@babylonlabs-io/ts-sdk 0.36.1 → 0.36.3

package/dist/{PeginManager-DF1oinIQ.js → PeginManager-CB-dVkT2.js}

@@ -1,46 +1,46 @@
-var Wt = Object.defineProperty;
-var Lt = (n, t, e) => t in n ? Wt(n, t, { enumerable: !0, configurable: !0, writable: !0, value: e }) : n[t] = e;
-var y = (n, t, e) => Lt(n, typeof t != "symbol" ? t + "" : t, e);
-import { s as tt, c as Tt, H as Ft, r as U, a as F, b as st, u as Mt, d as ot, e as rt, f as it, g as Xt } from "./sha2-BYVxyZzX.js";
-import * as _t from "bitcoinjs-lib";
-import { Transaction as Kt, Psbt as at } from "bitcoinjs-lib";
-import { Buffer as q } from "buffer";
-import { isAddressEqual as ct, encodeFunctionData as lt, zeroAddress as Dt } from "viem";
-import { B as R } from "./BTCVaultRegistry.abi-DbJ5lsFJ.js";
+var Mt = Object.defineProperty;
+var Xt = (n, t, e) => t in n ? Mt(n, t, { enumerable: !0, configurable: !0, writable: !0, value: e }) : n[t] = e;
+var k = (n, t, e) => Xt(n, typeof t != "symbol" ? t + "" : t, e);
+import { s as nt, c as Bt, H as Kt, r as U, a as F, b as rt, u as Dt, d as it, e as at, f as ct, g as zt } from "./sha2-BYVxyZzX.js";
+import * as It from "bitcoinjs-lib";
+import { Transaction as Gt, Psbt as lt } from "bitcoinjs-lib";
+import { Buffer as Q } from "buffer";
+import { isAddressEqual as ut, encodeFunctionData as ht, zeroAddress as jt } from "viem";
+import { B as O } from "./BTCVaultRegistry.abi-DbJ5lsFJ.js";
 import { h as A } from "./errors-CznAK5NB.js";
-import { expandWotsSeed as zt, expandHashlockSecret as Gt, expandAuthAnchor as jt, deriveVaultId as ut } from "@babylonlabs-io/babylon-tbv-rust-wasm";
-import { b as ht, a as qt, c as Zt, e as Qt, f as Yt } from "./peginInput-C2QPvuhR.js";
-import { s as T, u as M, h as Z, e as I, p as Jt, g as dt, i as te } from "./bitcoin-B0S8SHCX.js";
-import { c as ee } from "./signing-DaLvGwQe.js";
-import { M as ft } from "./validation-CxqROCno.js";
-import { c as ne } from "./PayoutManager-s_uH8Uuj.js";
-import { s as se, c as K, d as oe, w as gt } from "./waitForTransactionReceiptSmartAware-Cj_DKm0G.js";
-import { p as re, f as ie } from "./fundPeginTransaction-oV-dNJOU.js";
-import { p as ae, f as ce } from "./mempoolApi-CAIge7Nj.js";
-const N = /* @__PURE__ */ BigInt(2 ** 32 - 1), pt = /* @__PURE__ */ BigInt(32);
-function le(n, t = !1) {
-  return t ? { h: Number(n & N), l: Number(n >> pt & N) } : { h: Number(n >> pt & N) | 0, l: Number(n & N) | 0 };
+import { expandWotsSeed as qt, expandHashlockSecret as Zt, expandAuthAnchor as Qt, deriveVaultId as dt } from "@babylonlabs-io/babylon-tbv-rust-wasm";
+import { b as gt, a as Yt, c as Jt, e as te, f as ee } from "./peginInput-C2QPvuhR.js";
+import { s as T, u as M, h as Y, e as B, p as ne, i as ft, g as pt } from "./bitcoin-B0S8SHCX.js";
+import { c as se } from "./signing-DaLvGwQe.js";
+import { M as mt } from "./validation-CxqROCno.js";
+import { c as oe } from "./PayoutManager-s_uH8Uuj.js";
+import { s as re, c as z, d as ie, w as wt } from "./waitForTransactionReceiptSmartAware-Cj_DKm0G.js";
+import { p as ae, f as ce } from "./fundPeginTransaction-oV-dNJOU.js";
+import { p as le, f as ue } from "./mempoolApi-CAIge7Nj.js";
+const N = /* @__PURE__ */ BigInt(2 ** 32 - 1), Pt = /* @__PURE__ */ BigInt(32);
+function he(n, t = !1) {
+  return t ? { h: Number(n & N), l: Number(n >> Pt & N) } : { h: Number(n >> Pt & N) | 0, l: Number(n & N) | 0 };
 }
-function ue(n, t = !1) {
+function de(n, t = !1) {
   const e = n.length;
   let s = new Uint32Array(e), o = new Uint32Array(e);
   for (let r = 0; r < e; r++) {
-    const { h: i, l: a } = le(n[r], t);
+    const { h: i, l: a } = he(n[r], t);
     [s[r], o[r]] = [i, a];
   }
   return [s, o];
 }
-const he = (n, t, e) => n << e | t >>> 32 - e, de = (n, t, e) => t << e | n >>> 32 - e, fe = (n, t, e) => t << e - 32 | n >>> 64 - e, ge = (n, t, e) => n << e - 32 | t >>> 64 - e, pe = 106, me = 32, mt = 34;
-function we(n, t, e) {
-  const s = T(n), o = _t.Transaction.fromHex(s);
+const ge = (n, t, e) => n << e | t >>> 32 - e, fe = (n, t, e) => t << e | n >>> 32 - e, pe = (n, t, e) => t << e - 32 | n >>> 64 - e, me = (n, t, e) => n << e - 32 | t >>> 64 - e, we = 106, Pe = 32, bt = 34;
+function be(n, t, e) {
+  const s = T(n), o = It.Transaction.fromHex(s);
   if (o.outs.length <= t)
     throw new Error(
       `Pre-PegIn auth-anchor OP_RETURN missing: tx has ${o.outs.length} outputs, expected at least ${t + 1} (vault outputs + OP_RETURN)`
     );
   const r = o.outs[t], i = r.script;
-  if (i.length !== mt || i[0] !== pe || i[1] !== me)
+  if (i.length !== bt || i[0] !== we || i[1] !== Pe)
     throw new Error(
-      `Pre-PegIn auth-anchor OP_RETURN at vout ${t} has unexpected script encoding (got ${i.length}-byte script with prefix 0x${i.slice(0, Math.min(2, i.length)).toString("hex")}; expected ${mt}-byte OP_RETURN + PUSH32 layout)`
+      `Pre-PegIn auth-anchor OP_RETURN at vout ${t} has unexpected script encoding (got ${i.length}-byte script with prefix 0x${i.slice(0, Math.min(2, i.length)).toString("hex")}; expected ${bt}-byte OP_RETURN + PUSH32 layout)`
