@babylonlabs-io/ts-sdk 3.0.2 → 3.1.1

package/dist/buildAndBroadcastReclaim-B8aFMGf-.cjs

@@ -1,2 +0,0 @@
-"use strict";var yt=Object.defineProperty;var bt=(e,t,r)=>t in e?yt(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var U=(e,t,r)=>bt(e,typeof t!="symbol"?t+"":t,r);const De=require("./BTCVaultRegistry.abi-BQ5tFNSu.cjs"),p=require("./bitcoin-D-O2GjbC.cjs"),F=require("./PayoutManager-B6GFbG3X.cjs"),B=require("buffer"),D=require("./signing-3l5Aqd-H.cjs"),A=require("./tbv/core/wasm/index.cjs"),x=require("./verifyScriptPathSchnorrSignature-BKZihCjk.cjs"),R=require("bitcoinjs-lib"),I=require("./constants-BTZdyOuk.cjs"),vt=require("./deriveVaultRoot-C3uqnJto.cjs"),ae=require("./onChainBtcPubkey-BlzxYImF.cjs"),ue=require("viem"),T=require("./state-C4WoNCy1.cjs"),L=require("./sha2-Ce6KewYx.cjs"),N=require("./noPayout-DAWBQ0eG.cjs"),mt=require("./secp256k1-DDHQ1_za.cjs"),xt=/^0x[0-9a-fA-F]{64}$/,wt=/^0x[0-9a-fA-F]{40}$/,Et=/^0x([0-9a-fA-F]{2})*$/;function Z(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!xt.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function _t(e,t){if(!wt.test(e))throw new Error(`${t} must be a 20-byte 0x-prefixed hex address (42 chars)`)}function Tt(e,t){if(!Et.test(e))throw new Error(`${t} must be a 0x-prefixed hex string with an even number of hex chars`)}function Fe(e){_t(e.btcVaultRegistryAddress,"btcVaultRegistryAddress"),Z(e.vaultId,"vaultId");const t=p.ensureHexPrefix(e.secret);if(Z(t,"secret"),e.hashlock!==void 0&&(Z(e.hashlock,"hashlock"),!F.validateSecretAgainstHashlock(t,e.hashlock)))throw new Error("Invalid secret: SHA256(secret) does not match the provided hashlock");return t}async function kt(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:n,activationMetadata:o,writeContract:a,signal:i}=e;i==null||i.throwIfAborted();const s=Fe({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:n});return Tt(o,"activationMetadata"),a({address:t,abi:De.BTCVaultRegistryABI,functionName:"activateVaultWithSecret",args:[r,s,o]})}async function St(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:n,writeContract:o,signal:a}=e;a==null||a.throwIfAborted();const i=Fe({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:n});return o({address:t,abi:De.BTCVaultRegistryABI,functionName:"activateVaultWithSecretAndRedeem",args:[r,i]})}class Ue extends Error{constructor(t,r){super("Transaction graph's challenger set does not match the vault's (local ∪ universal)"+(t.length>0?` (missing: ${t.join(", ")})`:"")+(r.length>0?` (unexpected: ${r.join(", ")})`:"")+". Refusing to sign an incomplete or padded challenger set."),this.missing=t,this.unexpected=r,this.name="ChallengerSetMismatchError"}}function Le(e){const t=x.deriveLocalChallengers({claimerBtcPubkey:e.depositorBtcPubkey,depositorBtcPubkey:e.depositorBtcPubkey,vaultProviderBtcPubkey:e.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:e.vaultKeeperBtcPubkeys}),r=e.universalChallengerBtcPubkeys.map(Ce),n=t.filter(c=>r.includes(c));if(n.length>0)throw new Error(`Cannot check the challenger set: vault keepers and universal challengers overlap (${n.join(", ")}).`);const o=e.graphChallengerPubkeys.map(Ce),a=new Set(o);if(a.size!==o.length)throw new Error("Transaction graph lists the same challenger more than once.");const i=[...t,...r],s=new Set(i),u=i.filter(c=>!a.has(c)),l=o.filter(c=>!s.has(c));if(u.length>0||l.length>0)throw new Ue(u,l)}function Ce(e){return p.stripHexPrefix(e).toLowerCase()}const Ge=0;class Xe extends Error{constructor(t,r){super(`Payout transaction output ${Ge} pays ${r}, not the vault's registered payout script ${t}. Refusing to sign a payout to another destination.`),this.expectedScriptHex=t,this.actualScriptHex=r,this.name="PayoutDestinationError"}}function qe(e){let t;try{t=R.Psbt.fromBase64(e.payoutPsbtBase64)}catch(u){throw new Error("Payout PSBT cannot be parsed.",{cause:u})}const{version:r,locktime:n,outs:o}=At(t);if(r!==I.PAYOUT_TX_VERSION||n!==I.PAYOUT_TX_LOCKTIME)throw new Error(`Payout transaction has version ${r} and locktime ${n}, expected ${I.PAYOUT_TX_VERSION} and ${I.PAYOUT_TX_LOCKTIME}.`);if(o.length!==I.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT)throw new Error(`Payout transaction has ${o.length} output(s), expected exactly ${I.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT} for a depositor-as-claimer payout.`);const a=p.stripHexPrefix(e.registeredPayoutScriptPubKey).toLowerCase();if(a.length===0)throw new Error("registeredPayoutScriptPubKey is empty; the vault's on-chain payout script is required to check the Payout destination.");const i=o[Ge].script.toString("hex").toLowerCase();if(!B.Buffer.from(i,"hex").equals(B.Buffer.from(a,"hex")))throw new Xe(a,i);const s=o[I.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT-1];if(s.value!==I.PAYOUT_ANCHOR_DUST_SATS)throw new Error(`Payout CPFP anchor value ${s.value} sats must equal ${I.PAYOUT_ANCHOR_DUST_SATS} sats.`)}function At(e){return{version:e.version,locktime:e.locktime,outs:e.txOutputs.map(t=>({script:B.Buffer.from(t.script),value:t.value}))}}const ze=0;class We extends Error{constructor(t,r,n){super(`Transaction graph does not belong to vault ${t}: its Claim spends PegIn ${n}, which derives vault ${r}. Refusing to sign for a graph served for another vault.`),this.expectedVaultId=t,this.derivedVaultId=r,this.peginTxid=n,this.name="VaultIdBindingError"}}function Ct(e){let t;try{t=R.Psbt.fromBase64(e)}catch(n){throw new Error("Claim PSBT cannot be parsed.",{cause:n})}const r=t.txInputs[ze];if(!r)throw new Error("Claim PSBT carries no PegIn input to bind the vault to.");return je(r.hash)}function $t(e){const t=e.ins[ze];if(!t)throw new Error("Artifacts file's claim_tx carries no PegIn input to bind the vault to.");return je(t.hash)}function be(e){const t=j(ae.derivePeginVaultId(e.peginTxid,e.depositorEthAddress)),r=j(e.expectedVaultId);if(t!==r)throw new We(r,t,e.peginTxid)}function j(e){return`0x${(e.startsWith("0x")?e.slice(2):e).toLowerCase()}`}function je(e){return B.Buffer.from(e).reverse().toString("hex")}const It=0,Rt=0,Bt=1,Vt=0,Ot=0;async function Ht(e){const{txGraphVersion:t}=e.vault,r=e.source.txGraphJson,[n,o,a,i]=await Promise.all([A.buildClaimPsbt(t,r),A.buildAssertClaimerPsbt(t,r),A.buildPayoutClaimerPsbt(t,r),A.buildWronglyChallengedPsbts(t,r)]);be({peginTxid:Ct(n),depositorEthAddress:e.vault.depositorEthAddress,expectedVaultId:e.vault.vaultId});const s=await A.buildPayoutDepositorPsbt(t,r);for(const w of[a,s])qe({payoutPsbtBase64:w,registeredPayoutScriptPubKey:e.vault.registeredPayoutScriptPubKey});Le({graphChallengerPubkeys:Object.keys(i),depositorBtcPubkey:e.depositorPublicKey,vaultProviderBtcPubkey:e.vault.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:e.vault.