@babylonlabs-io/ts-sdk 0.68.0 → 0.68.1

package/dist/mempoolApi-EU1La9wk.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"mempoolApi-EU1La9wk.cjs","sources":["../src/tbv/core/clients/vault-provider/auth/bip322Verify.ts","../src/tbv/core/clients/eth/protocol-params-validation.ts","../src/tbv/core/clients/eth/vault-registry-reader.ts","../src/tbv/core/clients/mempool/mempoolApi.ts"],"sourcesContent":["/**\n * BIP-322 \"simple\" signature verification for P2TR key-path and P2WPKH.\n *\n * Mirrors the Rust reference in\n * `btc-vault/crates/btc-signer/src/message.rs` (`verify_bip322_message`\n * and the P2WPKH arm of `verify_pop_witness`, both of which delegate to\n * the `bip322` crate 0.0.10's `verify_simple`).\n *\n * The algorithm:\n *\n *   1. Compute the BIP-322 tagged-hash of the message:\n *        m_hash = SHA256( SHA256(tag) || SHA256(tag) || message )\n *      where tag = \"BIP0322-signed-message\".\n *\n *   2. Build a virtual \"to_spend\" transaction with one input (prevout\n *      all-zero txid + 0xFFFFFFFF vout, scriptSig = `OP_0 PUSH32 m_hash`,\n *      sequence = 0) and one output (value 0, scriptPubKey = the signer's\n *      address: P2TR key-path-only, or P2WPKH of the compressed pubkey).\n *\n *   3. Build a \"to_sign\" transaction that spends to_spend[0] and has a\n *      single `OP_RETURN` output (value 0).\n *\n *   4. Compute the sighash of to_sign input 0: BIP-341 taproot for P2TR\n *      (SIGHASH_DEFAULT 0x00 unless the witness item carried a trailing\n *      SIGHASH_ALL 0x01 byte), BIP-143 with the standard P2WPKH\n *      scriptCode for P2WPKH (SIGHASH_ALL only).\n *\n *   5. Verify the signature: Schnorr against the **tweaked** output key\n *      `Q = P + tap_tweak(P) * G` for P2TR (no merkle root — key-path\n *      only), ECDSA against the compressed pubkey for P2WPKH.\n *\n * `bitcoinjs-lib` handles (2)–(4); `tiny-secp256k1-asmjs` provides\n * the tweak and the Schnorr/ECDSA verifies. Pulling in a full BIP-322\n * library would add a peer dep for what amounts to ~40 lines of glue.\n *\n * @module tbv/core/clients/vault-provider/auth/bip322Verify\n */\n\nimport * as ecc from \"@bitcoin-js/tiny-secp256k1-asmjs\";\nimport { script as bscript, payments, Transaction } from \"bitcoinjs-lib\";\n\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport { Buffer } from \"buffer\";\n\n/** BIP-322 message tag (BIP-340 tagged-hash style). */\nconst BIP322_TAG = \"BIP0322-signed-message\";\n\n/** BIP-341 taproot-tweak tag. */\nconst TAPTWEAK_TAG = \"TapTweak\";\n\nconst X_ONLY_PUBKEY_SIZE = 32;\nconst SCHNORR_SIG_SIZE = 64;\n/** SEC1 compressed pubkey: 0x02/0x03 prefix + 32-byte x coordinate. */\nconst COMPRESSED_PUBKEY_SIZE = 33;\n/**\n * vaultd's P2WPKH BIP-322 verifier accepts ONLY 71/72-byte encoded\n * signatures — DER (70/71B) + sighash byte (`bip322` crate 0.0.10\n * `verify.rs:141-153`). A shorter (short-DER) signature fails ingestion\n * permanently, so this gate must be exactly as strict.\n */\nconst P2WPKH_ENCODED_SIG_MIN = 71;\nconst P2WPKH_ENCODED_SIG_MAX = 72;\n\n// NOTE: bitcoinjs-lib v6.x's `Transaction.addOutput` and its sighash\n// methods are typed for `Satoshi` (a UInt53 number), not `bigint`.\n// Passing `BigInt(0)` triggers a typeforce assertion in `addOutput`\n// (\"Expected property '1' of type Satoshi, got BigInt 0\") which the\n// verifiers' try/catch silently turns into `verify -> false`. Use\n// plain `0` everywhere.\nconst ZERO_SATS = 0;\n\n// Wire fields of the virtual to_spend/to_sign transactions (`bip322`\n// crate 0.0.10 `util.rs:18-85`).\nconst BIP322_TX_VERSION = 0;\nconst BIP322_TX_LOCKTIME = 0;\nconst BIP322_INPUT_SEQUENCE = 0;\n/** to_spend prevout: all-zero 32-byte txid at index 0xFFFFFFFF (`util.rs:18-85`). */\nconst TO_SPEND_PREVOUT_TXID_BYTES = 32;\nconst TO_SPEND_PREVOUT_INDEX = 0xffffffff;\n/** to_sign spends to_spend's only output (`util.rs:18-85`). */\nconst TO_SPEND_OUTPUT_INDEX = 0;\nconst OP_0 = 0x00;\n/** Direct push of the 32-byte tagged message hash. */\nconst OP_PUSHBYTES_32 = 0x20;\nconst OP_RETURN = 0x6a;\n\n/**\n * BIP-340 tagged hash: `SHA256( SHA256(tag) || SHA256(tag) || data )`.\n * Used for both BIP-322 message hashing and BIP-341 tap-tweak.\n */\nfunction taggedHash(tag: string, data: Uint8Array): Uint8Array {\n  const tagBytes = new TextEncoder().encode(tag);\n  const tagHash = sha256(tagBytes);\n  const preimage = new Uint8Array(tagHash.length * 2 + data.length);\n  preimage.set(tagHash, 0);\n  preimage.set(tagHash, tagHash.length);\n  preimage.set(data, tagHash.length * 2);\n  return sha256(preimage);\n}\n\n/**\n * Apply BIP-341 taproot tweak to an x-only pubkey with no merkle\n * root (key-path-only address).\n *\n * `tap_tweak = hash_TapTweak(P)`\n * `Q = P + tap_tweak * G` (x-only, even-Y parity)\n *\n * Returns the tweaked 32-byte x-only pubkey, or null if the tweak\n * produces a point-at-infinity or invalid result.\n */\nfunction tweakXOnlyKey(xOnly: Uint8Array): Uint8Array | null {\n  if (xOnly.length !== X_ONLY_PUBKEY_SIZE) return null;\n  const tweak = taggedHash(TAPTWEAK_TAG, xOnly);\n  const tweaked = ecc.xOnlyPointAddTweak(xOnly, tweak);\n  return tweaked ? tweaked.xOnlyPubkey : null;\n}\n\n/**\n * Build the BIP-322 virtual `to_sign` transaction for a signer\n * scriptPubKey (steps 1–3 above; `bip322` crate 0.0.10 `util.rs:18-85`:\n * both txs version 0, locktime 0, sequence 0, all values 0).\n */\nfunction buildToSignTransaction(\n  messageBytes: Uint8Array,\n  scriptPubKey: Buffer,\n): Transaction {\n  const messageHash = taggedHash(BIP322_TAG, messageBytes);\n\n  const toSpend = new Transaction();\n  toSpend.version = BIP322_TX_VERSION;\n  toSpend.locktime = BIP322_TX_LOCKTIME;\n  const scriptSig = Buffer.concat([\n    Buffer.from([OP_0, OP_PUSHBYTES_32]),\n    Buffer.from(messageHash),\n  ]);\n  toSpend.addInput(\n    Buffer.alloc(TO_SPEND_PREVOUT_TXID_BYTES, 0),\n    TO_SPEND_PREVOUT_INDEX,\n    BIP322_INPUT_SEQUENCE,\n    scriptSig,\n  );\n  toSpend.addOutput(scriptPubKey, ZERO_SATS);\n\n  const toSign = new Transaction();\n  toSign.version = BIP322_TX_VERSION;\n  toSign.locktime = BIP322_TX_LOCKTIME;\n  // Bitcoin txid in natural-byte (little-endian) form.\n  toSign.addInput(\n    toSpend.getHash(),\n    TO_SPEND_OUTPUT_INDEX,\n    BIP322_INPUT_SEQUENCE,\n  );\n  toSign.addOutput(Buffer.from([OP_RETURN]), ZERO_SATS);\n\n  return toSign;\n}\n\n/**\n * Verify a BIP-322 \"simple\" P2TR key-path signature over an arbitrary\n * byte message.\n *\n * @internal Consumed by `verifyServerIdentity` (VP auth) and\n * `verifyPopWitness` (PoP pre-registration check), and exposed so the\n * golden-vector test suite can pin the verifier independently.\n *\n * @param messageBytes - The bytes that were signed (e.g. a CBOR-encoded\n *                       payload). Not pre-hashed; this function applies\n *                       the BIP-322 tagged hash internally.\n * @param xOnlyPubkey  - 32-byte x-only pubkey of the signer (pre-tweak).\n * @param signature    - 64-byte raw Schnorr signature (BIP-340), as\n *                       emitted by a key-path witness. The trailing\n *                       sighash byte of a 65-byte witness item is not\n *                       part of it — pass it as `hashType` instead.\n * @param hashType     - BIP-341 sighash type the signature commits to.\n *                       `SIGHASH_DEFAULT` (0x00) for a 64-byte witness\n *                       item, `SIGHASH_ALL` (0x01) for a 65-byte one.\n * @returns `true` if the signature verifies against the address\n *          derived from `xOnlyPubkey`; `false` otherwise.\n */\nexport function verifyBip322Simple(\n  messageBytes: Uint8Array,\n  xOnlyPubkey: Uint8Array,\n  signature: Uint8Array,\n  hashType: number = Transaction.SIGHASH_DEFAULT,\n): boolean {\n  if (xOnlyPubkey.length !== X_ONLY_PUBKEY_SIZE) return false;\n  if (signature.length !== SCHNORR_SIG_SIZE) return false;\n  // Only the two types a BIP-322 witness may carry. SIGHASH_NONE/SINGLE and the\n  // ANYONECANPAY variants would verify here but are rejected downstream.\n  if (\n    hashType !== Transaction.SIGHASH_DEFAULT &&\n    hashType !== Transaction.SIGHASH_ALL\n  ) {\n    return false;\n  }\n\n  // Any exception from the underlying crypto libraries (e.g. the\n  // `Expected Point` error `tiny-secp256k1` throws when the supplied\n  // 32 bytes don't represent a valid x-coordinate on secp256k1) is\n  // treated as a verification failure rather than propagated — a\n  // verifier MUST return a boolean, not raise.\n  try {\n    // scriptPubKey for the signer's P2TR key-path-only address.\n    // bitcoinjs-lib's `payments.p2tr({ internalPubkey })` computes the\n    // tweak and produces the `OP_1 <tweaked_xonly>` output script.\n    const p2tr = payments.p2tr({\n      internalPubkey: Buffer.from(xOnlyPubkey),\n    });\n    if (!p2tr.output) return false;\n    const scriptPubKey = p2tr.output;\n\n    const toSign = buildToSignTransaction(messageBytes, scriptPubKey);\n\n    // Taproot sighash for to_sign input 0.\n    const sighash = toSign.hashForWitnessV1(\n      0,\n      [scriptPubKey],\n      [ZERO_SATS],\n      hashType,\n    );\n\n    // Tweak the x-only pubkey (no merkle root) and verify Schnorr.\n    const tweakedXOnly = tweakXOnlyKey(xOnlyPubkey);\n    if (!tweakedXOnly) return false;\n\n    return ecc.verifySchnorr(sighash, tweakedXOnly, signature);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Verify a BIP-322 \"simple\" P2WPKH signature over an arbitrary byte\n * message, mirroring the verifier vaultd runs on a two-item PoP witness\n * (`bip322` crate 0.0.10 `verify.rs:102-186 verify_full_p2wpkh`).\n *\n * @internal Consumed by `verifyPopWitness` for Native SegWit software\n * wallets, and exposed so the BIP-322 official-vector test suite can pin\n * the verifier independently.\n *\n * @param compressedPubkey - 33-byte SEC1 compressed pubkey of the signer\n *                           (witness item 1). The address is derived from\n *                           it; network affects only bech32 encoding, not\n *                           script or sighash (`message.rs:125-127`).\n * @param encodedSignature - Witness item 0: DER signature with trailing\n *                           sighash byte, 71 or 72 bytes, SIGHASH_ALL only\n *                           (`verify.rs:141-161`).\n * @returns `true` if the signature verifies against the P2WPKH address of\n *          `compressedPubkey`; `false` otherwise.\n */\nexport function verifyBip322P2wpkhSimple(\n  messageBytes: Uint8Array,\n  compressedPubkey: Uint8Array,\n  encodedSignature: Uint8Array,\n): boolean {\n  if (compressedPubkey.length !== COMPRESSED_PUBKEY_SIZE) return false;\n  if (\n    encodedSignature.length < P2WPKH_ENCODED_SIG_MIN ||\n    encodedSignature.length > P2WPKH_ENCODED_SIG_MAX\n  ) {\n    return false;\n  }\n  // Any exception below (strict-DER decode, malformed pubkey) is a\n  // verification failure, not an error — a verifier returns a boolean.\n  try {\n    // Full curve-point parse, as `PublicKey::from_slice` (`verify.rs:82-83`).\n    if (!ecc.isPointCompressed(compressedPubkey)) return false;\n\n    // Strict DER decode, then SIGHASH_ALL only — deliberately NARROWER than\n    // `verify.rs:156-161` (its from_consensus maps more bytes to All); host-stricter is safe.\n    const { signature, hashType } = bscript.signature.decode(\n      Buffer.from(encodedSignature),\n    );\n    if (hashType !== Transaction.SIGHASH_ALL) return false;\n\n    // scriptPubKey = OP_0 PUSH20 hash160(pubkey) (`message.rs:127 Address::p2wpkh`).\n    const p2wpkh = payments.p2wpkh({ pubkey: Buffer.from(compressedPubkey) });\n    if (!p2wpkh.output || !p2wpkh.hash) return false;\n\n    const toSign = buildToSignTransaction(messageBytes, p2wpkh.output);\n\n    // BIP-143 sighash with the standard P2WPKH scriptCode\n    // `OP_DUP OP_HASH160 <20B> OP_EQUALVERIFY OP_CHECKSIG` and value 0\n    // (`verify.rs:163-173 p2wpkh_signature_hash`; scriptCode template per\n    // bitcoinjs-lib's own P2WPKH signer, `src/psbt.js:1245-1255`).\n    const scriptCode = payments.p2pkh({ hash: p2wpkh.hash }).output;\n    if (!scriptCode) return false;\n    const sighash = toSign.hashForWitnessV0(0, scriptCode, ZERO_SATS, hashType);\n\n    // strict=true rejects high-S, as libsecp256k1's verify does\n    // (`verify.rs:180-182`; secp256k1 crate `ecdsa/mod.rs:194`).\n    return ecc.verify(sighash, compressedPubkey, signature, true);\n  } catch {\n    return false;\n  }\n}\n","/**\n * Validation for protocol parameters fetched from the ProtocolParams contract.\n *\n * These values feed Bitcoin script construction and deposit validation.\n * Invalid params must be caught before they reach transaction-building code,\n * since errors after wallet signing prompts are unrecoverable.\n *\n * The {@link ViemProtocolParamsReader} runs these on every read; consumers\n * implementing their own reader against the same `ProtocolParamsReader`\n * interface should call them too.\n */\n\nimport { assertValidVaultCoreVersion } from \"../../primitives/vaultCoreVersion\";\n\nimport type {\n  PegInConfiguration,\n  TBVProtocolParams,\n  VersionedOffchainParams,\n} from \"./types\";\n\n/**\n * Maximum value for a Solidity uint16.\n * PeginLogic.sol casts timelockAssert to uint16, so values above this are invalid.\n */\nconst UINT16_MAX = 65535;\n\n/** Maximum valid value for basis points (100%) */\nconst MAX_BASIS_POINTS = 10000;\n\n/** Maximum value for a Solidity uint32. */\nconst UINT32_MAX = 4_294_967_295;\n\n/** Maximum valid value for a uint8 (e.g. maxHtlcOutputCount). */\nconst UINT8_MAX = 255;\n\n/**\n * Validate an `offchainParamsVersion` value sourced from a contract read.\n * `Number()` on a malformed payload yields `NaN` or a non-integer; both\n * silently break consumers that loop `1..version` or use the value as a\n * map key. Used by reader entry points that surface the version to JS.\n */\nexport function assertValidOffchainParamsVersion(version: number): void {\n  if (\n    !Number.isInteger(version) ||\n    version < 0 ||\n    version > UINT32_MAX\n  ) {\n    throw new Error(\n      `Invalid offchainParamsVersion from contract: must be a uint32, got ${version}`,\n    );\n  }\n}\n\n/**\n * Validate offchain params consistency and bounds.\n * @throws Error on invalid values to prevent constructing invalid Bitcoin scripts.\n */\nexport function validateOffchainParams(params: VersionedOffchainParams): void {\n  const errors: string[] = [];\n\n  if (params.timelockAssert <= 0n) {\n    errors.push(\n      `timelockAssert must be positive, got ${params.timelockAssert}`,\n    );\n  }\n  if (params.timelockAssert > BigInt(UINT16_MAX)) {\n    errors.push(\n      `timelockAssert ${params.timelockAssert} exceeds uint16 max (${UINT16_MAX})`,\n    );\n  }\n\n  if (params.timelockChallengeAssert <= 0n) {\n    errors.push(\n      `timelockChallengeAssert must be positive, got ${params.timelockChallengeAssert}`,\n    );\n  }\n\n  if (params.tRefund <= 0) {\n    errors.push(`tRefund must be positive, got ${params.tRefund}`);\n  }\n\n  if (params.tStale <= 0) {\n    errors.push(`tStale must be positive, got ${params.tStale}`);\n  }\n\n  if (params.securityCouncilKeys.length === 0) {\n    errors.push(\"securityCouncilKeys must not be empty\");\n  }\n\n  if (params.councilQuorum <= 0) {\n    errors.push(`councilQuorum must be positive, got ${params.councilQuorum}`);\n  }\n  if (params.councilQuorum > params.securityCouncilKeys.length) {\n    errors.push(\n      `councilQuorum (${params.councilQuorum}) exceeds securityCouncilKeys count (${params.securityCouncilKeys.length})`,\n    );\n  }\n\n  if (params.feeRate <= 0n) {\n    errors.push(`feeRate must be positive, got ${params.feeRate}`);\n  }\n\n  if (params.minPeginFeeRate <= 0n) {\n    errors.push(\n      `minPeginFeeRate must be positive, got ${params.minPeginFeeRate}`,\n    );\n  }\n\n  if (\n    !Number.isInteger(params.proverCircuitVersion) ||\n    params.proverCircuitVersion < 0 ||\n    params.proverCircuitVersion > UINT16_MAX\n  ) {\n    errors.push(\n      `proverCircuitVersion must be a uint16, got ${params.proverCircuitVersion}`,\n    );\n  }\n\n  if (\n    !Number.isInteger(params.minPrepeginDepth) ||\n    params.minPrepeginDepth <= 0 ||\n    params.minPrepeginDepth > UINT32_MAX\n  ) {\n    errors.push(\n      `minPrepeginDepth must be a uint32 in [1, ${UINT32_MAX}], got ${params.minPrepeginDepth}`,\n    );\n  }\n\n  if (params.babeTotalInstances <= 0) {\n    errors.push(\n      `babeTotalInstances must be positive, got ${params.babeTotalInstances}`,\n    );\n  }\n  if (params.babeInstancesToFinalize <= 0) {\n    errors.push(\n      `babeInstancesToFinalize must be positive, got ${params.babeInstancesToFinalize}`,\n    );\n  }\n  if (params.babeInstancesToFinalize > params.babeTotalInstances) {\n    errors.push(\n      `babeInstancesToFinalize (${params.babeInstancesToFinalize}) exceeds babeTotalInstances (${params.babeTotalInstances})`,\n    );\n  }\n\n  if (\n    params.minVpCommissionBps < 0 ||\n    params.minVpCommissionBps > MAX_BASIS_POINTS\n  ) {\n    errors.push(\n      `minVpCommissionBps must be in [0, ${MAX_BASIS_POINTS}], got ${params.minVpCommissionBps}`,\n    );\n  }\n\n  if (errors.length > 0) {\n    throw new Error(\n      `Invalid offchain protocol parameters: ${errors.join(\"; \")}`,\n    );\n  }\n}\n\n/**\n * Validate TBV protocol params returned from the contract.\n * @throws Error on invalid amounts or out-of-range bounded fields.\n */\nexport function validateTBVProtocolParams(params: TBVProtocolParams): void {\n  const errors: string[] = [];\n\n  if (params.minimumPegInAmount <= 0n) {\n    errors.push(\n      `minimumPegInAmount must be positive, got ${params.minimumPegInAmount}`,\n    );\n  }\n\n  if (params.maxPegInAmount < params.minimumPegInAmount) {\n    errors.push(\n      `maxPegInAmount (${params.maxPegInAmount}) must be >= minimumPegInAmount (${params.minimumPegInAmount})`,\n    );\n  }\n\n  if (params.pegInAckTimeout <= 0n) {\n    errors.push(\n      `pegInAckTimeout must be positive, got ${params.pegInAckTimeout}`,\n    );\n  }\n\n  if (params.pegInActivationTimeout <= 0n) {\n    errors.push(\n      `pegInActivationTimeout must be positive, got ${params.pegInActivationTimeout}`,\n    );\n  }\n\n  if (\n    !Number.isInteger(params.maxHtlcOutputCount) ||\n    params.maxHtlcOutputCount <= 0 ||\n    params.maxHtlcOutputCount > UINT8_MAX\n  ) {\n    errors.push(\n      `maxHtlcOutputCount must be an integer in [1, ${UINT8_MAX}], got ${params.maxHtlcOutputCount}`,\n    );\n  }\n\n  if (\n    typeof params.expiredPegInGraceBlocks !== \"bigint\" ||\n    params.expiredPegInGraceBlocks <= 0n\n  ) {\n    errors.push(\n      `expiredPegInGraceBlocks must be a positive bigint, got ${params.expiredPegInGraceBlocks}`,\n    );\n  }\n\n  if (errors.length > 0) {\n    throw new Error(`Invalid TBV protocol parameters: ${errors.join(\"; \")}`);\n  }\n}\n\n/**\n * Validate the full peg-in configuration after assembly.\n * Checks both TBV params and offchain params consistency, and the\n * top-level `offchainParamsVersion` (which originates from a separate\n * multicall result and so must be range-checked alongside the params it\n * names).\n */\nexport function validatePegInConfiguration(config: PegInConfiguration): void {\n  validateTBVProtocolParams(config);\n  validateOffchainParams(config.offchainParams);\n\n  if (\n    !Number.isInteger(config.offchainParamsVersion) ||\n    config.offchainParamsVersion < 0 ||\n    config.offchainParamsVersion > UINT32_MAX\n  ) {\n    throw new Error(\n      `Invalid peg-in configuration: offchainParamsVersion must be a uint32, got ${config.offchainParamsVersion}`,\n    );\n  }\n\n  // The contract enforces ≥ 1 (setter rejects 0); a 0 here means a\n  // mis-decoded read or a pre-vaultCoreVersion contract — fail closed.\n  assertValidVaultCoreVersion(\n    config.activeVaultCoreVersion,\n    \"ProtocolParams.activeVaultCoreVersion()\",\n  );\n}\n","/**\n * Concrete BTCVaultRegistry reader using viem's readContract.\n *\n * This is an optional utility — callers can use their own implementation\n * of the VaultRegistryReader interface.\n */\n\nimport type { Abi, Address, Hex, PublicClient } from \"viem\";\n\nimport { BTCVaultRegistryABI } from \"../../contracts/abis/BTCVaultRegistry.abi\";\nimport { BTCVaultRegistryKeyEpochsABI } from \"../../contracts/abis/BTCVaultRegistryKeyEpochs.abi\";\nimport { assertOnChainBtcPubkey } from \"./onChainBtcPubkey\";\nimport { assertValidOffchainParamsVersion } from \"./protocol-params-validation\";\nimport type {\n  KeyEpochs,\n  OnChainBtcPubkey,\n  VaultBasicInfo,\n  VaultData,\n  VaultProtocolInfo,\n  VaultRegistryReader,\n} from \"./types\";\n\n/**\n * Inclusive upper bound the BTCVaultRegistry contract enforces on a vault\n * provider's commission (the contract check is `< 10000`).\n */\nconst MAX_VP_COMMISSION_BPS = 9999;\n\n/** Raw `getBtcVaultBasicInfo` tuple as decoded by viem. */\ntype RawVaultBasicInfo = {\n  depositor: Address;\n  depositorBtcPubKey: Hex;\n  amount: bigint;\n  vaultProvider: Address;\n  status: number;\n  applicationEntryPoint: Address;\n  createdAt: bigint;\n};\n\n/** Raw `getBtcVaultProtocolInfo` tuple as decoded by viem. */\ntype RawVaultProtocolInfo = {\n  depositorSignedPeginTx: Hex;\n  universalChallengersVersion: number;\n  appVaultKeepersVersion: number;\n  offchainParamsVersion: number;\n  verifiedAt: bigint;\n  depositorWotsPkHash: Hex;\n  hashlock: Hex;\n  htlcVout: number;\n  depositorPopSignature: Hex;\n  prePeginTxHash: Hex;\n  vaultProviderCommissionBps: number;\n  claimExpiredUntil: bigint;\n  vaultCoreVersion: number;\n};\n\nfunction mapVaultBasicInfo(result: RawVaultBasicInfo): VaultBasicInfo {\n  return {\n    depositor: result.depositor,\n    depositorBtcPubKey: result.depositorBtcPubKey,\n    amount: result.amount,\n    vaultProvider: result.vaultProvider,\n    status: result.status,\n    applicationEntryPoint: result.applicationEntryPoint,\n    createdAt: result.createdAt,\n  };\n}\n\nfunction mapVaultProtocolInfo(result: RawVaultProtocolInfo): VaultProtocolInfo {\n  const offchainParamsVersion = Number(result.offchainParamsVersion);\n  assertValidOffchainParamsVersion(offchainParamsVersion);\n  return {\n    depositorSignedPeginTx: result.depositorSignedPeginTx,\n    universalChallengersVersion: result.universalChallengersVersion,\n    appVaultKeepersVersion: result.appVaultKeepersVersion,\n    offchainParamsVersion,\n    verifiedAt: result.verifiedAt,\n    depositorWotsPkHash: result.depositorWotsPkHash,\n    hashlock: result.hashlock,\n    htlcVout: result.htlcVout,\n    depositorPopSignature: result.depositorPopSignature,\n    prePeginTxHash: result.prePeginTxHash,\n    vaultProviderCommissionBps: result.vaultProviderCommissionBps,\n    claimExpiredUntil: result.claimExpiredUntil,\n    vaultCoreVersion: result.vaultCoreVersion,\n  };\n}\n\n/**\n * Exclusive upper bound for a `uint64` epoch.\n *\n * viem does not range-check a decoded `uint64`, so a misaligned decode can\n * hand back a value far larger than the field can hold. Rejecting those is\n * cheap defence in depth against a mis-decode of the extended ABI.\n *\n * The state this is load-bearing for is narrower than \"a registry that predates\n * RFC-006\". Against a *fully* pre-RFC-006 registry the path fails closed on its\n * own: `resolveParticipantKeysAtEpochs` goes on to call\n * `getOperationBtcKeyAtEpochOrGenesis` on ApplicationRegistry and\n * ProtocolParams, which do not exist there, so the multicall reverts and these\n * epochs are never used. The reachable gap is a registry that *has* the\n * operation-key getters but whose `BTCVaultProtocolInfo` struct is not\n * extended — there the tail-data epochs resolve with no error at all, and this\n * range check is the only thing looking at them.\n *\n * Even for that case it is only a backstop, and a weak one: a misaligned decode\n * can land on a small, plausible-looking integer this range accepts. Correctness\n * rests on only ever pointing at an RFC-006 registry, which is a deployment\n * precondition rather than something this call can establish — see\n * https://github.com/babylonlabs-io/babylon-toolkit/issues/2192 for where that\n * check is owned, and `BTCVaultRegistryKeyEpochs.abi.ts` for the decode hazard.\n */\nconst UINT64_EXCLUSIVE_UPPER_BOUND = 1n << 64n;\n\n/**\n * The epoch a vault provider's registration key is bonded at.\n *\n * A provider's operation-key history is append-only and every appended version\n * is stamped at epoch 1 or later, so epoch 0 always resolves to the key set at\n * registration. This is what lets `getOperationBtcKeyAtEpoch` stand in for the\n * removed `getVaultProviderBTCKey` getter.\n */\nconst VP_GENESIS_KEY_EPOCH = 0n;\n\nfunction assertEpochInRange(\n  value: bigint,\n  field: string,\n  vaultId: Hex,\n): bigint {\n  if (value < 0n || value >= UINT64_EXCLUSIVE_UPPER_BOUND) {\n    throw new Error(\n      `getBtcVaultProtocolInfo returned ${field}=${value} for vault ${vaultId}, ` +\n        `outside the uint64 range — the registry may predate RFC-006`,\n    );\n  }\n  return value;\n}\n\nfunction mapKeyEpochs(result: KeyEpochs, vaultId: Hex): KeyEpochs {\n  return {\n    vpKeyEpoch: assertEpochInRange(result.vpKeyEpoch, \"vpKeyEpoch\", vaultId),\n    appKeeperKeyEpoch: assertEpochInRange(\n      result.appKeeperKeyEpoch,\n      \"appKeeperKeyEpoch\",\n      vaultId,\n    ),\n    ucKeyEpoch: assertEpochInRange(result.ucKeyEpoch, \"ucKeyEpoch\", vaultId),\n  };\n}\n\n/**\n * Concrete vault registry reader using viem.\n *\n * Usage:\n * ```ts\n * const reader = new ViemVaultRegistryReader(publicClient, registryAddress);\n * const data = await reader.getVaultData(vaultId);\n * ```\n */\nexport class ViemVaultRegistryReader implements VaultRegistryReader {\n  constructor(\n    private publicClient: PublicClient,\n    private contractAddress: Address,\n  ) {}\n\n  /**\n   * Read the VP's **genesis** (registration) x-only BTC pubkey — the key bonded\n   * at version 0, which never moves when the operator rotates.\n   *\n   * Resolved as \"the operation key at epoch 0\" rather than through the\n   * dedicated `getVaultProviderBTCKey` getter, which\n   * https://github.com/babylonlabs-io/vault-contracts-aave-v4/pull/539 removes.\n   * Epoch 0 predates any rotation — appended versions are stamped at epoch 1 or\n   * later — so it resolves to the registration key, and the contracts team has\n   * confirmed that is a property we can rely on rather than an implementation\n   * detail. The devnet comparison behind that claim — both getters returning the\n   * identical key for a provider that *has* rotated, while\n   * `getCurrentOperationBtcKey` differed — is recorded in\n   * https://github.com/babylonlabs-io/babylon-toolkit/issues/2188.\n   *\n   * This makes the read RFC-006-only, where the removed getter also existed on a\n   * legacy registry. That costs nothing: every caller of this method already\n   * resolves participant keys through `OperationKeyReader`, so all of them\n   * require an RFC-006 registry regardless.\n   *\n   * Validates length, hex form, and secp256k1 curve membership before minting\n   * the brand. Returns 64-char lowercase hex without the `0x` prefix.\n   */\n  async getVaultProviderGenesisBtcPubKey(\n    vpAddress: Address,\n  ): Promise<OnChainBtcPubkey> {\n    const result = (await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryABI,\n      functionName: \"getOperationBtcKeyAtEpoch\",\n      args: [vpAddress, VP_GENESIS_KEY_EPOCH],\n    })) as Hex;\n    return assertOnChainBtcPubkey(\n      result,\n      `getOperationBtcKeyAtEpoch (vp=${vpAddress}, epoch=${VP_GENESIS_KEY_EPOCH})`,\n    );\n  }\n\n  /**\n   * Read a vault provider's *current* RFC-006 operation BTC key.\n   *\n   * Falls back on-chain to the registration key when the provider has never\n   * rotated, so this returns the same value as\n   * `getVaultProviderGenesisBtcPubKey` until the first rotation.\n   *\n   * This is the key the VP's server signs its BIP-322 auth tokens with — a\n   * live per-operator identity, not a per-vault binding, so the auth pin uses\n   * the current key rather than any vault's frozen epoch.\n   */\n  async getCurrentVaultProviderOperationBtcKey(\n    vpAddress: Address,\n  ): Promise<OnChainBtcPubkey> {\n    const result = (await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryABI,\n      functionName: \"getCurrentOperationBtcKey\",\n      args: [vpAddress],\n    })) as Hex;\n    return assertOnChainBtcPubkey(\n      result,\n      `getCurrentOperationBtcKey (vp=${vpAddress})`,\n    );\n  }\n\n  /**\n   * Read a vault's frozen RFC-006 operation-key epochs.\n   *\n   * Reads `getBtcVaultProtocolInfo` through the **extended** ABI, which is only\n   * valid against an RFC-006 registry: against one whose `BTCVaultProtocolInfo`\n   * struct is not extended this call does not fail for a populated vault, it\n   * silently returns three words of tail data as epochs. Nothing here can detect\n   * that, so the guarantee is a deployment one — every network this ships to has\n   * the RFC-006 getters, and mainnet is a fresh RFC-006 deploy.