@babylonlabs-io/ts-sdk 0.69.1 → 0.70.1

package/dist/tbv/core/primitives/index.js

@@ -1,49 +1,55 @@
-import { P as s, f as t, g as r, d as i, b as o, a as u, c as n, h as P, e as d } from "../../../verifyScriptPathSchnorrSignature-Dy9gF5RF.js";
-import { a as b } from "../../../constants-GjWXdaqV.js";
-import { computeMinClaimValue as c, computeMinPeginFee as g, deriveVaultId as x, peginP2aAnchorOutput as y, supportedTxGraphVersions as f, validatePeginP2aAnchor as h } from "@babylonlabs-io/babylon-tbv-rust-wasm";
-import { a as S, c as v, b as A, e as T, f as V } from "../../../verifyKeyPathSchnorrSignature-C6Cmk0R1.js";
-import { a as K, b as C } from "../../../noPayout-CXn-geIS.js";
-import { b as I } from "../../../challengeAssert-BNQ8sToz.js";
-import { c as k, d as B, a as M, b as N, e as X, f as z, g as R, h as U, i as j, j as w, p as E, s as G, t as L, u as W, v as q } from "../../../bitcoin-Ch_jxnDa.js";
+import { P as s, h as t, i as r, j as i, f as o, b as u, a as n, c as P, k as l, d, e as b, g as c } from "../../../verifyScriptPathSchnorrSignature-CQYucnJA.js";
+import { a as g } from "../../../constants-DRiWbItj.js";
+import { computeMinClaimValue as x, computeMinPeginFee as y, deriveVaultId as S, peginP2aAnchorOutput as f, supportedTxGraphVersions as h, validatePeginP2aAnchor as v } from "@babylonlabs-io/babylon-tbv-rust-wasm";
+import { a as A, c as V, b as C, e as I, f as O } from "../../../verifyKeyPathSchnorrSignature-C6Cmk0R1.js";
+import { c as F, a as H, b as R, e as k, r as D } from "../../../noPayout-BdATUPjF.js";
+import { b as N } from "../../../challengeAssert-BNQ8sToz.js";
+import { c as B, d as E, a as U, b as X, e as _, f as j, g as G, h as L, i as w, j as W, p as q, s as J, t as Q, u as Y, v as Z } from "../../../bitcoin-Ch_jxnDa.js";
 export {
-  s as PsbtSubstitutionError,
-  S as assertKeyPathSchnorrSignature,
-  t as assertPsbtUnsignedTxMatches,
-  v as assertReturnedKeyPathSignatures,
-  r as assertScriptPathSchnorrSignature,
-  b as assertValidVaultCoreVersion,
-  I as buildChallengeAssertPsbt,
-  K as buildNoPayoutPsbt,
-  i as buildPayoutPsbt,
-  A as buildPeginInputPsbt,
-  o as buildPeginTxFromFundedPrePegin,
-  u as buildPrePeginPsbt,
-  C as buildRefundPsbt,
-  k as canonicalizeBtcPubkey,
-  c as computeMinClaimValue,
-  g as computeMinPeginFee,
-  n as computeNumLocalChallengers,
-  P as createPayoutScript,
-  B as deriveBip86ScriptPubKeyHex,
-  M as deriveNativeSegwitAddress,
-  N as deriveTaprootAddress,
-  x as deriveVaultId,
-  X as ensureHexPrefix,
-  d as extractPayoutSignature,
-  T as extractPeginInputSignature,
-  V as finalizePeginInputPsbt,
-  z as formatSatoshisToBtc,
-  R as getSortedXOnlyPubkeys,
-  U as hexToUint8Array,
-  j as isAddressFromPublicKey,
-  w as isValidHex,
-  y as peginP2aAnchorOutput,
-  E as processPublicKeyToXOnly,
-  G as stripHexPrefix,
-  f as supportedTxGraphVersions,
-  L as toXOnly,
-  W as uint8ArrayToHex,
-  h as validatePeginP2aAnchor,
-  q as validateWalletPubkey
+  s as PEGIN_DEPOSITOR_CLAIM_VOUT,
+  t as PsbtSubstitutionError,
+  A as assertKeyPathSchnorrSignature,
+  r as assertPsbtUnsignedTxMatches,
+  V as assertReturnedKeyPathSignatures,
+  i as assertScriptPathSchnorrSignature,
+  g as assertValidVaultCoreVersion,
+  N as buildChallengeAssertPsbt,
+  F as buildNoPayoutPsbt,
+  o as buildPayoutPsbt,
+  C as buildPeginInputPsbt,
+  u as buildPeginTxFromFundedPrePegin,
+  n as buildPrePeginPsbt,
+  H as buildReclaimPsbt,
+  R as buildRefundPsbt,
+  B as canonicalizeBtcPubkey,
+  x as computeMinClaimValue,
+  y as computeMinPeginFee,
+  P as computeNumLocalChallengers,
+  l as createPayoutScript,
+  E as deriveBip86ScriptPubKeyHex,
+  d as deriveDepositorClaimDescriptor,
+  b as deriveDepositorClaimScriptPubKey,
+  U as deriveNativeSegwitAddress,
+  X as deriveTaprootAddress,
+  S as deriveVaultId,
+  _ as ensureHexPrefix,
+  k as estimateReclaimFeeSats,
+  c as extractPayoutSignature,
+  I as extractPeginInputSignature,
+  O as finalizePeginInputPsbt,
+  j as formatSatoshisToBtc,
+  G as getSortedXOnlyPubkeys,
+  L as hexToUint8Array,
+  w as isAddressFromPublicKey,
+  W as isValidHex,
+  f as peginP2aAnchorOutput,
+  q as processPublicKeyToXOnly,
+  D as reclaimVsize,
+  J as stripHexPrefix,
+  h as supportedTxGraphVersions,
+  Q as toXOnly,
+  Y as uint8ArrayToHex,
+  v as validatePeginP2aAnchor,
+  Z as validateWalletPubkey
 };
 //# sourceMappingURL=index.js.map

