@arkade-os/boltz-swap 0.3.44 → 0.3.46

package/dist/{arkade-swaps-DwgfLCMY.d.cts → arkade-swaps-D-L0_0Ri.d.cts}

@@ -1,5 +1,5 @@
 import { IWallet, ArkProvider, IndexerProvider, ArkInfo, Identity, ArkTxInput, VHTLC } from '@arkade-os/sdk';
-import { r as BoltzSwapProvider, y as SwapManager, m as SwapRepository, q as ArkadeSwapsCreateConfig, A as ArkadeSwapsConfig, n as SwapManagerClient, C as CreateLightningInvoiceRequest, e as CreateLightningInvoiceResponse, b as BoltzReverseSwap, S as SendLightningPaymentRequest, o as SendLightningPaymentResponse, O as OptimisticSendLightningPaymentResponse, c as BoltzSubmarineSwap, f as SubmarineRefundOutcome, g as SubmarineRecoveryInfo, h as SubmarineRecoveryResult, j as ArkToBtcResponse, a as BoltzChainSwap, l as ChainArkRefundOutcome, k as BtcToArkResponse, d as Chain, F as FeesResponse, i as ChainFeesResponse, L as LimitsResponse, G as GetSwapStatusResponse, B as BoltzSwap } from './types-8NrCdOpS.cjs';
+import { r as BoltzSwapProvider, y as SwapManager, m as SwapRepository, q as ArkadeSwapsCreateConfig, A as ArkadeSwapsConfig, n as SwapManagerClient, C as CreateLightningInvoiceRequest, e as CreateLightningInvoiceResponse, b as BoltzReverseSwap, S as SendLightningPaymentRequest, o as SendLightningPaymentResponse, O as OptimisticSendLightningPaymentResponse, c as BoltzSubmarineSwap, f as SubmarineRefundOutcome, g as SubmarineRecoveryInfo, h as SubmarineRecoveryResult, j as ArkToBtcResponse, a as BoltzChainSwap, l as ChainArkRefundOutcome, k as BtcToArkResponse, d as Chain, F as FeesResponse, i as ChainFeesResponse, L as LimitsResponse, G as GetSwapStatusResponse, B as BoltzSwap } from './types-CS62-oEy.cjs';
 import { TransactionOutput } from '@scure/btc-signer/psbt.js';
 
 /**
@@ -415,6 +415,13 @@ declare class ArkadeSwaps {
         swap: BoltzChainSwap;
         arkInfo: ArkInfo;
     }): Promise<boolean>;
+    /**
+     * Verifies the BTC-side Taproot HTLC of a chain swap before funds are
+     * committed: the lockup address must bind to MuSig2(boltz, user) over
+     * Boltz's leaves, and those leaves must enforce the agreed preimage hash,
+     * direction-specific keys, leaf version, and absolute refund CLTV.
+     */
+    private verifyBtcChainHtlc;
     /**
      * Renegotiates the quote for an existing chain swap. Convenience wrapper
      * over `getSwapQuote` + `acceptSwapQuote` with a safety floor.

package/dist/{arkade-swaps-2q3VSgb4.d.ts → arkade-swaps-fmdCFjif.d.ts}

@@ -1,5 +1,5 @@
 import { IWallet, ArkProvider, IndexerProvider, ArkInfo, Identity, ArkTxInput, VHTLC } from '@arkade-os/sdk';
-import { r as BoltzSwapProvider, y as SwapManager, m as SwapRepository, q as ArkadeSwapsCreateConfig, A as ArkadeSwapsConfig, n as SwapManagerClient, C as CreateLightningInvoiceRequest, e as CreateLightningInvoiceResponse, b as BoltzReverseSwap, S as SendLightningPaymentRequest, o as SendLightningPaymentResponse, O as OptimisticSendLightningPaymentResponse, c as BoltzSubmarineSwap, f as SubmarineRefundOutcome, g as SubmarineRecoveryInfo, h as SubmarineRecoveryResult, j as ArkToBtcResponse, a as BoltzChainSwap, l as ChainArkRefundOutcome, k as BtcToArkResponse, d as Chain, F as FeesResponse, i as ChainFeesResponse, L as LimitsResponse, G as GetSwapStatusResponse, B as BoltzSwap } from './types-8NrCdOpS.js';
+import { r as BoltzSwapProvider, y as SwapManager, m as SwapRepository, q as ArkadeSwapsCreateConfig, A as ArkadeSwapsConfig, n as SwapManagerClient, C as CreateLightningInvoiceRequest, e as CreateLightningInvoiceResponse, b as BoltzReverseSwap, S as SendLightningPaymentRequest, o as SendLightningPaymentResponse, O as OptimisticSendLightningPaymentResponse, c as BoltzSubmarineSwap, f as SubmarineRefundOutcome, g as SubmarineRecoveryInfo, h as SubmarineRecoveryResult, j as ArkToBtcResponse, a as BoltzChainSwap, l as ChainArkRefundOutcome, k as BtcToArkResponse, d as Chain, F as FeesResponse, i as ChainFeesResponse, L as LimitsResponse, G as GetSwapStatusResponse, B as BoltzSwap } from './types-CS62-oEy.js';
 import { TransactionOutput } from '@scure/btc-signer/psbt.js';
 
 /**
@@ -415,6 +415,13 @@ declare class ArkadeSwaps {
         swap: BoltzChainSwap;
         arkInfo: ArkInfo;
     }): Promise<boolean>;
+    /**
+     * Verifies the BTC-side Taproot HTLC of a chain swap before funds are
+     * committed: the lockup address must bind to MuSig2(boltz, user) over
+     * Boltz's leaves, and those leaves must enforce the agreed preimage hash,
+     * direction-specific keys, leaf version, and absolute refund CLTV.
+     */
+    private verifyBtcChainHtlc;
     /**
      * Renegotiates the quote for an existing chain swap. Convenience wrapper
      * over `getSwapQuote` + `acceptSwapQuote` with a safety floor.

package/dist/{chunk-QVXFEX5F.js → chunk-GXO2EB6C.js}

@@ -571,20 +571,26 @@ var BoltzSwapProvider = class {
     invoiceAmount,
     claimPublicKey,
     preimageHash,
-    description
+    description,
+    descriptionHash
   }) {
     if (claimPublicKey.length != 66) {
       throw new SwapError({
         message: "claimPublicKey must be a compressed public key"
       });
     }
+    if (descriptionHash !== void 0 && !/^[0-9a-fA-F]{64}$/.test(descriptionHash)) {
+      throw new SwapError({
+        message: "descriptionHash must be a 32-byte SHA256 (64 hex chars)"
+      });
+    }
     const requestBody = {
       from: "BTC",
       to: "ARK",
       invoiceAmount,
       claimPublicKey,
       preimageHash,
-      description: description?.trim() || "Send to Arkade address",
+      ...descriptionHash ? { descriptionHash } : { description: description?.trim() || "Send to Arkade address" },
       ...this.referralId ? { referralId: this.referralId } : {}
     };
     const response = await this.request(
@@ -997,6 +1003,12 @@ var decodeInvoice = (invoice) => {
     expiry: decoded.expiry ?? 3600,
     amountSats: Number(millisats / 1000n),
     description: decoded.sections.find((s) => s.name === "description")?.value ?? "",
+    // description_hash (BOLT11 `h`) is missing from light-bolt11-decoder's
+    // Section union even though the decoder emits it. Widen just this lookup
+    // rather than patch the library's types (separate repo, out of scope).
+    descriptionHash: decoded.sections.find(
+      (s) => s.name === "description_hash"
+    )?.value ?? "",
     paymentHash: decoded.sections.find((s) => s.name === "payment_hash")?.value ?? ""
   };
 };
@@ -2364,14 +2376,16 @@ var IndexedDbSwapRepository = class {
 // src/arkade-swaps.ts
 import {
   ArkAddress as ArkAddress2,
-  isRecoverable
+  isRecoverable,
+  getNetwork as getNetwork2
 } from "@arkade-os/sdk";
 import { sha256 as sha2563 } from "@noble/hashes/sha2.js";
+import { ripemd160 as ripemd1602 } from "@noble/hashes/legacy.js";
 import { hex as hex8 } from "@scure/base";
 import { secp256k1 as secp256k12 } from "@noble/curves/secp256k1.js";
 import { randomBytes } from "@noble/hashes/utils.js";
 import { Address as Address2, OutScript as OutScript2, SigHash as SigHash2, Transaction as Transaction6 } from "@scure/btc-signer";
-import { NETWORK } from "@scure/btc-signer/utils.js";
+import { equalBytes as equalBytes3 } from "@scure/btc-signer/utils.js";
 
