@babylonlabs-io/ts-sdk 0.67.0 → 0.68.1

package/dist/PeginManager-Bsv6caG3.js

@@ -0,0 +1,1466 @@
+var Gt = Object.defineProperty;
+var qt = (s, t, e) => t in s ? Gt(s, t, { enumerable: !0, configurable: !0, writable: !0, value: e }) : s[t] = e;
+var x = (s, t, e) => qt(s, typeof t != "symbol" ? t + "" : t, e);
+import { c as _t, H as Yt, r as W, a as K, b as at, u as zt, d as ct, e as lt, f as ut, g as jt, s as Bt } from "./sha2-BYVxyZzX.js";
+import * as At from "bitcoinjs-lib";
+import { Transaction as Ct, Psbt as ht } from "bitcoinjs-lib";
+import { Buffer as O } from "buffer";
+import { isAddressEqual as dt, encodeFunctionData as tt, zeroAddress as Qt } from "viem";
+import { B as H } from "./BTCVaultRegistry.abi-CJwWI2EO.js";
+import { h as R } from "./errors-Blc-JWnI.js";
+import { expandWotsSeed as Zt, expandHashlockSecret as Jt, expandAuthAnchor as te, deriveVaultId as ft } from "@babylonlabs-io/babylon-tbv-rust-wasm";
+import { a as pt, b as ee, f as gt, g as se } from "./verifyScriptPathSchnorrSignature-Dy9gF5RF.js";
+import { d as oe, b as ne, e as re, f as ie, c as ae } from "./verifyKeyPathSchnorrSignature-C6Cmk0R1.js";
+import { p as ce, h as et, u as st, e as C, i as mt, s as S, k as wt, X as le } from "./bitcoin-Ch_jxnDa.js";
+import { c as ue } from "./signing-DaLvGwQe.js";
+import { M as bt } from "./validation-Dj3dqYtl.js";
+import { p as he, d as It } from "./parseFundingOutpoints-CO-f6IHK.js";
+import { c as de, s as U, r as fe, b as pe, d as ge } from "./signPsbtsWithFallback-Bv79gLFe.js";
+import { s as me, f as q, i as we, w as Pt } from "./waitForTransactionReceiptSmartAware-lobLm0q0.js";
+import { p as be, f as Pe } from "./fundPeginTransaction-B2wyjqp0.js";
+import { M as X, B as ye } from "./constants-GjWXdaqV.js";
+import { l as xe, P as ke, m as Ee, n as Te, p as ve, V as Se, i as _e } from "./mempoolApi-71R_CNZa.js";
+import * as Be from "@bitcoin-js/tiny-secp256k1-asmjs";
+const N = /* @__PURE__ */ BigInt(2 ** 32 - 1), yt = /* @__PURE__ */ BigInt(32);
+function Ae(s, t = !1) {
+  return t ? { h: Number(s & N), l: Number(s >> yt & N) } : { h: Number(s >> yt & N) | 0, l: Number(s & N) | 0 };
+}
+function Ce(s, t = !1) {
+  const e = s.length;
+  let o = new Uint32Array(e), i = new Uint32Array(e);
+  for (let n = 0; n < e; n++) {
+    const { h: r, l: a } = Ae(s[n], t);
+    [o[n], i[n]] = [r, a];
+  }
+  return [o, i];
+}
+const Ie = (s, t, e) => s << e | t >>> 32 - e, He = (s, t, e) => t << e | s >>> 32 - e, Re = (s, t, e) => t << e - 32 | s >>> 64 - e, $e = (s, t, e) => s << e - 32 | t >>> 64 - e, Oe = 64;
+function Ve(s) {
+  const t = s.prepeginTxid.toLowerCase();
+  if (!/^[0-9a-f]+$/.test(t) || t.length !== Oe)
+    throw new Error(
+      `buildDepositTerms: prepeginTxid must be 64 hex chars, got "${s.prepeginTxid}"`
+    );
+  if (s.peginAmounts.length === 0)
+    throw new Error("buildDepositTerms: at least one pegin amount is required");
+  if (s.timelockPegin <= 0 || s.timelockAssert <= 0 || s.timelockRefund <= 0)
+    throw new Error("buildDepositTerms: timelocks must be positive");
+  if (!Number.isInteger(s.maxAcceptableCommissionBps) || s.maxAcceptableCommissionBps < 0 || s.maxAcceptableCommissionBps >= X)
+    throw new Error(
+      `buildDepositTerms: maxAcceptableCommissionBps must be an integer in [0, ${X}), got ${s.maxAcceptableCommissionBps}`
+    );
+  const e = BigInt(ye), o = s.peginAmounts.map(
+    (i, n) => ({
+      htlcVout: n,
+      vaultProviderBtcPubkey: s.vaultProviderBtcPubkey,
+      peginAmount: i,
+      // Ceiling, not quote: floor(peginAmount * maxAcceptableBps / 10_000) —
+      // the same bound the registration calldata enforces on-chain, so any
+      // stamped commission the contract admits stays under it (firmware
+      // >= c8db53e checks the payout commission output <= this value).
+      commissionFee: i * BigInt(s.maxAcceptableCommissionBps) / e,
+      depositorClaimValue: s.depositorClaimValue,
+      peginMaxFee: s.peginMaxFee
+    })
+  );
+  return {
+    vaultCoreVersion: s.vaultCoreVersion,
+    protocolFeeRate: s.protocolFeeRate,
+    timelockPegin: s.timelockPegin,
+    timelockAssert: s.timelockAssert,
+    timelockRefund: s.timelockRefund,
+    prepeginTxid: t,
+    prepeginMaxFee: s.prepeginMaxFee,
+    vaultKeeperBtcPubkeys: [...s.vaultKeeperBtcPubkeys],
+    universalChallengerBtcPubkeys: [...s.universalChallengerBtcPubkeys],
+    vaults: o
+  };
+}
+const ot = 25, Ht = 9999;
+function Y(s) {
+  if (!Number.isInteger(s) || s < 0 || s >= X)
+    throw new Error(
+      `Quoted commissionBps must be an integer in [0, ${X}), got ${s}`
+    );
+  return Math.min(
+    s + ot,
+    Ht
+  );
+}
+const Me = /^0x[0-9a-f]+$/i, We = /^[0-9a-f]+$/i, Ue = /^[A-Za-z0-9+/]+={0,2}$/;
+function $(s) {
+  if (typeof s != "string" || s.length === 0)
+    throw new Error("BTC wallet returned empty public key");
+  return ce(s).toLowerCase();
+}
+function Ne(s) {
+  if (typeof s != "string" || s.length === 0)
+    throw new Error("BTC wallet returned empty BIP-322 signature");
+  if (s.startsWith("0x") || s.startsWith("0X")) {
+    if (!Me.test(s) || s.length < 4 || s.length % 2 !== 0)
+      throw new Error("BTC wallet returned malformed hex BIP-322 signature");
+    return s.toLowerCase();
+  }
+  if (We.test(s)) {
+    if (s.length % 2 !== 0)
+      throw new Error("BTC wallet returned malformed hex BIP-322 signature");
+    return `0x${s.toLowerCase()}`;
+  }
+  if (!Ue.test(s) || s.length % 4 !== 0)
+    throw new Error("BTC wallet returned malformed base64 BIP-322 signature");
+  const t = O.from(s, "base64");
+  if (t.length === 0 || t.toString("base64") !== s)
+    throw new Error("BTC wallet returned malformed base64 BIP-322 signature");
+  return `0x${t.toString("hex")}`;
+}
+async function Fe(s) {
+  const { wallet: t, depositTerms: e, fundedPrePeginTxHex: o, depositorBtcPubkey: i } = s, n = typeof t.approveDepositTerms == "function" ? t.approveDepositTerms : void 0;
+  if (!n && !e)
+    return;
+  const r = o.startsWith("0x") ? o.slice(2) : o, c = Ct.fromHex(r).getId();
+  if (e && e.prepeginTxid.replace(/^0x/, "").toLowerCase() !== c)
+    throw new Error(
+      `Deposit terms do not match the transaction being broadcast: terms are for prepeginTxid ${e.prepeginTxid}, but this transaction is ${c}.`
+    );
+  if (!n)
+    return;
+  if (!e)
+    throw new Error(
+      "This wallet requires approved deposit terms before signing the Pre-PegIn transaction, but none were provided. Pass PreparePeginResult.depositTerms (fresh flows) or a resume rebuild."