package/dist/tbv/core/primitives/psbt/__tests__/depositorClaim.test.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Depositor-claim descriptor tests.
+ *
+ * CLAUDE.md critical path #9: this derivation mints the script a real Bitcoin
+ * transaction is signed against, and it has no Rust counterpart to compare
+ * with — btc-vault's `SingleKeyConnector` is not exposed through WASM. So the
+ * differential oracle here is a second, independent JS implementation: the
+ * hand-rolled BIP-341 construction below, which mirrors the Ledger firmware
+ * test's `p2trFromSingleLeaf` (test_sign_psbt_validate.py:188) and shares no
+ * code with `payments.p2tr`.
+ *
+ * The differential runs over pinned golden vectors *and* randomised keys — a
+ * single hardcoded vector pins one input, not the function.
+ */
+export {};
+//# sourceMappingURL=depositorClaim.test.d.ts.map

package/dist/tbv/core/primitives/psbt/__tests__/depositorClaim.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"depositorClaim.test.d.ts","sourceRoot":"","sources":["../../../../../../src/tbv/core/primitives/psbt/__tests__/depositorClaim.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/tbv/core/primitives/psbt/__tests__/reclaim.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Reclaim PSBT builder tests.
+ *
+ * The builder signs away a real UTXO, so every assertion it makes gets a
+ * rejection test here: one per bind, plus value conservation and the dust
+ * floor. The vsize model is measured against a real transaction rather than
+ * asserted against the arithmetic that produced it.
+ */
+export {};
+//# sourceMappingURL=reclaim.test.d.ts.map

package/dist/tbv/core/primitives/psbt/__tests__/reclaim.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reclaim.test.d.ts","sourceRoot":"","sources":["../../../../../../src/tbv/core/primitives/psbt/__tests__/reclaim.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/tbv/core/primitives/psbt/constants.d.ts

@@ -15,6 +15,13 @@
  * Input 0: PegIn:0 (signed). Input 1: Assert:0 (in sighash, not signed).
  */
 export declare const DEPOSITOR_PAYOUT_INPUT_COUNT = 2;
+/**
+ * Inputs the depositor signs per Payout / NoPayout PSBT: input 0 only. The
+ * other inputs are in the SIGHASH_DEFAULT sighash but carry no depositor
+ * signature — the Ledger host expects exactly this many yields, so a drift
+ * here re-arms an input the device never signs.
+ */
+export declare const DEPOSITOR_SIGNED_INPUT_COUNT = 1;
 /** PegIn vault output index spent by the depositor's Payout input 0. */
 export declare const PEGIN_VAULT_OUTPUT_INDEX = 0;
 /** Assert output index spent by the depositor's Payout input 1 (NOT signed). */

package/dist/tbv/core/primitives/psbt/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/tbv/core/primitives/psbt/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;GAGG;AACH,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C;;;GAGG;AACH,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAE3C;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC,sFAAsF;AACtF,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAEhD,+EAA+E;AAC/E,eAAO,MAAM,kCAAkC,IAAI,CAAC;AAEpD;;;;;;GAMG;AACH,eAAO,MAAM,0CAA0C,IAAI,CAAC;AAE5D;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,QAAS,CAAC;AAEtD;;;;;GAKG;AACH,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/tbv/core/primitives/psbt/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;GAGG;AACH,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C;;;GAGG;AACH,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAE3C;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC,sFAAsF;AACtF,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAEhD,+EAA+E;AAC/E,eAAO,MAAM,kCAAkC,IAAI,CAAC;AAEpD;;;;;;GAMG;AACH,eAAO,MAAM,0CAA0C,IAAI,CAAC;AAE5D;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,QAAS,CAAC;AAEtD;;;;;GAKG;AACH,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC"}

package/dist/tbv/core/primitives/psbt/depositorClaim.d.ts

@@ -0,0 +1,47 @@
+import { Buffer } from 'buffer';
+/**
+ * Vout of the depositor-claim output in every PegIn version (btc-vault: vault
+ * at 0, depositor claim at 1, optional P2A anchor appended after).
+ *
+ * Version-invariant: the graph version dispatches only the trailing P2A anchor
+ * (absent in v1, 240 sats at vout 2 in v2/v3). Nothing touches vout 1.
+ */
+export declare const PEGIN_DEPOSITOR_CLAIM_VOUT = 1;
+/** The single-leaf taptree's spend material for one depositor key. */
+export interface DepositorClaimDescriptor {
+    /** P2TR scriptPubKey the PegIn pays at {@link PEGIN_DEPOSITOR_CLAIM_VOUT}. */
+    scriptPubKey: Buffer;
+    /** The one tapleaf: `<depositor> OP_CHECKSIG`, 34 bytes. */
+    leafScript: Buffer;
+    /**
+     * Control block for that leaf: `[leafVersion | outputKeyParity] || NUMS`,
+     * 33 bytes. The tree has a single leaf at depth 0, so it carries no sibling
+     * hashes.
+     */
+    controlBlock: Buffer;
+    /**
+     * The NUMS internal key the taptree commits to — the PSBT's `tapInternalKey`.
+     * Carried here so an input's internal key and control block provably come
+     * from the same derivation.
+     */
+    internalKey: Buffer;
+}
+/**
+ * Derive the depositor-claim output's spend material in JS, independently of
+ * WASM — the Rust `SingleKeyConnector` has no WASM wrapper, so this is the
+ * only derivation available on the JS side.
+ *
+ * Takes no graph version: the connector is identical across v1/v2/v3. A future
+ * `VAULT_WASM_COMMIT` bump that changed it would break `assertPeginTxShape` at
+ * peg-in build time, which is where that regression should surface.
+ *
+ * @param depositorPubkey - x-only depositor pubkey, 64-char hex (no 0x prefix)
+ * @throws If bitcoinjs cannot derive the P2TR output or its control block
+ */
+export declare function deriveDepositorClaimDescriptor(depositorPubkey: string): DepositorClaimDescriptor;
+/**
+ * The depositor-claim output's scriptPubKey alone — the peg-in validation path,
+ * which has no need of the spend material.
+ */
+export declare function deriveDepositorClaimScriptPubKey(depositorPubkey: string): Buffer;
+//# sourceMappingURL=depositorClaim.d.ts.map

