@babylonlabs-io/ts-sdk 0.63.0 → 0.64.0

package/dist/{buildAndBroadcastRefund-DsCd90qJ.cjs → buildAndBroadcastRefund-CYtnT0D_.cjs}

@@ -1,2 +1,2 @@
-"use strict";var we=Object.defineProperty;var Ee=(e,t,r)=>t in e?we(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var $=(e,t,r)=>Ee(e,typeof t!="symbol"?t+"":t,r);const ae=require("./BTCVaultRegistry.abi-z7d_eP22.cjs"),p=require("./bitcoin-m84N5a8o.cjs"),R=require("./signPsbtsWithFallback-DbOmw8Ou.cjs"),ke=require("viem"),w=require("./json-rpc-client-BiAmg_ho.cjs"),S=require("bitcoinjs-lib"),x=require("./verifyScriptPathSchnorrSignature-B8zK1ctE.cjs"),O=require("./noPayout-CbxQqBw1.cjs"),D=require("./signing-Bnsro0hE.cjs"),J=require("./onChainBtcPubkey-C_a2L3kL.cjs"),xe=require("./constants-DU5CGcqO.cjs"),Te=/^0x[0-9a-fA-F]{64}$/,Se=/^0x[0-9a-fA-F]{40}$/,Ce=/^0x([0-9a-fA-F]{2})*$/;function I(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!Te.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function Re(e,t){if(!Se.test(e))throw new Error(`${t} must be a 20-byte 0x-prefixed hex address (42 chars)`)}function Ae(e,t){if(!Ce.test(e))throw new Error(`${t} must be a 0x-prefixed hex string with an even number of hex chars`)}function se(e){Re(e.btcVaultRegistryAddress,"btcVaultRegistryAddress"),I(e.vaultId,"vaultId");const t=p.ensureHexPrefix(e.secret);if(I(t,"secret"),e.hashlock!==void 0&&(I(e.hashlock,"hashlock"),!R.validateSecretAgainstHashlock(t,e.hashlock)))throw new Error("Invalid secret: SHA256(secret) does not match the provided hashlock");return t}async function _e(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:n,activationMetadata:i,writeContract:l,signal:o}=e;o==null||o.throwIfAborted();const a=se({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:n});return Ae(i,"activationMetadata"),l({address:t,abi:ae.BTCVaultRegistryABI,functionName:"activateVaultWithSecret",args:[r,a,i]})}async function Be(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:n,writeContract:i,signal:l}=e;l==null||l.throwIfAborted();const o=se({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:n});return i({address:t,abi:ae.BTCVaultRegistryABI,functionName:"activateVaultWithSecretAndRedeem",args:[r,o]})}const ue=8,$e=6e3,Ie=10*6e4,Ve=10;class X extends Error{constructor(t){super(t),this.name="PeginRegistrationMissingError"}}class q extends Error{constructor(t){super(t),this.name="PeginRegistrationNotFinalError"}}function le(e){return e instanceof X||e instanceof Error&&e.name==="PeginRegistrationMissingError"}function Ke(e){return e instanceof q||e instanceof Error&&e.name==="PeginRegistrationNotFinalError"}function ee(e){const{currentBlock:t,createdAtBlock:r}=e,n=t-r+1n;return n<0n?0:Number(n)}async function He(e){const{vaultRegistryReader:t,getBlockNumber:r,vaultIds:n,required:i=ue,pollIntervalMs:l=$e,timeoutMs:o=Ie,signal:a,onProgress:s}=e;if(n.length===0)throw new Error("waitForPeginRegistrationDepth requires at least one vault ID");const u=Date.now();let h=!1,c=0,d;for(;;){if(a!=null&&a.aborted)throw new Error(`Aborted while waiting for peg-in registration depth (${n.length} vault(s))`);if(Date.now()-u>=o)throw new q(`Peg-in registration did not reach ${i} Ethereum confirmations within ${o}ms. The registration transaction was submitted but is not yet final, so the Pre-PegIn Bitcoin transaction was never sent and no funds are at risk. Resume this deposit from the dashboard once the network settles.`+(d instanceof Error?` Last read error: ${d.message}`:""));try{const g=await r(),f=await Promise.all(n.map(P=>t.getVaultBasicInfo(P))),b=f.findIndex(P=>P.depositor===ke.zeroAddress||P.createdAt===0n);if(b!==-1){if(c+=1,!h&&c>Ve)throw new X(`Vault ${n[b]} is still not visible on-chain after ${c} reads — the registration does not exist.`);console.warn(`Peg-in registration for vault ${n[b]} is not visible in chain state at block ${g} — a lagging RPC backend or an Ethereum reorg. Still polling.`),s==null||s({confirmations:0,required:i})}else{h=!0,c=0,d=void 0;let P=f[0],y=ee({currentBlock:g,createdAtBlock:f[0].createdAt});for(const E of f.slice(1)){const v=ee({currentBlock:g,createdAtBlock:E.createdAt});v<y&&(y=v,P=E)}if(s==null||s({confirmations:y,required:i}),y>=i)return{confirmations:y,basicInfo:P}}}catch(g){if(le(g))throw g;console.warn(`Registration-depth read failed (retrying in ${l}ms): `+(g instanceof Error?g.message:String(g))),d=g}await new Promise((g,f)=>{const b=()=>{clearTimeout(P),f(new Error(`Aborted while waiting for peg-in registration depth (${n.length} vault(s))`))},P=setTimeout(()=>{a==null||a.removeEventListener("abort",b),g()},l);a==null||a.addEventListener("abort",b,{once:!0})})}}const te=1,Ne=1;function Oe(e,t){const r=p.stripHexPrefix(t).toLowerCase(),i=e.map(l=>p.stripHexPrefix(l).toLowerCase()).filter(l=>l!==r);if(i.length===0)throw new Error("Cannot derive localChallengers: vault keeper set is empty (or contains only the depositor)");if(new Set(i).size!==i.length)throw new Error("Cannot derive localChallengers: duplicate vaultKeeper key — signing context is misconfigured");return i}function De(e,t,r){const n=r.map(c=>p.stripHexPrefix(c).toLowerCase()),i=t.filter(c=>n.includes(c));if(i.length>0)throw new Error(`Cannot validate challenger set: vault keepers and universal challengers overlap (${i.join(", ")})`);const l=[...t,...n],o=e.map(c=>p.stripHexPrefix(c.challenger_pubkey).toLowerCase()),a=new Set(o);if(a.size!==o.length)throw new Error("Depositor graph contains duplicate challenger entries in challenger_presign_data");const s=new Set(l),u=l.filter(c=>!a.has(c)),h=o.filter(c=>!s.has(c));if(u.length>0||h.length>0)throw new Error("Depositor graph challenger set does not match expected (local ∪ universal)"+(u.length>0?` (missing: ${u.join(", ")})`:"")+(h.length>0?` (unexpected: ${h.join(", ")})`:""))}function Fe(e,t){const r=e.ins[t];return p.uint8ArrayToHex(new Uint8Array(r.hash).slice().reverse())}function V(e,t,r,n,i){const l=e.ins[t];if(l.index!==0)throw new Error(`NoPayout (challenger ${i}) input ${t} expected to spend ${n} vout 0, got vout ${l.index}`);const o=r.getId(),a=Fe(e,t);if(a!==o)throw new Error(`NoPayout (challenger ${i}) input ${t} does not reference ${n} (expected txid ${o}, got ${a})`)}async function Me(e,t,r){const n=[],i=[],l=[],o=Oe(r.vaultKeeperBtcPubkeys,r.depositorBtcPubkey);De(e.challenger_presign_data,o,r.universalChallengerBtcPubkeys);const a=await x.buildPayoutPsbt({vaultCoreVersion:r.vaultCoreVersion,vkClaimerPayoutScriptPubKeys:r.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:r.vpCommissionScriptPubKey,payoutTxHex:e.payout_tx.tx_hex,peginTxHex:r.peginTxHex,assertTxHex:e.assert_tx.tx_hex,timelockAssert:r.timelockAssert,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:r.universalChallengerBtcPubkeys,timelockPegin:r.timelockPegin,network:r.network,claimerBtcPubkey:r.depositorBtcPubkey,registeredPayoutScriptPubKey:r.registeredPayoutScriptPubKey,commissionBps:Ne,protocolFeeRate:r.protocolFeeRate,councilSize:r.councilMembers.length});n.push(a.psbtHex),i.push(D.createTaprootScriptPathSignOptions(t,te));const s=p.stripHexPrefix(r.depositorBtcPubkey),u=S.Transaction.fromHex(p.stripHexPrefix(e.assert_tx.tx_hex));for(const h of e.challenger_presign_data){const c=p.stripHexPrefix(h.challenger_pubkey),d=n.length,g=await Ue({challenger:h,challengerPubkey:c,claimerPubkey:s,localChallengers:o,assertTxParsed:u,ctx:r});n.push(g),i.push(D.createTaprootScriptPathSignOptions(t,te)),l.push({challengerPubkey:c,noPayoutIdx:d})}return{psbtHexes:n,signOptions:i,challengerEntries:l}}async function Ue(e){const{challenger:t,challengerPubkey:r,claimerPubkey:n,localChallengers:i,assertTxParsed:l,ctx:o}=e;O.assertNoPayoutOutputMatchesChallenger(t.nopayout_tx.tx_hex,r,o.network);const a=S.Transaction.fromHex(p.stripHexPrefix(t.nopayout_tx.tx_hex)),s=S.Transaction.fromHex(p.stripHexPrefix(t.challenge_assert_x_tx.tx_hex)),u=S.Transaction.fromHex(p.stripHexPrefix(t.challenge_assert_y_tx.tx_hex));if(a.ins.length!