@arkade-os/sdk 0.4.54 → 0.4.56

package/dist/{chunk-D5LUPJJP.cjs → chunk-ENRRZFZ4.cjs}

@@ -1,8 +1,8 @@
 'use strict';
 
-var chunkRNECH3TA_cjs = require('./chunk-RNECH3TA.cjs');
-var chunk53XNU2EL_cjs = require('./chunk-53XNU2EL.cjs');
-var chunkGMUVWKOK_cjs = require('./chunk-GMUVWKOK.cjs');
+var chunk24YNIQSW_cjs = require('./chunk-24YNIQSW.cjs');
+var chunk37XKN5DZ_cjs = require('./chunk-37XKN5DZ.cjs');
+var chunkCDWLZQQW_cjs = require('./chunk-CDWLZQQW.cjs');
 var chunk5BLDMQED_cjs = require('./chunk-5BLDMQED.cjs');
 var utils_js = require('@scure/btc-signer/utils.js');
 var btcSigner = require('@scure/btc-signer');
@@ -188,7 +188,7 @@ var TreeSignerSession = class _TreeSignerSession {
     noncesByPubkey.set(base.hex.encode(myPublicKey.subarray(1)), myNonce);
     const tx = this.graph.find(txid);
     if (!tx) throw new Error(`missing tx for txid ${txid}`);
-    const cosigners = chunkGMUVWKOK_cjs.getArkPsbtFields(tx.root, 0, chunkGMUVWKOK_cjs.CosignerPublicKey).map(
+    const cosigners = chunkCDWLZQQW_cjs.getArkPsbtFields(tx.root, 0, chunkCDWLZQQW_cjs.CosignerPublicKey).map(
       (c) => base.hex.encode(c.key.subarray(1))
       // xonly pubkey
     );
@@ -240,7 +240,7 @@ var TreeSignerSession = class _TreeSignerSession {
     if (!aggNonce) throw new Error("missing aggregate nonce");
     const prevoutAmounts = [];
     const prevoutScripts = [];
-    const cosigners = chunkGMUVWKOK_cjs.getArkPsbtFields(g.root, 0, chunkGMUVWKOK_cjs.CosignerPublicKey).map((c) => c.key);
+    const cosigners = chunkCDWLZQQW_cjs.getArkPsbtFields(g.root, 0, chunkCDWLZQQW_cjs.CosignerPublicKey).map((c) => c.key);
     const { finalKey } = aggregateKeys(cosigners, true, {
       taprootTweak: this.scriptRoot
     });
@@ -419,7 +419,7 @@ var SeedIdentity = class _SeedIdentity {
     let network;
     if ("descriptor" in opts && typeof opts.descriptor === "string") {
       descriptor = opts.descriptor;
-      network = chunk53XNU2EL_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
+      network = chunk37XKN5DZ_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
     } else {
       network = opts.isMainnet ?? true ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
       descriptor = descriptorsScure.scriptExpressions.trBIP32({
@@ -504,7 +504,7 @@ var SeedIdentity = class _SeedIdentity {
    * `StaticDescriptorProvider` for legacy single-key wallets.
    */
   isOurs(descriptor) {
-    return chunk53XNU2EL_cjs.descriptorIsOurs(descriptor, this.descriptor, utils_js.pubSchnorr(this.derivedKey));
+    return chunk37XKN5DZ_cjs.descriptorIsOurs(descriptor, this.descriptor, utils_js.pubSchnorr(this.derivedKey));
   }
   /**
    * Signs each request with the key derived from its descriptor.
@@ -539,9 +539,21 @@ var SeedIdentity = class _SeedIdentity {
     const key = this.derivePrivateKeyForDescriptor(descriptor);
     return this.signMessageWithKey(key, message, signatureType);
   }
+  /**
+   * BIP-340 sign `messageHash` with the key derived from `descriptor`,
+   * aux_rand = 0. Backs {@link DescriptorIdentity.signSchnorrDeterministic},
+   * which swap preimage derivation reads through.
+   */
+  async signSchnorrDeterministicWithDescriptor(descriptor, messageHash) {
+    if (!this.isOurs(descriptor)) {
+      throw new Error(`Descriptor ${descriptor} does not belong to this identity`);
+    }
+    const key = this.derivePrivateKeyForDescriptor(descriptor);
+    return secp256k1.schnorr.signAsync(messageHash, key, new Uint8Array(32));
+  }
   // ── internal helpers ─────────────────────────────────────────────
   derivePrivateKeyForDescriptor(descriptor) {
-    const network = chunk53XNU2EL_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
+    const network = chunk37XKN5DZ_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
     const expansion = descriptorsScure.expand({ descriptor, network });
     if (expansion.isRanged) {
       throw new Error(
@@ -627,7 +639,7 @@ var ReadonlyDescriptorIdentity = class _ReadonlyDescriptorIdentity {
    */
   descriptor;
   constructor(descriptor) {
-    const network = chunk53XNU2EL_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
+    const network = chunk37XKN5DZ_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
     let expansion;
     try {
       expansion = descriptorsScure.expand({ descriptor, network, index: 0 });
@@ -677,7 +689,7 @@ var ReadonlyDescriptorIdentity = class _ReadonlyDescriptorIdentity {
    * `StaticDescriptorProvider` for legacy single-key wallets.
    */
   isOurs(descriptor) {
-    return chunk53XNU2EL_cjs.descriptorIsOurs(descriptor, this.descriptor, this.indexZero.pubkey);
+    return chunk37XKN5DZ_cjs.descriptorIsOurs(descriptor, this.descriptor, this.indexZero.pubkey);
   }
 };
 function serializeSeedOwnedSigningIdentity(identity) {
@@ -825,6 +837,59 @@ function assertValidSerializedIdentity(s) {
   }
 }
 
+// src/identity/descriptorIdentity.ts
+function isHDDeterministicSignCapable(value) {
+  return typeof value === "object" && value !== null && typeof value.signSchnorrDeterministicWithDescriptor === "function";
+}
+var DescriptorIdentity = class {
+  descriptor;
+  signer;
+  base;
+  constructor({ descriptor, signer, base }) {
+    this.descriptor = descriptor;
+    this.signer = signer;
+    this.base = base;
+  }
+  async xOnlyPublicKey() {
+    return chunk37XKN5DZ_cjs.deriveDescriptorLeafPubKey(this.descriptor);
+  }
+  async compressedPublicKey() {
+    return chunk37XKN5DZ_cjs.deriveDescriptorLeafCompressedPubKey(this.descriptor);
+  }
+  async sign(tx, inputIndexes) {
+    const [signed] = await this.signer.signWithDescriptor([
+      { descriptor: this.descriptor, tx, inputIndexes }
+    ]);
+    if (!signed) {
+      throw new Error(`Descriptor signer returned no transaction for ${this.descriptor}`);
+    }
+    return signed;
+  }
+  async signMessage(message, signatureType = "schnorr") {
+    return this.signer.signMessageWithDescriptor(this.descriptor, message, signatureType);
+  }
+  /**
+   * Delegated: `TreeSignerSession.random()` consults no key material, so the
+   * session is index-independent.
+   */
+  signerSession() {
+    return this.base.signerSession();
+  }
+  /**
+   * Throws rather than falling back to the baseline key: a preimage derived
+   * from the wrong index is unrecoverable, and callers probe this member
+   * through a structural guard that cannot tell the two apart.
+   */
+  async signSchnorrDeterministic(messageHash) {
+    if (!isHDDeterministicSignCapable(this.base)) {
+      throw new Error(
+        `Identity cannot sign deterministically for descriptor ${this.descriptor}`
+      );
+    }
+    return this.base.signSchnorrDeterministicWithDescriptor(this.descriptor, messageHash);
+  }
+};
+
 // src/identity/hdCapableIdentity.ts
 function isHDCapableIdentity(value) {
   if (typeof value !== "object" || value === null) return false;
@@ -837,6 +902,13 @@ function isBatchSignable(identity) {
   return "signMultiple" in identity && typeof identity.signMultiple === "function";
 }
 
+// src/wallet/hdWalletCapable.ts
+function isHDWalletCapable(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const v = value;
+  return typeof v.getCurrentSigningDescriptor === "function" && typeof v.getUsedSigningDescriptors === "function" && typeof v.signerForDescriptor === "function";
+}
+
 // src/worker/browser/service-worker-manager.ts
 var registrations = /* @__PURE__ */ new Map();
 var handshakes = /* @__PURE__ */ new WeakSet();
@@ -989,14 +1061,14 @@ var RestDelegateProvider = class {
    */
   async delegate(intent, forfeitTxs, options) {
     const url = `${this.url}/v1/delegate`;
-    const response = await chunkGMUVWKOK_cjs.baseFetch(url, {
+    const response = await chunkCDWLZQQW_cjs.baseFetch(url, {
       method: "POST",
       headers: {
         "Content-Type": "application/json"
       },
       body: JSON.stringify({
         intent: {
-          message: chunkGMUVWKOK_cjs.Intent.encodeMessage(intent.message),
+          message: chunkCDWLZQQW_cjs.Intent.encodeMessage(intent.message),
           proof: intent.proof
         },
         forfeit_txs: forfeitTxs,
@@ -1016,7 +1088,7 @@ var RestDelegateProvider = class {
    */
   async getDelegateInfo() {
     const url = `${this.url}/v1/delegator/info`;
-    const response = await chunkGMUVWKOK_cjs.rateGate.runHttp(url, () => chunkGMUVWKOK_cjs.baseFetch(url));
+    const response = await chunkCDWLZQQW_cjs.rateGate.runHttp(url, () => chunkCDWLZQQW_cjs.baseFetch(url));
     if (!response.ok) {
       const errorText2 = await response.text();
       throw new Error(`Failed to get delegate info: ${errorText2}`);
@@ -1043,7 +1115,7 @@ var ESPLORA_URL = {
   regtest: "http://localhost:3000/api"
 };
 var EsploraProvider = class {
-  constructor(baseUrl = ESPLORA_URL[chunkGMUVWKOK_cjs.DEFAULT_NETWORK_NAME], opts) {
+  constructor(baseUrl = ESPLORA_URL[chunkCDWLZQQW_cjs.DEFAULT_NETWORK_NAME], opts) {
     this.baseUrl = baseUrl;
     this.pollingInterval = opts?.pollingInterval ?? 15e3;
     this.forcePolling = opts?.forcePolling ?? false;
@@ -1052,14 +1124,14 @@ var EsploraProvider = class {
   pollingInterval;
   forcePolling;
   async getCoins(address) {
-    const response = await chunkGMUVWKOK_cjs.baseFetch(`${this.baseUrl}/address/${address}/utxo`);
+    const response = await chunkCDWLZQQW_cjs.baseFetch(`${this.baseUrl}/address/${address}/utxo`);
     if (!response.ok) {
       throw new Error(`Failed to fetch UTXOs: ${response.statusText}`);
     }
     return response.json();
   }
   async getFeeRate() {
-    const response = await chunkGMUVWKOK_cjs.baseFetch(`${this.baseUrl}/fee-estimates`);
+    const response = await chunkCDWLZQQW_cjs.baseFetch(`${this.baseUrl}/fee-estimates`);
     if (response.status === 404) {
       return void 0;
     }
@@ -1080,7 +1152,7 @@ var EsploraProvider = class {
     }
   }
   async getTxOutspends(txid) {
-    const response = await chunkGMUVWKOK_cjs.baseFetch(`${this.baseUrl}/tx/${txid}/outspends`);
+    const response = await chunkCDWLZQQW_cjs.baseFetch(`${this.baseUrl}/tx/${txid}/outspends`);
     if (!response.ok) {
       const error = await response.text();
       throw new Error(`Failed to get transaction outspends: ${error}`);
@@ -1088,7 +1160,7 @@ var EsploraProvider = class {
     return response.json();
   }
   async getTransactions(address) {
-    const response = await chunkGMUVWKOK_cjs.baseFetch(`${this.baseUrl}/address/${address}/txs`);
+    const response = await chunkCDWLZQQW_cjs.baseFetch(`${this.baseUrl}/address/${address}/txs`);
     if (!response.ok) {
       const error = await response.text();
       throw new Error(`Failed to get transactions: ${error}`);
@@ -1096,7 +1168,7 @@ var EsploraProvider = class {
     return response.json();
   }
   async getTxStatus(txid) {
-    const txresponse = await chunkGMUVWKOK_cjs.baseFetch(`${this.baseUrl}/tx/${txid}`);
+    const txresponse = await chunkCDWLZQQW_cjs.baseFetch(`${this.baseUrl}/tx/${txid}`);
     if (!txresponse.ok) {
       throw new Error(txresponse.statusText);
     }
@@ -1104,7 +1176,7 @@ var EsploraProvider = class {
     if (!tx.status.confirmed) {
       return { confirmed: false };
     }
-    const response = await chunkGMUVWKOK_cjs.baseFetch(`${this.baseUrl}/tx/${txid}/status`);
+    const response = await chunkCDWLZQQW_cjs.baseFetch(`${this.baseUrl}/tx/${txid}/status`);
     if (!response.ok) {
       throw new Error(`Failed to get transaction status: ${response.statusText}`);
     }
@@ -1188,7 +1260,7 @@ var EsploraProvider = class {
     return stopFunc;
   }
   async getChainTip() {
-    const tipBlocks = await chunkGMUVWKOK_cjs.baseFetch(`${this.baseUrl}/blocks`);
+    const tipBlocks = await chunkCDWLZQQW_cjs.baseFetch(`${this.baseUrl}/blocks`);
     if (!tipBlocks.ok) {
       throw new Error(`Failed to get chain tip: ${tipBlocks.statusText}`);
     }
@@ -1207,7 +1279,7 @@ var EsploraProvider = class {
     };
   }
   async broadcastPackage(parent, child) {
-    const response = await chunkGMUVWKOK_cjs.baseFetch(`${this.baseUrl}/txs/package`, {
+    const response = await chunkCDWLZQQW_cjs.baseFetch(`${this.baseUrl}/txs/package`, {
       method: "POST",
       headers: {
         "Content-Type": "application/json"
@@ -1221,7 +1293,7 @@ var EsploraProvider = class {
     return response.json();
   }
   async broadcastTx(tx) {
-    const response = await chunkGMUVWKOK_cjs.baseFetch(`${this.baseUrl}/tx`, {
+    const response = await chunkCDWLZQQW_cjs.baseFetch(`${this.baseUrl}/tx`, {
       method: "POST",
       headers: {
         "Content-Type": "text/plain"
@@ -1383,7 +1455,7 @@ function findP2AOutput(tx) {
 var CHILD_DUST_AMOUNT = 546;
 function buildAnchorChild(params) {
   const { parent, feeRate, fundingCoins, changeAddress, tapInternalKey, network } = params;
-  const child = new chunkGMUVWKOK_cjs.Transaction({ version: 3, allowLegacyWitnessUtxo: true });
+  const child = new chunkCDWLZQQW_cjs.Transaction({ version: 3, allowLegacyWitnessUtxo: true });
   child.addInput(findP2AOutput(parent));
   const estimator = TxWeightEstimator.create().addP2AInput();
   for (const _ of fundingCoins) {
@@ -1431,7 +1503,7 @@ function buildForfeitTx(inputs, forfeitPkScript, txLocktime) {
   );
 }
 function buildForfeitTxWithOutput(inputs, output, txLocktime) {
-  const tx = new chunkGMUVWKOK_cjs.Transaction({
+  const tx = new chunkCDWLZQQW_cjs.Transaction({
     version: 3,
     lockTime: txLocktime
   });
@@ -1507,7 +1579,7 @@ function validateVtxoTxGraph(graph, roundTransaction, sweepTapTreeRoot) {
       if (previousScriptKey.length !== 32) {
         throw new Error(`parent output ${childIndex} has invalid script`);
       }
-      const cosigners = chunkGMUVWKOK_cjs.getArkPsbtFields(child.root, 0, chunkGMUVWKOK_cjs.CosignerPublicKey);
+      const cosigners = chunkCDWLZQQW_cjs.getArkPsbtFields(child.root, 0, chunkCDWLZQQW_cjs.CosignerPublicKey);
       if (cosigners.length === 0) {
         throw ErrMissingCosignersPublicKeys;
       }
@@ -1565,7 +1637,7 @@ var EmulatorPacket = class _EmulatorPacket {
     return new _EmulatorPacket(entries);
   }
   static fromBytes(data) {
-    const reader = new chunkRNECH3TA_cjs.BufferReader(data);
+    const reader = new chunk24YNIQSW_cjs.BufferReader(data);
     const entryCount = reader.readCompactSize();
     const entries = [];
     for (let i = 0; i < entryCount; i++) {
@@ -1583,7 +1655,7 @@ var EmulatorPacket = class _EmulatorPacket {
     return _EmulatorPacket.PACKET_TYPE;
   }
   serialize() {
-    const writer = new chunkRNECH3TA_cjs.BufferWriter();
+    const writer = new chunk24YNIQSW_cjs.BufferWriter();
     writer.writeCompactSize(this.entries.length);
     for (const entry of this.entries) {
       writer.writeUint16LE(entry.vin);
@@ -1670,7 +1742,7 @@ var Extension = class _Extension {
         `expected magic prefix ${base.hex.encode(ARKADE_MAGIC)}, got ${base.hex.encode(payload.slice(0, Math.min(payload.length, ARKADE_MAGIC.length)))}`
       );
     }
-    const reader = new chunkRNECH3TA_cjs.BufferReader(payload.slice(ARKADE_MAGIC.length));
+    const reader = new chunk24YNIQSW_cjs.BufferReader(payload.slice(ARKADE_MAGIC.length));
     const packets = [];
     while (reader.remaining() > 0) {
       const packetType = reader.readByte();
@@ -1744,7 +1816,7 @@ var Extension = class _Extension {
    */
   getAssetPacket() {
     for (const p of this.packets) {
-      if (p instanceof chunkRNECH3TA_cjs.Packet) {
+      if (p instanceof chunk24YNIQSW_cjs.Packet) {
         return p;
       }
     }
@@ -1782,8 +1854,8 @@ var Extension = class _Extension {
 };
 function parsePacket(packetType, data) {
   switch (packetType) {
-    case chunkRNECH3TA_cjs.Packet.PACKET_TYPE:
-      return chunkRNECH3TA_cjs.Packet.fromBytes(data);
+    case chunk24YNIQSW_cjs.Packet.PACKET_TYPE:
+      return chunk24YNIQSW_cjs.Packet.fromBytes(data);
     case EmulatorPacket.PACKET_TYPE:
       return EmulatorPacket.fromBytes(data);
     default:
@@ -1830,21 +1902,35 @@ function buildOpReturnScript(data) {
   }
   return script;
 }
-var ErrOffchainOutputNotFound = (address) => new Error(`offchain send output not found: ${address}`);
-var ErrInvalidAssetOutputAmount = (got, want, assetId) => new Error(`invalid asset output amount for ${assetId}: got ${got}, want ${want}`);
-var ErrAssetGroupNotFound = (assetId) => new Error(`asset group not found in batch leaf: ${assetId}`);
-var ErrAssetOutputNotFound = (assetId, outputIndex) => new Error(`asset output not found in asset group ${assetId} at index ${outputIndex}`);
+var ErrOffchainOutputNotFound = (address) => new chunkCDWLZQQW_cjs.ServerResponseMismatchError(`offchain send output not found: ${address}`);
+var ErrInvalidAssetOutputAmount = (got, want, assetId) => new chunkCDWLZQQW_cjs.ServerResponseMismatchError(
+  `invalid asset output amount for ${assetId}: got ${got}, want ${want}`
+);
+var ErrAssetGroupNotFound = (assetId) => new chunkCDWLZQQW_cjs.ServerResponseMismatchError(`asset group not found in batch leaf: ${assetId}`);
+var ErrAssetOutputNotFound = (assetId, outputIndex) => new chunkCDWLZQQW_cjs.ServerResponseMismatchError(
+  `asset output not found in asset group ${assetId} at index ${outputIndex}`
+);
+var ErrOnchainOutputNotFound = (address) => new chunkCDWLZQQW_cjs.ServerResponseMismatchError(`onchain output not found: ${address}`);
+var ErrUnvalidatedOffchainOutput = (address) => new chunkCDWLZQQW_cjs.ServerResponseMismatchError(
+  `offchain output ${address} cannot be validated: virtual output tree signing did not run`
+);
 var ErrInvalidOnchainOutputAmount = (address) => new Error(`invalid onchain output amount: ${address}`);
 var ErrInvalidOnchainOutputAssets = (address) => new Error(`onchain output ${address} cannot have assets`);
-var ErrOnchainOutputNotFound = (address) => new Error(`onchain output not found: ${address}`);
 var ErrInvalidOffchainOutputAmount = (address) => new Error(`invalid offchain output ${address}, missing amount`);
+function assertFinalCommitmentMatchesValidated(finalCommitmentTx, validatedCommitmentTxid, context) {
+  if (!validatedCommitmentTxid) return;
+  if (finalCommitmentTx.id === validatedCommitmentTxid) return;
+  throw new chunkCDWLZQQW_cjs.ServerResponseMismatchError(
+    `${context}: finalization commitment tx ${finalCommitmentTx.id} differs from the validated commitment tx ${validatedCommitmentTxid}`
+  );
+}
 function validateBatchRecipients(commitmentTx, vtxoTreeLeaves, recipients, network) {
   const usedOutputs = /* @__PURE__ */ new Set();
   const usedOnchainOutputs = /* @__PURE__ */ new Set();
   for (const recipient of recipients) {
     let arkAddress;
     try {
-      arkAddress = chunkGMUVWKOK_cjs.ArkAddress.decode(recipient.address);
+      arkAddress = chunkCDWLZQQW_cjs.ArkAddress.decode(recipient.address);
     } catch {
       validateOnchainRecipient(commitmentTx, recipient, network, usedOnchainOutputs);
       continue;
@@ -1852,6 +1938,18 @@ function validateBatchRecipients(commitmentTx, vtxoTreeLeaves, recipients, netwo
     validateOffchainRecipient(vtxoTreeLeaves, arkAddress, recipient, usedOutputs);
   }
 }
+function validateBatchRecipientsWithoutTree(commitmentTx, recipients, network) {
+  const usedOnchainOutputs = /* @__PURE__ */ new Set();
+  for (const recipient of recipients) {
+    try {
+      chunkCDWLZQQW_cjs.ArkAddress.decode(recipient.address);
+    } catch {
+      validateOnchainRecipient(commitmentTx, recipient, network, usedOnchainOutputs);
+      continue;
+    }
