@babylonlabs-io/ts-sdk 0.76.0 → 0.78.0

package/dist/{buildAndBroadcastReclaim-Cqc6Jiqk.cjs → buildAndBroadcastReclaim-CB5VPETy.cjs}

@@ -1,2 +1,2 @@
-"use strict";var Se=Object.defineProperty;var Re=(e,t,r)=>t in e?Se(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var C=(e,t,r)=>Re(e,typeof t!="symbol"?t+"":t,r);const he=require("./BTCVaultRegistry.abi-z7d_eP22.cjs"),p=require("./bitcoin-D-O2GjbC.cjs"),$=require("./signPsbtsWithFallback-DtwzL5AA.cjs"),Ae=require("viem"),k=require("./json-rpc-client-BiAmg_ho.cjs"),B=require("bitcoinjs-lib"),x=require("./verifyScriptPathSchnorrSignature-DaRqvEgW.cjs"),oe=require("./constants-BTZdyOuk.cjs"),_=require("./noPayout-4RZB2g1e.cjs"),I=require("./signing-BJ3X66b-.cjs"),ie=require("./onChainBtcPubkey-BbxRrbvg.cjs"),_e=require("./secp256k1-DDHQ1_za.cjs"),Ce=require("./tbv/core/wasm/index.cjs"),Be=/^0x[0-9a-fA-F]{64}$/,Ie=/^0x[0-9a-fA-F]{40}$/,$e=/^0x([0-9a-fA-F]{2})*$/;function O(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!Be.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function Ve(e,t){if(!Ie.test(e))throw new Error(`${t} must be a 20-byte 0x-prefixed hex address (42 chars)`)}function Oe(e,t){if(!$e.test(e))throw new Error(`${t} must be a 0x-prefixed hex string with an even number of hex chars`)}function pe(e){Ve(e.btcVaultRegistryAddress,"btcVaultRegistryAddress"),O(e.vaultId,"vaultId");const t=p.ensureHexPrefix(e.secret);if(O(t,"secret"),e.hashlock!==void 0&&(O(e.hashlock,"hashlock"),!$.validateSecretAgainstHashlock(t,e.hashlock)))throw new Error("Invalid secret: SHA256(secret) does not match the provided hashlock");return t}async function Ne(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:n,activationMetadata:s,writeContract:c,signal:i}=e;i==null||i.throwIfAborted();const a=pe({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:n});return Oe(s,"activationMetadata"),c({address:t,abi:he.BTCVaultRegistryABI,functionName:"activateVaultWithSecret",args:[r,a,s]})}async function He(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:n,writeContract:s,signal:c}=e;c==null||c.throwIfAborted();const i=pe({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:n});return s({address:t,abi:he.BTCVaultRegistryABI,functionName:"activateVaultWithSecretAndRedeem",args:[r,i]})}const de=8,Ke=6e3,De=10*6e4,Fe=10;class W extends Error{constructor(t){super(t),this.name="PeginRegistrationMissingError"}}class Q extends Error{constructor(t){super(t),this.name="PeginRegistrationNotFinalError"}}function ge(e){return e instanceof W||e instanceof Error&&e.name==="PeginRegistrationMissingError"}function Me(e){return e instanceof Q||e instanceof Error&&e.name==="PeginRegistrationNotFinalError"}function se(e){const{currentBlock:t,createdAtBlock:r}=e,n=t-r+1n;return n<0n?0:Number(n)}async function Ue(e){const{vaultRegistryReader:t,getBlockNumber:r,vaultIds:n,required:s=de,pollIntervalMs:c=Ke,timeoutMs:i=De,signal:a,onProgress:o}=e;if(n.length===0)throw new Error("waitForPeginRegistrationDepth requires at least one vault ID");const u=Date.now();let h=!1,l=0,d;for(;;){if(a!=null&&a.aborted)throw new Error(`Aborted while waiting for peg-in registration depth (${n.length} vault(s))`);if(Date.now()-u>=i)throw new Q(`Peg-in registration did not reach ${s} Ethereum confirmations within ${i}ms. The registration transaction was submitted but is not yet final, so the Pre-PegIn Bitcoin transaction was never sent and no funds are at risk. Resume this deposit from the dashboard once the network settles.`+(d instanceof Error?` Last read error: ${d.message}`:""));try{const g=await r(),f=await Promise.all(n.map(P=>t.getVaultBasicInfo(P))),y=f.findIndex(P=>P.depositor===Ae.zeroAddress||P.createdAt===0n);if(y!==-1){if(l+=1,!h&&l>Fe)throw new W(`Vault ${n[y]} is still not visible on-chain after ${l} reads — the registration does not exist.`);console.warn(`Peg-in registration for vault ${n[y]} is not visible in chain state at block ${g} — a lagging RPC backend or an Ethereum reorg. Still polling.`),o==null||o({confirmations:0,required:s})}else{h=!0,l=0,d=void 0;let P=f[0],v=se({currentBlock:g,createdAtBlock:f[0].createdAt});for(const w of f.slice(1)){const E=se({currentBlock:g,createdAtBlock:w.createdAt});E<v&&(v=E,P=w)}if(o==null||o({confirmations:v,required:s}),v>=s)return{confirmations:v,basicInfo:P}}}catch(g){if(ge(g))throw g;console.warn(`Registration-depth read failed (retrying in ${c}ms): `+(g instanceof Error?g.message:String(g))),d=g}await new Promise((g,f)=>{const y=()=>{clearTimeout(P),f(new Error(`Aborted while waiting for peg-in registration depth (${n.length} vault(s))`))},P=setTimeout(()=>{a==null||a.removeEventListener("abort",y),g()},c);a==null||a.addEventListener("abort",y,{once:!0})})}}const Le=1;function Xe(e,t,r){const n=r.map(l=>p.stripHexPrefix(l).toLowerCase()),s=t.filter(l=>n.includes(l));if(s.length>0)throw new Error(`Cannot validate challenger set: vault keepers and universal challengers overlap (${s.join(", ")})`);const c=[...t,...n],i=e.map(l=>p.stripHexPrefix(l.challenger_pubkey).toLowerCase()),a=new Set(i);if(a.size!==i.length)throw new Error("Depositor graph contains duplicate challenger entries in challenger_presign_data");const o=new Set(c),u=c.filter(l=>!a.has(l)),h=i.filter(l=>!o.has(l));if(u.length>0||h.length>0)throw new Error("Depositor graph challenger set does not match expected (local ∪ universal)"+(u.length>0?` (missing: ${u.join(", ")})`:"")+(h.length>0?` (unexpected: ${h.join(", ")})`:""))}function qe(e,t){const r=e.ins[t];return p.uint8ArrayToHex(new Uint8Array(r.hash).slice().reverse())}function N(e,t,r,n,s){const c=e.ins[t];if(c.index!==0)throw new Error(`NoPayout (challenger ${s}) input ${t} expected to spend ${n} vout 0, got vout ${c.index}`);const i=r.getId(),a=qe(e,t);if(a!==i)throw new Error(`NoPayout (challenger ${s}) input ${t} does not reference ${n} (expected txid ${i}, got ${a})`)}async function ze(e,t,r){const n=[],s=[],c=[],i=x.deriveLocalChallengers({claimerBtcPubkey:r.depositorBtcPubkey,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys});Xe(e.challenger_presign_data,i,r.universalChallengerBtcPubkeys);const a=await x.buildPayoutPsbt({vaultCoreVersion:r.vaultCoreVersion,vkClaimerPayoutScriptPubKeys:r.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:r.vpCommissionScriptPubKey,payoutTxHex:e.payout_tx.tx_hex,peginTxHex:r.peginTxHex,assertTxHex:e.assert_tx.tx_hex,timelockAssert:r.timelockAssert,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:r.universalChallengerBtcPubkeys,timelockPegin:r.timelockPegin,network:r.network,claimerBtcPubkey:r.depositorBtcPubkey,registeredPayoutScriptPubKey:r.registeredPayoutScriptPubKey,commissionBps:Le,protocolFeeRate:r.protocolFeeRate,councilMembers:r.councilMembers,councilQuorum:r.councilQuorum});n.push(a.psbtHex),s.push(I.createTaprootScriptPathSignOptions(t,oe.DEPOSITOR_SIGNED_INPUT_COUNT));const o=p.stripHexPrefix(r.depositorBtcPubkey),u=B.Transaction.fromHex(p.stripHexPrefix(e.assert_tx.tx_hex));for(const h of e.challenger_presign_data){const l=p.stripHexPrefix(h.challenger_pubkey),d=n.length,g=await Ge({challenger:h,challengerPubkey:l,claimerPubkey:o,localChallengers:i,assertTxParsed:u,ctx:r});n.push(g),s.push(I.createTaprootScriptPathSignOptions(t,oe.DEPOSITOR_SIGNED_INPUT_COUNT)),c.push({challengerPubkey:l,noPayoutIdx:d})}return{psbtHexes:n,signOptions:s,challengerEntries:c}}async function Ge(e){const{challenger:t,challengerPubkey:r,claimerPubkey:n,localChallengers:s,assertTxParsed:c,ctx:i}=e;_.assertNoPayoutOutputMatchesChallenger(t.nopayout_tx.tx_hex,r,i.network);const a=B.Transaction.fromHex(p.stripHexPrefix(t.nopayout_tx.tx_hex)),o=B.Transaction.fromHex(p.stripHexPrefix(t.challenge_assert_x_tx.tx_hex)),u=B.Transaction.fromHex(p.stripHexPrefix(t.challenge_assert_y_tx.tx_hex));if(a.ins.length!==3)throw new Error(`NoPayout (challenger ${r}) must have exactly 3 inputs, got ${a.ins.length}`);N(a,0,c,"Assert",r),N(a,1,o,"ChallengeAssertX",r),N(a,2,u,"ChallengeAssertY",r);const h=[c.outs[0],o.outs[0],u.outs[0]].map(l=>({script_pubkey:p.uint8ArrayToHex(new Uint8Array(l.script)),value:l.value}));return _.buildNoPayoutPsbt({noPayoutTxHex:t.nopayout_tx.tx_hex,challengerPubkey:r,prevouts:h,connectorParams:{txGraphVersion:i.vaultCoreVersion,claimer:n,localChallengers:s,universalChallengers:i.universalChallengerBtcPubkeys,timelockAssert:i.timelockAssert,councilMembers:i.councilMembers,councilQuorum:i.councilQuorum}})}function je(e,t,r){x.assertPsbtUnsignedTxMatches(e[0]);const s=x.extractPayoutSignature(e[0].returnedPsbtHex,r);x.assertScriptPathSchnorrSignature({requestedPsbtHex:e[0].requestedPsbtHex,signatureHex:s,signerXOnlyPubkeyHex:r,inputIndex:0});const c={};for(const i of t){x.assertPsbtUnsignedTxMatches(e[i.noPayoutIdx]);const a=x.extractPayoutSignature(e[i.noPayoutIdx].returnedPsbtHex,r);x.assertScriptPathSchnorrSignature({requestedPsbtHex:e[i.noPayoutIdx].requestedPsbtHex,signatureHex:a,signerXOnlyPubkeyHex:r,inputIndex:0}),c[i.challengerPubkey]={nopayout_signature:a}}return{payout_signatures:{payout_signature:s},per_challenger:c}}async function fe(e){const{depositorGraph:t,btcWallet:r,signingContext:n}=e,s=await r.getPublicKeyHex(),{depositorPubkey:c}=p.validateWalletPubkey(s,p.stripHexPrefix(n.depositorBtcPubkey)),{psbtHexes:i,signOptions:a,challengerEntries:o}=await ze(t,s,n),u=await $.signPsbtsWithFallback(r,i,a),h=i.map((l,d)=>({requestedPsbtHex:l,returnedPsbtHex:u[d]}));return je(h,o,c)}const We=1e4;async function Y(e){const{statusReader:t,peginTxid:r,targetStatuses:n,timeoutMs:s,pollIntervalMs:c=We,signal:i}=e,a=Date.now();for(;;){if(i!