@babylonlabs-io/ts-sdk 0.50.1 → 0.51.1

package/dist/{primeVpAuth-BTKhMdh1.js → primeVpAuth-DxMuWQCi.js}

@@ -1,15 +1,15 @@
-var Ce = Object.defineProperty;
-var $e = (r, e, t) => e in r ? Ce(r, e, { enumerable: !0, configurable: !0, writable: !0, value: t }) : r[e] = t;
-var f = (r, e, t) => $e(r, typeof e != "symbol" ? e + "" : e, t);
+var Se = Object.defineProperty;
+var Te = (r, e, t) => e in r ? Se(r, e, { enumerable: !0, configurable: !0, writable: !0, value: t }) : r[e] = t;
+var f = (r, e, t) => Te(r, typeof e != "symbol" ? e + "" : e, t);
 import { B as Q } from "./BTCVaultRegistry.abi-Chs4AFBj.js";
 import { P as x, A as L } from "./ApplicationRegistry.abi-Dn2qk6JG.js";
-import { k as Ie, v as U, l as Ve, j as Re } from "./mempoolApi-Dc1KSVNI.js";
-import { D as Oe, J as _e, e as Be } from "./types-CQDRQvV-.js";
-import { X as R, C as D, s as V, S as Ne, h as Ge, p as me } from "./bitcoin-B5aNKtsk.js";
+import { k as Ce, v as U, l as $e, j as Ie } from "./mempoolApi-Dc1KSVNI.js";
+import { D as Ve, J as ge, e as Re } from "./types-CQDRQvV-.js";
+import { X as R, C as G, s as V, S as Oe, h as Be, p as fe } from "./bitcoin-B5aNKtsk.js";
 import { C as ee } from "./constants-Cd_fN8VT.js";
 import { H as S } from "./validation-CxqROCno.js";
 import * as H from "@bitcoin-js/tiny-secp256k1-asmjs";
-import { payments as De, Transaction as X } from "bitcoinjs-lib";
+import { payments as Ne, Transaction as X } from "bitcoinjs-lib";
 import { Buffer as I } from "buffer";
 import { s as q } from "./sha2-BYVxyZzX.js";
 async function or(r, e) {
@@ -78,7 +78,7 @@ class ar {
       abi: x,
       functionName: "getTBVProtocolParams"
     }), t = re(e);
-    return Ie(t), t;
+    return Ce(t), t;
   }
   async getLatestOffchainParams() {
     const e = await this.publicClient.readContract({
@@ -103,7 +103,7 @@ class ar {
       abi: x,
       functionName: "latestOffchainParamsVersion"
     }), t = Number(e);
-    return Ve(t), t;
+    return $e(t), t;
   }
   async getTimelockPeginByVersion(e) {
     const t = await this.getOffchainParamsByVersion(e);
@@ -149,7 +149,7 @@ class ar {
       offchainParams: n,
       offchainParamsVersion: i
     };
-    return Re(s), s;
+    return Ie(s), s;
   }
   /**
    * Fetch every historical offchain params version in a single multicall.
@@ -254,16 +254,16 @@ class lr {
     });
   }
 }
-var Me = /* @__PURE__ */ ((r) => (r[r.PENDING = 0] = "PENDING", r[r.VERIFIED = 1] = "VERIFIED", r[r.ACTIVE = 2] = "ACTIVE", r[r.REDEEMED = 3] = "REDEEMED", r[r.EXPIRED = 4] = "EXPIRED", r))(Me || {});
-const se = new Set(Object.values(Oe)), je = 200;
+var De = /* @__PURE__ */ ((r) => (r[r.PENDING = 0] = "PENDING", r[r.VERIFIED = 1] = "VERIFIED", r[r.ACTIVE = 2] = "ACTIVE", r[r.REDEEMED = 3] = "REDEEMED", r[r.EXPIRED = 4] = "EXPIRED", r))(De || {});
+const se = new Set(Object.values(Ve)), Ge = 200;
 function p(r) {
   var e;
-  return ((e = JSON.stringify(r)) == null ? void 0 : e.slice(0, je)) ?? "undefined";
+  return ((e = JSON.stringify(r)) == null ? void 0 : e.slice(0, Ge)) ?? "undefined";
 }
-const He = "The vault provider returned an unexpected response. Please try again or contact support.";
+const Me = "The vault provider returned an unexpected response. Please try again or contact support.";
 class a extends Error {
   constructor(t) {
-    super(He);
+    super(Me);
     f(this, "detail");
     this.name = "VpResponseValidationError", this.detail = t;
   }
@@ -272,28 +272,28 @@ const O = 64;
 function C(r) {
   return typeof r == "string" && r.length > 0 && S.test(r);
 }
-function ye(r) {
+function _e(r) {
   return typeof r == "string" && r.length > 0;
 }
-function be(r, e) {
+function me(r, e) {
   if (!C(r))
     throw new a(
       `VP response validation failed: "${e}" must be a non-empty hex string, got ${p(r)}`
     );
 }
 function b(r, e) {
-  if (!ye(r))
+  if (!_e(r))
     throw new a(
       `VP response validation failed: "${e}" must be a non-empty string, got ${p(r)}`
     );
 }
 function Z(r, e) {
-  if (!C(r) || r.length !== R && r.length !== D)
+  if (!C(r) || r.length !== R && r.length !== G)
     throw new a(
-      `VP response validation failed: "${e}" must be a ${R} or ${D}-char hex string (BTC pubkey), got ${p(r)}`
+      `VP response validation failed: "${e}" must be a ${R} or ${G}-char hex string (BTC pubkey), got ${p(r)}`
     );
 }
-function Le(r) {
+function je(r) {
   const e = r.presigning;
   if (e == null) return;
