@babylonlabs-io/ts-sdk 2.0.0 → 2.0.2

package/dist/{json-rpc-client-DuUARJvV.js → json-rpc-client-CQLbpuKK.js}

@@ -1,15 +1,15 @@
 var p = Object.defineProperty;
 var O = (e, t, r) => t in e ? p(e, t, { enumerable: !0, configurable: !0, writable: !0, value: r }) : e[t] = r;
 var d = (e, t, r) => O(e, typeof t != "symbol" ? t + "" : t, r);
-var w = /* @__PURE__ */ ((e) => (e.PENDING_INGESTION = "PendingIngestion", e.PENDING_DEPOSITOR_WOTS_PK = "PendingDepositorWotsPK", e.PENDING_BABE_SETUP = "PendingBabeSetup", e.PENDING_CHALLENGER_PRESIGNING = "PendingChallengerPresigning", e.PENDING_PEGIN_SIGS_AVAILABILITY = "PendingPeginSigsAvailability", e.PENDING_PRE_PEGIN_CONFIRMATIONS = "PendingPrePegInConfirmations", e.PENDING_DEPOSITOR_SIGNATURES = "PendingDepositorSignatures", e.PENDING_ACKS = "PendingACKs", e.PENDING_ACTIVATION = "PendingActivation", e.ACTIVATED_PENDING_BROADCAST = "ActivatedPendingBroadcast", e.ACTIVATED = "Activated", e.EXPIRED = "Expired", e.INGESTION_REJECTED = "IngestionRejected", e.INVALID_SIG_IN_CONTRACT = "InvalidSigInContract", e.AML_REJECTED = "AmlRejected", e.EXPIRED_CLEANED_UP = "ExpiredCleanedUp", e.EXPIRED_IN_CLAIM = "ExpiredInClaim", e))(w || {});
-const F = [
+var b = /* @__PURE__ */ ((e) => (e.PENDING_INGESTION = "PendingIngestion", e.PENDING_DEPOSITOR_WOTS_PK = "PendingDepositorWotsPK", e.PENDING_BABE_SETUP = "PendingBabeSetup", e.PENDING_CHALLENGER_PRESIGNING = "PendingChallengerPresigning", e.PENDING_PEGIN_SIGS_AVAILABILITY = "PendingPeginSigsAvailability", e.PENDING_PRE_PEGIN_CONFIRMATIONS = "PendingPrePegInConfirmations", e.PENDING_DEPOSITOR_SIGNATURES = "PendingDepositorSignatures", e.PENDING_ACKS = "PendingACKs", e.PENDING_ACTIVATION = "PendingActivation", e.ACTIVATED_PENDING_BROADCAST = "ActivatedPendingBroadcast", e.ACTIVATED = "Activated", e.EXPIRED = "Expired", e.INGESTION_REJECTED = "IngestionRejected", e.INVALID_SIG_IN_CONTRACT = "InvalidSigInContract", e.AML_REJECTED = "AmlRejected", e.EXPIRED_CLEANED_UP = "ExpiredCleanedUp", e.EXPIRED_IN_CLAIM = "ExpiredInClaim", e.BABE_SETUP_FAILED = "BabeSetupFailed", e))(b || {});
+const k = [
   "PendingIngestion",
   "PendingBabeSetup",
   "PendingChallengerPresigning",
   "PendingPeginSigsAvailability",
   "PendingPrePegInConfirmations"
   /* PENDING_PRE_PEGIN_CONFIRMATIONS */
-], b = [
+], w = [
   "PendingACKs",
   "PendingActivation",
   "ActivatedPendingBroadcast",
@@ -20,14 +20,15 @@ const F = [
   "PendingChallengerPresigning",
   "PendingPeginSigsAvailability",
   "PendingPrePegInConfirmations",
-  ...b
+  ...w
 ]), q = /* @__PURE__ */ new Set([
   "IngestionRejected",
   "InvalidSigInContract",
   "AmlRejected",
   "ExpiredCleanedUp",
-  "ExpiredInClaim"
-  /* EXPIRED_IN_CLAIM */
+  "ExpiredInClaim",
+  "BabeSetupFailed"
+  /* BABE_SETUP_FAILED */
 ]), Y = /* @__PURE__ */ new Set([
   ...y,
   "PendingDepositorSignatures"
@@ -39,7 +40,7 @@ class l extends Error {
     super(r), this.code = t, this.source = n, this.data = o, this.name = "JsonRpcError";
   }
 }
-const h = {
+const _ = {
   TIMEOUT: -32e3,
   NETWORK: -32001,
   /** VP proxy: request timed out at proxy level */
@@ -50,7 +51,7 @@ const h = {
   INVALID_RESPONSE: -32700,
   /** SDK client: response body exceeded the configured byte limit */
   RESPONSE_TOO_LARGE: -32701
-}, f = "2.0", C = 3, g = 1e3, D = 2 * 1024 * 1024, L = /* @__PURE__ */ new Set([
+}, f = "2.0", C = 3, g = 1e3, L = 2 * 1024 * 1024, D = /* @__PURE__ */ new Set([
   "vaultProvider_requestDepositorClaimerArtifacts"
 ]), U = /* @__PURE__ */ new Set([
   408,
@@ -92,7 +93,7 @@ class j {
     if (this.baseUrl = t.baseUrl.replace(/\/$/, ""), this.timeout = t.timeout, this.headers = {
       "Content-Type": "application/json",
       ...t.headers
-    }, this.retries = t.retries ?? C, this.retryDelay = t.retryDelay ?? g, this.maxResponseBytes = t.maxResponseBytes ?? D, !Number.isFinite(this.maxResponseBytes) || this.maxResponseBytes <= 0)
+    }, this.retries = t.retries ?? C, this.retryDelay = t.retryDelay ?? g, this.maxResponseBytes = t.maxResponseBytes ?? L, !Number.isFinite(this.maxResponseBytes) || this.maxResponseBytes <= 0)
       throw new Error("maxResponseBytes must be a positive finite number");
     this.retryableFor = t.retryableFor ?? G, this.tokenProvider = t.tokenProvider;
   }
@@ -141,18 +142,18 @@ class j {
     );
     let s;
     try {
-      const a = L.has(t) ? await i.text() : await M(i, this.maxResponseBytes);
+      const a = D.has(t) ? await i.text() : await J(i, this.maxResponseBytes);
       s = JSON.parse(a);
     } catch (a) {
       throw a instanceof l ? a : new l(
-        h.INVALID_RESPONSE,
+        _.INVALID_RESPONSE,
         "Invalid JSON-RPC response: body is not valid JSON",
         "local"
       );
     }
     if (s === null || typeof s != "object" || Array.isArray(s))
       throw new l(
-        h.INVALID_RESPONSE,
+        _.INVALID_RESPONSE,
         `Invalid JSON-RPC response: expected an object, got ${typeof s}`,
         "local"
       );
@@ -160,7 +161,7 @@ class j {
     if ("error" in c && c.error != null) {
       const a = c.error;
       throw new l(
-        a.code ?? h.INVALID_RESPONSE,
+        a.code ?? _.INVALID_RESPONSE,
         a.message ?? "Unknown RPC error",
         "wire",
         a.data
@@ -168,7 +169,7 @@ class j {
     }
     if (!("result" in c))
       throw new l(
-        h.INVALID_RESPONSE,
+        _.INVALID_RESPONSE,
         'Invalid JSON-RPC response: missing "result" field',
         "local"
       );
@@ -194,12 +195,12 @@ class j {
       params: [r],
       id: i
     });
-    let R = null;
+    let A = null;
     for (let T = 0; T <= s; T++) {
-      const _ = new AbortController(), A = setTimeout(
-        () => _.abort(),
+      const h = new AbortController(), R = setTimeout(
+        () => h.abort(),
         this.timeout
-      ), u = n ? J(n, _.signal) : null, N = u ? u.signal : _.signal;
+      ), u = n ? F(n, h.signal) : null, N = u ? u.signal : h.signal;
       try {
         const E = await this.buildHeaders(t, o), P = await fetch(this.baseUrl, {
           method: "POST",
@@ -207,7 +208,7 @@ class j {
           body: a,
           signal: N
         });
-        if (clearTimeout(A), u == null || u.cleanup(), !P.ok) {
+        if (clearTimeout(R), u == null || u.cleanup(), !P.ok) {
           if (T < s && U.has(P.status)) {
             const S = this.retryDelay * Math.pow(2, T);
             await this.sleep(S, n);
@@ -219,7 +220,7 @@ class j {
         }
         return P;
       } catch (E) {
-        if (clearTimeout(A), u == null || u.cleanup(), R = E instanceof Error ? E : new Error(String(E)), n != null && n.aborted)
+        if (clearTimeout(R), u == null || u.cleanup(), A = E instanceof Error ? E : new Error(String(E)), n != null && n.aborted)
           throw new Error("Request aborted");
         if (E instanceof Error && E.name === "AbortError") {
           if (T < s) {
@@ -228,7 +229,7 @@ class j {
             continue;
           }
           throw new l(
-            h.TIMEOUT,
+            _.TIMEOUT,
             `Request timeout after ${this.timeout}ms (${s + 1} attempts)`,
             "local"
           );
@@ -240,7 +241,7 @@ class j {
             continue;
           }
           throw new l(
-            h.NETWORK,
+            _.NETWORK,
             `Network error: ${E.message} (${s + 1} attempts)`,
             "local"
           );
@@ -248,7 +249,7 @@ class j {
         throw E;
       }
     }
-    throw R || new Error("Unknown error after retries");
+    throw A || new Error("Unknown error after retries");
   }
   sleep(t, r) {
     return new Promise((n, o) => {
@@ -268,7 +269,7 @@ class j {
     return this.baseUrl;
   }
 }
-function J(e, t) {
+function F(e, t) {
   if (e.aborted) return { signal: e, cleanup: () => {
   } };
   if (t.aborted) return { signal: t, cleanup: () => {
@@ -284,7 +285,7 @@ function J(e, t) {
   };
   return { signal: r.signal, cleanup: i };
 }
-async function M(e, t) {
+async function J(e, t) {
   const r = e.headers.get("content-length");
   if (r !== null) {
     const c = Number(r);
@@ -312,16 +313,16 @@ async function M(e, t) {
 }
 function I(e) {
   return new l(
-    h.RESPONSE_TOO_LARGE,
+    _.RESPONSE_TOO_LARGE,
     `JSON-RPC response exceeds maximum size of ${e} bytes`,
     "local"
   );
 }
 export {
   B as A,
-  w as D,
-  h as J,
-  F as P,
+  b as D,
+  _ as J,
+  k as P,
   v as R,
   y as V,
   j as a,
@@ -331,4 +332,4 @@ export {
   $ as e,
   x as i
 };
-//# sourceMappingURL=json-rpc-client-DuUARJvV.js.map
+//# sourceMappingURL=json-rpc-client-CQLbpuKK.js.map

package/dist/json-rpc-client-CQLbpuKK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-rpc-client-CQLbpuKK.js","sources":["../src/tbv/core/clients/vault-provider/types.ts","../src/tbv/core/clients/vault-provider/json-rpc-client.ts"],"sourcesContent":["/**\n * Type definitions for Vault Provider JSON-RPC API.\n *\n * These types match the `vaultProvider_*` RPC namespace defined by the\n * btc-vault daemon. They are the SDK's canonical copy of the VP protocol\n * contract, independent of any frontend framework.\n *\n * @see https://github.com/babylonlabs-io/btc-vault/blob/main/docs/pegin.md\n */\n\n// ============================================================================\n// Daemon Status\n// ============================================================================\n\n/**\n * Backend daemon status (vault provider database).\n * Source: btc-vault crates/vaultd/src/workers/claimer/mod.rs PegInStatus enum\n *\n * State flow (happy path):\n * PendingIngestion -> PendingDepositorWotsPK -> PendingBabeSetup -> PendingChallengerPresigning\n *   -> PendingPeginSigsAvailability -> PendingPrePegInConfirmations\n *   -> PendingDepositorSignatures -> PendingACKs -> PendingActivation\n *   -> ActivatedPendingBroadcast -> Activated\n *\n * Branching / terminal states:\n * - IngestionRejected: terminal — ingestion permanently failed (e.g. malformed\n *   Pre-PegIn, invalid HTLC outputs); reachable directly from PendingIngestion.\n * - Expired: activation timed out; non-terminal during the grace window\n *   (RFC 003) — transitions to ExpiredCleanedUp or ExpiredInClaim.\n * - InvalidSigInContract: terminal — pegin input signature posted on\n *   chain failed verification.\n * - AmlRejected: terminal — AML address screening rejected the pegin.\n * - ExpiredCleanedUp: terminal — grace window expired, per-pegin\n *   artifacts deleted.\n * - ExpiredInClaim: terminal at the pegin-state-machine level; pegout-side\n *   work continues on the pegout_tracking row.\n * - BabeSetupFailed: terminal — a challenger's BaBe decryptor session\n *   failed verification, so BaBe setup cannot complete; reachable from\n *   PendingBabeSetup.\n */\nexport enum DaemonStatus {\n  PENDING_INGESTION = \"PendingIngestion\",\n  PENDING_DEPOSITOR_WOTS_PK = \"PendingDepositorWotsPK\",\n  PENDING_BABE_SETUP = \"PendingBabeSetup\",\n  PENDING_CHALLENGER_PRESIGNING = \"PendingChallengerPresigning\",\n  PENDING_PEGIN_SIGS_AVAILABILITY = \"PendingPeginSigsAvailability\",\n  PENDING_PRE_PEGIN_CONFIRMATIONS = \"PendingPrePegInConfirmations\",\n  PENDING_DEPOSITOR_SIGNATURES = \"PendingDepositorSignatures\",\n  PENDING_ACKS = \"PendingACKs\",\n  PENDING_ACTIVATION = \"PendingActivation\",\n  ACTIVATED_PENDING_BROADCAST = \"ActivatedPendingBroadcast\",\n  ACTIVATED = \"Activated\",\n  EXPIRED = \"Expired\",\n  INGESTION_REJECTED = \"IngestionRejected\",\n  INVALID_SIG_IN_CONTRACT = \"InvalidSigInContract\",\n  AML_REJECTED = \"AmlRejected\",\n  EXPIRED_CLEANED_UP = \"ExpiredCleanedUp\",\n  EXPIRED_IN_CLAIM = \"ExpiredInClaim\",\n  BABE_SETUP_FAILED = \"BabeSetupFailed\",\n}\n\n// ============================================================================\n// Status Groups\n// ============================================================================\n\n/**\n * States where the VP is still processing (no depositor action needed).\n * Excludes PENDING_DEPOSITOR_WOTS_PK (requires depositor action).\n */\nexport const PRE_DEPOSITOR_SIGNATURES_STATES: readonly DaemonStatus[] = [\n  DaemonStatus.PENDING_INGESTION,\n  DaemonStatus.PENDING_BABE_SETUP,\n  DaemonStatus.PENDING_CHALLENGER_PRESIGNING,\n  DaemonStatus.PENDING_PEGIN_SIGS_AVAILABILITY,\n  DaemonStatus.PENDING_PRE_PEGIN_CONFIRMATIONS,\n];\n\n/** States after PendingDepositorSignatures where the depositor has no action. */\nconst POST_PAYOUT_SIGNATURE_STATUSES: readonly DaemonStatus[] = [\n  DaemonStatus.PENDING_ACKS,\n  DaemonStatus.PENDING_ACTIVATION,\n  DaemonStatus.ACTIVATED_PENDING_BROADCAST,\n  DaemonStatus.ACTIVATED,\n];\n\n/**\n * Statuses where no depositor action is needed (VP processing or already past\n * depositor interaction). Excludes PENDING_INGESTION and PENDING_DEPOSITOR_WOTS_PK.\n */\nexport const VP_TRANSIENT_STATUSES: ReadonlySet<DaemonStatus> = new Set([\n  DaemonStatus.PENDING_BABE_SETUP,\n  DaemonStatus.PENDING_CHALLENGER_PRESIGNING,\n  DaemonStatus.PENDING_PEGIN_SIGS_AVAILABILITY,\n  DaemonStatus.PENDING_PRE_PEGIN_CONFIRMATIONS,\n  ...POST_PAYOUT_SIGNATURE_STATUSES,\n]);\n\n/**\n * Terminal VP statuses that represent failure outcomes — polling should\n * stop immediately with an error rather than wait for timeout.\n *\n * Mirrors the failure subset of the server-side terminals\n * (`allowed_transitions()` empty, see `PegInStatus` in\n * `btc-vault/crates/vaultd/src/workers/claimer/mod.rs`).\n * `Activated` IS terminal on-chain but is the success outcome, so it is\n * intentionally excluded — a caller polling for an earlier state that\n * races straight to `Activated` should treat that as success-via-overshoot,\n * not failure. `Expired` is also excluded — under RFC 003 it is a\n * grace-window interim that transitions to `ExpiredCleanedUp` or\n * `ExpiredInClaim`. Callers that want to stop polling on any expiry\n * should check `status === DaemonStatus.EXPIRED ||\n * VP_TERMINAL_FAILURE_STATUSES.has(status)`.\n */\nexport const VP_TERMINAL_FAILURE_STATUSES: ReadonlySet<DaemonStatus> = new Set([\n  DaemonStatus.INGESTION_REJECTED,\n  DaemonStatus.INVALID_SIG_IN_CONTRACT,\n  DaemonStatus.AML_REJECTED,\n  DaemonStatus.EXPIRED_CLEANED_UP,\n  DaemonStatus.EXPIRED_IN_CLAIM,\n  DaemonStatus.BABE_SETUP_FAILED,\n]);\n\n/**\n * Statuses that come after WOTS key submission.\n * If the VP is already in one of these states, the WOTS key was already\n * submitted and we can skip.\n */\nexport const POST_WOTS_STATUSES: ReadonlySet<DaemonStatus> = new Set([\n  ...VP_TRANSIENT_STATUSES,\n  DaemonStatus.PENDING_DEPOSITOR_SIGNATURES,\n]);\n\n// ============================================================================\n// WOTS Types (needed by SubmitDepositorWotsKeyParams)\n// ============================================================================\n\n/**\n * WOTS configuration for a single block.\n * Matches Rust `babe::wots::Config` serde format.\n */\nexport interface WotsConfig {\n  /** Digit bit-width (e.g. 4 → base-16 digits). */\n  d: number;\n  /** Number of message digits in this block. */\n  n: number;\n  /** Radix used for the checksum computation. */\n  checksum_radix: number;\n}\n\n/**\n * A single block of WOTS public keys.\n * Chain values are arrays of byte values (matching Rust `[u8; 20]`).