@babylonlabs-io/ts-sdk 2.0.1 → 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (121) hide show
  1. package/dist/{PayoutManager-CpfQjtL0.cjs → PayoutManager-B6GFbG3X.cjs} +2 -2
  2. package/dist/{PayoutManager-CpfQjtL0.cjs.map → PayoutManager-B6GFbG3X.cjs.map} +1 -1
  3. package/dist/{PayoutManager-CHTOwj0E.js → PayoutManager-BSwbUQeF.js} +2 -2
  4. package/dist/{PayoutManager-CHTOwj0E.js.map → PayoutManager-BSwbUQeF.js.map} +1 -1
  5. package/dist/{PeginManager-DEldv_Ro.js → PeginManager-CKf7Bjmj.js} +6 -6
  6. package/dist/PeginManager-CKf7Bjmj.js.map +1 -0
  7. package/dist/{PeginManager-6tjlGd0t.cjs → PeginManager-Dt2Z5ljw.cjs} +2 -2
  8. package/dist/PeginManager-Dt2Z5ljw.cjs.map +1 -0
  9. package/dist/{bip322Verify-DSco3Yhl.js → bip322Verify-BXYrHBh8.js} +2 -2
  10. package/dist/{bip322Verify-DSco3Yhl.js.map → bip322Verify-BXYrHBh8.js.map} +1 -1
  11. package/dist/{bip322Verify-B7_gIhRk.cjs → bip322Verify-DLxJR9CQ.cjs} +2 -2
  12. package/dist/{bip322Verify-B7_gIhRk.cjs.map → bip322Verify-DLxJR9CQ.cjs.map} +1 -1
  13. package/dist/buildAndBroadcastReclaim-BDc-SK9i.cjs +2 -0
  14. package/dist/buildAndBroadcastReclaim-BDc-SK9i.cjs.map +1 -0
  15. package/dist/{buildAndBroadcastReclaim-CqO2DoP8.js → buildAndBroadcastReclaim-T5ZFPUpM.js} +943 -732
  16. package/dist/buildAndBroadcastReclaim-T5ZFPUpM.js.map +1 -0
  17. package/dist/{deriveVaultRoot-BwbXmN0x.js → deriveVaultRoot-BcvmER1E.js} +2 -2
  18. package/dist/{deriveVaultRoot-BwbXmN0x.js.map → deriveVaultRoot-BcvmER1E.js.map} +1 -1
  19. package/dist/{deriveVaultRoot-DvhkHzNb.cjs → deriveVaultRoot-C3uqnJto.cjs} +2 -2
  20. package/dist/{deriveVaultRoot-DvhkHzNb.cjs.map → deriveVaultRoot-C3uqnJto.cjs.map} +1 -1
  21. package/dist/{index-DQ5bfoT3.js → index-B6w5MM-8.js} +147 -124
  22. package/dist/index-B6w5MM-8.js.map +1 -0
  23. package/dist/index-EHLYplSd.cjs +2 -0
  24. package/dist/index-EHLYplSd.cjs.map +1 -0
  25. package/dist/index.cjs +1 -1
  26. package/dist/index.js +163 -158
  27. package/dist/{onChainBtcPubkey-BXry_CM4.cjs → onChainBtcPubkey-BlzxYImF.cjs} +2 -2
  28. package/dist/{onChainBtcPubkey-BXry_CM4.cjs.map → onChainBtcPubkey-BlzxYImF.cjs.map} +1 -1
  29. package/dist/{onChainBtcPubkey-C1WqyxPM.js → onChainBtcPubkey-CCTdl53s.js} +2 -2
  30. package/dist/{onChainBtcPubkey-C1WqyxPM.js.map → onChainBtcPubkey-CCTdl53s.js.map} +1 -1
  31. package/dist/{pegin-registration-client-BNV44jzw.cjs → pegin-registration-client-BdJ6c7si.cjs} +2 -2
  32. package/dist/{pegin-registration-client-BNV44jzw.cjs.map → pegin-registration-client-BdJ6c7si.cjs.map} +1 -1
  33. package/dist/{pegin-registration-client-1sZ-74UC.js → pegin-registration-client-C5Hktrja.js} +3 -3
  34. package/dist/{pegin-registration-client-1sZ-74UC.js.map → pegin-registration-client-C5Hktrja.js.map} +1 -1
  35. package/dist/peginState-BU2ONFXF.js +68 -0
  36. package/dist/{peginState-CxDiaKuk.js.map → peginState-BU2ONFXF.js.map} +1 -1
  37. package/dist/peginState-DUv10EJR.cjs +2 -0
  38. package/dist/{peginState-eaQ4IO_R.cjs.map → peginState-DUv10EJR.cjs.map} +1 -1
  39. package/dist/{primeVpAuth-DdfHSC53.js → primeVpAuth-Bdy_B_Sq.js} +5 -5
  40. package/dist/{primeVpAuth-DdfHSC53.js.map → primeVpAuth-Bdy_B_Sq.js.map} +1 -1
  41. package/dist/primeVpAuth-CQRsu6VB.cjs +2 -0
  42. package/dist/{primeVpAuth-BOGKniTl.cjs.map → primeVpAuth-CQRsu6VB.cjs.map} +1 -1
  43. package/dist/{reservation-Cj9F0rP9.js → reservation-DOAHVT3B.js} +2 -2
  44. package/dist/{reservation-Cj9F0rP9.js.map → reservation-DOAHVT3B.js.map} +1 -1
  45. package/dist/{reservation-Dr2HLCxx.cjs → reservation-ECxjZi5t.cjs} +2 -2
  46. package/dist/{reservation-Dr2HLCxx.cjs.map → reservation-ECxjZi5t.cjs.map} +1 -1
  47. package/dist/sha2-Ce6KewYx.cjs +2 -0
  48. package/dist/{sha2-DI0-0SHr.cjs.map → sha2-Ce6KewYx.cjs.map} +1 -1
  49. package/dist/{sha2-CLpQd0Rd.js → sha2-YqVHJiFj.js} +91 -77
  50. package/dist/{sha2-CLpQd0Rd.js.map → sha2-YqVHJiFj.js.map} +1 -1
  51. package/dist/state-DMFlvLL3.cjs +2 -0
  52. package/dist/state-DMFlvLL3.cjs.map +1 -0
  53. package/dist/{json-rpc-client-DuUARJvV.js → state-mE-QfITd.js} +91 -69
  54. package/dist/state-mE-QfITd.js.map +1 -0
  55. package/dist/tbv/core/clients/eth/index.cjs +1 -1
  56. package/dist/tbv/core/clients/eth/index.js +3 -3
  57. package/dist/tbv/core/clients/index.cjs +1 -1
  58. package/dist/tbv/core/clients/index.js +27 -26
