@babylonlabs-io/ledger-vault-signer 0.0.1 → 0.4.0

package/LICENSE

@@ -0,0 +1,169 @@
+Business Source License 1.1
+
+License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
+"Business Source License" is a trademark of MariaDB Corporation Ab.
+
+
+-----------------------------------------------------------------------------
+
+Parameters
+
+Licensor:             Babylon Labs Ltd.
+
+Licensed Work:        @babylonlabs-io/ledger-vault-signer
+                      The Licensed Work is (c) 2024 Babylon Labs Ltd.
+
+Additional Use Grant:
+
+In addition to the uses permitted under the non-production license below,
+we grant you a limited, non-exclusive, non-transferable, non-sublicensable,
+revocable license, limited as set forth below, to use the Licensed Work
+in this repository for production commercial uses built on or using and integrated
+with the Babylon Protocol, not including Competing Uses.
+
+Any use beyond the scope of this license, including uses that are not built on or
+using and integrated with the Babylon Protocol, or are Competing Uses,
+will terminate this license to you, automatically and without notice.
+
+This License applies separately and solely to the specific versions of the Licensed Work
+in the specified repository on or before the date of this License, and we may require a
+different license and different provisions for each subsequent version of the
+Licensed Work released by us.
+
+"Babylon Labs", "we", "our", or "us" means Babylon Labs Ltd.
+
+"Babylon Protocol" means the Bitcoin staking protocol as further described in the documentation
+here (https://docs.babylonlabs.io/docs/introduction/babylon-overview), as updated from time to time.
+
+"Competing Use" means any use of the Licensed Work in any product, software, protocol, network,
+application, or service that is made available to any party and that
+(i) substitutes for the use of the Babylon Protocol,
+(ii) offers the same or substantially similar functionality as the Babylon Protocol or
+(iii) is built on or uses a protocol with substantially similar functionality as the Babylon Protocol
+or otherwise facilitates the staking of bitcoin other than by utilizing the Babylon Protocol.
+
+The provisions in this License apply to each individual, entity, group, or association
+(each and collectively, "you" or "your") who uses the Licensed Work for production,
+and you agree to such provisions. Your production use of the Licensed Work is conditional on your
+agreement to this License. If you do not agree and consent to be bound to this License,
+do not so use the Software.
+
+If you do not fall within the limited scope of this license as described above or below,
+or are otherwise not in strict compliance with this License, then this production license does not
+extend to you and does not grant you any production use, including any copying, distributing, or
+making any derivative use of the Licensed Work for production purposes.
+
+Limited Scope of License. Your commercial production license to the Licensed Work
+under this License does not extend to any use:
+
+1.  unless you have legal capacity to consent and agree to be bound by this License;
+2.  unless you have the technical knowledge necessary or advisable to understand and evaluate the
+    risks of using the Licensed Work and the Babylon Protocol;
+3.  if you are a resident or agent of, or an entity organized, incorporated or doing business in,
+    Afghanistan, Belarus, Bosnia and Herzegovina, Burundi, Central African Republic, Crimea, Cuba,
+    Democratic People's Republic of Korea, Democratic Republic of the Congo,
+    Donetsk or Luhansk Regions of Ukraine, Eritrea, Guinea, Guinea-Bissau, Haiti, Iran, Iraq, Lebanon,
+    Libya, Mali, Myanmar, Nicaragua, Russia, Somalia, South Sudan, Sudan, Syria, Venezuela, Yemen,
+    or Zimbabwe or any other country to which the United States, the United Kingdom,
+    the European Union or any of its member states or the United Nations or any of its member states
+    (collectively, the "Major Jurisdictions") embargoes goods or imposes sanctions
+    (such embargoed or sanctioned territories, collectively, the "Restricted Territories");
+4.  if you are, or if you directly or indirectly own or control, from any person or entity that is
+    listed on any sanctions list or equivalent maintained by any of the Major Jurisdictions
+    (collectively, "Sanctions Lists Persons");
+5.  to transact in or with any Restricted Territories or Sanctions List Persons;
+6.  if you are a U.S. Person as defined in 17 CFR § 230.902, or currently or ordinarily located or
+    resident in (or incorporated or organized in) the United States of America, Canada, or
+    Australia (collectively, "Excluded Jurisdictions"), or to transact in or with Excluded Jurisdictions;
+7.  to defraud, or otherwise materially mislead, any person;
+8.  in violation of applicable laws, rules or regulations in your relevant jurisdiction;
+9.  that circumvents any sanctions or export controls targeting you or the country or territory where
+    you are located; or
+10. in any activity that transmits, exchanges, or is otherwise supported by the direct or indirect
+    proceeds of criminal or fraudulent activity.
+
+Any production use of the Licensed Work by you confirms your agreement to the foregoing limitations,
+and your understanding and agreement that they are limitations and not restrictions.
+
+Change Date:          2027-03-15 (March 15th, 2027)
+
+Change License:       Apache 2.0
+
+-----------------------------------------------------------------------------
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License’s text to license
+your works, and to refer to it using the trademark "Business Source License",
+as long as you comply with the Covenants of Licensor below.
+
+-----------------------------------------------------------------------------
+
+Covenants of Licensor
+
+In consideration of the right to use this License’s text and the "Business
+Source License" name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where "compatible" means that software provided under the Change License can
+   be included in a program with software provided under GPL Version 2.0 or a
+   later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text "None".
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.
+
+-----------------------------------------------------------------------------
+
+Notice
+
+The Business Source License (this document, or the "License") is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.

