@arkade-os/sdk 0.4.53 → 0.4.55

package/dist/{chunk-3YC3LQ2E.cjs → chunk-ZPL34T2Q.cjs}

@@ -1,8 +1,8 @@
 'use strict';
 
-var chunkRNMLFY2V_cjs = require('./chunk-RNMLFY2V.cjs');
-var chunkIEMPH7J6_cjs = require('./chunk-IEMPH7J6.cjs');
-var chunkE7HB3GKK_cjs = require('./chunk-E7HB3GKK.cjs');
+var chunkG7DOBFQN_cjs = require('./chunk-G7DOBFQN.cjs');
+var chunkV2TOHHPW_cjs = require('./chunk-V2TOHHPW.cjs');
+var chunkOWCPXRGP_cjs = require('./chunk-OWCPXRGP.cjs');
 var chunk5BLDMQED_cjs = require('./chunk-5BLDMQED.cjs');
 var utils_js = require('@scure/btc-signer/utils.js');
 var btcSigner = require('@scure/btc-signer');
@@ -47,8 +47,8 @@ function aggregateNonces(pubNonces) {
   return musig2__namespace.nonceAggregate(pubNonces);
 }
 function aggregateKeys(publicKeys, sort, options = {}) {
-  {
-    publicKeys = musig2__namespace.sortKeys(publicKeys);
+  if (sort) {
+    publicKeys = musig2__namespace.sortKeys([...publicKeys]);
   }
   const { aggPublicKey: preTweakedKey } = musig2__namespace.keyAggregate(publicKeys);
   if (!options.taprootTweak) {
@@ -110,24 +110,27 @@ var PartialSig = class _PartialSig {
     return new _PartialSig(bytes, R);
   }
 };
-function sign(secNonce, privateKey, combinedNonce, publicKeys, message, options) {
+function createSession(combinedNonce, publicKeys, message, options) {
+  const keys = musig2__namespace.sortKeys([...publicKeys]) ;
   let tweakBytes;
   if (options?.taprootTweak !== void 0) {
-    const { preTweakedKey } = aggregateKeys(
-      musig2__namespace.sortKeys(publicKeys) );
+    const { preTweakedKey } = aggregateKeys(keys, false);
     tweakBytes = secp256k1_js.schnorr.utils.taggedHash(
       "TapTweak",
       preTweakedKey.subarray(1),
       options.taprootTweak
     );
   }
-  const session = new musig2__namespace.Session(
+  return new musig2__namespace.Session(
     combinedNonce,
-    musig2__namespace.sortKeys(publicKeys) ,
+    keys,
     message,
     tweakBytes ? [tweakBytes] : void 0,
     tweakBytes ? [true] : void 0
   );
+}
+function sign(secNonce, privateKey, combinedNonce, publicKeys, message, options) {
+  const session = createSession(combinedNonce, publicKeys, message, options);
   const partialSig = session.sign(secNonce, privateKey);
   return PartialSig.decode(partialSig);
 }
@@ -185,7 +188,7 @@ var TreeSignerSession = class _TreeSignerSession {
     noncesByPubkey.set(base.hex.encode(myPublicKey.subarray(1)), myNonce);
     const tx = this.graph.find(txid);
     if (!tx) throw new Error(`missing tx for txid ${txid}`);
-    const cosigners = chunkRNMLFY2V_cjs.getArkPsbtFields(tx.root, 0, chunkRNMLFY2V_cjs.CosignerPublicKey).map(
+    const cosigners = chunkOWCPXRGP_cjs.getArkPsbtFields(tx.root, 0, chunkOWCPXRGP_cjs.CosignerPublicKey).map(
       (c) => base.hex.encode(c.key.subarray(1))
       // xonly pubkey
     );
@@ -237,7 +240,7 @@ var TreeSignerSession = class _TreeSignerSession {
     if (!aggNonce) throw new Error("missing aggregate nonce");
     const prevoutAmounts = [];
     const prevoutScripts = [];
-    const cosigners = chunkRNMLFY2V_cjs.getArkPsbtFields(g.root, 0, chunkRNMLFY2V_cjs.CosignerPublicKey).map((c) => c.key);
+    const cosigners = chunkOWCPXRGP_cjs.getArkPsbtFields(g.root, 0, chunkOWCPXRGP_cjs.CosignerPublicKey).map((c) => c.key);
     const { finalKey } = aggregateKeys(cosigners, true, {
       taprootTweak: this.scriptRoot
     });
@@ -416,7 +419,7 @@ var SeedIdentity = class _SeedIdentity {
     let network;
     if ("descriptor" in opts && typeof opts.descriptor === "string") {
       descriptor = opts.descriptor;
-      network = chunkIEMPH7J6_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
+      network = chunkV2TOHHPW_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
     } else {
       network = opts.isMainnet ?? true ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
       descriptor = descriptorsScure.scriptExpressions.trBIP32({
@@ -501,7 +504,7 @@ var SeedIdentity = class _SeedIdentity {
    * `StaticDescriptorProvider` for legacy single-key wallets.
    */
   isOurs(descriptor) {
-    return chunkIEMPH7J6_cjs.descriptorIsOurs(descriptor, this.descriptor, utils_js.pubSchnorr(this.derivedKey));
+    return chunkV2TOHHPW_cjs.descriptorIsOurs(descriptor, this.descriptor, utils_js.pubSchnorr(this.derivedKey));
   }
   /**
    * Signs each request with the key derived from its descriptor.
@@ -536,9 +539,21 @@ var SeedIdentity = class _SeedIdentity {
     const key = this.derivePrivateKeyForDescriptor(descriptor);
     return this.signMessageWithKey(key, message, signatureType);
   }
+  /**
+   * BIP-340 sign `messageHash` with the key derived from `descriptor`,
+   * aux_rand = 0. Backs {@link DescriptorIdentity.signSchnorrDeterministic},
+   * which swap preimage derivation reads through.
+   */
+  async signSchnorrDeterministicWithDescriptor(descriptor, messageHash) {
+    if (!this.isOurs(descriptor)) {
+      throw new Error(`Descriptor ${descriptor} does not belong to this identity`);
+    }
+    const key = this.derivePrivateKeyForDescriptor(descriptor);
+    return secp256k1.schnorr.signAsync(messageHash, key, new Uint8Array(32));
+  }
   // ── internal helpers ─────────────────────────────────────────────
   derivePrivateKeyForDescriptor(descriptor) {
-    const network = chunkIEMPH7J6_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
+    const network = chunkV2TOHHPW_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
     const expansion = descriptorsScure.expand({ descriptor, network });
     if (expansion.isRanged) {
       throw new Error(
@@ -624,7 +639,7 @@ var ReadonlyDescriptorIdentity = class _ReadonlyDescriptorIdentity {
    */
   descriptor;
   constructor(descriptor) {
-    const network = chunkIEMPH7J6_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
+    const network = chunkV2TOHHPW_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
     let expansion;
     try {
       expansion = descriptorsScure.expand({ descriptor, network, index: 0 });
@@ -674,7 +689,7 @@ var ReadonlyDescriptorIdentity = class _ReadonlyDescriptorIdentity {
    * `StaticDescriptorProvider` for legacy single-key wallets.
    */
   isOurs(descriptor) {
-    return chunkIEMPH7J6_cjs.descriptorIsOurs(descriptor, this.descriptor, this.indexZero.pubkey);
+    return chunkV2TOHHPW_cjs.descriptorIsOurs(descriptor, this.descriptor, this.indexZero.pubkey);
   }
 };
 function serializeSeedOwnedSigningIdentity(identity) {
@@ -822,6 +837,59 @@ function assertValidSerializedIdentity(s) {
   }
 }
 
+// src/identity/descriptorIdentity.ts
+function isHDDeterministicSignCapable(value) {
+  return typeof value === "object" && value !== null && typeof value.signSchnorrDeterministicWithDescriptor === "function";
+}
+var DescriptorIdentity = class {
+  descriptor;
+  signer;
+  base;
+  constructor({ descriptor, signer, base }) {
+    this.descriptor = descriptor;
+    this.signer = signer;
+    this.base = base;
+  }
+  async xOnlyPublicKey() {
+    return chunkV2TOHHPW_cjs.deriveDescriptorLeafPubKey(this.descriptor);
+  }
+  async compressedPublicKey() {
+    return chunkV2TOHHPW_cjs.deriveDescriptorLeafCompressedPubKey(this.descriptor);
+  }
+  async sign(tx, inputIndexes) {
+    const [signed] = await this.signer.signWithDescriptor([
+      { descriptor: this.descriptor, tx, inputIndexes }
+    ]);
+    if (!signed) {
+      throw new Error(`Descriptor signer returned no transaction for ${this.descriptor}`);
+    }
+    return signed;
+  }
+  async signMessage(message, signatureType = "schnorr") {
+    return this.signer.signMessageWithDescriptor(this.descriptor, message, signatureType);
+  }
+  /**
+   * Delegated: `TreeSignerSession.random()` consults no key material, so the
+   * session is index-independent.
+   */
+  signerSession() {
+    return this.base.signerSession();
+  }
+  /**
+   * Throws rather than falling back to the baseline key: a preimage derived
+   * from the wrong index is unrecoverable, and callers probe this member
+   * through a structural guard that cannot tell the two apart.
+   */
+  async signSchnorrDeterministic(messageHash) {
+    if (!isHDDeterministicSignCapable(this.base)) {
+      throw new Error(
+        `Identity cannot sign deterministically for descriptor ${this.descriptor}`
+      );
+    }
+    return this.base.signSchnorrDeterministicWithDescriptor(this.descriptor, messageHash);
+  }
+};
+
 // src/identity/hdCapableIdentity.ts
 function isHDCapableIdentity(value) {
   if (typeof value !== "object" || value === null) return false;
@@ -834,6 +902,13 @@ function isBatchSignable(identity) {
   return "signMultiple" in identity && typeof identity.signMultiple === "function";
 }
 
+// src/wallet/hdWalletCapable.ts
+function isHDWalletCapable(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const v = value;
+  return typeof v.getCurrentSigningDescriptor === "function" && typeof v.getUsedSigningDescriptors === "function" && typeof v.signerForDescriptor === "function";
+}
+
 // src/worker/browser/service-worker-manager.ts
 var registrations = /* @__PURE__ */ new Map();
 var handshakes = /* @__PURE__ */ new WeakSet();
@@ -986,14 +1061,14 @@ var RestDelegateProvider = class {
    */
   async delegate(intent, forfeitTxs, options) {
     const url = `${this.url}/v1/delegate`;
-    const response = await chunkRNMLFY2V_cjs.baseFetch(url, {
+    const response = await chunkOWCPXRGP_cjs.baseFetch(url, {
       method: "POST",
       headers: {
         "Content-Type": "application/json"
       },
       body: JSON.stringify({
         intent: {
-          message: chunkRNMLFY2V_cjs.Intent.encodeMessage(intent.message),
+          message: chunkOWCPXRGP_cjs.Intent.encodeMessage(intent.message),
           proof: intent.proof
         },
         forfeit_txs: forfeitTxs,
@@ -1013,7 +1088,7 @@ var RestDelegateProvider = class {
    */
   async getDelegateInfo() {
     const url = `${this.url}/v1/delegator/info`;
-    const response = await chunkRNMLFY2V_cjs.rateGate.runHttp(url, () => chunkRNMLFY2V_cjs.baseFetch(url));
+    const response = await chunkOWCPXRGP_cjs.rateGate.runHttp(url, () => chunkOWCPXRGP_cjs.baseFetch(url));
     if (!response.ok) {
       const errorText2 = await response.text();
       throw new Error(`Failed to get delegate info: ${errorText2}`);
@@ -1040,7 +1115,7 @@ var ESPLORA_URL = {
   regtest: "http://localhost:3000/api"
 };
 var EsploraProvider = class {
-  constructor(baseUrl = ESPLORA_URL[chunkE7HB3GKK_cjs.DEFAULT_NETWORK_NAME], opts) {
+  constructor(baseUrl = ESPLORA_URL[chunkOWCPXRGP_cjs.DEFAULT_NETWORK_NAME], opts) {
     this.baseUrl = baseUrl;
     this.pollingInterval = opts?.pollingInterval ?? 15e3;
     this.forcePolling = opts?.forcePolling ?? false;
@@ -1049,14 +1124,14 @@ var EsploraProvider = class {
   pollingInterval;
   forcePolling;
   async getCoins(address) {
-    const response = await chunkRNMLFY2V_cjs.baseFetch(`${this.baseUrl}/address/${address}/utxo`);
+    const response = await chunkOWCPXRGP_cjs.baseFetch(`${this.baseUrl}/address/${address}/utxo`);
     if (!response.ok) {
       throw new Error(`Failed to fetch UTXOs: ${response.statusText}`);
     }
     return response.json();
   }
   async getFeeRate() {
-    const response = await chunkRNMLFY2V_cjs.baseFetch(`${this.baseUrl}/fee-estimates`);
+    const response = await chunkOWCPXRGP_cjs.baseFetch(`${this.baseUrl}/fee-estimates`);
     if (response.status === 404) {
       return void 0;
     }
@@ -1077,7 +1152,7 @@ var EsploraProvider = class {
     }
   }
   async getTxOutspends(txid) {
-    const response = await chunkRNMLFY2V_cjs.baseFetch(`${this.baseUrl}/tx/${txid}/outspends`);
+    const response = await chunkOWCPXRGP_cjs.baseFetch(`${this.baseUrl}/tx/${txid}/outspends`);
     if (!response.ok) {
       const error = await response.text();
       throw new Error(`Failed to get transaction outspends: ${error}`);
@@ -1085,7 +1160,7 @@ var EsploraProvider = class {
     return response.json();
   }
   async getTransactions(address) {
-    const response = await chunkRNMLFY2V_cjs.baseFetch(`${this.baseUrl}/address/${address}/txs`);
+    const response = await chunkOWCPXRGP_cjs.baseFetch(`${this.baseUrl}/address/${address}/txs`);
     if (!response.ok) {
       const error = await response.text();
       throw new Error(`Failed to get transactions: ${error}`);
@@ -1093,7 +1168,7 @@ var EsploraProvider = class {
     return response.json();
   }
   async getTxStatus(txid) {
-    const txresponse = await chunkRNMLFY2V_cjs.baseFetch(`${this.baseUrl}/tx/${txid}`);
+    const txresponse = await chunkOWCPXRGP_cjs.baseFetch(`${this.baseUrl}/tx/${txid}`);
     if (!txresponse.ok) {
       throw new Error(txresponse.statusText);
     }
@@ -1101,7 +1176,7 @@ var EsploraProvider = class {
     if (!tx.status.confirmed) {
       return { confirmed: false };
     }
-    const response = await chunkRNMLFY2V_cjs.baseFetch(`${this.baseUrl}/tx/${txid}/status`);
+    const response = await chunkOWCPXRGP_cjs.baseFetch(`${this.baseUrl}/tx/${txid}/status`);
     if (!response.ok) {
       throw new Error(`Failed to get transaction status: ${response.statusText}`);
     }
@@ -1185,7 +1260,7 @@ var EsploraProvider = class {
     return stopFunc;
   }
   async getChainTip() {
-    const tipBlocks = await chunkRNMLFY2V_cjs.baseFetch(`${this.baseUrl}/blocks`);
+    const tipBlocks = await chunkOWCPXRGP_cjs.baseFetch(`${this.baseUrl}/blocks`);
     if (!tipBlocks.ok) {
       throw new Error(`Failed to get chain tip: ${tipBlocks.statusText}`);
     }
@@ -1204,7 +1279,7 @@ var EsploraProvider = class {
     };
   }
   async broadcastPackage(parent, child) {
-    const response = await chunkRNMLFY2V_cjs.baseFetch(`${this.baseUrl}/txs/package`, {
+    const response = await chunkOWCPXRGP_cjs.baseFetch(`${this.baseUrl}/txs/package`, {
       method: "POST",
       headers: {
         "Content-Type": "application/json"
@@ -1218,7 +1293,7 @@ var EsploraProvider = class {
     return response.json();
   }
   async broadcastTx(tx) {
-    const response = await chunkRNMLFY2V_cjs.baseFetch(`${this.baseUrl}/tx`, {
+    const response = await chunkOWCPXRGP_cjs.baseFetch(`${this.baseUrl}/tx`, {
       method: "POST",
       headers: {
         "Content-Type": "text/plain"
@@ -1380,7 +1455,7 @@ function findP2AOutput(tx) {
 var CHILD_DUST_AMOUNT = 546;
 function buildAnchorChild(params) {
   const { parent, feeRate, fundingCoins, changeAddress, tapInternalKey, network } = params;
-  const child = new chunkRNMLFY2V_cjs.Transaction({ version: 3, allowLegacyWitnessUtxo: true });
+  const child = new chunkOWCPXRGP_cjs.Transaction({ version: 3, allowLegacyWitnessUtxo: true });
   child.addInput(findP2AOutput(parent));
   const estimator = TxWeightEstimator.create().addP2AInput();
   for (const _ of fundingCoins) {
@@ -1428,7 +1503,7 @@ function buildForfeitTx(inputs, forfeitPkScript, txLocktime) {
   );
 }
 function buildForfeitTxWithOutput(inputs, output, txLocktime) {
-  const tx = new chunkRNMLFY2V_cjs.Transaction({
+  const tx = new chunkOWCPXRGP_cjs.Transaction({
     version: 3,
     lockTime: txLocktime
   });
@@ -1504,7 +1579,7 @@ function validateVtxoTxGraph(graph, roundTransaction, sweepTapTreeRoot) {
       if (previousScriptKey.length !== 32) {
         throw new Error(`parent output ${childIndex} has invalid script`);
       }
-      const cosigners = chunkRNMLFY2V_cjs.getArkPsbtFields(child.root, 0, chunkRNMLFY2V_cjs.CosignerPublicKey);
+      const cosigners = chunkOWCPXRGP_cjs.getArkPsbtFields(child.root, 0, chunkOWCPXRGP_cjs.CosignerPublicKey);
       if (cosigners.length === 0) {
         throw ErrMissingCosignersPublicKeys;
       }
@@ -1562,7 +1637,7 @@ var EmulatorPacket = class _EmulatorPacket {
     return new _EmulatorPacket(entries);
   }
   static fromBytes(data) {
-    const reader = new chunkRNMLFY2V_cjs.BufferReader(data);
+    const reader = new chunkG7DOBFQN_cjs.BufferReader(data);
     const entryCount = reader.readCompactSize();
     const entries = [];
     for (let i = 0; i < entryCount; i++) {
@@ -1580,7 +1655,7 @@ var EmulatorPacket = class _EmulatorPacket {
     return _EmulatorPacket.PACKET_TYPE;
   }
   serialize() {
-    const writer = new chunkRNMLFY2V_cjs.BufferWriter();
+    const writer = new chunkG7DOBFQN_cjs.BufferWriter();
     writer.writeCompactSize(this.entries.length);
     for (const entry of this.entries) {
       writer.writeUint16LE(entry.vin);
@@ -1667,7 +1742,7 @@ var Extension = class _Extension {
         `expected magic prefix ${base.hex.encode(ARKADE_MAGIC)}, got ${base.hex.encode(payload.slice(0, Math.min(payload.length, ARKADE_MAGIC.length)))}`
       );
     }
-    const reader = new chunkRNMLFY2V_cjs.BufferReader(payload.slice(ARKADE_MAGIC.length));
+    const reader = new chunkG7DOBFQN_cjs.BufferReader(payload.slice(ARKADE_MAGIC.length));
     const packets = [];
     while (reader.remaining() > 0) {
       const packetType = reader.readByte();
@@ -1741,7 +1816,7 @@ var Extension = class _Extension {
    */
   getAssetPacket() {
     for (const p of this.packets) {
-      if (p instanceof chunkRNMLFY2V_cjs.Packet) {
+      if (p instanceof chunkG7DOBFQN_cjs.Packet) {
         return p;
       }
     }
@@ -1779,8 +1854,8 @@ var Extension = class _Extension {
 };
 function parsePacket(packetType, data) {
   switch (packetType) {
-    case chunkRNMLFY2V_cjs.Packet.PACKET_TYPE:
-      return chunkRNMLFY2V_cjs.Packet.fromBytes(data);
+    case chunkG7DOBFQN_cjs.Packet.PACKET_TYPE:
+      return chunkG7DOBFQN_cjs.Packet.fromBytes(data);
     case EmulatorPacket.PACKET_TYPE:
       return EmulatorPacket.fromBytes(data);
     default:
@@ -1827,21 +1902,35 @@ function buildOpReturnScript(data) {
   }
   return script;
 }
-var ErrOffchainOutputNotFound = (address) => new Error(`offchain send output not found: ${address}`);
-var ErrInvalidAssetOutputAmount = (got, want, assetId) => new Error(`invalid asset output amount for ${assetId}: got ${got}, want ${want}`);
-var ErrAssetGroupNotFound = (assetId) => new Error(`asset group not found in batch leaf: ${assetId}`);
-var ErrAssetOutputNotFound = (assetId, outputIndex) => new Error(`asset output not found in asset group ${assetId} at index ${outputIndex}`);
+var ErrOffchainOutputNotFound = (address) => new chunkOWCPXRGP_cjs.ServerResponseMismatchError(`offchain send output not found: ${address}`);
+var ErrInvalidAssetOutputAmount = (got, want, assetId) => new chunkOWCPXRGP_cjs.ServerResponseMismatchError(
+  `invalid asset output amount for ${assetId}: got ${got}, want ${want}`
+);
+var ErrAssetGroupNotFound = (assetId) => new chunkOWCPXRGP_cjs.ServerResponseMismatchError(`asset group not found in batch leaf: ${assetId}`);
+var ErrAssetOutputNotFound = (assetId, outputIndex) => new chunkOWCPXRGP_cjs.ServerResponseMismatchError(
+  `asset output not found in asset group ${assetId} at index ${outputIndex}`
+);
+var ErrOnchainOutputNotFound = (address) => new chunkOWCPXRGP_cjs.ServerResponseMismatchError(`onchain output not found: ${address}`);
+var ErrUnvalidatedOffchainOutput = (address) => new chunkOWCPXRGP_cjs.ServerResponseMismatchError(
+  `offchain output ${address} cannot be validated: virtual output tree signing did not run`
+);
 var ErrInvalidOnchainOutputAmount = (address) => new Error(`invalid onchain output amount: ${address}`);
 var ErrInvalidOnchainOutputAssets = (address) => new Error(`onchain output ${address} cannot have assets`);
-var ErrOnchainOutputNotFound = (address) => new Error(`onchain output not found: ${address}`);
 var ErrInvalidOffchainOutputAmount = (address) => new Error(`invalid offchain output ${address}, missing amount`);
+function assertFinalCommitmentMatchesValidated(finalCommitmentTx, validatedCommitmentTxid, context) {
+  if (!validatedCommitmentTxid) return;
+  if (finalCommitmentTx.id === validatedCommitmentTxid) return;
+  throw new chunkOWCPXRGP_cjs.ServerResponseMismatchError(
+    `${context}: finalization commitment tx ${finalCommitmentTx.id} differs from the validated commitment tx ${validatedCommitmentTxid}`
+  );
+}
 function validateBatchRecipients(commitmentTx, vtxoTreeLeaves, recipients, network) {
   const usedOutputs = /* @__PURE__ */ new Set();
   const usedOnchainOutputs = /* @__PURE__ */ new Set();
   for (const recipient of recipients) {
     let arkAddress;
     try {
-      arkAddress = chunkE7HB3GKK_cjs.ArkAddress.decode(recipient.address);
+      arkAddress = chunkOWCPXRGP_cjs.ArkAddress.decode(recipient.address);
     } catch {
       validateOnchainRecipient(commitmentTx, recipient, network, usedOnchainOutputs);
       continue;
@@ -1849,6 +1938,18 @@ function validateBatchRecipients(commitmentTx, vtxoTreeLeaves, recipients, netwo
     validateOffchainRecipient(vtxoTreeLeaves, arkAddress, recipient, usedOutputs);
   }
