@babylonlabs-io/ts-sdk 0.66.1 → 0.68.0

package/dist/PeginManager--2R3T2S8.js

@@ -0,0 +1,1458 @@
+var qt = Object.defineProperty;
+var Gt = (s, t, e) => t in s ? qt(s, t, { enumerable: !0, configurable: !0, writable: !0, value: e }) : s[t] = e;
+var y = (s, t, e) => Gt(s, typeof t != "symbol" ? t + "" : t, e);
+import { c as St, H as Yt, r as W, a as K, b as it, u as zt, d as at, e as ct, f as lt, g as jt, s as _t } from "./sha2-BYVxyZzX.js";
+import * as At from "bitcoinjs-lib";
+import { Transaction as Ct, Psbt as ut } from "bitcoinjs-lib";
+import { Buffer as O } from "buffer";
+import { isAddressEqual as ht, encodeFunctionData as J, zeroAddress as Qt } from "viem";
+import { B as H } from "./BTCVaultRegistry.abi-CJwWI2EO.js";
+import { h as R } from "./errors-Blc-JWnI.js";
+import { expandWotsSeed as Zt, expandHashlockSecret as Jt, expandAuthAnchor as te, deriveVaultId as dt } from "@babylonlabs-io/babylon-tbv-rust-wasm";
+import { a as ft, b as ee, f as pt, g as se } from "./verifyScriptPathSchnorrSignature-Dy9gF5RF.js";
+import { d as oe, b as ne, e as re, f as ie, c as ae } from "./verifyKeyPathSchnorrSignature-oGCUbjjZ.js";
+import { p as ce, h as tt, u as et, e as C, i as gt, s as B, k as mt, X as le } from "./bitcoin-Ch_jxnDa.js";
+import { c as ue } from "./signing-DaLvGwQe.js";
+import { M as bt } from "./validation-Dj3dqYtl.js";
+import { p as he, d as It } from "./parseFundingOutpoints-CO-f6IHK.js";
+import { c as de, s as U, r as fe, b as pe, d as ge } from "./signPsbtsWithFallback-Bv79gLFe.js";
+import { s as me, f as G, i as be, w as wt } from "./waitForTransactionReceiptSmartAware-lobLm0q0.js";
+import { p as we, f as Pe } from "./fundPeginTransaction-B2wyjqp0.js";
+import { M as X, B as xe } from "./constants-GjWXdaqV.js";
+import { l as ye, m as ke, p as Ee, V as Te, i as ve } from "./mempoolApi-_D-jvtj_.js";
+import * as Be from "@bitcoin-js/tiny-secp256k1-asmjs";
+const F = /* @__PURE__ */ BigInt(2 ** 32 - 1), Pt = /* @__PURE__ */ BigInt(32);
+function Se(s, t = !1) {
+  return t ? { h: Number(s & F), l: Number(s >> Pt & F) } : { h: Number(s >> Pt & F) | 0, l: Number(s & F) | 0 };
+}
+function _e(s, t = !1) {
+  const e = s.length;
+  let o = new Uint32Array(e), i = new Uint32Array(e);
+  for (let r = 0; r < e; r++) {
+    const { h: n, l: a } = Se(s[r], t);
+    [o[r], i[r]] = [n, a];
+  }
+  return [o, i];
+}
+const Ae = (s, t, e) => s << e | t >>> 32 - e, Ce = (s, t, e) => t << e | s >>> 32 - e, Ie = (s, t, e) => t << e - 32 | s >>> 64 - e, He = (s, t, e) => s << e - 32 | t >>> 64 - e, Re = 64;
+function $e(s) {
+  const t = s.prepeginTxid.toLowerCase();
+  if (!/^[0-9a-f]+$/.test(t) || t.length !== Re)
+    throw new Error(
+      `buildDepositTerms: prepeginTxid must be 64 hex chars, got "${s.prepeginTxid}"`
+    );
+  if (s.peginAmounts.length === 0)
+    throw new Error("buildDepositTerms: at least one pegin amount is required");
+  if (s.timelockPegin <= 0 || s.timelockAssert <= 0 || s.timelockRefund <= 0)
+    throw new Error("buildDepositTerms: timelocks must be positive");
+  if (!Number.isInteger(s.maxAcceptableCommissionBps) || s.maxAcceptableCommissionBps < 0 || s.maxAcceptableCommissionBps >= X)
+    throw new Error(
+      `buildDepositTerms: maxAcceptableCommissionBps must be an integer in [0, ${X}), got ${s.maxAcceptableCommissionBps}`
+    );
+  const e = BigInt(xe), o = s.peginAmounts.map(
+    (i, r) => ({
+      htlcVout: r,
+      vaultProviderBtcPubkey: s.vaultProviderBtcPubkey,
+      peginAmount: i,
+      // Ceiling, not quote: floor(peginAmount * maxAcceptableBps / 10_000) —
+      // the same bound the registration calldata enforces on-chain, so any
+      // stamped commission the contract admits stays under it (firmware
+      // >= c8db53e checks the payout commission output <= this value).
+      commissionFee: i * BigInt(s.maxAcceptableCommissionBps) / e,
+      depositorClaimValue: s.depositorClaimValue,
+      peginMaxFee: s.peginMaxFee
+    })
+  );
+  return {
+    vaultCoreVersion: s.vaultCoreVersion,
+    protocolFeeRate: s.protocolFeeRate,
+    timelockPegin: s.timelockPegin,
+    timelockAssert: s.timelockAssert,
+    timelockRefund: s.timelockRefund,
+    prepeginTxid: t,
+    prepeginMaxFee: s.prepeginMaxFee,
+    vaultKeeperBtcPubkeys: [...s.vaultKeeperBtcPubkeys],
+    universalChallengerBtcPubkeys: [...s.universalChallengerBtcPubkeys],
+    vaults: o
+  };
+}
+const st = 25, Ht = 9999;
+function Y(s) {
+  if (!Number.isInteger(s) || s < 0 || s >= X)
+    throw new Error(
+      `Quoted commissionBps must be an integer in [0, ${X}), got ${s}`
+    );
+  return Math.min(
+    s + st,
+    Ht
+  );
+}
+const Oe = /^0x[0-9a-f]+$/i, Ve = /^[0-9a-f]+$/i, Me = /^[A-Za-z0-9+/]+={0,2}$/;
+function $(s) {
+  if (typeof s != "string" || s.length === 0)
+    throw new Error("BTC wallet returned empty public key");
+  return ce(s).toLowerCase();
+}
+function We(s) {
+  if (typeof s != "string" || s.length === 0)
+    throw new Error("BTC wallet returned empty BIP-322 signature");
+  if (s.startsWith("0x") || s.startsWith("0X")) {
+    if (!Oe.test(s) || s.length < 4 || s.length % 2 !== 0)
+      throw new Error("BTC wallet returned malformed hex BIP-322 signature");
+    return s.toLowerCase();
+  }
+  if (Ve.test(s)) {
+    if (s.length % 2 !== 0)
+      throw new Error("BTC wallet returned malformed hex BIP-322 signature");
+    return `0x${s.toLowerCase()}`;
+  }
+  if (!Me.test(s) || s.length % 4 !== 0)
+    throw new Error("BTC wallet returned malformed base64 BIP-322 signature");
+  const t = O.from(s, "base64");
+  if (t.length === 0 || t.toString("base64") !== s)
+    throw new Error("BTC wallet returned malformed base64 BIP-322 signature");
+  return `0x${t.toString("hex")}`;
+}
+async function Ue(s) {
+  const { wallet: t, depositTerms: e, fundedPrePeginTxHex: o, depositorBtcPubkey: i } = s, r = typeof t.approveDepositTerms == "function" ? t.approveDepositTerms : void 0;
+  if (!r && !e)
+    return;
+  const n = o.startsWith("0x") ? o.slice(2) : o, c = Ct.fromHex(n).getId();
+  if (e && e.prepeginTxid.replace(/^0x/, "").toLowerCase() !== c)
+    throw new Error(
+      `Deposit terms do not match the transaction being broadcast: terms are for prepeginTxid ${e.prepeginTxid}, but this transaction is ${c}.`
+    );
+  if (!r)
+    return;
+  if (!e)
+    throw new Error(
+      "This wallet requires approved deposit terms before signing the Pre-PegIn transaction, but none were provided. Pass PreparePeginResult.depositTerms (fresh flows) or a resume rebuild."
