@babylonlabs-io/ts-sdk 3.0.2 → 3.1.0

package/dist/buildAndBroadcastReclaim-DoprHX7o.js

@@ -0,0 +1,3077 @@
+var Jt = Object.defineProperty;
+var Zt = (e, t, r) => t in e ? Jt(e, t, { enumerable: !0, configurable: !0, writable: !0, value: r }) : e[t] = r;
+var z = (e, t, r) => Zt(e, typeof t != "symbol" ? t + "" : t, r);
+import { B as ft } from "./BTCVaultRegistry.abi-DBW0dyqH.js";
+import { e as Be, s as b, i as er, u as Ie, c as _, v as tr, p as he, f as N } from "./bitcoin-C-TuHb-v.js";
+import { v as rr, s as yt, b as vt, P as or, d as sr } from "./PayoutManager-BZ212yml.js";
+import { verifyWatchtowerArtifacts as nr, buildClaimPsbt as ir, buildAssertClaimerPsbt as ar, buildPayoutClaimerPsbt as ur, buildWronglyChallengedPsbts as cr, buildPayoutDepositorPsbt as lr, finalizeClaimTx as dr, buildWatchtowerArtifacts as hr, extractTapScriptSig as bt, expandWotsSeed as pr, wotsKeypairFromSeed as gr, validateWotsKeypairAgainstGraph as fr, deriveVaultId as yr } from "./tbv/core/wasm/index.js";
+import { m as vr, d as Pt, k as br, a as _e, V as Me, i as Pr, g as mr, f as wr, r as xr, h as Er } from "./registration-records-CKLAv3gw.js";
+import { Psbt as q, Transaction as S } from "bitcoinjs-lib";
+import { q as F, r as A, s as ee, C as Y, A as te, p as Q, t as pe, l as Le, N as J, u as Ve, m as Fe, n as Ue, o as qe, W as $r, D as Xe } from "./constants-BeYquVd-.js";
+import { p as kr, q as Cr, r as mt, P as X, j as re, f as Tr, i as ie, g as ae } from "./verifyScriptPathSchnorrSignature-B3-VkvnK.js";
+import { Buffer as H } from "buffer";
+import { C as wt, X as xt } from "./validation-OSC0xTHB.js";
+import { a as Et, c as ue } from "./signing-C1rR4tqs.js";
+import { d as $t } from "./deriveVaultRoot-BcvmER1E.js";
+import { O as Ge, d as _r } from "./types-C5jj3Cc-.js";
+import { zeroAddress as Sr, isAddress as Ar, isAddressEqual as Br } from "viem";
+import { v as ze, D as R, c as Ir, b as Vr, R as Rr, d as kt } from "./state-CFn1rT74.js";
+import { h as je, b as Kr, s as Hr, j as Or } from "./sha2-YqVHJiFj.js";
+import { d as Nr, c as Dr, b as Mr, f as Ct, e as Lr, a as Fr } from "./noPayout-B-vGXJ-V.js";
+import { a as Ur } from "./secp256k1-BuxBFUHm.js";
+import { c as qr } from "./btcTxHash-BRZ8_EZq.js";
+const Xr = /^0x[0-9a-fA-F]{64}$/, Gr = /^0x[0-9a-fA-F]{40}$/, zr = /^0x([0-9a-fA-F]{2})*$/;
+function fe(e, t) {
+  if (e.length !== 66)
+    throw new Error(
+      `${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`
+    );
+  if (!Xr.test(e))
+    throw new Error(
+      `${t} must contain only hex characters after the 0x prefix`
+    );
+}
+function jr(e, t) {
+  if (!Gr.test(e))
+    throw new Error(
+      `${t} must be a 20-byte 0x-prefixed hex address (42 chars)`
+    );
+}
+function Wr(e, t) {
+  if (!zr.test(e))
+    throw new Error(
+      `${t} must be a 0x-prefixed hex string with an even number of hex chars`
+    );
+}
+function Tt(e) {
+  jr(e.btcVaultRegistryAddress, "btcVaultRegistryAddress"), fe(e.vaultId, "vaultId");
+  const t = Be(e.secret);
+  if (fe(t, "secret"), e.hashlock !== void 0 && (fe(e.hashlock, "hashlock"), !rr(t, e.hashlock)))
+    throw new Error(
+      "Invalid secret: SHA256(secret) does not match the provided hashlock"
+    );
+  return t;
+}
+async function Ys(e) {
+  const {
+    btcVaultRegistryAddress: t,
+    vaultId: r,
+    hashlock: o,
+    activationMetadata: s,
+    writeContract: n,
+    signal: a
+  } = e;
+  a == null || a.throwIfAborted();
+  const i = Tt({
+    btcVaultRegistryAddress: t,
+    vaultId: r,
+    secret: e.secret,
+    hashlock: o
+  });
+  return Wr(s, "activationMetadata"), n({
+    address: t,
+    abi: ft,
+    functionName: "activateVaultWithSecret",
+    args: [r, i, s]
+  });
+}
+async function Qs(e) {
+  const { btcVaultRegistryAddress: t, vaultId: r, hashlock: o, writeContract: s, signal: n } = e;
+  n == null || n.throwIfAborted();
+  const a = Tt({
+    btcVaultRegistryAddress: t,
+    vaultId: r,
+    secret: e.secret,
+    hashlock: o
+  });
+  return s({
+    address: t,
+    abi: ft,
+    functionName: "activateVaultWithSecretAndRedeem",
+    args: [r, a]
+  });
+}
+class K extends Error {
+  constructor(t, r) {
+    super(t, r), this.name = "AssertBindingError";
+  }
+}
+function ye(e, t) {
+  try {
+    return q.fromBase64(t);
+  } catch (r) {
+    throw new K(`${e} PSBT cannot be parsed.`, { cause: r });
+  }
+}
+function Yr(e, t, r) {
+  const o = t.txInputs[r];
+  if (!o)
+    throw new K(`${e} PSBT has no input ${r}.`);
+  return o.hash;
+}
+function We(e) {
+  return S.fromBuffer(
+    e.data.globalMap.unsignedTx.toBuffer()
+  ).getHash();
+}
+function ve(e, t, r, o, s, n) {
+  const a = t.txInputs[r];
+  if (!a)
+    throw new K(`${e} PSBT has no input ${r}.`);
+  if (!a.hash.equals(o) || a.index !== s)
+    throw new K(
+      `${e} input ${r} does not spend ${n}: the graph pairs this ${e} with a different transaction.`
+    );
+}
+function Qr(e, t) {
+  var s;
+  const r = (s = e.data.inputs[F]) == null ? void 0 : s.witnessUtxo;
+  if (r === void 0)
+    throw new K(
+      `Assert input ${F} carries no witnessUtxo, so the amount and script its signature commits to cannot be checked; refusing to sign assert.`
+    );
+  const o = t.txOutputs[Y];
+  if (!o)
+    throw new K(
+      `Claim PSBT has no output ${Y} for the Assert to spend; refusing to sign assert.`
+    );
+  if (r.value !== o.value)
+    throw new K(
+      `Assert input ${F} declares a prevout of ${r.value} sats but the Claim's output ${Y} is worth ${o.value}; refusing to sign assert.`
+    );
+  if (!r.script.equals(o.script))
+    throw new K(
+      `Assert input ${F} declares a prevout script that is not the Claim's output ${Y} script; refusing to sign assert.`
+    );
+}
+function Jr(e) {
+  const t = ye("Claim", e.claimPsbtBase64), r = ye("Assert", e.assertPsbtBase64), o = ye("Payout", e.payoutClaimerPsbtBase64);
+  ve(
+    "Assert",
+    r,
+    F,
+    We(t),
+    Y,
+    "Claim:0"
+  ), Qr(r, t), ve(
+    "Payout",
+    o,
+    A,
+    We(r),
+    te,
+    "Assert:0"
+  ), ve(
+    "Payout",
+    o,
+    ee,
+    Yr("Claim", t, pe),
+    Q,
+    "this vault's PegIn:0"
+  );
+}
+function be(e, t) {
+  try {
+    return q.fromBase64(t);
+  } catch (r) {
+    throw new Error(`${e} PSBT cannot be parsed.`, { cause: r });
+  }
+}
+function Ye(e, t, r, o) {
+  var a;
+  const s = [
+    {
+      inputIndex: ee,
+      expectedSats: r,
+      source: `the vault's PegIn output ${Q}`
+    },
+    {
+      inputIndex: A,
+      expectedSats: o.value,
+      source: `the Assert's output ${te}`
+    }
+  ];
+  for (const { inputIndex: i, expectedSats: u, source: l } of s) {
+    const c = (a = t.data.inputs[i]) == null ? void 0 : a.witnessUtxo;
+    if (c === void 0)
+      throw new Error(
+        `${e} Payout input ${i} carries no witnessUtxo, so the amount its signature commits to cannot be checked; refusing to sign payout.`
+      );
+    if (c.value !== u)
+      throw new Error(
+        `${e} Payout input ${i} declares a prevout of ${c.value} sats but ${l} is worth ${u}; refusing to sign payout.`
+      );
+  }
+  const n = t.data.inputs[A].witnessUtxo;
+  if (!(n != null && n.script.equals(o.script)))
+    throw new Error(
+      `${e} Payout input ${A} declares a prevout script that is not the Assert's output ${te} script; refusing to sign payout.`
+    );
+}
+async function Zr(e) {
+  const { vault: t } = e, r = {
+    vaultCoreVersion: t.vaultCoreVersion,
+    numVaultKeepers: t.vaultKeeperBtcPubkeys.length,
+    numUniversalChallengers: t.universalChallengerBtcPubkeys.length,
+    councilSize: t.councilSize,
+    protocolFeeRate: t.protocolFeeRate
+  };
+  kr(r);
+  const o = be("Claimer Payout", e.payoutClaimerPsbtBase64), s = be(
+    "Depositor Payout",
+    e.payoutDepositorPsbtBase64
+  ), n = be("Assert", e.assertPsbtBase64);
+  if (!s.data.globalMap.unsignedTx.toBuffer().equals(o.data.globalMap.unsignedTx.toBuffer()))
+    throw new Error(
+      "Depositor and claimer Payout PSBTs describe different transactions; refusing to sign payout."
+    );
+  const a = n.txOutputs[te];
+  if (a === void 0)
+    throw new Error(
+      `Assert transaction has no output ${te}; the Payout's implicit fee cannot be measured.`
+    );
+  if (o.txInputs.length !== Le)
+    throw new Error(
+      `Payout transaction must have exactly ${Le} inputs, got ${o.txInputs.length}`
+    );
+  const i = o.txInputs[ee].sequence;
+  if (i !== t.timelockPegin)
+    throw new Error(
+      `Payout input ${ee} sequence ${i} must equal the PegIn CSV timelock ${t.timelockPegin}; refusing to sign payout.`
+    );
+  const u = o.txInputs[A].sequence;
+  if (u !== t.timelockAssert)
+    throw new Error(
+      `Payout input ${A} sequence ${u} must equal the Assert CSV timelock ${t.timelockAssert}; refusing to sign payout.`
+    );
+  Ye(
+    "Claimer",
+    o,
+    t.peginVaultOutputValueSats,
+    a
+  ), Ye(
+    "Depositor",
+    s,
+    t.peginVaultOutputValueSats,
+    a
+  );
+  const l = t.peginVaultOutputValueSats + a.value, c = o.txOutputs;
+  if (c.length !== J)
+    throw new Error(
+      `Payout transaction has ${c.length} output(s), expected exactly ${J} for a depositor-as-claimer payout.`
+    );
+  let d = 0;
+  for (const h of c) d += h.value;
+  if (d > l)
+    throw new Error(
+      `Payout outputs (${d} sats) exceed inputs (${l} sats); invalid transaction.`
+    );
+  await Cr(r, {
+    implicitFeeSats: l - d,
+    out0Len: c[Ve].script.length,
+    out1Len: void 0
+  });
+}
+class eo extends Error {
+  constructor(t, r) {
+    super(
+      "Transaction graph's challenger set does not match the vault's (local ∪ universal)" + (t.length > 0 ? ` (missing: ${t.join(", ")})` : "") + (r.length > 0 ? ` (unexpected: ${r.join(", ")})` : "") + ". Refusing to sign an incomplete or padded challenger set."
+    ), this.missing = t, this.unexpected = r, this.name = "ChallengerSetMismatchError";
+  }
+}
+function to(e) {
+  const t = mt({
+    claimerBtcPubkey: e.depositorBtcPubkey,
+    depositorBtcPubkey: e.depositorBtcPubkey,
+    vaultProviderBtcPubkey: e.vaultProviderBtcPubkey,
+    vaultKeeperBtcPubkeys: e.vaultKeeperBtcPubkeys
+  }), r = e.universalChallengerBtcPubkeys.map(Qe), o = t.filter((c) => r.includes(c));
+  if (o.length > 0)
+    throw new Error(
+      `Cannot check the challenger set: vault keepers and universal challengers overlap (${o.join(", ")}).`
+    );
+  const s = e.graphChallengerPubkeys.map(Qe), n = new Set(s);
+  if (n.size !== s.length)
+    throw new Error(
+      "Transaction graph lists the same challenger more than once."
+    );
+  const a = [...t, ...r], i = new Set(a), u = a.filter((c) => !n.has(c)), l = s.filter((c) => !i.has(c));
+  if (u.length > 0 || l.length > 0)
+    throw new eo(u, l);
+}
+function Qe(e) {
+  return b(e).toLowerCase();
+}
+class ro extends Error {
+  constructor(t, r) {
+    super(
+      `Payout transaction output ${Ve} pays ${r}, not the vault's registered payout script ${t}. Refusing to sign a payout to another destination.`
+    ), this.expectedScriptHex = t, this.actualScriptHex = r, this.name = "PayoutDestinationError";
+  }
+}
+function oo(e) {
+  let t;
+  try {
+    t = q.fromBase64(e.payoutPsbtBase64);
+  } catch (c) {
+    throw new Error("Payout PSBT cannot be parsed.", { cause: c });
+  }
+  const { version: r, locktime: o, outs: s } = so(t);
+  if (r !== Fe || o !== Ue)
+    throw new Error(
+      `Payout transaction has version ${r} and locktime ${o}, expected ${Fe} and ${Ue}.`
+    );
+  if (s.length !== J)
+    throw new Error(
+      `Payout transaction has ${s.length} output(s), expected exactly ${J} for a depositor-as-claimer payout.`
+    );
+  const n = b(
+    e.registeredPayoutScriptPubKey
+  ).toLowerCase();
+  if (n.length === 0)
+    throw new Error(
+      "registeredPayoutScriptPubKey is empty; the vault's on-chain payout script is required to check the Payout destination."
