@arkade-os/sdk 0.4.27 → 0.4.29

package/dist/esm/wallet/wallet.js

@@ -1,2186 +0,0 @@
-import { base64, hex } from "@scure/base";
-import { tapLeafHash } from "@scure/btc-signer/payment.js";
-import { Address, OutScript, SigHash, Transaction } from "@scure/btc-signer";
-import { sha256 } from "@scure/btc-signer/utils.js";
-import { ArkAddress } from "../script/address.js";
-import { DefaultVtxo } from "../script/default.js";
-import { getNetwork } from "../networks.js";
-import { ESPLORA_URL, EsploraProvider, } from "../providers/onchain.js";
-import { RestArkProvider, } from "../providers/ark.js";
-import { buildForfeitTx } from "../forfeit.js";
-import { validateConnectorsTxGraph, validateVtxoTxGraph, } from "../tree/validation.js";
-import { validateBatchRecipients } from "./validation.js";
-import { DEFAULT_ARKADE_SERVER_URL, isExpired, isRecoverable, isSpendable, isSubdust, TxType, } from "./index.js";
-import { createAssetPacket, selectCoinsWithAsset, selectedCoinsToAssetInputs, } from "./asset.js";
-import { VtxoScript } from "../script/base.js";
-import { CSVMultisigTapscript } from "../script/tapscript.js";
-import { buildOffchainTx, hasBoardingTxExpired, isValidArkAddress, } from "../utils/arkTransaction.js";
-import { DEFAULT_RENEWAL_CONFIG, DEFAULT_SETTLEMENT_CONFIG, VtxoManager, } from "./vtxo-manager.js";
-import { ArkNote } from "../arknote/index.js";
-import { Intent } from "../intent/index.js";
-import { RestIndexerProvider } from "../providers/indexer.js";
-import { extendCoin, validateRecipients } from "./utils.js";
-import { ArkError } from "../providers/errors.js";
-import { Batch } from "./batch.js";
-import { Estimator } from "../arkfee/index.js";
-import { buildTransactionHistory } from "../utils/transactionHistory.js";
-import { AssetManager, ReadonlyAssetManager } from "./asset-manager.js";
-import { Extension } from "../extension/index.js";
-import { DelegateVtxo } from "../script/delegate.js";
-import { DelegatorManagerImpl, findDestinationOutputIndex, } from "./delegator.js";
-import { IndexedDBContractRepository, IndexedDBWalletRepository, } from "../repositories/index.js";
-import { ContractManager } from "../contracts/contractManager.js";
-import { contractHandlers } from "../contracts/handlers/index.js";
-import { timelockToSequence } from "../utils/timelock.js";
-import { clearSyncCursor, updateWalletState } from "../utils/syncCursors.js";
-import { validateVtxosForScript, saveVtxosForContract, } from "../contracts/vtxoOwnership.js";
-import { WalletReceiveRotator } from "./walletReceiveRotator.js";
-import { InputSignerRouter } from "./inputSignerRouter.js";
-import { DescriptorSigningProviderMissingError, MissingSigningDescriptorError, } from "./signingErrors.js";
-export const getArkadeServerUrl = ({ arkServerUrl, }) => arkServerUrl || DEFAULT_ARKADE_SERVER_URL;
-// Build per-input jobs for an intent proof. Index 0 of the proof is a
-// synthetic BIP-322 toSpend reference whose witnessUtxo.script mirrors
-// coin[0]'s pkScript, so we map it to the same source contract as
-// coin[0]; coins 0..N-1 then map to proof inputs 1..N.
-function intentProofJobs(coins) {
-    if (coins.length === 0)
-        return [];
-    const coinJobs = coins.map((coin, i) => ({
-        index: i + 1,
-        lookupScript: VtxoScript.decode(coin.tapTree).pkScript,
-    }));
-    return [{ index: 0, lookupScript: coinJobs[0].lookupScript }, ...coinJobs];
-}
-// Built-in ArkProvider implementations (Rest/Expo) expose `serverUrl`,
-// but the interface itself does not declare a URL accessor — so this is a
-// structural read that returns undefined for custom implementations.
-function extractArkProviderUrl(provider) {
-    const serverUrl = provider.serverUrl;
-    return typeof serverUrl === "string" && serverUrl.length > 0
-        ? serverUrl
-        : undefined;
-}
-// Historical unilateral exit delay for mainnet (~7 days in seconds).
-// Kept so existing wallets can still discover and spend VTXOs sent to the
-// legacy address after arkd starts advertising a different delay.
-const MAINNET_UNILATERAL_EXIT_DELAY = 605184n;
-function delayToTimelock(delay) {
-    return {
-        value: delay,
-        type: delay < 512n ? "blocks" : "seconds",
-    };
-}
-function dedupeTimelocks(timelocks) {
-    const seen = new Set();
-    const deduped = [];
-    for (const timelock of timelocks) {
-        const sequence = timelockToSequence(timelock).toString();
-        if (seen.has(sequence))
-            continue;
-        seen.add(sequence);
-        deduped.push(timelock);
-    }
-    return deduped;
-}
-/**
- * Type guard function to check if an identity has a toReadonly method.
- */
-function hasToReadonly(identity) {
-    return (typeof identity === "object" &&
-        identity !== null &&
-        "toReadonly" in identity &&
-        typeof identity.toReadonly === "function");
-}
-export { DescriptorSigningProviderMissingError, MissingSigningDescriptorError };
-export class ReadonlyWallet {
-    get assetManager() {
-        return this._assetManager;
-    }
-    constructor(identity, network, onchainProvider, indexerProvider, arkServerPublicKey, offchainTapscript, boardingTapscript, dustAmount, walletRepository, contractRepository, delegatorProvider, watcherConfig, walletContractTimelocks) {
-        this.identity = identity;
-        this.network = network;
-        this.onchainProvider = onchainProvider;
-        this.indexerProvider = indexerProvider;
-        this.arkServerPublicKey = arkServerPublicKey;
-        this.boardingTapscript = boardingTapscript;
-        this.dustAmount = dustAmount;
-        this.walletRepository = walletRepository;
-        this.contractRepository = contractRepository;
-        this.delegatorProvider = delegatorProvider;
-        // Outpoints ("txid:vout") committed to an in-flight settle/send. Filtered
-        // from getVtxos() so concurrent callers (UI, VtxoManager auto-renewal,
-        // another send/settle racing the _txLock) can't reselect coins that are
-        // already on their way out. The set is in-memory only: a process crash
-        // clears it, and a stale entry only hides a VTXO (never spends one).
-        this._pendingSpendOutpoints = new Set();
-        // Guard: detect identity/server network mismatch for descriptor-based identities.
-        // This duplicates the check in setupWalletConfig() so that subclasses
-        // bypassing the factory still get the safety net.
-        if ("descriptor" in identity) {
-            const descriptor = identity.descriptor;
-            const identityIsMainnet = !descriptor.includes("tpub");
-            const serverIsMainnet = network.bech32 === "bc";
-            if (identityIsMainnet !== serverIsMainnet) {
-                throw new Error(`Network mismatch: identity uses ${identityIsMainnet ? "mainnet" : "testnet"} derivation ` +
-                    `but wallet network is ${serverIsMainnet ? "mainnet" : "testnet"}. ` +
-                    `Create identity with { isMainnet: ${serverIsMainnet} } to match.`);
-            }
-        }
-        this._offchainTapscript = offchainTapscript;
-        this.watcherConfig = watcherConfig;
-        this._assetManager = new ReadonlyAssetManager(this.indexerProvider);
-        // Defensive for direct-construction callers; setupWalletConfig already
-        // passes a deduped list through the public create() factories.
-        this.walletContractTimelocks =
-            walletContractTimelocks && walletContractTimelocks.length > 0
-                ? dedupeTimelocks(walletContractTimelocks)
-                : [
-                    this.offchainTapscript.options.csvTimelock ??
-                        DefaultVtxo.Script.DEFAULT_TIMELOCK,
-                ];
-    }
-    /**
-     * Currently-active receive tapscript. Read-only from the outside;
-     * mutated only via {@link Wallet.setOffchainTapscriptForRotation}
-     * by {@link WalletReceiveRotator.rotate}.
-     */
-    get offchainTapscript() {
-        return this._offchainTapscript;
-    }
-    /**
-     * Protected helper to set up shared wallet configuration.
-     * Extracts common logic used by both ReadonlyWallet.create() and Wallet.create().
-     */
-    static async setupWalletConfig(config, pubKey) {
-        const arkadeServerUrl = getArkadeServerUrl(config);
-        // Use provided arkProvider instance or create a new one from arkServerUrl
-        const arkProvider = config.arkProvider ?? new RestArkProvider(arkadeServerUrl);
-        // Resolve the indexer provider. If a full instance is supplied, use it
-        // directly. Otherwise pick a URL with priority:
-        //   1. explicit config.indexerUrl
-        //   2. URL derived from the injected arkProvider (so a custom
-        //      arkProvider does not silently pair with the public default)
-        //   3. arkadeServerUrl (only when no custom arkProvider was injected)
-        let indexerProvider = config.indexerProvider;
-        if (!indexerProvider) {
-            let indexerUrl = config.indexerUrl;
-            if (!indexerUrl) {
-                if (config.arkProvider) {
-                    const derived = extractArkProviderUrl(config.arkProvider);
-                    if (!derived) {
-                        throw new Error("indexerUrl is required when arkProvider is provided without a discoverable serverUrl");
-                    }
-                    indexerUrl = derived;
-                }
-                else {
-                    indexerUrl = arkadeServerUrl;
-                }
-            }
-            indexerProvider = new RestIndexerProvider(indexerUrl);
-        }
-        const info = await arkProvider.getInfo();
-        const network = getNetwork(info.network);
-        // Guard: detect identity/server network mismatch for seed-based identities.
-        // A mainnet descriptor (xpub, coin type 0) connected to a testnet server
-        // (or vice versa) means wrong derivation path → wrong keys → potential fund loss.
