@satora/swap 1.4.0 → 1.5.0

package/dist/bitcoin-reader-electrum-Z2YCNDLB.js

@@ -0,0 +1,8 @@
+import {
+  electrumReader
+} from "./chunk-INWVLX4A.js";
+import "./chunk-LSCRTQOS.js";
+export {
+  electrumReader
+};
+//# sourceMappingURL=bitcoin-reader-electrum-Z2YCNDLB.js.map

package/dist/bitcoin-reader-esplora-B2BDEI6Z.js

@@ -0,0 +1,13 @@
+import {
+  DEFAULT_ESPLORA_URLS,
+  esploraReader,
+  htlcFactsFromEsploraTxs,
+  resolveMinConfirmations
+} from "./chunk-LSCRTQOS.js";
+export {
+  DEFAULT_ESPLORA_URLS,
+  esploraReader,
+  htlcFactsFromEsploraTxs,
+  resolveMinConfirmations
+};
+//# sourceMappingURL=bitcoin-reader-esplora-B2BDEI6Z.js.map

package/dist/{chunk-FTPIQSRW.js → chunk-INWVLX4A.js}

@@ -1,3 +1,7 @@
+import {
+  resolveMinConfirmations
+} from "./chunk-LSCRTQOS.js";
+
 // src/contracts/bitcoin-reader-electrum.ts
 import { sha256 } from "@noble/hashes/sha2.js";
 import { hex } from "@scure/base";
@@ -24,7 +28,6 @@ function scriptHashOf(script) {
 }
 function electrumReader(client, opts) {
   const network = opts?.network ?? "mainnet";
-  const defaultMinConf = opts?.minConfirmations ?? 0;
   const fallback = opts?.fallback;
   const scriptFor = (address) => btc.OutScript.encode(
     btc.Address(toBtcSignerNetwork(network)).decode(address)
@@ -110,7 +113,7 @@ function electrumReader(client, opts) {
   }
   return {
     async getHtlcFacts(address, minConfirmations) {
-      const required = minConfirmations ?? defaultMinConf;
+      const required = minConfirmations ?? resolveMinConfirmations(opts?.minConfirmations);
       try {
         return await getHtlcFactsElectrum(address, required);
       } catch (error) {
@@ -149,4 +152,4 @@ function electrumReader(client, opts) {
 export {
   electrumReader
 };
-//# sourceMappingURL=chunk-FTPIQSRW.js.map
+//# sourceMappingURL=chunk-INWVLX4A.js.map

package/dist/chunk-INWVLX4A.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/contracts/bitcoin-reader-electrum.ts"],"sourcesContent":["/**\n * An Electrum-backed {@link BitcoinChainReader} — reads HTLC facts from our own\n * Fulcrum over WebSocket instead of public esplora REST endpoints.\n *\n * Two advantages over the esplora reader:\n *\n * - **Freshness**: our Fulcrum sees a transaction the moment its bitcoind\n *   accepts it, while public explorers index with a lag — the exact lag that\n *   made a server-funding hint's targeted verify come back \"absent\" and park\n *   the claim on the 60s at-risk poller.\n * - **Push**: implements the reader's optional `subscribe` capability via\n *   `blockchain.scripthash.subscribe`, so the manager reconciles the moment\n *   an HTLC address's history changes instead of waiting for a poll tick.\n *\n * Reads fall back to a wrapped reader (typically the esplora one) whenever the\n * Electrum server errors, so a Fulcrum outage degrades to today's behavior\n * rather than blinding the tracker.\n */\n\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport { hex } from \"@scure/base\";\nimport * as btc from \"@scure/btc-signer\";\nimport type { BitcoinHtlcFacts } from \"./bitcoin.js\";\nimport type { BitcoinChainReader } from \"./bitcoin-manager.js\";\nimport {\n  type BitcoinReaderPolicy,\n  resolveMinConfirmations,\n} from \"./bitcoin-reader-esplora.js\";\n\n/** One entry of `blockchain.scripthash.get_history`. */\ntype ElectrumHistoryEntry = {\n  tx_hash: string;\n  /** Block height; 0 for mempool, -1 for mempool with unconfirmed parents. */\n  height: number;\n};\n\n/**\n * The Electrum client surface this reader needs. The pure SDK's\n * `ElectrumWsClient` satisfies it; tests inject a fake.\n */\nexport type ElectrumRpc = {\n  request<T>(method: string, params: unknown[]): Promise<T>;\n  subscribeScriptHash(\n    scripthash: string,\n    onChange: (status: string | null) => void,\n  ): Promise<string | null>;\n  unsubscribeScriptHash(\n    scripthash: string,\n    onChange: (status: string | null) => void,\n  ): void;\n};\n\nexport type ElectrumReaderNetwork =\n  | \"mainnet\"\n  | \"testnet\"\n  | \"signet\"\n  | \"regtest\";\n\n/** btc-signer only ships mainnet/testnet; regtest differs in bech32 prefix. */\nconst REGTEST_NETWORK = {\n  bech32: \"bcrt\",\n  pubKeyHash: 0x6f,\n  scriptHash: 0xc4,\n  wif: 0xef,\n} as const;\n\nfunction toBtcSignerNetwork(network: ElectrumReaderNetwork) {\n  switch (network) {\n    case \"mainnet\":\n      return btc.NETWORK;\n    case \"testnet\":\n    case \"signet\":\n      return btc.TEST_NETWORK;\n    case \"regtest\":\n      return REGTEST_NETWORK;\n  }\n}\n\n/** Electrum scripthash: sha256 of the output script, reversed, hex. */\nfunction scriptHashOf(script: Uint8Array): string {\n  return hex.encode(sha256(script).reverse());\n}\n\n/**\n * Build a {@link BitcoinChainReader} over an Electrum connection, with push\n * support and an optional fallback reader for outages.