\n */\nexport interface WotsBlockPublicKey {\n  config: WotsConfig;\n  message_terminals: number[][];\n  checksum_major_terminal: number[];\n  checksum_minor_terminal: number[];\n}\n\n// ============================================================================\n// Request Parameter Types\n// ============================================================================\n\n/** Params for requesting the payout/claim/assert transactions to pre-sign. */\nexport interface RequestDepositorPresignTransactionsParams {\n  pegin_txid: string;\n  depositor_pk: string;\n}\n\n/** Params for submitting the depositor's WOTS public key to the VP. */\nexport interface SubmitDepositorWotsKeyParams {\n  pegin_txid: string;\n  depositor_pk: string;\n  wots_public_keys: WotsBlockPublicKey[];\n}\n\n/** Per-challenger signatures for the depositor-as-claimer flow. */\nexport interface DepositorPreSigsPerChallenger {\n  nopayout_signature: string;\n}\n\n/** Depositor-as-claimer pre-signatures (payout + per-challenger). */\nexport interface DepositorAsClaimerPresignatures {\n  payout_signatures: ClaimerSignatures;\n  per_challenger: Record<string, DepositorPreSigsPerChallenger>;\n}\n\n/** Params for submitting depositor pre-signatures including claimer presignatures. */\nexport interface SubmitDepositorPresignaturesParams {\n  pegin_txid: string;\n  depositor_pk: string;\n  signatures: Record<string, ClaimerSignatures>;\n  depositor_claimer_presignatures: DepositorAsClaimerPresignatures;\n}\n\n/** Payout signatures per claimer. */\nexport interface ClaimerSignatures {\n  payout_signature: string;\n}\n\n/** Params for requesting BaBe DecryptorArtifacts from the VP. */\nexport interface RequestDepositorClaimerArtifactsParams {\n  pegin_txid: string;\n  depositor_pk: string;\n}\n\n/** Params for querying pegin status. Either pegin_txid or vault_id must be provided. */\nexport type GetPeginStatusParams =\n  | { pegin_txid: string; vault_id?: never }\n  | { vault_id: string; pegin_txid?: never };\n\n// ============================================================================\n// Response Types\n// ============================================================================\n\n/** A raw Bitcoin transaction with its hex encoding. */\nexport interface TransactionData {\n  tx_hex: string;\n}\n\n/** Set of transactions the depositor must pre-sign for a single claimer. */\nexport interface ClaimerTransactions {\n  claimer_pubkey: string;\n  claim_tx: TransactionData;\n  assert_tx: TransactionData;\n  payout_tx: TransactionData;\n  payout_psbt: string;\n}\n\n/** Per-segment connector data for ChallengeAssert inputs. */\nexport interface ChallengeAssertConnectorData {\n  wots_pks_json: string;\n  gc_wots_keys_json: string;\n}\n\n/** Challenger-specific transactions and signing data for the depositor graph. */\nexport interface PresignDataPerChallenger {\n  challenger_pubkey: string;\n  challenge_assert_x_tx: TransactionData;\n  challenge_assert_y_tx: TransactionData;\n  nopayout_tx: TransactionData;\n  nopayout_psbt: string;\n  challenge_assert_connectors: ChallengeAssertConnectorData[];\n  output_label_hashes: string[];\n}\n\n/** Depositor-as-claimer TxGraph transactions. */\nexport interface DepositorGraphTransactions {\n  claim_tx: TransactionData;\n  assert_tx: TransactionData;\n  payout_tx: TransactionData;\n  payout_psbt: string;\n  challenger_presign_data: PresignDataPerChallenger[];\n  offchain_params_version: number;\n}\n\n/** Response from `requestDepositorPresignTransactions`. */\nexport interface RequestDepositorPresignTransactionsResponse {\n  txs: ClaimerTransactions[];\n  depositor_graph: DepositorGraphTransactions;\n}\n\n/** BaBe garbled-circuit session data for a single challenger. */\nexport interface BaBeSessionData {\n  decryptor_artifacts_hex: string;\n}\n\n/** Response from `requestDepositorClaimerArtifacts`. */\nexport interface RequestDepositorClaimerArtifactsResponse {\n  tx_graph_json: string;\n  verifying_key_hex: string;\n  babe_sessions: Record<string, BaBeSessionData>;\n}\n\n/** Progress tracker for a multi-challenger operation. */\nexport interface ChallengerProgress {\n  total_challengers: number;\n  completed_challengers: number;\n  completed_challenger_pubkeys: string[];\n  pending_challenger_pubkeys: string[];\n}\n\nexport type GcDataProgress = ChallengerProgress;\nexport type AckCollectionProgress = ChallengerProgress;\n\n/** Extended presigning progress with all 3 concurrent phases. */\nexport interface PresigningProgress extends ChallengerProgress {\n  depositor_graph_created?: boolean;\n  vk_challenger_presigning_completed?: number;\n  vk_challenger_presigning_total?: number;\n}\n\n/** Detailed progress breakdown for an in-progress pegin. */\nexport interface PeginProgressDetails {\n  gc_data?: GcDataProgress;\n  presigning?: PresigningProgress;\n  ack_collection?: AckCollectionProgress;\n  claimer_graphs?: ClaimerGraphStatus[];\n}\n\n/** Per-claimer graph status (challenger perspective). */\nexport interface ClaimerGraphStatus {\n  claimer_pubkey: string;\n  presigned: boolean;\n}\n\n/** Response from `getPeginStatus`. */\nexport interface GetPeginStatusResponse {\n  pegin_txid: string;\n  status: string;\n  progress: PeginProgressDetails;\n  health_info: string;\n  last_error?: string;\n}\n\n// ============================================================================\n// Pegout Types\n// ============================================================================\n\n/**\n * Claimer-side pegout progress.\n * Source: btc-vault crates/vaultd/src/rpc/server/pegout_status.rs ClaimerPegoutStatus.\n */\nexport interface ClaimerPegoutStatus {\n  /** Wire string from PegoutStatus enum. */\n  status: string;\n  failed: boolean;\n  claim_txid: string;\n  claimer_pubkey: string;\n  assert_txid: string;\n  /** Unix epoch seconds. */\n  created_at: number;\n  /** Unix epoch seconds. */\n  updated_at: number;\n}\n\n/**\n * Challenger-side pegout progress.\n * Source: btc-vault crates/vaultd/src/rpc/server/pegout_status.rs ChallengerStatus.\n */\nexport interface ChallengerStatus {\n  status: string;\n  claim_txid: string;\n  claimer_pubkey: string;\n  assert_txid: string | null;\n  challenge_assert_x_txid: string | null;\n  challenge_assert_y_txid: string | null;\n  nopayout_txid: string | null;\n  created_at: number;\n  updated_at: number;\n}\n\n/**\n * Pegout status response. Embedded by `batchGetPegoutStatus` per-result\n * envelopes. Mirrors btc-vault `GetPegoutStatusResponse`.\n */\nexport interface GetPegoutStatusResponse {\n  pegin_txid: string;\n  found: boolean;\n  claimer: ClaimerPegoutStatus | null;\n  challengers: ChallengerStatus[];\n}\n\n// ============================================================================\n// Batch Status Types (peginStatus + pegoutStatus)\n// ============================================================================\n\n/** Params for `batchGetPeginStatus`. */\nexport interface BatchGetPeginStatusParams {\n  /** Up to MAX_BATCH_SIZE (50) txids per call. */\n  pegin_txids: string[];\n}\n\n/** Per-pegin entry in a `batchGetPeginStatus` response. */\nexport interface BatchPeginStatusResult {\n  pegin_txid: string;\n  result: GetPeginStatusResponse | null;\n  error: string | null;\n}\n\n/** Response from `batchGetPeginStatus`. Results are returned in request order. */\nexport interface BatchGetPeginStatusResponse {\n  results: BatchPeginStatusResult[];\n}\n\n/** Params for `batchGetPegoutStatus`. */\nexport interface BatchGetPegoutStatusParams {\n  pegin_txids: string[];\n}\n\n/** Per-vault entry in a `batchGetPegoutStatus` response. */\nexport interface BatchPegoutStatusResult {\n  pegin_txid: string;\n  result: GetPegoutStatusResponse | null;\n  error: string | null;\n}\n\n/** Response from `batchGetPegoutStatus`. Results are returned in request order. */\nexport interface BatchGetPegoutStatusResponse {\n  results: BatchPegoutStatusResult[];\n}\n\n/**\n * Maximum number of items per batch call. Mirrors the server-side\n * `MAX_BATCH_SIZE` in btc-vault (`crates/vaultd/src/rpc/server/vault_provider.rs:7`).\n * Callers must chunk requests larger than this.\n */\nexport const VP_BATCH_MAX_SIZE = 50;\n\n// ============================================================================\n// Error Codes\n// ============================================================================\n\n/**\n * JSON-RPC error codes returned by the vault provider.\n * Source: btc-vault `crates/vaultd/src/rpc/error.rs::RpcError::error_code`.\n */\nexport enum RpcErrorCode {\n  PEGIN_NOT_FOUND = 4001,\n}\n","/**\n * Generic JSON-RPC 2.0 HTTP Client\n *\n * Framework-agnostic client using `fetch()` — works in browsers and Node.js 18+.\n * Includes configurable retry policy and AbortSignal passthrough.\n */\n\nexport interface JsonRpcRequest<T = unknown> {\n  jsonrpc: \"2.0\";\n  method: string;\n  params: T;\n  id: number | string;\n}\n\nexport interface JsonRpcSuccessResponse<T = unknown> {\n  jsonrpc: \"2.0\";\n  result: T;\n  id: number | string;\n}\n\nexport interface JsonRpcErrorResponse {\n  jsonrpc: \"2.0\";\n  error: {\n    code: number;\n    message: string;\n    data?: unknown;\n  };\n  id: number | string;\n}\n\nexport type JsonRpcResponse<T = unknown> =\n  | JsonRpcSuccessResponse<T>\n  | JsonRpcErrorResponse;\n\n/**\n * Injects bearer tokens into requests for auth-gated methods, and is\n * notified when the server rejects a bearer so it can invalidate its cache.\n *\n * The `JsonRpcClient` is agnostic to which methods are auth-gated —\n * the provider's `getToken(method)` decides. Returning `null` means\n * \"no auth required for this method\"; the client then sends the\n * request with no `Authorization` header.\n */\nexport interface BearerTokenProvider {\n  /**\n   * Return the bearer token to inject for `method`, or `null` if the\n   * method does not require auth.\n   */\n  getToken(method: string): Promise<string | null>;\n  /**\n   * Drop the cached token. Next call to `getToken` must re-acquire.\n   * Called by the client on reactive-refresh-trigger responses.\n   */\n  invalidate(): void;\n}\n\nexport interface JsonRpcClientConfig {\n  /** Base URL of the RPC service */\n  baseUrl: string;\n  /** Timeout in milliseconds per request attempt */\n  timeout: number;\n  /** Optional custom headers */\n  headers?: Record<string, string>;\n  /** Number of retry attempts for transient errors (default: 3) */\n  retries?: number;\n  /** Initial retry delay in milliseconds (default: 1000) */\n  retryDelay?: number;\n  /**\n   * Maximum response body size, in bytes, for typed JSON-RPC calls.\n   * `callRaw` intentionally returns the unparsed Response and is not capped here.\n   * Default: 2 MiB.\n   */\n  maxResponseBytes?: number;\n  /**\n   * Predicate that decides which methods retry on transient errors.\n   * Default retries only `getPeginStatus`, `batchGetPeginStatus`,\n   * `batchGetPegoutStatus`, and `requestDepositorPresignTransactions`.\n   * Write methods are not retried by default.\n   */\n  retryableFor?: (method: string) => boolean;\n  /**\n   * Per-request bearer-token source. A non-null return attaches\n   * `Authorization: Bearer <token>`; `null` skips auth. `call`\n   * additionally retries once when the server rejects the bearer\n   * (invalidate + refetch + retry) — see {@link isAuthRejectedError}.\n   * `callRaw` skips reactive refresh.\n   */\n  tokenProvider?: BearerTokenProvider;\n}\n\n// \"wire\" = parsed from a JSON-RPC error envelope; \"local\" = timeout/network/parse failure.\nexport type JsonRpcErrorSource = \"wire\" | \"local\";\n\nexport class JsonRpcError extends Error {\n  constructor(\n    public code: number,\n    message: string,\n    /** \"wire\" for server-returned envelopes; \"local\" for SDK-side failures. */\n    public source: JsonRpcErrorSource = \"local\",\n    /** Structured data from the server `error.data` field, if any. */\n    public data?: unknown,\n  ) {\n    super(message);\n    this.name = \"JsonRpcError\";\n  }\n}\n\nexport const JSON_RPC_ERROR_CODES = {\n  TIMEOUT: -32000,\n  NETWORK: -32001,\n  /** VP proxy: request timed out at proxy level */\n  PROXY_TIMEOUT: -32002,\n  /** VP proxy: VP unreachable / DNS failure / response too large */\n  PROXY_UNAVAILABLE: -32003,\n  /** SDK client: response missing \"result\" field (malformed JSON-RPC) */\n  INVALID_RESPONSE: -32700,\n  /** SDK client: response body exceeded the configured byte limit */\n  RESPONSE_TOO_LARGE: -32701,\n} as const;\n\n/** JSON-RPC protocol version */\nconst JSON_RPC_VERSION = \"2.0\" as const;\n\n/** Default number of retry attempts for transient errors */\nconst DEFAULT_RETRY_ATTEMPTS = 3;\n\n/** Default initial retry delay in milliseconds */\nconst DEFAULT_RETRY_DELAY_MS = 1000;\n\n/** Default maximum JSON-RPC response size for typed calls (2 MiB) */\nconst DEFAULT_MAX_RESPONSE_BYTES = 2 * 1024 * 1024;\n\n/**\n * TODO: Temporary typed-call exceptions for methods that currently return large\n * artifact payloads as JSON-RPC results.\n */\nconst UNCAPPED_TYPED_RESPONSE_METHODS: ReadonlySet<string> = new Set([\n  \"vaultProvider_requestDepositorClaimerArtifacts\",\n]);\n\n/** HTTP status codes that indicate transient server errors and are safe to retry */\nconst RETRYABLE_HTTP_STATUS_CODES: ReadonlySet<number> = new Set([\n  408, // Request Timeout\n  429, // Too Many Requests\n  500, // Internal Server Error\n  502, // Bad Gateway\n  503, // Service Unavailable\n  504, // Gateway Timeout\n]);\n\n/** Default retry predicate: only retry read-only / idempotent methods */\nconst DEFAULT_RETRYABLE_METHODS: ReadonlySet<string> = new Set([\n  \"vaultProvider_getPeginStatus\",\n  \"vaultProvider_batchGetPeginStatus\",\n  \"vaultProvider_batchGetPegoutStatus\",\n  \"vaultProvider_requestDepositorPresignTransactions\",\n]);\n\nfunction defaultRetryableFor(method: string): boolean {\n  return DEFAULT_RETRYABLE_METHODS.has(method);\n}\n\n/**\n * JSON-RPC error code the vault provider returns for every bearer-token\n * rejection: expired, not-yet-valid, missing bearer, invalid signature,\n * invalid claims, invalid structure, subject mismatch, issuer mismatch.\n * All eight variants collapse onto this one code, distinguished only by\n * message text — see btc-vault `crates/btc-auth/src/rpc.rs`\n * (`auth_error_to_rpc_error`). Operationally they all mean the same\n * thing: this bearer is dead, mint a new one.\n *\n * Numerically equal to {@link JSON_RPC_ERROR_CODES.NETWORK}, which this\n * client throws for local network failures. `source` is what separates\n * them — see {@link isAuthRejectedError}.\n */\nexport const AUTH_REJECTED_RPC_CODE = -32001;\n\n/**\n * True when `error` is the vault provider rejecting our bearer token.\n *\n * Classified on the error code, which is the only thing the server\n * guarantees: its auth errors carry `data: null` unconditionally\n * (`rpc_error` passes `None::<()>`), so any predicate keyed on an\n * `error.data` field can never match a real response.\n *\n * `source === \"wire\"` is load-bearing: this client reuses -32001\n * internally as {@link JSON_RPC_ERROR_CODES.NETWORK}, always with\n * source \"local\".\n *\n * Known, bounded collision: the vault-provider proxy reuses -32001 for\n * \"Provider not found\". A call to a deregistered provider therefore\n * costs one wasted token-mint round-trip, which fails against the same\n * registry check and surfaces the same message.\n */\nexport function isAuthRejectedError(error: unknown): boolean {\n  return (\n    error instanceof JsonRpcError &&\n    error.source === \"wire\" &&\n    error.code === AUTH_REJECTED_RPC_CODE\n  );\n}\n\n/**\n * Per-`call` record of whether a bearer was actually attached to the\n * request. Scoped to one `call` (not client state) so concurrent\n * requests can't observe each other's auth state.\n */\ninterface AttemptAuthState {\n  bearerAttached: boolean;\n}\n\n/**\n * Generic JSON-RPC 2.0 HTTP client with safe retry policy.\n */\nexport class JsonRpcClient {\n  private baseUrl: string;\n  private timeout: number;\n  private headers: Record<string, string>;\n  private requestId = 0;\n  private retries: number;\n  private retryDelay: number;\n  private maxResponseBytes: number;\n  private retryableFor: (method: string) => boolean;\n  private tokenProvider?: BearerTokenProvider;\n\n  constructor(config: JsonRpcClientConfig) {\n    this.baseUrl = config.baseUrl.replace(/\\/$/, \"\");\n    this.timeout = config.timeout;\n    this.headers = {\n      \"Content-Type\": \"application/json\",\n      ...config.headers,\n    };\n    this.retries = config.retries ?? DEFAULT_RETRY_ATTEMPTS;\n    this.retryDelay = config.retryDelay ?? DEFAULT_RETRY_DELAY_MS;\n    this.maxResponseBytes =\n      config.maxResponseBytes ?? DEFAULT_MAX_RESPONSE_BYTES;\n    if (!Number.isFinite(this.maxResponseBytes) || this.maxResponseBytes <= 0) {\n      throw new Error(\"maxResponseBytes must be a positive finite number\");\n    }\n    this.retryableFor = config.retryableFor ?? defaultRetryableFor;\n    this.tokenProvider = config.tokenProvider;\n  }\n\n  private async buildHeaders(\n    method: string,\n    authState?: AttemptAuthState,\n  ): Promise<Record<string, string>> {\n    const headers: Record<string, string> = { ...this.headers };\n    if (this.tokenProvider) {\n      const token = await this.tokenProvider.getToken(method);\n      if (token) {\n        headers.Authorization = `Bearer ${token}`;\n        if (authState) authState.bearerAttached = true;\n      }\n    }\n    return headers;\n  }\n\n  /**\n   * Make a JSON-RPC request with optional retry for safe methods.\n   *\n   * If the server rejects the bearer token and a `tokenProvider` is\n   * configured, the client invalidates its cached token and retries the\n   * request once with a freshly-acquired bearer.\n   *\n   * @param method - The RPC method name\n   * @param params - The method parameters\n   * @param signal - Optional AbortSignal for caller-controlled cancellation\n   * @returns The result from the RPC method\n   * @throws JsonRpcError if the RPC call fails\n   */\n  async call<TParams, TResult>(\n    method: string,\n    params: TParams,\n    signal?: AbortSignal,\n  ): Promise<TResult> {\n    const authState: AttemptAuthState = { bearerAttached: false };\n    try {\n      return await this.callOnce<TParams, TResult>(\n        method,\n        params,\n        signal,\n        authState,\n      );\n    } catch (error) {\n      // The re-auth retry fires for ALL methods, including mutating ones.\n      // This is intentional and safe: the server's auth middleware rejects\n      // the request BEFORE dispatching to the method handler, so a\n      // rejected bearer means the handler never ran and no state was\n      // mutated. Confirmed against btc-vault\n      // `crates/btc-auth/src/middleware/jsonrpc.rs` — `unauthorized_response`\n      // returns without ever calling `service.call(req)`, in both `call`\n      // and `batch`. The `retryableFor` guard on HTTP-transient-error\n      // retries doesn't apply here because that guard is about retrying\n      // after a request the server may have started processing.\n      //\n      // `bearerAttached` keeps this off methods that sent no token — most\n      // importantly the token-issuing calls themselves, which would\n      // otherwise burn a round-trip re-minting against the proxy's\n      // colliding -32001 \"Provider not found\".\n      //\n      // Bounded to one retry: the retried call is not wrapped in this\n      // handler. If the freshly-minted token is rejected too, the problem\n      // is the pinned server key rather than the token, and that surfaces\n      // instead of looping.\n      if (\n        this.tokenProvider &&\n        authState.bearerAttached &&\n        isAuthRejectedError(error)\n      ) {\n        this.tokenProvider.invalidate();\n        return await this.callOnce<TParams, TResult>(method, params, signal);\n      }\n      throw error;\n    }\n  }\n\n  private async callOnce<TParams, TResult>(\n    method: string,\n    params: TParams,\n    signal: AbortSignal | undefined,\n    authState?: AttemptAuthState,\n  ): Promise<TResult> {\n    const response = await this.fetchWithRetry(\n      method,\n      params,\n      signal,\n      authState,\n    );\n\n    let jsonResponse: unknown;\n    try {\n      const responseText = UNCAPPED_TYPED_RESPONSE_METHODS.has(method)\n        ? await response.text()\n        : await readResponseTextWithLimit(response, this.maxResponseBytes);\n      jsonResponse = JSON.parse(responseText);\n    } catch (error) {\n      if (error instanceof JsonRpcError) {\n        throw error;\n      }\n      throw new JsonRpcError(\n        JSON_RPC_ERROR_CODES.INVALID_RESPONSE,\n        \"Invalid JSON-RPC response: body is not valid JSON\",\n        \"local\",\n      );\n    }\n\n    if (\n      jsonResponse === null ||\n      typeof jsonResponse !