\n   *\n   * A registry missing the operation-key getters entirely is the *safer* of the\n   * two cases: `resolveParticipantKeysAtEpochs` reverts downstream and these\n   * epochs never reach key resolution. See {@link UINT64_EXCLUSIVE_UPPER_BOUND}\n   * for which state the range check actually guards, and\n   * `BTCVaultRegistryKeyEpochs.abi.ts` for the decode hazard.\n   */\n  async getVaultKeyEpochs(vaultId: Hex): Promise<KeyEpochs> {\n    const result = (await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryKeyEpochsABI,\n      functionName: \"getBtcVaultProtocolInfo\",\n      args: [vaultId],\n    })) as unknown as KeyEpochs;\n\n    return mapKeyEpochs(result, vaultId);\n  }\n\n  async getVaultKeyEpochsBatch(vaultIds: readonly Hex[]): Promise<KeyEpochs[]> {\n    if (vaultIds.length === 0) return [];\n\n    const results = await this.publicClient.multicall({\n      contracts: vaultIds.map((vaultId) => ({\n        address: this.contractAddress,\n        abi: BTCVaultRegistryKeyEpochsABI as Abi,\n        functionName: \"getBtcVaultProtocolInfo\" as const,\n        args: [vaultId] as const,\n      })),\n      allowFailure: false,\n    });\n\n    return results.map((info, i) =>\n      mapKeyEpochs(info as unknown as KeyEpochs, vaultIds[i]),\n    );\n  }\n\n  async getVaultBasicInfo(vaultId: Hex): Promise<VaultBasicInfo> {\n    const result = (await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryABI,\n      functionName: \"getBtcVaultBasicInfo\",\n      args: [vaultId],\n    })) as RawVaultBasicInfo;\n\n    return mapVaultBasicInfo(result);\n  }\n\n  async getVaultProtocolInfo(vaultId: Hex): Promise<VaultProtocolInfo> {\n    const result = (await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryABI,\n      functionName: \"getBtcVaultProtocolInfo\",\n      args: [vaultId],\n    })) as RawVaultProtocolInfo;\n\n    return mapVaultProtocolInfo(result);\n  }\n\n  async getProtocolInfoBatch(\n    vaultIds: readonly Hex[],\n  ): Promise<VaultProtocolInfo[]> {\n    if (vaultIds.length === 0) return [];\n\n    const results = await this.publicClient.multicall({\n      contracts: vaultIds.map((vaultId) => ({\n        address: this.contractAddress,\n        abi: BTCVaultRegistryABI as Abi,\n        functionName: \"getBtcVaultProtocolInfo\" as const,\n        args: [vaultId] as const,\n      })),\n      allowFailure: false,\n    });\n\n    return results.map((info, i) => {\n      const result = info as unknown as RawVaultProtocolInfo;\n      if (\n        !result.depositorSignedPeginTx ||\n        result.depositorSignedPeginTx === \"0x\"\n      ) {\n        // An empty record is not proof the vault is absent: a lagging RPC\n        // node returns HTTP 200 with a zero struct, so no retry below this\n        // layer can see it. Single-shot is only safe because the finality\n        // gate (`waitForPeginRegistrationDepth`) runs first on the deposit\n        // path — move this ahead of it and the read-after-write race returns.\n        // The vault app matches this message to render \"still confirming\".\n        throw new Error(\n          `Vault ${vaultIds[i]} not found on-chain or has no pegin transaction`,\n        );\n      }\n      return mapVaultProtocolInfo(result);\n    });\n  }\n\n  /**\n   * Read the protocol pegin fee (in wei) for a given vault provider.\n   * Mirrors the `getPegInFee(address)` view on BTCVaultRegistry.\n   */\n  async getPegInFee(vaultProvider: Address): Promise<bigint> {\n    return (await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryABI,\n      functionName: \"getPegInFee\",\n      args: [vaultProvider],\n    })) as bigint;\n  }\n\n  /**\n   * Read a vault provider's current commission in basis points from\n   * BTCVaultRegistry. The contract enforces `commissionBps < 10000`, so the\n   * legitimate range is `[0, 9999]`; anything outside indicates a wrong\n   * contract address or ABI drift and is surfaced as an error rather than\n   * trusted.\n   */\n  async getVaultProviderCommission(vaultProvider: Address): Promise<number> {\n    // viem infers `number` from the `uint16` return in the `as const` ABI.\n    const bps = await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryABI,\n      functionName: \"getVaultProviderCommission\",\n      args: [vaultProvider],\n    });\n\n    if (!Number.isInteger(bps) || bps < 0 || bps > MAX_VP_COMMISSION_BPS) {\n      throw new Error(\n        `getVaultProviderCommission returned ${bps} bps for ${vaultProvider}, ` +\n          `outside the protocol range [0, ${MAX_VP_COMMISSION_BPS}]`,\n      );\n    }\n\n    return bps;\n  }\n\n  async getVaultData(vaultId: Hex): Promise<VaultData> {\n    // One round-trip for both structs (hard-fail): they feed signing/refund/\n    // broadcast rebinds, so reading them in a single multicall also pins both\n    // to the same block — no basic/protocol skew across two `eth_call`s.\n    const [basicRaw, protocolRaw] = await this.publicClient.multicall({\n      contracts: [\n        {\n          address: this.contractAddress,\n          abi: BTCVaultRegistryABI,\n          functionName: \"getBtcVaultBasicInfo\",\n          args: [vaultId],\n        },\n        {\n          address: this.contractAddress,\n          abi: BTCVaultRegistryABI,\n          functionName: \"getBtcVaultProtocolInfo\",\n          args: [vaultId],\n        },\n      ],\n      allowFailure: false,\n    });\n\n    const basic = mapVaultBasicInfo(basicRaw);\n    const protocol = mapVaultProtocolInfo(protocolRaw);\n\n    if (\n      !protocol.depositorSignedPeginTx ||\n      protocol.depositorSignedPeginTx === \"0x\"\n    ) {\n      throw new Error(\n        `Vault ${vaultId} not found on-chain or has no pegin transaction`,\n      );\n    }\n\n    return { basic, protocol };\n  }\n\n}\n","/**\n * Mempool API Client\n *\n * Client for interacting with mempool.space API for Bitcoin network operations.\n * Used for broadcasting transactions and fetching UTXO data.\n *\n * @module clients/mempool/mempoolApi\n */\n\nimport { combineAbortSignals } from \"../../utils/abortSignals\";\nimport {\n  BITCOIN_ADDRESS_RE,\n  HEX_RE,\n  KNOWN_SCRIPT_PREFIXES,\n  TXID_RE,\n} from \"../../utils/validation\";\n\nimport type {\n  MempoolUTXO,\n  NetworkFees,\n  OutspendStatus,\n  TxInfo,\n  UtxoInfo,\n} from \"./types\";\n\n/** Maximum valid satoshi value: 21 million BTC × 10^8 sats/BTC */\nconst MAX_SATOSHIS = 21_000_000 * 1e8;\n\n/** Timeout for mempool API requests — prevents indefinite hangs from stalled endpoints */\nconst MEMPOOL_REQUEST_TIMEOUT_MS = 30_000;\n\n/**\n * Fetch wrapper with AbortController-based timeout.\n * Ensures all mempool API requests fail bounded rather than hanging indefinitely.\n */\nasync function fetchWithTimeout(\n  url: string,\n  options?: RequestInit,\n): Promise<Response> {\n  const controller = new AbortController();\n  const timeoutId = setTimeout(\n    () => controller.abort(),\n    MEMPOOL_REQUEST_TIMEOUT_MS,\n  );\n\n  // Compose timeout signal with any caller-supplied signal so both can cancel\n  const signals = [controller.signal, options?.signal].filter(\n    Boolean,\n  ) as AbortSignal[];\n  const combined = combineAbortSignals(signals);\n\n  try {\n    // Don't clear timeout here — let it cover body consumption by callers.\n    // For the same reason the composed signal keeps its listeners attached on\n    // the success path: detaching them would stop the timeout from aborting a\n    // stalled body read.\n    return await fetch(url, {\n      ...options,\n      signal: combined.signal,\n    });\n  } catch (error) {\n    clearTimeout(timeoutId);\n    combined.cleanup();\n    if (\n      error != null &&\n      typeof error === \"object\" &&\n      \"name\" in error &&\n      error.name === \"AbortError\"\n    ) {\n      throw new Error(\n        `Mempool API request timed out after ${MEMPOOL_REQUEST_TIMEOUT_MS}ms: ${url}`,\n      );\n    }\n    throw error;\n  }\n}\n\n/**\n * Maximum sane fee rate in sat/vByte.\n * The April 2024 Runes spike peaked around 1,805 sat/vB — 10,000 provides ample headroom.\n */\nconst MAX_FEE_RATE = 10_000;\n\nfunction isValidSatoshiValue(value: number): boolean {\n  return Number.isInteger(value) && value > 0 && value <= MAX_SATOSHIS;\n}\n\nfunction isValidFeeRate(value: number): boolean {\n  return Number.isInteger(value) && value > 0 && value <= MAX_FEE_RATE;\n}\n\nfunction isValidVout(vout: number, outputCount?: number): boolean {\n  if (!Number.isInteger(vout) || vout < 0) return false;\n  return outputCount === undefined || vout < outputCount;\n}\n\n\nfunction assertValidTxid(txid: string): void {\n  if (!TXID_RE.test(txid)) {\n    throw new Error(`Invalid transaction ID format: ${txid}`);\n  }\n}\n\nfunction assertValidAddress(address: string): void {\n  if (!BITCOIN_ADDRESS_RE.test(address)) {\n    throw new Error(`Invalid Bitcoin address format: ${address}`);\n  }\n}\n\nfunction assertValidScriptPubKey(scriptPubKey: string, context: string): void {\n  if (!HEX_RE.test(scriptPubKey)) {\n    throw new Error(\n      `Invalid scriptPubKey: not valid hex for ${context}`,\n    );\n  }\n  const matchesKnownType = KNOWN_SCRIPT_PREFIXES.some((prefix) =>\n    scriptPubKey.toLowerCase().startsWith(prefix),\n  );\n  if (!matchesKnownType) {\n    throw new Error(\n      `Unrecognized scriptPubKey type for ${context}: ` +\n        `prefix ${scriptPubKey.slice(0, 6)} does not match any known Bitcoin script type`,\n    );\n  }\n}\n\n/**\n * Default mempool API URLs by network.\n */\nexport const MEMPOOL_API_URLS = {\n  mainnet: \"https://mempool.space/api\",\n  testnet: \"https://mempool.space/testnet/api\",\n  signet: \"https://mempool.space/signet/api\",\n} as const;\n\n/**\n * Fetch wrapper with error handling.\n */\nasync function fetchApi<T>(\n  url: string,\n  options?: RequestInit,\n): Promise<T> {\n  try {\n    const response = await fetchWithTimeout(url, options);\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      throw new Error(\n        `Mempool API error (${response.status}): ${errorText || response.statusText}`,\n      );\n    }\n\n    const contentType = response.headers.get(\"content-type\");\n    if (contentType?.includes(\"application/json\")) {\n      return (await response.json()) as T;\n    } else {\n      return (await response.text()) as T;\n    }\n  } catch (error) {\n    if (error instanceof Error) {\n      throw new Error(`Failed to fetch from mempool API: ${error.message}`);\n    }\n    throw new Error(\"Failed to fetch from mempool API: Unknown error\");\n  }\n}\n\n/**\n * Push a signed transaction to the Bitcoin network.\n *\n * @param txHex - The signed transaction hex string\n * @param apiUrl - Mempool API base URL\n * @returns The transaction ID\n * @throws Error if broadcasting fails\n */\nexport async function pushTx(txHex: string, apiUrl: string): Promise<string> {\n  try {\n    const response = await fetchWithTimeout(`${apiUrl}/tx`, {\n      method: \"POST\",\n      body: txHex,\n      headers: {\n        \"Content-Type\": \"text/plain\",\n      },\n    });\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      // Try to extract error message from response using robust JSON parsing\n      let message: string | undefined;\n      try {\n        const errorJson = JSON.parse(errorText);\n        message = errorJson.message ?? errorJson.error;\n      } catch {\n        // Not JSON, use raw text\n        message = errorText;\n      }\n      throw new Error(\n        message || `Failed to broadcast transaction: ${response.statusText}`,\n      );\n    }\n\n    // Response is the transaction ID (plain text)\n    const txId = await response.text();\n    return txId;\n  } catch (error) {\n    if (error instanceof Error) {\n      throw new Error(`Failed to broadcast BTC transaction: ${error.message}`);\n    }\n    throw new Error(\"Failed to broadcast BTC transaction: Unknown error\");\n  }\n}\n\n/**\n * Get transaction information from mempool.\n *\n * @param txid - The transaction ID\n * @param apiUrl - Mempool API base URL\n * @returns Transaction information\n */\nexport async function getTxInfo(txid: string, apiUrl: string): Promise<TxInfo> {\n  assertValidTxid(txid);\n  return fetchApi<TxInfo>(`${apiUrl}/tx/${txid}`);\n}\n\n/**\n * Get the current block tip height.\n *\n * Source: mempool.space API — `GET /api/blocks/tip/height` returns the height\n * of the most recent block as a plain-text integer.\n *\n * @param apiUrl - Mempool API base URL\n * @returns The height of the most recent block\n * @throws Error if the response is not a whole number\n */\nexport async function getTipHeight(apiUrl: string): Promise<number> {\n  const raw = await fetchApi<string>(`${apiUrl}/blocks/tip/height`);\n  const trimmed = raw.trim();\n  if (!/^\\d+$/.test(trimmed)) {\n    throw new Error(\n      `Mempool API returned an invalid block tip height: \"${raw}\"`,\n    );\n  }\n  return Number.parseInt(trimmed, 10);\n}\n\n/**\n * Get the spend status of a specific transaction output.\n *\n * Calls the esplora-compatible `GET /tx/{txid}/outspend/{vout}` endpoint\n * (mempool.space backend, mempool/electrs `rest.rs`). Returns\n * `{ spent: false }` for an unspent output, or\n * `{ spent: true, txid, vin, status }` when the output has been spent.\n *\n * @param txid - The transaction id whose output is being checked (no 0x prefix)\n * @param vout - The output index\n * @param apiUrl - Mempool API base URL\n * @returns The output's spend status\n */\nexport async function getOutspend(\n  txid: string,\n  vout: number,\n  apiUrl: string,\n): Promise<OutspendStatus> {\n  assertValidTxid(txid);\n  if (!isValidVout(vout)) {\n    throw new Error(`Invalid vout ${vout} for transaction ${txid}`);\n  }\n  return fetchApi<OutspendStatus>(`${apiUrl}/tx/${txid}/outspend/${vout}`);\n}\n\n/**\n * Get the hex representation of a transaction.\n *\n * @param txid - The transaction ID\n * @param apiUrl - Mempool API base URL\n * @returns The transaction hex string\n * @throws Error if the request fails or transaction is not found\n */\nexport async function getTxHex(txid: string, apiUrl: string): Promise<string> {\n  assertValidTxid(txid);\n  try {\n    const response = await fetchWithTimeout(`${apiUrl}/tx/${txid}/hex`);\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      throw new Error(\n        `Mempool API error (${response.status}): ${errorText || response.statusText}`,\n      );\n    }\n\n    return await response.text();\n  } catch (error) {\n    if (error instanceof Error) {\n      throw new Error(`Failed to get transaction hex for ${txid}: ${error.message}`);\n    }\n    throw new Error(`Failed to get transaction hex for ${txid}: Unknown error`);\n  }\n}\n\n/**\n * Get UTXO information for a specific transaction output.\n *\n * This is used for constructing PSBTs where we need the witnessUtxo data.\n * Only supports Taproot (P2TR) and native SegWit (P2WPKH, P2WSH) script types.\n *\n * @param txid - The transaction ID containing the UTXO\n * @param vout - The output index\n * @param apiUrl - Mempool API base URL\n * @returns UTXO information with value and scriptPubKey\n */\nexport async function getUtxoInfo(\n  txid: string,\n  vout: number,\n  apiUrl: string,\n): Promise<UtxoInfo> {\n  assertValidTxid(txid);\n  const txInfo = await getTxInfo(txid, apiUrl);\n\n  if (!isValidVout(vout, txInfo.vout.length)) {\n    throw new Error(\n      `Invalid vout ${vout} for transaction ${txid} (has ${txInfo.vout.length} outputs)`,\n    );\n  }\n\n  const output = txInfo.vout[vout];\n  if (!isValidSatoshiValue(output.value)) {\n    throw new Error(`Invalid UTXO value ${output.value} for ${txid}:${vout}`);\n  }\n  assertValidScriptPubKey(output.scriptpubkey, `${txid}:${vout}`);\n\n  return {\n    txid,\n    vout,\n    value: output.value,\n    scriptPubKey: output.scriptpubkey,\n  };\n}\n\n/**\n * Get all UTXOs for a Bitcoin address.\n *\n * @param address - The Bitcoin address\n * @param apiUrl - Mempool API base URL\n * @returns Array of UTXOs sorted by value (largest first)\n */\nexport async function getAddressUtxos(\n  address: string,\n  apiUrl: string,\n): Promise<MempoolUTXO[]> {\n  assertValidAddress(address);\n  try {\n    // Fetch UTXOs for the address\n    const utxos = await fetchApi<\n      {\n        txid: string;\n        vout: number;\n        value: number;\n        status: {\n          confirmed: boolean;\n        };\n      }[]\n    >(`${apiUrl}/address/${address}/utxo`);\n\n    // Fetch scriptPubKey for the address\n    const addressInfo = await fetchApi<{\n      isvalid: boolean;\n      scriptPubKey: string;\n    }>(`${apiUrl}/v1/validate-address/${address}`);\n\n    if (!addressInfo.isvalid) {\n      throw new Error(\n        `Invalid Bitcoin address: ${address}. Mempool API validation failed.`,\n      );\n    }\n    assertValidScriptPubKey(addressInfo.scriptPubKey, address);\n\n    // Validate UTXO fields from the listing endpoint.\n    // Per-UTXO cross-verification against /tx/{txid} is intentionally NOT done\n    // here — it would be expensive (N API calls) and redundant: the broadcast\n    // path already verifies each selected input via getUtxoInfo before signing.\n    // Both endpoints come from the same mempool API, so cross-checking one\n    // against the other on the same server does not add real security.\n    for (const utxo of utxos) {\n      assertValidTxid(utxo.txid);\n      if (!isValidVout(utxo.vout)) {\n        throw new Error(`Invalid vout ${utxo.vout} for ${utxo.txid}`);\n      }\n      if (!isValidSatoshiValue(utxo.value)) {\n        throw new Error(\n          `Invalid UTXO value ${utxo.value} for ${utxo.txid}:${utxo.vout}`,\n        );\n      }\n    }\n\n    // Sort by value (largest first) and map to our UTXO format\n    const sortedUTXOs = utxos.sort((a, b) => b.value - a.value);\n\n    return sortedUTXOs.map((utxo) => ({\n      txid: utxo.txid,\n      vout: utxo.vout,\n      value: utxo.value,\n      scriptPubKey: addressInfo.scriptPubKey,\n      confirmed: utxo.status.confirmed,\n    }));\n  } catch (error) {\n    if (error instanceof Error) {\n      throw new Error(\n        `Failed to get UTXOs for address ${address}: ${error.message}`,\n      );\n    }\n    throw new Error(\n      `Failed to get UTXOs for address ${address}: Unknown error`,\n    );\n  }\n}\n\n/**\n * Get the mempool API URL for a given network.\n *\n * @param network - Bitcoin network (mainnet, testnet, signet)\n * @returns The mempool API URL\n */\nexport function getMempoolApiUrl(\n  network: \"mainnet\" | \"testnet\" | \"signet\",\n): string {\n  return MEMPOOL_API_URLS[network];\n}\n\n/**\n * Transaction summary from address transactions endpoint.\n */\nexport interface AddressTx {\n  txid: string;\n  status: {\n    confirmed: boolean;\n    block_height?: number;\n  };\n}\n\n/**\n * Get recent transactions for a Bitcoin address.\n *\n * Returns the last 25 confirmed transactions plus any unconfirmed (mempool) transactions.\n * This is useful for checking if a specific transaction has been broadcast.\n *\n * @param address - The Bitcoin address\n * @param apiUrl - Mempool API base URL\n * @returns Array of recent transactions\n */\nexport async function getAddressTxs(\n  address: string,\n  apiUrl: string,\n): Promise<AddressTx[]> {\n  assertValidAddress(address);\n  return fetchApi<AddressTx[]>(`${apiUrl}/address/${address}/txs`);\n}\n\n/**\n * Fetches Bitcoin network fee recommendations from mempool.space API.\n *\n * @param apiUrl - Mempool API base URL\n * @returns Fee rates in sat/vbyte for different confirmation times\n * @throws Error if request fails or returns invalid data\n *\n * @see https://mempool.space/docs/api/rest#get-recommended-fees\n */\nexport async function getNetworkFees(apiUrl: string): Promise<NetworkFees> {\n  const response = await fetchWithTimeout(`${apiUrl}/v1/fees/recommended`);\n\n  if (!response.ok) {\n    throw new Error(\n      `Failed to fetch network fees: ${response.status} ${response.statusText}`,\n    );\n  }\n\n  const data = await response.json();\n\n  const feeFields = [\n    \"fastestFee\",\n    \"halfHourFee\",\n    \"hourFee\",\n    \"economyFee\",\n    \"minimumFee\",\n  ] as const;\n\n  for (const field of feeFields) {\n    if (!isValidFeeRate(data[field])) {\n      throw new Error(\n        `Invalid fee rate ${field}=${data[field]} from mempool API: expected a positive number ≤ ${MAX_FEE_RATE}`,\n      );\n    }\n  }\n\n  if (\n    data.minimumFee > data.economyFee ||\n    data.economyFee > data.hourFee ||\n    data.hourFee > data.halfHourFee ||\n    data.halfHourFee > data.fastestFee\n  ) {\n    throw new Error(\n      `Fee rate ordering violation from mempool API: expected ` +\n        `minimumFee (${data.minimumFee}) <= economyFee (${data.economyFee}) <= ` +\n        `hourFee (${data.hourFee}) <= halfHourFee (${data.halfHourFee}) <= ` +\n        `fastestFee (${data.fastestFee}).`,\n    );\n  }\n\n  return data as NetworkFees;\n}\n\n"],"names":["BIP322_TAG","TAPTWEAK_TAG","X_ONLY_PUBKEY_SIZE","SCHNORR_SIG_SIZE","COMPRESSED_PUBKEY_SIZE","P2WPKH_ENCODED_SIG_MIN","P2WPKH_ENCODED_SIG_MAX","ZERO_SATS","BIP322_TX_VERSION","BIP322_TX_LOCKTIME","BIP322_INPUT_SEQUENCE","TO_SPEND_PREVOUT_TXID_BYTES","TO_SPEND_PREVOUT_INDEX","TO_SPEND_OUTPUT_INDEX","OP_0","OP_PUSHBYTES_32","OP_RETURN","taggedHash","tag","data","tagBytes","tagHash","sha256","preimage","tweakXOnlyKey","xOnly","tweak","tweaked","ecc","buildToSignTransaction","messageBytes","scriptPubKey","messageHash","toSpend","Transaction","scriptSig","Buffer","toSign","verifyBip322Simple","xOnlyPubkey","signature","hashType","p2tr","payments","sighash","tweakedXOnly","verifyBip322P2wpkhSimple","compressedPubkey","encodedSignature","bscript","p2wpkh","scriptCode","UINT16_MAX","MAX_BASIS_POINTS","UINT32_MAX","UINT8_MAX","assertValidOffchainParamsVersion","version","validateOffchainParams","params","errors","validateTBVProtocolParams","validatePegInConfiguration","config","assertValidVaultCoreVersion","MAX_VP_COMMISSION_BPS","mapVaultBasicInfo","result","mapVaultProtocolInfo","offchainParamsVersion","UINT64_EXCLUSIVE_UPPER_BOUND","VP_GENESIS_KEY_EPOCH","assertEpochInRange","value","field","vaultId","mapKeyEpochs","ViemVaultRegistryReader","publicClient","contractAddress","vpAddress","BTCVaultRegistryABI","assertOnChainBtcPubkey","BTCVaultRegistryKeyEpochsABI","vaultIds","info","vaultProvider","bps","basicRaw","protocolRaw","basic","protocol","MAX_SATOSHIS","MEMPOOL_REQUEST_TIMEOUT_MS","fetchWithTimeout","url","options","controller","timeoutId","signals","combined","combineAbortSignals","error","MAX_FEE_RATE","isValidSatoshiValue","isValidFeeRate","isValidVout","vout","outputCount","assertValidTxid","txid","TXID_RE","assertValidAddress","address","BITCOIN_ADDRESS_RE","assertValidScriptPubKey","context","HEX_RE","KNOWN_SCRIPT_PREFIXES","prefix","MEMPOOL_API_URLS","fetchApi","response","errorText","contentType","pushTx","txHex","apiUrl","message","errorJson","getTxInfo","getTipHeight","raw","trimmed","getOutspend","getTxHex","getUtxoInfo","txInfo","output","getAddressUtxos","utxos","addressInfo","utxo","a","b","getMempoolApiUrl","network","getAddressTxs","getNetworkFees","feeFields"],"mappings":"gpBA6CMA,EAAa,yBAGbC,EAAe,WAEfC,EAAqB,GACrBC,EAAmB,GAEnBC,GAAyB,GAOzBC,GAAyB,GACzBC,GAAyB,GAQzBC,EAAY,EAIZC,EAAoB,EACpBC,EAAqB,EACrBC,EAAwB,EAExBC,GAA8B,GAC9BC,GAAyB,WAEzBC,GAAwB,EACxBC,GAAO,EAEPC,GAAkB,GAClBC,GAAY,IAMlB,SAASC,EAAWC,EAAaC,EAA8B,CAC7D,MAAMC,EAAW,IAAI,cAAc,OAAOF,CAAG,EACvCG,EAAUC,EAAAA,OAAOF,CAAQ,EACzBG,EAAW,IAAI,WAAWF,EAAQ,OAAS,EAAIF,EAAK,MAAM,EAChE,OAAAI,EAAS,IAAIF,EAAS,CAAC,EACvBE,EAAS,IAAIF,EAASA,EAAQ,MAAM,EACpCE,EAAS,IAAIJ,EAAME,EAAQ,OAAS,CAAC,EAC9BC,EAAAA,OAAOC,CAAQ,CACxB,CAYA,SAASC,GAAcC,EAAsC,CAC3D,GAAIA,EAAM,SAAWvB,EAAoB,OAAO,KAChD,MAAMwB,EAAQT,EAAWhB,EAAcwB,CAAK,EACtCE,EAAUC,EAAI,mBAAmBH,EAAOC,CAAK,EACnD,OAAOC,EAAUA,EAAQ,YAAc,IACzC,CAOA,SAASE,EACPC,EACAC,EACa,CACb,MAAMC,EAAcf,EAAWjB,EAAY8B,CAAY,EAEjDG,EAAU,IAAIC,cACpBD,EAAQ,QAAUzB,EAClByB,EAAQ,SAAWxB,EACnB,MAAM0B,EAAYC,EAAAA,OAAO,OAAO,CAC9BA,EAAAA,OAAO,KAAK,CAACtB,GAAMC,EAAe,CAAC,EACnCqB,EAAAA,OAAO,KAAKJ,CAAW,CAAA,CACxB,EACDC,EAAQ,SACNG,SAAO,MAAMzB,GAA6B,CAAC,EAC3CC,GACAF,EACAyB,CAAA,EAEFF,EAAQ,UAAUF,EAAcxB,CAAS,EAEzC,MAAM8B,EAAS,IAAIH,cACnB,OAAAG,EAAO,QAAU7B,EACjB6B,EAAO,SAAW5B,EAElB4B,EAAO,SACLJ,EAAQ,QAAA,EACRpB,GACAH,CAAA,EAEF2B,EAAO,UAAUD,SAAO,KAAK,CAACpB,EAAS,CAAC,EAAGT,CAAS,EAE7C8B,CACT,CAwBO,SAASC,GACdR,EACAS,EACAC,EACAC,EAAmBP,EAAAA,YAAY,gBACtB,CAKT,GAJIK,EAAY,SAAWrC,GACvBsC,EAAU,SAAWrC,GAIvBsC,IAAaP,EAAAA,YAAY,iBACzBO,IAAaP,EAAAA,YAAY,YAEzB,MAAO,GAQT,GAAI,CAIF,MAAMQ,EAAOC,EAAAA,SAAS,KAAK,CACzB,eAAgBP,EAAAA,OAAO,KAAKG,CAAW,CAAA,CACxC,EACD,GAAI,CAACG,EAAK,OAAQ,MAAO,GACzB,MAAMX,EAAeW,EAAK,OAKpBE,EAHSf,EAAuBC,EAAcC,CAAY,EAGzC,iBACrB,EACA,CAACA,CAAY,EACb,CAACxB,CAAS,EACVkC,CAAA,EAIII,EAAerB,GAAce,CAAW,EAC9C,OAAKM,EAEEjB,EAAI,cAAcgB,EAASC,EAAcL,CAAS,EAF/B,EAG5B,MAAQ,CACN,MAAO,EACT,CACF,CAqBO,SAASM,GACdhB,EACAiB,EACAC,EACS,CAET,GADID,EAAiB,SAAW3C,IAE9B4C,EAAiB,OAAS3C,IAC1B2C,EAAiB,OAAS1C,GAE1B,MAAO,GAIT,GAAI,CAEF,GAAI,CAACsB,EAAI,kBAAkBmB,CAAgB,EAAG,MAAO,GAIrD,KAAM,CAAE,UAAAP,EAAW,SAAAC,CAAA,EAAaQ,EAAAA,OAAQ,UAAU,OAChDb,EAAAA,OAAO,KAAKY,CAAgB,CAAA,EAE9B,GAAIP,IAAaP,EAAAA,YAAY,YAAa,MAAO,GAGjD,MAAMgB,EAASP,EAAAA,SAAS,OAAO,CAAE,OAAQP,SAAO,KAAKW,CAAgB,EAAG,EACxE,GAAI,CAACG,EAAO,QAAU,CAACA,EAAO,KAAM,MAAO,GAE3C,MAAMb,EAASR,EAAuBC,EAAcoB,EAAO,MAAM,EAM3DC,EAAaR,EAAAA,SAAS,MAAM,CAAE,KAAMO,EAAO,IAAA,CAAM,EAAE,OACzD,GAAI,CAACC,EAAY,MAAO,GACxB,MAAMP,EAAUP,EAAO,iBAAiB,EAAGc,EAAY5C,EAAWkC,CAAQ,EAI1E,OAAOb,EAAI,OAAOgB,EAASG,EAAkBP,EAAW,EAAI,CAC9D,MAAQ,CACN,MAAO,EACT,CACF,CC/QA,MAAMY,EAAa,MAGbC,EAAmB,IAGnBC,EAAa,WAGbC,EAAY,IAQX,SAASC,EAAiCC,EAAuB,CACtE,GACE,CAAC,OAAO,UAAUA,CAAO,GACzBA,EAAU,GACVA,EAAUH,EAEV,MAAM,IAAI,MACR,sEAAsEG,CAAO,EAAA,CAGnF,CAMO,SAASC,EAAuBC,EAAuC,CAC5E,MAAMC,EAAmB,CAAA,EA+FzB,GA7FID,EAAO,gBAAkB,IAC3BC,EAAO,KACL,wCAAwCD,EAAO,cAAc,EAAA,EAG7DA,EAAO,eAAiB,OAAOP,CAAU,GAC3CQ,EAAO,KACL,kBAAkBD,EAAO,cAAc,wBAAwBP,CAAU,GAAA,EAIzEO,EAAO,yBAA2B,IACpCC,EAAO,KACL,iDAAiDD,EAAO,uBAAuB,EAAA,EAI/EA,EAAO,SAAW,GACpBC,EAAO,KAAK,iCAAiCD,EAAO,OAAO,EAAE,EAG3DA,EAAO,QAAU,GACnBC,EAAO,KAAK,gCAAgCD,EAAO,MAAM,EAAE,EAGzDA,EAAO,oBAAoB,SAAW,GACxCC,EAAO,KAAK,uCAAuC,EAGjDD,EAAO,eAAiB,GAC1BC,EAAO,KAAK,uCAAuCD,EAAO,aAAa,EAAE,EAEvEA,EAAO,cAAgBA,EAAO,oBAAoB,QACpDC,EAAO,KACL,kBAAkBD,EAAO,aAAa,wCAAwCA,EAAO,oBAAoB,MAAM,GAAA,EAI/GA,EAAO,SAAW,IACpBC,EAAO,KAAK,iCAAiCD,EAAO,OAAO,EAAE,EAG3DA,EAAO,iBAAmB,IAC5BC,EAAO,KACL,yCAAyCD,EAAO,eAAe,EAAA,GAKjE,CAAC,OAAO,UAAUA,EAAO,oBAAoB,GAC7CA,EAAO,qBAAuB,GAC9BA,EAAO,qBAAuBP,IAE9BQ,EAAO,KACL,8CAA8CD,EAAO,oBAAoB,EAAA,GAK3E,CAAC,OAAO,UAAUA,EAAO,gBAAgB,GACzCA,EAAO,kBAAoB,GAC3BA,EAAO,iBAAmBL,IAE1BM,EAAO,KACL,4CAA4CN,CAAU,UAAUK,EAAO,gBAAgB,EAAA,EAIvFA,EAAO,oBAAsB,GAC/BC,EAAO,KACL,4CAA4CD,EAAO,kBAAkB,EAAA,EAGrEA,EAAO,yBAA2B,GACpCC,EAAO,KACL,iDAAiDD,EAAO,uBAAuB,EAAA,EAG/EA,EAAO,wBAA0BA,EAAO,oBAC1CC,EAAO,KACL,4BAA4BD,EAAO,uBAAuB,iCAAiCA,EAAO,kBAAkB,GAAA,GAKtHA,EAAO,mBAAqB,GAC5BA,EAAO,mBAAqBN,IAE5BO,EAAO,KACL,qCAAqCP,CAAgB,UAAUM,EAAO,kBAAkB,EAAA,EAIxFC,EAAO,OAAS,EAClB,MAAM,IAAI,MACR,yCAAyCA,EAAO,KAAK,IAAI,CAAC,EAAA,CAGhE,CAMO,SAASC,EAA0BF,EAAiC,CACzE,MAAMC,EAAmB,CAAA,EA6CzB,GA3CID,EAAO,oBAAsB,IAC/BC,EAAO,KACL,4CAA4CD,EAAO,kBAAkB,EAAA,EAIrEA,EAAO,eAAiBA,EAAO,oBACjCC,EAAO,KACL,mBAAmBD,EAAO,cAAc,oCAAoCA,EAAO,kBAAkB,GAAA,EAIrGA,EAAO,iBAAmB,IAC5BC,EAAO,KACL,yCAAyCD,EAAO,eAAe,EAAA,EAI/DA,EAAO,wBAA0B,IACnCC,EAAO,KACL,gDAAgDD,EAAO,sBAAsB,EAAA,GAK/E,CAAC,OAAO,UAAUA,EAAO,kBAAkB,GAC3CA,EAAO,oBAAsB,GAC7BA,EAAO,mBAAqBJ,IAE5BK,EAAO,KACL,gDAAgDL,CAAS,UAAUI,EAAO,kBAAkB,EAAA,GAK9F,OAAOA,EAAO,yBAA4B,UAC1CA,EAAO,yBAA2B,KAElCC,EAAO,KACL,0DAA0DD,EAAO,uBAAuB,EAAA,EAIxFC,EAAO,OAAS,EAClB,MAAM,IAAI,MAAM,oCAAoCA,EAAO,KAAK,IAAI,CAAC,EAAE,CAE3E,CASO,SAASE,GAA2BC,EAAkC,CAI3E,GAHAF,EAA0BE,CAAM,EAChCL,EAAuBK,EAAO,cAAc,EAG1C,CAAC,OAAO,UAAUA,EAAO,qBAAqB,GAC9CA,EAAO,sBAAwB,GAC/BA,EAAO,sBAAwBT,EAE/B,MAAM,IAAI,MACR,6EAA6ES,EAAO,qBAAqB,EAAA,EAM7GC,EAAAA,4BACED,EAAO,uBACP,yCAAA,CAEJ,CCxNA,MAAME,EAAwB,KA8B9B,SAASC,EAAkBC,EAA2C,CACpE,MAAO,CACL,UAAWA,EAAO,UAClB,mBAAoBA,EAAO,mBAC3B,OAAQA,EAAO,OACf,cAAeA,EAAO,cACtB,OAAQA,EAAO,OACf,sBAAuBA,EAAO,sBAC9B,UAAWA,EAAO,SAAA,CAEtB,CAEA,SAASC,EAAqBD,EAAiD,CAC7E,MAAME,EAAwB,OAAOF,EAAO,qBAAqB,EACjE,OAAAX,EAAiCa,CAAqB,EAC/C,CACL,uBAAwBF,EAAO,uBAC/B,4BAA6BA,EAAO,4BACpC,uBAAwBA,EAAO,uBAC/B,sBAAAE,EACA,WAAYF,EAAO,WACnB,oBAAqBA,EAAO,oBAC5B,SAAUA,EAAO,SACjB,SAAUA,EAAO,SACjB,sBAAuBA,EAAO,sBAC9B,eAAgBA,EAAO,eACvB,2BAA4BA,EAAO,2BACnC,kBAAmBA,EAAO,kBAC1B,iBAAkBA,EAAO,gBAAA,CAE7B,CA0BA,MAAMG,GAA+B,IAAM,IAUrCC,EAAuB,GAE7B,SAASC,EACPC,EACAC,EACAC,EACQ,CACR,GAAIF,EAAQ,IAAMA,GAASH,GACzB,MAAM,IAAI,MACR,oCAAoCI,CAAK,IAAID,CAAK,cAAcE,CAAO,+DAAA,EAI3E,OAAOF,CACT,CAEA,SAASG,EAAaT,EAAmBQ,EAAyB,CAChE,MAAO,CACL,WAAYH,EAAmBL,EAAO,WAAY,aAAcQ,CAAO,EACvE,kBAAmBH,EACjBL,EAAO,kBACP,oBACAQ,CAAA,EAEF,WAAYH,EAAmBL,EAAO,WAAY,aAAcQ,CAAO,CAAA,CAE3E,CAWO,MAAME,EAAuD,CAClE,YACUC,EACAC,EACR,CAFQ,KAAA,aAAAD,EACA,KAAA,gBAAAC,CACP,CAyBH,MAAM,iCACJC,EAC2B,CAC3B,MAAMb,EAAU,MAAM,KAAK,aAAa,aAAa,CACnD,QAAS,KAAK,gBACd,IAAKc,EAAAA,oBACL,aAAc,4BACd,KAAM,CAACD,EAAWT,CAAoB,CAAA,CACvC,EACD,OAAOW,EAAAA,uBACLf,EACA,iCAAiCa,CAAS,WAAWT,CAAoB,GAAA,CAE7E,CAaA,MAAM,uCACJS,EAC2B,CAC3B,MAAMb,EAAU,MAAM,KAAK,aAAa,aAAa,CACnD,QAAS,KAAK,gBACd,IAAKc,EAAAA,oBACL,aAAc,4BACd,KAAM,CAACD,CAAS,CAAA,CACjB,EACD,OAAOE,EAAAA,uBACLf,EACA,iCAAiCa,CAAS,GAAA,CAE9C,CAkBA,MAAM,kBAAkBL,EAAkC,CACxD,MAAMR,EAAU,MAAM,KAAK,aAAa,aAAa,CACnD,QAAS,KAAK,gBACd,IAAKgB,EAAAA,