   if (typeof e != "object" || Array.isArray(e))
@@ -314,7 +314,7 @@ function Le(r) {
       `VP response validation failed: "progress.presigning.vk_challenger_presigning_total" must be a number if present, got ${p(t.vk_challenger_presigning_total)}`
     );
 }
-function we(r) {
+function ye(r) {
   if (r === null || typeof r != "object")
     throw new a(
       "VP response validation failed: getPeginStatus response is not an object"
@@ -336,7 +336,7 @@ function we(r) {
     throw new a(
       'VP response validation failed: "progress" must be an object'
     );
-  if (Le(e.progress), typeof e.health_info != "string")
+  if (je(e.progress), typeof e.health_info != "string")
     throw new a(
       'VP response validation failed: "health_info" must be a string'
     );
@@ -345,7 +345,7 @@ function we(r) {
       `VP response validation failed: "last_error" must be a string if present, got ${p(e.last_error)}`
     );
 }
-function Ue(r) {
+function He(r) {
   if (r === null || typeof r != "object")
     throw new a(
       "VP response validation failed: requestDepositorPresignTransactions response is not an object"
@@ -356,31 +356,31 @@ function Ue(r) {
       'VP response validation failed: "txs" must be an array'
     );
   for (let t = 0; t < e.txs.length; t++)
-    Xe(e.txs[t], `txs[${t}]`);
+    Le(e.txs[t], `txs[${t}]`);
   if (e.depositor_graph === null || typeof e.depositor_graph != "object")
     throw new a(
       'VP response validation failed: "depositor_graph" must be an object'
     );
-  Qe(
+  ze(
     e.depositor_graph
   );
 }
-function v(r, e) {
+function A(r, e) {
   if (r === null || typeof r != "object")
     throw new a(
       `VP response validation failed: "${e}" must be an object`
     );
-  be(r.tx_hex, `${e}.tx_hex`);
+  me(r.tx_hex, `${e}.tx_hex`);
 }
-function Xe(r, e) {
+function Le(r, e) {
   if (r === null || typeof r != "object")
     throw new a(
       `VP response validation failed: "${e}" must be an object`
     );
   const t = r;
-  Z(t.claimer_pubkey, `${e}.claimer_pubkey`), v(t.claim_tx, `${e}.claim_tx`), v(t.assert_tx, `${e}.assert_tx`), v(t.payout_tx, `${e}.payout_tx`), b(t.payout_psbt, `${e}.payout_psbt`);
+  Z(t.claimer_pubkey, `${e}.claimer_pubkey`), A(t.claim_tx, `${e}.claim_tx`), A(t.assert_tx, `${e}.assert_tx`), A(t.payout_tx, `${e}.payout_tx`), b(t.payout_psbt, `${e}.payout_psbt`);
 }
-function Fe(r, e) {
+function Ue(r, e) {
   if (r === null || typeof r != "object")
     throw new a(
       `VP response validation failed: "${e}" must be an object`
@@ -388,19 +388,19 @@ function Fe(r, e) {
   const t = r;
   b(t.wots_pks_json, `${e}.wots_pks_json`), b(t.gc_wots_keys_json, `${e}.gc_wots_keys_json`);
 }
-function Ke(r, e) {
+function Xe(r, e) {
   if (r === null || typeof r != "object")
     throw new a(
       `VP response validation failed: "${e}" must be an object`
     );
   const t = r;
-  if (Z(t.challenger_pubkey, `${e}.challenger_pubkey`), v(
+  if (Z(t.challenger_pubkey, `${e}.challenger_pubkey`), A(
     t.challenge_assert_x_tx,
     `${e}.challenge_assert_x_tx`
-  ), v(
+  ), A(
     t.challenge_assert_y_tx,
     `${e}.challenge_assert_y_tx`
-  ), v(t.nopayout_tx, `${e}.nopayout_tx`), b(t.nopayout_psbt, `${e}.nopayout_psbt`), !Array.isArray(t.challenge_assert_connectors))
+  ), A(t.nopayout_tx, `${e}.nopayout_tx`), b(t.nopayout_psbt, `${e}.nopayout_psbt`), !Array.isArray(t.challenge_assert_connectors))
     throw new a(
       `VP response validation failed: "${e}.challenge_assert_connectors" must be an array`
     );
@@ -409,7 +409,7 @@ function Ke(r, e) {
       `VP response validation failed: "${e}.challenge_assert_connectors" must have exactly ${ee} entries, got ${t.challenge_assert_connectors.length}`
     );
   for (let n = 0; n < t.challenge_assert_connectors.length; n++)
-    Fe(
+    Ue(
       t.challenge_assert_connectors[n],
       `${e}.challenge_assert_connectors[${n}]`
     );
@@ -418,18 +418,18 @@ function Ke(r, e) {
       `VP response validation failed: "${e}.output_label_hashes" must be an array`
     );
   for (let n = 0; n < t.output_label_hashes.length; n++)
-    be(
+    me(
       t.output_label_hashes[n],
       `${e}.output_label_hashes[${n}]`
     );
 }
-function Je(r) {
+function Fe(r) {
   if (r === null || typeof r != "object")
     throw new a(
       "VP response validation failed: requestDepositorClaimerArtifacts response is not an object"
     );
   const e = r;
