thunder-bridge 1.5.0 → 2.2.0

package/dist/nwc.js

@@ -172,6 +172,7 @@ function rotate(value, by) {
 
 // ../core/bolt11.ts
 var BECH32_CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
+var BECH32_GENERATOR = [996825010, 642813549, 513874426, 1027748829, 705979059];
 var CHECKSUM_WORDS = 6;
 var TIMESTAMP_WORDS = 7;
 var SIGNATURE_WORDS = 104;
@@ -189,18 +190,27 @@ var HRP_MULTIPLIER_MSAT = {
   n: MSAT_PER_BTC / 1e9,
   p: MSAT_PER_BTC / 1e12
 };
-var HRP_AMOUNT = /^ln[a-z]+?(\d+)([munp]?)$/;
+var HRP = /^ln(?:bcrt|bc|tbs|tb|sb)(?:(\d+)([munp]?))?$/;
 function decodeInvoice(bolt11) {
   const parts = splitBech32(bolt11);
   if (parts === null) {
-    return { paymentHash: null, descriptionHash: null, amountMsat: null, expiresAt: null };
+    return {
+      paymentHash: null,
+      descriptionHash: null,
+      amountMsat: null,
+      issuedAt: null,
+      expiresAt: null
+    };
   }
   const tagged = taggedFields(parts.words);
+  const issuedAt = issuedAtOf(parts.words);
+  const expiry = tagged.get(EXPIRY_TAG);
   return {
     paymentHash: hexTag(tagged, PAYMENT_HASH_TAG, PAYMENT_HASH_WORDS),
     descriptionHash: hexTag(tagged, DESCRIPTION_HASH_TAG, DESCRIPTION_HASH_WORDS),
     amountMsat: amountFromHrp(parts.hrp),
-    expiresAt: expiryOf(parts.words, tagged)
+    issuedAt,
+    expiresAt: issuedAt === null ? null : issuedAt + (expiry ? readNumber(expiry) : DEFAULT_EXPIRY_SECS)
   };
 }
 function preimageMatchesHash(preimage, paymentHash) {
@@ -211,7 +221,7 @@ function preimageMatchesHash(preimage, paymentHash) {
 }
 function splitBech32(bolt11) {
   const lower = bolt11.toLowerCase();
-  if (isBolt12Encoding(lower)) {
+  if (isBolt12Encoding(lower) || bolt11 !== lower && bolt11 !== bolt11.toUpperCase()) {
     return null;
   }
   const separator = lower.lastIndexOf("1");
@@ -230,7 +240,28 @@ function splitBech32(bolt11) {
     }
     words.push(value);
   }
-  return { hrp: lower.slice(0, separator), words: words.slice(0, -CHECKSUM_WORDS) };
+  const hrp = lower.slice(0, separator);
+  if (!HRP.test(hrp) || bech32Polymod([...expandedHrp(hrp), ...words]) !== 1) {
+    return null;
+  }
+  return { hrp, words: words.slice(0, -CHECKSUM_WORDS) };
+}
+function expandedHrp(hrp) {
+  const codes = [...hrp].map((char) => char.charCodeAt(0));
+  return [...codes.map((code) => code >> 5), 0, ...codes.map((code) => code & 31)];
+}
+function bech32Polymod(values) {
+  let checksum = 1;
+  for (const value of values) {
+    const top = checksum >> 25;
+    checksum = (checksum & 33554431) << 5 ^ value;
+    for (let bit = 0; bit < 5; bit++) {
+      if (top >> bit & 1) {
+        checksum ^= BECH32_GENERATOR[bit];
+      }
+    }
+  }
+  return checksum;
 }
 function isBolt12Encoding(lower) {
   return lower.startsWith("lno") || lower.startsWith("lni") || lower.startsWith("lnr");
@@ -260,19 +291,17 @@ function hexTag(fields, tag, expectedWords) {
   }
   return bytesToHex(wordsToBytes(words));
 }
-function expiryOf(words, fields) {
+function issuedAtOf(words) {
   if (words.length < TIMESTAMP_WORDS + SIGNATURE_WORDS) {
     return null;
   }
-  const expiry = fields.get(EXPIRY_TAG);
-  return readNumber(words.slice(0, TIMESTAMP_WORDS)) + (expiry ? readNumber(expiry) : DEFAULT_EXPIRY_SECS);
+  return readNumber(words.slice(0, TIMESTAMP_WORDS));
 }
 function amountFromHrp(hrp) {
-  const match = HRP_AMOUNT.exec(hrp);
-  if (match === null) {
+  const [, digits, multiplier] = HRP.exec(hrp) ?? [];
+  if (digits === void 0 || multiplier === "p" && !digits.endsWith("0")) {
     return null;
   }
-  const [, digits, multiplier] = match;
   return multiplier ? Number(digits) * HRP_MULTIPLIER_MSAT[multiplier] : Number(digits) * MSAT_PER_BTC;
 }
 function readNumber(words) {
@@ -302,49 +331,138 @@ var WalletRefused = class extends Error {
   }
 };
 