 // src/utils/musig.ts
 import { secp256k1 } from "@noble/curves/secp256k1.js";
@@ -2593,21 +2607,9 @@ var create = (privateKey, publicKeys) => {
 // src/utils/boltz-swap-tx.ts
 import { schnorr } from "@noble/curves/secp256k1.js";
 import { hex as hex4 } from "@scure/base";
-import { Script, Transaction as Transaction2 } from "@scure/btc-signer";
+import { Script, ScriptNum, Transaction as Transaction2 } from "@scure/btc-signer";
 import { tapLeafHash } from "@scure/btc-signer/payment.js";
 import { compareBytes, equalBytes as equalBytes2 } from "@scure/btc-signer/utils.js";
-var REGTEST_NETWORK = {
-  bech32: "bcrt",
-  pubKeyHash: 111,
-  scriptHash: 196,
-  wif: 239
-};
-var MUTINYNET_NETWORK = {
-  bech32: "tb",
-  pubKeyHash: 111,
-  scriptHash: 196,
-  wif: 239
-};
 var deserializeLeaf = (leaf) => ({
   version: leaf.version,
   output: hex4.decode(leaf.output)
@@ -2641,6 +2643,19 @@ var deserializeSwapTree = (tree) => {
     ])
   };
 };
+var TAPLEAF_V1 = 192;
+var PUSH_32 = Uint8Array.of(32);
+var decodeScriptNum = (data) => data instanceof Uint8Array && data.length > 0 ? Number(ScriptNum(5, true).decode(data)) : void 0;
+var assertChainHtlcLeaves = (tree, expected) => {
+  if (tree.claimLeaf.version !== TAPLEAF_V1 || tree.refundLeaf.version !== TAPLEAF_V1)
+    throw new Error("unexpected leaf version");
+  const claim = Script.decode(tree.claimLeaf.output);
+  if (claim.length !== 8 || claim[0] !== "SIZE" || !(claim[1] instanceof Uint8Array) || !equalBytes2(claim[1], PUSH_32) || claim[2] !== "EQUALVERIFY" || claim[3] !== "HASH160" || !(claim[4] instanceof Uint8Array) || !equalBytes2(claim[4], expected.preimageHash160) || claim[5] !== "EQUALVERIFY" || !(claim[6] instanceof Uint8Array) || !equalBytes2(claim[6], expected.claimXOnly) || claim[7] !== "CHECKSIG")
+    throw new Error("unexpected claim leaf");
+  const refund = Script.decode(tree.refundLeaf.output);
+  if (refund.length !== 4 || !(refund[0] instanceof Uint8Array) || !equalBytes2(refund[0], expected.refundXOnly) || refund[1] !== "CHECKSIGVERIFY" || decodeScriptNum(refund[2]) !== expected.timeoutBlockHeight || refund[3] !== "CHECKLOCKTIMEVERIFY")
+    throw new Error("unexpected refund leaf");
+};
 var taprootHashTree = (tree) => {
   if (!Array.isArray(tree)) {
     return {
@@ -2792,6 +2807,7 @@ import {
   buildOffchainTx,
   getSequence as getSequence2,
   Intent,
+  getNetwork,
   networks,
   VHTLC,
   VtxoScript as VtxoScript2,
@@ -2978,7 +2994,7 @@ var createVHTLCScript = (args) => {
     )
   });
   if (!vhtlcScript.claimScript) throw new Error("Failed to create VHTLC script");
-  const hrp = network === "bitcoin" ? "ark" : "tark";
+  const hrp = getNetwork(network).hrp;
   const vhtlcAddress = vhtlcScript.address(hrp, serverXOnlyPublicKey).encode();
   return { vhtlcScript, vhtlcAddress };
 };
@@ -3440,7 +3456,7 @@ var ArkadeSwaps = class _ArkadeSwaps {
       invoiceAmount: args.amount,
       claimPublicKey,
       preimageHash,
-      ...args.description?.trim() ? { description: args.description.trim() } : {}
+      ...args.descriptionHash !== void 0 ? { descriptionHash: args.descriptionHash } : args.description?.trim() ? { description: args.description.trim() } : {}
     };
     const swapResponse = await this.swapProvider.createReverseSwap(swapRequest);
     const decodedInvoice = decodeInvoice(swapResponse.invoice);
@@ -4395,7 +4411,7 @@ var ArkadeSwaps = class _ArkadeSwaps {
       throw new Error(`Swap ${pendingSwap.id}: BTC transaction hex is required`);
     const lockupTx = Transaction6.fromRaw(hex8.decode(swapStatus.transaction.hex));
     const arkInfo = await this.arkProvider.getInfo();
-    const network = arkInfo.network === "bitcoin" ? NETWORK : arkInfo.network === "mutinynet" ? MUTINYNET_NETWORK : REGTEST_NETWORK;
+    const network = getNetwork2(arkInfo.network);
     const swapTree = deserializeSwapTree(pendingSwap.response.claimDetails.swapTree);
     const musig = tweakMusig(
       create(hex8.decode(pendingSwap.ephemeralKey), [
@@ -4935,8 +4951,56 @@ var ArkadeSwaps = class _ArkadeSwaps {
         message: "Boltz is trying to scam us (invalid address)"
       });
     }
+    this.verifyBtcChainHtlc({ to, swap, arkNetwork: arkInfo.network });
     return true;
   }
+  /**
+   * Verifies the BTC-side Taproot HTLC of a chain swap before funds are
+   * committed: the lockup address must bind to MuSig2(boltz, user) over
+   * Boltz's leaves, and those leaves must enforce the agreed preimage hash,
+   * direction-specific keys, leaf version, and absolute refund CLTV.
+   */
+  verifyBtcChainHtlc(args) {
+    const { to, swap, arkNetwork } = args;
+    const btcDetails = to === "ARK" ? swap.response.lockupDetails : swap.response.claimDetails;
+    if (!btcDetails.swapTree)
+      throw new SwapError({ message: `Swap ${swap.id}: missing swap tree in BTC details` });
+    if (!btcDetails.serverPublicKey)
+      throw new SwapError({
+        message: `Swap ${swap.id}: missing server public key in BTC details`
+      });
+    if (typeof btcDetails.timeoutBlockHeight !== "number")
+      throw new SwapError({
+        message: `Swap ${swap.id}: missing timeout block height in BTC details`
+      });
+    const network = getNetwork2(arkNetwork);
+    const swapTree = deserializeSwapTree(btcDetails.swapTree);
+    const ephemeralPub = secp256k12.getPublicKey(hex8.decode(swap.ephemeralKey));
+    const musig = tweakMusig(
+      create(hex8.decode(swap.ephemeralKey), [
+        hex8.decode(btcDetails.serverPublicKey),
+        ephemeralPub
+      ]),
+      swapTree.tree
+    );
+    const expectedScript = OutScript2.encode(Address2(network).decode(btcDetails.lockupAddress));
+    if (!equalBytes3(p2trScript(musig.aggPubkey), expectedScript))
+      throw new SwapError({ message: "Boltz is trying to scam us (invalid BTC address)" });
+    const boltzXOnly = toXOnly(hex8.decode(btcDetails.serverPublicKey));
+    const userXOnly = toXOnly(ephemeralPub);
+    try {
+      assertChainHtlcLeaves(swapTree, {
+        preimageHash160: ripemd1602(hex8.decode(swap.request.preimageHash)),
+        claimXOnly: to === "ARK" ? boltzXOnly : userXOnly,
+        refundXOnly: to === "ARK" ? userXOnly : boltzXOnly,
+        timeoutBlockHeight: btcDetails.timeoutBlockHeight
+      });
+    } catch (err) {
+      throw new SwapError({
+        message: `Boltz is trying to scam us (invalid BTC HTLC: ${err.message})`
+      });
+    }
+  }
   /**
    * Renegotiates the quote for an existing chain swap. Convenience wrapper
    * over `getSwapQuote` + `acceptSwapQuote` with a safety floor.

package/dist/{chunk-PHF6C2NE.js → chunk-UJXW5JBT.js}

@@ -7,7 +7,7 @@ import {
   isSubmarineFinalStatus,
   isSubmarineSwapRefundable,
   logger
-} from "./chunk-QVXFEX5F.js";
+} from "./chunk-GXO2EB6C.js";
 
 // src/expo/swapsPollProcessor.ts
 var SWAP_POLL_TASK_TYPE = "swap-poll";