 }
+function validateBatchRecipientsWithoutTree(commitmentTx, recipients, network) {
+  const usedOnchainOutputs = /* @__PURE__ */ new Set();
+  for (const recipient of recipients) {
+    try {
+      chunkOWCPXRGP_cjs.ArkAddress.decode(recipient.address);
+    } catch {
+      validateOnchainRecipient(commitmentTx, recipient, network, usedOnchainOutputs);
+      continue;
+    }
+    throw ErrUnvalidatedOffchainOutput(recipient.address);
+  }
+}
 function validateOnchainRecipient(commitmentTx, recipient, network, usedOutputs) {
   const addr = btcSigner.Address(network).decode(recipient.address);
   const expectedPkScript = btcSigner.OutScript.encode(addr);
@@ -1941,8 +2042,6 @@ function validateAssetGroupOutput(packet, outputIndex, assetId, expectedAmount)
     throw ErrInvalidAssetOutputAmount(assetOutput.amount, expectedAmount, assetId);
   }
 }
-
-// src/wallet/activity.ts
 async function buildActivities(txs, resolvers) {
   const preparedResolvers = (await Promise.all(
     resolvers.map(async (r) => {
@@ -2052,9 +2151,49 @@ function boardingResolver() {
     }
   };
 }
+function collabExitResolver() {
+  return {
+    id: "collab-exit",
+    resolve(tx) {
+      if (tx.tag !== "exit" || !tx.key.commitmentTxid) return void 0;
+      return [
+        {
+          groupId: `exit:${tx.key.commitmentTxid}`,
+          label: "Collaborative exit",
+          kind: "exit"
+        }
+      ];
+    }
+  };
+}
+function assetMintResolver() {
+  return {
+    id: "asset-mint",
+    resolve(tx) {
+      if (!tx.assets?.length || !tx.key.arkTxid) return void 0;
+      const minted = tx.assets.filter((a) => {
+        try {
+          return base.hex.encode(chunkG7DOBFQN_cjs.AssetId.fromString(a.assetId).txid) === tx.key.arkTxid;
+        } catch {
+          return false;
+        }
+      });
+      if (minted.length === 0) return void 0;
+      const received = tx.type === "RECEIVED" /* TxReceived */;
+      return minted.map((a) => ({
+        groupId: `mint:${a.assetId}`,
+        label: received ? "Asset receive" : "Asset mint",
+        kind: received ? "asset-receive" : "asset-mint",
+        metadata: { assetId: a.assetId, amount: a.amount.toString() }
+      }));
+    }
+  };
+}
 function createDefaultActivityRegistry() {
   const registry = new ActivityRegistry();
   registry.use(boardingResolver());
+  registry.use(collabExitResolver());
+  registry.use(assetMintResolver());
   return registry;
 }
 
@@ -2077,7 +2216,7 @@ function createAssetPacket(assetInputs, receivers, changeReceiver) {
       const existing = inputsByAssetId.get(asset.assetId);
       inputsByAssetId.set(asset.assetId, [
         ...existing ?? [],
-        chunkRNMLFY2V_cjs.AssetInput.create(inputIndex, asset.amount)
+        chunkG7DOBFQN_cjs.AssetInput.create(inputIndex, asset.amount)
       ]);
     }
   }
@@ -2089,7 +2228,7 @@ function createAssetPacket(assetInputs, receivers, changeReceiver) {
         const existing = outputsByAssetId.get(asset.assetId);
         outputsByAssetId.set(asset.assetId, [
           ...existing ?? [],
-          chunkRNMLFY2V_cjs.AssetOutput.create(outputIndex, asset.amount)
+          chunkG7DOBFQN_cjs.AssetOutput.create(outputIndex, asset.amount)
         ]);
       }
     }
@@ -2100,7 +2239,7 @@ function createAssetPacket(assetInputs, receivers, changeReceiver) {
       const existing = outputsByAssetId.get(asset.assetId);
       outputsByAssetId.set(asset.assetId, [
         ...existing ?? [],
-        chunkRNMLFY2V_cjs.AssetOutput.create(outputIndex, asset.amount)
+        chunkG7DOBFQN_cjs.AssetOutput.create(outputIndex, asset.amount)
       ]);
     }
   }
@@ -2109,11 +2248,11 @@ function createAssetPacket(assetInputs, receivers, changeReceiver) {
   for (const assetIdStr of allAssetIds) {
     const inputs = inputsByAssetId.get(assetIdStr);
     const outputs = outputsByAssetId.get(assetIdStr);
-    const assetId = chunkRNMLFY2V_cjs.AssetId.fromString(assetIdStr);
-    const group = chunkRNMLFY2V_cjs.AssetGroup.create(assetId, null, inputs ?? [], outputs ?? [], []);
+    const assetId = chunkG7DOBFQN_cjs.AssetId.fromString(assetIdStr);
+    const group = chunkG7DOBFQN_cjs.AssetGroup.create(assetId, null, inputs ?? [], outputs ?? [], []);
     groups.push(group);
   }
-  return chunkRNMLFY2V_cjs.Packet.create(groups);
+  return chunkG7DOBFQN_cjs.Packet.create(groups);
 }
 function selectCoinsWithAsset(coins, assetId, requiredAmount) {
   const coinsWithAsset = coins.filter((coin) => coin.assets?.some((a) => a.assetId === assetId));
@@ -2218,8 +2357,8 @@ function buildOffchainTx(inputs, outputs, serverUnrollScript) {
 function buildVirtualTx(inputs, outputs) {
   let lockTime = 0n;
   for (const input of inputs) {
-    const tapscript = chunkE7HB3GKK_cjs.decodeTapscript(chunkE7HB3GKK_cjs.scriptFromTapLeafScript(input.tapLeafScript));
-    if (chunkE7HB3GKK_cjs.CLTVMultisigTapscript.is(tapscript)) {
+    const tapscript = chunkOWCPXRGP_cjs.decodeTapscript(chunkOWCPXRGP_cjs.scriptFromTapLeafScript(input.tapLeafScript));
+    if (chunkOWCPXRGP_cjs.CLTVMultisigTapscript.is(tapscript)) {
       if (lockTime !== 0n) {
         if (isSeconds(lockTime) !== isSeconds(tapscript.params.absoluteTimelock)) {
           throw new Error("cannot mix seconds and blocks locktime");
@@ -2230,7 +2369,7 @@ function buildVirtualTx(inputs, outputs) {
       }
     }
   }
-  const tx = new chunkRNMLFY2V_cjs.Transaction({
+  const tx = new chunkOWCPXRGP_cjs.Transaction({
     version: 3,
     lockTime: Number(lockTime)
   });
@@ -2240,12 +2379,12 @@ function buildVirtualTx(inputs, outputs) {
       index: input.vout,
       sequence: lockTime ? btcSigner.DEFAULT_SEQUENCE - 1 : void 0,
       witnessUtxo: {
-        script: chunkE7HB3GKK_cjs.VtxoScript.decode(input.tapTree).pkScript,
+        script: chunkOWCPXRGP_cjs.VtxoScript.decode(input.tapTree).pkScript,
         amount: BigInt(input.value)
       },
       tapLeafScript: [input.tapLeafScript]
     });
-    chunkRNMLFY2V_cjs.setArkPsbtField(tx, i, chunkRNMLFY2V_cjs.VtxoTaprootTree, input.tapTree);
+    chunkOWCPXRGP_cjs.setArkPsbtField(tx, i, chunkOWCPXRGP_cjs.VtxoTaprootTree, input.tapTree);
   }
   for (const output of outputs) {
     tx.addOutput(output);
@@ -2254,8 +2393,8 @@ function buildVirtualTx(inputs, outputs) {
   return tx;
 }
 function buildCheckpointTx(vtxo, serverUnrollScript) {
-  const collaborativeClosure = chunkE7HB3GKK_cjs.decodeTapscript(chunkE7HB3GKK_cjs.scriptFromTapLeafScript(vtxo.tapLeafScript));
-  const checkpointVtxoScript = new chunkE7HB3GKK_cjs.VtxoScript([
+  const collaborativeClosure = chunkOWCPXRGP_cjs.decodeTapscript(chunkOWCPXRGP_cjs.scriptFromTapLeafScript(vtxo.tapLeafScript));
+  const checkpointVtxoScript = new chunkOWCPXRGP_cjs.VtxoScript([
     serverUnrollScript.script,
     collaborativeClosure.script
   ]);
@@ -2301,7 +2440,7 @@ function hasBoardingTxExpired(coin, boardingTimelock, chainTipHeight) {
 function formatSighash(type) {
   return `0x${type.toString(16).padStart(2, "0")}`;
 }
-function verifyTapscriptSignatures(tx, inputIndex, requiredSigners, excludePubkeys = [], allowedSighashTypes = [btcSigner.SigHash.DEFAULT]) {
+function verifyTapscriptSignatures(tx, inputIndex, requiredSigners, excludePubkeys = [], allowedSighashTypes = [btcSigner.SigHash.DEFAULT], expectedLeafHash) {
   const input = tx.getInput(inputIndex);
   const prevoutScripts = [];
   const prevoutAmounts = [];
@@ -2316,12 +2455,21 @@ function verifyTapscriptSignatures(tx, inputIndex, requiredSigners, excludePubke
   if (!input.tapScriptSig || input.tapScriptSig.length === 0) {
     throw new Error(`Input ${inputIndex} is missing tapScriptSig`);
   }
+  const expectedLeafHashHex = expectedLeafHash ? base.hex.encode(expectedLeafHash) : void 0;
   for (const [tapScriptSigData, signature] of input.tapScriptSig) {
     const pubKey = tapScriptSigData.pubKey;
     const pubKeyHex = base.hex.encode(pubKey);
     if (excludePubkeys.includes(pubKeyHex)) {
       continue;
     }
+    if (expectedLeafHashHex !== void 0) {
+      const signedLeafHex = base.hex.encode(tapScriptSigData.leafHash);
+      if (signedLeafHex !== expectedLeafHashHex) {
+        throw new Error(
+          `Input ${inputIndex}: signature from ${pubKeyHex} commits to leaf ${signedLeafHex}, expected ${expectedLeafHashHex}`
+        );
+      }
+    }
     const sighashType = signature.length === 65 ? signature[64] : btcSigner.SigHash.DEFAULT;
     const sig = signature.subarray(0, 64);
     if (!allowedSighashTypes.includes(sighashType)) {
@@ -2399,12 +2547,76 @@ function combineTapscriptSigs(signedTx, originalTx) {
 }
 function isValidArkAddress(address) {
   try {
-    chunkE7HB3GKK_cjs.ArkAddress.decode(address);
+    chunkOWCPXRGP_cjs.ArkAddress.decode(address);
     return true;
   } catch (e) {
     return false;
   }
 }
+function matchServerCheckpoints(serverCheckpointTxs, expectedCheckpoints, context) {
+  if (serverCheckpointTxs.length !== expectedCheckpoints.length) {
+    throw new chunkOWCPXRGP_cjs.ServerResponseMismatchError(
+      `${context} returned ${serverCheckpointTxs.length} checkpoints, expected ${expectedCheckpoints.length}`
+    );
+  }
+  const byTxid = new Map(expectedCheckpoints.map((c) => [c.id, c]));
+  return serverCheckpointTxs.map((encoded, index) => {
+    const server = chunkOWCPXRGP_cjs.Transaction.fromPSBT(base.base64.decode(encoded));
+    const local = byTxid.get(server.id);
+    if (!local) {
+      throw new chunkOWCPXRGP_cjs.ServerResponseMismatchError(
+        `${context} checkpoint ${index} txid ${server.id} does not match any submitted checkpoint`
+      );
+    }
+    byTxid.delete(server.id);
+    return { server, local };
+  });
+}
+function assertSubmittedArkTxid(response, signedArkTx, context) {
+  if (response.arkTxid !== signedArkTx.id) {
+    throw new chunkOWCPXRGP_cjs.ServerResponseMismatchError(
+      `${context} returned ark txid ${response.arkTxid}, expected ${signedArkTx.id}`
+    );
+  }
+  if (response.finalArkTx === void 0) return;
+  const finalTxid = chunkOWCPXRGP_cjs.Transaction.fromPSBT(base.base64.decode(response.finalArkTx)).id;
+  if (finalTxid !== signedArkTx.id) {
+    throw new chunkOWCPXRGP_cjs.ServerResponseMismatchError(
+      `${context} returned final ark tx ${finalTxid}, expected ${signedArkTx.id}`
+    );
+  }
+}
+function assertCheckpointsMatchInputs(checkpoints, inputs, unrollCandidates, context) {
+  const byOutpoint = new Map(inputs.map((input) => [`${input.txid}:${input.vout}`, input]));
+  for (const [index, checkpoint] of checkpoints.entries()) {
+    if (checkpoint.inputsLength !== 1) {
+      throw new chunkOWCPXRGP_cjs.ServerResponseMismatchError(
+        `${context}: checkpoint ${index} spends ${checkpoint.inputsLength} inputs, expected 1`
+      );
+    }
+    const spent = checkpoint.getInput(0);
+    if (!spent.txid || spent.index === void 0) {
+      throw new chunkOWCPXRGP_cjs.ServerResponseMismatchError(
+        `${context}: checkpoint ${index} has no input outpoint`
+      );
+    }
+    const outpoint = `${base.hex.encode(spent.txid)}:${spent.index}`;
+    const input = byOutpoint.get(outpoint);
+    if (!input) {
+      throw new chunkOWCPXRGP_cjs.ServerResponseMismatchError(
+        `${context}: checkpoint ${index} spends ${outpoint}, which is not one of the requested virtual outputs`
+      );
+    }
+    const rebuilt = unrollCandidates.some(
+      (unroll) => buildCheckpointTx(input, unroll).tx.id === checkpoint.id
+    );
+    if (!rebuilt) {
+      throw new chunkOWCPXRGP_cjs.ServerResponseMismatchError(
+        `${context}: checkpoint ${index} txid ${checkpoint.id} differs from the checkpoint built locally for ${outpoint}`
+      );
+    }
+  }
+}
 async function submitOffchainTx(provider, offchainTx, signer, hooks) {
   const { arkTx: signedArkTx, userSignedCheckpoints } = await signer.signArkTx(
     offchainTx.arkTx,
@@ -2416,27 +2628,26 @@ async function submitOffchainTx(provider, offchainTx, signer, hooks) {
     );
   }
   await hooks?.beforeSubmit?.();
-  const { arkTxid, signedCheckpointTxs } = await provider.submitTx(
+  const response = await provider.submitTx(
     base.base64.encode(signedArkTx.toPSBT()),
     offchainTx.checkpoints.map((c) => base.base64.encode(c.toPSBT()))
   );
-  if (signedCheckpointTxs.length !== offchainTx.checkpoints.length) {
-    throw new Error(
-      `submitTx returned ${signedCheckpointTxs.length} checkpoints, expected ${offchainTx.checkpoints.length}`
-    );
-  }
+  assertSubmittedArkTxid(response, signedArkTx, "submitTx");
+  const { arkTxid, signedCheckpointTxs } = response;
+  const matched = matchServerCheckpoints(signedCheckpointTxs, offchainTx.checkpoints, "submitTx");
   let finalCheckpoints;
   if (userSignedCheckpoints) {
-    finalCheckpoints = signedCheckpointTxs.map((c, i) => {
-      const serverSigned = chunkRNMLFY2V_cjs.Transaction.fromPSBT(base.base64.decode(c));
-      combineTapscriptSigs(userSignedCheckpoints[i], serverSigned);
-      return base.base64.encode(serverSigned.toPSBT());
+    const userByTxid = new Map(
+      userSignedCheckpoints.map((c, i) => [offchainTx.checkpoints[i].id, c])
+    );
+    finalCheckpoints = matched.map(({ server, local }) => {
+      combineTapscriptSigs(userByTxid.get(local.id), server);
+      return base.base64.encode(server.toPSBT());
     });
   } else {
     finalCheckpoints = await Promise.all(
-      signedCheckpointTxs.map(async (c) => {
-        const tx = chunkRNMLFY2V_cjs.Transaction.fromPSBT(base.base64.decode(c));
-        const signed = await signer.signCheckpoint(tx);
+      matched.map(async ({ server }) => {
+        const signed = await signer.signCheckpoint(server);
         return base.base64.encode(signed.toPSBT());
       })
     );
@@ -2634,7 +2845,7 @@ function extendCoinWithTapscript(boardingTapscript, utxo) {
   };
 }
 function deriveContractTapscripts(contract) {
-  const handler = chunkIEMPH7J6_cjs.contractHandlers.get(contract.type);
+  const handler = chunkV2TOHHPW_cjs.contractHandlers.get(contract.type);
   if (!handler) {
     throw new Error(`No handler for contract type '${contract.type}'`);
   }
@@ -2703,12 +2914,20 @@ function getRandomId() {
   const randomValue = crypto.getRandomValues(new Uint8Array(16));
   return base.hex.encode(randomValue);
 }
+function isValidArkAddress2(address) {
+  try {
+    chunkOWCPXRGP_cjs.ArkAddress.decode(address);
+    return true;
+  } catch (e) {
+    return false;
+  }
+}
 function validateRecipients(recipients, dustAmount) {
   const validatedRecipients = [];
   for (const recipient of recipients) {
     let address;
     try {
-      address = chunkE7HB3GKK_cjs.ArkAddress.decode(recipient.address);
+      address = chunkOWCPXRGP_cjs.ArkAddress.decode(recipient.address);
     } catch (e) {
       throw new Error(`Invalid Arkade address: ${recipient.address}`);
     }
@@ -2736,7 +2955,7 @@ function selectPendingRecoveryOutpoints(contractsWithVtxos, signerSet, nowSecond
       continue;
     }
     for (const v of vtxos) {
-      if (!chunkE7HB3GKK_cjs.hasTerminalSpend(v) && !v.isSwept) out.add(`${v.txid}:${v.vout}`);
+      if (!chunkOWCPXRGP_cjs.hasTerminalSpend(v) && !v.isSwept) out.add(`${v.txid}:${v.vout}`);
     }
   }
   return out;
@@ -2769,10 +2988,10 @@ function byValueDescending(vtxos) {
   return [...vtxos].sort((a, b) => b.value - a.value);
 }
 async function fetchTimeHeight(wallet) {
-  return chunkE7HB3GKK_cjs.resolveTimeHeight(wallet.onchainProvider);
+  return chunkOWCPXRGP_cjs.resolveTimeHeight(wallet.onchainProvider);
 }
 function canMigrateBySend(vtxo, now) {
-  if (!chunkE7HB3GKK_cjs.canSpendOffchain(vtxo, now)) return false;
+  if (!chunkOWCPXRGP_cjs.canSpendOffchain(vtxo, now)) return false;
   return vtxo.expiresAt !== void 0 || vtxo.expiresAtHeight !== void 0;
 }
 function byExpiryAscending(vtxos, now) {
@@ -2780,7 +2999,7 @@ function byExpiryAscending(vtxos, now) {
     if (vtxo.isSwept) return -Infinity;
     if (vtxo.expiresAt !== void 0) return vtxo.expiresAt.getTime();
     if (vtxo.expiresAtHeight !== void 0) {
-      return chunkE7HB3GKK_cjs.isPastExpiry(vtxo, now) ? -Infinity : Infinity;
+      return chunkOWCPXRGP_cjs.isPastExpiry(vtxo, now) ? -Infinity : Infinity;
     }
     return Infinity;
   };
@@ -2817,10 +3036,10 @@ var DEFAULT_SETTLEMENT_CONFIG = {
 };
 function getRecoverableVtxos(vtxos, dustAmount, now) {
   return vtxos.filter((vtxo) => {
-    if (chunkE7HB3GKK_cjs.canRecoverOnchain(vtxo, now)) {
+    if (chunkOWCPXRGP_cjs.canRecoverOnchain(vtxo, now)) {
       return true;
     }
-    if (chunkE7HB3GKK_cjs.canSpendOffchain(vtxo, now) && vtxo.isPreconfirmed && isSubdust(vtxo, dustAmount)) {
+    if (chunkOWCPXRGP_cjs.canSpendOffchain(vtxo, now) && vtxo.isPreconfirmed && isSubdust(vtxo, dustAmount)) {
       return true;
     }
     return false;
@@ -2851,7 +3070,7 @@ function getRecoverableWithSubdust(vtxos, dustAmount, now) {
 }
 function isVtxoExpiringSoon(vtxo, thresholdMs) {
   const realThresholdMs = thresholdMs <= 100 ? DEFAULT_THRESHOLD_MS : thresholdMs;
-  const expiresAt = chunkE7HB3GKK_cjs.normalizeVtxo(vtxo).expiresAt;
+  const expiresAt = chunkOWCPXRGP_cjs.normalizeVtxo(vtxo).expiresAt;
   if (expiresAt === void 0) return false;
   const now = Date.now();
   const batchExpiry = expiresAt.getTime();
@@ -2860,7 +3079,7 @@ function isVtxoExpiringSoon(vtxo, thresholdMs) {
 }
 function getExpiringAndRecoverableVtxos(vtxos, thresholdMs, dustAmount, now) {
   return vtxos.filter(
-    (vtxo) => isVtxoExpiringSoon(vtxo, thresholdMs) || chunkE7HB3GKK_cjs.canRecoverOnchain(vtxo, now) || isSubdust(vtxo, dustAmount)
+    (vtxo) => isVtxoExpiringSoon(vtxo, thresholdMs) || chunkOWCPXRGP_cjs.canRecoverOnchain(vtxo, now) || isSubdust(vtxo, dustAmount)
   );
 }
 function isMigrationCapable(wallet) {
@@ -3342,11 +3561,11 @@ var VtxoManager = class _VtxoManager {
         `Sweep not economical: output ${outputAmount} sats after ${fee} sats fee is below dust (${dustAmount} sats)`
       );
     }
-    const tx = new chunkRNMLFY2V_cjs.Transaction();
+    const tx = new chunkOWCPXRGP_cjs.Transaction();
     for (const utxo of expiredUtxos) {
-      const utxoScript = chunkE7HB3GKK_cjs.VtxoScript.decode(utxo.tapTree);
+      const utxoScript = chunkOWCPXRGP_cjs.VtxoScript.decode(utxo.tapTree);
       const utxoExitLeaf = utxoScript.leaves.find(
-        (leaf) => chunkE7HB3GKK_cjs.CSVMultisigTapscript.isScriptValid(chunkE7HB3GKK_cjs.scriptFromTapLeafScript(leaf)) === true
+        (leaf) => chunkOWCPXRGP_cjs.CSVMultisigTapscript.isScriptValid(chunkOWCPXRGP_cjs.scriptFromTapLeafScript(leaf)) === true
       );
       if (!utxoExitLeaf) {
         throw new Error(
@@ -3361,7 +3580,7 @@ var VtxoManager = class _VtxoManager {
           amount: BigInt(utxo.value)
         },
         tapLeafScript: [utxoExitLeaf],
-        sequence: chunkE7HB3GKK_cjs.getSequence(utxoExitLeaf)
+        sequence: chunkOWCPXRGP_cjs.getSequence(utxoExitLeaf)
       });
     }
     tx.addOutputAddress(boardingAddress, outputAmount, this.getNetwork());
@@ -3595,8 +3814,8 @@ var VtxoManager = class _VtxoManager {
       if (!serverPubKey) continue;
       const cls = classifyAgainstSignerSet(serverPubKey, signerSet, nowSeconds);
       if (cls.status === "CURRENT") continue;
-      const recoverable = vtxos.filter((v) => v.isSwept && !chunkE7HB3GKK_cjs.hasTerminalSpend(v));
-      const spendable = vtxos.filter((v) => !chunkE7HB3GKK_cjs.hasTerminalSpend(v) && !v.isSwept);
+      const recoverable = vtxos.filter((v) => v.isSwept && !chunkOWCPXRGP_cjs.hasTerminalSpend(v));
+      const spendable = vtxos.filter((v) => !chunkOWCPXRGP_cjs.hasTerminalSpend(v) && !v.isSwept);
       const value = spendable.reduce((sum, v) => sum + v.value, 0);
       let recoverableCount = 0;
       let recoverableValue = 0;
@@ -3609,7 +3828,7 @@ var VtxoManager = class _VtxoManager {
         awaitingSweepCount = spendable.length;
         awaitingSweepValue = value;
         for (const v of spendable) {
-          const exp = chunkE7HB3GKK_cjs.toBatchExpiry(v);
+          const exp = chunkOWCPXRGP_cjs.toBatchExpiry(v);
           if (exp !== void 0 && (nextSweepEta === void 0 || exp < nextSweepEta)) {
             nextSweepEta = exp;
           }
@@ -3870,7 +4089,7 @@ var VtxoManager = class _VtxoManager {
   /** Decodes the boarding tapscript exit path to extract the CSV timelock. */
   getBoardingTimelock() {
     const wallet = this.getSweepWallet();
-    const exitScript = chunkE7HB3GKK_cjs.CSVMultisigTapscript.decode(
+    const exitScript = chunkOWCPXRGP_cjs.CSVMultisigTapscript.decode(
       base.hex.decode(wallet.boardingTapscript.exitScript)
     );
     return exitScript.params.timelock;
@@ -4001,8 +4220,8 @@ var VtxoManager = class _VtxoManager {
    * or doesn't carry the metadata.
