      * writes are never retried, since a resubmit risks a double broadcast.
@@ -401,6 +434,11 @@ interface ResolvedConfig {
     consistency: Consistency;
     maxIndexerLagBlocks: number;
     retry: RetryOptions;
+    /**
+     * Resolved source of "now" in Unix seconds. Always set — falls back to the local
+     * clock — so consumers never branch on its presence.
+     */
+    now: Clock;
 }
 /** A `ResolvedConfig` with the private key removed. Safe to log. */
 type PublicConfig = Omit<ResolvedConfig, 'privateKey'> & {
@@ -606,7 +644,12 @@ declare class IndexerClient {
     private realtime;
     private healthCache;
     private inflightHealth;
-    /** Health results are reused for this long to keep read paths cheap. */
+    /**
+     * Health results are reused for this long to keep read paths cheap.
+     *
+     * This and `waitForBlock`'s deadline are elapsed-time arithmetic, so they use the
+     * raw local clock rather than `ClientOptions.now` — see the note in `chain/retry.ts`.
+     */
     readonly healthCacheMs: number;
     constructor(config: IndexerConfig, options?: {
         healthCacheMs?: number;
@@ -1281,6 +1324,8 @@ interface RecoveryModuleContext {
     queries: IndexerQueries | null;
     vaultAddress: Address;
     moduleAddress: Address | undefined;
+    /** Source of "now" for comparisons against chain timestamps. See {@link Clock}. */
+    now?: Clock;
 }
 /**
  * Guardian-based recovery for one vault.
@@ -1304,6 +1349,8 @@ declare class RecoveryModule {
      * them gates a write, so none of them should be the one read that silently skips
      * transient-failure handling.
      */
+    /** Now, in Unix seconds, for anything compared against a chain timestamp. */
+    private now;
     private vaultContract;
     /** Whether the module is currently enabled on the vault. */
     isEnabled(): Promise<boolean>;
@@ -1374,7 +1421,7 @@ declare class RecoveryModule {
         chainTxHash: Hex;
     }>;
     /** What `caller` may do to a recovery right now, and when blocked actions unlock. */
-    affordances(recoveryHash: Bytes32, caller?: Address): Promise<RecoveryAffordance[]>;
+    affordances(recoveryHash: Bytes32, caller?: Address, at?: number): Promise<RecoveryAffordance[]>;
     private buildFromChain;
     private validateNewOwners;
     private assertLive;
@@ -1626,6 +1673,11 @@ interface VaultContext {
     contracts: ContractAddresses;
     consistency: Consistency;
     maxIndexerLagBlocks: number;
+    /**
+     * Source of "now" for comparisons against chain timestamps. See {@link Clock}.
+     * Optional so a hand-built context still works; defaults to the local clock.
+     */
+    now?: Clock;
     /** Set by {@link Vault.pinned}. Never consulted by a write precondition. */
     view?: VaultView;
 }
@@ -1678,6 +1730,13 @@ declare class Vault {
      * genesis" rather than "unknown".
      */
     private indexerHead;
+    /**
+     * Now, in Unix seconds, for anything compared against a chain timestamp.
+     *
+     * Never used to measure elapsed time — see the duration sites in
+     * {@link waitForExecutable}, which stay on the raw local clock deliberately.
+     */
+    private now;
     private contract;
     /** Owners, threshold, timelock floor, nonce and balance. Always read from chain. */
     info(): Promise<VaultInfo>;
@@ -1717,6 +1776,19 @@ declare class Vault {
      */
     private chainOwners;
     isOwner(address: Address): Promise<boolean>;
+    /**
+     * Whether `owner`'s approval on `txHash` currently counts toward the threshold.
+     *
+     * Reads the chain, and accounts for approval-epoch invalidation: removing an owner
+     * bumps the vault's epoch and voids every approval that address made, so a
+     * confirmation the indexer still lists may already be dead. This is the authoritative
+     * answer.
+     *
+     * Public because it is one of the two inputs {@link computeAffordances} needs. Without
+     * it a consumer wanting affordances at an adjusted time had no way to assemble an
+     * `AffordanceContext` short of reimplementing this method against the raw contract.