package/dist/expo/background.cjs

@@ -544,20 +544,26 @@ var BoltzSwapProvider = class {
     invoiceAmount,
     claimPublicKey,
     preimageHash,
-    description
+    description,
+    descriptionHash
   }) {
     if (claimPublicKey.length != 66) {
       throw new SwapError({
         message: "claimPublicKey must be a compressed public key"
       });
     }
+    if (descriptionHash !== void 0 && !/^[0-9a-fA-F]{64}$/.test(descriptionHash)) {
+      throw new SwapError({
+        message: "descriptionHash must be a 32-byte SHA256 (64 hex chars)"
+      });
+    }
     const requestBody = {
       from: "BTC",
       to: "ARK",
       invoiceAmount,
       claimPublicKey,
       preimageHash,
-      description: description?.trim() || "Send to Arkade address",
+      ...descriptionHash ? { descriptionHash } : { description: description?.trim() || "Send to Arkade address" },
       ...this.referralId ? { referralId: this.referralId } : {}
     };
     const response = await this.request(
@@ -963,6 +969,7 @@ var BoltzSwapProvider = class {
 // src/arkade-swaps.ts
 var import_sdk8 = require("@arkade-os/sdk");
 var import_sha23 = require("@noble/hashes/sha2.js");
+var import_legacy2 = require("@noble/hashes/legacy.js");
 var import_base9 = require("@scure/base");
 var import_secp256k13 = require("@noble/curves/secp256k1.js");
 var import_utils3 = require("@noble/hashes/utils.js");
@@ -1186,18 +1193,6 @@ var import_base3 = require("@scure/base");
 var import_btc_signer = require("@scure/btc-signer");
 var import_payment = require("@scure/btc-signer/payment.js");
 var import_utils2 = require("@scure/btc-signer/utils.js");
-var REGTEST_NETWORK = {
-  bech32: "bcrt",
-  pubKeyHash: 111,
-  scriptHash: 196,
-  wif: 239
-};
-var MUTINYNET_NETWORK = {
-  bech32: "tb",
-  pubKeyHash: 111,
-  scriptHash: 196,
-  wif: 239
-};
 var deserializeLeaf = (leaf) => ({
   version: leaf.version,
   output: import_base3.hex.decode(leaf.output)
@@ -1231,6 +1226,19 @@ var deserializeSwapTree = (tree) => {
     ])
   };
 };
+var TAPLEAF_V1 = 192;
+var PUSH_32 = Uint8Array.of(32);
+var decodeScriptNum = (data) => data instanceof Uint8Array && data.length > 0 ? Number((0, import_btc_signer.ScriptNum)(5, true).decode(data)) : void 0;
+var assertChainHtlcLeaves = (tree, expected) => {
+  if (tree.claimLeaf.version !== TAPLEAF_V1 || tree.refundLeaf.version !== TAPLEAF_V1)
+    throw new Error("unexpected leaf version");
+  const claim = import_btc_signer.Script.decode(tree.claimLeaf.output);
+  if (claim.length !== 8 || claim[0] !== "SIZE" || !(claim[1] instanceof Uint8Array) || !(0, import_utils2.equalBytes)(claim[1], PUSH_32) || claim[2] !== "EQUALVERIFY" || claim[3] !== "HASH160" || !(claim[4] instanceof Uint8Array) || !(0, import_utils2.equalBytes)(claim[4], expected.preimageHash160) || claim[5] !== "EQUALVERIFY" || !(claim[6] instanceof Uint8Array) || !(0, import_utils2.equalBytes)(claim[6], expected.claimXOnly) || claim[7] !== "CHECKSIG")
+    throw new Error("unexpected claim leaf");
+  const refund = import_btc_signer.Script.decode(tree.refundLeaf.output);
+  if (refund.length !== 4 || !(refund[0] instanceof Uint8Array) || !(0, import_utils2.equalBytes)(refund[0], expected.refundXOnly) || refund[1] !== "CHECKSIGVERIFY" || decodeScriptNum(refund[2]) !== expected.timeoutBlockHeight || refund[3] !== "CHECKLOCKTIMEVERIFY")
+    throw new Error("unexpected refund leaf");
+};
 var taprootHashTree = (tree) => {
   if (!Array.isArray(tree)) {
     return {
@@ -1312,6 +1320,12 @@ var decodeInvoice = (invoice) => {
     expiry: decoded.expiry ?? 3600,
     amountSats: Number(millisats / 1000n),
     description: decoded.sections.find((s) => s.name === "description")?.value ?? "",
+    // description_hash (BOLT11 `h`) is missing from light-bolt11-decoder's
+    // Section union even though the decoder emits it. Widen just this lookup
+    // rather than patch the library's types (separate repo, out of scope).
+    descriptionHash: decoded.sections.find(
+      (s) => s.name === "description_hash"
+    )?.value ?? "",
     paymentHash: decoded.sections.find((s) => s.name === "payment_hash")?.value ?? ""
   };
 };
@@ -2921,7 +2935,7 @@ var createVHTLCScript = (args) => {
     )
   });
   if (!vhtlcScript.claimScript) throw new Error("Failed to create VHTLC script");
-  const hrp = network === "bitcoin" ? "ark" : "tark";
+  const hrp = (0, import_sdk7.getNetwork)(network).hrp;
   const vhtlcAddress = vhtlcScript.address(hrp, serverXOnlyPublicKey).encode();
   return { vhtlcScript, vhtlcAddress };
 };
@@ -3383,7 +3397,7 @@ var ArkadeSwaps = class _ArkadeSwaps {
       invoiceAmount: args.amount,
       claimPublicKey,
       preimageHash,
-      ...args.description?.trim() ? { description: args.description.trim() } : {}
+      ...args.descriptionHash !== void 0 ? { descriptionHash: args.descriptionHash } : args.description?.trim() ? { description: args.description.trim() } : {}
     };
     const swapResponse = await this.swapProvider.createReverseSwap(swapRequest);
     const decodedInvoice = decodeInvoice(swapResponse.invoice);
@@ -4338,7 +4352,7 @@ var ArkadeSwaps = class _ArkadeSwaps {
       throw new Error(`Swap ${pendingSwap.id}: BTC transaction hex is required`);
     const lockupTx = import_btc_signer5.Transaction.fromRaw(import_base9.hex.decode(swapStatus.transaction.hex));
     const arkInfo = await this.arkProvider.getInfo();
-    const network = arkInfo.network === "bitcoin" ? import_utils4.NETWORK : arkInfo.network === "mutinynet" ? MUTINYNET_NETWORK : REGTEST_NETWORK;
+    const network = (0, import_sdk8.getNetwork)(arkInfo.network);
     const swapTree = deserializeSwapTree(pendingSwap.response.claimDetails.swapTree);
     const musig = tweakMusig(
       create(import_base9.hex.decode(pendingSwap.ephemeralKey), [
@@ -4878,8 +4892,56 @@ var ArkadeSwaps = class _ArkadeSwaps {
         message: "Boltz is trying to scam us (invalid address)"
       });
     }
+    this.verifyBtcChainHtlc({ to, swap, arkNetwork: arkInfo.network });
     return true;
   }
+  /**
+   * Verifies the BTC-side Taproot HTLC of a chain swap before funds are
+   * committed: the lockup address must bind to MuSig2(boltz, user) over
+   * Boltz's leaves, and those leaves must enforce the agreed preimage hash,
+   * direction-specific keys, leaf version, and absolute refund CLTV.
+   */
+  verifyBtcChainHtlc(args) {
+    const { to, swap, arkNetwork } = args;
+    const btcDetails = to === "ARK" ? swap.response.lockupDetails : swap.response.claimDetails;
+    if (!btcDetails.swapTree)
+      throw new SwapError({ message: `Swap ${swap.id}: missing swap tree in BTC details` });
+    if (!btcDetails.serverPublicKey)
+      throw new SwapError({
+        message: `Swap ${swap.id}: missing server public key in BTC details`
+      });
+    if (typeof btcDetails.timeoutBlockHeight !== "number")
+      throw new SwapError({
+        message: `Swap ${swap.id}: missing timeout block height in BTC details`
+      });
+    const network = (0, import_sdk8.getNetwork)(arkNetwork);
+    const swapTree = deserializeSwapTree(btcDetails.swapTree);
+    const ephemeralPub = import_secp256k13.secp256k1.getPublicKey(import_base9.hex.decode(swap.ephemeralKey));
+    const musig = tweakMusig(
+      create(import_base9.hex.decode(swap.ephemeralKey), [
+        import_base9.hex.decode(btcDetails.serverPublicKey),
+        ephemeralPub
+      ]),
+      swapTree.tree
+    );
+    const expectedScript = import_btc_signer5.OutScript.encode((0, import_btc_signer5.Address)(network).decode(btcDetails.lockupAddress));
+    if (!(0, import_utils4.equalBytes)(p2trScript(musig.aggPubkey), expectedScript))
+      throw new SwapError({ message: "Boltz is trying to scam us (invalid BTC address)" });
+    const boltzXOnly = toXOnly(import_base9.hex.decode(btcDetails.serverPublicKey));
+    const userXOnly = toXOnly(ephemeralPub);
+    try {
+      assertChainHtlcLeaves(swapTree, {
+        preimageHash160: (0, import_legacy2.ripemd160)(import_base9.hex.decode(swap.request.preimageHash)),
+        claimXOnly: to === "ARK" ? boltzXOnly : userXOnly,
+        refundXOnly: to === "ARK" ? userXOnly : boltzXOnly,
+        timeoutBlockHeight: btcDetails.timeoutBlockHeight
+      });
+    } catch (err) {
+      throw new SwapError({
+        message: `Boltz is trying to scam us (invalid BTC HTLC: ${err.message})`
+      });
+    }
+  }
   /**
    * Renegotiates the quote for an existing chain swap. Convenience wrapper
    * over `getSwapQuote` + `acceptSwapQuote` with a safety floor.
@@ -5537,14 +5599,19 @@ function createBackgroundWalletShim(args) {
     getVtxos: async () => notImplemented("getVtxos"),
     getBoardingUtxos: async () => notImplemented("getBoardingUtxos"),
     getTransactionHistory: async () => notImplemented("getTransactionHistory"),
+    getActivityHistory: async () => notImplemented("getActivityHistory"),
     getContractManager: async () => notImplemented("getContractManager"),
     getDelegateManager: async () => notImplemented("getDelegateManager"),
     getDelegatorManager: async () => notImplemented("getDelegatorManager"),
     sendBitcoin: async () => notImplemented("sendBitcoin"),
     send: async () => notImplemented("send"),
     settle: async () => notImplemented("settle"),
+    clear: async () => notImplemented("clear"),
     assetManager: new Proxy({}, {
       get: () => notImplemented("assetManager")
+    }),
+    activity: new Proxy({}, {
+      get: () => notImplemented("activity")
     })
   };
 }
@@ -5566,13 +5633,13 @@ function defineExpoSwapBackgroundTask(taskName, options) {
       const wallet = createBackgroundWalletShim({
         identity,
         getAddress: async () => {
-          const { ArkAddress: ArkAddress3 } = await import("@arkade-os/sdk");
+          const { ArkAddress: ArkAddress3, getNetwork: getNetwork3 } = await import("@arkade-os/sdk");
           const { hex: hex9 } = await import("@scure/base");
           const info = await arkProvider.getInfo();
           const pubkey = await identity.xOnlyPublicKey();
           const serverPubKey = hex9.decode(info.signerPubkey);
           const xOnlyServerPubKey = serverPubKey.length === 33 ? serverPubKey.slice(1) : serverPubKey;
-          const hrp = info.network === "bitcoin" ? "ark" : "tark";
+          const hrp = getNetwork3(info.network).hrp;
           return new ArkAddress3(xOnlyServerPubKey, pubkey, hrp).encode();
         }
       });

package/dist/expo/background.d.cts

@@ -1,8 +1,8 @@
-import { D as DefineSwapBackgroundTaskOptions } from '../swapsPollProcessor-CGMXUKPe.cjs';
-export { P as PersistedSwapBackgroundConfig, S as SWAP_POLL_TASK_TYPE, a as SwapTaskDependencies, s as swapsPollProcessor } from '../swapsPollProcessor-CGMXUKPe.cjs';
+import { D as DefineSwapBackgroundTaskOptions } from '../swapsPollProcessor-B98F6MQF.cjs';
+export { P as PersistedSwapBackgroundConfig, S as SWAP_POLL_TASK_TYPE, a as SwapTaskDependencies, s as swapsPollProcessor } from '../swapsPollProcessor-B98F6MQF.cjs';
 import '@arkade-os/sdk/worker/expo';
 import '@arkade-os/sdk';
-import '../types-8NrCdOpS.cjs';
+import '../types-CS62-oEy.cjs';
 
 /**
  * Define the Expo background task handler for swap polling.

package/dist/expo/background.d.ts

@@ -1,8 +1,8 @@
-import { D as DefineSwapBackgroundTaskOptions } from '../swapsPollProcessor-CuDM6sxV.js';
-export { P as PersistedSwapBackgroundConfig, S as SWAP_POLL_TASK_TYPE, a as SwapTaskDependencies, s as swapsPollProcessor } from '../swapsPollProcessor-CuDM6sxV.js';
+import { D as DefineSwapBackgroundTaskOptions } from '../swapsPollProcessor-Ov-wp17v.js';
+export { P as PersistedSwapBackgroundConfig, S as SWAP_POLL_TASK_TYPE, a as SwapTaskDependencies, s as swapsPollProcessor } from '../swapsPollProcessor-Ov-wp17v.js';
 import '@arkade-os/sdk/worker/expo';
 import '@arkade-os/sdk';
-import '../types-8NrCdOpS.js';
+import '../types-CS62-oEy.js';
 