    */
   extractSpentOutpoint(error) {
-    const ark = chunkRNMLFY2V_cjs.maybeArkError(error);
-    if (!chunkRNMLFY2V_cjs.isArkError(ark, chunkRNMLFY2V_cjs.ArkErrorName.VTXO_ALREADY_SPENT)) return void 0;
+    const ark = chunkOWCPXRGP_cjs.maybeArkError(error);
+    if (!chunkOWCPXRGP_cjs.isArkError(ark, chunkOWCPXRGP_cjs.ArkErrorName.VTXO_ALREADY_SPENT)) return void 0;
     const raw = ark.metadata?.vtxo_outpoint;
     if (typeof raw !== "string") return void 0;
     const [txid, voutStr] = raw.split(":");
@@ -4192,7 +4411,7 @@ var VtxoManager = class _VtxoManager {
       if (filteredVtxos.length >= MAX_VTXOS_PER_SETTLEMENT) {
         break;
       }
-      const inputFee = estimator.evalOffchainInput(chunkE7HB3GKK_cjs.toOffchainInputFeeParams(v));
+      const inputFee = estimator.evalOffchainInput(chunkOWCPXRGP_cjs.toOffchainInputFeeParams(v));
       if (inputFee.satoshis >= v.value) {
         continue;
       }
@@ -4212,7 +4431,7 @@ var VtxoManager = class _VtxoManager {
     const arkAddress = await this.wallet.getAddress();
     const outputFee = estimator.evalOffchainOutput({
       amount: totalAmount,
-      script: base.hex.encode(chunkE7HB3GKK_cjs.ArkAddress.decode(arkAddress).pkScript)
+      script: base.hex.encode(chunkOWCPXRGP_cjs.ArkAddress.decode(arkAddress).pkScript)
     });
     totalAmount -= BigInt(outputFee.satoshis);
     if (totalAmount < dustAmount) return;
@@ -4292,7 +4511,7 @@ var ArkNote = class _ArkNote {
     this.value = value;
     this.HRP = HRP;
     const preimageHash = utils_js.sha256(this.preimage);
-    this.vtxoScript = new chunkE7HB3GKK_cjs.VtxoScript([noteTapscript(preimageHash)]);
+    this.vtxoScript = new chunkOWCPXRGP_cjs.VtxoScript([noteTapscript(preimageHash)]);
     const leaf = this.vtxoScript.leaves[0];
     this.txid = base.hex.encode(new Uint8Array(preimageHash).reverse());
     this.tapTree = this.vtxoScript.encode();
@@ -4459,7 +4678,7 @@ var ArkadeCash = class _ArkadeCash {
     const privateKey = data.slice(1, 33);
     const serverPubKey = data.slice(33, 65);
     const sequence = new DataView(data.buffer, data.byteOffset + 65, 4).getUint32(0, false);
-    const csvTimelock = chunkE7HB3GKK_cjs.sequenceToTimelock(sequence);
+    const csvTimelock = chunkOWCPXRGP_cjs.sequenceToTimelock(sequence);
     return new _ArkadeCash(privateKey, serverPubKey, csvTimelock, decoded.prefix);
   }
   toString() {
@@ -4467,7 +4686,7 @@ var ArkadeCash = class _ArkadeCash {
     data[0] = _ArkadeCash.Version;
     data.set(this._privateKey, 1);
     data.set(this._serverPubKey, 33);
-    const sequence = chunkE7HB3GKK_cjs.timelockToSequence(this.csvTimelock);
+    const sequence = chunkOWCPXRGP_cjs.timelockToSequence(this.csvTimelock);
     new DataView(data.buffer, data.byteOffset + 65, 4).setUint32(0, sequence, false);
     const words = base.bech32m.toWords(data);
     return base.bech32m.encode(this.hrp, words, 1023);
@@ -4476,7 +4695,7 @@ var ArkadeCash = class _ArkadeCash {
     return SingleKey.fromPrivateKey(this._privateKey);
   }
   get vtxoScript() {
-    return new chunkIEMPH7J6_cjs.DefaultVtxo.Script({
+    return new chunkV2TOHHPW_cjs.DefaultVtxo.Script({
       pubKey: this._publicKey,
       serverPubKey: this._serverPubKey,
       csvTimelock: this.csvTimelock
@@ -4737,7 +4956,7 @@ async function captureExitBranch(params) {
     const nonCommitment = ordered.filter((c) => chainTxTypeToChainedExit(c.type) !== 1 /* Commitment */).map((c) => c.txid);
     if (nonCommitment.length > 0) {
       for (const psbt of await resolver.getVirtualTxs(nonCommitment)) {
-        psbtByTxid.set(chunkRNMLFY2V_cjs.Transaction.fromPSBT(base.base64.decode(psbt)).id, psbt);
+        psbtByTxid.set(chunkOWCPXRGP_cjs.Transaction.fromPSBT(base.base64.decode(psbt)).id, psbt);
       }
     }
   }
@@ -4780,10 +4999,10 @@ var IndexerExitDataSource = class {
     while (hasMore) {
       const { chain: page, page: meta } = await this.indexer.getVtxoChain(
         { txid: vtxo.txid, vout: vtxo.vout },
-        { pageIndex, pageSize: chunkE7HB3GKK_cjs.DEFAULT_PAGE_SIZE }
+        { pageIndex, pageSize: chunkOWCPXRGP_cjs.DEFAULT_PAGE_SIZE }
       );
       chain.push(...page);
-      hasMore = meta ? page.length === chunkE7HB3GKK_cjs.DEFAULT_PAGE_SIZE : false;
+      hasMore = meta ? page.length === chunkOWCPXRGP_cjs.DEFAULT_PAGE_SIZE : false;
       pageIndex++;
     }
     return chain;
@@ -4795,12 +5014,12 @@ var IndexerExitDataSource = class {
     while (hasMore) {
       const { txs, page } = await this.indexer.getVirtualTxs(txids, {
         pageIndex,
-        pageSize: chunkE7HB3GKK_cjs.DEFAULT_PAGE_SIZE
+        pageSize: chunkOWCPXRGP_cjs.DEFAULT_PAGE_SIZE
       });
       for (const psbt of txs) {
-        out.set(chunkRNMLFY2V_cjs.Transaction.fromPSBT(base.base64.decode(psbt)).id, psbt);
+        out.set(chunkOWCPXRGP_cjs.Transaction.fromPSBT(base.base64.decode(psbt)).id, psbt);
       }
-      hasMore = page ? txs.length === chunkE7HB3GKK_cjs.DEFAULT_PAGE_SIZE : false;
+      hasMore = page ? txs.length === chunkOWCPXRGP_cjs.DEFAULT_PAGE_SIZE : false;
       pageIndex++;
     }
     return out;
@@ -4821,7 +5040,7 @@ function chainedTxTypeToChainTxType(t) {
   }
 }
 function psbtInputTxids(psbtBase64) {
-  const tx = chunkRNMLFY2V_cjs.Transaction.fromPSBT(base.base64.decode(psbtBase64));
+  const tx = chunkOWCPXRGP_cjs.Transaction.fromPSBT(base.base64.decode(psbtBase64));
   const ids = [];
   for (let i = 0; i < tx.inputsLength; i++) {
     const txid = tx.getInput(i).txid;
@@ -4922,11 +5141,6 @@ function createExitChainResolver(params) {
   return new OrderedExitChainResolver(sources, params.repository);
 }
 
-// src/providers/availability.ts
-function isRetryableProviderError(error) {
-  return error instanceof chunkRNMLFY2V_cjs.ProviderUnavailableError || error instanceof chunkRNMLFY2V_cjs.FetchError || chunkRNMLFY2V_cjs.isFetchTimeoutError(error);
-}
-
 // src/utils/syncCursors.ts
 var SAFETY_LAG_MS = 3e4;
 var OVERLAP_MS = 24 * 60 * 60 * 1e3;
@@ -5174,10 +5388,10 @@ async function resolveArkInfo(arkProvider, walletRepository) {
   try {
     info = await arkProvider.getInfo();
   } catch (err) {
-    if (!isRetryableProviderError(err)) throw err;
+    if (!chunkOWCPXRGP_cjs.isRetryableProviderError(err)) throw err;
     const snapshot = await loadArkInfoSnapshot(walletRepository);
     if (!snapshot) {
-      throw new chunkRNMLFY2V_cjs.ProviderUnavailableError(
+      throw new chunkOWCPXRGP_cjs.ProviderUnavailableError(
         "Arkade server info is unavailable and no cached snapshot exists",
         { cause: err }
       );
@@ -5549,8 +5763,20 @@ function subtractAssets(spent, change) {
   if (map.size === 0) return void 0;
   return Array.from(map, ([assetId, amount]) => ({ assetId, amount }));
 }
-async function buildTransactionHistory(vtxos, allBoardingTxs, commitmentsToIgnore, getTxCreatedAt) {
-  const fromOldestVtxo = vtxos.map(chunkE7HB3GKK_cjs.normalizeVtxo).sort((a, b) => a.createdAt.getTime() - b.createdAt.getTime());
+function collectArkTxidsNeedingCreatedAt(vtxos) {
+  const ownTxids = new Set(vtxos.map((v) => v.txid));
+  const txids = /* @__PURE__ */ new Set();
+  for (const vtxo of vtxos) {
+    if (vtxo.isSpent && vtxo.arkTxId && !ownTxids.has(vtxo.arkTxId)) {
+      txids.add(vtxo.arkTxId);
+    }
+  }
+  return [...txids];
+}
+async function buildTransactionHistory(vtxos, allBoardingTxs, commitmentsToIgnore, resolveTxCreatedAt) {
+  const fromOldestVtxo = vtxos.map(chunkOWCPXRGP_cjs.normalizeVtxo).sort((a, b) => a.createdAt.getTime() - b.createdAt.getTime());
+  const txidsNeedingCreatedAt = resolveTxCreatedAt ? collectArkTxidsNeedingCreatedAt(fromOldestVtxo) : [];
+  const resolvedCreatedAt = resolveTxCreatedAt && txidsNeedingCreatedAt.length > 0 ? await resolveTxCreatedAt(txidsNeedingCreatedAt) : /* @__PURE__ */ new Map();
   const unmatchedSettledBoardingTxs = allBoardingTxs.filter(isSettledBoardingReceive).sort((a, b) => a.createdAt - b.createdAt);
   const sent = [];
   let received = [];
@@ -5610,7 +5836,7 @@ async function buildTransactionHistory(vtxos, allBoardingTxs, commitmentsToIgnor
           txTime = changes[0].createdAt.getTime();
         } else {
           txAmount = spentAmount;
-          txTime = getTxCreatedAt ? await getTxCreatedAt(vtxo.arkTxId) ?? vtxo.createdAt.getTime() + 1 : vtxo.createdAt.getTime() + 1;
+          txTime = resolvedCreatedAt.get(vtxo.arkTxId) ?? vtxo.createdAt.getTime() + 1;
         }
         const assets = subtractAssets(allSpent, changes);
         if (txAmount !== 0 || assets) {
@@ -5712,7 +5938,7 @@ var AssetManager = class extends ReadonlyAssetManager {
     const virtualCoins = await this.wallet.getVtxos({
       withRecoverable: false
     });
-    const controlAssetRef = params.controlAssetId ? chunkRNMLFY2V_cjs.AssetRef.fromId(chunkRNMLFY2V_cjs.AssetId.fromString(params.controlAssetId)) : null;
+    const controlAssetRef = params.controlAssetId ? chunkG7DOBFQN_cjs.AssetRef.fromId(chunkG7DOBFQN_cjs.AssetId.fromString(params.controlAssetId)) : null;
     const coinSelection = selectVirtualCoins(virtualCoins, Number(this.wallet.dustAmount));
     let totalBtcSelected = 0n;
     const assetChanges = /* @__PURE__ */ new Map();
@@ -5725,8 +5951,8 @@ var AssetManager = class extends ReadonlyAssetManager {
       }
     }
     const groups = [];
-    const issuedAssetOutput = chunkRNMLFY2V_cjs.AssetOutput.create(0, params.amount);
-    const issuedAssetGroup = chunkRNMLFY2V_cjs.AssetGroup.create(
+    const issuedAssetOutput = chunkG7DOBFQN_cjs.AssetOutput.create(0, params.amount);
+    const issuedAssetGroup = chunkG7DOBFQN_cjs.AssetGroup.create(
       null,
       controlAssetRef,
       [],
@@ -5741,28 +5967,28 @@ var AssetManager = class extends ReadonlyAssetManager {
         for (const [inputIndex, assets] of assetInputs) {
           for (const asset of assets) {
             if (asset.assetId !== assetId) continue;
-            changeInputs.push(chunkRNMLFY2V_cjs.AssetInput.create(inputIndex, asset.amount));
+            changeInputs.push(chunkG7DOBFQN_cjs.AssetInput.create(inputIndex, asset.amount));
           }
         }
         groups.push(
-          chunkRNMLFY2V_cjs.AssetGroup.create(
-            chunkRNMLFY2V_cjs.AssetId.fromString(assetId),
+          chunkG7DOBFQN_cjs.AssetGroup.create(
+            chunkG7DOBFQN_cjs.AssetId.fromString(assetId),
             null,
             changeInputs,
-            [chunkRNMLFY2V_cjs.AssetOutput.create(0, amount)],
+            [chunkG7DOBFQN_cjs.AssetOutput.create(0, amount)],
             []
           )
         );
       }
     }
     const address = await this.wallet.getAddress();
-    const outputAddress = chunkE7HB3GKK_cjs.ArkAddress.decode(address);
+    const outputAddress = chunkOWCPXRGP_cjs.ArkAddress.decode(address);
     const outputs = [
       {
         script: outputAddress.pkScript,
         amount: BigInt(totalBtcSelected)
       },
-      Extension.create([chunkRNMLFY2V_cjs.Packet.create(groups)]).txOut()
+      Extension.create([chunkG7DOBFQN_cjs.Packet.create(groups)]).txOut()
     ];
     const { arkTxid } = await this.wallet.buildAndSubmitOffchainTx(
       coinSelection.inputs,
@@ -5770,7 +5996,7 @@ var AssetManager = class extends ReadonlyAssetManager {
     );
     return {
       arkTxId: arkTxid,
-      assetId: chunkRNMLFY2V_cjs.AssetId.create(arkTxid, 0).toString()
+      assetId: chunkG7DOBFQN_cjs.AssetId.create(arkTxid, 0).toString()
     };
   }
   /**
@@ -5842,16 +6068,16 @@ var AssetManager = class extends ReadonlyAssetManager {
     for (const [inputIndex, assets] of assetInputs) {
       for (const asset of assets) {
         if (asset.assetId !== params.assetId) continue;
-        reissueInputs.push(chunkRNMLFY2V_cjs.AssetInput.create(inputIndex, asset.amount));
+        reissueInputs.push(chunkG7DOBFQN_cjs.AssetInput.create(inputIndex, asset.amount));
       }
     }
     const totalAssetAmount = assetToReissueAmount + params.amount;
-    const reissueAssetIdObj = chunkRNMLFY2V_cjs.AssetId.fromString(params.assetId);
-    const reissueAssetGroup = chunkRNMLFY2V_cjs.AssetGroup.create(
+    const reissueAssetIdObj = chunkG7DOBFQN_cjs.AssetId.fromString(params.assetId);
+    const reissueAssetGroup = chunkG7DOBFQN_cjs.AssetGroup.create(
       reissueAssetIdObj,
       null,
       reissueInputs,
-      [chunkRNMLFY2V_cjs.AssetOutput.create(0, totalAssetAmount)],
+      [chunkG7DOBFQN_cjs.AssetOutput.create(0, totalAssetAmount)],
       []
     );
     const groups = [reissueAssetGroup];
@@ -5860,27 +6086,27 @@ var AssetManager = class extends ReadonlyAssetManager {
       for (const [inputIndex, assets] of assetInputs) {
         for (const asset of assets) {
           if (asset.assetId !== assetId) continue;
-          changeInputs.push(chunkRNMLFY2V_cjs.AssetInput.create(inputIndex, asset.amount));
+          changeInputs.push(chunkG7DOBFQN_cjs.AssetInput.create(inputIndex, asset.amount));
         }
       }
       groups.push(
-        chunkRNMLFY2V_cjs.AssetGroup.create(
-          chunkRNMLFY2V_cjs.AssetId.fromString(assetId),
+        chunkG7DOBFQN_cjs.AssetGroup.create(
+          chunkG7DOBFQN_cjs.AssetId.fromString(assetId),
           null,
           changeInputs,
-          [chunkRNMLFY2V_cjs.AssetOutput.create(0, amount)],
+          [chunkG7DOBFQN_cjs.AssetOutput.create(0, amount)],
           []
         )
       );
     }
     const address = await this.wallet.getAddress();
-    const outputAddress = chunkE7HB3GKK_cjs.ArkAddress.decode(address);
+    const outputAddress = chunkOWCPXRGP_cjs.ArkAddress.decode(address);
     const outputs = [
       {
         script: outputAddress.pkScript,
         amount: BigInt(totalBtcSelected)
       },
-      Extension.create([chunkRNMLFY2V_cjs.Packet.create(groups)]).txOut()
+      Extension.create([chunkG7DOBFQN_cjs.Packet.create(groups)]).txOut()
     ];
     const { arkTxid } = await this.wallet.buildAndSubmitOffchainTx(selectedCoins, outputs);
     return arkTxid;
@@ -5947,27 +6173,27 @@ var AssetManager = class extends ReadonlyAssetManager {
       for (const [inputIndex, assets] of assetInputs) {
         for (const asset of assets) {
           if (asset.assetId !== assetId) continue;
-          changeInputs.push(chunkRNMLFY2V_cjs.AssetInput.create(inputIndex, asset.amount));
+          changeInputs.push(chunkG7DOBFQN_cjs.AssetInput.create(inputIndex, asset.amount));
         }
       }
       groups.push(
-        chunkRNMLFY2V_cjs.AssetGroup.create(
-          chunkRNMLFY2V_cjs.AssetId.fromString(assetId),
+        chunkG7DOBFQN_cjs.AssetGroup.create(
+          chunkG7DOBFQN_cjs.AssetId.fromString(assetId),
           null,
           changeInputs,
-          amount > 0n ? [chunkRNMLFY2V_cjs.AssetOutput.create(0, amount)] : [],
+          amount > 0n ? [chunkG7DOBFQN_cjs.AssetOutput.create(0, amount)] : [],
           []
         )
       );
     }
     const address = await this.wallet.getAddress();
-    const outputAddress = chunkE7HB3GKK_cjs.ArkAddress.decode(address);
+    const outputAddress = chunkOWCPXRGP_cjs.ArkAddress.decode(address);
     const outputs = [
       {
         script: outputAddress.pkScript,
         amount: BigInt(totalBtcSelected)
       },
-      Extension.create([chunkRNMLFY2V_cjs.Packet.create(groups)]).txOut()
+      Extension.create([chunkG7DOBFQN_cjs.Packet.create(groups)]).txOut()
     ];
     const { arkTxid } = await this.wallet.buildAndSubmitOffchainTx(selectedCoins, outputs);
     return arkTxid;
@@ -5992,7 +6218,7 @@ function castMetadata(metadata) {
     } else {
       throw new Error("Invalid metadata value type");
     }
-    md.push(chunkRNMLFY2V_cjs.Metadata.create(textEncoder.encode(key), valueBytes));
+    md.push(chunkG7DOBFQN_cjs.Metadata.create(textEncoder.encode(key), valueBytes));
   }
   return md;
 }
@@ -6013,10 +6239,10 @@ var DelegateManagerImpl = class {
     if (vtxos.length === 0) {
       return { delegated: [], failed: [] };
     }
-    const destinationScript = chunkE7HB3GKK_cjs.ArkAddress.decode(destination).pkScript;
+    const destinationScript = chunkOWCPXRGP_cjs.ArkAddress.decode(destination).pkScript;
     const arkInfo = await this.arkInfoProvider.getInfo();
     const delegateInfo = await this.delegateProvider.getDelegateInfo();
-    const eligible = vtxos.map(chunkE7HB3GKK_cjs.normalizeVtxo).filter(
+    const eligible = vtxos.map(chunkOWCPXRGP_cjs.normalizeVtxo).filter(
       (v) => isAnnotated(v) && findDelegateTapLeaf(v, delegateInfo.pubkey) !== void 0
     );
     if (eligible.length === 0) {
@@ -6045,11 +6271,11 @@ var DelegateManagerImpl = class {
     const groupByExpiry = /* @__PURE__ */ new Map();
     let recoverableVtxos = [];
     for (const vtxo of eligible) {
-      if (chunkE7HB3GKK_cjs.canRecoverOnchain(vtxo, now)) {
+      if (chunkOWCPXRGP_cjs.canRecoverOnchain(vtxo, now)) {
         recoverableVtxos.push(vtxo);
         continue;
       }
-      const expiry = chunkE7HB3GKK_cjs.toBatchExpiry(vtxo);
+      const expiry = chunkOWCPXRGP_cjs.toBatchExpiry(vtxo);
       if (!expiry) continue;
       const dayKey = getDayTimestamp(expiry);
       groupByExpiry.set(dayKey, [...groupByExpiry.get(dayKey) ?? [], vtxo]);
@@ -6114,7 +6340,7 @@ async function delegate(identity, delegateProvider, arkInfo, delegateInfo, vtxos
   }
   if (!delegateAt) {
     const now = { timestamp: /* @__PURE__ */ new Date() };
-    const expiryTimestamp = vtxos.filter((coin) => !chunkE7HB3GKK_cjs.canRecoverOnchain(coin, now) && chunkE7HB3GKK_cjs.toBatchExpiry(coin)).reduce((min, coin) => Math.min(min, chunkE7HB3GKK_cjs.toBatchExpiry(coin)), Number.MAX_SAFE_INTEGER);
+    const expiryTimestamp = vtxos.filter((coin) => !chunkOWCPXRGP_cjs.canRecoverOnchain(coin, now) && chunkOWCPXRGP_cjs.toBatchExpiry(coin)).reduce((min, coin) => Math.min(min, chunkOWCPXRGP_cjs.toBatchExpiry(coin)), Number.MAX_SAFE_INTEGER);
     if (!expiryTimestamp || expiryTimestamp === Number.MAX_SAFE_INTEGER) {
       delegateAt = new Date(Date.now() + 1 * 60 * 1e3);
     } else {
@@ -6143,7 +6369,7 @@ async function delegate(identity, delegateProvider, arkInfo, delegateInfo, vtxos
   let amount = 0n;
   for (const coin of vtxos) {
     const inputFee = estimator.evalOffchainInput({
-      ...chunkE7HB3GKK_cjs.toOffchainInputFeeParams(coin),
+      ...chunkOWCPXRGP_cjs.toOffchainInputFeeParams(coin),
       type: "vtxo"
     });
     if (inputFee.value >= coin.value) {
@@ -6157,7 +6383,7 @@ async function delegate(identity, delegateProvider, arkInfo, delegateInfo, vtxos
   const delegateFee = BigInt(Number(fee));
   if (delegateFee > 0n) {
     outputs.push({
-      script: chunkE7HB3GKK_cjs.ArkAddress.decode(delegateAddress).pkScript,
+      script: chunkOWCPXRGP_cjs.ArkAddress.decode(delegateAddress).pkScript,
       amount: delegateFee
     });
   }
@@ -6190,10 +6416,10 @@ async function delegate(identity, delegateProvider, arkInfo, delegateInfo, vtxos
     destinationScript
   );
   const forfeitOutputScript = btcSigner.OutScript.encode(
-    btcSigner.Address(chunkE7HB3GKK_cjs.getNetwork(network)).decode(forfeitAddress)
+    btcSigner.Address(chunkOWCPXRGP_cjs.getNetwork(network)).decode(forfeitAddress)
   );
   const forfeits = await Promise.all(
-    vtxos.filter((v) => !chunkE7HB3GKK_cjs.canRecoverOnchain(v, { timestamp: /* @__PURE__ */ new Date() })).map(async (coin) => {
+    vtxos.filter((v) => !chunkOWCPXRGP_cjs.canRecoverOnchain(v, { timestamp: /* @__PURE__ */ new Date() })).map(async (coin) => {
       const forfeit = await makeDelegateForfeitTx(
         coin,
         dust,
@@ -6218,7 +6444,7 @@ async function makeDelegateForfeitTx(input, connectorAmount, delegatePubkey, for
         index: input.vout,
         witnessUtxo: {
           amount: BigInt(input.value),
-          script: chunkE7HB3GKK_cjs.VtxoScript.decode(input.tapTree).pkScript
+          script: chunkOWCPXRGP_cjs.VtxoScript.decode(input.tapTree).pkScript
         },
         sighashType: btcSigner.SigHash.ALL_ANYONECANPAY,
         tapLeafScript: [delegateTapLeaf]
@@ -6276,7 +6502,7 @@ async function makeSignedDelegateIntent(identity, coins, outputs, onchainOutputs
     expire_at: 0,
     cosigners_public_keys: cosignerPubKeys
   };
-  const proof = chunkRNMLFY2V_cjs.Intent.create(message, coins, outputs);
+  const proof = chunkOWCPXRGP_cjs.Intent.create(message, coins, outputs);
   const signedProof = await identity.sign(proof);
   return {
     proof: base.base64.encode(signedProof.toPSBT()),
@@ -6294,10 +6520,10 @@ function getDayTimestamp(timestamp) {
 function findDelegateTapLeaf(vtxo, delegatePubkey) {
   if (!vtxo.tapTree) return void 0;
   const pk = delegatePubkey.length === 66 ? delegatePubkey.slice(2) : delegatePubkey;
-  const vtxoScript = chunkE7HB3GKK_cjs.VtxoScript.decode(vtxo.tapTree);
+  const vtxoScript = chunkOWCPXRGP_cjs.VtxoScript.decode(vtxo.tapTree);
   return vtxoScript.leaves.find((tapLeaf) => {
-    const arkTapscript = chunkE7HB3GKK_cjs.decodeTapscript(chunkE7HB3GKK_cjs.scriptFromTapLeafScript(tapLeaf));
-    if (!chunkE7HB3GKK_cjs.MultisigTapscript.is(arkTapscript)) return false;
+    const arkTapscript = chunkOWCPXRGP_cjs.decodeTapscript(chunkOWCPXRGP_cjs.scriptFromTapLeafScript(tapLeaf));
+    if (!chunkOWCPXRGP_cjs.MultisigTapscript.is(arkTapscript)) return false;
     return arkTapscript.params.pubkeys.map(base.hex.encode).includes(pk);
   });
 }
@@ -6485,7 +6711,7 @@ async function closeDatabase(dbName) {
   return true;
 }
 function scriptFromArkAddress(address) {
-  return base.hex.encode(chunkE7HB3GKK_cjs.ArkAddress.decode(address).pkScript);
+  return base.hex.encode(chunkOWCPXRGP_cjs.ArkAddress.decode(address).pkScript);
 }
 
 // src/repositories/indexedDB/schema.ts
@@ -6982,7 +7208,7 @@ function validateVtxosForScript(vtxos, script, context) {
 }
 async function getVtxosForContract(repo, contract) {
   const vtxos = repo.getVtxosForScript ? await repo.getVtxosForScript(contract.script) : filterVtxosForScript(await repo.getVtxos(contract.address), contract.script);
-  return vtxos.map(chunkE7HB3GKK_cjs.normalizeVtxo);
+  return vtxos.map(chunkOWCPXRGP_cjs.normalizeVtxo);
 }
 async function saveVtxosForContract(repo, contract, vtxos) {
   if (repo.saveVtxosForScript) {
@@ -7186,7 +7412,7 @@ var deserializeTapLeaf = (t) => {
   const s = base.hex.decode(t.s);
   return [cb, s];
 };
-var deserializeVtxo = (o) => chunkE7HB3GKK_cjs.normalizeVtxo({
+var deserializeVtxo = (o) => chunkOWCPXRGP_cjs.normalizeVtxo({
   ...o,
   createdAt: new Date(o.createdAt),
   tapTree: base.hex.decode(o.tapTree),
@@ -8325,7 +8551,7 @@ var ContractWatcher = class {
       this.connectionState = "connected";
       this.reconnectAttempts = 0;
       this.listenLoop().catch((e) => {
-        if (chunkRNMLFY2V_cjs.isEventSourceError(e)) {
+        if (chunkOWCPXRGP_cjs.isEventSourceError(e)) {
           console.debug("ContractWatcher subscription disconnected; reconnecting");