+    );
+  if (typeof t.deriveContextHash != "function")
+    throw new Error(
+      "A deposit-approval wallet must also implement deriveContextHash, but this one does not."
+    );
+  if (typeof t.holdsApprovedDepositTerms == "function") {
+    let g = !1;
+    try {
+      g = await t.holdsApprovedDepositTerms(e);
+    } catch {
+    }
+    if (g)
+      return;
+  }
+  const u = he(o);
+  (await It(
+    { deriveContextHash: t.deriveContextHash.bind(t) },
+    {
+      depositorBtcPubkey: tt(
+        $(i)
+      ),
+      fundingOutpoints: u
+    }
+  )).fill(0), await r.call(t, e);
+}
+const Fe = /* @__PURE__ */ Uint8Array.from([
+  7,
+  4,
+  13,
+  1,
+  10,
+  6,
+  15,
+  3,
+  12,
+  0,
+  9,
+  5,
+  2,
+  14,
+  11,
+  8
+]), Rt = Uint8Array.from(new Array(16).fill(0).map((s, t) => t)), Ne = Rt.map((s) => (9 * s + 5) % 16), $t = /* @__PURE__ */ (() => {
+  const e = [[Rt], [Ne]];
+  for (let o = 0; o < 4; o++)
+    for (let i of e)
+      i.push(i[o].map((r) => Fe[r]));
+  return e;
+})(), Ot = $t[0], Vt = $t[1], Mt = /* @__PURE__ */ [
+  [11, 14, 15, 12, 5, 8, 7, 9, 11, 13, 14, 15, 6, 7, 9, 8],
+  [12, 13, 11, 15, 6, 9, 9, 7, 12, 15, 11, 13, 7, 8, 7, 7],
+  [13, 15, 14, 11, 7, 7, 6, 8, 13, 14, 13, 12, 5, 5, 6, 9],
+  [14, 11, 12, 14, 8, 6, 5, 5, 15, 12, 15, 14, 9, 9, 8, 6],
+  [15, 12, 13, 13, 9, 5, 8, 6, 14, 11, 12, 11, 8, 6, 5, 5]
+].map((s) => Uint8Array.from(s)), De = /* @__PURE__ */ Ot.map((s, t) => s.map((e) => Mt[t][e])), Le = /* @__PURE__ */ Vt.map((s, t) => s.map((e) => Mt[t][e])), Ke = /* @__PURE__ */ Uint32Array.from([
+  0,
+  1518500249,
+  1859775393,
+  2400959708,
+  2840853838
+]), Xe = /* @__PURE__ */ Uint32Array.from([
+  1352829926,
+  1548603684,
+  1836072691,
+  2053994217,
+  0
+]);
+function xt(s, t, e, o) {
+  return s === 0 ? t ^ e ^ o : s === 1 ? t & e | ~t & o : s === 2 ? (t | ~e) ^ o : s === 3 ? t & o | e & ~o : t ^ (e | ~o);
+}
+const N = /* @__PURE__ */ new Uint32Array(16);
+class qe extends Yt {
+  constructor() {
+    super(64, 20, 8, !0);
+    y(this, "h0", 1732584193);
+    y(this, "h1", -271733879);
+    y(this, "h2", -1732584194);
+    y(this, "h3", 271733878);
+    y(this, "h4", -1009589776);
+  }
+  get() {
+    const { h0: e, h1: o, h2: i, h3: r, h4: n } = this;
+    return [e, o, i, r, n];
+  }
+  set(e, o, i, r, n) {
+    this.h0 = e | 0, this.h1 = o | 0, this.h2 = i | 0, this.h3 = r | 0, this.h4 = n | 0;
+  }
+  process(e, o) {
+    for (let d = 0; d < 16; d++, o += 4)
+      N[d] = e.getUint32(o, !0);
+    let i = this.h0 | 0, r = i, n = this.h1 | 0, a = n, c = this.h2 | 0, u = c, h = this.h3 | 0, g = h, b = this.h4 | 0, w = b;
+    for (let d = 0; d < 5; d++) {
+      const E = 4 - d, k = Ke[d], f = Xe[d], v = Ot[d], _ = Vt[d], p = De[d], P = Le[d];
+      for (let l = 0; l < 16; l++) {
+        const x = W(i + xt(d, n, c, h) + N[v[l]] + k, p[l]) + b | 0;
+        i = b, b = h, h = W(c, 10) | 0, c = n, n = x;
+      }
+      for (let l = 0; l < 16; l++) {
+        const x = W(r + xt(E, a, u, g) + N[_[l]] + f, P[l]) + w | 0;
+        r = w, w = g, g = W(u, 10) | 0, u = a, a = x;
+      }
+    }
+    this.set(this.h1 + c + g | 0, this.h2 + h + w | 0, this.h3 + b + r | 0, this.h4 + i + a | 0, this.h0 + n + u | 0);
+  }
+  roundClean() {
+    K(N);
+  }
+  destroy() {
+    this.destroyed = !0, K(this.buffer), this.set(0, 0, 0, 0, 0);
+  }
+}
+const Ge = /* @__PURE__ */ St(() => new qe()), Ye = BigInt(0), M = BigInt(1), ze = BigInt(2), je = BigInt(7), Qe = BigInt(256), Ze = BigInt(113), Wt = [], Ut = [], Ft = [];
+for (let s = 0, t = M, e = 1, o = 0; s < 24; s++) {
+  [e, o] = [o, (2 * e + 3 * o) % 5], Wt.push(2 * (5 * o + e)), Ut.push((s + 1) * (s + 2) / 2 % 64);
+  let i = Ye;
+  for (let r = 0; r < 7; r++)
+    t = (t << M ^ (t >> je) * Ze) % Qe, t & ze && (i ^= M << (M << BigInt(r)) - M);
+  Ft.push(i);
+}
+const Nt = _e(Ft, !0), Je = Nt[0], ts = Nt[1], yt = (s, t, e) => e > 32 ? Ie(s, t, e) : Ae(s, t, e), kt = (s, t, e) => e > 32 ? He(s, t, e) : Ce(s, t, e);
+function es(s, t = 24) {
+  const e = new Uint32Array(10);
+  for (let o = 24 - t; o < 24; o++) {
+    for (let n = 0; n < 10; n++)
+      e[n] = s[n] ^ s[n + 10] ^ s[n + 20] ^ s[n + 30] ^ s[n + 40];
+    for (let n = 0; n < 10; n += 2) {
+      const a = (n + 8) % 10, c = (n + 2) % 10, u = e[c], h = e[c + 1], g = yt(u, h, 1) ^ e[a], b = kt(u, h, 1) ^ e[a + 1];
+      for (let w = 0; w < 50; w += 10)
+        s[n + w] ^= g, s[n + w + 1] ^= b;
+    }
+    let i = s[2], r = s[3];
+    for (let n = 0; n < 24; n++) {
+      const a = Ut[n], c = yt(i, r, a), u = kt(i, r, a), h = Wt[n];
+      i = s[h], r = s[h + 1], s[h] = c, s[h + 1] = u;
+    }
+    for (let n = 0; n < 50; n += 10) {
+      for (let a = 0; a < 10; a++)
+        e[a] = s[n + a];
+      for (let a = 0; a < 10; a++)
+        s[n + a] ^= ~e[(a + 2) % 10] & e[(a + 4) % 10];
+    }
+    s[0] ^= Je[o], s[1] ^= ts[o];
+  }
+  K(e);
+}
+class nt {
+  // NOTE: we accept arguments in bytes instead of bits here.