6BACL,aAAc,0BACd,KAAM,CAACR,CAAO,CAAA,CACf,EAED,OAAOC,EAAaT,EAAQQ,CAAO,CACrC,CAEA,MAAM,uBAAuBS,EAAgD,CAC3E,OAAIA,EAAS,SAAW,EAAU,CAAA,GAElB,MAAM,KAAK,aAAa,UAAU,CAChD,UAAWA,EAAS,IAAKT,IAAa,CACpC,QAAS,KAAK,gBACd,IAAKQ,EAAAA,6BACL,aAAc,0BACd,KAAM,CAACR,CAAO,CAAA,EACd,EACF,aAAc,EAAA,CACf,GAEc,IAAI,CAACU,EAAM,IACxBT,EAAaS,EAA8BD,EAAS,CAAC,CAAC,CAAA,CAE1D,CAEA,MAAM,kBAAkBT,EAAuC,CAC7D,MAAMR,EAAU,MAAM,KAAK,aAAa,aAAa,CACnD,QAAS,KAAK,gBACd,IAAKc,EAAAA,oBACL,aAAc,uBACd,KAAM,CAACN,CAAO,CAAA,CACf,EAED,OAAOT,EAAkBC,CAAM,CACjC,CAEA,MAAM,qBAAqBQ,EAA0C,CACnE,MAAMR,EAAU,MAAM,KAAK,aAAa,aAAa,CACnD,QAAS,KAAK,gBACd,IAAKc,EAAAA,oBACL,aAAc,0BACd,KAAM,CAACN,CAAO,CAAA,CACf,EAED,OAAOP,EAAqBD,CAAM,CACpC,CAEA,MAAM,qBACJiB,EAC8B,CAC9B,OAAIA,EAAS,SAAW,EAAU,CAAA,GAElB,MAAM,KAAK,aAAa,UAAU,CAChD,UAAWA,EAAS,IAAKT,IAAa,CACpC,QAAS,KAAK,gBACd,IAAKM,EAAAA,oBACL,aAAc,0BACd,KAAM,CAACN,CAAO,CAAA,EACd,EACF,aAAc,EAAA,CACf,GAEc,IAAI,CAACU,EAAM,IAAM,CAC9B,MAAMlB,EAASkB,EACf,GACE,CAAClB,EAAO,wBACRA,EAAO,yBAA2B,KAQlC,MAAM,IAAI,MACR,SAASiB,EAAS,CAAC,CAAC,iDAAA,EAGxB,OAAOhB,EAAqBD,CAAM,CACpC,CAAC,CACH,CAMA,MAAM,YAAYmB,EAAyC,CACzD,OAAQ,MAAM,KAAK,aAAa,aAAa,CAC3C,QAAS,KAAK,gBACd,IAAKL,EAAAA,oBACL,aAAc,cACd,KAAM,CAACK,CAAa,CAAA,CACrB,CACH,CASA,MAAM,2BAA2BA,EAAyC,CAExE,MAAMC,EAAM,MAAM,KAAK,aAAa,aAAa,CAC/C,QAAS,KAAK,gBACd,IAAKN,EAAAA,oBACL,aAAc,6BACd,KAAM,CAACK,CAAa,CAAA,CACrB,EAED,GAAI,CAAC,OAAO,UAAUC,CAAG,GAAKA,EAAM,GAAKA,EAAMtB,EAC7C,MAAM,IAAI,MACR,uCAAuCsB,CAAG,YAAYD,CAAa,oCAC/BrB,CAAqB,GAAA,EAI7D,OAAOsB,CACT,CAEA,MAAM,aAAaZ,EAAkC,CAInD,KAAM,CAACa,EAAUC,CAAW,EAAI,MAAM,KAAK,aAAa,UAAU,CAChE,UAAW,CACT,CACE,QAAS,KAAK,gBACd,IAAKR,EAAAA,oBACL,aAAc,uBACd,KAAM,CAACN,CAAO,CAAA,EAEhB,CACE,QAAS,KAAK,gBACd,IAAKM,EAAAA,oBACL,aAAc,0BACd,KAAM,CAACN,CAAO,CAAA,CAChB,EAEF,aAAc,EAAA,CACf,EAEKe,EAAQxB,EAAkBsB,CAAQ,EAClCG,EAAWvB,EAAqBqB,CAAW,EAEjD,GACE,CAACE,EAAS,wBACVA,EAAS,yBAA2B,KAEpC,MAAM,IAAI,MACR,SAAShB,CAAO,iDAAA,EAIpB,MAAO,CAAE,MAAAe,EAAO,SAAAC,CAAA,CAClB,CAEF,CC7XA,MAAMC,GAAe,KAAa,IAG5BC,EAA6B,IAMnC,eAAeC,EACbC,EACAC,EACmB,CACnB,MAAMC,EAAa,IAAI,gBACjBC,EAAY,WAChB,IAAMD,EAAW,MAAA,EACjBJ,CAAA,EAIIM,EAAU,CAACF,EAAW,OAAQD,GAAA,YAAAA,EAAS,MAAM,EAAE,OACnD,OAAA,EAEII,EAAWC,EAAAA,oBAAoBF,CAAO,EAE5C,GAAI,CAKF,OAAO,MAAM,MAAMJ,EAAK,CACtB,GAAGC,EACH,OAAQI,EAAS,MAAA,CAClB,CACH,OAASE,EAAO,CAGd,MAFA,aAAaJ,CAAS,EACtBE,EAAS,QAAA,EAEPE,GAAS,MACT,OAAOA,GAAU,UACjB,SAAUA,GACVA,EAAM,OAAS,aAET,IAAI,MACR,uCAAuCT,CAA0B,OAAOE,CAAG,EAAA,EAGzEO,CACR,CACF,CAMA,MAAMC,EAAe,IAErB,SAASC,EAAoB/B,EAAwB,CACnD,OAAO,OAAO,UAAUA,CAAK,GAAKA,EAAQ,GAAKA,GAASmB,EAC1D,CAEA,SAASa,GAAehC,EAAwB,CAC9C,OAAO,OAAO,UAAUA,CAAK,GAAKA,EAAQ,GAAKA,GAAS8B,CAC1D,CAEA,SAASG,EAAYC,EAAcC,EAA+B,CAChE,MAAI,CAAC,OAAO,UAAUD,CAAI,GAAKA,EAAO,EAAU,GACzCC,IAAgB,QAAaD,EAAOC,CAC7C,CAGA,SAASC,EAAgBC,EAAoB,CAC3C,GAAI,CAACC,EAAAA,QAAQ,KAAKD,CAAI,EACpB,MAAM,IAAI,MAAM,kCAAkCA,CAAI,EAAE,CAE5D,CAEA,SAASE,EAAmBC,EAAuB,CACjD,GAAI,CAACC,EAAAA,mBAAmB,KAAKD,CAAO,EAClC,MAAM,IAAI,MAAM,mCAAmCA,CAAO,EAAE,CAEhE,CAEA,SAASE,EAAwBpF,EAAsBqF,EAAuB,CAC5E,GAAI,CAACC,EAAAA,OAAO,KAAKtF,CAAY,EAC3B,MAAM,IAAI,MACR,2CAA2CqF,CAAO,EAAA,EAMtD,GAAI,CAHqBE,EAAAA,sBAAsB,KAAMC,GACnDxF,EAAa,YAAA,EAAc,WAAWwF,CAAM,CAAA,EAG5C,MAAM,IAAI,MACR,sCAAsCH,CAAO,YACjCrF,EAAa,MAAM,EAAG,CAAC,CAAC,+CAAA,CAG1C,CAKO,MAAMyF,EAAmB,CAC9B,QAAS,4BACT,QAAS,oCACT,OAAQ,kCACV,EAKA,eAAeC,EACb1B,EACAC,EACY,CACZ,GAAI,CACF,MAAM0B,EAAW,MAAM5B,EAAiBC,EAAKC,CAAO,EAEpD,GAAI,CAAC0B,EAAS,GAAI,CAChB,MAAMC,EAAY,MAAMD,EAAS,KAAA,EACjC,MAAM,IAAI,MACR,sBAAsBA,EAAS,MAAM,MAAMC,GAAaD,EAAS,UAAU,EAAA,CAE/E,CAEA,MAAME,EAAcF,EAAS,QAAQ,IAAI,cAAc,EACvD,OAAIE,GAAA,MAAAA,EAAa,SAAS,oBAChB,MAAMF,EAAS,KAAA,EAEf,MAAMA,EAAS,KAAA,CAE3B,OAASpB,EAAO,CACd,MAAIA,aAAiB,MACb,IAAI,MAAM,qCAAqCA,EAAM,OAAO,EAAE,EAEhE,IAAI,MAAM,iDAAiD,CACnE,CACF,CAUA,eAAsBuB,GAAOC,EAAeC,EAAiC,CAC3E,GAAI,CACF,MAAML,EAAW,MAAM5B,EAAiB,GAAGiC,CAAM,MAAO,CACtD,OAAQ,OACR,KAAMD,EACN,QAAS,CACP,eAAgB,YAAA,CAClB,CACD,EAED,GAAI,CAACJ,EAAS,GAAI,CAChB,MAAMC,EAAY,MAAMD,EAAS,KAAA,EAEjC,IAAIM,EACJ,GAAI,CACF,MAAMC,EAAY,KAAK,MAAMN,CAAS,EACtCK,EAAUC,EAAU,SAAWA,EAAU,KAC3C,MAAQ,CAEND,EAAUL,CACZ,CACA,MAAM,IAAI,MACRK,GAAW,oCAAoCN,EAAS,UAAU,EAAA,CAEtE,CAIA,OADa,MAAMA,EAAS,KAAA,CAE9B,OAASpB,EAAO,CACd,MAAIA,aAAiB,MACb,IAAI,MAAM,wCAAwCA,EAAM,OAAO,EAAE,EAEnE,IAAI,MAAM,oDAAoD,CACtE,CACF,CASA,eAAsB4B,EAAUpB,EAAciB,EAAiC,CAC7E,OAAAlB,EAAgBC,CAAI,EACbW,EAAiB,GAAGM,CAAM,OAAOjB,CAAI,EAAE,CAChD,CAYA,eAAsBqB,GAAaJ,EAAiC,CAClE,MAAMK,EAAM,MAAMX,EAAiB,GAAGM,CAAM,oBAAoB,EAC1DM,EAAUD,EAAI,KAAA,EACpB,GAAI,CAAC,QAAQ,KAAKC,CAAO,EACvB,MAAM,IAAI,MACR,sDAAsDD,CAAG,GAAA,EAG7D,OAAO,OAAO,SAASC,EAAS,EAAE,CACpC,CAeA,eAAsBC,GACpBxB,EACAH,EACAoB,EACyB,CAEzB,GADAlB,EAAgBC,CAAI,EAChB,CAACJ,EAAYC,CAAI,EACnB,MAAM,IAAI,MAAM,gBAAgBA,CAAI,oBAAoBG,CAAI,EAAE,EAEhE,OAAOW,EAAyB,GAAGM,CAAM,OAAOjB,CAAI,aAAaH,CAAI,EAAE,CACzE,CAUA,eAAsB4B,GAASzB,EAAciB,EAAiC,CAC5ElB,EAAgBC,CAAI,EACpB,GAAI,CACF,MAAMY,EAAW,MAAM5B,EAAiB,GAAGiC,CAAM,OAAOjB,CAAI,MAAM,EAElE,GAAI,CAACY,EAAS,GAAI,CAChB,MAAMC,EAAY,MAAMD,EAAS,KAAA,EACjC,MAAM,IAAI,MACR,sBAAsBA,EAAS,MAAM,MAAMC,GAAaD,EAAS,UAAU,EAAA,CAE/E,CAEA,OAAO,MAAMA,EAAS,KAAA,CACxB,OAASpB,EAAO,CACd,MAAIA,aAAiB,MACb,IAAI,MAAM,qCAAqCQ,CAAI,KAAKR,EAAM,OAAO,EAAE,EAEzE,IAAI,MAAM,qCAAqCQ,CAAI,iBAAiB,CAC5E,CACF,CAaA,eAAsB0B,GACpB1B,EACAH,EACAoB,EACmB,CACnBlB,EAAgBC,CAAI,EACpB,MAAM2B,EAAS,MAAMP,EAAUpB,EAAMiB,CAAM,EAE3C,GAAI,CAACrB,EAAYC,EAAM8B,EAAO,KAAK,MAAM,EACvC,MAAM,IAAI,MACR,gBAAgB9B,CAAI,oBAAoBG,CAAI,SAAS2B,EAAO,KAAK,MAAM,WAAA,EAI3E,MAAMC,EAASD,EAAO,KAAK9B,CAAI,EAC/B,GAAI,CAACH,EAAoBkC,EAAO,KAAK,EACnC,MAAM,IAAI,MAAM,sBAAsBA,EAAO,KAAK,QAAQ5B,CAAI,IAAIH,CAAI,EAAE,EAE1E,OAAAQ,EAAwBuB,EAAO,aAAc,GAAG5B,CAAI,IAAIH,CAAI,EAAE,EAEvD,CACL,KAAAG,EACA,KAAAH,EACA,MAAO+B,EAAO,MACd,aAAcA,EAAO,YAAA,CAEzB,CASA,eAAsBC,GACpB1B,EACAc,EACwB,CACxBf,EAAmBC,CAAO,EAC1B,GAAI,CAEF,MAAM2B,EAAQ,MAAMnB,EASlB,GAAGM,CAAM,YAAYd,CAAO,OAAO,EAG/B4B,EAAc,MAAMpB,EAGvB,GAAGM,CAAM,wBAAwBd,CAAO,EAAE,EAE7C,GAAI,CAAC4B,EAAY,QACf,MAAM,IAAI,MACR,4BAA4B5B,CAAO,kCAAA,EAGvCE,EAAwB0B,EAAY,aAAc5B,CAAO,EAQzD,UAAW6B,KAAQF,EAAO,CAExB,GADA/B,EAAgBiC,EAAK,IAAI,EACrB,CAACpC,EAAYoC,EAAK,IAAI,EACxB,MAAM,IAAI,MAAM,gBAAgBA,EAAK,IAAI,QAAQA,EAAK,IAAI,EAAE,EAE9D,GAAI,CAACtC,EAAoBsC,EAAK,KAAK,EACjC,MAAM,IAAI,MACR,sBAAsBA,EAAK,KAAK,QAAQA,EAAK,IAAI,IAAIA,EAAK,IAAI,EAAA,CAGpE,CAKA,OAFoBF,EAAM,KAAK,CAACG,EAAGC,IAAMA,EAAE,MAAQD,EAAE,KAAK,EAEvC,IAAKD,IAAU,CAChC,KAAMA,EAAK,KACX,KAAMA,EAAK,KACX,MAAOA,EAAK,MACZ,aAAcD,EAAY,aAC1B,UAAWC,EAAK,OAAO,SAAA,EACvB,CACJ,OAASxC,EAAO,CACd,MAAIA,aAAiB,MACb,IAAI,MACR,mCAAmCW,CAAO,KAAKX,EAAM,OAAO,EAAA,EAG1D,IAAI,MACR,mCAAmCW,CAAO,iBAAA,CAE9C,CACF,CAQO,SAASgC,GACdC,EACQ,CACR,OAAO1B,EAAiB0B,CAAO,CACjC,CAuBA,eAAsBC,GACpBlC,EACAc,EACsB,CACtB,OAAAf,EAAmBC,CAAO,EACnBQ,EAAsB,GAAGM,CAAM,YAAYd,CAAO,MAAM,CACjE,CAWA,eAAsBmC,GAAerB,EAAsC,CACzE,MAAML,EAAW,MAAM5B,EAAiB,GAAGiC,CAAM,sBAAsB,EAEvE,GAAI,CAACL,EAAS,GACZ,MAAM,IAAI,MACR,iCAAiCA,EAAS,MAAM,IAAIA,EAAS,UAAU,EAAA,EAI3E,MAAMvG,EAAO,MAAMuG,EAAS,KAAA,EAEtB2B,EAAY,CAChB,aACA,cACA,UACA,aACA,YAAA,EAGF,UAAW3E,KAAS2E,EAClB,GAAI,CAAC5C,GAAetF,EAAKuD,CAAK,CAAC,EAC7B,MAAM,IAAI,MACR,oBAAoBA,CAAK,IAAIvD,EAAKuD,CAAK,CAAC,mDAAmD6B,CAAY,EAAA,EAK7G,GACEpF,EAAK,WAAaA,EAAK,YACvBA,EAAK,WAAaA,EAAK,SACvBA,EAAK,QAAUA,EAAK,aACpBA,EAAK,YAAcA,EAAK,WAExB,MAAM,IAAI,MACR,sEACiBA,EAAK,UAAU,oBAAoBA,EAAK,UAAU,iBACrDA,EAAK,OAAO,qBAAqBA,EAAK,WAAW,oBAC9CA,EAAK,UAAU,IAAA,EAIpC,OAAOA,CACT"}

package/dist/mempoolApi-_D-jvtj_.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mempoolApi-_D-jvtj_.js","sources":["../src/tbv/core/clients/vault-provider/auth/bip322Verify.ts","../src/tbv/core/clients/eth/protocol-params-validation.ts","../src/tbv/core/clients/eth/vault-registry-reader.ts","../src/tbv/core/clients/mempool/mempoolApi.ts"],"sourcesContent":["/**\n * BIP-322 \"simple\" signature verification for P2TR key-path and P2WPKH.\n *\n * Mirrors the Rust reference in\n * `btc-vault/crates/btc-signer/src/message.rs` (`verify_bip322_message`\n * and the P2WPKH arm of `verify_pop_witness`, both of which delegate to\n * the `bip322` crate 0.0.10's `verify_simple`).\n *\n * The algorithm:\n *\n *   1. Compute the BIP-322 tagged-hash of the message:\n *        m_hash = SHA256( SHA256(tag) || SHA256(tag) || message )\n *      where tag = \"BIP0322-signed-message\".\n *\n *   2. Build a virtual \"to_spend\" transaction with one input (prevout\n *      all-zero txid + 0xFFFFFFFF vout, scriptSig = `OP_0 PUSH32 m_hash`,\n *      sequence = 0) and one output (value 0, scriptPubKey = the signer's\n *      address: P2TR key-path-only, or P2WPKH of the compressed pubkey).\n *\n *   3. Build a \"to_sign\" transaction that spends to_spend[0] and has a\n *      single `OP_RETURN` output (value 0).\n *\n *   4. Compute the sighash of to_sign input 0: BIP-341 taproot for P2TR\n *      (SIGHASH_DEFAULT 0x00 unless the witness item carried a trailing\n *      SIGHASH_ALL 0x01 byte), BIP-143 with the standard P2WPKH\n *      scriptCode for P2WPKH (SIGHASH_ALL only).\n *\n *   5. Verify the signature: Schnorr against the **tweaked** output key\n *      `Q = P + tap_tweak(P) * G` for P2TR (no merkle root — key-path\n *      only), ECDSA against the compressed pubkey for P2WPKH.\n *\n * `bitcoinjs-lib` handles (2)–(4); `tiny-secp256k1-asmjs` provides\n * the tweak and the Schnorr/ECDSA verifies. Pulling in a full BIP-322\n * library would add a peer dep for what amounts to ~40 lines of glue.\n *\n * @module tbv/core/clients/vault-provider/auth/bip322Verify\n */\n\nimport * as ecc from \"@bitcoin-js/tiny-secp256k1-asmjs\";\nimport { script as bscript, payments, Transaction } from \"bitcoinjs-lib\";\n\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport { Buffer } from \"buffer\";\n\n/** BIP-322 message tag (BIP-340 tagged-hash style). */\nconst BIP322_TAG = \"BIP0322-signed-message\";\n\n/** BIP-341 taproot-tweak tag. */\nconst TAPTWEAK_TAG = \"TapTweak\";\n\nconst X_ONLY_PUBKEY_SIZE = 32;\nconst SCHNORR_SIG_SIZE = 64;\n/** SEC1 compressed pubkey: 0x02/0x03 prefix + 32-byte x coordinate. */\nconst COMPRESSED_PUBKEY_SIZE = 33;\n/**\n * vaultd's P2WPKH BIP-322 verifier accepts ONLY 71/72-byte encoded\n * signatures — DER (70/71B) + sighash byte (`bip322` crate 0.0.10\n * `verify.rs:141-153`). A shorter (short-DER) signature fails ingestion\n * permanently, so this gate must be exactly as strict.\n */\nconst P2WPKH_ENCODED_SIG_MIN = 71;\nconst P2WPKH_ENCODED_SIG_MAX = 72;\n\n// NOTE: bitcoinjs-lib v6.x's `Transaction.addOutput` and its sighash\n// methods are typed for `Satoshi` (a UInt53 number), not `bigint`.\n// Passing `BigInt(0)` triggers a typeforce assertion in `addOutput`\n// (\"Expected property '1' of type Satoshi, got BigInt 0\") which the\n// verifiers' try/catch silently turns into `verify -> false`. Use\n// plain `0` everywhere.\nconst ZERO_SATS = 0;\n\n// Wire fields of the virtual to_spend/to_sign transactions (`bip322`\n// crate 0.0.10 `util.rs:18-85`).\nconst BIP322_TX_VERSION = 0;\nconst BIP322_TX_LOCKTIME = 0;\nconst BIP322_INPUT_SEQUENCE = 0;\n/** to_spend prevout: all-zero 32-byte txid at index 0xFFFFFFFF (`util.rs:18-85`). */\nconst TO_SPEND_PREVOUT_TXID_BYTES = 32;\nconst TO_SPEND_PREVOUT_INDEX = 0xffffffff;\n/** to_sign spends to_spend's only output (`util.rs:18-85`). */\nconst TO_SPEND_OUTPUT_INDEX = 0;\nconst OP_0 = 0x00;\n/** Direct push of the 32-byte tagged message hash. */\nconst OP_PUSHBYTES_32 = 0x20;\nconst OP_RETURN = 0x6a;\n\n/**\n * BIP-340 tagged hash: `SHA256( SHA256(tag) || SHA256(tag) || data )`.\n * Used for both BIP-322 message hashing and BIP-341 tap-tweak.\n */\nfunction taggedHash(tag: string, data: Uint8Array): Uint8Array {\n  const tagBytes = new TextEncoder().encode(tag);\n  const tagHash = sha256(tagBytes);\n  const preimage = new Uint8Array(tagHash.length * 2 + data.length);\n  preimage.set(tagHash, 0);\n  preimage.set(tagHash, tagHash.length);\n  preimage.set(data, tagHash.length * 2);\n  return sha256(preimage);\n}\n\n/**\n * Apply BIP-341 taproot tweak to an x-only pubkey with no merkle\n * root (key-path-only address).\n *\n * `tap_tweak = hash_TapTweak(P)`\n * `Q = P + tap_tweak * G` (x-only, even-Y parity)\n *\n * Returns the tweaked 32-byte x-only pubkey, or null if the tweak\n * produces a point-at-infinity or invalid result.\n */\nfunction tweakXOnlyKey(xOnly: Uint8Array): Uint8Array | null {\n  if (xOnly.length !== X_ONLY_PUBKEY_SIZE) return null;\n  const tweak = taggedHash(TAPTWEAK_TAG, xOnly);\n  const tweaked = ecc.xOnlyPointAddTweak(xOnly, tweak);\n  return tweaked ? tweaked.xOnlyPubkey : null;\n}\n\n/**\n * Build the BIP-322 virtual `to_sign` transaction for a signer\n * scriptPubKey (steps 1–3 above; `bip322` crate 0.0.10 `util.rs:18-85`:\n * both txs version 0, locktime 0, sequence 0, all values 0).\n */\nfunction buildToSignTransaction(\n  messageBytes: Uint8Array,\n  scriptPubKey: Buffer,\n): Transaction {\n  const messageHash = taggedHash(BIP322_TAG, messageBytes);\n\n  const toSpend = new Transaction();\n  toSpend.version = BIP322_TX_VERSION;\n  toSpend.locktime = BIP322_TX_LOCKTIME;\n  const scriptSig = Buffer.concat([\n    Buffer.from([OP_0, OP_PUSHBYTES_32]),\n    Buffer.from(messageHash),\n  ]);\n  toSpend.addInput(\n    Buffer.alloc(TO_SPEND_PREVOUT_TXID_BYTES, 0),\n    TO_SPEND_PREVOUT_INDEX,\n    BIP322_INPUT_SEQUENCE,\n    scriptSig,\n  );\n  toSpend.addOutput(scriptPubKey, ZERO_SATS);\n\n  const toSign = new Transaction();\n  toSign.version = BIP322_TX_VERSION;\n  toSign.locktime = BIP322_TX_LOCKTIME;\n  // Bitcoin txid in natural-byte (little-endian) form.\n  toSign.addInput(\n    toSpend.getHash(),\n    TO_SPEND_OUTPUT_INDEX,\n    BIP322_INPUT_SEQUENCE,\n  );\n  toSign.addOutput(Buffer.from([OP_RETURN]), ZERO_SATS);\n\n  return toSign;\n}\n\n/**\n * Verify a BIP-322 \"simple\" P2TR key-path signature over an arbitrary\n * byte message.\n *\n * @internal Consumed by `verifyServerIdentity` (VP auth) and\n * `verifyPopWitness` (PoP pre-registration check), and exposed so the\n * golden-vector test suite can pin the verifier independently.\n *\n * @param messageBytes - The bytes that were signed (e.g. a CBOR-encoded\n *                       payload). Not pre-hashed; this function applies\n *                       the BIP-322 tagged hash internally.\n * @param xOnlyPubkey  - 32-byte x-only pubkey of the signer (pre-tweak).\n * @param signature    - 64-byte raw Schnorr signature (BIP-340), as\n *                       emitted by a key-path witness. The trailing\n *                       sighash byte of a 65-byte witness item is not\n *                       part of it — pass it as `hashType` instead.\n * @param hashType     - BIP-341 sighash type the signature commits to.\n *                       `SIGHASH_DEFAULT` (0x00) for a 64-byte witness\n *                       item, `SIGHASH_ALL` (0x01) for a 65-byte one.\n * @returns `true` if the signature verifies against the address\n *          derived from `xOnlyPubkey`; `false` otherwise.\n */\nexport function verifyBip322Simple(\n  messageBytes: Uint8Array,\n  xOnlyPubkey: Uint8Array,\n  signature: Uint8Array,\n  hashType: number = Transaction.SIGHASH_DEFAULT,\n): boolean {\n  if (xOnlyPubkey.length !== X_ONLY_PUBKEY_SIZE) return false;\n  if (signature.length !== SCHNORR_SIG_SIZE) return false;\n  // Only the two types a BIP-322 witness may carry. SIGHASH_NONE/SINGLE and the\n  // ANYONECANPAY variants would verify here but are rejected downstream.\n  if (\n    hashType !== Transaction.SIGHASH_DEFAULT &&\n    hashType !== Transaction.SIGHASH_ALL\n  ) {\n    return false;\n  }\n\n  // Any exception from the underlying crypto libraries (e.g. the\n  // `Expected Point` error `tiny-secp256k1` throws when the supplied\n  // 32 bytes don't represent a valid x-coordinate on secp256k1) is\n  // treated as a verification failure rather than propagated — a\n  // verifier MUST return a boolean, not raise.\n  try {\n    // scriptPubKey for the signer's P2TR key-path-only address.\n    // bitcoinjs-lib's `payments.p2tr({ internalPubkey })` computes the\n    // tweak and produces the `OP_1 <tweaked_xonly>` output script.\n    const p2tr = payments.p2tr({\n      internalPubkey: Buffer.from(xOnlyPubkey),\n    });\n    if (!p2tr.output) return false;\n    const scriptPubKey = p2tr.output;\n\n    const toSign = buildToSignTransaction(messageBytes, scriptPubKey);\n\n    // Taproot sighash for to_sign input 0.\n    const sighash = toSign.hashForWitnessV1(\n      0,\n      [scriptPubKey],\n      [ZERO_SATS],\n      hashType,\n    );\n\n    // Tweak the x-only pubkey (no merkle root) and verify Schnorr.\n    const tweakedXOnly = tweakXOnlyKey(xOnlyPubkey);\n    if (!tweakedXOnly) return false;\n\n    return ecc.verifySchnorr(sighash, tweakedXOnly, signature);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Verify a BIP-322 \"simple\" P2WPKH signature over an arbitrary byte\n * message, mirroring the verifier vaultd runs on a two-item PoP witness\n * (`bip322` crate 0.0.10 `verify.rs:102-186 verify_full_p2wpkh`).\n *\n * @internal Consumed by `verifyPopWitness` for Native SegWit software\n * wallets, and exposed so the BIP-322 official-vector test suite can pin\n * the verifier independently.\n *\n * @param compressedPubkey - 33-byte SEC1 compressed pubkey of the signer\n *                           (witness item 1). The address is derived from\n *                           it; network affects only bech32 encoding, not\n *                           script or sighash (`message.rs:125-127`).\n * @param encodedSignature - Witness item 0: DER signature with trailing\n *                           sighash byte, 71 or 72 bytes, SIGHASH_ALL only\n *                           (`verify.rs:141-161`).\n * @returns `true` if the signature verifies against the P2WPKH address of\n *          `compressedPubkey`; `false` otherwise.\n */\nexport function verifyBip322P2wpkhSimple(\n  messageBytes: Uint8Array,\n  compressedPubkey: Uint8Array,\n  encodedSignature: Uint8Array,\n): boolean {\n  if (compressedPubkey.length !== COMPRESSED_PUBKEY_SIZE) return false;\n  if (\n    encodedSignature.length < P2WPKH_ENCODED_SIG_MIN ||\n    encodedSignature.length > P2WPKH_ENCODED_SIG_MAX\n  ) {\n    return false;\n  }\n  // Any exception below (strict-DER decode, malformed pubkey) is a\n  // verification failure, not an error — a verifier returns a boolean.\n  try {\n    // Full curve-point parse, as `PublicKey::from_slice` (`verify.rs:82-83`).\n    if (!ecc.isPointCompressed(compressedPubkey)) return false;\n\n    // Strict DER decode, then SIGHASH_ALL only — deliberately NARROWER than\n    // `verify.rs:156-161` (its from_consensus maps more bytes to All); host-stricter is safe.\n    const { signature, hashType } = bscript.signature.decode(\n      Buffer.from(encodedSignature),\n    );\n    if (hashType !== Transaction.SIGHASH_ALL) return false;\n\n    // scriptPubKey = OP_0 PUSH20 hash160(pubkey) (`message.rs:127 Address::p2wpkh`).\n    const p2wpkh = payments.p2wpkh({ pubkey: Buffer.from(compressedPubkey) });\n    if (!p2wpkh.output || !p2wpkh.hash) return false;\n\n    const toSign = buildToSignTransaction(messageBytes, p2wpkh.output);\n\n    // BIP-143 sighash with the standard P2WPKH scriptCode\n    // `OP_DUP OP_HASH160 <20B> OP_EQUALVERIFY OP_CHECKSIG` and value 0\n    // (`verify.rs:163-173 p2wpkh_signature_hash`; scriptCode template per\n    // bitcoinjs-lib's own P2WPKH signer, `src/psbt.js:1245-1255`).\n    const scriptCode = payments.p2pkh({ hash: p2wpkh.hash }).output;\n    if (!scriptCode) return false;\n    const sighash = toSign.hashForWitnessV0(0, scriptCode, ZERO_SATS, hashType);\n\n    // strict=true rejects high-S, as libsecp256k1's verify does\n    // (`verify.rs:180-182`; secp256k1 crate `ecdsa/mod.rs:194`).\n    return ecc.verify(sighash, compressedPubkey, signature, true);\n  } catch {\n    return false;\n  }\n}\n","/**\n * Validation for protocol parameters fetched from the ProtocolParams contract.\n *\n * These values feed Bitcoin script construction and deposit validation.\n * Invalid params must be caught before they reach transaction-building code,\n * since errors after wallet signing prompts are unrecoverable.\n *\n * The {@link ViemProtocolParamsReader} runs these on every read; consumers\n * implementing their own reader against the same `ProtocolParamsReader`\n * interface should call them too.\n */\n\nimport { assertValidVaultCoreVersion } from \"../../primitives/vaultCoreVersion\";\n\nimport type {\n  PegInConfiguration,\n  TBVProtocolParams,\n  VersionedOffchainParams,\n} from \"./types\";\n\n/**\n * Maximum value for a Solidity uint16.\n * PeginLogic.sol casts timelockAssert to uint16, so values above this are invalid.\n */\nconst UINT16_MAX = 65535;\n\n/** Maximum valid value for basis points (100%) */\nconst MAX_BASIS_POINTS = 10000;\n\n/** Maximum value for a Solidity uint32. */\nconst UINT32_MAX = 4_294_967_295;\n\n/** Maximum valid value for a uint8 (e.g. maxHtlcOutputCount). */\nconst UINT8_MAX = 255;\n\n/**\n * Validate an `offchainParamsVersion` value sourced from a contract read.\n * `Number()` on a malformed payload yields `NaN` or a non-integer; both\n * silently break consumers that loop `1..version` or use the value as a\n * map key. Used by reader entry points that surface the version to JS.\n */\nexport function assertValidOffchainParamsVersion(version: number): void {\n  if (\n    !Number.isInteger(version) ||\n    version < 0 ||\n    version > UINT32_MAX\n  ) {\n    throw new Error(\n      `Invalid offchainParamsVersion from contract: must be a uint32, got ${version}`,\n    );\n  }\n}\n\n/**\n * Validate offchain params consistency and bounds.\n * @throws Error on invalid values to prevent constructing invalid Bitcoin scripts.\n */\nexport function validateOffchainParams(params: VersionedOffchainParams): void {\n  const errors: string[] = [];\n\n  if (params.timelockAssert <= 0n) {\n    errors.push(\n      `timelockAssert must be positive, got ${params.timelockAssert}`,\n    );\n  }\n  if (params.timelockAssert > BigInt(UINT16_MAX)) {\n    errors.push(\n      `timelockAssert ${params.timelockAssert} exceeds uint16 max (${UINT16_MAX})`,\n    );\n  }\n\n  if (params.timelockChallengeAssert <= 0n) {\n    errors.push(\n      `timelockChallengeAssert must be positive, got ${params.timelockChallengeAssert}`,\n    );\n  }\n\n  if (params.tRefund <= 0) {\n    errors.push(`tRefund must be positive, got ${params.tRefund}`);\n  }\n\n  if (params.tStale <= 0) {\n    errors.push(`tStale must be positive, got ${params.tStale}`);\n  }\n\n  if (params.securityCouncilKeys.length === 0) {\n    errors.push(\"securityCouncilKeys must not be empty\");\n  }\n\n  if (params.councilQuorum <= 0) {\n    errors.push(`councilQuorum must be positive, got ${params.councilQuorum}`);\n  }\n  if (params.councilQuorum > params.securityCouncilKeys.length) {\n    errors.push(\n      `councilQuorum (${params.councilQuorum}) exceeds securityCouncilKeys count (${params.securityCouncilKeys.length})`,\n    );\n  }\n\n  if (params.feeRate <= 0n) {\n    errors.push(`feeRate must be positive, got ${params.feeRate}`);\n  }\n\n  if (params.minPeginFeeRate <= 0n) {\n    errors.push(\n      `minPeginFeeRate must be positive, got ${params.minPeginFeeRate}`,\n    );\n  }\n\n  if (\n    !Number.isInteger(params.proverCircuitVersion) ||\n    params.proverCircuitVersion < 0 ||\n    params.proverCircuitVersion > UINT16_MAX\n  ) {\n    errors.push(\n      `proverCircuitVersion must be a uint16, got ${params.proverCircuitVersion}`,\n    );\n  }\n\n  if (\n    !Number.isInteger(params.minPrepeginDepth) ||\n    params.minPrepeginDepth <= 0 ||\n    params.minPrepeginDepth > UINT32_MAX\n  ) {\n    errors.push(\n      `minPrepeginDepth must be a uint32 in [1, ${UINT32_MAX}], got ${params.minPrepeginDepth}`,\n    );\n  }\n\n  if (params.babeTotalInstances <= 0) {\n    errors.push(\n      `babeTotalInstances must be positive, got ${params.babeTotalInstances}`,\n    );\n  }\n  if (params.babeInstancesToFinalize <= 0) {\n    errors.push(\n      `babeInstancesToFinalize must be positive, got ${params.babeInstancesToFinalize}`,\n    );\n  }\n  if (params.babeInstancesToFinalize > params.babeTotalInstances) {\n    errors.push(\n      `babeInstancesToFinalize (${params.babeInstancesToFinalize}) exceeds babeTotalInstances (${params.babeTotalInstances})`,\n    );\n  }\n\n  if (\n    params.minVpCommissionBps < 0 ||\n    params.minVpCommissionBps > MAX_BASIS_POINTS\n  ) {\n    errors.push(\n      `minVpCommissionBps must be in [0, ${MAX_BASIS_POINTS}], got ${params.minVpCommissionBps}`,\n    );\n  }\n\n  if (errors.length > 0) {\n    throw new Error(\n      `Invalid offchain protocol parameters: ${errors.join(\"; \")}`,\n    );\n  }\n}\n\n/**\n * Validate TBV protocol params returned from the contract.\n * @throws Error on invalid amounts or out-of-range bounded fields.\n */\nexport function validateTBVProtocolParams(params: TBVProtocolParams): void {\n  const errors: string[] = [];\n\n  if (params.minimumPegInAmount <= 0n) {\n    errors.push(\n      `minimumPegInAmount must be positive, got ${params.minimumPegInAmount}`,\n    );\n  }\n\n  if (params.maxPegInAmount < params.minimumPegInAmount) {\n    errors.push(\n      `maxPegInAmount (${params.maxPegInAmount}) must be >= minimumPegInAmount (${params.minimumPegInAmount})`,\n    );\n  }\n\n  if (params.pegInAckTimeout <= 0n) {\n    errors.push(\n      `pegInAckTimeout must be positive, got ${params.pegInAckTimeout}`,\n    );\n  }\n\n  if (params.pegInActivationTimeout <= 0n) {\n    errors.push(\n      `pegInActivationTimeout must be positive, got ${params.pegInActivationTimeout}`,\n    );\n  }\n\n  if (\n    !Number.isInteger(params.maxHtlcOutputCount) ||\n    params.maxHtlcOutputCount <= 0 ||\n    params.maxHtlcOutputCount > UINT8_MAX\n  ) {\n    errors.push(\n      `maxHtlcOutputCount must be an integer in [1, ${UINT8_MAX}], got ${params.maxHtlcOutputCount}`,\n    );\n  }\n\n  if (\n    typeof params.expiredPegInGraceBlocks !== \"bigint\" ||\n    params.expiredPegInGraceBlocks <= 0n\n  ) {\n    errors.push(\n      `expiredPegInGraceBlocks must be a positive bigint, got ${params.expiredPegInGraceBlocks}`,\n    );\n  }\n\n  if (errors.length > 0) {\n    throw new Error(`Invalid TBV protocol parameters: ${errors.join(\"; \")}`);\n  }\n}\n\n/**\n * Validate the full peg-in configuration after assembly.\n * Checks both TBV params and offchain params consistency, and the\n * top-level `offchainParamsVersion` (which originates from a separate\n * multicall result and so must be range-checked alongside the params it\n * names).\n */\nexport function validatePegInConfiguration(config: PegInConfiguration): void {\n  validateTBVProtocolParams(config);\n  validateOffchainParams(config.offchainParams);\n\n  if (\n    !Number.isInteger(config.offchainParamsVersion) ||\n    config.offchainParamsVersion < 0 ||\n    config.offchainParamsVersion > UINT32_MAX\n  ) {\n    throw new Error(\n      `Invalid peg-in configuration: offchainParamsVersion must be a uint32, got ${config.offchainParamsVersion}`,\n    );\n  }\n\n  // The contract enforces ≥ 1 (setter rejects 0); a 0 here means a\n  // mis-decoded read or a pre-vaultCoreVersion contract — fail closed.\n  assertValidVaultCoreVersion(\n    config.activeVaultCoreVersion,\n    \"ProtocolParams.activeVaultCoreVersion()\",\n  );\n}\n","/**\n * Concrete BTCVaultRegistry reader using viem's readContract.\n *\n * This is an optional utility — callers can use their own implementation\n * of the VaultRegistryReader interface.\n */\n\nimport type { Abi, Address, Hex, PublicClient } from \"viem\";\n\nimport { BTCVaultRegistryABI } from \"../../contracts/abis/BTCVaultRegistry.abi\";\nimport { BTCVaultRegistryKeyEpochsABI } from \"../../contracts/abis/BTCVaultRegistryKeyEpochs.abi\";\nimport { assertOnChainBtcPubkey } from \"./onChainBtcPubkey\";\nimport { assertValidOffchainParamsVersion } from \"./protocol-params-validation\";\nimport type {\n  KeyEpochs,\n  OnChainBtcPubkey,\n  VaultBasicInfo,\n  VaultData,\n  VaultProtocolInfo,\n  VaultRegistryReader,\n} from \"./types\";\n\n/**\n * Inclusive upper bound the BTCVaultRegistry contract enforces on a vault\n * provider's commission (the contract check is `< 10000`).\n */\nconst MAX_VP_COMMISSION_BPS = 9999;\n\n/** Raw `getBtcVaultBasicInfo` tuple as decoded by viem. */\ntype RawVaultBasicInfo = {\n  depositor: Address;\n  depositorBtcPubKey: Hex;\n  amount: bigint;\n  vaultProvider: Address;\n  status: number;\n  applicationEntryPoint: Address;\n  createdAt: bigint;\n};\n\n/** Raw `getBtcVaultProtocolInfo` tuple as decoded by viem. */\ntype RawVaultProtocolInfo = {\n  depositorSignedPeginTx: Hex;\n  universalChallengersVersion: number;\n  appVaultKeepersVersion: number;\n  offchainParamsVersion: number;\n  verifiedAt: bigint;\n  depositorWotsPkHash: Hex;\n  hashlock: Hex;\n  htlcVout: number;\n  depositorPopSignature: Hex;\n  prePeginTxHash: Hex;\n  vaultProviderCommissionBps: number;\n  claimExpiredUntil: bigint;\n  vaultCoreVersion: number;\n};\n\nfunction mapVaultBasicInfo(result: RawVaultBasicInfo): VaultBasicInfo {\n  return {\n    depositor: result.depositor,\n    depositorBtcPubKey: result.depositorBtcPubKey,\n    amount: result.amount,\n    vaultProvider: result.vaultProvider,\n    status: result.status,\n    applicationEntryPoint: result.applicationEntryPoint,\n    createdAt: result.createdAt,\n  };\n}\n\nfunction mapVaultProtocolInfo(result: RawVaultProtocolInfo): VaultProtocolInfo {\n  const offchainParamsVersion = Number(result.offchainParamsVersion);\n  assertValidOffchainParamsVersion(offchainParamsVersion);\n  return {\n    depositorSignedPeginTx: result.depositorSignedPeginTx,\n    universalChallengersVersion: result.universalChallengersVersion,\n    appVaultKeepersVersion: result.appVaultKeepersVersion,\n    offchainParamsVersion,\n    verifiedAt: result.verifiedAt,\n    depositorWotsPkHash: result.depositorWotsPkHash,\n    hashlock: result.hashlock,\n    htlcVout: result.htlcVout,\n    depositorPopSignature: result.depositorPopSignature,\n    prePeginTxHash: result.prePeginTxHash,\n    vaultProviderCommissionBps: result.vaultProviderCommissionBps,\n    claimExpiredUntil: result.claimExpiredUntil,\n    vaultCoreVersion: result.vaultCoreVersion,\n  };\n}\n\n/**\n * Exclusive upper bound for a `uint64` epoch.