 /**
  * Define the Expo background task handler for swap polling.

package/dist/expo/background.js

@@ -1,10 +1,10 @@
 import {
   SWAP_POLL_TASK_TYPE,
   swapsPollProcessor
-} from "../chunk-PHF6C2NE.js";
+} from "../chunk-UJXW5JBT.js";
 import {
   BoltzSwapProvider
-} from "../chunk-QVXFEX5F.js";
+} from "../chunk-GXO2EB6C.js";
 import "../chunk-SJQJQO7P.js";
 
 // src/expo/background.ts
@@ -27,14 +27,19 @@ function createBackgroundWalletShim(args) {
     getVtxos: async () => notImplemented("getVtxos"),
     getBoardingUtxos: async () => notImplemented("getBoardingUtxos"),
     getTransactionHistory: async () => notImplemented("getTransactionHistory"),
+    getActivityHistory: async () => notImplemented("getActivityHistory"),
     getContractManager: async () => notImplemented("getContractManager"),
     getDelegateManager: async () => notImplemented("getDelegateManager"),
     getDelegatorManager: async () => notImplemented("getDelegatorManager"),
     sendBitcoin: async () => notImplemented("sendBitcoin"),
     send: async () => notImplemented("send"),
     settle: async () => notImplemented("settle"),
+    clear: async () => notImplemented("clear"),
     assetManager: new Proxy({}, {
       get: () => notImplemented("assetManager")
+    }),
+    activity: new Proxy({}, {
+      get: () => notImplemented("activity")
     })
   };
 }
@@ -56,13 +61,13 @@ function defineExpoSwapBackgroundTask(taskName, options) {
       const wallet = createBackgroundWalletShim({
         identity,
         getAddress: async () => {
-          const { ArkAddress } = await import("@arkade-os/sdk");
+          const { ArkAddress, getNetwork } = await import("@arkade-os/sdk");
           const { hex } = await import("@scure/base");
           const info = await arkProvider.getInfo();
           const pubkey = await identity.xOnlyPublicKey();
           const serverPubKey = hex.decode(info.signerPubkey);
           const xOnlyServerPubKey = serverPubKey.length === 33 ? serverPubKey.slice(1) : serverPubKey;
-          const hrp = info.network === "bitcoin" ? "ark" : "tark";
+          const hrp = getNetwork(info.network).hrp;
           return new ArkAddress(xOnlyServerPubKey, pubkey, hrp).encode();
         }
       });

package/dist/expo/index.cjs

@@ -535,20 +535,26 @@ var BoltzSwapProvider = class {
     invoiceAmount,
     claimPublicKey,
     preimageHash,
-    description
+    description,
+    descriptionHash
   }) {
     if (claimPublicKey.length != 66) {
       throw new SwapError({
         message: "claimPublicKey must be a compressed public key"
       });
     }
+    if (descriptionHash !== void 0 && !/^[0-9a-fA-F]{64}$/.test(descriptionHash)) {
+      throw new SwapError({
+        message: "descriptionHash must be a 32-byte SHA256 (64 hex chars)"
+      });
+    }
     const requestBody = {
       from: "BTC",
       to: "ARK",
       invoiceAmount,
       claimPublicKey,
       preimageHash,
-      description: description?.trim() || "Send to Arkade address",
+      ...descriptionHash ? { descriptionHash } : { description: description?.trim() || "Send to Arkade address" },
       ...this.referralId ? { referralId: this.referralId } : {}
     };
     const response = await this.request(
@@ -953,6 +959,7 @@ var BoltzSwapProvider = class {
 
 // src/arkade-swaps.ts
 var import_sha23 = require("@noble/hashes/sha2.js");
+var import_legacy2 = require("@noble/hashes/legacy.js");
 var import_base9 = require("@scure/base");
 var import_secp256k13 = require("@noble/curves/secp256k1.js");
 var import_utils3 = require("@noble/hashes/utils.js");
@@ -1176,18 +1183,6 @@ var import_base3 = require("@scure/base");
 var import_btc_signer = require("@scure/btc-signer");
 var import_payment = require("@scure/btc-signer/payment.js");
 var import_utils2 = require("@scure/btc-signer/utils.js");
-var REGTEST_NETWORK = {
-  bech32: "bcrt",
-  pubKeyHash: 111,
-  scriptHash: 196,
-  wif: 239
-};
-var MUTINYNET_NETWORK = {
-  bech32: "tb",
-  pubKeyHash: 111,
-  scriptHash: 196,
-  wif: 239
-};
 var deserializeLeaf = (leaf) => ({
   version: leaf.version,
   output: import_base3.hex.decode(leaf.output)
@@ -1221,6 +1216,19 @@ var deserializeSwapTree = (tree) => {
     ])
   };
 };
+var TAPLEAF_V1 = 192;
+var PUSH_32 = Uint8Array.of(32);
+var decodeScriptNum = (data) => data instanceof Uint8Array && data.length > 0 ? Number((0, import_btc_signer.ScriptNum)(5, true).decode(data)) : void 0;
+var assertChainHtlcLeaves = (tree, expected) => {
+  if (tree.claimLeaf.version !== TAPLEAF_V1 || tree.refundLeaf.version !== TAPLEAF_V1)
+    throw new Error("unexpected leaf version");
+  const claim = import_btc_signer.Script.decode(tree.claimLeaf.output);
+  if (claim.length !== 8 || claim[0] !== "SIZE" || !(claim[1] instanceof Uint8Array) || !(0, import_utils2.equalBytes)(claim[1], PUSH_32) || claim[2] !== "EQUALVERIFY" || claim[3] !== "HASH160" || !(claim[4] instanceof Uint8Array) || !(0, import_utils2.equalBytes)(claim[4], expected.preimageHash160) || claim[5] !== "EQUALVERIFY" || !(claim[6] instanceof Uint8Array) || !(0, import_utils2.equalBytes)(claim[6], expected.claimXOnly) || claim[7] !== "CHECKSIG")
+    throw new Error("unexpected claim leaf");
+  const refund = import_btc_signer.Script.decode(tree.refundLeaf.output);
+  if (refund.length !== 4 || !(refund[0] instanceof Uint8Array) || !(0, import_utils2.equalBytes)(refund[0], expected.refundXOnly) || refund[1] !== "CHECKSIGVERIFY" || decodeScriptNum(refund[2]) !== expected.timeoutBlockHeight || refund[3] !== "CHECKLOCKTIMEVERIFY")
+    throw new Error("unexpected refund leaf");
+};
 var taprootHashTree = (tree) => {
   if (!Array.isArray(tree)) {
     return {
@@ -1302,6 +1310,12 @@ var decodeInvoice = (invoice) => {
     expiry: decoded.expiry ?? 3600,
     amountSats: Number(millisats / 1000n),
     description: decoded.sections.find((s) => s.name === "description")?.value ?? "",
+    // description_hash (BOLT11 `h`) is missing from light-bolt11-decoder's
+    // Section union even though the decoder emits it. Widen just this lookup
+    // rather than patch the library's types (separate repo, out of scope).
+    descriptionHash: decoded.sections.find(
+      (s) => s.name === "description_hash"
+    )?.value ?? "",
     paymentHash: decoded.sections.find((s) => s.name === "payment_hash")?.value ?? ""
   };
 };
@@ -2911,7 +2925,7 @@ var createVHTLCScript = (args) => {
     )
   });
   if (!vhtlcScript.claimScript) throw new Error("Failed to create VHTLC script");
-  const hrp = network === "bitcoin" ? "ark" : "tark";
+  const hrp = (0, import_sdk7.getNetwork)(network).hrp;
   const vhtlcAddress = vhtlcScript.address(hrp, serverXOnlyPublicKey).encode();
   return { vhtlcScript, vhtlcAddress };
 };
@@ -3373,7 +3387,7 @@ var ArkadeSwaps = class _ArkadeSwaps {
       invoiceAmount: args.amount,
       claimPublicKey,
       preimageHash,
-      ...args.description?.trim() ? { description: args.description.trim() } : {}
+      ...args.descriptionHash !== void 0 ? { descriptionHash: args.descriptionHash } : args.description?.trim() ? { description: args.description.trim() } : {}
     };
     const swapResponse = await this.swapProvider.createReverseSwap(swapRequest);
     const decodedInvoice = decodeInvoice(swapResponse.invoice);
@@ -4328,7 +4342,7 @@ var ArkadeSwaps = class _ArkadeSwaps {
       throw new Error(`Swap ${pendingSwap.id}: BTC transaction hex is required`);
     const lockupTx = import_btc_signer5.Transaction.fromRaw(import_base9.hex.decode(swapStatus.transaction.hex));
     const arkInfo = await this.arkProvider.getInfo();
-    const network = arkInfo.network === "bitcoin" ? import_utils4.NETWORK : arkInfo.network === "mutinynet" ? MUTINYNET_NETWORK : REGTEST_NETWORK;
+    const network = (0, import_sdk8.getNetwork)(arkInfo.network);
     const swapTree = deserializeSwapTree(pendingSwap.response.claimDetails.swapTree);
     const musig = tweakMusig(
       create(import_base9.hex.decode(pendingSwap.ephemeralKey), [
@@ -4868,8 +4882,56 @@ var ArkadeSwaps = class _ArkadeSwaps {
         message: "Boltz is trying to scam us (invalid address)"
       });
     }
+    this.verifyBtcChainHtlc({ to, swap, arkNetwork: arkInfo.network });
     return true;
   }
+  /**
+   * Verifies the BTC-side Taproot HTLC of a chain swap before funds are
+   * committed: the lockup address must bind to MuSig2(boltz, user) over
+   * Boltz's leaves, and those leaves must enforce the agreed preimage hash,
+   * direction-specific keys, leaf version, and absolute refund CLTV.
+   */
+  verifyBtcChainHtlc(args) {
+    const { to, swap, arkNetwork } = args;
+    const btcDetails = to === "ARK" ? swap.response.lockupDetails : swap.response.claimDetails;
+    if (!btcDetails.swapTree)
+      throw new SwapError({ message: `Swap ${swap.id}: missing swap tree in BTC details` });
+    if (!btcDetails.serverPublicKey)
+      throw new SwapError({
+        message: `Swap ${swap.id}: missing server public key in BTC details`
+      });
+    if (typeof btcDetails.timeoutBlockHeight !== "number")
+      throw new SwapError({
+        message: `Swap ${swap.id}: missing timeout block height in BTC details`
+      });
+    const network = (0, import_sdk8.getNetwork)(arkNetwork);
+    const swapTree = deserializeSwapTree(btcDetails.swapTree);
+    const ephemeralPub = import_secp256k13.secp256k1.getPublicKey(import_base9.hex.decode(swap.ephemeralKey));
+    const musig = tweakMusig(
+      create(import_base9.hex.decode(swap.ephemeralKey), [
+        import_base9.hex.decode(btcDetails.serverPublicKey),
+        ephemeralPub
+      ]),
+      swapTree.tree
+    );
+    const expectedScript = import_btc_signer5.OutScript.encode((0, import_btc_signer5.Address)(network).decode(btcDetails.lockupAddress));
+    if (!(0, import_utils4.equalBytes)(p2trScript(musig.aggPubkey), expectedScript))
+      throw new SwapError({ message: "Boltz is trying to scam us (invalid BTC address)" });
+    const boltzXOnly = toXOnly(import_base9.hex.decode(btcDetails.serverPublicKey));
+    const userXOnly = toXOnly(ephemeralPub);
+    try {
+      assertChainHtlcLeaves(swapTree, {
+        preimageHash160: (0, import_legacy2.ripemd160)(import_base9.hex.decode(swap.request.preimageHash)),
+        claimXOnly: to === "ARK" ? boltzXOnly : userXOnly,
+        refundXOnly: to === "ARK" ? userXOnly : boltzXOnly,
+        timeoutBlockHeight: btcDetails.timeoutBlockHeight
+      });
+    } catch (err) {
+      throw new SwapError({
+        message: `Boltz is trying to scam us (invalid BTC HTLC: ${err.message})`
+      });
+    }
+  }
   /**
    * Renegotiates the quote for an existing chain swap. Convenience wrapper
    * over `getSwapQuote` + `acceptSwapQuote` with a safety floor.