==3)throw new Error(`NoPayout (challenger ${r}) must have exactly 3 inputs, got ${a.ins.length}`);V(a,0,l,"Assert",r),V(a,1,s,"ChallengeAssertX",r),V(a,2,u,"ChallengeAssertY",r);const h=[l.outs[0],s.outs[0],u.outs[0]].map(c=>({script_pubkey:p.uint8ArrayToHex(new Uint8Array(c.script)),value:c.value}));return O.buildNoPayoutPsbt({noPayoutTxHex:t.nopayout_tx.tx_hex,challengerPubkey:r,prevouts:h,connectorParams:{txGraphVersion:o.vaultCoreVersion,claimer:n,localChallengers:i,universalChallengers:o.universalChallengerBtcPubkeys,timelockAssert:o.timelockAssert,councilMembers:o.councilMembers,councilQuorum:o.councilQuorum}})}function Le(e,t,r){x.assertPsbtUnsignedTxMatches(e[0]);const i=x.extractPayoutSignature(e[0].returnedPsbtHex,r);x.assertScriptPathSchnorrSignature({requestedPsbtHex:e[0].requestedPsbtHex,signatureHex:i,signerXOnlyPubkeyHex:r,inputIndex:0});const l={};for(const o of t){x.assertPsbtUnsignedTxMatches(e[o.noPayoutIdx]);const a=x.extractPayoutSignature(e[o.noPayoutIdx].returnedPsbtHex,r);x.assertScriptPathSchnorrSignature({requestedPsbtHex:e[o.noPayoutIdx].requestedPsbtHex,signatureHex:a,signerXOnlyPubkeyHex:r,inputIndex:0}),l[o.challengerPubkey]={nopayout_signature:a}}return{payout_signatures:{payout_signature:i},per_challenger:l}}async function ce(e){const{depositorGraph:t,btcWallet:r,signingContext:n}=e,i=await r.getPublicKeyHex(),{depositorPubkey:l}=p.validateWalletPubkey(i,p.stripHexPrefix(n.depositorBtcPubkey)),{psbtHexes:o,signOptions:a,challengerEntries:s}=await Me(t,i,n),u=await R.signPsbtsWithFallback(r,o,a),h=o.map((c,d)=>({requestedPsbtHex:c,returnedPsbtHex:u[d]}));return Le(h,s,l)}const ze=1e4;async function G(e){const{statusReader:t,peginTxid:r,targetStatuses:n,timeoutMs:i,pollIntervalMs:l=ze,signal:o}=e,a=Date.now();for(;;){if(o!=null&&o.aborted)throw new Error(`Polling aborted for pegin ${r.slice(0,8)}… (target: ${[...n].join(", ")})`);if(Date.now()-a>=i)throw new Error(`Polling timeout after ${i}ms for pegin ${r.slice(0,8)}… (target: ${[...n].join(", ")})`);try{const s=await t.getPeginStatus({pegin_txid:r},o);if(s.pegin_txid.toLowerCase()!==r.toLowerCase())throw new Error(`getPeginStatus returned status for pegin ${s.pegin_txid.slice(0,8)}…, requested ${r.slice(0,8)}…`);const u=s.status;if(n.has(u)||u===w.DaemonStatus.ACTIVATED)return u;if(u===w.DaemonStatus.EXPIRED||w.VP_TERMINAL_FAILURE_STATUSES.has(u))throw new Error(`Pegin ${r.slice(0,8)}… reached terminal status "${u}" while waiting for ${[...n].join(", ")}`)}catch(s){if(!(s instanceof w.JsonRpcError&&s.code===w.RpcErrorCode.PEGIN_NOT_FOUND))throw s}await new Promise((s,u)=>{const h=()=>{clearTimeout(c),u(new Error(`Polling aborted for pegin ${r.slice(0,8)}… (target: ${[...n].join(", ")})`))},c=setTimeout(()=>{o==null||o.removeEventListener("abort",h),s()},l);o==null||o.addEventListener("abort",h,{once:!0})})}}const Xe=1200*1e3,he=new Set([w.DaemonStatus.PENDING_ACKS,w.DaemonStatus.PENDING_ACTIVATION,w.DaemonStatus.ACTIVATED_PENDING_BROADCAST,w.DaemonStatus.ACTIVATED]),qe=new Set([w.DaemonStatus.PENDING_DEPOSITOR_SIGNATURES,...he]);function Ge(e){return e.map(t=>({claimerPubkeyXOnly:p.processPublicKeyToXOnly(t.claimer_pubkey),payoutTxHex:t.payout_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex}))}function T(e){return p.processPublicKeyToXOnly(e).toLowerCase()}function je(e,t){const r=(s,u,h)=>{throw new Error(`Deposit terms ${s} (${String(u)}) does not match the vault's version-locked signing context (${String(h)}); refusing to sign payouts against terms that describe a different graph.`)},n=[["protocolFeeRate",e.protocolFeeRate,t.protocolFeeRate],["vaultCoreVersion",e.vaultCoreVersion,t.vaultCoreVersion],["timelockPegin",e.timelockPegin,t.timelockPegin],["timelockAssert",e.timelockAssert,t.timelockAssert]];for(const[s,u,h]of n)u!==h&&r(s,u,h);const i=s=>s.map(T).sort(),l=(s,u)=>{const h=i(s),c=i(u);return h.length===c.length&&h.every((d,g)=>d===c[g])};l(e.vaultKeeperBtcPubkeys,t.vaultKeeperBtcPubkeys)||r("vaultKeeperBtcPubkeys",e.vaultKeeperBtcPubkeys.join(","),t.vaultKeeperBtcPubkeys.join(",")),l(e.universalChallengerBtcPubkeys,t.universalChallengerBtcPubkeys)||r("universalChallengerBtcPubkeys",e.universalChallengerBtcPubkeys.join(","),t.universalChallengerBtcPubkeys.join(","));const o=T(t.vaultProviderBtcPubkey),a=e.vaults.map(s=>T(s.vaultProviderBtcPubkey));a.includes(o)||r("vaults[].vaultProviderBtcPubkey",a.join(",")||"<no vaults>",t.vaultProviderBtcPubkey)}function We(e,t,r,n){const i=T(n),l=[T(t),...r.map(T)],o=new Set(l);if(o.size!==l.length)throw new Error("Cannot validate claimer set: signing context contains duplicate vault provider or vault keeper key");if(o.has(i))throw new Error("Cannot validate claimer set: depositor key overlaps with vault provider or vault keeper set");const a=e.map(d=>T(d.claimer_pubkey));if(new Set(a).size!==a.length)throw new Error("Presign response contains duplicate claimer entries");const s=a.filter(d=>d!==i),u=new Set(s),h=l.filter(d=>!u.has(d)),c=s.filter(d=>!o.has(d));if(h.length>0||c.length>0)throw new Error("Presign response claimer set does not match expected (vault provider ∪ vault keepers)"+(h.length>0?` (missing: ${h.join(", ")})`:"")+(c.length>0?` (unexpected: ${c.join(", ")})`:""))}function re(e,t){return{vaultCoreVersion:t.vaultCoreVersion,payoutTxHex:e.payoutTxHex,peginTxHex:t.peginTxHex,assertTxHex:e.assertTxHex,vaultProviderBtcPubkey:t.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:t.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:t.universalChallengerBtcPubkeys,depositorBtcPubkey:t.depositorBtcPubkey,timelockPegin:t.timelockPegin,timelockAssert:t.timelockAssert,registeredPayoutScriptPubKey:t.registeredPayoutScriptPubKey,claimerBtcPubkey:e.claimerPubkeyXOnly,commissionBps:t.commissionBps,protocolFeeRate:t.protocolFeeRate,councilSize:t.councilMembers.length,vkClaimerPayoutScriptPubKeys:t.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:t.vpCommissionScriptPubKey}}async function Qe(e,t,r,n){const i=new R.PayoutManager({network:t.network,btcWallet:e}),l=r.length;n==null||n(0,l);let o;if(i.supportsBatchSigning())o=(await i.signPayoutTransactionsBatch(r.map(u=>re(u,t)))).map(u=>u.payoutSignature);else{o=[];for(let s=0;s<r.length;s++){n==null||n(s,l);const u=await i.signPayoutTransaction(re(r[s],t));o.push(u.signature)}}const a={};for(let s=0;s<r.length;s++)a[r[s].claimerPubkeyXOnly]={payout_signature:o[s]};return n==null||n(l,l),a}async function Ye(e){const{statusReader:t,presignClient:r,btcWallet:n,peginTxid:i,depositorPk:l,signingContext:o,depositTerms:a,timeoutMs:s=Xe,signal:u,onProgress:h}=e,c=await G({statusReader:t,peginTxid:i,targetStatuses:qe,timeoutMs:s,signal:u});if(he.has(c))return;if(u==null||u.throwIfAborted(),a!==void 0&&je(a,o),R.supportsDepositApproval(n)){if(!a)throw new Error("runDepositorPresignFlow: this wallet requires approved deposit terms but none were provided. Fresh deposits must pass PreparePeginResult.depositTerms; resume-path rebuild is not wired yet.");await n.approveDepositTerms(a)}const d=await r.requestDepositorPresignTransactions({pegin_txid:i,depositor_pk:l},u);u==null||u.throwIfAborted();const g=T(l);We(d.txs,o.vaultProviderBtcPubkey,o.vaultKeeperBtcPubkeys,l);const f=d.txs.filter(v=>T(v.claimer_pubkey)!==g),b=Ge(f),P=await Qe(n,o,b,h);u==null||u.throwIfAborted();const y=await ce({depositorGraph:d.depositor_graph,btcWallet:n,signingContext:{vaultCoreVersion:o.vaultCoreVersion,peginTxHex:o.peginTxHex,depositorBtcPubkey:l,vaultProviderBtcPubkey:o.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:o.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:o.universalChallengerBtcPubkeys,timelockPegin:o.timelockPegin,timelockAssert:o.timelockAssert,councilMembers:o.councilMembers,councilQuorum:o.councilQuorum,network:o.network,registeredPayoutScriptPubKey:o.registeredPayoutScriptPubKey,protocolFeeRate:o.protocolFeeRate,vkClaimerPayoutScriptPubKeys:o.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:o.vpCommissionScriptPubKey}});u==null||u.throwIfAborted();const E={...P};E[p.stripHexPrefix(l)]=y.payout_signatures,await r.submitDepositorPresignatures({pegin_txid:i,depositor_pk:l,signatures:E,depositor_claimer_presignatures:y},u)}const Ze=300*1e3,Je=new Set([w.DaemonStatus.PENDING_DEPOSITOR_WOTS_PK,...w.POST_WOTS_STATUSES]);async function et(e){const{statusReader:t,wotsSubmitter:r,peginTxid:n,depositorPk:i,wotsPublicKeys:l,timeoutMs:o=Ze,signal:a}=e;a==null||a.throwIfAborted();const s=await G({statusReader:t,peginTxid:n,targetStatuses:Je,timeoutMs:o,signal:a});w.POST_WOTS_STATUSES.has(s)||(a==null||a.throwIfAborted(),await r.submitDepositorWotsKey({pegin_txid:n,depositor_pk:i,wots_public_keys:l},a))}function B(e){return e.registration||e.operation}function pe(e,t,r){const n=p.canonicalizeBtcPubkey(e);return{registration:n===p.canonicalizeBtcPubkey(t),operation:n===p.canonicalizeBtcPubkey(r)}}function F(e,t,r){const n=K(e);return{registration:ne(n,K(t)),operation:ne(n,K(r))}}function K(e){return e.map(p.canonicalizeBtcPubkey).sort()}function ne(e,t){return e.length===t.length&&e.every((r,n)=>r===t[n])}async function tt(e){const{vaultProviderEthAddress:t,hintBtcPubkey:r,registrationBtcPubkey:n,readCurrentOperationBtcPubkey:i,context:l}=e;if(!r)return;const o=p.canonicalizeBtcPubkey(r);if(o===p.canonicalizeBtcPubkey(n))return;const a=p.canonicalizeBtcPubkey(await i());if(o!==a)throw new Error(`Vault provider BTC pubkey mismatch for ${t}: indexer hint matches neither the registration key nor the current operation key on-chain.${l?