+  constructor(t, e, o, i = !1, r = 24) {
+    y(this, "state");
+    y(this, "pos", 0);
+    y(this, "posOut", 0);
+    y(this, "finished", !1);
+    y(this, "state32");
+    y(this, "destroyed", !1);
+    y(this, "blockLen");
+    y(this, "suffix");
+    y(this, "outputLen");
+    y(this, "enableXOF", !1);
+    y(this, "rounds");
+    if (this.blockLen = t, this.suffix = e, this.outputLen = o, this.enableXOF = i, this.rounds = r, it(o, "outputLen"), !(0 < t && t < 200))
+      throw new Error("only keccak-f1600 function is supported");
+    this.state = new Uint8Array(200), this.state32 = zt(this.state);
+  }
+  clone() {
+    return this._cloneInto();
+  }
+  keccak() {
+    at(this.state32), es(this.state32, this.rounds), at(this.state32), this.posOut = 0, this.pos = 0;
+  }
+  update(t) {
+    ct(this), lt(t);
+    const { blockLen: e, state: o } = this, i = t.length;
+    for (let r = 0; r < i; ) {
+      const n = Math.min(e - this.pos, i - r);
+      for (let a = 0; a < n; a++)
+        o[this.pos++] ^= t[r++];
+      this.pos === e && this.keccak();
+    }
+    return this;
+  }
+  finish() {
+    if (this.finished)
+      return;
+    this.finished = !0;
+    const { state: t, suffix: e, pos: o, blockLen: i } = this;
+    t[o] ^= e, (e & 128) !== 0 && o === i - 1 && this.keccak(), t[i - 1] ^= 128, this.keccak();
+  }
+  writeInto(t) {
+    ct(this, !1), lt(t), this.finish();
+    const e = this.state, { blockLen: o } = this;
+    for (let i = 0, r = t.length; i < r; ) {
+      this.posOut >= o && this.keccak();
+      const n = Math.min(o - this.posOut, r - i);
+      t.set(e.subarray(this.posOut, this.posOut + n), i), this.posOut += n, i += n;
+    }
+    return t;
+  }
+  xofInto(t) {
+    if (!this.enableXOF)
+      throw new Error("XOF is not possible for this instance");
+    return this.writeInto(t);
+  }
+  xof(t) {
+    return it(t), this.xofInto(new Uint8Array(t));
+  }
+  digestInto(t) {
+    if (jt(t, this), this.finished)
+      throw new Error("digest() was already called");
+    return this.writeInto(t), this.destroy(), t;
+  }
+  digest() {
+    return this.digestInto(new Uint8Array(this.outputLen));
+  }
+  destroy() {
+    this.destroyed = !0, K(this.state);
+  }
+  _cloneInto(t) {
+    const { blockLen: e, suffix: o, outputLen: i, rounds: r, enableXOF: n } = this;
+    return t || (t = new nt(e, o, i, n, r)), t.state32.set(this.state32), t.pos = this.pos, t.posOut = this.posOut, t.finished = this.finished, t.rounds = r, t.suffix = o, t.outputLen = i, t.enableXOF = n, t.destroyed = this.destroyed, t;
+  }
+}
+const ss = (s, t, e, o = {}) => St(() => new nt(t, s, e), o), os = /* @__PURE__ */ ss(1, 136, 32), Et = 64, S = 20, ot = 4, Dt = 2, ns = 0, rs = 1, D = [64, 64], is = (s) => Array.from(s).map((t) => t.toString(16).padStart(2, "0")).join("");
+function rt(s) {
+  return Ge(_t(s));
+}
+function Lt(s) {
+  return (1 << s) - 1;
+}
+function as(s) {
+  let t = 1;
+  for (; t * t < s + 1; ) t++;
+  return Math.max(t, 2);
+}
+function cs(s) {
+  const t = ot, e = s * Lt(t);
+  return { d: t, n: s, checksum_radix: as(e) };
+}
+function z(s, t) {
+  const e = [];
+  let o = t;
+  for (; o > 0; )
+    e.push(o & 255), o >>>= 8;
+  const i = new Uint8Array(s.length + e.length);
+  i.set(s);
+  for (let r = 0; r < e.length; r++)
+    i[s.length + r] = e[r];
+  return rt(i);
+}
+function j(s, t) {
+  let e = s;
+  for (let o = 0; o < t; o++)
+    e = rt(e);
+  return e;
+}
+function ls(s, t) {
+  const e = Lt(t.d), o = t.checksum_radix - 1, i = Math.floor(t.n * e / t.checksum_radix), r = [];
+  for (let h = 0; h < t.n; h++) {
+    const g = z(s, h + Dt), b = j(g, e);
+    r.push(Array.from(b));
+  }
+  const n = z(
+    s,
+    ns
+  ), a = j(
+    n,
+    o
+  ), c = z(
+    s,
+    rs
+  ), u = j(
+    c,
+    i
+  );
+  return {
+    config: t,
+    message_terminals: r,
+    checksum_major_terminal: Array.from(u),
+    checksum_minor_terminal: Array.from(a)
+  };
+}
+async function us(s) {
+  try {
+    if (s.length !== Et)
+      throw new Error(
+        `WOTS seed must be exactly ${Et} bytes, got ${s.length}`
+      );
+    const t = [];
+    for (let e = 0; e < D.length; e++) {
+      const o = D[e], i = cs(o), r = new Uint8Array(s.length + 1);
+      r.set(s), r[s.length] = e;
+      const n = rt(r);
+      try {
+        const a = ls(n, i);
+        if (a.config.d !== ot)
+          throw new Error(
+            `Block ${e}: expected d=${ot}, got d=${a.config.d}`
+          );
+        if (a.config.n !== o)
+          throw new Error(
+            `Block ${e}: expected n=${o}, got n=${a.config.n}`
+          );
+        if (a.message_terminals.length !== o)
+          throw new Error(
+            `Block ${e}: expected ${o} message terminals, got ${a.message_terminals.length}`
+          );
+        for (let c = 0; c < a.message_terminals.length; c++)
+          if (a.message_terminals[c].length !== S)
+            throw new Error(
+              `Block ${e} terminal ${c}: expected ${S} bytes, got ${a.message_terminals[c].length}`
+            );
+        if (a.checksum_minor_terminal.length !== S)
+          throw new Error(
+            `Block ${e} checksum_minor: expected ${S} bytes`
+          );
+        if (a.checksum_major_terminal.length !== S)
+          throw new Error(
+            `Block ${e} checksum_major: expected ${S} bytes`
+          );
+        t.push(a);
+      } finally {
+        r.fill(0), n.fill(0);