-        if ("descriptor" in config.identity) {
-            const descriptor = config.identity.descriptor;
-            const identityIsMainnet = !descriptor.includes("tpub");
-            const serverIsMainnet = info.network === "bitcoin";
-            if (identityIsMainnet && !serverIsMainnet) {
-                throw new Error(`Network mismatch: identity uses mainnet derivation (coin type 0) ` +
-                    `but the Arkade server is on ${info.network}. ` +
-                    `Create identity with { isMainnet: false } to use testnet derivation.`);
-            }
-            if (!identityIsMainnet && serverIsMainnet) {
-                throw new Error(`Network mismatch: identity uses testnet derivation (coin type 1) ` +
-                    `but the Arkade server is on mainnet. ` +
-                    `Create identity with { isMainnet: true } or omit isMainnet (defaults to mainnet).`);
-            }
-        }
-        // Extract esploraUrl from provider if not explicitly provided
-        const esploraUrl = config.esploraUrl || ESPLORA_URL[info.network];
-        // Use provided onchainProvider instance or create a new one
-        const onchainProvider = config.onchainProvider || new EsploraProvider(esploraUrl);
-        // validate unilateral exit timelock passed in config if any
-        if (config.exitTimelock) {
-            const { value, type } = config.exitTimelock;
-            if ((value < 512n && type !== "blocks") ||
-                (value >= 512n && type !== "seconds")) {
-                throw new Error("invalid exitTimelock");
-            }
-        }
-        const arkdExitTimelock = delayToTimelock(info.unilateralExitDelay);
-        // create unilateral exit timelock
-        const exitTimelock = config.exitTimelock ?? arkdExitTimelock;
-        const walletContractTimelocks = config.exitTimelock
-            ? [exitTimelock]
-            : dedupeTimelocks([
-                arkdExitTimelock,
-                ...(info.network === "bitcoin"
-                    ? [delayToTimelock(MAINNET_UNILATERAL_EXIT_DELAY)]
-                    : []),
-            ]);
-        // validate boarding timelock passed in config if any
-        if (config.boardingTimelock) {
-            const { value, type } = config.boardingTimelock;
-            if ((value < 512n && type !== "blocks") ||
-                (value >= 512n && type !== "seconds")) {
-                throw new Error("invalid boardingTimelock");
-            }
-        }
-        // create boarding timelock
-        const boardingTimelock = config.boardingTimelock ?? {
-            value: info.boardingExitDelay,
-            type: info.boardingExitDelay < 512n ? "blocks" : "seconds",
-        };
-        // Generate tapscripts for offchain and boarding address
-        const serverPubKey = hex.decode(info.signerPubkey).slice(1);
-        const delegatePubKey = config.delegatorProvider
-            ? await config.delegatorProvider
-                .getDelegateInfo()
-                .then((info) => hex.decode(info.pubkey).slice(1))
-            : undefined;
-        const offchainOptions = {
-            pubKey,
-            serverPubKey,
-            csvTimelock: exitTimelock,
-        };
-        const offchainTapscript = !delegatePubKey
-            ? new DefaultVtxo.Script(offchainOptions)
-            : new DelegateVtxo.Script({ ...offchainOptions, delegatePubKey });
-        const boardingTapscript = new DefaultVtxo.Script({
-            ...offchainOptions,
-            csvTimelock: boardingTimelock,
-        });
-        const walletRepository = config.storage?.walletRepository ?? new IndexedDBWalletRepository();
-        const contractRepository = config.storage?.contractRepository ??
-            new IndexedDBContractRepository();
-        return {
-            arkProvider,
-            indexerProvider,
-            onchainProvider,
-            network,
-            networkName: info.network,
-            serverPubKey,
-            offchainTapscript,
-            boardingTapscript,
-            dustAmount: info.dust,
-            walletRepository,
-            contractRepository,
-            info,
-            delegatorProvider: config.delegatorProvider,
-            walletContractTimelocks,
-        };
-    }
-    /**
-     * Create a readonly wallet for querying balances, addresses, and history.
-     *
-     * @param config - Readonly wallet configuration
-     * @returns A readonly wallet instance
-     */
-    static async create(config) {
-        const pubkey = await config.identity.xOnlyPublicKey();
-        if (!pubkey) {
-            throw new Error("Invalid configured public key");
-        }
-        const setup = await ReadonlyWallet.setupWalletConfig(config, pubkey);
-        return new ReadonlyWallet(config.identity, setup.network, setup.onchainProvider, setup.indexerProvider, setup.serverPubKey, setup.offchainTapscript, setup.boardingTapscript, setup.dustAmount, setup.walletRepository, setup.contractRepository, setup.delegatorProvider, config.watcherConfig, setup.walletContractTimelocks);
-    }
-    get arkAddress() {
-        return this.offchainTapscript.address(this.network.hrp, this.arkServerPublicKey);
-    }
-    /**
-     * Get the pkScript hex for the wallet's primary offchain address.
-     * For the full wallet-owned script set registered in ContractManager, use getWalletScripts().
-     */
-    get defaultContractScript() {
-        return hex.encode(this.offchainTapscript.pkScript);
-    }
-    /** Returns the wallet's Arkade address. */
-    async getAddress() {
-        return this.arkAddress.encode();
-    }
-    /** Returns the onchain boarding address used to move funds into Arkade. */
-    async getBoardingAddress() {
-        return this.boardingTapscript.onchainAddress(this.network);
-    }
-    /**
-     * Return the wallet's combined onchain and offchain balances.
-     */
-    async getBalance() {
-        const [boardingUtxos, vtxos] = await Promise.all([
-            this.getBoardingUtxos(),
-            this.getVtxos(),
-        ]);
-        // boarding
-        let confirmed = 0;
-        let unconfirmed = 0;
-        for (const utxo of boardingUtxos) {
-            if (utxo.status.confirmed) {
-                confirmed += utxo.value;
-            }
-            else {
-                unconfirmed += utxo.value;
-            }
-        }
-        // offchain
-        let settled = 0;
-        let preconfirmed = 0;
-        let recoverable = 0;
-        settled = vtxos
-            .filter((coin) => coin.virtualStatus.state === "settled")
-            .reduce((sum, coin) => sum + coin.value, 0);
-        preconfirmed = vtxos
-            .filter((coin) => coin.virtualStatus.state === "preconfirmed")
-            .reduce((sum, coin) => sum + coin.value, 0);
-        recoverable = vtxos
-            .filter((coin) => isSpendable(coin) && coin.virtualStatus.state === "swept")
-            .reduce((sum, coin) => sum + coin.value, 0);
-        const totalBoarding = confirmed + unconfirmed;
-        const totalOffchain = settled + preconfirmed + recoverable;
-        // aggregate asset balances from spendable virtual outputs
-        const assetBalances = new Map();
-        for (const vtxo of vtxos) {
-            if (!isSpendable(vtxo))
-                continue;
-            if (vtxo.assets) {
-                for (const a of vtxo.assets) {
-                    const current = assetBalances.get(a.assetId) ?? 0n;
-                    assetBalances.set(a.assetId, current + a.amount);
-                }
-            }
-        }
-        const assets = Array.from(assetBalances.entries()).map(([assetId, amount]) => ({
-            assetId,
-            amount,
-        }));
-        return {
-            boarding: {
-                confirmed,
-                unconfirmed,
-                total: totalBoarding,
-            },
-            settled,
-            preconfirmed,
-            available: settled + preconfirmed,
-            recoverable,
-            total: totalBoarding + totalOffchain,
-            assets,
-        };
-    }
-    /**
-     * Return virtual outputs tracked by the wallet.
-     *
-     * @param filter - Optional flags controlling whether recoverable or unrolled VTXOs are included
-     */
-    async getVtxos(filter) {
-        const f = filter ?? { withRecoverable: true, withUnrolled: false };
-        const contractManager = await this.getContractManager();
-        const vtxos = await contractManager.getContractsWithVtxos();
-        return vtxos
-            .flatMap((_) => _.vtxos)
-            .filter((vtxo) => {
-            if (this._pendingSpendOutpoints.has(`${vtxo.txid}:${vtxo.vout}`)) {
-                return false;
-            }
-            if (isSpendable(vtxo)) {
-                if (!f.withRecoverable &&
-                    (isRecoverable(vtxo) || isExpired(vtxo))) {
-                    return false;
-                }
-                return true;
-            }
-            return !!(f.withUnrolled && vtxo.isUnrolled);
-        });
-    }
-    /**
-     * Return wallet transaction history derived from Arkade state and boarding transactions.
-     */
-    async getTransactionHistory() {
-        const contractManager = await this.getContractManager();
-        const response = await contractManager.getContractsWithVtxos();
-        const allVtxos = response.flatMap((_) => _.vtxos);
-        const { boardingTxs, commitmentsToIgnore } = await this.getBoardingTxs();
-        const getTxCreatedAt = (txid) => this.indexerProvider
-            .getVtxos({ outpoints: [{ txid, vout: 0 }] })
-            .then((res) => res.vtxos[0]?.createdAt.getTime());
-        return buildTransactionHistory(allVtxos, boardingTxs, commitmentsToIgnore, getTxCreatedAt);
-    }
-    /**
-     * Clear the global VTXO sync cursor, forcing a full re-bootstrap on next sync.
-     * Useful for recovery after indexer reprocessing or debugging.
-     */
-    async clearSyncCursor() {
-        await clearSyncCursor(this.walletRepository);
-    }
-    /**
-     * Build a transaction history view for the wallet's boarding address.
-     */
-    async getBoardingTxs() {
-        const utxos = [];
-        const commitmentsToIgnore = new Set();
-        const boardingAddress = await this.getBoardingAddress();
-        const txs = await this.onchainProvider.getTransactions(boardingAddress);
-        const outspendCache = new Map();
-        for (const tx of txs) {
-            for (let i = 0; i < tx.vout.length; i++) {
-                const vout = tx.vout[i];
-                if (vout.scriptpubkey_address === boardingAddress) {
-                    let spentStatuses = outspendCache.get(tx.txid);
-                    if (!spentStatuses) {
-                        spentStatuses =
-                            await this.onchainProvider.getTxOutspends(tx.txid);
-                        outspendCache.set(tx.txid, spentStatuses);
-                    }
-                    const spentStatus = spentStatuses[i];
-                    if (spentStatus?.spent) {
-                        commitmentsToIgnore.add(spentStatus.txid);
-                    }
-                    utxos.push({
-                        txid: tx.txid,
-                        vout: i,
-                        value: Number(vout.value),
-                        status: {
-                            confirmed: tx.status.confirmed,
-                            block_time: tx.status.block_time,
-                        },
-                        isUnrolled: true,
-                        virtualStatus: {
-                            state: spentStatus?.spent ? "spent" : "settled",
-                            commitmentTxIds: spentStatus?.spent
-                                ? [spentStatus.txid]
-                                : undefined,
-                        },
-                        createdAt: tx.status.confirmed
-                            ? new Date(tx.status.block_time * 1000)
-                            : new Date(0),
-                        script: hex.encode(this.boardingTapscript.pkScript),
-                    });
-                }
-            }
-        }
-        const unconfirmedTxs = [];
-        const confirmedTxs = [];
-        for (const utxo of utxos) {
-            const tx = {
-                key: {
-                    boardingTxid: utxo.txid,
-                    commitmentTxid: "",
-                    arkTxid: "",
-                },
-                amount: utxo.value,
-                type: TxType.TxReceived,
-                settled: utxo.virtualStatus.state === "spent",
-                createdAt: utxo.status.block_time
-                    ? new Date(utxo.status.block_time * 1000).getTime()
-                    : 0,
-            };
-            if (!utxo.status.block_time) {
-                unconfirmedTxs.push(tx);
-            }
-            else {
-                confirmedTxs.push(tx);
-            }
-        }
-        return {
-            boardingTxs: [...unconfirmedTxs, ...confirmedTxs],
-            commitmentsToIgnore,
-        };
-    }
-    /**
-     * Fetch and cache onchain inputs (UTXOs) received at the boarding address.
-     */
-    async getBoardingUtxos() {
-        const boardingAddress = await this.getBoardingAddress();
-        const boardingUtxos = await this.onchainProvider.getCoins(boardingAddress);
-        const utxos = boardingUtxos.map((utxo) => {
-            return extendCoin(this, utxo);
-        });
-        // Save boarding inputs using unified repository
-        await this.walletRepository.saveUtxos(boardingAddress, utxos);
-        return utxos;
-    }
-    /**
-     * Subscribe to onchain and offchain notifications for newly received funds.