` ${l}`:""}`)}function H(e,t,r){const n=`${e} operation key (admin=${t.ethAddress})`,i=J.assertOnChainBtcPubkey(t.btcPubKey,`${e} roster key (admin=${t.ethAddress})`),l=J.assertOnChainBtcPubkey(r,n);return{adminAddress:t.ethAddress,genesisBtcPubkey:i,operationBtcPubkey:l,rotated:l!==i}}function rt(e){const t=new Map;for(const r of e){const n=t.get(r.operationBtcPubkey);if(n)throw new Error(`Participant operation key collision: ${n} and ${r.adminAddress} both resolve to operation key ${r.operationBtcPubkey}`);t.set(r.operationBtcPubkey,r.adminAddress)}}function de(e,t,r){if(t.vaultKeepers.length!==e.vaultKeepers.length||t.universalChallengers.length!==e.universalChallengers.length)throw new Error(`Operation-key resolution returned ${t.vaultKeepers.length} keeper and ${t.universalChallengers.length} challenger keys for a roster of ${e.vaultKeepers.length} keepers and ${e.universalChallengers.length} challengers`);const n=H("vault provider",{ethAddress:e.vaultProviderEthAddress,btcPubKey:e.vaultProviderGenesisBtcPubkey},t.vaultProvider),i=e.vaultKeepers.map((o,a)=>H("vault keeper",o,t.vaultKeepers[a])),l=e.universalChallengers.map((o,a)=>H("universal challenger",o,t.universalChallengers[a]));return rt([n,...i,...l]),{vaultProvider:n,vaultKeepers:i,universalChallengers:l,vaultKeeperOperationKeysSorted:i.map(o=>o.operationBtcPubkey).sort(),universalChallengerOperationKeysSorted:l.map(o=>o.operationBtcPubkey).sort(),resolvedAt:r,query:e}}async function ge(e){const t=await e.operationKeyReader.getCurrentOperationKeys(e.query);return de(e.query,t,{mode:"current"})}async function fe(e){const t=await e.operationKeyReader.getOperationKeysAtEpochs(e.query,e.epochs);return de(e.query,t,{mode:"epochs",epochs:e.epochs})}const oe=e=>e.map(p.canonicalizeBtcPubkey).sort();async function nt(e){const{vaultRegistryReader:t,vaultKeeperReader:r,universalChallengerReader:n,vaultProviderEthAddress:i,applicationEntryPoint:l,expectedVaultProviderBtcPubkey:o,expectedVaultKeeperBtcPubkeys:a,expectedUniversalChallengerBtcPubkeys:s,operationKeyReader:u,onIndexerServingOperationKeys:h,onIndexerHintsInconsistent:c}=e,[d,g,f]=await Promise.all([t.getVaultProviderGenesisBtcPubKey(i),r.getCurrentVaultKeepersVersion(l),n.getLatestUniversalChallengersVersion()]),[b,P]=await Promise.all([r.getVaultKeepersByVersion(l,g),n.getUniversalChallengersByVersion(f)]),y={vaultProvider:p.canonicalizeBtcPubkey(d),vaultKeepers:oe(b.map(k=>k.btcPubKey)),universalChallengers:oe(P.map(k=>k.btcPubKey))},E=await ge({operationKeyReader:u,query:{vaultProviderEthAddress:i,vaultProviderGenesisBtcPubkey:`0x${d}`,applicationEntryPoint:l,vaultKeepers:b,universalChallengers:P}}),v={vaultProvider:E.vaultProvider.operationBtcPubkey,vaultKeepers:[...E.vaultKeeperOperationKeysSorted],universalChallengers:[...E.universalChallengerOperationKeysSorted]},C=pe(o,y.vaultProvider,v.vaultProvider),A=F(a,y.vaultKeepers,v.vaultKeepers),_=F(s,y.universalChallengers,v.universalChallengers);if(!B(C))throw new Error(`Vault provider BTC pubkey indexer hint does not match BTCVaultRegistry for ${i}. Refresh and try again.`);if(!B(A))throw new Error(`Vault keeper BTC pubkeys (v${g}) indexer set does not match ApplicationRegistry on-chain set. Refresh and try again.`);if(!B(_))throw new Error(`Universal challenger BTC pubkeys (v${f}) indexer set does not match ProtocolParams on-chain set. Refresh and try again.`);const m=[C,A,_],be=m.some(k=>k.registration&&!k.operation),Z=m.some(k=>k.operation&&!k.registration);if(be&&Z){const k=`Indexer participant hints are internally inconsistent for vault provider ${i}: some roles match the registration keys while others match the rotated operation keys.`;throw c==null||c(k),new Error(`${k} Refresh and try again.`)}return Z&&(h==null||h(`Indexer is serving rotated operation keys for vault provider ${i}`)),{vaultProviderBtcPubkeyXOnly:v.vaultProvider,vaultKeeperBtcPubkeysSorted:v.vaultKeepers,universalChallengerBtcPubkeysSorted:v.universalChallengers,expectedAppVaultKeepersVersion:g,expectedUniversalChallengersVersion:f,registrationKeys:y,participantKeys:E}}function ot(e){return/^[0-9a-fA-F]{64}$/.test(e)}function it(e){const{amountSats:t,minDeposit:r,maxDeposit:n,btcBalance:i,estimatedFeeSats:l,depositorClaimValue:o}=e;return!(t<=0n||t<r||n&&n>0n&&t>n||l==null||o==null||t+l+o>i)}function at(e,t,r){return e<=0n?{valid:!1,error:"Deposit amount must be greater than zero"}:e<t?{valid:!1,error:`Minimum deposit is ${p.formatSatoshisToBtc(t)} BTC`}:r&&r>0n&&e>r?{valid:!1,error:`Maximum deposit is ${p.formatSatoshisToBtc(r)} BTC`}:{valid:!0}}function st(e){const{amount:t,effectiveRemaining:r}=e;return r===null?{valid:!0}:r===0n?{valid:!1,error:"Supply cap reached — deposits temporarily paused"}:t>r?{valid:!1,error:`Vault size exceeds remaining capacity (${p.formatSatoshisToBtc(r)} BTC)`}:{valid:!0}}function ut(e,t){if(!e||e.length===0)return{valid:!1,error:"At least one vault provider must be selected"};const r=t.map(i=>i.toLowerCase());return e.filter(i=>!r.includes(i.toLowerCase())).length>0?{valid:!1,error:"Invalid vault provider selected"}:{valid:!0}}function Pe(e,t,r){if(!e||e.length===0)return{valid:!1,error:"At least one vault amount required"};for(let n=0;n<e.length;n++){const i=e[n];if(i<=0n)return{valid:!1,error:`Vault ${n+1} amount must be positive`};if(t&&i<t)return{valid:!1,error:`Vault ${n+1} amount ${p.formatSatoshisToBtc(i)} BTC is below minimum deposit ${p.formatSatoshisToBtc(t)} BTC`};if(r&&i>r)return{valid:!1,error:`Vault ${n+1} amount ${p.formatSatoshisToBtc(i)} BTC exceeds maximum deposit ${p.formatSatoshisToBtc(r)} BTC`}}return{valid:!0}}function ye(e){const t=p.stripHexPrefix(e);return ot(t)?{valid:!0}:{valid:!1,error:"Invalid pubkey format: must be 64 hex characters (32-byte x-only public key, no 0x prefix)"}}function lt(e){if(!e||e.length===0)throw new Error("No vault keepers available. The system requires at least one vault keeper to create a deposit.")}function ct(e){if(!e||e.length===0)throw new Error("No universal challengers available. The system requires at least one universal challenger to create a deposit.")}function ht(e){if(e.length===0)throw new Error("No spendable UTXOs available")}function pt(e){const{vaultAmounts:t,confirmedUTXOs:r,vaultProviderBtcPubkey:n,vaultKeeperBtcPubkeys:i,universalChallengerBtcPubkeys:l,minDeposit:o,maxDeposit:a}=e,s=Pe(t,o,a);if(!s.valid)throw new Error(s.error);const u=ye(n);if(!u.valid)throw new Error(u.error);lt(i),ct(l),ht(r)}class j extends Error{constructor(t){super(t),this.name="ParticipantKeyDriftError"}}function dt(e){return e instanceof j||e instanceof Error&&e.name==="ParticipantKeyDriftError"}function ie(e,t,r){return t.length===r.length&&t.every((n,i)=>n===r[i])?null:`${e} expected [${t.join(", ")}], got [${r.join(", ")}]`}async function gt(e){const{vaultRegistryReader:t,operationKeyReader:r,vaultIds:n,expected:i}=e,l=i.query;if(n.length===0)return;const o=await t.getVaultKeyEpochsBatch(n),a=[];for(const[s,u]of o.entries()){const h=n[s];let c;try{c=await fe({operationKeyReader:r,query:l,epochs:u})}catch(f){a.push(`vault ${h}: could not resolve participants at frozen epochs (vp=${u.vpKeyEpoch}, keeper=${u.appKeeperKeyEpoch}, uc=${u.ucKeyEpoch}): ${f.message}`);continue}c.vaultProvider.operationBtcPubkey!==i.vaultProvider.operationBtcPubkey&&a.push(`vault ${h}: vault provider key expected ${i.vaultProvider.operationBtcPubkey}, got ${c.vaultProvider.operationBtcPubkey}`);const d=ie(`vault ${h}: vault keeper keys`,i.vaultKeeperOperationKeysSorted,c.vaultKeeperOperationKeysSorted);d&&a.push(d);const g=ie(`vault ${h}: universal challenger keys`,i.universalChallengerOperationKeysSorted,c.universalChallengerOperationKeysSorted);g&&a.push(g)}if(a.length>0)throw new j(`Aborting BTC broadcast: participant operation keys changed during registration (${a.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class W extends Error{constructor(t){super(t),this.name="RegisteredVaultVersionMismatchError"}}function ft(e){return e instanceof W||e instanceof Error&&e.name==="RegisteredVaultVersionMismatchError"}async function Pt(e){const{vaultRegistryReader:t,vaultIds:r,expectedOffchainParamsVersion:n,expectedAppVaultKeepersVersion:i,expectedUniversalChallengersVersion:l,expectedVaultCoreVersion:o}=e,a=await t.getProtocolInfoBatch(r),s=[];if(a.forEach((u,h)=>{const c=r[h];u.offchainParamsVersion!==n&&s.push(`vault ${c}: offchainParams expected v${n}, got v${u.offchainParamsVersion}`),u.appVaultKeepersVersion!==i&&s.push(`vault ${c}: appVaultKeepers expected v${i}, got v${u.appVaultKeepersVersion}`),u.universalChallengersVersion!==l&&s.push(`vault ${c}: universalChallengers expected v${l}, got v${u.universalChallengersVersion}`),u.vaultCoreVersion!==o&&s.push(`vault ${c}: vaultCoreVersion expected v${o} (build-time active), got v${u.vaultCoreVersion}`)}),s.length>0)throw new W(`Aborting BTC broadcast: signer-set or offchain-params versions changed during registration (${s.