=null&&i.aborted)throw new Error(`Polling aborted for pegin ${r.slice(0,8)}… (target: ${[...n].join(", ")})`);if(Date.now()-a>=s)throw new Error(`Polling timeout after ${s}ms for pegin ${r.slice(0,8)}… (target: ${[...n].join(", ")})`);try{const o=await t.getPeginStatus({pegin_txid:r},i);if(o.pegin_txid.toLowerCase()!==r.toLowerCase())throw new Error(`getPeginStatus returned status for pegin ${o.pegin_txid.slice(0,8)}…, requested ${r.slice(0,8)}…`);const u=o.status;if(n.has(u)||u===k.DaemonStatus.ACTIVATED)return u;if(u===k.DaemonStatus.EXPIRED||k.VP_TERMINAL_FAILURE_STATUSES.has(u))throw new Error(`Pegin ${r.slice(0,8)}… reached terminal status "${u}" while waiting for ${[...n].join(", ")}`)}catch(o){if(!(o instanceof k.JsonRpcError&&o.code===k.RpcErrorCode.PEGIN_NOT_FOUND))throw o}await new Promise((o,u)=>{const h=()=>{clearTimeout(l),u(new Error(`Polling aborted for pegin ${r.slice(0,8)}… (target: ${[...n].join(", ")})`))},l=setTimeout(()=>{i==null||i.removeEventListener("abort",h),o()},c);i==null||i.addEventListener("abort",h,{once:!0})})}}const Qe=1200*1e3,Pe=new Set([k.DaemonStatus.PENDING_ACKS,k.DaemonStatus.PENDING_ACTIVATION,k.DaemonStatus.ACTIVATED_PENDING_BROADCAST,k.DaemonStatus.ACTIVATED]),Ye=new Set([k.DaemonStatus.PENDING_DEPOSITOR_SIGNATURES,...Pe]);function Ze(e){return e.map(t=>({claimerPubkeyXOnly:p.processPublicKeyToXOnly(t.claimer_pubkey),payoutTxHex:t.payout_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex}))}function R(e){return p.processPublicKeyToXOnly(e).toLowerCase()}function Je(e,t){const r=(o,u,h)=>{throw new Error(`Deposit terms ${o} (${String(u)}) does not match the vault's version-locked signing context (${String(h)}); refusing to sign payouts against terms that describe a different graph.`)},n=[["protocolFeeRate",e.protocolFeeRate,t.protocolFeeRate],["vaultCoreVersion",e.vaultCoreVersion,t.vaultCoreVersion],["timelockPegin",e.timelockPegin,t.timelockPegin],["timelockAssert",e.timelockAssert,t.timelockAssert]];for(const[o,u,h]of n)u!==h&&r(o,u,h);const s=o=>o.map(R).sort(),c=(o,u)=>{const h=s(o),l=s(u);return h.length===l.length&&h.every((d,g)=>d===l[g])};c(e.vaultKeeperBtcPubkeys,t.vaultKeeperBtcPubkeys)||r("vaultKeeperBtcPubkeys",e.vaultKeeperBtcPubkeys.join(","),t.vaultKeeperBtcPubkeys.join(",")),c(e.universalChallengerBtcPubkeys,t.universalChallengerBtcPubkeys)||r("universalChallengerBtcPubkeys",e.universalChallengerBtcPubkeys.join(","),t.universalChallengerBtcPubkeys.join(","));const i=R(t.vaultProviderBtcPubkey),a=e.vaults.map(o=>R(o.vaultProviderBtcPubkey));a.includes(i)||r("vaults[].vaultProviderBtcPubkey",a.join(",")||"<no vaults>",t.vaultProviderBtcPubkey)}function et(e,t,r,n){const s=R(n),c=[R(t),...r.map(R)],i=new Set(c);if(i.size!==c.length)throw new Error("Cannot validate claimer set: signing context contains duplicate vault provider or vault keeper key");if(i.has(s))throw new Error("Cannot validate claimer set: depositor key overlaps with vault provider or vault keeper set");const a=e.map(d=>R(d.claimer_pubkey));if(new Set(a).size!==a.length)throw new Error("Presign response contains duplicate claimer entries");const o=a.filter(d=>d!==s),u=new Set(o),h=c.filter(d=>!u.has(d)),l=o.filter(d=>!i.has(d));if(h.length>0||l.length>0)throw new Error("Presign response claimer set does not match expected (vault provider ∪ vault keepers)"+(h.length>0?` (missing: ${h.join(", ")})`:"")+(l.length>0?` (unexpected: ${l.join(", ")})`:""))}function ae(e,t){return{vaultCoreVersion:t.vaultCoreVersion,payoutTxHex:e.payoutTxHex,peginTxHex:t.peginTxHex,assertTxHex:e.assertTxHex,vaultProviderBtcPubkey:t.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:t.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:t.universalChallengerBtcPubkeys,depositorBtcPubkey:t.depositorBtcPubkey,timelockPegin:t.timelockPegin,timelockAssert:t.timelockAssert,registeredPayoutScriptPubKey:t.registeredPayoutScriptPubKey,claimerBtcPubkey:e.claimerPubkeyXOnly,commissionBps:t.commissionBps,protocolFeeRate:t.protocolFeeRate,councilMembers:t.councilMembers,councilQuorum:t.councilQuorum,vkClaimerPayoutScriptPubKeys:t.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:t.vpCommissionScriptPubKey}}async function tt(e,t,r,n){const s=new $.PayoutManager({network:t.network,btcWallet:e}),c=r.length;n==null||n(0,c);let i;if(s.supportsBatchSigning())i=(await s.signPayoutTransactionsBatch(r.map(u=>ae(u,t)))).map(u=>u.payoutSignature);else{i=[];for(let o=0;o<r.length;o++){n==null||n(o,c);const u=await s.signPayoutTransaction(ae(r[o],t));i.push(u.signature)}}const a={};for(let o=0;o<r.length;o++)a[r[o].claimerPubkeyXOnly]={payout_signature:i[o]};return n==null||n(c,c),a}async function rt(e){const{statusReader:t,presignClient:r,btcWallet:n,peginTxid:s,depositorPk:c,signingContext:i,depositTerms:a,timeoutMs:o=Qe,signal:u,onProgress:h}=e,l=await Y({statusReader:t,peginTxid:s,targetStatuses:Ye,timeoutMs:o,signal:u});if(Pe.has(l))return;if(u==null||u.throwIfAborted(),a!==void 0&&Je(a,i),$.supportsDepositApproval(n)){if(!a)throw new Error("runDepositorPresignFlow: this wallet requires approved deposit terms but none were provided. Fresh deposits must pass PreparePeginResult.depositTerms; resume flows must rebuild them from on-chain state (the vault app's rebuildDepositTerms).");typeof n.validateDepositTerms=="function"&&await n.validateDepositTerms(a),await n.approveDepositTerms(a)}const d=await r.requestDepositorPresignTransactions({pegin_txid:s,depositor_pk:c},u);u==null||u.throwIfAborted();const g=R(c);et(d.txs,i.vaultProviderBtcPubkey,i.vaultKeeperBtcPubkeys,c);const f=d.txs.filter(E=>R(E.claimer_pubkey)!==g),y=Ze(f),P=await tt(n,i,y,h);u==null||u.throwIfAborted();const v=await fe({depositorGraph:d.depositor_graph,btcWallet:n,signingContext:{vaultCoreVersion:i.vaultCoreVersion,peginTxHex:i.peginTxHex,depositorBtcPubkey:c,vaultProviderBtcPubkey:i.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:i.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:i.universalChallengerBtcPubkeys,timelockPegin:i.timelockPegin,timelockAssert:i.timelockAssert,councilMembers:i.councilMembers,councilQuorum:i.councilQuorum,network:i.network,registeredPayoutScriptPubKey:i.registeredPayoutScriptPubKey,protocolFeeRate:i.protocolFeeRate,vkClaimerPayoutScriptPubKeys:i.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:i.vpCommissionScriptPubKey}});u==null||u.throwIfAborted();const w={...P};w[p.stripHexPrefix(c)]=v.payout_signatures,await r.submitDepositorPresignatures({pegin_txid:s,depositor_pk:c,signatures:w,depositor_claimer_presignatures:v},u)}const nt=300*1e3,ot=new Set([k.DaemonStatus.PENDING_DEPOSITOR_WOTS_PK,...k.POST_WOTS_STATUSES]);async function it(e){const{statusReader:t,wotsSubmitter:r,peginTxid:n,depositorPk:s,wotsPublicKeys:c,timeoutMs:i=nt,signal:a}=e;a==null||a.throwIfAborted();const o=await Y({statusReader:t,peginTxid:n,targetStatuses:ot,timeoutMs:i,signal:a});k.POST_WOTS_STATUSES.has(o)||(a==null||a.throwIfAborted(),await r.submitDepositorWotsKey({pegin_txid:n,depositor_pk:s,wots_public_keys:c},a))}function V(e){return e.registration||e.operation}function ye(e,t,r){const n=p.canonicalizeBtcPubkey(e);return{registration:n===p.canonicalizeBtcPubkey(t),operation:n===p.canonicalizeBtcPubkey(r)}}function F(e,t,r){const n=H(e);return{registration:ue(n,H(t)),operation:ue(n,H(r))}}function H(e){return e.map(p.canonicalizeBtcPubkey).sort()}function ue(e,t){return e.length===t.length&&e.every((r,n)=>r===t[n])}async function st(e){const{vaultProviderEthAddress:t,hintBtcPubkey:r,registrationBtcPubkey:n,readCurrentOperationBtcPubkey:s,context:c}=e;if(!r)return;const i=p.canonicalizeBtcPubkey(r);if(i===p.canonicalizeBtcPubkey(n))return;const a=p.canonicalizeBtcPubkey(await s());if(i!==a)throw new Error(`Vault provider BTC pubkey mismatch for ${t}: indexer hint matches neither the registration key nor the current operation key on-chain.${c?` ${c}`:""}`)}function K(e,t,r){const n=`${e} operation key (admin=${t.ethAddress})`,s=ie.assertOnChainBtcPubkey(t.btcPubKey,`${e} roster key (admin=${t.ethAddress})`),c=ie.assertOnChainBtcPubkey(r,n);return{adminAddress:t.ethAddress,genesisBtcPubkey:s,operationBtcPubkey:c,rotated:c!==s}}function at(e){const t=new Map;for(const r of e){const n=t.get(r.operationBtcPubkey);if(n)throw new Error(`Participant operation key collision: ${n} and ${r.adminAddress} both resolve to operation key ${r.operationBtcPubkey}`);t.set(r.operationBtcPubkey,r.adminAddress)}}function ve(e,t,r){if(t.vaultKeepers.length!==e.vaultKeepers.length||t.universalChallengers.length!