package/THIRD-PARTY-NOTICES.md

@@ -0,0 +1,224 @@
+# Third-party notices
+
+This file covers third-party source vendored into this repository's package tree.
+It is not an exhaustive inventory of every bundled npm dependency — those retain
+their own license files. Vendored source:
+
+---
+
+## Ledger Bitcoin JS client
+
+- Project: LedgerHQ/app-bitcoin (formerly app-bitcoin-new)
+- Source: https://github.com/LedgerHQ/app-bitcoin
+- Version: ledger-bitcoin@0.3.0 (commit 0a9e9e141f3340d29e7c6181177d4e5e9483a9f7)
+- Files: vendored under packages/babylon-ledger-vault-signer/src/vendor/ledger-bitcoin/
+  (source-in-tree; not yet reachable from the published bundle)
+- License: Apache License 2.0
+- Modifications: see the per-file provenance headers in the vendored source
+  (explicit Buffer import, defensive strict-null guards, formatting; psbtv2.ts
+  additionally drops `fromBitcoinJS` and unifies the serialization key
+  comparator to byte-lexicographic order).
+
+### Apache License 2.0
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1.  Definitions.
+
+    "License" shall mean the terms and conditions for use, reproduction,
+    and distribution as defined by Sections 1 through 9 of this document.
+
+    "Licensor" shall mean the copyright owner or entity authorized by
+    the copyright owner that is granting the License.
+
+    "Legal Entity" shall mean the union of the acting entity and all
+    other entities that control, are controlled by, or are under common
+    control with that entity. For the purposes of this definition,
+    "control" means (i) the power, direct or indirect, to cause the
+    direction or management of such entity, whether by contract or
+    otherwise, or (ii) ownership of fifty percent (50%) or more of the
+    outstanding shares, or (iii) beneficial ownership of such entity.
+
+    "You" (or "Your") shall mean an individual or Legal Entity
+    exercising permissions granted by this License.
+
+    "Source" form shall mean the preferred form for making modifications,
+    including but not limited to software source code, documentation
+    source, and configuration files.
+
+    "Object" form shall mean any form resulting from mechanical
+    transformation or translation of a Source form, including but
+    not limited to compiled object code, generated documentation,
+    and conversions to other media types.
+
+    "Work" shall mean the work of authorship, whether in Source or
+    Object form, made available under the License, as indicated by a
+    copyright notice that is included in or attached to the work
+    (an example is provided in the Appendix below).
+
+    "Derivative Works" shall mean any work, whether in Source or Object
+    form, that is based on (or derived from) the Work and for which the
+    editorial revisions, annotations, elaborations, or other modifications
+    represent, as a whole, an original work of authorship. For the purposes
+    of this License, Derivative Works shall not include works that remain
+    separable from, or merely link (or bind by name) to the interfaces of,
+    the Work and Derivative Works thereof.
+
+    "Contribution" shall mean any work of authorship, including
+    the original version of the Work and any modifications or additions
+    to that Work or Derivative Works thereof, that is intentionally
+    submitted to Licensor for inclusion in the Work by the copyright owner
+    or by an individual or Legal Entity authorized to submit on behalf of
+    the copyright owner. For the purposes of this definition, "submitted"
+    means any form of electronic, verbal, or written communication sent
+    to the Licensor or its representatives, including but not limited to
+    communication on electronic mailing lists, source code control systems,
+    and issue tracking systems that are managed by, or on behalf of, the
+    Licensor for the purpose of discussing and improving the Work, but
+    excluding communication that is conspicuously marked or otherwise
+    designated in writing by the copyright owner as "Not a Contribution."
+
+    "Contributor" shall mean Licensor and any individual or Legal Entity
+    on behalf of whom a Contribution has been received by Licensor and
+    subsequently incorporated within the Work.
+
+2.  Grant of Copyright License. Subject to the terms and conditions of
+    this License, each Contributor hereby grants to You a perpetual,
+    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+    copyright license to reproduce, prepare Derivative Works of,
+    publicly display, publicly perform, sublicense, and distribute the
+    Work and such Derivative Works in Source or Object form.
+
+3.  Grant of Patent License. Subject to the terms and conditions of
+    this License, each Contributor hereby grants to You a perpetual,
+    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+    (except as stated in this section) patent license to make, have made,
+    use, offer to sell, sell, import, and otherwise transfer the Work,
+    where such license applies only to those patent claims licensable
+    by such Contributor that are necessarily infringed by their
+    Contribution(s) alone or by combination of their Contribution(s)
+    with the Work to which such Contribution(s) was submitted. If You
+    institute patent litigation against any entity (including a
