@babylonlabs-io/ts-sdk 3.1.1 → 3.1.2

package/dist/{buildAndBroadcastReclaim-DjX7wVb2.cjs → buildAndBroadcastReclaim-Da8rD5Z7.cjs}

@@ -1,2 +1,2 @@
-"use strict";var Yt=Object.defineProperty;var Wt=(e,t,r)=>t in e?Yt(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var W=(e,t,r)=>Wt(e,typeof t!="symbol"?t+"":t,r);const nt=require("./BTCVaultRegistry.abi-CohlJX7c.cjs"),g=require("./bitcoin-D-O2GjbC.cjs"),F=require("./PayoutManager-DOdsgcUR.cjs"),A=require("./tbv/core/wasm/index.cjs"),S=require("./registration-records-DFQgBaYi.cjs"),$=require("bitcoinjs-lib"),p=require("./constants-BwCg5K6R.cjs"),w=require("./verifyScriptPathSchnorrSignature-D2t1yACC.cjs"),D=require("buffer"),oe=require("./validation-C6XTfZak.cjs"),z=require("./signing-DvISftFk.cjs"),st=require("./deriveVaultRoot-C3uqnJto.cjs"),ce=require("./types-Bda75Od0.cjs"),xe=require("viem"),k=require("./state-C4WoNCy1.cjs"),j=require("./sha2-Ce6KewYx.cjs"),U=require("./noPayout-DOHak0ui.cjs"),jt=require("./secp256k1-DDHQ1_za.cjs"),Qt=require("./btcTxHash-CGb5BqFL.cjs"),Jt=/^0x[0-9a-fA-F]{64}$/,Zt=/^0x[0-9a-fA-F]{40}$/,er=/^0x([0-9a-fA-F]{2})*$/;function le(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!Jt.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function tr(e,t){if(!Zt.test(e))throw new Error(`${t} must be a 20-byte 0x-prefixed hex address (42 chars)`)}function rr(e,t){if(!er.test(e))throw new Error(`${t} must be a 0x-prefixed hex string with an even number of hex chars`)}function it(e){tr(e.btcVaultRegistryAddress,"btcVaultRegistryAddress"),le(e.vaultId,"vaultId");const t=g.ensureHexPrefix(e.secret);if(le(t,"secret"),e.hashlock!==void 0&&(le(e.hashlock,"hashlock"),!F.validateSecretAgainstHashlock(t,e.hashlock)))throw new Error("Invalid secret: SHA256(secret) does not match the provided hashlock");return t}async function or(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:o,activationMetadata:n,writeContract:s,signal:a}=e;a==null||a.throwIfAborted();const i=it({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:o});return rr(n,"activationMetadata"),s({address:t,abi:nt.BTCVaultRegistryABI,functionName:"activateVaultWithSecret",args:[r,i,n]})}async function nr(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:o,writeContract:n,signal:s}=e;s==null||s.throwIfAborted();const a=it({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:o});return n({address:t,abi:nt.BTCVaultRegistryABI,functionName:"activateVaultWithSecretAndRedeem",args:[r,a]})}class V extends Error{constructor(t,r){super(t,r),this.name="AssertBindingError"}}function de(e,t){try{return $.Psbt.fromBase64(t)}catch(r){throw new V(`${e} PSBT cannot be parsed.`,{cause:r})}}function sr(e,t,r){const o=t.txInputs[r];if(!o)throw new V(`${e} PSBT has no input ${r}.`);return o.hash}function Ge(e){return $.Transaction.fromBuffer(e.data.globalMap.unsignedTx.toBuffer()).getHash()}function he(e,t,r,o,n,s){const a=t.txInputs[r];if(!a)throw new V(`${e} PSBT has no input ${r}.`);if(!a.hash.equals(o)||a.index!==n)throw new V(`${e} input ${r} does not spend ${s}: the graph pairs this ${e} with a different transaction.`)}function ir(e,t){var n;const r=(n=e.data.inputs[p.ASSERT_CLAIM_INPUT_INDEX])==null?void 0:n.witnessUtxo;if(r===void 0)throw new V(`Assert input ${p.ASSERT_CLAIM_INPUT_INDEX} carries no witnessUtxo, so the amount and script its signature commits to cannot be checked; refusing to sign assert.`);const o=t.txOutputs[p.CLAIM_CONNECTOR_OUTPUT_INDEX];if(!o)throw new V(`Claim PSBT has no output ${p.CLAIM_CONNECTOR_OUTPUT_INDEX} for the Assert to spend; refusing to sign assert.`);if(r.value!==o.value)throw new V(`Assert input ${p.ASSERT_CLAIM_INPUT_INDEX} declares a prevout of ${r.value} sats but the Claim's output ${p.CLAIM_CONNECTOR_OUTPUT_INDEX} is worth ${o.value}; refusing to sign assert.`);if(!r.script.equals(o.script))throw new V(`Assert input ${p.ASSERT_CLAIM_INPUT_INDEX} declares a prevout script that is not the Claim's output ${p.CLAIM_CONNECTOR_OUTPUT_INDEX} script; refusing to sign assert.`)}function at(e){const t=de("Claim",e.claimPsbtBase64),r=de("Assert",e.assertPsbtBase64),o=de("Payout",e.payoutClaimerPsbtBase64);he("Assert",r,p.ASSERT_CLAIM_INPUT_INDEX,Ge(t),p.CLAIM_CONNECTOR_OUTPUT_INDEX,"Claim:0"),ir(r,t),he("Payout",o,p.PAYOUT_ASSERT_INPUT_INDEX,Ge(r),p.ASSERT_PAYOUT_OUTPUT_INDEX,"Assert:0"),he("Payout",o,p.PAYOUT_PEGIN_INPUT_INDEX,sr("Claim",t,p.CLAIM_PEGIN_INPUT_INDEX),p.PEGIN_VAULT_OUTPUT_INDEX,"this vault's PegIn:0")}function pe(e,t){try{return $.Psbt.fromBase64(t)}catch(r){throw new Error(`${e} PSBT cannot be parsed.`,{cause:r})}}function ze(e,t,r,o){var a;const n=[{inputIndex:p.PAYOUT_PEGIN_INPUT_INDEX,expectedSats:r,source:`the vault's PegIn output ${p.PEGIN_VAULT_OUTPUT_INDEX}`},{inputIndex:p.PAYOUT_ASSERT_INPUT_INDEX,expectedSats:o.value,source:`the Assert's output ${p.ASSERT_PAYOUT_OUTPUT_INDEX}`}];for(const{inputIndex:i,expectedSats:u,source:l}of n){const c=(a=t.data.inputs[i])==null?void 0:a.witnessUtxo;if(c===void 0)throw new Error(`${e} Payout input ${i} carries no witnessUtxo, so the amount its signature commits to cannot be checked; refusing to sign payout.`);if(c.value!==u)throw new Error(`${e} Payout input ${i} declares a prevout of ${c.value} sats but ${l} is worth ${u}; refusing to sign payout.`)}const s=t.data.inputs[p.PAYOUT_ASSERT_INPUT_INDEX].witnessUtxo;if(!(s!=null&&s.script.equals(o.script)))throw new Error(`${e} Payout input ${p.PAYOUT_ASSERT_INPUT_INDEX} declares a prevout script that is not the Assert's output ${p.ASSERT_PAYOUT_OUTPUT_INDEX} script; refusing to sign payout.`)}async function ar(e){const{vault:t}=e,r={vaultCoreVersion:t.vaultCoreVersion,numVaultKeepers:t.vaultKeeperBtcPubkeys.length,numUniversalChallengers:t.universalChallengerBtcPubkeys.length,councilSize:t.councilSize,protocolFeeRate:t.protocolFeeRate};w.assertPayoutFeeBandDomain(r);const o=pe("Claimer Payout",e.payoutClaimerPsbtBase64),n=pe("Depositor Payout",e.payoutDepositorPsbtBase64),s=pe("Assert",e.assertPsbtBase64);if(!n.data.globalMap.unsignedTx.toBuffer().equals(o.data.globalMap.unsignedTx.toBuffer()))throw new Error("Depositor and claimer Payout PSBTs describe different transactions; refusing to sign payout.");const a=s.txOutputs[p.ASSERT_PAYOUT_OUTPUT_INDEX];if(a===void 0)throw new Error(`Assert transaction has no output ${p.ASSERT_PAYOUT_OUTPUT_INDEX}; the Payout's implicit fee cannot be measured.`);if(o.txInputs.length!==p.DEPOSITOR_PAYOUT_INPUT_COUNT)throw new Error(`Payout transaction must have exactly ${p.DEPOSITOR_PAYOUT_INPUT_COUNT} inputs, got ${o.txInputs.length}`);const i=o.txInputs[p.PAYOUT_PEGIN_INPUT_INDEX].sequence;if(i!==t.timelockPegin)throw new Error(`Payout input ${p.PAYOUT_PEGIN_INPUT_INDEX} sequence ${i} must equal the PegIn CSV timelock ${t.timelockPegin}; refusing to sign payout.`);const u=o.txInputs[p.PAYOUT_ASSERT_INPUT_INDEX].sequence;if(u!==t.timelockAssert)throw new Error(`Payout input ${p.PAYOUT_ASSERT_INPUT_INDEX} sequence ${u} must equal the Assert CSV timelock ${t.timelockAssert}; refusing to sign payout.`);ze("Claimer",o,t.peginVaultOutputValueSats,a),ze("Depositor",n,t.peginVaultOutputValueSats,a);const l=t.peginVaultOutputValueSats+a.value,c=o.txOutputs;if(c.length!==p.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT)throw new Error(`Payout transaction has ${c.length} output(s), expected exactly ${p.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT} for a depositor-as-claimer payout.`);let d=0;for(const h of c)d+=h.value;if(d>l)throw new Error(`Payout outputs (${d} sats) exceed inputs (${l} sats); invalid transaction.`);await w.assertPayoutFeeInBand(r,{implicitFeeSats:l-d,out0Len:c[p.PAYOUT_DESTINATION_OUTPUT_INDEX].script.length,out1Len:void 0})}class ut extends Error{constructor(t,r){super("Transaction graph's challenger set does not match the vault's (local ∪ universal)"+(t.length>0?` (missing: ${t.join(", ")})`:"")+(r.length>0?` (unexpected: ${r.join(", ")})`:"")+". Refusing to sign an incomplete or padded challenger set."),this.missing=t,this.unexpected=r,this.name="ChallengerSetMismatchError"}}function ct(e){const t=w.deriveLocalChallengers({claimerBtcPubkey:e.depositorBtcPubkey,depositorBtcPubkey:e.depositorBtcPubkey,vaultProviderBtcPubkey:e.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:e.vaultKeeperBtcPubkeys}),r=e.universalChallengerBtcPubkeys.map(Ye),o=t.filter(c=>r.includes(c));if(o.length>0)throw new Error(`Cannot check the challenger set: vault keepers and universal challengers overlap (${o.join(", ")}).`);const n=e.graphChallengerPubkeys.map(Ye),s=new Set(n);if(s.size!==n.length)throw new Error("Transaction graph lists the same challenger more than once.");const a=[...t,...r],i=new Set(a),u=a.filter(c=>!s.has(c)),l=n.filter(c=>!i.has(c));if(u.length>0||l.length>0)throw new ut(u,l)}function Ye(e){return g.stripHexPrefix(e).toLowerCase()}class lt extends Error{constructor(t,r){super(`Payout transaction output ${p.PAYOUT_DESTINATION_OUTPUT_INDEX} pays ${r}, not the vault's registered payout script ${t}. Refusing to sign a payout to another destination.`),this.expectedScriptHex=t,this.actualScriptHex=r,this.name="PayoutDestinationError"}}function dt(e){let t;try{t=$.Psbt.fromBase64(e.payoutPsbtBase64)}catch(c){throw new Error("Payout PSBT cannot be parsed.",{cause:c})}const{version:r,locktime:o,outs:n}=ur(t);if(r!==p.PAYOUT_TX_VERSION||o!==p.PAYOUT_TX_LOCKTIME)throw new Error(`Payout transaction has version ${r} and locktime ${o}, expected ${p.PAYOUT_TX_VERSION} and ${p.PAYOUT_TX_LOCKTIME}.`);if(n.length!==p.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT)throw new Error(`Payout transaction has ${n.length} output(s), expected exactly ${p.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT} for a depositor-as-claimer payout.`);const s=g.stripHexPrefix(e.registeredPayoutScriptPubKey).toLowerCase();if(s.length===0)throw new Error("registeredPayoutScriptPubKey is empty; the vault's on-chain payout script is required to check the Payout destination.");const a=n[p.PAYOUT_DESTINATION_OUTPUT_INDEX].script.toString("hex").toLowerCase();if(a!==s)throw new lt(s,a);const i=n[p.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT-1];if(i.value!==p.PAYOUT_ANCHOR_DUST_SATS)throw new Error(`Payout CPFP anchor value ${i.value} sats must equal ${p.PAYOUT_ANCHOR_DUST_SATS} sats.`);const u=g.stripHexPrefix(S.deriveP2trScript(g.stripHexPrefix(e.depositorBtcPubkey).toLowerCase())),l=i.script.toString("hex").toLowerCase();if(l!==u)throw new Error(`Payout CPFP anchor pays ${l}, not the depositor's BIP-86 P2TR ${u}. Refusing to sign a payout whose fee-bump output is spendable by somebody else.`)}function ur(e){return{version:e.version,locktime:e.locktime,outs:e.txOutputs.map(t=>({script:D.Buffer.from(t.script),value:t.value}))}}class J extends Error{constructor(t){super(t),this.name="PayoutInputLeafError"}}function ht(e){const t=$.Psbt.fromBase64(e.payoutDepositorPsbtBase64),r=$.Psbt.fromBase64(e.payoutClaimerPsbtBase64),o=t.data.globalMap.unsignedTx.toBuffer(),n=r.data.globalMap.unsignedTx.toBuffer();if(!o.equals(n))throw new J("Depositor and claimer Payout PSBTs describe different transactions; the graph is inconsistent.");const s=r.data.inputs[p.PAYOUT_ASSERT_INPUT_INDEX],a=t.data.inputs[p.PAYOUT_ASSERT_INPUT_INDEX];if(!s||!a)throw new J("Payout PSBT has no Assert-connector input.");if(!s.tapLeafScript||s.tapLeafScript.length!==1)throw new J("Claimer Payout PSBT must carry exactly one leaf on the Assert-connector input.");if(a.tapLeafScript&&a.tapLeafScript.length>0)throw new J("Depositor Payout PSBT already carries an Assert-connector leaf; refusing to overwrite it.");return t.updateInput(p.PAYOUT_ASSERT_INPUT_INDEX,{tapLeafScript:s.tapLeafScript,...s.tapInternalKey?{tapInternalKey:s.tapInternalKey}:{},...s.tapMerkleRoot?{tapMerkleRoot:s.tapMerkleRoot}:{}}),t.toBase64()}const pt="00";class gt extends Error{constructor(t,r,o){super(`Transaction graph does not belong to vault ${t}: its Claim spends PegIn ${o}, which derives vault ${r}. Refusing to sign for a graph served for another vault.`),this.expectedVaultId=t,this.derivedVaultId=r,this.peginTxid=o,this.name="VaultIdBindingError"}}function cr(e){let t;try{t=$.Psbt.fromBase64(e)}catch(o){throw new Error("Claim PSBT cannot be parsed.",{cause:o})}const r=t.txInputs[p.CLAIM_PEGIN_INPUT_INDEX];if(!r)throw new Error("Claim PSBT carries no PegIn input to bind the vault to.");return ft("Claim PSBT",t.txInputs.length,r.index),Re(r.hash)}function lr(e){const t=e.ins[p.CLAIM_PEGIN_INPUT_INDEX];if(!t)throw new Error("Artifacts file's claim_tx carries no PegIn input to bind the vault to.");return ft("Artifacts file's claim_tx",e.ins.length,t.index),Re(t.hash)}function ft(e,t,r){if(t!==1||r!==w.PEGIN_DEPOSITOR_CLAIM_VOUT)throw new Error(`${e} must have exactly one input spending PegIn output ${w.PEGIN_DEPOSITOR_CLAIM_VOUT}; it has ${t} input(s) and the first spends output ${r}.`)}function Be(e){const t=Y(S.derivePeginVaultId(e.peginTxid,e.depositorEthAddress)),r=Y(e.expectedVaultId);if(t!==r)throw new gt(r,t,e.peginTxid)}function Y(e){return`0x${(e.startsWith("0x")?e.slice(2):e).toLowerCase()}`}function Re(e){return D.Buffer.from(e).reverse().toString("hex")}function ne(e,t){const r=g.stripHexPrefix(e);if(!/^(?:[0-9a-fA-F]{2})+$/.test(r))throw new Error(`${t} must be non-empty, even-length hex.`);return r.toLowerCase()}function Pt(e){const t=ne(e.servedVerifyingKeyHex,"source.verifyingKeyHex"),r=ne(e.trustedVerifyingKeyHex,"trustedVerifyingKeyHex");if(t===r)return r;throw new Error(`Vault provider served Groth16 verifying key ${t} but the trusted key for prover circuit version ${e.proverCircuitVersion} is ${r}; refusing to sign a claim whose proof would verify under a substituted key.`)}const M=3;class yt extends Error{constructor(t,r){super(`Artifacts belong to vault ${r}, not ${t}. Select the artifacts file saved for this vault.`),this.expectedVaultId=t,this.actualVaultId=r,this.name="ArtifactsVaultMismatchError"}}function dr(e){const t=gr(e,"babe_sessions"),r=[];for(const[o,n]of Object.entries(t)){const s=typeof n=="object"&&n!==null?n.decryptor_artifacts_hex:void 0;if(typeof s!="string"||s.length===0)throw new Error(`Artifacts file is missing a usable "babe_sessions": the entry for ${o} carries no "decryptor_artifacts_hex" string.`);s===pt&&r.push(o)}return{challengerPubkeys:Object.keys(t),placeholderChallengerPubkeys:r}}function vt(e){let t;try{t=JSON.parse(e)}catch(i){throw new Error("Artifacts file is not valid JSON.",{cause:i})}const r=ge(t.vault_id,"vault_id"),o=pr(ge(t.claim_tx,"claim_tx")),n=fe(t.prover_circuit_version,"prover_circuit_version"),s=t.claimable_event_block_number===void 0?0n:BigInt(fe(t.claimable_event_block_number,"claimable_event_block_number")),a=dr(t.babe_sessions);return{vaultCoreVersion:t.vault_core_version===void 0?void 0:fe(t.vault_core_version,"vault_core_version"),vaultId:r,claimTxid:o.getId(),peginTxid:lr(o),proverCircuitVersion:n,claimableEventBlockNumber:s,verifyingKeyHex:ge(t.verifying_key,"verifying_key"),babeSessionChallengerPubkeys:a.challengerPubkeys,babeSessionPlaceholderChallengerPubkeys:a.placeholderChallengerPubkeys}}async function hr(e){const t=vt(e.artifactsJson),r=Y(e.expectedVaultId),o=Y(t.vaultId);if(r!==o)throw new yt(r,o);Be({peginTxid:t.peginTxid,depositorEthAddress:e.depositorEthAddress,expectedVaultId:r});const n=e.txGraphVersion??M;if(t.vaultCoreVersion!==void 0&&t.vaultCoreVersion!==n)throw new Error(`Artifacts record vault core version ${t.vaultCoreVersion}, but verification was asked for version ${n}.`);if(t.claimableEventBlockNumber===0n)throw new Error("Artifacts carry no claimable event block number. They were assembled before the Ethereum withdrawal was initiated; assemble them again.");if(t.claimableEventBlockNumber!==e.expectedClaimableEventBlockNumber)throw new Error(`Artifacts record claimable event block ${t.claimableEventBlockNumber} but the vault's finalized VaultClaimableBy event is at block ${e.expectedClaimableEventBlockNumber}; the prover would prove the wrong block, so refusing the file.`);if(t.proverCircuitVersion!==e.expectedProverCircuitVersion)throw new Error(`Artifacts record prover circuit version ${t.proverCircuitVersion} but the vault's stamped params say ${e.expectedProverCircuitVersion}; a proof for the wrong circuit fails at start-claim, so refusing the file.`);const s=ne(t.verifyingKeyHex,'Artifacts file "verifying_key"'),a=ne(e.trustedVerifyingKeyHex,"trustedVerifyingKeyHex");if(s!==a)throw new Error(`Artifacts carry Groth16 verifying key ${s} but the trusted key for prover circuit version ${e.expectedProverCircuitVersion} is ${a}; refusing a file whose proof would verify under a substituted key.`);const[i]=t.babeSessionPlaceholderChallengerPubkeys;if(i!==void 0)throw new Error(`Artifacts carry a placeholder BaBe session for challenger ${i}; join the real sessions into the file before using it (#2598).`);return await A.verifyWatchtowerArtifacts(n,e.artifactsJson),t}function pr(e){try{return $.Transaction.fromHex(e)}catch(t){throw new Error("Artifacts file carries an unparseable claim_tx.",{cause:t})}}function ge(e,t){if(typeof e!="string"||e.length===0)throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function fe(e,t){if(typeof e!="number"||!Number.isSafeInteger(e)||e<0)throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function gr(e,t){if(e===void 0)return{};if(typeof e!="object"||e===null||Array.isArray(e))throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function bt(e,t){return`wronglyChallenged:${e}:${t}`}function mt(e){const t=[{id:"claim",kind:"claim",psbtBase64:e.claim,inputIndex:p.CLAIM_PEGIN_INPUT_INDEX},{id:"assert",kind:"assert",psbtBase64:e.assert,inputIndex:p.ASSERT_CLAIM_INPUT_INDEX},{id:"payoutClaimer",kind:"payoutClaimer",psbtBase64:e.payoutClaimer,inputIndex:p.PAYOUT_ASSERT_INPUT_INDEX},{id:"payoutDepositor",kind:"payoutDepositor",psbtBase64:e.payoutDepositor,inputIndex:p.PAYOUT_PEGIN_INPUT_INDEX}];for(const r of Object.keys(e.wronglyChallenged))e.wronglyChallenged[r].forEach((o,n)=>{t.push({id:bt(r,n),kind:"wronglyChallenged",psbtBase64:o,inputIndex:p.WRONGLY_CHALLENGED_INPUT_INDEX})});return t}const fr=oe.COMPRESSED_PUBKEY_HEX_LEN-oe.X_ONLY_PUBKEY_HEX_LEN;function H(e){const t=e.replace(/^0x/,"").toLowerCase();if(t.length===oe.COMPRESSED_PUBKEY_HEX_LEN)return t.slice(fr);if(t.length===oe.X_ONLY_PUBKEY_HEX_LEN)return t;throw new Error(`Public key must be 33-byte compressed or 32-byte x-only hex, got ${t.length/2} bytes.`)}async function We(e,t,r){const o=await e.getPublicKeyHex();if(H(o)!==H(t))throw new Error("Connected wallet does not hold the vault's depositor key. Select the account that made the deposit, then try again.");const n=await e.getAddress();if(!g.isAddressFromPublicKey(n,o,r))throw new Error(`Connected wallet reports address "${n}", which is not derived from the vault's depositor key. Select the account that made the deposit, then try again.`);return n}async function wt(e,t,r,o){const n=H(o);if(n!==r.depositorBtcPubkey)throw new Error(`Depositor key ${n} is not the vault's registered depositor key ${r.depositorBtcPubkey}; refusing to plan a claim for another key.`);try{S.assertPayoutScriptMatchesPopKey(g.ensureHexPrefix(r.registeredPayoutScriptPubKey),r.depositorBtcPubkey,o)}catch(d){throw new Error(`Registered payout script ${r.registeredPayoutScriptPubKey} failed the depositor-key derivation check: ${d instanceof Error?d.message:String(d)}. This SDK registers only P2TR of the depositor's x-only key or P2WPKH of the compressed key (the contract bounds the script's length alone, PeginLogic.sol:237-240 @ c559f5c2); refusing to sign a claim that pays it.`,{cause:d})}if(e!==M)throw new Error(`Graph version ${e} is not the delegated-claim graph version ${M}; vaults on earlier graphs have no delegated-claim path.`);if(e!==r.vaultCoreVersion)throw new Error(`Graph version ${e} does not match the vault context's vault core version ${r.vaultCoreVersion}; they are one axis and must agree.