1 files changed, 6 insertions, 2 deletions
diff --git a/src/ark/validate.js b/src/ark/validate.js
index fae3465..9cb1751 100644
--- a/src/ark/validate.js
+++ b/src/ark/validate.js
@@ -24,7 +24,11 @@ const fail = (msg) => { throw new VtxoValidationError(msg); };
 // plus getTxStatus(txid) -> {confirmed, block_height} (esplora semantics)
 // allowPolicies: acceptable policy types (default plain pubkey only; lightning
 // flows pass ['serverHtlcSend'] / ['serverHtlcRecv'] for their HTLC vtxos)
-export async function validateVtxo(vtxo, { serverPubkey, chain, expectPubkeys, allowPolicies = ['pubkey'] }) {
+// acceptExpired: the server keeps honoring coins past their timelock (coinos:
+// captaind allow_expired_arkoor) — the coin is then an IOU the server has
+// already swept the tree of, which is exactly what the holder chose when they
+// left custody to coinos; refuse only on servers that would refuse to spend it
+export async function validateVtxo(vtxo, { serverPubkey, chain, expectPubkeys, allowPolicies = ['pubkey'], acceptExpired = false }) {
   const serverHex = hex.encode(serverPubkey);
 
   // -- structural --
@@ -41,7 +45,7 @@ export async function validateVtxo(vtxo, { serverPubkey, chain, expectPubkeys, a
   // and the coinos ASP keeps honoring them off-chain after sweeping their
   // round — an explicit IOU where the trustless path never existed anyway.
   const tip = await chain.tipHeight();
-  if (vtxo.expiryHeight <= tip && vtxo.amountSat >= 330) {
+  if (!acceptExpired && vtxo.expiryHeight <= tip && vtxo.amountSat >= 330) {
     fail(`vtxo expired at ${vtxo.expiryHeight}, tip ${tip}`);
   }