@dcasegr/amm-client 0.39.0 → 0.42.2

package/dist/client.js

@@ -15,22 +15,23 @@
  *   (`hostedTokens`): each token's price, liquidity (TVL) and pool count; no host-wide stream.
  * - **History** (0.39.0, D1–D6): `trades`, `trade`, `candles`, `stats`, `statsAll`, `holders`,
  *   `positionsAll` — plain GETs of the history routes (H1–H6, src/lib/overlay.ts).
- * - **Swap** (D11–D16): the token's pools route `GET /@<token>/amm/pools` held as an event stream
- *   (`watchTokenPools`; 0.39.0, D7: the whole answer once, then one `change` per pool change,
- *   applied to the held answer): the pools whose validator is beating and whose commission meets the
- *   market's minimum (the host's filter), the market's commission key hash; a quote is the
- *   matching engine's plan over that list (no request); a swap reads ONE `GET
- *   /@<token>/amm/pools/beef?lp=` for its legs (freshness, the pools' BEEF), then each leg's relay
- *   request (`amm.swap.submit`, held by the host until the relay rests; 15 s expiry); a lost answer
- *   is "no answer yet" with "Check again" (`GET /@<token>/amm/swaps?id=`, once).
- * - **Liquidity** (D9, D23): the wallet's pool rows and deploy history, then ONE `GET
- *   /@<token>/amm/positions?lp=` per token; a deploy the history has but the basket lacks is
- *   filed then; Close and Rebalance read their pool's BEEF by LP key (`/pools/beef?lp=`); the
- *   deploy's terms `GET /@<token>/amm/terms`.
+ * - **Swap** (D11–D16; 0.40.0; 0.41.0): the token's pools route `GET /@<token>/amm/pools`, a plain
+ *   read (`tokenPools`): the pools whose validator is beating and whose commission meets the
+ *   market's minimum (the host's filter), each validator's minimum leg, the market's commission key
+ *   hash; a quote is the matching engine's plan over that list (no request); a swap (`executeSwap`)
+ *   stages what the swap basket lacks by ONE wallet action, then per leg the pools route read fresh,
+ *   ONE `GET /@<token>/amm/pools/beef?pool=` and the leg's relay request (`amm.swap.submit`, held by
+ *   the host until the relay rests; 15 s expiry); no answer → the host's `GET /amm/spends`, once
+ *   more, a race. The pool events (`watchPoolEvents`, 0.41.0: the host's feeds) are signals for
+ *   display: a page reads the route again on one.
+ * - **Liquidity** (D9, D23; 0.40.0: by pool id): the wallet's pool rows and deploy history, then
+ *   ONE `GET /@<token>/amm/positions?pool=` per token; a deploy the history has but the basket
+ *   lacks is filed then; Close and Rebalance read their pool's BEEF by its id (`/pools/beef?pool=`);
+ *   the deploy's terms `GET /@<token>/amm/terms`.
  * - **Your tokens** (D17, D18, D19, D24): the wallet's module and the swap basket; the token list
- *   once and ONE discovery `GET /@discovery/1color/tokens?ids=` for held tokens the list lacks; a
- *   silent pass over the swap basket's staged legs (src/wallet/swapPayouts.ts); Move back submits
- *   at the host root.
+ *   once and ONE discovery `GET /@discovery/1color/tokens?ids=` for held tokens the list lacks; the
+ *   pass over the swap basket (0.40.0: ONE `GET /amm/spends` over every row,
+ *   src/wallet/swapPayouts.ts); Move back submits at the host root.
  * - **Settings** (D20, D21): the claim card (`claimStatus`: swap's identity, the recipient of
  *   root's messages), the token list once, discovery's list and ONE `?ids=` read; Enable's deploy
  *   BEEF from the wallet's basket else `GET /@discovery/1color/<token>/deploy`.
@@ -40,20 +41,20 @@
  * an outpoint is `<txid>.<vout>`. Amounts are bigints in base units; prices
  * are numbers: sats per whole token.
  */
-import { Beef, Transaction } from "@bsv/sdk";
+import { Beef, Transaction, createNonce } from "@bsv/sdk";
+import { BRC29_PROTOCOL, WALLET_PAYMENT, p2pkhHexOf } from "./wallet/brc29.js";
 import { send1Color } from "@1sat/actions";
-import { computeSwap } from "@dcasegr/amm-engine";
+import { nextLeg, priceOf } from "@dcasegr/amm-engine";
 import { outpointText, parseOutpoint, parseTokenId, sdkTokenId, tokenIdText } from "./lib/tokenId.js";
 import { DEFAULT_FEE_RATE_SATS_PER_KB, appName, exchangeBase, tokenBase } from "./lib/config.js";
-import { ammLookupService, applyPoolChange, liveOfPools, parsePools, parseTokenTopic, poolOutputOf, poolsUrl, readDiscoveryDeploy, readDiscoveryIds, readDiscoveryList, readAllPositions, readAllStats, readCandles, readHolders, readPoolsBeef, readPools, readPositions, readStats, readTerms, readTrade, readTrades, readTx, watchPools, } from "./lib/overlay.js";
-import { authFetchPerInstance, instanceBase, readDefaults, readDiscovery, readTokens, sendMessage } from "./lib/skein.js";
+import { ammLookupService, liveOfPools, parseTokenTopic, poolOutputOf, readDiscoveryDeploy, readDiscoveryIds, readDiscoveryList, readAllPositions, readAllStats, readCandles, readHolders, readPoolHistory, readPoolsAt, readPoolsBeef, readPools, readPositions, readSpendsAll, readStats, readTerms, readTrade, readTrades, readTx, eventsUrl, watchPoolEvents as watchFeed, } from "./lib/overlay.js";
+import { authFetchPerInstance, instanceBase, readDefaults, readDiscovery, readTokens, readWallet, sendMessage } from "./lib/skein.js";
 import { depthOf } from "./market/prices.js";
-import { buildPlanRequest, goneFromLookup, quote as planQuote } from "./market/plan.js";
-import { validatorStatus } from "./market/view.js";
-import { planSwapLeg, prepareSwap, selectExactSatsInput, selectExactTokenInputs } from "./market/swapAction.js";
-import { moveBack, sendSatsToSwapBasket, sendToSwapBasket, swapHoldingBeef, swapHoldings, swapSatsHoldings, swapTotals } from "./market/activeSwap.js";
-import { checkAgain, relaySwap, swapIdOf } from "./market/swapFlow.js";
-import { settleStagedSwaps } from "./wallet/swapPayouts.js";
+import { buildPlanRequest, legMinerFeeSats, quote as planQuote } from "./market/plan.js";
+import { prepareSwap, selectLegInputs } from "./market/swapAction.js";
+import { fileStagedToken, moveBack, moveBackSats, stage, swapHoldingBeef, swapHoldings, swapSatsHoldings, swapSatsTotal, swapTotals, unfiledStagedTokens } from "./market/activeSwap.js";
+import { relaySwap, swapIdOf } from "./market/swapFlow.js";
+import { resolveFromOverlay } from "./wallet/swapPayouts.js";
 import { formatAmount } from "./lp/amounts.js";
 import { basketRows } from "./lp/wallet.js";
 import { buildInventory, decodeTokenRow, deployIcon } from "./lp/inventory.js";
@@ -63,7 +64,7 @@ import { rebalancePool } from "./lp/rebalance.js";
 import { historyPoolRows, mergePoolRows, positionRowsOf } from "./lp/positions.js";
 import { POOLS_BASKET, assetBasket, heldOutputs } from "./wallet/color.js";
 import { prepareClose, submitToOverlay } from "./lp/close.js";
-import { ClientError, errorKind, kindOfOutcome, toClientError } from "./errors.js";
+import { ClientError, toClientError } from "./errors.js";
 /**
  * `amm.pool.terms`'s refusal when no terms are set (0.15.0, David Case
  * 2026-10-23: terms are a runtime record root sets; unset, a market only).
@@ -75,7 +76,7 @@ export const NO_TERMS_TEXT = "This exchange validates nothing: no terms are set.
 export function hasTerms(t) {
     return !!t && !("none" in t);
 }
-export { applyPoolChange, parseChange } from "./lib/overlay.js";
+export { parsePoolEventMessage } from "./lib/overlay.js";
 /** The metadata of the deploy output `vout` of an Atomic BEEF's subject; null when that output is no 1Color deploy. */
 function deployMetaOf(beef, vout) {
     const tx = Transaction.fromAtomicBEEF(beef);
@@ -123,6 +124,7 @@ export function hostedFrom(list, stats) {
 export function poolViews(answer, tokenId) {
     return (answer?.pools ?? []).map((p) => ({
         outpoint: outpointText(p.outpoint),
+        poolId: p.poolId,
         tokenId,
         sats: p.bsvReserve,
         tokens: p.tokenReserve,
@@ -133,13 +135,29 @@ export function poolViews(answer, tokenId) {
 export function poolFees(p) {
     return { lpBps: Number(p.liquidityFeeBps), validatorBps: Number(p.validationFeeBps), commissionBps: Number(p.commissionBps ?? 0n) };
 }
-function swapResultOf(legs) {
-    const filled = legs.filter((l) => l.status === "filled").length;
-    return { status: filled === legs.length && legs.length > 0 ? "filled" : filled === 0 ? "failed" : "partial", legs };
+/**
+ * A pools answer's rows as the planner takes them (0.40.0): each pool with its validator's
+ * minimum leg (`validators[].minLegSats`, the validator's announced terms).