+// ../core/hmac.ts
+async function hmacHex(secret, payload) {
+  const raw = typeof secret === "string" ? new TextEncoder().encode(secret) : secret;
+  const key = await crypto.subtle.importKey(
+    "raw",
+    asBuffer(raw),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const message = typeof payload === "string" ? new TextEncoder().encode(payload) : payload;
+  return bytesToHex(new Uint8Array(await crypto.subtle.sign("HMAC", key, asBuffer(message))));
+}
+function asBuffer(bytes) {
+  return bytes instanceof Uint8Array && bytes.buffer instanceof ArrayBuffer ? bytes : new Uint8Array(bytes);
+}
+
 // ../core/sealed.ts
-var VERSION = "v1";
+var VERSION = "v2";
+var UNPADDED_VERSION = "v1";
+var PURPOSE_VERSION = "v3";
 var IV_BYTES = 12;
 var MIN_SECRET_CHARS = 32;
 var MAX_PLAIN_BYTES = 3e3;
-var INFO = new TextEncoder().encode("thunder-bridge/sealed");
-async function seal(secret, plaintext) {
-  const body = new TextEncoder().encode(plaintext);
-  if (body.length > MAX_PLAIN_BYTES) {
-    throw new Error(`sealed takes at most ${MAX_PLAIN_BYTES} bytes, this was ${body.length}`);
+var SIZE_CLASSES = [256, 1024, MAX_PLAIN_BYTES];
+var END_OF_TEXT = 128;
+var INFO = "thunder-bridge/sealed";
+async function seal(secret, plaintext, paymentHash) {
+  return await sealUnder(
+    await keyFor(secret, INFO),
+    plaintext,
+    crypto.getRandomValues(new Uint8Array(IV_BYTES)),
+    VERSION,
+    boundTo(paymentHash)
+  );
+}
+async function sealFor(purpose, secret, plaintext, { stable = false } = {}) {
+  return await sealUnder(
+    await keyFor(secret, `${INFO}/${purpose}`),
+    plaintext,
+    stable ? await nonceOf(secret, plaintext) : crypto.getRandomValues(new Uint8Array(IV_BYTES)),
+    PURPOSE_VERSION,
+    new TextEncoder().encode(PURPOSE_VERSION)
+  );
+}
+async function unsealFor(purpose, secret, sealed) {
+  if (!sealed.startsWith(`${PURPOSE_VERSION}.`)) {
+    return await unseal(secret, sealed);
   }
-  const key = await keyFor(secret);
-  const iv = crypto.getRandomValues(new Uint8Array(IV_BYTES));
-  const cipher = new Uint8Array(await crypto.subtle.encrypt({ name: "AES-GCM", iv }, key, body));
+  return await opened(
+    await keyFor(secret, `${INFO}/${purpose}`),
+    sealed.slice(PURPOSE_VERSION.length + 1),
+    new TextEncoder().encode(PURPOSE_VERSION)
+  );
+}
+async function nonceOf(secret, plaintext) {
+  const derived = await hmacHex(secret, `sealed-nonce|${plaintext}`);
+  const nonce = new Uint8Array(IV_BYTES);
+  for (let at = 0; at < IV_BYTES; at++) {
+    nonce[at] = Number.parseInt(derived.slice(at * 2, at * 2 + 2), 16);
+  }
+  return nonce;
+}
+async function sealUnder(key, plaintext, iv, version, additionalData) {
+  const body = padToClass(plaintext);
+  const cipher = new Uint8Array(
+    await crypto.subtle.encrypt({ name: "AES-GCM", iv, additionalData }, key, body)
+  );
   const joined2 = new Uint8Array(iv.length + cipher.length);
   joined2.set(iv);
   joined2.set(cipher, iv.length);