+     */
+    hasApproved(txHash: Bytes32, owner: Address): Promise<boolean>;
     /** Approvals required to execute. Prefers a pinned view, then the indexer, then chain. */
     threshold(): Promise<number>;
     /**
@@ -1778,7 +1850,7 @@ declare class Vault {
      * What `caller` may legally do to `txHash` right now, and when blocked actions
      * become available. Defaults to the connected signer's address.
      */
-    affordances(txHash: Bytes32, caller?: Address): Promise<Affordance[]>;
+    affordances(txHash: Bytes32, caller?: Address, at?: number): Promise<Affordance[]>;
     /**
      * Shared body of {@link affordances}, taking the transaction either as a value or as
      * an in-flight promise.
@@ -2008,6 +2080,11 @@ declare class Vault {
  * called, so building a client is cheap and safe at module scope.
  */
 declare class QuaiVaultClient {
+    /**
+     * Source of "now" for time compared against chain timestamps. Resolved once from
+     * {@link ClientOptions.now}, defaulting to the local clock. See {@link Clock}.
+     */
+    readonly now: Clock;
     /**
      * Resolved configuration, with the private key stripped and the indexer key
      * masked — safe to log. The key itself is consumed once when building the signer.
@@ -2586,4 +2663,4 @@ declare function knownErrorSelectors(): Array<{
     signature: string;
 }>;
 
-export { AbortError, type Address, type AddressCheck, type AddressLedger, type Affordance, type AffordanceBlocker, type AffordanceContext, type ApprovalRecord, type BalanceOptions, type BatchCall, type Bytes32, type ClientOptions, ConfigError, Connection, type Consistency, type ContractAddresses, type CreateProgress, type CreateVaultParams, type CreateVaultResult, DEFAULT_CONCURRENCY, DEFAULT_TEXT_LIMIT, type DecodeContext, type DecodeResult, type DecodedBatchCall, type DecodedCall, type DecodedRevert, type DryRunResult, ENV_VARS, type ExecuteOutcome, type ExecuteResult, Factory, type FactoryContext, FactoryContract, type Hex, IndexerClient, type IndexerConfig, type IndexerHealth, IndexerQueries, IndexerQueryError, MAX_EXECUTION_DELAY, MAX_MODULES, MAX_OWNERS, type MineSaltOptions, type MinedSalt, type MiningStrategy, type NetworkConfig, type NetworkName, NoIndexerError, NoSignerError, NotFoundError, Operation, type Page, type Pagination, PreconditionError, type ProposeOptions, type ProposeResult, QuaiVault, QuaiVaultClient, QuaiVaultError, type QuaiVaultErrorCode, type RawRecovery, type RawRecoveryConfig, type RawRecoveryState, type RawTransactionState, type RawTransactionStruct, type ReceiptLike, type RecoveryAction, type RecoveryAffordance, type RecoveryConfig, RecoveryContract, RecoveryModule, type RecoveryModuleContext, type RecoveryRequest, type RecoveryStatus, type ResolvedConfig, type RetryOptions, RevertError, SENTINEL_MODULES, SaltMiningError, StaleProposalError, type Subscription, type TokenBalance, TokenContract, type TransactionKind, type TransactionStatus, ValidationError, Vault, type VaultAction, type VaultBalances, type VaultContext, VaultContract, type VaultInfo, type VaultTransaction, type VaultView, type WatchEvent, type WatchOptions, type WatchTopic, type WorkerRuntime, ZERO_ADDRESS, allowedActions, assertQuaiAddress, assertQuaiAddresses, classifyExecution, computeAffordances, computeBytecodeHash, computeFullSalt, connect, createWorkerThreadsStrategy, decodeCall, decodeMultiSendPayload, decodeRevert, decodeRevertFromError, defaultStrategy, deriveRecoveryStatus, deriveStatus, encodeInitData, encodeMultiSend, encodeMultiSendPayload, executableAfterOf, extractProposedTxHash, schemas as indexerSchemas, inspectAddress, interfaces, isNetworkName, isTerminal, isTransient, isUsableQuaiAddress, knownErrorSelectors, loadBalances, mainnet, mapPooled, mineSalt, minimumExpiration, networks, nowSeconds, predictVaultAddress, recoveryCall, remediationFor, resolveConfig, sanitizeText, selfCall, shardPrefixOf, syncStrategy, testnet, token as tokenCalls, watchVault, withRetry, workerThreadsStrategy };