-     *
-     * @param eventCallback - Callback invoked when matching funds are detected
-     * @returns A function that stops the subscriptions
-     */
-    async notifyIncomingFunds(eventCallback) {
-        const arkAddress = await this.getAddress();
-        const boardingAddress = await this.getBoardingAddress();
-        let onchainStopFunc;
-        let indexerStopFunc;
-        if (this.onchainProvider && boardingAddress) {
-            const findVoutOnTx = (tx) => {
-                return tx.vout.findIndex((v) => v.scriptpubkey_address === boardingAddress);
-            };
-            onchainStopFunc = await this.onchainProvider.watchAddresses([boardingAddress], (txs) => {
-                // find all onchain outputs belonging to our boarding address
-                const coins = txs
-                    // filter txs where address is in output
-                    .filter((tx) => findVoutOnTx(tx) !== -1)
-                    // return boarding input as Coin
-                    .map((tx) => {
-                    const { txid, status } = tx;
-                    const vout = findVoutOnTx(tx);
-                    const value = Number(tx.vout[vout].value);
-                    return { txid, vout, value, status };
-                });
-                // and notify via callback
-                eventCallback({
-                    type: "utxo",
-                    coins,
-                });
-            });
-        }
-        if (this.indexerProvider && arkAddress) {
-            // Share the ContractWatcher's single subscription instead of
-            // opening a second SSE stream.
-            const cm = await this.getContractManager();
-            // Serialize annotation+notification: parallel `annotateVtxos`
-            // awaits could resolve out of order and deliver eventCallback
-            // calls in the wrong sequence (e.g. `vtxo_spent` before its
-            // matching `vtxo_received`).
-            let annotationQueue = Promise.resolve();
-            indexerStopFunc = cm.onContractEvent((event) => {
-                if (event.type !== "vtxo_received" &&
-                    event.type !== "vtxo_spent") {
-                    return;
-                }
-                if (event.contract.type !== "default" &&
-                    event.contract.type !== "delegate") {
-                    return;
-                }
-                // `event.vtxos` carries placeholder tapscript fields from
-                // the watcher; `annotateVtxos` fills them in.
-                annotationQueue = annotationQueue.then(async () => {
-                    try {
-                        const annotated = await cm.annotateVtxos(event.vtxos);
-                        eventCallback({
-                            type: "vtxo",
-                            newVtxos: event.type === "vtxo_received" ? annotated : [],
-                            spentVtxos: event.type === "vtxo_spent" ? annotated : [],
-                        });
-                    }
-                    catch (error) {
-                        console.warn("Dropping subscription update after annotation failed; next sync will reconcile:", error);
-                    }
-                });
-            });
-        }
-        const stopFunc = () => {
-            onchainStopFunc?.();
-            indexerStopFunc?.();
-        };
-        return stopFunc;
-    }
-    /** Fetch Arkade transaction ids that are still pending final settlement. */
-    async fetchPendingTxs() {
-        // get non-swept virtual outputs, rely on the indexer only in case DB doesn't have the right state
-        const scripts = await this.getWalletScripts();
-        let { vtxos } = await this.indexerProvider.getVtxos({
-            scripts,
-        });
-        return vtxos
-            .filter((vtxo) => vtxo.virtualStatus.state !== "swept" &&
-            vtxo.virtualStatus.state !== "settled" &&
-            vtxo.arkTxId !== undefined)
-            .map((_) => _.arkTxId);
-    }
-    // ========================================================================
-    // Multi-script support (default + delegate addresses)
-    // ========================================================================
-    /**
-     * Get all pkScript hex strings for the wallet's own addresses
-     * (both delegate and non-delegate, current and historical).
-     */
-    async getWalletScripts() {
-        const manager = await this.getContractManager();
-        const contracts = await manager.getContracts({
-            type: ["default", "delegate"],
-        });
-        return contracts.map((c) => c.script);
-    }
-    /**
-     * Build a map of scriptHex → VtxoScript for all wallet contracts,
-     * so virtual outputs can be extended with the correct tapscript per contract.
-     */
-    async getScriptMap() {
-        const map = new Map();
-        const manager = await this.getContractManager();
-        const contracts = await manager.getContracts({
-            type: ["default", "delegate"],
-        });
-        for (const contract of contracts) {
-            if (map.has(contract.script))
-                continue;
-            const handler = contractHandlers.get(contract.type);
-            if (handler) {
-                const script = handler.createScript(contract.params);
-                map.set(contract.script, script);
-            }
-        }
-        return map;
-    }
-    // ========================================================================
-    // Contract Management
-    // ========================================================================
-    /**
-     * Get the ContractManager for managing contracts including the wallet's default address.
-     *
-     * The ContractManager handles:
-     * - The wallet's default receiving address (as a "default" contract)
-     * - External contracts (Boltz swaps, HTLCs, etc.)
-     * - Multi-contract watching with resilient connections
-     *
-     * @example
-     * ```typescript
-     * const manager = await wallet.getContractManager();
-     *
-     * // Create a contract for a Boltz swap
-     * const contract = await manager.createContract({
-     *   label: "Boltz Swap",
-     *   type: "vhtlc",
-     *   params: { ... },
-     *   script: swapScript,
-     *   address: swapAddress,
-     * });
-     *
-     * // Start watching for events (includes wallet's default address)
-     * const stop = await manager.onContractEvent((event) => {
-     *   console.log(`${event.type} on ${event.contractScript}`);
-     * });
-     * ```
-     */
-    async getContractManager() {
-        // Return existing manager if already initialized
-        if (this._contractManager) {
-            return this._contractManager;
-        }
-        // If initialization is in progress, wait for it
-        if (this._contractManagerInitializing) {
-            return this._contractManagerInitializing;
-        }
-        // Start initialization and store the promise
-        this._contractManagerInitializing = this.initializeContractManager();
-        try {
-            const manager = await this._contractManagerInitializing;
-            this._contractManager = manager;
-            return manager;
-        }
-        catch (error) {
-            // Clear the initializing promise so subsequent calls can retry
-            this._contractManagerInitializing = undefined;
-            throw error;
-        }
-        finally {
-            // Clear the initializing promise after completion
-            this._contractManagerInitializing = undefined;
-        }
-    }
-    async initializeContractManager() {
-        const manager = await ContractManager.create({
-            indexerProvider: this.indexerProvider,
-            contractRepository: this.contractRepository,
-            walletRepository: this.walletRepository,
-            watcherConfig: this.watcherConfig,
-        });
-        // Register the wallet's baseline always-active contracts: every
-        // `walletContractTimelocks` entry × {default, delegate-if-enabled}.
-        // This matrix is bound to INDEX 0 — the identity's x-only pubkey
-        // — by design: it's the permanent fallback set the wallet wants
-        // active forever, independent of any HD rotation. Rotated
-        // display contracts (registered separately by
-        // {@link WalletReceiveRotator.rotate}) are intentionally
-        // single-timelock-single-pubkey at the CURRENT arkd delay, and
-        // get the `metadata.source = WALLET_RECEIVE_SOURCE` tag so the
-        // next boot can find them. We deliberately do NOT re-register
-        // the matrix at a rotated pubkey: doing so would dilute the
-        // "index-0 baseline" guarantee and turn every rotation into a
-        // multi-timelock matrix expansion on every boot.
-        const baselinePubkey = await this.identity.xOnlyPublicKey();
-        for (const csvTimelock of this.walletContractTimelocks) {
-            const csvTimelockStr = timelockToSequence(csvTimelock).toString();
-            const defaultScript = new DefaultVtxo.Script({
-                pubKey: baselinePubkey,
-                serverPubKey: this.offchainTapscript.options.serverPubKey,
-                csvTimelock,
-            });
-            const defaultScriptHex = hex.encode(defaultScript.pkScript);
-            await manager.createContract({
-                type: "default",
-                params: {
-                    pubKey: hex.encode(defaultScript.options.pubKey),
-                    serverPubKey: hex.encode(defaultScript.options.serverPubKey),
-                    csvTimelock: csvTimelockStr,
-                },
-                script: defaultScriptHex,
-                address: defaultScript
-                    .address(this.network.hrp, this.arkServerPublicKey)
-                    .encode(),
-                state: "active",
-            });
-            if (this.offchainTapscript instanceof DelegateVtxo.Script) {
-                const delegateScript = new DelegateVtxo.Script({
-                    pubKey: baselinePubkey,
-                    serverPubKey: this.offchainTapscript.options.serverPubKey,
-                    delegatePubKey: this.offchainTapscript.options.delegatePubKey,
-                    csvTimelock,
-                });
-                const delegateScriptHex = hex.encode(delegateScript.pkScript);
-                await manager.createContract({
-                    type: "delegate",
-                    params: {
-                        pubKey: hex.encode(delegateScript.options.pubKey),
-                        serverPubKey: hex.encode(delegateScript.options.serverPubKey),
-                        delegatePubKey: hex.encode(delegateScript.options.delegatePubKey),
-                        csvTimelock: csvTimelockStr,
-                    },
-                    script: delegateScriptHex,
-                    address: delegateScript
-                        .address(this.network.hrp, this.arkServerPublicKey)
-                        .encode(),
-                    state: "active",
-                });
-            }
-        }
-        return manager;
-    }
-    /** Dispose wallet-owned managers and release background resources. */
-    async dispose() {
-        const manager = this._contractManager ??
-            (this._contractManagerInitializing
-                ? await this._contractManagerInitializing.catch(() => undefined)
-                : undefined);
-        manager?.dispose();
-        this._contractManager = undefined;
-        this._contractManagerInitializing = undefined;
-    }
-    /** Async-dispose hook that forwards to `dispose()`. */
-    async [Symbol.asyncDispose]() {
-        await this.dispose();
-    }
-}
-/**
- * Main wallet implementation for Bitcoin transactions with Arkade protocol support.
- * The wallet does not store any data locally and relies on Arkade and onchain
- * providers to fetch onchain and virtual outputs.
- *
- * @example
- * ```typescript
- * // Create a wallet with URL configuration
- * const wallet = await Wallet.create({
- *   identity: MnemonicIdentity.fromMnemonic('abandon abandon...'),
- *   arkServerUrl: 'https://arkade.computer',
- *   esploraUrl: 'https://mempool.space/api'
- * });
- *
- * // Or with custom provider instances (e.g., for Expo/React Native)
- * const wallet = await Wallet.create({
- *   identity: MnemonicIdentity.fromMnemonic('abandon abandon...'),
- *   arkProvider: new ExpoArkProvider('https://arkade.computer'),
- *   indexerProvider: new ExpoIndexerProvider('https://arkade.computer'),
- *   esploraUrl: 'https://mempool.space/api'
- * });
- *
- * // Get addresses
- * const arkAddress = await wallet.getAddress();
- * const boardingAddress = await wallet.getBoardingAddress();
- *
- * // Send bitcoin
- * const txid = await wallet.send({
- *   address: 'ark1q...',
- *   amount: 50000,
- * });
- * ```
- */
-export class Wallet extends ReadonlyWallet {
-    /**
-     * @internal Sole write path for `offchainTapscript` after construction.
-     * Called by {@link WalletReceiveRotator.rotate} once the rotated
-     * display contract has been persisted. External code must treat
-     * `offchainTapscript` as read-only.