         } else {
           console.error(e);
@@ -8554,14 +8780,14 @@ var ContractWatcher = class {
     const timestamp = Date.now();
     if (update.newVtxos?.length) {
       this.processSubscriptionVtxos(
-        update.newVtxos.map(chunkE7HB3GKK_cjs.normalizeVtxo),
+        update.newVtxos.map(chunkOWCPXRGP_cjs.normalizeVtxo),
         "vtxo_received",
         timestamp
       );
     }
     if (update.spentVtxos?.length) {
       this.processSubscriptionVtxos(
-        update.spentVtxos.map(chunkE7HB3GKK_cjs.normalizeVtxo),
+        update.spentVtxos.map(chunkOWCPXRGP_cjs.normalizeVtxo),
         "vtxo_spent",
         timestamp
       );
@@ -8694,7 +8920,7 @@ async function reconcileIntents(deps) {
   let vtxosByOutpoint = /* @__PURE__ */ new Map();
   if (outpoints.length > 0) {
     try {
-      const { vtxos } = await chunkE7HB3GKK_cjs.getNormalizedVtxos(deps.indexerProvider, { outpoints });
+      const { vtxos } = await chunkOWCPXRGP_cjs.getNormalizedVtxos(deps.indexerProvider, { outpoints });
       vtxosByOutpoint = new Map(vtxos.map((v) => [outpointKey(v), v]));
     } catch (e) {
       console.error("reconcileIntents: failed to fetch input VTXO state", e);
@@ -8814,7 +9040,7 @@ var ContractManager = class _ContractManager {
       await this.reconcileWatched();
       this.markSyncOnline();
     } catch (err) {
-      if (!isRetryableProviderError(err)) throw err;
+      if (!chunkOWCPXRGP_cjs.isRetryableProviderError(err)) throw err;
       this.markSyncDegraded(err);
     }
     this.initialized = true;
@@ -8926,7 +9152,7 @@ var ContractManager = class _ContractManager {
     const from = Math.max(0, watermark - lookAhead.size);
     const to = watermark + lookAhead.size;
     const deps = lookAhead.candidateDeps();
-    const handlers = chunkIEMPH7J6_cjs.contractHandlers.getRegisteredTypes().map((t) => chunkIEMPH7J6_cjs.contractHandlers.get(t)).filter(hasCandidates);
+    const handlers = chunkV2TOHHPW_cjs.contractHandlers.getRegisteredTypes().map((t) => chunkV2TOHHPW_cjs.contractHandlers.get(t)).filter(hasCandidates);
     const band = /* @__PURE__ */ new Map();
     for (let index = from; index <= to; index++) {
       const descriptor = lookAhead.materialize(index);
@@ -8937,7 +9163,7 @@ var ContractManager = class _ContractManager {
             index,
             params: {
               ...candidate,
-              ...chunkIEMPH7J6_cjs.speculativeReceiveMetadata(descriptor)
+              ...chunkV2TOHHPW_cjs.speculativeReceiveMetadata(descriptor)
             }
           });
         }
@@ -8997,7 +9223,7 @@ var ContractManager = class _ContractManager {
       });
       for (const entry of pending) entry.catchUpPending = false;
     } catch (err) {
-      if (!isRetryableProviderError(err)) throw err;
+      if (!chunkOWCPXRGP_cjs.isRetryableProviderError(err)) throw err;
       this.markSyncDegraded(err);
     }
   }
@@ -9041,7 +9267,7 @@ var ContractManager = class _ContractManager {
         await this.fetchContractVxosFromIndexer([contract]);
         this.markSyncOnline();
       } catch (err) {
-        if (!isRetryableProviderError(err)) throw err;
+        if (!chunkOWCPXRGP_cjs.isRetryableProviderError(err)) throw err;
         this.markSyncDegraded(err);
       }
       await this.watcher.addContract(contract);
@@ -9078,7 +9304,7 @@ var ContractManager = class _ContractManager {
     return result;
   }
   async upsertContractRow(params) {
-    const handler = chunkIEMPH7J6_cjs.contractHandlers.get(params.type);
+    const handler = chunkV2TOHHPW_cjs.contractHandlers.get(params.type);
     if (!handler) {
       throw new Error(`No handler registered for contract type '${params.type}'`);
     }
@@ -9178,7 +9404,7 @@ var ContractManager = class _ContractManager {
         `scanContracts: batchSize must be a positive integer (got ${String(opts.batchSize)})`
       );
     }
-    const registered = chunkIEMPH7J6_cjs.contractHandlers.getRegisteredTypes().map((t) => chunkIEMPH7J6_cjs.contractHandlers.get(t)).filter(isDiscoverable);
+    const registered = chunkV2TOHHPW_cjs.contractHandlers.getRegisteredTypes().map((t) => chunkV2TOHHPW_cjs.contractHandlers.get(t)).filter(isDiscoverable);
     const discoverables = [
       ...registered.filter((h) => h.type === "boarding"),
       ...registered.filter((h) => h.type !== "boarding")
@@ -9313,7 +9539,7 @@ var ContractManager = class _ContractManager {
       await this.syncContracts({ contracts, pageSize });
       this.markSyncOnline();
     } catch (err) {
-      if (!isRetryableProviderError(err)) throw err;
+      if (!chunkOWCPXRGP_cjs.isRetryableProviderError(err)) throw err;
       this.markSyncDegraded(err);
     }
     const vtxos = await this.getVtxosForContracts(contracts);
@@ -9334,7 +9560,7 @@ var ContractManager = class _ContractManager {
     }
     const tapscriptCache = /* @__PURE__ */ new Map();
     return vtxos.map(
-      (vtxo) => extendVirtualCoinForContract(chunkE7HB3GKK_cjs.normalizeVtxo(vtxo), byScript, tapscriptCache)
+      (vtxo) => extendVirtualCoinForContract(chunkOWCPXRGP_cjs.normalizeVtxo(vtxo), byScript, tapscriptCache)
     );
   }
   buildContractsDbFilter(filter) {
@@ -9419,7 +9645,7 @@ var ContractManager = class _ContractManager {
     const { contractScript, collaborative = true, walletPubKey, vtxo } = options;
     const [contract] = await this.getContracts({ script: contractScript });
     if (!contract) return [];
-    const handler = chunkIEMPH7J6_cjs.contractHandlers.get(contract.type);
+    const handler = chunkV2TOHHPW_cjs.contractHandlers.get(contract.type);
     if (!handler) return [];
     const script = handler.createScript(contract.params);
     const context = {
@@ -9439,7 +9665,7 @@ var ContractManager = class _ContractManager {
     const { contractScript, collaborative = true, walletPubKey } = options;
     const [contract] = await this.getContracts({ script: contractScript });
     if (!contract) return [];
-    const handler = chunkIEMPH7J6_cjs.contractHandlers.get(contract.type);
+    const handler = chunkV2TOHHPW_cjs.contractHandlers.get(contract.type);
     if (!handler) return [];
     const script = handler.createScript(contract.params);
     const context = {
@@ -9495,7 +9721,7 @@ var ContractManager = class _ContractManager {
   }
   async refreshOutpoints(outpoints) {
     if (outpoints.length === 0) return;
-    const { vtxos } = await chunkE7HB3GKK_cjs.getNormalizedVtxos(this.config.indexerProvider, {
+    const { vtxos } = await chunkOWCPXRGP_cjs.getNormalizedVtxos(this.config.indexerProvider, {
       outpoints
     });
     if (vtxos.length === 0) return;
@@ -9573,7 +9799,7 @@ var ContractManager = class _ContractManager {
           break;
       }
     } catch (err) {
-      if (!isRetryableProviderError(err)) throw err;
+      if (!chunkOWCPXRGP_cjs.isRetryableProviderError(err)) throw err;
       this.markSyncDegraded(err);
     }
     this.emitEvent(event);
@@ -9622,7 +9848,7 @@ var ContractManager = class _ContractManager {
    */
   async reconcilePendingFrontier(contracts) {
     const scriptToContract = new Map(contracts.map((c) => [c.script, c]));
-    const vtxos = await chunkE7HB3GKK_cjs.getAllNormalizedVtxos(
+    const vtxos = await chunkOWCPXRGP_cjs.getAllNormalizedVtxos(
       this.config.indexerProvider,
       contracts.map((c) => c.script),
       { pendingOnly: true }
@@ -9703,7 +9929,7 @@ var ContractManager = class _ContractManager {
     }
     return result;
   }
-  async fetchContractVtxosBulk(contracts, pageSize = chunkE7HB3GKK_cjs.DEFAULT_PAGE_SIZE, syncWindow) {
+  async fetchContractVtxosBulk(contracts, pageSize = chunkOWCPXRGP_cjs.DEFAULT_PAGE_SIZE, syncWindow) {
     if (contracts.length === 0) {
       return { vtxosByScript: /* @__PURE__ */ new Map(), promoted: /* @__PURE__ */ new Map() };
     }
@@ -9719,7 +9945,7 @@ var ContractManager = class _ContractManager {
         before: syncWindow.before
       }
     } : {};
-    const vtxos = await chunkE7HB3GKK_cjs.getAllNormalizedVtxos(
+    const vtxos = await chunkOWCPXRGP_cjs.getAllNormalizedVtxos(
       this.config.indexerProvider,
       contracts.map((c) => c.script),
       { ...windowOpts, pageSize }
@@ -9886,7 +10112,7 @@ var HDDescriptorProvider = class _HDDescriptorProvider {
    */
   materializeDescriptorAt(index) {
     const descriptor = this.identity.descriptor;
-    const network = chunkIEMPH7J6_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
+    const network = chunkV2TOHHPW_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
     const expansion = descriptorsScure.expand({ descriptor, network, index });
     const keyInfo = expansion.expansionMap?.["@0"];
     if (!keyInfo?.keyExpression) {
@@ -10030,7 +10256,7 @@ var WalletReceiveRotator = class _WalletReceiveRotator {
     const provider = await resolveDescriptorProvider(config, setup.walletRepository);
     if (!provider) return void 0;
     const allowSilentFallback = (config.walletMode ?? "auto") === "auto";
-    const expectedContractType = setup.offchainTapscript instanceof chunkIEMPH7J6_cjs.DelegateVtxo.Script ? "delegate" : "default";
+    const expectedContractType = setup.offchainTapscript instanceof chunkV2TOHHPW_cjs.DelegateVtxo.Script ? "delegate" : "default";
     const factoryOpts = {
       walletRepository: setup.walletRepository,
       contractRepository: setup.contractRepository,
@@ -10229,7 +10455,7 @@ var WalletReceiveRotator = class _WalletReceiveRotator {
 };
 function deriveLeafPubkey(descriptor) {
   try {
-    return chunkIEMPH7J6_cjs.deriveDescriptorLeafPubKey(descriptor);
+    return chunkV2TOHHPW_cjs.deriveDescriptorLeafPubKey(descriptor);
   } catch (e) {
     throw new NonRangeableDescriptorError(
       "Cannot derive leaf pubkey: descriptor is not a materialized, parsable tr(...) shape.",
@@ -10241,7 +10467,7 @@ function buildReceiveContract(current, descriptor, hrp, tagSource) {
   const pubKey = deriveLeafPubkey(descriptor);
   const tapscript = rebuildTapscript(current, pubKey);
   const serverPubKey = tapscript.options.serverPubKey;
-  const csvTimelock = chunkE7HB3GKK_cjs.timelockToSequence(tapscript.options.csvTimelock).toString();
+  const csvTimelock = chunkOWCPXRGP_cjs.timelockToSequence(tapscript.options.csvTimelock).toString();
   const base$1 = {
     script: base.hex.encode(tapscript.pkScript),
     address: tapscript.address(hrp, serverPubKey).encode(),
@@ -10252,11 +10478,11 @@ function buildReceiveContract(current, descriptor, hrp, tagSource) {
     // index-0 key. Without it, spends produce unsigned PSBTs that the
     // server rejects with `INVALID_PSBT_INPUT (5): missing tapscript spend sig`.
     metadata: {
-      ...{ source: chunkIEMPH7J6_cjs.WALLET_RECEIVE_SOURCE },
+      ...{ source: chunkV2TOHHPW_cjs.WALLET_RECEIVE_SOURCE },
       signingDescriptor: descriptor
     }
   };
-  const params = tapscript instanceof chunkIEMPH7J6_cjs.DelegateVtxo.Script ? {
+  const params = tapscript instanceof chunkV2TOHHPW_cjs.DelegateVtxo.Script ? {
     ...base$1,
     type: "delegate",
     params: {
@@ -10277,10 +10503,10 @@ function buildReceiveContract(current, descriptor, hrp, tagSource) {
   return { tapscript, params };
 }
 function rebuildTapscript(current, pubKey) {
-  if (current instanceof chunkIEMPH7J6_cjs.DelegateVtxo.Script) {
-    return new chunkIEMPH7J6_cjs.DelegateVtxo.Script({ ...current.options, pubKey });
+  if (current instanceof chunkV2TOHHPW_cjs.DelegateVtxo.Script) {
+    return new chunkV2TOHHPW_cjs.DelegateVtxo.Script({ ...current.options, pubKey });
   }
-  return new chunkIEMPH7J6_cjs.DefaultVtxo.Script({ ...current.options, pubKey });
+  return new chunkV2TOHHPW_cjs.DefaultVtxo.Script({ ...current.options, pubKey });
 }
 async function pickActiveReceive(contractRepository, serverPubKey, expectedType) {
   const candidates = await contractRepository.getContracts({
@@ -10289,7 +10515,7 @@ async function pickActiveReceive(contractRepository, serverPubKey, expectedType)
   });
   const serverPubKeyHex = base.hex.encode(serverPubKey);
   const matching = candidates.filter(
-    (c) => c.params.serverPubKey === serverPubKeyHex && c.metadata?.source === chunkIEMPH7J6_cjs.WALLET_RECEIVE_SOURCE
+    (c) => c.params.serverPubKey === serverPubKeyHex && c.metadata?.source === chunkV2TOHHPW_cjs.WALLET_RECEIVE_SOURCE
   ).sort((a, b) => {
     if (b.createdAt !== a.createdAt) return b.createdAt - a.createdAt;
     return signingDescriptorIndex(b.metadata?.signingDescriptor) - signingDescriptorIndex(a.metadata?.signingDescriptor);
@@ -10465,12 +10691,12 @@ var InputSignerRouter = class {
 };
 
 // src/wallet/wallet.ts
-var getArkadeServerUrl = ({ arkServerUrl }) => arkServerUrl || chunkE7HB3GKK_cjs.DEFAULT_ARKADE_SERVER_URL;
+var getArkadeServerUrl = ({ arkServerUrl }) => arkServerUrl || chunkOWCPXRGP_cjs.DEFAULT_ARKADE_SERVER_URL;
 function intentProofJobs(coins) {
   if (coins.length === 0) return [];
   const coinJobs = coins.map((coin, i) => ({
     index: i + 1,
-    lookupScript: chunkE7HB3GKK_cjs.VtxoScript.decode(coin.tapTree).pkScript
+    lookupScript: chunkOWCPXRGP_cjs.VtxoScript.decode(coin.tapTree).pkScript
   }));
   return [{ index: 0, lookupScript: coinJobs[0].lookupScript }, ...coinJobs];
 }
@@ -10495,7 +10721,7 @@ function dedupeTimelocks(timelocks) {
   const seen = /* @__PURE__ */ new Set();
   const deduped = [];
   for (const timelock of timelocks) {
-    const sequence = chunkE7HB3GKK_cjs.timelockToSequence(timelock).toString();
+    const sequence = chunkOWCPXRGP_cjs.timelockToSequence(timelock).toString();
     if (seen.has(sequence)) continue;
     seen.add(sequence);
     deduped.push(timelock);
@@ -10512,7 +10738,7 @@ async function resolveBoardingBootTapscript(contractRepository, serverPubKey, ba
     state: "active"
   });
   const newest = candidates.filter(
-    (c) => c.params.serverPubKey === serverPubKeyHex && c.metadata?.source === chunkIEMPH7J6_cjs.WALLET_RECEIVE_SOURCE
+    (c) => c.params.serverPubKey === serverPubKeyHex && c.metadata?.source === chunkV2TOHHPW_cjs.WALLET_RECEIVE_SOURCE
   ).sort((a, b) => {
     if (b.createdAt !== a.createdAt) return b.createdAt - a.createdAt;
     return signingDescriptorIndex(b.metadata?.signingDescriptor) - signingDescriptorIndex(a.metadata?.signingDescriptor);
@@ -10520,7 +10746,7 @@ async function resolveBoardingBootTapscript(contractRepository, serverPubKey, ba
   if (!newest?.params.pubKey) return baseline;
   try {
     const pubKey = base.hex.decode(newest.params.pubKey);
-    return new chunkIEMPH7J6_cjs.DefaultVtxo.Script({ ...baseline.options, pubKey });
+    return new chunkV2TOHHPW_cjs.DefaultVtxo.Script({ ...baseline.options, pubKey });
   } catch (e) {
     console.warn("Skipping malformed boarding contract at boot", newest.script, e);
     return baseline;
@@ -10840,7 +11066,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
    */
   static async setupWalletConfig(config, pubKey) {
     const arkadeServerUrl = getArkadeServerUrl(config);
-    const arkProvider = config.arkProvider || new chunkRNMLFY2V_cjs.RestArkProvider(arkadeServerUrl);
+    const arkProvider = config.arkProvider || new chunkOWCPXRGP_cjs.RestArkProvider(arkadeServerUrl);
     let indexerProvider = config.indexerProvider;
     if (!indexerProvider) {
       let indexerUrl = config.indexerUrl;
@@ -10857,7 +11083,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
           indexerUrl = arkadeServerUrl;
         }
       }
-      indexerProvider = new chunkRNMLFY2V_cjs.RestIndexerProvider(indexerUrl);
+      indexerProvider = new chunkG7DOBFQN_cjs.RestIndexerProvider(indexerUrl);
     }
     const walletRepository = config.storage?.walletRepository ?? new IndexedDBWalletRepository();
     const contractRepository = config.storage?.contractRepository ?? new IndexedDBContractRepository();
@@ -10866,7 +11092,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
       source: serverInfoSource,
       lastOnlineAt: serverInfoLastOnlineAt
     } = await resolveArkInfo(arkProvider, walletRepository);
-    const network = chunkE7HB3GKK_cjs.getNetwork(info.network);
+    const network = chunkOWCPXRGP_cjs.getNetwork(info.network);
     if ("descriptor" in config.identity) {
       const descriptor = config.identity.descriptor;
       const identityIsMainnet = !descriptor.includes("tpub");
@@ -10913,11 +11139,11 @@ var ReadonlyWallet = class _ReadonlyWallet {
       serverPubKey,
       csvTimelock: exitTimelock
     };
-    const offchainTapscript = !delegatePubKey ? new chunkIEMPH7J6_cjs.DefaultVtxo.Script(offchainOptions) : new chunkIEMPH7J6_cjs.DelegateVtxo.Script({ ...offchainOptions, delegatePubKey });
-    const boardingTapscript = chunkIEMPH7J6_cjs.BoardingContractHandler.createScript({
+    const offchainTapscript = !delegatePubKey ? new chunkV2TOHHPW_cjs.DefaultVtxo.Script(offchainOptions) : new chunkV2TOHHPW_cjs.DelegateVtxo.Script({ ...offchainOptions, delegatePubKey });
+    const boardingTapscript = chunkV2TOHHPW_cjs.BoardingContractHandler.createScript({
       pubKey: base.hex.encode(pubKey),
       serverPubKey: base.hex.encode(serverPubKey),
-      csvTimelock: chunkE7HB3GKK_cjs.timelockToSequence(boardingTimelock).toString()
+      csvTimelock: chunkOWCPXRGP_cjs.timelockToSequence(boardingTimelock).toString()
     });
     return {
       arkProvider,
@@ -11023,19 +11249,19 @@ var ReadonlyWallet = class _ReadonlyWallet {
     let pendingRecovery = 0;
     const now = { timestamp: /* @__PURE__ */ new Date() };
     const settled = vtxos.filter(
-      (coin) => chunkE7HB3GKK_cjs.canSpendOffchain(coin, now) && !coin.isPreconfirmed && !isPendingRecovery(coin)
+      (coin) => chunkOWCPXRGP_cjs.canSpendOffchain(coin, now) && !coin.isPreconfirmed && !isPendingRecovery(coin)
     ).reduce((sum, coin) => sum + coin.value, 0);
     const preconfirmed = vtxos.filter(
-      (coin) => chunkE7HB3GKK_cjs.canSpendOffchain(coin, now) && coin.isPreconfirmed && !isPendingRecovery(coin)
+      (coin) => chunkOWCPXRGP_cjs.canSpendOffchain(coin, now) && coin.isPreconfirmed && !isPendingRecovery(coin)
     ).reduce((sum, coin) => sum + coin.value, 0);
-    const available = unlockedVtxos.filter((coin) => chunkE7HB3GKK_cjs.canSpendOffchain(coin, now) && !isPendingRecovery(coin)).reduce((sum, coin) => sum + coin.value, 0);
-    recoverable = vtxos.filter((coin) => chunkE7HB3GKK_cjs.canRecoverOnchain(coin, now) && !isPendingRecovery(coin)).reduce((sum, coin) => sum + coin.value, 0);
+    const available = unlockedVtxos.filter((coin) => chunkOWCPXRGP_cjs.canSpendOffchain(coin, now) && !isPendingRecovery(coin)).reduce((sum, coin) => sum + coin.value, 0);
+    recoverable = vtxos.filter((coin) => chunkOWCPXRGP_cjs.canRecoverOnchain(coin, now) && !isPendingRecovery(coin)).reduce((sum, coin) => sum + coin.value, 0);
     pendingRecovery = vtxos.filter(isPendingRecovery).reduce((sum, coin) => sum + coin.value, 0);
     const totalBoarding = confirmed + unconfirmed;
     const totalOffchain = settled + preconfirmed + recoverable + pendingRecovery;
     const assetBalances = /* @__PURE__ */ new Map();
     for (const vtxo of vtxos) {
-      if (chunkE7HB3GKK_cjs.hasTerminalSpend(vtxo)) continue;
+      if (chunkOWCPXRGP_cjs.hasTerminalSpend(vtxo)) continue;
       if (vtxo.assets) {
         for (const a of vtxo.assets) {
           const current = assetBalances.get(a.assetId) ?? 0n;
@@ -11076,8 +11302,8 @@ var ReadonlyWallet = class _ReadonlyWallet {
       if (this._pendingSpendOutpoints.has(`${vtxo.txid}:${vtxo.vout}`)) {
         return false;
       }
-      if (!chunkE7HB3GKK_cjs.hasTerminalSpend(vtxo)) {
-        if (!f.withRecoverable && chunkE7HB3GKK_cjs.canRecoverOnchain(vtxo, now)) {
+      if (!chunkOWCPXRGP_cjs.hasTerminalSpend(vtxo)) {
+        if (!f.withRecoverable && chunkOWCPXRGP_cjs.canRecoverOnchain(vtxo, now)) {
           return false;
         }
         return true;
@@ -11110,11 +11336,13 @@ var ReadonlyWallet = class _ReadonlyWallet {
     const response = await contractManager.getContractsWithVtxos();
     const allVtxos = response.flatMap((_) => _.vtxos);
     const { boardingTxs, commitmentsToIgnore } = await this.getBoardingTxs();
-    const getTxCreatedAt = (txid) => chunkE7HB3GKK_cjs.getNormalizedVtxos(this.indexerProvider, { outpoints: [{ txid, vout: 0 }] }).then((res) => res.vtxos[0]?.createdAt.getTime()).catch((err) => {
-      if (isRetryableProviderError(err)) return void 0;
-      throw err;
-    });
-    return buildTransactionHistory(allVtxos, boardingTxs, commitmentsToIgnore, getTxCreatedAt);
+    const resolveTxCreatedAt = (txids) => chunkOWCPXRGP_cjs.fetchVtxoCreatedAtByTxid(this.indexerProvider, txids);
+    return buildTransactionHistory(
+      allVtxos,
+      boardingTxs,
+      commitmentsToIgnore,
+      resolveTxCreatedAt
+    );
   }
   /**
    * Wallet history grouped by registered activity resolvers. With no resolver match,
@@ -11202,7 +11430,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
               },
               isUnrolled: true,
               ...boardingFacts,
-              virtualStatus: chunkE7HB3GKK_cjs.toVirtualStatus(boardingFacts),
+              virtualStatus: chunkOWCPXRGP_cjs.toVirtualStatus(boardingFacts),
               spentBy: "",
               createdAt: tx.status.confirmed ? new Date(tx.status.block_time * 1e3) : /* @__PURE__ */ new Date(0),
               script: scriptHex
@@ -11258,9 +11486,9 @@ var ReadonlyWallet = class _ReadonlyWallet {
   async getBoardingTapscripts(allowedSigners) {
     const byScript = /* @__PURE__ */ new Map();
     const add = (s) => byScript.set(base.hex.encode(s.pkScript), s);
-    const boardingCsv = this.boardingTapscript.options.csvTimelock ?? chunkIEMPH7J6_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
+    const boardingCsv = this.boardingTapscript.options.csvTimelock ?? chunkV2TOHHPW_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
     add(
-      new chunkIEMPH7J6_cjs.DefaultVtxo.Script({
+      new chunkV2TOHHPW_cjs.DefaultVtxo.Script({
         pubKey: await this.identity.xOnlyPublicKey(),
         serverPubKey: this.boardingTapscript.options.serverPubKey,
         csvTimelock: boardingCsv
@@ -11275,7 +11503,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
     for (const c of boardingContracts) {
       if (!allowed.has(toXOnlySignerHex(c.params.serverPubKey))) continue;
       try {
-        add(chunkIEMPH7J6_cjs.BoardingContractHandler.createScript(c.params));
+        add(chunkV2TOHHPW_cjs.BoardingContractHandler.createScript(c.params));
       } catch (e) {
         console.warn("Skipping malformed boarding contract", c.script, e);
       }
@@ -11313,7 +11541,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
         // Per-row CSV delay decoded from THIS tapscript's exit leaf —
         // not the wallet's current boarding timelock, which a signer
         // rotation may have changed.
