@arkade-os/sdk 0.5.2 → 0.5.4

package/dist/{chunk-AJWXVQYG.js → chunk-ZJHLLDBP.js}

@@ -1,15 +1,15 @@
-import { Packet, AssetId, AssetGroup, AssetInput, AssetOutput, Metadata, RestIndexerProvider, BufferReader, BufferWriter, AssetRef } from './chunk-U5XG7SWA.js';
-import { witnessRefToBytes, validateProgram, toASM, stringifyArtifact, serializeArkadeContractParams, resolveAsm, parseArtifact, getOpcodeValue, getOpcodeName, fromASM, deserializeArkadeContractParams, computeArkadeScriptPublicKey, bytesToASM, asmToBytes, arkadeWitnessHash, arkadeScriptHash, UnsupportedProgramVersionError, SUPPORTED_PROGRAM_VERSION, OPCODE_VALUES, OPCODE_NAMES, bignum_exports, ArkadeScript, ArkadeProgramScript, ARKADE_OPS, ARKADE_OPCODE_VALUES, ARKADE_OPCODE_NAMES, ARKADE_OPCODES, ARKADE_OP, toXOnly, ARKADE_TYPE_ENCODINGS, validateParamValue, contractHandlers, speculativeReceiveMetadata, isMainnetDescriptor, descriptorIsOurs, deriveDescriptorLeafPubKey, deriveDescriptorLeafCompressedPubKey, normalizeToDescriptor, extractPubKey, parseHDDescriptor, identityDescriptor, DefaultVtxo, DelegateVtxo, WALLET_RECEIVE_SOURCE, BoardingContractHandler } from './chunk-LWRMSC4M.js';
-import { VtxoScript, __export, Transaction, requiresForfeit, CSVMultisigTapscript, networks, getNetwork, DEFAULT_NETWORK, resolveEmulatorPubkey, timelockToSequence, isVtxoSpent, getNormalizedVtxos, setArkPsbtField, PrevArkTxField, ConditionWitness, getArkPsbtFields, craftToSpendTx, RestArkProvider, ArkAddress, isVirtualCoin, CosignerPublicKey, ServerResponseMismatchError, assertNonNegativeMs, isRetryableProviderError, getAllNormalizedVtxos, DEFAULT_PAGE_SIZE, OP_RETURN_EMPTY_PKSCRIPT, canSweepOnchain, sequenceToTimelock, DEFAULT_ARKADE_SERVER_URL, baseFetch, DEFAULT_NETWORK_NAME, sequenceToCanonicalTimelock, assertTimerMs, isEventSourceError, isEventSourceUnavailableError, normalizeVtxo, isPastExpiry, decodeTapscript, scriptFromTapLeafScript, CLTVMultisigTapscript, VtxoTaprootTree, isArkError, ArkErrorName, assertAllowedSighashTypes, Intent, rateGate, formatSighash, getSequence, maybeArkError, toOffchainInputFeeParams, canRecoverOnchain, MultisigTapscript, DEFAULT_ARKADE_EMULATOR_URL, networkFromArkadeInfo, ArkError, toBIP371TapTree, resolveTimeHeight, canSpendOffchain, INFO_FETCH_TIMEOUT_MS, PrevoutTxField, fetchVtxoCreatedAtByTxid, EXPIRY_MIN_PLAUSIBLE_MS, ProviderUnavailableError } from './chunk-HKG26NUT.js';
-import { sha256, equalBytes, hash160, sha256x2, concatBytes, randomPrivateKeyBytes, pubECDSA, pubSchnorr } from '@scure/btc-signer/utils.js';
-import { SigHash, Script, OP, OutScript, Address, RawWitness, p2tr, p2wpkh, TaprootControlBlock, DEFAULT_SEQUENCE, Transaction as Transaction$1 } from '@scure/btc-signer';
-import { hex, base58, base64, bech32m } from '@scure/base';
+import { Packet, AssetId, AssetGroup, AssetInput, AssetOutput, Metadata, RestIndexerProvider, BufferReader, BufferWriter, AssetRef } from './chunk-BTRCN4JJ.js';
+import { witnessRefToBytes, validateProgram, toASM, stringifyArtifact, serializeArkadeContractParams, resolveAsm, parseArtifact, getOpcodeValue, getOpcodeName, fromASM, deserializeArkadeContractParams, computeArkadeScriptPublicKey, bytesToASM, asmToBytes, arkadeWitnessHash, arkadeScriptHash, UnsupportedProgramVersionError, SUPPORTED_PROGRAM_VERSION, OPCODE_VALUES, OPCODE_NAMES, bignum_exports, ArkadeScript, ArkadeProgramScript, ARKADE_OPS, ARKADE_OPCODE_VALUES, ARKADE_OPCODE_NAMES, ARKADE_OPCODES, ARKADE_OP, toXOnly, ARKADE_TYPE_ENCODINGS, validateParamValue, contractHandlers, speculativeReceiveMetadata, isMainnetDescriptor, descriptorIsOurs, deriveDescriptorLeafPubKey, deriveDescriptorLeafCompressedPubKey, normalizeToDescriptor, extractPubKey, parseHDDescriptor, identityDescriptor, DefaultVtxo, DelegateVtxo, WALLET_RECEIVE_SOURCE, BoardingContractHandler } from './chunk-6CUP6ZIF.js';
+import { VtxoScript, __export, Transaction, requiresForfeit, CSVMultisigTapscript, networks, getNetwork, DEFAULT_NETWORK, resolveEmulatorPubkey, timelockToSequence, isVtxoSpent, getNormalizedVtxos, setArkPsbtField, PrevArkTxField, ConditionWitness, craftToSpendTx, RestOperatorProvider, ArkAddress, isVirtualCoin, getArkPsbtFields, CosignerPublicKey, ServerResponseMismatchError, assertNonNegativeMs, isRetryableProviderError, getAllNormalizedVtxos, DEFAULT_PAGE_SIZE, assertAllowedSighashTypes, OP_RETURN_EMPTY_PKSCRIPT, canSweepOnchain, sequenceToTimelock, DEFAULT_ARKADE_SERVER_URL, baseFetch, DEFAULT_NETWORK_NAME, sequenceToCanonicalTimelock, assertTimerMs, isEventSourceError, isEventSourceUnavailableError, normalizeVtxo, isPastExpiry, decodeTapscript, scriptFromTapLeafScript, CLTVMultisigTapscript, VtxoTaprootTree, formatSighash, isArkError, ArkErrorName, Proof, rateGate, getSequence, maybeArkError, toOffchainInputFeeParams, canRecoverOnchain, MultisigTapscript, DEFAULT_ARKADE_EMULATOR_URL, networkFromArkadeInfo, Intent, ArkError, toBIP371TapTree, resolveTimeHeight, canSpendOffchain, INFO_FETCH_TIMEOUT_MS, PrevoutTxField, fetchVtxoCreatedAtByTxid, EXPIRY_MIN_PLAUSIBLE_MS, ProviderUnavailableError } from './chunk-AG4TFD6F.js';
 import * as musig2 from '@scure/btc-signer/musig2.js';
+import { hex, base58, base64, bech32m } from '@scure/base';
 import { equalBytes as equalBytes$1, randomBytes, bytesToNumberBE } from '@noble/curves/utils.js';
 import { signAsync, schnorr as schnorr$1, Point } from '@noble/secp256k1';
 import { secp256k1, schnorr } from '@noble/curves/secp256k1.js';
 import { Script as Script$1 } from '@scure/btc-signer/script.js';
 import { SigHash as SigHash$1 } from '@scure/btc-signer/transaction.js';
+import { sha256, equalBytes, hash160, sha256x2, concatBytes, randomPrivateKeyBytes, pubECDSA, pubSchnorr } from '@scure/btc-signer/utils.js';
+import { SigHash, Script, OP, OutScript, Address, RawWitness, p2tr, p2wpkh, TaprootControlBlock, DEFAULT_SEQUENCE, Transaction as Transaction$1 } from '@scure/btc-signer';
 import { mnemonicToSeedSync, validateMnemonic } from '@scure/bip39';
 import { wordlist } from '@scure/bip39/wordlists/english.js';
 import { networks as networks$1, scriptExpressions, HDKey, expand } from '@bitcoinerlab/descriptors-scure';
@@ -123,6 +123,7 @@ var TreeSignerSession = class _TreeSignerSession {
   graph = null;
   scriptRoot = null;
   rootSharedOutputAmount = null;
+  /** Use a fresh key/session per signing attempt; never reuse sessions or their nonces. */
   static random() {
     const secretKey = randomPrivateKeyBytes();
     return new _TreeSignerSession(secretKey);
@@ -891,9 +892,14 @@ var OVERLAP_MS = 24 * 60 * 60 * 1e3;
 var walletStateLocks = /* @__PURE__ */ new WeakMap();
 var WALLET_STATE_LOCK_NAME = "arkade-wallet-state";
 async function updateWalletState(repo, updater) {
+  const atomic = repo.atomicWalletState;
   const prev = walletStateLocks.get(repo) ?? Promise.resolve();
   const op = prev.then(
     () => withWebLock(WALLET_STATE_LOCK_NAME, async () => {
+      if (atomic !== void 0) {
+        await atomic.update(updater);
+        return;
+      }
       const state = await repo.getWalletState() ?? {};
       await repo.saveWalletState(updater(state));
     })
@@ -1603,7 +1609,7 @@ var RestDelegateProvider = class {
       },
       body: JSON.stringify({
         intent: {
-          message: Intent.encodeMessage(intent.message),
+          message: Proof.encodeMessage(intent.message),
           proof: intent.proof
         },
         forfeit_txs: forfeitTxs,
@@ -1700,6 +1706,15 @@ function assertHistoryPageFilter(filter) {
     throw new RangeError("history since must be non-negative Unix milliseconds");
   }
 }
+function applyWalletStateUpdate(state, updater) {
+  const updated = updater(state);
+  if (updated && typeof updated.then === "function") {
+    if (updated instanceof Promise) void updated.catch(() => {
+    });
+    throw new TypeError("wallet-state updater must be synchronous");
+  }
+  return updated;
+}
 function compareScriptVtxoCursors(a, b) {
   return a.address < b.address ? -1 : a.address > b.address ? 1 : compareOutpoints(a, b);
 }