\n */\nexport function electrumReader(\n  client: ElectrumRpc,\n  opts?: BitcoinReaderPolicy & {\n    /** Network the HTLC addresses live on; defaults to mainnet. */\n    network?: ElectrumReaderNetwork;\n    /** Reader consulted when the Electrum server errors (e.g. esplora). */\n    fallback?: BitcoinChainReader;\n  },\n): BitcoinChainReader {\n  const network = opts?.network ?? \"mainnet\";\n  const fallback = opts?.fallback;\n\n  const scriptFor = (address: string): Uint8Array =>\n    btc.OutScript.encode(\n      btc.Address(toBtcSignerNetwork(network)).decode(address),\n    );\n\n  async function getHtlcFactsElectrum(\n    address: string,\n    required: number,\n  ): Promise<BitcoinHtlcFacts> {\n    const script = scriptFor(address);\n    const scripthash = scriptHashOf(script);\n    const history = await client.request<ElectrumHistoryEntry[]>(\n      \"blockchain.scripthash.get_history\",\n      [scripthash],\n    );\n    if (!history || history.length === 0)\n      return { funding: \"absent\", fundedSats: 0 };\n\n    // HTLC addresses see at most a handful of txs (fund + resolve), so\n    // fetching each raw tx is cheap.\n    const txs = await Promise.all(\n      history.map(async (entry) => {\n        const raw = await client.request<string>(\"blockchain.transaction.get\", [\n          entry.tx_hash,\n        ]);\n        return {\n          entry,\n          tx: btc.Transaction.fromRaw(hex.decode(raw), {\n            allowUnknownOutputs: true,\n            allowUnknownInputs: true,\n            disableScriptCheck: true,\n          }),\n        };\n      }),\n    );\n\n    const scriptHex = hex.encode(script);\n    const outputIndicesPaying = (tx: btc.Transaction): number[] => {\n      const indices: number[] = [];\n      for (let i = 0; i < tx.outputsLength; i++) {\n        const out = tx.getOutput(i);\n        if (out.script && hex.encode(out.script) === scriptHex) indices.push(i);\n      }\n      return indices;\n    };\n\n    // Among all txs paying the address, the one paying the MOST is the\n    // funding candidate — same rule as the pure SDK's UTXO lookup. The\n    // address is public, so a stray dust payment (whether it landed before\n    // or after the real funding) must not be mistaken for the funding and\n    // observe the swap as underfunded/invalid.\n    let funding: (typeof txs)[number] | undefined;\n    let fundedSats = 0;\n    for (const candidate of txs) {\n      let paid = 0;\n      for (const i of outputIndicesPaying(candidate.tx))\n        paid += Number(candidate.tx.getOutput(i).amount ?? 0n);\n      if (paid > fundedSats) {\n        funding = candidate;\n        fundedSats = paid;\n      }\n    }\n    if (!funding) return { funding: \"absent\", fundedSats: 0 };\n    const fundedVouts = outputIndicesPaying(funding.tx);\n\n    // A tx spending one of the funding outputs is the resolving spend; its\n    // witness classifies claim vs refund.\n    for (const { tx } of txs) {\n      for (let i = 0; i < tx.inputsLength; i++) {\n        const input = tx.getInput(i);\n        if (\n          input.txid &&\n          hex.encode(input.txid) === funding.entry.tx_hash &&\n          input.index !== undefined &&\n          fundedVouts.includes(input.index)\n        ) {\n          return {\n            funding: \"confirmed\",\n            fundedSats: 0, // already spent — the amount no longer matters\n            spendWitness: (input.finalScriptWitness ?? []).map((item) =>\n              hex.encode(item),\n            ),\n          };\n        }\n      }\n    }\n\n    // Same depth policy as the esplora reader: 0/1 read straight off the\n    // confirmed flag; deeper policies need the tip to compute depth.\n    const height = funding.entry.height;\n    const isConfirmed = height > 0;\n    let deepEnough: boolean;\n    if (isConfirmed) {\n      if (required <= 1) {\n        deepEnough = true;\n      } else {\n        const tip = await client.request<{ height: number }>(\n          \"blockchain.headers.subscribe\",\n          [],\n        );\n        deepEnough = tip.height - height + 1 >= required;\n      }\n    } else {\n      deepEnough = required === 0;\n    }\n    return { funding: deepEnough ? \"confirmed\" : \"mempool\", fundedSats };\n  }\n\n  return {\n    async getHtlcFacts(address, minConfirmations) {\n      const required =\n        minConfirmations ?? resolveMinConfirmations(opts?.minConfirmations);\n      try {\n        return await getHtlcFactsElectrum(address, required);\n      } catch (error) {\n        if (!fallback) throw error;\n        console.warn(\n          \"electrumReader: falling back to secondary reader:\",\n          error instanceof Error ? error.message : error,\n        );\n        return fallback.getHtlcFacts(address, minConfirmations);\n      }\n    },\n\n    subscribe(address, onChange) {\n      // An address the configured network can't decode (e.g. a signet address\n      // under a mainnet-configured reader) must not throw out of register()\n      // and abort tracking — degrade to the poll cadence instead.\n      let scripthash: string;\n      try {\n        scripthash = scriptHashOf(scriptFor(address));\n      } catch (error) {\n        console.warn(\n          \"electrumReader: subscribe skipped (address decode failed):\",\n          error instanceof Error ? error.message : error,\n        );\n        return () => {};\n      }\n      const handler = () => onChange();\n      // Best-effort: if the subscription fails the tracker's poll cadence\n      // remains the backstop, so the error is logged, not thrown.