-  if (!ye(e.tx_graph_json))
+  if (!_e(e.tx_graph_json))
     throw new a(
       `VP response validation failed: "tx_graph_json" must be a non-empty string, got ${p(e.tx_graph_json)}`
     );
@@ -460,7 +460,7 @@ function Je(r) {
       );
   }
 }
-function qe(r) {
+function Ke(r) {
   if (r === null || typeof r != "object")
     throw new a(
       "VP response validation failed: pegout status payload is not an object"
@@ -479,16 +479,16 @@ function qe(r) {
       throw new a(
         `VP response validation failed: "claimer" must be an object or null, got ${p(e.claimer)}`
       );
-    We(e.claimer);
+    Je(e.claimer);
   }
   if (!Array.isArray(e.challengers))
     throw new a(
       `VP response validation failed: "challengers" must be an array, got ${p(e.challengers)}`
     );
   for (let t = 0; t < e.challengers.length; t++)
-    Ye(e.challengers[t], t);
+    qe(e.challengers[t], t);
 }
-function We(r) {
+function Je(r) {
   if (b(r.status, "claimer.status"), typeof r.failed != "boolean")
     throw new a(
       `VP response validation failed: "claimer.failed" must be a boolean, got ${p(r.failed)}`
@@ -502,7 +502,7 @@ function We(r) {
       `VP response validation failed: "claimer.updated_at" must be a number, got ${p(r.updated_at)}`
     );
 }
-function Ye(r, e) {
+function qe(r, e) {
   if (r === null || typeof r != "object")
     throw new a(
       `VP response validation failed: "challengers[${e}]" must be an object, got ${p(r)}`
@@ -529,17 +529,17 @@ function N(r, e) {
       `VP response validation failed: "${e}" must be a string or null, got ${p(r)}`
     );
 }
-function ze(r) {
-  xe(r, "batchGetPeginStatus", (e) => {
-    e.result !== null && we(e.result);
+function We(r) {
+  be(r, "batchGetPeginStatus", (e) => {
+    e.result !== null && ye(e.result);
   });
 }
-function Ze(r) {
-  xe(r, "batchGetPegoutStatus", (e) => {
-    e.result !== null && qe(e.result);
+function Ye(r) {
+  be(r, "batchGetPegoutStatus", (e) => {
+    e.result !== null && Ke(e.result);
   });
 }
-function xe(r, e, t) {
+function be(r, e, t) {
   if (r === null || typeof r != "object")
     throw new a(
       `VP response validation failed: ${e} response is not an object`
@@ -575,13 +575,13 @@ function xe(r, e, t) {
     t(o, i);
   }
 }
-function Qe(r) {
-  if (v(r.claim_tx, "depositor_graph.claim_tx"), v(r.assert_tx, "depositor_graph.assert_tx"), v(r.payout_tx, "depositor_graph.payout_tx"), b(r.payout_psbt, "depositor_graph.payout_psbt"), !Array.isArray(r.challenger_presign_data))
+function ze(r) {
+  if (A(r.claim_tx, "depositor_graph.claim_tx"), A(r.assert_tx, "depositor_graph.assert_tx"), A(r.payout_tx, "depositor_graph.payout_tx"), b(r.payout_psbt, "depositor_graph.payout_psbt"), !Array.isArray(r.challenger_presign_data))
     throw new a(
       'VP response validation failed: "depositor_graph.challenger_presign_data" must be an array'
     );
   for (let e = 0; e < r.challenger_presign_data.length; e++)
-    Ke(
+    Xe(
       r.challenger_presign_data[e],
       `depositor_graph.challenger_presign_data[${e}]`
     );
@@ -590,13 +590,13 @@ function Qe(r) {
       'VP response validation failed: "depositor_graph.offchain_params_version" must be a number'
     );
 }
-const et = 6e4;
-class tt {
+const Ze = 6e4;
+class Qe {
   constructor(e, t) {
     f(this, "client");
     const n = {
       baseUrl: e,
-      timeout: (t == null ? void 0 : t.timeout) ?? et,
+      timeout: (t == null ? void 0 : t.timeout) ?? Ze,
       retries: t == null ? void 0 : t.retries,
       retryDelay: t == null ? void 0 : t.retryDelay,
       retryableFor: t == null ? void 0 : t.retryableFor,
@@ -604,7 +604,7 @@ class tt {
       tokenProvider: t == null ? void 0 : t.tokenProvider,
       maxResponseBytes: t == null ? void 0 : t.maxResponseBytes
     };
-    this.client = new _e(n);
+    this.client = new ge(n);
   }
   /**
    * Request the payout/claim/assert transactions that the depositor
@@ -612,7 +612,7 @@ class tt {
    */
   async requestDepositorPresignTransactions(e, t) {
     const n = await this.client.call("vaultProvider_requestDepositorPresignTransactions", e, t);
-    return Ue(n), n;
+    return He(n), n;
   }
   /**
    * Submit the depositor's pre-signatures for the payout transactions
@@ -643,7 +643,7 @@ class tt {
    */
   async requestDepositorClaimerArtifacts(e, t) {
     const n = await this.client.call("vaultProvider_requestDepositorClaimerArtifacts", e, t);
