@babylonlabs-io/ts-sdk 0.67.0 → 0.68.0

package/dist/verifyScriptPathSchnorrSignature-i-koT139.js

@@ -1,817 +0,0 @@
-import { computeMinClaimValue as ee, peginP2aAnchorOutput as te, computeMinPeginFee as ie, buildPeginTxFromPrePegin as se, createPrePeginTransaction as ue, validatePeginP2aAnchor as ce, tapInternalPubkey as ne, createPayoutConnector as ae, computePayoutFeeFloor as le } from "@babylonlabs-io/babylon-tbv-rust-wasm";
-import { Buffer as p } from "buffer";
-import { Transaction as x, script as he, opcodes as de, payments as pe, Psbt as C, crypto as Pe } from "bitcoinjs-lib";
-import { c as T, d as ge } from "./fundPeginTransaction-B2wyjqp0.js";
-import { s as g, u as k, h as y, j as fe, T as I, d as we, S as H, X as O } from "./bitcoin-d9eaaZB_.js";
-import { D as L, P as R, b as U, c as K, M as N, d as F, e as ve, A as $e, B as me, V as Se, N as q } from "./constants-GjWXdaqV.js";
-import * as xe from "@bitcoin-js/tiny-secp256k1-asmjs";
-async function ye(e, t) {
-  const n = t.pegInAmounts.length;
-  if (e.htlcValues.length !== n)
-    throw new Error(
-      `WASM Pre-PegIn returned ${e.htlcValues.length} HTLC value(s), expected ${n} (one per requested deposit).`
-    );
-  if (e.peginAmounts.length !== n || e.htlcScriptPubKeys.length !== n || e.htlcAddresses.length !== n)
-    throw new Error(
-      `WASM Pre-PegIn returned mismatched array lengths (htlcValues=${e.htlcValues.length}, peginAmounts=${e.peginAmounts.length}, htlcScriptPubKeys=${e.htlcScriptPubKeys.length}, htlcAddresses=${e.htlcAddresses.length}); expected ${n} each.`
-    );
-  if (e.depositorClaimValue <= 0n)
-    throw new Error(
-      `WASM Pre-PegIn returned non-positive depositorClaimValue ${e.depositorClaimValue}; expected > 0.`
-    );
-  const o = await ee(
-    // Must price the same graph version the builder constructed.
-    t.vaultCoreVersion,
-    t.numLocalChallengers,
-    t.universalChallengerPubkeys.length,
-    t.councilQuorum,
-    t.councilSize,
-    t.feeRate
-  );
-  if (e.depositorClaimValue !== o)
-    throw new Error(
-      `WASM Pre-PegIn depositorClaimValue ${e.depositorClaimValue} does not match the independently computed minimum claim value ${o} (vaultCoreVersion=${t.vaultCoreVersion}, numLocalChallengers=${t.numLocalChallengers}, numUniversalChallengers=${t.universalChallengerPubkeys.length}, councilQuorum=${t.councilQuorum}, councilSize=${t.councilSize}, feeRate=${t.feeRate}).`
-    );
-  const r = await te(t.vaultCoreVersion), i = (r == null ? void 0 : r.value) ?? 0n, s = await ie(
-    t.vaultCoreVersion,
-    t.vaultKeeperPubkeys.length,
-    t.universalChallengerPubkeys.length,
-    t.minPeginFeeRate
-  ), u = s + i, h = t.minPeginFeeRate * T;
-  for (let c = 0; c < n; c++) {
-    const l = t.pegInAmounts[c], a = e.peginAmounts[c], f = e.htlcValues[c];
-    if (a !== l)
-      throw new Error(
-        `WASM Pre-PegIn peginAmount[${c}] ${a} does not match the requested amount ${l}; refusing to build a tx whose recorded amount differs from the depositor's request.`
-      );
-    if (a <= 0n)
-      throw new Error(
-        `WASM Pre-PegIn peginAmount[${c}] is non-positive (${a}); expected > 0.`
-      );
-    if (f <= 0n)
-      throw new Error(
-        `WASM Pre-PegIn htlcValue[${c}] is non-positive (${f}); expected > 0.`
-      );
-    const d = f - a - e.depositorClaimValue;
-    if (d <= 0n)
-      throw new Error(
-        `WASM Pre-PegIn htlcValue[${c}] ${f} does not strictly cover peginAmount ${a} + depositorClaimValue ${e.depositorClaimValue} + a PegIn reserve (implied reserve ${d}).`