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:e.vault.universalChallengerBtcPubkeys});const u=[{psbtBase64:n,inputIndex:It},{psbtBase64:o,inputIndex:Rt},{psbtBase64:a,inputIndex:Bt},{psbtBase64:s,inputIndex:Vt}],l=Object.keys(i);for(const w of l)for(const E of i[w])u.push({psbtBase64:E,inputIndex:Ot});const c=await Kt(e.btcWallet,e.depositorPublicKey,e.btcNetwork,u);let h=0;const d=c[h++],g=c[h++],f=c[h++],y=c[h++],P={};for(const w of l){const E=i[w].length;P[w]=c.slice(h,h+E),h+=E}const m=await A.finalizeClaimTx(t,r,d);return A.buildWatchtowerArtifacts({txGraphVersion:t,graphJson:r,signedClaimTxHex:m,assertClaimerSigHex:g,payoutClaimerSigHex:f,wronglyChallengedSigs:P,depositorPayoutSigHex:y,verifyingKeyHex:e.source.verifyingKeyHex,claimableEventBlockNumber:e.vault.claimableEventBlockNumber,proverCircuitVersion:e.vault.proverCircuitVersion,vaultIdHex:e.vault.vaultId,babeSessionsJson:e.babeSessionsJson,expectedVaultCoreVersion:e.vault.vaultCoreVersion})}function $e(e){const t=e.replace(/^0x/,"").toLowerCase();if(t.length===66)return t.slice(2);if(t.length===64)return t;throw new Error(`Public key must be 33-byte compressed or 32-byte x-only hex, got ${t.length/2} bytes.`)}async function Nt(e,t,r){const n=await e.getPublicKeyHex();if($e(n)!==$e(t))throw new Error("Connected wallet does not hold the vault's depositor key. Select the account that made the deposit, then try again.");const o=await e.getAddress();if(!p.isAddressFromPublicKey(o,t,r))throw new Error(`Connected wallet reports address "${o}", which is not derived from the vault's depositor key. Select the account that made the deposit, then try again.`);return o}async function Kt(e,t,r,n){const o=await Nt(e,t,r),a=await F.signPsbtsWithFallback(e,n.map(i=>Mt(i.psbtBase64)),n.map(i=>D.createTaprootScriptPathSignOptionsForInput(t,i.inputIndex,o)));return Promise.all(a.map((i,s)=>A.extractTapScriptSig(Dt(i),n[s].inputIndex)))}function Mt(e){return B.Buffer.from(e,"base64").toString("hex")}function Dt(e){return B.Buffer.from(e,"hex").toString("base64")}async function Ft(e){const t=await vt.deriveVaultRoot(e.btcWallet,e.vaultContext);let r;try{r=await A.expandWotsSeed(t,e.htlcVout)}finally{t.fill(0)}let n;try{n=await A.wotsKeypairFromSeed(r)}finally{r.fill(0)}return Ut(n.pk_hash,e.expectedWotsPkHash),await A.validateWotsKeypairAgainstGraph(e.txGraphVersion,n.keypair,e.txGraphJson),{wotsKeypairJson:JSON.stringify(n.keypair),pkHash:n.pk_hash}}function Ut(e,t){if(z(e)!==z(t))throw new Error(`Derived WOTS public-key hash ${z(e)} does not match the vault's on-chain depositorWotsPkHash ${z(t)}. The wallet, the HTLC output index, or the derivation itself is not the one this vault was created with.`)}function z(e){return`0x${(e.startsWith("0x")?e.slice(2):e).toLowerCase()}`}const Ye=3;class Qe extends Error{constructor(t,r){super(`Artifacts belong to vault ${r}, not ${t}. Select the artifacts file saved for this vault.`),this.expectedVaultId=t,this.actualVaultId=r,this.name="ArtifactsVaultMismatchError"}}function Je(e){let t;try{t=JSON.parse(e)}catch(i){throw new Error("Artifacts file is not valid JSON.",{cause:i})}const r=Ie(t.vault_id,"vault_id"),n=Gt(Ie(t.claim_tx,"claim_tx")),o=ee(t.prover_circuit_version,"prover_circuit_version"),a=t.claimable_event_block_number===void 0?0n:BigInt(ee(t.claimable_event_block_number,"claimable_event_block_number"));return{vaultCoreVersion:t.vault_core_version===void 0?void 0:ee(t.vault_core_version,"vault_core_version"),vaultId:r,claimTxid:n.getId(),peginTxid:$t(n),proverCircuitVersion:o,claimableEventBlockNumber:a,babeSessionChallengerPubkeys:Object.keys(Xt(t.babe_sessions,"babe_sessions"))}}async function Lt(e){const t=Je(e.artifactsJson),r=j(e.expectedVaultId),n=j(t.vaultId);if(r!==n)throw new Qe(r,n);be({peginTxid:t.peginTxid,depositorEthAddress:e.depositorEthAddress,expectedVaultId:r});const o=e.txGraphVersion??Ye;if(t.vaultCoreVersion!==void 0&&t.vaultCoreVersion!==o)throw new Error(`Artifacts record vault core version ${t.vaultCoreVersion}, but verification was asked for version ${o}.`);if(t.claimableEventBlockNumber===0n)throw new Error("Artifacts carry no claimable event block number. They were assembled before the Ethereum withdrawal was initiated; assemble them again.");return await A.verifyWatchtowerArtifacts(o,e.artifactsJson),t}function Gt(e){try{return R.Transaction.fromHex(e)}catch(t){throw new Error("Artifacts file carries an unparseable claim_tx.",{cause:t})}}function Ie(e,t){if(typeof e!="string"||e.length===0)throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function ee(e,t){if(typeof e!="number"||!Number.isSafeInteger(e)||e<0)throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function Xt(e,t){if(e===void 0)return{};if(typeof e!="object"||e===null||Array.isArray(e))throw new Error(`Artifacts file is missing a usable "${t}".`);return e}const Ze=8,qt=6e3,zt=10*6e4,Wt=10;class ve extends Error{constructor(t){super(t),this.name="PeginRegistrationMissingError"}}class me extends Error{constructor(t){super(t),this.name="PeginRegistrationNotFinalError"}}function et(e){return e instanceof ve||e instanceof Error&&e.name==="PeginRegistrationMissingError"}function jt(e){return e instanceof me||e instanceof Error&&e.name==="PeginRegistrationNotFinalError"}function Re(e){const{currentBlock:t,createdAtBlock:r}=e,n=t-r+1n;return n<0n?0:Number(n)}async function Yt(e){const{vaultRegistryReader:t,getBlockNumber:r,vaultIds:n,required:o=Ze,pollIntervalMs:a=qt,timeoutMs:i=zt,signal:s,onProgress:u}=e;if(n.length===0)throw new Error("waitForPeginRegistrationDepth requires at least one vault ID");const l=Date.now();let c=!1,h=0,d;for(;;){if(s!=null&&s.aborted)throw new Error(`Aborted while waiting for peg-in registration depth (${n.length} vault(s))`);if(Date.now()-l>=i)throw new me(`Peg-in registration did not reach ${o} Ethereum confirmations within ${i}ms. The registration transaction was submitted but is not yet final, so the Pre-PegIn Bitcoin transaction was never sent and no funds are at risk. Resume this deposit from the dashboard once the network settles.`+(d instanceof Error?` Last read error: ${d.message}`:""));try{const g=await r(),f=await Promise.all(n.map(P=>t.getVaultBasicInfo(P))),y=f.findIndex(P=>P.depositor===ue.zeroAddress||P.createdAt===0n);if(y!==-1){if(h+=1,!c&&h>Wt)throw new ve(`Vault ${n[y]} is still not visible on-chain after ${h} reads — the registration does not exist.`);console.warn(`Peg-in registration for vault ${n[y]} is not visible in chain state at block ${g} — a lagging RPC backend or an Ethereum reorg. Still polling.