== \"object\" ||\n      Array.isArray(jsonResponse)\n    ) {\n      throw new JsonRpcError(\n        JSON_RPC_ERROR_CODES.INVALID_RESPONSE,\n        `Invalid JSON-RPC response: expected an object, got ${typeof jsonResponse}`,\n        \"local\",\n      );\n    }\n\n    const rpcResponse = jsonResponse as Record<string, unknown>;\n\n    if (\"error\" in rpcResponse && rpcResponse.error != null) {\n      const err = rpcResponse.error as {\n        code?: number;\n        message?: string;\n        data?: unknown;\n      };\n      throw new JsonRpcError(\n        err.code ?? JSON_RPC_ERROR_CODES.INVALID_RESPONSE,\n        err.message ?? \"Unknown RPC error\",\n        \"wire\",\n        err.data,\n      );\n    }\n\n    if (!(\"result\" in rpcResponse)) {\n      throw new JsonRpcError(\n        JSON_RPC_ERROR_CODES.INVALID_RESPONSE,\n        `Invalid JSON-RPC response: missing \"result\" field`,\n        \"local\",\n      );\n    }\n\n    return rpcResponse.result as TResult;\n  }\n\n  /**\n   * Make a JSON-RPC request returning the raw Response (unparsed body).\n   *\n   * Bearer tokens are injected identically to `call`. **Reactive refresh\n   * is NOT performed here** — the response body may be unbounded (e.g.\n   * claimer-artifact downloads), so the client refuses to parse it to\n   * detect auth errors. Callers relying on token-expired retries for\n   * large downloads must read the body themselves and re-invoke\n   * `callRaw` after `tokenProvider.invalidate()`.\n   */\n  async callRaw<TParams>(\n    method: string,\n    params: TParams,\n    signal?: AbortSignal,\n  ): Promise<Response> {\n    return this.fetchWithRetry(method, params, signal);\n  }\n\n  private async fetchWithRetry<TParams>(\n    method: string,\n    params: TParams,\n    callerSignal?: AbortSignal,\n    authState?: AttemptAuthState,\n  ): Promise<Response> {\n    const requestId = ++this.requestId;\n    const maxRetries = this.retryableFor(method) ? this.retries : 0;\n\n    // jsonrpsee (Rust backend) expects params as an array (positional parameters)\n    const request: JsonRpcRequest<TParams[]> = {\n      jsonrpc: JSON_RPC_VERSION,\n      method,\n      params: [params],\n      id: requestId,\n    };\n\n    const body = JSON.stringify(request);\n    let lastError: Error | null = null;\n\n    for (let attempt = 0; attempt <= maxRetries; attempt++) {\n      // Merge caller signal with per-request timeout signal\n      const timeoutController = new AbortController();\n      const timeoutId = setTimeout(\n        () => timeoutController.abort(),\n        this.timeout,\n      );\n\n      const merged = callerSignal\n        ? mergeAbortSignals(callerSignal, timeoutController.signal)\n        : null;\n      const signal = merged ? merged.signal : timeoutController.signal;\n\n      try {\n        // Build headers per-attempt so the token provider can return a\n        // freshly-acquired bearer after a prior invalidate() on this\n        // request (retry loop path) without plumbing state through.\n        const headers = await this.buildHeaders(method, authState);\n\n        const response = await fetch(this.baseUrl, {\n          method: \"POST\",\n          headers,\n          body,\n          signal,\n        });\n\n        clearTimeout(timeoutId);\n        merged?.cleanup();\n\n        if (!response.ok) {\n          const shouldRetry =\n            attempt < maxRetries &&\n            RETRYABLE_HTTP_STATUS_CODES.has(response.status);\n\n          if (shouldRetry) {\n            const delay = this.retryDelay * Math.pow(2, attempt);\n            await this.sleep(delay, callerSignal);\n            continue;\n          }\n\n          throw new Error(\n            `HTTP error: ${response.status} ${response.statusText}`,\n          );\n        }\n\n        return response;\n      } catch (error) {\n        clearTimeout(timeoutId);\n        merged?.cleanup();\n        lastError = error instanceof Error ? error : new Error(String(error));\n\n        // Check if caller aborted (not our timeout)\n        if (callerSignal?.aborted) {\n          throw new Error(\"Request aborted\");\n        }\n\n        if (error instanceof Error && error.name === \"AbortError\") {\n          if (attempt < maxRetries) {\n            const delay = this.retryDelay * Math.pow(2, attempt);\n            await this.sleep(delay, callerSignal);\n            continue;\n          }\n          throw new JsonRpcError(\n            JSON_RPC_ERROR_CODES.TIMEOUT,\n            `Request timeout after ${this.timeout}ms (${maxRetries + 1} attempts)`,\n            \"local\",\n          );\n        }\n\n        // Handle network errors (CORS, connection refused, etc.)\n        if (error instanceof TypeError) {\n          if (attempt < maxRetries) {\n            const delay = this.retryDelay * Math.pow(2, attempt);\n            await this.sleep(delay, callerSignal);\n            continue;\n          }\n          throw new JsonRpcError(\n            JSON_RPC_ERROR_CODES.NETWORK,\n            `Network error: ${error.message} (${maxRetries + 1} attempts)`,\n            \"local\",\n          );\n        }\n\n        // Don't retry JSON-RPC errors (business logic errors)\n        throw error;\n      }\n    }\n\n    throw lastError || new Error(\"Unknown error after retries\");\n  }\n\n  private sleep(ms: number, signal?: AbortSignal): Promise<void> {\n    return new Promise((resolve, reject) => {\n      if (signal?.aborted) {\n        reject(new Error(\"Request aborted\"));\n        return;\n      }\n      const timeoutId = setTimeout(() => {\n        signal?.removeEventListener(\"abort\", onAbort);\n        resolve();\n      }, ms);\n      const onAbort = () => {\n        clearTimeout(timeoutId);\n        reject(new Error(\"Request aborted\"));\n      };\n      signal?.addEventListener(\"abort\", onAbort, { once: true });\n    });\n  }\n\n  getBaseUrl(): string {\n    return this.baseUrl;\n  }\n}\n\ninterface MergedSignal {\n  signal: AbortSignal;\n  /** Remove listeners from the source signals. Call after the request completes. */\n  cleanup: () => void;\n}\n\n/**\n * Merge two AbortSignals — the returned signal aborts if either input aborts.\n * Returns a cleanup function to remove listeners when the request completes\n * normally, preventing listener accumulation in long-lived polling flows.\n */\nfunction mergeAbortSignals(a: AbortSignal, b: AbortSignal): MergedSignal {\n  if (a.aborted) return { signal: a, cleanup: () => {} };\n  if (b.aborted) return { signal: b, cleanup: () => {} };\n\n  const controller = new AbortController();\n  const onAbortA = () => {\n    b.removeEventListener(\"abort\", onAbortB);\n    controller.abort();\n  };\n  const onAbortB = () => {\n    a.removeEventListener(\"abort\", onAbortA);\n    controller.abort();\n  };\n  a.addEventListener(\"abort\", onAbortA, { once: true });\n  b.addEventListener(\"abort\", onAbortB, { once: true });\n\n  const cleanup = () => {\n    a.removeEventListener(\"abort\", onAbortA);\n    b.removeEventListener(\"abort\", onAbortB);\n  };\n\n  return { signal: controller.signal, cleanup };\n}\n\nasync function readResponseTextWithLimit(\n  response: Response,\n  maxBytes: number,\n): Promise<string> {\n  const contentLength = response.headers.get(\"content-length\");\n  if (contentLength !== null) {\n    const parsedContentLength = Number(contentLength);\n    if (\n      Number.isFinite(parsedContentLength) &&\n      parsedContentLength > maxBytes\n    ) {\n      throw responseTooLargeError(maxBytes);\n    }\n  }\n\n  if (!response.body) {\n    return \"\";\n  }\n\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder();\n  let totalBytes = 0;\n  let responseText = \"\";\n\n  try {\n    for (;;) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      if (!value) continue;\n\n      totalBytes += value.byteLength;\n      if (totalBytes > maxBytes) {\n        await reader.cancel();\n        throw responseTooLargeError(maxBytes);\n      }\n      responseText += decoder.decode(value, { stream: true });\n    }\n  } finally {\n    reader.releaseLock();\n  }\n\n  return responseText + decoder.decode();\n}\n\nfunction responseTooLargeError(maxBytes: number): JsonRpcError {\n  return new JsonRpcError(\n    JSON_RPC_ERROR_CODES.RESPONSE_TOO_LARGE,\n    `JSON-RPC response exceeds maximum size of ${maxBytes} bytes`,\n    \"local\",\n  );\n}\n"],"names":["DaemonStatus","PRE_DEPOSITOR_SIGNATURES_STATES","POST_PAYOUT_SIGNATURE_STATUSES","VP_TRANSIENT_STATUSES","VP_TERMINAL_FAILURE_STATUSES","POST_WOTS_STATUSES","VP_BATCH_MAX_SIZE","RpcErrorCode","JsonRpcError","code","message","source","data","JSON_RPC_ERROR_CODES","JSON_RPC_VERSION","DEFAULT_RETRY_ATTEMPTS","DEFAULT_RETRY_DELAY_MS","DEFAULT_MAX_RESPONSE_BYTES","UNCAPPED_TYPED_RESPONSE_METHODS","RETRYABLE_HTTP_STATUS_CODES","DEFAULT_RETRYABLE_METHODS","defaultRetryableFor","method","AUTH_REJECTED_RPC_CODE","isAuthRejectedError","error","JsonRpcClient","config","__publicField","authState","headers","token","params","signal","response","jsonResponse","responseText","readResponseTextWithLimit","rpcResponse","err","callerSignal","requestId","maxRetries","body","lastError","attempt","timeoutController","timeoutId","merged","mergeAbortSignals","delay","ms","resolve","reject","onAbort","a","b","controller","onAbortA","onAbortB","cleanup","maxBytes","contentLength","parsedContentLength","responseTooLargeError","reader","decoder","totalBytes","done","value"],"mappings":";;;AAwCO,IAAKA,sBAAAA,OACVA,EAAA,oBAAoB,oBACpBA,EAAA,4BAA4B,0BAC5BA,EAAA,qBAAqB,oBACrBA,EAAA,gCAAgC,+BAChCA,EAAA,kCAAkC,gCAClCA,EAAA,kCAAkC,gCAClCA,EAAA,+BAA+B,8BAC/BA,EAAA,eAAe,eACfA,EAAA,qBAAqB,qBACrBA,EAAA,8BAA8B,6BAC9BA,EAAA,YAAY,aACZA,EAAA,UAAU,WACVA,EAAA,qBAAqB,qBACrBA,EAAA,0BAA0B,wBAC1BA,EAAA,eAAe,eACfA,EAAA,qBAAqB,oBACrBA,EAAA,mBAAmB,kBACnBA,EAAA,oBAAoB,mBAlBVA,IAAAA,KAAA,CAAA,CAAA;AA6BL,MAAMC,IAA2D;AAAA,EACtE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AACF,GAGMC,IAA0D;AAAA,EAC9D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AACF,GAMaC,wBAAuD,IAAI;AAAA,EACtE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,GAAGD;AACL,CAAC,GAkBYE,wBAA8D,IAAI;AAAA,EAC7E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AACF,CAAC,GAOYC,wBAAoD,IAAI;AAAA,EACnE,GAAGF;AAAA,EACH;AAAA;AACF,CAAC,GAsRYG,IAAoB;AAU1B,IAAKC,sBAAAA,OACVA,EAAAA,EAAA,kBAAkB,IAAA,IAAlB,mBADUA,IAAAA,KAAA,CAAA,CAAA;ACrUL,MAAMC,UAAqB,MAAM;AAAA,EACtC,YACSC,GACPC,GAEOC,IAA6B,SAE7BC,GACP;AACA,UAAMF,CAAO,GAPN,KAAA,OAAAD,GAGA,KAAA,SAAAE,GAEA,KAAA,OAAAC,GAGP,KAAK,OAAO;AAAA,EACd;AACF;AAEO,MAAMC,IAAuB;AAAA,EAClC,SAAS;AAAA,EACT,SAAS;AAAA;AAAA,EAET,eAAe;AAAA;AAAA,EAEf,mBAAmB;AAAA;AAAA,EAEnB,kBAAkB;AAAA;AAAA,EAElB,oBAAoB;AACtB,GAGMC,IAAmB,OAGnBC,IAAyB,GAGzBC,IAAyB,KAGzBC,IAA6B,IAAI,OAAO,MAMxCC,wBAA2D,IAAI;AAAA,EACnE;AACF,CAAC,GAGKC,wBAAuD,IAAI;AAAA,EAC/D;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AACF,CAAC,GAGKC,wBAAqD,IAAI;AAAA,EAC7D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAASC,EAAoBC,GAAyB;AACpD,SAAOF,EAA0B,IAAIE,CAAM;AAC7C;AAeO,MAAMC,IAAyB;AAmB/B,SAASC,EAAoBC,GAAyB;AAC3D,SACEA,aAAiBjB,KACjBiB,EAAM,WAAW,UACjBA,EAAM,SAASF;AAEnB;AAcO,MAAMG,EAAc;AAAA,EAWzB,YAAYC,GAA6B;AAVjC,IAAAC,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA,mBAAY;AACZ,IAAAA,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AAaN,QAVA,KAAK,UAAUD,EAAO,QAAQ,QAAQ,OAAO,EAAE,GAC/C,KAAK,UAAUA,EAAO,SACtB,KAAK,UAAU;AAAA,MACb,gBAAgB;AAAA,MAChB,GAAGA,EAAO;AAAA,IAAA,GAEZ,KAAK,UAAUA,EAAO,WAAWZ,GACjC,KAAK,aAAaY,EAAO,cAAcX,GACvC,KAAK,mBACHW,EAAO,oBAAoBV,GACzB,CAAC,OAAO,SAAS,KAAK,gBAAgB,KAAK,KAAK,oBAAoB;AACtE,YAAM,IAAI,MAAM,mDAAmD;AAErE,SAAK,eAAeU,EAAO,gBAAgBN,GAC3C,KAAK,gBAAgBM,EAAO;AAAA,EAC9B;AAAA,EAEA,MAAc,aACZL,GACAO,GACiC;AACjC,UAAMC,IAAkC,EAAE,GAAG,KAAK,QAAA;AAClD,QAAI,KAAK,eAAe;AACtB,YAAMC,IAAQ,MAAM,KAAK,cAAc,SAAST,CAAM;AACtD,MAAIS,MACFD,EAAQ,gBAAgB,UAAUC,CAAK,IACnCF,QAAqB,iBAAiB;AAAA,IAE9C;AACA,WAAOC;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,KACJR,GACAU,GACAC,GACkB;AAClB,UAAMJ,IAA8B,EAAE,gBAAgB,GAAA;AACtD,QAAI;AACF,aAAO,MAAM,KAAK;AAAA,QAChBP;AAAA,QACAU;AAAA,QACAC;AAAA,QACAJ;AAAA,MAAA;AAAA,IAEJ,SAASJ,GAAO;AAqBd,UACE,KAAK,iBACLI,EAAU,kBACVL,EAAoBC,CAAK;AAEzB,oBAAK,cAAc,WAAA,GACZ,MAAM,KAAK,SAA2BH,GAAQU,GAAQC,CAAM;AAErE,YAAMR;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,SACZH,GACAU,GACAC,GACAJ,GACkB;AAClB,UAAMK,IAAW,MAAM,KAAK;AAAA,MAC1BZ;AAAA,MACAU;AAAA,MACAC;AAAA,MACAJ;AAAA,IAAA;AAGF,QAAIM;AACJ,QAAI;AACF,YAAMC,IAAelB,EAAgC,IAAII,CAAM,IAC3D,MAAMY,EAAS,KAAA,IACf,MAAMG,EAA0BH,GAAU,KAAK,gBAAgB;AACnE,MAAAC,IAAe,KAAK,MAAMC,CAAY;AAAA,IACxC,SAASX,GAAO;AACd,YAAIA,aAAiBjB,IACbiB,IAEF,IAAIjB;AAAA,QACRK,EAAqB;AAAA,QACrB;AAAA,QACA;AAAA,MAAA;AAAA,IAEJ;AAEA,QACEsB,MAAiB,QACjB,OAAOA,KAAiB,YACxB,MAAM,QAAQA,CAAY;AAE1B,YAAM,IAAI3B;AAAA,QACRK,EAAqB;AAAA,QACrB,sDAAsD,OAAOsB,CAAY;AAAA,QACzE;AAAA,MAAA;AAIJ,UAAMG,IAAcH;AAEpB,QAAI,WAAWG,KAAeA,EAAY,SAAS,MAAM;AACvD,YAAMC,IAAMD,EAAY;AAKxB,YAAM,IAAI9B;AAAA,QACR+B,EAAI,QAAQ1B,EAAqB;AAAA,QACjC0B,EAAI,WAAW;AAAA,QACf;AAAA,QACAA,EAAI;AAAA,MAAA;AAAA,IAER;AAEA,QAAI,EAAE,YAAYD;AAChB,YAAM,IAAI9B;AAAA,QACRK,EAAqB;AAAA,QACrB;AAAA,QACA;AAAA,MAAA;AAIJ,WAAOyB,EAAY;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,QACJhB,GACAU,GACAC,GACmB;AACnB,WAAO,KAAK,eAAeX,GAAQU,GAAQC,CAAM;AAAA,EACnD;AAAA,EAEA,MAAc,eACZX,GACAU,GACAQ,GACAX,GACmB;AACnB,UAAMY,IAAY,EAAE,KAAK,WACnBC,IAAa,KAAK,aAAapB,CAAM,IAAI,KAAK,UAAU,GAUxDqB,IAAO,KAAK,UAPyB;AAAA,MACzC,SAAS7B;AAAA,MACT,QAAAQ;AAAA,MACA,QAAQ,CAACU,CAAM;AAAA,MACf,IAAIS;AAAA,IAAA,CAG6B;AACnC,QAAIG,IAA0B;AAE9B,aAASC,IAAU,GAAGA,KAAWH,GAAYG,KAAW;AAEtD,YAAMC,IAAoB,IAAI,gBAAA,GACxBC,IAAY;AAAA,QAChB,MAAMD,EAAkB,MAAA;AAAA,QACxB,KAAK;AAAA,MAAA,GAGDE,IAASR,IACXS,EAAkBT,GAAcM,EAAkB,MAAM,IACxD,MACEb,IAASe,IAASA,EAAO,SAASF,EAAkB;AAE1D,UAAI;AAIF,cAAMhB,IAAU,MAAM,KAAK,aAAaR,GAAQO,CAAS,GAEnDK,IAAW,MAAM,MAAM,KAAK,SAAS;AAAA,UACzC,QAAQ;AAAA,UACR,SAAAJ;AAAA,UACA,MAAAa;AAAA,UACA,QAAAV;AAAA,QAAA,CACD;AAKD,YAHA,aAAac,CAAS,GACtBC,KAAA,QAAAA,EAAQ,WAEJ,CAACd,EAAS,IAAI;AAKhB,cAHEW,IAAUH,KACVvB,EAA4B,IAAIe,EAAS,MAAM,GAEhC;AACf,kBAAMgB,IAAQ,KAAK,aAAa,KAAK,IAAI,GAAGL,CAAO;AACnD,kBAAM,KAAK,MAAMK,GAAOV,CAAY;AACpC;AAAA,UACF;AAEA,gBAAM,IAAI;AAAA,YACR,eAAeN,EAAS,MAAM,IAAIA,EAAS,UAAU;AAAA,UAAA;AAAA,QAEzD;AAEA,eAAOA;AAAA,MACT,SAAST,GAAO;AAMd,YALA,aAAasB,CAAS,GACtBC,KAAA,QAAAA,EAAQ,WACRJ,IAAYnB,aAAiB,QAAQA,IAAQ,IAAI,MAAM,OAAOA,CAAK,CAAC,GAGhEe,KAAA,QAAAA,EAAc;AAChB,gBAAM,IAAI,MAAM,iBAAiB;AAGnC,YAAIf,aAAiB,SAASA,EAAM,SAAS,cAAc;AACzD,cAAIoB,IAAUH,GAAY;AACxB,kBAAMQ,IAAQ,KAAK,aAAa,KAAK,IAAI,GAAGL,CAAO;AACnD,kBAAM,KAAK,MAAMK,GAAOV,CAAY;AACpC;AAAA,UACF;AACA,gBAAM,IAAIhC;AAAA,YACRK,EAAqB;AAAA,YACrB,yBAAyB,KAAK,OAAO,OAAO6B,IAAa,CAAC;AAAA,YAC1D;AAAA,UAAA;AAAA,QAEJ;AAGA,YAAIjB,aAAiB,WAAW;AAC9B,cAAIoB,IAAUH,GAAY;AACxB,kBAAMQ,IAAQ,KAAK,aAAa,KAAK,IAAI,GAAGL,CAAO;AACnD,kBAAM,KAAK,MAAMK,GAAOV,CAAY;AACpC;AAAA,UACF;AACA,gBAAM,IAAIhC;AAAA,YACRK,EAAqB;AAAA,YACrB,kBAAkBY,EAAM,OAAO,KAAKiB,IAAa,CAAC;AAAA,YAClD;AAAA,UAAA;AAAA,QAEJ;AAGA,cAAMjB;AAAA,MACR;AAAA,IACF;AAEA,UAAMmB,KAAa,IAAI,MAAM,6BAA6B;AAAA,EAC5D;AAAA,EAEQ,MAAMO,GAAYlB,GAAqC;AAC7D,WAAO,IAAI,QAAQ,CAACmB,GAASC,MAAW;AACtC,UAAIpB,KAAA,QAAAA,EAAQ,SAAS;AACnB,QAAAoB,EAAO,IAAI,MAAM,iBAAiB,CAAC;AACnC;AAAA,MACF;AACA,YAAMN,IAAY,WAAW,MAAM;AACjC,QAAAd,KAAA,QAAAA,EAAQ,oBAAoB,SAASqB,IACrCF,EAAA;AAAA,MACF,GAAGD,CAAE,GACCG,IAAU,MAAM;AACpB,qBAAaP,CAAS,GACtBM,EAAO,IAAI,MAAM,iBAAiB,CAAC;AAAA,MACrC;AACA,MAAApB,KAAA,QAAAA,EAAQ,iBAAiB,SAASqB,GAAS,EAAE,MAAM;IACrD,CAAC;AAAA,EACH;AAAA,EAEA,aAAqB;AACnB,WAAO,KAAK;AAAA,EACd;AACF;AAaA,SAASL,EAAkBM,GAAgBC,GAA8B;AACvE,MAAID,EAAE,QAAS,QAAO,EAAE,QAAQA,GAAG,SAAS,MAAM;AAAA,EAAC,EAAA;AACnD,MAAIC,EAAE,QAAS,QAAO,EAAE,QAAQA,GAAG,SAAS,MAAM;AAAA,EAAC,EAAA;AAEnD,QAAMC,IAAa,IAAI,gBAAA,GACjBC,IAAW,MAAM;AACrB,IAAAF,EAAE,oBAAoB,SAASG,CAAQ,GACvCF,EAAW,MAAA;AAAA,EACb,GACME,IAAW,MAAM;AACrB,IAAAJ,EAAE,oBAAoB,SAASG,CAAQ,GACvCD,EAAW,MAAA;AAAA,EACb;AACA,EAAAF,EAAE,iBAAiB,SAASG,GAAU,EAAE,MAAM,IAAM,GACpDF,EAAE,iBAAiB,SAASG,GAAU,EAAE,MAAM,IAAM;AAEpD,QAAMC,IAAU,MAAM;AACpB,IAAAL,EAAE,oBAAoB,SAASG,CAAQ,GACvCF,EAAE,oBAAoB,SAASG,CAAQ;AAAA,EACzC;AAEA,SAAO,EAAE,QAAQF,EAAW,QAAQ,SAAAG,EAAA;AACtC;AAEA,eAAevB,EACbH,GACA2B,GACiB;AACjB,QAAMC,IAAgB5B,EAAS,QAAQ,IAAI,gBAAgB;AAC3D,MAAI4B,MAAkB,MAAM;AAC1B,UAAMC,IAAsB,OAAOD,CAAa;AAChD,QACE,OAAO,SAASC,CAAmB,KACnCA,IAAsBF;AAEtB,YAAMG,EAAsBH,CAAQ;AAAA,EAExC;AAEA,MAAI,CAAC3B,EAAS;AACZ,WAAO;AAGT,QAAM+B,IAAS/B,EAAS,KAAK,UAAA,GACvBgC,IAAU,IAAI,YAAA;AACpB,MAAIC,IAAa,GACb/B,IAAe;AAEnB,MAAI;AACF,eAAS;AACP,YAAM,EAAE,MAAAgC,GAAM,OAAAC,EAAA,IAAU,MAAMJ,EAAO,KAAA;AACrC,UAAIG,EAAM;AACV,UAAKC,GAGL;AAAA,YADAF,KAAcE,EAAM,YAChBF,IAAaN;AACf,sBAAMI,EAAO,OAAA,GACPD,EAAsBH,CAAQ;AAEtC,QAAAzB,KAAgB8B,EAAQ,OAAOG,GAAO,EAAE,QAAQ,IAAM;AAAA;AAAA,IACxD;AAAA,EACF,UAAA;AACE,IAAAJ,EAAO,YAAA;AAAA,EACT;AAEA,SAAO7B,IAAe8B,EAAQ,OAAA;AAChC;AAEA,SAASF,EAAsBH,GAAgC;AAC7D,SAAO,IAAIrD;AAAA,IACTK,EAAqB;AAAA,IACrB,6CAA6CgD,CAAQ;AAAA,IACrD;AAAA,EAAA;AAEJ;"}

package/dist/json-rpc-client-DbpFfa_o.cjs

@@ -0,0 +1,2 @@