-        csvTimelock: chunkE7HB3GKK_cjs.CSVMultisigTapscript.decode(base.hex.decode(tapscript.exitScript)).params.timelock,
+        csvTimelock: chunkOWCPXRGP_cjs.CSVMultisigTapscript.decode(base.hex.decode(tapscript.exitScript)).params.timelock,
         coins: utxos
       });
     }
@@ -11446,7 +11674,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
   /** Fetch Arkade transaction ids that are still pending final settlement. */
   async fetchPendingTxs() {
     const scripts = await this.getWalletScripts();
-    const vtxos = await chunkE7HB3GKK_cjs.getAllNormalizedVtxos(this.indexerProvider, scripts);
+    const vtxos = await chunkOWCPXRGP_cjs.getAllNormalizedVtxos(this.indexerProvider, scripts);
     return vtxos.filter(
       (vtxo) => (vtxo.isSpent || vtxo.isPreconfirmed && !vtxo.isSwept) && vtxo.arkTxId !== void 0
     ).map((_) => _.arkTxId);
@@ -11477,7 +11705,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
     });
     for (const contract of contracts) {
       if (map.has(contract.script)) continue;
-      const handler = chunkIEMPH7J6_cjs.contractHandlers.get(contract.type);
+      const handler = chunkV2TOHHPW_cjs.contractHandlers.get(contract.type);
       if (handler) {
         const script = handler.createScript(contract.params);
         map.set(contract.script, script);
@@ -11580,7 +11808,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
       lookAhead: this.lookAheadConfig()
     });
     const baselinePubkey = await this.identity.xOnlyPublicKey();
-    const delegatePubKey = this.offchainTapscript instanceof chunkIEMPH7J6_cjs.DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0;
+    const delegatePubKey = this.offchainTapscript instanceof chunkV2TOHHPW_cjs.DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0;
     const baselineSigners = [
       this.offchainTapscript.options.serverPubKey,
       ...[...this._deprecatedSigners.keys()].map((h) => base.hex.decode(h))
@@ -11588,8 +11816,8 @@ var ReadonlyWallet = class _ReadonlyWallet {
     const seenBaselineScripts = /* @__PURE__ */ new Set();
     for (const serverPubKey of baselineSigners) {
       for (const csvTimelock of this.walletContractTimelocks) {
-        const csvTimelockStr = chunkE7HB3GKK_cjs.timelockToSequence(csvTimelock).toString();
-        const defaultScript = new chunkIEMPH7J6_cjs.DefaultVtxo.Script({
+        const csvTimelockStr = chunkOWCPXRGP_cjs.timelockToSequence(csvTimelock).toString();
+        const defaultScript = new chunkV2TOHHPW_cjs.DefaultVtxo.Script({
           pubKey: baselinePubkey,
           serverPubKey,
           csvTimelock
@@ -11610,7 +11838,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
           });
         }
         if (delegatePubKey) {
-          const delegateScript = new chunkIEMPH7J6_cjs.DelegateVtxo.Script({
+          const delegateScript = new chunkV2TOHHPW_cjs.DelegateVtxo.Script({
             pubKey: baselinePubkey,
             serverPubKey,
             delegatePubKey,
@@ -11634,9 +11862,9 @@ var ReadonlyWallet = class _ReadonlyWallet {
         }
       }
     }
-    const boardingCsvTimelock = this.boardingTapscript.options.csvTimelock ?? chunkIEMPH7J6_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
+    const boardingCsvTimelock = this.boardingTapscript.options.csvTimelock ?? chunkV2TOHHPW_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
     for (const serverPubKey of baselineSigners) {
-      const baselineBoarding = new chunkIEMPH7J6_cjs.DefaultVtxo.Script({
+      const baselineBoarding = new chunkV2TOHHPW_cjs.DefaultVtxo.Script({
         pubKey: baselinePubkey,
         serverPubKey,
         csvTimelock: boardingCsvTimelock
@@ -11649,7 +11877,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
         params: {
           pubKey: base.hex.encode(baselineBoarding.options.pubKey),
           serverPubKey: base.hex.encode(serverPubKey),
-          csvTimelock: chunkE7HB3GKK_cjs.timelockToSequence(boardingCsvTimelock).toString()
+          csvTimelock: chunkOWCPXRGP_cjs.timelockToSequence(boardingCsvTimelock).toString()
         },
         script: boardingScriptHex,
         address: baselineBoarding.address(this.network.hrp, serverPubKey).encode(),
@@ -11823,7 +12051,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       serverPubKey: this.offchainTapscript.options.serverPubKey,
       deprecatedSignerPubKeys: [...this._deprecatedSigners.keys()].map((h) => base.hex.decode(h)),
       csvTimelocks: this.walletContractTimelocks,
-      delegatePubKey: this.offchainTapscript instanceof chunkIEMPH7J6_cjs.DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0
+      delegatePubKey: this.offchainTapscript instanceof chunkV2TOHHPW_cjs.DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0
     };
   }
   _signerRouter;
@@ -11915,25 +12143,25 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       return this.getBoardingAddress();
     }
     const descriptor = await provider.getNextSigningDescriptor();
-    const pubKey = chunkIEMPH7J6_cjs.deriveDescriptorLeafPubKey(descriptor);
-    const newBoarding = new chunkIEMPH7J6_cjs.DefaultVtxo.Script({
+    const pubKey = chunkV2TOHHPW_cjs.deriveDescriptorLeafPubKey(descriptor);
+    const newBoarding = new chunkV2TOHHPW_cjs.DefaultVtxo.Script({
       ...this._boardingTapscript.options,
       pubKey
     });
-    const csvTimelock = newBoarding.options.csvTimelock ?? chunkIEMPH7J6_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
+    const csvTimelock = newBoarding.options.csvTimelock ?? chunkV2TOHHPW_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
     const manager = await this.getContractManager();
     await manager.createContract({
       type: "boarding",
       params: {
         pubKey: base.hex.encode(pubKey),
         serverPubKey: base.hex.encode(newBoarding.options.serverPubKey),
-        csvTimelock: chunkE7HB3GKK_cjs.timelockToSequence(csvTimelock).toString()
+        csvTimelock: chunkOWCPXRGP_cjs.timelockToSequence(csvTimelock).toString()
       },
       script: base.hex.encode(newBoarding.pkScript),
       address: newBoarding.address(this.network.hrp, this.arkServerPublicKey).encode(),
       state: "active",
       metadata: {
-        source: chunkIEMPH7J6_cjs.WALLET_RECEIVE_SOURCE,
+        source: chunkV2TOHHPW_cjs.WALLET_RECEIVE_SOURCE,
         signingDescriptor: descriptor
       }
     });
@@ -11945,6 +12173,51 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     }
     return newBoarding.onchainAddress(this.network);
   }
+  /**
+   * @see HDWalletCapable.getCurrentSigningDescriptor
+   */
+  async getCurrentSigningDescriptor() {
+    const provider = this._descriptorProvider;
+    if (!(provider instanceof HDDescriptorProvider)) return void 0;
+    return provider.getCurrentSigningDescriptor();
+  }
+  /**
+   * @see HDWalletCapable.getUsedSigningDescriptors
+   *
+   * Union of the watermark band and the descriptors persisted on contracts:
+   * the band alone would miss rows a restore scan wrote, and the contracts
+   * alone would miss indices allocated for something the wallet never
+   * persisted (a swap, an externally issued invoice).
+   */
+  async getUsedSigningDescriptors() {
+    const provider = this._descriptorProvider;
+    const descriptors = /* @__PURE__ */ new Set();
+    if (provider instanceof HDDescriptorProvider) {
+      const lastIndexUsed = await provider.getLastIndexUsed();
+      for (let i = 0; i <= (lastIndexUsed ?? -1); i++) {
+        descriptors.add(provider.materializeDescriptorAt(i));
+      }
+    }
+    for (const contract of await this.contractRepository.getContracts()) {
+      const descriptor = contract.metadata?.signingDescriptor;
+      if (typeof descriptor === "string" && descriptor.length > 0) {
+        descriptors.add(descriptor);
+      }
+    }
+    return [...descriptors].sort(
+      (a, b) => signingDescriptorIndex(a) - signingDescriptorIndex(b)
+    );
+  }
+  /**
+   * @see HDWalletCapable.signerForDescriptor
+   */
+  async signerForDescriptor(descriptor) {
+    const provider = this._descriptorProvider;
+    if (!(provider instanceof HDDescriptorProvider) || !provider.isOurs(descriptor)) {
+      return this.identity;
+    }
+    return new DescriptorIdentity({ descriptor, signer: provider, base: this.identity });
+  }
   /**
    * Mid-session server-signer rotation (plan §4). When arkd rotates its
    * active signer mid-session — the case the long-lived service worker and
@@ -11977,7 +12250,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const xonly = toXOnlyPubKey(newServerPubKey);
     let newServerUnrollScript;
     try {
-      newServerUnrollScript = chunkE7HB3GKK_cjs.CSVMultisigTapscript.decode(base.hex.decode(checkpointTapscript));
+      newServerUnrollScript = chunkOWCPXRGP_cjs.CSVMultisigTapscript.decode(base.hex.decode(checkpointTapscript));
     } catch (e) {
       throw new Error("Invalid checkpointTapscript from server");
     }
@@ -12005,21 +12278,21 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const [currentBoardingRow] = await manager.getContracts({
       script: currentBoardingScript
     });
-    const newOffchain = this.offchainTapscript instanceof chunkIEMPH7J6_cjs.DelegateVtxo.Script ? new chunkIEMPH7J6_cjs.DelegateVtxo.Script({
+    const newOffchain = this.offchainTapscript instanceof chunkV2TOHHPW_cjs.DelegateVtxo.Script ? new chunkV2TOHHPW_cjs.DelegateVtxo.Script({
       ...this.offchainTapscript.options,
       serverPubKey: xonly
-    }) : new chunkIEMPH7J6_cjs.DefaultVtxo.Script({
+    }) : new chunkV2TOHHPW_cjs.DefaultVtxo.Script({
       ...this.offchainTapscript.options,
       serverPubKey: xonly
     });
-    const newBoarding = new chunkIEMPH7J6_cjs.DefaultVtxo.Script({
+    const newBoarding = new chunkV2TOHHPW_cjs.DefaultVtxo.Script({
       ...this._boardingTapscript.options,
       serverPubKey: xonly
     });
-    const offchainCsv = chunkE7HB3GKK_cjs.timelockToSequence(newOffchain.options.csvTimelock).toString();
+    const offchainCsv = chunkOWCPXRGP_cjs.timelockToSequence(newOffchain.options.csvTimelock).toString();
     const newOffchainScript = base.hex.encode(newOffchain.pkScript);
     const newOffchainAddress = newOffchain.address(this.network.hrp, xonly).encode();
-    if (newOffchain instanceof chunkIEMPH7J6_cjs.DelegateVtxo.Script) {
+    if (newOffchain instanceof chunkV2TOHHPW_cjs.DelegateVtxo.Script) {
       await manager.createContract({
         type: "delegate",
         params: {
@@ -12047,13 +12320,13 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         metadata: currentOffchainRow?.metadata
       });
     }
-    const boardingCsv = newBoarding.options.csvTimelock ?? chunkIEMPH7J6_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
+    const boardingCsv = newBoarding.options.csvTimelock ?? chunkV2TOHHPW_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
     await manager.createContract({
       type: "boarding",
       params: {
         pubKey: base.hex.encode(newBoarding.options.pubKey),
         serverPubKey: base.hex.encode(xonly),
-        csvTimelock: chunkE7HB3GKK_cjs.timelockToSequence(boardingCsv).toString()
+        csvTimelock: chunkOWCPXRGP_cjs.timelockToSequence(boardingCsv).toString()
       },
       script: base.hex.encode(newBoarding.pkScript),
       address: newBoarding.address(this.network.hrp, xonly).encode(),
@@ -12086,14 +12359,14 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
   _restoreInFlight;
   _addPendingSpends(inputs) {
     for (const input of inputs) {
-      if (chunkE7HB3GKK_cjs.isVirtualCoin(input)) {
+      if (chunkOWCPXRGP_cjs.isVirtualCoin(input)) {
         this._pendingSpendOutpoints.add(`${input.txid}:${input.vout}`);
       }
     }
   }
   _removePendingSpends(inputs) {
     for (const input of inputs) {
-      if (chunkE7HB3GKK_cjs.isVirtualCoin(input)) {
+      if (chunkOWCPXRGP_cjs.isVirtualCoin(input)) {
         this._pendingSpendOutpoints.delete(`${input.txid}:${input.vout}`);
       }
     }
@@ -12153,7 +12426,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const hd = provider instanceof HDDescriptorProvider;
     const staticDescriptor = hd ? void 0 : `tr(${base.hex.encode(await this.identity.xOnlyPublicKey())})`;
     const materialize = (index) => hd ? provider.materializeDescriptorAt(index) : staticDescriptor;
-    const delegatePubKey = this.offchainTapscript instanceof chunkIEMPH7J6_cjs.DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0;
+    const delegatePubKey = this.offchainTapscript instanceof chunkV2TOHHPW_cjs.DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0;
     const arkInfo = await this.arkProvider.getInfo();
     const currentSignerPubKey = toXOnlyPubKey(base.hex.decode(arkInfo.signerPubkey));
     const deprecatedSignerPubKeys = arkInfo.deprecatedSigners.map(
@@ -12172,7 +12445,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       csvTimelocks: this.walletContractTimelocks,
       // Boarding-exit CSV so the boarding handler can build its
       // candidate script (distinct from the unilateral-exit matrix).
-      boardingTimelock: this.boardingTapscript.options.csvTimelock ?? chunkIEMPH7J6_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK,
+      boardingTimelock: this.boardingTapscript.options.csvTimelock ?? chunkV2TOHHPW_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK,
       delegatePubKey
     };
     const result = await manager.scanContracts({
@@ -12289,7 +12562,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     let serverUnrollScript;
     try {
       const raw = base.hex.decode(setup.info.checkpointTapscript);
-      serverUnrollScript = chunkE7HB3GKK_cjs.CSVMultisigTapscript.decode(raw);
+      serverUnrollScript = chunkOWCPXRGP_cjs.CSVMultisigTapscript.decode(raw);
     } catch (e) {
       throw new Error("Invalid checkpointTapscript from server");
     }
@@ -12427,7 +12700,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
           inputs: params.selectedVtxos,
           changeAmount: BigInt(changeAmount)
         };
-        const outputAddress = chunkE7HB3GKK_cjs.ArkAddress.decode(params.address);
+        const outputAddress = chunkOWCPXRGP_cjs.ArkAddress.decode(params.address);
         const outputScript = BigInt(params.amount) < this.dustAmount ? outputAddress.subdustPkScript : outputAddress.pkScript;
         const outputs = [
           {
@@ -12480,13 +12753,13 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       }
     }
     const offchainAddress = await this.getAddress();
-    const offchainPkScript = chunkE7HB3GKK_cjs.ArkAddress.decode(offchainAddress).pkScript;
+    const offchainPkScript = chunkOWCPXRGP_cjs.ArkAddress.decode(offchainAddress).pkScript;
     const offchainOutputScript = base.hex.encode(offchainPkScript);
     if (!params) {
       const { fees, vtxoMaxAmount } = await this.arkProvider.getInfo();
       const estimator = new Estimator(fees.intentFee);
       let amount = 0;
-      const exitScript = chunkE7HB3GKK_cjs.CSVMultisigTapscript.decode(
+      const exitScript = chunkOWCPXRGP_cjs.CSVMultisigTapscript.decode(
         base.hex.decode(this.boardingTapscript.exitScript)
       );
       const boardingTimelock = exitScript.params.timelock;
@@ -12515,7 +12788,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         if (filteredVtxos.length >= MAX_VTXOS_PER_SETTLEMENT) {
           break;
         }
-        const inputFee = estimator.evalOffchainInput(chunkE7HB3GKK_cjs.toOffchainInputFeeParams(vtxo));
+        const inputFee = estimator.evalOffchainInput(chunkOWCPXRGP_cjs.toOffchainInputFeeParams(vtxo));
         if (inputFee.satoshis >= vtxo.value) {
           continue;
         }
@@ -12560,7 +12833,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     for (const [index, output] of params.outputs.entries()) {
       let script;
       try {
-        const addr = chunkE7HB3GKK_cjs.ArkAddress.decode(output.address);
+        const addr = chunkOWCPXRGP_cjs.ArkAddress.decode(output.address);
         script = addr.pkScript;
         hasOffchainOutputs = true;
       } catch {
@@ -12746,7 +13019,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
   async maybeRotateBoardingAfterBoard(inputs) {
     if (!this._descriptorProvider) return;
     const consumedBoarding = inputs.some(
-      (input) => typeof input !== "string" && !chunkE7HB3GKK_cjs.isVirtualCoin(input)
+      (input) => typeof input !== "string" && !chunkOWCPXRGP_cjs.isVirtualCoin(input)
     );
     if (!consumedBoarding) return;
     try {
@@ -12755,14 +13028,22 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       console.warn("Failed to rotate boarding address after board", e);
     }
   }
-  async handleSettlementFinalizationEvent(event, inputs, forfeitOutputScript, connectorsGraph) {
+  async handleSettlementFinalizationEvent(event, inputs, forfeitOutputScript, expectedRecipients, connectorsGraph, validatedCommitmentTxid) {
     const signedForfeits = [];
     let settlementPsbt = btcSigner.Transaction.fromPSBT(base.base64.decode(event.commitmentTx));
+    assertFinalCommitmentMatchesValidated(
+      settlementPsbt,
+      validatedCommitmentTxid,
+      "settlement finalization"
+    );
+    if (!validatedCommitmentTxid && expectedRecipients.length > 0) {
+      validateBatchRecipientsWithoutTree(settlementPsbt, expectedRecipients, this.network);
+    }
     let hasBoardingUtxos = false;
     let connectorIndex = 0;
     const connectorsLeaves = connectorsGraph?.leaves() || [];
     for (const input of inputs) {
-      if (!chunkE7HB3GKK_cjs.isVirtualCoin(input)) {
+      if (!chunkOWCPXRGP_cjs.isVirtualCoin(input)) {
         for (let i = 0; i < settlementPsbt.inputsLength; i++) {
           const settlementInput = settlementPsbt.getInput(i);
           if (!settlementInput.txid || settlementInput.index === void 0) {
@@ -12793,7 +13074,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         }
         continue;
       }
-      if (chunkE7HB3GKK_cjs.canRecoverOnchain(input, { timestamp: /* @__PURE__ */ new Date() }) || isSubdust({ value: input.value }, this.dustAmount)) {
+      if (chunkOWCPXRGP_cjs.canRecoverOnchain(input, { timestamp: /* @__PURE__ */ new Date() }) || isSubdust({ value: input.value }, this.dustAmount)) {
         continue;
       }
       if (connectorsLeaves.length === 0) {
@@ -12821,7 +13102,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
             index: input.vout,
             witnessUtxo: {
               amount: BigInt(input.value),
-              script: chunkE7HB3GKK_cjs.VtxoScript.decode(input.tapTree).pkScript
+              script: chunkOWCPXRGP_cjs.VtxoScript.decode(input.tapTree).pkScript
             },
             sighashType: btcSigner.SigHash.DEFAULT,
             tapLeafScript: [input.forfeitTapLeafScript]
@@ -12840,7 +13121,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       forfeitTx = await this._signerRouter.sign(forfeitTx, [
         {
           index: 0,
-          lookupScript: chunkE7HB3GKK_cjs.VtxoScript.decode(input.tapTree).pkScript
+          lookupScript: chunkOWCPXRGP_cjs.VtxoScript.decode(input.tapTree).pkScript
         }
       ]);
       signedForfeits.push(base.base64.encode(forfeitTx.toPSBT()));
@@ -12880,6 +13161,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
    */
   createBatchHandler(intentId, inputs, expectedRecipients, session) {
     let sweepTapTreeRoot;
+    let validatedCommitmentTxid;
     return {
       onBatchStarted: async (event) => {
         const utf8IntentId = new TextEncoder().encode(intentId);
@@ -12898,7 +13180,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         if (skip) {
           return { skip };
         }
-        const sweepTapscript = chunkE7HB3GKK_cjs.CSVMultisigTapscript.encode({
+        const sweepTapscript = chunkOWCPXRGP_cjs.CSVMultisigTapscript.encode({
           timelock: {
             value: event.batchExpiry,
             type: event.batchExpiry >= 512n ? "seconds" : "blocks"
@@ -12937,6 +13219,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         if (!sharedOutput?.amount) {
           throw new Error("Shared output not found");
         }
+        validatedCommitmentTxid = commitmentTx.id;
         await session.init(vtxoTree, sweepTapTreeRoot, sharedOutput.amount);
         const pubkey = base.hex.encode(await session.getPublicKey());
         const nonces = await session.getNonces();
@@ -12965,7 +13248,9 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
           event,
           inputs,
           this.forfeitOutputScript,
-          connectorTree
+          expectedRecipients,
+          connectorTree,
+          validatedCommitmentTxid
         );
       }
     };
@@ -13004,9 +13289,9 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         ...existing ?? {},
         intentTxId,
         registerProof: intent.proof,
-        registerProofMessage: chunkRNMLFY2V_cjs.Intent.encodeMessage(intent.message),
+        registerProofMessage: chunkOWCPXRGP_cjs.Intent.encodeMessage(intent.message),
         deleteProof: deleteIntent.proof,
-        deleteProofMessage: chunkRNMLFY2V_cjs.Intent.encodeMessage(deleteIntent.message),
+        deleteProofMessage: chunkOWCPXRGP_cjs.Intent.encodeMessage(deleteIntent.message),
         intentVtxos: inputs.map((i) => ({
           txid: i.txid,
           vout: i.vout
@@ -13038,7 +13323,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     try {
       return await this.arkProvider.registerIntent(intent);
     } catch (error) {
-      if (error instanceof chunkRNMLFY2V_cjs.ArkError && error.code === 0 && error.message.includes("duplicated input")) {
+      if (error instanceof chunkOWCPXRGP_cjs.ArkError && error.code === 0 && error.message.includes("duplicated input")) {
         const deleteIntent = await this.makeDeleteIntentSignature(inputs);
         await this.arkProvider.deleteIntent(deleteIntent);
         return this.arkProvider.registerIntent(intent);
@@ -13054,7 +13339,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       expire_at: 0,
       cosigners_public_keys: cosignerPubKeys
     };
-    const proof = chunkRNMLFY2V_cjs.Intent.create(message, coins, outputs);
+    const proof = chunkOWCPXRGP_cjs.Intent.create(message, coins, outputs);
     const signedProof = await this._signerRouter.sign(proof, intentProofJobs(coins));
     return {
       proof: base.base64.encode(signedProof.toPSBT()),
@@ -13066,7 +13351,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       type: "delete",
       expire_at: 0
     };
-    const proof = chunkRNMLFY2V_cjs.Intent.create(message, coins, []);
+    const proof = chunkOWCPXRGP_cjs.Intent.create(message, coins, []);
     const signedProof = await this._signerRouter.sign(proof, intentProofJobs(coins));
     return {
       proof: base.base64.encode(signedProof.toPSBT()),
@@ -13078,7 +13363,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       type: "get-pending-tx",
       expire_at: 0
     };
-    const proof = chunkRNMLFY2V_cjs.Intent.create(message, coins, []);
+    const proof = chunkOWCPXRGP_cjs.Intent.create(message, coins, []);
     const signedProof = await this._signerRouter.sign(proof, intentProofJobs(coins));
     return {
       proof: base.base64.encode(signedProof.toPSBT()),
@@ -13099,7 +13384,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     if (!vtxos || vtxos.length === 0) {
       const scriptMap = await this.getScriptMap();
       const allExtended = [];
-      const fetchedVtxos = await chunkE7HB3GKK_cjs.getAllNormalizedVtxos(this.indexerProvider, [
+      const fetchedVtxos = await chunkOWCPXRGP_cjs.getAllNormalizedVtxos(this.indexerProvider, [
         ...scriptMap.keys()
       ]);
       for (const vtxo of fetchedVtxos) {
@@ -13124,6 +13409,11 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     for (let i = 0; i < vtxos.length; i += MAX_INPUTS_PER_INTENT) {
       batches.push(vtxos.slice(i, i + MAX_INPUTS_PER_INTENT));
     }
+    const unrollCandidates = this.checkpointUnrollCandidates(await this.arkProvider.getInfo());
+    const checkpointInputs = vtxos.map((vtxo) => ({
+      ...vtxo,
+      tapLeafScript: vtxo.forfeitTapLeafScript
+    }));
     const seen = /* @__PURE__ */ new Set();
     const results = await Promise.all(
       batches.map(async (batch) => {
@@ -13139,6 +13429,12 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
             const checkpointTxs = pendingTx.signedCheckpointTxs.map(
               (c) => btcSigner.Transaction.fromPSBT(base.base64.decode(c))
             );
+            assertCheckpointsMatchInputs(
+              checkpointTxs,
+              checkpointInputs,
+              unrollCandidates,
+              `pending tx ${pendingTx.arkTxid}`
+            );
             const checkpointJobs = checkpointTxs.map(
               (tx) => this.inputSigningJobsFromWitnessUtxos(tx)
             );
@@ -13194,6 +13490,32 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     }
     return { finalized, pending };
   }
+  /**
+   * The server unroll scripts a pending checkpoint may legitimately have been
+   * built under: this wallet's configured one, the server's current one, and
+   * one per deprecated signer (same closure, deprecated key). A tx submitted
+   * before a signer rotation was built under the old key, so rebuilding
+   * against the current key alone would leave it pending forever.