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}var Q=(e=>(e.CLAIM_EVENT_RECEIVED="ClaimEventReceived",e.CLAIM_BROADCAST="ClaimBroadcast",e.ASSERT_BROADCAST="AssertBroadcast",e.PAYOUT_BROADCAST="PayoutBroadcast",e.PAYOUT_BLOCKED="PayoutBlocked",e))(Q||{});const yt=new Set(["PayoutBroadcast","PayoutBlocked"]);function vt(e){return Object.values(Q).includes(e)}function mt(e){return!!e&&yt.has(e)}class ve extends Error{constructor(r,n){super(`Refund not yet mature (BIP68 not final): ${n.message}`);$(this,"vaultId");$(this,"cause");this.name="BIP68NotMatureError",this.vaultId=r,this.cause=n}}const bt=/^0x[0-9a-fA-F]{64}$/,wt=/^(?:0x)?(?:[0-9a-fA-F]{2})+$/,me=/^(?:0x)?(?:[0-9a-fA-F]{64}|[0-9a-fA-F]{66})$/,Y=160,M=2e3,U=10n,L=100n;function Et(e){if(!Number.isFinite(e)||e<=0)throw new Error(`feeRateSatsVb must be a positive finite number, got ${e}`);return BigInt(Math.ceil(e*Y))}const kt=1,xt=/non-BIP68-final/i;function z(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!bt.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function N(e,t){if(!Number.isInteger(e)||e<0)throw new Error(`${t} must be a non-negative integer, got ${e}`)}function Tt(e){if(z(e.hashlock,"hashlock"),!Number.isInteger(e.htlcVout)||e.htlcVout<0)throw new Error(`htlcVout must be a non-negative integer, got ${e.htlcVout}`);if(!Array.isArray(e.batch)||e.batch.length===0)throw new Error("batch must be a non-empty array of HTLC entries");if(e.htlcVout>=e.batch.length)throw new Error(`htlcVout ${e.htlcVout} is out of range for batch of size ${e.batch.length}`);for(let r=0;r<e.batch.length;r++){const n=e.batch[r];if(z(n.hashlock,`batch[${r}].hashlock`),!Number.isInteger(n.htlcVout)||n.htlcVout!==r)throw new Error(`batch[${r}].htlcVout must equal ${r} (contiguous vout-ordered vector), got ${n.htlcVout}`);if(typeof n.amount!="bigint"||n.amount<=0n)throw new Error(`batch[${r}].amount must be a positive bigint, got ${n.amount}`)}const t=e.batch[e.htlcVout];if(t.hashlock.toLowerCase()!==e.hashlock.toLowerCase())throw new Error(`batch[${e.htlcVout}].hashlock (${t.hashlock}) does not match target hashlock (${e.hashlock})`);if(t.amount!==e.amount)throw new Error(`batch[${e.htlcVout}].amount (${t.amount}) does not match target amount (${e.amount})`);if(N(e.offchainParamsVersion,"offchainParamsVersion"),N(e.appVaultKeepersVersion,"appVaultKeepersVersion"),N(e.universalChallengersVersion,"universalChallengersVersion"),xe.assertValidVaultCoreVersion(e.vaultCoreVersion,"VaultRefundData.vaultCoreVersion"),typeof e.unsignedPrePeginTxHex!="string"||e.unsignedPrePeginTxHex.length===0)throw new Error("unsignedPrePeginTxHex must be a non-empty hex string");if(!wt.test(e.unsignedPrePeginTxHex))throw new Error("unsignedPrePeginTxHex must be a hex byte string (optional 0x prefix, even length)");if(!e.depositorBtcPubkey||!me.test(e.depositorBtcPubkey))throw new Error("depositorBtcPubkey must be 32 or 33 bytes of hex (optional 0x prefix)");if(typeof e.amount!="bigint"||e.amount<=0n)throw new Error(`amount must be a positive bigint, got ${e.amount}`)}function St(e){if(!e.vaultProviderPubkey||!me.test(e.vaultProviderPubkey))throw new Error("vaultProviderPubkey must be 32 or 33 bytes of hex");if(e.vaultKeeperPubkeys.length===0)throw new Error("vaultKeeperPubkeys must be non-empty");if(e.universalChallengerPubkeys.length===0)throw new Error("universalChallengerPubkeys must be non-empty");if(!Number.isInteger(e.timelockRefund)||e.timelockRefund<=0)throw new Error(`timelockRefund must be a positive integer, got ${e.timelockRefund}`);if(typeof e.feeRate!="bigint"||e.feeRate<=0n)throw new Error(`protocol feeRate must be a positive bigint, got ${e.feeRate}`);if(typeof e.minPeginFeeRate!="bigint"||e.minPeginFeeRate<=0n)throw new Error(`minPeginFeeRate must be a positive bigint, got ${e.minPeginFeeRate}`);if(!Number.isInteger(e.numLocalChallengers)||e.numLocalChallengers<0)throw new Error("numLocalChallengers must be a non-negative integer");if(!Number.isInteger(e.councilQuorum)||!Number.isInteger(e.councilSize)||e.councilQuorum<=0||e.councilSize<=0||e.councilQuorum>e.councilSize)throw new Error(`councilQuorum (${e.councilQuorum}) must be in [1, councilSize=${e.councilSize}]`)}function Ct(e){const t=S.Psbt.fromHex(e);try{t.finalizeAllInputs()}catch(r){const n=r instanceof Error?r.message:String(r);if(!n.includes("already finalized"))throw new Error(`Failed to finalize refund PSBT: ${n}`)}return t.extractTransaction().toHex()}async function Rt(e){const{vaultId:t,readVault:r,readPrePeginContext:n,feeRate:i,signPsbt:l,broadcastTx:o,signal:a}=e;a==null||a.throwIfAborted(),z(t,"vaultId");const s=await r();Tt(s),a==null||a.throwIfAborted();const u=await n(s);if(St(u),a==null||a.throwIfAborted(),!Number.isFinite(i)||i<=0)throw new Error(`feeRate must be a positive number, got ${i}`);if(i>M)throw new Error(`feeRate ${i} sat/vB exceeds refund safety cap ${M} sat/vB; refusing to sign refund.`);const h=BigInt(Math.ceil(i*Y)),c=s.amount*U/L;if(h>c)throw new Error(`Refund fee ${h} sats exceeds the per-vault safety cap of ${c} sats (${U}/${L} of vault.amount=${s.amount}); refusing to sign refund.`);a==null||a.throwIfAborted();const d=p.processPublicKeyToXOnly(s.depositorBtcPubkey),g=p.stripHexPrefix(s.unsignedPrePeginTxHex),f=R.findAuthAnchorOpReturn(g);if(f!==void 0&&f.vout!==s.batch.length)throw new Error(`Auth-anchor OP_RETURN at vout ${f.vout} does not match batch size (${s.batch.length} HTLC outputs expect the anchor at vout ${s.batch.length}). Refund refused — sibling HTLC vector is incomplete.`);const b=f==null?void 0:f.hash;let P;try{P=S.Transaction.fromHex(g)}catch(m){throw new Error(`Failed to parse funded Pre-PegIn transaction hex: ${m instanceof Error?m.message:String(m)}`)}if(P.outs.length<s.batch.length)throw new Error(`Funded Pre-PegIn tx has ${P.outs.length} outputs but batch requires at least ${s.batch.length} HTLC outputs. Refund refused — funded tx shape disagrees with sibling vector.`);const{psbtHex:y}=await O.buildRefundPsbt({prePeginParams:{vaultCoreVersion:s.vaultCoreVersion,depositorPubkey:d,vaultProviderPubkey:p.stripHexPrefix(u.vaultProviderPubkey),vaultKeeperPubkeys:u.vaultKeeperPubkeys.map(p.stripHexPrefix),universalChallengerPubkeys:u.universalChallengerPubkeys.map(p.stripHexPrefix),hashlocks:s.batch.map(m=>p.stripHexPrefix(m.hashlock)),timelockRefund:u.timelockRefund,pegInAmounts:s.batch.map(m=>m.amount),feeRate:u.feeRate,minPeginFeeRate:u.minPeginFeeRate,numLocalChallengers:u.numLocalChallengers,councilQuorum:u.councilQuorum,councilSize:u.councilSize,network:u.network,authAnchorHash:b},fundedPrePeginTxHex:g,htlcVout:s.htlcVout,refundFee:h,hashlock:p.stripHexPrefix(s.hashlock)});a==null||a.throwIfAborted();const E=D.createTaprootScriptPathSignOptions(s.depositorBtcPubkey,kt),v=await l(y,E);x.assertPsbtUnsignedTxMatches({requestedPsbtHex:y,returnedPsbtHex:v});const C=0,A=x.extractPayoutSignature(v,d,C);x.assertScriptPathSchnorrSignature({requestedPsbtHex:y,signatureHex:A,signerXOnlyPubkeyHex:d,inputIndex:C});const _=Ct(v);a==null||a.throwIfAborted();try{return await o(_)}catch(m){throw m instanceof Error&&xt.test(m.message)?new ve(t,m):m}}exports.BIP68NotMatureError=ve;exports.ClaimerPegoutStatusValue=Q;exports.PEGIN_ETH_CONFIRMATIONS=ue;exports.ParticipantKeyDriftError=j;exports.PeginRegistrationMissingError=X;exports.PeginRegistrationNotFinalError=q;exports.REFUND_MAX_FEE_FRACTION_DENOMINATOR=L;exports.REFUND_MAX_FEE_FRACTION_NUMERATOR=U;exports.REFUND_MAX_FEE_RATE_SATS_VB=M;exports.REFUND_VSIZE=Y;exports.RegisteredVaultVersionMismatchError=W;exports.activateVault=_e;exports.activateVaultAndRedeem=Be;exports.assertVaultProviderHintAccepted=tt;exports.buildAndBroadcastRefund=Rt;exports.estimateRefundFeeSats=Et;exports.isDepositAmountValid=it;exports.isHintAccepted=B;exports.isParticipantKeyDriftError=dt;exports.isPeginRegistrationMissingError=le;exports.isPeginRegistrationNotFinalError=Ke;exports.isPegoutTerminalStatus=mt;exports.isRecognizedPegoutStatus=vt;exports.isRegisteredVaultVersionMismatchError=ft;exports.matchKeyHint=pe;exports.matchKeySetHint=F;exports.resolveCurrentParticipantKeys=ge;exports.resolveParticipantKeysAtEpochs=fe;exports.runDepositorPresignFlow=Ye;exports.signDepositorGraph=ce;exports.submitWotsPublicKey=et;exports.validateDepositAmount=at;exports.validateMultiVaultDepositInputs=pt;exports.validateOnChainParticipantKeys=nt;exports.validateProviderSelection=ut;exports.validateRemainingCapacity=st;exports.validateVaultAmounts=Pe;exports.validateVaultProviderPubkey=ye;exports.verifyRegisteredParticipantKeys=gt;exports.verifyRegisteredVaultVersions=Pt;exports.waitForPeginRegistrationDepth=He;exports.waitForPeginStatus=G;