+    );
+  const a = s[Ve].script.toString("hex").toLowerCase();
+  if (a !== n)
+    throw new ro(n, a);
+  const i = s[J - 1];
+  if (i.value !== qe)
+    throw new Error(
+      `Payout CPFP anchor value ${i.value} sats must equal ${qe} sats.`
+    );
+  const u = b(
+    vr(b(e.depositorBtcPubkey).toLowerCase())
+  ), l = i.script.toString("hex").toLowerCase();
+  if (l !== u)
+    throw new Error(
+      `Payout CPFP anchor pays ${l}, not the depositor's BIP-86 P2TR ${u}. Refusing to sign a payout whose fee-bump output is spendable by somebody else.`
+    );
+}
+function so(e) {
+  return {
+    version: e.version,
+    locktime: e.locktime,
+    outs: e.txOutputs.map((t) => ({
+      script: H.from(t.script),
+      value: t.value
+    }))
+  };
+}
+class se extends Error {
+  constructor(t) {
+    super(t), this.name = "PayoutInputLeafError";
+  }
+}
+function no(e) {
+  const t = q.fromBase64(e.payoutDepositorPsbtBase64), r = q.fromBase64(e.payoutClaimerPsbtBase64), o = t.data.globalMap.unsignedTx.toBuffer(), s = r.data.globalMap.unsignedTx.toBuffer();
+  if (!o.equals(s))
+    throw new se(
+      "Depositor and claimer Payout PSBTs describe different transactions; the graph is inconsistent."
+    );
+  const n = r.data.inputs[A], a = t.data.inputs[A];
+  if (!n || !a)
+    throw new se(
+      "Payout PSBT has no Assert-connector input."
+    );
+  if (!n.tapLeafScript || n.tapLeafScript.length !== 1)
+    throw new se(
+      "Claimer Payout PSBT must carry exactly one leaf on the Assert-connector input."
+    );
+  if (a.tapLeafScript && a.tapLeafScript.length > 0)
+    throw new se(
+      "Depositor Payout PSBT already carries an Assert-connector leaf; refusing to overwrite it."
+    );
+  return t.updateInput(A, {
+    tapLeafScript: n.tapLeafScript,
+    ...n.tapInternalKey ? { tapInternalKey: n.tapInternalKey } : {},
+    ...n.tapMerkleRoot ? { tapMerkleRoot: n.tapMerkleRoot } : {}
+  }), t.toBase64();
+}
+const io = "00";
+class ao extends Error {
+  constructor(t, r, o) {
+    super(
+      `Transaction graph does not belong to vault ${t}: its Claim spends PegIn ${o}, which derives vault ${r}. Refusing to sign for a graph served for another vault.`
+    ), this.expectedVaultId = t, this.derivedVaultId = r, this.peginTxid = o, this.name = "VaultIdBindingError";
+  }
+}
+function uo(e) {
+  let t;
+  try {
+    t = q.fromBase64(e);
+  } catch (o) {
+    throw new Error("Claim PSBT cannot be parsed.", { cause: o });
+  }
+  const r = t.txInputs[pe];
+  if (!r)
+    throw new Error("Claim PSBT carries no PegIn input to bind the vault to.");
+  return _t(
+    "Claim PSBT",
+    t.txInputs.length,
+    r.index
+  ), Re(r.hash);
+}
+function co(e) {
+  const t = e.ins[pe];
+  if (!t)
+    throw new Error(
+      "Artifacts file's claim_tx carries no PegIn input to bind the vault to."
+    );
+  return _t(
+    "Artifacts file's claim_tx",
+    e.ins.length,
+    t.index
+  ), Re(t.hash);
+}
+function _t(e, t, r) {
+  if (t !== 1 || r !== X)
+    throw new Error(
+      `${e} must have exactly one input spending PegIn output ${X}; it has ${t} input(s) and the first spends output ${r}.`
+    );
+}
+function St(e) {
+  const t = G(
+    Pt(e.peginTxid, e.depositorEthAddress)
+  ), r = G(e.expectedVaultId);
+  if (t !== r)
+    throw new ao(r, t, e.peginTxid);
+}
+function G(e) {
+  return `0x${(e.startsWith("0x") ? e.slice(2) : e).toLowerCase()}`;
+}
+function Re(e) {
+  return H.from(e).reverse().toString("hex");
+}
+function ce(e, t) {
+  const r = b(e);
+  if (!/^(?:[0-9a-fA-F]{2})+$/.test(r))
+    throw new Error(`${t} must be non-empty, even-length hex.`);
+  return r.toLowerCase();
+}
+function At(e) {
+  const t = ce(
+    e.servedVerifyingKeyHex,
+    "source.verifyingKeyHex"
+  ), r = ce(
+    e.trustedVerifyingKeyHex,
+    "trustedVerifyingKeyHex"
+  );
+  if (t === r) return r;
+  throw new Error(
+    `Vault provider served Groth16 verifying key ${t} but the trusted key for prover circuit version ${e.proverCircuitVersion} is ${r}; refusing to sign a claim whose proof would verify under a substituted key.`
+  );
+}
+const U = 3;
+class lo extends Error {
+  constructor(t, r) {
+    super(
+      `Artifacts belong to vault ${r}, not ${t}. Select the artifacts file saved for this vault.`
+    ), this.expectedVaultId = t, this.actualVaultId = r, this.name = "ArtifactsVaultMismatchError";
+  }
+}
+function ho(e) {
+  const t = fo(e, "babe_sessions"), r = [];
+  for (const [o, s] of Object.entries(t)) {
+    const n = typeof s == "object" && s !== null ? s.decryptor_artifacts_hex : void 0;
+    if (typeof n != "string" || n.length === 0)
+      throw new Error(
+        `Artifacts file is missing a usable "babe_sessions": the entry for ${o} carries no "decryptor_artifacts_hex" string.`
+      );
+    n === io && r.push(o);
+  }
+  return {
+    challengerPubkeys: Object.keys(t),
+    placeholderChallengerPubkeys: r
+  };
+}
+function po(e) {
+  let t;
+  try {
+    t = JSON.parse(e);
+  } catch (i) {
+    throw new Error("Artifacts file is not valid JSON.", { cause: i });
+  }
+  const r = Pe(t.vault_id, "vault_id"), o = go(Pe(t.claim_tx, "claim_tx")), s = me(
+    t.prover_circuit_version,
+    "prover_circuit_version"
+  ), n = t.claimable_event_block_number === void 0 ? 0n : BigInt(
+    me(
+      t.claimable_event_block_number,
+      "claimable_event_block_number"
+    )
+  ), a = ho(t.babe_sessions);
+  return {
+    vaultCoreVersion: t.vault_core_version === void 0 ? void 0 : me(t.vault_core_version, "vault_core_version"),
+    vaultId: r,
+    claimTxid: o.getId(),
+    peginTxid: co(o),
+    proverCircuitVersion: s,
+    claimableEventBlockNumber: n,
+    // Required: btc-vault's builder always writes it
+    // (`delegated_claim.rs:514` @ ac4954e7), so an absent one is not a file
+    // this SDK or the CLI produced.
+    verifyingKeyHex: Pe(t.verifying_key, "verifying_key"),
+    babeSessionChallengerPubkeys: a.challengerPubkeys,
+    babeSessionPlaceholderChallengerPubkeys: a.placeholderChallengerPubkeys
+  };
+}
+async function Js(e) {
+  const t = po(e.artifactsJson), r = G(e.expectedVaultId), o = G(t.vaultId);
+  if (r !== o)
+    throw new lo(r, o);
+  St({
+    peginTxid: t.peginTxid,
+    depositorEthAddress: e.depositorEthAddress,
+    expectedVaultId: r
+  });
+  const s = e.txGraphVersion ?? U;
+  if (t.vaultCoreVersion !== void 0 && t.vaultCoreVersion !== s)
+    throw new Error(
+      `Artifacts record vault core version ${t.vaultCoreVersion}, but verification was asked for version ${s}.`
+    );
+  if (t.claimableEventBlockNumber === 0n)
+    throw new Error(
+      "Artifacts carry no claimable event block number. They were assembled before the Ethereum withdrawal was initiated; assemble them again."
+    );
+  if (t.claimableEventBlockNumber !== e.expectedClaimableEventBlockNumber)
+    throw new Error(
+      `Artifacts record claimable event block ${t.claimableEventBlockNumber} but the vault's finalized VaultClaimableBy event is at block ${e.expectedClaimableEventBlockNumber}; the prover would prove the wrong block, so refusing the file.`
+    );
+  if (t.proverCircuitVersion !== e.expectedProverCircuitVersion)
+    throw new Error(
+      `Artifacts record prover circuit version ${t.proverCircuitVersion} but the vault's stamped params say ${e.expectedProverCircuitVersion}; a proof for the wrong circuit fails at start-claim, so refusing the file.`
+    );
+  const n = ce(
+    t.verifyingKeyHex,
+    'Artifacts file "verifying_key"'
+  ), a = ce(
+    e.trustedVerifyingKeyHex,
+    "trustedVerifyingKeyHex"
+  );
+  if (n !== a)
+    throw new Error(
+      `Artifacts carry Groth16 verifying key ${n} but the trusted key for prover circuit version ${e.expectedProverCircuitVersion} is ${a}; refusing a file whose proof would verify under a substituted key.`
+    );
+  const [i] = t.babeSessionPlaceholderChallengerPubkeys;
+  if (i !== void 0)
+    throw new Error(
+      `Artifacts carry a placeholder BaBe session for challenger ${i}; join the real sessions into the file before using it (#2598).`
+    );
+  return await nr(s, e.artifactsJson), t;
+}
+function go(e) {
+  try {
+    return S.fromHex(e);
+  } catch (t) {
+    throw new Error("Artifacts file carries an unparseable claim_tx.", {
+      cause: t
+    });
+  }
+}
+function Pe(e, t) {
+  if (typeof e != "string" || e.length === 0)
+    throw new Error(`Artifacts file is missing a usable "${t}".`);
+  return e;
+}
+function me(e, t) {
+  if (typeof e != "number" || !Number.isSafeInteger(e) || e < 0)
+    throw new Error(`Artifacts file is missing a usable "${t}".`);
+  return e;
+}
+function fo(e, t) {
+  if (e === void 0) return {};
+  if (typeof e != "object" || e === null || Array.isArray(e))
+    throw new Error(`Artifacts file is missing a usable "${t}".`);
+  return e;
+}
+function Bt(e, t) {
+  return `wronglyChallenged:${e}:${t}`;
+}
+function It(e) {
+  const t = [
+    {
+      id: "claim",
+      kind: "claim",
+      psbtBase64: e.claim,
+      inputIndex: pe
+    },
+    {
+      id: "assert",
+      kind: "assert",
+      psbtBase64: e.assert,
+      inputIndex: F
+    },
+    {
+      id: "payoutClaimer",
+      kind: "payoutClaimer",
+      psbtBase64: e.payoutClaimer,
+      inputIndex: A
+    },
+    {
+      id: "payoutDepositor",
+      kind: "payoutDepositor",
+      psbtBase64: e.payoutDepositor,
+      inputIndex: ee
+    }
+  ];
+  for (const r of Object.keys(e.wronglyChallenged))
+    e.wronglyChallenged[r].forEach((o, s) => {
+      t.push({
+        id: Bt(r, s),
+        kind: "wronglyChallenged",
+        psbtBase64: o,
+        inputIndex: $r
+      });
+    });
+  return t;
+}
+const yo = wt - xt;
+function V(e) {
+  const t = e.replace(/^0x/, "").toLowerCase();
+  if (t.length === wt)
+    return t.slice(yo);
+  if (t.length === xt) return t;
+  throw new Error(
+    `Public key must be 33-byte compressed or 32-byte x-only hex, got ${t.length / 2} bytes.`
+  );
+}
+async function Je(e, t, r) {
+  const o = await e.getPublicKeyHex();
+  if (V(o) !== V(t))
+    throw new Error(
+      "Connected wallet does not hold the vault's depositor key. Select the account that made the deposit, then try again."
+    );
+  const s = await e.getAddress();
+  if (!er(s, o, r))
+    throw new Error(
+      `Connected wallet reports address "${s}", which is not derived from the vault's depositor key. Select the account that made the deposit, then try again.`
+    );
+  return s;
+}
+async function Vt(e, t, r, o) {
+  const s = V(o);
+  if (s !== r.depositorBtcPubkey)
+    throw new Error(
+      `Depositor key ${s} is not the vault's registered depositor key ${r.depositorBtcPubkey}; refusing to plan a claim for another key.`
+    );
+  try {
+    br(
+      Be(r.registeredPayoutScriptPubKey),
+      r.depositorBtcPubkey,
+      o
+    );
+  } catch (d) {
+    throw new Error(
+      `Registered payout script ${r.registeredPayoutScriptPubKey} failed the depositor-key derivation check: ${d instanceof Error ? d.message : String(d)}. This SDK registers only P2TR of the depositor's x-only key or P2WPKH of the compressed key (the contract bounds the script's length alone, PeginLogic.sol:237-240 @ c559f5c2); refusing to sign a claim that pays it.`,
+      { cause: d }
+    );
+  }
+  if (e !== U)
+    throw new Error(
+      `Graph version ${e} is not the delegated-claim graph version ${U}; vaults on earlier graphs have no delegated-claim path.`
+    );
+  if (e !== r.vaultCoreVersion)
+    throw new Error(
+      `Graph version ${e} does not match the vault context's vault core version ${r.vaultCoreVersion}; they are one axis and must agree.`
+    );
+  const [n, a, i, u, l] = await Promise.all([
+    ir(e, t),
+    ar(e, t),
+    ur(e, t),
+    cr(e, t),
+    lr(e, t)
+  ]);
+  St({
+    peginTxid: uo(n),
+    depositorEthAddress: r.depositorEthAddress,
+    expectedVaultId: r.vaultId
+  }), Jr({
+    claimPsbtBase64: n,
+    assertPsbtBase64: a,
+    payoutClaimerPsbtBase64: i
+  });
+  for (const d of [i, l])
+    oo({
+      payoutPsbtBase64: d,
+      registeredPayoutScriptPubKey: r.registeredPayoutScriptPubKey,
+      depositorBtcPubkey: r.depositorBtcPubkey
+    });
+  const c = no({
+    payoutDepositorPsbtBase64: l,
+    payoutClaimerPsbtBase64: i
+  });
+  return await Zr({
+    payoutClaimerPsbtBase64: i,
+    payoutDepositorPsbtBase64: c,
+    assertPsbtBase64: a,
+    vault: r
+  }), to({
+    graphChallengerPubkeys: Object.keys(u),
+    depositorBtcPubkey: o,
+    vaultProviderBtcPubkey: r.vaultProviderBtcPubkey,
+    vaultKeeperBtcPubkeys: r.vaultKeeperBtcPubkeys,
+    universalChallengerBtcPubkeys: r.universalChallengerBtcPubkeys
+  }), { claim: n, assert: a, payoutClaimer: i, payoutDepositor: c, wronglyChallenged: u };
+}
+async function vo(e) {
+  At({
+    servedVerifyingKeyHex: e.source.verifyingKeyHex,
+    trustedVerifyingKeyHex: e.trustedVerifyingKeyHex,
+    proverCircuitVersion: e.vault.proverCircuitVersion
+  });
+  const t = await Vt(
+    e.vault.txGraphVersion,
+    e.source.txGraphJson,
+    e.vault,
+    e.depositorPublicKey
+  );
+  return {
+    depositorPublicKey: e.depositorPublicKey,
+    btcNetwork: e.btcNetwork,
+    trustedVerifyingKeyHex: e.trustedVerifyingKeyHex,
+    source: e.source,
+    vault: e.vault,
+    babeSessionsJson: e.babeSessionsJson,
+    requests: It(t)
+  };
+}
+function ge(e, t, r) {
+  re({
+    requestedPsbtHex: Ke(t.psbtBase64),
+    signatureHex: r,
+    signerXOnlyPubkeyHex: V(e.depositorPublicKey),
+    inputIndex: t.inputIndex
+  });
+}
+function Ke(e) {
+  return H.from(e, "base64").toString("hex");
+}
+function Rt(e) {
+  return H.from(e, "hex").toString("base64");
+}
+class j extends Error {
+  constructor(t) {
+    super(t), this.name = "SigningPlanMismatchError";
+  }
+}
+function bo(e, t) {
+  if (e.length !== t.length)
+    throw new j(
+      `Plan has ${e.length} requests but the graph builds ${t.length}; the plan was altered after planning.`
+    );
+  for (let r = 0; r < t.length; r++) {
+    const o = t[r], s = e[r];
+    if (s.id !== o.id)
+      throw new j(
+        `Plan request at position ${r} is "${s.id}" but the graph builds "${o.id}" there; the plan was altered after planning.`
+      );
+    if (s.kind !== o.kind)
+      throw new j(
+        `Plan request "${s.id}" has kind "${s.kind}" but the graph builds "${o.kind}"; the plan was altered after planning.`
+      );
+    if (s.inputIndex !== o.inputIndex)
+      throw new j(
+        `Plan request "${s.id}" signs inputIndex ${s.inputIndex} but the graph builds ${o.inputIndex}; the plan was altered after planning.`
+      );
+    if (s.psbtBase64 !== o.psbtBase64)
+      throw new j(
+        `Plan request "${s.id}" carries a psbt that differs from the one the graph builds; the plan was altered after planning.`
+      );
+  }
+}
+function Po(e, t) {
+  const r = new Set(e.map((a) => a.id)), o = [...r].filter((a) => !t.has(a)), s = [...t.keys()].filter((a) => !r.has(a));
+  if (o.length === 0 && s.length === 0) return;
+  const n = (a) => a.map((i) => `"${i}"`).join(", ");
+  throw new Error(
+    `Signatures do not cover the plan: ${t.size} signatures for ${e.length} requests` + (o.length > 0 ? `; missing ${n(o)}` : "") + (s.length > 0 ? `; extra ${n(s)}` : "") + "."