+    throw ErrUnvalidatedOffchainOutput(recipient.address);
+  }
+}
 function validateOnchainRecipient(commitmentTx, recipient, network, usedOutputs) {
   const addr = btcSigner.Address(network).decode(recipient.address);
   const expectedPkScript = btcSigner.OutScript.encode(addr);
@@ -1944,8 +2042,6 @@ function validateAssetGroupOutput(packet, outputIndex, assetId, expectedAmount)
     throw ErrInvalidAssetOutputAmount(assetOutput.amount, expectedAmount, assetId);
   }
 }
-
-// src/wallet/activity.ts
 async function buildActivities(txs, resolvers) {
   const preparedResolvers = (await Promise.all(
     resolvers.map(async (r) => {
@@ -2055,9 +2151,49 @@ function boardingResolver() {
     }
   };
 }
+function collabExitResolver() {
+  return {
+    id: "collab-exit",
+    resolve(tx) {
+      if (tx.tag !== "exit" || !tx.key.commitmentTxid) return void 0;
+      return [
+        {
+          groupId: `exit:${tx.key.commitmentTxid}`,
+          label: "Collaborative exit",
+          kind: "exit"
+        }
+      ];
+    }
+  };
+}
+function assetMintResolver() {
+  return {
+    id: "asset-mint",
+    resolve(tx) {
+      if (!tx.assets?.length || !tx.key.arkTxid) return void 0;
+      const minted = tx.assets.filter((a) => {
+        try {
+          return base.hex.encode(chunk24YNIQSW_cjs.AssetId.fromString(a.assetId).txid) === tx.key.arkTxid;
+        } catch {
+          return false;
+        }
+      });
+      if (minted.length === 0) return void 0;
+      const received = tx.type === "RECEIVED" /* TxReceived */;
+      return minted.map((a) => ({
+        groupId: `mint:${a.assetId}`,
+        label: received ? "Asset receive" : "Asset mint",
+        kind: received ? "asset-receive" : "asset-mint",
+        metadata: { assetId: a.assetId, amount: a.amount.toString() }
+      }));
+    }
+  };
+}
 function createDefaultActivityRegistry() {
   const registry = new ActivityRegistry();
   registry.use(boardingResolver());
+  registry.use(collabExitResolver());
+  registry.use(assetMintResolver());
   return registry;
 }
 
@@ -2080,7 +2216,7 @@ function createAssetPacket(assetInputs, receivers, changeReceiver) {
       const existing = inputsByAssetId.get(asset.assetId);
       inputsByAssetId.set(asset.assetId, [
         ...existing ?? [],
-        chunkRNECH3TA_cjs.AssetInput.create(inputIndex, asset.amount)
+        chunk24YNIQSW_cjs.AssetInput.create(inputIndex, asset.amount)
       ]);
     }
   }
@@ -2092,7 +2228,7 @@ function createAssetPacket(assetInputs, receivers, changeReceiver) {
         const existing = outputsByAssetId.get(asset.assetId);
         outputsByAssetId.set(asset.assetId, [
           ...existing ?? [],
-          chunkRNECH3TA_cjs.AssetOutput.create(outputIndex, asset.amount)
+          chunk24YNIQSW_cjs.AssetOutput.create(outputIndex, asset.amount)
         ]);
       }
     }
@@ -2103,7 +2239,7 @@ function createAssetPacket(assetInputs, receivers, changeReceiver) {
       const existing = outputsByAssetId.get(asset.assetId);
       outputsByAssetId.set(asset.assetId, [
         ...existing ?? [],
-        chunkRNECH3TA_cjs.AssetOutput.create(outputIndex, asset.amount)
+        chunk24YNIQSW_cjs.AssetOutput.create(outputIndex, asset.amount)
       ]);
     }
   }
@@ -2112,11 +2248,11 @@ function createAssetPacket(assetInputs, receivers, changeReceiver) {
   for (const assetIdStr of allAssetIds) {
     const inputs = inputsByAssetId.get(assetIdStr);
     const outputs = outputsByAssetId.get(assetIdStr);
-    const assetId = chunkRNECH3TA_cjs.AssetId.fromString(assetIdStr);
-    const group = chunkRNECH3TA_cjs.AssetGroup.create(assetId, null, inputs ?? [], outputs ?? [], []);
+    const assetId = chunk24YNIQSW_cjs.AssetId.fromString(assetIdStr);
+    const group = chunk24YNIQSW_cjs.AssetGroup.create(assetId, null, inputs ?? [], outputs ?? [], []);
     groups.push(group);
   }
-  return chunkRNECH3TA_cjs.Packet.create(groups);
+  return chunk24YNIQSW_cjs.Packet.create(groups);
 }
 function selectCoinsWithAsset(coins, assetId, requiredAmount) {
   const coinsWithAsset = coins.filter((coin) => coin.assets?.some((a) => a.assetId === assetId));
@@ -2221,8 +2357,8 @@ function buildOffchainTx(inputs, outputs, serverUnrollScript) {
 function buildVirtualTx(inputs, outputs) {
   let lockTime = 0n;
   for (const input of inputs) {
-    const tapscript = chunkGMUVWKOK_cjs.decodeTapscript(chunkGMUVWKOK_cjs.scriptFromTapLeafScript(input.tapLeafScript));
-    if (chunkGMUVWKOK_cjs.CLTVMultisigTapscript.is(tapscript)) {
+    const tapscript = chunkCDWLZQQW_cjs.decodeTapscript(chunkCDWLZQQW_cjs.scriptFromTapLeafScript(input.tapLeafScript));
+    if (chunkCDWLZQQW_cjs.CLTVMultisigTapscript.is(tapscript)) {
       if (lockTime !== 0n) {
         if (isSeconds(lockTime) !== isSeconds(tapscript.params.absoluteTimelock)) {
           throw new Error("cannot mix seconds and blocks locktime");
@@ -2233,7 +2369,7 @@ function buildVirtualTx(inputs, outputs) {
       }
     }
   }
-  const tx = new chunkGMUVWKOK_cjs.Transaction({
+  const tx = new chunkCDWLZQQW_cjs.Transaction({
     version: 3,
     lockTime: Number(lockTime)
   });
@@ -2243,12 +2379,12 @@ function buildVirtualTx(inputs, outputs) {
       index: input.vout,
       sequence: lockTime ? btcSigner.DEFAULT_SEQUENCE - 1 : void 0,
       witnessUtxo: {
-        script: chunkGMUVWKOK_cjs.VtxoScript.decode(input.tapTree).pkScript,
+        script: chunkCDWLZQQW_cjs.VtxoScript.decode(input.tapTree).pkScript,
         amount: BigInt(input.value)
       },
       tapLeafScript: [input.tapLeafScript]
     });
-    chunkGMUVWKOK_cjs.setArkPsbtField(tx, i, chunkGMUVWKOK_cjs.VtxoTaprootTree, input.tapTree);
+    chunkCDWLZQQW_cjs.setArkPsbtField(tx, i, chunkCDWLZQQW_cjs.VtxoTaprootTree, input.tapTree);
   }
   for (const output of outputs) {
     tx.addOutput(output);
@@ -2257,8 +2393,8 @@ function buildVirtualTx(inputs, outputs) {
   return tx;
 }
 function buildCheckpointTx(vtxo, serverUnrollScript) {
-  const collaborativeClosure = chunkGMUVWKOK_cjs.decodeTapscript(chunkGMUVWKOK_cjs.scriptFromTapLeafScript(vtxo.tapLeafScript));
-  const checkpointVtxoScript = new chunkGMUVWKOK_cjs.VtxoScript([
+  const collaborativeClosure = chunkCDWLZQQW_cjs.decodeTapscript(chunkCDWLZQQW_cjs.scriptFromTapLeafScript(vtxo.tapLeafScript));
+  const checkpointVtxoScript = new chunkCDWLZQQW_cjs.VtxoScript([
     serverUnrollScript.script,
     collaborativeClosure.script
   ]);
@@ -2411,12 +2547,76 @@ function combineTapscriptSigs(signedTx, originalTx) {
 }
 function isValidArkAddress(address) {
   try {
-    chunkGMUVWKOK_cjs.ArkAddress.decode(address);
+    chunkCDWLZQQW_cjs.ArkAddress.decode(address);
     return true;
   } catch (e) {
     return false;
   }
 }
+function matchServerCheckpoints(serverCheckpointTxs, expectedCheckpoints, context) {
+  if (serverCheckpointTxs.length !== expectedCheckpoints.length) {
+    throw new chunkCDWLZQQW_cjs.ServerResponseMismatchError(
+      `${context} returned ${serverCheckpointTxs.length} checkpoints, expected ${expectedCheckpoints.length}`
+    );
+  }
+  const byTxid = new Map(expectedCheckpoints.map((c) => [c.id, c]));
+  return serverCheckpointTxs.map((encoded, index) => {
+    const server = chunkCDWLZQQW_cjs.Transaction.fromPSBT(base.base64.decode(encoded));
+    const local = byTxid.get(server.id);
+    if (!local) {
+      throw new chunkCDWLZQQW_cjs.ServerResponseMismatchError(
+        `${context} checkpoint ${index} txid ${server.id} does not match any submitted checkpoint`
+      );
+    }
+    byTxid.delete(server.id);
+    return { server, local };
+  });
+}
+function assertSubmittedArkTxid(response, signedArkTx, context) {
+  if (response.arkTxid !== signedArkTx.id) {
+    throw new chunkCDWLZQQW_cjs.ServerResponseMismatchError(
+      `${context} returned ark txid ${response.arkTxid}, expected ${signedArkTx.id}`
+    );
+  }
+  if (response.finalArkTx === void 0) return;
+  const finalTxid = chunkCDWLZQQW_cjs.Transaction.fromPSBT(base.base64.decode(response.finalArkTx)).id;
+  if (finalTxid !== signedArkTx.id) {
+    throw new chunkCDWLZQQW_cjs.ServerResponseMismatchError(
+      `${context} returned final ark tx ${finalTxid}, expected ${signedArkTx.id}`
+    );
+  }
+}
+function assertCheckpointsMatchInputs(checkpoints, inputs, unrollCandidates, context) {
+  const byOutpoint = new Map(inputs.map((input) => [`${input.txid}:${input.vout}`, input]));
+  for (const [index, checkpoint] of checkpoints.entries()) {
+    if (checkpoint.inputsLength !== 1) {
+      throw new chunkCDWLZQQW_cjs.ServerResponseMismatchError(
+        `${context}: checkpoint ${index} spends ${checkpoint.inputsLength} inputs, expected 1`
+      );
+    }
+    const spent = checkpoint.getInput(0);
+    if (!spent.txid || spent.index === void 0) {
+      throw new chunkCDWLZQQW_cjs.ServerResponseMismatchError(
+        `${context}: checkpoint ${index} has no input outpoint`
+      );
+    }
+    const outpoint = `${base.hex.encode(spent.txid)}:${spent.index}`;
+    const input = byOutpoint.get(outpoint);
+    if (!input) {
+      throw new chunkCDWLZQQW_cjs.ServerResponseMismatchError(
+        `${context}: checkpoint ${index} spends ${outpoint}, which is not one of the requested virtual outputs`
+      );
+    }
+    const rebuilt = unrollCandidates.some(
+      (unroll) => buildCheckpointTx(input, unroll).tx.id === checkpoint.id
+    );
+    if (!rebuilt) {
+      throw new chunkCDWLZQQW_cjs.ServerResponseMismatchError(
+        `${context}: checkpoint ${index} txid ${checkpoint.id} differs from the checkpoint built locally for ${outpoint}`
+      );
+    }
+  }
+}
 async function submitOffchainTx(provider, offchainTx, signer, hooks) {
   const { arkTx: signedArkTx, userSignedCheckpoints } = await signer.signArkTx(
     offchainTx.arkTx,
@@ -2428,27 +2628,26 @@ async function submitOffchainTx(provider, offchainTx, signer, hooks) {
     );
   }
   await hooks?.beforeSubmit?.();
-  const { arkTxid, signedCheckpointTxs } = await provider.submitTx(
+  const response = await provider.submitTx(
     base.base64.encode(signedArkTx.toPSBT()),
     offchainTx.checkpoints.map((c) => base.base64.encode(c.toPSBT()))
   );
-  if (signedCheckpointTxs.length !== offchainTx.checkpoints.length) {
-    throw new Error(
-      `submitTx returned ${signedCheckpointTxs.length} checkpoints, expected ${offchainTx.checkpoints.length}`
-    );
-  }
+  assertSubmittedArkTxid(response, signedArkTx, "submitTx");
+  const { arkTxid, signedCheckpointTxs } = response;
+  const matched = matchServerCheckpoints(signedCheckpointTxs, offchainTx.checkpoints, "submitTx");
   let finalCheckpoints;
   if (userSignedCheckpoints) {
-    finalCheckpoints = signedCheckpointTxs.map((c, i) => {
-      const serverSigned = chunkGMUVWKOK_cjs.Transaction.fromPSBT(base.base64.decode(c));
-      combineTapscriptSigs(userSignedCheckpoints[i], serverSigned);
-      return base.base64.encode(serverSigned.toPSBT());
+    const userByTxid = new Map(
+      userSignedCheckpoints.map((c, i) => [offchainTx.checkpoints[i].id, c])
+    );
+    finalCheckpoints = matched.map(({ server, local }) => {
+      combineTapscriptSigs(userByTxid.get(local.id), server);
+      return base.base64.encode(server.toPSBT());
     });
   } else {
     finalCheckpoints = await Promise.all(
-      signedCheckpointTxs.map(async (c) => {
-        const tx = chunkGMUVWKOK_cjs.Transaction.fromPSBT(base.base64.decode(c));
-        const signed = await signer.signCheckpoint(tx);
+      matched.map(async ({ server }) => {
+        const signed = await signer.signCheckpoint(server);
         return base.base64.encode(signed.toPSBT());
       })
     );
@@ -2646,7 +2845,7 @@ function extendCoinWithTapscript(boardingTapscript, utxo) {
   };
 }
 function deriveContractTapscripts(contract) {
-  const handler = chunk53XNU2EL_cjs.contractHandlers.get(contract.type);
+  const handler = chunk37XKN5DZ_cjs.contractHandlers.get(contract.type);
   if (!handler) {
     throw new Error(`No handler for contract type '${contract.type}'`);
   }
@@ -2717,21 +2916,41 @@ function getRandomId() {
 }
 function isValidArkAddress2(address) {
   try {
-    chunkGMUVWKOK_cjs.ArkAddress.decode(address);
+    chunkCDWLZQQW_cjs.ArkAddress.decode(address);
     return true;
   } catch (e) {
     return false;
   }
 }
-function validateRecipients(recipients, dustAmount) {
+function assertRecipientArkAddress(encoded, address, context) {
+  if (address.hrp !== context.hrp) {
+    throw new Error(
+      `Invalid Arkade address ${encoded}: expected prefix "${context.hrp}", got "${address.hrp}"`
+    );
+  }
+  const { status } = classifyAgainstSignerSet(
+    base.hex.encode(address.serverPubKey),
+    context.signerSet
+  );
+  if (status === "UNKNOWN_SIGNER") {
+    throw new Error(`Invalid Arkade address ${encoded}: unknown operator signer key`);
+  }
+  if (status === "EXPIRED") {
+    throw new Error(
+      `Invalid Arkade address ${encoded}: operator signer key is past its rotation cutoff`
+    );
+  }
+}
+function validateRecipients(recipients, dustAmount, context) {
   const validatedRecipients = [];
   for (const recipient of recipients) {
     let address;
     try {
-      address = chunkGMUVWKOK_cjs.ArkAddress.decode(recipient.address);
+      address = chunkCDWLZQQW_cjs.ArkAddress.decode(recipient.address);
     } catch (e) {
       throw new Error(`Invalid Arkade address: ${recipient.address}`);
     }
+    assertRecipientArkAddress(recipient.address, address, context);
     const amount = recipient.amount || dustAmount;
     if (amount <= 0) {
       throw new Error("Amount must be positive");
@@ -2756,7 +2975,7 @@ function selectPendingRecoveryOutpoints(contractsWithVtxos, signerSet, nowSecond
       continue;
     }
     for (const v of vtxos) {
-      if (!chunkGMUVWKOK_cjs.hasTerminalSpend(v) && !v.isSwept) out.add(`${v.txid}:${v.vout}`);
+      if (!chunkCDWLZQQW_cjs.hasTerminalSpend(v) && !v.isSwept) out.add(`${v.txid}:${v.vout}`);
     }
   }
   return out;
@@ -2789,10 +3008,10 @@ function byValueDescending(vtxos) {
   return [...vtxos].sort((a, b) => b.value - a.value);
 }
 async function fetchTimeHeight(wallet) {
-  return chunkGMUVWKOK_cjs.resolveTimeHeight(wallet.onchainProvider);
+  return chunkCDWLZQQW_cjs.resolveTimeHeight(wallet.onchainProvider);
 }
 function canMigrateBySend(vtxo, now) {
-  if (!chunkGMUVWKOK_cjs.canSpendOffchain(vtxo, now)) return false;
+  if (!chunkCDWLZQQW_cjs.canSpendOffchain(vtxo, now)) return false;
   return vtxo.expiresAt !== void 0 || vtxo.expiresAtHeight !== void 0;
 }
 function byExpiryAscending(vtxos, now) {
@@ -2800,7 +3019,7 @@ function byExpiryAscending(vtxos, now) {
     if (vtxo.isSwept) return -Infinity;
     if (vtxo.expiresAt !== void 0) return vtxo.expiresAt.getTime();
     if (vtxo.expiresAtHeight !== void 0) {
-      return chunkGMUVWKOK_cjs.isPastExpiry(vtxo, now) ? -Infinity : Infinity;
+      return chunkCDWLZQQW_cjs.isPastExpiry(vtxo, now) ? -Infinity : Infinity;
     }
     return Infinity;
   };
@@ -2837,10 +3056,10 @@ var DEFAULT_SETTLEMENT_CONFIG = {
 };
 function getRecoverableVtxos(vtxos, dustAmount, now) {
   return vtxos.filter((vtxo) => {
-    if (chunkGMUVWKOK_cjs.canRecoverOnchain(vtxo, now)) {
+    if (chunkCDWLZQQW_cjs.canRecoverOnchain(vtxo, now)) {
       return true;
     }
-    if (chunkGMUVWKOK_cjs.canSpendOffchain(vtxo, now) && vtxo.isPreconfirmed && isSubdust(vtxo, dustAmount)) {
+    if (chunkCDWLZQQW_cjs.canSpendOffchain(vtxo, now) && vtxo.isPreconfirmed && isSubdust(vtxo, dustAmount)) {
       return true;
     }
     return false;
@@ -2871,7 +3090,7 @@ function getRecoverableWithSubdust(vtxos, dustAmount, now) {
 }
 function isVtxoExpiringSoon(vtxo, thresholdMs) {
   const realThresholdMs = thresholdMs <= 100 ? DEFAULT_THRESHOLD_MS : thresholdMs;
-  const expiresAt = chunkGMUVWKOK_cjs.normalizeVtxo(vtxo).expiresAt;
+  const expiresAt = chunkCDWLZQQW_cjs.normalizeVtxo(vtxo).expiresAt;
   if (expiresAt === void 0) return false;
   const now = Date.now();
   const batchExpiry = expiresAt.getTime();
@@ -2880,7 +3099,7 @@ function isVtxoExpiringSoon(vtxo, thresholdMs) {
 }
 function getExpiringAndRecoverableVtxos(vtxos, thresholdMs, dustAmount, now) {
   return vtxos.filter(
-    (vtxo) => isVtxoExpiringSoon(vtxo, thresholdMs) || chunkGMUVWKOK_cjs.canRecoverOnchain(vtxo, now) || isSubdust(vtxo, dustAmount)
+    (vtxo) => isVtxoExpiringSoon(vtxo, thresholdMs) || chunkCDWLZQQW_cjs.canRecoverOnchain(vtxo, now) || isSubdust(vtxo, dustAmount)
   );
 }
 function isMigrationCapable(wallet) {
@@ -3362,11 +3581,11 @@ var VtxoManager = class _VtxoManager {
         `Sweep not economical: output ${outputAmount} sats after ${fee} sats fee is below dust (${dustAmount} sats)`
       );
     }
-    const tx = new chunkGMUVWKOK_cjs.Transaction();
+    const tx = new chunkCDWLZQQW_cjs.Transaction();
     for (const utxo of expiredUtxos) {
-      const utxoScript = chunkGMUVWKOK_cjs.VtxoScript.decode(utxo.tapTree);
+      const utxoScript = chunkCDWLZQQW_cjs.VtxoScript.decode(utxo.tapTree);
       const utxoExitLeaf = utxoScript.leaves.find(
-        (leaf) => chunkGMUVWKOK_cjs.CSVMultisigTapscript.isScriptValid(chunkGMUVWKOK_cjs.scriptFromTapLeafScript(leaf)) === true
+        (leaf) => chunkCDWLZQQW_cjs.CSVMultisigTapscript.isScriptValid(chunkCDWLZQQW_cjs.scriptFromTapLeafScript(leaf)) === true
       );
       if (!utxoExitLeaf) {
         throw new Error(
@@ -3381,7 +3600,7 @@ var VtxoManager = class _VtxoManager {
           amount: BigInt(utxo.value)
         },
         tapLeafScript: [utxoExitLeaf],
-        sequence: chunkGMUVWKOK_cjs.getSequence(utxoExitLeaf)
+        sequence: chunkCDWLZQQW_cjs.getSequence(utxoExitLeaf)
       });
     }
     tx.addOutputAddress(boardingAddress, outputAmount, this.getNetwork());
@@ -3615,8 +3834,8 @@ var VtxoManager = class _VtxoManager {
       if (!serverPubKey) continue;
       const cls = classifyAgainstSignerSet(serverPubKey, signerSet, nowSeconds);
       if (cls.status === "CURRENT") continue;
-      const recoverable = vtxos.filter((v) => v.isSwept && !chunkGMUVWKOK_cjs.hasTerminalSpend(v));
-      const spendable = vtxos.filter((v) => !chunkGMUVWKOK_cjs.hasTerminalSpend(v) && !v.isSwept);
+      const recoverable = vtxos.filter((v) => v.isSwept && !chunkCDWLZQQW_cjs.hasTerminalSpend(v));
+      const spendable = vtxos.filter((v) => !chunkCDWLZQQW_cjs.hasTerminalSpend(v) && !v.isSwept);
       const value = spendable.reduce((sum, v) => sum + v.value, 0);
       let recoverableCount = 0;
       let recoverableValue = 0;
@@ -3629,7 +3848,7 @@ var VtxoManager = class _VtxoManager {
         awaitingSweepCount = spendable.length;
         awaitingSweepValue = value;
         for (const v of spendable) {
-          const exp = chunkGMUVWKOK_cjs.toBatchExpiry(v);
+          const exp = chunkCDWLZQQW_cjs.toBatchExpiry(v);
           if (exp !== void 0 && (nextSweepEta === void 0 || exp < nextSweepEta)) {
             nextSweepEta = exp;
           }
@@ -3890,7 +4109,7 @@ var VtxoManager = class _VtxoManager {
   /** Decodes the boarding tapscript exit path to extract the CSV timelock. */
   getBoardingTimelock() {
     const wallet = this.getSweepWallet();
-    const exitScript = chunkGMUVWKOK_cjs.CSVMultisigTapscript.decode(
+    const exitScript = chunkCDWLZQQW_cjs.CSVMultisigTapscript.decode(
       base.hex.decode(wallet.boardingTapscript.exitScript)
     );
     return exitScript.params.timelock;
@@ -4021,8 +4240,8 @@ var VtxoManager = class _VtxoManager {
    * or doesn't carry the metadata.