-    return Je(n), n;
+    return Fe(n), n;
   }
   /** Get the current pegin status from the vault provider daemon. */
   async getPeginStatus(e, t) {
@@ -652,7 +652,7 @@ class tt {
       e,
       t
     );
-    return we(n), n;
+    return ye(n), n;
   }
   /**
    * Get pegin status for many txids in one round trip. Per-result envelope
@@ -661,7 +661,7 @@ class tt {
    */
   async batchGetPeginStatus(e, t) {
     const n = await this.client.call("vaultProvider_batchGetPeginStatus", e, t);
-    return ze(n), n;
+    return We(n), n;
   }
   /**
    * Get pegout status for many txids in one round trip. Same per-result
@@ -669,10 +669,10 @@ class tt {
    */
   async batchGetPegoutStatus(e, t) {
     const n = await this.client.call("vaultProvider_batchGetPegoutStatus", e, t);
-    return Ze(n), n;
+    return Ye(n), n;
   }
 }
-function rt(r, e) {
+function et(r, e) {
   const t = /* @__PURE__ */ new Set();
   for (const d of r)
     t.add(d.toLowerCase());
@@ -705,7 +705,7 @@ async function ur(r) {
     onDuplicateBatch: c,
     onWholeBatchError: d,
     onUnexpected: l,
-    batchSize: g = Be
+    batchSize: g = Re
   } = r;
   if (!Number.isInteger(g) || g <= 0)
     throw new Error(
@@ -717,26 +717,26 @@ async function ur(r) {
       const u = t(_).toLowerCase();
       k.set(u, _), T.push(u);
     }
-    let A;
+    let P;
     try {
       const _ = await n(T);
-      A = rt(T, _.results);
+      P = et(T, _.results);
     } catch (_) {
       d(w, _);
       continue;
     }
-    l && A.unexpected.length > 0 && l(A.unexpected);
-    const $ = new Set(A.duplicate);
+    l && P.unexpected.length > 0 && l(P.unexpected);
+    const $ = new Set(P.duplicate);
     for (const _ of $) {
       const u = k.get(_);
       u && o(u);
     }
     c && $.size > 0 && c($.size);
-    for (const _ of A.missing) {
+    for (const _ of P.missing) {
       const u = k.get(_);
       u && s(u);
     }
-    for (const [_, u] of A.byTxid) {
+    for (const [_, u] of P.byTxid) {
       if ($.has(_)) continue;
       const E = k.get(_);
       E && i(E, {
@@ -747,20 +747,20 @@ async function ur(r) {
     }
   }
 }
-const nt = "BIP0322-signed-message", st = "TapTweak", Ae = 32, it = 64;
-function Pe(r, e) {
+const tt = "BIP0322-signed-message", rt = "TapTweak", we = 32, nt = 64;
+function xe(r, e) {
   const t = new TextEncoder().encode(r), n = q(t), i = new Uint8Array(n.length * 2 + e.length);
   return i.set(n, 0), i.set(n, n.length), i.set(e, n.length * 2), q(i);
 }
-function ot(r) {
-  if (r.length !== Ae) return null;
-  const e = Pe(st, r), t = H.xOnlyPointAddTweak(r, e);
+function st(r) {
+  if (r.length !== we) return null;
+  const e = xe(rt, r), t = H.xOnlyPointAddTweak(r, e);
   return t ? t.xOnlyPubkey : null;
 }
-function at(r, e, t) {
-  if (e.length !== Ae || t.length !== it) return !1;
+function it(r, e, t) {
+  if (e.length !== we || t.length !== nt) return !1;
   try {
-    const n = Pe(nt, r), i = De.p2tr({
+    const n = xe(tt, r), i = Ne.p2tr({
       internalPubkey: I.from(e)
     });
     if (!i.output) return !1;
@@ -788,7 +788,7 @@ function at(r, e, t) {
       [s],
       [o],
       X.SIGHASH_DEFAULT
-    ), w = ot(e);
+    ), w = st(e);
     return w ? H.verifySchnorr(m, w, t) : !1;
   } catch {
     return !1;
@@ -819,7 +819,7 @@ function j(r, e) {
     i[1 + s] = Number(n >> BigInt((7 - s) * 8)) & 255;
   return i;
 }
-function ve(...r) {
+function Pe(...r) {
   const e = r.reduce((i, s) => i + s.length, 0), t = new Uint8Array(e);
   let n = 0;
   for (const i of r)
@@ -830,32 +830,32 @@ function ie(r) {
   const t = [j(4, r.length)];
   for (const n of r)
     t.push(j(0, n));
-  return ve(...t);
+  return Pe(...t);
 }
-function ct(r, e, t) {
+function ot(r, e, t) {
   if (!Number.isSafeInteger(t) || t < 0)
     throw new Error(
       `encodeServerIdentityPayload: expires_at must be a non-negative safe integer, got ${t}`
     );
   const n = j(4, 3), i = ie(r), s = ie(e), o = j(0, t);
-  return ve(n, i, s, o);
+  return Pe(n, i, s, o);
 }
-const lt = new TextEncoder().encode(
+const at = new TextEncoder().encode(
   "btc-auth.server-identity.v1"
-), ut = 2 * 3600;
+), ct = 2 * 3600;
 class y extends Error {
   constructor(e, t) {
     super(e), this.reason = t, this.name = "ServerIdentityError";
   }
 }
-function G(r) {
+function D(r) {
   const e = new Uint8Array(r.length / 2);
   for (let t = 0; t < e.length; t++)