     );
   const a = i.slice(2).toString("hex").toLowerCase();
   if (a !== e.toLowerCase())
@@ -52,70 +52,70 @@ function we(n, t, e) {
       `Pre-PegIn auth-anchor OP_RETURN at vout ${t} has non-zero value ${r.value}; OP_RETURN outputs must be 0-value`
     );
 }
-const C = 32, D = 32, Q = 36, vt = 32, X = 4, Pe = X + C + X + vt;
-function Y(n, t, e) {
+const C = 32, G = 32, J = 36, St = 32, X = 4, ye = X + C + X + St;
+function tt(n, t, e) {
   n[t] = e >>> 24 & 255, n[t + 1] = e >>> 16 & 255, n[t + 2] = e >>> 8 & 255, n[t + 3] = e & 255;
 }
-function be(n) {
-  if (n.txid.length !== D)
+function xe(n) {
+  if (n.txid.length !== G)
     throw new Error(
-      `outpoint.txid must be exactly ${D} bytes, got ${n.txid.length}`
+      `outpoint.txid must be exactly ${G} bytes, got ${n.txid.length}`
     );
   if (!Number.isInteger(n.vout) || n.vout < 0 || n.vout > 4294967295)
     throw new Error(`outpoint.vout must be a u32, got ${n.vout}`);
-  const t = new Uint8Array(Q);
-  return t.set(n.txid, 0), Y(t, D, n.vout), t;
+  const t = new Uint8Array(J);
+  return t.set(n.txid, 0), tt(t, G, n.vout), t;
 }
-function wt(n, t) {
+function yt(n, t) {
   const e = Math.min(n.length, t.length);
   for (let s = 0; s < e; s++)
     if (n[s] !== t[s]) return n[s] - t[s];
   return n.length - t.length;
 }
-function xe(n) {
+function ke(n) {
   if (n.length === 0)
     throw new Error(
       "buildFundingOutpointsCommitment: outpoints must be non-empty"
     );
-  const t = n.map(be);
-  t.sort(wt);
+  const t = n.map(xe);
+  t.sort(yt);
   for (let s = 1; s < t.length; s++)
-    if (wt(t[s - 1], t[s]) === 0)
+    if (yt(t[s - 1], t[s]) === 0)
       throw new Error(
         "buildFundingOutpointsCommitment: duplicate outpoint detected"
       );
-  const e = new Uint8Array(t.length * Q);
+  const e = new Uint8Array(t.length * J);
   for (let s = 0; s < t.length; s++)
-    e.set(t[s], s * Q);
-  return tt(e);
+    e.set(t[s], s * J);
+  return nt(e);
 }
-function ye(n) {
+function Ee(n) {
   if (n.depositorBtcPubkey.length !== C)
     throw new Error(
       `vaultContext: depositorBtcPubkey must be exactly ${C} bytes, got ${n.depositorBtcPubkey.length}`
     );
-  const t = xe(n.fundingOutpoints), e = new Uint8Array(Pe);
+  const t = ke(n.fundingOutpoints), e = new Uint8Array(ye);
   let s = 0;
-  return Y(e, s, C), s += X, e.set(n.depositorBtcPubkey, s), s += C, Y(e, s, vt), s += X, e.set(t, s), e;
+  return tt(e, s, C), s += X, e.set(n.depositorBtcPubkey, s), s += C, tt(e, s, St), s += X, e.set(t, s), e;
 }
-const ke = "babylon-btc-vault", It = 32, Pt = It * 2, Ee = /^[0-9a-f]+$/;
-async function Te(n, t) {
-  const e = ye(t), s = M(e), o = await n.deriveContextHash(ke, s);
+const Te = "babylon-btc-vault", At = 32, xt = At * 2, _e = /^[0-9a-f]+$/;
+async function ve(n, t) {
+  const e = Ee(t), s = M(e), o = await n.deriveContextHash(Te, s);
   if (typeof o != "string")
     throw new Error(
       `deriveVaultRoot: wallet must return a string, got ${typeof o}`
     );
-  if (o.length !== Pt)
+  if (o.length !== xt)
     throw new Error(
-      `deriveVaultRoot: wallet must return a ${Pt}-character hex string (${It} bytes), got length ${o.length}`
+      `deriveVaultRoot: wallet must return a ${xt}-character hex string (${At} bytes), got length ${o.length}`
     );
-  if (!Ee.test(o))
+  if (!_e.test(o))
     throw new Error(
       "deriveVaultRoot: wallet must return lowercase hex per derive-context-hash.md §2.1; got value with non-lowercase or non-hex characters"
     );
-  return Z(o);
+  return Y(o);
 }
-const _e = /* @__PURE__ */ Uint8Array.from([
+const Be = /* @__PURE__ */ Uint8Array.from([
   7,
   4,
   13,
@@ -132,43 +132,43 @@ const _e = /* @__PURE__ */ Uint8Array.from([
   14,
   11,
   8
-]), St = Uint8Array.from(new Array(16).fill(0).map((n, t) => t)), ve = St.map((n) => (9 * n + 5) % 16), Bt = /* @__PURE__ */ (() => {
-  const e = [[St], [ve]];
+]), Rt = Uint8Array.from(new Array(16).fill(0).map((n, t) => t)), Ie = Rt.map((n) => (9 * n + 5) % 16), Ot = /* @__PURE__ */ (() => {
+  const e = [[Rt], [Ie]];
   for (let s = 0; s < 4; s++)
     for (let o of e)
-      o.push(o[s].map((r) => _e[r]));
+      o.push(o[s].map((r) => Be[r]));
   return e;
-})(), At = Bt[0], Ot = Bt[1], Rt = /* @__PURE__ */ [
+})(), $t = Ot[0], Ht = Ot[1], Ct = /* @__PURE__ */ [
   [11, 14, 15, 12, 5, 8, 7, 9, 11, 13, 14, 15, 6, 7, 9, 8],
   [12, 13, 11, 15, 6, 9, 9, 7, 12, 15, 11, 13, 7, 8, 7, 7],
   [13, 15, 14, 11, 7, 7, 6, 8, 13, 14, 13, 12, 5, 5, 6, 9],
   [14, 11, 12, 14, 8, 6, 5, 5, 15, 12, 15, 14, 9, 9, 8, 6],
   [15, 12, 13, 13, 9, 5, 8, 6, 14, 11, 12, 11, 8, 6, 5, 5]
-].map((n) => Uint8Array.from(n)), Ie = /* @__PURE__ */ At.map((n, t) => n.map((e) => Rt[t][e])), Se = /* @__PURE__ */ Ot.map((n, t) => n.map((e) => Rt[t][e])), Be = /* @__PURE__ */ Uint32Array.from([
+].map((n) => Uint8Array.from(n)), Se = /* @__PURE__ */ $t.map((n, t) => n.map((e) => Ct[t][e])), Ae = /* @__PURE__ */ Ht.map((n, t) => n.map((e) => Ct[t][e])), Re = /* @__PURE__ */ Uint32Array.from([
