@babylonlabs-io/ts-sdk 0.56.1 → 0.57.0

package/dist/{primeVpAuth-Caa5J_uv.js → primeVpAuth-DkJbvywo.js}

@@ -1,28 +1,28 @@
-var Se = Object.defineProperty;
-var Ce = (r, e, t) => e in r ? Se(r, e, { enumerable: !0, configurable: !0, writable: !0, value: t }) : r[e] = t;
+var ke = Object.defineProperty;
+var Ce = (r, e, t) => e in r ? ke(r, e, { enumerable: !0, configurable: !0, writable: !0, value: t }) : r[e] = t;
 var f = (r, e, t) => Ce(r, typeof e != "symbol" ? e + "" : e, t);
-import { B as Q } from "./BTCVaultRegistry.abi-Chs4AFBj.js";
-import { P as b, A as L } from "./ApplicationRegistry.abi-w5prf7Ig.js";
-import { k as Te, v as U, l as $e, j as Ve } from "./mempoolApi-lpJdvPkK.js";
-import { D as Ie, J as ge, e as Re } from "./types-CQDRQvV-.js";
-import { X as R, C as G, s as I, S as Oe, h as Ne, p as fe } from "./bitcoin-B5aNKtsk.js";
+import { B } from "./BTCVaultRegistry.abi-CixOlp3B.js";
+import { A as R, P as y } from "./ProtocolParams.abi-CV938AYZ.js";
+import { k as Te, v as K, l as $e, j as Ve } from "./mempoolApi-C0olk43O.js";
+import { D as Ie, J as ge, e as Re } from "./json-rpc-client-Ehjthcd7.js";
+import { X as O, C as j, s as I, S as Oe, h as Ne, p as fe } from "./bitcoin-B5aNKtsk.js";
 import { C as ee } from "./constants-CDQE812z.js";
-import { H as S } from "./validation-Dj3dqYtl.js";
-import * as H from "@bitcoin-js/tiny-secp256k1-asmjs";
+import { H as k } from "./validation-Dj3dqYtl.js";
+import * as U from "@bitcoin-js/tiny-secp256k1-asmjs";
 import { payments as Be, Transaction as X } from "bitcoinjs-lib";
 import { Buffer as V } from "buffer";
-import { s as q } from "./sha2-BYVxyZzX.js";
+import { s as Y } from "./sha2-BYVxyZzX.js";
 async function or(r, e) {
   const [t, n] = await r.multicall({
     contracts: [
       {
         address: e,
-        abi: Q,
+        abi: B,
         functionName: "protocolParams"
       },
       {
         address: e,
-        abi: Q,
+        abi: B,
         functionName: "applicationRegistry"
       }
     ],
@@ -33,8 +33,119 @@ async function or(r, e) {
     applicationRegistry: n
   };
 }
+function Ge(r, e) {
+  return {
+    vaultProvider: r[0],
+    vaultKeepers: r.slice(1, 1 + e),
+    universalChallengers: r.slice(1 + e)
+  };
+}
+class cr {
+  constructor(e, t) {
+    this.publicClient = e, this.contracts = t;
+  }
+  /**
+   * One multicall, `allowFailure: false`, so every key in the set is read at
+   * the same block. A rotation landing between two separate `eth_call`s would
+   * otherwise produce a mixed-epoch key set and a lock no counterparty agrees
+   * with.
+   */
+  async readAll(e, t) {
+    const n = await this.publicClient.multicall({
+      contracts: e,
+      allowFailure: !1
+    });
+    return Ge(n, t);
+  }
+  async getCurrentOperationKeys(e) {
+    const t = [
+      {
+        address: this.contracts.btcVaultRegistry,
+        abi: B,
+        functionName: "getCurrentOperationBtcKey",
+        args: [e.vaultProviderEthAddress]
+      },
+      ...e.vaultKeepers.map((n) => ({
+        address: this.contracts.applicationRegistry,
+        abi: R,
+        functionName: "getCurrentOperationBtcKey",
+        args: [e.applicationEntryPoint, n.ethAddress]
+      })),
+      ...e.universalChallengers.map((n) => ({
+        address: this.contracts.protocolParams,
+        abi: y,
+        functionName: "getCurrentOperationBtcKey",
+        args: [n.ethAddress]
+      }))
+    ];
+    return this.readAll(t, e.vaultKeepers.length);
+  }
+  async getOperationKeysAtEpochs(e, t) {
+    const n = [
+      // The VP takes the plain `AtEpoch` variant: it has no membership
+      // version, so its genesis (the registration key at version 0) is
+      // unambiguous and the contract resolves it internally.
+      {
+        address: this.contracts.btcVaultRegistry,
+        abi: B,
+        functionName: "getOperationBtcKeyAtEpoch",
+        args: [e.vaultProviderEthAddress, t.vpKeyEpoch]
+      },
+      // Keepers and challengers take `...OrGenesis` with their roster key
+      // passed explicitly, because the correct genesis for them is their key
+      // in *this vault's frozen membership version*. An operator dropped from
+      // the current roster, or listed under a different key in an older
+      // version, would otherwise resolve against the wrong genesis.
+      ...e.vaultKeepers.map((i) => ({
+        address: this.contracts.applicationRegistry,
+        abi: R,
+        functionName: "getOperationBtcKeyAtEpochOrGenesis",
+        args: [
+          e.applicationEntryPoint,
+          i.ethAddress,
+          t.appKeeperKeyEpoch,
+          i.btcPubKey
+        ]
+      })),
+      ...e.universalChallengers.map((i) => ({
+        address: this.contracts.protocolParams,
+        abi: y,
+        functionName: "getOperationBtcKeyAtEpochOrGenesis",
+        args: [i.ethAddress, t.ucKeyEpoch, i.btcPubKey]
+      }))
+    ];
+    return this.readAll(n, e.vaultKeepers.length);
+  }
+  async getPayoutScriptsAtEpochs(e, t) {
+    const n = await this.publicClient.multicall({
+      contracts: [
+        {
+          address: this.contracts.btcVaultRegistry,
+          abi: B,
+          functionName: "getPayoutScriptAtEpoch",
+          args: [e.vaultProviderEthAddress, t.vpKeyEpoch]
+        },
+        ...e.vaultKeepers.map((i) => ({
+          address: this.contracts.applicationRegistry,
+          abi: R,
+          functionName: "getPayoutScriptAtEpoch",
+          args: [
+            e.applicationEntryPoint,
+            i.ethAddress,
+            t.appKeeperKeyEpoch
+          ]
+        }))
+      ],
+      allowFailure: !1
+    });
+    return {
+      vaultProvider: n[0],
+      vaultKeepers: [...n.slice(1)]
+    };
+  }
+}
 const te = 65535;
-function N(r) {
+function G(r) {
   return {
     timelockAssert: r.timelockAssert,
     timelockChallengeAssert: r.timelockChallengeAssert,
@@ -68,14 +179,14 @@ function ne(r) {
     );
   return Number(r);
 }
-class ar {
+class lr {
   constructor(e, t) {
     this.publicClient = e, this.contractAddress = t;
   }
   async getTBVProtocolParams() {
     const e = await this.publicClient.readContract({
       address: this.contractAddress,
-      abi: b,
+      abi: y,
       functionName: "getTBVProtocolParams"
     }), t = re(e);
     return Te(t), t;
@@ -83,24 +194,24 @@ class ar {
   async getLatestOffchainParams() {
     const e = await this.publicClient.readContract({
       address: this.contractAddress,
-      abi: b,
+      abi: y,
       functionName: "getLatestOffchainParams"
-    }), t = N(e);
-    return U(t), t;
+    }), t = G(e);
+    return K(t), t;
   }
   async getOffchainParamsByVersion(e) {
     const t = await this.publicClient.readContract({
       address: this.contractAddress,
-      abi: b,
+      abi: y,
       functionName: "getOffchainParamsByVersion",
       args: [e]
-    }), n = N(t);
-    return U(n), n;
+    }), n = G(t);
+    return K(n), n;
   }
   async getLatestOffchainParamsVersion() {
     const e = await this.publicClient.readContract({
       address: this.contractAddress,
-      abi: b,
+      abi: y,
       functionName: "latestOffchainParamsVersion"
     }), t = Number(e);
     return $e(t), t;
@@ -121,27 +232,27 @@ class ar {
       contracts: [
         {
           address: this.contractAddress,
-          abi: b,
+          abi: y,
           functionName: "getTBVProtocolParams"
         },
         {
           address: this.contractAddress,
-          abi: b,
+          abi: y,
           functionName: "getLatestOffchainParams"
         },
         {
           address: this.contractAddress,
-          abi: b,
+          abi: y,
           functionName: "latestOffchainParamsVersion"
         },
         {
           address: this.contractAddress,
-          abi: b,
+          abi: y,
           functionName: "activeVaultCoreVersion"
         }
       ],
       allowFailure: !1
-    }), t = re(e[0]), n = N(e[1]), i = Number(e[2]), s = Number(e[3]), o = {
+    }), t = re(e[0]), n = G(e[1]), i = Number(e[2]), s = Number(e[3]), a = {
       minimumPegInAmount: t.minimumPegInAmount,
       maxPegInAmount: t.maxPegInAmount,
       pegInAckTimeout: t.pegInAckTimeout,
@@ -155,7 +266,7 @@ class ar {
       offchainParamsVersion: i,
       activeVaultCoreVersion: s
     };
-    return Ve(o), o;
+    return Ve(a), a;
   }
   /**
    * Fetch every historical offchain params version in a single multicall.