+      }
+    }
+    if (t.length !== D.length)
+      throw new Error(
+        `Expected ${D.length} blocks, got ${t.length}`
+      );
+    return t;
+  } finally {
+    s.fill(0);
+  }
+}
+function Q(s, t, e) {
+  if (s.length !== S)
+    throw new Error(
+      `Block ${t} ${e}: expected ${S} bytes, got ${s.length}`
+    );
+  for (let o = 0; o < s.length; o++) {
+    const i = s[o];
+    if (!Number.isInteger(i) || i < 0 || i > 255)
+      throw new Error(
+        `Block ${t} ${e}[${o}]: invalid byte value ${i}`
+      );
+  }
+}
+function hs(s) {
+  if (s.length === 0)
+    throw new Error("Public keys array must not be empty");
+  for (let r = 0; r < s.length; r++) {
+    const n = s[r];
+    Q(n.checksum_minor_terminal, r, "checksum_minor_terminal"), Q(n.checksum_major_terminal, r, "checksum_major_terminal");
+    for (let a = 0; a < n.message_terminals.length; a++)
+      Q(n.message_terminals[a], r, `message_terminal[${a}]`);
+  }
+  let t = 0;
+  for (const r of s)
+    t += Dt + r.message_terminals.length;
+  const e = new Uint8Array(t * S);
+  let o = 0;
+  for (const r of s) {
+    e.set(r.checksum_minor_terminal, o), o += S, e.set(r.checksum_major_terminal, o), o += S;
+    for (const n of r.message_terminals)
+      e.set(n, o), o += S;
+  }
+  const i = os(e);
+  return `0x${is(i)}`;
+}
+async function ds(s, t) {
+  const e = [], o = [], i = [], r = [];
+  try {
+    for (let n = 0; n < t; n++) {
+      const a = await Zt(s, n);
+      try {
+        const u = await us(a);
+        e.push(u), o.push(hs(u));
+      } finally {
+        a.fill(0);
+      }
+      const c = await Jt(s, n);
+      try {
+        const u = et(c);
+        i.push(u), r.push(de(C(u)).slice(2));
+      } finally {
+        c.fill(0);
+      }
+    }
+  } finally {
+    s.fill(0);
+  }
+  return { perVaultWotsKeys: e, wotsPkHashes: o, htlcSecretHexes: i, hashlocks: r };
+}
+const fs = 1, ps = 2, gs = 33, ms = 2, bs = 3, ws = 1, L = 64, Ps = 0, Tt = 1, vt = /^[0-9a-f]{64}$/i, xs = /^(?:[0-9a-f]{2})+$/;
+function ys(s) {
+  const t = s.slice(2);
+  if (!xs.test(t))
+    throw new Error(
+      "proof of possession witness is not even-length lowercase hex"
+    );
+  return oe(
+    Uint8Array.from(O.from(t, "hex")),
+    "proof of possession witness"
+  );
+}
+function ks(s, t, e) {
+  var i;
+  const o = ys(e);
+  if (o.length === fs) {
+    const [r] = o;
+    let n, a;
+    if (r.length === L)
+      n = r, a = Ps;
+    else if (r.length === L + 1 && r[L] === Tt)
+      n = r.subarray(0, L), a = Tt;
+    else
+      throw new Error(
+        "proof of possession witness item must be a 64-byte Schnorr signature (or 65 bytes ending in 0x01)"
+      );
+    if (!vt.test(t))
+      throw new Error(
+        `depositor public key must be bare 64-char x-only hex, got "${t}"`
+      );
+    const c = Uint8Array.from(O.from(t, "hex"));
+    if (!ye(s, c, n, a))
+      throw new Error(
+        "proof of possession signature does not verify against the depositor key"
+      );
+    return { kind: "p2tr-verified" };
+  }
+  if (o.length === ps) {
+    if (!vt.test(t))
+      throw new Error(
+        `depositor public key must be bare 64-char x-only hex, got "${t}"`
+      );
+    const [r, n] = o;
+    if (n.length !== gs || n[0] !== ms && n[0] !== bs)
+      throw new Error(
+        `proof of possession P2WPKH witness item 1 is not a compressed public key (${n.length} bytes, prefix 0x${((i = n[0]) == null ? void 0 : i.toString(16)) ?? "none"})`
+      );
+    if (!Be.isPointCompressed(n))
+      throw new Error(
+        "proof of possession P2WPKH witness pubkey is not a valid secp256k1 point"
+      );
+    const a = O.from(
+      n.subarray(ws)
+    ).toString("hex");
+    if (a !== t.toLowerCase())
+      throw new Error(
+        `proof of possession witness pubkey does not match the depositor key: witness carries ${a}, expected ${t}`
+      );
+    if (!ke(s, n, r))
+      throw new Error(
+        "proof of possession signature does not verify against the depositor key"
+      );
+    return { kind: "p2wpkh-verified" };
+  }
+  throw new Error(
+    `proof of possession witness has ${o.length} items; expected 1 (P2TR) or 2 (P2WPKH)`
+  );
+}
+const Kt = 0, Z = "00".repeat(32);
+function Es(s, t) {
+  const e = {
+    bitcoin: "bc",
+    testnet: "tb",
+    signet: "tb",
+    regtest: "bcrt"
+  };
+  try {
+    const o = At.address.fromBech32(s);
+    return o.prefix === e[t] && o.version === 0 && o.data.length === 20;
+  } catch {
+    return !1;
+  }
+}
+function Ts(s, t, e, o) {
+  const i = e == null ? void 0 : e[`${s}:${t}`];
+  return i ? Promise.resolve({
+    txid: s,
+    vout: t,
+    value: i.value,
+    scriptPubKey: i.scriptPubKey
+  }) : ve(s, t, o);
+}
+const Bt = 12e4;
+class js {
+  /**
+   * Creates a new PeginManager instance.
+   *
+   * @param config - Manager configuration including wallets and contract addresses
+   */
+  constructor(t) {
+    y(this, "config");
+    this.config = t;
+  }
+  /**
+   * Prepare a peg-in: sizing pass → vault-root derivation (one wallet
+   * popup) → per-vault WOTS / hashlock derivation → commit pass with
+   * PSBT signing (signPsbt for a single vault, one batch popup for a
+   * split). Returns broadcast-ready txs, the pubkey snapshot, and the
+   * sensitive derived material.
+   *
+   * @throws If the wallet rejects, insufficient funds, or an internal
+   *         invariant violation.