-//# sourceMappingURL=buildAndBroadcastRefund-DsCd90qJ.cjs.map
+"use strict";var we=Object.defineProperty;var Ee=(e,t,r)=>t in e?we(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var $=(e,t,r)=>Ee(e,typeof t!="symbol"?t+"":t,r);const ae=require("./BTCVaultRegistry.abi-z7d_eP22.cjs"),p=require("./bitcoin-m84N5a8o.cjs"),R=require("./signPsbtsWithFallback-PTgWxsG3.cjs"),ke=require("viem"),w=require("./json-rpc-client-BiAmg_ho.cjs"),S=require("bitcoinjs-lib"),x=require("./verifyScriptPathSchnorrSignature-DPAd_qke.cjs"),O=require("./noPayout-CnQ1WLtr.cjs"),D=require("./signing-Bnsro0hE.cjs"),J=require("./onChainBtcPubkey-C_a2L3kL.cjs"),xe=require("./constants-DU5CGcqO.cjs"),Te=/^0x[0-9a-fA-F]{64}$/,Se=/^0x[0-9a-fA-F]{40}$/,Ce=/^0x([0-9a-fA-F]{2})*$/;function I(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!Te.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function Re(e,t){if(!Se.test(e))throw new Error(`${t} must be a 20-byte 0x-prefixed hex address (42 chars)`)}function Ae(e,t){if(!Ce.test(e))throw new Error(`${t} must be a 0x-prefixed hex string with an even number of hex chars`)}function se(e){Re(e.btcVaultRegistryAddress,"btcVaultRegistryAddress"),I(e.vaultId,"vaultId");const t=p.ensureHexPrefix(e.secret);if(I(t,"secret"),e.hashlock!==void 0&&(I(e.hashlock,"hashlock"),!R.validateSecretAgainstHashlock(t,e.hashlock)))throw new Error("Invalid secret: SHA256(secret) does not match the provided hashlock");return t}async function _e(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:n,activationMetadata:i,writeContract:l,signal:o}=e;o==null||o.throwIfAborted();const a=se({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:n});return Ae(i,"activationMetadata"),l({address:t,abi:ae.BTCVaultRegistryABI,functionName:"activateVaultWithSecret",args:[r,a,i]})}async function Be(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:n,writeContract:i,signal:l}=e;l==null||l.throwIfAborted();const o=se({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:n});return i({address:t,abi:ae.BTCVaultRegistryABI,functionName:"activateVaultWithSecretAndRedeem",args:[r,o]})}const ue=8,$e=6e3,Ie=10*6e4,Ve=10;class X extends Error{constructor(t){super(t),this.name="PeginRegistrationMissingError"}}class q extends Error{constructor(t){super(t),this.name="PeginRegistrationNotFinalError"}}function le(e){return e instanceof X||e instanceof Error&&e.name==="PeginRegistrationMissingError"}function Ke(e){return e instanceof q||e instanceof Error&&e.name==="PeginRegistrationNotFinalError"}function ee(e){const{currentBlock:t,createdAtBlock:r}=e,n=t-r+1n;return n<0n?0:Number(n)}async function He(e){const{vaultRegistryReader:t,getBlockNumber:r,vaultIds:n,required:i=ue,pollIntervalMs:l=$e,timeoutMs:o=Ie,signal:a,onProgress:s}=e;if(n.length===0)throw new Error("waitForPeginRegistrationDepth requires at least one vault ID");const u=Date.now();let h=!1,c=0,d;for(;;){if(a!=null&&a.aborted)throw new Error(`Aborted while waiting for peg-in registration depth (${n.length} vault(s))`);if(Date.now()-u>=o)throw new q(`Peg-in registration did not reach ${i} Ethereum confirmations within ${o}ms. The registration transaction was submitted but is not yet final, so the Pre-PegIn Bitcoin transaction was never sent and no funds are at risk. Resume this deposit from the dashboard once the network settles.`+(d instanceof Error?` Last read error: ${d.message}`:""));try{const g=await r(),f=await Promise.all(n.map(P=>t.getVaultBasicInfo(P))),b=f.findIndex(P=>P.depositor===ke.zeroAddress||P.createdAt===0n);if(b!==-1){if(c+=1,!h&&c>Ve)throw new X(`Vault ${n[b]} is still not visible on-chain after ${c} reads — the registration does not exist.`);console.warn(`Peg-in registration for vault ${n[b]} is not visible in chain state at block ${g} — a lagging RPC backend or an Ethereum reorg. Still polling.`),s==null||s({confirmations:0,required:i})}else{h=!0,c=0,d=void 0;let P=f[0],y=ee({currentBlock:g,createdAtBlock:f[0].createdAt});for(const E of f.slice(1)){const v=ee({currentBlock:g,createdAtBlock:E.createdAt});v<y&&(y=v,P=E)}if(s==null||s({confirmations:y,required:i}),y>=i)return{confirmations:y,basicInfo:P}}}catch(g){if(le(g))throw g;console.warn(`Registration-depth read failed (retrying in ${l}ms): `+(g instanceof Error?g.message:String(g))),d=g}await new Promise((g,f)=>{const b=()=>{clearTimeout(P),f(new Error(`Aborted while waiting for peg-in registration depth (${n.length} vault(s))`))},P=setTimeout(()=>{a==null||a.removeEventListener("abort",b),g()},l);a==null||a.addEventListener("abort",b,{once:!0})})}}const te=1,Ne=1;function Oe(e,t){const r=p.stripHexPrefix(t).toLowerCase(),i=e.map(l=>p.stripHexPrefix(l).toLowerCase()).filter(l=>l!==r);if(i.length===0)throw new Error("Cannot derive localChallengers: vault keeper set is empty (or contains only the depositor)");if(new Set(i).size!==i.length)throw new Error("Cannot derive localChallengers: duplicate vaultKeeper key — signing context is misconfigured");return i}function De(e,t,r){const n=r.map(c=>p.stripHexPrefix(c).toLowerCase()),i=t.filter(c=>n.includes(c));if(i.length>0)throw new Error(`Cannot validate challenger set: vault keepers and universal challengers overlap (${i.join(", ")})`);const l=[...t,...n],o=e.map(c=>p.stripHexPrefix(c.challenger_pubkey).toLowerCase()),a=new Set(o);if(a.size!==o.length)throw new Error("Depositor graph contains duplicate challenger entries in challenger_presign_data");const s=new Set(l),u=l.filter(c=>!a.has(c)),h=o.filter(c=>!s.has(c));if(u.length>0||h.length>0)throw new Error("Depositor graph challenger set does not match expected (local ∪ universal)"+(u.length>0?` (missing: ${u.join(", ")})`:"")+(h.length>0?` (unexpected: ${h.join(", ")})`:""))}function Fe(e,t){const r=e.ins[t];return p.uint8ArrayToHex(new Uint8Array(r.hash).slice().reverse())}function V(e,t,r,n,i){const l=e.ins[t];if(l.index!==0)throw new Error(`NoPayout (challenger ${i}) input ${t} expected to spend ${n} vout 0, got vout ${l.index}`);const o=r.getId(),a=Fe(e,t);if(a!==o)throw new Error(`NoPayout (challenger ${i}) input ${t} does not reference ${n} (expected txid ${o}, got ${a})`)}async function Me(e,t,r){const n=[],i=[],l=[],o=Oe(r.vaultKeeperBtcPubkeys,r.depositorBtcPubkey);De(e.challenger_presign_data,o,r.universalChallengerBtcPubkeys);const a=await x.buildPayoutPsbt({vaultCoreVersion:r.vaultCoreVersion,vkClaimerPayoutScriptPubKeys:r.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:r.vpCommissionScriptPubKey,payoutTxHex:e.payout_tx.tx_hex,peginTxHex:r.peginTxHex,assertTxHex:e.assert_tx.tx_hex,timelockAssert:r.timelockAssert,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:r.universalChallengerBtcPubkeys,timelockPegin:r.timelockPegin,network:r.network,claimerBtcPubkey:r.depositorBtcPubkey,registeredPayoutScriptPubKey:r.registeredPayoutScriptPubKey,commissionBps:Ne,protocolFeeRate:r.protocolFeeRate,councilSize:r.councilMembers.length});n.push(a.psbtHex),i.push(D.createTaprootScriptPathSignOptions(t,te));const s=p.stripHexPrefix(r.depositorBtcPubkey),u=S.Transaction.fromHex(p.stripHexPrefix(e.assert_tx.tx_hex));for(const h of e.challenger_presign_data){const c=p.stripHexPrefix(h.challenger_pubkey),d=n.length,g=await Ue({challenger:h,challengerPubkey:c,claimerPubkey:s,localChallengers:o,assertTxParsed:u,ctx:r});n.push(g),i.push(D.createTaprootScriptPathSignOptions(t,te)),l.push({challengerPubkey:c,noPayoutIdx:d})}return{psbtHexes:n,signOptions:i,challengerEntries:l}}async function Ue(e){const{challenger:t,challengerPubkey:r,claimerPubkey:n,localChallengers:i,assertTxParsed:l,ctx:o}=e;O.assertNoPayoutOutputMatchesChallenger(t.nopayout_tx.tx_hex,r,o.network);const a=S.Transaction.fromHex(p.stripHexPrefix(t.nopayout_tx.tx_hex)),s=S.Transaction.fromHex(p.stripHexPrefix(t.challenge_assert_x_tx.tx_hex)),u=S.Transaction.fromHex(p.stripHexPrefix(t.challenge_assert_y_tx.tx_hex));if(a.ins.length!