+    cross-claim or counterclaim in a lawsuit) alleging that the Work
+    or a Contribution incorporated within the Work constitutes direct
+    or contributory patent infringement, then any patent licenses
+    granted to You under this License for that Work shall terminate
+    as of the date such litigation is filed.
+
+4.  Redistribution. You may reproduce and distribute copies of the
+    Work or Derivative Works thereof in any medium, with or without
+    modifications, and in Source or Object form, provided that You
+    meet the following conditions:
+
+    (a) You must give any other recipients of the Work or
+    Derivative Works a copy of this License; and
+
+    (b) You must cause any modified files to carry prominent notices
+    stating that You changed the files; and
+
+    (c) You must retain, in the Source form of any Derivative Works
+    that You distribute, all copyright, patent, trademark, and
+    attribution notices from the Source form of the Work,
+    excluding those notices that do not pertain to any part of
+    the Derivative Works; and
+
+    (d) If the Work includes a "NOTICE" text file as part of its
+    distribution, then any Derivative Works that You distribute must
+    include a readable copy of the attribution notices contained
+    within such NOTICE file, excluding those notices that do not
+    pertain to any part of the Derivative Works, in at least one
+    of the following places: within a NOTICE text file distributed
+    as part of the Derivative Works; within the Source form or
+    documentation, if provided along with the Derivative Works; or,
+    within a display generated by the Derivative Works, if and
+    wherever such third-party notices normally appear. The contents
+    of the NOTICE file are for informational purposes only and
+    do not modify the License. You may add Your own attribution
+    notices within Derivative Works that You distribute, alongside
+    or as an addendum to the NOTICE text from the Work, provided
+    that such additional attribution notices cannot be construed
+    as modifying the License.
+
+    You may add Your own copyright statement to Your modifications and
+    may provide additional or different license terms and conditions
+    for use, reproduction, or distribution of Your modifications, or
+    for any such Derivative Works as a whole, provided Your use,
+    reproduction, and distribution of the Work otherwise complies with
+    the conditions stated in this License.
+
+5.  Submission of Contributions. Unless You explicitly state otherwise,
+    any Contribution intentionally submitted for inclusion in the Work
+    by You to the Licensor shall be under the terms and conditions of
+    this License, without any additional terms or conditions.
+    Notwithstanding the above, nothing herein shall supersede or modify
+    the terms of any separate license agreement you may have executed
+    with Licensor regarding such Contributions.
+
+6.  Trademarks. This License does not grant permission to use the trade
+    names, trademarks, service marks, or product names of the Licensor,
+    except as required for reasonable and customary use in describing the
+    origin of the Work and reproducing the content of the NOTICE file.
+
+7.  Disclaimer of Warranty. Unless required by applicable law or
+    agreed to in writing, Licensor provides the Work (and each
+    Contributor provides its Contributions) on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+    implied, including, without limitation, any warranties or conditions
+    of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+    PARTICULAR PURPOSE. You are solely responsible for determining the
+    appropriateness of using or redistributing the Work and assume any
+    risks associated with Your exercise of permissions under this License.
+
+8.  Limitation of Liability. In no event and under no legal theory,
+    whether in tort (including negligence), contract, or otherwise,
+    unless required by applicable law (such as deliberate and grossly
+    negligent acts) or agreed to in writing, shall any Contributor be
+    liable to You for damages, including any direct, indirect, special,
+    incidental, or consequential damages of any character arising as a
+    result of this License or out of the use or inability to use the
+    Work (including but not limited to damages for loss of goodwill,
+    work stoppage, computer failure or malfunction, or any and all
+    other commercial damages or losses), even if such Contributor
+    has been advised of the possibility of such damages.
+
+9.  Accepting Warranty or Additional Liability. While redistributing
+    the Work or Derivative Works thereof, You may choose to offer,
+    and charge a fee for, acceptance of support, warranty, indemnity,
+    or other liability obligations and/or rights consistent with this
+    License. However, in accepting such obligations, You may act only
+    on Your own behalf and on Your sole responsibility, not on behalf
+    of any other Contributor, and only if You agree to indemnify,
+    defend, and hold each Contributor harmless for any liability
+    incurred by, or claims asserted against, such Contributor by reason
+    of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+Copyright {yyyy} {name of copyright owner}
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/dist/derivation.d.ts