+    );
+  if (typeof t.deriveContextHash != "function")
+    throw new Error(
+      "A deposit-approval wallet must also implement deriveContextHash, but this one does not."
+    );
+  if (typeof t.holdsApprovedDepositTerms == "function") {
+    let g = !1;
+    try {
+      g = await t.holdsApprovedDepositTerms(e);
+    } catch {
+    }
+    if (g)
+      return;
+  }
+  const u = he(o);
+  (await It(
+    { deriveContextHash: t.deriveContextHash.bind(t) },
+    {
+      depositorBtcPubkey: et(
+        $(i)
+      ),
+      fundingOutpoints: u
+    }
+  )).fill(0), await n.call(t, e);
+}
+const De = /* @__PURE__ */ Uint8Array.from([
+  7,
+  4,
+  13,
+  1,
+  10,
+  6,
+  15,
+  3,
+  12,
+  0,
+  9,
+  5,
+  2,
+  14,
+  11,
+  8
+]), Rt = Uint8Array.from(new Array(16).fill(0).map((s, t) => t)), Le = Rt.map((s) => (9 * s + 5) % 16), $t = /* @__PURE__ */ (() => {
+  const e = [[Rt], [Le]];
+  for (let o = 0; o < 4; o++)
+    for (let i of e)
+      i.push(i[o].map((n) => De[n]));
+  return e;
+})(), Ot = $t[0], Vt = $t[1], Mt = /* @__PURE__ */ [
+  [11, 14, 15, 12, 5, 8, 7, 9, 11, 13, 14, 15, 6, 7, 9, 8],
+  [12, 13, 11, 15, 6, 9, 9, 7, 12, 15, 11, 13, 7, 8, 7, 7],
+  [13, 15, 14, 11, 7, 7, 6, 8, 13, 14, 13, 12, 5, 5, 6, 9],
+  [14, 11, 12, 14, 8, 6, 5, 5, 15, 12, 15, 14, 9, 9, 8, 6],
+  [15, 12, 13, 13, 9, 5, 8, 6, 14, 11, 12, 11, 8, 6, 5, 5]
+].map((s) => Uint8Array.from(s)), Ke = /* @__PURE__ */ Ot.map((s, t) => s.map((e) => Mt[t][e])), Xe = /* @__PURE__ */ Vt.map((s, t) => s.map((e) => Mt[t][e])), Ge = /* @__PURE__ */ Uint32Array.from([
+  0,
+  1518500249,
+  1859775393,
+  2400959708,
+  2840853838
+]), qe = /* @__PURE__ */ Uint32Array.from([
+  1352829926,
+  1548603684,
+  1836072691,
+  2053994217,
+  0
+]);
+function xt(s, t, e, o) {
+  return s === 0 ? t ^ e ^ o : s === 1 ? t & e | ~t & o : s === 2 ? (t | ~e) ^ o : s === 3 ? t & o | e & ~o : t ^ (e | ~o);
+}
+const F = /* @__PURE__ */ new Uint32Array(16);
+class Ye extends Yt {
+  constructor() {
+    super(64, 20, 8, !0);
+    x(this, "h0", 1732584193);
+    x(this, "h1", -271733879);
+    x(this, "h2", -1732584194);
+    x(this, "h3", 271733878);
+    x(this, "h4", -1009589776);
+  }
+  get() {
+    const { h0: e, h1: o, h2: i, h3: n, h4: r } = this;
+    return [e, o, i, n, r];
+  }
+  set(e, o, i, n, r) {
+    this.h0 = e | 0, this.h1 = o | 0, this.h2 = i | 0, this.h3 = n | 0, this.h4 = r | 0;
+  }
+  process(e, o) {
+    for (let d = 0; d < 16; d++, o += 4)
+      F[d] = e.getUint32(o, !0);
+    let i = this.h0 | 0, n = i, r = this.h1 | 0, a = r, c = this.h2 | 0, u = c, h = this.h3 | 0, g = h, w = this.h4 | 0, b = w;
+    for (let d = 0; d < 5; d++) {
+      const E = 4 - d, k = Ge[d], f = qe[d], v = Ot[d], B = Vt[d], p = Ke[d], P = Xe[d];
+      for (let l = 0; l < 16; l++) {
+        const y = W(i + xt(d, r, c, h) + F[v[l]] + k, p[l]) + w | 0;
+        i = w, w = h, h = W(c, 10) | 0, c = r, r = y;
+      }
+      for (let l = 0; l < 16; l++) {
+        const y = W(n + xt(E, a, u, g) + F[B[l]] + f, P[l]) + b | 0;
+        n = b, b = g, g = W(u, 10) | 0, u = a, a = y;
+      }
+    }
+    this.set(this.h1 + c + g | 0, this.h2 + h + b | 0, this.h3 + w + n | 0, this.h4 + i + a | 0, this.h0 + r + u | 0);
+  }
+  roundClean() {
+    K(F);
+  }
+  destroy() {
+    this.destroyed = !0, K(this.buffer), this.set(0, 0, 0, 0, 0);
+  }
+}
+const ze = /* @__PURE__ */ _t(() => new Ye()), je = BigInt(0), M = BigInt(1), Qe = BigInt(2), Ze = BigInt(7), Je = BigInt(256), ts = BigInt(113), Wt = [], Ut = [], Nt = [];
+for (let s = 0, t = M, e = 1, o = 0; s < 24; s++) {
+  [e, o] = [o, (2 * e + 3 * o) % 5], Wt.push(2 * (5 * o + e)), Ut.push((s + 1) * (s + 2) / 2 % 64);
+  let i = je;
+  for (let n = 0; n < 7; n++)
+    t = (t << M ^ (t >> Ze) * ts) % Je, t & Qe && (i ^= M << (M << BigInt(n)) - M);
+  Nt.push(i);
+}
+const Ft = Ce(Nt, !0), es = Ft[0], ss = Ft[1], kt = (s, t, e) => e > 32 ? Re(s, t, e) : Ie(s, t, e), Et = (s, t, e) => e > 32 ? $e(s, t, e) : He(s, t, e);
+function os(s, t = 24) {
+  const e = new Uint32Array(10);
+  for (let o = 24 - t; o < 24; o++) {
+    for (let r = 0; r < 10; r++)
+      e[r] = s[r] ^ s[r + 10] ^ s[r + 20] ^ s[r + 30] ^ s[r + 40];
+    for (let r = 0; r < 10; r += 2) {
+      const a = (r + 8) % 10, c = (r + 2) % 10, u = e[c], h = e[c + 1], g = kt(u, h, 1) ^ e[a], w = Et(u, h, 1) ^ e[a + 1];
+      for (let b = 0; b < 50; b += 10)
+        s[r + b] ^= g, s[r + b + 1] ^= w;
+    }
+    let i = s[2], n = s[3];
+    for (let r = 0; r < 24; r++) {
+      const a = Ut[r], c = kt(i, n, a), u = Et(i, n, a), h = Wt[r];
+      i = s[h], n = s[h + 1], s[h] = c, s[h + 1] = u;
+    }
+    for (let r = 0; r < 50; r += 10) {
+      for (let a = 0; a < 10; a++)
+        e[a] = s[r + a];
+      for (let a = 0; a < 10; a++)
+        s[r + a] ^= ~e[(a + 2) % 10] & e[(a + 4) % 10];
+    }
+    s[0] ^= es[o], s[1] ^= ss[o];
+  }
+  K(e);
+}
+class rt {
+  // NOTE: we accept arguments in bytes instead of bits here.