   0,
   1518500249,
   1859775393,
   2400959708,
   2840853838
-]), Ae = /* @__PURE__ */ Uint32Array.from([
+]), Oe = /* @__PURE__ */ Uint32Array.from([
   1352829926,
   1548603684,
   1836072691,
   2053994217,
   0
 ]);
-function bt(n, t, e, s) {
+function kt(n, t, e, s) {
   return n === 0 ? t ^ e ^ s : n === 1 ? t & e | ~t & s : n === 2 ? (t | ~e) ^ s : n === 3 ? t & s | e & ~s : t ^ (e | ~s);
 }
 const V = /* @__PURE__ */ new Uint32Array(16);
-class Oe extends Ft {
+class $e extends Kt {
   constructor() {
     super(64, 20, 8, !0);
-    y(this, "h0", 1732584193);
-    y(this, "h1", -271733879);
-    y(this, "h2", -1732584194);
-    y(this, "h3", 271733878);
-    y(this, "h4", -1009589776);
+    k(this, "h0", 1732584193);
+    k(this, "h1", -271733879);
+    k(this, "h2", -1732584194);
+    k(this, "h3", 271733878);
+    k(this, "h4", -1009589776);
   }
   get() {
     const { h0: e, h1: s, h2: o, h3: r, h4: i } = this;
@@ -178,18 +178,18 @@ class Oe extends Ft {
     this.h0 = e | 0, this.h1 = s | 0, this.h2 = o | 0, this.h3 = r | 0, this.h4 = i | 0;
   }
   process(e, s) {
-    for (let h = 0; h < 16; h++, s += 4)
-      V[h] = e.getUint32(s, !0);
+    for (let d = 0; d < 16; d++, s += 4)
+      V[d] = e.getUint32(s, !0);
     let o = this.h0 | 0, r = o, i = this.h1 | 0, a = i, c = this.h2 | 0, u = c, l = this.h3 | 0, m = l, w = this.h4 | 0, P = w;
-    for (let h = 0; h < 5; h++) {
-      const g = 4 - h, E = Be[h], S = Ae[h], f = At[h], x = Ot[h], d = Ie[h], k = Se[h];
+    for (let d = 0; d < 5; d++) {
+      const g = 4 - d, E = Re[d], I = Oe[d], f = $t[d], y = Ht[d], x = Se[d], p = Ae[d];
       for (let b = 0; b < 16; b++) {
-        const p = U(o + bt(h, i, c, l) + V[f[b]] + E, d[b]) + w | 0;
-        o = w, w = l, l = U(c, 10) | 0, c = i, i = p;
+        const h = U(o + kt(d, i, c, l) + V[f[b]] + E, x[b]) + w | 0;
+        o = w, w = l, l = U(c, 10) | 0, c = i, i = h;
       }
       for (let b = 0; b < 16; b++) {
-        const p = U(r + bt(g, a, u, m) + V[x[b]] + S, k[b]) + P | 0;
-        r = P, P = m, m = U(u, 10) | 0, u = a, a = p;
+        const h = U(r + kt(g, a, u, m) + V[y[b]] + I, p[b]) + P | 0;
+        r = P, P = m, m = U(u, 10) | 0, u = a, a = h;
       }
     }
     this.set(this.h1 + c + m | 0, this.h2 + l + P | 0, this.h3 + w + r | 0, this.h4 + o + a | 0, this.h0 + i + u | 0);
@@ -201,28 +201,28 @@ class Oe extends Ft {
     this.destroyed = !0, F(this.buffer), this.set(0, 0, 0, 0, 0);
   }
 }
-const Re = /* @__PURE__ */ Tt(() => new Oe()), He = BigInt(0), H = BigInt(1), $e = BigInt(2), Ce = BigInt(7), Ue = BigInt(256), Ne = BigInt(113), Ht = [], $t = [], Ct = [];
-for (let n = 0, t = H, e = 1, s = 0; n < 24; n++) {
-  [e, s] = [s, (2 * e + 3 * s) % 5], Ht.push(2 * (5 * s + e)), $t.push((n + 1) * (n + 2) / 2 % 64);
-  let o = He;
+const He = /* @__PURE__ */ Bt(() => new $e()), Ce = BigInt(0), $ = BigInt(1), Ue = BigInt(2), Ne = BigInt(7), Ve = BigInt(256), Le = BigInt(113), Ut = [], Nt = [], Vt = [];
+for (let n = 0, t = $, e = 1, s = 0; n < 24; n++) {
+  [e, s] = [s, (2 * e + 3 * s) % 5], Ut.push(2 * (5 * s + e)), Nt.push((n + 1) * (n + 2) / 2 % 64);
+  let o = Ce;
   for (let r = 0; r < 7; r++)
-    t = (t << H ^ (t >> Ce) * Ne) % Ue, t & $e && (o ^= H << (H << BigInt(r)) - H);
-  Ct.push(o);
+    t = (t << $ ^ (t >> Ne) * Le) % Ve, t & Ue && (o ^= $ << ($ << BigInt(r)) - $);
+  Vt.push(o);
 }
-const Ut = ue(Ct, !0), Ve = Ut[0], We = Ut[1], xt = (n, t, e) => e > 32 ? fe(n, t, e) : he(n, t, e), yt = (n, t, e) => e > 32 ? ge(n, t, e) : de(n, t, e);
-function Le(n, t = 24) {
+const Lt = de(Vt, !0), We = Lt[0], Fe = Lt[1], Et = (n, t, e) => e > 32 ? pe(n, t, e) : ge(n, t, e), Tt = (n, t, e) => e > 32 ? me(n, t, e) : fe(n, t, e);
+function Me(n, t = 24) {
   const e = new Uint32Array(10);
   for (let s = 24 - t; s < 24; s++) {
     for (let i = 0; i < 10; i++)
       e[i] = n[i] ^ n[i + 10] ^ n[i + 20] ^ n[i + 30] ^ n[i + 40];
     for (let i = 0; i < 10; i += 2) {
-      const a = (i + 8) % 10, c = (i + 2) % 10, u = e[c], l = e[c + 1], m = xt(u, l, 1) ^ e[a], w = yt(u, l, 1) ^ e[a + 1];
+      const a = (i + 8) % 10, c = (i + 2) % 10, u = e[c], l = e[c + 1], m = Et(u, l, 1) ^ e[a], w = Tt(u, l, 1) ^ e[a + 1];
       for (let P = 0; P < 50; P += 10)
         n[i + P] ^= m, n[i + P + 1] ^= w;
     }
     let o = n[2], r = n[3];
     for (let i = 0; i < 24; i++) {
-      const a = $t[i], c = xt(o, r, a), u = yt(o, r, a), l = Ht[i];
+      const a = Nt[i], c = Et(o, r, a), u = Tt(o, r, a), l = Ut[i];
       o = n[l], r = n[l + 1], n[l] = c, n[l + 1] = u;
     }
     for (let i = 0; i < 50; i += 10) {
@@ -231,36 +231,36 @@ function Le(n, t = 24) {
       for (let a = 0; a < 10; a++)
         n[i + a] ^= ~e[(a + 2) % 10] & e[(a + 4) % 10];
     }
-    n[0] ^= Ve[s], n[1] ^= We[s];
+    n[0] ^= We[s], n[1] ^= Fe[s];
   }
   F(e);
 }
-class et {
+class st {
   // NOTE: we accept arguments in bytes instead of bits here.