+   */
+  checkpointUnrollCandidates(info) {
+    const current = chunkOWCPXRGP_cjs.CSVMultisigTapscript.decode(base.hex.decode(info.checkpointTapscript));
+    const candidates = [this._serverUnrollScript, current];
+    for (const deprecated of signerSetFromInfo(info).deprecated.keys()) {
+      candidates.push(
+        chunkOWCPXRGP_cjs.CSVMultisigTapscript.encode({
+          ...current.params,
+          pubkeys: [base.hex.decode(deprecated)]
+        })
+      );
+    }
+    const seen = /* @__PURE__ */ new Set();
+    return candidates.filter((candidate) => {
+      const script = base.hex.encode(candidate.script);
+      if (seen.has(script)) return false;
+      seen.add(script);
+      return true;
+    });
+  }
   async hasPendingTxFlag() {
     const state = await this.walletRepository.getWalletState();
     return state?.settings?.hasPendingTx === true;
@@ -13271,7 +13593,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     if (vtxos.length === 0) {
       throw new Error("No VTXOs found for this arkadeCash");
     }
-    const myPkScript = chunkE7HB3GKK_cjs.ArkAddress.decode(await this.getAddress()).pkScript;
+    const myPkScript = chunkOWCPXRGP_cjs.ArkAddress.decode(await this.getAddress()).pkScript;
     let { spendable, unclaimed } = this.classifyCashVtxos(vtxos);
     let swept = 0;
     const drainable = vtxos.filter((vtxo) => !isSubdust(vtxo, this.dustAmount));
@@ -13298,7 +13620,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     }
     if (spendable.length > 0) {
       const info = await this.arkProvider.getInfo();
-      const serverUnrollScript = chunkE7HB3GKK_cjs.CSVMultisigTapscript.decode(
+      const serverUnrollScript = chunkOWCPXRGP_cjs.CSVMultisigTapscript.decode(
         base.hex.decode(info.checkpointTapscript)
       );
       for (const vtxo of spendable) {
@@ -13344,7 +13666,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const spendable = [];
     const unclaimed = [];
     for (const vtxo of vtxos) {
-      if (chunkE7HB3GKK_cjs.hasTerminalSpend(vtxo)) {
+      if (chunkOWCPXRGP_cjs.hasTerminalSpend(vtxo)) {
         unclaimed.push(cashReport(vtxo, "already-spent"));
       } else if (isSubdust(vtxo, this.dustAmount)) {
         unclaimed.push(cashReport(vtxo, "subdust"));
@@ -13364,7 +13686,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const all = [];
     const seen = /* @__PURE__ */ new Set();
     for (let pageIndex = 0; ; pageIndex++) {
-      const { vtxos, page } = await chunkE7HB3GKK_cjs.getNormalizedVtxos(this.indexerProvider, {
+      const { vtxos, page } = await chunkOWCPXRGP_cjs.getNormalizedVtxos(this.indexerProvider, {
         scripts,
         pageIndex,
         pageSize
@@ -13411,7 +13733,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     for (let i = 0; i < inputs.length; i += MAX_INPUTS_PER_INTENT) {
       const batch = inputs.slice(i, i + MAX_INPUTS_PER_INTENT);
       const message = { type: "get-pending-tx", expire_at: 0 };
-      const proof = chunkRNMLFY2V_cjs.Intent.create(message, batch, []);
+      const proof = chunkOWCPXRGP_cjs.Intent.create(message, batch, []);
       const signedProof = await identity.sign(
         proof,
         Array.from({ length: batch.length + 1 }, (_, j) => j)
@@ -13426,12 +13748,23 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         pendingTxs.push(pendingTx);
       }
     }
+    if (pendingTxs.length === 0) return result;
     const myPkScriptHex = base.hex.encode(myPkScript);
+    const unrollCandidates = this.checkpointUnrollCandidates(await this.arkProvider.getInfo());
     for (const pendingTx of pendingTxs) {
       try {
         const checkpointTxs = pendingTx.signedCheckpointTxs.map(
           (checkpoint) => btcSigner.Transaction.fromPSBT(base.base64.decode(checkpoint))
         );
+        assertCheckpointsMatchInputs(
+          checkpointTxs,
+          inputs.map((input) => ({
+            ...input,
+            tapLeafScript: input.forfeitTapLeafScript
+          })),
+          unrollCandidates,
+          `pending arkadeCash tx ${pendingTx.arkTxid}`
+        );
         const finalCheckpoints = await Promise.all(
           checkpointTxs.map(
             async (checkpoint) => base.base64.encode((await identity.sign(checkpoint)).toPSBT())
@@ -13706,10 +14039,10 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       const serverPubKey = this.arkServerPublicKey;
       const serverUnrollScript = this.serverUnrollScript;
       const arkAddress = offchainTapscript.address(this.network.hrp, serverPubKey);
-      const normalizedInputs = inputs.map(chunkE7HB3GKK_cjs.normalizeVtxo);
-      const at = now ?? await chunkE7HB3GKK_cjs.resolveTimeHeight(this.onchainProvider);
+      const normalizedInputs = inputs.map(chunkOWCPXRGP_cjs.normalizeVtxo);
+      const at = now ?? await chunkOWCPXRGP_cjs.resolveTimeHeight(this.onchainProvider);
       for (const input of normalizedInputs) {
-        if (!chunkE7HB3GKK_cjs.canSpendOffchain(input, at)) {
+        if (!chunkOWCPXRGP_cjs.canSpendOffchain(input, at)) {
           throw new Error(
             `sendSelectedVtxosToSelf: input ${input.txid}:${input.vout} is not cooperatively spendable`
           );
@@ -13774,7 +14107,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     );
     const arkTxJobs = inputs.map((input, index) => ({
       index,
-      lookupScript: chunkE7HB3GKK_cjs.VtxoScript.decode(input.tapTree).pkScript
+      lookupScript: chunkOWCPXRGP_cjs.VtxoScript.decode(input.tapTree).pkScript
     }));
     const identity = this.identity;
     const signer = {
@@ -13841,32 +14174,33 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
           `updateDbAfterOffchainTx: inputs length (${inputs.length}) differs from signedCheckpointTxs length (${signedCheckpointTxs.length})`
         );
       }
-      const safeLength = Math.min(inputs.length, signedCheckpointTxs.length);
+      const checkpointIdByOutpoint = /* @__PURE__ */ new Map();
+      for (const encoded of signedCheckpointTxs) {
+        const checkpoint = btcSigner.Transaction.fromPSBT(base.base64.decode(encoded));
+        for (let i = 0; i < checkpoint.inputsLength; i++) {
+          const input = checkpoint.getInput(i);
+          if (!input.txid) continue;
+          checkpointIdByOutpoint.set(
+            `${base.hex.encode(input.txid)}:${input.index}`,
+            checkpoint.id
+          );
+        }
+      }
       const cm = await this.getContractManager();
       const annotatedInputs = await cm.annotateVtxos(inputs);
-      for (const [inputIndex, vtxo] of annotatedInputs.entries()) {
+      for (const vtxo of annotatedInputs) {
         const spentFacts = { ...vtxo, isSpent: true };
-        if (inputIndex < safeLength && signedCheckpointTxs[inputIndex]) {
-          const checkpoint = btcSigner.Transaction.fromPSBT(
-            base.base64.decode(signedCheckpointTxs[inputIndex])
-          );
-          spentVtxos.push({
-            ...spentFacts,
-            virtualStatus: chunkE7HB3GKK_cjs.toVirtualStatus(spentFacts),
-            spentBy: checkpoint.id,
-            arkTxId: arkTxid
-          });
-        } else {
-          spentVtxos.push({
-            ...spentFacts,
-            virtualStatus: chunkE7HB3GKK_cjs.toVirtualStatus(spentFacts),
-            arkTxId: arkTxid
-          });
-        }
+        const spentBy = checkpointIdByOutpoint.get(`${vtxo.txid}:${vtxo.vout}`);
+        spentVtxos.push({
+          ...spentFacts,
+          virtualStatus: chunkOWCPXRGP_cjs.toVirtualStatus(spentFacts),
+          ...spentBy ? { spentBy } : {},
+          arkTxId: arkTxid
+        });
         for (const id of vtxo.commitmentTxIds) {
           commitmentTxIds.add(id);
         }
-        const vtxoExpiry = chunkE7HB3GKK_cjs.toBatchExpiry(vtxo);
+        const vtxoExpiry = chunkOWCPXRGP_cjs.toBatchExpiry(vtxo);
         if (vtxoExpiry) {
           batchExpiry = Math.min(batchExpiry, vtxoExpiry);
         }
@@ -13879,7 +14213,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
           isSwept: false,
           isPreconfirmed: true,
           commitmentTxIds: Array.from(commitmentTxIds),
-          ...chunkE7HB3GKK_cjs.parseLegacyExpiry(batchExpiry)
+          ...chunkOWCPXRGP_cjs.parseLegacyExpiry(batchExpiry)
         };
         changeVtxo = {
           txid: arkTxid,
@@ -13891,7 +14225,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
           tapTree: offchainTapscript.encode(),
           value: Number(changeAmount),
           ...changeFacts,
-          virtualStatus: chunkE7HB3GKK_cjs.toVirtualStatus(changeFacts),
+          virtualStatus: chunkOWCPXRGP_cjs.toVirtualStatus(changeFacts),
           spentBy: "",
           status: {
             confirmed: false
@@ -13960,12 +14294,12 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       const spentVtxos = [];
       const inputArkTxIds = /* @__PURE__ */ new Set();
       const boardingRemovalsByAddress = /* @__PURE__ */ new Map();
-      const vtxoInputs = inputs.filter(chunkE7HB3GKK_cjs.isVirtualCoin);
+      const vtxoInputs = inputs.filter(chunkOWCPXRGP_cjs.isVirtualCoin);
       const cm = await this.getContractManager();
       const annotatedVtxos = await cm.annotateVtxos(vtxoInputs);
       const annotatedByKey = new Map(annotatedVtxos.map((v) => [`${v.txid}:${v.vout}`, v]));
       for (const input of inputs) {
-        if (chunkE7HB3GKK_cjs.isVirtualCoin(input)) {
+        if (chunkOWCPXRGP_cjs.isVirtualCoin(input)) {
           const outpoint = `${input.txid}:${input.vout}`;
           const vtxo = annotatedByKey.get(outpoint);
           if (!vtxo) {
@@ -13977,13 +14311,13 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
           const settledFacts = { ...vtxo, isSpent: true };
           spentVtxos.push({
             ...settledFacts,
-            virtualStatus: chunkE7HB3GKK_cjs.toVirtualStatus(settledFacts),
+            virtualStatus: chunkOWCPXRGP_cjs.toVirtualStatus(settledFacts),
             settledBy: commitmentTxid
           });
         } else {
           let sourceAddress;
           try {
-            sourceAddress = chunkE7HB3GKK_cjs.VtxoScript.decode(input.tapTree).onchainAddress(
+            sourceAddress = chunkOWCPXRGP_cjs.VtxoScript.decode(input.tapTree).onchainAddress(
               this.network
             );
           } catch {
@@ -14041,9 +14375,9 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
   }
 };
 function selectVirtualCoins(coins, targetAmount) {
-  const sortedCoins = coins.map(chunkE7HB3GKK_cjs.normalizeVtxo).sort((a, b) => {
-    const expiryA = chunkE7HB3GKK_cjs.toBatchExpiry(a) || Number.MAX_SAFE_INTEGER;
-    const expiryB = chunkE7HB3GKK_cjs.toBatchExpiry(b) || Number.MAX_SAFE_INTEGER;
+  const sortedCoins = coins.map(chunkOWCPXRGP_cjs.normalizeVtxo).sort((a, b) => {
+    const expiryA = chunkOWCPXRGP_cjs.toBatchExpiry(a) || Number.MAX_SAFE_INTEGER;
+    const expiryB = chunkOWCPXRGP_cjs.toBatchExpiry(b) || Number.MAX_SAFE_INTEGER;
     if (expiryA !== expiryB) {
       return expiryA - expiryB;
     }
@@ -14300,7 +14634,7 @@ var MessageBus = class {
     this.initialized = true;
   }
   async buildServices(config) {
-    const arkProvider = new chunkRNMLFY2V_cjs.RestArkProvider(config.arkServer.url);
+    const arkProvider = new chunkOWCPXRGP_cjs.RestArkProvider(config.arkServer.url);
     const storage = {
       walletRepository: this.walletRepository,
       contractRepository: this.contractRepository
@@ -14629,6 +14963,25 @@ var DustChangeError = class extends Error {
     this.dustAmount = dustAmount;
   }
 };
+var offboardNetworkNames = [
+  "bitcoin",
+  "regtest",
+  "testnet",
+  "signet",
+  "mutinynet"
+];
+function offboardDestinationScript(destinationAddress) {
+  for (const networkName of offboardNetworkNames) {
+    try {
+      const network = chunkOWCPXRGP_cjs.networks[networkName];
+      const addr = btcSigner.Address(network).decode(destinationAddress);
+      return btcSigner.OutScript.encode(addr);
+    } catch {
+      continue;
+    }
+  }
+  throw new Error(`Failed to decode destination address: ${destinationAddress}`);
+}
 var Ramps = class {
   /**
    * Create convenience wrappers for onboarding and offboarding flows.
@@ -14684,7 +15037,7 @@ var Ramps = class {
     }
     amount = amount ?? totalAmount;
     const offchainAddress = await this.wallet.getAddress();
-    const offchainAddr = chunkE7HB3GKK_cjs.ArkAddress.decode(offchainAddress);
+    const offchainAddr = chunkOWCPXRGP_cjs.ArkAddress.decode(offchainAddress);
     const offchainScript = base.hex.encode(offchainAddr.pkScript);
     const outputFee = estimator.evalOffchainOutput({
       amount,
@@ -14744,7 +15097,7 @@ var Ramps = class {
     const filteredVtxos = [];
     let totalAmount = 0n;
     for (const vtxo of vtxos) {
-      const inputFee = estimator.evalOffchainInput(chunkE7HB3GKK_cjs.toOffchainInputFeeParams(vtxo));
+      const inputFee = estimator.evalOffchainInput(chunkOWCPXRGP_cjs.toOffchainInputFeeParams(vtxo));
       if (inputFee.satoshis >= vtxo.value) {
         continue;
       }
@@ -14766,27 +15119,7 @@ var Ramps = class {
       throw new DustChangeError(change, dustAmount);
     }
     amount = amount ?? totalAmount;
-    const networkNames = [
-      "bitcoin",
-      "regtest",
-      "testnet",
-      "signet",
-      "mutinynet"
-    ];
-    let destinationScript;
-    for (const networkName of networkNames) {
-      try {
-        const network = chunkE7HB3GKK_cjs.networks[networkName];
-        const addr = btcSigner.Address(network).decode(destinationAddress);
-        destinationScript = btcSigner.OutScript.encode(addr);
-        break;
-      } catch {
-        continue;
-      }
-    }
-    if (!destinationScript) {
-      throw new Error(`Failed to decode destination address: ${destinationAddress}`);
-    }
+    const destinationScript = offboardDestinationScript(destinationAddress);
     const outputFee = estimator.evalOnchainOutput({
       amount,
       script: base.hex.encode(destinationScript)
@@ -15461,7 +15794,7 @@ var WalletMessageHandler = class {
   // Wallet methods
   async handleInitWallet({ payload }) {
     const { arkServerUrl } = payload;
-    this.indexerProvider = new chunkRNMLFY2V_cjs.RestIndexerProvider(arkServerUrl);
+    this.indexerProvider = new chunkG7DOBFQN_cjs.RestIndexerProvider(arkServerUrl);
     await this.onWalletInitialized();
   }
   async handleGetBalance() {
@@ -15485,12 +15818,12 @@ var WalletMessageHandler = class {
     let recoverable = 0;
     let pendingRecovery = 0;
     for (const vtxo of allVtxos) {
-      if (chunkE7HB3GKK_cjs.hasTerminalSpend(vtxo)) continue;
+      if (chunkOWCPXRGP_cjs.hasTerminalSpend(vtxo)) continue;
       if (pendingOutpoints.has(`${vtxo.txid}:${vtxo.vout}`)) {
         pendingRecovery += vtxo.value;
-      } else if (chunkE7HB3GKK_cjs.canRecoverOnchain(vtxo, now)) {
+      } else if (chunkOWCPXRGP_cjs.canRecoverOnchain(vtxo, now)) {
         recoverable += vtxo.value;
-      } else if (chunkE7HB3GKK_cjs.canSpendOffchain(vtxo, now)) {
+      } else if (chunkOWCPXRGP_cjs.canSpendOffchain(vtxo, now)) {
         if (vtxo.isPreconfirmed) {
           preconfirmed += vtxo.value;
         } else {
@@ -15502,7 +15835,7 @@ var WalletMessageHandler = class {
     const totalOffchain = settled + preconfirmed + recoverable + pendingRecovery;
     const assetBalances = /* @__PURE__ */ new Map();
     for (const vtxo of allVtxos) {
-      if (chunkE7HB3GKK_cjs.hasTerminalSpend(vtxo)) continue;
+      if (chunkOWCPXRGP_cjs.hasTerminalSpend(vtxo)) continue;
       if (vtxo.assets) {
         for (const a of vtxo.assets) {
           const current = assetBalances.get(a.assetId) ?? 0n;
@@ -15538,7 +15871,7 @@ var WalletMessageHandler = class {
    */
   async getSpendableVtxos() {
     const vtxos = await this.getVtxosFromRepo();
-    return vtxos.filter((v) => !chunkE7HB3GKK_cjs.hasTerminalSpend(v));
+    return vtxos.filter((v) => !chunkOWCPXRGP_cjs.hasTerminalSpend(v));
   }
   async onWalletInitialized() {
     if (!this.readonlyWallet || !this.arkProvider || !this.indexerProvider || !this.walletRepository) {
@@ -15750,10 +16083,10 @@ var WalletMessageHandler = class {
       if (dustAmount != null && isSubdust(v, dustAmount)) {
         return false;
       }
-      if (chunkE7HB3GKK_cjs.isRecoverable(v)) {
+      if (chunkOWCPXRGP_cjs.isRecoverable(v)) {
         return false;
       }
-      if (chunkE7HB3GKK_cjs.isExpired(v)) {
+      if (chunkOWCPXRGP_cjs.isExpired(v)) {
         return false;
       }
       return true;
@@ -15818,47 +16151,15 @@ var WalletMessageHandler = class {
     return allVtxos;
   }
   /**
-   * Build transaction history from cached virtual outputs without hitting the indexer.
-   * Falls back to indexer only for uncached transaction timestamps.
+   * Build transaction history from cached virtual outputs, hitting the indexer only for
+   * uncached timestamps. Best-effort, like the plain Wallet path.
    */
   async buildTransactionHistoryFromCache(vtxos) {
     if (!this.readonlyWallet) return null;
     const { boardingTxs, commitmentsToIgnore } = await this.readonlyWallet.getBoardingTxs();
-    const vtxoCreatedAt = /* @__PURE__ */ new Map();
-    for (const vtxo of vtxos) {
-      const existing = vtxoCreatedAt.get(vtxo.txid);
-      const ts = vtxo.createdAt.getTime();
-      if (existing === void 0 || ts < existing) {
-        vtxoCreatedAt.set(vtxo.txid, ts);
-      }
-    }
-    if (this.indexerProvider) {
-      const uncachedTxids = /* @__PURE__ */ new Set();
-      for (const vtxo of vtxos) {
-        if (vtxo.isSpent && vtxo.arkTxId && !vtxoCreatedAt.has(vtxo.arkTxId) && !vtxos.some((v) => v.txid === vtxo.arkTxId)) {
-          uncachedTxids.add(vtxo.arkTxId);
-        }
-      }
-      if (uncachedTxids.size > 0) {
-        const outpoints = [...uncachedTxids].map((txid) => ({
-          txid,
-          vout: 0
-        }));
-        const BATCH_SIZE = 100;
-        for (let i = 0; i < outpoints.length; i += BATCH_SIZE) {
-          const res = await chunkE7HB3GKK_cjs.getNormalizedVtxos(this.indexerProvider, {
-            outpoints: outpoints.slice(i, i + BATCH_SIZE)
-          });
-          for (const v of res.vtxos) {
-            vtxoCreatedAt.set(v.txid, v.createdAt.getTime());
-          }
-        }
-      }
-    }
-    const getTxCreatedAt = async (txid) => {
-      return vtxoCreatedAt.get(txid);
-    };
-    return buildTransactionHistory(vtxos, boardingTxs, commitmentsToIgnore, getTxCreatedAt);
+    const indexerProvider = this.indexerProvider;
+    const resolveTxCreatedAt = indexerProvider ? (txids) => chunkOWCPXRGP_cjs.fetchVtxoCreatedAtByTxid(indexerProvider, txids) : void 0;
+    return buildTransactionHistory(vtxos, boardingTxs, commitmentsToIgnore, resolveTxCreatedAt);
   }
   async ensureContractEventBroadcasting() {
     if (!this.readonlyWallet) return;
@@ -16542,7 +16843,7 @@ var ServiceWorkerReadonlyWallet = class _ServiceWorkerReadonlyWallet {
     };
     try {
       const response = await this.sendMessage(message);
-      return response.payload.vtxos.map(chunkE7HB3GKK_cjs.normalizeVtxo);
+      return response.payload.vtxos.map(chunkOWCPXRGP_cjs.normalizeVtxo);
     } catch (error) {
       throw new Error(`Failed to get vtxos: ${error}`);
     }
@@ -16655,7 +16956,7 @@ var ServiceWorkerReadonlyWallet = class _ServiceWorkerReadonlyWallet {
         };
         try {
           const response = await sendContractMessage(message);
-          return response.payload.vtxos.map(chunkE7HB3GKK_cjs.normalizeVtxo);
+          return response.payload.vtxos.map(chunkOWCPXRGP_cjs.normalizeVtxo);
         } catch (e) {
           throw new Error("Failed to annotate vtxos");
         }
@@ -17109,7 +17410,7 @@ var ServiceWorkerWallet = class _ServiceWorkerWallet extends ServiceWorkerReadon
         };
         try {
           const response = await wallet.sendMessage(message);
-          return response.payload.vtxos.map(chunkE7HB3GKK_cjs.normalizeVtxo);
+          return response.payload.vtxos.map(chunkOWCPXRGP_cjs.normalizeVtxo);
         } catch (e) {
           throw new Error(`Failed to get expiring vtxos: ${e}`);
         }
@@ -17221,12 +17522,12 @@ var OnchainWallet = class _OnchainWallet {
    * @returns Configured onchain wallet
    * @throws Error if the configured identity cannot produce a valid x-only public key
    */
-  static async create(identity, networkName = chunkE7HB3GKK_cjs.DEFAULT_NETWORK_NAME, provider) {
+  static async create(identity, networkName = chunkOWCPXRGP_cjs.DEFAULT_NETWORK_NAME, provider) {
     const pubkey = await identity.xOnlyPublicKey();
     if (!pubkey) {
       throw new Error("Invalid configured public key");
     }
-    const network = chunkE7HB3GKK_cjs.getNetwork(networkName);
+    const network = chunkOWCPXRGP_cjs.getNetwork(networkName);
     const onchainProvider = provider || new EsploraProvider(ESPLORA_URL[networkName]);
     const onchainP2TR = btcSigner.p2tr(pubkey, void 0, network);
     return new _OnchainWallet(identity, network, onchainP2TR, onchainProvider);
@@ -17332,7 +17633,7 @@ var OnchainWallet = class _OnchainWallet {
     if (!inputs) {
       throw new Error("Fee estimation failed");
     }
-    let tx = new chunkRNMLFY2V_cjs.Transaction();
+    let tx = new chunkOWCPXRGP_cjs.Transaction();
     for (const input of inputs) {
       tx.addInput({
         txid: input.txid,
@@ -17390,7 +17691,7 @@ var OnchainWallet = class _OnchainWallet {
    * @throws If the parent has no anchor, or funding cannot be selected/signed
    */
   async bumpAnchor(parentHex, feeRate) {
-    const parent = chunkRNMLFY2V_cjs.Transaction.fromRaw(base.hex.decode(parentHex));
+    const parent = chunkOWCPXRGP_cjs.Transaction.fromRaw(base.hex.decode(parentHex));