-      );
-    if (d > h)
-      throw new Error(
-        `WASM Pre-PegIn implied reserve for HTLC[${c}] (${d} sat) exceeds the plausibility cap ${h} sat (minPeginFeeRate=${t.minPeginFeeRate} × ${T} vbytes); htlcValue ${f} appears grossly inflated.`
-      );
-    if (d !== u)
-      throw new Error(
-        `WASM Pre-PegIn htlcValue[${c}] ${f} implies a PegIn fee+anchor reserve of ${d} sat, expected exactly ${u} sat (minPeginFee ${s} + p2aAnchor ${i} for vaultCoreVersion ${t.vaultCoreVersion}, vaultKeepers=${t.vaultKeeperPubkeys.length}, universalChallengers=${t.universalChallengerPubkeys.length}, minPeginFeeRate=${t.minPeginFeeRate}).`
-      );
-  }
-  return s;
-}
-class b extends Error {
-  constructor(t) {
-    super(t), this.name = "HtlcOutputMismatchError";
-  }
-}
-function Ee(e, t, n) {
-  if (e.length < t.length)
-    throw new b(
-      `Encoded Pre-PegIn tx has ${e.length} output(s), fewer than the ${t.length} HTLC output(s) the cross-check validated.`
-    );
-  for (let o = 0; o < t.length; o++) {
-    const r = BigInt(e[o].value);
-    if (r !== t[o])
-      throw new b(
-        `Encoded Pre-PegIn HTLC output[${o}] value ${r} does not match the cross-checked htlcValue ${t[o]}; the funded/signed tx would not pay the validated amount.`
-      );
-    const i = e[o].script.toString("hex").toLowerCase(), s = n[o].toLowerCase();
-    if (i !== s)
-      throw new b(
-        `Encoded Pre-PegIn HTLC output[${o}] scriptPubKey ${i} does not match the cross-checked htlcScriptPubKey ${s}.`
-      );
-  }
-}
-const M = 64, Ce = /^[0-9a-fA-F]+$/;
-async function lt(e) {
-  const t = oe(e.authAnchorHash), n = await ue({
-    txGraphVersion: e.vaultCoreVersion,
-    depositorPubkey: e.depositorPubkey,
-    vaultProviderPubkey: e.vaultProviderPubkey,
-    vaultKeeperPubkeys: e.vaultKeeperPubkeys,
-    universalChallengerPubkeys: e.universalChallengerPubkeys,
-    hashlocks: [...e.hashlocks],
-    timelockRefund: e.timelockRefund,
-    pegInAmounts: [...e.pegInAmounts],
-    feeRate: e.feeRate,
-    minPeginFeeRate: e.minPeginFeeRate,
-    numLocalChallengers: e.numLocalChallengers,
-    councilQuorum: e.councilQuorum,
-    councilSize: e.councilSize,
-    network: e.network,
-    authAnchorHash: t
-  }), o = await ye(n, e), r = ge(n.txHex);
-  Ee(
-    r.outputs,
-    n.htlcValues,
-    n.htlcScriptPubKeys
-  );
-  const i = r.outputs.reduce(
-    (u, h) => u + BigInt(h.value),
-    0n
-  ), s = t !== void 0 ? n.htlcValues.length : null;
-  return {
-    psbtHex: n.txHex,
-    totalOutputValue: i,
-    htlcValues: n.htlcValues,
-    htlcScriptPubKeys: n.htlcScriptPubKeys,
-    htlcAddresses: n.htlcAddresses,
-    peginAmounts: n.peginAmounts,
-    depositorClaimValue: n.depositorClaimValue,
-    authAnchorVout: s,
-    minPeginFee: o
-  };
-}
-function oe(e) {
-  if (e === void 0) return;
-  const t = e.startsWith("0x") || e.startsWith("0X") ? e.slice(2) : e;
-  if (t.length !== M || !Ce.test(t))
-    throw new Error(
-      `authAnchorHash must be 32-byte hex (${M} chars, no 0x prefix); got length ${t.length}`
-    );
-  return t.toLowerCase();
-}
-async function ht(e) {
-  const t = await se(
-    {
-      txGraphVersion: e.prePeginParams.vaultCoreVersion,
-      depositorPubkey: e.prePeginParams.depositorPubkey,
-      vaultProviderPubkey: e.prePeginParams.vaultProviderPubkey,
-      vaultKeeperPubkeys: e.prePeginParams.vaultKeeperPubkeys,
-      universalChallengerPubkeys: e.prePeginParams.universalChallengerPubkeys,