-     */
-    setOffchainTapscriptForRotation(tapscript) {
-        this._offchainTapscript = tapscript;
-    }
-    _addPendingSpends(inputs) {
-        for (const input of inputs) {
-            if ("virtualStatus" in input) {
-                this._pendingSpendOutpoints.add(`${input.txid}:${input.vout}`);
-            }
-        }
-    }
-    _removePendingSpends(inputs) {
-        for (const input of inputs) {
-            if ("virtualStatus" in input) {
-                this._pendingSpendOutpoints.delete(`${input.txid}:${input.vout}`);
-            }
-        }
-    }
-    _withTxLock(fn) {
-        let release;
-        const lock = new Promise((r) => (release = r));
-        const prev = this._txLock;
-        this._txLock = lock;
-        return prev.then(async () => {
-            try {
-                return await fn();
-            }
-            finally {
-                release();
-            }
-        });
-    }
-    constructor(identity, network, onchainProvider, arkProvider, indexerProvider, arkServerPublicKey, offchainTapscript, boardingTapscript, serverUnrollScript, forfeitOutputScript, forfeitPubkey, dustAmount, walletRepository, contractRepository, 
-    /** @deprecated Use settlementConfig */
-    renewalConfig, delegatorProvider, watcherConfig, settlementConfig, walletContractTimelocks, receiveRotator, descriptorProvider) {
-        super(identity, network, onchainProvider, indexerProvider, arkServerPublicKey, offchainTapscript, boardingTapscript, dustAmount, walletRepository, contractRepository, delegatorProvider, watcherConfig, walletContractTimelocks);
-        this.arkProvider = arkProvider;
-        this.serverUnrollScript = serverUnrollScript;
-        this.forfeitOutputScript = forfeitOutputScript;
-        this.forfeitPubkey = forfeitPubkey;
-        this._receiveRotatorInstalled = false;
-        /**
-         * Async mutex that serializes all operations submitting VTXOs to the Arkade
-         * server (`settle`, `send`, `sendBitcoin`). This prevents VtxoManager's
-         * background renewal from racing with user-initiated transactions for the
-         * same VTXO inputs.
-         */
-        this._txLock = Promise.resolve();
-        this.identity = identity;
-        // Backwards-compatible: keep renewalConfig populated for any code reading it
-        this.renewalConfig = {
-            enabled: renewalConfig?.enabled ?? false,
-            ...DEFAULT_RENEWAL_CONFIG,
-            ...renewalConfig,
-        };
-        // Normalize: prefer settlementConfig, fall back to renewalConfig, default to enabled
-        if (settlementConfig !== undefined) {
-            this.settlementConfig = settlementConfig;
-        }
-        else if (renewalConfig && this.renewalConfig.enabled) {
-            this.settlementConfig = {
-                vtxoThreshold: renewalConfig.thresholdMs
-                    ? renewalConfig.thresholdMs / 1000
-                    : undefined,
-            };
-        }
-        else if (renewalConfig) {
-            // renewalConfig provided but not enabled → disabled
-            this.settlementConfig = false;
-        }
-        else {
-            // No config at all → enabled by default
-            this.settlementConfig = { ...DEFAULT_SETTLEMENT_CONFIG };
-        }
-        this._delegatorManager = delegatorProvider
-            ? new DelegatorManagerImpl(delegatorProvider, arkProvider, identity)
-            : undefined;
-        this._receiveRotator = receiveRotator;
-        this._descriptorProvider = descriptorProvider;
-        this._signerRouter = new InputSignerRouter({
-            identity,
-            contractRepository,
-            descriptorProvider,
-            boardingPkScript: boardingTapscript.pkScript,
-        });
-    }
-    get assetManager() {
-        this._walletAssetManager ?? (this._walletAssetManager = new AssetManager(this));
-        return this._walletAssetManager;
-    }
-    async getVtxoManager() {
-        if (this._vtxoManager) {
-            return this._vtxoManager;
-        }
-        if (this._vtxoManagerInitializing) {
-            return this._vtxoManagerInitializing;
-        }
-        this._vtxoManagerInitializing = Promise.resolve(new VtxoManager(this, this.renewalConfig, this.settlementConfig));
-        try {
-            const manager = await this._vtxoManagerInitializing;
-            // First-time hookup of the HD rotator: subscribe to
-            // `vtxo_received` AFTER the contract manager (which is
-            // initialised inside the VtxoManager construction path) has
-            // registered the wallet's baseline contracts. The flag
-            // makes this idempotent across repeated `getVtxoManager`
-            // calls — install runs at most once per wallet instance.
-            // Cache the manager and flip the install flag only after
-            // `install()` resolves; otherwise a failing install would
-            // leave the manager cached and silently disable HD
-            // rotation for the lifetime of this wallet.
-            if (this._receiveRotator && !this._receiveRotatorInstalled) {
-                try {
-                    await this._receiveRotator.install(this);
-                }
-                catch (installErr) {
-                    await manager.dispose();
-                    throw installErr;
-                }
-                this._receiveRotatorInstalled = true;
-            }
-            this._vtxoManager = manager;
-            return manager;
-        }
-        finally {
-            this._vtxoManagerInitializing = undefined;
-        }
-    }
-    async dispose() {
-        // Tear down the rotation subscription + drain in-flight rotations
-        // first so no late `vtxo_received` event can queue work on a
-        // disposing wallet, and so any in-flight `createContract` call
-        // finishes before we dispose the contract manager underneath it.
-        // A rotator-disposal failure must not abort the rest of
-        // teardown — the contract manager / super still need to run on
-        // best-effort, so we capture and rethrow at the end.
-        let rotatorError;
-        try {
-            await this._receiveRotator?.dispose();
-        }
-        catch (error) {
-            rotatorError = error;
-        }
-        const manager = this._vtxoManager ??
-            (this._vtxoManagerInitializing
-                ? await this._vtxoManagerInitializing.catch(() => undefined)
-                : undefined);
-        try {
-            if (manager) {
-                await manager.dispose();
-            }
-        }
-        catch {
-            // best-effort teardown; ensure super.dispose() still runs
-        }
-        finally {
-            this._vtxoManager = undefined;
-            this._vtxoManagerInitializing = undefined;
-            await super.dispose();
-        }
-        if (rotatorError) {
-            throw rotatorError;
-        }
-    }
-    /**
-     * Create a full wallet and initialize its background managers.
-     *
-     * @param config - Wallet configuration
-     * @returns A wallet ready to query balances and send transactions
-     * @example
-     * ```typescript
-     * const wallet = await Wallet.create({
-     *   identity,
-     *   arkServerUrl: 'https://arkade.computer',
-     * });
-     * ```
-     */
-    static async create(config) {
-        const pubkey = await config.identity.xOnlyPublicKey();
-        if (!pubkey) {
-            throw new Error("Invalid configured public key");
-        }
-        const setup = await ReadonlyWallet.setupWalletConfig(config, pubkey);
-        // Compute Wallet-specific forfeit and unroll scripts
-        // the serverUnrollScript is the one used to create output scripts of the checkpoint transactions
-        let serverUnrollScript;
-        try {
-            const raw = hex.decode(setup.info.checkpointTapscript);
-            serverUnrollScript = CSVMultisigTapscript.decode(raw);
-        }
-        catch (e) {
-            throw new Error("Invalid checkpointTapscript from server");
-        }
-        // parse the server forfeit address
-        // server is expecting funds to be sent to this address
-        const forfeitPubkey = hex.decode(setup.info.forfeitPubkey).slice(1);
-        const forfeitAddress = Address(setup.network).decode(setup.info.forfeitAddress);
-        const forfeitOutputScript = OutScript.encode(forfeitAddress);
-        // HD wiring (boot path) — resolved via the descriptor provider.
-        // The rotator (when present) is handed to the constructor as
-        // the last positional arg and `getVtxoManager()` lazily
-        // installs its `vtxo_received` subscription on first call,
-        // after the contract manager has registered the wallet's
-        // baseline contracts.
-        const boot = await WalletReceiveRotator.resolveBoot(config, setup);
-        const wallet = new Wallet(config.identity, setup.network, setup.onchainProvider, setup.arkProvider, setup.indexerProvider, setup.serverPubKey, boot?.offchainTapscript ?? setup.offchainTapscript, setup.boardingTapscript, serverUnrollScript, forfeitOutputScript, forfeitPubkey, setup.dustAmount, setup.walletRepository, setup.contractRepository, config.renewalConfig, config.delegatorProvider, config.watcherConfig, config.settlementConfig, setup.walletContractTimelocks, boot?.rotator, boot?.provider);
-        await wallet.getVtxoManager();
-        return wallet;
-    }
-    /**
-     * Convert this wallet to a readonly wallet.
-     *
-     * @returns A readonly wallet with the same configuration but readonly identity
-     * @example
-     * ```typescript
-     * const wallet = await Wallet.create({ identity: MnemonicIdentity.fromMnemonic('abandon abandon...'), ... });
-     * const readonlyWallet = await wallet.toReadonly();
-     *
-     * // Can query balance and addresses
-     * const balance = await readonlyWallet.getBalance();
-     * const address = await readonlyWallet.getAddress();
-     *
-     * // But cannot send transactions (type error)
-     * // readonlyWallet.send(...); // TypeScript error
-     * ```
-     */
-    async toReadonly() {
-        // Check if the identity has a toReadonly method using type guard
-        const readonlyIdentity = hasToReadonly(this.identity)
-            ? await this.identity.toReadonly()
-            : this.identity; // Identity extends ReadonlyIdentity, so this is safe
-        return new ReadonlyWallet(readonlyIdentity, this.network, this.onchainProvider, this.indexerProvider, this.arkServerPublicKey, this.offchainTapscript, this.boardingTapscript, this.dustAmount, this.walletRepository, this.contractRepository, this.delegatorProvider, this.watcherConfig, this.walletContractTimelocks);
-    }
-    /** Returns the delegator manager when delegation support is configured. */
-    async getDelegatorManager() {
-        return this._delegatorManager;
-    }
-    /**
-     * Send bitcoin to an Arkade address.
-     *
-     * @deprecated Use `send`.
-     * @param params - Send parameters
-     */
-    async sendBitcoin(params) {
-        if (params.amount <= 0) {
-            throw new Error("Amount must be positive");
-        }
-        if (!isValidArkAddress(params.address)) {
-            throw new Error("Invalid Arkade address " + params.address);
-        }
-        if (params.selectedVtxos && params.selectedVtxos.length > 0) {
-            return this._withTxLock(async () => {
-                // Snapshot the active receive tapscript synchronously
-                // before any `await` so the change output's pkScript and
-                // the change-VTXO metadata written later by
-                // `updateDbAfterOffchainTx` are bound to the same
-                // tapscript even if `WalletReceiveRotator.rotate` fires
-                // during the offchain round-trip.
-                const offchainTapscript = this.offchainTapscript;
-                const arkAddress = offchainTapscript.address(this.network.hrp, this.arkServerPublicKey);
-                const selectedVtxoSum = params
-                    .selectedVtxos.map((v) => v.value)
-                    .reduce((a, b) => a + b, 0);
-                if (selectedVtxoSum < params.amount) {
-                    throw new Error("Selected VTXOs do not cover specified amount");
-                }
-                const changeAmount = selectedVtxoSum - params.amount;
-                const selected = {
-                    inputs: params.selectedVtxos,
-                    changeAmount: BigInt(changeAmount),
-                };
-                const outputAddress = ArkAddress.decode(params.address);
-                const outputScript = BigInt(params.amount) < this.dustAmount
-                    ? outputAddress.subdustPkScript
-                    : outputAddress.pkScript;
-                const outputs = [
-                    {
-                        script: outputScript,
-                        amount: BigInt(params.amount),
-                    },
-                ];
-                // add change output if needed
-                if (selected.changeAmount > 0n) {
-                    const changeOutputScript = selected.changeAmount < this.dustAmount
-                        ? arkAddress.subdustPkScript
-                        : arkAddress.pkScript;
-                    outputs.push({
-                        script: changeOutputScript,
-                        amount: BigInt(selected.changeAmount),
-                    });
-                }
-                this._addPendingSpends(selected.inputs);
-                try {
-                    const { arkTxid, signedCheckpointTxs } = await this.buildAndSubmitOffchainTx(selected.inputs, outputs);
-                    await this.updateDbAfterOffchainTx(selected.inputs, arkTxid, signedCheckpointTxs, params.amount, selected.changeAmount, selected.changeAmount > 0n ? outputs.length - 1 : 0, offchainTapscript);
-                    return arkTxid;
-                }
-                finally {
-                    this._removePendingSpends(selected.inputs);
-                }
-            });
-        }
-        return this.send({
-            address: params.address,
-            amount: params.amount,
-        });
-    }
-    /**
-     * Settle boarding inputs and/or virtual outputs into a finalized mainnet transaction.