+"use strict";var C=Object.defineProperty;var v=(e,t,r)=>t in e?C(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var d=(e,t,r)=>v(e,typeof t!="symbol"?t+"":t,r);var h=(e=>(e.PENDING_INGESTION="PendingIngestion",e.PENDING_DEPOSITOR_WOTS_PK="PendingDepositorWotsPK",e.PENDING_BABE_SETUP="PendingBabeSetup",e.PENDING_CHALLENGER_PRESIGNING="PendingChallengerPresigning",e.PENDING_PEGIN_SIGS_AVAILABILITY="PendingPeginSigsAvailability",e.PENDING_PRE_PEGIN_CONFIRMATIONS="PendingPrePegInConfirmations",e.PENDING_DEPOSITOR_SIGNATURES="PendingDepositorSignatures",e.PENDING_ACKS="PendingACKs",e.PENDING_ACTIVATION="PendingActivation",e.ACTIVATED_PENDING_BROADCAST="ActivatedPendingBroadcast",e.ACTIVATED="Activated",e.EXPIRED="Expired",e.INGESTION_REJECTED="IngestionRejected",e.INVALID_SIG_IN_CONTRACT="InvalidSigInContract",e.AML_REJECTED="AmlRejected",e.EXPIRED_CLEANED_UP="ExpiredCleanedUp",e.EXPIRED_IN_CLAIM="ExpiredInClaim",e.BABE_SETUP_FAILED="BabeSetupFailed",e))(h||{});const f=["PendingIngestion","PendingBabeSetup","PendingChallengerPresigning","PendingPeginSigsAvailability","PendingPrePegInConfirmations"],g=["PendingACKs","PendingActivation","ActivatedPendingBroadcast","Activated"],N=new Set(["PendingBabeSetup","PendingChallengerPresigning","PendingPeginSigsAvailability","PendingPrePegInConfirmations",...g]),D=new Set(["IngestionRejected","InvalidSigInContract","AmlRejected","ExpiredCleanedUp","ExpiredInClaim","BabeSetupFailed"]),L=new Set([...N,"PendingDepositorSignatures"]),U=50;var O=(e=>(e[e.PEGIN_NOT_FOUND=4001]="PEGIN_NOT_FOUND",e))(O||{});class P extends Error{constructor(t,r,n="local",o){super(r),this.code=t,this.source=n,this.data=o,this.name="JsonRpcError"}}const R={TIMEOUT:-32e3,NETWORK:-32001,PROXY_TIMEOUT:-32002,PROXY_UNAVAILABLE:-32003,INVALID_RESPONSE:-32700,RESPONSE_TOO_LARGE:-32701},m="2.0",G=3,B=1e3,x=2*1024*1024,F=new Set(["vaultProvider_requestDepositorClaimerArtifacts"]),J=new Set([408,429,500,502,503,504]),M=new Set(["vaultProvider_getPeginStatus","vaultProvider_batchGetPeginStatus","vaultProvider_batchGetPegoutStatus","vaultProvider_requestDepositorPresignTransactions"]);function V(e){return M.has(e)}const p=-32001;function w(e){return e instanceof P&&e.source==="wire"&&e.code===p}class k{constructor(t){d(this,"baseUrl");d(this,"timeout");d(this,"headers");d(this,"requestId",0);d(this,"retries");d(this,"retryDelay");d(this,"maxResponseBytes");d(this,"retryableFor");d(this,"tokenProvider");if(this.baseUrl=t.baseUrl.replace(/\/$/,""),this.timeout=t.timeout,this.headers={"Content-Type":"application/json",...t.headers},this.retries=t.retries??G,this.retryDelay=t.retryDelay??B,this.maxResponseBytes=t.maxResponseBytes??x,!Number.isFinite(this.maxResponseBytes)||this.maxResponseBytes<=0)throw new Error("maxResponseBytes must be a positive finite number");this.retryableFor=t.retryableFor??V,this.tokenProvider=t.tokenProvider}async buildHeaders(t,r){const n={...this.headers};if(this.tokenProvider){const o=await this.tokenProvider.getToken(t);o&&(n.Authorization=`Bearer ${o}`,r&&(r.bearerAttached=!0))}return n}async call(t,r,n){const o={bearerAttached:!1};try{return await this.callOnce(t,r,n,o)}catch(i){if(this.tokenProvider&&o.bearerAttached&&w(i))return this.tokenProvider.invalidate(),await this.callOnce(t,r,n);throw i}}async callOnce(t,r,n,o){const i=await this.fetchWithRetry(t,r,n,o);let s;try{const a=F.has(t)?await i.text():await H(i,this.maxResponseBytes);s=JSON.parse(a)}catch(a){throw a instanceof P?a:new P(R.INVALID_RESPONSE,"Invalid JSON-RPC response: body is not valid JSON","local")}if(s===null||typeof s!="object"||Array.isArray(s))throw new P(R.INVALID_RESPONSE,`Invalid JSON-RPC response: expected an object, got ${typeof s}`,"local");const E=s;if("error"in E&&E.error!=null){const a=E.error;throw new P(a.code??R.INVALID_RESPONSE,a.message??"Unknown RPC error","wire",a.data)}if(!("result"in E))throw new P(R.INVALID_RESPONSE,'Invalid JSON-RPC response: missing "result" field',"local");return E.result}async callRaw(t,r,n){return this.fetchWithRetry(t,r,n)}async fetchWithRetry(t,r,n,o){const i=++this.requestId,s=this.retryableFor(t)?this.retries:0,a=JSON.stringify({jsonrpc:m,method:t,params:[r],id:i});let u=null;for(let _=0;_<=s;_++){const A=new AbortController,S=setTimeout(()=>A.abort(),this.timeout),l=n?q(n,A.signal):null,b=l?l.signal:A.signal;try{const c=await this.buildHeaders(t,o),T=await fetch(this.baseUrl,{method:"POST",headers:c,body:a,signal:b});if(clearTimeout(S),l==null||l.cleanup(),!T.ok){if(_<s&&J.has(T.status)){const y=this.retryDelay*Math.pow(2,_);await this.sleep(y,n);continue}throw new Error(`HTTP error: ${T.status} ${T.statusText}`)}return T}catch(c){if(clearTimeout(S),l==null||l.cleanup(),u=c instanceof Error?c:new Error(String(c)),n!=null&&n.aborted)throw new Error("Request aborted");if(c instanceof Error&&c.name==="AbortError"){if(_<s){const T=this.retryDelay*Math.pow(2,_);await this.sleep(T,n);continue}throw new P(R.TIMEOUT,`Request timeout after ${this.timeout}ms (${s+1} attempts)`,"local")}if(c instanceof TypeError){if(_<s){const T=this.retryDelay*Math.pow(2,_);await this.sleep(T,n);continue}throw new P(R.NETWORK,`Network error: ${c.message} (${s+1} attempts)`,"local")}throw c}}throw u||new Error("Unknown error after retries")}sleep(t,r){return new Promise((n,o)=>{if(r!=null&&r.aborted){o(new Error("Request aborted"));return}const i=setTimeout(()=>{r==null||r.removeEventListener("abort",s),n()},t),s=()=>{clearTimeout(i),o(new Error("Request aborted"))};r==null||r.addEventListener("abort",s,{once:!0})})}getBaseUrl(){return this.baseUrl}}function q(e,t){if(e.aborted)return{signal:e,cleanup:()=>{}};if(t.aborted)return{signal:t,cleanup:()=>{}};const r=new AbortController,n=()=>{t.removeEventListener("abort",o),r.abort()},o=()=>{e.removeEventListener("abort",n),r.abort()};e.addEventListener("abort",n,{once:!0}),t.addEventListener("abort",o,{once:!0});const i=()=>{e.removeEventListener("abort",n),t.removeEventListener("abort",o)};return{signal:r.signal,cleanup:i}}async function H(e,t){const r=e.headers.get("content-length");if(r!==null){const E=Number(r);if(Number.isFinite(E)&&E>t)throw I(t)}if(!e.body)return"";const n=e.body.getReader(),o=new TextDecoder;let i=0,s="";try{for(;;){const{done:E,value:a}=await n.read();if(E)break;if(a){if(i+=a.byteLength,i>t)throw await n.cancel(),I(t);s+=o.decode(a,{stream:!0})}}}finally{n.releaseLock()}return s+o.decode()}function I(e){return new P(R.RESPONSE_TOO_LARGE,`JSON-RPC response exceeds maximum size of ${e} bytes`,"local")}exports.AUTH_REJECTED_RPC_CODE=p;exports.DaemonStatus=h;exports.JSON_RPC_ERROR_CODES=R;exports.JsonRpcClient=k;exports.JsonRpcError=P;exports.POST_WOTS_STATUSES=L;exports.PRE_DEPOSITOR_SIGNATURES_STATES=f;exports.RpcErrorCode=O;exports.VP_BATCH_MAX_SIZE=U;exports.VP_TERMINAL_FAILURE_STATUSES=D;exports.VP_TRANSIENT_STATUSES=N;exports.isAuthRejectedError=w;
+//# sourceMappingURL=json-rpc-client-DbpFfa_o.cjs.map

package/dist/json-rpc-client-DbpFfa_o.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-rpc-client-DbpFfa_o.cjs","sources":["../src/tbv/core/clients/vault-provider/types.ts","../src/tbv/core/clients/vault-provider/json-rpc-client.ts"],"sourcesContent":["/**\n * Type definitions for Vault Provider JSON-RPC API.\n *\n * These types match the `vaultProvider_*` RPC namespace defined by the\n * btc-vault daemon. They are the SDK's canonical copy of the VP protocol\n * contract, independent of any frontend framework.\n *\n * @see https://github.com/babylonlabs-io/btc-vault/blob/main/docs/pegin.md\n */\n\n// ============================================================================\n// Daemon Status\n// ============================================================================\n\n/**\n * Backend daemon status (vault provider database).\n * Source: btc-vault crates/vaultd/src/workers/claimer/mod.rs PegInStatus enum\n *\n * State flow (happy path):\n * PendingIngestion -> PendingDepositorWotsPK -> PendingBabeSetup -> PendingChallengerPresigning\n *   -> PendingPeginSigsAvailability -> PendingPrePegInConfirmations\n *   -> PendingDepositorSignatures -> PendingACKs -> PendingActivation\n *   -> ActivatedPendingBroadcast -> Activated\n *\n * Branching / terminal states:\n * - IngestionRejected: terminal — ingestion permanently failed (e.g. malformed\n *   Pre-PegIn, invalid HTLC outputs); reachable directly from PendingIngestion.\n * - Expired: activation timed out; non-terminal during the grace window\n *   (RFC 003) — transitions to ExpiredCleanedUp or ExpiredInClaim.\n * - InvalidSigInContract: terminal — pegin input signature posted on\n *   chain failed verification.\n * - AmlRejected: terminal — AML address screening rejected the pegin.\n * - ExpiredCleanedUp: terminal — grace window expired, per-pegin\n *   artifacts deleted.\n * - ExpiredInClaim: terminal at the pegin-state-machine level; pegout-side\n *   work continues on the pegout_tracking row.\n * - BabeSetupFailed: terminal — a challenger's BaBe decryptor session\n *   failed verification, so BaBe setup cannot complete; reachable from\n *   PendingBabeSetup.\n */\nexport enum DaemonStatus {\n  PENDING_INGESTION = \"PendingIngestion\",\n  PENDING_DEPOSITOR_WOTS_PK = \"PendingDepositorWotsPK\",\n  PENDING_BABE_SETUP = \"PendingBabeSetup\",\n  PENDING_CHALLENGER_PRESIGNING = \"PendingChallengerPresigning\",\n  PENDING_PEGIN_SIGS_AVAILABILITY = \"PendingPeginSigsAvailability\",\n  PENDING_PRE_PEGIN_CONFIRMATIONS = \"PendingPrePegInConfirmations\",\n  PENDING_DEPOSITOR_SIGNATURES = \"PendingDepositorSignatures\",\n  PENDING_ACKS = \"PendingACKs\",\n  PENDING_ACTIVATION = \"PendingActivation\",\n  ACTIVATED_PENDING_BROADCAST = \"ActivatedPendingBroadcast\",\n  ACTIVATED = \"Activated\",\n  EXPIRED = \"Expired\",\n  INGESTION_REJECTED = \"IngestionRejected\",\n  INVALID_SIG_IN_CONTRACT = \"InvalidSigInContract\",\n  AML_REJECTED = \"AmlRejected\",\n  EXPIRED_CLEANED_UP = \"ExpiredCleanedUp\",\n  EXPIRED_IN_CLAIM = \"ExpiredInClaim\",\n  BABE_SETUP_FAILED = \"BabeSetupFailed\",\n}\n\n// ============================================================================\n// Status Groups\n// ============================================================================\n\n/**\n * States where the VP is still processing (no depositor action needed).\n * Excludes PENDING_DEPOSITOR_WOTS_PK (requires depositor action).\n */\nexport const PRE_DEPOSITOR_SIGNATURES_STATES: readonly DaemonStatus[] = [\n  DaemonStatus.PENDING_INGESTION,\n  DaemonStatus.PENDING_BABE_SETUP,\n  DaemonStatus.PENDING_CHALLENGER_PRESIGNING,\n  DaemonStatus.PENDING_PEGIN_SIGS_AVAILABILITY,\n  DaemonStatus.PENDING_PRE_PEGIN_CONFIRMATIONS,\n];\n\n/** States after PendingDepositorSignatures where the depositor has no action. */\nconst POST_PAYOUT_SIGNATURE_STATUSES: readonly DaemonStatus[] = [\n  DaemonStatus.PENDING_ACKS,\n  DaemonStatus.PENDING_ACTIVATION,\n  DaemonStatus.ACTIVATED_PENDING_BROADCAST,\n  DaemonStatus.ACTIVATED,\n];\n\n/**\n * Statuses where no depositor action is needed (VP processing or already past\n * depositor interaction). Excludes PENDING_INGESTION and PENDING_DEPOSITOR_WOTS_PK.\n */\nexport const VP_TRANSIENT_STATUSES: ReadonlySet<DaemonStatus> = new Set([\n  DaemonStatus.PENDING_BABE_SETUP,\n  DaemonStatus.PENDING_CHALLENGER_PRESIGNING,\n  DaemonStatus.PENDING_PEGIN_SIGS_AVAILABILITY,\n  DaemonStatus.PENDING_PRE_PEGIN_CONFIRMATIONS,\n  ...POST_PAYOUT_SIGNATURE_STATUSES,\n]);\n\n/**\n * Terminal VP statuses that represent failure outcomes — polling should\n * stop immediately with an error rather than wait for timeout.\n *\n * Mirrors the failure subset of the server-side terminals\n * (`allowed_transitions()` empty, see `PegInStatus` in\n * `btc-vault/crates/vaultd/src/workers/claimer/mod.rs`).\n * `Activated` IS terminal on-chain but is the success outcome, so it is\n * intentionally excluded — a caller polling for an earlier state that\n * races straight to `Activated` should treat that as success-via-overshoot,\n * not failure. `Expired` is also excluded — under RFC 003 it is a\n * grace-window interim that transitions to `ExpiredCleanedUp` or\n * `ExpiredInClaim`. Callers that want to stop polling on any expiry\n * should check `status === DaemonStatus.EXPIRED ||\n * VP_TERMINAL_FAILURE_STATUSES.has(status)`.\n */\nexport const VP_TERMINAL_FAILURE_STATUSES: ReadonlySet<DaemonStatus> = new Set([\n  DaemonStatus.INGESTION_REJECTED,\n  DaemonStatus.INVALID_SIG_IN_CONTRACT,\n  DaemonStatus.AML_REJECTED,\n  DaemonStatus.EXPIRED_CLEANED_UP,\n  DaemonStatus.EXPIRED_IN_CLAIM,\n  DaemonStatus.BABE_SETUP_FAILED,\n]);\n\n/**\n * Statuses that come after WOTS key submission.\n * If the VP is already in one of these states, the WOTS key was already\n * submitted and we can skip.\n */\nexport const POST_WOTS_STATUSES: ReadonlySet<DaemonStatus> = new Set([\n  ...VP_TRANSIENT_STATUSES,\n  DaemonStatus.PENDING_DEPOSITOR_SIGNATURES,\n]);\n\n// ============================================================================\n// WOTS Types (needed by SubmitDepositorWotsKeyParams)\n// ============================================================================\n\n/**\n * WOTS configuration for a single block.\n * Matches Rust `babe::wots::Config` serde format.\n */\nexport interface WotsConfig {\n  /** Digit bit-width (e.g. 4 → base-16 digits). */\n  d: number;\n  /** Number of message digits in this block. */\n  n: number;\n  /** Radix used for the checksum computation. */\n  checksum_radix: number;\n}\n\n/**\n * A single block of WOTS public keys.\n * Chain values are arrays of byte values (matching Rust `[u8; 20]`).\n */\nexport interface WotsBlockPublicKey {\n  config: WotsConfig;\n  message_terminals: number[][];\n  checksum_major_terminal: number[];\n  checksum_minor_terminal: number[];\n}\n\n// ============================================================================\n// Request Parameter Types\n// ============================================================================\n\n/** Params for requesting the payout/claim/assert transactions to pre-sign. */\nexport interface RequestDepositorPresignTransactionsParams {\n  pegin_txid: string;\n  depositor_pk: string;\n}\n\n/** Params for submitting the depositor's WOTS public key to the VP. */\nexport interface SubmitDepositorWotsKeyParams {\n  pegin_txid: string;\n  depositor_pk: string;\n  wots_public_keys: WotsBlockPublicKey[];\n}\n\n/** Per-challenger signatures for the depositor-as-claimer flow. */\nexport interface DepositorPreSigsPerChallenger {\n  nopayout_signature: string;\n}\n\n/** Depositor-as-claimer pre-signatures (payout + per-challenger). */\nexport interface DepositorAsClaimerPresignatures {\n  payout_signatures: ClaimerSignatures;\n  per_challenger: Record<string, DepositorPreSigsPerChallenger>;\n}\n\n/** Params for submitting depositor pre-signatures including claimer presignatures. */\nexport interface SubmitDepositorPresignaturesParams {\n  pegin_txid: string;\n  depositor_pk: string;\n  signatures: Record<string, ClaimerSignatures>;\n  depositor_claimer_presignatures: DepositorAsClaimerPresignatures;\n}\n\n/** Payout signatures per claimer. */\nexport interface ClaimerSignatures {\n  payout_signature: string;\n}\n\n/** Params for requesting BaBe DecryptorArtifacts from the VP. */\nexport interface RequestDepositorClaimerArtifactsParams {\n  pegin_txid: string;\n  depositor_pk: string;\n}\n\n/** Params for querying pegin status. Either pegin_txid or vault_id must be provided. */\nexport type GetPeginStatusParams =\n  | { pegin_txid: string; vault_id?: never }\n  | { vault_id: string; pegin_txid?: never };\n\n// ============================================================================\n// Response Types\n// ============================================================================\n\n/** A raw Bitcoin transaction with its hex encoding. */\nexport interface TransactionData {\n  tx_hex: string;\n}\n\n/** Set of transactions the depositor must pre-sign for a single claimer. */\nexport interface ClaimerTransactions {\n  claimer_pubkey: string;\n  claim_tx: TransactionData;\n  assert_tx: TransactionData;\n  payout_tx: TransactionData;\n  payout_psbt: string;\n}\n\n/** Per-segment connector data for ChallengeAssert inputs. */\nexport interface ChallengeAssertConnectorData {\n  wots_pks_json: string;\n  gc_wots_keys_json: string;\n}\n\n/** Challenger-specific transactions and signing data for the depositor graph. */\nexport interface PresignDataPerChallenger {\n  challenger_pubkey: string;\n  challenge_assert_x_tx: TransactionData;\n  challenge_assert_y_tx: TransactionData;\n  nopayout_tx: TransactionData;\n  nopayout_psbt: string;\n  challenge_assert_connectors: ChallengeAssertConnectorData[];\n  output_label_hashes: string[];\n}\n\n/** Depositor-as-claimer TxGraph transactions. */\nexport interface DepositorGraphTransactions {\n  claim_tx: TransactionData;\n  assert_tx: TransactionData;\n  payout_tx: TransactionData;\n  payout_psbt: string;\n  challenger_presign_data: PresignDataPerChallenger[];\n  offchain_params_version: number;\n}\n\n/** Response from `requestDepositorPresignTransactions`. */\nexport interface RequestDepositorPresignTransactionsResponse {\n  txs: ClaimerTransactions[];\n  depositor_graph: DepositorGraphTransactions;\n}\n\n/** BaBe garbled-circuit session data for a single challenger. */\nexport interface BaBeSessionData {\n  decryptor_artifacts_hex: string;\n}\n\n/** Response from `requestDepositorClaimerArtifacts`. */\nexport interface RequestDepositorClaimerArtifactsResponse {\n  tx_graph_json: string;\n  verifying_key_hex: string;\n  babe_sessions: Record<string, BaBeSessionData>;\n}\n\n/** Progress tracker for a multi-challenger operation. */\nexport interface ChallengerProgress {\n  total_challengers: number;\n  completed_challengers: number;\n  completed_challenger_pubkeys: string[];\n  pending_challenger_pubkeys: string[];\n}\n\nexport type GcDataProgress = ChallengerProgress;\nexport type AckCollectionProgress = ChallengerProgress;\n\n/** Extended presigning progress with all 3 concurrent phases. */\nexport interface PresigningProgress extends ChallengerProgress {\n  depositor_graph_created?: boolean;\n  vk_challenger_presigning_completed?: number;\n  vk_challenger_presigning_total?: number;\n}\n\n/** Detailed progress breakdown for an in-progress pegin. */\nexport interface PeginProgressDetails {\n  gc_data?: GcDataProgress;\n  presigning?: PresigningProgress;\n  ack_collection?: AckCollectionProgress;\n  claimer_graphs?: ClaimerGraphStatus[];\n}\n\n/** Per-claimer graph status (challenger perspective). */\nexport interface ClaimerGraphStatus {\n  claimer_pubkey: string;\n  presigned: boolean;\n}\n\n/** Response from `getPeginStatus`. */\nexport interface GetPeginStatusResponse {\n  pegin_txid: string;\n  status: string;\n  progress: PeginProgressDetails;\n  health_info: string;\n  last_error?: string;\n}\n\n// ============================================================================\n// Pegout Types\n// ============================================================================\n\n/**\n * Claimer-side pegout progress.