  59. package/dist/tbv/core/clients/vault-provider/api.d.ts +2 -1
  60. package/dist/tbv/core/clients/vault-provider/api.d.ts.map +1 -1
  61. package/dist/tbv/core/clients/vault-provider/index.d.ts +1 -1
  62. package/dist/tbv/core/clients/vault-provider/index.d.ts.map +1 -1
  63. package/dist/tbv/core/clients/vault-provider/status/index.cjs +1 -1
  64. package/dist/tbv/core/clients/vault-provider/status/index.d.ts +1 -1
  65. package/dist/tbv/core/clients/vault-provider/status/index.d.ts.map +1 -1
  66. package/dist/tbv/core/clients/vault-provider/status/index.js +10 -9
  67. package/dist/tbv/core/clients/vault-provider/types.d.ts +7 -3
  68. package/dist/tbv/core/clients/vault-provider/types.d.ts.map +1 -1
  69. package/dist/tbv/core/clients/vault-provider/validators.d.ts +8 -0
  70. package/dist/tbv/core/clients/vault-provider/validators.d.ts.map +1 -1
  71. package/dist/tbv/core/index.cjs +1 -1
  72. package/dist/tbv/core/index.js +163 -158
  73. package/dist/tbv/core/managers/index.cjs +1 -1
  74. package/dist/tbv/core/managers/index.js +2 -2
  75. package/dist/tbv/core/services/deposit/__tests__/graphFingerprint.test.d.ts +2 -0
  76. package/dist/tbv/core/services/deposit/__tests__/graphFingerprint.test.d.ts.map +1 -0
  77. package/dist/tbv/core/services/deposit/graphFingerprint.d.ts +115 -0
  78. package/dist/tbv/core/services/deposit/graphFingerprint.d.ts.map +1 -0
  79. package/dist/tbv/core/services/deposit/index.d.ts +2 -1
  80. package/dist/tbv/core/services/deposit/index.d.ts.map +1 -1
  81. package/dist/tbv/core/services/deposit/peginState.d.ts +23 -0
  82. package/dist/tbv/core/services/deposit/peginState.d.ts.map +1 -1
  83. package/dist/tbv/core/services/deposit/runDepositorPresignFlow.d.ts +11 -0
  84. package/dist/tbv/core/services/deposit/runDepositorPresignFlow.d.ts.map +1 -1
  85. package/dist/tbv/core/services/index.cjs +1 -1
  86. package/dist/tbv/core/services/index.js +52 -47
  87. package/dist/tbv/core/services/index.js.map +1 -1
  88. package/dist/tbv/core/services/pegout/state.d.ts +8 -3
  89. package/dist/tbv/core/services/pegout/state.d.ts.map +1 -1
  90. package/dist/tbv/core/utils/index.cjs +1 -1
  91. package/dist/tbv/core/utils/index.js +1 -1
  92. package/dist/tbv/core/vault-secrets/index.cjs +1 -1
  93. package/dist/tbv/core/vault-secrets/index.js +1 -1
  94. package/dist/tbv/index.cjs +1 -1
  95. package/dist/tbv/index.js +163 -158
  96. package/dist/testing/index.cjs +1 -1
  97. package/dist/testing/index.js +1 -1
  98. package/dist/{toRefundInputs-BaN9XluU.cjs → toRefundInputs-B_GlIXjk.cjs} +2 -2
  99. package/dist/{toRefundInputs-BaN9XluU.cjs.map → toRefundInputs-B_GlIXjk.cjs.map} +1 -1
  100. package/dist/{toRefundInputs-mtuuYezp.js → toRefundInputs-DIIdhjvu.js} +5 -5
  101. package/dist/{toRefundInputs-mtuuYezp.js.map → toRefundInputs-DIIdhjvu.js.map} +1 -1
  102. package/dist/{types-BuxreSq4.cjs → types-DJxOEU3P.cjs} +2 -2
  103. package/dist/{types-BuxreSq4.cjs.map → types-DJxOEU3P.cjs.map} +1 -1
  104. package/dist/{types-BdCEoANP.js → types-Dz1kVqn6.js} +2 -2
  105. package/dist/{types-BdCEoANP.js.map → types-Dz1kVqn6.js.map} +1 -1
  106. package/package.json +1 -1
  107. package/dist/PeginManager-6tjlGd0t.cjs.map +0 -1
  108. package/dist/PeginManager-DEldv_Ro.js.map +0 -1
  109. package/dist/buildAndBroadcastReclaim-BwT6Jxp5.cjs +0 -2
  110. package/dist/buildAndBroadcastReclaim-BwT6Jxp5.cjs.map +0 -1
  111. package/dist/buildAndBroadcastReclaim-CqO2DoP8.js.map +0 -1
  112. package/dist/index-CK1Xvq4K.cjs +0 -2
  113. package/dist/index-CK1Xvq4K.cjs.map +0 -1
  114. package/dist/index-DQ5bfoT3.js.map +0 -1
  115. package/dist/json-rpc-client-BiAmg_ho.cjs +0 -2
  116. package/dist/json-rpc-client-BiAmg_ho.cjs.map +0 -1
  117. package/dist/json-rpc-client-DuUARJvV.js.map +0 -1
  118. package/dist/peginState-CxDiaKuk.js +0 -63
  119. package/dist/peginState-eaQ4IO_R.cjs +0 -2
  120. package/dist/primeVpAuth-BOGKniTl.cjs +0 -2
  121. package/dist/sha2-DI0-0SHr.cjs +0 -2
@@ -1,63 +0,0 @@
1
- var D = /* @__PURE__ */ ((i) => (i[i.PENDING = 0] = "PENDING", i[i.VERIFIED = 1] = "VERIFIED", i[i.ACTIVE = 2] = "ACTIVE", i[i.REDEEMED = 3] = "REDEEMED", i[i.LIQUIDATED = 4] = "LIQUIDATED", i[i.INVALID = 5] = "INVALID", i[i.DEPOSITOR_WITHDRAWN = 6] = "DEPOSITOR_WITHDRAWN", i[i.EXPIRED = 7] = "EXPIRED", i))(D || {}), N = /* @__PURE__ */ ((i) => (i.SUBMIT_WOTS_KEY = "SUBMIT_WOTS_KEY", i.SIGN_PAYOUT_TRANSACTIONS = "SIGN_PAYOUT_TRANSACTIONS", i.SIGN_AND_BROADCAST_TO_BITCOIN = "SIGN_AND_BROADCAST_TO_BITCOIN", i.ACTIVATE_VAULT = "ACTIVATE_VAULT", i.ACTIVATE_AND_REDEEM = "ACTIVATE_AND_REDEEM", i.REFUND_HTLC = "REFUND_HTLC", i))(N || {});