+  );
+}
+function M(e, t) {
+  const r = e.get(t);
+  if (r === void 0)
+    throw new Error(
+      `No signature for request "${t}"; the plan was not fully signed.`
+    );
+  return r;
+}
+async function mo(e) {
+  const { plan: t, signatures: r } = e, { txGraphVersion: o } = t.vault, s = t.source.txGraphJson, n = At({
+    servedVerifyingKeyHex: t.source.verifyingKeyHex,
+    trustedVerifyingKeyHex: t.trustedVerifyingKeyHex,
+    proverCircuitVersion: t.vault.proverCircuitVersion
+  }), a = await Vt(
+    o,
+    s,
+    t.vault,
+    t.depositorPublicKey
+  ), i = It(a);
+  bo(t.requests, i), Po(i, r);
+  for (const c of i)
+    ge(
+      t,
+      c,
+      M(r, c.id)
+    );
+  const u = {};
+  for (const c of Object.keys(a.wronglyChallenged))
+    u[c] = a.wronglyChallenged[c].map(
+      (d, h) => M(
+        r,
+        Bt(c, h)
+      )
+    );
+  const l = await dr(
+    o,
+    s,
+    M(r, "claim")
+  );
+  return hr({
+    txGraphVersion: o,
+    graphJson: s,
+    signedClaimTxHex: l,
+    assertClaimerSigHex: M(r, "assert"),
+    payoutClaimerSigHex: M(r, "payoutClaimer"),
+    wronglyChallengedSigs: u,
+    depositorPayoutSigHex: M(r, "payoutDepositor"),
+    verifyingKeyHex: n,
+    claimableEventBlockNumber: t.vault.claimableEventBlockNumber,
+    proverCircuitVersion: t.vault.proverCircuitVersion,
+    vaultIdHex: t.vault.vaultId,
+    babeSessionsJson: t.babeSessionsJson,
+    expectedVaultCoreVersion: t.vault.vaultCoreVersion
+  });
+}
+function wo(e) {
+  return typeof e.signDelegatedClaimPsbt == "function";
+}
+class xo extends Error {
+  constructor(t, r, o, s) {
+    super(t, s), this.signatures = r, this.failedRequestId = o, this.name = "DelegatedClaimSigningIncompleteError";
+  }
+}
+const Kt = {
+  assert: "intentBound",
+  payoutDepositor: "intentBound",
+  payoutClaimer: "standalone",
+  claim: "standalone",
+  wronglyChallenged: "standalone"
+}, Eo = [
+  "payoutClaimer",
+  "claim",
+  "wronglyChallenged"
+];
+async function $o(e, t, r = {}) {
+  var s;
+  if ((s = r.signal) == null || s.throwIfAborted(), ko(e), V(e.depositorPublicKey) !== e.vault.depositorBtcPubkey)
+    throw new Error(
+      `Plan depositor key ${V(e.depositorPublicKey)} is not the vault's registered depositor key ${e.vault.depositorBtcPubkey}; the plan was not built for this vault.`
+    );
+  if (yt(t)) {
+    if (!wo(t))
+      throw new Error(
+        "Approval wallet does not implement signDelegatedClaimPsbt; the claim ceremony needs it because the device signs some claim PSBTs with no loaded intent and needs its own derivation fields on them."
+      );
+    const n = To(r, e);
+    _o(n.depositTerms, e.vault);
+    const a = Co(e), i = await Je(
+      t,
+      e.depositorPublicKey,
+      e.btcNetwork
+    );
+    return So(
+      e,
+      t,
+      i,
+      n,
+      a,
+      r
+    );
+  }
+  const o = await Je(
+    t,
+    e.depositorPublicKey,
+    e.btcNetwork
+  );
+  return Bo(e, t, o, r.signal);
+}
+function ko(e) {
+  const t = /* @__PURE__ */ new Set();
+  for (const r of e.requests) {
+    if (t.has(r.id))
+      throw new Error(
+        `Delegated-claim plan lists request "${r.id}" more than once; its signatures could not be keyed, so nothing is signed.`
+      );
+    t.add(r.id);
+  }
+}
+function Co(e) {
+  const t = e.requests.filter(
+    (s) => Kt[s.kind] === "intentBound"
+  ), r = Eo.flatMap(
+    (s) => e.requests.filter((n) => n.kind === s)
+  ), o = t.length + r.length;
+  if (o !== e.requests.length)
+    throw new Error(
+      `Delegated-claim plan has ${e.requests.length} signing requests but only ${o} are of a kind this signer can place in the device ceremony; the plan and the signer disagree on the request kinds.`
+    );
+  return { intentBound: t, standalone: r };
+}
+function Ht(e, t) {
+  if (t.size !== e.requests.length)
+    throw new Error(
+      `Delegated-claim signing ended with ${t.size} signatures for ${e.requests.length} requests; the set is incomplete and must not be treated as signed.`
+    );
+}
+function To(e, t) {
+  if (e.depositTerms === void 0)
+    throw new Error(
+      "An approval wallet signs Assert and the depositor Payout only under this vault's loaded intent; pass depositTerms (rebuilt from on-chain state) so it can be approved."
+    );
+  if (e.vaultContext === void 0)
+    throw new Error(
+      "An approval wallet releases a loaded intent only through the vault-root derivation; pass vaultContext so that derivation can run before and after the intent-bound signatures."
+    );
+  const r = Ie(e.vaultContext.depositorBtcPubkey);
+  if (r !== t.vault.depositorBtcPubkey)
+    throw new Error(
+      `vaultContext derives from depositor key ${r} but this plan's vault is registered to ${t.vault.depositorBtcPubkey}; the device would derive for another depositor.`
+    );
+  return { depositTerms: e.depositTerms, vaultContext: e.vaultContext };
+}
+function _o(e, t) {
+  const r = (s) => s.map((n) => V(n)).sort().join(",");
+  if (r(e.vaultKeeperBtcPubkeys) !== r(t.vaultKeeperBtcPubkeys) || r(e.universalChallengerBtcPubkeys) !== r(t.universalChallengerBtcPubkeys))
+    throw new Error(
+      "Deposit terms carry different keeper or challenger rosters than the vault context this claim signs for; the device would bind the Assert to the wrong intent."
+    );
+  if (e.vaultCoreVersion !== t.vaultCoreVersion)
+    throw new Error(
+      `Deposit terms describe vault core version ${e.vaultCoreVersion} but the vault context has version ${t.vaultCoreVersion}; the device would bind the Assert to the wrong intent.`
+    );
+  if (e.timelockPegin !== t.timelockPegin)
+    throw new Error(
+      `Deposit terms describe timelockPegin ${e.timelockPegin} but the vault context has ${t.timelockPegin}; the device would bind the Assert to the wrong intent.`
+    );
+  if (e.timelockAssert !== t.timelockAssert)
+    throw new Error(
+      `Deposit terms describe timelockAssert ${e.timelockAssert} but the vault context has ${t.timelockAssert}; the device would bind the Assert to the wrong intent.`
+    );
+  if (e.protocolFeeRate !== t.protocolFeeRate)
+    throw new Error(
+      `Deposit terms describe protocolFeeRate ${e.protocolFeeRate} but the vault context has ${t.protocolFeeRate}; the device would bind the Assert to the wrong intent.`
+    );
+  if (e.vaults.length === 0)
+    throw new Error(
+      "Deposit terms describe no vault group, so they cannot name the vault context's vault provider; the device would bind the Assert to the wrong intent."
+    );
+  const o = V(t.vaultProviderBtcPubkey);
+  for (const s of e.vaults)
+    if (V(s.vaultProviderBtcPubkey) !== o)
+      throw new Error(
+        `Deposit terms group at htlcVout ${s.htlcVout} names a different vault provider than the vault context this claim signs for; the device would bind the Assert to the wrong intent.`
+      );
+}
+async function So(e, t, r, o, { intentBound: s, standalone: n }, a) {
+  var g;
+  const i = Ao(e, a.resume), u = [...s, ...n];
+  let l = 0;
+  const c = {
+    phase: "clearing any loaded intent"
+  }, d = async (p) => {
+    var P;
+    c.phase = "signing", (P = a.signal) == null || P.throwIfAborted();
+    const y = await t.signDelegatedClaimPsbt(
+      Ke(p.psbtBase64),
+      Et(
+        e.depositorPublicKey,
+        p.inputIndex,
+        r
+      )
+    ), f = await bt(
+      Rt(y),
+      p.inputIndex
+    );
+    ge(e, p, f), i.set(p.id, f);
+  }, h = async (p) => {
+    var f;
+    c.phase = p, (f = a.signal) == null || f.throwIfAborted(), (await $t(t, o.vaultContext)).fill(0);
+  };
+  typeof t.validateDepositTerms == "function" && await t.validateDepositTerms(o.depositTerms);
+  try {
+    await h("clearing any loaded intent"), c.phase = "approving the deposit terms", (g = a.signal) == null || g.throwIfAborted(), await t.approveDepositTerms(o.depositTerms);
+    for (const p of s)
+      await d(p), l++;
+    await h("releasing the loaded intent");
+    for (const p of n)
+      i.has(p.id) || await d(p), l++;
+  } catch (p) {
+    const y = u[l];
+    if (i.size === 0 || y === void 0) throw p;
+    const f = c.phase === "signing" ? `stopped at "${y.id}"` : `stopped before "${y.id}" while ${c.phase}`;
+    throw new xo(
+      `Delegated-claim signing ${f}; ${i.size} of ${e.requests.length} signatures were collected.`,
+      i,
+      y.id,
+      { cause: p }
+    );
+  }
+  return Ht(e, i), i;
+}
+function Ao(e, t) {
+  const r = /* @__PURE__ */ new Map();
+  if (!t) return r;
+  for (const o of e.requests) {
+    const s = t.get(o.id);
+    if (!(s === void 0 || Kt[o.kind] === "intentBound")) {
+      try {
+        ge(e, o, s);
+      } catch {
+        continue;
+      }
+      r.set(o.id, s);
+    }
+  }
+  return r;
+}
+async function Bo(e, t, r, o) {
+  const s = e.requests, n = await vt(
+    t,
+    s.map((i) => Ke(i.psbtBase64)),
+    s.map(
+      (i) => Et(
+        e.depositorPublicKey,
+        i.inputIndex,
+        r
+      )
+    ),
+    o
+  ), a = /* @__PURE__ */ new Map();
+  for (let i = 0; i < s.length; i++) {
+    const u = await bt(
+      Rt(n[i]),
+      s[i].inputIndex
+    );
+    ge(e, s[i], u), a.set(s[i].id, u);
+  }
+  return Ht(e, a), a;
+}
+async function Zs(e) {
+  const t = await vo({
+    depositorPublicKey: e.depositorPublicKey,
+    btcNetwork: e.btcNetwork,
+    source: e.source,
+    trustedVerifyingKeyHex: e.trustedVerifyingKeyHex,
+    vault: e.vault,
+    babeSessionsJson: e.babeSessionsJson
+  }), r = await $o(t, e.btcWallet, {
+    depositTerms: e.depositTerms,
+    vaultContext: e.vaultContext
+  });
+  return mo({ plan: t, signatures: r });
+}
+async function en(e) {
+  const t = await $t(e.btcWallet, e.vaultContext);
+  let r;
+  try {
+    r = await pr(t, e.htlcVout);
+  } finally {
+    t.fill(0);
+  }
+  let o;
+  try {
+    o = await gr(r);
+  } finally {
+    r.fill(0);
+  }
+  return Io(o.pk_hash, e.expectedWotsPkHash), await fr(
+    e.txGraphVersion,
+    o.keypair,
+    e.txGraphJson
+  ), {
+    wotsKeypairJson: JSON.stringify(o.keypair),
+    pkHash: o.pk_hash
+  };
+}
+function Io(e, t) {
+  if (ne(e) !== ne(t))
+    throw new Error(
+      `Derived WOTS public-key hash ${ne(e)} does not match the vault's on-chain depositorWotsPkHash ${ne(t)}. The wallet, the HTLC output index, or the derivation itself is not the one this vault was created with.`
+    );
+}
+function ne(e) {
+  return `0x${(e.startsWith("0x") ? e.slice(2) : e).toLowerCase()}`;
+}
+function we(e, t, r) {
+  const o = `${e} operation key (admin=${t.ethAddress})`, s = _e(
+    t.btcPubKey,
+    `${e} roster key (admin=${t.ethAddress})`
+  ), n = _e(r, o);
+  return {
+    adminAddress: t.ethAddress,
+    genesisBtcPubkey: s,
+    operationBtcPubkey: n,
+    rotated: n !== s
+  };
+}
+function Vo(e) {
+  const t = /* @__PURE__ */ new Map();
+  for (const r of e) {
+    const o = t.get(r.operationBtcPubkey);
+    if (o)
+      throw new Error(
+        `Participant operation key collision: ${o} and ${r.adminAddress} both resolve to operation key ${r.operationBtcPubkey}`
+      );
+    t.set(r.operationBtcPubkey, r.adminAddress);
+  }
+}
+function Ot(e, t, r) {
+  if (t.vaultKeepers.length !== e.vaultKeepers.length || t.universalChallengers.length !== e.universalChallengers.length)
+    throw new Error(
+      `Operation-key resolution returned ${t.vaultKeepers.length} keeper and ${t.universalChallengers.length} challenger keys for a roster of ${e.vaultKeepers.length} keepers and ${e.universalChallengers.length} challengers`
+    );
+  const o = we(
+    "vault provider",
+    {
+      ethAddress: e.vaultProviderEthAddress,
+      btcPubKey: e.vaultProviderGenesisBtcPubkey
+    },
+    t.vaultProvider
+  ), s = e.vaultKeepers.map(
+    (a, i) => we("vault keeper", a, t.vaultKeepers[i])
+  ), n = e.universalChallengers.map(
+    (a, i) => we("universal challenger", a, t.universalChallengers[i])
+  );
+  return Vo([
+    o,
+    ...s,
+    ...n
+  ]), {
+    vaultProvider: o,
+    vaultKeepers: s,
+    universalChallengers: n,
+    // Derived from the pairs, never the reverse — see ParticipantKeySet.