\n * Source: btc-vault crates/vaultd/src/rpc/server/pegout_status.rs ClaimerPegoutStatus.\n */\nexport interface ClaimerPegoutStatus {\n  /** Wire string from PegoutStatus enum. */\n  status: string;\n  failed: boolean;\n  claim_txid: string;\n  claimer_pubkey: string;\n  assert_txid: string;\n  /** Unix epoch seconds. */\n  created_at: number;\n  /** Unix epoch seconds. */\n  updated_at: number;\n}\n\n/**\n * Challenger-side pegout progress.\n * Source: btc-vault crates/vaultd/src/rpc/server/pegout_status.rs ChallengerStatus.\n */\nexport interface ChallengerStatus {\n  status: string;\n  claim_txid: string;\n  claimer_pubkey: string;\n  assert_txid: string | null;\n  challenge_assert_x_txid: string | null;\n  challenge_assert_y_txid: string | null;\n  nopayout_txid: string | null;\n  created_at: number;\n  updated_at: number;\n}\n\n/**\n * Pegout status response. Embedded by `batchGetPegoutStatus` per-result\n * envelopes. Mirrors btc-vault `GetPegoutStatusResponse`.\n */\nexport interface GetPegoutStatusResponse {\n  pegin_txid: string;\n  found: boolean;\n  claimer: ClaimerPegoutStatus | null;\n  challengers: ChallengerStatus[];\n}\n\n// ============================================================================\n// Batch Status Types (peginStatus + pegoutStatus)\n// ============================================================================\n\n/** Params for `batchGetPeginStatus`. */\nexport interface BatchGetPeginStatusParams {\n  /** Up to MAX_BATCH_SIZE (50) txids per call. */\n  pegin_txids: string[];\n}\n\n/** Per-pegin entry in a `batchGetPeginStatus` response. */\nexport interface BatchPeginStatusResult {\n  pegin_txid: string;\n  result: GetPeginStatusResponse | null;\n  error: string | null;\n}\n\n/** Response from `batchGetPeginStatus`. Results are returned in request order. */\nexport interface BatchGetPeginStatusResponse {\n  results: BatchPeginStatusResult[];\n}\n\n/** Params for `batchGetPegoutStatus`. */\nexport interface BatchGetPegoutStatusParams {\n  pegin_txids: string[];\n}\n\n/** Per-vault entry in a `batchGetPegoutStatus` response. */\nexport interface BatchPegoutStatusResult {\n  pegin_txid: string;\n  result: GetPegoutStatusResponse | null;\n  error: string | null;\n}\n\n/** Response from `batchGetPegoutStatus`. Results are returned in request order. */\nexport interface BatchGetPegoutStatusResponse {\n  results: BatchPegoutStatusResult[];\n}\n\n/**\n * Maximum number of items per batch call. Mirrors the server-side\n * `MAX_BATCH_SIZE` in btc-vault (`crates/vaultd/src/rpc/server/vault_provider.rs:7`).\n * Callers must chunk requests larger than this.\n */\nexport const VP_BATCH_MAX_SIZE = 50;\n\n// ============================================================================\n// Error Codes\n// ============================================================================\n\n/**\n * JSON-RPC error codes returned by the vault provider.\n * Source: btc-vault `crates/vaultd/src/rpc/error.rs::RpcError::error_code`.\n */\nexport enum RpcErrorCode {\n  PEGIN_NOT_FOUND = 4001,\n}\n","/**\n * Generic JSON-RPC 2.0 HTTP Client\n *\n * Framework-agnostic client using `fetch()` — works in browsers and Node.js 18+.\n * Includes configurable retry policy and AbortSignal passthrough.\n */\n\nexport interface JsonRpcRequest<T = unknown> {\n  jsonrpc: \"2.0\";\n  method: string;\n  params: T;\n  id: number | string;\n}\n\nexport interface JsonRpcSuccessResponse<T = unknown> {\n  jsonrpc: \"2.0\";\n  result: T;\n  id: number | string;\n}\n\nexport interface JsonRpcErrorResponse {\n  jsonrpc: \"2.0\";\n  error: {\n    code: number;\n    message: string;\n    data?: unknown;\n  };\n  id: number | string;\n}\n\nexport type JsonRpcResponse<T = unknown> =\n  | JsonRpcSuccessResponse<T>\n  | JsonRpcErrorResponse;\n\n/**\n * Injects bearer tokens into requests for auth-gated methods, and is\n * notified when the server rejects a bearer so it can invalidate its cache.\n *\n * The `JsonRpcClient` is agnostic to which methods are auth-gated —\n * the provider's `getToken(method)` decides. Returning `null` means\n * \"no auth required for this method\"; the client then sends the\n * request with no `Authorization` header.\n */\nexport interface BearerTokenProvider {\n  /**\n   * Return the bearer token to inject for `method`, or `null` if the\n   * method does not require auth.\n   */\n  getToken(method: string): Promise<string | null>;\n  /**\n   * Drop the cached token. Next call to `getToken` must re-acquire.\n   * Called by the client on reactive-refresh-trigger responses.\n   */\n  invalidate(): void;\n}\n\nexport interface JsonRpcClientConfig {\n  /** Base URL of the RPC service */\n  baseUrl: string;\n  /** Timeout in milliseconds per request attempt */\n  timeout: number;\n  /** Optional custom headers */\n  headers?: Record<string, string>;\n  /** Number of retry attempts for transient errors (default: 3) */\n  retries?: number;\n  /** Initial retry delay in milliseconds (default: 1000) */\n  retryDelay?: number;\n  /**\n   * Maximum response body size, in bytes, for typed JSON-RPC calls.\n   * `callRaw` intentionally returns the unparsed Response and is not capped here.\n   * Default: 2 MiB.\n   */\n  maxResponseBytes?: number;\n  /**\n   * Predicate that decides which methods retry on transient errors.\n   * Default retries only `getPeginStatus`, `batchGetPeginStatus`,\n   * `batchGetPegoutStatus`, and `requestDepositorPresignTransactions`.\n   * Write methods are not retried by default.\n   */\n  retryableFor?: (method: string) => boolean;\n  /**\n   * Per-request bearer-token source. A non-null return attaches\n   * `Authorization: Bearer <token>`; `null` skips auth. `call`\n   * additionally retries once when the server rejects the bearer\n   * (invalidate + refetch + retry) — see {@link isAuthRejectedError}.\n   * `callRaw` skips reactive refresh.\n   */\n  tokenProvider?: BearerTokenProvider;\n}\n\n// \"wire\" = parsed from a JSON-RPC error envelope; \"local\" = timeout/network/parse failure.\nexport type JsonRpcErrorSource = \"wire\" | \"local\";\n\nexport class JsonRpcError extends Error {\n  constructor(\n    public code: number,\n    message: string,\n    /** \"wire\" for server-returned envelopes; \"local\" for SDK-side failures. */\n    public source: JsonRpcErrorSource = \"local\",\n    /** Structured data from the server `error.data` field, if any. */\n    public data?: unknown,\n  ) {\n    super(message);\n    this.name = \"JsonRpcError\";\n  }\n}\n\nexport const JSON_RPC_ERROR_CODES = {\n  TIMEOUT: -32000,\n  NETWORK: -32001,\n  /** VP proxy: request timed out at proxy level */\n  PROXY_TIMEOUT: -32002,\n  /** VP proxy: VP unreachable / DNS failure / response too large */\n  PROXY_UNAVAILABLE: -32003,\n  /** SDK client: response missing \"result\" field (malformed JSON-RPC) */\n  INVALID_RESPONSE: -32700,\n  /** SDK client: response body exceeded the configured byte limit */\n  RESPONSE_TOO_LARGE: -32701,\n} as const;\n\n/** JSON-RPC protocol version */\nconst JSON_RPC_VERSION = \"2.0\" as const;\n\n/** Default number of retry attempts for transient errors */\nconst DEFAULT_RETRY_ATTEMPTS = 3;\n\n/** Default initial retry delay in milliseconds */\nconst DEFAULT_RETRY_DELAY_MS = 1000;\n\n/** Default maximum JSON-RPC response size for typed calls (2 MiB) */\nconst DEFAULT_MAX_RESPONSE_BYTES = 2 * 1024 * 1024;\n\n/**\n * TODO: Temporary typed-call exceptions for methods that currently return large\n * artifact payloads as JSON-RPC results.\n */\nconst UNCAPPED_TYPED_RESPONSE_METHODS: ReadonlySet<string> = new Set([\n  \"vaultProvider_requestDepositorClaimerArtifacts\",\n]);\n\n/** HTTP status codes that indicate transient server errors and are safe to retry */\nconst RETRYABLE_HTTP_STATUS_CODES: ReadonlySet<number> = new Set([\n  408, // Request Timeout\n  429, // Too Many Requests\n  500, // Internal Server Error\n  502, // Bad Gateway\n  503, // Service Unavailable\n  504, // Gateway Timeout\n]);\n\n/** Default retry predicate: only retry read-only / idempotent methods */\nconst DEFAULT_RETRYABLE_METHODS: ReadonlySet<string> = new Set([\n  \"vaultProvider_getPeginStatus\",\n  \"vaultProvider_batchGetPeginStatus\",\n  \"vaultProvider_batchGetPegoutStatus\",\n  \"vaultProvider_requestDepositorPresignTransactions\",\n]);\n\nfunction defaultRetryableFor(method: string): boolean {\n  return DEFAULT_RETRYABLE_METHODS.has(method);\n}\n\n/**\n * JSON-RPC error code the vault provider returns for every bearer-token\n * rejection: expired, not-yet-valid, missing bearer, invalid signature,\n * invalid claims, invalid structure, subject mismatch, issuer mismatch.\n * All eight variants collapse onto this one code, distinguished only by\n * message text — see btc-vault `crates/btc-auth/src/rpc.rs`\n * (`auth_error_to_rpc_error`). Operationally they all mean the same\n * thing: this bearer is dead, mint a new one.\n *\n * Numerically equal to {@link JSON_RPC_ERROR_CODES.NETWORK}, which this\n * client throws for local network failures. `source` is what separates\n * them — see {@link isAuthRejectedError}.\n */\nexport const AUTH_REJECTED_RPC_CODE = -32001;\n\n/**\n * True when `error` is the vault provider rejecting our bearer token.\n *\n * Classified on the error code, which is the only thing the server\n * guarantees: its auth errors carry `data: null` unconditionally\n * (`rpc_error` passes `None::<()>`), so any predicate keyed on an\n * `error.data` field can never match a real response.\n *\n * `source === \"wire\"` is load-bearing: this client reuses -32001\n * internally as {@link JSON_RPC_ERROR_CODES.NETWORK}, always with\n * source \"local\".\n *\n * Known, bounded collision: the vault-provider proxy reuses -32001 for\n * \"Provider not found\". A call to a deregistered provider therefore\n * costs one wasted token-mint round-trip, which fails against the same\n * registry check and surfaces the same message.\n */\nexport function isAuthRejectedError(error: unknown): boolean {\n  return (\n    error instanceof JsonRpcError &&\n    error.source === \"wire\" &&\n    error.code === AUTH_REJECTED_RPC_CODE\n  );\n}\n\n/**\n * Per-`call` record of whether a bearer was actually attached to the\n * request. Scoped to one `call` (not client state) so concurrent\n * requests can't observe each other's auth state.\n */\ninterface AttemptAuthState {\n  bearerAttached: boolean;\n}\n\n/**\n * Generic JSON-RPC 2.0 HTTP client with safe retry policy.\n */\nexport class JsonRpcClient {\n  private baseUrl: string;\n  private timeout: number;\n  private headers: Record<string, string>;\n  private requestId = 0;\n  private retries: number;\n  private retryDelay: number;\n  private maxResponseBytes: number;\n  private retryableFor: (method: string) => boolean;\n  private tokenProvider?: BearerTokenProvider;\n\n  constructor(config: JsonRpcClientConfig) {\n    this.baseUrl = config.baseUrl.replace(/\\/$/, \"\");\n    this.timeout = config.timeout;\n    this.headers = {\n      \"Content-Type\": \"application/json\",\n      ...config.headers,\n    };\n    this.retries = config.retries ?? DEFAULT_RETRY_ATTEMPTS;\n    this.retryDelay = config.retryDelay ?? DEFAULT_RETRY_DELAY_MS;\n    this.maxResponseBytes =\n      config.maxResponseBytes ?? DEFAULT_MAX_RESPONSE_BYTES;\n    if (!Number.isFinite(this.maxResponseBytes) || this.maxResponseBytes <= 0) {\n      throw new Error(\"maxResponseBytes must be a positive finite number\");\n    }\n    this.retryableFor = config.retryableFor ?? defaultRetryableFor;\n    this.tokenProvider = config.tokenProvider;\n  }\n\n  private async buildHeaders(\n    method: string,\n    authState?: AttemptAuthState,\n  ): Promise<Record<string, string>> {\n    const headers: Record<string, string> = { ...this.headers };\n    if (this.tokenProvider) {\n      const token = await this.tokenProvider.getToken(method);\n      if (token) {\n        headers.Authorization = `Bearer ${token}`;\n        if (authState) authState.bearerAttached = true;\n      }\n    }\n    return headers;\n  }\n\n  /**\n   * Make a JSON-RPC request with optional retry for safe methods.\n   *\n   * If the server rejects the bearer token and a `tokenProvider` is\n   * configured, the client invalidates its cached token and retries the\n   * request once with a freshly-acquired bearer.\n   *\n   * @param method - The RPC method name\n   * @param params - The method parameters\n   * @param signal - Optional AbortSignal for caller-controlled cancellation\n   * @returns The result from the RPC method\n   * @throws JsonRpcError if the RPC call fails\n   */\n  async call<TParams, TResult>(\n    method: string,\n    params: TParams,\n    signal?: AbortSignal,\n  ): Promise<TResult> {\n    const authState: AttemptAuthState = { bearerAttached: false };\n    try {\n      return await this.callOnce<TParams, TResult>(\n        method,\n        params,\n        signal,\n        authState,\n      );\n    } catch (error) {\n      // The re-auth retry fires for ALL methods, including mutating ones.\n      // This is intentional and safe: the server's auth middleware rejects\n      // the request BEFORE dispatching to the method handler, so a\n      // rejected bearer means the handler never ran and no state was\n      // mutated. Confirmed against btc-vault\n      // `crates/btc-auth/src/middleware/jsonrpc.rs` — `unauthorized_response`\n      // returns without ever calling `service.call(req)`, in both `call`\n      // and `batch`. The `retryableFor` guard on HTTP-transient-error\n      // retries doesn't apply here because that guard is about retrying\n      // after a request the server may have started processing.\n      //\n      // `bearerAttached` keeps this off methods that sent no token — most\n      // importantly the token-issuing calls themselves, which would\n      // otherwise burn a round-trip re-minting against the proxy's\n      // colliding -32001 \"Provider not found\".\n      //\n      // Bounded to one retry: the retried call is not wrapped in this\n      // handler. If the freshly-minted token is rejected too, the problem\n      // is the pinned server key rather than the token, and that surfaces\n      // instead of looping.\n      if (\n        this.tokenProvider &&\n        authState.bearerAttached &&\n        isAuthRejectedError(error)\n      ) {\n        this.tokenProvider.invalidate();\n        return await this.callOnce<TParams, TResult>(method, params, signal);\n      }\n      throw error;\n    }\n  }\n\n  private async callOnce<TParams, TResult>(\n    method: string,\n    params: TParams,\n    signal: AbortSignal | undefined,\n    authState?: AttemptAuthState,\n  ): Promise<TResult> {\n    const response = await this.fetchWithRetry(\n      method,\n      params,\n      signal,\n      authState,\n    );\n\n    let jsonResponse: unknown;\n    try {\n      const responseText = UNCAPPED_TYPED_RESPONSE_METHODS.has(method)\n        ? await response.text()\n        : await readResponseTextWithLimit(response, this.maxResponseBytes);\n      jsonResponse = JSON.parse(responseText);\n    } catch (error) {\n      if (error instanceof JsonRpcError) {\n        throw error;\n      }\n      throw new JsonRpcError(\n        JSON_RPC_ERROR_CODES.INVALID_RESPONSE,\n        \"Invalid JSON-RPC response: body is not valid JSON\",\n        \"local\",\n      );\n    }\n\n    if (\n      jsonResponse === null ||\n      typeof jsonResponse !== \"object\" ||\n      Array.isArray(jsonResponse)\n    ) {\n      throw new JsonRpcError(\n        JSON_RPC_ERROR_CODES.INVALID_RESPONSE,\n        `Invalid JSON-RPC response: expected an object, got ${typeof jsonResponse}`,\n        \"local\",\n      );\n    }\n\n    const rpcResponse = jsonResponse as Record<string, unknown>;\n\n    if (\"error\" in rpcResponse && rpcResponse.error != null) {\n      const err = rpcResponse.error as {\n        code?: number;\n        message?: string;\n        data?: unknown;\n      };\n      throw new JsonRpcError(\n        err.code ?? JSON_RPC_ERROR_CODES.INVALID_RESPONSE,\n        err.message ?? \"Unknown RPC error\",\n        \"wire\",\n        err.data,\n      );\n    }\n\n    if (!(\"result\" in rpcResponse)) {\n      throw new JsonRpcError(\n        JSON_RPC_ERROR_CODES.INVALID_RESPONSE,\n        `Invalid JSON-RPC response: missing \"result\" field`,\n        \"local\",\n      );\n    }\n\n    return rpcResponse.result as TResult;\n  }\n\n  /**\n   * Make a JSON-RPC request returning the raw Response (unparsed body).\n   *\n   * Bearer tokens are injected identically to `call`. **Reactive refresh\n   * is NOT performed here** — the response body may be unbounded (e.g.\n   * claimer-artifact downloads), so the client refuses to parse it to\n   * detect auth errors. Callers relying on token-expired retries for\n   * large downloads must read the body themselves and re-invoke\n   * `callRaw` after `tokenProvider.invalidate()`.