     e[t] = parseInt(r.slice(t * 2, t * 2 + 2), 16);
   return e;
 }
-function dt(r) {
-  const { proof: e, pinnedServerPubkey: t, now: n } = r, i = r.maxLifetimeSecs ?? ut, s = V(t).toLowerCase();
+function lt(r) {
+  const { proof: e, pinnedServerPubkey: t, now: n } = r, i = r.maxLifetimeSecs ?? ct, s = V(t).toLowerCase();
   if (s.length !== R || !S.test(s))
     throw new y(
       `pinnedServerPubkey must be 32-byte hex; got ${s.length} chars`,
@@ -898,7 +898,7 @@ function dt(r) {
       "expires_too_far"
     );
   const c = V(e.ephemeral_pubkey).toLowerCase();
-  if (c.length !== D || !S.test(c))
+  if (c.length !== G || !S.test(c))
     throw new y(
       `ephemeral_pubkey must be 33-byte compressed hex; got ${c.length} chars`,
       "invalid_ephemeral_pubkey"
@@ -909,51 +909,51 @@ function dt(r) {
       `ephemeral_pubkey must be compressed (prefix 02/03); got ${d}`,
       "invalid_ephemeral_pubkey"
     );
-  const l = G(c);
+  const l = D(c);
   if (!H.isPoint(l))
     throw new y(
       "ephemeral_pubkey is not a valid secp256k1 point",
       "invalid_ephemeral_pubkey"
     );
   const g = V(e.signature).toLowerCase();
-  if (g.length !== Ne || !S.test(g))
+  if (g.length !== Oe || !S.test(g))
     throw new y(
       `signature must be 64-byte Schnorr hex; got ${g.length} chars`,
       "invalid_signature_encoding"
     );
-  const m = ct(
-    lt,
-    G(c),
+  const m = ot(
+    at,
+    D(c),
     e.expires_at
   );
-  if (!at(m, G(o), G(g)))
+  if (!it(m, D(o), D(g)))
     throw new y(
       "BIP-322 signature verification failed — ephemeral key is not attested by pinned server pubkey",
       "signature_verification_failed"
     );
 }
-const oe = /* @__PURE__ */ new Set([
+const ut = /* @__PURE__ */ new Set([
   "vaultProvider_submitDepositorWotsKey",
   "vaultProvider_submitDepositorPresignatures",
   "vaultProvider_requestDepositorPresignTransactions"
-]), ae = /* @__PURE__ */ new Set([
+]), dt = /* @__PURE__ */ new Set([
   "vaultProvider_requestDepositorClaimerArtifacts"
 ]), ht = 6e4, W = "auth_createDepositorToken", Y = "auth_createDepositorTokenGrpc";
-function ke(r, e) {
-  return new _e({
+function ve(r, e) {
+  return new ge({
     baseUrl: r,
     timeout: ht,
     headers: e,
     retryableFor: (t) => t === W || t === Y
   });
 }
-const pt = 0, gt = 1, F = 2, ft = 3, _t = 4, mt = 5, yt = 6, bt = 7, ce = 24, wt = 28, xt = 20, At = 21, Pt = 22, le = 256;
-class P extends Error {
+const pt = 0, gt = 1, F = 2, ft = 3, _t = 4, mt = 5, yt = 6, bt = 7, oe = 24, wt = 28, xt = 20, Pt = 21, vt = 22, ae = 256;
+class v extends Error {
   constructor(e) {
     super(`CBOR decode: ${e}`), this.name = "CborDecodeError";
   }
 }
-class Ee {
+class Ae {
   constructor(e) {
     f(this, "buf");
     /** Current read offset. Public so callers can slice encoded sub-ranges. */
@@ -962,7 +962,7 @@ class Ee {
   }
   nextByte() {
     if (this.pos >= this.buf.length)
-      throw new P("unexpected end of input");
+      throw new v("unexpected end of input");
     return this.buf[this.pos++];
   }
   /**
@@ -973,24 +973,24 @@ class Ee {
    */
   readHead() {
     const e = this.nextByte(), t = e >> 5, n = e & 31;
-    if (n < ce)
+    if (n < oe)
       return { major: t, arg: n };
     if (n >= wt)
-      throw new P(
+      throw new v(
         `unsupported additional info ${n} (indefinite-length or reserved)`
       );
-    const i = 1 << n - ce;
+    const i = 1 << n - oe;
     let s = 0n;
     for (let o = 0; o < i; o++)
       s = s << 8n | BigInt(this.nextByte());
     if (s > BigInt(Number.MAX_SAFE_INTEGER))
-      throw new P(`argument ${s} exceeds safe integer range`);
+      throw new v(`argument ${s} exceeds safe integer range`);
     return { major: t, arg: Number(s) };
   }
   /** Read `length` raw bytes as a sub-array view into the backing buffer. */
   readBytes(e) {
     if (this.pos + e > this.buf.length)
-      throw new P("length overruns end of input");
+      throw new v("length overruns end of input");
     const t = this.buf.subarray(this.pos, this.pos + e);
     return this.pos += e, t;
   }
@@ -1001,7 +1001,7 @@ class Ee {
   readByteString() {
     const e = this.readHead();
     if (e.major !== F)
-      throw new P(
+      throw new v(
         `expected byte string (major ${F}), got major ${e.major}`
       );
     return this.readBytes(e.arg);
@@ -1014,9 +1014,9 @@ class Ee {
    * native call stack (see {@link MAX_NESTING_DEPTH}).