    */
   extractSpentOutpoint(error) {
-    const ark = chunkGMUVWKOK_cjs.maybeArkError(error);
-    if (!chunkGMUVWKOK_cjs.isArkError(ark, chunkGMUVWKOK_cjs.ArkErrorName.VTXO_ALREADY_SPENT)) return void 0;
+    const ark = chunkCDWLZQQW_cjs.maybeArkError(error);
+    if (!chunkCDWLZQQW_cjs.isArkError(ark, chunkCDWLZQQW_cjs.ArkErrorName.VTXO_ALREADY_SPENT)) return void 0;
     const raw = ark.metadata?.vtxo_outpoint;
     if (typeof raw !== "string") return void 0;
     const [txid, voutStr] = raw.split(":");
@@ -4212,7 +4431,7 @@ var VtxoManager = class _VtxoManager {
       if (filteredVtxos.length >= MAX_VTXOS_PER_SETTLEMENT) {
         break;
       }
-      const inputFee = estimator.evalOffchainInput(chunkGMUVWKOK_cjs.toOffchainInputFeeParams(v));
+      const inputFee = estimator.evalOffchainInput(chunkCDWLZQQW_cjs.toOffchainInputFeeParams(v));
       if (inputFee.satoshis >= v.value) {
         continue;
       }
@@ -4232,7 +4451,7 @@ var VtxoManager = class _VtxoManager {
     const arkAddress = await this.wallet.getAddress();
     const outputFee = estimator.evalOffchainOutput({
       amount: totalAmount,
-      script: base.hex.encode(chunkGMUVWKOK_cjs.ArkAddress.decode(arkAddress).pkScript)
+      script: base.hex.encode(chunkCDWLZQQW_cjs.ArkAddress.decode(arkAddress).pkScript)
     });
     totalAmount -= BigInt(outputFee.satoshis);
     if (totalAmount < dustAmount) return;
@@ -4312,7 +4531,7 @@ var ArkNote = class _ArkNote {
     this.value = value;
     this.HRP = HRP;
     const preimageHash = utils_js.sha256(this.preimage);
-    this.vtxoScript = new chunkGMUVWKOK_cjs.VtxoScript([noteTapscript(preimageHash)]);
+    this.vtxoScript = new chunkCDWLZQQW_cjs.VtxoScript([noteTapscript(preimageHash)]);
     const leaf = this.vtxoScript.leaves[0];
     this.txid = base.hex.encode(new Uint8Array(preimageHash).reverse());
     this.tapTree = this.vtxoScript.encode();
@@ -4479,7 +4698,7 @@ var ArkadeCash = class _ArkadeCash {
     const privateKey = data.slice(1, 33);
     const serverPubKey = data.slice(33, 65);
     const sequence = new DataView(data.buffer, data.byteOffset + 65, 4).getUint32(0, false);
-    const csvTimelock = chunkGMUVWKOK_cjs.sequenceToTimelock(sequence);
+    const csvTimelock = chunkCDWLZQQW_cjs.sequenceToTimelock(sequence);
     return new _ArkadeCash(privateKey, serverPubKey, csvTimelock, decoded.prefix);
   }
   toString() {
@@ -4487,7 +4706,7 @@ var ArkadeCash = class _ArkadeCash {
     data[0] = _ArkadeCash.Version;
     data.set(this._privateKey, 1);
     data.set(this._serverPubKey, 33);
-    const sequence = chunkGMUVWKOK_cjs.timelockToSequence(this.csvTimelock);
+    const sequence = chunkCDWLZQQW_cjs.timelockToSequence(this.csvTimelock);
     new DataView(data.buffer, data.byteOffset + 65, 4).setUint32(0, sequence, false);
     const words = base.bech32m.toWords(data);
     return base.bech32m.encode(this.hrp, words, 1023);
@@ -4496,7 +4715,7 @@ var ArkadeCash = class _ArkadeCash {
     return SingleKey.fromPrivateKey(this._privateKey);
   }
   get vtxoScript() {
-    return new chunk53XNU2EL_cjs.DefaultVtxo.Script({
+    return new chunk37XKN5DZ_cjs.DefaultVtxo.Script({
       pubKey: this._publicKey,
       serverPubKey: this._serverPubKey,
       csvTimelock: this.csvTimelock
@@ -4757,7 +4976,7 @@ async function captureExitBranch(params) {
     const nonCommitment = ordered.filter((c) => chainTxTypeToChainedExit(c.type) !== 1 /* Commitment */).map((c) => c.txid);
     if (nonCommitment.length > 0) {
       for (const psbt of await resolver.getVirtualTxs(nonCommitment)) {
-        psbtByTxid.set(chunkGMUVWKOK_cjs.Transaction.fromPSBT(base.base64.decode(psbt)).id, psbt);
+        psbtByTxid.set(chunkCDWLZQQW_cjs.Transaction.fromPSBT(base.base64.decode(psbt)).id, psbt);
       }
     }
   }
@@ -4800,10 +5019,10 @@ var IndexerExitDataSource = class {
     while (hasMore) {
       const { chain: page, page: meta } = await this.indexer.getVtxoChain(
         { txid: vtxo.txid, vout: vtxo.vout },
-        { pageIndex, pageSize: chunkGMUVWKOK_cjs.DEFAULT_PAGE_SIZE }
+        { pageIndex, pageSize: chunkCDWLZQQW_cjs.DEFAULT_PAGE_SIZE }
       );
       chain.push(...page);
-      hasMore = meta ? page.length === chunkGMUVWKOK_cjs.DEFAULT_PAGE_SIZE : false;
+      hasMore = meta ? page.length === chunkCDWLZQQW_cjs.DEFAULT_PAGE_SIZE : false;
       pageIndex++;
     }
     return chain;
@@ -4815,12 +5034,12 @@ var IndexerExitDataSource = class {
     while (hasMore) {
       const { txs, page } = await this.indexer.getVirtualTxs(txids, {
         pageIndex,
-        pageSize: chunkGMUVWKOK_cjs.DEFAULT_PAGE_SIZE
+        pageSize: chunkCDWLZQQW_cjs.DEFAULT_PAGE_SIZE
       });
       for (const psbt of txs) {
-        out.set(chunkGMUVWKOK_cjs.Transaction.fromPSBT(base.base64.decode(psbt)).id, psbt);
+        out.set(chunkCDWLZQQW_cjs.Transaction.fromPSBT(base.base64.decode(psbt)).id, psbt);
       }
-      hasMore = page ? txs.length === chunkGMUVWKOK_cjs.DEFAULT_PAGE_SIZE : false;
+      hasMore = page ? txs.length === chunkCDWLZQQW_cjs.DEFAULT_PAGE_SIZE : false;
       pageIndex++;
     }
     return out;
@@ -4841,7 +5060,7 @@ function chainedTxTypeToChainTxType(t) {
   }
 }
 function psbtInputTxids(psbtBase64) {
-  const tx = chunkGMUVWKOK_cjs.Transaction.fromPSBT(base.base64.decode(psbtBase64));
+  const tx = chunkCDWLZQQW_cjs.Transaction.fromPSBT(base.base64.decode(psbtBase64));
   const ids = [];
   for (let i = 0; i < tx.inputsLength; i++) {
     const txid = tx.getInput(i).txid;
@@ -5189,10 +5408,10 @@ async function resolveArkInfo(arkProvider, walletRepository) {
   try {
     info = await arkProvider.getInfo();
   } catch (err) {
-    if (!chunkGMUVWKOK_cjs.isRetryableProviderError(err)) throw err;
+    if (!chunkCDWLZQQW_cjs.isRetryableProviderError(err)) throw err;
     const snapshot = await loadArkInfoSnapshot(walletRepository);
     if (!snapshot) {
-      throw new chunkGMUVWKOK_cjs.ProviderUnavailableError(
+      throw new chunkCDWLZQQW_cjs.ProviderUnavailableError(
         "Arkade server info is unavailable and no cached snapshot exists",
         { cause: err }
       );
@@ -5575,7 +5794,7 @@ function collectArkTxidsNeedingCreatedAt(vtxos) {
   return [...txids];
 }
 async function buildTransactionHistory(vtxos, allBoardingTxs, commitmentsToIgnore, resolveTxCreatedAt) {
-  const fromOldestVtxo = vtxos.map(chunkGMUVWKOK_cjs.normalizeVtxo).sort((a, b) => a.createdAt.getTime() - b.createdAt.getTime());
+  const fromOldestVtxo = vtxos.map(chunkCDWLZQQW_cjs.normalizeVtxo).sort((a, b) => a.createdAt.getTime() - b.createdAt.getTime());
   const txidsNeedingCreatedAt = resolveTxCreatedAt ? collectArkTxidsNeedingCreatedAt(fromOldestVtxo) : [];
   const resolvedCreatedAt = resolveTxCreatedAt && txidsNeedingCreatedAt.length > 0 ? await resolveTxCreatedAt(txidsNeedingCreatedAt) : /* @__PURE__ */ new Map();
   const unmatchedSettledBoardingTxs = allBoardingTxs.filter(isSettledBoardingReceive).sort((a, b) => a.createdAt - b.createdAt);
@@ -5739,7 +5958,7 @@ var AssetManager = class extends ReadonlyAssetManager {
     const virtualCoins = await this.wallet.getVtxos({
       withRecoverable: false
     });
-    const controlAssetRef = params.controlAssetId ? chunkRNECH3TA_cjs.AssetRef.fromId(chunkRNECH3TA_cjs.AssetId.fromString(params.controlAssetId)) : null;
+    const controlAssetRef = params.controlAssetId ? chunk24YNIQSW_cjs.AssetRef.fromId(chunk24YNIQSW_cjs.AssetId.fromString(params.controlAssetId)) : null;
     const coinSelection = selectVirtualCoins(virtualCoins, Number(this.wallet.dustAmount));
     let totalBtcSelected = 0n;
     const assetChanges = /* @__PURE__ */ new Map();
@@ -5752,8 +5971,8 @@ var AssetManager = class extends ReadonlyAssetManager {
       }
     }
     const groups = [];
-    const issuedAssetOutput = chunkRNECH3TA_cjs.AssetOutput.create(0, params.amount);
-    const issuedAssetGroup = chunkRNECH3TA_cjs.AssetGroup.create(
+    const issuedAssetOutput = chunk24YNIQSW_cjs.AssetOutput.create(0, params.amount);
+    const issuedAssetGroup = chunk24YNIQSW_cjs.AssetGroup.create(
       null,
       controlAssetRef,
       [],
@@ -5768,28 +5987,28 @@ var AssetManager = class extends ReadonlyAssetManager {
         for (const [inputIndex, assets] of assetInputs) {
           for (const asset of assets) {
             if (asset.assetId !== assetId) continue;
-            changeInputs.push(chunkRNECH3TA_cjs.AssetInput.create(inputIndex, asset.amount));
+            changeInputs.push(chunk24YNIQSW_cjs.AssetInput.create(inputIndex, asset.amount));
           }
         }
         groups.push(
-          chunkRNECH3TA_cjs.AssetGroup.create(
-            chunkRNECH3TA_cjs.AssetId.fromString(assetId),
+          chunk24YNIQSW_cjs.AssetGroup.create(
+            chunk24YNIQSW_cjs.AssetId.fromString(assetId),
             null,
             changeInputs,
-            [chunkRNECH3TA_cjs.AssetOutput.create(0, amount)],
+            [chunk24YNIQSW_cjs.AssetOutput.create(0, amount)],
             []
           )
         );
       }
     }
     const address = await this.wallet.getAddress();
-    const outputAddress = chunkGMUVWKOK_cjs.ArkAddress.decode(address);
+    const outputAddress = chunkCDWLZQQW_cjs.ArkAddress.decode(address);
     const outputs = [
       {
         script: outputAddress.pkScript,
         amount: BigInt(totalBtcSelected)
       },
-      Extension.create([chunkRNECH3TA_cjs.Packet.create(groups)]).txOut()
+      Extension.create([chunk24YNIQSW_cjs.Packet.create(groups)]).txOut()
     ];
     const { arkTxid } = await this.wallet.buildAndSubmitOffchainTx(
       coinSelection.inputs,
@@ -5797,7 +6016,7 @@ var AssetManager = class extends ReadonlyAssetManager {
     );
     return {
       arkTxId: arkTxid,
-      assetId: chunkRNECH3TA_cjs.AssetId.create(arkTxid, 0).toString()
+      assetId: chunk24YNIQSW_cjs.AssetId.create(arkTxid, 0).toString()
     };
   }
   /**
@@ -5869,16 +6088,16 @@ var AssetManager = class extends ReadonlyAssetManager {
     for (const [inputIndex, assets] of assetInputs) {
       for (const asset of assets) {
         if (asset.assetId !== params.assetId) continue;
-        reissueInputs.push(chunkRNECH3TA_cjs.AssetInput.create(inputIndex, asset.amount));
+        reissueInputs.push(chunk24YNIQSW_cjs.AssetInput.create(inputIndex, asset.amount));
       }
     }
     const totalAssetAmount = assetToReissueAmount + params.amount;
-    const reissueAssetIdObj = chunkRNECH3TA_cjs.AssetId.fromString(params.assetId);
-    const reissueAssetGroup = chunkRNECH3TA_cjs.AssetGroup.create(
+    const reissueAssetIdObj = chunk24YNIQSW_cjs.AssetId.fromString(params.assetId);
+    const reissueAssetGroup = chunk24YNIQSW_cjs.AssetGroup.create(
       reissueAssetIdObj,
       null,
       reissueInputs,
-      [chunkRNECH3TA_cjs.AssetOutput.create(0, totalAssetAmount)],
+      [chunk24YNIQSW_cjs.AssetOutput.create(0, totalAssetAmount)],
       []
     );
     const groups = [reissueAssetGroup];
@@ -5887,27 +6106,27 @@ var AssetManager = class extends ReadonlyAssetManager {
       for (const [inputIndex, assets] of assetInputs) {
         for (const asset of assets) {
           if (asset.assetId !== assetId) continue;
-          changeInputs.push(chunkRNECH3TA_cjs.AssetInput.create(inputIndex, asset.amount));
+          changeInputs.push(chunk24YNIQSW_cjs.AssetInput.create(inputIndex, asset.amount));
         }
       }
       groups.push(
-        chunkRNECH3TA_cjs.AssetGroup.create(
-          chunkRNECH3TA_cjs.AssetId.fromString(assetId),
+        chunk24YNIQSW_cjs.AssetGroup.create(
+          chunk24YNIQSW_cjs.AssetId.fromString(assetId),
           null,
           changeInputs,
-          [chunkRNECH3TA_cjs.AssetOutput.create(0, amount)],
+          [chunk24YNIQSW_cjs.AssetOutput.create(0, amount)],
           []
         )
       );
     }
     const address = await this.wallet.getAddress();
-    const outputAddress = chunkGMUVWKOK_cjs.ArkAddress.decode(address);
+    const outputAddress = chunkCDWLZQQW_cjs.ArkAddress.decode(address);
     const outputs = [
       {
         script: outputAddress.pkScript,
         amount: BigInt(totalBtcSelected)
       },
-      Extension.create([chunkRNECH3TA_cjs.Packet.create(groups)]).txOut()
+      Extension.create([chunk24YNIQSW_cjs.Packet.create(groups)]).txOut()
     ];
     const { arkTxid } = await this.wallet.buildAndSubmitOffchainTx(selectedCoins, outputs);
     return arkTxid;
@@ -5974,27 +6193,27 @@ var AssetManager = class extends ReadonlyAssetManager {
       for (const [inputIndex, assets] of assetInputs) {
         for (const asset of assets) {
           if (asset.assetId !== assetId) continue;
-          changeInputs.push(chunkRNECH3TA_cjs.AssetInput.create(inputIndex, asset.amount));
+          changeInputs.push(chunk24YNIQSW_cjs.AssetInput.create(inputIndex, asset.amount));
         }
       }
       groups.push(
-        chunkRNECH3TA_cjs.AssetGroup.create(
-          chunkRNECH3TA_cjs.AssetId.fromString(assetId),
+        chunk24YNIQSW_cjs.AssetGroup.create(
+          chunk24YNIQSW_cjs.AssetId.fromString(assetId),
           null,
           changeInputs,
-          amount > 0n ? [chunkRNECH3TA_cjs.AssetOutput.create(0, amount)] : [],
+          amount > 0n ? [chunk24YNIQSW_cjs.AssetOutput.create(0, amount)] : [],
           []
         )
       );
     }
     const address = await this.wallet.getAddress();
-    const outputAddress = chunkGMUVWKOK_cjs.ArkAddress.decode(address);
+    const outputAddress = chunkCDWLZQQW_cjs.ArkAddress.decode(address);
     const outputs = [
       {
         script: outputAddress.pkScript,
         amount: BigInt(totalBtcSelected)
       },
-      Extension.create([chunkRNECH3TA_cjs.Packet.create(groups)]).txOut()
+      Extension.create([chunk24YNIQSW_cjs.Packet.create(groups)]).txOut()
     ];
     const { arkTxid } = await this.wallet.buildAndSubmitOffchainTx(selectedCoins, outputs);
     return arkTxid;
@@ -6019,7 +6238,7 @@ function castMetadata(metadata) {
     } else {
       throw new Error("Invalid metadata value type");
     }
-    md.push(chunkRNECH3TA_cjs.Metadata.create(textEncoder.encode(key), valueBytes));
+    md.push(chunk24YNIQSW_cjs.Metadata.create(textEncoder.encode(key), valueBytes));
   }
   return md;
 }
@@ -6040,10 +6259,10 @@ var DelegateManagerImpl = class {
     if (vtxos.length === 0) {
       return { delegated: [], failed: [] };
     }
-    const destinationScript = chunkGMUVWKOK_cjs.ArkAddress.decode(destination).pkScript;
+    const destinationScript = chunkCDWLZQQW_cjs.ArkAddress.decode(destination).pkScript;
     const arkInfo = await this.arkInfoProvider.getInfo();
     const delegateInfo = await this.delegateProvider.getDelegateInfo();
-    const eligible = vtxos.map(chunkGMUVWKOK_cjs.normalizeVtxo).filter(
+    const eligible = vtxos.map(chunkCDWLZQQW_cjs.normalizeVtxo).filter(
       (v) => isAnnotated(v) && findDelegateTapLeaf(v, delegateInfo.pubkey) !== void 0
     );
     if (eligible.length === 0) {
@@ -6072,11 +6291,11 @@ var DelegateManagerImpl = class {
     const groupByExpiry = /* @__PURE__ */ new Map();
     let recoverableVtxos = [];
     for (const vtxo of eligible) {
-      if (chunkGMUVWKOK_cjs.canRecoverOnchain(vtxo, now)) {
+      if (chunkCDWLZQQW_cjs.canRecoverOnchain(vtxo, now)) {
         recoverableVtxos.push(vtxo);
         continue;
       }
-      const expiry = chunkGMUVWKOK_cjs.toBatchExpiry(vtxo);
+      const expiry = chunkCDWLZQQW_cjs.toBatchExpiry(vtxo);
       if (!expiry) continue;
       const dayKey = getDayTimestamp(expiry);
       groupByExpiry.set(dayKey, [...groupByExpiry.get(dayKey) ?? [], vtxo]);
@@ -6141,7 +6360,7 @@ async function delegate(identity, delegateProvider, arkInfo, delegateInfo, vtxos
   }
   if (!delegateAt) {
     const now = { timestamp: /* @__PURE__ */ new Date() };
-    const expiryTimestamp = vtxos.filter((coin) => !chunkGMUVWKOK_cjs.canRecoverOnchain(coin, now) && chunkGMUVWKOK_cjs.toBatchExpiry(coin)).reduce((min, coin) => Math.min(min, chunkGMUVWKOK_cjs.toBatchExpiry(coin)), Number.MAX_SAFE_INTEGER);
+    const expiryTimestamp = vtxos.filter((coin) => !chunkCDWLZQQW_cjs.canRecoverOnchain(coin, now) && chunkCDWLZQQW_cjs.toBatchExpiry(coin)).reduce((min, coin) => Math.min(min, chunkCDWLZQQW_cjs.toBatchExpiry(coin)), Number.MAX_SAFE_INTEGER);
     if (!expiryTimestamp || expiryTimestamp === Number.MAX_SAFE_INTEGER) {
       delegateAt = new Date(Date.now() + 1 * 60 * 1e3);
     } else {
@@ -6170,7 +6389,7 @@ async function delegate(identity, delegateProvider, arkInfo, delegateInfo, vtxos
   let amount = 0n;
   for (const coin of vtxos) {
     const inputFee = estimator.evalOffchainInput({
-      ...chunkGMUVWKOK_cjs.toOffchainInputFeeParams(coin),
+      ...chunkCDWLZQQW_cjs.toOffchainInputFeeParams(coin),
       type: "vtxo"
     });
     if (inputFee.value >= coin.value) {
@@ -6184,7 +6403,7 @@ async function delegate(identity, delegateProvider, arkInfo, delegateInfo, vtxos
   const delegateFee = BigInt(Number(fee));
   if (delegateFee > 0n) {
     outputs.push({
-      script: chunkGMUVWKOK_cjs.ArkAddress.decode(delegateAddress).pkScript,
+      script: chunkCDWLZQQW_cjs.ArkAddress.decode(delegateAddress).pkScript,
       amount: delegateFee
     });
   }
@@ -6217,10 +6436,10 @@ async function delegate(identity, delegateProvider, arkInfo, delegateInfo, vtxos
     destinationScript
   );
   const forfeitOutputScript = btcSigner.OutScript.encode(
-    btcSigner.Address(chunkGMUVWKOK_cjs.getNetwork(network)).decode(forfeitAddress)
+    btcSigner.Address(chunkCDWLZQQW_cjs.getNetwork(network)).decode(forfeitAddress)
   );
   const forfeits = await Promise.all(
-    vtxos.filter((v) => !chunkGMUVWKOK_cjs.canRecoverOnchain(v, { timestamp: /* @__PURE__ */ new Date() })).map(async (coin) => {
+    vtxos.filter((v) => !chunkCDWLZQQW_cjs.canRecoverOnchain(v, { timestamp: /* @__PURE__ */ new Date() })).map(async (coin) => {
       const forfeit = await makeDelegateForfeitTx(
         coin,
         dust,
@@ -6245,7 +6464,7 @@ async function makeDelegateForfeitTx(input, connectorAmount, delegatePubkey, for
         index: input.vout,
         witnessUtxo: {
           amount: BigInt(input.value),
-          script: chunkGMUVWKOK_cjs.VtxoScript.decode(input.tapTree).pkScript