+export { AbortError, type Address, type AddressCheck, type AddressLedger, type Affordance, type AffordanceBlocker, type AffordanceContext, type ApprovalRecord, type BalanceOptions, type BatchCall, type Bytes32, type ClientOptions, type Clock, ConfigError, Connection, type Consistency, type ContractAddresses, type CreateProgress, type CreateVaultParams, type CreateVaultResult, DEFAULT_CONCURRENCY, DEFAULT_TEXT_LIMIT, type DecodeContext, type DecodeResult, type DecodedBatchCall, type DecodedCall, type DecodedRevert, type DryRunResult, ENV_VARS, type ExecuteOutcome, type ExecuteResult, Factory, type FactoryContext, FactoryContract, type Hex, IndexerClient, type IndexerConfig, type IndexerHealth, IndexerQueries, IndexerQueryError, MAX_EXECUTION_DELAY, MAX_MODULES, MAX_OWNERS, type MineSaltOptions, type MinedSalt, type MiningStrategy, type NetworkConfig, type NetworkName, NoIndexerError, NoSignerError, NotFoundError, Operation, type Page, type Pagination, PreconditionError, type ProposeOptions, type ProposeResult, QuaiVault, QuaiVaultClient, QuaiVaultError, type QuaiVaultErrorCode, type RawRecovery, type RawRecoveryConfig, type RawRecoveryState, type RawTransactionState, type RawTransactionStruct, type ReceiptLike, type RecoveryAction, type RecoveryAffordance, type RecoveryConfig, RecoveryContract, RecoveryModule, type RecoveryModuleContext, type RecoveryRequest, type RecoveryStatus, type ResolvedConfig, type RetryOptions, RevertError, SENTINEL_MODULES, SaltMiningError, StaleProposalError, type Subscription, type TokenBalance, TokenContract, type TransactionKind, type TransactionStatus, ValidationError, Vault, type VaultAction, type VaultBalances, type VaultContext, VaultContract, type VaultInfo, type VaultTransaction, type VaultView, type WatchEvent, type WatchOptions, type WatchTopic, type WorkerRuntime, ZERO_ADDRESS, allowedActions, assertQuaiAddress, assertQuaiAddresses, classifyExecution, computeAffordances, computeBytecodeHash, computeFullSalt, connect, createWorkerThreadsStrategy, decodeCall, decodeMultiSendPayload, decodeRevert, decodeRevertFromError, defaultStrategy, deriveRecoveryStatus, deriveStatus, encodeInitData, encodeMultiSend, encodeMultiSendPayload, executableAfterOf, extractProposedTxHash, schemas as indexerSchemas, inspectAddress, interfaces, isNetworkName, isTerminal, isTransient, isUsableQuaiAddress, knownErrorSelectors, loadBalances, mainnet, mapPooled, mineSalt, minimumExpiration, networks, nowSeconds, predictVaultAddress, recoveryCall, remediationFor, resolveConfig, sanitizeText, selfCall, shardPrefixOf, syncStrategy, testnet, token as tokenCalls, watchVault, withRetry, workerThreadsStrategy };

package/dist/index.d.ts

@@ -63,6 +63,34 @@ interface NetworkConfig {
  * is removed (approval epochs), so they must never gate a signature.
  */
 type Consistency = 'auto' | 'indexed' | 'chain';
+/**
+ * Source of "now", in Unix **seconds**, for decisions compared against chain time.
+ *
+ * The contracts decide with `block.timestamp`. Everything the SDK derives locally —
+ * a transaction's `ready` vs `timelocked`, what a caller may do next, whether a
+ * recovery period has elapsed — is a *prediction* of that, and a machine whose clock is
+ * wrong predicts wrongly. Containers, CI runners and VMs resumed from a snapshot drift
+ * in ways a desktop usually does not.
+ *
+ * Supplying a clock lets a consumer that has measured the offset feed it back in:
+ *
+ * ```ts
+ * const skew = localSeconds - blockTimestamp;      // positive: local clock is ahead
+ * connect({ now: () => Date.now() / 1000 - skew });
+ * ```
+ *
+ * A function rather than a scalar offset on purpose. An offset needs a sign convention,
+ * and getting it backwards doubles the error instead of cancelling it — silently. Here
+ * the arithmetic sits in the caller's own code, where it reads as what it means.