2
- function R(i, A = {}) {
3
- const {
4
- transactionsReady: e,
5
- needsWotsKey: T,
6
- pendingIngestion: I,
7
- canRefund: E,
8
- hasProviderTerminalFailure: l,
9
- htlcSpentByPeginTx: _
10
- } = A;
11
- return i === 0 ? l ? { contractStatus: i, availableActions: [] } : T ? {
12
- contractStatus: i,
13
- availableActions: [
14
- "SUBMIT_WOTS_KEY"
15
- /* SUBMIT_WOTS_KEY */
16
- ]
17
- } : I === !0 && !e ? {
18
- contractStatus: i,
19
- availableActions: [
20
- "SIGN_AND_BROADCAST_TO_BITCOIN"
21
- /* SIGN_AND_BROADCAST_TO_BITCOIN */
22
- ]
23
- } : I === void 0 && !e ? { contractStatus: i, availableActions: [] } : e ? {
24
- contractStatus: i,
25
- availableActions: [
26
- "SIGN_PAYOUT_TRANSACTIONS"
27
- /* SIGN_PAYOUT_TRANSACTIONS */
28
- ]
29
- } : { contractStatus: i, availableActions: [] } : i === 1 ? _ ? {
30
- contractStatus: i,
31
- availableActions: [
32
- "ACTIVATE_AND_REDEEM"
33
- /* ACTIVATE_AND_REDEEM */
34
- ]
35
- } : {
36
- contractStatus: i,
37
- availableActions: [
38
- "ACTIVATE_VAULT"
39
- /* ACTIVATE_VAULT */
40
- ]
41
- } : i === 2 ? { contractStatus: i, availableActions: [] } : i === 3 ? { contractStatus: i, availableActions: [] } : i === 4 ? { contractStatus: i, availableActions: [] } : i === 7 ? {
42
- contractStatus: i,
43
- availableActions: E ? [
44
- "REFUND_HTLC"
45
- /* REFUND_HTLC */
46
- ] : []
47
- } : i === 5 ? { contractStatus: i, availableActions: [] } : i === 6 ? { contractStatus: i, availableActions: [] } : { contractStatus: i, availableActions: [] };
48
- }
49
- function O(i, A) {
50
- return i.availableActions.includes(A);
51
- }
52
- function v(i) {
53
- const { currentBlock: A, createdAtBlock: e, pegInActivationTimeout: T } = i;
54
- return A > e + T;
55
- }
56
- export {
57
- D as C,
58
- N as P,
59
- O as c,
60
- R as g,
61
- v as i
62
- };
63
- //# sourceMappingURL=peginState-CxDiaKuk.js.map
@@ -1,2 +0,0 @@
1
- "use strict";var E=(i=>(i[i.PENDING=0]="PENDING",i[i.VERIFIED=1]="VERIFIED",i[i.ACTIVE=2]="ACTIVE",i[i.REDEEMED=3]="REDEEMED",i[i.LIQUIDATED=4]="LIQUIDATED",i[i.INVALID=5]="INVALID",i[i.DEPOSITOR_WITHDRAWN=6]="DEPOSITOR_WITHDRAWN",i[i.EXPIRED=7]="EXPIRED",i))(E||{}),l=(i=>(i.SUBMIT_WOTS_KEY="SUBMIT_WOTS_KEY",i.SIGN_PAYOUT_TRANSACTIONS="SIGN_PAYOUT_TRANSACTIONS",i.SIGN_AND_BROADCAST_TO_BITCOIN="SIGN_AND_BROADCAST_TO_BITCOIN",i.ACTIVATE_VAULT="ACTIVATE_VAULT",i.ACTIVATE_AND_REDEEM="ACTIVATE_AND_REDEEM",i.REFUND_HTLC="REFUND_HTLC",i))(l||{});function n(i,e={}){const{transactionsReady:A,needsWotsKey:T,pendingIngestion:I,canRefund:_,hasProviderTerminalFailure:D,htlcSpentByPeginTx:N}=e;return i===0?D?{contractStatus:i,availableActions:[]}:T?{contractStatus:i,availableActions:["SUBMIT_WOTS_KEY"]}:I===!0&&!A?{contractStatus:i,availableActions:["SIGN_AND_BROADCAST_TO_BITCOIN"]}:I===void 0&&!A?{contractStatus:i,availableActions:[]}:A?{contractStatus:i,availableActions:["SIGN_PAYOUT_TRANSACTIONS"]}:{contractStatus:i,availableActions:[]}:i===1?N?{contractStatus:i,availableActions:["ACTIVATE_AND_REDEEM"]}:{contractStatus:i,availableActions:["ACTIVATE_VAULT"]}:i===2?{contractStatus:i,availableActions:[]}:i===3?{contractStatus:i,availableActions:[]}:i===4?{contractStatus:i,availableActions:[]}:i===7?{contractStatus:i,availableActions:_?["REFUND_HTLC"]:[]}:i===5?{contractStatus:i,availableActions:[]}:i===6?{contractStatus:i,availableActions:[]}:{contractStatus:i,availableActions:[]}}function O(i,e){return i.availableActions.includes(e)}function R(i){const{currentBlock:e,createdAtBlock:A,pegInActivationTimeout:T}=i;return e>A+T}exports.ContractStatus=E;exports.PeginAction=l;exports.canPerformAction=O;exports.getPeginProtocolState=n;exports.isActivationDeadlinePassedOnChain=R;
2
- //# sourceMappingURL=peginState-eaQ4IO_R.cjs.map
@@ -1,2 +0,0 @@
1