==e.universalChallengers.length)throw new Error(`Operation-key resolution returned ${t.vaultKeepers.length} keeper and ${t.universalChallengers.length} challenger keys for a roster of ${e.vaultKeepers.length} keepers and ${e.universalChallengers.length} challengers`);const n=K("vault provider",{ethAddress:e.vaultProviderEthAddress,btcPubKey:e.vaultProviderGenesisBtcPubkey},t.vaultProvider),s=e.vaultKeepers.map((i,a)=>K("vault keeper",i,t.vaultKeepers[a])),c=e.universalChallengers.map((i,a)=>K("universal challenger",i,t.universalChallengers[a]));return at([n,...s,...c]),{vaultProvider:n,vaultKeepers:s,universalChallengers:c,vaultKeeperOperationKeysSorted:s.map(i=>i.operationBtcPubkey).sort(),universalChallengerOperationKeysSorted:c.map(i=>i.operationBtcPubkey).sort(),resolvedAt:r,query:e}}async function me(e){const t=await e.operationKeyReader.getCurrentOperationKeys(e.query,e.blockNumber);return ve(e.query,t,{mode:"current"})}async function be(e){const t=await e.operationKeyReader.getOperationKeysAtEpochs(e.query,e.epochs);return ve(e.query,t,{mode:"epochs",epochs:e.epochs})}const ce=e=>e.map(p.canonicalizeBtcPubkey).sort();async function ut(e){const{vaultRegistryReader:t,vaultKeeperReader:r,universalChallengerReader:n,vaultProviderEthAddress:s,applicationEntryPoint:c,expectedVaultProviderBtcPubkey:i,expectedVaultKeeperBtcPubkeys:a,expectedUniversalChallengerBtcPubkeys:o,operationKeyReader:u,onIndexerServingOperationKeys:h,onIndexerHintsInconsistent:l,blockNumber:d}=e,[g,f,y]=await Promise.all([t.getVaultProviderGenesisBtcPubKey(s,d),r.getCurrentVaultKeepersVersion(c,d),n.getLatestUniversalChallengersVersion(d)]),[P,v]=await Promise.all([r.getVaultKeepersByVersion(c,f,d),n.getUniversalChallengersByVersion(y,d)]),w={vaultProvider:p.canonicalizeBtcPubkey(g),vaultKeepers:ce(P.map(T=>T.btcPubKey)),universalChallengers:ce(v.map(T=>T.btcPubKey))},E=await me({operationKeyReader:u,query:{vaultProviderEthAddress:s,vaultProviderGenesisBtcPubkey:`0x${g}`,applicationEntryPoint:c,vaultKeepers:P,universalChallengers:v},blockNumber:d}),m={vaultProvider:E.vaultProvider.operationBtcPubkey,vaultKeepers:[...E.vaultKeeperOperationKeysSorted],universalChallengers:[...E.universalChallengerOperationKeysSorted]},S=ye(i,w.vaultProvider,m.vaultProvider),A=F(a,w.vaultKeepers,m.vaultKeepers),b=F(o,w.universalChallengers,m.universalChallengers);if(!V(S))throw new Error(`Vault provider BTC pubkey indexer hint does not match BTCVaultRegistry for ${s}. Refresh and try again.`);if(!V(A))throw new Error(`Vault keeper BTC pubkeys (v${f}) indexer set does not match ApplicationRegistry on-chain set. Refresh and try again.`);if(!V(b))throw new Error(`Universal challenger BTC pubkeys (v${y}) indexer set does not match ProtocolParams on-chain set. Refresh and try again.`);const re=[S,A,b],Te=re.some(T=>T.registration&&!T.operation),ne=re.some(T=>T.operation&&!T.registration);if(Te&&ne){const T=`Indexer participant hints are internally inconsistent for vault provider ${s}: some roles match the registration keys while others match the rotated operation keys.`;throw l==null||l(T),new Error(`${T} Refresh and try again.`)}return ne&&(h==null||h(`Indexer is serving rotated operation keys for vault provider ${s}`)),{vaultProviderBtcPubkeyXOnly:m.vaultProvider,vaultKeeperBtcPubkeysSorted:m.vaultKeepers,universalChallengerBtcPubkeysSorted:m.universalChallengers,expectedAppVaultKeepersVersion:f,expectedUniversalChallengersVersion:y,registrationKeys:w,participantKeys:E}}function ct(e){return/^[0-9a-fA-F]{64}$/.test(e)}function lt(e){const{amountSats:t,minDeposit:r,maxDeposit:n,btcBalance:s,estimatedFeeSats:c,depositorClaimValue:i}=e;return!(t<=0n||t<r||n&&n>0n&&t>n||c==null||i==null||t+c+i>s)}function ht(e,t,r){return e<=0n?{valid:!1,error:"Deposit amount must be greater than zero"}:e<t?{valid:!1,error:`Minimum deposit is ${p.formatSatoshisToBtc(t)} BTC`}:r&&r>0n&&e>r?{valid:!1,error:`Maximum deposit is ${p.formatSatoshisToBtc(r)} BTC`}:{valid:!0}}function pt(e){const{amount:t,effectiveRemaining:r}=e;return r===null?{valid:!0}:r===0n?{valid:!1,error:"Supply cap reached — deposits temporarily paused"}:t>r?{valid:!1,error:`Vault size exceeds remaining capacity (${p.formatSatoshisToBtc(r)} BTC)`}:{valid:!0}}function dt(e,t){if(!e||e.length===0)return{valid:!1,error:"At least one vault provider must be selected"};const r=t.map(s=>s.toLowerCase());return e.filter(s=>!r.includes(s.toLowerCase())).length>0?{valid:!1,error:"Invalid vault provider selected"}:{valid:!0}}function we(e,t,r){if(!e||e.length===0)return{valid:!1,error:"At least one vault amount required"};for(let n=0;n<e.length;n++){const s=e[n];if(s<=0n)return{valid:!1,error:`Vault ${n+1} amount must be positive`};if(t&&s<t)return{valid:!1,error:`Vault ${n+1} amount ${p.formatSatoshisToBtc(s)} BTC is below minimum deposit ${p.formatSatoshisToBtc(t)} BTC`};if(r&&s>r)return{valid:!1,error:`Vault ${n+1} amount ${p.formatSatoshisToBtc(s)} BTC exceeds maximum deposit ${p.formatSatoshisToBtc(r)} BTC`}}return{valid:!0}}function Ee(e){const t=p.stripHexPrefix(e);return ct(t)?{valid:!0}:{valid:!1,error:"Invalid pubkey format: must be 64 hex characters (32-byte x-only public key, no 0x prefix)"}}function gt(e){if(!e||e.length===0)throw new Error("No vault keepers available. The system requires at least one vault keeper to create a deposit.")}function ft(e){if(!e||e.length===0)throw new Error("No universal challengers available. The system requires at least one universal challenger to create a deposit.")}function Pt(e){if(e.length===0)throw new Error("No spendable UTXOs available")}function yt(e){const{vaultAmounts:t,confirmedUTXOs:r,vaultProviderBtcPubkey:n,vaultKeeperBtcPubkeys:s,universalChallengerBtcPubkeys:c,minDeposit:i,maxDeposit:a}=e,o=we(t,i,a);if(!o.valid)throw new Error(o.error);const u=Ee(n);if(!u.valid)throw new Error(u.error);gt(s),ft(c),Pt(r)}class Z extends Error{constructor(t){super(t),this.name="ParticipantKeyDriftError"}}function vt(e){return e instanceof Z||e instanceof Error&&e.name==="ParticipantKeyDriftError"}function le(e,t,r){return t.length===r.length&&t.every((n,s)=>n===r[s])?null:`${e} expected [${t.join(", ")}], got [${r.join(", ")}]`}async function mt(e){const{vaultRegistryReader:t,operationKeyReader:r,vaultIds:n,expected:s}=e,c=s.query;if(n.length===0)return;const i=await t.getVaultKeyEpochsBatch(n),a=[];for(const[o,u]of i.entries()){const h=n[o];let l;try{l=await be({operationKeyReader:r,query:c,epochs:u})}catch(f){a.push(`vault ${h}: could not resolve participants at frozen epochs (vp=${u.vpKeyEpoch}, keeper=${u.appKeeperKeyEpoch}, uc=${u.ucKeyEpoch}): ${f.message}`);continue}l.vaultProvider.operationBtcPubkey!==s.vaultProvider.operationBtcPubkey&&a.push(`vault ${h}: vault provider key expected ${s.vaultProvider.operationBtcPubkey}, got ${l.vaultProvider.operationBtcPubkey}`);const d=le(`vault ${h}: vault keeper keys`,s.vaultKeeperOperationKeysSorted,l.vaultKeeperOperationKeysSorted);d&&a.push(d);const g=le(`vault ${h}: universal challenger keys`,s.universalChallengerOperationKeysSorted,l.universalChallengerOperationKeysSorted);g&&a.push(g)}if(a.length>0)throw new Z(`Aborting BTC broadcast: participant operation keys changed during registration (${a.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class J extends Error{constructor(t){super(t),this.name="RegisteredVaultVersionMismatchError"}}function bt(e){return e instanceof J||e instanceof Error&&e.name==="RegisteredVaultVersionMismatchError"}async function wt(e){const{vaultRegistryReader:t,vaultIds:r,expectedOffchainParamsVersion:n,expectedAppVaultKeepersVersion:s,expectedUniversalChallengersVersion:c,expectedVaultCoreVersion:i}=e,a=await t.getProtocolInfoBatch(r),o=[];if(a.forEach((u,h)=>{const l=r[h];u.offchainParamsVersion!==n&&o.push(`vault ${l}: offchainParams expected v${n}, got v${u.offchainParamsVersion}`),u.appVaultKeepersVersion!==s&&o.push(`vault ${l}: appVaultKeepers expected v${s}, got v${u.appVaultKeepersVersion}`),u.universalChallengersVersion!==c&&o.push(`vault ${l}: universalChallengers expected v${c}, got v${u.universalChallengersVersion}`),u.vaultCoreVersion!==i&&o.push(`vault ${l}: vaultCoreVersion expected v${i} (build-time active), got v${u.vaultCoreVersion}`)}),o.length>0)throw new J(`Aborting BTC broadcast: signer-set or offchain-params versions changed during registration (${o.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}var ee=(e=>(e.CLAIM_EVENT_RECEIVED="ClaimEventReceived",e.CLAIM_BROADCAST="ClaimBroadcast",e.ASSERT_BROADCAST="AssertBroadcast",e.PAYOUT_BROADCAST="PayoutBroadcast",e.PAYOUT_BLOCKED="PayoutBlocked",e))(ee||{});const Et=new Set(["PayoutBroadcast","PayoutBlocked"]);function xt(e){return Object.values(ee).includes(e)}function kt(e){return!!e&&Et.has(e)}class xe extends Error{constructor(r,n){super(`Refund not yet mature (BIP68 not final): ${n.message}`);C(this,"vaultId");C(this,"cause");this.name="BIP68NotMatureError",this.vaultId=r,this.cause=n}}const Tt=/^0x[0-9a-fA-F]{64}$/,St=/^(?:0x)?(?:[0-9a-fA-F]{2})+$/,ke=/^(?:0x)?(?:[0-9a-fA-F]{64}|[0-9a-fA-F]{66})$/,te=160,M=2e3,U=10n,L=100n;function Rt(e){if(!Number.isFinite(e)||e<=0)throw new Error(`feeRateSatsVb must be a positive finite number, got ${e}`);return BigInt(Math.ceil(e*te))}const At=1,_t=/non-BIP68-final/i;function X(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!Tt.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function D(e,t){if(!Number.isInteger(e)||e<0)throw new Error(`${t} must be a non-negative integer, got ${e}`)}function Ct(e){if(X(e.hashlock,"hashlock"),!Number.isInteger(e.htlcVout)||e.htlcVout<0)throw new Error(`htlcVout must be a non-negative integer, got ${e.htlcVout}`);if(!Array.isArray(e.batch)||e.batch.length===0)throw new Error("batch must be a non-empty array of HTLC entries");if(e.htlcVout>=e.batch.length)throw new Error(`htlcVout ${e.htlcVout} is out of range for batch of size ${e.batch.length}`);for(let r=0;r<e.batch.length;r++){const n=e.batch[r];if(X(n.hashlock,`batch[${r}].hashlock`),!Number.isInteger(n.htlcVout)||n.htlcVout!==r)throw new Error(`batch[${r}].htlcVout must equal ${r} (contiguous vout-ordered vector), got ${n.htlcVout}`);if(typeof n.amount!