+    vaultKeeperOperationKeysSorted: s.map((a) => a.operationBtcPubkey).sort(),
+    universalChallengerOperationKeysSorted: n.map((a) => a.operationBtcPubkey).sort(),
+    resolvedAt: r,
+    query: e
+  };
+}
+async function Ro(e) {
+  const t = await e.operationKeyReader.getCurrentOperationKeys(
+    e.query,
+    e.blockNumber
+  );
+  return Ot(e.query, t, { mode: "current" });
+}
+async function Nt(e) {
+  const t = await e.operationKeyReader.getOperationKeysAtEpochs(
+    e.query,
+    e.epochs
+  );
+  return Ot(e.query, t, {
+    mode: "epochs",
+    epochs: e.epochs
+  });
+}
+async function Ko(e) {
+  const { basic: t, protocol: r } = e.vault, {
+    registryReader: o,
+    vaultKeeperReader: s,
+    universalChallengerReader: n,
+    operationKeyReader: a
+  } = e.readers, [
+    i,
+    u,
+    l,
+    c
+  ] = await Promise.all([
+    s.getVaultKeepersByVersion(
+      t.applicationEntryPoint,
+      r.appVaultKeepersVersion
+    ),
+    n.getUniversalChallengersByVersion(
+      r.universalChallengersVersion
+    ),
+    o.getVaultProviderGenesisBtcPubKey(t.vaultProvider),
+    o.getVaultKeyEpochs(e.vaultId)
+  ]);
+  if (i.length === 0)
+    throw new Error(
+      `No vault keepers for version ${r.appVaultKeepersVersion}`
+    );
+  if (u.length === 0)
+    throw new Error(
+      `No universal challengers for version ${r.universalChallengersVersion}`
+    );
+  return Nt({
+    operationKeyReader: a,
+    query: {
+      vaultProviderEthAddress: t.vaultProvider,
+      vaultProviderGenesisBtcPubkey: `0x${l}`,
+      applicationEntryPoint: t.applicationEntryPoint,
+      vaultKeepers: i,
+      universalChallengers: u
+    },
+    epochs: c
+  });
+}
+async function tn(e) {
+  const { vaultId: t, readers: r } = e, o = await r.registryReader.getVaultData(t), { basic: s, protocol: n } = o;
+  if (n.vaultCoreVersion !== U)
+    throw new Error(
+      `Vault ${t} is stamped vault core version ${n.vaultCoreVersion}; delegated claim requires ${U}.`
+    );
+  const a = _e(
+    s.depositorBtcPubKey,
+    `getBtcVaultBasicInfo(${t}).depositorBtcPubKey`
+  );
+  if (s.status !== Ge.REDEEMED)
+    throw new Me(
+      t,
+      s.depositorBtcPubKey,
+      s.createdAt,
+      s.createdAt,
+      `the vault's status is ${s.status}, not Redeemed (${Ge.REDEEMED}); no scan was made`
+    );
+  const [i, u, l, c] = await Promise.all([
+    Ko({ vaultId: t, vault: o, readers: r }),
+    r.registryReader.getRegistrationRecordsAtBlock(s.createdAt),
+    r.registryReader.getVaultClaimableBy(t, s.depositorBtcPubKey, s.createdAt).catch((v) => {
+      throw Pr(v) ? new Me(
+        t,
+        s.depositorBtcPubKey,
+        v.fromBlock,
+        v.toBlock,
+        "the vault is Redeemed but no VaultClaimableBy authorizes this depositor key in the finalized range. Either the redeem has not finalized yet (the scan stops about two epochs behind the tip), or the vault was redeemed for a vault keeper alone (redeemForAVK emits no depositor log), or the node did not serve every block scanned.",
+        { cause: v }
+      ) : v;
+    }),
+    r.protocolParamsReader.getOffchainParamsByVersion(
+      n.offchainParamsVersion
+    )
+  ]), d = _r(c.timelockAssert), h = mr(u, t, s.createdAt);
+  wr(h);
+  const g = xr(h);
+  if (g.toLowerCase() !== n.prePeginTxHash.toLowerCase())
+    throw new Error(
+      `Registration log of vault ${t} records prePeginTxHash ${g} but the vault record says ${n.prePeginTxHash}; refusing an inconsistent node.`
+    );
+  if (h.vaultCoreVersion !== n.vaultCoreVersion)
+    throw new Error(
+      `Registration log of vault ${t} records vault core version ${h.vaultCoreVersion} but the vault record says ${n.vaultCoreVersion}; refusing an inconsistent node.`
+    );
+  if (h.amount !== s.amount)
+    throw new Error(
+      `Registration log of vault ${t} records amount ${h.amount} sats but the vault record says ${s.amount}; refusing an inconsistent node.`
+    );
+  if (h.depositor.toLowerCase() !== s.depositor.toLowerCase())
+    throw new Error(
+      `Registration log of vault ${t} records depositor ${h.depositor} but the vault record says ${s.depositor}; refusing an inconsistent node.`
+    );
+  if (h.vaultProvider.toLowerCase() !== s.vaultProvider.toLowerCase())
+    throw new Error(
+      `Registration log of vault ${t} records vaultProvider ${h.vaultProvider} but the vault record says ${s.vaultProvider}; refusing an inconsistent node.`
+    );
+  if (l.vaultCoreVersion !== n.vaultCoreVersion)
+    throw new Error(
+      `Redemption log of vault ${t} records vault core version ${l.vaultCoreVersion} but the vault record says ${n.vaultCoreVersion}; refusing an inconsistent node.`
+    );
+  if (l.proverCircuitVersion !== h.proverCircuitVersion)
+    throw new Error(
+      `Redemption log of vault ${t} records proverCircuitVersion ${l.proverCircuitVersion} but the registration log says ${h.proverCircuitVersion}; refusing an inconsistent node.`
+    );
+  if (h.proverCircuitVersion !== c.proverCircuitVersion)
+    throw new Error(
+      `Registration log of vault ${t} records proverCircuitVersion ${h.proverCircuitVersion} but the stamped offchain params say ${c.proverCircuitVersion}; refusing an inconsistent node.`
+    );
+  const p = Er(n.depositorSignedPeginTx);
+  for (const [v, E] of [
+    ["Registration", h.peginTxHash],
+    ["Redemption", l.peginTxHash]
+  ])
+    if (E.toLowerCase() !== p.toLowerCase())
+      throw new Error(
+        `${v} log of vault ${t} records peginTxHash ${E} but the vault's depositor-signed PegIn hashes to ${p}; refusing an inconsistent node.`
+      );
+  const y = G(
+    Pt(p, s.depositor)
+  );
+  if (y !== G(t))
+    throw new Error(
+      `Depositor-signed PegIn of vault ${t} derives vault id ${y} with depositor ${s.depositor}; refusing an inconsistent node.`
+    );
+  for (const v of [
+    "offchainParamsVersion",
+    "universalChallengersVersion",
+    "appVaultKeepersVersion"
+  ]) {
+    if (h[v] !== n[v])
+      throw new Error(
+        `Registration log of vault ${t} records ${v} ${h[v]} but the vault record says ${n[v]}; refusing an inconsistent node.`
+      );
+    if (l[v] !== n[v])
+      throw new Error(
+        `Redemption log of vault ${t} records ${v} ${l[v]} but the vault record says ${n[v]}; refusing an inconsistent node.`
+      );
+  }
+  const f = S.fromHex(
+    b(n.depositorSignedPeginTx)
+  );
+  if (f.ins.length !== 1)
+    throw new Error(
+      `Depositor-signed PegIn of vault ${t} has ${f.ins.length} inputs; it spends Pre-PegIn ${n.prePeginTxHash} output ${n.htlcVout} with exactly one; refusing an inconsistent node.`
+    );
+  const P = Re(f.ins[0].hash), k = f.ins[0].index;
+  if (P !== b(n.prePeginTxHash).toLowerCase() || k !== n.htlcVout)
+    throw new Error(
+      `Depositor-signed PegIn of vault ${t} spends ${P}:${k} but the vault record says Pre-PegIn ${n.prePeginTxHash} output ${n.htlcVout}; refusing an inconsistent node.`
+    );
+  const x = f.outs[Q];
+  if (x === void 0)
+    throw new Error(
+      `Depositor-signed PegIn of vault ${t} has no output ${Q}; the Payout cannot spend the Vault UTXO.`
+    );
+  if (BigInt(x.value) !== s.amount)
+    throw new Error(
+      `Depositor-signed PegIn of vault ${t} pays ${x.value} sats to output ${Q} but the vault record says ${s.amount}; refusing an inconsistent node.`
+    );
+  return {
+    context: {
+      vaultId: t,
+      depositorEthAddress: s.depositor,
+      depositorBtcPubkey: a,
+      registeredPayoutScriptPubKey: b(
+        h.depositorPayoutScriptPubKey
+      ),
+      vaultProviderBtcPubkey: i.vaultProvider.operationBtcPubkey,
+      vaultKeeperBtcPubkeys: [
+        ...i.vaultKeeperOperationKeysSorted
+      ],
+      universalChallengerBtcPubkeys: [
+        ...i.universalChallengerOperationKeysSorted
+      ],
+      txGraphVersion: U,
+      proverCircuitVersion: c.proverCircuitVersion,
+      vaultCoreVersion: n.vaultCoreVersion,
+      claimableEventBlockNumber: l.blockNumber,
+      peginVaultOutputValueSats: x.value,
+      protocolFeeRate: c.feeRate,
+      councilSize: c.securityCouncilKeys.length,
+      timelockPegin: d,
+      timelockAssert: Number(c.timelockAssert)
+    },
+    vault: o,
+    registrationRecord: h,
+    registrationRecords: u,
+    participantKeys: i,
+    offchainParams: c,
+    depositorBtcPubKeyBytes32: s.depositorBtcPubKey,
+    depositorWotsPkHash: n.depositorWotsPkHash,
+    prePeginTxHash: n.prePeginTxHash,
+    peginTxHash: p,
+    vaultProvider: s.vaultProvider,
+    htlcVout: n.htlcVout
+  };
+}
+const Ho = 8, Oo = 6e3, No = 10 * 6e4, Do = 10;
+class Dt extends Error {
+  constructor(t) {
+    super(t), this.name = "PeginRegistrationMissingError";
+  }
+}
+class Mt extends Error {
+  constructor(t) {
+    super(t), this.name = "PeginRegistrationNotFinalError";
+  }
+}
+function Mo(e) {
+  return e instanceof Dt || e instanceof Error && e.name === "PeginRegistrationMissingError";
+}
+function rn(e) {
+  return e instanceof Mt || e instanceof Error && e.name === "PeginRegistrationNotFinalError";
+}
+function Ze(e) {
+  const { currentBlock: t, createdAtBlock: r } = e, o = t - r + 1n;
+  return o < 0n ? 0 : Number(o);
+}
+async function on(e) {
+  const {
+    vaultRegistryReader: t,
+    getBlockNumber: r,
+    vaultIds: o,
+    required: s = Ho,
+    pollIntervalMs: n = Oo,
+    timeoutMs: a = No,
+    signal: i,
+    onProgress: u
+  } = e;
+  if (o.length === 0)
+    throw new Error(
+      "waitForPeginRegistrationDepth requires at least one vault ID"
+    );
+  const l = Date.now();
+  let c = !1, d = 0, h;
+  for (; ; ) {
+    if (i != null && i.aborted)
+      throw new Error(
+        `Aborted while waiting for peg-in registration depth (${o.length} vault(s))`
+      );
+    if (Date.now() - l >= a)
+      throw new Mt(
+        `Peg-in registration did not reach ${s} Ethereum confirmations within ${a}ms. The registration transaction was submitted but is not yet final, so the Pre-PegIn Bitcoin transaction was never sent and no funds are at risk. Resume this deposit from the dashboard once the network settles.` + (h instanceof Error ? ` Last read error: ${h.message}` : "")
+      );
+    try {
+      const g = await r(), p = await Promise.all(
+        o.map((f) => t.getVaultBasicInfo(f))
+      ), y = p.findIndex(
+        (f) => f.depositor === Sr || f.createdAt === 0n
+      );
+      if (y !== -1) {
+        if (d += 1, !c && d > Do)
+          throw new Dt(
+            `Vault ${o[y]} is still not visible on-chain after ${d} reads — the registration does not exist.`
+          );
+        console.warn(
+          `Peg-in registration for vault ${o[y]} is not visible in chain state at block ${g} — a lagging RPC backend or an Ethereum reorg. Still polling.`
+        ), u == null || u({ confirmations: 0, required: s });
+      } else {
+        c = !0, d = 0, h = void 0;
+        let f = p[0], P = Ze({
+          currentBlock: g,
+          createdAtBlock: p[0].createdAt
+        });
+        for (const k of p.slice(1)) {