- "use strict";var z=Object.defineProperty;var Q=(r,e,t)=>e in r?z(r,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):r[e]=t;var d=(r,e,t)=>Q(r,typeof e!="symbol"?e+"":e,t);const g=require("./bitcoin-D-O2GjbC.cjs"),Z=require("./index-CK1Xvq4K.cjs"),ee=require("./json-rpc-client-BiAmg_ho.cjs"),te=require("@bitcoin-js/tiny-secp256k1-asmjs"),_=require("./validation-C6XTfZak.cjs"),re=require("./bip322Verify-B7_gIhRk.cjs"),ne=require("./sha2-DI0-0SHr.cjs");function ie(r){const e=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(r){for(const t in r)if(t!=="default"){const n=Object.getOwnPropertyDescriptor(r,t);Object.defineProperty(e,t,n.get?n:{enumerable:!0,get:()=>r[t]})}}return e.default=r,Object.freeze(e)}const D=ie(te);function m(r,e){const t=(r&7)<<5,n=typeof e=="bigint"?e:BigInt(e);if(n<0n)throw new Error("cborHead: negative argument");if(n<24n)return new Uint8Array([t|Number(n)]);if(n<0x100n)return new Uint8Array([t|24,Number(n)]);if(n<0x10000n){const i=Number(n);return new Uint8Array([t|25,i>>>8&255,i&255])}if(n<0x100000000n){const i=Number(n);return new Uint8Array([t|26,i>>>24&255,i>>>16&255,i>>>8&255,i&255])}const s=new Uint8Array(9);s[0]=t|27;for(let i=7;i>=0;i--)s[1+i]=Number(n>>BigInt((7-i)*8))&255;return s}function V(...r){const e=r.reduce((s,i)=>s+i.length,0),t=new Uint8Array(e);let n=0;for(const s of r)t.set(s,n),n+=s.length;return t}function $(r){const t=[m(4,r.length)];for(const n of r)t.push(m(0,n));return V(...t)}function se(r,e,t){if(!Number.isSafeInteger(t)||t<0)throw new Error(`encodeServerIdentityPayload: expires_at must be a non-negative safe integer, got ${t}`);const n=m(4,3),s=$(r),i=$(e),o=m(0,t);return V(n,s,i,o)}const oe=new TextEncoder().encode("btc-auth.server-identity.v1"),ae=2*3600;class l extends Error{constructor(e,t){super(e),this.reason=t,this.name="ServerIdentityError"}}function E(r){const e=new Uint8Array(r.length/2);for(let t=0;t<e.length;t++)e[t]=parseInt(r.slice(t*2,t*2+2),16);return e}function j(r){const{proof:e,pinnedServerPubkey:t,now:n}=r,s=r.maxLifetimeSecs??ae,i=g.stripHexPrefix(t).toLowerCase();if(i.length!==_.X_ONLY_PUBKEY_HEX_LEN||!_.HEX_RE.test(i))throw new l(`pinnedServerPubkey must be 32-byte hex; got ${i.length} chars`,"invalid_pubkey_encoding");const o=g.stripHexPrefix(e.server_pubkey).toLowerCase();if(o.length!==_.X_ONLY_PUBKEY_HEX_LEN||!_.HEX_RE.test(o))throw new l(`server_pubkey must be 32-byte hex; got ${o.length} chars`,"invalid_pubkey_encoding");if(o!==i)throw new l(`server_pubkey does not match pinned value: expected ${i}, got ${o}`,"pinned_pubkey_mismatch");if(!Number.isSafeInteger(e.expires_at))throw new l(`expires_at must be a finite integer; got ${JSON.stringify(e.expires_at)}`,"invalid_expires_at");if(!Number.isSafeInteger(n))throw new l(`now must be a finite integer; got ${JSON.stringify(n)}`,"invalid_expires_at");if(e.expires_at<=n)throw new l(`server identity proof expired at ${e.expires_at}, now ${n}`,"expired");if(!Number.isSafeInteger(s)||s<=0)throw new l(`maxLifetimeSecs must be a positive safe integer; got ${JSON.stringify(s)}`,"invalid_max_lifetime");if(e.expires_at-n>s)throw new l(`server identity proof expires too far in the future: expires_at=${e.expires_at}, now=${n}, max lifetime=${s}s`,"expires_too_far");const c=g.stripHexPrefix(e.ephemeral_pubkey).toLowerCase();if(c.length!==_.COMPRESSED_PUBKEY_HEX_LEN||!_.HEX_RE.test(c))throw new l(`ephemeral_pubkey must be 33-byte compressed hex; got ${c.length} chars`,"invalid_ephemeral_pubkey");const y=c.slice(0,2);if(y!=="02"&&y!=="03")throw new l(`ephemeral_pubkey must be compressed (prefix 02/03); got ${y}`,"invalid_ephemeral_pubkey");const p=E(c);if(!D.isPoint(p))throw new l("ephemeral_pubkey is not a valid secp256k1 point","invalid_ephemeral_pubkey");const h=g.stripHexPrefix(e.signature).toLowerCase();if(h.length!==g.SCHNORR_SIG_HEX_LEN||!_.HEX_RE.test(h))throw new l(`signature must be 64-byte Schnorr hex; got ${h.length} chars`,"invalid_signature_encoding");const x=se(oe,E(c),e.expires_at);if(!re.verifyBip322Simple(x,E(o),E(h)))throw new l("BIP-322 signature verification failed — ephemeral key is not attested by pinned server pubkey","signature_verification_failed")}const ce=new Set(["vaultProvider_submitDepositorWotsKey","vaultProvider_submitDepositorPresignatures","vaultProvider_requestDepositorPresignTransactions"]),ue=new Set(["vaultProvider_requestDepositorClaimerArtifacts"]),de=6e4,P="auth_createDepositorToken",C="auth_createDepositorTokenGrpc";function J(r,e){return new ee.JsonRpcClient({baseUrl:r,timeout:de,headers:e,retryableFor:t=>t===P||t===C})}const he=0,le=1,k=2,pe=3,_e=4,ye=5,ge=6,fe=7,H=24,xe=28,be=20,we=21,Ee=22,N=256;class f extends Error{constructor(e){super(`CBOR decode: ${e}`),this.name="CborDecodeError"}}class F{constructor(e){d(this,"buf");d(this,"pos",0);this.buf=e}nextByte(){if(this.pos>=this.buf.length)throw new f("unexpected end of input");return this.buf[this.pos++]}readHead(){const e=this.nextByte(),t=e>>5,n=e&31;if(n<H)return{major:t,arg:n};if(n>=xe)throw new f(`unsupported additional info ${n} (indefinite-length or reserved)`);const s=1<<n-H;let i=0n;for(let o=0;o<s;o++)i=i<<8n|BigInt(this.nextByte());if(i>BigInt(Number.MAX_SAFE_INTEGER))throw new f(`argument ${i} exceeds safe integer range`);return{major:t,arg:Number(i)}}readBytes(e){if(this.pos+e>this.buf.length)throw new f("length overruns end of input");const t=this.buf.subarray(this.pos,this.pos+e);return this.pos+=e,t}readByteString(){const e=this.readHead();if(e.major!==k)throw new f(`expected byte string (major ${k}), got major ${e.major}`);return this.readBytes(e.arg)}readValue(e=0){if(e>N)throw new f(`nesting exceeds maximum depth ${N}`);const t=this.readHead();switch(t.major){case he:return t.arg;case le:return-1-t.arg;case k:return this.readBytes(t.arg);case pe:return new TextDecoder("utf-8",{fatal:!0}).decode(this.readBytes(t.arg));case _e:{const n=[];for(let s=0;s<t.arg;s++)n.push(this.readValue(e+1));return n}case ye:{const n=new Map;for(let s=0;s<t.arg;s++){const i=this.readValue(e+1),o=this.readValue(e+1);n.set(i,o)}return n}case ge:return{tag:t.arg,value:this.readValue(e+1)};case fe:if(t.arg===be)return!1;if(t.arg===we)return!0;if(t.arg===Ee)return null;throw new f(`unsupported simple/float value ${t.arg}`);default:throw new f(`unsupported major type ${t.major}`)}}}function Y(r){const e=new F(r),t=e.readValue();if(e.pos!==r.length)throw new f("trailing bytes after top-level item");return t}const me="vaultd-jsonrpc",Ae="vaultd-grpc",M=18,O=4,B=-47,Se=1,X=64,ke=128,ve=96,Te=64,Pe=1,Ce=2,Oe=3,Re=4,Ie=5,$e=6,He=7,L=new TextEncoder().encode("Signature1");class a extends Error{constructor(e,t){super(e),this.reason=t,this.name="CwtVerificationError"}}function Ne(r){const e=G(r.expectedIssuerXOnlyPubkey,"expectedIssuerXOnlyPubkey"),t=G(r.expectedAudienceXOnlyPubkey,"expectedAudienceXOnlyPubkey"),n=Ge(r.ephemeralPubkeyHex),s=De(r.token),i=new F(s),o=i.readHead();if(o.major!==6||o.arg!==M)throw new a(`token is not a COSE Sign1 tagged value (tag ${M})`,"invalid_token_structure");const c=i.readHead();if(c.major!==4||c.arg!==O)throw new a(`COSE Sign1 must be a ${O}-element array`,"invalid_token_structure");const y=i.pos,p=i.readByteString(),h=s.subarray(y,i.pos);i.readValue();const x=i.pos,b=i.readByteString(),A=s.subarray(x,i.pos),S=i.readByteString();if(S.length!==X)throw new a(`COSE signature must be ${X} bytes, got ${S.length}`,"invalid_token_structure");if(i.pos!==s.length)throw new a("COSE Sign1 token has trailing bytes after the signature","invalid_token_structure");const I=Me(p);if(I!==B)throw new a(`unexpected COSE algorithm ${I} (expected ES256K ${B})`,"unexpected_algorithm");const K=Be(h,A),W=ne.sha256(K);if(!D.verify(W,n,S,!0))throw new a("COSE signature does not verify against the server's ephemeral key","signature_verification_failed");const u=Xe(b),w=u.audience.toLowerCase();if(w.length!==_.X_ONLY_PUBKEY_HEX_LEN||!_.HEX_RE.test(w))throw new a("token `aud` is not a 32-byte x-only pubkey hex","invalid_claims");if(u.issuedAt>u.expiresAt)throw new a(`token iat (${u.issuedAt}) is after exp (${u.expiresAt})`,"invalid_claims");if(u.issuer.toLowerCase()!==e)throw new a(`token issuer does not match pinned server pubkey: expected ${e}, got ${u.issuer.toLowerCase()}`,"issuer_mismatch");if(u.subject!==r.expectedSubject)throw new a(`token subject mismatch: expected ${r.expectedSubject}, got ${u.subject}`,"subject_mismatch");if(w!==t)throw new a(`token audience does not match depositor pubkey: expected ${t}, got ${w}`,"audience_mismatch");if(u.expiresAt<=r.now)throw new a(`token expired: exp ${u.expiresAt} <= now ${r.now}`,"token_expired");if(r.responseExpiresAt!==u.expiresAt)throw new a(`response expires_at (${r.responseExpiresAt}) does not equal token exp (${u.expiresAt})`,"expiry_mismatch");if(r.serverIdentityExpiresAt<u.expiresAt)throw new a(`server identity expires (${r.serverIdentityExpiresAt}) before token exp (${u.expiresAt})`,"server_identity_expires_before_token");return{issuer:u.issuer,subject:u.subject,audience:w,expiresAt:u.expiresAt,notBefore:u.notBefore,issuedAt:u.issuedAt}}function Me(r){if(r.length===0)throw new a("empty COSE protected header (no algorithm)","unexpected_algorithm");const e=Y(r);if(!