package/dist/expo/index.d.cts

@@ -1,7 +1,7 @@
-import { I as IArkadeSwaps, A as ArkadeSwaps, Q as QuoteSwapOptions, V as VhtlcTimeouts } from '../arkade-swaps-DwgfLCMY.cjs';
-import { n as SwapManagerClient, C as CreateLightningInvoiceRequest, e as CreateLightningInvoiceResponse, S as SendLightningPaymentRequest, o as SendLightningPaymentResponse, O as OptimisticSendLightningPaymentResponse, c as BoltzSubmarineSwap, b as BoltzReverseSwap, f as SubmarineRefundOutcome, g as SubmarineRecoveryInfo, h as SubmarineRecoveryResult, F as FeesResponse, a as BoltzChainSwap, j as ArkToBtcResponse, l as ChainArkRefundOutcome, k as BtcToArkResponse, d as Chain, i as ChainFeesResponse, L as LimitsResponse, G as GetSwapStatusResponse, B as BoltzSwap } from '../types-8NrCdOpS.cjs';
-import { E as ExpoArkadeSwapsConfig } from '../swapsPollProcessor-CGMXUKPe.cjs';
-export { D as DefineSwapBackgroundTaskOptions, b as ExpoArkadeLightningConfig, c as ExpoSwapBackgroundConfig, P as PersistedSwapBackgroundConfig, S as SWAP_POLL_TASK_TYPE, a as SwapTaskDependencies } from '../swapsPollProcessor-CGMXUKPe.cjs';
+import { I as IArkadeSwaps, A as ArkadeSwaps, Q as QuoteSwapOptions, V as VhtlcTimeouts } from '../arkade-swaps-D-L0_0Ri.cjs';
+import { n as SwapManagerClient, C as CreateLightningInvoiceRequest, e as CreateLightningInvoiceResponse, S as SendLightningPaymentRequest, o as SendLightningPaymentResponse, O as OptimisticSendLightningPaymentResponse, c as BoltzSubmarineSwap, b as BoltzReverseSwap, f as SubmarineRefundOutcome, g as SubmarineRecoveryInfo, h as SubmarineRecoveryResult, F as FeesResponse, a as BoltzChainSwap, j as ArkToBtcResponse, l as ChainArkRefundOutcome, k as BtcToArkResponse, d as Chain, i as ChainFeesResponse, L as LimitsResponse, G as GetSwapStatusResponse, B as BoltzSwap } from '../types-CS62-oEy.cjs';
+import { E as ExpoArkadeSwapsConfig } from '../swapsPollProcessor-B98F6MQF.cjs';
+export { D as DefineSwapBackgroundTaskOptions, b as ExpoArkadeLightningConfig, c as ExpoSwapBackgroundConfig, P as PersistedSwapBackgroundConfig, S as SWAP_POLL_TASK_TYPE, a as SwapTaskDependencies } from '../swapsPollProcessor-B98F6MQF.cjs';
 import { ArkInfo, Identity, ArkTxInput, VHTLC } from '@arkade-os/sdk';
 import { TransactionOutput } from '@scure/btc-signer/psbt.js';
 import '@arkade-os/sdk/worker/expo';

package/dist/expo/index.d.ts

@@ -1,7 +1,7 @@
-import { I as IArkadeSwaps, A as ArkadeSwaps, Q as QuoteSwapOptions, V as VhtlcTimeouts } from '../arkade-swaps-2q3VSgb4.js';
-import { n as SwapManagerClient, C as CreateLightningInvoiceRequest, e as CreateLightningInvoiceResponse, S as SendLightningPaymentRequest, o as SendLightningPaymentResponse, O as OptimisticSendLightningPaymentResponse, c as BoltzSubmarineSwap, b as BoltzReverseSwap, f as SubmarineRefundOutcome, g as SubmarineRecoveryInfo, h as SubmarineRecoveryResult, F as FeesResponse, a as BoltzChainSwap, j as ArkToBtcResponse, l as ChainArkRefundOutcome, k as BtcToArkResponse, d as Chain, i as ChainFeesResponse, L as LimitsResponse, G as GetSwapStatusResponse, B as BoltzSwap } from '../types-8NrCdOpS.js';
-import { E as ExpoArkadeSwapsConfig } from '../swapsPollProcessor-CuDM6sxV.js';
-export { D as DefineSwapBackgroundTaskOptions, b as ExpoArkadeLightningConfig, c as ExpoSwapBackgroundConfig, P as PersistedSwapBackgroundConfig, S as SWAP_POLL_TASK_TYPE, a as SwapTaskDependencies } from '../swapsPollProcessor-CuDM6sxV.js';
+import { I as IArkadeSwaps, A as ArkadeSwaps, Q as QuoteSwapOptions, V as VhtlcTimeouts } from '../arkade-swaps-fmdCFjif.js';
+import { n as SwapManagerClient, C as CreateLightningInvoiceRequest, e as CreateLightningInvoiceResponse, S as SendLightningPaymentRequest, o as SendLightningPaymentResponse, O as OptimisticSendLightningPaymentResponse, c as BoltzSubmarineSwap, b as BoltzReverseSwap, f as SubmarineRefundOutcome, g as SubmarineRecoveryInfo, h as SubmarineRecoveryResult, F as FeesResponse, a as BoltzChainSwap, j as ArkToBtcResponse, l as ChainArkRefundOutcome, k as BtcToArkResponse, d as Chain, i as ChainFeesResponse, L as LimitsResponse, G as GetSwapStatusResponse, B as BoltzSwap } from '../types-CS62-oEy.js';
+import { E as ExpoArkadeSwapsConfig } from '../swapsPollProcessor-Ov-wp17v.js';
+export { D as DefineSwapBackgroundTaskOptions, b as ExpoArkadeLightningConfig, c as ExpoSwapBackgroundConfig, P as PersistedSwapBackgroundConfig, S as SWAP_POLL_TASK_TYPE, a as SwapTaskDependencies } from '../swapsPollProcessor-Ov-wp17v.js';
 import { ArkInfo, Identity, ArkTxInput, VHTLC } from '@arkade-os/sdk';
 import { TransactionOutput } from '@scure/btc-signer/psbt.js';
 import '@arkade-os/sdk/worker/expo';

package/dist/expo/index.js

@@ -1,9 +1,9 @@
 import {
   SWAP_POLL_TASK_TYPE
-} from "../chunk-PHF6C2NE.js";
+} from "../chunk-UJXW5JBT.js";
 import {
   ArkadeSwaps
-} from "../chunk-QVXFEX5F.js";
+} from "../chunk-GXO2EB6C.js";
 import "../chunk-SJQJQO7P.js";
 
 // src/expo/arkade-lightning.ts

package/dist/index.cjs

@@ -95,7 +95,7 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // package.json
-var version = "0.3.44";
+var version = "0.3.46";
 
 // src/errors.ts
 var SwapError = class extends Error {
@@ -667,20 +667,26 @@ var BoltzSwapProvider = class {
     invoiceAmount,
     claimPublicKey,
     preimageHash,
-    description
+    description,
+    descriptionHash
   }) {
     if (claimPublicKey.length != 66) {
       throw new SwapError({
         message: "claimPublicKey must be a compressed public key"
       });
     }
+    if (descriptionHash !== void 0 && !/^[0-9a-fA-F]{64}$/.test(descriptionHash)) {
+      throw new SwapError({
+        message: "descriptionHash must be a 32-byte SHA256 (64 hex chars)"
+      });
+    }
     const requestBody = {
       from: "BTC",
       to: "ARK",
       invoiceAmount,
       claimPublicKey,
       preimageHash,
-      description: description?.trim() || "Send to Arkade address",
+      ...descriptionHash ? { descriptionHash } : { description: description?.trim() || "Send to Arkade address" },
       ...this.referralId ? { referralId: this.referralId } : {}
     };
     const response = await this.request(
@@ -1085,6 +1091,7 @@ var BoltzSwapProvider = class {
 