+ */
+export function poolsWithMinimums(answer) {
+    const min = new Map(answer.validators.map((v) => [v.identity, v.minLegSats]));
+    return answer.pools.map((p) => {
+        const m = min.get(p.validatorIdentityKey.toLowerCase());
+        return m ? { ...p, minLegSats: m } : p;
+    });
 }
-/** A swap's result with one leg replaced (after "Check again"). */
-export function withLeg(r, leg) {
-    return swapResultOf(r.legs.map((l) => (l.poolOutpoint === leg.poolOutpoint ? leg : l)));
+/** Sats per whole token of an exact pair (`sats` per `tokens` base units), 0 when `tokens` is 0. */
+export function pairPrice(p, dec) {
+    return p.tokens > 0n ? Number(p.sats) / (Number(p.tokens) / 10 ** dec) : 0;
+}
+/**
+ * A leg's sats beyond its amount in (0.40.0, the stage's fee sats): the miner fee estimate plus its
+ * 1-sat carriers — on a buy the token payout; on a sell the token fee and commission outputs that
+ * are not zero, and the token change.
+ */
+export function legCarrySats(leg, buy, minerFeeSats) {
+    const carriers = buy ? 1n : BigInt([leg.liquidityFee, leg.validationFee, leg.commission].filter((x) => x > 0n).length + 1);
+    return minerFeeSats + carriers;
 }
 /**
  * wallet-toolbox's `specOpWalletBalance` (`sdk.specOpWalletBalance`, @bsv/wallet-toolbox-client): the listOutputs "basket" of its
@@ -224,7 +242,17 @@ export function enableCandidates(listed, walletIds, onList) {
     }
     return out;
 }
-const newShared = () => ({ listRead: null, claimRead: null, planned: new WeakMap(), checks: new Map(), loaded: new Map(), listeners: new Set() });
+/** The terms as root's messages carry them (0.40.0: `minLegSats` only when above 0). Refused unless each fee is an integer 0 to 10 000 and the minimum a whole number of sats. */
+function termsArgs(t) {
+    for (const [k, v] of Object.entries({ lpBps: t.lpBps, validatorBps: t.validatorBps, commissionBps: t.commissionBps }))
+        if (!Number.isInteger(v) || v < 0 || v > 10_000)
+            throw new Error(`${k}: an integer, 0 to 10000 basis points`);
+    const min = t.minLegSats ?? 0;
+    if (!Number.isSafeInteger(min) || min < 0)
+        throw new Error("minLegSats: a whole number of sats, 0 for none");
+    return { lpFeeBps: t.lpBps, validatorFeeBps: t.validatorBps, commissionBps: t.commissionBps, ...(min > 0 ? { minLegSats: min } : {}) };
+}
+const newShared = () => ({ listRead: null, claimRead: null, planned: new WeakMap(), swapping: false, loaded: new Map(), listeners: new Set() });
 /**
  * The client of one exchange (D9): its reads over `origin` (src/lib/overlay.ts, src/lib/skein.ts),
  * the swap flow, the pool flows (deploy, close, rebalance, move back, positions) and the wallet
@@ -244,7 +272,6 @@ function makeClient(opts, s) {
     const boundWallet = opts.wallet ?? null;
     const signedFor = boundWallet ? (opts.signedFor ?? authFetchPerInstance(boundWallet, f)) : null;
     const planned = s.planned;
-    const checks = s.checks;
     const loaded = s.loaded;
     function needWallet() {
         if (!boundWallet || !signedFor)
@@ -470,16 +497,20 @@ function makeClient(opts, s) {
         const [list, stats] = await Promise.all([enabledList(), statsAll().catch(() => null)]);
         return hostedFrom(list, stats);
     }
+    /** P2 (0.41.0): a token's pools as the host lists them now, read past the browser's cache (`freshFetch`). */
+    async function tokenPools(tokenId) {
+        return readPools(tokenBase(tokenId, swapBase), freshFetch);
+    }
     /**
-     * A token's pools route held as an event stream (D16; 0.39.0, D7): the whole answer (`pools`)
-     * held, each `change` applied to it (`applyPoolChange`), one it cannot apply → the route read once
-     * again; each new answer to `onAnswer`. → the unsubscribe.
+     * The host's pool event feed (E1, 0.41.0): one token's (`GET /@<token>/amm/events`) or, with
+     * `"all"`, every enabled token's (`GET <origin>/amm/events`); each message `{tokenId, …row}` to
+     * `onEvent`. Signals for display: the pools route is the truth. → the unsubscribe.
      */
-    function watchTokenPools(tokenId, onAnswer, onError) {
-        return watchPools(poolsUrl(tokenBase(tokenId, swapBase)), parsePools, onAnswer, { ...(onError ? { onError } : {}), fetch: f, change: applyPoolChange });
+    function watchPoolEvents(tokenId, onEvent, onError) {
+        return watchFeed(eventsUrl(tokenId === "all" ? swapBase : tokenBase(tokenId, swapBase)), onEvent, onError ? { onError } : {});
     }
     // ---------------------------------------------------------------- history (0.39.0, H1–H6)
-    /** H1: a token's trades, newest first (`from ≤ at < to` ms, `limit` 1–500, `before` the cursor `next`, `lp` one LP key's). */
+    /** H1: a token's trades, newest first (`from ≤ at < to` ms, `limit` 1–500, `before` the cursor `next`, 0.40.0 `pool` one pool's by id). */
     async function trades(tokenId, o = {}) {
         return readTrades(tokenBase(tokenId, swapBase), o, ff);
     }
@@ -487,107 +518,128 @@ function makeClient(opts, s) {
     async function trade(tokenId, txid) {
         return readTrade(tokenBase(tokenId, swapBase), txid, ff);
     }
-    /** H2: a token's candles, one per non-empty bucket of `tf` over `from ≤ at < to` (ms). */
+    /** H2: a token's candles, one per non-empty bucket of `tf` over `from ≤ at < to` (ms); 0.40.0 `series`: `fill` (the trades', default) or `market` (the price after each pool event, the host's). */
     async function candles(tokenId, o) {
         return readCandles(tokenBase(tokenId, swapBase), o, ff);
     }
+    /** H7 (0.40.0): every pool of the token listed at `t` (ms). */
+    async function poolsAt(tokenId, t) {
+        return readPoolsAt(tokenBase(tokenId, swapBase), t, ff);
+    }
+    /** H8 (0.40.0): the token's pool events in `from ≤ at < to`, oldest first (`pool` one pool's; forward paging: the page's `next` as `after`). */
+    async function poolHistory(tokenId, o = {}) {
+        return readPoolHistory(tokenBase(tokenId, swapBase), o, ff);
+    }
+    /** H9 (0.40.0): each outpoint's spender as the host's `/amm/spends` answers it (every enabled token's `/spends`). */
+    async function spendsAll(outpoints) {
+        return readSpendsAll(swapBase, outpoints, ff);
+    }
     /** H3: a token's stats. */
     async function stats(tokenId) {
         return readStats(tokenBase(tokenId, swapBase), ff);
     }
     /** H4: every enabled token's stats (`ids`: those only, in that order). */
     async function statsAll(o = {}) {
-        return readAllStats(swapBase, o.ids, ff);
+        return readAllStats(swapBase, o.ids, o.fresh ? freshFetch : ff);
     }
     /** H6: a token's holders, largest first (`limit` 1–100, `skip`). */
     async function holders(tokenId, o = {}) {
         return readHolders(tokenBase(tokenId, swapBase), tokenId, o, ff);
     }
-    /** H5: the LP keys' positions on every enabled token. */
-    async function positionsAll(lpKeys) {
-        return readAllPositions(swapBase, lpKeys, ff);
+    /** H5: the pools' positions on every enabled token (0.40.0: by pool id). */
+    async function positionsAll(poolIds) {
+        return readAllPositions(swapBase, poolIds, ff);
     }
     /**
      * A quote for one token (D12): the matching engine's plan over the pools the Swap page holds
      * (`held`: the token's pools route's answer — the host listed only pools whose validator is beating
-     * and whose commission meets the market's minimum); no request. `meta`: the token's symbol and
-     * decimals.