-      hashlocks: [...e.prePeginParams.hashlocks],
-      timelockRefund: e.prePeginParams.timelockRefund,
-      pegInAmounts: [...e.prePeginParams.pegInAmounts],
-      feeRate: e.prePeginParams.feeRate,
-      minPeginFeeRate: e.prePeginParams.minPeginFeeRate,
-      numLocalChallengers: e.prePeginParams.numLocalChallengers,
-      councilQuorum: e.prePeginParams.councilQuorum,
-      councilSize: e.prePeginParams.councilSize,
-      network: e.prePeginParams.network,
-      authAnchorHash: oe(
-        e.prePeginParams.authAnchorHash
-      )
-    },
-    e.timelockPegin,
-    e.fundedPrePeginTxHex,
-    e.htlcVout
-  );
-  return await Ie(t, e), {
-    txHex: t.txHex,
-    txid: t.txid,
-    vaultScriptPubKey: t.vaultScriptPubKey,
-    vaultValue: t.vaultValue
-  };
-}
-const Ae = 2, be = 1;
-async function Ie(e, t) {
-  const n = t.prePeginParams.vaultCoreVersion;
-  await ce(n, e.txHex);
-  const o = await te(n), r = Ae + (o ? 1 : 0), i = x.fromHex(g(e.txHex));
-  if (i.ins.length !== 1)
-    throw new Error(
-      `PegIn tx has ${i.ins.length} input(s), expected exactly 1 (the Pre-PegIn HTLC outpoint).`
-    );
-  const s = x.fromHex(
-    g(t.fundedPrePeginTxHex)
-  ).getId(), u = k(
-    new Uint8Array(i.ins[0].hash).slice().reverse()
-  );
-  if (u !== s)
-    throw new Error(
-      `PegIn input spends txid ${u}, expected the funded Pre-PegIn ${s}.`
-    );
-  if (i.ins[0].index !== t.htlcVout)
-    throw new Error(
-      `PegIn input spends Pre-PegIn output ${i.ins[0].index}, expected the requested HTLC vout ${t.htlcVout}.`
-    );
-  if (i.outs.length !== r)
-    throw new Error(
-      `PegIn tx has ${i.outs.length} output(s), expected exactly ${r} for vaultCoreVersion ${n} (vault + depositor claim${o ? " + P2A anchor" : ""}).`
-    );
-  const h = t.prePeginParams.pegInAmounts[t.htlcVout];
-  if (e.vaultValue !== h)
-    throw new Error(
-      `PegIn vault output value ${e.vaultValue} does not match the requested peg-in amount ${h} for HTLC ${t.htlcVout}; refusing to sign a vault that locks a different amount than requested.`
-    );
-  const c = i.outs[0];
-  if (BigInt(c.value) !== e.vaultValue)
-    throw new Error(
-      `Encoded PegIn vault output value ${c.value} does not match the WASM-reported vaultValue ${e.vaultValue}.`
-    );
-  const l = c.script.toString("hex"), a = g(
-    e.vaultScriptPubKey
-  ).toLowerCase();
-  if (l.toLowerCase() !== a)
-    throw new Error(
-      `Encoded PegIn vault output scriptPubKey ${l} does not match the WASM-reported vaultScriptPubKey ${e.vaultScriptPubKey}.`
-    );
-  const f = i.getId();
-  if (f !== g(e.txid).toLowerCase())
-    throw new Error(
-      `Encoded PegIn txid ${f} does not match the WASM-reported txid ${e.txid}.`
-    );
-  const d = await ee(
-    n,
-    t.prePeginParams.numLocalChallengers,
-    t.prePeginParams.universalChallengerPubkeys.length,
-    t.prePeginParams.councilQuorum,
-    t.prePeginParams.councilSize,
-    t.prePeginParams.feeRate
-  ), m = i.outs[be];
-  if (BigInt(m.value) !== d)
-    throw new Error(
-      `Encoded PegIn depositor-claim output value ${m.value} does not match the independently computed claim value ${d} for vaultCoreVersion ${n}.`
-    );
-  const w = _e(
-    t.prePeginParams.depositorPubkey
-  );
-  if (!m.script.equals(w))
-    throw new Error(
-      `Encoded PegIn depositor-claim output scriptPubKey ${m.script.toString("hex")} does not pay to the depositor's claim script (expected ${w.toString("hex")}).`