     const coins = (await this.getCoins()).filter((c) => c.status.confirmed);
     const child = await this.buildBumpPackage(parent, feeRate, coins);
     return [parent.hex, child.hex];
@@ -18155,7 +18456,7 @@ exports.BIP322 = void 0;
   async function sign2(message, identity, network) {
     const xOnlyPubKey = await identity.xOnlyPublicKey();
     const payment = btcSigner.p2tr(xOnlyPubKey, void 0, network);
-    const toSpend = chunkRNMLFY2V_cjs.craftToSpendTx(message, payment.script, TAG_BIP322);
+    const toSpend = chunkOWCPXRGP_cjs.craftToSpendTx(message, payment.script, TAG_BIP322);
     const toSign = craftBIP322ToSignP2TR(toSpend, payment.script, xOnlyPubKey);
     const signed = await identity.sign(toSign, [0]);
     signed.finalizeIdx(0);
@@ -18213,7 +18514,7 @@ function verifyP2TR(message, witnessItems, pkScript, pubkey) {
   if (sighashType !== btcSigner.SigHash.DEFAULT && sighashType !== btcSigner.SigHash.ALL) {
     return false;
   }
-  const toSpend = chunkRNMLFY2V_cjs.craftToSpendTx(message, pkScript, TAG_BIP322);
+  const toSpend = chunkOWCPXRGP_cjs.craftToSpendTx(message, pkScript, TAG_BIP322);
   const toSign = craftBIP322ToSignP2TR(toSpend, pkScript, pubkey);
   const sighash = toSign.preimageWitnessV1(0, [pkScript], sighashType, [0n]);
   const rawSig = sig.length === 65 ? sig.subarray(0, 64) : sig;
@@ -18234,7 +18535,7 @@ function verifyP2WPKH(message, witnessItems, pkScript, addressHash) {
   }
   const sighashType = sigWithHash[sigWithHash.length - 1];
   const derSig = sigWithHash.subarray(0, sigWithHash.length - 1);
-  const toSpend = chunkRNMLFY2V_cjs.craftToSpendTx(message, pkScript, TAG_BIP322);
+  const toSpend = chunkOWCPXRGP_cjs.craftToSpendTx(message, pkScript, TAG_BIP322);
   const toSign = craftBIP322ToSignSimple(toSpend, pkScript);
   const scriptCode = btcSigner.OutScript.encode({ type: "pkh", hash: addressHash });
   const sighash = toSign.preimageWitnessV0(0, scriptCode, sighashType, 0n);
@@ -18287,7 +18588,7 @@ function encodeCompactSize(n) {
   return buf;
 }
 function craftBIP322ToSignP2TR(toSpend, pkScript, tapInternalKey) {
-  const tx = new chunkRNMLFY2V_cjs.Transaction({ version: 0 });
+  const tx = new chunkOWCPXRGP_cjs.Transaction({ version: 0 });
   tx.addInput({
     txid: toSpend.id,
     index: 0,
@@ -18301,12 +18602,12 @@ function craftBIP322ToSignP2TR(toSpend, pkScript, tapInternalKey) {
   });
   tx.addOutput({
     amount: 0n,
-    script: chunkRNMLFY2V_cjs.OP_RETURN_EMPTY_PKSCRIPT
+    script: chunkOWCPXRGP_cjs.OP_RETURN_EMPTY_PKSCRIPT
   });
   return tx;
 }
 function craftBIP322ToSignSimple(toSpend, pkScript) {
-  const tx = new chunkRNMLFY2V_cjs.Transaction({ version: 0 });
+  const tx = new chunkOWCPXRGP_cjs.Transaction({ version: 0 });
   tx.addInput({
     txid: toSpend.id,
     index: 0,
@@ -18318,7 +18619,7 @@ function craftBIP322ToSignSimple(toSpend, pkScript) {
   });
   tx.addOutput({
     amount: 0n,
-    script: chunkRNMLFY2V_cjs.OP_RETURN_EMPTY_PKSCRIPT
+    script: chunkOWCPXRGP_cjs.OP_RETURN_EMPTY_PKSCRIPT
   });
   return tx;
 }
@@ -18449,7 +18750,7 @@ var RestEmulatorProvider = class {
   }
 };
 function finalizeVirtualTx(type, psbtBase64) {
-  const tx = chunkRNMLFY2V_cjs.Transaction.fromPSBT(base.base64.decode(psbtBase64));
+  const tx = chunkOWCPXRGP_cjs.Transaction.fromPSBT(base.base64.decode(psbtBase64));
   if (type === "INDEXER_CHAINED_TX_TYPE_TREE" /* TREE */) {
     const input = tx.getInput(0);
     if (!input) {
@@ -18476,14 +18777,14 @@ var ExitPathError = class extends Error {
   reason;
 };
 function delayWeight(sequence) {
-  const t = chunkE7HB3GKK_cjs.sequenceToTimelock(sequence);
+  const t = chunkOWCPXRGP_cjs.sequenceToTimelock(sequence);
   return t.type === "blocks" ? Number(t.value) : Number(t.value) / 600;
 }
 async function resolveUnilateralPath(params) {
   const { vtxo, scriptHex, contractRepository } = params;
   const contract = contractRepository ? (await contractRepository.getContracts({ script: scriptHex }))[0] : void 0;
   if (contract) {
-    const handler = chunkIEMPH7J6_cjs.contractHandlers.get(contract.type);
+    const handler = chunkV2TOHHPW_cjs.contractHandlers.get(contract.type);
     if (!handler) {
       throw new ExitPathError(
         "no-handler",
@@ -18506,12 +18807,12 @@ async function resolveUnilateralPath(params) {
     paths.sort((a, b) => delayWeight(a.sequence) - delayWeight(b.sequence));
     return { selection: paths[0], label: `${contract.type}:unilateral` };
   }
-  const decoded = chunkE7HB3GKK_cjs.VtxoScript.decode(vtxo.tapTree);
+  const decoded = chunkOWCPXRGP_cjs.VtxoScript.decode(vtxo.tapTree);
   let best;
   for (const exit of decoded.exitPaths()) {
     const leaf = decoded.findLeaf(base.hex.encode(exit.script));
     if (!leaf) continue;
-    const sequence = chunkE7HB3GKK_cjs.timelockToSequence(exit.params.timelock);
+    const sequence = chunkOWCPXRGP_cjs.timelockToSequence(exit.params.timelock);
     const weight = delayWeight(sequence);
     if (!best || weight < best.weight) {
       best = { selection: { leaf, sequence }, weight };
@@ -18697,14 +18998,14 @@ async function prepareUnrollTransaction(wallet, vtxoTxIds, outputAddress) {
     }
     const resolved = await resolveUnilateralPath({
       vtxo,
-      scriptHex: base.hex.encode(chunkE7HB3GKK_cjs.VtxoScript.decode(vtxo.tapTree).pkScript),
+      scriptHex: base.hex.encode(chunkOWCPXRGP_cjs.VtxoScript.decode(vtxo.tapTree).pkScript),
       contractRepository: wallet.contractRepository,
       walletPubKeyHex: base.hex.encode(await wallet.identity.xOnlyPublicKey()),
       currentTime: Date.now()
     });
     const spendingLeaf = resolved.selection.leaf;
     const sequence = resolved.selection.sequence;
-    const timelock = chunkE7HB3GKK_cjs.sequenceToTimelock(sequence);
+    const timelock = chunkOWCPXRGP_cjs.sequenceToTimelock(sequence);
     const elapsed = timelock.type === "blocks" ? chainTip.height >= txStatus.blockHeight + Number(timelock.value) : chainTip.time >= txStatus.blockTime + Number(timelock.value);
     if (!elapsed) {
       throw new Error(`no available exit path found for vtxo ${vtxo.txid}:${vtxo.vout}`);
@@ -18717,7 +19018,7 @@ async function prepareUnrollTransaction(wallet, vtxoTxIds, outputAddress) {
       sequence,
       witnessUtxo: {
         amount: BigInt(vtxo.value),
-        script: chunkE7HB3GKK_cjs.VtxoScript.decode(vtxo.tapTree).pkScript
+        script: chunkOWCPXRGP_cjs.VtxoScript.decode(vtxo.tapTree).pkScript
       },
       sighashType: btcSigner.SigHash.DEFAULT
     });
@@ -18727,7 +19028,7 @@ async function prepareUnrollTransaction(wallet, vtxoTxIds, outputAddress) {
       btcSigner.TaprootControlBlock.encode(spendingLeaf[0]).length
     );
   }
-  const tx = new chunkRNMLFY2V_cjs.Transaction({ version: 2 });
+  const tx = new chunkOWCPXRGP_cjs.Transaction({ version: 2 });
   for (const input of inputs) {
     tx.addInput(input);
   }
@@ -18794,7 +19095,7 @@ async function buildSignedSweep(params) {
       `uneconomic vtxo ${vtxo.txid}:${vtxo.vout}: value ${vtxo.value} - fee ${fee} < dust`
     );
   }
-  const tx = new chunkRNMLFY2V_cjs.Transaction({ version: 2 });
+  const tx = new chunkOWCPXRGP_cjs.Transaction({ version: 2 });
   tx.addInput({
     txid: vtxo.txid,
     index: vtxo.vout,
@@ -18819,7 +19120,7 @@ async function buildSignedSweep(params) {
     finalScriptWitness: [
       tapScriptSig[0][1],
       ...path.extraWitness,
-      chunkE7HB3GKK_cjs.scriptFromTapLeafScript(path.leaf),
+      chunkOWCPXRGP_cjs.scriptFromTapLeafScript(path.leaf),
       btcSigner.TaprootControlBlock.encode(controlBlock)
     ]
   });
@@ -18849,7 +19150,7 @@ async function resolveFeeRate(opts) {
 }
 async function selectExitVtxos(opts) {
   if (!opts.vtxos) return opts.wallet.getVtxos();
-  const res = await chunkE7HB3GKK_cjs.getNormalizedVtxos(opts.wallet.indexerProvider, { outpoints: opts.vtxos });
+  const res = await chunkOWCPXRGP_cjs.getNormalizedVtxos(opts.wallet.indexerProvider, { outpoints: opts.vtxos });
   const tapTrees = /* @__PURE__ */ new Map();
   const out = [];
   for (const vtxo of res.vtxos) {
@@ -18864,7 +19165,7 @@ async function selectExitVtxos(opts) {
           `no contract registered for vtxo script ${vtxo.script} \u2014 register the contract before exiting`
         );
       }
-      const handler = chunkIEMPH7J6_cjs.contractHandlers.get(contract.type);
+      const handler = chunkV2TOHHPW_cjs.contractHandlers.get(contract.type);
       if (!handler) {
         throw new Error(`no contract handler registered for type '${contract.type}'`);
       }
@@ -18894,7 +19195,7 @@ async function computeExitLayout(opts, feeRate) {
   if (pendingNodes.length > 0) {
     const txs = await resolver.getVirtualTxs(pendingNodes.map((n) => n.txid));
     for (const psbt of txs) {
-      psbts.set(chunkRNMLFY2V_cjs.Transaction.fromPSBT(base.base64.decode(psbt)).id, psbt);
+      psbts.set(chunkOWCPXRGP_cjs.Transaction.fromPSBT(base.base64.decode(psbt)).id, psbt);
     }
   }
   const childVsize = Number(
@@ -18930,7 +19231,7 @@ async function computeExitLayout(opts, feeRate) {
     try {
       const resolved = await resolveUnilateralPath({
         vtxo,
-        scriptHex: base.hex.encode(chunkE7HB3GKK_cjs.VtxoScript.decode(vtxo.tapTree).pkScript),
+        scriptHex: base.hex.encode(chunkOWCPXRGP_cjs.VtxoScript.decode(vtxo.tapTree).pkScript),
         contractRepository: wallet.contractRepository,
         walletPubKeyHex,
         currentTime: Date.now()
@@ -18949,7 +19250,7 @@ async function computeExitLayout(opts, feeRate) {
         });
         continue;
       }
-      const t = chunkE7HB3GKK_cjs.sequenceToTimelock(resolved.selection.sequence);
+      const t = chunkOWCPXRGP_cjs.sequenceToTimelock(resolved.selection.sequence);
       const delay = { type: t.type, value: Number(t.value) };
       infos.push({ outpoint, value: vtxo.value, sweepFee, path: resolved.label, delay });
       sweeps.push({ vtxo, resolved, sweepFee, delay });
@@ -19035,19 +19336,48 @@ async function estimate(opts) {
 }
 
 // src/wallet/exit/executor.ts
+function abortErrorFor(signal) {
+  if (signal.reason !== void 0) return signal.reason;
+  const e = new Error("The operation was aborted");
+  e.name = "AbortError";
+  return e;
+}
+function throwIfAborted(signal) {
+  if (signal?.aborted) throw abortErrorFor(signal);
+}
 var Executor = class {
   constructor(pkg, provider, opts) {
     this.pkg = pkg;
     this.provider = provider;
     this.pollIntervalMs = opts?.pollIntervalMs ?? 5e3;
     this.feeWallet = opts?.feeWallet;
+    this.signal = opts?.signal;
   }
   pkg;
   provider;
   pollIntervalMs;
   feeWallet;
+  signal;
+  /**
+   * Poll delay. Nearly all wall-clock time is spent here, so it must be the
+   * thing that reacts to abort — checking only between polls would leave
+   * cancellation up to a full interval late and the timer still pending.
+   */
   sleep() {
-    return new Promise((r) => setTimeout(r, this.pollIntervalMs));
+    const signal = this.signal;
+    if (!signal) return new Promise((r) => setTimeout(r, this.pollIntervalMs));
+    return new Promise((resolve, reject) => {
+      if (signal.aborted) return reject(abortErrorFor(signal));
+      const onAbort = () => {
+        clearTimeout(timer);
+        reject(abortErrorFor(signal));
+      };
+      const timer = setTimeout(() => {
+        signal.removeEventListener("abort", onAbort);
+        resolve();
+      }, this.pollIntervalMs);
+      signal.addEventListener("abort", onAbort, { once: true });
+    });
   }
   async status(txid) {
     try {
@@ -19060,10 +19390,12 @@ var Executor = class {
     for (; ; ) {
       const s = await this.status(txid);
       if (s?.confirmed) return s;
+      throwIfAborted(this.signal);
       await this.sleep();
     }
   }
   async *[Symbol.asyncIterator]() {
+    throwIfAborted(this.signal);
     const dead = /* @__PURE__ */ new Set();
     if (this.pkg.validUntil && Date.now() / 1e3 > this.pkg.validUntil) {
       yield {
@@ -19175,6 +19507,7 @@ var Executor = class {
     while (done.size < pending.length) {
       for (const { index, step } of pending) {
         if (done.has(index)) continue;
+        throwIfAborted(this.signal);
         const swept = await this.status(step.txid);
         if (swept?.confirmed) {
           done.add(index);
@@ -19256,7 +19589,7 @@ async function prepare(opts) {
           txid: sweep.vtxo.txid,
           vout: sweep.vtxo.vout,
           value: sweep.vtxo.value,
-          pkScript: chunkE7HB3GKK_cjs.VtxoScript.decode(sweep.vtxo.tapTree).pkScript
+          pkScript: chunkOWCPXRGP_cjs.VtxoScript.decode(sweep.vtxo.tapTree).pkScript
         },
         path: sweep.resolved.selection,
         outputAddress: opts.sweepAddress,
@@ -19341,7 +19674,7 @@ async function prepare(opts) {
       if (newFee <= splitterFee) break;
       splitterFee = newFee;
     }
-    const splitter = new chunkRNMLFY2V_cjs.Transaction({ version: 2 });
+    const splitter = new chunkOWCPXRGP_cjs.Transaction({ version: 2 });
     for (const coin of selected.inputs) {
       splitter.addInput({
         txid: coin.txid,
@@ -19484,44 +19817,45 @@ var UnilateralExit = {
 // src/arkade/index.ts
 var arkade_exports = {};
 chunk5BLDMQED_cjs.__export(arkade_exports, {
-  ARKADE_OP: () => chunkIEMPH7J6_cjs.ARKADE_OP,
-  ARKADE_OPCODES: () => chunkIEMPH7J6_cjs.ARKADE_OPCODES,
-  ARKADE_OPCODE_NAMES: () => chunkIEMPH7J6_cjs.ARKADE_OPCODE_NAMES,
-  ARKADE_OPCODE_VALUES: () => chunkIEMPH7J6_cjs.ARKADE_OPCODE_VALUES,
-  ARKADE_OPS: () => chunkIEMPH7J6_cjs.ARKADE_OPS,
+  ARKADE_OP: () => chunkV2TOHHPW_cjs.ARKADE_OP,
+  ARKADE_OPCODES: () => chunkV2TOHHPW_cjs.ARKADE_OPCODES,
+  ARKADE_OPCODE_NAMES: () => chunkV2TOHHPW_cjs.ARKADE_OPCODE_NAMES,
+  ARKADE_OPCODE_VALUES: () => chunkV2TOHHPW_cjs.ARKADE_OPCODE_VALUES,
+  ARKADE_OPS: () => chunkV2TOHHPW_cjs.ARKADE_OPS,
   Arkade: () => Arkade,
   ArkadeContract: () => ArkadeContract,
-  ArkadeProgramScript: () => chunkIEMPH7J6_cjs.ArkadeProgramScript,
-  ArkadeScript: () => chunkIEMPH7J6_cjs.ArkadeScript,
+  ArkadeProgramScript: () => chunkV2TOHHPW_cjs.ArkadeProgramScript,
+  ArkadeScript: () => chunkV2TOHHPW_cjs.ArkadeScript,
   ArkadeTransactionBuilder: () => ArkadeTransactionBuilder,
-  BigNum: () => chunkIEMPH7J6_cjs.bignum_exports,
+  BigNum: () => chunkV2TOHHPW_cjs.bignum_exports,
   OP: () => btcSigner.OP,
-  OPCODE_NAMES: () => chunkIEMPH7J6_cjs.OPCODE_NAMES,
-  OPCODE_VALUES: () => chunkIEMPH7J6_cjs.OPCODE_VALUES,
-  SUPPORTED_PROGRAM_VERSION: () => chunkIEMPH7J6_cjs.SUPPORTED_PROGRAM_VERSION,
+  OPCODE_NAMES: () => chunkV2TOHHPW_cjs.OPCODE_NAMES,
+  OPCODE_VALUES: () => chunkV2TOHHPW_cjs.OPCODE_VALUES,
+  SUPPORTED_PROGRAM_VERSION: () => chunkV2TOHHPW_cjs.SUPPORTED_PROGRAM_VERSION,
   Script: () => btcSigner.Script,
-  arkadeScriptHash: () => chunkIEMPH7J6_cjs.arkadeScriptHash,
-  arkadeWitnessHash: () => chunkIEMPH7J6_cjs.arkadeWitnessHash,
-  asmToBytes: () => chunkIEMPH7J6_cjs.asmToBytes,
-  bytesToASM: () => chunkIEMPH7J6_cjs.bytesToASM,
-  computeArkadeScriptPublicKey: () => chunkIEMPH7J6_cjs.computeArkadeScriptPublicKey,
+  arkadeScriptHash: () => chunkV2TOHHPW_cjs.arkadeScriptHash,
+  arkadeWitnessHash: () => chunkV2TOHHPW_cjs.arkadeWitnessHash,
+  asmToBytes: () => chunkV2TOHHPW_cjs.asmToBytes,
+  bytesToASM: () => chunkV2TOHHPW_cjs.bytesToASM,
+  computeArkadeScriptPublicKey: () => chunkV2TOHHPW_cjs.computeArkadeScriptPublicKey,
   createArkadeBatchHandler: () => createArkadeBatchHandler,
-  deserializeArkadeContractParams: () => chunkIEMPH7J6_cjs.deserializeArkadeContractParams,
-  fromASM: () => chunkIEMPH7J6_cjs.fromASM,
-  getOpcodeName: () => chunkIEMPH7J6_cjs.getOpcodeName,
-  getOpcodeValue: () => chunkIEMPH7J6_cjs.getOpcodeValue,
-  parseArtifact: () => chunkIEMPH7J6_cjs.parseArtifact,
-  resolveAsm: () => chunkIEMPH7J6_cjs.resolveAsm,
-  serializeArkadeContractParams: () => chunkIEMPH7J6_cjs.serializeArkadeContractParams,
-  stringifyArtifact: () => chunkIEMPH7J6_cjs.stringifyArtifact,
-  toASM: () => chunkIEMPH7J6_cjs.toASM,
-  validateProgram: () => chunkIEMPH7J6_cjs.validateProgram,
-  witnessRefToBytes: () => chunkIEMPH7J6_cjs.witnessRefToBytes
+  deserializeArkadeContractParams: () => chunkV2TOHHPW_cjs.deserializeArkadeContractParams,
+  fromASM: () => chunkV2TOHHPW_cjs.fromASM,
+  getOpcodeName: () => chunkV2TOHHPW_cjs.getOpcodeName,
+  getOpcodeValue: () => chunkV2TOHHPW_cjs.getOpcodeValue,
+  parseArtifact: () => chunkV2TOHHPW_cjs.parseArtifact,
+  resolveAsm: () => chunkV2TOHHPW_cjs.resolveAsm,
+  serializeArkadeContractParams: () => chunkV2TOHHPW_cjs.serializeArkadeContractParams,
+  stringifyArtifact: () => chunkV2TOHHPW_cjs.stringifyArtifact,
+  toASM: () => chunkV2TOHHPW_cjs.toASM,
+  validateProgram: () => chunkV2TOHHPW_cjs.validateProgram,
+  witnessRefToBytes: () => chunkV2TOHHPW_cjs.witnessRefToBytes
 });
-var isVtxoCoin = (input) => chunkE7HB3GKK_cjs.isVirtualCoin(input);
+var isVtxoCoin = (input) => chunkOWCPXRGP_cjs.isVirtualCoin(input);
 function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message, session, arkProvider, emulator, network, recipients) {
   let batchId;
   let sweepTapTreeRoot;
+  let validatedCommitmentTxid;
   return {
     onBatchStarted: async (event) => {
       const utf8IntentId = new TextEncoder().encode(intentId);
@@ -19530,7 +19864,7 @@ function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message
       if (!event.intentIdHashes.includes(intentIdHashStr)) return { skip: true };
       await arkProvider.confirmRegistration(intentId);
       batchId = event.id;
-      const sweepTapscript = chunkE7HB3GKK_cjs.CSVMultisigTapscript.encode({
+      const sweepTapscript = chunkOWCPXRGP_cjs.CSVMultisigTapscript.encode({
         timelock: {
           value: event.batchExpiry,
           // BIP-65: values >= 512 are interpreted as seconds, below as blocks
@@ -19548,7 +19882,7 @@ function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message
       if (!xOnlyPubkeys.includes(base.hex.encode(xonlySignerPubKey))) {
         return { skip: true };
       }
-      const commitmentTx = chunkRNMLFY2V_cjs.Transaction.fromPSBT(base.base64.decode(event.unsignedCommitmentTx));
+      const commitmentTx = chunkOWCPXRGP_cjs.Transaction.fromPSBT(base.base64.decode(event.unsignedCommitmentTx));
       validateVtxoTxGraph(vtxoTree, commitmentTx, sweepTapTreeRoot);
       if (recipients && recipients.length > 0) {
         validateBatchRecipients(commitmentTx, vtxoTree.leaves(), recipients, network);
@@ -19557,6 +19891,7 @@ function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message
       if (!sharedOutput?.amount) {
         throw new Error("Shared output not found");
       }
+      validatedCommitmentTxid = commitmentTx.id;
       await session.init(vtxoTree, sweepTapTreeRoot, sharedOutput.amount);
       const pubkey = base.hex.encode(await session.getPublicKey());
       const nonces = await session.getNonces();
@@ -19579,7 +19914,15 @@ function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message
       if (connectorTree) {
         validateConnectorsTxGraph(event.commitmentTx, connectorTree);
       }
-      let commitmentPsbt = chunkRNMLFY2V_cjs.Transaction.fromPSBT(base.base64.decode(event.commitmentTx));
+      let commitmentPsbt = chunkOWCPXRGP_cjs.Transaction.fromPSBT(base.base64.decode(event.commitmentTx));
+      assertFinalCommitmentMatchesValidated(
+        commitmentPsbt,
+        validatedCommitmentTxid,
+        "arkade batch finalization"
+      );
+      if (!validatedCommitmentTxid && recipients && recipients.length > 0) {
+        validateBatchRecipientsWithoutTree(commitmentPsbt, recipients, network);
+      }
       const signedForfeits = [];
       let connectorIndex = 0;
       const connectorLeaves = connectorTree?.leaves() || [];
@@ -19606,7 +19949,7 @@ function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message
           boardingIndices.push(boardingIdx);
           continue;
         }
-        if (chunkE7HB3GKK_cjs.isRecoverable(input) || isSubdust(input, info.dust)) {
+        if (chunkOWCPXRGP_cjs.isRecoverable(input) || isSubdust(input, info.dust)) {
           continue;
         }
         if (connectorIndex >= connectorLeaves.length) {
@@ -19627,7 +19970,7 @@ function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message
               index: input.vout,
               witnessUtxo: {
                 amount: BigInt(input.value),
-                script: chunkE7HB3GKK_cjs.VtxoScript.decode(input.tapTree).pkScript
+                script: chunkOWCPXRGP_cjs.VtxoScript.decode(input.tapTree).pkScript
               },
               sighashType: btcSigner.SigHash.DEFAULT,
               tapLeafScript: [input.forfeitTapLeafScript]
@@ -19710,7 +20053,7 @@ var Arkade = class _Arkade {
   static async connect(opts) {
     const info = await opts.arkade.getInfo();
     const serverKey = base.hex.decode(info.signerPubkey).slice(1);
-    const checkpoint = chunkE7HB3GKK_cjs.CSVMultisigTapscript.decode(base.hex.decode(info.checkpointTapscript));
+    const checkpoint = chunkOWCPXRGP_cjs.CSVMultisigTapscript.decode(base.hex.decode(info.checkpointTapscript));
     let emulatorKey;
     if (opts.emulator) {
       const eInfo = await opts.emulator.getInfo();
@@ -19724,7 +20067,7 @@ var Arkade = class _Arkade {
     return new _Arkade({
       arkProvider: opts.arkade,
       emulator: opts.emulator,
-      network: opts.network ?? chunkE7HB3GKK_cjs.DEFAULT_NETWORK,
+      network: opts.network ?? chunkOWCPXRGP_cjs.DEFAULT_NETWORK,
       serverKey,
       emulatorKey,
       checkpoint,
@@ -19745,7 +20088,7 @@ var Arkade = class _Arkade {
    * key respectively; explicit args always win.