@@ -173,17 +284,17 @@ class ar {
       return { byVersion: /* @__PURE__ */ new Map(), latestVersion: 0 };
     const n = Array.from({ length: t }, (c, d) => d + 1), i = n.map((c) => ({
       address: this.contractAddress,
-      abi: b,
+      abi: y,
       functionName: "getOffchainParamsByVersion",
       args: [c]
     })), s = await this.publicClient.multicall({
       contracts: i,
       allowFailure: !1
-    }), o = /* @__PURE__ */ new Map();
+    }), a = /* @__PURE__ */ new Map();
     for (let c = 0; c < n.length; c++) {
-      const d = N(s[c]);
+      const d = G(s[c]);
       try {
-        U(d), o.set(n[c], d);
+        K(d), a.set(n[c], d);
       } catch (l) {
         e == null || e(
           n[c],
@@ -191,204 +302,204 @@ class ar {
         );
       }
     }
-    return { byVersion: o, latestVersion: t };
+    return { byVersion: a, latestVersion: t };
   }
 }
-function M(r) {
+function H(r) {
   return r.map((e) => ({
     ethAddress: e.ethAddress,
     btcPubKey: e.btcPubKey
   }));
 }
-class cr {
+class ur {
   constructor(e, t) {
     this.publicClient = e, this.contractAddress = t;
   }
   async getVaultKeepersByVersion(e, t) {
     const n = await this.publicClient.readContract({
       address: this.contractAddress,
-      abi: L,
+      abi: R,
       functionName: "getVaultKeepersByVersion",
       args: [e, t]
     });
-    return M(n);
+    return H(n);
   }
   async getCurrentVaultKeepers(e) {
     const t = await this.publicClient.readContract({
       address: this.contractAddress,
-      abi: L,
+      abi: R,
       functionName: "getCurrentVaultKeepers",
       args: [e]
     });
-    return M(t);
+    return H(t);
   }
   async getCurrentVaultKeepersVersion(e) {
     return await this.publicClient.readContract({
       address: this.contractAddress,
-      abi: L,
+      abi: R,
       functionName: "getCurrentVaultKeepersVersion",
       args: [e]
     });
   }
 }
-class lr {
+class dr {
   constructor(e, t) {
     this.publicClient = e, this.contractAddress = t;
   }
   async getUniversalChallengersByVersion(e) {
     const t = await this.publicClient.readContract({
       address: this.contractAddress,
-      abi: b,
+      abi: y,
       functionName: "getUniversalChallengersByVersion",
       args: [e]
     });
-    return M(t);
+    return H(t);
   }
   async getCurrentUniversalChallengers() {
     const e = await this.publicClient.readContract({
       address: this.contractAddress,
-      abi: b,
+      abi: y,
       functionName: "getCurrentUniversalChallengers"
     });
-    return M(e);
+    return H(e);
   }
   async getLatestUniversalChallengersVersion() {
     return await this.publicClient.readContract({
       address: this.contractAddress,
-      abi: b,
+      abi: y,
       functionName: "latestUniversalChallengersVersion"
     });
   }
 }
 var De = /* @__PURE__ */ ((r) => (r[r.PENDING = 0] = "PENDING", r[r.VERIFIED = 1] = "VERIFIED", r[r.ACTIVE = 2] = "ACTIVE", r[r.REDEEMED = 3] = "REDEEMED", r[r.EXPIRED = 4] = "EXPIRED", r))(De || {});
-const se = new Set(Object.values(Ie)), Ge = 200;
-function p(r) {
+const se = new Set(Object.values(Ie)), Me = 200;
+function h(r) {
   var e;
-  return ((e = JSON.stringify(r)) == null ? void 0 : e.slice(0, Ge)) ?? "undefined";
+  return ((e = JSON.stringify(r)) == null ? void 0 : e.slice(0, Me)) ?? "undefined";
 }
-const Me = "The vault provider returned an unexpected response. Please try again or contact support.";
-class a extends Error {
+const je = "The vault provider returned an unexpected response. Please try again or contact support.";
+class o extends Error {
   constructor(t) {
-    super(Me);
+    super(je);
     f(this, "detail");
     this.name = "VpResponseValidationError", this.detail = t;
   }
 }
-const O = 64;
+const N = 64;
 function T(r) {
-  return typeof r == "string" && r.length > 0 && S.test(r);
+  return typeof r == "string" && r.length > 0 && k.test(r);
 }
 function _e(r) {
   return typeof r == "string" && r.length > 0;
 }
 function me(r, e) {
   if (!T(r))
-    throw new a(
-      `VP response validation failed: "${e}" must be a non-empty hex string, got ${p(r)}`
+    throw new o(
+      `VP response validation failed: "${e}" must be a non-empty hex string, got ${h(r)}`
     );
 }
 function w(r, e) {
   if (!_e(r))
-    throw new a(
-      `VP response validation failed: "${e}" must be a non-empty string, got ${p(r)}`
+    throw new o(
+      `VP response validation failed: "${e}" must be a non-empty string, got ${h(r)}`
     );
 }
-function Z(r, e) {
-  if (!T(r) || r.length !== R && r.length !== G)
-    throw new a(
-      `VP response validation failed: "${e}" must be a ${R} or ${G}-char hex string (BTC pubkey), got ${p(r)}`
+function Q(r, e) {
+  if (!T(r) || r.length !== O && r.length !== j)
+    throw new o(
+      `VP response validation failed: "${e}" must be a ${O} or ${j}-char hex string (BTC pubkey), got ${h(r)}`
     );
 }
-function je(r) {
+function He(r) {
   const e = r.presigning;
   if (e == null) return;
   if (typeof e != "object" || Array.isArray(e))
-    throw new a(
+    throw new o(
       'VP response validation failed: "progress.presigning" must be an object if present'
     );
   const t = e;
   if (t.depositor_graph_created !== void 0 && typeof t.depositor_graph_created != "boolean")
-    throw new a(
-      `VP response validation failed: "progress.presigning.depositor_graph_created" must be a boolean if present, got ${p(t.depositor_graph_created)}`
+    throw new o(
+      `VP response validation failed: "progress.presigning.depositor_graph_created" must be a boolean if present, got ${h(t.depositor_graph_created)}`
     );
   if (t.vk_challenger_presigning_completed !== void 0 && typeof t.vk_challenger_presigning_completed != "number")
-    throw new a(
-      `VP response validation failed: "progress.presigning.vk_challenger_presigning_completed" must be a number if present, got ${p(t.vk_challenger_presigning_completed)}`
+    throw new o(
+      `VP response validation failed: "progress.presigning.vk_challenger_presigning_completed" must be a number if present, got ${h(t.vk_challenger_presigning_completed)}`
     );
   if (t.vk_challenger_presigning_total !== void 0 && typeof t.vk_challenger_presigning_total != "number")
-    throw new a(
-      `VP response validation failed: "progress.presigning.vk_challenger_presigning_total" must be a number if present, got ${p(t.vk_challenger_presigning_total)}`
+    throw new o(
+      `VP response validation failed: "progress.presigning.vk_challenger_presigning_total" must be a number if present, got ${h(t.vk_challenger_presigning_total)}`
     );
 }
 function ye(r) {
   if (r === null || typeof r != "object")
-    throw new a(
+    throw new o(
       "VP response validation failed: getPeginStatus response is not an object"
     );
   const e = r;
-  if (!T(e.pegin_txid) || e.pegin_txid.length !== O)
-    throw new a(
-      `VP response validation failed: "pegin_txid" must be a ${O}-char hex string (txid), got ${p(e.pegin_txid)}`
+  if (!T(e.pegin_txid) || e.pegin_txid.length !== N)
+    throw new o(
+      `VP response validation failed: "pegin_txid" must be a ${N}-char hex string (txid), got ${h(e.pegin_txid)}`