\n      client.subscribeScriptHash(scripthash, handler).catch((error) => {\n        console.warn(\n          \"electrumReader: scripthash subscribe failed:\",\n          error instanceof Error ? error.message : error,\n        );\n      });\n      return () => client.unsubscribeScriptHash(scripthash, handler);\n    },\n  };\n}\n"],"mappings":";;;;;AAmBA,SAAS,cAAc;AACvB,SAAS,WAAW;AACpB,YAAY,SAAS;AAsCrB,IAAM,kBAAkB;AAAA,EACtB,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,KAAK;AACP;AAEA,SAAS,mBAAmB,SAAgC;AAC1D,UAAQ,SAAS;AAAA,IACf,KAAK;AACH,aAAW;AAAA,IACb,KAAK;AAAA,IACL,KAAK;AACH,aAAW;AAAA,IACb,KAAK;AACH,aAAO;AAAA,EACX;AACF;AAGA,SAAS,aAAa,QAA4B;AAChD,SAAO,IAAI,OAAO,OAAO,MAAM,EAAE,QAAQ,CAAC;AAC5C;AAMO,SAAS,eACd,QACA,MAMoB;AACpB,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,WAAW,MAAM;AAEvB,QAAM,YAAY,CAAC,YACb,cAAU;AAAA,IACR,YAAQ,mBAAmB,OAAO,CAAC,EAAE,OAAO,OAAO;AAAA,EACzD;AAEF,iBAAe,qBACb,SACA,UAC2B;AAC3B,UAAM,SAAS,UAAU,OAAO;AAChC,UAAM,aAAa,aAAa,MAAM;AACtC,UAAM,UAAU,MAAM,OAAO;AAAA,MAC3B;AAAA,MACA,CAAC,UAAU;AAAA,IACb;AACA,QAAI,CAAC,WAAW,QAAQ,WAAW;AACjC,aAAO,EAAE,SAAS,UAAU,YAAY,EAAE;AAI5C,UAAM,MAAM,MAAM,QAAQ;AAAA,MACxB,QAAQ,IAAI,OAAO,UAAU;AAC3B,cAAM,MAAM,MAAM,OAAO,QAAgB,8BAA8B;AAAA,UACrE,MAAM;AAAA,QACR,CAAC;AACD,eAAO;AAAA,UACL;AAAA,UACA,IAAQ,gBAAY,QAAQ,IAAI,OAAO,GAAG,GAAG;AAAA,YAC3C,qBAAqB;AAAA,YACrB,oBAAoB;AAAA,YACpB,oBAAoB;AAAA,UACtB,CAAC;AAAA,QACH;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,YAAY,IAAI,OAAO,MAAM;AACnC,UAAM,sBAAsB,CAAC,OAAkC;AAC7D,YAAM,UAAoB,CAAC;AAC3B,eAAS,IAAI,GAAG,IAAI,GAAG,eAAe,KAAK;AACzC,cAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,YAAI,IAAI,UAAU,IAAI,OAAO,IAAI,MAAM,MAAM,UAAW,SAAQ,KAAK,CAAC;AAAA,MACxE;AACA,aAAO;AAAA,IACT;AAOA,QAAI;AACJ,QAAI,aAAa;AACjB,eAAW,aAAa,KAAK;AAC3B,UAAI,OAAO;AACX,iBAAW,KAAK,oBAAoB,UAAU,EAAE;AAC9C,gBAAQ,OAAO,UAAU,GAAG,UAAU,CAAC,EAAE,UAAU,EAAE;AACvD,UAAI,OAAO,YAAY;AACrB,kBAAU;AACV,qBAAa;AAAA,MACf;AAAA,IACF;AACA,QAAI,CAAC,QAAS,QAAO,EAAE,SAAS,UAAU,YAAY,EAAE;AACxD,UAAM,cAAc,oBAAoB,QAAQ,EAAE;AAIlD,eAAW,EAAE,GAAG,KAAK,KAAK;AACxB,eAAS,IAAI,GAAG,IAAI,GAAG,cAAc,KAAK;AACxC,cAAM,QAAQ,GAAG,SAAS,CAAC;AAC3B,YACE,MAAM,QACN,IAAI,OAAO,MAAM,IAAI,MAAM,QAAQ,MAAM,WACzC,MAAM,UAAU,UAChB,YAAY,SAAS,MAAM,KAAK,GAChC;AACA,iBAAO;AAAA,YACL,SAAS;AAAA,YACT,YAAY;AAAA;AAAA,YACZ,eAAe,MAAM,sBAAsB,CAAC,GAAG;AAAA,cAAI,CAAC,SAClD,IAAI,OAAO,IAAI;AAAA,YACjB;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAIA,UAAM,SAAS,QAAQ,MAAM;AAC7B,UAAM,cAAc,SAAS;AAC7B,QAAI;AACJ,QAAI,aAAa;AACf,UAAI,YAAY,GAAG;AACjB,qBAAa;AAAA,MACf,OAAO;AACL,cAAM,MAAM,MAAM,OAAO;AAAA,UACvB;AAAA,UACA,CAAC;AAAA,QACH;AACA,qBAAa,IAAI,SAAS,SAAS,KAAK;AAAA,MAC1C;AAAA,IACF,OAAO;AACL,mBAAa,aAAa;AAAA,IAC5B;AACA,WAAO,EAAE,SAAS,aAAa,cAAc,WAAW,WAAW;AAAA,EACrE;AAEA,SAAO;AAAA,IACL,MAAM,aAAa,SAAS,kBAAkB;AAC5C,YAAM,WACJ,oBAAoB,wBAAwB,MAAM,gBAAgB;AACpE,UAAI;AACF,eAAO,MAAM,qBAAqB,SAAS,QAAQ;AAAA,MACrD,SAAS,OAAO;AACd,YAAI,CAAC,SAAU,OAAM;AACrB,gBAAQ;AAAA,UACN;AAAA,UACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAC3C;AACA,eAAO,SAAS,aAAa,SAAS,gBAAgB;AAAA,MACxD;AAAA,IACF;AAAA,IAEA,UAAU,SAAS,UAAU;AAI3B,UAAI;AACJ,UAAI;AACF,qBAAa,aAAa,UAAU,OAAO,CAAC;AAAA,MAC9C,SAAS,OAAO;AACd,gBAAQ;AAAA,UACN;AAAA,UACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAC3C;AACA,eAAO,MAAM;AAAA,QAAC;AAAA,MAChB;AACA,YAAM,UAAU,MAAM,SAAS;AAG/B,aAAO,oBAAoB,YAAY,OAAO,EAAE,MAAM,CAAC,UAAU;AAC/D,gBAAQ;AAAA,UACN;AAAA,UACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAC3C;AAAA,MACF,CAAC;AACD,aAAO,MAAM,OAAO,sBAAsB,YAAY,OAAO;AAAA,IAC/D;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-THI4UO6R.js → chunk-LSCRTQOS.js}

@@ -1,4 +1,7 @@
 // src/contracts/bitcoin-reader-esplora.ts
+function resolveMinConfirmations(source) {
+  return (typeof source === "function" ? source() : source) ?? 0;
+}
 function htlcFactsFromEsploraTxs(txs, address, opts) {
   for (const tx of txs) {
     const spend = tx.vin.find(
@@ -45,11 +48,10 @@ function esploraReader(esploraUrls, fetchImpl = fetch, policy) {
   const bases = (Array.isArray(esploraUrls) ? esploraUrls : [esploraUrls]).map(
     (url) => url.replace(/\/+$/, "")
   );
-  const minConf = policy?.minConfirmations ?? 0;
   let start = 0;
   return {
     async getHtlcFacts(address, minConfirmations) {
-      const required = minConfirmations ?? minConf;
+      const required = minConfirmations ?? resolveMinConfirmations(policy?.minConfirmations);
       const from = start++ % bases.length;
       let lastError;
       for (let i = 0; i < bases.length; i++) {
@@ -80,8 +82,9 @@ function esploraReader(esploraUrls, fetchImpl = fetch, policy) {
 }
 
 export {
+  resolveMinConfirmations,
   htlcFactsFromEsploraTxs,
   DEFAULT_ESPLORA_URLS,
   esploraReader
 };
-//# sourceMappingURL=chunk-THI4UO6R.js.map
+//# sourceMappingURL=chunk-LSCRTQOS.js.map