-  return `${VERSION}.${toBase64Url(joined2)}`;
+  return `${version}.${toBase64Url(joined2)}`;
 }
-async function unseal(secret, sealed) {
-  const key = await keyFor(secret);
-  if (!sealed.startsWith(`${VERSION}.`)) {
+async function unseal(secret, sealed, paymentHash) {
+  const key = await keyFor(secret, INFO);
+  const padded2 = sealed.startsWith(`${VERSION}.`);
+  const unbound = !padded2 && sealed.startsWith(`${UNPADDED_VERSION}.`);
+  if (!padded2 && (!unbound || paymentHash !== void 0)) {
     return null;
   }
-  const joined2 = fromBase64Url(sealed.slice(VERSION.length + 1));
+  return await opened(
+    key,
+    sealed.slice(VERSION.length + 1),
+    padded2 ? boundTo(paymentHash) : void 0
+  );
+}
+async function opened(key, encoded, additionalData) {
+  const joined2 = fromBase64Url(encoded);
   if (joined2 === null || joined2.length <= IV_BYTES) {
     return null;
   }
   try {
-    const body = await crypto.subtle.decrypt(
-      { name: "AES-GCM", iv: joined2.slice(0, IV_BYTES) },
-      key,
-      joined2.slice(IV_BYTES)
+    const body = new Uint8Array(
+      await crypto.subtle.decrypt(
+        { name: "AES-GCM", iv: joined2.slice(0, IV_BYTES), additionalData },
+        key,
+        joined2.slice(IV_BYTES)
+      )
     );
-    return new TextDecoder().decode(body);
+    const text = additionalData === void 0 ? body : unpad(body);
+    return text === null ? null : new TextDecoder().decode(text);
   } catch {
     return null;
   }
 }
-async function keyFor(secret) {
+function refuseAWeakSecret(secret) {
   if (secret.length < MIN_SECRET_CHARS) {
     throw new Error(`the sealing secret needs ${MIN_SECRET_CHARS} characters of randomness`);
   }
+}
+function boundTo(paymentHash) {
+  return new TextEncoder().encode(
+    paymentHash === void 0 ? VERSION : `${VERSION}|${paymentHash.toLowerCase()}`
+  );
+}
+function padToClass(plaintext) {
+  const text = new TextEncoder().encode(plaintext);
+  const size = SIZE_CLASSES.find((limit) => text.length <= limit);
+  if (size === void 0) {
+    throw new Error(`sealed takes at most ${MAX_PLAIN_BYTES} bytes, this was ${text.length}`);
+  }
+  const body = new Uint8Array(size + 1);
+  body.set(text);
+  body[text.length] = END_OF_TEXT;
+  return body;
+}
+function unpad(body) {
+  const end = body.lastIndexOf(END_OF_TEXT);
+  return end === -1 ? null : body.subarray(0, end);
+}
+async function keyFor(secret, info) {
+  refuseAWeakSecret(secret);
   const material = await crypto.subtle.importKey(
     "raw",
     new TextEncoder().encode(secret),
@@ -353,7 +471,12 @@ async function keyFor(secret) {
     ["deriveKey"]
   );
   return crypto.subtle.deriveKey(
-    { name: "HKDF", hash: "SHA-256", salt: new Uint8Array(0), info: INFO },
+    {
+      name: "HKDF",
+      hash: "SHA-256",
+      salt: new Uint8Array(0),
+      info: new TextEncoder().encode(info)
+    },
     material,
     { name: "AES-GCM", length: 256 },
     false,
@@ -762,6 +885,15 @@ async function amountNow(amount) {
 
