Unilateral exit: put vtxos on-chain without the server

The trustless backstop behind the Ark card's promise. The vtxo's
genesis chain reconstructs to fully-signed txs (keyspend sigs for
cosigned/arkoor transitions, preimage script-path for hark leaves);
they are zero-fee v3 with P2A anchors, so each hop broadcasts as a
[parent, CPFP child] package via esplora POST /txs/package, one
confirmed hop at a time (TRUC allows a single unconfirmed parent).
After the vtxo tx confirms and the CSV exit delta passes, the claim
spends the delayed_sign leaf with only the user key into the wallet's
own receive address.

Settings gains 'Exit on-chain without the server' with live per-exit
status lines; the claim tx is labeled 'Ark exit' in History. Probing
uses /tx/:txid (definitive 404), never /tx/:txid/status, which answers
confirmed:false for unknown txids.

Also: a fresh visitor opening an ark gift link now adopts the gift's
network automatically instead of being sent to Settings.

Co-Authored-By: Claude Fable 5 <[email protected]>

1 files changed, 3 insertions, 0 deletions

diff --git a/src/features/gifts.js b/src/features/gifts.js
index e4a445f..7cc9e9c 100644
--- a/src/features/gifts.js
+++ b/src/features/gifts.js
@@ -70,6 +70,9 @@ export function giftsFeature(ctx) {
     ui.claimLocked = null;
     ui.claimArkAmount = null;
     const targets = claimTargets();
+    // No wallets on this device: adopt the gift's network so a first-timer
+    // never has to visit Settings before claiming.
+    if (!targets.length) hook('arkGiftAdoptNetwork', code);
     if (targets.length) { setAccounts(targets); ui.claimChoose = { code }; render(); }
     else enterWallet(newMnemonic(), '', { gift: code });
   }