@@ -2862,10 +2877,10 @@ var ErrUnvalidatedOffchainOutput = (address) => new ServerResponseMismatchError(
   `offchain output ${address} cannot be validated: virtual output tree signing did not run`
 );
 var ErrIntentOutputNotFound = (index, kind) => new ServerResponseMismatchError(
-  `${kind} output ${index} of the intent proof is not present in what the server built`
+  `${kind} output ${index} of the proof is not present in what the server built`
 );
 var ErrUnvalidatedIntentOutput = (index) => new ServerResponseMismatchError(
-  `offchain output ${index} of the intent proof cannot be validated: virtual output tree signing did not run`
+  `offchain output ${index} of the proof cannot be validated: virtual output tree signing did not run`
 );
 var ErrInvalidOnchainOutputAmount = (address) => new Error(`invalid onchain output amount: ${address}`);
 var ErrInvalidOnchainOutputAssets = (address) => new Error(`onchain output ${address} cannot have assets`);
@@ -3833,32 +3848,36 @@ function assertCheckpointsMatchInputs(checkpoints, inputs, unrollCandidates, con
   }
 }
 async function submitOffchainTx(provider, offchainTx, signer, hooks, options) {
-  const { arkTx: signedArkTx, userSignedCheckpoints } = await signer.signArkTx(
+  const oneShot = options?.oneShot !== false;
+  const { arkTx: signedArkTx, userSignedCheckpoints: batchSigned } = await signer.signArkTx(
     offchainTx.arkTx,
     offchainTx.checkpoints
   );
-  if (userSignedCheckpoints && userSignedCheckpoints.length !== offchainTx.checkpoints.length) {
+  if (batchSigned && batchSigned.length !== offchainTx.checkpoints.length) {
     throw new Error(
-      `signer returned ${userSignedCheckpoints.length} signed checkpoints, expected ${offchainTx.checkpoints.length}`
+      `signer returned ${batchSigned.length} signed checkpoints, expected ${offchainTx.checkpoints.length}`
     );
   }
+  const userSignedCheckpoints = (batchSigned ?? (oneShot ? await Promise.all(offchainTx.checkpoints.map((c) => signer.signCheckpoint(c.clone()))) : void 0))?.map((c) => withArkInputWitness(c, signedArkTx));
   await hooks?.beforeSubmit?.();
   const response = await provider.submitTx(
     base64.encode(signedArkTx.toPSBT()),
-    offchainTx.checkpoints.map((c) => base64.encode(c.toPSBT()))
+    (oneShot ? userSignedCheckpoints : offchainTx.checkpoints.map((c) => withArkInputWitness(c, signedArkTx))).map((c) => base64.encode(c.toPSBT()))
   );
   assertSubmittedArkTxid(response, signedArkTx, "submitTx");
   const { arkTxid, signedCheckpointTxs } = response;
   const matched = matchServerCheckpoints(signedCheckpointTxs, offchainTx.checkpoints, "submitTx");
-  matched.forEach(({ server }, index) => {
-    try {
-      assertAllowedSighashTypes(server);
-    } catch (error) {
-      throw new ServerResponseMismatchError(
-        `submitTx checkpoint ${index}: ${error instanceof Error ? error.message : String(error)}`
-      );
-    }
-  });
+  if (!oneShot) {
+    matched.forEach(({ server }, index) => {
+      try {
+        assertAllowedSighashTypes(server);
+      } catch (error) {
+        throw new ServerResponseMismatchError(
+          `submitTx checkpoint ${index}: ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
+    });
+  }
   const verify = options?.verifyServerSignatures;
   if (verify) {
     if (response.finalArkTx === void 0) {
@@ -3885,26 +3904,62 @@ async function submitOffchainTx(provider, offchainTx, signer, hooks, options) {
       ({ server, local }, index) => assertServerSignedLeaf(server, local, 0, serverPubkeys, `submitTx checkpoint ${index}`)
     );
   }
+  const result = { arkTxid, finalArkTx: response.finalArkTx, signedCheckpointTxs };
   let finalCheckpoints;
   if (userSignedCheckpoints) {
     const userByTxid = new Map(
       userSignedCheckpoints.map((c, i) => [offchainTx.checkpoints[i].id, c])
     );
+    if (oneShot && matched.every(
+      ({ server, local }) => carriesTapscriptSigs(server, userByTxid.get(local.id))
+    )) {
+      await hooks?.afterFinalize?.();
+      return result;
+    }
     finalCheckpoints = matched.map(({ server, local }) => {
-      combineTapscriptSigs(userByTxid.get(local.id), server);
+      const userSigned = userByTxid.get(local.id);
+      combineTapscriptSigs(userSigned, server);
+      carryConditionWitness(userSigned, server);
       return base64.encode(server.toPSBT());
     });
   } else {
     finalCheckpoints = await Promise.all(
-      matched.map(async ({ server }) => {
+      matched.map(async ({ server, local }) => {
         const signed = await signer.signCheckpoint(server);
+        carryConditionWitness(local, signed);
         return base64.encode(signed.toPSBT());
       })
     );
   }
   await provider.finalizeTx(arkTxid, finalCheckpoints);
   await hooks?.afterFinalize?.();
-  return { arkTxid, signedCheckpointTxs };
+  return result;
+}
+function carryConditionWitness(ours, server) {
+  if (getArkPsbtFields(server, 0, ConditionWitness).length > 0) return;
+  const [witness] = getArkPsbtFields(ours, 0, ConditionWitness);
+  if (witness) setArkPsbtField(server, 0, ConditionWitness, witness);
+}
+function withArkInputWitness(checkpoint, signedArkTx) {
+  if (getArkPsbtFields(checkpoint, 0, ConditionWitness).length > 0) return checkpoint;
+  for (let i = 0; i < signedArkTx.inputsLength; i++) {
+    const { txid } = signedArkTx.getInput(i);
+    if (!txid || hex.encode(txid) !== checkpoint.id) continue;
+    const [witness] = getArkPsbtFields(signedArkTx, i, ConditionWitness);
+    if (!witness) return checkpoint;
+    const carried = checkpoint.clone();
+    setArkPsbtField(carried, 0, ConditionWitness, witness);
+    return carried;
+  }
+  return checkpoint;
+}
+function carriesTapscriptSigs(server, userSigned) {
+  const entries = (tx) => (tx.getInput(0).tapScriptSig ?? []).map(
+    ([{ pubKey, leafHash }, sig]) => hex.encode(pubKey) + hex.encode(leafHash) + hex.encode(sig)
+  );
+  const have = new Set(entries(server));
+  const want = entries(userSigned);
+  return want.length > 0 && want.every((entry) => have.has(entry));
 }
 async function signAndSubmitOffchainTx(params) {
   const offchainTx = buildOffchainTx(params.inputs, params.outputs, params.serverUnrollScript);
@@ -3913,7 +3968,8 @@ async function signAndSubmitOffchainTx(params) {
     signCheckpoint: (checkpoint) => params.identity.sign(checkpoint)
   };
   const { arkTxid } = await submitOffchainTx(params.provider, offchainTx, signer, void 0, {
-    verifyServerSignatures: params.verifyServerSignatures
+    verifyServerSignatures: params.verifyServerSignatures,
+    oneShot: params.oneShot
   });
   return arkTxid;
 }
@@ -4363,7 +4419,7 @@ async function runWithCrossInstanceLock(name, fn) {
   });
 }
 var MAX_VTXOS_PER_SETTLEMENT = 50;
-var MAX_INPUTS_PER_INTENT = 20;
+var MAX_INPUTS_PER_PROOF = 20;
 function byValueDescending(vtxos) {
   return [...vtxos].sort((a, b) => b.value - a.value);
 }
@@ -4947,7 +5003,7 @@ var VtxoManager = class _VtxoManager {
    * ```typescript
    * const wallet = await Wallet.create({
    *  identity,
-   *  arkProvider: new RestArkProvider(),
+   *  operatorProvider: new RestOperatorProvider(),
    *  settlementConfig: {
    *      vtxoThreshold: 86_400 // 24 hours
    *  },
@@ -5175,7 +5231,7 @@ var VtxoManager = class _VtxoManager {
    * ```typescript
    * const wallet = await Wallet.create({
    *   identity,
-   *   arkProvider: new RestArkProvider(),
+   *   operatorProvider: new RestOperatorProvider(),
    *   settlementConfig: {
    *     boardingUtxoSweep: true,
    *   },
@@ -5718,11 +5774,11 @@ var VtxoManager = class _VtxoManager {
   getOnchainProvider() {
     return this.getSweepWallet().onchainProvider;
   }
-  getArkProvider() {
+  getOperatorProvider() {
     return this.getSweepWallet().arkProvider;
   }
   /**
-   * Unlike {@link getArkProvider}, doesn't require boarding-sweep capability. Undefined when no
+   * Unlike {@link getOperatorProvider}, doesn't require boarding-sweep capability. Undefined when no
    * provider is wired, which callers treat as "no limit".