package/dist/chunk-LSCRTQOS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/contracts/bitcoin-reader-esplora.ts"],"sourcesContent":["/**\n * A esplora-backed {@link BitcoinChainReader} — the concrete chain source the\n * {@link BitcoinContractManager} uses in production.\n *\n * Kept separate from the manager so the manager stays free of any HTTP/esplora\n * dependency (and unit-testable against a fake reader). A single\n * `GET /address/{addr}/txs` yields both the funding state and the spending\n * input's witness, so no extra round-trips are needed.\n */\n\nimport type { BitcoinHtlcFacts } from \"./bitcoin.js\";\nimport type { BitcoinChainReader } from \"./bitcoin-manager.js\";\n\n/** The slice of esplora's tx JSON we read. */\ntype EsploraTx = {\n  vin: Array<{\n    witness?: string[];\n    prevout?: { scriptpubkey_address?: string } | null;\n  }>;\n  vout: Array<{ scriptpubkey_address?: string; value?: number }>;\n  status?: { confirmed?: boolean; block_height?: number };\n};\n\n/** A depth already resolved to a number, for the pure classifier below. */\nexport type BitcoinConfirmationPolicy = {\n  minConfirmations?: number;\n};\n\n/** A depth, or a getter resolved per read so it can change without a rebuild. */\nexport type MinConfirmationsSource = number | (() => number | undefined);\n\n/**\n * When a funding tx counts as `confirmed` for observation purposes.\n *\n * `minConfirmations: 0` (the default) accepts an UNCONFIRMED funding, so a swap\n * claims as soon as the funding hits the mempool instead of waiting ~10min for\n * a block. This TRUSTS the funder not to double-spend: claiming publishes the\n * preimage, so a funder who then replaces its funding tx could take both legs.\n * Our own server therefore broadcasts HTLC fundings without signalling RBF.\n * Note that a non-signalling tx is still replaceable by full-RBF miners — set\n * `1` (or more) for a policy that doesn't rely on the funder's good behaviour;\n * values above 1 make the reader fetch the tip height to compute depth.\n */\nexport type BitcoinReaderPolicy = {\n  minConfirmations?: MinConfirmationsSource;\n};\n\nexport function resolveMinConfirmations(\n  source: MinConfirmationsSource | undefined,\n): number {\n  return (typeof source === \"function\" ? source() : source) ?? 0;\n}\n\n/**\n * Reduce an address's esplora tx history to HTLC facts. If a tx spends an output\n * at the address, that's the resolving spend (its witness classifies claim vs\n * refund); otherwise a tx paying the address is the funding, gated by the\n * confirmation policy (see {@link BitcoinConfirmationPolicy}).\n */\nexport function htlcFactsFromEsploraTxs(\n  txs: EsploraTx[],\n  address: string,\n  opts?: BitcoinConfirmationPolicy & { tipHeight?: number },\n): BitcoinHtlcFacts {\n  for (const tx of txs) {\n    const spend = tx.vin.find(\n      (vin) => vin.prevout?.scriptpubkey_address === address,\n    );\n    if (spend)\n      return {\n        funding: \"confirmed\",\n        fundedSats: 0, // already spent — the amount no longer matters\n        spendWitness: spend.witness ?? [],\n      };\n  }\n  // Among all txs paying the address, the one paying the MOST is the funding\n  // candidate — matching the pure SDK's UTXO lookup. The address is public,\n  // so a stray dust payment must not be mistaken for the funding and observe\n  // the swap as underfunded/invalid.\n  const paidSats = (tx: EsploraTx): number =>\n    tx.vout\n      .filter((vout) => vout.scriptpubkey_address === address)\n      .reduce((sum, vout) => sum + (vout.value ?? 0), 0);\n  let funding: EsploraTx | undefined;\n  let fundedSats = 0;\n  for (const tx of txs) {\n    const paid = paidSats(tx);\n    if (paid > fundedSats) {\n      funding = tx;\n      fundedSats = paid;\n    }\n  }\n  if (funding) {\n    const minConf = opts?.minConfirmations ?? 0;\n    let deepEnough: boolean;\n    if (funding.status?.confirmed) {\n      deepEnough =\n        minConf <= 1 ||\n        (opts?.tipHeight !== undefined &&\n          funding.status.block_height !== undefined &&\n          opts.tipHeight - funding.status.block_height + 1 >= minConf);\n    } else {\n      deepEnough = minConf === 0;\n    }\n    return {\n      funding: deepEnough ? \"confirmed\" : \"mempool\",\n      fundedSats,\n    };\n  }\n  return { funding: \"absent\", fundedSats: 0 };\n}\n\n/**\n * Public esplora endpoints tried in rotation (mainnet). blockstream.info runs the\n * reference esplora, so it's API-compatible with mempool.space; spreading calls\n * across both halves the per-provider load and survives one being throttled.\n */\nexport const DEFAULT_ESPLORA_URLS = [\n  \"https://mempool.space/api\",\n  \"https://blockstream.info/api\",\n];\n\n/**\n * Build a {@link BitcoinChainReader} over one or more esplora REST endpoints.\n * With several, each call starts at a rotating endpoint (to spread load across\n * providers) and fails over to the rest on error — so a throttled or failing\n * provider doesn't stall tracking.\n */\nexport function esploraReader(\n  esploraUrls: string | string[],\n  fetchImpl: typeof fetch = fetch,\n  policy?: BitcoinReaderPolicy,\n): BitcoinChainReader {\n  const bases = (Array.isArray(esploraUrls) ? esploraUrls : [esploraUrls]).map(\n    (url) => url.replace(/\\/+$/, \"\"),\n  );\n  let start = 0;\n  return {\n    async getHtlcFacts(address, minConfirmations) {\n      const required =\n        minConfirmations ?? resolveMinConfirmations(policy?.minConfirmations);\n      const from = start++ % bases.length; // rotate the primary to spread load\n      let lastError: unknown;\n      for (let i = 0; i < bases.length; i++) {\n        const base = bases[(from + i) % bases.length];\n        try {\n          const res = await fetchImpl(\n            `${base}/address/${encodeURIComponent(address)}/txs`,\n          );\n          if (!res.ok) throw new Error(`esplora ${res.status} at ${base}`);\n          const txs = (await res.json()) as EsploraTx[];\n          // Depth policies beyond 1 need the tip to compute confirmations;\n          // 0 and 1 read straight off the tx's confirmed flag.