`);const[s,a,i,u,l]=await Promise.all([A.buildClaimPsbt(e,t),A.buildAssertClaimerPsbt(e,t),A.buildPayoutClaimerPsbt(e,t),A.buildWronglyChallengedPsbts(e,t),A.buildPayoutDepositorPsbt(e,t)]);Be({peginTxid:cr(s),depositorEthAddress:r.depositorEthAddress,expectedVaultId:r.vaultId}),at({claimPsbtBase64:s,assertPsbtBase64:a,payoutClaimerPsbtBase64:i});for(const d of[i,l])dt({payoutPsbtBase64:d,registeredPayoutScriptPubKey:r.registeredPayoutScriptPubKey,depositorBtcPubkey:r.depositorBtcPubkey});const c=ht({payoutDepositorPsbtBase64:l,payoutClaimerPsbtBase64:i});return await ar({payoutClaimerPsbtBase64:i,payoutDepositorPsbtBase64:c,assertPsbtBase64:a,vault:r}),ct({graphChallengerPubkeys:Object.keys(u),depositorBtcPubkey:o,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:r.universalChallengerBtcPubkeys}),{claim:s,assert:a,payoutClaimer:i,payoutDepositor:c,wronglyChallenged:u}}async function xt(e){Pt({servedVerifyingKeyHex:e.source.verifyingKeyHex,trustedVerifyingKeyHex:e.trustedVerifyingKeyHex,proverCircuitVersion:e.vault.proverCircuitVersion});const t=await wt(e.vault.txGraphVersion,e.source.txGraphJson,e.vault,e.depositorPublicKey);return{depositorPublicKey:e.depositorPublicKey,btcNetwork:e.btcNetwork,trustedVerifyingKeyHex:e.trustedVerifyingKeyHex,source:e.source,vault:e.vault,babeSessionsJson:e.babeSessionsJson,requests:mt(t)}}function ue(e,t,r){w.assertScriptPathSchnorrSignature({requestedPsbtHex:Ve(t.psbtBase64),signatureHex:r,signerXOnlyPubkeyHex:H(e.depositorPublicKey),inputIndex:t.inputIndex})}function Ve(e){return D.Buffer.from(e,"base64").toString("hex")}function Et(e){return D.Buffer.from(e,"hex").toString("base64")}class G extends Error{constructor(t){super(t),this.name="SigningPlanMismatchError"}}function Pr(e,t){if(e.length!==t.length)throw new G(`Plan has ${e.length} requests but the graph builds ${t.length}; the plan was altered after planning.`);for(let r=0;r<t.length;r++){const o=t[r],n=e[r];if(n.id!==o.id)throw new G(`Plan request at position ${r} is "${n.id}" but the graph builds "${o.id}" there; the plan was altered after planning.`);if(n.kind!==o.kind)throw new G(`Plan request "${n.id}" has kind "${n.kind}" but the graph builds "${o.kind}"; the plan was altered after planning.`);if(n.inputIndex!==o.inputIndex)throw new G(`Plan request "${n.id}" signs inputIndex ${n.inputIndex} but the graph builds ${o.inputIndex}; the plan was altered after planning.`);if(n.psbtBase64!==o.psbtBase64)throw new G(`Plan request "${n.id}" carries a psbt that differs from the one the graph builds; the plan was altered after planning.`)}}function yr(e,t){const r=new Set(e.map(a=>a.id)),o=[...r].filter(a=>!t.has(a)),n=[...t.keys()].filter(a=>!r.has(a));if(o.length===0&&n.length===0)return;const s=a=>a.map(i=>`"${i}"`).join(", ");throw new Error(`Signatures do not cover the plan: ${t.size} signatures for ${e.length} requests`+(o.length>0?`; missing ${s(o)}`:"")+(n.length>0?`; extra ${s(n)}`:"")+".")}function X(e,t){const r=e.get(t);if(r===void 0)throw new Error(`No signature for request "${t}"; the plan was not fully signed.`);return r}async function Tt(e){const{plan:t,signatures:r}=e,{txGraphVersion:o}=t.vault,n=t.source.txGraphJson,s=Pt({servedVerifyingKeyHex:t.source.verifyingKeyHex,trustedVerifyingKeyHex:t.trustedVerifyingKeyHex,proverCircuitVersion:t.vault.proverCircuitVersion}),a=await wt(o,n,t.vault,t.depositorPublicKey),i=mt(a);Pr(t.requests,i),yr(i,r);for(const c of i)ue(t,c,X(r,c.id));const u={};for(const c of Object.keys(a.wronglyChallenged))u[c]=a.wronglyChallenged[c].map((d,h)=>X(r,bt(c,h)));const l=await A.finalizeClaimTx(o,n,X(r,"claim"));return A.buildWatchtowerArtifacts({txGraphVersion:o,graphJson:n,signedClaimTxHex:l,assertClaimerSigHex:X(r,"assert"),payoutClaimerSigHex:X(r,"payoutClaimer"),wronglyChallengedSigs:u,depositorPayoutSigHex:X(r,"payoutDepositor"),verifyingKeyHex:s,claimableEventBlockNumber:t.vault.claimableEventBlockNumber,proverCircuitVersion:t.vault.proverCircuitVersion,vaultIdHex:t.vault.vaultId,babeSessionsJson:t.babeSessionsJson,expectedVaultCoreVersion:t.vault.vaultCoreVersion})}function vr(e){return typeof e.signDelegatedClaimPsbt=="function"}class _t extends Error{constructor(t,r,o,n){super(t,n),this.signatures=r,this.failedRequestId=o,this.name="DelegatedClaimSigningIncompleteError"}}const Ct={assert:"intentBound",payoutDepositor:"intentBound",payoutClaimer:"standalone",claim:"standalone",wronglyChallenged:"standalone"},br=["payoutClaimer","claim","wronglyChallenged"];async function $t(e,t,r={}){var n;if((n=r.signal)==null||n.throwIfAborted(),mr(e),H(e.depositorPublicKey)!==e.vault.depositorBtcPubkey)throw new Error(`Plan depositor key ${H(e.depositorPublicKey)} is not the vault's registered depositor key ${e.vault.depositorBtcPubkey}; the plan was not built for this vault.`);if(F.supportsDepositApproval(t)){if(!vr(t))throw new Error("Approval wallet does not implement signDelegatedClaimPsbt; the claim ceremony needs it because the device signs some claim PSBTs with no loaded intent and needs its own derivation fields on them.");const s=xr(r,e);St(s.depositTerms,e.vault);const a=wr(e),i=await We(t,e.depositorPublicKey,e.btcNetwork);return Er(e,t,i,s,a,r)}const o=await We(t,e.depositorPublicKey,e.btcNetwork);return _r(e,t,o,r.signal)}function mr(e){const t=new Set;for(const r of e.requests){if(t.has(r.id))throw new Error(`Delegated-claim plan lists request "${r.id}" more than once; its signatures could not be keyed, so nothing is signed.`);t.add(r.id)}}function wr(e){const t=e.requests.filter(n=>Ct[n.kind]==="intentBound"),r=br.flatMap(n=>e.requests.filter(s=>s.kind===n)),o=t.length+r.length;if(o!==e.requests.length)throw new Error(`Delegated-claim plan has ${e.requests.length} signing requests but only ${o} are of a kind this signer can place in the device ceremony; the plan and the signer disagree on the request kinds.`);return{intentBound:t,standalone:r}}function kt(e,t){if(t.size!==e.requests.length)throw new Error(`Delegated-claim signing ended with ${t.size} signatures for ${e.requests.length} requests; the set is incomplete and must not be treated as signed.`)}function xr(e,t){if(e.depositTerms===void 0)throw new Error("An approval wallet signs Assert and the depositor Payout only under this vault's loaded intent; pass depositTerms (rebuilt from on-chain state) so it can be approved.");if(e.vaultContext===void 0)throw new Error("An approval wallet releases a loaded intent only through the vault-root derivation; pass vaultContext so that derivation can run before and after the intent-bound signatures.");const r=g.uint8ArrayToHex(e.vaultContext.depositorBtcPubkey);if(r!==t.vault.depositorBtcPubkey)throw new Error(`vaultContext derives from depositor key ${r} but this plan's vault is registered to ${t.vault.depositorBtcPubkey}; the device would derive for another depositor.`);return{depositTerms:e.depositTerms,vaultContext:e.vaultContext}}function St(e,t){const r=n=>n.map(s=>H(s)).sort().join(",");if(r(e.vaultKeeperBtcPubkeys)!==r(t.vaultKeeperBtcPubkeys)||r(e.universalChallengerBtcPubkeys)!==r(t.universalChallengerBtcPubkeys))throw new Error("Deposit terms carry different keeper or challenger rosters than the vault context this claim signs for; the device would bind the Assert to the wrong intent.");if(e.vaultCoreVersion!==t.vaultCoreVersion)throw new Error(`Deposit terms describe vault core version ${e.vaultCoreVersion} but the vault context has version ${t.vaultCoreVersion}; the device would bind the Assert to the wrong intent.`);if(e.timelockPegin!==t.timelockPegin)throw new Error(`Deposit terms describe timelockPegin ${e.timelockPegin} but the vault context has ${t.timelockPegin}; the device would bind the Assert to the wrong intent.`);if(e.timelockAssert!==t.timelockAssert)throw new Error(`Deposit terms describe timelockAssert ${e.timelockAssert} but the vault context has ${t.timelockAssert}; the device would bind the Assert to the wrong intent.`);if(e.protocolFeeRate!==t.protocolFeeRate)throw new Error(`Deposit terms describe protocolFeeRate ${e.protocolFeeRate} but the vault context has ${t.protocolFeeRate}; the device would bind the Assert to the wrong intent.`);if(e.vaults.length===0)throw new Error("Deposit terms describe no vault group, so they cannot name the vault context's vault provider; the device would bind the Assert to the wrong intent.");const o=H(t.vaultProviderBtcPubkey);for(const n of e.vaults)if(H(n.vaultProviderBtcPubkey)!==o)throw new Error(`Deposit terms group at htlcVout ${n.htlcVout} names a different vault provider than the vault context this claim signs for; the device would bind the Assert to the wrong intent.`)}async function Er(e,t,r,o,{intentBound:n,standalone:s},a){var P;const i=Tr(e,a.resume),u=[...n,...s];let l=0;const c={phase:"clearing any loaded intent"},d=async f=>{var m;c.phase="signing",(m=a.signal)==null||m.throwIfAborted();const v=await t.signDelegatedClaimPsbt(Ve(f.psbtBase64),z.createTaprootScriptPathSignOptionsForInput(e.depositorPublicKey,f.inputIndex,r)),y=await A.extractTapScriptSig(Et(v),f.inputIndex);ue(e,f,y),i.set(f.id,y)},h=async f=>{var y;c.phase=f,(y=a.signal)==null||y.throwIfAborted(),(await st.deriveVaultRoot(t,o.vaultContext)).fill(0)};typeof t.validateDepositTerms=="function"&&await t.validateDepositTerms(o.depositTerms);try{await h("clearing any loaded intent"),c.phase="approving the deposit terms",(P=a.signal)==null||P.throwIfAborted(),await t.approveDepositTerms(o.depositTerms);for(const f of n)await d(f),l++;await h("releasing the loaded intent");for(const f of s)i.has(f.id)||await d(f),l++}catch(f){const v=u[l];if(i.size===0||v===void 0)throw f;const y=c.phase==="signing"?`stopped at "${v.id}"`:`stopped before "${v.id}" while ${c.phase}`;throw new _t(`Delegated-claim signing ${y}; ${i.size} of ${e.requests.length} signatures were collected.`,i,v.id,{cause:f})}return kt(e,i),i}function Tr(e,t){const r=new Map;if(!t)return r;for(const o of e.requests){const n=t.get(o.id);if(!(n===void 0||Ct[o.kind]==="intentBound")){try{ue(e,o,n)}catch{continue}r.set(o.id,n)}}return r}async function _r(e,t,r,o){const n=e.requests,s=await F.signPsbtsWithFallback(t,n.map(i=>Ve(i.psbtBase64)),n.map(i=>z.createTaprootScriptPathSignOptionsForInput(e.depositorPublicKey,i.inputIndex,r)),o),a=new Map;for(let i=0;i<n.length;i++){const u=await A.extractTapScriptSig(Et(s[i]),n[i].inputIndex);ue(e,n[i],u),a.set(n[i].id,u)}return kt(e,a),a}async function Cr(e){const t=await xt({depositorPublicKey:e.depositorPublicKey,btcNetwork:e.btcNetwork,source:e.source,trustedVerifyingKeyHex:e.trustedVerifyingKeyHex,vault:e.vault,babeSessionsJson:e.babeSessionsJson}),r=await $t(t,e.btcWallet,{depositTerms:e.depositTerms,vaultContext:e.vaultContext});return Tt({plan:t,signatures:r})}async function $r(e){const t=await st.deriveVaultRoot(e.btcWallet,e.vaultContext);let r;try{r=await A.expandWotsSeed(t,e.htlcVout)}finally{t.fill(0)}let o;try{o=await A.wotsKeypairFromSeed(r)}finally{r.fill(0)}return kr(o.pk_hash,e.expectedWotsPkHash),await A.validateWotsKeypairAgainstGraph(e.txGraphVersion,o.keypair,e.txGraphJson),{wotsKeypairJson:JSON.stringify(o.keypair),pkHash:o.pk_hash}}function kr(e,t){if(te(e)!==te(t))throw new Error(`Derived WOTS public-key hash ${te(e)} does not match the vault's on-chain depositorWotsPkHash ${te(t)}. The wallet, the HTLC output index, or the derivation itself is not the one this vault was created with.`)}function te(e){return`0x${(e.startsWith("0x")?e.slice(2):e).toLowerCase()}`}function Pe(e,t,r){const o=`${e} operation key (admin=${t.ethAddress})`,n=S.assertOnChainBtcPubkey(t.btcPubKey,`${e} roster key (admin=${t.ethAddress})`),s=S.assertOnChainBtcPubkey(r,o);return{adminAddress:t.ethAddress,genesisBtcPubkey:n,operationBtcPubkey:s,rotated:s!==n}}function Sr(e){const t=new Map;for(const r of e){const o=t.get(r.operationBtcPubkey);if(o)throw new Error(`Participant operation key collision: ${o} and ${r.adminAddress} both resolve to operation key ${r.operationBtcPubkey}`);t.set(r.operationBtcPubkey,r.adminAddress)}}function At(e,t,r){if(t.vaultKeepers.length!==e.vaultKeepers.length||t.universalChallengers.length!==e.universalChallengers.length)throw new Error(`Operation-key resolution returned ${t.vaultKeepers.length} keeper and ${t.universalChallengers.length} challenger keys for a roster of ${e.vaultKeepers.length} keepers and ${e.universalChallengers.length} challengers`);const o=Pe("vault provider",{ethAddress:e.vaultProviderEthAddress,btcPubKey:e.vaultProviderGenesisBtcPubkey},t.vaultProvider),n=e.vaultKeepers.map((a,i)=>Pe("vault keeper",a,t.vaultKeepers[i])),s=e.universalChallengers.map((a,i)=>Pe("universal challenger",a,t.universalChallengers[i]));return Sr([o,...n,...s]),{vaultProvider:o,vaultKeepers:n,universalChallengers:s,vaultKeeperOperationKeysSorted:n.map(a=>a.operationBtcPubkey).sort(),universalChallengerOperationKeysSorted:s.map(a=>a.operationBtcPubkey).sort(),resolvedAt:r,query:e}}async function It(e){const t=await e.operationKeyReader.getCurrentOperationKeys(e.query,e.blockNumber);return At(e.query,t,{mode:"current"})}async function Ne(e){const t=await e.operationKeyReader.getOperationKeysAtEpochs(e.query,e.epochs);return At(e.query,t,{mode:"epochs",epochs:e.epochs})}async function Bt(e){const{basic:t,protocol:r}=e.vault,{registryReader:o,vaultKeeperReader:n,universalChallengerReader:s,operationKeyReader:a}=e.readers,[i,u,l,c]=await Promise.all([n.getVaultKeepersByVersion(t.applicationEntryPoint,r.appVaultKeepersVersion),s.getUniversalChallengersByVersion(r.universalChallengersVersion),o.getVaultProviderGenesisBtcPubKey(t.vaultProvider),o.getVaultKeyEpochs(e.vaultId)]);if(i.length===0)throw new Error(`No vault keepers for version ${r.appVaultKeepersVersion}`);if(u.length===0)throw new Error(`No universal challengers for version ${r.universalChallengersVersion}`);return Ne({operationKeyReader:a,query:{vaultProviderEthAddress:t.vaultProvider,vaultProviderGenesisBtcPubkey:`0x${l}`,applicationEntryPoint:t.applicationEntryPoint,vaultKeepers:i,universalChallengers:u},epochs:c})}async function Ar(e){const{vaultId:t,readers:r}=e,o=await r.registryReader.getVaultData(t),{basic:n,protocol:s}=o;if(s.vaultCoreVersion!==M)throw new Error(`Vault ${t} is stamped vault core version ${s.vaultCoreVersion}; delegated claim requires ${M}.`);const a=S.assertOnChainBtcPubkey(n.depositorBtcPubKey,`getBtcVaultBasicInfo(${t}).depositorBtcPubKey`);if(n.status!==ce.OnChainBtcVaultStatus.REDEEMED)throw new S.VaultClaimableByNotFoundError(t,n.depositorBtcPubKey,n.createdAt,n.createdAt,`the vault's status is ${n.status}, not Redeemed (${ce.OnChainBtcVaultStatus.REDEEMED}); no scan was made`);const[i,u,l,c]=await Promise.all([Bt({vaultId:t,vault:o,readers:r}),r.registryReader.getRegistrationRecordsAtBlock(n.createdAt),r.registryReader.getVaultClaimableBy(t,n.depositorBtcPubKey,n.createdAt).catch(b=>{throw S.isVaultClaimableByNotFoundError(b)?new S.VaultClaimableByNotFoundError(t,n.depositorBtcPubKey,b.fromBlock,b.toBlock,"the vault is Redeemed but no VaultClaimableBy authorizes this depositor key in the finalized range. Either the redeem has not finalized yet (the scan stops about two epochs behind the tip), or the vault was redeemed for a vault keeper alone (redeemForAVK emits no depositor log), or the node did not serve every block scanned.",{cause:b}):b}),r.protocolParamsReader.getOffchainParamsByVersion(s.offchainParamsVersion)]),d=ce.deriveTimelockPegin(c.timelockAssert),h=S.findRegistrationRecord(u,t,n.createdAt);S.assertRegisteredPayoutScriptBounds(h);const P=S.registrationPrePeginTxHash(h);if(P.toLowerCase()!==s.prePeginTxHash.toLowerCase())throw new Error(`Registration log of vault ${t} records prePeginTxHash ${P} but the vault record says ${s.prePeginTxHash}; refusing an inconsistent node.`);if(h.vaultCoreVersion!==s.vaultCoreVersion)throw new Error(`Registration log of vault ${t} records vault core version ${h.vaultCoreVersion} but the vault record says ${s.vaultCoreVersion}; refusing an inconsistent node.`);if(h.amount!==n.amount)throw new Error(`Registration log of vault ${t} records amount ${h.amount} sats but the vault record says ${n.amount}; refusing an inconsistent node.`);if(h.depositor.toLowerCase()!==n.depositor.toLowerCase())throw new Error(`Registration log of vault ${t} records depositor ${h.depositor} but the vault record says ${n.depositor}; refusing an inconsistent node.`);if(h.vaultProvider.toLowerCase()!==n.vaultProvider.toLowerCase())throw new Error(`Registration log of vault ${t} records vaultProvider ${h.vaultProvider} but the vault record says ${n.vaultProvider}; refusing an inconsistent node.`);if(l.vaultCoreVersion!==s.vaultCoreVersion)throw new Error(`Redemption log of vault ${t} records vault core version ${l.vaultCoreVersion} but the vault record says ${s.vaultCoreVersion}; refusing an inconsistent node.`);if(l.proverCircuitVersion!==h.proverCircuitVersion)throw new Error(`Redemption log of vault ${t} records proverCircuitVersion ${l.proverCircuitVersion} but the registration log says ${h.proverCircuitVersion}; refusing an inconsistent node.`);if(h.proverCircuitVersion!==c.proverCircuitVersion)throw new Error(`Registration log of vault ${t} records proverCircuitVersion ${h.proverCircuitVersion} but the stamped offchain params say ${c.proverCircuitVersion}; refusing an inconsistent node.`);const f=S.calculateBtcTxHash(s.depositorSignedPeginTx);for(const[b,_]of[["Registration",h.peginTxHash],["Redemption",l.peginTxHash]])if(_.toLowerCase()!==f.toLowerCase())throw new Error(`${b} log of vault ${t} records peginTxHash ${_} but the vault's depositor-signed PegIn hashes to ${f}; refusing an inconsistent node.`);const v=Y(S.derivePeginVaultId(f,n.depositor));if(v!==Y(t))throw new Error(`Depositor-signed PegIn of vault ${t} derives vault id ${v} with depositor ${n.depositor}; refusing an inconsistent node.`);for(const b of["offchainParamsVersion","universalChallengersVersion","appVaultKeepersVersion"]){if(h[b]!==s[b])throw new Error(`Registration log of vault ${t} records ${b} ${h[b]} but the vault record says ${s[b]}; refusing an inconsistent node.`);if(l[b]!==s[b])throw new Error(`Redemption log of vault ${t} records ${b} ${l[b]} but the vault record says ${s[b]}; refusing an inconsistent node.`)}const y=$.Transaction.fromHex(g.stripHexPrefix(s.depositorSignedPeginTx));if(y.ins.length!==1)throw new Error(`Depositor-signed PegIn of vault ${t} has ${y.ins.length} inputs; it spends Pre-PegIn ${s.prePeginTxHash} output ${s.htlcVout} with exactly one; refusing an inconsistent node.`);const m=Re(y.ins[0].hash),I=y.ins[0].index;if(m!==g.stripHexPrefix(s.prePeginTxHash).toLowerCase()||I!==s.htlcVout)throw new Error(`Depositor-signed PegIn of vault ${t} spends ${m}:${I} but the vault record says Pre-PegIn ${s.prePeginTxHash} output ${s.htlcVout}; refusing an inconsistent node.`);const T=y.outs[p.PEGIN_VAULT_OUTPUT_INDEX];if(T===void 0)throw new Error(`Depositor-signed PegIn of vault ${t} has no output ${p.PEGIN_VAULT_OUTPUT_INDEX}; the Payout cannot spend the Vault UTXO.`);if(BigInt(T.value)!==n.amount)throw new Error(`Depositor-signed PegIn of vault ${t} pays ${T.value} sats to output ${p.PEGIN_VAULT_OUTPUT_INDEX} but the vault record says ${n.amount}; refusing an inconsistent node.`);return{context:{vaultId:t,depositorEthAddress:n.depositor,depositorBtcPubkey:a,registeredPayoutScriptPubKey:g.stripHexPrefix(h.depositorPayoutScriptPubKey),vaultProviderBtcPubkey:i.vaultProvider.operationBtcPubkey,vaultKeeperBtcPubkeys:[...i.vaultKeeperOperationKeysSorted],universalChallengerBtcPubkeys:[...i.universalChallengerOperationKeysSorted],txGraphVersion:M,proverCircuitVersion:c.proverCircuitVersion,vaultCoreVersion:s.vaultCoreVersion,claimableEventBlockNumber:l.blockNumber,peginVaultOutputValueSats:T.value,protocolFeeRate:c.feeRate,councilSize:c.securityCouncilKeys.length,timelockPegin:d,timelockAssert:Number(c.timelockAssert)},vault:o,registrationRecord:h,registrationRecords:u,participantKeys:i,offchainParams:c,depositorBtcPubKeyBytes32:n.depositorBtcPubKey,depositorWotsPkHash:s.depositorWotsPkHash,prePeginTxHash:s.prePeginTxHash,peginTxHash:f,vaultProvider:n.vaultProvider,htlcVout:s.htlcVout}}const Rt=8,Ir=6e3,Br=10*6e4,Rr=10;class Oe extends Error{constructor(t){super(t),this.name="PeginRegistrationMissingError"}}class He extends Error{constructor(t){super(t),this.name="PeginRegistrationNotFinalError"}}function Vt(e){return e instanceof Oe||e instanceof Error&&e.name==="PeginRegistrationMissingError"}function Vr(e){return e instanceof He||e instanceof Error&&e.name==="PeginRegistrationNotFinalError"}function je(e){const{currentBlock:t,createdAtBlock:r}=e,o=t-r+1n;return o<0n?0:Number(o)}async function Nr(e){const{vaultRegistryReader:t,getBlockNumber:r,vaultIds:o,required:n=Rt,pollIntervalMs:s=Ir,timeoutMs:a=Br,signal:i,onProgress:u}=e;if(o.length===0)throw new Error("waitForPeginRegistrationDepth requires at least one vault ID");const l=Date.now();let c=!1,d=0,h;for(;;){if(i!=null&&i.aborted)throw new Error(`Aborted while waiting for peg-in registration depth (${o.length} vault(s))`);if(Date.now()-l>=a)throw new He(`Peg-in registration did not reach ${n} Ethereum confirmations within ${a}ms. The registration transaction was submitted but is not yet final, so the Pre-PegIn Bitcoin transaction was never sent and no funds are at risk. Resume this deposit from the dashboard once the network settles.