`),u==null||u({confirmations:0,required:o})}else{c=!0,h=0,d=void 0;let P=f[0],m=Re({currentBlock:g,createdAtBlock:f[0].createdAt});for(const w of f.slice(1)){const E=Re({currentBlock:g,createdAtBlock:w.createdAt});E<m&&(m=E,P=w)}if(u==null||u({confirmations:m,required:o}),m>=o)return{confirmations:m,basicInfo:P}}}catch(g){if(et(g))throw g;console.warn(`Registration-depth read failed (retrying in ${a}ms): `+(g instanceof Error?g.message:String(g))),d=g}await new Promise((g,f)=>{const y=()=>{clearTimeout(P),f(new Error(`Aborted while waiting for peg-in registration depth (${n.length} vault(s))`))},P=setTimeout(()=>{s==null||s.removeEventListener("abort",y),g()},a);s==null||s.addEventListener("abort",y,{once:!0})})}}const Qt=/^(?:[0-9a-f]{2})*$/,Jt=/^[0-9a-f]{64}$/,Zt=/^([0-9a-f]{64}):(0|[1-9][0-9]*)$/,er=-2147483648,tr=2147483647,te=4294967295,Be=2,Ve=2,Y=0;class b extends Error{constructor(t){super(t),this.name="GraphFingerprintError"}}function _(e,t,r){const n=e[t];if(n===void 0)throw new b(`Graph tx ${r} is missing "${t}"`);return n}function X(e,t){if(!Array.isArray(e))throw new b(`Graph tx ${t} is not an array`);return e}function V(e,t){if(e===null||typeof e!="object"||Array.isArray(e))throw new b(`Graph tx ${t} is not an object`);return e}function G(e,t,r,n){if(typeof e!="number"||!Number.isSafeInteger(e)||e<r||e>n)throw new b(`Graph tx ${t} is not an integer in [${r}, ${n}]`);return e}function re(e,t){if(typeof e!="string"||!Qt.test(e))throw new b(`Graph tx ${t} is not lowercase hex without a prefix`);return B.Buffer.from(e,"hex")}function Q(e,t){if(typeof e!="string"||!Jt.test(e))throw new b(`Graph ${t} is not 32 bytes of lowercase hex`);return e}function Oe(e,t){const r=V(e,t),n=new R.Transaction;return n.version=G(_(r,"version",t),`${t}.version`,er,tr),n.locktime=G(_(r,"lock_time",t),`${t}.lock_time`,0,te),X(_(r,"input",t),`${t}.input`).forEach((o,a)=>{const i=`${t}.input[${a}]`,s=V(o,i),u=_(s,"previous_output",i),l=typeof u=="string"&&Zt.exec(u);if(!l)throw new b(`Graph tx ${i}.previous_output is not "<txid>:<vout>"`);const c=G(Number(l[2]),`${i}.previous_output vout`,0,te);n.addInput(B.Buffer.from(l[1],"hex").reverse(),c,G(_(s,"sequence",i),`${i}.sequence`,0,te),re(_(s,"script_sig",i),`${i}.script_sig`)),n.ins[a].witness=X(_(s,"witness",i),`${i}.witness`).map((h,d)=>re(h,`${i}.witness[${d}]`))}),X(_(r,"output",t),`${t}.output`).forEach((o,a)=>{const i=`${t}.output[${a}]`,s=V(o,i);n.addOutput(re(_(s,"script_pubkey",i),`${i}.script_pubkey`),G(_(s,"value",i),`${i}.value`,0,Number.MAX_SAFE_INTEGER))}),new Uint8Array(n.toBuffer())}function K(e,t){const r=p.stripHexPrefix(e).toLowerCase();let n;try{n=R.Transaction.fromHex(r)}catch(o){throw new b(`Presign ${t} is not one transaction: ${o instanceof Error?o.message:String(o)}`)}if(n.toHex()!==r)throw new b(`Presign ${t} is not a canonical transaction encoding`);return n}function tt(e,t){const r=e.ins[t];if(r)return{txid:B.Buffer.from(r.hash).reverse().toString("hex"),vout:r.index}}function rt(e,t){if(!e.outs[Y])throw new b(`Presign ${t}.claim_tx must have output ${Y}`)}function rr(e,t,r){if(e.ins.length!==1)throw new b(`Presign ${r}.claim_tx must have exactly one input, got ${e.ins.length}`);rt(e,r);const n=tt(e,0);if((n==null?void 0:n.txid)!==t||n.vout!==x.PEGIN_DEPOSITOR_CLAIM_VOUT){const o=n?`${n.txid}:${n.vout}`:"no input";throw new b(`Presign ${r}.claim_tx must spend ${t}:${x.PEGIN_DEPOSITOR_CLAIM_VOUT}, got ${o}`)}}function xe(e,t,r){const n=tt(e,0);if((n==null?void 0:n.txid)!==t||n.vout!==Y){const o=n?`${n.txid}:${n.vout}`:"no input";throw new b(`Presign ${r}.assert_tx input 0 must spend ${t}:${Y}, got ${o}`)}}function nt(e){const t=K(e.peginTxHex,`${e.path}.pegin_tx`),r=K(e.claimTxHex,`${e.path}.claim_tx`),n=K(e.assertTxHex,`${e.path}.assert_tx`);return{peginTx:t,claimTx:r,assertTx:n}}function nr(e){const t=K(e.claimTxHex,`${e.path}.claim_tx`),r=K(e.assertTxHex,`${e.path}.assert_tx`);rt(t,e.path),xe(r,t.getId(),e.path)}function or(e){const{peginTx:t,claimTx:r,assertTx:n}=nt(e);rr(r,t.getId(),e.path),xe(n,r.getId(),e.path)}function sr(e,t){const[r,...n]=e.ins;if(!r||n.length>0)throw new b(`Presign claim_tx must have exactly one input, got ${e.ins.length}`);const o=B.Buffer.from(r.hash).reverse().toString("hex");if(o!==t||r.index!==x.PEGIN_DEPOSITOR_CLAIM_VOUT)throw new b(`Presign claim_tx must spend ${t}:${x.PEGIN_DEPOSITOR_CLAIM_VOUT}, got ${o}:${r.index}`);if(e.version!==Be)throw new b(`Presign claim_tx version must be ${Be}, got ${e.version}`);if(r.witness.length>0)throw new b(`Presign claim_tx input must have an empty witness, got ${r.witness.length} item(s)`);if(e.outs.length!==Ve)throw new b(`Presign claim_tx must have exactly ${Ve} outputs, got ${e.outs.length}`)}function ot(e){const t=[...e.challengers].sort((n,o)=>n.pubkey<o.pubkey?-1:n.pubkey>o.pubkey?1:0),r=[e.peginTx,e.claimTx,e.assertTx,e.payoutTx];return t.forEach((n,o)=>{const a=Q(n.pubkey,"challenger pubkey");if(o>0&&t[o-1].pubkey===a)throw new b(`Graph lists challenger ${a} twice`);r.push(L.hexToBytes(a),n.nopayoutTx);for(const i of n.outputLabelHashes)r.push(L.hexToBytes(Q(i,"output_label_hashes entry")))}),L.bytesToHex(L.sha256(L.concatBytes(...r)))}function ir(e){const t=p.stripHexPrefix(e.peginTxid).toLowerCase(),{peginTx:r,claimTx:n,assertTx:o}=nt({peginTxHex:e.peginTxHex,claimTxHex:e.claimTxHex,assertTxHex:e.assertTxHex,path:"depositor_graph"});if(r.getId()!==t)throw new b(`Presign pegin_tx hashes to ${r.getId()}, expected ${t}`);sr(n,t),xe(o,n.getId(),"depositor_graph");const a=i=>new Uint8Array(i.toBuffer());return ot({peginTx:a(r),claimTx:a(n),assertTx:a(o),payoutTx:a(K(e.payoutTxHex,"payout_tx")),challengers:e.challengers.map(i=>({pubkey:p.canonicalizeBtcPubkey(i.challenger_pubkey),nopayoutTx:a(K(i.nopayout_tx.tx_hex,"nopayout_tx")),outputLabelHashes:i.output_label_hashes.map(s=>p.stripHexPrefix(s).toLowerCase())}))})}function st(e){const t=n=>Oe(V(_(e,n,"graph"),n).tx,n),r=V(_(e,"challenger_subgraphs","graph"),"challenger_subgraphs");return ot({peginTx:t("pegin_tx"),claimTx:t("claim_tx"),assertTx:t("assert_tx"),payoutTx:t("payout_tx"),challengers:Object.entries(r).map(([n,o])=>{const a=`challenger_subgraphs[${n}]`,i=V(o,a);return{pubkey:n,nopayoutTx:Oe(V(_(i,"nopayout_tx",a),`${a}.nopayout_tx`).tx,`${a}.nopayout_tx`),outputLabelHashes:X(_(i,"output_label_hashes",a),`${a}.output_label_hashes`).map((s,u)=>Q(s,`${a}.output_label_hashes[${u}]`))}})})}function ar(e){const t=V(_(e,"challenger_pubkeys","graph"),"challenger_pubkeys"),r=new Set;for(const n of["local","universal"])X(_(t,n,"challenger_pubkeys"),`challenger_pubkeys.${n}`).forEach((o,a)=>{const i=Q(o,`challenger_pubkeys.${n}[${a}]`);if(r.has(i))throw new b(`Graph declares challenger ${i} more than once`);r.add(i)});return r}function ur(e,t){const r=st(e);if(r!==t)throw new b(`Graph fingerprint ${r} does not match the presign fingerprint ${t}`);const n=Object.keys(V(e.challenger_subgraphs,"challenger_subgraphs")),o=ar(e);if(n.length!==o.size||n.some(a=>!o.has(a)))throw new b(`Graph challenger_subgraphs keys ${n.join(", ")} do not match challenger_pubkeys ${[...o].join(", ")}`)}const cr=1;function lr(e,t,r){const n=r.map(h=>p.stripHexPrefix(h).toLowerCase()),o=t.filter(h=>n.includes(h));if(o.length>0)throw new Error(`Cannot validate challenger set: vault keepers and universal challengers overlap (${o.join(", ")})`);const a=[...t,...n],i=e.map(h=>p.stripHexPrefix(h.challenger_pubkey).toLowerCase()),s=new Set(i);if(s.size!