\n          let tipHeight: number | undefined;\n          if (required > 1) {\n            const tip = await fetchImpl(`${base}/blocks/tip/height`);\n            if (!tip.ok) throw new Error(`esplora ${tip.status} at ${base}`);\n            tipHeight = Number(await tip.text());\n          }\n          return htlcFactsFromEsploraTxs(txs, address, {\n            minConfirmations: required,\n            tipHeight,\n          });\n        } catch (error) {\n          lastError = error;\n        }\n      }\n      throw lastError ?? new Error(\"no esplora endpoints configured\");\n    },\n  };\n}\n"],"mappings":";AA+CO,SAAS,wBACd,QACQ;AACR,UAAQ,OAAO,WAAW,aAAa,OAAO,IAAI,WAAW;AAC/D;AAQO,SAAS,wBACd,KACA,SACA,MACkB;AAClB,aAAW,MAAM,KAAK;AACpB,UAAM,QAAQ,GAAG,IAAI;AAAA,MACnB,CAAC,QAAQ,IAAI,SAAS,yBAAyB;AAAA,IACjD;AACA,QAAI;AACF,aAAO;AAAA,QACL,SAAS;AAAA,QACT,YAAY;AAAA;AAAA,QACZ,cAAc,MAAM,WAAW,CAAC;AAAA,MAClC;AAAA,EACJ;AAKA,QAAM,WAAW,CAAC,OAChB,GAAG,KACA,OAAO,CAAC,SAAS,KAAK,yBAAyB,OAAO,EACtD,OAAO,CAAC,KAAK,SAAS,OAAO,KAAK,SAAS,IAAI,CAAC;AACrD,MAAI;AACJ,MAAI,aAAa;AACjB,aAAW,MAAM,KAAK;AACpB,UAAM,OAAO,SAAS,EAAE;AACxB,QAAI,OAAO,YAAY;AACrB,gBAAU;AACV,mBAAa;AAAA,IACf;AAAA,EACF;AACA,MAAI,SAAS;AACX,UAAM,UAAU,MAAM,oBAAoB;AAC1C,QAAI;AACJ,QAAI,QAAQ,QAAQ,WAAW;AAC7B,mBACE,WAAW,KACV,MAAM,cAAc,UACnB,QAAQ,OAAO,iBAAiB,UAChC,KAAK,YAAY,QAAQ,OAAO,eAAe,KAAK;AAAA,IAC1D,OAAO;AACL,mBAAa,YAAY;AAAA,IAC3B;AACA,WAAO;AAAA,MACL,SAAS,aAAa,cAAc;AAAA,MACpC;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,SAAS,UAAU,YAAY,EAAE;AAC5C;AAOO,IAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AACF;AAQO,SAAS,cACd,aACA,YAA0B,OAC1B,QACoB;AACpB,QAAM,SAAS,MAAM,QAAQ,WAAW,IAAI,cAAc,CAAC,WAAW,GAAG;AAAA,IACvE,CAAC,QAAQ,IAAI,QAAQ,QAAQ,EAAE;AAAA,EACjC;AACA,MAAI,QAAQ;AACZ,SAAO;AAAA,IACL,MAAM,aAAa,SAAS,kBAAkB;AAC5C,YAAM,WACJ,oBAAoB,wBAAwB,QAAQ,gBAAgB;AACtE,YAAM,OAAO,UAAU,MAAM;AAC7B,UAAI;AACJ,eAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,cAAM,OAAO,OAAO,OAAO,KAAK,MAAM,MAAM;AAC5C,YAAI;AACF,gBAAM,MAAM,MAAM;AAAA,YAChB,GAAG,IAAI,YAAY,mBAAmB,OAAO,CAAC;AAAA,UAChD;AACA,cAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,WAAW,IAAI,MAAM,OAAO,IAAI,EAAE;AAC/D,gBAAM,MAAO,MAAM,IAAI,KAAK;AAG5B,cAAI;AACJ,cAAI,WAAW,GAAG;AAChB,kBAAM,MAAM,MAAM,UAAU,GAAG,IAAI,oBAAoB;AACvD,gBAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,WAAW,IAAI,MAAM,OAAO,IAAI,EAAE;AAC/D,wBAAY,OAAO,MAAM,IAAI,KAAK,CAAC;AAAA,UACrC;AACA,iBAAO,wBAAwB,KAAK,SAAS;AAAA,YAC3C,kBAAkB;AAAA,YAClB;AAAA,UACF,CAAC;AAAA,QACH,SAAS,OAAO;AACd,sBAAY;AAAA,QACd;AAAA,MACF;AACA,YAAM,aAAa,IAAI,MAAM,iCAAiC;AAAA,IAChE;AAAA,EACF;AACF;","names":[]}

package/dist/index.cjs

@@ -36,8 +36,12 @@ var bitcoin_reader_esplora_exports = {};
 __export(bitcoin_reader_esplora_exports, {
   DEFAULT_ESPLORA_URLS: () => DEFAULT_ESPLORA_URLS,
   esploraReader: () => esploraReader,
-  htlcFactsFromEsploraTxs: () => htlcFactsFromEsploraTxs
+  htlcFactsFromEsploraTxs: () => htlcFactsFromEsploraTxs,
+  resolveMinConfirmations: () => resolveMinConfirmations
 });
+function resolveMinConfirmations(source) {
+  return (typeof source === "function" ? source() : source) ?? 0;
+}
 function htlcFactsFromEsploraTxs(txs, address, opts) {
   for (const tx of txs) {
     const spend = tx.vin.find(
@@ -80,11 +84,10 @@ function esploraReader(esploraUrls, fetchImpl = fetch, policy) {
   const bases = (Array.isArray(esploraUrls) ? esploraUrls : [esploraUrls]).map(
     (url) => url.replace(/\/+$/, "")
   );
-  const minConf = policy?.minConfirmations ?? 0;
   let start = 0;
   return {
     async getHtlcFacts(address, minConfirmations) {
-      const required = minConfirmations ?? minConf;
+      const required = minConfirmations ?? resolveMinConfirmations(policy?.minConfirmations);
       const from = start++ % bases.length;
       let lastError;
       for (let i = 0; i < bases.length; i++) {
@@ -145,7 +148,6 @@ function scriptHashOf(script) {
 }
 function electrumReader(client, opts) {
   const network = opts?.network ?? "mainnet";
-  const defaultMinConf = opts?.minConfirmations ?? 0;
   const fallback2 = opts?.fallback;
   const scriptFor = (address) => btc.OutScript.encode(
     btc.Address(toBtcSignerNetwork(network)).decode(address)
@@ -231,7 +233,7 @@ function electrumReader(client, opts) {
   }
   return {
     async getHtlcFacts(address, minConfirmations) {
-      const required = minConfirmations ?? defaultMinConf;
+      const required = minConfirmations ?? resolveMinConfirmations(opts?.minConfirmations);
       try {
         return await getHtlcFactsElectrum(address, required);
       } catch (error) {
@@ -273,6 +275,7 @@ var init_bitcoin_reader_electrum = __esm({
     import_sha22 = require("@noble/hashes/sha2.js");