+          const x = Ze({
+            currentBlock: g,
+            createdAtBlock: k.createdAt
+          });
+          x < P && (P = x, f = k);
+        }
+        if (u == null || u({ confirmations: P, required: s }), P >= s)
+          return { confirmations: P, basicInfo: f };
+      }
+    } catch (g) {
+      if (Mo(g))
+        throw g;
+      console.warn(
+        `Registration-depth read failed (retrying in ${n}ms): ` + (g instanceof Error ? g.message : String(g))
+      ), h = g;
+    }
+    await new Promise((g, p) => {
+      const y = () => {
+        clearTimeout(f), p(
+          new Error(
+            `Aborted while waiting for peg-in registration depth (${o.length} vault(s))`
+          )
+        );
+      }, f = setTimeout(() => {
+        i == null || i.removeEventListener("abort", y), g();
+      }, n);
+      i == null || i.addEventListener("abort", y, { once: !0 });
+    });
+  }
+}
+const Lo = /^(?:[0-9a-f]{2})*$/, Fo = /^[0-9a-f]{64}$/, Uo = /^([0-9a-f]{64}):(0|[1-9][0-9]*)$/, qo = -2147483648, Xo = 2147483647, xe = 4294967295, et = 2, tt = 2, le = 0;
+class m extends Error {
+  constructor(t) {
+    super(t), this.name = "GraphFingerprintError";
+  }
+}
+function $(e, t, r) {
+  const o = e[t];
+  if (o === void 0)
+    throw new m(`Graph tx ${r} is missing "${t}"`);
+  return o;
+}
+function Z(e, t) {
+  if (!Array.isArray(e))
+    throw new m(`Graph tx ${t} is not an array`);
+  return e;
+}
+function B(e, t) {
+  if (e === null || typeof e != "object" || Array.isArray(e))
+    throw new m(`Graph tx ${t} is not an object`);
+  return e;
+}
+function W(e, t, r, o) {
+  if (typeof e != "number" || !Number.isSafeInteger(e) || e < r || e > o)
+    throw new m(
+      `Graph tx ${t} is not an integer in [${r}, ${o}]`
+    );
+  return e;
+}
+function Ee(e, t) {
+  if (typeof e != "string" || !Lo.test(e))
+    throw new m(
+      `Graph tx ${t} is not lowercase hex without a prefix`
+    );
+  return H.from(e, "hex");
+}
+function de(e, t) {
+  if (typeof e != "string" || !Fo.test(e))
+    throw new m(
+      `Graph ${t} is not 32 bytes of lowercase hex`
+    );
+  return e;
+}
+function rt(e, t) {
+  const r = B(e, t), o = new S();
+  return o.version = W(
+    $(r, "version", t),
+    `${t}.version`,
+    qo,
+    Xo
+  ), o.locktime = W(
+    $(r, "lock_time", t),
+    `${t}.lock_time`,
+    0,
+    xe
+  ), Z($(r, "input", t), `${t}.input`).forEach((s, n) => {
+    const a = `${t}.input[${n}]`, i = B(s, a), u = $(i, "previous_output", a), l = typeof u == "string" && Uo.exec(u);
+    if (!l)
+      throw new m(
+        `Graph tx ${a}.previous_output is not "<txid>:<vout>"`
+      );
+    const c = W(Number(l[2]), `${a}.previous_output vout`, 0, xe);
+    o.addInput(
+      H.from(l[1], "hex").reverse(),
+      c,
+      W($(i, "sequence", a), `${a}.sequence`, 0, xe),
+      Ee($(i, "script_sig", a), `${a}.script_sig`)
+    ), o.ins[n].witness = Z(
+      $(i, "witness", a),
+      `${a}.witness`
+    ).map((d, h) => Ee(d, `${a}.witness[${h}]`));
+  }), Z($(r, "output", t), `${t}.output`).forEach((s, n) => {
+    const a = `${t}.output[${n}]`, i = B(s, a);
+    o.addOutput(
+      Ee($(i, "script_pubkey", a), `${a}.script_pubkey`),
+      W($(i, "value", a), `${a}.value`, 0, Number.MAX_SAFE_INTEGER)
+    );
+  }), new Uint8Array(o.toBuffer());
+}
+function D(e, t) {
+  const r = b(e).toLowerCase();
+  let o;
+  try {
+    o = S.fromHex(r);
+  } catch (s) {
+    throw new m(
+      `Presign ${t} is not one transaction: ${s instanceof Error ? s.message : String(s)}`
+    );
+  }
+  if (o.toHex() !== r)
+    throw new m(
+      `Presign ${t} is not a canonical transaction encoding`
+    );
+  return o;
+}
+function Lt(e, t) {
+  const r = e.ins[t];
+  if (r)
+    return {
+      txid: H.from(r.hash).reverse().toString("hex"),
+      vout: r.index
+    };
+}
+function Ft(e, t) {
+  if (!e.outs[le])
+    throw new m(
+      `Presign ${t}.claim_tx must have output ${le}`
+    );
+}
+function Go(e, t, r) {
+  if (e.ins.length !== 1)
+    throw new m(
+      `Presign ${r}.claim_tx must have exactly one input, got ${e.ins.length}`
+    );
+  Ft(e, r);
+  const o = Lt(e, 0);
+  if ((o == null ? void 0 : o.txid) !== t || o.vout !== X) {
+    const s = o ? `${o.txid}:${o.vout}` : "no input";
+    throw new m(
+      `Presign ${r}.claim_tx must spend ${t}:${X}, got ${s}`
+    );
+  }
+}
+function He(e, t, r) {
+  const o = Lt(e, 0);
+  if ((o == null ? void 0 : o.txid) !== t || o.vout !== le) {
+    const s = o ? `${o.txid}:${o.vout}` : "no input";
+    throw new m(
+      `Presign ${r}.assert_tx input 0 must spend ${t}:${le}, got ${s}`
+    );
+  }
+}
+function Ut(e) {
+  const t = D(e.peginTxHex, `${e.path}.pegin_tx`), r = D(e.claimTxHex, `${e.path}.claim_tx`), o = D(e.assertTxHex, `${e.path}.assert_tx`);
+  return { peginTx: t, claimTx: r, assertTx: o };
+}
+function zo(e) {
+  const t = D(e.claimTxHex, `${e.path}.claim_tx`), r = D(e.assertTxHex, `${e.path}.assert_tx`);
+  Ft(t, e.path), He(r, t.getId(), e.path);
+}
+function jo(e) {
+  const { peginTx: t, claimTx: r, assertTx: o } = Ut(e);
+  Go(r, t.getId(), e.path), He(o, r.getId(), e.path);
+}
+function Wo(e, t) {
+  const [r, ...o] = e.ins;
+  if (!r || o.length > 0)
+    throw new m(
+      `Presign claim_tx must have exactly one input, got ${e.ins.length}`
+    );
+  const s = H.from(r.hash).reverse().toString("hex");
+  if (s !== t || r.index !== X)
+    throw new m(
+      `Presign claim_tx must spend ${t}:${X}, got ${s}:${r.index}`
+    );
+  if (e.version !== et)
+    throw new m(
+      `Presign claim_tx version must be ${et}, got ${e.version}`
+    );
+  if (r.witness.length > 0)
+    throw new m(
+      `Presign claim_tx input must have an empty witness, got ${r.witness.length} item(s)`
+    );
+  if (e.outs.length !== tt)
+    throw new m(
+      `Presign claim_tx must have exactly ${tt} outputs, got ${e.outs.length}`
+    );
+}
+function qt(e) {
+  const t = [...e.challengers].sort(
+    (o, s) => o.pubkey < s.pubkey ? -1 : o.pubkey > s.pubkey ? 1 : 0
+  ), r = [e.peginTx, e.claimTx, e.assertTx, e.payoutTx];
+  return t.forEach((o, s) => {
+    const n = de(o.pubkey, "challenger pubkey");
+    if (s > 0 && t[s - 1].pubkey === n)
+      throw new m(`Graph lists challenger ${n} twice`);
+    r.push(je(n), o.nopayoutTx);
+    for (const a of o.outputLabelHashes)
+      r.push(je(de(a, "output_label_hashes entry")));
+  }), Kr(Hr(Or(...r)));
+}
+function Yo(e) {
+  const t = b(e.peginTxid).toLowerCase(), { peginTx: r, claimTx: o, assertTx: s } = Ut({
+    peginTxHex: e.peginTxHex,
+    claimTxHex: e.claimTxHex,
+    assertTxHex: e.assertTxHex,
+    path: "depositor_graph"
+  });
+  if (r.getId() !== t)
+    throw new m(
+      `Presign pegin_tx hashes to ${r.getId()}, expected ${t}`
+    );
+  Wo(o, t), He(s, o.getId(), "depositor_graph");
+  const n = (a) => new Uint8Array(a.toBuffer());
+  return qt({
+    peginTx: n(r),
+    claimTx: n(o),
+    assertTx: n(s),
+    payoutTx: n(D(e.payoutTxHex, "payout_tx")),
+    challengers: e.challengers.map((a) => ({
+      pubkey: _(a.challenger_pubkey),
+      nopayoutTx: n(D(a.nopayout_tx.tx_hex, "nopayout_tx")),
+      outputLabelHashes: a.output_label_hashes.map(
+        (i) => b(i).toLowerCase()
+      )
+    }))
+  });
+}
+function Qo(e) {
+  const t = (o) => rt(B($(e, o, "graph"), o).tx, o), r = B(
+    $(e, "challenger_subgraphs", "graph"),
+    "challenger_subgraphs"
+  );
+  return qt({
+    peginTx: t("pegin_tx"),
+    claimTx: t("claim_tx"),
+    assertTx: t("assert_tx"),
+    payoutTx: t("payout_tx"),
+    challengers: Object.entries(r).map(([o, s]) => {
+      const n = `challenger_subgraphs[${o}]`, a = B(s, n);
+      return {
+        pubkey: o,
+        nopayoutTx: rt(
+          B($(a, "nopayout_tx", n), `${n}.nopayout_tx`).tx,
+          `${n}.nopayout_tx`
+        ),
+        outputLabelHashes: Z(
+          $(a, "output_label_hashes", n),
+          `${n}.output_label_hashes`
+        ).map(
+          (i, u) => de(i, `${n}.output_label_hashes[${u}]`)
+        )
+      };
+    })
+  });
+}
+function Jo(e) {
+  const t = B(
+    $(e, "challenger_pubkeys", "graph"),
+    "challenger_pubkeys"
+  ), r = /* @__PURE__ */ new Set();
+  for (const o of ["local", "universal"])
+    Z(
+      $(t, o, "challenger_pubkeys"),
+      `challenger_pubkeys.${o}`
+    ).forEach((s, n) => {
+      const a = de(s, `challenger_pubkeys.${o}[${n}]`);
+      if (r.has(a))
+        throw new m(
+          `Graph declares challenger ${a} more than once`
+        );
+      r.add(a);
+    });
+  return r;
+}
+function sn(e, t) {
+  const r = Qo(e);
+  if (r !== t)
+    throw new m(
+      `Graph fingerprint ${r} does not match the presign fingerprint ${t}`
+    );
+  const o = Object.keys(
+    B(e.challenger_subgraphs, "challenger_subgraphs")
+  ), s = Jo(e);
+  if (o.length !== s.size || o.some((n) => !s.has(n)))
+    throw new m(
+      `Graph challenger_subgraphs keys ${o.join(", ")} do not match challenger_pubkeys ${[...s].join(", ")}`
+    );
+}
+const Zo = 1;
+function es(e, t, r) {
+  const o = r.map(
+    (d) => b(d).toLowerCase()
+  ), s = t.filter((d) => o.includes(d));
+  if (s.length > 0)
+    throw new Error(
+      `Cannot validate challenger set: vault keepers and universal challengers overlap (${s.join(", ")})`
+    );
+  const n = [...t, ...o], a = e.map(
+    (d) => b(d.challenger_pubkey).toLowerCase()
+  ), i = new Set(a);
+  if (i.size !== a.length)
+    throw new Error(
+      "Depositor graph contains duplicate challenger entries in challenger_presign_data"
+    );
+  const u = new Set(n), l = n.filter((d) => !i.has(d)), c = a.filter((d) => !u.has(d));
+  if (l.length > 0 || c.length > 0)
+    throw new Error(
+      "Depositor graph challenger set does not match expected (local ∪ universal)" + (l.length > 0 ? ` (missing: ${l.join(", ")})` : "") + (c.length > 0 ? ` (unexpected: ${c.join(", ")})` : "")
+    );
+}
+function ts(e, t) {
+  const r = e.ins[t];
+  return Ie(new Uint8Array(r.hash).slice().reverse());
+}
+function $e(e, t, r, o, s) {
+  const n = e.ins[t];
+  if (n.index !== 0)
+    throw new Error(
+      `NoPayout (challenger ${s}) input ${t} expected to spend ${o} vout 0, got vout ${n.index}`
+    );
+  const a = r.getId(), i = ts(e, t);
+  if (i !== a)
+    throw new Error(
+      `NoPayout (challenger ${s}) input ${t} does not reference ${o} (expected txid ${a}, got ${i})`
+    );
+}
+async function rs(e, t, r) {
+  const o = [], s = [], n = [], a = mt({
+    claimerBtcPubkey: r.depositorBtcPubkey,
+    depositorBtcPubkey: r.depositorBtcPubkey,
+    vaultProviderBtcPubkey: r.vaultProviderBtcPubkey,
+    vaultKeeperBtcPubkeys: r.vaultKeeperBtcPubkeys
+  });
+  es(
+    e.challenger_presign_data,
+    a,
+    r.universalChallengerBtcPubkeys
+  );
+  const i = await Tr({
+    vaultCoreVersion: r.vaultCoreVersion,
+    vkClaimerPayoutScriptPubKeys: r.vkClaimerPayoutScriptPubKeys,
+    vpCommissionScriptPubKey: r.vpCommissionScriptPubKey,
+    payoutTxHex: e.payout_tx.tx_hex,
+    peginTxHex: r.peginTxHex,