`+(h instanceof Error?` Last read error: ${h.message}`:""));try{const P=await r(),f=await Promise.all(o.map(y=>t.getVaultBasicInfo(y))),v=f.findIndex(y=>y.depositor===xe.zeroAddress||y.createdAt===0n);if(v!==-1){if(d+=1,!c&&d>Rr)throw new Oe(`Vault ${o[v]} is still not visible on-chain after ${d} reads — the registration does not exist.`);console.warn(`Peg-in registration for vault ${o[v]} is not visible in chain state at block ${P} — a lagging RPC backend or an Ethereum reorg. Still polling.`),u==null||u({confirmations:0,required:n})}else{c=!0,d=0,h=void 0;let y=f[0],m=je({currentBlock:P,createdAtBlock:f[0].createdAt});for(const I of f.slice(1)){const T=je({currentBlock:P,createdAtBlock:I.createdAt});T<m&&(m=T,y=I)}if(u==null||u({confirmations:m,required:n}),m>=n)return{confirmations:m,basicInfo:y}}}catch(P){if(Vt(P))throw P;console.warn(`Registration-depth read failed (retrying in ${s}ms): `+(P instanceof Error?P.message:String(P))),h=P}await new Promise((P,f)=>{const v=()=>{clearTimeout(y),f(new Error(`Aborted while waiting for peg-in registration depth (${o.length} vault(s))`))},y=setTimeout(()=>{i==null||i.removeEventListener("abort",v),P()},s);i==null||i.addEventListener("abort",v,{once:!0})})}}const Or=/^(?:[0-9a-f]{2})*$/,Hr=/^[0-9a-f]{64}$/,Dr=/^([0-9a-f]{64}):(0|[1-9][0-9]*)$/,Kr=-2147483648,Ur=2147483647,ye=4294967295,Qe=2,Je=2,se=0;class x extends Error{constructor(t){super(t),this.name="GraphFingerprintError"}}function C(e,t,r){const o=e[t];if(o===void 0)throw new x(`Graph tx ${r} is missing "${t}"`);return o}function Z(e,t){if(!Array.isArray(e))throw new x(`Graph tx ${t} is not an array`);return e}function N(e,t){if(e===null||typeof e!="object"||Array.isArray(e))throw new x(`Graph tx ${t} is not an object`);return e}function Q(e,t,r,o){if(typeof e!="number"||!Number.isSafeInteger(e)||e<r||e>o)throw new x(`Graph tx ${t} is not an integer in [${r}, ${o}]`);return e}function ve(e,t){if(typeof e!="string"||!Or.test(e))throw new x(`Graph tx ${t} is not lowercase hex without a prefix`);return D.Buffer.from(e,"hex")}function ie(e,t){if(typeof e!="string"||!Hr.test(e))throw new x(`Graph ${t} is not 32 bytes of lowercase hex`);return e}function Ze(e,t){const r=N(e,t),o=new $.Transaction;return o.version=Q(C(r,"version",t),`${t}.version`,Kr,Ur),o.locktime=Q(C(r,"lock_time",t),`${t}.lock_time`,0,ye),Z(C(r,"input",t),`${t}.input`).forEach((n,s)=>{const a=`${t}.input[${s}]`,i=N(n,a),u=C(i,"previous_output",a),l=typeof u=="string"&&Dr.exec(u);if(!l)throw new x(`Graph tx ${a}.previous_output is not "<txid>:<vout>"`);const c=Q(Number(l[2]),`${a}.previous_output vout`,0,ye);o.addInput(D.Buffer.from(l[1],"hex").reverse(),c,Q(C(i,"sequence",a),`${a}.sequence`,0,ye),ve(C(i,"script_sig",a),`${a}.script_sig`)),o.ins[s].witness=Z(C(i,"witness",a),`${a}.witness`).map((d,h)=>ve(d,`${a}.witness[${h}]`))}),Z(C(r,"output",t),`${t}.output`).forEach((n,s)=>{const a=`${t}.output[${s}]`,i=N(n,a);o.addOutput(ve(C(i,"script_pubkey",a),`${a}.script_pubkey`),Q(C(i,"value",a),`${a}.value`,0,Number.MAX_SAFE_INTEGER))}),new Uint8Array(o.toBuffer())}function L(e,t){const r=g.stripHexPrefix(e).toLowerCase();let o;try{o=$.Transaction.fromHex(r)}catch(n){throw new x(`Presign ${t} is not one transaction: ${n instanceof Error?n.message:String(n)}`)}if(o.toHex()!==r)throw new x(`Presign ${t} is not a canonical transaction encoding`);return o}function Nt(e,t){const r=e.ins[t];if(r)return{txid:D.Buffer.from(r.hash).reverse().toString("hex"),vout:r.index}}function Ot(e,t){if(!e.outs[se])throw new x(`Presign ${t}.claim_tx must have output ${se}`)}function Mr(e,t,r){if(e.ins.length!==1)throw new x(`Presign ${r}.claim_tx must have exactly one input, got ${e.ins.length}`);Ot(e,r);const o=Nt(e,0);if((o==null?void 0:o.txid)!==t||o.vout!==w.PEGIN_DEPOSITOR_CLAIM_VOUT){const n=o?`${o.txid}:${o.vout}`:"no input";throw new x(`Presign ${r}.claim_tx must spend ${t}:${w.PEGIN_DEPOSITOR_CLAIM_VOUT}, got ${n}`)}}function De(e,t,r){const o=Nt(e,0);if((o==null?void 0:o.txid)!==t||o.vout!==se){const n=o?`${o.txid}:${o.vout}`:"no input";throw new x(`Presign ${r}.assert_tx input 0 must spend ${t}:${se}, got ${n}`)}}function Ht(e){const t=L(e.peginTxHex,`${e.path}.pegin_tx`),r=L(e.claimTxHex,`${e.path}.claim_tx`),o=L(e.assertTxHex,`${e.path}.assert_tx`);return{peginTx:t,claimTx:r,assertTx:o}}function Lr(e){const t=L(e.claimTxHex,`${e.path}.claim_tx`),r=L(e.assertTxHex,`${e.path}.assert_tx`);Ot(t,e.path),De(r,t.getId(),e.path)}function Fr(e){const{peginTx:t,claimTx:r,assertTx:o}=Ht(e);Mr(r,t.getId(),e.path),De(o,r.getId(),e.path)}function Xr(e,t){const[r,...o]=e.ins;if(!r||o.length>0)throw new x(`Presign claim_tx must have exactly one input, got ${e.ins.length}`);const n=D.Buffer.from(r.hash).reverse().toString("hex");if(n!==t||r.index!==w.PEGIN_DEPOSITOR_CLAIM_VOUT)throw new x(`Presign claim_tx must spend ${t}:${w.PEGIN_DEPOSITOR_CLAIM_VOUT}, got ${n}:${r.index}`);if(e.version!==Qe)throw new x(`Presign claim_tx version must be ${Qe}, got ${e.version}`);if(r.witness.length>0)throw new x(`Presign claim_tx input must have an empty witness, got ${r.witness.length} item(s)`);if(e.outs.length!==Je)throw new x(`Presign claim_tx must have exactly ${Je} outputs, got ${e.outs.length}`)}function Dt(e){const t=[...e.challengers].sort((o,n)=>o.pubkey<n.pubkey?-1:o.pubkey>n.pubkey?1:0),r=[e.peginTx,e.claimTx,e.assertTx,e.payoutTx];return t.forEach((o,n)=>{const s=ie(o.pubkey,"challenger pubkey");if(n>0&&t[n-1].pubkey===s)throw new x(`Graph lists challenger ${s} twice`);r.push(j.hexToBytes(s),o.nopayoutTx);for(const a of o.outputLabelHashes)r.push(j.hexToBytes(ie(a,"output_label_hashes entry")))}),j.bytesToHex(j.sha256(j.concatBytes(...r)))}function qr(e){const t=g.stripHexPrefix(e.peginTxid).toLowerCase(),{peginTx:r,claimTx:o,assertTx:n}=Ht({peginTxHex:e.peginTxHex,claimTxHex:e.claimTxHex,assertTxHex:e.assertTxHex,path:"depositor_graph"});if(r.getId()!==t)throw new x(`Presign pegin_tx hashes to ${r.getId()}, expected ${t}`);Xr(o,t),De(n,o.getId(),"depositor_graph");const s=a=>new Uint8Array(a.toBuffer());return Dt({peginTx:s(r),claimTx:s(o),assertTx:s(n),payoutTx:s(L(e.payoutTxHex,"payout_tx")),challengers:e.challengers.map(a=>({pubkey:g.canonicalizeBtcPubkey(a.challenger_pubkey),nopayoutTx:s(L(a.nopayout_tx.tx_hex,"nopayout_tx")),outputLabelHashes:a.output_label_hashes.map(i=>g.stripHexPrefix(i).toLowerCase())}))})}function Kt(e){const t=o=>Ze(N(C(e,o,"graph"),o).tx,o),r=N(C(e,"challenger_subgraphs","graph"),"challenger_subgraphs");return Dt({peginTx:t("pegin_tx"),claimTx:t("claim_tx"),assertTx:t("assert_tx"),payoutTx:t("payout_tx"),challengers:Object.entries(r).map(([o,n])=>{const s=`challenger_subgraphs[${o}]`,a=N(n,s);return{pubkey:o,nopayoutTx:Ze(N(C(a,"nopayout_tx",s),`${s}.nopayout_tx`).tx,`${s}.nopayout_tx`),outputLabelHashes:Z(C(a,"output_label_hashes",s),`${s}.output_label_hashes`).map((i,u)=>ie(i,`${s}.output_label_hashes[${u}]`))}})})}function Gr(e){const t=N(C(e,"challenger_pubkeys","graph"),"challenger_pubkeys"),r=new Set;for(const o of["local","universal"])Z(C(t,o,"challenger_pubkeys"),`challenger_pubkeys.${o}`).forEach((n,s)=>{const a=ie(n,`challenger_pubkeys.${o}[${s}]`);if(r.has(a))throw new x(`Graph declares challenger ${a} more than once`);r.add(a)});return r}function zr(e,t){const r=Kt(e);if(r!==t)throw new x(`Graph fingerprint ${r} does not match the presign fingerprint ${t}`);const o=Object.keys(N(e.challenger_subgraphs,"challenger_subgraphs")),n=Gr(e);if(o.length!==n.size||o.some(s=>!n.has(s)))throw new x(`Graph challenger_subgraphs keys ${o.join(", ")} do not match challenger_pubkeys ${[...n].join(", ")}`)}const Yr=1;function Wr(e,t,r){const o=r.map(d=>g.stripHexPrefix(d).toLowerCase()),n=t.filter(d=>o.includes(d));if(n.length>0)throw new Error(`Cannot validate challenger set: vault keepers and universal challengers overlap (${n.join(", ")})`);const s=[...t,...o],a=e.map(d=>g.stripHexPrefix(d.challenger_pubkey).toLowerCase()),i=new Set(a);if(i.size!==a.length)throw new Error("Depositor graph contains duplicate challenger entries in challenger_presign_data");const u=new Set(s),l=s.filter(d=>!i.has(d)),c=a.filter(d=>!u.has(d));if(l.length>0||c.length>0)throw new Error("Depositor graph challenger set does not match expected (local ∪ universal)"+(l.length>0?` (missing: ${l.join(", ")})`:"")+(c.length>0?` (unexpected: ${c.join(", ")})`:""))}function jr(e,t){const r=e.ins[t];return g.uint8ArrayToHex(new Uint8Array(r.hash).slice().reverse())}function be(e,t,r,o,n){const s=e.ins[t];if(s.index!==0)throw new Error(`NoPayout (challenger ${n}) input ${t} expected to spend ${o} vout 0, got vout ${s.index}`);const a=r.getId(),i=jr(e,t);if(i!==a)throw new Error(`NoPayout (challenger ${n}) input ${t} does not reference ${o} (expected txid ${a}, got ${i})`)}async function Qr(e,t,r){const o=[],n=[],s=[],a=w.deriveLocalChallengers({claimerBtcPubkey:r.depositorBtcPubkey,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys});Wr(e.challenger_presign_data,a,r.universalChallengerBtcPubkeys);const i=await w.buildPayoutPsbt({vaultCoreVersion:r.vaultCoreVersion,vkClaimerPayoutScriptPubKeys:r.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:r.vpCommissionScriptPubKey,payoutTxHex:e.payout_tx.tx_hex,peginTxHex:r.peginTxHex,assertTxHex:e.assert_tx.tx_hex,timelockAssert:r.timelockAssert,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:r.universalChallengerBtcPubkeys,timelockPegin:r.timelockPegin,network:r.network,claimerBtcPubkey:r.depositorBtcPubkey,registeredPayoutScriptPubKey:r.registeredPayoutScriptPubKey,commissionBps:Yr,protocolFeeRate:r.protocolFeeRate,councilMembers:r.councilMembers,councilQuorum:r.councilQuorum});o.push(i.psbtHex),n.push(z.createTaprootScriptPathSignOptions(t,p.DEPOSITOR_SIGNED_INPUT_COUNT));const u=g.stripHexPrefix(r.depositorBtcPubkey),l=$.Transaction.fromHex(g.stripHexPrefix(e.assert_tx.tx_hex));for(const c of e.challenger_presign_data){const d=g.stripHexPrefix(c.challenger_pubkey),h=o.length,P=await Jr({challenger:c,challengerPubkey:d,claimerPubkey:u,localChallengers:a,assertTxParsed:l,ctx:r});o.push(P),n.push(z.createTaprootScriptPathSignOptions(t,p.DEPOSITOR_SIGNED_INPUT_COUNT)),s.push({challengerPubkey:d,noPayoutIdx:h})}return{psbtHexes:o,signOptions:n,challengerEntries:s}}async function Jr(e){const{challenger:t,challengerPubkey:r,claimerPubkey:o,localChallengers:n,assertTxParsed:s,ctx:a}=e;U.assertNoPayoutOutputMatchesChallenger(t.nopayout_tx.tx_hex,r,a.network);const i=$.Transaction.fromHex(g.stripHexPrefix(t.nopayout_tx.tx_hex)),u=$.Transaction.fromHex(g.stripHexPrefix(t.challenge_assert_x_tx.tx_hex)),l=$.Transaction.fromHex(g.stripHexPrefix(t.challenge_assert_y_tx.tx_hex));if(i.ins.length!==3)throw new Error(`NoPayout (challenger ${r}) must have exactly 3 inputs, got ${i.ins.length}`);be(i,0,s,"Assert",r),be(i,1,u,"ChallengeAssertX",r),be(i,2,l,"ChallengeAssertY",r);const c=[s.outs[0],u.outs[0],l.outs[0]].map(d=>({script_pubkey:g.uint8ArrayToHex(new Uint8Array(d.script)),value:d.value}));return U.buildNoPayoutPsbt({noPayoutTxHex:t.nopayout_tx.tx_hex,challengerPubkey:r,prevouts:c,connectorParams:{txGraphVersion:a.vaultCoreVersion,claimer:o,localChallengers:n,universalChallengers:a.universalChallengerBtcPubkeys,timelockAssert:a.timelockAssert,councilMembers:a.councilMembers,councilQuorum:a.councilQuorum}})}function Zr(e,t,r){w.assertPsbtUnsignedTxMatches(e[0]);const n=w.extractPayoutSignature(e[0].returnedPsbtHex,r);w.assertScriptPathSchnorrSignature({requestedPsbtHex:e[0].requestedPsbtHex,signatureHex:n,signerXOnlyPubkeyHex:r,inputIndex:0});const s={};for(const a of t){w.assertPsbtUnsignedTxMatches(e[a.noPayoutIdx]);const i=w.extractPayoutSignature(e[a.noPayoutIdx].returnedPsbtHex,r);w.assertScriptPathSchnorrSignature({requestedPsbtHex:e[a.noPayoutIdx].requestedPsbtHex,signatureHex:i,signerXOnlyPubkeyHex:r,inputIndex:0}),s[a.challengerPubkey]={nopayout_signature:i}}return{payout_signatures:{payout_signature:n},per_challenger:s}}async function Ut(e){const{depositorGraph:t,btcWallet:r,signingContext:o}=e;Fr({peginTxHex:o.peginTxHex,claimTxHex:t.claim_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex,path:"depositor_graph"});const n=await r.getPublicKeyHex(),{depositorPubkey:s}=g.validateWalletPubkey(n,g.stripHexPrefix(o.depositorBtcPubkey)),{psbtHexes:a,signOptions:i,challengerEntries:u}=await Qr(t,n,o),l=await F.signPsbtsWithFallback(r,a,i),c=a.map((d,h)=>({requestedPsbtHex:d,returnedPsbtHex:l[h]}));return Zr(c,u,s)}const eo=1e4,q=10;async function Ke(e){const{statusReader:t,vaultId:r,peginTxid:o,targetStatuses:n,timeoutMs:s,pollIntervalMs:a=eo,signal:i}=e,u=Date.now();for(;;){if(i!=null&&i.aborted)throw new Error(`Polling aborted for vault ${r.slice(0,q)}… (target: ${[...n].join(", ")})`);if(Date.now()-u>=s)throw new Error(`Polling timeout after ${s}ms for vault ${r.slice(0,q)}… (target: ${[...n].join(", ")})`);try{const l=await t.getPeginStatusByVaultId({vault_id:r},i);if(k.vaultIdKey(l.vault_id)!==k.vaultIdKey(r))throw new Error(`getPeginStatusByVaultId returned status for vault ${l.vault_id.slice(0,q)}…, requested ${r.slice(0,q)}…`);if(l.pegin_txid.toLowerCase()!==o.toLowerCase())throw new Error(`getPeginStatusByVaultId returned status for pegin ${l.pegin_txid.slice(0,8)}…, requested ${o.slice(0,8)}…`);const c=l.status;if(n.has(c)||c===k.DaemonStatus.ACTIVATED)return c;if(c===k.DaemonStatus.EXPIRED||k.VP_TERMINAL_FAILURE_STATUSES.has(c))throw new Error(`Vault ${r.slice(0,q)}… reached terminal status "${c}" while waiting for ${[...n].join(", ")}`)}catch(l){if(!(l instanceof k.JsonRpcError&&l.code===k.RpcErrorCode.PEGIN_NOT_FOUND))throw l}await new Promise((l,c)=>{const d=()=>{clearTimeout(h),c(new Error(`Polling aborted for vault ${r.slice(0,q)}… (target: ${[...n].join(", ")})`))},h=setTimeout(()=>{i==null||i.removeEventListener("abort",d),l()},a);i==null||i.addEventListener("abort",d,{once:!0})})}}const to=1200*1e3,Mt=new Set([k.DaemonStatus.PENDING_ACKS,k.DaemonStatus.PENDING_ACTIVATION,k.DaemonStatus.ACTIVATED_PENDING_BROADCAST,k.DaemonStatus.ACTIVATED]),ro=new Set([k.DaemonStatus.PENDING_DEPOSITOR_SIGNATURES,...Mt]);function oo(e){return e.map(t=>({claimerPubkeyXOnly:g.processPublicKeyToXOnly(t.claimer_pubkey),payoutTxHex:t.payout_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex}))}function O(e){return g.processPublicKeyToXOnly(e).toLowerCase()}function no(e,t){const r=(u,l,c)=>{throw new Error(`Deposit terms ${u} (${String(l)}) does not match the vault's version-locked signing context (${String(c)}); refusing to sign payouts against terms that describe a different graph.`)},o=[["protocolFeeRate",e.protocolFeeRate,t.protocolFeeRate],["vaultCoreVersion",e.vaultCoreVersion,t.vaultCoreVersion],["timelockPegin",e.timelockPegin,t.timelockPegin],["timelockAssert",e.timelockAssert,t.timelockAssert]];for(const[u,l,c]of o)l!==c&&r(u,l,c);const n=u=>u.map(O).sort(),s=(u,l)=>{const c=n(u),d=n(l);return c.length===d.length&&c.every((h,P)=>h===d[P])};s(e.vaultKeeperBtcPubkeys,t.vaultKeeperBtcPubkeys)||r("vaultKeeperBtcPubkeys",e.vaultKeeperBtcPubkeys.join(","),t.vaultKeeperBtcPubkeys.join(",")),s(e.universalChallengerBtcPubkeys,t.universalChallengerBtcPubkeys)||r("universalChallengerBtcPubkeys",e.universalChallengerBtcPubkeys.join(","),t.universalChallengerBtcPubkeys.join(","));const a=O(t.vaultProviderBtcPubkey),i=e.vaults.map(u=>O(u.vaultProviderBtcPubkey));i.includes(a)||r("vaults[].vaultProviderBtcPubkey",i.join(",")||"<no vaults>",t.vaultProviderBtcPubkey)}function so(e,t,r,o){const n=O(o),s=[O(t),...r.map(O)],a=new Set(s);if(a.size!==s.length)throw new Error("Cannot validate claimer set: signing context contains duplicate vault provider or vault keeper key");if(a.has(n))throw new Error("Cannot validate claimer set: depositor key overlaps with vault provider or vault keeper set");const i=e.map(h=>O(h.claimer_pubkey));if(new Set(i).size!==i.length)throw new Error("Presign response contains duplicate claimer entries");const u=i.filter(h=>h!==n),l=new Set(u),c=s.filter(h=>!l.has(h)),d=u.filter(h=>!a.has(h));if(c.length>0||d.length>0)throw new Error("Presign response claimer set does not match expected (vault provider ∪ vault keepers)"+(c.length>0?` (missing: ${c.join(", ")})`:"")+(d.length>0?` (unexpected: ${d.join(", ")})`:""))}function et(e,t){return{vaultCoreVersion:t.vaultCoreVersion,payoutTxHex:e.payoutTxHex,peginTxHex:t.peginTxHex,assertTxHex:e.assertTxHex,vaultProviderBtcPubkey:t.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:t.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:t.universalChallengerBtcPubkeys,depositorBtcPubkey:t.depositorBtcPubkey,timelockPegin:t.timelockPegin,timelockAssert:t.timelockAssert,registeredPayoutScriptPubKey:t.registeredPayoutScriptPubKey,claimerBtcPubkey:e.claimerPubkeyXOnly,commissionBps:t.commissionBps,protocolFeeRate:t.protocolFeeRate,councilMembers:t.councilMembers,councilQuorum:t.councilQuorum,vkClaimerPayoutScriptPubKeys:t.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:t.vpCommissionScriptPubKey}}async function io(e,t,r,o){const n=new F.PayoutManager({network:t.network,btcWallet:e}),s=r.length;o==null||o(0,s);let a;if(n.supportsBatchSigning())a=(await n.signPayoutTransactionsBatch(r.map(l=>et(l,t)))).map(l=>l.payoutSignature);else{a=[];for(let u=0;u<r.length;u++){o==null||o(u,s);const l=await n.signPayoutTransaction(et(r[u],t));a.push(l.signature)}}const i={};for(let u=0;u<r.length;u++)i[r[u].claimerPubkeyXOnly]={payout_signature:a[u]};return o==null||o(s,s),i}async function ao(e){const{statusReader:t,presignClient:r,btcWallet:o,vaultId:n,peginTxid:s,depositorPk:a,signingContext:i,depositTerms:u,timeoutMs:l=to,signal:c,onProgress:d,recordGraphFingerprint:h}=e,P=await Ke({statusReader:t,vaultId:n,peginTxid:s,targetStatuses:ro,timeoutMs:l,signal:c});if(Mt.has(P))return;c==null||c.throwIfAborted(),u!==void 0&&no(u,i);const f=F.supportsDepositApproval(o)?o:void 0;let v;if(f){if(!u)throw new Error("runDepositorPresignFlow: this wallet requires approved deposit terms but none were provided. Fresh deposits must pass PreparePeginResult.depositTerms; resume flows must rebuild them from on-chain state (the vault app's rebuildDepositTerms).");v=u}const y=await r.requestDepositorPresignTransactions({pegin_txid:s,depositor_pk:a},c);c==null||c.throwIfAborted(),y.txs.forEach((K,ee)=>{Lr({claimTxHex:K.claim_tx.tx_hex,assertTxHex:K.assert_tx.tx_hex,path:`txs[${ee}]`})});const m=qr({peginTxid:s,peginTxHex:i.peginTxHex,claimTxHex:y.depositor_graph.claim_tx.tx_hex,assertTxHex:y.depositor_graph.assert_tx.tx_hex,payoutTxHex:y.depositor_graph.payout_tx.tx_hex,challengers:y.depositor_graph.challenger_presign_data}),I=O(a);so(y.txs,i.vaultProviderBtcPubkey,i.vaultKeeperBtcPubkeys,a);const T=y.txs.filter(K=>O(K.claimer_pubkey)!==I),b=oo(T);f&&v&&(typeof f.validateDepositTerms=="function"&&await f.validateDepositTerms(v),await f.approveDepositTerms(v)),c==null||c.throwIfAborted();const _=await io(o,i,b,d);c==null||c.throwIfAborted();const B=await Ut({depositorGraph:y.depositor_graph,btcWallet:o,signingContext:{vaultCoreVersion:i.vaultCoreVersion,peginTxHex:i.peginTxHex,depositorBtcPubkey:a,vaultProviderBtcPubkey:i.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:i.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:i.universalChallengerBtcPubkeys,timelockPegin:i.timelockPegin,timelockAssert:i.timelockAssert,councilMembers:i.councilMembers,councilQuorum:i.councilQuorum,network:i.network,registeredPayoutScriptPubKey:i.registeredPayoutScriptPubKey,protocolFeeRate:i.protocolFeeRate,vkClaimerPayoutScriptPubKeys:i.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:i.vpCommissionScriptPubKey}});c==null||c.throwIfAborted(),await h(m),c==null||c.throwIfAborted();const E={..._};E[g.stripHexPrefix(a)]=B.payout_signatures,await r.submitDepositorPresignatures({pegin_txid:s,depositor_pk:a,signatures:E,depositor_claimer_presignatures:B},c)}const uo=300*1e3,co=new Set([k.DaemonStatus.PENDING_DEPOSITOR_WOTS_PK,...k.POST_WOTS_STATUSES]);async function lo(e){const{statusReader:t,wotsSubmitter:r,vaultId:o,peginTxid:n,depositorPk:s,wotsPublicKeys:a,timeoutMs:i=uo,signal:u}=e;u==null||u.throwIfAborted();const l=await Ke({statusReader:t,vaultId:o,peginTxid:n,targetStatuses:co,timeoutMs:i,signal:u});k.POST_WOTS_STATUSES.has(l)||(u==null||u.throwIfAborted(),await r.submitDepositorWotsKey({pegin_txid:n,depositor_pk:s,wots_public_keys:a},u))}function re(e){return e.registration||e.operation}function Lt(e,t,r){const o=g.canonicalizeBtcPubkey(e);return{registration:o===g.canonicalizeBtcPubkey(t),operation:o===g.canonicalizeBtcPubkey(r)}}function Ee(e,t,r){const o=me(e);return{registration:tt(o,me(t)),operation:tt(o,me(r))}}function me(e){return e.map(g.canonicalizeBtcPubkey).sort()}function tt(e,t){return e.length===t.length&&e.every((r,o)=>r===t[o])}async function ho(e){const{vaultProviderEthAddress:t,hintBtcPubkey:r,registrationBtcPubkey:o,readCurrentOperationBtcPubkey:n,context:s}=e;if(!r)return;const a=g.canonicalizeBtcPubkey(r);if(a===g.canonicalizeBtcPubkey(o))return;const i=g.canonicalizeBtcPubkey(await n());if(a!