@@ -0,0 +1,15 @@
+import { ApduSender } from './vaultCommands';
+/**
+ * Read the x-only public key at the given BIP-32 path.
+ *
+ * @param send - APDU sender bound to the live device session
+ * @param path - Full BIP-32 path as raw u32 levels (hardened bits included)
+ * @param bip32Versions - Version bytes for the decode: the signet build
+ *   returns a tpub, and `@scure/bip32` throws "Version mismatch" on its
+ *   mainnet defaults without them.
+ */
+export declare function getXOnlyPublicKeyHex(send: ApduSender, path: readonly number[], bip32Versions: {
+    private: number;
+    public: number;
+}): Promise<string>;
+//# sourceMappingURL=derivation.d.ts.map

package/dist/derivation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derivation.d.ts","sourceRoot":"","sources":["../src/derivation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAW,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAoB3D;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,aAAa,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjD,OAAO,CAAC,MAAM,CAAC,CAkBjB"}

package/dist/deviceCaps.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Ledger vault-app intent caps, mirrored from the firmware
+ * (`app-babylon-vault` @ `8f99b8b`: `vault_tlv.c`, `vault_intent.h`,
+ * `vault_constants.h`). The device rejects violations with SW_INCORRECT_DATA
+ * and a dead session, so we fail comprehensibly BEFORE the ceremony.
+ *
+ * These are device-envelope limits only — none exist on-chain or in
+ * btc-vault. They live in this signer package; the SDK must never learn them.
+ *
+ * @module ledger-vault-signer/deviceCaps
+ */
+/**
+ * Keeper and universal-challenger counts, each `[1, 32]` (`vault_intent.h:8-9`,
+ * checked `vault_tlv.c:130,137`). Far below the protocol: the contract allows
+ * 1500 universal challengers and sets no keeper cap at all.
+ */
+export declare const DEVICE_MAX_PARTICIPANTS_PER_ROLE = 32;
+/**
+ * Vault groups per intent (`vault_constants.h` VAULT_MAX_VAULTS). Multi-vault
+ * PegIn signing works in one session — `_validate_pegin` auto-detects the
+ * group from Input 0's PSBT_IN_OUTPUT_INDEX.
+ */
+export declare const DEVICE_MAX_VAULTS_PER_INTENT = 10;
+/**
+ * Fee-rate bounds (sat/vB): the intent parser rejects rate == 0 AND
+ * rate > UINT32_MAX (`vault_tlv.c:73`), so the `>= 1` floor is both a device
+ * check and the contract invariant.
+ */
+export declare const DEVICE_MAX_BASE_FEE_RATE_SAT_PER_VB = 4294967295n;
+/** Shared lower bound for the CSV/refund timelocks (`vault_constants.h:100`). */
+export declare const DEVICE_TIMELOCK_MIN_BLOCKS = 72;
+/** Inclusive upper bound for `pegin_csv_timelock` (`vault_constants.h:103`). */
+export declare const DEVICE_PEGIN_CSV_TIMELOCK_MAX_BLOCKS = 1008;
+/** Inclusive upper bound for `htlc_refund_timelock` (`vault_constants.h:106`). */
+export declare const DEVICE_REFUND_TIMELOCK_MAX_BLOCKS = 4320;
+/**
+ * Inclusive bounds for `payout_timelock`. The intent parser is EXCLUSIVE
+ * `(90, 4032)` (`vault_tlv.c`), so the accepted range is `[91, 4031]`; the
+ * exclusive form gates deposits, so it wins over Screen 8's inclusive form.
+ */
+export declare const DEVICE_PAYOUT_TIMELOCK_MIN_BLOCKS = 91;
+export declare const DEVICE_PAYOUT_TIMELOCK_MAX_BLOCKS = 4031;
+/**
+ * Relay dust limit for per-vault commission and reclaim values
+ * (`vault_constants.h`). Equal to btc-vault's `DUST_AMOUNT` by value but a
+ * distinct role — never merge them.
+ */
+export declare const DEVICE_VAULT_DUST_LIMIT_SATS = 546n;
+/**
+ * Device-only floor on `depositorClaimValue` — btc-vault's own floor is 330,
+ * so `[330, 545]` is allowed by the protocol but not the device. Firmware
+ * asymmetry; must not be "fixed" on the protocol side.
+ */
+export declare const DEVICE_MIN_DEPOSITOR_CLAIM_VALUE_SATS = 546n;
+/**
+ * The device's `peginAmount > commissionFee + 2 * dust` check. No btc-vault
+ * counterpart — firmware-only; mirrored to fail early, never to be ported
+ * into the protocol.
+ */
+export declare const DEVICE_PEGIN_AMOUNT_DUST_MULTIPLE = 2n;
+/**
+ * The ONLY tx-graph version this firmware can complete. The intent TLV
+ * carries no core-version field, so the device cannot reject a mismatched
+ * graph at load — the intent approves on-screen and signing fails at PSBT
+ * time. Any other version (v1 or a future v3) must be refused before device
+ * I/O, hence an exact match, not a floor.
+ */
+export declare const DEVICE_SUPPORTED_VAULT_CORE_VERSION = 2;
+//# sourceMappingURL=deviceCaps.d.ts.map

package/dist/deviceCaps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceCaps.d.ts","sourceRoot":"","sources":["../src/deviceCaps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,cAAc,CAAC;AAE/D,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAE7C,gFAAgF;AAChF,eAAO,MAAM,oCAAoC,OAAO,CAAC;AAEzD,kFAAkF;AAClF,eAAO,MAAM,iCAAiC,OAAO,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,KAAK,CAAC;AACpD,eAAO,MAAM,iCAAiC,OAAO,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD;;;;GAIG;AACH,eAAO,MAAM,qCAAqC,OAA+B,CAAC;AAElF;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,KAAK,CAAC;AAEpD;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,IAAI,CAAC"}

package/dist/dmkApduSender.d.ts

@@ -0,0 +1,8 @@
+import { DmkSessionHandle } from './dmkSession';
+import { ApduSender } from './vaultCommands';
+/**
+ * Build a sender bound to one device session. A `sessionId` must never outlive
+ * its connection — recreate the sender whenever the session changes.
+ */
+export declare function createDmkApduSender(handle: DmkSessionHandle): ApduSender;
+//# sourceMappingURL=dmkApduSender.d.ts.map

package/dist/dmkApduSender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dmkApduSender.d.ts","sourceRoot":"","sources":["../src/dmkApduSender.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAkFlD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,UAAU,CA4CxE"}