 // ../core/ed25519.ts
 var PKCS8_HEADER = hexToBytes("302e020100300506032b657004220420");
+var SMALL_ORDER = [
+  "00".repeat(32),
+  `01${"00".repeat(31)}`,
+  "26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc05",
+  "c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac037a",
+  `ec${"ff".repeat(30)}7f`,
+  `ed${"ff".repeat(30)}7f`,
+  `ee${"ff".repeat(30)}7f`
+];
 
 // src/webhook.ts
 var VERIFY_CHALLENGE = "verify-challenge";
@@ -769,7 +901,7 @@ async function answerVerifyChallenge(request) {
   if (request.method !== "POST") {
     return null;
   }
-  const nonce = nonceOf(await request.clone().text(), VERIFY_CHALLENGE);
+  const nonce = nonceOf2(await request.clone().text(), VERIFY_CHALLENGE);
   return nonce === null ? null : answered(nonce);
 }
 function answered(nonce) {
@@ -777,7 +909,7 @@ function answered(nonce) {
     headers: { "content-type": "application/json" }
   });
 }
-function nonceOf(text, type) {
+function nonceOf2(text, type) {
   try {
     const said = JSON.parse(text);
     if (said["type"] !== type || typeof said["nonce"] !== "string") {
@@ -923,7 +1055,7 @@ function nwcVerifyEndpoint(config) {
     if (sealed === null) {
       return Response.json({ settled: false }, { status: 400 });
     }
-    const paymentHash = await unseal(config.secret, sealed);
+    const paymentHash = await unsealFor("nwc-verify", config.secret, sealed);
     if (paymentHash === null) {
       return Response.json({ settled: false }, { status: 403 });
     }
@@ -938,7 +1070,7 @@ function nwcVerifyEndpoint(config) {
 }
 async function nwcVerifyUrl(endpoint, paymentHash, secret) {
   const sealed = new URL(endpoint);
-  sealed.searchParams.set(HASH, await seal(secret, paymentHash));
+  sealed.searchParams.set(HASH, await sealFor("nwc-verify", secret, paymentHash));
   return sealed.toString();
 }
 async function askWallet(connection, method, params, timeoutMs = DEFAULT_ASK_TIMEOUT_MS) {
@@ -1092,11 +1224,16 @@ function nwcRail(gateway, config) {
       expiresAt: invoice.expiresAt,
       trigger: config.trigger,
       replay: config.replay,
-      sealed: await config.sealed?.(order),
+      sealed: config.sealed ? await seal(
+        config.sealed.secret,
+        JSON.stringify(config.sealed.data(order)),
+        invoice.paymentHash
+      ) : void 0,
       webhookUrl: config.webhookUrl
     });
     return {
       id: watched.id,
+      paymentHash: invoice.paymentHash,
       rail: config.name ?? "lightning",
       scan: invoice.bolt11,
       qr: toLightningUri(invoice.bolt11),
@@ -1104,14 +1241,18 @@ function nwcRail(gateway, config) {
     };
   };
 }
+
+// src/entry/nwc.ts
+var nwcRail2 = nwcRail;
+var nwcVerifyEndpoint2 = nwcVerifyEndpoint;
 export {
   askWallet,
   nwcConnection,
   nwcHoldInvoice,
   nwcInvoice,
   nwcPay,
-  nwcRail,
+  nwcRail2 as nwcRail,
   nwcSettlement,
-  nwcVerifyEndpoint,
+  nwcVerifyEndpoint2 as nwcVerifyEndpoint,
   nwcVerifyUrl
 };