+   */
+  async preparePegin(t) {
+    if (t.amounts.length === 0)
+      throw new Error("amounts must contain at least one entry");
+    const e = await this.config.btcWallet.getPublicKeyHex(), o = $(e);
+    if (U(this.config.btcWallet)) {
+      const f = (await fe(this.config.btcWallet)).trim();
+      if (t.changeAddress.trim() !== f)
+        throw new Error(
+          `Pre-PegIn changeAddress "${t.changeAddress}" is not the approval wallet's change address ("${f}"). Refusing to build a tx the signing device would reject.`
+        );
+    } else if (!gt(
+      t.changeAddress,
+      e,
+      this.config.btcNetwork
+    ))
+      throw new Error(
+        `Pre-PegIn changeAddress "${t.changeAddress}" is not derived from the connected wallet's public key. Refusing to build a tx that would send change to an address the signing key doesn't control.`
+      );
+    const i = await this.prepareSizing(o, t), r = i.selectedUTXOs.map(
+      (f) => ({
+        txid: tt(f.txid),
+        vout: f.vout
+      })
+    ), n = await It(this.config.btcWallet, {
+      depositorBtcPubkey: tt(o),
+      fundingOutpoints: r
+    });
+    let a, c;
+    try {
+      const f = await te(n);
+      try {
+        a = et(f), c = et(_t(f));
+      } finally {
+        f.fill(0);
+      }
+    } catch (f) {
+      throw n.fill(0), f;
+    }
+    const u = await ds(n, t.amounts.length), { perVaultWotsKeys: h, wotsPkHashes: g, htlcSecretHexes: b, hashlocks: w } = u, d = await this.preparePeginCommit({
+      depositorBtcPubkeyRaw: e,
+      depositorBtcPubkey: o,
+      hashlocks: w,
+      authAnchorHash: c,
+      sizing: i,
+      params: t
+    });
+    for (let f = 0; f < d.perVault.length; f++)
+      if (d.perVault[f].htlcVout !== f)
+        throw new Error(
+          `Internal invariant violation: htlcVout/index mismatch at vault ${f} (expected ${f}, got ${d.perVault[f].htlcVout})`
+        );
+    pe(
+      d.fundedPrePeginTxHex,
+      t.amounts.length,
+      c
+    );
+    const { depositTerms: E, ...k } = d;
+    return {
+      transaction: {
+        ...k,
+        selectedUTXOs: i.selectedUTXOs,
+        fee: i.fee,
+        changeAmount: i.changeAmount
+      },
+      depositorBtcPubkey: o,
+      derivedSecrets: {
+        perVaultWotsKeys: h,
+        wotsPkHashes: g,
+        htlcSecretHexes: b,
+        authAnchorHex: a
+      },
+      depositTerms: E
+    };
+  }
+  /**
+   * Build unfunded Pre-PegIn + select UTXOs. No PSBT signing.
+   *
+   * Returns the full selection result (UTXOs, fee, changeAmount) so the
+   * commit pass funds the broadcast tx with the exact same set used to
+   * build the vault-context funding-outpoints commitment. Re-running
+   * `selectUtxosForPegin` in the commit pass would be deterministic given
+   * the same inputs, but threading the result through guarantees the
+   * domain separator structurally matches the funded tx inputs.
+   *
+   * Sizing runs before the wallet popup, so neither the real per-vault
+   * hashlocks nor the real `authAnchorHash` are known yet. Both slots
+   * are filled with a 32-byte placeholder; the commit pass swaps in the
+   * real values. Output budget is identical (32-byte push regardless of
+   * content), so UTXO selection is invariant under substitution.
+   */
+  async prepareSizing(t, e) {
+    const o = e.amounts.map(
+      () => Z
+    ), i = e.vaultKeeperBtcPubkeys.length, r = await ft({
+      vaultCoreVersion: e.vaultCoreVersion,
+      depositorPubkey: t,
+      vaultProviderPubkey: B(e.vaultProviderBtcPubkey),
+      vaultKeeperPubkeys: e.vaultKeeperBtcPubkeys.map(B),
+      universalChallengerPubkeys: e.universalChallengerBtcPubkeys.map(B),
+      hashlocks: o,
+      timelockRefund: e.timelockRefund,
+      pegInAmounts: e.amounts,
+      feeRate: e.protocolFeeRate,
+      minPeginFeeRate: e.minPeginFeeRate,
+      numLocalChallengers: i,
+      councilQuorum: e.councilQuorum,
+      councilSize: e.councilSize,
+      network: this.config.btcNetwork,
+      authAnchorHash: Z
+    }), n = me(
+      [...e.availableUTXOs],
+      r.totalOutputValue,
+      e.mempoolFeeRate,
+      we(r.htlcValues.length, !0)
+    );
+    return {
+      selectedUTXOs: n.selectedUTXOs,
+      fee: n.fee,
+      changeAmount: n.changeAmount
+    };
+  }
+  /** Build PegIn txs and batch-sign their inputs with real hashlocks. */
+  async preparePeginCommit(t) {
+    const {
+      depositorBtcPubkeyRaw: e,
+      depositorBtcPubkey: o,
+      hashlocks: i,
+      authAnchorHash: r,
+      sizing: n,
+      params: a
+    } = t, c = Z.toLowerCase();
+    for (let m = 0; m < i.length; m++)
+      if (i[m].toLowerCase() === c)
+        throw new Error(
+          `preparePeginCommit refusing to build with sizing-pass placeholder hashlock at vault ${m} — internal substitution bug`
+        );
+    if (r.toLowerCase() === c)
+      throw new Error(
+        "preparePeginCommit refusing to build with sizing-pass placeholder auth-anchor hash — internal substitution bug"
+      );
+    const u = B(
+      a.vaultProviderBtcPubkey
+    ), h = a.vaultKeeperBtcPubkeys.map(B), g = a.universalChallengerBtcPubkeys.map(B), b = h.length, w = {
+      vaultCoreVersion: a.vaultCoreVersion,
+      depositorPubkey: o,
+      vaultProviderPubkey: u,
+      vaultKeeperPubkeys: h,
+      universalChallengerPubkeys: g,
+      hashlocks: i,
+      timelockRefund: a.timelockRefund,
+      pegInAmounts: a.amounts,
+      feeRate: a.protocolFeeRate,
+      minPeginFeeRate: a.minPeginFeeRate,
+      numLocalChallengers: b,
+      councilQuorum: a.councilQuorum,
+      councilSize: a.councilSize,
+      network: this.config.btcNetwork,
+      authAnchorHash: r
+    }, d = await ft(w), E = mt(this.config.btcNetwork), k = Pe({
+      unfundedTxHex: d.psbtHex,
+      selectedUTXOs: n.selectedUTXOs,
+      changeAddress: a.changeAddress,
+      changeAmount: n.changeAmount,
+      network: E
+    }), f = n.selectedUTXOs.reduce((m, T) => m + BigInt(T.value), 0n) - d.totalOutputValue - n.changeAmount;
+    if (f !== n.fee)
+      throw new Error(
+        `Pre-PegIn funded fee ${f} does not match the sizing-pass fee ${n.fee}; refusing to publish a deposit-terms fee bound the funded transaction does not pay.`
+      );
+    const v = B(
+      G(k)
+    ), _ = [], p = [], P = [];
+    for (let m = 0; m < i.length; m++) {
+      const T = await ee({
+        prePeginParams: w,
+        timelockPegin: a.timelockPegin,
+        fundedPrePeginTxHex: k,
+        htlcVout: m
+      }), I = await ne({
+        vaultCoreVersion: a.vaultCoreVersion,
+        peginTxHex: T.txHex,
+        fundedPrePeginTxHex: k,
+        depositorPubkey: o,
+        vaultProviderPubkey: u,
+        vaultKeeperPubkeys: h,
+        universalChallengerPubkeys: g,
+        hashlock: i[m],
+        timelockRefund: a.timelockRefund,
+        network: this.config.btcNetwork
+      });
+      _.push(T), p.push(I.psbtHex), P.push(
+        ue(e, 1)
+      );
+    }
+    const l = $e({
+      vaultCoreVersion: a.vaultCoreVersion,
+      protocolFeeRate: a.protocolFeeRate,
+      timelockPegin: a.timelockPegin,
+      timelockAssert: a.timelockAssert,
+      timelockRefund: a.timelockRefund,
+      prepeginTxid: v,
+      prepeginMaxFee: n.fee,
+      vaultProviderBtcPubkey: u,
+      vaultKeeperBtcPubkeys: h,
+      universalChallengerBtcPubkeys: g,
+      maxAcceptableCommissionBps: Y(
+        a.commissionBps
+      ),
+      peginAmounts: a.amounts,
+      depositorClaimValue: d.depositorClaimValue,
+      peginMaxFee: d.minPeginFee
+    });
+    U(this.config.btcWallet) && await this.config.btcWallet.approveDepositTerms(l);
+    const x = await ge(
+      this.config.btcWallet,
+      p,
+      P
+    ), A = [];
+    for (let m = 0; m < x.length; m++) {
+      pt({
+        requestedPsbtHex: p[m],
+        returnedPsbtHex: x[m]
+      });
+      const T = re(
+        x[m],
+        o
+      );
+      se({
+        requestedPsbtHex: p[m],
+        signatureHex: T,
+        signerXOnlyPubkeyHex: o,
+        inputIndex: 0
+      });
+      const I = ie(x[m]);
+      A.push({
+        htlcVout: m,
+        htlcValue: d.htlcValues[m],
+        peginTxHex: I,
+        peginTxid: _[m].txid,
+        peginInputSignature: T,
+        vaultScriptPubKey: _[m].vaultScriptPubKey
+      });
+    }
+    return {
+      fundedPrePeginTxHex: k,
+      prePeginTxid: v,
+      perVault: A,
+      depositTerms: l
+    };
+  }
+  /**
+   * Signs and broadcasts a funded peg-in transaction to the Bitcoin network.