package/dist/tbv/core/primitives/psbt/depositorClaim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"depositorClaim.d.ts","sourceRoot":"","sources":["../../../../../src/tbv/core/primitives/psbt/depositorClaim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAShC;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,sEAAsE;AACtE,MAAM,WAAW,wBAAwB;IACvC,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,8BAA8B,CAC5C,eAAe,EAAE,MAAM,GACtB,wBAAwB,CA2C1B;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,eAAe,EAAE,MAAM,GACtB,MAAM,CAER"}

package/dist/tbv/core/primitives/psbt/pegin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pegin.d.ts","sourceRoot":"","sources":["../../../../../src/tbv/core/primitives/psbt/pegin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAOL,KAAK,OAAO,EACb,MAAM,uCAAuC,CAAC;AAgB/C;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,eAAe,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kEAAkE;IAClE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,0EAA0E;IAC1E,0BAA0B,EAAE,MAAM,EAAE,CAAC;IACrC,+DAA+D;IAC/D,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,iGAAiG;IACjG,OAAO,EAAE,MAAM,CAAC;IAChB,6FAA6F;IAC7F,eAAe,EAAE,MAAM,CAAC;IACxB,yDAAyD;IACzD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAUD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;OAQG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,+DAA+D;IAC/D,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,8CAA8C;IAC9C,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,iDAAiD;IACjD,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,sEAAsE;IACtE,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,mEAAmE;IACnE,cAAc,EAAE,cAAc,CAAC;IAC/B,wDAAwD;IACxD,aAAa,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,kBAAkB,CAAC,CA+D7B;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,GAAG,SAAS,CAapB;AAED;;;;;;;;;GASG;AACH,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,aAAa,CAAC,CAwCxB"}
+{"version":3,"file":"pegin.d.ts","sourceRoot":"","sources":["../../../../../src/tbv/core/primitives/psbt/pegin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAML,KAAK,OAAO,EACb,MAAM,uCAAuC,CAAC;AAe/C;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,eAAe,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kEAAkE;IAClE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,0EAA0E;IAC1E,0BAA0B,EAAE,MAAM,EAAE,CAAC;IACrC,+DAA+D;IAC/D,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,iGAAiG;IACjG,OAAO,EAAE,MAAM,CAAC;IAChB,6FAA6F;IAC7F,eAAe,EAAE,MAAM,CAAC;IACxB,yDAAyD;IACzD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAUD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;OAQG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,+DAA+D;IAC/D,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,8CAA8C;IAC9C,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,iDAAiD;IACjD,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,sEAAsE;IACtE,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,mEAAmE;IACnE,cAAc,EAAE,cAAc,CAAC;IAC/B,wDAAwD;IACxD,aAAa,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,kBAAkB,CAAC,CA+D7B;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,GAAG,SAAS,CAapB;AAED;;;;;;;;;GASG;AACH,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,aAAa,CAAC,CAwCxB"}

package/dist/tbv/core/primitives/psbt/reclaim.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Reclaim PSBT Builder Primitive
+ *
+ * Builds an unsigned PSBT that sweeps the depositor-claim reserve — PegIn
+ * vout 1 — back to the depositor's own BIP-86 address.
+ *
+ * The reserve funds the depositor's `claim_tx`, their recourse if the vault
+ * provider fails during peg-out. When the vault provider claims instead and
+ * the depositor withdraws normally, nothing ever spends it. This primitive is
+ * the only thing in the repository that can.
+ *
+ * Spend path: the single `<depositor> OP_CHECKSIG` tapleaf (see
+ * ./depositorClaim). No timelock, no counterparty signature — the depositor's
+ * Schnorr signature alone. That is also why the *caller* must gate: this
+ * builder will happily sweep a reserve whose vault is still live, which would
+ * permanently void the depositor's pre-signed recourse graph. Eligibility is
+ * enforced upstream, in the service.
+ *
+ * @module primitives/psbt/reclaim
+ */
+/**
+ * Virtual size of an N-in/1-out reclaim transaction.
+ *
+ * `REFUND_VSIZE = 160` does not generalise to N inputs, and
+ * `computePeginBaseFeeSats` is wrong for this shape entirely — its
+ * `P2TR_INPUT_SIZE = 58` is a *key-path* input and under-fees a script-path
+ * spend by roughly a quarter.
+ *
+ * N=1 → 129 vB; each additional input adds 75 vB.
+ */
+export declare function reclaimVsize(numInputs: number): number;
+/** Absolute fee in satoshis for an N-in/1-out reclaim at a given rate. */
+export declare function estimateReclaimFeeSats(feeRateSatsVb: number, numInputs: number): bigint;
+/** One depositor-claim reserve to sweep, with the material to bind it. */
+export interface ReclaimReserve {
+    /**
+     * The contract's own copy of the depositor-signed PegIn transaction
+     * (`VaultProtocolInfo.depositorSignedPeginTx`). Authoritative: its SegWit
+     * txid equals the broadcast PegIn's, and its `outs[1]` carries the reserve's
+     * script and value at no extra RPC cost.
+     */
+    depositorSignedPeginTxHex: string;
+    /** Independent chain observation of `peginTxid:1` (esplora UTXO lookup). */
+    observed: {
+        /** scriptPubKey hex, with or without `0x` prefix. */
+        scriptPubKey: string;
+        /** Output value in satoshis. */
+        value: bigint;
+    };
+    /**
+     * The reserve value recomputed from this vault's protocol parameters via
+     * `computeMinClaimValue`. Bound so a doctored PegIn that agrees with itself
+     * and with a compromised indexer still fails.
+     */
+    expectedValue: bigint;
+}
+export interface BuildReclaimPsbtParams {
+    /**
+     * The **connected wallet's live** x-only pubkey, 64-char hex. Never the
+     * indexer's `depositorBtcPubkey`: re-deriving from the live key is what
+     * proves the wallet about to sign is the wallet that can spend, and rejects
+     * the wrong-wallet case with an error instead of an unspendable broadcast.
+     */
+    depositorPubkey: string;
+    /**
+     * Reserves to sweep. An array so batching several vaults into one
+     * transaction is a later change rather than a rewrite; today the app passes
+     * exactly one.
+     */
+    inputs: ReclaimReserve[];
+    /** Absolute fee in satoshis. The caller sizes it; see `reclaimVsize`. */
+    feeSats: bigint;
+}
+export interface BuildReclaimPsbtResult {
+    /** PSBT hex ready for depositor signing. */
+    psbtHex: string;
+    /** Value of the single output — what the depositor actually receives. */
+    outputValue: bigint;
+    /** Sum of the swept reserves, before fee. */
+    totalInputValue: bigint;
+}
+/**
+ * Build the N-in/1-out reclaim PSBT.
+ *
+ * Every input is bound three ways before it reaches the PSBT: the contract's
+ * PegIn bytes, the chain observation, and a JS re-derivation from the live
+ * wallet key must agree on both script and value. Any disagreement throws.
+ *
+ * @throws If `inputs` is empty, the fee is non-positive, any input fails its
+ *   script or value bind, or the resulting output would be at or below dust.
+ */
+export declare function buildReclaimPsbt(params: BuildReclaimPsbtParams): BuildReclaimPsbtResult;
+//# sourceMappingURL=reclaim.d.ts.map