-     *
-     * @param params - Optional settlement inputs and outputs. When omitted, the wallet settles all eligible funds.
-     * @param eventCallback - Optional callback invoked for settlement stream events.
-     * @returns The finalized Arkade transaction id
-     */
-    async settle(params, eventCallback) {
-        return this._withTxLock(() => this._settleImpl(params, eventCallback));
-    }
-    async _settleImpl(params, eventCallback) {
-        if (params?.inputs) {
-            for (const input of params.inputs) {
-                // validate arknotes inputs
-                if (typeof input === "string") {
-                    try {
-                        ArkNote.fromString(input);
-                    }
-                    catch (e) {
-                        throw new Error(`Invalid arknote "${input}"`);
-                    }
-                }
-            }
-        }
-        // if no params are provided, use all non-expired boarding inputs and offchain virtual outputs as inputs
-        // and send all to the offchain address
-        if (!params) {
-            const { fees } = await this.arkProvider.getInfo();
-            const estimator = new Estimator(fees.intentFee);
-            let amount = 0;
-            const exitScript = CSVMultisigTapscript.decode(hex.decode(this.boardingTapscript.exitScript));
-            const boardingTimelock = exitScript.params.timelock;
-            // For block-based timelocks, fetch the chain tip height
-            let chainTipHeight;
-            if (boardingTimelock.type === "blocks") {
-                const tip = await this.onchainProvider.getChainTip();
-                chainTipHeight = tip.height;
-            }
-            const boardingUtxos = (await this.getBoardingUtxos()).filter((utxo) => utxo.status.confirmed &&
-                !hasBoardingTxExpired(utxo, boardingTimelock, chainTipHeight));
-            const filteredBoardingUtxos = [];
-            for (const utxo of boardingUtxos) {
-                const inputFee = estimator.evalOnchainInput({
-                    amount: BigInt(utxo.value),
-                });
-                if (inputFee.value >= utxo.value) {
-                    // skip if fees are greater than the boarding input value
-                    continue;
-                }
-                filteredBoardingUtxos.push(utxo);
-                amount += utxo.value - inputFee.satoshis;
-            }
-            const vtxos = await this.getVtxos({ withRecoverable: true });
-            const filteredVtxos = [];
-            for (const vtxo of vtxos) {
-                const inputFee = estimator.evalOffchainInput({
-                    amount: BigInt(vtxo.value),
-                    type: vtxo.virtualStatus.state === "swept"
-                        ? "recoverable"
-                        : "vtxo",
-                    weight: 0,
-                    birth: vtxo.createdAt,
-                    expiry: vtxo.virtualStatus.batchExpiry
-                        ? new Date(vtxo.virtualStatus.batchExpiry)
-                        : undefined,
-                });
-                if (inputFee.satoshis >= vtxo.value) {
-                    // skip if fees are greater than the virtual output value
-                    continue;
-                }
-                filteredVtxos.push(vtxo);
-                amount += vtxo.value - inputFee.satoshis;
-            }
-            const inputs = [...filteredBoardingUtxos, ...filteredVtxos];
-            if (inputs.length === 0) {
-                throw new Error("No inputs found");
-            }
-            const output = {
-                address: await this.getAddress(),
-                amount: BigInt(amount),
-            };
-            const outputFee = estimator.evalOffchainOutput({
-                amount: output.amount,
-                script: hex.encode(ArkAddress.decode(output.address).pkScript),
-            });
-            output.amount -= BigInt(outputFee.satoshis);
-            if (output.amount <= this.dustAmount) {
-                throw new Error("Output amount is below dust limit");
-            }
-            params = {
-                inputs,
-                outputs: [output],
-            };
-        }
-        const onchainOutputIndexes = [];
-        const outputs = [];
-        let hasOffchainOutputs = false;
-        for (const [index, output] of params.outputs.entries()) {
-            let script;
-            try {
-                // offchain
-                const addr = ArkAddress.decode(output.address);
-                script = addr.pkScript;
-                hasOffchainOutputs = true;
-            }
-            catch {
-                // onchain
-                const addr = Address(this.network).decode(output.address);
-                script = OutScript.encode(addr);
-                onchainOutputIndexes.push(index);
-            }
-            outputs.push({
-                amount: output.amount,
-                script,
-            });
-        }
-        // if some of the inputs hold assets, build the asset packet and append as output
-        // in the intent proof tx, there is a "fake" input at index 0
-        // so the real coin indices are offset by +1
-        const assetInputs = new Map();
-        for (let i = 0; i < params.inputs.length; i++) {
-            if ("assets" in params.inputs[i]) {
-                const assets = params.inputs[i]
-                    .assets;
-                if (assets && assets.length > 0) {
-                    assetInputs.set(i + 1, assets);
-                }
-            }
-        }
-        let outputAssets;
-        const destinationScript = ArkAddress.decode(await this.getAddress()).pkScript;
-        const assetOutputIndex = findDestinationOutputIndex(outputs, destinationScript);
-        if (assetInputs.size > 0) {
-            if (assetOutputIndex === -1) {
-                throw new Error("Cannot assign assets: no output matches the destination address");
-            }
-            // collect all input assets and assign them to the destination output
-            const allAssets = new Map();
-            for (const [, assets] of assetInputs) {
-                for (const asset of assets) {
-                    const existing = allAssets.get(asset.assetId) ?? 0n;
-                    allAssets.set(asset.assetId, existing + asset.amount);
-                }
-            }
-            outputAssets = [];
-            for (const [assetId, amount] of allAssets) {
-                outputAssets.push({ assetId, amount });
-            }
-        }
-        const recipients = params.outputs.map((output, i) => ({
-            address: output.address,
-            amount: Number(output.amount),
-            assets: i === assetOutputIndex ? outputAssets : undefined,
-        }));
-        if (outputAssets && outputAssets.length > 0) {
-            const assetPacket = createAssetPacket(assetInputs, recipients);
-            outputs.push(Extension.create([assetPacket]).txOut());
-        }
-        // session holds the state of the musig2 signing process of the virtual output tree
-        let session;
-        const signingPublicKeys = [];
-        if (hasOffchainOutputs) {
-            session = this.identity.signerSession();
-            signingPublicKeys.push(hex.encode(await session.getPublicKey()));
-        }
-        const [intent, deleteIntent] = await Promise.all([
-            this.makeRegisterIntentSignature(params.inputs, outputs, onchainOutputIndexes, signingPublicKeys),
-            this.makeDeleteIntentSignature(params.inputs),
-        ]);
-        const topics = [
-            ...signingPublicKeys,
-            ...params.inputs.map((input) => `${input.txid}:${input.vout}`),
-        ];
-        const abortController = new AbortController();
-        let stream;
-        // Optimistically hide these inputs from concurrent getVtxos() callers
-        // while the settlement is in flight. Set before safeRegisterIntent so
-        // there's no window between intent registration and coin-visibility.
-        this._addPendingSpends(params.inputs);
-        try {
-            stream = this.arkProvider.getEventStream(abortController.signal, topics);
-            // Prime the iterator so the provider opens the SSE subscription
-            // before safeRegisterIntent can trigger server-side batch events.
-            const firstNext = stream.next();
-            // If settle exits before Batch.join consumes the primed result,
-            // keep the orphaned promise from surfacing as an unhandled rejection.
-            void firstNext.catch(() => { });
-            const primedStream = (async function* () {
-                const first = await firstNext;
-                if (!first.done) {
-                    yield first.value;
-                }
-                yield* stream;
-            })();
-            const intentId = await this.safeRegisterIntent(intent, params.inputs);
-            const handler = this.createBatchHandler(intentId, params.inputs, recipients, session);
-            const commitmentTxid = await Batch.join(primedStream, handler, {
-                abortController,
-                skipVtxoTreeSigning: !hasOffchainOutputs,
-                eventCallback: eventCallback
-                    ? (event) => Promise.resolve(eventCallback(event))
-                    : undefined,
-            });
-            await this.updateDbAfterSettle(params.inputs, commitmentTxid);
-            return commitmentTxid;
-        }
-        catch (error) {
-            // delete the intent to not be stuck in the queue. If deletion fails
-            // the intent stays on the server and the next settle will hit
-            // "duplicated input" in safeRegisterIntent — surface the failure
-            // rather than silently swallowing it.
-            const inputIds = params.inputs
-                .map((i) => `${i.txid}:${i.vout}`)
-                .join(",");
-            await this.arkProvider.deleteIntent(deleteIntent).catch((e) => {
-                console.warn(`Failed to delete intent after settle failure for inputs [${inputIds}]; intent may linger on server and cause 'duplicated input' on next settle`, e);
-            });
-            throw error;
-        }
-        finally {
-            // Clear state first so a synchronous handler firing from abort()
-            // never observes a stale pending-spend set.
-            this._removePendingSpends(params.inputs);
-            // close the stream — abort() fires the in-body handler if the
-            // generator has started iterating; return() also releases the
-            // eager resource if the body is still suspended or never ran
-            // (e.g. safeRegisterIntent threw before Batch.join was called).