="bigint"||n.amount<=0n)throw new Error(`batch[${r}].amount must be a positive bigint, got ${n.amount}`)}const t=e.batch[e.htlcVout];if(t.hashlock.toLowerCase()!==e.hashlock.toLowerCase())throw new Error(`batch[${e.htlcVout}].hashlock (${t.hashlock}) does not match target hashlock (${e.hashlock})`);if(t.amount!==e.amount)throw new Error(`batch[${e.htlcVout}].amount (${t.amount}) does not match target amount (${e.amount})`);if(D(e.offchainParamsVersion,"offchainParamsVersion"),D(e.appVaultKeepersVersion,"appVaultKeepersVersion"),D(e.universalChallengersVersion,"universalChallengersVersion"),_e.assertValidVaultCoreVersion(e.vaultCoreVersion,"VaultRefundData.vaultCoreVersion"),typeof e.unsignedPrePeginTxHex!="string"||e.unsignedPrePeginTxHex.length===0)throw new Error("unsignedPrePeginTxHex must be a non-empty hex string");if(!St.test(e.unsignedPrePeginTxHex))throw new Error("unsignedPrePeginTxHex must be a hex byte string (optional 0x prefix, even length)");if(!e.depositorBtcPubkey||!ke.test(e.depositorBtcPubkey))throw new Error("depositorBtcPubkey must be 32 or 33 bytes of hex (optional 0x prefix)");if(typeof e.amount!="bigint"||e.amount<=0n)throw new Error(`amount must be a positive bigint, got ${e.amount}`)}function Bt(e){if(!e.vaultProviderPubkey||!ke.test(e.vaultProviderPubkey))throw new Error("vaultProviderPubkey must be 32 or 33 bytes of hex");if(e.vaultKeeperPubkeys.length===0)throw new Error("vaultKeeperPubkeys must be non-empty");if(e.universalChallengerPubkeys.length===0)throw new Error("universalChallengerPubkeys must be non-empty");if(!Number.isInteger(e.timelockRefund)||e.timelockRefund<=0)throw new Error(`timelockRefund must be a positive integer, got ${e.timelockRefund}`);if(typeof e.feeRate!="bigint"||e.feeRate<=0n)throw new Error(`protocol feeRate must be a positive bigint, got ${e.feeRate}`);if(typeof e.minPeginFeeRate!="bigint"||e.minPeginFeeRate<=0n)throw new Error(`minPeginFeeRate must be a positive bigint, got ${e.minPeginFeeRate}`);if(!Number.isInteger(e.numLocalChallengers)||e.numLocalChallengers<0)throw new Error("numLocalChallengers must be a non-negative integer");if(!Number.isInteger(e.councilQuorum)||!Number.isInteger(e.councilSize)||e.councilQuorum<=0||e.councilSize<=0||e.councilQuorum>e.councilSize)throw new Error(`councilQuorum (${e.councilQuorum}) must be in [1, councilSize=${e.councilSize}]`)}async function It(e){const{vaultId:t,readVault:r,readPrePeginContext:n,feeRate:s,signPsbt:c,broadcastTx:i,signal:a}=e;a==null||a.throwIfAborted(),X(t,"vaultId");const o=await r();Ct(o),a==null||a.throwIfAborted();const u=await n(o);if(Bt(u),a==null||a.throwIfAborted(),!Number.isFinite(s)||s<=0)throw new Error(`feeRate must be a positive number, got ${s}`);if(s>M)throw new Error(`feeRate ${s} sat/vB exceeds refund safety cap ${M} sat/vB; refusing to sign refund.`);const h=BigInt(Math.ceil(s*te)),l=o.amount*U/L;if(h>l)throw new Error(`Refund fee ${h} sats exceeds the per-vault safety cap of ${l} sats (${U}/${L} of vault.amount=${o.amount}); refusing to sign refund.`);a==null||a.throwIfAborted();const d=p.processPublicKeyToXOnly(o.depositorBtcPubkey),g=p.stripHexPrefix(o.unsignedPrePeginTxHex),f=$.findAuthAnchorOpReturn(g);if(f!==void 0&&f.vout!==o.batch.length)throw new Error(`Auth-anchor OP_RETURN at vout ${f.vout} does not match batch size (${o.batch.length} HTLC outputs expect the anchor at vout ${o.batch.length}). Refund refused — sibling HTLC vector is incomplete.`);const y=f==null?void 0:f.hash;let P;try{P=B.Transaction.fromHex(g)}catch(b){throw new Error(`Failed to parse funded Pre-PegIn transaction hex: ${b instanceof Error?b.message:String(b)}`)}if(P.outs.length<o.batch.length)throw new Error(`Funded Pre-PegIn tx has ${P.outs.length} outputs but batch requires at least ${o.batch.length} HTLC outputs. Refund refused — funded tx shape disagrees with sibling vector.`);const{psbtHex:v}=await _.buildRefundPsbt({prePeginParams:{vaultCoreVersion:o.vaultCoreVersion,depositorPubkey:d,vaultProviderPubkey:p.stripHexPrefix(u.vaultProviderPubkey),vaultKeeperPubkeys:u.vaultKeeperPubkeys.map(p.stripHexPrefix),universalChallengerPubkeys:u.universalChallengerPubkeys.map(p.stripHexPrefix),hashlocks:o.batch.map(b=>p.stripHexPrefix(b.hashlock)),timelockRefund:u.timelockRefund,pegInAmounts:o.batch.map(b=>b.amount),feeRate:u.feeRate,minPeginFeeRate:u.minPeginFeeRate,numLocalChallengers:u.numLocalChallengers,councilQuorum:u.councilQuorum,councilSize:u.councilSize,network:u.network,authAnchorHash:y},fundedPrePeginTxHex:g,htlcVout:o.htlcVout,refundFee:h,hashlock:p.stripHexPrefix(o.hashlock)});a==null||a.throwIfAborted();const w=I.createTaprootScriptPathSignOptions(o.depositorBtcPubkey,At),E=await c(v,w);x.assertPsbtUnsignedTxMatches({requestedPsbtHex:v,returnedPsbtHex:E});const m=0,S=x.extractPayoutSignature(E,d,m);x.assertScriptPathSchnorrSignature({requestedPsbtHex:v,signatureHex:S,signerXOnlyPubkeyHex:d,inputIndex:m});const A=_.finalizeScriptPathWithSignatures({requestedPsbtHex:v,signaturesHex:[S],signerXOnlyPubkeyHex:d});a==null||a.throwIfAborted();try{return await i(A)}catch(b){throw b instanceof Error&&_t.test(b.message)?new xe(t,b):b}}class q extends Error{constructor(r,n,s){super(r);C(this,"feeSats");C(this,"sweptTotalSats");this.name="ReclaimUneconomicalError",this.feeSats=n,this.sweptTotalSats=s}}const z=2e3,G=25n,j=100n,$t=10n;async function Vt(e,t,r){for(let n=0;n<e.length;n++){const s=I.calculateBtcTxHash(e[n].depositorSignedPeginTxHex),c=p.ensureHexPrefix(await Ce.deriveVaultId(p.stripHexPrefix(s),p.stripHexPrefix(r))).toLowerCase();if(c!==t[n].toLowerCase())throw new Error(`Reserve ${n} belongs to vault ${c}, not the requested ${t[n].toLowerCase()}. Refusing to sweep a reserve whose vault is not the one the caller asked for — the reserve funds that vault's claim transaction and cannot be replaced.`)}}async function Ot(e){const{vaultIds:t,depositorEthAddress:r,depositorBtcPubkey:n,readVaults:s,feeRate:c,signPsbt:i,broadcastTx:a,signal:o}=e;if(o==null||o.throwIfAborted(),t.length===0)throw new Error("Reclaim requires at least one vault id; got none.");if(!Number.isFinite(c)||c<=0)throw new Error(`feeRate must be a positive number, got ${c}`);if(c>z)throw new q(`Fee rate ${c} sat/vB exceeds the reclaim safety cap of ${z} sat/vB; refusing to sign.`,0n,0n);const u=await s();if(o==null||o.throwIfAborted(),u.length!==t.length)throw new Error(`readVaults returned ${u.length} reserves for ${t.length} vault id(s); refusing to sweep a set that does not match the request.`);await Vt(u,t,r),o==null||o.throwIfAborted();const h=p.processPublicKeyToXOnly(n),l=u.map(m=>({depositorSignedPeginTxHex:m.depositorSignedPeginTxHex,observed:m.observed,expectedValue:m.expectedClaimValue})),d=_.estimateReclaimFeeSats(c,l.length),g=l.reduce((m,S)=>m+S.expectedValue,0n),f=g*G/j;if(d>f)throw new q(`Reclaim fee ${d} sats exceeds ${G}/${j} of the swept total (${g} sats, cap ${f} sats). The reserve is not at risk — it stays where it is until fee rates fall.`,d,g);o==null||o.throwIfAborted();const{psbtHex:y}=_.buildReclaimPsbt({depositorPubkey:h,inputs:l,feeSats:d});o==null||o.throwIfAborted();const P=I.createTaprootScriptPathSignOptions(n,l.length),v=await i(y,P);x.assertPsbtUnsignedTxMatches({requestedPsbtHex:y,returnedPsbtHex:v});const w=l.map((m,S)=>{const A=x.extractPayoutSignature(v,h,S);return x.assertScriptPathSchnorrSignature({requestedPsbtHex:y,signatureHex:A,signerXOnlyPubkeyHex:h,inputIndex:S}),A}),E=_.finalizeScriptPathWithSignatures({requestedPsbtHex:y,signaturesHex:w,signerXOnlyPubkeyHex:h});return o==null||o.throwIfAborted(),a(E)}exports.BIP68NotMatureError=xe;exports.ClaimerPegoutStatusValue=ee;exports.PEGIN_ETH_CONFIRMATIONS=de;exports.ParticipantKeyDriftError=Z;exports.PeginRegistrationMissingError=W;exports.PeginRegistrationNotFinalError=Q;exports.RECLAIM_MAX_FEE_FRACTION_DENOMINATOR=j;exports.RECLAIM_MAX_FEE_FRACTION_NUMERATOR=G;exports.RECLAIM_MAX_FEE_RATE_SATS_VB=z;exports.RECLAIM_WARN_FEE_FRACTION_NUMERATOR=$t;exports.REFUND_MAX_FEE_FRACTION_DENOMINATOR=L;exports.REFUND_MAX_FEE_FRACTION_NUMERATOR=U;exports.REFUND_MAX_FEE_RATE_SATS_VB=M;exports.REFUND_VSIZE=te;exports.ReclaimUneconomicalError=q;exports.RegisteredVaultVersionMismatchError=J;exports.activateVault=Ne;exports.activateVaultAndRedeem=He;exports.assertVaultProviderHintAccepted=st;exports.buildAndBroadcastReclaim=Ot;exports.buildAndBroadcastRefund=It;exports.estimateRefundFeeSats=Rt;exports.isDepositAmountValid=lt;exports.isHintAccepted=V;exports.isParticipantKeyDriftError=vt;exports.isPeginRegistrationMissingError=ge;exports.isPeginRegistrationNotFinalError=Me;exports.isPegoutTerminalStatus=kt;exports.isRecognizedPegoutStatus=xt;exports.isRegisteredVaultVersionMismatchError=bt;exports.matchKeyHint=ye;exports.matchKeySetHint=F;exports.resolveCurrentParticipantKeys=me;exports.resolveParticipantKeysAtEpochs=be;exports.runDepositorPresignFlow=rt;exports.signDepositorGraph=fe;exports.submitWotsPublicKey=it;exports.validateDepositAmount=ht;exports.validateMultiVaultDepositInputs=yt;exports.validateOnChainParticipantKeys=ut;exports.validateProviderSelection=dt;exports.validateRemainingCapacity=pt;exports.validateVaultAmounts=we;exports.validateVaultProviderPubkey=Ee;exports.verifyRegisteredParticipantKeys=mt;exports.verifyRegisteredVaultVersions=wt;exports.waitForPeginRegistrationDepth=Ue;exports.waitForPeginStatus=Y;