     import_base5 = require("@scure/base");
     btc = __toESM(require("@scure/btc-signer"), 1);
+    init_bitcoin_reader_esplora();
     REGTEST_NETWORK = {
       bech32: "bcrt",
       pubKeyHash: 111,
@@ -308,6 +311,7 @@ __export(src_exports, {
   htlcFactsFromEsploraTxs: () => htlcFactsFromEsploraTxs,
   htlcKey: () => htlcKey,
   htlcQueryKey: () => htlcQueryKey,
+  resolveMinConfirmations: () => resolveMinConfirmations,
   swapToTracked: () => swapToTracked
 });
 module.exports = __toCommonJS(src_exports);
@@ -1112,7 +1116,8 @@ function refQueryKey(ref) {
 var AVG_BLOCK_MS = {
   1: 12e3,
   137: 2100,
-  42161: 250
+  42161: 250,
+  30: 3e4
 };
 var SCAN_MARGIN_BLOCKS = 1000n;
 var EvmContractManager = class _EvmContractManager {
@@ -1368,7 +1373,9 @@ var DEFAULT_EVM_RPCS = {
     "https://arb1.arbitrum.io/rpc",
     "https://arbitrum.drpc.org",
     "https://arbitrum-one-rpc.publicnode.com"
-  ]
+  ],
+  // Rootstock: the public node, HTTP only (no WebSocket endpoint exists).
+  30: ["https://public-node.rsk.co"]
 };
 var SWAP_CREATED = (0, import_viem.parseAbiItem)(
   "event SwapCreated(bytes32 indexed preimageHash, address indexed refundAddress, address indexed claimAddress, address token, uint256 amount, uint256 timelock, bytes32 key)"
@@ -1401,25 +1408,52 @@ function activeKey(q) {
     }
   });
 }
-function evmReaderFromClient(client) {
+function evmReaderFromClient(client, options = {}) {
+  const { maxBlockRange } = options;
+  async function getLogs(filter, fromBlock) {
+    if (maxBlockRange === void 0) {
+      return client.request({
+        method: "eth_getLogs",
+        params: [{ ...filter, fromBlock: (0, import_viem.numberToHex)(fromBlock) }]
+      });
+    }
+    const latest = (await client.getBlock()).number;
+    if (latest === null) {
+      throw new Error("latest block has no number");
+    }
+    const logs = [];
+    for (let from = fromBlock; from <= latest; from += maxBlockRange) {
+      const to = from + maxBlockRange - 1n < latest ? from + maxBlockRange - 1n : latest;
+      logs.push(
+        ...await client.request({
+          method: "eth_getLogs",
+          params: [
+            {
+              ...filter,
+              fromBlock: (0, import_viem.numberToHex)(from),
+              toBlock: (0, import_viem.numberToHex)(to)
+            }
+          ]
+        })
+      );
+    }
+    return logs;
+  }
   return {
     async getHtlcEventsBatch(queries, fromBlock = 0n) {
       const results = /* @__PURE__ */ new Map();
       if (queries.length === 0) return results;
       for (const q of queries) results.set(htlcQueryKey(q), []);
-      const logs = await client.request({
-        method: "eth_getLogs",
-        params: [
-          {
-            address: unique(queries.map((q) => q.htlc)),
-            topics: [
-              HTLC_EVENT_TOPICS,
-              unique(queries.map((q) => q.preimageHash))
-            ],
-            fromBlock: (0, import_viem.numberToHex)(fromBlock)
-          }
-        ]
-      });
+      const logs = await getLogs(
+        {
+          address: unique(queries.map((q) => q.htlc)),
+          topics: [
+            HTLC_EVENT_TOPICS,
+            unique(queries.map((q) => q.preimageHash))
+          ]
+        },
+        fromBlock
+      );
       const grouped = /* @__PURE__ */ new Map();
       for (const log of logs) {
         const decoded = tryDecode(log);
@@ -1535,12 +1569,15 @@ function toHtlcEvent(decoded, query) {
 function unique(values) {
   return [...new Set(values)];
 }
-function createEvmRpcReader(rpcUrls) {
+function createEvmRpcReader(rpcUrls, options = {}) {
   const urls = Array.isArray(rpcUrls) ? rpcUrls : [rpcUrls];
   const transport = urls.length > 1 ? (0, import_viem.fallback)(urls.map((url) => (0, import_viem.http)(url))) : (0, import_viem.http)(urls[0]);
   const client = (0, import_viem.createPublicClient)({ transport });
-  return evmReaderFromClient(client);
+  return evmReaderFromClient(client, options);
 }
+var EVM_LOG_RANGE_LIMITS = {
+  30: 2000n
+};
 function defaultEvmReaders(overrides) {
   const chainIds = /* @__PURE__ */ new Set([
     ...Object.keys(DEFAULT_EVM_RPCS).map(Number),
@@ -1551,7 +1588,13 @@ function defaultEvmReaders(overrides) {
     const override = overrides?.[chainId];
     const defaults = DEFAULT_EVM_RPCS[chainId] ?? [];
     const urls = override ? [override, ...defaults] : defaults;
-    if (urls.length > 0) readers.set(chainId, createEvmRpcReader(urls));
+    if (urls.length > 0)
+      readers.set(
+        chainId,
+        createEvmRpcReader(urls, {
+          maxBlockRange: EVM_LOG_RANGE_LIMITS[chainId]
+        })
+      );
   }
   return readers;
 }
@@ -2318,21 +2361,38 @@ function swapToTracked(stored) {
 }
 
 // src/tracker/swap-tracker.ts
+var CLAIM_SUBMITTED = /* @__PURE__ */ new Set([
+  "clientredeeming",
+  "clientredeemed",
+  "serverredeemed"
+]);
+var DEFAULT_AT_RISK_RECONCILE_INTERVAL_MS = 6e4;
+var RETRY_UNREGISTERED_INTERVAL_MS = 6e4;
 var SwapTracker = class {
   #managers;
   #swaps = /* @__PURE__ */ new Map();
+  /**
+   * Swaps whose startup registration failed (a chain read that errored).