\n *\n * viem does not range-check a decoded `uint64`, so a misaligned decode can\n * hand back a value far larger than the field can hold. Rejecting those is\n * cheap defence in depth against a mis-decode of the extended ABI.\n *\n * The state this is load-bearing for is narrower than \"a registry that predates\n * RFC-006\". Against a *fully* pre-RFC-006 registry the path fails closed on its\n * own: `resolveParticipantKeysAtEpochs` goes on to call\n * `getOperationBtcKeyAtEpochOrGenesis` on ApplicationRegistry and\n * ProtocolParams, which do not exist there, so the multicall reverts and these\n * epochs are never used. The reachable gap is a registry that *has* the\n * operation-key getters but whose `BTCVaultProtocolInfo` struct is not\n * extended — there the tail-data epochs resolve with no error at all, and this\n * range check is the only thing looking at them.\n *\n * Even for that case it is only a backstop, and a weak one: a misaligned decode\n * can land on a small, plausible-looking integer this range accepts. Correctness\n * rests on only ever pointing at an RFC-006 registry, which is a deployment\n * precondition rather than something this call can establish — see\n * https://github.com/babylonlabs-io/babylon-toolkit/issues/2192 for where that\n * check is owned, and `BTCVaultRegistryKeyEpochs.abi.ts` for the decode hazard.\n */\nconst UINT64_EXCLUSIVE_UPPER_BOUND = 1n << 64n;\n\n/**\n * The epoch a vault provider's registration key is bonded at.\n *\n * A provider's operation-key history is append-only and every appended version\n * is stamped at epoch 1 or later, so epoch 0 always resolves to the key set at\n * registration. This is what lets `getOperationBtcKeyAtEpoch` stand in for the\n * removed `getVaultProviderBTCKey` getter.\n */\nconst VP_GENESIS_KEY_EPOCH = 0n;\n\nfunction assertEpochInRange(\n  value: bigint,\n  field: string,\n  vaultId: Hex,\n): bigint {\n  if (value < 0n || value >= UINT64_EXCLUSIVE_UPPER_BOUND) {\n    throw new Error(\n      `getBtcVaultProtocolInfo returned ${field}=${value} for vault ${vaultId}, ` +\n        `outside the uint64 range — the registry may predate RFC-006`,\n    );\n  }\n  return value;\n}\n\nfunction mapKeyEpochs(result: KeyEpochs, vaultId: Hex): KeyEpochs {\n  return {\n    vpKeyEpoch: assertEpochInRange(result.vpKeyEpoch, \"vpKeyEpoch\", vaultId),\n    appKeeperKeyEpoch: assertEpochInRange(\n      result.appKeeperKeyEpoch,\n      \"appKeeperKeyEpoch\",\n      vaultId,\n    ),\n    ucKeyEpoch: assertEpochInRange(result.ucKeyEpoch, \"ucKeyEpoch\", vaultId),\n  };\n}\n\n/**\n * Concrete vault registry reader using viem.\n *\n * Usage:\n * ```ts\n * const reader = new ViemVaultRegistryReader(publicClient, registryAddress);\n * const data = await reader.getVaultData(vaultId);\n * ```\n */\nexport class ViemVaultRegistryReader implements VaultRegistryReader {\n  constructor(\n    private publicClient: PublicClient,\n    private contractAddress: Address,\n  ) {}\n\n  /**\n   * Read the VP's **genesis** (registration) x-only BTC pubkey — the key bonded\n   * at version 0, which never moves when the operator rotates.\n   *\n   * Resolved as \"the operation key at epoch 0\" rather than through the\n   * dedicated `getVaultProviderBTCKey` getter, which\n   * https://github.com/babylonlabs-io/vault-contracts-aave-v4/pull/539 removes.\n   * Epoch 0 predates any rotation — appended versions are stamped at epoch 1 or\n   * later — so it resolves to the registration key, and the contracts team has\n   * confirmed that is a property we can rely on rather than an implementation\n   * detail. The devnet comparison behind that claim — both getters returning the\n   * identical key for a provider that *has* rotated, while\n   * `getCurrentOperationBtcKey` differed — is recorded in\n   * https://github.com/babylonlabs-io/babylon-toolkit/issues/2188.\n   *\n   * This makes the read RFC-006-only, where the removed getter also existed on a\n   * legacy registry. That costs nothing: every caller of this method already\n   * resolves participant keys through `OperationKeyReader`, so all of them\n   * require an RFC-006 registry regardless.\n   *\n   * Validates length, hex form, and secp256k1 curve membership before minting\n   * the brand. Returns 64-char lowercase hex without the `0x` prefix.\n   */\n  async getVaultProviderGenesisBtcPubKey(\n    vpAddress: Address,\n  ): Promise<OnChainBtcPubkey> {\n    const result = (await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryABI,\n      functionName: \"getOperationBtcKeyAtEpoch\",\n      args: [vpAddress, VP_GENESIS_KEY_EPOCH],\n    })) as Hex;\n    return assertOnChainBtcPubkey(\n      result,\n      `getOperationBtcKeyAtEpoch (vp=${vpAddress}, epoch=${VP_GENESIS_KEY_EPOCH})`,\n    );\n  }\n\n  /**\n   * Read a vault provider's *current* RFC-006 operation BTC key.\n   *\n   * Falls back on-chain to the registration key when the provider has never\n   * rotated, so this returns the same value as\n   * `getVaultProviderGenesisBtcPubKey` until the first rotation.\n   *\n   * This is the key the VP's server signs its BIP-322 auth tokens with — a\n   * live per-operator identity, not a per-vault binding, so the auth pin uses\n   * the current key rather than any vault's frozen epoch.\n   */\n  async getCurrentVaultProviderOperationBtcKey(\n    vpAddress: Address,\n  ): Promise<OnChainBtcPubkey> {\n    const result = (await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryABI,\n      functionName: \"getCurrentOperationBtcKey\",\n      args: [vpAddress],\n    })) as Hex;\n    return assertOnChainBtcPubkey(\n      result,\n      `getCurrentOperationBtcKey (vp=${vpAddress})`,\n    );\n  }\n\n  /**\n   * Read a vault's frozen RFC-006 operation-key epochs.\n   *\n   * Reads `getBtcVaultProtocolInfo` through the **extended** ABI, which is only\n   * valid against an RFC-006 registry: against one whose `BTCVaultProtocolInfo`\n   * struct is not extended this call does not fail for a populated vault, it\n   * silently returns three words of tail data as epochs. Nothing here can detect\n   * that, so the guarantee is a deployment one — every network this ships to has\n   * the RFC-006 getters, and mainnet is a fresh RFC-006 deploy.\n   *\n   * A registry missing the operation-key getters entirely is the *safer* of the\n   * two cases: `resolveParticipantKeysAtEpochs` reverts downstream and these\n   * epochs never reach key resolution. See {@link UINT64_EXCLUSIVE_UPPER_BOUND}\n   * for which state the range check actually guards, and\n   * `BTCVaultRegistryKeyEpochs.abi.ts` for the decode hazard.\n   */\n  async getVaultKeyEpochs(vaultId: Hex): Promise<KeyEpochs> {\n    const result = (await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryKeyEpochsABI,\n      functionName: \"getBtcVaultProtocolInfo\",\n      args: [vaultId],\n    })) as unknown as KeyEpochs;\n\n    return mapKeyEpochs(result, vaultId);\n  }\n\n  async getVaultKeyEpochsBatch(vaultIds: readonly Hex[]): Promise<KeyEpochs[]> {\n    if (vaultIds.length === 0) return [];\n\n    const results = await this.publicClient.multicall({\n      contracts: vaultIds.map((vaultId) => ({\n        address: this.contractAddress,\n        abi: BTCVaultRegistryKeyEpochsABI as Abi,\n        functionName: \"getBtcVaultProtocolInfo\" as const,\n        args: [vaultId] as const,\n      })),\n      allowFailure: false,\n    });\n\n    return results.map((info, i) =>\n      mapKeyEpochs(info as unknown as KeyEpochs, vaultIds[i]),\n    );\n  }\n\n  async getVaultBasicInfo(vaultId: Hex): Promise<VaultBasicInfo> {\n    const result = (await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryABI,\n      functionName: \"getBtcVaultBasicInfo\",\n      args: [vaultId],\n    })) as RawVaultBasicInfo;\n\n    return mapVaultBasicInfo(result);\n  }\n\n  async getVaultProtocolInfo(vaultId: Hex): Promise<VaultProtocolInfo> {\n    const result = (await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryABI,\n      functionName: \"getBtcVaultProtocolInfo\",\n      args: [vaultId],\n    })) as RawVaultProtocolInfo;\n\n    return mapVaultProtocolInfo(result);\n  }\n\n  async getProtocolInfoBatch(\n    vaultIds: readonly Hex[],\n  ): Promise<VaultProtocolInfo[]> {\n    if (vaultIds.length === 0) return [];\n\n    const results = await this.publicClient.multicall({\n      contracts: vaultIds.map((vaultId) => ({\n        address: this.contractAddress,\n        abi: BTCVaultRegistryABI as Abi,\n        functionName: \"getBtcVaultProtocolInfo\" as const,\n        args: [vaultId] as const,\n      })),\n      allowFailure: false,\n    });\n\n    return results.map((info, i) => {\n      const result = info as unknown as RawVaultProtocolInfo;\n      if (\n        !result.depositorSignedPeginTx ||\n        result.depositorSignedPeginTx === \"0x\"\n      ) {\n        // An empty record is not proof the vault is absent: a lagging RPC\n        // node returns HTTP 200 with a zero struct, so no retry below this\n        // layer can see it. Single-shot is only safe because the finality\n        // gate (`waitForPeginRegistrationDepth`) runs first on the deposit\n        // path — move this ahead of it and the read-after-write race returns.\n        // The vault app matches this message to render \"still confirming\".\n        throw new Error(\n          `Vault ${vaultIds[i]} not found on-chain or has no pegin transaction`,\n        );\n      }\n      return mapVaultProtocolInfo(result);\n    });\n  }\n\n  /**\n   * Read the protocol pegin fee (in wei) for a given vault provider.\n   * Mirrors the `getPegInFee(address)` view on BTCVaultRegistry.\n   */\n  async getPegInFee(vaultProvider: Address): Promise<bigint> {\n    return (await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryABI,\n      functionName: \"getPegInFee\",\n      args: [vaultProvider],\n    })) as bigint;\n  }\n\n  /**\n   * Read a vault provider's current commission in basis points from\n   * BTCVaultRegistry. The contract enforces `commissionBps < 10000`, so the\n   * legitimate range is `[0, 9999]`; anything outside indicates a wrong\n   * contract address or ABI drift and is surfaced as an error rather than\n   * trusted.\n   */\n  async getVaultProviderCommission(vaultProvider: Address): Promise<number> {\n    // viem infers `number` from the `uint16` return in the `as const` ABI.\n    const bps = await this.publicClient.readContract({\n      address: this.contractAddress,\n      abi: BTCVaultRegistryABI,\n      functionName: \"getVaultProviderCommission\",\n      args: [vaultProvider],\n    });\n\n    if (!Number.isInteger(bps) || bps < 0 || bps > MAX_VP_COMMISSION_BPS) {\n      throw new Error(\n        `getVaultProviderCommission returned ${bps} bps for ${vaultProvider}, ` +\n          `outside the protocol range [0, ${MAX_VP_COMMISSION_BPS}]`,\n      );\n    }\n\n    return bps;\n  }\n\n  async getVaultData(vaultId: Hex): Promise<VaultData> {\n    // One round-trip for both structs (hard-fail): they feed signing/refund/\n    // broadcast rebinds, so reading them in a single multicall also pins both\n    // to the same block — no basic/protocol skew across two `eth_call`s.\n    const [basicRaw, protocolRaw] = await this.publicClient.multicall({\n      contracts: [\n        {\n          address: this.contractAddress,\n          abi: BTCVaultRegistryABI,\n          functionName: \"getBtcVaultBasicInfo\",\n          args: [vaultId],\n        },\n        {\n          address: this.contractAddress,\n          abi: BTCVaultRegistryABI,\n          functionName: \"getBtcVaultProtocolInfo\",\n          args: [vaultId],\n        },\n      ],\n      allowFailure: false,\n    });\n\n    const basic = mapVaultBasicInfo(basicRaw);\n    const protocol = mapVaultProtocolInfo(protocolRaw);\n\n    if (\n      !protocol.depositorSignedPeginTx ||\n      protocol.depositorSignedPeginTx === \"0x\"\n    ) {\n      throw new Error(\n        `Vault ${vaultId} not found on-chain or has no pegin transaction`,\n      );\n    }\n\n    return { basic, protocol };\n  }\n\n}\n","/**\n * Mempool API Client\n *\n * Client for interacting with mempool.space API for Bitcoin network operations.\n * Used for broadcasting transactions and fetching UTXO data.\n *\n * @module clients/mempool/mempoolApi\n */\n\nimport { combineAbortSignals } from \"../../utils/abortSignals\";\nimport {\n  BITCOIN_ADDRESS_RE,\n  HEX_RE,\n  KNOWN_SCRIPT_PREFIXES,\n  TXID_RE,\n} from \"../../utils/validation\";\n\nimport type {\n  MempoolUTXO,\n  NetworkFees,\n  OutspendStatus,\n  TxInfo,\n  UtxoInfo,\n} from \"./types\";\n\n/** Maximum valid satoshi value: 21 million BTC × 10^8 sats/BTC */\nconst MAX_SATOSHIS = 21_000_000 * 1e8;\n\n/** Timeout for mempool API requests — prevents indefinite hangs from stalled endpoints */\nconst MEMPOOL_REQUEST_TIMEOUT_MS = 30_000;\n\n/**\n * Fetch wrapper with AbortController-based timeout.\n * Ensures all mempool API requests fail bounded rather than hanging indefinitely.\n */\nasync function fetchWithTimeout(\n  url: string,\n  options?: RequestInit,\n): Promise<Response> {\n  const controller = new AbortController();\n  const timeoutId = setTimeout(\n    () => controller.abort(),\n    MEMPOOL_REQUEST_TIMEOUT_MS,\n  );\n\n  // Compose timeout signal with any caller-supplied signal so both can cancel\n  const signals = [controller.signal, options?.signal].filter(\n    Boolean,\n  ) as AbortSignal[];\n  const combined = combineAbortSignals(signals);\n\n  try {\n    // Don't clear timeout here — let it cover body consumption by callers.\n    // For the same reason the composed signal keeps its listeners attached on\n    // the success path: detaching them would stop the timeout from aborting a\n    // stalled body read.\n    return await fetch(url, {\n      ...options,\n      signal: combined.signal,\n    });\n  } catch (error) {\n    clearTimeout(timeoutId);\n    combined.cleanup();\n    if (\n      error != null &&\n      typeof error === \"object\" &&\n      \"name\" in error &&\n      error.name === \"AbortError\"\n    ) {\n      throw new Error(\n        `Mempool API request timed out after ${MEMPOOL_REQUEST_TIMEOUT_MS}ms: ${url}`,\n      );\n    }\n    throw error;\n  }\n}\n\n/**\n * Maximum sane fee rate in sat/vByte.\n * The April 2024 Runes spike peaked around 1,805 sat/vB — 10,000 provides ample headroom.\n */\nconst MAX_FEE_RATE = 10_000;\n\nfunction isValidSatoshiValue(value: number): boolean {\n  return Number.isInteger(value) && value > 0 && value <= MAX_SATOSHIS;\n}\n\nfunction isValidFeeRate(value: number): boolean {\n  return Number.isInteger(value) && value > 0 && value <= MAX_FEE_RATE;\n}\n\nfunction isValidVout(vout: number, outputCount?: number): boolean {\n  if (!Number.isInteger(vout) || vout < 0) return false;\n  return outputCount === undefined || vout < outputCount;\n}\n\n\nfunction assertValidTxid(txid: string): void {\n  if (!TXID_RE.test(txid)) {\n    throw new Error(`Invalid transaction ID format: ${txid}`);\n  }\n}\n\nfunction assertValidAddress(address: string): void {\n  if (!BITCOIN_ADDRESS_RE.test(address)) {\n    throw new Error(`Invalid Bitcoin address format: ${address}`);\n  }\n}\n\nfunction assertValidScriptPubKey(scriptPubKey: string, context: string): void {\n  if (!HEX_RE.test(scriptPubKey)) {\n    throw new Error(\n      `Invalid scriptPubKey: not valid hex for ${context}`,\n    );\n  }\n  const matchesKnownType = KNOWN_SCRIPT_PREFIXES.some((prefix) =>\n    scriptPubKey.toLowerCase().startsWith(prefix),\n  );\n  if (!matchesKnownType) {\n    throw new Error(\n      `Unrecognized scriptPubKey type for ${context}: ` +\n        `prefix ${scriptPubKey.slice(0, 6)} does not match any known Bitcoin script type`,\n    );\n  }\n}\n\n/**\n * Default mempool API URLs by network.\n */\nexport const MEMPOOL_API_URLS = {\n  mainnet: \"https://mempool.space/api\",\n  testnet: \"https://mempool.space/testnet/api\",\n  signet: \"https://mempool.space/signet/api\",\n} as const;\n\n/**\n * Fetch wrapper with error handling.\n */\nasync function fetchApi<T>(\n  url: string,\n  options?: RequestInit,\n): Promise<T> {\n  try {\n    const response = await fetchWithTimeout(url, options);\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      throw new Error(\n        `Mempool API error (${response.status}): ${errorText || response.statusText}`,\n      );\n    }\n\n    const contentType = response.headers.get(\"content-type\");\n    if (contentType?.includes(\"application/json\")) {\n      return (await response.json()) as T;\n    } else {\n      return (await response.text()) as T;\n    }\n  } catch (error) {\n    if (error instanceof Error) {\n      throw new Error(`Failed to fetch from mempool API: ${error.message}`);\n    }\n    throw new Error(\"Failed to fetch from mempool API: Unknown error\");\n  }\n}\n\n/**\n * Push a signed transaction to the Bitcoin network.\n *\n * @param txHex - The signed transaction hex string\n * @param apiUrl - Mempool API base URL\n * @returns The transaction ID\n * @throws Error if broadcasting fails\n */\nexport async function pushTx(txHex: string, apiUrl: string): Promise<string> {\n  try {\n    const response = await fetchWithTimeout(`${apiUrl}/tx`, {\n      method: \"POST\",\n      body: txHex,\n      headers: {\n        \"Content-Type\": \"text/plain\",\n      },\n    });\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      // Try to extract error message from response using robust JSON parsing\n      let message: string | undefined;\n      try {\n        const errorJson = JSON.parse(errorText);\n        message = errorJson.message ?? errorJson.error;\n      } catch {\n        // Not JSON, use raw text\n        message = errorText;\n      }\n      throw new Error(\n        message || `Failed to broadcast transaction: ${response.statusText}`,\n      );\n    }\n\n    // Response is the transaction ID (plain text)\n    const txId = await response.text();\n    return txId;\n  } catch (error) {\n    if (error instanceof Error) {\n      throw new Error(`Failed to broadcast BTC transaction: ${error.message}`);\n    }\n    throw new Error(\"Failed to broadcast BTC transaction: Unknown error\");\n  }\n}\n\n/**\n * Get transaction information from mempool.\n *\n * @param txid - The transaction ID\n * @param apiUrl - Mempool API base URL\n * @returns Transaction information\n */\nexport async function getTxInfo(txid: string, apiUrl: string): Promise<TxInfo> {\n  assertValidTxid(txid);\n  return fetchApi<TxInfo>(`${apiUrl}/tx/${txid}`);\n}\n\n/**\n * Get the current block tip height.\n *\n * Source: mempool.space API — `GET /api/blocks/tip/height` returns the height\n * of the most recent block as a plain-text integer.\n *\n * @param apiUrl - Mempool API base URL\n * @returns The height of the most recent block\n * @throws Error if the response is not a whole number\n */\nexport async function getTipHeight(apiUrl: string): Promise<number> {\n  const raw = await fetchApi<string>(`${apiUrl}/blocks/tip/height`);\n  const trimmed = raw.trim();\n  if (!/^\\d+$/.test(trimmed)) {\n    throw new Error(\n      `Mempool API returned an invalid block tip height: \"${raw}\"`,\n    );\n  }\n  return Number.parseInt(trimmed, 10);\n}\n\n/**\n * Get the spend status of a specific transaction output.\n *\n * Calls the esplora-compatible `GET /tx/{txid}/outspend/{vout}` endpoint\n * (mempool.space backend, mempool/electrs `rest.rs`). Returns\n * `{ spent: false }` for an unspent output, or\n * `{ spent: true, txid, vin, status }` when the output has been spent.\n *\n * @param txid - The transaction id whose output is being checked (no 0x prefix)\n * @param vout - The output index\n * @param apiUrl - Mempool API base URL\n * @returns The output's spend status\n */\nexport async function getOutspend(\n  txid: string,\n  vout: number,\n  apiUrl: string,\n): Promise<OutspendStatus> {\n  assertValidTxid(txid);\n  if (!isValidVout(vout)) {\n    throw new Error(`Invalid vout ${vout} for transaction ${txid}`);\n  }\n  return fetchApi<OutspendStatus>(`${apiUrl}/tx/${txid}/outspend/${vout}`);\n}\n\n/**\n * Get the hex representation of a transaction.\n *\n * @param txid - The transaction ID\n * @param apiUrl - Mempool API base URL\n * @returns The transaction hex string\n * @throws Error if the request fails or transaction is not found\n */\nexport async function getTxHex(txid: string, apiUrl: string): Promise<string> {\n  assertValidTxid(txid);\n  try {\n    const response = await fetchWithTimeout(`${apiUrl}/tx/${txid}/hex`);\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      throw new Error(\n        `Mempool API error (${response.status}): ${errorText || response.statusText}`,\n      );\n    }\n\n    return await response.text();\n  } catch (error) {\n    if (error instanceof Error) {\n      throw new Error(`Failed to get transaction hex for ${txid}: ${error.message}`);\n    }\n    throw new Error(`Failed to get transaction hex for ${txid}: Unknown error`);\n  }\n}\n\n/**\n * Get UTXO information for a specific transaction output.\n *\n * This is used for constructing PSBTs where we need the witnessUtxo data.\n * Only supports Taproot (P2TR) and native SegWit (P2WPKH, P2WSH) script types.\n *\n * @param txid - The transaction ID containing the UTXO\n * @param vout - The output index\n * @param apiUrl - Mempool API base URL\n * @returns UTXO information with value and scriptPubKey\n */\nexport async function getUtxoInfo(\n  txid: string,\n  vout: number,\n  apiUrl: string,\n): Promise<UtxoInfo> {\n  assertValidTxid(txid);\n  const txInfo = await getTxInfo(txid, apiUrl);\n\n  if (!isValidVout(vout, txInfo.vout.length)) {\n    throw new Error(\n      `Invalid vout ${vout} for transaction ${txid} (has ${txInfo.vout.length} outputs)`,\n    );\n  }\n\n  const output = txInfo.vout[vout];\n  if (!isValidSatoshiValue(output.value)) {\n    throw new Error(`Invalid UTXO value ${output.value} for ${txid}:${vout}`);\n  }\n  assertValidScriptPubKey(output.scriptpubkey, `${txid}:${vout}`);\n\n  return {\n    txid,\n    vout,\n    value: output.value,\n    scriptPubKey: output.scriptpubkey,\n  };\n}\n\n/**\n * Get all UTXOs for a Bitcoin address.\n *\n * @param address - The Bitcoin address\n * @param apiUrl - Mempool API base URL\n * @returns Array of UTXOs sorted by value (largest first)\n */\nexport async function getAddressUtxos(\n  address: string,\n  apiUrl: string,\n): Promise<MempoolUTXO[]> {\n  assertValidAddress(address);\n  try {\n    // Fetch UTXOs for the address\n    const utxos = await fetchApi<\n      {\n        txid: string;\n        vout: number;\n        value: number;\n        status: {\n          confirmed: boolean;\n        };\n      }[]\n    >(`${apiUrl}/address/${address}/utxo`);\n\n    // Fetch scriptPubKey for the address\n    const addressInfo = await fetchApi<{\n      isvalid: boolean;\n      scriptPubKey: string;\n    }>(`${apiUrl}/v1/validate-address/${address}`);\n\n    if (!addressInfo.isvalid) {\n      throw new Error(\n        `Invalid Bitcoin address: ${address}. Mempool API validation failed.`,\n      );\n    }\n    assertValidScriptPubKey(addressInfo.scriptPubKey, address);\n\n    // Validate UTXO fields from the listing endpoint.\n    // Per-UTXO cross-verification against /tx/{txid} is intentionally NOT done\n    // here — it would be expensive (N API calls) and redundant: the broadcast\n    // path already verifies each selected input via getUtxoInfo before signing.\n    // Both endpoints come from the same mempool API, so cross-checking one\n    // against the other on the same server does not add real security.\n    for (const utxo of utxos) {\n      assertValidTxid(utxo.txid);\n      if (!isValidVout(utxo.vout)) {\n        throw new Error(`Invalid vout ${utxo.vout} for ${utxo.txid}`);\n      }\n      if (!isValidSatoshiValue(utxo.value)) {\n        throw new Error(\n          `Invalid UTXO value ${utxo.value} for ${utxo.txid}:${utxo.vout}`,\n        );\n      }\n    }\n\n    // Sort by value (largest first) and map to our UTXO format\n    const sortedUTXOs = utxos.sort((a, b) => b.value - a.value);\n\n    return sortedUTXOs.map((utxo) => ({\n      txid: utxo.txid,\n      vout: utxo.vout,\n      value: utxo.value,\n      scriptPubKey: addressInfo.scriptPubKey,\n      confirmed: utxo.status.confirmed,\n    }));\n  } catch (error) {\n    if (error instanceof Error) {\n      throw new Error(\n        `Failed to get UTXOs for address ${address}: ${error.message}`,\n      );\n    }\n    throw new Error(\n      `Failed to get UTXOs for address ${address}: Unknown error`,\n    );\n  }\n}\n\n/**\n * Get the mempool API URL for a given network.\n *\n * @param network - Bitcoin network (mainnet, testnet, signet)\n * @returns The mempool API URL\n */\nexport function getMempoolApiUrl(\n  network: \"mainnet\" | \"testnet\" | \"signet\",\n): string {\n  return MEMPOOL_API_URLS[network];\n}\n\n/**\n * Transaction summary from address transactions endpoint.\n */\nexport interface AddressTx {\n  txid: string;\n  status: {\n    confirmed: boolean;\n    block_height?: number;\n  };\n}\n\n/**\n * Get recent transactions for a Bitcoin address.\n *\n * Returns the last 25 confirmed transactions plus any unconfirmed (mempool) transactions.\n * This is useful for checking if a specific transaction has been broadcast.\n *\n * @param address - The Bitcoin address\n * @param apiUrl - Mempool API base URL\n * @returns Array of recent transactions\n */\nexport async function getAddressTxs(\n  address: string,\n  apiUrl: string,\n): Promise<AddressTx[]> {\n  assertValidAddress(address);\n  return fetchApi<AddressTx[]>(`${apiUrl}/address/${address}/txs`);\n}\n\n/**\n * Fetches Bitcoin network fee recommendations from mempool.space API.\n *\n * @param apiUrl - Mempool API base URL\n * @returns Fee rates in sat/vbyte for different confirmation times\n * @throws Error if request fails or returns invalid data\n *\n * @see https://mempool.space/docs/api/rest#get-recommended-fees\n */\nexport async function getNetworkFees(apiUrl: string): Promise<NetworkFees> {\n  const response = await fetchWithTimeout(`${apiUrl}/v1/fees/recommended`);\n\n  if (!response.ok) {\n    throw new Error(\n      `Failed to fetch network fees: ${response.status} ${response.statusText}`,\n    );\n  }\n\n  const data = await response.json();\n\n  const feeFields = [\n    \"fastestFee\",\n    \"halfHourFee\",\n    \"hourFee\",\n    \"economyFee\",\n    \"minimumFee\",\n  ] as const;\n\n  for (const field of feeFields) {\n    if (!isValidFeeRate(data[field])) {\n      throw new Error(\n        `Invalid fee rate ${field}=${data[field]} from mempool API: expected a positive number ≤ ${MAX_FEE_RATE}`,\n      );\n    }\n  }\n\n  if (\n    data.minimumFee > data.economyFee ||\n    data.economyFee > data.hourFee ||\n    data.hourFee > data.halfHourFee ||\n    data.halfHourFee > data.fastestFee\n  ) {\n    throw new Error(\n      `Fee rate ordering violation from mempool API: expected ` +\n        `minimumFee (${data.minimumFee}) <= economyFee (${data.economyFee}) <= ` +\n        `hourFee (${data.hourFee}) <= halfHourFee (${data.halfHourFee}) <= ` +\n        `fastestFee (${data.fastestFee}).