    */
   getInfoProvider() {
@@ -5973,7 +6029,7 @@ var VtxoManager = class _VtxoManager {
       return;
     }
     const dustAmount = getDustAmount(this.wallet);
-    const info = await this.getArkProvider().getInfo();
+    const info = await this.getOperatorProvider().getInfo();
     const { fees, vtxoMaxAmount } = info;
     const estimator = new Estimator(fees.intentFee);
     let totalAmount = 0n;
@@ -7366,6 +7422,16 @@ function gatedTouchpoints(gated) {
   }
   return { paidIn, paidOut };
 }
+function groupBy(items, key) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const item of items) {
+    const k = key(item);
+    const group = groups.get(k);
+    if (group) group.push(item);
+    else groups.set(k, [item]);
+  }
+  return groups;
+}
 var txKey = {
   commitmentTxid: "",
   boardingTxid: "",
@@ -7423,6 +7489,15 @@ async function buildTransactionHistory(vtxos, allBoardingTxs, commitmentsToIgnor
   const txidsNeedingCreatedAt = resolveTxCreatedAt ? collectArkTxidsNeedingCreatedAt(ownVtxos, localCreatedAt) : [];
   const resolvedCreatedAt = resolveTxCreatedAt && txidsNeedingCreatedAt.length > 0 ? await resolveTxCreatedAt(txidsNeedingCreatedAt) : /* @__PURE__ */ new Map();
   const unmatchedSettledBoardingTxs = allBoardingTxs.filter(isSettledBoardingReceive).sort((a, b) => a.createdAt - b.createdAt);
+  const bySettledBy = groupBy(ownVtxos, (v) => v.settledBy);
+  const byArkTxId = groupBy(ownVtxos, (v) => v.arkTxId);
+  const byTxid = groupBy(ownVtxos, (v) => v.txid);
+  const leavesBySoleCommitment = groupBy(
+    ownVtxos,
+    (v) => v.status.isLeaf && v.commitmentTxIds.length > 0 && v.commitmentTxIds.every((c) => c === v.commitmentTxIds[0]) ? v.commitmentTxIds[0] : void 0
+  );
+  const handledArkTxids = /* @__PURE__ */ new Set();
+  const handledCommitments = /* @__PURE__ */ new Set();
   const sent = [];
   let received = [];
   for (const vtxo of ownVtxos) {
@@ -7435,7 +7510,7 @@ async function buildTransactionHistory(vtxos, allBoardingTxs, commitmentsToIgnor
           unmatchedSettledBoardingTxs,
           (tx) => tx.createdAt <= vtxoCreatedAt && (tx.key.commitmentTxid === commitmentTxid || tx.key.commitmentTxid === vtxo.settledBy)
         );
-      } else if (ownVtxos.filter((v) => v.settledBy === vtxo.commitmentTxIds[0]).length === 0) {
+      } else if (!bySettledBy.has(vtxo.commitmentTxIds[0])) {
         const duplicateBoardingReceive = consumeBoardingReceive(
           unmatchedSettledBoardingTxs,
           (tx) => tx.amount === vtxo.value && tx.createdAt <= vtxoCreatedAt
@@ -7456,7 +7531,7 @@ async function buildTransactionHistory(vtxos, allBoardingTxs, commitmentsToIgnor
           });
         }
       }
-    } else if (ownVtxos.filter((v) => v.arkTxId === vtxo.txid).length === 0) {
+    } else if (!byArkTxId.has(vtxo.txid)) {
       const assets = subtractAssets([], [vtxo]);
       received.push({
         key: { ...txKey, arkTxid: vtxo.txid },
@@ -7472,9 +7547,10 @@ async function buildTransactionHistory(vtxos, allBoardingTxs, commitmentsToIgnor
       });
     }
     if (vtxo.isSpent) {
-      if (vtxo.arkTxId && !sent.some((s) => s.key.arkTxid === vtxo.arkTxId)) {
-        const changes = ownVtxos.filter((_) => _.txid === vtxo.arkTxId);
-        const allSpent = ownVtxos.filter((v) => v.arkTxId === vtxo.arkTxId);
+      if (vtxo.arkTxId && !handledArkTxids.has(vtxo.arkTxId)) {
+        handledArkTxids.add(vtxo.arkTxId);
+        const changes = byTxid.get(vtxo.arkTxId) ?? [];
+        const allSpent = byArkTxId.get(vtxo.arkTxId);
         const spentAmount = allSpent.reduce((acc, v) => acc + v.value, 0);
         let txAmount = 0;
         let txTime = 0;
@@ -7502,11 +7578,10 @@ async function buildTransactionHistory(vtxos, allBoardingTxs, commitmentsToIgnor
           });
         }
       }
-      if (vtxo.settledBy && !commitmentsToIgnore.has(vtxo.settledBy) && !sent.some((s) => s.key.commitmentTxid === vtxo.settledBy)) {
-        const changes = ownVtxos.filter(
-          (v) => v.status.isLeaf && v.commitmentTxIds.length > 0 && v.commitmentTxIds.every((_) => vtxo.settledBy === _)
-        );
-        const forfeitVtxos = ownVtxos.filter((v) => v.settledBy === vtxo.settledBy);
+      if (vtxo.settledBy && !commitmentsToIgnore.has(vtxo.settledBy) && !handledCommitments.has(vtxo.settledBy)) {
+        handledCommitments.add(vtxo.settledBy);
+        const changes = leavesBySoleCommitment.get(vtxo.settledBy) ?? [];
+        const forfeitVtxos = bySettledBy.get(vtxo.settledBy);
         const forfeitAmount = forfeitVtxos.reduce((acc, v) => acc + v.value, 0);
         if (changes.length > 0) {
           const settledAmount = changes.reduce((acc, v) => acc + v.value, 0);
@@ -8113,7 +8188,7 @@ async function makeSignedDelegateIntent(identity, coins, outputs, onchainOutputs
     expire_at: 0,
     cosigners_public_keys: cosignerPubKeys
   };
-  const proof = Intent.create(message, coins, outputs);
+  const proof = Proof.create(message, coins, outputs);
   const signedProof = await identity.sign(proof);
   return {
     proof: base64.encode(signedProof.toPSBT()),
@@ -8785,6 +8860,21 @@ var InMemoryWalletRepository = class {
   utxosByAddress = /* @__PURE__ */ new Map();
   txsByAddress = /* @__PURE__ */ new Map();
   walletState = null;
+  atomicWalletState;
+  constructor() {
+    const clone2 = typeof globalThis.structuredClone === "function" ? globalThis.structuredClone.bind(globalThis) : void 0;
+    if (clone2) {
+      this.atomicWalletState = {
+        version: 1,
+        update: async (updater) => {
+          this.walletState = applyWalletStateUpdate(
+            clone2(this.walletState ?? {}),
+            updater
+          );
+        }
+      };
+    }
+  }
   async getVtxosPage(address, page) {
     return pageOutpoints(this.vtxosByAddress.get(address) ?? [], page);
   }
@@ -11758,8 +11848,12 @@ var deserializeUtxo = (o) => ({
 var IndexedDBWalletRepository = class {
   version = 2;
   connection;
-  constructor(dbName = DEFAULT_DB_NAME) {
+  /** persistentWalletState asserts persistence beyond this process; it cannot detect browser eviction. */
+  constructor(dbName = DEFAULT_DB_NAME, options) {
     this.connection = createManagedConnection(dbName, DB_VERSION, initDatabase);
+    if (options?.persistentWalletState === true) {
+      this.atomicWalletState = { ...this.atomicWalletState, persistent: true };
+    }
   }
   async clear() {
     try {
@@ -12028,6 +12122,47 @@ var IndexedDBWalletRepository = class {
       throw error;
     }
   }
+  atomicWalletState = {
+    version: 1,
+    update: async (updater) => {
+      const db = await this.getDB();
+      const transaction = db.transaction([STORE_WALLET_STATE], "readwrite");
+      const completion = awaitTransaction(transaction);
+      let failed = false;
+      let failure;
+      try {
+        const store = transaction.objectStore(STORE_WALLET_STATE);
+        const request = store.get("state");
+        request.onerror = () => {
+          failed = true;
+          failure = request.error;
+        };
+        request.onsuccess = () => {
+          try {
+            const state = applyWalletStateUpdate(request.result?.data ?? {}, updater);
+            const write = store.put({ key: "state", data: state });
+            write.onerror = () => {
+              failed = true;
+              failure = write.error;
+            };
+          } catch (error) {
+            failed = true;
+            failure = error;
+            transaction.abort();
+          }
+        };
+      } catch (error) {
+        failed = true;
+        failure = error;
+        transaction.abort();
+      }
+      try {
+        await completion;
+      } catch (error) {
+        throw failed ? failure : error;
+      }
+    }
+  };
   async getWalletState() {
     try {
       const db = await this.getDB();
@@ -12038,7 +12173,7 @@ var IndexedDBWalletRepository = class {
       return result?.data ?? null;