    */
   contract(program, args = {}) {
-    const declared = (program.params ?? []).map(chunkIEMPH7J6_cjs.inputName);
+    const declared = (program.params ?? []).map(chunkV2TOHHPW_cjs.inputName);
     if (declared.includes("server") && args.server === void 0) {
       args = { ...args, server: this.serverKey };
     }
@@ -19765,7 +20108,7 @@ var ArkadeContract = class _ArkadeContract {
       userKey: client.userKey,
       emulatorKey: client.emulatorKey
     };
-    this.vtxoScript = new chunkIEMPH7J6_cjs.ArkadeProgramScript(program, args, this.keys);
+    this.vtxoScript = new chunkV2TOHHPW_cjs.ArkadeProgramScript(program, args, this.keys);
     this.tapTree = this.vtxoScript.encode();
     this.compiled = this.vtxoScript.compiled;
   }
@@ -19793,7 +20136,7 @@ var ArkadeContract = class _ArkadeContract {
         `ArkadeContract.fromContract: expected contract type 'arkade', got '${contract.type}'`
       );
     }
-    const typed = chunkIEMPH7J6_cjs.deserializeArkadeContractParams(contract.params);
+    const typed = chunkV2TOHHPW_cjs.deserializeArkadeContractParams(contract.params);
     return new _ArkadeContract(client, typed.program, typed.args, {
       serverKey: typed.serverKey,
       userKey: typed.userKey,
@@ -19834,7 +20177,7 @@ var ArkadeContract = class _ArkadeContract {
   toContractParams() {
     return {
       type: "arkade",
-      params: chunkIEMPH7J6_cjs.serializeArkadeContractParams({
+      params: chunkV2TOHHPW_cjs.serializeArkadeContractParams({
         program: this.program,
         args: this.args,
         serverKey: this.keys.serverKey,
@@ -19879,13 +20222,13 @@ var ArkadeContract = class _ArkadeContract {
       const [registered] = await manager.getContracts({ script: scriptHex });
       if (registered) {
         const [withVtxos] = await manager.getContractsWithVtxos({ script: scriptHex });
-        return (withVtxos?.vtxos ?? []).filter((v) => !chunkE7HB3GKK_cjs.hasTerminalSpend(v));
+        return (withVtxos?.vtxos ?? []).filter((v) => !chunkOWCPXRGP_cjs.hasTerminalSpend(v));
       }
     }
     if (!this.client.indexer) {
       throw new Error("ArkadeContract.getUtxos: an indexer is required");
     }
-    const { vtxos } = await chunkE7HB3GKK_cjs.getNormalizedVtxos(this.client.indexer, {
+    const { vtxos } = await chunkOWCPXRGP_cjs.getNormalizedVtxos(this.client.indexer, {
       scripts: [scriptHex],
       spendableOnly: true
     });
@@ -19987,12 +20330,12 @@ var ArkadeTransactionBuilder = class {
       this.contract.client.checkpoint
     );
     if (coin.sourceTx) {
-      chunkRNMLFY2V_cjs.setArkPsbtField(arkTx, 0, chunkRNMLFY2V_cjs.PrevArkTxField, coin.sourceTx);
+      chunkOWCPXRGP_cjs.setArkPsbtField(arkTx, 0, chunkOWCPXRGP_cjs.PrevArkTxField, coin.sourceTx);
     }
     const condition = (def.tapscript.witness ?? []).map((w) => this.witnessBytes(w));
     if (condition.length > 0) {
-      chunkRNMLFY2V_cjs.setArkPsbtField(arkTx, 0, chunkRNMLFY2V_cjs.ConditionWitness, condition);
-      chunkRNMLFY2V_cjs.setArkPsbtField(checkpoints[0], 0, chunkRNMLFY2V_cjs.ConditionWitness, condition);
+      chunkOWCPXRGP_cjs.setArkPsbtField(arkTx, 0, chunkOWCPXRGP_cjs.ConditionWitness, condition);
+      chunkOWCPXRGP_cjs.setArkPsbtField(checkpoints[0], 0, chunkOWCPXRGP_cjs.ConditionWitness, condition);
     }
     const packets = [];
     if (this.assetSpecs.length > 0) {
@@ -20031,7 +20374,7 @@ var ArkadeTransactionBuilder = class {
         base.base64.encode(signedArk2.toPSBT()),
         signedCps.map((c) => base.base64.encode(c.toPSBT()))
       );
-      const txid = chunkRNMLFY2V_cjs.Transaction.fromPSBT(base.base64.decode(res2.signedArkTx)).id;
+      const txid = chunkOWCPXRGP_cjs.Transaction.fromPSBT(base.base64.decode(res2.signedArkTx)).id;
       return {
         txid,
         signedArkTx: res2.signedArkTx,
@@ -20046,11 +20389,11 @@ var ArkadeTransactionBuilder = class {
       base.base64.encode(signedArk.toPSBT()),
       checkpoints.map((c) => base.base64.encode(c.toPSBT()))
     );
+    assertSubmittedArkTxid(res, signedArk, "submitTx");
+    const matched = matchServerCheckpoints(res.signedCheckpointTxs, checkpoints, "submitTx");
     const finalCps = await Promise.all(
-      res.signedCheckpointTxs.map(
-        async (b) => base.base64.encode(
-          (await client.identity.sign(chunkRNMLFY2V_cjs.Transaction.fromPSBT(base.base64.decode(b)), [0])).toPSBT()
-        )
+      matched.map(
+        async ({ server }) => base.base64.encode((await client.identity.sign(server, [0])).toPSBT())
       )
     );
     await client.arkProvider.finalizeTx(res.arkTxid, finalCps);
@@ -20090,23 +20433,23 @@ var ArkadeTransactionBuilder = class {
   }
   buildAssetPacket() {
     const groups = this.assetSpecs.map((s) => {
-      const id = typeof s.assetId === "string" ? chunkRNMLFY2V_cjs.AssetId.fromString(s.assetId) : chunkRNMLFY2V_cjs.AssetId.fromBytes(s.assetId);
-      return chunkRNMLFY2V_cjs.AssetGroup.create(
+      const id = typeof s.assetId === "string" ? chunkG7DOBFQN_cjs.AssetId.fromString(s.assetId) : chunkG7DOBFQN_cjs.AssetId.fromBytes(s.assetId);
+      return chunkG7DOBFQN_cjs.AssetGroup.create(
         id,
         null,
-        s.inputs.map((i) => chunkRNMLFY2V_cjs.AssetInput.create(i.vin, i.amount)),
-        s.outputs.map((o) => chunkRNMLFY2V_cjs.AssetOutput.create(o.vout, o.amount)),
-        (s.metadata ?? []).map((m) => chunkRNMLFY2V_cjs.Metadata.create(m.key, m.value))
+        s.inputs.map((i) => chunkG7DOBFQN_cjs.AssetInput.create(i.vin, i.amount)),
+        s.outputs.map((o) => chunkG7DOBFQN_cjs.AssetOutput.create(o.vout, o.amount)),
+        (s.metadata ?? []).map((m) => chunkG7DOBFQN_cjs.Metadata.create(m.key, m.value))
       );
     });
-    return chunkRNMLFY2V_cjs.Packet.create(groups);
+    return chunkG7DOBFQN_cjs.Packet.create(groups);
   }
   witnessBytes(ref) {
-    return chunkIEMPH7J6_cjs.witnessRefToBytes(ref, this.args, this.contract.args);
+    return chunkV2TOHHPW_cjs.witnessRefToBytes(ref, this.args, this.contract.args);
   }
 };
 function bindInputs(fn, callArgs) {
-  const names = (fn.def.inputs ?? []).map(chunkIEMPH7J6_cjs.inputName);
+  const names = (fn.def.inputs ?? []).map(chunkV2TOHHPW_cjs.inputName);
   if (callArgs.length !== names.length) {
     throw new Error(`${fn.name}: expected ${names.length} argument(s), got ${callArgs.length}`);
   }
@@ -20134,6 +20477,360 @@ function attachExtension(tx, newPackets) {
   }
   tx.addOutput({ script: newOut.script, amount: newOut.amount });
 }
+
+// src/utils/bip21.ts
+var BIP21Error = /* @__PURE__ */ ((BIP21Error2) => {
+  BIP21Error2["INVALID_URI"] = "Invalid BIP21 URI";
+  BIP21Error2["INVALID_ADDRESS"] = "Invalid address";
+  return BIP21Error2;
+})(BIP21Error || {});
+var BIP21 = class _BIP21 {
+  /**
+   * Create a BIP21 URI from the provided parameters.
+   *
+   * @param params - BIP21 parameters to encode
+   * @returns Encoded BIP21 URI
+   */
+  static create(params) {
+    const { address, ...options } = params;
+    const queryParams = {};
+    for (const [key, value] of Object.entries(options)) {
+      if (value === void 0) continue;
+      if (key === "amount") {
+        const amount = value;
+        if (!isFinite(amount) || !Number.isSafeInteger(Math.trunc(amount))) {
+          console.warn("Invalid amount");
+          continue;
+        }
+        if (amount < 0) {
+          continue;
+        }
+        queryParams[key] = value;
+      } else if (key === "ark") {
+        if (typeof value === "string" && (value.startsWith("ark") || value.startsWith("tark"))) {
+          queryParams[key] = value;
+        } else {
+          console.warn("Invalid ARK address format");
+        }
+      } else if (key === "sp") {
+        if (typeof value === "string" && value.startsWith("sp")) {
+          queryParams[key] = value;
+        } else {
+          console.warn("Invalid Silent Payment address format");
+        }
+      } else if (typeof value === "string" || typeof value === "number") {
+        queryParams[key] = value;
+      }
+    }
+    const query = Object.keys(queryParams).length > 0 ? "?" + new URLSearchParams(
+      Object.fromEntries(
+        Object.entries(queryParams).map(([k, v]) => [k, String(v)])
+      )
+    ).toString() : "";
+    return `bitcoin:${address ? address.toLowerCase() : ""}${query}`;
+  }
+  /**
+   * Integer-sats amount encoded in a BIP21 URI (`amount=` is BTC), or
+   * `undefined` when absent or the URI is unparseable. Shared by the payment
+   * rails, which accept either a bare address or a BIP21 URI.
+   *
+   * @param uri - BIP21 URI (or bare address) to read the amount from
+   * @returns The amount in satoshis, or `undefined`
+   */
+  static amountSats(uri) {
+    try {
+      const btc = _BIP21.parse(uri).params.amount;
+      return typeof btc === "number" ? Math.round(btc * 1e8) : void 0;
+    } catch {
+      return void 0;
+    }
+  }
+  /**
+   * Parse a BIP21 URI and return its decoded parameters.
+   *
+   * @param uri - BIP21 URI to parse
+   * @returns Parsed BIP21 URI data
+   * @throws Error if the URI does not start with the `bitcoin:` scheme
+   */
+  static parse(uri) {
+    if (!uri.toLowerCase().startsWith("bitcoin:")) {
+      throw new Error("Invalid BIP21 URI" /* INVALID_URI */);
+    }
+    const withoutPrefix = uri.slice(uri.toLowerCase().indexOf("bitcoin:") + 8);
+    const [address, query] = withoutPrefix.split("?");
+    const params = {};
+    if (address) {
+      params.address = address.toLowerCase();
+    }
+    if (query) {
+      const queryParams = new URLSearchParams(query);
+      for (const [key, value] of queryParams.entries()) {
+        if (!value) continue;
+        if (key === "amount") {
+          if (!/^(?:\d+\.?\d*|\.\d+)$/.test(value)) {
+            continue;
+          }
+          const amount = Number(value);
+          if (!isFinite(amount) || !Number.isSafeInteger(Math.trunc(amount))) {
+            continue;
+          }
+          params[key] = amount;
+        } else if (key === "ark") {
+          if (value.startsWith("ark") || value.startsWith("tark")) {
+            params[key] = value;
+          } else {
+            console.warn("Invalid ARK address format");
+          }
+        } else if (key === "sp") {
+          if (value.startsWith("sp")) {
+            params[key] = value;
+          } else {
+            console.warn("Invalid Silent Payment address format");
+          }
+        } else {
+          params[key] = value;
+        }
+      }
+    }
+    return {
+      originalString: uri,
+      params
+    };
+  }
+};
+
+// src/payment/predicates.ts
+var isLightningInvoice = (raw) => /^ln(bcrt|bc|tbs|tb|sb)[0-9a-z]+$/i.test(raw.replace(/^lightning:/i, ""));
+var isLnurl = (raw) => /^lnurl/i.test(raw) || /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(raw);
+var BECH32_BTC = /^(bc1|tb1|bcrt1)[qpzry9x8gf2tvdw0s3jn54khce6mua7l]{6,90}$/;
+var isBech32Btc = (raw) => (raw === raw.toLowerCase() || raw === raw.toUpperCase()) && BECH32_BTC.test(raw.toLowerCase());
+var isBtcAddress = (raw) => isBech32Btc(raw) || /^[13mn2][a-km-zA-HJ-NP-Z1-9]{25,39}$/.test(raw);
+
+// src/payment/targets.ts
+var fromBip21 = (raw, key, accept) => {
+  try {
+    const v = BIP21.parse(raw).params[key];
+    return typeof v === "string" && accept(v) ? v : void 0;
+  } catch {
+    return void 0;
+  }
+};
+var arkTarget = (raw) => isValidArkAddress2(raw) ? raw : fromBip21(raw, "ark", isValidArkAddress2);
+var btcTarget = (raw) => isBtcAddress(raw) ? raw : fromBip21(raw, "address", isBtcAddress);
+var invoiceTarget = (raw) => {
+  const invoice = isLightningInvoice(raw) ? raw : fromBip21(raw, "lightning", isLightningInvoice);
+  return invoice?.replace(/^lightning:/i, "");
+};
+
+// src/payment/amount.ts
+function assertSendableAmount(railId, amt) {
+  if (!Number.isInteger(amt) || amt <= 0) {
+    throw new Error(`${railId}: invalid amount ${amt} sats (expected a positive integer)`);
+  }
+}
+function resolveSendAmount(railId, raw, amount) {
+  const amt = amount ?? BIP21.amountSats(raw);
+  if (amt === void 0) {
+    throw new Error(
+      `${railId}: an amount is required (none provided or encoded in the request)`
+    );
+  }
+  assertSendableAmount(railId, amt);
+  return amt;
+}
+function tryResolveSendAmount(raw, amount) {
+  const amt = amount ?? BIP21.amountSats(raw);
+  return amt !== void 0 && Number.isInteger(amt) && amt > 0 ? amt : void 0;
+}
+
+// src/payment/handle.ts
+function makeHandle(id, run) {
+  let status = "pending";
+  let last = { status };
+  const subs = /* @__PURE__ */ new Set();
+  const notify = (f, u) => {
+    try {
+      f(u);
+    } catch {
+    }
+  };
+  const isTerminal = (s) => s === "settled" || s === "failed";
+  const emit = (u) => {
+    status = u.status;
+    last = u;
+    for (const f of subs) notify(f, u);
+    if (isTerminal(u.status)) subs.clear();
+  };
+  const done = run(emit);
+  done.catch((error) => {
+    if (status !== "settled") emit({ status: "failed", error });
+  });
+  return {
+    id,
+    get status() {
+      return status;
+    },
+    subscribe(fn) {
+      notify(fn, last);
+      if (isTerminal(status)) return () => {
+      };
+      subs.add(fn);
+      return () => subs.delete(fn);
+    },
+    settled(opts) {
+      if (!opts?.timeoutMs) return done;
+      let timer;
+      return Promise.race([
+        done,
+        new Promise((_, rej) => {
+          timer = setTimeout(() => rej(new Error("settle timeout")), opts.timeoutMs);
+        })
+      ]).finally(() => clearTimeout(timer));
+    }
+  };
+}
+
+// src/payment/router.ts
+var AmbiguousRouteError = class extends Error {
+  constructor(railIds) {
+    super(`ambiguous route: ${railIds.join(", ")}`);
+    this.railIds = railIds;
+    this.name = "AmbiguousRouteError";
+  }
+  railIds;
+};
+var PaymentRouter = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  ctx;
+  rails = /* @__PURE__ */ new Map();
+  /** Register a rail (or overwrite one with the same id). */
+  use(rail) {
+    this.rails.set(rail.id, rail);
+    return this;
+  }
+  /** Remove a rail by id. */
+  remove(id) {
+    this.rails.delete(id);
+    return this;
+  }
+  /** Rails matching `req`, filtered by `disabled`/`available()`, ranked by
+   *  `priority` (unlisted rails keep insertion order, after listed ones). */
+  async options(req, prefs) {
+    const merged = { ...this.ctx.prefs, ...prefs };
+    const ctx = { ...this.ctx, prefs: merged };
+    const matched = [...this.rails.values()].filter(
+      (rail) => !merged.disabled?.includes(rail.id) && rail.match(req, ctx)
+    );
+    const available = (await Promise.all(
+      matched.map(async (rail) => {
+        try {
+          return await rail.available?.(req, ctx) ?? true ? rail : null;
+        } catch (e) {
+          console.warn(`payment rail "${rail.id}": available() threw`, e);
+          return null;
+        }
+      })
+    )).filter((rail) => rail !== null);
+    const rank = (id) => {
+      const i = merged.priority?.indexOf(id) ?? -1;
+      return i < 0 ? Number.MAX_SAFE_INTEGER : i;
+    };
+    available.sort((a, b) => rank(a.id) - rank(b.id));
+    return available.map((rail) => ({
+      railId: rail.id,
+      quote: () => rail.quote(req, ctx)
+    }));
+  }
+  /** Top-ranked option's quote. Throws when nothing routes, or
+   *  {@link AmbiguousRouteError} when `tieBreak` is `"require-choice"` and
+   *  more than one option survives. */
+  async route(req, prefs) {
+    const options = await this.options(req, prefs);
+    if (options.length === 0) {
+      throw new Error(`no rail for: ${req.raw}`);
+    }
+    const tieBreak = { ...this.ctx.prefs, ...prefs }.tieBreak ?? "first";
+    if (tieBreak === "require-choice" && options.length > 1) {
+      throw new AmbiguousRouteError(options.map((o) => o.railId));
+    }
+    return options[0].quote();
+  }
+};
+
+// src/payment/rails/ark.ts
+function arkRail() {
+  return {
+    id: "ark",
+    match: (req) => arkTarget(req.raw) !== void 0,
+    quote: async (req, ctx) => {
+      const address = arkTarget(req.raw);
+      const amt = resolveSendAmount("ark", req.raw, req.amount);
+      return {
+        railId: "ark",
+        amount: amt,
+        fee: 0,
+        total: amt,
+        send: async () => makeHandle("ark", async (emit) => {
+          const txid = await ctx.wallet.send({ address, amount: amt });
+          const result = { railId: "ark", txid };
+          emit({ status: "settled", result });
+          return result;
+        })
+      };
+    }
+  };
+}
+var GROSS_UP_MAX_ROUNDS = 8;
+function grossUpOffboard(net, feeInfo, script) {
+  const estimator = new Estimator(feeInfo?.intentFee ?? {});
+  const feeAt = (amount) => estimator.evalOnchainOutput({ amount: BigInt(amount), script }).satoshis;
+  let gross = net;
+  for (let i = 0; i < GROSS_UP_MAX_ROUNDS; i++) {
+    const next = net + feeAt(gross);
+    if (next === gross) break;
+    gross = next;
+  }
+  return { gross, fee: gross - net };
+}
+function onchainRail() {
+  return {
+    id: "onchain",
+    match: (req) => btcTarget(req.raw) !== void 0,
+    quote: async (req, ctx) => {
+      const address = btcTarget(req.raw);
+      const amt = resolveSendAmount("onchain", req.raw, req.amount);
+      const { fees } = await ctx.wallet.arkProvider.getInfo();
+      const script = base.hex.encode(offboardDestinationScript(address));
+      const { gross, fee } = grossUpOffboard(amt, fees, script);
+      return {
+        railId: "onchain",
+        amount: amt,
+        fee,
+        total: gross,
+        send: async () => makeHandle("onchain", async (emit) => {
+          const txid = await new Ramps(ctx.wallet).offboard(
+            address,
+            fees,
+            BigInt(gross)
+          );
+          const result = { railId: "onchain", txid };
+          emit({ status: "settled", result });
+          return result;
+        })
+      };
+    }
+  };
+}
+
+// src/payment/index.ts
+function createDefaultPaymentRouter(wallet) {
+  return new PaymentRouter({
+    wallet,
+    prefs: { priority: ["ark", "lightning", "onchain"] }
+  }).use(arkRail()).use(onchainRail());
+}
 var ARKCONTRACT_PREFIX = "arkcontract";
 function encodeArkContract(contract) {
   const params = new URLSearchParams();
@@ -20159,7 +20856,7 @@ function decodeArkContract(encoded) {
 }
 function contractFromArkContract(encoded, options = {}) {
   const parsed = decodeArkContract(encoded);
-  const handler = chunkIEMPH7J6_cjs.contractHandlers.get(parsed.type);
+  const handler = chunkV2TOHHPW_cjs.contractHandlers.get(parsed.type);
   if (!handler) {
     throw new Error(`No handler registered for contract type '${parsed.type}'`);
   }
@@ -20173,9 +20870,9 @@ function contractFromArkContract(encoded, options = {}) {
     metadata: options.metadata
   };
 }
-function contractFromArkContractWithAddress(encoded, serverPubKey, addressPrefix = chunkE7HB3GKK_cjs.DEFAULT_NETWORK.hrp, options = {}) {
+function contractFromArkContractWithAddress(encoded, serverPubKey, addressPrefix = chunkOWCPXRGP_cjs.DEFAULT_NETWORK.hrp, options = {}) {
   const parsed = decodeArkContract(encoded);
-  const handler = chunkIEMPH7J6_cjs.contractHandlers.getOrThrow(parsed.type);
+  const handler = chunkV2TOHHPW_cjs.contractHandlers.getOrThrow(parsed.type);
   const params = parsed.data;
   const vtxoScript = handler.createScript(params);
   return {
@@ -20195,10 +20892,13 @@ function isArkContract(str) {
 
 exports.ARKADE_MAGIC = ARKADE_MAGIC;
 exports.ActivityRegistry = ActivityRegistry;
+exports.AmbiguousRouteError = AmbiguousRouteError;
 exports.ArkNote = ArkNote;
 exports.ArkadeCash = ArkadeCash;
 exports.ArkadeCashCreateError = ArkadeCashCreateError;
 exports.AssetManager = AssetManager;
+exports.BIP21 = BIP21;
+exports.BIP21Error = BIP21Error;
 exports.ChainedTxType = ChainedTxType;
 exports.ContractManager = ContractManager;
 exports.ContractRepositoryImpl = ContractRepositoryImpl;
@@ -20209,6 +20909,7 @@ exports.DelegateManagerImpl = DelegateManagerImpl;
 exports.DelegateNotConfiguredError = DelegateNotConfiguredError;
 exports.DelegatorManagerImpl = DelegatorManagerImpl;
 exports.DelegatorNotConfiguredError = DelegatorNotConfiguredError;
+exports.DescriptorIdentity = DescriptorIdentity;
 exports.DescriptorSigningProviderMissingError = DescriptorSigningProviderMissingError;
 exports.DustChangeError = DustChangeError;
 exports.ELECTRUM_TCP_HOST = ELECTRUM_TCP_HOST;
@@ -20240,6 +20941,7 @@ exports.MissingSigningDescriptorError = MissingSigningDescriptorError;
 exports.MnemonicIdentity = MnemonicIdentity;
 exports.OnchainWallet = OnchainWallet;
 exports.P2A = P2A;
+exports.PaymentRouter = PaymentRouter;
 exports.Ramps = Ramps;
 exports.ReadonlyAssetManager = ReadonlyAssetManager;
 exports.ReadonlyDescriptorIdentity = ReadonlyDescriptorIdentity;
@@ -20265,19 +20967,27 @@ exports.WalletMessageHandler = WalletMessageHandler;
 exports.WalletNotInitializedError = WalletNotInitializedError;
 exports.WalletRepositoryImpl = WalletRepositoryImpl;
 exports.WsElectrumChainSource = WsElectrumChainSource;
+exports.arkRail = arkRail;
+exports.arkTarget = arkTarget;
 exports.arkade_exports = arkade_exports;
 exports.assertIntentIdUnique = assertIntentIdUnique;
+exports.assertSendableAmount = assertSendableAmount;
+exports.assertSubmittedArkTxid = assertSubmittedArkTxid;
+exports.assetMintResolver = assetMintResolver;
 exports.boardingResolver = boardingResolver;
+exports.btcTarget = btcTarget;
 exports.buildForfeitTx = buildForfeitTx;
 exports.buildOffchainTx = buildOffchainTx;
 exports.classifyAgainstSignerSet = classifyAgainstSignerSet;
 exports.classifyContractSigner = classifyContractSigner;
 exports.closeDatabase = closeDatabase;
+exports.collabExitResolver = collabExitResolver;
 exports.combineTapscriptSigs = combineTapscriptSigs;
 exports.contractFromArkContract = contractFromArkContract;
 exports.contractFromArkContractWithAddress = contractFromArkContractWithAddress;
 exports.createAssetPacket = createAssetPacket;
 exports.createDefaultActivityRegistry = createDefaultActivityRegistry;
+exports.createDefaultPaymentRouter = createDefaultPaymentRouter;
 exports.createExitChainResolver = createExitChainResolver;
 exports.decodeArkContract = decodeArkContract;
 exports.deserializeAssets = deserializeAssets;
@@ -20292,22 +21002,31 @@ exports.hasBoardingTxExpired = hasBoardingTxExpired;
 exports.hasCandidates = hasCandidates;
 exports.intentMatchesFilter = intentMatchesFilter;
 exports.intentPageBounds = intentPageBounds;
+exports.invoiceTarget = invoiceTarget;
 exports.isArkContract = isArkContract;
 exports.isBatchSignable = isBatchSignable;
+exports.isBtcAddress = isBtcAddress;
 exports.isCooperativelyMigratable = isCooperativelyMigratable;
 exports.isDiscoverable = isDiscoverable;
+exports.isHDDeterministicSignCapable = isHDDeterministicSignCapable;
+exports.isHDWalletCapable = isHDWalletCapable;
+exports.isLightningInvoice = isLightningInvoice;
+exports.isLnurl = isLnurl;
 exports.isMessageBusInitializingError = isMessageBusInitializingError;
 exports.isMessageBusNotInitializedError = isMessageBusNotInitializedError;
-exports.isRetryableProviderError = isRetryableProviderError;
 exports.isSubdust = isSubdust;
 exports.isTerminalIntentState = isTerminalIntentState;
 exports.isValidArkAddress = isValidArkAddress;
 exports.isVtxoExpiringSoon = isVtxoExpiringSoon;
 exports.isVtxoForScript = isVtxoForScript;
+exports.makeHandle = makeHandle;
+exports.matchServerCheckpoints = matchServerCheckpoints;
 exports.mergeChainedTxType = mergeChainedTxType;
 exports.migrateWalletRepository = migrateWalletRepository;
+exports.onchainRail = onchainRail;
 exports.openDatabase = openDatabase;
 exports.requiresMigration = requiresMigration;
+exports.resolveSendAmount = resolveSendAmount;
 exports.rollbackMigration = rollbackMigration;
 exports.saveVtxosForContract = saveVtxosForContract;
 exports.scriptFromArkAddress = scriptFromArkAddress;
@@ -20320,10 +21039,11 @@ exports.serializeVtxo = serializeVtxo;
 exports.setupServiceWorker = setupServiceWorker;
 exports.signerSetFromInfo = signerSetFromInfo;
 exports.toXOnlySignerHex = toXOnlySignerHex;
+exports.tryResolveSendAmount = tryResolveSendAmount;
 exports.validateConnectorsTxGraph = validateConnectorsTxGraph;
 exports.validateVtxoTxGraph = validateVtxoTxGraph;
 exports.verifyTapscriptSignatures = verifyTapscriptSignatures;
 exports.waitForIncomingFunds = waitForIncomingFunds;
 exports.warnAndFilterVtxosForScript = warnAndFilterVtxosForScript;
-//# sourceMappingURL=chunk-3YC3LQ2E.cjs.map
-//# sourceMappingURL=chunk-3YC3LQ2E.cjs.map
+//# sourceMappingURL=chunk-ZPL34T2Q.cjs.map
+//# sourceMappingURL=chunk-ZPL34T2Q.cjs.map