`,\n    );\n  }\n\n  return data as NetworkFees;\n}\n\n"],"names":["BIP322_TAG","TAPTWEAK_TAG","X_ONLY_PUBKEY_SIZE","SCHNORR_SIG_SIZE","COMPRESSED_PUBKEY_SIZE","P2WPKH_ENCODED_SIG_MIN","P2WPKH_ENCODED_SIG_MAX","ZERO_SATS","BIP322_TX_VERSION","BIP322_TX_LOCKTIME","BIP322_INPUT_SEQUENCE","TO_SPEND_PREVOUT_TXID_BYTES","TO_SPEND_PREVOUT_INDEX","TO_SPEND_OUTPUT_INDEX","OP_0","OP_PUSHBYTES_32","OP_RETURN","taggedHash","tag","data","tagBytes","tagHash","sha256","preimage","tweakXOnlyKey","xOnly","tweak","tweaked","ecc","buildToSignTransaction","messageBytes","scriptPubKey","messageHash","toSpend","Transaction","scriptSig","Buffer","toSign","verifyBip322Simple","xOnlyPubkey","signature","hashType","p2tr","payments","sighash","tweakedXOnly","verifyBip322P2wpkhSimple","compressedPubkey","encodedSignature","bscript","p2wpkh","scriptCode","UINT16_MAX","MAX_BASIS_POINTS","UINT32_MAX","UINT8_MAX","assertValidOffchainParamsVersion","version","validateOffchainParams","params","errors","validateTBVProtocolParams","validatePegInConfiguration","config","assertValidVaultCoreVersion","MAX_VP_COMMISSION_BPS","mapVaultBasicInfo","result","mapVaultProtocolInfo","offchainParamsVersion","UINT64_EXCLUSIVE_UPPER_BOUND","VP_GENESIS_KEY_EPOCH","assertEpochInRange","value","field","vaultId","mapKeyEpochs","ViemVaultRegistryReader","publicClient","contractAddress","vpAddress","BTCVaultRegistryABI","assertOnChainBtcPubkey","BTCVaultRegistryKeyEpochsABI","vaultIds","info","vaultProvider","bps","basicRaw","protocolRaw","basic","protocol","MAX_SATOSHIS","MEMPOOL_REQUEST_TIMEOUT_MS","fetchWithTimeout","url","options","controller","timeoutId","signals","combined","combineAbortSignals","error","MAX_FEE_RATE","isValidSatoshiValue","isValidFeeRate","isValidVout","vout","outputCount","assertValidTxid","txid","TXID_RE","assertValidAddress","address","BITCOIN_ADDRESS_RE","assertValidScriptPubKey","context","HEX_RE","KNOWN_SCRIPT_PREFIXES","prefix","MEMPOOL_API_URLS","fetchApi","response","errorText","contentType","pushTx","txHex","apiUrl","message","errorJson","getTxInfo","getTipHeight","raw","trimmed","getOutspend","getTxHex","getUtxoInfo","txInfo","output","getAddressUtxos","utxos","addressInfo","utxo","a","b","getMempoolApiUrl","network","getAddressTxs","getNetworkFees","feeFields"],"mappings":";;;;;;;;;AA6CA,MAAMA,IAAa,0BAGbC,IAAe,YAEfC,IAAqB,IACrBC,IAAmB,IAEnBC,IAAyB,IAOzBC,KAAyB,IACzBC,KAAyB,IAQzBC,IAAY,GAIZC,IAAoB,GACpBC,IAAqB,GACrBC,IAAwB,GAExBC,KAA8B,IAC9BC,KAAyB,YAEzBC,KAAwB,GACxBC,KAAO,GAEPC,KAAkB,IAClBC,KAAY;AAMlB,SAASC,EAAWC,GAAaC,GAA8B;AAC7D,QAAMC,IAAW,IAAI,cAAc,OAAOF,CAAG,GACvCG,IAAUC,EAAOF,CAAQ,GACzBG,IAAW,IAAI,WAAWF,EAAQ,SAAS,IAAIF,EAAK,MAAM;AAChE,SAAAI,EAAS,IAAIF,GAAS,CAAC,GACvBE,EAAS,IAAIF,GAASA,EAAQ,MAAM,GACpCE,EAAS,IAAIJ,GAAME,EAAQ,SAAS,CAAC,GAC9BC,EAAOC,CAAQ;AACxB;AAYA,SAASC,GAAcC,GAAsC;AAC3D,MAAIA,EAAM,WAAWvB,EAAoB,QAAO;AAChD,QAAMwB,IAAQT,EAAWhB,GAAcwB,CAAK,GACtCE,IAAUC,EAAI,mBAAmBH,GAAOC,CAAK;AACnD,SAAOC,IAAUA,EAAQ,cAAc;AACzC;AAOA,SAASE,EACPC,GACAC,GACa;AACb,QAAMC,IAAcf,EAAWjB,GAAY8B,CAAY,GAEjDG,IAAU,IAAIC,EAAA;AACpB,EAAAD,EAAQ,UAAUzB,GAClByB,EAAQ,WAAWxB;AACnB,QAAM0B,IAAYC,EAAO,OAAO;AAAA,IAC9BA,EAAO,KAAK,CAACtB,IAAMC,EAAe,CAAC;AAAA,IACnCqB,EAAO,KAAKJ,CAAW;AAAA,EAAA,CACxB;AACD,EAAAC,EAAQ;AAAA,IACNG,EAAO,MAAMzB,IAA6B,CAAC;AAAA,IAC3CC;AAAA,IACAF;AAAA,IACAyB;AAAA,EAAA,GAEFF,EAAQ,UAAUF,GAAcxB,CAAS;AAEzC,QAAM8B,IAAS,IAAIH,EAAA;AACnB,SAAAG,EAAO,UAAU7B,GACjB6B,EAAO,WAAW5B,GAElB4B,EAAO;AAAA,IACLJ,EAAQ,QAAA;AAAA,IACRpB;AAAA,IACAH;AAAA,EAAA,GAEF2B,EAAO,UAAUD,EAAO,KAAK,CAACpB,EAAS,CAAC,GAAGT,CAAS,GAE7C8B;AACT;AAwBO,SAASC,GACdR,GACAS,GACAC,GACAC,IAAmBP,EAAY,iBACtB;AAKT,MAJIK,EAAY,WAAWrC,KACvBsC,EAAU,WAAWrC,KAIvBsC,MAAaP,EAAY,mBACzBO,MAAaP,EAAY;AAEzB,WAAO;AAQT,MAAI;AAIF,UAAMQ,IAAOC,EAAS,KAAK;AAAA,MACzB,gBAAgBP,EAAO,KAAKG,CAAW;AAAA,IAAA,CACxC;AACD,QAAI,CAACG,EAAK,OAAQ,QAAO;AACzB,UAAMX,IAAeW,EAAK,QAKpBE,IAHSf,EAAuBC,GAAcC,CAAY,EAGzC;AAAA,MACrB;AAAA,MACA,CAACA,CAAY;AAAA,MACb,CAACxB,CAAS;AAAA,MACVkC;AAAA,IAAA,GAIII,IAAerB,GAAce,CAAW;AAC9C,WAAKM,IAEEjB,EAAI,cAAcgB,GAASC,GAAcL,CAAS,IAF/B;AAAA,EAG5B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAqBO,SAASM,GACdhB,GACAiB,GACAC,GACS;AAET,MADID,EAAiB,WAAW3C,KAE9B4C,EAAiB,SAAS3C,MAC1B2C,EAAiB,SAAS1C;AAE1B,WAAO;AAIT,MAAI;AAEF,QAAI,CAACsB,EAAI,kBAAkBmB,CAAgB,EAAG,QAAO;AAIrD,UAAM,EAAE,WAAAP,GAAW,UAAAC,EAAA,IAAaQ,EAAQ,UAAU;AAAA,MAChDb,EAAO,KAAKY,CAAgB;AAAA,IAAA;AAE9B,QAAIP,MAAaP,EAAY,YAAa,QAAO;AAGjD,UAAMgB,IAASP,EAAS,OAAO,EAAE,QAAQP,EAAO,KAAKW,CAAgB,GAAG;AACxE,QAAI,CAACG,EAAO,UAAU,CAACA,EAAO,KAAM,QAAO;AAE3C,UAAMb,IAASR,EAAuBC,GAAcoB,EAAO,MAAM,GAM3DC,IAAaR,EAAS,MAAM,EAAE,MAAMO,EAAO,KAAA,CAAM,EAAE;AACzD,QAAI,CAACC,EAAY,QAAO;AACxB,UAAMP,IAAUP,EAAO,iBAAiB,GAAGc,GAAY5C,GAAWkC,CAAQ;AAI1E,WAAOb,EAAI,OAAOgB,GAASG,GAAkBP,GAAW,EAAI;AAAA,EAC9D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AC/QA,MAAMY,IAAa,OAGbC,IAAmB,KAGnBC,IAAa,YAGbC,IAAY;AAQX,SAASC,GAAiCC,GAAuB;AACtE,MACE,CAAC,OAAO,UAAUA,CAAO,KACzBA,IAAU,KACVA,IAAUH;AAEV,UAAM,IAAI;AAAA,MACR,sEAAsEG,CAAO;AAAA,IAAA;AAGnF;AAMO,SAASC,GAAuBC,GAAuC;AAC5E,QAAMC,IAAmB,CAAA;AA+FzB,MA7FID,EAAO,kBAAkB,MAC3BC,EAAO;AAAA,IACL,wCAAwCD,EAAO,cAAc;AAAA,EAAA,GAG7DA,EAAO,iBAAiB,OAAOP,CAAU,KAC3CQ,EAAO;AAAA,IACL,kBAAkBD,EAAO,cAAc,wBAAwBP,CAAU;AAAA,EAAA,GAIzEO,EAAO,2BAA2B,MACpCC,EAAO;AAAA,IACL,iDAAiDD,EAAO,uBAAuB;AAAA,EAAA,GAI/EA,EAAO,WAAW,KACpBC,EAAO,KAAK,iCAAiCD,EAAO,OAAO,EAAE,GAG3DA,EAAO,UAAU,KACnBC,EAAO,KAAK,gCAAgCD,EAAO,MAAM,EAAE,GAGzDA,EAAO,oBAAoB,WAAW,KACxCC,EAAO,KAAK,uCAAuC,GAGjDD,EAAO,iBAAiB,KAC1BC,EAAO,KAAK,uCAAuCD,EAAO,aAAa,EAAE,GAEvEA,EAAO,gBAAgBA,EAAO,oBAAoB,UACpDC,EAAO;AAAA,IACL,kBAAkBD,EAAO,aAAa,wCAAwCA,EAAO,oBAAoB,MAAM;AAAA,EAAA,GAI/GA,EAAO,WAAW,MACpBC,EAAO,KAAK,iCAAiCD,EAAO,OAAO,EAAE,GAG3DA,EAAO,mBAAmB,MAC5BC,EAAO;AAAA,IACL,yCAAyCD,EAAO,eAAe;AAAA,EAAA,IAKjE,CAAC,OAAO,UAAUA,EAAO,oBAAoB,KAC7CA,EAAO,uBAAuB,KAC9BA,EAAO,uBAAuBP,MAE9BQ,EAAO;AAAA,IACL,8CAA8CD,EAAO,oBAAoB;AAAA,EAAA,IAK3E,CAAC,OAAO,UAAUA,EAAO,gBAAgB,KACzCA,EAAO,oBAAoB,KAC3BA,EAAO,mBAAmBL,MAE1BM,EAAO;AAAA,IACL,4CAA4CN,CAAU,UAAUK,EAAO,gBAAgB;AAAA,EAAA,GAIvFA,EAAO,sBAAsB,KAC/BC,EAAO;AAAA,IACL,4CAA4CD,EAAO,kBAAkB;AAAA,EAAA,GAGrEA,EAAO,2BAA2B,KACpCC,EAAO;AAAA,IACL,iDAAiDD,EAAO,uBAAuB;AAAA,EAAA,GAG/EA,EAAO,0BAA0BA,EAAO,sBAC1CC,EAAO;AAAA,IACL,4BAA4BD,EAAO,uBAAuB,iCAAiCA,EAAO,kBAAkB;AAAA,EAAA,IAKtHA,EAAO,qBAAqB,KAC5BA,EAAO,qBAAqBN,MAE5BO,EAAO;AAAA,IACL,qCAAqCP,CAAgB,UAAUM,EAAO,kBAAkB;AAAA,EAAA,GAIxFC,EAAO,SAAS;AAClB,UAAM,IAAI;AAAA,MACR,yCAAyCA,EAAO,KAAK,IAAI,CAAC;AAAA,IAAA;AAGhE;AAMO,SAASC,GAA0BF,GAAiC;AACzE,QAAMC,IAAmB,CAAA;AA6CzB,MA3CID,EAAO,sBAAsB,MAC/BC,EAAO;AAAA,IACL,4CAA4CD,EAAO,kBAAkB;AAAA,EAAA,GAIrEA,EAAO,iBAAiBA,EAAO,sBACjCC,EAAO;AAAA,IACL,mBAAmBD,EAAO,cAAc,oCAAoCA,EAAO,kBAAkB;AAAA,EAAA,GAIrGA,EAAO,mBAAmB,MAC5BC,EAAO;AAAA,IACL,yCAAyCD,EAAO,eAAe;AAAA,EAAA,GAI/DA,EAAO,0BAA0B,MACnCC,EAAO;AAAA,IACL,gDAAgDD,EAAO,sBAAsB;AAAA,EAAA,IAK/E,CAAC,OAAO,UAAUA,EAAO,kBAAkB,KAC3CA,EAAO,sBAAsB,KAC7BA,EAAO,qBAAqBJ,MAE5BK,EAAO;AAAA,IACL,gDAAgDL,CAAS,UAAUI,EAAO,kBAAkB;AAAA,EAAA,IAK9F,OAAOA,EAAO,2BAA4B,YAC1CA,EAAO,2BAA2B,OAElCC,EAAO;AAAA,IACL,0DAA0DD,EAAO,uBAAuB;AAAA,EAAA,GAIxFC,EAAO,SAAS;AAClB,UAAM,IAAI,MAAM,oCAAoCA,EAAO,KAAK,IAAI,CAAC,EAAE;AAE3E;AASO,SAASE,GAA2BC,GAAkC;AAI3E,MAHAF,GAA0BE,CAAM,GAChCL,GAAuBK,EAAO,cAAc,GAG1C,CAAC,OAAO,UAAUA,EAAO,qBAAqB,KAC9CA,EAAO,wBAAwB,KAC/BA,EAAO,wBAAwBT;AAE/B,UAAM,IAAI;AAAA,MACR,6EAA6ES,EAAO,qBAAqB;AAAA,IAAA;AAM7G,EAAAC;AAAA,IACED,EAAO;AAAA,IACP;AAAA,EAAA;AAEJ;ACxNA,MAAME,IAAwB;AA8B9B,SAASC,EAAkBC,GAA2C;AACpE,SAAO;AAAA,IACL,WAAWA,EAAO;AAAA,IAClB,oBAAoBA,EAAO;AAAA,IAC3B,QAAQA,EAAO;AAAA,IACf,eAAeA,EAAO;AAAA,IACtB,QAAQA,EAAO;AAAA,IACf,uBAAuBA,EAAO;AAAA,IAC9B,WAAWA,EAAO;AAAA,EAAA;AAEtB;AAEA,SAASC,EAAqBD,GAAiD;AAC7E,QAAME,IAAwB,OAAOF,EAAO,qBAAqB;AACjE,SAAAX,GAAiCa,CAAqB,GAC/C;AAAA,IACL,wBAAwBF,EAAO;AAAA,IAC/B,6BAA6BA,EAAO;AAAA,IACpC,wBAAwBA,EAAO;AAAA,IAC/B,uBAAAE;AAAA,IACA,YAAYF,EAAO;AAAA,IACnB,qBAAqBA,EAAO;AAAA,IAC5B,UAAUA,EAAO;AAAA,IACjB,UAAUA,EAAO;AAAA,IACjB,uBAAuBA,EAAO;AAAA,IAC9B,gBAAgBA,EAAO;AAAA,IACvB,4BAA4BA,EAAO;AAAA,IACnC,mBAAmBA,EAAO;AAAA,IAC1B,kBAAkBA,EAAO;AAAA,EAAA;AAE7B;AA0BA,MAAMG,KAA+B,MAAM,KAUrCC,IAAuB;AAE7B,SAASC,EACPC,GACAC,GACAC,GACQ;AACR,MAAIF,IAAQ,MAAMA,KAASH;AACzB,UAAM,IAAI;AAAA,MACR,oCAAoCI,CAAK,IAAID,CAAK,cAAcE,CAAO;AAAA,IAAA;AAI3E,SAAOF;AACT;AAEA,SAASG,EAAaT,GAAmBQ,GAAyB;AAChE,SAAO;AAAA,IACL,YAAYH,EAAmBL,EAAO,YAAY,cAAcQ,CAAO;AAAA,IACvE,mBAAmBH;AAAA,MACjBL,EAAO;AAAA,MACP;AAAA,MACAQ;AAAA,IAAA;AAAA,IAEF,YAAYH,EAAmBL,EAAO,YAAY,cAAcQ,CAAO;AAAA,EAAA;AAE3E;AAWO,MAAME,GAAuD;AAAA,EAClE,YACUC,GACAC,GACR;AAFQ,SAAA,eAAAD,GACA,KAAA,kBAAAC;AAAA,EACP;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyBH,MAAM,iCACJC,GAC2B;AAC3B,UAAMb,IAAU,MAAM,KAAK,aAAa,aAAa;AAAA,MACnD,SAAS,KAAK;AAAA,MACd,KAAKc;AAAA,MACL,cAAc;AAAA,MACd,MAAM,CAACD,GAAWT,CAAoB;AAAA,IAAA,CACvC;AACD,WAAOW;AAAA,MACLf;AAAA,MACA,iCAAiCa,CAAS,WAAWT,CAAoB;AAAA,IAAA;AAAA,EAE7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,uCACJS,GAC2B;AAC3B,UAAMb,IAAU,MAAM,KAAK,aAAa,aAAa;AAAA,MACnD,SAAS,KAAK;AAAA,MACd,KAAKc;AAAA,MACL,cAAc;AAAA,MACd,MAAM,CAACD,CAAS;AAAA,IAAA,CACjB;AACD,WAAOE;AAAA,MACLf;AAAA,MACA,iCAAiCa,CAAS;AAAA,IAAA;AAAA,EAE9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAM,kBAAkBL,GAAkC;AACxD,UAAMR,IAAU,MAAM,KAAK,aAAa,aAAa;AAAA,MACnD,SAAS,KAAK;AAAA,MACd,KAAKgB;AAAA,MACL,cAAc;AAAA,MACd,MAAM,CAACR,CAAO;AAAA,IAAA,CACf;AAED,WAAOC,EAAaT,GAAQQ,CAAO;AAAA,EACrC;AAAA,EAEA,MAAM,uBAAuBS,GAAgD;AAC3E,WAAIA,EAAS,WAAW,IAAU,CAAA,KAElB,MAAM,KAAK,aAAa,UAAU;AAAA,MAChD,WAAWA,EAAS,IAAI,CAACT,OAAa;AAAA,QACpC,SAAS,KAAK;AAAA,QACd,KAAKQ;AAAA,QACL,cAAc;AAAA,QACd,MAAM,CAACR,CAAO;AAAA,MAAA,EACd;AAAA,MACF,cAAc;AAAA,IAAA,CACf,GAEc;AAAA,MAAI,CAACU,GAAM,MACxBT,EAAaS,GAA8BD,EAAS,CAAC,CAAC;AAAA,IAAA;AAAA,EAE1D;AAAA,EAEA,MAAM,kBAAkBT,GAAuC;AAC7D,UAAMR,IAAU,MAAM,KAAK,aAAa,aAAa;AAAA,MACnD,SAAS,KAAK;AAAA,MACd,KAAKc;AAAA,MACL,cAAc;AAAA,MACd,MAAM,CAACN,CAAO;AAAA,IAAA,CACf;AAED,WAAOT,EAAkBC,CAAM;AAAA,EACjC;AAAA,EAEA,MAAM,qBAAqBQ,GAA0C;AACnE,UAAMR,IAAU,MAAM,KAAK,aAAa,aAAa;AAAA,MACnD,SAAS,KAAK;AAAA,MACd,KAAKc;AAAA,MACL,cAAc;AAAA,MACd,MAAM,CAACN,CAAO;AAAA,IAAA,CACf;AAED,WAAOP,EAAqBD,CAAM;AAAA,EACpC;AAAA,EAEA,MAAM,qBACJiB,GAC8B;AAC9B,WAAIA,EAAS,WAAW,IAAU,CAAA,KAElB,MAAM,KAAK,aAAa,UAAU;AAAA,MAChD,WAAWA,EAAS,IAAI,CAACT,OAAa;AAAA,QACpC,SAAS,KAAK;AAAA,QACd,KAAKM;AAAA,QACL,cAAc;AAAA,QACd,MAAM,CAACN,CAAO;AAAA,MAAA,EACd;AAAA,MACF,cAAc;AAAA,IAAA,CACf,GAEc,IAAI,CAACU,GAAM,MAAM;AAC9B,YAAMlB,IAASkB;AACf,UACE,CAAClB,EAAO,0BACRA,EAAO,2BAA2B;AAQlC,cAAM,IAAI;AAAA,UACR,SAASiB,EAAS,CAAC,CAAC;AAAA,QAAA;AAGxB,aAAOhB,EAAqBD,CAAM;AAAA,IACpC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,YAAYmB,GAAyC;AACzD,WAAQ,MAAM,KAAK,aAAa,aAAa;AAAA,MAC3C,SAAS,KAAK;AAAA,MACd,KAAKL;AAAA,MACL,cAAc;AAAA,MACd,MAAM,CAACK,CAAa;AAAA,IAAA,CACrB;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,2BAA2BA,GAAyC;AAExE,UAAMC,IAAM,MAAM,KAAK,aAAa,aAAa;AAAA,MAC/C,SAAS,KAAK;AAAA,MACd,KAAKN;AAAA,MACL,cAAc;AAAA,MACd,MAAM,CAACK,CAAa;AAAA,IAAA,CACrB;AAED,QAAI,CAAC,OAAO,UAAUC,CAAG,KAAKA,IAAM,KAAKA,IAAMtB;AAC7C,YAAM,IAAI;AAAA,QACR,uCAAuCsB,CAAG,YAAYD,CAAa,oCAC/BrB,CAAqB;AAAA,MAAA;AAI7D,WAAOsB;AAAA,EACT;AAAA,EAEA,MAAM,aAAaZ,GAAkC;AAInD,UAAM,CAACa,GAAUC,CAAW,IAAI,MAAM,KAAK,aAAa,UAAU;AAAA,MAChE,WAAW;AAAA,QACT;AAAA,UACE,SAAS,KAAK;AAAA,UACd,KAAKR;AAAA,UACL,cAAc;AAAA,UACd,MAAM,CAACN,CAAO;AAAA,QAAA;AAAA,QAEhB;AAAA,UACE,SAAS,KAAK;AAAA,UACd,KAAKM;AAAA,UACL,cAAc;AAAA,UACd,MAAM,CAACN,CAAO;AAAA,QAAA;AAAA,MAChB;AAAA,MAEF,cAAc;AAAA,IAAA,CACf,GAEKe,IAAQxB,EAAkBsB,CAAQ,GAClCG,IAAWvB,EAAqBqB,CAAW;AAEjD,QACE,CAACE,EAAS,0BACVA,EAAS,2BAA2B;AAEpC,YAAM,IAAI;AAAA,QACR,SAAShB,CAAO;AAAA,MAAA;AAIpB,WAAO,EAAE,OAAAe,GAAO,UAAAC,EAAA;AAAA,EAClB;AAEF;AC7XA,MAAMC,KAAe,OAAa,KAG5BC,IAA6B;AAMnC,eAAeC,EACbC,GACAC,GACmB;AACnB,QAAMC,IAAa,IAAI,gBAAA,GACjBC,IAAY;AAAA,IAChB,MAAMD,EAAW,MAAA;AAAA,IACjBJ;AAAA,EAAA,GAIIM,IAAU,CAACF,EAAW,QAAQD,KAAA,gBAAAA,EAAS,MAAM,EAAE;AAAA,IACnD;AAAA,EAAA,GAEII,IAAWC,EAAoBF,CAAO;AAE5C,MAAI;AAKF,WAAO,MAAM,MAAMJ,GAAK;AAAA,MACtB,GAAGC;AAAA,MACH,QAAQI,EAAS;AAAA,IAAA,CAClB;AAAA,EACH,SAASE,GAAO;AAGd,UAFA,aAAaJ,CAAS,GACtBE,EAAS,QAAA,GAEPE,KAAS,QACT,OAAOA,KAAU,YACjB,UAAUA,KACVA,EAAM,SAAS,eAET,IAAI;AAAA,MACR,uCAAuCT,CAA0B,OAAOE,CAAG;AAAA,IAAA,IAGzEO;AAAA,EACR;AACF;AAMA,MAAMC,IAAe;AAErB,SAASC,EAAoB/B,GAAwB;AACnD,SAAO,OAAO,UAAUA,CAAK,KAAKA,IAAQ,KAAKA,KAASmB;AAC1D;AAEA,SAASa,GAAehC,GAAwB;AAC9C,SAAO,OAAO,UAAUA,CAAK,KAAKA,IAAQ,KAAKA,KAAS8B;AAC1D;AAEA,SAASG,EAAYC,GAAcC,GAA+B;AAChE,SAAI,CAAC,OAAO,UAAUD,CAAI,KAAKA,IAAO,IAAU,KACzCC,MAAgB,UAAaD,IAAOC;AAC7C;AAGA,SAASC,EAAgBC,GAAoB;AAC3C,MAAI,CAACC,EAAQ,KAAKD,CAAI;AACpB,UAAM,IAAI,MAAM,kCAAkCA,CAAI,EAAE;AAE5D;AAEA,SAASE,EAAmBC,GAAuB;AACjD,MAAI,CAACC,EAAmB,KAAKD,CAAO;AAClC,UAAM,IAAI,MAAM,mCAAmCA,CAAO,EAAE;AAEhE;AAEA,SAASE,EAAwBpF,GAAsBqF,GAAuB;AAC5E,MAAI,CAACC,EAAO,KAAKtF,CAAY;AAC3B,UAAM,IAAI;AAAA,MACR,2CAA2CqF,CAAO;AAAA,IAAA;AAMtD,MAAI,CAHqBE,EAAsB;AAAA,IAAK,CAACC,MACnDxF,EAAa,YAAA,EAAc,WAAWwF,CAAM;AAAA,EAAA;AAG5C,UAAM,IAAI;AAAA,MACR,sCAAsCH,CAAO,YACjCrF,EAAa,MAAM,GAAG,CAAC,CAAC;AAAA,IAAA;AAG1C;AAKO,MAAMyF,KAAmB;AAAA,EAC9B,SAAS;AAAA,EACT,SAAS;AAAA,EACT,QAAQ;AACV;AAKA,eAAeC,EACb1B,GACAC,GACY;AACZ,MAAI;AACF,UAAM0B,IAAW,MAAM5B,EAAiBC,GAAKC,CAAO;AAEpD,QAAI,CAAC0B,EAAS,IAAI;AAChB,YAAMC,IAAY,MAAMD,EAAS,KAAA;AACjC,YAAM,IAAI;AAAA,QACR,sBAAsBA,EAAS,MAAM,MAAMC,KAAaD,EAAS,UAAU;AAAA,MAAA;AAAA,IAE/E;AAEA,UAAME,IAAcF,EAAS,QAAQ,IAAI,cAAc;AACvD,WAAIE,KAAA,QAAAA,EAAa,SAAS,sBAChB,MAAMF,EAAS,KAAA,IAEf,MAAMA,EAAS,KAAA;AAAA,EAE3B,SAASpB,GAAO;AACd,UAAIA,aAAiB,QACb,IAAI,MAAM,qCAAqCA,EAAM,OAAO,EAAE,IAEhE,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACF;AAUA,eAAsBuB,GAAOC,GAAeC,GAAiC;AAC3E,MAAI;AACF,UAAML,IAAW,MAAM5B,EAAiB,GAAGiC,CAAM,OAAO;AAAA,MACtD,QAAQ;AAAA,MACR,MAAMD;AAAA,MACN,SAAS;AAAA,QACP,gBAAgB;AAAA,MAAA;AAAA,IAClB,CACD;AAED,QAAI,CAACJ,EAAS,IAAI;AAChB,YAAMC,IAAY,MAAMD,EAAS,KAAA;AAEjC,UAAIM;AACJ,UAAI;AACF,cAAMC,IAAY,KAAK,MAAMN,CAAS;AACtC,QAAAK,IAAUC,EAAU,WAAWA,EAAU;AAAA,MAC3C,QAAQ;AAEN,QAAAD,IAAUL;AAAA,MACZ;AACA,YAAM,IAAI;AAAA,QACRK,KAAW,oCAAoCN,EAAS,UAAU;AAAA,MAAA;AAAA,IAEtE;AAIA,WADa,MAAMA,EAAS,KAAA;AAAA,EAE9B,SAASpB,GAAO;AACd,UAAIA,aAAiB,QACb,IAAI,MAAM,wCAAwCA,EAAM,OAAO,EAAE,IAEnE,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACF;AASA,eAAsB4B,GAAUpB,GAAciB,GAAiC;AAC7E,SAAAlB,EAAgBC,CAAI,GACbW,EAAiB,GAAGM,CAAM,OAAOjB,CAAI,EAAE;AAChD;AAYA,eAAsBqB,GAAaJ,GAAiC;AAClE,QAAMK,IAAM,MAAMX,EAAiB,GAAGM,CAAM,oBAAoB,GAC1DM,IAAUD,EAAI,KAAA;AACpB,MAAI,CAAC,QAAQ,KAAKC,CAAO;AACvB,UAAM,IAAI;AAAA,MACR,sDAAsDD,CAAG;AAAA,IAAA;AAG7D,SAAO,OAAO,SAASC,GAAS,EAAE;AACpC;AAeA,eAAsBC,GACpBxB,GACAH,GACAoB,GACyB;AAEzB,MADAlB,EAAgBC,CAAI,GAChB,CAACJ,EAAYC,CAAI;AACnB,UAAM,IAAI,MAAM,gBAAgBA,CAAI,oBAAoBG,CAAI,EAAE;AAEhE,SAAOW,EAAyB,GAAGM,CAAM,OAAOjB,CAAI,aAAaH,CAAI,EAAE;AACzE;AAUA,eAAsB4B,GAASzB,GAAciB,GAAiC;AAC5E,EAAAlB,EAAgBC,CAAI;AACpB,MAAI;AACF,UAAMY,IAAW,MAAM5B,EAAiB,GAAGiC,CAAM,OAAOjB,CAAI,MAAM;AAElE,QAAI,CAACY,EAAS,IAAI;AAChB,YAAMC,IAAY,MAAMD,EAAS,KAAA;AACjC,YAAM,IAAI;AAAA,QACR,sBAAsBA,EAAS,MAAM,MAAMC,KAAaD,EAAS,UAAU;AAAA,MAAA;AAAA,IAE/E;AAEA,WAAO,MAAMA,EAAS,KAAA;AAAA,EACxB,SAASpB,GAAO;AACd,UAAIA,aAAiB,QACb,IAAI,MAAM,qCAAqCQ,CAAI,KAAKR,EAAM,OAAO,EAAE,IAEzE,IAAI,MAAM,qCAAqCQ,CAAI,iBAAiB;AAAA,EAC5E;AACF;AAaA,eAAsB0B,GACpB1B,GACAH,GACAoB,GACmB;AACnB,EAAAlB,EAAgBC,CAAI;AACpB,QAAM2B,IAAS,MAAMP,GAAUpB,GAAMiB,CAAM;AAE3C,MAAI,CAACrB,EAAYC,GAAM8B,EAAO,KAAK,MAAM;AACvC,UAAM,IAAI;AAAA,MACR,gBAAgB9B,CAAI,oBAAoBG,CAAI,SAAS2B,EAAO,KAAK,MAAM;AAAA,IAAA;AAI3E,QAAMC,IAASD,EAAO,KAAK9B,CAAI;AAC/B,MAAI,CAACH,EAAoBkC,EAAO,KAAK;AACnC,UAAM,IAAI,MAAM,sBAAsBA,EAAO,KAAK,QAAQ5B,CAAI,IAAIH,CAAI,EAAE;AAE1E,SAAAQ,EAAwBuB,EAAO,cAAc,GAAG5B,CAAI,IAAIH,CAAI,EAAE,GAEvD;AAAA,IACL,MAAAG;AAAA,IACA,MAAAH;AAAA,IACA,OAAO+B,EAAO;AAAA,IACd,cAAcA,EAAO;AAAA,EAAA;AAEzB;AASA,eAAsBC,GACpB1B,GACAc,GACwB;AACxB,EAAAf,EAAmBC,CAAO;AAC1B,MAAI;AAEF,UAAM2B,IAAQ,MAAMnB,EASlB,GAAGM,CAAM,YAAYd,CAAO,OAAO,GAG/B4B,IAAc,MAAMpB,EAGvB,GAAGM,CAAM,wBAAwBd,CAAO,EAAE;AAE7C,QAAI,CAAC4B,EAAY;AACf,YAAM,IAAI;AAAA,QACR,4BAA4B5B,CAAO;AAAA,MAAA;AAGvC,IAAAE,EAAwB0B,EAAY,cAAc5B,CAAO;AAQzD,eAAW6B,KAAQF,GAAO;AAExB,UADA/B,EAAgBiC,EAAK,IAAI,GACrB,CAACpC,EAAYoC,EAAK,IAAI;AACxB,cAAM,IAAI,MAAM,gBAAgBA,EAAK,IAAI,QAAQA,EAAK,IAAI,EAAE;AAE9D,UAAI,CAACtC,EAAoBsC,EAAK,KAAK;AACjC,cAAM,IAAI;AAAA,UACR,sBAAsBA,EAAK,KAAK,QAAQA,EAAK,IAAI,IAAIA,EAAK,IAAI;AAAA,QAAA;AAAA,IAGpE;AAKA,WAFoBF,EAAM,KAAK,CAACG,GAAGC,MAAMA,EAAE,QAAQD,EAAE,KAAK,EAEvC,IAAI,CAACD,OAAU;AAAA,MAChC,MAAMA,EAAK;AAAA,MACX,MAAMA,EAAK;AAAA,MACX,OAAOA,EAAK;AAAA,MACZ,cAAcD,EAAY;AAAA,MAC1B,WAAWC,EAAK,OAAO;AAAA,IAAA,EACvB;AAAA,EACJ,SAASxC,GAAO;AACd,UAAIA,aAAiB,QACb,IAAI;AAAA,MACR,mCAAmCW,CAAO,KAAKX,EAAM,OAAO;AAAA,IAAA,IAG1D,IAAI;AAAA,MACR,mCAAmCW,CAAO;AAAA,IAAA;AAAA,EAE9C;AACF;AAQO,SAASgC,GACdC,GACQ;AACR,SAAO1B,GAAiB0B,CAAO;AACjC;AAuBA,eAAsBC,GACpBlC,GACAc,GACsB;AACtB,SAAAf,EAAmBC,CAAO,GACnBQ,EAAsB,GAAGM,CAAM,YAAYd,CAAO,MAAM;AACjE;AAWA,eAAsBmC,GAAerB,GAAsC;AACzE,QAAML,IAAW,MAAM5B,EAAiB,GAAGiC,CAAM,sBAAsB;AAEvE,MAAI,CAACL,EAAS;AACZ,UAAM,IAAI;AAAA,MACR,iCAAiCA,EAAS,MAAM,IAAIA,EAAS,UAAU;AAAA,IAAA;AAI3E,QAAMvG,IAAO,MAAMuG,EAAS,KAAA,GAEtB2B,IAAY;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAGF,aAAW3E,KAAS2E;AAClB,QAAI,CAAC5C,GAAetF,EAAKuD,CAAK,CAAC;AAC7B,YAAM,IAAI;AAAA,QACR,oBAAoBA,CAAK,IAAIvD,EAAKuD,CAAK,CAAC,mDAAmD6B,CAAY;AAAA,MAAA;AAK7G,MACEpF,EAAK,aAAaA,EAAK,cACvBA,EAAK,aAAaA,EAAK,WACvBA,EAAK,UAAUA,EAAK,eACpBA,EAAK,cAAcA,EAAK;AAExB,UAAM,IAAI;AAAA,MACR,sEACiBA,EAAK,UAAU,oBAAoBA,EAAK,UAAU,iBACrDA,EAAK,OAAO,qBAAqBA,EAAK,WAAW,oBAC9CA,EAAK,UAAU;AAAA,IAAA;AAIpC,SAAOA;AACT;"}

package/dist/verifyKeyPathSchnorrSignature-DCOzQkDf.cjs

@@ -1,2 +0,0 @@
-"use strict";const T=require("@babylonlabs-io/babylon-tbv-rust-wasm"),u=require("bitcoinjs-lib"),p=require("buffer"),h=require("./bitcoin-m84N5a8o.cjs"),A=require("@bitcoin-js/tiny-secp256k1-asmjs");function R(t){const r=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(t){for(const e in t)if(e!=="default"){const n=Object.getOwnPropertyDescriptor(t,e);Object.defineProperty(r,e,n.get?n:{enumerable:!0,get:()=>t[e]})}}return r.default=t,Object.freeze(r)}const w=R(A);async function C(t){var b;const r=h.stripHexPrefix(t.peginTxHex),e=h.stripHexPrefix(t.fundedPrePeginTxHex),n=await T.getPrePeginHtlcConnectorInfo({txGraphVersion:t.vaultCoreVersion,depositorPubkey:t.depositorPubkey,vaultProviderPubkey:t.vaultProviderPubkey,vaultKeeperPubkeys:t.vaultKeeperPubkeys,universalChallengerPubkeys:t.universalChallengerPubkeys,hashlock:t.hashlock,timelockRefund:t.timelockRefund,network:t.network}),o=u.Transaction.fromHex(r),a=u.Transaction.fromHex(e);if(o.ins.length!==1)throw new Error(`PegIn transaction must have exactly 1 input, got ${o.ins.length}`);const s=o.ins[0],i=a.getId(),f=h.uint8ArrayToHex(new Uint8Array(s.hash).slice().reverse());if(f!==i)throw new Error(`PegIn input does not reference the Pre-PegIn transaction. Expected ${i}, got ${f}`);const g=a.outs[s.index];if(!g)throw new Error(`Pre-PegIn output ${s.index} not found (Pre-PegIn has ${a.outs.length} outputs)`);const P=h.hexToUint8Array(n.hashlockScript),l=h.hexToUint8Array(n.hashlockControlBlock);h.assertEccInitialized();const c=u.payments.p2tr({internalPubkey:p.Buffer.from(T.tapInternalPubkey),scriptTree:[{output:p.Buffer.from(P),version:h.TAPSCRIPT_LEAF_VERSION},{output:p.Buffer.from(h.hexToUint8Array(n.refundScript)),version:h.TAPSCRIPT_LEAF_VERSION}]});if(!((b=c.output)!=null&&b.equals(g.script))||!c.hash)throw new Error("PegIn HTLC taptree mismatch: the recomputed 2-leaf tree does not reproduce the funded Pre-PegIn HTLC scriptPubKey; refusing to sign.");const d=new u.Psbt;d.setVersion(o.version),d.setLocktime(o.locktime),d.addInput({hash:s.hash,index:s.index,sequence:s.sequence,witnessUtxo:{script:g.script,value:g.value},tapLeafScript:[{leafVersion:h.TAPSCRIPT_LEAF_VERSION,script:p.Buffer.from(P),controlBlock:p.Buffer.from(l)}],tapInternalKey:p.Buffer.from(T.tapInternalPubkey),tapMerkleRoot:c.hash});for(const H of o.outs)d.addOutput({script:H.script,value:H.value});return{psbtHex:d.toHex()}}function K(t,r){const n=u.Psbt.fromHex(t).data.inputs[0];if(!n)throw new Error("PegIn PSBT has no inputs");if(n.tapScriptSig&&n.tapScriptSig.length>0){const o=p.Buffer.from(h.hexToUint8Array(r));for(const a of n.tapScriptSig)if(a.pubkey.equals(o))return W(a.signature);throw new Error(`No PegIn input signature found for depositor pubkey: ${r}`)}throw n.finalScriptWitness&&n.finalScriptWitness.length>0?new Error("PegIn input PSBT is already finalized. Cannot reliably extract the depositor signature from the witness stack. Ensure the wallet returns a non-finalized PSBT with tapScriptSig entries."):new Error("No tapScriptSig or finalScriptWitness found in signed PegIn input PSBT")}function U(t){const r=u.Psbt.fromHex(t);try{r.finalizeAllInputs()}catch(e){if(!r.data.inputs.every(o=>o.finalScriptWitness||o.finalScriptSig))throw new Error(`PSBT finalization failed and wallet did not auto-finalize: ${e}`)}return r.extractTransaction().toHex()}function W(t){if(t.length===64)return h.uint8ArrayToHex(new Uint8Array(t));throw t.length===65?new Error(`Unexpected sighash byte 0x${t[64].toString(16).padStart(2,"0")} in PegIn input signature. Expected implicit SIGHASH_DEFAULT as a 64-byte signature.`):new Error(`Unexpected PegIn input signature length: ${t.length}`)}const x=253,L=254,m=3,_=5,O=253,q=65536;function E(t,r){let e=0;const n=()=>{if(e>=t.length)throw new Error(`${r} is truncated`);const s=t[e];if(s<x)return e+=1,s;if(s===x){if(e+m>t.length)throw new Error(`${r} is truncated`);const i=t[e+1]|t[e+2]<<8;if(i<O)throw new Error(`${r} has a non-minimal length encoding`);return e+=m,i}if(s===L){if(e+_>t.length)throw new Error(`${r} is truncated`);const i=(t[e+1]|t[e+2]<<8|t[e+3]<<16|t[e+4]<<24)>>>0;if(i<q)throw new Error(`${r} has a non-minimal length encoding`);return e+=_,i}throw new Error(`${r} carries an out-of-range item length`)},o=n(),a=[];for(let s=0;s<o;s++){const i=n();if(e+i>t.length)throw new Error(`${r} is truncated`);a.push(t.subarray(e,e+i)),e+=i}if(e!==t.length)throw new Error(`${r} has trailing bytes`);return a}const v=22,z=0,N=20,M=2,F=33,G=2;function $(t){return t!==void 0&&t.length===v&&t[0]===z&&t[1]===N}function y(t,r){return t.length===r.length&&t.every((e,n)=>e===r[n])}function V(t,r){const e=E(t,"finalScriptWitness");if(e.length!==G)throw new Error(`Returned PSBT input ${r}: a finalized P2WPKH witness must have exactly 2 items [signature, pubkey], got ${e.length}.`);return{signature:e[0],pubkey:e[1]}}function D(t){const{requestedPsbtHex:r,returnedInput:e,inputIndex:n}=t,o=e.partialSig;if(o!==void 0&&o.length>1)throw new Error(`Returned PSBT input ${n}: a P2WPKH input must carry at most one partial signature, got ${o.length}.`);const a=o==null?void 0:o[0],s=e.finalScriptWitness?V(e.finalScriptWitness,n):void 0;if(a&&s&&(!y(a.signature,s.signature)||!y(a.pubkey,s.pubkey)))throw new Error(`Returned PSBT input ${n} finalized witness does not match its partialSig.`);const i=a??s;if(!i)throw new Error(`Returned PSBT input ${n} carries no P2WPKH signature (no partialSig, not finalized).`);Y(r,i.signature,i.pubkey,n)}function Y(t,r,e,n){const o=u.Psbt.fromHex(t);if(n<0||n>=o.data.inputs.length)throw new Error(`Input index ${n} out of range (${o.data.inputs.length} inputs).`);const a=o.data.inputs[n].witnessUtxo;if(!a||!$(a.script))throw new Error(`Input ${n} of the requested PSBT is not a P2WPKH input.`);if(e.length!==F)throw new Error(`Returned PSBT input ${n}: P2WPKH pubkey must be 33 bytes, got ${e.length}.`);if(!w.isPointCompressed(e))throw new Error(`Returned PSBT input ${n}: P2WPKH pubkey is not a valid secp256k1 point.`);const s=a.script.subarray(M,v);if(!y(u.crypto.hash160(p.Buffer.from(e)),s))throw new Error(`Returned PSBT input ${n}: P2WPKH pubkey does not hash to the prevout's witness program.`);let i;try{i=u.script.signature.decode(p.Buffer.from(r))}catch(c){throw new Error(`Returned PSBT input ${n}: P2WPKH signature is not DER with a defined sighash byte: ${c instanceof Error?c.message:String(c)}`)}if(i.hashType!==u.Transaction.SIGHASH_ALL)throw new Error(`Returned PSBT input ${n}: P2WPKH signature has sighash type 0x${i.hashType.toString(16)} (expected SIGHASH_ALL).`);const f=u.payments.p2pkh({hash:p.Buffer.from(s)}).output;if(!f)throw new Error(`Returned PSBT input ${n}: could not build the P2WPKH scriptCode.`);const P=u.Transaction.fromBuffer(o.data.globalMap.unsignedTx.toBuffer()).hashForWitnessV0(n,f,a.value,i.hashType);let l=!1;try{l=w.verify(P,e,i.signature,!0)}catch{l=!1}if(!l)throw new Error(`P2WPKH signature for input ${n} does not verify against the requested PSBT's prevout. The wallet may have signed a different transaction or key.`)}const S=64,Z=u.Transaction.SIGHASH_DEFAULT,I=u.Transaction.SIGHASH_ALL,X=34,J=81,Q=32,j=2;function tt(t){return t!==void 0&&t.length===X&&t[0]===J&&t[1]===Q}function et(t,r){if(t.length===S)return{signature:t,hashType:Z};if(t.length===S+1&&t[S]===I)return{signature:t.subarray(0,S),hashType:I};throw new Error(`Key-path signature for input ${r} must be 64 bytes (SIGHASH_DEFAULT) or 65 bytes ending in 0x01 (SIGHASH_ALL), got ${t.length}.`)}function B(t){const{requestedPsbtHex:r,signatureHex:e,inputIndex:n}=t,o=u.Psbt.fromHex(r);if(n<0||n>=o.data.inputs.length)throw new Error(`Input index ${n} out of range (${o.data.inputs.length} inputs).`);if(!k(o.data.inputs[n]))throw new Error(`Input ${n} of the requested PSBT is not a key-path P2TR input.`);const a=[],s=[];for(let c=0;c<o.data.inputs.length;c++){const d=o.data.inputs[c].witnessUtxo;if(!d)throw new Error(`Cannot verify signature: input ${c} of the requested PSBT has no witnessUtxo (required to recompute the Taproot sighash).`);a.push(d.script),s.push(d.value)}const{signature:i,hashType:f}=et(h.hexToUint8Array(h.stripHexPrefix(e)),n),P=u.Transaction.fromBuffer(o.data.globalMap.unsignedTx.toBuffer()).hashForWitnessV1(n,a,s,f),l=a[n].subarray(j);if(!w.verifySchnorr(P,l,i))throw new Error(`Key-path Schnorr signature for input ${n} does not verify against the requested PSBT's prevout (output key ${p.Buffer.from(l).toString("hex")}). The wallet may have signed a different transaction or key.`)}function k(t){var r;return t.tapInternalKey!==void 0&&t.tapLeafScript===void 0&&t.tapMerkleRoot===void 0&&tt((r=t.witnessUtxo)==null?void 0:r.script)}function nt(t,r){const e=E(t,"finalScriptWitness");if(e.length!==1)throw new Error(`Returned PSBT input ${r}: a finalized key-path witness must have exactly one item, got ${e.length}.`);return e[0]}function rt(t,r){return t.length===r.length&&t.every((e,n)=>e===r[n])}function ot(t){const{requestedPsbtHex:r,returnedPsbtHex:e}=t,n=u.Psbt.fromHex(r),o=u.Psbt.fromHex(e);if(o.data.inputs.length!==n.data.inputs.length)throw new Error(`Returned PSBT input count ${o.data.inputs.length} differs from the requested ${n.data.inputs.length}.`);let a=0;return n.data.inputs.forEach((s,i)=>{var c;const f=o.data.inputs[i];if(!k(s)){$((c=s.witnessUtxo)==null?void 0:c.script)&&D({requestedPsbtHex:r,returnedInput:f,inputIndex:i});return}a++;const g=f.tapKeySig,P=f.finalScriptWitness?nt(f.finalScriptWitness,i):void 0;if(g&&P&&!rt(g,P))throw new Error(`Returned PSBT input ${i} finalized witness does not match its tapKeySig.`);const l=g??P;if(!l)throw new Error(`Returned PSBT input ${i} carries no key-path signature (no tapKeySig, not finalized).`);B({requestedPsbtHex:r,signatureHex:p.Buffer.from(l).toString("hex"),inputIndex:i})}),a}exports.assertKeyPathSchnorrSignature=B;exports.assertReturnedKeyPathSignatures=ot;exports.buildPeginInputPsbt=C;exports.decodeWitnessStack=E;exports.extractPeginInputSignature=K;exports.finalizePeginInputPsbt=U;
-//# sourceMappingURL=verifyKeyPathSchnorrSignature-DCOzQkDf.cjs.map