-            abortController.abort();
-            await stream?.return?.().catch(() => { });
-        }
-    }
-    async handleSettlementFinalizationEvent(event, inputs, forfeitOutputScript, connectorsGraph) {
-        // the signed forfeits transactions to submit
-        const signedForfeits = [];
-        const isVtxo = (input) => "virtualStatus" in input;
-        let settlementPsbt = Transaction.fromPSBT(base64.decode(event.commitmentTx));
-        let hasBoardingUtxos = false;
-        let connectorIndex = 0;
-        const connectorsLeaves = connectorsGraph?.leaves() || [];
-        for (const input of inputs) {
-            // boarding input, we need to sign the settlement tx
-            if (!isVtxo(input)) {
-                for (let i = 0; i < settlementPsbt.inputsLength; i++) {
-                    const settlementInput = settlementPsbt.getInput(i);
-                    if (!settlementInput.txid ||
-                        settlementInput.index === undefined) {
-                        throw new Error("The server returned incomplete data. No settlement input found in the PSBT");
-                    }
-                    const inputTxId = hex.encode(settlementInput.txid);
-                    if (inputTxId !== input.txid)
-                        continue;
-                    if (settlementInput.index !== input.vout)
-                        continue;
-                    // input found in the settlement tx, sign it
-                    settlementPsbt.updateInput(i, {
-                        tapLeafScript: [input.forfeitTapLeafScript],
-                    });
-                    const script = settlementPsbt.getInput(i).witnessUtxo?.script;
-                    if (!script) {
-                        throw new Error("The server returned incomplete data. Settlement input is missing witnessUtxo.script");
-                    }
-                    settlementPsbt = await this._signerRouter.sign(settlementPsbt, [{ index: i, lookupScript: script }]);
-                    hasBoardingUtxos = true;
-                    break;
-                }
-                continue;
-            }
-            if (isRecoverable(input) || isSubdust(input, this.dustAmount)) {
-                // recoverable or subdust coin, we don't need to create a forfeit tx
-                continue;
-            }
-            if (connectorsLeaves.length === 0) {
-                throw new Error("connectors not received");
-            }
-            if (connectorIndex >= connectorsLeaves.length) {
-                throw new Error("not enough connectors received");
-            }
-            const connectorLeaf = connectorsLeaves[connectorIndex];
-            const connectorTxId = connectorLeaf.id;
-            const connectorOutput = connectorLeaf.getOutput(0);
-            if (!connectorOutput) {
-                throw new Error("connector output not found");
-            }
-            const connectorAmount = connectorOutput.amount;
-            const connectorPkScript = connectorOutput.script;
-            if (!connectorAmount || !connectorPkScript) {
-                throw new Error("invalid connector output");
-            }
-            connectorIndex++;
-            let forfeitTx = buildForfeitTx([
-                {
-                    txid: input.txid,
-                    index: input.vout,
-                    witnessUtxo: {
-                        amount: BigInt(input.value),
-                        script: VtxoScript.decode(input.tapTree).pkScript,
-                    },
-                    sighashType: SigHash.DEFAULT,
-                    tapLeafScript: [input.forfeitTapLeafScript],
-                },
-                {
-                    txid: connectorTxId,
-                    index: 0,
-                    witnessUtxo: {
-                        amount: connectorAmount,
-                        script: connectorPkScript,
-                    },
-                },
-            ], forfeitOutputScript);
-            // do not sign the connector input
-            forfeitTx = await this._signerRouter.sign(forfeitTx, [
-                {
-                    index: 0,
-                    lookupScript: VtxoScript.decode(input.tapTree).pkScript,
-                },
-            ]);
-            signedForfeits.push(base64.encode(forfeitTx.toPSBT()));
-        }
-        if (signedForfeits.length > 0 || hasBoardingUtxos) {
-            await this.arkProvider.submitSignedForfeitTxs(signedForfeits, hasBoardingUtxos
-                ? base64.encode(settlementPsbt.toPSBT())
-                : undefined);
-        }
-    }
-    /**
-     * Create a batch event handler for settlement flows.
-     *
-     * @param intentId - The intent ID.
-     * @param inputs - Inputs used by the intent.
-     * @param expectedRecipients - Expected recipients to validate in the virtual output tree.
-     * @param session - Optional musig2 signing session. When omitted, signing steps are skipped.
-     */
-    createBatchHandler(intentId, inputs, expectedRecipients, session) {
-        let sweepTapTreeRoot;
-        return {
-            onBatchStarted: async (event) => {
-                const utf8IntentId = new TextEncoder().encode(intentId);
-                const intentIdHash = sha256(utf8IntentId);
-                const intentIdHashStr = hex.encode(intentIdHash);
-                let skip = true;
-                // check if our intent ID hash matches any in the event
-                for (const idHash of event.intentIdHashes) {
-                    if (idHash === intentIdHashStr) {
-                        if (!this.arkProvider) {
-                            throw new Error("Arkade provider not configured");
-                        }
-                        await this.arkProvider.confirmRegistration(intentId);
-                        skip = false;
-                    }
-                }
-                if (skip) {
-                    return { skip };
-                }
-                const sweepTapscript = CSVMultisigTapscript.encode({
-                    timelock: {
-                        value: event.batchExpiry,
-                        type: event.batchExpiry >= 512n ? "seconds" : "blocks",
-                    },
-                    pubkeys: [this.forfeitPubkey],
-                }).script;
-                sweepTapTreeRoot = tapLeafHash(sweepTapscript);
-                return { skip: false };
-            },
-            onTreeSigningStarted: async (event, vtxoTree) => {
-                if (!session) {
-                    return { skip: true };
-                }
-                if (!sweepTapTreeRoot) {
-                    throw new Error("Sweep tap tree root not set");
-                }
-                const xOnlyPublicKeys = event.cosignersPublicKeys.map((k) => k.slice(2));
-                const signerPublicKey = await session.getPublicKey();
-                const xonlySignerPublicKey = signerPublicKey.subarray(1);
-                if (!xOnlyPublicKeys.includes(hex.encode(xonlySignerPublicKey))) {
-                    // not a cosigner, skip the signing
-                    return { skip: true };
-                }
-                // validate the unsigned virtual output tree
-                const commitmentTx = Transaction.fromPSBT(base64.decode(event.unsignedCommitmentTx));
-                validateVtxoTxGraph(vtxoTree, commitmentTx, sweepTapTreeRoot);
-                // validate that all expected receivers are in the virtual output tree with correct amounts and assets
-                if (expectedRecipients && expectedRecipients.length > 0) {
-                    validateBatchRecipients(commitmentTx, vtxoTree.leaves(), expectedRecipients, this.network);
-                }
-                const sharedOutput = commitmentTx.getOutput(0);
-                if (!sharedOutput?.amount) {
-                    throw new Error("Shared output not found");
-                }
-                await session.init(vtxoTree, sweepTapTreeRoot, sharedOutput.amount);
-                const pubkey = hex.encode(await session.getPublicKey());
-                const nonces = await session.getNonces();
-                await this.arkProvider.submitTreeNonces(event.id, pubkey, nonces);
-                return { skip: false };
-            },
-            onTreeNonces: async (event) => {
-                if (!session) {
-                    return { fullySigned: true }; // Signing complete (no signing needed)
-                }
-                const { hasAllNonces } = await session.aggregatedNonces(event.txid, event.nonces);
-                // wait to receive and aggregate all nonces before sending signatures
-                if (!hasAllNonces)
-                    return { fullySigned: false };
-                const signatures = await session.sign();
-                const pubkey = hex.encode(await session.getPublicKey());
-                await this.arkProvider.submitTreeSignatures(event.id, pubkey, signatures);
-                return { fullySigned: true };
-            },
-            onBatchFinalization: async (event, _, connectorTree) => {
-                if (!this.forfeitOutputScript) {
-                    throw new Error("Forfeit output script not set");
-                }
-                if (connectorTree) {
-                    validateConnectorsTxGraph(event.commitmentTx, connectorTree);
-                }
-                await this.handleSettlementFinalizationEvent(event, inputs, this.forfeitOutputScript, connectorTree);
-            },
-        };
-    }
-    /**
-     * Build {@link InputSigningJob}s for a tx whose signable inputs can be
-     * resolved from their own `witnessUtxo.script`. Inputs without a
-     * `witnessUtxo` are silently omitted, mirroring the wallet's
-     * historical silent-skip behaviour for cosigner/connector inputs.
-     */
-    inputSigningJobsFromWitnessUtxos(tx, indexes) {
-        const candidateIndexes = indexes ?? Array.from({ length: tx.inputsLength }, (_, i) => i);
-        const jobs = [];
-        for (const index of candidateIndexes) {
-            const script = tx.getInput(index).witnessUtxo?.script;
-            if (script)
-                jobs.push({ index, lookupScript: script });
-        }
-        return jobs;
-    }
-    async safeRegisterIntent(intent, inputs) {
-        try {
-            return await this.arkProvider.registerIntent(intent);
-        }
-        catch (error) {
-            // catch the "already registered by another intent" error
-            if (error instanceof ArkError &&
-                error.code === 0 &&
-                error.message.includes("duplicated input")) {
-                // Clear any queued intent spending these exact inputs. The
-                // previous implementation signed a proof over getVtxos() only,
-                // which misses boarding UTXOs — the most common trigger for
-                // "duplicated input" on the auto-settle path. Signing the
-                // caller's own inputs keeps the proof surgical and correct
-                // regardless of whether the stuck input is a VTXO or boarding.
-                const deleteIntent = await this.makeDeleteIntentSignature(inputs);
-                await this.arkProvider.deleteIntent(deleteIntent);
-                // try again
-                return this.arkProvider.registerIntent(intent);
-            }
-            throw error;
-        }
-    }
-    async makeRegisterIntentSignature(coins, outputs, onchainOutputsIndexes, cosignerPubKeys, validAt) {
-        const message = {
-            type: "register",
-            onchain_output_indexes: onchainOutputsIndexes,
-            valid_at: validAt ? Math.floor(validAt) : 0,
-            expire_at: 0,
-            cosigners_public_keys: cosignerPubKeys,
-        };
-        const proof = Intent.create(message, coins, outputs);
-        const signedProof = await this._signerRouter.sign(proof, intentProofJobs(coins));
-        return {
-            proof: base64.encode(signedProof.toPSBT()),
-            message,
-        };
-    }
-    async makeDeleteIntentSignature(coins) {
-        const message = {
-            type: "delete",
-            expire_at: 0,
-        };
-        const proof = Intent.create(message, coins, []);
-        const signedProof = await this._signerRouter.sign(proof, intentProofJobs(coins));
-        return {
-            proof: base64.encode(signedProof.toPSBT()),
-            message,
-        };
-    }
-    async makeGetPendingTxIntentSignature(coins) {
-        const message = {
-            type: "get-pending-tx",
-            expire_at: 0,
-        };
-        const proof = Intent.create(message, coins, []);
-        const signedProof = await this._signerRouter.sign(proof, intentProofJobs(coins));
-        return {
-            proof: base64.encode(signedProof.toPSBT()),
-            message,
-        };
-    }
-    /**
-     * Finalizes pending transactions by retrieving them from the server and finalizing each one.
-     * Skips the server check entirely when no send was interrupted (no pending tx flag set).
-     * @param vtxos - Optional list of virtual outputs to use instead of retrieving them from the server
-     * @returns Array of transaction IDs that were finalized
-     */
-    async finalizePendingTxs(vtxos) {
-        const hasPending = await this.hasPendingTxFlag();
-        if (!hasPending) {
-            return { finalized: [], pending: [] };
-        }
-        const MAX_INPUTS_PER_INTENT = 20;
-        if (!vtxos || vtxos.length === 0) {
-            // Batch all scripts into a single indexer call
-            const scriptMap = await this.getScriptMap();
-            const allExtended = [];
-            const allScripts = [...scriptMap.keys()];
-            const { vtxos: fetchedVtxos } = await this.indexerProvider.getVtxos({
-                scripts: allScripts,
-            });
-            for (const vtxo of fetchedVtxos) {
-                const vtxoScript = scriptMap.get(vtxo.script);
-                if (!vtxoScript)
-                    continue;
-                if (vtxo.virtualStatus.state === "swept" ||
-                    vtxo.virtualStatus.state === "settled") {
-                    continue;
-                }
-                allExtended.push({
-                    ...vtxo,
-                    forfeitTapLeafScript: vtxoScript.forfeit(),
-                    intentTapLeafScript: vtxoScript.forfeit(),
-                    tapTree: vtxoScript.encode(),
-                });
-            }
-            if (allExtended.length === 0) {
-                return { finalized: [], pending: [] };
-            }
-            vtxos = allExtended;
-        }
-        const batches = [];
-        for (let i = 0; i < vtxos.length; i += MAX_INPUTS_PER_INTENT) {
-            batches.push(vtxos.slice(i, i + MAX_INPUTS_PER_INTENT));
-        }
-        // Track seen arkTxids so parallel batches don't finalize the same tx twice
-        const seen = new Set();
-        const results = await Promise.all(batches.map(async (batch) => {
-            const batchFinalized = [];
-            const batchPending = [];
-            const intent = await this.makeGetPendingTxIntentSignature(batch);
-            const pendingTxs = await this.arkProvider.getPendingTxs(intent);
-            for (const pendingTx of pendingTxs) {
-                if (seen.has(pendingTx.arkTxid))
-                    continue;
-                seen.add(pendingTx.arkTxid);
-                batchPending.push(pendingTx.arkTxid);
-                try {
-                    const finalCheckpoints = await Promise.all(pendingTx.signedCheckpointTxs.map(async (c) => {
-                        const tx = Transaction.fromPSBT(base64.decode(c));
-                        const signedCheckpoint = await this._signerRouter.sign(tx, this.inputSigningJobsFromWitnessUtxos(tx));
-                        return base64.encode(signedCheckpoint.toPSBT());
-                    }));
-                    await this.arkProvider.finalizeTx(pendingTx.arkTxid, finalCheckpoints);
-                    batchFinalized.push(pendingTx.arkTxid);
-                }
-                catch (error) {
-                    console.error(`Failed to finalize transaction ${pendingTx.arkTxid}:`, error);
-                }
-            }
-            return {
-                finalized: batchFinalized,
-                pending: batchPending,
-            };
-        }));
-        const finalized = [];
-        const pending = [];
-        for (const result of results) {
-            finalized.push(...result.finalized);
-            pending.push(...result.pending);
-        }
-        // Only clear the flag if every discovered pending tx was finalized;
-        // if any failed, keep it so recovery retries on next startup.