+   * Retried every minute; dropping them would leave an active swap
+   * unwatched for the whole session with no claim or refund surfaced.
+   */
+  #unregistered = /* @__PURE__ */ new Map();
   /** Last actions emitted per swap — for dedupe and the subscribe-time snapshot. */
   #lastActions = /* @__PURE__ */ new Map();
+  /** The latest server status hint per swap, for {@link #withClaimHint}. */
+  #hintStatuses = /* @__PURE__ */ new Map();
   #subscribers = /* @__PURE__ */ new Set();
   #refreshIntervalMs;
   #atRiskReconcileIntervalMs;
   #lastAtRiskReconcileAt = 0;
+  #lastRetryAt = 0;
   #eventUnsubs = [];
   #timer;
   constructor(managers, options) {
     this.#managers = managers;
     this.#refreshIntervalMs = options?.refreshIntervalMs ?? 0;
-    this.#atRiskReconcileIntervalMs = options?.atRiskReconcileIntervalMs ?? 6e4;
+    const atRisk = options?.atRiskReconcileIntervalMs ?? DEFAULT_AT_RISK_RECONCILE_INTERVAL_MS;
+    this.#atRiskReconcileIntervalMs = typeof atRisk === "function" ? atRisk : () => atRisk;
   }
   /**
    * Whether every on-chain leg of `swap` is observable — i.e. the tracker can
@@ -2355,7 +2415,22 @@ var SwapTracker = class {
         continue;
       }
       this.#swaps.set(swap.swapId, swap);
-      for (const leg of legsOf(swap)) await this.#managerFor(leg).register(leg);
+      const registered = [];
+      try {
+        for (const leg of legsOf(swap)) {
+          await this.#managerFor(leg).register(leg);
+          registered.push(leg);
+        }
+      } catch (error) {
+        this.#swaps.delete(swap.swapId);
+        for (const leg of registered)
+          void this.#managerFor(leg).unregister(leg);
+        this.#unregistered.set(swap.swapId, swap);
+        console.warn(
+          `SwapTracker: swap ${swap.swapId} not tracked yet, registering its legs failed (will retry):`,
+          error
+        );
+      }
     }
     for (const manager of new Set(this.#managers.values())) {
       this.#eventUnsubs.push(manager.onEvent(() => this.#recomputeAll()));
@@ -2363,6 +2438,7 @@ var SwapTracker = class {
     await this.#refreshManagers();
     this.#recomputeAll();
     this.#lastAtRiskReconcileAt = Date.now();
+    this.#lastRetryAt = this.#lastAtRiskReconcileAt;
     if (this.#refreshIntervalMs > 0)
       this.#timer = setInterval(
         () => void this.#tick(),
@@ -2412,7 +2488,11 @@ var SwapTracker = class {
    */
   async #tick() {
     const now = Date.now();
-    if (now - this.#lastAtRiskReconcileAt >= this.#atRiskReconcileIntervalMs) {
+    if (now - this.#lastRetryAt >= RETRY_UNREGISTERED_INTERVAL_MS) {
+      this.#lastRetryAt = now;
+      await this.#retryUnregistered();
+    }
+    if (now - this.#lastAtRiskReconcileAt >= this.#atRiskReconcileIntervalMs()) {
       this.#lastAtRiskReconcileAt = now;
       const legs = [...this.#swaps.values()].filter((swap) => this.#isAtRisk(swap)).flatMap((swap) => legsOf(swap));
       await Promise.all(
@@ -2425,6 +2505,25 @@ var SwapTracker = class {
     }
     this.#recomputeAll();
   }
+  /**
+   * Second attempt at swaps whose startup registration failed, on its own
+   * cadence so a slow at-risk interval can't delay it. `track` is idempotent
+   * and rolls back on failure, so a chain that is still down just leaves the
+   * swap here for the next round.
+   */
+  async #retryUnregistered() {
+    for (const [swapId, swap] of this.#unregistered) {
+      try {
+        await this.track(swap);
+        this.#unregistered.delete(swapId);
+      } catch (error) {
+        console.warn(
+          `SwapTracker: retrying registration of ${swapId} failed:`,
+          error
+        );
+      }
+    }
+  }
   /**
    * Whether a swap needs chain-verified monitoring independent of the server:
    * its client leg holds (or held) funds on-chain, so knowing when a refund
@@ -2484,6 +2583,7 @@ var SwapTracker = class {
   async applyHint(swapId, opts) {
     const swap = this.#swaps.get(swapId);
     if (!swap) return;
+    if (opts?.status !== void 0) this.#hintStatuses.set(swapId, opts.status);
     const legs = legsOf(swap);
     const results = await Promise.allSettled(
       legs.map((leg) => this.#managerFor(leg).reconcile(leg))
@@ -2520,6 +2620,7 @@ var SwapTracker = class {
       for (const leg of legsOf(swap))
         void this.#managerFor(leg).unregister(leg);
     this.#swaps.clear();
+    this.#unregistered.clear();
     this.#subscribers.clear();
   }
   #managerFor(ref) {
@@ -2531,6 +2632,28 @@ var SwapTracker = class {
   #recomputeAll() {
     for (const swap of this.#swaps.values()) this.#recompute(swap);
   }
+  /**
+   * A server hint that the claim was submitted overrides a chain view that
+   * still says "claim now". The claim is relayed by the server, so once it
+   * reports the redeem in flight, another claim can only be refused; and a
+   * chain that cannot be read (no `eth_getLogs` on the public Rootstock RPCs)
+   * keeps its stale pre-claim observation for good. The chain still wins once
+   * it moves: a fresh `spent_claim` derives past the hint on its own, and a
+   * refund observed on chain is not overridden.
+   *
+   * The override lasts only while the server's claim window is open. Once the
+   * server can refund its leg, the chain view is what protects the client: the
+   * `serverfunded` rules never claim then and lead to the client's own refund
+   * at its timelock. A claim that really landed shows up on chain long before
+   * that; a hint that never did must not hide the refund.