     );
   if (typeof e.status != "string")
-    throw new a(
+    throw new o(
       'VP response validation failed: "status" must be a string'
     );
   if (!se.has(e.status))
-    throw new a(
+    throw new o(
       `VP response validation failed: unrecognized status "${e.status}". Expected one of: ${[...se].join(", ")}`
     );
   if (e.progress === null || typeof e.progress != "object" || Array.isArray(e.progress))
-    throw new a(
+    throw new o(
       'VP response validation failed: "progress" must be an object'
     );
-  if (je(e.progress), typeof e.health_info != "string")
-    throw new a(
+  if (He(e.progress), typeof e.health_info != "string")
+    throw new o(
       'VP response validation failed: "health_info" must be a string'
     );
   if (e.last_error !== void 0 && typeof e.last_error != "string")
-    throw new a(
-      `VP response validation failed: "last_error" must be a string if present, got ${p(e.last_error)}`
+    throw new o(
+      `VP response validation failed: "last_error" must be a string if present, got ${h(e.last_error)}`
     );
 }
-function He(r) {
+function Le(r) {
   if (r === null || typeof r != "object")
-    throw new a(
+    throw new o(
       "VP response validation failed: requestDepositorPresignTransactions response is not an object"
     );
   const e = r;
   if (!Array.isArray(e.txs))
-    throw new a(
+    throw new o(
       'VP response validation failed: "txs" must be an array'
     );
   for (let t = 0; t < e.txs.length; t++)
-    Le(e.txs[t], `txs[${t}]`);
+    Ue(e.txs[t], `txs[${t}]`);
   if (e.depositor_graph === null || typeof e.depositor_graph != "object")
-    throw new a(
+    throw new o(
       'VP response validation failed: "depositor_graph" must be an object'
     );
-  ze(
+  Ze(
     e.depositor_graph
   );
 }
 function A(r, e) {
   if (r === null || typeof r != "object")
-    throw new a(
+    throw new o(
       `VP response validation failed: "${e}" must be an object`
     );
   me(r.tx_hex, `${e}.tx_hex`);
 }
-function Le(r, e) {
+function Ue(r, e) {
   if (r === null || typeof r != "object")
-    throw new a(
+    throw new o(
       `VP response validation failed: "${e}" must be an object`
     );
   const t = r;
-  Z(t.claimer_pubkey, `${e}.claimer_pubkey`), A(t.claim_tx, `${e}.claim_tx`), A(t.assert_tx, `${e}.assert_tx`), A(t.payout_tx, `${e}.payout_tx`), w(t.payout_psbt, `${e}.payout_psbt`);
+  Q(t.claimer_pubkey, `${e}.claimer_pubkey`), A(t.claim_tx, `${e}.claim_tx`), A(t.assert_tx, `${e}.assert_tx`), A(t.payout_tx, `${e}.payout_tx`), w(t.payout_psbt, `${e}.payout_psbt`);
 }
-function Ue(r, e) {
+function Ke(r, e) {
   if (r === null || typeof r != "object")
-    throw new a(
+    throw new o(
       `VP response validation failed: "${e}" must be an object`
     );
   const t = r;
@@ -396,31 +507,31 @@ function Ue(r, e) {
 }
 function Xe(r, e) {
   if (r === null || typeof r != "object")
-    throw new a(
+    throw new o(
       `VP response validation failed: "${e}" must be an object`
     );
   const t = r;
-  if (Z(t.challenger_pubkey, `${e}.challenger_pubkey`), A(
+  if (Q(t.challenger_pubkey, `${e}.challenger_pubkey`), A(
     t.challenge_assert_x_tx,
     `${e}.challenge_assert_x_tx`
   ), A(
     t.challenge_assert_y_tx,
     `${e}.challenge_assert_y_tx`
   ), A(t.nopayout_tx, `${e}.nopayout_tx`), w(t.nopayout_psbt, `${e}.nopayout_psbt`), !Array.isArray(t.challenge_assert_connectors))
-    throw new a(
+    throw new o(
       `VP response validation failed: "${e}.challenge_assert_connectors" must be an array`
     );
   if (t.challenge_assert_connectors.length !== ee)
-    throw new a(
+    throw new o(
       `VP response validation failed: "${e}.challenge_assert_connectors" must have exactly ${ee} entries, got ${t.challenge_assert_connectors.length}`
     );
   for (let n = 0; n < t.challenge_assert_connectors.length; n++)
-    Ue(
+    Ke(
       t.challenge_assert_connectors[n],
       `${e}.challenge_assert_connectors[${n}]`
     );
   if (!Array.isArray(t.output_label_hashes))
-    throw new a(
+    throw new o(
       `VP response validation failed: "${e}.output_label_hashes" must be an array`
     );
   for (let n = 0; n < t.output_label_hashes.length; n++)
@@ -431,159 +542,159 @@ function Xe(r, e) {
 }
 function Fe(r) {
   if (r === null || typeof r != "object")
-    throw new a(
+    throw new o(
       "VP response validation failed: requestDepositorClaimerArtifacts response is not an object"
     );
   const e = r;
   if (!_e(e.tx_graph_json))
-    throw new a(
-      `VP response validation failed: "tx_graph_json" must be a non-empty string, got ${p(e.tx_graph_json)}`
+    throw new o(
+      `VP response validation failed: "tx_graph_json" must be a non-empty string, got ${h(e.tx_graph_json)}`
     );
   if (!T(e.verifying_key_hex))
-    throw new a(
-      `VP response validation failed: "verifying_key_hex" must be a non-empty hex string, got ${p(e.verifying_key_hex)}`
+    throw new o(
+      `VP response validation failed: "verifying_key_hex" must be a non-empty hex string, got ${h(e.verifying_key_hex)}`
     );
   if (e.babe_sessions === null || typeof e.babe_sessions != "object" || Array.isArray(e.babe_sessions))
-    throw new a(
+    throw new o(
       'VP response validation failed: "babe_sessions" must be an object'
     );
   const t = Object.entries(
     e.babe_sessions
   );
   if (t.length === 0)
-    throw new a(
+    throw new o(
       'VP response validation failed: "babe_sessions" must contain at least one challenger entry'
     );
   for (const [n, i] of t) {
-    if (Z(n, `babe_sessions["${n}"]`), i === null || typeof i != "object")
-      throw new a(
+    if (Q(n, `babe_sessions["${n}"]`), i === null || typeof i != "object")
+      throw new o(
         `VP response validation failed: "babe_sessions.${n}" must be an object`
       );
     const s = i;
     if (!T(s.decryptor_artifacts_hex))
-      throw new a(
-        `VP response validation failed: "babe_sessions.${n}.decryptor_artifacts_hex" must be a non-empty hex string, got ${p(s.decryptor_artifacts_hex)}`
+      throw new o(
+        `VP response validation failed: "babe_sessions.${n}.decryptor_artifacts_hex" must be a non-empty hex string, got ${h(s.decryptor_artifacts_hex)}`
       );
   }
 }
-function Ke(r) {
+function Je(r) {
   if (r === null || typeof r != "object")
-    throw new a(
+    throw new o(
       "VP response validation failed: pegout status payload is not an object"
     );
   const e = r;
-  if (!T(e.pegin_txid) || e.pegin_txid.length !== O)
-    throw new a(
-      `VP response validation failed: "pegin_txid" must be a ${O}-char hex string (txid), got ${p(e.pegin_txid)}`
+  if (!T(e.pegin_txid) || e.pegin_txid.length !== N)
+    throw new o(
+      `VP response validation failed: "pegin_txid" must be a ${N}-char hex string (txid), got ${h(e.pegin_txid)}`
     );
   if (typeof e.found != "boolean")
-    throw new a(
-      `VP response validation failed: "found" must be a boolean, got ${p(e.found)}`
+    throw new o(
+      `VP response validation failed: "found" must be a boolean, got ${h(e.found)}`
     );