     } catch (error) {
       console.error("Failed to get wallet state:", error);
-      return null;
+      throw error;
     }
   }
   async saveWalletState(state) {
@@ -12216,7 +12351,7 @@ function arkadeServiceUrl(service) {
 }
 async function resolveArkadeService(service, opts = {}) {
   const operatorUrl = arkadeServiceUrl(service);
-  const arkProvider = opts.arkProvider ?? new RestArkProvider(operatorUrl);
+  const arkProvider = opts.arkProvider ?? new RestOperatorProvider(operatorUrl);
   const info = opts.info ?? await arkProvider.getInfo();
   if ("network" in service && service.network !== info.network) {
     throw new Error(
@@ -12953,7 +13088,7 @@ function asSendParams(args) {
   }
   return { recipients: args };
 }
-function extractArkProviderUrl(provider) {
+function extractOperatorProviderUrl(provider) {
   const serverUrl = provider.serverUrl;
   return typeof serverUrl === "string" && serverUrl.length > 0 ? serverUrl : void 0;
 }
@@ -13383,18 +13518,22 @@ var ReadonlyWallet = class _ReadonlyWallet {
   }
   /** Shared setup for ReadonlyWallet.create() and Wallet.create(). */
   static async setupWalletConfig(config, pubKey) {
-    if (config.service && (config.arkProvider || config.indexerProvider || config.onchainProvider)) {
+    if (config.operatorProvider && config.arkProvider) {
+      throw new Error("Pass either `operatorProvider` or `arkProvider`, not both");
+    }
+    const callerProvider = config.operatorProvider ?? config.arkProvider;
+    if (config.service && (callerProvider || config.indexerProvider || config.onchainProvider)) {
       throw new Error(
-        "Pass either `service` or `arkProvider`/`indexerProvider`/`onchainProvider`, not both"
+        "Pass either `service` or `operatorProvider`/`indexerProvider`/`onchainProvider`, not both"
       );
     }
-    const arkProvider = config.arkProvider || new RestArkProvider(config.service ? arkadeServiceUrl(config.service) : void 0);
+    const arkProvider = callerProvider || new RestOperatorProvider(config.service ? arkadeServiceUrl(config.service) : void 0);
     let indexerProvider = config.indexerProvider;
     if (!indexerProvider && !config.service) {
-      const derived = extractArkProviderUrl(arkProvider);
-      if (!derived && config.arkProvider) {
+      const derived = extractOperatorProviderUrl(arkProvider);
+      if (!derived && callerProvider) {
         throw new Error(
-          "indexerProvider is required when arkProvider is provided without a discoverable serverUrl"
+          "indexerProvider is required when operatorProvider is provided without a discoverable serverUrl"
         );
       }
       indexerProvider = new RestIndexerProvider(derived ?? DEFAULT_ARKADE_SERVER_URL);
@@ -14319,85 +14458,90 @@ var ReadonlyWallet = class _ReadonlyWallet {
         return { height, time };
       }
     });
-    const baselinePubkey = await baselinePubkeyPromise;
-    const delegatePubKey = this.offchainTapscript instanceof DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0;
-    const baselineSigners = [
-      this.offchainTapscript.options.serverPubKey,
-      ...[...this._deprecatedSigners.keys()].map((h) => hex.decode(h))
-    ];
-    const seenBaselineScripts = /* @__PURE__ */ new Set();
-    const baseline = [];
-    for (const serverPubKey of baselineSigners) {
-      for (const csvTimelock2 of this.walletContractTimelocks) {
-        const csvTimelockStr = timelockToSequence(csvTimelock2).toString();
-        const defaultScript = new DefaultVtxo.Script({
-          pubKey: baselinePubkey,
-          serverPubKey,
-          csvTimelock: csvTimelock2
-        });
-        const defaultScriptHex = hex.encode(defaultScript.pkScript);
-        if (!seenBaselineScripts.has(defaultScriptHex)) {
-          seenBaselineScripts.add(defaultScriptHex);
-          baseline.push({
-            type: "default",
-            params: {
-              pubKey: hex.encode(defaultScript.options.pubKey),
-              serverPubKey: hex.encode(serverPubKey),
-              csvTimelock: csvTimelockStr
-            },
-            script: defaultScriptHex,
-            address: defaultScript.address(this.network.hrp, serverPubKey).encode(),
-            state: "active"
-          });
-        }
-        if (delegatePubKey) {
-          const delegateScript = new DelegateVtxo.Script({
+    try {
+      const baselinePubkey = await baselinePubkeyPromise;
+      const delegatePubKey = this.offchainTapscript instanceof DelegateVtxo.Script ? this.offchainTapscript.options.delegatePubKey : void 0;
+      const baselineSigners = [
+        this.offchainTapscript.options.serverPubKey,
+        ...[...this._deprecatedSigners.keys()].map((h) => hex.decode(h))
+      ];
+      const seenBaselineScripts = /* @__PURE__ */ new Set();
+      const baseline = [];
+      for (const serverPubKey of baselineSigners) {
+        for (const csvTimelock2 of this.walletContractTimelocks) {
+          const csvTimelockStr = timelockToSequence(csvTimelock2).toString();
+          const defaultScript = new DefaultVtxo.Script({
             pubKey: baselinePubkey,
             serverPubKey,
-            delegatePubKey,
             csvTimelock: csvTimelock2
           });
-          const delegateScriptHex = hex.encode(delegateScript.pkScript);
-          if (seenBaselineScripts.has(delegateScriptHex)) continue;
-          seenBaselineScripts.add(delegateScriptHex);
-          baseline.push({
-            type: "delegate",
-            params: {
-              pubKey: hex.encode(delegateScript.options.pubKey),
-              serverPubKey: hex.encode(serverPubKey),
-              delegatePubKey: hex.encode(delegateScript.options.delegatePubKey),
-              csvTimelock: csvTimelockStr
-            },
-            script: delegateScriptHex,
-            address: delegateScript.address(this.network.hrp, serverPubKey).encode(),
-            state: "active"
-          });
+          const defaultScriptHex = hex.encode(defaultScript.pkScript);
+          if (!seenBaselineScripts.has(defaultScriptHex)) {
+            seenBaselineScripts.add(defaultScriptHex);
+            baseline.push({
+              type: "default",
+              params: {
+                pubKey: hex.encode(defaultScript.options.pubKey),
+                serverPubKey: hex.encode(serverPubKey),
+                csvTimelock: csvTimelockStr
+              },
+              script: defaultScriptHex,
+              address: defaultScript.address(this.network.hrp, serverPubKey).encode(),
+              state: "active"
+            });
+          }
+          if (delegatePubKey) {
+            const delegateScript = new DelegateVtxo.Script({
+              pubKey: baselinePubkey,
+              serverPubKey,
+              delegatePubKey,
+              csvTimelock: csvTimelock2
+            });
+            const delegateScriptHex = hex.encode(delegateScript.pkScript);
+            if (seenBaselineScripts.has(delegateScriptHex)) continue;
+            seenBaselineScripts.add(delegateScriptHex);
+            baseline.push({
+              type: "delegate",
+              params: {
+                pubKey: hex.encode(delegateScript.options.pubKey),
+                serverPubKey: hex.encode(serverPubKey),
+                delegatePubKey: hex.encode(delegateScript.options.delegatePubKey),
+                csvTimelock: csvTimelockStr
+              },
+              script: delegateScriptHex,
+              address: delegateScript.address(this.network.hrp, serverPubKey).encode(),
+              state: "active"
+            });
+          }
         }
       }
+      const boardingCsvTimelock = this.boardingTapscript.options.csvTimelock ?? DefaultVtxo.Script.DEFAULT_TIMELOCK;
+      for (const serverPubKey of baselineSigners) {
+        const baselineBoarding = new DefaultVtxo.Script({
+          pubKey: baselinePubkey,
+          serverPubKey,
+          csvTimelock: boardingCsvTimelock