    */
   readValue(e = 0) {
-    if (e > le)
-      throw new P(
-        `nesting exceeds maximum depth ${le}`
+    if (e > ae)
+      throw new v(
+        `nesting exceeds maximum depth ${ae}`
       );
     const t = this.readHead();
     switch (t.major) {
@@ -1048,39 +1048,39 @@ class Ee {
         return { tag: t.arg, value: this.readValue(e + 1) };
       case bt:
         if (t.arg === xt) return !1;
-        if (t.arg === At) return !0;
-        if (t.arg === Pt) return null;
-        throw new P(
+        if (t.arg === Pt) return !0;
+        if (t.arg === vt) return null;
+        throw new v(
           `unsupported simple/float value ${t.arg}`
         );
       default:
-        throw new P(`unsupported major type ${t.major}`);
+        throw new v(`unsupported major type ${t.major}`);
     }
   }
 }
-function Se(r) {
-  const e = new Ee(r), t = e.readValue();
+function ke(r) {
+  const e = new Ae(r), t = e.readValue();
   if (e.pos !== r.length)
-    throw new P("trailing bytes after top-level item");
+    throw new v("trailing bytes after top-level item");
   return t;
 }
-const vt = "vaultd-jsonrpc", kt = "vaultd-grpc", ue = 18, z = 4, de = -47, Et = 1, he = 64, St = 128, Tt = 96, Ct = 64, $t = 1, It = 2, Vt = 3, Rt = 4, Ot = 5, Bt = 6, Nt = 7, pe = new TextEncoder().encode("Signature1");
+const At = "vaultd-jsonrpc", kt = "vaultd-grpc", ce = 18, z = 4, le = -47, Et = 1, ue = 64, St = 128, Tt = 96, Ct = 64, $t = 1, It = 2, Vt = 3, Rt = 4, Ot = 5, Bt = 6, Nt = 7, de = new TextEncoder().encode("Signature1");
 class h extends Error {
   constructor(e, t) {
     super(e), this.reason = t, this.name = "CwtVerificationError";
   }
 }
-function Gt(r) {
-  const e = ge(
+function Dt(r) {
+  const e = he(
     r.expectedIssuerXOnlyPubkey,
     "expectedIssuerXOnlyPubkey"
-  ), t = ge(
+  ), t = he(
     r.expectedAudienceXOnlyPubkey,
     "expectedAudienceXOnlyPubkey"
-  ), n = Lt(r.ephemeralPubkeyHex), i = Xt(r.token), s = new Ee(i), o = s.readHead();
-  if (o.major !== 6 || o.arg !== ue)
+  ), n = Lt(r.ephemeralPubkeyHex), i = Xt(r.token), s = new Ae(i), o = s.readHead();
+  if (o.major !== 6 || o.arg !== ce)
     throw new h(
-      `token is not a COSE Sign1 tagged value (tag ${ue})`,
+      `token is not a COSE Sign1 tagged value (tag ${ce})`,
       "invalid_token_structure"
     );
   const c = s.readHead();
@@ -1092,9 +1092,9 @@ function Gt(r) {
   const d = s.pos, l = s.readByteString(), g = i.subarray(d, s.pos);
   s.readValue();
   const m = s.pos, w = s.readByteString(), k = i.subarray(m, s.pos), T = s.readByteString();
-  if (T.length !== he)
+  if (T.length !== ue)
     throw new h(
-      `COSE signature must be ${he} bytes, got ${T.length}`,
+      `COSE signature must be ${ue} bytes, got ${T.length}`,
       "invalid_token_structure"
     );
   if (s.pos !== i.length)
@@ -1102,10 +1102,10 @@ function Gt(r) {
       "COSE Sign1 token has trailing bytes after the signature",
       "invalid_token_structure"
     );
-  const A = Dt(l);
-  if (A !== de)
+  const P = Gt(l);
+  if (P !== le)
     throw new h(
-      `unexpected COSE algorithm ${A} (expected ES256K ${de})`,
+      `unexpected COSE algorithm ${P} (expected ES256K ${le})`,
       "unexpected_algorithm"
     );
   const $ = Mt(g, k), _ = q($);
@@ -1164,13 +1164,13 @@ function Gt(r) {
     issuedAt: u.issuedAt
   };
 }
-function Dt(r) {
+function Gt(r) {
   if (r.length === 0)
     throw new h(
       "empty COSE protected header (no algorithm)",
       "unexpected_algorithm"
     );
-  const e = Se(r);
+  const e = ke(r);
   if (!(e instanceof Map))