+          script: chunkCDWLZQQW_cjs.VtxoScript.decode(input.tapTree).pkScript
         },
         sighashType: btcSigner.SigHash.ALL_ANYONECANPAY,
         tapLeafScript: [delegateTapLeaf]
@@ -6303,7 +6522,7 @@ async function makeSignedDelegateIntent(identity, coins, outputs, onchainOutputs
     expire_at: 0,
     cosigners_public_keys: cosignerPubKeys
   };
-  const proof = chunkGMUVWKOK_cjs.Intent.create(message, coins, outputs);
+  const proof = chunkCDWLZQQW_cjs.Intent.create(message, coins, outputs);
   const signedProof = await identity.sign(proof);
   return {
     proof: base.base64.encode(signedProof.toPSBT()),
@@ -6321,10 +6540,10 @@ function getDayTimestamp(timestamp) {
 function findDelegateTapLeaf(vtxo, delegatePubkey) {
   if (!vtxo.tapTree) return void 0;
   const pk = delegatePubkey.length === 66 ? delegatePubkey.slice(2) : delegatePubkey;
-  const vtxoScript = chunkGMUVWKOK_cjs.VtxoScript.decode(vtxo.tapTree);
+  const vtxoScript = chunkCDWLZQQW_cjs.VtxoScript.decode(vtxo.tapTree);
   return vtxoScript.leaves.find((tapLeaf) => {
-    const arkTapscript = chunkGMUVWKOK_cjs.decodeTapscript(chunkGMUVWKOK_cjs.scriptFromTapLeafScript(tapLeaf));
-    if (!chunkGMUVWKOK_cjs.MultisigTapscript.is(arkTapscript)) return false;
+    const arkTapscript = chunkCDWLZQQW_cjs.decodeTapscript(chunkCDWLZQQW_cjs.scriptFromTapLeafScript(tapLeaf));
+    if (!chunkCDWLZQQW_cjs.MultisigTapscript.is(arkTapscript)) return false;
     return arkTapscript.params.pubkeys.map(base.hex.encode).includes(pk);
   });
 }
@@ -6512,7 +6731,7 @@ async function closeDatabase(dbName) {
   return true;
 }
 function scriptFromArkAddress(address) {
-  return base.hex.encode(chunkGMUVWKOK_cjs.ArkAddress.decode(address).pkScript);
+  return base.hex.encode(chunkCDWLZQQW_cjs.ArkAddress.decode(address).pkScript);
 }
 
 // src/repositories/indexedDB/schema.ts
@@ -7009,7 +7228,7 @@ function validateVtxosForScript(vtxos, script, context) {
 }
 async function getVtxosForContract(repo, contract) {
   const vtxos = repo.getVtxosForScript ? await repo.getVtxosForScript(contract.script) : filterVtxosForScript(await repo.getVtxos(contract.address), contract.script);
-  return vtxos.map(chunkGMUVWKOK_cjs.normalizeVtxo);
+  return vtxos.map(chunkCDWLZQQW_cjs.normalizeVtxo);
 }
 async function saveVtxosForContract(repo, contract, vtxos) {
   if (repo.saveVtxosForScript) {
@@ -7213,7 +7432,7 @@ var deserializeTapLeaf = (t) => {
   const s = base.hex.decode(t.s);
   return [cb, s];
 };
-var deserializeVtxo = (o) => chunkGMUVWKOK_cjs.normalizeVtxo({
+var deserializeVtxo = (o) => chunkCDWLZQQW_cjs.normalizeVtxo({
   ...o,
   createdAt: new Date(o.createdAt),
   tapTree: base.hex.decode(o.tapTree),
@@ -8352,7 +8571,7 @@ var ContractWatcher = class {
       this.connectionState = "connected";
       this.reconnectAttempts = 0;
       this.listenLoop().catch((e) => {
-        if (chunkGMUVWKOK_cjs.isEventSourceError(e)) {
+        if (chunkCDWLZQQW_cjs.isEventSourceError(e)) {
           console.debug("ContractWatcher subscription disconnected; reconnecting");
         } else {
           console.error(e);
@@ -8581,14 +8800,14 @@ var ContractWatcher = class {
     const timestamp = Date.now();
     if (update.newVtxos?.length) {
       this.processSubscriptionVtxos(
-        update.newVtxos.map(chunkGMUVWKOK_cjs.normalizeVtxo),
+        update.newVtxos.map(chunkCDWLZQQW_cjs.normalizeVtxo),
         "vtxo_received",
         timestamp
       );
     }
     if (update.spentVtxos?.length) {
       this.processSubscriptionVtxos(
-        update.spentVtxos.map(chunkGMUVWKOK_cjs.normalizeVtxo),
+        update.spentVtxos.map(chunkCDWLZQQW_cjs.normalizeVtxo),
         "vtxo_spent",
         timestamp
       );
@@ -8721,7 +8940,7 @@ async function reconcileIntents(deps) {
   let vtxosByOutpoint = /* @__PURE__ */ new Map();
   if (outpoints.length > 0) {
     try {
-      const { vtxos } = await chunkGMUVWKOK_cjs.getNormalizedVtxos(deps.indexerProvider, { outpoints });
+      const { vtxos } = await chunkCDWLZQQW_cjs.getNormalizedVtxos(deps.indexerProvider, { outpoints });
       vtxosByOutpoint = new Map(vtxos.map((v) => [outpointKey(v), v]));
     } catch (e) {
       console.error("reconcileIntents: failed to fetch input VTXO state", e);
@@ -8841,7 +9060,7 @@ var ContractManager = class _ContractManager {
       await this.reconcileWatched();
       this.markSyncOnline();
     } catch (err) {
-      if (!chunkGMUVWKOK_cjs.isRetryableProviderError(err)) throw err;
+      if (!chunkCDWLZQQW_cjs.isRetryableProviderError(err)) throw err;
       this.markSyncDegraded(err);
     }
     this.initialized = true;
@@ -8953,7 +9172,7 @@ var ContractManager = class _ContractManager {
     const from = Math.max(0, watermark - lookAhead.size);
     const to = watermark + lookAhead.size;
     const deps = lookAhead.candidateDeps();
-    const handlers = chunk53XNU2EL_cjs.contractHandlers.getRegisteredTypes().map((t) => chunk53XNU2EL_cjs.contractHandlers.get(t)).filter(hasCandidates);
+    const handlers = chunk37XKN5DZ_cjs.contractHandlers.getRegisteredTypes().map((t) => chunk37XKN5DZ_cjs.contractHandlers.get(t)).filter(hasCandidates);
     const band = /* @__PURE__ */ new Map();
     for (let index = from; index <= to; index++) {
       const descriptor = lookAhead.materialize(index);
@@ -8964,7 +9183,7 @@ var ContractManager = class _ContractManager {
             index,
             params: {
               ...candidate,
-              ...chunk53XNU2EL_cjs.speculativeReceiveMetadata(descriptor)
+              ...chunk37XKN5DZ_cjs.speculativeReceiveMetadata(descriptor)
             }
           });
         }
@@ -9024,7 +9243,7 @@ var ContractManager = class _ContractManager {
       });
       for (const entry of pending) entry.catchUpPending = false;
     } catch (err) {
-      if (!chunkGMUVWKOK_cjs.isRetryableProviderError(err)) throw err;
+      if (!chunkCDWLZQQW_cjs.isRetryableProviderError(err)) throw err;
       this.markSyncDegraded(err);
     }
   }
@@ -9068,7 +9287,7 @@ var ContractManager = class _ContractManager {
         await this.fetchContractVxosFromIndexer([contract]);
         this.markSyncOnline();
       } catch (err) {
-        if (!chunkGMUVWKOK_cjs.isRetryableProviderError(err)) throw err;
+        if (!chunkCDWLZQQW_cjs.isRetryableProviderError(err)) throw err;
         this.markSyncDegraded(err);
       }
       await this.watcher.addContract(contract);
@@ -9105,7 +9324,7 @@ var ContractManager = class _ContractManager {
     return result;
   }
   async upsertContractRow(params) {
-    const handler = chunk53XNU2EL_cjs.contractHandlers.get(params.type);
+    const handler = chunk37XKN5DZ_cjs.contractHandlers.get(params.type);
     if (!handler) {
       throw new Error(`No handler registered for contract type '${params.type}'`);
     }
@@ -9205,7 +9424,7 @@ var ContractManager = class _ContractManager {
         `scanContracts: batchSize must be a positive integer (got ${String(opts.batchSize)})`
       );
     }
-    const registered = chunk53XNU2EL_cjs.contractHandlers.getRegisteredTypes().map((t) => chunk53XNU2EL_cjs.contractHandlers.get(t)).filter(isDiscoverable);
+    const registered = chunk37XKN5DZ_cjs.contractHandlers.getRegisteredTypes().map((t) => chunk37XKN5DZ_cjs.contractHandlers.get(t)).filter(isDiscoverable);
     const discoverables = [
       ...registered.filter((h) => h.type === "boarding"),
       ...registered.filter((h) => h.type !== "boarding")
@@ -9340,7 +9559,7 @@ var ContractManager = class _ContractManager {
       await this.syncContracts({ contracts, pageSize });
       this.markSyncOnline();
     } catch (err) {
-      if (!chunkGMUVWKOK_cjs.isRetryableProviderError(err)) throw err;
+      if (!chunkCDWLZQQW_cjs.isRetryableProviderError(err)) throw err;
       this.markSyncDegraded(err);
     }
     const vtxos = await this.getVtxosForContracts(contracts);
@@ -9361,7 +9580,7 @@ var ContractManager = class _ContractManager {
     }
     const tapscriptCache = /* @__PURE__ */ new Map();
     return vtxos.map(
-      (vtxo) => extendVirtualCoinForContract(chunkGMUVWKOK_cjs.normalizeVtxo(vtxo), byScript, tapscriptCache)
+      (vtxo) => extendVirtualCoinForContract(chunkCDWLZQQW_cjs.normalizeVtxo(vtxo), byScript, tapscriptCache)
     );
   }
   buildContractsDbFilter(filter) {
@@ -9446,7 +9665,7 @@ var ContractManager = class _ContractManager {
     const { contractScript, collaborative = true, walletPubKey, vtxo } = options;
     const [contract] = await this.getContracts({ script: contractScript });
     if (!contract) return [];
-    const handler = chunk53XNU2EL_cjs.contractHandlers.get(contract.type);
+    const handler = chunk37XKN5DZ_cjs.contractHandlers.get(contract.type);
     if (!handler) return [];
     const script = handler.createScript(contract.params);
     const context = {
@@ -9466,7 +9685,7 @@ var ContractManager = class _ContractManager {
     const { contractScript, collaborative = true, walletPubKey } = options;
     const [contract] = await this.getContracts({ script: contractScript });
     if (!contract) return [];
-    const handler = chunk53XNU2EL_cjs.contractHandlers.get(contract.type);
+    const handler = chunk37XKN5DZ_cjs.contractHandlers.get(contract.type);
     if (!handler) return [];
     const script = handler.createScript(contract.params);
     const context = {
@@ -9522,7 +9741,7 @@ var ContractManager = class _ContractManager {
   }
   async refreshOutpoints(outpoints) {
     if (outpoints.length === 0) return;
-    const { vtxos } = await chunkGMUVWKOK_cjs.getNormalizedVtxos(this.config.indexerProvider, {
+    const { vtxos } = await chunkCDWLZQQW_cjs.getNormalizedVtxos(this.config.indexerProvider, {
       outpoints
     });
     if (vtxos.length === 0) return;
@@ -9600,7 +9819,7 @@ var ContractManager = class _ContractManager {
           break;
       }
     } catch (err) {
-      if (!chunkGMUVWKOK_cjs.isRetryableProviderError(err)) throw err;
+      if (!chunkCDWLZQQW_cjs.isRetryableProviderError(err)) throw err;
       this.markSyncDegraded(err);
     }
     this.emitEvent(event);
@@ -9649,7 +9868,7 @@ var ContractManager = class _ContractManager {
    */
   async reconcilePendingFrontier(contracts) {
     const scriptToContract = new Map(contracts.map((c) => [c.script, c]));
-    const vtxos = await chunkGMUVWKOK_cjs.getAllNormalizedVtxos(
+    const vtxos = await chunkCDWLZQQW_cjs.getAllNormalizedVtxos(
       this.config.indexerProvider,
       contracts.map((c) => c.script),
       { pendingOnly: true }
@@ -9730,7 +9949,7 @@ var ContractManager = class _ContractManager {
     }
     return result;
   }
-  async fetchContractVtxosBulk(contracts, pageSize = chunkGMUVWKOK_cjs.DEFAULT_PAGE_SIZE, syncWindow) {
+  async fetchContractVtxosBulk(contracts, pageSize = chunkCDWLZQQW_cjs.DEFAULT_PAGE_SIZE, syncWindow) {
     if (contracts.length === 0) {
       return { vtxosByScript: /* @__PURE__ */ new Map(), promoted: /* @__PURE__ */ new Map() };
     }
@@ -9746,7 +9965,7 @@ var ContractManager = class _ContractManager {
         before: syncWindow.before
       }
     } : {};
-    const vtxos = await chunkGMUVWKOK_cjs.getAllNormalizedVtxos(
+    const vtxos = await chunkCDWLZQQW_cjs.getAllNormalizedVtxos(
       this.config.indexerProvider,
       contracts.map((c) => c.script),
       { ...windowOpts, pageSize }
@@ -9913,7 +10132,7 @@ var HDDescriptorProvider = class _HDDescriptorProvider {
    */
   materializeDescriptorAt(index) {
     const descriptor = this.identity.descriptor;
-    const network = chunk53XNU2EL_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
+    const network = chunk37XKN5DZ_cjs.isMainnetDescriptor(descriptor) ? descriptorsScure.networks.bitcoin : descriptorsScure.networks.testnet;
     const expansion = descriptorsScure.expand({ descriptor, network, index });
     const keyInfo = expansion.expansionMap?.["@0"];
     if (!keyInfo?.keyExpression) {
@@ -10057,7 +10276,7 @@ var WalletReceiveRotator = class _WalletReceiveRotator {
     const provider = await resolveDescriptorProvider(config, setup.walletRepository);
     if (!provider) return void 0;
     const allowSilentFallback = (config.walletMode ?? "auto") === "auto";
-    const expectedContractType = setup.offchainTapscript instanceof chunk53XNU2EL_cjs.DelegateVtxo.Script ? "delegate" : "default";
+    const expectedContractType = setup.offchainTapscript instanceof chunk37XKN5DZ_cjs.DelegateVtxo.Script ? "delegate" : "default";
     const factoryOpts = {
       walletRepository: setup.walletRepository,
       contractRepository: setup.contractRepository,
@@ -10256,7 +10475,7 @@ var WalletReceiveRotator = class _WalletReceiveRotator {
 };
 function deriveLeafPubkey(descriptor) {
   try {
-    return chunk53XNU2EL_cjs.deriveDescriptorLeafPubKey(descriptor);
+    return chunk37XKN5DZ_cjs.deriveDescriptorLeafPubKey(descriptor);
   } catch (e) {
     throw new NonRangeableDescriptorError(
       "Cannot derive leaf pubkey: descriptor is not a materialized, parsable tr(...) shape.",
@@ -10268,7 +10487,7 @@ function buildReceiveContract(current, descriptor, hrp, tagSource) {
   const pubKey = deriveLeafPubkey(descriptor);
   const tapscript = rebuildTapscript(current, pubKey);
   const serverPubKey = tapscript.options.serverPubKey;
-  const csvTimelock = chunkGMUVWKOK_cjs.timelockToSequence(tapscript.options.csvTimelock).toString();
+  const csvTimelock = chunkCDWLZQQW_cjs.timelockToSequence(tapscript.options.csvTimelock).toString();
   const base$1 = {
     script: base.hex.encode(tapscript.pkScript),
     address: tapscript.address(hrp, serverPubKey).encode(),
@@ -10279,11 +10498,11 @@ function buildReceiveContract(current, descriptor, hrp, tagSource) {
     // index-0 key. Without it, spends produce unsigned PSBTs that the
     // server rejects with `INVALID_PSBT_INPUT (5): missing tapscript spend sig`.
     metadata: {
-      ...{ source: chunk53XNU2EL_cjs.WALLET_RECEIVE_SOURCE },
+      ...{ source: chunk37XKN5DZ_cjs.WALLET_RECEIVE_SOURCE },
       signingDescriptor: descriptor
     }
   };
-  const params = tapscript instanceof chunk53XNU2EL_cjs.DelegateVtxo.Script ? {
+  const params = tapscript instanceof chunk37XKN5DZ_cjs.DelegateVtxo.Script ? {
     ...base$1,
     type: "delegate",
     params: {
@@ -10304,10 +10523,10 @@ function buildReceiveContract(current, descriptor, hrp, tagSource) {
   return { tapscript, params };
 }
 function rebuildTapscript(current, pubKey) {
-  if (current instanceof chunk53XNU2EL_cjs.DelegateVtxo.Script) {
-    return new chunk53XNU2EL_cjs.DelegateVtxo.Script({ ...current.options, pubKey });
+  if (current instanceof chunk37XKN5DZ_cjs.DelegateVtxo.Script) {
+    return new chunk37XKN5DZ_cjs.DelegateVtxo.Script({ ...current.options, pubKey });
   }
-  return new chunk53XNU2EL_cjs.DefaultVtxo.Script({ ...current.options, pubKey });
+  return new chunk37XKN5DZ_cjs.DefaultVtxo.Script({ ...current.options, pubKey });
 }
 async function pickActiveReceive(contractRepository, serverPubKey, expectedType) {
   const candidates = await contractRepository.getContracts({
@@ -10316,7 +10535,7 @@ async function pickActiveReceive(contractRepository, serverPubKey, expectedType)
   });
   const serverPubKeyHex = base.hex.encode(serverPubKey);
   const matching = candidates.filter(
-    (c) => c.params.serverPubKey === serverPubKeyHex && c.metadata?.source === chunk53XNU2EL_cjs.WALLET_RECEIVE_SOURCE
+    (c) => c.params.serverPubKey === serverPubKeyHex && c.metadata?.source === chunk37XKN5DZ_cjs.WALLET_RECEIVE_SOURCE
   ).sort((a, b) => {
     if (b.createdAt !== a.createdAt) return b.createdAt - a.createdAt;
     return signingDescriptorIndex(b.metadata?.signingDescriptor) - signingDescriptorIndex(a.metadata?.signingDescriptor);
@@ -10492,12 +10711,12 @@ var InputSignerRouter = class {
 };
 
 // src/wallet/wallet.ts
-var getArkadeServerUrl = ({ arkServerUrl }) => arkServerUrl || chunkGMUVWKOK_cjs.DEFAULT_ARKADE_SERVER_URL;
+var getArkadeServerUrl = ({ arkServerUrl }) => arkServerUrl || chunkCDWLZQQW_cjs.DEFAULT_ARKADE_SERVER_URL;
 function intentProofJobs(coins) {
   if (coins.length === 0) return [];
   const coinJobs = coins.map((coin, i) => ({
     index: i + 1,
-    lookupScript: chunkGMUVWKOK_cjs.VtxoScript.decode(coin.tapTree).pkScript
+    lookupScript: chunkCDWLZQQW_cjs.VtxoScript.decode(coin.tapTree).pkScript
   }));
   return [{ index: 0, lookupScript: coinJobs[0].lookupScript }, ...coinJobs];
 }
@@ -10522,7 +10741,7 @@ function dedupeTimelocks(timelocks) {
   const seen = /* @__PURE__ */ new Set();
   const deduped = [];
   for (const timelock of timelocks) {
-    const sequence = chunkGMUVWKOK_cjs.timelockToSequence(timelock).toString();
+    const sequence = chunkCDWLZQQW_cjs.timelockToSequence(timelock).toString();
     if (seen.has(sequence)) continue;
     seen.add(sequence);
     deduped.push(timelock);
@@ -10539,7 +10758,7 @@ async function resolveBoardingBootTapscript(contractRepository, serverPubKey, ba
     state: "active"
   });
   const newest = candidates.filter(
-    (c) => c.params.serverPubKey === serverPubKeyHex && c.metadata?.source === chunk53XNU2EL_cjs.WALLET_RECEIVE_SOURCE
+    (c) => c.params.serverPubKey === serverPubKeyHex && c.metadata?.source === chunk37XKN5DZ_cjs.WALLET_RECEIVE_SOURCE
   ).sort((a, b) => {
     if (b.createdAt !== a.createdAt) return b.createdAt - a.createdAt;
     return signingDescriptorIndex(b.metadata?.signingDescriptor) - signingDescriptorIndex(a.metadata?.signingDescriptor);
@@ -10547,7 +10766,7 @@ async function resolveBoardingBootTapscript(contractRepository, serverPubKey, ba
   if (!newest?.params.pubKey) return baseline;
   try {
     const pubKey = base.hex.decode(newest.params.pubKey);
-    return new chunk53XNU2EL_cjs.DefaultVtxo.Script({ ...baseline.options, pubKey });
+    return new chunk37XKN5DZ_cjs.DefaultVtxo.Script({ ...baseline.options, pubKey });
   } catch (e) {
     console.warn("Skipping malformed boarding contract at boot", newest.script, e);
     return baseline;
@@ -10797,6 +11016,20 @@ var ReadonlyWallet = class _ReadonlyWallet {
       ...this._deprecatedSigners.keys()
     ]);
   }
+  /**
+   * `serverPubKey` defaults to the live key; spend paths that snapshot it
+   * against mid-flight rotation pass their snapshot, so the check reads from
+   * one rotation epoch.