+   *
+   * This method:
+   * 1. Parses the funded transaction hex
+   * 2. Fetches UTXO data from mempool for each input
+   * 3. Creates a PSBT with proper witnessUtxo/tapInternalKey
+   * 4. Signs via btcWallet.signPsbt()
+   * 5. Finalizes and extracts the transaction
+   * 6. Broadcasts via mempool API
+   *
+   * IMPORTANT — this method does NOT gate on Ethereum finality. Committing
+   * BTC to the HTLC while the peg-in registration is still reorg-exposed can
+   * strand the deposit: the vault record disappears from the chain while the
+   * BTC stays locked until the HTLC refund timelock. Callers must await
+   * `waitForPeginRegistrationDepth` for the registered vault(s) before calling
+   * this. The gate is not applied here because the params carry no vault ID —
+   * adding one would be a breaking signature change.
+   *
+   * @param params - Transaction hex and depositor public key
+   * @returns The broadcasted Bitcoin transaction ID
+   * @throws Error if signing or broadcasting fails
+   */
+  async signAndBroadcast(t) {
+    const { fundedPrePeginTxHex: e, depositorBtcPubkey: o } = t, i = e.startsWith("0x") ? e.slice(2) : e, r = Ct.fromHex(i);
+    if (r.ins.length === 0)
+      throw new Error("Transaction has no inputs");
+    const n = new ut();
+    n.setVersion(r.version), n.setLocktime(r.locktime);
+    const a = O.from(
+      $(o),
+      "hex"
+    ), c = this.config.mempoolApiUrl, u = r.ins.map((p) => {
+      const P = O.from(p.hash).reverse().toString("hex"), l = p.index;
+      return Ts(P, l, t.localPrevouts, c).then(
+        (x) => ({ input: p, utxoData: x, txid: P, vout: l })
+      );
+    }), h = await Promise.all(u), g = h.reduce(
+      (p, P) => p + BigInt(P.utxoData.value),
+      0n
+    ), b = r.outs.reduce(
+      (p, P) => p + BigInt(P.value),
+      0n
+    );
+    if (g < b)
+      throw new Error(
+        `UTXO value mismatch: total input value (${g} sat) is less than total output value (${b} sat). This may indicate the mempool API returned manipulated UTXO data.`
+      );
+    const w = g - b;
+    if (w > bt)
+      throw new Error(
+        `Implied transaction fee (${w} sat) exceeds maximum reasonable fee (${bt} sat). This may indicate manipulated UTXO data.`
+      );
+    for (const { input: p, utxoData: P, txid: l, vout: x } of h) {
+      const A = be(
+        {
+          value: P.value,
+          scriptPubKey: P.scriptPubKey
+        },
+        a
+      );
+      n.addInput({
+        hash: p.hash,
+        index: p.index,
+        sequence: p.sequence,
+        ...A
+      });
+    }
+    for (const p of r.outs)
+      n.addOutput({
+        script: p.script,
+        value: p.value
+      });
+    await Ue({
+      wallet: this.config.btcWallet,
+      depositTerms: t.depositTerms,
+      fundedPrePeginTxHex: e,
+      depositorBtcPubkey: o
+    });
+    const d = n.toHex(), E = await this.config.btcWallet.signPsbt(d);
+    pt({
+      requestedPsbtHex: d,
+      returnedPsbtHex: E
+    });
+    const k = ae({
+      requestedPsbtHex: d,
+      returnedPsbtHex: E
+    });
+    if (U(this.config.btcWallet) && k !== n.data.inputs.length)
+      throw new Error(
+        `Key-path verification covered ${k} of ${n.data.inputs.length} Pre-PegIn inputs; an approval wallet signs every input key-path, so the unverified ones must not be broadcast.`
+      );
+    const f = ut.fromHex(E);
+    try {
+      f.finalizeAllInputs();
+    } catch (p) {
+      if (!f.data.inputs.every(
+        (l) => l.finalScriptWitness || l.finalScriptSig
+      ))
+        throw new Error(
+          `PSBT finalization failed and wallet did not auto-finalize: ${p}`
+        );
+    }
+    const v = f.extractTransaction().toHex();
+    return await Ee(v, c);
+  }
+  /**
+   * Registers a peg-in on Ethereum by calling the BTCVaultRegistry contract.
+   *
+   * This method:
+   * 1. Re-verifies the PopSignature against the currently connected ETH
+   *    and BTC wallets — refuses to proceed if either has changed
+   * 2. Derives vault ID and checks if it already exists (pre-flight)
+   * 3. Encodes the contract call using viem
+   * 4. Estimates gas (catches contract errors early with proper revert
+   *    reasons)
+   * 5. Sends transaction with pre-estimated gas via
+   *    ethWallet.sendTransaction()
+   *
+   * The PopSignature must be obtained via
+   * {@link signProofOfPossession} before this call.