 // src/arkade-swaps.ts
 var import_sha23 = require("@noble/hashes/sha2.js");
+var import_legacy2 = require("@noble/hashes/legacy.js");
 var import_base9 = require("@scure/base");
 var import_secp256k13 = require("@noble/curves/secp256k1.js");
 var import_utils3 = require("@noble/hashes/utils.js");
@@ -1308,18 +1315,6 @@ var import_base3 = require("@scure/base");
 var import_btc_signer = require("@scure/btc-signer");
 var import_payment = require("@scure/btc-signer/payment.js");
 var import_utils2 = require("@scure/btc-signer/utils.js");
-var REGTEST_NETWORK = {
-  bech32: "bcrt",
-  pubKeyHash: 111,
-  scriptHash: 196,
-  wif: 239
-};
-var MUTINYNET_NETWORK = {
-  bech32: "tb",
-  pubKeyHash: 111,
-  scriptHash: 196,
-  wif: 239
-};
 var deserializeLeaf = (leaf) => ({
   version: leaf.version,
   output: import_base3.hex.decode(leaf.output)
@@ -1353,6 +1348,19 @@ var deserializeSwapTree = (tree) => {
     ])
   };
 };
+var TAPLEAF_V1 = 192;
+var PUSH_32 = Uint8Array.of(32);
+var decodeScriptNum = (data) => data instanceof Uint8Array && data.length > 0 ? Number((0, import_btc_signer.ScriptNum)(5, true).decode(data)) : void 0;
+var assertChainHtlcLeaves = (tree, expected) => {
+  if (tree.claimLeaf.version !== TAPLEAF_V1 || tree.refundLeaf.version !== TAPLEAF_V1)
+    throw new Error("unexpected leaf version");
+  const claim = import_btc_signer.Script.decode(tree.claimLeaf.output);
+  if (claim.length !== 8 || claim[0] !== "SIZE" || !(claim[1] instanceof Uint8Array) || !(0, import_utils2.equalBytes)(claim[1], PUSH_32) || claim[2] !== "EQUALVERIFY" || claim[3] !== "HASH160" || !(claim[4] instanceof Uint8Array) || !(0, import_utils2.equalBytes)(claim[4], expected.preimageHash160) || claim[5] !== "EQUALVERIFY" || !(claim[6] instanceof Uint8Array) || !(0, import_utils2.equalBytes)(claim[6], expected.claimXOnly) || claim[7] !== "CHECKSIG")
+    throw new Error("unexpected claim leaf");
+  const refund = import_btc_signer.Script.decode(tree.refundLeaf.output);
+  if (refund.length !== 4 || !(refund[0] instanceof Uint8Array) || !(0, import_utils2.equalBytes)(refund[0], expected.refundXOnly) || refund[1] !== "CHECKSIGVERIFY" || decodeScriptNum(refund[2]) !== expected.timeoutBlockHeight || refund[3] !== "CHECKLOCKTIMEVERIFY")
+    throw new Error("unexpected refund leaf");
+};
 var taprootHashTree = (tree) => {
   if (!Array.isArray(tree)) {
     return {
@@ -1434,6 +1442,12 @@ var decodeInvoice = (invoice) => {
     expiry: decoded.expiry ?? 3600,
     amountSats: Number(millisats / 1000n),
     description: decoded.sections.find((s) => s.name === "description")?.value ?? "",
+    // description_hash (BOLT11 `h`) is missing from light-bolt11-decoder's
+    // Section union even though the decoder emits it. Widen just this lookup
+    // rather than patch the library's types (separate repo, out of scope).
+    descriptionHash: decoded.sections.find(
+      (s) => s.name === "description_hash"
+    )?.value ?? "",
     paymentHash: decoded.sections.find((s) => s.name === "payment_hash")?.value ?? ""
   };
 };
@@ -3064,7 +3078,7 @@ var createVHTLCScript = (args) => {
     )
   });
   if (!vhtlcScript.claimScript) throw new Error("Failed to create VHTLC script");
-  const hrp = network === "bitcoin" ? "ark" : "tark";
+  const hrp = (0, import_sdk7.getNetwork)(network).hrp;
   const vhtlcAddress = vhtlcScript.address(hrp, serverXOnlyPublicKey).encode();
   return { vhtlcScript, vhtlcAddress };
 };
@@ -3526,7 +3540,7 @@ var ArkadeSwaps = class _ArkadeSwaps {
       invoiceAmount: args.amount,
       claimPublicKey,
       preimageHash,
-      ...args.description?.trim() ? { description: args.description.trim() } : {}
+      ...args.descriptionHash !== void 0 ? { descriptionHash: args.descriptionHash } : args.description?.trim() ? { description: args.description.trim() } : {}
     };
     const swapResponse = await this.swapProvider.createReverseSwap(swapRequest);
     const decodedInvoice = decodeInvoice(swapResponse.invoice);
@@ -4481,7 +4495,7 @@ var ArkadeSwaps = class _ArkadeSwaps {
       throw new Error(`Swap ${pendingSwap.id}: BTC transaction hex is required`);
     const lockupTx = import_btc_signer5.Transaction.fromRaw(import_base9.hex.decode(swapStatus.transaction.hex));
     const arkInfo = await this.arkProvider.getInfo();
-    const network = arkInfo.network === "bitcoin" ? import_utils4.NETWORK : arkInfo.network === "mutinynet" ? MUTINYNET_NETWORK : REGTEST_NETWORK;
+    const network = (0, import_sdk8.getNetwork)(arkInfo.network);
     const swapTree = deserializeSwapTree(pendingSwap.response.claimDetails.swapTree);
     const musig = tweakMusig(
       create(import_base9.hex.decode(pendingSwap.ephemeralKey), [
@@ -5021,8 +5035,56 @@ var ArkadeSwaps = class _ArkadeSwaps {
         message: "Boltz is trying to scam us (invalid address)"
       });
     }
+    this.verifyBtcChainHtlc({ to, swap, arkNetwork: arkInfo.network });
     return true;
   }
+  /**
+   * Verifies the BTC-side Taproot HTLC of a chain swap before funds are
+   * committed: the lockup address must bind to MuSig2(boltz, user) over
+   * Boltz's leaves, and those leaves must enforce the agreed preimage hash,
+   * direction-specific keys, leaf version, and absolute refund CLTV.
+   */
+  verifyBtcChainHtlc(args) {
+    const { to, swap, arkNetwork } = args;
+    const btcDetails = to === "ARK" ? swap.response.lockupDetails : swap.response.claimDetails;
+    if (!btcDetails.swapTree)
+      throw new SwapError({ message: `Swap ${swap.id}: missing swap tree in BTC details` });
+    if (!btcDetails.serverPublicKey)
+      throw new SwapError({
+        message: `Swap ${swap.id}: missing server public key in BTC details`
+      });
+    if (typeof btcDetails.timeoutBlockHeight !== "number")
+      throw new SwapError({
+        message: `Swap ${swap.id}: missing timeout block height in BTC details`
+      });
+    const network = (0, import_sdk8.getNetwork)(arkNetwork);
+    const swapTree = deserializeSwapTree(btcDetails.swapTree);
+    const ephemeralPub = import_secp256k13.secp256k1.getPublicKey(import_base9.hex.decode(swap.ephemeralKey));
+    const musig = tweakMusig(
+      create(import_base9.hex.decode(swap.ephemeralKey), [
+        import_base9.hex.decode(btcDetails.serverPublicKey),
+        ephemeralPub
+      ]),
+      swapTree.tree
+    );
+    const expectedScript = import_btc_signer5.OutScript.encode((0, import_btc_signer5.Address)(network).decode(btcDetails.lockupAddress));
+    if (!(0, import_utils4.equalBytes)(p2trScript(musig.aggPubkey), expectedScript))
+      throw new SwapError({ message: "Boltz is trying to scam us (invalid BTC address)" });
+    const boltzXOnly = toXOnly(import_base9.hex.decode(btcDetails.serverPublicKey));
+    const userXOnly = toXOnly(ephemeralPub);
+    try {
+      assertChainHtlcLeaves(swapTree, {
+        preimageHash160: (0, import_legacy2.ripemd160)(import_base9.hex.decode(swap.request.preimageHash)),
+        claimXOnly: to === "ARK" ? boltzXOnly : userXOnly,
+        refundXOnly: to === "ARK" ? userXOnly : boltzXOnly,
+        timeoutBlockHeight: btcDetails.timeoutBlockHeight
+      });
+    } catch (err) {
+      throw new SwapError({
+        message: `Boltz is trying to scam us (invalid BTC HTLC: ${err.message})`
+      });
+    }
+  }
   /**
    * Renegotiates the quote for an existing chain swap. Convenience wrapper
    * over `getSwapQuote` + `acceptSwapQuote` with a safety floor.