package/dist/tbv/core/primitives/psbt/reclaim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reclaim.d.ts","sourceRoot":"","sources":["../../../../../src/tbv/core/primitives/psbt/reclaim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAqDH;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAWtD;AAED,0EAA0E;AAC1E,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GAChB,MAAM,CAOR;AAED,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,yBAAyB,EAAE,MAAM,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,EAAE;QACR,qDAAqD;QACrD,YAAY,EAAE,MAAM,CAAC;QACrB,gCAAgC;QAChC,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;;OAKG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,sBAAsB,GAC7B,sBAAsB,CA4IxB"}

package/dist/tbv/core/services/deposit/signDepositorGraph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signDepositorGraph.d.ts","sourceRoot":"","sources":["../../../../../src/tbv/core/services/deposit/signDepositorGraph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAGrE,OAAO,KAAK,EACV,aAAa,EAEd,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EACV,+BAA+B,EAC/B,0BAA0B,EAG3B,MAAM,oCAAoC,CAAC;AA4a5C;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,sBAAsB,EAAE,MAAM,CAAC;IAC/B,kEAAkE;IAClE,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,0EAA0E;IAC1E,6BAA6B,EAAE,MAAM,EAAE,CAAC;IACxC,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,4BAA4B,EAAE,MAAM,CAAC;IACrC;;;;;OAKG;IACH,4BAA4B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,uEAAuE;IACvE,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,2CAA2C;IAC3C,cAAc,EAAE,0BAA0B,CAAC;IAC3C,iCAAiC;IACjC,SAAS,EAAE,aAAa,CAAC;IACzB,8DAA8D;IAC9D,cAAc,EAAE,4BAA4B,CAAC;CAC9C;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,+BAA+B,CAAC,CAuC1C"}
+{"version":3,"file":"signDepositorGraph.d.ts","sourceRoot":"","sources":["../../../../../src/tbv/core/services/deposit/signDepositorGraph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAGrE,OAAO,KAAK,EACV,aAAa,EAEd,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EACV,+BAA+B,EAC/B,0BAA0B,EAG3B,MAAM,oCAAoC,CAAC;AAma5C;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,sBAAsB,EAAE,MAAM,CAAC;IAC/B,kEAAkE;IAClE,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,0EAA0E;IAC1E,6BAA6B,EAAE,MAAM,EAAE,CAAC;IACxC,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,4BAA4B,EAAE,MAAM,CAAC;IACrC;;;;;OAKG;IACH,4BAA4B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,uEAAuE;IACvE,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,2CAA2C;IAC3C,cAAc,EAAE,0BAA0B,CAAC;IAC3C,iCAAiC;IACjC,SAAS,EAAE,aAAa,CAAC;IACzB,8DAA8D;IAC9D,cAAc,EAAE,4BAA4B,CAAC;CAC9C;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,+BAA+B,CAAC,CAuC1C"}