\n   */\n  async callRaw<TParams>(\n    method: string,\n    params: TParams,\n    signal?: AbortSignal,\n  ): Promise<Response> {\n    return this.fetchWithRetry(method, params, signal);\n  }\n\n  private async fetchWithRetry<TParams>(\n    method: string,\n    params: TParams,\n    callerSignal?: AbortSignal,\n    authState?: AttemptAuthState,\n  ): Promise<Response> {\n    const requestId = ++this.requestId;\n    const maxRetries = this.retryableFor(method) ? this.retries : 0;\n\n    // jsonrpsee (Rust backend) expects params as an array (positional parameters)\n    const request: JsonRpcRequest<TParams[]> = {\n      jsonrpc: JSON_RPC_VERSION,\n      method,\n      params: [params],\n      id: requestId,\n    };\n\n    const body = JSON.stringify(request);\n    let lastError: Error | null = null;\n\n    for (let attempt = 0; attempt <= maxRetries; attempt++) {\n      // Merge caller signal with per-request timeout signal\n      const timeoutController = new AbortController();\n      const timeoutId = setTimeout(\n        () => timeoutController.abort(),\n        this.timeout,\n      );\n\n      const merged = callerSignal\n        ? mergeAbortSignals(callerSignal, timeoutController.signal)\n        : null;\n      const signal = merged ? merged.signal : timeoutController.signal;\n\n      try {\n        // Build headers per-attempt so the token provider can return a\n        // freshly-acquired bearer after a prior invalidate() on this\n        // request (retry loop path) without plumbing state through.\n        const headers = await this.buildHeaders(method, authState);\n\n        const response = await fetch(this.baseUrl, {\n          method: \"POST\",\n          headers,\n          body,\n          signal,\n        });\n\n        clearTimeout(timeoutId);\n        merged?.cleanup();\n\n        if (!response.ok) {\n          const shouldRetry =\n            attempt < maxRetries &&\n            RETRYABLE_HTTP_STATUS_CODES.has(response.status);\n\n          if (shouldRetry) {\n            const delay = this.retryDelay * Math.pow(2, attempt);\n            await this.sleep(delay, callerSignal);\n            continue;\n          }\n\n          throw new Error(\n            `HTTP error: ${response.status} ${response.statusText}`,\n          );\n        }\n\n        return response;\n      } catch (error) {\n        clearTimeout(timeoutId);\n        merged?.cleanup();\n        lastError = error instanceof Error ? error : new Error(String(error));\n\n        // Check if caller aborted (not our timeout)\n        if (callerSignal?.aborted) {\n          throw new Error(\"Request aborted\");\n        }\n\n        if (error instanceof Error && error.name === \"AbortError\") {\n          if (attempt < maxRetries) {\n            const delay = this.retryDelay * Math.pow(2, attempt);\n            await this.sleep(delay, callerSignal);\n            continue;\n          }\n          throw new JsonRpcError(\n            JSON_RPC_ERROR_CODES.TIMEOUT,\n            `Request timeout after ${this.timeout}ms (${maxRetries + 1} attempts)`,\n            \"local\",\n          );\n        }\n\n        // Handle network errors (CORS, connection refused, etc.)\n        if (error instanceof TypeError) {\n          if (attempt < maxRetries) {\n            const delay = this.retryDelay * Math.pow(2, attempt);\n            await this.sleep(delay, callerSignal);\n            continue;\n          }\n          throw new JsonRpcError(\n            JSON_RPC_ERROR_CODES.NETWORK,\n            `Network error: ${error.message} (${maxRetries + 1} attempts)`,\n            \"local\",\n          );\n        }\n\n        // Don't retry JSON-RPC errors (business logic errors)\n        throw error;\n      }\n    }\n\n    throw lastError || new Error(\"Unknown error after retries\");\n  }\n\n  private sleep(ms: number, signal?: AbortSignal): Promise<void> {\n    return new Promise((resolve, reject) => {\n      if (signal?.aborted) {\n        reject(new Error(\"Request aborted\"));\n        return;\n      }\n      const timeoutId = setTimeout(() => {\n        signal?.removeEventListener(\"abort\", onAbort);\n        resolve();\n      }, ms);\n      const onAbort = () => {\n        clearTimeout(timeoutId);\n        reject(new Error(\"Request aborted\"));\n      };\n      signal?.addEventListener(\"abort\", onAbort, { once: true });\n    });\n  }\n\n  getBaseUrl(): string {\n    return this.baseUrl;\n  }\n}\n\ninterface MergedSignal {\n  signal: AbortSignal;\n  /** Remove listeners from the source signals. Call after the request completes. */\n  cleanup: () => void;\n}\n\n/**\n * Merge two AbortSignals — the returned signal aborts if either input aborts.\n * Returns a cleanup function to remove listeners when the request completes\n * normally, preventing listener accumulation in long-lived polling flows.\n */\nfunction mergeAbortSignals(a: AbortSignal, b: AbortSignal): MergedSignal {\n  if (a.aborted) return { signal: a, cleanup: () => {} };\n  if (b.aborted) return { signal: b, cleanup: () => {} };\n\n  const controller = new AbortController();\n  const onAbortA = () => {\n    b.removeEventListener(\"abort\", onAbortB);\n    controller.abort();\n  };\n  const onAbortB = () => {\n    a.removeEventListener(\"abort\", onAbortA);\n    controller.abort();\n  };\n  a.addEventListener(\"abort\", onAbortA, { once: true });\n  b.addEventListener(\"abort\", onAbortB, { once: true });\n\n  const cleanup = () => {\n    a.removeEventListener(\"abort\", onAbortA);\n    b.removeEventListener(\"abort\", onAbortB);\n  };\n\n  return { signal: controller.signal, cleanup };\n}\n\nasync function readResponseTextWithLimit(\n  response: Response,\n  maxBytes: number,\n): Promise<string> {\n  const contentLength = response.headers.get(\"content-length\");\n  if (contentLength !== null) {\n    const parsedContentLength = Number(contentLength);\n    if (\n      Number.isFinite(parsedContentLength) &&\n      parsedContentLength > maxBytes\n    ) {\n      throw responseTooLargeError(maxBytes);\n    }\n  }\n\n  if (!response.body) {\n    return \"\";\n  }\n\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder();\n  let totalBytes = 0;\n  let responseText = \"\";\n\n  try {\n    for (;;) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      if (!value) continue;\n\n      totalBytes += value.byteLength;\n      if (totalBytes > maxBytes) {\n        await reader.cancel();\n        throw responseTooLargeError(maxBytes);\n      }\n      responseText += decoder.decode(value, { stream: true });\n    }\n  } finally {\n    reader.releaseLock();\n  }\n\n  return responseText + decoder.decode();\n}\n\nfunction responseTooLargeError(maxBytes: number): JsonRpcError {\n  return new JsonRpcError(\n    JSON_RPC_ERROR_CODES.RESPONSE_TOO_LARGE,\n    `JSON-RPC response exceeds maximum size of ${maxBytes} bytes`,\n    \"local\",\n  );\n}\n"],"names":["DaemonStatus","PRE_DEPOSITOR_SIGNATURES_STATES","POST_PAYOUT_SIGNATURE_STATUSES","VP_TRANSIENT_STATUSES","VP_TERMINAL_FAILURE_STATUSES","POST_WOTS_STATUSES","VP_BATCH_MAX_SIZE","RpcErrorCode","JsonRpcError","code","message","source","data","JSON_RPC_ERROR_CODES","JSON_RPC_VERSION","DEFAULT_RETRY_ATTEMPTS","DEFAULT_RETRY_DELAY_MS","DEFAULT_MAX_RESPONSE_BYTES","UNCAPPED_TYPED_RESPONSE_METHODS","RETRYABLE_HTTP_STATUS_CODES","DEFAULT_RETRYABLE_METHODS","defaultRetryableFor","method","AUTH_REJECTED_RPC_CODE","isAuthRejectedError","error","JsonRpcClient","config","__publicField","authState","headers","token","params","signal","response","jsonResponse","responseText","readResponseTextWithLimit","rpcResponse","err","callerSignal","requestId","maxRetries","body","lastError","attempt","timeoutController","timeoutId","merged","mergeAbortSignals","delay","ms","resolve","reject","onAbort","a","b","controller","onAbortA","onAbortB","cleanup","maxBytes","contentLength","parsedContentLength","responseTooLargeError","reader","decoder","totalBytes","done","value"],"mappings":"iLAwCO,IAAKA,GAAAA,IACVA,EAAA,kBAAoB,mBACpBA,EAAA,0BAA4B,yBAC5BA,EAAA,mBAAqB,mBACrBA,EAAA,8BAAgC,8BAChCA,EAAA,gCAAkC,+BAClCA,EAAA,gCAAkC,+BAClCA,EAAA,6BAA+B,6BAC/BA,EAAA,aAAe,cACfA,EAAA,mBAAqB,oBACrBA,EAAA,4BAA8B,4BAC9BA,EAAA,UAAY,YACZA,EAAA,QAAU,UACVA,EAAA,mBAAqB,oBACrBA,EAAA,wBAA0B,uBAC1BA,EAAA,aAAe,cACfA,EAAA,mBAAqB,mBACrBA,EAAA,iBAAmB,iBACnBA,EAAA,kBAAoB,kBAlBVA,IAAAA,GAAA,CAAA,CAAA,EA6BL,MAAMC,EAA2D,CACtE,mBACA,mBACA,8BACA,+BACA,8BACF,EAGMC,EAA0D,CAC9D,cACA,oBACA,4BACA,WACF,EAMaC,MAAuD,IAAI,CACtE,mBACA,8BACA,+BACA,+BACA,GAAGD,CACL,CAAC,EAkBYE,MAA8D,IAAI,CAC7E,oBACA,uBACA,cACA,mBACA,iBACA,iBACF,CAAC,EAOYC,MAAoD,IAAI,CACnE,GAAGF,EACH,4BACF,CAAC,EAsRYG,EAAoB,GAU1B,IAAKC,GAAAA,IACVA,EAAAA,EAAA,gBAAkB,IAAA,EAAlB,kBADUA,IAAAA,GAAA,CAAA,CAAA,ECrUL,MAAMC,UAAqB,KAAM,CACtC,YACSC,EACPC,EAEOC,EAA6B,QAE7BC,EACP,CACA,MAAMF,CAAO,EAPN,KAAA,KAAAD,EAGA,KAAA,OAAAE,EAEA,KAAA,KAAAC,EAGP,KAAK,KAAO,cACd,CACF,CAEO,MAAMC,EAAuB,CAClC,QAAS,MACT,QAAS,OAET,cAAe,OAEf,kBAAmB,OAEnB,iBAAkB,OAElB,mBAAoB,MACtB,EAGMC,EAAmB,MAGnBC,EAAyB,EAGzBC,EAAyB,IAGzBC,EAA6B,EAAI,KAAO,KAMxCC,MAA2D,IAAI,CACnE,gDACF,CAAC,EAGKC,MAAuD,IAAI,CAC/D,IACA,IACA,IACA,IACA,IACA,GACF,CAAC,EAGKC,MAAqD,IAAI,CAC7D,+BACA,oCACA,qCACA,mDACF,CAAC,EAED,SAASC,EAAoBC,EAAyB,CACpD,OAAOF,EAA0B,IAAIE,CAAM,CAC7C,CAeO,MAAMC,EAAyB,OAmB/B,SAASC,EAAoBC,EAAyB,CAC3D,OACEA,aAAiBjB,GACjBiB,EAAM,SAAW,QACjBA,EAAM,OAASF,CAEnB,CAcO,MAAMG,CAAc,CAWzB,YAAYC,EAA6B,CAVjCC,EAAA,gBACAA,EAAA,gBACAA,EAAA,gBACAA,EAAA,iBAAY,GACZA,EAAA,gBACAA,EAAA,mBACAA,EAAA,yBACAA,EAAA,qBACAA,EAAA,sBAaN,GAVA,KAAK,QAAUD,EAAO,QAAQ,QAAQ,MAAO,EAAE,EAC/C,KAAK,QAAUA,EAAO,QACtB,KAAK,QAAU,CACb,eAAgB,mBAChB,GAAGA,EAAO,OAAA,EAEZ,KAAK,QAAUA,EAAO,SAAWZ,EACjC,KAAK,WAAaY,EAAO,YAAcX,EACvC,KAAK,iBACHW,EAAO,kBAAoBV,EACzB,CAAC,OAAO,SAAS,KAAK,gBAAgB,GAAK,KAAK,kBAAoB,EACtE,MAAM,IAAI,MAAM,mDAAmD,EAErE,KAAK,aAAeU,EAAO,cAAgBN,EAC3C,KAAK,cAAgBM,EAAO,aAC9B,CAEA,MAAc,aACZL,EACAO,EACiC,CACjC,MAAMC,EAAkC,CAAE,GAAG,KAAK,OAAA,EAClD,GAAI,KAAK,cAAe,CACtB,MAAMC,EAAQ,MAAM,KAAK,cAAc,SAAST,CAAM,EAClDS,IACFD,EAAQ,cAAgB,UAAUC,CAAK,GACnCF,MAAqB,eAAiB,IAE9C,CACA,OAAOC,CACT,CAeA,MAAM,KACJR,EACAU,EACAC,EACkB,CAClB,MAAMJ,EAA8B,CAAE,eAAgB,EAAA,EACtD,GAAI,CACF,OAAO,MAAM,KAAK,SAChBP,EACAU,EACAC,EACAJ,CAAA,CAEJ,OAASJ,EAAO,CAqBd,GACE,KAAK,eACLI,EAAU,gBACVL,EAAoBC,CAAK,EAEzB,YAAK,cAAc,WAAA,EACZ,MAAM,KAAK,SAA2BH,EAAQU,EAAQC,CAAM,EAErE,MAAMR,CACR,CACF,CAEA,MAAc,SACZH,EACAU,EACAC,EACAJ,EACkB,CAClB,MAAMK,EAAW,MAAM,KAAK,eAC1BZ,EACAU,EACAC,EACAJ,CAAA,EAGF,IAAIM,EACJ,GAAI,CACF,MAAMC,EAAelB,EAAgC,IAAII,CAAM,EAC3D,MAAMY,EAAS,KAAA,EACf,MAAMG,EAA0BH,EAAU,KAAK,gBAAgB,EACnEC,EAAe,KAAK,MAAMC,CAAY,CACxC,OAASX,EAAO,CACd,MAAIA,aAAiBjB,EACbiB,EAEF,IAAIjB,EACRK,EAAqB,iBACrB,oDACA,OAAA,CAEJ,CAEA,GACEsB,IAAiB,MACjB,OAAOA,GAAiB,UACxB,MAAM,QAAQA,CAAY,EAE1B,MAAM,IAAI3B,EACRK,EAAqB,iBACrB,sDAAsD,OAAOsB,CAAY,GACzE,OAAA,EAIJ,MAAMG,EAAcH,EAEpB,GAAI,UAAWG,GAAeA,EAAY,OAAS,KAAM,CACvD,MAAMC,EAAMD,EAAY,MAKxB,MAAM,IAAI9B,EACR+B,EAAI,MAAQ1B,EAAqB,iBACjC0B,EAAI,SAAW,oBACf,OACAA,EAAI,IAAA,CAER,CAEA,GAAI,EAAE,WAAYD,GAChB,MAAM,IAAI9B,EACRK,EAAqB,iBACrB,oDACA,OAAA,EAIJ,OAAOyB,EAAY,MACrB,CAYA,MAAM,QACJhB,EACAU,EACAC,EACmB,CACnB,OAAO,KAAK,eAAeX,EAAQU,EAAQC,CAAM,CACnD,CAEA,MAAc,eACZX,EACAU,EACAQ,EACAX,EACmB,CACnB,MAAMY,EAAY,EAAE,KAAK,UACnBC,EAAa,KAAK,aAAapB,CAAM,EAAI,KAAK,QAAU,EAUxDqB,EAAO,KAAK,UAPyB,CACzC,QAAS7B,EACT,OAAAQ,EACA,OAAQ,CAACU,CAAM,EACf,GAAIS,CAAA,CAG6B,EACnC,IAAIG,EAA0B,KAE9B,QAASC,EAAU,EAAGA,GAAWH,EAAYG,IAAW,CAEtD,MAAMC,EAAoB,IAAI,gBACxBC,EAAY,WAChB,IAAMD,EAAkB,MAAA,EACxB,KAAK,OAAA,EAGDE,EAASR,EACXS,EAAkBT,EAAcM,EAAkB,MAAM,EACxD,KACEb,EAASe,EAASA,EAAO,OAASF,EAAkB,OAE1D,GAAI,CAIF,MAAMhB,EAAU,MAAM,KAAK,aAAaR,EAAQO,CAAS,EAEnDK,EAAW,MAAM,MAAM,KAAK,QAAS,CACzC,OAAQ,OACR,QAAAJ,EACA,KAAAa,EACA,OAAAV,CAAA,CACD,EAKD,GAHA,aAAac,CAAS,EACtBC,GAAA,MAAAA,EAAQ,UAEJ,CAACd,EAAS,GAAI,CAKhB,GAHEW,EAAUH,GACVvB,EAA4B,IAAIe,EAAS,MAAM,EAEhC,CACf,MAAMgB,EAAQ,KAAK,WAAa,KAAK,IAAI,EAAGL,CAAO,EACnD,MAAM,KAAK,MAAMK,EAAOV,CAAY,EACpC,QACF,CAEA,MAAM,IAAI,MACR,eAAeN,EAAS,MAAM,IAAIA,EAAS,UAAU,EAAA,CAEzD,CAEA,OAAOA,CACT,OAAST,EAAO,CAMd,GALA,aAAasB,CAAS,EACtBC,GAAA,MAAAA,EAAQ,UACRJ,EAAYnB,aAAiB,MAAQA,EAAQ,IAAI,MAAM,OAAOA,CAAK,CAAC,EAGhEe,GAAA,MAAAA,EAAc,QAChB,MAAM,IAAI,MAAM,iBAAiB,EAGnC,GAAIf,aAAiB,OAASA,EAAM,OAAS,aAAc,CACzD,GAAIoB,EAAUH,EAAY,CACxB,MAAMQ,EAAQ,KAAK,WAAa,KAAK,IAAI,EAAGL,CAAO,EACnD,MAAM,KAAK,MAAMK,EAAOV,CAAY,EACpC,QACF,CACA,MAAM,IAAIhC,EACRK,EAAqB,QACrB,yBAAyB,KAAK,OAAO,OAAO6B,EAAa,CAAC,aAC1D,OAAA,CAEJ,CAGA,GAAIjB,aAAiB,UAAW,CAC9B,GAAIoB,EAAUH,EAAY,CACxB,MAAMQ,EAAQ,KAAK,WAAa,KAAK,IAAI,EAAGL,CAAO,EACnD,MAAM,KAAK,MAAMK,EAAOV,CAAY,EACpC,QACF,CACA,MAAM,IAAIhC,EACRK,EAAqB,QACrB,kBAAkBY,EAAM,OAAO,KAAKiB,EAAa,CAAC,aAClD,OAAA,CAEJ,CAGA,MAAMjB,CACR,CACF,CAEA,MAAMmB,GAAa,IAAI,MAAM,6BAA6B,CAC5D,CAEQ,MAAMO,EAAYlB,EAAqC,CAC7D,OAAO,IAAI,QAAQ,CAACmB,EAASC,IAAW,CACtC,GAAIpB,GAAA,MAAAA,EAAQ,QAAS,CACnBoB,EAAO,IAAI,MAAM,iBAAiB,CAAC,EACnC,MACF,CACA,MAAMN,EAAY,WAAW,IAAM,CACjCd,GAAA,MAAAA,EAAQ,oBAAoB,QAASqB,GACrCF,EAAA,CACF,EAAGD,CAAE,EACCG,EAAU,IAAM,CACpB,aAAaP,CAAS,EACtBM,EAAO,IAAI,MAAM,iBAAiB,CAAC,CACrC,EACApB,GAAA,MAAAA,EAAQ,iBAAiB,QAASqB,EAAS,CAAE,KAAM,IACrD,CAAC,CACH,CAEA,YAAqB,CACnB,OAAO,KAAK,OACd,CACF,CAaA,SAASL,EAAkBM,EAAgBC,EAA8B,CACvE,GAAID,EAAE,QAAS,MAAO,CAAE,OAAQA,EAAG,QAAS,IAAM,CAAC,CAAA,EACnD,GAAIC,EAAE,QAAS,MAAO,CAAE,OAAQA,EAAG,QAAS,IAAM,CAAC,CAAA,EAEnD,MAAMC,EAAa,IAAI,gBACjBC,EAAW,IAAM,CACrBF,EAAE,oBAAoB,QAASG,CAAQ,EACvCF,EAAW,MAAA,CACb,EACME,EAAW,IAAM,CACrBJ,EAAE,oBAAoB,QAASG,CAAQ,EACvCD,EAAW,MAAA,CACb,EACAF,EAAE,iBAAiB,QAASG,EAAU,CAAE,KAAM,GAAM,EACpDF,EAAE,iBAAiB,QAASG,EAAU,CAAE,KAAM,GAAM,EAEpD,MAAMC,EAAU,IAAM,CACpBL,EAAE,oBAAoB,QAASG,CAAQ,EACvCF,EAAE,oBAAoB,QAASG,CAAQ,CACzC,EAEA,MAAO,CAAE,OAAQF,EAAW,OAAQ,QAAAG,CAAA,CACtC,CAEA,eAAevB,EACbH,EACA2B,EACiB,CACjB,MAAMC,EAAgB5B,EAAS,QAAQ,IAAI,gBAAgB,EAC3D,GAAI4B,IAAkB,KAAM,CAC1B,MAAMC,EAAsB,OAAOD,CAAa,EAChD,GACE,OAAO,SAASC,CAAmB,GACnCA,EAAsBF,EAEtB,MAAMG,EAAsBH,CAAQ,CAExC,CAEA,GAAI,CAAC3B,EAAS,KACZ,MAAO,GAGT,MAAM+B,EAAS/B,EAAS,KAAK,UAAA,EACvBgC,EAAU,IAAI,YACpB,IAAIC,EAAa,EACb/B,EAAe,GAEnB,GAAI,CACF,OAAS,CACP,KAAM,CAAE,KAAAgC,EAAM,MAAAC,CAAA,EAAU,MAAMJ,EAAO,KAAA,EACrC,GAAIG,EAAM,MACV,GAAKC,EAGL,IADAF,GAAcE,EAAM,WAChBF,EAAaN,EACf,YAAMI,EAAO,OAAA,EACPD,EAAsBH,CAAQ,EAEtCzB,GAAgB8B,EAAQ,OAAOG,EAAO,CAAE,OAAQ,GAAM,EACxD,CACF,QAAA,CACEJ,EAAO,YAAA,CACT,CAEA,OAAO7B,EAAe8B,EAAQ,OAAA,CAChC,CAEA,SAASF,EAAsBH,EAAgC,CAC7D,OAAO,IAAIrD,EACTK,EAAqB,mBACrB,6CAA6CgD,CAAQ,SACrD,OAAA,CAEJ"}

package/dist/{onChainBtcPubkey-BXry_CM4.cjs → onChainBtcPubkey-BlzxYImF.cjs}

@@ -1,2 +1,2 @@
-"use strict";const x=require("./sha2-DI0-0SHr.cjs"),d=require("viem");function E(r,t){const e=r.startsWith("0x")?r.slice(2):r;if(e.length===0||e.length%2!==0)throw new Error(`${t} must be non-empty, even-length hex`);if(!/^[0-9a-fA-F]+$/.test(e))throw new Error(`${t} contains non-hex characters`);const s=new Uint8Array(e.length/2);for(let i=0;i<s.length;i++)s[i]=Number.parseInt(e.slice(i*2,i*2+2),16);return s}function m(r){return Array.from(r,t=>t.toString(16).padStart(2,"0")).join("")}function y(r){const t=new Uint8Array(r.reduce((s,i)=>s+i.length,0));let e=0;for(const s of r)t.set(s,e),e+=s.length;return t}function B(r){let t=0;const e=(n,f)=>{if(!Number.isSafeInteger(n)||n<0)throw new Error(`Invalid ${f} length ${n}`);if(t+n>r.length)throw new Error(`Truncated Bitcoin transaction while reading ${f}`);const c=r.slice(t,t+n);return t+=n,c},s=(n,f)=>{const c=e(n,f);let o=0n;for(let l=c.length-1;l>=0;l--)o=o<<8n|BigInt(c[l]);return o},i=n=>{const f=t,c=e(1,n)[0];let o;if(c<253)o=BigInt(c);else if(c===253){if(o=s(2,n),o<0xfdn)throw new Error(`Non-canonical ${n}`)}else if(c===254){if(o=s(4,n),o<=0xffffn)throw new Error(`Non-canonical ${n}`)}else if(o=s(8,n),o<=0xffffffffn)throw new Error(`Non-canonical ${n}`);if(o>BigInt(Number.MAX_SAFE_INTEGER))throw new Error(`${n} exceeds JavaScript's safe integer range`);return{encoded:r.slice(f,t),value:Number(o)}},a=e(4,"version"),p=r[t]===0&&r[t+1]===1;p&&(t+=2);const h=i("input count"),w=[];for(let n=0;n<h.value;n++){const f=t;e(32,`input ${n} previous transaction hash`),e(4,`input ${n} previous output index`);const c=i(`input ${n} script length`);e(c.value,`input ${n} script`),e(4,`input ${n} sequence`),w.push(r.slice(f,t))}const $=i("output count"),g=[];for(let n=0;n<$.value;n++){const f=t;e(8,`output ${n} value`);const c=i(`output ${n} script length`);e(c.value,`output ${n} script`),g.push(r.slice(f,t))}if(p){let n=!1;for(let f=0;f<h.value;f++){const c=i(`input ${f} witness item count`);n||(n=c.value>0);for(let o=0;o<c.value;o++){const l=i(`input ${f} witness item ${o} length`);e(l.value,`input ${f} witness item ${o}`)}}if(!n)throw new Error("Bitcoin transaction has superfluous witness marker")}const v=e(4,"locktime");if(t!==r.length)throw new Error(`Bitcoin transaction has ${r.length-t} trailing byte(s)`);return y([a,h.encoded,...w,$.encoded,...g,v])}function C(r){const t=B(E(r,"transactionHex")),e=x.sha256(x.sha256(t));return e.reverse(),`0x${m(e)}`}function I(r,t){const e=r.startsWith("0x")?r:`0x${r}`;if(!/^0x[0-9a-fA-F]{64}$/.test(e))throw new Error("peginTxHash must be a 32-byte hex value");const s=t.startsWith("0x")?t:`0x${t}`;if(!d.isAddress(s,{strict:!0}))throw new Error(`Invalid depositor Ethereum address: ${t}`);return d.keccak256(d.encodeAbiParameters([{type:"bytes32"},{type:"address"}],[e,s])).slice(2)}const u=0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2fn,k=7n;function P(r,t,e){let s=1n,i=r%e,a=t;for(;a>0n;)(a&1n)===1n&&(s=s*i%e),i=i*i%e,a>>=1n;return s}function A(r){const t=BigInt(`0x${r}`);if(t>=u)return!1;const s=(t*t%u*t%u+k)%u,i=P(s,u+1n>>2n,u);return i*i%u===s}function S(r,t){const e=r.toLowerCase();if(!/^0x[0-9a-f]{64}$/.test(e))throw new Error(`${t} returned an unexpected value (length ${e.length}, prefix "${e.slice(0,2)}")`);const s=e.slice(2);if(!A(s))throw new Error(`${t} returned a value that is not on the secp256k1 curve`);return s}exports.assertOnChainBtcPubkey=S;exports.calculateBtcTxHash=C;exports.derivePeginVaultId=I;
-//# sourceMappingURL=onChainBtcPubkey-BXry_CM4.cjs.map