package/dist/index.d.cts

@@ -1,7 +1,7 @@
-import { Q as QuoteSwapOptions, I as IArkadeSwaps, V as VhtlcTimeouts } from './arkade-swaps-DwgfLCMY.cjs';
-export { A as ArkadeSwaps } from './arkade-swaps-DwgfLCMY.cjs';
-import { B as BoltzSwap, D as DecodedInvoice, a as BoltzChainSwap, b as BoltzReverseSwap, c as BoltzSubmarineSwap, A as ArkadeSwapsConfig, N as Network, C as CreateLightningInvoiceRequest, S as SendLightningPaymentRequest, F as FeesResponse, d as Chain, e as CreateLightningInvoiceResponse, O as OptimisticSendLightningPaymentResponse, f as SubmarineRefundOutcome, g as SubmarineRecoveryInfo, h as SubmarineRecoveryResult, i as ChainFeesResponse, L as LimitsResponse, G as GetSwapStatusResponse, j as ArkToBtcResponse, k as BtcToArkResponse, l as ChainArkRefundOutcome, m as SwapRepository, n as SwapManagerClient, o as SendLightningPaymentResponse, p as GetSwapsFilter } from './types-8NrCdOpS.cjs';
-export { q as ArkadeSwapsCreateConfig, r as BoltzSwapProvider, s as BoltzSwapStatus, I as IncomingPaymentSubscription, P as PendingChainSwap, t as PendingReverseSwap, u as PendingSubmarineSwap, v as PendingSwap, w as SubmarineProgressionStatus, x as SubmarineRecoveryStatus, y as SwapManager, z as SwapManagerCallbacks, E as SwapManagerConfig, H as SwapManagerEvents, V as Vtxo, J as hasSubmarineStatusReached, K as isChainClaimableStatus, M as isChainFailedStatus, Q as isChainFinalStatus, R as isChainPendingStatus, T as isChainRefundableStatus, U as isChainSignableStatus, W as isChainSuccessStatus, X as isChainSwapClaimable, Y as isChainSwapRefundable, Z as isPendingChainSwap, _ as isPendingReverseSwap, $ as isPendingSubmarineSwap, a0 as isReverseClaimableStatus, a1 as isReverseFailedStatus, a2 as isReverseFinalStatus, a3 as isReversePendingStatus, a4 as isReverseSuccessStatus, a5 as isReverseSwapClaimable, a6 as isSubmarineFailedStatus, a7 as isSubmarineFinalStatus, a8 as isSubmarinePendingStatus, a9 as isSubmarineRefundableStatus, aa as isSubmarineSuccessStatus, ab as isSubmarineSwapRefundable } from './types-8NrCdOpS.cjs';
+import { Q as QuoteSwapOptions, I as IArkadeSwaps, V as VhtlcTimeouts } from './arkade-swaps-D-L0_0Ri.cjs';
+export { A as ArkadeSwaps } from './arkade-swaps-D-L0_0Ri.cjs';
+import { B as BoltzSwap, D as DecodedInvoice, a as BoltzChainSwap, b as BoltzReverseSwap, c as BoltzSubmarineSwap, A as ArkadeSwapsConfig, N as Network, C as CreateLightningInvoiceRequest, S as SendLightningPaymentRequest, F as FeesResponse, d as Chain, e as CreateLightningInvoiceResponse, O as OptimisticSendLightningPaymentResponse, f as SubmarineRefundOutcome, g as SubmarineRecoveryInfo, h as SubmarineRecoveryResult, i as ChainFeesResponse, L as LimitsResponse, G as GetSwapStatusResponse, j as ArkToBtcResponse, k as BtcToArkResponse, l as ChainArkRefundOutcome, m as SwapRepository, n as SwapManagerClient, o as SendLightningPaymentResponse, p as GetSwapsFilter } from './types-CS62-oEy.cjs';
+export { q as ArkadeSwapsCreateConfig, r as BoltzSwapProvider, s as BoltzSwapStatus, I as IncomingPaymentSubscription, P as PendingChainSwap, t as PendingReverseSwap, u as PendingSubmarineSwap, v as PendingSwap, w as SubmarineProgressionStatus, x as SubmarineRecoveryStatus, y as SwapManager, z as SwapManagerCallbacks, E as SwapManagerConfig, H as SwapManagerEvents, V as Vtxo, J as hasSubmarineStatusReached, K as isChainClaimableStatus, M as isChainFailedStatus, Q as isChainFinalStatus, R as isChainPendingStatus, T as isChainRefundableStatus, U as isChainSignableStatus, W as isChainSuccessStatus, X as isChainSwapClaimable, Y as isChainSwapRefundable, Z as isPendingChainSwap, _ as isPendingReverseSwap, $ as isPendingSubmarineSwap, a0 as isReverseClaimableStatus, a1 as isReverseFailedStatus, a2 as isReverseFinalStatus, a3 as isReversePendingStatus, a4 as isReverseSuccessStatus, a5 as isReverseSwapClaimable, a6 as isSubmarineFailedStatus, a7 as isSubmarineFinalStatus, a8 as isSubmarinePendingStatus, a9 as isSubmarineRefundableStatus, aa as isSubmarineSuccessStatus, ab as isSubmarineSwapRefundable } from './types-CS62-oEy.cjs';
 import { Transaction } from '@scure/btc-signer';
 import { MessageHandler, RequestEnvelope, ArkInfo, ResponseEnvelope, IWallet, IReadonlyWallet, VHTLC, Identity, ArkTxInput } from '@arkade-os/sdk';
 import { TransactionOutput } from '@scure/btc-signer/psbt.js';

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { Q as QuoteSwapOptions, I as IArkadeSwaps, V as VhtlcTimeouts } from './arkade-swaps-2q3VSgb4.js';
-export { A as ArkadeSwaps } from './arkade-swaps-2q3VSgb4.js';
-import { B as BoltzSwap, D as DecodedInvoice, a as BoltzChainSwap, b as BoltzReverseSwap, c as BoltzSubmarineSwap, A as ArkadeSwapsConfig, N as Network, C as CreateLightningInvoiceRequest, S as SendLightningPaymentRequest, F as FeesResponse, d as Chain, e as CreateLightningInvoiceResponse, O as OptimisticSendLightningPaymentResponse, f as SubmarineRefundOutcome, g as SubmarineRecoveryInfo, h as SubmarineRecoveryResult, i as ChainFeesResponse, L as LimitsResponse, G as GetSwapStatusResponse, j as ArkToBtcResponse, k as BtcToArkResponse, l as ChainArkRefundOutcome, m as SwapRepository, n as SwapManagerClient, o as SendLightningPaymentResponse, p as GetSwapsFilter } from './types-8NrCdOpS.js';
-export { q as ArkadeSwapsCreateConfig, r as BoltzSwapProvider, s as BoltzSwapStatus, I as IncomingPaymentSubscription, P as PendingChainSwap, t as PendingReverseSwap, u as PendingSubmarineSwap, v as PendingSwap, w as SubmarineProgressionStatus, x as SubmarineRecoveryStatus, y as SwapManager, z as SwapManagerCallbacks, E as SwapManagerConfig, H as SwapManagerEvents, V as Vtxo, J as hasSubmarineStatusReached, K as isChainClaimableStatus, M as isChainFailedStatus, Q as isChainFinalStatus, R as isChainPendingStatus, T as isChainRefundableStatus, U as isChainSignableStatus, W as isChainSuccessStatus, X as isChainSwapClaimable, Y as isChainSwapRefundable, Z as isPendingChainSwap, _ as isPendingReverseSwap, $ as isPendingSubmarineSwap, a0 as isReverseClaimableStatus, a1 as isReverseFailedStatus, a2 as isReverseFinalStatus, a3 as isReversePendingStatus, a4 as isReverseSuccessStatus, a5 as isReverseSwapClaimable, a6 as isSubmarineFailedStatus, a7 as isSubmarineFinalStatus, a8 as isSubmarinePendingStatus, a9 as isSubmarineRefundableStatus, aa as isSubmarineSuccessStatus, ab as isSubmarineSwapRefundable } from './types-8NrCdOpS.js';
+import { Q as QuoteSwapOptions, I as IArkadeSwaps, V as VhtlcTimeouts } from './arkade-swaps-fmdCFjif.js';
+export { A as ArkadeSwaps } from './arkade-swaps-fmdCFjif.js';
+import { B as BoltzSwap, D as DecodedInvoice, a as BoltzChainSwap, b as BoltzReverseSwap, c as BoltzSubmarineSwap, A as ArkadeSwapsConfig, N as Network, C as CreateLightningInvoiceRequest, S as SendLightningPaymentRequest, F as FeesResponse, d as Chain, e as CreateLightningInvoiceResponse, O as OptimisticSendLightningPaymentResponse, f as SubmarineRefundOutcome, g as SubmarineRecoveryInfo, h as SubmarineRecoveryResult, i as ChainFeesResponse, L as LimitsResponse, G as GetSwapStatusResponse, j as ArkToBtcResponse, k as BtcToArkResponse, l as ChainArkRefundOutcome, m as SwapRepository, n as SwapManagerClient, o as SendLightningPaymentResponse, p as GetSwapsFilter } from './types-CS62-oEy.js';
+export { q as ArkadeSwapsCreateConfig, r as BoltzSwapProvider, s as BoltzSwapStatus, I as IncomingPaymentSubscription, P as PendingChainSwap, t as PendingReverseSwap, u as PendingSubmarineSwap, v as PendingSwap, w as SubmarineProgressionStatus, x as SubmarineRecoveryStatus, y as SwapManager, z as SwapManagerCallbacks, E as SwapManagerConfig, H as SwapManagerEvents, V as Vtxo, J as hasSubmarineStatusReached, K as isChainClaimableStatus, M as isChainFailedStatus, Q as isChainFinalStatus, R as isChainPendingStatus, T as isChainRefundableStatus, U as isChainSignableStatus, W as isChainSuccessStatus, X as isChainSwapClaimable, Y as isChainSwapRefundable, Z as isPendingChainSwap, _ as isPendingReverseSwap, $ as isPendingSubmarineSwap, a0 as isReverseClaimableStatus, a1 as isReverseFailedStatus, a2 as isReverseFinalStatus, a3 as isReversePendingStatus, a4 as isReverseSuccessStatus, a5 as isReverseSwapClaimable, a6 as isSubmarineFailedStatus, a7 as isSubmarineFinalStatus, a8 as isSubmarinePendingStatus, a9 as isSubmarineRefundableStatus, aa as isSubmarineSuccessStatus, ab as isSubmarineSwapRefundable } from './types-CS62-oEy.js';
 import { Transaction } from '@scure/btc-signer';
 import { MessageHandler, RequestEnvelope, ArkInfo, ResponseEnvelope, IWallet, IReadonlyWallet, VHTLC, Identity, ArkTxInput } from '@arkade-os/sdk';
 import { TransactionOutput } from '@scure/btc-signer/psbt.js';

package/dist/index.js

@@ -53,14 +53,14 @@ import {
   updateReverseSwapStatus,
   updateSubmarineSwapStatus,
   verifySignatures
-} from "./chunk-QVXFEX5F.js";
+} from "./chunk-GXO2EB6C.js";
 import {
   applyCreatedAtOrder,
   applySwapsFilter
 } from "./chunk-SJQJQO7P.js";
 
 // package.json
-var version = "0.3.44";
+var version = "0.3.46";
 