==3)throw new Error(`NoPayout (challenger ${r}) must have exactly 3 inputs, got ${a.ins.length}`);V(a,0,l,"Assert",r),V(a,1,s,"ChallengeAssertX",r),V(a,2,u,"ChallengeAssertY",r);const h=[l.outs[0],s.outs[0],u.outs[0]].map(c=>({script_pubkey:p.uint8ArrayToHex(new Uint8Array(c.script)),value:c.value}));return O.buildNoPayoutPsbt({noPayoutTxHex:t.nopayout_tx.tx_hex,challengerPubkey:r,prevouts:h,connectorParams:{txGraphVersion:o.vaultCoreVersion,claimer:n,localChallengers:i,universalChallengers:o.universalChallengerBtcPubkeys,timelockAssert:o.timelockAssert,councilMembers:o.councilMembers,councilQuorum:o.councilQuorum}})}function Le(e,t,r){x.assertPsbtUnsignedTxMatches(e[0]);const i=x.extractPayoutSignature(e[0].returnedPsbtHex,r);x.assertScriptPathSchnorrSignature({requestedPsbtHex:e[0].requestedPsbtHex,signatureHex:i,signerXOnlyPubkeyHex:r,inputIndex:0});const l={};for(const o of t){x.assertPsbtUnsignedTxMatches(e[o.noPayoutIdx]);const a=x.extractPayoutSignature(e[o.noPayoutIdx].returnedPsbtHex,r);x.assertScriptPathSchnorrSignature({requestedPsbtHex:e[o.noPayoutIdx].requestedPsbtHex,signatureHex:a,signerXOnlyPubkeyHex:r,inputIndex:0}),l[o.challengerPubkey]={nopayout_signature:a}}return{payout_signatures:{payout_signature:i},per_challenger:l}}async function ce(e){const{depositorGraph:t,btcWallet:r,signingContext:n}=e,i=await r.getPublicKeyHex(),{depositorPubkey:l}=p.validateWalletPubkey(i,p.stripHexPrefix(n.depositorBtcPubkey)),{psbtHexes:o,signOptions:a,challengerEntries:s}=await Me(t,i,n),u=await R.signPsbtsWithFallback(r,o,a),h=o.map((c,d)=>({requestedPsbtHex:c,returnedPsbtHex:u[d]}));return Le(h,s,l)}const ze=1e4;async function G(e){const{statusReader:t,peginTxid:r,targetStatuses:n,timeoutMs:i,pollIntervalMs:l=ze,signal:o}=e,a=Date.now();for(;;){if(o!=null&&o.aborted)throw new Error(`Polling aborted for pegin ${r.slice(0,8)}… (target: ${[...n].join(", ")})`);if(Date.now()-a>=i)throw new Error(`Polling timeout after ${i}ms for pegin ${r.slice(0,8)}… (target: ${[...n].join(", ")})`);try{const s=await t.getPeginStatus({pegin_txid:r},o);if(s.pegin_txid.toLowerCase()!==r.toLowerCase())throw new Error(`getPeginStatus returned status for pegin ${s.pegin_txid.slice(0,8)}…, requested ${r.slice(0,8)}…`);const u=s.status;if(n.has(u)||u===w.DaemonStatus.ACTIVATED)return u;if(u===w.DaemonStatus.EXPIRED||w.VP_TERMINAL_FAILURE_STATUSES.has(u))throw new Error(`Pegin ${r.slice(0,8)}… reached terminal status "${u}" while waiting for ${[...n].join(", ")}`)}catch(s){if(!(s instanceof w.JsonRpcError&&s.code===w.RpcErrorCode.PEGIN_NOT_FOUND))throw s}await new Promise((s,u)=>{const h=()=>{clearTimeout(c),u(new Error(`Polling aborted for pegin ${r.slice(0,8)}… (target: ${[...n].join(", ")})`))},c=setTimeout(()=>{o==null||o.removeEventListener("abort",h),s()},l);o==null||o.addEventListener("abort",h,{once:!0})})}}const Xe=1200*1e3,he=new Set([w.DaemonStatus.PENDING_ACKS,w.DaemonStatus.PENDING_ACTIVATION,w.DaemonStatus.ACTIVATED_PENDING_BROADCAST,w.DaemonStatus.ACTIVATED]),qe=new Set([w.DaemonStatus.PENDING_DEPOSITOR_SIGNATURES,...he]);function Ge(e){return e.map(t=>({claimerPubkeyXOnly:p.processPublicKeyToXOnly(t.claimer_pubkey),payoutTxHex:t.payout_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex}))}function T(e){return p.processPublicKeyToXOnly(e).toLowerCase()}function je(e,t){const r=(s,u,h)=>{throw new Error(`Deposit terms ${s} (${String(u)}) does not match the vault's version-locked signing context (${String(h)}); refusing to sign payouts against terms that describe a different graph.`)},n=[["protocolFeeRate",e.protocolFeeRate,t.protocolFeeRate],["vaultCoreVersion",e.vaultCoreVersion,t.vaultCoreVersion],["timelockPegin",e.timelockPegin,t.timelockPegin],["timelockAssert",e.timelockAssert,t.timelockAssert]];for(const[s,u,h]of n)u!==h&&r(s,u,h);const i=s=>s.map(T).sort(),l=(s,u)=>{const h=i(s),c=i(u);return h.length===c.length&&h.every((d,g)=>d===c[g])};l(e.vaultKeeperBtcPubkeys,t.vaultKeeperBtcPubkeys)||r("vaultKeeperBtcPubkeys",e.vaultKeeperBtcPubkeys.join(","),t.vaultKeeperBtcPubkeys.join(",")),l(e.universalChallengerBtcPubkeys,t.universalChallengerBtcPubkeys)||r("universalChallengerBtcPubkeys",e.universalChallengerBtcPubkeys.join(","),t.universalChallengerBtcPubkeys.join(","));const o=T(t.vaultProviderBtcPubkey),a=e.vaults.map(s=>T(s.vaultProviderBtcPubkey));a.includes(o)||r("vaults[].vaultProviderBtcPubkey",a.join(",")||"<no vaults>",t.vaultProviderBtcPubkey)}function We(e,t,r,n){const i=T(n),l=[T(t),...r.map(T)],o=new Set(l);if(o.size!==l.length)throw new Error("Cannot validate claimer set: signing context contains duplicate vault provider or vault keeper key");if(o.has(i))throw new Error("Cannot validate claimer set: depositor key overlaps with vault provider or vault keeper set");const a=e.map(d=>T(d.claimer_pubkey));if(new Set(a).size!==a.length)throw new Error("Presign response contains duplicate claimer entries");const s=a.filter(d=>d!==i),u=new Set(s),h=l.filter(d=>!u.has(d)),c=s.filter(d=>!o.has(d));if(h.length>0||c.length>0)throw new Error("Presign response claimer set does not match expected (vault provider ∪ vault keepers)"+(h.length>0?` (missing: ${h.join(", ")})`:"")+(c.length>0?` (unexpected: ${c.join(", ")})`:""))}function re(e,t){return{vaultCoreVersion:t.vaultCoreVersion,payoutTxHex:e.payoutTxHex,peginTxHex:t.peginTxHex,assertTxHex:e.assertTxHex,vaultProviderBtcPubkey:t.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:t.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:t.universalChallengerBtcPubkeys,depositorBtcPubkey:t.depositorBtcPubkey,timelockPegin:t.timelockPegin,timelockAssert:t.timelockAssert,registeredPayoutScriptPubKey:t.registeredPayoutScriptPubKey,claimerBtcPubkey:e.claimerPubkeyXOnly,commissionBps:t.commissionBps,protocolFeeRate:t.protocolFeeRate,councilSize:t.councilMembers.length,vkClaimerPayoutScriptPubKeys:t.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:t.vpCommissionScriptPubKey}}async function Qe(e,t,r,n){const i=new R.PayoutManager({network:t.network,btcWallet:e}),l=r.length;n==null||n(0,l);let o;if(i.supportsBatchSigning())o=(await i.signPayoutTransactionsBatch(r.map(u=>re(u,t)))).map(u=>u.payoutSignature);else{o=[];for(let s=0;s<r.length;s++){n==null||n(s,l);const u=await i.signPayoutTransaction(re(r[s],t));o.push(u.signature)}}const a={};for(let s=0;s<r.length;s++)a[r[s].claimerPubkeyXOnly]={payout_signature:o[s]};return n==null||n(l,l),a}async function Ye(e){const{statusReader:t,presignClient:r,btcWallet:n,peginTxid:i,depositorPk:l,signingContext:o,depositTerms:a,timeoutMs:s=Xe,signal:u,onProgress:h}=e,c=await G({statusReader:t,peginTxid:i,targetStatuses:qe,timeoutMs:s,signal:u});if(he.has(c))return;if(u==null||u.throwIfAborted(),a!==void 0&&je(a,o),R.supportsDepositApproval(n)){if(!a)throw new Error("runDepositorPresignFlow: this wallet requires approved deposit terms but none were provided. Fresh deposits must pass PreparePeginResult.depositTerms; resume-path rebuild is not wired yet.");await n.approveDepositTerms(a)}const d=await r.requestDepositorPresignTransactions({pegin_txid:i,depositor_pk:l},u);u==null||u.throwIfAborted();const g=T(l);We(d.txs,o.vaultProviderBtcPubkey,o.vaultKeeperBtcPubkeys,l);const f=d.txs.filter(v=>T(v.claimer_pubkey)!==g),b=Ge(f),P=await Qe(n,o,b,h);u==null||u.throwIfAborted();const y=await ce({depositorGraph:d.depositor_graph,btcWallet:n,signingContext:{vaultCoreVersion:o.vaultCoreVersion,peginTxHex:o.peginTxHex,depositorBtcPubkey:l,vaultProviderBtcPubkey:o.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:o.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:o.universalChallengerBtcPubkeys,timelockPegin:o.timelockPegin,timelockAssert:o.timelockAssert,councilMembers:o.councilMembers,councilQuorum:o.councilQuorum,network:o.network,registeredPayoutScriptPubKey:o.registeredPayoutScriptPubKey,protocolFeeRate:o.protocolFeeRate,vkClaimerPayoutScriptPubKeys:o.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:o.vpCommissionScriptPubKey}});u==null||u.throwIfAborted();const E={...P};E[p.stripHexPrefix(l)]=y.payout_signatures,await r.submitDepositorPresignatures({pegin_txid:i,depositor_pk:l,signatures:E,depositor_claimer_presignatures:y},u)}const Ze=300*1e3,Je=new Set([w.DaemonStatus.PENDING_DEPOSITOR_WOTS_PK,...w.POST_WOTS_STATUSES]);async function et(e){const{statusReader:t,wotsSubmitter:r,peginTxid:n,depositorPk:i,wotsPublicKeys:l,timeoutMs:o=Ze,signal:a}=e;a==null||a.throwIfAborted();const s=await G({statusReader:t,peginTxid:n,targetStatuses:Je,timeoutMs:o,signal:a});w.POST_WOTS_STATUSES.has(s)||(a==null||a.throwIfAborted(),await r.submitDepositorWotsKey({pegin_txid:n,depositor_pk:i,wots_public_keys:l},a))}function B(e){return e.registration||e.operation}function pe(e,t,r){const n=p.canonicalizeBtcPubkey(e);return{registration:n===p.canonicalizeBtcPubkey(t),operation:n===p.canonicalizeBtcPubkey(r)}}function F(e,t,r){const n=K(e);return{registration:ne(n,K(t)),operation:ne(n,K(r))}}function K(e){return e.map(p.canonicalizeBtcPubkey).sort()}function ne(e,t){return e.length===t.length&&e.every((r,n)=>r===t[n])}async function tt(e){const{vaultProviderEthAddress:t,hintBtcPubkey:r,registrationBtcPubkey:n,readCurrentOperationBtcPubkey:i,context:l}=e;if(!r)return;const o=p.canonicalizeBtcPubkey(r);if(o===p.canonicalizeBtcPubkey(n))return;const a=p.canonicalizeBtcPubkey(await i());if(o!==a)throw new Error(`Vault provider BTC pubkey mismatch for ${t}: indexer hint matches neither the registration key nor the current operation key on-chain.${l?` ${l}`:""}`)}function H(e,t,r){const n=`${e} operation key (admin=${t.ethAddress})`,i=J.assertOnChainBtcPubkey(t.btcPubKey,`${e} roster key (admin=${t.ethAddress})`),l=J.assertOnChainBtcPubkey(r,n);return{adminAddress:t.ethAddress,genesisBtcPubkey:i,operationBtcPubkey:l,rotated:l!