package/dist/verifyKeyPathSchnorrSignature-DCOzQkDf.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"verifyKeyPathSchnorrSignature-DCOzQkDf.cjs","sources":["../src/tbv/core/primitives/psbt/peginInput.ts","../src/tbv/core/utils/witness/witnessStack.ts","../src/tbv/core/primitives/psbt/verifyP2wpkhEcdsaSignature.ts","../src/tbv/core/primitives/psbt/verifyKeyPathSchnorrSignature.ts"],"sourcesContent":["/**\n * PegIn Input PSBT Builder\n *\n * Builds the PSBT for the depositor to sign the PegIn transaction's HTLC input\n * (Pre-PegIn HTLC leaf 0 — the hashlock + all-party script).\n *\n * This is the \"Sign Pegin transaction HTLC leaf 0 input\" step in the pre-pegin\n * flow. The depositor signs input 0 of the PegIn transaction,\n * which spends output 0 of the funded Pre-PegIn transaction via script-path.\n *\n * @module primitives/psbt/peginInput\n */\n\nimport {\n  getPrePeginHtlcConnectorInfo,\n  tapInternalPubkey,\n  type Network,\n} from \"@babylonlabs-io/babylon-tbv-rust-wasm\";\nimport { Psbt, Transaction, payments } from \"bitcoinjs-lib\";\nimport { Buffer } from \"buffer\";\nimport {\n  TAPSCRIPT_LEAF_VERSION,\n  assertEccInitialized,\n  hexToUint8Array,\n  stripHexPrefix,\n  uint8ArrayToHex,\n} from \"../utils/bitcoin\";\n\n/**\n * Parameters for building the PegIn input PSBT\n */\nexport interface BuildPeginInputPsbtParams {\n  /**\n   * Vault core (tx-graph) version the Pre-PegIn was built with. Must match\n   * the version passed to buildPrePeginPsbt() so the HTLC connector scripts\n   * are derived for the same graph.\n   */\n  vaultCoreVersion: number;\n  /**\n   * PegIn transaction hex (1 input spending Pre-PegIn HTLC output 0).\n   * Returned by buildPeginTxFromFundedPrePegin().\n   */\n  peginTxHex: string;\n  /**\n   * Funded Pre-PegIn transaction hex.\n   * Used to look up the HTLC output that the PegIn input spends.\n   */\n  fundedPrePeginTxHex: string;\n  /** Depositor's BTC public key (x-only, 64-char hex) */\n  depositorPubkey: string;\n  /** Vault provider's BTC public key (x-only, 64-char hex) */\n  vaultProviderPubkey: string;\n  /** Vault keeper BTC public keys (x-only, 64-char hex) */\n  vaultKeeperPubkeys: string[];\n  /** Universal challenger BTC public keys (x-only, 64-char hex) */\n  universalChallengerPubkeys: string[];\n  /** SHA256 hash commitment (64 hex chars = 32 bytes) */\n  hashlock: string;\n  /** CSV timelock in blocks for the HTLC refund path */\n  timelockRefund: number;\n  /** Bitcoin network */\n  network: Network;\n}\n\n/**\n * Result of building the PegIn input PSBT\n */\nexport interface BuildPeginInputPsbtResult {\n  /** PSBT hex for the depositor to sign */\n  psbtHex: string;\n}\n\n/**\n * Build PSBT for depositor to sign the PegIn transaction's HTLC leaf 0 input.\n *\n * The PegIn transaction spends the Pre-PegIn HTLC output (output 0) via the\n * hashlock + all-party script (leaf 0). The depositor provides one of the required\n * signatures; the vault provider and keepers provide theirs separately via the\n * signPeginInput RPC.\n *\n * The PSBT uses Taproot script-path spending:\n * - witnessUtxo: the Pre-PegIn HTLC output\n * - tapLeafScript: hashlock leaf script + control block\n * - tapInternalKey: NUMS unspendable key (BIP-341 nothing-up-my-sleeve)\n *\n * @param params - PegIn input PSBT parameters\n * @returns PSBT hex ready for depositor signing\n * @throws If PegIn tx does not have exactly 1 input\n * @throws If PegIn input does not reference the Pre-PegIn HTLC output\n * @throws If Pre-PegIn tx output 0 is not found\n */\nexport async function buildPeginInputPsbt(\n  params: BuildPeginInputPsbtParams,\n): Promise<BuildPeginInputPsbtResult> {\n  const peginTxHex = stripHexPrefix(params.peginTxHex);\n  const fundedPrePeginTxHex = stripHexPrefix(params.fundedPrePeginTxHex);\n\n  const htlcConnector = await getPrePeginHtlcConnectorInfo({\n    txGraphVersion: params.vaultCoreVersion,\n    depositorPubkey: params.depositorPubkey,\n    vaultProviderPubkey: params.vaultProviderPubkey,\n    vaultKeeperPubkeys: params.vaultKeeperPubkeys,\n    universalChallengerPubkeys: params.universalChallengerPubkeys,\n    hashlock: params.hashlock,\n    timelockRefund: params.timelockRefund,\n    network: params.network,\n  });\n\n  const peginTx = Transaction.fromHex(peginTxHex);\n  const prePeginTx = Transaction.fromHex(fundedPrePeginTxHex);\n\n  if (peginTx.ins.length !== 1) {\n    throw new Error(\n      `PegIn transaction must have exactly 1 input, got ${peginTx.ins.length}`,\n    );\n  }\n\n  const peginInput = peginTx.ins[0];\n\n  // Verify PegIn input 0 spends Pre-PegIn output 0\n  const prePeginTxid = prePeginTx.getId();\n  const peginInputTxid = uint8ArrayToHex(\n    new Uint8Array(peginInput.hash).slice().reverse(),\n  );\n\n  if (peginInputTxid !== prePeginTxid) {\n    throw new Error(\n      `PegIn input does not reference the Pre-PegIn transaction. ` +\n        `Expected ${prePeginTxid}, got ${peginInputTxid}`,\n    );\n  }\n\n  const htlcOutput = prePeginTx.outs[peginInput.index];\n  if (!htlcOutput) {\n    throw new Error(\n      `Pre-PegIn output ${peginInput.index} not found ` +\n        `(Pre-PegIn has ${prePeginTx.outs.length} outputs)`,\n    );\n  }\n\n  const hashlockScript = hexToUint8Array(htlcConnector.hashlockScript);\n  const hashlockControlBlock = hexToUint8Array(\n    htlcConnector.hashlockControlBlock,\n  );\n\n  // Merkle root recomputed from the two connector leaves — inert for extension\n  // wallets, byte-compared by hardware that recomputes it. The closed loop\n  // below (derived P2TR == the funded HTLC spk) is what makes it trustworthy.\n  assertEccInitialized();\n  const htlcTaptree = payments.p2tr({\n    internalPubkey: Buffer.from(tapInternalPubkey),\n    scriptTree: [\n      { output: Buffer.from(hashlockScript), version: TAPSCRIPT_LEAF_VERSION },\n      {\n        output: Buffer.from(hexToUint8Array(htlcConnector.refundScript)),\n        version: TAPSCRIPT_LEAF_VERSION,\n      },\n    ],\n  });\n  if (!htlcTaptree.output?.equals(htlcOutput.script) || !htlcTaptree.hash) {\n    throw new Error(\n      \"PegIn HTLC taptree mismatch: the recomputed 2-leaf tree does not \" +\n        \"reproduce the funded Pre-PegIn HTLC scriptPubKey; refusing to sign.\",\n    );\n  }\n\n  const psbt = new Psbt();\n  psbt.setVersion(peginTx.version);\n  psbt.setLocktime(peginTx.locktime);\n\n  // Input 0: PegIn input spending Pre-PegIn HTLC output 0 via hashlock leaf (leaf 0).\n  // The depositor signs using Taproot script-path spending. bitcoinjs\n  // re-verifies leaf-in-tree consistency (control block vs tapMerkleRoot)\n  // inside addInput — a second independent check.\n  psbt.addInput({\n    hash: peginInput.hash,\n    index: peginInput.index,\n    sequence: peginInput.sequence,\n    witnessUtxo: {\n      script: htlcOutput.script,\n      value: htlcOutput.value,\n    },\n    tapLeafScript: [\n      {\n        leafVersion: TAPSCRIPT_LEAF_VERSION,\n        script: Buffer.from(hashlockScript),\n        controlBlock: Buffer.from(hashlockControlBlock),\n      },\n    ],\n    tapInternalKey: Buffer.from(tapInternalPubkey),\n    tapMerkleRoot: htlcTaptree.hash,\n    // sighashType omitted — defaults to SIGHASH_DEFAULT (0x00) for Taproot\n  });\n\n  for (const output of peginTx.outs) {\n    psbt.addOutput({\n      script: output.script,\n      value: output.value,\n    });\n  }\n\n  return { psbtHex: psbt.toHex() };\n}\n\n/**\n * Extract the depositor's Schnorr signature from a signed PegIn input PSBT.\n *\n * Supports non-finalized PSBTs with tapScriptSig entries. Finalized PSBTs are\n * rejected because the witness stack does not reliably identify the depositor\n * signature by public key.\n *\n * PegIn input signatures must use implicit Taproot SIGHASH_DEFAULT, which is\n * encoded by omitting the sighash byte. Signatures with an appended sighash byte\n * are rejected rather than stripped.\n *\n * @param signedPsbtHex - Signed PSBT hex\n * @param depositorPubkey - Depositor's x-only public key (64-char hex)\n * @returns 64-byte Schnorr signature (128 hex chars, no sighash flag)\n * @throws If no signature is found for the depositor's key\n */\nexport function extractPeginInputSignature(\n  signedPsbtHex: string,\n  depositorPubkey: string,\n): string {\n  const signedPsbt = Psbt.fromHex(signedPsbtHex);\n  const input = signedPsbt.data.inputs[0];\n\n  if (!input) {\n    throw new Error(\"PegIn PSBT has no inputs\");\n  }\n\n  // Non-finalized PSBT — extract from tapScriptSig\n  if (input.tapScriptSig && input.tapScriptSig.length > 0) {\n    const depositorPubkeyBytes = Buffer.from(hexToUint8Array(depositorPubkey));\n\n    for (const sigEntry of input.tapScriptSig) {\n      if (sigEntry.pubkey.equals(depositorPubkeyBytes)) {\n        return extractSchnorrSig(sigEntry.signature);\n      }\n    }\n\n    throw new Error(\n      `No PegIn input signature found for depositor pubkey: ${depositorPubkey}`,\n    );\n  }\n\n  // Finalized PSBT — the witness stack order depends on the wallet's finalizer,\n  // so we cannot reliably pick the depositor's signature by position. Require\n  // the non-finalized tapScriptSig path which identifies signatures by pubkey.\n  if (input.finalScriptWitness && input.finalScriptWitness.length > 0) {\n    throw new Error(\n      \"PegIn input PSBT is already finalized. Cannot reliably extract the \" +\n        \"depositor signature from the witness stack. Ensure the wallet returns \" +\n        \"a non-finalized PSBT with tapScriptSig entries.\",\n    );\n  }\n\n  throw new Error(\n    \"No tapScriptSig or finalScriptWitness found in signed PegIn input PSBT\",\n  );\n}\n\n/**\n * Finalize a signed PegIn input PSBT and return the depositor-signed transaction hex.\n *\n * The default tapscript finalizer builds the full witness stack [sig, script, controlBlock]\n * that vaultd requires when verifying the depositor signature on-chain.\n *\n * @param signedPsbtHex - Non-finalized signed PSBT hex (returned by wallet with autoFinalized: false)\n * @returns Depositor-signed PegIn transaction hex with full taproot witness stack\n */\nexport function finalizePeginInputPsbt(signedPsbtHex: string): string {\n  const psbt = Psbt.fromHex(signedPsbtHex);\n\n  // Some wallets (UniSat, OKX) ignore autoFinalized: false and return\n  // already-finalized PSBTs. finalizeAllInputs() throws in that case,\n  // so fall back to verifying the wallet already finalized all inputs.\n  try {\n    psbt.finalizeAllInputs();\n  } catch (e) {\n    const allFinalized = psbt.data.inputs.every(\n      (inp) => inp.finalScriptWitness || inp.finalScriptSig,\n    );\n    if (!allFinalized) {\n      throw new Error(\n        `PSBT finalization failed and wallet did not auto-finalize: ${e}`,\n      );\n    }\n  }\n\n  return psbt.extractTransaction().toHex();\n}\n\n/**\n * Extract and validate a 64-byte Schnorr signature.\n * PegIn input signatures must use implicit Taproot SIGHASH_DEFAULT, which is\n * encoded by omitting the sighash byte. Reject 65-byte signatures instead of\n * stripping the sighash byte because it changes the signed Taproot message.\n * @internal\n */\nexport function extractSchnorrSig(sig: Uint8Array): string {\n  if (sig.length === 64) {\n    return uint8ArrayToHex(new Uint8Array(sig));\n  }\n  if (sig.length === 65) {\n    throw new Error(\n      `Unexpected sighash byte 0x${sig[64].toString(16).padStart(2, \"0\")} in PegIn input signature. ` +\n        \"Expected implicit SIGHASH_DEFAULT as a 64-byte signature.\",\n    );\n  }\n  throw new Error(`Unexpected PegIn input signature length: ${sig.length}`);\n}\n","/**\n * Consensus witness-stack decoding, shared by every module that reads a\n * witness we did not build.\n *\n * Two independent decoders drifted apart before this existed: one accepted\n * non-minimal CompactSize encodings, the other rejected them. vaultd decodes\n * with rust-bitcoin, whose `VarInt::consensus_decode`\n * (0.32.8 `consensus/encode.rs:493-522`) returns `NonMinimalVarInt` for a 0xfd\n * carrying < 0xfd and a 0xfe carrying < 0x10000 — so the strict reading is the\n * only one that matches what the network will accept.\n *\n * @module tbv/core/utils/witness/witnessStack\n */\n\n/** CompactSize discriminators; 0xff (u64) is out of range for a witness. */\nconst COMPACT_SIZE_UINT16_PREFIX = 0xfd;\nconst COMPACT_SIZE_UINT32_PREFIX = 0xfe;\nconst COMPACT_SIZE_UINT16_BYTES = 3;\nconst COMPACT_SIZE_UINT32_BYTES = 5;\nconst COMPACT_SIZE_UINT16_MIN_VALUE = 0xfd;\nconst COMPACT_SIZE_UINT32_MIN_VALUE = 0x10000;\n\n/**\n * Decode a consensus-encoded witness stack: item count, then (len, bytes)*.\n *\n * @param witness - The consensus-encoded witness bytes.\n * @param subject - Names the witness in error messages (e.g. \"finalScriptWitness\").\n * @returns The stack items, as views over `witness`.\n * @throws If the encoding is truncated, non-minimal, out of range, or leaves\n *         trailing bytes.\n */\nexport function decodeWitnessStack(\n  witness: Uint8Array,\n  subject: string,\n): Uint8Array[] {\n  let offset = 0;\n\n  const readCompactSize = (): number => {\n    if (offset >= witness.length) {\n      throw new Error(`${subject} is truncated`);\n    }\n    const first = witness[offset];\n    if (first < COMPACT_SIZE_UINT16_PREFIX) {\n      offset += 1;\n      return first;\n    }\n    if (first === COMPACT_SIZE_UINT16_PREFIX) {\n      if (offset + COMPACT_SIZE_UINT16_BYTES > witness.length) {\n        throw new Error(`${subject} is truncated`);\n      }\n      const value = witness[offset + 1] | (witness[offset + 2] << 8);\n      if (value < COMPACT_SIZE_UINT16_MIN_VALUE) {\n        throw new Error(`${subject} has a non-minimal length encoding`);\n      }\n      offset += COMPACT_SIZE_UINT16_BYTES;\n      return value;\n    }\n    if (first === COMPACT_SIZE_UINT32_PREFIX) {\n      if (offset + COMPACT_SIZE_UINT32_BYTES > witness.length) {\n        throw new Error(`${subject} is truncated`);\n      }\n      const value =\n        (witness[offset + 1] |\n          (witness[offset + 2] << 8) |\n          (witness[offset + 3] << 16) |\n          (witness[offset + 4] << 24)) >>>\n        0;\n      if (value < COMPACT_SIZE_UINT32_MIN_VALUE) {\n        throw new Error(`${subject} has a non-minimal length encoding`);\n      }\n      offset += COMPACT_SIZE_UINT32_BYTES;\n      return value;\n    }\n    throw new Error(`${subject} carries an out-of-range item length`);\n  };\n\n  const count = readCompactSize();\n  const items: Uint8Array[] = [];\n  for (let i = 0; i < count; i++) {\n    const len = readCompactSize();\n    if (offset + len > witness.length) {\n      throw new Error(`${subject} is truncated`);\n    }\n    items.push(witness.subarray(offset, offset + len));\n    offset += len;\n  }\n  if (offset !== witness.length) {\n    throw new Error(`${subject} has trailing bytes`);\n  }\n  return items;\n}\n","/**\n * Far-side verification of P2WPKH ECDSA signatures a wallet returned, over\n * the PSBT we requested (trusted prevouts) — the Native SegWit sibling of\n * `verifyKeyPathSchnorrSignature`. Reference: btc-vault\n * `crates/btc-wallet-remote/src/client.rs:945-1000\n * verify_finalized_p2wpkh_spend`. The wallet's success/finalization is\n * never trusted on its own (CLAUDE.md §8): prevout script and value come\n * from the PSBT we built; only the signature bytes come from the wallet.\n *\n * @module tbv/core/primitives/psbt/verifyP2wpkhEcdsaSignature\n */\n\nimport * as ecc from \"@bitcoin-js/tiny-secp256k1-asmjs\";\nimport {\n  crypto as bcrypto,\n  script as bscript,\n  payments,\n  Psbt,\n  Transaction,\n} from \"bitcoinjs-lib\";\n\nimport { Buffer } from \"buffer\";\n\nimport { decodeWitnessStack } from \"../../utils/witness/witnessStack\";\n\n// P2WPKH scriptPubKey is exactly `OP_0 OP_PUSHBYTES_20 <20-byte key hash>`\n// (BIP-141 witness program v0, 20 bytes).\nconst P2WPKH_SCRIPT_LEN = 22;\nconst OP_0 = 0x00;\nconst OP_PUSHBYTES_20 = 0x14;\nconst P2WPKH_PROGRAM_START = 2;\n\n/** SEC1 compressed pubkey (client.rs:959: \"expected a 33-byte compressed key\"). */\nconst COMPRESSED_PUBKEY_BYTES = 33;\n/** Consensus P2WPKH witness: exactly [signature, pubkey] (client.rs:951-957). */\nconst P2WPKH_WITNESS_ITEMS = 2;\n\n/** Only claim P2WPKH: 22-byte scriptPubKey starting `OP_0 PUSH20`. */\nexport function isP2wpkhScript(\n  script: Uint8Array | undefined,\n): script is Uint8Array {\n  return (\n    script !== undefined &&\n    script.length === P2WPKH_SCRIPT_LEN &&\n    script[0] === OP_0 &&\n    script[1] === OP_PUSHBYTES_20\n  );\n}\n\nfunction bytesEqual(a: Uint8Array, b: Uint8Array): boolean {\n  return a.length === b.length && a.every((byte, i) => byte === b[i]);\n}\n\n/** The `[signature, pubkey]` pair of a finalized P2WPKH witness (client.rs:951-957). */\nfunction decodeP2wpkhWitness(\n  finalScriptWitness: Uint8Array,\n  inputIndex: number,\n): { signature: Uint8Array; pubkey: Uint8Array } {\n  const items = decodeWitnessStack(finalScriptWitness, \"finalScriptWitness\");\n  if (items.length !== P2WPKH_WITNESS_ITEMS) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: a finalized P2WPKH witness must have ` +\n        `exactly 2 items [signature, pubkey], got ${items.length}.`,\n    );\n  }\n  return { signature: items[0], pubkey: items[1] };\n}\n\nexport interface AssertReturnedP2wpkhSignatureParams {\n  /** Hex of the PSBT we built and sent (trusted prevout script/value). NOT the wallet's. */\n  requestedPsbtHex: string;\n  /** The wallet-returned PSBT input carrying the signature material. */\n  returnedInput: {\n    partialSig?: Array<{ pubkey: Uint8Array; signature: Uint8Array }>;\n    finalScriptWitness?: Uint8Array;\n  };\n  /** Index of the input the signature is for. */\n  inputIndex: number;\n}\n\n/**\n * Assert that the returned input carries a valid P2WPKH ECDSA signature\n * over the BIP-143 sighash of `requestedPsbtHex` input `inputIndex`:\n * `partialSig` (BIP-174: the value is the exact witness-stack signature\n * bytes, the key its pubkey), or the finalized 2-item witness — and when\n * both are present they must be the same bytes.\n *\n * @throws If the requested input is not a P2WPKH spend, no signature was\n *         returned, a finalized witness disagrees with its `partialSig`,\n *         or any check of `verify_finalized_p2wpkh_spend` fails.\n */\nexport function assertReturnedP2wpkhSignature(\n  params: AssertReturnedP2wpkhSignatureParams,\n): void {\n  const { requestedPsbtHex, returnedInput, inputIndex } = params;\n\n  const partials = returnedInput.partialSig;\n  // Consensus allows exactly one signature in a P2WPKH witness, so a second\n  // partialSig entry is ambiguous tampering, not a fallback to pick from.\n  if (partials !== undefined && partials.length > 1) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: a P2WPKH input must carry at most one ` +\n        `partial signature, got ${partials.length}.`,\n    );\n  }\n  const partial = partials?.[0];\n  const witness = returnedInput.finalScriptWitness\n    ? decodeP2wpkhWitness(returnedInput.finalScriptWitness, inputIndex)\n    : undefined;\n\n  // Both fields can be present, and the consumers broadcast the WITNESS\n  // bytes — so the two must agree, not just one of them verify (same\n  // rationale as the tapKeySig/witness agreement check).\n  if (\n    partial &&\n    witness &&\n    (!bytesEqual(partial.signature, witness.signature) ||\n      !bytesEqual(partial.pubkey, witness.pubkey))\n  ) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex} finalized witness does not match its partialSig.`,\n    );\n  }\n\n  const material = partial ?? witness;\n  if (!material) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex} carries no P2WPKH signature ` +\n        `(no partialSig, not finalized).`,\n    );\n  }\n\n  assertP2wpkhEcdsaSignature(\n    requestedPsbtHex,\n    material.signature,\n    material.pubkey,\n    inputIndex,\n  );\n}\n\n/**\n * The crypto core, mirroring `verify_finalized_p2wpkh_spend` check by\n * check: pubkey shape and curve membership, hash160(pubkey) == witness\n * program, strict-DER + SIGHASH_ALL-only signature, ECDSA over the\n * BIP-143 sighash recomputed from the REQUESTED prevout.\n */\nfunction assertP2wpkhEcdsaSignature(\n  requestedPsbtHex: string,\n  encodedSignature: Uint8Array,\n  pubkey: Uint8Array,\n  inputIndex: number,\n): void {\n  const psbt = Psbt.fromHex(requestedPsbtHex);\n\n  if (inputIndex < 0 || inputIndex >= psbt.data.inputs.length) {\n    throw new Error(\n      `Input index ${inputIndex} out of range (${psbt.data.inputs.length} inputs).`,\n    );\n  }\n  const prevout = psbt.data.inputs[inputIndex].witnessUtxo;\n  if (!prevout || !isP2wpkhScript(prevout.script)) {\n    throw new Error(\n      `Input ${inputIndex} of the requested PSBT is not a P2WPKH input.`,\n    );\n  }\n\n  // Pubkey: exactly 33 bytes (client.rs:959-965) and a parseable curve\n  // point, as PublicKey::from_slice (client.rs:966-968).\n  if (pubkey.length !== COMPRESSED_PUBKEY_BYTES) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: P2WPKH pubkey must be 33 bytes, ` +\n        `got ${pubkey.length}.`,\n    );\n  }\n  if (!ecc.isPointCompressed(pubkey)) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: P2WPKH pubkey is not a valid secp256k1 point.`,\n    );\n  }\n\n  // hash160(pubkey) must equal the prevout's witness program — what\n  // consensus checks (client.rs:970-977).\n  const program = prevout.script.subarray(\n    P2WPKH_PROGRAM_START,\n    P2WPKH_SCRIPT_LEN,\n  );\n  if (!bytesEqual(bcrypto.hash160(Buffer.from(pubkey)), program)) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: P2WPKH pubkey does not hash to the ` +\n        `prevout's witness program.`,\n    );\n  }\n\n  // Strict-DER decode with defined-hashtype gate — the accept set of\n  // ecdsa::Signature::from_slice / EcdsaSighashType::from_standard\n  // (client.rs:978-980) — then SIGHASH_ALL exactly (client.rs:981-987).\n  let decoded: { signature: Buffer; hashType: number };\n  try {\n    decoded = bscript.signature.decode(Buffer.from(encodedSignature));\n  } catch (e) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: P2WPKH signature is not DER with a ` +\n        `defined sighash byte: ${e instanceof Error ? e.message : String(e)}`,\n    );\n  }\n  if (decoded.hashType !== Transaction.SIGHASH_ALL) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: P2WPKH signature has sighash type ` +\n        `0x${decoded.hashType.toString(16)} (expected SIGHASH_ALL).`,\n    );\n  }\n\n  // BIP-143 sighash over the REQUESTED prevout value with the standard\n  // P2WPKH scriptCode built from the witness program (client.rs:988-991;\n  // scriptCode template per bitcoinjs-lib's own P2WPKH signer,\n  // `src/psbt.js:1245-1255`).\n  const scriptCode = payments.p2pkh({ hash: Buffer.from(program) }).output;\n  if (!scriptCode) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: could not build the P2WPKH scriptCode.`,\n    );\n  }\n  const tx = Transaction.fromBuffer(psbt.data.globalMap.unsignedTx.toBuffer());\n  const sighash = tx.hashForWitnessV0(\n    inputIndex,\n    scriptCode,\n    prevout.value,\n    decoded.hashType,\n  );\n\n  // strict=true rejects high-S, as libsecp256k1's verify_ecdsa does\n  // (client.rs:992-999; secp256k1 crate `ecdsa/mod.rs:194`). ecc.verify\n  // throws on out-of-range r/s — that is a failed verification here.\n  let verifies = false;\n  try {\n    verifies = ecc.verify(sighash, pubkey, decoded.signature, true);\n  } catch {\n    verifies = false;\n  }\n  if (!verifies) {\n    throw new Error(\n      `P2WPKH signature for input ${inputIndex} does not verify against the ` +\n        `requested PSBT's prevout. The wallet may have signed a different ` +\n        `transaction or key.`,\n    );\n  }\n}\n","/**\n * Far-side verification of Taproot KEY-PATH Schnorr signatures a wallet\n * returned, over the PSBT we requested (trusted prevouts) — the key-path twin\n * of `assertScriptPathSchnorrSignature`. Reference: btc-vault\n * `crates/btc-wallet-remote/src/client.rs check_signatures_valid` (output key taken\n * from the prevout scriptPubKey, all prevouts committed). The wallet's\n * success/finalization is never trusted on its own (CLAUDE.md §8).\n * `assertReturnedKeyPathSignatures` additionally dispatches P2WPKH-funded\n * inputs to `verifyP2wpkhEcdsaSignature` (client.rs's\n * `verify_finalized_p2wpkh_spend` sibling), so a Native SegWit software\n * wallet's signatures no longer pass through unchecked.\n *\n * Why verify against the *requested* PSBT: `assertPsbtUnsignedTxMatches` pins\n * the unsigned transaction but deliberately skips per-input metadata, so a\n * wallet could rewrite `witnessUtxo` in its response and make a wrong-message\n * signature self-validate. Prevout scripts and values therefore come from the\n * PSBT we built; only the signature bytes come from the wallet.\n *\n * @module tbv/core/primitives/psbt/verifyKeyPathSchnorrSignature\n */\n\nimport * as ecc from \"@bitcoin-js/tiny-secp256k1-asmjs\";\nimport { Psbt, Transaction } from \"bitcoinjs-lib\";\n\nimport { Buffer } from \"buffer\";\n\nimport { decodeWitnessStack } from \"../../utils/witness/witnessStack\";\nimport { hexToUint8Array, stripHexPrefix } from \"../utils/bitcoin\";\nimport {\n  assertReturnedP2wpkhSignature,\n  isP2wpkhScript,\n} from \"./verifyP2wpkhEcdsaSignature\";\n\nconst SCHNORR_SIG_BYTES = 64;\nconst SIGHASH_DEFAULT = Transaction.SIGHASH_DEFAULT; // 0x00\nconst SIGHASH_ALL = Transaction.SIGHASH_ALL; // 0x01\n\n// P2TR scriptPubKey is exactly `OP_1 OP_PUSHBYTES_32 <32-byte output key>`.\nconst P2TR_SCRIPT_LEN = 34;\nconst OP_1 = 0x51;\nconst OP_PUSHBYTES_32 = 0x20;\nconst P2TR_OUTPUT_KEY_OFFSET = 2;\n\nfunction isP2trScript(script: Uint8Array | undefined): script is Uint8Array {\n  return (\n    script !== undefined &&\n    script.length === P2TR_SCRIPT_LEN &&\n    script[0] === OP_1 &&\n    script[1] === OP_PUSHBYTES_32\n  );\n}\n\n/** BIP-341: 64 bytes ⇒ SIGHASH_DEFAULT; 65 bytes ⇒ the trailing byte is the hash type (we accept ALL only). */\nfunction splitHashType(\n  sig: Uint8Array,\n  inputIndex: number,\n): { signature: Uint8Array; hashType: number } {\n  if (sig.length === SCHNORR_SIG_BYTES) {\n    return { signature: sig, hashType: SIGHASH_DEFAULT };\n  }\n  if (\n    sig.length === SCHNORR_SIG_BYTES + 1 &&\n    sig[SCHNORR_SIG_BYTES] === SIGHASH_ALL\n  ) {\n    return {\n      signature: sig.subarray(0, SCHNORR_SIG_BYTES),\n      hashType: SIGHASH_ALL,\n    };\n  }\n  throw new Error(\n    `Key-path signature for input ${inputIndex} must be 64 bytes (SIGHASH_DEFAULT) or ` +\n      `65 bytes ending in 0x01 (SIGHASH_ALL), got ${sig.length}.`,\n  );\n}\n\nexport interface AssertKeyPathSchnorrSignatureParams {\n  /** Hex of the PSBT we built and sent (trusted prevout scripts/values). NOT the wallet's. */\n  requestedPsbtHex: string;\n  /** 64- or 65-byte signature, hex. */\n  signatureHex: string;\n  /** Index of the input the signature is for. */\n  inputIndex: number;\n}\n\n/**\n * Assert that `signatureHex` is a valid BIP-340 Schnorr signature over the\n * Taproot key-path sighash of `requestedPsbtHex` input `inputIndex`, under the\n * tweaked output key taken from that input's prevout scriptPubKey.\n *\n * @throws If the input is not a key-path P2TR spend, the requested PSBT lacks\n *         the prevout data needed to recompute the sighash, or the signature\n *         does not verify.\n */\nexport function assertKeyPathSchnorrSignature(\n  params: AssertKeyPathSchnorrSignatureParams,\n): void {\n  const { requestedPsbtHex, signatureHex, inputIndex } = params;\n\n  const psbt = Psbt.fromHex(requestedPsbtHex);\n\n  if (inputIndex < 0 || inputIndex >= psbt.data.inputs.length) {\n    throw new Error(\n      `Input index ${inputIndex} out of range (${psbt.data.inputs.length} inputs).`,\n    );\n  }\n\n  if (!isKeyPathEligible(psbt.data.inputs[inputIndex])) {\n    throw new Error(\n      `Input ${inputIndex} of the requested PSBT is not a key-path P2TR input.`,\n    );\n  }\n\n  // Taproot's sighash commits to every input's prevout (script + value), so all\n  // inputs must carry a witnessUtxo. A missing one is a build error, not a\n  // value we can default — fail loudly.\n  const prevOutScripts: Buffer[] = [];\n  const values: number[] = [];\n  for (let i = 0; i < psbt.data.inputs.length; i++) {\n    const prevout = psbt.data.inputs[i].witnessUtxo;\n    if (!prevout) {\n      throw new Error(\n        `Cannot verify signature: input ${i} of the requested PSBT has no witnessUtxo ` +\n          `(required to recompute the Taproot sighash).`,\n      );\n    }\n    prevOutScripts.push(prevout.script);\n    values.push(prevout.value);\n  }\n\n  const { signature, hashType } = splitHashType(\n    hexToUint8Array(stripHexPrefix(signatureHex)),\n    inputIndex,\n  );\n\n  const tx = Transaction.fromBuffer(psbt.data.globalMap.unsignedTx.toBuffer());\n  const sighash = tx.hashForWitnessV1(\n    inputIndex,\n    prevOutScripts,\n    values,\n    hashType,\n  );\n\n  // Key-path signatures verify against the TWEAKED output key = the prevout's\n  // witness program.\n  const outputKey = prevOutScripts[inputIndex].subarray(P2TR_OUTPUT_KEY_OFFSET);\n\n  if (!ecc.verifySchnorr(sighash, outputKey, signature)) {\n    throw new Error(\n      `Key-path Schnorr signature for input ${inputIndex} does not verify against the ` +\n        `requested PSBT's prevout (output key ${Buffer.from(outputKey).toString(\"hex\")}). ` +\n        `The wallet may have signed a different transaction or key.`,\n    );\n  }\n}\n\n/**\n * A key-path P2TR input: an internal key, no script-path material, and a\n * taproot prevout. Script-path inputs are the script-path verifier's job.\n */\nfunction isKeyPathEligible(input: {\n  tapInternalKey?: Uint8Array;\n  tapLeafScript?: unknown;\n  tapMerkleRoot?: Uint8Array;\n  witnessUtxo?: { script: Uint8Array };\n}): boolean {\n  return (\n    input.tapInternalKey !== undefined &&\n    input.tapLeafScript === undefined &&\n    input.tapMerkleRoot === undefined &&\n    isP2trScript(input.witnessUtxo?.script)\n  );\n}\n\n/**\n * The lone stack item of a finalized key-path witness. An annex would add a\n * second item, but Bitcoin Core rejects annexes as nonstandard\n * (`src/policy/policy.cpp:327-329`), so such a spend could never broadcast.\n */\nfunction singleWitnessItem(\n  finalScriptWitness: Uint8Array,\n  inputIndex: number,\n): Uint8Array {\n  const items = decodeWitnessStack(finalScriptWitness, \"finalScriptWitness\");\n  if (items.length !== 1) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: a finalized key-path witness must have ` +\n        `exactly one item, got ${items.length}.`,\n    );\n  }\n  return items[0];\n}\n\nfunction bytesEqual(a: Uint8Array, b: Uint8Array): boolean {\n  return a.length === b.length && a.every((byte, i) => byte === b[i]);\n}\n\nexport interface AssertReturnedKeyPathSignaturesParams {\n  /** PSBT we built locally and asked the wallet to sign. */\n  requestedPsbtHex: string;\n  /** PSBT the wallet returned after signing. */\n  returnedPsbtHex: string;\n}\n\n/**\n * Verify every key-path-eligible and P2WPKH input of the REQUESTED PSBT\n * against what the wallet RETURNED. Key-path: `tapKeySig`, or the single\n * finalized witness item for wallets that auto-finalize — and when both are\n * present they must be the same bytes. P2WPKH: `partialSig`, or the finalized\n * 2-item witness, verified as ECDSA over the BIP-143 sighash\n * ({@link assertReturnedP2wpkhSignature}); a failure throws but the input is\n * NOT counted. Script-path and unknown script types are skipped (they have\n * their own checks).\n *\n * @returns How many inputs were verified KEY-PATH. A caller that knows every\n *          input is taproot key-path (e.g. an approval wallet) must assert\n *          this equals its input count — P2WPKH inputs never count toward it,\n *          so that gate stays exact.\n * @throws If the input counts differ, an eligible input carries no signature, a\n *         finalized witness disagrees with its `tapKeySig`/`partialSig`, or any\n *         signature does not verify.\n */\nexport function assertReturnedKeyPathSignatures(\n  params: AssertReturnedKeyPathSignaturesParams,\n): number {\n  const { requestedPsbtHex, returnedPsbtHex } = params;\n\n  const requested = Psbt.fromHex(requestedPsbtHex);\n  const returned = Psbt.fromHex(returnedPsbtHex);\n\n  if (returned.data.inputs.length !