==i)throw new Error(`Vault provider BTC pubkey mismatch for ${t}: indexer hint matches neither the registration key nor the current operation key on-chain.${s?` ${s}`:""}`)}class ae extends Error{constructor(t){super(t),this.name="ApplicationEntryPointMismatchError"}}function po(e){return e instanceof ae||e instanceof Error&&e.name==="ApplicationEntryPointMismatchError"}const rt=e=>e.map(g.canonicalizeBtcPubkey).sort();async function go(e){const{vaultRegistryReader:t,vaultKeeperReader:r,universalChallengerReader:o,vaultProviderEthAddress:n,applicationEntryPoint:s,expectedVaultProviderBtcPubkey:a,expectedVaultKeeperBtcPubkeys:i,expectedUniversalChallengerBtcPubkeys:u,operationKeyReader:l,onIndexerServingOperationKeys:c,onIndexerHintsInconsistent:d,blockNumber:h}=e,[P,f,v,y]=await Promise.all([t.getVaultProviderApplication(n,h),t.getVaultProviderGenesisBtcPubKey(n,h),o.getLatestUniversalChallengersVersion(h),o.getCurrentUcKeyEpoch(h)]);if(!xe.isAddress(s,{strict:!1}))throw new ae(`The application entry point this deposit was prepared for is not a valid address: ${s}`);if(!xe.isAddressEqual(P,s))throw new ae(`Vault provider ${n} is registered to application ${P}, but this deposit was prepared for ${s}. Refusing to build: the vault keeper roster, its version, and the keeper key epoch would all resolve against a different application than the one selected.`);const[m,I]=await Promise.all([r.getCurrentVaultKeepersVersion(P,h),r.getCurrentAppKeeperKeyEpoch(P,h)]),[T,b]=await Promise.all([r.getVaultKeepersByVersion(P,m,h),o.getUniversalChallengersByVersion(v,h)]),_={vaultProvider:g.canonicalizeBtcPubkey(f),vaultKeepers:rt(T.map(R=>R.btcPubKey)),universalChallengers:rt(b.map(R=>R.btcPubKey))},B=await It({operationKeyReader:l,query:{vaultProviderEthAddress:n,vaultProviderGenesisBtcPubkey:`0x${f}`,applicationEntryPoint:P,vaultKeepers:T,universalChallengers:b},blockNumber:h}),E={vaultProvider:B.vaultProvider.operationBtcPubkey,vaultKeepers:[...B.vaultKeeperOperationKeysSorted],universalChallengers:[...B.universalChallengerOperationKeysSorted]},K=Lt(a,_.vaultProvider,E.vaultProvider),ee=Ee(i,_.vaultKeepers,E.vaultKeepers),Fe=Ee(u,_.universalChallengers,E.universalChallengers);if(!re(K))throw new Error(`Vault provider BTC pubkey indexer hint does not match BTCVaultRegistry for ${n}. Refresh and try again.`);if(!re(ee))throw new Error(`Vault keeper BTC pubkeys (v${m}) indexer set does not match ApplicationRegistry on-chain set. Refresh and try again.`);if(!re(Fe))throw new Error(`Universal challenger BTC pubkeys (v${v}) indexer set does not match ProtocolParams on-chain set. Refresh and try again.`);const Xe=[K,ee,Fe],zt=Xe.some(R=>R.registration&&!R.operation),qe=Xe.some(R=>R.operation&&!R.registration);if(zt&&qe){const R=`Indexer participant hints are internally inconsistent for vault provider ${n}: some roles match the registration keys while others match the rotated operation keys.`;throw d==null||d(R),new Error(`${R} Refresh and try again.`)}return qe&&(c==null||c(`Indexer is serving rotated operation keys for vault provider ${n}`)),{vaultProviderBtcPubkeyXOnly:E.vaultProvider,vaultKeeperBtcPubkeysSorted:E.vaultKeepers,universalChallengerBtcPubkeysSorted:E.universalChallengers,expectedAppVaultKeepersVersion:m,expectedUniversalChallengersVersion:v,appKeeperKeyEpoch:I,ucKeyEpoch:y,registrationKeys:_,participantKeys:B}}function fo(e){return/^[0-9a-fA-F]{64}$/.test(e)}function Po(e){const{amountSats:t,minDeposit:r,maxDeposit:o,btcBalance:n,estimatedFeeSats:s,depositorClaimValue:a}=e;return!(t<=0n||t<r||o&&o>0n&&t>o||s==null||a==null||t+s+a>n)}function yo(e,t,r){return e<=0n?{valid:!1,error:"Deposit amount must be greater than zero"}:e<t?{valid:!1,error:`Minimum deposit is ${g.formatSatoshisToBtc(t)} BTC`}:r&&r>0n&&e>r?{valid:!1,error:`Maximum deposit is ${g.formatSatoshisToBtc(r)} BTC`}:{valid:!0}}function vo(e){const{amount:t,effectiveRemaining:r}=e;return r===null?{valid:!0}:r===0n?{valid:!1,error:"Supply cap reached — deposits temporarily paused"}:t>r?{valid:!1,error:`Vault size exceeds remaining capacity (${g.formatSatoshisToBtc(r)} BTC)`}:{valid:!0}}function bo(e,t){if(!e||e.length===0)return{valid:!1,error:"At least one vault provider must be selected"};const r=t.map(n=>n.toLowerCase());return e.filter(n=>!r.includes(n.toLowerCase())).length>0?{valid:!1,error:"Invalid vault provider selected"}:{valid:!0}}function Ft(e,t,r){if(!e||e.length===0)return{valid:!1,error:"At least one vault amount required"};for(let o=0;o<e.length;o++){const n=e[o];if(n<=0n)return{valid:!1,error:`Vault ${o+1} amount must be positive`};if(t&&n<t)return{valid:!1,error:`Vault ${o+1} amount ${g.formatSatoshisToBtc(n)} BTC is below minimum deposit ${g.formatSatoshisToBtc(t)} BTC`};if(r&&n>r)return{valid:!1,error:`Vault ${o+1} amount ${g.formatSatoshisToBtc(n)} BTC exceeds maximum deposit ${g.formatSatoshisToBtc(r)} BTC`}}return{valid:!0}}function Xt(e){const t=g.stripHexPrefix(e);return fo(t)?{valid:!0}:{valid:!1,error:"Invalid pubkey format: must be 64 hex characters (32-byte x-only public key, no 0x prefix)"}}function mo(e){if(!e||e.length===0)throw new Error("No vault keepers available. The system requires at least one vault keeper to create a deposit.")}function wo(e){if(!e||e.length===0)throw new Error("No universal challengers available. The system requires at least one universal challenger to create a deposit.")}function xo(e){if(e.length===0)throw new Error("No spendable UTXOs available")}function Eo(e){const{vaultAmounts:t,confirmedUTXOs:r,vaultProviderBtcPubkey:o,vaultKeeperBtcPubkeys:n,universalChallengerBtcPubkeys:s,minDeposit:a,maxDeposit:i}=e,u=Ft(t,a,i);if(!u.valid)throw new Error(u.error);const l=Xt(o);if(!l.valid)throw new Error(l.error);mo(n),wo(s),xo(r)}class Ue extends Error{constructor(t){super(t),this.name="ParticipantKeyDriftError"}}function To(e){return e instanceof Ue||e instanceof Error&&e.name==="ParticipantKeyDriftError"}function ot(e,t,r){return t.length===r.length&&t.every((o,n)=>o===r[n])?null:`${e} expected [${t.join(", ")}], got [${r.join(", ")}]`}async function _o(e){const{vaultRegistryReader:t,operationKeyReader:r,vaultIds:o,expected:n}=e,s=n.query;if(o.length===0)return;const a=await t.getVaultKeyEpochsBatch(o),i=[];for(const[u,l]of a.entries()){const c=o[u];let d;try{d=await Ne({operationKeyReader:r,query:s,epochs:l})}catch(f){i.push(`vault ${c}: could not resolve participants at frozen epochs (vp=${l.vpKeyEpoch}, keeper=${l.appKeeperKeyEpoch}, uc=${l.ucKeyEpoch}): ${f.message}`);continue}d.vaultProvider.operationBtcPubkey!==n.vaultProvider.operationBtcPubkey&&i.push(`vault ${c}: vault provider key expected ${n.vaultProvider.operationBtcPubkey}, got ${d.vaultProvider.operationBtcPubkey}`);const h=ot(`vault ${c}: vault keeper keys`,n.vaultKeeperOperationKeysSorted,d.vaultKeeperOperationKeysSorted);h&&i.push(h);const P=ot(`vault ${c}: universal challenger keys`,n.universalChallengerOperationKeysSorted,d.universalChallengerOperationKeysSorted);P&&i.push(P)}if(i.length>0)throw new Ue(`Aborting BTC broadcast: participant operation keys changed during registration (${i.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class Me extends Error{constructor(t){super(t),this.name="RegisteredVaultVersionMismatchError"}}function Co(e){return e instanceof Me||e instanceof Error&&e.name==="RegisteredVaultVersionMismatchError"}async function $o(e){const{vaultRegistryReader:t,vaultIds:r,expectedOffchainParamsVersion:o,expectedAppVaultKeepersVersion:n,expectedUniversalChallengersVersion:s,expectedVaultCoreVersion:a}=e,i=await t.getProtocolInfoBatch(r),u=[];if(i.forEach((l,c)=>{const d=r[c];l.offchainParamsVersion!==o&&u.push(`vault ${d}: offchainParams expected v${o}, got v${l.offchainParamsVersion}`),l.appVaultKeepersVersion!==n&&u.push(`vault ${d}: appVaultKeepers expected v${n}, got v${l.appVaultKeepersVersion}`),l.universalChallengersVersion!==s&&u.push(`vault ${d}: universalChallengers expected v${s}, got v${l.universalChallengersVersion}`),l.vaultCoreVersion!==a&&u.push(`vault ${d}: vaultCoreVersion expected v${a} (build-time active), got v${l.vaultCoreVersion}`)}),u.length>0)throw new Me(`Aborting BTC broadcast: signer-set or offchain-params versions changed during registration (${u.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class qt extends Error{constructor(r,o){super(`Refund not yet mature (BIP68 not final): ${o.message}`);W(this,"vaultId");W(this,"cause");this.name="BIP68NotMatureError",this.vaultId=r,this.cause=o}}const ko=/^0x[0-9a-fA-F]{64}$/,So=/^(?:0x)?(?:[0-9a-fA-F]{2})+$/,Gt=/^(?:0x)?(?:[0-9a-fA-F]{64}|[0-9a-fA-F]{66})$/,Le=160,Te=2e3,_e=10n,Ce=100n;function Ao(e){if(!Number.isFinite(e)||e<=0)throw new Error(`feeRateSatsVb must be a positive finite number, got ${e}`);return BigInt(Math.ceil(e*Le))}const Io=1,Bo=/non-BIP68-final/i;function $e(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!ko.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function we(e,t){if(!Number.isInteger(e)||e<0)throw new Error(`${t} must be a non-negative integer, got ${e}`)}function Ro(e){if($e(e.hashlock,"hashlock"),!Number.isInteger(e.htlcVout)||e.htlcVout<0)throw new Error(`htlcVout must be a non-negative integer, got ${e.htlcVout}`);if(!Array.isArray(e.batch)||e.batch.length===0)throw new Error("batch must be a non-empty array of HTLC entries");if(e.htlcVout>=e.batch.length)throw new Error(`htlcVout ${e.htlcVout} is out of range for batch of size ${e.batch.length}`);for(let r=0;r<e.batch.length;r++){const o=e.batch[r];if($e(o.hashlock,`batch[${r}].hashlock`),!Number.isInteger(o.htlcVout)||o.htlcVout!==r)throw new Error(`batch[${r}].htlcVout must equal ${r} (contiguous vout-ordered vector), got ${o.htlcVout}`);if(typeof o.amount!="bigint"||o.amount<=0n)throw new Error(`batch[${r}].amount must be a positive bigint, got ${o.amount}`)}const t=e.batch[e.htlcVout];if(t.hashlock.toLowerCase()!==e.hashlock.toLowerCase())throw new Error(`batch[${e.htlcVout}].hashlock (${t.hashlock}) does not match target hashlock (${e.hashlock})`);if(t.amount!==e.amount)throw new Error(`batch[${e.htlcVout}].amount (${t.amount}) does not match target amount (${e.amount})`);if(we(e.offchainParamsVersion,"offchainParamsVersion"),we(e.appVaultKeepersVersion,"appVaultKeepersVersion"),we(e.universalChallengersVersion,"universalChallengersVersion"),jt.assertValidVaultCoreVersion(e.vaultCoreVersion,"VaultRefundData.vaultCoreVersion"),typeof e.unsignedPrePeginTxHex!="string"||e.unsignedPrePeginTxHex.length===0)throw new Error("unsignedPrePeginTxHex must be a non-empty hex string");if(!So.test(e.unsignedPrePeginTxHex))throw new Error("unsignedPrePeginTxHex must be a hex byte string (optional 0x prefix, even length)");if(!e.depositorBtcPubkey||!Gt.test(e.depositorBtcPubkey))throw new Error("depositorBtcPubkey must be 32 or 33 bytes of hex (optional 0x prefix)");if(typeof e.amount!="bigint"||e.amount<=0n)throw new Error(`amount must be a positive bigint, got ${e.amount}`)}function Vo(e){if(!e.vaultProviderPubkey||!Gt.test(e.vaultProviderPubkey))throw new Error("vaultProviderPubkey must be 32 or 33 bytes of hex");if(e.vaultKeeperPubkeys.length===0)throw new Error("vaultKeeperPubkeys must be non-empty");if(e.universalChallengerPubkeys.length===0)throw new Error("universalChallengerPubkeys must be non-empty");if(!Number.isInteger(e.timelockRefund)||e.timelockRefund<=0)throw new Error(`timelockRefund must be a positive integer, got ${e.timelockRefund}`);if(typeof e.feeRate!="bigint"||e.feeRate<=0n)throw new Error(`protocol feeRate must be a positive bigint, got ${e.feeRate}`);if(typeof e.minPeginFeeRate!="bigint"||e.minPeginFeeRate<=0n)throw new Error(`minPeginFeeRate must be a positive bigint, got ${e.minPeginFeeRate}`);if(!Number.isInteger(e.numLocalChallengers)||e.numLocalChallengers<0)throw new Error("numLocalChallengers must be a non-negative integer");if(!Number.isInteger(e.councilQuorum)||!Number.isInteger(e.councilSize)||e.councilQuorum<=0||e.councilSize<=0||e.councilQuorum>e.councilSize)throw new Error(`councilQuorum (${e.councilQuorum}) must be in [1, councilSize=${e.councilSize}]`)}async function No(e){const{vaultId:t,readVault:r,readPrePeginContext:o,feeRate:n,signPsbt:s,broadcastTx:a,signal:i}=e;i==null||i.throwIfAborted(),$e(t,"vaultId");const u=await r();Ro(u),i==null||i.throwIfAborted();const l=await o(u);if(Vo(l),i==null||i.throwIfAborted(),!Number.isFinite(n)||n<=0)throw new Error(`feeRate must be a positive number, got ${n}`);if(n>Te)throw new Error(`feeRate ${n} sat/vB exceeds refund safety cap ${Te} sat/vB; refusing to sign refund.`);const c=BigInt(Math.ceil(n*Le)),d=u.amount*_e/Ce;if(c>d)throw new Error(`Refund fee ${c} sats exceeds the per-vault safety cap of ${d} sats (${_e}/${Ce} of vault.amount=${u.amount}); refusing to sign refund.`);i==null||i.throwIfAborted();const h=g.processPublicKeyToXOnly(u.depositorBtcPubkey),P=g.stripHexPrefix(u.unsignedPrePeginTxHex),f=F.findAuthAnchorOpReturn(P);if(f!==void 0&&f.vout!==u.batch.length)throw new Error(`Auth-anchor OP_RETURN at vout ${f.vout} does not match batch size (${u.batch.length} HTLC outputs expect the anchor at vout ${u.batch.length}). Refund refused — sibling HTLC vector is incomplete.`);const v=f==null?void 0:f.hash;let y;try{y=$.Transaction.fromHex(P)}catch(E){throw new Error(`Failed to parse funded Pre-PegIn transaction hex: ${E instanceof Error?E.message:String(E)}`)}if(y.outs.length<u.batch.length)throw new Error(`Funded Pre-PegIn tx has ${y.outs.length} outputs but batch requires at least ${u.batch.length} HTLC outputs. Refund refused — funded tx shape disagrees with sibling vector.`);const{psbtHex:m}=await U.buildRefundPsbt({prePeginParams:{vaultCoreVersion:u.vaultCoreVersion,depositorPubkey:h,vaultProviderPubkey:g.stripHexPrefix(l.vaultProviderPubkey),vaultKeeperPubkeys:l.vaultKeeperPubkeys.map(g.stripHexPrefix),universalChallengerPubkeys:l.universalChallengerPubkeys.map(g.stripHexPrefix),hashlocks:u.batch.map(E=>g.stripHexPrefix(E.hashlock)),timelockRefund:l.timelockRefund,pegInAmounts:u.batch.map(E=>E.amount),feeRate:l.feeRate,minPeginFeeRate:l.minPeginFeeRate,numLocalChallengers:l.numLocalChallengers,councilQuorum:l.councilQuorum,councilSize:l.councilSize,network:l.network,authAnchorHash:v},fundedPrePeginTxHex:P,htlcVout:u.htlcVout,refundFee:c,hashlock:g.stripHexPrefix(u.hashlock)});i==null||i.throwIfAborted();const I=z.createTaprootScriptPathSignOptions(u.depositorBtcPubkey,Io),T=await s(m,I);w.assertPsbtUnsignedTxMatches({requestedPsbtHex:m,returnedPsbtHex:T});const b=0,_=w.extractPayoutSignature(T,h,b);w.assertScriptPathSchnorrSignature({requestedPsbtHex:m,signatureHex:_,signerXOnlyPubkeyHex:h,inputIndex:b});const B=U.finalizeScriptPathWithSignatures({requestedPsbtHex:m,signaturesHex:[_],signerXOnlyPubkeyHex:h});i==null||i.throwIfAborted();try{return await a(B)}catch(E){throw E instanceof Error&&Bo.test(E.message)?new qt(t,E):E}}class ke extends Error{constructor(r,o,n){super(r);W(this,"feeSats");W(this,"sweptTotalSats");this.name="ReclaimUneconomicalError",this.feeSats=o,this.sweptTotalSats=n}}const Se=2e3,Ae=25n,Ie=100n,Oo=10n;async function Ho(e,t,r){for(let o=0;o<e.length;o++){const n=Qt.calculateBtcTxHash(e[o].depositorSignedPeginTxHex),s=g.ensureHexPrefix(await A.deriveVaultId(g.stripHexPrefix(n),g.stripHexPrefix(r))).toLowerCase();if(s!==t[o].toLowerCase())throw new Error(`Reserve ${o} belongs to vault ${s}, not the requested ${t[o].toLowerCase()}. Refusing to sweep a reserve whose vault is not the one the caller asked for — the reserve funds that vault's claim transaction and cannot be replaced.`)}}async function Do(e){const{vaultIds:t,depositorEthAddress:r,depositorBtcPubkey:o,readVaults:n,feeRate:s,signPsbt:a,broadcastTx:i,signal:u}=e;if(u==null||u.throwIfAborted(),t.length===0)throw new Error("Reclaim requires at least one vault id; got none.");if(!Number.isFinite(s)||s<=0)throw new Error(`feeRate must be a positive number, got ${s}`);if(s>Se)throw new ke(`Fee rate ${s} sat/vB exceeds the reclaim safety cap of ${Se} sat/vB; refusing to sign.`,0n,0n);const l=await n();if(u==null||u.throwIfAborted(),l.length!==t.length)throw new Error(`readVaults returned ${l.length} reserves for ${t.length} vault id(s); refusing to sweep a set that does not match the request.`);await Ho(l,t,r),u==null||u.throwIfAborted();const c=g.processPublicKeyToXOnly(o),d=l.map(b=>({depositorSignedPeginTxHex:b.depositorSignedPeginTxHex,observed:b.observed,expectedValue:b.expectedClaimValue})),h=U.estimateReclaimFeeSats(s,d.length),P=d.reduce((b,_)=>b+_.expectedValue,0n),f=P*Ae/Ie;if(h>f)throw new ke(`Reclaim fee ${h} sats exceeds ${Ae}/${Ie} of the swept total (${P} sats, cap ${f} sats). The reserve is not at risk — it stays where it is until fee rates fall.`,h,P);u==null||u.throwIfAborted();const{psbtHex:v}=U.buildReclaimPsbt({depositorPubkey:c,inputs:d,feeSats:h});u==null||u.throwIfAborted();const y=z.createTaprootScriptPathSignOptions(o,d.length),m=await a(v,y);w.assertPsbtUnsignedTxMatches({requestedPsbtHex:v,returnedPsbtHex:m});const I=d.map((b,_)=>{const B=w.extractPayoutSignature(m,c,_);return w.assertScriptPathSchnorrSignature({requestedPsbtHex:v,signatureHex:B,signerXOnlyPubkeyHex:c,inputIndex:_}),B}),T=U.finalizeScriptPathWithSignatures({requestedPsbtHex:v,signaturesHex:I,signerXOnlyPubkeyHex:c});return u==null||u.throwIfAborted(),i(T)}exports.ApplicationEntryPointMismatchError=ae;exports.ArtifactsVaultMismatchError=yt;exports.AssertBindingError=V;exports.BABE_SESSION_PLACEHOLDER_DECRYPTOR_HEX=pt;exports.BIP68NotMatureError=qt;exports.ChallengerSetMismatchError=ut;exports.DELEGATED_CLAIM_TX_GRAPH_VERSION=M;exports.DelegatedClaimSigningIncompleteError=_t;exports.GraphFingerprintError=x;exports.PEGIN_ETH_CONFIRMATIONS=Rt;exports.ParticipantKeyDriftError=Ue;exports.PayoutDestinationError=lt;exports.PayoutInputLeafError=J;exports.PeginRegistrationMissingError=Oe;exports.PeginRegistrationNotFinalError=He;exports.RECLAIM_MAX_FEE_FRACTION_DENOMINATOR=Ie;exports.RECLAIM_MAX_FEE_FRACTION_NUMERATOR=Ae;exports.RECLAIM_MAX_FEE_RATE_SATS_VB=Se;exports.RECLAIM_WARN_FEE_FRACTION_NUMERATOR=Oo;exports.REFUND_MAX_FEE_FRACTION_DENOMINATOR=Ce;exports.REFUND_MAX_FEE_FRACTION_NUMERATOR=_e;exports.REFUND_MAX_FEE_RATE_SATS_VB=Te;exports.REFUND_VSIZE=Le;exports.ReclaimUneconomicalError=ke;exports.RegisteredVaultVersionMismatchError=Me;exports.SigningPlanMismatchError=G;exports.VaultIdBindingError=gt;exports.activateVault=or;exports.activateVaultAndRedeem=nr;exports.assembleWatchtowerArtifacts=Cr;exports.assembleWatchtowerArtifactsFromSignatures=Tt;exports.assertArtifactsUsableForVault=hr;exports.assertAssertBindsClaimAndPayout=at;exports.assertChallengerSetMatchesVault=ct;exports.assertClaimSpendsVault=Be;exports.assertPayoutPaysRegisteredScript=dt;exports.assertReturnedGraphMatchesFingerprint=zr;exports.assertTermsMatchVault=St;exports.assertVaultProviderHintAccepted=ho;exports.buildAndBroadcastReclaim=Do;exports.buildAndBroadcastRefund=No;exports.copyAssertConnectorLeaf=ht;exports.deriveClaimerWotsKeypair=$r;exports.estimateRefundFeeSats=Ao;exports.fingerprintReturnedGraph=Kt;exports.isApplicationEntryPointMismatchError=po;exports.isDepositAmountValid=Po;exports.isHintAccepted=re;exports.isParticipantKeyDriftError=To;exports.isPeginRegistrationMissingError=Vt;exports.isPeginRegistrationNotFinalError=Vr;exports.isRegisteredVaultVersionMismatchError=Co;exports.matchKeyHint=Lt;exports.matchKeySetHint=Ee;exports.planDelegatedClaimSigning=xt;exports.readDelegatedClaimVaultContext=Ar;exports.readStampedParticipantKeys=Bt;exports.resolveCurrentParticipantKeys=It;exports.resolveParticipantKeysAtEpochs=Ne;exports.runDepositorPresignFlow=ao;exports.signDelegatedClaimPlan=$t;exports.signDepositorGraph=Ut;exports.submitWotsPublicKey=lo;exports.summarizeWatchtowerArtifacts=vt;exports.validateDepositAmount=yo;exports.validateMultiVaultDepositInputs=Eo;exports.validateOnChainParticipantKeys=go;exports.validateProviderSelection=bo;exports.validateRemainingCapacity=vo;exports.validateVaultAmounts=Ft;exports.validateVaultProviderPubkey=Xt;exports.verifyRegisteredParticipantKeys=_o;exports.verifyRegisteredVaultVersions=$o;exports.waitForPeginRegistrationDepth=Nr;exports.waitForPeginStatus=Ke;