==i.length)throw new Error("Depositor graph contains duplicate challenger entries in challenger_presign_data");const u=new Set(a),l=a.filter(h=>!s.has(h)),c=i.filter(h=>!u.has(h));if(l.length>0||c.length>0)throw new Error("Depositor graph challenger set does not match expected (local ∪ universal)"+(l.length>0?` (missing: ${l.join(", ")})`:"")+(c.length>0?` (unexpected: ${c.join(", ")})`:""))}function hr(e,t){const r=e.ins[t];return p.uint8ArrayToHex(new Uint8Array(r.hash).slice().reverse())}function ne(e,t,r,n,o){const a=e.ins[t];if(a.index!==0)throw new Error(`NoPayout (challenger ${o}) input ${t} expected to spend ${n} vout 0, got vout ${a.index}`);const i=r.getId(),s=hr(e,t);if(s!==i)throw new Error(`NoPayout (challenger ${o}) input ${t} does not reference ${n} (expected txid ${i}, got ${s})`)}async function pr(e,t,r){const n=[],o=[],a=[],i=x.deriveLocalChallengers({claimerBtcPubkey:r.depositorBtcPubkey,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys});lr(e.challenger_presign_data,i,r.universalChallengerBtcPubkeys);const s=await x.buildPayoutPsbt({vaultCoreVersion:r.vaultCoreVersion,vkClaimerPayoutScriptPubKeys:r.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:r.vpCommissionScriptPubKey,payoutTxHex:e.payout_tx.tx_hex,peginTxHex:r.peginTxHex,assertTxHex:e.assert_tx.tx_hex,timelockAssert:r.timelockAssert,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:r.universalChallengerBtcPubkeys,timelockPegin:r.timelockPegin,network:r.network,claimerBtcPubkey:r.depositorBtcPubkey,registeredPayoutScriptPubKey:r.registeredPayoutScriptPubKey,commissionBps:cr,protocolFeeRate:r.protocolFeeRate,councilMembers:r.councilMembers,councilQuorum:r.councilQuorum});n.push(s.psbtHex),o.push(D.createTaprootScriptPathSignOptions(t,I.DEPOSITOR_SIGNED_INPUT_COUNT));const u=p.stripHexPrefix(r.depositorBtcPubkey),l=R.Transaction.fromHex(p.stripHexPrefix(e.assert_tx.tx_hex));for(const c of e.challenger_presign_data){const h=p.stripHexPrefix(c.challenger_pubkey),d=n.length,g=await dr({challenger:c,challengerPubkey:h,claimerPubkey:u,localChallengers:i,assertTxParsed:l,ctx:r});n.push(g),o.push(D.createTaprootScriptPathSignOptions(t,I.DEPOSITOR_SIGNED_INPUT_COUNT)),a.push({challengerPubkey:h,noPayoutIdx:d})}return{psbtHexes:n,signOptions:o,challengerEntries:a}}async function dr(e){const{challenger:t,challengerPubkey:r,claimerPubkey:n,localChallengers:o,assertTxParsed:a,ctx:i}=e;N.assertNoPayoutOutputMatchesChallenger(t.nopayout_tx.tx_hex,r,i.network);const s=R.Transaction.fromHex(p.stripHexPrefix(t.nopayout_tx.tx_hex)),u=R.Transaction.fromHex(p.stripHexPrefix(t.challenge_assert_x_tx.tx_hex)),l=R.Transaction.fromHex(p.stripHexPrefix(t.challenge_assert_y_tx.tx_hex));if(s.ins.length!==3)throw new Error(`NoPayout (challenger ${r}) must have exactly 3 inputs, got ${s.ins.length}`);ne(s,0,a,"Assert",r),ne(s,1,u,"ChallengeAssertX",r),ne(s,2,l,"ChallengeAssertY",r);const c=[a.outs[0],u.outs[0],l.outs[0]].map(h=>({script_pubkey:p.uint8ArrayToHex(new Uint8Array(h.script)),value:h.value}));return N.buildNoPayoutPsbt({noPayoutTxHex:t.nopayout_tx.tx_hex,challengerPubkey:r,prevouts:c,connectorParams:{txGraphVersion:i.vaultCoreVersion,claimer:n,localChallengers:o,universalChallengers:i.universalChallengerBtcPubkeys,timelockAssert:i.timelockAssert,councilMembers:i.councilMembers,councilQuorum:i.councilQuorum}})}function gr(e,t,r){x.assertPsbtUnsignedTxMatches(e[0]);const o=x.extractPayoutSignature(e[0].returnedPsbtHex,r);x.assertScriptPathSchnorrSignature({requestedPsbtHex:e[0].requestedPsbtHex,signatureHex:o,signerXOnlyPubkeyHex:r,inputIndex:0});const a={};for(const i of t){x.assertPsbtUnsignedTxMatches(e[i.noPayoutIdx]);const s=x.extractPayoutSignature(e[i.noPayoutIdx].returnedPsbtHex,r);x.assertScriptPathSchnorrSignature({requestedPsbtHex:e[i.noPayoutIdx].requestedPsbtHex,signatureHex:s,signerXOnlyPubkeyHex:r,inputIndex:0}),a[i.challengerPubkey]={nopayout_signature:s}}return{payout_signatures:{payout_signature:o},per_challenger:a}}async function it(e){const{depositorGraph:t,btcWallet:r,signingContext:n}=e;or({peginTxHex:n.peginTxHex,claimTxHex:t.claim_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex,path:"depositor_graph"});const o=await r.getPublicKeyHex(),{depositorPubkey:a}=p.validateWalletPubkey(o,p.stripHexPrefix(n.depositorBtcPubkey)),{psbtHexes:i,signOptions:s,challengerEntries:u}=await pr(t,o,n),l=await F.signPsbtsWithFallback(r,i,s),c=i.map((h,d)=>({requestedPsbtHex:h,returnedPsbtHex:l[d]}));return gr(c,u,a)}const fr=1e4,M=10;async function we(e){const{statusReader:t,vaultId:r,peginTxid:n,targetStatuses:o,timeoutMs:a,pollIntervalMs:i=fr,signal:s}=e,u=Date.now();for(;;){if(s!=null&&s.aborted)throw new Error(`Polling aborted for vault ${r.slice(0,M)}… (target: ${[...o].join(", ")})`);if(Date.now()-u>=a)throw new Error(`Polling timeout after ${a}ms for vault ${r.slice(0,M)}… (target: ${[...o].join(", ")})`);try{const l=await t.getPeginStatusByVaultId({vault_id:r},s);if(T.vaultIdKey(l.vault_id)!==T.vaultIdKey(r))throw new Error(`getPeginStatusByVaultId returned status for vault ${l.vault_id.slice(0,M)}…, requested ${r.slice(0,M)}…`);if(l.pegin_txid.toLowerCase()!==n.toLowerCase())throw new Error(`getPeginStatusByVaultId returned status for pegin ${l.pegin_txid.slice(0,8)}…, requested ${n.slice(0,8)}…`);const c=l.status;if(o.has(c)||c===T.DaemonStatus.ACTIVATED)return c;if(c===T.DaemonStatus.EXPIRED||T.VP_TERMINAL_FAILURE_STATUSES.has(c))throw new Error(`Vault ${r.slice(0,M)}… reached terminal status "${c}" while waiting for ${[...o].join(", ")}`)}catch(l){if(!(l instanceof T.JsonRpcError&&l.code===T.RpcErrorCode.PEGIN_NOT_FOUND))throw l}await new Promise((l,c)=>{const h=()=>{clearTimeout(d),c(new Error(`Polling aborted for vault ${r.slice(0,M)}… (target: ${[...o].join(", ")})`))},d=setTimeout(()=>{s==null||s.removeEventListener("abort",h),l()},i);s==null||s.addEventListener("abort",h,{once:!0})})}}const Pr=1200*1e3,at=new Set([T.DaemonStatus.PENDING_ACKS,T.DaemonStatus.PENDING_ACTIVATION,T.DaemonStatus.ACTIVATED_PENDING_BROADCAST,T.DaemonStatus.ACTIVATED]),yr=new Set([T.DaemonStatus.PENDING_DEPOSITOR_SIGNATURES,...at]);function br(e){return e.map(t=>({claimerPubkeyXOnly:p.processPublicKeyToXOnly(t.claimer_pubkey),payoutTxHex:t.payout_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex}))}function O(e){return p.processPublicKeyToXOnly(e).toLowerCase()}function vr(e,t){const r=(u,l,c)=>{throw new Error(`Deposit terms ${u} (${String(l)}) does not match the vault's version-locked signing context (${String(c)}); refusing to sign payouts against terms that describe a different graph.`)},n=[["protocolFeeRate",e.protocolFeeRate,t.protocolFeeRate],["vaultCoreVersion",e.vaultCoreVersion,t.vaultCoreVersion],["timelockPegin",e.timelockPegin,t.timelockPegin],["timelockAssert",e.timelockAssert,t.timelockAssert]];for(const[u,l,c]of n)l!