package/dist/tbv/core/services/index.cjs

@@ -1,2 +1,2 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("../../../signPsbtsWithFallback-C5cVgYhh.cjs"),t=require("../../../buildAndBroadcastRefund-CPPGvzXb.cjs"),i=require("../../../peginState-eaQ4IO_R.cjs");exports.computeHashlock=e.computeHashlock;exports.validateSecretAgainstHashlock=e.validateSecretAgainstHashlock;exports.BIP68NotMatureError=t.BIP68NotMatureError;exports.ClaimerPegoutStatusValue=t.ClaimerPegoutStatusValue;exports.PEGIN_ETH_CONFIRMATIONS=t.PEGIN_ETH_CONFIRMATIONS;exports.ParticipantKeyDriftError=t.ParticipantKeyDriftError;exports.PeginRegistrationMissingError=t.PeginRegistrationMissingError;exports.PeginRegistrationNotFinalError=t.PeginRegistrationNotFinalError;exports.REFUND_MAX_FEE_FRACTION_DENOMINATOR=t.REFUND_MAX_FEE_FRACTION_DENOMINATOR;exports.REFUND_MAX_FEE_FRACTION_NUMERATOR=t.REFUND_MAX_FEE_FRACTION_NUMERATOR;exports.REFUND_MAX_FEE_RATE_SATS_VB=t.REFUND_MAX_FEE_RATE_SATS_VB;exports.REFUND_VSIZE=t.REFUND_VSIZE;exports.RegisteredVaultVersionMismatchError=t.RegisteredVaultVersionMismatchError;exports.activateVault=t.activateVault;exports.activateVaultAndRedeem=t.activateVaultAndRedeem;exports.assertVaultProviderHintAccepted=t.assertVaultProviderHintAccepted;exports.buildAndBroadcastRefund=t.buildAndBroadcastRefund;exports.estimateRefundFeeSats=t.estimateRefundFeeSats;exports.isDepositAmountValid=t.isDepositAmountValid;exports.isHintAccepted=t.isHintAccepted;exports.isParticipantKeyDriftError=t.isParticipantKeyDriftError;exports.isPeginRegistrationMissingError=t.isPeginRegistrationMissingError;exports.isPeginRegistrationNotFinalError=t.isPeginRegistrationNotFinalError;exports.isPegoutTerminalStatus=t.isPegoutTerminalStatus;exports.isRecognizedPegoutStatus=t.isRecognizedPegoutStatus;exports.isRegisteredVaultVersionMismatchError=t.isRegisteredVaultVersionMismatchError;exports.matchKeyHint=t.matchKeyHint;exports.matchKeySetHint=t.matchKeySetHint;exports.resolveCurrentParticipantKeys=t.resolveCurrentParticipantKeys;exports.resolveParticipantKeysAtEpochs=t.resolveParticipantKeysAtEpochs;exports.runDepositorPresignFlow=t.runDepositorPresignFlow;exports.signDepositorGraph=t.signDepositorGraph;exports.submitWotsPublicKey=t.submitWotsPublicKey;exports.validateDepositAmount=t.validateDepositAmount;exports.validateMultiVaultDepositInputs=t.validateMultiVaultDepositInputs;exports.validateOnChainParticipantKeys=t.validateOnChainParticipantKeys;exports.validateProviderSelection=t.validateProviderSelection;exports.validateRemainingCapacity=t.validateRemainingCapacity;exports.validateVaultAmounts=t.validateVaultAmounts;exports.validateVaultProviderPubkey=t.validateVaultProviderPubkey;exports.verifyRegisteredParticipantKeys=t.verifyRegisteredParticipantKeys;exports.verifyRegisteredVaultVersions=t.verifyRegisteredVaultVersions;exports.waitForPeginRegistrationDepth=t.waitForPeginRegistrationDepth;exports.waitForPeginStatus=t.waitForPeginStatus;exports.ContractStatus=i.ContractStatus;exports.PeginAction=i.PeginAction;exports.canPerformAction=i.canPerformAction;exports.getPeginProtocolState=i.getPeginProtocolState;exports.isActivationDeadlinePassedOnChain=i.isActivationDeadlinePassedOnChain;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("../../../signPsbtsWithFallback-Bo1PJX90.cjs"),t=require("../../../buildAndBroadcastReclaim-iNJfx0ZG.cjs"),i=require("../../../peginState-eaQ4IO_R.cjs");exports.computeHashlock=e.computeHashlock;exports.validateSecretAgainstHashlock=e.validateSecretAgainstHashlock;exports.BIP68NotMatureError=t.BIP68NotMatureError;exports.ClaimerPegoutStatusValue=t.ClaimerPegoutStatusValue;exports.PEGIN_ETH_CONFIRMATIONS=t.PEGIN_ETH_CONFIRMATIONS;exports.ParticipantKeyDriftError=t.ParticipantKeyDriftError;exports.PeginRegistrationMissingError=t.PeginRegistrationMissingError;exports.PeginRegistrationNotFinalError=t.PeginRegistrationNotFinalError;exports.RECLAIM_MAX_FEE_FRACTION_DENOMINATOR=t.RECLAIM_MAX_FEE_FRACTION_DENOMINATOR;exports.RECLAIM_MAX_FEE_FRACTION_NUMERATOR=t.RECLAIM_MAX_FEE_FRACTION_NUMERATOR;exports.RECLAIM_MAX_FEE_RATE_SATS_VB=t.RECLAIM_MAX_FEE_RATE_SATS_VB;exports.RECLAIM_WARN_FEE_FRACTION_NUMERATOR=t.RECLAIM_WARN_FEE_FRACTION_NUMERATOR;exports.REFUND_MAX_FEE_FRACTION_DENOMINATOR=t.REFUND_MAX_FEE_FRACTION_DENOMINATOR;exports.REFUND_MAX_FEE_FRACTION_NUMERATOR=t.REFUND_MAX_FEE_FRACTION_NUMERATOR;exports.REFUND_MAX_FEE_RATE_SATS_VB=t.REFUND_MAX_FEE_RATE_SATS_VB;exports.REFUND_VSIZE=t.REFUND_VSIZE;exports.ReclaimUneconomicalError=t.ReclaimUneconomicalError;exports.RegisteredVaultVersionMismatchError=t.RegisteredVaultVersionMismatchError;exports.activateVault=t.activateVault;exports.activateVaultAndRedeem=t.activateVaultAndRedeem;exports.assertVaultProviderHintAccepted=t.assertVaultProviderHintAccepted;exports.buildAndBroadcastReclaim=t.buildAndBroadcastReclaim;exports.buildAndBroadcastRefund=t.buildAndBroadcastRefund;exports.estimateRefundFeeSats=t.estimateRefundFeeSats;exports.isDepositAmountValid=t.isDepositAmountValid;exports.isHintAccepted=t.isHintAccepted;exports.isParticipantKeyDriftError=t.isParticipantKeyDriftError;exports.isPeginRegistrationMissingError=t.isPeginRegistrationMissingError;exports.isPeginRegistrationNotFinalError=t.isPeginRegistrationNotFinalError;exports.isPegoutTerminalStatus=t.isPegoutTerminalStatus;exports.isRecognizedPegoutStatus=t.isRecognizedPegoutStatus;exports.isRegisteredVaultVersionMismatchError=t.isRegisteredVaultVersionMismatchError;exports.matchKeyHint=t.matchKeyHint;exports.matchKeySetHint=t.matchKeySetHint;exports.resolveCurrentParticipantKeys=t.resolveCurrentParticipantKeys;exports.resolveParticipantKeysAtEpochs=t.resolveParticipantKeysAtEpochs;exports.runDepositorPresignFlow=t.runDepositorPresignFlow;exports.signDepositorGraph=t.signDepositorGraph;exports.submitWotsPublicKey=t.submitWotsPublicKey;exports.validateDepositAmount=t.validateDepositAmount;exports.validateMultiVaultDepositInputs=t.validateMultiVaultDepositInputs;exports.validateOnChainParticipantKeys=t.validateOnChainParticipantKeys;exports.validateProviderSelection=t.validateProviderSelection;exports.validateRemainingCapacity=t.validateRemainingCapacity;exports.validateVaultAmounts=t.validateVaultAmounts;exports.validateVaultProviderPubkey=t.validateVaultProviderPubkey;exports.verifyRegisteredParticipantKeys=t.verifyRegisteredParticipantKeys;exports.verifyRegisteredVaultVersions=t.verifyRegisteredVaultVersions;exports.waitForPeginRegistrationDepth=t.waitForPeginRegistrationDepth;exports.waitForPeginStatus=t.waitForPeginStatus;exports.ContractStatus=i.ContractStatus;exports.PeginAction=i.PeginAction;exports.canPerformAction=i.canPerformAction;exports.getPeginProtocolState=i.getPeginProtocolState;exports.isActivationDeadlinePassedOnChain=i.isActivationDeadlinePassedOnChain;
 //# sourceMappingURL=index.cjs.map