== requested.data.inputs.length) {\n    throw new Error(\n      `Returned PSBT input count ${returned.data.inputs.length} differs from the ` +\n        `requested ${requested.data.inputs.length}.`,\n    );\n  }\n\n  let verified = 0;\n  requested.data.inputs.forEach((input, inputIndex) => {\n    const returnedInput = returned.data.inputs[inputIndex];\n\n    if (!isKeyPathEligible(input)) {\n      // Native SegWit funding inputs get the ECDSA check; anything else\n      // (script-path, P2WSH, ...) is another verifier's job.\n      if (isP2wpkhScript(input.witnessUtxo?.script)) {\n        assertReturnedP2wpkhSignature({\n          requestedPsbtHex,\n          returnedInput,\n          inputIndex,\n        });\n      }\n      return;\n    }\n    verified++;\n\n    const tapKeySig = returnedInput.tapKeySig;\n    const witnessSig = returnedInput.finalScriptWitness\n      ? singleWitnessItem(returnedInput.finalScriptWitness, inputIndex)\n      : undefined;\n\n    // Both fields can be present, and the consumers broadcast the WITNESS\n    // bytes — so the two must agree, not just one of them verify. Matches\n    // btc-vault `crates/btc-wallet-remote/src/client.rs:1053-1072,1102-1121`,\n    // which checks each independently.\n    if (tapKeySig && witnessSig && !bytesEqual(tapKeySig, witnessSig)) {\n      throw new Error(\n        `Returned PSBT input ${inputIndex} finalized witness does not match its tapKeySig.`,\n      );\n    }\n\n    const sig = tapKeySig ?? witnessSig;\n    if (!sig) {\n      throw new Error(\n        `Returned PSBT input ${inputIndex} carries no key-path signature ` +\n          `(no tapKeySig, not finalized).`,\n      );\n    }\n\n    assertKeyPathSchnorrSignature({\n      requestedPsbtHex,\n      signatureHex: Buffer.from(sig).toString(\"hex\"),\n      inputIndex,\n    });\n  });\n\n  return verified;\n}\n"],"names":["buildPeginInputPsbt","params","peginTxHex","stripHexPrefix","fundedPrePeginTxHex","htlcConnector","getPrePeginHtlcConnectorInfo","peginTx","Transaction","prePeginTx","peginInput","prePeginTxid","peginInputTxid","uint8ArrayToHex","htlcOutput","hashlockScript","hexToUint8Array","hashlockControlBlock","assertEccInitialized","htlcTaptree","payments","Buffer","tapInternalPubkey","TAPSCRIPT_LEAF_VERSION","_a","psbt","Psbt","output","extractPeginInputSignature","signedPsbtHex","depositorPubkey","input","depositorPubkeyBytes","sigEntry","extractSchnorrSig","finalizePeginInputPsbt","inp","sig","COMPACT_SIZE_UINT16_PREFIX","COMPACT_SIZE_UINT32_PREFIX","COMPACT_SIZE_UINT16_BYTES","COMPACT_SIZE_UINT32_BYTES","COMPACT_SIZE_UINT16_MIN_VALUE","COMPACT_SIZE_UINT32_MIN_VALUE","decodeWitnessStack","witness","subject","offset","readCompactSize","first","value","count","items","i","len","P2WPKH_SCRIPT_LEN","OP_0","OP_PUSHBYTES_20","P2WPKH_PROGRAM_START","COMPRESSED_PUBKEY_BYTES","P2WPKH_WITNESS_ITEMS","isP2wpkhScript","script","bytesEqual","a","b","byte","decodeP2wpkhWitness","finalScriptWitness","inputIndex","assertReturnedP2wpkhSignature","requestedPsbtHex","returnedInput","partials","partial","material","assertP2wpkhEcdsaSignature","encodedSignature","pubkey","prevout","ecc","program","bcrypto","decoded","bscript","e","scriptCode","sighash","verifies","SCHNORR_SIG_BYTES","SIGHASH_DEFAULT","SIGHASH_ALL","P2TR_SCRIPT_LEN","OP_1","OP_PUSHBYTES_32","P2TR_OUTPUT_KEY_OFFSET","isP2trScript","splitHashType","assertKeyPathSchnorrSignature","signatureHex","isKeyPathEligible","prevOutScripts","values","signature","hashType","outputKey","singleWitnessItem","assertReturnedKeyPathSignatures","returnedPsbtHex","requested","returned","verified","tapKeySig","witnessSig"],"mappings":"ieA2FA,eAAsBA,EACpBC,EACoC,OACpC,MAAMC,EAAaC,EAAAA,eAAeF,EAAO,UAAU,EAC7CG,EAAsBD,EAAAA,eAAeF,EAAO,mBAAmB,EAE/DI,EAAgB,MAAMC,+BAA6B,CACvD,eAAgBL,EAAO,iBACvB,gBAAiBA,EAAO,gBACxB,oBAAqBA,EAAO,oBAC5B,mBAAoBA,EAAO,mBAC3B,2BAA4BA,EAAO,2BACnC,SAAUA,EAAO,SACjB,eAAgBA,EAAO,eACvB,QAASA,EAAO,OAAA,CACjB,EAEKM,EAAUC,EAAAA,YAAY,QAAQN,CAAU,EACxCO,EAAaD,EAAAA,YAAY,QAAQJ,CAAmB,EAE1D,GAAIG,EAAQ,IAAI,SAAW,EACzB,MAAM,IAAI,MACR,oDAAoDA,EAAQ,IAAI,MAAM,EAAA,EAI1E,MAAMG,EAAaH,EAAQ,IAAI,CAAC,EAG1BI,EAAeF,EAAW,MAAA,EAC1BG,EAAiBC,EAAAA,gBACrB,IAAI,WAAWH,EAAW,IAAI,EAAE,MAAA,EAAQ,QAAA,CAAQ,EAGlD,GAAIE,IAAmBD,EACrB,MAAM,IAAI,MACR,sEACcA,CAAY,SAASC,CAAc,EAAA,EAIrD,MAAME,EAAaL,EAAW,KAAKC,EAAW,KAAK,EACnD,GAAI,CAACI,EACH,MAAM,IAAI,MACR,oBAAoBJ,EAAW,KAAK,6BAChBD,EAAW,KAAK,MAAM,WAAA,EAI9C,MAAMM,EAAiBC,EAAAA,gBAAgBX,EAAc,cAAc,EAC7DY,EAAuBD,EAAAA,gBAC3BX,EAAc,oBAAA,EAMhBa,uBAAA,EACA,MAAMC,EAAcC,EAAAA,SAAS,KAAK,CAChC,eAAgBC,EAAAA,OAAO,KAAKC,mBAAiB,EAC7C,WAAY,CACV,CAAE,OAAQD,EAAAA,OAAO,KAAKN,CAAc,EAAG,QAASQ,wBAAA,EAChD,CACE,OAAQF,EAAAA,OAAO,KAAKL,EAAAA,gBAAgBX,EAAc,YAAY,CAAC,EAC/D,QAASkB,EAAAA,sBAAA,CACX,CACF,CACD,EACD,GAAI,GAACC,EAAAL,EAAY,SAAZ,MAAAK,EAAoB,OAAOV,EAAW,UAAW,CAACK,EAAY,KACjE,MAAM,IAAI,MACR,sIAAA,EAKJ,MAAMM,EAAO,IAAIC,OACjBD,EAAK,WAAWlB,EAAQ,OAAO,EAC/BkB,EAAK,YAAYlB,EAAQ,QAAQ,EAMjCkB,EAAK,SAAS,CACZ,KAAMf,EAAW,KACjB,MAAOA,EAAW,MAClB,SAAUA,EAAW,SACrB,YAAa,CACX,OAAQI,EAAW,OACnB,MAAOA,EAAW,KAAA,EAEpB,cAAe,CACb,CACE,YAAaS,EAAAA,uBACb,OAAQF,EAAAA,OAAO,KAAKN,CAAc,EAClC,aAAcM,EAAAA,OAAO,KAAKJ,CAAoB,CAAA,CAChD,EAEF,eAAgBI,EAAAA,OAAO,KAAKC,mBAAiB,EAC7C,cAAeH,EAAY,IAAA,CAE5B,EAED,UAAWQ,KAAUpB,EAAQ,KAC3BkB,EAAK,UAAU,CACb,OAAQE,EAAO,OACf,MAAOA,EAAO,KAAA,CACf,EAGH,MAAO,CAAE,QAASF,EAAK,OAAM,CAC/B,CAkBO,SAASG,EACdC,EACAC,EACQ,CAER,MAAMC,EADaL,EAAAA,KAAK,QAAQG,CAAa,EACpB,KAAK,OAAO,CAAC,EAEtC,GAAI,CAACE,EACH,MAAM,IAAI,MAAM,0BAA0B,EAI5C,GAAIA,EAAM,cAAgBA,EAAM,aAAa,OAAS,EAAG,CACvD,MAAMC,EAAuBX,EAAAA,OAAO,KAAKL,EAAAA,gBAAgBc,CAAe,CAAC,EAEzE,UAAWG,KAAYF,EAAM,aAC3B,GAAIE,EAAS,OAAO,OAAOD,CAAoB,EAC7C,OAAOE,EAAkBD,EAAS,SAAS,EAI/C,MAAM,IAAI,MACR,wDAAwDH,CAAe,EAAA,CAE3E,CAKA,MAAIC,EAAM,oBAAsBA,EAAM,mBAAmB,OAAS,EAC1D,IAAI,MACR,0LAAA,EAME,IAAI,MACR,wEAAA,CAEJ,CAWO,SAASI,EAAuBN,EAA+B,CACpE,MAAMJ,EAAOC,EAAAA,KAAK,QAAQG,CAAa,EAKvC,GAAI,CACFJ,EAAK,kBAAA,CACP,OAAS,EAAG,CAIV,GAAI,CAHiBA,EAAK,KAAK,OAAO,MACnCW,GAAQA,EAAI,oBAAsBA,EAAI,cAAA,EAGvC,MAAM,IAAI,MACR,8DAA8D,CAAC,EAAA,CAGrE,CAEA,OAAOX,EAAK,mBAAA,EAAqB,MAAA,CACnC,CASO,SAASS,EAAkBG,EAAyB,CACzD,GAAIA,EAAI,SAAW,GACjB,OAAOxB,kBAAgB,IAAI,WAAWwB,CAAG,CAAC,EAE5C,MAAIA,EAAI,SAAW,GACX,IAAI,MACR,6BAA6BA,EAAI,EAAE,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,sFAAA,EAIhE,IAAI,MAAM,4CAA4CA,EAAI,MAAM,EAAE,CAC1E,CCxSA,MAAMC,EAA6B,IAC7BC,EAA6B,IAC7BC,EAA4B,EAC5BC,EAA4B,EAC5BC,EAAgC,IAChCC,EAAgC,MAW/B,SAASC,EACdC,EACAC,EACc,CACd,IAAIC,EAAS,EAEb,MAAMC,EAAkB,IAAc,CACpC,GAAID,GAAUF,EAAQ,OACpB,MAAM,IAAI,MAAM,GAAGC,CAAO,eAAe,EAE3C,MAAMG,EAAQJ,EAAQE,CAAM,EAC5B,GAAIE,EAAQX,EACV,OAAAS,GAAU,EACHE,EAET,GAAIA,IAAUX,EAA4B,CACxC,GAAIS,EAASP,EAA4BK,EAAQ,OAC/C,MAAM,IAAI,MAAM,GAAGC,CAAO,eAAe,EAE3C,MAAMI,EAAQL,EAAQE,EAAS,CAAC,EAAKF,EAAQE,EAAS,CAAC,GAAK,EAC5D,GAAIG,EAAQR,EACV,MAAM,IAAI,MAAM,GAAGI,CAAO,oCAAoC,EAEhE,OAAAC,GAAUP,EACHU,CACT,CACA,GAAID,IAAUV,EAA4B,CACxC,GAAIQ,EAASN,EAA4BI,EAAQ,OAC/C,MAAM,IAAI,MAAM,GAAGC,CAAO,eAAe,EAE3C,MAAMI,GACHL,EAAQE,EAAS,CAAC,EAChBF,EAAQE,EAAS,CAAC,GAAK,EACvBF,EAAQE,EAAS,CAAC,GAAK,GACvBF,EAAQE,EAAS,CAAC,GAAK,MAC1B,EACF,GAAIG,EAAQP,EACV,MAAM,IAAI,MAAM,GAAGG,CAAO,oCAAoC,EAEhE,OAAAC,GAAUN,EACHS,CACT,CACA,MAAM,IAAI,MAAM,GAAGJ,CAAO,sCAAsC,CAClE,EAEMK,EAAQH,EAAA,EACRI,EAAsB,CAAA,EAC5B,QAASC,EAAI,EAAGA,EAAIF,EAAOE,IAAK,CAC9B,MAAMC,EAAMN,EAAA,EACZ,GAAID,EAASO,EAAMT,EAAQ,OACzB,MAAM,IAAI,MAAM,GAAGC,CAAO,eAAe,EAE3CM,EAAM,KAAKP,EAAQ,SAASE,EAAQA,EAASO,CAAG,CAAC,EACjDP,GAAUO,CACZ,CACA,GAAIP,IAAWF,EAAQ,OACrB,MAAM,IAAI,MAAM,GAAGC,CAAO,qBAAqB,EAEjD,OAAOM,CACT,CC/DA,MAAMG,EAAoB,GACpBC,EAAO,EACPC,EAAkB,GAClBC,EAAuB,EAGvBC,EAA0B,GAE1BC,EAAuB,EAGtB,SAASC,EACdC,EACsB,CACtB,OACEA,IAAW,QACXA,EAAO,SAAWP,GAClBO,EAAO,CAAC,IAAMN,GACdM,EAAO,CAAC,IAAML,CAElB,CAEA,SAASM,EAAWC,EAAeC,EAAwB,CACzD,OAAOD,EAAE,SAAWC,EAAE,QAAUD,EAAE,MAAM,CAACE,EAAMb,IAAMa,IAASD,EAAEZ,CAAC,CAAC,CACpE,CAGA,SAASc,EACPC,EACAC,EAC+C,CAC/C,MAAMjB,EAAQR,EAAmBwB,EAAoB,oBAAoB,EACzE,GAAIhB,EAAM,SAAWQ,EACnB,MAAM,IAAI,MACR,uBAAuBS,CAAU,mFACajB,EAAM,MAAM,GAAA,EAG9D,MAAO,CAAE,UAAWA,EAAM,CAAC,EAAG,OAAQA,EAAM,CAAC,CAAA,CAC/C,CAyBO,SAASkB,EACdrE,EACM,CACN,KAAM,CAAE,iBAAAsE,EAAkB,cAAAC,EAAe,WAAAH,CAAA,EAAepE,EAElDwE,EAAWD,EAAc,WAG/B,GAAIC,IAAa,QAAaA,EAAS,OAAS,EAC9C,MAAM,IAAI,MACR,uBAAuBJ,CAAU,kEACLI,EAAS,MAAM,GAAA,EAG/C,MAAMC,EAAUD,GAAA,YAAAA,EAAW,GACrB5B,EAAU2B,EAAc,mBAC1BL,EAAoBK,EAAc,mBAAoBH,CAAU,EAChE,OAKJ,GACEK,GACA7B,IACC,CAACkB,EAAWW,EAAQ,UAAW7B,EAAQ,SAAS,GAC/C,CAACkB,EAAWW,EAAQ,OAAQ7B,EAAQ,MAAM,GAE5C,MAAM,IAAI,MACR,uBAAuBwB,CAAU,mDAAA,EAIrC,MAAMM,EAAWD,GAAW7B,EAC5B,GAAI,CAAC8B,EACH,MAAM,IAAI,MACR,uBAAuBN,CAAU,8DAAA,EAKrCO,EACEL,EACAI,EAAS,UACTA,EAAS,OACTN,CAAA,CAEJ,CAQA,SAASO,EACPL,EACAM,EACAC,EACAT,EACM,CACN,MAAM5C,EAAOC,EAAAA,KAAK,QAAQ6C,CAAgB,EAE1C,GAAIF,EAAa,GAAKA,GAAc5C,EAAK,KAAK,OAAO,OACnD,MAAM,IAAI,MACR,eAAe4C,CAAU,kBAAkB5C,EAAK,KAAK,OAAO,MAAM,WAAA,EAGtE,MAAMsD,EAAUtD,EAAK,KAAK,OAAO4C,CAAU,EAAE,YAC7C,GAAI,CAACU,GAAW,CAAClB,EAAekB,EAAQ,MAAM,EAC5C,MAAM,IAAI,MACR,SAASV,CAAU,+CAAA,EAMvB,GAAIS,EAAO,SAAWnB,EACpB,MAAM,IAAI,MACR,uBAAuBU,CAAU,yCACxBS,EAAO,MAAM,GAAA,EAG1B,GAAI,CAACE,EAAI,kBAAkBF,CAAM,EAC/B,MAAM,IAAI,MACR,uBAAuBT,CAAU,iDAAA,EAMrC,MAAMY,EAAUF,EAAQ,OAAO,SAC7BrB,EACAH,CAAA,EAEF,GAAI,CAACQ,EAAWmB,EAAAA,OAAQ,QAAQ7D,EAAAA,OAAO,KAAKyD,CAAM,CAAC,EAAGG,CAAO,EAC3D,MAAM,IAAI,MACR,uBAAuBZ,CAAU,iEAAA,EAQrC,IAAIc,EACJ,GAAI,CACFA,EAAUC,EAAAA,OAAQ,UAAU,OAAO/D,EAAAA,OAAO,KAAKwD,CAAgB,CAAC,CAClE,OAASQ,EAAG,CACV,MAAM,IAAI,MACR,uBAAuBhB,CAAU,8DACNgB,aAAa,MAAQA,EAAE,QAAU,OAAOA,CAAC,CAAC,EAAA,CAEzE,CACA,GAAIF,EAAQ,WAAa3E,EAAAA,YAAY,YACnC,MAAM,IAAI,MACR,uBAAuB6D,CAAU,yCAC1Bc,EAAQ,SAAS,SAAS,EAAE,CAAC,0BAAA,EAQxC,MAAMG,EAAalE,WAAS,MAAM,CAAE,KAAMC,EAAAA,OAAO,KAAK4D,CAAO,CAAA,CAAG,EAAE,OAClE,GAAI,CAACK,EACH,MAAM,IAAI,MACR,uBAAuBjB,CAAU,0CAAA,EAIrC,MAAMkB,EADK/E,EAAAA,YAAY,WAAWiB,EAAK,KAAK,UAAU,WAAW,UAAU,EACxD,iBACjB4C,EACAiB,EACAP,EAAQ,MACRI,EAAQ,QAAA,EAMV,IAAIK,EAAW,GACf,GAAI,CACFA,EAAWR,EAAI,OAAOO,EAAST,EAAQK,EAAQ,UAAW,EAAI,CAChE,MAAQ,CACNK,EAAW,EACb,CACA,GAAI,CAACA,EACH,MAAM,IAAI,MACR,8BAA8BnB,CAAU,mHAAA,CAK9C,CCrNA,MAAMoB,EAAoB,GACpBC,EAAkBlF,EAAAA,YAAY,gBAC9BmF,EAAcnF,EAAAA,YAAY,YAG1BoF,EAAkB,GAClBC,EAAO,GACPC,EAAkB,GAClBC,EAAyB,EAE/B,SAASC,GAAalC,EAAsD,CAC1E,OACEA,IAAW,QACXA,EAAO,SAAW8B,GAClB9B,EAAO,CAAC,IAAM+B,GACd/B,EAAO,CAAC,IAAMgC,CAElB,CAGA,SAASG,GACP5D,EACAgC,EAC6C,CAC7C,GAAIhC,EAAI,SAAWoD,EACjB,MAAO,CAAE,UAAWpD,EAAK,SAAUqD,CAAA,EAErC,GACErD,EAAI,SAAWoD,EAAoB,GACnCpD,EAAIoD,CAAiB,IAAME,EAE3B,MAAO,CACL,UAAWtD,EAAI,SAAS,EAAGoD,CAAiB,EAC5C,SAAUE,CAAA,EAGd,MAAM,IAAI,MACR,gCAAgCtB,CAAU,qFACMhC,EAAI,MAAM,GAAA,CAE9D,CAoBO,SAAS6D,EACdjG,EACM,CACN,KAAM,CAAE,iBAAAsE,EAAkB,aAAA4B,EAAc,WAAA9B,CAAA,EAAepE,EAEjDwB,EAAOC,EAAAA,KAAK,QAAQ6C,CAAgB,EAE1C,GAAIF,EAAa,GAAKA,GAAc5C,EAAK,KAAK,OAAO,OACnD,MAAM,IAAI,MACR,eAAe4C,CAAU,kBAAkB5C,EAAK,KAAK,OAAO,MAAM,WAAA,EAItE,GAAI,CAAC2E,EAAkB3E,EAAK,KAAK,OAAO4C,CAAU,CAAC,EACjD,MAAM,IAAI,MACR,SAASA,CAAU,sDAAA,EAOvB,MAAMgC,EAA2B,CAAA,EAC3BC,EAAmB,CAAA,EACzB,QAASjD,EAAI,EAAGA,EAAI5B,EAAK,KAAK,OAAO,OAAQ4B,IAAK,CAChD,MAAM0B,EAAUtD,EAAK,KAAK,OAAO4B,CAAC,EAAE,YACpC,GAAI,CAAC0B,EACH,MAAM,IAAI,MACR,kCAAkC1B,CAAC,wFAAA,EAIvCgD,EAAe,KAAKtB,EAAQ,MAAM,EAClCuB,EAAO,KAAKvB,EAAQ,KAAK,CAC3B,CAEA,KAAM,CAAE,UAAAwB,EAAW,SAAAC,CAAA,EAAaP,GAC9BjF,kBAAgBb,EAAAA,eAAegG,CAAY,CAAC,EAC5C9B,CAAA,EAIIkB,EADK/E,EAAAA,YAAY,WAAWiB,EAAK,KAAK,UAAU,WAAW,UAAU,EACxD,iBACjB4C,EACAgC,EACAC,EACAE,CAAA,EAKIC,EAAYJ,EAAehC,CAAU,EAAE,SAAS0B,CAAsB,EAE5E,GAAI,CAACf,EAAI,cAAcO,EAASkB,EAAWF,CAAS,EAClD,MAAM,IAAI,MACR,wCAAwClC,CAAU,qEACRhD,EAAAA,OAAO,KAAKoF,CAAS,EAAE,SAAS,KAAK,CAAC,+DAAA,CAItF,CAMA,SAASL,EAAkBrE,EAKf,OACV,OACEA,EAAM,iBAAmB,QACzBA,EAAM,gBAAkB,QACxBA,EAAM,gBAAkB,QACxBiE,IAAaxE,EAAAO,EAAM,cAAN,YAAAP,EAAmB,MAAM,CAE1C,CAOA,SAASkF,GACPtC,EACAC,EACY,CACZ,MAAMjB,EAAQR,EAAmBwB,EAAoB,oBAAoB,EACzE,GAAIhB,EAAM,SAAW,EACnB,MAAM,IAAI,MACR,uBAAuBiB,CAAU,kEACNjB,EAAM,MAAM,GAAA,EAG3C,OAAOA,EAAM,CAAC,CAChB,CAEA,SAASW,GAAWC,EAAeC,EAAwB,CACzD,OAAOD,EAAE,SAAWC,EAAE,QAAUD,EAAE,MAAM,CAACE,EAAMb,IAAMa,IAASD,EAAEZ,CAAC,CAAC,CACpE,CA2BO,SAASsD,GACd1G,EACQ,CACR,KAAM,CAAE,iBAAAsE,EAAkB,gBAAAqC,CAAA,EAAoB3G,EAExC4G,EAAYnF,EAAAA,KAAK,QAAQ6C,CAAgB,EACzCuC,EAAWpF,EAAAA,KAAK,QAAQkF,CAAe,EAE7C,GAAIE,EAAS,KAAK,OAAO,SAAWD,EAAU,KAAK,OAAO,OACxD,MAAM,IAAI,MACR,6BAA6BC,EAAS,KAAK,OAAO,MAAM,+BACzCD,EAAU,KAAK,OAAO,MAAM,GAAA,EAI/C,IAAIE,EAAW,EACf,OAAAF,EAAU,KAAK,OAAO,QAAQ,CAAC9E,EAAOsC,IAAe,OACnD,MAAMG,EAAgBsC,EAAS,KAAK,OAAOzC,CAAU,EAErD,GAAI,CAAC+B,EAAkBrE,CAAK,EAAG,CAGzB8B,GAAerC,EAAAO,EAAM,cAAN,YAAAP,EAAmB,MAAM,GAC1C8C,EAA8B,CAC5B,iBAAAC,EACA,cAAAC,EACA,WAAAH,CAAA,CACD,EAEH,MACF,CACA0C,IAEA,MAAMC,EAAYxC,EAAc,UAC1ByC,EAAazC,EAAc,mBAC7BkC,GAAkBlC,EAAc,mBAAoBH,CAAU,EAC9D,OAMJ,GAAI2C,GAAaC,GAAc,CAAClD,GAAWiD,EAAWC,CAAU,EAC9D,MAAM,IAAI,MACR,uBAAuB5C,CAAU,kDAAA,EAIrC,MAAMhC,EAAM2E,GAAaC,EACzB,GAAI,CAAC5E,EACH,MAAM,IAAI,MACR,uBAAuBgC,CAAU,+DAAA,EAKrC6B,EAA8B,CAC5B,iBAAA3B,EACA,aAAclD,EAAAA,OAAO,KAAKgB,CAAG,EAAE,SAAS,KAAK,EAC7C,WAAAgC,CAAA,CACD,CACH,CAAC,EAEM0C,CACT"}

package/dist/verifyKeyPathSchnorrSignature-oGCUbjjZ.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verifyKeyPathSchnorrSignature-oGCUbjjZ.js","sources":["../src/tbv/core/primitives/psbt/peginInput.ts","../src/tbv/core/utils/witness/witnessStack.ts","../src/tbv/core/primitives/psbt/verifyP2wpkhEcdsaSignature.ts","../src/tbv/core/primitives/psbt/verifyKeyPathSchnorrSignature.ts"],"sourcesContent":["/**\n * PegIn Input PSBT Builder\n *\n * Builds the PSBT for the depositor to sign the PegIn transaction's HTLC input\n * (Pre-PegIn HTLC leaf 0 — the hashlock + all-party script).\n *\n * This is the \"Sign Pegin transaction HTLC leaf 0 input\" step in the pre-pegin\n * flow. The depositor signs input 0 of the PegIn transaction,\n * which spends output 0 of the funded Pre-PegIn transaction via script-path.\n *\n * @module primitives/psbt/peginInput\n */\n\nimport {\n  getPrePeginHtlcConnectorInfo,\n  tapInternalPubkey,\n  type Network,\n} from \"@babylonlabs-io/babylon-tbv-rust-wasm\";\nimport { Psbt, Transaction, payments } from \"bitcoinjs-lib\";\nimport { Buffer } from \"buffer\";\nimport {\n  TAPSCRIPT_LEAF_VERSION,\n  assertEccInitialized,\n  hexToUint8Array,\n  stripHexPrefix,\n  uint8ArrayToHex,\n} from \"../utils/bitcoin\";\n\n/**\n * Parameters for building the PegIn input PSBT\n */\nexport interface BuildPeginInputPsbtParams {\n  /**\n   * Vault core (tx-graph) version the Pre-PegIn was built with. Must match\n   * the version passed to buildPrePeginPsbt() so the HTLC connector scripts\n   * are derived for the same graph.\n   */\n  vaultCoreVersion: number;\n  /**\n   * PegIn transaction hex (1 input spending Pre-PegIn HTLC output 0).\n   * Returned by buildPeginTxFromFundedPrePegin().\n   */\n  peginTxHex: string;\n  /**\n   * Funded Pre-PegIn transaction hex.\n   * Used to look up the HTLC output that the PegIn input spends.\n   */\n  fundedPrePeginTxHex: string;\n  /** Depositor's BTC public key (x-only, 64-char hex) */\n  depositorPubkey: string;\n  /** Vault provider's BTC public key (x-only, 64-char hex) */\n  vaultProviderPubkey: string;\n  /** Vault keeper BTC public keys (x-only, 64-char hex) */\n  vaultKeeperPubkeys: string[];\n  /** Universal challenger BTC public keys (x-only, 64-char hex) */\n  universalChallengerPubkeys: string[];\n  /** SHA256 hash commitment (64 hex chars = 32 bytes) */\n  hashlock: string;\n  /** CSV timelock in blocks for the HTLC refund path */\n  timelockRefund: number;\n  /** Bitcoin network */\n  network: Network;\n}\n\n/**\n * Result of building the PegIn input PSBT\n */\nexport interface BuildPeginInputPsbtResult {\n  /** PSBT hex for the depositor to sign */\n  psbtHex: string;\n}\n\n/**\n * Build PSBT for depositor to sign the PegIn transaction's HTLC leaf 0 input.\n *\n * The PegIn transaction spends the Pre-PegIn HTLC output (output 0) via the\n * hashlock + all-party script (leaf 0). The depositor provides one of the required\n * signatures; the vault provider and keepers provide theirs separately via the\n * signPeginInput RPC.\n *\n * The PSBT uses Taproot script-path spending:\n * - witnessUtxo: the Pre-PegIn HTLC output\n * - tapLeafScript: hashlock leaf script + control block\n * - tapInternalKey: NUMS unspendable key (BIP-341 nothing-up-my-sleeve)\n *\n * @param params - PegIn input PSBT parameters\n * @returns PSBT hex ready for depositor signing\n * @throws If PegIn tx does not have exactly 1 input\n * @throws If PegIn input does not reference the Pre-PegIn HTLC output\n * @throws If Pre-PegIn tx output 0 is not found\n */\nexport async function buildPeginInputPsbt(\n  params: BuildPeginInputPsbtParams,\n): Promise<BuildPeginInputPsbtResult> {\n  const peginTxHex = stripHexPrefix(params.peginTxHex);\n  const fundedPrePeginTxHex = stripHexPrefix(params.fundedPrePeginTxHex);\n\n  const htlcConnector = await getPrePeginHtlcConnectorInfo({\n    txGraphVersion: params.vaultCoreVersion,\n    depositorPubkey: params.depositorPubkey,\n    vaultProviderPubkey: params.vaultProviderPubkey,\n    vaultKeeperPubkeys: params.vaultKeeperPubkeys,\n    universalChallengerPubkeys: params.universalChallengerPubkeys,\n    hashlock: params.hashlock,\n    timelockRefund: params.timelockRefund,\n    network: params.network,\n  });\n\n  const peginTx = Transaction.fromHex(peginTxHex);\n  const prePeginTx = Transaction.fromHex(fundedPrePeginTxHex);\n\n  if (peginTx.ins.length !== 1) {\n    throw new Error(\n      `PegIn transaction must have exactly 1 input, got ${peginTx.ins.length}`,\n    );\n  }\n\n  const peginInput = peginTx.ins[0];\n\n  // Verify PegIn input 0 spends Pre-PegIn output 0\n  const prePeginTxid = prePeginTx.getId();\n  const peginInputTxid = uint8ArrayToHex(\n    new Uint8Array(peginInput.hash).slice().reverse(),\n  );\n\n  if (peginInputTxid !== prePeginTxid) {\n    throw new Error(\n      `PegIn input does not reference the Pre-PegIn transaction. ` +\n        `Expected ${prePeginTxid}, got ${peginInputTxid}`,\n    );\n  }\n\n  const htlcOutput = prePeginTx.outs[peginInput.index];\n  if (!htlcOutput) {\n    throw new Error(\n      `Pre-PegIn output ${peginInput.index} not found ` +\n        `(Pre-PegIn has ${prePeginTx.outs.length} outputs)`,\n    );\n  }\n\n  const hashlockScript = hexToUint8Array(htlcConnector.hashlockScript);\n  const hashlockControlBlock = hexToUint8Array(\n    htlcConnector.hashlockControlBlock,\n  );\n\n  // Merkle root recomputed from the two connector leaves — inert for extension\n  // wallets, byte-compared by hardware that recomputes it. The closed loop\n  // below (derived P2TR == the funded HTLC spk) is what makes it trustworthy.\n  assertEccInitialized();\n  const htlcTaptree = payments.p2tr({\n    internalPubkey: Buffer.from(tapInternalPubkey),\n    scriptTree: [\n      { output: Buffer.from(hashlockScript), version: TAPSCRIPT_LEAF_VERSION },\n      {\n        output: Buffer.from(hexToUint8Array(htlcConnector.refundScript)),\n        version: TAPSCRIPT_LEAF_VERSION,\n      },\n    ],\n  });\n  if (!htlcTaptree.output?.equals(htlcOutput.script) || !htlcTaptree.hash) {\n    throw new Error(\n      \"PegIn HTLC taptree mismatch: the recomputed 2-leaf tree does not \" +\n        \"reproduce the funded Pre-PegIn HTLC scriptPubKey; refusing to sign.\",\n    );\n  }\n\n  const psbt = new Psbt();\n  psbt.setVersion(peginTx.version);\n  psbt.setLocktime(peginTx.locktime);\n\n  // Input 0: PegIn input spending Pre-PegIn HTLC output 0 via hashlock leaf (leaf 0).\n  // The depositor signs using Taproot script-path spending. bitcoinjs\n  // re-verifies leaf-in-tree consistency (control block vs tapMerkleRoot)\n  // inside addInput — a second independent check.\n  psbt.addInput({\n    hash: peginInput.hash,\n    index: peginInput.index,\n    sequence: peginInput.sequence,\n    witnessUtxo: {\n      script: htlcOutput.script,\n      value: htlcOutput.value,\n    },\n    tapLeafScript: [\n      {\n        leafVersion: TAPSCRIPT_LEAF_VERSION,\n        script: Buffer.from(hashlockScript),\n        controlBlock: Buffer.from(hashlockControlBlock),\n      },\n    ],\n    tapInternalKey: Buffer.from(tapInternalPubkey),\n    tapMerkleRoot: htlcTaptree.hash,\n    // sighashType omitted — defaults to SIGHASH_DEFAULT (0x00) for Taproot\n  });\n\n  for (const output of peginTx.outs) {\n    psbt.addOutput({\n      script: output.script,\n      value: output.value,\n    });\n  }\n\n  return { psbtHex: psbt.toHex() };\n}\n\n/**\n * Extract the depositor's Schnorr signature from a signed PegIn input PSBT.\n *\n * Supports non-finalized PSBTs with tapScriptSig entries. Finalized PSBTs are\n * rejected because the witness stack does not reliably identify the depositor\n * signature by public key.\n *\n * PegIn input signatures must use implicit Taproot SIGHASH_DEFAULT, which is\n * encoded by omitting the sighash byte. Signatures with an appended sighash byte\n * are rejected rather than stripped.\n *\n * @param signedPsbtHex - Signed PSBT hex\n * @param depositorPubkey - Depositor's x-only public key (64-char hex)\n * @returns 64-byte Schnorr signature (128 hex chars, no sighash flag)\n * @throws If no signature is found for the depositor's key\n */\nexport function extractPeginInputSignature(\n  signedPsbtHex: string,\n  depositorPubkey: string,\n): string {\n  const signedPsbt = Psbt.fromHex(signedPsbtHex);\n  const input = signedPsbt.data.inputs[0];\n\n  if (!input) {\n    throw new Error(\"PegIn PSBT has no inputs\");\n  }\n\n  // Non-finalized PSBT — extract from tapScriptSig\n  if (input.tapScriptSig && input.tapScriptSig.length > 0) {\n    const depositorPubkeyBytes = Buffer.from(hexToUint8Array(depositorPubkey));\n\n    for (const sigEntry of input.tapScriptSig) {\n      if (sigEntry.pubkey.equals(depositorPubkeyBytes)) {\n        return extractSchnorrSig(sigEntry.signature);\n      }\n    }\n\n    throw new Error(\n      `No PegIn input signature found for depositor pubkey: ${depositorPubkey}`,\n    );\n  }\n\n  // Finalized PSBT — the witness stack order depends on the wallet's finalizer,\n  // so we cannot reliably pick the depositor's signature by position. Require\n  // the non-finalized tapScriptSig path which identifies signatures by pubkey.\n  if (input.finalScriptWitness && input.finalScriptWitness.length > 0) {\n    throw new Error(\n      \"PegIn input PSBT is already finalized. Cannot reliably extract the \" +\n        \"depositor signature from the witness stack. Ensure the wallet returns \" +\n        \"a non-finalized PSBT with tapScriptSig entries.\",\n    );\n  }\n\n  throw new Error(\n    \"No tapScriptSig or finalScriptWitness found in signed PegIn input PSBT\",\n  );\n}\n\n/**\n * Finalize a signed PegIn input PSBT and return the depositor-signed transaction hex.\n *\n * The default tapscript finalizer builds the full witness stack [sig, script, controlBlock]\n * that vaultd requires when verifying the depositor signature on-chain.\n *\n * @param signedPsbtHex - Non-finalized signed PSBT hex (returned by wallet with autoFinalized: false)\n * @returns Depositor-signed PegIn transaction hex with full taproot witness stack\n */\nexport function finalizePeginInputPsbt(signedPsbtHex: string): string {\n  const psbt = Psbt.fromHex(signedPsbtHex);\n\n  // Some wallets (UniSat, OKX) ignore autoFinalized: false and return\n  // already-finalized PSBTs. finalizeAllInputs() throws in that case,\n  // so fall back to verifying the wallet already finalized all inputs.\n  try {\n    psbt.finalizeAllInputs();\n  } catch (e) {\n    const allFinalized = psbt.data.inputs.every(\n      (inp) => inp.finalScriptWitness || inp.finalScriptSig,\n    );\n    if (!allFinalized) {\n      throw new Error(\n        `PSBT finalization failed and wallet did not auto-finalize: ${e}`,\n      );\n    }\n  }\n\n  return psbt.extractTransaction().toHex();\n}\n\n/**\n * Extract and validate a 64-byte Schnorr signature.\n * PegIn input signatures must use implicit Taproot SIGHASH_DEFAULT, which is\n * encoded by omitting the sighash byte. Reject 65-byte signatures instead of\n * stripping the sighash byte because it changes the signed Taproot message.\n * @internal\n */\nexport function extractSchnorrSig(sig: Uint8Array): string {\n  if (sig.length === 64) {\n    return uint8ArrayToHex(new Uint8Array(sig));\n  }\n  if (sig.length === 65) {\n    throw new Error(\n      `Unexpected sighash byte 0x${sig[64].toString(16).padStart(2, \"0\")} in PegIn input signature. ` +\n        \"Expected implicit SIGHASH_DEFAULT as a 64-byte signature.\",\n    );\n  }\n  throw new Error(`Unexpected PegIn input signature length: ${sig.length}`);\n}\n","/**\n * Consensus witness-stack decoding, shared by every module that reads a\n * witness we did not build.\n *\n * Two independent decoders drifted apart before this existed: one accepted\n * non-minimal CompactSize encodings, the other rejected them. vaultd decodes\n * with rust-bitcoin, whose `VarInt::consensus_decode`\n * (0.32.8 `consensus/encode.rs:493-522`) returns `NonMinimalVarInt` for a 0xfd\n * carrying < 0xfd and a 0xfe carrying < 0x10000 — so the strict reading is the\n * only one that matches what the network will accept.\n *\n * @module tbv/core/utils/witness/witnessStack\n */\n\n/** CompactSize discriminators; 0xff (u64) is out of range for a witness. */\nconst COMPACT_SIZE_UINT16_PREFIX = 0xfd;\nconst COMPACT_SIZE_UINT32_PREFIX = 0xfe;\nconst COMPACT_SIZE_UINT16_BYTES = 3;\nconst COMPACT_SIZE_UINT32_BYTES = 5;\nconst COMPACT_SIZE_UINT16_MIN_VALUE = 0xfd;\nconst COMPACT_SIZE_UINT32_MIN_VALUE = 0x10000;\n\n/**\n * Decode a consensus-encoded witness stack: item count, then (len, bytes)*.\n *\n * @param witness - The consensus-encoded witness bytes.\n * @param subject - Names the witness in error messages (e.g. \"finalScriptWitness\").\n * @returns The stack items, as views over `witness`.\n * @throws If the encoding is truncated, non-minimal, out of range, or leaves\n *         trailing bytes.\n */\nexport function decodeWitnessStack(\n  witness: Uint8Array,\n  subject: string,\n): Uint8Array[] {\n  let offset = 0;\n\n  const readCompactSize = (): number => {\n    if (offset >= witness.length) {\n      throw new Error(`${subject} is truncated`);\n    }\n    const first = witness[offset];\n    if (first < COMPACT_SIZE_UINT16_PREFIX) {\n      offset += 1;\n      return first;\n    }\n    if (first === COMPACT_SIZE_UINT16_PREFIX) {\n      if (offset + COMPACT_SIZE_UINT16_BYTES > witness.length) {\n        throw new Error(`${subject} is truncated`);\n      }\n      const value = witness[offset + 1] | (witness[offset + 2] << 8);\n      if (value < COMPACT_SIZE_UINT16_MIN_VALUE) {\n        throw new Error(`${subject} has a non-minimal length encoding`);\n      }\n      offset += COMPACT_SIZE_UINT16_BYTES;\n      return value;\n    }\n    if (first === COMPACT_SIZE_UINT32_PREFIX) {\n      if (offset + COMPACT_SIZE_UINT32_BYTES > witness.length) {\n        throw new Error(`${subject} is truncated`);\n      }\n      const value =\n        (witness[offset + 1] |\n          (witness[offset + 2] << 8) |\n          (witness[offset + 3] << 16) |\n          (witness[offset + 4] << 24)) >>>\n        0;\n      if (value < COMPACT_SIZE_UINT32_MIN_VALUE) {\n        throw new Error(`${subject} has a non-minimal length encoding`);\n      }\n      offset += COMPACT_SIZE_UINT32_BYTES;\n      return value;\n    }\n    throw new Error(`${subject} carries an out-of-range item length`);\n  };\n\n  const count = readCompactSize();\n  const items: Uint8Array[] = [];\n  for (let i = 0; i < count; i++) {\n    const len = readCompactSize();\n    if (offset + len > witness.length) {\n      throw new Error(`${subject} is truncated`);\n    }\n    items.push(witness.subarray(offset, offset + len));\n    offset += len;\n  }\n  if (offset !== witness.length) {\n    throw new Error(`${subject} has trailing bytes`);\n  }\n  return items;\n}\n","/**\n * Far-side verification of P2WPKH ECDSA signatures a wallet returned, over\n * the PSBT we requested (trusted prevouts) — the Native SegWit sibling of\n * `verifyKeyPathSchnorrSignature`. Reference: btc-vault\n * `crates/btc-wallet-remote/src/client.rs:945-1000\n * verify_finalized_p2wpkh_spend`. The wallet's success/finalization is\n * never trusted on its own (CLAUDE.md §8): prevout script and value come\n * from the PSBT we built; only the signature bytes come from the wallet.\n *\n * @module tbv/core/primitives/psbt/verifyP2wpkhEcdsaSignature\n */\n\nimport * as ecc from \"@bitcoin-js/tiny-secp256k1-asmjs\";\nimport {\n  crypto as bcrypto,\n  script as bscript,\n  payments,\n  Psbt,\n  Transaction,\n} from \"bitcoinjs-lib\";\n\nimport { Buffer } from \"buffer\";\n\nimport { decodeWitnessStack } from \"../../utils/witness/witnessStack\";\n\n// P2WPKH scriptPubKey is exactly `OP_0 OP_PUSHBYTES_20 <20-byte key hash>`\n// (BIP-141 witness program v0, 20 bytes).\nconst P2WPKH_SCRIPT_LEN = 22;\nconst OP_0 = 0x00;\nconst OP_PUSHBYTES_20 = 0x14;\nconst P2WPKH_PROGRAM_START = 2;\n\n/** SEC1 compressed pubkey (client.rs:959: \"expected a 33-byte compressed key\"). */\nconst COMPRESSED_PUBKEY_BYTES = 33;\n/** Consensus P2WPKH witness: exactly [signature, pubkey] (client.rs:951-957). */\nconst P2WPKH_WITNESS_ITEMS = 2;\n\n/** Only claim P2WPKH: 22-byte scriptPubKey starting `OP_0 PUSH20`. */\nexport function isP2wpkhScript(\n  script: Uint8Array | undefined,\n): script is Uint8Array {\n  return (\n    script !