package/dist/price.d.cts

@@ -1,5 +1,5 @@
-export { A as AmountError, a as AmountFault } from './errors-Dmh-Uoh8.cjs';
-export { M as MedianOptions, T as Ticker, b as bitstamp, c as coinbase, a as coinmate, k as kraken, m as medianOf, d as msatFor } from './types-BNPmVnA7.cjs';
+export { A as AmountError, a as AmountFault } from './errors-DJmsalYZ.cjs';
+export { M as MedianOptions, T as Ticker, b as bitstamp, c as coinbase, a as coinmate, k as kraken, m as medianOf, d as msatFor } from './types-DYZ9EkmJ.cjs';
 
 /**
  * How many digits ISO 4217 gives the currency's minor unit, so 2 for a crown and a

package/dist/price.d.ts

@@ -1,5 +1,5 @@
-export { A as AmountError, a as AmountFault } from './errors-0vbVoISA.js';
-export { M as MedianOptions, T as Ticker, b as bitstamp, c as coinbase, a as coinmate, k as kraken, m as medianOf, d as msatFor } from './types-BNPmVnA7.js';
+export { A as AmountError, a as AmountFault } from './errors-VX0R18oE.js';
+export { M as MedianOptions, T as Ticker, b as bitstamp, c as coinbase, a as coinmate, k as kraken, m as medianOf, d as msatFor } from './types-DYZ9EkmJ.js';
 
 /**
  * How many digits ISO 4217 gives the currency's minor unit, so 2 for a crown and a

package/dist/qr.cjs

@@ -111,6 +111,8 @@ var INITIAL_STATE = new Uint32Array([
 ]);
 
 // ../core/bolt11.ts
+var BECH32_CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
+var BECH32_GENERATOR = [996825010, 642813549, 513874426, 1027748829, 705979059];
 var MSAT_PER_BTC = 1e11;
 var HRP_MULTIPLIER_MSAT = {
   m: MSAT_PER_BTC / 1e3,
@@ -118,10 +120,25 @@ var HRP_MULTIPLIER_MSAT = {
   n: MSAT_PER_BTC / 1e9,
   p: MSAT_PER_BTC / 1e12
 };
+function expandedHrp(hrp) {
+  const codes = [...hrp].map((char) => char.charCodeAt(0));
+  return [...codes.map((code) => code >> 5), 0, ...codes.map((code) => code & 31)];
+}
+function bech32Polymod(values) {
+  let checksum = 1;
+  for (const value of values) {
+    const top = checksum >> 25;
+    checksum = (checksum & 33554431) << 5 ^ value;
+    for (let bit = 0; bit < 5; bit++) {
+      if (top >> bit & 1) {
+        checksum ^= BECH32_GENERATOR[bit];
+      }
+    }
+  }
+  return checksum;
+}
 
 // ../core/lnurl.ts
-var BECH32_CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
-var BECH32_GENERATOR = [996825010, 642813549, 513874426, 1027748829, 705979059];
 var CHECKSUM_SLOTS = [0, 1, 2, 3, 4, 5];
 var LNURL_HRP = "lnurl";
 function toLnurl(endpoint) {
@@ -158,30 +175,10 @@ function toWords(bytes) {
   return words;
 }
 function checksumWords(hrp, words) {
-  const expanded = [...hrp].map((char) => char.charCodeAt(0));
-  const values = [
-    ...expanded.map((code) => code >> 5),
-    0,
-    ...expanded.map((code) => code & 31),
-    ...words,
-    ...CHECKSUM_SLOTS.map(() => 0)
-  ];
+  const values = [...expandedHrp(hrp), ...words, ...CHECKSUM_SLOTS.map(() => 0)];
   const polymod = bech32Polymod(values) ^ 1;
   return CHECKSUM_SLOTS.map((slot) => polymod >> 5 * (5 - slot) & 31);
 }
-function bech32Polymod(values) {
-  let checksum = 1;
-  for (const value of values) {
-    const top = checksum >> 25;
-    checksum = (checksum & 33554431) << 5 ^ value;
-    for (let bit = 0; bit < 5; bit++) {
-      if (top >> bit & 1) {
-        checksum ^= BECH32_GENERATOR[bit];
-      }
-    }
-  }
-  return checksum;
-}
 