+    assertTxHex: e.assert_tx.tx_hex,
+    timelockAssert: r.timelockAssert,
+    depositorBtcPubkey: r.depositorBtcPubkey,
+    vaultProviderBtcPubkey: r.vaultProviderBtcPubkey,
+    vaultKeeperBtcPubkeys: r.vaultKeeperBtcPubkeys,
+    universalChallengerBtcPubkeys: r.universalChallengerBtcPubkeys,
+    timelockPegin: r.timelockPegin,
+    network: r.network,
+    claimerBtcPubkey: r.depositorBtcPubkey,
+    registeredPayoutScriptPubKey: r.registeredPayoutScriptPubKey,
+    commissionBps: Zo,
+    protocolFeeRate: r.protocolFeeRate,
+    councilMembers: r.councilMembers,
+    councilQuorum: r.councilQuorum
+  });
+  o.push(i.psbtHex), s.push(
+    ue(
+      t,
+      Xe
+    )
+  );
+  const u = b(r.depositorBtcPubkey), l = S.fromHex(
+    b(e.assert_tx.tx_hex)
+  );
+  for (const c of e.challenger_presign_data) {
+    const d = b(c.challenger_pubkey), h = o.length, g = await os({
+      challenger: c,
+      challengerPubkey: d,
+      claimerPubkey: u,
+      localChallengers: a,
+      assertTxParsed: l,
+      ctx: r
+    });
+    o.push(g), s.push(
+      ue(
+        t,
+        Xe
+      )
+    ), n.push({
+      challengerPubkey: d,
+      noPayoutIdx: h
+    });
+  }
+  return { psbtHexes: o, signOptions: s, challengerEntries: n };
+}
+async function os(e) {
+  const {
+    challenger: t,
+    challengerPubkey: r,
+    claimerPubkey: o,
+    localChallengers: s,
+    assertTxParsed: n,
+    ctx: a
+  } = e;
+  Nr(
+    t.nopayout_tx.tx_hex,
+    r,
+    a.network
+  );
+  const i = S.fromHex(
+    b(t.nopayout_tx.tx_hex)
+  ), u = S.fromHex(
+    b(t.challenge_assert_x_tx.tx_hex)
+  ), l = S.fromHex(
+    b(t.challenge_assert_y_tx.tx_hex)
+  );
+  if (i.ins.length !== 3)
+    throw new Error(
+      `NoPayout (challenger ${r}) must have exactly 3 inputs, got ${i.ins.length}`
+    );
+  $e(
+    i,
+    0,
+    n,
+    "Assert",
+    r
+  ), $e(
+    i,
+    1,
+    u,
+    "ChallengeAssertX",
+    r
+  ), $e(
+    i,
+    2,
+    l,
+    "ChallengeAssertY",
+    r
+  );
+  const c = [
+    n.outs[0],
+    u.outs[0],
+    l.outs[0]
+  ].map((d) => ({
+    script_pubkey: Ie(new Uint8Array(d.script)),
+    value: d.value
+  }));
+  return Dr({
+    noPayoutTxHex: t.nopayout_tx.tx_hex,
+    challengerPubkey: r,
+    prevouts: c,
+    connectorParams: {
+      txGraphVersion: a.vaultCoreVersion,
+      claimer: o,
+      localChallengers: s,
+      universalChallengers: a.universalChallengerBtcPubkeys,
+      timelockAssert: a.timelockAssert,
+      councilMembers: a.councilMembers,
+      councilQuorum: a.councilQuorum
+    }
+  });
+}
+function ss(e, t, r) {
+  ie(e[0]);
+  const s = ae(
+    e[0].returnedPsbtHex,
+    r
+  );
+  re({
+    requestedPsbtHex: e[0].requestedPsbtHex,
+    signatureHex: s,
+    signerXOnlyPubkeyHex: r,
+    inputIndex: 0
+  });
+  const n = {};
+  for (const a of t) {
+    ie(e[a.noPayoutIdx]);
+    const i = ae(
+      e[a.noPayoutIdx].returnedPsbtHex,
+      r
+    );
+    re({
+      requestedPsbtHex: e[a.noPayoutIdx].requestedPsbtHex,
+      signatureHex: i,
+      signerXOnlyPubkeyHex: r,
+      inputIndex: 0
+    }), n[a.challengerPubkey] = {
+      nopayout_signature: i
+    };
+  }
+  return {
+    payout_signatures: {
+      payout_signature: s
+    },
+    per_challenger: n
+  };
+}
+async function ns(e) {
+  const { depositorGraph: t, btcWallet: r, signingContext: o } = e;
+  jo({
+    peginTxHex: o.peginTxHex,
+    claimTxHex: t.claim_tx.tx_hex,
+    assertTxHex: t.assert_tx.tx_hex,
+    path: "depositor_graph"
+  });
+  const s = await r.getPublicKeyHex(), { depositorPubkey: n } = tr(
+    s,
+    b(o.depositorBtcPubkey)
+  ), { psbtHexes: a, signOptions: i, challengerEntries: u } = await rs(
+    t,
+    s,
+    o
+  ), l = await vt(
+    r,
+    a,
+    i
+  ), c = a.map((d, h) => ({
+    requestedPsbtHex: d,
+    returnedPsbtHex: l[h]
+  }));
+  return ss(
+    c,
+    u,
+    n
+  );
+}
+const is = 1e4, L = 10;
+async function Xt(e) {
+  const {
+    statusReader: t,
+    vaultId: r,
+    peginTxid: o,
+    targetStatuses: s,
+    timeoutMs: n,
+    pollIntervalMs: a = is,
+    signal: i
+  } = e, u = Date.now();
+  for (; ; ) {
+    if (i != null && i.aborted)
+      throw new Error(
+        `Polling aborted for vault ${r.slice(0, L)}… (target: ${[...s].join(", ")})`
+      );
+    if (Date.now() - u >= n)
+      throw new Error(
+        `Polling timeout after ${n}ms for vault ${r.slice(0, L)}… (target: ${[...s].join(", ")})`
+      );
+    try {
+      const l = await t.getPeginStatusByVaultId(
+        { vault_id: r },
+        i
+      );
+      if (ze(l.vault_id) !== ze(r))
+        throw new Error(
+          `getPeginStatusByVaultId returned status for vault ${l.vault_id.slice(0, L)}…, requested ${r.slice(0, L)}…`
+        );
+      if (l.pegin_txid.toLowerCase() !== o.toLowerCase())
+        throw new Error(
+          `getPeginStatusByVaultId returned status for pegin ${l.pegin_txid.slice(0, 8)}…, requested ${o.slice(0, 8)}…`
+        );
+      const c = l.status;
+      if (s.has(c) || c === R.ACTIVATED)
+        return c;
+      if (c === R.EXPIRED || Ir.has(c))
+        throw new Error(
+          `Vault ${r.slice(0, L)}… reached terminal status "${c}" while waiting for ${[...s].join(", ")}`
+        );
+    } catch (l) {
+      if (!(l instanceof Vr && l.code === Rr.PEGIN_NOT_FOUND))
+        throw l;
+    }
+    await new Promise((l, c) => {
+      const d = () => {
+        clearTimeout(h), c(
+          new Error(
+            `Polling aborted for vault ${r.slice(0, L)}… (target: ${[...s].join(", ")})`
+          )
+        );
+      }, h = setTimeout(() => {
+        i == null || i.removeEventListener("abort", d), l();
+      }, a);
+      i == null || i.addEventListener("abort", d, { once: !0 });
+    });
+  }
+}
+const as = 1200 * 1e3, Gt = /* @__PURE__ */ new Set([
+  R.PENDING_ACKS,
+  R.PENDING_ACTIVATION,
+  R.ACTIVATED_PENDING_BROADCAST,
+  R.ACTIVATED
+]), us = /* @__PURE__ */ new Set([
+  R.PENDING_DEPOSITOR_SIGNATURES,
+  ...Gt
+]);
+function cs(e) {
+  return e.map((t) => ({
+    claimerPubkeyXOnly: he(t.claimer_pubkey),
+    payoutTxHex: t.payout_tx.tx_hex,
+    assertTxHex: t.assert_tx.tx_hex
+  }));
+}
+function I(e) {
+  return he(e).toLowerCase();
+}
+function ls(e, t) {
+  const r = (u, l, c) => {
+    throw new Error(
+      `Deposit terms ${u} (${String(l)}) does not match the vault's version-locked signing context (${String(c)}); refusing to sign payouts against terms that describe a different graph.`
+    );
+  }, o = [
+    ["protocolFeeRate", e.protocolFeeRate, t.protocolFeeRate],
+    ["vaultCoreVersion", e.vaultCoreVersion, t.vaultCoreVersion],
+    ["timelockPegin", e.timelockPegin, t.timelockPegin],
+    ["timelockAssert", e.timelockAssert, t.timelockAssert]
+  ];
+  for (const [u, l, c] of o)
+    l !== c && r(u, l, c);
+  const s = (u) => u.map(I).sort(), n = (u, l) => {
+    const c = s(u), d = s(l);
+    return c.length === d.length && c.every((h, g) => h === d[g]);
+  };
+  n(e.vaultKeeperBtcPubkeys, t.vaultKeeperBtcPubkeys) || r(
+    "vaultKeeperBtcPubkeys",
+    e.vaultKeeperBtcPubkeys.join(","),
+    t.vaultKeeperBtcPubkeys.join(",")
+  ), n(
+    e.universalChallengerBtcPubkeys,
+    t.universalChallengerBtcPubkeys
+  ) || r(
+    "universalChallengerBtcPubkeys",
+    e.universalChallengerBtcPubkeys.join(","),
+    t.universalChallengerBtcPubkeys.join(",")
+  );
+  const a = I(t.vaultProviderBtcPubkey), i = e.vaults.map(
+    (u) => I(u.vaultProviderBtcPubkey)
+  );
+  i.includes(a) || r(
+    "vaults[].vaultProviderBtcPubkey",
+    i.join(",") || "<no vaults>",
+    t.vaultProviderBtcPubkey
+  );
+}
+function ds(e, t, r, o) {
+  const s = I(o), n = [
+    I(t),
+    ...r.map(I)
+  ], a = new Set(n);
+  if (a.size !== n.length)
+    throw new Error(
+      "Cannot validate claimer set: signing context contains duplicate vault provider or vault keeper key"
+    );
+  if (a.has(s))
+    throw new Error(
+      "Cannot validate claimer set: depositor key overlaps with vault provider or vault keeper set"
+    );
+  const i = e.map(
+    (h) => I(h.claimer_pubkey)
+  );
+  if (new Set(i).size !== i.length)
+    throw new Error("Presign response contains duplicate claimer entries");
+  const u = i.filter((h) => h !== s), l = new Set(u), c = n.filter((h) => !l.has(h)), d = u.filter((h) => !a.has(h));
+  if (c.length > 0 || d.length > 0)
+    throw new Error(
+      "Presign response claimer set does not match expected (vault provider ∪ vault keepers)" + (c.length > 0 ? ` (missing: ${c.join(", ")})` : "") + (d.length > 0 ? ` (unexpected: ${d.join(", ")})` : "")
+    );
+}
+function ot(e, t) {
+  return {
+    vaultCoreVersion: t.vaultCoreVersion,
+    payoutTxHex: e.payoutTxHex,
+    peginTxHex: t.peginTxHex,
+    assertTxHex: e.assertTxHex,
+    vaultProviderBtcPubkey: t.vaultProviderBtcPubkey,
+    vaultKeeperBtcPubkeys: t.vaultKeeperBtcPubkeys,
+    universalChallengerBtcPubkeys: t.universalChallengerBtcPubkeys,
+    depositorBtcPubkey: t.depositorBtcPubkey,
+    timelockPegin: t.timelockPegin,
+    timelockAssert: t.timelockAssert,
+    registeredPayoutScriptPubKey: t.registeredPayoutScriptPubKey,
+    claimerBtcPubkey: e.claimerPubkeyXOnly,
+    commissionBps: t.commissionBps,
+    protocolFeeRate: t.protocolFeeRate,
+    councilMembers: t.councilMembers,
+    councilQuorum: t.councilQuorum,
+    vkClaimerPayoutScriptPubKeys: t.vkClaimerPayoutScriptPubKeys,
+    vpCommissionScriptPubKey: t.vpCommissionScriptPubKey
+  };
+}
+async function hs(e, t, r, o) {
+  const s = new or({
+    network: t.network,
+    btcWallet: e
+  }), n = r.length;
+  o == null || o(0, n);
+  let a;
+  if (s.supportsBatchSigning())
+    a = (await s.signPayoutTransactionsBatch(
+      r.map((l) => ot(l, t))
+    )).map((l) => l.payoutSignature);
+  else {
+    a = [];
+    for (let u = 0; u < r.length; u++) {
+      o == null || o(u, n);
+      const l = await s.signPayoutTransaction(
+        ot(r[u], t)
+      );
+      a.push(l.signature);
+    }
+  }
+  const i = {};
+  for (let u = 0; u < r.length; u++)
+    i[r[u].claimerPubkeyXOnly] = {
+      payout_signature: a[u]
+    };
+  return o == null || o(n, n), i;
+}
+async function nn(e) {
+  const {
+    statusReader: t,
+    presignClient: r,
+    btcWallet: o,
+    vaultId: s,
+    peginTxid: n,
+    depositorPk: a,
+    signingContext: i,
+    depositTerms: u,
+    timeoutMs: l = as,
+    signal: c,
+    onProgress: d,
+    recordGraphFingerprint: h
+  } = e, g = await Xt({
+    statusReader: t,
+    vaultId: s,
+    peginTxid: n,
+    targetStatuses: us,
+    timeoutMs: l,
+    signal: c
+  });
+  if (Gt.has(g))
+    return;
+  c == null || c.throwIfAborted(), u !== void 0 && ls(u, i);
+  const p = yt(o) ? o : void 0;
+  let y;
+  if (p) {
+    if (!u)
+      throw new Error(
+        "runDepositorPresignFlow: this wallet requires approved deposit terms but none were provided. Fresh deposits must pass PreparePeginResult.depositTerms; resume flows must rebuild them from on-chain state (the vault app's rebuildDepositTerms)."