-//# sourceMappingURL=buildAndBroadcastReclaim-DjX7wVb2.cjs.map
+"use strict";var Yt=Object.defineProperty;var Wt=(e,t,r)=>t in e?Yt(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var W=(e,t,r)=>Wt(e,typeof t!="symbol"?t+"":t,r);const nt=require("./BTCVaultRegistry.abi-DffWFdpA.cjs"),g=require("./bitcoin-D-O2GjbC.cjs"),F=require("./PayoutManager-DOdsgcUR.cjs"),A=require("./tbv/core/wasm/index.cjs"),S=require("./registration-records-DFQgBaYi.cjs"),$=require("bitcoinjs-lib"),p=require("./constants-BwCg5K6R.cjs"),w=require("./verifyScriptPathSchnorrSignature-D2t1yACC.cjs"),D=require("buffer"),oe=require("./validation-C6XTfZak.cjs"),z=require("./signing-DvISftFk.cjs"),st=require("./deriveVaultRoot-C3uqnJto.cjs"),ce=require("./types-Bda75Od0.cjs"),xe=require("viem"),k=require("./state-C4WoNCy1.cjs"),j=require("./sha2-Ce6KewYx.cjs"),U=require("./noPayout-DOHak0ui.cjs"),jt=require("./secp256k1-DDHQ1_za.cjs"),Qt=require("./btcTxHash-CGb5BqFL.cjs"),Jt=/^0x[0-9a-fA-F]{64}$/,Zt=/^0x[0-9a-fA-F]{40}$/,er=/^0x([0-9a-fA-F]{2})*$/;function le(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!Jt.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function tr(e,t){if(!Zt.test(e))throw new Error(`${t} must be a 20-byte 0x-prefixed hex address (42 chars)`)}function rr(e,t){if(!er.test(e))throw new Error(`${t} must be a 0x-prefixed hex string with an even number of hex chars`)}function it(e){tr(e.btcVaultRegistryAddress,"btcVaultRegistryAddress"),le(e.vaultId,"vaultId");const t=g.ensureHexPrefix(e.secret);if(le(t,"secret"),e.hashlock!==void 0&&(le(e.hashlock,"hashlock"),!F.validateSecretAgainstHashlock(t,e.hashlock)))throw new Error("Invalid secret: SHA256(secret) does not match the provided hashlock");return t}async function or(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:o,activationMetadata:n,writeContract:s,signal:a}=e;a==null||a.throwIfAborted();const i=it({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:o});return rr(n,"activationMetadata"),s({address:t,abi:nt.BTCVaultRegistryABI,functionName:"activateVaultWithSecret",args:[r,i,n]})}async function nr(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:o,writeContract:n,signal:s}=e;s==null||s.throwIfAborted();const a=it({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:o});return n({address:t,abi:nt.BTCVaultRegistryABI,functionName:"activateVaultWithSecretAndRedeem",args:[r,a]})}class V extends Error{constructor(t,r){super(t,r),this.name="AssertBindingError"}}function de(e,t){try{return $.Psbt.fromBase64(t)}catch(r){throw new V(`${e} PSBT cannot be parsed.`,{cause:r})}}function sr(e,t,r){const o=t.txInputs[r];if(!o)throw new V(`${e} PSBT has no input ${r}.`);return o.hash}function Ge(e){return $.Transaction.fromBuffer(e.data.globalMap.unsignedTx.toBuffer()).getHash()}function he(e,t,r,o,n,s){const a=t.txInputs[r];if(!a)throw new V(`${e} PSBT has no input ${r}.`);if(!a.hash.equals(o)||a.index!==n)throw new V(`${e} input ${r} does not spend ${s}: the graph pairs this ${e} with a different transaction.`)}function ir(e,t){var n;const r=(n=e.data.inputs[p.ASSERT_CLAIM_INPUT_INDEX])==null?void 0:n.witnessUtxo;if(r===void 0)throw new V(`Assert input ${p.ASSERT_CLAIM_INPUT_INDEX} carries no witnessUtxo, so the amount and script its signature commits to cannot be checked; refusing to sign assert.`);const o=t.txOutputs[p.CLAIM_CONNECTOR_OUTPUT_INDEX];if(!o)throw new V(`Claim PSBT has no output ${p.CLAIM_CONNECTOR_OUTPUT_INDEX} for the Assert to spend; refusing to sign assert.`);if(r.value!==o.value)throw new V(`Assert input ${p.ASSERT_CLAIM_INPUT_INDEX} declares a prevout of ${r.value} sats but the Claim's output ${p.CLAIM_CONNECTOR_OUTPUT_INDEX} is worth ${o.value}; refusing to sign assert.`);if(!r.script.equals(o.script))throw new V(`Assert input ${p.ASSERT_CLAIM_INPUT_INDEX} declares a prevout script that is not the Claim's output ${p.CLAIM_CONNECTOR_OUTPUT_INDEX} script; refusing to sign assert.`)}function at(e){const t=de("Claim",e.claimPsbtBase64),r=de("Assert",e.assertPsbtBase64),o=de("Payout",e.payoutClaimerPsbtBase64);he("Assert",r,p.ASSERT_CLAIM_INPUT_INDEX,Ge(t),p.CLAIM_CONNECTOR_OUTPUT_INDEX,"Claim:0"),ir(r,t),he("Payout",o,p.PAYOUT_ASSERT_INPUT_INDEX,Ge(r),p.ASSERT_PAYOUT_OUTPUT_INDEX,"Assert:0"),he("Payout",o,p.PAYOUT_PEGIN_INPUT_INDEX,sr("Claim",t,p.CLAIM_PEGIN_INPUT_INDEX),p.PEGIN_VAULT_OUTPUT_INDEX,"this vault's PegIn:0")}function pe(e,t){try{return $.Psbt.fromBase64(t)}catch(r){throw new Error(`${e} PSBT cannot be parsed.`,{cause:r})}}function ze(e,t,r,o){var a;const n=[{inputIndex:p.PAYOUT_PEGIN_INPUT_INDEX,expectedSats:r,source:`the vault's PegIn output ${p.PEGIN_VAULT_OUTPUT_INDEX}`},{inputIndex:p.PAYOUT_ASSERT_INPUT_INDEX,expectedSats:o.value,source:`the Assert's output ${p.ASSERT_PAYOUT_OUTPUT_INDEX}`}];for(const{inputIndex:i,expectedSats:u,source:l}of n){const c=(a=t.data.inputs[i])==null?void 0:a.witnessUtxo;if(c===void 0)throw new Error(`${e} Payout input ${i} carries no witnessUtxo, so the amount its signature commits to cannot be checked; refusing to sign payout.`);if(c.value!==u)throw new Error(`${e} Payout input ${i} declares a prevout of ${c.value} sats but ${l} is worth ${u}; refusing to sign payout.`)}const s=t.data.inputs[p.PAYOUT_ASSERT_INPUT_INDEX].witnessUtxo;if(!(s!=null&&s.script.equals(o.script)))throw new Error(`${e} Payout input ${p.PAYOUT_ASSERT_INPUT_INDEX} declares a prevout script that is not the Assert's output ${p.ASSERT_PAYOUT_OUTPUT_INDEX} script; refusing to sign payout.`)}async function ar(e){const{vault:t}=e,r={vaultCoreVersion:t.vaultCoreVersion,numVaultKeepers:t.vaultKeeperBtcPubkeys.length,numUniversalChallengers:t.universalChallengerBtcPubkeys.length,councilSize:t.councilSize,protocolFeeRate:t.protocolFeeRate};w.assertPayoutFeeBandDomain(r);const o=pe("Claimer Payout",e.payoutClaimerPsbtBase64),n=pe("Depositor Payout",e.payoutDepositorPsbtBase64),s=pe("Assert",e.assertPsbtBase64);if(!n.data.globalMap.unsignedTx.toBuffer().equals(o.data.globalMap.unsignedTx.toBuffer()))throw new Error("Depositor and claimer Payout PSBTs describe different transactions; refusing to sign payout.");const a=s.txOutputs[p.ASSERT_PAYOUT_OUTPUT_INDEX];if(a===void 0)throw new Error(`Assert transaction has no output ${p.ASSERT_PAYOUT_OUTPUT_INDEX}; the Payout's implicit fee cannot be measured.`);if(o.txInputs.length!==p.DEPOSITOR_PAYOUT_INPUT_COUNT)throw new Error(`Payout transaction must have exactly ${p.DEPOSITOR_PAYOUT_INPUT_COUNT} inputs, got ${o.txInputs.length}`);const i=o.txInputs[p.PAYOUT_PEGIN_INPUT_INDEX].sequence;if(i!==t.timelockPegin)throw new Error(`Payout input ${p.PAYOUT_PEGIN_INPUT_INDEX} sequence ${i} must equal the PegIn CSV timelock ${t.timelockPegin}; refusing to sign payout.`);const u=o.txInputs[p.PAYOUT_ASSERT_INPUT_INDEX].sequence;if(u!==t.timelockAssert)throw new Error(`Payout input ${p.PAYOUT_ASSERT_INPUT_INDEX} sequence ${u} must equal the Assert CSV timelock ${t.timelockAssert}; refusing to sign payout.`);ze("Claimer",o,t.peginVaultOutputValueSats,a),ze("Depositor",n,t.peginVaultOutputValueSats,a);const l=t.peginVaultOutputValueSats+a.value,c=o.txOutputs;if(c.length!==p.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT)throw new Error(`Payout transaction has ${c.length} output(s), expected exactly ${p.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT} for a depositor-as-claimer payout.`);let d=0;for(const h of c)d+=h.value;if(d>l)throw new Error(`Payout outputs (${d} sats) exceed inputs (${l} sats); invalid transaction.`);await w.assertPayoutFeeInBand(r,{implicitFeeSats:l-d,out0Len:c[p.PAYOUT_DESTINATION_OUTPUT_INDEX].script.length,out1Len:void 0})}class ut extends Error{constructor(t,r){super("Transaction graph's challenger set does not match the vault's (local ∪ universal)"+(t.length>0?` (missing: ${t.join(", ")})`:"")+(r.length>0?` (unexpected: ${r.join(", ")})`:"")+". Refusing to sign an incomplete or padded challenger set."),this.missing=t,this.unexpected=r,this.name="ChallengerSetMismatchError"}}function ct(e){const t=w.deriveLocalChallengers({claimerBtcPubkey:e.depositorBtcPubkey,depositorBtcPubkey:e.depositorBtcPubkey,vaultProviderBtcPubkey:e.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:e.vaultKeeperBtcPubkeys}),r=e.universalChallengerBtcPubkeys.map(Ye),o=t.filter(c=>r.includes(c));if(o.length>0)throw new Error(`Cannot check the challenger set: vault keepers and universal challengers overlap (${o.join(", ")}).`);const n=e.graphChallengerPubkeys.map(Ye),s=new Set(n);if(s.size!==n.length)throw new Error("Transaction graph lists the same challenger more than once.");const a=[...t,...r],i=new Set(a),u=a.filter(c=>!s.has(c)),l=n.filter(c=>!i.has(c));if(u.length>0||l.length>0)throw new ut(u,l)}function Ye(e){return g.stripHexPrefix(e).toLowerCase()}class lt extends Error{constructor(t,r){super(`Payout transaction output ${p.PAYOUT_DESTINATION_OUTPUT_INDEX} pays ${r}, not the vault's registered payout script ${t}. Refusing to sign a payout to another destination.`),this.expectedScriptHex=t,this.actualScriptHex=r,this.name="PayoutDestinationError"}}function dt(e){let t;try{t=$.Psbt.fromBase64(e.payoutPsbtBase64)}catch(c){throw new Error("Payout PSBT cannot be parsed.",{cause:c})}const{version:r,locktime:o,outs:n}=ur(t);if(r!==p.PAYOUT_TX_VERSION||o!==p.PAYOUT_TX_LOCKTIME)throw new Error(`Payout transaction has version ${r} and locktime ${o}, expected ${p.PAYOUT_TX_VERSION} and ${p.PAYOUT_TX_LOCKTIME}.`);if(n.length!==p.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT)throw new Error(`Payout transaction has ${n.length} output(s), expected exactly ${p.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT} for a depositor-as-claimer payout.`);const s=g.stripHexPrefix(e.registeredPayoutScriptPubKey).toLowerCase();if(s.length===0)throw new Error("registeredPayoutScriptPubKey is empty; the vault's on-chain payout script is required to check the Payout destination.");const a=n[p.PAYOUT_DESTINATION_OUTPUT_INDEX].script.toString("hex").toLowerCase();if(a!==s)throw new lt(s,a);const i=n[p.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT-1];if(i.value!==p.PAYOUT_ANCHOR_DUST_SATS)throw new Error(`Payout CPFP anchor value ${i.value} sats must equal ${p.PAYOUT_ANCHOR_DUST_SATS} sats.`);const u=g.stripHexPrefix(S.deriveP2trScript(g.stripHexPrefix(e.depositorBtcPubkey).toLowerCase())),l=i.script.toString("hex").toLowerCase();if(l!==u)throw new Error(`Payout CPFP anchor pays ${l}, not the depositor's BIP-86 P2TR ${u}. Refusing to sign a payout whose fee-bump output is spendable by somebody else.`)}function ur(e){return{version:e.version,locktime:e.locktime,outs:e.txOutputs.map(t=>({script:D.Buffer.from(t.script),value:t.value}))}}class J extends Error{constructor(t){super(t),this.name="PayoutInputLeafError"}}function ht(e){const t=$.Psbt.fromBase64(e.payoutDepositorPsbtBase64),r=$.Psbt.fromBase64(e.payoutClaimerPsbtBase64),o=t.data.globalMap.unsignedTx.toBuffer(),n=r.data.globalMap.unsignedTx.toBuffer();if(!o.equals(n))throw new J("Depositor and claimer Payout PSBTs describe different transactions; the graph is inconsistent.");const s=r.data.inputs[p.PAYOUT_ASSERT_INPUT_INDEX],a=t.data.inputs[p.PAYOUT_ASSERT_INPUT_INDEX];if(!s||!a)throw new J("Payout PSBT has no Assert-connector input.");if(!s.tapLeafScript||s.tapLeafScript.length!==1)throw new J("Claimer Payout PSBT must carry exactly one leaf on the Assert-connector input.");if(a.tapLeafScript&&a.tapLeafScript.length>0)throw new J("Depositor Payout PSBT already carries an Assert-connector leaf; refusing to overwrite it.");return t.updateInput(p.PAYOUT_ASSERT_INPUT_INDEX,{tapLeafScript:s.tapLeafScript,...s.tapInternalKey?{tapInternalKey:s.tapInternalKey}:{},...s.tapMerkleRoot?{tapMerkleRoot:s.tapMerkleRoot}:{}}),t.toBase64()}const pt="00";class gt extends Error{constructor(t,r,o){super(`Transaction graph does not belong to vault ${t}: its Claim spends PegIn ${o}, which derives vault ${r}. Refusing to sign for a graph served for another vault.`),this.expectedVaultId=t,this.derivedVaultId=r,this.peginTxid=o,this.name="VaultIdBindingError"}}function cr(e){let t;try{t=$.Psbt.fromBase64(e)}catch(o){throw new Error("Claim PSBT cannot be parsed.",{cause:o})}const r=t.txInputs[p.CLAIM_PEGIN_INPUT_INDEX];if(!r)throw new Error("Claim PSBT carries no PegIn input to bind the vault to.");return ft("Claim PSBT",t.txInputs.length,r.index),Re(r.hash)}function lr(e){const t=e.ins[p.CLAIM_PEGIN_INPUT_INDEX];if(!t)throw new Error("Artifacts file's claim_tx carries no PegIn input to bind the vault to.");return ft("Artifacts file's claim_tx",e.ins.length,t.index),Re(t.hash)}function ft(e,t,r){if(t!==1||r!==w.PEGIN_DEPOSITOR_CLAIM_VOUT)throw new Error(`${e} must have exactly one input spending PegIn output ${w.PEGIN_DEPOSITOR_CLAIM_VOUT}; it has ${t} input(s) and the first spends output ${r}.`)}function Be(e){const t=Y(S.derivePeginVaultId(e.peginTxid,e.depositorEthAddress)),r=Y(e.expectedVaultId);if(t!==r)throw new gt(r,t,e.peginTxid)}function Y(e){return`0x${(e.startsWith("0x")?e.slice(2):e).toLowerCase()}`}function Re(e){return D.Buffer.from(e).reverse().toString("hex")}function ne(e,t){const r=g.stripHexPrefix(e);if(!/^(?:[0-9a-fA-F]{2})+$/.test(r))throw new Error(`${t} must be non-empty, even-length hex.`);return r.toLowerCase()}function Pt(e){const t=ne(e.servedVerifyingKeyHex,"source.verifyingKeyHex"),r=ne(e.trustedVerifyingKeyHex,"trustedVerifyingKeyHex");if(t===r)return r;throw new Error(`Vault provider served Groth16 verifying key ${t} but the trusted key for prover circuit version ${e.proverCircuitVersion} is ${r}; refusing to sign a claim whose proof would verify under a substituted key.`)}const M=3;class yt extends Error{constructor(t,r){super(`Artifacts belong to vault ${r}, not ${t}. Select the artifacts file saved for this vault.`),this.expectedVaultId=t,this.actualVaultId=r,this.name="ArtifactsVaultMismatchError"}}function dr(e){const t=gr(e,"babe_sessions"),r=[];for(const[o,n]of Object.entries(t)){const s=typeof n=="object"&&n!==null?n.decryptor_artifacts_hex:void 0;if(typeof s!="string"||s.length===0)throw new Error(`Artifacts file is missing a usable "babe_sessions": the entry for ${o} carries no "decryptor_artifacts_hex" string.`);s===pt&&r.push(o)}return{challengerPubkeys:Object.keys(t),placeholderChallengerPubkeys:r}}function vt(e){let t;try{t=JSON.parse(e)}catch(i){throw new Error("Artifacts file is not valid JSON.",{cause:i})}const r=ge(t.vault_id,"vault_id"),o=pr(ge(t.claim_tx,"claim_tx")),n=fe(t.prover_circuit_version,"prover_circuit_version"),s=t.claimable_event_block_number===void 0?0n:BigInt(fe(t.claimable_event_block_number,"claimable_event_block_number")),a=dr(t.babe_sessions);return{vaultCoreVersion:t.vault_core_version===void 0?void 0:fe(t.vault_core_version,"vault_core_version"),vaultId:r,claimTxid:o.getId(),peginTxid:lr(o),proverCircuitVersion:n,claimableEventBlockNumber:s,verifyingKeyHex:ge(t.verifying_key,"verifying_key"),babeSessionChallengerPubkeys:a.challengerPubkeys,babeSessionPlaceholderChallengerPubkeys:a.placeholderChallengerPubkeys}}async function hr(e){const t=vt(e.artifactsJson),r=Y(e.expectedVaultId),o=Y(t.vaultId);if(r!==o)throw new yt(r,o);Be({peginTxid:t.peginTxid,depositorEthAddress:e.depositorEthAddress,expectedVaultId:r});const n=e.txGraphVersion??M;if(t.vaultCoreVersion!==void 0&&t.vaultCoreVersion!==n)throw new Error(`Artifacts record vault core version ${t.vaultCoreVersion}, but verification was asked for version ${n}.`);if(t.claimableEventBlockNumber===0n)throw new Error("Artifacts carry no claimable event block number. They were assembled before the Ethereum withdrawal was initiated; assemble them again.");if(t.claimableEventBlockNumber!==e.expectedClaimableEventBlockNumber)throw new Error(`Artifacts record claimable event block ${t.claimableEventBlockNumber} but the vault's finalized VaultClaimableBy event is at block ${e.expectedClaimableEventBlockNumber}; the prover would prove the wrong block, so refusing the file.`);if(t.proverCircuitVersion!==e.expectedProverCircuitVersion)throw new Error(`Artifacts record prover circuit version ${t.proverCircuitVersion} but the vault's stamped params say ${e.expectedProverCircuitVersion}; a proof for the wrong circuit fails at start-claim, so refusing the file.`);const s=ne(t.verifyingKeyHex,'Artifacts file "verifying_key"'),a=ne(e.trustedVerifyingKeyHex,"trustedVerifyingKeyHex");if(s!==a)throw new Error(`Artifacts carry Groth16 verifying key ${s} but the trusted key for prover circuit version ${e.expectedProverCircuitVersion} is ${a}; refusing a file whose proof would verify under a substituted key.`);const[i]=t.babeSessionPlaceholderChallengerPubkeys;if(i!==void 0)throw new Error(`Artifacts carry a placeholder BaBe session for challenger ${i}; join the real sessions into the file before using it (#2598).`);return await A.verifyWatchtowerArtifacts(n,e.artifactsJson),t}function pr(e){try{return $.Transaction.fromHex(e)}catch(t){throw new Error("Artifacts file carries an unparseable claim_tx.",{cause:t})}}function ge(e,t){if(typeof e!="string"||e.length===0)throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function fe(e,t){if(typeof e!="number"||!Number.isSafeInteger(e)||e<0)throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function gr(e,t){if(e===void 0)return{};if(typeof e!="object"||e===null||Array.isArray(e))throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function bt(e,t){return`wronglyChallenged:${e}:${t}`}function mt(e){const t=[{id:"claim",kind:"claim",psbtBase64:e.claim,inputIndex:p.CLAIM_PEGIN_INPUT_INDEX},{id:"assert",kind:"assert",psbtBase64:e.assert,inputIndex:p.ASSERT_CLAIM_INPUT_INDEX},{id:"payoutClaimer",kind:"payoutClaimer",psbtBase64:e.payoutClaimer,inputIndex:p.PAYOUT_ASSERT_INPUT_INDEX},{id:"payoutDepositor",kind:"payoutDepositor",psbtBase64:e.payoutDepositor,inputIndex:p.PAYOUT_PEGIN_INPUT_INDEX}];for(const r of Object.keys(e.wronglyChallenged))e.wronglyChallenged[r].forEach((o,n)=>{t.push({id:bt(r,n),kind:"wronglyChallenged",psbtBase64:o,inputIndex:p.WRONGLY_CHALLENGED_INPUT_INDEX})});return t}const fr=oe.COMPRESSED_PUBKEY_HEX_LEN-oe.X_ONLY_PUBKEY_HEX_LEN;function H(e){const t=e.replace(/^0x/,"").toLowerCase();if(t.length===oe.COMPRESSED_PUBKEY_HEX_LEN)return t.slice(fr);if(t.length===oe.X_ONLY_PUBKEY_HEX_LEN)return t;throw new Error(`Public key must be 33-byte compressed or 32-byte x-only hex, got ${t.length/2} bytes.`)}async function We(e,t,r){const o=await e.getPublicKeyHex();if(H(o)!==H(t))throw new Error("Connected wallet does not hold the vault's depositor key. Select the account that made the deposit, then try again.");const n=await e.getAddress();if(!g.isAddressFromPublicKey(n,o,r))throw new Error(`Connected wallet reports address "${n}", which is not derived from the vault's depositor key. Select the account that made the deposit, then try again.`);return n}async function wt(e,t,r,o){const n=H(o);if(n!==r.depositorBtcPubkey)throw new Error(`Depositor key ${n} is not the vault's registered depositor key ${r.depositorBtcPubkey}; refusing to plan a claim for another key.`);try{S.assertPayoutScriptMatchesPopKey(g.ensureHexPrefix(r.registeredPayoutScriptPubKey),r.depositorBtcPubkey,o)}catch(d){throw new Error(`Registered payout script ${r.registeredPayoutScriptPubKey} failed the depositor-key derivation check: ${d instanceof Error?d.message:String(d)}. This SDK registers only P2TR of the depositor's x-only key or P2WPKH of the compressed key (the contract bounds the script's length alone, PeginLogic.sol:237-240 @ c559f5c2); refusing to sign a claim that pays it.`,{cause:d})}if(e!==M)throw new Error(`Graph version ${e} is not the delegated-claim graph version ${M}; vaults on earlier graphs have no delegated-claim path.`);if(e!==r.vaultCoreVersion)throw new Error(`Graph version ${e} does not match the vault context's vault core version ${r.vaultCoreVersion}; they are one axis and must agree.