 // src/qr.ts
 var import_uqr = require("uqr");

package/dist/qr.js

@@ -77,6 +77,8 @@ var INITIAL_STATE = new Uint32Array([
 ]);
 
 // ../core/bolt11.ts
+var BECH32_CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
+var BECH32_GENERATOR = [996825010, 642813549, 513874426, 1027748829, 705979059];
 var MSAT_PER_BTC = 1e11;
 var HRP_MULTIPLIER_MSAT = {
   m: MSAT_PER_BTC / 1e3,
@@ -84,10 +86,25 @@ var HRP_MULTIPLIER_MSAT = {
   n: MSAT_PER_BTC / 1e9,
   p: MSAT_PER_BTC / 1e12
 };
+function expandedHrp(hrp) {
+  const codes = [...hrp].map((char) => char.charCodeAt(0));
+  return [...codes.map((code) => code >> 5), 0, ...codes.map((code) => code & 31)];
+}
+function bech32Polymod(values) {
+  let checksum = 1;
+  for (const value of values) {
+    const top = checksum >> 25;
+    checksum = (checksum & 33554431) << 5 ^ value;
+    for (let bit = 0; bit < 5; bit++) {
+      if (top >> bit & 1) {
+        checksum ^= BECH32_GENERATOR[bit];
+      }
+    }
+  }
+  return checksum;
+}
 
 // ../core/lnurl.ts
-var BECH32_CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
-var BECH32_GENERATOR = [996825010, 642813549, 513874426, 1027748829, 705979059];
 var CHECKSUM_SLOTS = [0, 1, 2, 3, 4, 5];
 var LNURL_HRP = "lnurl";
 function toLnurl(endpoint) {
@@ -124,30 +141,10 @@ function toWords(bytes) {
   return words;
 }
 function checksumWords(hrp, words) {
-  const expanded = [...hrp].map((char) => char.charCodeAt(0));
-  const values = [
-    ...expanded.map((code) => code >> 5),
-    0,
-    ...expanded.map((code) => code & 31),
-    ...words,
-    ...CHECKSUM_SLOTS.map(() => 0)
-  ];
+  const values = [...expandedHrp(hrp), ...words, ...CHECKSUM_SLOTS.map(() => 0)];
   const polymod = bech32Polymod(values) ^ 1;
   return CHECKSUM_SLOTS.map((slot) => polymod >> 5 * (5 - slot) & 31);
 }
-function bech32Polymod(values) {
-  let checksum = 1;
-  for (const value of values) {
-    const top = checksum >> 25;
-    checksum = (checksum & 33554431) << 5 ^ value;
-    for (let bit = 0; bit < 5; bit++) {
-      if (top >> bit & 1) {
-        checksum ^= BECH32_GENERATOR[bit];
-      }
-    }
-  }
-  return checksum;
-}
 