+  constructor(t, e, o, i = !1, n = 24) {
+    x(this, "state");
+    x(this, "pos", 0);
+    x(this, "posOut", 0);
+    x(this, "finished", !1);
+    x(this, "state32");
+    x(this, "destroyed", !1);
+    x(this, "blockLen");
+    x(this, "suffix");
+    x(this, "outputLen");
+    x(this, "enableXOF", !1);
+    x(this, "rounds");
+    if (this.blockLen = t, this.suffix = e, this.outputLen = o, this.enableXOF = i, this.rounds = n, at(o, "outputLen"), !(0 < t && t < 200))
+      throw new Error("only keccak-f1600 function is supported");
+    this.state = new Uint8Array(200), this.state32 = zt(this.state);
+  }
+  clone() {
+    return this._cloneInto();
+  }
+  keccak() {
+    ct(this.state32), os(this.state32, this.rounds), ct(this.state32), this.posOut = 0, this.pos = 0;
+  }
+  update(t) {
+    lt(this), ut(t);
+    const { blockLen: e, state: o } = this, i = t.length;
+    for (let n = 0; n < i; ) {
+      const r = Math.min(e - this.pos, i - n);
+      for (let a = 0; a < r; a++)
+        o[this.pos++] ^= t[n++];
+      this.pos === e && this.keccak();
+    }
+    return this;
+  }
+  finish() {
+    if (this.finished)
+      return;
+    this.finished = !0;
+    const { state: t, suffix: e, pos: o, blockLen: i } = this;
+    t[o] ^= e, (e & 128) !== 0 && o === i - 1 && this.keccak(), t[i - 1] ^= 128, this.keccak();
+  }
+  writeInto(t) {
+    lt(this, !1), ut(t), this.finish();
+    const e = this.state, { blockLen: o } = this;
+    for (let i = 0, n = t.length; i < n; ) {
+      this.posOut >= o && this.keccak();
+      const r = Math.min(o - this.posOut, n - i);
+      t.set(e.subarray(this.posOut, this.posOut + r), i), this.posOut += r, i += r;
+    }
+    return t;
+  }
+  xofInto(t) {
+    if (!this.enableXOF)
+      throw new Error("XOF is not possible for this instance");
+    return this.writeInto(t);
+  }
+  xof(t) {
+    return at(t), this.xofInto(new Uint8Array(t));
+  }
+  digestInto(t) {
+    if (jt(t, this), this.finished)
+      throw new Error("digest() was already called");
+    return this.writeInto(t), this.destroy(), t;
+  }
+  digest() {
+    return this.digestInto(new Uint8Array(this.outputLen));
+  }
+  destroy() {
+    this.destroyed = !0, K(this.state);
+  }
+  _cloneInto(t) {
+    const { blockLen: e, suffix: o, outputLen: i, rounds: n, enableXOF: r } = this;
+    return t || (t = new rt(e, o, i, r, n)), t.state32.set(this.state32), t.pos = this.pos, t.posOut = this.posOut, t.finished = this.finished, t.rounds = n, t.suffix = o, t.outputLen = i, t.enableXOF = r, t.destroyed = this.destroyed, t;
+  }
+}
+const ns = (s, t, e, o = {}) => _t(() => new rt(t, s, e), o), rs = /* @__PURE__ */ ns(1, 136, 32), Tt = 64, _ = 20, nt = 4, Dt = 2, is = 0, as = 1, D = [64, 64], cs = (s) => Array.from(s).map((t) => t.toString(16).padStart(2, "0")).join("");
+function it(s) {
+  return ze(Bt(s));
+}
+function Lt(s) {
+  return (1 << s) - 1;
+}
+function ls(s) {
+  let t = 1;
+  for (; t * t < s + 1; ) t++;
+  return Math.max(t, 2);
+}
+function us(s) {
+  const t = nt, e = s * Lt(t);
+  return { d: t, n: s, checksum_radix: ls(e) };
+}
+function z(s, t) {
+  const e = [];
+  let o = t;
+  for (; o > 0; )
+    e.push(o & 255), o >>>= 8;
+  const i = new Uint8Array(s.length + e.length);
+  i.set(s);
+  for (let n = 0; n < e.length; n++)
+    i[s.length + n] = e[n];
+  return it(i);
+}
+function j(s, t) {
+  let e = s;
+  for (let o = 0; o < t; o++)
+    e = it(e);
+  return e;
+}
+function hs(s, t) {
+  const e = Lt(t.d), o = t.checksum_radix - 1, i = Math.floor(t.n * e / t.checksum_radix), n = [];
+  for (let h = 0; h < t.n; h++) {
+    const g = z(s, h + Dt), w = j(g, e);
+    n.push(Array.from(w));
+  }
+  const r = z(
+    s,
+    is
+  ), a = j(
+    r,
+    o
+  ), c = z(
+    s,
+    as
+  ), u = j(
+    c,
+    i
+  );
+  return {
+    config: t,
+    message_terminals: n,
+    checksum_major_terminal: Array.from(u),
+    checksum_minor_terminal: Array.from(a)
+  };
+}
+async function ds(s) {
+  try {
+    if (s.length !== Tt)
+      throw new Error(
+        `WOTS seed must be exactly ${Tt} bytes, got ${s.length}`
+      );
+    const t = [];
+    for (let e = 0; e < D.length; e++) {
+      const o = D[e], i = us(o), n = new Uint8Array(s.length + 1);
+      n.set(s), n[s.length] = e;
+      const r = it(n);
+      try {
+        const a = hs(r, i);
+        if (a.config.d !== nt)
+          throw new Error(
+            `Block ${e}: expected d=${nt}, got d=${a.config.d}`
+          );
+        if (a.config.n !== o)
+          throw new Error(
+            `Block ${e}: expected n=${o}, got n=${a.config.n}`
+          );
+        if (a.message_terminals.length !== o)
+          throw new Error(
+            `Block ${e}: expected ${o} message terminals, got ${a.message_terminals.length}`
+          );
+        for (let c = 0; c < a.message_terminals.length; c++)
+          if (a.message_terminals[c].length !== _)
+            throw new Error(
+              `Block ${e} terminal ${c}: expected ${_} bytes, got ${a.message_terminals[c].length}`
+            );
+        if (a.checksum_minor_terminal.length !== _)
+          throw new Error(
+            `Block ${e} checksum_minor: expected ${_} bytes`
+          );
+        if (a.checksum_major_terminal.length !== _)
+          throw new Error(
+            `Block ${e} checksum_major: expected ${_} bytes`
+          );
+        t.push(a);
+      } finally {
+        n.fill(0), r.fill(0);
+      }
+    }
+    if (t.length !== D.length)
+      throw new Error(
+        `Expected ${D.length} blocks, got ${t.length}`
+      );
+    return t;
+  } finally {
+    s.fill(0);
+  }
+}
+function Q(s, t, e) {