-//# sourceMappingURL=buildAndBroadcastReclaim-Cqc6Jiqk.cjs.map
+"use strict";var Se=Object.defineProperty;var Re=(e,t,r)=>t in e?Se(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var C=(e,t,r)=>Re(e,typeof t!="symbol"?t+"":t,r);const he=require("./BTCVaultRegistry.abi-BJnjzEWD.cjs"),p=require("./bitcoin-D-O2GjbC.cjs"),$=require("./signPsbtsWithFallback-DtwzL5AA.cjs"),Ae=require("viem"),k=require("./json-rpc-client-BiAmg_ho.cjs"),B=require("bitcoinjs-lib"),x=require("./verifyScriptPathSchnorrSignature-DaRqvEgW.cjs"),oe=require("./constants-BTZdyOuk.cjs"),_=require("./noPayout-4RZB2g1e.cjs"),I=require("./signing-BJ3X66b-.cjs"),ie=require("./onChainBtcPubkey-BbxRrbvg.cjs"),_e=require("./secp256k1-DDHQ1_za.cjs"),Ce=require("./tbv/core/wasm/index.cjs"),Be=/^0x[0-9a-fA-F]{64}$/,Ie=/^0x[0-9a-fA-F]{40}$/,$e=/^0x([0-9a-fA-F]{2})*$/;function O(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!Be.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function Ve(e,t){if(!Ie.test(e))throw new Error(`${t} must be a 20-byte 0x-prefixed hex address (42 chars)`)}function Oe(e,t){if(!$e.test(e))throw new Error(`${t} must be a 0x-prefixed hex string with an even number of hex chars`)}function pe(e){Ve(e.btcVaultRegistryAddress,"btcVaultRegistryAddress"),O(e.vaultId,"vaultId");const t=p.ensureHexPrefix(e.secret);if(O(t,"secret"),e.hashlock!==void 0&&(O(e.hashlock,"hashlock"),!$.validateSecretAgainstHashlock(t,e.hashlock)))throw new Error("Invalid secret: SHA256(secret) does not match the provided hashlock");return t}async function Ne(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:n,activationMetadata:s,writeContract:c,signal:i}=e;i==null||i.throwIfAborted();const a=pe({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:n});return Oe(s,"activationMetadata"),c({address:t,abi:he.BTCVaultRegistryABI,functionName:"activateVaultWithSecret",args:[r,a,s]})}async function He(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:n,writeContract:s,signal:c}=e;c==null||c.throwIfAborted();const i=pe({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:n});return s({address:t,abi:he.BTCVaultRegistryABI,functionName:"activateVaultWithSecretAndRedeem",args:[r,i]})}const de=8,Ke=6e3,De=10*6e4,Fe=10;class W extends Error{constructor(t){super(t),this.name="PeginRegistrationMissingError"}}class Q extends Error{constructor(t){super(t),this.name="PeginRegistrationNotFinalError"}}function ge(e){return e instanceof W||e instanceof Error&&e.name==="PeginRegistrationMissingError"}function Me(e){return e instanceof Q||e instanceof Error&&e.name==="PeginRegistrationNotFinalError"}function se(e){const{currentBlock:t,createdAtBlock:r}=e,n=t-r+1n;return n<0n?0:Number(n)}async function Ue(e){const{vaultRegistryReader:t,getBlockNumber:r,vaultIds:n,required:s=de,pollIntervalMs:c=Ke,timeoutMs:i=De,signal:a,onProgress:o}=e;if(n.length===0)throw new Error("waitForPeginRegistrationDepth requires at least one vault ID");const u=Date.now();let h=!1,l=0,d;for(;;){if(a!=null&&a.aborted)throw new Error(`Aborted while waiting for peg-in registration depth (${n.length} vault(s))`);if(Date.now()-u>=i)throw new Q(`Peg-in registration did not reach ${s} Ethereum confirmations within ${i}ms. The registration transaction was submitted but is not yet final, so the Pre-PegIn Bitcoin transaction was never sent and no funds are at risk. Resume this deposit from the dashboard once the network settles.`+(d instanceof Error?` Last read error: ${d.message}`:""));try{const g=await r(),f=await Promise.all(n.map(P=>t.getVaultBasicInfo(P))),y=f.findIndex(P=>P.depositor===Ae.zeroAddress||P.createdAt===0n);if(y!==-1){if(l+=1,!h&&l>Fe)throw new W(`Vault ${n[y]} is still not visible on-chain after ${l} reads — the registration does not exist.`);console.warn(`Peg-in registration for vault ${n[y]} is not visible in chain state at block ${g} — a lagging RPC backend or an Ethereum reorg. Still polling.`),o==null||o({confirmations:0,required:s})}else{h=!0,l=0,d=void 0;let P=f[0],v=se({currentBlock:g,createdAtBlock:f[0].createdAt});for(const w of f.slice(1)){const E=se({currentBlock:g,createdAtBlock:w.createdAt});E<v&&(v=E,P=w)}if(o==null||o({confirmations:v,required:s}),v>=s)return{confirmations:v,basicInfo:P}}}catch(g){if(ge(g))throw g;console.warn(`Registration-depth read failed (retrying in ${c}ms): `+(g instanceof Error?g.message:String(g))),d=g}await new Promise((g,f)=>{const y=()=>{clearTimeout(P),f(new Error(`Aborted while waiting for peg-in registration depth (${n.length} vault(s))`))},P=setTimeout(()=>{a==null||a.removeEventListener("abort",y),g()},c);a==null||a.addEventListener("abort",y,{once:!0})})}}const Le=1;function Xe(e,t,r){const n=r.map(l=>p.stripHexPrefix(l).toLowerCase()),s=t.filter(l=>n.includes(l));if(s.length>0)throw new Error(`Cannot validate challenger set: vault keepers and universal challengers overlap (${s.join(", ")})`);const c=[...t,...n],i=e.map(l=>p.stripHexPrefix(l.challenger_pubkey).toLowerCase()),a=new Set(i);if(a.size!==i.length)throw new Error("Depositor graph contains duplicate challenger entries in challenger_presign_data");const o=new Set(c),u=c.filter(l=>!a.has(l)),h=i.filter(l=>!o.has(l));if(u.length>0||h.length>0)throw new Error("Depositor graph challenger set does not match expected (local ∪ universal)"+(u.length>0?` (missing: ${u.join(", ")})`:"")+(h.length>0?` (unexpected: ${h.join(", ")})`:""))}function qe(e,t){const r=e.ins[t];return p.uint8ArrayToHex(new Uint8Array(r.hash).slice().reverse())}function N(e,t,r,n,s){const c=e.ins[t];if(c.index!==0)throw new Error(`NoPayout (challenger ${s}) input ${t} expected to spend ${n} vout 0, got vout ${c.index}`);const i=r.getId(),a=qe(e,t);if(a!==i)throw new Error(`NoPayout (challenger ${s}) input ${t} does not reference ${n} (expected txid ${i}, got ${a})`)}async function ze(e,t,r){const n=[],s=[],c=[],i=x.deriveLocalChallengers({claimerBtcPubkey:r.depositorBtcPubkey,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys});Xe(e.challenger_presign_data,i,r.universalChallengerBtcPubkeys);const a=await x.buildPayoutPsbt({vaultCoreVersion:r.vaultCoreVersion,vkClaimerPayoutScriptPubKeys:r.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:r.vpCommissionScriptPubKey,payoutTxHex:e.payout_tx.tx_hex,peginTxHex:r.peginTxHex,assertTxHex:e.assert_tx.tx_hex,timelockAssert:r.timelockAssert,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:r.universalChallengerBtcPubkeys,timelockPegin:r.timelockPegin,network:r.network,claimerBtcPubkey:r.depositorBtcPubkey,registeredPayoutScriptPubKey:r.registeredPayoutScriptPubKey,commissionBps:Le,protocolFeeRate:r.protocolFeeRate,councilMembers:r.councilMembers,councilQuorum:r.councilQuorum});n.push(a.psbtHex),s.push(I.createTaprootScriptPathSignOptions(t,oe.DEPOSITOR_SIGNED_INPUT_COUNT));const o=p.stripHexPrefix(r.depositorBtcPubkey),u=B.Transaction.fromHex(p.stripHexPrefix(e.assert_tx.tx_hex));for(const h of e.challenger_presign_data){const l=p.stripHexPrefix(h.challenger_pubkey),d=n.length,g=await Ge({challenger:h,challengerPubkey:l,claimerPubkey:o,localChallengers:i,assertTxParsed:u,ctx:r});n.push(g),s.push(I.createTaprootScriptPathSignOptions(t,oe.DEPOSITOR_SIGNED_INPUT_COUNT)),c.push({challengerPubkey:l,noPayoutIdx:d})}return{psbtHexes:n,signOptions:s,challengerEntries:c}}async function Ge(e){const{challenger:t,challengerPubkey:r,claimerPubkey:n,localChallengers:s,assertTxParsed:c,ctx:i}=e;_.assertNoPayoutOutputMatchesChallenger(t.nopayout_tx.tx_hex,r,i.network);const a=B.Transaction.fromHex(p.stripHexPrefix(t.nopayout_tx.tx_hex)),o=B.Transaction.fromHex(p.stripHexPrefix(t.challenge_assert_x_tx.tx_hex)),u=B.Transaction.fromHex(p.stripHexPrefix(t.challenge_assert_y_tx.tx_hex));if(a.ins.length!==3)throw new Error(`NoPayout (challenger ${r}) must have exactly 3 inputs, got ${a.ins.length}`);N(a,0,c,"Assert",r),N(a,1,o,"ChallengeAssertX",r),N(a,2,u,"ChallengeAssertY",r);const h=[c.outs[0],o.outs[0],u.outs[0]].map(l=>({script_pubkey:p.uint8ArrayToHex(new Uint8Array(l.script)),value:l.value}));return _.buildNoPayoutPsbt({noPayoutTxHex:t.nopayout_tx.tx_hex,challengerPubkey:r,prevouts:h,connectorParams:{txGraphVersion:i.vaultCoreVersion,claimer:n,localChallengers:s,universalChallengers:i.universalChallengerBtcPubkeys,timelockAssert:i.timelockAssert,councilMembers:i.councilMembers,councilQuorum:i.councilQuorum}})}function je(e,t,r){x.assertPsbtUnsignedTxMatches(e[0]);const s=x.extractPayoutSignature(e[0].returnedPsbtHex,r);x.assertScriptPathSchnorrSignature({requestedPsbtHex:e[0].requestedPsbtHex,signatureHex:s,signerXOnlyPubkeyHex:r,inputIndex:0});const c={};for(const i of t){x.assertPsbtUnsignedTxMatches(e[i.noPayoutIdx]);const a=x.extractPayoutSignature(e[i.noPayoutIdx].returnedPsbtHex,r);x.assertScriptPathSchnorrSignature({requestedPsbtHex:e[i.noPayoutIdx].requestedPsbtHex,signatureHex:a,signerXOnlyPubkeyHex:r,inputIndex:0}),c[i.challengerPubkey]={nopayout_signature:a}}return{payout_signatures:{payout_signature:s},per_challenger:c}}async function fe(e){const{depositorGraph:t,btcWallet:r,signingContext:n}=e,s=await r.getPublicKeyHex(),{depositorPubkey:c}=p.validateWalletPubkey(s,p.stripHexPrefix(n.depositorBtcPubkey)),{psbtHexes:i,signOptions:a,challengerEntries:o}=await ze(t,s,n),u=await $.signPsbtsWithFallback(r,i,a),h=i.map((l,d)=>({requestedPsbtHex:l,returnedPsbtHex:u[d]}));return je(h,o,c)}const We=1e4;async function Y(e){const{statusReader:t,peginTxid:r,targetStatuses:n,timeoutMs:s,pollIntervalMs:c=We,signal:i}=e,a=Date.now();for(;;){if(i!