+ *
+ * This never affects elapsed-time measurement (retry backoff, timeouts, poll
+ * intervals). Those are durations: if the clock is 12 seconds fast, 30 seconds is still
+ * 30 seconds.
+ *
+ * Detection is deliberately not the SDK's job — it would mean an RPC call on behalf of
+ * a consumer who may not want one, and a cached value with no clear invalidation.
+ */
+type Clock = () => number;
 interface ClientOptions {
     network?: NetworkConfig | NetworkName;
     provider?: Provider;
@@ -77,6 +105,11 @@ interface ClientOptions {
     maxIndexerLagBlocks?: number;
     /** Read env vars for anything not passed explicitly. Default true. */
     useEnv?: boolean;
+    /**
+     * Source of "now" for time compared against chain timestamps. See {@link Clock}.
+     * Defaults to the local clock.
+     */
+    now?: Clock;
     /**
      * Retry policy for transient RPC and indexer failures. Applies to reads only —
      * writes are never retried, since a resubmit risks a double broadcast.
@@ -401,6 +434,11 @@ interface ResolvedConfig {
     consistency: Consistency;
     maxIndexerLagBlocks: number;
     retry: RetryOptions;
+    /**
+     * Resolved source of "now" in Unix seconds. Always set — falls back to the local
+     * clock — so consumers never branch on its presence.
+     */
+    now: Clock;
 }
 /** A `ResolvedConfig` with the private key removed. Safe to log. */
 type PublicConfig = Omit<ResolvedConfig, 'privateKey'> & {
@@ -606,7 +644,12 @@ declare class IndexerClient {
     private realtime;
     private healthCache;
     private inflightHealth;
-    /** Health results are reused for this long to keep read paths cheap. */
+    /**
+     * Health results are reused for this long to keep read paths cheap.
+     *
+     * This and `waitForBlock`'s deadline are elapsed-time arithmetic, so they use the
+     * raw local clock rather than `ClientOptions.now` — see the note in `chain/retry.ts`.
+     */
     readonly healthCacheMs: number;
     constructor(config: IndexerConfig, options?: {
         healthCacheMs?: number;
@@ -1281,6 +1324,8 @@ interface RecoveryModuleContext {
     queries: IndexerQueries | null;
     vaultAddress: Address;
     moduleAddress: Address | undefined;
+    /** Source of "now" for comparisons against chain timestamps. See {@link Clock}. */
+    now?: Clock;
 }
 /**
  * Guardian-based recovery for one vault.
@@ -1304,6 +1349,8 @@ declare class RecoveryModule {
      * them gates a write, so none of them should be the one read that silently skips
      * transient-failure handling.
      */
+    /** Now, in Unix seconds, for anything compared against a chain timestamp. */
+    private now;
     private vaultContract;
     /** Whether the module is currently enabled on the vault. */
     isEnabled(): Promise<boolean>;
@@ -1374,7 +1421,7 @@ declare class RecoveryModule {
         chainTxHash: Hex;
     }>;
     /** What `caller` may do to a recovery right now, and when blocked actions unlock. */
-    affordances(recoveryHash: Bytes32, caller?: Address): Promise<RecoveryAffordance[]>;
+    affordances(recoveryHash: Bytes32, caller?: Address, at?: number): Promise<RecoveryAffordance[]>;
     private buildFromChain;
     private validateNewOwners;
     private assertLive;
@@ -1626,6 +1673,11 @@ interface VaultContext {
     contracts: ContractAddresses;
     consistency: Consistency;
     maxIndexerLagBlocks: number;
+    /**
+     * Source of "now" for comparisons against chain timestamps. See {@link Clock}.
+     * Optional so a hand-built context still works; defaults to the local clock.
+     */
+    now?: Clock;
     /** Set by {@link Vault.pinned}. Never consulted by a write precondition. */
     view?: VaultView;
 }
@@ -1678,6 +1730,13 @@ declare class Vault {
      * genesis" rather than "unknown".
      */
     private indexerHead;
+    /**
+     * Now, in Unix seconds, for anything compared against a chain timestamp.