+        });
+        const boardingScriptHex = hex.encode(baselineBoarding.pkScript);
+        if (seenBaselineScripts.has(boardingScriptHex)) continue;
+        seenBaselineScripts.add(boardingScriptHex);
+        baseline.push({
+          type: "boarding",
+          params: {
+            pubKey: hex.encode(baselineBoarding.options.pubKey),
+            serverPubKey: hex.encode(serverPubKey),
+            csvTimelock: timelockToSequence(boardingCsvTimelock).toString()
+          },
+          script: boardingScriptHex,
+          address: baselineBoarding.address(this.network.hrp, serverPubKey).encode(),
+          state: "active"
+        });
+      }
+      await manager.createContracts(baseline);
+    } catch (error) {
+      await manager.dispose().catch(() => void 0);
+      throw error;
     }
-    const boardingCsvTimelock = this.boardingTapscript.options.csvTimelock ?? DefaultVtxo.Script.DEFAULT_TIMELOCK;
-    for (const serverPubKey of baselineSigners) {
-      const baselineBoarding = new DefaultVtxo.Script({
-        pubKey: baselinePubkey,
-        serverPubKey,
-        csvTimelock: boardingCsvTimelock
-      });
-      const boardingScriptHex = hex.encode(baselineBoarding.pkScript);
-      if (seenBaselineScripts.has(boardingScriptHex)) continue;
-      seenBaselineScripts.add(boardingScriptHex);
-      baseline.push({
-        type: "boarding",
-        params: {
-          pubKey: hex.encode(baselineBoarding.options.pubKey),
-          serverPubKey: hex.encode(serverPubKey),
-          csvTimelock: timelockToSequence(boardingCsvTimelock).toString()
-        },
-        script: boardingScriptHex,
-        address: baselineBoarding.address(this.network.hrp, serverPubKey).encode(),
-        state: "active"
-      });
-    }
-    await manager.createContracts(baseline);
     return manager;
   }
   /** Dispose wallet-owned managers and release background resources. */
@@ -14413,7 +14557,7 @@ var ReadonlyWallet = class _ReadonlyWallet {
   }
 };
 var Wallet2 = class extends ReadonlyWallet {
-  constructor(identity, network, onchainProvider, arkProvider, indexerProvider, arkServerPublicKey, offchainTapscript, boardingTapscript, serverUnrollScript, forfeitOutputScript, forfeitPubkey, dustAmount, walletRepository, contractRepository, delegateProvider, watcherConfig, settlementConfig, walletContractTimelocks, receiveRotator, descriptorProvider, keyring, lookAheadWindow, batchExpiryPolicy) {
+  constructor(identity, network, onchainProvider, arkProvider, indexerProvider, arkServerPublicKey, offchainTapscript, boardingTapscript, serverUnrollScript, forfeitOutputScript, forfeitPubkey, dustAmount, walletRepository, contractRepository, delegateProvider, watcherConfig, settlementConfig, walletContractTimelocks, receiveRotator, descriptorProvider, keyring, lookAheadWindow, batchExpiryPolicy, oneShotSubmit = true) {
     super(
       identity,
       network,
@@ -14433,6 +14577,7 @@ var Wallet2 = class extends ReadonlyWallet {
     this.forfeitOutputScript = forfeitOutputScript;
     this.forfeitPubkey = forfeitPubkey;
     this.batchExpiryPolicy = batchExpiryPolicy;
+    this.oneShotSubmit = oneShotSubmit;
     this.identity = identity;
     this.settlementConfig = settlementConfig !== void 0 ? settlementConfig : { ...DEFAULT_SETTLEMENT_CONFIG };
     this._delegateManager = delegateProvider ? new DelegateManagerImpl(delegateProvider, arkProvider, identity) : void 0;
@@ -14454,6 +14599,7 @@ var Wallet2 = class extends ReadonlyWallet {
   forfeitOutputScript;
   forfeitPubkey;
   batchExpiryPolicy;
+  oneShotSubmit;
   static MIN_FEE_RATE = 1;
   // sats/vbyte
   identity;
@@ -15299,7 +15445,8 @@ var Wallet2 = class extends ReadonlyWallet {
       {
         advertisedVtxoTreeExpiry: setup.info.vtxoTreeExpiry,
         ...config.minBatchExpirySeconds !== void 0 ? { minSeconds: config.minBatchExpirySeconds } : {}
-      }
+      },
+      config.oneShotSubmit
     );
     wallet.lazyInitialization = config.lazyInitialization ?? false;
     wallet._serverInfoSource = setup.serverInfoSource;
@@ -15873,7 +16020,7 @@ var Wallet2 = class extends ReadonlyWallet {
           return { skip };
         }
         if (!this.arkProvider) {
-          throw new Error("Arkade provider not configured");
+          throw new Error("Operator provider not configured");
         }
         const timelock = assertValidBatchExpiry(
           event.batchExpiry,
@@ -15984,7 +16131,7 @@ var Wallet2 = class extends ReadonlyWallet {
         ...existing ?? {},
         intentTxId,
         registerProof: intent.proof,
-        registerProofMessage: Intent.encodeMessage(intent.message),
+        registerProofMessage: Proof.encodeMessage(intent.message),
         deleteProof: deleteIntent.proof,
         deleteProofMessage: Intent.encodeMessage(deleteIntent.message),
         intentVtxos: inputs.map((i) => ({
@@ -16035,7 +16182,7 @@ var Wallet2 = class extends ReadonlyWallet {
       expire_at: 0,
       cosigners_public_keys: cosignerPubKeys
     };
-    const proof = Intent.create(message, coins, outputs);
+    const proof = Proof.create(message, coins, outputs);
     const signedProof = await this._signerRouter.sign(proof, intentProofJobs(coins));
     return {
       proof: base64.encode(signedProof.toPSBT()),
@@ -16047,7 +16194,7 @@ var Wallet2 = class extends ReadonlyWallet {
       type: "delete",
       expire_at: 0
     };
-    const proof = Intent.create(message, coins, []);
+    const proof = Proof.create(message, coins, []);
     const signedProof = await this._signerRouter.sign(proof, intentProofJobs(coins));
     return {
       proof: base64.encode(signedProof.toPSBT()),
@@ -16059,7 +16206,7 @@ var Wallet2 = class extends ReadonlyWallet {
       type: "get-pending-tx",
       expire_at: 0
     };
-    const proof = Intent.create(message, coins, []);
+    const proof = Proof.create(message, coins, []);
     const signedProof = await this._signerRouter.sign(proof, intentProofJobs(coins));
     return {
       proof: base64.encode(signedProof.toPSBT()),
@@ -16102,8 +16249,8 @@ var Wallet2 = class extends ReadonlyWallet {
       vtxos = allExtended;
     }
     const batches = [];
-    for (let i = 0; i < vtxos.length; i += MAX_INPUTS_PER_INTENT) {
-      batches.push(vtxos.slice(i, i + MAX_INPUTS_PER_INTENT));
+    for (let i = 0; i < vtxos.length; i += MAX_INPUTS_PER_PROOF) {
+      batches.push(vtxos.slice(i, i + MAX_INPUTS_PER_PROOF));
     }
     const unrollCandidates = this.checkpointUnrollCandidates(await this.arkProvider.getInfo());
     const checkpointInputs = vtxos.map((vtxo) => ({
@@ -16340,7 +16487,8 @@ var Wallet2 = class extends ReadonlyWallet {
               }
             ],
             outputs: [{ script: myPkScript, amount: BigInt(vtxo.value) }],
-            serverUnrollScript
+            serverUnrollScript,
+            oneShot: this.oneShotSubmit
           });
           swept += vtxo.value;
         } catch (error) {
@@ -16557,10 +16705,10 @@ var Wallet2 = class extends ReadonlyWallet {
     const identity = cash.identity;
     const seenTxids = /* @__PURE__ */ new Set();
     const pendingTxs = [];
-    for (let i = 0; i < inputs.length; i += MAX_INPUTS_PER_INTENT) {
-      const batch = inputs.slice(i, i + MAX_INPUTS_PER_INTENT);
+    for (let i = 0; i < inputs.length; i += MAX_INPUTS_PER_PROOF) {
+      const batch = inputs.slice(i, i + MAX_INPUTS_PER_PROOF);
       const message = { type: "get-pending-tx", expire_at: 0 };
-      const proof = Intent.create(message, batch, []);
+      const proof = Proof.create(message, batch, []);
       const signedProof = await identity.sign(
         proof,
         Array.from({ length: batch.length + 1 }, (_, j) => j)
@@ -17065,7 +17213,7 @@ var Wallet2 = class extends ReadonlyWallet {
   }
   /**
    * Build an offchain transaction from the given inputs and outputs,
-   * sign it, submit to the Arkade provider, and finalize.