   constructor(t, e, s, o = !1, r = 24) {
-    y(this, "state");
-    y(this, "pos", 0);
-    y(this, "posOut", 0);
-    y(this, "finished", !1);
-    y(this, "state32");
-    y(this, "destroyed", !1);
-    y(this, "blockLen");
-    y(this, "suffix");
-    y(this, "outputLen");
-    y(this, "enableXOF", !1);
-    y(this, "rounds");
-    if (this.blockLen = t, this.suffix = e, this.outputLen = s, this.enableXOF = o, this.rounds = r, st(s, "outputLen"), !(0 < t && t < 200))
+    k(this, "state");
+    k(this, "pos", 0);
+    k(this, "posOut", 0);
+    k(this, "finished", !1);
+    k(this, "state32");
+    k(this, "destroyed", !1);
+    k(this, "blockLen");
+    k(this, "suffix");
+    k(this, "outputLen");
+    k(this, "enableXOF", !1);
+    k(this, "rounds");
+    if (this.blockLen = t, this.suffix = e, this.outputLen = s, this.enableXOF = o, this.rounds = r, rt(s, "outputLen"), !(0 < t && t < 200))
       throw new Error("only keccak-f1600 function is supported");
-    this.state = new Uint8Array(200), this.state32 = Mt(this.state);
+    this.state = new Uint8Array(200), this.state32 = Dt(this.state);
   }
   clone() {
     return this._cloneInto();
   }
   keccak() {
-    ot(this.state32), Le(this.state32, this.rounds), ot(this.state32), this.posOut = 0, this.pos = 0;
+    it(this.state32), Me(this.state32, this.rounds), it(this.state32), this.posOut = 0, this.pos = 0;
   }
   update(t) {
-    rt(this), it(t);
+    at(this), ct(t);
     const { blockLen: e, state: s } = this, o = t.length;
     for (let r = 0; r < o; ) {
       const i = Math.min(e - this.pos, o - r);
@@ -278,7 +278,7 @@ class et {
     t[s] ^= e, (e & 128) !== 0 && s === o - 1 && this.keccak(), t[o - 1] ^= 128, this.keccak();
   }
   writeInto(t) {
-    rt(this, !1), it(t), this.finish();
+    at(this, !1), ct(t), this.finish();
     const e = this.state, { blockLen: s } = this;
     for (let o = 0, r = t.length; o < r; ) {
       this.posOut >= s && this.keccak();
@@ -293,10 +293,10 @@ class et {
     return this.writeInto(t);
   }
   xof(t) {
-    return st(t), this.xofInto(new Uint8Array(t));
+    return rt(t), this.xofInto(new Uint8Array(t));
   }
   digestInto(t) {
-    if (Xt(t, this), this.finished)
+    if (zt(t, this), this.finished)
       throw new Error("digest() was already called");
     return this.writeInto(t), this.destroy(), t;
   }
@@ -308,26 +308,26 @@ class et {
   }
   _cloneInto(t) {
     const { blockLen: e, suffix: s, outputLen: o, rounds: r, enableXOF: i } = this;
-    return t || (t = new et(e, s, o, i, r)), t.state32.set(this.state32), t.pos = this.pos, t.posOut = this.posOut, t.finished = this.finished, t.rounds = r, t.suffix = s, t.outputLen = o, t.enableXOF = i, t.destroyed = this.destroyed, t;
+    return t || (t = new st(e, s, o, i, r)), t.state32.set(this.state32), t.pos = this.pos, t.posOut = this.posOut, t.finished = this.finished, t.rounds = r, t.suffix = s, t.outputLen = o, t.enableXOF = i, t.destroyed = this.destroyed, t;
   }
 }
-const Fe = (n, t, e, s = {}) => Tt(() => new et(t, n, e), s), Me = /* @__PURE__ */ Fe(1, 136, 32), kt = 64, _ = 20, J = 4, Nt = 2, Xe = 0, Ke = 1, W = [64, 64], De = (n) => Array.from(n).map((t) => t.toString(16).padStart(2, "0")).join("");
-function nt(n) {
-  return Re(tt(n));
+const Xe = (n, t, e, s = {}) => Bt(() => new st(t, n, e), s), Ke = /* @__PURE__ */ Xe(1, 136, 32), _t = 64, _ = 20, et = 4, Wt = 2, De = 0, ze = 1, L = [64, 64], Ge = (n) => Array.from(n).map((t) => t.toString(16).padStart(2, "0")).join("");
+function ot(n) {
+  return He(nt(n));
 }
-function Vt(n) {
+function Ft(n) {
   return (1 << n) - 1;
 }
-function ze(n) {
+function je(n) {
   let t = 1;
   for (; t * t < n + 1; ) t++;
   return Math.max(t, 2);
 }
-function Ge(n) {
-  const t = J, e = n * Vt(t);
-  return { d: t, n, checksum_radix: ze(e) };
+function qe(n) {
+  const t = et, e = n * Ft(t);
+  return { d: t, n, checksum_radix: je(e) };
 }
-function z(n, t) {
+function j(n, t) {
   const e = [];
   let s = t;
   for (; s > 0; )
@@ -336,30 +336,30 @@ function z(n, t) {
   o.set(n);
   for (let r = 0; r < e.length; r++)
     o[n.length + r] = e[r];
-  return nt(o);
+  return ot(o);
 }
-function G(n, t) {
+function q(n, t) {
   let e = n;
   for (let s = 0; s < t; s++)
-    e = nt(e);
+    e = ot(e);
   return e;
 }
-function je(n, t) {
-  const e = Vt(t.d), s = t.checksum_radix - 1, o = Math.floor(t.n * e / t.checksum_radix), r = [];
+function Ze(n, t) {
+  const e = Ft(t.d), s = t.checksum_radix - 1, o = Math.floor(t.n * e / t.checksum_radix), r = [];
   for (let l = 0; l < t.n; l++) {
-    const m = z(n, l + Nt), w = G(m, e);
+    const m = j(n, l + Wt), w = q(m, e);
     r.push(Array.from(w));
   }
-  const i = z(
+  const i = j(
     n,
-    Xe
-  ), a = G(
+    De
+  ), a = q(
     i,
     s
-  ), c = z(
+  ), c = j(
     n,
-    Ke
-  ), u = G(
+    ze
+  ), u = q(
     c,
     o
   );
@@ -370,22 +370,22 @@ function je(n, t) {
     checksum_minor_terminal: Array.from(a)
   };
 }
-async function qe(n) {
+async function Qe(n) {
   try {
-    if (n.length !== kt)
+    if (n.length !== _t)
       throw new Error(
-        `WOTS seed must be exactly ${kt} bytes, got ${n.length}`
+        `WOTS seed must be exactly ${_t} bytes, got ${n.length}`
       );
     const t = [];
-    for (let e = 0; e < W.length; e++) {
-      const s = W[e], o = Ge(s), r = new Uint8Array(n.length + 1);
+    for (let e = 0; e < L.length; e++) {
+      const s = L[e], o = qe(s), r = new Uint8Array(n.length + 1);
       r.set(n), r[n.length] = e;
-      const i = nt(r);
+      const i = ot(r);
       try {
-        const a = je(i, o);
-        if (a.config.d !== J)
+        const a = Ze(i, o);
+        if (a.config.d !== et)
           throw new Error(
-            `Block ${e}: expected d=${J}, got d=${a.config.d}`
+            `Block ${e}: expected d=${et}, got d=${a.config.d}`
           );
         if (a.config.n !== s)
           throw new Error(
@@ -413,16 +413,16 @@ async function qe(n) {
         r.fill(0), i.fill(0);
       }
     }
-    if (t.length !== W.length)
+    if (t.length !== L.length)
       throw new Error(
-        `Expected ${W.length} blocks, got ${t.length}`
+        `Expected ${L.length} blocks, got ${t.length}`
       );
     return t;
   } finally {
     n.fill(0);
   }
 }
-function j(n, t, e) {
+function Z(n, t, e) {
   if (n.length !== _)
     throw new Error(
       `Block ${t} ${e}: expected ${_} bytes, got ${n.length}`
@@ -435,18 +435,18 @@ function j(n, t, e) {
       );
   }
 }
-function Ze(n) {
+function Ye(n) {
   if (n.length === 0)
     throw new Error("Public keys array must not be empty");
   for (let r = 0; r < n.length; r++) {
     const i = n[r];