+   */
+  #withClaimHint(swap, derived, serverChainNow) {
+    const hint = this.#hintStatuses.get(swap.swapId);
+    if (hint === void 0 || !CLAIM_SUBMITTED.has(hint)) return derived;
+    if (derived !== "serverfunded") return derived;
+    const claimWindowOpen = serverChainNow < swap.serverRefundLocktime;
+    return claimWindowOpen ? hint : derived;
+  }
   #recompute(swap, force = false) {
     let clientHtlc;
     let serverHtlc;
@@ -2550,8 +2673,9 @@ var SwapTracker = class {
       if (serverHtlc === void 0 || now === void 0) return;
       serverChainNow = now;
     }
-    const status = deriveSwapStatus({ clientHtlc, serverHtlc });
-    if (status === void 0) return;
+    const derived = deriveSwapStatus({ clientHtlc, serverHtlc });
+    if (derived === void 0) return;
+    const status = this.#withClaimHint(swap, derived, serverChainNow);
     const actions = {
       ...deriveSwapActions({
         status,
@@ -2602,12 +2726,16 @@ var Client = class {
   #startPromise;
   /** Swap ids whose settled status was already re-fetched this session. */
   #settledSyncDone = /* @__PURE__ */ new Set();
+  /** Read per chain read, so it can change without rebuilding the client. */
+  #bitcoinMinConfirmations;
   constructor(...args) {
     if (args[0] instanceof import_lendaswap_sdk_pure2.Client) {
       this.#legacy = args[0];
       this.#tracking = args[1] ?? {
         enabled: false
       };
+      assertMinConfirmations(this.#tracking.bitcoinMinConfirmations);
+      this.#bitcoinMinConfirmations = this.#tracking.bitcoinMinConfirmations;
     } else {
       this.#legacy = new import_lendaswap_sdk_pure2.Client(
         ...args
@@ -2918,6 +3046,22 @@ var Client = class {
     return this.#legacy.hasReceivedVtxo(...args);
   }
   // --- Satora-native features go below ---
+  /** Confirmations a server-funded Bitcoin HTLC needs before it is claimable. */
+  getBitcoinMinConfirmations() {
+    return this.#bitcoinMinConfirmations;
+  }
+  /**
+   * At `0` the claim goes out against a mempool funding, trusting the funder
+   * not to replace it once the claim reveals the preimage.
+   *
+   * Only the chain monitors read a depth, so this does nothing unless the
+   * client was built with {@link ClientBuilder.withChainVerifiedTracking}.
+   * Takes effect on subsequent reads, including swaps already tracked.
+   */
+  setBitcoinMinConfirmations(minConfirmations) {
+    assertMinConfirmations(minConfirmations);
+    this.#bitcoinMinConfirmations = minConfirmations;
+  }
   /**
    * Start observing the user's active swaps and deriving each one's next action.
    *
@@ -2946,8 +3090,18 @@ var Client = class {
   async #doStartTracking() {
     try {
       const chainVerified = this.#tracking.chainVerified || this.#tracking.managers !== void 0;
+      if (!chainVerified && (this.#bitcoinMinConfirmations ?? 0) > 0)
+        console.warn(
+          "Client: bitcoinMinConfirmations is set but tracking follows server hints, which carry no depth. Build with ClientBuilder.withChainVerifiedTracking() for the depth to gate the claim."
+        );
       const tracker = chainVerified ? new SwapTracker(await this.#ensureManagers(), {
-        refreshIntervalMs: this.#tracking.refreshIntervalMs ?? 5e3
+        refreshIntervalMs: this.#tracking.refreshIntervalMs ?? 5e3,
+        // Depth is only re-derived on a chain read, and nothing pushes on a
+        // new block (an Electrum scripthash status doesn't change once the
+        // funding is in a block), so a deep policy would otherwise sit out
+        // the default interval after the block that satisfied it. Read per
+        // tick, like the depth itself, so a setter call after start counts.
+        atRiskReconcileIntervalMs: () => (this.#bitcoinMinConfirmations ?? 0) > 1 ? 15e3 : DEFAULT_AT_RISK_RECONCILE_INTERVAL_MS
       }) : new HintTracker({
         fetchStatus: async (swapId) => (await this.getSwap(swapId, { updateStorage: true })).status,
         refreshIntervalMs: this.#tracking.refreshIntervalMs ?? 5e3
@@ -3133,8 +3287,7 @@ var Client = class {
       evmRpcUrls,
       esploraUrl,
       electrumWsUrl,
-      bitcoinNetwork,
-      bitcoinMinConfirmations
+      bitcoinNetwork
     } = this.#tracking;
     const chainTime = async () => (await this.getMtp()).mtp * 1e3;
     const arkadeUrl = arkadeServerUrl ?? defaultArkadeServerUrl("bitcoin");
@@ -3155,7 +3308,7 @@ var Client = class {
         electrumWsUrl: electrumWsUrl ?? import_lendaswap_sdk_pure2.DEFAULT_ELECTRUM_WS_URLS[network],
         network,
         chainTime,
-        minConfirmations: bitcoinMinConfirmations
+        minConfirmations: () => this.#bitcoinMinConfirmations
       })
     );
     this.#managers = managers;
@@ -3276,9 +3429,11 @@ var ClientBuilder = class {
    * funding hits the mempool, which TRUSTS the funder not to double-spend it
    * (claiming publishes the preimage, so a funder that then replaced its
    * funding could take both legs). Set `1` (or more) for a block-depth policy
-   * that doesn't rely on the funder's good behaviour.
+   * that doesn't rely on the funder's good behaviour. Read only by the chain
+   * monitors, so it needs {@link withChainVerifiedTracking} to have any effect.
    */
   withBitcoinMinConfirmations(minConfirmations) {
+    assertMinConfirmations(minConfirmations);
     this.#bitcoinMinConfirmations = minConfirmations;
     return this;
   }
@@ -3335,6 +3490,13 @@ var ClientBuilder = class {
     });
   }
 };
+function assertMinConfirmations(value) {
+  if (value === void 0) return;
+  if (!Number.isInteger(value) || value < 0)
+    throw new Error(
+      `bitcoinMinConfirmations must be a non-negative integer, got ${value}`
+    );
+}
 function legacyBaseUrl(legacy) {
   try {
     return legacy.baseUrl;
@@ -3383,6 +3545,7 @@ init_bitcoin_reader_esplora();
   htlcFactsFromEsploraTxs,
   htlcKey,
   htlcQueryKey,
+  resolveMinConfirmations,
   swapToTracked,
   ...require("@lendasat/lendaswap-sdk-pure")
 });