+   */
+  recipientAddressContext(serverPubKey = this._arkServerPublicKey) {
+    return {
+      hrp: this.network.hrp,
+      signerSet: {
+        active: toXOnlySignerHex(base.hex.encode(serverPubKey)),
+        deprecated: this._deprecatedSigners
+      }
+    };
+  }
   /**
    * Currently-active receive tapscript. Read-only from the outside;
    * mutated only via {@link Wallet.setOffchainTapscriptForRotation}
@@ -10867,7 +11100,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
    */
   static async setupWalletConfig(config, pubKey) {
     const arkadeServerUrl = getArkadeServerUrl(config);
-    const arkProvider = config.arkProvider || new chunkGMUVWKOK_cjs.RestArkProvider(arkadeServerUrl);
+    const arkProvider = config.arkProvider || new chunkCDWLZQQW_cjs.RestArkProvider(arkadeServerUrl);
     let indexerProvider = config.indexerProvider;
     if (!indexerProvider) {
       let indexerUrl = config.indexerUrl;
@@ -10884,7 +11117,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
           indexerUrl = arkadeServerUrl;
         }
       }
-      indexerProvider = new chunkRNECH3TA_cjs.RestIndexerProvider(indexerUrl);
+      indexerProvider = new chunk24YNIQSW_cjs.RestIndexerProvider(indexerUrl);
     }
     const walletRepository = config.storage?.walletRepository ?? new IndexedDBWalletRepository();
     const contractRepository = config.storage?.contractRepository ?? new IndexedDBContractRepository();
@@ -10893,7 +11126,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
       source: serverInfoSource,
       lastOnlineAt: serverInfoLastOnlineAt
     } = await resolveArkInfo(arkProvider, walletRepository);
-    const network = chunkGMUVWKOK_cjs.getNetwork(info.network);
+    const network = chunkCDWLZQQW_cjs.getNetwork(info.network);
     if ("descriptor" in config.identity) {
       const descriptor = config.identity.descriptor;
       const identityIsMainnet = !descriptor.includes("tpub");
@@ -10940,11 +11173,11 @@ var ReadonlyWallet = class _ReadonlyWallet {
       serverPubKey,
       csvTimelock: exitTimelock
     };
-    const offchainTapscript = !delegatePubKey ? new chunk53XNU2EL_cjs.DefaultVtxo.Script(offchainOptions) : new chunk53XNU2EL_cjs.DelegateVtxo.Script({ ...offchainOptions, delegatePubKey });
-    const boardingTapscript = chunk53XNU2EL_cjs.BoardingContractHandler.createScript({
+    const offchainTapscript = !delegatePubKey ? new chunk37XKN5DZ_cjs.DefaultVtxo.Script(offchainOptions) : new chunk37XKN5DZ_cjs.DelegateVtxo.Script({ ...offchainOptions, delegatePubKey });
+    const boardingTapscript = chunk37XKN5DZ_cjs.BoardingContractHandler.createScript({
       pubKey: base.hex.encode(pubKey),
       serverPubKey: base.hex.encode(serverPubKey),
-      csvTimelock: chunkGMUVWKOK_cjs.timelockToSequence(boardingTimelock).toString()
+      csvTimelock: chunkCDWLZQQW_cjs.timelockToSequence(boardingTimelock).toString()
     });
     return {
       arkProvider,
@@ -11050,19 +11283,19 @@ var ReadonlyWallet = class _ReadonlyWallet {
     let pendingRecovery = 0;
     const now = { timestamp: /* @__PURE__ */ new Date() };
     const settled = vtxos.filter(
-      (coin) => chunkGMUVWKOK_cjs.canSpendOffchain(coin, now) && !coin.isPreconfirmed && !isPendingRecovery(coin)
+      (coin) => chunkCDWLZQQW_cjs.canSpendOffchain(coin, now) && !coin.isPreconfirmed && !isPendingRecovery(coin)
     ).reduce((sum, coin) => sum + coin.value, 0);
     const preconfirmed = vtxos.filter(
-      (coin) => chunkGMUVWKOK_cjs.canSpendOffchain(coin, now) && coin.isPreconfirmed && !isPendingRecovery(coin)
+      (coin) => chunkCDWLZQQW_cjs.canSpendOffchain(coin, now) && coin.isPreconfirmed && !isPendingRecovery(coin)
     ).reduce((sum, coin) => sum + coin.value, 0);
-    const available = unlockedVtxos.filter((coin) => chunkGMUVWKOK_cjs.canSpendOffchain(coin, now) && !isPendingRecovery(coin)).reduce((sum, coin) => sum + coin.value, 0);
-    recoverable = vtxos.filter((coin) => chunkGMUVWKOK_cjs.canRecoverOnchain(coin, now) && !isPendingRecovery(coin)).reduce((sum, coin) => sum + coin.value, 0);
+    const available = unlockedVtxos.filter((coin) => chunkCDWLZQQW_cjs.canSpendOffchain(coin, now) && !isPendingRecovery(coin)).reduce((sum, coin) => sum + coin.value, 0);
+    recoverable = vtxos.filter((coin) => chunkCDWLZQQW_cjs.canRecoverOnchain(coin, now) && !isPendingRecovery(coin)).reduce((sum, coin) => sum + coin.value, 0);
     pendingRecovery = vtxos.filter(isPendingRecovery).reduce((sum, coin) => sum + coin.value, 0);
     const totalBoarding = confirmed + unconfirmed;
     const totalOffchain = settled + preconfirmed + recoverable + pendingRecovery;
     const assetBalances = /* @__PURE__ */ new Map();
     for (const vtxo of vtxos) {
-      if (chunkGMUVWKOK_cjs.hasTerminalSpend(vtxo)) continue;
+      if (chunkCDWLZQQW_cjs.hasTerminalSpend(vtxo)) continue;
       if (vtxo.assets) {
         for (const a of vtxo.assets) {
           const current = assetBalances.get(a.assetId) ?? 0n;
@@ -11103,8 +11336,8 @@ var ReadonlyWallet = class _ReadonlyWallet {
       if (this._pendingSpendOutpoints.has(`${vtxo.txid}:${vtxo.vout}`)) {
         return false;
       }
-      if (!chunkGMUVWKOK_cjs.hasTerminalSpend(vtxo)) {
-        if (!f.withRecoverable && chunkGMUVWKOK_cjs.canRecoverOnchain(vtxo, now)) {
+      if (!chunkCDWLZQQW_cjs.hasTerminalSpend(vtxo)) {
+        if (!f.withRecoverable && chunkCDWLZQQW_cjs.canRecoverOnchain(vtxo, now)) {
           return false;
         }
         return true;
@@ -11137,7 +11370,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
     const response = await contractManager.getContractsWithVtxos();
     const allVtxos = response.flatMap((_) => _.vtxos);
     const { boardingTxs, commitmentsToIgnore } = await this.getBoardingTxs();
-    const resolveTxCreatedAt = (txids) => chunkGMUVWKOK_cjs.fetchVtxoCreatedAtByTxid(this.indexerProvider, txids);
+    const resolveTxCreatedAt = (txids) => chunkCDWLZQQW_cjs.fetchVtxoCreatedAtByTxid(this.indexerProvider, txids);
     return buildTransactionHistory(
       allVtxos,
       boardingTxs,
@@ -11231,7 +11464,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
               },
               isUnrolled: true,
               ...boardingFacts,
-              virtualStatus: chunkGMUVWKOK_cjs.toVirtualStatus(boardingFacts),
+              virtualStatus: chunkCDWLZQQW_cjs.toVirtualStatus(boardingFacts),
               spentBy: "",
               createdAt: tx.status.confirmed ? new Date(tx.status.block_time * 1e3) : /* @__PURE__ */ new Date(0),
               script: scriptHex
@@ -11287,9 +11520,9 @@ var ReadonlyWallet = class _ReadonlyWallet {
   async getBoardingTapscripts(allowedSigners) {
     const byScript = /* @__PURE__ */ new Map();
     const add = (s) => byScript.set(base.hex.encode(s.pkScript), s);
-    const boardingCsv = this.boardingTapscript.options.csvTimelock ?? chunk53XNU2EL_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
+    const boardingCsv = this.boardingTapscript.options.csvTimelock ?? chunk37XKN5DZ_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
     add(
-      new chunk53XNU2EL_cjs.DefaultVtxo.Script({
+      new chunk37XKN5DZ_cjs.DefaultVtxo.Script({
         pubKey: await this.identity.xOnlyPublicKey(),
         serverPubKey: this.boardingTapscript.options.serverPubKey,
         csvTimelock: boardingCsv
@@ -11304,7 +11537,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
     for (const c of boardingContracts) {
       if (!allowed.has(toXOnlySignerHex(c.params.serverPubKey))) continue;
       try {
-        add(chunk53XNU2EL_cjs.BoardingContractHandler.createScript(c.params));
+        add(chunk37XKN5DZ_cjs.BoardingContractHandler.createScript(c.params));
       } catch (e) {
         console.warn("Skipping malformed boarding contract", c.script, e);
       }
@@ -11342,7 +11575,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
         // Per-row CSV delay decoded from THIS tapscript's exit leaf —
         // not the wallet's current boarding timelock, which a signer
         // rotation may have changed.
-        csvTimelock: chunkGMUVWKOK_cjs.CSVMultisigTapscript.decode(base.hex.decode(tapscript.exitScript)).params.timelock,
+        csvTimelock: chunkCDWLZQQW_cjs.CSVMultisigTapscript.decode(base.hex.decode(tapscript.exitScript)).params.timelock,
         coins: utxos
       });
     }
@@ -11475,7 +11708,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
   /** Fetch Arkade transaction ids that are still pending final settlement. */
   async fetchPendingTxs() {
     const scripts = await this.getWalletScripts();
-    const vtxos = await chunkGMUVWKOK_cjs.getAllNormalizedVtxos(this.indexerProvider, scripts);
+    const vtxos = await chunkCDWLZQQW_cjs.getAllNormalizedVtxos(this.indexerProvider, scripts);
     return vtxos.filter(
       (vtxo) => (vtxo.isSpent || vtxo.isPreconfirmed && !vtxo.isSwept) && vtxo.arkTxId !== void 0
     ).map((_) => _.arkTxId);
@@ -11506,7 +11739,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
     });
     for (const contract of contracts) {
       if (map.has(contract.script)) continue;
-      const handler = chunk53XNU2EL_cjs.contractHandlers.get(contract.type);
+      const handler = chunk37XKN5DZ_cjs.contractHandlers.get(contract.type);
       if (handler) {
         const script = handler.createScript(contract.params);
         map.set(contract.script, script);
@@ -11609,7 +11842,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
       lookAhead: this.lookAheadConfig()
     });
     const baselinePubkey = await this.identity.xOnlyPublicKey();
-    const delegatePubKey = this.offchainTapscript instanceof chunk53XNU2EL_cjs.DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0;
+    const delegatePubKey = this.offchainTapscript instanceof chunk37XKN5DZ_cjs.DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0;
     const baselineSigners = [
       this.offchainTapscript.options.serverPubKey,
       ...[...this._deprecatedSigners.keys()].map((h) => base.hex.decode(h))
@@ -11617,8 +11850,8 @@ var ReadonlyWallet = class _ReadonlyWallet {
     const seenBaselineScripts = /* @__PURE__ */ new Set();
     for (const serverPubKey of baselineSigners) {
       for (const csvTimelock of this.walletContractTimelocks) {
-        const csvTimelockStr = chunkGMUVWKOK_cjs.timelockToSequence(csvTimelock).toString();
-        const defaultScript = new chunk53XNU2EL_cjs.DefaultVtxo.Script({
+        const csvTimelockStr = chunkCDWLZQQW_cjs.timelockToSequence(csvTimelock).toString();
+        const defaultScript = new chunk37XKN5DZ_cjs.DefaultVtxo.Script({
           pubKey: baselinePubkey,
           serverPubKey,
           csvTimelock
@@ -11639,7 +11872,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
           });
         }
         if (delegatePubKey) {
-          const delegateScript = new chunk53XNU2EL_cjs.DelegateVtxo.Script({
+          const delegateScript = new chunk37XKN5DZ_cjs.DelegateVtxo.Script({
             pubKey: baselinePubkey,
             serverPubKey,
             delegatePubKey,
@@ -11663,9 +11896,9 @@ var ReadonlyWallet = class _ReadonlyWallet {
         }
       }
     }
-    const boardingCsvTimelock = this.boardingTapscript.options.csvTimelock ?? chunk53XNU2EL_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
+    const boardingCsvTimelock = this.boardingTapscript.options.csvTimelock ?? chunk37XKN5DZ_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
     for (const serverPubKey of baselineSigners) {
-      const baselineBoarding = new chunk53XNU2EL_cjs.DefaultVtxo.Script({
+      const baselineBoarding = new chunk37XKN5DZ_cjs.DefaultVtxo.Script({
         pubKey: baselinePubkey,
         serverPubKey,
         csvTimelock: boardingCsvTimelock
@@ -11678,7 +11911,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
         params: {
           pubKey: base.hex.encode(baselineBoarding.options.pubKey),
           serverPubKey: base.hex.encode(serverPubKey),
-          csvTimelock: chunkGMUVWKOK_cjs.timelockToSequence(boardingCsvTimelock).toString()
+          csvTimelock: chunkCDWLZQQW_cjs.timelockToSequence(boardingCsvTimelock).toString()
         },
         script: boardingScriptHex,
         address: baselineBoarding.address(this.network.hrp, serverPubKey).encode(),
@@ -11852,7 +12085,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       serverPubKey: this.offchainTapscript.options.serverPubKey,
       deprecatedSignerPubKeys: [...this._deprecatedSigners.keys()].map((h) => base.hex.decode(h)),
       csvTimelocks: this.walletContractTimelocks,
-      delegatePubKey: this.offchainTapscript instanceof chunk53XNU2EL_cjs.DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0
+      delegatePubKey: this.offchainTapscript instanceof chunk37XKN5DZ_cjs.DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0
     };
   }
   _signerRouter;
@@ -11944,25 +12177,25 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       return this.getBoardingAddress();
     }
     const descriptor = await provider.getNextSigningDescriptor();
-    const pubKey = chunk53XNU2EL_cjs.deriveDescriptorLeafPubKey(descriptor);
-    const newBoarding = new chunk53XNU2EL_cjs.DefaultVtxo.Script({
+    const pubKey = chunk37XKN5DZ_cjs.deriveDescriptorLeafPubKey(descriptor);
+    const newBoarding = new chunk37XKN5DZ_cjs.DefaultVtxo.Script({
       ...this._boardingTapscript.options,
       pubKey
     });
-    const csvTimelock = newBoarding.options.csvTimelock ?? chunk53XNU2EL_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
+    const csvTimelock = newBoarding.options.csvTimelock ?? chunk37XKN5DZ_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
     const manager = await this.getContractManager();
     await manager.createContract({
       type: "boarding",
       params: {
         pubKey: base.hex.encode(pubKey),
         serverPubKey: base.hex.encode(newBoarding.options.serverPubKey),
-        csvTimelock: chunkGMUVWKOK_cjs.timelockToSequence(csvTimelock).toString()
+        csvTimelock: chunkCDWLZQQW_cjs.timelockToSequence(csvTimelock).toString()
       },
       script: base.hex.encode(newBoarding.pkScript),
       address: newBoarding.address(this.network.hrp, this.arkServerPublicKey).encode(),
       state: "active",
       metadata: {
-        source: chunk53XNU2EL_cjs.WALLET_RECEIVE_SOURCE,
+        source: chunk37XKN5DZ_cjs.WALLET_RECEIVE_SOURCE,
         signingDescriptor: descriptor
       }
     });
@@ -11974,6 +12207,51 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     }
     return newBoarding.onchainAddress(this.network);
   }
+  /**
+   * @see HDWalletCapable.getCurrentSigningDescriptor
+   */
+  async getCurrentSigningDescriptor() {
+    const provider = this._descriptorProvider;
+    if (!(provider instanceof HDDescriptorProvider)) return void 0;
+    return provider.getCurrentSigningDescriptor();
+  }
+  /**
+   * @see HDWalletCapable.getUsedSigningDescriptors
+   *
+   * Union of the watermark band and the descriptors persisted on contracts:
+   * the band alone would miss rows a restore scan wrote, and the contracts
+   * alone would miss indices allocated for something the wallet never
+   * persisted (a swap, an externally issued invoice).
+   */
+  async getUsedSigningDescriptors() {
+    const provider = this._descriptorProvider;
+    const descriptors = /* @__PURE__ */ new Set();
+    if (provider instanceof HDDescriptorProvider) {
+      const lastIndexUsed = await provider.getLastIndexUsed();
+      for (let i = 0; i <= (lastIndexUsed ?? -1); i++) {
+        descriptors.add(provider.materializeDescriptorAt(i));
+      }
+    }
+    for (const contract of await this.contractRepository.getContracts()) {
+      const descriptor = contract.metadata?.signingDescriptor;
+      if (typeof descriptor === "string" && descriptor.length > 0) {
+        descriptors.add(descriptor);
+      }
+    }
+    return [...descriptors].sort(
+      (a, b) => signingDescriptorIndex(a) - signingDescriptorIndex(b)
+    );
+  }
+  /**
+   * @see HDWalletCapable.signerForDescriptor
+   */
+  async signerForDescriptor(descriptor) {
+    const provider = this._descriptorProvider;
+    if (!(provider instanceof HDDescriptorProvider) || !provider.isOurs(descriptor)) {
+      return this.identity;
+    }
+    return new DescriptorIdentity({ descriptor, signer: provider, base: this.identity });
+  }
   /**
    * Mid-session server-signer rotation (plan §4). When arkd rotates its
    * active signer mid-session — the case the long-lived service worker and
@@ -12006,7 +12284,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const xonly = toXOnlyPubKey(newServerPubKey);
     let newServerUnrollScript;
     try {
-      newServerUnrollScript = chunkGMUVWKOK_cjs.CSVMultisigTapscript.decode(base.hex.decode(checkpointTapscript));
+      newServerUnrollScript = chunkCDWLZQQW_cjs.CSVMultisigTapscript.decode(base.hex.decode(checkpointTapscript));
     } catch (e) {
       throw new Error("Invalid checkpointTapscript from server");
     }
@@ -12034,21 +12312,21 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const [currentBoardingRow] = await manager.getContracts({
       script: currentBoardingScript
     });
-    const newOffchain = this.offchainTapscript instanceof chunk53XNU2EL_cjs.DelegateVtxo.Script ? new chunk53XNU2EL_cjs.DelegateVtxo.Script({
+    const newOffchain = this.offchainTapscript instanceof chunk37XKN5DZ_cjs.DelegateVtxo.Script ? new chunk37XKN5DZ_cjs.DelegateVtxo.Script({
       ...this.offchainTapscript.options,
       serverPubKey: xonly
-    }) : new chunk53XNU2EL_cjs.DefaultVtxo.Script({
+    }) : new chunk37XKN5DZ_cjs.DefaultVtxo.Script({
       ...this.offchainTapscript.options,
       serverPubKey: xonly
     });
-    const newBoarding = new chunk53XNU2EL_cjs.DefaultVtxo.Script({
+    const newBoarding = new chunk37XKN5DZ_cjs.DefaultVtxo.Script({
       ...this._boardingTapscript.options,
       serverPubKey: xonly
     });
-    const offchainCsv = chunkGMUVWKOK_cjs.timelockToSequence(newOffchain.options.csvTimelock).toString();
+    const offchainCsv = chunkCDWLZQQW_cjs.timelockToSequence(newOffchain.options.csvTimelock).toString();
     const newOffchainScript = base.hex.encode(newOffchain.pkScript);
     const newOffchainAddress = newOffchain.address(this.network.hrp, xonly).encode();
-    if (newOffchain instanceof chunk53XNU2EL_cjs.DelegateVtxo.Script) {
+    if (newOffchain instanceof chunk37XKN5DZ_cjs.DelegateVtxo.Script) {
       await manager.createContract({
         type: "delegate",
         params: {
@@ -12076,13 +12354,13 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         metadata: currentOffchainRow?.metadata
       });
     }
-    const boardingCsv = newBoarding.options.csvTimelock ?? chunk53XNU2EL_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
+    const boardingCsv = newBoarding.options.csvTimelock ?? chunk37XKN5DZ_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK;
     await manager.createContract({
       type: "boarding",
       params: {
         pubKey: base.hex.encode(newBoarding.options.pubKey),
         serverPubKey: base.hex.encode(xonly),
-        csvTimelock: chunkGMUVWKOK_cjs.timelockToSequence(boardingCsv).toString()
+        csvTimelock: chunkCDWLZQQW_cjs.timelockToSequence(boardingCsv).toString()
       },
       script: base.hex.encode(newBoarding.pkScript),
       address: newBoarding.address(this.network.hrp, xonly).encode(),
@@ -12115,14 +12393,14 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
   _restoreInFlight;
   _addPendingSpends(inputs) {
     for (const input of inputs) {
-      if (chunkGMUVWKOK_cjs.isVirtualCoin(input)) {
+      if (chunkCDWLZQQW_cjs.isVirtualCoin(input)) {
         this._pendingSpendOutpoints.add(`${input.txid}:${input.vout}`);
       }
     }
   }
   _removePendingSpends(inputs) {
     for (const input of inputs) {
-      if (chunkGMUVWKOK_cjs.isVirtualCoin(input)) {
+      if (chunkCDWLZQQW_cjs.isVirtualCoin(input)) {
         this._pendingSpendOutpoints.delete(`${input.txid}:${input.vout}`);
       }
     }
@@ -12182,7 +12460,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const hd = provider instanceof HDDescriptorProvider;
     const staticDescriptor = hd ? void 0 : `tr(${base.hex.encode(await this.identity.xOnlyPublicKey())})`;
     const materialize = (index) => hd ? provider.materializeDescriptorAt(index) : staticDescriptor;
-    const delegatePubKey = this.offchainTapscript instanceof chunk53XNU2EL_cjs.DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0;
+    const delegatePubKey = this.offchainTapscript instanceof chunk37XKN5DZ_cjs.DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0;
     const arkInfo = await this.arkProvider.getInfo();
     const currentSignerPubKey = toXOnlyPubKey(base.hex.decode(arkInfo.signerPubkey));
     const deprecatedSignerPubKeys = arkInfo.deprecatedSigners.map(
@@ -12201,7 +12479,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       csvTimelocks: this.walletContractTimelocks,
       // Boarding-exit CSV so the boarding handler can build its
       // candidate script (distinct from the unilateral-exit matrix).