==i}}function rt(e){const t=new Map;for(const r of e){const n=t.get(r.operationBtcPubkey);if(n)throw new Error(`Participant operation key collision: ${n} and ${r.adminAddress} both resolve to operation key ${r.operationBtcPubkey}`);t.set(r.operationBtcPubkey,r.adminAddress)}}function de(e,t,r){if(t.vaultKeepers.length!==e.vaultKeepers.length||t.universalChallengers.length!==e.universalChallengers.length)throw new Error(`Operation-key resolution returned ${t.vaultKeepers.length} keeper and ${t.universalChallengers.length} challenger keys for a roster of ${e.vaultKeepers.length} keepers and ${e.universalChallengers.length} challengers`);const n=H("vault provider",{ethAddress:e.vaultProviderEthAddress,btcPubKey:e.vaultProviderGenesisBtcPubkey},t.vaultProvider),i=e.vaultKeepers.map((o,a)=>H("vault keeper",o,t.vaultKeepers[a])),l=e.universalChallengers.map((o,a)=>H("universal challenger",o,t.universalChallengers[a]));return rt([n,...i,...l]),{vaultProvider:n,vaultKeepers:i,universalChallengers:l,vaultKeeperOperationKeysSorted:i.map(o=>o.operationBtcPubkey).sort(),universalChallengerOperationKeysSorted:l.map(o=>o.operationBtcPubkey).sort(),resolvedAt:r,query:e}}async function ge(e){const t=await e.operationKeyReader.getCurrentOperationKeys(e.query);return de(e.query,t,{mode:"current"})}async function fe(e){const t=await e.operationKeyReader.getOperationKeysAtEpochs(e.query,e.epochs);return de(e.query,t,{mode:"epochs",epochs:e.epochs})}const oe=e=>e.map(p.canonicalizeBtcPubkey).sort();async function nt(e){const{vaultRegistryReader:t,vaultKeeperReader:r,universalChallengerReader:n,vaultProviderEthAddress:i,applicationEntryPoint:l,expectedVaultProviderBtcPubkey:o,expectedVaultKeeperBtcPubkeys:a,expectedUniversalChallengerBtcPubkeys:s,operationKeyReader:u,onIndexerServingOperationKeys:h,onIndexerHintsInconsistent:c}=e,[d,g,f]=await Promise.all([t.getVaultProviderGenesisBtcPubKey(i),r.getCurrentVaultKeepersVersion(l),n.getLatestUniversalChallengersVersion()]),[b,P]=await Promise.all([r.getVaultKeepersByVersion(l,g),n.getUniversalChallengersByVersion(f)]),y={vaultProvider:p.canonicalizeBtcPubkey(d),vaultKeepers:oe(b.map(k=>k.btcPubKey)),universalChallengers:oe(P.map(k=>k.btcPubKey))},E=await ge({operationKeyReader:u,query:{vaultProviderEthAddress:i,vaultProviderGenesisBtcPubkey:`0x${d}`,applicationEntryPoint:l,vaultKeepers:b,universalChallengers:P}}),v={vaultProvider:E.vaultProvider.operationBtcPubkey,vaultKeepers:[...E.vaultKeeperOperationKeysSorted],universalChallengers:[...E.universalChallengerOperationKeysSorted]},C=pe(o,y.vaultProvider,v.vaultProvider),A=F(a,y.vaultKeepers,v.vaultKeepers),_=F(s,y.universalChallengers,v.universalChallengers);if(!B(C))throw new Error(`Vault provider BTC pubkey indexer hint does not match BTCVaultRegistry for ${i}. Refresh and try again.`);if(!B(A))throw new Error(`Vault keeper BTC pubkeys (v${g}) indexer set does not match ApplicationRegistry on-chain set. Refresh and try again.`);if(!B(_))throw new Error(`Universal challenger BTC pubkeys (v${f}) indexer set does not match ProtocolParams on-chain set. Refresh and try again.`);const m=[C,A,_],be=m.some(k=>k.registration&&!k.operation),Z=m.some(k=>k.operation&&!k.registration);if(be&&Z){const k=`Indexer participant hints are internally inconsistent for vault provider ${i}: some roles match the registration keys while others match the rotated operation keys.`;throw c==null||c(k),new Error(`${k} Refresh and try again.`)}return Z&&(h==null||h(`Indexer is serving rotated operation keys for vault provider ${i}`)),{vaultProviderBtcPubkeyXOnly:v.vaultProvider,vaultKeeperBtcPubkeysSorted:v.vaultKeepers,universalChallengerBtcPubkeysSorted:v.universalChallengers,expectedAppVaultKeepersVersion:g,expectedUniversalChallengersVersion:f,registrationKeys:y,participantKeys:E}}function ot(e){return/^[0-9a-fA-F]{64}$/.test(e)}function it(e){const{amountSats:t,minDeposit:r,maxDeposit:n,btcBalance:i,estimatedFeeSats:l,depositorClaimValue:o}=e;return!(t<=0n||t<r||n&&n>0n&&t>n||l==null||o==null||t+l+o>i)}function at(e,t,r){return e<=0n?{valid:!1,error:"Deposit amount must be greater than zero"}:e<t?{valid:!1,error:`Minimum deposit is ${p.formatSatoshisToBtc(t)} BTC`}:r&&r>0n&&e>r?{valid:!1,error:`Maximum deposit is ${p.formatSatoshisToBtc(r)} BTC`}:{valid:!0}}function st(e){const{amount:t,effectiveRemaining:r}=e;return r===null?{valid:!0}:r===0n?{valid:!1,error:"Supply cap reached — deposits temporarily paused"}:t>r?{valid:!1,error:`Vault size exceeds remaining capacity (${p.formatSatoshisToBtc(r)} BTC)`}:{valid:!0}}function ut(e,t){if(!e||e.length===0)return{valid:!1,error:"At least one vault provider must be selected"};const r=t.map(i=>i.toLowerCase());return e.filter(i=>!r.includes(i.toLowerCase())).length>0?{valid:!1,error:"Invalid vault provider selected"}:{valid:!0}}function Pe(e,t,r){if(!e||e.length===0)return{valid:!1,error:"At least one vault amount required"};for(let n=0;n<e.length;n++){const i=e[n];if(i<=0n)return{valid:!1,error:`Vault ${n+1} amount must be positive`};if(t&&i<t)return{valid:!1,error:`Vault ${n+1} amount ${p.formatSatoshisToBtc(i)} BTC is below minimum deposit ${p.formatSatoshisToBtc(t)} BTC`};if(r&&i>r)return{valid:!1,error:`Vault ${n+1} amount ${p.formatSatoshisToBtc(i)} BTC exceeds maximum deposit ${p.formatSatoshisToBtc(r)} BTC`}}return{valid:!0}}function ye(e){const t=p.stripHexPrefix(e);return ot(t)?{valid:!0}:{valid:!1,error:"Invalid pubkey format: must be 64 hex characters (32-byte x-only public key, no 0x prefix)"}}function lt(e){if(!e||e.length===0)throw new Error("No vault keepers available. The system requires at least one vault keeper to create a deposit.")}function ct(e){if(!e||e.length===0)throw new Error("No universal challengers available. The system requires at least one universal challenger to create a deposit.")}function ht(e){if(e.length===0)throw new Error("No spendable UTXOs available")}function pt(e){const{vaultAmounts:t,confirmedUTXOs:r,vaultProviderBtcPubkey:n,vaultKeeperBtcPubkeys:i,universalChallengerBtcPubkeys:l,minDeposit:o,maxDeposit:a}=e,s=Pe(t,o,a);if(!s.valid)throw new Error(s.error);const u=ye(n);if(!u.valid)throw new Error(u.error);lt(i),ct(l),ht(r)}class j extends Error{constructor(t){super(t),this.name="ParticipantKeyDriftError"}}function dt(e){return e instanceof j||e instanceof Error&&e.name==="ParticipantKeyDriftError"}function ie(e,t,r){return t.length===r.length&&t.every((n,i)=>n===r[i])?null:`${e} expected [${t.join(", ")}], got [${r.join(", ")}]`}async function gt(e){const{vaultRegistryReader:t,operationKeyReader:r,vaultIds:n,expected:i}=e,l=i.query;if(n.length===0)return;const o=await t.getVaultKeyEpochsBatch(n),a=[];for(const[s,u]of o.entries()){const h=n[s];let c;try{c=await fe({operationKeyReader:r,query:l,epochs:u})}catch(f){a.push(`vault ${h}: could not resolve participants at frozen epochs (vp=${u.vpKeyEpoch}, keeper=${u.appKeeperKeyEpoch}, uc=${u.ucKeyEpoch}): ${f.message}`);continue}c.vaultProvider.operationBtcPubkey!==i.vaultProvider.operationBtcPubkey&&a.push(`vault ${h}: vault provider key expected ${i.vaultProvider.operationBtcPubkey}, got ${c.vaultProvider.operationBtcPubkey}`);const d=ie(`vault ${h}: vault keeper keys`,i.vaultKeeperOperationKeysSorted,c.vaultKeeperOperationKeysSorted);d&&a.push(d);const g=ie(`vault ${h}: universal challenger keys`,i.universalChallengerOperationKeysSorted,c.universalChallengerOperationKeysSorted);g&&a.push(g)}if(a.length>0)throw new j(`Aborting BTC broadcast: participant operation keys changed during registration (${a.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class W extends Error{constructor(t){super(t),this.name="RegisteredVaultVersionMismatchError"}}function ft(e){return e instanceof W||e instanceof Error&&e.name==="RegisteredVaultVersionMismatchError"}async function Pt(e){const{vaultRegistryReader:t,vaultIds:r,expectedOffchainParamsVersion:n,expectedAppVaultKeepersVersion:i,expectedUniversalChallengersVersion:l,expectedVaultCoreVersion:o}=e,a=await t.getProtocolInfoBatch(r),s=[];if(a.forEach((u,h)=>{const c=r[h];u.offchainParamsVersion!==n&&s.push(`vault ${c}: offchainParams expected v${n}, got v${u.offchainParamsVersion}`),u.appVaultKeepersVersion!==i&&s.push(`vault ${c}: appVaultKeepers expected v${i}, got v${u.appVaultKeepersVersion}`),u.universalChallengersVersion!==l&&s.push(`vault ${c}: universalChallengers expected v${l}, got v${u.universalChallengersVersion}`),u.vaultCoreVersion!==o&&s.push(`vault ${c}: vaultCoreVersion expected v${o} (build-time active), got v${u.vaultCoreVersion}`)}),s.length>0)throw new W(`Aborting BTC broadcast: signer-set or offchain-params versions changed during registration (${s.