package/dist/tbv/core/services/index.d.ts

@@ -10,4 +10,5 @@ export * from './htlc';
 export * from './participants';
 export * from './pegout';
 export * from './refund';
+export * from './reclaim';
 //# sourceMappingURL=index.d.ts.map

package/dist/tbv/core/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/tbv/core/services/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/tbv/core/services/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC"}

package/dist/tbv/core/services/index.js

@@ -1,55 +1,61 @@
-import { c as s, v as i } from "../../../signPsbtsWithFallback-DCZO2h6i.js";
-import { H as r, E as o, P as n, o as c, c as l, d as u, K as g, L as P, M as d, N as E, R, a as p, b as A, y as v, I as m, J as F, g as N, z as V, p as _, i as D, e as y, G as S, F as M, t as h, A as f, B as C, C as I, D as K, r as O, s as T, f as H, h as b, j as U, v as k, k as w, l as x, m as B, n as G, q as X, u as z, w as j, x as q } from "../../../buildAndBroadcastRefund-DY4ZZcFL.js";
-import { C as L, P as W, c as Z, g as Q, i as Y } from "../../../peginState-CxDiaKuk.js";
+import { c as s, v as i } from "../../../signPsbtsWithFallback-X6ivsbh7.js";
+import { H as r, E as o, P as n, o as E, c as R, d as c, S as A, T as l, U as u, V as _, K as d, L as g, M as P, N as F, O as N, R as p, a as M, b as m, y as v, Q as C, I, J as T, g as V, z as O, p as S, i as D, e as y, G as h, F as f, t as K, A as U, B as H, C as b, D as B, r as X, s as L, f as k, h as w, j as x, v as G, k as z, l as W, m as j, n as q, q as J, u as Q, w as Z, x as Y } from "../../../buildAndBroadcastReclaim-kBHwOL02.js";
+import { C as aa, P as ta, c as sa, g as ia, i as ea } from "../../../peginState-CxDiaKuk.js";
 export {
   r as BIP68NotMatureError,
   o as ClaimerPegoutStatusValue,
-  L as ContractStatus,
+  aa as ContractStatus,
   n as PEGIN_ETH_CONFIRMATIONS,
-  c as ParticipantKeyDriftError,
-  W as PeginAction,
-  l as PeginRegistrationMissingError,
-  u as PeginRegistrationNotFinalError,
-  g as REFUND_MAX_FEE_FRACTION_DENOMINATOR,
-  P as REFUND_MAX_FEE_FRACTION_NUMERATOR,
-  d as REFUND_MAX_FEE_RATE_SATS_VB,
-  E as REFUND_VSIZE,
-  R as RegisteredVaultVersionMismatchError,
-  p as activateVault,
-  A as activateVaultAndRedeem,
+  E as ParticipantKeyDriftError,
+  ta as PeginAction,
+  R as PeginRegistrationMissingError,
+  c as PeginRegistrationNotFinalError,
+  A as RECLAIM_MAX_FEE_FRACTION_DENOMINATOR,
+  l as RECLAIM_MAX_FEE_FRACTION_NUMERATOR,
+  u as RECLAIM_MAX_FEE_RATE_SATS_VB,
+  _ as RECLAIM_WARN_FEE_FRACTION_NUMERATOR,
+  d as REFUND_MAX_FEE_FRACTION_DENOMINATOR,
+  g as REFUND_MAX_FEE_FRACTION_NUMERATOR,
+  P as REFUND_MAX_FEE_RATE_SATS_VB,
+  F as REFUND_VSIZE,
+  N as ReclaimUneconomicalError,
+  p as RegisteredVaultVersionMismatchError,
+  M as activateVault,
+  m as activateVaultAndRedeem,
   v as assertVaultProviderHintAccepted,
-  m as buildAndBroadcastRefund,
-  Z as canPerformAction,
+  C as buildAndBroadcastReclaim,
+  I as buildAndBroadcastRefund,
+  sa as canPerformAction,
   s as computeHashlock,
-  F as estimateRefundFeeSats,
-  Q as getPeginProtocolState,
-  Y as isActivationDeadlinePassedOnChain,
-  N as isDepositAmountValid,
-  V as isHintAccepted,
-  _ as isParticipantKeyDriftError,
+  T as estimateRefundFeeSats,
+  ia as getPeginProtocolState,
+  ea as isActivationDeadlinePassedOnChain,
+  V as isDepositAmountValid,
+  O as isHintAccepted,
+  S as isParticipantKeyDriftError,
   D as isPeginRegistrationMissingError,
   y as isPeginRegistrationNotFinalError,
-  S as isPegoutTerminalStatus,
-  M as isRecognizedPegoutStatus,
-  h as isRegisteredVaultVersionMismatchError,
-  f as matchKeyHint,
-  C as matchKeySetHint,
-  I as resolveCurrentParticipantKeys,
-  K as resolveParticipantKeysAtEpochs,
-  O as runDepositorPresignFlow,
-  T as signDepositorGraph,
-  H as submitWotsPublicKey,
-  b as validateDepositAmount,
-  U as validateMultiVaultDepositInputs,
-  k as validateOnChainParticipantKeys,
-  w as validateProviderSelection,
-  x as validateRemainingCapacity,
+  h as isPegoutTerminalStatus,
+  f as isRecognizedPegoutStatus,
+  K as isRegisteredVaultVersionMismatchError,
+  U as matchKeyHint,
+  H as matchKeySetHint,
+  b as resolveCurrentParticipantKeys,
+  B as resolveParticipantKeysAtEpochs,
+  X as runDepositorPresignFlow,
+  L as signDepositorGraph,
+  k as submitWotsPublicKey,
+  w as validateDepositAmount,
+  x as validateMultiVaultDepositInputs,
+  G as validateOnChainParticipantKeys,
+  z as validateProviderSelection,
+  W as validateRemainingCapacity,
   i as validateSecretAgainstHashlock,
-  B as validateVaultAmounts,
-  G as validateVaultProviderPubkey,
-  X as verifyRegisteredParticipantKeys,
-  z as verifyRegisteredVaultVersions,
-  j as waitForPeginRegistrationDepth,
-  q as waitForPeginStatus
+  j as validateVaultAmounts,
+  q as validateVaultProviderPubkey,
+  J as verifyRegisteredParticipantKeys,
+  Q as verifyRegisteredVaultVersions,
+  Z as waitForPeginRegistrationDepth,
+  Y as waitForPeginStatus
 };
 //# sourceMappingURL=index.js.map