   if (e.claimer !== null) {
     if (typeof e.claimer != "object")
-      throw new a(
-        `VP response validation failed: "claimer" must be an object or null, got ${p(e.claimer)}`
+      throw new o(
+        `VP response validation failed: "claimer" must be an object or null, got ${h(e.claimer)}`
       );
-    Je(e.claimer);
+    We(e.claimer);
   }
   if (!Array.isArray(e.challengers))
-    throw new a(
-      `VP response validation failed: "challengers" must be an array, got ${p(e.challengers)}`
+    throw new o(
+      `VP response validation failed: "challengers" must be an array, got ${h(e.challengers)}`
     );
   for (let t = 0; t < e.challengers.length; t++)
-    qe(e.challengers[t], t);
+    Ye(e.challengers[t], t);
 }
-function Je(r) {
+function We(r) {
   if (w(r.status, "claimer.status"), typeof r.failed != "boolean")
-    throw new a(
-      `VP response validation failed: "claimer.failed" must be a boolean, got ${p(r.failed)}`
+    throw new o(
+      `VP response validation failed: "claimer.failed" must be a boolean, got ${h(r.failed)}`
     );
   if (w(r.claim_txid, "claimer.claim_txid"), w(r.claimer_pubkey, "claimer.claimer_pubkey"), w(r.assert_txid, "claimer.assert_txid"), typeof r.created_at != "number")
-    throw new a(
-      `VP response validation failed: "claimer.created_at" must be a number, got ${p(r.created_at)}`
+    throw new o(
+      `VP response validation failed: "claimer.created_at" must be a number, got ${h(r.created_at)}`
     );
   if (typeof r.updated_at != "number")
-    throw new a(
-      `VP response validation failed: "claimer.updated_at" must be a number, got ${p(r.updated_at)}`
+    throw new o(
+      `VP response validation failed: "claimer.updated_at" must be a number, got ${h(r.updated_at)}`
     );
 }
-function qe(r, e) {
+function Ye(r, e) {
   if (r === null || typeof r != "object")
-    throw new a(
-      `VP response validation failed: "challengers[${e}]" must be an object, got ${p(r)}`
+    throw new o(
+      `VP response validation failed: "challengers[${e}]" must be an object, got ${h(r)}`
     );
   const t = r;
-  if (w(t.status, `challengers[${e}].status`), w(t.claim_txid, `challengers[${e}].claim_txid`), w(t.claimer_pubkey, `challengers[${e}].claimer_pubkey`), B(t.assert_txid, `challengers[${e}].assert_txid`), B(
+  if (w(t.status, `challengers[${e}].status`), w(t.claim_txid, `challengers[${e}].claim_txid`), w(t.claimer_pubkey, `challengers[${e}].claimer_pubkey`), D(t.assert_txid, `challengers[${e}].assert_txid`), D(
     t.challenge_assert_x_txid,
     `challengers[${e}].challenge_assert_x_txid`
-  ), B(
+  ), D(
     t.challenge_assert_y_txid,
     `challengers[${e}].challenge_assert_y_txid`
-  ), B(t.nopayout_txid, `challengers[${e}].nopayout_txid`), typeof t.created_at != "number")
-    throw new a(
-      `VP response validation failed: "challengers[${e}].created_at" must be a number, got ${p(t.created_at)}`
+  ), D(t.nopayout_txid, `challengers[${e}].nopayout_txid`), typeof t.created_at != "number")
+    throw new o(
+      `VP response validation failed: "challengers[${e}].created_at" must be a number, got ${h(t.created_at)}`
     );
   if (typeof t.updated_at != "number")
-    throw new a(
-      `VP response validation failed: "challengers[${e}].updated_at" must be a number, got ${p(t.updated_at)}`
+    throw new o(
+      `VP response validation failed: "challengers[${e}].updated_at" must be a number, got ${h(t.updated_at)}`
     );
 }
-function B(r, e) {
+function D(r, e) {
   if (r !== null && typeof r != "string")
-    throw new a(
-      `VP response validation failed: "${e}" must be a string or null, got ${p(r)}`
+    throw new o(
+      `VP response validation failed: "${e}" must be a string or null, got ${h(r)}`
     );
 }
-function We(r) {
+function ze(r) {
   be(r, "batchGetPeginStatus", (e) => {
     e.result !== null && ye(e.result);
   });
 }
-function Ye(r) {
+function qe(r) {
   be(r, "batchGetPegoutStatus", (e) => {
-    e.result !== null && Ke(e.result);
+    e.result !== null && Je(e.result);
   });
 }
 function be(r, e, t) {
   if (r === null || typeof r != "object")
-    throw new a(
+    throw new o(
       `VP response validation failed: ${e} response is not an object`
     );
   const n = r;
   if (!Array.isArray(n.results))
-    throw new a(
-      `VP response validation failed: "${e}.results" must be an array, got ${p(n.results)}`
+    throw new o(
+      `VP response validation failed: "${e}.results" must be an array, got ${h(n.results)}`
     );
   for (let i = 0; i < n.results.length; i++) {
     const s = n.results[i];
     if (s === null || typeof s != "object")
-      throw new a(
-        `VP response validation failed: "${e}.results[${i}]" must be an object, got ${p(s)}`
+      throw new o(
+        `VP response validation failed: "${e}.results[${i}]" must be an object, got ${h(s)}`
       );
-    const o = s;
-    if (!T(o.pegin_txid) || o.pegin_txid.length !== O)
-      throw new a(
-        `VP response validation failed: "${e}.results[${i}].pegin_txid" must be a ${O}-char hex string, got ${p(o.pegin_txid)}`
+    const a = s;
+    if (!T(a.pegin_txid) || a.pegin_txid.length !== N)
+      throw new o(
+        `VP response validation failed: "${e}.results[${i}].pegin_txid" must be a ${N}-char hex string, got ${h(a.pegin_txid)}`
       );
-    if (o.error !== null && typeof o.error != "string")
-      throw new a(
-        `VP response validation failed: "${e}.results[${i}].error" must be a string or null, got ${p(o.error)}`
+    if (a.error !== null && typeof a.error != "string")
+      throw new o(
+        `VP response validation failed: "${e}.results[${i}].error" must be a string or null, got ${h(a.error)}`
       );
-    if (o.result === null && o.error === null)
-      throw new a(
+    if (a.result === null && a.error === null)
+      throw new o(
         `VP response validation failed: "${e}.results[${i}]" has neither "result" nor "error" populated`
       );
-    if (o.result !== null && o.error !== null)
-      throw new a(
+    if (a.result !== null && a.error !== null)
+      throw new o(
         `VP response validation failed: "${e}.results[${i}]" has both "result" and "error" populated`
       );
-    t(o, i);
+    t(a, i);
   }
 }
-function ze(r) {
+function Ze(r) {
   if (A(r.claim_tx, "depositor_graph.claim_tx"), A(r.assert_tx, "depositor_graph.assert_tx"), A(r.payout_tx, "depositor_graph.payout_tx"), w(r.payout_psbt, "depositor_graph.payout_psbt"), !Array.isArray(r.challenger_presign_data))
-    throw new a(
+    throw new o(
       'VP response validation failed: "depositor_graph.challenger_presign_data" must be an array'
     );
   for (let e = 0; e < r.challenger_presign_data.length; e++)
@@ -592,17 +703,17 @@ function ze(r) {
       `depositor_graph.challenger_presign_data[${e}]`
     );
   if (typeof r.offchain_params_version != "number")
-    throw new a(
+    throw new o(
       'VP response validation failed: "depositor_graph.offchain_params_version" must be a number'
     );
 }
-const Ze = 6e4;
-class Qe {
+const Qe = 6e4;
+class et {
   constructor(e, t) {
     f(this, "client");
     const n = {
       baseUrl: e,