(e instanceof Map))throw new a("COSE protected header is not a map","invalid_token_structure");const t=e.get(Se);if(typeof t!="number")throw new a("COSE protected header missing integer algorithm label","unexpected_algorithm");return t}function Be(r,e){return Ve(Uint8Array.of(ke|O),Uint8Array.of(ve|L.length),L,r,Uint8Array.of(Te),e)}function Xe(r){const e=Y(r);if(!(e instanceof Map))throw new a("CWT claims root is not a map","invalid_claims");if(Le(e,He,"cti").length===0)throw new a("token cti is empty","invalid_claims");return{issuer:v(e,Pe,"iss"),subject:v(e,Ce,"sub"),audience:v(e,Oe,"aud"),expiresAt:T(e,Re,"exp"),notBefore:T(e,Ie,"nbf"),issuedAt:T(e,$e,"iat")}}function v(r,e,t){const n=r.get(e);if(typeof n!="string")throw new a(`token claim ${t} is missing or not a text string`,"invalid_claims");return n}function Le(r,e,t){const n=r.get(e);if(!(n instanceof Uint8Array))throw new a(`token claim ${t} is missing or not a byte string`,"invalid_claims");return n}function T(r,e,t){const n=r.get(e);if(typeof n!="number"||!Number.isSafeInteger(n)||n<0)throw new a(`token claim ${t} is missing or not a non-negative integer timestamp`,"invalid_claims");return n}function G(r,e){const t=g.stripHexPrefix(r).toLowerCase();if(t.length!==_.X_ONLY_PUBKEY_HEX_LEN||!_.HEX_RE.test(t))throw new a(`${e} must be 32-byte x-only hex; got ${t.length} chars`,"invalid_input");return t}function Ge(r){const e=g.stripHexPrefix(r).toLowerCase(),t=e.slice(0,2);if(e.length!==_.COMPRESSED_PUBKEY_HEX_LEN||!_.HEX_RE.test(e)||t!=="02"&&t!=="03")throw new a("ephemeralPubkeyHex must be 33-byte compressed pubkey hex (prefix 02/03)","invalid_input");return g.hexToUint8Array(e)}const Ue=(()=>{const r=new Int16Array(128).fill(-1),e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";for(let t=0;t<e.length;t++)r[e.charCodeAt(t)]=t;return r})();function De(r){const e=r.length,t=Math.floor(e/4),n=e%4;if(n===1)throw new a("invalid base64url length","invalid_token_structure");const s=t*3+(n===0?0:n-1),i=new Uint8Array(s),o=p=>{const h=p<128?Ue[p]:-1;if(h<0)throw new a("invalid base64url character","invalid_token_structure");return h};let c=0,y=0;for(let p=0;p<t;p++){const h=o(r.charCodeAt(c++)),x=o(r.charCodeAt(c++)),b=o(r.charCodeAt(c++)),A=o(r.charCodeAt(c++));i[y++]=h<<2|x>>4,i[y++]=(x&15)<<4|b>>2,i[y++]=(b&3)<<6|A}if(n===2){const p=o(r.charCodeAt(c++)),h=o(r.charCodeAt(c++));i[y++]=p<<2|h>>4}else if(n===3){const p=o(r.charCodeAt(c++)),h=o(r.charCodeAt(c++)),x=o(r.charCodeAt(c++));i[y++]=p<<2|h>>4,i[y++]=(h&15)<<4|x>>2}return i}function Ve(...r){const e=r.reduce((s,i)=>s+i.length,0),t=new Uint8Array(e);let n=0;for(const s of r)t.set(s,n),n+=s.length;return t}const U=4102444800,je=30;class Je{constructor(e){d(this,"client");d(this,"peginTxid");d(this,"authAnchorHex");d(this,"pinnedServerPubkey");d(this,"expectedAudienceXOnlyPubkey");d(this,"authGatedMethods");d(this,"grpcGatedMethods");d(this,"refreshSkewSecs");d(this,"now");d(this,"cachedJsonRpc",null);d(this,"inFlightJsonRpc",null);d(this,"cachedGrpc",null);d(this,"inFlightGrpc",null);this.client=e.client,this.peginTxid=e.peginTxid,this.authAnchorHex=e.authAnchorHex,this.pinnedServerPubkey=e.pinnedServerPubkey,this.expectedAudienceXOnlyPubkey=e.expectedAudienceXOnlyPubkey,this.authGatedMethods=e.authGatedMethods,this.grpcGatedMethods=e.grpcGatedMethods,this.refreshSkewSecs=e.refreshSkewSecs??je,this.now=e.now??(()=>Math.floor(Date.now()/1e3))}async getToken(e){return e===P||e===C?null:this.grpcGatedMethods.has(e)?this.getTokenForSubject("grpc"):this.authGatedMethods.has(e)?this.getTokenForSubject("jsonrpc"):null}invalidate(){this.cachedJsonRpc=null,this.cachedGrpc=null}async getTokenForSubject(e){const t=e==="grpc"?this.cachedGrpc:this.cachedJsonRpc;return t&&this.now()+this.refreshSkewSecs<t.expiresAt?t.token:(await this.acquireSingleFlight(e)).token}setClient(e){this.client=e}acquireSingleFlight(e){const t=e==="grpc"?this.inFlightGrpc:this.inFlightJsonRpc;if(t)return t;const n=e==="grpc"?C:P,s=(async()=>{try{const i=await this.client.call(n,{pegin_txid:this.peginTxid,auth_anchor:this.authAnchorHex});if(j({proof:i.server_identity,pinnedServerPubkey:this.pinnedServerPubkey,now:this.now()}),typeof i.token!