-    );
-}
-function _e(e) {
-  const t = he.compile([
-    p.from(y(e)),
-    de.OP_CHECKSIG
-  ]), { output: n } = pe.p2tr({
-    internalPubkey: p.from(ne),
-    scriptTree: { output: t }
-  });
-  if (!n)
-    throw new Error(
-      "Failed to derive the depositor-claim P2TR scriptPubKey for PegIn output validation"
-    );
-  return n;
-}
-async function ke(e) {
-  const t = await ae(
-    {
-      txGraphVersion: e.vaultCoreVersion,
-      depositor: e.depositor,
-      vaultProvider: e.vaultProvider,
-      vaultKeepers: e.vaultKeepers,
-      universalChallengers: e.universalChallengers,
-      timelockPegin: e.timelockPegin
-    },
-    e.network
-  );
-  return {
-    payoutScript: t.payoutScript,
-    taprootScriptHash: t.taprootScriptHash,
-    scriptPubKey: t.scriptPubKey,
-    address: t.address,
-    payoutControlBlock: t.payoutControlBlock
-  };
-}
-const Ve = 256, Te = 1500, B = 256, W = 0xffffffffn, He = 500, Oe = 55, Le = 34;
-function Re(e) {
-  if (typeof e.protocolFeeRate != "bigint" || e.protocolFeeRate <= 0n || e.protocolFeeRate > W)
-    throw new Error(
-      `protocolFeeRate must be in [1, ${W}] sat/vB, got ${e.protocolFeeRate}`
-    );
-  for (const [t, n, o, r] of [
-    [
-      "keepers",
-      e.numVaultKeepers,
-      Ve,
-      "fee-floor model limit"
-    ],
-    [
-      "challengers",
-      e.numUniversalChallengers,
-      Te,
-      "protocol maximum"
-    ]
-  ])
-    if (!Number.isInteger(n) || n < 1 || n > o)
-      throw new Error(
-        `Participant count for ${t} (${n}) is outside the supported range [1, ${o}]${n > o ? ` (${r})` : ""}.`
-      );
-  if (!Number.isInteger(e.councilSize) || e.councilSize < 1 || e.councilSize > B)
-    throw new Error(
-      `councilSize must be an integer in [1, ${B}], got ${e.councilSize}`
-    );
-}
-async function Ue(e, t) {
-  const { implicitFeeSats: n, out0Len: o, out1Len: r } = t, i = e.numVaultKeepers + e.numUniversalChallengers, s = BigInt(n), u = Math.max(0, o - Le), h = He + Oe * i + u, c = e.protocolFeeRate * BigInt(h);
-  if (s > c)
-    throw new Error(
-      `Payout implicit fee ${n} sats exceeds the safety cap of ${c} sats (${e.protocolFeeRate} sat/vB x ${h} vB for ${i} participants); refusing to sign payout.`
-    );
-  const l = await le(
-    e.vaultCoreVersion,
-    e.numVaultKeepers,
-    e.numUniversalChallengers,
-    e.numVaultKeepers,
-    e.councilSize,
-    o,
-    r,
-    e.protocolFeeRate
-  );
-  if (s < l)
-    throw new Error(
-      `Payout implicit fee ${n} sats is below the floor of ${l} sats (the smallest fee any known vault-provider build produces for this shape); refusing to sign payout.`
-    );
-}
-const Ke = 22, Ne = 34, Fe = 34, qe = 25, Me = 23;
-function Be(e) {
-  return e.length === Ke * 2 && e.startsWith("0014");
-}
-function We(e) {
-  return e.length === Ne * 2 && e.startsWith("0020");
-}
-function Xe(e) {
-  return e.length === Fe * 2 && e.startsWith("5120");
-}
-function ze(e) {
-  return e.length === qe * 2 && e.startsWith("76a914") && e.endsWith("88ac");
-}
-function De(e) {
-  return e.length === Me * 2 && e.startsWith("a914") && e.endsWith("87");
-}
-function X(e, t) {
-  const n = g(e).toLowerCase();
-  if (n.length === 0)
-    throw new Error(`${t} is empty`);
-  if (!/^[0-9a-f]+$/.test(n) || n.length % 2 !== 0)
-    throw new Error(`${t} is not valid hex`);
-  if (n.startsWith("6a"))
-    throw new Error(
-      `${t} is an OP_RETURN output, which is provably unspendable`
-    );