+      );
+    y = u;
+  }
+  const f = await r.requestDepositorPresignTransactions(
+    {
+      pegin_txid: n,
+      depositor_pk: a
+    },
+    c
+  );
+  c == null || c.throwIfAborted(), f.txs.forEach((O, oe) => {
+    zo({
+      claimTxHex: O.claim_tx.tx_hex,
+      assertTxHex: O.assert_tx.tx_hex,
+      path: `txs[${oe}]`
+    });
+  });
+  const P = Yo({
+    peginTxid: n,
+    peginTxHex: i.peginTxHex,
+    claimTxHex: f.depositor_graph.claim_tx.tx_hex,
+    assertTxHex: f.depositor_graph.assert_tx.tx_hex,
+    payoutTxHex: f.depositor_graph.payout_tx.tx_hex,
+    challengers: f.depositor_graph.challenger_presign_data
+  }), k = I(a);
+  ds(
+    f.txs,
+    i.vaultProviderBtcPubkey,
+    i.vaultKeeperBtcPubkeys,
+    a
+  );
+  const x = f.txs.filter(
+    (O) => I(O.claimer_pubkey) !== k
+  ), v = cs(x);
+  p && y && (typeof p.validateDepositTerms == "function" && await p.validateDepositTerms(y), await p.approveDepositTerms(y)), c == null || c.throwIfAborted();
+  const E = await hs(
+    o,
+    i,
+    v,
+    d
+  );
+  c == null || c.throwIfAborted();
+  const C = await ns({
+    depositorGraph: f.depositor_graph,
+    btcWallet: o,
+    signingContext: {
+      vaultCoreVersion: i.vaultCoreVersion,
+      peginTxHex: i.peginTxHex,
+      depositorBtcPubkey: a,
+      vaultProviderBtcPubkey: i.vaultProviderBtcPubkey,
+      vaultKeeperBtcPubkeys: i.vaultKeeperBtcPubkeys,
+      universalChallengerBtcPubkeys: i.universalChallengerBtcPubkeys,
+      timelockPegin: i.timelockPegin,
+      timelockAssert: i.timelockAssert,
+      councilMembers: i.councilMembers,
+      councilQuorum: i.councilQuorum,
+      network: i.network,
+      registeredPayoutScriptPubKey: i.registeredPayoutScriptPubKey,
+      protocolFeeRate: i.protocolFeeRate,
+      vkClaimerPayoutScriptPubKeys: i.vkClaimerPayoutScriptPubKeys,
+      vpCommissionScriptPubKey: i.vpCommissionScriptPubKey
+    }
+  });
+  c == null || c.throwIfAborted(), await h(P), c == null || c.throwIfAborted();
+  const w = { ...E };
+  w[b(a)] = C.payout_signatures, await r.submitDepositorPresignatures(
+    {
+      pegin_txid: n,
+      depositor_pk: a,
+      signatures: w,
+      depositor_claimer_presignatures: C
+    },
+    c
+  );
+}
+const ps = 300 * 1e3, gs = /* @__PURE__ */ new Set([
+  R.PENDING_DEPOSITOR_WOTS_PK,
+  ...kt
+]);
+async function an(e) {
+  const {
+    statusReader: t,
+    wotsSubmitter: r,
+    vaultId: o,
+    peginTxid: s,
+    depositorPk: n,
+    wotsPublicKeys: a,
+    timeoutMs: i = ps,
+    signal: u
+  } = e;
+  u == null || u.throwIfAborted();
+  const l = await Xt({
+    statusReader: t,
+    vaultId: o,
+    peginTxid: s,
+    targetStatuses: gs,
+    timeoutMs: i,
+    signal: u
+  });
+  kt.has(l) || (u == null || u.throwIfAborted(), await r.submitDepositorWotsKey(
+    {
+      pegin_txid: s,
+      depositor_pk: n,
+      wots_public_keys: a
+    },
+    u
+  ));
+}
+function ke(e) {
+  return e.registration || e.operation;
+}
+function fs(e, t, r) {
+  const o = _(e);
+  return {
+    registration: o === _(t),
+    operation: o === _(r)
+  };
+}
+function st(e, t, r) {
+  const o = Ce(e);
+  return {
+    registration: nt(o, Ce(t)),
+    operation: nt(o, Ce(r))
+  };
+}
+function Ce(e) {
+  return e.map(_).sort();
+}
+function nt(e, t) {
+  return e.length === t.length && e.every((r, o) => r === t[o]);
+}
+async function un(e) {
+  const {
+    vaultProviderEthAddress: t,
+    hintBtcPubkey: r,
+    registrationBtcPubkey: o,
+    readCurrentOperationBtcPubkey: s,
+    context: n
+  } = e;
+  if (!r) return;
+  const a = _(r);
+  if (a === _(o)) return;
+  const i = _(
+    await s()
+  );
+  if (a !== i)
+    throw new Error(
+      `Vault provider BTC pubkey mismatch for ${t}: indexer hint matches neither the registration key nor the current operation key on-chain.${n ? ` ${n}` : ""}`
+    );
+}
+class Se extends Error {
+  constructor(t) {
+    super(t), this.name = "ApplicationEntryPointMismatchError";
+  }
+}
+function cn(e) {
+  return e instanceof Se || e instanceof Error && e.name === "ApplicationEntryPointMismatchError";
+}
+const it = (e) => e.map(_).sort();
+async function ln(e) {
+  const {
+    vaultRegistryReader: t,
+    vaultKeeperReader: r,
+    universalChallengerReader: o,
+    vaultProviderEthAddress: s,
+    applicationEntryPoint: n,
+    expectedVaultProviderBtcPubkey: a,
+    expectedVaultKeeperBtcPubkeys: i,
+    expectedUniversalChallengerBtcPubkeys: u,
+    operationKeyReader: l,
+    onIndexerServingOperationKeys: c,
+    onIndexerHintsInconsistent: d,
+    blockNumber: h
+  } = e, [
+    g,
+    p,
+    y,
+    f
+  ] = await Promise.all([
+    t.getVaultProviderApplication(
+      s,
+      h
+    ),
+    t.getVaultProviderGenesisBtcPubKey(
+      s,
+      h
+    ),
+    o.getLatestUniversalChallengersVersion(h),
+    o.getCurrentUcKeyEpoch(h)
+  ]);
+  if (!Ar(n, { strict: !1 }))
+    throw new Se(
+      `The application entry point this deposit was prepared for is not a valid address: ${n}`
+    );
+  if (!Br(g, n))
+    throw new Se(
+      `Vault provider ${s} is registered to application ${g}, but this deposit was prepared for ${n}. Refusing to build: the vault keeper roster, its version, and the keeper key epoch would all resolve against a different application than the one selected.`
+    );
+  const [P, k] = await Promise.all(
+    [
+      r.getCurrentVaultKeepersVersion(
+        g,
+        h
+      ),
+      r.getCurrentAppKeeperKeyEpoch(
+        g,
+        h
+      )
+    ]
+  ), [x, v] = await Promise.all([
+    r.getVaultKeepersByVersion(
+      g,
+      P,
+      h
+    ),
+    o.getUniversalChallengersByVersion(
+      y,
+      h
+    )
+  ]), E = {
+    vaultProvider: _(p),
+    vaultKeepers: it(x.map((T) => T.btcPubKey)),
+    universalChallengers: it(v.map((T) => T.btcPubKey))
+  }, C = await Ro({
+    operationKeyReader: l,
+    query: {
+      vaultProviderEthAddress: s,
+      vaultProviderGenesisBtcPubkey: `0x${p}`,
+      applicationEntryPoint: g,
+      vaultKeepers: x,
+      universalChallengers: v
+    },
+    blockNumber: h
+  }), w = {
+    vaultProvider: C.vaultProvider.operationBtcPubkey,
+    vaultKeepers: [...C.vaultKeeperOperationKeysSorted],
+    universalChallengers: [
+      ...C.universalChallengerOperationKeysSorted
+    ]
+  }, O = fs(
+    a,
+    E.vaultProvider,
+    w.vaultProvider
+  ), oe = st(
+    i,
+    E.vaultKeepers,
+    w.vaultKeepers
+  ), Oe = st(
+    u,
+    E.universalChallengers,
+    w.universalChallengers
+  );
+  if (!ke(O))
+    throw new Error(
+      `Vault provider BTC pubkey indexer hint does not match BTCVaultRegistry for ${s}. Refresh and try again.`
+    );
+  if (!ke(oe))
+    throw new Error(
+      `Vault keeper BTC pubkeys (v${P}) indexer set does not match ApplicationRegistry on-chain set. Refresh and try again.`
+    );
+  if (!ke(Oe))
+    throw new Error(
+      `Universal challenger BTC pubkeys (v${y}) indexer set does not match ProtocolParams on-chain set. Refresh and try again.`
+    );
+  const Ne = [O, oe, Oe], Qt = Ne.some((T) => T.registration && !T.operation), De = Ne.some((T) => T.operation && !T.registration);
+  if (Qt && De) {
+    const T = `Indexer participant hints are internally inconsistent for vault provider ${s}: some roles match the registration keys while others match the rotated operation keys.`;
+    throw d == null || d(T), new Error(`${T} Refresh and try again.`);
+  }
+  return De && (c == null || c(
+    `Indexer is serving rotated operation keys for vault provider ${s}`
+  )), {
+    vaultProviderBtcPubkeyXOnly: w.vaultProvider,
+    vaultKeeperBtcPubkeysSorted: w.vaultKeepers,
+    universalChallengerBtcPubkeysSorted: w.universalChallengers,
+    expectedAppVaultKeepersVersion: P,
+    expectedUniversalChallengersVersion: y,
+    appKeeperKeyEpoch: k,
+    ucKeyEpoch: f,
+    registrationKeys: E,
+    participantKeys: C
+  };
+}
+function ys(e) {
+  return /^[0-9a-fA-F]{64}$/.test(e);
+}
+function dn(e) {
+  const {
+    amountSats: t,
+    minDeposit: r,
+    maxDeposit: o,
+    btcBalance: s,
+    estimatedFeeSats: n,
+    depositorClaimValue: a
+  } = e;
+  return !(t <= 0n || t < r || o && o > 0n && t > o || n == null || a == null || t + n + a > s);
+}
+function hn(e, t, r) {
+  return e <= 0n ? {
+    valid: !1,
+    error: "Deposit amount must be greater than zero"
+  } : e < t ? {
+    valid: !1,
+    error: `Minimum deposit is ${N(t)} BTC`
+  } : r && r > 0n && e > r ? {
+    valid: !1,
+    error: `Maximum deposit is ${N(r)} BTC`
+  } : { valid: !0 };
+}
+function pn(e) {
+  const { amount: t, effectiveRemaining: r } = e;
+  return r === null ? { valid: !0 } : r === 0n ? {
+    valid: !1,
+    error: "Supply cap reached — deposits temporarily paused"
+  } : t > r ? {
+    valid: !1,
+    error: `Vault size exceeds remaining capacity (${N(r)} BTC)`
+  } : { valid: !0 };
+}
+function gn(e, t) {
+  if (!e || e.length === 0)
+    return {
+      valid: !1,
+      error: "At least one vault provider must be selected"
+    };
+  const r = t.map(
+    (s) => s.toLowerCase()
+  );
+  return e.filter(
+    (s) => !r.includes(s.toLowerCase())
+  ).length > 0 ? {
+    valid: !1,
+    error: "Invalid vault provider selected"
+  } : { valid: !0 };
+}
+function vs(e, t, r) {
+  if (!e || e.length === 0)
+    return {
+      valid: !1,
+      error: "At least one vault amount required"
+    };
+  for (let o = 0; o < e.length; o++) {
+    const s = e[o];
+    if (s <= 0n)
+      return {
+        valid: !1,
+        error: `Vault ${o + 1} amount must be positive`
+      };
+    if (t && s < t)
+      return {
+        valid: !1,
+        error: `Vault ${o + 1} amount ${N(s)} BTC is below minimum deposit ${N(t)} BTC`
+      };
+    if (r && s > r)
+      return {
+        valid: !1,
+        error: `Vault ${o + 1} amount ${N(s)} BTC exceeds maximum deposit ${N(r)} BTC`
+      };
+  }
+  return { valid: !0 };
+}
+function bs(e) {
+  const t = b(e);
+  return ys(t) ? { valid: !0 } : {
+    valid: !1,
+    error: "Invalid pubkey format: must be 64 hex characters (32-byte x-only public key, no 0x prefix)"
+  };
+}
+function Ps(e) {
+  if (!e || e.length === 0)
+    throw new Error(
+      "No vault keepers available. The system requires at least one vault keeper to create a deposit."
+    );
+}
+function ms(e) {
+  if (!e || e.length === 0)
+    throw new Error(
+      "No universal challengers available. The system requires at least one universal challenger to create a deposit."
+    );
+}
+function ws(e) {
+  if (e.length === 0)
+    throw new Error("No spendable UTXOs available");
+}
+function fn(e) {
+  const {
+    vaultAmounts: t,
+    confirmedUTXOs: r,
+    vaultProviderBtcPubkey: o,
+    vaultKeeperBtcPubkeys: s,
+    universalChallengerBtcPubkeys: n,
+    minDeposit: a,
+    maxDeposit: i
+  } = e, u = vs(
+    t,
+    a,
+    i
+  );
+  if (!u.valid)
+    throw new Error(u.error);
+  const l = bs(o);
+  if (!l.valid)
+    throw new Error(l.error);
+  Ps(s), ms(n), ws(r);
+}
+class zt extends Error {
+  constructor(t) {
+    super(t), this.name = "ParticipantKeyDriftError";
+  }
+}
+function yn(e) {
+  return e instanceof zt || e instanceof Error && e.name === "ParticipantKeyDriftError";
+}
+function at(e, t, r) {
+  return t.length === r.length && t.every((o, s) => o === r[s]) ? null : `${e} expected [${t.join(", ")}], got [${r.join(", ")}]`;
+}
+async function vn(e) {
+  const { vaultRegistryReader: t, operationKeyReader: r, vaultIds: o, expected: s } = e, n = s.query;
+  if (o.length === 0) return;
+  const a = await t.getVaultKeyEpochsBatch(o), i = [];
+  for (const [u, l] of a.entries()) {
+    const c = o[u];
+    let d;
+    try {
+      d = await Nt({
+        operationKeyReader: r,
+        query: n,
+        epochs: l
+      });
+    } catch (p) {
+      i.push(
+        `vault ${c}: could not resolve participants at frozen epochs (vp=${l.vpKeyEpoch}, keeper=${l.appKeeperKeyEpoch}, uc=${l.ucKeyEpoch}): ${p.message}`
+      );
+      continue;
+    }
+    d.vaultProvider.operationBtcPubkey !== s.vaultProvider.operationBtcPubkey && i.push(
+      `vault ${c}: vault provider key expected ${s.vaultProvider.operationBtcPubkey}, got ${d.vaultProvider.operationBtcPubkey}`
+    );
+    const h = at(
+      `vault ${c}: vault keeper keys`,
+      s.vaultKeeperOperationKeysSorted,
+      d.vaultKeeperOperationKeysSorted
+    );
+    h && i.push(h);
+    const g = at(
+      `vault ${c}: universal challenger keys`,
+      s.universalChallengerOperationKeysSorted,
+      d.universalChallengerOperationKeysSorted
+    );
+    g && i.push(g);
+  }
+  if (i.length > 0)
+    throw new zt(
+      `Aborting BTC broadcast: participant operation keys changed during registration (${i.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`
+    );
+}
+class jt extends Error {
+  constructor(t) {
+    super(t), this.name = "RegisteredVaultVersionMismatchError";
+  }
+}
+function bn(e) {
+  return e instanceof jt || e instanceof Error && e.name === "RegisteredVaultVersionMismatchError";
+}
+async function Pn(e) {
+  const {
+    vaultRegistryReader: t,
+    vaultIds: r,
+    expectedOffchainParamsVersion: o,
+    expectedAppVaultKeepersVersion: s,
+    expectedUniversalChallengersVersion: n,
+    expectedVaultCoreVersion: a
+  } = e, i = await t.getProtocolInfoBatch(r), u = [];
+  if (i.forEach((l, c) => {