+   * sign it, submit to the operator provider, and finalize.
    *
    * Signs whatever it is handed, ungated — see {@link settle} for the trade.
    *
@@ -17182,7 +17330,8 @@ var Wallet2 = class extends ReadonlyWallet {
             deprecatedServerPubkeys: [...this._deprecatedSigners.keys()].map(
               (h) => hex.decode(h)
             )
-          }
+          },
+          oneShot: this.oneShotSubmit
         }
       );
     } finally {
@@ -17805,7 +17954,7 @@ var MessageBus = class {
     this.initialized = true;
   }
   async buildServices(config) {
-    const arkProvider = new RestArkProvider(config.arkServer.url);
+    const arkProvider = new RestOperatorProvider(config.arkServer.url);
     const storage = {
       walletRepository: this.walletRepository,
       contractRepository: this.contractRepository,
@@ -17830,6 +17979,7 @@ var MessageBus = class {
         lazyInitialization: config.lazyInitialization,
         watcherConfig: config.watcherConfig,
         lookAheadWindow: config.lookAheadWindow,
+        oneShotSubmit: config.oneShotSubmit,
         minBatchExpirySeconds: config.minBatchExpirySeconds
       });
       return { wallet, arkProvider, readonlyWallet: wallet };
@@ -21071,9 +21221,10 @@ var ServiceWorkerReadonlyWallet = class _ServiceWorkerReadonlyWallet {
   }
 };
 var ServiceWorkerWallet = class _ServiceWorkerWallet extends ServiceWorkerReadonlyWallet {
-  constructor(serviceWorker, identity, walletRepository, contractRepository, messageTag, hasDelegate) {
+  constructor(serviceWorker, identity, walletRepository, contractRepository, messageTag, hasDelegate, oneShotSubmit) {
     super(serviceWorker, identity, walletRepository, contractRepository, messageTag);
     this.serviceWorker = serviceWorker;
+    this.oneShotSubmit = oneShotSubmit;
     this.identity = identity;
     this.walletRepository = walletRepository;
     this.contractRepository = contractRepository;
@@ -21084,6 +21235,7 @@ var ServiceWorkerWallet = class _ServiceWorkerWallet extends ServiceWorkerReadon
     this.hasDelegate = hasDelegate;
   }
   serviceWorker;
+  oneShotSubmit;
   walletRepository;
   contractRepository;
   identity;
@@ -21120,7 +21272,8 @@ var ServiceWorkerWallet = class _ServiceWorkerWallet extends ServiceWorkerReadon
       walletRepository,
       contractRepository,
       messageTag,
-      !!options.delegateUrl
+      !!options.delegateUrl,
+      options.oneShotSubmit
     );
     wallet._concurrentSpending = options.concurrentSpending === true;
     return _ServiceWorkerWallet.bootstrap(wallet, options, serializedWallet, {
@@ -21131,6 +21284,7 @@ var ServiceWorkerWallet = class _ServiceWorkerWallet extends ServiceWorkerReadon
       lazyInitialization: options.lazyInitialization,
       watcherConfig: options.watcherConfig,
       lookAheadWindow: options.lookAheadWindow,
+      oneShotSubmit: options.oneShotSubmit,
       minBatchExpirySeconds: options.minBatchExpirySeconds
     });
   }
@@ -22617,7 +22771,7 @@ function childTxidFromHex(txHex) {
 
 // src/providers/cachingArk.ts
 var DEFAULT_TTL_MS = 6e4;
-var CachingArkProvider = class {
+var CachingOperatorProvider = class {
   constructor(inner, ttlMs = DEFAULT_TTL_MS) {
     this.inner = inner;
     this.ttlMs = ttlMs;
@@ -22698,6 +22852,7 @@ var CachingArkProvider = class {
     });
   }
 };
+var CachingArkProvider = CachingOperatorProvider;
 var PrevTxUnavailableError = class extends Error {
   constructor(message, txids = []) {
     super(message);
@@ -24760,6 +24915,7 @@ var Arkade = class _Arkade {
   userKey;
   /** The contract manager, when contract persistence is wired up (passed in or owned). */
   contractManager;
+  oneShotSubmit;
   /** Whether {@link connect} built {@link contractManager}, so {@link dispose} must stop it. */
   ownsContractManager;
   /** {@link ArkadeContract.on} handles by contract script (hex). */
@@ -24779,6 +24935,7 @@ var Arkade = class _Arkade {
     this.identity = fields.identity;
     this.userKey = fields.userKey;
     this.contractManager = fields.contractManager;
+    this.oneShotSubmit = fields.oneShotSubmit;
     this.ownsContractManager = fields.ownsContractManager ?? false;
   }
   /**
@@ -24855,7 +25012,8 @@ var Arkade = class _Arkade {
       identity: opts.identity,
       userKey,
       contractManager,
-      ownsContractManager
+      ownsContractManager,
+      oneShotSubmit: opts.oneShotSubmit
     });
   }
   /**
@@ -24921,6 +25079,7 @@ var Arkade = class _Arkade {
    *
    * Declared `server`/`user` params default to the client's keys. Compiler
    * artifacts reserve the server key and exit delay to the connected server.
+   * Struct and array params are passed whole by name (see {@link ArkadeNestedValue}).
    */
   contract(program, args = {}) {
     const declared = (program.params ?? []).map((p) => p.name);
@@ -24964,19 +25123,19 @@ var ArkadeContract = class _ArkadeContract {
   constructor(client, program, args = {}, keys) {
     this.client = client;
     this.program = program;
-    this.args = args;
+    this.args = /* @__PURE__ */ Object.create(null);
+    for (const [name, value] of Object.entries(args)) flattenValue(name, value, this.args);
     this.keys = keys ?? {
       serverKey: client.serverKey,
       userKey: client.userKey,
       emulatorKey: client.emulatorKey
     };
-    this.vtxoScript = new ArkadeProgramScript(program, args, this.keys);
+    this.vtxoScript = new ArkadeProgramScript(program, this.args, this.keys);
     this.tapTree = this.vtxoScript.encode();
     this.compiled = this.vtxoScript.compiled;
   }
   client;
   program;
-  args;
   /** The compiled taproot tree of spending-path leaves. */
   vtxoScript;
   /** Encoded taproot tree (shared spend context for every path). */
@@ -24985,6 +25144,8 @@ var ArkadeContract = class _ArkadeContract {
   keys;
   /** Spending paths in declaration order. */
   compiled;
+  /** Constructor bindings by flattened name (`owners.0.key`), as persisted. */
+  args;
   /**
    * Rebuild a callable contract from a persisted `"arkade"` row. Compiles with the stored keys,
    * not the client's current ones, so script and address survive a server signer rotation.