+     * and whose commission meets the market's minimum), each pool with its validator's minimum leg
+     * (0.40.0); no request. `meta`: the token's symbol and decimals. 0.40.0: the price and impact from
+     * the engine's `priceOf` over the same pools (the buy side for a buy, the sell side for a sell);
+     * each leg's own fees; what Swap will stage (the swap amount exact, 0.40.2: the fee sats of
+     * `maxSources` legs) and the per-leg miner fee estimate.
      */
     function quoteSwap(req, held, meta) {
         if (req.amountIn <= 0n)
             throw new Error("Enter an amount");
-        const pools = held?.pools ?? [];
-        if (pools.length === 0)
+        if (!held || held.pools.length === 0)
             throw new Error("No pool to swap against");
+        const pools = poolsWithMinimums(held);
         const live = liveOfPools(pools);
         const dec = meta.dec;
         const buy = req.side === "buy";
-        const r = buildPlanRequest(req.tokenId, { direction: buy ? "bsvToToken" : "tokenToBsv", amount: formatAmount(req.amountIn, buy ? 0 : dec), slippageBps: String(req.maxSlippageBps), allowPartial: req.allowPartial }, pools, live, dec, feeRate);
+        const r = buildPlanRequest(req.tokenId, { direction: buy ? "bsvToToken" : "tokenToBsv", amount: formatAmount(req.amountIn, buy ? 0 : dec), slippageBps: String(req.maxSlippageBps), maxSources: req.maxSources }, pools, live, dec, feeRate);
         if (!r.ok)
             throw new Error(r.error);
         const { plan, view } = planQuote(r.request, live, dec);
+        if (plan.unfillable === "min")
+            throw new ClientError("below_minimum", `No pool here takes a swap this small: at least ${formatAmount(plan.minAmountIn ?? 0n, buy ? 0 : dec)} ${buy ? "sats" : meta.sym}.`);
         const used = view.legs.filter((l) => l.amountIn > 0n);
         if (used.length === 0 || view.totalOut === 0n)
             throw new Error("The amount is too small to receive anything");
-        const sumSats = pools.reduce((a, p) => a + p.bsvReserve, 0n);
-        const sumTokens = pools.reduce((a, p) => a + p.tokenReserve, 0n);
-        const marginal = sumTokens > 0n ? Number(sumSats) / (Number(sumTokens) / 10 ** dec) : 0;
+        const price = priceOf(pools);
+        const marginal = price ? pairPrice(buy ? price.buy : price.sell, dec) : 0;
         const totalIn = used.reduce((a, l) => a + l.amountIn, 0n);
         const sats = buy ? totalIn : view.totalOut;
         const tokens = buy ? view.totalOut : totalIn;
         const effective = Number(sats) / (Number(tokens) / 10 ** dec);
-        const first = used[0].pool;
+        const minerFee = legMinerFeeSats(feeRate);
+        const carry = plan.legs.map((l) => legCarrySats(l, buy, minerFee));
+        // 0.40.2: the fee sats for EXACTLY maxSources legs — the planned legs' own, each further leg at the largest of theirs.
+        const more = BigInt(Math.max(0, req.maxSources - carry.length));
+        const feeSats = carry.reduce((a, x) => a + x, 0n) + more * carry.reduce((a, x) => (x > a ? x : a), 0n);
         const q = {
             request: req,
             legs: used.map((l) => ({
                 poolOutpoint: outpointText(l.outpoint),
+                poolId: l.pool.poolId,
                 amountIn: l.amountIn,
                 amountOut: l.amountOut,
                 shareBps: Number((l.amountIn * 10000n) / req.amountIn),
                 reserves: { sats: l.pool.bsvReserve, tokens: l.pool.tokenReserve },
                 validator: { identityKey: l.pool.validatorIdentityKey, live: l.validator.live },
+                fees: poolFees(l.pool),
             })),
             amountOut: view.totalOut,
             minAmountOut: view.minAmountOut,
             effectivePrice: effective,
             marginalPrice: marginal,
             impactBps: marginal ? Math.round((Math.abs(effective - marginal) / marginal) * 10_000) : 0,
-            fees: { lpBps: Number(first.liquidityFeeBps), validatorBps: Number(first.validationFeeBps), commissionBps: Number(first.commissionBps ?? 0n) },
+            stage: { amount: req.amountIn, feeSats },
+            legMinerFeeSats: minerFee,
         };
-        planned.set(q, { plan, pools, live, market: held.market, dec, sym: meta.sym });
+        planned.set(q, { plan, answer: held, dec, sym: meta.sym });
         return q;
     }
-    /** A relay outcome on a leg's result (0.31.1's mapping; 0.34.0: no answer carries its id for "Check again"). */
-    function onLeg(result, o, prepared, base, af) {
-        delete result.checkId;
-        if (o.status === "accepted") {
-            result.status = "filled";
-            result.txid = o.txid;
-            delete result.error;
-            delete result.kind;
-            checks.delete(o.id);
-            return;
-        }
-        result.status = "failed";
-        const kind = kindOfOutcome(o);
-        if (kind)
-            result.kind = kind;
-        const rest = o.status === "unknown" ? o.reason.replace(/^no answer yet:? ?/, "") : "";
-        result.error = o.status === "refused" ? `refused: ${o.reason}` : o.status === "unknown" ? `no answer yet${rest ? `: ${rest}` : ""}` : o.status;
-        if (o.status === "unknown") {
-            result.checkId = o.id;
-            checks.set(o.id, { prepared, base, af });
-        }
-        else if ("id" in o)
-            checks.delete(o.id);
+    /** The overlay pass over the swap basket (item 5, src/wallet/swapPayouts.ts): ONE `/amm/spends`, each spender's `/tx`, this wallet's legs taken in. */
+    function resolve(wallet) {
+        return resolveFromOverlay(wallet, { spendsAll: (ops) => readSpendsAll(swapBase, ops, freshFetch), tx: (tokenId, txid) => readTx(tokenBase(tokenId, swapBase), txid, freshFetch) });
     }
     /**
-     * Runs a quoted swap with the connected wallet (D14, D15): ONE `GET /@<token>/amm/pools/beef?lp=`
-     * for the legs' LP keys — a leg whose key is missing or whose outpoint moved is gone since the
-     * quote (as before 0.34.0) — the commission key hash and each validator's peer ID from the pools
-     * the page holds; then one transaction per leg, relayed to the leg's validator (`amm.swap.submit`,
-     * its answer the settled record), the payout taken in on acceptance. A planned pool gone stops the
-     * swap unless partial fills are allowed.
+     * Runs a quoted swap with the connected wallet (0.40.0, agent-env plans/swap-balance-build-2026-11-05.md
+     * §0 7, Builder 2 item 4): ONE swap at a time, legs ONE AT A TIME.
+     *
+     *   1. The overlay pass (`resolve`); then what `amm-swap` lacks of what the plan needs — the swap
+     *      amount exact, the sats for the carriers and miner fees of `maxSources` legs —
+     *      staged by ONE `stage` (`staging`).
+     *   2. The loop: cancelled → `cancelled`; the SERVER's pool list read fresh (`GET
+     *      /@<token>/amm/pools`, no cache; 0.41.0: before EACH leg, no list of its own kept);
+     *      `nextLeg` over it minus the excluded outpoints, `minOut` the quote's floor less what has
+     *      filled, `maxSources` (0.40.2) the request's less the legs filled → its stop ends the swap;
+     *      the pool's current output read by its id (`GET /pools/beef?pool=`; moved → the list read
+     *      again); the staged rows that cover the leg, else `fees`; built, signed, relayed
+     *      (`relaying`):
+     *      - accepted → taken in (ONE internalizeAction) before the next leg;
+     *      - refused `pool_spent` (`repricing`) → the list read again: the relaying host took the
+     *        validator's state in before it answered (0.41.0);
+     *      - refused otherwise (`below_minimum` included) → that outpoint excluded;
+     *      - no answer → (a) the overlay: a staged input spent → the leg landed (taken in by the
+     *        pass), the pool spent by another's swap → continue with the same rows; (b) else the
+     *        same leg sent ONCE more to the same validator; (c) still none → that outpoint excluded
+     *        (the next leg races it with the same rows);
+     *      - after any refusal: the overlay pass.
+     *   3. Filled completely: the last leg's change went to the wallet, nothing left. Stopped early with
+     *      rows left: `moveBack` (one wallet action, `returning`); declined or failed → the rows stay.