-      timeout: (t == null ? void 0 : t.timeout) ?? Ze,
+      timeout: (t == null ? void 0 : t.timeout) ?? Qe,
       retries: t == null ? void 0 : t.retries,
       retryDelay: t == null ? void 0 : t.retryDelay,
       retryableFor: t == null ? void 0 : t.retryableFor,
@@ -618,7 +729,7 @@ class Qe {
    */
   async requestDepositorPresignTransactions(e, t) {
     const n = await this.client.call("vaultProvider_requestDepositorPresignTransactions", e, t);
-    return He(n), n;
+    return Le(n), n;
   }
   /**
    * Submit the depositor's pre-signatures for the payout transactions
@@ -667,7 +778,7 @@ class Qe {
    */
   async batchGetPeginStatus(e, t) {
     const n = await this.client.call("vaultProvider_batchGetPeginStatus", e, t);
-    return We(n), n;
+    return ze(n), n;
   }
   /**
    * Get pegout status for many txids in one round trip. Same per-result
@@ -675,18 +786,18 @@ class Qe {
    */
   async batchGetPegoutStatus(e, t) {
     const n = await this.client.call("vaultProvider_batchGetPegoutStatus", e, t);
-    return Ye(n), n;
+    return qe(n), n;
   }
 }
-function et(r, e) {
+function tt(r, e) {
   const t = /* @__PURE__ */ new Set();
   for (const d of r)
     t.add(d.toLowerCase());
-  const n = /* @__PURE__ */ new Map(), i = /* @__PURE__ */ new Set(), s = [], o = [];
+  const n = /* @__PURE__ */ new Map(), i = /* @__PURE__ */ new Set(), s = [], a = [];
   for (const d of e) {
     const l = d.pegin_txid.toLowerCase();
     if (!t.has(l)) {
-      o.push(l);
+      a.push(l);
       continue;
     }
     if (i.has(l)) {
@@ -698,16 +809,16 @@ function et(r, e) {
   const c = [];
   for (const d of t)
     i.has(d) || c.push(d);
-  return { byTxid: n, missing: c, unexpected: o, duplicate: s };
+  return { byTxid: n, missing: c, unexpected: a, duplicate: s };
 }
-async function ur(r) {
+async function pr(r) {
   const {
     items: e,
     getTxid: t,
     batchCall: n,
     onItem: i,
     onMissing: s,
-    onDuplicate: o,
+    onDuplicate: a,
     onDuplicateBatch: c,
     onWholeBatchError: d,
     onUnexpected: l,
@@ -718,15 +829,15 @@ async function ur(r) {
       `batchPollByProvider: batchSize must be a positive integer, got ${g}`
     );
   for (let m = 0; m < e.length; m += g) {
-    const x = e.slice(m, m + g), k = /* @__PURE__ */ new Map(), C = [];
+    const x = e.slice(m, m + g), E = /* @__PURE__ */ new Map(), C = [];
     for (const _ of x) {
       const u = t(_).toLowerCase();
-      k.set(u, _), C.push(u);
+      E.set(u, _), C.push(u);
     }
     let P;
     try {
       const _ = await n(C);
-      P = et(C, _.results);
+      P = tt(C, _.results);
     } catch (_) {
       d(x, _);
       continue;
@@ -734,18 +845,18 @@ async function ur(r) {
     l && P.unexpected.length > 0 && l(P.unexpected);
     const $ = new Set(P.duplicate);
     for (const _ of $) {
-      const u = k.get(_);
-      u && o(u);
+      const u = E.get(_);
+      u && a(u);
     }
     c && $.size > 0 && c($.size);
     for (const _ of P.missing) {
-      const u = k.get(_);
+      const u = E.get(_);
       u && s(u);
     }
     for (const [_, u] of P.byTxid) {
       if ($.has(_)) continue;
-      const E = k.get(_);
-      E && i(E, {
+      const S = E.get(_);
+      S && i(S, {
         pegin_txid: _,
         result: u.result,
         error: u.error
@@ -753,24 +864,24 @@ async function ur(r) {
     }
   }
 }
-const tt = "BIP0322-signed-message", rt = "TapTweak", we = 32, nt = 64;
+const rt = "BIP0322-signed-message", nt = "TapTweak", we = 32, st = 64;
 function xe(r, e) {
-  const t = new TextEncoder().encode(r), n = q(t), i = new Uint8Array(n.length * 2 + e.length);
-  return i.set(n, 0), i.set(n, n.length), i.set(e, n.length * 2), q(i);
+  const t = new TextEncoder().encode(r), n = Y(t), i = new Uint8Array(n.length * 2 + e.length);
+  return i.set(n, 0), i.set(n, n.length), i.set(e, n.length * 2), Y(i);
 }
-function st(r) {
+function it(r) {
   if (r.length !== we) return null;
-  const e = xe(rt, r), t = H.xOnlyPointAddTweak(r, e);
+  const e = xe(nt, r), t = U.xOnlyPointAddTweak(r, e);
   return t ? t.xOnlyPubkey : null;
 }
-function it(r, e, t) {
-  if (e.length !== we || t.length !== nt) return !1;
+function at(r, e, t) {
+  if (e.length !== we || t.length !== st) return !1;
   try {
-    const n = xe(tt, r), i = Be.p2tr({
+    const n = xe(rt, r), i = Be.p2tr({
       internalPubkey: V.from(e)
     });
     if (!i.output) return !1;
-    const s = i.output, o = 0, c = new X();
+    const s = i.output, a = 0, c = new X();
     c.version = 0, c.locktime = 0;
     const d = V.concat([
       V.from([0, 32]),
@@ -784,23 +895,23 @@ function it(r, e, t) {
       0,
       // sequence = 0
       d
-    ), c.addOutput(s, o);
+    ), c.addOutput(s, a);
     const l = new X();
     l.version = 0, l.locktime = 0;
     const g = c.getHash();
-    l.addInput(g, 0, 0), l.addOutput(V.from([106]), o);
+    l.addInput(g, 0, 0), l.addOutput(V.from([106]), a);
     const m = l.hashForWitnessV1(
       0,
       [s],
-      [o],
+      [a],
       X.SIGHASH_DEFAULT
-    ), x = st(e);
-    return x ? H.verifySchnorr(m, x, t) : !1;
+    ), x = it(e);
+    return x ? U.verifySchnorr(m, x, t) : !1;
   } catch {
     return !1;
   }
 }
-function j(r, e) {
+function L(r, e) {
   const t = (r & 7) << 5, n = typeof e == "bigint" ? e : BigInt(e);
   if (n < 0n) throw new Error("cborHead: negative argument");
   if (n < 24n) return new Uint8Array([t | Number(n)]);
@@ -833,9 +944,9 @@ function Pe(...r) {
   return t;
 }
 function ie(r) {
-  const t = [j(4, r.length)];
+  const t = [L(4, r.length)];
   for (const n of r)
-    t.push(j(0, n));
+    t.push(L(0, n));
   return Pe(...t);
 }
 function ot(r, e, t) {
@@ -843,117 +954,117 @@ function ot(r, e, t) {
     throw new Error(
       `encodeServerIdentityPayload: expires_at must be a non-negative safe integer, got ${t}`
     );
-  const n = j(4, 3), i = ie(r), s = ie(e), o = j(0, t);
-  return Pe(n, i, s, o);
+  const n = L(4, 3), i = ie(r), s = ie(e), a = L(0, t);
+  return Pe(n, i, s, a);
 }
-const at = new TextEncoder().encode(
+const ct = new TextEncoder().encode(
   "btc-auth.server-identity.v1"
-), ct = 2 * 3600;
-class y extends Error {
+), lt = 2 * 3600;
+class b extends Error {
   constructor(e, t) {
     super(e), this.reason = t, this.name = "ServerIdentityError";
   }
 }
-function D(r) {
+function M(r) {
   const e = new Uint8Array(r.length / 2);
   for (let t = 0; t < e.length; t++)
     e[t] = parseInt(r.slice(t * 2, t * 2 + 2), 16);
   return e;
 }
-function lt(r) {
-  const { proof: e, pinnedServerPubkey: t, now: n } = r, i = r.maxLifetimeSecs ?? ct, s = I(t).toLowerCase();
-  if (s.length !== R || !S.test(s))
-    throw new y(
+function ut(r) {
+  const { proof: e, pinnedServerPubkey: t, now: n } = r, i = r.maxLifetimeSecs ?? lt, s = I(t).toLowerCase();
+  if (s.length !== O || !k.test(s))
+    throw new b(
       `pinnedServerPubkey must be 32-byte hex; got ${s.length} chars`,
       "invalid_pubkey_encoding"
     );
-  const o = I(e.server_pubkey).toLowerCase();
-  if (o.length !== R || !S.test(o))
-    throw new y(
-      `server_pubkey must be 32-byte hex; got ${o.length} chars`,
+  const a = I(e.server_pubkey).toLowerCase();