-      boardingTimelock: this.boardingTapscript.options.csvTimelock ?? chunk53XNU2EL_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK,
+      boardingTimelock: this.boardingTapscript.options.csvTimelock ?? chunk37XKN5DZ_cjs.DefaultVtxo.Script.DEFAULT_TIMELOCK,
       delegatePubKey
     };
     const result = await manager.scanContracts({
@@ -12318,7 +12596,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     let serverUnrollScript;
     try {
       const raw = base.hex.decode(setup.info.checkpointTapscript);
-      serverUnrollScript = chunkGMUVWKOK_cjs.CSVMultisigTapscript.decode(raw);
+      serverUnrollScript = chunkCDWLZQQW_cjs.CSVMultisigTapscript.decode(raw);
     } catch (e) {
       throw new Error("Invalid checkpointTapscript from server");
     }
@@ -12456,7 +12734,12 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
           inputs: params.selectedVtxos,
           changeAmount: BigInt(changeAmount)
         };
-        const outputAddress = chunkGMUVWKOK_cjs.ArkAddress.decode(params.address);
+        const outputAddress = chunkCDWLZQQW_cjs.ArkAddress.decode(params.address);
+        assertRecipientArkAddress(
+          params.address,
+          outputAddress,
+          this.recipientAddressContext(serverPubKey)
+        );
         const outputScript = BigInt(params.amount) < this.dustAmount ? outputAddress.subdustPkScript : outputAddress.pkScript;
         const outputs = [
           {
@@ -12509,13 +12792,13 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       }
     }
     const offchainAddress = await this.getAddress();
-    const offchainPkScript = chunkGMUVWKOK_cjs.ArkAddress.decode(offchainAddress).pkScript;
+    const offchainPkScript = chunkCDWLZQQW_cjs.ArkAddress.decode(offchainAddress).pkScript;
     const offchainOutputScript = base.hex.encode(offchainPkScript);
     if (!params) {
       const { fees, vtxoMaxAmount } = await this.arkProvider.getInfo();
       const estimator = new Estimator(fees.intentFee);
       let amount = 0;
-      const exitScript = chunkGMUVWKOK_cjs.CSVMultisigTapscript.decode(
+      const exitScript = chunkCDWLZQQW_cjs.CSVMultisigTapscript.decode(
         base.hex.decode(this.boardingTapscript.exitScript)
       );
       const boardingTimelock = exitScript.params.timelock;
@@ -12544,7 +12827,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         if (filteredVtxos.length >= MAX_VTXOS_PER_SETTLEMENT) {
           break;
         }
-        const inputFee = estimator.evalOffchainInput(chunkGMUVWKOK_cjs.toOffchainInputFeeParams(vtxo));
+        const inputFee = estimator.evalOffchainInput(chunkCDWLZQQW_cjs.toOffchainInputFeeParams(vtxo));
         if (inputFee.satoshis >= vtxo.value) {
           continue;
         }
@@ -12586,13 +12869,21 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const onchainOutputIndexes = [];
     const outputs = [];
     let hasOffchainOutputs = false;
+    let recipientContext;
     for (const [index, output] of params.outputs.entries()) {
       let script;
+      let arkAddress;
       try {
-        const addr = chunkGMUVWKOK_cjs.ArkAddress.decode(output.address);
-        script = addr.pkScript;
-        hasOffchainOutputs = true;
+        arkAddress = chunkCDWLZQQW_cjs.ArkAddress.decode(output.address);
       } catch {
+        arkAddress = void 0;
+      }
+      if (arkAddress) {
+        recipientContext ??= this.recipientAddressContext();
+        assertRecipientArkAddress(output.address, arkAddress, recipientContext);
+        script = arkAddress.pkScript;
+        hasOffchainOutputs = true;
+      } else {
         const addr = btcSigner.Address(this.network).decode(output.address);
         script = btcSigner.OutScript.encode(addr);
         onchainOutputIndexes.push(index);
@@ -12775,7 +13066,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
   async maybeRotateBoardingAfterBoard(inputs) {
     if (!this._descriptorProvider) return;
     const consumedBoarding = inputs.some(
-      (input) => typeof input !== "string" && !chunkGMUVWKOK_cjs.isVirtualCoin(input)
+      (input) => typeof input !== "string" && !chunkCDWLZQQW_cjs.isVirtualCoin(input)
     );
     if (!consumedBoarding) return;
     try {
@@ -12784,14 +13075,22 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       console.warn("Failed to rotate boarding address after board", e);
     }
   }
-  async handleSettlementFinalizationEvent(event, inputs, forfeitOutputScript, connectorsGraph) {
+  async handleSettlementFinalizationEvent(event, inputs, forfeitOutputScript, expectedRecipients, connectorsGraph, validatedCommitmentTxid) {
     const signedForfeits = [];
     let settlementPsbt = btcSigner.Transaction.fromPSBT(base.base64.decode(event.commitmentTx));
+    assertFinalCommitmentMatchesValidated(
+      settlementPsbt,
+      validatedCommitmentTxid,
+      "settlement finalization"
+    );
+    if (!validatedCommitmentTxid && expectedRecipients.length > 0) {
+      validateBatchRecipientsWithoutTree(settlementPsbt, expectedRecipients, this.network);
+    }
     let hasBoardingUtxos = false;
     let connectorIndex = 0;
     const connectorsLeaves = connectorsGraph?.leaves() || [];
     for (const input of inputs) {
-      if (!chunkGMUVWKOK_cjs.isVirtualCoin(input)) {
+      if (!chunkCDWLZQQW_cjs.isVirtualCoin(input)) {
         for (let i = 0; i < settlementPsbt.inputsLength; i++) {
           const settlementInput = settlementPsbt.getInput(i);
           if (!settlementInput.txid || settlementInput.index === void 0) {
@@ -12822,7 +13121,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         }
         continue;
       }
-      if (chunkGMUVWKOK_cjs.canRecoverOnchain(input, { timestamp: /* @__PURE__ */ new Date() }) || isSubdust({ value: input.value }, this.dustAmount)) {
+      if (chunkCDWLZQQW_cjs.canRecoverOnchain(input, { timestamp: /* @__PURE__ */ new Date() }) || isSubdust({ value: input.value }, this.dustAmount)) {
         continue;
       }
       if (connectorsLeaves.length === 0) {
@@ -12850,7 +13149,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
             index: input.vout,
             witnessUtxo: {
               amount: BigInt(input.value),
-              script: chunkGMUVWKOK_cjs.VtxoScript.decode(input.tapTree).pkScript
+              script: chunkCDWLZQQW_cjs.VtxoScript.decode(input.tapTree).pkScript
             },
             sighashType: btcSigner.SigHash.DEFAULT,
             tapLeafScript: [input.forfeitTapLeafScript]
@@ -12869,7 +13168,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       forfeitTx = await this._signerRouter.sign(forfeitTx, [
         {
           index: 0,
-          lookupScript: chunkGMUVWKOK_cjs.VtxoScript.decode(input.tapTree).pkScript
+          lookupScript: chunkCDWLZQQW_cjs.VtxoScript.decode(input.tapTree).pkScript
         }
       ]);
       signedForfeits.push(base.base64.encode(forfeitTx.toPSBT()));
@@ -12909,6 +13208,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
    */
   createBatchHandler(intentId, inputs, expectedRecipients, session) {
     let sweepTapTreeRoot;
+    let validatedCommitmentTxid;
     return {
       onBatchStarted: async (event) => {
         const utf8IntentId = new TextEncoder().encode(intentId);
@@ -12927,7 +13227,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         if (skip) {
           return { skip };
         }
-        const sweepTapscript = chunkGMUVWKOK_cjs.CSVMultisigTapscript.encode({
+        const sweepTapscript = chunkCDWLZQQW_cjs.CSVMultisigTapscript.encode({
           timelock: {
             value: event.batchExpiry,
             type: event.batchExpiry >= 512n ? "seconds" : "blocks"
@@ -12966,6 +13266,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         if (!sharedOutput?.amount) {
           throw new Error("Shared output not found");
         }
+        validatedCommitmentTxid = commitmentTx.id;
         await session.init(vtxoTree, sweepTapTreeRoot, sharedOutput.amount);
         const pubkey = base.hex.encode(await session.getPublicKey());
         const nonces = await session.getNonces();
@@ -12994,7 +13295,9 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
           event,
           inputs,
           this.forfeitOutputScript,
-          connectorTree
+          expectedRecipients,
+          connectorTree,
+          validatedCommitmentTxid
         );
       }
     };
@@ -13033,9 +13336,9 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         ...existing ?? {},
         intentTxId,
         registerProof: intent.proof,
-        registerProofMessage: chunkGMUVWKOK_cjs.Intent.encodeMessage(intent.message),
+        registerProofMessage: chunkCDWLZQQW_cjs.Intent.encodeMessage(intent.message),
         deleteProof: deleteIntent.proof,
-        deleteProofMessage: chunkGMUVWKOK_cjs.Intent.encodeMessage(deleteIntent.message),
+        deleteProofMessage: chunkCDWLZQQW_cjs.Intent.encodeMessage(deleteIntent.message),
         intentVtxos: inputs.map((i) => ({
           txid: i.txid,
           vout: i.vout
@@ -13067,7 +13370,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     try {
       return await this.arkProvider.registerIntent(intent);
     } catch (error) {
-      if (error instanceof chunkGMUVWKOK_cjs.ArkError && error.code === 0 && error.message.includes("duplicated input")) {
+      if (error instanceof chunkCDWLZQQW_cjs.ArkError && error.code === 0 && error.message.includes("duplicated input")) {
         const deleteIntent = await this.makeDeleteIntentSignature(inputs);
         await this.arkProvider.deleteIntent(deleteIntent);
         return this.arkProvider.registerIntent(intent);
@@ -13083,7 +13386,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       expire_at: 0,
       cosigners_public_keys: cosignerPubKeys
     };
-    const proof = chunkGMUVWKOK_cjs.Intent.create(message, coins, outputs);
+    const proof = chunkCDWLZQQW_cjs.Intent.create(message, coins, outputs);
     const signedProof = await this._signerRouter.sign(proof, intentProofJobs(coins));
     return {
       proof: base.base64.encode(signedProof.toPSBT()),
@@ -13095,7 +13398,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       type: "delete",
       expire_at: 0
     };
-    const proof = chunkGMUVWKOK_cjs.Intent.create(message, coins, []);
+    const proof = chunkCDWLZQQW_cjs.Intent.create(message, coins, []);
     const signedProof = await this._signerRouter.sign(proof, intentProofJobs(coins));
     return {
       proof: base.base64.encode(signedProof.toPSBT()),
@@ -13107,7 +13410,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       type: "get-pending-tx",
       expire_at: 0
     };
-    const proof = chunkGMUVWKOK_cjs.Intent.create(message, coins, []);
+    const proof = chunkCDWLZQQW_cjs.Intent.create(message, coins, []);
     const signedProof = await this._signerRouter.sign(proof, intentProofJobs(coins));
     return {
       proof: base.base64.encode(signedProof.toPSBT()),
@@ -13128,7 +13431,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     if (!vtxos || vtxos.length === 0) {
       const scriptMap = await this.getScriptMap();
       const allExtended = [];
-      const fetchedVtxos = await chunkGMUVWKOK_cjs.getAllNormalizedVtxos(this.indexerProvider, [
+      const fetchedVtxos = await chunkCDWLZQQW_cjs.getAllNormalizedVtxos(this.indexerProvider, [
         ...scriptMap.keys()
       ]);
       for (const vtxo of fetchedVtxos) {
@@ -13153,6 +13456,11 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     for (let i = 0; i < vtxos.length; i += MAX_INPUTS_PER_INTENT) {
       batches.push(vtxos.slice(i, i + MAX_INPUTS_PER_INTENT));
     }
+    const unrollCandidates = this.checkpointUnrollCandidates(await this.arkProvider.getInfo());
+    const checkpointInputs = vtxos.map((vtxo) => ({
+      ...vtxo,
+      tapLeafScript: vtxo.forfeitTapLeafScript
+    }));
     const seen = /* @__PURE__ */ new Set();
     const results = await Promise.all(
       batches.map(async (batch) => {
@@ -13168,6 +13476,12 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
             const checkpointTxs = pendingTx.signedCheckpointTxs.map(
               (c) => btcSigner.Transaction.fromPSBT(base.base64.decode(c))
             );
+            assertCheckpointsMatchInputs(
+              checkpointTxs,
+              checkpointInputs,
+              unrollCandidates,
+              `pending tx ${pendingTx.arkTxid}`
+            );
             const checkpointJobs = checkpointTxs.map(
               (tx) => this.inputSigningJobsFromWitnessUtxos(tx)
             );
@@ -13223,6 +13537,32 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     }
     return { finalized, pending };
   }
+  /**
+   * The server unroll scripts a pending checkpoint may legitimately have been
+   * built under: this wallet's configured one, the server's current one, and
+   * one per deprecated signer (same closure, deprecated key). A tx submitted
+   * before a signer rotation was built under the old key, so rebuilding
+   * against the current key alone would leave it pending forever.
+   */
+  checkpointUnrollCandidates(info) {
+    const current = chunkCDWLZQQW_cjs.CSVMultisigTapscript.decode(base.hex.decode(info.checkpointTapscript));
+    const candidates = [this._serverUnrollScript, current];
+    for (const deprecated of signerSetFromInfo(info).deprecated.keys()) {
+      candidates.push(
+        chunkCDWLZQQW_cjs.CSVMultisigTapscript.encode({
+          ...current.params,
+          pubkeys: [base.hex.decode(deprecated)]
+        })
+      );
+    }
+    const seen = /* @__PURE__ */ new Set();
+    return candidates.filter((candidate) => {
+      const script = base.hex.encode(candidate.script);
+      if (seen.has(script)) return false;
+      seen.add(script);
+      return true;
+    });
+  }
   async hasPendingTxFlag() {
     const state = await this.walletRepository.getWalletState();
     return state?.settings?.hasPendingTx === true;
@@ -13300,7 +13640,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     if (vtxos.length === 0) {
       throw new Error("No VTXOs found for this arkadeCash");
     }
-    const myPkScript = chunkGMUVWKOK_cjs.ArkAddress.decode(await this.getAddress()).pkScript;
+    const myPkScript = chunkCDWLZQQW_cjs.ArkAddress.decode(await this.getAddress()).pkScript;
     let { spendable, unclaimed } = this.classifyCashVtxos(vtxos);
     let swept = 0;
     const drainable = vtxos.filter((vtxo) => !isSubdust(vtxo, this.dustAmount));
@@ -13327,7 +13667,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     }
     if (spendable.length > 0) {
       const info = await this.arkProvider.getInfo();
-      const serverUnrollScript = chunkGMUVWKOK_cjs.CSVMultisigTapscript.decode(
+      const serverUnrollScript = chunkCDWLZQQW_cjs.CSVMultisigTapscript.decode(
         base.hex.decode(info.checkpointTapscript)
       );
       for (const vtxo of spendable) {
@@ -13373,7 +13713,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const spendable = [];
     const unclaimed = [];
     for (const vtxo of vtxos) {
-      if (chunkGMUVWKOK_cjs.hasTerminalSpend(vtxo)) {
+      if (chunkCDWLZQQW_cjs.hasTerminalSpend(vtxo)) {
         unclaimed.push(cashReport(vtxo, "already-spent"));
       } else if (isSubdust(vtxo, this.dustAmount)) {
         unclaimed.push(cashReport(vtxo, "subdust"));
@@ -13393,7 +13733,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const all = [];
     const seen = /* @__PURE__ */ new Set();
     for (let pageIndex = 0; ; pageIndex++) {
-      const { vtxos, page } = await chunkGMUVWKOK_cjs.getNormalizedVtxos(this.indexerProvider, {
+      const { vtxos, page } = await chunkCDWLZQQW_cjs.getNormalizedVtxos(this.indexerProvider, {
         scripts,
         pageIndex,
         pageSize
@@ -13440,7 +13780,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     for (let i = 0; i < inputs.length; i += MAX_INPUTS_PER_INTENT) {
       const batch = inputs.slice(i, i + MAX_INPUTS_PER_INTENT);
       const message = { type: "get-pending-tx", expire_at: 0 };
-      const proof = chunkGMUVWKOK_cjs.Intent.create(message, batch, []);
+      const proof = chunkCDWLZQQW_cjs.Intent.create(message, batch, []);
       const signedProof = await identity.sign(
         proof,
         Array.from({ length: batch.length + 1 }, (_, j) => j)
@@ -13455,12 +13795,23 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
         pendingTxs.push(pendingTx);
       }
     }
+    if (pendingTxs.length === 0) return result;
     const myPkScriptHex = base.hex.encode(myPkScript);
+    const unrollCandidates = this.checkpointUnrollCandidates(await this.arkProvider.getInfo());
     for (const pendingTx of pendingTxs) {
       try {
         const checkpointTxs = pendingTx.signedCheckpointTxs.map(
           (checkpoint) => btcSigner.Transaction.fromPSBT(base.base64.decode(checkpoint))
         );
+        assertCheckpointsMatchInputs(
+          checkpointTxs,
+          inputs.map((input) => ({
+            ...input,
+            tapLeafScript: input.forfeitTapLeafScript
+          })),
+          unrollCandidates,
+          `pending arkadeCash tx ${pendingTx.arkTxid}`
+        );
         const finalCheckpoints = await Promise.all(
           checkpointTxs.map(
             async (checkpoint) => base.base64.encode((await identity.sign(checkpoint)).toPSBT())
@@ -13525,7 +13876,11 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     const serverUnrollScript = this.serverUnrollScript;
     const outputAddress = offchainTapscript.address(this.network.hrp, serverPubKey);
     const address = outputAddress.encode();
-    const recipients = validateRecipients(args, Number(this.dustAmount));
+    const recipients = validateRecipients(
+      args,
+      Number(this.dustAmount),
+      this.recipientAddressContext(serverPubKey)
+    );
     const allVirtualCoins = await this.getVtxos({
       withRecoverable: false
     });
@@ -13735,10 +14090,10 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       const serverPubKey = this.arkServerPublicKey;
       const serverUnrollScript = this.serverUnrollScript;
       const arkAddress = offchainTapscript.address(this.network.hrp, serverPubKey);
-      const normalizedInputs = inputs.map(chunkGMUVWKOK_cjs.normalizeVtxo);
-      const at = now ?? await chunkGMUVWKOK_cjs.resolveTimeHeight(this.onchainProvider);
+      const normalizedInputs = inputs.map(chunkCDWLZQQW_cjs.normalizeVtxo);
+      const at = now ?? await chunkCDWLZQQW_cjs.resolveTimeHeight(this.onchainProvider);
       for (const input of normalizedInputs) {
-        if (!chunkGMUVWKOK_cjs.canSpendOffchain(input, at)) {
+        if (!chunkCDWLZQQW_cjs.canSpendOffchain(input, at)) {
           throw new Error(
             `sendSelectedVtxosToSelf: input ${input.txid}:${input.vout} is not cooperatively spendable`
           );
@@ -13803,7 +14158,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
     );
     const arkTxJobs = inputs.map((input, index) => ({
       index,
-      lookupScript: chunkGMUVWKOK_cjs.VtxoScript.decode(input.tapTree).pkScript
+      lookupScript: chunkCDWLZQQW_cjs.VtxoScript.decode(input.tapTree).pkScript
     }));
     const identity = this.identity;
     const signer = {
@@ -13870,32 +14225,33 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
           `updateDbAfterOffchainTx: inputs length (${inputs.length}) differs from signedCheckpointTxs length (${signedCheckpointTxs.length})`
         );
       }
-      const safeLength = Math.min(inputs.length, signedCheckpointTxs.length);
+      const checkpointIdByOutpoint = /* @__PURE__ */ new Map();
+      for (const encoded of signedCheckpointTxs) {
+        const checkpoint = btcSigner.Transaction.fromPSBT(base.base64.decode(encoded));
+        for (let i = 0; i < checkpoint.inputsLength; i++) {
+          const input = checkpoint.getInput(i);
+          if (!input.txid) continue;
+          checkpointIdByOutpoint.set(
+            `${base.hex.encode(input.txid)}:${input.index}`,
+            checkpoint.id
+          );
+        }
+      }
       const cm = await this.getContractManager();
       const annotatedInputs = await cm.annotateVtxos(inputs);
-      for (const [inputIndex, vtxo] of annotatedInputs.entries()) {
+      for (const vtxo of annotatedInputs) {
         const spentFacts = { ...vtxo, isSpent: true };
-        if (inputIndex < safeLength && signedCheckpointTxs[inputIndex]) {
-          const checkpoint = btcSigner.Transaction.fromPSBT(
-            base.base64.decode(signedCheckpointTxs[inputIndex])
-          );
-          spentVtxos.push({
-            ...spentFacts,
-            virtualStatus: chunkGMUVWKOK_cjs.toVirtualStatus(spentFacts),
-            spentBy: checkpoint.id,
-            arkTxId: arkTxid
-          });
-        } else {
-          spentVtxos.push({
-            ...spentFacts,