-        if (finalized.length === pending.length) {
-            await this.setPendingTxFlag(false);
-        }
-        return { finalized, pending };
-    }
-    async hasPendingTxFlag() {
-        const state = await this.walletRepository.getWalletState();
-        return state?.settings?.hasPendingTx === true;
-    }
-    async setPendingTxFlag(value) {
-        await updateWalletState(this.walletRepository, (state) => ({
-            ...state,
-            settings: { ...state.settings, hasPendingTx: value },
-        }));
-    }
-    /**
-     * Send BTC and/or assets to one or more recipients.
-     *
-     * @param args - Recipients with their addresses, BTC amounts, and assets
-     * @returns Promise resolving to the Arkade transaction ID
-     *
-     * @example
-     * ```typescript
-     * const txid = await wallet.send({
-     *     address: 'ark1q...',
-     *     amount: 1000, // (optional, default to dust) btc amount to send to the output
-     *     assets: [{ assetId: 'abc123...', amount: 50n }] // (optional) list of assets to send
-     * });
-     * ```
-     */
-    async send(...args) {
-        return this._withTxLock(() => this._sendImpl(...args));
-    }
-    async _sendImpl(...args) {
-        if (args.length === 0) {
-            throw new Error("At least one receiver is required");
-        }
-        // Snapshot the active receive tapscript synchronously before any
-        // `await`. `WalletReceiveRotator.rotate` mutates
-        // `this.offchainTapscript` without acquiring `_txLock`, so any
-        // yield between here and `updateDbAfterOffchainTx` opens a window
-        // where the change-output pkScript (built from `outputAddress`
-        // below) and the change-VTXO metadata (built from the snapshot
-        // inside `updateDbAfterOffchainTx`) could come from different
-        // tapscripts. Threading the snapshot pins both reads.
-        const offchainTapscript = this.offchainTapscript;
-        const outputAddress = offchainTapscript.address(this.network.hrp, this.arkServerPublicKey);
-        const address = outputAddress.encode();
-        // validate recipients and populate undefined amount with dust amount
-        const recipients = validateRecipients(args, Number(this.dustAmount));
-        const virtualCoins = await this.getVtxos({
-            withRecoverable: false,
-        });
-        // keep track of asset changes
-        const assetChanges = new Map();
-        let selectedCoins = [];
-        let btcAmountToSelect = 0;
-        for (const recipient of recipients) {
-            btcAmountToSelect += Math.max(recipient.amount, Number(this.dustAmount));
-        }
-        // select assets
-        for (const recipient of recipients) {
-            if (!recipient.assets) {
-                continue;
-            }
-            for (const receiverAsset of recipient.assets) {
-                let amountToSelect = receiverAsset.amount;
-                // check if existing change covers the needed amount
-                const existingChange = assetChanges.get(receiverAsset.assetId) ?? 0n;
-                if (existingChange >= amountToSelect) {
-                    assetChanges.set(receiverAsset.assetId, existingChange - amountToSelect);
-                    if (assetChanges.get(receiverAsset.assetId) === 0n) {
-                        assetChanges.delete(receiverAsset.assetId);
-                    }
-                    continue;
-                }
-                if (existingChange > 0n) {
-                    amountToSelect -= existingChange;
-                    assetChanges.delete(receiverAsset.assetId);
-                }
-                const availableCoins = virtualCoins.filter((c) => !selectedCoins.find((sc) => sc.txid === c.txid && sc.vout === c.vout));
-                const { selected, totalAssetAmount } = selectCoinsWithAsset(availableCoins, receiverAsset.assetId, amountToSelect);
-                for (const coin of selected) {
-                    selectedCoins.push(coin);
-                    // asset coins contain btc, subtract from total amount to select
-                    btcAmountToSelect -= coin.value;
-                    // coin may contain other assets, add them to asset changes
-                    if (coin.assets) {
-                        for (const a of coin.assets) {
-                            if (a.assetId === receiverAsset.assetId) {
-                                continue;
-                            }
-                            const existing = assetChanges.get(a.assetId) ?? 0n;
-                            assetChanges.set(a.assetId, existing + a.amount);
-                        }
-                    }
-                }
-                const assetChangeAmount = totalAssetAmount - amountToSelect;
-                if (assetChangeAmount > 0n) {
-                    const existing = assetChanges.get(receiverAsset.assetId) ?? 0n;
-                    assetChanges.set(receiverAsset.assetId, existing + assetChangeAmount);
-                }
-            }
-        }
-        // select remaining btc
-        if (btcAmountToSelect > 0) {
-            const availableCoins = virtualCoins.filter((c) => !selectedCoins.find((sc) => sc.txid === c.txid && sc.vout === c.vout));
-            const { inputs: btcCoins } = selectVirtualCoins(availableCoins, btcAmountToSelect);
-            // some coins may contain assets, add them to asset changes
-            for (const coin of btcCoins) {
-                if (coin.assets) {
-                    for (const asset of coin.assets) {
-                        const existing = assetChanges.get(asset.assetId) ?? 0n;
-                        assetChanges.set(asset.assetId, existing + asset.amount);
-                    }
-                }
-            }
-            selectedCoins = [...selectedCoins, ...btcCoins];
-        }
-        let totalBtcSelected = selectedCoins.reduce((sum, c) => sum + c.value, 0);
-        // build tx outputs
-        const outputs = recipients.map((recipient) => ({
-            script: recipient.script,
-            amount: BigInt(recipient.amount),
-        }));
-        const totalBtcOutput = outputs.reduce((sum, o) => sum + Number(o.amount), 0);
-        let changeAmount = totalBtcSelected - totalBtcOutput;
-        // enforce minimum change amount when there are asset changes
-        if (assetChanges.size > 0 && changeAmount < Number(this.dustAmount)) {
-            const availableCoins = virtualCoins.filter((c) => !selectedCoins.find((sc) => sc.txid === c.txid && sc.vout === c.vout));
-            const { inputs: extraCoins } = selectVirtualCoins(availableCoins, Number(this.dustAmount) - changeAmount);
-            for (const coin of extraCoins) {
-                if (coin.assets) {
-                    for (const asset of coin.assets) {
-                        const existing = assetChanges.get(asset.assetId) ?? 0n;
-                        assetChanges.set(asset.assetId, existing + asset.amount);
-                    }
-                }
-            }
-            selectedCoins = [...selectedCoins, ...extraCoins];
-            totalBtcSelected += extraCoins.reduce((sum, c) => sum + c.value, 0);
-            changeAmount = totalBtcSelected - totalBtcOutput;
-        }
-        // build change receiver with BTC change and all asset changes
-        let changeReceiver;
-        let changeIndex = 0;
-        if (changeAmount > 0) {
-            const changeAssets = [];
-            for (const [assetId, amount] of assetChanges) {
-                if (amount > 0n) {
-                    changeAssets.push({ assetId, amount });
-                }
-            }
-            changeIndex = outputs.length;
-            outputs.push({
-                script: BigInt(changeAmount) < this.dustAmount
-                    ? outputAddress.subdustPkScript
-                    : outputAddress.pkScript,
-                amount: BigInt(changeAmount),
-            });
-            changeReceiver = {
-                address: address,
-                amount: changeAmount,
-                assets: changeAssets.length > 0 ? changeAssets : undefined,
-            };
-        }
-        // create asset packet only if there are assets involved
-        const assetInputs = selectedCoinsToAssetInputs(selectedCoins);
-        const hasAssets = assetInputs.size > 0 ||
-            recipients.some((r) => r.assets && r.assets.length > 0);
-        if (hasAssets) {
-            const assetPacket = createAssetPacket(assetInputs, recipients, changeReceiver);
-            outputs.push(Extension.create([assetPacket]).txOut());
-        }
-        const sentAmount = recipients.reduce((sum, r) => sum + r.amount, 0);
-        // Optimistically hide selected coins from concurrent getVtxos() while
-        // the offchain tx is in flight.
-        this._addPendingSpends(selectedCoins);
-        try {
-            const { arkTxid, signedCheckpointTxs } = await this.buildAndSubmitOffchainTx(selectedCoins, outputs);
-            await this.updateDbAfterOffchainTx(selectedCoins, arkTxid, signedCheckpointTxs, sentAmount, BigInt(changeAmount), changeReceiver ? changeIndex : 0, offchainTapscript, changeReceiver?.assets);
-            return arkTxid;
-        }
-        finally {
-            this._removePendingSpends(selectedCoins);
-        }
-    }
-    /**
-     * Build an offchain transaction from the given inputs and outputs,
-     * sign it, submit to the Arkade provider, and finalize.
-     * @returns The Arkade transaction id and server-signed checkpoint PSBTs (for bookkeeping)
-     */
-    async buildAndSubmitOffchainTx(inputs, outputs) {
-        const offchainTx = buildOffchainTx(inputs.map((input) => {
-            return {
-                ...input,
-                tapLeafScript: input.forfeitTapLeafScript,
-            };
-        }), outputs, this.serverUnrollScript);
-        // arkTx inputs spend checkpoint outputs, so each input's
-        // `witnessUtxo.script` is the checkpoint pkScript — not the
-        // source VTXO contract's pkScript. Build the routing jobs from
-        // the source VTXO scripts (positionally aligned to `inputs[i]`)
-        // so the router can resolve each input's owning contract.
-        const arkTxJobs = inputs.map((input, index) => ({
-            index,
-            lookupScript: VtxoScript.decode(input.tapTree).pkScript,
-        }));
-        const signedVirtualTx = await this._signerRouter.sign(offchainTx.arkTx, arkTxJobs);
-        // Mark pending before submitting — if we crash between submit and
-        // finalize, the next init will recover via finalizePendingTxs.
-        await this.setPendingTxFlag(true);
-        const { arkTxid, signedCheckpointTxs } = await this.arkProvider.submitTx(base64.encode(signedVirtualTx.toPSBT()), offchainTx.checkpoints.map((c) => base64.encode(c.toPSBT())));
-        const finalCheckpoints = await Promise.all(signedCheckpointTxs.map(async (c) => {
-            const tx = Transaction.fromPSBT(base64.decode(c));
-            const signedCheckpoint = await this._signerRouter.sign(tx, this.inputSigningJobsFromWitnessUtxos(tx));
-            return base64.encode(signedCheckpoint.toPSBT());
-        }));
-        await this.arkProvider.finalizeTx(arkTxid, finalCheckpoints);
-        try {
-            await this.setPendingTxFlag(false);
-        }
-        catch (error) {
-            console.error("Failed to clear pending tx flag:", error);
-        }
-        return { arkTxid, signedCheckpointTxs };
-    }
-    // mark virtual outputs as spent, save change outputs if any.