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}var Q=(e=>(e.CLAIM_EVENT_RECEIVED="ClaimEventReceived",e.CLAIM_BROADCAST="ClaimBroadcast",e.ASSERT_BROADCAST="AssertBroadcast",e.PAYOUT_BROADCAST="PayoutBroadcast",e.PAYOUT_BLOCKED="PayoutBlocked",e))(Q||{});const yt=new Set(["PayoutBroadcast","PayoutBlocked"]);function vt(e){return Object.values(Q).includes(e)}function mt(e){return!!e&&yt.has(e)}class ve extends Error{constructor(r,n){super(`Refund not yet mature (BIP68 not final): ${n.message}`);$(this,"vaultId");$(this,"cause");this.name="BIP68NotMatureError",this.vaultId=r,this.cause=n}}const bt=/^0x[0-9a-fA-F]{64}$/,wt=/^(?:0x)?(?:[0-9a-fA-F]{2})+$/,me=/^(?:0x)?(?:[0-9a-fA-F]{64}|[0-9a-fA-F]{66})$/,Y=160,M=2e3,U=10n,L=100n;function Et(e){if(!Number.isFinite(e)||e<=0)throw new Error(`feeRateSatsVb must be a positive finite number, got ${e}`);return BigInt(Math.ceil(e*Y))}const kt=1,xt=/non-BIP68-final/i;function z(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!bt.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function N(e,t){if(!Number.isInteger(e)||e<0)throw new Error(`${t} must be a non-negative integer, got ${e}`)}function Tt(e){if(z(e.hashlock,"hashlock"),!Number.isInteger(e.htlcVout)||e.htlcVout<0)throw new Error(`htlcVout must be a non-negative integer, got ${e.htlcVout}`);if(!Array.isArray(e.batch)||e.batch.length===0)throw new Error("batch must be a non-empty array of HTLC entries");if(e.htlcVout>=e.batch.length)throw new Error(`htlcVout ${e.htlcVout} is out of range for batch of size ${e.batch.length}`);for(let r=0;r<e.batch.length;r++){const n=e.batch[r];if(z(n.hashlock,`batch[${r}].hashlock`),!Number.isInteger(n.htlcVout)||n.htlcVout!==r)throw new Error(`batch[${r}].htlcVout must equal ${r} (contiguous vout-ordered vector), got ${n.htlcVout}`);if(typeof n.amount!="bigint"||n.amount<=0n)throw new Error(`batch[${r}].amount must be a positive bigint, got ${n.amount}`)}const t=e.batch[e.htlcVout];if(t.hashlock.toLowerCase()!==e.hashlock.toLowerCase())throw new Error(`batch[${e.htlcVout}].hashlock (${t.hashlock}) does not match target hashlock (${e.hashlock})`);if(t.amount!==e.amount)throw new Error(`batch[${e.htlcVout}].amount (${t.amount}) does not match target amount (${e.amount})`);if(N(e.offchainParamsVersion,"offchainParamsVersion"),N(e.appVaultKeepersVersion,"appVaultKeepersVersion"),N(e.universalChallengersVersion,"universalChallengersVersion"),xe.assertValidVaultCoreVersion(e.vaultCoreVersion,"VaultRefundData.vaultCoreVersion"),typeof e.unsignedPrePeginTxHex!="string"||e.unsignedPrePeginTxHex.length===0)throw new Error("unsignedPrePeginTxHex must be a non-empty hex string");if(!wt.test(e.unsignedPrePeginTxHex))throw new Error("unsignedPrePeginTxHex must be a hex byte string (optional 0x prefix, even length)");if(!e.depositorBtcPubkey||!me.test(e.depositorBtcPubkey))throw new Error("depositorBtcPubkey must be 32 or 33 bytes of hex (optional 0x prefix)");if(typeof e.amount!="bigint"||e.amount<=0n)throw new Error(`amount must be a positive bigint, got ${e.amount}`)}function St(e){if(!e.vaultProviderPubkey||!me.test(e.vaultProviderPubkey))throw new Error("vaultProviderPubkey must be 32 or 33 bytes of hex");if(e.vaultKeeperPubkeys.length===0)throw new Error("vaultKeeperPubkeys must be non-empty");if(e.universalChallengerPubkeys.length===0)throw new Error("universalChallengerPubkeys must be non-empty");if(!Number.isInteger(e.timelockRefund)||e.timelockRefund<=0)throw new Error(`timelockRefund must be a positive integer, got ${e.timelockRefund}`);if(typeof e.feeRate!="bigint"||e.feeRate<=0n)throw new Error(`protocol feeRate must be a positive bigint, got ${e.feeRate}`);if(typeof e.minPeginFeeRate!="bigint"||e.minPeginFeeRate<=0n)throw new Error(`minPeginFeeRate must be a positive bigint, got ${e.minPeginFeeRate}`);if(!Number.isInteger(e.numLocalChallengers)||e.numLocalChallengers<0)throw new Error("numLocalChallengers must be a non-negative integer");if(!Number.isInteger(e.councilQuorum)||!Number.isInteger(e.councilSize)||e.councilQuorum<=0||e.councilSize<=0||e.councilQuorum>e.councilSize)throw new Error(`councilQuorum (${e.councilQuorum}) must be in [1, councilSize=${e.councilSize}]`)}function Ct(e){const t=S.Psbt.fromHex(e);try{t.finalizeAllInputs()}catch(r){const n=r instanceof Error?r.message:String(r);if(!n.includes("already finalized"))throw new Error(`Failed to finalize refund PSBT: ${n}`)}return t.extractTransaction().toHex()}async function Rt(e){const{vaultId:t,readVault:r,readPrePeginContext:n,feeRate:i,signPsbt:l,broadcastTx:o,signal:a}=e;a==null||a.throwIfAborted(),z(t,"vaultId");const s=await r();Tt(s),a==null||a.throwIfAborted();const u=await n(s);if(St(u),a==null||a.throwIfAborted(),!Number.isFinite(i)||i<=0)throw new Error(`feeRate must be a positive number, got ${i}`);if(i>M)throw new Error(`feeRate ${i} sat/vB exceeds refund safety cap ${M} sat/vB; refusing to sign refund.`);const h=BigInt(Math.ceil(i*Y)),c=s.amount*U/L;if(h>c)throw new Error(`Refund fee ${h} sats exceeds the per-vault safety cap of ${c} sats (${U}/${L} of vault.amount=${s.amount}); refusing to sign refund.`);a==null||a.throwIfAborted();const d=p.processPublicKeyToXOnly(s.depositorBtcPubkey),g=p.stripHexPrefix(s.unsignedPrePeginTxHex),f=R.findAuthAnchorOpReturn(g);if(f!==void 0&&f.vout!==s.batch.length)throw new Error(`Auth-anchor OP_RETURN at vout ${f.vout} does not match batch size (${s.batch.length} HTLC outputs expect the anchor at vout ${s.batch.length}). Refund refused — sibling HTLC vector is incomplete.`);const b=f==null?void 0:f.hash;let P;try{P=S.Transaction.fromHex(g)}catch(m){throw new Error(`Failed to parse funded Pre-PegIn transaction hex: ${m instanceof Error?m.message:String(m)}`)}if(P.outs.length<s.batch.length)throw new Error(`Funded Pre-PegIn tx has ${P.outs.length} outputs but batch requires at least ${s.batch.length} HTLC outputs. Refund refused — funded tx shape disagrees with sibling vector.`);const{psbtHex:y}=await O.buildRefundPsbt({prePeginParams:{vaultCoreVersion:s.vaultCoreVersion,depositorPubkey:d,vaultProviderPubkey:p.stripHexPrefix(u.vaultProviderPubkey),vaultKeeperPubkeys:u.vaultKeeperPubkeys.map(p.stripHexPrefix),universalChallengerPubkeys:u.universalChallengerPubkeys.map(p.stripHexPrefix),hashlocks:s.batch.map(m=>p.stripHexPrefix(m.hashlock)),timelockRefund:u.timelockRefund,pegInAmounts:s.batch.map(m=>m.amount),feeRate:u.feeRate,minPeginFeeRate:u.minPeginFeeRate,numLocalChallengers:u.numLocalChallengers,councilQuorum:u.councilQuorum,councilSize:u.councilSize,network:u.network,authAnchorHash:b},fundedPrePeginTxHex:g,htlcVout:s.htlcVout,refundFee:h,hashlock:p.stripHexPrefix(s.hashlock)});a==null||a.throwIfAborted();const E=D.createTaprootScriptPathSignOptions(s.depositorBtcPubkey,kt),v=await l(y,E);x.assertPsbtUnsignedTxMatches({requestedPsbtHex:y,returnedPsbtHex:v});const C=0,A=x.extractPayoutSignature(v,d,C);x.assertScriptPathSchnorrSignature({requestedPsbtHex:y,signatureHex:A,signerXOnlyPubkeyHex:d,inputIndex:C});const _=Ct(v);a==null||a.throwIfAborted();try{return await o(_)}catch(m){throw m instanceof Error&&xt.test(m.message)?new ve(t,m):m}}exports.BIP68NotMatureError=ve;exports.ClaimerPegoutStatusValue=Q;exports.PEGIN_ETH_CONFIRMATIONS=ue;exports.ParticipantKeyDriftError=j;exports.PeginRegistrationMissingError=X;exports.PeginRegistrationNotFinalError=q;exports.REFUND_MAX_FEE_FRACTION_DENOMINATOR=L;exports.REFUND_MAX_FEE_FRACTION_NUMERATOR=U;exports.REFUND_MAX_FEE_RATE_SATS_VB=M;exports.REFUND_VSIZE=Y;exports.RegisteredVaultVersionMismatchError=W;exports.activateVault=_e;exports.activateVaultAndRedeem=Be;exports.assertVaultProviderHintAccepted=tt;exports.buildAndBroadcastRefund=Rt;exports.estimateRefundFeeSats=Et;exports.isDepositAmountValid=it;exports.isHintAccepted=B;exports.isParticipantKeyDriftError=dt;exports.isPeginRegistrationMissingError=le;exports.isPeginRegistrationNotFinalError=Ke;exports.isPegoutTerminalStatus=mt;exports.isRecognizedPegoutStatus=vt;exports.isRegisteredVaultVersionMismatchError=ft;exports.matchKeyHint=pe;exports.matchKeySetHint=F;exports.resolveCurrentParticipantKeys=ge;exports.resolveParticipantKeysAtEpochs=fe;exports.runDepositorPresignFlow=Ye;exports.signDepositorGraph=ce;exports.submitWotsPublicKey=et;exports.validateDepositAmount=at;exports.validateMultiVaultDepositInputs=pt;exports.validateOnChainParticipantKeys=nt;exports.validateProviderSelection=ut;exports.validateRemainingCapacity=st;exports.validateVaultAmounts=Pe;exports.validateVaultProviderPubkey=ye;exports.verifyRegisteredParticipantKeys=gt;exports.verifyRegisteredVaultVersions=Pt;exports.waitForPeginRegistrationDepth=He;exports.waitForPeginStatus=G;
+//# sourceMappingURL=buildAndBroadcastRefund-CYtnT0D_.cjs.map