+"use strict";const x=require("./sha2-Ce6KewYx.cjs"),d=require("viem");function E(r,t){const e=r.startsWith("0x")?r.slice(2):r;if(e.length===0||e.length%2!==0)throw new Error(`${t} must be non-empty, even-length hex`);if(!/^[0-9a-fA-F]+$/.test(e))throw new Error(`${t} contains non-hex characters`);const s=new Uint8Array(e.length/2);for(let i=0;i<s.length;i++)s[i]=Number.parseInt(e.slice(i*2,i*2+2),16);return s}function m(r){return Array.from(r,t=>t.toString(16).padStart(2,"0")).join("")}function y(r){const t=new Uint8Array(r.reduce((s,i)=>s+i.length,0));let e=0;for(const s of r)t.set(s,e),e+=s.length;return t}function B(r){let t=0;const e=(n,f)=>{if(!Number.isSafeInteger(n)||n<0)throw new Error(`Invalid ${f} length ${n}`);if(t+n>r.length)throw new Error(`Truncated Bitcoin transaction while reading ${f}`);const c=r.slice(t,t+n);return t+=n,c},s=(n,f)=>{const c=e(n,f);let o=0n;for(let l=c.length-1;l>=0;l--)o=o<<8n|BigInt(c[l]);return o},i=n=>{const f=t,c=e(1,n)[0];let o;if(c<253)o=BigInt(c);else if(c===253){if(o=s(2,n),o<0xfdn)throw new Error(`Non-canonical ${n}`)}else if(c===254){if(o=s(4,n),o<=0xffffn)throw new Error(`Non-canonical ${n}`)}else if(o=s(8,n),o<=0xffffffffn)throw new Error(`Non-canonical ${n}`);if(o>BigInt(Number.MAX_SAFE_INTEGER))throw new Error(`${n} exceeds JavaScript's safe integer range`);return{encoded:r.slice(f,t),value:Number(o)}},a=e(4,"version"),p=r[t]===0&&r[t+1]===1;p&&(t+=2);const h=i("input count"),w=[];for(let n=0;n<h.value;n++){const f=t;e(32,`input ${n} previous transaction hash`),e(4,`input ${n} previous output index`);const c=i(`input ${n} script length`);e(c.value,`input ${n} script`),e(4,`input ${n} sequence`),w.push(r.slice(f,t))}const $=i("output count"),g=[];for(let n=0;n<$.value;n++){const f=t;e(8,`output ${n} value`);const c=i(`output ${n} script length`);e(c.value,`output ${n} script`),g.push(r.slice(f,t))}if(p){let n=!1;for(let f=0;f<h.value;f++){const c=i(`input ${f} witness item count`);n||(n=c.value>0);for(let o=0;o<c.value;o++){const l=i(`input ${f} witness item ${o} length`);e(l.value,`input ${f} witness item ${o}`)}}if(!n)throw new Error("Bitcoin transaction has superfluous witness marker")}const v=e(4,"locktime");if(t!==r.length)throw new Error(`Bitcoin transaction has ${r.length-t} trailing byte(s)`);return y([a,h.encoded,...w,$.encoded,...g,v])}function C(r){const t=B(E(r,"transactionHex")),e=x.sha256(x.sha256(t));return e.reverse(),`0x${m(e)}`}function I(r,t){const e=r.startsWith("0x")?r:`0x${r}`;if(!/^0x[0-9a-fA-F]{64}$/.test(e))throw new Error("peginTxHash must be a 32-byte hex value");const s=t.startsWith("0x")?t:`0x${t}`;if(!d.isAddress(s,{strict:!0}))throw new Error(`Invalid depositor Ethereum address: ${t}`);return d.keccak256(d.encodeAbiParameters([{type:"bytes32"},{type:"address"}],[e,s])).slice(2)}const u=0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2fn,k=7n;function P(r,t,e){let s=1n,i=r%e,a=t;for(;a>0n;)(a&1n)===1n&&(s=s*i%e),i=i*i%e,a>>=1n;return s}function A(r){const t=BigInt(`0x${r}`);if(t>=u)return!1;const s=(t*t%u*t%u+k)%u,i=P(s,u+1n>>2n,u);return i*i%u===s}function S(r,t){const e=r.toLowerCase();if(!/^0x[0-9a-f]{64}$/.test(e))throw new Error(`${t} returned an unexpected value (length ${e.length}, prefix "${e.slice(0,2)}")`);const s=e.slice(2);if(!A(s))throw new Error(`${t} returned a value that is not on the secp256k1 curve`);return s}exports.assertOnChainBtcPubkey=S;exports.calculateBtcTxHash=C;exports.derivePeginVaultId=I;
+//# sourceMappingURL=onChainBtcPubkey-BlzxYImF.cjs.map

package/dist/{onChainBtcPubkey-BXry_CM4.cjs.map → onChainBtcPubkey-BlzxYImF.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"onChainBtcPubkey-BXry_CM4.cjs","sources":["../src/tbv/core/clients/eth/pegin-transaction.ts","../src/tbv/core/clients/eth/onChainBtcPubkey.ts"],"sourcesContent":["/**\n * Dependency-free Bitcoin txid and vault-ID helpers for Ethereum-only clients.\n * Transaction hex and vault-ID inputs accept an optional `0x` prefix.\n * Depositor addresses use strict EIP-55 validation.\n * Txids use a `0x` prefix. Vault IDs use no prefix. Both use lowercase hex.\n */\n\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport {\n  encodeAbiParameters,\n  isAddress,\n  keccak256,\n  type Address,\n  type Hex,\n} from \"viem\";\n\n/** Decode an optional-prefixed, even-length hex string. */\nfunction decodeHex(value: string, label: string): Uint8Array {\n  const clean = value.startsWith(\"0x\") ? value.slice(2) : value;\n  if (clean.length === 0 || clean.length % 2 !== 0) {\n    throw new Error(`${label} must be non-empty, even-length hex`);\n  }\n  if (!/^[0-9a-fA-F]+$/.test(clean)) {\n    throw new Error(`${label} contains non-hex characters`);\n  }\n\n  const bytes = new Uint8Array(clean.length / 2);\n  for (let i = 0; i < bytes.length; i++) {\n    bytes[i] = Number.parseInt(clean.slice(i * 2, i * 2 + 2), 16);\n  }\n  return bytes;\n}\n\n/** Encode bytes as lowercase hex without a prefix. */\nfunction encodeHex(bytes: Uint8Array): string {\n  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\")).join(\n    \"\",\n  );\n}\n\n/** Concatenate byte chunks without a buffer dependency. */\nfunction concatBytes(chunks: readonly Uint8Array[]): Uint8Array {\n  const result = new Uint8Array(\n    chunks.reduce((length, chunk) => length + chunk.length, 0),\n  );\n  let offset = 0;\n  for (const chunk of chunks) {\n    result.set(chunk, offset);\n    offset += chunk.length;\n  }\n  return result;\n}\n\n/**\n * Parse enough of Bitcoin's consensus transaction encoding to serialize the\n * no-witness form used for txid calculation. Every length is bounds-checked;\n * malformed/trailing data is rejected rather than hashed as an opaque blob.\n */\nfunction serializeWithoutWitness(transaction: Uint8Array): Uint8Array {\n  let offset = 0;\n\n  const take = (length: number, label: string): Uint8Array => {\n    if (!Number.isSafeInteger(length) || length < 0) {\n      throw new Error(`Invalid ${label} length ${length}`);\n    }\n    if (offset + length > transaction.length) {\n      throw new Error(`Truncated Bitcoin transaction while reading ${label}`);\n    }\n    const value = transaction.slice(offset, offset + length);\n    offset += length;\n    return value;\n  };\n\n  const readLittleEndian = (length: number, label: string): bigint => {\n    const bytes = take(length, label);\n    let value = 0n;\n    for (let i = bytes.length - 1; i >= 0; i--) {\n      value = (value << 8n) | BigInt(bytes[i]);\n    }\n    return value;\n  };\n\n  const readCompactSize = (\n    label: string,\n  ): { encoded: Uint8Array; value: number } => {\n    const start = offset;\n    const prefix = take(1, label)[0];\n    let value: bigint;\n    if (prefix < 0xfd) {\n      value = BigInt(prefix);\n    } else if (prefix === 0xfd) {\n      value = readLittleEndian(2, label);\n      if (value < 0xfdn) throw new Error(`Non-canonical ${label}`);\n    } else if (prefix === 0xfe) {\n      value = readLittleEndian(4, label);\n      if (value <= 0xffffn) throw new Error(`Non-canonical ${label}`);\n    } else {\n      value = readLittleEndian(8, label);\n      if (value <= 0xffffffffn) throw new Error(`Non-canonical ${label}`);\n    }\n    if (value > BigInt(Number.MAX_SAFE_INTEGER)) {\n      throw new Error(`${label} exceeds JavaScript's safe integer range`);\n    }\n    return {\n      encoded: transaction.slice(start, offset),\n      value: Number(value),\n    };\n  };\n\n  const version = take(4, \"version\");\n  const hasWitness =\n    transaction[offset] === 0x00 && transaction[offset + 1] === 0x01;\n  if (hasWitness) offset += 2;\n\n  const inputCount = readCompactSize(\"input count\");\n  const inputs: Uint8Array[] = [];\n  for (let i = 0; i < inputCount.value; i++) {\n    const start = offset;\n    take(32, `input ${i} previous transaction hash`);\n    take(4, `input ${i} previous output index`);\n    const scriptLength = readCompactSize(`input ${i} script length`);\n    take(scriptLength.value, `input ${i} script`);\n    take(4, `input ${i} sequence`);\n    inputs.push(transaction.slice(start, offset));\n  }\n\n  const outputCount = readCompactSize(\"output count\");\n  const outputs: Uint8Array[] = [];\n  for (let i = 0; i < outputCount.value; i++) {\n    const start = offset;\n    take(8, `output ${i} value`);\n    const scriptLength = readCompactSize(`output ${i} script length`);\n    take(scriptLength.value, `output ${i} script`);\n    outputs.push(transaction.slice(start, offset));\n  }\n\n  if (hasWitness) {\n    let hasWitnessData = false;\n    for (let i = 0; i < inputCount.value; i++) {\n      const itemCount = readCompactSize(`input ${i} witness item count`);\n      hasWitnessData ||= itemCount.value > 0;\n      for (let j = 0; j < itemCount.value; j++) {\n        const itemLength = readCompactSize(\n          `input ${i} witness item ${j} length`,\n        );\n        take(itemLength.value, `input ${i} witness item ${j}`);\n      }\n    }\n    if (!hasWitnessData) {\n      throw new Error(\"Bitcoin transaction has superfluous witness marker\");\n    }\n  }\n\n  const locktime = take(4, \"locktime\");\n  if (offset !== transaction.length) {\n    throw new Error(\n      `Bitcoin transaction has ${transaction.length - offset} trailing byte(s)`,\n    );\n  }\n\n  return concatBytes([\n    version,\n    inputCount.encoded,\n    ...inputs,\n    outputCount.encoded,\n    ...outputs,\n    locktime,\n  ]);\n}\n\n/** Calculate a Bitcoin txid without importing bitcoinjs-lib. */\nexport function calculateBtcTxHash(transactionHex: string): Hex {\n  const serialized = serializeWithoutWitness(\n    decodeHex(transactionHex, \"transactionHex\"),\n  );\n  const digest = sha256(sha256(serialized));\n  digest.reverse();\n  return `0x${encodeHex(digest)}`;\n}\n\n/**\n * Derive the Solidity vault ID without loading the Rust/WASM package.\n *\n * Inputs accept an optional `0x` prefix to match the current PeginManager\n * call sites. Address validation stays strict: lowercase and valid EIP-55\n * addresses pass, while uppercase and incorrectly checksummed mixed-case\n * addresses fail. The synchronous result is lowercase hex without a prefix,\n * matching the WASM helper that this function replaces.\n */\nexport function derivePeginVaultId(\n  peginTxHash: string,\n  depositor: string,\n): string {\n  const normalizedPeginTxHash = peginTxHash.startsWith(\"0x\")\n    ? peginTxHash\n    : `0x${peginTxHash}`;\n  if (!/^0x[0-9a-fA-F]{64}$/.test(normalizedPeginTxHash)) {\n    throw new Error(\"peginTxHash must be a 32-byte hex value\");\n  }\n  const normalizedDepositor = depositor.startsWith(\"0x\")\n    ? depositor\n    : `0x${depositor}`;\n  if (!isAddress(normalizedDepositor, { strict: true })) {\n    throw new Error(`Invalid depositor Ethereum address: ${depositor}`);\n  }\n  return keccak256(\n    encodeAbiParameters(\n      [{ type: \"bytes32\" }, { type: \"address\" }],\n      [normalizedPeginTxHash as Hex, normalizedDepositor as Address],\n    ),\n  ).slice(2);\n}\n","/**\n * The single validator that mints {@link OnChainBtcPubkey}.\n *\n * Extracted from `ViemVaultRegistryReader.getVaultProviderGenesisBtcPubKey` so that\n * RFC-006 operation-key resolution can produce branded keys through exactly\n * the same checks, rather than casting past the brand. Every producer of an\n * `OnChainBtcPubkey` must go through here.\n */\n\nimport type { Hex } from \"viem\";\n\nimport type { OnChainBtcPubkey } from \"./types\";\n\n/** secp256k1's base-field prime, `2^256 - 2^32 - 977`. */\nconst SECP256K1_FIELD_PRIME =\n  0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2fn;\n\n/** secp256k1's curve coefficient `b`, from `y^2 = x^3 + b`. */\nconst SECP256K1_CURVE_B = 7n;\n\n/** Modular exponentiation without a crypto-library dependency. */\nfunction modPow(base: bigint, exponent: bigint, modulus: bigint): bigint {\n  let result = 1n;\n  let factor = base % modulus;\n  let remaining = exponent;\n\n  while (remaining > 0n) {\n    if ((remaining & 1n) === 1n) {\n      result = (result * factor) % modulus;\n    }\n    factor = (factor * factor) % modulus;\n    remaining >>= 1n;\n  }\n\n  return result;\n}\n\n/**\n * secp256k1's field prime is congruent to 3 mod 4, so an x-coordinate is on\n * the curve iff `(x^3 + 7)^((p + 1) / 4)` squares back to `x^3 + 7` modulo\n * p. This is the same curve-membership condition used by x-only key parsers;\n * it deliberately does not merely validate length/range.\n * `x^3 + 7` cannot be zero because `-7` is not a cubic residue in this field,\n * so the zero square-root edge case is unreachable.\n */\nfunction isSecp256k1XCoordinate(value: string): boolean {\n  const x = BigInt(`0x${value}`);\n  if (x >= SECP256K1_FIELD_PRIME) return false;\n\n  const xCubed =\n    (((x * x) % SECP256K1_FIELD_PRIME) * x) % SECP256K1_FIELD_PRIME;\n  const curveValue = (xCubed + SECP256K1_CURVE_B) % SECP256K1_FIELD_PRIME;\n  const y = modPow(\n    curveValue,\n    (SECP256K1_FIELD_PRIME + 1n) >> 2n,\n    SECP256K1_FIELD_PRIME,\n  );\n\n  return (y * y) % SECP256K1_FIELD_PRIME === curveValue;\n}\n\n/**\n * Validate a registry-returned `bytes32` as an x-only BTC pubkey and mint the\n * brand. Checks length, hex form, and secp256k1 curve membership. Returns\n * 64-char lowercase hex without the `0x` prefix.\n *\n * `label` identifies the read site in error messages (e.g.\n * `getOperationBtcKeyAtEpoch (vp=0x…, epoch=0)`), so a failure names which\n * participant and which getter produced it.\n *\n * A zero hash fails the curve check, so an unregistered operator or an epoch\n * with no bonded key surfaces as an error rather than a silent all-zero key.\n */\nexport function assertOnChainBtcPubkey(\n  value: Hex,\n  label: string,\n): OnChainBtcPubkey {\n  const lowered = value.toLowerCase();\n  if (!/^0x[0-9a-f]{64}$/.test(lowered)) {\n    throw new Error(\n      `${label} returned an unexpected value (length ${lowered.length}, prefix \"${lowered.slice(0, 2)}\")`,\n    );\n  }\n  const stripped = lowered.slice(2);\n  if (!isSecp256k1XCoordinate(stripped)) {\n    throw new Error(\n      `${label} returned a value that is not on the secp256k1 curve`,\n    );\n  }\n  return stripped as OnChainBtcPubkey;\n}\n"],"names":["decodeHex","value","label","clean","bytes","encodeHex","byte","concatBytes","chunks","result","length","chunk","offset","serializeWithoutWitness","transaction","take","readLittleEndian","i","readCompactSize","start","prefix","version","hasWitness","inputCount","inputs","scriptLength","outputCount","outputs","hasWitnessData","itemCount","j","itemLength","locktime","calculateBtcTxHash","transactionHex","serialized","digest","sha256","derivePeginVaultId","peginTxHash","depositor","normalizedPeginTxHash","normalizedDepositor","isAddress","keccak256","encodeAbiParameters","SECP256K1_FIELD_PRIME","SECP256K1_CURVE_B","modPow","base","exponent","modulus","factor","remaining","isSecp256k1XCoordinate","x","curveValue","y","assertOnChainBtcPubkey","lowered","stripped"],"mappings":"sEAiBA,SAASA,EAAUC,EAAeC,EAA2B,CAC3D,MAAMC,EAAQF,EAAM,WAAW,IAAI,EAAIA,EAAM,MAAM,CAAC,EAAIA,EACxD,GAAIE,EAAM,SAAW,GAAKA,EAAM,OAAS,IAAM,EAC7C,MAAM,IAAI,MAAM,GAAGD,CAAK,qCAAqC,EAE/D,GAAI,CAAC,iBAAiB,KAAKC,CAAK,EAC9B,MAAM,IAAI,MAAM,GAAGD,CAAK,8BAA8B,EAGxD,MAAME,EAAQ,IAAI,WAAWD,EAAM,OAAS,CAAC,EAC7C,QAAS,EAAI,EAAG,EAAIC,EAAM,OAAQ,IAChCA,EAAM,CAAC,EAAI,OAAO,SAASD,EAAM,MAAM,EAAI,EAAG,EAAI,EAAI,CAAC,EAAG,EAAE,EAE9D,OAAOC,CACT,CAGA,SAASC,EAAUD,EAA2B,CAC5C,OAAO,MAAM,KAAKA,EAAQE,GAASA,EAAK,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KACrE,EAAA,CAEJ,CAGA,SAASC,EAAYC,EAA2C,CAC9D,MAAMC,EAAS,IAAI,WACjBD,EAAO,OAAO,CAACE,EAAQC,IAAUD,EAASC,EAAM,OAAQ,CAAC,CAAA,EAE3D,IAAIC,EAAS,EACb,UAAWD,KAASH,EAClBC,EAAO,IAAIE,EAAOC,CAAM,EACxBA,GAAUD,EAAM,OAElB,OAAOF,CACT,CAOA,SAASI,EAAwBC,EAAqC,CACpE,IAAIF,EAAS,EAEb,MAAMG,EAAO,CAACL,EAAgBR,IAA8B,CAC1D,GAAI,CAAC,OAAO,cAAcQ,CAAM,GAAKA,EAAS,EAC5C,MAAM,IAAI,MAAM,WAAWR,CAAK,WAAWQ,CAAM,EAAE,EAErD,GAAIE,EAASF,EAASI,EAAY,OAChC,MAAM,IAAI,MAAM,+CAA+CZ,CAAK,EAAE,EAExE,MAAMD,EAAQa,EAAY,MAAMF,EAAQA,EAASF,CAAM,EACvD,OAAAE,GAAUF,EACHT,CACT,EAEMe,EAAmB,CAACN,EAAgBR,IAA0B,CAClE,MAAME,EAAQW,EAAKL,EAAQR,CAAK,EAChC,IAAID,EAAQ,GACZ,QAASgB,EAAIb,EAAM,OAAS,EAAGa,GAAK,EAAGA,IACrChB,EAASA,GAAS,GAAM,OAAOG,EAAMa,CAAC,CAAC,EAEzC,OAAOhB,CACT,EAEMiB,EACJhB,GAC2C,CAC3C,MAAMiB,EAAQP,EACRQ,EAASL,EAAK,EAAGb,CAAK,EAAE,CAAC,EAC/B,IAAID,EACJ,GAAImB,EAAS,IACXnB,EAAQ,OAAOmB,CAAM,UACZA,IAAW,KAEpB,GADAnB,EAAQe,EAAiB,EAAGd,CAAK,EAC7BD,EAAQ,MAAO,MAAM,IAAI,MAAM,iBAAiBC,CAAK,EAAE,UAClDkB,IAAW,KAEpB,GADAnB,EAAQe,EAAiB,EAAGd,CAAK,EAC7BD,GAAS,QAAS,MAAM,IAAI,MAAM,iBAAiBC,CAAK,EAAE,UAE9DD,EAAQe,EAAiB,EAAGd,CAAK,EAC7BD,GAAS,YAAa,MAAM,IAAI,MAAM,iBAAiBC,CAAK,EAAE,EAEpE,GAAID,EAAQ,OAAO,OAAO,gBAAgB,EACxC,MAAM,IAAI,MAAM,GAAGC,CAAK,0CAA0C,EAEpE,MAAO,CACL,QAASY,EAAY,MAAMK,EAAOP,CAAM,EACxC,MAAO,OAAOX,CAAK,CAAA,CAEvB,EAEMoB,EAAUN,EAAK,EAAG,SAAS,EAC3BO,EACJR,EAAYF,CAAM,IAAM,GAAQE,EAAYF,EAAS,CAAC,IAAM,EAC1DU,IAAYV,GAAU,GAE1B,MAAMW,EAAaL,EAAgB,aAAa,EAC1CM,EAAuB,CAAA,EAC7B,QAASP,EAAI,EAAGA,EAAIM,EAAW,MAAON,IAAK,CACzC,MAAME,EAAQP,EACdG,EAAK,GAAI,SAASE,CAAC,4BAA4B,EAC/CF,EAAK,EAAG,SAASE,CAAC,wBAAwB,EAC1C,MAAMQ,EAAeP,EAAgB,SAASD,CAAC,gBAAgB,EAC/DF,EAAKU,EAAa,MAAO,SAASR,CAAC,SAAS,EAC5CF,EAAK,EAAG,SAASE,CAAC,WAAW,EAC7BO,EAAO,KAAKV,EAAY,MAAMK,EAAOP,CAAM,CAAC,CAC9C,CAEA,MAAMc,EAAcR,EAAgB,cAAc,EAC5CS,EAAwB,CAAA,EAC9B,QAASV,EAAI,EAAGA,EAAIS,EAAY,MAAOT,IAAK,CAC1C,MAAME,EAAQP,EACdG,EAAK,EAAG,UAAUE,CAAC,QAAQ,EAC3B,MAAMQ,EAAeP,EAAgB,UAAUD,CAAC,gBAAgB,EAChEF,EAAKU,EAAa,MAAO,UAAUR,CAAC,SAAS,EAC7CU,EAAQ,KAAKb,EAAY,MAAMK,EAAOP,CAAM,CAAC,CAC/C,CAEA,GAAIU,EAAY,CACd,IAAIM,EAAiB,GACrB,QAASX,EAAI,EAAGA,EAAIM,EAAW,MAAON,IAAK,CACzC,MAAMY,EAAYX,EAAgB,SAASD,CAAC,qBAAqB,EACjEW,MAAmBC,EAAU,MAAQ,GACrC,QAASC,EAAI,EAAGA,EAAID,EAAU,MAAOC,IAAK,CACxC,MAAMC,EAAab,EACjB,SAASD,CAAC,iBAAiBa,CAAC,SAAA,EAE9Bf,EAAKgB,EAAW,MAAO,SAASd,CAAC,iBAAiBa,CAAC,EAAE,CACvD,CACF,CACA,GAAI,CAACF,EACH,MAAM,IAAI,MAAM,oDAAoD,CAExE,CAEA,MAAMI,EAAWjB,EAAK,EAAG,UAAU,EACnC,GAAIH,IAAWE,EAAY,OACzB,MAAM,IAAI,MACR,2BAA2BA,EAAY,OAASF,CAAM,mBAAA,EAI1D,OAAOL,EAAY,CACjBc,EACAE,EAAW,QACX,GAAGC,EACHE,EAAY,QACZ,GAAGC,EACHK,CAAA,CACD,CACH,CAGO,SAASC,EAAmBC,EAA6B,CAC9D,MAAMC,EAAatB,EACjBb,EAAUkC,EAAgB,gBAAgB,CAAA,EAEtCE,EAASC,EAAAA,OAAOA,EAAAA,OAAOF,CAAU,CAAC,EACxC,OAAAC,EAAO,QAAA,EACA,KAAK/B,EAAU+B,CAAM,CAAC,EAC/B,CAWO,SAASE,EACdC,EACAC,EACQ,CACR,MAAMC,EAAwBF,EAAY,WAAW,IAAI,EACrDA,EACA,KAAKA,CAAW,GACpB,GAAI,CAAC,sBAAsB,KAAKE,CAAqB,EACnD,MAAM,IAAI,MAAM,yCAAyC,EAE3D,MAAMC,EAAsBF,EAAU,WAAW,IAAI,EACjDA,EACA,KAAKA,CAAS,GAClB,GAAI,CAACG,EAAAA,UAAUD,EAAqB,CAAE,OAAQ,EAAA,CAAM,EAClD,MAAM,IAAI,MAAM,uCAAuCF,CAAS,EAAE,EAEpE,OAAOI,EAAAA,UACLC,EAAAA,oBACE,CAAC,CAAE,KAAM,SAAA,EAAa,CAAE,KAAM,UAAW,EACzC,CAACJ,EAA8BC,CAA8B,CAAA,CAC/D,EACA,MAAM,CAAC,CACX,CCrMA,MAAMI,EACJ,oEAGIC,EAAoB,GAG1B,SAASC,EAAOC,EAAcC,EAAkBC,EAAyB,CACvE,IAAI1C,EAAS,GACT2C,EAASH,EAAOE,EAChBE,EAAYH,EAEhB,KAAOG,EAAY,KACZA,EAAY,MAAQ,KACvB5C,EAAUA,EAAS2C,EAAUD,GAE/BC,EAAUA,EAASA,EAAUD,EAC7BE,IAAc,GAGhB,OAAO5C,CACT,CAUA,SAAS6C,EAAuBrD,EAAwB,CACtD,MAAMsD,EAAI,OAAO,KAAKtD,CAAK,EAAE,EAC7B,GAAIsD,GAAKT,EAAuB,MAAO,GAIvC,MAAMU,GADDD,EAAIA,EAAKT,EAAyBS,EAAKT,EACfC,GAAqBD,EAC5CW,EAAIT,EACRQ,EACCV,EAAwB,IAAO,GAChCA,CAAA,EAGF,OAAQW,EAAIA,EAAKX,IAA0BU,CAC7C,CAcO,SAASE,EACdzD,EACAC,EACkB,CAClB,MAAMyD,EAAU1D,EAAM,YAAA,EACtB,GAAI,CAAC,mBAAmB,KAAK0D,CAAO,EAClC,MAAM,IAAI,MACR,GAAGzD,CAAK,yCAAyCyD,EAAQ,MAAM,aAAaA,EAAQ,MAAM,EAAG,CAAC,CAAC,IAAA,EAGnG,MAAMC,EAAWD,EAAQ,MAAM,CAAC,EAChC,GAAI,CAACL,EAAuBM,CAAQ,EAClC,MAAM,IAAI,MACR,GAAG1D,CAAK,sDAAA,EAGZ,OAAO0D,CACT"}