`);const[s,a,i,u,l]=await Promise.all([A.buildClaimPsbt(e,t),A.buildAssertClaimerPsbt(e,t),A.buildPayoutClaimerPsbt(e,t),A.buildWronglyChallengedPsbts(e,t),A.buildPayoutDepositorPsbt(e,t)]);Be({peginTxid:cr(s),depositorEthAddress:r.depositorEthAddress,expectedVaultId:r.vaultId}),at({claimPsbtBase64:s,assertPsbtBase64:a,payoutClaimerPsbtBase64:i});for(const d of[i,l])dt({payoutPsbtBase64:d,registeredPayoutScriptPubKey:r.registeredPayoutScriptPubKey,depositorBtcPubkey:r.depositorBtcPubkey});const c=ht({payoutDepositorPsbtBase64:l,payoutClaimerPsbtBase64:i});return await ar({payoutClaimerPsbtBase64:i,payoutDepositorPsbtBase64:c,assertPsbtBase64:a,vault:r}),ct({graphChallengerPubkeys:Object.keys(u),depositorBtcPubkey:o,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:r.universalChallengerBtcPubkeys}),{claim:s,assert:a,payoutClaimer:i,payoutDepositor:c,wronglyChallenged:u}}async function xt(e){Pt({servedVerifyingKeyHex:e.source.verifyingKeyHex,trustedVerifyingKeyHex:e.trustedVerifyingKeyHex,proverCircuitVersion:e.vault.proverCircuitVersion});const t=await wt(e.vault.txGraphVersion,e.source.txGraphJson,e.vault,e.depositorPublicKey);return{depositorPublicKey:e.depositorPublicKey,btcNetwork:e.btcNetwork,trustedVerifyingKeyHex:e.trustedVerifyingKeyHex,source:e.source,vault:e.vault,babeSessionsJson:e.babeSessionsJson,requests:mt(t)}}function ue(e,t,r){w.assertScriptPathSchnorrSignature({requestedPsbtHex:Ve(t.psbtBase64),signatureHex:r,signerXOnlyPubkeyHex:H(e.depositorPublicKey),inputIndex:t.inputIndex})}function Ve(e){return D.Buffer.from(e,"base64").toString("hex")}function Et(e){return D.Buffer.from(e,"hex").toString("base64")}class G extends Error{constructor(t){super(t),this.name="SigningPlanMismatchError"}}function Pr(e,t){if(e.length!==t.length)throw new G(`Plan has ${e.length} requests but the graph builds ${t.length}; the plan was altered after planning.`);for(let r=0;r<t.length;r++){const o=t[r],n=e[r];if(n.id!==o.id)throw new G(`Plan request at position ${r} is "${n.id}" but the graph builds "${o.id}" there; the plan was altered after planning.`);if(n.kind!==o.kind)throw new G(`Plan request "${n.id}" has kind "${n.kind}" but the graph builds "${o.kind}"; the plan was altered after planning.`);if(n.inputIndex!==o.inputIndex)throw new G(`Plan request "${n.id}" signs inputIndex ${n.inputIndex} but the graph builds ${o.inputIndex}; the plan was altered after planning.`);if(n.psbtBase64!==o.psbtBase64)throw new G(`Plan request "${n.id}" carries a psbt that differs from the one the graph builds; the plan was altered after planning.`)}}function yr(e,t){const r=new Set(e.map(a=>a.id)),o=[...r].filter(a=>!t.has(a)),n=[...t.keys()].filter(a=>!r.has(a));if(o.length===0&&n.length===0)return;const s=a=>a.map(i=>`"${i}"`).join(", ");throw new Error(`Signatures do not cover the plan: ${t.size} signatures for ${e.length} requests`+(o.length>0?`; missing ${s(o)}`:"")+(n.length>0?`; extra ${s(n)}`:"")+".")}function X(e,t){const r=e.get(t);if(r===void 0)throw new Error(`No signature for request "${t}"; the plan was not fully signed.`);return r}async function Tt(e){const{plan:t,signatures:r}=e,{txGraphVersion:o}=t.vault,n=t.source.txGraphJson,s=Pt({servedVerifyingKeyHex:t.source.verifyingKeyHex,trustedVerifyingKeyHex:t.trustedVerifyingKeyHex,proverCircuitVersion:t.vault.proverCircuitVersion}),a=await wt(o,n,t.vault,t.depositorPublicKey),i=mt(a);Pr(t.requests,i),yr(i,r);for(const c of i)ue(t,c,X(r,c.id));const u={};for(const c of Object.keys(a.wronglyChallenged))u[c]=a.wronglyChallenged[c].map((d,h)=>X(r,bt(c,h)));const l=await A.finalizeClaimTx(o,n,X(r,"claim"));return A.buildWatchtowerArtifacts({txGraphVersion:o,graphJson:n,signedClaimTxHex:l,assertClaimerSigHex:X(r,"assert"),payoutClaimerSigHex:X(r,"payoutClaimer"),wronglyChallengedSigs:u,depositorPayoutSigHex:X(r,"payoutDepositor"),verifyingKeyHex:s,claimableEventBlockNumber:t.vault.claimableEventBlockNumber,proverCircuitVersion:t.vault.proverCircuitVersion,vaultIdHex:t.vault.vaultId,babeSessionsJson:t.babeSessionsJson,expectedVaultCoreVersion:t.vault.vaultCoreVersion})}function vr(e){return typeof e.signDelegatedClaimPsbt=="function"}class _t extends Error{constructor(t,r,o,n){super(t,n),this.signatures=r,this.failedRequestId=o,this.name="DelegatedClaimSigningIncompleteError"}}const Ct={assert:"intentBound",payoutDepositor:"intentBound",payoutClaimer:"standalone",claim:"standalone",wronglyChallenged:"standalone"},br=["payoutClaimer","claim","wronglyChallenged"];async function $t(e,t,r={}){var n;if((n=r.signal)==null||n.throwIfAborted(),mr(e),H(e.depositorPublicKey)!==e.vault.depositorBtcPubkey)throw new Error(`Plan depositor key ${H(e.depositorPublicKey)} is not the vault's registered depositor key ${e.vault.depositorBtcPubkey}; the plan was not built for this vault.`);if(F.supportsDepositApproval(t)){if(!vr(t))throw new Error("Approval wallet does not implement signDelegatedClaimPsbt; the claim ceremony needs it because the device signs some claim PSBTs with no loaded intent and needs its own derivation fields on them.");const s=xr(r,e);St(s.depositTerms,e.vault);const a=wr(e),i=await We(t,e.depositorPublicKey,e.btcNetwork);return Er(e,t,i,s,a,r)}const o=await We(t,e.depositorPublicKey,e.btcNetwork);return _r(e,t,o,r.signal)}function mr(e){const t=new Set;for(const r of e.requests){if(t.has(r.id))throw new Error(`Delegated-claim plan lists request "${r.id}" more than once; its signatures could not be keyed, so nothing is signed.`);t.add(r.id)}}function wr(e){const t=e.requests.filter(n=>Ct[n.kind]==="intentBound"),r=br.flatMap(n=>e.requests.filter(s=>s.kind===n)),o=t.length+r.length;if(o!==e.requests.length)throw new Error(`Delegated-claim plan has ${e.requests.length} signing requests but only ${o} are of a kind this signer can place in the device ceremony; the plan and the signer disagree on the request kinds.`);return{intentBound:t,standalone:r}}function kt(e,t){if(t.size!==e.requests.length)throw new Error(`Delegated-claim signing ended with ${t.size} signatures for ${e.requests.length} requests; the set is incomplete and must not be treated as signed.`)}function xr(e,t){if(e.depositTerms===void 0)throw new Error("An approval wallet signs Assert and the depositor Payout only under this vault's loaded intent; pass depositTerms (rebuilt from on-chain state) so it can be approved.");if(e.vaultContext===void 0)throw new Error("An approval wallet releases a loaded intent only through the vault-root derivation; pass vaultContext so that derivation can run before and after the intent-bound signatures.");const r=g.uint8ArrayToHex(e.vaultContext.depositorBtcPubkey);if(r!==t.vault.depositorBtcPubkey)throw new Error(`vaultContext derives from depositor key ${r} but this plan's vault is registered to ${t.vault.depositorBtcPubkey}; the device would derive for another depositor.`);return{depositTerms:e.depositTerms,vaultContext:e.vaultContext}}function St(e,t){const r=n=>n.map(s=>H(s)).sort().join(",");if(r(e.vaultKeeperBtcPubkeys)!==r(t.vaultKeeperBtcPubkeys)||r(e.universalChallengerBtcPubkeys)!==r(t.universalChallengerBtcPubkeys))throw new Error("Deposit terms carry different keeper or challenger rosters than the vault context this claim signs for; the device would bind the Assert to the wrong intent.");if(e.vaultCoreVersion!==t.vaultCoreVersion)throw new Error(`Deposit terms describe vault core version ${e.vaultCoreVersion} but the vault context has version ${t.vaultCoreVersion}; the device would bind the Assert to the wrong intent.`);if(e.timelockPegin!==t.timelockPegin)throw new Error(`Deposit terms describe timelockPegin ${e.timelockPegin} but the vault context has ${t.timelockPegin}; the device would bind the Assert to the wrong intent.`);if(e.timelockAssert!==t.timelockAssert)throw new Error(`Deposit terms describe timelockAssert ${e.timelockAssert} but the vault context has ${t.timelockAssert}; the device would bind the Assert to the wrong intent.`);if(e.protocolFeeRate!==t.protocolFeeRate)throw new Error(`Deposit terms describe protocolFeeRate ${e.protocolFeeRate} but the vault context has ${t.protocolFeeRate}; the device would bind the Assert to the wrong intent.`);if(e.vaults.length===0)throw new Error("Deposit terms describe no vault group, so they cannot name the vault context's vault provider; the device would bind the Assert to the wrong intent.");const o=H(t.vaultProviderBtcPubkey);for(const n of e.vaults)if(H(n.vaultProviderBtcPubkey)!==o)throw new Error(`Deposit terms group at htlcVout ${n.htlcVout} names a different vault provider than the vault context this claim signs for; the device would bind the Assert to the wrong intent.`)}async function Er(e,t,r,o,{intentBound:n,standalone:s},a){var P;const i=Tr(e,a.resume),u=[...n,...s];let l=0;const c={phase:"clearing any loaded intent"},d=async f=>{var m;c.phase="signing",(m=a.signal)==null||m.throwIfAborted();const v=await t.signDelegatedClaimPsbt(Ve(f.psbtBase64),z.createTaprootScriptPathSignOptionsForInput(e.depositorPublicKey,f.inputIndex,r)),y=await A.extractTapScriptSig(Et(v),f.inputIndex);ue(e,f,y),i.set(f.id,y)},h=async f=>{var y;c.phase=f,(y=a.signal)==null||y.throwIfAborted(),(await st.deriveVaultRoot(t,o.vaultContext)).fill(0)};typeof t.validateDepositTerms=="function"&&await t.validateDepositTerms(o.depositTerms);try{await h("clearing any loaded intent"),c.phase="approving the deposit terms",(P=a.signal)==null||P.throwIfAborted(),await t.approveDepositTerms(o.depositTerms);for(const f of n)await d(f),l++;await h("releasing the loaded intent");for(const f of s)i.has(f.id)||await d(f),l++}catch(f){const v=u[l];if(i.size===0||v===void 0)throw f;const y=c.phase==="signing"?`stopped at "${v.id}"`:`stopped before "${v.id}" while ${c.phase}`;throw new _t(`Delegated-claim signing ${y}; ${i.size} of ${e.requests.length} signatures were collected.`,i,v.id,{cause:f})}return kt(e,i),i}function Tr(e,t){const r=new Map;if(!t)return r;for(const o of e.requests){const n=t.get(o.id);if(!(n===void 0||Ct[o.kind]==="intentBound")){try{ue(e,o,n)}catch{continue}r.set(o.id,n)}}return r}async function _r(e,t,r,o){const n=e.requests,s=await F.signPsbtsWithFallback(t,n.map(i=>Ve(i.psbtBase64)),n.map(i=>z.createTaprootScriptPathSignOptionsForInput(e.depositorPublicKey,i.inputIndex,r)),o),a=new Map;for(let i=0;i<n.length;i++){const u=await A.extractTapScriptSig(Et(s[i]),n[i].inputIndex);ue(e,n[i],u),a.set(n[i].id,u)}return kt(e,a),a}async function Cr(e){const t=await xt({depositorPublicKey:e.depositorPublicKey,btcNetwork:e.btcNetwork,source:e.source,trustedVerifyingKeyHex:e.trustedVerifyingKeyHex,vault:e.vault,babeSessionsJson:e.babeSessionsJson}),r=await $t(t,e.btcWallet,{depositTerms:e.depositTerms,vaultContext:e.vaultContext});return Tt({plan:t,signatures:r})}async function $r(e){const t=await st.deriveVaultRoot(e.btcWallet,e.vaultContext);let r;try{r=await A.expandWotsSeed(t,e.htlcVout)}finally{t.fill(0)}let o;try{o=await A.wotsKeypairFromSeed(r)}finally{r.fill(0)}return kr(o.pk_hash,e.expectedWotsPkHash),await A.validateWotsKeypairAgainstGraph(e.txGraphVersion,o.keypair,e.txGraphJson),{wotsKeypairJson:JSON.stringify(o.keypair),pkHash:o.pk_hash}}function kr(e,t){if(te(e)!==te(t))throw new Error(`Derived WOTS public-key hash ${te(e)} does not match the vault's on-chain depositorWotsPkHash ${te(t)}. The wallet, the HTLC output index, or the derivation itself is not the one this vault was created with.`)}function te(e){return`0x${(e.startsWith("0x")?e.slice(2):e).toLowerCase()}`}function Pe(e,t,r){const o=`${e} operation key (admin=${t.ethAddress})`,n=S.assertOnChainBtcPubkey(t.btcPubKey,`${e} roster key (admin=${t.ethAddress})`),s=S.assertOnChainBtcPubkey(r,o);return{adminAddress:t.ethAddress,genesisBtcPubkey:n,operationBtcPubkey:s,rotated:s!==n}}function Sr(e){const t=new Map;for(const r of e){const o=t.get(r.operationBtcPubkey);if(o)throw new Error(`Participant operation key collision: ${o} and ${r.adminAddress} both resolve to operation key ${r.operationBtcPubkey}`);t.set(r.operationBtcPubkey,r.adminAddress)}}function At(e,t,r){if(t.vaultKeepers.length!==e.vaultKeepers.length||t.universalChallengers.length!==e.universalChallengers.length)throw new Error(`Operation-key resolution returned ${t.vaultKeepers.length} keeper and ${t.universalChallengers.length} challenger keys for a roster of ${e.vaultKeepers.length} keepers and ${e.universalChallengers.length} challengers`);const o=Pe("vault provider",{ethAddress:e.vaultProviderEthAddress,btcPubKey:e.vaultProviderGenesisBtcPubkey},t.vaultProvider),n=e.vaultKeepers.map((a,i)=>Pe("vault keeper",a,t.vaultKeepers[i])),s=e.universalChallengers.map((a,i)=>Pe("universal challenger",a,t.universalChallengers[i]));return Sr([o,...n,...s]),{vaultProvider:o,vaultKeepers:n,universalChallengers:s,vaultKeeperOperationKeysSorted:n.map(a=>a.operationBtcPubkey).sort(),universalChallengerOperationKeysSorted:s.map(a=>a.operationBtcPubkey).sort(),resolvedAt:r,query:e}}async function It(e){const t=await e.operationKeyReader.getCurrentOperationKeys(e.query,e.blockNumber);return At(e.query,t,{mode:"current"})}async function Ne(e){const t=await e.operationKeyReader.getOperationKeysAtEpochs(e.query,e.epochs);return At(e.query,t,{mode:"epochs",epochs:e.epochs})}async function Bt(e){const{basic:t,protocol:r}=e.vault,{registryReader:o,vaultKeeperReader:n,universalChallengerReader:s,operationKeyReader:a}=e.readers,[i,u,l,c]=await Promise.all([n.getVaultKeepersByVersion(t.applicationEntryPoint,r.appVaultKeepersVersion),s.getUniversalChallengersByVersion(r.universalChallengersVersion),o.getVaultProviderGenesisBtcPubKey(t.vaultProvider),o.getVaultKeyEpochs(e.vaultId)]);if(i.length===0)throw new Error(`No vault keepers for version ${r.appVaultKeepersVersion}`);if(u.length===0)throw new Error(`No universal challengers for version ${r.universalChallengersVersion}`);return Ne({operationKeyReader:a,query:{vaultProviderEthAddress:t.vaultProvider,vaultProviderGenesisBtcPubkey:`0x${l}`,applicationEntryPoint:t.applicationEntryPoint,vaultKeepers:i,universalChallengers:u},epochs:c})}async function Ar(e){const{vaultId:t,readers:r}=e,o=await r.registryReader.getVaultData(t),{basic:n,protocol:s}=o;if(s.vaultCoreVersion!==M)throw new Error(`Vault ${t} is stamped vault core version ${s.vaultCoreVersion}; delegated claim requires ${M}.`);const a=S.assertOnChainBtcPubkey(n.depositorBtcPubKey,`getBtcVaultBasicInfo(${t}).depositorBtcPubKey`);if(n.status!==ce.OnChainBtcVaultStatus.REDEEMED)throw new S.VaultClaimableByNotFoundError(t,n.depositorBtcPubKey,n.createdAt,n.createdAt,`the vault's status is ${n.status}, not Redeemed (${ce.OnChainBtcVaultStatus.REDEEMED}); no scan was made`);const[i,u,l,c]=await Promise.all([Bt({vaultId:t,vault:o,readers:r}),r.registryReader.getRegistrationRecordsAtBlock(n.createdAt),r.registryReader.getVaultClaimableBy(t,n.depositorBtcPubKey,n.createdAt).catch(b=>{throw S.isVaultClaimableByNotFoundError(b)?new S.VaultClaimableByNotFoundError(t,n.depositorBtcPubKey,b.fromBlock,b.toBlock,"the vault is Redeemed but no VaultClaimableBy authorizes this depositor key in the finalized range. Either the redeem has not finalized yet (the scan stops about two epochs behind the tip), or the vault was redeemed for a vault keeper alone (redeemForAVK emits no depositor log), or the node did not serve every block scanned.",{cause:b}):b}),r.protocolParamsReader.getOffchainParamsByVersion(s.offchainParamsVersion)]),d=ce.deriveTimelockPegin(c.timelockAssert),h=S.findRegistrationRecord(u,t,n.createdAt);S.assertRegisteredPayoutScriptBounds(h);const P=S.registrationPrePeginTxHash(h);if(P.toLowerCase()!==s.prePeginTxHash.toLowerCase())throw new Error(`Registration log of vault ${t} records prePeginTxHash ${P} but the vault record says ${s.prePeginTxHash}; refusing an inconsistent node.`);if(h.vaultCoreVersion!==s.vaultCoreVersion)throw new Error(`Registration log of vault ${t} records vault core version ${h.vaultCoreVersion} but the vault record says ${s.vaultCoreVersion}; refusing an inconsistent node.`);if(h.amount!==n.amount)throw new Error(`Registration log of vault ${t} records amount ${h.amount} sats but the vault record says ${n.amount}; refusing an inconsistent node.`);if(h.depositor.toLowerCase()!==n.depositor.toLowerCase())throw new Error(`Registration log of vault ${t} records depositor ${h.depositor} but the vault record says ${n.depositor}; refusing an inconsistent node.`);if(h.vaultProvider.toLowerCase()!==n.vaultProvider.toLowerCase())throw new Error(`Registration log of vault ${t} records vaultProvider ${h.vaultProvider} but the vault record says ${n.vaultProvider}; refusing an inconsistent node.`);if(l.vaultCoreVersion!==s.vaultCoreVersion)throw new Error(`Redemption log of vault ${t} records vault core version ${l.vaultCoreVersion} but the vault record says ${s.vaultCoreVersion}; refusing an inconsistent node.`);if(l.proverCircuitVersion!==h.proverCircuitVersion)throw new Error(`Redemption log of vault ${t} records proverCircuitVersion ${l.proverCircuitVersion} but the registration log says ${h.proverCircuitVersion}; refusing an inconsistent node.`);if(h.proverCircuitVersion!==c.proverCircuitVersion)throw new Error(`Registration log of vault ${t} records proverCircuitVersion ${h.proverCircuitVersion} but the stamped offchain params say ${c.proverCircuitVersion}; refusing an inconsistent node.`);const f=S.calculateBtcTxHash(s.depositorSignedPeginTx);for(const[b,_]of[["Registration",h.peginTxHash],["Redemption",l.peginTxHash]])if(_.toLowerCase()!==f.toLowerCase())throw new Error(`${b} log of vault ${t} records peginTxHash ${_} but the vault's depositor-signed PegIn hashes to ${f}; refusing an inconsistent node.`);const v=Y(S.derivePeginVaultId(f,n.depositor));if(v!==Y(t))throw new Error(`Depositor-signed PegIn of vault ${t} derives vault id ${v} with depositor ${n.depositor}; refusing an inconsistent node.`);for(const b of["offchainParamsVersion","universalChallengersVersion","appVaultKeepersVersion"]){if(h[b]!==s[b])throw new Error(`Registration log of vault ${t} records ${b} ${h[b]} but the vault record says ${s[b]}; refusing an inconsistent node.`);if(l[b]!==s[b])throw new Error(`Redemption log of vault ${t} records ${b} ${l[b]} but the vault record says ${s[b]}; refusing an inconsistent node.`)}const y=$.Transaction.fromHex(g.stripHexPrefix(s.depositorSignedPeginTx));if(y.ins.length!==1)throw new Error(`Depositor-signed PegIn of vault ${t} has ${y.ins.length} inputs; it spends Pre-PegIn ${s.prePeginTxHash} output ${s.htlcVout} with exactly one; refusing an inconsistent node.`);const m=Re(y.ins[0].hash),I=y.ins[0].index;if(m!==g.stripHexPrefix(s.prePeginTxHash).toLowerCase()||I!==s.htlcVout)throw new Error(`Depositor-signed PegIn of vault ${t} spends ${m}:${I} but the vault record says Pre-PegIn ${s.prePeginTxHash} output ${s.htlcVout}; refusing an inconsistent node.`);const T=y.outs[p.PEGIN_VAULT_OUTPUT_INDEX];if(T===void 0)throw new Error(`Depositor-signed PegIn of vault ${t} has no output ${p.PEGIN_VAULT_OUTPUT_INDEX}; the Payout cannot spend the Vault UTXO.`);if(BigInt(T.value)!==n.amount)throw new Error(`Depositor-signed PegIn of vault ${t} pays ${T.value} sats to output ${p.PEGIN_VAULT_OUTPUT_INDEX} but the vault record says ${n.amount}; refusing an inconsistent node.`);return{context:{vaultId:t,depositorEthAddress:n.depositor,depositorBtcPubkey:a,registeredPayoutScriptPubKey:g.stripHexPrefix(h.depositorPayoutScriptPubKey),vaultProviderBtcPubkey:i.vaultProvider.operationBtcPubkey,vaultKeeperBtcPubkeys:[...i.vaultKeeperOperationKeysSorted],universalChallengerBtcPubkeys:[...i.universalChallengerOperationKeysSorted],txGraphVersion:M,proverCircuitVersion:c.proverCircuitVersion,vaultCoreVersion:s.vaultCoreVersion,claimableEventBlockNumber:l.blockNumber,peginVaultOutputValueSats:T.value,protocolFeeRate:c.feeRate,councilSize:c.securityCouncilKeys.length,timelockPegin:d,timelockAssert:Number(c.timelockAssert)},vault:o,registrationRecord:h,registrationRecords:u,participantKeys:i,offchainParams:c,depositorBtcPubKeyBytes32:n.depositorBtcPubKey,depositorWotsPkHash:s.depositorWotsPkHash,prePeginTxHash:s.prePeginTxHash,peginTxHash:f,vaultProvider:n.vaultProvider,htlcVout:s.htlcVout}}const Rt=8,Ir=6e3,Br=10*6e4,Rr=10;class Oe extends Error{constructor(t){super(t),this.name="PeginRegistrationMissingError"}}class He extends Error{constructor(t){super(t),this.name="PeginRegistrationNotFinalError"}}function Vt(e){return e instanceof Oe||e instanceof Error&&e.name==="PeginRegistrationMissingError"}function Vr(e){return e instanceof He||e instanceof Error&&e.name==="PeginRegistrationNotFinalError"}function je(e){const{currentBlock:t,createdAtBlock:r}=e,o=t-r+1n;return o<0n?0:Number(o)}async function Nr(e){const{vaultRegistryReader:t,getBlockNumber:r,vaultIds:o,required:n=Rt,pollIntervalMs:s=Ir,timeoutMs:a=Br,signal:i,onProgress:u}=e;if(o.length===0)throw new Error("waitForPeginRegistrationDepth requires at least one vault ID");const l=Date.now();let c=!1,d=0,h;for(;;){if(i!=null&&i.aborted)throw new Error(`Aborted while waiting for peg-in registration depth (${o.length} vault(s))`);if(Date.now()-l>=a)throw new He(`Peg-in registration did not reach ${n} Ethereum confirmations within ${a}ms. The registration transaction was submitted but is not yet final, so the Pre-PegIn Bitcoin transaction was never sent and no funds are at risk. Resume this deposit from the dashboard once the network settles.