-  if (!Xe(n) && !Be(n) && !We(n) && !ze(n) && !De(n))
-    throw new Error(
-      `${t} is not a standard scriptPubKey (expected P2TR, P2WPKH, P2WSH, P2PKH, or P2SH; got ${n.length / 2} bytes: ${n})`
-    );
-}
-const z = 3;
-async function dt(e) {
-  const t = {
-    vaultCoreVersion: e.vaultCoreVersion,
-    numVaultKeepers: e.vaultKeeperBtcPubkeys.length,
-    numUniversalChallengers: e.universalChallengerBtcPubkeys.length,
-    councilSize: e.councilSize,
-    protocolFeeRate: e.protocolFeeRate
-  };
-  Re(t);
-  const n = x.fromHex(g(e.payoutTxHex)), o = x.fromHex(g(e.peginTxHex)), r = x.fromHex(g(e.assertTxHex));
-  if (n.ins.length !== L)
-    throw new Error(
-      `Payout transaction must have exactly ${L} inputs, got ${n.ins.length}`
-    );
-  if (n.version !== R)
-    throw new Error(
-      `Payout transaction version ${n.version} must be ${R}; refusing to sign payout.`
-    );
-  if (n.locktime !== U)
-    throw new Error(
-      `Payout transaction locktime ${n.locktime} must be ${U}; refusing to sign payout.`
-    );
-  const i = D(
-    n.ins[0],
-    0,
-    o,
-    "PegIn",
-    ve
-  );
-  if (n.ins[0].sequence !== e.timelockPegin)
-    throw new Error(
-      `Payout input 0 sequence ${n.ins[0].sequence} must equal the PegIn CSV timelock ${e.timelockPegin}; refusing to sign payout.`
-    );
-  const s = D(
-    n.ins[1],
-    1,
-    r,
-    "Assert",
-    $e
-  );
-  if (n.ins[1].sequence !== e.timelockAssert)
-    throw new Error(
-      `Payout input 1 sequence ${n.ins[1].sequence} must equal the Assert CSV timelock ${e.timelockAssert}; refusing to sign payout.`
-    );
-  const { out0Len: u, out1Len: h } = Ye(
-    n,
-    i.value,
-    e
-  ), c = i.value + s.value;
-  let l = 0;
-  for (const d of n.outs) l += d.value;
-  if (l > c)
-    throw new Error(
-      `Payout outputs (${l} sats) exceed inputs (${c} sats); invalid transaction.`
-    );
-  const a = c - l;
-  await Ue(t, {
-    implicitFeeSats: a,
-    out0Len: u,
-    out1Len: h
-  });
-  const f = await ke({
-    vaultCoreVersion: e.vaultCoreVersion,
-    depositor: e.depositorBtcPubkey,
-    vaultProvider: e.vaultProviderBtcPubkey,
-    vaultKeepers: e.vaultKeeperBtcPubkeys,
-    universalChallengers: e.universalChallengerBtcPubkeys,
-    timelockPegin: e.timelockPegin,
-    network: e.network
-  });
-  return {
-    psbtHex: Ge(
-      n,
-      i,
-      s,
-      f
-    )
-  };
-}
-function D(e, t, n, o, r) {
-  const i = k(
-    new Uint8Array(e.hash).slice().reverse()
-  ), s = n.getId();
-  if (i !== s || e.index !== r)
-    throw new Error(
-      `Input ${t} must spend ${o}:${r}. Expected ${s}:${r}, got ${i}:${e.index}`
-    );
-  const u = n.outs[e.index];
-  if (!u)
-    throw new Error(
-      `Previous output not found for input ${t} (txid: ${i}, index: ${e.index})`
-    );
-  return u;
-}
-function Ge(e, t, n, o) {
-  const r = new C();
-  r.setVersion(e.version), r.setLocktime(e.locktime);
-  const [i, s] = e.ins;
-  r.addInput({
-    hash: i.hash,
-    index: i.index,
-    sequence: i.sequence,
-    witnessUtxo: {
-      script: t.script,
-      value: t.value
-    },
-    tapLeafScript: [
-      {
-        leafVersion: I,
-        script: p.from(y(o.payoutScript)),
-        controlBlock: p.from(
-          y(o.payoutControlBlock)
-        )
-      }
-    ],
-    tapInternalKey: p.from(ne)
-    // sighashType omitted - defaults to SIGHASH_DEFAULT (0x00) for Taproot
-  }), r.addInput({
-    hash: s.hash,
-    index: s.index,
-    sequence: s.sequence,
-    witnessUtxo: {