+   *
+   * @param params - Registration parameters including the PopSignature
+   *                 and the prepared Pre-PegIn / PegIn transactions
+   * @returns Result containing Ethereum transaction hash and vault ID
+   * @throws Error if the PopSignature does not match the connected wallets
+   * @throws Error if the vault already exists
+   * @throws Error if contract simulation fails (e.g., invalid signature,
+   *         unauthorized)
+   */
+  async registerPeginOnChain(t) {
+    const {
+      unsignedPrePeginTx: e,
+      depositorSignedPeginTx: o,
+      vaultProvider: i,
+      hashlock: r,
+      htlcVout: n,
+      depositorPayoutBtcAddress: a,
+      depositorWotsPkHash: c,
+      popSignature: u
+    } = t;
+    if (!this.config.ethWallet.account)
+      throw new Error("Ethereum wallet account not found");
+    const h = this.config.ethWallet.account.address;
+    if (!ht(u.depositorEthAddress, h))
+      throw new Error(
+        `Proof of possession was signed for ${u.depositorEthAddress} but the Ethereum wallet is currently connected to ${h}. Reconnect the original account or call signProofOfPossession() again.`
+      );
+    const g = await this.assertPopMatchesBtcWallet(u), b = u.btcPopSignature, w = C(
+      u.depositorBtcPubkey
+    ), d = C(e), E = C(o), k = a ?? await this.config.btcWallet.getAddress(), f = this.resolvePayoutScriptPubKey(
+      g,
+      k
+    ), v = G(E), _ = await dt(
+      B(v),
+      B(h)
+    ), p = C(_);
+    if (await this.checkVaultExists(p))
+      throw new Error(
+        `Vault already exists (ID: ${p}, peginTxHash: ${v}). Vault IDs are derived from the pegin transaction hash and depositor address. To create a new vault, use different UTXOs or a different amount to generate a unique transaction.`
+      );
+    const l = this.config.publicClient;
+    let x;
+    try {
+      x = await l.readContract({
+        address: this.config.vaultContracts.btcVaultRegistry,
+        abi: H,
+        functionName: "getPegInFee",
+        args: [i]
+      });
+    } catch (V) {
+      throw new Error(
+        "Failed to query pegin fee from the contract. Please check your network connection and that the contract address is correct.",
+        { cause: V }
+      );
+    }
+    const A = await this.resolveMaxAcceptableCommissionBps(
+      i,
+      t.quotedCommissionBps
+    ), m = J({
+      abi: H,
+      functionName: "submitPeginRequest",
+      args: [
+        h,
+        w,
+        b,
+        d,
+        E,
+        i,
+        A,
+        r,
+        n,
+        f,
+        c
+      ]
+    });
+    let T;
+    try {
+      T = await l.estimateGas({
+        to: this.config.vaultContracts.btcVaultRegistry,
+        data: m,
+        value: x,
+        account: this.config.ethWallet.account.address
+      });
+    } catch (V) {
+      R(V);
+    }
+    let I;
+    try {
+      I = await this.config.ethWallet.sendTransaction({
+        to: this.config.vaultContracts.btcVaultRegistry,
+        data: m,
+        value: x,
+        account: this.config.ethWallet.account,
+        chain: this.config.ethChain,
+        gas: T
+      });
+    } catch (V) {
+      R(V);
+    }
+    const q = await wt({
+      publicClient: l,
+      walletAddress: this.config.ethWallet.account.address,
+      hash: I,
+      timeout: Bt
+    });
+    return q.status === "reverted" && R(
+      new Error(
+        `Transaction reverted. Hash: ${q.transactionHash}. Check the transaction on block explorer for details.`
+      )
+    ), {
+      ethTxHash: q.transactionHash,
+      vaultId: p,
+      peginTxHash: v
+    };
+  }
+  /**
+   * Register multiple pegins on Ethereum in a single transaction.
+   *
+   * Uses the contract's submitPeginRequestBatch() to submit all vault
+   * registrations atomically. All vaults must share the same vault provider.
+   * The PoP signature is signed once and included in each request.
+   *
+   * @param params - Batch registration parameters
+   * @returns Batch result with per-vault IDs and single ETH tx hash
+   */
+  async registerPeginBatchOnChain(t) {
+    const { vaultProvider: e, unsignedPrePeginTx: o, requests: i, popSignature: r } = t;
+    if (i.length === 0)
+      throw new Error("Batch pegin requires at least one request");
+    if (!this.config.ethWallet.account)
+      throw new Error("Ethereum wallet account not found");
+    const n = this.config.ethWallet.account.address;
+    if (!ht(r.depositorEthAddress, n))
+      throw new Error(
+        `Proof of possession was signed for ${r.depositorEthAddress} but the Ethereum wallet is currently connected to ${n}. Reconnect the original account or call signProofOfPossession() again.`
+      );
+    const a = await this.assertPopMatchesBtcWallet(r), c = r.btcPopSignature, u = i.map(
+      (l) => this.resolvePayoutScriptPubKey(
+        a,
+        l.depositorPayoutBtcAddress
+      )
+    ), h = [];
+    for (const l of i) {
+      const x = C(
+        l.depositorSignedPeginTx
+      ), A = G(x), m = await dt(
+        B(A),
+        B(n)
+      ), T = C(m);
+      if (await this.checkVaultExists(T))
+        throw new Error(
+          `Vault already exists (ID: ${T}, peginTxHash: ${A}). To create a new vault, use different UTXOs or a different amount.`
+        );
+      h.push({ vaultId: T, peginTxHash: A });
+    }
+    const g = this.config.publicClient;
+    let b;
+    try {
+      b = await g.readContract({
+        address: this.config.vaultContracts.btcVaultRegistry,
+        abi: H,
+        functionName: "getPegInFee",
+        args: [e]
+      });
+    } catch (l) {
+      throw new Error(
+        "Failed to query pegin fee from the contract. Please check your network connection and that the contract address is correct.",
+        { cause: l }
+      );
+    }
+    const w = b * BigInt(i.length), d = await this.resolveMaxAcceptableCommissionBps(
+      e,
+      t.quotedCommissionBps
+    ), E = C(
+      r.depositorBtcPubkey
+    ), k = C(o), f = i.map((l, x) => ({
+      depositorBtcPubKey: E,
+      btcPopSignature: c,
+      unsignedPrePeginTx: k,
+      depositorSignedPeginTx: C(
+        l.depositorSignedPeginTx
+      ),
+      hashlock: l.hashlock,
+      htlcVout: l.htlcVout,
+      referralCode: Kt,
+      depositorPayoutBtcAddress: u[x],
+      depositorWotsPkHash: l.depositorWotsPkHash
+    })), v = J({
+      abi: H,
+      functionName: "submitPeginRequestBatch",
+      args: [
+        n,
+        e,
+        d,
+        f
+      ]
+    });
+    let _;
+    try {
+      _ = await g.estimateGas({
+        to: this.config.vaultContracts.btcVaultRegistry,
+        data: v,
+        value: w,
+        account: this.config.ethWallet.account.address
+      });
+    } catch (l) {
+      R(l);
+    }
+    let p;
+    try {
+      p = await this.config.ethWallet.sendTransaction({
+        to: this.config.vaultContracts.btcVaultRegistry,
+        data: v,
+        value: w,
+        account: this.config.ethWallet.account,
+        chain: this.config.ethChain,
+        gas: _
+      });
+    } catch (l) {
+      R(l);
+    }
+    const P = await wt({
+      publicClient: g,
+      walletAddress: this.config.ethWallet.account.address,
+      hash: p,
+      timeout: Bt
+    });
+    return P.status === "reverted" && R(
+      new Error(
+        `Batch transaction reverted. Hash: ${P.transactionHash}. Check the transaction on block explorer for details.`
+      )
+    ), {
+      ethTxHash: P.transactionHash,
+      vaults: h
+    };
+  }
+  // Anchor to quoted+headroom when supplied (refuse if chain drifted past it);
+  // otherwise fall back to chain-current+headroom — see #1691.
+  async resolveMaxAcceptableCommissionBps(t, e) {
+    if (e === void 0 && U(this.config.btcWallet))
+      throw new Error(
+        "quotedCommissionBps is required when the wallet approved deposit terms: the registration ceiling must anchor to the approved quote."
+      );
+    let o;
+    try {
+      o = await new Te(
+        this.config.publicClient,
+        this.config.vaultContracts.btcVaultRegistry
+      ).getVaultProviderCommission(t);
+    } catch (i) {
+      throw new Error(
+        "Failed to query vault provider commission from the contract. Please check your network connection and that the contract address is correct.",
+        { cause: i }
+      );
+    }
+    if (e !== void 0) {
+      if (o > e + st)
+        throw new Error(
+          `Vault provider commission changed since quote: quoted ${e} bps, chain currently reports ${o} bps (allowed drift ${st} bps). Please refresh to see the new commission and try again.`
+        );
+      return Y(e);
+    }
+    return Y(o);
+  }
+  /**
+   * Check if a vault already exists for a given vault ID.