+    const d = r[c];
+    l.offchainParamsVersion !== o && u.push(
+      `vault ${d}: offchainParams expected v${o}, got v${l.offchainParamsVersion}`
+    ), l.appVaultKeepersVersion !== s && u.push(
+      `vault ${d}: appVaultKeepers expected v${s}, got v${l.appVaultKeepersVersion}`
+    ), l.universalChallengersVersion !== n && u.push(
+      `vault ${d}: universalChallengers expected v${n}, got v${l.universalChallengersVersion}`
+    ), l.vaultCoreVersion !== a && u.push(
+      `vault ${d}: vaultCoreVersion expected v${a} (build-time active), got v${l.vaultCoreVersion}`
+    );
+  }), u.length > 0)
+    throw new jt(
+      `Aborting BTC broadcast: signer-set or offchain-params versions changed during registration (${u.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`
+    );
+}
+class xs extends Error {
+  constructor(r, o) {
+    super(`Refund not yet mature (BIP68 not final): ${o.message}`);
+    z(this, "vaultId");
+    z(this, "cause");
+    this.name = "BIP68NotMatureError", this.vaultId = r, this.cause = o;
+  }
+}
+const Es = /^0x[0-9a-fA-F]{64}$/, $s = /^(?:0x)?(?:[0-9a-fA-F]{2})+$/, Wt = /^(?:0x)?(?:[0-9a-fA-F]{64}|[0-9a-fA-F]{66})$/, Yt = 160, ut = 2e3, ct = 10n, lt = 100n;
+function mn(e) {
+  if (!Number.isFinite(e) || e <= 0)
+    throw new Error(
+      `feeRateSatsVb must be a positive finite number, got ${e}`
+    );
+  return BigInt(Math.ceil(e * Yt));
+}
+const ks = 1, Cs = /non-BIP68-final/i;
+function Ae(e, t) {
+  if (e.length !== 66)
+    throw new Error(
+      `${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`
+    );
+  if (!Es.test(e))
+    throw new Error(
+      `${t} must contain only hex characters after the 0x prefix`
+    );
+}
+function Te(e, t) {
+  if (!Number.isInteger(e) || e < 0)
+    throw new Error(`${t} must be a non-negative integer, got ${e}`);
+}
+function Ts(e) {
+  if (Ae(e.hashlock, "hashlock"), !Number.isInteger(e.htlcVout) || e.htlcVout < 0)
+    throw new Error(
+      `htlcVout must be a non-negative integer, got ${e.htlcVout}`
+    );
+  if (!Array.isArray(e.batch) || e.batch.length === 0)
+    throw new Error("batch must be a non-empty array of HTLC entries");
+  if (e.htlcVout >= e.batch.length)
+    throw new Error(
+      `htlcVout ${e.htlcVout} is out of range for batch of size ${e.batch.length}`
+    );
+  for (let r = 0; r < e.batch.length; r++) {
+    const o = e.batch[r];
+    if (Ae(o.hashlock, `batch[${r}].hashlock`), !Number.isInteger(o.htlcVout) || o.htlcVout !== r)
+      throw new Error(
+        `batch[${r}].htlcVout must equal ${r} (contiguous vout-ordered vector), got ${o.htlcVout}`
+      );
+    if (typeof o.amount != "bigint" || o.amount <= 0n)
+      throw new Error(
+        `batch[${r}].amount must be a positive bigint, got ${o.amount}`
+      );
+  }
+  const t = e.batch[e.htlcVout];
+  if (t.hashlock.toLowerCase() !== e.hashlock.toLowerCase())
+    throw new Error(
+      `batch[${e.htlcVout}].hashlock (${t.hashlock}) does not match target hashlock (${e.hashlock})`
+    );
+  if (t.amount !== e.amount)
+    throw new Error(
+      `batch[${e.htlcVout}].amount (${t.amount}) does not match target amount (${e.amount})`
+    );
+  if (Te(e.offchainParamsVersion, "offchainParamsVersion"), Te(e.appVaultKeepersVersion, "appVaultKeepersVersion"), Te(
+    e.universalChallengersVersion,
+    "universalChallengersVersion"
+  ), Ur(
+    e.vaultCoreVersion,
+    "VaultRefundData.vaultCoreVersion"
+  ), typeof e.unsignedPrePeginTxHex != "string" || e.unsignedPrePeginTxHex.length === 0)
+    throw new Error("unsignedPrePeginTxHex must be a non-empty hex string");
+  if (!$s.test(e.unsignedPrePeginTxHex))
+    throw new Error(
+      "unsignedPrePeginTxHex must be a hex byte string (optional 0x prefix, even length)"
+    );
+  if (!e.depositorBtcPubkey || !Wt.test(e.depositorBtcPubkey))
+    throw new Error(
+      "depositorBtcPubkey must be 32 or 33 bytes of hex (optional 0x prefix)"
+    );
+  if (typeof e.amount != "bigint" || e.amount <= 0n)
+    throw new Error(`amount must be a positive bigint, got ${e.amount}`);
+}
+function _s(e) {
+  if (!e.vaultProviderPubkey || !Wt.test(e.vaultProviderPubkey))
+    throw new Error("vaultProviderPubkey must be 32 or 33 bytes of hex");
+  if (e.vaultKeeperPubkeys.length === 0)
+    throw new Error("vaultKeeperPubkeys must be non-empty");
+  if (e.universalChallengerPubkeys.length === 0)
+    throw new Error("universalChallengerPubkeys must be non-empty");
+  if (!Number.isInteger(e.timelockRefund) || e.timelockRefund <= 0)
+    throw new Error(
+      `timelockRefund must be a positive integer, got ${e.timelockRefund}`
+    );
+  if (typeof e.feeRate != "bigint" || e.feeRate <= 0n)
+    throw new Error(
+      `protocol feeRate must be a positive bigint, got ${e.feeRate}`
+    );
+  if (typeof e.minPeginFeeRate != "bigint" || e.minPeginFeeRate <= 0n)
+    throw new Error(
+      `minPeginFeeRate must be a positive bigint, got ${e.minPeginFeeRate}`
+    );
+  if (!Number.isInteger(e.numLocalChallengers) || e.numLocalChallengers < 0)
+    throw new Error("numLocalChallengers must be a non-negative integer");
+  if (!Number.isInteger(e.councilQuorum) || !Number.isInteger(e.councilSize) || e.councilQuorum <= 0 || e.councilSize <= 0 || e.councilQuorum > e.councilSize)
+    throw new Error(
+      `councilQuorum (${e.councilQuorum}) must be in [1, councilSize=${e.councilSize}]`
+    );
+}
+async function wn(e) {
+  const {
+    vaultId: t,
+    readVault: r,
+    readPrePeginContext: o,
+    feeRate: s,
+    signPsbt: n,
+    broadcastTx: a,
+    signal: i
+  } = e;
+  i == null || i.throwIfAborted(), Ae(t, "vaultId");
+  const u = await r();
+  Ts(u), i == null || i.throwIfAborted();
+  const l = await o(u);
+  if (_s(l), i == null || i.throwIfAborted(), !Number.isFinite(s) || s <= 0)
+    throw new Error(`feeRate must be a positive number, got ${s}`);
+  if (s > ut)
+    throw new Error(
+      `feeRate ${s} sat/vB exceeds refund safety cap ${ut} sat/vB; refusing to sign refund.`
+    );
+  const c = BigInt(Math.ceil(s * Yt)), d = u.amount * ct / lt;
+  if (c > d)
+    throw new Error(
+      `Refund fee ${c} sats exceeds the per-vault safety cap of ${d} sats (${ct}/${lt} of vault.amount=${u.amount}); refusing to sign refund.`
+    );
+  i == null || i.throwIfAborted();
+  const h = he(
+    u.depositorBtcPubkey
+  ), g = b(u.unsignedPrePeginTxHex), p = sr(g);
+  if (p !== void 0 && p.vout !== u.batch.length)
+    throw new Error(
+      `Auth-anchor OP_RETURN at vout ${p.vout} does not match batch size (${u.batch.length} HTLC outputs expect the anchor at vout ${u.batch.length}). Refund refused — sibling HTLC vector is incomplete.`
+    );
+  const y = p == null ? void 0 : p.hash;
+  let f;
+  try {
+    f = S.fromHex(g);
+  } catch (w) {
+    throw new Error(
+      `Failed to parse funded Pre-PegIn transaction hex: ${w instanceof Error ? w.message : String(w)}`
+    );
+  }
+  if (f.outs.length < u.batch.length)
+    throw new Error(
+      `Funded Pre-PegIn tx has ${f.outs.length} outputs but batch requires at least ${u.batch.length} HTLC outputs. Refund refused — funded tx shape disagrees with sibling vector.`
+    );
+  const { psbtHex: P } = await Mr({
+    prePeginParams: {
+      vaultCoreVersion: u.vaultCoreVersion,
+      depositorPubkey: h,
+      vaultProviderPubkey: b(l.vaultProviderPubkey),
+      vaultKeeperPubkeys: l.vaultKeeperPubkeys.map(b),
+      universalChallengerPubkeys: l.universalChallengerPubkeys.map(b),
+      hashlocks: u.batch.map((w) => b(w.hashlock)),
+      timelockRefund: l.timelockRefund,
+      // `batch[i].amount` is the on-chain vault deposit (peg-in) amount, which
+      // is exactly what WASM's `pegInAmounts` expects — it re-adds the protocol
+      // reserve (`depositorClaimValue + minPeginFee`) internally when sizing the
+      // HTLC output. `buildRefundPsbt`'s value cross-check then binds the result
+      // to the funded tx bytes, refusing the refund if the template's HTLC value
+      // disagrees with the on-chain commitment.
+      pegInAmounts: u.batch.map((w) => w.amount),
+      feeRate: l.feeRate,
+      minPeginFeeRate: l.minPeginFeeRate,
+      numLocalChallengers: l.numLocalChallengers,
+      councilQuorum: l.councilQuorum,
+      councilSize: l.councilSize,
+      network: l.network,
+      authAnchorHash: y
+    },
+    fundedPrePeginTxHex: g,
+    htlcVout: u.htlcVout,
+    refundFee: c,
+    // buildRefundPsbt's top-level `hashlock` param is documented as "no 0x
+    // prefix" and flows into the WASM HTLC connector derivation; a prefixed
+    // value would derive the wrong refund script leaf and yield an
+    // unspendable PSBT. Match the `hashlocks` array handling above.
+    hashlock: b(u.hashlock)
+  });
+  i == null || i.throwIfAborted();
+  const k = ue(
+    u.depositorBtcPubkey,
+    ks
+  ), x = await n(P, k);
+  ie({
+    requestedPsbtHex: P,
+    returnedPsbtHex: x
+  });
+  const v = 0, E = ae(
+    x,
+    h,
+    v
+  );
+  re({
+    requestedPsbtHex: P,
+    signatureHex: E,
+    signerXOnlyPubkeyHex: h,
+    inputIndex: v
+  });
+  const C = Ct({
+    requestedPsbtHex: P,
+    signaturesHex: [E],
+    signerXOnlyPubkeyHex: h
+  });
+  i == null || i.throwIfAborted();
+  try {
+    return await a(C);
+  } catch (w) {
+    throw w instanceof Error && Cs.test(w.message) ? new xs(t, w) : w;
+  }
+}
+class dt extends Error {
+  constructor(r, o, s) {
+    super(r);
+    /** Fee the reclaim would have paid, in satoshis. */
+    z(this, "feeSats");
+    /** Sum of the reserves the reclaim would have swept, in satoshis. */
+    z(this, "sweptTotalSats");
+    this.name = "ReclaimUneconomicalError", this.feeSats = o, this.sweptTotalSats = s;
+  }
+}
+const ht = 2e3, pt = 25n, gt = 100n, xn = 10n;
+async function Ss(e, t, r) {
+  for (let o = 0; o < e.length; o++) {
+    const s = qr(e[o].depositorSignedPeginTxHex), n = Be(
+      await yr(
+        b(s),
+        b(r)
+      )
+    ).toLowerCase();
+    if (n !== t[o].toLowerCase())
+      throw new Error(
+        `Reserve ${o} belongs to vault ${n}, not the requested ${t[o].toLowerCase()}. Refusing to sweep a reserve whose vault is not the one the caller asked for — the reserve funds that vault's claim transaction and cannot be replaced.`
+      );
+  }
+}
+async function En(e) {
+  const {
+    vaultIds: t,
+    depositorEthAddress: r,
+    depositorBtcPubkey: o,
+    readVaults: s,
+    feeRate: n,
+    signPsbt: a,
+    broadcastTx: i,
+    signal: u
+  } = e;
+  if (u == null || u.throwIfAborted(), t.length === 0)
+    throw new Error("Reclaim requires at least one vault id; got none.");
+  if (!Number.isFinite(n) || n <= 0)
+    throw new Error(`feeRate must be a positive number, got ${n}`);
+  if (n > ht)
+    throw new dt(
+      `Fee rate ${n} sat/vB exceeds the reclaim safety cap of ${ht} sat/vB; refusing to sign.`,
+      0n,
+      0n
+    );
+  const l = await s();
+  if (u == null || u.throwIfAborted(), l.length !== t.length)
+    throw new Error(
+      `readVaults returned ${l.length} reserves for ${t.length} vault id(s); refusing to sweep a set that does not match the request.`
+    );
+  await Ss(l, t, r), u == null || u.throwIfAborted();
+  const c = he(o), d = l.map((v) => ({
+    depositorSignedPeginTxHex: v.depositorSignedPeginTxHex,
+    observed: v.observed,
+    expectedValue: v.expectedClaimValue
+  })), h = Lr(n, d.length), g = d.reduce((v, E) => v + E.expectedValue, 0n), p = g * pt / gt;
+  if (h > p)
+    throw new dt(
+      `Reclaim fee ${h} sats exceeds ${pt}/${gt} of the swept total (${g} sats, cap ${p} sats). The reserve is not at risk — it stays where it is until fee rates fall.`,
+      h,
+      g
+    );
+  u == null || u.throwIfAborted();
+  const { psbtHex: y } = Fr({
+    depositorPubkey: c,
+    inputs: d,
+    feeSats: h
+  });
+  u == null || u.throwIfAborted();
+  const f = ue(
+    o,
+    d.length
+  ), P = await a(y, f);
+  ie({
+    requestedPsbtHex: y,
+    returnedPsbtHex: P
+  });
+  const k = d.map((v, E) => {
+    const C = ae(
+      P,
+      c,
+      E
+    );
+    return re({
+      requestedPsbtHex: y,
+      signatureHex: C,
+      signerXOnlyPubkeyHex: c,
+      inputIndex: E
+    }), C;
+  }), x = Ct({
+    requestedPsbtHex: y,
+    signaturesHex: k,
+    signerXOnlyPubkeyHex: c
+  });
+  return u == null || u.throwIfAborted(), i(x);
+}
+export {
+  Pn as $,
+  K as A,
+  io as B,
+  eo as C,
+  U as D,
+  Qo as E,
+  nn as F,
+  m as G,
+  ns as H,
+  an as I,
+  Se as J,
+  cn as K,
+  ln as L,
+  dn as M,
+  hn as N,
+  fn as O,
+  ro as P,
+  gn as Q,
+  pn as R,
+  j as S,
+  vs as T,
+  bs as U,
+  ao as V,
+  zt as W,
+  yn as X,
+  vn as Y,
+  jt as Z,
+  bn as _,
+  Ys as a,
+  Xt as a0,
+  un as a1,
+  ke as a2,
+  fs as a3,
+  st as a4,
+  Ko as a5,
+  Ro as a6,
+  Nt as a7,
+  xs as a8,
+  wn as a9,
+  mn as aa,
+  lt as ab,
+  ct as ac,
+  ut as ad,
+  Yt as ae,
+  dt as af,
+  En as ag,
+  gt as ah,
+  pt as ai,
+  ht as aj,
+  xn as ak,
+  Qs as b,
+  Zs as c,
+  mo as d,
+  Jr as e,
+  to as f,
+  en as g,
+  oo as h,
+  se as i,
+  no as j,
+  lo as k,
+  Js as l,
+  xo as m,
+  _o as n,
+  $o as o,
+  vo as p,
+  St as q,
+  tn as r,
+  po as s,
+  Ho as t,
+  Dt as u,
+  Mt as v,
+  Mo as w,
+  rn as x,
+  on as y,
+  sn as z
+};
+//# sourceMappingURL=buildAndBroadcastReclaim-DoprHX7o.js.map