      */
     async function executeSwap(quote, o = {}) {
         const progress = (x) => {
@@ -598,26 +650,26 @@ function makeClient(opts, s) {
                 /* the caller's callback: not the swap's failure */
             }
         };
+        if (s.swapping)
+            throw new Error("A swap is already running: one at a time");
+        s.swapping = true;
         let result;
         try {
-            result = await runSwap(quote, progress);
+            result = await runSwap(quote, progress, o.signal);
         }
         catch (e) {
             const err = toClientError(e);
             progress({ phase: "failed", error: err instanceof Error ? err : new Error(String(err)) });
             throw err;
         }
+        finally {
+            s.swapping = false;
+        }
+        emit();
         progress(result.status === "failed" ? { phase: "failed", result } : { phase: "done", result });
         return result;
     }
-    /** A leg failed with `e`: its text, and its kind when it has one (D13). */
-    function failLeg(result, e) {
-        result.error = errText(e);
-        const kind = errorKind(e);
-        if (kind)
-            result.kind = kind;
-    }
-    async function runSwap(quote, progress) {
+    async function runSwap(quote, progress, signal) {
         const { wallet, signedFor } = needWallet();
         const p = planned.get(quote);
         if (!p)
@@ -625,212 +677,153 @@ function makeClient(opts, s) {
         const tokenId = quote.request.tokenId;
         const base = tokenBase(tokenId, swapBase);
         const af = signedFor(base);
-        const lpOf = (outpoint) => p.pools.find((x) => x.outpoint === outpoint)?.lpPubKey ?? "";
-        const keys = [...new Set(p.plan.legs.map((l) => lpOf(l.outpoint)).filter((k) => k !== ""))];
-        const fresh = await readPoolsBeef(base, keys, freshFetch);
-        const gone = goneFromLookup(p.plan, fresh.pools);
-        if (gone.length > 0 && !quote.request.allowPartial)
-            throw new ClientError("pool_spent", `${gone.map(outpointText).join(", ")} ${gone.length === 1 ? "was" : "were"} spent since the quote: quote again`);
-        const commissionPkh = p.market.commissionPkh;
-        const direction = quote.request.side === "buy" ? "bsvToToken" : "tokenToBsv";
+        const buy = quote.request.side === "buy";
+        const direction = buy ? "bsvToToken" : "tokenToBsv";
+        const minerFee = legMinerFeeSats(feeRate);
+        const meta = { sym: p.sym, dec: p.dec };
+        // 0.41.0: the server's list, read fresh before each leg; the outpoints excluded (a pool that refused other than pool_spent, or did not answer).
+        const excluded = new Set();
+        /** 0.40.2: the legs the order may still fill (the request's maxSources less the legs filled). */
+        let budget = quote.request.maxSources;
         const legs = [];
-        const running = [];
-        // The legs that can run: not spent since the quote, their validator live.
-        const runnable = [];
-        for (const leg of p.plan.legs) {
-            const poolOutpoint = outpointText(leg.outpoint);
-            if (gone.includes(leg.outpoint)) {
-                legs.push({ poolOutpoint, status: "failed", error: "spent since the quote", kind: "pool_spent" });
-                continue;
-            }
-            const pool = p.pools.find((x) => x.outpoint === leg.outpoint);
-            const validator = validatorStatus(pool.validatorIdentityKey, p.live);
-            if (!validator.live || !validator.peerId) {
-                legs.push({ poolOutpoint, status: "failed", error: "the pool's validator is no longer live" });
-                continue;
+        let filledIn = 0n;
+        let filledOut = 0n;
+        let order;
+        /** Legs sent with no answer yet: what they spend, to account a later take-in by the overlay pass. */
+        const pending = [];
+        const accountResolved = (taken) => {
+            for (const t of taken) {
+                const i = pending.findIndex((x) => x.prepared.satsInputs.some((r) => t.inputs.includes(r.outpoint)));
+                if (i < 0)
+                    continue;
+                const [x] = pending.splice(i, 1);
+                order ??= x.prepared.order;
+                budget -= 1;
+                filledIn += x.leg.amountIn;
+                filledOut += x.leg.amountOut;
+                legs.push({ poolOutpoint: outpointText(x.leg.outpoint), poolId: x.poolId, amountIn: x.leg.amountIn, amountOut: x.leg.amountOut, txid: t.txid });
             }
-            const result = { poolOutpoint, status: "failed" };
-            legs.push(result);
-            runnable.push({ leg, result, pool, peerId: validator.peerId });
+        };
+        accountResolved(await resolve(wallet));
+        // 1. Stage what the basket lacks.
+        const needTokens = buy ? 0n : quote.stage.amount;
+        const needSats = (buy ? quote.stage.amount : 0n) + quote.stage.feeSats;
+        const haveSats = BigInt(await swapSatsTotal(wallet));
+        const haveTokens = buy ? 0n : (await swapHoldings(wallet, tokenId)).reduce((a, t) => a + t.amount, 0n);
+        const lackSats = needSats > haveSats ? needSats - haveSats : 0n;
+        const lackTokens = needTokens > haveTokens ? needTokens - haveTokens : 0n;
+        if (lackSats > 0n || lackTokens > 0n) {
+            progress({ phase: "staging", sats: lackSats, tokens: lackTokens });
+            await stage(wallet, { sats: Number(lackSats), ...(lackTokens > 0n ? { tokens: { tokenId, amount: lackTokens } } : {}) }, { sym: p.sym, submit: submitAt(base) });
         }
-        // 0.29.0: every leg spends only `amm-swap` outputs — tokens in, outputs carrying exactly its
-        // amount in (0.12.0); and one sats output of exactly the leg's sats. What the basket does not
-        // cover is staged by ONE send (tokens missing: the module send, the sats with it; else a plain
-        // sats send), then each leg is built from the basket.
-        const tokensIn = direction === "tokenToBsv";
-        if (runnable.length > 0)
-            progress({ phase: "staging" });
-        let tokenCandidates = tokensIn && runnable.length > 0 ? await swapHoldings(wallet, tokenId) : [];
-        let satsCandidates = runnable.length > 0 ? await swapSatsHoldings(wallet) : [];
-        const staged = [];
-        for (const r of runnable) {
-            try {
-                const poolOutput = poolOutputOf(fresh, r.leg.outpoint);
-                if (!poolOutput)
-                    throw new Error("the pools read has no transaction for this pool");
-                let tokens = null;
-                if (tokensIn) {
-                    tokens = selectExactTokenInputs(tokenCandidates, r.leg.amountIn);
-                    if (tokens)
-                        tokenCandidates = tokenCandidates.filter((c) => !tokens.includes(c));
-                }
-                // A leg whose tokens are still to be staged gets one output of 1 sat (sendToSwapBasket).
-                const planned = await planSwapLeg({ wallet, tokenId, meta: { sym: p.sym, dec: p.dec }, direction, leg: r.leg, pool: r.pool, poolOutput, commissionPkh, ...(tokensIn ? { tokenInputs: tokens ?? [{ satoshis: 1, amount: r.leg.amountIn }] } : {}), satsPerKb: feeRate });
-                const sats = selectExactSatsInput(satsCandidates, planned.funding.satoshis);
-                if (sats)
-                    satsCandidates = satsCandidates.filter((c) => c !== sats);
-                staged.push({ r, poolOutput, planned, tokens, sats });
+        // 2. The loop.
+        let why = "filled";
+        for (;;) {
+            if (signal?.aborted) {
+                why = "cancelled";
+                break;
             }
-            catch (e) {
-                failLeg(r.result, e);
+            const remaining = quote.request.amountIn - filledIn;
+            const answer = await tokenPools(tokenId);
+            const pools = poolsWithMinimums(answer).filter((r) => !excluded.has(r.outpoint));
+            const minOut = quote.minAmountOut > filledOut ? quote.minAmountOut - filledOut : 0n;
+            const next = nextLeg({ pools, direction, remaining, fixedCost: { minerFeeSats: minerFee }, minOut, maxSources: budget });
+            if ("stop" in next) {
+                why = next.stop;
+                break;
             }
-        }
-        const shortTokens = staged.filter((x) => tokensIn && !x.tokens);
-        const shortSats = staged.filter((x) => !x.sats);
-        let sent;
-        if (shortTokens.length > 0) {
-            const s = await sendToSwapBasket(wallet, base, tokenId, { tokens: shortTokens.map((x) => ({ amount: x.r.leg.amountIn, pool: x.r.leg.outpoint })), sats: shortSats.map((x) => ({ satoshis: x.planned.funding.satoshis, pool: x.r.leg.outpoint })) }, { sym: p.sym }, submitAt(base));
-            sent = s.tx;
-            const why = s.errors.length ? ` (${s.errors.join("; ")})` : "";
-            shortTokens.forEach((x, n) => {
-                const h = s.holdings[n];
-                if (h)
-                    x.tokens = [h];
-                else
-                    x.r.result.error = `the swap basket send has no output for this leg${why}`;
-            });
-            shortSats.forEach((x, n) => {
-                const h = s.sats[n];
-                if (h)
-                    x.sats = h;
-                else
-                    x.r.result.error ??= `the swap basket send has no sats output for this leg${why}`;
-            });
-        }
-        else if (shortSats.length > 0) {
-            const s = await sendSatsToSwapBasket(wallet, tokenId, shortSats.map((x) => ({ satoshis: x.planned.funding.satoshis, pool: x.r.leg.outpoint })), { sym: p.sym });
-            sent = s.tx;
-            const why = s.errors.length ? ` (${s.errors.join("; ")})` : "";
-            shortSats.forEach((x, n) => {
-                const h = s.sats[n];
-                if (h)
-                    x.sats = h;
-                else
-                    x.r.result.error = `the swap basket send has no sats output for this leg${why}`;
-            });
-        }
-        const holdingBeef = staged.length > 0 ? await swapHoldingBeef(wallet, sent) : undefined;
-        // The legs sent to the relay: their expected amountOut, and whether their outcome is known.