package/dist/tbv/core/services/reclaim/__tests__/buildAndBroadcastReclaim.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Reclaim orchestration tests.
+ *
+ * The PSBT builder and its binds have their own suite; here the contract under
+ * test is the orchestration — fee caps, call order, per-input signature
+ * verification, and abort handling.
+ */
+export {};
+//# sourceMappingURL=buildAndBroadcastReclaim.test.d.ts.map

package/dist/tbv/core/services/reclaim/__tests__/buildAndBroadcastReclaim.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildAndBroadcastReclaim.test.d.ts","sourceRoot":"","sources":["../../../../../../src/tbv/core/services/reclaim/__tests__/buildAndBroadcastReclaim.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/tbv/core/services/reclaim/buildAndBroadcastReclaim.d.ts

@@ -0,0 +1,79 @@
+import { Hex } from 'viem';
+import { SignPsbtOptions } from '../../../../shared/wallets/interfaces/BitcoinWallet';
+import { BtcBroadcastResult, BtcBroadcaster } from '../refund/buildAndBroadcastRefund';
+/**
+ * Hard upper bound on the per-vbyte fee rate the SDK will sign a reclaim at.
+ * Same reasoning and value as the refund's cap: a compromised mempool endpoint
+ * can legally return up to 10,000 sat/vB, and 2000 leaves margin over the
+ * worst historical `halfHourFee` while still blocking that by 5×.
+ */
+export declare const RECLAIM_MAX_FEE_RATE_SATS_VB = 2000;
+/**
+ * Hard upper bound on the absolute fee as a fraction of the **swept total**.
+ *
+ * > ⚠️ The basis here is deliberately different from the refund's. There the
+ * > basis is `vault.amount` and the swept amount is far larger, so a 10% cap is
+ * > generous. Here the basis *is* the swept amount — roughly 33k sats — and a
+ * > 10% cap would block every reclaim above about 25 sat/vB. Do not "fix" this
+ * > into symmetry with `REFUND_MAX_FEE_FRACTION_*`; it would silently change
+ * > behaviour. The matching comment lives at the UI cap site.
+ */
+export declare const RECLAIM_MAX_FEE_FRACTION_NUMERATOR = 25n;
+export declare const RECLAIM_MAX_FEE_FRACTION_DENOMINATOR = 100n;
+/**
+ * Fraction of the swept total above which the UI warns but still allows the
+ * reclaim. Exported so the review screen derives its threshold from the same
+ * constant the SDK enforces against, rather than restating it.
+ */
+export declare const RECLAIM_WARN_FEE_FRACTION_NUMERATOR = 10n;
+export type ReclaimPsbtSigner = (psbtHex: string, opts: SignPsbtOptions) => Promise<string>;
+/** One reserve to sweep, as the caller resolves it. */
+export interface ReclaimVaultData {
+    /**
+     * The contract's own copy of the depositor-signed PegIn transaction
+     * (`VaultProtocolInfo.depositorSignedPeginTx`). Must come from the chain —
+     * never the indexer. Its `outs[1]` is one leg of the three-way bind.
+     */
+    depositorSignedPeginTxHex: string;
+    /** Independent chain observation of `peginTxid:1`. */
+    observed: {
+        scriptPubKey: string;
+        value: bigint;
+    };
+    /** This vault's reserve value, recomputed via `computeMinClaimValue`. */
+    expectedClaimValue: bigint;
+}
+export interface ReclaimInput<R extends BtcBroadcastResult = BtcBroadcastResult> {
+    vaultIds: Hex[];
+    /**
+     * The **connected wallet's live** BTC pubkey — compressed sec1 or x-only.
+     * Never the indexer's `depositorBtcPubkey`: re-deriving the claim script
+     * from the live key is what proves the wallet about to sign is the wallet
+     * that can spend.
+     */
+    depositorBtcPubkey: string;
+    /**
+     * Resolve the reserves to sweep, in the same order as `vaultIds`. The SDK
+     * passes no arguments — the caller closes over whatever context it needs.
+     */
+    readVaults: () => Promise<ReclaimVaultData[]>;
+    /** Mempool-derived sat/vB fee rate. Caller fetches it before invoking. */
+    feeRate: number;
+    /** BTC wallet signer; receives a PSBT hex + taproot script-path options. */
+    signPsbt: ReclaimPsbtSigner;
+    /** Broadcast callback — returns whatever shape the caller needs. */
+    broadcastTx: BtcBroadcaster<R>;
+    /** Checked at every async boundary. */
+    signal?: AbortSignal;
+}
+/**
+ * Build, sign, and broadcast a reclaim transaction sweeping one or more
+ * depositor-claim reserves back to the depositor's BIP-86 address.
+ *
+ * @returns whatever the injected `broadcastTx` returns (generic pass-through)
+ * @throws {@link ReclaimUneconomicalError} if the fee breaches either cap
+ * @throws `Error` if any validation or script/value bind fails
+ * @throws anything `readVaults`, `signPsbt`, or `broadcastTx` throws
+ */
+export declare function buildAndBroadcastReclaim<R extends BtcBroadcastResult = BtcBroadcastResult>(input: ReclaimInput<R>): Promise<R>;
+//# sourceMappingURL=buildAndBroadcastReclaim.d.ts.map