+     *
+     * Never used to measure elapsed time — see the duration sites in
+     * {@link waitForExecutable}, which stay on the raw local clock deliberately.
+     */
+    private now;
     private contract;
     /** Owners, threshold, timelock floor, nonce and balance. Always read from chain. */
     info(): Promise<VaultInfo>;
@@ -1717,6 +1776,19 @@ declare class Vault {
      */
     private chainOwners;
     isOwner(address: Address): Promise<boolean>;
+    /**
+     * Whether `owner`'s approval on `txHash` currently counts toward the threshold.
+     *
+     * Reads the chain, and accounts for approval-epoch invalidation: removing an owner
+     * bumps the vault's epoch and voids every approval that address made, so a
+     * confirmation the indexer still lists may already be dead. This is the authoritative
+     * answer.
+     *
+     * Public because it is one of the two inputs {@link computeAffordances} needs. Without
+     * it a consumer wanting affordances at an adjusted time had no way to assemble an
+     * `AffordanceContext` short of reimplementing this method against the raw contract.
+     */
+    hasApproved(txHash: Bytes32, owner: Address): Promise<boolean>;
     /** Approvals required to execute. Prefers a pinned view, then the indexer, then chain. */
     threshold(): Promise<number>;
     /**
@@ -1778,7 +1850,7 @@ declare class Vault {
      * What `caller` may legally do to `txHash` right now, and when blocked actions
      * become available. Defaults to the connected signer's address.
      */
-    affordances(txHash: Bytes32, caller?: Address): Promise<Affordance[]>;
+    affordances(txHash: Bytes32, caller?: Address, at?: number): Promise<Affordance[]>;
     /**
      * Shared body of {@link affordances}, taking the transaction either as a value or as
      * an in-flight promise.
@@ -2008,6 +2080,11 @@ declare class Vault {
  * called, so building a client is cheap and safe at module scope.
  */
 declare class QuaiVaultClient {
+    /**
+     * Source of "now" for time compared against chain timestamps. Resolved once from
+     * {@link ClientOptions.now}, defaulting to the local clock. See {@link Clock}.
+     */
+    readonly now: Clock;
     /**
      * Resolved configuration, with the private key stripped and the indexer key
      * masked — safe to log. The key itself is consumed once when building the signer.
@@ -2586,4 +2663,4 @@ declare function knownErrorSelectors(): Array<{
     signature: string;
 }>;
 
-export { AbortError, type Address, type AddressCheck, type AddressLedger, type Affordance, type AffordanceBlocker, type AffordanceContext, type ApprovalRecord, type BalanceOptions, type BatchCall, type Bytes32, type ClientOptions, ConfigError, Connection, type Consistency, type ContractAddresses, type CreateProgress, type CreateVaultParams, type CreateVaultResult, DEFAULT_CONCURRENCY, DEFAULT_TEXT_LIMIT, type DecodeContext, type DecodeResult, type DecodedBatchCall, type DecodedCall, type DecodedRevert, type DryRunResult, ENV_VARS, type ExecuteOutcome, type ExecuteResult, Factory, type FactoryContext, FactoryContract, type Hex, IndexerClient, type IndexerConfig, type IndexerHealth, IndexerQueries, IndexerQueryError, MAX_EXECUTION_DELAY, MAX_MODULES, MAX_OWNERS, type MineSaltOptions, type MinedSalt, type MiningStrategy, type NetworkConfig, type NetworkName, NoIndexerError, NoSignerError, NotFoundError, Operation, type Page, type Pagination, PreconditionError, type ProposeOptions, type ProposeResult, QuaiVault, QuaiVaultClient, QuaiVaultError, type QuaiVaultErrorCode, type RawRecovery, type RawRecoveryConfig, type RawRecoveryState, type RawTransactionState, type RawTransactionStruct, type ReceiptLike, type RecoveryAction, type RecoveryAffordance, type RecoveryConfig, RecoveryContract, RecoveryModule, type RecoveryModuleContext, type RecoveryRequest, type RecoveryStatus, type ResolvedConfig, type