=null&&i.aborted)throw new Error(`Polling aborted for pegin ${r.slice(0,8)}… (target: ${[...n].join(", ")})`);if(Date.now()-a>=s)throw new Error(`Polling timeout after ${s}ms for pegin ${r.slice(0,8)}… (target: ${[...n].join(", ")})`);try{const o=await t.getPeginStatus({pegin_txid:r},i);if(o.pegin_txid.toLowerCase()!==r.toLowerCase())throw new Error(`getPeginStatus returned status for pegin ${o.pegin_txid.slice(0,8)}…, requested ${r.slice(0,8)}…`);const u=o.status;if(n.has(u)||u===k.DaemonStatus.ACTIVATED)return u;if(u===k.DaemonStatus.EXPIRED||k.VP_TERMINAL_FAILURE_STATUSES.has(u))throw new Error(`Pegin ${r.slice(0,8)}… reached terminal status "${u}" while waiting for ${[...n].join(", ")}`)}catch(o){if(!(o instanceof k.JsonRpcError&&o.code===k.RpcErrorCode.PEGIN_NOT_FOUND))throw o}await new Promise((o,u)=>{const h=()=>{clearTimeout(l),u(new Error(`Polling aborted for pegin ${r.slice(0,8)}… (target: ${[...n].join(", ")})`))},l=setTimeout(()=>{i==null||i.removeEventListener("abort",h),o()},c);i==null||i.addEventListener("abort",h,{once:!0})})}}const Qe=1200*1e3,Pe=new Set([k.DaemonStatus.PENDING_ACKS,k.DaemonStatus.PENDING_ACTIVATION,k.DaemonStatus.ACTIVATED_PENDING_BROADCAST,k.DaemonStatus.ACTIVATED]),Ye=new Set([k.DaemonStatus.PENDING_DEPOSITOR_SIGNATURES,...Pe]);function Ze(e){return e.map(t=>({claimerPubkeyXOnly:p.processPublicKeyToXOnly(t.claimer_pubkey),payoutTxHex:t.payout_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex}))}function R(e){return p.processPublicKeyToXOnly(e).toLowerCase()}function Je(e,t){const r=(o,u,h)=>{throw new Error(`Deposit terms ${o} (${String(u)}) does not match the vault's version-locked signing context (${String(h)}); refusing to sign payouts against terms that describe a different graph.`)},n=[["protocolFeeRate",e.protocolFeeRate,t.protocolFeeRate],["vaultCoreVersion",e.vaultCoreVersion,t.vaultCoreVersion],["timelockPegin",e.timelockPegin,t.timelockPegin],["timelockAssert",e.timelockAssert,t.timelockAssert]];for(const[o,u,h]of n)u!==h&&r(o,u,h);const s=o=>o.map(R).sort(),c=(o,u)=>{const h=s(o),l=s(u);return h.length===l.length&&h.every((d,g)=>d===l[g])};c(e.vaultKeeperBtcPubkeys,t.vaultKeeperBtcPubkeys)||r("vaultKeeperBtcPubkeys",e.vaultKeeperBtcPubkeys.join(","),t.vaultKeeperBtcPubkeys.join(",")),c(e.universalChallengerBtcPubkeys,t.universalChallengerBtcPubkeys)||r("universalChallengerBtcPubkeys",e.universalChallengerBtcPubkeys.join(","),t.universalChallengerBtcPubkeys.join(","));const i=R(t.vaultProviderBtcPubkey),a=e.vaults.map(o=>R(o.vaultProviderBtcPubkey));a.includes(i)||r("vaults[].vaultProviderBtcPubkey",a.join(",")||"<no vaults>",t.vaultProviderBtcPubkey)}function et(e,t,r,n){const s=R(n),c=[R(t),...r.map(R)],i=new Set(c);if(i.size!==c.length)throw new Error("Cannot validate claimer set: signing context contains duplicate vault provider or vault keeper key");if(i.has(s))throw new Error("Cannot validate claimer set: depositor key overlaps with vault provider or vault keeper set");const a=e.map(d=>R(d.claimer_pubkey));if(new Set(a).size!==a.length)throw new Error("Presign response contains duplicate claimer entries");const o=a.filter(d=>d!==s),u=new Set(o),h=c.filter(d=>!u.has(d)),l=o.filter(d=>!i.has(d));if(h.length>0||l.length>0)throw new Error("Presign response claimer set does not match expected (vault provider ∪ vault keepers)"+(h.length>0?` (missing: ${h.join(", ")})`:"")+(l.length>0?` (unexpected: ${l.join(", ")})`:""))}function ae(e,t){return{vaultCoreVersion:t.vaultCoreVersion,payoutTxHex:e.payoutTxHex,peginTxHex:t.peginTxHex,assertTxHex:e.assertTxHex,vaultProviderBtcPubkey:t.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:t.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:t.universalChallengerBtcPubkeys,depositorBtcPubkey:t.depositorBtcPubkey,timelockPegin:t.timelockPegin,timelockAssert:t.timelockAssert,registeredPayoutScriptPubKey:t.registeredPayoutScriptPubKey,claimerBtcPubkey:e.claimerPubkeyXOnly,commissionBps:t.commissionBps,protocolFeeRate:t.protocolFeeRate,councilMembers:t.councilMembers,councilQuorum:t.councilQuorum,vkClaimerPayoutScriptPubKeys:t.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:t.vpCommissionScriptPubKey}}async function tt(e,t,r,n){const s=new $.PayoutManager({network:t.network,btcWallet:e}),c=r.length;n==null||n(0,c);let i;if(s.supportsBatchSigning())i=(await s.signPayoutTransactionsBatch(r.map(u=>ae(u,t)))).map(u=>u.payoutSignature);else{i=[];for(let o=0;o<r.length;o++){n==null||n(o,c);const u=await s.signPayoutTransaction(ae(r[o],t));i.push(u.signature)}}const a={};for(let o=0;o<r.length;o++)a[r[o].claimerPubkeyXOnly]={payout_signature:i[o]};return n==null||n(c,c),a}async function rt(e){const{statusReader:t,presignClient:r,btcWallet:n,peginTxid:s,depositorPk:c,signingContext:i,depositTerms:a,timeoutMs:o=Qe,signal:u,onProgress:h}=e,l=await Y({statusReader:t,peginTxid:s,targetStatuses:Ye,timeoutMs:o,signal:u});if(Pe.has(l))return;if(u==null||u.throwIfAborted(),a!==void 0&&Je(a,i),$.supportsDepositApproval(n)){if(!a)throw new Error("runDepositorPresignFlow: this wallet requires approved deposit terms but none were provided. Fresh deposits must pass PreparePeginResult.depositTerms; resume flows must rebuild them from on-chain state (the vault app's rebuildDepositTerms).");typeof n.validateDepositTerms=="function"&&await n.validateDepositTerms(a),await n.approveDepositTerms(a)}const d=await r.requestDepositorPresignTransactions({pegin_txid:s,depositor_pk:c},u);u==null||u.throwIfAborted();const g=R(c);et(d.txs,i.vaultProviderBtcPubkey,i.vaultKeeperBtcPubkeys,c);const f=d.txs.filter(E=>R(E.claimer_pubkey)!==g),y=Ze(f),P=await tt(n,i,y,h);u==null||u.throwIfAborted();const v=await fe({depositorGraph:d.depositor_graph,btcWallet:n,signingContext:{vaultCoreVersion:i.vaultCoreVersion,peginTxHex:i.peginTxHex,depositorBtcPubkey:c,vaultProviderBtcPubkey:i.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:i.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:i.universalChallengerBtcPubkeys,timelockPegin:i.timelockPegin,timelockAssert:i.timelockAssert,councilMembers:i.councilMembers,councilQuorum:i.councilQuorum,network:i.network,registeredPayoutScriptPubKey:i.registeredPayoutScriptPubKey,protocolFeeRate:i.protocolFeeRate,vkClaimerPayoutScriptPubKeys:i.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:i.vpCommissionScriptPubKey}});u==null||u.throwIfAborted();const w={...P};w[p.stripHexPrefix(c)]=v.payout_signatures,await r.submitDepositorPresignatures({pegin_txid:s,depositor_pk:c,signatures:w,depositor_claimer_presignatures:v},u)}const nt=300*1e3,ot=new Set([k.DaemonStatus.PENDING_DEPOSITOR_WOTS_PK,...k.POST_WOTS_STATUSES]);async function it(e){const{statusReader:t,wotsSubmitter:r,peginTxid:n,depositorPk:s,wotsPublicKeys:c,timeoutMs:i=nt,signal:a}=e;a==null||a.throwIfAborted();const o=await Y({statusReader:t,peginTxid:n,targetStatuses:ot,timeoutMs:i,signal:a});k.POST_WOTS_STATUSES.has(o)||(a==null||a.throwIfAborted(),await r.submitDepositorWotsKey({pegin_txid:n,depositor_pk:s,wots_public_keys:c},a))}function V(e){return e.registration||e.operation}function ye(e,t,r){const n=p.canonicalizeBtcPubkey(e);return{registration:n===p.canonicalizeBtcPubkey(t),operation:n===p.canonicalizeBtcPubkey(r)}}function F(e,t,r){const n=H(e);return{registration:ue(n,H(t)),operation:ue(n,H(r))}}function H(e){return e.map(p.canonicalizeBtcPubkey).sort()}function ue(e,t){return e.length===t.length&&e.every((r,n)=>r===t[n])}async function st(e){const{vaultProviderEthAddress:t,hintBtcPubkey:r,registrationBtcPubkey:n,readCurrentOperationBtcPubkey:s,context:c}=e;if(!r)return;const i=p.canonicalizeBtcPubkey(r);if(i===p.canonicalizeBtcPubkey(n))return;const a=p.canonicalizeBtcPubkey(await s());if(i!==a)throw new Error(`Vault provider BTC pubkey mismatch for ${t}: indexer hint matches neither the registration key nor the current operation key on-chain.${c?` ${c}`:""}`)}function K(e,t,r){const n=`${e} operation key (admin=${t.ethAddress})`,s=ie.assertOnChainBtcPubkey(t.btcPubKey,`${e} roster key (admin=${t.ethAddress})`),c=ie.assertOnChainBtcPubkey(r,n);return{adminAddress:t.ethAddress,genesisBtcPubkey:s,operationBtcPubkey:c,rotated:c!==s}}function at(e){const t=new Map;for(const r of e){const n=t.get(r.operationBtcPubkey);if(n)throw new Error(`Participant operation key collision: ${n} and ${r.adminAddress} both resolve to operation key ${r.operationBtcPubkey}`);t.set(r.operationBtcPubkey,r.adminAddress)}}function ve(e,t,r){if(t.vaultKeepers.length!==e.vaultKeepers.length||t.universalChallengers.length!