 // src/qr.ts
 import { encode } from "uqr";

package/dist/{types-BNPmVnA7.d.cts → types-DYZ9EkmJ.d.cts}

@@ -166,6 +166,15 @@ interface WatchedPayment extends Reported {
  * needs an assertion to read
  */
 type Payment = MintedPayment | WatchedPayment;
+/**
+ * A payment as the caller already knows it: what the gateway calls it and the
+ * hash it settles against. Every `Payment` is one, and a caller reading back
+ * after a restart builds one from the two fields it stored
+ */
+interface Held {
+    id: string;
+    paymentHash: string;
+}
 /**
  * Who is paid and how much. `to` is a priority list when it is an array: the
  * gateway takes the first address that can issue a provable invoice for the
@@ -203,7 +212,7 @@ interface Handover {
      * Needs `trigger`, defaults to none
      */
     replay?: number;
-    /** Sealed with `seal`, so the gateway stores what it cannot read */
+    /** Sealed with `seal` for this payment hash, so the gateway stores what it cannot read or move */
     sealed?: string;
     webhookUrl?: string;
 }
@@ -249,4 +258,4 @@ interface Settlement {
     settledAt: number;
 }
 
-export { type Amount as A, type Charge as C, type FiatOptions as F, type Handover as H, type MedianOptions as M, type Payment as P, type Quote as Q, type Settlement as S, type Ticker as T, type WalletFailure as W, coinmate as a, bitstamp as b, coinbase as c, msatFor as d, type MintedPayment as e, type Msat as f, type PaymentStatus as g, type Priced as h, type SocketTicket as i, type WalletReason as j, kraken as k, type WatchedPayment as l, medianOf as m, fiat as n, msat as o, sats as s };
+export { type Amount as A, type Charge as C, type FiatOptions as F, type Handover as H, type MedianOptions as M, type Payment as P, type Quote as Q, type Settlement as S, type Ticker as T, type WalletFailure as W, coinmate as a, bitstamp as b, coinbase as c, msatFor as d, type Held as e, type MintedPayment as f, type Msat as g, type PaymentStatus as h, type Priced as i, type SocketTicket as j, kraken as k, type WalletReason as l, medianOf as m, type WatchedPayment as n, fiat as o, msat as p, sats as s };

package/dist/{types-BNPmVnA7.d.ts → types-DYZ9EkmJ.d.ts}

@@ -166,6 +166,15 @@ interface WatchedPayment extends Reported {
  * needs an assertion to read
  */
 type Payment = MintedPayment | WatchedPayment;
+/**
+ * A payment as the caller already knows it: what the gateway calls it and the
+ * hash it settles against. Every `Payment` is one, and a caller reading back
+ * after a restart builds one from the two fields it stored
+ */
+interface Held {
+    id: string;
+    paymentHash: string;
+}
 /**
  * Who is paid and how much. `to` is a priority list when it is an array: the
  * gateway takes the first address that can issue a provable invoice for the
@@ -203,7 +212,7 @@ interface Handover {
      * Needs `trigger`, defaults to none
      */
     replay?: number;
-    /** Sealed with `seal`, so the gateway stores what it cannot read */
+    /** Sealed with `seal` for this payment hash, so the gateway stores what it cannot read or move */
     sealed?: string;
     webhookUrl?: string;
 }
@@ -249,4 +258,4 @@ interface Settlement {
     settledAt: number;
 }
 
-export { type Amount as A, type Charge as C, type FiatOptions as F, type Handover as H, type MedianOptions as M, type Payment as P, type Quote as Q, type Settlement as S, type Ticker as T, type WalletFailure as W, coinmate as a, bitstamp as b, coinbase as c, msatFor as d, type MintedPayment as e, type Msat as f, type PaymentStatus as g, type Priced as h, type SocketTicket as i, type WalletReason as j, kraken as k, type WatchedPayment as l, medianOf as m, fiat as n, msat as o, sats as s };
+export { type Amount as A, type Charge as C, type FiatOptions as F, type Handover as H, type MedianOptions as M, type Payment as P, type Quote as Q, type Settlement as S, type Ticker as T, type WalletFailure as W, coinmate as a, bitstamp as b, coinbase as c, msatFor as d, type Held as e, type MintedPayment as f, type Msat as g, type PaymentStatus as h, type Priced as i, type SocketTicket as j, kraken as k, type WalletReason as l, medianOf as m, type WatchedPayment as n, fiat as o, msat as p, sats as s };