 // src/serviceWorker/arkade-swaps-message-handler.ts
 import { RestArkProvider, RestIndexerProvider } from "@arkade-os/sdk";

package/dist/repositories/realm/index.d.cts

@@ -1,5 +1,5 @@
 import { RealmLike } from '@arkade-os/sdk/repositories/realm';
-import { m as SwapRepository, B as BoltzSwap, p as GetSwapsFilter } from '../../types-8NrCdOpS.cjs';
+import { m as SwapRepository, B as BoltzSwap, p as GetSwapsFilter } from '../../types-CS62-oEy.cjs';
 import '@arkade-os/sdk';
 
 /**

package/dist/repositories/realm/index.d.ts

@@ -1,5 +1,5 @@
 import { RealmLike } from '@arkade-os/sdk/repositories/realm';
-import { m as SwapRepository, B as BoltzSwap, p as GetSwapsFilter } from '../../types-8NrCdOpS.js';
+import { m as SwapRepository, B as BoltzSwap, p as GetSwapsFilter } from '../../types-CS62-oEy.js';
 import '@arkade-os/sdk';
 
 /**

package/dist/repositories/sqlite/index.d.cts

@@ -1,5 +1,5 @@
 import { SQLExecutor } from '@arkade-os/sdk/repositories/sqlite';
-import { m as SwapRepository, B as BoltzSwap, p as GetSwapsFilter } from '../../types-8NrCdOpS.cjs';
+import { m as SwapRepository, B as BoltzSwap, p as GetSwapsFilter } from '../../types-CS62-oEy.cjs';
 import '@arkade-os/sdk';
 
 /**

package/dist/repositories/sqlite/index.d.ts

@@ -1,5 +1,5 @@
 import { SQLExecutor } from '@arkade-os/sdk/repositories/sqlite';
-import { m as SwapRepository, B as BoltzSwap, p as GetSwapsFilter } from '../../types-8NrCdOpS.js';
+import { m as SwapRepository, B as BoltzSwap, p as GetSwapsFilter } from '../../types-CS62-oEy.js';
 import '@arkade-os/sdk';
 
 /**

package/dist/{swapsPollProcessor-CGMXUKPe.d.cts → swapsPollProcessor-B98F6MQF.d.cts}

@@ -1,6 +1,6 @@
 import { AsyncStorageTaskQueue, TaskProcessor } from '@arkade-os/sdk/worker/expo';
 import { Identity, ArkProvider, IndexerProvider, IWallet } from '@arkade-os/sdk';
-import { m as SwapRepository, N as Network, r as BoltzSwapProvider, A as ArkadeSwapsConfig } from './types-8NrCdOpS.cjs';
+import { m as SwapRepository, N as Network, r as BoltzSwapProvider, A as ArkadeSwapsConfig } from './types-CS62-oEy.cjs';
 
 /**
  * Dependencies injected into every swap processor at runtime.

package/dist/{swapsPollProcessor-CuDM6sxV.d.ts → swapsPollProcessor-Ov-wp17v.d.ts}

@@ -1,6 +1,6 @@
 import { AsyncStorageTaskQueue, TaskProcessor } from '@arkade-os/sdk/worker/expo';
 import { Identity, ArkProvider, IndexerProvider, IWallet } from '@arkade-os/sdk';
-import { m as SwapRepository, N as Network, r as BoltzSwapProvider, A as ArkadeSwapsConfig } from './types-8NrCdOpS.js';
+import { m as SwapRepository, N as Network, r as BoltzSwapProvider, A as ArkadeSwapsConfig } from './types-CS62-oEy.js';
 
 /**
  * Dependencies injected into every swap processor at runtime.

package/dist/{types-8NrCdOpS.d.cts → types-CS62-oEy.d.cts}

@@ -144,6 +144,12 @@ type CreateReverseSwapRequest = {
     preimageHash: string;
     /** Optional description for the BOLT11 invoice. */
     description?: string;
+    /**
+     * Optional SHA256 description hash (hex, 32 bytes / 64 chars) to commit
+     * into the invoice instead of a plaintext description. BOLT11 carries one
+     * or the other, never both; when set, `description` is omitted.
+     */
+    descriptionHash?: string;
 };
 /** Response from creating a reverse swap. */
 type CreateReverseSwapResponse = {
@@ -345,7 +351,7 @@ declare class BoltzSwapProvider {
     /** Creates a submarine swap (Arkade → Lightning) on Boltz. */
     createSubmarineSwap({ invoice, refundPublicKey, }: CreateSubmarineSwapRequest): Promise<CreateSubmarineSwapResponse>;
     /** Creates a reverse swap (Lightning → Arkade) on Boltz. */
-    createReverseSwap({ invoiceAmount, claimPublicKey, preimageHash, description, }: CreateReverseSwapRequest): Promise<CreateReverseSwapResponse>;
+    createReverseSwap({ invoiceAmount, claimPublicKey, preimageHash, description, descriptionHash, }: CreateReverseSwapRequest): Promise<CreateReverseSwapResponse>;
     /** Creates a chain swap (ARK ↔ BTC) on Boltz. */
     createChainSwap({ to, from, preimageHash, feeSatsPerByte, claimPublicKey, refundPublicKey, serverLockAmount, userLockAmount, }: CreateChainSwapRequest): Promise<CreateChainSwapResponse>;
     /** Requests Boltz co-signature for a submarine swap refund. Returns signed transaction + checkpoint. */
@@ -915,6 +921,15 @@ interface CreateLightningInvoiceRequest {
     amount: number;
     /** Optional description embedded in the BOLT11 invoice. */
     description?: string;
+    /**
+     * Optional SHA256 description hash (hex, 32 bytes) to commit into the
+     * BOLT11 invoice instead of a plaintext description. A BOLT11 invoice
+     * carries either a description or a description hash, never both, so when
+     * this is set `description` is ignored. Use this for flows that must bind
+     * the invoice to an external document — e.g. NIP-57 zaps, where the hash
+     * is SHA256 of the zap request and the receipt later proves the match.
+     */
+    descriptionHash?: string;
 }
 /** Response containing the created Lightning invoice and swap details. */
 interface CreateLightningInvoiceResponse {
@@ -1161,8 +1176,10 @@ interface DecodedInvoice {
     expiry: number;
     /** Invoice amount in satoshis. */
     amountSats: number;
-    /** Invoice description string. */
+    /** Invoice description string (BOLT11 `d` field; "" if none). */
     description: string;
+    /** Invoice description hash (BOLT11 `h` field, hex; "" if none). */
+    descriptionHash: string;
     /** Payment hash (hex-encoded). */
     paymentHash: string;
 }

package/dist/{types-8NrCdOpS.d.ts → types-CS62-oEy.d.ts}

@@ -144,6 +144,12 @@ type CreateReverseSwapRequest = {
     preimageHash: string;
     /** Optional description for the BOLT11 invoice. */
     description?: string;
+    /**
+     * Optional SHA256 description hash (hex, 32 bytes / 64 chars) to commit
+     * into the invoice instead of a plaintext description. BOLT11 carries one
+     * or the other, never both; when set, `description` is omitted.
+     */
+    descriptionHash?: string;
 };
 /** Response from creating a reverse swap. */
 type CreateReverseSwapResponse = {
@@ -345,7 +351,7 @@ declare class BoltzSwapProvider {
     /** Creates a submarine swap (Arkade → Lightning) on Boltz. */
     createSubmarineSwap({ invoice, refundPublicKey, }: CreateSubmarineSwapRequest): Promise<CreateSubmarineSwapResponse>;
     /** Creates a reverse swap (Lightning → Arkade) on Boltz. */
-    createReverseSwap({ invoiceAmount, claimPublicKey, preimageHash, description, }: CreateReverseSwapRequest): Promise<CreateReverseSwapResponse>;
+    createReverseSwap({ invoiceAmount, claimPublicKey, preimageHash, description, descriptionHash, }: CreateReverseSwapRequest): Promise<CreateReverseSwapResponse>;
     /** Creates a chain swap (ARK ↔ BTC) on Boltz. */
     createChainSwap({ to, from, preimageHash, feeSatsPerByte, claimPublicKey, refundPublicKey, serverLockAmount, userLockAmount, }: CreateChainSwapRequest): Promise<CreateChainSwapResponse>;
     /** Requests Boltz co-signature for a submarine swap refund. Returns signed transaction + checkpoint. */
@@ -915,6 +921,15 @@ interface CreateLightningInvoiceRequest {
     amount: number;
     /** Optional description embedded in the BOLT11 invoice. */
     description?: string;
+    /**
+     * Optional SHA256 description hash (hex, 32 bytes) to commit into the
+     * BOLT11 invoice instead of a plaintext description. A BOLT11 invoice
+     * carries either a description or a description hash, never both, so when
+     * this is set `description` is ignored. Use this for flows that must bind
+     * the invoice to an external document — e.g. NIP-57 zaps, where the hash
+     * is SHA256 of the zap request and the receipt later proves the match.
+     */
+    descriptionHash?: string;
 }
 /** Response containing the created Lightning invoice and swap details. */
 interface CreateLightningInvoiceResponse {
@@ -1161,8 +1176,10 @@ interface DecodedInvoice {
     expiry: number;
     /** Invoice amount in satoshis. */
     amountSats: number;
-    /** Invoice description string. */
+    /** Invoice description string (BOLT11 `d` field; "" if none). */
     description: string;
+    /** Invoice description hash (BOLT11 `h` field, hex; "" if none). */
+    descriptionHash: string;
     /** Payment hash (hex-encoded). */
     paymentHash: string;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arkade-os/boltz-swap",
-  "version": "0.3.44",
+  "version": "0.3.46",
   "type": "module",
   "description": "A production-ready TypeScript package that brings Boltz submarine-swaps to Arkade.",
   "main": "./dist/index.js",
@@ -76,7 +76,7 @@
     "@scure/btc-signer": "2.0.1",
     "bip68": "1.0.4",
     "light-bolt11-decoder": "3.2.0",
-    "@arkade-os/sdk": "0.4.39"
+    "@arkade-os/sdk": "0.4.41"
   },
   "peerDependencies": {
     "expo-task-manager": ">=3.0.0",