     throw new h(
       "COSE protected header is not a map",
@@ -1187,15 +1187,15 @@ function Dt(r) {
 function Mt(r, e) {
   return Ft(
     Uint8Array.of(St | z),
-    Uint8Array.of(Tt | pe.length),
-    pe,
+    Uint8Array.of(Tt | de.length),
+    de,
     r,
     Uint8Array.of(Ct),
     e
   );
 }
 function jt(r) {
-  const e = Se(r);
+  const e = ke(r);
   if (!(e instanceof Map))
     throw new h(
       "CWT claims root is not a map",
@@ -1239,7 +1239,7 @@ function J(r, e, t) {
     );
   return n;
 }
-function ge(r, e) {
+function he(r, e) {
   const t = V(r).toLowerCase();
   if (t.length !== R || !S.test(t))
     throw new h(
@@ -1250,12 +1250,12 @@ function ge(r, e) {
 }
 function Lt(r) {
   const e = V(r).toLowerCase(), t = e.slice(0, 2);
-  if (e.length !== D || !S.test(e) || t !== "02" && t !== "03")
+  if (e.length !== G || !S.test(e) || t !== "02" && t !== "03")
     throw new h(
       "ephemeralPubkeyHex must be 33-byte compressed pubkey hex (prefix 02/03)",
       "invalid_input"
     );
-  return Ge(e);
+  return Be(e);
 }
 const Ut = (() => {
   const r = new Int16Array(128).fill(-1), e = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
@@ -1300,7 +1300,7 @@ function Ft(...r) {
     t.set(i, n), n += i.length;
   return t;
 }
-const fe = 4102444800, Kt = 30;
+const pe = 4102444800, Kt = 30;
 class Jt {
   constructor(e) {
     // `client` is the only mutable field — see `setClient`. The
@@ -1381,7 +1381,7 @@ class Jt {
           pegin_txid: this.peginTxid,
           auth_anchor: this.authAnchorHex
         });
-        if (dt({
+        if (lt({
           proof: s.server_identity,
           pinnedServerPubkey: this.pinnedServerPubkey,
           now: this.now()
@@ -1390,15 +1390,15 @@ class Jt {
             `VpTokenProvider: invalid token in acquire response (expected non-empty string, got ${typeof s.token})`
           );
         const o = this.now();
-        if (!Number.isSafeInteger(s.expires_at) || s.expires_at <= o || s.expires_at > fe)
+        if (!Number.isSafeInteger(s.expires_at) || s.expires_at <= o || s.expires_at > pe)
           throw new Error(
-            `VpTokenProvider: invalid expires_at in acquire response (got ${JSON.stringify(s.expires_at)}; must be a safe integer in (${o}, ${fe}])`
+            `VpTokenProvider: invalid expires_at in acquire response (got ${JSON.stringify(s.expires_at)}; must be a safe integer in (${o}, ${pe}])`
           );
-        Gt({
+        Dt({
           token: s.token,
           ephemeralPubkeyHex: s.server_identity.ephemeral_pubkey,
           expectedIssuerXOnlyPubkey: this.pinnedServerPubkey,
-          expectedSubject: e === "grpc" ? kt : vt,
+          expectedSubject: e === "grpc" ? kt : At,
           expectedAudienceXOnlyPubkey: this.expectedAudienceXOnlyPubkey,
           responseExpiresAt: s.expires_at,
           serverIdentityExpiresAt: s.server_identity.expires_at,
@@ -1422,49 +1422,42 @@ class qt {
   }
   /**
    * Return the cached `VpTokenProvider` for `peginTxid` if one exists
-   * with matching `authAnchorHex`, `pinnedServerPubkey`, and
-   * `enableGrpcArtifactAuth`, otherwise construct and cache a fresh
-   * provider. A mismatch on any of those throws — silent overwrite would
-   * mask derivation drift, VP pubkey rotation, or a caller that disagrees
-   * on the auth subject (which the cached provider can't switch).
+   * with matching `authAnchorHex` and `pinnedServerPubkey`, otherwise
+   * construct and cache a fresh provider. A mismatch on either throws —
+   * silent overwrite would mask derivation drift or VP pubkey rotation.