+  if (a.length !== O || !k.test(a))
+    throw new b(
+      `server_pubkey must be 32-byte hex; got ${a.length} chars`,
       "invalid_pubkey_encoding"
     );
-  if (o !== s)
-    throw new y(
-      `server_pubkey does not match pinned value: expected ${s}, got ${o}`,
+  if (a !== s)
+    throw new b(
+      `server_pubkey does not match pinned value: expected ${s}, got ${a}`,
       "pinned_pubkey_mismatch"
     );
   if (!Number.isSafeInteger(e.expires_at))
-    throw new y(
+    throw new b(
       `expires_at must be a finite integer; got ${JSON.stringify(e.expires_at)}`,
       "invalid_expires_at"
     );
   if (!Number.isSafeInteger(n))
-    throw new y(
+    throw new b(
       `now must be a finite integer; got ${JSON.stringify(n)}`,
       "invalid_expires_at"
     );
   if (e.expires_at <= n)
-    throw new y(
+    throw new b(
       `server identity proof expired at ${e.expires_at}, now ${n}`,
       "expired"
     );
   if (!Number.isSafeInteger(i) || i <= 0)
-    throw new y(
+    throw new b(
       `maxLifetimeSecs must be a positive safe integer; got ${JSON.stringify(i)}`,
       "invalid_max_lifetime"
     );
   if (e.expires_at - n > i)
-    throw new y(
+    throw new b(
       `server identity proof expires too far in the future: expires_at=${e.expires_at}, now=${n}, max lifetime=${i}s`,
       "expires_too_far"
     );
   const c = I(e.ephemeral_pubkey).toLowerCase();
-  if (c.length !== G || !S.test(c))
-    throw new y(
+  if (c.length !== j || !k.test(c))
+    throw new b(
       `ephemeral_pubkey must be 33-byte compressed hex; got ${c.length} chars`,
       "invalid_ephemeral_pubkey"
     );
   const d = c.slice(0, 2);
   if (d !== "02" && d !== "03")
-    throw new y(
+    throw new b(
       `ephemeral_pubkey must be compressed (prefix 02/03); got ${d}`,
       "invalid_ephemeral_pubkey"
     );
-  const l = D(c);
-  if (!H.isPoint(l))
-    throw new y(
+  const l = M(c);
+  if (!U.isPoint(l))
+    throw new b(
       "ephemeral_pubkey is not a valid secp256k1 point",
       "invalid_ephemeral_pubkey"
     );
   const g = I(e.signature).toLowerCase();
-  if (g.length !== Oe || !S.test(g))
-    throw new y(
+  if (g.length !== Oe || !k.test(g))
+    throw new b(
       `signature must be 64-byte Schnorr hex; got ${g.length} chars`,
       "invalid_signature_encoding"
     );
   const m = ot(
-    at,
-    D(c),
+    ct,
+    M(c),
     e.expires_at
   );
-  if (!it(m, D(o), D(g)))
-    throw new y(
+  if (!at(m, M(a), M(g)))
+    throw new b(
       "BIP-322 signature verification failed — ephemeral key is not attested by pinned server pubkey",
       "signature_verification_failed"
     );
 }
-const ut = /* @__PURE__ */ new Set([
+const dt = /* @__PURE__ */ new Set([
   "vaultProvider_submitDepositorWotsKey",
   "vaultProvider_submitDepositorPresignatures",
   "vaultProvider_requestDepositorPresignTransactions"
-]), dt = /* @__PURE__ */ new Set([
+]), pt = /* @__PURE__ */ new Set([
   "vaultProvider_requestDepositorClaimerArtifacts"
-]), ht = 6e4, W = "auth_createDepositorToken", Y = "auth_createDepositorTokenGrpc";
+]), ht = 6e4, z = "auth_createDepositorToken", q = "auth_createDepositorTokenGrpc";
 function ve(r, e) {
   return new ge({
     baseUrl: r,
     timeout: ht,
     headers: e,
-    retryableFor: (t) => t === W || t === Y
+    retryableFor: (t) => t === z || t === q
   });
 }
-const pt = 0, gt = 1, F = 2, ft = 3, _t = 4, mt = 5, yt = 6, bt = 7, oe = 24, wt = 28, xt = 20, Pt = 21, vt = 22, ae = 256;
+const gt = 0, ft = 1, F = 2, _t = 3, mt = 4, yt = 5, bt = 6, wt = 7, ae = 24, xt = 28, Pt = 20, vt = 21, At = 22, oe = 256;
 class v extends Error {
   constructor(e) {
     super(`CBOR decode: ${e}`), this.name = "CborDecodeError";
@@ -979,15 +1090,15 @@ class Ae {
    */
   readHead() {
     const e = this.nextByte(), t = e >> 5, n = e & 31;
-    if (n < oe)
+    if (n < ae)
       return { major: t, arg: n };
-    if (n >= wt)
+    if (n >= xt)
       throw new v(
         `unsupported additional info ${n} (indefinite-length or reserved)`
       );
-    const i = 1 << n - oe;
+    const i = 1 << n - ae;
     let s = 0n;
-    for (let o = 0; o < i; o++)
+    for (let a = 0; a < i; a++)
       s = s << 8n | BigInt(this.nextByte());
     if (s > BigInt(Number.MAX_SAFE_INTEGER))
       throw new v(`argument ${s} exceeds safe integer range`);
@@ -1020,42 +1131,42 @@ class Ae {
    * native call stack (see {@link MAX_NESTING_DEPTH}).
    */
   readValue(e = 0) {
-    if (e > ae)
+    if (e > oe)
       throw new v(
-        `nesting exceeds maximum depth ${ae}`
+        `nesting exceeds maximum depth ${oe}`
       );
     const t = this.readHead();
     switch (t.major) {
-      case pt:
-        return t.arg;
       case gt:
+        return t.arg;
+      case ft:
         return -1 - t.arg;
       case F:
         return this.readBytes(t.arg);
-      case ft:
+      case _t:
         return new TextDecoder("utf-8", { fatal: !0 }).decode(
           this.readBytes(t.arg)
         );
-      case _t: {
+      case mt: {
         const n = [];
         for (let i = 0; i < t.arg; i++)
           n.push(this.readValue(e + 1));
         return n;
       }
-      case mt: {
+      case yt: {
         const n = /* @__PURE__ */ new Map();
         for (let i = 0; i < t.arg; i++) {
-          const s = this.readValue(e + 1), o = this.readValue(e + 1);
-          n.set(s, o);
+          const s = this.readValue(e + 1), a = this.readValue(e + 1);
+          n.set(s, a);
         }
         return n;
       }
-      case yt:
-        return { tag: t.arg, value: this.readValue(e + 1) };
       case bt:
-        if (t.arg === xt) return !1;
-        if (t.arg === Pt) return !0;
-        if (t.arg === vt) return null;
+        return { tag: t.arg, value: this.readValue(e + 1) };
+      case wt:
+        if (t.arg === Pt) return !1;
+        if (t.arg === vt) return !0;
+        if (t.arg === At) return null;
         throw new v(
           `unsupported simple/float value ${t.arg}`
         );
@@ -1064,206 +1175,206 @@ class Ae {
     }
   }
 }
-function ke(r) {
+function Ee(r) {
   const e = new Ae(r), t = e.readValue();
   if (e.pos !== r.length)
     throw new v("trailing bytes after top-level item");
   return t;
 }
-const At = "vaultd-jsonrpc", kt = "vaultd-grpc", ce = 18, z = 4, le = -47, Et = 1, ue = 64, St = 128, Ct = 96, Tt = 64, $t = 1, Vt = 2, It = 3, Rt = 4, Ot = 5, Nt = 6, Bt = 7, de = new TextEncoder().encode("Signature1");
-class h extends Error {
+const Et = "vaultd-jsonrpc", St = "vaultd-grpc", ce = 18, Z = 4, le = -47, kt = 1, ue = 64, Ct = 128, Tt = 96, $t = 64, Vt = 1, It = 2, Rt = 3, Ot = 4, Nt = 5, Bt = 6, Gt = 7, de = new TextEncoder().encode("Signature1");
+class p extends Error {
   constructor(e, t) {
     super(e), this.reason = t, this.name = "CwtVerificationError";
   }
 }
 function Dt(r) {
-  const e = he(
+  const e = pe(
     r.expectedIssuerXOnlyPubkey,
     "expectedIssuerXOnlyPubkey"
-  ), t = he(
+  ), t = pe(
     r.expectedAudienceXOnlyPubkey,
     "expectedAudienceXOnlyPubkey"
-  ), n = Lt(r.ephemeralPubkeyHex), i = Xt(r.token), s = new Ae(i), o = s.readHead();
-  if (o.major !== 6 || o.arg !== ce)