==c&&r(u,l,c);const o=u=>u.map(O).sort(),a=(u,l)=>{const c=o(u),h=o(l);return c.length===h.length&&c.every((d,g)=>d===h[g])};a(e.vaultKeeperBtcPubkeys,t.vaultKeeperBtcPubkeys)||r("vaultKeeperBtcPubkeys",e.vaultKeeperBtcPubkeys.join(","),t.vaultKeeperBtcPubkeys.join(",")),a(e.universalChallengerBtcPubkeys,t.universalChallengerBtcPubkeys)||r("universalChallengerBtcPubkeys",e.universalChallengerBtcPubkeys.join(","),t.universalChallengerBtcPubkeys.join(","));const i=O(t.vaultProviderBtcPubkey),s=e.vaults.map(u=>O(u.vaultProviderBtcPubkey));s.includes(i)||r("vaults[].vaultProviderBtcPubkey",s.join(",")||"<no vaults>",t.vaultProviderBtcPubkey)}function mr(e,t,r,n){const o=O(n),a=[O(t),...r.map(O)],i=new Set(a);if(i.size!==a.length)throw new Error("Cannot validate claimer set: signing context contains duplicate vault provider or vault keeper key");if(i.has(o))throw new Error("Cannot validate claimer set: depositor key overlaps with vault provider or vault keeper set");const s=e.map(d=>O(d.claimer_pubkey));if(new Set(s).size!==s.length)throw new Error("Presign response contains duplicate claimer entries");const u=s.filter(d=>d!==o),l=new Set(u),c=a.filter(d=>!l.has(d)),h=u.filter(d=>!i.has(d));if(c.length>0||h.length>0)throw new Error("Presign response claimer set does not match expected (vault provider ∪ vault keepers)"+(c.length>0?` (missing: ${c.join(", ")})`:"")+(h.length>0?` (unexpected: ${h.join(", ")})`:""))}function He(e,t){return{vaultCoreVersion:t.vaultCoreVersion,payoutTxHex:e.payoutTxHex,peginTxHex:t.peginTxHex,assertTxHex:e.assertTxHex,vaultProviderBtcPubkey:t.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:t.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:t.universalChallengerBtcPubkeys,depositorBtcPubkey:t.depositorBtcPubkey,timelockPegin:t.timelockPegin,timelockAssert:t.timelockAssert,registeredPayoutScriptPubKey:t.registeredPayoutScriptPubKey,claimerBtcPubkey:e.claimerPubkeyXOnly,commissionBps:t.commissionBps,protocolFeeRate:t.protocolFeeRate,councilMembers:t.councilMembers,councilQuorum:t.councilQuorum,vkClaimerPayoutScriptPubKeys:t.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:t.vpCommissionScriptPubKey}}async function xr(e,t,r,n){const o=new F.PayoutManager({network:t.network,btcWallet:e}),a=r.length;n==null||n(0,a);let i;if(o.supportsBatchSigning())i=(await o.signPayoutTransactionsBatch(r.map(l=>He(l,t)))).map(l=>l.payoutSignature);else{i=[];for(let u=0;u<r.length;u++){n==null||n(u,a);const l=await o.signPayoutTransaction(He(r[u],t));i.push(l.signature)}}const s={};for(let u=0;u<r.length;u++)s[r[u].claimerPubkeyXOnly]={payout_signature:i[u]};return n==null||n(a,a),s}async function wr(e){const{statusReader:t,presignClient:r,btcWallet:n,vaultId:o,peginTxid:a,depositorPk:i,signingContext:s,depositTerms:u,timeoutMs:l=Pr,signal:c,onProgress:h,recordGraphFingerprint:d}=e,g=await we({statusReader:t,vaultId:o,peginTxid:a,targetStatuses:yr,timeoutMs:l,signal:c});if(at.has(g))return;c==null||c.throwIfAborted(),u!==void 0&&vr(u,s);const f=F.supportsDepositApproval(n)?n:void 0;let y;if(f){if(!u)throw new Error("runDepositorPresignFlow: this wallet requires approved deposit terms but none were provided. Fresh deposits must pass PreparePeginResult.depositTerms; resume flows must rebuild them from on-chain state (the vault app's rebuildDepositTerms).");y=u}const P=await r.requestDepositorPresignTransactions({pegin_txid:a,depositor_pk:i},c);c==null||c.throwIfAborted(),P.txs.forEach((H,q)=>{nr({claimTxHex:H.claim_tx.tx_hex,assertTxHex:H.assert_tx.tx_hex,path:`txs[${q}]`})});const m=ir({peginTxid:a,peginTxHex:s.peginTxHex,claimTxHex:P.depositor_graph.claim_tx.tx_hex,assertTxHex:P.depositor_graph.assert_tx.tx_hex,payoutTxHex:P.depositor_graph.payout_tx.tx_hex,challengers:P.depositor_graph.challenger_presign_data}),w=O(i);mr(P.txs,s.vaultProviderBtcPubkey,s.vaultKeeperBtcPubkeys,i);const E=P.txs.filter(H=>O(H.claimer_pubkey)!==w),k=br(E);f&&y&&(typeof f.validateDepositTerms=="function"&&await f.validateDepositTerms(y),await f.approveDepositTerms(y)),c==null||c.throwIfAborted();const S=await xr(n,s,k,h);c==null||c.throwIfAborted();const C=await it({depositorGraph:P.depositor_graph,btcWallet:n,signingContext:{vaultCoreVersion:s.vaultCoreVersion,peginTxHex:s.peginTxHex,depositorBtcPubkey:i,vaultProviderBtcPubkey:s.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:s.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:s.universalChallengerBtcPubkeys,timelockPegin:s.timelockPegin,timelockAssert:s.timelockAssert,councilMembers:s.councilMembers,councilQuorum:s.councilQuorum,network:s.network,registeredPayoutScriptPubKey:s.registeredPayoutScriptPubKey,protocolFeeRate:s.protocolFeeRate,vkClaimerPayoutScriptPubKeys:s.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:s.vpCommissionScriptPubKey}});c==null||c.throwIfAborted(),await d(m),c==null||c.throwIfAborted();const v={...S};v[p.stripHexPrefix(i)]=C.payout_signatures,await r.submitDepositorPresignatures({pegin_txid:a,depositor_pk:i,signatures:v,depositor_claimer_presignatures:C},c)}const Er=300*1e3,_r=new Set([T.DaemonStatus.PENDING_DEPOSITOR_WOTS_PK,...T.POST_WOTS_STATUSES]);async function Tr(e){const{statusReader:t,wotsSubmitter:r,vaultId:n,peginTxid:o,depositorPk:a,wotsPublicKeys:i,timeoutMs:s=Er,signal:u}=e;u==null||u.throwIfAborted();const l=await we({statusReader:t,vaultId:n,peginTxid:o,targetStatuses:_r,timeoutMs:s,signal:u});T.POST_WOTS_STATUSES.has(l)||(u==null||u.throwIfAborted(),await r.submitDepositorWotsKey({pegin_txid:o,depositor_pk:a,wots_public_keys:i},u))}function W(e){return e.registration||e.operation}function ut(e,t,r){const n=p.canonicalizeBtcPubkey(e);return{registration:n===p.canonicalizeBtcPubkey(t),operation:n===p.canonicalizeBtcPubkey(r)}}function ce(e,t,r){const n=oe(e);return{registration:Ne(n,oe(t)),operation:Ne(n,oe(r))}}function oe(e){return e.map(p.canonicalizeBtcPubkey).sort()}function Ne(e,t){return e.length===t.length&&e.every((r,n)=>r===t[n])}async function kr(e){const{vaultProviderEthAddress:t,hintBtcPubkey:r,registrationBtcPubkey:n,readCurrentOperationBtcPubkey:o,context:a}=e;if(!r)return;const i=p.canonicalizeBtcPubkey(r);if(i===p.canonicalizeBtcPubkey(n))return;const s=p.canonicalizeBtcPubkey(await o());if(i!==s)throw new Error(`Vault provider BTC pubkey mismatch for ${t}: indexer hint matches neither the registration key nor the current operation key on-chain.${a?` ${a}`:""}`)}function se(e,t,r){const n=`${e} operation key (admin=${t.ethAddress})`,o=ae.assertOnChainBtcPubkey(t.btcPubKey,`${e} roster key (admin=${t.ethAddress})`),a=ae.assertOnChainBtcPubkey(r,n);return{adminAddress:t.ethAddress,genesisBtcPubkey:o,operationBtcPubkey:a,rotated:a!==o}}function Sr(e){const t=new Map;for(const r of e){const n=t.get(r.operationBtcPubkey);if(n)throw new Error(`Participant operation key collision: ${n} and ${r.adminAddress} both resolve to operation key ${r.operationBtcPubkey}`);t.set(r.operationBtcPubkey,r.adminAddress)}}function ct(e,t,r){if(t.vaultKeepers.length!