@@ -25392,7 +25553,8 @@ var ArkadeTransactionBuilder = class {
         inputIndexes: userInputs
       });
     }
-    if (!client.identity) {
+    const identity = client.identity;
+    if (!identity) {
       throw new Error("a signing identity is required for non-covenant spends");
     }
     const ark = client.arkProvider;
@@ -25401,26 +25563,19 @@ var ArkadeTransactionBuilder = class {
         "broadcasting requires an `arkade` provider with `submitTx`/`finalizeTx` on the Arkade client"
       );
     }
-    const signedArk = await this.signArk(arkTx, userInputs);
-    const res = await ark.submitTx(
-      base64.encode(signedArk.toPSBT()),
-      checkpoints.map((c) => base64.encode(c.toPSBT()))
-    );
-    assertSubmittedArkTxid(res, signedArk, "submitTx");
-    const matched = matchServerCheckpoints(res.signedCheckpointTxs, checkpoints, "submitTx");
-    const finalCps = await Promise.all(
-      matched.map(async ({ server, local }) => {
-        const signed = await client.identity.sign(server, [0]);
-        const [condition] = getArkPsbtFields(local, 0, ConditionWitness);
-        if (condition && getArkPsbtFields(signed, 0, ConditionWitness).length === 0) {
-          setArkPsbtField(signed, 0, ConditionWitness, condition);
-        }
-        return base64.encode(signed.toPSBT());
-      })
+    const res = await submitOffchainTx(
+      ark,
+      { arkTx, checkpoints },
+      {
+        signArkTx: async (tx) => ({ arkTx: await this.signArk(tx, userInputs) }),
+        signCheckpoint: (checkpoint) => identity.sign(checkpoint, [0])
+      },
+      void 0,
+      { oneShot: client.oneShotSubmit }
     );
-    await ark.finalizeTx(res.arkTxid, finalCps);
     return {
       txid: res.arkTxid,
+      // Required by ArkadeBroadcaster; RestOperatorProvider.submitTx rejects a response without it.
       signedArkTx: res.finalArkTx,
       signedCheckpointTxs: res.signedCheckpointTxs
     };
@@ -25488,20 +25643,60 @@ function unspendable(coin, now) {
 function witnessBytes({ contract, args }, ref) {
   return witnessRefToBytes(ref, args, contract.args);
 }
+function flattenValue(name, value, out, ancestors = /* @__PURE__ */ new Set()) {
+  if (typeof value !== "object" || value === null || ArrayBuffer.isView(value)) {
+    if (Object.hasOwn(out, name)) throw new Error(`duplicate argument '${name}'`);
+    out[name] = value;
+    return;
+  }
+  if (ancestors.has(value)) throw new Error(`argument '${name}' must not be cyclic`);
+  if (Array.isArray(value)) {
+    for (let i = 0; i < value.length; i++) {
+      if (!Object.hasOwn(value, i))
+        throw new Error(`argument '${name}.${i}' is a sparse array element`);
+    }
+  }
+  const entries = Object.entries(value);
+  if (entries.length === 0) {
+    const proto = Object.getPrototypeOf(value);
+    if (proto !== Object.prototype && proto !== Array.prototype && proto !== null)
+      throw new Error(`argument '${name}' must be bytes, a number, a struct or an array`);
+    throw new Error(`argument '${name}' must not be an empty struct or array`);
+  }
+  ancestors.add(value);
+  for (const [key, item] of entries) flattenValue(`${name}.${key}`, item, out, ancestors);
+  ancestors.delete(value);
+}
 function bindInputs(fn, callArgs) {
   const inputs = fn.def.inputs ?? [];
-  if (callArgs.length !== inputs.length) {
+  const declared = /* @__PURE__ */ new Set();
+  for (const def of inputs) {
+    if (declared.has(def.name)) throw new Error(`${fn.name}: duplicate input '${def.name}'`);
+    declared.add(def.name);
+  }
+  const params = [
+    ...new Map(
+      inputs.map(({ name }) => {
+        const root = name.split(".")[0];
+        return [name.includes(".") ? `${root}.` : root, root];
+      })
+    ).values()
+  ];
+  if (callArgs.length !== params.length) {
     throw new Error(
-      `${fn.name}: expected ${inputs.length} argument(s), got ${callArgs.length}`
+      `${fn.name}: expected ${params.length} argument(s), got ${callArgs.length}`
     );
   }
   const bound = /* @__PURE__ */ Object.create(null);
-  inputs.forEach((def, i) => {
-    if (Object.hasOwn(bound, def.name))
-      throw new Error(`${fn.name}: duplicate input '${def.name}'`);
-    validateParamValue(def, callArgs[i]);
-    bound[def.name] = callArgs[i];
-  });
+  params.forEach((param, i) => flattenValue(param, callArgs[i], bound));
+  for (const name of Object.keys(bound)) {
+    if (!declared.has(name)) throw new Error(`${fn.name}: unexpected input '${name}'`);
+  }
+  for (const def of inputs) {
+    if (bound[def.name] === void 0)
+      throw new Error(`${fn.name}: missing input '${def.name}'`);
+    validateParamValue(def, bound[def.name]);
+  }
   return bound;
 }
 function attachExtension(tx, newPackets) {
@@ -25986,6 +26181,6 @@ function createDefaultPaymentRouter(wallet) {
   }).use(arkRail()).use(arkAssetRail()).use(onchainRail({ feeInfo: walletFeeSource(wallet) }));
 }
 
-export { ARKADE_MAGIC, ARKADE_SALTED_PREIMAGE_TAG, ARKADE_SWAP_PREIMAGE_TAG, ASSET_CARRIER_SATS, AbortError, ActivityRegistry, AmbiguousRouteError, ArkNote, Arkade, ArkadeCash, ArkadeCashCreateError, ArkadeCashOperatorMismatchError, AssetManager, BIP21, BIP21Error, BIP322, BLOCKED_UPGRADE_TIMEOUT_MS, Batch, CachingArkProvider, ChainedTxType, ConnectionDisposedError, ContractManager, ContractWatcher, DEFAULT_MESSAGE_TIMEOUTS, DEFAULT_MIN_BATCH_EXPIRY_SECONDS, DatabaseUpgradeBlockedError, DelegateManagerImpl, DelegateNotConfiguredError, DescriptorIdentity, DescriptorSigningProviderMissingError, DustChangeError, ELECTRUM_TCP_HOST, ELECTRUM_WS_URL, ESPLORA_URL, ElectrumOnchainProvider, EmulatorPacket, EsploraProvider, Estimator, Extension, ExtensionNotFoundError, ForeignDescriptorError, HDDescriptorProvider, INTENT_TERMINAL_STATES, InMemoryContractRepository, InMemoryIntentRepository, InMemoryVirtualTxRepository, InMemoryWalletRepository, IndexedDBContractRepository, IndexedDBIntentRepository, IndexedDBVirtualTxRepository, IndexedDBWalletRepository, KeyringDescriptorProvider, MAX_PAGE_SIZE, MAX_USED_SIGNING_DESCRIPTORS_LOOK_AHEAD, MESSAGE_BUS_INITIALIZING, MESSAGE_BUS_NOT_INITIALIZED, MessageBus, MessageBusInitializingError, MessageBusNotInitializedError, MissingSigningDescriptorError, MnemonicIdentity, OnchainWallet, OversizedChangeError, P2A, PaymentRouter, PrevTxUnavailableError, REGTEST_MIN_BATCH_EXPIRY_SECONDS, Ramps, ReadonlyAssetManager, ReadonlyDescriptorIdentity, ReadonlySingleKey, ReadonlyWallet, ReadonlyWalletError, RestDelegateProvider, RestEmulatorProvider, SeedIdentity, SendDeadlineExceededError, ServiceWorkerReadonlyWallet, ServiceWorkerTimeoutError, ServiceWorkerWallet, SingleKey, StaticDescriptorProvider, TxTree, TxType, TxWeightEstimator, UnannotatableInputError, UnilateralExit, UnknownPacket, Unroll, VtxoManager, VtxoReservedError, Wallet2 as