-    throw new h(
+  ), n = Ut(r.ephemeralPubkeyHex), i = Xt(r.token), s = new Ae(i), a = s.readHead();
+  if (a.major !== 6 || a.arg !== ce)
+    throw new p(
       `token is not a COSE Sign1 tagged value (tag ${ce})`,
       "invalid_token_structure"
     );
   const c = s.readHead();
-  if (c.major !== 4 || c.arg !== z)
-    throw new h(
-      `COSE Sign1 must be a ${z}-element array`,
+  if (c.major !== 4 || c.arg !== Z)
+    throw new p(
+      `COSE Sign1 must be a ${Z}-element array`,
       "invalid_token_structure"
     );
   const d = s.pos, l = s.readByteString(), g = i.subarray(d, s.pos);
   s.readValue();
-  const m = s.pos, x = s.readByteString(), k = i.subarray(m, s.pos), C = s.readByteString();
+  const m = s.pos, x = s.readByteString(), E = i.subarray(m, s.pos), C = s.readByteString();
   if (C.length !== ue)
-    throw new h(
+    throw new p(
       `COSE signature must be ${ue} bytes, got ${C.length}`,
       "invalid_token_structure"
     );
   if (s.pos !== i.length)
-    throw new h(
+    throw new p(
       "COSE Sign1 token has trailing bytes after the signature",
       "invalid_token_structure"
     );
-  const P = Gt(l);
+  const P = Mt(l);
   if (P !== le)
-    throw new h(
+    throw new p(
       `unexpected COSE algorithm ${P} (expected ES256K ${le})`,
       "unexpected_algorithm"
     );
-  const $ = Mt(g, k), _ = q($);
-  if (!H.verify(_, n, C, !0))
-    throw new h(
+  const $ = jt(g, E), _ = Y($);
+  if (!U.verify(_, n, C, !0))
+    throw new p(
       "COSE signature does not verify against the server's ephemeral key",
       "signature_verification_failed"
     );
-  const u = jt(x), E = u.audience.toLowerCase();
-  if (E.length !== R || !S.test(E))
-    throw new h(
+  const u = Ht(x), S = u.audience.toLowerCase();
+  if (S.length !== O || !k.test(S))
+    throw new p(
       "token `aud` is not a 32-byte x-only pubkey hex",
       "invalid_claims"
     );
   if (u.issuedAt > u.expiresAt)
-    throw new h(
+    throw new p(
       `token iat (${u.issuedAt}) is after exp (${u.expiresAt})`,
       "invalid_claims"
     );
   if (u.issuer.toLowerCase() !== e)
-    throw new h(
+    throw new p(
       `token issuer does not match pinned server pubkey: expected ${e}, got ${u.issuer.toLowerCase()}`,
       "issuer_mismatch"
     );
   if (u.subject !== r.expectedSubject)
-    throw new h(
+    throw new p(
       `token subject mismatch: expected ${r.expectedSubject}, got ${u.subject}`,
       "subject_mismatch"
     );
-  if (E !== t)
-    throw new h(
-      `token audience does not match depositor pubkey: expected ${t}, got ${E}`,
+  if (S !== t)
+    throw new p(
+      `token audience does not match depositor pubkey: expected ${t}, got ${S}`,
       "audience_mismatch"
     );
   if (u.expiresAt <= r.now)
-    throw new h(
+    throw new p(
       `token expired: exp ${u.expiresAt} <= now ${r.now}`,
       "token_expired"
     );
   if (r.responseExpiresAt !== u.expiresAt)
-    throw new h(
+    throw new p(
       `response expires_at (${r.responseExpiresAt}) does not equal token exp (${u.expiresAt})`,
       "expiry_mismatch"
     );
   if (r.serverIdentityExpiresAt < u.expiresAt)
-    throw new h(
+    throw new p(
       `server identity expires (${r.serverIdentityExpiresAt}) before token exp (${u.expiresAt})`,
       "server_identity_expires_before_token"
     );
   return {
     issuer: u.issuer,
     subject: u.subject,
-    audience: E,
+    audience: S,
     expiresAt: u.expiresAt,
     notBefore: u.notBefore,
     issuedAt: u.issuedAt
   };
 }
-function Gt(r) {
+function Mt(r) {
   if (r.length === 0)
-    throw new h(
+    throw new p(
       "empty COSE protected header (no algorithm)",
       "unexpected_algorithm"
     );
-  const e = ke(r);
+  const e = Ee(r);
   if (!(e instanceof Map))
-    throw new h(
+    throw new p(
       "COSE protected header is not a map",
       "invalid_token_structure"
     );
-  const t = e.get(Et);
+  const t = e.get(kt);
   if (typeof t != "number")
-    throw new h(
+    throw new p(
       "COSE protected header missing integer algorithm label",
       "unexpected_algorithm"
     );
   return t;
 }
-function Mt(r, e) {
+function jt(r, e) {
   return Ft(
-    Uint8Array.of(St | z),
-    Uint8Array.of(Ct | de.length),
+    Uint8Array.of(Ct | Z),
+    Uint8Array.of(Tt | de.length),
     de,
     r,
-    Uint8Array.of(Tt),
+    Uint8Array.of($t),
     e
   );
 }
-function jt(r) {
-  const e = ke(r);
+function Ht(r) {
+  const e = Ee(r);
   if (!(e instanceof Map))
-    throw new h(
+    throw new p(
       "CWT claims root is not a map",
       "invalid_claims"
     );
-  if (Ht(e, Bt, "cti").length === 0)
-    throw new h("token cti is empty", "invalid_claims");
+  if (Lt(e, Gt, "cti").length === 0)
+    throw new p("token cti is empty", "invalid_claims");
   return {
-    issuer: K(e, $t, "iss"),
-    subject: K(e, Vt, "sub"),
-    audience: K(e, It, "aud"),
-    expiresAt: J(e, Rt, "exp"),
-    notBefore: J(e, Ot, "nbf"),
-    issuedAt: J(e, Nt, "iat")
+    issuer: J(e, Vt, "iss"),
+    subject: J(e, It, "sub"),
+    audience: J(e, Rt, "aud"),
+    expiresAt: W(e, Ot, "exp"),
+    notBefore: W(e, Nt, "nbf"),
+    issuedAt: W(e, Bt, "iat")
   };
 }
-function K(r, e, t) {
+function J(r, e, t) {
   const n = r.get(e);
   if (typeof n != "string")
-    throw new h(
+    throw new p(
       `token claim ${t} is missing or not a text string`,
       "invalid_claims"
     );
   return n;
 }
-function Ht(r, e, t) {
+function Lt(r, e, t) {
   const n = r.get(e);
   if (!(n instanceof Uint8Array))
-    throw new h(
+    throw new p(
       `token claim ${t} is missing or not a byte string`,
       "invalid_claims"
     );
   return n;
 }
-function J(r, e, t) {
+function W(r, e, t) {
   const n = r.get(e);
   if (typeof n != "number" || !Number.isSafeInteger(n) || n < 0)
-    throw new h(
+    throw new p(
       `token claim ${t} is missing or not a non-negative integer timestamp`,
       "invalid_claims"
     );
   return n;
 }
-function he(r, e) {
+function pe(r, e) {
   const t = I(r).toLowerCase();
-  if (t.length !== R || !S.test(t))
-    throw new h(
+  if (t.length !== O || !k.test(t))
+    throw new p(
       `${e} must be 32-byte x-only hex; got ${t.length} chars`,
       "invalid_input"
     );
   return t;
 }
-function Lt(r) {
+function Ut(r) {
   const e = I(r).toLowerCase(), t = e.slice(0, 2);
-  if (e.length !== G || !S.test(e) || t !== "02" && t !== "03")
-    throw new h(
+  if (e.length !== j || !k.test(e) || t !== "02" && t !== "03")
+    throw new p(
       "ephemeralPubkeyHex must be 33-byte compressed pubkey hex (prefix 02/03)",
       "invalid_input"
     );
   return Ne(e);
 }
-const Ut = (() => {
+const Kt = (() => {
   const r = new Int16Array(128).fill(-1), e = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
   for (let t = 0; t < e.length; t++)
     r[e.charCodeAt(t)] = t;
@@ -1272,14 +1383,14 @@ const Ut = (() => {
 function Xt(r) {
   const e = r.length, t = Math.floor(e / 4), n = e % 4;
   if (n === 1)
-    throw new h(
+    throw new p(
       "invalid base64url length",
       "invalid_token_structure"
     );