-    j(i.checksum_minor_terminal, r, "checksum_minor_terminal"), j(i.checksum_major_terminal, r, "checksum_major_terminal");
+    Z(i.checksum_minor_terminal, r, "checksum_minor_terminal"), Z(i.checksum_major_terminal, r, "checksum_major_terminal");
     for (let a = 0; a < i.message_terminals.length; a++)
-      j(i.message_terminals[a], r, `message_terminal[${a}]`);
+      Z(i.message_terminals[a], r, `message_terminal[${a}]`);
   }
   let t = 0;
   for (const r of n)
-    t += Nt + r.message_terminals.length;
+    t += Wt + r.message_terminals.length;
   const e = new Uint8Array(t * _);
   let s = 0;
   for (const r of n) {
@@ -454,24 +454,24 @@ function Ze(n) {
     for (const i of r.message_terminals)
       e.set(i, s), s += _;
   }
-  const o = Me(e);
-  return `0x${De(o)}`;
+  const o = Ke(e);
+  return `0x${Ge(o)}`;
 }
-async function Qe(n, t) {
+async function Je(n, t) {
   const e = [], s = [], o = [], r = [];
   try {
     for (let i = 0; i < t; i++) {
-      const a = await zt(n, i);
+      const a = await qt(n, i);
       try {
-        const u = await qe(a);
-        e.push(u), s.push(Ze(u));
+        const u = await Qe(a);
+        e.push(u), s.push(Ye(u));
       } finally {
         a.fill(0);
       }
-      const c = await Gt(n, i);
+      const c = await Zt(n, i);
       try {
         const u = M(c);
-        o.push(u), r.push(ne(I(u)).slice(2));
+        o.push(u), r.push(oe(B(u)).slice(2));
       } finally {
         c.fill(0);
       }
@@ -481,33 +481,33 @@ async function Qe(n, t) {
   }
   return { perVaultWotsKeys: e, wotsPkHashes: s, htlcSecretHexes: o, hashlocks: r };
 }
-const Ye = /^0x[0-9a-f]+$/i, Je = /^[0-9a-f]+$/i, tn = /^[A-Za-z0-9+/]+={0,2}$/;
-function $(n) {
+const tn = /^0x[0-9a-f]+$/i, en = /^[0-9a-f]+$/i, nn = /^[A-Za-z0-9+/]+={0,2}$/;
+function H(n) {
   if (typeof n != "string" || n.length === 0)
     throw new Error("BTC wallet returned empty public key");
-  return Jt(n).toLowerCase();
+  return ne(n).toLowerCase();
 }
-function en(n) {
+function sn(n) {
   if (typeof n != "string" || n.length === 0)
     throw new Error("BTC wallet returned empty BIP-322 signature");
   if (n.startsWith("0x") || n.startsWith("0X")) {
-    if (!Ye.test(n) || n.length < 4 || n.length % 2 !== 0)
+    if (!tn.test(n) || n.length < 4 || n.length % 2 !== 0)
       throw new Error("BTC wallet returned malformed hex BIP-322 signature");
     return n.toLowerCase();
   }
-  if (Je.test(n)) {
+  if (en.test(n)) {
     if (n.length % 2 !== 0)
       throw new Error("BTC wallet returned malformed hex BIP-322 signature");
     return `0x${n.toLowerCase()}`;
   }
-  if (!tn.test(n) || n.length % 4 !== 0)
+  if (!nn.test(n) || n.length % 4 !== 0)
     throw new Error("BTC wallet returned malformed base64 BIP-322 signature");
-  const t = q.from(n, "base64");
+  const t = Q.from(n, "base64");
   if (t.length === 0 || t.toString("base64") !== n)
     throw new Error("BTC wallet returned malformed base64 BIP-322 signature");
   return `0x${t.toString("hex")}`;
 }
-async function nn(n, t, e) {
+async function on(n, t, e) {
   if (typeof n.signPsbts == "function") {
     const o = await n.signPsbts(t, e);
     if (o.length !== t.length)
@@ -523,25 +523,25 @@ async function nn(n, t, e) {
   }
   return s;
 }
-const sn = 0, L = "00".repeat(32);
-function on(n, t, e, s) {
+const rn = 0, W = "00".repeat(32);
+function an(n, t, e, s) {
   const o = e == null ? void 0 : e[`${n}:${t}`];
   return o ? Promise.resolve({
     txid: n,
     vout: t,
     value: o.value,
     scriptPubKey: o.scriptPubKey
-  }) : ce(n, t, s);
+  }) : ue(n, t, s);
 }
-const Et = 12e4;
-class kn {
+const vt = 12e4;
+class Tn {
   /**
    * Creates a new PeginManager instance.
    *
    * @param config - Manager configuration including wallets and contract addresses
    */
   constructor(t) {
-    y(this, "config");
+    k(this, "config");
     this.config = t;
   }
   /**
@@ -556,27 +556,36 @@ class kn {
   async preparePegin(t) {
     if (t.amounts.length === 0)
       throw new Error("amounts must contain at least one entry");
-    const e = await this.config.btcWallet.getPublicKeyHex(), s = $(e), o = await this.prepareSizing(s, t), r = o.selectedUTXOs.map(
+    const e = await this.config.btcWallet.getPublicKeyHex(), s = H(e);
+    if (!ft(
+      t.changeAddress,
+      e,
+      this.config.btcNetwork
+    ))
+      throw new Error(
+        `Pre-PegIn changeAddress "${t.changeAddress}" is not derived from the connected wallet's public key. Refusing to build a tx that would send change to an address the signing key doesn't control.`
+      );
+    const o = await this.prepareSizing(s, t), r = o.selectedUTXOs.map(
       (g) => ({
-        txid: Z(g.txid),
+        txid: Y(g.txid),
         vout: g.vout
       })
-    ), i = await Te(this.config.btcWallet, {
-      depositorBtcPubkey: Z(s),
+    ), i = await ve(this.config.btcWallet, {
+      depositorBtcPubkey: Y(s),
       fundingOutpoints: r
     });
     let a, c;
     try {
-      const g = await jt(i);
+      const g = await Qt(i);
       try {
-        a = M(g), c = M(tt(g));
+        a = M(g), c = M(nt(g));
       } finally {
         g.fill(0);
       }
     } catch (g) {
       throw i.fill(0), g;
     }
-    const u = await Qe(i, t.amounts.length), { perVaultWotsKeys: l, wotsPkHashes: m, htlcSecretHexes: w, hashlocks: P } = u, h = await this.preparePeginCommit({
+    const u = await Je(i, t.amounts.length), { perVaultWotsKeys: l, wotsPkHashes: m, htlcSecretHexes: w, hashlocks: P } = u, d = await this.preparePeginCommit({
       depositorBtcPubkeyRaw: e,
       depositorBtcPubkey: s,
       hashlocks: P,
@@ -584,18 +593,18 @@ class kn {
       sizing: o,
       params: t
     });
-    for (let g = 0; g < h.perVault.length; g++)
-      if (h.perVault[g].htlcVout !== g)
+    for (let g = 0; g < d.perVault.length; g++)
+      if (d.perVault[g].htlcVout !== g)
         throw new Error(
-          `Internal invariant violation: htlcVout/index mismatch at vault ${g} (expected ${g}, got ${h.perVault[g].htlcVout})`
+          `Internal invariant violation: htlcVout/index mismatch at vault ${g} (expected ${g}, got ${d.perVault[g].htlcVout})`
         );
-    return we(
-      h.fundedPrePeginTxHex,
+    return be(
+      d.fundedPrePeginTxHex,
       t.amounts.length,
       c
     ), {
       transaction: {
-        ...h,
+        ...d,
         selectedUTXOs: o.selectedUTXOs,
         fee: o.fee,
         changeAmount: o.changeAmount
@@ -627,8 +636,8 @@ class kn {
    */
   async prepareSizing(t, e) {
     const s = e.amounts.map(
-      () => L
-    ), o = e.vaultKeeperBtcPubkeys.length, r = await ht({
+      () => W