+   *
+   * The contract returns a default struct (with `depositor === zeroAddress`)
+   * when no vault is registered, so existence is signalled in the response,
+   * not via a thrown error. RPC/network failures are propagated rather than
+   * silently treated as "vault doesn't exist", which would otherwise let
+   * downstream calls run with stale assumptions.
+   *
+   * @param vaultId - The Bitcoin transaction hash (vault ID)
+   * @returns True if vault exists, false otherwise
+   * @throws If the underlying RPC read fails
+   */
+  async checkVaultExists(t) {
+    return (await this.config.publicClient.readContract({
+      address: this.config.vaultContracts.btcVaultRegistry,
+      abi: H,
+      functionName: "getBtcVaultBasicInfo",
+      args: [t]
+    })).depositor !== Qt;
+  }
+  /**
+   * Resolve the BTC scriptPubKey to register as the depositor's payout sink.
+   *
+   * `address` is validated against the verified depositor pubkey, sourced
+   * from `assertPopMatchesBtcWallet`'s return value rather than
+   * `popSignature.depositorBtcPubkey` (which is x-only, parity stripped).
+   * For wallets that expose a compressed key this preserves y-parity end to
+   * end. For Taproot wallets that only expose an x-only key, the helper
+   * itself fails closed for P2WPKH — the parity is unknowable, so the
+   * payout sink must be a P2TR address derived from that same x.
+   *
+   * The helper does not call into the wallet so the batch path can resolve
+   * many requests without any extra adapter reads. Threat closed: a
+   * state-race or stale FE state that lets a non-wallet address reach the
+   * on-chain payout-script registration.
+   */
+  resolvePayoutScriptPubKey(t, e) {
+    if (!gt(
+      e,
+      t,
+      this.config.btcNetwork
+    ))
+      throw B(t).length === le && Es(e, this.config.btcNetwork) ? new Error(
+        `BTC payout address "${e}" is a P2WPKH (Native SegWit) address, but the connected wallet only exposes an x-only public key. P2WPKH validation requires a compressed key with known y-parity. Use a P2TR (Taproot) payout address instead.`
+      ) : new Error(
+        `BTC payout address "${e}" is not derived from the connected wallet's public key. The payout sink must be controlled by the same key that signs the pegin; refusing to register a mismatched address.`
+      );
+    const o = mt(this.config.btcNetwork);
+    try {
+      return `0x${At.address.toOutputScript(e, o).toString("hex")}`;
+    } catch {
+      throw new Error(
+        `Invalid BTC payout address: "${e}". Please provide a valid Bitcoin address for the ${this.config.btcNetwork} network.`
+      );
+    }
+  }
+  /**
+   * Sign a BIP-322 BTC Proof-of-Possession binding the connected BTC
+   * wallet to the connected ETH account for this chain and vault
+   * registry. The returned {@link PopSignature} can be reused across
+   * every register call in the same session.
+   *
+   * The witness is verified against the depositor key before it is
+   * returned — Schnorr for one-item (P2TR), ECDSA over the BIP-322
+   * P2WPKH virtual transaction for two-item — see {@link verifyPopWitness}.
+   *
+   * @throws If the wallet returns a malformed witness or a signature that
+   *         does not verify.
+   */
+  async signProofOfPossession() {
+    if (!this.config.ethWallet.account)
+      throw new Error("Ethereum wallet account not found");
+    const t = this.config.ethWallet.account.address, e = $(
+      await this.config.btcWallet.getPublicKeyHex()
+    ), o = this.config.vaultContracts.btcVaultRegistry, i = `${t.toLowerCase()}:${this.config.ethChain.id}:pegin:${o.toLowerCase()}`, r = await this.config.btcWallet.signMessage(
+      i,
+      "bip322-simple"
+    ), n = We(r);
+    return ks(
+      new TextEncoder().encode(i),
+      e,
+      n
+    ), { btcPopSignature: n, depositorEthAddress: t, depositorBtcPubkey: e };
+  }
+  /**
+   * Confirm the connected BTC wallet still matches the PoP it produced, and
+   * return the wallet's *raw* pubkey hex (parity-preserving form, as the
+   * wallet adapter returns it). The raw form is required by callers that
+   * validate Native SegWit / P2WPKH addresses, since P2WPKH is derived from
+   * a parity-bearing compressed key — an x-only form would let an attacker
+   * substitute the opposite-parity P2WPKH address.
+   */
+  async assertPopMatchesBtcWallet(t) {
+    const e = await this.config.btcWallet.getPublicKeyHex(), o = $(e), i = $(t.depositorBtcPubkey);
+    if (o !== i)
+      throw new Error(
+        `Proof of possession was signed with BTC pubkey ${i} but the BTC wallet is currently connected to ${o}. Reconnect the original wallet or call signProofOfPossession() again.`
+      );
+    return e;
+  }
+  /**
+   * Gets the configured Bitcoin network.
+   *
+   * @returns The Bitcoin network (mainnet, testnet, signet, regtest)
+   */
+  getNetwork() {
+    return this.config.btcNetwork;
+  }
+  /**
+   * Gets the configured BTCVaultRegistry contract address.
+   *
+   * @returns The Ethereum address of the BTCVaultRegistry contract
+   */
+  getVaultContractAddress() {
+    return this.config.vaultContracts.btcVaultRegistry;
+  }
+}
+const vs = 80, Bs = 250, Ss = 300, _s = 22, Xt = "ab";
+function As(s, t) {
+  const e = Xt.repeat(Ss), o = B(s).toLowerCase(), i = t.toString(16).padStart(8, "0"), r = `${o}${i}`, n = e.slice(r.length);
+  return `0x${r}${n}`;
+}
+function Cs(s, t) {
+  const e = (o) => `0x${Xt.repeat(o)}`;
+  return {
+    depositorBtcPubKey: e(32),
+    btcPopSignature: e(vs),
+    unsignedPrePeginTx: e(Bs),
+    depositorSignedPeginTx: As(
+      s,
+      t
+    ),
+    hashlock: e(32),
+    htlcVout: t,
+    referralCode: Kt,
+    depositorPayoutBtcAddress: e(_s),
+    depositorWotsPkHash: e(32)
+  };
+}
+async function Qs(s) {
+  const {
+    publicClient: t,
+    btcVaultRegistry: e,
+    depositorEthAddress: o,
+    vaultProvider: i,
+    batchSize: r
+  } = s;
+  if (r <= 0)
+    throw new Error(
+      `estimateSubmitPeginRequestBatchGas requires batchSize >= 1 (received ${r})`
+    );
+  const a = await t.readContract({
+    address: e,
+    abi: H,
+    functionName: "getPegInFee",
+    args: [i]
+  }) * BigInt(r), c = Array.from(
+    { length: r },
+    (h, g) => Cs(o, g)
+  ), u = J({
+    abi: H,
+    functionName: "submitPeginRequestBatch",
+    args: [
+      o,
+      i,
+      Ht,
+      c
+    ]
+  });
+  return t.estimateGas({
+    to: e,
+    data: u,
+    value: a,
+    account: o
+  });
+}
+export {
+  st as C,
+  Ht as M,
+  js as P,
+  Y as a,
+  $e as b,
+  hs as c,
+  us as d,
+  Qs as e,
+  Ue as f,
+  ds as g
+};
+//# sourceMappingURL=PeginManager--2R3T2S8.js.map