package/dist/dmkSession.d.ts

@@ -0,0 +1,35 @@
+import { DeviceManagementKit, DeviceSessionId } from '@ledgerhq/device-management-kit';
+export interface DmkSessionHandle {
+    readonly dmk: DeviceManagementKit;
+    readonly sessionId: DeviceSessionId;
+    /**
+     * App name/version at connect time ("BOLOS" = dashboard). Diagnostic only;
+     * absent when the preflight failed. Never re-read between intent phases.
+     */
+    readonly appName?: string;
+    readonly appVersion?: string;
+}
+/**
+ * Discover and connect to a device, returning a handle for further commands.
+ *
+ * MUST be called from a user gesture: WebHID is Chromium-only, needs a secure
+ * context, and its picker fails silently otherwise.
+ *
+ * @throws If no device is selected or the connection fails
+ */
+export declare function connectDmkSession(): Promise<DmkSessionHandle>;
+/**
+ * True while the session is usable (dead sessions must be rebuilt from
+ * discovery). The signal is the `DeviceSessionNotFound` THROW — DMK never
+ * emits a "NOT CONNECTED" state. A just-unplugged device may briefly report
+ * alive; the first ceremony APDU then rejects loudly.
+ */
+export declare function isSessionAlive(handle: DmkSessionHandle): Promise<boolean>;
+/** Disconnect the session; safe to call when already disconnected. */
+export declare function disconnectDmkSession(handle: DmkSessionHandle): Promise<void>;
+/**
+ * Tear down the singleton. Only for app shutdown or tests; a provider
+ * disconnect should use {@link disconnectDmkSession} and leave the DMK up.
+ */
+export declare function closeDmk(): void;
+//# sourceMappingURL=dmkSession.d.ts.map

package/dist/dmkSession.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dmkSession.d.ts","sourceRoot":"","sources":["../src/dmkSession.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAoB,MAAM,iCAAiC,CAAC;AAU9G,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAuCD;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAkBnE;AAuBD;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAU/E;AAED,sEAAsE;AACtE,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMlF;AAED;;;GAGG;AACH,wBAAgB,QAAQ,IAAI,IAAI,CAI/B"}

package/dist/envelope.d.ts

@@ -0,0 +1,8 @@
+import { DepositTerms } from './types';
+/**
+ * Assert the terms lie inside the device's accepted intent domain.
+ *
+ * @throws {DepositTermsRejectedError} on the first violation
+ */
+export declare function assertDepositTermsDeviceCompatible(terms: DepositTerms): void;
+//# sourceMappingURL=envelope.d.ts.map

package/dist/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAgBH,OAAO,EAA6B,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAUvE;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAsI5E"}

package/dist/errors.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Typed errors for device outcomes the consuming adapter must classify.
+ * This package deliberately has no dependency on wallet-connector's
+ * WalletError taxonomy — the adapter maps these at the seam. Matching is
+ * by `name`, mirroring the DepositTermsRejectedError contract, so the
+ * classification survives duplicated module instances.
+ *
+ * @module ledger-vault-signer/errors
+ */
+export declare const LEDGER_USER_REFUSED_ERROR_NAME = "LedgerUserRefusedError";
+export declare const LEDGER_DEVICE_LOCKED_ERROR_NAME = "LedgerDeviceLockedError";
+export declare const LEDGER_DEVICE_ERROR_NAME = "LedgerDeviceError";
+/**
+ * The user declined the request on-device. The message keeps the
+ * "User rejected" prefix — wallet-connector's `isUserRejectionMessage` and
+ * the vault app's user-cancellation classifier match on it when a wrapper
+ * drops the typed error.
+ */
+export declare class LedgerUserRefusedError extends Error {
+    readonly statusWord: number;
+    constructor(statusWord: number);
+}
+/** The device is locked; the request never reached the app. */
+export declare class LedgerDeviceLockedError extends Error {
+    readonly statusWord: number;
+    constructor(statusWord: number);
+}
+/**
+ * Any other non-OK status word: the device rejected the request for a reason
+ * the sender does not classify further. Carries the status word as data; the
+ * message already names the instruction and mapped meaning.
+ */
+export declare class LedgerDeviceError extends Error {
+    readonly statusWord: number;
+    constructor(statusWord: number, message: string);
+}
+export declare function isLedgerUserRefusedError(error: unknown): error is LedgerUserRefusedError;
+export declare function isLedgerDeviceError(error: unknown): error is LedgerDeviceError;
+export declare function isLedgerDeviceLockedError(error: unknown): error is LedgerDeviceLockedError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,8BAA8B,2BAA2B,CAAC;AACvE,eAAO,MAAM,+BAA+B,4BAA4B,CAAC;AACzE,eAAO,MAAM,wBAAwB,sBAAsB,CAAC;AAM5D;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,UAAU,EAAE,MAAM;CAK/B;AAED,+DAA+D;AAC/D,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,UAAU,EAAE,MAAM;CAK/B;AAED;;;;GAIG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAKhD;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,sBAAsB,CAExF;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAE9E;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,uBAAuB,CAE1F"}