RetryOptions, RevertError, SENTINEL_MODULES, SaltMiningError, StaleProposalError, type Subscription, type TokenBalance, TokenContract, type TransactionKind, type TransactionStatus, ValidationError, Vault, type VaultAction, type VaultBalances, type VaultContext, VaultContract, type VaultInfo, type VaultTransaction, type VaultView, type WatchEvent, type WatchOptions, type WatchTopic, type WorkerRuntime, ZERO_ADDRESS, allowedActions, assertQuaiAddress, assertQuaiAddresses, classifyExecution, computeAffordances, computeBytecodeHash, computeFullSalt, connect, createWorkerThreadsStrategy, decodeCall, decodeMultiSendPayload, decodeRevert, decodeRevertFromError, defaultStrategy, deriveRecoveryStatus, deriveStatus, encodeInitData, encodeMultiSend, encodeMultiSendPayload, executableAfterOf, extractProposedTxHash, schemas as indexerSchemas, inspectAddress, interfaces, isNetworkName, isTerminal, isTransient, isUsableQuaiAddress, knownErrorSelectors, loadBalances, mainnet, mapPooled, mineSalt, minimumExpiration, networks, nowSeconds, predictVaultAddress, recoveryCall, remediationFor, resolveConfig, sanitizeText, selfCall, shardPrefixOf, syncStrategy, testnet, token as tokenCalls, watchVault, withRetry, workerThreadsStrategy };
+export { AbortError, type Address, type AddressCheck, type AddressLedger, type Affordance, type AffordanceBlocker, type AffordanceContext, type ApprovalRecord, type BalanceOptions, type BatchCall, type Bytes32, type ClientOptions, type Clock, ConfigError, Connection, type Consistency, type ContractAddresses, type CreateProgress, type CreateVaultParams, type CreateVaultResult, DEFAULT_CONCURRENCY, DEFAULT_TEXT_LIMIT, type DecodeContext, type DecodeResult, type DecodedBatchCall, type DecodedCall, type DecodedRevert, type DryRunResult, ENV_VARS, type ExecuteOutcome, type ExecuteResult, Factory, type FactoryContext, FactoryContract, type Hex, IndexerClient, type IndexerConfig, type IndexerHealth, IndexerQueries, IndexerQueryError, MAX_EXECUTION_DELAY, MAX_MODULES, MAX_OWNERS, type MineSaltOptions, type MinedSalt, type MiningStrategy, type NetworkConfig, type NetworkName, NoIndexerError, NoSignerError, NotFoundError, Operation, type Page, type Pagination, PreconditionError, type ProposeOptions, type ProposeResult, QuaiVault, QuaiVaultClient, QuaiVaultError, type QuaiVaultErrorCode, type RawRecovery, type RawRecoveryConfig, type RawRecoveryState, type RawTransactionState, type RawTransactionStruct, type ReceiptLike, type RecoveryAction, type RecoveryAffordance, type RecoveryConfig, RecoveryContract, RecoveryModule, type RecoveryModuleContext, type RecoveryRequest, type RecoveryStatus, type ResolvedConfig, type RetryOptions, RevertError, SENTINEL_MODULES, SaltMiningError, StaleProposalError, type Subscription, type TokenBalance, TokenContract, type TransactionKind, type TransactionStatus, ValidationError, Vault, type VaultAction, type VaultBalances, type VaultContext, VaultContract, type VaultInfo, type VaultTransaction, type VaultView, type WatchEvent, type WatchOptions, type WatchTopic, type WorkerRuntime, ZERO_ADDRESS, allowedActions, assertQuaiAddress, assertQuaiAddresses, classifyExecution, computeAffordances, computeBytecodeHash, computeFullSalt, connect, createWorkerThreadsStrategy, decodeCall, decodeMultiSendPayload, decodeRevert, decodeRevertFromError, defaultStrategy, deriveRecoveryStatus, deriveStatus, encodeInitData, encodeMultiSend, encodeMultiSendPayload, executableAfterOf, extractProposedTxHash, schemas as indexerSchemas, inspectAddress, interfaces, isNetworkName, isTerminal, isTransient, isUsableQuaiAddress, knownErrorSelectors, loadBalances, mainnet, mapPooled, mineSalt, minimumExpiration, networks, nowSeconds, predictVaultAddress, recoveryCall, remediationFor, resolveConfig, sanitizeText, selfCall, shardPrefixOf, syncStrategy, testnet, token as tokenCalls, watchVault, withRetry, workerThreadsStrategy };