==e.universalChallengers.length)throw new Error(`Operation-key resolution returned ${t.vaultKeepers.length} keeper and ${t.universalChallengers.length} challenger keys for a roster of ${e.vaultKeepers.length} keepers and ${e.universalChallengers.length} challengers`);const n=K("vault provider",{ethAddress:e.vaultProviderEthAddress,btcPubKey:e.vaultProviderGenesisBtcPubkey},t.vaultProvider),s=e.vaultKeepers.map((i,a)=>K("vault keeper",i,t.vaultKeepers[a])),c=e.universalChallengers.map((i,a)=>K("universal challenger",i,t.universalChallengers[a]));return at([n,...s,...c]),{vaultProvider:n,vaultKeepers:s,universalChallengers:c,vaultKeeperOperationKeysSorted:s.map(i=>i.operationBtcPubkey).sort(),universalChallengerOperationKeysSorted:c.map(i=>i.operationBtcPubkey).sort(),resolvedAt:r,query:e}}async function me(e){const t=await e.operationKeyReader.getCurrentOperationKeys(e.query,e.blockNumber);return ve(e.query,t,{mode:"current"})}async function be(e){const t=await e.operationKeyReader.getOperationKeysAtEpochs(e.query,e.epochs);return ve(e.query,t,{mode:"epochs",epochs:e.epochs})}const ce=e=>e.map(p.canonicalizeBtcPubkey).sort();async function ut(e){const{vaultRegistryReader:t,vaultKeeperReader:r,universalChallengerReader:n,vaultProviderEthAddress:s,applicationEntryPoint:c,expectedVaultProviderBtcPubkey:i,expectedVaultKeeperBtcPubkeys:a,expectedUniversalChallengerBtcPubkeys:o,operationKeyReader:u,onIndexerServingOperationKeys:h,onIndexerHintsInconsistent:l,blockNumber:d}=e,[g,f,y]=await Promise.all([t.getVaultProviderGenesisBtcPubKey(s,d),r.getCurrentVaultKeepersVersion(c,d),n.getLatestUniversalChallengersVersion(d)]),[P,v]=await Promise.all([r.getVaultKeepersByVersion(c,f,d),n.getUniversalChallengersByVersion(y,d)]),w={vaultProvider:p.canonicalizeBtcPubkey(g),vaultKeepers:ce(P.map(T=>T.btcPubKey)),universalChallengers:ce(v.map(T=>T.btcPubKey))},E=await me({operationKeyReader:u,query:{vaultProviderEthAddress:s,vaultProviderGenesisBtcPubkey:`0x${g}`,applicationEntryPoint:c,vaultKeepers:P,universalChallengers:v},blockNumber:d}),m={vaultProvider:E.vaultProvider.operationBtcPubkey,vaultKeepers:[...E.vaultKeeperOperationKeysSorted],universalChallengers:[...E.universalChallengerOperationKeysSorted]},S=ye(i,w.vaultProvider,m.vaultProvider),A=F(a,w.vaultKeepers,m.vaultKeepers),b=F(o,w.universalChallengers,m.universalChallengers);if(!V(S))throw new Error(`Vault provider BTC pubkey indexer hint does not match BTCVaultRegistry for ${s}. Refresh and try again.`);if(!V(A))throw new Error(`Vault keeper BTC pubkeys (v${f}) indexer set does not match ApplicationRegistry on-chain set. Refresh and try again.`);if(!V(b))throw new Error(`Universal challenger BTC pubkeys (v${y}) indexer set does not match ProtocolParams on-chain set. Refresh and try again.`);const re=[S,A,b],Te=re.some(T=>T.registration&&!T.operation),ne=re.some(T=>T.operation&&!T.registration);if(Te&&ne){const T=`Indexer participant hints are internally inconsistent for vault provider ${s}: some roles match the registration keys while others match the rotated operation keys.`;throw l==null||l(T),new Error(`${T} Refresh and try again.`)}return ne&&(h==null||h(`Indexer is serving rotated operation keys for vault provider ${s}`)),{vaultProviderBtcPubkeyXOnly:m.vaultProvider,vaultKeeperBtcPubkeysSorted:m.vaultKeepers,universalChallengerBtcPubkeysSorted:m.universalChallengers,expectedAppVaultKeepersVersion:f,expectedUniversalChallengersVersion:y,registrationKeys:w,participantKeys:E}}function ct(e){return/^[0-9a-fA-F]{64}$/.test(e)}function lt(e){const{amountSats:t,minDeposit:r,maxDeposit:n,btcBalance:s,estimatedFeeSats:c,depositorClaimValue:i}=e;return!(t<=0n||t<r||n&&n>0n&&t>n||c==null||i==null||t+c+i>s)}function ht(e,t,r){return e<=0n?{valid:!1,error:"Deposit amount must be greater than zero"}:e<t?{valid:!1,error:`Minimum deposit is ${p.formatSatoshisToBtc(t)} BTC`}:r&&r>0n&&e>r?{valid:!1,error:`Maximum deposit is ${p.formatSatoshisToBtc(r)} BTC`}:{valid:!0}}function pt(e){const{amount:t,effectiveRemaining:r}=e;return r===null?{valid:!0}:r===0n?{valid:!1,error:"Supply cap reached — deposits temporarily paused"}:t>r?{valid:!1,error:`Vault size exceeds remaining capacity (${p.formatSatoshisToBtc(r)} BTC)`}:{valid:!0}}function dt(e,t){if(!e||e.length===0)return{valid:!1,error:"At least one vault provider must be selected"};const r=t.map(s=>s.toLowerCase());return e.filter(s=>!r.includes(s.toLowerCase())).length>0?{valid:!1,error:"Invalid vault provider selected"}:{valid:!0}}function we(e,t,r){if(!e||e.length===0)return{valid:!1,error:"At least one vault amount required"};for(let n=0;n<e.length;n++){const s=e[n];if(s<=0n)return{valid:!1,error:`Vault ${n+1} amount must be positive`};if(t&&s<t)return{valid:!1,error:`Vault ${n+1} amount ${p.formatSatoshisToBtc(s)} BTC is below minimum deposit ${p.formatSatoshisToBtc(t)} BTC`};if(r&&s>r)return{valid:!1,error:`Vault ${n+1} amount ${p.formatSatoshisToBtc(s)} BTC exceeds maximum deposit ${p.formatSatoshisToBtc(r)} BTC`}}return{valid:!0}}function Ee(e){const t=p.stripHexPrefix(e);return ct(t)?{valid:!0}:{valid:!1,error:"Invalid pubkey format: must be 64 hex characters (32-byte x-only public key, no 0x prefix)"}}function gt(e){if(!e||e.length===0)throw new Error("No vault keepers available. The system requires at least one vault keeper to create a deposit.")}function ft(e){if(!e||e.length===0)throw new Error("No universal challengers available. The system requires at least one universal challenger to create a deposit.")}function Pt(e){if(e.length===0)throw new Error("No spendable UTXOs available")}function yt(e){const{vaultAmounts:t,confirmedUTXOs:r,vaultProviderBtcPubkey:n,vaultKeeperBtcPubkeys:s,universalChallengerBtcPubkeys:c,minDeposit:i,maxDeposit:a}=e,o=we(t,i,a);if(!o.valid)throw new Error(o.error);const u=Ee(n);if(!u.valid)throw new Error(u.error);gt(s),ft(c),Pt(r)}class Z extends Error{constructor(t){super(t),this.name="ParticipantKeyDriftError"}}function vt(e){return e instanceof Z||e instanceof Error&&e.name==="ParticipantKeyDriftError"}function le(e,t,r){return t.length===r.length&&t.every((n,s)=>n===r[s])?null:`${e} expected [${t.join(", ")}], got [${r.join(", ")}]`}async function mt(e){const{vaultRegistryReader:t,operationKeyReader:r,vaultIds:n,expected:s}=e,c=s.query;if(n.length===0)return;const i=await t.getVaultKeyEpochsBatch(n),a=[];for(const[o,u]of i.entries()){const h=n[o];let l;try{l=await be({operationKeyReader:r,query:c,epochs:u})}catch(f){a.push(`vault ${h}: could not resolve participants at frozen epochs (vp=${u.vpKeyEpoch}, keeper=${u.appKeeperKeyEpoch}, uc=${u.ucKeyEpoch}): ${f.message}`);continue}l.vaultProvider.operationBtcPubkey!==s.vaultProvider.operationBtcPubkey&&a.push(`vault ${h}: vault provider key expected ${s.vaultProvider.operationBtcPubkey}, got ${l.vaultProvider.operationBtcPubkey}`);const d=le(`vault ${h}: vault keeper keys`,s.vaultKeeperOperationKeysSorted,l.vaultKeeperOperationKeysSorted);d&&a.push(d);const g=le(`vault ${h}: universal challenger keys`,s.universalChallengerOperationKeysSorted,l.universalChallengerOperationKeysSorted);g&&a.push(g)}if(a.length>0)throw new Z(`Aborting BTC broadcast: participant operation keys changed during registration (${a.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class J extends Error{constructor(t){super(t),this.name="RegisteredVaultVersionMismatchError"}}function bt(e){return e instanceof J||e instanceof Error&&e.name==="RegisteredVaultVersionMismatchError"}async function wt(e){const{vaultRegistryReader:t,vaultIds:r,expectedOffchainParamsVersion:n,expectedAppVaultKeepersVersion:s,expectedUniversalChallengersVersion:c,expectedVaultCoreVersion:i}=e,a=await t.getProtocolInfoBatch(r),o=[];if(a.forEach((u,h)=>{const l=r[h];u.offchainParamsVersion!==n&&o.push(`vault ${l}: offchainParams expected v${n}, got v${u.offchainParamsVersion}`),u.appVaultKeepersVersion!==s&&o.push(`vault ${l}: appVaultKeepers expected v${s}, got v${u.appVaultKeepersVersion}`),u.universalChallengersVersion!==c&&o.push(`vault ${l}: universalChallengers expected v${c}, got v${u.universalChallengersVersion}`),u.vaultCoreVersion!==i&&o.push(`vault ${l}: vaultCoreVersion expected v${i} (build-time active), got v${u.vaultCoreVersion}`)}),o.length>0)throw new J(`Aborting BTC broadcast: signer-set or offchain-params versions changed during registration (${o.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}var ee=(e=>(e.CLAIM_EVENT_RECEIVED="ClaimEventReceived",e.CLAIM_BROADCAST="ClaimBroadcast",e.ASSERT_BROADCAST="AssertBroadcast",e.PAYOUT_BROADCAST="PayoutBroadcast",e.PAYOUT_BLOCKED="PayoutBlocked",e))(ee||{});const Et=new Set(["PayoutBroadcast","PayoutBlocked"]);function xt(e){return Object.values(ee).includes(e)}function kt(e){return!!e&&Et.has(e)}class xe extends Error{constructor(r,n){super(`Refund not yet mature (BIP68 not final): ${n.message}`);C(this,"vaultId");C(this,"cause");this.name="BIP68NotMatureError",this.vaultId=r,this.cause=n}}const Tt=/^0x[0-9a-fA-F]{64}$/,St=/^(?:0x)?(?:[0-9a-fA-F]{2})+$/,ke=/^(?:0x)?(?:[0-9a-fA-F]{64}|[0-9a-fA-F]{66})$/,te=160,M=2e3,U=10n,L=100n;function Rt(e){if(!Number.isFinite(e)||e<=0)throw new Error(`feeRateSatsVb must be a positive finite number, got ${e}`);return BigInt(Math.ceil(e*te))}const At=1,_t=/non-BIP68-final/i;function X(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!Tt.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function D(e,t){if(!Number.isInteger(e)||e<0)throw new Error(`${t} must be a non-negative integer, got ${e}`)}function Ct(e){if(X(e.hashlock,"hashlock"),!Number.isInteger(e.htlcVout)||e.htlcVout<0)throw new Error(`htlcVout must be a non-negative integer, got ${e.htlcVout}`);if(!Array.isArray(e.batch)||e.batch.length===0)throw new Error("batch must be a non-empty array of HTLC entries");if(e.htlcVout>=e.batch.length)throw new Error(`htlcVout ${e.htlcVout} is out of range for batch of size ${e.batch.length}`);for(let r=0;r<e.batch.length;r++){const n=e.batch[r];if(X(n.hashlock,`batch[${r}].hashlock`),!Number.isInteger(n.htlcVout)||n.htlcVout!==r)throw new Error(`batch[${r}].htlcVout must equal ${r} (contiguous vout-ordered vector), got ${n.htlcVout}`);if(typeof n.amount!