==e.vaultKeepers.length||t.universalChallengers.length!==e.universalChallengers.length)throw new Error(`Operation-key resolution returned ${t.vaultKeepers.length} keeper and ${t.universalChallengers.length} challenger keys for a roster of ${e.vaultKeepers.length} keepers and ${e.universalChallengers.length} challengers`);const n=se("vault provider",{ethAddress:e.vaultProviderEthAddress,btcPubKey:e.vaultProviderGenesisBtcPubkey},t.vaultProvider),o=e.vaultKeepers.map((i,s)=>se("vault keeper",i,t.vaultKeepers[s])),a=e.universalChallengers.map((i,s)=>se("universal challenger",i,t.universalChallengers[s]));return Sr([n,...o,...a]),{vaultProvider:n,vaultKeepers:o,universalChallengers:a,vaultKeeperOperationKeysSorted:o.map(i=>i.operationBtcPubkey).sort(),universalChallengerOperationKeysSorted:a.map(i=>i.operationBtcPubkey).sort(),resolvedAt:r,query:e}}async function lt(e){const t=await e.operationKeyReader.getCurrentOperationKeys(e.query,e.blockNumber);return ct(e.query,t,{mode:"current"})}async function ht(e){const t=await e.operationKeyReader.getOperationKeysAtEpochs(e.query,e.epochs);return ct(e.query,t,{mode:"epochs",epochs:e.epochs})}class J extends Error{constructor(t){super(t),this.name="ApplicationEntryPointMismatchError"}}function Ar(e){return e instanceof J||e instanceof Error&&e.name==="ApplicationEntryPointMismatchError"}const Ke=e=>e.map(p.canonicalizeBtcPubkey).sort();async function Cr(e){const{vaultRegistryReader:t,vaultKeeperReader:r,universalChallengerReader:n,vaultProviderEthAddress:o,applicationEntryPoint:a,expectedVaultProviderBtcPubkey:i,expectedVaultKeeperBtcPubkeys:s,expectedUniversalChallengerBtcPubkeys:u,operationKeyReader:l,onIndexerServingOperationKeys:c,onIndexerHintsInconsistent:h,blockNumber:d}=e,[g,f,y,P]=await Promise.all([t.getVaultProviderApplication(o,d),t.getVaultProviderGenesisBtcPubKey(o,d),n.getLatestUniversalChallengersVersion(d),n.getCurrentUcKeyEpoch(d)]);if(!ue.isAddress(a,{strict:!1}))throw new J(`The application entry point this deposit was prepared for is not a valid address: ${a}`);if(!ue.isAddressEqual(g,a))throw new J(`Vault provider ${o} is registered to application ${g}, but this deposit was prepared for ${a}. Refusing to build: the vault keeper roster, its version, and the keeper key epoch would all resolve against a different application than the one selected.`);const[m,w]=await Promise.all([r.getCurrentVaultKeepersVersion(g,d),r.getCurrentAppKeeperKeyEpoch(g,d)]),[E,k]=await Promise.all([r.getVaultKeepersByVersion(g,m,d),n.getUniversalChallengersByVersion(y,d)]),S={vaultProvider:p.canonicalizeBtcPubkey(f),vaultKeepers:Ke(E.map($=>$.btcPubKey)),universalChallengers:Ke(k.map($=>$.btcPubKey))},C=await lt({operationKeyReader:l,query:{vaultProviderEthAddress:o,vaultProviderGenesisBtcPubkey:`0x${f}`,applicationEntryPoint:g,vaultKeepers:E,universalChallengers:k},blockNumber:d}),v={vaultProvider:C.vaultProvider.operationBtcPubkey,vaultKeepers:[...C.vaultKeeperOperationKeysSorted],universalChallengers:[...C.universalChallengerOperationKeysSorted]},H=ut(i,S.vaultProvider,v.vaultProvider),q=ce(s,S.vaultKeepers,v.vaultKeepers),ke=ce(u,S.universalChallengers,v.universalChallengers);if(!W(H))throw new Error(`Vault provider BTC pubkey indexer hint does not match BTCVaultRegistry for ${o}. Refresh and try again.`);if(!W(q))throw new Error(`Vault keeper BTC pubkeys (v${m}) indexer set does not match ApplicationRegistry on-chain set. Refresh and try again.`);if(!W(ke))throw new Error(`Universal challenger BTC pubkeys (v${y}) indexer set does not match ProtocolParams on-chain set. Refresh and try again.`);const Se=[H,q,ke],Pt=Se.some($=>$.registration&&!$.operation),Ae=Se.some($=>$.operation&&!$.registration);if(Pt&&Ae){const $=`Indexer participant hints are internally inconsistent for vault provider ${o}: some roles match the registration keys while others match the rotated operation keys.`;throw h==null||h($),new Error(`${$} Refresh and try again.`)}return Ae&&(c==null||c(`Indexer is serving rotated operation keys for vault provider ${o}`)),{vaultProviderBtcPubkeyXOnly:v.vaultProvider,vaultKeeperBtcPubkeysSorted:v.vaultKeepers,universalChallengerBtcPubkeysSorted:v.universalChallengers,expectedAppVaultKeepersVersion:m,expectedUniversalChallengersVersion:y,appKeeperKeyEpoch:w,ucKeyEpoch:P,registrationKeys:S,participantKeys:C}}function $r(e){return/^[0-9a-fA-F]{64}$/.test(e)}function Ir(e){const{amountSats:t,minDeposit:r,maxDeposit:n,btcBalance:o,estimatedFeeSats:a,depositorClaimValue:i}=e;return!(t<=0n||t<r||n&&n>0n&&t>n||a==null||i==null||t+a+i>o)}function Rr(e,t,r){return e<=0n?{valid:!1,error:"Deposit amount must be greater than zero"}:e<t?{valid:!1,error:`Minimum deposit is ${p.formatSatoshisToBtc(t)} BTC`}:r&&r>0n&&e>r?{valid:!1,error:`Maximum deposit is ${p.formatSatoshisToBtc(r)} BTC`}:{valid:!0}}function Br(e){const{amount:t,effectiveRemaining:r}=e;return r===null?{valid:!0}:r===0n?{valid:!1,error:"Supply cap reached — deposits temporarily paused"}:t>r?{valid:!1,error:`Vault size exceeds remaining capacity (${p.formatSatoshisToBtc(r)} BTC)`}:{valid:!0}}function Vr(e,t){if(!e||e.length===0)return{valid:!1,error:"At least one vault provider must be selected"};const r=t.map(o=>o.toLowerCase());return e.filter(o=>!r.includes(o.toLowerCase())).length>0?{valid:!1,error:"Invalid vault provider selected"}:{valid:!0}}function pt(e,t,r){if(!e||e.length===0)return{valid:!1,error:"At least one vault amount required"};for(let n=0;n<e.length;n++){const o=e[n];if(o<=0n)return{valid:!1,error:`Vault ${n+1} amount must be positive`};if(t&&o<t)return{valid:!1,error:`Vault ${n+1} amount ${p.formatSatoshisToBtc(o)} BTC is below minimum deposit ${p.formatSatoshisToBtc(t)} BTC`};if(r&&o>r)return{valid:!1,error:`Vault ${n+1} amount ${p.formatSatoshisToBtc(o)} BTC exceeds maximum deposit ${p.formatSatoshisToBtc(r)} BTC`}}return{valid:!0}}function dt(e){const t=p.stripHexPrefix(e);return $r(t)?{valid:!0}:{valid:!1,error:"Invalid pubkey format: must be 64 hex characters (32-byte x-only public key, no 0x prefix)"}}function Or(e){if(!e||e.length===0)throw new Error("No vault keepers available. The system requires at least one vault keeper to create a deposit.")}function Hr(e){if(!e||e.length===0)throw new Error("No universal challengers available. The system requires at least one universal challenger to create a deposit.")