-            virtualStatus: chunkGMUVWKOK_cjs.toVirtualStatus(spentFacts),
-            arkTxId: arkTxid
-          });
-        }
+        const spentBy = checkpointIdByOutpoint.get(`${vtxo.txid}:${vtxo.vout}`);
+        spentVtxos.push({
+          ...spentFacts,
+          virtualStatus: chunkCDWLZQQW_cjs.toVirtualStatus(spentFacts),
+          ...spentBy ? { spentBy } : {},
+          arkTxId: arkTxid
+        });
         for (const id of vtxo.commitmentTxIds) {
           commitmentTxIds.add(id);
         }
-        const vtxoExpiry = chunkGMUVWKOK_cjs.toBatchExpiry(vtxo);
+        const vtxoExpiry = chunkCDWLZQQW_cjs.toBatchExpiry(vtxo);
         if (vtxoExpiry) {
           batchExpiry = Math.min(batchExpiry, vtxoExpiry);
         }
@@ -13908,7 +14264,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
           isSwept: false,
           isPreconfirmed: true,
           commitmentTxIds: Array.from(commitmentTxIds),
-          ...chunkGMUVWKOK_cjs.parseLegacyExpiry(batchExpiry)
+          ...chunkCDWLZQQW_cjs.parseLegacyExpiry(batchExpiry)
         };
         changeVtxo = {
           txid: arkTxid,
@@ -13920,7 +14276,7 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
           tapTree: offchainTapscript.encode(),
           value: Number(changeAmount),
           ...changeFacts,
-          virtualStatus: chunkGMUVWKOK_cjs.toVirtualStatus(changeFacts),
+          virtualStatus: chunkCDWLZQQW_cjs.toVirtualStatus(changeFacts),
           spentBy: "",
           status: {
             confirmed: false
@@ -13989,12 +14345,12 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
       const spentVtxos = [];
       const inputArkTxIds = /* @__PURE__ */ new Set();
       const boardingRemovalsByAddress = /* @__PURE__ */ new Map();
-      const vtxoInputs = inputs.filter(chunkGMUVWKOK_cjs.isVirtualCoin);
+      const vtxoInputs = inputs.filter(chunkCDWLZQQW_cjs.isVirtualCoin);
       const cm = await this.getContractManager();
       const annotatedVtxos = await cm.annotateVtxos(vtxoInputs);
       const annotatedByKey = new Map(annotatedVtxos.map((v) => [`${v.txid}:${v.vout}`, v]));
       for (const input of inputs) {
-        if (chunkGMUVWKOK_cjs.isVirtualCoin(input)) {
+        if (chunkCDWLZQQW_cjs.isVirtualCoin(input)) {
           const outpoint = `${input.txid}:${input.vout}`;
           const vtxo = annotatedByKey.get(outpoint);
           if (!vtxo) {
@@ -14006,13 +14362,13 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
           const settledFacts = { ...vtxo, isSpent: true };
           spentVtxos.push({
             ...settledFacts,
-            virtualStatus: chunkGMUVWKOK_cjs.toVirtualStatus(settledFacts),
+            virtualStatus: chunkCDWLZQQW_cjs.toVirtualStatus(settledFacts),
             settledBy: commitmentTxid
           });
         } else {
           let sourceAddress;
           try {
-            sourceAddress = chunkGMUVWKOK_cjs.VtxoScript.decode(input.tapTree).onchainAddress(
+            sourceAddress = chunkCDWLZQQW_cjs.VtxoScript.decode(input.tapTree).onchainAddress(
               this.network
             );
           } catch {
@@ -14070,9 +14426,9 @@ var Wallet2 = class _Wallet extends ReadonlyWallet {
   }
 };
 function selectVirtualCoins(coins, targetAmount) {
-  const sortedCoins = coins.map(chunkGMUVWKOK_cjs.normalizeVtxo).sort((a, b) => {
-    const expiryA = chunkGMUVWKOK_cjs.toBatchExpiry(a) || Number.MAX_SAFE_INTEGER;
-    const expiryB = chunkGMUVWKOK_cjs.toBatchExpiry(b) || Number.MAX_SAFE_INTEGER;
+  const sortedCoins = coins.map(chunkCDWLZQQW_cjs.normalizeVtxo).sort((a, b) => {
+    const expiryA = chunkCDWLZQQW_cjs.toBatchExpiry(a) || Number.MAX_SAFE_INTEGER;
+    const expiryB = chunkCDWLZQQW_cjs.toBatchExpiry(b) || Number.MAX_SAFE_INTEGER;
     if (expiryA !== expiryB) {
       return expiryA - expiryB;
     }
@@ -14329,7 +14685,7 @@ var MessageBus = class {
     this.initialized = true;
   }
   async buildServices(config) {
-    const arkProvider = new chunkGMUVWKOK_cjs.RestArkProvider(config.arkServer.url);
+    const arkProvider = new chunkCDWLZQQW_cjs.RestArkProvider(config.arkServer.url);
     const storage = {
       walletRepository: this.walletRepository,
       contractRepository: this.contractRepository
@@ -14668,7 +15024,7 @@ var offboardNetworkNames = [
 function offboardDestinationScript(destinationAddress) {
   for (const networkName of offboardNetworkNames) {
     try {
-      const network = chunkGMUVWKOK_cjs.networks[networkName];
+      const network = chunkCDWLZQQW_cjs.networks[networkName];
       const addr = btcSigner.Address(network).decode(destinationAddress);
       return btcSigner.OutScript.encode(addr);
     } catch {
@@ -14732,7 +15088,7 @@ var Ramps = class {
     }
     amount = amount ?? totalAmount;
     const offchainAddress = await this.wallet.getAddress();
-    const offchainAddr = chunkGMUVWKOK_cjs.ArkAddress.decode(offchainAddress);
+    const offchainAddr = chunkCDWLZQQW_cjs.ArkAddress.decode(offchainAddress);
     const offchainScript = base.hex.encode(offchainAddr.pkScript);
     const outputFee = estimator.evalOffchainOutput({
       amount,
@@ -14792,7 +15148,7 @@ var Ramps = class {
     const filteredVtxos = [];
     let totalAmount = 0n;
     for (const vtxo of vtxos) {
-      const inputFee = estimator.evalOffchainInput(chunkGMUVWKOK_cjs.toOffchainInputFeeParams(vtxo));
+      const inputFee = estimator.evalOffchainInput(chunkCDWLZQQW_cjs.toOffchainInputFeeParams(vtxo));
       if (inputFee.satoshis >= vtxo.value) {
         continue;
       }
@@ -15489,7 +15845,7 @@ var WalletMessageHandler = class {
   // Wallet methods
   async handleInitWallet({ payload }) {
     const { arkServerUrl } = payload;
-    this.indexerProvider = new chunkRNECH3TA_cjs.RestIndexerProvider(arkServerUrl);
+    this.indexerProvider = new chunk24YNIQSW_cjs.RestIndexerProvider(arkServerUrl);
     await this.onWalletInitialized();
   }
   async handleGetBalance() {
@@ -15513,12 +15869,12 @@ var WalletMessageHandler = class {
     let recoverable = 0;
     let pendingRecovery = 0;
     for (const vtxo of allVtxos) {
-      if (chunkGMUVWKOK_cjs.hasTerminalSpend(vtxo)) continue;
+      if (chunkCDWLZQQW_cjs.hasTerminalSpend(vtxo)) continue;
       if (pendingOutpoints.has(`${vtxo.txid}:${vtxo.vout}`)) {
         pendingRecovery += vtxo.value;
-      } else if (chunkGMUVWKOK_cjs.canRecoverOnchain(vtxo, now)) {
+      } else if (chunkCDWLZQQW_cjs.canRecoverOnchain(vtxo, now)) {
         recoverable += vtxo.value;
-      } else if (chunkGMUVWKOK_cjs.canSpendOffchain(vtxo, now)) {
+      } else if (chunkCDWLZQQW_cjs.canSpendOffchain(vtxo, now)) {
         if (vtxo.isPreconfirmed) {
           preconfirmed += vtxo.value;
         } else {
@@ -15530,7 +15886,7 @@ var WalletMessageHandler = class {
     const totalOffchain = settled + preconfirmed + recoverable + pendingRecovery;
     const assetBalances = /* @__PURE__ */ new Map();
     for (const vtxo of allVtxos) {
-      if (chunkGMUVWKOK_cjs.hasTerminalSpend(vtxo)) continue;
+      if (chunkCDWLZQQW_cjs.hasTerminalSpend(vtxo)) continue;
       if (vtxo.assets) {
         for (const a of vtxo.assets) {
           const current = assetBalances.get(a.assetId) ?? 0n;
@@ -15566,7 +15922,7 @@ var WalletMessageHandler = class {
    */
   async getSpendableVtxos() {
     const vtxos = await this.getVtxosFromRepo();
-    return vtxos.filter((v) => !chunkGMUVWKOK_cjs.hasTerminalSpend(v));
+    return vtxos.filter((v) => !chunkCDWLZQQW_cjs.hasTerminalSpend(v));
   }
   async onWalletInitialized() {
     if (!this.readonlyWallet || !this.arkProvider || !this.indexerProvider || !this.walletRepository) {
@@ -15778,10 +16134,10 @@ var WalletMessageHandler = class {
       if (dustAmount != null && isSubdust(v, dustAmount)) {
         return false;
       }
-      if (chunkGMUVWKOK_cjs.isRecoverable(v)) {
+      if (chunkCDWLZQQW_cjs.isRecoverable(v)) {
         return false;
       }
-      if (chunkGMUVWKOK_cjs.isExpired(v)) {
+      if (chunkCDWLZQQW_cjs.isExpired(v)) {
         return false;
       }
       return true;
@@ -15853,7 +16209,7 @@ var WalletMessageHandler = class {
     if (!this.readonlyWallet) return null;
     const { boardingTxs, commitmentsToIgnore } = await this.readonlyWallet.getBoardingTxs();
     const indexerProvider = this.indexerProvider;
-    const resolveTxCreatedAt = indexerProvider ? (txids) => chunkGMUVWKOK_cjs.fetchVtxoCreatedAtByTxid(indexerProvider, txids) : void 0;
+    const resolveTxCreatedAt = indexerProvider ? (txids) => chunkCDWLZQQW_cjs.fetchVtxoCreatedAtByTxid(indexerProvider, txids) : void 0;
     return buildTransactionHistory(vtxos, boardingTxs, commitmentsToIgnore, resolveTxCreatedAt);
   }
   async ensureContractEventBroadcasting() {
@@ -16538,7 +16894,7 @@ var ServiceWorkerReadonlyWallet = class _ServiceWorkerReadonlyWallet {
     };
     try {
       const response = await this.sendMessage(message);
-      return response.payload.vtxos.map(chunkGMUVWKOK_cjs.normalizeVtxo);
+      return response.payload.vtxos.map(chunkCDWLZQQW_cjs.normalizeVtxo);
     } catch (error) {
       throw new Error(`Failed to get vtxos: ${error}`);
     }
@@ -16651,7 +17007,7 @@ var ServiceWorkerReadonlyWallet = class _ServiceWorkerReadonlyWallet {
         };
         try {
           const response = await sendContractMessage(message);
-          return response.payload.vtxos.map(chunkGMUVWKOK_cjs.normalizeVtxo);
+          return response.payload.vtxos.map(chunkCDWLZQQW_cjs.normalizeVtxo);
         } catch (e) {
           throw new Error("Failed to annotate vtxos");
         }
@@ -17105,7 +17461,7 @@ var ServiceWorkerWallet = class _ServiceWorkerWallet extends ServiceWorkerReadon
         };
         try {
           const response = await wallet.sendMessage(message);
-          return response.payload.vtxos.map(chunkGMUVWKOK_cjs.normalizeVtxo);
+          return response.payload.vtxos.map(chunkCDWLZQQW_cjs.normalizeVtxo);
         } catch (e) {
           throw new Error(`Failed to get expiring vtxos: ${e}`);
         }
@@ -17217,12 +17573,12 @@ var OnchainWallet = class _OnchainWallet {
    * @returns Configured onchain wallet
    * @throws Error if the configured identity cannot produce a valid x-only public key
    */
-  static async create(identity, networkName = chunkGMUVWKOK_cjs.DEFAULT_NETWORK_NAME, provider) {
+  static async create(identity, networkName = chunkCDWLZQQW_cjs.DEFAULT_NETWORK_NAME, provider) {
     const pubkey = await identity.xOnlyPublicKey();
     if (!pubkey) {
       throw new Error("Invalid configured public key");
     }
-    const network = chunkGMUVWKOK_cjs.getNetwork(networkName);
+    const network = chunkCDWLZQQW_cjs.getNetwork(networkName);
     const onchainProvider = provider || new EsploraProvider(ESPLORA_URL[networkName]);
     const onchainP2TR = btcSigner.p2tr(pubkey, void 0, network);
     return new _OnchainWallet(identity, network, onchainP2TR, onchainProvider);
@@ -17328,7 +17684,7 @@ var OnchainWallet = class _OnchainWallet {
     if (!inputs) {
       throw new Error("Fee estimation failed");
     }
-    let tx = new chunkGMUVWKOK_cjs.Transaction();
+    let tx = new chunkCDWLZQQW_cjs.Transaction();
     for (const input of inputs) {
       tx.addInput({
         txid: input.txid,
@@ -17386,7 +17742,7 @@ var OnchainWallet = class _OnchainWallet {
    * @throws If the parent has no anchor, or funding cannot be selected/signed
    */
   async bumpAnchor(parentHex, feeRate) {
-    const parent = chunkGMUVWKOK_cjs.Transaction.fromRaw(base.hex.decode(parentHex));
+    const parent = chunkCDWLZQQW_cjs.Transaction.fromRaw(base.hex.decode(parentHex));
     const coins = (await this.getCoins()).filter((c) => c.status.confirmed);
     const child = await this.buildBumpPackage(parent, feeRate, coins);
     return [parent.hex, child.hex];
@@ -18151,7 +18507,7 @@ exports.BIP322 = void 0;
   async function sign2(message, identity, network) {
     const xOnlyPubKey = await identity.xOnlyPublicKey();
     const payment = btcSigner.p2tr(xOnlyPubKey, void 0, network);
-    const toSpend = chunkGMUVWKOK_cjs.craftToSpendTx(message, payment.script, TAG_BIP322);
+    const toSpend = chunkCDWLZQQW_cjs.craftToSpendTx(message, payment.script, TAG_BIP322);
     const toSign = craftBIP322ToSignP2TR(toSpend, payment.script, xOnlyPubKey);
     const signed = await identity.sign(toSign, [0]);
     signed.finalizeIdx(0);
@@ -18209,7 +18565,7 @@ function verifyP2TR(message, witnessItems, pkScript, pubkey) {
   if (sighashType !== btcSigner.SigHash.DEFAULT && sighashType !== btcSigner.SigHash.ALL) {
     return false;
   }
-  const toSpend = chunkGMUVWKOK_cjs.craftToSpendTx(message, pkScript, TAG_BIP322);
+  const toSpend = chunkCDWLZQQW_cjs.craftToSpendTx(message, pkScript, TAG_BIP322);
   const toSign = craftBIP322ToSignP2TR(toSpend, pkScript, pubkey);
   const sighash = toSign.preimageWitnessV1(0, [pkScript], sighashType, [0n]);
   const rawSig = sig.length === 65 ? sig.subarray(0, 64) : sig;
@@ -18230,7 +18586,7 @@ function verifyP2WPKH(message, witnessItems, pkScript, addressHash) {
   }
   const sighashType = sigWithHash[sigWithHash.length - 1];
   const derSig = sigWithHash.subarray(0, sigWithHash.length - 1);
-  const toSpend = chunkGMUVWKOK_cjs.craftToSpendTx(message, pkScript, TAG_BIP322);
+  const toSpend = chunkCDWLZQQW_cjs.craftToSpendTx(message, pkScript, TAG_BIP322);
   const toSign = craftBIP322ToSignSimple(toSpend, pkScript);
   const scriptCode = btcSigner.OutScript.encode({ type: "pkh", hash: addressHash });
   const sighash = toSign.preimageWitnessV0(0, scriptCode, sighashType, 0n);
@@ -18283,7 +18639,7 @@ function encodeCompactSize(n) {
   return buf;
 }
 function craftBIP322ToSignP2TR(toSpend, pkScript, tapInternalKey) {
-  const tx = new chunkGMUVWKOK_cjs.Transaction({ version: 0 });
+  const tx = new chunkCDWLZQQW_cjs.Transaction({ version: 0 });
   tx.addInput({
     txid: toSpend.id,
     index: 0,
@@ -18297,12 +18653,12 @@ function craftBIP322ToSignP2TR(toSpend, pkScript, tapInternalKey) {
   });
   tx.addOutput({
     amount: 0n,
-    script: chunkGMUVWKOK_cjs.OP_RETURN_EMPTY_PKSCRIPT
+    script: chunkCDWLZQQW_cjs.OP_RETURN_EMPTY_PKSCRIPT
   });
   return tx;
 }
 function craftBIP322ToSignSimple(toSpend, pkScript) {
-  const tx = new chunkGMUVWKOK_cjs.Transaction({ version: 0 });
+  const tx = new chunkCDWLZQQW_cjs.Transaction({ version: 0 });
   tx.addInput({
     txid: toSpend.id,
     index: 0,
@@ -18314,7 +18670,7 @@ function craftBIP322ToSignSimple(toSpend, pkScript) {
   });
   tx.addOutput({
     amount: 0n,
-    script: chunkGMUVWKOK_cjs.OP_RETURN_EMPTY_PKSCRIPT
+    script: chunkCDWLZQQW_cjs.OP_RETURN_EMPTY_PKSCRIPT
   });
   return tx;
 }
@@ -18445,7 +18801,7 @@ var RestEmulatorProvider = class {
   }
 };
 function finalizeVirtualTx(type, psbtBase64) {
-  const tx = chunkGMUVWKOK_cjs.Transaction.fromPSBT(base.base64.decode(psbtBase64));
+  const tx = chunkCDWLZQQW_cjs.Transaction.fromPSBT(base.base64.decode(psbtBase64));
   if (type === "INDEXER_CHAINED_TX_TYPE_TREE" /* TREE */) {
     const input = tx.getInput(0);
     if (!input) {
@@ -18472,14 +18828,14 @@ var ExitPathError = class extends Error {
   reason;
 };
 function delayWeight(sequence) {
-  const t = chunkGMUVWKOK_cjs.sequenceToTimelock(sequence);
+  const t = chunkCDWLZQQW_cjs.sequenceToTimelock(sequence);
   return t.type === "blocks" ? Number(t.value) : Number(t.value) / 600;
 }
 async function resolveUnilateralPath(params) {
   const { vtxo, scriptHex, contractRepository } = params;
   const contract = contractRepository ? (await contractRepository.getContracts({ script: scriptHex }))[0] : void 0;
   if (contract) {
-    const handler = chunk53XNU2EL_cjs.contractHandlers.get(contract.type);
+    const handler = chunk37XKN5DZ_cjs.contractHandlers.get(contract.type);
     if (!handler) {
       throw new ExitPathError(
         "no-handler",
@@ -18502,12 +18858,12 @@ async function resolveUnilateralPath(params) {
     paths.sort((a, b) => delayWeight(a.sequence) - delayWeight(b.sequence));
     return { selection: paths[0], label: `${contract.type}:unilateral` };
   }
-  const decoded = chunkGMUVWKOK_cjs.VtxoScript.decode(vtxo.tapTree);
+  const decoded = chunkCDWLZQQW_cjs.VtxoScript.decode(vtxo.tapTree);
   let best;
   for (const exit of decoded.exitPaths()) {
     const leaf = decoded.findLeaf(base.hex.encode(exit.script));
     if (!leaf) continue;
-    const sequence = chunkGMUVWKOK_cjs.timelockToSequence(exit.params.timelock);
+    const sequence = chunkCDWLZQQW_cjs.timelockToSequence(exit.params.timelock);
     const weight = delayWeight(sequence);
     if (!best || weight < best.weight) {
       best = { selection: { leaf, sequence }, weight };
@@ -18693,14 +19049,14 @@ async function prepareUnrollTransaction(wallet, vtxoTxIds, outputAddress) {
     }
     const resolved = await resolveUnilateralPath({
       vtxo,
-      scriptHex: base.hex.encode(chunkGMUVWKOK_cjs.VtxoScript.decode(vtxo.tapTree).pkScript),
+      scriptHex: base.hex.encode(chunkCDWLZQQW_cjs.VtxoScript.decode(vtxo.tapTree).pkScript),
       contractRepository: wallet.contractRepository,
       walletPubKeyHex: base.hex.encode(await wallet.identity.xOnlyPublicKey()),
       currentTime: Date.now()
     });
     const spendingLeaf = resolved.selection.leaf;
     const sequence = resolved.selection.sequence;
-    const timelock = chunkGMUVWKOK_cjs.sequenceToTimelock(sequence);
+    const timelock = chunkCDWLZQQW_cjs.sequenceToTimelock(sequence);
     const elapsed = timelock.type === "blocks" ? chainTip.height >= txStatus.blockHeight + Number(timelock.value) : chainTip.time >= txStatus.blockTime + Number(timelock.value);
     if (!elapsed) {
       throw new Error(`no available exit path found for vtxo ${vtxo.txid}:${vtxo.vout}`);
@@ -18713,7 +19069,7 @@ async function prepareUnrollTransaction(wallet, vtxoTxIds, outputAddress) {
       sequence,
       witnessUtxo: {
         amount: BigInt(vtxo.value),
-        script: chunkGMUVWKOK_cjs.VtxoScript.decode(vtxo.tapTree).pkScript
+        script: chunkCDWLZQQW_cjs.VtxoScript.decode(vtxo.tapTree).pkScript
       },
       sighashType: btcSigner.SigHash.DEFAULT
     });
@@ -18723,7 +19079,7 @@ async function prepareUnrollTransaction(wallet, vtxoTxIds, outputAddress) {
       btcSigner.TaprootControlBlock.encode(spendingLeaf[0]).length
     );
   }
-  const tx = new chunkGMUVWKOK_cjs.Transaction({ version: 2 });
+  const tx = new chunkCDWLZQQW_cjs.Transaction({ version: 2 });
   for (const input of inputs) {
     tx.addInput(input);
   }
@@ -18790,7 +19146,7 @@ async function buildSignedSweep(params) {
       `uneconomic vtxo ${vtxo.txid}:${vtxo.vout}: value ${vtxo.value} - fee ${fee} < dust`
     );
   }
-  const tx = new chunkGMUVWKOK_cjs.Transaction({ version: 2 });
+  const tx = new chunkCDWLZQQW_cjs.Transaction({ version: 2 });
   tx.addInput({
     txid: vtxo.txid,
     index: vtxo.vout,
@@ -18815,7 +19171,7 @@ async function buildSignedSweep(params) {
     finalScriptWitness: [
       tapScriptSig[0][1],
       ...path.extraWitness,
-      chunkGMUVWKOK_cjs.scriptFromTapLeafScript(path.leaf),
+      chunkCDWLZQQW_cjs.scriptFromTapLeafScript(path.leaf),
       btcSigner.TaprootControlBlock.encode(controlBlock)
     ]
   });
@@ -18845,7 +19201,7 @@ async function resolveFeeRate(opts) {
 }
 async function selectExitVtxos(opts) {
   if (!opts.vtxos) return opts.wallet.getVtxos();
-  const res = await chunkGMUVWKOK_cjs.getNormalizedVtxos(opts.wallet.indexerProvider, { outpoints: opts.vtxos });
+  const res = await chunkCDWLZQQW_cjs.getNormalizedVtxos(opts.wallet.indexerProvider, { outpoints: opts.vtxos });
   const tapTrees = /* @__PURE__ */ new Map();
   const out = [];
   for (const vtxo of res.vtxos) {
@@ -18860,7 +19216,7 @@ async function selectExitVtxos(opts) {
           `no contract registered for vtxo script ${vtxo.script} \u2014 register the contract before exiting`
         );
       }
-      const handler = chunk53XNU2EL_cjs.contractHandlers.get(contract.type);
+      const handler = chunk37XKN5DZ_cjs.contractHandlers.get(contract.type);
       if (!handler) {
         throw new Error(`no contract handler registered for type '${contract.type}'`);
       }
@@ -18890,7 +19246,7 @@ async function computeExitLayout(opts, feeRate) {
   if (pendingNodes.length > 0) {
     const txs = await resolver.getVirtualTxs(pendingNodes.map((n) => n.txid));
     for (const psbt of txs) {
-      psbts.set(chunkGMUVWKOK_cjs.Transaction.fromPSBT(base.base64.decode(psbt)).id, psbt);
+      psbts.set(chunkCDWLZQQW_cjs.Transaction.fromPSBT(base.base64.decode(psbt)).id, psbt);
     }
   }
   const childVsize = Number(
@@ -18926,7 +19282,7 @@ async function computeExitLayout(opts, feeRate) {
     try {
       const resolved = await resolveUnilateralPath({
         vtxo,