="string"||i.token.length===0)throw new Error(`VpTokenProvider: invalid token in acquire response (expected non-empty string, got ${typeof i.token})`);const o=this.now();if(!Number.isSafeInteger(i.expires_at)||i.expires_at<=o||i.expires_at>U)throw new Error(`VpTokenProvider: invalid expires_at in acquire response (got ${JSON.stringify(i.expires_at)}; must be a safe integer in (${o}, ${U}])`);Ne({token:i.token,ephemeralPubkeyHex:i.server_identity.ephemeral_pubkey,expectedIssuerXOnlyPubkey:this.pinnedServerPubkey,expectedSubject:e==="grpc"?Ae:me,expectedAudienceXOnlyPubkey:this.expectedAudienceXOnlyPubkey,responseExpiresAt:i.expires_at,serverIdentityExpiresAt:i.server_identity.expires_at,now:o});const c={token:i.token,expiresAt:i.expires_at};return e==="grpc"?this.cachedGrpc=c:this.cachedJsonRpc=c,c}finally{e==="grpc"?this.inFlightGrpc=null:this.inFlightJsonRpc=null}})();return e==="grpc"?this.inFlightGrpc=s:this.inFlightJsonRpc=s,s}}class q{constructor(){d(this,"entries",new Map)}getOrCreate(e){const t=this.entries.get(e.peginTxid);if(t){if(t.authAnchorHex!==e.authAnchorHex)throw new Error(`VpTokenRegistry: peginTxid ${e.peginTxid} already bound to authAnchorHex ${t.authAnchorHex.slice(0,8)}…; got ${e.authAnchorHex.slice(0,8)}…`);if(t.pinnedServerPubkey!==e.pinnedServerPubkey)throw new Error(`VpTokenRegistry: peginTxid ${e.peginTxid} already bound to pinnedServerPubkey ${t.pinnedServerPubkey.slice(0,8)}…; got ${e.pinnedServerPubkey.slice(0,8)}…`);if(t.expectedAudienceXOnlyPubkey!==e.expectedAudienceXOnlyPubkey)throw new Error(`VpTokenRegistry: peginTxid ${e.peginTxid} already bound to expectedAudienceXOnlyPubkey ${t.expectedAudienceXOnlyPubkey.slice(0,8)}…; got ${e.expectedAudienceXOnlyPubkey.slice(0,8)}…`);return t.provider.setClient(e.client),t.provider}const n=new Je({client:e.client,peginTxid:e.peginTxid,authAnchorHex:e.authAnchorHex,pinnedServerPubkey:e.pinnedServerPubkey,expectedAudienceXOnlyPubkey:e.expectedAudienceXOnlyPubkey,authGatedMethods:ce,grpcGatedMethods:ue});return this.entries.set(e.peginTxid,{provider:n,authAnchorHex:e.authAnchorHex,pinnedServerPubkey:e.pinnedServerPubkey,expectedAudienceXOnlyPubkey:e.expectedAudienceXOnlyPubkey}),n}peek(e){var t;return(t=this.entries.get(e))==null?void 0:t.provider}release(e){this.entries.delete(e)}clear(){this.entries.clear()}get size(){return this.entries.size}}const R=new q;function Fe(r){var n;const e=J(r.baseUrl,(n=r.options)==null?void 0:n.headers),t=R.getOrCreate({client:e,peginTxid:r.peginTxid,authAnchorHex:r.authAnchorHex,pinnedServerPubkey:r.pinnedServerPubkey,expectedAudienceXOnlyPubkey:g.processPublicKeyToXOnly(r.depositorBtcPubkey)});return new Z.VaultProviderRpcClient(r.baseUrl,{...r.options,tokenProvider:t})}function Ye(r){R.getOrCreate({client:J(r.baseUrl,r.headers),peginTxid:r.peginTxid,authAnchorHex:r.authAnchorHex,pinnedServerPubkey:r.pinnedServerPubkey,expectedAudienceXOnlyPubkey:g.processPublicKeyToXOnly(r.depositorBtcPubkey)})}exports.ServerIdentityError=l;exports.VpTokenRegistry=q;exports.createAuthenticatedVpClient=Fe;exports.primeVpTokenRegistry=Ye;exports.verifyServerIdentity=j;exports.vpTokenRegistry=R;
2
- //# sourceMappingURL=primeVpAuth-BOGKniTl.cjs.map
@@ -1,2 +0,0 @@
1
- "use strict";var C=Object.defineProperty;var D=(t,e,n)=>e in t?C(t,e,{enumerable:!0,configurable:!0,writable:!0,value:n}):t[e]=n;var x=(t,e,n)=>D(t,typeof e!="symbol"?e+"":e,n);function k(t){return t instanceof Uint8Array||ArrayBuffer.isView(t)&&t.constructor.name==="Uint8Array"}function F(t,e=""){if(!Number.isSafeInteger(t)||t<0){const n=e&&`"${e}" `;throw new Error(`${n}expected integer >= 0, got ${t}`)}}function A(t,e,n=""){const r=k(t),s=t==null?void 0:t.length;if(!r||e!==void 0){const i=n&&`"${n}" `,f="",a=r?`length=${s}`:`type=${typeof t}`;throw new Error(i+"expected Uint8Array"+f+", got "+a)}return t}function E(t,e=!0){if(t.destroyed)throw new Error("Hash instance has been destroyed");if(e&&t.finished)throw new Error("Hash#digest() has already been called")}function B(t,e){A(t,void 0,"digestInto() output");const n=e.outputLen;if(t.length<n)throw new Error('"digestInto() output" expected to be of length >='+n)}function O(t){return new Uint32Array(t.buffer,t.byteOffset,Math.floor(t.byteLength/4))}function w(...t){for(let e=0;e<t.length;e++)t[e].fill(0)}function H(t){return new DataView(t.buffer,t.byteOffset,t.byteLength)}function h(t,e){return t<<32-e|t>>>e}function T(t,e){return t<<e|t>>>32-e>>>0}const $=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;function G(t){return t<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255}function M(t){for(let e=0;e<t.length;e++)t[e]=G(t[e]);return t}const V=$?t=>t:M,_=typeof Uint8Array.from([]).toHex=="function"&&typeof Uint8Array.fromHex=="function",j=Array.from({length:256},(t,e)=>e.toString(16).padStart(2,"0"));function W(t){if(A(t),_)return t.toHex();let e="";for(let n=0;n<t.length;n++)e+=j[t[n]];return e}const b={_0:48,_9:57,A:65,F:70,a:97,f:102};function U(t){if(t>=b._0&&t<=b._9)return t-b._0;if(t>=b.A&&t<=b.F)return t-(b.A-10);if(t>=b.a&&t<=b.f)return t-(b.a-10)}function N(t){if(typeof t!