package/dist/index.cjs

@@ -0,0 +1,2 @@
+"use strict";var le=Object.create;var O=Object.defineProperty;var _e=Object.getOwnPropertyDescriptor;var de=Object.getOwnPropertyNames;var he=Object.getPrototypeOf,pe=Object.prototype.hasOwnProperty;var Te=(e,t,n)=>t in e?O(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var fe=(e,t,n,r)=>{if(t&&typeof t=="object"||typeof t=="function")for(let o of de(t))!pe.call(e,o)&&o!==n&&O(e,o,{get:()=>t[o],enumerable:!(r=_e(t,o))||r.enumerable});return e};var d=(e,t,n)=>(n=e!=null?le(he(e)):{},fe(t||!e||!e.__esModule?O(n,"default",{value:e,enumerable:!0}):n,e));var w=(e,t,n)=>Te(e,typeof t!="symbol"?t+"":t,n);Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const ge=require("@scure/bip32"),Ae=1,me=1,Re=1,we=2,Ce=33,Se=256,Pe=257,$e=258,De=39,Ie=259,ve=105,Oe=260,Le=261,Ve=262,ye=271,Ue=265,Ne=266,Me=267,ke=268,be=269,Ge=270,Fe=263,xe=264,D=32,Be=32,S=255,Ke=3+D,b=Math.floor(S/Ke);function _(e,t){if(t.length>S)throw new Error(`TLV value for tag 0x${e.toString(16)} exceeds 255 bytes`);const n=new Uint8Array(3+t.length);return n[0]=e>>8&255,n[1]=e&255,n[2]=t.length,n.set(t,3),n}function v(e,t,n){if(e<0n||e>=1n<<BigInt(8*t))throw new Error(`${n} ${e} does not fit in ${t} bytes`);const r=new Uint8Array(t);let o=e;for(let i=t-1;i>=0;i--)r[i]=Number(o&0xffn),o>>=8n;return r}function T(e,t,n){return _(e,v(BigInt(t),1,n))}function $(e,t,n){return _(e,v(BigInt(t),4,n))}function g(e,t,n){return _(e,v(t,8,n))}function I(e){const t=e.reduce((o,i)=>o+i.length,0),n=new Uint8Array(t);let r=0;for(const o of e)n.set(o,r),r+=o.length;return n}function U(e,t,n){if(e.length!==t)throw new Error(`${n} must be ${t} bytes, got ${e.length}`);return e}const G=5;function te(e){if(e.depositorPath.length!==G)throw new Error(`depositorPath must have exactly ${G} levels, got ${e.depositorPath.length}`);const t=I(e.depositorPath.map(n=>v(BigInt(n>>>0),4,"path level")));return I([T(Re,Ae,"structureType"),T(we,me,"version"),$(Ce,e.coinType,"coinType"),g(Se,e.baseFeeRate,"baseFeeRate"),$(Pe,e.peginCsvTimelock,"peginCsvTimelock"),$($e,e.payoutTimelock,"payoutTimelock"),_(De,U(e.prepeginTxidInternal,Be,"prepeginTxid")),$(Ie,e.htlcRefundTimelock,"htlcRefundTimelock"),_(ve,t),T(Oe,e.keeperCount,"keeperCount"),T(Le,e.challengerCount,"challengerCount"),T(Ve,e.vaultCount,"vaultCount"),g(ye,e.prepeginMaxFee,"prepeginMaxFee")])}function ne(e){return I([T(Ue,e.htlcVout,"htlcVout"),_(Ne,U(e.vaultProviderPubkey,D,"vaultProviderPubkey")),g(Me,e.vaultAmount,"vaultAmount"),g(ke,e.commissionFee,"commissionFee"),g(be,e.depositorClaimValue,"depositorClaimValue"),g(Ge,e.peginMaxFee,"peginMaxFee")])}function oe(e,t){const n=(i,u)=>i.map((s,E)=>U(s,D,`${u}[${E}]`)).sort((s,E)=>{for(let l=0;l<D;l++)if(s[l]!==E[l])return s[l]-E[l];return 0}),r=[...n(e,"keeper").map(i=>_(Fe,i)),...n(t,"challenger").map(i=>_(xe,i))],o=[];for(let i=0;i<r.length;i+=b)o.push(I(r.slice(i,i+b)));return o}const m=225,L=128,F=129,He=0,Ye=1,Xe=0,je=1,We=2,P=0,x=64,B=1024,K=10,H=32;function qe(e){return new Uint8Array([e>>8&255,e&255])}function Je(e){const t=e>>>0;return new Uint8Array([t>>>24&255,t>>>16&255,t>>>8&255,t&255])}function V(e){const t=new Uint8Array(e.reduce((r,o)=>r+o.length,0));let n=0;for(const r of e)t.set(r,n),n+=r.length;return t}const Y=/^[a-z0-9-]+$/;async function ze(e,{appName:t,derivationPath:n,context:r}){const o=new TextEncoder().encode(t);if(o.length<1||o.length>x)throw new Error(`appName must be 1..${x} bytes, got ${o.length}`);if(!Y.test(t))throw new Error(`appName must match ${Y} — the device rejects other characters`);if(n.length<1||n.length>K)throw new Error(`derivationPath must have 1..${K} levels`);if(r.length<1||r.length>B)throw new Error(`context must be 1..${B} bytes, got ${r.length}`);const i=V([new Uint8Array([o.length]),o,new Uint8Array([n.length]),V(n.map(Je)),qe(r.length)]),u=Math.min(r.length,S-i.length);if(u<0)throw new Error("appName and derivationPath leave no room for context in the first APDU");let s=await e({cla:m,ins:F,p1:He,p2:P,data:V([i,r.subarray(0,u)])});for(let E=u;E<r.length;E+=S)s=await e({cla:m,ins:F,p1:Ye,p2:P,data:r.subarray(E,E+S)});if(s.length!==H)throw new Error(`Expected a ${H}-byte context root, got ${s.length} bytes`);return s}async function Qe(e,{scalars:t,groups:n,keeperPubkeys:r,challengerPubkeys:o}){if(n.length!==t.vaultCount)throw new Error(`vaultCount ${t.vaultCount} does not match ${n.length} group(s)`);if(r.length!