-      script: n.script,
-      value: n.value
-    }
-  });
-  for (const u of e.outs)
-    r.addOutput({
-      script: u.script,
-      value: u.value
-    });
-  return r.toHex();
-}
-function G(e, t) {
-  const n = g(e).toLowerCase(), o = g(
-    we(t)
-  ).toLowerCase();
-  return n === o ? [n] : [n, o];
-}
-function Y(e, t) {
-  return t.some((n) => e.equals(p.from(n, "hex")));
-}
-function Ye(e, t, n) {
-  const {
-    claimerBtcPubkey: o,
-    vaultProviderBtcPubkey: r,
-    depositorBtcPubkey: i,
-    vaultKeeperBtcPubkeys: s,
-    registeredPayoutScriptPubKey: u,
-    commissionBps: h,
-    vkClaimerPayoutScriptPubKeys: c,
-    vpCommissionScriptPubKey: l
-  } = n;
-  if (!fe(u))
-    throw new Error("Invalid registeredPayoutScriptPubKey: not valid hex");
-  const a = g(o).toLowerCase(), f = g(r).toLowerCase(), d = g(i).toLowerCase(), m = s.map(
-    (S) => g(S).toLowerCase()
-  );
-  let w, P, v;
-  if (a === f)
-    w = "vp-claimer", P = Se, v = [g(u)];
-  else if (a === d)
-    w = "depositor-as-claimer", P = q, v = [g(u)];
-  else if (m.includes(a)) {
-    w = "vk-claimer", P = q;
-    const S = c[a];
-    if (S === void 0)
-      throw new Error(
-        `No registered payout script resolved for vault keeper claimer ${a}`
-      );
-    X(
-      S,
-      `Vault keeper payout script for claimer ${a}`
-    ), v = G(S, a);
-  } else
-    throw new Error(
-      `Unknown claimer pubkey ${a}: not VP, depositor, or a registered vault keeper`
-    );
-  if (e.outs.length !== P)
-    throw new Error(
-      `Payout transaction has ${e.outs.length} output(s), expected exactly ${P} for role ${w}.`
-    );
-  if (!Y(e.outs[0].script, v))
-    throw new Error(
-      `Payout transaction output 0 does not pay the expected scriptPubKey for role ${w}. Accepted: ${v.join(" or ")}; got ${e.outs[0].script.toString("hex")}`
-    );
-  const A = P - 1;
-  if (e.outs[A].value !== K)
-    throw new Error(
-      `Payout CPFP anchor (out ${A}) value ${e.outs[A].value} sats must equal ${K} sats`
-    );
-  if (w === "vp-claimer") {
-    X(
-      l,
-      "Vault provider commission payout script"
-    );
-    const S = G(
-      l,
-      f
-    );
-    if (!Y(e.outs[1].script, S))
-      throw new Error(
-        `Payout transaction output 1 does not pay the vault provider's commission scriptPubKey. Accepted: ${S.join(" or ")}; got ${e.outs[1].script.toString("hex")}`
-      );
-    if (!Number.isInteger(h) || h < 0 || h >= N)
-      throw new Error(
-        `commissionBps must be an integer in [0, ${N}), got ${h}`
-      );
-    const V = Math.floor(
-      t * h / me
-    );
-    if (e.outs[1].value > V)
-      throw new Error(
-        `Payout VP commission (out 1) value ${e.outs[1].value} sats exceeds cap ${V} sats (${h} bps of peginValue=${t})`
-      );
-  }
-  const E = e.outs[0].script.length;
-  if (E === 0 || E > F)
-    throw new Error(
-      `Payout receiver scriptPubKey length ${E} is outside the contract's registration cap [1, ${F}]; refusing to sign payout.`
-    );
-  const re = w === "vp-claimer" ? e.outs[1].script.length : void 0;
-  return { out0Len: E, out1Len: re };
-}
-function pt(e, t, n = 0) {
-  const o = C.fromHex(e);
-  if (n >= o.data.inputs.length)
-    throw new Error(
-      `Input index ${n} out of range (${o.data.inputs.length} inputs)`
-    );
-  const r = o.data.inputs[n];
-  if (r.tapScriptSig && r.tapScriptSig.length > 0) {
-    const i = y(t);
-    for (const s of r.tapScriptSig)
-      if (s.pubkey.equals(p.from(i)))