="string")throw new Error("hex string expected, got "+typeof t);if(_)return Uint8Array.fromHex(t);const e=t.length,n=e/2;if(e%2)throw new Error("hex string expected, got unpadded hex of length "+e);const r=new Uint8Array(n);for(let s=0,o=0;s<n;s++,o+=2){const i=U(t.charCodeAt(o)),f=U(t.charCodeAt(o+1));if(i===void 0||f===void 0){const a=t[o]+t[o+1];throw new Error('hex string expected, got non-hex character "'+a+'" at index '+o)}r[s]=i*16+f}return r}function I(t,e={}){const n=(s,o)=>t(o).update(s).digest(),r=t(void 0);return n.outputLen=r.outputLen,n.blockLen=r.blockLen,n.create=s=>t(s),Object.assign(n,e),Object.freeze(n)}const z=t=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,t])});function K(t,e,n){return t&e^~t&n}function q(t,e,n){return t&e^t&n^e&n}class S{constructor(e,n,r,s){x(this,"blockLen");x(this,"outputLen");x(this,"padOffset");x(this,"isLE");x(this,"buffer");x(this,"view");x(this,"finished",!1);x(this,"length",0);x(this,"pos",0);x(this,"destroyed",!1);this.blockLen=e,this.outputLen=n,this.padOffset=r,this.isLE=s,this.buffer=new Uint8Array(e),this.view=H(this.buffer)}update(e){E(this),A(e);const{view:n,buffer:r,blockLen:s}=this,o=e.length;for(let i=0;i<o;){const f=Math.min(s-this.pos,o-i);if(f===s){const a=H(e);for(;s<=o-i;i+=s)this.process(a,i);continue}r.set(e.subarray(i,i+f),this.pos),this.pos+=f,i+=f,this.pos===s&&(this.process(n,0),this.pos=0)}return this.length+=e.length,this.roundClean(),this}digestInto(e){E(this),B(e,this),this.finished=!0;const{buffer:n,view:r,blockLen:s,isLE:o}=this;let{pos:i}=this;n[i++]=128,w(this.buffer.subarray(i)),this.padOffset>s-i&&(this.process(r,0),i=0);for(let c=i;c<s;c++)n[c]=0;r.setBigUint64(s-8,BigInt(this.length*8),o),this.process(r,0);const f=H(e),a=this.outputLen;if(a%4)throw new Error("_sha2: outputLen must be aligned to 32bit");const u=a/4,d=this.get();if(u>d.length)throw new Error("_sha2: outputLen bigger than state");for(let c=0;c<u;c++)f.setUint32(4*c,d[c],o)}digest(){const{buffer:e,outputLen:n}=this;this.digestInto(e);const r=e.slice(0,n);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:n,buffer:r,length:s,finished:o,destroyed:i,pos:f}=this;return e.destroyed=i,e.finished=o,e.length=s,e.pos=f,s%n&&e.buffer.set(r),e}clone(){return this._cloneInto()}}const l=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),J=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),p=new Uint32Array(64);class P extends S{constructor(e){super(64,e,8,!1)}get(){const{A:e,B:n,C:r,D:s,E:o,F:i,G:f,H:a}=this;return[e,n,r,s,o,i,f,a]}set(e,n,r,s,o,i,f,a){this.A=e|0,this.B=n|0,this.C=r|0,this.D=s|0,this.E=o|0,this.F=i|0,this.G=f|0,this.H=a|0}process(e,n){for(let c=0;c<16;c++,n+=4)p[c]=e.getUint32(n,!1);for(let c=16;c<64;c++){const y=p[c-15],g=p[c-2],m=h(y,7)^h(y,18)^y>>>3,L=h(g,17)^h(g,19)^g>>>10;p[c]=L+p[c-7]+m+p[c-16]|0}let{A:r,B:s,C:o,D:i,E:f,F:a,G:u,H:d}=this;for(let c=0;c<64;c++){const y=h(f,6)^h(f,11)^h(f,25),g=d+y+K(f,a,u)+J[c]+p[c]|0,L=(h(r,2)^h(r,13)^h(r,22))+q(r,s,o)|0;d=u,u=a,a=f,f=i+g|0,i=o,o=s,s=r,r=g+L|0}r=r+this.A|0,s=s+this.B|0,o=o+this.C|0,i=i+this.D|0,f=f+this.E|0,a=a+this.F|0,u=u+this.G|0,d=d+this.H|0,this.set(r,s,o,i,f,a,u,d)}roundClean(){w(p)}destroy(){this.set(0,0,0,0,0,0,0,0),w(this.buffer)}}class Q extends P{constructor(){super(32);x(this,"A",l[0]|0);x(this,"B",l[1]|0);x(this,"C",l[2]|0);x(this,"D",l[3]|0);x(this,"E",l[4]|0);x(this,"F",l[5]|0);x(this,"G",l[6]|0);x(this,"H",l[7]|0)}}const R=I(()=>new Q,z(1));exports.HashMD=S;exports.abytes=A;exports.aexists=E;exports.anumber=F;exports.aoutput=B;exports.bytesToHex=W;exports.clean=w;exports.createHasher=I;exports.hexToBytes=N;exports.rotl=T;exports.sha256=R;exports.swap32IfBE=V;exports.u32=O;
2
- //# sourceMappingURL=sha2-DI0-0SHr.cjs.map