+    ), o = e.vaultKeeperBtcPubkeys.length, r = await gt({
       depositorPubkey: t,
       vaultProviderPubkey: T(e.vaultProviderBtcPubkey),
       vaultKeeperPubkeys: e.vaultKeeperBtcPubkeys.map(T),
@@ -641,14 +650,14 @@ class kn {
       councilQuorum: e.councilQuorum,
       councilSize: e.councilSize,
       network: this.config.btcNetwork,
-      authAnchorHash: L
-    }), i = se(
+      authAnchorHash: W
+    }), i = re(
       [...e.availableUTXOs],
       r.totalOutputValue,
       e.mempoolFeeRate,
-      re(
+      ae(
         r.htlcValues.length,
-        L
+        W
       )
     );
     return {
@@ -666,11 +675,11 @@ class kn {
       authAnchorHash: r,
       sizing: i,
       params: a
-    } = t, c = L.toLowerCase();
-    for (let p = 0; p < o.length; p++)
-      if (o[p].toLowerCase() === c)
+    } = t, c = W.toLowerCase();
+    for (let h = 0; h < o.length; h++)
+      if (o[h].toLowerCase() === c)
         throw new Error(
-          `preparePeginCommit refusing to build with sizing-pass placeholder hashlock at vault ${p} — internal substitution bug`
+          `preparePeginCommit refusing to build with sizing-pass placeholder hashlock at vault ${h} — internal substitution bug`
         );
     if (r.toLowerCase() === c)
       throw new Error(
@@ -690,56 +699,56 @@ class kn {
       councilSize: a.councilSize,
       network: this.config.btcNetwork,
       authAnchorHash: r
-    }, h = await ht(P), g = dt(this.config.btcNetwork), E = ie({
-      unfundedTxHex: h.psbtHex,
+    }, d = await gt(P), g = pt(this.config.btcNetwork), E = ce({
+      unfundedTxHex: d.psbtHex,
       selectedUTXOs: i.selectedUTXOs,
       changeAddress: a.changeAddress,
       changeAmount: i.changeAmount,
       network: g
-    }), S = T(K(E)), f = [], x = [], d = [];
-    for (let p = 0; p < o.length; p++) {
-      const v = await qt({
+    }), I = T(z(E)), f = [], y = [], x = [];
+    for (let h = 0; h < o.length; h++) {
+      const S = await Yt({
         prePeginParams: P,
         timelockPegin: a.timelockPegin,
         fundedPrePeginTxHex: E,
-        htlcVout: p
-      }), B = await Zt({
-        peginTxHex: v.txHex,
+        htlcVout: h
+      }), v = await Jt({
+        peginTxHex: S.txHex,
         fundedPrePeginTxHex: E,
         depositorPubkey: s,
         vaultProviderPubkey: u,
         vaultKeeperPubkeys: l,
         universalChallengerPubkeys: m,
-        hashlock: o[p],
+        hashlock: o[h],
         timelockRefund: a.timelockRefund,
         network: this.config.btcNetwork
       });
-      f.push(v), x.push(B.psbtHex), d.push(
-        ee(e, 1)
+      f.push(S), y.push(v.psbtHex), x.push(
+        se(e, 1)
       );
     }
-    const k = await nn(
+    const p = await on(
       this.config.btcWallet,
-      x,
-      d
+      y,
+      x
     ), b = [];
-    for (let p = 0; p < k.length; p++) {
-      const v = Qt(
-        k[p],
+    for (let h = 0; h < p.length; h++) {
+      const S = te(
+        p[h],
         s
-      ), B = Yt(k[p]);
+      ), v = ee(p[h]);
       b.push({
-        htlcVout: p,
-        htlcValue: h.htlcValues[p],
-        peginTxHex: B,
-        peginTxid: f[p].txid,
-        peginInputSignature: v,
-        vaultScriptPubKey: f[p].vaultScriptPubKey
+        htlcVout: h,
+        htlcValue: d.htlcValues[h],
+        peginTxHex: v,
+        peginTxid: f[h].txid,
+        peginInputSignature: S,
+        vaultScriptPubKey: f[h].vaultScriptPubKey
       });
     }
     return {
       fundedPrePeginTxHex: E,
-      prePeginTxid: S,
+      prePeginTxid: I,
       perVault: b
     };
   }
@@ -759,24 +768,24 @@ class kn {
    * @throws Error if signing or broadcasting fails
    */
   async signAndBroadcast(t) {
-    const { fundedPrePeginTxHex: e, depositorBtcPubkey: s } = t, o = e.startsWith("0x") ? e.slice(2) : e, r = Kt.fromHex(o);
+    const { fundedPrePeginTxHex: e, depositorBtcPubkey: s } = t, o = e.startsWith("0x") ? e.slice(2) : e, r = Gt.fromHex(o);
     if (r.ins.length === 0)
       throw new Error("Transaction has no inputs");
-    const i = new at();
+    const i = new lt();
     i.setVersion(r.version), i.setLocktime(r.locktime);
-    const a = q.from(
-      $(s),
+    const a = Q.from(
+      H(s),
       "hex"
     ), c = this.config.mempoolApiUrl, u = r.ins.map((f) => {
-      const x = q.from(f.hash).reverse().toString("hex"), d = f.index;
-      return on(x, d, t.localPrevouts, c).then(
-        (k) => ({ input: f, utxoData: k, txid: x, vout: d })
+      const y = Q.from(f.hash).reverse().toString("hex"), x = f.index;
+      return an(y, x, t.localPrevouts, c).then(
+        (p) => ({ input: f, utxoData: p, txid: y, vout: x })
       );
     }), l = await Promise.all(u), m = l.reduce(
-      (f, x) => f + BigInt(x.utxoData.value),
+      (f, y) => f + BigInt(y.utxoData.value),
       0n
     ), w = r.outs.reduce(
-      (f, x) => f + BigInt(x.value),
+      (f, y) => f + BigInt(y.value),
       0n
     );
     if (m < w)
@@ -784,15 +793,15 @@ class kn {
         `UTXO value mismatch: total input value (${m} sat) is less than total output value (${w} sat). This may indicate the mempool API returned manipulated UTXO data.`
       );
     const P = m - w;
-    if (P > ft)
+    if (P > mt)
       throw new Error(
-        `Implied transaction fee (${P} sat) exceeds maximum reasonable fee (${ft} sat). This may indicate manipulated UTXO data.`
+        `Implied transaction fee (${P} sat) exceeds maximum reasonable fee (${mt} sat). This may indicate manipulated UTXO data.`
       );
-    for (const { input: f, utxoData: x, txid: d, vout: k } of l) {
-      const b = oe(
+    for (const { input: f, utxoData: y, txid: x, vout: p } of l) {
+      const b = ie(
         {
-          value: x.value,
-          scriptPubKey: x.scriptPubKey
+          value: y.value,
+          scriptPubKey: y.scriptPubKey
         },
         a
       );
@@ -808,19 +817,19 @@ class kn {
         script: f.script,
         value: f.value
       });
-    const h = await this.config.btcWallet.signPsbt(i.toHex()), g = at.fromHex(h);
+    const d = await this.config.btcWallet.signPsbt(i.toHex()), g = lt.fromHex(d);
     try {
       g.finalizeAllInputs();
     } catch (f) {
       if (!g.data.inputs.every(
-        (d) => d.finalScriptWitness || d.finalScriptSig
+        (x) => x.finalScriptWitness || x.finalScriptSig
       ))
         throw new Error(
           `PSBT finalization failed and wallet did not auto-finalize: ${f}`
         );
     }
     const E = g.extractTransaction().toHex();
-    return await ae(E, c);
+    return await le(E, c);
   }
   /**
    * Registers a peg-in on Ethereum by calling the BTCVaultRegistry contract.