+  if (s.length !== _)
+    throw new Error(
+      `Block ${t} ${e}: expected ${_} bytes, got ${s.length}`
+    );
+  for (let o = 0; o < s.length; o++) {
+    const i = s[o];
+    if (!Number.isInteger(i) || i < 0 || i > 255)
+      throw new Error(
+        `Block ${t} ${e}[${o}]: invalid byte value ${i}`
+      );
+  }
+}
+function fs(s) {
+  if (s.length === 0)
+    throw new Error("Public keys array must not be empty");
+  for (let n = 0; n < s.length; n++) {
+    const r = s[n];
+    Q(r.checksum_minor_terminal, n, "checksum_minor_terminal"), Q(r.checksum_major_terminal, n, "checksum_major_terminal");
+    for (let a = 0; a < r.message_terminals.length; a++)
+      Q(r.message_terminals[a], n, `message_terminal[${a}]`);
+  }
+  let t = 0;
+  for (const n of s)
+    t += Dt + n.message_terminals.length;
+  const e = new Uint8Array(t * _);
+  let o = 0;
+  for (const n of s) {
+    e.set(n.checksum_minor_terminal, o), o += _, e.set(n.checksum_major_terminal, o), o += _;
+    for (const r of n.message_terminals)
+      e.set(r, o), o += _;
+  }
+  const i = rs(e);
+  return `0x${cs(i)}`;
+}
+async function ps(s, t) {
+  const e = [], o = [], i = [], n = [];
+  try {
+    for (let r = 0; r < t; r++) {
+      const a = await Zt(s, r);
+      try {
+        const u = await ds(a);
+        e.push(u), o.push(fs(u));
+      } finally {
+        a.fill(0);
+      }
+      const c = await Jt(s, r);
+      try {
+        const u = st(c);
+        i.push(u), n.push(de(C(u)).slice(2));
+      } finally {
+        c.fill(0);
+      }
+    }
+  } finally {
+    s.fill(0);
+  }
+  return { perVaultWotsKeys: e, wotsPkHashes: o, htlcSecretHexes: i, hashlocks: n };
+}
+const gs = 1, ms = 2, ws = 33, bs = 2, Ps = 3, ys = 1, L = 64, xs = 0, Z = 1, vt = /^[0-9a-f]{64}$/i, ks = /^(?:[0-9a-f]{2})+$/;
+function Es(s) {
+  const t = s.slice(2);
+  if (!ks.test(t))
+    throw new Error(
+      "proof of possession witness is not even-length lowercase hex"
+    );
+  return oe(
+    Uint8Array.from(O.from(t, "hex")),
+    "proof of possession witness"
+  );
+}
+function Ts(s, t, e) {
+  var i;
+  const o = Es(e);
+  if (o.length === gs) {
+    const [n] = o;
+    let r, a;
+    if (n.length === L)
+      r = n, a = xs;
+    else if (n.length === L + 1 && n[L] === Z)
+      r = n.subarray(0, L), a = Z;
+    else
+      throw new Error(
+        "proof of possession witness item must be a 64-byte Schnorr signature (or 65 bytes ending in 0x01)"
+      );
+    if (!vt.test(t))
+      throw new Error(
+        `depositor public key must be bare 64-char x-only hex, got "${t}"`
+      );
+    const c = Uint8Array.from(O.from(t, "hex"));
+    if (!xe(s, c, r, a))
+      throw new Error(
+        "proof of possession signature does not verify against the depositor key"
+      );
+    return { kind: "p2tr-verified" };
+  }
+  if (o.length === ms) {
+    if (!vt.test(t))
+      throw new Error(
+        `depositor public key must be bare 64-char x-only hex, got "${t}"`
+      );
+    const [n, r] = o;
+    if (r.length !== ws || r[0] !== bs && r[0] !== Ps)
+      throw new Error(
+        `proof of possession P2WPKH witness item 1 is not a compressed public key (${r.length} bytes, prefix 0x${((i = r[0]) == null ? void 0 : i.toString(16)) ?? "none"})`
+      );
+    if (!Be.isPointCompressed(r))
+      throw new Error(
+        "proof of possession P2WPKH witness pubkey is not a valid secp256k1 point"
+      );
+    const a = O.from(
+      r.subarray(ys)
+    ).toString("hex");
+    if (a !== t.toLowerCase())
+      throw new Error(
+        `proof of possession witness pubkey does not match the depositor key: witness carries ${a}, expected ${t}`
+      );
+    if (n.length < ke || n.length > Ee)
+      throw new Error(
+        `proof of possession signature is ${n.length} bytes; vault ingestion accepts only 71/72-byte DER signatures with a sighash byte — try a different account or a Taproot address`
+      );
+    if (n[n.length - 1] !== Z)
+      throw new Error(
+        `proof of possession P2WPKH signature must end in a SIGHASH_ALL (0x01) byte, got 0x${n[n.length - 1].toString(16)}`
+      );
+    if (!Te(s, r, n))
+      throw new Error(
+        "proof of possession signature does not verify against the depositor key"
+      );
+    return { kind: "p2wpkh-verified" };
+  }
+  throw new Error(
+    `proof of possession witness has ${o.length} items; expected 1 (P2TR) or 2 (P2WPKH)`
+  );
+}
+const Kt = 0, J = "00".repeat(32);
+function vs(s, t) {
+  const e = {
+    bitcoin: "bc",
+    testnet: "tb",
+    signet: "tb",
+    regtest: "bcrt"
+  };
+  try {
+    const o = At.address.fromBech32(s);
+    return o.prefix === e[t] && o.version === 0 && o.data.length === 20;
+  } catch {
+    return !1;
+  }
+}
+function Ss(s, t, e, o) {
+  const i = e == null ? void 0 : e[`${s}:${t}`];
+  return i ? Promise.resolve({
+    txid: s,
+    vout: t,
+    value: i.value,
+    scriptPubKey: i.scriptPubKey
+  }) : _e(s, t, o);
+}
+const St = 12e4;
+class Zs {
+  /**
+   * Creates a new PeginManager instance.
+   *
+   * @param config - Manager configuration including wallets and contract addresses
+   */
+  constructor(t) {
+    x(this, "config");
+    this.config = t;
+  }
+  /**
+   * Prepare a peg-in: sizing pass → vault-root derivation (one wallet
+   * popup) → per-vault WOTS / hashlock derivation → commit pass with
+   * PSBT signing (signPsbt for a single vault, one batch popup for a
+   * split). Returns broadcast-ready txs, the pubkey snapshot, and the
+   * sensitive derived material.
+   *
+   * @throws If the wallet rejects, insufficient funds, or an internal
+   *         invariant violation.