    */
   getOrCreate(e) {
-    const t = e.enableGrpcArtifactAuth ?? !1, n = this.entries.get(e.peginTxid);
-    if (n) {
-      if (n.authAnchorHex !== e.authAnchorHex)
-        throw new Error(
-          `VpTokenRegistry: peginTxid ${e.peginTxid} already bound to authAnchorHex ${n.authAnchorHex.slice(0, 8)}…; got ${e.authAnchorHex.slice(0, 8)}…`
-        );
-      if (n.pinnedServerPubkey !== e.pinnedServerPubkey)
+    const t = this.entries.get(e.peginTxid);
+    if (t) {
+      if (t.authAnchorHex !== e.authAnchorHex)
         throw new Error(
-          `VpTokenRegistry: peginTxid ${e.peginTxid} already bound to pinnedServerPubkey ${n.pinnedServerPubkey.slice(0, 8)}…; got ${e.pinnedServerPubkey.slice(0, 8)}…`
+          `VpTokenRegistry: peginTxid ${e.peginTxid} already bound to authAnchorHex ${t.authAnchorHex.slice(0, 8)}…; got ${e.authAnchorHex.slice(0, 8)}…`
         );
-      if (n.expectedAudienceXOnlyPubkey !== e.expectedAudienceXOnlyPubkey)
+      if (t.pinnedServerPubkey !== e.pinnedServerPubkey)
         throw new Error(
-          `VpTokenRegistry: peginTxid ${e.peginTxid} already bound to expectedAudienceXOnlyPubkey ${n.expectedAudienceXOnlyPubkey.slice(0, 8)}…; got ${e.expectedAudienceXOnlyPubkey.slice(0, 8)}…`
+          `VpTokenRegistry: peginTxid ${e.peginTxid} already bound to pinnedServerPubkey ${t.pinnedServerPubkey.slice(0, 8)}…; got ${e.pinnedServerPubkey.slice(0, 8)}…`
         );
-      if (n.enableGrpcArtifactAuth !== t)
+      if (t.expectedAudienceXOnlyPubkey !== e.expectedAudienceXOnlyPubkey)
         throw new Error(
-          `VpTokenRegistry: peginTxid ${e.peginTxid} already bound to enableGrpcArtifactAuth=${n.enableGrpcArtifactAuth}; got ${t}`
+          `VpTokenRegistry: peginTxid ${e.peginTxid} already bound to expectedAudienceXOnlyPubkey ${t.expectedAudienceXOnlyPubkey.slice(0, 8)}…; got ${e.expectedAudienceXOnlyPubkey.slice(0, 8)}…`
         );
-      return n.provider.setClient(e.client), n.provider;
+      return t.provider.setClient(e.client), t.provider;
     }
-    const i = new Jt({
+    const n = new Jt({
       client: e.client,
       peginTxid: e.peginTxid,
       authAnchorHex: e.authAnchorHex,
       pinnedServerPubkey: e.pinnedServerPubkey,
       expectedAudienceXOnlyPubkey: e.expectedAudienceXOnlyPubkey,
-      authGatedMethods: t ? oe : /* @__PURE__ */ new Set([...oe, ...ae]),
-      grpcGatedMethods: t ? ae : /* @__PURE__ */ new Set()
+      authGatedMethods: ut,
+      grpcGatedMethods: dt
     });
     return this.entries.set(e.peginTxid, {
-      provider: i,
+      provider: n,
       authAnchorHex: e.authAnchorHex,
       pinnedServerPubkey: e.pinnedServerPubkey,
-      expectedAudienceXOnlyPubkey: e.expectedAudienceXOnlyPubkey,
-      enableGrpcArtifactAuth: t
-    }), i;
+      expectedAudienceXOnlyPubkey: e.expectedAudienceXOnlyPubkey
+    }), n;
   }
   /** Return the cached provider, or `undefined` if none. */
   peek(e) {
@@ -1492,54 +1485,52 @@ class qt {
     return this.entries.size;
   }
 }
-const Te = new qt();
+const Ee = new qt();
 function dr(r) {
   var n;
-  const e = ke(
+  const e = ve(
     r.baseUrl,
     (n = r.options) == null ? void 0 : n.headers
-  ), t = Te.getOrCreate({
+  ), t = Ee.getOrCreate({
     client: e,
     peginTxid: r.peginTxid,
     authAnchorHex: r.authAnchorHex,
     pinnedServerPubkey: r.pinnedServerPubkey,
-    expectedAudienceXOnlyPubkey: me(
+    expectedAudienceXOnlyPubkey: fe(
       r.depositorBtcPubkey
-    ),
-    enableGrpcArtifactAuth: r.enableGrpcArtifactAuth
+    )
   });
-  return new tt(r.baseUrl, {
+  return new Qe(r.baseUrl, {
     ...r.options,
     tokenProvider: t
   });
 }
 function hr(r) {
-  Te.getOrCreate({
-    client: ke(r.baseUrl, r.headers),
+  Ee.getOrCreate({
+    client: ve(r.baseUrl, r.headers),
     peginTxid: r.peginTxid,
     authAnchorHex: r.authAnchorHex,
     pinnedServerPubkey: r.pinnedServerPubkey,
-    expectedAudienceXOnlyPubkey: me(
+    expectedAudienceXOnlyPubkey: fe(
       r.depositorBtcPubkey
-    ),
-    enableGrpcArtifactAuth: r.enableGrpcArtifactAuth
+    )
   });
 }
 export {
-  Me as O,
+  De as O,
   y as S,
-  tt as V,
+  Qe as V,
   a,
   ur as b,
-  dt as c,
+  lt as c,
   qt as d,
-  Te as e,
+  Ee as e,
   dr as f,
   ar as g,
   lr as h,
   cr as i,
   hr as p,
   or as r,
-  Je as v
+  Fe as v
 };
-//# sourceMappingURL=primeVpAuth-BTKhMdh1.js.map
+//# sourceMappingURL=primeVpAuth-DxMuWQCi.js.map