-        scriptHex: base.hex.encode(chunkGMUVWKOK_cjs.VtxoScript.decode(vtxo.tapTree).pkScript),
+        scriptHex: base.hex.encode(chunkCDWLZQQW_cjs.VtxoScript.decode(vtxo.tapTree).pkScript),
         contractRepository: wallet.contractRepository,
         walletPubKeyHex,
         currentTime: Date.now()
@@ -18945,7 +19301,7 @@ async function computeExitLayout(opts, feeRate) {
         });
         continue;
       }
-      const t = chunkGMUVWKOK_cjs.sequenceToTimelock(resolved.selection.sequence);
+      const t = chunkCDWLZQQW_cjs.sequenceToTimelock(resolved.selection.sequence);
       const delay = { type: t.type, value: Number(t.value) };
       infos.push({ outpoint, value: vtxo.value, sweepFee, path: resolved.label, delay });
       sweeps.push({ vtxo, resolved, sweepFee, delay });
@@ -19284,7 +19640,7 @@ async function prepare(opts) {
           txid: sweep.vtxo.txid,
           vout: sweep.vtxo.vout,
           value: sweep.vtxo.value,
-          pkScript: chunkGMUVWKOK_cjs.VtxoScript.decode(sweep.vtxo.tapTree).pkScript
+          pkScript: chunkCDWLZQQW_cjs.VtxoScript.decode(sweep.vtxo.tapTree).pkScript
         },
         path: sweep.resolved.selection,
         outputAddress: opts.sweepAddress,
@@ -19369,7 +19725,7 @@ async function prepare(opts) {
       if (newFee <= splitterFee) break;
       splitterFee = newFee;
     }
-    const splitter = new chunkGMUVWKOK_cjs.Transaction({ version: 2 });
+    const splitter = new chunkCDWLZQQW_cjs.Transaction({ version: 2 });
     for (const coin of selected.inputs) {
       splitter.addInput({
         txid: coin.txid,
@@ -19512,44 +19868,45 @@ var UnilateralExit = {
 // src/arkade/index.ts
 var arkade_exports = {};
 chunk5BLDMQED_cjs.__export(arkade_exports, {
-  ARKADE_OP: () => chunk53XNU2EL_cjs.ARKADE_OP,
-  ARKADE_OPCODES: () => chunk53XNU2EL_cjs.ARKADE_OPCODES,
-  ARKADE_OPCODE_NAMES: () => chunk53XNU2EL_cjs.ARKADE_OPCODE_NAMES,
-  ARKADE_OPCODE_VALUES: () => chunk53XNU2EL_cjs.ARKADE_OPCODE_VALUES,
-  ARKADE_OPS: () => chunk53XNU2EL_cjs.ARKADE_OPS,
+  ARKADE_OP: () => chunk37XKN5DZ_cjs.ARKADE_OP,
+  ARKADE_OPCODES: () => chunk37XKN5DZ_cjs.ARKADE_OPCODES,
+  ARKADE_OPCODE_NAMES: () => chunk37XKN5DZ_cjs.ARKADE_OPCODE_NAMES,
+  ARKADE_OPCODE_VALUES: () => chunk37XKN5DZ_cjs.ARKADE_OPCODE_VALUES,
+  ARKADE_OPS: () => chunk37XKN5DZ_cjs.ARKADE_OPS,
   Arkade: () => Arkade,
   ArkadeContract: () => ArkadeContract,
-  ArkadeProgramScript: () => chunk53XNU2EL_cjs.ArkadeProgramScript,
-  ArkadeScript: () => chunk53XNU2EL_cjs.ArkadeScript,
+  ArkadeProgramScript: () => chunk37XKN5DZ_cjs.ArkadeProgramScript,
+  ArkadeScript: () => chunk37XKN5DZ_cjs.ArkadeScript,
   ArkadeTransactionBuilder: () => ArkadeTransactionBuilder,
-  BigNum: () => chunk53XNU2EL_cjs.bignum_exports,
+  BigNum: () => chunk37XKN5DZ_cjs.bignum_exports,
   OP: () => btcSigner.OP,
-  OPCODE_NAMES: () => chunk53XNU2EL_cjs.OPCODE_NAMES,
-  OPCODE_VALUES: () => chunk53XNU2EL_cjs.OPCODE_VALUES,
-  SUPPORTED_PROGRAM_VERSION: () => chunk53XNU2EL_cjs.SUPPORTED_PROGRAM_VERSION,
+  OPCODE_NAMES: () => chunk37XKN5DZ_cjs.OPCODE_NAMES,
+  OPCODE_VALUES: () => chunk37XKN5DZ_cjs.OPCODE_VALUES,
+  SUPPORTED_PROGRAM_VERSION: () => chunk37XKN5DZ_cjs.SUPPORTED_PROGRAM_VERSION,
   Script: () => btcSigner.Script,
-  arkadeScriptHash: () => chunk53XNU2EL_cjs.arkadeScriptHash,
-  arkadeWitnessHash: () => chunk53XNU2EL_cjs.arkadeWitnessHash,
-  asmToBytes: () => chunk53XNU2EL_cjs.asmToBytes,
-  bytesToASM: () => chunk53XNU2EL_cjs.bytesToASM,
-  computeArkadeScriptPublicKey: () => chunk53XNU2EL_cjs.computeArkadeScriptPublicKey,
+  arkadeScriptHash: () => chunk37XKN5DZ_cjs.arkadeScriptHash,
+  arkadeWitnessHash: () => chunk37XKN5DZ_cjs.arkadeWitnessHash,
+  asmToBytes: () => chunk37XKN5DZ_cjs.asmToBytes,
+  bytesToASM: () => chunk37XKN5DZ_cjs.bytesToASM,
+  computeArkadeScriptPublicKey: () => chunk37XKN5DZ_cjs.computeArkadeScriptPublicKey,
   createArkadeBatchHandler: () => createArkadeBatchHandler,
-  deserializeArkadeContractParams: () => chunk53XNU2EL_cjs.deserializeArkadeContractParams,
-  fromASM: () => chunk53XNU2EL_cjs.fromASM,
-  getOpcodeName: () => chunk53XNU2EL_cjs.getOpcodeName,
-  getOpcodeValue: () => chunk53XNU2EL_cjs.getOpcodeValue,
-  parseArtifact: () => chunk53XNU2EL_cjs.parseArtifact,
-  resolveAsm: () => chunk53XNU2EL_cjs.resolveAsm,
-  serializeArkadeContractParams: () => chunk53XNU2EL_cjs.serializeArkadeContractParams,
-  stringifyArtifact: () => chunk53XNU2EL_cjs.stringifyArtifact,
-  toASM: () => chunk53XNU2EL_cjs.toASM,
-  validateProgram: () => chunk53XNU2EL_cjs.validateProgram,
-  witnessRefToBytes: () => chunk53XNU2EL_cjs.witnessRefToBytes
+  deserializeArkadeContractParams: () => chunk37XKN5DZ_cjs.deserializeArkadeContractParams,
+  fromASM: () => chunk37XKN5DZ_cjs.fromASM,
+  getOpcodeName: () => chunk37XKN5DZ_cjs.getOpcodeName,
+  getOpcodeValue: () => chunk37XKN5DZ_cjs.getOpcodeValue,
+  parseArtifact: () => chunk37XKN5DZ_cjs.parseArtifact,
+  resolveAsm: () => chunk37XKN5DZ_cjs.resolveAsm,
+  serializeArkadeContractParams: () => chunk37XKN5DZ_cjs.serializeArkadeContractParams,
+  stringifyArtifact: () => chunk37XKN5DZ_cjs.stringifyArtifact,
+  toASM: () => chunk37XKN5DZ_cjs.toASM,
+  validateProgram: () => chunk37XKN5DZ_cjs.validateProgram,
+  witnessRefToBytes: () => chunk37XKN5DZ_cjs.witnessRefToBytes
 });
-var isVtxoCoin = (input) => chunkGMUVWKOK_cjs.isVirtualCoin(input);
+var isVtxoCoin = (input) => chunkCDWLZQQW_cjs.isVirtualCoin(input);
 function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message, session, arkProvider, emulator, network, recipients) {
   let batchId;
   let sweepTapTreeRoot;
+  let validatedCommitmentTxid;
   return {
     onBatchStarted: async (event) => {
       const utf8IntentId = new TextEncoder().encode(intentId);
@@ -19558,7 +19915,7 @@ function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message
       if (!event.intentIdHashes.includes(intentIdHashStr)) return { skip: true };
       await arkProvider.confirmRegistration(intentId);
       batchId = event.id;
-      const sweepTapscript = chunkGMUVWKOK_cjs.CSVMultisigTapscript.encode({
+      const sweepTapscript = chunkCDWLZQQW_cjs.CSVMultisigTapscript.encode({
         timelock: {
           value: event.batchExpiry,
           // BIP-65: values >= 512 are interpreted as seconds, below as blocks
@@ -19576,7 +19933,7 @@ function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message
       if (!xOnlyPubkeys.includes(base.hex.encode(xonlySignerPubKey))) {
         return { skip: true };
       }
-      const commitmentTx = chunkGMUVWKOK_cjs.Transaction.fromPSBT(base.base64.decode(event.unsignedCommitmentTx));
+      const commitmentTx = chunkCDWLZQQW_cjs.Transaction.fromPSBT(base.base64.decode(event.unsignedCommitmentTx));
       validateVtxoTxGraph(vtxoTree, commitmentTx, sweepTapTreeRoot);
       if (recipients && recipients.length > 0) {
         validateBatchRecipients(commitmentTx, vtxoTree.leaves(), recipients, network);
@@ -19585,6 +19942,7 @@ function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message
       if (!sharedOutput?.amount) {
         throw new Error("Shared output not found");
       }
+      validatedCommitmentTxid = commitmentTx.id;
       await session.init(vtxoTree, sweepTapTreeRoot, sharedOutput.amount);
       const pubkey = base.hex.encode(await session.getPublicKey());
       const nonces = await session.getNonces();
@@ -19607,7 +19965,15 @@ function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message
       if (connectorTree) {
         validateConnectorsTxGraph(event.commitmentTx, connectorTree);
       }
-      let commitmentPsbt = chunkGMUVWKOK_cjs.Transaction.fromPSBT(base.base64.decode(event.commitmentTx));
+      let commitmentPsbt = chunkCDWLZQQW_cjs.Transaction.fromPSBT(base.base64.decode(event.commitmentTx));
+      assertFinalCommitmentMatchesValidated(
+        commitmentPsbt,
+        validatedCommitmentTxid,
+        "arkade batch finalization"
+      );
+      if (!validatedCommitmentTxid && recipients && recipients.length > 0) {
+        validateBatchRecipientsWithoutTree(commitmentPsbt, recipients, network);
+      }
       const signedForfeits = [];
       let connectorIndex = 0;
       const connectorLeaves = connectorTree?.leaves() || [];
@@ -19634,7 +20000,7 @@ function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message
           boardingIndices.push(boardingIdx);
           continue;
         }
-        if (chunkGMUVWKOK_cjs.isRecoverable(input) || isSubdust(input, info.dust)) {
+        if (chunkCDWLZQQW_cjs.isRecoverable(input) || isSubdust(input, info.dust)) {
           continue;
         }
         if (connectorIndex >= connectorLeaves.length) {
@@ -19655,7 +20021,7 @@ function createArkadeBatchHandler(intentId, inputs, signer, signedProof, message
               index: input.vout,
               witnessUtxo: {
                 amount: BigInt(input.value),
-                script: chunkGMUVWKOK_cjs.VtxoScript.decode(input.tapTree).pkScript
+                script: chunkCDWLZQQW_cjs.VtxoScript.decode(input.tapTree).pkScript
               },
               sighashType: btcSigner.SigHash.DEFAULT,
               tapLeafScript: [input.forfeitTapLeafScript]
@@ -19738,7 +20104,7 @@ var Arkade = class _Arkade {
   static async connect(opts) {
     const info = await opts.arkade.getInfo();
     const serverKey = base.hex.decode(info.signerPubkey).slice(1);
-    const checkpoint = chunkGMUVWKOK_cjs.CSVMultisigTapscript.decode(base.hex.decode(info.checkpointTapscript));
+    const checkpoint = chunkCDWLZQQW_cjs.CSVMultisigTapscript.decode(base.hex.decode(info.checkpointTapscript));
     let emulatorKey;
     if (opts.emulator) {
       const eInfo = await opts.emulator.getInfo();
@@ -19752,7 +20118,7 @@ var Arkade = class _Arkade {
     return new _Arkade({
       arkProvider: opts.arkade,
       emulator: opts.emulator,
-      network: opts.network ?? chunkGMUVWKOK_cjs.DEFAULT_NETWORK,
+      network: opts.network ?? chunkCDWLZQQW_cjs.DEFAULT_NETWORK,
       serverKey,
       emulatorKey,
       checkpoint,
@@ -19773,7 +20139,7 @@ var Arkade = class _Arkade {
    * key respectively; explicit args always win.
    */
   contract(program, args = {}) {
-    const declared = (program.params ?? []).map(chunk53XNU2EL_cjs.inputName);
+    const declared = (program.params ?? []).map(chunk37XKN5DZ_cjs.inputName);
     if (declared.includes("server") && args.server === void 0) {
       args = { ...args, server: this.serverKey };
     }
@@ -19793,7 +20159,7 @@ var ArkadeContract = class _ArkadeContract {
       userKey: client.userKey,
       emulatorKey: client.emulatorKey
     };
-    this.vtxoScript = new chunk53XNU2EL_cjs.ArkadeProgramScript(program, args, this.keys);
+    this.vtxoScript = new chunk37XKN5DZ_cjs.ArkadeProgramScript(program, args, this.keys);
     this.tapTree = this.vtxoScript.encode();
     this.compiled = this.vtxoScript.compiled;
   }
@@ -19821,7 +20187,7 @@ var ArkadeContract = class _ArkadeContract {
         `ArkadeContract.fromContract: expected contract type 'arkade', got '${contract.type}'`
       );
     }
-    const typed = chunk53XNU2EL_cjs.deserializeArkadeContractParams(contract.params);
+    const typed = chunk37XKN5DZ_cjs.deserializeArkadeContractParams(contract.params);
     return new _ArkadeContract(client, typed.program, typed.args, {
       serverKey: typed.serverKey,
       userKey: typed.userKey,
@@ -19862,7 +20228,7 @@ var ArkadeContract = class _ArkadeContract {
   toContractParams() {
     return {
       type: "arkade",
-      params: chunk53XNU2EL_cjs.serializeArkadeContractParams({
+      params: chunk37XKN5DZ_cjs.serializeArkadeContractParams({
         program: this.program,
         args: this.args,
         serverKey: this.keys.serverKey,
@@ -19907,13 +20273,13 @@ var ArkadeContract = class _ArkadeContract {
       const [registered] = await manager.getContracts({ script: scriptHex });
       if (registered) {
         const [withVtxos] = await manager.getContractsWithVtxos({ script: scriptHex });
-        return (withVtxos?.vtxos ?? []).filter((v) => !chunkGMUVWKOK_cjs.hasTerminalSpend(v));
+        return (withVtxos?.vtxos ?? []).filter((v) => !chunkCDWLZQQW_cjs.hasTerminalSpend(v));
       }
     }
     if (!this.client.indexer) {
       throw new Error("ArkadeContract.getUtxos: an indexer is required");
     }
-    const { vtxos } = await chunkGMUVWKOK_cjs.getNormalizedVtxos(this.client.indexer, {
+    const { vtxos } = await chunkCDWLZQQW_cjs.getNormalizedVtxos(this.client.indexer, {
       scripts: [scriptHex],
       spendableOnly: true
     });
@@ -20015,12 +20381,12 @@ var ArkadeTransactionBuilder = class {
       this.contract.client.checkpoint
     );
     if (coin.sourceTx) {
-      chunkGMUVWKOK_cjs.setArkPsbtField(arkTx, 0, chunkGMUVWKOK_cjs.PrevArkTxField, coin.sourceTx);
+      chunkCDWLZQQW_cjs.setArkPsbtField(arkTx, 0, chunkCDWLZQQW_cjs.PrevArkTxField, coin.sourceTx);
     }
     const condition = (def.tapscript.witness ?? []).map((w) => this.witnessBytes(w));
     if (condition.length > 0) {
-      chunkGMUVWKOK_cjs.setArkPsbtField(arkTx, 0, chunkGMUVWKOK_cjs.ConditionWitness, condition);
-      chunkGMUVWKOK_cjs.setArkPsbtField(checkpoints[0], 0, chunkGMUVWKOK_cjs.ConditionWitness, condition);
+      chunkCDWLZQQW_cjs.setArkPsbtField(arkTx, 0, chunkCDWLZQQW_cjs.ConditionWitness, condition);
+      chunkCDWLZQQW_cjs.setArkPsbtField(checkpoints[0], 0, chunkCDWLZQQW_cjs.ConditionWitness, condition);
     }
     const packets = [];
     if (this.assetSpecs.length > 0) {
@@ -20059,7 +20425,7 @@ var ArkadeTransactionBuilder = class {
         base.base64.encode(signedArk2.toPSBT()),
         signedCps.map((c) => base.base64.encode(c.toPSBT()))
       );
-      const txid = chunkGMUVWKOK_cjs.Transaction.fromPSBT(base.base64.decode(res2.signedArkTx)).id;
+      const txid = chunkCDWLZQQW_cjs.Transaction.fromPSBT(base.base64.decode(res2.signedArkTx)).id;
       return {
         txid,
         signedArkTx: res2.signedArkTx,
@@ -20074,11 +20440,11 @@ var ArkadeTransactionBuilder = class {
       base.base64.encode(signedArk.toPSBT()),
       checkpoints.map((c) => base.base64.encode(c.toPSBT()))
     );
+    assertSubmittedArkTxid(res, signedArk, "submitTx");
+    const matched = matchServerCheckpoints(res.signedCheckpointTxs, checkpoints, "submitTx");
     const finalCps = await Promise.all(
-      res.signedCheckpointTxs.map(
-        async (b) => base.base64.encode(
-          (await client.identity.sign(chunkGMUVWKOK_cjs.Transaction.fromPSBT(base.base64.decode(b)), [0])).toPSBT()
-        )
+      matched.map(
+        async ({ server }) => base.base64.encode((await client.identity.sign(server, [0])).toPSBT())
       )
     );
     await client.arkProvider.finalizeTx(res.arkTxid, finalCps);
@@ -20118,23 +20484,23 @@ var ArkadeTransactionBuilder = class {
   }
   buildAssetPacket() {
     const groups = this.assetSpecs.map((s) => {
-      const id = typeof s.assetId === "string" ? chunkRNECH3TA_cjs.AssetId.fromString(s.assetId) : chunkRNECH3TA_cjs.AssetId.fromBytes(s.assetId);
-      return chunkRNECH3TA_cjs.AssetGroup.create(
+      const id = typeof s.assetId === "string" ? chunk24YNIQSW_cjs.AssetId.fromString(s.assetId) : chunk24YNIQSW_cjs.AssetId.fromBytes(s.assetId);
+      return chunk24YNIQSW_cjs.AssetGroup.create(
         id,
         null,
-        s.inputs.map((i) => chunkRNECH3TA_cjs.AssetInput.create(i.vin, i.amount)),
-        s.outputs.map((o) => chunkRNECH3TA_cjs.AssetOutput.create(o.vout, o.amount)),
-        (s.metadata ?? []).map((m) => chunkRNECH3TA_cjs.Metadata.create(m.key, m.value))
+        s.inputs.map((i) => chunk24YNIQSW_cjs.AssetInput.create(i.vin, i.amount)),
+        s.outputs.map((o) => chunk24YNIQSW_cjs.AssetOutput.create(o.vout, o.amount)),
+        (s.metadata ?? []).map((m) => chunk24YNIQSW_cjs.Metadata.create(m.key, m.value))
       );
     });
-    return chunkRNECH3TA_cjs.Packet.create(groups);
+    return chunk24YNIQSW_cjs.Packet.create(groups);
   }
   witnessBytes(ref) {
-    return chunk53XNU2EL_cjs.witnessRefToBytes(ref, this.args, this.contract.args);
+    return chunk37XKN5DZ_cjs.witnessRefToBytes(ref, this.args, this.contract.args);
   }
 };
 function bindInputs(fn, callArgs) {
-  const names = (fn.def.inputs ?? []).map(chunk53XNU2EL_cjs.inputName);
+  const names = (fn.def.inputs ?? []).map(chunk37XKN5DZ_cjs.inputName);
   if (callArgs.length !== names.length) {
     throw new Error(`${fn.name}: expected ${names.length} argument(s), got ${callArgs.length}`);
   }
@@ -20541,7 +20907,7 @@ function decodeArkContract(encoded) {
 }
 function contractFromArkContract(encoded, options = {}) {
   const parsed = decodeArkContract(encoded);
-  const handler = chunk53XNU2EL_cjs.contractHandlers.get(parsed.type);
+  const handler = chunk37XKN5DZ_cjs.contractHandlers.get(parsed.type);
   if (!handler) {
     throw new Error(`No handler registered for contract type '${parsed.type}'`);
   }
@@ -20555,9 +20921,9 @@ function contractFromArkContract(encoded, options = {}) {
     metadata: options.metadata
   };
 }
-function contractFromArkContractWithAddress(encoded, serverPubKey, addressPrefix = chunkGMUVWKOK_cjs.DEFAULT_NETWORK.hrp, options = {}) {
+function contractFromArkContractWithAddress(encoded, serverPubKey, addressPrefix = chunkCDWLZQQW_cjs.DEFAULT_NETWORK.hrp, options = {}) {
   const parsed = decodeArkContract(encoded);
-  const handler = chunk53XNU2EL_cjs.contractHandlers.getOrThrow(parsed.type);
+  const handler = chunk37XKN5DZ_cjs.contractHandlers.getOrThrow(parsed.type);
   const params = parsed.data;
   const vtxoScript = handler.createScript(params);
   return {
@@ -20594,6 +20960,7 @@ exports.DelegateManagerImpl = DelegateManagerImpl;
 exports.DelegateNotConfiguredError = DelegateNotConfiguredError;
 exports.DelegatorManagerImpl = DelegatorManagerImpl;
 exports.DelegatorNotConfiguredError = DelegatorNotConfiguredError;
+exports.DescriptorIdentity = DescriptorIdentity;
 exports.DescriptorSigningProviderMissingError = DescriptorSigningProviderMissingError;
 exports.DustChangeError = DustChangeError;
 exports.ELECTRUM_TCP_HOST = ELECTRUM_TCP_HOST;
@@ -20654,8 +21021,11 @@ exports.WsElectrumChainSource = WsElectrumChainSource;
 exports.arkRail = arkRail;
 exports.arkTarget = arkTarget;
 exports.arkade_exports = arkade_exports;
+exports.assertFinalCommitmentMatchesValidated = assertFinalCommitmentMatchesValidated;
 exports.assertIntentIdUnique = assertIntentIdUnique;
 exports.assertSendableAmount = assertSendableAmount;
+exports.assertSubmittedArkTxid = assertSubmittedArkTxid;
+exports.assetMintResolver = assetMintResolver;
 exports.boardingResolver = boardingResolver;
 exports.btcTarget = btcTarget;
 exports.buildForfeitTx = buildForfeitTx;
@@ -20663,6 +21033,7 @@ exports.buildOffchainTx = buildOffchainTx;
 exports.classifyAgainstSignerSet = classifyAgainstSignerSet;
 exports.classifyContractSigner = classifyContractSigner;
 exports.closeDatabase = closeDatabase;
+exports.collabExitResolver = collabExitResolver;
 exports.combineTapscriptSigs = combineTapscriptSigs;
 exports.contractFromArkContract = contractFromArkContract;
 exports.contractFromArkContractWithAddress = contractFromArkContractWithAddress;
@@ -20689,6 +21060,8 @@ exports.isBatchSignable = isBatchSignable;
 exports.isBtcAddress = isBtcAddress;
 exports.isCooperativelyMigratable = isCooperativelyMigratable;
 exports.isDiscoverable = isDiscoverable;
+exports.isHDDeterministicSignCapable = isHDDeterministicSignCapable;
+exports.isHDWalletCapable = isHDWalletCapable;
 exports.isLightningInvoice = isLightningInvoice;
 exports.isLnurl = isLnurl;
 exports.isMessageBusInitializingError = isMessageBusInitializingError;
@@ -20699,6 +21072,7 @@ exports.isValidArkAddress = isValidArkAddress;
 exports.isVtxoExpiringSoon = isVtxoExpiringSoon;
 exports.isVtxoForScript = isVtxoForScript;
 exports.makeHandle = makeHandle;
+exports.matchServerCheckpoints = matchServerCheckpoints;
 exports.mergeChainedTxType = mergeChainedTxType;
 exports.migrateWalletRepository = migrateWalletRepository;
 exports.onchainRail = onchainRail;
@@ -20718,10 +21092,11 @@ exports.setupServiceWorker = setupServiceWorker;
 exports.signerSetFromInfo = signerSetFromInfo;
 exports.toXOnlySignerHex = toXOnlySignerHex;
 exports.tryResolveSendAmount = tryResolveSendAmount;
+exports.validateBatchRecipients = validateBatchRecipients;
 exports.validateConnectorsTxGraph = validateConnectorsTxGraph;
 exports.validateVtxoTxGraph = validateVtxoTxGraph;
 exports.verifyTapscriptSignatures = verifyTapscriptSignatures;
 exports.waitForIncomingFunds = waitForIncomingFunds;
 exports.warnAndFilterVtxosForScript = warnAndFilterVtxosForScript;
-//# sourceMappingURL=chunk-D5LUPJJP.cjs.map
-//# sourceMappingURL=chunk-D5LUPJJP.cjs.map
+//# sourceMappingURL=chunk-ENRRZFZ4.cjs.map
+//# sourceMappingURL=chunk-ENRRZFZ4.cjs.map