`+(h instanceof Error?` Last read error: ${h.message}`:""));try{const P=await r(),f=await Promise.all(o.map(y=>t.getVaultBasicInfo(y))),v=f.findIndex(y=>y.depositor===xe.zeroAddress||y.createdAt===0n);if(v!==-1){if(d+=1,!c&&d>Rr)throw new Oe(`Vault ${o[v]} is still not visible on-chain after ${d} reads — the registration does not exist.`);console.warn(`Peg-in registration for vault ${o[v]} is not visible in chain state at block ${P} — a lagging RPC backend or an Ethereum reorg. Still polling.`),u==null||u({confirmations:0,required:n})}else{c=!0,d=0,h=void 0;let y=f[0],m=je({currentBlock:P,createdAtBlock:f[0].createdAt});for(const I of f.slice(1)){const T=je({currentBlock:P,createdAtBlock:I.createdAt});T<m&&(m=T,y=I)}if(u==null||u({confirmations:m,required:n}),m>=n)return{confirmations:m,basicInfo:y}}}catch(P){if(Vt(P))throw P;console.warn(`Registration-depth read failed (retrying in ${s}ms): `+(P instanceof Error?P.message:String(P))),h=P}await new Promise((P,f)=>{const v=()=>{clearTimeout(y),f(new Error(`Aborted while waiting for peg-in registration depth (${o.length} vault(s))`))},y=setTimeout(()=>{i==null||i.removeEventListener("abort",v),P()},s);i==null||i.addEventListener("abort",v,{once:!0})})}}const Or=/^(?:[0-9a-f]{2})*$/,Hr=/^[0-9a-f]{64}$/,Dr=/^([0-9a-f]{64}):(0|[1-9][0-9]*)$/,Kr=-2147483648,Ur=2147483647,ye=4294967295,Qe=2,Je=2,se=0;class x extends Error{constructor(t){super(t),this.name="GraphFingerprintError"}}function C(e,t,r){const o=e[t];if(o===void 0)throw new x(`Graph tx ${r} is missing "${t}"`);return o}function Z(e,t){if(!Array.isArray(e))throw new x(`Graph tx ${t} is not an array`);return e}function N(e,t){if(e===null||typeof e!="object"||Array.isArray(e))throw new x(`Graph tx ${t} is not an object`);return e}function Q(e,t,r,o){if(typeof e!="number"||!Number.isSafeInteger(e)||e<r||e>o)throw new x(`Graph tx ${t} is not an integer in [${r}, ${o}]`);return e}function ve(e,t){if(typeof e!="string"||!Or.test(e))throw new x(`Graph tx ${t} is not lowercase hex without a prefix`);return D.Buffer.from(e,"hex")}function ie(e,t){if(typeof e!="string"||!Hr.test(e))throw new x(`Graph ${t} is not 32 bytes of lowercase hex`);return e}function Ze(e,t){const r=N(e,t),o=new $.Transaction;return o.version=Q(C(r,"version",t),`${t}.version`,Kr,Ur),o.locktime=Q(C(r,"lock_time",t),`${t}.lock_time`,0,ye),Z(C(r,"input",t),`${t}.input`).forEach((n,s)=>{const a=`${t}.input[${s}]`,i=N(n,a),u=C(i,"previous_output",a),l=typeof u=="string"&&Dr.exec(u);if(!l)throw new x(`Graph tx ${a}.previous_output is not "<txid>:<vout>"`);const c=Q(Number(l[2]),`${a}.previous_output vout`,0,ye);o.addInput(D.Buffer.from(l[1],"hex").reverse(),c,Q(C(i,"sequence",a),`${a}.sequence`,0,ye),ve(C(i,"script_sig",a),`${a}.script_sig`)),o.ins[s].witness=Z(C(i,"witness",a),`${a}.witness`).map((d,h)=>ve(d,`${a}.witness[${h}]`))}),Z(C(r,"output",t),`${t}.output`).forEach((n,s)=>{const a=`${t}.output[${s}]`,i=N(n,a);o.addOutput(ve(C(i,"script_pubkey",a),`${a}.script_pubkey`),Q(C(i,"value",a),`${a}.value`,0,Number.MAX_SAFE_INTEGER))}),new Uint8Array(o.toBuffer())}function L(e,t){const r=g.stripHexPrefix(e).toLowerCase();let o;try{o=$.Transaction.fromHex(r)}catch(n){throw new x(`Presign ${t} is not one transaction: ${n instanceof Error?n.message:String(n)}`)}if(o.toHex()!==r)throw new x(`Presign ${t} is not a canonical transaction encoding`);return o}function Nt(e,t){const r=e.ins[t];if(r)return{txid:D.Buffer.from(r.hash).reverse().toString("hex"),vout:r.index}}function Ot(e,t){if(!e.outs[se])throw new x(`Presign ${t}.claim_tx must have output ${se}`)}function Mr(e,t,r){if(e.ins.length!==1)throw new x(`Presign ${r}.claim_tx must have exactly one input, got ${e.ins.length}`);Ot(e,r);const o=Nt(e,0);if((o==null?void 0:o.txid)!==t||o.vout!==w.PEGIN_DEPOSITOR_CLAIM_VOUT){const n=o?`${o.txid}:${o.vout}`:"no input";throw new x(`Presign ${r}.claim_tx must spend ${t}:${w.PEGIN_DEPOSITOR_CLAIM_VOUT}, got ${n}`)}}function De(e,t,r){const o=Nt(e,0);if((o==null?void 0:o.txid)!==t||o.vout!==se){const n=o?`${o.txid}:${o.vout}`:"no input";throw new x(`Presign ${r}.assert_tx input 0 must spend ${t}:${se}, got ${n}`)}}function Ht(e){const t=L(e.peginTxHex,`${e.path}.pegin_tx`),r=L(e.claimTxHex,`${e.path}.claim_tx`),o=L(e.assertTxHex,`${e.path}.assert_tx`);return{peginTx:t,claimTx:r,assertTx:o}}function Lr(e){const t=L(e.claimTxHex,`${e.path}.claim_tx`),r=L(e.assertTxHex,`${e.path}.assert_tx`);Ot(t,e.path),De(r,t.getId(),e.path)}function Fr(e){const{peginTx:t,claimTx:r,assertTx:o}=Ht(e);Mr(r,t.getId(),e.path),De(o,r.getId(),e.path)}function Xr(e,t){const[r,...o]=e.ins;if(!r||o.length>0)throw new x(`Presign claim_tx must have exactly one input, got ${e.ins.length}`);const n=D.Buffer.from(r.hash).reverse().toString("hex");if(n!==t||r.index!==w.PEGIN_DEPOSITOR_CLAIM_VOUT)throw new x(`Presign claim_tx must spend ${t}:${w.PEGIN_DEPOSITOR_CLAIM_VOUT}, got ${n}:${r.index}`);if(e.version!==Qe)throw new x(`Presign claim_tx version must be ${Qe}, got ${e.version}`);if(r.witness.length>0)throw new x(`Presign claim_tx input must have an empty witness, got ${r.witness.length} item(s)`);if(e.outs.length!==Je)throw new x(`Presign claim_tx must have exactly ${Je} outputs, got ${e.outs.length}`)}function Dt(e){const t=[...e.challengers].sort((o,n)=>o.pubkey<n.pubkey?-1:o.pubkey>n.pubkey?1:0),r=[e.peginTx,e.claimTx,e.assertTx,e.payoutTx];return t.forEach((o,n)=>{const s=ie(o.pubkey,"challenger pubkey");if(n>0&&t[n-1].pubkey===s)throw new x(`Graph lists challenger ${s} twice`);r.push(j.hexToBytes(s),o.nopayoutTx);for(const a of o.outputLabelHashes)r.push(j.hexToBytes(ie(a,"output_label_hashes entry")))}),j.bytesToHex(j.sha256(j.concatBytes(...r)))}function qr(e){const t=g.stripHexPrefix(e.peginTxid).toLowerCase(),{peginTx:r,claimTx:o,assertTx:n}=Ht({peginTxHex:e.peginTxHex,claimTxHex:e.claimTxHex,assertTxHex:e.assertTxHex,path:"depositor_graph"});if(r.getId()!==t)throw new x(`Presign pegin_tx hashes to ${r.getId()}, expected ${t}`);Xr(o,t),De(n,o.getId(),"depositor_graph");const s=a=>new Uint8Array(a.toBuffer());return Dt({peginTx:s(r),claimTx:s(o),assertTx:s(n),payoutTx:s(L(e.payoutTxHex,"payout_tx")),challengers:e.challengers.map(a=>({pubkey:g.canonicalizeBtcPubkey(a.challenger_pubkey),nopayoutTx:s(L(a.nopayout_tx.tx_hex,"nopayout_tx")),outputLabelHashes:a.output_label_hashes.map(i=>g.stripHexPrefix(i).toLowerCase())}))})}function Kt(e){const t=o=>Ze(N(C(e,o,"graph"),o).tx,o),r=N(C(e,"challenger_subgraphs","graph"),"challenger_subgraphs");return Dt({peginTx:t("pegin_tx"),claimTx:t("claim_tx"),assertTx:t("assert_tx"),payoutTx:t("payout_tx"),challengers:Object.entries(r).map(([o,n])=>{const s=`challenger_subgraphs[${o}]`,a=N(n,s);return{pubkey:o,nopayoutTx:Ze(N(C(a,"nopayout_tx",s),`${s}.nopayout_tx`).tx,`${s}.nopayout_tx`),outputLabelHashes:Z(C(a,"output_label_hashes",s),`${s}.output_label_hashes`).map((i,u)=>ie(i,`${s}.output_label_hashes[${u}]`))}})})}function Gr(e){const t=N(C(e,"challenger_pubkeys","graph"),"challenger_pubkeys"),r=new Set;for(const o of["local","universal"])Z(C(t,o,"challenger_pubkeys"),`challenger_pubkeys.${o}`).forEach((n,s)=>{const a=ie(n,`challenger_pubkeys.${o}[${s}]`);if(r.has(a))throw new x(`Graph declares challenger ${a} more than once`);r.add(a)});return r}function zr(e,t){const r=Kt(e);if(r!==t)throw new x(`Graph fingerprint ${r} does not match the presign fingerprint ${t}`);const o=Object.keys(N(e.challenger_subgraphs,"challenger_subgraphs")),n=Gr(e);if(o.length!==n.size||o.some(s=>!n.has(s)))throw new x(`Graph challenger_subgraphs keys ${o.join(", ")} do not match challenger_pubkeys ${[...n].join(", ")}`)}const Yr=1;function Wr(e,t,r){const o=r.map(d=>g.stripHexPrefix(d).toLowerCase()),n=t.filter(d=>o.includes(d));if(n.length>0)throw new Error(`Cannot validate challenger set: vault keepers and universal challengers overlap (${n.join(", ")})`);const s=[...t,...o],a=e.map(d=>g.stripHexPrefix(d.challenger_pubkey).toLowerCase()),i=new Set(a);if(i.size!==a.length)throw new Error("Depositor graph contains duplicate challenger entries in challenger_presign_data");const u=new Set(s),l=s.filter(d=>!i.has(d)),c=a.filter(d=>!u.has(d));if(l.length>0||c.length>0)throw new Error("Depositor graph challenger set does not match expected (local ∪ universal)"+(l.length>0?` (missing: ${l.join(", ")})`:"")+(c.length>0?` (unexpected: ${c.join(", ")})`:""))}function jr(e,t){const r=e.ins[t];return g.uint8ArrayToHex(new Uint8Array(r.hash).slice().reverse())}function be(e,t,r,o,n){const s=e.ins[t];if(s.index!==0)throw new Error(`NoPayout (challenger ${n}) input ${t} expected to spend ${o} vout 0, got vout ${s.index}`);const a=r.getId(),i=jr(e,t);if(i!==a)throw new Error(`NoPayout (challenger ${n}) input ${t} does not reference ${o} (expected txid ${a}, got ${i})`)}async function Qr(e,t,r){const o=[],n=[],s=[],a=w.deriveLocalChallengers({claimerBtcPubkey:r.depositorBtcPubkey,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys});Wr(e.challenger_presign_data,a,r.universalChallengerBtcPubkeys);const i=await w.buildPayoutPsbt({vaultCoreVersion:r.vaultCoreVersion,vkClaimerPayoutScriptPubKeys:r.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:r.vpCommissionScriptPubKey,payoutTxHex:e.payout_tx.tx_hex,peginTxHex:r.peginTxHex,assertTxHex:e.assert_tx.tx_hex,timelockAssert:r.timelockAssert,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:r.universalChallengerBtcPubkeys,timelockPegin:r.timelockPegin,network:r.network,claimerBtcPubkey:r.depositorBtcPubkey,registeredPayoutScriptPubKey:r.registeredPayoutScriptPubKey,commissionBps:Yr,protocolFeeRate:r.protocolFeeRate,councilMembers:r.councilMembers,councilQuorum:r.councilQuorum});o.push(i.psbtHex),n.push(z.createTaprootScriptPathSignOptions(t,p.DEPOSITOR_SIGNED_INPUT_COUNT));const u=g.stripHexPrefix(r.depositorBtcPubkey),l=$.Transaction.fromHex(g.stripHexPrefix(e.assert_tx.tx_hex));for(const c of e.challenger_presign_data){const d=g.stripHexPrefix(c.challenger_pubkey),h=o.length,P=await Jr({challenger:c,challengerPubkey:d,claimerPubkey:u,localChallengers:a,assertTxParsed:l,ctx:r});o.push(P),n.push(z.createTaprootScriptPathSignOptions(t,p.DEPOSITOR_SIGNED_INPUT_COUNT)),s.push({challengerPubkey:d,noPayoutIdx:h})}return{psbtHexes:o,signOptions:n,challengerEntries:s}}async function Jr(e){const{challenger:t,challengerPubkey:r,claimerPubkey:o,localChallengers:n,assertTxParsed:s,ctx:a}=e;U.assertNoPayoutOutputMatchesChallenger(t.nopayout_tx.tx_hex,r,a.network);const i=$.Transaction.fromHex(g.stripHexPrefix(t.nopayout_tx.tx_hex)),u=$.Transaction.fromHex(g.stripHexPrefix(t.challenge_assert_x_tx.tx_hex)),l=$.Transaction.fromHex(g.stripHexPrefix(t.challenge_assert_y_tx.tx_hex));if(i.ins.length!==3)throw new Error(`NoPayout (challenger ${r}) must have exactly 3 inputs, got ${i.ins.length}`);be(i,0,s,"Assert",r),be(i,1,u,"ChallengeAssertX",r),be(i,2,l,"ChallengeAssertY",r);const c=[s.outs[0],u.outs[0],l.outs[0]].map(d=>({script_pubkey:g.uint8ArrayToHex(new Uint8Array(d.script)),value:d.value}));return U.buildNoPayoutPsbt({noPayoutTxHex:t.nopayout_tx.tx_hex,challengerPubkey:r,prevouts:c,connectorParams:{txGraphVersion:a.vaultCoreVersion,claimer:o,localChallengers:n,universalChallengers:a.universalChallengerBtcPubkeys,timelockAssert:a.timelockAssert,councilMembers:a.councilMembers,councilQuorum:a.councilQuorum}})}function Zr(e,t,r){w.assertPsbtUnsignedTxMatches(e[0]);const n=w.extractPayoutSignature(e[0].returnedPsbtHex,r);w.assertScriptPathSchnorrSignature({requestedPsbtHex:e[0].requestedPsbtHex,signatureHex:n,signerXOnlyPubkeyHex:r,inputIndex:0});const s={};for(const a of t){w.assertPsbtUnsignedTxMatches(e[a.noPayoutIdx]);const i=w.extractPayoutSignature(e[a.noPayoutIdx].returnedPsbtHex,r);w.assertScriptPathSchnorrSignature({requestedPsbtHex:e[a.noPayoutIdx].requestedPsbtHex,signatureHex:i,signerXOnlyPubkeyHex:r,inputIndex:0}),s[a.challengerPubkey]={nopayout_signature:i}}return{payout_signatures:{payout_signature:n},per_challenger:s}}async function Ut(e){const{depositorGraph:t,btcWallet:r,signingContext:o}=e;Fr({peginTxHex:o.peginTxHex,claimTxHex:t.claim_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex,path:"depositor_graph"});const n=await r.getPublicKeyHex(),{depositorPubkey:s}=g.validateWalletPubkey(n,g.stripHexPrefix(o.depositorBtcPubkey)),{psbtHexes:a,signOptions:i,challengerEntries:u}=await Qr(t,n,o),l=await F.signPsbtsWithFallback(r,a,i),c=a.map((d,h)=>({requestedPsbtHex:d,returnedPsbtHex:l[h]}));return Zr(c,u,s)}const eo=1e4,q=10;async function Ke(e){const{statusReader:t,vaultId:r,peginTxid:o,targetStatuses:n,timeoutMs:s,pollIntervalMs:a=eo,signal:i}=e,u=Date.now();for(;;){if(i!=null&&i.aborted)throw new Error(`Polling aborted for vault ${r.slice(0,q)}… (target: ${[...n].join(", ")})`);if(Date.now()-u>=s)throw new Error(`Polling timeout after ${s}ms for vault ${r.slice(0,q)}… (target: ${[...n].join(", ")})`);try{const l=await t.getPeginStatusByVaultId({vault_id:r},i);if(k.vaultIdKey(l.vault_id)!==k.vaultIdKey(r))throw new Error(`getPeginStatusByVaultId returned status for vault ${l.vault_id.slice(0,q)}…, requested ${r.slice(0,q)}…`);if(l.pegin_txid.toLowerCase()!==o.toLowerCase())throw new Error(`getPeginStatusByVaultId returned status for pegin ${l.pegin_txid.slice(0,8)}…, requested ${o.slice(0,8)}…`);const c=l.status;if(n.has(c)||c===k.DaemonStatus.ACTIVATED)return c;if(c===k.DaemonStatus.EXPIRED||k.VP_TERMINAL_FAILURE_STATUSES.has(c))throw new Error(`Vault ${r.slice(0,q)}… reached terminal status "${c}" while waiting for ${[...n].join(", ")}`)}catch(l){if(!(l instanceof k.JsonRpcError&&l.code===k.RpcErrorCode.PEGIN_NOT_FOUND))throw l}await new Promise((l,c)=>{const d=()=>{clearTimeout(h),c(new Error(`Polling aborted for vault ${r.slice(0,q)}… (target: ${[...n].join(", ")})`))},h=setTimeout(()=>{i==null||i.removeEventListener("abort",d),l()},a);i==null||i.addEventListener("abort",d,{once:!0})})}}const to=1200*1e3,Mt=new Set([k.DaemonStatus.PENDING_ACKS,k.DaemonStatus.PENDING_ACTIVATION,k.DaemonStatus.ACTIVATED_PENDING_BROADCAST,k.DaemonStatus.ACTIVATED]),ro=new Set([k.DaemonStatus.PENDING_DEPOSITOR_SIGNATURES,...Mt]);function oo(e){return e.map(t=>({claimerPubkeyXOnly:g.processPublicKeyToXOnly(t.claimer_pubkey),payoutTxHex:t.payout_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex}))}function O(e){return g.processPublicKeyToXOnly(e).toLowerCase()}function no(e,t){const r=(u,l,c)=>{throw new Error(`Deposit terms ${u} (${String(l)}) does not match the vault's version-locked signing context (${String(c)}); refusing to sign payouts against terms that describe a different graph.`)},o=[["protocolFeeRate",e.protocolFeeRate,t.protocolFeeRate],["vaultCoreVersion",e.vaultCoreVersion,t.vaultCoreVersion],["timelockPegin",e.timelockPegin,t.timelockPegin],["timelockAssert",e.timelockAssert,t.timelockAssert]];for(const[u,l,c]of o)l!==c&&r(u,l,c);const n=u=>u.map(O).sort(),s=(u,l)=>{const c=n(u),d=n(l);return c.length===d.length&&c.every((h,P)=>h===d[P])};s(e.vaultKeeperBtcPubkeys,t.vaultKeeperBtcPubkeys)||r("vaultKeeperBtcPubkeys",e.vaultKeeperBtcPubkeys.join(","),t.vaultKeeperBtcPubkeys.join(",")),s(e.universalChallengerBtcPubkeys,t.universalChallengerBtcPubkeys)||r("universalChallengerBtcPubkeys",e.universalChallengerBtcPubkeys.join(","),t.universalChallengerBtcPubkeys.join(","));const a=O(t.vaultProviderBtcPubkey),i=e.vaults.map(u=>O(u.vaultProviderBtcPubkey));i.includes(a)||r("vaults[].vaultProviderBtcPubkey",i.join(",")||"<no vaults>",t.vaultProviderBtcPubkey)}function so(e,t,r,o){const n=O(o),s=[O(t),...r.map(O)],a=new Set(s);if(a.size!==s.length)throw new Error("Cannot validate claimer set: signing context contains duplicate vault provider or vault keeper key");if(a.has(n))throw new Error("Cannot validate claimer set: depositor key overlaps with vault provider or vault keeper set");const i=e.map(h=>O(h.claimer_pubkey));if(new Set(i).size!==i.length)throw new Error("Presign response contains duplicate claimer entries");const u=i.filter(h=>h!==n),l=new Set(u),c=s.filter(h=>!l.has(h)),d=u.filter(h=>!a.has(h));if(c.length>0||d.length>0)throw new Error("Presign response claimer set does not match expected (vault provider ∪ vault keepers)"+(c.length>0?` (missing: ${c.join(", ")})`:"")+(d.length>0?` (unexpected: ${d.join(", ")})`:""))}function et(e,t){return{vaultCoreVersion:t.vaultCoreVersion,payoutTxHex:e.payoutTxHex,peginTxHex:t.peginTxHex,assertTxHex:e.assertTxHex,vaultProviderBtcPubkey:t.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:t.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:t.universalChallengerBtcPubkeys,depositorBtcPubkey:t.depositorBtcPubkey,timelockPegin:t.timelockPegin,timelockAssert:t.timelockAssert,registeredPayoutScriptPubKey:t.registeredPayoutScriptPubKey,claimerBtcPubkey:e.claimerPubkeyXOnly,commissionBps:t.commissionBps,protocolFeeRate:t.protocolFeeRate,councilMembers:t.councilMembers,councilQuorum:t.councilQuorum,vkClaimerPayoutScriptPubKeys:t.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:t.vpCommissionScriptPubKey}}async function io(e,t,r,o){const n=new F.PayoutManager({network:t.network,btcWallet:e}),s=r.length;o==null||o(0,s);let a;if(n.supportsBatchSigning())a=(await n.signPayoutTransactionsBatch(r.map(l=>et(l,t)))).map(l=>l.payoutSignature);else{a=[];for(let u=0;u<r.length;u++){o==null||o(u,s);const l=await n.signPayoutTransaction(et(r[u],t));a.push(l.signature)}}const i={};for(let u=0;u<r.length;u++)i[r[u].claimerPubkeyXOnly]={payout_signature:a[u]};return o==null||o(s,s),i}async function ao(e){const{statusReader:t,presignClient:r,btcWallet:o,vaultId:n,peginTxid:s,depositorPk:a,signingContext:i,depositTerms:u,timeoutMs:l=to,signal:c,onProgress:d,recordGraphFingerprint:h}=e,P=await Ke({statusReader:t,vaultId:n,peginTxid:s,targetStatuses:ro,timeoutMs:l,signal:c});if(Mt.has(P))return;c==null||c.throwIfAborted(),u!==void 0&&no(u,i);const f=F.supportsDepositApproval(o)?o:void 0;let v;if(f){if(!u)throw new Error("runDepositorPresignFlow: this wallet requires approved deposit terms but none were provided. Fresh deposits must pass PreparePeginResult.depositTerms; resume flows must rebuild them from on-chain state (the vault app's rebuildDepositTerms).");v=u}const y=await r.requestDepositorPresignTransactions({pegin_txid:s,depositor_pk:a},c);c==null||c.throwIfAborted(),y.txs.forEach((K,ee)=>{Lr({claimTxHex:K.claim_tx.tx_hex,assertTxHex:K.assert_tx.tx_hex,path:`txs[${ee}]`})});const m=qr({peginTxid:s,peginTxHex:i.peginTxHex,claimTxHex:y.depositor_graph.claim_tx.tx_hex,assertTxHex:y.depositor_graph.assert_tx.tx_hex,payoutTxHex:y.depositor_graph.payout_tx.tx_hex,challengers:y.depositor_graph.challenger_presign_data}),I=O(a);so(y.txs,i.vaultProviderBtcPubkey,i.vaultKeeperBtcPubkeys,a);const T=y.txs.filter(K=>O(K.claimer_pubkey)!==I),b=oo(T);f&&v&&(typeof f.validateDepositTerms=="function"&&await f.validateDepositTerms(v),await f.approveDepositTerms(v)),c==null||c.throwIfAborted();const _=await io(o,i,b,d);c==null||c.throwIfAborted();const B=await Ut({depositorGraph:y.depositor_graph,btcWallet:o,signingContext:{vaultCoreVersion:i.vaultCoreVersion,peginTxHex:i.peginTxHex,depositorBtcPubkey:a,vaultProviderBtcPubkey:i.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:i.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:i.universalChallengerBtcPubkeys,timelockPegin:i.timelockPegin,timelockAssert:i.timelockAssert,councilMembers:i.councilMembers,councilQuorum:i.councilQuorum,network:i.network,registeredPayoutScriptPubKey:i.registeredPayoutScriptPubKey,protocolFeeRate:i.protocolFeeRate,vkClaimerPayoutScriptPubKeys:i.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:i.vpCommissionScriptPubKey}});c==null||c.throwIfAborted(),await h(m),c==null||c.throwIfAborted();const E={..._};E[g.stripHexPrefix(a)]=B.payout_signatures,await r.submitDepositorPresignatures({pegin_txid:s,depositor_pk:a,signatures:E,depositor_claimer_presignatures:B},c)}const uo=300*1e3,co=new Set([k.DaemonStatus.PENDING_DEPOSITOR_WOTS_PK,...k.POST_WOTS_STATUSES]);async function lo(e){const{statusReader:t,wotsSubmitter:r,vaultId:o,peginTxid:n,depositorPk:s,wotsPublicKeys:a,timeoutMs:i=uo,signal:u}=e;u==null||u.throwIfAborted();const l=await Ke({statusReader:t,vaultId:o,peginTxid:n,targetStatuses:co,timeoutMs:i,signal:u});k.POST_WOTS_STATUSES.has(l)||(u==null||u.throwIfAborted(),await r.submitDepositorWotsKey({pegin_txid:n,depositor_pk:s,wots_public_keys:a},u))}function re(e){return e.registration||e.operation}function Lt(e,t,r){const o=g.canonicalizeBtcPubkey(e);return{registration:o===g.canonicalizeBtcPubkey(t),operation:o===g.canonicalizeBtcPubkey(r)}}function Ee(e,t,r){const o=me(e);return{registration:tt(o,me(t)),operation:tt(o,me(r))}}function me(e){return e.map(g.canonicalizeBtcPubkey).sort()}function tt(e,t){return e.length===t.length&&e.every((r,o)=>r===t[o])}async function ho(e){const{vaultProviderEthAddress:t,hintBtcPubkey:r,registrationBtcPubkey:o,readCurrentOperationBtcPubkey:n,context:s}=e;if(!r)return;const a=g.canonicalizeBtcPubkey(r);if(a===g.canonicalizeBtcPubkey(o))return;const i=g.canonicalizeBtcPubkey(await n());if(a!