-        return Q(s.signature, n);
-    throw new Error(
-      `No signature found for depositor pubkey: ${t} at input ${n}`
-    );
-  }
-  if (r.finalScriptWitness && r.finalScriptWitness.length > 0) {
-    const i = Qe(r.finalScriptWitness);
-    if (i.length !== z)
-      throw new Error(
-        `Unexpected finalized witness stack size at input ${n}: expected ${z} items (signature, script, controlBlock), got ${i.length}`
-      );
-    return Q(i[0], n);
-  }
-  throw new Error(
-    `No tapScriptSig or finalScriptWitness found in signed PSBT at input ${n}`
-  );
-}
-function Q(e, t) {
-  if (e.length === 64)
-    return k(new Uint8Array(e));
-  throw e.length === 65 ? new Error(
-    `Unexpected sighash byte 0x${e[64].toString(16).padStart(2, "0")} at input ${t}. Expected implicit SIGHASH_DEFAULT as a 64-byte signature.`
-  ) : new Error(
-    `Unexpected signature length at input ${t}: ${e.length}`
-  );
-}
-function Qe(e) {
-  const t = [];
-  let n = 0;
-  const o = (s) => {
-    if (n + s > e.length)
-      throw new Error(
-        `Malformed witness data: need ${s} byte(s) at offset ${n}, only ${e.length - n} remaining`
-      );
-  }, r = () => {
-    o(1);
-    const s = e[n++];
-    if (s < 253) return s;
-    if (s === 253) {
-      o(2);
-      const u = (e[n] | e[n + 1] << 8) >>> 0;
-      return n += 2, u;
-    }
-    if (s === 254) {
-      o(4);
-      const u = (e[n] | e[n + 1] << 8 | e[n + 2] << 16 | e[n + 3] << 24) >>> 0;
-      return n += 4, u;
-    }
-    throw new Error(
-      `Malformed witness data: 8-byte varint (0xff) not supported at offset ${n - 1}`
-    );
-  }, i = r();
-  for (let s = 0; s < i; s++) {
-    const u = r();
-    o(u), t.push(p.from(e.subarray(n, n + u))), n += u;
-  }
-  if (n !== e.length)
-    throw new Error(
-      `Malformed witness data: ${e.length - n} trailing byte(s) after parsing ${i} item(s)`
-    );
-  return t;
-}
-class $ extends Error {
-  constructor(t) {
-    super(
-      `Wallet returned a PSBT for a different transaction: ${t}`
-    ), this.name = "PsbtSubstitutionError";
-  }
-}
-function Z(e, t) {
-  try {
-    return C.fromHex(t);
-  } catch (n) {
-    const o = n instanceof Error ? n.message : String(n);
-    throw new Error(`Failed to parse ${e} PSBT: ${o}`);
-  }
-}
-const Ze = 8;
-function _(e) {
-  return `${e.toString("hex").slice(0, Ze)}…`;
-}
-function j(e) {
-  const t = p.from(e).reverse();
-  return _(t);
-}
-function Pt(e) {
-  const t = Z("requested", e.requestedPsbtHex), n = Z("returned", e.returnedPsbtHex);
-  if (t.version !== n.version)
-    throw new $(
-      `tx version differs (requested=${t.version}, returned=${n.version})`
-    );
-  if (t.locktime !== n.locktime)
-    throw new $(
-      `tx locktime differs (requested=${t.locktime}, returned=${n.locktime})`
-    );
-  if (t.txInputs.length !== n.txInputs.length)
-    throw new $(
-      `input count differs (requested=${t.txInputs.length}, returned=${n.txInputs.length})`
-    );
-  if (t.txOutputs.length !== n.txOutputs.length)
-    throw new $(
-      `output count differs (requested=${t.txOutputs.length}, returned=${n.txOutputs.length})`
-    );
-  for (let o = 0; o < t.txInputs.length; o++) {
-    const r = t.txInputs[o], i = n.txInputs[o];
-    if (!r.hash.equals(i.hash))
-      throw new $(
-        `input ${o} prevout txid differs (requested=${j(r.hash)}, returned=${j(i.hash)})`
-      );
-    if (r.index !== i.index)
-      throw new $(
-        `input ${o} prevout vout differs (requested=${r.index}, returned=${i.index})`