}function Nr(e){if(e.length===0)throw new Error("No spendable UTXOs available")}function Kr(e){const{vaultAmounts:t,confirmedUTXOs:r,vaultProviderBtcPubkey:n,vaultKeeperBtcPubkeys:o,universalChallengerBtcPubkeys:a,minDeposit:i,maxDeposit:s}=e,u=pt(t,i,s);if(!u.valid)throw new Error(u.error);const l=dt(n);if(!l.valid)throw new Error(l.error);Or(o),Hr(a),Nr(r)}class Ee extends Error{constructor(t){super(t),this.name="ParticipantKeyDriftError"}}function Mr(e){return e instanceof Ee||e instanceof Error&&e.name==="ParticipantKeyDriftError"}function Me(e,t,r){return t.length===r.length&&t.every((n,o)=>n===r[o])?null:`${e} expected [${t.join(", ")}], got [${r.join(", ")}]`}async function Dr(e){const{vaultRegistryReader:t,operationKeyReader:r,vaultIds:n,expected:o}=e,a=o.query;if(n.length===0)return;const i=await t.getVaultKeyEpochsBatch(n),s=[];for(const[u,l]of i.entries()){const c=n[u];let h;try{h=await ht({operationKeyReader:r,query:a,epochs:l})}catch(f){s.push(`vault ${c}: could not resolve participants at frozen epochs (vp=${l.vpKeyEpoch}, keeper=${l.appKeeperKeyEpoch}, uc=${l.ucKeyEpoch}): ${f.message}`);continue}h.vaultProvider.operationBtcPubkey!==o.vaultProvider.operationBtcPubkey&&s.push(`vault ${c}: vault provider key expected ${o.vaultProvider.operationBtcPubkey}, got ${h.vaultProvider.operationBtcPubkey}`);const d=Me(`vault ${c}: vault keeper keys`,o.vaultKeeperOperationKeysSorted,h.vaultKeeperOperationKeysSorted);d&&s.push(d);const g=Me(`vault ${c}: universal challenger keys`,o.universalChallengerOperationKeysSorted,h.universalChallengerOperationKeysSorted);g&&s.push(g)}if(s.length>0)throw new Ee(`Aborting BTC broadcast: participant operation keys changed during registration (${s.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class _e extends Error{constructor(t){super(t),this.name="RegisteredVaultVersionMismatchError"}}function Fr(e){return e instanceof _e||e instanceof Error&&e.name==="RegisteredVaultVersionMismatchError"}async function Ur(e){const{vaultRegistryReader:t,vaultIds:r,expectedOffchainParamsVersion:n,expectedAppVaultKeepersVersion:o,expectedUniversalChallengersVersion:a,expectedVaultCoreVersion:i}=e,s=await t.getProtocolInfoBatch(r),u=[];if(s.forEach((l,c)=>{const h=r[c];l.offchainParamsVersion!==n&&u.push(`vault ${h}: offchainParams expected v${n}, got v${l.offchainParamsVersion}`),l.appVaultKeepersVersion!==o&&u.push(`vault ${h}: appVaultKeepers expected v${o}, got v${l.appVaultKeepersVersion}`),l.universalChallengersVersion!==a&&u.push(`vault ${h}: universalChallengers expected v${a}, got v${l.universalChallengersVersion}`),l.vaultCoreVersion!==i&&u.push(`vault ${h}: vaultCoreVersion expected v${i} (build-time active), got v${l.vaultCoreVersion}`)}),u.length>0)throw new _e(`Aborting BTC broadcast: signer-set or offchain-params versions changed during registration (${u.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class gt extends Error{constructor(r,n){super(`Refund not yet mature (BIP68 not final): ${n.message}`);U(this,"vaultId");U(this,"cause");this.name="BIP68NotMatureError",this.vaultId=r,this.cause=n}}const Lr=/^0x[0-9a-fA-F]{64}$/,Gr=/^(?:0x)?(?:[0-9a-fA-F]{2})+$/,ft=/^(?:0x)?(?:[0-9a-fA-F]{64}|[0-9a-fA-F]{66})$/,Te=160,le=2e3,he=10n,pe=100n;function Xr(e){if(!Number.isFinite(e)||e<=0)throw new Error(`feeRateSatsVb must be a positive finite number, got ${e}`);return BigInt(Math.ceil(e*Te))}const qr=1,zr=/non-BIP68-final/i;function de(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!Lr.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function ie(e,t){if(!Number.isInteger(e)||e<0)throw new Error(`${t} must be a non-negative integer, got ${e}`)}function Wr(e){if(de(e.hashlock,"hashlock"),!Number.isInteger(e.htlcVout)||e.htlcVout<0)throw new Error(`htlcVout must be a non-negative integer, got ${e.htlcVout}`);if(!Array.isArray(e.batch)||e.batch.length===0)throw new Error("batch must be a non-empty array of HTLC entries");if(e.htlcVout>=e.batch.length)throw new Error(`htlcVout ${e.htlcVout} is out of range for batch of size ${e.batch.length}`);for(let r=0;r<e.batch.length;r++){const n=e.batch[r];if(de(n.hashlock,`batch[${r}].hashlock`),!Number.isInteger(n.htlcVout)||n.htlcVout!==r)throw new Error(`batch[${r}].htlcVout must equal ${r} (contiguous vout-ordered vector), got ${n.htlcVout}`);if(typeof n.amount!="bigint"||n.amount<=0n)throw new Error(`batch[${r}].amount must be a positive bigint, got ${n.amount}`)}const t=e.batch[e.htlcVout];if(t.hashlock.toLowerCase()!==e.hashlock.toLowerCase())throw new Error(`batch[${e.htlcVout}].hashlock (${t.hashlock}) does not match target hashlock (${e.hashlock})`);if(t.amount!==e.amount)throw new Error(`batch[${e.htlcVout}].amount (${t.amount}) does not match target amount (${e.amount})`);if(ie(e.offchainParamsVersion,"offchainParamsVersion"),ie(e.appVaultKeepersVersion,"appVaultKeepersVersion"),ie(e.universalChallengersVersion,"universalChallengersVersion"),mt.assertValidVaultCoreVersion(e.vaultCoreVersion,"VaultRefundData.vaultCoreVersion"),typeof e.unsignedPrePeginTxHex!="string"||e.unsignedPrePeginTxHex.length===0)throw new Error("unsignedPrePeginTxHex must be a non-empty hex string");if(!Gr.test(e.unsignedPrePeginTxHex))throw new Error("unsignedPrePeginTxHex must be a hex byte string (optional 0x prefix, even length)");if(!e.depositorBtcPubkey||!ft.test(e.depositorBtcPubkey))throw new Error("depositorBtcPubkey must be 32 or 33 bytes of hex (optional 0x prefix)");if(typeof e.amount!="bigint"||e.amount<=0n)throw new Error(`amount must be a positive bigint, got ${e.amount}`)}function jr(e){if(!e.vaultProviderPubkey||!ft.test(e.vaultProviderPubkey))throw new Error("vaultProviderPubkey must be 32 or 33 bytes of hex");if(e.vaultKeeperPubkeys.length===0)throw new Error("vaultKeeperPubkeys must be non-empty");if(e.universalChallengerPubkeys.length===0)throw new Error("universalChallengerPubkeys must be non-empty");if(!Number.isInteger(e.timelockRefund)||e.timelockRefund<=0)throw new Error(`timelockRefund must be a positive integer, got ${e.timelockRefund}`);if(typeof e.feeRate!="bigint"||e.feeRate<=0n)throw new Error(`protocol feeRate must be a positive bigint, got ${e.feeRate}`);if(typeof e.minPeginFeeRate!="bigint"||e.minPeginFeeRate<=0n)throw new Error(`minPeginFeeRate must be a positive bigint, got ${e.minPeginFeeRate}`);if(!Number.isInteger(e.numLocalChallengers)||e.numLocalChallengers<0)throw new Error("numLocalChallengers must be a non-negative integer");if(!Number.isInteger(e.councilQuorum)||!Number.isInteger(e.councilSize)||e.councilQuorum<=0||e.councilSize<=0||e.councilQuorum>e.councilSize)throw new Error(`councilQuorum (${e.councilQuorum}) must be in [1, councilSize=${e.councilSize}]`)}async function Yr(e){const{vaultId:t,readVault:r,readPrePeginContext:n,feeRate:o,signPsbt:a,broadcastTx:i,signal:s}=e;s==null||s.throwIfAborted(),de(t,"vaultId");const u=await r();Wr(u),s==null||s.throwIfAborted();const l=await n(u);if(jr(l),s==null||s.throwIfAborted(),!Number.isFinite(o)||o<=0)throw new Error(`feeRate must be a positive number, got ${o}`);if(o>le)throw new Error(`feeRate ${o} sat/vB exceeds refund safety cap ${le} sat/vB; refusing to sign refund.`);const c=BigInt(Math.ceil(o*Te)),h=u.amount*he/pe;if(c>h)throw new Error(`Refund fee ${c} sats exceeds the per-vault safety cap of ${h} sats (${he}/${pe} of vault.amount=${u.amount}); refusing to sign refund.