@@ -860,90 +869,90 @@ class kn {
     if (!this.config.ethWallet.account)
       throw new Error("Ethereum wallet account not found");
     const l = this.config.ethWallet.account.address;
-    if (!ct(u.depositorEthAddress, l))
+    if (!ut(u.depositorEthAddress, l))
       throw new Error(
         `Proof of possession was signed for ${u.depositorEthAddress} but the Ethereum wallet is currently connected to ${l}. Reconnect the original account or call signProofOfPossession() again.`
       );
-    await this.assertPopMatchesBtcWallet(u);
-    const m = u.btcPopSignature, w = I(u.depositorBtcPubkey), P = I(e), h = I(s), g = await this.resolvePayoutScriptPubKey(
-      a
-    ), E = K(h), S = await ut(
-      T(E),
+    const m = await this.assertPopMatchesBtcWallet(u), w = u.btcPopSignature, P = B(u.depositorBtcPubkey), d = B(e), g = B(s), E = a ?? await this.config.btcWallet.getAddress(), I = this.resolvePayoutScriptPubKey(
+      m,
+      E
+    ), f = z(g), y = await dt(
+      T(f),
       T(l)
-    ), f = I(S);
-    if (await this.checkVaultExists(f))
+    ), x = B(y);
+    if (await this.checkVaultExists(x))
       throw new Error(
-        `Vault already exists (ID: ${f}, peginTxHash: ${E}). Vault IDs are derived from the pegin transaction hash and depositor address. To create a new vault, use different UTXOs or a different amount to generate a unique transaction.`
+        `Vault already exists (ID: ${x}, peginTxHash: ${f}). Vault IDs are derived from the pegin transaction hash and depositor address. To create a new vault, use different UTXOs or a different amount to generate a unique transaction.`
       );
-    const d = this.config.publicClient;
-    let k;
+    const b = this.config.publicClient;
+    let h;
     try {
-      k = await d.readContract({
+      h = await b.readContract({
         address: this.config.vaultContracts.btcVaultRegistry,
-        abi: R,
+        abi: O,
         functionName: "getPegInFee",
         args: [o]
       });
-    } catch (O) {
+    } catch (R) {
       throw new Error(
         "Failed to query pegin fee from the contract. Please check your network connection and that the contract address is correct.",
-        { cause: O }
+        { cause: R }
       );
     }
-    const b = lt({
-      abi: R,
+    const S = ht({
+      abi: O,
       functionName: "submitPeginRequest",
       args: [
         l,
-        w,
-        m,
         P,
-        h,
+        w,
+        d,
+        g,
         o,
         r,
         i,
-        g,
+        I,
         c
       ]
     });
-    let p;
+    let v;
     try {
-      p = await d.estimateGas({
+      v = await b.estimateGas({
         to: this.config.vaultContracts.btcVaultRegistry,
-        data: b,
-        value: k,
+        data: S,
+        value: h,
         account: this.config.ethWallet.account.address
       });
-    } catch (O) {
-      A(O);
+    } catch (R) {
+      A(R);
     }
-    let v;
+    let K;
     try {
-      v = await this.config.ethWallet.sendTransaction({
+      K = await this.config.ethWallet.sendTransaction({
         to: this.config.vaultContracts.btcVaultRegistry,
-        data: b,
-        value: k,
+        data: S,
+        value: h,
         account: this.config.ethWallet.account,
         chain: this.config.ethChain,
-        gas: p
+        gas: v
       });
-    } catch (O) {
-      A(O);
+    } catch (R) {
+      A(R);
     }
-    const B = await gt({
-      publicClient: d,
+    const D = await wt({
+      publicClient: b,
       walletAddress: this.config.ethWallet.account.address,
-      hash: v,
-      timeout: Et
+      hash: K,
+      timeout: vt
     });
-    return B.status === "reverted" && A(
+    return D.status === "reverted" && A(
       new Error(
-        `Transaction reverted. Hash: ${B.transactionHash}. Check the transaction on block explorer for details.`
+        `Transaction reverted. Hash: ${D.transactionHash}. Check the transaction on block explorer for details.`
       )
     ), {
-      ethTxHash: B.transactionHash,
-      vaultId: f,
-      peginTxHash: E
+      ethTxHash: D.transactionHash,
+      vaultId: x,
+      peginTxHash: f
     };
   }
   /**
@@ -963,93 +972,92 @@ class kn {
     if (!this.config.ethWallet.account)
       throw new Error("Ethereum wallet account not found");
     const i = this.config.ethWallet.account.address;
-    if (!ct(r.depositorEthAddress, i))
+    if (!ut(r.depositorEthAddress, i))
       throw new Error(
         `Proof of possession was signed for ${r.depositorEthAddress} but the Ethereum wallet is currently connected to ${i}. Reconnect the original account or call signProofOfPossession() again.`
       );
-    await this.assertPopMatchesBtcWallet(r);
-    const a = r.btcPopSignature, c = [];
-    for (const d of o)
-      c.push(
-        await this.resolvePayoutScriptPubKey(d.depositorPayoutBtcAddress)
-      );
-    const u = [];
-    for (const d of o) {
-      const k = I(
-        d.depositorSignedPeginTx
-      ), b = K(k), p = await ut(
-        T(b),
+    const a = await this.assertPopMatchesBtcWallet(r), c = r.btcPopSignature, u = o.map(
+      (p) => this.resolvePayoutScriptPubKey(
+        a,
+        p.depositorPayoutBtcAddress
+      )
+    ), l = [];
+    for (const p of o) {
+      const b = B(
+        p.depositorSignedPeginTx
+      ), h = z(b), S = await dt(
+        T(h),
         T(i)
-      ), v = I(p);
+      ), v = B(S);
       if (await this.checkVaultExists(v))
         throw new Error(
-          `Vault already exists (ID: ${v}, peginTxHash: ${b}). To create a new vault, use different UTXOs or a different amount.`
+          `Vault already exists (ID: ${v}, peginTxHash: ${h}). To create a new vault, use different UTXOs or a different amount.`
         );
-      u.push({ vaultId: v, peginTxHash: b });
+      l.push({ vaultId: v, peginTxHash: h });
     }
-    const l = this.config.publicClient;
-    let m;
+    const m = this.config.publicClient;
+    let w;
     try {
-      m = await l.readContract({
+      w = await m.readContract({
         address: this.config.vaultContracts.btcVaultRegistry,
-        abi: R,
+        abi: O,
         functionName: "getPegInFee",
         args: [e]
       });
-    } catch (d) {
+    } catch (p) {
       throw new Error(
         "Failed to query pegin fee from the contract. Please check your network connection and that the contract address is correct.",
-        { cause: d }
+        { cause: p }
       );
     }
-    const w = m * BigInt(o.length), P = I(
+    const P = w * BigInt(o.length), d = B(
       r.depositorBtcPubkey
-    ), h = I(s), g = o.map((d, k) => ({
-      depositorBtcPubKey: P,
-      btcPopSignature: a,
-      unsignedPrePeginTx: h,
-      depositorSignedPeginTx: I(
-        d.depositorSignedPeginTx
+    ), g = B(s), E = o.map((p, b) => ({
+      depositorBtcPubKey: d,
+      btcPopSignature: c,
+      unsignedPrePeginTx: g,
+      depositorSignedPeginTx: B(