-        const tracks = [];
-        /** Relays the leg (0.34.0: no browser note; the staged rows are the leg's record, D24). */
-        const relayLeg = (prepared, peerId) => relaySwap({ wallet, authFetch: af, base }, prepared, peerId).catch((e) => ({ status: "unknown", id: swapIdOf(prepared), reason: errText(e) }));
-        /**
-         * 0.31.1: one retry of a leg refused `pool_spent` — re-quoted alone against the validator's
-         * newest pool state (the engine's single-pool math, same side and amountIn), sent only while
-         * the order's bound holds (filled legs + this one + the legs still out ≥ the plan's
-         * resolvedMinAmountOut), rebuilt on the new pool output with the same staged rows (0.34.0: its
-         * BEEF from `GET /pools/beef?lp=<the pool's LP key>`, constant along its continuations). Null:
-         * the leg failed here (its error set); else the second relay's outcome.
-         */
-        const retryLeg = async (x) => {
-            const { track, pool } = x;
-            const result = track.result;
-            const priced = computeSwap(pool, direction, x.leg.amountIn);
-            const amountOut = priced?.amountOut ?? 0n;
-            const others = tracks.filter((t) => t !== track).reduce((a, t) => a + (t.result.status === "filled" || !t.done ? t.amountOut : 0n), 0n);
-            if (!priced || others + amountOut < p.plan.resolvedMinAmountOut) {
-                result.error = `repriced below your minimum: ${formatAmount(amountOut, direction === "bsvToToken" ? p.dec : 0)} for this leg`;
-                result.kind = "slippage";
-                return null;
+            const leg = next.leg;
+            const row = pools.find((x) => x.outpoint === leg.outpoint);
+            const fresh = await readPoolsBeef(base, [row.poolId], freshFetch);
+            const now = fresh.pools.find((x) => x.poolId === row.poolId);
+            if (!now) {
+                excluded.add(row.outpoint);
+                continue;
             }
-            let peerId = x.peerId;
-            if (pool.validatorIdentityKey !== x.was.validatorIdentityKey) {
-                const v = validatorStatus(pool.validatorIdentityKey, p.live);
-                if (!v.live || !v.peerId) {
-                    result.error = "the pool's validator changed";
-                    return null;
-                }
-                peerId = v.peerId;
+            // Moved since the list was read: read the list again.
+            if (now.outpoint !== row.outpoint)
+                continue;
+            const poolOutput = poolOutputOf(fresh, leg.outpoint);
+            const peerId = row.validatorPeerId ?? answer.validators.find((v) => v.identity === row.validatorIdentityKey.toLowerCase())?.peerId;
+            if (!poolOutput || !peerId) {
+                excluded.add(row.outpoint);
+                continue;
             }
-            const leg = { outpoint: pool.outpoint, amountIn: x.leg.amountIn, ...priced };
-            try {
-                const poolOutput = poolOutputOf(await readPoolsBeef(base, [x.was.lpPubKey], freshFetch), pool.outpoint);
-                if (!poolOutput)
-                    throw new Error("the pool moved again: quote again");
-                const common = { wallet, tokenId, meta: { sym: p.sym, dec: p.dec }, direction, leg, pool, poolOutput, commissionPkh, ...(x.tokens ? { tokenInputs: x.tokens } : {}), satsPerKb: feeRate };
-                const planned = await planSwapLeg(common);
-                const prepared = await prepareSwap({ ...common, satsInput: x.sats, ...(holdingBeef ? { holdingBeef } : {}), planned });
-                track.amountOut = amountOut;
-                result.repriced = true;
-                return { o: await relayLeg(prepared, peerId), prepared };
+            const common = { wallet, tokenId, meta, direction, leg, pool: row, poolOutput, commissionPkh: answer.market.commissionPkh, satsPerKb: feeRate };
+            const inputs = selectLegInputs(common, await swapSatsHoldings(wallet), buy ? [] : await swapHoldings(wallet, tokenId));
+            if (!inputs) {
+                why = "fees";
+                break;
             }
-            catch (e) {
-                failLeg(result, e);
-                return null;
+            const prepared = await prepareSwap({ ...common, inputs, ...(order ? { order } : {}), last: leg.amountIn === remaining, holdingBeef: await swapHoldingBeef(wallet) });
+            const at = { leg: outpointText(leg.outpoint), amountIn: leg.amountIn, amountOut: leg.amountOut };
+            progress({ phase: "relaying", ...at, filled: [...legs] });
+            let outcome = await relayLeg(wallet, af, base, prepared, peerId);
+            if (outcome.status === "unknown" || outcome.status === "timeout") {
+                // (a) The overlay: what the leg spends.
+                const spent = await readSpendsAll(swapBase, [outpointText(leg.outpoint), ...inputs.sats.map((r) => r.outpoint), ...inputs.tokens.map((r) => r.outpoint)], freshFetch).catch(() => []);
+                const ours = spent.find((x) => x.spentBy && x.outpoint !== outpointText(leg.outpoint));
+                if (ours) {
+                    pending.push({ prepared, leg, poolId: row.poolId });
+                    accountResolved(await resolve(wallet));
+                    continue;
+                }
+                if (spent.some((x) => x.spentBy && x.outpoint === outpointText(leg.outpoint)))
+                    continue;
+                // (b) Once more to the same validator.
+                outcome = await relayLeg(wallet, af, base, prepared, peerId);
+                if (outcome.status === "unknown" || outcome.status === "timeout") {
+                    // (c) Race: the next leg to another pool with the same rows.
+                    pending.push({ prepared, leg, poolId: row.poolId });
+                    excluded.add(row.outpoint);
+                    continue;
+                }
             }
-        };
-        for (const { r, poolOutput, planned, tokens, sats } of staged) {
-            const { leg, result, pool, peerId } = r;
-            if (tokensIn && !tokens) {
-                result.error ??= `no ${p.sym} in the swap basket for exactly ${formatAmount(leg.amountIn, p.dec)}`;
+            if (outcome.status === "accepted") {
+                if (!outcome.completed.internalized) {
+                    pending.push({ prepared, leg, poolId: row.poolId });
+                    accountResolved(await resolve(wallet));
+                    continue;
+                }
+                order ??= prepared.order;
+                budget -= 1;
+                filledIn += leg.amountIn;
+                filledOut += leg.amountOut;
+                legs.push({ poolOutpoint: at.leg, poolId: row.poolId, amountIn: leg.amountIn, amountOut: leg.amountOut, txid: outcome.txid });
                 continue;
             }
-            if (!sats) {
-                result.error ??= `no sats in the swap basket for this leg`;
-                continue;
+            if (outcome.status === "refused" && outcome.reason.startsWith("pool_spent")) {
+                // The relaying host took the validator's state in before it answered: the next read lists it.
+                progress({ phase: "repricing", ...at, filled: [...legs] });
             }
-            try {
-                const prepared = await prepareSwap({ wallet, tokenId, meta: { sym: p.sym, dec: p.dec }, direction, leg, pool, poolOutput, commissionPkh, ...(tokens ? { tokenInputs: tokens } : {}), satsInput: sats, ...(holdingBeef ? { holdingBeef } : {}), planned, satsPerKb: feeRate });
-                const track = { result, amountOut: leg.amountOut, done: false };
-                tracks.push(track);
-                running.push((async () => {
-                    progress({ phase: "relaying", leg: result.poolOutpoint });
-                    let o = await relayLeg(prepared, peerId);
-                    let sentAs = prepared;
-                    // 0.31.1: refused `pool_spent` with the pool's newest state attached → repriced against
-                    // that state and sent once more (the staged `amm-swap` rows are still there).
-                    if (o.status === "refused" && o.reason.startsWith("pool_spent") && o.pool) {
-                        progress({ phase: "repricing", leg: result.poolOutpoint });
-                        const again = await retryLeg({ leg, track, was: pool, pool: o.pool, peerId, tokens, sats });
-                        if (!again) {
-                            track.done = true;
-                            return;
-                        }
-                        o = again.o;
-                        sentAs = again.prepared;
-                    }
-                    track.done = true;
-                    onLeg(result, o, sentAs, base, af);
-                })());
+            else {
+                excluded.add(row.outpoint);
             }
-            catch (e) {
-                failLeg(result, e);
+            accountResolved(await resolve(wallet));
+        }
+        // 3. The end.