-  const i = t * 3 + (n === 0 ? 0 : n - 1), s = new Uint8Array(i), o = (l) => {
-    const g = l < 128 ? Ut[l] : -1;
+  const i = t * 3 + (n === 0 ? 0 : n - 1), s = new Uint8Array(i), a = (l) => {
+    const g = l < 128 ? Kt[l] : -1;
     if (g < 0)
-      throw new h(
+      throw new p(
         "invalid base64url character",
         "invalid_token_structure"
       );
@@ -1287,14 +1398,14 @@ function Xt(r) {
   };
   let c = 0, d = 0;
   for (let l = 0; l < t; l++) {
-    const g = o(r.charCodeAt(c++)), m = o(r.charCodeAt(c++)), x = o(r.charCodeAt(c++)), k = o(r.charCodeAt(c++));
-    s[d++] = g << 2 | m >> 4, s[d++] = (m & 15) << 4 | x >> 2, s[d++] = (x & 3) << 6 | k;
+    const g = a(r.charCodeAt(c++)), m = a(r.charCodeAt(c++)), x = a(r.charCodeAt(c++)), E = a(r.charCodeAt(c++));
+    s[d++] = g << 2 | m >> 4, s[d++] = (m & 15) << 4 | x >> 2, s[d++] = (x & 3) << 6 | E;
   }
   if (n === 2) {
-    const l = o(r.charCodeAt(c++)), g = o(r.charCodeAt(c++));
+    const l = a(r.charCodeAt(c++)), g = a(r.charCodeAt(c++));
     s[d++] = l << 2 | g >> 4;
   } else if (n === 3) {
-    const l = o(r.charCodeAt(c++)), g = o(r.charCodeAt(c++)), m = o(r.charCodeAt(c++));
+    const l = a(r.charCodeAt(c++)), g = a(r.charCodeAt(c++)), m = a(r.charCodeAt(c++));
     s[d++] = l << 2 | g >> 4, s[d++] = (g & 15) << 4 | m >> 2;
   }
   return s;
@@ -1306,8 +1417,8 @@ function Ft(...r) {
     t.set(i, n), n += i.length;
   return t;
 }
-const pe = 4102444800, Kt = 30;
-class Jt {
+const he = 4102444800, Jt = 30;
+class Wt {
   constructor(e) {
     // `client` is the only mutable field — see `setClient`. The
     // identity-bearing fields (peginTxid/authAnchorHex/pinnedServerPubkey)
@@ -1328,7 +1439,7 @@ class Jt {
     /** Cached gRPC-subject bearer (auth_createDepositorTokenGrpc). */
     f(this, "cachedGrpc", null);
     f(this, "inFlightGrpc", null);
-    this.client = e.client, this.peginTxid = e.peginTxid, this.authAnchorHex = e.authAnchorHex, this.pinnedServerPubkey = e.pinnedServerPubkey, this.expectedAudienceXOnlyPubkey = e.expectedAudienceXOnlyPubkey, this.authGatedMethods = e.authGatedMethods, this.grpcGatedMethods = e.grpcGatedMethods, this.refreshSkewSecs = e.refreshSkewSecs ?? Kt, this.now = e.now ?? (() => Math.floor(Date.now() / 1e3));
+    this.client = e.client, this.peginTxid = e.peginTxid, this.authAnchorHex = e.authAnchorHex, this.pinnedServerPubkey = e.pinnedServerPubkey, this.expectedAudienceXOnlyPubkey = e.expectedAudienceXOnlyPubkey, this.authGatedMethods = e.authGatedMethods, this.grpcGatedMethods = e.grpcGatedMethods, this.refreshSkewSecs = e.refreshSkewSecs ?? Jt, this.now = e.now ?? (() => Math.floor(Date.now() / 1e3));
   }
   /**
    * Return a bearer token for `method`, or `null` if `method` is not
@@ -1348,7 +1459,7 @@ class Jt {
    * deterministically.
    */
   async getToken(e) {
-    return e === W || e === Y ? null : this.grpcGatedMethods.has(e) ? this.getTokenForSubject("grpc") : this.authGatedMethods.has(e) ? this.getTokenForSubject("jsonrpc") : null;
+    return e === z || e === q ? null : this.grpcGatedMethods.has(e) ? this.getTokenForSubject("grpc") : this.authGatedMethods.has(e) ? this.getTokenForSubject("jsonrpc") : null;
   }
   /**
    * Drop both cached tokens. Next `getToken` call re-acquires the slot
@@ -1381,13 +1492,13 @@ class Jt {
   acquireSingleFlight(e) {
     const t = e === "grpc" ? this.inFlightGrpc : this.inFlightJsonRpc;
     if (t) return t;
-    const n = e === "grpc" ? Y : W, i = (async () => {
+    const n = e === "grpc" ? q : z, i = (async () => {
       try {
         const s = await this.client.call(n, {
           pegin_txid: this.peginTxid,
           auth_anchor: this.authAnchorHex
         });
-        if (lt({
+        if (ut({
           proof: s.server_identity,
           pinnedServerPubkey: this.pinnedServerPubkey,
           now: this.now()
@@ -1395,20 +1506,20 @@ class Jt {
           throw new Error(
             `VpTokenProvider: invalid token in acquire response (expected non-empty string, got ${typeof s.token})`
           );
-        const o = this.now();
-        if (!Number.isSafeInteger(s.expires_at) || s.expires_at <= o || s.expires_at > pe)
+        const a = this.now();
+        if (!Number.isSafeInteger(s.expires_at) || s.expires_at <= a || s.expires_at > he)
           throw new Error(
-            `VpTokenProvider: invalid expires_at in acquire response (got ${JSON.stringify(s.expires_at)}; must be a safe integer in (${o}, ${pe}])`
+            `VpTokenProvider: invalid expires_at in acquire response (got ${JSON.stringify(s.expires_at)}; must be a safe integer in (${a}, ${he}])`
           );
         Dt({
           token: s.token,
           ephemeralPubkeyHex: s.server_identity.ephemeral_pubkey,
           expectedIssuerXOnlyPubkey: this.pinnedServerPubkey,
-          expectedSubject: e === "grpc" ? kt : At,
+          expectedSubject: e === "grpc" ? St : Et,
           expectedAudienceXOnlyPubkey: this.expectedAudienceXOnlyPubkey,
           responseExpiresAt: s.expires_at,
           serverIdentityExpiresAt: s.server_identity.expires_at,
-          now: o
+          now: a
         });
         const c = {
           token: s.token,
@@ -1422,7 +1533,7 @@ class Jt {
     return e === "grpc" ? this.inFlightGrpc = i : this.inFlightJsonRpc = i, i;
   }
 }
-class qt {
+class Yt {
   constructor() {
     f(this, "entries", /* @__PURE__ */ new Map());
   }
@@ -1449,14 +1560,14 @@ class qt {
         );
       return t.provider.setClient(e.client), t.provider;
     }
-    const n = new Jt({
+    const n = new Wt({
       client: e.client,
       peginTxid: e.peginTxid,
       authAnchorHex: e.authAnchorHex,
       pinnedServerPubkey: e.pinnedServerPubkey,
       expectedAudienceXOnlyPubkey: e.expectedAudienceXOnlyPubkey,
-      authGatedMethods: ut,
-      grpcGatedMethods: dt
+      authGatedMethods: dt,
+      grpcGatedMethods: pt
     });
     return this.entries.set(e.peginTxid, {
       provider: n,
@@ -1491,13 +1602,13 @@ class qt {
     return this.entries.size;
   }
 }
-const Ee = new qt();
-function dr(r) {
+const Se = new Yt();
+function hr(r) {
   var n;
   const e = ve(
     r.baseUrl,
     (n = r.options) == null ? void 0 : n.headers
-  ), t = Ee.getOrCreate({
+  ), t = Se.getOrCreate({
     client: e,
     peginTxid: r.peginTxid,
     authAnchorHex: r.authAnchorHex,
@@ -1506,13 +1617,13 @@ function dr(r) {
       r.depositorBtcPubkey
     )
   });
-  return new Qe(r.baseUrl, {
+  return new et(r.baseUrl, {
     ...r.options,
     tokenProvider: t
   });
 }
-function hr(r) {
-  Ee.getOrCreate({
+function gr(r) {
+  Se.getOrCreate({
     client: ve(r.baseUrl, r.headers),
     peginTxid: r.peginTxid,
     authAnchorHex: r.authAnchorHex,
@@ -1524,19 +1635,20 @@ function hr(r) {
 }
 export {
   De as O,
-  y as S,
-  Qe as V,
-  a,
-  ur as b,
-  lt as c,
-  qt as d,
-  Ee as e,
-  dr as f,
-  ar as g,
+  b as S,
+  et as V,
+  o as a,
+  pr as b,
+  ut as c,
+  Yt as d,
+  Se as e,
+  hr as f,
+  cr as g,
   lr as h,
-  cr as i,
-  hr as p,
+  dr as i,
+  ur as j,
+  gr as p,
   or as r,
   Fe as v
 };
-//# sourceMappingURL=primeVpAuth-Caa5J_uv.js.map
+//# sourceMappingURL=primeVpAuth-DkJbvywo.js.map