+   */
+  async preparePegin(t) {
+    if (t.amounts.length === 0)
+      throw new Error("amounts must contain at least one entry");
+    const e = await this.config.btcWallet.getPublicKeyHex(), o = $(e);
+    if (U(this.config.btcWallet)) {
+      const f = (await fe(this.config.btcWallet)).trim();
+      if (t.changeAddress.trim() !== f)
+        throw new Error(
+          `Pre-PegIn changeAddress "${t.changeAddress}" is not the approval wallet's change address ("${f}"). Refusing to build a tx the signing device would reject.`
+        );
+    } else if (!mt(
+      t.changeAddress,
+      e,
+      this.config.btcNetwork
+    ))
+      throw new Error(
+        `Pre-PegIn changeAddress "${t.changeAddress}" is not derived from the connected wallet's public key. Refusing to build a tx that would send change to an address the signing key doesn't control.`
+      );
+    const i = await this.prepareSizing(o, t), n = i.selectedUTXOs.map(
+      (f) => ({
+        txid: et(f.txid),
+        vout: f.vout
+      })
+    ), r = await It(this.config.btcWallet, {
+      depositorBtcPubkey: et(o),
+      fundingOutpoints: n
+    });
+    let a, c;
+    try {
+      const f = await te(r);
+      try {
+        a = st(f), c = st(Bt(f));
+      } finally {
+        f.fill(0);
+      }
+    } catch (f) {
+      throw r.fill(0), f;
+    }
+    const u = await ps(r, t.amounts.length), { perVaultWotsKeys: h, wotsPkHashes: g, htlcSecretHexes: w, hashlocks: b } = u, d = await this.preparePeginCommit({
+      depositorBtcPubkeyRaw: e,
+      depositorBtcPubkey: o,
+      hashlocks: b,
+      authAnchorHash: c,
+      sizing: i,
+      params: t
+    });
+    for (let f = 0; f < d.perVault.length; f++)
+      if (d.perVault[f].htlcVout !== f)
+        throw new Error(
+          `Internal invariant violation: htlcVout/index mismatch at vault ${f} (expected ${f}, got ${d.perVault[f].htlcVout})`
+        );
+    pe(
+      d.fundedPrePeginTxHex,
+      t.amounts.length,
+      c
+    );
+    const { depositTerms: E, ...k } = d;
+    return {
+      transaction: {
+        ...k,
+        selectedUTXOs: i.selectedUTXOs,
+        fee: i.fee,
+        changeAmount: i.changeAmount
+      },
+      depositorBtcPubkey: o,
+      derivedSecrets: {
+        perVaultWotsKeys: h,
+        wotsPkHashes: g,
+        htlcSecretHexes: w,
+        authAnchorHex: a
+      },
+      depositTerms: E
+    };
+  }
+  /**
+   * Build unfunded Pre-PegIn + select UTXOs. No PSBT signing.
+   *
+   * Returns the full selection result (UTXOs, fee, changeAmount) so the
+   * commit pass funds the broadcast tx with the exact same set used to
+   * build the vault-context funding-outpoints commitment. Re-running
+   * `selectUtxosForPegin` in the commit pass would be deterministic given
+   * the same inputs, but threading the result through guarantees the
+   * domain separator structurally matches the funded tx inputs.
+   *
+   * Sizing runs before the wallet popup, so neither the real per-vault
+   * hashlocks nor the real `authAnchorHash` are known yet. Both slots
+   * are filled with a 32-byte placeholder; the commit pass swaps in the
+   * real values. Output budget is identical (32-byte push regardless of
+   * content), so UTXO selection is invariant under substitution.
+   */
+  async prepareSizing(t, e) {
+    const o = e.amounts.map(
+      () => J
+    ), i = e.vaultKeeperBtcPubkeys.length, n = await pt({
+      vaultCoreVersion: e.vaultCoreVersion,
+      depositorPubkey: t,
+      vaultProviderPubkey: S(e.vaultProviderBtcPubkey),
+      vaultKeeperPubkeys: e.vaultKeeperBtcPubkeys.map(S),
+      universalChallengerPubkeys: e.universalChallengerBtcPubkeys.map(S),
+      hashlocks: o,
+      timelockRefund: e.timelockRefund,
+      pegInAmounts: e.amounts,
+      feeRate: e.protocolFeeRate,
+      minPeginFeeRate: e.minPeginFeeRate,
+      numLocalChallengers: i,
+      councilQuorum: e.councilQuorum,
+      councilSize: e.councilSize,
+      network: this.config.btcNetwork,
+      authAnchorHash: J
+    }), r = me(
+      [...e.availableUTXOs],
+      n.totalOutputValue,
+      e.mempoolFeeRate,
+      be(n.htlcValues.length, !0)
+    );
+    return {
+      selectedUTXOs: r.selectedUTXOs,
+      fee: r.fee,
+      changeAmount: r.changeAmount
+    };
+  }
+  /** Build PegIn txs and batch-sign their inputs with real hashlocks. */
+  async preparePeginCommit(t) {
+    const {
+      depositorBtcPubkeyRaw: e,
+      depositorBtcPubkey: o,
+      hashlocks: i,
+      authAnchorHash: n,
+      sizing: r,
+      params: a
+    } = t, c = J.toLowerCase();
+    for (let m = 0; m < i.length; m++)
+      if (i[m].toLowerCase() === c)
+        throw new Error(
+          `preparePeginCommit refusing to build with sizing-pass placeholder hashlock at vault ${m} — internal substitution bug`
+        );
+    if (n.toLowerCase() === c)
+      throw new Error(
+        "preparePeginCommit refusing to build with sizing-pass placeholder auth-anchor hash — internal substitution bug"
+      );
+    const u = S(
+      a.vaultProviderBtcPubkey
+    ), h = a.vaultKeeperBtcPubkeys.map(S), g = a.universalChallengerBtcPubkeys.map(S), w = h.length, b = {
+      vaultCoreVersion: a.vaultCoreVersion,
+      depositorPubkey: o,
+      vaultProviderPubkey: u,
+      vaultKeeperPubkeys: h,
+      universalChallengerPubkeys: g,
+      hashlocks: i,
+      timelockRefund: a.timelockRefund,
+      pegInAmounts: a.amounts,
+      feeRate: a.protocolFeeRate,
+      minPeginFeeRate: a.minPeginFeeRate,
+      numLocalChallengers: w,
+      councilQuorum: a.councilQuorum,
+      councilSize: a.councilSize,
+      network: this.config.btcNetwork,
+      authAnchorHash: n
+    }, d = await pt(b), E = wt(this.config.btcNetwork), k = Pe({
+      unfundedTxHex: d.psbtHex,
+      selectedUTXOs: r.selectedUTXOs,
+      changeAddress: a.changeAddress,
+      changeAmount: r.changeAmount,
+      network: E
+    }), f = r.selectedUTXOs.reduce((m, T) => m + BigInt(T.value), 0n) - d.totalOutputValue - r.changeAmount;
+    if (f !== r.fee)
+      throw new Error(
+        `Pre-PegIn funded fee ${f} does not match the sizing-pass fee ${r.fee}; refusing to publish a deposit-terms fee bound the funded transaction does not pay.`
+      );
+    const v = S(
+      q(k)
+    ), B = [], p = [], P = [];
+    for (let m = 0; m < i.length; m++) {
+      const T = await ee({
+        prePeginParams: b,
+        timelockPegin: a.timelockPegin,
+        fundedPrePeginTxHex: k,
+        htlcVout: m
+      }), I = await ne({
+        vaultCoreVersion: a.vaultCoreVersion,
+        peginTxHex: T.txHex,
+        fundedPrePeginTxHex: k,
+        depositorPubkey: o,
+        vaultProviderPubkey: u,
+        vaultKeeperPubkeys: h,
+        universalChallengerPubkeys: g,
+        hashlock: i[m],
+        timelockRefund: a.timelockRefund,
+        network: this.config.btcNetwork
+      });
+      B.push(T), p.push(I.psbtHex), P.push(
+        ue(e, 1)
+      );
+    }
+    const l = Ve({
+      vaultCoreVersion: a.vaultCoreVersion,
+      protocolFeeRate: a.protocolFeeRate,
+      timelockPegin: a.timelockPegin,
+      timelockAssert: a.timelockAssert,
+      timelockRefund: a.timelockRefund,
+      prepeginTxid: v,
+      prepeginMaxFee: r.fee,
+      vaultProviderBtcPubkey: u,
+      vaultKeeperBtcPubkeys: h,
+      universalChallengerBtcPubkeys: g,
+      maxAcceptableCommissionBps: Y(
+        a.commissionBps
+      ),
+      peginAmounts: a.amounts,
+      depositorClaimValue: d.depositorClaimValue,
+      peginMaxFee: d.minPeginFee
+    });
+    U(this.config.btcWallet) && await this.config.btcWallet.approveDepositTerms(l);
+    const y = await ge(
+      this.config.btcWallet,
+      p,
+      P
+    ), A = [];
+    for (let m = 0; m < y.length; m++) {
+      gt({
+        requestedPsbtHex: p[m],
+        returnedPsbtHex: y[m]
+      });
+      const T = re(
+        y[m],
+        o
+      );
+      se({
+        requestedPsbtHex: p[m],
+        signatureHex: T,
+        signerXOnlyPubkeyHex: o,
+        inputIndex: 0
+      });
+      const I = ie(y[m]);
+      A.push({
+        htlcVout: m,
+        htlcValue: d.htlcValues[m],
+        peginTxHex: I,
+        peginTxid: B[m].txid,
+        peginInputSignature: T,
+        vaultScriptPubKey: B[m].vaultScriptPubKey
+      });
+    }
+    return {
+      fundedPrePeginTxHex: k,
+      prePeginTxid: v,
+      perVault: A,
+      depositTerms: l
+    };
+  }
+  /**
+   * Signs and broadcasts a funded peg-in transaction to the Bitcoin network.