+        const out = { status: filledIn >= quote.request.amountIn ? "filled" : legs.length > 0 ? "partial" : "failed", stop: why, legs, totalIn: filledIn, totalOut: filledOut, unfilled: quote.request.amountIn - filledIn };
+        if (why !== "filled" && pending.length === 0) {
+            const left = (await swapSatsHoldings(wallet)).length + (await swapHoldings(wallet, tokenId)).length;
+            if (left > 0) {
+                progress({ phase: "returning", filled: [...legs] });
+                try {
+                    const m = await moveBack({ wallet, base: swapBase, tokenId, meta: { sym: p.sym }, submit: submitAt(swapBase) });
+                    out.returned = { txid: m.txid, tokens: m.amount };
+                }
+                catch (e) {
+                    out.returned = { error: errText(e) };
+                }
             }
         }
-        await Promise.all(running);
-        emit();
-        return swapResultOf(legs);
+        return out;
+    }
+    /** One relay of a prepared leg (0.34.0: no browser note); a thrown error is no answer. */
+    function relayLeg(wallet, af, base, prepared, peerId) {
+        return relaySwap({ wallet, authFetch: af, base }, prepared, peerId).catch((e) => ({ status: "unknown", id: swapIdOf(prepared), reason: errText(e) }));
     }
     /** A plain GET past the browser's short cache (`state` class: max-age 5): what a swap is about to spend must be read now. */
     const freshFetch = (url, init) => f(url, { ...init, cache: "no-cache" });
-    /**
-     * "Check again" (D15) for a leg with no answer yet: its record read ONCE (`GET
-     * /@<token>/amm/swaps?id=`, plain), acted on (accepted: the payout taken in). → the leg's result
-     * now (`poolOutpoint` as given).
-     */
-    async function checkSwapAgain(leg) {
-        const { wallet } = needWallet();
-        const id = leg.checkId;
-        const c = id ? checks.get(id) : undefined;
-        if (!id || !c)
-            throw new Error("Nothing to check: this leg is not waiting on an answer here");
-        const o = await checkAgain({ wallet, authFetch: c.af, base: c.base, fetch: freshFetch }, c.prepared, id);
-        const next = { poolOutpoint: leg.poolOutpoint, status: "failed", ...(leg.repriced ? { repriced: true } : {}) };
-        onLeg(next, o, c.prepared, c.base, c.af);
-        if (next.status === "filled")
-            emit();
-        return next;
-    }
     /** The connected wallet's spendable sats: the toolbox's balance special operation (`Wallet.balance()`'s call), its `totalOutputs`; a page may not read the admin-only `default` basket. */
     async function walletSats() {
         const { wallet } = needWallet();
@@ -853,15 +846,16 @@ function makeClient(opts, s) {
         const [poolRows, history, list] = await Promise.all([basketRows(wallet, POOLS_BASKET), historyPoolRows(wallet), enabledList().catch(() => [])]);
         const enabled = new Map(list.filter((t) => t.status === "enabled").map((t) => [t.tokenId, t]));
         const filed = new Set(poolRows.map((r) => r.outpoint.replace("_", ".")));
-        // The rows by token, one per LP key (the pool's key for its life: a filed row and a history row of one pool are one).
+        // The rows by token, one per pool id (0.40.0: the deploy outpoint is the pool's id).
         const byToken = new Map();
         for (const row of positionRowsOf(mergePoolRows(history, poolRows))) {
             if (!row.lpPubKey || !enabled.has(row.tokenId))
                 continue;
-            const keys = byToken.get(row.tokenId) ?? new Map();
-            if (!keys.has(row.lpPubKey))
-                keys.set(row.lpPubKey, row);
-            byToken.set(row.tokenId, keys);
+            const ids = byToken.get(row.tokenId) ?? new Map();
+            const poolId = row.deployOutpoint.replace(".", "_");
+            if (!ids.has(poolId))
+                ids.set(poolId, row);
+            byToken.set(row.tokenId, ids);
         }
         const out = [];
         const closed = [];
@@ -879,10 +873,12 @@ function makeClient(opts, s) {
             const meta = { sym: t?.sym ?? tokenId.slice(0, 8), dec: t?.dec ?? 0, ...(t?.icon ? { icon: t.icon } : {}) };
             const beating = new Set((await readPools(base, f).catch(() => null))?.validators.map((x) => x.identity) ?? []);
             for (const p of pools) {
-                const row = keys.get(p.lpPubKey);
+                const row = keys.get(p.poolId);
                 const fees = { feesEarnedSats: p.sats, feesEarnedTokens: p.tokens };
+                if (!row)
+                    continue;
                 if (p.status === "closed" || !p.outpoint || !p.current) {
-                    closed.push({ outpoint: row.deployOutpoint, tokenId, ...meta, sats: 0n, tokens: 0n, validator: { identityKey: row.validatorIdentity ?? "", live: false }, closed: true, ...fees });
+                    closed.push({ outpoint: row.deployOutpoint, poolId: p.poolId, swaps: p.swaps, tokenId, ...meta, sats: 0n, tokens: 0n, validator: { identityKey: row.validatorIdentity ?? "", live: false }, closed: true, ...fees });
                     continue;
                 }
                 const outpoint = p.outpoint.replace("_", ".");
@@ -892,6 +888,8 @@ function makeClient(opts, s) {
                     await fileDeployRow(wallet, base, history, outpoint, meta);
                 out.push({
                     outpoint,
+                    poolId: p.poolId,
+                    swaps: p.swaps,
                     tokenId,
                     ...meta,
                     sats: p.current.bsvReserve,
@@ -939,7 +937,7 @@ function makeClient(opts, s) {
         const t = (await instanceTerms(tokenId)).validator;
         if (!t)
             return { none: true };
-        return { validator: { identityKey: t.identity, live: Boolean(t.peerId) }, isThisExchange: true, fees: { lpBps: t.lpFeeBps, validatorBps: t.validatorFeeBps, commissionBps: t.commissionBps } };
+        return { validator: { identityKey: t.identity, live: Boolean(t.peerId) }, isThisExchange: true, fees: { lpBps: t.lpFeeBps, validatorBps: t.validatorFeeBps, commissionBps: t.commissionBps }, minLegSats: t.minLegSats };
     }
     /**
      * Deploys a new position (src/lp/poolDeploy.ts, 0.13.0): this skein's
@@ -976,8 +974,8 @@ function makeClient(opts, s) {
     }
     /**
      * Closes a position (src/lp/close.ts): everything in the pool returns to the wallet (its own action
-     * pays the miner fee). 0.34.0: the pool's current output and its BEEF by its LP key (`GET
-     * /@<token>/amm/pools/beef?lp=<key>`, D2: the pool's id); the page's submit at the host root (D19).
+     * pays the miner fee). 0.40.0: the pool's current output and its BEEF by its pool id (`GET
+     * /@<token>/amm/pools/beef?pool=<deploy outpoint>`); the page's submit at the host root (D19).
      */
     async function closePosition(req) {
         const { wallet } = needWallet();
@@ -986,11 +984,11 @@ function makeClient(opts, s) {
             await myPositions();
             row = loaded.get(req.outpoint);
         }
-        if (!row || !row.lpPubKey)
+        if (!row)
             throw new Error("No such position");
         const [meta, base] = await Promise.all([tokenMeta(), tokenBaseOf(row.tokenId)]);
         const m = meta.get(row.tokenId);
-        const poolOutput = poolOutputOf(await readPoolsBeef(base, [row.lpPubKey], freshFetch), req.outpoint);
+        const poolOutput = poolOutputOf(await readPoolsBeef(base, [row.deployOutpoint.replace(".", "_")], freshFetch), req.outpoint);
         if (!poolOutput)
             throw new Error(`the pool is no longer at ${req.outpoint}: reload your positions`);
         const prepared = await prepareClose({
@@ -1011,8 +1009,8 @@ function makeClient(opts, s) {
      * `sats` deployed in ONE wallet createAction — the old pool the explicit input (as Close spends
      * it), the new one output 0 affirmed by the validator at its terms now (`amm.pool.affirm`, as a
      * deploy), the token difference through the wallet's module, the sats difference to or from the
-     * wallet's change. The old pool's output and BEEF by its LP key (`GET
-     * /@<token>/amm/pools/beef?lp=<key>`); the page's submit at the host root; the new pool's row
+     * wallet's change. The old pool's output and BEEF by its pool id (`GET
+     * /@<token>/amm/pools/beef?pool=<id>`); the page's submit at the host root; the new pool's row
      * filed in `amm-pools`.