==i)throw new Error(`Vault provider BTC pubkey mismatch for ${t}: indexer hint matches neither the registration key nor the current operation key on-chain.${s?` ${s}`:""}`)}class ae extends Error{constructor(t){super(t),this.name="ApplicationEntryPointMismatchError"}}function po(e){return e instanceof ae||e instanceof Error&&e.name==="ApplicationEntryPointMismatchError"}const rt=e=>e.map(g.canonicalizeBtcPubkey).sort();async function go(e){const{vaultRegistryReader:t,vaultKeeperReader:r,universalChallengerReader:o,vaultProviderEthAddress:n,applicationEntryPoint:s,expectedVaultProviderBtcPubkey:a,expectedVaultKeeperBtcPubkeys:i,expectedUniversalChallengerBtcPubkeys:u,operationKeyReader:l,onIndexerServingOperationKeys:c,onIndexerHintsInconsistent:d,blockNumber:h}=e,[P,f,v,y]=await Promise.all([t.getVaultProviderApplication(n,h),t.getVaultProviderGenesisBtcPubKey(n,h),o.getLatestUniversalChallengersVersion(h),o.getCurrentUcKeyEpoch(h)]);if(!xe.isAddress(s,{strict:!1}))throw new ae(`The application entry point this deposit was prepared for is not a valid address: ${s}`);if(!xe.isAddressEqual(P,s))throw new ae(`Vault provider ${n} is registered to application ${P}, but this deposit was prepared for ${s}. Refusing to build: the vault keeper roster, its version, and the keeper key epoch would all resolve against a different application than the one selected.`);const[m,I]=await Promise.all([r.getCurrentVaultKeepersVersion(P,h),r.getCurrentAppKeeperKeyEpoch(P,h)]),[T,b]=await Promise.all([r.getVaultKeepersByVersion(P,m,h),o.getUniversalChallengersByVersion(v,h)]),_={vaultProvider:g.canonicalizeBtcPubkey(f),vaultKeepers:rt(T.map(R=>R.btcPubKey)),universalChallengers:rt(b.map(R=>R.btcPubKey))},B=await It({operationKeyReader:l,query:{vaultProviderEthAddress:n,vaultProviderGenesisBtcPubkey:`0x${f}`,applicationEntryPoint:P,vaultKeepers:T,universalChallengers:b},blockNumber:h}),E={vaultProvider:B.vaultProvider.operationBtcPubkey,vaultKeepers:[...B.vaultKeeperOperationKeysSorted],universalChallengers:[...B.universalChallengerOperationKeysSorted]},K=Lt(a,_.vaultProvider,E.vaultProvider),ee=Ee(i,_.vaultKeepers,E.vaultKeepers),Fe=Ee(u,_.universalChallengers,E.universalChallengers);if(!re(K))throw new Error(`Vault provider BTC pubkey indexer hint does not match BTCVaultRegistry for ${n}. Refresh and try again.`);if(!re(ee))throw new Error(`Vault keeper BTC pubkeys (v${m}) indexer set does not match ApplicationRegistry on-chain set. Refresh and try again.`);if(!re(Fe))throw new Error(`Universal challenger BTC pubkeys (v${v}) indexer set does not match ProtocolParams on-chain set. Refresh and try again.`);const Xe=[K,ee,Fe],zt=Xe.some(R=>R.registration&&!R.operation),qe=Xe.some(R=>R.operation&&!R.registration);if(zt&&qe){const R=`Indexer participant hints are internally inconsistent for vault provider ${n}: some roles match the registration keys while others match the rotated operation keys.`;throw d==null||d(R),new Error(`${R} Refresh and try again.`)}return qe&&(c==null||c(`Indexer is serving rotated operation keys for vault provider ${n}`)),{vaultProviderBtcPubkeyXOnly:E.vaultProvider,vaultKeeperBtcPubkeysSorted:E.vaultKeepers,universalChallengerBtcPubkeysSorted:E.universalChallengers,expectedAppVaultKeepersVersion:m,expectedUniversalChallengersVersion:v,appKeeperKeyEpoch:I,ucKeyEpoch:y,registrationKeys:_,participantKeys:B}}function fo(e){return/^[0-9a-fA-F]{64}$/.test(e)}function Po(e){const{amountSats:t,minDeposit:r,maxDeposit:o,btcBalance:n,estimatedFeeSats:s,depositorClaimValue:a}=e;return!(t<=0n||t<r||o&&o>0n&&t>o||s==null||a==null||t+s+a>n)}function yo(e,t,r){return e<=0n?{valid:!1,error:"Deposit amount must be greater than zero"}:e<t?{valid:!1,error:`Minimum deposit is ${g.formatSatoshisToBtc(t)} BTC`}:r&&r>0n&&e>r?{valid:!1,error:`Maximum deposit is ${g.formatSatoshisToBtc(r)} BTC`}:{valid:!0}}function vo(e){const{amount:t,effectiveRemaining:r}=e;return r===null?{valid:!0}:r===0n?{valid:!1,error:"Supply cap reached — deposits temporarily paused"}:t>r?{valid:!1,error:`Vault size exceeds remaining capacity (${g.formatSatoshisToBtc(r)} BTC)`}:{valid:!0}}function bo(e,t){if(!e||e.length===0)return{valid:!1,error:"At least one vault provider must be selected"};const r=t.map(n=>n.toLowerCase());return e.filter(n=>!r.includes(n.toLowerCase())).length>0?{valid:!1,error:"Invalid vault provider selected"}:{valid:!0}}function Ft(e,t,r){if(!e||e.length===0)return{valid:!1,error:"At least one vault amount required"};for(let o=0;o<e.length;o++){const n=e[o];if(n<=0n)return{valid:!1,error:`Vault ${o+1} amount must be positive`};if(t&&n<t)return{valid:!1,error:`Vault ${o+1} amount ${g.formatSatoshisToBtc(n)} BTC is below minimum deposit ${g.formatSatoshisToBtc(t)} BTC`};if(r&&n>r)return{valid:!1,error:`Vault ${o+1} amount ${g.formatSatoshisToBtc(n)} BTC exceeds maximum deposit ${g.formatSatoshisToBtc(r)} BTC`}}return{valid:!0}}function Xt(e){const t=g.stripHexPrefix(e);return fo(t)?{valid:!0}:{valid:!1,error:"Invalid pubkey format: must be 64 hex characters (32-byte x-only public key, no 0x prefix)"}}function mo(e){if(!e||e.length===0)throw new Error("No vault keepers available. The system requires at least one vault keeper to create a deposit.")}function wo(e){if(!e||e.length===0)throw new Error("No universal challengers available. The system requires at least one universal challenger to create a deposit.")}function xo(e){if(e.length===0)throw new Error("No spendable UTXOs available")}function Eo(e){const{vaultAmounts:t,confirmedUTXOs:r,vaultProviderBtcPubkey:o,vaultKeeperBtcPubkeys:n,universalChallengerBtcPubkeys:s,minDeposit:a,maxDeposit:i}=e,u=Ft(t,a,i);if(!u.valid)throw new Error(u.error);const l=Xt(o);if(!l.valid)throw new Error(l.error);mo(n),wo(s),xo(r)}class Ue extends Error{constructor(t){super(t),this.name="ParticipantKeyDriftError"}}function To(e){return e instanceof Ue||e instanceof Error&&e.name==="ParticipantKeyDriftError"}function ot(e,t,r){return t.length===r.length&&t.every((o,n)=>o===r[n])?null:`${e} expected [${t.join(", ")}], got [${r.join(", ")}]`}async function _o(e){const{vaultRegistryReader:t,operationKeyReader:r,vaultIds:o,expected:n}=e,s=n.query;if(o.length===0)return;const a=await t.getVaultKeyEpochsBatch(o),i=[];for(const[u,l]of a.entries()){const c=o[u];let d;try{d=await Ne({operationKeyReader:r,query:s,epochs:l})}catch(f){i.push(`vault ${c}: could not resolve participants at frozen epochs (vp=${l.vpKeyEpoch}, keeper=${l.appKeeperKeyEpoch}, uc=${l.ucKeyEpoch}): ${f.message}`);continue}d.vaultProvider.operationBtcPubkey!==n.vaultProvider.operationBtcPubkey&&i.push(`vault ${c}: vault provider key expected ${n.vaultProvider.operationBtcPubkey}, got ${d.vaultProvider.operationBtcPubkey}`);const h=ot(`vault ${c}: vault keeper keys`,n.vaultKeeperOperationKeysSorted,d.vaultKeeperOperationKeysSorted);h&&i.push(h);const P=ot(`vault ${c}: universal challenger keys`,n.universalChallengerOperationKeysSorted,d.universalChallengerOperationKeysSorted);P&&i.push(P)}if(i.length>0)throw new Ue(`Aborting BTC broadcast: participant operation keys changed during registration (${i.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class Me extends Error{constructor(t){super(t),this.name="RegisteredVaultVersionMismatchError"}}function Co(e){return e instanceof Me||e instanceof Error&&e.name==="RegisteredVaultVersionMismatchError"}async function $o(e){const{vaultRegistryReader:t,vaultIds:r,expectedOffchainParamsVersion:o,expectedAppVaultKeepersVersion:n,expectedUniversalChallengersVersion:s,expectedVaultCoreVersion:a}=e,i=await t.getProtocolInfoBatch(r),u=[];if(i.forEach((l,c)=>{const d=r[c];l.offchainParamsVersion!==o&&u.push(`vault ${d}: offchainParams expected v${o}, got v${l.offchainParamsVersion}`),l.appVaultKeepersVersion!==n&&u.push(`vault ${d}: appVaultKeepers expected v${n}, got v${l.appVaultKeepersVersion}`),l.universalChallengersVersion!==s&&u.push(`vault ${d}: universalChallengers expected v${s}, got v${l.universalChallengersVersion}`),l.vaultCoreVersion!==a&&u.push(`vault ${d}: vaultCoreVersion expected v${a} (build-time active), got v${l.vaultCoreVersion}`)}),u.length>0)throw new Me(`Aborting BTC broadcast: signer-set or offchain-params versions changed during registration (${u.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class qt extends Error{constructor(r,o){super(`Refund not yet mature (BIP68 not final): ${o.message}`);W(this,"vaultId");W(this,"cause");this.name="BIP68NotMatureError",this.vaultId=r,this.cause=o}}const ko=/^0x[0-9a-fA-F]{64}$/,So=/^(?:0x)?(?:[0-9a-fA-F]{2})+$/,Gt=/^(?:0x)?(?:[0-9a-fA-F]{64}|[0-9a-fA-F]{66})$/,Le=160,Te=2e3,_e=10n,Ce=100n;function Ao(e){if(!Number.isFinite(e)||e<=0)throw new Error(`feeRateSatsVb must be a positive finite number, got ${e}`);return BigInt(Math.ceil(e*Le))}const Io=1,Bo=/non-BIP68-final/i;function $e(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!ko.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function we(e,t){if(!Number.isInteger(e)||e<0)throw new Error(`${t} must be a non-negative integer, got ${e}`)}function Ro(e){if($e(e.hashlock,"hashlock"),!Number.isInteger(e.htlcVout)||e.htlcVout<0)throw new Error(`htlcVout must be a non-negative integer, got ${e.htlcVout}`);if(!Array.isArray(e.batch)||e.batch.length===0)throw new Error("batch must be a non-empty array of HTLC entries");if(e.htlcVout>=e.batch.length)throw new Error(`htlcVout ${e.htlcVout} is out of range for batch of size ${e.batch.length}`);for(let r=0;r<e.batch.length;r++){const o=e.batch[r];if($e(o.hashlock,`batch[${r}].hashlock`),!Number.isInteger(o.htlcVout)||o.htlcVout!==r)throw new Error(`batch[${r}].htlcVout must equal ${r} (contiguous vout-ordered vector), got ${o.htlcVout}`);if(typeof o.amount!="bigint"||o.amount<=0n)throw new Error(`batch[${r}].amount must be a positive bigint, got ${o.amount}`)}const t=e.batch[e.htlcVout];if(t.hashlock.toLowerCase()!==e.hashlock.toLowerCase())throw new Error(`batch[${e.htlcVout}].hashlock (${t.hashlock}) does not match target hashlock (${e.hashlock})`);if(t.amount!==e.amount)throw new Error(`batch[${e.htlcVout}].amount (${t.amount}) does not match target amount (${e.amount})`);if(we(e.offchainParamsVersion,"offchainParamsVersion"),we(e.appVaultKeepersVersion,"appVaultKeepersVersion"),we(e.universalChallengersVersion,"universalChallengersVersion"),jt.assertValidVaultCoreVersion(e.vaultCoreVersion,"VaultRefundData.vaultCoreVersion"),typeof e.unsignedPrePeginTxHex!="string"||e.unsignedPrePeginTxHex.length===0)throw new Error("unsignedPrePeginTxHex must be a non-empty hex string");if(!So.test(e.unsignedPrePeginTxHex))throw new Error("unsignedPrePeginTxHex must be a hex byte string (optional 0x prefix, even length)");if(!e.depositorBtcPubkey||!Gt.test(e.depositorBtcPubkey))throw new Error("depositorBtcPubkey must be 32 or 33 bytes of hex (optional 0x prefix)");if(typeof e.amount!="bigint"||e.amount<=0n)throw new Error(`amount must be a positive bigint, got ${e.amount}`)}function Vo(e){if(!e.vaultProviderPubkey||!Gt.test(e.vaultProviderPubkey))throw new Error("vaultProviderPubkey must be 32 or 33 bytes of hex");if(e.vaultKeeperPubkeys.length===0)throw new Error("vaultKeeperPubkeys must be non-empty");if(e.universalChallengerPubkeys.length===0)throw new Error("universalChallengerPubkeys must be non-empty");if(!Number.isInteger(e.timelockRefund)||e.timelockRefund<=0)throw new Error(`timelockRefund must be a positive integer, got ${e.timelockRefund}`);if(typeof e.feeRate!="bigint"||e.feeRate<=0n)throw new Error(`protocol feeRate must be a positive bigint, got ${e.feeRate}`);if(typeof e.minPeginFeeRate!="bigint"||e.minPeginFeeRate<=0n)throw new Error(`minPeginFeeRate must be a positive bigint, got ${e.minPeginFeeRate}`);if(!Number.isInteger(e.numLocalChallengers)||e.numLocalChallengers<0)throw new Error("numLocalChallengers must be a non-negative integer");if(!Number.isInteger(e.councilQuorum)||!Number.isInteger(e.councilSize)||e.councilQuorum<=0||e.councilSize<=0||e.councilQuorum>e.councilSize)throw new Error(`councilQuorum (${e.councilQuorum}) must be in [1, councilSize=${e.councilSize}]`)}async function No(e){const{vaultId:t,readVault:r,readPrePeginContext:o,feeRate:n,signPsbt:s,broadcastTx:a,signal:i}=e;i==null||i.throwIfAborted(),$e(t,"vaultId");const u=await r();Ro(u),i==null||i.throwIfAborted();const l=await o(u);if(Vo(l),i==null||i.throwIfAborted(),!Number.isFinite(n)||n<=0)throw new Error(`feeRate must be a positive number, got ${n}`);if(n>Te)throw new Error(`feeRate ${n} sat/vB exceeds refund safety cap ${Te} sat/vB; refusing to sign refund.`);const c=BigInt(Math.ceil(n*Le)),d=u.amount*_e/Ce;if(c>d)throw new Error(`Refund fee ${c} sats exceeds the per-vault safety cap of ${d} sats (${_e}/${Ce} of vault.amount=${u.amount}); refusing to sign refund.`);i==null||i.throwIfAborted();const h=g.processPublicKeyToXOnly(u.depositorBtcPubkey),P=g.stripHexPrefix(u.unsignedPrePeginTxHex),f=F.findAuthAnchorOpReturn(P);if(f!==void 0&&f.vout!==u.batch.length)throw new Error(`Auth-anchor OP_RETURN at vout ${f.vout} does not match batch size (${u.batch.length} HTLC outputs expect the anchor at vout ${u.batch.length}). Refund refused — sibling HTLC vector is incomplete.`);const v=f==null?void 0:f.hash;let y;try{y=$.Transaction.fromHex(P)}catch(E){throw new Error(`Failed to parse funded Pre-PegIn transaction hex: ${E instanceof Error?E.message:String(E)}`)}if(y.outs.length<u.batch.length)throw new Error(`Funded Pre-PegIn tx has ${y.outs.length} outputs but batch requires at least ${u.batch.length} HTLC outputs. Refund refused — funded tx shape disagrees with sibling vector.`);const{psbtHex:m}=await U.buildRefundPsbt({prePeginParams:{vaultCoreVersion:u.vaultCoreVersion,depositorPubkey:h,vaultProviderPubkey:g.stripHexPrefix(l.vaultProviderPubkey),vaultKeeperPubkeys:l.vaultKeeperPubkeys.map(g.stripHexPrefix),universalChallengerPubkeys:l.universalChallengerPubkeys.map(g.stripHexPrefix),hashlocks:u.batch.map(E=>g.stripHexPrefix(E.hashlock)),timelockRefund:l.timelockRefund,pegInAmounts:u.batch.map(E=>E.amount),feeRate:l.feeRate,minPeginFeeRate:l.minPeginFeeRate,numLocalChallengers:l.numLocalChallengers,councilQuorum:l.councilQuorum,councilSize:l.councilSize,network:l.network,authAnchorHash:v},fundedPrePeginTxHex:P,htlcVout:u.htlcVout,refundFee:c,hashlock:g.stripHexPrefix(u.hashlock)});i==null||i.throwIfAborted();const I=z.createTaprootScriptPathSignOptions(u.depositorBtcPubkey,Io),T=await s(m,I);w.assertPsbtUnsignedTxMatches({requestedPsbtHex:m,returnedPsbtHex:T});const b=0,_=w.extractPayoutSignature(T,h,b);w.assertScriptPathSchnorrSignature({requestedPsbtHex:m,signatureHex:_,signerXOnlyPubkeyHex:h,inputIndex:b});const B=U.finalizeScriptPathWithSignatures({requestedPsbtHex:m,signaturesHex:[_],signerXOnlyPubkeyHex:h});i==null||i.throwIfAborted();try{return await a(B)}catch(E){throw E instanceof Error&&Bo.test(E.message)?new qt(t,E):E}}class ke extends Error{constructor(r,o,n){super(r);W(this,"feeSats");W(this,"sweptTotalSats");this.name="ReclaimUneconomicalError",this.feeSats=o,this.sweptTotalSats=n}}const Se=2e3,Ae=25n,Ie=100n,Oo=10n;async function Ho(e,t,r){for(let o=0;o<e.length;o++){const n=Qt.calculateBtcTxHash(e[o].depositorSignedPeginTxHex),s=g.ensureHexPrefix(await A.deriveVaultId(g.stripHexPrefix(n),g.stripHexPrefix(r))).toLowerCase();if(s!==t[o].toLowerCase())throw new Error(`Reserve ${o} belongs to vault ${s}, not the requested ${t[o].toLowerCase()}. Refusing to sweep a reserve whose vault is not the one the caller asked for — the reserve funds that vault's claim transaction and cannot be replaced.`)}}async function Do(e){const{vaultIds:t,depositorEthAddress:r,depositorBtcPubkey:o,readVaults:n,feeRate:s,signPsbt:a,broadcastTx:i,signal:u}=e;if(u==null||u.throwIfAborted(),t.length===0)throw new Error("Reclaim requires at least one vault id; got none.");if(!Number.isFinite(s)||s<=0)throw new Error(`feeRate must be a positive number, got ${s}`);if(s>Se)throw new ke(`Fee rate ${s} sat/vB exceeds the reclaim safety cap of ${Se} sat/vB; refusing to sign.`,0n,0n);const l=await n();if(u==null||u.throwIfAborted(),l.length!==t.length)throw new Error(`readVaults returned ${l.length} reserves for ${t.length} vault id(s); refusing to sweep a set that does not match the request.`);await Ho(l,t,r),u==null||u.throwIfAborted();const c=g.processPublicKeyToXOnly(o),d=l.map(b=>({depositorSignedPeginTxHex:b.depositorSignedPeginTxHex,observed:b.observed,expectedValue:b.expectedClaimValue})),h=U.estimateReclaimFeeSats(s,d.length),P=d.reduce((b,_)=>b+_.expectedValue,0n),f=P*Ae/Ie;if(h>f)throw new ke(`Reclaim fee ${h} sats exceeds ${Ae}/${Ie} of the swept total (${P} sats, cap ${f} sats). The reserve is not at risk — it stays where it is until fee rates fall.`,h,P);u==null||u.throwIfAborted();const{psbtHex:v}=U.buildReclaimPsbt({depositorPubkey:c,inputs:d,feeSats:h});u==null||u.throwIfAborted();const y=z.createTaprootScriptPathSignOptions(o,d.length),m=await a(v,y);w.assertPsbtUnsignedTxMatches({requestedPsbtHex:v,returnedPsbtHex:m});const I=d.map((b,_)=>{const B=w.extractPayoutSignature(m,c,_);return w.assertScriptPathSchnorrSignature({requestedPsbtHex:v,signatureHex:B,signerXOnlyPubkeyHex:c,inputIndex:_}),B}),T=U.finalizeScriptPathWithSignatures({requestedPsbtHex:v,signaturesHex:I,signerXOnlyPubkeyHex:c});return u==null||u.throwIfAborted(),i(T)}exports.ApplicationEntryPointMismatchError=ae;exports.ArtifactsVaultMismatchError=yt;exports.AssertBindingError=V;exports.BABE_SESSION_PLACEHOLDER_DECRYPTOR_HEX=pt;exports.BIP68NotMatureError=qt;exports.ChallengerSetMismatchError=ut;exports.DELEGATED_CLAIM_TX_GRAPH_VERSION=M;exports.DelegatedClaimSigningIncompleteError=_t;exports.GraphFingerprintError=x;exports.PEGIN_ETH_CONFIRMATIONS=Rt;exports.ParticipantKeyDriftError=Ue;exports.PayoutDestinationError=lt;exports.PayoutInputLeafError=J;exports.PeginRegistrationMissingError=Oe;exports.PeginRegistrationNotFinalError=He;exports.RECLAIM_MAX_FEE_FRACTION_DENOMINATOR=Ie;exports.RECLAIM_MAX_FEE_FRACTION_NUMERATOR=Ae;exports.RECLAIM_MAX_FEE_RATE_SATS_VB=Se;exports.RECLAIM_WARN_FEE_FRACTION_NUMERATOR=Oo;exports.REFUND_MAX_FEE_FRACTION_DENOMINATOR=Ce;exports.REFUND_MAX_FEE_FRACTION_NUMERATOR=_e;exports.REFUND_MAX_FEE_RATE_SATS_VB=Te;exports.REFUND_VSIZE=Le;exports.ReclaimUneconomicalError=ke;exports.RegisteredVaultVersionMismatchError=Me;exports.SigningPlanMismatchError=G;exports.VaultIdBindingError=gt;exports.activateVault=or;exports.activateVaultAndRedeem=nr;exports.assembleWatchtowerArtifacts=Cr;exports.assembleWatchtowerArtifactsFromSignatures=Tt;exports.assertArtifactsUsableForVault=hr;exports.assertAssertBindsClaimAndPayout=at;exports.assertChallengerSetMatchesVault=ct;exports.assertClaimSpendsVault=Be;exports.assertPayoutPaysRegisteredScript=dt;exports.assertReturnedGraphMatchesFingerprint=zr;exports.assertTermsMatchVault=St;exports.assertVaultProviderHintAccepted=ho;exports.buildAndBroadcastReclaim=Do;exports.buildAndBroadcastRefund=No;exports.copyAssertConnectorLeaf=ht;exports.deriveClaimerWotsKeypair=$r;exports.estimateRefundFeeSats=Ao;exports.fingerprintReturnedGraph=Kt;exports.isApplicationEntryPointMismatchError=po;exports.isDepositAmountValid=Po;exports.isHintAccepted=re;exports.isParticipantKeyDriftError=To;exports.isPeginRegistrationMissingError=Vt;exports.isPeginRegistrationNotFinalError=Vr;exports.isRegisteredVaultVersionMismatchError=Co;exports.matchKeyHint=Lt;exports.matchKeySetHint=Ee;exports.planDelegatedClaimSigning=xt;exports.readDelegatedClaimVaultContext=Ar;exports.readStampedParticipantKeys=Bt;exports.resolveCurrentParticipantKeys=It;exports.resolveParticipantKeysAtEpochs=Ne;exports.runDepositorPresignFlow=ao;exports.signDelegatedClaimPlan=$t;exports.signDepositorGraph=Ut;exports.submitWotsPublicKey=lo;exports.summarizeWatchtowerArtifacts=vt;exports.validateDepositAmount=yo;exports.validateMultiVaultDepositInputs=Eo;exports.validateOnChainParticipantKeys=go;exports.validateProviderSelection=bo;exports.validateRemainingCapacity=vo;exports.validateVaultAmounts=Ft;exports.validateVaultProviderPubkey=Xt;exports.verifyRegisteredParticipantKeys=_o;exports.verifyRegisteredVaultVersions=$o;exports.waitForPeginRegistrationDepth=Nr;exports.waitForPeginStatus=Ke;
+//# sourceMappingURL=buildAndBroadcastReclaim-Da8rD5Z7.cjs.map