+   *
+   * This method:
+   * 1. Parses the funded transaction hex
+   * 2. Fetches UTXO data from mempool for each input
+   * 3. Creates a PSBT with proper witnessUtxo/tapInternalKey
+   * 4. Signs via btcWallet.signPsbt()
+   * 5. Finalizes and extracts the transaction
+   * 6. Broadcasts via mempool API
+   *
+   * IMPORTANT — this method does NOT gate on Ethereum finality. Committing
+   * BTC to the HTLC while the peg-in registration is still reorg-exposed can
+   * strand the deposit: the vault record disappears from the chain while the
+   * BTC stays locked until the HTLC refund timelock. Callers must await
+   * `waitForPeginRegistrationDepth` for the registered vault(s) before calling
+   * this. The gate is not applied here because the params carry no vault ID —
+   * adding one would be a breaking signature change.
+   *
+   * @param params - Transaction hex and depositor public key
+   * @returns The broadcasted Bitcoin transaction ID
+   * @throws Error if signing or broadcasting fails
+   */
+  async signAndBroadcast(t) {
+    const { fundedPrePeginTxHex: e, depositorBtcPubkey: o } = t, i = e.startsWith("0x") ? e.slice(2) : e, n = Ct.fromHex(i);
+    if (n.ins.length === 0)
+      throw new Error("Transaction has no inputs");
+    const r = new ht();
+    r.setVersion(n.version), r.setLocktime(n.locktime);
+    const a = O.from(
+      $(o),
+      "hex"
+    ), c = this.config.mempoolApiUrl, u = n.ins.map((p) => {
+      const P = O.from(p.hash).reverse().toString("hex"), l = p.index;
+      return Ss(P, l, t.localPrevouts, c).then(
+        (y) => ({ input: p, utxoData: y, txid: P, vout: l })
+      );
+    }), h = await Promise.all(u), g = h.reduce(
+      (p, P) => p + BigInt(P.utxoData.value),
+      0n
+    ), w = n.outs.reduce(
+      (p, P) => p + BigInt(P.value),
+      0n
+    );
+    if (g < w)
+      throw new Error(
+        `UTXO value mismatch: total input value (${g} sat) is less than total output value (${w} sat). This may indicate the mempool API returned manipulated UTXO data.`
+      );
+    const b = g - w;
+    if (b > bt)
+      throw new Error(
+        `Implied transaction fee (${b} sat) exceeds maximum reasonable fee (${bt} sat). This may indicate manipulated UTXO data.`
+      );
+    for (const { input: p, utxoData: P, txid: l, vout: y } of h) {
+      const A = we(
+        {
+          value: P.value,
+          scriptPubKey: P.scriptPubKey
+        },
+        a
+      );
+      r.addInput({
+        hash: p.hash,
+        index: p.index,
+        sequence: p.sequence,
+        ...A
+      });
+    }
+    for (const p of n.outs)
+      r.addOutput({
+        script: p.script,
+        value: p.value
+      });
+    await Fe({
+      wallet: this.config.btcWallet,
+      depositTerms: t.depositTerms,
+      fundedPrePeginTxHex: e,
+      depositorBtcPubkey: o
+    });
+    const d = r.toHex(), E = await this.config.btcWallet.signPsbt(d);
+    gt({
+      requestedPsbtHex: d,
+      returnedPsbtHex: E
+    });
+    const k = ae({
+      requestedPsbtHex: d,
+      returnedPsbtHex: E
+    });
+    if (U(this.config.btcWallet) && k !== r.data.inputs.length)
+      throw new Error(
+        `Key-path verification covered ${k} of ${r.data.inputs.length} Pre-PegIn inputs; an approval wallet signs every input key-path, so the unverified ones must not be broadcast.`
+      );
+    const f = ht.fromHex(E);
+    try {
+      f.finalizeAllInputs();
+    } catch (p) {
+      if (!f.data.inputs.every(
+        (l) => l.finalScriptWitness || l.finalScriptSig
+      ))
+        throw new Error(
+          `PSBT finalization failed and wallet did not auto-finalize: ${p}`
+        );
+    }
+    const v = f.extractTransaction().toHex();
+    return await ve(v, c);
+  }
+  /**
+   * Registers a peg-in on Ethereum by calling the BTCVaultRegistry contract.
+   *
+   * This method:
+   * 1. Re-verifies the PopSignature against the currently connected ETH
+   *    and BTC wallets — refuses to proceed if either has changed
+   * 2. Derives vault ID and checks if it already exists (pre-flight)
+   * 3. Encodes the contract call using viem
+   * 4. Estimates gas (catches contract errors early with proper revert
+   *    reasons)
+   * 5. Sends transaction with pre-estimated gas via
+   *    ethWallet.sendTransaction()
+   *
+   * The PopSignature must be obtained via
+   * {@link signProofOfPossession} before this call.