==t.keeperCount)throw new Error(`keeperCount ${t.keeperCount} does not match ${r.length} key(s)`);if(t.keeperCount<1||t.challengerCount<1)throw new Error(`Both rosters must be non-empty: keeperCount=${t.keeperCount}, challengerCount=${t.challengerCount}`);if(o.length!==t.challengerCount)throw new Error(`challengerCount ${t.challengerCount} does not match ${o.length} key(s)`);await e({cla:m,ins:L,p1:Xe,p2:P,data:te(t)});for(const i of n)await e({cla:m,ins:L,p1:je,p2:P,data:ne(i)});for(const i of oe(r,o))await e({cla:m,ins:L,p1:We,p2:P,data:i})}const Ze=0,et=0,tt=1,nt=0,X=33,j=10;async function ot(e,t,n){if(t.length<1||t.length>j)throw new Error(`BIP-32 path must have 1..${j} levels, got ${t.length}`);const r=await e({cla:m,ins:Ze,p1:et,p2:tt,data:st(t)}),o=new TextDecoder().decode(r),i=ge.HDKey.fromExtendedKey(o,n);if(!i.publicKey||i.publicKey.length!==X)throw new Error(`Ledger returned an extended key without a ${X}-byte public key`);return rt(i.publicKey.subarray(1))}function rt(e){return Array.from(e,t=>t.toString(16).padStart(2,"0")).join("")}function st(e){const t=new Uint8Array(2+e.length*4);return t[0]=nt,t[1]=e.length,e.forEach((n,r)=>{const o=2+r*4;t[o]=n>>>24&255,t[o+1]=n>>>16&255,t[o+2]=n>>>8&255,t[o+3]=n&255}),t}const N="LedgerUserRefusedError",M="LedgerDeviceLockedError",k="LedgerDeviceError";function re(e){return e.toString(16).padStart(4,"0")}class se extends Error{constructor(n){super(`User rejected the request on the Ledger device (0x${re(n)})`);w(this,"statusWord");this.name=N,this.statusWord=n}}class ie extends Error{constructor(n){super(`The Ledger device is locked — unlock it and retry (0x${re(n)})`);w(this,"statusWord");this.name=M,this.statusWord=n}}class ce extends Error{constructor(n,r){super(r);w(this,"statusWord");this.name=k,this.statusWord=n}}function it(e){return e instanceof Error&&e.name===N}function ct(e){return e instanceof Error&&e.name===k}function at(e){return e instanceof Error&&e.name===M}const ut=36864,Et=new Set([21761,27013]),lt=new Set([21781,27010,21251]),W=2,ae=28160,_t={27264:"The device rejected the data as invalid",27266:"The device does not support this request — check that the app build matches the selected network",27270:"The device rejected the instruction parameters",27271:"The device rejected the payload length",27904:"The running app does not support this instruction",[ae]:"The running app does not handle vault instructions — open the Babylon Vault app",45056:"The device reported a wrong response length",45063:"The device is not in the expected state for this step",45064:"The device rejected a signature or HMAC as invalid",45065:"The device rejected the CPFP anchor",45066:"The device has already signed the maximum number of these transactions",28416:"The device reported an internal error"};function dt(e){if(e.statusCode.length!==W)throw new Error(`The device returned a ${e.statusCode.length}-byte status word; expected ${W}.`);return e.statusCode[0]<<8|e.statusCode[1]}function ht(e){if(e.data.length>255)throw new Error(`APDU data is ${e.data.length} bytes; Lc is a single byte (max 255)`);const t=new Uint8Array(5+e.data.length);return t[0]=e.cla,t[1]=e.ins,t[2]=e.p1,t[3]=e.p2,t[4]=e.data.length,t.set(e.data,5),t}function q(){return globalThis.__LEDGER_VAULT_APDU_TRACE__===!0}function h(e){return e.toString(16).padStart(2,"0")}function J(e){return e.toString(16).padStart(4,"0")}function pt(e){return async t=>{const n=`${h(t.cla)} ${h(t.ins)} ${h(t.p1)} ${h(t.p2)} Lc=${t.data.length}`;let r;try{r=await e.dmk.sendApdu({sessionId:e.sessionId,apdu:ht(t)})}catch(i){throw q()&&console.debug(`[ledger-vault] APDU ${n} -> transport error`,i),i}const o=dt(r);if(q()&&console.debug(`[ledger-vault] APDU ${n} -> sw=0x${J(o)} len=${r.data.length}`),Et.has(o))throw new se(o);if(lt.has(o))throw new ie(o);if(o!==ut){const i=_t[o],u=o===ae&&e.appName?` (app at connect time: "${e.appName}"${e.appVersion?