== undefined &&\n    script.length === P2WPKH_SCRIPT_LEN &&\n    script[0] === OP_0 &&\n    script[1] === OP_PUSHBYTES_20\n  );\n}\n\nfunction bytesEqual(a: Uint8Array, b: Uint8Array): boolean {\n  return a.length === b.length && a.every((byte, i) => byte === b[i]);\n}\n\n/** The `[signature, pubkey]` pair of a finalized P2WPKH witness (client.rs:951-957). */\nfunction decodeP2wpkhWitness(\n  finalScriptWitness: Uint8Array,\n  inputIndex: number,\n): { signature: Uint8Array; pubkey: Uint8Array } {\n  const items = decodeWitnessStack(finalScriptWitness, \"finalScriptWitness\");\n  if (items.length !== P2WPKH_WITNESS_ITEMS) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: a finalized P2WPKH witness must have ` +\n        `exactly 2 items [signature, pubkey], got ${items.length}.`,\n    );\n  }\n  return { signature: items[0], pubkey: items[1] };\n}\n\nexport interface AssertReturnedP2wpkhSignatureParams {\n  /** Hex of the PSBT we built and sent (trusted prevout script/value). NOT the wallet's. */\n  requestedPsbtHex: string;\n  /** The wallet-returned PSBT input carrying the signature material. */\n  returnedInput: {\n    partialSig?: Array<{ pubkey: Uint8Array; signature: Uint8Array }>;\n    finalScriptWitness?: Uint8Array;\n  };\n  /** Index of the input the signature is for. */\n  inputIndex: number;\n}\n\n/**\n * Assert that the returned input carries a valid P2WPKH ECDSA signature\n * over the BIP-143 sighash of `requestedPsbtHex` input `inputIndex`:\n * `partialSig` (BIP-174: the value is the exact witness-stack signature\n * bytes, the key its pubkey), or the finalized 2-item witness — and when\n * both are present they must be the same bytes.\n *\n * @throws If the requested input is not a P2WPKH spend, no signature was\n *         returned, a finalized witness disagrees with its `partialSig`,\n *         or any check of `verify_finalized_p2wpkh_spend` fails.\n */\nexport function assertReturnedP2wpkhSignature(\n  params: AssertReturnedP2wpkhSignatureParams,\n): void {\n  const { requestedPsbtHex, returnedInput, inputIndex } = params;\n\n  const partials = returnedInput.partialSig;\n  // Consensus allows exactly one signature in a P2WPKH witness, so a second\n  // partialSig entry is ambiguous tampering, not a fallback to pick from.\n  if (partials !== undefined && partials.length > 1) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: a P2WPKH input must carry at most one ` +\n        `partial signature, got ${partials.length}.`,\n    );\n  }\n  const partial = partials?.[0];\n  const witness = returnedInput.finalScriptWitness\n    ? decodeP2wpkhWitness(returnedInput.finalScriptWitness, inputIndex)\n    : undefined;\n\n  // Both fields can be present, and the consumers broadcast the WITNESS\n  // bytes — so the two must agree, not just one of them verify (same\n  // rationale as the tapKeySig/witness agreement check).\n  if (\n    partial &&\n    witness &&\n    (!bytesEqual(partial.signature, witness.signature) ||\n      !bytesEqual(partial.pubkey, witness.pubkey))\n  ) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex} finalized witness does not match its partialSig.`,\n    );\n  }\n\n  const material = partial ?? witness;\n  if (!material) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex} carries no P2WPKH signature ` +\n        `(no partialSig, not finalized).`,\n    );\n  }\n\n  assertP2wpkhEcdsaSignature(\n    requestedPsbtHex,\n    material.signature,\n    material.pubkey,\n    inputIndex,\n  );\n}\n\n/**\n * The crypto core, mirroring `verify_finalized_p2wpkh_spend` check by\n * check: pubkey shape and curve membership, hash160(pubkey) == witness\n * program, strict-DER + SIGHASH_ALL-only signature, ECDSA over the\n * BIP-143 sighash recomputed from the REQUESTED prevout.\n */\nfunction assertP2wpkhEcdsaSignature(\n  requestedPsbtHex: string,\n  encodedSignature: Uint8Array,\n  pubkey: Uint8Array,\n  inputIndex: number,\n): void {\n  const psbt = Psbt.fromHex(requestedPsbtHex);\n\n  if (inputIndex < 0 || inputIndex >= psbt.data.inputs.length) {\n    throw new Error(\n      `Input index ${inputIndex} out of range (${psbt.data.inputs.length} inputs).`,\n    );\n  }\n  const prevout = psbt.data.inputs[inputIndex].witnessUtxo;\n  if (!prevout || !isP2wpkhScript(prevout.script)) {\n    throw new Error(\n      `Input ${inputIndex} of the requested PSBT is not a P2WPKH input.`,\n    );\n  }\n\n  // Pubkey: exactly 33 bytes (client.rs:959-965) and a parseable curve\n  // point, as PublicKey::from_slice (client.rs:966-968).\n  if (pubkey.length !== COMPRESSED_PUBKEY_BYTES) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: P2WPKH pubkey must be 33 bytes, ` +\n        `got ${pubkey.length}.`,\n    );\n  }\n  if (!ecc.isPointCompressed(pubkey)) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: P2WPKH pubkey is not a valid secp256k1 point.`,\n    );\n  }\n\n  // hash160(pubkey) must equal the prevout's witness program — what\n  // consensus checks (client.rs:970-977).\n  const program = prevout.script.subarray(\n    P2WPKH_PROGRAM_START,\n    P2WPKH_SCRIPT_LEN,\n  );\n  if (!bytesEqual(bcrypto.hash160(Buffer.from(pubkey)), program)) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: P2WPKH pubkey does not hash to the ` +\n        `prevout's witness program.`,\n    );\n  }\n\n  // Strict-DER decode with defined-hashtype gate — the accept set of\n  // ecdsa::Signature::from_slice / EcdsaSighashType::from_standard\n  // (client.rs:978-980) — then SIGHASH_ALL exactly (client.rs:981-987).\n  let decoded: { signature: Buffer; hashType: number };\n  try {\n    decoded = bscript.signature.decode(Buffer.from(encodedSignature));\n  } catch (e) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: P2WPKH signature is not DER with a ` +\n        `defined sighash byte: ${e instanceof Error ? e.message : String(e)}`,\n    );\n  }\n  if (decoded.hashType !== Transaction.SIGHASH_ALL) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: P2WPKH signature has sighash type ` +\n        `0x${decoded.hashType.toString(16)} (expected SIGHASH_ALL).`,\n    );\n  }\n\n  // BIP-143 sighash over the REQUESTED prevout value with the standard\n  // P2WPKH scriptCode built from the witness program (client.rs:988-991;\n  // scriptCode template per bitcoinjs-lib's own P2WPKH signer,\n  // `src/psbt.js:1245-1255`).\n  const scriptCode = payments.p2pkh({ hash: Buffer.from(program) }).output;\n  if (!scriptCode) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: could not build the P2WPKH scriptCode.`,\n    );\n  }\n  const tx = Transaction.fromBuffer(psbt.data.globalMap.unsignedTx.toBuffer());\n  const sighash = tx.hashForWitnessV0(\n    inputIndex,\n    scriptCode,\n    prevout.value,\n    decoded.hashType,\n  );\n\n  // strict=true rejects high-S, as libsecp256k1's verify_ecdsa does\n  // (client.rs:992-999; secp256k1 crate `ecdsa/mod.rs:194`). ecc.verify\n  // throws on out-of-range r/s — that is a failed verification here.\n  let verifies = false;\n  try {\n    verifies = ecc.verify(sighash, pubkey, decoded.signature, true);\n  } catch {\n    verifies = false;\n  }\n  if (!verifies) {\n    throw new Error(\n      `P2WPKH signature for input ${inputIndex} does not verify against the ` +\n        `requested PSBT's prevout. The wallet may have signed a different ` +\n        `transaction or key.`,\n    );\n  }\n}\n","/**\n * Far-side verification of Taproot KEY-PATH Schnorr signatures a wallet\n * returned, over the PSBT we requested (trusted prevouts) — the key-path twin\n * of `assertScriptPathSchnorrSignature`. Reference: btc-vault\n * `crates/btc-wallet-remote/src/client.rs check_signatures_valid` (output key taken\n * from the prevout scriptPubKey, all prevouts committed). The wallet's\n * success/finalization is never trusted on its own (CLAUDE.md §8).\n * `assertReturnedKeyPathSignatures` additionally dispatches P2WPKH-funded\n * inputs to `verifyP2wpkhEcdsaSignature` (client.rs's\n * `verify_finalized_p2wpkh_spend` sibling), so a Native SegWit software\n * wallet's signatures no longer pass through unchecked.\n *\n * Why verify against the *requested* PSBT: `assertPsbtUnsignedTxMatches` pins\n * the unsigned transaction but deliberately skips per-input metadata, so a\n * wallet could rewrite `witnessUtxo` in its response and make a wrong-message\n * signature self-validate. Prevout scripts and values therefore come from the\n * PSBT we built; only the signature bytes come from the wallet.\n *\n * @module tbv/core/primitives/psbt/verifyKeyPathSchnorrSignature\n */\n\nimport * as ecc from \"@bitcoin-js/tiny-secp256k1-asmjs\";\nimport { Psbt, Transaction } from \"bitcoinjs-lib\";\n\nimport { Buffer } from \"buffer\";\n\nimport { decodeWitnessStack } from \"../../utils/witness/witnessStack\";\nimport { hexToUint8Array, stripHexPrefix } from \"../utils/bitcoin\";\nimport {\n  assertReturnedP2wpkhSignature,\n  isP2wpkhScript,\n} from \"./verifyP2wpkhEcdsaSignature\";\n\nconst SCHNORR_SIG_BYTES = 64;\nconst SIGHASH_DEFAULT = Transaction.SIGHASH_DEFAULT; // 0x00\nconst SIGHASH_ALL = Transaction.SIGHASH_ALL; // 0x01\n\n// P2TR scriptPubKey is exactly `OP_1 OP_PUSHBYTES_32 <32-byte output key>`.\nconst P2TR_SCRIPT_LEN = 34;\nconst OP_1 = 0x51;\nconst OP_PUSHBYTES_32 = 0x20;\nconst P2TR_OUTPUT_KEY_OFFSET = 2;\n\nfunction isP2trScript(script: Uint8Array | undefined): script is Uint8Array {\n  return (\n    script !== undefined &&\n    script.length === P2TR_SCRIPT_LEN &&\n    script[0] === OP_1 &&\n    script[1] === OP_PUSHBYTES_32\n  );\n}\n\n/** BIP-341: 64 bytes ⇒ SIGHASH_DEFAULT; 65 bytes ⇒ the trailing byte is the hash type (we accept ALL only). */\nfunction splitHashType(\n  sig: Uint8Array,\n  inputIndex: number,\n): { signature: Uint8Array; hashType: number } {\n  if (sig.length === SCHNORR_SIG_BYTES) {\n    return { signature: sig, hashType: SIGHASH_DEFAULT };\n  }\n  if (\n    sig.length === SCHNORR_SIG_BYTES + 1 &&\n    sig[SCHNORR_SIG_BYTES] === SIGHASH_ALL\n  ) {\n    return {\n      signature: sig.subarray(0, SCHNORR_SIG_BYTES),\n      hashType: SIGHASH_ALL,\n    };\n  }\n  throw new Error(\n    `Key-path signature for input ${inputIndex} must be 64 bytes (SIGHASH_DEFAULT) or ` +\n      `65 bytes ending in 0x01 (SIGHASH_ALL), got ${sig.length}.`,\n  );\n}\n\nexport interface AssertKeyPathSchnorrSignatureParams {\n  /** Hex of the PSBT we built and sent (trusted prevout scripts/values). NOT the wallet's. */\n  requestedPsbtHex: string;\n  /** 64- or 65-byte signature, hex. */\n  signatureHex: string;\n  /** Index of the input the signature is for. */\n  inputIndex: number;\n}\n\n/**\n * Assert that `signatureHex` is a valid BIP-340 Schnorr signature over the\n * Taproot key-path sighash of `requestedPsbtHex` input `inputIndex`, under the\n * tweaked output key taken from that input's prevout scriptPubKey.\n *\n * @throws If the input is not a key-path P2TR spend, the requested PSBT lacks\n *         the prevout data needed to recompute the sighash, or the signature\n *         does not verify.\n */\nexport function assertKeyPathSchnorrSignature(\n  params: AssertKeyPathSchnorrSignatureParams,\n): void {\n  const { requestedPsbtHex, signatureHex, inputIndex } = params;\n\n  const psbt = Psbt.fromHex(requestedPsbtHex);\n\n  if (inputIndex < 0 || inputIndex >= psbt.data.inputs.length) {\n    throw new Error(\n      `Input index ${inputIndex} out of range (${psbt.data.inputs.length} inputs).`,\n    );\n  }\n\n  if (!isKeyPathEligible(psbt.data.inputs[inputIndex])) {\n    throw new Error(\n      `Input ${inputIndex} of the requested PSBT is not a key-path P2TR input.`,\n    );\n  }\n\n  // Taproot's sighash commits to every input's prevout (script + value), so all\n  // inputs must carry a witnessUtxo. A missing one is a build error, not a\n  // value we can default — fail loudly.\n  const prevOutScripts: Buffer[] = [];\n  const values: number[] = [];\n  for (let i = 0; i < psbt.data.inputs.length; i++) {\n    const prevout = psbt.data.inputs[i].witnessUtxo;\n    if (!prevout) {\n      throw new Error(\n        `Cannot verify signature: input ${i} of the requested PSBT has no witnessUtxo ` +\n          `(required to recompute the Taproot sighash).`,\n      );\n    }\n    prevOutScripts.push(prevout.script);\n    values.push(prevout.value);\n  }\n\n  const { signature, hashType } = splitHashType(\n    hexToUint8Array(stripHexPrefix(signatureHex)),\n    inputIndex,\n  );\n\n  const tx = Transaction.fromBuffer(psbt.data.globalMap.unsignedTx.toBuffer());\n  const sighash = tx.hashForWitnessV1(\n    inputIndex,\n    prevOutScripts,\n    values,\n    hashType,\n  );\n\n  // Key-path signatures verify against the TWEAKED output key = the prevout's\n  // witness program.\n  const outputKey = prevOutScripts[inputIndex].subarray(P2TR_OUTPUT_KEY_OFFSET);\n\n  if (!ecc.verifySchnorr(sighash, outputKey, signature)) {\n    throw new Error(\n      `Key-path Schnorr signature for input ${inputIndex} does not verify against the ` +\n        `requested PSBT's prevout (output key ${Buffer.from(outputKey).toString(\"hex\")}). ` +\n        `The wallet may have signed a different transaction or key.`,\n    );\n  }\n}\n\n/**\n * A key-path P2TR input: an internal key, no script-path material, and a\n * taproot prevout. Script-path inputs are the script-path verifier's job.\n */\nfunction isKeyPathEligible(input: {\n  tapInternalKey?: Uint8Array;\n  tapLeafScript?: unknown;\n  tapMerkleRoot?: Uint8Array;\n  witnessUtxo?: { script: Uint8Array };\n}): boolean {\n  return (\n    input.tapInternalKey !== undefined &&\n    input.tapLeafScript === undefined &&\n    input.tapMerkleRoot === undefined &&\n    isP2trScript(input.witnessUtxo?.script)\n  );\n}\n\n/**\n * The lone stack item of a finalized key-path witness. An annex would add a\n * second item, but Bitcoin Core rejects annexes as nonstandard\n * (`src/policy/policy.cpp:327-329`), so such a spend could never broadcast.\n */\nfunction singleWitnessItem(\n  finalScriptWitness: Uint8Array,\n  inputIndex: number,\n): Uint8Array {\n  const items = decodeWitnessStack(finalScriptWitness, \"finalScriptWitness\");\n  if (items.length !== 1) {\n    throw new Error(\n      `Returned PSBT input ${inputIndex}: a finalized key-path witness must have ` +\n        `exactly one item, got ${items.length}.`,\n    );\n  }\n  return items[0];\n}\n\nfunction bytesEqual(a: Uint8Array, b: Uint8Array): boolean {\n  return a.length === b.length && a.every((byte, i) => byte === b[i]);\n}\n\nexport interface AssertReturnedKeyPathSignaturesParams {\n  /** PSBT we built locally and asked the wallet to sign. */\n  requestedPsbtHex: string;\n  /** PSBT the wallet returned after signing. */\n  returnedPsbtHex: string;\n}\n\n/**\n * Verify every key-path-eligible and P2WPKH input of the REQUESTED PSBT\n * against what the wallet RETURNED. Key-path: `tapKeySig`, or the single\n * finalized witness item for wallets that auto-finalize — and when both are\n * present they must be the same bytes. P2WPKH: `partialSig`, or the finalized\n * 2-item witness, verified as ECDSA over the BIP-143 sighash\n * ({@link assertReturnedP2wpkhSignature}); a failure throws but the input is\n * NOT counted. Script-path and unknown script types are skipped (they have\n * their own checks).\n *\n * @returns How many inputs were verified KEY-PATH. A caller that knows every\n *          input is taproot key-path (e.g. an approval wallet) must assert\n *          this equals its input count — P2WPKH inputs never count toward it,\n *          so that gate stays exact.\n * @throws If the input counts differ, an eligible input carries no signature, a\n *         finalized witness disagrees with its `tapKeySig`/`partialSig`, or any\n *         signature does not verify.\n */\nexport function assertReturnedKeyPathSignatures(\n  params: AssertReturnedKeyPathSignaturesParams,\n): number {\n  const { requestedPsbtHex, returnedPsbtHex } = params;\n\n  const requested = Psbt.fromHex(requestedPsbtHex);\n  const returned = Psbt.fromHex(returnedPsbtHex);\n\n  if (returned.data.inputs.length !== requested.data.inputs.length) {\n    throw new Error(\n      `Returned PSBT input count ${returned.data.inputs.length} differs from the ` +\n        `requested ${requested.data.inputs.length}.`,\n    );\n  }\n\n  let verified = 0;\n  requested.data.inputs.forEach((input, inputIndex) => {\n    const returnedInput = returned.data.inputs[inputIndex];\n\n    if (!isKeyPathEligible(input)) {\n      // Native SegWit funding inputs get the ECDSA check; anything else\n      // (script-path, P2WSH, ...) is another verifier's job.\n      if (isP2wpkhScript(input.witnessUtxo?.script)) {\n        assertReturnedP2wpkhSignature({\n          requestedPsbtHex,\n          returnedInput,\n          inputIndex,\n        });\n      }\n      return;\n    }\n    verified++;\n\n    const tapKeySig = returnedInput.tapKeySig;\n    const witnessSig = returnedInput.finalScriptWitness\n      ? singleWitnessItem(returnedInput.finalScriptWitness, inputIndex)\n      : undefined;\n\n    // Both fields can be present, and the consumers broadcast the WITNESS\n    // bytes — so the two must agree, not just one of them verify. Matches\n    // btc-vault `crates/btc-wallet-remote/src/client.rs:1053-1072,1102-1121`,\n    // which checks each independently.\n    if (tapKeySig && witnessSig && !bytesEqual(tapKeySig, witnessSig)) {\n      throw new Error(\n        `Returned PSBT input ${inputIndex} finalized witness does not match its tapKeySig.`,\n      );\n    }\n\n    const sig = tapKeySig ?? witnessSig;\n    if (!sig) {\n      throw new Error(\n        `Returned PSBT input ${inputIndex} carries no key-path signature ` +\n          `(no tapKeySig, not finalized).`,\n      );\n    }\n\n    assertKeyPathSchnorrSignature({\n      requestedPsbtHex,\n      signatureHex: Buffer.from(sig).toString(\"hex\"),\n      inputIndex,\n    });\n  });\n\n  return verified;\n}\n"],"names":["buildPeginInputPsbt","params","peginTxHex","stripHexPrefix","fundedPrePeginTxHex","htlcConnector","getPrePeginHtlcConnectorInfo","peginTx","Transaction","prePeginTx","peginInput","prePeginTxid","peginInputTxid","uint8ArrayToHex","htlcOutput","hashlockScript","hexToUint8Array","hashlockControlBlock","assertEccInitialized","htlcTaptree","payments","Buffer","tapInternalPubkey","TAPSCRIPT_LEAF_VERSION","_a","psbt","Psbt","output","extractPeginInputSignature","signedPsbtHex","depositorPubkey","input","depositorPubkeyBytes","sigEntry","extractSchnorrSig","finalizePeginInputPsbt","e","inp","sig","COMPACT_SIZE_UINT16_PREFIX","COMPACT_SIZE_UINT32_PREFIX","COMPACT_SIZE_UINT16_BYTES","COMPACT_SIZE_UINT32_BYTES","COMPACT_SIZE_UINT16_MIN_VALUE","COMPACT_SIZE_UINT32_MIN_VALUE","decodeWitnessStack","witness","subject","offset","readCompactSize","first","value","count","items","i","len","P2WPKH_SCRIPT_LEN","OP_0","OP_PUSHBYTES_20","P2WPKH_PROGRAM_START","COMPRESSED_PUBKEY_BYTES","P2WPKH_WITNESS_ITEMS","isP2wpkhScript","script","bytesEqual","a","b","byte","decodeP2wpkhWitness","finalScriptWitness","inputIndex","assertReturnedP2wpkhSignature","requestedPsbtHex","returnedInput","partials","partial","material","assertP2wpkhEcdsaSignature","encodedSignature","pubkey","prevout","ecc","program","bcrypto","decoded","bscript","scriptCode","sighash","verifies","SCHNORR_SIG_BYTES","SIGHASH_DEFAULT","SIGHASH_ALL","P2TR_SCRIPT_LEN","OP_1","OP_PUSHBYTES_32","P2TR_OUTPUT_KEY_OFFSET","isP2trScript","splitHashType","assertKeyPathSchnorrSignature","signatureHex","isKeyPathEligible","prevOutScripts","values","signature","hashType","outputKey","singleWitnessItem","assertReturnedKeyPathSignatures","returnedPsbtHex","requested","returned","verified","tapKeySig","witnessSig"],"mappings":";;;;;AA2FA,eAAsBA,GACpBC,GACoC;;AACpC,QAAMC,IAAaC,EAAeF,EAAO,UAAU,GAC7CG,IAAsBD,EAAeF,EAAO,mBAAmB,GAE/DI,IAAgB,MAAMC,EAA6B;AAAA,IACvD,gBAAgBL,EAAO;AAAA,IACvB,iBAAiBA,EAAO;AAAA,IACxB,qBAAqBA,EAAO;AAAA,IAC5B,oBAAoBA,EAAO;AAAA,IAC3B,4BAA4BA,EAAO;AAAA,IACnC,UAAUA,EAAO;AAAA,IACjB,gBAAgBA,EAAO;AAAA,IACvB,SAASA,EAAO;AAAA,EAAA,CACjB,GAEKM,IAAUC,EAAY,QAAQN,CAAU,GACxCO,IAAaD,EAAY,QAAQJ,CAAmB;AAE1D,MAAIG,EAAQ,IAAI,WAAW;AACzB,UAAM,IAAI;AAAA,MACR,oDAAoDA,EAAQ,IAAI,MAAM;AAAA,IAAA;AAI1E,QAAMG,IAAaH,EAAQ,IAAI,CAAC,GAG1BI,IAAeF,EAAW,MAAA,GAC1BG,IAAiBC;AAAA,IACrB,IAAI,WAAWH,EAAW,IAAI,EAAE,MAAA,EAAQ,QAAA;AAAA,EAAQ;AAGlD,MAAIE,MAAmBD;AACrB,UAAM,IAAI;AAAA,MACR,sEACcA,CAAY,SAASC,CAAc;AAAA,IAAA;AAIrD,QAAME,IAAaL,EAAW,KAAKC,EAAW,KAAK;AACnD,MAAI,CAACI;AACH,UAAM,IAAI;AAAA,MACR,oBAAoBJ,EAAW,KAAK,6BAChBD,EAAW,KAAK,MAAM;AAAA,IAAA;AAI9C,QAAMM,IAAiBC,EAAgBX,EAAc,cAAc,GAC7DY,IAAuBD;AAAA,IAC3BX,EAAc;AAAA,EAAA;AAMhB,EAAAa,EAAA;AACA,QAAMC,IAAcC,EAAS,KAAK;AAAA,IAChC,gBAAgBC,EAAO,KAAKC,CAAiB;AAAA,IAC7C,YAAY;AAAA,MACV,EAAE,QAAQD,EAAO,KAAKN,CAAc,GAAG,SAASQ,EAAA;AAAA,MAChD;AAAA,QACE,QAAQF,EAAO,KAAKL,EAAgBX,EAAc,YAAY,CAAC;AAAA,QAC/D,SAASkB;AAAA,MAAA;AAAA,IACX;AAAA,EACF,CACD;AACD,MAAI,GAACC,IAAAL,EAAY,WAAZ,QAAAK,EAAoB,OAAOV,EAAW,YAAW,CAACK,EAAY;AACjE,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAKJ,QAAMM,IAAO,IAAIC,EAAA;AACjB,EAAAD,EAAK,WAAWlB,EAAQ,OAAO,GAC/BkB,EAAK,YAAYlB,EAAQ,QAAQ,GAMjCkB,EAAK,SAAS;AAAA,IACZ,MAAMf,EAAW;AAAA,IACjB,OAAOA,EAAW;AAAA,IAClB,UAAUA,EAAW;AAAA,IACrB,aAAa;AAAA,MACX,QAAQI,EAAW;AAAA,MACnB,OAAOA,EAAW;AAAA,IAAA;AAAA,IAEpB,eAAe;AAAA,MACb;AAAA,QACE,aAAaS;AAAA,QACb,QAAQF,EAAO,KAAKN,CAAc;AAAA,QAClC,cAAcM,EAAO,KAAKJ,CAAoB;AAAA,MAAA;AAAA,IAChD;AAAA,IAEF,gBAAgBI,EAAO,KAAKC,CAAiB;AAAA,IAC7C,eAAeH,EAAY;AAAA;AAAA,EAAA,CAE5B;AAED,aAAWQ,KAAUpB,EAAQ;AAC3B,IAAAkB,EAAK,UAAU;AAAA,MACb,QAAQE,EAAO;AAAA,MACf,OAAOA,EAAO;AAAA,IAAA,CACf;AAGH,SAAO,EAAE,SAASF,EAAK,QAAM;AAC/B;AAkBO,SAASG,GACdC,GACAC,GACQ;AAER,QAAMC,IADaL,EAAK,QAAQG,CAAa,EACpB,KAAK,OAAO,CAAC;AAEtC,MAAI,CAACE;AACH,UAAM,IAAI,MAAM,0BAA0B;AAI5C,MAAIA,EAAM,gBAAgBA,EAAM,aAAa,SAAS,GAAG;AACvD,UAAMC,IAAuBX,EAAO,KAAKL,EAAgBc,CAAe,CAAC;AAEzE,eAAWG,KAAYF,EAAM;AAC3B,UAAIE,EAAS,OAAO,OAAOD,CAAoB;AAC7C,eAAOE,EAAkBD,EAAS,SAAS;AAI/C,UAAM,IAAI;AAAA,MACR,wDAAwDH,CAAe;AAAA,IAAA;AAAA,EAE3E;AAKA,QAAIC,EAAM,sBAAsBA,EAAM,mBAAmB,SAAS,IAC1D,IAAI;AAAA,IACR;AAAA,EAAA,IAME,IAAI;AAAA,IACR;AAAA,EAAA;AAEJ;AAWO,SAASI,GAAuBN,GAA+B;AACpE,QAAMJ,IAAOC,EAAK,QAAQG,CAAa;AAKvC,MAAI;AACF,IAAAJ,EAAK,kBAAA;AAAA,EACP,SAASW,GAAG;AAIV,QAAI,CAHiBX,EAAK,KAAK,OAAO;AAAA,MACpC,CAACY,MAAQA,EAAI,sBAAsBA,EAAI;AAAA,IAAA;AAGvC,YAAM,IAAI;AAAA,QACR,8DAA8DD,CAAC;AAAA,MAAA;AAAA,EAGrE;AAEA,SAAOX,EAAK,mBAAA,EAAqB,MAAA;AACnC;AASO,SAASS,EAAkBI,GAAyB;AACzD,MAAIA,EAAI,WAAW;AACjB,WAAOzB,EAAgB,IAAI,WAAWyB,CAAG,CAAC;AAE5C,QAAIA,EAAI,WAAW,KACX,IAAI;AAAA,IACR,6BAA6BA,EAAI,EAAE,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,EAAA,IAIhE,IAAI,MAAM,4CAA4CA,EAAI,MAAM,EAAE;AAC1E;ACxSA,MAAMC,IAA6B,KAC7BC,IAA6B,KAC7BC,IAA4B,GAC5BC,IAA4B,GAC5BC,IAAgC,KAChCC,IAAgC;AAW/B,SAASC,EACdC,GACAC,GACc;AACd,MAAIC,IAAS;AAEb,QAAMC,IAAkB,MAAc;AACpC,QAAID,KAAUF,EAAQ;AACpB,YAAM,IAAI,MAAM,GAAGC,CAAO,eAAe;AAE3C,UAAMG,IAAQJ,EAAQE,CAAM;AAC5B,QAAIE,IAAQX;AACV,aAAAS,KAAU,GACHE;AAET,QAAIA,MAAUX,GAA4B;AACxC,UAAIS,IAASP,IAA4BK,EAAQ;AAC/C,cAAM,IAAI,MAAM,GAAGC,CAAO,eAAe;AAE3C,YAAMI,IAAQL,EAAQE,IAAS,CAAC,IAAKF,EAAQE,IAAS,CAAC,KAAK;AAC5D,UAAIG,IAAQR;AACV,cAAM,IAAI,MAAM,GAAGI,CAAO,oCAAoC;AAEhE,aAAAC,KAAUP,GACHU;AAAA,IACT;AACA,QAAID,MAAUV,GAA4B;AACxC,UAAIQ,IAASN,IAA4BI,EAAQ;AAC/C,cAAM,IAAI,MAAM,GAAGC,CAAO,eAAe;AAE3C,YAAMI,KACHL,EAAQE,IAAS,CAAC,IAChBF,EAAQE,IAAS,CAAC,KAAK,IACvBF,EAAQE,IAAS,CAAC,KAAK,KACvBF,EAAQE,IAAS,CAAC,KAAK,QAC1B;AACF,UAAIG,IAAQP;AACV,cAAM,IAAI,MAAM,GAAGG,CAAO,oCAAoC;AAEhE,aAAAC,KAAUN,GACHS;AAAA,IACT;AACA,UAAM,IAAI,MAAM,GAAGJ,CAAO,sCAAsC;AAAA,EAClE,GAEMK,IAAQH,EAAA,GACRI,IAAsB,CAAA;AAC5B,WAASC,IAAI,GAAGA,IAAIF,GAAOE,KAAK;AAC9B,UAAMC,IAAMN,EAAA;AACZ,QAAID,IAASO,IAAMT,EAAQ;AACzB,YAAM,IAAI,MAAM,GAAGC,CAAO,eAAe;AAE3C,IAAAM,EAAM,KAAKP,EAAQ,SAASE,GAAQA,IAASO,CAAG,CAAC,GACjDP,KAAUO;AAAA,EACZ;AACA,MAAIP,MAAWF,EAAQ;AACrB,UAAM,IAAI,MAAM,GAAGC,CAAO,qBAAqB;AAEjD,SAAOM;AACT;AC/DA,MAAMG,IAAoB,IACpBC,IAAO,GACPC,IAAkB,IAClBC,IAAuB,GAGvBC,IAA0B,IAE1BC,IAAuB;AAGtB,SAASC,EACdC,GACsB;AACtB,SACEA,MAAW,UACXA,EAAO,WAAWP,KAClBO,EAAO,CAAC,MAAMN,KACdM,EAAO,CAAC,MAAML;AAElB;AAEA,SAASM,EAAWC,GAAeC,GAAwB;AACzD,SAAOD,EAAE,WAAWC,EAAE,UAAUD,EAAE,MAAM,CAACE,GAAMb,MAAMa,MAASD,EAAEZ,CAAC,CAAC;AACpE;AAGA,SAASc,EACPC,GACAC,GAC+C;AAC/C,QAAMjB,IAAQR,EAAmBwB,GAAoB,oBAAoB;AACzE,MAAIhB,EAAM,WAAWQ;AACnB,UAAM,IAAI;AAAA,MACR,uBAAuBS,CAAU,mFACajB,EAAM,MAAM;AAAA,IAAA;AAG9D,SAAO,EAAE,WAAWA,EAAM,CAAC,GAAG,QAAQA,EAAM,CAAC,EAAA;AAC/C;AAyBO,SAASkB,EACdtE,GACM;AACN,QAAM,EAAE,kBAAAuE,GAAkB,eAAAC,GAAe,YAAAH,EAAA,IAAerE,GAElDyE,IAAWD,EAAc;AAG/B,MAAIC,MAAa,UAAaA,EAAS,SAAS;AAC9C,UAAM,IAAI;AAAA,MACR,uBAAuBJ,CAAU,kEACLI,EAAS,MAAM;AAAA,IAAA;AAG/C,QAAMC,IAAUD,KAAA,gBAAAA,EAAW,IACrB5B,IAAU2B,EAAc,qBAC1BL,EAAoBK,EAAc,oBAAoBH,CAAU,IAChE;AAKJ,MACEK,KACA7B,MACC,CAACkB,EAAWW,EAAQ,WAAW7B,EAAQ,SAAS,KAC/C,CAACkB,EAAWW,EAAQ,QAAQ7B,EAAQ,MAAM;AAE5C,UAAM,IAAI;AAAA,MACR,uBAAuBwB,CAAU;AAAA,IAAA;AAIrC,QAAMM,IAAWD,KAAW7B;AAC5B,MAAI,CAAC8B;AACH,UAAM,IAAI;AAAA,MACR,uBAAuBN,CAAU;AAAA,IAAA;AAKrC,EAAAO;AAAA,IACEL;AAAA,IACAI,EAAS;AAAA,IACTA,EAAS;AAAA,IACTN;AAAA,EAAA;AAEJ;AAQA,SAASO,EACPL,GACAM,GACAC,GACAT,GACM;AACN,QAAM7C,IAAOC,EAAK,QAAQ8C,CAAgB;AAE1C,MAAIF,IAAa,KAAKA,KAAc7C,EAAK,KAAK,OAAO;AACnD,UAAM,IAAI;AAAA,MACR,eAAe6C,CAAU,kBAAkB7C,EAAK,KAAK,OAAO,MAAM;AAAA,IAAA;AAGtE,QAAMuD,IAAUvD,EAAK,KAAK,OAAO6C,CAAU,EAAE;AAC7C,MAAI,CAACU,KAAW,CAAClB,EAAekB,EAAQ,MAAM;AAC5C,UAAM,IAAI;AAAA,MACR,SAASV,CAAU;AAAA,IAAA;AAMvB,MAAIS,EAAO,WAAWnB;AACpB,UAAM,IAAI;AAAA,MACR,uBAAuBU,CAAU,yCACxBS,EAAO,MAAM;AAAA,IAAA;AAG1B,MAAI,CAACE,EAAI,kBAAkBF,CAAM;AAC/B,UAAM,IAAI;AAAA,MACR,uBAAuBT,CAAU;AAAA,IAAA;AAMrC,QAAMY,IAAUF,EAAQ,OAAO;AAAA,IAC7BrB;AAAA,IACAH;AAAA,EAAA;AAEF,MAAI,CAACQ,EAAWmB,EAAQ,QAAQ9D,EAAO,KAAK0D,CAAM,CAAC,GAAGG,CAAO;AAC3D,UAAM,IAAI;AAAA,MACR,uBAAuBZ,CAAU;AAAA,IAAA;AAQrC,MAAIc;AACJ,MAAI;AACF,IAAAA,IAAUC,EAAQ,UAAU,OAAOhE,EAAO,KAAKyD,CAAgB,CAAC;AAAA,EAClE,SAAS1C,GAAG;AACV,UAAM,IAAI;AAAA,MACR,uBAAuBkC,CAAU,8DACNlC,aAAa,QAAQA,EAAE,UAAU,OAAOA,CAAC,CAAC;AAAA,IAAA;AAAA,EAEzE;AACA,MAAIgD,EAAQ,aAAa5E,EAAY;AACnC,UAAM,IAAI;AAAA,MACR,uBAAuB8D,CAAU,yCAC1Bc,EAAQ,SAAS,SAAS,EAAE,CAAC;AAAA,IAAA;AAQxC,QAAME,IAAalE,EAAS,MAAM,EAAE,MAAMC,EAAO,KAAK6D,CAAO,EAAA,CAAG,EAAE;AAClE,MAAI,CAACI;AACH,UAAM,IAAI;AAAA,MACR,uBAAuBhB,CAAU;AAAA,IAAA;AAIrC,QAAMiB,IADK/E,EAAY,WAAWiB,EAAK,KAAK,UAAU,WAAW,UAAU,EACxD;AAAA,IACjB6C;AAAA,IACAgB;AAAA,IACAN,EAAQ;AAAA,IACRI,EAAQ;AAAA,EAAA;AAMV,MAAII,IAAW;AACf,MAAI;AACF,IAAAA,IAAWP,EAAI,OAAOM,GAASR,GAAQK,EAAQ,WAAW,EAAI;AAAA,EAChE,QAAQ;AACN,IAAAI,IAAW;AAAA,EACb;AACA,MAAI,CAACA;AACH,UAAM,IAAI;AAAA,MACR,8BAA8BlB,CAAU;AAAA,IAAA;AAK9C;ACrNA,MAAMmB,IAAoB,IACpBC,IAAkBlF,EAAY,iBAC9BmF,IAAcnF,EAAY,aAG1BoF,IAAkB,IAClBC,KAAO,IACPC,KAAkB,IAClBC,KAAyB;AAE/B,SAASC,GAAajC,GAAsD;AAC1E,SACEA,MAAW,UACXA,EAAO,WAAW6B,KAClB7B,EAAO,CAAC,MAAM8B,MACd9B,EAAO,CAAC,MAAM+B;AAElB;AAGA,SAASG,GACP3D,GACAgC,GAC6C;AAC7C,MAAIhC,EAAI,WAAWmD;AACjB,WAAO,EAAE,WAAWnD,GAAK,UAAUoD,EAAA;AAErC,MACEpD,EAAI,WAAWmD,IAAoB,KACnCnD,EAAImD,CAAiB,MAAME;AAE3B,WAAO;AAAA,MACL,WAAWrD,EAAI,SAAS,GAAGmD,CAAiB;AAAA,MAC5C,UAAUE;AAAA,IAAA;AAGd,QAAM,IAAI;AAAA,IACR,gCAAgCrB,CAAU,qFACMhC,EAAI,MAAM;AAAA,EAAA;AAE9D;AAoBO,SAAS4D,GACdjG,GACM;AACN,QAAM,EAAE,kBAAAuE,GAAkB,cAAA2B,GAAc,YAAA7B,EAAA,IAAerE,GAEjDwB,IAAOC,EAAK,QAAQ8C,CAAgB;AAE1C,MAAIF,IAAa,KAAKA,KAAc7C,EAAK,KAAK,OAAO;AACnD,UAAM,IAAI;AAAA,MACR,eAAe6C,CAAU,kBAAkB7C,EAAK,KAAK,OAAO,MAAM;AAAA,IAAA;AAItE,MAAI,CAAC2E,EAAkB3E,EAAK,KAAK,OAAO6C,CAAU,CAAC;AACjD,UAAM,IAAI;AAAA,MACR,SAASA,CAAU;AAAA,IAAA;AAOvB,QAAM+B,IAA2B,CAAA,GAC3BC,IAAmB,CAAA;AACzB,WAAShD,IAAI,GAAGA,IAAI7B,EAAK,KAAK,OAAO,QAAQ6B,KAAK;AAChD,UAAM0B,IAAUvD,EAAK,KAAK,OAAO6B,CAAC,EAAE;AACpC,QAAI,CAAC0B;AACH,YAAM,IAAI;AAAA,QACR,kCAAkC1B,CAAC;AAAA,MAAA;AAIvC,IAAA+C,EAAe,KAAKrB,EAAQ,MAAM,GAClCsB,EAAO,KAAKtB,EAAQ,KAAK;AAAA,EAC3B;AAEA,QAAM,EAAE,WAAAuB,GAAW,UAAAC,EAAA,IAAaP;AAAA,IAC9BjF,EAAgBb,EAAegG,CAAY,CAAC;AAAA,IAC5C7B;AAAA,EAAA,GAIIiB,IADK/E,EAAY,WAAWiB,EAAK,KAAK,UAAU,WAAW,UAAU,EACxD;AAAA,IACjB6C;AAAA,IACA+B;AAAA,IACAC;AAAA,IACAE;AAAA,EAAA,GAKIC,IAAYJ,EAAe/B,CAAU,EAAE,SAASyB,EAAsB;AAE5E,MAAI,CAACd,EAAI,cAAcM,GAASkB,GAAWF,CAAS;AAClD,UAAM,IAAI;AAAA,MACR,wCAAwCjC,CAAU,qEACRjD,EAAO,KAAKoF,CAAS,EAAE,SAAS,KAAK,CAAC;AAAA,IAAA;AAItF;AAMA,SAASL,EAAkBrE,GAKf;;AACV,SACEA,EAAM,mBAAmB,UACzBA,EAAM,kBAAkB,UACxBA,EAAM,kBAAkB,UACxBiE,IAAaxE,IAAAO,EAAM,gBAAN,gBAAAP,EAAmB,MAAM;AAE1C;AAOA,SAASkF,GACPrC,GACAC,GACY;AACZ,QAAMjB,IAAQR,EAAmBwB,GAAoB,oBAAoB;AACzE,MAAIhB,EAAM,WAAW;AACnB,UAAM,IAAI;AAAA,MACR,uBAAuBiB,CAAU,kEACNjB,EAAM,MAAM;AAAA,IAAA;AAG3C,SAAOA,EAAM,CAAC;AAChB;AAEA,SAASW,GAAWC,GAAeC,GAAwB;AACzD,SAAOD,EAAE,WAAWC,EAAE,UAAUD,EAAE,MAAM,CAACE,GAAMb,MAAMa,MAASD,EAAEZ,CAAC,CAAC;AACpE;AA2BO,SAASqD,GACd1G,GACQ;AACR,QAAM,EAAE,kBAAAuE,GAAkB,iBAAAoC,EAAA,IAAoB3G,GAExC4G,IAAYnF,EAAK,QAAQ8C,CAAgB,GACzCsC,IAAWpF,EAAK,QAAQkF,CAAe;AAE7C,MAAIE,EAAS,KAAK,OAAO,WAAWD,EAAU,KAAK,OAAO;AACxD,UAAM,IAAI;AAAA,MACR,6BAA6BC,EAAS,KAAK,OAAO,MAAM,+BACzCD,EAAU,KAAK,OAAO,MAAM;AAAA,IAAA;AAI/C,MAAIE,IAAW;AACf,SAAAF,EAAU,KAAK,OAAO,QAAQ,CAAC9E,GAAOuC,MAAe;;AACnD,UAAMG,IAAgBqC,EAAS,KAAK,OAAOxC,CAAU;AAErD,QAAI,CAAC8B,EAAkBrE,CAAK,GAAG;AAG7B,MAAI+B,GAAetC,IAAAO,EAAM,gBAAN,gBAAAP,EAAmB,MAAM,KAC1C+C,EAA8B;AAAA,QAC5B,kBAAAC;AAAA,QACA,eAAAC;AAAA,QACA,YAAAH;AAAA,MAAA,CACD;AAEH;AAAA,IACF;AACA,IAAAyC;AAEA,UAAMC,IAAYvC,EAAc,WAC1BwC,IAAaxC,EAAc,qBAC7BiC,GAAkBjC,EAAc,oBAAoBH,CAAU,IAC9D;AAMJ,QAAI0C,KAAaC,KAAc,CAACjD,GAAWgD,GAAWC,CAAU;AAC9D,YAAM,IAAI;AAAA,QACR,uBAAuB3C,CAAU;AAAA,MAAA;AAIrC,UAAMhC,IAAM0E,KAAaC;AACzB,QAAI,CAAC3E;AACH,YAAM,IAAI;AAAA,QACR,uBAAuBgC,CAAU;AAAA,MAAA;AAKrC,IAAA4B,GAA8B;AAAA,MAC5B,kBAAA1B;AAAA,MACA,cAAcnD,EAAO,KAAKiB,CAAG,EAAE,SAAS,KAAK;AAAA,MAC7C,YAAAgC;AAAA,IAAA,CACD;AAAA,EACH,CAAC,GAEMyC;AACT;"}