+   *
+   * @param params - Registration parameters including the PopSignature
+   *                 and the prepared Pre-PegIn / PegIn transactions
+   * @returns Result containing Ethereum transaction hash and vault ID
+   * @throws Error if the PopSignature does not match the connected wallets
+   * @throws Error if the vault already exists
+   * @throws Error if contract simulation fails (e.g., invalid signature,
+   *         unauthorized)
+   */
+  async registerPeginOnChain(t) {
+    const {
+      unsignedPrePeginTx: e,
+      depositorSignedPeginTx: o,
+      vaultProvider: i,
+      hashlock: n,
+      htlcVout: r,
+      depositorPayoutBtcAddress: a,
+      depositorWotsPkHash: c,
+      popSignature: u
+    } = t;
+    if (!this.config.ethWallet.account)
+      throw new Error("Ethereum wallet account not found");
+    const h = this.config.ethWallet.account.address;
+    if (!dt(u.depositorEthAddress, h))
+      throw new Error(
+        `Proof of possession was signed for ${u.depositorEthAddress} but the Ethereum wallet is currently connected to ${h}. Reconnect the original account or call signProofOfPossession() again.`
+      );
+    const g = await this.assertPopMatchesBtcWallet(u), w = u.btcPopSignature, b = C(
+      u.depositorBtcPubkey
+    ), d = C(e), E = C(o), k = a ?? await this.config.btcWallet.getAddress(), f = this.resolvePayoutScriptPubKey(
+      g,
+      k
+    ), v = q(E), B = await ft(
+      S(v),
+      S(h)
+    ), p = C(B);
+    if (await this.checkVaultExists(p))
+      throw new Error(
+        `Vault already exists (ID: ${p}, peginTxHash: ${v}). Vault IDs are derived from the pegin transaction hash and depositor address. To create a new vault, use different UTXOs or a different amount to generate a unique transaction.`
+      );
+    const l = this.config.publicClient;
+    let y;
+    try {
+      y = await l.readContract({
+        address: this.config.vaultContracts.btcVaultRegistry,
+        abi: H,
+        functionName: "getPegInFee",
+        args: [i]
+      });
+    } catch (V) {
+      throw new Error(
+        "Failed to query pegin fee from the contract. Please check your network connection and that the contract address is correct.",
+        { cause: V }
+      );
+    }
+    const A = await this.resolveMaxAcceptableCommissionBps(
+      i,
+      t.quotedCommissionBps
+    ), m = tt({
+      abi: H,
+      functionName: "submitPeginRequest",
+      args: [
+        h,
+        b,
+        w,
+        d,
+        E,
+        i,
+        A,
+        n,
+        r,
+        f,
+        c
+      ]
+    });
+    let T;
+    try {
+      T = await l.estimateGas({
+        to: this.config.vaultContracts.btcVaultRegistry,
+        data: m,
+        value: y,
+        account: this.config.ethWallet.account.address
+      });
+    } catch (V) {
+      R(V);
+    }
+    let I;
+    try {
+      I = await this.config.ethWallet.sendTransaction({
+        to: this.config.vaultContracts.btcVaultRegistry,
+        data: m,
+        value: y,
+        account: this.config.ethWallet.account,
+        chain: this.config.ethChain,
+        gas: T
+      });
+    } catch (V) {
+      R(V);
+    }
+    const G = await Pt({
+      publicClient: l,
+      walletAddress: this.config.ethWallet.account.address,
+      hash: I,
+      timeout: St
+    });
+    return G.status === "reverted" && R(
+      new Error(
+        `Transaction reverted. Hash: ${G.transactionHash}. Check the transaction on block explorer for details.`
+      )
+    ), {
+      ethTxHash: G.transactionHash,
+      vaultId: p,
+      peginTxHash: v
+    };
+  }
+  /**
+   * Register multiple pegins on Ethereum in a single transaction.
+   *
+   * Uses the contract's submitPeginRequestBatch() to submit all vault
+   * registrations atomically. All vaults must share the same vault provider.
+   * The PoP signature is signed once and included in each request.
+   *
+   * @param params - Batch registration parameters
+   * @returns Batch result with per-vault IDs and single ETH tx hash
+   */
+  async registerPeginBatchOnChain(t) {
+    const { vaultProvider: e, unsignedPrePeginTx: o, requests: i, popSignature: n } = t;
+    if (i.length === 0)
+      throw new Error("Batch pegin requires at least one request");
+    if (!this.config.ethWallet.account)
+      throw new Error("Ethereum wallet account not found");
+    const r = this.config.ethWallet.account.address;
+    if (!dt(n.depositorEthAddress, r))
+      throw new Error(
+        `Proof of possession was signed for ${n.depositorEthAddress} but the Ethereum wallet is currently connected to ${r}. Reconnect the original account or call signProofOfPossession() again.`
+      );
+    const a = await this.assertPopMatchesBtcWallet(n), c = n.btcPopSignature, u = i.map(
+      (l) => this.resolvePayoutScriptPubKey(
+        a,
+        l.depositorPayoutBtcAddress
+      )
+    ), h = [];
+    for (const l of i) {
+      const y = C(
+        l.depositorSignedPeginTx
+      ), A = q(y), m = await ft(
+        S(A),
+        S(r)
+      ), T = C(m);
+      if (await this.checkVaultExists(T))
+        throw new Error(
+          `Vault already exists (ID: ${T}, peginTxHash: ${A}). To create a new vault, use different UTXOs or a different amount.`
+        );
+      h.push({ vaultId: T, peginTxHash: A });
+    }
+    const g = this.config.publicClient;
+    let w;
+    try {
+      w = await g.readContract({
+        address: this.config.vaultContracts.btcVaultRegistry,
+        abi: H,
+        functionName: "getPegInFee",
+        args: [e]
+      });
+    } catch (l) {
+      throw new Error(
+        "Failed to query pegin fee from the contract. Please check your network connection and that the contract address is correct.",
+        { cause: l }
+      );
+    }
+    const b = w * BigInt(i.length), d = await this.resolveMaxAcceptableCommissionBps(
+      e,
+      t.quotedCommissionBps
+    ), E = C(
+      n.depositorBtcPubkey
+    ), k = C(o), f = i.map((l, y) => ({
+      depositorBtcPubKey: E,
+      btcPopSignature: c,
+      unsignedPrePeginTx: k,
+      depositorSignedPeginTx: C(
+        l.depositorSignedPeginTx
+      ),
+      hashlock: l.hashlock,
+      htlcVout: l.htlcVout,
+      referralCode: Kt,
+      depositorPayoutBtcAddress: u[y],
+      depositorWotsPkHash: l.depositorWotsPkHash
+    })), v = tt({
+      abi: H,
+      functionName: "submitPeginRequestBatch",
+      args: [
+        r,
+        e,
+        d,
+        f
+      ]
+    });
+    let B;
+    try {
+      B = await g.estimateGas({
+        to: this.config.vaultContracts.btcVaultRegistry,
+        data: v,
+        value: b,
+        account: this.config.ethWallet.account.address
+      });
+    } catch (l) {
+      R(l);
+    }
+    let p;
+    try {
+      p = await this.config.ethWallet.sendTransaction({
+        to: this.config.vaultContracts.btcVaultRegistry,
+        data: v,
+        value: b,
+        account: this.config.ethWallet.account,
+        chain: this.config.ethChain,
+        gas: B
+      });
+    } catch (l) {
+      R(l);
+    }
+    const P = await Pt({
+      publicClient: g,
+      walletAddress: this.config.ethWallet.account.address,
+      hash: p,
+      timeout: St
+    });
+    return P.status === "reverted" && R(
+      new Error(
+        `Batch transaction reverted. Hash: ${P.transactionHash}. Check the transaction on block explorer for details.`
+      )
+    ), {
+      ethTxHash: P.transactionHash,
+      vaults: h
+    };
+  }
+  // Anchor to quoted+headroom when supplied (refuse if chain drifted past it);
+  // otherwise fall back to chain-current+headroom — see #1691.
+  async resolveMaxAcceptableCommissionBps(t, e) {
+    if (e === void 0 && U(this.config.btcWallet))
+      throw new Error(
+        "quotedCommissionBps is required when the wallet approved deposit terms: the registration ceiling must anchor to the approved quote."
+      );
+    let o;
+    try {
+      o = await new Se(
+        this.config.publicClient,
+        this.config.vaultContracts.btcVaultRegistry
+      ).getVaultProviderCommission(t);
+    } catch (i) {
+      throw new Error(
+        "Failed to query vault provider commission from the contract. Please check your network connection and that the contract address is correct.",
+        { cause: i }
+      );
+    }
+    if (e !== void 0) {
+      if (o > e + ot)
+        throw new Error(
+          `Vault provider commission changed since quote: quoted ${e} bps, chain currently reports ${o} bps (allowed drift ${ot} bps). Please refresh to see the new commission and try again.`
+        );
+      return Y(e);
+    }
+    return Y(o);
+  }
+  /**
+   * Check if a vault already exists for a given vault ID.