="bigint"||n.amount<=0n)throw new Error(`batch[${r}].amount must be a positive bigint, got ${n.amount}`)}const t=e.batch[e.htlcVout];if(t.hashlock.toLowerCase()!==e.hashlock.toLowerCase())throw new Error(`batch[${e.htlcVout}].hashlock (${t.hashlock}) does not match target hashlock (${e.hashlock})`);if(t.amount!==e.amount)throw new Error(`batch[${e.htlcVout}].amount (${t.amount}) does not match target amount (${e.amount})`);if(D(e.offchainParamsVersion,"offchainParamsVersion"),D(e.appVaultKeepersVersion,"appVaultKeepersVersion"),D(e.universalChallengersVersion,"universalChallengersVersion"),_e.assertValidVaultCoreVersion(e.vaultCoreVersion,"VaultRefundData.vaultCoreVersion"),typeof e.unsignedPrePeginTxHex!="string"||e.unsignedPrePeginTxHex.length===0)throw new Error("unsignedPrePeginTxHex must be a non-empty hex string");if(!St.test(e.unsignedPrePeginTxHex))throw new Error("unsignedPrePeginTxHex must be a hex byte string (optional 0x prefix, even length)");if(!e.depositorBtcPubkey||!ke.test(e.depositorBtcPubkey))throw new Error("depositorBtcPubkey must be 32 or 33 bytes of hex (optional 0x prefix)");if(typeof e.amount!="bigint"||e.amount<=0n)throw new Error(`amount must be a positive bigint, got ${e.amount}`)}function Bt(e){if(!e.vaultProviderPubkey||!ke.test(e.vaultProviderPubkey))throw new Error("vaultProviderPubkey must be 32 or 33 bytes of hex");if(e.vaultKeeperPubkeys.length===0)throw new Error("vaultKeeperPubkeys must be non-empty");if(e.universalChallengerPubkeys.length===0)throw new Error("universalChallengerPubkeys must be non-empty");if(!Number.isInteger(e.timelockRefund)||e.timelockRefund<=0)throw new Error(`timelockRefund must be a positive integer, got ${e.timelockRefund}`);if(typeof e.feeRate!="bigint"||e.feeRate<=0n)throw new Error(`protocol feeRate must be a positive bigint, got ${e.feeRate}`);if(typeof e.minPeginFeeRate!="bigint"||e.minPeginFeeRate<=0n)throw new Error(`minPeginFeeRate must be a positive bigint, got ${e.minPeginFeeRate}`);if(!Number.isInteger(e.numLocalChallengers)||e.numLocalChallengers<0)throw new Error("numLocalChallengers must be a non-negative integer");if(!Number.isInteger(e.councilQuorum)||!Number.isInteger(e.councilSize)||e.councilQuorum<=0||e.councilSize<=0||e.councilQuorum>e.councilSize)throw new Error(`councilQuorum (${e.councilQuorum}) must be in [1, councilSize=${e.councilSize}]`)}async function It(e){const{vaultId:t,readVault:r,readPrePeginContext:n,feeRate:s,signPsbt:c,broadcastTx:i,signal:a}=e;a==null||a.throwIfAborted(),X(t,"vaultId");const o=await r();Ct(o),a==null||a.throwIfAborted();const u=await n(o);if(Bt(u),a==null||a.throwIfAborted(),!Number.isFinite(s)||s<=0)throw new Error(`feeRate must be a positive number, got ${s}`);if(s>M)throw new Error(`feeRate ${s} sat/vB exceeds refund safety cap ${M} sat/vB; refusing to sign refund.`);const h=BigInt(Math.ceil(s*te)),l=o.amount*U/L;if(h>l)throw new Error(`Refund fee ${h} sats exceeds the per-vault safety cap of ${l} sats (${U}/${L} of vault.amount=${o.amount}); refusing to sign refund.`);a==null||a.throwIfAborted();const d=p.processPublicKeyToXOnly(o.depositorBtcPubkey),g=p.stripHexPrefix(o.unsignedPrePeginTxHex),f=$.findAuthAnchorOpReturn(g);if(f!==void 0&&f.vout!==o.batch.length)throw new Error(`Auth-anchor OP_RETURN at vout ${f.vout} does not match batch size (${o.batch.length} HTLC outputs expect the anchor at vout ${o.batch.length}). Refund refused — sibling HTLC vector is incomplete.`);const y=f==null?void 0:f.hash;let P;try{P=B.Transaction.fromHex(g)}catch(b){throw new Error(`Failed to parse funded Pre-PegIn transaction hex: ${b instanceof Error?b.message:String(b)}`)}if(P.outs.length<o.batch.length)throw new Error(`Funded Pre-PegIn tx has ${P.outs.length} outputs but batch requires at least ${o.batch.length} HTLC outputs. Refund refused — funded tx shape disagrees with sibling vector.`);const{psbtHex:v}=await _.buildRefundPsbt({prePeginParams:{vaultCoreVersion:o.vaultCoreVersion,depositorPubkey:d,vaultProviderPubkey:p.stripHexPrefix(u.vaultProviderPubkey),vaultKeeperPubkeys:u.vaultKeeperPubkeys.map(p.stripHexPrefix),universalChallengerPubkeys:u.universalChallengerPubkeys.map(p.stripHexPrefix),hashlocks:o.batch.map(b=>p.stripHexPrefix(b.hashlock)),timelockRefund:u.timelockRefund,pegInAmounts:o.batch.map(b=>b.amount),feeRate:u.feeRate,minPeginFeeRate:u.minPeginFeeRate,numLocalChallengers:u.numLocalChallengers,councilQuorum:u.councilQuorum,councilSize:u.councilSize,network:u.network,authAnchorHash:y},fundedPrePeginTxHex:g,htlcVout:o.htlcVout,refundFee:h,hashlock:p.stripHexPrefix(o.hashlock)});a==null||a.throwIfAborted();const w=I.createTaprootScriptPathSignOptions(o.depositorBtcPubkey,At),E=await c(v,w);x.assertPsbtUnsignedTxMatches({requestedPsbtHex:v,returnedPsbtHex:E});const m=0,S=x.extractPayoutSignature(E,d,m);x.assertScriptPathSchnorrSignature({requestedPsbtHex:v,signatureHex:S,signerXOnlyPubkeyHex:d,inputIndex:m});const A=_.finalizeScriptPathWithSignatures({requestedPsbtHex:v,signaturesHex:[S],signerXOnlyPubkeyHex:d});a==null||a.throwIfAborted();try{return await i(A)}catch(b){throw b instanceof Error&&_t.test(b.message)?new xe(t,b):b}}class q extends Error{constructor(r,n,s){super(r);C(this,"feeSats");C(this,"sweptTotalSats");this.name="ReclaimUneconomicalError",this.feeSats=n,this.sweptTotalSats=s}}const z=2e3,G=25n,j=100n,$t=10n;async function Vt(e,t,r){for(let n=0;n<e.length;n++){const s=I.calculateBtcTxHash(e[n].depositorSignedPeginTxHex),c=p.ensureHexPrefix(await Ce.deriveVaultId(p.stripHexPrefix(s),p.stripHexPrefix(r))).toLowerCase();if(c!==t[n].toLowerCase())throw new Error(`Reserve ${n} belongs to vault ${c}, not the requested ${t[n].toLowerCase()}. Refusing to sweep a reserve whose vault is not the one the caller asked for — the reserve funds that vault's claim transaction and cannot be replaced.`)}}async function Ot(e){const{vaultIds:t,depositorEthAddress:r,depositorBtcPubkey:n,readVaults:s,feeRate:c,signPsbt:i,broadcastTx:a,signal:o}=e;if(o==null||o.throwIfAborted(),t.length===0)throw new Error("Reclaim requires at least one vault id; got none.");if(!Number.isFinite(c)||c<=0)throw new Error(`feeRate must be a positive number, got ${c}`);if(c>z)throw new q(`Fee rate ${c} sat/vB exceeds the reclaim safety cap of ${z} sat/vB; refusing to sign.`,0n,0n);const u=await s();if(o==null||o.throwIfAborted(),u.length!==t.length)throw new Error(`readVaults returned ${u.length} reserves for ${t.length} vault id(s); refusing to sweep a set that does not match the request.`);await Vt(u,t,r),o==null||o.throwIfAborted();const h=p.processPublicKeyToXOnly(n),l=u.map(m=>({depositorSignedPeginTxHex:m.depositorSignedPeginTxHex,observed:m.observed,expectedValue:m.expectedClaimValue})),d=_.estimateReclaimFeeSats(c,l.length),g=l.reduce((m,S)=>m+S.expectedValue,0n),f=g*G/j;if(d>f)throw new q(`Reclaim fee ${d} sats exceeds ${G}/${j} of the swept total (${g} sats, cap ${f} sats). The reserve is not at risk — it stays where it is until fee rates fall.`,d,g);o==null||o.throwIfAborted();const{psbtHex:y}=_.buildReclaimPsbt({depositorPubkey:h,inputs:l,feeSats:d});o==null||o.throwIfAborted();const P=I.createTaprootScriptPathSignOptions(n,l.length),v=await i(y,P);x.assertPsbtUnsignedTxMatches({requestedPsbtHex:y,returnedPsbtHex:v});const w=l.map((m,S)=>{const A=x.extractPayoutSignature(v,h,S);return x.assertScriptPathSchnorrSignature({requestedPsbtHex:y,signatureHex:A,signerXOnlyPubkeyHex:h,inputIndex:S}),A}),E=_.finalizeScriptPathWithSignatures({requestedPsbtHex:y,signaturesHex:w,signerXOnlyPubkeyHex:h});return o==null||o.throwIfAborted(),a(E)}exports.BIP68NotMatureError=xe;exports.ClaimerPegoutStatusValue=ee;exports.PEGIN_ETH_CONFIRMATIONS=de;exports.ParticipantKeyDriftError=Z;exports.PeginRegistrationMissingError=W;exports.PeginRegistrationNotFinalError=Q;exports.RECLAIM_MAX_FEE_FRACTION_DENOMINATOR=j;exports.RECLAIM_MAX_FEE_FRACTION_NUMERATOR=G;exports.RECLAIM_MAX_FEE_RATE_SATS_VB=z;exports.RECLAIM_WARN_FEE_FRACTION_NUMERATOR=$t;exports.REFUND_MAX_FEE_FRACTION_DENOMINATOR=L;exports.REFUND_MAX_FEE_FRACTION_NUMERATOR=U;exports.REFUND_MAX_FEE_RATE_SATS_VB=M;exports.REFUND_VSIZE=te;exports.ReclaimUneconomicalError=q;exports.RegisteredVaultVersionMismatchError=J;exports.activateVault=Ne;exports.activateVaultAndRedeem=He;exports.assertVaultProviderHintAccepted=st;exports.buildAndBroadcastReclaim=Ot;exports.buildAndBroadcastRefund=It;exports.estimateRefundFeeSats=Rt;exports.isDepositAmountValid=lt;exports.isHintAccepted=V;exports.isParticipantKeyDriftError=vt;exports.isPeginRegistrationMissingError=ge;exports.isPeginRegistrationNotFinalError=Me;exports.isPegoutTerminalStatus=kt;exports.isRecognizedPegoutStatus=xt;exports.isRegisteredVaultVersionMismatchError=bt;exports.matchKeyHint=ye;exports.matchKeySetHint=F;exports.resolveCurrentParticipantKeys=me;exports.resolveParticipantKeysAtEpochs=be;exports.runDepositorPresignFlow=rt;exports.signDepositorGraph=fe;exports.submitWotsPublicKey=it;exports.validateDepositAmount=ht;exports.validateMultiVaultDepositInputs=yt;exports.validateOnChainParticipantKeys=ut;exports.validateProviderSelection=dt;exports.validateRemainingCapacity=pt;exports.validateVaultAmounts=we;exports.validateVaultProviderPubkey=Ee;exports.verifyRegisteredParticipantKeys=mt;exports.verifyRegisteredVaultVersions=wt;exports.waitForPeginRegistrationDepth=Ue;exports.waitForPeginStatus=Y;
+//# sourceMappingURL=buildAndBroadcastReclaim-CB5VPETy.cjs.map