-    // `offchainTapscript` is the snapshot the caller captured under
-    // `_txLock` before any `await`; deriving both the change-VTXO
-    // metadata and `primaryAddress` from it here guarantees the local
-    // record matches the pkScript the server saw on the inbound
-    // transaction, even if `WalletReceiveRotator.rotate` swaps
-    // `this.offchainTapscript` mid-flight.
-    async updateDbAfterOffchainTx(inputs, arkTxid, signedCheckpointTxs, sentAmount, changeAmount, changeVout, offchainTapscript, changeAssets) {
-        const primaryAddress = offchainTapscript
-            .address(this.network.hrp, this.arkServerPublicKey)
-            .encode();
-        try {
-            const spentVtxos = [];
-            const commitmentTxIds = new Set();
-            let batchExpiry = Number.MAX_SAFE_INTEGER;
-            if (inputs.length !== signedCheckpointTxs.length) {
-                console.warn(`updateDbAfterOffchainTx: inputs length (${inputs.length}) differs from signedCheckpointTxs length (${signedCheckpointTxs.length})`);
-            }
-            const safeLength = Math.min(inputs.length, signedCheckpointTxs.length);
-            const cm = await this.getContractManager();
-            const annotatedInputs = await cm.annotateVtxos(inputs);
-            for (const [inputIndex, vtxo] of annotatedInputs.entries()) {
-                if (inputIndex < safeLength &&
-                    signedCheckpointTxs[inputIndex]) {
-                    const checkpoint = Transaction.fromPSBT(base64.decode(signedCheckpointTxs[inputIndex]));
-                    spentVtxos.push({
-                        ...vtxo,
-                        virtualStatus: {
-                            ...vtxo.virtualStatus,
-                            state: "spent",
-                        },
-                        spentBy: checkpoint.id,
-                        arkTxId: arkTxid,
-                        isSpent: true,
-                    });
-                }
-                else {
-                    spentVtxos.push({
-                        ...vtxo,
-                        virtualStatus: {
-                            ...vtxo.virtualStatus,
-                            state: "spent",
-                        },
-                        arkTxId: arkTxid,
-                        isSpent: true,
-                    });
-                }
-                if (vtxo.virtualStatus.commitmentTxIds) {
-                    for (const id of vtxo.virtualStatus.commitmentTxIds) {
-                        commitmentTxIds.add(id);
-                    }
-                }
-                if (vtxo.virtualStatus.batchExpiry) {
-                    batchExpiry = Math.min(batchExpiry, vtxo.virtualStatus.batchExpiry);
-                }
-            }
-            const createdAt = Date.now();
-            // Only save a change virtual output for preconfirmed coins (those with a batchExpiry).
-            // Inputs without a batchExpiry are already settled/unrolled and don't need tracking.
-            let changeVtxo;
-            if (changeAmount > 0n && batchExpiry !== Number.MAX_SAFE_INTEGER) {
-                changeVtxo = {
-                    txid: arkTxid,
-                    vout: changeVout,
-                    createdAt: new Date(createdAt),
-                    forfeitTapLeafScript: offchainTapscript.forfeit(),
-                    intentTapLeafScript: offchainTapscript.forfeit(),
-                    isUnrolled: false,
-                    isSpent: false,
-                    tapTree: offchainTapscript.encode(),
-                    value: Number(changeAmount),
-                    virtualStatus: {
-                        state: "preconfirmed",
-                        commitmentTxIds: Array.from(commitmentTxIds),
-                        batchExpiry,
-                    },
-                    status: {
-                        confirmed: false,
-                    },
-                    assets: changeAssets,
-                    script: hex.encode(offchainTapscript.pkScript),
-                };
-            }
-            // Route spent rows to their owning contract bucket. The wallet's
-            // primary contract is registered with the manager at boot, so
-            // `addrByScript` already includes it; in a multi-contract spend
-            // each input may belong to a different contract.
-            const contracts = await cm.getContracts();
-            const addrByScript = new Map(contracts.map((c) => [c.script, c.address]));
-            const spentByScript = new Map();
-            for (const v of spentVtxos) {
-                if (!v.script) {
-                    throw new Error(`Wallet.updateDbAfterOffchainTx: spent VTXO ${v.txid}:${v.vout} has no script`);
-                }
-                const arr = spentByScript.get(v.script) ?? [];
-                arr.push(v);
-                spentByScript.set(v.script, arr);
-            }
-            for (const [script, vtxos] of spentByScript) {
-                // User-initiated send path: a wrong-script row here means the
-                // wallet is about to record ownership against the wrong
-                // contract — fail loudly rather than persist inconsistent state.
-                validateVtxosForScript(vtxos, script, "Wallet.updateDbAfterOffchainTx");
-                const targetAddr = addrByScript.get(script);
-                if (!targetAddr) {
-                    throw new Error(`Wallet.updateDbAfterOffchainTx: no contract owns script ${script}`);
-                }
-                await saveVtxosForContract(this.walletRepository, { script, address: targetAddr }, vtxos);
-            }
-            // Change is always primary-script by construction.
-            if (changeVtxo) {
-                await saveVtxosForContract(this.walletRepository, { script: changeVtxo.script, address: primaryAddress }, [changeVtxo]);
-            }
-            await this.walletRepository.saveTransactions(primaryAddress, [
-                {
-                    key: {
-                        boardingTxid: "",
-                        commitmentTxid: "",
-                        arkTxid: arkTxid,
-                    },
-                    amount: sentAmount,
-                    type: TxType.TxSent,
-                    settled: false,
-                    createdAt,
-                },
-            ]);
-        }
-        catch (e) {
-            console.warn("error saving offchain tx to repository", e);
-            throw e;
-        }
-    }
-    // mark virtual outputs as spent/settled, remove boarding inputs
-    async updateDbAfterSettle(inputs, commitmentTxid) {
-        try {
-            const boardingAddress = await this.getBoardingAddress();
-            const spentVtxos = [];
-            const inputArkTxIds = new Set();
-            const boardingUtxoToRemove = new Set();
-            const isVtxo = (input) => "virtualStatus" in input;
-            const vtxoInputs = inputs.filter(isVtxo);
-            const cm = await this.getContractManager();
-            const annotatedVtxos = await cm.annotateVtxos(vtxoInputs);
-            const annotatedByKey = new Map(annotatedVtxos.map((v) => [`${v.txid}:${v.vout}`, v]));
-            for (const input of inputs) {
-                if (isVtxo(input)) {
-                    // virtual output = mark it settled
-                    const vtxo = annotatedByKey.get(`${input.txid}:${input.vout}`);
-                    if (vtxo.arkTxId) {
-                        inputArkTxIds.add(vtxo.arkTxId);
-                    }
-                    spentVtxos.push({
-                        ...vtxo,
-                        virtualStatus: {
-                            ...vtxo.virtualStatus,
-                            state: "settled",
-                        },
-                        settledBy: commitmentTxid,
-                        isSpent: true,
-                    });
-                }
-                else {
-                    // boarding input = remove it
-                    boardingUtxoToRemove.add(`${input.txid}:${input.vout}`);
-                }
-            }
-            if (spentVtxos.length > 0) {
-                // Route settled rows to their owning contract bucket. In a
-                // multi-contract settle the inputs may belong to several
-                // contracts; the wallet's primary contract is registered with
-                // the manager at boot, so its address is in `addrByScript`
-                // alongside the rest.
-                const contracts = await cm.getContracts();
-                const addrByScript = new Map(contracts.map((c) => [c.script, c.address]));
-                const byScript = new Map();
-                for (const v of spentVtxos) {
-                    if (!v.script) {
-                        throw new Error(`Wallet.updateDbAfterSettle: spent VTXO ${v.txid}:${v.vout} has no script`);
-                    }
-                    const arr = byScript.get(v.script) ?? [];
-                    arr.push(v);
-                    byScript.set(v.script, arr);
-                }
-                for (const [script, vtxos] of byScript) {
-                    // User-initiated settle path: refuse to record a settle
-                    // against the wrong script.
-                    validateVtxosForScript(vtxos, script, "Wallet.updateDbAfterSettle");
-                    const targetAddr = addrByScript.get(script);
-                    if (!targetAddr) {
-                        throw new Error(`Wallet.updateDbAfterSettle: no contract owns script ${script}`);
-                    }
-                    await saveVtxosForContract(this.walletRepository, { script, address: targetAddr }, vtxos);
-                }
-            }
-            if (boardingUtxoToRemove.size > 0) {
-                const currentUtxos = await this.walletRepository.getUtxos(boardingAddress);
-                const filtered = currentUtxos.filter((u) => !boardingUtxoToRemove.has(`${u.txid}:${u.vout}`));
-                // Clear and re-save the filtered list
-                await this.walletRepository.deleteUtxos(boardingAddress);
-                if (filtered.length > 0) {
-                    await this.walletRepository.saveUtxos(boardingAddress, filtered);
-                }
-            }
-        }
-        catch (e) {
-            console.warn("error updating repository after settle", e);
-            throw e;
-        }
-    }
-}
-Wallet.MIN_FEE_RATE = 1; // sats/vbyte
-/**
- * Select virtual outputs to reach a target amount, prioritizing those closer to expiry
- * @param coins List of virtual outputs to select from
- * @param targetAmount Target amount to reach in satoshis
- * @returns Selected virtual outputs and change amount
- */
-export function selectVirtualCoins(coins, targetAmount) {
-    // Sort virtual outputs by expiry (ascending) and amount (descending)
-    const sortedCoins = [...coins].sort((a, b) => {
-        // First sort by expiry if available
-        const expiryA = a.virtualStatus.batchExpiry || Number.MAX_SAFE_INTEGER;
-        const expiryB = b.virtualStatus.batchExpiry || Number.MAX_SAFE_INTEGER;
-        if (expiryA !== expiryB) {
-            return expiryA - expiryB; // Earlier expiry first
-        }
-        // Then sort by amount
-        return b.value - a.value; // Larger amount first
-    });
-    const selectedCoins = [];
-    let selectedAmount = 0;
-    // Select coins until we have enough
-    for (const coin of sortedCoins) {
-        selectedCoins.push(coin);
-        selectedAmount += coin.value;
-        if (selectedAmount >= targetAmount) {
-            break;
-        }
-    }
-    if (selectedAmount === targetAmount) {
-        return { inputs: selectedCoins, changeAmount: 0n };
-    }
-    // Check if we have enough
-    if (selectedAmount < targetAmount) {
-        throw new Error("Insufficient funds");
-    }
-    const changeAmount = BigInt(selectedAmount - targetAmount);
-    return {
-        inputs: selectedCoins,
-        changeAmount,
-    };
-}
-/**
- * Wait for incoming funds to the wallet
- * @param wallet - The wallet to wait for incoming funds
- * @returns A promise that resolves the next new coins received by the wallet's address
- */
-export async function waitForIncomingFunds(wallet) {
-    let stopFunc;
-    return new Promise((resolve) => {
-        wallet
-            .notifyIncomingFunds((coins) => {
-            resolve(coins);
-            if (stopFunc)
-                stopFunc();
-        })
-            .then((stop) => {
-            stopFunc = stop;
-        });
-    });
-}