      */
     async function rebalancePosition(req) {
@@ -1024,14 +1022,14 @@ function makeClient(opts, s) {
             await myPositions();
             row = loaded.get(req.outpoint);
         }
-        if (!row || !row.lpPubKey)
+        if (!row)
             throw new Error("No such position");
         const [terms, held, meta, base] = await Promise.all([instanceTerms(row.tokenId), heldOutputs(wallet), tokenMeta(), tokenBaseOf(row.tokenId)]);
         const v = terms.validator;
         if (!v)
             throw new Error(NO_VALIDATOR);
         const m = meta.get(row.tokenId);
-        const poolOutput = poolOutputOf(await readPoolsBeef(base, [row.lpPubKey], freshFetch), req.outpoint);
+        const poolOutput = poolOutputOf(await readPoolsBeef(base, [row.deployOutpoint.replace(".", "_")], freshFetch), req.outpoint);
         if (!poolOutput)
             throw new ClientError("stale_pool", `the pool is no longer at ${req.outpoint}: reload your positions`);
         const r = await rebalancePool({
@@ -1086,26 +1084,49 @@ function makeClient(opts, s) {
                 balance,
                 outputs: t?.valueOutputs ?? 0,
                 inSwaps: swaps.get(tokenId)?.amount ?? 0n,
-                swapSats: swaps.get(tokenId)?.sats ?? 0,
                 onExchange: registered.has(tokenId),
             };
         });
-        return out.filter((t) => t.balance > 0n || t.inSwaps > 0n || t.swapSats > 0).sort((a, b) => a.sym.localeCompare(b.sym) || a.tokenId.localeCompare(b.tokenId));
+        return out.filter((t) => t.balance > 0n || t.inSwaps > 0n).sort((a, b) => a.sym.localeCompare(b.sym) || a.tokenId.localeCompare(b.tokenId));
     }
     /**
-     * The silent pass over the swap basket's staged legs (0.34.0, D18, D24; src/wallet/swapPayouts.ts):
-     * per token ONE `GET /spends?outpoint=` over the pools its rows were staged for, the spenders'
-     * transactions, this wallet's payouts taken in. Nothing shown; a payout taken in reloads the
-     * pages' data. Never throws.
+     * The pass on load (0.40.0, src/wallet/swapPayouts.ts, src/market/activeSwap.ts): a labelled
+     * staged token output the swap basket lacks filed from its action's description (its BEEF `GET
+     * /@<token>/amm/tx?id=`), then the overlay pass over every `amm-swap` row (ONE `/amm/spends`, each
+     * spender's `/tx`, this wallet's legs taken in). Nothing shown; a take-in reloads the pages' data.
+     * Never throws. → the txids taken in.
      */
     async function settleSwaps() {
         if (!boundWallet)
             return [];
-        const taken = await settleStagedSwaps(boundWallet, (t) => tokenBase(t, swapBase), f);
-        if (taken.length > 0)
+        let filed = false;
+        try {
+            for (const u of await unfiledStagedTokens(boundWallet)) {
+                const beef = await readTx(tokenBase(u.tokenId, swapBase), u.txid, freshFetch).catch(() => null);
+                if (beef && (await fileStagedToken(boundWallet, u, beef).catch(() => false)))
+                    filed = true;
+            }
+        }
+        catch {
+            /* the next load */
+        }
+        const taken = (await resolve(boundWallet)).map((t) => t.txid);
+        if (filed || taken.length > 0)
             emit();
         return taken;
     }
+    /** The sats in the swap basket (0.40.0: shown once, not per token). */
+    async function swapBasketSats() {
+        const { wallet } = needWallet();
+        return swapSatsTotal(wallet);
+    }
+    /** "Move back" of the swap basket's sats alone (0.40.0, src/market/activeSwap.ts `moveBackSats`): one plain createAction, the sats rows its inputs, no outputs. */
+    async function moveBackStagedSats() {
+        const { wallet } = needWallet();
+        const r = await moveBackSats(wallet);
+        emit();
+        return r;
+    }
     /**
      * "Move back" (src/market/activeSwap.ts; 0.29.3: a module plan): every `amm-swap` row of the
      * token (and its staged sats) spent in one action whose one output the wallet's module files
@@ -1227,15 +1248,13 @@ function makeClient(opts, s) {
     }
     /**
      * Sets the default validator terms (0.17.0): root's `{fn: "defaults", args: {terms: {lpFeeBps,
-     * validatorFeeBps, commissionBps}}}` to the config instance's `<app>/admin` — a new token
-     * instance's initial terms (its own `amm/terms`, root's message to `/@<tokenId>`, wins once
-     * written). Refused here unless each fee is an integer 0 to 10 000.
+     * validatorFeeBps, commissionBps, minLegSats?}}}` to the config instance's `<app>/admin` — a new
+     * token instance's initial terms (its own `amm/terms`, root's message to `/@<tokenId>`, wins once
+     * written). Refused here unless each fee is an integer 0 to 10 000 (0.40.0: and the minimum leg a
+     * whole number of sats; 0 or absent is none and is not sent).
      */
     async function setDefaultTerms(t) {
-        for (const [k, v] of Object.entries(t))
-            if (!Number.isInteger(v) || v < 0 || v > 10_000)
-                throw new Error(`${k}: an integer, 0 to 10000 basis points`);
-        await sendDefaults({ terms: { lpFeeBps: t.lpBps, validatorFeeBps: t.validatorBps, commissionBps: t.commissionBps } });
+        await sendDefaults({ terms: termsArgs(t) });
     }
     /** One token's validator terms as its instance holds them (0.35.0; P7 `GET /@<token>/amm/terms`, plain): the three fees, or null (a market only). */
     async function tokenTerms(tokenId) {
@@ -1243,19 +1262,15 @@ function makeClient(opts, s) {
     }
     /**
      * Sets one token's validator terms (0.35.0, open-exchange 0.12.0): root's `{fn: "terms", args:
-     * {tokenId, terms: {lpFeeBps, validatorFeeBps, commissionBps} | null}}` to the swap instance's
+     * {tokenId, terms: {lpFeeBps, validatorFeeBps, commissionBps, minLegSats?} | null}}` to the swap instance's
      * `<app>/admin`; swap emits it as a fact and the host sends it to the token's instance as root's
      * `terms` (null: a market only). Nothing answers back: the token's `/terms` shows the result.
      * Refused here unless each fee is an integer 0 to 10 000.
      */
     async function setTokenTerms(tokenId, t) {
-        if (t)
-            for (const [k, v] of Object.entries(t))
-                if (!Number.isInteger(v) || v < 0 || v > 10_000)
-                    throw new Error(`${k}: an integer, 0 to 10000 basis points`);
+        const terms = t ? termsArgs(t) : null;
         const { signedFor } = needWallet();
         const me = await swapIdentity();
-        const terms = t ? { lpFeeBps: t.lpBps, validatorFeeBps: t.validatorBps, commissionBps: t.commissionBps } : null;
         await sendMessage(signedFor(swapBase), swapBase, me, `${app()}/admin`, { fn: "terms", args: { tokenId: sdkTokenId(tokenId), terms } });
     }
     /** Clears the default validator terms (0.17.0): `{fn: "defaults", args: {terms: null}}`; a new token instance is a market only. */
@@ -1272,6 +1287,152 @@ function makeClient(opts, s) {
     async function clearDefaultMarket() {
         await sendDefaults({ market: null });
     }
+    /**
+     * Sets the price to enable a token (0.42.0, open-exchange 0.15.0): the admin's `{fn: "price", args: {sats}}`
+     * to swap's `<app>/admin`; the host sets it as the price of `POST /amm/enable` (any signed sender enables a
+     * token for it). `null` turns the paid enable off. Refused here unless a whole number of sats, 1 or more.
+     */
+    async function setEnablePrice(sats) {
+        if (sats !== null && (!Number.isSafeInteger(sats) || sats < 1))
+            throw new Error("sats: a whole number, 1 or more (or null: off)");
+        const { signedFor } = needWallet();
+        const me = await swapIdentity();
+        await sendMessage(signedFor(swapBase), swapBase, me, `${app()}/admin`, { fn: "price", args: { sats } });
+        emit();
+    }
+    /** The exchange's wallet (0.42.0, open-exchange 0.15.0; `GET <swap>/wallet`, the host's read): the sats swap's wallet holds and its coin count. */
+    async function exchangeWallet() {
+        return readWallet(swapBase, ff);
+    }
+    /**
+     * Enables a token for the exchange's fee (0.42.2, open-exchange 0.15.3: a BEEF submission; anyone signed, not the
+     * admin): the price from `GET <swap>/defaults` (`enablePriceSats`; none → refused, "paid enable is off"); the
+     * exchange's identity from `GET <swap's origin>/.well-known/skein`; the deploy's BEEF given, else discovery's
+     * (`GET <origin>/@discovery/1color/<token>/deploy`). The payment, ts-stack's standard (sdk BasicBRC29): a prefix and
+     * a suffix from `createNonce`, the payee key `getPublicKey({protocolID: [2, "3241645161d8"], keyID: "<prefix>
+     * <suffix>", counterparty: <the exchange>})`, ONE P2PKH output of exactly the price, `createAction` with
+     * `{randomizeOutputs: false, noSend: true}` — built and signed, NOT sent: the exchange's take-in sends it. Then ONE
+     * BEEF merging the deploy's and the payment's, `POST <swap>/enable?tokenId=&paymentTxid=&paymentVout=0
+     * &derivationPrefix=&derivationSuffix=` signed (BRC-104). On any refusal or failure after the payment was built, the
+     * unsent payment is aborted in the wallet (`abortAction`), so its coins are free again. → the enabled row.