+        p.depositorSignedPeginTx
       ),
-      hashlock: d.hashlock,
-      htlcVout: d.htlcVout,
-      referralCode: sn,
-      depositorPayoutBtcAddress: c[k],
-      depositorWotsPkHash: d.depositorWotsPkHash
-    })), E = lt({
-      abi: R,
+      hashlock: p.hashlock,
+      htlcVout: p.htlcVout,
+      referralCode: rn,
+      depositorPayoutBtcAddress: u[b],
+      depositorWotsPkHash: p.depositorWotsPkHash
+    })), I = ht({
+      abi: O,
       functionName: "submitPeginRequestBatch",
-      args: [i, e, g]
+      args: [i, e, E]
     });
-    let S;
+    let f;
     try {
-      S = await l.estimateGas({
+      f = await m.estimateGas({
         to: this.config.vaultContracts.btcVaultRegistry,
-        data: E,
-        value: w,
+        data: I,
+        value: P,
         account: this.config.ethWallet.account.address
       });
-    } catch (d) {
-      A(d);
+    } catch (p) {
+      A(p);
     }
-    let f;
+    let y;
     try {
-      f = await this.config.ethWallet.sendTransaction({
+      y = await this.config.ethWallet.sendTransaction({
         to: this.config.vaultContracts.btcVaultRegistry,
-        data: E,
-        value: w,
+        data: I,
+        value: P,
         account: this.config.ethWallet.account,
         chain: this.config.ethChain,
-        gas: S
+        gas: f
       });
-    } catch (d) {
-      A(d);
+    } catch (p) {
+      A(p);
     }
-    const x = await gt({
-      publicClient: l,
+    const x = await wt({
+      publicClient: m,
       walletAddress: this.config.ethWallet.account.address,
-      hash: f,
-      timeout: Et
+      hash: y,
+      timeout: vt
     });
     return x.status === "reverted" && A(
       new Error(
@@ -1057,7 +1065,7 @@ class kn {
       )
     ), {
       ethTxHash: x.transactionHash,
-      vaults: u
+      vaults: l
     };
   }
   /**
@@ -1076,37 +1084,40 @@ class kn {
   async checkVaultExists(t) {
     return (await this.config.publicClient.readContract({
       address: this.config.vaultContracts.btcVaultRegistry,
-      abi: R,
+      abi: O,
       functionName: "getBtcVaultBasicInfo",
       args: [t]
-    })).depositor !== Dt;
+    })).depositor !== jt;
   }
   /**
-   * Resolve the BTC payout address to a scriptPubKey hex for the contract.
+   * Resolve the BTC scriptPubKey to register as the depositor's payout sink.
+   *
+   * `address` is validated against the verified depositor pubkey, which MUST
+   * be the *raw* (parity-preserving) form returned by the wallet adapter —
+   * the caller should source it from `assertPopMatchesBtcWallet`'s return
+   * value, not from `popSignature.depositorBtcPubkey` (x-only, parity
+   * stripped). P2WPKH addresses are derived from a parity-bearing compressed
+   * key; passing the x-only form here would let `isAddressFromPublicKey`
+   * try both `02|x` and `03|x` and accept an opposite-parity P2WPKH
+   * address the wallet does not actually control.
    *
-   * If a payout address is provided, converts it directly.
-   * If omitted, uses the wallet's address and validates it against the
-   * wallet's public key to guard against a compromised wallet provider.
+   * The helper does not call into the wallet so the batch path can resolve
+   * many requests without any extra adapter reads. Threat closed: a
+   * state-race or stale FE state that lets a non-wallet address reach the
+   * on-chain payout-script registration.
    */
-  async resolvePayoutScriptPubKey(t) {
-    let e;
-    if (t)
-      e = t;
-    else {
-      e = await this.config.btcWallet.getAddress();
-      const o = await this.config.btcWallet.getPublicKeyHex();
-      if (!te(
-        e,
-        o,
-        this.config.btcNetwork
-      ))
-        throw new Error(
-          "The BTC address from your wallet does not match the wallet's public key. Please ensure your wallet is using a supported address type (Taproot or Native SegWit)."
-        );
-    }
-    const s = dt(this.config.btcNetwork);
+  resolvePayoutScriptPubKey(t, e) {
+    if (!ft(
+      e,
+      t,
+      this.config.btcNetwork
+    ))
+      throw new Error(
+        `BTC payout address "${e}" is not derived from the connected wallet's public key. The payout sink must be controlled by the same key that signs the pegin; refusing to register a mismatched address.`
+      );
+    const s = pt(this.config.btcNetwork);
     try {
-      return `0x${_t.address.toOutputScript(e, s).toString("hex")}`;
+      return `0x${It.address.toOutputScript(e, s).toString("hex")}`;
     } catch {
       throw new Error(
         `Invalid BTC payout address: "${e}". Please provide a valid Bitcoin address for the ${this.config.btcNetwork} network.`
@@ -1122,26 +1133,33 @@ class kn {
   async signProofOfPossession() {
     if (!this.config.ethWallet.account)
       throw new Error("Ethereum wallet account not found");
-    const t = this.config.ethWallet.account.address, e = $(
+    const t = this.config.ethWallet.account.address, e = H(
       await this.config.btcWallet.getPublicKeyHex()
     ), s = this.config.vaultContracts.btcVaultRegistry, o = `${t.toLowerCase()}:${this.config.ethChain.id}:pegin:${s.toLowerCase()}`, r = await this.config.btcWallet.signMessage(
       o,
       "bip322-simple"
     );
     return {
-      btcPopSignature: en(r),
+      btcPopSignature: sn(r),
       depositorEthAddress: t,
       depositorBtcPubkey: e
     };
   }
+  /**
+   * Confirm the connected BTC wallet still matches the PoP it produced, and
+   * return the wallet's *raw* pubkey hex (parity-preserving form, as the
+   * wallet adapter returns it). The raw form is required by callers that
+   * validate Native SegWit / P2WPKH addresses, since P2WPKH is derived from
+   * a parity-bearing compressed key — an x-only form would let an attacker
+   * substitute the opposite-parity P2WPKH address.
+   */
   async assertPopMatchesBtcWallet(t) {
-    const e = $(
-      await this.config.btcWallet.getPublicKeyHex()
-    ), s = $(t.depositorBtcPubkey);
-    if (e !== s)
+    const e = await this.config.btcWallet.getPublicKeyHex(), s = H(e), o = H(t.depositorBtcPubkey);
+    if (s !== o)
       throw new Error(
-        `Proof of possession was signed with BTC pubkey ${s} but the BTC wallet is currently connected to ${e}. Reconnect the original wallet or call signProofOfPossession() again.`
+        `Proof of possession was signed with BTC pubkey ${o} but the BTC wallet is currently connected to ${s}. Reconnect the original wallet or call signProofOfPossession() again.`
       );
+    return e;
   }
   /**
    * Gets the configured Bitcoin network.
@@ -1161,12 +1179,12 @@ class kn {
   }
 }
 export {
-  kn as P,
-  ke as V,
-  ye as a,
-  xe as b,
-  Ze as c,
-  qe as d,
-  Te as e
+  Tn as P,
+  Te as V,
+  Ee as a,
+  ke as b,
+  Ye as c,
+  Qe as d,
+  ve as e
 };
-//# sourceMappingURL=PeginManager-DF1oinIQ.js.map
+//# sourceMappingURL=PeginManager-CB-dVkT2.js.map