-      );
-    if (r.sequence !== i.sequence)
-      throw new $(
-        `input ${o} sequence differs (requested=${r.sequence}, returned=${i.sequence})`
-      );
-  }
-  for (let o = 0; o < t.txOutputs.length; o++) {
-    const r = t.txOutputs[o], i = n.txOutputs[o];
-    if (!r.script.equals(i.script))
-      throw new $(
-        `output ${o} scriptPubKey differs (requested=${_(r.script)}, returned=${_(i.script)})`
-      );
-    if (r.value !== i.value)
-      throw new $(
-        `output ${o} value differs (requested=${r.value}, returned=${i.value})`
-      );
-  }
-}
-const J = 253, je = 254, Je = 65535, et = 4294967295;
-function tt(e) {
-  if (e < J)
-    return p.from([e]);
-  if (e <= Je) {
-    const t = p.alloc(2);
-    return t.writeUInt16LE(e), p.concat([p.from([J]), t]);
-  }
-  if (e <= et) {
-    const t = p.alloc(4);
-    return t.writeUInt32LE(e), p.concat([p.from([je]), t]);
-  }
-  throw new Error(`Script too large to encode as CompactSize: ${e} bytes`);
-}
-const nt = "TapLeaf";
-function ot(e, t) {
-  const n = p.concat([
-    p.from([e]),
-    tt(t.length),
-    p.from(t)
-  ]);
-  return Pe.taggedHash(nt, n);
-}
-function gt(e) {
-  const { requestedPsbtHex: t, signatureHex: n, signerXOnlyPubkeyHex: o, inputIndex: r } = e, i = g(n);
-  if (i.length !== H)
-    throw new Error(
-      `Schnorr signature for input ${r} must be ${H} hex chars (64 bytes), got ${i.length}.`
-    );
-  const s = g(o);
-  if (s.length !== O)
-    throw new Error(
-      `Signer x-only pubkey for input ${r} must be ${O} hex chars (32 bytes), got ${s.length}.`
-    );
-  const u = C.fromHex(t);
-  if (r < 0 || r >= u.data.inputs.length)
-    throw new Error(
-      `Input index ${r} out of range (${u.data.inputs.length} inputs).`
-    );
-  const h = [], c = [];
-  for (let P = 0; P < u.data.inputs.length; P++) {
-    const v = u.data.inputs[P].witnessUtxo;
-    if (!v)
-      throw new Error(
-        `Cannot verify signature: input ${P} of the requested PSBT has no witnessUtxo (required to recompute the Taproot sighash).`
-      );
-    h.push(v.script), c.push(v.value);
-  }
-  const l = u.data.inputs[r].tapLeafScript;
-  if (!l || l.length !== 1)
-    throw new Error(
-      `Cannot verify signature: input ${r} of the requested PSBT must have exactly one tapLeafScript, got ${(l == null ? void 0 : l.length) ?? 0}.`
-    );
-  const a = l[0];
-  if (a.leafVersion !== I)
-    throw new Error(
-      `Cannot verify signature: input ${r} tapLeafScript has leaf version 0x${a.leafVersion.toString(16)}, expected 0x${I.toString(16)}.`
-    );
-  const f = ot(a.leafVersion, a.script), d = new x();
-  d.version = u.version, d.locktime = u.locktime;
-  for (const P of u.txInputs)
-    d.addInput(P.hash, P.index, P.sequence);
-  for (const P of u.txOutputs)
-    d.addOutput(P.script, P.value);
-  const m = d.hashForWitnessV1(
-    r,
-    h,
-    c,
-    x.SIGHASH_DEFAULT,
-    f
-  );
-  if (!xe.verifySchnorr(
-    m,
-    y(s),
-    y(i)
-  ))
-    throw new Error(
-      `Schnorr signature for input ${r} (signer ${s}) does not verify against the expected Taproot script-path sighash. The wallet may have signed with the tweaked key, signed a different transaction, or returned an invalid signature.`
-    );
-}
-export {
-  b as H,
-  $ as P,
-  lt as a,
-  ht as b,
-  dt as c,
-  Pt as d,
-  pt as e,
-  gt as f,
-  ke as g,
-  Ee as h,
-  oe as n
-};
-//# sourceMappingURL=verifyScriptPathSchnorrSignature-i-koT139.js.map