+     * Refusals are `ClientError` kind `refused` (the exchange's code first in the message); a fetch that does not get
+     * through, `network`; the user declining in the wallet, `user_rejected`.
+     */
+    async function enableTokenPaid(tokenId, o = {}) {
+        const { wallet, signedFor } = needWallet();
+        const id = parseOutpoint(sdkTokenId(tokenId).replace("_", "."));
+        if (!id)
+            throw new Error(`not a token id: ${tokenId}`);
+        const canonical = tokenIdText(id);
+        const price = (await readDefaults(swapBase, freshFetch)).enablePriceSats;
+        if (!price)
+            throw new ClientError("refused", "paid enable is off");
+        const exchange = await swapIdentity();
+        let deploy = o.deployBeef;
+        if (!deploy) {
+            const res = await freshFetch(`${discoveryBase()}/${canonical}/deploy`);
+            if (!res.ok)
+                throw new ClientError("refused", `no deploy for ${canonical} on discovery (${res.status}): pass deployBeef`);
+            deploy = Array.from(new Uint8Array(await res.arrayBuffer()));
+        }
+        const derivationPrefix = await createNonce(wallet, "self");
+        const derivationSuffix = await createNonce(wallet, "self");
+        const { publicKey } = await wallet.getPublicKey({ protocolID: BRC29_PROTOCOL, keyID: `${derivationPrefix} ${derivationSuffix}`, counterparty: exchange });
+        const created = await wallet.createAction({
+            description: "Open Exchange: enable a token",
+            outputs: [{ satoshis: price, lockingScript: p2pkhHexOf(publicKey), outputDescription: "Open Exchange enable fee", customInstructions: JSON.stringify({ derivationPrefix, derivationSuffix, payee: exchange }) }],
+            options: { randomizeOutputs: false, noSend: true },
+        });
+        const txid = created.txid;
+        if (!txid || !created.tx)
+            throw new Error("the wallet built no payment");
+        try {
+            const b = new Beef();
+            b.mergeBeef(deploy);
+            b.mergeBeef(created.tx);
+            const q = new URLSearchParams({ tokenId: canonical, paymentTxid: txid, paymentVout: "0", derivationPrefix, derivationSuffix });
+            let res;
+            try {
+                res = await signedFor(swapBase).fetch(`${swapBase}/enable?${q.toString()}`, { method: "POST", headers: { "content-type": "application/octet-stream" }, body: Uint8Array.from(b.toBinary()) });
+            }
+            catch (e) {
+                // The stock AuthFetch takes every 402 for its own payment wire and throws on this route's (no x-bsv-payment-* headers).
+                if (/x-bsv-payment/.test(errText(e)))
+                    throw new ClientError("refused", "ERR_PAYMENT_REQUIRED: the exchange did not take this payment (402; its price may have changed)", { cause: e });
+                throw e;
+            }
+            const v = (await res.json().catch(() => ({})));
+            if (res.status !== 200)
+                throw new ClientError("refused", `${String(v.code ?? res.status)}: ${String(v.description ?? v.message ?? "refused")}`);
+            s.listRead = null;
+            emit();
+            return v.result;
+        }
+        catch (e) {
+            await wallet.abortAction({ reference: txid }).catch(() => { });
+            throw e;
+        }
+    }
+    /** A withdrawal's payment taken in by the admin's wallet: `internalizeAction`, output `outputIndex` as a wallet payment from swap (BRC-29, ts-stack's recipient side). */
+    async function takeInWithdrawal(wallet, x, tx) {
+        const r = await wallet.internalizeAction({
+            tx,
+            outputs: [{ outputIndex: x.outputIndex, protocol: WALLET_PAYMENT, paymentRemittance: { derivationPrefix: x.derivationPrefix, derivationSuffix: x.derivationSuffix, senderIdentityKey: x.senderIdentityKey } }],
+            description: `Open Exchange withdraw ${x.n}`,
+        });
+        return r.accepted;
+    }
+    /** Withdrawal `n`'s Atomic BEEF (`GET <swap>/wallet/tx?n=`). */
+    async function withdrawalTx(n) {
+        const res = await freshFetch(`${swapBase}/wallet/tx?n=${n}`);
+        if (!res.ok)
+            throw new Error(`GET ${swapBase}/wallet/tx?n=${n}: ${res.status}`);
+        return Array.from(new Uint8Array(await res.arrayBuffer()));
+    }
+    /**
+     * Withdraws everything in the exchange's wallet to the admin's own (0.42.1, open-exchange 0.15.2): the admin's
+     * `{fn: "withdraw"}` to swap's `<app>/admin`. swap's program pays every coin to a BRC-29 key derived for the
+     * sender and hands the transaction over unsent; this function waits for the read to list it (`GET <swap>/wallet`,
+     * at most 10 s — the message's answer reaches no page), then takes it in (`internalizeAction`, a wallet payment:
+     * that is what sends it). → the withdrawal.
+     */
+    async function withdrawAll() {
+        const { wallet, signedFor } = needWallet();
+        const w = await readWallet(swapBase, freshFetch);
+        if (w.sats <= 0)
+            throw new Error("the exchange's wallet holds nothing to withdraw");
+        const me = await swapIdentity();
+        await sendMessage(signedFor(swapBase), swapBase, me, `${app()}/admin`, { fn: "withdraw" });
+        let x;
+        for (let i = 0; i < 40 && !x; i++) {
+            await new Promise((r) => setTimeout(r, 250));
+            x = (await readWallet(swapBase, freshFetch)).withdrawals.find((y) => y.n > w.withdrawals.length);
+        }
+        if (!x)
+            throw new Error("the exchange has not answered the withdraw yet: Settings takes it in when it does");
+        if (!(await takeInWithdrawal(wallet, x, await withdrawalTx(x.n))))
+            throw new Error("the wallet did not accept the withdrawal");
+        emit();
+        return x;
+    }
+    /**
+     * The latest withdrawal taken in again (0.42.1; on Settings load): for a page lost between the withdraw's answer
+     * and its take-in (taking in a payment the wallet holds is harmless). Never throws. → its txid, or none.
+     */
+    async function settleWithdrawals() {
+        if (!boundWallet)
+            return [];
+        try {
+            const w = await readWallet(swapBase, freshFetch);
+            const x = w.withdrawals.at(-1);
+            if (!x)
+                return [];
+            return (await takeInWithdrawal(boundWallet, x, await withdrawalTx(x.n))) ? [x.txid] : [];
+        }
+        catch {
+            return [];
+        }
+    }
     /** The discovery instance's record (0.18.0, shruggr/skein#137; `GET <config>/discovery`): `{on: false}` until root turns it on. */
     async function discoveryState() {
         return readDiscovery(swapBase, ff);
@@ -1311,11 +1472,15 @@ function makeClient(opts, s) {
         isRoot,
         claimExchange: guard(claimExchange),
         hostedTokens: guard(hostedTokens),
-        watchTokenPools,
+        tokenPools: guard(tokenPools),
+        watchPoolEvents,
         // history (0.39.0)
         trades: guard(trades),
         trade: guard(trade),
         candles: guard(candles),
+        poolsAt: guard(poolsAt),
+        poolHistory: guard(poolHistory),
+        spendsAll: guard(spendsAll),
         stats: guard(stats),
         statsAll: guard(statsAll),
         holders: guard(holders),
@@ -1324,7 +1489,6 @@ function makeClient(opts, s) {
         // swap
         quoteSwap,
         executeSwap,
-        checkSwapAgain: guard(checkSwapAgain),
         walletSats: guard(walletSats),
         // liquidity
         myPositions: guard(myPositions),
@@ -1335,6 +1499,8 @@ function makeClient(opts, s) {
         // your tokens
         myTokens: guard(myTokens),
         settleSwaps: guard(settleSwaps),
+        swapBasketSats: guard(swapBasketSats),
+        moveBackStagedSats: guard(moveBackStagedSats),
         moveBackTokens: guard(moveBackTokens),
         sendTokens: guard(sendTokens),
         // settings
@@ -1351,5 +1517,10 @@ function makeClient(opts, s) {
         clearDefaultMarket: guard(clearDefaultMarket),
         discoveryState: guard(discoveryState),
         setDiscovery: guard(setDiscovery),
+        setEnablePrice: guard(setEnablePrice),
+        exchangeWallet: guard(exchangeWallet),
+        withdrawAll: guard(withdrawAll),
+        enableTokenPaid: guard(enableTokenPaid),
+        settleWithdrawals,
     };
 }