Wallet, WalletCannotAllocateAddressError, WalletCannotSignError, WalletMessageHandler, WalletNotInitializedError, WsElectrumChainSource, adoptContractDescriptor, arkAssetRail, arkRail, arkTarget, arkade_exports, assertFinalCommitmentMatchesValidated, assertHistoryPageFilter, assertIntentIdUnique, assertNoAssets, assertNoSelection, assertPageRequest, assertRecipientArkadeAddress, assertSendDeadline, assertSendableAmount, assertSubmittedArkTxid, assertValidBatchExpiry, assertValidServerUnrollScript, assetMintResolver, assetsOf, attachPrevArkTxs, attachPrevoutTxs, awaitTransaction, boardingResolver, btcTarget, buildForfeitTx, buildOffchainTx, buildPreimageMessage, buildSaltedPreimageMessage, captureSendDeadline, checkSaveVtxosForScript, claimWithPreimageIdentity, classifyAgainstSignerSet, classifyContractSigner, closeDatabase, collabExitResolver, collectContracts, collectIntents, collectPages, collectScriptVtxos, collectTransactionHistory, collectUtxos, collectVtxos, combineTapscriptSigs, compareHistoryCursors, contractFilterMatchesNothing, contractFromArkContract, contractFromArkContractWithAddress, contractPreimage, contractSigner, createAssetPacket, createDefaultActivityRegistry, createDefaultPaymentRouter, createExitChainResolver, createManagedConnection, createdAtToIso, decodeArkContract, defaultBatchExpiryPolicy, deleteByIndex, deserializeAssets, deserializeExitPackage, deserializeUtxo, deserializeVtxo, encodeArkContract, exitObserverFor, extendVirtualCoinForContract, extractArkProviderUrl, gateExclusion, gatedContracts, getAllByIndexValues, getRandomId, hasBoardingTxExpired, hasCandidates, intentMatchesFilter, invoiceTarget, isAddressAllocationCapable, isArkContract, isBatchSignable, isBtcAddress, isContractGenericallySpendable, isContractVtxoEvent, isCooperativelyMigratable, isDeterministicSigner, isDiscoverable, isHDAllocationCapable, isHDDeterministicSignCapable, isHDWalletCapable, isLightningInvoice, isLnurl, isMessageBusInitializingError, isMessageBusNotInitializedError, isPerArtifactDescriptor, isSigningIdentity, isSubdust, isTerminalIntentState, isValidArkAddress, isVtxoExpiringSoon, iteratePages, legacyVtxoFacts, logExcludedVtxos, makeHandle, matchServerCheckpoints, mergeChainedTxType, notifyExitObserved, onchainRail, openDatabase, outpointExclusion, outpointReasons, pageResult, promisifyRequest, provisionClaimSecret, provisionRefundKey, registerWalletRestoreHook, resolveAssetAmount, resolveBatchExpiryPolicy, resolveDescriptorSigner, resolvePrevTxs, resolveSendAmount, saveVtxosForContract, scriptFromArkAddress, selectCoinsWithAsset, selectVirtualCoins, selectionOf, serializeAssets, serializeExitPackage, serializeUtxo, serializeVtxo, setupServiceWorker, signAndSubmitOffchainTx, signerSetFromInfo, signingDescriptorIndex, strictSigningDescriptorIndex, submitViaEmulator, toXOnlySignerHex, tryResolveSendAmount, utxoEntries, validateBatchRecipients, validateConnectorsTxGraph, validateVtxoTxGraph, verifyTapscriptSignatures, waitForIncomingFunds, walletFeeSource, warnAndFilterVtxosForScript, withPrevTxs };
-//# sourceMappingURL=chunk-AJWXVQYG.js.map
-//# sourceMappingURL=chunk-AJWXVQYG.js.map
+export { ARKADE_MAGIC, ARKADE_SALTED_PREIMAGE_TAG, ARKADE_SWAP_PREIMAGE_TAG, ASSET_CARRIER_SATS, AbortError, ActivityRegistry, AmbiguousRouteError, ArkNote, Arkade, ArkadeCash, ArkadeCashCreateError, ArkadeCashOperatorMismatchError, AssetManager, BIP21, BIP21Error, BIP322, BLOCKED_UPGRADE_TIMEOUT_MS, Batch, CachingArkProvider, CachingOperatorProvider, ChainedTxType, ConnectionDisposedError, ContractManager, ContractWatcher, DEFAULT_MESSAGE_TIMEOUTS, DEFAULT_MIN_BATCH_EXPIRY_SECONDS, DatabaseUpgradeBlockedError, DelegateManagerImpl, DelegateNotConfiguredError, DescriptorIdentity, DescriptorSigningProviderMissingError, DustChangeError, ELECTRUM_TCP_HOST, ELECTRUM_WS_URL, ESPLORA_URL, ElectrumOnchainProvider, EmulatorPacket, EsploraProvider, Estimator, Extension, ExtensionNotFoundError, ForeignDescriptorError, HDDescriptorProvider, INTENT_TERMINAL_STATES, InMemoryContractRepository, InMemoryIntentRepository, InMemoryVirtualTxRepository, InMemoryWalletRepository, IndexedDBContractRepository, IndexedDBIntentRepository, IndexedDBVirtualTxRepository, IndexedDBWalletRepository, KeyringDescriptorProvider, MAX_PAGE_SIZE, MAX_USED_SIGNING_DESCRIPTORS_LOOK_AHEAD, MESSAGE_BUS_INITIALIZING, MESSAGE_BUS_NOT_INITIALIZED, MessageBus, MessageBusInitializingError, MessageBusNotInitializedError, MissingSigningDescriptorError, MnemonicIdentity, OnchainWallet, OversizedChangeError, P2A, PaymentRouter, PrevTxUnavailableError, REGTEST_MIN_BATCH_EXPIRY_SECONDS, Ramps, ReadonlyAssetManager, ReadonlyDescriptorIdentity, ReadonlySingleKey, ReadonlyWallet, ReadonlyWalletError, RestDelegateProvider, RestEmulatorProvider, SeedIdentity, SendDeadlineExceededError, ServiceWorkerReadonlyWallet, ServiceWorkerTimeoutError, ServiceWorkerWallet, SingleKey, StaticDescriptorProvider, TreeSignerSession, TxTree, TxType, TxWeightEstimator, UnannotatableInputError, UnilateralExit, UnknownPacket, Unroll, VtxoManager, VtxoReservedError, Wallet2 as Wallet, WalletCannotAllocateAddressError, WalletCannotSignError, WalletMessageHandler, WalletNotInitializedError, WsElectrumChainSource, adoptContractDescriptor, applyWalletStateUpdate, arkAssetRail, arkRail, arkTarget, arkade_exports, assertFinalCommitmentMatchesValidated, assertHistoryPageFilter, assertIntentIdUnique, assertNoAssets, assertNoSelection, assertPageRequest, assertRecipientArkadeAddress, assertSendDeadline, assertSendableAmount, assertSubmittedArkTxid, assertValidBatchExpiry, assertValidServerUnrollScript, assetMintResolver, assetsOf, attachPrevArkTxs, attachPrevoutTxs, awaitTransaction, boardingResolver, btcTarget, buildForfeitTx, buildOffchainTx, buildPreimageMessage, buildSaltedPreimageMessage, captureSendDeadline, checkSaveVtxosForScript, claimWithPreimageIdentity, classifyAgainstSignerSet, classifyContractSigner, closeDatabase, collabExitResolver, collectContracts, collectIntents, collectPages, collectScriptVtxos, collectTransactionHistory, collectUtxos, collectVtxos, combineTapscriptSigs, compareHistoryCursors, contractFilterMatchesNothing, contractFromArkContract, contractFromArkContractWithAddress, contractPreimage, contractSigner, createAssetPacket, createDefaultActivityRegistry, createDefaultPaymentRouter, createExitChainResolver, createManagedConnection, createdAtToIso, decodeArkContract, defaultBatchExpiryPolicy, deleteByIndex, deserializeAssets, deserializeExitPackage, deserializeUtxo, deserializeVtxo, encodeArkContract, exitObserverFor, extendVirtualCoinForContract, extractOperatorProviderUrl, gateExclusion, gatedContracts, getAllByIndexValues, getRandomId, hasBoardingTxExpired, hasCandidates, intentMatchesFilter, invoiceTarget, isAddressAllocationCapable, isArkContract, isBatchSignable, isBtcAddress, isContractGenericallySpendable, isContractVtxoEvent, isCooperativelyMigratable, isDeterministicSigner, isDiscoverable, isHDAllocationCapable, isHDDeterministicSignCapable, isHDWalletCapable, isLightningInvoice, isLnurl, isMessageBusInitializingError, isMessageBusNotInitializedError, isPerArtifactDescriptor, isSigningIdentity, isSubdust, isTerminalIntentState, isValidArkAddress, isVtxoExpiringSoon, iteratePages, legacyVtxoFacts, logExcludedVtxos, makeHandle, matchServerCheckpoints, mergeChainedTxType, notifyExitObserved, onchainRail, openDatabase, outpointExclusion, outpointReasons, pageResult, promisifyRequest, provisionClaimSecret, provisionRefundKey, registerWalletRestoreHook, resolveAssetAmount, resolveBatchExpiryPolicy, resolveDescriptorSigner, resolvePrevTxs, resolveSendAmount, saveVtxosForContract, scriptFromArkAddress, selectCoinsWithAsset, selectVirtualCoins, selectionOf, serializeAssets, serializeExitPackage, serializeUtxo, serializeVtxo, setupServiceWorker, signAndSubmitOffchainTx, signerSetFromInfo, signingDescriptorIndex, strictSigningDescriptorIndex, submitViaEmulator, toXOnlySignerHex, tryResolveSendAmount, utxoEntries, validateBatchRecipients, validateConnectorsTxGraph, validateVtxoTxGraph, verifyTapscriptSignatures, waitForIncomingFunds, walletFeeSource, warnAndFilterVtxosForScript, withPrevTxs };
+//# sourceMappingURL=chunk-ZJHLLDBP.js.map
+//# sourceMappingURL=chunk-ZJHLLDBP.js.map