` v${e.appVersion}`:""})`:"";throw new ce(o,`${i??"The device rejected the request"} (ins 0x${h(t.ins)} p1 0x${h(t.p1)}, sw 0x${J(o)})${u}`)}return r.data}}const Tt={isRefresherDisabled:!0};let A,f;function ft(){if(!f){const e=(async()=>{const[{DeviceManagementKitBuilder:t},{webHidTransportFactory:n}]=await Promise.all([import("@ledgerhq/device-management-kit"),import("@ledgerhq/device-transport-kit-web-hid")]);return A=new t().addTransport(n).build(),A})().catch(t=>{throw f===e&&(f=void 0),t});f=e}return f}async function gt(){const e=await ft(),[{firstValueFrom:t},{webHidIdentifier:n}]=await Promise.all([import("rxjs"),import("@ledgerhq/device-transport-kit-web-hid")]),r=await t(e.startDiscovering({transport:n})),o=await e.connect({device:r,sessionRefresherOptions:Tt}),i=await At(e,o);return{dmk:e,sessionId:o,...i}}async function At(e,t){try{const{GetAppAndVersionCommand:n,isSuccessCommandResult:r}=await import("@ledgerhq/device-management-kit"),o=await e.sendCommand({sessionId:t,command:new n});return r(o)?{appName:o.data.name,appVersion:o.data.version}:{}}catch{return{}}}async function mt(e){const{firstValueFrom:t}=await import("rxjs");try{return await t(e.dmk.getDeviceSessionState({sessionId:e.sessionId})),!0}catch(n){if((n==null?void 0:n._tag)==="DeviceSessionNotFound")return!1;throw n}}async function Rt(e){try{await e.dmk.disconnect({sessionId:e.sessionId})}catch{}}function wt(){A==null||A.close(),A=void 0,f=void 0}const z=32,Ct=10,Q=0xffffffffn,Z=72,St=1008,Pt=4320,$t=91,Dt=4031,ue=546n,ee=ue,It=2n,y=2,Ee="DepositTermsRejectedError";class c extends Error{constructor(n,r="device-envelope"){super(n);w(this,"reason");this.name=Ee,this.reason=r}}const a="Deposit terms outside the device-supported range";function p(e,t,n,r){if(!Number.isInteger(t)||t<n||t>r)throw new c(`${a}: ${e} ${t} not in [${n}, ${r}]`)}function vt(e){if(e.vaultCoreVersion!==y)throw new c(`${a}: vaultCoreVersion ${e.vaultCoreVersion} is not ${y}; this device only supports tx-graph v${y} deposits.`);if(e.protocolFeeRate<1n||e.protocolFeeRate>Q)throw new c(`${a}: protocolFeeRate ${e.protocolFeeRate} not in [1, ${Q}]`);if(p("timelockPegin",e.timelockPegin,Z,St),p("timelockAssert",e.timelockAssert,$t,Dt),p("timelockRefund",e.timelockRefund,Z,Pt),p("keeper count",e.vaultKeeperBtcPubkeys.length,1,z),p("challenger count",e.universalChallengerBtcPubkeys.length,1,z),p("vault count",e.vaults.length,1,Ct),C("prepeginMaxFee",e.prepeginMaxFee),e.prepeginMaxFee<1n)throw new c(`${a}: prepeginMaxFee ${e.prepeginMaxFee} must be >= 1`);let t=-1;for(const s of e.vaults){if(!Number.isInteger(s.htlcVout)||s.htlcVout<0||s.htlcVout>255)throw new c(`${a}: htlcVout ${s.htlcVout} not in [0, 255]`);if(s.htlcVout<=t)throw new c(`${a}: vault groups must be in strictly ascending htlcVout order; got ${s.htlcVout} after ${t}`);t=s.htlcVout}const n=s=>s.replace(/^0x/,"").toLowerCase(),r=new Set(e.vaults.map(s=>n(s.vaultProviderBtcPubkey))),o=new Set;for(const[s,E]of[["vaultKeeperBtcPubkeys",e.vaultKeeperBtcPubkeys],["universalChallengerBtcPubkeys",e.universalChallengerBtcPubkeys]])for(const l of E){const R=n(l);if(r.has(R))throw new c(`${a}: ${s} contains the vault provider's own key (${R.slice(0,16)}…)`);if(o.has(R))throw new c(`${a}: duplicate participant key in ${s} (${R.slice(0,16)}…)`);o.add(R)}const i=ue,u=It*i;for(const s of e.vaults){if(C(`vault ${s.htlcVout} peginAmount`,s.peginAmount),C(`vault ${s.htlcVout} commissionFee`,s.commissionFee),C(`vault ${s.htlcVout} depositorClaimValue`,s.depositorClaimValue),C(`vault ${s.htlcVout} peginMaxFee`,s.peginMaxFee),s.commissionFee<i)throw new c(`${a}: vault ${s.htlcVout} commissionFee ${s.commissionFee} below the ${i}-sat dust limit`);if(s.depositorClaimValue<ee)throw new c(`${a}: vault ${s.htlcVout} depositorClaimValue ${s.depositorClaimValue} below the ${ee}-sat device floor`);if(s.peginAmount<=s.commissionFee+u)throw new c(`${a}: vault ${s.htlcVout} peginAmount ${s.peginAmount} must exceed commissionFee + ${u} (${s.commissionFee+u})`)}}const Ot=(1n<<64n)-1n;function C(e,t){if(t<0n||t>Ot)throw new c(`${a}: ${e} ${t} does not fit in an unsigned 64-bit field`)}exports.DEPOSIT_TERMS_REJECTED_ERROR_NAME=Ee;exports.DepositTermsRejectedError=c;exports.LEDGER_DEVICE_ERROR_NAME=k;exports.LEDGER_DEVICE_LOCKED_ERROR_NAME=M;exports.LEDGER_USER_REFUSED_ERROR_NAME=N;exports.LedgerDeviceError=ce;exports.LedgerDeviceLockedError=ie;exports.LedgerUserRefusedError=se;exports.approveVaultIntent=Qe;exports.assertDepositTermsDeviceCompatible=vt;exports.closeDmk=wt;exports.connectDmkSession=gt;exports.createDmkApduSender=pt;exports.deriveContextHash=ze;exports.disconnectDmkSession=Rt;exports.encodeIntentGroup=ne;exports.encodeIntentScalars=te;exports.encodeKeyBatches=oe;exports.getXOnlyPublicKeyHex=ot;exports.isLedgerDeviceError=ct;exports.isLedgerDeviceLockedError=at;exports.isLedgerUserRefusedError=it;exports.isSessionAlive=mt;
+//# sourceMappingURL=index.cjs.map