+   *
+   * The contract returns a default struct (with `depositor === zeroAddress`)
+   * when no vault is registered, so existence is signalled in the response,
+   * not via a thrown error. RPC/network failures are propagated rather than
+   * silently treated as "vault doesn't exist", which would otherwise let
+   * downstream calls run with stale assumptions.
+   *
+   * @param vaultId - The Bitcoin transaction hash (vault ID)
+   * @returns True if vault exists, false otherwise
+   * @throws If the underlying RPC read fails
+   */
+  async checkVaultExists(t) {
+    return (await this.config.publicClient.readContract({
+      address: this.config.vaultContracts.btcVaultRegistry,
+      abi: H,
+      functionName: "getBtcVaultBasicInfo",
+      args: [t]
+    })).depositor !== Qt;
+  }
+  /**
+   * Resolve the BTC scriptPubKey to register as the depositor's payout sink.
+   *
+   * `address` is validated against the verified depositor pubkey, sourced
+   * from `assertPopMatchesBtcWallet`'s return value rather than
+   * `popSignature.depositorBtcPubkey` (which is x-only, parity stripped).
+   * For wallets that expose a compressed key this preserves y-parity end to
+   * end. For Taproot wallets that only expose an x-only key, the helper
+   * itself fails closed for P2WPKH — the parity is unknowable, so the
+   * payout sink must be a P2TR address derived from that same x.
+   *
+   * The helper does not call into the wallet so the batch path can resolve
+   * many requests without any extra adapter reads. Threat closed: a
+   * state-race or stale FE state that lets a non-wallet address reach the
+   * on-chain payout-script registration.
+   */
+  resolvePayoutScriptPubKey(t, e) {
+    if (!mt(
+      e,
+      t,
+      this.config.btcNetwork
+    ))
+      throw S(t).length === le && vs(e, this.config.btcNetwork) ? new Error(
+        `BTC payout address "${e}" is a P2WPKH (Native SegWit) address, but the connected wallet only exposes an x-only public key. P2WPKH validation requires a compressed key with known y-parity. Use a P2TR (Taproot) payout address instead.`
+      ) : new Error(
+        `BTC payout address "${e}" is not derived from the connected wallet's public key. The payout sink must be controlled by the same key that signs the pegin; refusing to register a mismatched address.`
+      );
+    const o = wt(this.config.btcNetwork);
+    try {
+      return `0x${At.address.toOutputScript(e, o).toString("hex")}`;
+    } catch {
+      throw new Error(
+        `Invalid BTC payout address: "${e}". Please provide a valid Bitcoin address for the ${this.config.btcNetwork} network.`
+      );
+    }
+  }
+  /**
+   * Sign a BIP-322 BTC Proof-of-Possession binding the connected BTC
+   * wallet to the connected ETH account for this chain and vault
+   * registry. The returned {@link PopSignature} can be reused across
+   * every register call in the same session.
+   *
+   * The witness is verified against the depositor key before it is
+   * returned — Schnorr for one-item (P2TR), ECDSA over the BIP-322
+   * P2WPKH virtual transaction for two-item — see {@link verifyPopWitness}.
+   *
+   * @throws If the wallet returns a malformed witness or a signature that
+   *         does not verify.
+   */
+  async signProofOfPossession() {
+    if (!this.config.ethWallet.account)
+      throw new Error("Ethereum wallet account not found");
+    const t = this.config.ethWallet.account.address, e = $(
+      await this.config.btcWallet.getPublicKeyHex()
+    ), o = this.config.vaultContracts.btcVaultRegistry, i = `${t.toLowerCase()}:${this.config.ethChain.id}:pegin:${o.toLowerCase()}`, n = await this.config.btcWallet.signMessage(
+      i,
+      "bip322-simple"
+    ), r = Ne(n);
+    return Ts(
+      new TextEncoder().encode(i),
+      e,
+      r
+    ), { btcPopSignature: r, depositorEthAddress: t, depositorBtcPubkey: e };
+  }
+  /**
+   * Confirm the connected BTC wallet still matches the PoP it produced, and
+   * return the wallet's *raw* pubkey hex (parity-preserving form, as the
+   * wallet adapter returns it). The raw form is required by callers that
+   * validate Native SegWit / P2WPKH addresses, since P2WPKH is derived from
+   * a parity-bearing compressed key — an x-only form would let an attacker
+   * substitute the opposite-parity P2WPKH address.
+   */
+  async assertPopMatchesBtcWallet(t) {
+    const e = await this.config.btcWallet.getPublicKeyHex(), o = $(e), i = $(t.depositorBtcPubkey);
+    if (o !== i)
+      throw new Error(
+        `Proof of possession was signed with BTC pubkey ${i} but the BTC wallet is currently connected to ${o}. Reconnect the original wallet or call signProofOfPossession() again.`
+      );
+    return e;
+  }
+  /**
+   * Gets the configured Bitcoin network.
+   *
+   * @returns The Bitcoin network (mainnet, testnet, signet, regtest)
+   */
+  getNetwork() {
+    return this.config.btcNetwork;
+  }
+  /**
+   * Gets the configured BTCVaultRegistry contract address.
+   *
+   * @returns The Ethereum address of the BTCVaultRegistry contract
+   */
+  getVaultContractAddress() {
+    return this.config.vaultContracts.btcVaultRegistry;
+  }
+}
+const _s = 80, Bs = 250, As = 300, Cs = 22, Xt = "ab";
+function Is(s, t) {
+  const e = Xt.repeat(As), o = S(s).toLowerCase(), i = t.toString(16).padStart(8, "0"), n = `${o}${i}`, r = e.slice(n.length);
+  return `0x${n}${r}`;
+}
+function Hs(s, t) {
+  const e = (o) => `0x${Xt.repeat(o)}`;
+  return {
+    depositorBtcPubKey: e(32),
+    btcPopSignature: e(_s),
+    unsignedPrePeginTx: e(Bs),
+    depositorSignedPeginTx: Is(
+      s,
+      t
+    ),
+    hashlock: e(32),
+    htlcVout: t,
+    referralCode: Kt,
+    depositorPayoutBtcAddress: e(Cs),
+    depositorWotsPkHash: e(32)
+  };
+}
+async function Js(s) {
+  const {
+    publicClient: t,
+    btcVaultRegistry: e,
+    depositorEthAddress: o,
+    vaultProvider: i,
+    batchSize: n
+  } = s;
+  if (n <= 0)
+    throw new Error(
+      `estimateSubmitPeginRequestBatchGas requires batchSize >= 1 (received ${n})`
+    );
+  const a = await t.readContract({
+    address: e,
+    abi: H,
+    functionName: "getPegInFee",
+    args: [i]
+  }) * BigInt(n), c = Array.from(
+    { length: n },
+    (h, g) => Hs(o, g)
+  ), u = tt({
+    abi: H,
+    functionName: "submitPeginRequestBatch",
+    args: [
+      o,
+      i,
+      Ht,
+      c
+    ]
+  });
+  return t.estimateGas({
+    to: e,
+    data: u,
+    value: a,
+    account: o
+  });
+}
+export {
+  ot as C,
+  Ht as M,
+  Zs as P,
+  Y as a,
+  Ve as b,
+  fs as c,
+  ds as d,
+  Js as e,
+  Fe as f,
+  ps as g
+};
+//# sourceMappingURL=PeginManager-Bsv6caG3.js.map