package/dist/tbv/core/services/reclaim/buildAndBroadcastReclaim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildAndBroadcastReclaim.d.ts","sourceRoot":"","sources":["../../../../../src/tbv/core/services/reclaim/buildAndBroadcastReclaim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEhC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qDAAqD,CAAC;AAc3F,OAAO,KAAK,EACV,kBAAkB,EAClB,cAAc,EACf,MAAM,mCAAmC,CAAC;AAI3C;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD;;;;;;;;;GASG;AACH,eAAO,MAAM,kCAAkC,MAAM,CAAC;AACtD,eAAO,MAAM,oCAAoC,OAAO,CAAC;AAEzD;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,MAAM,CAAC;AAEvD,MAAM,MAAM,iBAAiB,GAAG,CAC9B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,eAAe,KAClB,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB,uDAAuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,yBAAyB,EAAE,MAAM,CAAC;IAClC,sDAAsD;IACtD,QAAQ,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY,CAC3B,CAAC,SAAS,kBAAkB,GAAG,kBAAkB;IAEjD,QAAQ,EAAE,GAAG,EAAE,CAAC;IAChB;;;;;OAKG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,UAAU,EAAE,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC9C,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,oEAAoE;IACpE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IAC/B,uCAAuC;IACvC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAiBD;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,CAAC,SAAS,kBAAkB,GAAG,kBAAkB,EACjD,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAgHpC"}

package/dist/tbv/core/services/reclaim/errors.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Domain errors thrown by the reclaim service.
+ *
+ * @module services/reclaim/errors
+ */
+/**
+ * Thrown when the fee would consume too much of the swept reserve — either the
+ * per-vbyte rate exceeds the safety ceiling, or the absolute fee exceeds the
+ * fraction cap.
+ *
+ * Distinct from a generic error because the caller's response differs: nothing
+ * is at risk and nothing expires. The reserve simply stays where it is until
+ * fee rates fall, and the UI should say so rather than presenting a failure.
+ */
+export declare class ReclaimUneconomicalError extends Error {
+    /** Fee the reclaim would have paid, in satoshis. */
+    readonly feeSats: bigint;
+    /** Sum of the reserves the reclaim would have swept, in satoshis. */
+    readonly sweptTotalSats: bigint;
+    constructor(message: string, feeSats: bigint, sweptTotalSats: bigint);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/tbv/core/services/reclaim/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../../src/tbv/core/services/reclaim/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;;GAQG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,oDAAoD;IACpD,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,qEAAqE;IACrE,SAAgB,cAAc,EAAE,MAAM,CAAC;gBAE3B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;CAMrE"}

package/dist/tbv/core/services/reclaim/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Vault reclaim service — sweep the depositor-claim reserve (PegIn vout 1)
+ * back to the depositor after their vault has terminally settled.
+ *
+ * @module services/reclaim
+ */
+export { ReclaimUneconomicalError } from './errors';
+export { buildAndBroadcastReclaim, RECLAIM_MAX_FEE_FRACTION_DENOMINATOR, RECLAIM_MAX_FEE_FRACTION_NUMERATOR, RECLAIM_MAX_FEE_RATE_SATS_VB, RECLAIM_WARN_FEE_FRACTION_NUMERATOR, type ReclaimInput, type ReclaimPsbtSigner, type ReclaimVaultData, } from './buildAndBroadcastReclaim';
+//# sourceMappingURL=index.d.ts.map

package/dist/tbv/core/services/reclaim/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/tbv/core/services/reclaim/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EACL,wBAAwB,EACxB,oCAAoC,EACpC,kCAAkC,EAClC,4BAA4B,EAC5B,mCAAmC,EACnC,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,4BAA4B,CAAC"}