+{"version":3,"file":"onChainBtcPubkey-BlzxYImF.cjs","sources":["../src/tbv/core/clients/eth/pegin-transaction.ts","../src/tbv/core/clients/eth/onChainBtcPubkey.ts"],"sourcesContent":["/**\n * Dependency-free Bitcoin txid and vault-ID helpers for Ethereum-only clients.\n * Transaction hex and vault-ID inputs accept an optional `0x` prefix.\n * Depositor addresses use strict EIP-55 validation.\n * Txids use a `0x` prefix. Vault IDs use no prefix. Both use lowercase hex.\n */\n\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport {\n  encodeAbiParameters,\n  isAddress,\n  keccak256,\n  type Address,\n  type Hex,\n} from \"viem\";\n\n/** Decode an optional-prefixed, even-length hex string. */\nfunction decodeHex(value: string, label: string): Uint8Array {\n  const clean = value.startsWith(\"0x\") ? value.slice(2) : value;\n  if (clean.length === 0 || clean.length % 2 !== 0) {\n    throw new Error(`${label} must be non-empty, even-length hex`);\n  }\n  if (!/^[0-9a-fA-F]+$/.test(clean)) {\n    throw new Error(`${label} contains non-hex characters`);\n  }\n\n  const bytes = new Uint8Array(clean.length / 2);\n  for (let i = 0; i < bytes.length; i++) {\n    bytes[i] = Number.parseInt(clean.slice(i * 2, i * 2 + 2), 16);\n  }\n  return bytes;\n}\n\n/** Encode bytes as lowercase hex without a prefix. */\nfunction encodeHex(bytes: Uint8Array): string {\n  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\")).join(\n    \"\",\n  );\n}\n\n/** Concatenate byte chunks without a buffer dependency. */\nfunction concatBytes(chunks: readonly Uint8Array[]): Uint8Array {\n  const result = new Uint8Array(\n    chunks.reduce((length, chunk) => length + chunk.length, 0),\n  );\n  let offset = 0;\n  for (const chunk of chunks) {\n    result.set(chunk, offset);\n    offset += chunk.length;\n  }\n  return result;\n}\n\n/**\n * Parse enough of Bitcoin's consensus transaction encoding to serialize the\n * no-witness form used for txid calculation. Every length is bounds-checked;\n * malformed/trailing data is rejected rather than hashed as an opaque blob.\n */\nfunction serializeWithoutWitness(transaction: Uint8Array): Uint8Array {\n  let offset = 0;\n\n  const take = (length: number, label: string): Uint8Array => {\n    if (!Number.isSafeInteger(length) || length < 0) {\n      throw new Error(`Invalid ${label} length ${length}`);\n    }\n    if (offset + length > transaction.length) {\n      throw new Error(`Truncated Bitcoin transaction while reading ${label}`);\n    }\n    const value = transaction.slice(offset, offset + length);\n    offset += length;\n    return value;\n  };\n\n  const readLittleEndian = (length: number, label: string): bigint => {\n    const bytes = take(length, label);\n    let value = 0n;\n    for (let i = bytes.length - 1; i >= 0; i--) {\n      value = (value << 8n) | BigInt(bytes[i]);\n    }\n    return value;\n  };\n\n  const readCompactSize = (\n    label: string,\n  ): { encoded: Uint8Array; value: number } => {\n    const start = offset;\n    const prefix = take(1, label)[0];\n    let value: bigint;\n    if (prefix < 0xfd) {\n      value = BigInt(prefix);\n    } else if (prefix === 0xfd) {\n      value = readLittleEndian(2, label);\n      if (value < 0xfdn) throw new Error(`Non-canonical ${label}`);\n    } else if (prefix === 0xfe) {\n      value = readLittleEndian(4, label);\n      if (value <= 0xffffn) throw new Error(`Non-canonical ${label}`);\n    } else {\n      value = readLittleEndian(8, label);\n      if (value <= 0xffffffffn) throw new Error(`Non-canonical ${label}`);\n    }\n    if (value > BigInt(Number.MAX_SAFE_INTEGER)) {\n      throw new Error(`${label} exceeds JavaScript's safe integer range`);\n    }\n    return {\n      encoded: transaction.slice(start, offset),\n      value: Number(value),\n    };\n  };\n\n  const version = take(4, \"version\");\n  const hasWitness =\n    transaction[offset] === 0x00 && transaction[offset + 1] === 0x01;\n  if (hasWitness) offset += 2;\n\n  const inputCount = readCompactSize(\"input count\");\n  const inputs: Uint8Array[] = [];\n  for (let i = 0; i < inputCount.value; i++) {\n    const start = offset;\n    take(32, `input ${i} previous transaction hash`);\n    take(4, `input ${i} previous output index`);\n    const scriptLength = readCompactSize(`input ${i} script length`);\n    take(scriptLength.value, `input ${i} script`);\n    take(4, `input ${i} sequence`);\n    inputs.push(transaction.slice(start, offset));\n  }\n\n  const outputCount = readCompactSize(\"output count\");\n  const outputs: Uint8Array[] = [];\n  for (let i = 0; i < outputCount.value; i++) {\n    const start = offset;\n    take(8, `output ${i} value`);\n    const scriptLength = readCompactSize(`output ${i} script length`);\n    take(scriptLength.value, `output ${i} script`);\n    outputs.push(transaction.slice(start, offset));\n  }\n\n  if (hasWitness) {\n    let hasWitnessData = false;\n    for (let i = 0; i < inputCount.value; i++) {\n      const itemCount = readCompactSize(`input ${i} witness item count`);\n      hasWitnessData ||= itemCount.value > 0;\n      for (let j = 0; j < itemCount.value; j++) {\n        const itemLength = readCompactSize(\n          `input ${i} witness item ${j} length`,\n        );\n        take(itemLength.value, `input ${i} witness item ${j}`);\n      }\n    }\n    if (!hasWitnessData) {\n      throw new Error(\"Bitcoin transaction has superfluous witness marker\");\n    }\n  }\n\n  const locktime = take(4, \"locktime\");\n  if (offset !== transaction.length) {\n    throw new Error(\n      `Bitcoin transaction has ${transaction.length - offset} trailing byte(s)`,\n    );\n  }\n\n  return concatBytes([\n    version,\n    inputCount.encoded,\n    ...inputs,\n    outputCount.encoded,\n    ...outputs,\n    locktime,\n  ]);\n}\n\n/** Calculate a Bitcoin txid without importing bitcoinjs-lib. */\nexport function calculateBtcTxHash(transactionHex: string): Hex {\n  const serialized = serializeWithoutWitness(\n    decodeHex(transactionHex, \"transactionHex\"),\n  );\n  const digest = sha256(sha256(serialized));\n  digest.reverse();\n  return `0x${encodeHex(digest)}`;\n}\n\n/**\n * Derive the Solidity vault ID without loading the Rust/WASM package.\n *\n * Inputs accept an optional `0x` prefix to match the current PeginManager\n * call sites. Address validation stays strict: lowercase and valid EIP-55\n * addresses pass, while uppercase and incorrectly checksummed mixed-case\n * addresses fail. The synchronous result is lowercase hex without a prefix,\n * matching the WASM helper that this function replaces.\n */\nexport function derivePeginVaultId(\n  peginTxHash: string,\n  depositor: string,\n): string {\n  const normalizedPeginTxHash = peginTxHash.startsWith(\"0x\")\n    ? peginTxHash\n    : `0x${peginTxHash}`;\n  if (!/^0x[0-9a-fA-F]{64}$/.test(normalizedPeginTxHash)) {\n    throw new Error(\"peginTxHash must be a 32-byte hex value\");\n  }\n  const normalizedDepositor = depositor.startsWith(\"0x\")\n    ? depositor\n    : `0x${depositor}`;\n  if (!isAddress(normalizedDepositor, { strict: true })) {\n    throw new Error(`Invalid depositor Ethereum address: ${depositor}`);\n  }\n  return keccak256(\n    encodeAbiParameters(\n      [{ type: \"bytes32\" }, { type: \"address\" }],\n      [normalizedPeginTxHash as Hex, normalizedDepositor as Address],\n    ),\n  ).slice(2);\n}\n","/**\n * The single validator that mints {@link OnChainBtcPubkey}.\n *\n * Extracted from `ViemVaultRegistryReader.getVaultProviderGenesisBtcPubKey` so that\n * RFC-006 operation-key resolution can produce branded keys through exactly\n * the same checks, rather than casting past the brand. Every producer of an\n * `OnChainBtcPubkey` must go through here.\n */\n\nimport type { Hex } from \"viem\";\n\nimport type { OnChainBtcPubkey } from \"./types\";\n\n/** secp256k1's base-field prime, `2^256 - 2^32 - 977`. */\nconst SECP256K1_FIELD_PRIME =\n  0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2fn;\n\n/** secp256k1's curve coefficient `b`, from `y^2 = x^3 + b`. */\nconst SECP256K1_CURVE_B = 7n;\n\n/** Modular exponentiation without a crypto-library dependency. */\nfunction modPow(base: bigint, exponent: bigint, modulus: bigint): bigint {\n  let result = 1n;\n  let factor = base % modulus;\n  let remaining = exponent;\n\n  while (remaining > 0n) {\n    if ((remaining & 1n) === 1n) {\n      result = (result * factor) % modulus;\n    }\n    factor = (factor * factor) % modulus;\n    remaining >>= 1n;\n  }\n\n  return result;\n}\n\n/**\n * secp256k1's field prime is congruent to 3 mod 4, so an x-coordinate is on\n * the curve iff `(x^3 + 7)^((p + 1) / 4)` squares back to `x^3 + 7` modulo\n * p. This is the same curve-membership condition used by x-only key parsers;\n * it deliberately does not merely validate length/range.\n * `x^3 + 7` cannot be zero because `-7` is not a cubic residue in this field,\n * so the zero square-root edge case is unreachable.\n */\nfunction isSecp256k1XCoordinate(value: string): boolean {\n  const x = BigInt(`0x${value}`);\n  if (x >= SECP256K1_FIELD_PRIME) return false;\n\n  const xCubed =\n    (((x * x) % SECP256K1_FIELD_PRIME) * x) % SECP256K1_FIELD_PRIME;\n  const curveValue = (xCubed + SECP256K1_CURVE_B) % SECP256K1_FIELD_PRIME;\n  const y = modPow(\n    curveValue,\n    (SECP256K1_FIELD_PRIME + 1n) >> 2n,\n    SECP256K1_FIELD_PRIME,\n  );\n\n  return (y * y) % SECP256K1_FIELD_PRIME === curveValue;\n}\n\n/**\n * Validate a registry-returned `bytes32` as an x-only BTC pubkey and mint the\n * brand. Checks length, hex form, and secp256k1 curve membership. Returns\n * 64-char lowercase hex without the `0x` prefix.\n *\n * `label` identifies the read site in error messages (e.g.\n * `getOperationBtcKeyAtEpoch (vp=0x…, epoch=0)`), so a failure names which\n * participant and which getter produced it.\n *\n * A zero hash fails the curve check, so an unregistered operator or an epoch\n * with no bonded key surfaces as an error rather than a silent all-zero key.\n */\nexport function assertOnChainBtcPubkey(\n  value: Hex,\n  label: string,\n): OnChainBtcPubkey {\n  const lowered = value.toLowerCase();\n  if (!/^0x[0-9a-f]{64}$/.test(lowered)) {\n    throw new Error(\n      `${label} returned an unexpected value (length ${lowered.length}, prefix \"${lowered.slice(0, 2)}\")`,\n    );\n  }\n  const stripped = lowered.slice(2);\n  if (!isSecp256k1XCoordinate(stripped)) {\n    throw new Error(\n      `${label} returned a value that is not on the secp256k1 curve`,\n    );\n  }\n  return stripped as OnChainBtcPubkey;\n}\n"],"names":["decodeHex","value","label","clean","bytes","encodeHex","byte","concatBytes","chunks","result","length","chunk","offset","serializeWithoutWitness","transaction","take","readLittleEndian","i","readCompactSize","start","prefix","version","hasWitness","inputCount","inputs","scriptLength","outputCount","outputs","hasWitnessData","itemCount","j","itemLength","locktime","calculateBtcTxHash","transactionHex","serialized","digest","sha256","derivePeginVaultId","peginTxHash","depositor","normalizedPeginTxHash","normalizedDepositor","isAddress","keccak256","encodeAbiParameters","SECP256K1_FIELD_PRIME","SECP256K1_CURVE_B","modPow","base","exponent","modulus","factor","remaining","isSecp256k1XCoordinate","x","curveValue","y","assertOnChainBtcPubkey","lowered","stripped"],"mappings":"sEAiBA,SAASA,EAAUC,EAAeC,EAA2B,CAC3D,MAAMC,EAAQF,EAAM,WAAW,IAAI,EAAIA,EAAM,MAAM,CAAC,EAAIA,EACxD,GAAIE,EAAM,SAAW,GAAKA,EAAM,OAAS,IAAM,EAC7C,MAAM,IAAI,MAAM,GAAGD,CAAK,qCAAqC,EAE/D,GAAI,CAAC,iBAAiB,KAAKC,CAAK,EAC9B,MAAM,IAAI,MAAM,GAAGD,CAAK,8BAA8B,EAGxD,MAAME,EAAQ,IAAI,WAAWD,EAAM,OAAS,CAAC,EAC7C,QAAS,EAAI,EAAG,EAAIC,EAAM,OAAQ,IAChCA,EAAM,CAAC,EAAI,OAAO,SAASD,EAAM,MAAM,EAAI,EAAG,EAAI,EAAI,CAAC,EAAG,EAAE,EAE9D,OAAOC,CACT,CAGA,SAASC,EAAUD,EAA2B,CAC5C,OAAO,MAAM,KAAKA,EAAQE,GAASA,EAAK,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KACrE,EAAA,CAEJ,CAGA,SAASC,EAAYC,EAA2C,CAC9D,MAAMC,EAAS,IAAI,WACjBD,EAAO,OAAO,CAACE,EAAQC,IAAUD,EAASC,EAAM,OAAQ,CAAC,CAAA,EAE3D,IAAIC,EAAS,EACb,UAAWD,KAASH,EAClBC,EAAO,IAAIE,EAAOC,CAAM,EACxBA,GAAUD,EAAM,OAElB,OAAOF,CACT,CAOA,SAASI,EAAwBC,EAAqC,CACpE,IAAIF,EAAS,EAEb,MAAMG,EAAO,CAACL,EAAgBR,IAA8B,CAC1D,GAAI,CAAC,OAAO,cAAcQ,CAAM,GAAKA,EAAS,EAC5C,MAAM,IAAI,MAAM,WAAWR,CAAK,WAAWQ,CAAM,EAAE,EAErD,GAAIE,EAASF,EAASI,EAAY,OAChC,MAAM,IAAI,MAAM,+CAA+CZ,CAAK,EAAE,EAExE,MAAMD,EAAQa,EAAY,MAAMF,EAAQA,EAASF,CAAM,EACvD,OAAAE,GAAUF,EACHT,CACT,EAEMe,EAAmB,CAACN,EAAgBR,IAA0B,CAClE,MAAME,EAAQW,EAAKL,EAAQR,CAAK,EAChC,IAAID,EAAQ,GACZ,QAASgB,EAAIb,EAAM,OAAS,EAAGa,GAAK,EAAGA,IACrChB,EAASA,GAAS,GAAM,OAAOG,EAAMa,CAAC,CAAC,EAEzC,OAAOhB,CACT,EAEMiB,EACJhB,GAC2C,CAC3C,MAAMiB,EAAQP,EACRQ,EAASL,EAAK,EAAGb,CAAK,EAAE,CAAC,EAC/B,IAAID,EACJ,GAAImB,EAAS,IACXnB,EAAQ,OAAOmB,CAAM,UACZA,IAAW,KAEpB,GADAnB,EAAQe,EAAiB,EAAGd,CAAK,EAC7BD,EAAQ,MAAO,MAAM,IAAI,MAAM,iBAAiBC,CAAK,EAAE,UAClDkB,IAAW,KAEpB,GADAnB,EAAQe,EAAiB,EAAGd,CAAK,EAC7BD,GAAS,QAAS,MAAM,IAAI,MAAM,iBAAiBC,CAAK,EAAE,UAE9DD,EAAQe,EAAiB,EAAGd,CAAK,EAC7BD,GAAS,YAAa,MAAM,IAAI,MAAM,iBAAiBC,CAAK,EAAE,EAEpE,GAAID,EAAQ,OAAO,OAAO,gBAAgB,EACxC,MAAM,IAAI,MAAM,GAAGC,CAAK,0CAA0C,EAEpE,MAAO,CACL,QAASY,EAAY,MAAMK,EAAOP,CAAM,EACxC,MAAO,OAAOX,CAAK,CAAA,CAEvB,EAEMoB,EAAUN,EAAK,EAAG,SAAS,EAC3BO,EACJR,EAAYF,CAAM,IAAM,GAAQE,EAAYF,EAAS,CAAC,IAAM,EAC1DU,IAAYV,GAAU,GAE1B,MAAMW,EAAaL,EAAgB,aAAa,EAC1CM,EAAuB,CAAA,EAC7B,QAASP,EAAI,EAAGA,EAAIM,EAAW,MAAON,IAAK,CACzC,MAAME,EAAQP,EACdG,EAAK,GAAI,SAASE,CAAC,4BAA4B,EAC/CF,EAAK,EAAG,SAASE,CAAC,wBAAwB,EAC1C,MAAMQ,EAAeP,EAAgB,SAASD,CAAC,gBAAgB,EAC/DF,EAAKU,EAAa,MAAO,SAASR,CAAC,SAAS,EAC5CF,EAAK,EAAG,SAASE,CAAC,WAAW,EAC7BO,EAAO,KAAKV,EAAY,MAAMK,EAAOP,CAAM,CAAC,CAC9C,CAEA,MAAMc,EAAcR,EAAgB,cAAc,EAC5CS,EAAwB,CAAA,EAC9B,QAASV,EAAI,EAAGA,EAAIS,EAAY,MAAOT,IAAK,CAC1C,MAAME,EAAQP,EACdG,EAAK,EAAG,UAAUE,CAAC,QAAQ,EAC3B,MAAMQ,EAAeP,EAAgB,UAAUD,CAAC,gBAAgB,EAChEF,EAAKU,EAAa,MAAO,UAAUR,CAAC,SAAS,EAC7CU,EAAQ,KAAKb,EAAY,MAAMK,EAAOP,CAAM,CAAC,CAC/C,CAEA,GAAIU,EAAY,CACd,IAAIM,EAAiB,GACrB,QAASX,EAAI,EAAGA,EAAIM,EAAW,MAAON,IAAK,CACzC,MAAMY,EAAYX,EAAgB,SAASD,CAAC,qBAAqB,EACjEW,MAAmBC,EAAU,MAAQ,GACrC,QAASC,EAAI,EAAGA,EAAID,EAAU,MAAOC,IAAK,CACxC,MAAMC,EAAab,EACjB,SAASD,CAAC,iBAAiBa,CAAC,SAAA,EAE9Bf,EAAKgB,EAAW,MAAO,SAASd,CAAC,iBAAiBa,CAAC,EAAE,CACvD,CACF,CACA,GAAI,CAACF,EACH,MAAM,IAAI,MAAM,oDAAoD,CAExE,CAEA,MAAMI,EAAWjB,EAAK,EAAG,UAAU,EACnC,GAAIH,IAAWE,EAAY,OACzB,MAAM,IAAI,MACR,2BAA2BA,EAAY,OAASF,CAAM,mBAAA,EAI1D,OAAOL,EAAY,CACjBc,EACAE,EAAW,QACX,GAAGC,EACHE,EAAY,QACZ,GAAGC,EACHK,CAAA,CACD,CACH,CAGO,SAASC,EAAmBC,EAA6B,CAC9D,MAAMC,EAAatB,EACjBb,EAAUkC,EAAgB,gBAAgB,CAAA,EAEtCE,EAASC,EAAAA,OAAOA,EAAAA,OAAOF,CAAU,CAAC,EACxC,OAAAC,EAAO,QAAA,EACA,KAAK/B,EAAU+B,CAAM,CAAC,EAC/B,CAWO,SAASE,EACdC,EACAC,EACQ,CACR,MAAMC,EAAwBF,EAAY,WAAW,IAAI,EACrDA,EACA,KAAKA,CAAW,GACpB,GAAI,CAAC,sBAAsB,KAAKE,CAAqB,EACnD,MAAM,IAAI,MAAM,yCAAyC,EAE3D,MAAMC,EAAsBF,EAAU,WAAW,IAAI,EACjDA,EACA,KAAKA,CAAS,GAClB,GAAI,CAACG,EAAAA,UAAUD,EAAqB,CAAE,OAAQ,EAAA,CAAM,EAClD,MAAM,IAAI,MAAM,uCAAuCF,CAAS,EAAE,EAEpE,OAAOI,EAAAA,UACLC,EAAAA,oBACE,CAAC,CAAE,KAAM,SAAA,EAAa,CAAE,KAAM,UAAW,EACzC,CAACJ,EAA8BC,CAA8B,CAAA,CAC/D,EACA,MAAM,CAAC,CACX,CCrMA,MAAMI,EACJ,oEAGIC,EAAoB,GAG1B,SAASC,EAAOC,EAAcC,EAAkBC,EAAyB,CACvE,IAAI1C,EAAS,GACT2C,EAASH,EAAOE,EAChBE,EAAYH,EAEhB,KAAOG,EAAY,KACZA,EAAY,MAAQ,KACvB5C,EAAUA,EAAS2C,EAAUD,GAE/BC,EAAUA,EAASA,EAAUD,EAC7BE,IAAc,GAGhB,OAAO5C,CACT,CAUA,SAAS6C,EAAuBrD,EAAwB,CACtD,MAAMsD,EAAI,OAAO,KAAKtD,CAAK,EAAE,EAC7B,GAAIsD,GAAKT,EAAuB,MAAO,GAIvC,MAAMU,GADDD,EAAIA,EAAKT,EAAyBS,EAAKT,EACfC,GAAqBD,EAC5CW,EAAIT,EACRQ,EACCV,EAAwB,IAAO,GAChCA,CAAA,EAGF,OAAQW,EAAIA,EAAKX,IAA0BU,CAC7C,CAcO,SAASE,EACdzD,EACAC,EACkB,CAClB,MAAMyD,EAAU1D,EAAM,YAAA,EACtB,GAAI,CAAC,mBAAmB,KAAK0D,CAAO,EAClC,MAAM,IAAI,MACR,GAAGzD,CAAK,yCAAyCyD,EAAQ,MAAM,aAAaA,EAAQ,MAAM,EAAG,CAAC,CAAC,IAAA,EAGnG,MAAMC,EAAWD,EAAQ,MAAM,CAAC,EAChC,GAAI,CAACL,EAAuBM,CAAQ,EAClC,MAAM,IAAI,MACR,GAAG1D,CAAK,sDAAA,EAGZ,OAAO0D,CACT"}

package/dist/{onChainBtcPubkey-C1WqyxPM.js → onChainBtcPubkey-CCTdl53s.js}

@@ -1,4 +1,4 @@
-import { s as x } from "./sha2-CLpQd0Rd.js";
+import { s as x } from "./sha2-YqVHJiFj.js";
 import { isAddress as v, keccak256 as m, encodeAbiParameters as E } from "viem";
 function y(r, t) {
   const e = r.startsWith("0x") ? r.slice(2) : r;
@@ -156,4 +156,4 @@ export {
   W as c,
   L as d
 };
-//# sourceMappingURL=onChainBtcPubkey-C1WqyxPM.js.map
+//# sourceMappingURL=onChainBtcPubkey-CCTdl53s.js.map