`);s==null||s.throwIfAborted();const d=p.processPublicKeyToXOnly(u.depositorBtcPubkey),g=p.stripHexPrefix(u.unsignedPrePeginTxHex),f=F.findAuthAnchorOpReturn(g);if(f!==void 0&&f.vout!==u.batch.length)throw new Error(`Auth-anchor OP_RETURN at vout ${f.vout} does not match batch size (${u.batch.length} HTLC outputs expect the anchor at vout ${u.batch.length}). Refund refused — sibling HTLC vector is incomplete.`);const y=f==null?void 0:f.hash;let P;try{P=R.Transaction.fromHex(g)}catch(v){throw new Error(`Failed to parse funded Pre-PegIn transaction hex: ${v instanceof Error?v.message:String(v)}`)}if(P.outs.length<u.batch.length)throw new Error(`Funded Pre-PegIn tx has ${P.outs.length} outputs but batch requires at least ${u.batch.length} HTLC outputs. Refund refused — funded tx shape disagrees with sibling vector.`);const{psbtHex:m}=await N.buildRefundPsbt({prePeginParams:{vaultCoreVersion:u.vaultCoreVersion,depositorPubkey:d,vaultProviderPubkey:p.stripHexPrefix(l.vaultProviderPubkey),vaultKeeperPubkeys:l.vaultKeeperPubkeys.map(p.stripHexPrefix),universalChallengerPubkeys:l.universalChallengerPubkeys.map(p.stripHexPrefix),hashlocks:u.batch.map(v=>p.stripHexPrefix(v.hashlock)),timelockRefund:l.timelockRefund,pegInAmounts:u.batch.map(v=>v.amount),feeRate:l.feeRate,minPeginFeeRate:l.minPeginFeeRate,numLocalChallengers:l.numLocalChallengers,councilQuorum:l.councilQuorum,councilSize:l.councilSize,network:l.network,authAnchorHash:y},fundedPrePeginTxHex:g,htlcVout:u.htlcVout,refundFee:c,hashlock:p.stripHexPrefix(u.hashlock)});s==null||s.throwIfAborted();const w=D.createTaprootScriptPathSignOptions(u.depositorBtcPubkey,qr),E=await a(m,w);x.assertPsbtUnsignedTxMatches({requestedPsbtHex:m,returnedPsbtHex:E});const k=0,S=x.extractPayoutSignature(E,d,k);x.assertScriptPathSchnorrSignature({requestedPsbtHex:m,signatureHex:S,signerXOnlyPubkeyHex:d,inputIndex:k});const C=N.finalizeScriptPathWithSignatures({requestedPsbtHex:m,signaturesHex:[S],signerXOnlyPubkeyHex:d});s==null||s.throwIfAborted();try{return await i(C)}catch(v){throw v instanceof Error&&zr.test(v.message)?new gt(t,v):v}}class ge extends Error{constructor(r,n,o){super(r);U(this,"feeSats");U(this,"sweptTotalSats");this.name="ReclaimUneconomicalError",this.feeSats=n,this.sweptTotalSats=o}}const fe=2e3,Pe=25n,ye=100n,Qr=10n;async function Jr(e,t,r){for(let n=0;n<e.length;n++){const o=D.calculateBtcTxHash(e[n].depositorSignedPeginTxHex),a=p.ensureHexPrefix(await A.deriveVaultId(p.stripHexPrefix(o),p.stripHexPrefix(r))).toLowerCase();if(a!==t[n].toLowerCase())throw new Error(`Reserve ${n} belongs to vault ${a}, not the requested ${t[n].toLowerCase()}. Refusing to sweep a reserve whose vault is not the one the caller asked for — the reserve funds that vault's claim transaction and cannot be replaced.`)}}async function Zr(e){const{vaultIds:t,depositorEthAddress:r,depositorBtcPubkey:n,readVaults:o,feeRate:a,signPsbt:i,broadcastTx:s,signal:u}=e;if(u==null||u.throwIfAborted(),t.length===0)throw new Error("Reclaim requires at least one vault id; got none.");if(!Number.isFinite(a)||a<=0)throw new Error(`feeRate must be a positive number, got ${a}`);if(a>fe)throw new ge(`Fee rate ${a} sat/vB exceeds the reclaim safety cap of ${fe} sat/vB; refusing to sign.`,0n,0n);const l=await o();if(u==null||u.throwIfAborted(),l.length!==t.length)throw new Error(`readVaults returned ${l.length} reserves for ${t.length} vault id(s); refusing to sweep a set that does not match the request.`);await Jr(l,t,r),u==null||u.throwIfAborted();const c=p.processPublicKeyToXOnly(n),h=l.map(k=>({depositorSignedPeginTxHex:k.depositorSignedPeginTxHex,observed:k.observed,expectedValue:k.expectedClaimValue})),d=N.estimateReclaimFeeSats(a,h.length),g=h.reduce((k,S)=>k+S.expectedValue,0n),f=g*Pe/ye;if(d>f)throw new ge(`Reclaim fee ${d} sats exceeds ${Pe}/${ye} of the swept total (${g} sats, cap ${f} sats). The reserve is not at risk — it stays where it is until fee rates fall.`,d,g);u==null||u.throwIfAborted();const{psbtHex:y}=N.buildReclaimPsbt({depositorPubkey:c,inputs:h,feeSats:d});u==null||u.throwIfAborted();const P=D.createTaprootScriptPathSignOptions(n,h.length),m=await i(y,P);x.assertPsbtUnsignedTxMatches({requestedPsbtHex:y,returnedPsbtHex:m});const w=h.map((k,S)=>{const C=x.extractPayoutSignature(m,c,S);return x.assertScriptPathSchnorrSignature({requestedPsbtHex:y,signatureHex:C,signerXOnlyPubkeyHex:c,inputIndex:S}),C}),E=N.finalizeScriptPathWithSignatures({requestedPsbtHex:y,signaturesHex:w,signerXOnlyPubkeyHex:c});return u==null||u.throwIfAborted(),s(E)}exports.ApplicationEntryPointMismatchError=J;exports.ArtifactsVaultMismatchError=Qe;exports.BIP68NotMatureError=gt;exports.ChallengerSetMismatchError=Ue;exports.DELEGATED_CLAIM_TX_GRAPH_VERSION=Ye;exports.GraphFingerprintError=b;exports.PEGIN_ETH_CONFIRMATIONS=Ze;exports.ParticipantKeyDriftError=Ee;exports.PayoutDestinationError=Xe;exports.PeginRegistrationMissingError=ve;exports.PeginRegistrationNotFinalError=me;exports.RECLAIM_MAX_FEE_FRACTION_DENOMINATOR=ye;exports.RECLAIM_MAX_FEE_FRACTION_NUMERATOR=Pe;exports.RECLAIM_MAX_FEE_RATE_SATS_VB=fe;exports.RECLAIM_WARN_FEE_FRACTION_NUMERATOR=Qr;exports.REFUND_MAX_FEE_FRACTION_DENOMINATOR=pe;exports.REFUND_MAX_FEE_FRACTION_NUMERATOR=he;exports.REFUND_MAX_FEE_RATE_SATS_VB=le;exports.REFUND_VSIZE=Te;exports.ReclaimUneconomicalError=ge;exports.RegisteredVaultVersionMismatchError=_e;exports.VaultIdBindingError=We;exports.activateVault=kt;exports.activateVaultAndRedeem=St;exports.assembleWatchtowerArtifacts=Ht;exports.assertArtifactsUsableForVault=Lt;exports.assertChallengerSetMatchesVault=Le;exports.assertClaimSpendsVault=be;exports.assertPayoutPaysRegisteredScript=qe;exports.assertReturnedGraphMatchesFingerprint=ur;exports.assertVaultProviderHintAccepted=kr;exports.buildAndBroadcastReclaim=Zr;exports.buildAndBroadcastRefund=Yr;exports.deriveClaimerWotsKeypair=Ft;exports.estimateRefundFeeSats=Xr;exports.fingerprintReturnedGraph=st;exports.isApplicationEntryPointMismatchError=Ar;exports.isDepositAmountValid=Ir;exports.isHintAccepted=W;exports.isParticipantKeyDriftError=Mr;exports.isPeginRegistrationMissingError=et;exports.isPeginRegistrationNotFinalError=jt;exports.isRegisteredVaultVersionMismatchError=Fr;exports.matchKeyHint=ut;exports.matchKeySetHint=ce;exports.resolveCurrentParticipantKeys=lt;exports.resolveParticipantKeysAtEpochs=ht;exports.runDepositorPresignFlow=wr;exports.signDepositorGraph=it;exports.submitWotsPublicKey=Tr;exports.summarizeWatchtowerArtifacts=Je;exports.validateDepositAmount=Rr;exports.validateMultiVaultDepositInputs=Kr;exports.validateOnChainParticipantKeys=Cr;exports.validateProviderSelection=Vr;exports.validateRemainingCapacity=Br;exports.validateVaultAmounts=pt;exports.validateVaultProviderPubkey=dt;exports.verifyRegisteredParticipantKeys=Dr;exports.verifyRegisteredVaultVersions=Ur;exports.waitForPeginRegistrationDepth=Yt;exports.waitForPeginStatus=we;
-//# sourceMappingURL=buildAndBroadcastReclaim-B8aFMGf-.cjs.map